# Flog Txt Version 1
# Analyzer Version: 3.1.1
# Analyzer Build Date: Sep 16 2019 10:43:25
# Log Creation Date: 24.09.2019 04:52:36.056

Process:
	id = "1"
	image_name = "rsfd234df.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe"
	page_root = "0x4c9c5000"
	os_pid = "0x970"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\" "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0x974

	[0029.168] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1ffa38 | out: lpSystemTimeAsFileTime=0x1ffa38*(dwLowDateTime=0xf29c1d30, dwHighDateTime=0x1d57293)) 
	[0029.168] GetCurrentThreadId () returned 0x974
	[0029.168] GetCurrentProcessId () returned 0x970
	[0029.168] QueryPerformanceCounter (in: lpPerformanceCount=0x1ffa30 | out: lpPerformanceCount=0x1ffa30*=14946379460) returned 1
	[0029.181] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0029.181] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.181] GetLastError () returned 0x57
	[0029.181] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x74650000
	[0029.185] GetProcAddress (hModule=0x74650000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0029.185] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.185] GetLastError () returned 0x57
	[0029.185] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0029.186] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.186] GetLastError () returned 0x57
	[0029.186] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000
	[0029.186] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b
	[0029.186] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208
	[0029.186] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.186] GetLastError () returned 0x57
	[0029.186] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x74650000
	[0029.187] GetProcAddress (hModule=0x74650000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0029.187] GetProcessHeap () returned 0x4e0000
	[0029.187] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.187] GetLastError () returned 0x57
	[0029.187] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0029.187] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.187] GetLastError () returned 0x57
	[0029.187] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000
	[0029.187] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b
	[0029.187] GetLastError () returned 0x57
	[0029.187] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252
	[0029.188] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x364) returned 0x4f82c8
	[0029.188] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208
	[0029.188] SetLastError (dwErrCode=0x57) 
	[0029.188] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xc00) returned 0x4f8638
	[0029.189] GetStartupInfoW (in: lpStartupInfo=0x1ff960 | out: lpStartupInfo=0x1ff960*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xfa8da0, hStdOutput=0x8972a1e8, hStdError=0xfffffffe)) 
	[0029.189] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0029.189] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0029.189] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0029.189] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\" "
	[0029.189] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\" "
	[0029.189] GetLastError () returned 0x57
	[0029.189] SetLastError (dwErrCode=0x57) 
	[0029.189] GetLastError () returned 0x57
	[0029.190] SetLastError (dwErrCode=0x57) 
	[0029.190] GetACP () returned 0x4e4
	[0029.190] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x0, Size=0x220) returned 0x4f7f80
	[0029.190] IsValidCodePage (CodePage=0x4e4) returned 1
	[0029.190] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x1ff990 | out: lpCPInfo=0x1ff990) returned 1
	[0029.190] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x1ff258 | out: lpCPInfo=0x1ff258) returned 1
	[0029.190] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1ff86c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0029.190] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1ff86c, cbMultiByte=256, lpWideCharStr=0x1feff8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ췋úĀ") returned 256
	[0029.190] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ췋úĀ", cchSrc=256, lpCharType=0x1ff26c | out: lpCharType=0x1ff26c) returned 1
	[0029.190] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1ff86c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0029.190] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1ff86c, cbMultiByte=256, lpWideCharStr=0x1fefa8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿúĀ") returned 256
	[0029.190] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0029.190] GetLastError () returned 0x57
	[0029.190] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0029.190] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1
	[0029.190] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿúĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0029.190] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿúĀ", cchSrc=256, lpDestStr=0x1fed98, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0029.191] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x1ff76c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿPÊ\x96\x89¨ù\x1f", lpUsedDefaultChar=0x0) returned 256
	[0029.191] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1ff86c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0029.191] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1ff86c, cbMultiByte=256, lpWideCharStr=0x1fefc8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0029.191] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0029.191] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x1fedb8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
	[0029.191] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x1ff66c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿPÊ\x96\x89¨ù\x1f", lpUsedDefaultChar=0x0) returned 256
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x0, Size=0x80) returned 0x4f81a8
	[0029.191] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xfbc2a0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x70) returned 0x4fa240
	[0029.191] RtlInitializeSListHead (in: ListHead=0xfbbe98 | out: ListHead=0xfbbe98) 
	[0029.191] GetLastError () returned 0x0
	[0029.191] SetLastError (dwErrCode=0x0) 
	[0029.191] GetEnvironmentStringsW () returned 0x4fa2b8*
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x0, Size=0xaca) returned 0x4fad90
	[0029.191] FreeEnvironmentStringsW (penv=0x4fa2b8) returned 1
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x98) returned 0x4fb868
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x3e) returned 0x4f61d0
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x6c) returned 0x4fb908
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x6e) returned 0x4fb980
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x78) returned 0x4ef388
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x62) returned 0x4fb9f8
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x2e) returned 0x4fba68
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x48) returned 0x4fbaa0
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x28) returned 0x4fbaf0
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x1a) returned 0x4f9c10
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x4a) returned 0x4fbb20
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x72) returned 0x4ef408
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x30) returned 0x4fbb78
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x2e) returned 0x4fbbb0
	[0029.191] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x1c) returned 0x4f9c38
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xd2) returned 0x4fbbe8
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x7c) returned 0x4fbcc8
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x36) returned 0x4fbd50
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x3a) returned 0x4f6218
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x90) returned 0x4fbd90
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x24) returned 0x4fbe28
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x30) returned 0x4fbe58
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x36) returned 0x4fbe90
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x48) returned 0x4fbed0
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x52) returned 0x4fbf20
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x3c) returned 0x4f6260
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x82) returned 0x4fa2b8
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x2e) returned 0x4fbf80
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x1e) returned 0x4f9c60
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x2c) returned 0x4fa348
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x54) returned 0x4fa380
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x52) returned 0x4fa3e0
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x2a) returned 0x4fa440
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x3c) returned 0x4f62a8
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x54) returned 0x4fa478
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x24) returned 0x4fbfb8
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x30) returned 0x4fa4d8
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x8c) returned 0x4fa510
	[0029.192] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4fad90 | out: hHeap=0x4e0000) returned 1
	[0029.192] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x800) returned 0x4fa5a8
	[0029.192] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0029.192] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xfa897a) returned 0x0
	[0029.193] GetStartupInfoW (in: lpStartupInfo=0x1ff9c8 | out: lpStartupInfo=0x1ff9c8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0029.193] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x0, Size=0xc74c9b0) returned 0x23d0020
	[0031.099] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x23d0020 | out: hHeap=0x4e0000) returned 1
	[0032.087] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.087] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.088] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xa8
	[0032.089] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa8
	[0032.093] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.093] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.093] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.093] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.094] Process32First (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0032.094] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.095] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.095] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.095] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.096] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0032.096] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.096] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.096] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.097] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.097] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0032.097] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.097] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.097] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.098] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.098] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0032.098] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.099] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.099] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.099] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.099] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0032.099] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.099] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.100] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.100] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.100] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0032.100] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.100] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.100] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.101] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.101] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0032.101] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.101] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.101] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.102] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.102] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0032.102] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.102] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.102] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.103] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.103] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0032.103] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.103] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.103] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.103] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.104] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0032.104] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.104] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.104] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.104] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.104] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.105] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.105] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.105] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.105] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.105] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.106] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.106] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.106] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.106] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.106] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.107] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.107] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.107] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.107] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.107] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.108] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.108] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.108] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.108] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.108] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.109] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.109] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.109] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.109] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.109] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0032.110] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.110] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.110] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.110] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.110] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.111] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.111] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.111] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.111] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.111] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.112] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.112] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.112] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.112] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.112] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0032.113] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.113] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.113] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.113] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.113] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0032.113] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.114] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.114] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.114] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.114] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0032.114] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.115] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.115] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.115] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.115] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0032.115] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.116] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.116] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.116] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.116] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.116] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.116] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.117] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.117] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.117] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0032.117] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.117] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.117] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.118] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.118] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0032.118] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.118] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.118] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.119] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.119] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0032.119] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.119] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.119] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.120] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.120] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0032.120] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.120] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.120] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.120] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.121] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0032.121] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.121] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.121] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.121] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.121] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0032.122] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.122] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.122] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.122] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.122] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0032.123] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.123] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.123] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.123] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.123] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0032.124] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.124] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.124] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.124] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.124] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0032.125] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.125] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.125] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.125] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.125] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0032.127] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.127] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.127] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.127] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.127] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0032.128] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.128] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.128] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.128] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.128] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0032.129] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.129] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.129] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.129] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.129] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0032.130] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.130] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.130] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.130] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.130] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0032.131] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.131] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.131] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.131] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.131] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0032.132] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.132] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.132] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.132] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.132] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0032.133] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.133] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.133] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.133] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.133] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0032.135] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.135] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.135] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.135] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.135] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0032.136] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.136] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.136] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.136] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.136] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0032.137] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.137] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.137] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.137] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.137] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0032.138] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.138] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.138] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.138] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.138] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0032.139] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.139] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.139] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.139] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.139] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0032.140] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.140] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.140] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.140] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.140] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x92c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0032.140] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.141] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.141] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.141] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.141] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x950, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0032.141] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.142] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.142] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.142] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.142] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0032.142] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.143] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.143] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.143] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0032.143] Process32Next (in: hSnapshot=0xa8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x1f9708, pcPriClassBase=5171600, dwFlags=0x4ee9cc, szExeFile="???\x1f???\x1f?N?/?\x1f?\x1f")) returned 0
	[0032.151] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.151] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.151] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.151] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xac
	[0032.151] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xac
	[0032.153] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.153] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.153] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.153] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.154] Process32First (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0032.154] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.155] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.155] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.155] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.155] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0032.156] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.156] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.156] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.156] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.156] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0032.157] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.157] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.158] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.158] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.158] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0032.158] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.158] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.159] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.159] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.159] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0032.159] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.159] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.159] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.160] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.160] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0032.160] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.160] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.160] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.161] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.161] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0032.161] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.161] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.161] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.162] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.162] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0032.162] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.162] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.162] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.163] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.163] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0032.163] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.163] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.163] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.164] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.164] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0032.164] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.164] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.164] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.164] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.165] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.165] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.165] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.165] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.165] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.165] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.166] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.166] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.166] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.167] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.167] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.167] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.167] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.167] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.168] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.168] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.168] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.168] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.168] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.168] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.169] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.169] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.169] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.169] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.169] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.169] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0032.170] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.170] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.170] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.170] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.170] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.171] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.171] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.171] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.171] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.171] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.172] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.172] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.172] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.172] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.172] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0032.173] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.173] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.173] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.173] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.173] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0032.173] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.174] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.174] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.174] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.174] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0032.174] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.174] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.175] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.175] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.175] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0032.175] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.175] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.175] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.176] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.176] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.176] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.176] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.176] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.177] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.177] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0032.177] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.177] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.177] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.177] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.178] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0032.178] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.178] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.178] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.178] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.178] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0032.179] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.179] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.179] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.179] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.179] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0032.180] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.180] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.180] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.180] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.180] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0032.181] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.181] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.181] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.181] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.181] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0032.182] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.182] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.182] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.182] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.182] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0032.182] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.183] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.183] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.183] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.183] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0032.183] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.183] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.184] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.184] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.184] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0032.184] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.184] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.184] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.185] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.185] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0032.185] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.185] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.185] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.185] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.186] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0032.186] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.186] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.186] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.186] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.186] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0032.187] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.187] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.187] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.187] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.187] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0032.188] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.188] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.188] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.189] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.189] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0032.189] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.189] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.189] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.190] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.190] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0032.190] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.190] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.190] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.190] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.191] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0032.191] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.191] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.191] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.191] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.191] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0032.192] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.192] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.192] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.192] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.192] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0032.193] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.193] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.193] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.193] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.193] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0032.194] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.194] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.194] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.194] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.194] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0032.195] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.195] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.195] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.195] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.195] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0032.198] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.198] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.198] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.198] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.198] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0032.199] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.199] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.199] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.199] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.199] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x92c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0032.200] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.200] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.200] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.200] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.200] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x950, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0032.201] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.201] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.201] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.201] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.201] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0032.202] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.202] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.202] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0032.202] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0032.202] Process32Next (in: hSnapshot=0xac, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x1f9708, pcPriClassBase=5171600, dwFlags=0x4ee9cc, szExeFile="???\x1f???\x1f?N?/?\x1f?\x1f")) returned 0
	[0032.202] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.205] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0032.206] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0xb0000
	[0032.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2, flAllocationType=0x3000, flProtect=0x4) returned 0xc0000
	[0032.206] VirtualAlloc (lpAddress=0x0, dwSize=0x5, flAllocationType=0x3000, flProtect=0x4) returned 0xd0000
	[0032.206] VirtualAlloc (lpAddress=0x0, dwSize=0xd, flAllocationType=0x3000, flProtect=0x4) returned 0xe0000
	[0032.206] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0xf0000
	[0032.206] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x270000
	[0032.206] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x280000
	[0032.206] VirtualAlloc (lpAddress=0x0, dwSize=0x3c, flAllocationType=0x3000, flProtect=0x4) returned 0x290000
	[0032.206] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x2a0000
	[0032.206] VirtualAlloc (lpAddress=0x0, dwSize=0xd200, flAllocationType=0x3000, flProtect=0x4) returned 0x2b0000
	[0032.207] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1f9844, nSize=0x103 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0032.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0032.207] GetFileSize (in: hFile=0xb0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x49c53
	[0032.207] VirtualAlloc (lpAddress=0x0, dwSize=0x49c53, flAllocationType=0x3000, flProtect=0x4) returned 0x430000
	[0032.207] ReadFile (in: hFile=0xb0, lpBuffer=0x430000, nNumberOfBytesToRead=0x49c53, lpNumberOfBytesRead=0x1f9c5c, lpOverlapped=0x0 | out: lpBuffer=0x430000*, lpNumberOfBytesRead=0x1f9c5c*=0x49c53, lpOverlapped=0x0) returned 1
	[0032.212] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0032.215] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.215] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x6
	[0032.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xd0000, cbMultiByte=-1, lpWideCharStr=0x1fa1ac, cchWideChar=50 | out: lpWideCharStr="ymgyr") returned 6
	[0032.216] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.216] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.216] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xe
	[0032.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe0000, cbMultiByte=-1, lpWideCharStr=0x1fa210, cchWideChar=50 | out: lpWideCharStr="bpomwdckuqiso") returned 14
	[0032.217] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.217] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.217] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.217] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb4
	[0032.218] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb4
	[0032.220] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.220] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.220] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.220] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.221] Process32First (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0032.221] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.221] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.221] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.222] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.222] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0032.223] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.223] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.223] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.223] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.223] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0032.224] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.224] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.224] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.224] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.224] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0032.225] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.225] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.225] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.225] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.225] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0032.226] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.226] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.226] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.226] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.226] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0032.227] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.227] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.227] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.227] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.227] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0032.227] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.228] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.228] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.228] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.228] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0032.228] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.229] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.229] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.229] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.229] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0032.229] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.230] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.230] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.230] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.230] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0032.230] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.230] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.231] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.231] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.231] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.231] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.231] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.231] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.232] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.232] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.232] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.232] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.233] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.233] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.233] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.233] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.233] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.233] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.234] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.234] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.234] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.234] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.234] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.235] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.235] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.235] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.235] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.235] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.236] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.236] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0032.236] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.236] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.236] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.237] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.237] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.237] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.237] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.237] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.237] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.238] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.238] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.238] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.238] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.238] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.238] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0032.239] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.239] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.239] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.239] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.239] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0032.240] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.240] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.240] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.240] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.240] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0032.241] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.241] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.241] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.242] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.242] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0032.242] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.242] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.242] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.242] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.243] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.243] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.243] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.243] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.243] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.243] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0032.244] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.244] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.244] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.244] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.244] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0032.245] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.245] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.245] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.245] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.245] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0032.246] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.246] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.246] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.246] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.246] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0032.247] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.247] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.247] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.247] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.247] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0032.248] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.248] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.248] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.248] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.248] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0032.249] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.249] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.249] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.249] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.249] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0032.250] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.250] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.250] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.250] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.250] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0032.251] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.251] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.251] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.251] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.251] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0032.252] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.252] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.252] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.252] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.252] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0032.253] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.253] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.253] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.253] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.253] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0032.254] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.254] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.254] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.254] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.254] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0032.255] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.255] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.255] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.255] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.255] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0032.256] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.256] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.256] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.256] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.256] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0032.256] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.257] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.257] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.257] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.257] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0032.257] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.258] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.258] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.258] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.258] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0032.268] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.268] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.268] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.268] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.269] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0032.269] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.269] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.269] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.269] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.270] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0032.270] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.270] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.270] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.270] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.271] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0032.271] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.271] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.271] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.271] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.271] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0032.272] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.272] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.272] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.272] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.272] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0032.273] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.273] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.273] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.273] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.273] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0032.274] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.274] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.274] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.274] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.274] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x92c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0032.275] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.275] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.275] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.275] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.275] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x950, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0032.276] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.276] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.276] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.276] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.276] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0032.277] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.277] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.277] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.277] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0032.277] Process32Next (in: hSnapshot=0xb4, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x1f9708, pcPriClassBase=5171600, dwFlags=0x4ee9cc, szExeFile="???\x1f???\x1f?N?/?\x1f?\x1f")) returned 0
	[0032.278] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.278] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.278] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.278] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb8
	[0032.278] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb8
	[0032.280] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.280] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.280] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.280] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.281] Process32First (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0032.281] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.281] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.282] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.282] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.283] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0032.283] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.283] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.283] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.283] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.284] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0032.284] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.284] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.284] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.284] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.285] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0032.285] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.285] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.285] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.285] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.286] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0032.286] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.286] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.286] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.286] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.286] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0032.287] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.287] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.287] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.287] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.287] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0032.288] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.288] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.288] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.288] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.288] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0032.289] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.289] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.289] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.289] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.289] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0032.290] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.290] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.290] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.290] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.290] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0032.291] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.291] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.291] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.291] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.291] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.292] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.292] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.292] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.292] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.292] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.293] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.293] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.293] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.293] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.293] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.294] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.294] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.294] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.294] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.294] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.295] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.295] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.295] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.295] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.295] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.295] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.296] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.296] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.296] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.296] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0032.296] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.297] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.297] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.297] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.297] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.298] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.298] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.298] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.298] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.298] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.299] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.299] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.299] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.299] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.299] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0032.300] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.300] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.300] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.300] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.300] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0032.300] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.301] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.301] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.301] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.301] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0032.301] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.302] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.302] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.302] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.302] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0032.302] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.303] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.303] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.303] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.303] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0032.303] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.303] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.304] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.304] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.304] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0032.304] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.304] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.304] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.305] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.305] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0032.305] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.305] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.305] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.306] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.306] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0032.306] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.306] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.306] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.307] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.307] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0032.307] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.307] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.307] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.308] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.308] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0032.308] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.308] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.308] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.309] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.309] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0032.309] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.309] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.309] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.310] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.310] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0032.310] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.310] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.310] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.310] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.311] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0032.311] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.311] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.311] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.311] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.311] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0032.312] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.312] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.312] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.312] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.312] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0032.313] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.313] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.313] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.314] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.314] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0032.314] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.314] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.314] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.315] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.315] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0032.315] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.315] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.315] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.315] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.316] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0032.316] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.316] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.316] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.316] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.316] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0032.317] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.317] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.317] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.317] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.317] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0032.318] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.318] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.318] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.318] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.318] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0032.319] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.319] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.319] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.319] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.319] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0032.320] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.320] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.320] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.320] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.320] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0032.321] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.321] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.321] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.321] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.321] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0032.322] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.322] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.322] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.322] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.322] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0032.323] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.323] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.323] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.323] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.323] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0032.324] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.324] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.324] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.324] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.324] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0032.325] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.325] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.325] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.325] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.325] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x92c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0032.326] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.326] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.326] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.326] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.326] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x950, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0032.327] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.327] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.327] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.327] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0032.327] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0032.328] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.328] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.328] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.328] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0032.328] Process32Next (in: hSnapshot=0xb8, lppe=0x1f9ab4 | out: lppe=0x1f9ab4*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x1f9708, pcPriClassBase=5171600, dwFlags=0x4ee9cc, szExeFile="???\x1f???\x1f?N?/?\x1f?\x1f")) returned 0
	[0032.329] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0032.329] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0032.329] VirtualAlloc (lpAddress=0x0, dwSize=0x16, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0032.329] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0032.330] Sleep (dwMilliseconds=0x1388) 
	[0037.337] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.337] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1f9d14, nSize=0x103 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0037.338] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0037.338] VirtualAlloc (lpAddress=0x0, dwSize=0x25, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0037.338] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x2f0000
	[0037.339] VirtualAlloc (lpAddress=0x0, dwSize=0x410, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0037.339] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.340] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\" "
	[0037.340] CreateProcessW (in: lpApplicationName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe", lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x1f9bb0*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1f9c48 | out: lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\" ", lpProcessInformation=0x1f9c48*(hProcess=0xc0, hThread=0xbc, dwProcessId=0xa08, dwThreadId=0xa0c)) returned 1
	[0037.353] GetThreadContext (in: hThread=0xbc, lpContext=0x1f98e4 | out: lpContext=0x1f98e4*(ContextFlags=0x10007, Dr0=0x7715fa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x1f9c6c, FloatSave.ErrorSelector=0x1f9aa4, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x58, [37]=0x99, [38]=0x1f, [39]=0x0, [40]=0x90, [41]=0xe9, [42]=0x4e, [43]=0x0, [44]=0xcc, [45]=0xe9, [46]=0x4e, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0x23, [51]=0x77, [52]=0x70, [53]=0x99, [54]=0x1f, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0x15, [59]=0x77, [60]=0x80, [61]=0x9c, [62]=0x1f, [63]=0x0, [64]=0xbc, [65]=0xe9, [66]=0x4e, [67]=0x0, [68]=0x2c, [69]=0x4b, [70]=0x2f, [71]=0x0, [72]=0xa4, [73]=0x9a, [74]=0x1f, [75]=0x0, [76]=0x4, [77]=0x9c, [78]=0x1f, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xfa8432, Ebp=0x0, Eip=0x771401c4, SegCs=0x23, EFlags=0x202, Esp=0x2ef8f4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x2d, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0x14, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x96, [39]=0x75, [40]=0x20, [41]=0x9c, [42]=0x1f, [43]=0x0, [44]=0x8, [45]=0x9a, [46]=0x1f, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x50, [53]=0x9c, [54]=0x1f, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0x15, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x1f, [67]=0x0, [68]=0x3c, [69]=0x9c, [70]=0x1f, [71]=0x0, [72]=0x24, [73]=0x9a, [74]=0x1f, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x6c, [81]=0x9c, [82]=0x1f, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0x15, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0xa0, [93]=0x9a, [94]=0x1f, [95]=0x0, [96]=0xa4, [97]=0x3d, [98]=0x3d, [99]=0x77, [100]=0x54, [101]=0x9a, [102]=0x1f, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0x15, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x3c, [113]=0x9c, [114]=0x1f, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0x15, [119]=0x77, [120]=0xa4, [121]=0x9a, [122]=0x1f, [123]=0x0, [124]=0x98, [125]=0x9a, [126]=0x1f, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x84, [145]=0x99, [146]=0x1f, [147]=0x0, [148]=0x3c, [149]=0x9c, [150]=0x1f, [151]=0x0, [152]=0xc8, [153]=0x9b, [154]=0x1f, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0x1a, [159]=0x77, [160]=0xe8, [161]=0x1a, [162]=0x37, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0x16, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x6c, [181]=0x9c, [182]=0x1f, [183]=0x0, [184]=0xd8, [185]=0x9b, [186]=0x1f, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0x16, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0x15, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0x16, [199]=0x77, [200]=0x68, [201]=0x3c, [202]=0x3d, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0x15, [215]=0x77, [216]=0x20, [217]=0x9c, [218]=0x1f, [219]=0x0, [220]=0x50, [221]=0x9c, [222]=0x1f, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x9a, [230]=0x1f, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x4, [241]=0x9c, [242]=0x1f, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0x6c, [249]=0x9c, [250]=0x1f, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0xa4, [257]=0x9a, [258]=0x1f, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x90, [265]=0xe9, [266]=0x4e, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0x14, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x97, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x97, [295]=0x75, [296]=0x51, [297]=0xd2, [298]=0x97, [299]=0x87, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x2d, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0x14, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x96, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0x44, [365]=0x9b, [366]=0x1f, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x30, [373]=0x9b, [374]=0x1f, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x2d, [387]=0x0, [388]=0x50, [389]=0x9b, [390]=0x1f, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x96, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x2f, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x80, [417]=0x9b, [418]=0x1f, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x2d, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xf5, [443]=0x74, [444]=0x4, [445]=0x0, [446]=0x2d, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x2d, [463]=0x0, [464]=0xf8, [465]=0x9b, [466]=0x1f, [467]=0x0, [468]=0xac, [469]=0x9b, [470]=0x1f, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x2d, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0xf8, [481]=0x9b, [482]=0x1f, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xf5, [487]=0x74, [488]=0x51, [489]=0x6d, [490]=0xf5, [491]=0x74, [492]=0xd2, [493]=0x12, [494]=0xd, [495]=0x85, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x2d, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0037.354] ReadProcessMemory (in: hProcess=0xc0, lpBaseAddress=0x7efde008, lpBuffer=0x1f9c44, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x1f9c44*, lpNumberOfBytesRead=0x0) returned 1
	[0037.357] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.362] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.362] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x1f9744 | out: Wow64Process=0x1f9744) returned 1
	[0037.365] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.365] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0037.366] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0037.366] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0xa80000
	[0037.366] ReadFile (in: hFile=0xc8, lpBuffer=0xa80000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x1f9780, lpOverlapped=0x0 | out: lpBuffer=0xa80000*, lpNumberOfBytesRead=0x1f9780*=0x13b740, lpOverlapped=0x0) returned 1
	[0037.401] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xd40000
	[0037.416] CloseHandle (hObject=0xc8) returned 1
	[0037.416] VirtualFree (lpAddress=0xa80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.421] VirtualFree (lpAddress=0xd40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.427] NtCreateSection (in: SectionHandle=0x1f98a8, DesiredAccess=0xe, ObjectAttributes=0x0, MaximumSize=0x1f9bf8, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x1f98a8*=0xc8) returned 0x0
	[0037.429] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.433] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.433] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x1f9718 | out: Wow64Process=0x1f9718) returned 1
	[0037.436] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.436] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0037.436] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0037.436] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0xa80000
	[0037.436] ReadFile (in: hFile=0xc4, lpBuffer=0xa80000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x1f9754, lpOverlapped=0x0 | out: lpBuffer=0xa80000*, lpNumberOfBytesRead=0x1f9754*=0x13b740, lpOverlapped=0x0) returned 1
	[0037.455] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xd40000
	[0037.476] CloseHandle (hObject=0xc4) returned 1
	[0037.493] VirtualFree (lpAddress=0xa80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.498] VirtualFree (lpAddress=0xd40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.504] NtMapViewOfSection (in: SectionHandle=0xc8, ProcessHandle=0xc0, BaseAddress=0x1f989c*=0x400000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x1f9894*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x1f989c*=0x400000, SectionOffset=0x0, ViewSize=0x1f9894*=0x12000) returned 0x0
	[0037.506] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.510] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.510] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x1f9718 | out: Wow64Process=0x1f9718) returned 1
	[0037.513] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.513] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0037.514] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0037.514] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0xa80000
	[0037.514] ReadFile (in: hFile=0xc4, lpBuffer=0xa80000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x1f9754, lpOverlapped=0x0 | out: lpBuffer=0xa80000*, lpNumberOfBytesRead=0x1f9754*=0x13b740, lpOverlapped=0x0) returned 1
	[0037.528] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xd40000
	[0037.544] CloseHandle (hObject=0xc4) returned 1
	[0037.544] VirtualFree (lpAddress=0xa80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.549] VirtualFree (lpAddress=0xd40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.555] NtMapViewOfSection (in: SectionHandle=0xc8, ProcessHandle=0xffffffffffffffff, BaseAddress=0x1f989c*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x1f9894*=0x12000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x1f989c*=0x300000, SectionOffset=0x0, ViewSize=0x1f9894*=0x12000) returned 0x0
	[0037.558] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.561] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.562] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x1f9758 | out: Wow64Process=0x1f9758) returned 1
	[0037.564] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.565] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0037.565] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0037.565] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0xa80000
	[0037.565] ReadFile (in: hFile=0xc4, lpBuffer=0xa80000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x1f9794, lpOverlapped=0x0 | out: lpBuffer=0xa80000*, lpNumberOfBytesRead=0x1f9794*=0x13b740, lpOverlapped=0x0) returned 1
	[0037.579] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xd40000
	[0037.595] CloseHandle (hObject=0xc4) returned 1
	[0037.595] VirtualFree (lpAddress=0xa80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.600] VirtualFree (lpAddress=0xd40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.606] NtWriteVirtualMemory (in: ProcessHandle=0xc0, BaseAddress=0x7efde008, Buffer=0x1f9c5c*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x1f98ac | out: Buffer=0x1f9c5c*, NumberOfBytesWritten=0x1f98ac*=0x4) returned 0x0
	[0037.606] SetThreadContext (hThread=0xbc, lpContext=0x1f98e4*(ContextFlags=0x10007, Dr0=0x7715fa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x1f9c6c, FloatSave.ErrorSelector=0x1f9aa4, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x58, [37]=0x99, [38]=0x1f, [39]=0x0, [40]=0x90, [41]=0xe9, [42]=0x4e, [43]=0x0, [44]=0xcc, [45]=0xe9, [46]=0x4e, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0x23, [51]=0x77, [52]=0x70, [53]=0x99, [54]=0x1f, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0x15, [59]=0x77, [60]=0x80, [61]=0x9c, [62]=0x1f, [63]=0x0, [64]=0xbc, [65]=0xe9, [66]=0x4e, [67]=0x0, [68]=0x2c, [69]=0x4b, [70]=0x2f, [71]=0x0, [72]=0xa4, [73]=0x9a, [74]=0x1f, [75]=0x0, [76]=0x4, [77]=0x9c, [78]=0x1f, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x402518, Ebp=0x0, Eip=0x771401c4, SegCs=0x23, EFlags=0x202, Esp=0x2ef8f4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x2d, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0x14, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x96, [39]=0x75, [40]=0x20, [41]=0x9c, [42]=0x1f, [43]=0x0, [44]=0x8, [45]=0x9a, [46]=0x1f, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x50, [53]=0x9c, [54]=0x1f, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0x15, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x1f, [67]=0x0, [68]=0x3c, [69]=0x9c, [70]=0x1f, [71]=0x0, [72]=0x24, [73]=0x9a, [74]=0x1f, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x6c, [81]=0x9c, [82]=0x1f, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0x15, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0xa0, [93]=0x9a, [94]=0x1f, [95]=0x0, [96]=0xa4, [97]=0x3d, [98]=0x3d, [99]=0x77, [100]=0x54, [101]=0x9a, [102]=0x1f, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0x15, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x3c, [113]=0x9c, [114]=0x1f, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0x15, [119]=0x77, [120]=0xa4, [121]=0x9a, [122]=0x1f, [123]=0x0, [124]=0x98, [125]=0x9a, [126]=0x1f, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x84, [145]=0x99, [146]=0x1f, [147]=0x0, [148]=0x3c, [149]=0x9c, [150]=0x1f, [151]=0x0, [152]=0xc8, [153]=0x9b, [154]=0x1f, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0x1a, [159]=0x77, [160]=0xe8, [161]=0x1a, [162]=0x37, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0x16, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x6c, [181]=0x9c, [182]=0x1f, [183]=0x0, [184]=0xd8, [185]=0x9b, [186]=0x1f, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0x16, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0x15, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0x16, [199]=0x77, [200]=0x68, [201]=0x3c, [202]=0x3d, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0x15, [215]=0x77, [216]=0x20, [217]=0x9c, [218]=0x1f, [219]=0x0, [220]=0x50, [221]=0x9c, [222]=0x1f, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x9a, [230]=0x1f, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x4, [241]=0x9c, [242]=0x1f, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0x6c, [249]=0x9c, [250]=0x1f, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0xa4, [257]=0x9a, [258]=0x1f, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x90, [265]=0xe9, [266]=0x4e, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0x14, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x97, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x97, [295]=0x75, [296]=0x51, [297]=0xd2, [298]=0x97, [299]=0x87, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x2d, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0x14, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x96, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0x44, [365]=0x9b, [366]=0x1f, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x30, [373]=0x9b, [374]=0x1f, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x2d, [387]=0x0, [388]=0x50, [389]=0x9b, [390]=0x1f, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x96, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x2f, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x80, [417]=0x9b, [418]=0x1f, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x2d, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xf5, [443]=0x74, [444]=0x4, [445]=0x0, [446]=0x2d, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x2d, [463]=0x0, [464]=0xf8, [465]=0x9b, [466]=0x1f, [467]=0x0, [468]=0xac, [469]=0x9b, [470]=0x1f, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x2d, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0xf8, [481]=0x9b, [482]=0x1f, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xf5, [487]=0x74, [488]=0x51, [489]=0x6d, [490]=0xf5, [491]=0x74, [492]=0xd2, [493]=0x12, [494]=0xd, [495]=0x85, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x2d, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0037.609] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.612] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.612] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x1f9780 | out: Wow64Process=0x1f9780) returned 1
	[0037.615] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.615] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0037.615] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0037.615] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0xa80000
	[0037.615] ReadFile (in: hFile=0xc4, lpBuffer=0xa80000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x1f97bc, lpOverlapped=0x0 | out: lpBuffer=0xa80000*, lpNumberOfBytesRead=0x1f97bc*=0x13b740, lpOverlapped=0x0) returned 1
	[0037.630] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xd40000
	[0037.645] CloseHandle (hObject=0xc4) returned 1
	[0037.645] VirtualFree (lpAddress=0xa80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.651] VirtualFree (lpAddress=0xd40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.656] NtResumeThread (in: ThreadHandle=0xbc, SuspendCount=0x1f98bc | out: SuspendCount=0x1f98bc*=0x1) returned 0x0
	[0037.692] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0037.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x2d0000
	[0037.692] CallWindowProcW (lpPrevWndFunc=0x2d0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0037.693] VirtualProtectEx (in: hProcess=0xc0, lpAddress=0x0, dwSize=0x12000, flNewProtect=0x1, lpflOldProtect=0x1f9bf4 | out: lpflOldProtect=0x1f9bf4*=0xc771) returned 0
	[0037.693] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.693] CloseHandle (hObject=0xc0) returned 1
	[0037.693] CloseHandle (hObject=0xbc) returned 1
	[0037.694] CloseHandle (hObject=0xc8) returned 1
	[0037.697] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.700] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.700] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x1f9788 | out: Wow64Process=0x1f9788) returned 1
	[0037.703] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0037.703] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0037.703] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0037.703] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0xa80000
	[0037.703] ReadFile (in: hFile=0xc8, lpBuffer=0xa80000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x1f97c4, lpOverlapped=0x0 | out: lpBuffer=0xa80000*, lpNumberOfBytesRead=0x1f97c4*=0x13b740, lpOverlapped=0x0) returned 1
	[0037.761] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xd40000
	[0037.776] CloseHandle (hObject=0xc8) returned 1
	[0037.776] VirtualFree (lpAddress=0xa80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.781] VirtualFree (lpAddress=0xd40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0037.787] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x300000) returned 0x0
	[0037.787] ExitProcess (uExitCode=0x0) 
	[0037.789] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4f82c8 | out: hHeap=0x4e0000) returned 1

Thread:
	id = 2
	os_tid = 0x980


Process:
	id = "2"
	image_name = "rsfd234df.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe"
	page_root = "0x12252000"
	os_pid = "0xa08"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x970"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\" "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 3
	os_tid = 0xa0c

	[0038.644] GetProcessHeap () returned 0x440000
	[0038.644] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x30) returned 0x4516c0
	[0038.644] GetProcessHeap () returned 0x440000
	[0038.644] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x3550) returned 0x455140
	[0038.652] GetProcessHeap () returned 0x440000
	[0038.652] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x204) returned 0x458698
	[0038.652] GetProcessHeap () returned 0x440000
	[0038.652] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x451470
	[0038.652] GetTickCount () returned 0x1145265
	[0038.652] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x2ef6f8 | out: lpWSAData=0x2ef6f8) returned 0
	[0038.661] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x2ef6d8, cchData=32 | out: lpLCData="\x03") returned 16
	[0038.662] GetProcessHeap () returned 0x440000
	[0038.662] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1c) returned 0x453e28
	[0038.662] GetProcessHeap () returned 0x440000
	[0038.662] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1c) returned 0x45cba0
	[0038.663] GetVersion () returned 0x1db10106
	[0038.663] GetCurrentProcess () returned 0xffffffff
	[0038.663] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x2ef64c | out: TokenHandle=0x2ef64c*=0xb4) returned 1
	[0038.663] GetTokenInformation (in: TokenHandle=0xb4, TokenInformationClass=0x14, TokenInformation=0x2ef644, TokenInformationLength=0x4, ReturnLength=0x2ef648 | out: TokenInformation=0x2ef644, ReturnLength=0x2ef648) returned 1
	[0038.663] CloseHandle (hObject=0xb4) returned 1
	[0038.663] GetProcessHeap () returned 0x440000
	[0038.663] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x45cbf0
	[0038.663] GetProcessHeap () returned 0x440000
	[0038.663] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x45cc18
	[0038.663] GetProcessHeap () returned 0x440000
	[0038.663] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x45cc40
	[0038.663] GetProcessHeap () returned 0x440000
	[0038.663] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x45d388
	[0038.663] GetProcessHeap () returned 0x440000
	[0038.663] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d388 | out: hHeap=0x440000) returned 1
	[0038.663] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x45cc18, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0038.663] GetProcessHeap () returned 0x440000
	[0038.663] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cc40 | out: hHeap=0x440000) returned 1
	[0038.663] GetProcessHeap () returned 0x440000
	[0038.663] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cbf0 | out: hHeap=0x440000) returned 1
	[0038.663] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ef5ec, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ef5ec*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0038.664] GetProcessHeap () returned 0x440000
	[0038.664] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cc18 | out: hHeap=0x440000) returned 1
	[0038.664] GetProcessHeap () returned 0x440000
	[0038.664] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d388
	[0038.664] GetProcessHeap () returned 0x440000
	[0038.664] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d3e8
	[0038.664] GetProcessHeap () returned 0x440000
	[0038.664] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d3e8, Size=0x72) returned 0x44f530
	[0038.664] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0038.664] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0xb4
	[0038.664] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x0) returned 0x0
	[0038.664] GetProcessHeap () returned 0x440000
	[0038.664] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d388 | out: hHeap=0x440000) returned 1
	[0038.664] GetProcessHeap () returned 0x440000
	[0038.664] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44f530 | out: hHeap=0x440000) returned 1
	[0038.664] GetProcessHeap () returned 0x440000
	[0038.664] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x45cc18
	[0038.665] GetProcessHeap () returned 0x440000
	[0038.665] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x45cbf0
	[0038.665] GetProcessHeap () returned 0x440000
	[0038.665] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x45cc40
	[0038.665] GetProcessHeap () returned 0x440000
	[0038.665] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x45e3d0
	[0038.665] GetProcessHeap () returned 0x440000
	[0038.665] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e3d0 | out: hHeap=0x440000) returned 1
	[0038.665] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x45cbf0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0038.665] GetProcessHeap () returned 0x440000
	[0038.665] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cc40 | out: hHeap=0x440000) returned 1
	[0038.665] GetProcessHeap () returned 0x440000
	[0038.665] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cc18 | out: hHeap=0x440000) returned 1
	[0038.665] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ef5d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ef5d4*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0038.665] GetProcessHeap () returned 0x440000
	[0038.665] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cbf0 | out: hHeap=0x440000) returned 1
	[0038.665] GetProcessHeap () returned 0x440000
	[0038.665] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d3e8
	[0038.665] GetProcessHeap () returned 0x440000
	[0038.665] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d430
	[0038.665] GetProcessHeap () returned 0x440000
	[0038.665] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d430, Size=0x72) returned 0x44f530
	[0038.665] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x0
	[0038.665] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0xb8
	[0038.665] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x0) returned 0x0
	[0038.665] GetProcessHeap () returned 0x440000
	[0038.665] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d3e8 | out: hHeap=0x440000) returned 1
	[0038.665] GetProcessHeap () returned 0x440000
	[0038.665] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44f530 | out: hHeap=0x440000) returned 1
	[0038.665] ReleaseMutex (hMutex=0xb8) returned 1
	[0038.666] CloseHandle (hObject=0xb8) returned 1
	[0038.666] GetProcessHeap () returned 0x440000
	[0038.666] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x30) returned 0x45d388
	[0038.666] GetProcessHeap () returned 0x440000
	[0038.666] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20a) returned 0x45e3d0
	[0038.666] GetVersion () returned 0x1db10106
	[0038.666] GetProcessHeap () returned 0x440000
	[0038.666] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x50) returned 0x45e5e8
	[0038.666] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76c20000
	[0038.666] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0038.666] Wow64DisableWow64FsRedirection (in: OldValue=0x2ef628 | out: OldValue=0x2ef628*=0x0) returned 1
	[0038.666] GetProcessHeap () returned 0x440000
	[0038.666] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e5e8 | out: hHeap=0x440000) returned 1
	[0038.666] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x74d40000
	[0038.666] GetProcAddress (hModule=0x74d40000, lpProcName="CreateProcessWithTokenW") returned 0x74d8531f
	[0038.666] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45e3d0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0038.666] GetShellWindow () returned 0x100f2
	[0038.667] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x2ef634 | out: lpdwProcessId=0x2ef634) returned 0x460
	[0038.667] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x45c) returned 0xb8
	[0038.667] OpenProcessToken (in: ProcessHandle=0xb8, DesiredAccess=0x2000000, TokenHandle=0x2ef644 | out: TokenHandle=0x2ef644*=0xbc) returned 1
	[0038.667] DuplicateTokenEx (in: hExistingToken=0xbc, dwDesiredAccess=0x2000000, lpTokenAttributes=0x2ef60c, ImpersonationLevel=0x2, TokenType=0x1, phNewToken=0x2ef648 | out: phNewToken=0x2ef648*=0xc0) returned 1
	[0038.667] CreateProcessWithTokenW (in: hToken=0xc0, dwLogonFlags=0x0, lpApplicationName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe", lpCommandLine=0x0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2ef5c0*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2ef618 | out: lpCommandLine=0x0, lpProcessInformation=0x2ef618*(hProcess=0x10c, hThread=0x110, dwProcessId=0xa18, dwThreadId=0xa1c)) returned 1
	[0038.811] GetProcessHeap () returned 0x440000
	[0038.811] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x50) returned 0x463668
	[0038.811] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76c20000
	[0038.811] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x76c4d668
	[0038.811] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1
	[0038.811] GetProcessHeap () returned 0x440000
	[0038.811] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x463668 | out: hHeap=0x440000) returned 1
	[0038.811] CloseHandle (hObject=0xb8) returned 1
	[0038.811] CloseHandle (hObject=0x10c) returned 1
	[0038.812] CloseHandle (hObject=0x110) returned 1
	[0038.812] CloseHandle (hObject=0xbc) returned 1
	[0038.812] CloseHandle (hObject=0xc0) returned 1
	[0038.812] GetProcessHeap () returned 0x440000
	[0038.812] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e3d0 | out: hHeap=0x440000) returned 1
	[0038.812] GetProcessHeap () returned 0x440000
	[0038.812] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d388 | out: hHeap=0x440000) returned 1
	[0038.812] Sleep (dwMilliseconds=0x1388) 
	[0043.810] GetProcessHeap () returned 0x440000
	[0043.810] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x60) returned 0x45f188
	[0043.810] GetProcessHeap () returned 0x440000
	[0043.810] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x45cf10
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x45d0a0
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x45cf88
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x461ed0
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x461ed0 | out: hHeap=0x440000) returned 1
	[0043.811] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x45d0a0, nSize=0xf | out: lpDst="") returned 0x2c
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cf88 | out: hHeap=0x440000) returned 1
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d0a0, Size=0x3a) returned 0x45d550
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x3a) returned 0x45d598
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x461ed0
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x461ed0 | out: hHeap=0x440000) returned 1
	[0043.811] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x45d550, nSize=0x1d | out: lpDst="") returned 0x2c
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d598 | out: hHeap=0x440000) returned 1
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d550, Size=0x72) returned 0x44f530
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x72) returned 0x44f5b0
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x461ed0
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x461ed0 | out: hHeap=0x440000) returned 1
	[0043.811] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x44f530, nSize=0x39 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x2c
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44f5b0 | out: hHeap=0x440000) returned 1
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cf10 | out: hHeap=0x440000) returned 1
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d550
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3e) returned 0x45d598
	[0043.811] GetProcessHeap () returned 0x440000
	[0043.811] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x3e) returned 0x45d5e0
	[0043.812] GetProcessHeap () returned 0x440000
	[0043.812] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x461ed0
	[0043.812] GetProcessHeap () returned 0x440000
	[0043.812] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x10) returned 0x4515c0
	[0043.812] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2ef52c | out: phkResult=0x2ef52c*=0xbc) returned 0x0
	[0043.812] RegQueryValueExW (in: hKey=0xbc, lpValueName="Startup", lpReserved=0x0, lpType=0x2ef528, lpData=0x45d5e0, lpcbData=0x2ef530*=0x3e | out: lpType=0x2ef528*=0x2, lpData=0x45d5e0*=0x4a, lpcbData=0x2ef530*=0x98) returned 0xea
	[0043.812] RegCloseKey (hKey=0xbc) returned 0x0
	[0043.812] GetProcessHeap () returned 0x440000
	[0043.812] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4515c0 | out: hHeap=0x440000) returned 1
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x461ed0 | out: hHeap=0x440000) returned 1
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d5e0 | out: hHeap=0x440000) returned 1
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d598, Size=0x7a) returned 0x461ed0
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x7a) returned 0x461f58
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x461fe0
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x10) returned 0x4515c0
	[0043.813] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2ef52c | out: phkResult=0x2ef52c*=0xbc) returned 0x0
	[0043.813] RegQueryValueExW (in: hKey=0xbc, lpValueName="Startup", lpReserved=0x0, lpType=0x2ef528, lpData=0x461f58, lpcbData=0x2ef530*=0x7a | out: lpType=0x2ef528*=0x2, lpData=0x461f58*=0x78, lpcbData=0x2ef530*=0x98) returned 0xea
	[0043.813] RegCloseKey (hKey=0xbc) returned 0x0
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4515c0 | out: hHeap=0x440000) returned 1
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x461fe0 | out: hHeap=0x440000) returned 1
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x461f58 | out: hHeap=0x440000) returned 1
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x461ed0, Size=0xf2) returned 0x461ed0
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0xf2) returned 0x45f378
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x461fd0
	[0043.813] GetProcessHeap () returned 0x440000
	[0043.813] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x10) returned 0x4515c0
	[0043.813] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2ef52c | out: phkResult=0x2ef52c*=0xbc) returned 0x0
	[0043.813] RegQueryValueExW (in: hKey=0xbc, lpValueName="Startup", lpReserved=0x0, lpType=0x2ef528, lpData=0x45f378, lpcbData=0x2ef530*=0xf2 | out: lpType=0x2ef528*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x2ef530*=0x98) returned 0x0
	[0043.813] RegCloseKey (hKey=0xbc) returned 0x0
	[0043.814] GetProcessHeap () returned 0x440000
	[0043.814] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4515c0 | out: hHeap=0x440000) returned 1
	[0043.814] GetProcessHeap () returned 0x440000
	[0043.814] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x45cf10
	[0043.814] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2ef52c | out: phkResult=0x2ef52c*=0xbc) returned 0x0
	[0043.814] RegQueryValueExW (in: hKey=0xbc, lpValueName="Common Startup", lpReserved=0x0, lpType=0x2ef528, lpData=0x45f410, lpcbData=0x2ef530*=0x5a | out: lpType=0x2ef528*=0x0, lpData=0x45f410*=0x0, lpcbData=0x2ef530*=0x5a) returned 0x2
	[0043.814] RegCloseKey (hKey=0xbc) returned 0x0
	[0043.814] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2ef540 | out: phkResult=0x2ef540*=0xbc) returned 0x0
	[0043.814] RegQueryValueExW (in: hKey=0xbc, lpValueName="Common Startup", lpReserved=0x0, lpType=0x2ef53c, lpData=0x45f410, lpcbData=0x2ef544*=0x5a | out: lpType=0x2ef53c*=0x2, lpData=0x45f410*=0x0, lpcbData=0x2ef544*=0x78) returned 0xea
	[0043.814] RegCloseKey (hKey=0xbc) returned 0x0
	[0043.814] GetProcessHeap () returned 0x440000
	[0043.814] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cf10 | out: hHeap=0x440000) returned 1
	[0043.814] GetProcessHeap () returned 0x440000
	[0043.814] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x461fd0 | out: hHeap=0x440000) returned 1
	[0043.814] GetProcessHeap () returned 0x440000
	[0043.814] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f378 | out: hHeap=0x440000) returned 1
	[0043.814] GetProcessHeap () returned 0x440000
	[0043.814] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x461ed0, Size=0x1e2) returned 0x4628a0
	[0043.814] GetProcessHeap () returned 0x440000
	[0043.814] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e2) returned 0x45e3d0
	[0043.814] GetProcessHeap () returned 0x440000
	[0043.814] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x462a90
	[0043.814] GetProcessHeap () returned 0x440000
	[0043.814] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x10) returned 0x4515c0
	[0043.814] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2ef52c | out: phkResult=0x2ef52c*=0xbc) returned 0x0
	[0043.815] RegQueryValueExW (in: hKey=0xbc, lpValueName="Startup", lpReserved=0x0, lpType=0x2ef528, lpData=0x45e3d0, lpcbData=0x2ef530*=0x1e2 | out: lpType=0x2ef528*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x2ef530*=0x98) returned 0x0
	[0043.815] RegCloseKey (hKey=0xbc) returned 0x0
	[0043.815] GetProcessHeap () returned 0x440000
	[0043.815] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4515c0 | out: hHeap=0x440000) returned 1
	[0043.815] GetProcessHeap () returned 0x440000
	[0043.815] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x45cf10
	[0043.815] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2ef52c | out: phkResult=0x2ef52c*=0xbc) returned 0x0
	[0043.815] RegQueryValueExW (in: hKey=0xbc, lpValueName="Common Startup", lpReserved=0x0, lpType=0x2ef528, lpData=0x45e468, lpcbData=0x2ef530*=0x14a | out: lpType=0x2ef528*=0x0, lpData=0x45e468*=0xc4, lpcbData=0x2ef530*=0x14a) returned 0x2
	[0043.815] RegCloseKey (hKey=0xbc) returned 0x0
	[0043.815] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2ef540 | out: phkResult=0x2ef540*=0xbc) returned 0x0
	[0043.815] RegQueryValueExW (in: hKey=0xbc, lpValueName="Common Startup", lpReserved=0x0, lpType=0x2ef53c, lpData=0x45e468, lpcbData=0x2ef544*=0x14a | out: lpType=0x2ef53c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x2ef544*=0x78) returned 0x0
	[0043.815] RegCloseKey (hKey=0xbc) returned 0x0
	[0043.815] GetProcessHeap () returned 0x440000
	[0043.815] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cf10 | out: hHeap=0x440000) returned 1
	[0043.815] GetProcessHeap () returned 0x440000
	[0043.815] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x462a90 | out: hHeap=0x440000) returned 1
	[0043.815] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x4628a0, nSize=0xf1 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x99
	[0043.816] GetProcessHeap () returned 0x440000
	[0043.816] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e3d0 | out: hHeap=0x440000) returned 1
	[0043.816] GetProcessHeap () returned 0x440000
	[0043.816] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d550 | out: hHeap=0x440000) returned 1
	[0043.816] GetProcessHeap () returned 0x440000
	[0043.816] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20a) returned 0x45e3d0
	[0043.816] GetProcessHeap () returned 0x440000
	[0043.816] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20a) returned 0x4645a0
	[0043.816] GetProcessHeap () returned 0x440000
	[0043.816] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20a) returned 0x4647b8
	[0043.816] GetProcessHeap () returned 0x440000
	[0043.816] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20a) returned 0x4649d0
	[0043.816] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45e3d0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0043.816] GetProcessHeap () returned 0x440000
	[0043.816] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20a) returned 0x464be8
	[0043.816] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x464be8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0043.816] GetProcessHeap () returned 0x440000
	[0043.816] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464be8 | out: hHeap=0x440000) returned 1
	[0043.816] GetProcessHeap () returned 0x440000
	[0043.816] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20a) returned 0x464be8
	[0043.816] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x464be8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0043.816] GetProcessHeap () returned 0x440000
	[0043.816] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464be8 | out: hHeap=0x440000) returned 1
	[0043.816] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"), bFailIfExists=0) returned 1
	[0043.830] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x2ef628 | out: phkResult=0x2ef628*=0x110) returned 0x0
	[0043.830] RegSetValueExW (in: hKey=0x110, lpValueName="rsfd234df", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", cbData=0x72 | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe") returned 0x0
	[0043.831] RegCloseKey (hKey=0x110) returned 0x0
	[0043.831] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x2ef624 | out: phkResult=0x2ef624*=0x110) returned 0x0
	[0043.831] RegSetValueExW (in: hKey=0x110, lpValueName="rsfd234df", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", cbData=0x72 | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe") returned 0x0
	[0043.833] RegCloseKey (hKey=0x110) returned 0x0
	[0043.833] GetProcessHeap () returned 0x440000
	[0043.833] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x134) returned 0x461ed0
	[0043.833] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe"), lpNewFileName="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe"), bFailIfExists=1) returned 1
	[0043.845] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe"), bFailIfExists=1) returned 1
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x461ed0 | out: hHeap=0x440000) returned 1
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e3d0 | out: hHeap=0x440000) returned 1
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4645a0 | out: hHeap=0x440000) returned 1
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4647b8 | out: hHeap=0x440000) returned 1
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4649d0 | out: hHeap=0x440000) returned 1
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f188 | out: hHeap=0x440000) returned 1
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44f530 | out: hHeap=0x440000) returned 1
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4628a0 | out: hHeap=0x440000) returned 1
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x45cf10
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x45d0a0
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x45cf88
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x45f188
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f188 | out: hHeap=0x440000) returned 1
	[0043.855] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x45d0a0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cf88 | out: hHeap=0x440000) returned 1
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cf10 | out: hHeap=0x440000) returned 1
	[0043.855] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ef644, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ef644*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d0a0 | out: hHeap=0x440000) returned 1
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.855] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x28) returned 0x45f148
	[0043.855] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x4515c0
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x80) returned 0x45f188
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x74) returned 0x44f530
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x44f530, Size=0xe6) returned 0x461ed0
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x4514a0
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x180) returned 0x45f378
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x250) returned 0x4628a0
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x462af8
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x84) returned 0x461fc0
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x84) returned 0x45e3d0
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x45e460
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e460 | out: hHeap=0x440000) returned 1
	[0043.856] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x461fc0, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e3d0 | out: hHeap=0x440000) returned 1
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x462af8 | out: hHeap=0x440000) returned 1
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0xc0) returned 0x45e3d0
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xb8) returned 0x45e498
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0xb8) returned 0x45e558
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x462af8
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x462af8 | out: hHeap=0x440000) returned 1
	[0043.856] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;", lpDst=0x45e498, nSize=0x5c | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;") returned 0x5c
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e558 | out: hHeap=0x440000) returned 1
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e3d0 | out: hHeap=0x440000) returned 1
	[0043.856] GetProcessHeap () returned 0x440000
	[0043.856] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20a) returned 0x45e558
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20a) returned 0x4645a0
	[0043.857] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4645a0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4645a0 | out: hHeap=0x440000) returned 1
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x174) returned 0x4645a0
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x4645a0, Size=0x3be) returned 0x4645a0
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x86) returned 0x462af8
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x462af8, Size=0xa2) returned 0x45e3d0
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0xba) returned 0x464968
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e558 | out: hHeap=0x440000) returned 1
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f378 | out: hHeap=0x440000) returned 1
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4628a0 | out: hHeap=0x440000) returned 1
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x461fc0 | out: hHeap=0x440000) returned 1
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e498 | out: hHeap=0x440000) returned 1
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4515c0 | out: hHeap=0x440000) returned 1
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f188 | out: hHeap=0x440000) returned 1
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x45d0a0
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x45cf10
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x45cf88
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x45f188
	[0043.857] GetProcessHeap () returned 0x440000
	[0043.857] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f188 | out: hHeap=0x440000) returned 1
	[0043.857] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x45cf10, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cf88 | out: hHeap=0x440000) returned 1
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d0a0 | out: hHeap=0x440000) returned 1
	[0043.858] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2ef644, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2ef644*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cf10 | out: hHeap=0x440000) returned 1
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x28) returned 0x45d388
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x4515c0
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x80) returned 0x45f188
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x74) returned 0x44f530
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x44f530, Size=0xe6) returned 0x45f378
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x451560
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x180) returned 0x4628a0
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x250) returned 0x45e480
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x84) returned 0x461fc0
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x84) returned 0x45f468
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464ae0
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464ae0 | out: hHeap=0x440000) returned 1
	[0043.858] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x461fc0, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f468 | out: hHeap=0x440000) returned 1
	[0043.858] GetProcessHeap () returned 0x440000
	[0043.858] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0xc0) returned 0x45f468
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xb8) returned 0x45e6d8
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0xb8) returned 0x462a28
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0043.859] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;", lpDst=0x45e6d8, nSize=0x5c | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;") returned 0x5c
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x462a28 | out: hHeap=0x440000) returned 1
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f468 | out: hHeap=0x440000) returned 1
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20a) returned 0x466a30
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20a) returned 0x466c48
	[0043.859] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x466c48, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x466c48 | out: hHeap=0x440000) returned 1
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x174) returned 0x466c48
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x24e) returned 0x466dc8
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x86) returned 0x45f468
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45f468, Size=0xa2) returned 0x45f468
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0xba) returned 0x462a28
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x466a30 | out: hHeap=0x440000) returned 1
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4628a0 | out: hHeap=0x440000) returned 1
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e480 | out: hHeap=0x440000) returned 1
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x461fc0 | out: hHeap=0x440000) returned 1
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45e6d8 | out: hHeap=0x440000) returned 1
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4515c0 | out: hHeap=0x440000) returned 1
	[0043.859] GetProcessHeap () returned 0x440000
	[0043.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f188 | out: hHeap=0x440000) returned 1
	[0043.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x402013, lpParameter=0x2ef670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110
	[0043.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401fab, lpParameter=0x2ef680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc
	[0043.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401e4e, lpParameter=0x2ef68c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c
	[0043.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401859, lpParameter=0x2ef680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8
	[0043.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40197c, lpParameter=0x2ef680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114
	[0043.863] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) 

Thread:
	id = 4
	os_tid = 0xa10


Thread:
	id = 6
	os_tid = 0xa20

	[0043.864] GetVersion () returned 0x1db10106
	[0043.864] GetCurrentProcess () returned 0xffffffff
	[0043.864] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xebfa14 | out: TokenHandle=0xebfa14*=0x118) returned 1
	[0043.864] GetTokenInformation (in: TokenHandle=0x118, TokenInformationClass=0x14, TokenInformation=0xebfa0c, TokenInformationLength=0x4, ReturnLength=0xebfa10 | out: TokenInformation=0xebfa0c, ReturnLength=0xebfa10) returned 1
	[0043.864] CloseHandle (hObject=0x118) returned 1
	[0043.864] GetProcessHeap () returned 0x440000
	[0043.864] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x45cf10
	[0043.864] GetProcessHeap () returned 0x440000
	[0043.864] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x45d0a0
	[0043.864] GetProcessHeap () returned 0x440000
	[0043.864] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x45cf88
	[0043.864] GetProcessHeap () returned 0x440000
	[0043.864] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0043.864] GetProcessHeap () returned 0x440000
	[0043.864] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0043.864] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x45d0a0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0043.864] GetProcessHeap () returned 0x440000
	[0043.864] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cf88 | out: hHeap=0x440000) returned 1
	[0043.864] GetProcessHeap () returned 0x440000
	[0043.865] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45cf10 | out: hHeap=0x440000) returned 1
	[0043.865] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0043.865] GetProcessHeap () returned 0x440000
	[0043.865] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d0a0 | out: hHeap=0x440000) returned 1
	[0043.865] GetProcessHeap () returned 0x440000
	[0043.865] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d550
	[0043.865] GetProcessHeap () returned 0x440000
	[0043.865] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d598
	[0043.865] GetProcessHeap () returned 0x440000
	[0043.865] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d598, Size=0x72) returned 0x44f530
	[0043.865] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x0
	[0043.865] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x118
	[0043.865] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x0) returned 0x0
	[0043.865] GetProcessHeap () returned 0x440000
	[0043.865] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d550 | out: hHeap=0x440000) returned 1
	[0043.865] GetProcessHeap () returned 0x440000
	[0043.865] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44f530 | out: hHeap=0x440000) returned 1
	[0043.865] ReleaseMutex (hMutex=0x118) returned 1
	[0043.865] CloseHandle (hObject=0x118) returned 1
	[0043.865] Sleep (dwMilliseconds=0x3e8) 
	[0045.264] GetProcessHeap () returned 0x440000
	[0045.264] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce3e8
	[0045.264] GetProcessHeap () returned 0x440000
	[0045.264] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce4d8
	[0045.264] GetProcessHeap () returned 0x440000
	[0045.264] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce578
	[0045.264] GetProcessHeap () returned 0x440000
	[0045.264] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0045.264] GetProcessHeap () returned 0x440000
	[0045.264] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0045.265] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce4d8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0045.265] GetProcessHeap () returned 0x440000
	[0045.265] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce578 | out: hHeap=0x440000) returned 1
	[0045.265] GetProcessHeap () returned 0x440000
	[0045.265] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce3e8 | out: hHeap=0x440000) returned 1
	[0045.265] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0045.265] GetProcessHeap () returned 0x440000
	[0045.265] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce4d8 | out: hHeap=0x440000) returned 1
	[0045.265] GetProcessHeap () returned 0x440000
	[0045.265] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d8b0
	[0045.265] GetProcessHeap () returned 0x440000
	[0045.265] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d8f8
	[0045.265] GetProcessHeap () returned 0x440000
	[0045.265] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d8f8, Size=0x72) returned 0x44f830
	[0045.265] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x0
	[0045.265] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x1cc
	[0045.265] WaitForSingleObject (hHandle=0x1cc, dwMilliseconds=0x0) returned 0x0
	[0045.265] GetProcessHeap () returned 0x440000
	[0045.265] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d8b0 | out: hHeap=0x440000) returned 1
	[0045.265] GetProcessHeap () returned 0x440000
	[0045.265] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44f830 | out: hHeap=0x440000) returned 1
	[0045.265] ReleaseMutex (hMutex=0x1cc) returned 1
	[0045.265] CloseHandle (hObject=0x1cc) returned 1
	[0045.265] Sleep (dwMilliseconds=0x3e8) 
	[0046.368] GetProcessHeap () returned 0x440000
	[0046.368] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce820
	[0046.369] GetProcessHeap () returned 0x440000
	[0046.369] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce848
	[0046.369] GetProcessHeap () returned 0x440000
	[0046.369] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce870
	[0046.369] GetProcessHeap () returned 0x440000
	[0046.369] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0046.369] GetProcessHeap () returned 0x440000
	[0046.369] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0046.369] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce848, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0046.369] GetProcessHeap () returned 0x440000
	[0046.369] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce870 | out: hHeap=0x440000) returned 1
	[0046.369] GetProcessHeap () returned 0x440000
	[0046.369] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce820 | out: hHeap=0x440000) returned 1
	[0046.369] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0046.369] GetProcessHeap () returned 0x440000
	[0046.369] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce848 | out: hHeap=0x440000) returned 1
	[0046.369] GetProcessHeap () returned 0x440000
	[0046.369] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d8f8
	[0046.369] GetProcessHeap () returned 0x440000
	[0046.369] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d940
	[0046.369] GetProcessHeap () returned 0x440000
	[0046.369] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d940, Size=0x72) returned 0x44f9b0
	[0046.369] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x0
	[0046.369] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x1c8
	[0046.369] WaitForSingleObject (hHandle=0x1c8, dwMilliseconds=0x0) returned 0x0
	[0046.370] GetProcessHeap () returned 0x440000
	[0046.370] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d8f8 | out: hHeap=0x440000) returned 1
	[0046.370] GetProcessHeap () returned 0x440000
	[0046.370] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44f9b0 | out: hHeap=0x440000) returned 1
	[0046.370] ReleaseMutex (hMutex=0x1c8) returned 1
	[0046.370] CloseHandle (hObject=0x1c8) returned 1
	[0046.370] Sleep (dwMilliseconds=0x3e8) 
	[0047.616] GetProcessHeap () returned 0x440000
	[0047.617] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce8c0
	[0047.617] GetProcessHeap () returned 0x440000
	[0047.617] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce910
	[0047.617] GetProcessHeap () returned 0x440000
	[0047.617] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce7a8
	[0047.617] GetProcessHeap () returned 0x440000
	[0047.617] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464ae0
	[0047.617] GetProcessHeap () returned 0x440000
	[0047.617] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464ae0 | out: hHeap=0x440000) returned 1
	[0047.617] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce910, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0047.617] GetProcessHeap () returned 0x440000
	[0047.617] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce7a8 | out: hHeap=0x440000) returned 1
	[0047.617] GetProcessHeap () returned 0x440000
	[0047.617] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce8c0 | out: hHeap=0x440000) returned 1
	[0047.617] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0047.617] GetProcessHeap () returned 0x440000
	[0047.617] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce910 | out: hHeap=0x440000) returned 1
	[0047.617] GetProcessHeap () returned 0x440000
	[0047.617] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d940
	[0047.617] GetProcessHeap () returned 0x440000
	[0047.617] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d988
	[0047.617] GetProcessHeap () returned 0x440000
	[0047.617] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d988, Size=0x72) returned 0x44fa30
	[0047.617] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x0
	[0047.617] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x210
	[0047.617] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x0) returned 0x0
	[0047.618] GetProcessHeap () returned 0x440000
	[0047.618] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d940 | out: hHeap=0x440000) returned 1
	[0047.618] GetProcessHeap () returned 0x440000
	[0047.618] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fa30 | out: hHeap=0x440000) returned 1
	[0047.618] ReleaseMutex (hMutex=0x210) returned 1
	[0047.618] CloseHandle (hObject=0x210) returned 1
	[0047.618] Sleep (dwMilliseconds=0x3e8) 
	[0048.742] GetProcessHeap () returned 0x440000
	[0048.742] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce910
	[0048.742] GetProcessHeap () returned 0x440000
	[0048.743] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce8c0
	[0048.743] GetProcessHeap () returned 0x440000
	[0048.743] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce7a8
	[0048.743] GetProcessHeap () returned 0x440000
	[0048.743] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464ae0
	[0048.743] GetProcessHeap () returned 0x440000
	[0048.743] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464ae0 | out: hHeap=0x440000) returned 1
	[0048.743] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce8c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0048.743] GetProcessHeap () returned 0x440000
	[0048.743] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce7a8 | out: hHeap=0x440000) returned 1
	[0048.743] GetProcessHeap () returned 0x440000
	[0048.743] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce910 | out: hHeap=0x440000) returned 1
	[0048.743] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0048.743] GetProcessHeap () returned 0x440000
	[0048.743] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce8c0 | out: hHeap=0x440000) returned 1
	[0048.743] GetProcessHeap () returned 0x440000
	[0048.743] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d940
	[0048.743] GetProcessHeap () returned 0x440000
	[0048.743] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d988
	[0048.743] GetProcessHeap () returned 0x440000
	[0048.743] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d988, Size=0x72) returned 0x44fa30
	[0048.743] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x0
	[0048.744] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x198
	[0048.744] WaitForSingleObject (hHandle=0x198, dwMilliseconds=0x0) returned 0x0
	[0048.744] GetProcessHeap () returned 0x440000
	[0048.744] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d940 | out: hHeap=0x440000) returned 1
	[0048.744] GetProcessHeap () returned 0x440000
	[0048.744] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fa30 | out: hHeap=0x440000) returned 1
	[0048.744] ReleaseMutex (hMutex=0x198) returned 1
	[0048.744] CloseHandle (hObject=0x198) returned 1
	[0048.744] Sleep (dwMilliseconds=0x3e8) 
	[0049.924] GetProcessHeap () returned 0x440000
	[0049.924] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce8c0
	[0049.924] GetProcessHeap () returned 0x440000
	[0049.924] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce910
	[0049.924] GetProcessHeap () returned 0x440000
	[0049.924] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce7a8
	[0049.924] GetProcessHeap () returned 0x440000
	[0049.924] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464ae0
	[0049.924] GetProcessHeap () returned 0x440000
	[0049.924] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464ae0 | out: hHeap=0x440000) returned 1
	[0049.924] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce910, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0049.924] GetProcessHeap () returned 0x440000
	[0049.924] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce7a8 | out: hHeap=0x440000) returned 1
	[0049.924] GetProcessHeap () returned 0x440000
	[0049.924] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce8c0 | out: hHeap=0x440000) returned 1
	[0049.924] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0049.924] GetProcessHeap () returned 0x440000
	[0049.924] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce910 | out: hHeap=0x440000) returned 1
	[0049.924] GetProcessHeap () returned 0x440000
	[0049.924] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d940
	[0049.924] GetProcessHeap () returned 0x440000
	[0049.924] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d988
	[0049.925] GetProcessHeap () returned 0x440000
	[0049.925] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d988, Size=0x72) returned 0x44fa30
	[0049.925] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x198
	[0049.925] WaitForSingleObject (hHandle=0x198, dwMilliseconds=0x0) returned 0x102
	[0049.925] CloseHandle (hObject=0x198) returned 1
	[0049.925] GetProcessHeap () returned 0x440000
	[0049.925] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d940 | out: hHeap=0x440000) returned 1
	[0049.925] GetProcessHeap () returned 0x440000
	[0049.925] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fa30 | out: hHeap=0x440000) returned 1
	[0049.925] Sleep (dwMilliseconds=0x3e8) 
	[0051.115] GetProcessHeap () returned 0x440000
	[0051.115] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce910
	[0051.115] GetProcessHeap () returned 0x440000
	[0051.116] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce8c0
	[0051.116] GetProcessHeap () returned 0x440000
	[0051.116] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce7a8
	[0051.118] GetProcessHeap () returned 0x440000
	[0051.118] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0051.118] GetProcessHeap () returned 0x440000
	[0051.118] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0051.119] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce8c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0051.119] GetProcessHeap () returned 0x440000
	[0051.119] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce7a8 | out: hHeap=0x440000) returned 1
	[0051.119] GetProcessHeap () returned 0x440000
	[0051.120] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce910 | out: hHeap=0x440000) returned 1
	[0051.120] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0051.122] GetProcessHeap () returned 0x440000
	[0051.158] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce8c0 | out: hHeap=0x440000) returned 1
	[0051.158] GetProcessHeap () returned 0x440000
	[0051.158] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d940
	[0051.158] GetProcessHeap () returned 0x440000
	[0051.158] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d988
	[0051.158] GetProcessHeap () returned 0x440000
	[0051.158] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d988, Size=0x72) returned 0x44fa30
	[0051.158] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x1b4
	[0051.158] WaitForSingleObject (hHandle=0x1b4, dwMilliseconds=0x0) returned 0x102
	[0051.158] CloseHandle (hObject=0x1b4) returned 1
	[0051.158] GetProcessHeap () returned 0x440000
	[0051.158] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d940 | out: hHeap=0x440000) returned 1
	[0051.158] GetProcessHeap () returned 0x440000
	[0051.158] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fa30 | out: hHeap=0x440000) returned 1
	[0051.158] Sleep (dwMilliseconds=0x3e8) 
	[0052.297] GetProcessHeap () returned 0x440000
	[0052.297] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce8c0
	[0052.297] GetProcessHeap () returned 0x440000
	[0052.297] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce910
	[0052.297] GetProcessHeap () returned 0x440000
	[0052.297] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce7a8
	[0052.297] GetProcessHeap () returned 0x440000
	[0052.297] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0052.297] GetProcessHeap () returned 0x440000
	[0052.297] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0052.297] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce910, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0052.297] GetProcessHeap () returned 0x440000
	[0052.297] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce7a8 | out: hHeap=0x440000) returned 1
	[0052.297] GetProcessHeap () returned 0x440000
	[0052.297] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce8c0 | out: hHeap=0x440000) returned 1
	[0052.297] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0052.297] GetProcessHeap () returned 0x440000
	[0052.297] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce910 | out: hHeap=0x440000) returned 1
	[0052.297] GetProcessHeap () returned 0x440000
	[0052.297] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d940
	[0052.297] GetProcessHeap () returned 0x440000
	[0052.297] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d988
	[0052.297] GetProcessHeap () returned 0x440000
	[0052.297] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d988, Size=0x72) returned 0x44fa30
	[0052.297] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x1c8
	[0052.298] WaitForSingleObject (hHandle=0x1c8, dwMilliseconds=0x0) returned 0x102
	[0052.298] CloseHandle (hObject=0x1c8) returned 1
	[0052.298] GetProcessHeap () returned 0x440000
	[0052.298] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d940 | out: hHeap=0x440000) returned 1
	[0052.298] GetProcessHeap () returned 0x440000
	[0052.298] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fa30 | out: hHeap=0x440000) returned 1
	[0052.298] Sleep (dwMilliseconds=0x3e8) 
	[0053.467] GetProcessHeap () returned 0x440000
	[0053.467] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce910
	[0053.467] GetProcessHeap () returned 0x440000
	[0053.467] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce8c0
	[0053.467] GetProcessHeap () returned 0x440000
	[0053.467] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce7a8
	[0053.467] GetProcessHeap () returned 0x440000
	[0053.467] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0053.467] GetProcessHeap () returned 0x440000
	[0053.467] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0053.467] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce8c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0053.467] GetProcessHeap () returned 0x440000
	[0053.467] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce7a8 | out: hHeap=0x440000) returned 1
	[0053.467] GetProcessHeap () returned 0x440000
	[0053.467] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce910 | out: hHeap=0x440000) returned 1
	[0053.467] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0053.468] GetProcessHeap () returned 0x440000
	[0053.468] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce8c0 | out: hHeap=0x440000) returned 1
	[0053.468] GetProcessHeap () returned 0x440000
	[0053.468] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d940
	[0053.468] GetProcessHeap () returned 0x440000
	[0053.468] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d988
	[0053.468] GetProcessHeap () returned 0x440000
	[0053.468] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d988, Size=0x72) returned 0x44fa30
	[0053.468] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x198
	[0053.468] WaitForSingleObject (hHandle=0x198, dwMilliseconds=0x0) returned 0x102
	[0053.468] CloseHandle (hObject=0x198) returned 1
	[0053.468] GetProcessHeap () returned 0x440000
	[0053.468] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d940 | out: hHeap=0x440000) returned 1
	[0053.468] GetProcessHeap () returned 0x440000
	[0053.468] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fa30 | out: hHeap=0x440000) returned 1
	[0053.468] Sleep (dwMilliseconds=0x3e8) 
	[0054.650] GetProcessHeap () returned 0x440000
	[0054.650] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce8c0
	[0054.650] GetProcessHeap () returned 0x440000
	[0054.650] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce910
	[0054.650] GetProcessHeap () returned 0x440000
	[0054.650] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce7a8
	[0054.650] GetProcessHeap () returned 0x440000
	[0054.650] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0054.650] GetProcessHeap () returned 0x440000
	[0054.650] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0054.650] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce910, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0054.650] GetProcessHeap () returned 0x440000
	[0054.650] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce7a8 | out: hHeap=0x440000) returned 1
	[0054.650] GetProcessHeap () returned 0x440000
	[0054.650] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce8c0 | out: hHeap=0x440000) returned 1
	[0054.651] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0054.651] GetProcessHeap () returned 0x440000
	[0054.651] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce910 | out: hHeap=0x440000) returned 1
	[0054.651] GetProcessHeap () returned 0x440000
	[0054.651] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d940
	[0054.651] GetProcessHeap () returned 0x440000
	[0054.651] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d988
	[0054.651] GetProcessHeap () returned 0x440000
	[0054.651] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d988, Size=0x72) returned 0x44fab0
	[0054.651] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x194
	[0054.652] WaitForSingleObject (hHandle=0x194, dwMilliseconds=0x0) returned 0x102
	[0054.652] CloseHandle (hObject=0x194) returned 1
	[0054.652] GetProcessHeap () returned 0x440000
	[0054.652] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d940 | out: hHeap=0x440000) returned 1
	[0054.652] GetProcessHeap () returned 0x440000
	[0054.652] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fab0 | out: hHeap=0x440000) returned 1
	[0054.652] Sleep (dwMilliseconds=0x3e8) 
	[0055.795] GetProcessHeap () returned 0x440000
	[0055.795] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce910
	[0055.795] GetProcessHeap () returned 0x440000
	[0055.795] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce8c0
	[0055.795] GetProcessHeap () returned 0x440000
	[0055.795] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce7a8
	[0055.795] GetProcessHeap () returned 0x440000
	[0055.795] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0055.795] GetProcessHeap () returned 0x440000
	[0055.795] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0055.795] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce8c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0055.795] GetProcessHeap () returned 0x440000
	[0055.795] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce7a8 | out: hHeap=0x440000) returned 1
	[0055.795] GetProcessHeap () returned 0x440000
	[0055.795] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce910 | out: hHeap=0x440000) returned 1
	[0055.796] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0055.796] GetProcessHeap () returned 0x440000
	[0055.796] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce8c0 | out: hHeap=0x440000) returned 1
	[0055.796] GetProcessHeap () returned 0x440000
	[0055.796] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d940
	[0055.796] GetProcessHeap () returned 0x440000
	[0055.796] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d988
	[0055.796] GetProcessHeap () returned 0x440000
	[0055.796] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d988, Size=0x72) returned 0x44fa30
	[0055.796] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x1b4
	[0055.796] WaitForSingleObject (hHandle=0x1b4, dwMilliseconds=0x0) returned 0x102
	[0055.796] CloseHandle (hObject=0x1b4) returned 1
	[0055.796] GetProcessHeap () returned 0x440000
	[0055.796] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d940 | out: hHeap=0x440000) returned 1
	[0055.796] GetProcessHeap () returned 0x440000
	[0055.796] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fa30 | out: hHeap=0x440000) returned 1
	[0055.796] Sleep (dwMilliseconds=0x3e8) 
	[0056.960] GetProcessHeap () returned 0x440000
	[0056.960] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce8c0
	[0056.960] GetProcessHeap () returned 0x440000
	[0056.960] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce910
	[0056.960] GetProcessHeap () returned 0x440000
	[0056.960] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce7a8
	[0056.960] GetProcessHeap () returned 0x440000
	[0056.960] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0056.960] GetProcessHeap () returned 0x440000
	[0056.960] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0056.960] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce910, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0056.960] GetProcessHeap () returned 0x440000
	[0056.960] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce7a8 | out: hHeap=0x440000) returned 1
	[0056.960] GetProcessHeap () returned 0x440000
	[0056.960] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce8c0 | out: hHeap=0x440000) returned 1
	[0056.960] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0056.960] GetProcessHeap () returned 0x440000
	[0056.960] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce910 | out: hHeap=0x440000) returned 1
	[0056.960] GetProcessHeap () returned 0x440000
	[0056.960] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d940
	[0056.960] GetProcessHeap () returned 0x440000
	[0056.960] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d988
	[0056.960] GetProcessHeap () returned 0x440000
	[0056.960] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d988, Size=0x72) returned 0x44fa30
	[0056.960] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x20c
	[0056.961] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x102
	[0056.961] CloseHandle (hObject=0x20c) returned 1
	[0056.961] GetProcessHeap () returned 0x440000
	[0056.961] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d940 | out: hHeap=0x440000) returned 1
	[0056.961] GetProcessHeap () returned 0x440000
	[0056.961] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fa30 | out: hHeap=0x440000) returned 1
	[0056.961] Sleep (dwMilliseconds=0x3e8) 
	[0058.083] GetProcessHeap () returned 0x440000
	[0058.085] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce910
	[0058.086] GetProcessHeap () returned 0x440000
	[0058.086] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce8c0
	[0058.086] GetProcessHeap () returned 0x440000
	[0058.086] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce7a8
	[0058.086] GetProcessHeap () returned 0x440000
	[0058.086] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0058.086] GetProcessHeap () returned 0x440000
	[0058.086] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0058.086] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce8c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0058.086] GetProcessHeap () returned 0x440000
	[0058.086] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce7a8 | out: hHeap=0x440000) returned 1
	[0058.086] GetProcessHeap () returned 0x440000
	[0058.086] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce910 | out: hHeap=0x440000) returned 1
	[0058.086] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0058.086] GetProcessHeap () returned 0x440000
	[0058.086] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce8c0 | out: hHeap=0x440000) returned 1
	[0058.087] GetProcessHeap () returned 0x440000
	[0058.087] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d940
	[0058.087] GetProcessHeap () returned 0x440000
	[0058.087] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d988
	[0058.087] GetProcessHeap () returned 0x440000
	[0058.087] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d988, Size=0x72) returned 0x44fa30
	[0058.087] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x21c
	[0058.087] WaitForSingleObject (hHandle=0x21c, dwMilliseconds=0x0) returned 0x102
	[0058.087] CloseHandle (hObject=0x21c) returned 1
	[0058.087] GetProcessHeap () returned 0x440000
	[0058.087] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d940 | out: hHeap=0x440000) returned 1
	[0058.087] GetProcessHeap () returned 0x440000
	[0058.087] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fa30 | out: hHeap=0x440000) returned 1
	[0058.087] Sleep (dwMilliseconds=0x3e8) 
	[0059.215] GetProcessHeap () returned 0x440000
	[0059.215] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce8c0
	[0059.215] GetProcessHeap () returned 0x440000
	[0059.215] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce910
	[0059.216] GetProcessHeap () returned 0x440000
	[0059.216] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce7a8
	[0059.216] GetProcessHeap () returned 0x440000
	[0059.216] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0059.216] GetProcessHeap () returned 0x440000
	[0059.216] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0059.216] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce910, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0059.216] GetProcessHeap () returned 0x440000
	[0059.216] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce7a8 | out: hHeap=0x440000) returned 1
	[0059.216] GetProcessHeap () returned 0x440000
	[0059.216] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce8c0 | out: hHeap=0x440000) returned 1
	[0059.216] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0059.216] GetProcessHeap () returned 0x440000
	[0059.216] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce910 | out: hHeap=0x440000) returned 1
	[0059.216] GetProcessHeap () returned 0x440000
	[0059.216] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d940
	[0059.216] GetProcessHeap () returned 0x440000
	[0059.216] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d988
	[0059.216] GetProcessHeap () returned 0x440000
	[0059.216] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d988, Size=0x72) returned 0x44fa30
	[0059.216] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x224
	[0059.216] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102
	[0059.216] CloseHandle (hObject=0x224) returned 1
	[0059.216] GetProcessHeap () returned 0x440000
	[0059.216] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d940 | out: hHeap=0x440000) returned 1
	[0059.217] GetProcessHeap () returned 0x440000
	[0059.217] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fa30 | out: hHeap=0x440000) returned 1
	[0059.217] Sleep (dwMilliseconds=0x3e8) 
	[0060.316] GetProcessHeap () returned 0x440000
	[0060.316] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce910
	[0060.316] GetProcessHeap () returned 0x440000
	[0060.316] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce8c0
	[0060.316] GetProcessHeap () returned 0x440000
	[0060.316] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce7a8
	[0060.316] GetProcessHeap () returned 0x440000
	[0060.316] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0060.316] GetProcessHeap () returned 0x440000
	[0060.316] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0060.316] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce8c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0060.316] GetProcessHeap () returned 0x440000
	[0060.316] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce7a8 | out: hHeap=0x440000) returned 1
	[0060.316] GetProcessHeap () returned 0x440000
	[0060.316] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce910 | out: hHeap=0x440000) returned 1
	[0060.316] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0060.317] GetProcessHeap () returned 0x440000
	[0060.317] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce8c0 | out: hHeap=0x440000) returned 1
	[0060.317] GetProcessHeap () returned 0x440000
	[0060.317] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d940
	[0060.317] GetProcessHeap () returned 0x440000
	[0060.317] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d988
	[0060.317] GetProcessHeap () returned 0x440000
	[0060.317] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d988, Size=0x72) returned 0x44fa30
	[0060.317] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x20c
	[0060.318] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x102
	[0060.318] CloseHandle (hObject=0x20c) returned 1
	[0060.318] GetProcessHeap () returned 0x440000
	[0060.318] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d940 | out: hHeap=0x440000) returned 1
	[0060.318] GetProcessHeap () returned 0x440000
	[0060.318] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fa30 | out: hHeap=0x440000) returned 1
	[0060.318] Sleep (dwMilliseconds=0x3e8) 
	[0061.886] GetProcessHeap () returned 0x440000
	[0061.886] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x5303f0
	[0061.886] GetProcessHeap () returned 0x440000
	[0061.886] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x530418
	[0061.886] GetProcessHeap () returned 0x440000
	[0061.886] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x530440
	[0061.886] GetProcessHeap () returned 0x440000
	[0061.886] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0061.886] GetProcessHeap () returned 0x440000
	[0061.886] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0061.886] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x530418, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0061.886] GetProcessHeap () returned 0x440000
	[0061.887] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x530440 | out: hHeap=0x440000) returned 1
	[0061.887] GetProcessHeap () returned 0x440000
	[0061.887] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x5303f0 | out: hHeap=0x440000) returned 1
	[0061.887] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0061.887] GetProcessHeap () returned 0x440000
	[0061.887] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x530418 | out: hHeap=0x440000) returned 1
	[0061.887] GetProcessHeap () returned 0x440000
	[0061.887] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d988
	[0061.887] GetProcessHeap () returned 0x440000
	[0061.887] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d820
	[0061.887] GetProcessHeap () returned 0x440000
	[0061.887] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d820, Size=0x72) returned 0x44fc30
	[0061.887] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x22c
	[0061.887] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x102
	[0061.887] CloseHandle (hObject=0x22c) returned 1
	[0061.887] GetProcessHeap () returned 0x440000
	[0061.887] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d988 | out: hHeap=0x440000) returned 1
	[0061.887] GetProcessHeap () returned 0x440000
	[0061.887] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fc30 | out: hHeap=0x440000) returned 1
	[0061.887] Sleep (dwMilliseconds=0x3e8) 
	[0062.906] GetProcessHeap () returned 0x440000
	[0062.906] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce320
	[0062.906] GetProcessHeap () returned 0x440000
	[0062.906] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce460
	[0062.906] GetProcessHeap () returned 0x440000
	[0062.906] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce410
	[0062.906] GetProcessHeap () returned 0x440000
	[0062.906] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464ae0
	[0062.906] GetProcessHeap () returned 0x440000
	[0062.906] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464ae0 | out: hHeap=0x440000) returned 1
	[0062.906] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce460, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0062.906] GetProcessHeap () returned 0x440000
	[0062.906] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce410 | out: hHeap=0x440000) returned 1
	[0062.906] GetProcessHeap () returned 0x440000
	[0062.906] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce320 | out: hHeap=0x440000) returned 1
	[0062.906] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0062.906] GetProcessHeap () returned 0x440000
	[0062.906] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce460 | out: hHeap=0x440000) returned 1
	[0062.906] GetProcessHeap () returned 0x440000
	[0062.906] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d988
	[0062.906] GetProcessHeap () returned 0x440000
	[0062.906] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d820
	[0062.907] GetProcessHeap () returned 0x440000
	[0062.907] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d820, Size=0x72) returned 0x44fc30
	[0062.907] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x230
	[0062.907] WaitForSingleObject (hHandle=0x230, dwMilliseconds=0x0) returned 0x102
	[0062.907] CloseHandle (hObject=0x230) returned 1
	[0062.907] GetProcessHeap () returned 0x440000
	[0062.907] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d988 | out: hHeap=0x440000) returned 1
	[0062.907] GetProcessHeap () returned 0x440000
	[0062.907] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fc30 | out: hHeap=0x440000) returned 1
	[0062.907] Sleep (dwMilliseconds=0x3e8) 
	[0064.064] GetProcessHeap () returned 0x440000
	[0064.064] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce2d0
	[0064.064] GetProcessHeap () returned 0x440000
	[0064.064] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce460
	[0064.064] GetProcessHeap () returned 0x440000
	[0064.064] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce320
	[0064.064] GetProcessHeap () returned 0x440000
	[0064.064] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0064.064] GetProcessHeap () returned 0x440000
	[0064.064] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0064.064] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce460, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0064.064] GetProcessHeap () returned 0x440000
	[0064.064] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce320 | out: hHeap=0x440000) returned 1
	[0064.064] GetProcessHeap () returned 0x440000
	[0064.064] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce2d0 | out: hHeap=0x440000) returned 1
	[0064.064] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0064.064] GetProcessHeap () returned 0x440000
	[0064.064] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce460 | out: hHeap=0x440000) returned 1
	[0064.064] GetProcessHeap () returned 0x440000
	[0064.064] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d988
	[0064.064] GetProcessHeap () returned 0x440000
	[0064.064] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d820
	[0064.064] GetProcessHeap () returned 0x440000
	[0064.064] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d820, Size=0x72) returned 0x44fc30
	[0064.064] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x194
	[0064.065] WaitForSingleObject (hHandle=0x194, dwMilliseconds=0x0) returned 0x102
	[0064.065] CloseHandle (hObject=0x194) returned 1
	[0064.065] GetProcessHeap () returned 0x440000
	[0064.065] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d988 | out: hHeap=0x440000) returned 1
	[0064.065] GetProcessHeap () returned 0x440000
	[0064.065] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fc30 | out: hHeap=0x440000) returned 1
	[0064.065] Sleep (dwMilliseconds=0x3e8) 
	[0065.208] GetProcessHeap () returned 0x440000
	[0065.208] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x4ce460
	[0065.208] GetProcessHeap () returned 0x440000
	[0065.208] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x4ce2d0
	[0065.208] GetProcessHeap () returned 0x440000
	[0065.208] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x4ce320
	[0065.208] GetProcessHeap () returned 0x440000
	[0065.208] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0065.208] GetProcessHeap () returned 0x440000
	[0065.208] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0065.208] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x4ce2d0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0065.208] GetProcessHeap () returned 0x440000
	[0065.208] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce320 | out: hHeap=0x440000) returned 1
	[0065.208] GetProcessHeap () returned 0x440000
	[0065.208] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce460 | out: hHeap=0x440000) returned 1
	[0065.208] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xebf99c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xebf99c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0065.208] GetProcessHeap () returned 0x440000
	[0065.208] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ce2d0 | out: hHeap=0x440000) returned 1
	[0065.208] GetProcessHeap () returned 0x440000
	[0065.208] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d988
	[0065.208] GetProcessHeap () returned 0x440000
	[0065.208] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x3a) returned 0x45d820
	[0065.208] GetProcessHeap () returned 0x440000
	[0065.208] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45d820, Size=0x72) returned 0x44fc30
	[0065.208] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x194
	[0065.208] WaitForSingleObject (hHandle=0x194, dwMilliseconds=0x0) returned 0x102
	[0065.209] CloseHandle (hObject=0x194) returned 1
	[0065.209] GetProcessHeap () returned 0x440000
	[0065.209] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d988 | out: hHeap=0x440000) returned 1
	[0065.209] GetProcessHeap () returned 0x440000
	[0065.209] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x44fc30 | out: hHeap=0x440000) returned 1
	[0065.209] Sleep (dwMilliseconds=0x3e8) 

Thread:
	id = 7
	os_tid = 0xa24

	[0043.866] GetProcessHeap () returned 0x440000
	[0043.866] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x440) returned 0x467020
	[0043.866] GetProcessHeap () returned 0x440000
	[0043.866] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x434) returned 0x467468
	[0043.866] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x118
	[0043.869] Process32FirstW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0043.869] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0043.869] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0043.870] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0043.870] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0043.871] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0043.871] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0043.871] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0043.872] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0043.872] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0043.873] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.873] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.873] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.874] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.874] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.875] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0043.875] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.875] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.876] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0043.876] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0043.876] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0043.892] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0043.892] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0043.893] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0043.893] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0043.893] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0043.894] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0043.894] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0043.895] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0043.895] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0043.895] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0043.896] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0043.896] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0043.896] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0043.897] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0043.897] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0043.898] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0043.898] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0043.898] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0043.899] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0043.899] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0043.899] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0043.900] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0043.900] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0043.901] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0043.901] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0043.901] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0043.902] Process32NextW (in: hSnapshot=0x118, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0043.902] CloseHandle (hObject=0x118) returned 1
	[0043.902] Sleep (dwMilliseconds=0x1f4) 
	[0044.866] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b8
	[0044.871] Process32FirstW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0044.871] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0044.872] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0044.872] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0044.872] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0044.873] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0044.873] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0044.874] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0044.874] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0044.874] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0044.875] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.875] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.876] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.876] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.876] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.877] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0044.877] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.878] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.878] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0044.878] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0044.879] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0044.879] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0044.880] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0044.880] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0044.880] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0044.881] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0044.881] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0044.882] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0044.882] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0044.882] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0044.883] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0044.883] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0044.884] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0044.884] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0044.884] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0044.885] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0044.885] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0044.886] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0044.886] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0044.886] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0044.887] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0044.887] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0044.888] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0044.888] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0044.888] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0044.889] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0044.889] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0044.890] Process32NextW (in: hSnapshot=0x1b8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0044.890] CloseHandle (hObject=0x1b8) returned 1
	[0044.890] Sleep (dwMilliseconds=0x1f4) 
	[0045.557] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0
	[0045.559] Process32FirstW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0045.560] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0045.560] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0045.560] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0045.561] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0045.561] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0045.562] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0045.562] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0045.562] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0045.563] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0045.563] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.564] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.564] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.564] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.565] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.565] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0045.566] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.566] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.566] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0045.567] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0045.567] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0045.568] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0045.568] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0045.568] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0045.569] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0045.569] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0045.570] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0045.570] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0045.570] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0045.571] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0045.571] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0045.572] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0045.572] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0045.572] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0045.573] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0045.573] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0045.574] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0045.574] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0045.574] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0045.575] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0045.575] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0045.576] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0045.576] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0045.576] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0045.577] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0045.577] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0045.578] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0045.578] Process32NextW (in: hSnapshot=0x1e0, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0045.578] CloseHandle (hObject=0x1e0) returned 1
	[0045.578] Sleep (dwMilliseconds=0x1f4) 
	[0046.212] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1fc
	[0046.215] Process32FirstW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0046.215] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0046.215] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0046.216] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0046.216] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0046.217] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0046.217] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0046.217] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0046.218] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0046.218] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0046.219] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.219] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.220] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.220] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.220] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.221] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0046.221] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.222] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.222] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0046.222] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0046.223] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0046.223] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0046.224] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0046.224] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0046.224] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0046.225] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0046.225] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0046.226] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0046.226] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0046.226] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0046.227] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0046.227] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0046.228] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0046.229] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0046.229] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0046.230] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0046.230] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0046.230] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0046.231] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0046.231] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0046.232] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0046.232] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0046.232] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0046.233] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0046.233] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0046.234] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0046.234] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0046.234] Process32NextW (in: hSnapshot=0x1fc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0046.235] CloseHandle (hObject=0x1fc) returned 1
	[0046.235] Sleep (dwMilliseconds=0x1f4) 
	[0046.884] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0047.095] Process32FirstW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0047.095] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0047.096] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0047.096] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0047.097] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0047.097] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0047.097] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0047.098] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0047.098] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0047.099] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0047.099] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.099] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.100] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.100] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.101] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.101] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0047.101] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.102] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.103] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0047.103] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0047.104] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0047.104] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0047.104] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.105] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0047.105] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0047.106] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0047.106] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0047.106] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0047.107] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0047.107] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0047.108] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0047.108] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0047.108] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0047.109] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0047.109] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0047.110] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0047.110] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0047.110] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0047.111] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0047.111] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0047.111] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0047.112] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0047.112] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0047.113] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0047.113] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0047.114] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0047.114] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0047.114] Process32NextW (in: hSnapshot=0x200, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0047.115] CloseHandle (hObject=0x200) returned 1
	[0047.115] Sleep (dwMilliseconds=0x1f4) 
	[0047.757] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x210
	[0047.759] Process32FirstW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0047.759] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0047.760] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0047.760] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0047.760] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0047.761] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0047.761] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0047.762] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0047.762] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0047.762] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0047.763] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.763] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.763] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.764] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.764] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.765] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0047.765] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.765] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.766] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0047.766] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0047.767] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0047.767] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0047.767] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0047.768] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0047.768] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0047.769] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0047.769] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0047.770] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0047.770] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0047.770] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0047.771] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0047.771] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0047.772] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0047.772] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0047.773] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0047.773] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0047.773] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0047.774] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0047.774] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0047.775] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0047.775] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0047.775] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0047.776] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0047.776] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0047.777] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0047.777] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0047.777] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0047.778] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0047.778] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0047.779] CloseHandle (hObject=0x210) returned 1
	[0047.779] Sleep (dwMilliseconds=0x1f4) 
	[0048.412] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0048.415] Process32FirstW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0048.415] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0048.416] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0048.416] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0048.416] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0048.417] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0048.417] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0048.417] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0048.418] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0048.418] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0048.419] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0048.419] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0048.419] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0048.420] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0048.420] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0048.420] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0048.421] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0048.421] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0048.422] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0048.422] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0048.422] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0048.423] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0048.423] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0048.423] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0048.424] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0048.424] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0048.425] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0048.425] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0048.425] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0048.426] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0048.426] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0048.426] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0048.427] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0048.427] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0048.428] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0048.428] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0048.428] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0048.429] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0048.429] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0048.430] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0048.430] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0048.430] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0048.431] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0048.431] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0048.431] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0048.432] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0048.432] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0048.433] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0048.433] Process32NextW (in: hSnapshot=0x20c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0048.433] CloseHandle (hObject=0x20c) returned 1
	[0048.433] Sleep (dwMilliseconds=0x1f4) 
	[0049.027] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x198
	[0049.029] Process32FirstW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0049.029] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0049.030] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0049.030] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0049.031] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0049.031] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0049.031] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0049.032] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0049.032] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0049.033] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0049.033] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.033] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.034] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.034] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.035] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.035] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0049.035] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.036] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.036] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0049.037] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0049.037] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0049.037] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0049.038] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.038] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0049.038] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0049.039] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0049.039] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0049.040] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0049.040] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0049.040] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0049.041] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0049.041] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0049.042] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0049.042] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0049.042] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0049.043] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0049.043] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0049.043] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0049.044] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0049.044] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0049.045] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0049.045] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0049.045] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0049.046] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0049.046] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0049.047] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0049.047] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0049.047] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0049.048] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0049.048] CloseHandle (hObject=0x198) returned 1
	[0049.048] Sleep (dwMilliseconds=0x1f4) 
	[0049.711] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x198
	[0049.713] Process32FirstW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0049.714] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0049.714] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0049.715] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0049.715] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0049.715] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0049.716] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0049.716] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0049.716] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0049.717] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0049.717] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.717] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.718] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.718] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.719] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.719] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0049.719] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.720] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.720] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0049.720] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0049.721] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0049.721] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0049.722] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0049.722] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0049.722] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0049.723] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0049.723] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0049.724] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0049.724] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0049.724] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0049.725] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0049.725] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0049.725] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0049.726] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0049.726] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0049.726] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0049.727] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0049.727] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0049.728] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0049.728] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0049.728] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0049.729] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0049.729] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0049.729] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0049.730] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0049.730] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0049.731] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0049.731] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0049.731] CloseHandle (hObject=0x198) returned 1
	[0049.731] Sleep (dwMilliseconds=0x1f4) 
	[0050.332] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x210
	[0050.337] Process32FirstW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0050.337] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0050.338] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0050.338] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0050.338] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0050.339] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0050.339] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0050.340] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0050.340] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0050.340] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0050.341] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.341] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.342] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.342] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.342] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.343] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0050.343] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.343] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.344] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0050.344] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0050.345] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0050.345] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0050.345] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0050.346] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0050.346] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0050.347] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0050.347] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0050.347] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0050.348] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0050.348] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0050.349] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0050.349] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0050.349] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0050.350] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0050.350] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0050.350] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0050.351] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0050.351] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0050.352] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0050.352] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0050.352] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0050.353] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0050.353] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0050.354] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0050.354] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0050.354] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0050.355] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0050.355] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0050.355] CloseHandle (hObject=0x210) returned 1
	[0050.355] Sleep (dwMilliseconds=0x1f4) 
	[0051.076] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x210
	[0051.079] Process32FirstW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0051.080] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0051.081] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0051.081] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0051.081] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0051.082] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0051.082] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0051.083] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0051.083] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0051.083] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0051.084] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.084] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.085] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.085] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.086] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x33, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.086] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0051.086] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.087] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.087] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0051.087] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0051.088] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0051.088] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0051.089] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.089] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0051.089] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0051.090] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0051.090] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0051.091] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0051.091] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0051.091] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0051.092] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0051.092] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0051.093] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0051.093] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0051.093] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0051.094] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0051.094] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0051.095] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0051.095] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0051.095] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0051.096] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0051.096] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0051.097] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0051.097] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0051.097] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0051.098] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0051.098] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0051.099] Process32NextW (in: hSnapshot=0x210, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0051.099] CloseHandle (hObject=0x210) returned 1
	[0051.100] Sleep (dwMilliseconds=0x1f4) 
	[0051.667] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x198
	[0051.669] Process32FirstW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0051.670] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0051.670] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0051.671] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0051.671] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0051.672] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0051.672] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0051.673] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0051.673] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0051.674] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0051.674] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.675] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.675] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.675] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.676] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.676] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0051.677] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.677] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.678] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0051.678] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0051.679] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0051.679] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0051.679] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0051.680] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0051.680] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0051.681] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0051.681] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0051.682] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0051.682] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0051.683] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0051.683] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0051.683] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0051.684] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0051.684] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0051.685] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0051.685] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0051.686] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0051.686] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0051.687] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0051.687] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0051.688] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0051.691] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0051.691] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0051.692] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0051.692] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0051.692] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0051.693] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0051.693] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0051.694] CloseHandle (hObject=0x198) returned 1
	[0051.694] Sleep (dwMilliseconds=0x1f4) 
	[0052.298] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c8
	[0052.300] Process32FirstW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0052.300] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0052.301] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0052.301] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0052.302] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0052.302] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0052.302] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0052.303] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0052.303] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0052.304] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0052.304] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.304] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.305] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.305] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.305] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.306] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0052.306] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.307] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.307] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0052.307] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0052.308] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0052.308] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0052.308] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.309] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0052.309] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0052.310] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0052.310] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0052.310] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0052.311] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0052.311] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0052.312] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0052.312] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0052.313] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0052.313] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0052.313] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0052.314] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0052.314] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0052.314] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0052.315] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0052.315] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0052.316] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0052.316] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0052.316] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0052.317] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0052.317] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0052.317] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0052.318] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0052.318] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0052.319] CloseHandle (hObject=0x1c8) returned 1
	[0052.319] Sleep (dwMilliseconds=0x1f4) 
	[0052.952] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x198
	[0052.954] Process32FirstW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0052.954] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0052.955] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0052.955] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0052.956] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0052.956] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0052.957] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0052.957] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0052.957] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0052.958] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0052.958] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.959] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.959] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.959] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.960] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.960] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0052.961] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.961] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.961] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0052.962] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0052.962] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0052.963] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0052.963] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0052.963] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0052.964] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0052.964] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0052.965] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0052.965] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0052.965] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0052.966] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0052.966] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0052.967] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0052.967] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0052.968] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0052.968] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0052.968] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0052.969] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0052.969] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0052.970] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0052.970] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0052.970] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0052.971] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0052.971] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0052.972] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0052.972] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0052.972] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0052.973] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0052.973] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0052.974] CloseHandle (hObject=0x198) returned 1
	[0052.974] Sleep (dwMilliseconds=0x1f4) 
	[0053.669] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x198
	[0053.671] Process32FirstW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0053.672] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0053.672] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0053.673] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0053.676] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0053.676] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0053.677] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0053.677] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0053.677] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0053.678] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0053.678] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.678] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.679] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.679] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.680] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.680] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0053.680] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.681] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.681] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0053.682] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0053.682] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0053.682] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0053.683] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0053.683] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0053.684] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0053.684] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0053.684] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0053.685] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0053.685] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0053.686] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0053.686] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0053.687] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0053.687] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0053.687] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0053.688] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0053.688] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0053.688] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0053.689] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0053.689] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0053.690] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0053.690] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0053.690] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0053.691] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0053.691] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0053.692] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0053.692] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0053.692] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0053.693] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0053.693] CloseHandle (hObject=0x198) returned 1
	[0053.693] Sleep (dwMilliseconds=0x1f4) 
	[0054.286] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b4
	[0054.295] Process32FirstW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0054.295] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0054.296] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0054.296] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0054.296] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0054.297] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0054.297] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0054.298] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0054.298] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0054.299] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0054.299] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.299] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.300] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.300] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.301] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.301] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0054.301] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.302] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.302] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0054.303] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0054.303] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0054.303] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0054.304] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.304] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0054.304] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0054.305] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0054.305] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0054.306] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0054.306] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0054.306] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0054.307] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0054.307] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0054.308] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0054.308] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0054.309] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0054.310] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0054.310] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0054.310] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0054.311] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0054.311] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0054.311] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0054.312] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0054.312] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0054.313] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0054.313] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0054.313] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0054.314] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0054.314] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0054.315] CloseHandle (hObject=0x1b4) returned 1
	[0054.315] Sleep (dwMilliseconds=0x1f4) 
	[0054.921] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b4
	[0054.923] Process32FirstW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0054.924] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0054.924] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0054.925] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0054.925] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0054.925] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0054.926] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0054.926] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0054.926] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0054.927] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0054.927] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.928] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.928] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.928] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.929] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.929] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0054.930] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.930] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.930] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0054.931] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0054.931] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0054.932] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0054.932] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0054.932] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0054.933] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0054.933] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0054.934] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0054.934] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0054.934] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0054.935] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0054.935] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0054.936] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0054.936] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0054.936] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0054.937] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0054.937] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0054.938] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0054.938] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0054.938] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0054.939] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0054.939] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0054.940] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0054.940] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0054.940] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0054.941] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0054.941] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0054.942] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0054.942] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0054.942] CloseHandle (hObject=0x1b4) returned 1
	[0054.942] Sleep (dwMilliseconds=0x1f4) 
	[0055.542] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b4
	[0055.545] Process32FirstW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0055.545] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0055.546] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0055.546] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0055.547] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0055.548] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0055.549] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0055.549] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0055.549] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0055.550] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0055.550] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0055.551] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0055.551] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0055.551] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0055.552] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0055.552] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0055.553] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0055.553] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0055.553] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0055.554] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0055.554] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0055.555] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0055.555] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0055.555] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0055.556] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0055.556] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0055.556] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0055.557] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0055.557] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0055.558] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0055.558] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0055.559] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0055.559] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0055.559] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0055.560] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0055.560] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0055.560] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0055.561] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0055.561] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0055.562] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0055.562] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0055.562] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0055.563] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0055.563] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0055.564] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0055.564] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0055.564] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0055.565] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0055.565] CloseHandle (hObject=0x1b4) returned 1
	[0055.565] Sleep (dwMilliseconds=0x1f4) 
	[0056.181] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b4
	[0056.183] Process32FirstW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0056.184] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0056.184] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0056.184] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0056.185] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0056.185] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0056.186] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0056.186] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0056.187] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0056.187] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0056.187] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.188] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.188] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.189] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.189] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.189] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0056.190] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.190] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.191] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0056.191] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0056.191] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0056.192] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0056.192] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.193] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0056.193] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0056.193] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0056.194] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0056.194] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0056.194] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0056.195] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0056.195] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0056.196] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0056.196] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0056.197] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0056.197] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0056.197] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0056.198] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0056.198] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0056.198] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0056.199] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0056.199] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0056.200] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0056.200] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0056.201] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0056.201] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0056.201] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0056.202] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0056.202] Process32NextW (in: hSnapshot=0x1b4, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0056.203] CloseHandle (hObject=0x1b4) returned 1
	[0056.203] Sleep (dwMilliseconds=0x1f4) 
	[0056.933] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c
	[0056.936] Process32FirstW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0056.936] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0056.936] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0056.937] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0056.937] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0056.938] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0056.938] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0056.939] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0056.939] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0056.939] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0056.940] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.940] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.941] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.941] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.941] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.942] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0056.942] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.943] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.943] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0056.943] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0056.944] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0056.944] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0056.945] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.945] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0056.945] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0056.946] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0056.946] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0056.947] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0056.947] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0056.947] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0056.948] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0056.948] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0056.949] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0056.949] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0056.949] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0056.950] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0056.950] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0056.951] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0056.951] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0056.951] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0056.952] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0056.952] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0056.953] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0056.953] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0056.953] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0056.954] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0056.954] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0056.955] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0056.955] CloseHandle (hObject=0x21c) returned 1
	[0056.955] Sleep (dwMilliseconds=0x1f4) 
	[0057.539] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c8
	[0057.544] Process32FirstW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0057.545] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0057.545] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0057.546] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0057.546] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0057.546] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0057.547] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0057.547] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0057.548] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0057.548] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0057.549] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.549] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.549] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.550] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.550] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.551] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0057.551] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.551] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.552] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0057.552] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0057.553] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0057.553] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0057.553] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0057.554] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0057.554] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0057.555] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0057.555] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0057.555] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0057.556] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0057.556] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0057.557] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0057.557] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0057.557] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0057.558] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0057.558] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0057.559] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0057.559] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0057.559] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0057.560] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0057.560] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0057.561] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0057.561] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0057.561] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0057.562] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0057.562] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0057.563] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0057.563] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0057.564] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0057.564] CloseHandle (hObject=0x1c8) returned 1
	[0057.564] Sleep (dwMilliseconds=0x1f4) 
	[0058.188] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x194
	[0058.191] Process32FirstW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0058.191] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0058.192] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0058.192] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0058.193] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0058.193] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0058.193] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0058.194] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0058.194] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0058.195] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0058.195] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.196] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.196] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.197] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.197] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.197] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0058.198] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.198] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.199] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0058.199] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0058.200] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0058.200] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0058.200] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.201] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0058.201] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0058.202] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0058.202] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0058.203] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0058.203] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0058.203] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0058.204] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0058.204] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0058.205] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0058.205] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0058.206] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0058.206] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0058.206] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0058.207] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0058.207] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0058.208] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0058.208] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0058.209] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0058.209] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0058.210] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0058.210] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0058.211] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0058.211] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0058.212] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0058.212] CloseHandle (hObject=0x194) returned 1
	[0058.212] Sleep (dwMilliseconds=0x1f4) 
	[0058.869] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c
	[0058.872] Process32FirstW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0058.872] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0058.872] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0058.873] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0058.873] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0058.874] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0058.874] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0058.875] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0058.875] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0058.875] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0058.876] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.876] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.877] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.877] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.877] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.878] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0058.878] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.879] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.879] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0058.880] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0058.880] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0058.881] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0058.881] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.882] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0058.882] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0058.882] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0058.883] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0058.883] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0058.884] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0058.884] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0058.885] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0058.885] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0058.885] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0058.886] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0058.886] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0058.887] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0058.887] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0058.888] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0058.888] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0058.888] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0058.889] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0058.889] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0058.890] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0058.890] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0058.891] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0058.891] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0058.891] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0058.892] Process32NextW (in: hSnapshot=0x21c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0058.892] CloseHandle (hObject=0x21c) returned 1
	[0058.892] Sleep (dwMilliseconds=0x1f4) 
	[0059.551] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x224
	[0059.553] Process32FirstW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0059.554] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0059.554] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0059.554] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0059.555] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0059.555] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0059.555] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0059.556] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0059.556] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0059.557] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0059.557] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.558] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.558] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.558] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.559] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.559] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0059.559] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.560] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.560] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0059.561] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0059.561] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0059.562] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0059.562] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0059.562] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0059.563] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0059.563] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0059.563] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0059.564] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0059.564] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0059.565] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0059.565] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0059.566] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0059.566] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0059.566] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0059.567] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0059.567] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0059.568] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0059.568] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0059.568] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0059.569] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0059.569] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0059.570] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0059.570] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0059.570] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0059.571] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0059.571] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0059.572] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0059.572] Process32NextW (in: hSnapshot=0x224, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0059.572] CloseHandle (hObject=0x224) returned 1
	[0059.572] Sleep (dwMilliseconds=0x1f4) 
	[0060.117] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c8
	[0060.120] Process32FirstW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0060.120] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0060.121] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0060.121] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0060.121] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0060.122] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0060.122] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0060.122] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0060.123] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0060.123] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0060.124] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.124] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.124] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.125] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.125] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.125] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0060.126] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.126] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.127] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0060.127] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0060.127] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0060.128] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0060.128] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.128] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0060.129] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0060.129] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0060.130] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0060.130] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0060.130] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0060.131] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0060.131] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0060.131] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0060.132] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0060.132] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0060.133] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0060.133] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0060.133] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0060.134] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0060.134] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0060.135] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0060.135] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0060.135] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0060.136] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0060.136] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0060.137] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0060.137] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0060.137] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0060.138] Process32NextW (in: hSnapshot=0x1c8, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0060.138] CloseHandle (hObject=0x1c8) returned 1
	[0060.138] Sleep (dwMilliseconds=0x1f4) 
	[0060.678] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x208
	[0060.770] Process32FirstW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0060.770] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0060.771] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0060.771] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0060.771] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0060.772] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0060.772] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0060.773] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0060.773] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0060.773] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0060.774] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.774] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.775] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.775] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.775] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.776] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0060.776] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.777] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.777] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0060.778] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0060.778] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0060.778] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0060.779] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.779] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0060.780] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0060.780] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0060.780] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0060.781] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0060.781] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0060.782] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0060.782] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0060.782] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0060.783] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0060.783] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0060.784] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0060.784] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0060.785] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0060.785] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0060.785] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0060.786] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0060.786] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0060.787] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0060.787] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0060.787] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0060.788] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0060.788] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0060.789] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0060.789] Process32NextW (in: hSnapshot=0x208, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0060.789] CloseHandle (hObject=0x208) returned 1
	[0060.789] Sleep (dwMilliseconds=0x1f4) 
	[0061.864] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0061.866] Process32FirstW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0061.867] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0061.867] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0061.867] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0061.868] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0061.868] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0061.869] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0061.869] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0061.870] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0061.870] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0061.870] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.871] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.871] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.872] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.872] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.872] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0061.873] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.873] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.874] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0061.874] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0061.874] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0061.875] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0061.876] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0061.876] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0061.876] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0061.877] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0061.877] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0061.878] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0061.878] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0061.878] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0061.879] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0061.879] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0061.880] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0061.880] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0061.880] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0061.881] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0061.881] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0061.882] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0061.882] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0061.882] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0061.883] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0061.883] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0061.884] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0061.884] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0061.884] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0061.885] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0061.885] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0061.886] Process32NextW (in: hSnapshot=0x22c, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0061.886] CloseHandle (hObject=0x22c) returned 1
	[0061.886] Sleep (dwMilliseconds=0x1f4) 
	[0062.392] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x198
	[0062.394] Process32FirstW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0062.394] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0062.394] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0062.398] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0062.398] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0062.398] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0062.399] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0062.399] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0062.400] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0062.400] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0062.400] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.401] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.401] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.402] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.402] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.402] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0062.403] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.403] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.404] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0062.404] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0062.404] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0062.405] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0062.407] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.407] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0062.407] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0062.408] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0062.408] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0062.409] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0062.409] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0062.409] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0062.410] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0062.410] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0062.411] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0062.411] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0062.411] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0062.412] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0062.412] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0062.413] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0062.413] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0062.413] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0062.414] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0062.414] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0062.415] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0062.415] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0062.415] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0062.416] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0062.416] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0062.417] Process32NextW (in: hSnapshot=0x198, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0062.417] CloseHandle (hObject=0x198) returned 1
	[0062.417] Sleep (dwMilliseconds=0x1f4) 
	[0062.943] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0062.945] Process32FirstW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0062.945] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0062.946] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0062.946] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0062.947] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0062.947] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0062.948] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0062.948] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0062.948] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0062.949] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0062.949] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.950] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.950] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.950] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.951] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.951] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0062.952] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.952] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.952] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0062.953] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0062.953] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0062.954] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0062.954] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.954] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0062.955] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0062.955] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0062.956] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0062.956] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0062.956] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0062.957] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0062.957] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0062.958] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0062.958] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0062.958] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0062.959] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0062.959] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0062.960] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0062.960] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0062.960] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0062.961] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0062.961] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0062.962] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0062.962] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0062.962] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0062.963] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0062.963] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0062.964] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0062.964] Process32NextW (in: hSnapshot=0x230, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0062.964] CloseHandle (hObject=0x230) returned 1
	[0062.964] Sleep (dwMilliseconds=0x1f4) 
	[0063.560] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1bc
	[0063.562] Process32FirstW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0063.562] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0063.562] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0063.563] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0063.563] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0063.564] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0063.564] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0063.564] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0063.565] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0063.565] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0063.566] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.566] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.566] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.567] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.567] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2b, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.567] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0063.568] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.568] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.569] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0063.569] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0063.569] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0063.570] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0063.570] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.570] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0063.571] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0063.571] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0063.571] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0063.572] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0063.572] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0063.573] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0063.573] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0063.573] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0063.574] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0063.574] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0063.574] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0063.575] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0063.575] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0063.576] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0063.576] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0063.576] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0063.577] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0063.577] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0063.578] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0063.578] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0063.578] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0063.579] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0063.579] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0063.579] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0063.580] Process32NextW (in: hSnapshot=0x1bc, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0063.580] CloseHandle (hObject=0x1bc) returned 1
	[0063.580] Sleep (dwMilliseconds=0x1f4) 
	[0064.140] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x194
	[0064.142] Process32FirstW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0064.142] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0064.143] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0064.143] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0064.144] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0064.144] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0064.144] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0064.145] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0064.145] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0064.146] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0064.146] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.146] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.147] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.147] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.148] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.148] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0064.148] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.149] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.149] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0064.150] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0064.150] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0064.150] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0064.151] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.151] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0064.152] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0064.152] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0064.153] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0064.154] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0064.154] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0064.154] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0064.155] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0064.155] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0064.156] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0064.156] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0064.157] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0064.157] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0064.157] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0064.158] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0064.158] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0064.159] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0064.159] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0064.159] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0064.160] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0064.160] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0064.161] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0064.161] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0064.161] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0064.162] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.162] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0064.163] CloseHandle (hObject=0x194) returned 1
	[0064.163] Sleep (dwMilliseconds=0x1f4) 
	[0064.684] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x194
	[0064.686] Process32FirstW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0064.686] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0064.687] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0064.687] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0064.688] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0064.688] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0064.688] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0064.689] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0064.689] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0064.690] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0064.690] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.691] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.691] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.691] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.692] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.692] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0064.693] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.693] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.693] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0064.694] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0064.694] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0064.695] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0064.695] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.695] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0064.696] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0064.696] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0064.697] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0064.697] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0064.698] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0064.698] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0064.699] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0064.699] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0064.699] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0064.700] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0064.700] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0064.701] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0064.701] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0064.701] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0064.702] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0064.702] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0064.703] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0064.703] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0064.703] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0064.704] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0064.704] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0064.705] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0064.705] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0064.705] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0064.706] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0064.706] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0064.707] CloseHandle (hObject=0x194) returned 1
	[0064.707] Sleep (dwMilliseconds=0x1f4) 
	[0065.256] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x194
	[0065.258] Process32FirstW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0065.258] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0065.259] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0065.259] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0065.259] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0065.260] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0065.260] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0065.261] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0065.261] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0065.261] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0065.262] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.262] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.263] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.263] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.263] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.264] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0065.264] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.265] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.265] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0065.265] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0065.266] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0065.266] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0065.267] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.267] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0065.267] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0065.268] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0065.268] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0065.269] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0065.269] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0065.269] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0065.270] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0065.270] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0065.271] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0065.271] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0065.271] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0065.272] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0065.272] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0065.273] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0065.273] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0065.274] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0065.274] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0065.274] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0065.275] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0065.275] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0065.276] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0065.276] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0065.276] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa18, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0065.277] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.277] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0065.278] Process32NextW (in: hSnapshot=0x194, lppe=0x25ffa24 | out: lppe=0x25ffa24*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0065.278] CloseHandle (hObject=0x194) returned 1
	[0065.278] Sleep (dwMilliseconds=0x1f4) 

Thread:
	id = 8
	os_tid = 0xa28

	[0043.903] GetProcessHeap () returned 0x440000
	[0043.903] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x21a) returned 0x467ab8
	[0043.903] GetProcessHeap () returned 0x440000
	[0043.903] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x28) returned 0x45f518
	[0043.903] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x118
	[0043.903] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x11c
	[0043.903] GetComputerNameW (in: lpBuffer=0x467ac8, nSize=0x289f9f8 | out: lpBuffer="XDUWTFONO", nSize=0x289f9f8) returned 1
	[0043.903] GetProcessHeap () returned 0x440000
	[0043.903] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x26) returned 0x461d30
	[0043.903] GetProcessHeap () returned 0x440000
	[0043.903] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4000) returned 0x467ce0
	[0043.903] GetProcessHeap () returned 0x440000
	[0043.903] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x46bce8
	[0043.904] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f9ac | out: lphEnum=0x289f9ac*=0x463668) returned 0x0
	[0047.167] WNetEnumResourceW (in: hEnum=0x463668, lpcCount=0x289f9a0, lpBuffer=0x467ce0, lpBufferSize=0x289f9b4 | out: lpcCount=0x289f9a0, lpBuffer=0x467ce0, lpBufferSize=0x289f9b4) returned 0x103
	[0047.167] WNetCloseEnum (hEnum=0x463668) returned 0x0
	[0047.167] GetProcessHeap () returned 0x440000
	[0047.167] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0047.167] GetProcessHeap () returned 0x440000
	[0047.167] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x46bce8 | out: hHeap=0x440000) returned 1
	[0047.168] GetProcessHeap () returned 0x440000
	[0047.168] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4000) returned 0x527df0
	[0047.169] GetProcessHeap () returned 0x440000
	[0047.169] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x467ce0
	[0047.169] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f994 | out: lphEnum=0x289f994*=0x462398) returned 0x0
	[0047.170] WNetEnumResourceW (in: hEnum=0x462398, lpcCount=0x289f988, lpBuffer=0x527df0, lpBufferSize=0x289f99c | out: lpcCount=0x289f988, lpBuffer=0x527df0, lpBufferSize=0x289f99c) returned 0x103
	[0047.170] WNetCloseEnum (hEnum=0x462398) returned 0x0
	[0047.170] GetProcessHeap () returned 0x440000
	[0047.170] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x527df0 | out: hHeap=0x440000) returned 1
	[0047.170] GetProcessHeap () returned 0x440000
	[0047.170] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0047.170] GetProcessHeap () returned 0x440000
	[0047.170] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4000) returned 0x527df0
	[0047.170] GetProcessHeap () returned 0x440000
	[0047.170] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x467ce0
	[0047.170] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f97c | out: lphEnum=0x289f97c*=0x463668) returned 0x0
	[0060.495] WNetEnumResourceW (in: hEnum=0x463668, lpcCount=0x289f970, lpBuffer=0x527df0, lpBufferSize=0x289f984 | out: lpcCount=0x289f970, lpBuffer=0x527df0, lpBufferSize=0x289f984) returned 0x0
	[0060.497] WNetCloseEnum (hEnum=0x463668) returned 0x0
	[0060.497] GetProcessHeap () returned 0x440000
	[0060.497] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x527df0 | out: hHeap=0x440000) returned 1
	[0060.497] GetProcessHeap () returned 0x440000
	[0060.497] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0060.497] GetProcessHeap () returned 0x440000
	[0060.498] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4000) returned 0x527df0
	[0060.498] GetProcessHeap () returned 0x440000
	[0060.498] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c915a0
	[0060.498] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f9ac | out: lphEnum=0x289f9ac*=0x4623b8) returned 0x0
	[0060.499] WNetEnumResourceW (in: hEnum=0x4623b8, lpcCount=0x289f9a0, lpBuffer=0x527df0, lpBufferSize=0x289f9b4 | out: lpcCount=0x289f9a0, lpBuffer=0x527df0, lpBufferSize=0x289f9b4) returned 0x103
	[0060.499] WNetCloseEnum (hEnum=0x4623b8) returned 0x0
	[0060.499] GetProcessHeap () returned 0x440000
	[0060.499] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x527df0 | out: hHeap=0x440000) returned 1
	[0060.499] GetProcessHeap () returned 0x440000
	[0060.499] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0060.499] GetProcessHeap () returned 0x440000
	[0060.499] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4000) returned 0x527df0
	[0060.499] GetProcessHeap () returned 0x440000
	[0060.499] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c915a0
	[0060.499] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f994 | out: lphEnum=0x289f994*=0x513000) returned 0x0
	[0060.499] WNetEnumResourceW (in: hEnum=0x513000, lpcCount=0x289f988, lpBuffer=0x527df0, lpBufferSize=0x289f99c | out: lpcCount=0x289f988, lpBuffer=0x527df0, lpBufferSize=0x289f99c) returned 0x0
	[0060.499] WNetCloseEnum (hEnum=0x513000) returned 0x0
	[0060.499] GetProcessHeap () returned 0x440000
	[0060.499] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x527df0 | out: hHeap=0x440000) returned 1
	[0060.499] GetProcessHeap () returned 0x440000
	[0060.499] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0060.499] GetProcessHeap () returned 0x440000
	[0060.500] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x3a98) returned 0x527df0
	[0060.500] GetIpAddrTable (in: pIpAddrTable=0x527df0, pdwSize=0x289f994, bOrder=0 | out: pIpAddrTable=0x527df0, pdwSize=0x289f994) returned 0x0
	[0061.091] htonl (hostlong=0x4700a8c0) returned 0xc0a80047
	[0061.091] htonl (hostlong=0x4700a8c0) returned 0xc0a80047
	[0061.091] htonl (hostlong=0xffffff) returned 0xffffff00
	[0061.091] htons (hostshort=0x1bd) returned 0xbd01
	[0061.091] GetProcessHeap () returned 0x440000
	[0061.091] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x800) returned 0x3ca2238
	[0061.091] GetProcessHeap () returned 0x440000
	[0061.091] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x800) returned 0x3ca2a40
	[0061.091] htonl (hostlong=0xc0a80000) returned 0xa8c0
	[0061.091] socket (af=2, type=1, protocol=6) returned 0x198
	[0061.568] ioctlsocket (in: s=0x198, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.569] connect (s=0x198, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.0"), namelen=16) returned -1
	[0061.596] WSAGetLastError () returned 10035
	[0061.596] htonl (hostlong=0xc0a80001) returned 0x100a8c0
	[0061.596] socket (af=2, type=1, protocol=6) returned 0x22c
	[0061.596] ioctlsocket (in: s=0x22c, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.596] connect (s=0x22c, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.1"), namelen=16) returned -1
	[0061.597] WSAGetLastError () returned 10035
	[0061.597] htonl (hostlong=0xc0a80002) returned 0x200a8c0
	[0061.597] socket (af=2, type=1, protocol=6) returned 0x230
	[0061.597] ioctlsocket (in: s=0x230, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.597] connect (s=0x230, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.2"), namelen=16) returned -1
	[0061.597] WSAGetLastError () returned 10035
	[0061.597] htonl (hostlong=0xc0a80003) returned 0x300a8c0
	[0061.597] socket (af=2, type=1, protocol=6) returned 0x234
	[0061.597] ioctlsocket (in: s=0x234, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.597] connect (s=0x234, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.3"), namelen=16) returned -1
	[0061.598] WSAGetLastError () returned 10035
	[0061.598] htonl (hostlong=0xc0a80004) returned 0x400a8c0
	[0061.598] socket (af=2, type=1, protocol=6) returned 0x238
	[0061.598] ioctlsocket (in: s=0x238, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.598] connect (s=0x238, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.4"), namelen=16) returned -1
	[0061.598] WSAGetLastError () returned 10035
	[0061.598] htonl (hostlong=0xc0a80005) returned 0x500a8c0
	[0061.598] socket (af=2, type=1, protocol=6) returned 0x23c
	[0061.599] ioctlsocket (in: s=0x23c, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.599] connect (s=0x23c, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.5"), namelen=16) returned -1
	[0061.599] WSAGetLastError () returned 10035
	[0061.599] htonl (hostlong=0xc0a80006) returned 0x600a8c0
	[0061.599] socket (af=2, type=1, protocol=6) returned 0x240
	[0061.599] ioctlsocket (in: s=0x240, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.599] connect (s=0x240, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.6"), namelen=16) returned -1
	[0061.600] WSAGetLastError () returned 10035
	[0061.600] htonl (hostlong=0xc0a80007) returned 0x700a8c0
	[0061.600] socket (af=2, type=1, protocol=6) returned 0x244
	[0061.600] ioctlsocket (in: s=0x244, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.600] connect (s=0x244, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.7"), namelen=16) returned -1
	[0061.600] WSAGetLastError () returned 10035
	[0061.600] htonl (hostlong=0xc0a80008) returned 0x800a8c0
	[0061.600] socket (af=2, type=1, protocol=6) returned 0x248
	[0061.601] ioctlsocket (in: s=0x248, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.601] connect (s=0x248, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.8"), namelen=16) returned -1
	[0061.601] WSAGetLastError () returned 10035
	[0061.601] htonl (hostlong=0xc0a80009) returned 0x900a8c0
	[0061.601] socket (af=2, type=1, protocol=6) returned 0x24c
	[0061.601] ioctlsocket (in: s=0x24c, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.601] connect (s=0x24c, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.9"), namelen=16) returned -1
	[0061.602] WSAGetLastError () returned 10035
	[0061.602] htonl (hostlong=0xc0a8000a) returned 0xa00a8c0
	[0061.602] socket (af=2, type=1, protocol=6) returned 0x250
	[0061.602] ioctlsocket (in: s=0x250, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.602] connect (s=0x250, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.10"), namelen=16) returned -1
	[0061.602] WSAGetLastError () returned 10035
	[0061.602] htonl (hostlong=0xc0a8000b) returned 0xb00a8c0
	[0061.602] socket (af=2, type=1, protocol=6) returned 0x254
	[0061.602] ioctlsocket (in: s=0x254, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.602] connect (s=0x254, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.11"), namelen=16) returned -1
	[0061.603] WSAGetLastError () returned 10035
	[0061.603] htonl (hostlong=0xc0a8000c) returned 0xc00a8c0
	[0061.603] socket (af=2, type=1, protocol=6) returned 0x258
	[0061.603] ioctlsocket (in: s=0x258, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.603] connect (s=0x258, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.12"), namelen=16) returned -1
	[0061.603] WSAGetLastError () returned 10035
	[0061.603] htonl (hostlong=0xc0a8000d) returned 0xd00a8c0
	[0061.603] socket (af=2, type=1, protocol=6) returned 0x25c
	[0061.603] ioctlsocket (in: s=0x25c, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.604] connect (s=0x25c, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.13"), namelen=16) returned -1
	[0061.604] WSAGetLastError () returned 10035
	[0061.604] htonl (hostlong=0xc0a8000e) returned 0xe00a8c0
	[0061.604] socket (af=2, type=1, protocol=6) returned 0x260
	[0061.604] ioctlsocket (in: s=0x260, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.604] connect (s=0x260, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.14"), namelen=16) returned -1
	[0061.604] WSAGetLastError () returned 10035
	[0061.605] htonl (hostlong=0xc0a8000f) returned 0xf00a8c0
	[0061.605] socket (af=2, type=1, protocol=6) returned 0x264
	[0061.605] ioctlsocket (in: s=0x264, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.605] connect (s=0x264, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.15"), namelen=16) returned -1
	[0061.605] WSAGetLastError () returned 10035
	[0061.605] htonl (hostlong=0xc0a80010) returned 0x1000a8c0
	[0061.605] socket (af=2, type=1, protocol=6) returned 0x268
	[0061.605] ioctlsocket (in: s=0x268, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.605] connect (s=0x268, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.16"), namelen=16) returned -1
	[0061.606] WSAGetLastError () returned 10035
	[0061.606] htonl (hostlong=0xc0a80011) returned 0x1100a8c0
	[0061.606] socket (af=2, type=1, protocol=6) returned 0x26c
	[0061.606] ioctlsocket (in: s=0x26c, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.607] connect (s=0x26c, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.17"), namelen=16) returned -1
	[0061.607] WSAGetLastError () returned 10035
	[0061.607] htonl (hostlong=0xc0a80012) returned 0x1200a8c0
	[0061.607] socket (af=2, type=1, protocol=6) returned 0x270
	[0061.607] ioctlsocket (in: s=0x270, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.607] connect (s=0x270, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.18"), namelen=16) returned -1
	[0061.608] WSAGetLastError () returned 10035
	[0061.608] htonl (hostlong=0xc0a80013) returned 0x1300a8c0
	[0061.608] socket (af=2, type=1, protocol=6) returned 0x274
	[0061.609] ioctlsocket (in: s=0x274, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.609] connect (s=0x274, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.19"), namelen=16) returned -1
	[0061.609] WSAGetLastError () returned 10035
	[0061.609] htonl (hostlong=0xc0a80014) returned 0x1400a8c0
	[0061.609] socket (af=2, type=1, protocol=6) returned 0x278
	[0061.609] ioctlsocket (in: s=0x278, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.609] connect (s=0x278, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.20"), namelen=16) returned -1
	[0061.610] WSAGetLastError () returned 10035
	[0061.610] htonl (hostlong=0xc0a80015) returned 0x1500a8c0
	[0061.610] socket (af=2, type=1, protocol=6) returned 0x27c
	[0061.610] ioctlsocket (in: s=0x27c, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.610] connect (s=0x27c, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.21"), namelen=16) returned -1
	[0061.610] WSAGetLastError () returned 10035
	[0061.610] htonl (hostlong=0xc0a80016) returned 0x1600a8c0
	[0061.610] socket (af=2, type=1, protocol=6) returned 0x280
	[0061.610] ioctlsocket (in: s=0x280, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.610] connect (s=0x280, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.22"), namelen=16) returned -1
	[0061.611] WSAGetLastError () returned 10035
	[0061.611] htonl (hostlong=0xc0a80017) returned 0x1700a8c0
	[0061.611] socket (af=2, type=1, protocol=6) returned 0x284
	[0061.611] ioctlsocket (in: s=0x284, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.611] connect (s=0x284, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.23"), namelen=16) returned -1
	[0061.611] WSAGetLastError () returned 10035
	[0061.611] htonl (hostlong=0xc0a80018) returned 0x1800a8c0
	[0061.611] socket (af=2, type=1, protocol=6) returned 0x288
	[0061.612] ioctlsocket (in: s=0x288, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.612] connect (s=0x288, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.24"), namelen=16) returned -1
	[0061.612] WSAGetLastError () returned 10035
	[0061.612] htonl (hostlong=0xc0a80019) returned 0x1900a8c0
	[0061.612] socket (af=2, type=1, protocol=6) returned 0x28c
	[0061.612] ioctlsocket (in: s=0x28c, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.612] connect (s=0x28c, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.25"), namelen=16) returned -1
	[0061.613] WSAGetLastError () returned 10035
	[0061.613] htonl (hostlong=0xc0a8001a) returned 0x1a00a8c0
	[0061.613] socket (af=2, type=1, protocol=6) returned 0x290
	[0061.613] ioctlsocket (in: s=0x290, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.613] connect (s=0x290, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.26"), namelen=16) returned -1
	[0061.613] WSAGetLastError () returned 10035
	[0061.613] htonl (hostlong=0xc0a8001b) returned 0x1b00a8c0
	[0061.613] socket (af=2, type=1, protocol=6) returned 0x294
	[0061.613] ioctlsocket (in: s=0x294, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.613] connect (s=0x294, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.27"), namelen=16) returned -1
	[0061.614] WSAGetLastError () returned 10035
	[0061.614] htonl (hostlong=0xc0a8001c) returned 0x1c00a8c0
	[0061.614] socket (af=2, type=1, protocol=6) returned 0x298
	[0061.614] ioctlsocket (in: s=0x298, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.614] connect (s=0x298, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.28"), namelen=16) returned -1
	[0061.614] WSAGetLastError () returned 10035
	[0061.614] htonl (hostlong=0xc0a8001d) returned 0x1d00a8c0
	[0061.614] socket (af=2, type=1, protocol=6) returned 0x29c
	[0061.614] ioctlsocket (in: s=0x29c, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.614] connect (s=0x29c, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.29"), namelen=16) returned -1
	[0061.615] WSAGetLastError () returned 10035
	[0061.615] htonl (hostlong=0xc0a8001e) returned 0x1e00a8c0
	[0061.615] socket (af=2, type=1, protocol=6) returned 0x2a0
	[0061.615] ioctlsocket (in: s=0x2a0, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.615] connect (s=0x2a0, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.30"), namelen=16) returned -1
	[0061.615] WSAGetLastError () returned 10035
	[0061.615] htonl (hostlong=0xc0a8001f) returned 0x1f00a8c0
	[0061.616] socket (af=2, type=1, protocol=6) returned 0x2a4
	[0061.616] ioctlsocket (in: s=0x2a4, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.616] connect (s=0x2a4, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.31"), namelen=16) returned -1
	[0061.616] WSAGetLastError () returned 10035
	[0061.616] htonl (hostlong=0xc0a80020) returned 0x2000a8c0
	[0061.616] socket (af=2, type=1, protocol=6) returned 0x2a8
	[0061.616] ioctlsocket (in: s=0x2a8, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.616] connect (s=0x2a8, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.32"), namelen=16) returned -1
	[0061.617] WSAGetLastError () returned 10035
	[0061.617] htonl (hostlong=0xc0a80021) returned 0x2100a8c0
	[0061.617] socket (af=2, type=1, protocol=6) returned 0x2ac
	[0061.617] ioctlsocket (in: s=0x2ac, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.617] connect (s=0x2ac, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.33"), namelen=16) returned -1
	[0061.617] WSAGetLastError () returned 10035
	[0061.617] htonl (hostlong=0xc0a80022) returned 0x2200a8c0
	[0061.617] socket (af=2, type=1, protocol=6) returned 0x2b0
	[0061.617] ioctlsocket (in: s=0x2b0, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.617] connect (s=0x2b0, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.34"), namelen=16) returned -1
	[0061.618] WSAGetLastError () returned 10035
	[0061.618] htonl (hostlong=0xc0a80023) returned 0x2300a8c0
	[0061.618] socket (af=2, type=1, protocol=6) returned 0x2b4
	[0061.618] ioctlsocket (in: s=0x2b4, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.618] connect (s=0x2b4, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.35"), namelen=16) returned -1
	[0061.618] WSAGetLastError () returned 10035
	[0061.618] htonl (hostlong=0xc0a80024) returned 0x2400a8c0
	[0061.618] socket (af=2, type=1, protocol=6) returned 0x2b8
	[0061.618] ioctlsocket (in: s=0x2b8, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.619] connect (s=0x2b8, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.36"), namelen=16) returned -1
	[0061.619] WSAGetLastError () returned 10035
	[0061.619] htonl (hostlong=0xc0a80025) returned 0x2500a8c0
	[0061.619] socket (af=2, type=1, protocol=6) returned 0x2bc
	[0061.619] ioctlsocket (in: s=0x2bc, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.619] connect (s=0x2bc, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.37"), namelen=16) returned -1
	[0061.619] WSAGetLastError () returned 10035
	[0061.619] htonl (hostlong=0xc0a80026) returned 0x2600a8c0
	[0061.619] socket (af=2, type=1, protocol=6) returned 0x2c0
	[0061.620] ioctlsocket (in: s=0x2c0, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.620] connect (s=0x2c0, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.38"), namelen=16) returned -1
	[0061.620] WSAGetLastError () returned 10035
	[0061.620] htonl (hostlong=0xc0a80027) returned 0x2700a8c0
	[0061.620] socket (af=2, type=1, protocol=6) returned 0x2c4
	[0061.620] ioctlsocket (in: s=0x2c4, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.620] connect (s=0x2c4, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.39"), namelen=16) returned -1
	[0061.621] WSAGetLastError () returned 10035
	[0061.621] htonl (hostlong=0xc0a80028) returned 0x2800a8c0
	[0061.621] socket (af=2, type=1, protocol=6) returned 0x2c8
	[0061.621] ioctlsocket (in: s=0x2c8, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.621] connect (s=0x2c8, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.40"), namelen=16) returned -1
	[0061.621] WSAGetLastError () returned 10035
	[0061.621] htonl (hostlong=0xc0a80029) returned 0x2900a8c0
	[0061.621] socket (af=2, type=1, protocol=6) returned 0x2cc
	[0061.621] ioctlsocket (in: s=0x2cc, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.621] connect (s=0x2cc, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.41"), namelen=16) returned -1
	[0061.622] WSAGetLastError () returned 10035
	[0061.622] htonl (hostlong=0xc0a8002a) returned 0x2a00a8c0
	[0061.622] socket (af=2, type=1, protocol=6) returned 0x2d0
	[0061.622] ioctlsocket (in: s=0x2d0, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.622] connect (s=0x2d0, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.42"), namelen=16) returned -1
	[0061.622] WSAGetLastError () returned 10035
	[0061.622] htonl (hostlong=0xc0a8002b) returned 0x2b00a8c0
	[0061.622] socket (af=2, type=1, protocol=6) returned 0x2d4
	[0061.622] ioctlsocket (in: s=0x2d4, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.622] connect (s=0x2d4, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.43"), namelen=16) returned -1
	[0061.623] WSAGetLastError () returned 10035
	[0061.623] htonl (hostlong=0xc0a8002c) returned 0x2c00a8c0
	[0061.623] socket (af=2, type=1, protocol=6) returned 0x2d8
	[0061.623] ioctlsocket (in: s=0x2d8, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.623] connect (s=0x2d8, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.44"), namelen=16) returned -1
	[0061.623] WSAGetLastError () returned 10035
	[0061.623] htonl (hostlong=0xc0a8002d) returned 0x2d00a8c0
	[0061.623] socket (af=2, type=1, protocol=6) returned 0x2dc
	[0061.624] ioctlsocket (in: s=0x2dc, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.624] connect (s=0x2dc, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.45"), namelen=16) returned -1
	[0061.624] WSAGetLastError () returned 10035
	[0061.624] htonl (hostlong=0xc0a8002e) returned 0x2e00a8c0
	[0061.624] socket (af=2, type=1, protocol=6) returned 0x2e0
	[0061.624] ioctlsocket (in: s=0x2e0, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.624] connect (s=0x2e0, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.46"), namelen=16) returned -1
	[0061.625] WSAGetLastError () returned 10035
	[0061.625] htonl (hostlong=0xc0a8002f) returned 0x2f00a8c0
	[0061.625] socket (af=2, type=1, protocol=6) returned 0x2e4
	[0061.625] ioctlsocket (in: s=0x2e4, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.625] connect (s=0x2e4, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.47"), namelen=16) returned -1
	[0061.625] WSAGetLastError () returned 10035
	[0061.625] htonl (hostlong=0xc0a80030) returned 0x3000a8c0
	[0061.626] socket (af=2, type=1, protocol=6) returned 0x2e8
	[0061.626] ioctlsocket (in: s=0x2e8, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.626] connect (s=0x2e8, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.48"), namelen=16) returned -1
	[0061.626] WSAGetLastError () returned 10035
	[0061.626] htonl (hostlong=0xc0a80031) returned 0x3100a8c0
	[0061.626] socket (af=2, type=1, protocol=6) returned 0x2ec
	[0061.626] ioctlsocket (in: s=0x2ec, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.626] connect (s=0x2ec, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.49"), namelen=16) returned -1
	[0061.627] WSAGetLastError () returned 10035
	[0061.627] htonl (hostlong=0xc0a80032) returned 0x3200a8c0
	[0061.627] socket (af=2, type=1, protocol=6) returned 0x2f0
	[0061.627] ioctlsocket (in: s=0x2f0, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.627] connect (s=0x2f0, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.50"), namelen=16) returned -1
	[0061.627] WSAGetLastError () returned 10035
	[0061.627] htonl (hostlong=0xc0a80033) returned 0x3300a8c0
	[0061.627] socket (af=2, type=1, protocol=6) returned 0x2f4
	[0061.627] ioctlsocket (in: s=0x2f4, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.627] connect (s=0x2f4, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.51"), namelen=16) returned -1
	[0061.628] WSAGetLastError () returned 10035
	[0061.628] htonl (hostlong=0xc0a80034) returned 0x3400a8c0
	[0061.628] socket (af=2, type=1, protocol=6) returned 0x2f8
	[0061.628] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.628] connect (s=0x2f8, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.52"), namelen=16) returned -1
	[0061.629] WSAGetLastError () returned 10035
	[0061.629] htonl (hostlong=0xc0a80035) returned 0x3500a8c0
	[0061.629] socket (af=2, type=1, protocol=6) returned 0x2fc
	[0061.629] ioctlsocket (in: s=0x2fc, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.629] connect (s=0x2fc, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.53"), namelen=16) returned -1
	[0061.629] WSAGetLastError () returned 10035
	[0061.629] htonl (hostlong=0xc0a80036) returned 0x3600a8c0
	[0061.629] socket (af=2, type=1, protocol=6) returned 0x300
	[0061.629] ioctlsocket (in: s=0x300, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.629] connect (s=0x300, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.54"), namelen=16) returned -1
	[0061.630] WSAGetLastError () returned 10035
	[0061.630] htonl (hostlong=0xc0a80037) returned 0x3700a8c0
	[0061.630] socket (af=2, type=1, protocol=6) returned 0x304
	[0061.630] ioctlsocket (in: s=0x304, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.630] connect (s=0x304, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.55"), namelen=16) returned -1
	[0061.630] WSAGetLastError () returned 10035
	[0061.630] htonl (hostlong=0xc0a80038) returned 0x3800a8c0
	[0061.630] socket (af=2, type=1, protocol=6) returned 0x308
	[0061.631] ioctlsocket (in: s=0x308, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.631] connect (s=0x308, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.56"), namelen=16) returned -1
	[0061.631] WSAGetLastError () returned 10035
	[0061.631] htonl (hostlong=0xc0a80039) returned 0x3900a8c0
	[0061.631] socket (af=2, type=1, protocol=6) returned 0x30c
	[0061.631] ioctlsocket (in: s=0x30c, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.631] connect (s=0x30c, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.57"), namelen=16) returned -1
	[0061.631] WSAGetLastError () returned 10035
	[0061.631] htonl (hostlong=0xc0a8003a) returned 0x3a00a8c0
	[0061.631] socket (af=2, type=1, protocol=6) returned 0x310
	[0061.632] ioctlsocket (in: s=0x310, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.632] connect (s=0x310, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.58"), namelen=16) returned -1
	[0061.632] WSAGetLastError () returned 10035
	[0061.632] htonl (hostlong=0xc0a8003b) returned 0x3b00a8c0
	[0061.632] socket (af=2, type=1, protocol=6) returned 0x314
	[0061.632] ioctlsocket (in: s=0x314, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.632] connect (s=0x314, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.59"), namelen=16) returned -1
	[0061.633] WSAGetLastError () returned 10035
	[0061.633] htonl (hostlong=0xc0a8003c) returned 0x3c00a8c0
	[0061.633] socket (af=2, type=1, protocol=6) returned 0x318
	[0061.633] ioctlsocket (in: s=0x318, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.633] connect (s=0x318, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.60"), namelen=16) returned -1
	[0061.633] WSAGetLastError () returned 10035
	[0061.633] htonl (hostlong=0xc0a8003d) returned 0x3d00a8c0
	[0061.633] socket (af=2, type=1, protocol=6) returned 0x31c
	[0061.633] ioctlsocket (in: s=0x31c, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.633] connect (s=0x31c, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.61"), namelen=16) returned -1
	[0061.634] WSAGetLastError () returned 10035
	[0061.634] htonl (hostlong=0xc0a8003e) returned 0x3e00a8c0
	[0061.634] socket (af=2, type=1, protocol=6) returned 0x320
	[0061.634] ioctlsocket (in: s=0x320, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.634] connect (s=0x320, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.62"), namelen=16) returned -1
	[0061.634] WSAGetLastError () returned 10035
	[0061.634] htonl (hostlong=0xc0a8003f) returned 0x3f00a8c0
	[0061.634] socket (af=2, type=1, protocol=6) returned 0x324
	[0061.635] ioctlsocket (in: s=0x324, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.635] connect (s=0x324, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.63"), namelen=16) returned -1
	[0061.635] WSAGetLastError () returned 10035
	[0061.635] htonl (hostlong=0xc0a80040) returned 0x4000a8c0
	[0061.635] socket (af=2, type=1, protocol=6) returned 0x328
	[0061.635] ioctlsocket (in: s=0x328, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.635] connect (s=0x328, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.64"), namelen=16) returned -1
	[0061.635] WSAGetLastError () returned 10035
	[0061.635] htonl (hostlong=0xc0a80041) returned 0x4100a8c0
	[0061.635] socket (af=2, type=1, protocol=6) returned 0x32c
	[0061.636] ioctlsocket (in: s=0x32c, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.636] connect (s=0x32c, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.65"), namelen=16) returned -1
	[0061.636] WSAGetLastError () returned 10035
	[0061.636] htonl (hostlong=0xc0a80042) returned 0x4200a8c0
	[0061.636] socket (af=2, type=1, protocol=6) returned 0x330
	[0061.636] ioctlsocket (in: s=0x330, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.636] connect (s=0x330, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.66"), namelen=16) returned -1
	[0061.637] WSAGetLastError () returned 10035
	[0061.637] htonl (hostlong=0xc0a80043) returned 0x4300a8c0
	[0061.637] socket (af=2, type=1, protocol=6) returned 0x334
	[0061.637] ioctlsocket (in: s=0x334, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.637] connect (s=0x334, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.67"), namelen=16) returned -1
	[0061.637] WSAGetLastError () returned 10035
	[0061.637] htonl (hostlong=0xc0a80044) returned 0x4400a8c0
	[0061.637] socket (af=2, type=1, protocol=6) returned 0x338
	[0061.637] ioctlsocket (in: s=0x338, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.637] connect (s=0x338, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.68"), namelen=16) returned -1
	[0061.638] WSAGetLastError () returned 10035
	[0061.638] htonl (hostlong=0xc0a80045) returned 0x4500a8c0
	[0061.638] socket (af=2, type=1, protocol=6) returned 0x33c
	[0061.638] ioctlsocket (in: s=0x33c, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.638] connect (s=0x33c, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.69"), namelen=16) returned -1
	[0061.638] WSAGetLastError () returned 10035
	[0061.638] htonl (hostlong=0xc0a80046) returned 0x4600a8c0
	[0061.638] socket (af=2, type=1, protocol=6) returned 0x340
	[0061.639] ioctlsocket (in: s=0x340, cmd=-2147195266, argp=0x289f950 | out: argp=0x289f950) returned 0
	[0061.639] connect (s=0x340, name=0x289f938*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.70"), namelen=16) returned -1
	[0061.639] WSAGetLastError () returned 10035
	[0061.639] GetTickCount () returned 0x114a91c
	[0061.639] GetTickCount () returned 0x114a91c
	[0061.639] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.640] GetTickCount () returned 0x114a91c
	[0061.640] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a91c
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.641] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.641] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.642] GetTickCount () returned 0x114a92b
	[0061.642] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.643] GetTickCount () returned 0x114a92b
	[0061.643] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.644] GetTickCount () returned 0x114a92b
	[0061.644] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.645] GetTickCount () returned 0x114a92b
	[0061.645] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.646] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.646] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.647] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.647] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.648] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.648] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.649] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.649] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.650] GetTickCount () returned 0x114a92b
	[0061.650] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.651] GetTickCount () returned 0x114a92b
	[0061.651] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] select (in: nfds=0, readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8, timeout=0x289f8f8 | out: readfds=0x289f7f0, writefds=0x0, exceptfds=0x289f6e8) returned -1
	[0061.652] GetTickCount () returned 0x114a92b
	[0061.652] getsockopt (in: s=0x340, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.652] recv (in: s=0x340, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.653] WSAGetLastError () returned 10057
	[0061.653] closesocket (s=0x340) returned 0
	[0061.653] getsockopt (in: s=0x33c, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.653] recv (in: s=0x33c, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.653] WSAGetLastError () returned 10057
	[0061.653] closesocket (s=0x33c) returned 0
	[0061.654] getsockopt (in: s=0x338, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.654] recv (in: s=0x338, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.654] WSAGetLastError () returned 10057
	[0061.654] closesocket (s=0x338) returned 0
	[0061.654] getsockopt (in: s=0x334, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.654] recv (in: s=0x334, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.654] WSAGetLastError () returned 10057
	[0061.654] closesocket (s=0x334) returned 0
	[0061.654] getsockopt (in: s=0x330, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.654] recv (in: s=0x330, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.654] WSAGetLastError () returned 10057
	[0061.654] closesocket (s=0x330) returned 0
	[0061.654] getsockopt (in: s=0x32c, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.654] recv (in: s=0x32c, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.654] WSAGetLastError () returned 10057
	[0061.654] closesocket (s=0x32c) returned 0
	[0061.655] getsockopt (in: s=0x328, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.655] recv (in: s=0x328, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.655] WSAGetLastError () returned 10057
	[0061.655] closesocket (s=0x328) returned 0
	[0061.655] getsockopt (in: s=0x324, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.655] recv (in: s=0x324, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.655] WSAGetLastError () returned 10057
	[0061.655] closesocket (s=0x324) returned 0
	[0061.655] getsockopt (in: s=0x320, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.655] recv (in: s=0x320, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.655] WSAGetLastError () returned 10057
	[0061.655] closesocket (s=0x320) returned 0
	[0061.655] getsockopt (in: s=0x31c, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.655] recv (in: s=0x31c, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.655] WSAGetLastError () returned 10057
	[0061.655] closesocket (s=0x31c) returned 0
	[0061.655] getsockopt (in: s=0x318, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.655] recv (in: s=0x318, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.655] WSAGetLastError () returned 10057
	[0061.655] closesocket (s=0x318) returned 0
	[0061.656] getsockopt (in: s=0x314, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.656] recv (in: s=0x314, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.656] WSAGetLastError () returned 10057
	[0061.656] closesocket (s=0x314) returned 0
	[0061.656] getsockopt (in: s=0x310, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.656] recv (in: s=0x310, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.656] WSAGetLastError () returned 10057
	[0061.656] closesocket (s=0x310) returned 0
	[0061.656] getsockopt (in: s=0x30c, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.656] recv (in: s=0x30c, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.656] WSAGetLastError () returned 10057
	[0061.656] closesocket (s=0x30c) returned 0
	[0061.656] getsockopt (in: s=0x308, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.656] recv (in: s=0x308, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.657] WSAGetLastError () returned 10057
	[0061.657] closesocket (s=0x308) returned 0
	[0061.657] getsockopt (in: s=0x304, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.657] recv (in: s=0x304, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.657] WSAGetLastError () returned 10057
	[0061.657] closesocket (s=0x304) returned 0
	[0061.657] getsockopt (in: s=0x300, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.657] recv (in: s=0x300, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.657] WSAGetLastError () returned 10057
	[0061.657] closesocket (s=0x300) returned 0
	[0061.657] getsockopt (in: s=0x2fc, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.657] recv (in: s=0x2fc, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.657] WSAGetLastError () returned 10057
	[0061.657] closesocket (s=0x2fc) returned 0
	[0061.657] getsockopt (in: s=0x2f8, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.657] recv (in: s=0x2f8, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.657] WSAGetLastError () returned 10057
	[0061.657] closesocket (s=0x2f8) returned 0
	[0061.658] getsockopt (in: s=0x2f4, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.658] recv (in: s=0x2f4, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.658] WSAGetLastError () returned 10057
	[0061.658] closesocket (s=0x2f4) returned 0
	[0061.658] getsockopt (in: s=0x2f0, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.658] recv (in: s=0x2f0, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.658] WSAGetLastError () returned 10057
	[0061.658] closesocket (s=0x2f0) returned 0
	[0061.658] getsockopt (in: s=0x2ec, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.658] recv (in: s=0x2ec, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.658] WSAGetLastError () returned 10057
	[0061.658] closesocket (s=0x2ec) returned 0
	[0061.658] getsockopt (in: s=0x2e8, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.658] recv (in: s=0x2e8, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.658] WSAGetLastError () returned 10057
	[0061.658] closesocket (s=0x2e8) returned 0
	[0061.658] getsockopt (in: s=0x2e4, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.658] recv (in: s=0x2e4, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.659] WSAGetLastError () returned 10057
	[0061.659] closesocket (s=0x2e4) returned 0
	[0061.659] getsockopt (in: s=0x2e0, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.659] recv (in: s=0x2e0, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.659] WSAGetLastError () returned 10057
	[0061.659] closesocket (s=0x2e0) returned 0
	[0061.659] getsockopt (in: s=0x2dc, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.659] recv (in: s=0x2dc, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.659] WSAGetLastError () returned 10057
	[0061.659] closesocket (s=0x2dc) returned 0
	[0061.659] getsockopt (in: s=0x2d8, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.659] recv (in: s=0x2d8, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.659] WSAGetLastError () returned 10057
	[0061.659] closesocket (s=0x2d8) returned 0
	[0061.659] getsockopt (in: s=0x2d4, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.659] recv (in: s=0x2d4, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.659] WSAGetLastError () returned 10057
	[0061.659] closesocket (s=0x2d4) returned 0
	[0061.659] getsockopt (in: s=0x2d0, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.660] recv (in: s=0x2d0, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.660] WSAGetLastError () returned 10057
	[0061.660] closesocket (s=0x2d0) returned 0
	[0061.660] getsockopt (in: s=0x2cc, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.660] recv (in: s=0x2cc, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.660] WSAGetLastError () returned 10057
	[0061.660] closesocket (s=0x2cc) returned 0
	[0061.660] getsockopt (in: s=0x2c8, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.660] recv (in: s=0x2c8, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.660] WSAGetLastError () returned 10057
	[0061.660] closesocket (s=0x2c8) returned 0
	[0061.660] getsockopt (in: s=0x2c4, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.660] recv (in: s=0x2c4, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.660] WSAGetLastError () returned 10057
	[0061.660] closesocket (s=0x2c4) returned 0
	[0061.660] getsockopt (in: s=0x2c0, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.660] recv (in: s=0x2c0, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.660] WSAGetLastError () returned 10057
	[0061.660] closesocket (s=0x2c0) returned 0
	[0061.661] getsockopt (in: s=0x2bc, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.661] recv (in: s=0x2bc, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.661] WSAGetLastError () returned 10057
	[0061.661] closesocket (s=0x2bc) returned 0
	[0061.661] getsockopt (in: s=0x2b8, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.661] recv (in: s=0x2b8, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.661] WSAGetLastError () returned 10057
	[0061.661] closesocket (s=0x2b8) returned 0
	[0061.661] getsockopt (in: s=0x2b4, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.661] recv (in: s=0x2b4, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.661] WSAGetLastError () returned 10057
	[0061.661] closesocket (s=0x2b4) returned 0
	[0061.661] getsockopt (in: s=0x2b0, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.661] recv (in: s=0x2b0, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.661] WSAGetLastError () returned 10057
	[0061.661] closesocket (s=0x2b0) returned 0
	[0061.661] getsockopt (in: s=0x2ac, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.661] recv (in: s=0x2ac, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.661] WSAGetLastError () returned 10057
	[0061.661] closesocket (s=0x2ac) returned 0
	[0061.662] getsockopt (in: s=0x2a8, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.662] recv (in: s=0x2a8, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.662] WSAGetLastError () returned 10057
	[0061.662] closesocket (s=0x2a8) returned 0
	[0061.662] getsockopt (in: s=0x2a4, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.662] recv (in: s=0x2a4, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.662] WSAGetLastError () returned 10057
	[0061.662] closesocket (s=0x2a4) returned 0
	[0061.662] getsockopt (in: s=0x2a0, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.662] recv (in: s=0x2a0, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.662] WSAGetLastError () returned 10057
	[0061.662] closesocket (s=0x2a0) returned 0
	[0061.662] getsockopt (in: s=0x29c, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.662] recv (in: s=0x29c, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.662] WSAGetLastError () returned 10057
	[0061.662] closesocket (s=0x29c) returned 0
	[0061.662] getsockopt (in: s=0x298, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.662] recv (in: s=0x298, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.663] WSAGetLastError () returned 10057
	[0061.663] closesocket (s=0x298) returned 0
	[0061.663] getsockopt (in: s=0x294, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.663] recv (in: s=0x294, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.663] WSAGetLastError () returned 10057
	[0061.663] closesocket (s=0x294) returned 0
	[0061.663] getsockopt (in: s=0x290, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.663] recv (in: s=0x290, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.663] WSAGetLastError () returned 10057
	[0061.663] closesocket (s=0x290) returned 0
	[0061.663] getsockopt (in: s=0x28c, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.663] recv (in: s=0x28c, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.663] WSAGetLastError () returned 10057
	[0061.663] closesocket (s=0x28c) returned 0
	[0061.663] getsockopt (in: s=0x288, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.663] recv (in: s=0x288, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.663] WSAGetLastError () returned 10057
	[0061.663] closesocket (s=0x288) returned 0
	[0061.663] getsockopt (in: s=0x284, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.664] recv (in: s=0x284, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.664] WSAGetLastError () returned 10057
	[0061.664] closesocket (s=0x284) returned 0
	[0061.664] getsockopt (in: s=0x280, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.664] recv (in: s=0x280, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.664] WSAGetLastError () returned 10057
	[0061.664] closesocket (s=0x280) returned 0
	[0061.664] getsockopt (in: s=0x27c, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.664] recv (in: s=0x27c, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.664] WSAGetLastError () returned 10057
	[0061.664] closesocket (s=0x27c) returned 0
	[0061.664] getsockopt (in: s=0x278, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.664] recv (in: s=0x278, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.664] WSAGetLastError () returned 10057
	[0061.664] closesocket (s=0x278) returned 0
	[0061.664] getsockopt (in: s=0x274, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.664] recv (in: s=0x274, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.664] WSAGetLastError () returned 10057
	[0061.664] closesocket (s=0x274) returned 0
	[0061.665] getsockopt (in: s=0x270, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.665] recv (in: s=0x270, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.665] WSAGetLastError () returned 10057
	[0061.665] closesocket (s=0x270) returned 0
	[0061.665] getsockopt (in: s=0x26c, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.665] recv (in: s=0x26c, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.665] WSAGetLastError () returned 10057
	[0061.665] closesocket (s=0x26c) returned 0
	[0061.665] getsockopt (in: s=0x268, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.665] recv (in: s=0x268, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.665] WSAGetLastError () returned 10057
	[0061.665] closesocket (s=0x268) returned 0
	[0061.665] getsockopt (in: s=0x264, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.665] recv (in: s=0x264, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.665] WSAGetLastError () returned 10057
	[0061.665] closesocket (s=0x264) returned 0
	[0061.665] getsockopt (in: s=0x260, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.665] recv (in: s=0x260, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.665] WSAGetLastError () returned 10057
	[0061.665] closesocket (s=0x260) returned 0
	[0061.666] getsockopt (in: s=0x25c, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.666] recv (in: s=0x25c, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.666] WSAGetLastError () returned 10057
	[0061.666] closesocket (s=0x25c) returned 0
	[0061.666] getsockopt (in: s=0x258, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.666] recv (in: s=0x258, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.666] WSAGetLastError () returned 10057
	[0061.666] closesocket (s=0x258) returned 0
	[0061.666] getsockopt (in: s=0x254, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.666] recv (in: s=0x254, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.666] WSAGetLastError () returned 10057
	[0061.666] closesocket (s=0x254) returned 0
	[0061.666] getsockopt (in: s=0x250, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.666] recv (in: s=0x250, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.666] WSAGetLastError () returned 10057
	[0061.666] closesocket (s=0x250) returned 0
	[0061.666] getsockopt (in: s=0x24c, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.666] recv (in: s=0x24c, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.666] WSAGetLastError () returned 10057
	[0061.667] closesocket (s=0x24c) returned 0
	[0061.667] getsockopt (in: s=0x248, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.667] recv (in: s=0x248, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.667] WSAGetLastError () returned 10057
	[0061.667] closesocket (s=0x248) returned 0
	[0061.667] getsockopt (in: s=0x244, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.667] recv (in: s=0x244, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.667] WSAGetLastError () returned 10057
	[0061.667] closesocket (s=0x244) returned 0
	[0061.667] getsockopt (in: s=0x240, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.667] recv (in: s=0x240, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.667] WSAGetLastError () returned 10057
	[0061.667] closesocket (s=0x240) returned 0
	[0061.667] getsockopt (in: s=0x23c, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.667] recv (in: s=0x23c, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.667] WSAGetLastError () returned 10057
	[0061.667] closesocket (s=0x23c) returned 0
	[0061.668] getsockopt (in: s=0x238, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.668] recv (in: s=0x238, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.668] WSAGetLastError () returned 10057
	[0061.668] closesocket (s=0x238) returned 0
	[0061.668] getsockopt (in: s=0x234, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.668] recv (in: s=0x234, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.668] WSAGetLastError () returned 10057
	[0061.668] closesocket (s=0x234) returned 0
	[0061.668] getsockopt (in: s=0x230, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.668] recv (in: s=0x230, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.668] WSAGetLastError () returned 10057
	[0061.668] closesocket (s=0x230) returned 0
	[0061.668] getsockopt (in: s=0x22c, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.668] recv (in: s=0x22c, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.668] WSAGetLastError () returned 10057
	[0061.668] closesocket (s=0x22c) returned 0
	[0061.668] getsockopt (in: s=0x198, level=65535, optname=4103, optval=0x289f960, optlen=0x289f94c | out: optval="", optlen=0x289f94c) returned 0
	[0061.668] recv (in: s=0x198, buf=0x289f96f, len=1, flags=2 | out: buf=0x289f96f) returned -1
	[0061.668] WSAGetLastError () returned 10057
	[0061.668] closesocket (s=0x198) returned 0
	[0061.669] GetProcessHeap () returned 0x440000
	[0061.669] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3ca2238 | out: hHeap=0x440000) returned 1
	[0061.669] GetProcessHeap () returned 0x440000
	[0061.669] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3ca2a40 | out: hHeap=0x440000) returned 1
	[0061.669] htons (hostshort=0x1bd) returned 0xbd01
	[0061.669] GetProcessHeap () returned 0x440000
	[0061.669] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x800) returned 0x3ca2238
	[0061.669] GetProcessHeap () returned 0x440000
	[0061.669] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x800) returned 0x3ca2a40
	[0061.669] htonl (hostlong=0xc0a80048) returned 0x4800a8c0
	[0061.669] socket (af=2, type=1, protocol=6) returned 0x198
	[0061.669] ioctlsocket (in: s=0x198, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.669] connect (s=0x198, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.72"), namelen=16) returned -1
	[0061.669] WSAGetLastError () returned 10035
	[0061.669] htonl (hostlong=0xc0a80049) returned 0x4900a8c0
	[0061.669] socket (af=2, type=1, protocol=6) returned 0x22c
	[0061.670] ioctlsocket (in: s=0x22c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.670] connect (s=0x22c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.73"), namelen=16) returned -1
	[0061.670] WSAGetLastError () returned 10035
	[0061.670] htonl (hostlong=0xc0a8004a) returned 0x4a00a8c0
	[0061.670] socket (af=2, type=1, protocol=6) returned 0x230
	[0061.670] ioctlsocket (in: s=0x230, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.670] connect (s=0x230, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.74"), namelen=16) returned -1
	[0061.671] WSAGetLastError () returned 10035
	[0061.671] htonl (hostlong=0xc0a8004b) returned 0x4b00a8c0
	[0061.671] socket (af=2, type=1, protocol=6) returned 0x234
	[0061.671] ioctlsocket (in: s=0x234, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.671] connect (s=0x234, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.75"), namelen=16) returned -1
	[0061.671] WSAGetLastError () returned 10035
	[0061.671] htonl (hostlong=0xc0a8004c) returned 0x4c00a8c0
	[0061.671] socket (af=2, type=1, protocol=6) returned 0x238
	[0061.671] ioctlsocket (in: s=0x238, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.671] connect (s=0x238, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.76"), namelen=16) returned -1
	[0061.672] WSAGetLastError () returned 10035
	[0061.672] htonl (hostlong=0xc0a8004d) returned 0x4d00a8c0
	[0061.672] socket (af=2, type=1, protocol=6) returned 0x23c
	[0061.672] ioctlsocket (in: s=0x23c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.672] connect (s=0x23c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.77"), namelen=16) returned -1
	[0061.672] WSAGetLastError () returned 10035
	[0061.672] htonl (hostlong=0xc0a8004e) returned 0x4e00a8c0
	[0061.672] socket (af=2, type=1, protocol=6) returned 0x240
	[0061.672] ioctlsocket (in: s=0x240, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.673] connect (s=0x240, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.78"), namelen=16) returned -1
	[0061.673] WSAGetLastError () returned 10035
	[0061.673] htonl (hostlong=0xc0a8004f) returned 0x4f00a8c0
	[0061.673] socket (af=2, type=1, protocol=6) returned 0x244
	[0061.673] ioctlsocket (in: s=0x244, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.673] connect (s=0x244, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.79"), namelen=16) returned -1
	[0061.673] WSAGetLastError () returned 10035
	[0061.673] htonl (hostlong=0xc0a80050) returned 0x5000a8c0
	[0061.673] socket (af=2, type=1, protocol=6) returned 0x248
	[0061.674] ioctlsocket (in: s=0x248, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.674] connect (s=0x248, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.80"), namelen=16) returned -1
	[0061.674] WSAGetLastError () returned 10035
	[0061.674] htonl (hostlong=0xc0a80051) returned 0x5100a8c0
	[0061.674] socket (af=2, type=1, protocol=6) returned 0x24c
	[0061.674] ioctlsocket (in: s=0x24c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.674] connect (s=0x24c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.81"), namelen=16) returned -1
	[0061.675] WSAGetLastError () returned 10035
	[0061.675] htonl (hostlong=0xc0a80052) returned 0x5200a8c0
	[0061.675] socket (af=2, type=1, protocol=6) returned 0x250
	[0061.675] ioctlsocket (in: s=0x250, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.675] connect (s=0x250, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.82"), namelen=16) returned -1
	[0061.675] WSAGetLastError () returned 10035
	[0061.675] htonl (hostlong=0xc0a80053) returned 0x5300a8c0
	[0061.675] socket (af=2, type=1, protocol=6) returned 0x254
	[0061.675] ioctlsocket (in: s=0x254, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.675] connect (s=0x254, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.83"), namelen=16) returned -1
	[0061.676] WSAGetLastError () returned 10035
	[0061.676] htonl (hostlong=0xc0a80054) returned 0x5400a8c0
	[0061.676] socket (af=2, type=1, protocol=6) returned 0x258
	[0061.676] ioctlsocket (in: s=0x258, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.676] connect (s=0x258, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.84"), namelen=16) returned -1
	[0061.676] WSAGetLastError () returned 10035
	[0061.676] htonl (hostlong=0xc0a80055) returned 0x5500a8c0
	[0061.676] socket (af=2, type=1, protocol=6) returned 0x25c
	[0061.676] ioctlsocket (in: s=0x25c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.676] connect (s=0x25c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.85"), namelen=16) returned -1
	[0061.677] WSAGetLastError () returned 10035
	[0061.677] htonl (hostlong=0xc0a80056) returned 0x5600a8c0
	[0061.677] socket (af=2, type=1, protocol=6) returned 0x260
	[0061.677] ioctlsocket (in: s=0x260, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.677] connect (s=0x260, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.86"), namelen=16) returned -1
	[0061.677] WSAGetLastError () returned 10035
	[0061.677] htonl (hostlong=0xc0a80057) returned 0x5700a8c0
	[0061.677] socket (af=2, type=1, protocol=6) returned 0x264
	[0061.678] ioctlsocket (in: s=0x264, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.678] connect (s=0x264, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.87"), namelen=16) returned -1
	[0061.678] WSAGetLastError () returned 10035
	[0061.678] htonl (hostlong=0xc0a80058) returned 0x5800a8c0
	[0061.678] socket (af=2, type=1, protocol=6) returned 0x268
	[0061.678] ioctlsocket (in: s=0x268, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.678] connect (s=0x268, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.88"), namelen=16) returned -1
	[0061.679] WSAGetLastError () returned 10035
	[0061.679] htonl (hostlong=0xc0a80059) returned 0x5900a8c0
	[0061.679] socket (af=2, type=1, protocol=6) returned 0x26c
	[0061.679] ioctlsocket (in: s=0x26c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.679] connect (s=0x26c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.89"), namelen=16) returned -1
	[0061.679] WSAGetLastError () returned 10035
	[0061.679] htonl (hostlong=0xc0a8005a) returned 0x5a00a8c0
	[0061.679] socket (af=2, type=1, protocol=6) returned 0x270
	[0061.679] ioctlsocket (in: s=0x270, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.679] connect (s=0x270, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.90"), namelen=16) returned -1
	[0061.680] WSAGetLastError () returned 10035
	[0061.680] htonl (hostlong=0xc0a8005b) returned 0x5b00a8c0
	[0061.680] socket (af=2, type=1, protocol=6) returned 0x274
	[0061.680] ioctlsocket (in: s=0x274, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.680] connect (s=0x274, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.91"), namelen=16) returned -1
	[0061.680] WSAGetLastError () returned 10035
	[0061.680] htonl (hostlong=0xc0a8005c) returned 0x5c00a8c0
	[0061.680] socket (af=2, type=1, protocol=6) returned 0x278
	[0061.681] ioctlsocket (in: s=0x278, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.681] connect (s=0x278, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.92"), namelen=16) returned -1
	[0061.681] WSAGetLastError () returned 10035
	[0061.681] htonl (hostlong=0xc0a8005d) returned 0x5d00a8c0
	[0061.681] socket (af=2, type=1, protocol=6) returned 0x27c
	[0061.681] ioctlsocket (in: s=0x27c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.681] connect (s=0x27c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.93"), namelen=16) returned -1
	[0061.681] WSAGetLastError () returned 10035
	[0061.681] htonl (hostlong=0xc0a8005e) returned 0x5e00a8c0
	[0061.681] socket (af=2, type=1, protocol=6) returned 0x280
	[0061.682] ioctlsocket (in: s=0x280, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.682] connect (s=0x280, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.94"), namelen=16) returned -1
	[0061.682] WSAGetLastError () returned 10035
	[0061.682] htonl (hostlong=0xc0a8005f) returned 0x5f00a8c0
	[0061.682] socket (af=2, type=1, protocol=6) returned 0x284
	[0061.682] ioctlsocket (in: s=0x284, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.682] connect (s=0x284, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.95"), namelen=16) returned -1
	[0061.683] WSAGetLastError () returned 10035
	[0061.683] htonl (hostlong=0xc0a80060) returned 0x6000a8c0
	[0061.683] socket (af=2, type=1, protocol=6) returned 0x288
	[0061.683] ioctlsocket (in: s=0x288, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.683] connect (s=0x288, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.96"), namelen=16) returned -1
	[0061.683] WSAGetLastError () returned 10035
	[0061.683] htonl (hostlong=0xc0a80061) returned 0x6100a8c0
	[0061.683] socket (af=2, type=1, protocol=6) returned 0x28c
	[0061.683] ioctlsocket (in: s=0x28c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.683] connect (s=0x28c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.97"), namelen=16) returned -1
	[0061.684] WSAGetLastError () returned 10035
	[0061.684] htonl (hostlong=0xc0a80062) returned 0x6200a8c0
	[0061.684] socket (af=2, type=1, protocol=6) returned 0x290
	[0061.684] ioctlsocket (in: s=0x290, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.684] connect (s=0x290, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.98"), namelen=16) returned -1
	[0061.684] WSAGetLastError () returned 10035
	[0061.684] htonl (hostlong=0xc0a80063) returned 0x6300a8c0
	[0061.684] socket (af=2, type=1, protocol=6) returned 0x294
	[0061.684] ioctlsocket (in: s=0x294, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.684] connect (s=0x294, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.99"), namelen=16) returned -1
	[0061.685] WSAGetLastError () returned 10035
	[0061.685] htonl (hostlong=0xc0a80064) returned 0x6400a8c0
	[0061.685] socket (af=2, type=1, protocol=6) returned 0x298
	[0061.685] ioctlsocket (in: s=0x298, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.685] connect (s=0x298, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.100"), namelen=16) returned -1
	[0061.685] WSAGetLastError () returned 10035
	[0061.685] htonl (hostlong=0xc0a80065) returned 0x6500a8c0
	[0061.685] socket (af=2, type=1, protocol=6) returned 0x29c
	[0061.686] ioctlsocket (in: s=0x29c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.686] connect (s=0x29c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.101"), namelen=16) returned -1
	[0061.686] WSAGetLastError () returned 10035
	[0061.686] htonl (hostlong=0xc0a80066) returned 0x6600a8c0
	[0061.686] socket (af=2, type=1, protocol=6) returned 0x2a0
	[0061.686] ioctlsocket (in: s=0x2a0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.686] connect (s=0x2a0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.102"), namelen=16) returned -1
	[0061.688] WSAGetLastError () returned 10035
	[0061.688] htonl (hostlong=0xc0a80067) returned 0x6700a8c0
	[0061.688] socket (af=2, type=1, protocol=6) returned 0x2a4
	[0061.689] ioctlsocket (in: s=0x2a4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.689] connect (s=0x2a4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.103"), namelen=16) returned -1
	[0061.689] WSAGetLastError () returned 10035
	[0061.689] htonl (hostlong=0xc0a80068) returned 0x6800a8c0
	[0061.689] socket (af=2, type=1, protocol=6) returned 0x2a8
	[0061.689] ioctlsocket (in: s=0x2a8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.689] connect (s=0x2a8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.104"), namelen=16) returned -1
	[0061.690] WSAGetLastError () returned 10035
	[0061.690] htonl (hostlong=0xc0a80069) returned 0x6900a8c0
	[0061.690] socket (af=2, type=1, protocol=6) returned 0x2ac
	[0061.690] ioctlsocket (in: s=0x2ac, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.690] connect (s=0x2ac, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.105"), namelen=16) returned -1
	[0061.690] WSAGetLastError () returned 10035
	[0061.690] htonl (hostlong=0xc0a8006a) returned 0x6a00a8c0
	[0061.690] socket (af=2, type=1, protocol=6) returned 0x2b0
	[0061.690] ioctlsocket (in: s=0x2b0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.690] connect (s=0x2b0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.106"), namelen=16) returned -1
	[0061.691] WSAGetLastError () returned 10035
	[0061.691] htonl (hostlong=0xc0a8006b) returned 0x6b00a8c0
	[0061.691] socket (af=2, type=1, protocol=6) returned 0x2b4
	[0061.691] ioctlsocket (in: s=0x2b4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.691] connect (s=0x2b4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.107"), namelen=16) returned -1
	[0061.691] WSAGetLastError () returned 10035
	[0061.691] htonl (hostlong=0xc0a8006c) returned 0x6c00a8c0
	[0061.691] socket (af=2, type=1, protocol=6) returned 0x2b8
	[0061.691] ioctlsocket (in: s=0x2b8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.691] connect (s=0x2b8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.108"), namelen=16) returned -1
	[0061.692] WSAGetLastError () returned 10035
	[0061.692] htonl (hostlong=0xc0a8006d) returned 0x6d00a8c0
	[0061.692] socket (af=2, type=1, protocol=6) returned 0x2bc
	[0061.692] ioctlsocket (in: s=0x2bc, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.692] connect (s=0x2bc, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.109"), namelen=16) returned -1
	[0061.692] WSAGetLastError () returned 10035
	[0061.692] htonl (hostlong=0xc0a8006e) returned 0x6e00a8c0
	[0061.692] socket (af=2, type=1, protocol=6) returned 0x2c0
	[0061.692] ioctlsocket (in: s=0x2c0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.693] connect (s=0x2c0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.110"), namelen=16) returned -1
	[0061.693] WSAGetLastError () returned 10035
	[0061.693] htonl (hostlong=0xc0a8006f) returned 0x6f00a8c0
	[0061.693] socket (af=2, type=1, protocol=6) returned 0x2c4
	[0061.693] ioctlsocket (in: s=0x2c4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.693] connect (s=0x2c4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.111"), namelen=16) returned -1
	[0061.693] WSAGetLastError () returned 10035
	[0061.693] htonl (hostlong=0xc0a80070) returned 0x7000a8c0
	[0061.693] socket (af=2, type=1, protocol=6) returned 0x2c8
	[0061.694] ioctlsocket (in: s=0x2c8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.694] connect (s=0x2c8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.112"), namelen=16) returned -1
	[0061.694] WSAGetLastError () returned 10035
	[0061.694] htonl (hostlong=0xc0a80071) returned 0x7100a8c0
	[0061.694] socket (af=2, type=1, protocol=6) returned 0x2cc
	[0061.694] ioctlsocket (in: s=0x2cc, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.694] connect (s=0x2cc, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.113"), namelen=16) returned -1
	[0061.695] WSAGetLastError () returned 10035
	[0061.695] htonl (hostlong=0xc0a80072) returned 0x7200a8c0
	[0061.695] socket (af=2, type=1, protocol=6) returned 0x2d0
	[0061.695] ioctlsocket (in: s=0x2d0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.695] connect (s=0x2d0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.114"), namelen=16) returned -1
	[0061.695] WSAGetLastError () returned 10035
	[0061.695] htonl (hostlong=0xc0a80073) returned 0x7300a8c0
	[0061.695] socket (af=2, type=1, protocol=6) returned 0x2d4
	[0061.695] ioctlsocket (in: s=0x2d4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.695] connect (s=0x2d4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.115"), namelen=16) returned -1
	[0061.696] WSAGetLastError () returned 10035
	[0061.696] htonl (hostlong=0xc0a80074) returned 0x7400a8c0
	[0061.696] socket (af=2, type=1, protocol=6) returned 0x2d8
	[0061.696] ioctlsocket (in: s=0x2d8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.696] connect (s=0x2d8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.116"), namelen=16) returned -1
	[0061.697] WSAGetLastError () returned 10035
	[0061.697] htonl (hostlong=0xc0a80075) returned 0x7500a8c0
	[0061.697] socket (af=2, type=1, protocol=6) returned 0x2dc
	[0061.697] ioctlsocket (in: s=0x2dc, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.697] connect (s=0x2dc, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.117"), namelen=16) returned -1
	[0061.697] WSAGetLastError () returned 10035
	[0061.697] htonl (hostlong=0xc0a80076) returned 0x7600a8c0
	[0061.697] socket (af=2, type=1, protocol=6) returned 0x2e0
	[0061.697] ioctlsocket (in: s=0x2e0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.697] connect (s=0x2e0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.118"), namelen=16) returned -1
	[0061.698] WSAGetLastError () returned 10035
	[0061.698] htonl (hostlong=0xc0a80077) returned 0x7700a8c0
	[0061.698] socket (af=2, type=1, protocol=6) returned 0x2e4
	[0061.698] ioctlsocket (in: s=0x2e4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.698] connect (s=0x2e4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.119"), namelen=16) returned -1
	[0061.698] WSAGetLastError () returned 10035
	[0061.698] htonl (hostlong=0xc0a80078) returned 0x7800a8c0
	[0061.698] socket (af=2, type=1, protocol=6) returned 0x2e8
	[0061.699] ioctlsocket (in: s=0x2e8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.699] connect (s=0x2e8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.120"), namelen=16) returned -1
	[0061.699] WSAGetLastError () returned 10035
	[0061.699] htonl (hostlong=0xc0a80079) returned 0x7900a8c0
	[0061.699] socket (af=2, type=1, protocol=6) returned 0x2ec
	[0061.699] ioctlsocket (in: s=0x2ec, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.699] connect (s=0x2ec, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.121"), namelen=16) returned -1
	[0061.700] WSAGetLastError () returned 10035
	[0061.700] htonl (hostlong=0xc0a8007a) returned 0x7a00a8c0
	[0061.700] socket (af=2, type=1, protocol=6) returned 0x2f0
	[0061.700] ioctlsocket (in: s=0x2f0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.700] connect (s=0x2f0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.122"), namelen=16) returned -1
	[0061.700] WSAGetLastError () returned 10035
	[0061.700] htonl (hostlong=0xc0a8007b) returned 0x7b00a8c0
	[0061.700] socket (af=2, type=1, protocol=6) returned 0x2f4
	[0061.700] ioctlsocket (in: s=0x2f4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.700] connect (s=0x2f4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.123"), namelen=16) returned -1
	[0061.701] WSAGetLastError () returned 10035
	[0061.701] htonl (hostlong=0xc0a8007c) returned 0x7c00a8c0
	[0061.701] socket (af=2, type=1, protocol=6) returned 0x2f8
	[0061.701] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.701] connect (s=0x2f8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.124"), namelen=16) returned -1
	[0061.701] WSAGetLastError () returned 10035
	[0061.701] htonl (hostlong=0xc0a8007d) returned 0x7d00a8c0
	[0061.701] socket (af=2, type=1, protocol=6) returned 0x2fc
	[0061.702] ioctlsocket (in: s=0x2fc, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.702] connect (s=0x2fc, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.125"), namelen=16) returned -1
	[0061.702] WSAGetLastError () returned 10035
	[0061.702] htonl (hostlong=0xc0a8007e) returned 0x7e00a8c0
	[0061.702] socket (af=2, type=1, protocol=6) returned 0x300
	[0061.702] ioctlsocket (in: s=0x300, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.702] connect (s=0x300, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.126"), namelen=16) returned -1
	[0061.703] WSAGetLastError () returned 10035
	[0061.703] htonl (hostlong=0xc0a8007f) returned 0x7f00a8c0
	[0061.703] socket (af=2, type=1, protocol=6) returned 0x304
	[0061.703] ioctlsocket (in: s=0x304, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.703] connect (s=0x304, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.127"), namelen=16) returned -1
	[0061.703] WSAGetLastError () returned 10035
	[0061.703] htonl (hostlong=0xc0a80080) returned 0x8000a8c0
	[0061.703] socket (af=2, type=1, protocol=6) returned 0x308
	[0061.703] ioctlsocket (in: s=0x308, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.703] connect (s=0x308, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.128"), namelen=16) returned -1
	[0061.704] WSAGetLastError () returned 10035
	[0061.704] htonl (hostlong=0xc0a80081) returned 0x8100a8c0
	[0061.704] socket (af=2, type=1, protocol=6) returned 0x30c
	[0061.704] ioctlsocket (in: s=0x30c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.704] connect (s=0x30c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.129"), namelen=16) returned -1
	[0061.704] WSAGetLastError () returned 10035
	[0061.704] htonl (hostlong=0xc0a80082) returned 0x8200a8c0
	[0061.704] socket (af=2, type=1, protocol=6) returned 0x310
	[0061.704] ioctlsocket (in: s=0x310, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.704] connect (s=0x310, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.130"), namelen=16) returned -1
	[0061.705] WSAGetLastError () returned 10035
	[0061.705] htonl (hostlong=0xc0a80083) returned 0x8300a8c0
	[0061.705] socket (af=2, type=1, protocol=6) returned 0x314
	[0061.705] ioctlsocket (in: s=0x314, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.705] connect (s=0x314, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.131"), namelen=16) returned -1
	[0061.705] WSAGetLastError () returned 10035
	[0061.705] htonl (hostlong=0xc0a80084) returned 0x8400a8c0
	[0061.705] socket (af=2, type=1, protocol=6) returned 0x318
	[0061.706] ioctlsocket (in: s=0x318, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.706] connect (s=0x318, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.132"), namelen=16) returned -1
	[0061.706] WSAGetLastError () returned 10035
	[0061.706] htonl (hostlong=0xc0a80085) returned 0x8500a8c0
	[0061.706] socket (af=2, type=1, protocol=6) returned 0x31c
	[0061.706] ioctlsocket (in: s=0x31c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.706] connect (s=0x31c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.133"), namelen=16) returned -1
	[0061.707] WSAGetLastError () returned 10035
	[0061.707] htonl (hostlong=0xc0a80086) returned 0x8600a8c0
	[0061.707] socket (af=2, type=1, protocol=6) returned 0x320
	[0061.707] ioctlsocket (in: s=0x320, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.707] connect (s=0x320, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.134"), namelen=16) returned -1
	[0061.707] WSAGetLastError () returned 10035
	[0061.707] htonl (hostlong=0xc0a80087) returned 0x8700a8c0
	[0061.707] socket (af=2, type=1, protocol=6) returned 0x324
	[0061.707] ioctlsocket (in: s=0x324, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.707] connect (s=0x324, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.135"), namelen=16) returned -1
	[0061.708] WSAGetLastError () returned 10035
	[0061.708] htonl (hostlong=0xc0a80088) returned 0x8800a8c0
	[0061.708] socket (af=2, type=1, protocol=6) returned 0x328
	[0061.708] ioctlsocket (in: s=0x328, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.708] connect (s=0x328, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.136"), namelen=16) returned -1
	[0061.710] WSAGetLastError () returned 10035
	[0061.710] htonl (hostlong=0xc0a80089) returned 0x8900a8c0
	[0061.711] socket (af=2, type=1, protocol=6) returned 0x32c
	[0061.711] ioctlsocket (in: s=0x32c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.711] connect (s=0x32c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.137"), namelen=16) returned -1
	[0061.711] WSAGetLastError () returned 10035
	[0061.711] htonl (hostlong=0xc0a8008a) returned 0x8a00a8c0
	[0061.711] socket (af=2, type=1, protocol=6) returned 0x330
	[0061.711] ioctlsocket (in: s=0x330, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.711] connect (s=0x330, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.138"), namelen=16) returned -1
	[0061.712] WSAGetLastError () returned 10035
	[0061.712] htonl (hostlong=0xc0a8008b) returned 0x8b00a8c0
	[0061.712] socket (af=2, type=1, protocol=6) returned 0x334
	[0061.712] ioctlsocket (in: s=0x334, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.712] connect (s=0x334, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.139"), namelen=16) returned -1
	[0061.712] WSAGetLastError () returned 10035
	[0061.712] htonl (hostlong=0xc0a8008c) returned 0x8c00a8c0
	[0061.712] socket (af=2, type=1, protocol=6) returned 0x338
	[0061.712] ioctlsocket (in: s=0x338, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.712] connect (s=0x338, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.140"), namelen=16) returned -1
	[0061.713] WSAGetLastError () returned 10035
	[0061.713] htonl (hostlong=0xc0a8008d) returned 0x8d00a8c0
	[0061.713] socket (af=2, type=1, protocol=6) returned 0x33c
	[0061.713] ioctlsocket (in: s=0x33c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.713] connect (s=0x33c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.141"), namelen=16) returned -1
	[0061.713] WSAGetLastError () returned 10035
	[0061.713] htonl (hostlong=0xc0a8008e) returned 0x8e00a8c0
	[0061.713] socket (af=2, type=1, protocol=6) returned 0x340
	[0061.714] ioctlsocket (in: s=0x340, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.714] connect (s=0x340, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.142"), namelen=16) returned -1
	[0061.714] WSAGetLastError () returned 10035
	[0061.714] htonl (hostlong=0xc0a8008f) returned 0x8f00a8c0
	[0061.714] socket (af=2, type=1, protocol=6) returned 0x344
	[0061.714] ioctlsocket (in: s=0x344, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.714] connect (s=0x344, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.143"), namelen=16) returned -1
	[0061.715] WSAGetLastError () returned 10035
	[0061.715] htonl (hostlong=0xc0a80090) returned 0x9000a8c0
	[0061.715] socket (af=2, type=1, protocol=6) returned 0x348
	[0061.715] ioctlsocket (in: s=0x348, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.715] connect (s=0x348, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.144"), namelen=16) returned -1
	[0061.715] WSAGetLastError () returned 10035
	[0061.715] htonl (hostlong=0xc0a80091) returned 0x9100a8c0
	[0061.715] socket (af=2, type=1, protocol=6) returned 0x34c
	[0061.716] ioctlsocket (in: s=0x34c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.716] connect (s=0x34c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.145"), namelen=16) returned -1
	[0061.716] WSAGetLastError () returned 10035
	[0061.716] htonl (hostlong=0xc0a80092) returned 0x9200a8c0
	[0061.716] socket (af=2, type=1, protocol=6) returned 0x350
	[0061.716] ioctlsocket (in: s=0x350, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.716] connect (s=0x350, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.146"), namelen=16) returned -1
	[0061.716] WSAGetLastError () returned 10035
	[0061.717] htonl (hostlong=0xc0a80093) returned 0x9300a8c0
	[0061.717] socket (af=2, type=1, protocol=6) returned 0x354
	[0061.717] ioctlsocket (in: s=0x354, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.717] connect (s=0x354, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.147"), namelen=16) returned -1
	[0061.717] WSAGetLastError () returned 10035
	[0061.717] htonl (hostlong=0xc0a80094) returned 0x9400a8c0
	[0061.717] socket (af=2, type=1, protocol=6) returned 0x358
	[0061.717] ioctlsocket (in: s=0x358, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.717] connect (s=0x358, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.148"), namelen=16) returned -1
	[0061.718] WSAGetLastError () returned 10035
	[0061.718] htonl (hostlong=0xc0a80095) returned 0x9500a8c0
	[0061.718] socket (af=2, type=1, protocol=6) returned 0x35c
	[0061.718] ioctlsocket (in: s=0x35c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.718] connect (s=0x35c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.149"), namelen=16) returned -1
	[0061.718] WSAGetLastError () returned 10035
	[0061.718] htonl (hostlong=0xc0a80096) returned 0x9600a8c0
	[0061.718] socket (af=2, type=1, protocol=6) returned 0x360
	[0061.718] ioctlsocket (in: s=0x360, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.719] connect (s=0x360, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.150"), namelen=16) returned -1
	[0061.719] WSAGetLastError () returned 10035
	[0061.719] htonl (hostlong=0xc0a80097) returned 0x9700a8c0
	[0061.719] socket (af=2, type=1, protocol=6) returned 0x364
	[0061.719] ioctlsocket (in: s=0x364, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.719] connect (s=0x364, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.151"), namelen=16) returned -1
	[0061.720] WSAGetLastError () returned 10035
	[0061.720] htonl (hostlong=0xc0a80098) returned 0x9800a8c0
	[0061.720] socket (af=2, type=1, protocol=6) returned 0x368
	[0061.720] ioctlsocket (in: s=0x368, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.720] connect (s=0x368, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.152"), namelen=16) returned -1
	[0061.720] WSAGetLastError () returned 10035
	[0061.720] htonl (hostlong=0xc0a80099) returned 0x9900a8c0
	[0061.720] socket (af=2, type=1, protocol=6) returned 0x36c
	[0061.721] ioctlsocket (in: s=0x36c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.721] connect (s=0x36c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.153"), namelen=16) returned -1
	[0061.721] WSAGetLastError () returned 10035
	[0061.721] htonl (hostlong=0xc0a8009a) returned 0x9a00a8c0
	[0061.721] socket (af=2, type=1, protocol=6) returned 0x370
	[0061.721] ioctlsocket (in: s=0x370, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.721] connect (s=0x370, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned -1
	[0061.722] WSAGetLastError () returned 10035
	[0061.722] htonl (hostlong=0xc0a8009b) returned 0x9b00a8c0
	[0061.722] socket (af=2, type=1, protocol=6) returned 0x374
	[0061.722] ioctlsocket (in: s=0x374, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.722] connect (s=0x374, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.155"), namelen=16) returned -1
	[0061.722] WSAGetLastError () returned 10035
	[0061.722] htonl (hostlong=0xc0a8009c) returned 0x9c00a8c0
	[0061.722] socket (af=2, type=1, protocol=6) returned 0x378
	[0061.722] ioctlsocket (in: s=0x378, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.723] connect (s=0x378, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.156"), namelen=16) returned -1
	[0061.723] WSAGetLastError () returned 10035
	[0061.723] htonl (hostlong=0xc0a8009d) returned 0x9d00a8c0
	[0061.723] socket (af=2, type=1, protocol=6) returned 0x37c
	[0061.723] ioctlsocket (in: s=0x37c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.723] connect (s=0x37c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.157"), namelen=16) returned -1
	[0061.723] WSAGetLastError () returned 10035
	[0061.723] htonl (hostlong=0xc0a8009e) returned 0x9e00a8c0
	[0061.724] socket (af=2, type=1, protocol=6) returned 0x380
	[0061.724] ioctlsocket (in: s=0x380, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.724] connect (s=0x380, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.158"), namelen=16) returned -1
	[0061.724] WSAGetLastError () returned 10035
	[0061.724] htonl (hostlong=0xc0a8009f) returned 0x9f00a8c0
	[0061.724] socket (af=2, type=1, protocol=6) returned 0x384
	[0061.724] ioctlsocket (in: s=0x384, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.724] connect (s=0x384, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.159"), namelen=16) returned -1
	[0061.725] WSAGetLastError () returned 10035
	[0061.725] htonl (hostlong=0xc0a800a0) returned 0xa000a8c0
	[0061.725] socket (af=2, type=1, protocol=6) returned 0x388
	[0061.725] ioctlsocket (in: s=0x388, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.725] connect (s=0x388, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.160"), namelen=16) returned -1
	[0061.725] WSAGetLastError () returned 10035
	[0061.725] htonl (hostlong=0xc0a800a1) returned 0xa100a8c0
	[0061.725] socket (af=2, type=1, protocol=6) returned 0x38c
	[0061.725] ioctlsocket (in: s=0x38c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.725] connect (s=0x38c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.161"), namelen=16) returned -1
	[0061.726] WSAGetLastError () returned 10035
	[0061.726] htonl (hostlong=0xc0a800a2) returned 0xa200a8c0
	[0061.726] socket (af=2, type=1, protocol=6) returned 0x390
	[0061.726] ioctlsocket (in: s=0x390, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.726] connect (s=0x390, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.162"), namelen=16) returned -1
	[0061.726] WSAGetLastError () returned 10035
	[0061.726] htonl (hostlong=0xc0a800a3) returned 0xa300a8c0
	[0061.726] socket (af=2, type=1, protocol=6) returned 0x394
	[0061.727] ioctlsocket (in: s=0x394, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.727] connect (s=0x394, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.163"), namelen=16) returned -1
	[0061.727] WSAGetLastError () returned 10035
	[0061.727] htonl (hostlong=0xc0a800a4) returned 0xa400a8c0
	[0061.727] socket (af=2, type=1, protocol=6) returned 0x398
	[0061.727] ioctlsocket (in: s=0x398, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.727] connect (s=0x398, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.164"), namelen=16) returned -1
	[0061.728] WSAGetLastError () returned 10035
	[0061.728] htonl (hostlong=0xc0a800a5) returned 0xa500a8c0
	[0061.728] socket (af=2, type=1, protocol=6) returned 0x39c
	[0061.728] ioctlsocket (in: s=0x39c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.728] connect (s=0x39c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.165"), namelen=16) returned -1
	[0061.728] WSAGetLastError () returned 10035
	[0061.728] htonl (hostlong=0xc0a800a6) returned 0xa600a8c0
	[0061.728] socket (af=2, type=1, protocol=6) returned 0x3a0
	[0061.728] ioctlsocket (in: s=0x3a0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.728] connect (s=0x3a0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.166"), namelen=16) returned -1
	[0061.729] WSAGetLastError () returned 10035
	[0061.729] htonl (hostlong=0xc0a800a7) returned 0xa700a8c0
	[0061.729] socket (af=2, type=1, protocol=6) returned 0x3a4
	[0061.729] ioctlsocket (in: s=0x3a4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.729] connect (s=0x3a4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.167"), namelen=16) returned -1
	[0061.729] WSAGetLastError () returned 10035
	[0061.729] htonl (hostlong=0xc0a800a8) returned 0xa800a8c0
	[0061.729] socket (af=2, type=1, protocol=6) returned 0x3a8
	[0061.730] ioctlsocket (in: s=0x3a8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.730] connect (s=0x3a8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.168"), namelen=16) returned -1
	[0061.730] WSAGetLastError () returned 10035
	[0061.730] htonl (hostlong=0xc0a800a9) returned 0xa900a8c0
	[0061.730] socket (af=2, type=1, protocol=6) returned 0x3ac
	[0061.730] ioctlsocket (in: s=0x3ac, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.730] connect (s=0x3ac, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.169"), namelen=16) returned -1
	[0061.731] WSAGetLastError () returned 10035
	[0061.731] htonl (hostlong=0xc0a800aa) returned 0xaa00a8c0
	[0061.731] socket (af=2, type=1, protocol=6) returned 0x3b0
	[0061.731] ioctlsocket (in: s=0x3b0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.731] connect (s=0x3b0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.170"), namelen=16) returned -1
	[0061.731] WSAGetLastError () returned 10035
	[0061.731] htonl (hostlong=0xc0a800ab) returned 0xab00a8c0
	[0061.731] socket (af=2, type=1, protocol=6) returned 0x3b4
	[0061.731] ioctlsocket (in: s=0x3b4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.731] connect (s=0x3b4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.171"), namelen=16) returned -1
	[0061.732] WSAGetLastError () returned 10035
	[0061.732] htonl (hostlong=0xc0a800ac) returned 0xac00a8c0
	[0061.732] socket (af=2, type=1, protocol=6) returned 0x3b8
	[0061.732] ioctlsocket (in: s=0x3b8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.732] connect (s=0x3b8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.172"), namelen=16) returned -1
	[0061.732] WSAGetLastError () returned 10035
	[0061.732] htonl (hostlong=0xc0a800ad) returned 0xad00a8c0
	[0061.732] socket (af=2, type=1, protocol=6) returned 0x3bc
	[0061.733] ioctlsocket (in: s=0x3bc, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.733] connect (s=0x3bc, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.173"), namelen=16) returned -1
	[0061.733] WSAGetLastError () returned 10035
	[0061.733] htonl (hostlong=0xc0a800ae) returned 0xae00a8c0
	[0061.733] socket (af=2, type=1, protocol=6) returned 0x3c0
	[0061.733] ioctlsocket (in: s=0x3c0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.733] connect (s=0x3c0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.174"), namelen=16) returned -1
	[0061.734] WSAGetLastError () returned 10035
	[0061.734] htonl (hostlong=0xc0a800af) returned 0xaf00a8c0
	[0061.734] socket (af=2, type=1, protocol=6) returned 0x3c4
	[0061.734] ioctlsocket (in: s=0x3c4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.734] connect (s=0x3c4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.175"), namelen=16) returned -1
	[0061.734] WSAGetLastError () returned 10035
	[0061.734] htonl (hostlong=0xc0a800b0) returned 0xb000a8c0
	[0061.734] socket (af=2, type=1, protocol=6) returned 0x3c8
	[0061.734] ioctlsocket (in: s=0x3c8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.734] connect (s=0x3c8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.176"), namelen=16) returned -1
	[0061.735] WSAGetLastError () returned 10035
	[0061.735] htonl (hostlong=0xc0a800b1) returned 0xb100a8c0
	[0061.735] socket (af=2, type=1, protocol=6) returned 0x3cc
	[0061.735] ioctlsocket (in: s=0x3cc, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.735] connect (s=0x3cc, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.177"), namelen=16) returned -1
	[0061.735] WSAGetLastError () returned 10035
	[0061.736] htonl (hostlong=0xc0a800b2) returned 0xb200a8c0
	[0061.736] socket (af=2, type=1, protocol=6) returned 0x3d0
	[0061.736] ioctlsocket (in: s=0x3d0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.736] connect (s=0x3d0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.178"), namelen=16) returned -1
	[0061.736] WSAGetLastError () returned 10035
	[0061.736] htonl (hostlong=0xc0a800b3) returned 0xb300a8c0
	[0061.736] socket (af=2, type=1, protocol=6) returned 0x3d4
	[0061.736] ioctlsocket (in: s=0x3d4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.736] connect (s=0x3d4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.179"), namelen=16) returned -1
	[0061.737] WSAGetLastError () returned 10035
	[0061.737] htonl (hostlong=0xc0a800b4) returned 0xb400a8c0
	[0061.737] socket (af=2, type=1, protocol=6) returned 0x3d8
	[0061.737] ioctlsocket (in: s=0x3d8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.737] connect (s=0x3d8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.180"), namelen=16) returned -1
	[0061.737] WSAGetLastError () returned 10035
	[0061.737] htonl (hostlong=0xc0a800b5) returned 0xb500a8c0
	[0061.737] socket (af=2, type=1, protocol=6) returned 0x3dc
	[0061.738] ioctlsocket (in: s=0x3dc, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.738] connect (s=0x3dc, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.181"), namelen=16) returned -1
	[0061.738] WSAGetLastError () returned 10035
	[0061.738] htonl (hostlong=0xc0a800b6) returned 0xb600a8c0
	[0061.738] socket (af=2, type=1, protocol=6) returned 0x3e0
	[0061.738] ioctlsocket (in: s=0x3e0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.738] connect (s=0x3e0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.182"), namelen=16) returned -1
	[0061.739] WSAGetLastError () returned 10035
	[0061.739] htonl (hostlong=0xc0a800b7) returned 0xb700a8c0
	[0061.739] socket (af=2, type=1, protocol=6) returned 0x3e4
	[0061.739] ioctlsocket (in: s=0x3e4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.739] connect (s=0x3e4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.183"), namelen=16) returned -1
	[0061.739] WSAGetLastError () returned 10035
	[0061.739] htonl (hostlong=0xc0a800b8) returned 0xb800a8c0
	[0061.739] socket (af=2, type=1, protocol=6) returned 0x3e8
	[0061.739] ioctlsocket (in: s=0x3e8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.739] connect (s=0x3e8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.184"), namelen=16) returned -1
	[0061.740] WSAGetLastError () returned 10035
	[0061.740] htonl (hostlong=0xc0a800b9) returned 0xb900a8c0
	[0061.740] socket (af=2, type=1, protocol=6) returned 0x3ec
	[0061.740] ioctlsocket (in: s=0x3ec, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.740] connect (s=0x3ec, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.185"), namelen=16) returned -1
	[0061.741] WSAGetLastError () returned 10035
	[0061.741] htonl (hostlong=0xc0a800ba) returned 0xba00a8c0
	[0061.741] socket (af=2, type=1, protocol=6) returned 0x3f0
	[0061.741] ioctlsocket (in: s=0x3f0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.741] connect (s=0x3f0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.186"), namelen=16) returned -1
	[0061.741] WSAGetLastError () returned 10035
	[0061.741] htonl (hostlong=0xc0a800bb) returned 0xbb00a8c0
	[0061.742] socket (af=2, type=1, protocol=6) returned 0x3f4
	[0061.742] ioctlsocket (in: s=0x3f4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.742] connect (s=0x3f4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.187"), namelen=16) returned -1
	[0061.742] WSAGetLastError () returned 10035
	[0061.742] htonl (hostlong=0xc0a800bc) returned 0xbc00a8c0
	[0061.742] socket (af=2, type=1, protocol=6) returned 0x3f8
	[0061.742] ioctlsocket (in: s=0x3f8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.742] connect (s=0x3f8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.188"), namelen=16) returned -1
	[0061.743] WSAGetLastError () returned 10035
	[0061.743] htonl (hostlong=0xc0a800bd) returned 0xbd00a8c0
	[0061.743] socket (af=2, type=1, protocol=6) returned 0x3fc
	[0061.743] ioctlsocket (in: s=0x3fc, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.743] connect (s=0x3fc, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.189"), namelen=16) returned -1
	[0061.744] WSAGetLastError () returned 10035
	[0061.744] htonl (hostlong=0xc0a800be) returned 0xbe00a8c0
	[0061.744] socket (af=2, type=1, protocol=6) returned 0x404
	[0061.744] ioctlsocket (in: s=0x404, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.744] connect (s=0x404, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.190"), namelen=16) returned -1
	[0061.744] WSAGetLastError () returned 10035
	[0061.744] htonl (hostlong=0xc0a800bf) returned 0xbf00a8c0
	[0061.744] socket (af=2, type=1, protocol=6) returned 0x408
	[0061.744] ioctlsocket (in: s=0x408, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.744] connect (s=0x408, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.191"), namelen=16) returned -1
	[0061.745] WSAGetLastError () returned 10035
	[0061.745] htonl (hostlong=0xc0a800c0) returned 0xc000a8c0
	[0061.745] socket (af=2, type=1, protocol=6) returned 0x40c
	[0061.745] ioctlsocket (in: s=0x40c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.745] connect (s=0x40c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.192"), namelen=16) returned -1
	[0061.745] WSAGetLastError () returned 10035
	[0061.745] htonl (hostlong=0xc0a800c1) returned 0xc100a8c0
	[0061.746] socket (af=2, type=1, protocol=6) returned 0x410
	[0061.746] ioctlsocket (in: s=0x410, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.746] connect (s=0x410, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.193"), namelen=16) returned -1
	[0061.746] WSAGetLastError () returned 10035
	[0061.746] htonl (hostlong=0xc0a800c2) returned 0xc200a8c0
	[0061.746] socket (af=2, type=1, protocol=6) returned 0x414
	[0061.746] ioctlsocket (in: s=0x414, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.746] connect (s=0x414, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.194"), namelen=16) returned -1
	[0061.747] WSAGetLastError () returned 10035
	[0061.747] htonl (hostlong=0xc0a800c3) returned 0xc300a8c0
	[0061.747] socket (af=2, type=1, protocol=6) returned 0x418
	[0061.747] ioctlsocket (in: s=0x418, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.747] connect (s=0x418, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.195"), namelen=16) returned -1
	[0061.747] WSAGetLastError () returned 10035
	[0061.747] htonl (hostlong=0xc0a800c4) returned 0xc400a8c0
	[0061.747] socket (af=2, type=1, protocol=6) returned 0x41c
	[0061.748] ioctlsocket (in: s=0x41c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.748] connect (s=0x41c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.196"), namelen=16) returned -1
	[0061.748] WSAGetLastError () returned 10035
	[0061.748] htonl (hostlong=0xc0a800c5) returned 0xc500a8c0
	[0061.748] socket (af=2, type=1, protocol=6) returned 0x420
	[0061.748] ioctlsocket (in: s=0x420, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.748] connect (s=0x420, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.197"), namelen=16) returned -1
	[0061.749] WSAGetLastError () returned 10035
	[0061.749] htonl (hostlong=0xc0a800c6) returned 0xc600a8c0
	[0061.749] socket (af=2, type=1, protocol=6) returned 0x424
	[0061.749] ioctlsocket (in: s=0x424, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.749] connect (s=0x424, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.198"), namelen=16) returned -1
	[0061.749] WSAGetLastError () returned 10035
	[0061.749] htonl (hostlong=0xc0a800c7) returned 0xc700a8c0
	[0061.749] socket (af=2, type=1, protocol=6) returned 0x428
	[0061.749] ioctlsocket (in: s=0x428, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.749] connect (s=0x428, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.199"), namelen=16) returned -1
	[0061.750] WSAGetLastError () returned 10035
	[0061.750] htonl (hostlong=0xc0a800c8) returned 0xc800a8c0
	[0061.750] socket (af=2, type=1, protocol=6) returned 0x42c
	[0061.750] ioctlsocket (in: s=0x42c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.750] connect (s=0x42c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.200"), namelen=16) returned -1
	[0061.751] WSAGetLastError () returned 10035
	[0061.751] htonl (hostlong=0xc0a800c9) returned 0xc900a8c0
	[0061.751] socket (af=2, type=1, protocol=6) returned 0x430
	[0061.751] ioctlsocket (in: s=0x430, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.751] connect (s=0x430, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.201"), namelen=16) returned -1
	[0061.751] WSAGetLastError () returned 10035
	[0061.751] htonl (hostlong=0xc0a800ca) returned 0xca00a8c0
	[0061.751] socket (af=2, type=1, protocol=6) returned 0x434
	[0061.751] ioctlsocket (in: s=0x434, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.751] connect (s=0x434, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.202"), namelen=16) returned -1
	[0061.752] WSAGetLastError () returned 10035
	[0061.752] htonl (hostlong=0xc0a800cb) returned 0xcb00a8c0
	[0061.752] socket (af=2, type=1, protocol=6) returned 0x438
	[0061.752] ioctlsocket (in: s=0x438, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.752] connect (s=0x438, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.203"), namelen=16) returned -1
	[0061.752] WSAGetLastError () returned 10035
	[0061.752] htonl (hostlong=0xc0a800cc) returned 0xcc00a8c0
	[0061.753] socket (af=2, type=1, protocol=6) returned 0x43c
	[0061.753] ioctlsocket (in: s=0x43c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.753] connect (s=0x43c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.204"), namelen=16) returned -1
	[0061.753] WSAGetLastError () returned 10035
	[0061.753] htonl (hostlong=0xc0a800cd) returned 0xcd00a8c0
	[0061.753] socket (af=2, type=1, protocol=6) returned 0x440
	[0061.753] ioctlsocket (in: s=0x440, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.753] connect (s=0x440, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.205"), namelen=16) returned -1
	[0061.754] WSAGetLastError () returned 10035
	[0061.754] htonl (hostlong=0xc0a800ce) returned 0xce00a8c0
	[0061.754] socket (af=2, type=1, protocol=6) returned 0x444
	[0061.754] ioctlsocket (in: s=0x444, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.754] connect (s=0x444, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.206"), namelen=16) returned -1
	[0061.754] WSAGetLastError () returned 10035
	[0061.754] htonl (hostlong=0xc0a800cf) returned 0xcf00a8c0
	[0061.754] socket (af=2, type=1, protocol=6) returned 0x448
	[0061.755] ioctlsocket (in: s=0x448, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.755] connect (s=0x448, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.207"), namelen=16) returned -1
	[0061.755] WSAGetLastError () returned 10035
	[0061.755] htonl (hostlong=0xc0a800d0) returned 0xd000a8c0
	[0061.755] socket (af=2, type=1, protocol=6) returned 0x44c
	[0061.755] ioctlsocket (in: s=0x44c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.756] connect (s=0x44c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.208"), namelen=16) returned -1
	[0061.756] WSAGetLastError () returned 10035
	[0061.756] htonl (hostlong=0xc0a800d1) returned 0xd100a8c0
	[0061.756] socket (af=2, type=1, protocol=6) returned 0x450
	[0061.756] ioctlsocket (in: s=0x450, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.756] connect (s=0x450, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.209"), namelen=16) returned -1
	[0061.756] WSAGetLastError () returned 10035
	[0061.757] htonl (hostlong=0xc0a800d2) returned 0xd200a8c0
	[0061.757] socket (af=2, type=1, protocol=6) returned 0x454
	[0061.757] ioctlsocket (in: s=0x454, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.757] connect (s=0x454, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.210"), namelen=16) returned -1
	[0061.757] WSAGetLastError () returned 10035
	[0061.757] htonl (hostlong=0xc0a800d3) returned 0xd300a8c0
	[0061.757] socket (af=2, type=1, protocol=6) returned 0x458
	[0061.757] ioctlsocket (in: s=0x458, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.757] connect (s=0x458, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.211"), namelen=16) returned -1
	[0061.758] WSAGetLastError () returned 10035
	[0061.758] htonl (hostlong=0xc0a800d4) returned 0xd400a8c0
	[0061.758] socket (af=2, type=1, protocol=6) returned 0x45c
	[0061.758] ioctlsocket (in: s=0x45c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.758] connect (s=0x45c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.212"), namelen=16) returned -1
	[0061.758] WSAGetLastError () returned 10035
	[0061.758] htonl (hostlong=0xc0a800d5) returned 0xd500a8c0
	[0061.758] socket (af=2, type=1, protocol=6) returned 0x460
	[0061.759] ioctlsocket (in: s=0x460, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.759] connect (s=0x460, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.213"), namelen=16) returned -1
	[0061.759] WSAGetLastError () returned 10035
	[0061.759] htonl (hostlong=0xc0a800d6) returned 0xd600a8c0
	[0061.759] socket (af=2, type=1, protocol=6) returned 0x464
	[0061.759] ioctlsocket (in: s=0x464, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.759] connect (s=0x464, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.214"), namelen=16) returned -1
	[0061.759] WSAGetLastError () returned 10035
	[0061.760] htonl (hostlong=0xc0a800d7) returned 0xd700a8c0
	[0061.760] socket (af=2, type=1, protocol=6) returned 0x468
	[0061.760] ioctlsocket (in: s=0x468, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.760] connect (s=0x468, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.215"), namelen=16) returned -1
	[0061.760] WSAGetLastError () returned 10035
	[0061.760] htonl (hostlong=0xc0a800d8) returned 0xd800a8c0
	[0061.760] socket (af=2, type=1, protocol=6) returned 0x46c
	[0061.760] ioctlsocket (in: s=0x46c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.760] connect (s=0x46c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.216"), namelen=16) returned -1
	[0061.761] WSAGetLastError () returned 10035
	[0061.761] htonl (hostlong=0xc0a800d9) returned 0xd900a8c0
	[0061.761] socket (af=2, type=1, protocol=6) returned 0x470
	[0061.761] ioctlsocket (in: s=0x470, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.761] connect (s=0x470, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.217"), namelen=16) returned -1
	[0061.761] WSAGetLastError () returned 10035
	[0061.761] htonl (hostlong=0xc0a800da) returned 0xda00a8c0
	[0061.761] socket (af=2, type=1, protocol=6) returned 0x474
	[0061.761] ioctlsocket (in: s=0x474, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.762] connect (s=0x474, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.218"), namelen=16) returned -1
	[0061.762] WSAGetLastError () returned 10035
	[0061.762] htonl (hostlong=0xc0a800db) returned 0xdb00a8c0
	[0061.762] socket (af=2, type=1, protocol=6) returned 0x478
	[0061.762] ioctlsocket (in: s=0x478, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.762] connect (s=0x478, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.219"), namelen=16) returned -1
	[0061.762] WSAGetLastError () returned 10035
	[0061.763] htonl (hostlong=0xc0a800dc) returned 0xdc00a8c0
	[0061.763] socket (af=2, type=1, protocol=6) returned 0x47c
	[0061.763] ioctlsocket (in: s=0x47c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.763] connect (s=0x47c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.220"), namelen=16) returned -1
	[0061.763] WSAGetLastError () returned 10035
	[0061.763] htonl (hostlong=0xc0a800dd) returned 0xdd00a8c0
	[0061.763] socket (af=2, type=1, protocol=6) returned 0x480
	[0061.763] ioctlsocket (in: s=0x480, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.763] connect (s=0x480, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.221"), namelen=16) returned -1
	[0061.764] WSAGetLastError () returned 10035
	[0061.764] htonl (hostlong=0xc0a800de) returned 0xde00a8c0
	[0061.764] socket (af=2, type=1, protocol=6) returned 0x484
	[0061.764] ioctlsocket (in: s=0x484, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.764] connect (s=0x484, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.222"), namelen=16) returned -1
	[0061.764] WSAGetLastError () returned 10035
	[0061.764] htonl (hostlong=0xc0a800df) returned 0xdf00a8c0
	[0061.764] socket (af=2, type=1, protocol=6) returned 0x488
	[0061.765] ioctlsocket (in: s=0x488, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.765] connect (s=0x488, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.223"), namelen=16) returned -1
	[0061.765] WSAGetLastError () returned 10035
	[0061.765] htonl (hostlong=0xc0a800e0) returned 0xe000a8c0
	[0061.765] socket (af=2, type=1, protocol=6) returned 0x48c
	[0061.765] ioctlsocket (in: s=0x48c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.766] connect (s=0x48c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.224"), namelen=16) returned -1
	[0061.766] WSAGetLastError () returned 10035
	[0061.766] htonl (hostlong=0xc0a800e1) returned 0xe100a8c0
	[0061.766] socket (af=2, type=1, protocol=6) returned 0x490
	[0061.766] ioctlsocket (in: s=0x490, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.766] connect (s=0x490, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.225"), namelen=16) returned -1
	[0061.767] WSAGetLastError () returned 10035
	[0061.767] htonl (hostlong=0xc0a800e2) returned 0xe200a8c0
	[0061.767] socket (af=2, type=1, protocol=6) returned 0x494
	[0061.767] ioctlsocket (in: s=0x494, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.767] connect (s=0x494, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.226"), namelen=16) returned -1
	[0061.767] WSAGetLastError () returned 10035
	[0061.767] htonl (hostlong=0xc0a800e3) returned 0xe300a8c0
	[0061.767] socket (af=2, type=1, protocol=6) returned 0x498
	[0061.767] ioctlsocket (in: s=0x498, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.767] connect (s=0x498, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.227"), namelen=16) returned -1
	[0061.768] WSAGetLastError () returned 10035
	[0061.768] htonl (hostlong=0xc0a800e4) returned 0xe400a8c0
	[0061.768] socket (af=2, type=1, protocol=6) returned 0x49c
	[0061.768] ioctlsocket (in: s=0x49c, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.768] connect (s=0x49c, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.228"), namelen=16) returned -1
	[0061.768] WSAGetLastError () returned 10035
	[0061.768] htonl (hostlong=0xc0a800e5) returned 0xe500a8c0
	[0061.768] socket (af=2, type=1, protocol=6) returned 0x4a0
	[0061.768] ioctlsocket (in: s=0x4a0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.769] connect (s=0x4a0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.229"), namelen=16) returned -1
	[0061.769] WSAGetLastError () returned 10035
	[0061.769] htonl (hostlong=0xc0a800e6) returned 0xe600a8c0
	[0061.769] socket (af=2, type=1, protocol=6) returned 0x4a4
	[0061.769] ioctlsocket (in: s=0x4a4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.769] connect (s=0x4a4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.230"), namelen=16) returned -1
	[0061.769] WSAGetLastError () returned 10035
	[0061.769] htonl (hostlong=0xc0a800e7) returned 0xe700a8c0
	[0061.770] socket (af=2, type=1, protocol=6) returned 0x4a8
	[0061.770] ioctlsocket (in: s=0x4a8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.770] connect (s=0x4a8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.231"), namelen=16) returned -1
	[0061.770] WSAGetLastError () returned 10035
	[0061.770] htonl (hostlong=0xc0a800e8) returned 0xe800a8c0
	[0061.770] socket (af=2, type=1, protocol=6) returned 0x4ac
	[0061.770] ioctlsocket (in: s=0x4ac, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.770] connect (s=0x4ac, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.232"), namelen=16) returned -1
	[0061.771] WSAGetLastError () returned 10035
	[0061.771] htonl (hostlong=0xc0a800e9) returned 0xe900a8c0
	[0061.771] socket (af=2, type=1, protocol=6) returned 0x4b0
	[0061.771] ioctlsocket (in: s=0x4b0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.771] connect (s=0x4b0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.233"), namelen=16) returned -1
	[0061.771] WSAGetLastError () returned 10035
	[0061.771] htonl (hostlong=0xc0a800ea) returned 0xea00a8c0
	[0061.771] socket (af=2, type=1, protocol=6) returned 0x4b4
	[0061.772] ioctlsocket (in: s=0x4b4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.772] connect (s=0x4b4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.234"), namelen=16) returned -1
	[0061.772] WSAGetLastError () returned 10035
	[0061.772] htonl (hostlong=0xc0a800eb) returned 0xeb00a8c0
	[0061.772] socket (af=2, type=1, protocol=6) returned 0x4b8
	[0061.772] ioctlsocket (in: s=0x4b8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.772] connect (s=0x4b8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.235"), namelen=16) returned -1
	[0061.773] WSAGetLastError () returned 10035
	[0061.773] htonl (hostlong=0xc0a800ec) returned 0xec00a8c0
	[0061.773] socket (af=2, type=1, protocol=6) returned 0x4bc
	[0061.773] ioctlsocket (in: s=0x4bc, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.773] connect (s=0x4bc, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.236"), namelen=16) returned -1
	[0061.773] WSAGetLastError () returned 10035
	[0061.773] htonl (hostlong=0xc0a800ed) returned 0xed00a8c0
	[0061.773] socket (af=2, type=1, protocol=6) returned 0x4c0
	[0061.773] ioctlsocket (in: s=0x4c0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.773] connect (s=0x4c0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.237"), namelen=16) returned -1
	[0061.774] WSAGetLastError () returned 10035
	[0061.774] htonl (hostlong=0xc0a800ee) returned 0xee00a8c0
	[0061.774] socket (af=2, type=1, protocol=6) returned 0x4c4
	[0061.774] ioctlsocket (in: s=0x4c4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.774] connect (s=0x4c4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.238"), namelen=16) returned -1
	[0061.776] WSAGetLastError () returned 10035
	[0061.776] htonl (hostlong=0xc0a800ef) returned 0xef00a8c0
	[0061.776] socket (af=2, type=1, protocol=6) returned 0x4c8
	[0061.777] ioctlsocket (in: s=0x4c8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.777] connect (s=0x4c8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.239"), namelen=16) returned -1
	[0061.777] WSAGetLastError () returned 10035
	[0061.777] htonl (hostlong=0xc0a800f0) returned 0xf000a8c0
	[0061.777] socket (af=2, type=1, protocol=6) returned 0x4cc
	[0061.777] ioctlsocket (in: s=0x4cc, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.777] connect (s=0x4cc, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.240"), namelen=16) returned -1
	[0061.778] WSAGetLastError () returned 10035
	[0061.778] htonl (hostlong=0xc0a800f1) returned 0xf100a8c0
	[0061.778] socket (af=2, type=1, protocol=6) returned 0x4d0
	[0061.778] ioctlsocket (in: s=0x4d0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.778] connect (s=0x4d0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.241"), namelen=16) returned -1
	[0061.778] WSAGetLastError () returned 10035
	[0061.778] htonl (hostlong=0xc0a800f2) returned 0xf200a8c0
	[0061.778] socket (af=2, type=1, protocol=6) returned 0x4d4
	[0061.778] ioctlsocket (in: s=0x4d4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.778] connect (s=0x4d4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.242"), namelen=16) returned -1
	[0061.779] WSAGetLastError () returned 10035
	[0061.779] htonl (hostlong=0xc0a800f3) returned 0xf300a8c0
	[0061.779] socket (af=2, type=1, protocol=6) returned 0x4d8
	[0061.779] ioctlsocket (in: s=0x4d8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.779] connect (s=0x4d8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.243"), namelen=16) returned -1
	[0061.779] WSAGetLastError () returned 10035
	[0061.779] htonl (hostlong=0xc0a800f4) returned 0xf400a8c0
	[0061.779] socket (af=2, type=1, protocol=6) returned 0x4dc
	[0061.780] ioctlsocket (in: s=0x4dc, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.780] connect (s=0x4dc, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.244"), namelen=16) returned -1
	[0061.780] WSAGetLastError () returned 10035
	[0061.780] htonl (hostlong=0xc0a800f5) returned 0xf500a8c0
	[0061.780] socket (af=2, type=1, protocol=6) returned 0x4e0
	[0061.780] ioctlsocket (in: s=0x4e0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.780] connect (s=0x4e0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.245"), namelen=16) returned -1
	[0061.781] WSAGetLastError () returned 10035
	[0061.781] htonl (hostlong=0xc0a800f6) returned 0xf600a8c0
	[0061.781] socket (af=2, type=1, protocol=6) returned 0x4e4
	[0061.781] ioctlsocket (in: s=0x4e4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.781] connect (s=0x4e4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.246"), namelen=16) returned -1
	[0061.781] WSAGetLastError () returned 10035
	[0061.781] htonl (hostlong=0xc0a800f7) returned 0xf700a8c0
	[0061.781] socket (af=2, type=1, protocol=6) returned 0x4e8
	[0061.781] ioctlsocket (in: s=0x4e8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.782] connect (s=0x4e8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.247"), namelen=16) returned -1
	[0061.782] WSAGetLastError () returned 10035
	[0061.782] htonl (hostlong=0xc0a800f8) returned 0xf800a8c0
	[0061.782] socket (af=2, type=1, protocol=6) returned 0x4ec
	[0061.782] ioctlsocket (in: s=0x4ec, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.782] connect (s=0x4ec, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.248"), namelen=16) returned -1
	[0061.782] WSAGetLastError () returned 10035
	[0061.782] htonl (hostlong=0xc0a800f9) returned 0xf900a8c0
	[0061.783] socket (af=2, type=1, protocol=6) returned 0x4f0
	[0061.783] ioctlsocket (in: s=0x4f0, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.783] connect (s=0x4f0, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.249"), namelen=16) returned -1
	[0061.783] WSAGetLastError () returned 10035
	[0061.783] htonl (hostlong=0xc0a800fa) returned 0xfa00a8c0
	[0061.783] socket (af=2, type=1, protocol=6) returned 0x4f4
	[0061.783] ioctlsocket (in: s=0x4f4, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.783] connect (s=0x4f4, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.250"), namelen=16) returned -1
	[0061.784] WSAGetLastError () returned 10035
	[0061.784] htonl (hostlong=0xc0a800fb) returned 0xfb00a8c0
	[0061.784] socket (af=2, type=1, protocol=6) returned 0x4f8
	[0061.784] ioctlsocket (in: s=0x4f8, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.784] connect (s=0x4f8, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.251"), namelen=16) returned -1
	[0061.784] WSAGetLastError () returned 10035
	[0061.784] htonl (hostlong=0xc0a800fc) returned 0xfc00a8c0
	[0061.784] socket (af=2, type=1, protocol=6) returned 0x4fc
	[0061.784] ioctlsocket (in: s=0x4fc, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.785] connect (s=0x4fc, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.252"), namelen=16) returned -1
	[0061.785] WSAGetLastError () returned 10035
	[0061.785] htonl (hostlong=0xc0a800fd) returned 0xfd00a8c0
	[0061.785] socket (af=2, type=1, protocol=6) returned 0x500
	[0061.786] ioctlsocket (in: s=0x500, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.786] connect (s=0x500, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.253"), namelen=16) returned -1
	[0061.786] WSAGetLastError () returned 10035
	[0061.786] htonl (hostlong=0xc0a800fe) returned 0xfe00a8c0
	[0061.786] socket (af=2, type=1, protocol=6) returned 0x504
	[0061.786] ioctlsocket (in: s=0x504, cmd=-2147195266, argp=0x289f948 | out: argp=0x289f948) returned 0
	[0061.786] connect (s=0x504, name=0x289f930*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.254"), namelen=16) returned -1
	[0061.787] WSAGetLastError () returned 10035
	[0061.787] GetTickCount () returned 0x114a9b8
	[0061.787] GetTickCount () returned 0x114a9b8
	[0061.787] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.787] GetTickCount () returned 0x114a9b8
	[0061.787] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.787] GetTickCount () returned 0x114a9b8
	[0061.787] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.787] GetTickCount () returned 0x114a9b8
	[0061.787] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.787] GetTickCount () returned 0x114a9b8
	[0061.787] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.787] GetTickCount () returned 0x114a9b8
	[0061.787] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.787] GetTickCount () returned 0x114a9b8
	[0061.787] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.787] GetTickCount () returned 0x114a9b8
	[0061.787] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.787] GetTickCount () returned 0x114a9b8
	[0061.787] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.787] GetTickCount () returned 0x114a9b8
	[0061.787] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.788] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.788] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.789] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.789] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.790] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.790] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.791] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.791] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.792] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.792] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.793] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.793] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.794] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.794] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.795] GetTickCount () returned 0x114a9b8
	[0061.795] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.796] GetTickCount () returned 0x114a9b8
	[0061.796] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9b8
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9b8
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9b8
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.797] GetTickCount () returned 0x114a9c7
	[0061.797] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.798] select (in: nfds=0, readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0, timeout=0x289f8f0 | out: readfds=0x289f7e8, writefds=0x0, exceptfds=0x289f6e0) returned -1
	[0061.798] GetTickCount () returned 0x114a9c7
	[0061.799] getsockopt (in: s=0x504, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.799] recv (in: s=0x504, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.799] WSAGetLastError () returned 10057
	[0061.799] closesocket (s=0x504) returned 0
	[0061.799] getsockopt (in: s=0x500, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.799] recv (in: s=0x500, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.799] WSAGetLastError () returned 10057
	[0061.799] closesocket (s=0x500) returned 0
	[0061.799] getsockopt (in: s=0x4fc, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.799] recv (in: s=0x4fc, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.799] WSAGetLastError () returned 10057
	[0061.799] closesocket (s=0x4fc) returned 0
	[0061.799] getsockopt (in: s=0x4f8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.799] recv (in: s=0x4f8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.799] WSAGetLastError () returned 10057
	[0061.799] closesocket (s=0x4f8) returned 0
	[0061.800] getsockopt (in: s=0x4f4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.800] recv (in: s=0x4f4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.800] WSAGetLastError () returned 10057
	[0061.800] closesocket (s=0x4f4) returned 0
	[0061.800] getsockopt (in: s=0x4f0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.800] recv (in: s=0x4f0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.800] WSAGetLastError () returned 10057
	[0061.800] closesocket (s=0x4f0) returned 0
	[0061.800] getsockopt (in: s=0x4ec, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.800] recv (in: s=0x4ec, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.800] WSAGetLastError () returned 10057
	[0061.800] closesocket (s=0x4ec) returned 0
	[0061.800] getsockopt (in: s=0x4e8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.800] recv (in: s=0x4e8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.800] WSAGetLastError () returned 10057
	[0061.800] closesocket (s=0x4e8) returned 0
	[0061.800] getsockopt (in: s=0x4e4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.800] recv (in: s=0x4e4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.800] WSAGetLastError () returned 10057
	[0061.800] closesocket (s=0x4e4) returned 0
	[0061.801] getsockopt (in: s=0x4e0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.801] recv (in: s=0x4e0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.801] WSAGetLastError () returned 10057
	[0061.801] closesocket (s=0x4e0) returned 0
	[0061.801] getsockopt (in: s=0x4dc, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.801] recv (in: s=0x4dc, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.801] WSAGetLastError () returned 10057
	[0061.801] closesocket (s=0x4dc) returned 0
	[0061.801] getsockopt (in: s=0x4d8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.801] recv (in: s=0x4d8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.801] WSAGetLastError () returned 10057
	[0061.801] closesocket (s=0x4d8) returned 0
	[0061.801] getsockopt (in: s=0x4d4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.801] recv (in: s=0x4d4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.801] WSAGetLastError () returned 10057
	[0061.801] closesocket (s=0x4d4) returned 0
	[0061.801] getsockopt (in: s=0x4d0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.801] recv (in: s=0x4d0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.801] WSAGetLastError () returned 10057
	[0061.802] closesocket (s=0x4d0) returned 0
	[0061.802] getsockopt (in: s=0x4cc, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.802] recv (in: s=0x4cc, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.802] WSAGetLastError () returned 10057
	[0061.802] closesocket (s=0x4cc) returned 0
	[0061.802] getsockopt (in: s=0x4c8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.802] recv (in: s=0x4c8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.802] WSAGetLastError () returned 10057
	[0061.802] closesocket (s=0x4c8) returned 0
	[0061.802] getsockopt (in: s=0x4c4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.802] recv (in: s=0x4c4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.802] WSAGetLastError () returned 10057
	[0061.802] closesocket (s=0x4c4) returned 0
	[0061.802] getsockopt (in: s=0x4c0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.802] recv (in: s=0x4c0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.802] WSAGetLastError () returned 10057
	[0061.802] closesocket (s=0x4c0) returned 0
	[0061.802] getsockopt (in: s=0x4bc, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.802] recv (in: s=0x4bc, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.803] WSAGetLastError () returned 10057
	[0061.803] closesocket (s=0x4bc) returned 0
	[0061.803] getsockopt (in: s=0x4b8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.803] recv (in: s=0x4b8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.803] WSAGetLastError () returned 10057
	[0061.803] closesocket (s=0x4b8) returned 0
	[0061.803] getsockopt (in: s=0x4b4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.803] recv (in: s=0x4b4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.803] WSAGetLastError () returned 10057
	[0061.803] closesocket (s=0x4b4) returned 0
	[0061.803] getsockopt (in: s=0x4b0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.803] recv (in: s=0x4b0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.803] WSAGetLastError () returned 10057
	[0061.803] closesocket (s=0x4b0) returned 0
	[0061.803] getsockopt (in: s=0x4ac, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.803] recv (in: s=0x4ac, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.803] WSAGetLastError () returned 10057
	[0061.803] closesocket (s=0x4ac) returned 0
	[0061.804] getsockopt (in: s=0x4a8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.804] recv (in: s=0x4a8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.804] WSAGetLastError () returned 10057
	[0061.804] closesocket (s=0x4a8) returned 0
	[0061.804] getsockopt (in: s=0x4a4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.804] recv (in: s=0x4a4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.804] WSAGetLastError () returned 10057
	[0061.804] closesocket (s=0x4a4) returned 0
	[0061.804] getsockopt (in: s=0x4a0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.804] recv (in: s=0x4a0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.804] WSAGetLastError () returned 10057
	[0061.804] closesocket (s=0x4a0) returned 0
	[0061.804] getsockopt (in: s=0x49c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.804] recv (in: s=0x49c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.804] WSAGetLastError () returned 10057
	[0061.804] closesocket (s=0x49c) returned 0
	[0061.804] getsockopt (in: s=0x498, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.804] recv (in: s=0x498, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.804] WSAGetLastError () returned 10057
	[0061.804] closesocket (s=0x498) returned 0
	[0061.805] getsockopt (in: s=0x494, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.805] recv (in: s=0x494, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.805] WSAGetLastError () returned 10057
	[0061.805] closesocket (s=0x494) returned 0
	[0061.805] getsockopt (in: s=0x490, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.805] recv (in: s=0x490, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.805] WSAGetLastError () returned 10057
	[0061.805] closesocket (s=0x490) returned 0
	[0061.805] getsockopt (in: s=0x48c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.805] recv (in: s=0x48c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.805] WSAGetLastError () returned 10057
	[0061.805] closesocket (s=0x48c) returned 0
	[0061.805] getsockopt (in: s=0x488, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.805] recv (in: s=0x488, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.805] WSAGetLastError () returned 10057
	[0061.805] closesocket (s=0x488) returned 0
	[0061.805] getsockopt (in: s=0x484, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.805] recv (in: s=0x484, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.805] WSAGetLastError () returned 10057
	[0061.805] closesocket (s=0x484) returned 0
	[0061.806] getsockopt (in: s=0x480, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.806] recv (in: s=0x480, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.806] WSAGetLastError () returned 10057
	[0061.806] closesocket (s=0x480) returned 0
	[0061.806] getsockopt (in: s=0x47c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.806] recv (in: s=0x47c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.806] WSAGetLastError () returned 10057
	[0061.806] closesocket (s=0x47c) returned 0
	[0061.806] getsockopt (in: s=0x478, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.806] recv (in: s=0x478, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.806] WSAGetLastError () returned 10057
	[0061.806] closesocket (s=0x478) returned 0
	[0061.806] getsockopt (in: s=0x474, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.806] recv (in: s=0x474, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.806] WSAGetLastError () returned 10057
	[0061.806] closesocket (s=0x474) returned 0
	[0061.806] getsockopt (in: s=0x470, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.806] recv (in: s=0x470, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.806] WSAGetLastError () returned 10057
	[0061.807] closesocket (s=0x470) returned 0
	[0061.807] getsockopt (in: s=0x46c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.807] recv (in: s=0x46c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.807] WSAGetLastError () returned 10057
	[0061.807] closesocket (s=0x46c) returned 0
	[0061.807] getsockopt (in: s=0x468, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.807] recv (in: s=0x468, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.807] WSAGetLastError () returned 10057
	[0061.807] closesocket (s=0x468) returned 0
	[0061.807] getsockopt (in: s=0x464, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.807] recv (in: s=0x464, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.807] WSAGetLastError () returned 10057
	[0061.807] closesocket (s=0x464) returned 0
	[0061.807] getsockopt (in: s=0x460, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.807] recv (in: s=0x460, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.807] WSAGetLastError () returned 10057
	[0061.807] closesocket (s=0x460) returned 0
	[0061.807] getsockopt (in: s=0x45c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.807] recv (in: s=0x45c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.808] WSAGetLastError () returned 10057
	[0061.808] closesocket (s=0x45c) returned 0
	[0061.808] getsockopt (in: s=0x458, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.808] recv (in: s=0x458, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.808] WSAGetLastError () returned 10057
	[0061.808] closesocket (s=0x458) returned 0
	[0061.808] getsockopt (in: s=0x454, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.808] recv (in: s=0x454, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.808] WSAGetLastError () returned 10057
	[0061.808] closesocket (s=0x454) returned 0
	[0061.808] getsockopt (in: s=0x450, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.808] recv (in: s=0x450, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.808] WSAGetLastError () returned 10057
	[0061.808] closesocket (s=0x450) returned 0
	[0061.808] getsockopt (in: s=0x44c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.808] recv (in: s=0x44c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.808] WSAGetLastError () returned 10057
	[0061.808] closesocket (s=0x44c) returned 0
	[0061.809] getsockopt (in: s=0x448, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.809] recv (in: s=0x448, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.809] WSAGetLastError () returned 10057
	[0061.809] closesocket (s=0x448) returned 0
	[0061.809] getsockopt (in: s=0x444, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.809] recv (in: s=0x444, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.809] WSAGetLastError () returned 10057
	[0061.809] closesocket (s=0x444) returned 0
	[0061.809] getsockopt (in: s=0x440, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.809] recv (in: s=0x440, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.809] WSAGetLastError () returned 10057
	[0061.809] closesocket (s=0x440) returned 0
	[0061.809] getsockopt (in: s=0x43c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.809] recv (in: s=0x43c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.809] WSAGetLastError () returned 10057
	[0061.809] closesocket (s=0x43c) returned 0
	[0061.809] getsockopt (in: s=0x438, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.809] recv (in: s=0x438, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.809] WSAGetLastError () returned 10057
	[0061.809] closesocket (s=0x438) returned 0
	[0061.810] getsockopt (in: s=0x434, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.810] recv (in: s=0x434, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.810] WSAGetLastError () returned 10057
	[0061.810] closesocket (s=0x434) returned 0
	[0061.810] getsockopt (in: s=0x430, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.810] recv (in: s=0x430, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.810] WSAGetLastError () returned 10057
	[0061.810] closesocket (s=0x430) returned 0
	[0061.810] getsockopt (in: s=0x42c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.810] recv (in: s=0x42c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.810] WSAGetLastError () returned 10057
	[0061.810] closesocket (s=0x42c) returned 0
	[0061.810] getsockopt (in: s=0x428, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.810] recv (in: s=0x428, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.810] WSAGetLastError () returned 10057
	[0061.810] closesocket (s=0x428) returned 0
	[0061.810] getsockopt (in: s=0x424, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.810] recv (in: s=0x424, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.811] WSAGetLastError () returned 10057
	[0061.811] closesocket (s=0x424) returned 0
	[0061.811] getsockopt (in: s=0x420, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.811] recv (in: s=0x420, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.811] WSAGetLastError () returned 10057
	[0061.811] closesocket (s=0x420) returned 0
	[0061.811] getsockopt (in: s=0x41c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.811] recv (in: s=0x41c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.811] WSAGetLastError () returned 10057
	[0061.811] closesocket (s=0x41c) returned 0
	[0061.811] getsockopt (in: s=0x418, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.811] recv (in: s=0x418, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.811] WSAGetLastError () returned 10057
	[0061.811] closesocket (s=0x418) returned 0
	[0061.811] getsockopt (in: s=0x414, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.811] recv (in: s=0x414, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.811] WSAGetLastError () returned 10057
	[0061.811] closesocket (s=0x414) returned 0
	[0061.811] getsockopt (in: s=0x410, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.812] recv (in: s=0x410, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.812] WSAGetLastError () returned 10057
	[0061.812] closesocket (s=0x410) returned 0
	[0061.812] getsockopt (in: s=0x40c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.812] recv (in: s=0x40c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.812] WSAGetLastError () returned 10057
	[0061.812] closesocket (s=0x40c) returned 0
	[0061.812] getsockopt (in: s=0x408, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.812] recv (in: s=0x408, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.812] WSAGetLastError () returned 10057
	[0061.812] closesocket (s=0x408) returned 0
	[0061.812] getsockopt (in: s=0x404, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.812] recv (in: s=0x404, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.812] WSAGetLastError () returned 10057
	[0061.812] closesocket (s=0x404) returned 0
	[0061.813] getsockopt (in: s=0x3fc, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.813] recv (in: s=0x3fc, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.813] WSAGetLastError () returned 10057
	[0061.813] closesocket (s=0x3fc) returned 0
	[0061.813] getsockopt (in: s=0x3f8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.813] recv (in: s=0x3f8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.813] WSAGetLastError () returned 10057
	[0061.813] closesocket (s=0x3f8) returned 0
	[0061.813] getsockopt (in: s=0x3f4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.813] recv (in: s=0x3f4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.813] WSAGetLastError () returned 10057
	[0061.813] closesocket (s=0x3f4) returned 0
	[0061.813] getsockopt (in: s=0x3f0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.813] recv (in: s=0x3f0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.813] WSAGetLastError () returned 10057
	[0061.813] closesocket (s=0x3f0) returned 0
	[0061.814] getsockopt (in: s=0x3ec, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.814] recv (in: s=0x3ec, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.814] WSAGetLastError () returned 10057
	[0061.814] closesocket (s=0x3ec) returned 0
	[0061.814] getsockopt (in: s=0x3e8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.814] recv (in: s=0x3e8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.814] WSAGetLastError () returned 10057
	[0061.814] closesocket (s=0x3e8) returned 0
	[0061.814] getsockopt (in: s=0x3e4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.814] recv (in: s=0x3e4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.814] WSAGetLastError () returned 10057
	[0061.814] closesocket (s=0x3e4) returned 0
	[0061.814] getsockopt (in: s=0x3e0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.814] recv (in: s=0x3e0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.814] WSAGetLastError () returned 10057
	[0061.814] closesocket (s=0x3e0) returned 0
	[0061.814] getsockopt (in: s=0x3dc, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.814] recv (in: s=0x3dc, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.814] WSAGetLastError () returned 10057
	[0061.814] closesocket (s=0x3dc) returned 0
	[0061.815] getsockopt (in: s=0x3d8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.815] recv (in: s=0x3d8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.815] WSAGetLastError () returned 10057
	[0061.815] closesocket (s=0x3d8) returned 0
	[0061.815] getsockopt (in: s=0x3d4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.815] recv (in: s=0x3d4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.815] WSAGetLastError () returned 10057
	[0061.815] closesocket (s=0x3d4) returned 0
	[0061.815] getsockopt (in: s=0x3d0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.815] recv (in: s=0x3d0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.815] WSAGetLastError () returned 10057
	[0061.815] closesocket (s=0x3d0) returned 0
	[0061.815] getsockopt (in: s=0x3cc, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.815] recv (in: s=0x3cc, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.815] WSAGetLastError () returned 10057
	[0061.815] closesocket (s=0x3cc) returned 0
	[0061.815] getsockopt (in: s=0x3c8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.815] recv (in: s=0x3c8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.816] WSAGetLastError () returned 10057
	[0061.816] closesocket (s=0x3c8) returned 0
	[0061.816] getsockopt (in: s=0x3c4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.816] recv (in: s=0x3c4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.816] WSAGetLastError () returned 10057
	[0061.816] closesocket (s=0x3c4) returned 0
	[0061.816] getsockopt (in: s=0x3c0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.816] recv (in: s=0x3c0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.816] WSAGetLastError () returned 10057
	[0061.816] closesocket (s=0x3c0) returned 0
	[0061.816] getsockopt (in: s=0x3bc, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.816] recv (in: s=0x3bc, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.816] WSAGetLastError () returned 10057
	[0061.816] closesocket (s=0x3bc) returned 0
	[0061.816] getsockopt (in: s=0x3b8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.816] recv (in: s=0x3b8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.816] WSAGetLastError () returned 10057
	[0061.816] closesocket (s=0x3b8) returned 0
	[0061.817] getsockopt (in: s=0x3b4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.817] recv (in: s=0x3b4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.817] WSAGetLastError () returned 10057
	[0061.817] closesocket (s=0x3b4) returned 0
	[0061.817] getsockopt (in: s=0x3b0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.817] recv (in: s=0x3b0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.817] WSAGetLastError () returned 10057
	[0061.817] closesocket (s=0x3b0) returned 0
	[0061.817] getsockopt (in: s=0x3ac, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.817] recv (in: s=0x3ac, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.817] WSAGetLastError () returned 10057
	[0061.817] closesocket (s=0x3ac) returned 0
	[0061.817] getsockopt (in: s=0x3a8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.817] recv (in: s=0x3a8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.817] WSAGetLastError () returned 10057
	[0061.817] closesocket (s=0x3a8) returned 0
	[0061.817] getsockopt (in: s=0x3a4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.817] recv (in: s=0x3a4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.817] WSAGetLastError () returned 10057
	[0061.817] closesocket (s=0x3a4) returned 0
	[0061.818] getsockopt (in: s=0x3a0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.818] recv (in: s=0x3a0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.818] WSAGetLastError () returned 10057
	[0061.818] closesocket (s=0x3a0) returned 0
	[0061.818] getsockopt (in: s=0x39c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.818] recv (in: s=0x39c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.818] WSAGetLastError () returned 10057
	[0061.818] closesocket (s=0x39c) returned 0
	[0061.818] getsockopt (in: s=0x398, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.818] recv (in: s=0x398, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.818] WSAGetLastError () returned 10057
	[0061.818] closesocket (s=0x398) returned 0
	[0061.818] getsockopt (in: s=0x394, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.818] recv (in: s=0x394, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.818] WSAGetLastError () returned 10057
	[0061.818] closesocket (s=0x394) returned 0
	[0061.818] getsockopt (in: s=0x390, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.819] recv (in: s=0x390, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.819] WSAGetLastError () returned 10057
	[0061.819] closesocket (s=0x390) returned 0
	[0061.819] getsockopt (in: s=0x38c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.819] recv (in: s=0x38c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.819] WSAGetLastError () returned 10057
	[0061.819] closesocket (s=0x38c) returned 0
	[0061.819] getsockopt (in: s=0x388, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.819] recv (in: s=0x388, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.819] WSAGetLastError () returned 10057
	[0061.819] closesocket (s=0x388) returned 0
	[0061.819] getsockopt (in: s=0x384, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.819] recv (in: s=0x384, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.819] WSAGetLastError () returned 10057
	[0061.819] closesocket (s=0x384) returned 0
	[0061.819] getsockopt (in: s=0x380, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.819] recv (in: s=0x380, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.819] WSAGetLastError () returned 10057
	[0061.819] closesocket (s=0x380) returned 0
	[0061.820] getsockopt (in: s=0x37c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.820] recv (in: s=0x37c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.820] WSAGetLastError () returned 10057
	[0061.820] closesocket (s=0x37c) returned 0
	[0061.820] getsockopt (in: s=0x378, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.820] recv (in: s=0x378, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.820] WSAGetLastError () returned 10057
	[0061.820] closesocket (s=0x378) returned 0
	[0061.820] getsockopt (in: s=0x374, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.820] recv (in: s=0x374, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.820] WSAGetLastError () returned 10057
	[0061.820] closesocket (s=0x374) returned 0
	[0061.820] getsockopt (in: s=0x370, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.820] recv (in: s=0x370, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.820] WSAGetLastError () returned 10057
	[0061.820] closesocket (s=0x370) returned 0
	[0061.820] getsockopt (in: s=0x36c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.820] recv (in: s=0x36c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.820] WSAGetLastError () returned 10057
	[0061.821] closesocket (s=0x36c) returned 0
	[0061.821] getsockopt (in: s=0x368, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.821] recv (in: s=0x368, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.821] WSAGetLastError () returned 10057
	[0061.821] closesocket (s=0x368) returned 0
	[0061.821] getsockopt (in: s=0x364, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.821] recv (in: s=0x364, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.821] WSAGetLastError () returned 10057
	[0061.821] closesocket (s=0x364) returned 0
	[0061.822] getsockopt (in: s=0x360, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.822] recv (in: s=0x360, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.822] WSAGetLastError () returned 10057
	[0061.822] closesocket (s=0x360) returned 0
	[0061.822] getsockopt (in: s=0x35c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.822] recv (in: s=0x35c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.822] WSAGetLastError () returned 10057
	[0061.822] closesocket (s=0x35c) returned 0
	[0061.822] getsockopt (in: s=0x358, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.822] recv (in: s=0x358, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.822] WSAGetLastError () returned 10057
	[0061.822] closesocket (s=0x358) returned 0
	[0061.822] getsockopt (in: s=0x354, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.822] recv (in: s=0x354, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.822] WSAGetLastError () returned 10057
	[0061.822] closesocket (s=0x354) returned 0
	[0061.822] getsockopt (in: s=0x350, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.823] recv (in: s=0x350, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.823] WSAGetLastError () returned 10057
	[0061.823] closesocket (s=0x350) returned 0
	[0061.823] getsockopt (in: s=0x34c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.823] recv (in: s=0x34c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.823] WSAGetLastError () returned 10057
	[0061.823] closesocket (s=0x34c) returned 0
	[0061.823] getsockopt (in: s=0x348, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.823] recv (in: s=0x348, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.823] WSAGetLastError () returned 10057
	[0061.823] closesocket (s=0x348) returned 0
	[0061.823] getsockopt (in: s=0x344, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.823] recv (in: s=0x344, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.823] WSAGetLastError () returned 10057
	[0061.823] closesocket (s=0x344) returned 0
	[0061.823] getsockopt (in: s=0x340, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.823] recv (in: s=0x340, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.823] WSAGetLastError () returned 10057
	[0061.823] closesocket (s=0x340) returned 0
	[0061.824] getsockopt (in: s=0x33c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.824] recv (in: s=0x33c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.824] WSAGetLastError () returned 10057
	[0061.824] closesocket (s=0x33c) returned 0
	[0061.824] getsockopt (in: s=0x338, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.824] recv (in: s=0x338, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.824] WSAGetLastError () returned 10057
	[0061.824] closesocket (s=0x338) returned 0
	[0061.824] getsockopt (in: s=0x334, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.824] recv (in: s=0x334, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.824] WSAGetLastError () returned 10057
	[0061.824] closesocket (s=0x334) returned 0
	[0061.824] getsockopt (in: s=0x330, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.824] recv (in: s=0x330, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.824] WSAGetLastError () returned 10057
	[0061.824] closesocket (s=0x330) returned 0
	[0061.824] getsockopt (in: s=0x32c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.824] recv (in: s=0x32c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.824] WSAGetLastError () returned 10057
	[0061.825] closesocket (s=0x32c) returned 0
	[0061.825] getsockopt (in: s=0x328, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.825] recv (in: s=0x328, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.825] WSAGetLastError () returned 10057
	[0061.825] closesocket (s=0x328) returned 0
	[0061.825] getsockopt (in: s=0x324, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.825] recv (in: s=0x324, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.825] WSAGetLastError () returned 10057
	[0061.825] closesocket (s=0x324) returned 0
	[0061.825] getsockopt (in: s=0x320, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.825] recv (in: s=0x320, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.825] WSAGetLastError () returned 10057
	[0061.825] closesocket (s=0x320) returned 0
	[0061.825] getsockopt (in: s=0x31c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.825] recv (in: s=0x31c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.825] WSAGetLastError () returned 10057
	[0061.825] closesocket (s=0x31c) returned 0
	[0061.826] getsockopt (in: s=0x318, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.826] recv (in: s=0x318, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.826] WSAGetLastError () returned 10057
	[0061.826] closesocket (s=0x318) returned 0
	[0061.826] getsockopt (in: s=0x314, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.826] recv (in: s=0x314, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.826] WSAGetLastError () returned 10057
	[0061.826] closesocket (s=0x314) returned 0
	[0061.826] getsockopt (in: s=0x310, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.826] recv (in: s=0x310, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.826] WSAGetLastError () returned 10057
	[0061.826] closesocket (s=0x310) returned 0
	[0061.826] getsockopt (in: s=0x30c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.826] recv (in: s=0x30c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.826] WSAGetLastError () returned 10057
	[0061.826] closesocket (s=0x30c) returned 0
	[0061.826] getsockopt (in: s=0x308, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.826] recv (in: s=0x308, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.826] WSAGetLastError () returned 10057
	[0061.826] closesocket (s=0x308) returned 0
	[0061.827] getsockopt (in: s=0x304, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.827] recv (in: s=0x304, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.827] WSAGetLastError () returned 10057
	[0061.827] closesocket (s=0x304) returned 0
	[0061.827] getsockopt (in: s=0x300, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.827] recv (in: s=0x300, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.827] WSAGetLastError () returned 10057
	[0061.827] closesocket (s=0x300) returned 0
	[0061.827] getsockopt (in: s=0x2fc, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.827] recv (in: s=0x2fc, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.827] WSAGetLastError () returned 10057
	[0061.827] closesocket (s=0x2fc) returned 0
	[0061.827] getsockopt (in: s=0x2f8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.827] recv (in: s=0x2f8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.827] WSAGetLastError () returned 10057
	[0061.827] closesocket (s=0x2f8) returned 0
	[0061.827] getsockopt (in: s=0x2f4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.827] recv (in: s=0x2f4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.828] WSAGetLastError () returned 10057
	[0061.828] closesocket (s=0x2f4) returned 0
	[0061.828] getsockopt (in: s=0x2f0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.828] recv (in: s=0x2f0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.828] WSAGetLastError () returned 10057
	[0061.828] closesocket (s=0x2f0) returned 0
	[0061.828] getsockopt (in: s=0x2ec, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.828] recv (in: s=0x2ec, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.828] WSAGetLastError () returned 10057
	[0061.828] closesocket (s=0x2ec) returned 0
	[0061.828] getsockopt (in: s=0x2e8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.828] recv (in: s=0x2e8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.828] WSAGetLastError () returned 10057
	[0061.828] closesocket (s=0x2e8) returned 0
	[0061.828] getsockopt (in: s=0x2e4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.828] recv (in: s=0x2e4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.828] WSAGetLastError () returned 10057
	[0061.828] closesocket (s=0x2e4) returned 0
	[0061.829] getsockopt (in: s=0x2e0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.829] recv (in: s=0x2e0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.829] WSAGetLastError () returned 10057
	[0061.829] closesocket (s=0x2e0) returned 0
	[0061.829] getsockopt (in: s=0x2dc, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.829] recv (in: s=0x2dc, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.829] WSAGetLastError () returned 10057
	[0061.829] closesocket (s=0x2dc) returned 0
	[0061.829] getsockopt (in: s=0x2d8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.829] recv (in: s=0x2d8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.829] WSAGetLastError () returned 10057
	[0061.829] closesocket (s=0x2d8) returned 0
	[0061.829] getsockopt (in: s=0x2d4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.829] recv (in: s=0x2d4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.829] WSAGetLastError () returned 10057
	[0061.829] closesocket (s=0x2d4) returned 0
	[0061.829] getsockopt (in: s=0x2d0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.829] recv (in: s=0x2d0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.829] WSAGetLastError () returned 10057
	[0061.830] closesocket (s=0x2d0) returned 0
	[0061.830] getsockopt (in: s=0x2cc, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.830] recv (in: s=0x2cc, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.830] WSAGetLastError () returned 10057
	[0061.830] closesocket (s=0x2cc) returned 0
	[0061.830] getsockopt (in: s=0x2c8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.830] recv (in: s=0x2c8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.830] WSAGetLastError () returned 10057
	[0061.830] closesocket (s=0x2c8) returned 0
	[0061.830] getsockopt (in: s=0x2c4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.830] recv (in: s=0x2c4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.830] WSAGetLastError () returned 10057
	[0061.830] closesocket (s=0x2c4) returned 0
	[0061.830] getsockopt (in: s=0x2c0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.830] recv (in: s=0x2c0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.830] WSAGetLastError () returned 10057
	[0061.830] closesocket (s=0x2c0) returned 0
	[0061.830] getsockopt (in: s=0x2bc, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.831] recv (in: s=0x2bc, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.831] WSAGetLastError () returned 10057
	[0061.831] closesocket (s=0x2bc) returned 0
	[0061.831] getsockopt (in: s=0x2b8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.831] recv (in: s=0x2b8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.831] WSAGetLastError () returned 10057
	[0061.831] closesocket (s=0x2b8) returned 0
	[0061.831] getsockopt (in: s=0x2b4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.831] recv (in: s=0x2b4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.831] WSAGetLastError () returned 10057
	[0061.831] closesocket (s=0x2b4) returned 0
	[0061.831] getsockopt (in: s=0x2b0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.831] recv (in: s=0x2b0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.831] WSAGetLastError () returned 10057
	[0061.831] closesocket (s=0x2b0) returned 0
	[0061.831] getsockopt (in: s=0x2ac, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.831] recv (in: s=0x2ac, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.831] WSAGetLastError () returned 10057
	[0061.831] closesocket (s=0x2ac) returned 0
	[0061.832] getsockopt (in: s=0x2a8, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.832] recv (in: s=0x2a8, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.832] WSAGetLastError () returned 10057
	[0061.832] closesocket (s=0x2a8) returned 0
	[0061.832] getsockopt (in: s=0x2a4, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.832] recv (in: s=0x2a4, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.832] WSAGetLastError () returned 10057
	[0061.832] closesocket (s=0x2a4) returned 0
	[0061.832] getsockopt (in: s=0x2a0, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.832] recv (in: s=0x2a0, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.832] WSAGetLastError () returned 10057
	[0061.832] closesocket (s=0x2a0) returned 0
	[0061.832] getsockopt (in: s=0x29c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.832] recv (in: s=0x29c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.832] WSAGetLastError () returned 10057
	[0061.832] closesocket (s=0x29c) returned 0
	[0061.832] getsockopt (in: s=0x298, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.832] recv (in: s=0x298, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.833] WSAGetLastError () returned 10057
	[0061.833] closesocket (s=0x298) returned 0
	[0061.833] getsockopt (in: s=0x294, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.833] recv (in: s=0x294, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.833] WSAGetLastError () returned 10057
	[0061.833] closesocket (s=0x294) returned 0
	[0061.833] getsockopt (in: s=0x290, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.833] recv (in: s=0x290, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.833] WSAGetLastError () returned 10057
	[0061.833] closesocket (s=0x290) returned 0
	[0061.833] getsockopt (in: s=0x28c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.833] recv (in: s=0x28c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.833] WSAGetLastError () returned 10057
	[0061.833] closesocket (s=0x28c) returned 0
	[0061.833] getsockopt (in: s=0x288, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.833] recv (in: s=0x288, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.833] WSAGetLastError () returned 10057
	[0061.833] closesocket (s=0x288) returned 0
	[0061.834] getsockopt (in: s=0x284, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.834] recv (in: s=0x284, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.834] WSAGetLastError () returned 10057
	[0061.834] closesocket (s=0x284) returned 0
	[0061.834] getsockopt (in: s=0x280, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.834] recv (in: s=0x280, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.834] WSAGetLastError () returned 10057
	[0061.834] closesocket (s=0x280) returned 0
	[0061.834] getsockopt (in: s=0x27c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.834] recv (in: s=0x27c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.834] WSAGetLastError () returned 10057
	[0061.834] closesocket (s=0x27c) returned 0
	[0061.834] getsockopt (in: s=0x278, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.834] recv (in: s=0x278, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.834] WSAGetLastError () returned 10057
	[0061.834] closesocket (s=0x278) returned 0
	[0061.834] getsockopt (in: s=0x274, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.834] recv (in: s=0x274, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.834] WSAGetLastError () returned 10057
	[0061.834] closesocket (s=0x274) returned 0
	[0061.835] getsockopt (in: s=0x270, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.835] recv (in: s=0x270, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.835] WSAGetLastError () returned 10057
	[0061.835] closesocket (s=0x270) returned 0
	[0061.835] getsockopt (in: s=0x26c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.835] recv (in: s=0x26c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.835] WSAGetLastError () returned 10057
	[0061.835] closesocket (s=0x26c) returned 0
	[0061.835] getsockopt (in: s=0x268, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.835] recv (in: s=0x268, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.835] WSAGetLastError () returned 10057
	[0061.835] closesocket (s=0x268) returned 0
	[0061.835] getsockopt (in: s=0x264, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.835] recv (in: s=0x264, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.835] WSAGetLastError () returned 10057
	[0061.835] closesocket (s=0x264) returned 0
	[0061.835] getsockopt (in: s=0x260, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.835] recv (in: s=0x260, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.835] WSAGetLastError () returned 10057
	[0061.836] closesocket (s=0x260) returned 0
	[0061.836] getsockopt (in: s=0x25c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.836] recv (in: s=0x25c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.836] WSAGetLastError () returned 10057
	[0061.836] closesocket (s=0x25c) returned 0
	[0061.836] getsockopt (in: s=0x258, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.836] recv (in: s=0x258, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.836] WSAGetLastError () returned 10057
	[0061.836] closesocket (s=0x258) returned 0
	[0061.836] getsockopt (in: s=0x254, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.836] recv (in: s=0x254, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.836] WSAGetLastError () returned 10057
	[0061.836] closesocket (s=0x254) returned 0
	[0061.836] getsockopt (in: s=0x250, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.836] recv (in: s=0x250, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.836] WSAGetLastError () returned 10057
	[0061.836] closesocket (s=0x250) returned 0
	[0061.836] getsockopt (in: s=0x24c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.837] recv (in: s=0x24c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.837] WSAGetLastError () returned 10057
	[0061.837] closesocket (s=0x24c) returned 0
	[0061.837] getsockopt (in: s=0x248, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.837] recv (in: s=0x248, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.837] WSAGetLastError () returned 10057
	[0061.837] closesocket (s=0x248) returned 0
	[0061.837] getsockopt (in: s=0x244, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.837] recv (in: s=0x244, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.837] WSAGetLastError () returned 10057
	[0061.837] closesocket (s=0x244) returned 0
	[0061.837] getsockopt (in: s=0x240, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.837] recv (in: s=0x240, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.837] WSAGetLastError () returned 10057
	[0061.837] closesocket (s=0x240) returned 0
	[0061.837] getsockopt (in: s=0x23c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.837] recv (in: s=0x23c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.837] WSAGetLastError () returned 10057
	[0061.837] closesocket (s=0x23c) returned 0
	[0061.838] getsockopt (in: s=0x238, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.838] recv (in: s=0x238, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.838] WSAGetLastError () returned 10057
	[0061.838] closesocket (s=0x238) returned 0
	[0061.838] getsockopt (in: s=0x234, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.838] recv (in: s=0x234, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.838] WSAGetLastError () returned 10057
	[0061.838] closesocket (s=0x234) returned 0
	[0061.838] getsockopt (in: s=0x230, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.838] recv (in: s=0x230, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.838] WSAGetLastError () returned 10057
	[0061.838] closesocket (s=0x230) returned 0
	[0061.838] getsockopt (in: s=0x22c, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.838] recv (in: s=0x22c, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.838] WSAGetLastError () returned 10057
	[0061.838] closesocket (s=0x22c) returned 0
	[0061.838] getsockopt (in: s=0x198, level=65535, optname=4103, optval=0x289f958, optlen=0x289f944 | out: optval="", optlen=0x289f944) returned 0
	[0061.838] recv (in: s=0x198, buf=0x289f967, len=1, flags=2 | out: buf=0x289f967) returned -1
	[0061.839] WSAGetLastError () returned 10057
	[0061.839] closesocket (s=0x198) returned 0
	[0061.839] GetProcessHeap () returned 0x440000
	[0061.839] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3ca2238 | out: hHeap=0x440000) returned 1
	[0061.839] GetProcessHeap () returned 0x440000
	[0061.839] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3ca2a40 | out: hHeap=0x440000) returned 1
	[0061.839] htonl (hostlong=0x100007f) returned 0x7f000001
	[0061.839] GetProcessHeap () returned 0x440000
	[0061.839] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x527df0 | out: hHeap=0x440000) returned 1
	[0061.839] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0061.839] GetProcessHeap () returned 0x440000
	[0061.839] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x461d30 | out: hHeap=0x440000) returned 1
	[0061.839] Sleep (dwMilliseconds=0x2710) 

Thread:
	id = 9
	os_tid = 0xa2c

	[0044.063] GetLogicalDrives () returned 0x4
	[0044.063] GetProcessHeap () returned 0x440000
	[0044.063] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d700
	[0044.063] GetProcessHeap () returned 0x440000
	[0044.063] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x28) returned 0x47c070
	[0044.063] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x12c
	[0044.064] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x130
	[0044.064] GetProcessHeap () returned 0x440000
	[0044.064] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x45d208
	[0044.064] GetProcessHeap () returned 0x440000
	[0044.064] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x45d230
	[0044.064] GetProcessHeap () returned 0x440000
	[0044.064] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x45d258
	[0044.064] GetProcessHeap () returned 0x440000
	[0044.064] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0044.064] GetProcessHeap () returned 0x440000
	[0044.064] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0044.064] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x45d230, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0044.064] GetProcessHeap () returned 0x440000
	[0044.064] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d258 | out: hHeap=0x440000) returned 1
	[0044.064] GetProcessHeap () returned 0x440000
	[0044.064] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d208 | out: hHeap=0x440000) returned 1
	[0044.064] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2a9ff1c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2a9ff1c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0044.065] GetProcessHeap () returned 0x440000
	[0044.065] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d230 | out: hHeap=0x440000) returned 1
	[0044.065] GetProcessHeap () returned 0x440000
	[0044.065] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c350
	[0044.065] GetProcessHeap () returned 0x440000
	[0044.065] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c368
	[0044.065] GetProcessHeap () returned 0x440000
	[0044.065] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c380
	[0044.065] GetProcessHeap () returned 0x440000
	[0044.065] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0044.065] GetProcessHeap () returned 0x440000
	[0044.065] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c398
	[0044.065] htonl (hostlong=0x9c354b42) returned 0x424b359c
	[0044.065] QueryPerformanceCounter (in: lpPerformanceCount=0x2a9fe18 | out: lpPerformanceCount=0x2a9fe18*=16434799166) returned 1
	[0044.065] GetTickCount () returned 0x114673c
	[0044.065] GetCurrentProcessId () returned 0xa08
	[0044.065] GetCurrentThreadId () returned 0xa2c
	[0044.065] GetLocalTime (in: lpSystemTime=0x2a9fe00 | out: lpSystemTime=0x2a9fe00*(wYear=0x7e3, wMonth=0x9, wDayOfWeek=0x2, wDay=0x18, wHour=0xe, wMinute=0x35, wSecond=0x11, wMilliseconds=0x1a8)) 
	[0044.066] SystemTimeToFileTime (in: lpSystemTime=0x2a9fe00, lpFileTime=0x2a9fe10 | out: lpFileTime=0x2a9fe10) returned 1
	[0044.066] QueryPerformanceCounter (in: lpPerformanceCount=0x2a9fe18 | out: lpPerformanceCount=0x2a9fe18*=16434838944) returned 1
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x28) returned 0x47c0a0
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c3b0
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4) returned 0x45f568
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x14) returned 0x462218
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c3c8
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x80) returned 0x462978
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c3e0
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x82) returned 0x47c9d8
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c3f8
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4) returned 0x45f588
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c410
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x80) returned 0x47ca68
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c428
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x2) returned 0x45f598
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4) returned 0x45f5a8
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c440
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.066] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x80) returned 0x47caf0
	[0044.066] GetProcessHeap () returned 0x440000
	[0044.067] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c458
	[0044.067] GetProcessHeap () returned 0x440000
	[0044.067] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4) returned 0x45f5b8
	[0044.067] GetProcessHeap () returned 0x440000
	[0044.067] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45f598, Size=0x82) returned 0x47cb78
	[0044.067] GetProcessHeap () returned 0x440000
	[0044.067] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45f5b8, Size=0x100) returned 0x47cc08
	[0044.067] GetProcessHeap () returned 0x440000
	[0044.067] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c470
	[0044.067] GetProcessHeap () returned 0x440000
	[0044.067] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x82) returned 0x47cd10
	[0044.067] GetProcessHeap () returned 0x440000
	[0044.067] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c488
	[0044.067] GetProcessHeap () returned 0x440000
	[0044.067] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x82) returned 0x47cda0
	[0044.067] GetProcessHeap () returned 0x440000
	[0044.067] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x47cb78, Size=0x104) returned 0x47ce30
	[0044.067] GetProcessHeap () returned 0x440000
	[0044.067] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x47cc08, Size=0x200) returned 0x47cf40
	[0044.068] GetProcessHeap () returned 0x440000
	[0044.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f5a8 | out: hHeap=0x440000) returned 1
	[0044.068] GetProcessHeap () returned 0x440000
	[0044.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47cf40 | out: hHeap=0x440000) returned 1
	[0044.068] GetProcessHeap () returned 0x440000
	[0044.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c458 | out: hHeap=0x440000) returned 1
	[0044.068] GetProcessHeap () returned 0x440000
	[0044.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47ca68 | out: hHeap=0x440000) returned 1
	[0044.068] GetProcessHeap () returned 0x440000
	[0044.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c410 | out: hHeap=0x440000) returned 1
	[0044.068] GetProcessHeap () returned 0x440000
	[0044.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47caf0 | out: hHeap=0x440000) returned 1
	[0044.068] GetProcessHeap () returned 0x440000
	[0044.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c440 | out: hHeap=0x440000) returned 1
	[0044.068] GetProcessHeap () returned 0x440000
	[0044.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47ce30 | out: hHeap=0x440000) returned 1
	[0044.068] GetProcessHeap () returned 0x440000
	[0044.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c428 | out: hHeap=0x440000) returned 1
	[0044.068] GetProcessHeap () returned 0x440000
	[0044.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47cd10 | out: hHeap=0x440000) returned 1
	[0044.068] GetProcessHeap () returned 0x440000
	[0044.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c470 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47cda0 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c488 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f568 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c3b0 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c9d8 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c3e0 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x462978 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c3c8 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f588 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c3f8 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c0a0 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x462218 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0xa4) returned 0x462978
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c368 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c380 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c398 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c350 | out: hHeap=0x440000) returned 1
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x14) returned 0x462218
	[0044.069] GetProcessHeap () returned 0x440000
	[0044.069] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xe) returned 0x47c350
	[0044.069] ResetEvent (hEvent=0x130) returned 1
	[0044.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x404a4c, lpParameter=0x462218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134
	[0044.072] CloseHandle (hObject=0x134) returned 1
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.072] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c398
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.072] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c380
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.072] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c368
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.072] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.072] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c3f8
	[0044.072] htonl (hostlong=0x9c354b42) returned 0x424b359c
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.072] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x28) returned 0x47cbe8
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.072] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c3c8
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.072] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4) returned 0x45f588
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.072] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x14) returned 0x462258
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c3e0
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x80) returned 0x47cc18
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c3b0
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x82) returned 0x47cca0
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c488
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4) returned 0x45f568
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c470
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x80) returned 0x47cd30
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c428
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x2) returned 0x45f5a8
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4) returned 0x45f5b8
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c440
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x80) returned 0x47cdb8
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c410
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x4) returned 0x45f598
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45f5a8, Size=0x82) returned 0x47ce40
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x45f598, Size=0x100) returned 0x47ced0
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c458
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x82) returned 0x47cfd8
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10) returned 0x47c4a0
	[0044.073] GetProcessHeap () returned 0x440000
	[0044.073] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x82) returned 0x47d068
	[0044.074] GetProcessHeap () returned 0x440000
	[0044.074] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x47ce40, Size=0x104) returned 0x47d0f8
	[0044.074] GetProcessHeap () returned 0x440000
	[0044.074] RtlReAllocateHeap (Heap=0x440000, Flags=0x0, Ptr=0x47ced0, Size=0x200) returned 0x47d208
	[0044.075] GetProcessHeap () returned 0x440000
	[0044.075] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f5b8 | out: hHeap=0x440000) returned 1
	[0044.075] GetProcessHeap () returned 0x440000
	[0044.075] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47d208 | out: hHeap=0x440000) returned 1
	[0044.075] GetProcessHeap () returned 0x440000
	[0044.075] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c410 | out: hHeap=0x440000) returned 1
	[0044.075] GetProcessHeap () returned 0x440000
	[0044.075] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47cd30 | out: hHeap=0x440000) returned 1
	[0044.075] GetProcessHeap () returned 0x440000
	[0044.075] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c470 | out: hHeap=0x440000) returned 1
	[0044.075] GetProcessHeap () returned 0x440000
	[0044.075] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47cdb8 | out: hHeap=0x440000) returned 1
	[0044.075] GetProcessHeap () returned 0x440000
	[0044.075] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c440 | out: hHeap=0x440000) returned 1
	[0044.075] GetProcessHeap () returned 0x440000
	[0044.075] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47d0f8 | out: hHeap=0x440000) returned 1
	[0044.075] GetProcessHeap () returned 0x440000
	[0044.075] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c428 | out: hHeap=0x440000) returned 1
	[0044.075] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47cfd8 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c458 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47d068 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c4a0 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f588 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c3c8 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47cca0 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c3b0 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47cc18 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c3e0 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45f568 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c488 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47cbe8 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x462258 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0xa4) returned 0x47cbe8
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c380 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c368 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c3f8 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x47c398 | out: hHeap=0x440000) returned 1
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x14) returned 0x462258
	[0044.076] GetProcessHeap () returned 0x440000
	[0044.076] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0xe) returned 0x47c398
	[0044.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x404a4c, lpParameter=0x462258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134
	[0044.078] CloseHandle (hObject=0x134) returned 1
	[0044.078] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) 

Thread:
	id = 10
	os_tid = 0xa30

	[0044.071] GetLogicalDrives () returned 0x4
	[0044.071] GetProcessHeap () returned 0x440000
	[0044.071] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x20) returned 0x45d208
	[0044.071] GetProcessHeap () returned 0x440000
	[0044.071] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x8, Size=0x1e) returned 0x45d258
	[0044.071] GetProcessHeap () returned 0x440000
	[0044.071] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x1e) returned 0x45d280
	[0044.071] GetProcessHeap () returned 0x440000
	[0044.071] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x90) returned 0x464a48
	[0044.071] GetProcessHeap () returned 0x440000
	[0044.071] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x464a48 | out: hHeap=0x440000) returned 1
	[0044.071] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x45d258, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0044.071] GetProcessHeap () returned 0x440000
	[0044.071] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d280 | out: hHeap=0x440000) returned 1
	[0044.071] GetProcessHeap () returned 0x440000
	[0044.071] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d208 | out: hHeap=0x440000) returned 1
	[0044.071] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2cbf9c4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2cbf9c4*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.072] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x45d258 | out: hHeap=0x440000) returned 1
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.072] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x40) returned 0x45d748
	[0044.072] GetProcessHeap () returned 0x440000
	[0044.072] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x28) returned 0x47c0a0
	[0044.072] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x138
	[0044.072] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x13c
	[0044.072] GetLogicalDrives () returned 0x4
	[0044.072] Sleep (dwMilliseconds=0x3e8) 
	[0045.308] GetLogicalDrives () returned 0x4
	[0045.308] Sleep (dwMilliseconds=0x3e8) 
	[0046.416] GetLogicalDrives () returned 0x4
	[0046.416] Sleep (dwMilliseconds=0x3e8) 
	[0047.664] GetLogicalDrives () returned 0x4
	[0047.664] Sleep (dwMilliseconds=0x3e8) 
	[0048.892] GetLogicalDrives () returned 0x4
	[0048.892] Sleep (dwMilliseconds=0x3e8) 
	[0050.066] GetLogicalDrives () returned 0x4
	[0050.067] Sleep (dwMilliseconds=0x3e8) 
	[0051.271] GetLogicalDrives () returned 0x4
	[0051.271] Sleep (dwMilliseconds=0x3e8) 
	[0052.437] GetLogicalDrives () returned 0x4
	[0052.437] Sleep (dwMilliseconds=0x3e8) 
	[0053.623] GetLogicalDrives () returned 0x4
	[0053.623] Sleep (dwMilliseconds=0x3e8) 
	[0054.824] GetLogicalDrives () returned 0x4
	[0054.824] Sleep (dwMilliseconds=0x3e8) 
	[0055.932] GetLogicalDrives () returned 0x4
	[0055.932] Sleep (dwMilliseconds=0x3e8) 
	[0057.135] GetLogicalDrives () returned 0x4
	[0057.135] Sleep (dwMilliseconds=0x3e8) 
	[0058.372] GetLogicalDrives () returned 0x4
	[0058.372] Sleep (dwMilliseconds=0x3e8) 
	[0059.573] GetLogicalDrives () returned 0x4
	[0059.573] Sleep (dwMilliseconds=0x3e8) 
	[0060.678] GetLogicalDrives () returned 0x4
	[0060.678] Sleep (dwMilliseconds=0x3e8) 
	[0061.931] GetLogicalDrives () returned 0x4
	[0061.931] Sleep (dwMilliseconds=0x3e8) 
	[0062.968] GetLogicalDrives () returned 0x4
	[0062.968] Sleep (dwMilliseconds=0x3e8) 
	[0064.068] GetLogicalDrives () returned 0x4
	[0064.068] Sleep (dwMilliseconds=0x3e8) 
	[0065.210] GetLogicalDrives () returned 0x4
	[0065.210] Sleep (dwMilliseconds=0x3e8) 

Thread:
	id = 11
	os_tid = 0xa34

	[0044.172] GetProcessHeap () returned 0x440000
	[0044.172] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x38) returned 0x47cf10
	[0044.172] GetProcessHeap () returned 0x440000
	[0044.172] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x18) returned 0x462298
	[0044.172] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x144
	[0044.172] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x148
	[0044.172] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x14c
	[0044.172] GetProcessHeap () returned 0x440000
	[0044.172] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x47cf50
	[0044.172] GetProcessHeap () returned 0x440000
	[0044.172] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x50) returned 0x463668
	[0044.172] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76c20000
	[0044.172] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0044.172] Wow64DisableWow64FsRedirection (in: OldValue=0x31ff94c | out: OldValue=0x31ff94c*=0x0) returned 1
	[0044.172] GetProcessHeap () returned 0x440000
	[0044.172] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x463668 | out: hHeap=0x440000) returned 1
	[0044.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x4048ba, lpParameter=0x31ff950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150
	[0044.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x4048ba, lpParameter=0x31ff950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164
	[0044.176] GetProcessHeap () returned 0x440000
	[0044.176] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x49d1b0
	[0044.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x31ff6c0 | out: lpFindFileData=0x31ff6c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x4ad1b8
	[0044.177] GetProcessHeap () returned 0x440000
	[0044.177] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4ad1f8
	[0044.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4bd200
	[0044.178] FindNextFileW (in: hFindFile=0x4bd200, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.178] FindNextFileW (in: hFindFile=0x4bd200, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0044.178] GetProcessHeap () returned 0x440000
	[0044.178] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4be248
	[0044.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4ce250
	[0044.179] FindNextFileW (in: hFindFile=0x4ce250, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.179] FindNextFileW (in: hFindFile=0x4ce250, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0044.179] SetEvent (hEvent=0x148) returned 1
	[0044.179] ResetEvent (hEvent=0x14c) returned 1
	[0044.179] FindNextFileW (in: hFindFile=0x4ce250, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0044.179] FindClose (in: hFindFile=0x4ce250 | out: hFindFile=0x4ce250) returned 1
	[0044.179] GetProcessHeap () returned 0x440000
	[0044.179] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4be248 | out: hHeap=0x440000) returned 1
	[0044.180] FindNextFileW (in: hFindFile=0x4bd200, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0044.180] FindClose (in: hFindFile=0x4bd200 | out: hFindFile=0x4bd200) returned 1
	[0044.180] GetProcessHeap () returned 0x440000
	[0044.180] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ad1f8 | out: hHeap=0x440000) returned 1
	[0044.180] FindNextFileW (in: hFindFile=0x4ad1b8, lpFindFileData=0x31ff6c0 | out: lpFindFileData=0x31ff6c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0044.180] GetProcessHeap () returned 0x440000
	[0044.180] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4ad1f8
	[0044.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4cfa98
	[0044.181] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.181] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0044.181] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0044.181] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0044.181] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0044.181] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0044.181] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0044.181] GetProcessHeap () returned 0x440000
	[0044.181] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.191] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.199] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.203] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.207] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.217] GetProcessHeap () returned 0x440000
	[0044.217] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.217] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0044.217] GetProcessHeap () returned 0x440000
	[0044.217] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.218] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.218] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.218] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.218] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.218] GetProcessHeap () returned 0x440000
	[0044.218] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.219] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0044.219] GetProcessHeap () returned 0x440000
	[0044.219] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.219] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.219] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.219] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.219] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.219] GetProcessHeap () returned 0x440000
	[0044.219] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.220] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0044.220] GetProcessHeap () returned 0x440000
	[0044.220] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.220] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.221] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.221] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.221] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.221] GetProcessHeap () returned 0x440000
	[0044.221] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.221] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0044.221] GetProcessHeap () returned 0x440000
	[0044.221] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.222] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.222] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.222] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0044.222] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0044.222] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.222] GetProcessHeap () returned 0x440000
	[0044.222] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.223] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0044.223] GetProcessHeap () returned 0x440000
	[0044.223] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.223] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.223] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.223] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.223] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.224] GetProcessHeap () returned 0x440000
	[0044.224] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.224] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0044.224] GetProcessHeap () returned 0x440000
	[0044.224] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.225] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.225] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.225] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.225] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.225] GetProcessHeap () returned 0x440000
	[0044.225] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.225] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0044.226] GetProcessHeap () returned 0x440000
	[0044.226] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.226] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.226] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0044.226] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0044.226] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0044.226] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0044.227] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0044.227] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0
	[0044.227] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.227] GetProcessHeap () returned 0x440000
	[0044.227] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.227] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0044.227] GetProcessHeap () returned 0x440000
	[0044.227] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.228] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.228] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.228] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.228] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.228] GetProcessHeap () returned 0x440000
	[0044.228] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.228] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0044.229] GetProcessHeap () returned 0x440000
	[0044.229] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.229] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.229] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.229] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.229] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.229] GetProcessHeap () returned 0x440000
	[0044.229] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.230] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0044.230] GetProcessHeap () returned 0x440000
	[0044.230] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.230] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.231] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.231] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.231] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.231] GetProcessHeap () returned 0x440000
	[0044.231] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.231] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0044.231] GetProcessHeap () returned 0x440000
	[0044.231] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.232] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.232] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.232] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.232] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.232] GetProcessHeap () returned 0x440000
	[0044.232] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.233] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0044.233] GetProcessHeap () returned 0x440000
	[0044.233] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.233] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.233] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.234] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.234] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.234] GetProcessHeap () returned 0x440000
	[0044.234] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.234] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0044.234] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0044.234] GetProcessHeap () returned 0x440000
	[0044.234] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.235] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.235] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.235] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.235] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.235] GetProcessHeap () returned 0x440000
	[0044.235] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.236] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0044.236] GetProcessHeap () returned 0x440000
	[0044.236] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.236] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.236] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.236] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.236] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.236] GetProcessHeap () returned 0x440000
	[0044.236] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.237] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0044.237] GetProcessHeap () returned 0x440000
	[0044.237] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b70
	[0044.238] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.238] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.238] FindNextFileW (in: hFindFile=0x501b70, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.238] FindClose (in: hFindFile=0x501b70 | out: hFindFile=0x501b70) returned 1
	[0044.238] GetProcessHeap () returned 0x440000
	[0044.238] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.238] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0044.238] GetProcessHeap () returned 0x440000
	[0044.238] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501d98
	[0044.242] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.242] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.242] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.242] FindClose (in: hFindFile=0x501d98 | out: hFindFile=0x501d98) returned 1
	[0044.242] GetProcessHeap () returned 0x440000
	[0044.242] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.243] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0044.243] GetProcessHeap () returned 0x440000
	[0044.243] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501d98
	[0044.244] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.244] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.244] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.244] FindClose (in: hFindFile=0x501d98 | out: hFindFile=0x501d98) returned 1
	[0044.244] GetProcessHeap () returned 0x440000
	[0044.244] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.244] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0044.244] GetProcessHeap () returned 0x440000
	[0044.244] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501dd8
	[0044.246] FindNextFileW (in: hFindFile=0x501dd8, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.246] FindNextFileW (in: hFindFile=0x501dd8, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.246] FindNextFileW (in: hFindFile=0x501dd8, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.246] FindClose (in: hFindFile=0x501dd8 | out: hFindFile=0x501dd8) returned 1
	[0044.246] GetProcessHeap () returned 0x440000
	[0044.246] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.247] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0044.247] GetProcessHeap () returned 0x440000
	[0044.247] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501dd8
	[0044.248] FindNextFileW (in: hFindFile=0x501dd8, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.248] FindNextFileW (in: hFindFile=0x501dd8, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.248] FindNextFileW (in: hFindFile=0x501dd8, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.248] FindClose (in: hFindFile=0x501dd8 | out: hFindFile=0x501dd8) returned 1
	[0044.248] GetProcessHeap () returned 0x440000
	[0044.248] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.248] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0044.248] GetProcessHeap () returned 0x440000
	[0044.248] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502de0
	[0044.250] FindNextFileW (in: hFindFile=0x502de0, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.250] FindNextFileW (in: hFindFile=0x502de0, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.250] FindNextFileW (in: hFindFile=0x502de0, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.250] FindClose (in: hFindFile=0x502de0 | out: hFindFile=0x502de0) returned 1
	[0044.250] GetProcessHeap () returned 0x440000
	[0044.250] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.251] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0044.251] GetProcessHeap () returned 0x440000
	[0044.251] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502de0
	[0044.251] FindNextFileW (in: hFindFile=0x502de0, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.251] FindNextFileW (in: hFindFile=0x502de0, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.252] FindNextFileW (in: hFindFile=0x502de0, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.252] FindClose (in: hFindFile=0x502de0 | out: hFindFile=0x502de0) returned 1
	[0044.252] GetProcessHeap () returned 0x440000
	[0044.252] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.252] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0044.252] GetProcessHeap () returned 0x440000
	[0044.252] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502de0
	[0044.254] FindNextFileW (in: hFindFile=0x502de0, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.254] FindNextFileW (in: hFindFile=0x502de0, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.254] FindNextFileW (in: hFindFile=0x502de0, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.254] FindClose (in: hFindFile=0x502de0 | out: hFindFile=0x502de0) returned 1
	[0044.254] GetProcessHeap () returned 0x440000
	[0044.254] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.254] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0044.254] GetProcessHeap () returned 0x440000
	[0044.254] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502de0
	[0044.255] FindNextFileW (in: hFindFile=0x502de0, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.255] FindNextFileW (in: hFindFile=0x502de0, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.255] FindNextFileW (in: hFindFile=0x502de0, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.255] FindClose (in: hFindFile=0x502de0 | out: hFindFile=0x502de0) returned 1
	[0044.255] GetProcessHeap () returned 0x440000
	[0044.255] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.256] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0044.256] FindClose (in: hFindFile=0x4cfa98 | out: hFindFile=0x4cfa98) returned 1
	[0044.256] GetProcessHeap () returned 0x440000
	[0044.256] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ad1f8 | out: hHeap=0x440000) returned 1
	[0044.256] FindNextFileW (in: hFindFile=0x4ad1b8, lpFindFileData=0x31ff6c0 | out: lpFindFileData=0x31ff6c0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x1, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0044.256] FindNextFileW (in: hFindFile=0x4ad1b8, lpFindFileData=0x31ff6c0 | out: lpFindFileData=0x31ff6c0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x1, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0044.256] FindNextFileW (in: hFindFile=0x4ad1b8, lpFindFileData=0x31ff6c0 | out: lpFindFileData=0x31ff6c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
	[0044.257] GetProcessHeap () returned 0x440000
	[0044.257] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4ad1f8
	[0044.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Config.Msi\\*", lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4cfa98
	[0044.257] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.257] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0044.257] FindClose (in: hFindFile=0x4cfa98 | out: hFindFile=0x4cfa98) returned 1
	[0044.257] GetProcessHeap () returned 0x440000
	[0044.257] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ad1f8 | out: hHeap=0x440000) returned 1
	[0044.257] FindNextFileW (in: hFindFile=0x4ad1b8, lpFindFileData=0x31ff6c0 | out: lpFindFileData=0x31ff6c0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0044.257] FindNextFileW (in: hFindFile=0x4ad1b8, lpFindFileData=0x31ff6c0 | out: lpFindFileData=0x31ff6c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0044.257] FindNextFileW (in: hFindFile=0x4ad1b8, lpFindFileData=0x31ff6c0 | out: lpFindFileData=0x31ff6c0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
	[0044.257] GetProcessHeap () returned 0x440000
	[0044.258] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4ad1f8
	[0044.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\*", lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4cfa98
	[0044.258] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.258] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0044.258] GetProcessHeap () returned 0x440000
	[0044.258] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501d98
	[0044.260] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.261] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1
	[0044.261] GetProcessHeap () returned 0x440000
	[0044.261] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x502de0
	[0044.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512de8
	[0044.263] FindNextFileW (in: hFindFile=0x512de8, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.263] FindNextFileW (in: hFindFile=0x512de8, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1
	[0044.263] FindNextFileW (in: hFindFile=0x512de8, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1
	[0044.264] FindNextFileW (in: hFindFile=0x512de8, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1
	[0044.264] FindNextFileW (in: hFindFile=0x512de8, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.264] FindNextFileW (in: hFindFile=0x512de8, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.264] FindClose (in: hFindFile=0x512de8 | out: hFindFile=0x512de8) returned 1
	[0044.264] GetProcessHeap () returned 0x440000
	[0044.264] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x502de0 | out: hHeap=0x440000) returned 1
	[0044.264] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1
	[0044.264] GetProcessHeap () returned 0x440000
	[0044.264] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.266] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.266] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1
	[0044.267] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1
	[0044.267] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1
	[0044.267] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.267] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.267] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0044.268] GetProcessHeap () returned 0x440000
	[0044.268] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.268] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1
	[0044.268] GetProcessHeap () returned 0x440000
	[0044.268] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0044.270] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.271] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1
	[0044.271] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1
	[0044.271] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1
	[0044.271] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.271] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.271] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0044.272] GetProcessHeap () returned 0x440000
	[0044.272] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.272] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1
	[0044.272] GetProcessHeap () returned 0x440000
	[0044.272] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0044.275] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.276] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1
	[0044.276] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1
	[0044.276] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1
	[0044.276] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.276] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.276] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0044.277] GetProcessHeap () returned 0x440000
	[0044.277] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.277] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1
	[0044.277] GetProcessHeap () returned 0x440000
	[0044.277] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.278] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.278] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.278] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1
	[0044.278] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1
	[0044.278] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1
	[0044.279] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0
	[0044.279] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0044.279] GetProcessHeap () returned 0x440000
	[0044.279] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.279] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1
	[0044.279] GetProcessHeap () returned 0x440000
	[0044.279] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.300] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.302] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
	[0044.304] GetProcessHeap () returned 0x440000
	[0044.304] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x513de8
	[0044.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.309] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.310] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0044.313] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0044.314] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0044.316] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0
	[0044.317] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.317] GetProcessHeap () returned 0x440000
	[0044.317] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x513de8 | out: hHeap=0x440000) returned 1
	[0044.319] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
	[0044.319] GetProcessHeap () returned 0x440000
	[0044.320] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x513de8
	[0044.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.320] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.320] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0044.320] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0044.320] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0044.320] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0
	[0044.320] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.320] GetProcessHeap () returned 0x440000
	[0044.320] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x513de8 | out: hHeap=0x440000) returned 1
	[0044.320] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
	[0044.320] GetProcessHeap () returned 0x440000
	[0044.320] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x513de8
	[0044.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.321] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.321] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0044.321] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0044.321] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0044.321] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0
	[0044.321] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.321] GetProcessHeap () returned 0x440000
	[0044.321] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x513de8 | out: hHeap=0x440000) returned 1
	[0044.321] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1
	[0044.321] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1
	[0044.321] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.321] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.321] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.321] GetProcessHeap () returned 0x440000
	[0044.321] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.441] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1
	[0044.441] GetProcessHeap () returned 0x440000
	[0044.441] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.443] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.443] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0044.443] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0044.443] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1
	[0044.443] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.443] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.443] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.444] GetProcessHeap () returned 0x440000
	[0044.444] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.444] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1
	[0044.444] GetProcessHeap () returned 0x440000
	[0044.444] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.444] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.445] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1
	[0044.445] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1
	[0044.445] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1
	[0044.445] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.445] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.445] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.446] GetProcessHeap () returned 0x440000
	[0044.446] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.446] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1
	[0044.446] GetProcessHeap () returned 0x440000
	[0044.446] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.446] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.446] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.446] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1
	[0044.446] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1
	[0044.446] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1
	[0044.446] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0
	[0044.446] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.446] GetProcessHeap () returned 0x440000
	[0044.446] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.446] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1
	[0044.446] GetProcessHeap () returned 0x440000
	[0044.447] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.447] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.447] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1
	[0044.447] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0044.447] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1
	[0044.448] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.448] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.448] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.448] GetProcessHeap () returned 0x440000
	[0044.448] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.448] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1
	[0044.448] GetProcessHeap () returned 0x440000
	[0044.448] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.449] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.449] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1
	[0044.449] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1
	[0044.450] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1
	[0044.450] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.450] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.450] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.450] GetProcessHeap () returned 0x440000
	[0044.450] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.450] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1
	[0044.451] GetProcessHeap () returned 0x440000
	[0044.451] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.451] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.451] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1
	[0044.451] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1
	[0044.452] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0044.452] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.452] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.452] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.452] GetProcessHeap () returned 0x440000
	[0044.452] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.452] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1
	[0044.452] GetProcessHeap () returned 0x440000
	[0044.453] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.453] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.453] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0044.453] GetProcessHeap () returned 0x440000
	[0044.453] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.453] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.453] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1
	[0044.453] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0
	[0044.453] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.453] GetProcessHeap () returned 0x440000
	[0044.453] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.453] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
	[0044.454] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0044.454] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1
	[0044.454] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1
	[0044.454] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1
	[0044.454] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1
	[0044.454] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1
	[0044.454] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1
	[0044.454] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0044.454] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0044.454] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0044.455] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1
	[0044.455] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1
	[0044.455] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1
	[0044.455] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.455] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1
	[0044.455] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0
	[0044.455] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.455] GetProcessHeap () returned 0x440000
	[0044.455] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.456] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1
	[0044.456] GetProcessHeap () returned 0x440000
	[0044.456] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.456] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.456] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1
	[0044.456] GetProcessHeap () returned 0x440000
	[0044.456] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.457] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.457] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
	[0044.457] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0044.457] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1
	[0044.457] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
	[0044.458] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0
	[0044.458] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.458] GetProcessHeap () returned 0x440000
	[0044.458] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.458] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
	[0044.458] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0044.459] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.459] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.459] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.459] GetProcessHeap () returned 0x440000
	[0044.459] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.459] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1
	[0044.459] GetProcessHeap () returned 0x440000
	[0044.459] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.463] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.463] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0044.463] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0044.463] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0044.463] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0044.463] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0044.463] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0044.464] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0044.464] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1
	[0044.464] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1
	[0044.464] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1
	[0044.464] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1
	[0044.464] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0044.464] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.464] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.464] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.465] GetProcessHeap () returned 0x440000
	[0044.465] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.465] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1
	[0044.465] GetProcessHeap () returned 0x440000
	[0044.465] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.528] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.528] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0044.528] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0044.528] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0044.528] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0044.528] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0044.528] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0044.528] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0044.528] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1
	[0044.529] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1
	[0044.529] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1
	[0044.529] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0044.529] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.529] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.529] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.530] GetProcessHeap () returned 0x440000
	[0044.530] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.530] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1
	[0044.530] GetProcessHeap () returned 0x440000
	[0044.530] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.595] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.596] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0044.596] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0044.596] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0044.596] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0044.596] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0044.596] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0044.597] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0044.597] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0044.597] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.597] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1
	[0044.597] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1
	[0044.597] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1
	[0044.597] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0
	[0044.597] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.598] GetProcessHeap () returned 0x440000
	[0044.598] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.598] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0
	[0044.598] FindClose (in: hFindFile=0x501d98 | out: hFindFile=0x501d98) returned 1
	[0044.598] GetProcessHeap () returned 0x440000
	[0044.598] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.598] FindNextFileW (in: hFindFile=0x4cfa98, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0
	[0044.598] FindClose (in: hFindFile=0x4cfa98 | out: hFindFile=0x4cfa98) returned 1
	[0044.598] GetProcessHeap () returned 0x440000
	[0044.598] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ad1f8 | out: hHeap=0x440000) returned 1
	[0044.599] FindNextFileW (in: hFindFile=0x4ad1b8, lpFindFileData=0x31ff6c0 | out: lpFindFileData=0x31ff6c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x814762c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0044.599] FindNextFileW (in: hFindFile=0x4ad1b8, lpFindFileData=0x31ff6c0 | out: lpFindFileData=0x31ff6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0044.599] GetProcessHeap () returned 0x440000
	[0044.599] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.600] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.600] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1
	[0044.600] GetProcessHeap () returned 0x440000
	[0044.600] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4ad1f8
	[0044.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\Admin\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.601] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.601] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0044.601] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.601] GetProcessHeap () returned 0x440000
	[0044.601] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4ad1f8 | out: hHeap=0x440000) returned 1
	[0044.601] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0
	[0044.601] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.601] GetProcessHeap () returned 0x440000
	[0044.601] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.602] FindNextFileW (in: hFindFile=0x4ad1b8, lpFindFileData=0x31ff6c0 | out: lpFindFileData=0x31ff6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec4df2a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec4df2a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0044.602] GetProcessHeap () returned 0x440000
	[0044.602] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec4df2a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec4df2a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.602] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec4df2a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec4df2a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.602] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x31ff430 | out: lpFindFileData=0x31ff430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0044.602] GetProcessHeap () returned 0x440000
	[0044.602] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4ad1f8
	[0044.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.603] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.603] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1
	[0044.603] GetProcessHeap () returned 0x440000
	[0044.603] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f00
	[0044.603] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.603] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1
	[0044.603] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0
	[0044.604] FindClose (in: hFindFile=0x512f00 | out: hFindFile=0x512f00) returned 1
	[0044.604] GetProcessHeap () returned 0x440000
	[0044.604] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4bd200 | out: hHeap=0x440000) returned 1
	[0044.604] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x31ff1a0 | out: lpFindFileData=0x31ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0044.604] GetProcessHeap () returned 0x440000
	[0044.604] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4bd200
	[0044.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f00
	[0044.604] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.604] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1
	[0044.604] GetProcessHeap () returned 0x440000
	[0044.604] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37818c0
	[0044.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.801] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.804] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0044.806] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0044.811] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1
	[0044.815] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0
	[0044.815] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.818] GetProcessHeap () returned 0x440000
	[0044.818] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.818] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1
	[0044.820] GetProcessHeap () returned 0x440000
	[0044.820] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0044.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.826] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.826] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0044.831] GetProcessHeap () returned 0x440000
	[0044.831] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37818c0
	[0044.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.835] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.838] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1
	[0044.842] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0
	[0044.843] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.843] GetProcessHeap () returned 0x440000
	[0044.843] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.843] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1
	[0044.843] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1
	[0044.843] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1
	[0044.843] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1
	[0044.843] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1
	[0044.843] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0
	[0044.843] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.843] GetProcessHeap () returned 0x440000
	[0044.843] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0044.844] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1
	[0044.844] GetProcessHeap () returned 0x440000
	[0044.844] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37818c0
	[0044.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.845] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.845] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1
	[0044.845] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0
	[0044.845] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.845] GetProcessHeap () returned 0x440000
	[0044.845] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.845] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1
	[0044.845] GetProcessHeap () returned 0x440000
	[0044.845] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37818c0
	[0044.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.845] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.845] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1
	[0044.845] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1
	[0044.845] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1
	[0044.845] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1
	[0044.845] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0
	[0044.846] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.846] GetProcessHeap () returned 0x440000
	[0044.846] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.846] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1
	[0044.846] GetProcessHeap () returned 0x440000
	[0044.846] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37818c0
	[0044.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.846] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.846] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1
	[0044.847] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1
	[0044.847] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1
	[0044.847] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1
	[0044.847] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1
	[0044.847] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1
	[0044.847] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1
	[0044.847] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1
	[0044.847] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1
	[0044.847] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1
	[0044.847] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1
	[0044.847] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1
	[0044.848] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1
	[0044.848] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1
	[0044.848] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1
	[0044.848] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0
	[0044.848] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.849] GetProcessHeap () returned 0x440000
	[0044.849] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.849] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0044.849] GetProcessHeap () returned 0x440000
	[0044.849] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37818c0
	[0044.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.849] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.849] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1
	[0044.849] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1
	[0044.849] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1
	[0044.849] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0
	[0044.849] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.849] GetProcessHeap () returned 0x440000
	[0044.849] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.849] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x31fef10 | out: lpFindFileData=0x31fef10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1
	[0044.849] GetProcessHeap () returned 0x440000
	[0044.849] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37818c0
	[0044.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.850] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.850] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1
	[0044.850] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1
	[0044.850] GetProcessHeap () returned 0x440000
	[0044.850] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37b18d8
	[0044.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.850] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.850] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0044.850] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0044.851] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.851] GetProcessHeap () returned 0x440000
	[0044.851] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.851] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0044.851] GetProcessHeap () returned 0x440000
	[0044.851] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37b18d8
	[0044.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.851] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.851] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0044.851] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0044.851] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.851] GetProcessHeap () returned 0x440000
	[0044.851] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.851] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1
	[0044.851] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1
	[0044.851] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0044.851] GetProcessHeap () returned 0x440000
	[0044.851] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37b18d8
	[0044.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.851] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.852] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0044.852] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0044.852] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.852] GetProcessHeap () returned 0x440000
	[0044.852] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.852] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0044.852] GetProcessHeap () returned 0x440000
	[0044.852] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37b18d8
	[0044.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.852] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.852] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0044.852] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0044.852] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.852] GetProcessHeap () returned 0x440000
	[0044.852] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.852] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0044.852] GetProcessHeap () returned 0x440000
	[0044.852] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37b18d8
	[0044.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.852] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.853] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0044.853] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0044.853] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.853] GetProcessHeap () returned 0x440000
	[0044.853] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.853] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0044.853] GetProcessHeap () returned 0x440000
	[0044.853] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37b18d8
	[0044.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.853] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.853] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0044.853] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0044.853] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.853] GetProcessHeap () returned 0x440000
	[0044.853] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.853] FindNextFileW (in: hFindFile=0x513040, lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0044.853] GetProcessHeap () returned 0x440000
	[0044.853] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37b18d8
	[0044.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.854] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.854] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1
	[0044.854] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.855] GetProcessHeap () returned 0x440000
	[0044.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.855] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.855] GetProcessHeap () returned 0x440000
	[0044.855] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.856] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.856] GetProcessHeap () returned 0x440000
	[0044.856] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.856] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.856] GetProcessHeap () returned 0x440000
	[0044.856] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.856] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.856] GetProcessHeap () returned 0x440000
	[0044.856] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.856] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.857] GetProcessHeap () returned 0x440000
	[0044.857] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0044.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.857] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.857] GetProcessHeap () returned 0x440000
	[0044.857] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0044.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.858] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.858] GetProcessHeap () returned 0x440000
	[0044.858] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0044.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.858] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.858] GetProcessHeap () returned 0x440000
	[0044.858] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0044.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.859] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.859] GetProcessHeap () returned 0x440000
	[0044.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0044.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.859] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.859] GetProcessHeap () returned 0x440000
	[0044.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0044.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.859] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.859] GetProcessHeap () returned 0x440000
	[0044.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0044.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.859] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.859] GetProcessHeap () returned 0x440000
	[0044.859] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0044.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.860] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.860] GetProcessHeap () returned 0x440000
	[0044.860] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0044.860] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.860] GetProcessHeap () returned 0x440000
	[0044.860] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.860] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.860] GetProcessHeap () returned 0x440000
	[0044.860] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.860] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.860] GetProcessHeap () returned 0x440000
	[0044.860] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.860] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.860] GetProcessHeap () returned 0x440000
	[0044.860] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.861] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.861] GetProcessHeap () returned 0x440000
	[0044.861] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.861] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.861] GetProcessHeap () returned 0x440000
	[0044.861] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.861] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.861] GetProcessHeap () returned 0x440000
	[0044.861] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.861] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.861] GetProcessHeap () returned 0x440000
	[0044.861] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.862] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.862] GetProcessHeap () returned 0x440000
	[0044.862] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.862] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.862] GetProcessHeap () returned 0x440000
	[0044.862] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.862] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.862] GetProcessHeap () returned 0x440000
	[0044.862] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.862] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.862] GetProcessHeap () returned 0x440000
	[0044.862] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.862] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.862] GetProcessHeap () returned 0x440000
	[0044.862] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.863] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.863] GetProcessHeap () returned 0x440000
	[0044.863] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.863] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.863] GetProcessHeap () returned 0x440000
	[0044.863] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.863] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.863] GetProcessHeap () returned 0x440000
	[0044.863] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.863] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.863] GetProcessHeap () returned 0x440000
	[0044.863] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.863] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.864] GetProcessHeap () returned 0x440000
	[0044.864] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.864] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.864] GetProcessHeap () returned 0x440000
	[0044.864] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.864] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.864] GetProcessHeap () returned 0x440000
	[0044.864] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.864] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.864] GetProcessHeap () returned 0x440000
	[0044.864] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.864] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.864] GetProcessHeap () returned 0x440000
	[0044.864] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.865] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.865] GetProcessHeap () returned 0x440000
	[0044.865] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.865] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.865] GetProcessHeap () returned 0x440000
	[0044.865] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.865] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.865] GetProcessHeap () returned 0x440000
	[0044.865] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.865] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.865] GetProcessHeap () returned 0x440000
	[0044.865] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.865] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.865] GetProcessHeap () returned 0x440000
	[0044.865] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f40
	[0045.068] FindClose (in: hFindFile=0x512f40 | out: hFindFile=0x512f40) returned 1
	[0045.068] GetProcessHeap () returned 0x440000
	[0045.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0045.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f40
	[0045.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0045.069] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0045.069] GetProcessHeap () returned 0x440000
	[0045.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0045.069] FindClose (in: hFindFile=0x512f40 | out: hFindFile=0x512f40) returned 1
	[0045.069] GetProcessHeap () returned 0x440000
	[0045.069] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0045.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f40
	[0045.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0045.071] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0045.072] GetProcessHeap () returned 0x440000
	[0045.072] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0045.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0045.073] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0045.073] GetProcessHeap () returned 0x440000
	[0045.073] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0045.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0045.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0045.079] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0045.079] GetProcessHeap () returned 0x440000
	[0045.079] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0045.080] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0045.080] GetProcessHeap () returned 0x440000
	[0045.080] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0045.083] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0045.084] GetProcessHeap () returned 0x440000
	[0045.084] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0045.084] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0045.084] GetProcessHeap () returned 0x440000
	[0045.084] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0045.086] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0045.086] GetProcessHeap () returned 0x440000
	[0045.086] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0045.087] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0045.087] GetProcessHeap () returned 0x440000
	[0045.087] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0045.088] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0045.088] GetProcessHeap () returned 0x440000
	[0045.088] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0045.089] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0045.089] GetProcessHeap () returned 0x440000
	[0045.089] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0045.090] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0045.090] GetProcessHeap () returned 0x440000
	[0045.090] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0045.091] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0045.091] GetProcessHeap () returned 0x440000
	[0045.091] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0045.092] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0045.092] GetProcessHeap () returned 0x440000
	[0045.092] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0045.093] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0045.093] GetProcessHeap () returned 0x440000
	[0045.093] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0045.452] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0045.452] GetProcessHeap () returned 0x440000
	[0045.452] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0045.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0046.728] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0046.728] GetProcessHeap () returned 0x440000
	[0046.728] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0046.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0046.743] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0046.743] GetProcessHeap () returned 0x440000
	[0046.743] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0046.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0048.340] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0048.340] GetProcessHeap () returned 0x440000
	[0048.340] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0048.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0050.068] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0050.068] GetProcessHeap () returned 0x440000
	[0050.068] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0050.068] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0050.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0051.128] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0051.128] GetProcessHeap () returned 0x440000
	[0051.128] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0053.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0054.361] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0054.362] GetProcessHeap () returned 0x440000
	[0054.362] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0054.362] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0054.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0055.277] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0055.277] GetProcessHeap () returned 0x440000
	[0055.277] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0055.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0056.957] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0056.957] GetProcessHeap () returned 0x440000
	[0056.957] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0056.957] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0056.958] GetProcessHeap () returned 0x440000
	[0056.958] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0060.486] FindClose (in: hFindFile=0x512f40 | out: hFindFile=0x512f40) returned 1
	[0060.486] GetProcessHeap () returned 0x440000
	[0060.486] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0060.488] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0060.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f40
	[0061.396] FindClose (in: hFindFile=0x512f40 | out: hFindFile=0x512f40) returned 1
	[0061.397] GetProcessHeap () returned 0x440000
	[0061.397] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0061.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f40
	[0061.954] FindClose (in: hFindFile=0x512f40 | out: hFindFile=0x512f40) returned 1
	[0061.954] GetProcessHeap () returned 0x440000
	[0061.954] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0061.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f40
	[0061.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.043] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.043] GetProcessHeap () returned 0x440000
	[0062.043] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x31fe9f0 | out: lpFindFileData=0x31fe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x31fe760 | out: lpFindFileData=0x31fe760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.641] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.641] GetProcessHeap () returned 0x440000
	[0062.641] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.716] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.716] GetProcessHeap () returned 0x440000
	[0062.716] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.869] FindClose (in: hFindFile=0x512f40 | out: hFindFile=0x512f40) returned 1
	[0062.869] GetProcessHeap () returned 0x440000
	[0062.869] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0062.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f40
	[0062.981] FindClose (in: hFindFile=0x512f40 | out: hFindFile=0x512f40) returned 1
	[0062.981] GetProcessHeap () returned 0x440000
	[0062.981] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0062.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x31fec80 | out: lpFindFileData=0x31fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f40

Thread:
	id = 12
	os_tid = 0xa38

	[0044.173] GetProcessHeap () returned 0x440000
	[0044.173] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x38) returned 0x48d168
	[0044.173] GetProcessHeap () returned 0x440000
	[0044.173] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x18) returned 0x4622d8
	[0044.173] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x154
	[0044.173] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x158
	[0044.173] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x15c
	[0044.173] GetProcessHeap () returned 0x440000
	[0044.174] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x48d1a8
	[0044.174] GetProcessHeap () returned 0x440000
	[0044.174] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x50) returned 0x463668
	[0044.174] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76c20000
	[0044.174] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0044.174] Wow64DisableWow64FsRedirection (in: OldValue=0x346fc9c | out: OldValue=0x346fc9c*=0x0) returned 1
	[0044.174] GetProcessHeap () returned 0x440000
	[0044.174] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x463668 | out: hHeap=0x440000) returned 1
	[0044.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x4048ba, lpParameter=0x346fca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x160
	[0044.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x4048ba, lpParameter=0x346fca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168
	[0044.182] GetProcessHeap () returned 0x440000
	[0044.182] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4d0ae0
	[0044.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x346fa10 | out: lpFindFileData=0x346fa10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x4cd238
	[0044.182] GetProcessHeap () returned 0x440000
	[0044.182] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4e0ae8
	[0044.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4cd278
	[0044.183] FindNextFileW (in: hFindFile=0x4cd278, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.183] FindNextFileW (in: hFindFile=0x4cd278, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0044.183] GetProcessHeap () returned 0x440000
	[0044.183] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1af8
	[0044.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4cd2b8
	[0044.183] FindNextFileW (in: hFindFile=0x4cd2b8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.184] FindNextFileW (in: hFindFile=0x4cd2b8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0044.184] FindNextFileW (in: hFindFile=0x4cd2b8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0044.184] FindClose (in: hFindFile=0x4cd2b8 | out: hFindFile=0x4cd2b8) returned 1
	[0044.184] GetProcessHeap () returned 0x440000
	[0044.184] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1af8 | out: hHeap=0x440000) returned 1
	[0044.184] FindNextFileW (in: hFindFile=0x4cd278, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0044.184] FindClose (in: hFindFile=0x4cd278 | out: hFindFile=0x4cd278) returned 1
	[0044.184] GetProcessHeap () returned 0x440000
	[0044.184] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4e0ae8 | out: hHeap=0x440000) returned 1
	[0044.184] FindNextFileW (in: hFindFile=0x4cd238, lpFindFileData=0x346fa10 | out: lpFindFileData=0x346fa10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0044.184] GetProcessHeap () returned 0x440000
	[0044.184] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4e0ae8
	[0044.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4f0af0
	[0044.185] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.185] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0044.185] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0044.185] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0044.185] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0044.185] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0044.185] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0044.185] GetProcessHeap () returned 0x440000
	[0044.185] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b40
	[0044.186] FindNextFileW (in: hFindFile=0x501b40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.186] FindNextFileW (in: hFindFile=0x501b40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.186] FindNextFileW (in: hFindFile=0x501b40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.186] FindClose (in: hFindFile=0x501b40 | out: hFindFile=0x501b40) returned 1
	[0044.186] GetProcessHeap () returned 0x440000
	[0044.186] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.186] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0044.186] GetProcessHeap () returned 0x440000
	[0044.186] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501b40
	[0044.186] FindNextFileW (in: hFindFile=0x501b40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.186] FindNextFileW (in: hFindFile=0x501b40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.187] FindNextFileW (in: hFindFile=0x501b40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.187] FindClose (in: hFindFile=0x501b40 | out: hFindFile=0x501b40) returned 1
	[0044.187] GetProcessHeap () returned 0x440000
	[0044.187] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.187] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0044.187] GetProcessHeap () returned 0x440000
	[0044.187] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501bb0
	[0044.188] FindNextFileW (in: hFindFile=0x501bb0, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.188] FindNextFileW (in: hFindFile=0x501bb0, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.188] FindNextFileW (in: hFindFile=0x501bb0, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.188] FindClose (in: hFindFile=0x501bb0 | out: hFindFile=0x501bb0) returned 1
	[0044.188] GetProcessHeap () returned 0x440000
	[0044.188] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.189] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0044.189] GetProcessHeap () returned 0x440000
	[0044.189] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501bb0
	[0044.189] FindNextFileW (in: hFindFile=0x501bb0, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.190] FindNextFileW (in: hFindFile=0x501bb0, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.190] FindNextFileW (in: hFindFile=0x501bb0, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.190] FindClose (in: hFindFile=0x501bb0 | out: hFindFile=0x501bb0) returned 1
	[0044.190] GetProcessHeap () returned 0x440000
	[0044.190] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.190] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0044.190] GetProcessHeap () returned 0x440000
	[0044.190] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502bb8
	[0044.192] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.192] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.192] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0044.192] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0044.192] FindClose (in: hFindFile=0x502bb8 | out: hFindFile=0x502bb8) returned 1
	[0044.192] GetProcessHeap () returned 0x440000
	[0044.192] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.193] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0044.193] GetProcessHeap () returned 0x440000
	[0044.193] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502bb8
	[0044.194] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.194] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.194] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.194] FindClose (in: hFindFile=0x502bb8 | out: hFindFile=0x502bb8) returned 1
	[0044.194] GetProcessHeap () returned 0x440000
	[0044.194] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.195] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0044.195] GetProcessHeap () returned 0x440000
	[0044.195] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502bb8
	[0044.195] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.196] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.196] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.196] FindClose (in: hFindFile=0x502bb8 | out: hFindFile=0x502bb8) returned 1
	[0044.196] GetProcessHeap () returned 0x440000
	[0044.196] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.196] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0044.196] GetProcessHeap () returned 0x440000
	[0044.196] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502bb8
	[0044.198] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.198] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0044.198] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0044.198] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0044.198] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0044.198] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0044.198] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0
	[0044.198] FindClose (in: hFindFile=0x502bb8 | out: hFindFile=0x502bb8) returned 1
	[0044.198] GetProcessHeap () returned 0x440000
	[0044.198] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.199] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0044.199] GetProcessHeap () returned 0x440000
	[0044.199] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502bb8
	[0044.200] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.200] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.200] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.200] FindClose (in: hFindFile=0x502bb8 | out: hFindFile=0x502bb8) returned 1
	[0044.200] GetProcessHeap () returned 0x440000
	[0044.200] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.201] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0044.201] GetProcessHeap () returned 0x440000
	[0044.201] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502bb8
	[0044.202] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.202] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.202] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.202] FindClose (in: hFindFile=0x502bb8 | out: hFindFile=0x502bb8) returned 1
	[0044.202] GetProcessHeap () returned 0x440000
	[0044.202] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.202] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0044.202] GetProcessHeap () returned 0x440000
	[0044.203] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502bb8
	[0044.204] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.204] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.204] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.204] FindClose (in: hFindFile=0x502bb8 | out: hFindFile=0x502bb8) returned 1
	[0044.204] GetProcessHeap () returned 0x440000
	[0044.204] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.205] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0044.205] GetProcessHeap () returned 0x440000
	[0044.205] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502bb8
	[0044.206] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.206] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.206] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.206] FindClose (in: hFindFile=0x502bb8 | out: hFindFile=0x502bb8) returned 1
	[0044.206] GetProcessHeap () returned 0x440000
	[0044.206] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.206] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0044.206] GetProcessHeap () returned 0x440000
	[0044.206] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502bb8
	[0044.208] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.208] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.208] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.208] FindClose (in: hFindFile=0x502bb8 | out: hFindFile=0x502bb8) returned 1
	[0044.208] GetProcessHeap () returned 0x440000
	[0044.208] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.209] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0044.209] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0044.209] GetProcessHeap () returned 0x440000
	[0044.209] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x502bb8
	[0044.209] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.210] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.210] FindNextFileW (in: hFindFile=0x502bb8, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.210] FindClose (in: hFindFile=0x502bb8 | out: hFindFile=0x502bb8) returned 1
	[0044.210] GetProcessHeap () returned 0x440000
	[0044.210] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.210] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0044.210] GetProcessHeap () returned 0x440000
	[0044.210] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501bb0
	[0044.212] FindNextFileW (in: hFindFile=0x501bb0, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.212] FindNextFileW (in: hFindFile=0x501bb0, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.212] FindNextFileW (in: hFindFile=0x501bb0, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.212] FindClose (in: hFindFile=0x501bb0 | out: hFindFile=0x501bb0) returned 1
	[0044.212] GetProcessHeap () returned 0x440000
	[0044.212] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.212] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0044.213] GetProcessHeap () returned 0x440000
	[0044.213] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501bb0
	[0044.213] FindNextFileW (in: hFindFile=0x501bb0, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.213] FindNextFileW (in: hFindFile=0x501bb0, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.214] FindNextFileW (in: hFindFile=0x501bb0, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.214] FindClose (in: hFindFile=0x501bb0 | out: hFindFile=0x501bb0) returned 1
	[0044.214] GetProcessHeap () returned 0x440000
	[0044.214] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.214] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0044.214] GetProcessHeap () returned 0x440000
	[0044.214] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f1b38
	[0044.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x501d98
	[0044.249] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.253] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.259] FindNextFileW (in: hFindFile=0x501d98, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.260] FindClose (in: hFindFile=0x501d98 | out: hFindFile=0x501d98) returned 1
	[0044.261] GetProcessHeap () returned 0x440000
	[0044.261] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f1b38 | out: hHeap=0x440000) returned 1
	[0044.265] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0044.266] GetProcessHeap () returned 0x440000
	[0044.266] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x502de0
	[0044.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.270] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.273] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.274] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.274] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0044.277] GetProcessHeap () returned 0x440000
	[0044.277] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x502de0 | out: hHeap=0x440000) returned 1
	[0044.282] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0044.282] GetProcessHeap () returned 0x440000
	[0044.282] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x502de0
	[0044.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.282] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.283] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.283] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.283] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0044.283] GetProcessHeap () returned 0x440000
	[0044.283] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x502de0 | out: hHeap=0x440000) returned 1
	[0044.283] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0044.283] GetProcessHeap () returned 0x440000
	[0044.283] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x502de0
	[0044.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.283] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.283] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.283] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.283] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0044.283] GetProcessHeap () returned 0x440000
	[0044.283] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x502de0 | out: hHeap=0x440000) returned 1
	[0044.283] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0044.283] GetProcessHeap () returned 0x440000
	[0044.283] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x502de0
	[0044.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.283] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.283] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.283] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.284] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0044.284] GetProcessHeap () returned 0x440000
	[0044.284] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x502de0 | out: hHeap=0x440000) returned 1
	[0044.284] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0044.284] GetProcessHeap () returned 0x440000
	[0044.284] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x502de0
	[0044.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.284] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.284] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.284] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.284] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0044.284] GetProcessHeap () returned 0x440000
	[0044.284] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x502de0 | out: hHeap=0x440000) returned 1
	[0044.284] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0044.284] GetProcessHeap () returned 0x440000
	[0044.284] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x502de0
	[0044.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.284] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.284] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.284] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.284] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0044.284] GetProcessHeap () returned 0x440000
	[0044.284] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x502de0 | out: hHeap=0x440000) returned 1
	[0044.284] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0044.285] GetProcessHeap () returned 0x440000
	[0044.285] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x502de0
	[0044.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.285] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.285] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0044.285] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0044.285] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0044.285] GetProcessHeap () returned 0x440000
	[0044.285] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x502de0 | out: hHeap=0x440000) returned 1
	[0044.285] FindNextFileW (in: hFindFile=0x4f0af0, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0044.285] FindClose (in: hFindFile=0x4f0af0 | out: hFindFile=0x4f0af0) returned 1
	[0044.285] GetProcessHeap () returned 0x440000
	[0044.285] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4e0ae8 | out: hHeap=0x440000) returned 1
	[0044.286] FindNextFileW (in: hFindFile=0x4cd238, lpFindFileData=0x346fa10 | out: lpFindFileData=0x346fa10*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x1, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0044.286] FindNextFileW (in: hFindFile=0x4cd238, lpFindFileData=0x346fa10 | out: lpFindFileData=0x346fa10*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x1, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0044.286] FindNextFileW (in: hFindFile=0x4cd238, lpFindFileData=0x346fa10 | out: lpFindFileData=0x346fa10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
	[0044.286] GetProcessHeap () returned 0x440000
	[0044.286] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x502de0
	[0044.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Config.Msi\\*", lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.286] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.286] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0044.286] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0044.286] GetProcessHeap () returned 0x440000
	[0044.286] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x502de0 | out: hHeap=0x440000) returned 1
	[0044.286] FindNextFileW (in: hFindFile=0x4cd238, lpFindFileData=0x346fa10 | out: lpFindFileData=0x346fa10*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0044.286] FindNextFileW (in: hFindFile=0x4cd238, lpFindFileData=0x346fa10 | out: lpFindFileData=0x346fa10*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0044.287] FindNextFileW (in: hFindFile=0x4cd238, lpFindFileData=0x346fa10 | out: lpFindFileData=0x346fa10*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
	[0044.287] GetProcessHeap () returned 0x440000
	[0044.287] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x502de0
	[0044.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\*", lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.287] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.287] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0044.287] GetProcessHeap () returned 0x440000
	[0044.287] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4e0ae8
	[0044.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0044.288] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.288] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1
	[0044.288] GetProcessHeap () returned 0x440000
	[0044.288] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x513de8
	[0044.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.289] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.289] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1
	[0044.289] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1
	[0044.289] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1
	[0044.289] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.289] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.289] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.289] GetProcessHeap () returned 0x440000
	[0044.289] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x513de8 | out: hHeap=0x440000) returned 1
	[0044.289] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1
	[0044.289] GetProcessHeap () returned 0x440000
	[0044.289] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x513de8
	[0044.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.290] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.290] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1
	[0044.290] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1
	[0044.290] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1
	[0044.290] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.290] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.291] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.291] GetProcessHeap () returned 0x440000
	[0044.291] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x513de8 | out: hHeap=0x440000) returned 1
	[0044.291] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1
	[0044.291] GetProcessHeap () returned 0x440000
	[0044.291] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x513de8
	[0044.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.292] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.292] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1
	[0044.292] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1
	[0044.292] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1
	[0044.292] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.292] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.292] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.293] GetProcessHeap () returned 0x440000
	[0044.293] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x513de8 | out: hHeap=0x440000) returned 1
	[0044.293] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1
	[0044.293] GetProcessHeap () returned 0x440000
	[0044.293] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x513de8
	[0044.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.294] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.294] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1
	[0044.294] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1
	[0044.294] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1
	[0044.294] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.294] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.294] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.295] GetProcessHeap () returned 0x440000
	[0044.295] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x513de8 | out: hHeap=0x440000) returned 1
	[0044.295] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1
	[0044.295] GetProcessHeap () returned 0x440000
	[0044.295] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x513de8
	[0044.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.295] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.295] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.295] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1
	[0044.295] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1
	[0044.295] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1
	[0044.295] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0
	[0044.295] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.295] GetProcessHeap () returned 0x440000
	[0044.295] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x513de8 | out: hHeap=0x440000) returned 1
	[0044.295] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1
	[0044.296] GetProcessHeap () returned 0x440000
	[0044.296] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x513de8
	[0044.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.297] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.297] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
	[0044.297] GetProcessHeap () returned 0x440000
	[0044.297] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.299] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.299] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0044.299] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0044.299] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0044.299] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0
	[0044.299] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.299] GetProcessHeap () returned 0x440000
	[0044.299] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.300] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
	[0044.300] GetProcessHeap () returned 0x440000
	[0044.300] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f00
	[0044.300] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.300] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0044.300] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0044.301] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0044.301] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0
	[0044.301] FindClose (in: hFindFile=0x512f00 | out: hFindFile=0x512f00) returned 1
	[0044.301] GetProcessHeap () returned 0x440000
	[0044.301] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.301] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
	[0044.301] GetProcessHeap () returned 0x440000
	[0044.301] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f00
	[0044.301] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.301] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0044.301] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0044.301] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0044.301] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0
	[0044.301] FindClose (in: hFindFile=0x512f00 | out: hFindFile=0x512f00) returned 1
	[0044.301] GetProcessHeap () returned 0x440000
	[0044.301] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.301] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1
	[0044.302] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1
	[0044.302] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.302] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.302] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.302] GetProcessHeap () returned 0x440000
	[0044.302] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x513de8 | out: hHeap=0x440000) returned 1
	[0044.302] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1
	[0044.302] GetProcessHeap () returned 0x440000
	[0044.302] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.304] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.304] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0044.304] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0044.304] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1
	[0044.304] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.304] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.304] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.305] GetProcessHeap () returned 0x440000
	[0044.305] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.305] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1
	[0044.305] GetProcessHeap () returned 0x440000
	[0044.305] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f00
	[0044.306] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.306] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1
	[0044.306] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1
	[0044.307] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1
	[0044.307] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.307] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.307] FindClose (in: hFindFile=0x512f00 | out: hFindFile=0x512f00) returned 1
	[0044.307] GetProcessHeap () returned 0x440000
	[0044.307] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.307] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1
	[0044.307] GetProcessHeap () returned 0x440000
	[0044.307] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f00
	[0044.308] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.308] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.308] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1
	[0044.308] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1
	[0044.308] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1
	[0044.308] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0
	[0044.308] FindClose (in: hFindFile=0x512f00 | out: hFindFile=0x512f00) returned 1
	[0044.308] GetProcessHeap () returned 0x440000
	[0044.308] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.308] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1
	[0044.308] GetProcessHeap () returned 0x440000
	[0044.308] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f00
	[0044.311] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.311] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1
	[0044.311] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0044.311] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1
	[0044.311] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.311] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.311] FindClose (in: hFindFile=0x512f00 | out: hFindFile=0x512f00) returned 1
	[0044.312] GetProcessHeap () returned 0x440000
	[0044.312] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.312] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1
	[0044.312] GetProcessHeap () returned 0x440000
	[0044.312] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f00
	[0044.314] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.314] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1
	[0044.314] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1
	[0044.314] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1
	[0044.315] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.315] FindNextFileW (in: hFindFile=0x512f00, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.315] FindClose (in: hFindFile=0x512f00 | out: hFindFile=0x512f00) returned 1
	[0044.315] GetProcessHeap () returned 0x440000
	[0044.315] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.315] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1
	[0044.315] GetProcessHeap () returned 0x440000
	[0044.315] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.317] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.317] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1
	[0044.317] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1
	[0044.318] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0044.318] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.318] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
	[0044.318] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.318] GetProcessHeap () returned 0x440000
	[0044.318] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.318] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1
	[0044.318] GetProcessHeap () returned 0x440000
	[0044.318] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.386] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.386] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0044.386] GetProcessHeap () returned 0x440000
	[0044.386] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.389] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0044.389] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1
	[0044.389] FindNextFileW (in: hFindFile=0x512e80, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0
	[0044.389] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.390] GetProcessHeap () returned 0x440000
	[0044.390] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1
	[0044.390] FindNextFileW (in: hFindFile=0x512ec0, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0044.391] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.391] GetProcessHeap () returned 0x440000
	[0044.391] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.392] GetProcessHeap () returned 0x440000
	[0044.392] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x4f0af0
	[0044.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512ec0
	[0044.395] GetProcessHeap () returned 0x440000
	[0044.395] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3710048
	[0044.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e80
	[0044.398] FindClose (in: hFindFile=0x512e80 | out: hFindFile=0x512e80) returned 1
	[0044.399] GetProcessHeap () returned 0x440000
	[0044.399] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3710048 | out: hHeap=0x440000) returned 1
	[0044.399] FindClose (in: hFindFile=0x512ec0 | out: hFindFile=0x512ec0) returned 1
	[0044.399] GetProcessHeap () returned 0x440000
	[0044.399] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4f0af0 | out: hHeap=0x440000) returned 1
	[0044.649] GetProcessHeap () returned 0x440000
	[0044.649] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37918c8
	[0044.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0044.695] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0044.695] GetProcessHeap () returned 0x440000
	[0044.695] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0044.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0044.696] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0044.697] GetProcessHeap () returned 0x440000
	[0044.697] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0044.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0044.698] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0044.698] GetProcessHeap () returned 0x440000
	[0044.698] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0044.698] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0044.698] GetProcessHeap () returned 0x440000
	[0044.698] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4e0ae8 | out: hHeap=0x440000) returned 1
	[0044.698] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0044.698] GetProcessHeap () returned 0x440000
	[0044.698] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x502de0 | out: hHeap=0x440000) returned 1
	[0044.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\Admin\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0044.700] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0044.700] GetProcessHeap () returned 0x440000
	[0044.700] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501c00 | out: hHeap=0x440000) returned 1
	[0044.700] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0044.700] GetProcessHeap () returned 0x440000
	[0044.700] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4e0ae8 | out: hHeap=0x440000) returned 1
	[0044.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec4df2a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec4df2a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0044.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0044.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0044.701] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0044.701] GetProcessHeap () returned 0x440000
	[0044.701] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0044.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0044.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.798] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.798] GetProcessHeap () returned 0x440000
	[0044.798] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0044.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.800] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.800] GetProcessHeap () returned 0x440000
	[0044.800] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.800] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.801] GetProcessHeap () returned 0x440000
	[0044.801] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0044.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.804] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.804] GetProcessHeap () returned 0x440000
	[0044.804] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0044.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.805] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.805] GetProcessHeap () returned 0x440000
	[0044.805] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0044.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.807] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.807] GetProcessHeap () returned 0x440000
	[0044.807] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0044.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.808] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.808] GetProcessHeap () returned 0x440000
	[0044.808] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0044.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0044.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.809] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.809] GetProcessHeap () returned 0x440000
	[0044.809] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.810] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.810] GetProcessHeap () returned 0x440000
	[0044.810] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.810] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.810] GetProcessHeap () returned 0x440000
	[0044.810] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.811] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.811] GetProcessHeap () returned 0x440000
	[0044.811] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.812] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.812] GetProcessHeap () returned 0x440000
	[0044.812] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.812] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.812] GetProcessHeap () returned 0x440000
	[0044.812] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.814] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.814] GetProcessHeap () returned 0x440000
	[0044.814] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.815] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.815] GetProcessHeap () returned 0x440000
	[0044.815] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.816] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.816] GetProcessHeap () returned 0x440000
	[0044.816] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.816] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.816] GetProcessHeap () returned 0x440000
	[0044.816] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.817] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.817] GetProcessHeap () returned 0x440000
	[0044.817] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.819] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.819] GetProcessHeap () returned 0x440000
	[0044.819] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.819] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.819] GetProcessHeap () returned 0x440000
	[0044.819] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.821] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.822] GetProcessHeap () returned 0x440000
	[0044.822] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.822] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.822] GetProcessHeap () returned 0x440000
	[0044.822] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.823] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.823] GetProcessHeap () returned 0x440000
	[0044.823] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.823] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.823] GetProcessHeap () returned 0x440000
	[0044.823] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.823] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.823] GetProcessHeap () returned 0x440000
	[0044.823] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0044.824] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0044.826] GetProcessHeap () returned 0x440000
	[0044.826] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0044.827] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0044.827] GetProcessHeap () returned 0x440000
	[0044.827] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0044.827] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.827] GetProcessHeap () returned 0x440000
	[0044.827] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.827] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.827] GetProcessHeap () returned 0x440000
	[0044.828] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.828] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.828] GetProcessHeap () returned 0x440000
	[0044.828] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.828] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.828] GetProcessHeap () returned 0x440000
	[0044.828] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.829] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.829] GetProcessHeap () returned 0x440000
	[0044.829] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.830] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.830] GetProcessHeap () returned 0x440000
	[0044.830] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.830] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.830] GetProcessHeap () returned 0x440000
	[0044.830] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.831] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.831] GetProcessHeap () returned 0x440000
	[0044.831] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.832] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.832] GetProcessHeap () returned 0x440000
	[0044.832] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.832] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.832] GetProcessHeap () returned 0x440000
	[0044.832] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.832] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.832] GetProcessHeap () returned 0x440000
	[0044.833] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.833] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.833] GetProcessHeap () returned 0x440000
	[0044.833] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.834] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.834] GetProcessHeap () returned 0x440000
	[0044.834] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.834] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.834] GetProcessHeap () returned 0x440000
	[0044.834] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.835] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.835] GetProcessHeap () returned 0x440000
	[0044.835] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0044.835] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0044.835] GetProcessHeap () returned 0x440000
	[0044.835] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0044.836] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0044.836] GetProcessHeap () returned 0x440000
	[0044.836] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0044.836] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0044.836] GetProcessHeap () returned 0x440000
	[0044.837] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0044.837] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0044.837] GetProcessHeap () returned 0x440000
	[0044.837] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0044.837] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0044.837] GetProcessHeap () returned 0x440000
	[0044.837] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0044.838] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0044.838] GetProcessHeap () returned 0x440000
	[0044.838] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0044.839] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0044.839] GetProcessHeap () returned 0x440000
	[0044.839] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0044.839] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0044.839] GetProcessHeap () returned 0x440000
	[0044.839] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0044.839] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0044.839] GetProcessHeap () returned 0x440000
	[0044.841] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0044.841] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0044.842] GetProcessHeap () returned 0x440000
	[0044.842] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0044.842] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0044.842] GetProcessHeap () returned 0x440000
	[0044.842] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0044.842] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0044.842] GetProcessHeap () returned 0x440000
	[0044.842] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0044.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0045.077] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0045.078] GetProcessHeap () returned 0x440000
	[0045.078] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0045.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0045.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0045.084] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.085] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1
	[0045.087] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0
	[0045.088] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0045.088] GetProcessHeap () returned 0x440000
	[0045.089] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0045.090] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1
	[0045.091] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0
	[0045.091] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0045.093] GetProcessHeap () returned 0x440000
	[0045.093] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0045.093] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1
	[0045.093] GetProcessHeap () returned 0x440000
	[0045.094] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0045.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0045.094] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.094] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0045.094] GetProcessHeap () returned 0x440000
	[0045.094] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0045.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0045.094] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1
	[0045.095] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 0
	[0045.095] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0045.096] GetProcessHeap () returned 0x440000
	[0045.096] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0045.096] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1
	[0045.096] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1
	[0045.096] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1
	[0045.096] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1
	[0045.096] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1
	[0045.096] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1
	[0045.096] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1
	[0045.096] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1
	[0045.097] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1
	[0045.097] GetProcessHeap () returned 0x440000
	[0045.097] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0045.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0045.098] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0
	[0045.098] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0045.098] GetProcessHeap () returned 0x440000
	[0045.098] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1
	[0045.098] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1
	[0045.099] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1
	[0045.099] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1
	[0045.099] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1
	[0045.099] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1
	[0045.099] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1
	[0045.099] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1
	[0045.099] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1
	[0045.099] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1
	[0045.099] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1
	[0045.099] GetProcessHeap () returned 0x440000
	[0045.099] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0045.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0045.099] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.099] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1
	[0045.099] GetProcessHeap () returned 0x440000
	[0045.099] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.101] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.101] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0045.101] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="ACCESS~2.XML")) returned 1
	[0045.101] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.101] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.101] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.102] GetProcessHeap () returned 0x440000
	[0045.102] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.102] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1
	[0045.102] GetProcessHeap () returned 0x440000
	[0045.102] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.102] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.102] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1
	[0045.102] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.102] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.102] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.102] GetProcessHeap () returned 0x440000
	[0045.102] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.102] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1
	[0045.102] GetProcessHeap () returned 0x440000
	[0045.102] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.102] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.102] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0045.102] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.102] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.103] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.103] GetProcessHeap () returned 0x440000
	[0045.103] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.103] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1
	[0045.103] GetProcessHeap () returned 0x440000
	[0045.103] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.103] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.103] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="INFOPA~1.XML")) returned 1
	[0045.103] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.103] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.103] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.103] GetProcessHeap () returned 0x440000
	[0045.103] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.103] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1
	[0045.103] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1
	[0045.103] GetProcessHeap () returned 0x440000
	[0045.103] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.104] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.104] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1
	[0045.104] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1
	[0045.104] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1
	[0045.104] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0045.104] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0045.104] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1
	[0045.104] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="PROMOI~1.DLL")) returned 1
	[0045.104] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1
	[0045.104] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1
	[0045.105] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1
	[0045.105] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1
	[0045.163] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.164] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.164] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.164] GetProcessHeap () returned 0x440000
	[0045.164] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.164] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="OFFICE~2.EN-")) returned 1
	[0045.164] GetProcessHeap () returned 0x440000
	[0045.164] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.164] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0045.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.165] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.165] GetProcessHeap () returned 0x440000
	[0045.165] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.165] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1
	[0045.165] GetProcessHeap () returned 0x440000
	[0045.165] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0045.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 0
	[0045.165] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.165] GetProcessHeap () returned 0x440000
	[0045.165] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.165] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="ONENOT~1.EN-")) returned 1
	[0045.165] GetProcessHeap () returned 0x440000
	[0045.165] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.166] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0045.166] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.166] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.166] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.166] GetProcessHeap () returned 0x440000
	[0045.166] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.166] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1
	[0045.166] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1
	[0045.166] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="OUTLOO~1.EN-")) returned 1
	[0045.166] GetProcessHeap () returned 0x440000
	[0045.166] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.166] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.166] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="OUTLOO~1.XML")) returned 1
	[0045.166] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.166] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.166] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.166] GetProcessHeap () returned 0x440000
	[0045.166] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.166] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1
	[0045.166] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0045.167] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1
	[0045.167] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="POWERP~1.EN-")) returned 1
	[0045.167] GetProcessHeap () returned 0x440000
	[0045.167] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.167] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.167] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="POWERP~1.XML")) returned 1
	[0045.167] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.167] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.167] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.167] GetProcessHeap () returned 0x440000
	[0045.167] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.167] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1
	[0045.167] GetProcessHeap () returned 0x440000
	[0045.167] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.167] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.167] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="PRJPRO~1.XML")) returned 1
	[0045.168] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.168] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.168] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.168] GetProcessHeap () returned 0x440000
	[0045.168] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.168] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="PROJEC~1.EN-")) returned 1
	[0045.168] GetProcessHeap () returned 0x440000
	[0045.168] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.168] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.168] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="PROJEC~1.XML")) returned 1
	[0045.168] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.168] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.168] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.168] GetProcessHeap () returned 0x440000
	[0045.168] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.168] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
	[0045.168] GetProcessHeap () returned 0x440000
	[0045.168] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.168] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.169] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0045.169] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0
	[0045.169] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.169] GetProcessHeap () returned 0x440000
	[0045.169] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.169] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
	[0045.169] GetProcessHeap () returned 0x440000
	[0045.169] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.266] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.266] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0045.266] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0
	[0045.266] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.266] GetProcessHeap () returned 0x440000
	[0045.266] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.266] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
	[0045.266] GetProcessHeap () returned 0x440000
	[0045.266] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.363] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.364] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0045.364] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0
	[0045.365] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.366] GetProcessHeap () returned 0x440000
	[0045.366] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.366] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="PROOFI~1.EN-")) returned 1
	[0045.366] GetProcessHeap () returned 0x440000
	[0045.366] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.366] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.366] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1
	[0045.366] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.366] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.366] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.366] GetProcessHeap () returned 0x440000
	[0045.366] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.366] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1
	[0045.366] GetProcessHeap () returned 0x440000
	[0045.366] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.513] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.513] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="PROPLU~1.XML")) returned 1
	[0045.514] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.514] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.514] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.514] GetProcessHeap () returned 0x440000
	[0045.514] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.514] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="PUBLIS~1.EN-")) returned 1
	[0045.514] GetProcessHeap () returned 0x440000
	[0045.514] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.592] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.592] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="PUBLIS~1.XML")) returned 1
	[0045.592] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.592] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0045.592] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.592] GetProcessHeap () returned 0x440000
	[0045.592] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.592] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0045.593] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="VISIO~1.EN-")) returned 1
	[0045.593] GetProcessHeap () returned 0x440000
	[0045.593] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.683] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.683] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.683] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1
	[0045.683] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0
	[0045.683] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.684] GetProcessHeap () returned 0x440000
	[0045.684] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.684] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1
	[0045.684] GetProcessHeap () returned 0x440000
	[0045.684] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.684] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.684] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.684] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.684] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1
	[0045.684] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0
	[0045.684] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.684] GetProcessHeap () returned 0x440000
	[0045.684] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.684] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 1
	[0045.684] GetProcessHeap () returned 0x440000
	[0045.684] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0045.684] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0045.785] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.785] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0045.785] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1
	[0045.785] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0
	[0045.786] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0045.786] GetProcessHeap () returned 0x440000
	[0045.786] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0045.786] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 0
	[0045.786] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0045.786] GetProcessHeap () returned 0x440000
	[0045.786] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0045.786] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1
	[0045.786] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1
	[0045.786] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1
	[0045.786] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1
	[0045.786] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1
	[0045.786] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1
	[0045.786] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1
	[0045.786] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1
	[0045.786] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1
	[0045.786] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1
	[0045.786] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1
	[0045.787] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0
	[0045.787] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0045.787] GetProcessHeap () returned 0x440000
	[0045.787] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0045.787] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0045.787] GetProcessHeap () returned 0x440000
	[0045.787] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0045.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0045.788] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.788] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1
	[0045.788] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1
	[0045.788] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="OSPPOB~1.XRM")) returned 1
	[0045.788] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1
	[0045.788] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1
	[0045.788] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1
	[0045.788] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1
	[0045.788] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1
	[0045.788] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0
	[0045.788] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0045.789] GetProcessHeap () returned 0x440000
	[0045.789] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0045.789] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1
	[0045.789] GetProcessHeap () returned 0x440000
	[0045.789] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0045.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0045.888] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.888] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1
	[0045.888] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1
	[0045.888] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1
	[0045.888] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1
	[0045.888] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0
	[0045.888] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0045.888] GetProcessHeap () returned 0x440000
	[0045.888] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0045.889] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1
	[0045.889] GetProcessHeap () returned 0x440000
	[0045.889] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0045.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0046.026] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.026] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0046.026] GetProcessHeap () returned 0x440000
	[0046.026] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0046.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0046.167] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.167] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1
	[0046.167] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1
	[0046.167] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 1
	[0046.167] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 0
	[0046.167] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0046.167] GetProcessHeap () returned 0x440000
	[0046.167] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0046.167] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1
	[0046.167] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1
	[0046.167] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1
	[0046.168] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1
	[0046.168] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1
	[0046.168] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1
	[0046.168] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="IMCONT~1.DLL")) returned 1
	[0046.168] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1
	[0046.168] GetProcessHeap () returned 0x440000
	[0046.168] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0046.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0046.325] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.325] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0046.325] GetProcessHeap () returned 0x440000
	[0046.325] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0046.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0046.325] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.325] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1
	[0046.326] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1
	[0046.326] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1
	[0046.326] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1
	[0046.326] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1
	[0046.326] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0
	[0046.326] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0046.326] GetProcessHeap () returned 0x440000
	[0046.326] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0046.326] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1
	[0046.326] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0
	[0046.326] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0046.326] GetProcessHeap () returned 0x440000
	[0046.326] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0046.326] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1
	[0046.326] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1
	[0046.326] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1
	[0046.326] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1
	[0046.326] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 1
	[0046.327] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 0
	[0046.327] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0046.327] GetProcessHeap () returned 0x440000
	[0046.327] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0046.327] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0046.327] GetProcessHeap () returned 0x440000
	[0046.327] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0046.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0046.464] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.464] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1
	[0046.464] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0
	[0046.464] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0046.465] GetProcessHeap () returned 0x440000
	[0046.465] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0046.465] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0046.465] GetProcessHeap () returned 0x440000
	[0046.465] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0046.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0046.738] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.747] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0046.747] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0046.747] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1
	[0046.757] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1
	[0046.790] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1
	[0046.790] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0046.790] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1
	[0046.790] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0046.790] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0046.790] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1
	[0046.790] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1
	[0046.790] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1
	[0046.790] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1
	[0046.790] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1
	[0046.790] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1
	[0046.790] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1
	[0046.791] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1
	[0046.792] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1
	[0046.793] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1
	[0046.793] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1
	[0046.793] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0
	[0046.793] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0046.793] GetProcessHeap () returned 0x440000
	[0046.793] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0046.793] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0046.794] GetProcessHeap () returned 0x440000
	[0046.794] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0046.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0046.794] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.794] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0046.794] GetProcessHeap () returned 0x440000
	[0046.794] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0046.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513080
	[0046.794] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.794] FindNextFileW (in: hFindFile=0x513080, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0046.794] FindClose (in: hFindFile=0x513080 | out: hFindFile=0x513080) returned 1
	[0046.795] GetProcessHeap () returned 0x440000
	[0046.795] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0046.795] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1
	[0046.795] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1
	[0046.795] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1
	[0046.795] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1
	[0046.795] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1
	[0046.795] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0
	[0046.795] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0046.795] GetProcessHeap () returned 0x440000
	[0046.795] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0046.795] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1
	[0046.795] GetProcessHeap () returned 0x440000
	[0046.795] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0046.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0047.117] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.274] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1
	[0047.274] GetProcessHeap () returned 0x440000
	[0047.274] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0047.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0047.275] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.275] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1
	[0047.275] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1
	[0047.275] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0047.276] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0047.276] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0047.276] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0047.276] GetProcessHeap () returned 0x440000
	[0047.276] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0047.276] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1
	[0047.276] GetProcessHeap () returned 0x440000
	[0047.276] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0047.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0047.384] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.384] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1
	[0047.384] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1
	[0047.384] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0047.384] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0047.384] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0047.384] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0047.385] GetProcessHeap () returned 0x440000
	[0047.385] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0047.385] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1
	[0047.385] GetProcessHeap () returned 0x440000
	[0047.385] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0047.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0047.558] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.558] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1
	[0047.558] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1
	[0047.558] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0047.558] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0047.558] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0047.558] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0047.558] GetProcessHeap () returned 0x440000
	[0047.558] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0047.558] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1
	[0047.558] GetProcessHeap () returned 0x440000
	[0047.558] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0047.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0047.716] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.716] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1
	[0047.716] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1
	[0047.716] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0047.716] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0047.716] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0047.716] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0047.716] GetProcessHeap () returned 0x440000
	[0047.716] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0047.716] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1
	[0047.716] GetProcessHeap () returned 0x440000
	[0047.716] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0047.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0047.717] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.717] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1
	[0047.717] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1
	[0047.717] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0047.717] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0047.717] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0047.717] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0047.717] GetProcessHeap () returned 0x440000
	[0047.717] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0047.717] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1
	[0047.717] GetProcessHeap () returned 0x440000
	[0047.717] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0047.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0047.871] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.871] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1
	[0047.871] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1
	[0047.871] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0047.871] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0047.871] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0047.871] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0047.871] GetProcessHeap () returned 0x440000
	[0047.871] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0047.871] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1
	[0047.871] GetProcessHeap () returned 0x440000
	[0047.871] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0047.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0048.016] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.016] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1
	[0048.016] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1
	[0048.016] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0048.016] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0048.016] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0048.016] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0048.016] GetProcessHeap () returned 0x440000
	[0048.016] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0048.016] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1
	[0048.016] GetProcessHeap () returned 0x440000
	[0048.016] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0048.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0048.150] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.150] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1
	[0048.150] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1
	[0048.150] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0048.150] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0048.150] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0048.150] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0048.150] GetProcessHeap () returned 0x440000
	[0048.150] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0048.150] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1
	[0048.150] GetProcessHeap () returned 0x440000
	[0048.150] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0048.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0048.341] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.341] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1
	[0048.341] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1
	[0048.341] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0048.341] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0048.341] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0048.341] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0048.341] GetProcessHeap () returned 0x440000
	[0048.341] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0048.341] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1
	[0048.342] GetProcessHeap () returned 0x440000
	[0048.342] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0048.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0048.599] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.599] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1
	[0048.599] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1
	[0048.600] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0048.600] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0048.600] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0048.600] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0048.600] GetProcessHeap () returned 0x440000
	[0048.600] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0048.600] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1
	[0048.600] GetProcessHeap () returned 0x440000
	[0048.600] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0048.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0048.741] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.741] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1
	[0048.741] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1
	[0048.741] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0048.741] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0048.741] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0048.741] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0048.742] GetProcessHeap () returned 0x440000
	[0048.742] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0048.742] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1
	[0048.742] GetProcessHeap () returned 0x440000
	[0048.742] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0048.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0048.907] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.907] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1
	[0048.907] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1
	[0048.907] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0048.907] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0048.907] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0048.907] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0048.907] GetProcessHeap () returned 0x440000
	[0048.907] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0048.907] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1
	[0048.907] GetProcessHeap () returned 0x440000
	[0048.907] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0048.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0048.908] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.908] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1
	[0048.908] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1
	[0048.908] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0048.908] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0048.908] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0048.908] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0048.908] GetProcessHeap () returned 0x440000
	[0048.908] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0048.908] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1
	[0048.908] GetProcessHeap () returned 0x440000
	[0048.908] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0048.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0049.026] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.026] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1
	[0049.026] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1
	[0049.026] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0049.026] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0049.026] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0049.026] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0049.026] GetProcessHeap () returned 0x440000
	[0049.026] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0049.026] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1
	[0049.026] GetProcessHeap () returned 0x440000
	[0049.026] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0049.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0049.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1
	[0049.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1
	[0049.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0049.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0049.165] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0049.165] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0049.165] GetProcessHeap () returned 0x440000
	[0049.165] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0049.165] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1
	[0049.166] GetProcessHeap () returned 0x440000
	[0049.166] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0049.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0049.292] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.292] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1
	[0049.293] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1
	[0049.293] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0049.293] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0049.293] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0049.293] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0049.293] GetProcessHeap () returned 0x440000
	[0049.293] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0049.293] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1
	[0049.293] GetProcessHeap () returned 0x440000
	[0049.293] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0049.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0049.348] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.348] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1
	[0049.348] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1
	[0049.348] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0049.348] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0049.348] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0049.348] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0049.349] GetProcessHeap () returned 0x440000
	[0049.349] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0049.349] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1
	[0049.349] GetProcessHeap () returned 0x440000
	[0049.349] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0049.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0049.443] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.443] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1
	[0049.444] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1
	[0049.444] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0049.444] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0049.444] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0049.444] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0049.444] GetProcessHeap () returned 0x440000
	[0049.444] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0049.444] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1
	[0049.444] GetProcessHeap () returned 0x440000
	[0049.444] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0049.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0049.445] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.445] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1
	[0049.445] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1
	[0049.445] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0049.445] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0049.445] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0049.445] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0049.445] GetProcessHeap () returned 0x440000
	[0049.445] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0049.445] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1
	[0049.445] GetProcessHeap () returned 0x440000
	[0049.445] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0049.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0049.537] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.537] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1
	[0049.537] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1
	[0049.537] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0049.537] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0049.537] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0049.537] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0049.537] GetProcessHeap () returned 0x440000
	[0049.537] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0049.537] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1
	[0049.537] GetProcessHeap () returned 0x440000
	[0049.537] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0049.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0049.709] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.709] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1
	[0049.709] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1
	[0049.709] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0049.709] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0049.709] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0049.709] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0049.709] GetProcessHeap () returned 0x440000
	[0049.709] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0049.709] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1
	[0049.709] GetProcessHeap () returned 0x440000
	[0049.709] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0049.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0049.710] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.710] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1
	[0049.710] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1
	[0049.710] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0049.710] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0049.710] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0049.710] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0049.710] GetProcessHeap () returned 0x440000
	[0049.710] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0049.710] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1
	[0049.710] GetProcessHeap () returned 0x440000
	[0049.710] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0049.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0049.918] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.918] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1
	[0049.918] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1
	[0049.919] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0049.919] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0049.919] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0049.919] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0049.922] GetProcessHeap () returned 0x440000
	[0049.922] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0049.922] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1
	[0049.922] GetProcessHeap () returned 0x440000
	[0049.922] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0049.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.079] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.079] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1
	[0050.079] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1
	[0050.079] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.079] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.079] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.079] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.079] GetProcessHeap () returned 0x440000
	[0050.079] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.080] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1
	[0050.080] GetProcessHeap () returned 0x440000
	[0050.080] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.193] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.193] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1
	[0050.193] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1
	[0050.193] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.193] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.193] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.193] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.193] GetProcessHeap () returned 0x440000
	[0050.193] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.194] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1
	[0050.194] GetProcessHeap () returned 0x440000
	[0050.194] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.194] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.194] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1
	[0050.194] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1
	[0050.194] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.194] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.194] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.194] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.194] GetProcessHeap () returned 0x440000
	[0050.194] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.194] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1
	[0050.194] GetProcessHeap () returned 0x440000
	[0050.194] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.440] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.440] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1
	[0050.441] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1
	[0050.441] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.441] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.441] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.441] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.441] GetProcessHeap () returned 0x440000
	[0050.441] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.441] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1
	[0050.441] GetProcessHeap () returned 0x440000
	[0050.441] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.441] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.441] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1
	[0050.441] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1
	[0050.442] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.442] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.442] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.442] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.442] GetProcessHeap () returned 0x440000
	[0050.442] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.442] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1
	[0050.442] GetProcessHeap () returned 0x440000
	[0050.442] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.443] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.443] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.443] GetProcessHeap () returned 0x440000
	[0050.443] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.443] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1
	[0050.443] GetProcessHeap () returned 0x440000
	[0050.444] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.444] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.444] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.445] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1
	[0050.445] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1
	[0050.445] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.445] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.445] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.445] GetProcessHeap () returned 0x440000
	[0050.445] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.445] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1
	[0050.445] GetProcessHeap () returned 0x440000
	[0050.445] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.446] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.446] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.446] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1
	[0050.446] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1
	[0050.446] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.446] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.446] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.446] GetProcessHeap () returned 0x440000
	[0050.446] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.446] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1
	[0050.446] GetProcessHeap () returned 0x440000
	[0050.446] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.447] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.447] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.447] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1
	[0050.447] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1
	[0050.447] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.447] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.447] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.447] GetProcessHeap () returned 0x440000
	[0050.447] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.447] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1
	[0050.447] GetProcessHeap () returned 0x440000
	[0050.447] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.448] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.448] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.448] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1
	[0050.448] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1
	[0050.448] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.448] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.448] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.448] GetProcessHeap () returned 0x440000
	[0050.448] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.448] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1
	[0050.449] GetProcessHeap () returned 0x440000
	[0050.449] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.449] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.449] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.449] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1
	[0050.449] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1
	[0050.449] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.449] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.451] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.452] GetProcessHeap () returned 0x440000
	[0050.452] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.452] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1
	[0050.452] GetProcessHeap () returned 0x440000
	[0050.452] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.453] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.453] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.453] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1
	[0050.453] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1
	[0050.453] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.453] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.453] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.453] GetProcessHeap () returned 0x440000
	[0050.453] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.453] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1
	[0050.453] GetProcessHeap () returned 0x440000
	[0050.453] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.453] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.453] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.454] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1
	[0050.454] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1
	[0050.454] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.454] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.454] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.454] GetProcessHeap () returned 0x440000
	[0050.454] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.454] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1
	[0050.454] GetProcessHeap () returned 0x440000
	[0050.454] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.455] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.455] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.455] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1
	[0050.455] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1
	[0050.455] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.455] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.455] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.455] GetProcessHeap () returned 0x440000
	[0050.455] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.455] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1
	[0050.455] GetProcessHeap () returned 0x440000
	[0050.455] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.456] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.456] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.457] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1
	[0050.457] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1
	[0050.457] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.457] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.457] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.457] GetProcessHeap () returned 0x440000
	[0050.457] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.457] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1
	[0050.457] GetProcessHeap () returned 0x440000
	[0050.457] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.458] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.458] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.458] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1
	[0050.458] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1
	[0050.458] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.458] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.458] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.458] GetProcessHeap () returned 0x440000
	[0050.458] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.458] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1
	[0050.458] GetProcessHeap () returned 0x440000
	[0050.458] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.459] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.459] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.459] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1
	[0050.459] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1
	[0050.460] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.460] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.460] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.460] GetProcessHeap () returned 0x440000
	[0050.460] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.460] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1
	[0050.460] GetProcessHeap () returned 0x440000
	[0050.460] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.461] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.461] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.461] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1
	[0050.461] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1
	[0050.461] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.461] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.461] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.461] GetProcessHeap () returned 0x440000
	[0050.461] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.461] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1
	[0050.461] GetProcessHeap () returned 0x440000
	[0050.461] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.461] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.462] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.462] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1
	[0050.462] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1
	[0050.462] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.462] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.462] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.462] GetProcessHeap () returned 0x440000
	[0050.462] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.462] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1
	[0050.462] GetProcessHeap () returned 0x440000
	[0050.462] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.463] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.463] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.463] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1
	[0050.463] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1
	[0050.463] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.463] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0050.463] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.463] GetProcessHeap () returned 0x440000
	[0050.463] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.463] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1
	[0050.463] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1
	[0050.463] GetProcessHeap () returned 0x440000
	[0050.464] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.464] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.464] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.464] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.465] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1
	[0050.465] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1
	[0050.465] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0
	[0050.465] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.465] GetProcessHeap () returned 0x440000
	[0050.465] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.465] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1
	[0050.465] GetProcessHeap () returned 0x440000
	[0050.465] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.465] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.465] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0050.465] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0050.465] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1
	[0050.465] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1
	[0050.465] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0
	[0050.466] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.466] GetProcessHeap () returned 0x440000
	[0050.466] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.466] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0
	[0050.466] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0050.466] GetProcessHeap () returned 0x440000
	[0050.466] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0050.466] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1
	[0050.466] GetProcessHeap () returned 0x440000
	[0050.466] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0050.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0050.468] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.468] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1
	[0050.468] GetProcessHeap () returned 0x440000
	[0050.468] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.469] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.469] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1
	[0050.469] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0
	[0050.469] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.469] GetProcessHeap () returned 0x440000
	[0050.469] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.469] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1
	[0050.469] GetProcessHeap () returned 0x440000
	[0050.469] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.469] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.470] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.470] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1
	[0050.470] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0
	[0050.470] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.470] GetProcessHeap () returned 0x440000
	[0050.470] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.470] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1
	[0050.470] GetProcessHeap () returned 0x440000
	[0050.470] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.470] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.470] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1
	[0050.471] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0
	[0050.471] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.471] GetProcessHeap () returned 0x440000
	[0050.471] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.471] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1
	[0050.471] GetProcessHeap () returned 0x440000
	[0050.471] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.471] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.471] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1
	[0050.471] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1
	[0050.472] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1
	[0050.472] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0
	[0050.472] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.472] GetProcessHeap () returned 0x440000
	[0050.472] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.472] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1
	[0050.472] GetProcessHeap () returned 0x440000
	[0050.472] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.473] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.473] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1
	[0050.473] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0
	[0050.473] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.473] GetProcessHeap () returned 0x440000
	[0050.473] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.473] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1
	[0050.473] GetProcessHeap () returned 0x440000
	[0050.473] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.473] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.474] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.474] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1
	[0050.474] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1
	[0050.474] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1
	[0050.474] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0
	[0050.474] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.474] GetProcessHeap () returned 0x440000
	[0050.474] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.474] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1
	[0050.474] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1
	[0050.474] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1
	[0050.474] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1
	[0050.474] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1
	[0050.474] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1
	[0050.474] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0
	[0050.475] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0050.475] GetProcessHeap () returned 0x440000
	[0050.475] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0050.475] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0050.475] GetProcessHeap () returned 0x440000
	[0050.475] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0050.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0050.475] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.475] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0050.475] GetProcessHeap () returned 0x440000
	[0050.475] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.476] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.476] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0050.476] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.476] GetProcessHeap () returned 0x440000
	[0050.476] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.476] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0050.476] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0050.476] GetProcessHeap () returned 0x440000
	[0050.476] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0050.476] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0050.477] GetProcessHeap () returned 0x440000
	[0050.477] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0050.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0050.477] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.478] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1
	[0050.478] GetProcessHeap () returned 0x440000
	[0050.478] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.478] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.478] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0050.478] GetProcessHeap () returned 0x440000
	[0050.478] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0050.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0050.480] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.480] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1
	[0050.480] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1
	[0050.480] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1
	[0050.480] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1
	[0050.480] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1
	[0050.480] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1
	[0050.480] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1
	[0050.480] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1
	[0050.480] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0
	[0050.480] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0050.481] GetProcessHeap () returned 0x440000
	[0050.481] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0050.481] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1
	[0050.481] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 0
	[0050.481] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.481] GetProcessHeap () returned 0x440000
	[0050.481] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.481] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0
	[0050.481] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0050.481] GetProcessHeap () returned 0x440000
	[0050.481] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0050.481] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1
	[0050.482] GetProcessHeap () returned 0x440000
	[0050.482] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0050.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0050.663] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.663] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1
	[0050.663] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1
	[0050.663] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0
	[0050.663] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0050.664] GetProcessHeap () returned 0x440000
	[0050.664] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0050.664] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1
	[0050.664] GetProcessHeap () returned 0x440000
	[0050.664] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0050.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0050.664] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.664] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1
	[0050.664] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0
	[0050.664] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0050.665] GetProcessHeap () returned 0x440000
	[0050.665] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0050.665] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1
	[0050.665] GetProcessHeap () returned 0x440000
	[0050.665] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0050.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0050.665] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.666] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0050.666] GetProcessHeap () returned 0x440000
	[0050.666] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0050.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0050.874] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.874] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1
	[0050.874] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1
	[0050.874] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1
	[0050.874] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1
	[0050.874] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1
	[0050.874] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1
	[0050.875] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1
	[0050.875] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1
	[0050.875] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1
	[0050.875] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1
	[0050.875] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0
	[0050.875] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0050.876] GetProcessHeap () returned 0x440000
	[0050.876] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0050.876] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0
	[0050.876] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0050.876] GetProcessHeap () returned 0x440000
	[0050.876] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0050.876] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1
	[0050.876] GetProcessHeap () returned 0x440000
	[0050.876] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0050.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0051.075] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.075] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0051.075] GetProcessHeap () returned 0x440000
	[0051.075] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0051.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0051.366] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.368] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0051.372] GetProcessHeap () returned 0x440000
	[0051.372] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0051.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0051.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1
	[0051.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0051.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0
	[0051.493] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0051.493] GetProcessHeap () returned 0x440000
	[0051.493] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0051.493] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="VSTOIN~1.CON")) returned 1
	[0051.494] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1
	[0051.494] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0051.494] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1
	[0051.494] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0
	[0051.494] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0051.494] GetProcessHeap () returned 0x440000
	[0051.494] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0051.494] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1
	[0051.494] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1
	[0051.494] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1
	[0051.494] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0
	[0051.494] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0051.494] GetProcessHeap () returned 0x440000
	[0051.494] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0051.503] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="WEBFOL~1")) returned 1
	[0051.503] GetProcessHeap () returned 0x440000
	[0051.503] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0051.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0051.601] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.601] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0051.601] GetProcessHeap () returned 0x440000
	[0051.601] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0051.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0051.601] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.601] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 1
	[0051.601] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSVINT.DLL", cAlternateFileName="")) returned 0
	[0051.602] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0051.602] GetProcessHeap () returned 0x440000
	[0051.602] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0051.602] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 1
	[0051.602] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xaf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSV.DLL", cAlternateFileName="")) returned 0
	[0051.602] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0051.602] GetProcessHeap () returned 0x440000
	[0051.602] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0051.602] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0051.602] GetProcessHeap () returned 0x440000
	[0051.602] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0051.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0051.657] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.657] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0051.657] GetProcessHeap () returned 0x440000
	[0051.657] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0051.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0051.658] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.658] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1
	[0051.658] GetProcessHeap () returned 0x440000
	[0051.658] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0051.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0051.782] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.782] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0051.782] GetProcessHeap () returned 0x440000
	[0051.782] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0051.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0051.783] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.783] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1
	[0051.783] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870ca400, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x870ca400, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x296a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 0
	[0051.783] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0051.783] GetProcessHeap () returned 0x440000
	[0051.783] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0051.783] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c366f00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x6193ae30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c366f00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x267d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1
	[0051.783] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1
	[0051.783] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da56400, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xdb7fce60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1da56400, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x14cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0
	[0051.783] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0051.783] GetProcessHeap () returned 0x440000
	[0051.783] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0051.783] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0
	[0051.783] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0051.783] GetProcessHeap () returned 0x440000
	[0051.783] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0051.783] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0
	[0051.783] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0051.784] GetProcessHeap () returned 0x440000
	[0051.784] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0051.785] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0
	[0051.785] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0051.785] GetProcessHeap () returned 0x440000
	[0051.785] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0051.785] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0051.785] GetProcessHeap () returned 0x440000
	[0051.785] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0051.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0051.786] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.786] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1
	[0051.786] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbfd139, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xafbfd139, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xafbfd139, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0
	[0051.786] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0051.786] GetProcessHeap () returned 0x440000
	[0051.786] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0051.786] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1
	[0051.786] GetProcessHeap () returned 0x440000
	[0051.786] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0051.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0051.786] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.786] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0051.787] GetProcessHeap () returned 0x440000
	[0051.787] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37918c8
	[0051.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0051.876] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.876] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1
	[0051.876] GetProcessHeap () returned 0x440000
	[0051.876] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0051.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0051.876] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.876] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0051.876] GetProcessHeap () returned 0x440000
	[0051.876] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0051.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0051.877] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.877] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1
	[0051.877] GetProcessHeap () returned 0x440000
	[0051.877] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0051.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0051.877] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.878] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0051.878] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0051.878] GetProcessHeap () returned 0x440000
	[0051.878] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0051.878] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1
	[0051.878] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1
	[0051.878] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0
	[0051.878] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0051.878] GetProcessHeap () returned 0x440000
	[0051.878] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0051.878] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1
	[0051.878] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1
	[0051.878] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1
	[0051.878] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0
	[0051.878] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0051.878] GetProcessHeap () returned 0x440000
	[0051.878] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0051.878] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0
	[0051.878] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0051.969] GetProcessHeap () returned 0x440000
	[0051.969] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0051.970] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0051.970] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0051.970] GetProcessHeap () returned 0x440000
	[0051.970] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0051.970] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0051.970] GetProcessHeap () returned 0x440000
	[0051.970] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0051.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0052.110] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.110] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1
	[0052.110] GetProcessHeap () returned 0x440000
	[0052.110] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37918c8
	[0052.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0052.203] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.203] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1
	[0052.203] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1
	[0052.203] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0052.203] GetProcessHeap () returned 0x440000
	[0052.203] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0052.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0052.204] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0
	[0052.204] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0052.204] GetProcessHeap () returned 0x440000
	[0052.204] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1
	[0052.204] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1
	[0052.205] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1
	[0052.205] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1
	[0052.205] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1
	[0052.205] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0
	[0052.205] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0052.205] GetProcessHeap () returned 0x440000
	[0052.205] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0052.205] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0052.205] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0052.205] GetProcessHeap () returned 0x440000
	[0052.205] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37918c8
	[0052.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0052.205] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.205] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1
	[0052.205] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0
	[0052.205] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0052.205] GetProcessHeap () returned 0x440000
	[0052.205] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0052.205] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1
	[0052.206] GetProcessHeap () returned 0x440000
	[0052.206] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37918c8
	[0052.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0052.362] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.362] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1
	[0052.362] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1
	[0052.362] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0052.362] GetProcessHeap () returned 0x440000
	[0052.362] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0052.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0052.363] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.364] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1
	[0052.364] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e361, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc32e361, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1
	[0052.364] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a073ed, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a073ed, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1
	[0052.364] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1
	[0052.364] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1
	[0052.364] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1
	[0052.364] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0
	[0052.364] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0052.365] GetProcessHeap () returned 0x440000
	[0052.365] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0052.365] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cac9e93, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2cac9e93, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2cac9e93, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1
	[0052.365] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x2d63e7d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1
	[0052.365] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b36a80d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b36a80d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b6180d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1
	[0052.365] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc13c33e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc13c33e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e1eed0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1
	[0052.365] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9e4ffc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9e4ffc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1
	[0052.365] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf732e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfbf732e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e6a9c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1
	[0052.365] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1
	[0052.365] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0a3dca, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc0a3dca, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80edd5b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1
	[0052.365] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84872aa8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84872aa8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84872aa8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1
	[0052.365] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3801e6, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc3801e6, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x345eeb10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1
	[0052.365] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce53b36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfce53b36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80fc2d90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1
	[0052.365] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7d9276, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd7d9276, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x81dbdf30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1
	[0052.366] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d295c, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc0d295c, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3497fc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1
	[0052.366] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fdbb10, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93fdbb10, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94001c70, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1
	[0052.366] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6a878e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd6a878e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x835d7620, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1
	[0052.366] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1
	[0052.366] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0
	[0052.366] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0052.366] GetProcessHeap () returned 0x440000
	[0052.366] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0052.366] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1
	[0052.366] GetProcessHeap () returned 0x440000
	[0052.366] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37918c8
	[0052.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0052.367] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.367] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0052.367] GetProcessHeap () returned 0x440000
	[0052.367] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0052.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0052.367] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.367] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1
	[0052.367] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0
	[0052.367] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0052.368] GetProcessHeap () returned 0x440000
	[0052.368] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0052.368] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0052.368] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0052.368] GetProcessHeap () returned 0x440000
	[0052.368] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0052.368] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0052.368] GetProcessHeap () returned 0x440000
	[0052.368] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37918c8
	[0052.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0052.369] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.369] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0052.369] GetProcessHeap () returned 0x440000
	[0052.369] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0052.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0052.370] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.370] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d5cd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb6d5cd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1
	[0052.370] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1
	[0052.370] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1
	[0052.370] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1
	[0052.370] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0
	[0052.370] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0052.370] GetProcessHeap () returned 0x440000
	[0052.370] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0052.370] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad34e79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad34e79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad5afda, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1
	[0052.370] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14cd0c35, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14cd0c35, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x349a6d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1
	[0052.370] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c0138a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86c0138a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86c0138a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1
	[0052.370] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab69cf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x2ab69cf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x838ac7b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1
	[0052.370] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3c3a6b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc3c3a6b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x349f2860, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1
	[0052.370] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2cdc0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x1d2cdc0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x383128c0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c2ad0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84c2ad0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84c50e6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabf604b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfabf604b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xdf9a48f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa4ffde2f, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa52d1816, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f320f1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9350f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xcc9350f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xcc210f8, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f7e4bf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14f7e4bf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x44773fc0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e5c85, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc9e5c85, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xc97386e, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x44e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0
	[0052.371] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0052.371] GetProcessHeap () returned 0x440000
	[0052.371] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5390a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc5390a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xd8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1
	[0052.371] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0
	[0052.372] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0052.372] GetProcessHeap () returned 0x440000
	[0052.372] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0052.372] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0
	[0052.372] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0052.372] GetProcessHeap () returned 0x440000
	[0052.372] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501c00 | out: hHeap=0x440000) returned 1
	[0052.373] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0052.373] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1
	[0052.373] GetProcessHeap () returned 0x440000
	[0052.373] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x501c00
	[0052.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0052.375] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.375] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed7565, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0ed7565, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0efd6c5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="audiodepthconverter.ax", cAlternateFileName="")) returned 1
	[0052.375] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cc441, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x499cc441, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bod_r.TTF", cAlternateFileName="")) returned 1
	[0052.375] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0ed7565, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="directshowtap.ax", cAlternateFileName="")) returned 1
	[0052.375] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ae6642, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc9ae6642, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x227600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe", cAlternateFileName="")) returned 1
	[0052.375] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0052.375] GetProcessHeap () returned 0x440000
	[0052.375] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0052.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0052.376] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.376] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe.mui", cAlternateFileName="")) returned 1
	[0052.376] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll.mui", cAlternateFileName="")) returned 1
	[0052.376] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 1
	[0052.376] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll.mui", cAlternateFileName="")) returned 0
	[0052.376] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0052.376] GetProcessHeap () returned 0x440000
	[0052.376] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0052.376] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd559b52d, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd559b52d, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eurosti.TTF", cAlternateFileName="")) returned 1
	[0052.376] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fieldswitch.ax", cAlternateFileName="")) returned 1
	[0052.376] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="offset.ax", cAlternateFileName="")) returned 1
	[0052.377] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdBase.dll", cAlternateFileName="")) returned 1
	[0052.377] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0efd6c5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0efd6c5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb102e1c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x432600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll", cAlternateFileName="")) returned 1
	[0052.377] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b6b5be, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b6b5be, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bb787f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.dll", cAlternateFileName="")) returned 1
	[0052.377] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b5c53e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc7b5c53e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43aceae0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1cc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipeTran.dll", cAlternateFileName="")) returned 1
	[0052.377] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsink.ax", cAlternateFileName="")) returned 1
	[0052.377] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsource.ax", cAlternateFileName="")) returned 1
	[0052.377] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55c168a, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd55c168a, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18208, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecretST.TTF", cAlternateFileName="")) returned 1
	[0052.377] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1
	[0052.377] GetProcessHeap () returned 0x440000
	[0052.377] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0052.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0052.378] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.378] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dab239, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93dab239, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68934cfd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.fxh", cAlternateFileName="")) returned 1
	[0052.379] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d12cc5, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d12cc5, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x6895ae5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveAnother.png", cAlternateFileName="")) returned 1
	[0052.379] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d38e22, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93d38e22, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x68980fb9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb7835, dwReserved0=0x0, dwReserved1=0x0, cFileName="DissolveNoise.png", cAlternateFileName="")) returned 1
	[0052.379] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdStyles", cAlternateFileName="DVDSTY~1")) returned 1
	[0052.379] GetProcessHeap () returned 0x440000
	[0052.379] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37918c8
	[0052.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0052.381] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.381] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec183f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec183f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1
	[0052.382] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0052.382] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec3e551, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec3e551, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49c9fe3b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="16to9Squareframe_VideoInset.png", cAlternateFileName="")) returned 1
	[0052.382] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_Buttongraphic.png", cAlternateFileName="")) returned 1
	[0052.382] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec646ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec646ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0052.382] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ec8a80b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ec8a80b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4to3Squareframe_VideoInset.png", cAlternateFileName="")) returned 1
	[0052.382] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoy", cAlternateFileName="")) returned 1
	[0052.382] GetProcessHeap () returned 0x440000
	[0052.382] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0052.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0052.384] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.384] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cace83, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70cace83, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cc5f99, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x303d, dwReserved0=0x0, dwReserved1=0x0, cFileName="babyblue.png", cAlternateFileName="")) returned 1
	[0052.384] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d1f29a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d1f29a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5354a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground.wmv", cAlternateFileName="")) returned 1
	[0052.384] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d6b554, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70d6b554, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49cec0f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0052.384] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e03ac8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e03ac8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49d12255, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground.wmv", cAlternateFileName="")) returned 1
	[0052.384] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e29c25, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e29c25, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2661e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0052.384] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground.wmv", cAlternateFileName="")) returned 1
	[0052.384] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4fd82, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70e4fd82, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49eb515f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2279e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0052.384] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ec2199, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ec2199, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground.wmv", cAlternateFileName="")) returned 1
	[0052.384] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f345b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f345b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49edb2bd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2666c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0052.384] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5a70d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f5a70d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2472c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground.wmv", cAlternateFileName="")) returned 1
	[0052.385] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f8086a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70f8086a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1e96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBoyScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0052.385] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fa69c7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fa69c7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f0141b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlueRectangle.PNG", cAlternateFileName="")) returned 1
	[0052.385] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0052.385] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7103ef3b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7103ef3b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf63, dwReserved0=0x0, dwReserved1=0x0, cFileName="navSubpicture.png", cAlternateFileName="")) returned 1
	[0052.385] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70fccb24, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70fccb24, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_leftarrow.png", cAlternateFileName="")) returned 1
	[0052.385] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff2c81, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ff2c81, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f27579, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_rightarrow.png", cAlternateFileName="")) returned 1
	[0052.385] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 1
	[0052.385] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71018dde, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71018dde, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="nav_uparrow.png", cAlternateFileName="")) returned 0
	[0052.385] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0052.386] GetProcessHeap () returned 0x440000
	[0052.386] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0052.386] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyGirl", cAlternateFileName="")) returned 1
	[0052.386] GetProcessHeap () returned 0x440000
	[0052.386] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0052.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0052.387] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.387] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1
	[0052.387] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72858c15, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72858c15, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49f4d6d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1
	[0052.387] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7287ed72, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7287ed72, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1
	[0052.387] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72832ab8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72832ab8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4c15, dwReserved0=0x0, dwReserved1=0x0, cFileName="babypink.png", cAlternateFileName="")) returned 1
	[0052.387] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728a4ecf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728a4ecf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fbfaf1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728cb02c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728cb02c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x49fe5c4f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c432, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_matte2.wmv", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728f1189, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x728f1189, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a058069, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_MATTE2_PAL.wmv", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729172e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729172e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a351bc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39ef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="bear_formatted_rgb6.wmv", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729635a0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729635a0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bear_Formatted_RGB6_PAL.wmv", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729af85a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729af85a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a377d1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75d, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729d59b7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729d59b7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4a39de7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chapters-static.png", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fbb14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x729fbb14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4aba6851, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8df12, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a47dce, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a47dce, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-foreground.png", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a6df2b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a6df2b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b362f69, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="curtains.png", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12d98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_precomp_matte.wmv", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b52759, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b52759, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b3fb4e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_PreComp_MATTE_PAL.wmv", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b788b6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b788b6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x26618, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_matte.wmv", cAlternateFileName="")) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b9ea13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b9ea13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b42163f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x28558, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_MATTE_PAL.wmv", cAlternateFileName="")) returned 1
	[0052.389] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b0649f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b0649f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b44779d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_rgb.wmv", cAlternateFileName="")) returned 1
	[0052.389] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2c5fc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72b2c5fc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_trans_RGB_PAL.wmv", cAlternateFileName="")) returned 1
	[0052.389] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a94088, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72a94088, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5c4549, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1
	[0052.389] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72aba1e5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72aba1e5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x239b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainimage-mask.png", cAlternateFileName="")) returned 1
	[0052.389] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="notes-static.png", cAlternateFileName="")) returned 1
	[0052.389] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 1
	[0052.389] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae0342, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72ae0342, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-static.png", cAlternateFileName="")) returned 0
	[0052.389] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0052.390] GetProcessHeap () returned 0x440000
	[0052.390] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0052.390] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ecb0968, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ecb0968, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4b5ea6a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlackRectangle.bmp", cAlternateFileName="")) returned 1
	[0052.390] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_glass.png", cAlternateFileName="")) returned 1
	[0052.390] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebf2297, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebf2297, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_selectionsubpicture.png", cAlternateFileName="")) returned 1
	[0052.390] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebcc13a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ebcc13a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="circleround_videoinset.png", cAlternateFileName="")) returned 1
	[0052.390] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edbb2f3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6edbb2f3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c53d379, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6a91, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0052.578] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e990cc7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e990cc7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="circle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0052.578] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureA.png", cAlternateFileName="")) returned 1
	[0052.578] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ede1450, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ede1450, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c7063e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_SelectionSubpictureB.png", cAlternateFileName="")) returned 1
	[0052.578] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9679c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Circle_VideoInset.png", cAlternateFileName="")) returned 1
	[0052.578] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea030de, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea030de, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0052.578] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee2d70a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee2d70a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4c9fff39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5c9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dot.png", cAlternateFileName="")) returned 1
	[0052.578] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee799c4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee799c4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4cb30a29, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x422c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DvdTransform.fx", cAlternateFileName="")) returned 1
	[0052.578] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlipPage", cAlternateFileName="")) returned 1
	[0052.578] GetProcessHeap () returned 0x440000
	[0052.578] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0052.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0052.765] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.765] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe188e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe188e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0052.765] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe3ea46, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe3ea46, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0052.765] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fed6fba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fed6fba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0052.765] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d019747, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0052.765] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feb0e5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6feb0e5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0052.765] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0052.765] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe64ba3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe64ba3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0052.765] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fe8ad00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fe8ad00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0052.765] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 1
	[0052.765] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf278c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdf278c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagecurl.png", cAlternateFileName="")) returned 0
	[0052.765] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0052.766] GetProcessHeap () returned 0x440000
	[0052.766] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0052.766] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Full", cAlternateFileName="")) returned 1
	[0052.766] GetProcessHeap () returned 0x440000
	[0052.766] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0052.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0053.061] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.061] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0053.061] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d03f8a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0053.062] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotsdarkoverlay.png", cAlternateFileName="")) returned 1
	[0053.062] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f20ba7c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f20ba7c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x123d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dotslightoverlay.png", cAlternateFileName="")) returned 1
	[0053.062] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f12724e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f12724e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6794, dwReserved0=0x0, dwReserved1=0x0, cFileName="full.png", cAlternateFileName="")) returned 1
	[0053.062] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.062] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bf7c2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1bf7c2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.062] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d065a03, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.062] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1e591f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f1e591f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.062] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f173508, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f173508, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.062] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f199665, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f199665, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.062] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1
	[0053.062] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f231bd9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f231bd9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d08bb61, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 0
	[0053.062] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0053.063] GetProcessHeap () returned 0x440000
	[0053.063] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0053.063] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x75ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.063] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea2923b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea2923b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="heart_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.063] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eec5c7e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eec5c7e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.063] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eeebddb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eeebddb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heart_VideoInset.png", cAlternateFileName="")) returned 1
	[0053.063] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HueCycle", cAlternateFileName="")) returned 1
	[0053.063] GetProcessHeap () returned 0x440000
	[0053.063] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0053.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0053.117] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.117] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faf8c48, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6faf8c48, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0053.117] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb1eda5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb1eda5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1240d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0053.117] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fad2aeb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fad2aeb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x43e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="colorcycle.png", cAlternateFileName="")) returned 1
	[0053.117] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb44f02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb44f02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="huemainsubpicture2.png", cAlternateFileName="")) returned 1
	[0053.117] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc29730, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc29730, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.117] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.117] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbdd476, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbdd476, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d14a237, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.117] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.117] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb911bc, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb911bc, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.118] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbb7319, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fbb7319, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.118] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 1
	[0053.118] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb6b05f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fb6b05f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_stripe.png", cAlternateFileName="")) returned 0
	[0053.118] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0053.118] GetProcessHeap () returned 0x440000
	[0053.118] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0053.118] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LayeredTitles", cAlternateFileName="LAYERE~1")) returned 1
	[0053.118] GetProcessHeap () returned 0x440000
	[0053.119] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0053.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0053.120] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.120] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70bee7b2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70bee7b2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0053.120] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c60bc9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c60bc9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d170395, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0053.120] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c1490f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70c1490f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars60.png", cAlternateFileName="")) returned 1
	[0053.120] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70abdcca, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70abdcca, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="layers.png", cAlternateFileName="")) returned 1
	[0053.120] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.120] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.120] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba24f8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ba24f8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.120] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b300e1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b300e1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.121] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ae3e27, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70ae3e27, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.121] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.121] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b5623e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70b5623e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 0
	[0053.121] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0053.122] GetProcessHeap () returned 0x440000
	[0053.122] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0053.122] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories", cAlternateFileName="")) returned 1
	[0053.124] GetProcessHeap () returned 0x440000
	[0053.124] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0053.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d74af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710d74af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1964f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb08f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710fd60c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710fd60c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc32, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71123769, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71123769, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-mask.png", cAlternateFileName="")) returned 1
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711498c6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711498c6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-overlay.png", cAlternateFileName="")) returned 1
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71254251, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71254251, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d1bc651, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f993, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7116fa23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7116fa23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x280e, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d27ad27, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711bbcdd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711bbcdd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x946, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711e1e3a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x711e1e3a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6bbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-overlay.png", cAlternateFileName="")) returned 1
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71207f97, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71207f97, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memories_buttonClear.png", cAlternateFileName="")) returned 1
	[0053.126] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122e0f4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7122e0f4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_btn-back-static.png", cAlternateFileName="")) returned 1
	[0053.127] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7127a3ae, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7127a3ae, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_content-background.png", cAlternateFileName="")) returned 1
	[0053.127] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710b1352, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x710b1352, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="scrapbook.png", cAlternateFileName="")) returned 1
	[0053.127] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712c6668, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712c6668, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2a0e85, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x390c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_content-background.png", cAlternateFileName="")) returned 1
	[0053.127] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2c6fe3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_mainImage-mask.png", cAlternateFileName="")) returned 1
	[0053.127] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 1
	[0053.127] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ec7c5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x712ec7c5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_select-highlight.png", cAlternateFileName="")) returned 0
	[0053.127] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0053.128] GetProcessHeap () returned 0x440000
	[0053.128] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0053.128] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96ab6a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e96ab6a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_style_default_Thumbnail.png", cAlternateFileName="")) returned 1
	[0053.128] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.128] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef11f38, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef11f38, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.128] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef38095, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef38095, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.128] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e1f2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef5e1f2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.128] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.128] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8434f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ef8434f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.128] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OldAge", cAlternateFileName="")) returned 1
	[0053.128] GetProcessHeap () returned 0x440000
	[0053.128] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0053.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0053.130] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.130] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc1ca4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fcc1ca4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0053.130] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fce7e01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fce7e01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0053.130] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="decorative_rule.png", cAlternateFileName="")) returned 1
	[0053.130] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdcc62f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fdcc62f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.130] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd80375, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd80375, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.130] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fda64d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fda64d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d2ed141, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.130] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd340bb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd340bb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.130] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd0df5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd0df5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d31329f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.130] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd5a218, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fd5a218, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.130] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 1
	[0053.130] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc9bb47, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fc9bb47, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d3393fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vintage.png", cAlternateFileName="")) returned 0
	[0053.130] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0053.131] GetProcessHeap () returned 0x440000
	[0053.131] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0053.131] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="PERFOR~1")) returned 1
	[0053.131] GetProcessHeap () returned 0x440000
	[0053.131] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0053.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0053.139] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.139] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70562bb6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70562bb6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480blacksquare.png", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703015e6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703015e6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4d35f55b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1168, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dbda349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIconSubpictur.png", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70184844, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70184844, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc26605, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa942c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop.wmv", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7021cdb8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7021cdb8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dc728c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbebec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_loop_PAL.wmv", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7015e6e7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7015e6e7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIconSubpict.png", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70053d5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70053d5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x629b, dwReserved0=0x0, dwReserved1=0x0, cFileName="performance.png", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0016, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700a0016, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Mask1.png", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dd7d253, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perf_Scenes_Subpicture1.png", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70269072, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70269072, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1197, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702b532c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x702b532c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIconSubpi.png", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700ec2d0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700ec2d0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4dda33b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc24, dwReserved0=0x0, dwReserved1=0x0, cFileName="redmenu.png", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70327743, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70327743, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ddc950f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8232c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop.wmv", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70399b5a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70399b5a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4de61a87, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x95bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scene_loop_PAL.wmv", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonIcon.png", cAlternateFileName="")) returned 1
	[0053.140] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7011242d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7011242d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="TitleButtonSubpicture.png", cAlternateFileName="")) returned 1
	[0053.141] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703e5e14, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x703e5e14, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ded3ea1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a9204, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page.wmv", cAlternateFileName="")) returned 1
	[0053.141] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047e388, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7047e388, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e050c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0304, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_PAL.wmv", cAlternateFileName="")) returned 1
	[0053.141] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70588d13, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70588d13, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1a789b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xad264, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_notes.wmv", cAlternateFileName="")) returned 1
	[0053.141] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705fb12a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x705fb12a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e1f3b57, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Notes_PAL.wmv", cAlternateFileName="")) returned 1
	[0053.141] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7066d541, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7066d541, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e23fe13, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x999e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="title_trans_scene.wmv", cAlternateFileName="")) returned 1
	[0053.141] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70705ab5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70705ab5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa16e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Trans_Scene_PAL.wmv", cAlternateFileName="")) returned 1
	[0053.141] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70079eb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70079eb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="userContent_16x9_imagemask.png", cAlternateFileName="")) returned 1
	[0053.141] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 1
	[0053.141] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700c6173, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x700c6173, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e53996b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemenu.png", cAlternateFileName="")) returned 0
	[0053.141] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0053.142] GetProcessHeap () returned 0x440000
	[0053.142] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0053.142] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets", cAlternateFileName="")) returned 1
	[0053.142] GetProcessHeap () returned 0x440000
	[0053.142] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0053.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0053.326] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.326] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72003fbd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72003fbd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x39eaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG.wmv", cAlternateFileName="")) returned 1
	[0053.326] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72050277, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72050277, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e55fac9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720763d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x720763d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e5d1ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG.wmv", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7210e948, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7210e948, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e61e19f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-over-select.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242e5e9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7242e5e9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e66a45b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-back-static.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72454746, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72454746, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-over-select.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7247a8a3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7247a8a3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-next-static.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722b1847, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722b1847, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6905b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-over-DOT.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-over-select.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a0a00, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724a0a00, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_btn-previous-static.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6b6717, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x33b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-border.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1681, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-highlight.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722fdb01, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722fdb01, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4e6dc875, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-imageMask.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722d79a4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x722d79a4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea22689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x643e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_frame-shadow.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-backglow.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724eccba, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724eccba, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-border.png", cAlternateFileName="")) returned 1
	[0053.327] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724c6b5d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x724c6b5d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_image-frame-ImageMask.png", cAlternateFileName="")) returned 1
	[0053.328] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7240848c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7240848c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pets_notes-txt-background.png", cAlternateFileName="")) returned 1
	[0053.328] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fdde60, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71fdde60, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea487e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x41ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="rollinghills.png", cAlternateFileName="")) returned 1
	[0053.328] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215ac02, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7215ac02, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ea6e945, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG.wmv", cAlternateFileName="")) returned 1
	[0053.328] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72180d5f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72180d5f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec1184f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3fc64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_INTRO_BG_PAL.wmv", cAlternateFileName="")) returned 1
	[0053.328] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x721cd019, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x721cd019, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ec379ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG.wmv", cAlternateFileName="")) returned 1
	[0053.328] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7223f430, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7223f430, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ecf6083, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd43ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenes_LOOP_BG_PAL.wmv", cAlternateFileName="")) returned 1
	[0053.328] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72323c5e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72323c5e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ed4233f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe3dca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref.wmv", cAlternateFileName="")) returned 1
	[0053.328] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 1
	[0053.328] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723bc1d2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x723bc1d2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xf188a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Title_Page_Ref_PAL.wmv", cAlternateFileName="")) returned 0
	[0053.328] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0053.329] GetProcessHeap () returned 0x440000
	[0053.329] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0053.329] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee00a15, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x4ee00a15, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_buttongraphic.png", cAlternateFileName="")) returned 1
	[0053.329] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8601df, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8601df, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1274, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_selectionsubpicture.png", cAlternateFileName="")) returned 1
	[0053.329] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e88633c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e88633c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="photoedge_videoinset.png", cAlternateFileName="")) returned 1
	[0053.329] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efaa4ac, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efaa4ac, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee00a15, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x59b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.329] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.329] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd0609, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6efd0609, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Postage_VideoInset.png", cAlternateFileName="")) returned 1
	[0053.329] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Push", cAlternateFileName="")) returned 1
	[0053.329] GetProcessHeap () returned 0x440000
	[0053.329] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0053.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0053.526] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.526] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0053.526] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f316407, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f316407, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047_576black.png", cAlternateFileName="")) returned 1
	[0053.526] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.527] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3626c1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3626c1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.527] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.527] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.527] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.527] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f33c564, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f33c564, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee26b73, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.527] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2f02aa, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2f02aa, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="push.png", cAlternateFileName="")) returned 1
	[0053.527] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="pushplaysubpicture.png", cAlternateFileName="")) returned 1
	[0053.527] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f38881e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f38881e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_item.png", cAlternateFileName="")) returned 1
	[0053.527] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 1
	[0053.527] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3ae97b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3ae97b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee4ccd1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="push_title.png", cAlternateFileName="")) returned 0
	[0053.527] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0053.528] GetProcessHeap () returned 0x440000
	[0053.528] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0053.528] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rectangles", cAlternateFileName="RECTAN~1")) returned 1
	[0053.528] GetProcessHeap () returned 0x440000
	[0053.528] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0053.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0053.732] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.732] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0053.732] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1
	[0053.732] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0053.732] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1
	[0053.732] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.732] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.732] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.732] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.732] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.732] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.732] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflect.png", cAlternateFileName="")) returned 1
	[0053.733] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 1
	[0053.733] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 0
	[0053.733] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0053.733] GetProcessHeap () returned 0x440000
	[0053.733] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0053.733] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_babypink_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.733] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.733] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eac17af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eac17af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_highlights_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.734] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eae790c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eae790c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_performance_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.734] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb0da69, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb0da69, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_photo_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.734] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea754f5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea754f5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_plain_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.734] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb33bc6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb33bc6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_postage_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.734] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_scrapbook_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.734] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_specialocc_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.734] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_travel_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.734] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_widescreen_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.734] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResizingPanels", cAlternateFileName="RESIZI~1")) returned 1
	[0053.734] GetProcessHeap () returned 0x440000
	[0053.734] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0053.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0053.985] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.985] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0053.985] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0053.985] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandwidth.png", cAlternateFileName="")) returned 1
	[0053.985] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars80.png", cAlternateFileName="")) returned 1
	[0053.985] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.985] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.986] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.986] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.986] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0053.986] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0053.986] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1
	[0053.986] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1
	[0053.986] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0
	[0053.986] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0053.987] GetProcessHeap () returned 0x440000
	[0053.987] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0053.987] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e91e8b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e91e8b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scene_button_style_default_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0053.987] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8d25f6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8d25f6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_buttongraphic.png", cAlternateFileName="")) returned 1
	[0053.987] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8f8753, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8f8753, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_selectionsubpicture.png", cAlternateFileName="")) returned 1
	[0053.987] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8ac499, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8ac499, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_videoinset.png", cAlternateFileName="")) returned 1
	[0053.987] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shatter", cAlternateFileName="")) returned 1
	[0053.987] GetProcessHeap () returned 0x440000
	[0053.987] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0053.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0054.076] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.076] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0054.076] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0054.076] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.076] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.076] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.076] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.076] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.076] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.076] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 1
	[0054.076] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 0
	[0054.076] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0054.077] GetProcessHeap () returned 0x440000
	[0054.077] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0054.077] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialOccasion", cAlternateFileName="SPECIA~1")) returned 1
	[0054.077] GetProcessHeap () returned 0x440000
	[0054.077] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0054.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0054.170] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.170] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0054.170] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainscroll.png", cAlternateFileName="")) returned 1
	[0054.170] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.170] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.170] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.170] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x0, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0
	[0054.171] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0054.172] GetProcessHeap () returned 0x440000
	[0054.172] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0054.172] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1
	[0054.172] GetProcessHeap () returned 0x440000
	[0054.172] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0054.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldRing.png", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0054.282] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1
	[0054.283] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0054.283] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1
	[0054.283] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0054.283] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1
	[0054.283] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0054.283] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1
	[0054.283] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0054.283] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1
	[0054.283] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0
	[0054.283] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0054.284] GetProcessHeap () returned 0x440000
	[0054.284] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0054.284] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stacking", cAlternateFileName="")) returned 1
	[0054.284] GetProcessHeap () returned 0x440000
	[0054.284] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0054.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0054.540] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.540] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0054.541] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1
	[0054.541] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0054.541] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1
	[0054.541] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1
	[0054.541] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.541] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.541] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.541] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.541] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.541] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.541] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 1
	[0054.541] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 0
	[0054.541] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0054.542] GetProcessHeap () returned 0x440000
	[0054.542] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0054.542] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Travel", cAlternateFileName="")) returned 1
	[0054.542] GetProcessHeap () returned 0x440000
	[0054.542] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0054.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0054.652] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.652] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1
	[0054.652] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1
	[0054.652] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-bullet.png", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x0, cFileName="header-background.png", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport.png", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport.wmv", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="passportcover.png", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1
	[0054.653] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-background.png", cAlternateFileName="")) returned 1
	[0054.654] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1
	[0054.654] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x0, cFileName="travel.png", cAlternateFileName="")) returned 1
	[0054.654] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1
	[0054.654] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1
	[0054.654] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1
	[0054.654] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1
	[0054.654] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0
	[0054.654] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0054.655] GetProcessHeap () returned 0x440000
	[0054.655] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0054.655] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VideoWall", cAlternateFileName="VIDEOW~1")) returned 1
	[0054.655] GetProcessHeap () returned 0x440000
	[0054.655] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0054.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0054.655] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.655] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0054.655] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 1
	[0054.655] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 0
	[0054.655] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0054.655] GetProcessHeap () returned 0x440000
	[0054.655] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0054.655] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vignette", cAlternateFileName="")) returned 1
	[0054.656] GetProcessHeap () returned 0x440000
	[0054.656] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0054.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0054.812] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.812] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0054.812] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0054.812] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e3932, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8e3932, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0054.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0054.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="softedges.png", cAlternateFileName="")) returned 1
	[0054.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vignettemask25.png", cAlternateFileName="")) returned 1
	[0054.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 1
	[0054.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 0
	[0054.813] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0054.814] GetProcessHeap () returned 0x440000
	[0054.814] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0054.814] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 1
	[0054.814] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 0
	[0054.814] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0054.814] GetProcessHeap () returned 0x440000
	[0054.814] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0054.814] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9060745b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x9060745b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4877fc17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x379f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters.xml", cAlternateFileName="")) returned 1
	[0054.814] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 1
	[0054.814] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 0
	[0054.814] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0054.814] GetProcessHeap () returned 0x440000
	[0054.814] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0054.816] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1
	[0054.816] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonicsptransform.ax", cAlternateFileName="")) returned 1
	[0054.816] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 1
	[0054.816] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 0
	[0054.816] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0054.816] GetProcessHeap () returned 0x440000
	[0054.816] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501c00 | out: hHeap=0x440000) returned 1
	[0054.816] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0054.816] GetProcessHeap () returned 0x440000
	[0054.816] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x501c00
	[0054.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0054.817] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.817] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0054.817] GetProcessHeap () returned 0x440000
	[0054.817] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0054.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0054.818] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.818] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1
	[0054.818] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1
	[0054.818] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1
	[0054.818] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1
	[0054.818] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1
	[0054.818] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1
	[0054.818] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1
	[0054.818] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1
	[0054.819] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1
	[0054.819] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0
	[0054.819] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0054.819] GetProcessHeap () returned 0x440000
	[0054.819] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0054.819] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1
	[0054.819] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1
	[0054.819] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1
	[0054.820] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1
	[0054.820] GetProcessHeap () returned 0x440000
	[0054.820] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0054.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0054.821] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.821] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1
	[0054.821] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0
	[0054.821] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0054.821] GetProcessHeap () returned 0x440000
	[0054.821] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0054.821] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0054.821] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0
	[0054.821] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0054.821] GetProcessHeap () returned 0x440000
	[0054.821] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501c00 | out: hHeap=0x440000) returned 1
	[0054.821] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1
	[0054.821] GetProcessHeap () returned 0x440000
	[0054.821] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x501c00
	[0054.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0054.822] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.822] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1
	[0054.822] GetProcessHeap () returned 0x440000
	[0054.822] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0054.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0054.822] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.822] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1
	[0054.822] GetProcessHeap () returned 0x440000
	[0054.822] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0054.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0054.943] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0054.943] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0054.943] GetProcessHeap () returned 0x440000
	[0054.943] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37918c8
	[0054.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0055.228] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.228] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1
	[0055.228] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1
	[0055.228] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1
	[0055.228] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1
	[0055.228] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1
	[0055.228] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1
	[0055.228] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1
	[0055.228] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1
	[0055.228] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0
	[0055.229] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0055.229] GetProcessHeap () returned 0x440000
	[0055.229] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0055.229] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1
	[0055.229] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1
	[0055.230] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1
	[0055.230] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1
	[0055.230] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0055.230] GetProcessHeap () returned 0x440000
	[0055.230] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37918c8
	[0055.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0055.230] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.230] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0055.230] GetProcessHeap () returned 0x440000
	[0055.230] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37a18d0
	[0055.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0055.401] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.402] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1
	[0055.402] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1
	[0055.402] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0
	[0055.402] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0055.402] GetProcessHeap () returned 0x440000
	[0055.402] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0055.402] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0055.402] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0055.402] GetProcessHeap () returned 0x440000
	[0055.402] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0055.402] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 0
	[0055.402] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0055.402] GetProcessHeap () returned 0x440000
	[0055.402] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0055.402] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0
	[0055.402] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0055.402] GetProcessHeap () returned 0x440000
	[0055.402] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0055.403] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6003f570, ftCreationTime.dwHighDateTime=0x1d54e75, ftLastAccessTime.dwLowDateTime=0x48faa7b0, ftLastAccessTime.dwHighDateTime=0x1d52b67, ftLastWriteTime.dwLowDateTime=0x48faa7b0, ftLastWriteTime.dwHighDateTime=0x1d52b67, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="lastingquit.exe", cAlternateFileName="LASTIN~1.EXE")) returned 1
	[0055.403] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6003f570, ftCreationTime.dwHighDateTime=0x1d54e75, ftLastAccessTime.dwLowDateTime=0x48faa7b0, ftLastAccessTime.dwHighDateTime=0x1d52b67, ftLastWriteTime.dwLowDateTime=0x48faa7b0, ftLastWriteTime.dwHighDateTime=0x1d52b67, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="lastingquit.exe", cAlternateFileName="LASTIN~1.EXE")) returned 0
	[0055.404] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0055.404] GetProcessHeap () returned 0x440000
	[0055.404] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501c00 | out: hHeap=0x440000) returned 1
	[0055.404] FindNextFileW (in: hFindFile=0x512e00, lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x512f1610, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0055.404] GetProcessHeap () returned 0x440000
	[0055.404] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x501c00
	[0055.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x512f1610, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0055.404] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x512f1610, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.404] FindNextFileW (in: hFindFile=0x512e40, lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0055.404] GetProcessHeap () returned 0x440000
	[0055.404] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c70048
	[0055.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0055.412] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.412] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1
	[0055.413] GetProcessHeap () returned 0x440000
	[0055.413] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0055.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0055.415] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54952c00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54952c00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83130700, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83130700, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78587200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78587200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64147500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64147500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47589c00, ftCreationTime.dwHighDateTime=0x1bf325d, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47589c00, ftLastWriteTime.dwHighDateTime=0x1bf325d, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fc100, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4fc100, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e5400, ftCreationTime.dwHighDateTime=0x1bd4c10, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x262e5400, ftLastWriteTime.dwHighDateTime=0x1bd4c10, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6b4200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b6b4200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29618e00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29618e00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ff3400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26ff3400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef57700, ftCreationTime.dwHighDateTime=0x1bd4f8b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ef57700, ftLastWriteTime.dwHighDateTime=0x1bd4f8b, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf316a100, ftCreationTime.dwHighDateTime=0x1bd4bcc, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf316a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcc, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bee00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33bee00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1
	[0055.416] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa86700, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffa86700, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b28600, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b28600, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3bca500, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3bca500, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc6c400, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedc6c400, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9688900, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9688900, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2417b00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2417b00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7cc700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad7cc700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a69f700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a69f700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a54300, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a54300, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e47e00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65e47e00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d0800, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4d0800, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b98100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89b98100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81614600, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81614600, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9c9200, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9c9200, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1
	[0055.417] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a6b100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76a6b100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1
	[0055.418] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e1fd00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71e1fd00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1
	[0055.418] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a04e500, ftCreationTime.dwHighDateTime=0x1bd4e61, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a04e500, ftLastWriteTime.dwHighDateTime=0x1bd4e61, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1
	[0055.418] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4d3e00, ftCreationTime.dwHighDateTime=0x1bd4e56, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde4d3e00, ftLastWriteTime.dwHighDateTime=0x1bd4e56, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1
	[0055.418] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc18a400, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc18a400, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1
	[0055.418] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3cb900, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e3cb900, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1
	[0055.419] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5f2300, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a5f2300, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1
	[0055.419] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1c4f00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab1c4f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1
	[0055.419] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e812b00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e812b00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1
	[0055.419] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9eb2200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9eb2200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1
	[0055.419] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efb2900, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2efb2900, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1
	[0055.419] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9f500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8b9f500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1
	[0055.419] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14efd00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc14efd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1
	[0055.419] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d83ea00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d83ea00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e92000, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31e92000, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1fda300, ftCreationTime.dwHighDateTime=0x1bd4b21, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1fda300, ftLastWriteTime.dwHighDateTime=0x1bd4b21, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dd6400, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86dd6400, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54406500, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54406500, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530f3800, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x530f3800, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbf4f00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cbf4f00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8335e700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8335e700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa26000, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fa26000, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bb3800, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x68bb3800, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc436f700, ftCreationTime.dwHighDateTime=0x1bd4b08, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc436f700, ftLastWriteTime.dwHighDateTime=0x1bd4b08, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37a5800, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe37a5800, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec9bd00, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcec9bd00, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b6bc300, ftCreationTime.dwHighDateTime=0x1bd4c00, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b6bc300, ftLastWriteTime.dwHighDateTime=0x1bd4c00, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c87b100, ftCreationTime.dwHighDateTime=0x1bd4c18, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c87b100, ftLastWriteTime.dwHighDateTime=0x1bd4c18, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1
	[0055.420] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1
	[0055.421] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1
	[0055.421] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1
	[0055.421] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1
	[0055.421] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1
	[0055.421] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1
	[0055.421] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1
	[0055.421] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1
	[0055.421] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1
	[0055.421] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1
	[0055.421] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc41400, ftCreationTime.dwHighDateTime=0x1bd4c15, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfc41400, ftLastWriteTime.dwHighDateTime=0x1bd4c15, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2332bb00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2332bb00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d1cf00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d1cf00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1
	[0055.422] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaac100, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaaac100, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbb900, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcafbb900, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1
	[0055.423] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1
	[0055.424] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c365a00, ftCreationTime.dwHighDateTime=0x1bd4f6a, ftLastAccessTime.dwLowDateTime=0x5f47ba90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c365a00, ftLastWriteTime.dwHighDateTime=0x1bd4f6a, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1
	[0055.424] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93701b00, ftCreationTime.dwHighDateTime=0x1bd4f69, ftLastAccessTime.dwLowDateTime=0x517da370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93701b00, ftLastWriteTime.dwHighDateTime=0x1bd4f69, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1
	[0055.424] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6557800, ftCreationTime.dwHighDateTime=0x1bd4d57, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6557800, ftLastWriteTime.dwHighDateTime=0x1bd4d57, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1
	[0055.424] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f48c00, ftCreationTime.dwHighDateTime=0x1bd4d56, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe4f48c00, ftLastWriteTime.dwHighDateTime=0x1bd4d56, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1
	[0055.424] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c6cc00, ftCreationTime.dwHighDateTime=0x1bd4d5a, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4c6cc00, ftLastWriteTime.dwHighDateTime=0x1bd4d5a, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1
	[0055.424] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee332800, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee332800, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1
	[0055.424] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01fb00, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed01fb00, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe58e2200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe58e2200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1fa9b00, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1fa9b00, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf688200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf688200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b147c00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b147c00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851e9b00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x851e9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c98800, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1c98800, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a40fd00, ftCreationTime.dwHighDateTime=0x1bd4b27, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a40fd00, ftLastWriteTime.dwHighDateTime=0x1bd4b27, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888a3600, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x888a3600, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0f5c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d0f5c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fc8c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39fc8c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c58200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83c58200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82945500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82945500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a72500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a72500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81632800, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81632800, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1
	[0055.425] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81891500, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81891500, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9438d00, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9438d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5124300, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5124300, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b9eb00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b9eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b67a200, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b67a200, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9e7400, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9e7400, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae0bf00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ae0bf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b9b100, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63b9b100, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaca6c00, ftCreationTime.dwHighDateTime=0x1bd4b12, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcaca6c00, ftLastWriteTime.dwHighDateTime=0x1bd4b12, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2253700, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2253700, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbde25400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbde25400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d095f00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d095f00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd2a9800, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd2a9800, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e80900, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e80900, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac309900, ftCreationTime.dwHighDateTime=0x1bd4b43, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac309900, ftLastWriteTime.dwHighDateTime=0x1bd4b43, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf533800, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf533800, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1
	[0055.426] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf0de00, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcf0de00, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1
	[0055.427] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65d6900, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd65d6900, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1
	[0055.427] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52c3c00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd52c3c00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1
	[0055.428] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3fb0f00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3fb0f00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1
	[0055.428] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20fce500, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20fce500, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1
	[0055.428] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeba4c700, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeba4c700, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1
	[0055.428] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74832900, ftCreationTime.dwHighDateTime=0x1bd4bf7, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74832900, ftLastWriteTime.dwHighDateTime=0x1bd4bf7, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1
	[0055.428] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1
	[0055.428] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d46d00, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7d46d00, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1
	[0055.428] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1
	[0055.428] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1
	[0055.428] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77641800, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77641800, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1
	[0055.428] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfadcd00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfadcd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1
	[0055.428] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395c300, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6395c300, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1
	[0055.428] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60023c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60023c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1
	[0055.429] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6eb500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c6eb500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1
	[0055.429] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5295200, ftCreationTime.dwHighDateTime=0x1bd4b23, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5295200, ftLastWriteTime.dwHighDateTime=0x1bd4b23, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1
	[0055.429] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a2a00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99a2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1
	[0055.429] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca47100, ftCreationTime.dwHighDateTime=0x1bd4af0, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ca47100, ftLastWriteTime.dwHighDateTime=0x1bd4af0, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1
	[0055.429] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f738600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f738600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1
	[0056.221] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0056.224] GetProcessHeap () returned 0x440000
	[0056.224] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0056.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0056.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.227] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.227] GetProcessHeap () returned 0x440000
	[0056.227] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0056.227] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0056.227] GetProcessHeap () returned 0x440000
	[0056.228] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0056.228] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0056.228] GetProcessHeap () returned 0x440000
	[0056.228] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0056.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0056.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0056.235] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0056.236] GetProcessHeap () returned 0x440000
	[0056.236] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0056.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0056.239] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0056.240] GetProcessHeap () returned 0x440000
	[0056.240] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0056.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0056.242] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0056.242] GetProcessHeap () returned 0x440000
	[0056.242] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0056.242] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0056.242] GetProcessHeap () returned 0x440000
	[0056.242] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0056.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0056.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0056.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.373] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.373] GetProcessHeap () returned 0x440000
	[0056.373] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0056.375] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0056.375] GetProcessHeap () returned 0x440000
	[0056.375] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0056.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0056.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.377] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.377] GetProcessHeap () returned 0x440000
	[0056.377] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0056.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.380] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.381] GetProcessHeap () returned 0x440000
	[0056.381] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0056.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.386] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.387] GetProcessHeap () returned 0x440000
	[0056.387] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0056.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.390] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.391] GetProcessHeap () returned 0x440000
	[0056.391] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0056.391] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0056.391] GetProcessHeap () returned 0x440000
	[0056.391] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0056.391] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0056.391] GetProcessHeap () returned 0x440000
	[0056.391] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0056.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0056.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0056.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.400] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.400] GetProcessHeap () returned 0x440000
	[0056.400] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0056.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.402] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.402] GetProcessHeap () returned 0x440000
	[0056.402] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0056.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0056.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.411] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.411] GetProcessHeap () returned 0x440000
	[0056.411] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.412] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.412] GetProcessHeap () returned 0x440000
	[0056.412] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.413] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.413] GetProcessHeap () returned 0x440000
	[0056.413] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.414] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.414] GetProcessHeap () returned 0x440000
	[0056.414] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.447] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.447] GetProcessHeap () returned 0x440000
	[0056.447] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.448] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.449] GetProcessHeap () returned 0x440000
	[0056.449] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.462] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.462] GetProcessHeap () returned 0x440000
	[0056.462] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.462] GetProcessHeap () returned 0x440000
	[0056.462] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.483] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.483] GetProcessHeap () returned 0x440000
	[0056.483] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.483] GetProcessHeap () returned 0x440000
	[0056.483] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.484] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.484] GetProcessHeap () returned 0x440000
	[0056.484] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.484] GetProcessHeap () returned 0x440000
	[0056.484] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.485] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.485] GetProcessHeap () returned 0x440000
	[0056.485] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.485] GetProcessHeap () returned 0x440000
	[0056.485] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.486] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.486] GetProcessHeap () returned 0x440000
	[0056.486] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.486] GetProcessHeap () returned 0x440000
	[0056.486] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.488] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.489] GetProcessHeap () returned 0x440000
	[0056.489] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.489] GetProcessHeap () returned 0x440000
	[0056.489] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.490] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.490] GetProcessHeap () returned 0x440000
	[0056.490] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.490] GetProcessHeap () returned 0x440000
	[0056.490] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.491] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.491] GetProcessHeap () returned 0x440000
	[0056.491] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.491] GetProcessHeap () returned 0x440000
	[0056.491] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.491] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0056.492] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0056.492] GetProcessHeap () returned 0x440000
	[0056.492] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.492] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0056.492] GetProcessHeap () returned 0x440000
	[0056.492] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0056.492] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.492] GetProcessHeap () returned 0x440000
	[0056.492] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0056.503] GetProcessHeap () returned 0x440000
	[0056.503] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.505] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.506] GetProcessHeap () returned 0x440000
	[0056.506] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.506] GetProcessHeap () returned 0x440000
	[0056.506] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.511] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.512] GetProcessHeap () returned 0x440000
	[0056.512] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.512] GetProcessHeap () returned 0x440000
	[0056.512] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.514] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.515] GetProcessHeap () returned 0x440000
	[0056.515] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.521] GetProcessHeap () returned 0x440000
	[0056.521] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0056.522] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0056.522] GetProcessHeap () returned 0x440000
	[0056.522] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.526] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0056.526] GetProcessHeap () returned 0x440000
	[0056.526] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0056.527] GetProcessHeap () returned 0x440000
	[0056.527] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0056.560] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0056.560] GetProcessHeap () returned 0x440000
	[0056.560] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.560] GetProcessHeap () returned 0x440000
	[0056.560] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0056.604] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0056.604] GetProcessHeap () returned 0x440000
	[0056.604] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.604] GetProcessHeap () returned 0x440000
	[0056.604] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0056.692] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0056.692] GetProcessHeap () returned 0x440000
	[0056.692] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.692] GetProcessHeap () returned 0x440000
	[0056.692] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0056.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0056.914] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0056.914] GetProcessHeap () returned 0x440000
	[0056.914] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0056.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0057.005] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0057.006] GetProcessHeap () returned 0x440000
	[0057.006] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0057.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0057.226] GetProcessHeap () returned 0x440000
	[0057.226] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37918c8
	[0057.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0057.228] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0057.228] GetProcessHeap () returned 0x440000
	[0057.228] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0057.228] GetProcessHeap () returned 0x440000
	[0057.228] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37918c8
	[0057.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0057.303] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0057.304] GetProcessHeap () returned 0x440000
	[0057.304] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0057.304] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0057.304] GetProcessHeap () returned 0x440000
	[0057.304] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0057.306] GetProcessHeap () returned 0x440000
	[0057.306] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0057.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0057.363] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0057.363] GetProcessHeap () returned 0x440000
	[0057.363] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0057.363] GetProcessHeap () returned 0x440000
	[0057.363] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3c81598
	[0057.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0057.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0057.654] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0057.654] GetProcessHeap () returned 0x440000
	[0057.654] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0057.654] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0057.655] GetProcessHeap () returned 0x440000
	[0057.655] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0057.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0057.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0057.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0057.729] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0057.729] GetProcessHeap () returned 0x440000
	[0057.729] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0057.729] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0057.729] GetProcessHeap () returned 0x440000
	[0057.729] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0057.729] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0057.729] GetProcessHeap () returned 0x440000
	[0057.729] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0057.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0057.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0057.976] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0057.977] GetProcessHeap () returned 0x440000
	[0057.977] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0057.977] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0057.977] GetProcessHeap () returned 0x440000
	[0057.977] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0057.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0057.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0057.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0057.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0057.985] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0057.985] GetProcessHeap () returned 0x440000
	[0057.985] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0057.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0057.989] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0057.989] GetProcessHeap () returned 0x440000
	[0057.989] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0057.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0057.989] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0057.989] GetProcessHeap () returned 0x440000
	[0057.989] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0057.989] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0057.989] GetProcessHeap () returned 0x440000
	[0057.989] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0057.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0057.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0057.993] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0057.993] GetProcessHeap () returned 0x440000
	[0057.993] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0057.994] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0057.994] GetProcessHeap () returned 0x440000
	[0057.994] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0057.994] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0057.994] GetProcessHeap () returned 0x440000
	[0057.994] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0057.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0057.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0057.997] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0057.998] GetProcessHeap () returned 0x440000
	[0057.998] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0057.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0058.000] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0058.001] GetProcessHeap () returned 0x440000
	[0058.001] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0058.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0058.003] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0058.004] GetProcessHeap () returned 0x440000
	[0058.004] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0058.004] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0058.004] GetProcessHeap () returned 0x440000
	[0058.004] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0058.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0058.018] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0058.019] GetProcessHeap () returned 0x440000
	[0058.019] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0058.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0058.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0058.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0058.474] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0058.475] GetProcessHeap () returned 0x440000
	[0058.475] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0058.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0058.865] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0058.866] GetProcessHeap () returned 0x440000
	[0058.866] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0058.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0058.866] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0058.866] GetProcessHeap () returned 0x440000
	[0058.866] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0058.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0058.990] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0058.990] GetProcessHeap () returned 0x440000
	[0058.990] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0058.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0059.146] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0059.146] GetProcessHeap () returned 0x440000
	[0059.146] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0059.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0059.285] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0059.286] GetProcessHeap () returned 0x440000
	[0059.286] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0059.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0059.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0059.420] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.420] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x368c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attachments.jpg", cAlternateFileName="ATTACH~1.JPG")) returned 1
	[0059.420] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREAK.JPG", cAlternateFileName="")) returned 1
	[0059.421] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.JPG", cAlternateFileName="")) returned 1
	[0059.421] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKBOX.JPG", cAlternateFileName="")) returned 1
	[0059.421] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMBOBOX.JPG", cAlternateFileName="")) returned 1
	[0059.421] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x36bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.JPG", cAlternateFileName="")) returned 1
	[0059.421] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.JPG", cAlternateFileName="")) returned 1
	[0059.421] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATE.JPG", cAlternateFileName="")) returned 1
	[0059.421] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4139, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATETIME.JPG", cAlternateFileName="")) returned 1
	[0059.421] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalInk.jpg", cAlternateFileName="DIGITA~1.JPG")) returned 1
	[0059.421] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51f96af0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmbeddedView.jpg", cAlternateFileName="EMBEDD~1.JPG")) returned 1
	[0059.421] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e72, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADING.JPG", cAlternateFileName="")) returned 1
	[0059.421] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x139a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMAGE.JPG", cAlternateFileName="")) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe65, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINE.JPG", cAlternateFileName="")) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTBOX.JPG", cAlternateFileName="")) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x443a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NUMERIC.JPG", cAlternateFileName="")) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSWORD.JPG", cAlternateFileName="")) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIO.JPG", cAlternateFileName="")) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9342d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ad9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SectionHeading.jpg", cAlternateFileName="SECTIO~1.JPG")) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="StaticText.jpg", cAlternateFileName="STATIC~1.JPG")) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3983, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTAREA.JPG", cAlternateFileName="")) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a97, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTBOX.JPG", cAlternateFileName="")) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTVIEW.JPG", cAlternateFileName="")) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 0
	[0059.423] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0059.423] GetProcessHeap () returned 0x440000
	[0059.423] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0059.423] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1
	[0059.423] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1
	[0059.424] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1
	[0059.424] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x805, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsDoNotTrust.html", cAlternateFileName="FORMSD~1.HTM")) returned 1
	[0059.425] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc96, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1
	[0059.425] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x15fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1
	[0059.425] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1
	[0059.425] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1
	[0059.425] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1
	[0059.425] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsTemplates", cAlternateFileName="FORMST~1")) returned 1
	[0059.425] GetProcessHeap () returned 0x440000
	[0059.425] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0059.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0059.436] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.437] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2021e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Customer Support.fdt", cAlternateFileName="CUSTOM~1.FDT")) returned 1
	[0059.437] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x20b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardware Tracker.fdt", cAlternateFileName="HARDWA~1.FDT")) returned 1
	[0059.437] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x24051, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition - Customized.fdt", cAlternateFileName="HIRING~2.FDT")) returned 1
	[0059.437] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x248db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition.fdt", cAlternateFileName="HIRING~1.FDT")) returned 1
	[0059.437] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a52fdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x17d6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POLICIES.FDT", cAlternateFileName="")) returned 1
	[0059.437] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16b33, dwReserved0=0x0, dwReserved1=0x0, cFileName="Process Library.fdt", cAlternateFileName="PROCES~1.FDT")) returned 1
	[0059.437] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x18ead, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status Report.fdt", cAlternateFileName="STATUS~1.FDT")) returned 1
	[0059.437] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 1
	[0059.437] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 0
	[0059.437] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0059.438] GetProcessHeap () returned 0x440000
	[0059.438] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0059.438] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1
	[0059.438] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1
	[0059.438] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1
	[0059.438] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1
	[0059.438] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1
	[0059.438] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveFormsMetaData.xml", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0059.438] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENUS.JS", cAlternateFileName="")) returned 1
	[0059.438] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5836a590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_arrow.gif", cAlternateFileName="MENU_A~1.GIF")) returned 1
	[0059.438] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d273e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEARCH.GIF", cAlternateFileName="")) returned 1
	[0059.438] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x31, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x103f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.CSS", cAlternateFileName="")) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x505b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWBY.GIF", cAlternateFileName="")) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewDblClick.js", cAlternateFileName="VIEWDB~1.JS")) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 0
	[0059.439] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0059.439] GetProcessHeap () returned 0x440000
	[0059.439] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x512fc0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms3", cAlternateFileName="GR96F1~1")) returned 1
	[0059.439] GetProcessHeap () returned 0x440000
	[0059.439] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37b18d8
	[0059.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0059.674] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.676] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1
	[0059.676] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1
	[0059.676] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1
	[0059.676] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1
	[0059.676] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1
	[0059.676] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="BG_FOR~3.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1
	[0059.677] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1
	[0059.678] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1
	[0059.678] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1
	[0059.678] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BU7DFA~1.GIF")) returned 1
	[0059.678] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1
	[0059.678] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1
	[0059.678] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1
	[0059.678] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60975c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1
	[0059.678] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1
	[0059.678] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1388d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1
	[0059.678] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~2.HTM")) returned 1
	[0059.678] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~1.HTM")) returned 1
	[0059.680] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1
	[0059.680] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~1.HTM")) returned 1
	[0059.680] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1
	[0059.680] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1dda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1
	[0059.680] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1
	[0059.680] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1
	[0059.680] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x856, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1
	[0059.680] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529685b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x46fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1
	[0059.680] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1
	[0059.680] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1
	[0059.680] GetProcessHeap () returned 0x440000
	[0059.680] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37c18e0
	[0059.681] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0059.682] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.683] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1
	[0059.683] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="AMERIC~1")) returned 1
	[0059.683] GetProcessHeap () returned 0x440000
	[0059.683] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.684] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.684] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0059.684] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0059.684] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0059.684] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.684] GetProcessHeap () returned 0x440000
	[0059.684] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.684] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1
	[0059.684] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1
	[0059.684] GetProcessHeap () returned 0x440000
	[0059.684] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.684] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.685] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.685] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1
	[0059.685] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0059.685] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0059.685] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0059.685] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0059.685] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.685] GetProcessHeap () returned 0x440000
	[0059.685] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.685] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1
	[0059.685] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1
	[0059.685] GetProcessHeap () returned 0x440000
	[0059.685] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.686] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.686] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0059.686] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0059.686] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0059.686] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.686] GetProcessHeap () returned 0x440000
	[0059.686] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.686] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1
	[0059.686] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="BRIGHT~1")) returned 1
	[0059.686] GetProcessHeap () returned 0x440000
	[0059.686] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.687] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.687] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0059.687] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button.gif", cAlternateFileName="")) returned 1
	[0059.687] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1
	[0059.687] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1
	[0059.687] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0
	[0059.687] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.687] GetProcessHeap () returned 0x440000
	[0059.687] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.687] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1
	[0059.687] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="BRIGHT~2")) returned 1
	[0059.687] GetProcessHeap () returned 0x440000
	[0059.687] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.688] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.688] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0059.688] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0059.688] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0059.688] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0059.689] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.689] GetProcessHeap () returned 0x440000
	[0059.689] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.689] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1
	[0059.689] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1
	[0059.689] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604d91d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1
	[0059.689] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1
	[0059.689] GetProcessHeap () returned 0x440000
	[0059.689] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.690] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.690] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0059.690] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0059.690] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0059.690] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0059.690] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.690] GetProcessHeap () returned 0x440000
	[0059.690] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.690] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x977, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1
	[0059.690] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51e3fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1
	[0059.690] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="GRAYCH~1")) returned 1
	[0059.690] GetProcessHeap () returned 0x440000
	[0059.690] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.691] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.691] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0059.691] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0059.691] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0059.691] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0059.691] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.691] GetProcessHeap () returned 0x440000
	[0059.691] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.691] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xaf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1
	[0059.691] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1
	[0059.692] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="LIGHTS~1.CSS")) returned 1
	[0059.692] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1
	[0059.692] GetProcessHeap () returned 0x440000
	[0059.692] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.693] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.693] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0059.693] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0059.693] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0059.693] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.693] GetProcessHeap () returned 0x440000
	[0059.693] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.693] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1
	[0059.693] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1
	[0059.693] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1
	[0059.693] GetProcessHeap () returned 0x440000
	[0059.693] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.693] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.693] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0059.693] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0059.693] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0059.694] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0059.694] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.694] GetProcessHeap () returned 0x440000
	[0059.694] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.694] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1
	[0059.694] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6bd79c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1
	[0059.694] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1
	[0059.694] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1
	[0059.694] GetProcessHeap () returned 0x440000
	[0059.694] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.695] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.695] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0059.695] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0059.695] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0059.695] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.695] GetProcessHeap () returned 0x440000
	[0059.695] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.695] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1
	[0059.695] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1
	[0059.695] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1
	[0059.695] GetProcessHeap () returned 0x440000
	[0059.695] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.696] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.696] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0059.696] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1
	[0059.696] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1
	[0059.696] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0
	[0059.696] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.696] GetProcessHeap () returned 0x440000
	[0059.696] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.696] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe34, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1
	[0059.696] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1
	[0059.696] GetProcessHeap () returned 0x440000
	[0059.696] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.697] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.697] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1
	[0059.697] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0059.697] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0059.697] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0059.697] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.697] GetProcessHeap () returned 0x440000
	[0059.697] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.697] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1
	[0059.697] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x736, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1
	[0059.698] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1
	[0059.698] GetProcessHeap () returned 0x440000
	[0059.698] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.699] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.699] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0059.699] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1
	[0059.699] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1
	[0059.699] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1
	[0059.699] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0
	[0059.699] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.699] GetProcessHeap () returned 0x440000
	[0059.699] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.699] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1
	[0059.699] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1
	[0059.699] GetProcessHeap () returned 0x440000
	[0059.699] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37d18e8
	[0059.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.699] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0059.699] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0059.699] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1
	[0059.700] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1
	[0059.700] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1
	[0059.700] FindNextFileW (in: hFindFile=0x513140, lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0
	[0059.700] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.700] GetProcessHeap () returned 0x440000
	[0059.700] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.700] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1
	[0059.700] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5acc63d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1
	[0059.700] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1
	[0059.700] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1
	[0059.700] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0
	[0059.700] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0059.700] GetProcessHeap () returned 0x440000
	[0059.700] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0059.700] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1
	[0059.700] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1
	[0059.700] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1
	[0059.700] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1313, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa89, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="FORMSV~3.HTM")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x23ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418f4a00, ftCreationTime.dwHighDateTime=0x1c9fe9d, ftLastAccessTime.dwLowDateTime=0x58285d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x418f4a00, ftLastWriteTime.dwHighDateTime=0x1c9fe9d, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0aad90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3031bc00, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3031bc00, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~2.GIF")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1
	[0059.701] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1
	[0059.702] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1
	[0059.702] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1
	[0059.702] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1
	[0059.702] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1
	[0059.702] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b9b600, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58b9b600, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1
	[0059.702] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0059.702] GetProcessHeap () returned 0x440000
	[0059.702] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0059.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0059.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0059.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.711] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.711] GetProcessHeap () returned 0x440000
	[0059.711] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.711] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.711] GetProcessHeap () returned 0x440000
	[0059.711] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.712] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.712] GetProcessHeap () returned 0x440000
	[0059.712] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.819] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.819] GetProcessHeap () returned 0x440000
	[0059.819] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.870] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.870] GetProcessHeap () returned 0x440000
	[0059.870] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.870] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.876] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.876] GetProcessHeap () returned 0x440000
	[0059.876] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.915] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.916] GetProcessHeap () returned 0x440000
	[0059.916] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.956] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.957] GetProcessHeap () returned 0x440000
	[0059.957] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.958] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.958] GetProcessHeap () returned 0x440000
	[0059.958] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.964] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.964] GetProcessHeap () returned 0x440000
	[0059.964] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.965] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.965] GetProcessHeap () returned 0x440000
	[0059.965] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.966] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.966] GetProcessHeap () returned 0x440000
	[0059.966] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.970] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.970] GetProcessHeap () returned 0x440000
	[0059.970] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.971] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.971] GetProcessHeap () returned 0x440000
	[0059.971] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.971] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0059.971] GetProcessHeap () returned 0x440000
	[0059.971] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0059.971] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0059.971] GetProcessHeap () returned 0x440000
	[0059.971] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0059.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0059.974] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0059.975] GetProcessHeap () returned 0x440000
	[0059.975] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0059.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0059.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x346e590 | out: lpFindFileData=0x346e590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0059.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x346e300 | out: lpFindFileData=0x346e300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0059.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x346e070 | out: lpFindFileData=0x346e070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513180
	[0059.980] FindClose (in: hFindFile=0x513180 | out: hFindFile=0x513180) returned 1
	[0059.980] GetProcessHeap () returned 0x440000
	[0059.981] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0059.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x346e070 | out: lpFindFileData=0x346e070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513180
	[0059.982] FindClose (in: hFindFile=0x513180 | out: hFindFile=0x513180) returned 1
	[0059.983] GetProcessHeap () returned 0x440000
	[0059.983] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0059.983] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0059.983] GetProcessHeap () returned 0x440000
	[0059.983] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37d18e8 | out: hHeap=0x440000) returned 1
	[0059.983] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0059.987] GetProcessHeap () returned 0x440000
	[0059.987] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37c18e0 | out: hHeap=0x440000) returned 1
	[0059.987] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0059.987] GetProcessHeap () returned 0x440000
	[0059.987] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37b18d8 | out: hHeap=0x440000) returned 1
	[0059.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0059.989] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0059.989] GetProcessHeap () returned 0x440000
	[0059.989] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0059.989] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0059.989] GetProcessHeap () returned 0x440000
	[0059.989] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0059.990] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0059.990] GetProcessHeap () returned 0x440000
	[0059.990] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0059.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0059.993] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0059.994] GetProcessHeap () returned 0x440000
	[0059.994] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0059.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0060.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0060.054] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0060.054] GetProcessHeap () returned 0x440000
	[0060.054] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0060.054] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0060.054] GetProcessHeap () returned 0x440000
	[0060.054] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0060.056] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0060.056] GetProcessHeap () returned 0x440000
	[0060.056] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0060.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0060.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0060.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0060.228] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0060.228] GetProcessHeap () returned 0x440000
	[0060.228] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0060.228] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0060.228] GetProcessHeap () returned 0x440000
	[0060.228] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0060.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0060.230] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0060.230] GetProcessHeap () returned 0x440000
	[0060.230] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0060.230] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0060.230] GetProcessHeap () returned 0x440000
	[0060.230] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0060.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513040
	[0060.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0060.282] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0060.282] GetProcessHeap () returned 0x440000
	[0060.282] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0060.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0060.283] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0060.283] GetProcessHeap () returned 0x440000
	[0060.283] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0060.283] FindClose (in: hFindFile=0x513040 | out: hFindFile=0x513040) returned 1
	[0060.283] GetProcessHeap () returned 0x440000
	[0060.283] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c81598 | out: hHeap=0x440000) returned 1
	[0060.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0060.746] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0060.747] GetProcessHeap () returned 0x440000
	[0060.747] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0060.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0060.868] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0060.869] GetProcessHeap () returned 0x440000
	[0060.869] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0060.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0061.076] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0061.077] GetProcessHeap () returned 0x440000
	[0061.077] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0061.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ce49790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0061.334] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0061.335] GetProcessHeap () returned 0x440000
	[0061.335] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0061.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa6f6b5a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0061.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0061.365] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0061.365] GetProcessHeap () returned 0x440000
	[0061.365] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0061.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0061.365] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0061.365] GetProcessHeap () returned 0x440000
	[0061.365] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0061.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0061.366] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0061.366] GetProcessHeap () returned 0x440000
	[0061.366] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0061.366] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0061.366] GetProcessHeap () returned 0x440000
	[0061.366] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0061.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a1819b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0061.406] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0061.407] GetProcessHeap () returned 0x440000
	[0061.408] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0061.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70959970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70959970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0061.841] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0061.842] GetProcessHeap () returned 0x440000
	[0061.842] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0061.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0061.845] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0061.846] GetProcessHeap () returned 0x440000
	[0061.846] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0061.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0061.847] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0061.847] GetProcessHeap () returned 0x440000
	[0061.847] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0061.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0061.848] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0061.848] GetProcessHeap () returned 0x440000
	[0061.848] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0061.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x504da6a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x504da6a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0061.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.018] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.019] GetProcessHeap () returned 0x440000
	[0062.019] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.019] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.019] GetProcessHeap () returned 0x440000
	[0062.019] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.020] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.020] GetProcessHeap () returned 0x440000
	[0062.020] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.020] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.020] GetProcessHeap () returned 0x440000
	[0062.020] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.023] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.024] GetProcessHeap () returned 0x440000
	[0062.024] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.024] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.024] GetProcessHeap () returned 0x440000
	[0062.024] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.078] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.078] GetProcessHeap () returned 0x440000
	[0062.078] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0062.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.081] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.082] GetProcessHeap () returned 0x440000
	[0062.082] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.082] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.082] GetProcessHeap () returned 0x440000
	[0062.082] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.082] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.082] GetProcessHeap () returned 0x440000
	[0062.082] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.088] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.089] GetProcessHeap () returned 0x440000
	[0062.089] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0062.113] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0062.113] GetProcessHeap () returned 0x440000
	[0062.113] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0062.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0062.113] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0062.113] GetProcessHeap () returned 0x440000
	[0062.113] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0062.113] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.114] GetProcessHeap () returned 0x440000
	[0062.114] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.114] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.114] GetProcessHeap () returned 0x440000
	[0062.114] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.122] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.122] GetProcessHeap () returned 0x440000
	[0062.122] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.122] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.122] GetProcessHeap () returned 0x440000
	[0062.122] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.122] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.122] GetProcessHeap () returned 0x440000
	[0062.122] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.123] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.123] GetProcessHeap () returned 0x440000
	[0062.123] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501c00 | out: hHeap=0x440000) returned 1
	[0062.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.133] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.133] GetProcessHeap () returned 0x440000
	[0062.133] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.133] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.133] GetProcessHeap () returned 0x440000
	[0062.133] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.133] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.133] GetProcessHeap () returned 0x440000
	[0062.133] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.150] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.150] GetProcessHeap () returned 0x440000
	[0062.150] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.150] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.150] GetProcessHeap () returned 0x440000
	[0062.150] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.151] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.151] GetProcessHeap () returned 0x440000
	[0062.152] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0062.168] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0062.168] GetProcessHeap () returned 0x440000
	[0062.168] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0062.168] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.171] GetProcessHeap () returned 0x440000
	[0062.171] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.171] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.171] GetProcessHeap () returned 0x440000
	[0062.171] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.172] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.172] GetProcessHeap () returned 0x440000
	[0062.172] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.173] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.173] GetProcessHeap () returned 0x440000
	[0062.173] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.173] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.173] GetProcessHeap () returned 0x440000
	[0062.173] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe617dc20, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe617dc20, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.181] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.183] GetProcessHeap () returned 0x440000
	[0062.183] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.183] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.183] GetProcessHeap () returned 0x440000
	[0062.183] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.183] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.183] GetProcessHeap () returned 0x440000
	[0062.183] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.185] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.185] GetProcessHeap () returned 0x440000
	[0062.185] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.185] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.185] GetProcessHeap () returned 0x440000
	[0062.185] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.185] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.185] GetProcessHeap () returned 0x440000
	[0062.186] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.186] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.186] GetProcessHeap () returned 0x440000
	[0062.186] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.186] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.186] GetProcessHeap () returned 0x440000
	[0062.186] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.281] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.281] GetProcessHeap () returned 0x440000
	[0062.281] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.281] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.281] GetProcessHeap () returned 0x440000
	[0062.281] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.425] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.426] GetProcessHeap () returned 0x440000
	[0062.426] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.426] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.426] GetProcessHeap () returned 0x440000
	[0062.426] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.427] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.427] GetProcessHeap () returned 0x440000
	[0062.427] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.427] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.427] GetProcessHeap () returned 0x440000
	[0062.427] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.427] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.427] GetProcessHeap () returned 0x440000
	[0062.427] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x4232b3dd, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x4232b3dd, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.428] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.428] GetProcessHeap () returned 0x440000
	[0062.428] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.428] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.429] GetProcessHeap () returned 0x440000
	[0062.429] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.429] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.429] GetProcessHeap () returned 0x440000
	[0062.429] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.432] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.433] GetProcessHeap () returned 0x440000
	[0062.433] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.483] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.487] GetProcessHeap () returned 0x440000
	[0062.487] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.487] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.487] GetProcessHeap () returned 0x440000
	[0062.487] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6640820, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6640820, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.488] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.488] GetProcessHeap () returned 0x440000
	[0062.488] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.488] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.488] GetProcessHeap () returned 0x440000
	[0062.488] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.493] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.494] GetProcessHeap () returned 0x440000
	[0062.494] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.494] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.494] GetProcessHeap () returned 0x440000
	[0062.494] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.496] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.496] GetProcessHeap () returned 0x440000
	[0062.496] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.498] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.498] GetProcessHeap () returned 0x440000
	[0062.498] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.499] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.499] GetProcessHeap () returned 0x440000
	[0062.499] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.499] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.499] GetProcessHeap () returned 0x440000
	[0062.499] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.499] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.499] GetProcessHeap () returned 0x440000
	[0062.499] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.501] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.501] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.501] GetProcessHeap () returned 0x440000
	[0062.501] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.501] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.501] GetProcessHeap () returned 0x440000
	[0062.501] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.504] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.504] GetProcessHeap () returned 0x440000
	[0062.504] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.505] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.505] GetProcessHeap () returned 0x440000
	[0062.505] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.506] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.506] GetProcessHeap () returned 0x440000
	[0062.506] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.523] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.523] GetProcessHeap () returned 0x440000
	[0062.523] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.523] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.523] GetProcessHeap () returned 0x440000
	[0062.523] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x987bf1ac, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x987bf1ac, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.524] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.524] GetProcessHeap () returned 0x440000
	[0062.524] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.525] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.525] GetProcessHeap () returned 0x440000
	[0062.525] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0062.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0062.537] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0062.537] GetProcessHeap () returned 0x440000
	[0062.537] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0062.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0062.540] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0062.540] GetProcessHeap () returned 0x440000
	[0062.540] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0062.540] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0062.541] GetProcessHeap () returned 0x440000
	[0062.541] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0062.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0062.545] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0062.546] GetProcessHeap () returned 0x440000
	[0062.546] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0062.546] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.546] GetProcessHeap () returned 0x440000
	[0062.546] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0062.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0062.550] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0062.550] GetProcessHeap () returned 0x440000
	[0062.550] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0062.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0062.550] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0062.550] GetProcessHeap () returned 0x440000
	[0062.550] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0062.550] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0062.550] GetProcessHeap () returned 0x440000
	[0062.550] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0062.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805c807b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805c807b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0062.574] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0062.576] GetProcessHeap () returned 0x440000
	[0062.576] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0062.576] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.576] GetProcessHeap () returned 0x440000
	[0062.576] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0062.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0062.613] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0062.613] GetProcessHeap () returned 0x440000
	[0062.613] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0062.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513140
	[0062.613] FindClose (in: hFindFile=0x513140 | out: hFindFile=0x513140) returned 1
	[0062.613] GetProcessHeap () returned 0x440000
	[0062.613] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37a18d0 | out: hHeap=0x440000) returned 1
	[0062.613] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0062.613] GetProcessHeap () returned 0x440000
	[0062.613] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0062.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8057bdba, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8057bdba, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0062.628] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0062.629] GetProcessHeap () returned 0x440000
	[0062.629] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0062.629] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.629] GetProcessHeap () returned 0x440000
	[0062.629] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0062.673] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0062.677] GetProcessHeap () returned 0x440000
	[0062.677] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0062.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0062.678] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0062.678] GetProcessHeap () returned 0x440000
	[0062.678] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37918c8 | out: hHeap=0x440000) returned 1
	[0062.678] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.678] GetProcessHeap () returned 0x440000
	[0062.678] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8063a49c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8063a49c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.704] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.704] GetProcessHeap () returned 0x440000
	[0062.704] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.704] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.705] GetProcessHeap () returned 0x440000
	[0062.705] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.709] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.709] GetProcessHeap () returned 0x440000
	[0062.709] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa48ceb9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.710] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.710] GetProcessHeap () returned 0x440000
	[0062.710] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.743] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.744] GetProcessHeap () returned 0x440000
	[0062.744] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.745] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.745] GetProcessHeap () returned 0x440000
	[0062.745] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.747] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.747] GetProcessHeap () returned 0x440000
	[0062.747] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.794] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.794] GetProcessHeap () returned 0x440000
	[0062.794] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.794] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.794] GetProcessHeap () returned 0x440000
	[0062.794] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37818c0 | out: hHeap=0x440000) returned 1
	[0062.794] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.794] GetProcessHeap () returned 0x440000
	[0062.794] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806605fc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806605fc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.818] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.820] GetProcessHeap () returned 0x440000
	[0062.820] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.820] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.821] GetProcessHeap () returned 0x440000
	[0062.821] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.861] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.861] GetProcessHeap () returned 0x440000
	[0062.861] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0062.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.861] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.861] GetProcessHeap () returned 0x440000
	[0062.861] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0062.861] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.861] GetProcessHeap () returned 0x440000
	[0062.861] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8061433b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8061433b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.907] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.908] GetProcessHeap () returned 0x440000
	[0062.908] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.908] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.908] GetProcessHeap () returned 0x440000
	[0062.908] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.910] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.910] GetProcessHeap () returned 0x440000
	[0062.910] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0062.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.911] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.911] GetProcessHeap () returned 0x440000
	[0062.911] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0062.911] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.911] GetProcessHeap () returned 0x440000
	[0062.911] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.915] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.916] GetProcessHeap () returned 0x440000
	[0062.916] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0062.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.916] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.916] GetProcessHeap () returned 0x440000
	[0062.916] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0062.916] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.916] GetProcessHeap () returned 0x440000
	[0062.916] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.917] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.917] GetProcessHeap () returned 0x440000
	[0062.917] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0062.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.920] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.920] GetProcessHeap () returned 0x440000
	[0062.920] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0062.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.920] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.920] GetProcessHeap () returned 0x440000
	[0062.920] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0062.920] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.920] GetProcessHeap () returned 0x440000
	[0062.920] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8052fafa, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8052fafa, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0062.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.926] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.927] GetProcessHeap () returned 0x440000
	[0062.927] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0062.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0062.929] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0062.929] GetProcessHeap () returned 0x440000
	[0062.929] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0062.986] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0062.986] GetProcessHeap () returned 0x440000
	[0062.986] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0062.986] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0062.986] GetProcessHeap () returned 0x440000
	[0062.986] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0062.986] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.986] GetProcessHeap () returned 0x440000
	[0062.986] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0062.987] FindClose (in: hFindFile=0x512fc0 | out: hFindFile=0x512fc0) returned 1
	[0062.987] GetProcessHeap () returned 0x440000
	[0062.987] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c915a0 | out: hHeap=0x440000) returned 1
	[0062.987] FindClose (in: hFindFile=0x512e40 | out: hFindFile=0x512e40) returned 1
	[0062.987] GetProcessHeap () returned 0x440000
	[0062.987] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x3c70048 | out: hHeap=0x440000) returned 1
	[0062.988] FindClose (in: hFindFile=0x512e00 | out: hFindFile=0x512e00) returned 1
	[0062.988] GetProcessHeap () returned 0x440000
	[0062.988] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x4e0ae8 | out: hHeap=0x440000) returned 1
	[0062.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\*", lpFindFileData=0x346f780 | out: lpFindFileData=0x346f780*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e00
	[0062.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x346f4f0 | out: lpFindFileData=0x346f4f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf40b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf40b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512e40
	[0062.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x346f260 | out: lpFindFileData=0x346f260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512fc0
	[0063.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0063.030] FindClose (in: hFindFile=0x513000 | out: hFindFile=0x513000) returned 1
	[0063.030] GetProcessHeap () returned 0x440000
	[0063.030] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x467ce0 | out: hHeap=0x440000) returned 1
	[0063.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513000
	[0063.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0063.066] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0063.066] GetProcessHeap () returned 0x440000
	[0063.066] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0063.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0063.070] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0063.070] GetProcessHeap () returned 0x440000
	[0063.070] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0063.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0063.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.084] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.084] GetProcessHeap () returned 0x440000
	[0063.084] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.095] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.095] GetProcessHeap () returned 0x440000
	[0063.095] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.151] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.151] GetProcessHeap () returned 0x440000
	[0063.151] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.151] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.159] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.159] GetProcessHeap () returned 0x440000
	[0063.159] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.169] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.169] GetProcessHeap () returned 0x440000
	[0063.169] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.219] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.219] GetProcessHeap () returned 0x440000
	[0063.219] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.226] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.226] GetProcessHeap () returned 0x440000
	[0063.226] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.253] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.253] GetProcessHeap () returned 0x440000
	[0063.253] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.253] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.254] GetProcessHeap () returned 0x440000
	[0063.254] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.260] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.262] GetProcessHeap () returned 0x440000
	[0063.262] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.262] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.262] GetProcessHeap () returned 0x440000
	[0063.262] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.274] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.275] GetProcessHeap () returned 0x440000
	[0063.275] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.284] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.285] GetProcessHeap () returned 0x440000
	[0063.285] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.290] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.290] GetProcessHeap () returned 0x440000
	[0063.290] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.312] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.312] GetProcessHeap () returned 0x440000
	[0063.357] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.358] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1
	[0063.363] GetProcessHeap () returned 0x440000
	[0063.363] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.551] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.551] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10929, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0063.551] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1
	[0063.551] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0
	[0063.551] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.551] GetProcessHeap () returned 0x440000
	[0063.551] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.551] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1
	[0063.551] GetProcessHeap () returned 0x440000
	[0063.551] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.552] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.552] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10956, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0063.552] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1
	[0063.552] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0
	[0063.552] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.552] GetProcessHeap () returned 0x440000
	[0063.552] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.552] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1
	[0063.552] GetProcessHeap () returned 0x440000
	[0063.552] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.553] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.553] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0063.553] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1
	[0063.553] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0
	[0063.553] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.553] GetProcessHeap () returned 0x440000
	[0063.553] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.553] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1
	[0063.553] GetProcessHeap () returned 0x440000
	[0063.553] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.554] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.554] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11426, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0063.554] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1
	[0063.554] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0
	[0063.554] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.554] GetProcessHeap () returned 0x440000
	[0063.554] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.554] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1
	[0063.555] GetProcessHeap () returned 0x440000
	[0063.555] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.555] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.555] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5891, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0063.555] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1
	[0063.555] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0
	[0063.555] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.555] GetProcessHeap () returned 0x440000
	[0063.555] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.555] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1
	[0063.556] GetProcessHeap () returned 0x440000
	[0063.556] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.556] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.556] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e071, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0063.556] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1
	[0063.556] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0
	[0063.556] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.556] GetProcessHeap () returned 0x440000
	[0063.556] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.556] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1
	[0063.556] GetProcessHeap () returned 0x440000
	[0063.556] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.581] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.581] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x161fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0063.581] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1
	[0063.581] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0
	[0063.581] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.581] GetProcessHeap () returned 0x440000
	[0063.581] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.581] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1
	[0063.581] GetProcessHeap () returned 0x440000
	[0063.581] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.594] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.594] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6133, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0063.595] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1
	[0063.595] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0
	[0063.595] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.595] GetProcessHeap () returned 0x440000
	[0063.595] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.595] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1
	[0063.595] GetProcessHeap () returned 0x440000
	[0063.595] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.595] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.595] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0063.595] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1
	[0063.595] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0
	[0063.595] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.595] GetProcessHeap () returned 0x440000
	[0063.595] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.595] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1
	[0063.595] GetProcessHeap () returned 0x440000
	[0063.595] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.606] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.606] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12696, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0063.606] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1
	[0063.606] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0
	[0063.606] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.606] GetProcessHeap () returned 0x440000
	[0063.606] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.606] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1
	[0063.606] GetProcessHeap () returned 0x440000
	[0063.606] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.610] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.610] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0063.610] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1
	[0063.610] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0
	[0063.610] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.610] GetProcessHeap () returned 0x440000
	[0063.610] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.610] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1
	[0063.610] GetProcessHeap () returned 0x440000
	[0063.610] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.611] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.611] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x197f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0063.611] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1
	[0063.611] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0
	[0063.611] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.611] GetProcessHeap () returned 0x440000
	[0063.611] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.611] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0
	[0063.611] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0063.611] GetProcessHeap () returned 0x440000
	[0063.611] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0063.612] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1
	[0063.612] GetProcessHeap () returned 0x440000
	[0063.612] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x501bb0
	[0063.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0063.613] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.613] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 1
	[0063.613] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 0
	[0063.613] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0063.614] GetProcessHeap () returned 0x440000
	[0063.614] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0063.614] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6790, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1
	[0063.614] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1
	[0063.614] GetProcessHeap () returned 0x440000
	[0063.614] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x501bb0
	[0063.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0063.660] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.660] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1
	[0063.660] GetProcessHeap () returned 0x440000
	[0063.660] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.666] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.666] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0063.666] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0063.666] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0063.666] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.666] GetProcessHeap () returned 0x440000
	[0063.666] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.666] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1
	[0063.666] GetProcessHeap () returned 0x440000
	[0063.666] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.729] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.729] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0063.729] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0063.729] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0063.729] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.729] GetProcessHeap () returned 0x440000
	[0063.729] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.729] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1
	[0063.729] GetProcessHeap () returned 0x440000
	[0063.729] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.742] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.746] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0063.796] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0063.796] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0063.797] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.797] GetProcessHeap () returned 0x440000
	[0063.797] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.797] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1
	[0063.797] GetProcessHeap () returned 0x440000
	[0063.797] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.801] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.801] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0063.801] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0063.802] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0063.802] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.802] GetProcessHeap () returned 0x440000
	[0063.802] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.802] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1
	[0063.802] GetProcessHeap () returned 0x440000
	[0063.802] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.805] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.805] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0063.805] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0063.807] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0063.807] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.807] GetProcessHeap () returned 0x440000
	[0063.807] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.807] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1
	[0063.807] GetProcessHeap () returned 0x440000
	[0063.807] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.807] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.807] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0063.807] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0063.807] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0063.808] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.808] GetProcessHeap () returned 0x440000
	[0063.808] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.808] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1
	[0063.808] GetProcessHeap () returned 0x440000
	[0063.808] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0063.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0063.813] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0063.813] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.813] GetProcessHeap () returned 0x440000
	[0063.813] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.813] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1
	[0063.813] GetProcessHeap () returned 0x440000
	[0063.813] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.817] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.817] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0063.817] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0063.818] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0063.818] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.818] GetProcessHeap () returned 0x440000
	[0063.818] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.818] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1
	[0063.818] GetProcessHeap () returned 0x440000
	[0063.818] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0063.818] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.818] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0063.818] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0063.818] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0063.818] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0063.818] GetProcessHeap () returned 0x440000
	[0063.818] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0063.818] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1
	[0063.818] GetProcessHeap () returned 0x440000
	[0063.818] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0063.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.061] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.061] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.061] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.061] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.061] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.061] GetProcessHeap () returned 0x440000
	[0064.061] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.061] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1
	[0064.061] GetProcessHeap () returned 0x440000
	[0064.061] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.088] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.130] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.131] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.131] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.131] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.131] GetProcessHeap () returned 0x440000
	[0064.131] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.131] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1
	[0064.131] GetProcessHeap () returned 0x440000
	[0064.131] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.131] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.131] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81c9d640, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.131] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.131] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.131] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.131] GetProcessHeap () returned 0x440000
	[0064.131] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.132] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1
	[0064.132] GetProcessHeap () returned 0x440000
	[0064.132] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.163] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.163] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.164] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.164] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.164] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.164] GetProcessHeap () returned 0x440000
	[0064.164] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.164] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1
	[0064.164] GetProcessHeap () returned 0x440000
	[0064.164] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.172] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.172] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.172] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.172] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.172] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.172] GetProcessHeap () returned 0x440000
	[0064.172] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.172] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1
	[0064.172] GetProcessHeap () returned 0x440000
	[0064.172] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.182] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.182] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.182] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.182] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.182] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.183] GetProcessHeap () returned 0x440000
	[0064.183] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.183] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1
	[0064.183] GetProcessHeap () returned 0x440000
	[0064.183] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.191] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.191] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.191] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.192] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.192] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.192] GetProcessHeap () returned 0x440000
	[0064.192] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.192] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1
	[0064.192] GetProcessHeap () returned 0x440000
	[0064.192] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.192] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.192] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.192] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.192] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.192] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.192] GetProcessHeap () returned 0x440000
	[0064.192] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.192] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1
	[0064.192] GetProcessHeap () returned 0x440000
	[0064.193] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.195] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.195] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.195] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.195] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.195] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.195] GetProcessHeap () returned 0x440000
	[0064.195] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.195] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1
	[0064.195] GetProcessHeap () returned 0x440000
	[0064.195] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.198] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.198] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.198] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.198] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.198] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.203] GetProcessHeap () returned 0x440000
	[0064.203] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.203] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1
	[0064.203] GetProcessHeap () returned 0x440000
	[0064.203] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.264] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.264] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.264] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.264] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.264] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.264] GetProcessHeap () returned 0x440000
	[0064.264] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.264] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1
	[0064.264] GetProcessHeap () returned 0x440000
	[0064.265] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.305] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.305] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.305] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.305] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.305] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.305] GetProcessHeap () returned 0x440000
	[0064.305] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.305] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1
	[0064.305] GetProcessHeap () returned 0x440000
	[0064.305] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.305] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.305] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.306] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.306] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.306] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.306] GetProcessHeap () returned 0x440000
	[0064.306] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.306] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1
	[0064.306] GetProcessHeap () returned 0x440000
	[0064.306] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.323] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.323] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.323] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.323] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.323] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.323] GetProcessHeap () returned 0x440000
	[0064.323] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.323] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1
	[0064.323] GetProcessHeap () returned 0x440000
	[0064.323] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.323] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.323] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.324] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.324] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.324] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.324] GetProcessHeap () returned 0x440000
	[0064.324] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.324] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1
	[0064.324] GetProcessHeap () returned 0x440000
	[0064.324] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.325] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.325] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.325] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.325] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.325] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.325] GetProcessHeap () returned 0x440000
	[0064.325] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.325] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1
	[0064.325] GetProcessHeap () returned 0x440000
	[0064.325] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.400] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.400] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.400] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.400] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.400] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.400] GetProcessHeap () returned 0x440000
	[0064.400] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.400] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1
	[0064.400] GetProcessHeap () returned 0x440000
	[0064.400] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.401] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.401] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0064.401] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1
	[0064.401] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0
	[0064.401] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.401] GetProcessHeap () returned 0x440000
	[0064.401] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.401] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0
	[0064.401] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0064.401] GetProcessHeap () returned 0x440000
	[0064.401] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0064.403] FindNextFileW (in: hFindFile=0x513000, lpFindFileData=0x346efd0 | out: lpFindFileData=0x346efd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1
	[0064.403] GetProcessHeap () returned 0x440000
	[0064.403] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x501bb0
	[0064.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0064.416] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.419] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1
	[0064.420] GetProcessHeap () returned 0x440000
	[0064.420] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CAT", cAlternateFileName="ACCESS~1.CAT")) returned 1
	[0064.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CAT", cAlternateFileName="")) returned 1
	[0064.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CAT", cAlternateFileName="ADOBEC~1.CAT")) returned 1
	[0064.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CAT", cAlternateFileName="")) returned 1
	[0064.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CAT", cAlternateFileName="BRDLAN~1.CAT")) returned 1
	[0064.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CAT", cAlternateFileName="")) returned 1
	[0064.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CAT", cAlternateFileName="")) returned 1
	[0064.493] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CAT", cAlternateFileName="")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CAT", cAlternateFileName="")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CAT", cAlternateFileName="")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CAT", cAlternateFileName="")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CAT", cAlternateFileName="MAKEAC~1.CAT")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CAT", cAlternateFileName="MULTIM~1.CAT")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CAT", cAlternateFileName="")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x85c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CAT", cAlternateFileName="")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CAT", cAlternateFileName="")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CAT", cAlternateFileName="READOU~1.CAT")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CAT", cAlternateFileName="")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CAT", cAlternateFileName="SAVEAS~1.CAT")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CAT", cAlternateFileName="")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CAT", cAlternateFileName="")) returned 1
	[0064.494] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0064.494] GetProcessHeap () returned 0x440000
	[0064.495] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37938c8
	[0064.495] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.501] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.501] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9586, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1
	[0064.501] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1
	[0064.501] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0
	[0064.501] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.501] GetProcessHeap () returned 0x440000
	[0064.501] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.501] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CAT", cAlternateFileName="")) returned 1
	[0064.501] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CAT", cAlternateFileName="")) returned 1
	[0064.501] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 1
	[0064.501] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 0
	[0064.501] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.501] GetProcessHeap () returned 0x440000
	[0064.501] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.501] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1
	[0064.501] GetProcessHeap () returned 0x440000
	[0064.501] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.511] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.511] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CZE", cAlternateFileName="ACCESS~1.CZE")) returned 1
	[0064.511] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CZE", cAlternateFileName="")) returned 1
	[0064.511] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CZE", cAlternateFileName="ADOBEC~1.CZE")) returned 1
	[0064.511] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CZE", cAlternateFileName="")) returned 1
	[0064.512] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CZE", cAlternateFileName="BRDLAN~1.CZE")) returned 1
	[0064.512] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CZE", cAlternateFileName="")) returned 1
	[0064.512] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CZE", cAlternateFileName="")) returned 1
	[0064.512] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CZE", cAlternateFileName="")) returned 1
	[0064.512] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CZE", cAlternateFileName="")) returned 1
	[0064.512] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CZE", cAlternateFileName="")) returned 1
	[0064.512] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CZE", cAlternateFileName="")) returned 1
	[0064.512] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CZE", cAlternateFileName="MAKEAC~1.CZE")) returned 1
	[0064.512] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CZE", cAlternateFileName="MULTIM~1.CZE")) returned 1
	[0064.513] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CZE", cAlternateFileName="")) returned 1
	[0064.513] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CZE", cAlternateFileName="")) returned 1
	[0064.513] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807c95c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CZE", cAlternateFileName="")) returned 1
	[0064.513] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CZE", cAlternateFileName="READOU~1.CZE")) returned 1
	[0064.513] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CZE", cAlternateFileName="")) returned 1
	[0064.513] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CZE", cAlternateFileName="SAVEAS~1.CZE")) returned 1
	[0064.513] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CZE", cAlternateFileName="")) returned 1
	[0064.513] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CZE", cAlternateFileName="")) returned 1
	[0064.513] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0064.513] GetProcessHeap () returned 0x440000
	[0064.513] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37938c8
	[0064.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.533] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.533] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9342, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1
	[0064.533] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1
	[0064.533] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0
	[0064.533] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.533] GetProcessHeap () returned 0x440000
	[0064.533] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.533] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CZE", cAlternateFileName="")) returned 1
	[0064.533] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CZE", cAlternateFileName="")) returned 1
	[0064.534] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 1
	[0064.534] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 0
	[0064.534] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.534] GetProcessHeap () returned 0x440000
	[0064.534] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.534] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1
	[0064.534] GetProcessHeap () returned 0x440000
	[0064.534] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DAN", cAlternateFileName="ACCESS~1.DAN")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DAN", cAlternateFileName="")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DAN", cAlternateFileName="ADOBEC~1.DAN")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DAN", cAlternateFileName="")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DAN", cAlternateFileName="BRDLAN~1.DAN")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DAN", cAlternateFileName="")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DAN", cAlternateFileName="")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DAN", cAlternateFileName="")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DAN", cAlternateFileName="")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.DAN", cAlternateFileName="")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DAN", cAlternateFileName="")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DAN", cAlternateFileName="MAKEAC~1.DAN")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DAN", cAlternateFileName="MULTIM~1.DAN")) returned 1
	[0064.593] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DAN", cAlternateFileName="")) returned 1
	[0064.594] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DAN", cAlternateFileName="")) returned 1
	[0064.594] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DAN", cAlternateFileName="")) returned 1
	[0064.594] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DAN", cAlternateFileName="READOU~1.DAN")) returned 1
	[0064.594] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DAN", cAlternateFileName="")) returned 1
	[0064.594] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DAN", cAlternateFileName="SAVEAS~1.DAN")) returned 1
	[0064.594] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DAN", cAlternateFileName="")) returned 1
	[0064.594] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.DAN", cAlternateFileName="")) returned 1
	[0064.594] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0064.594] GetProcessHeap () returned 0x440000
	[0064.594] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37938c8
	[0064.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.594] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.594] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1
	[0064.595] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1
	[0064.595] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0
	[0064.595] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.595] GetProcessHeap () returned 0x440000
	[0064.595] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.595] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DAN", cAlternateFileName="")) returned 1
	[0064.595] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DAN", cAlternateFileName="")) returned 1
	[0064.595] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 1
	[0064.595] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 0
	[0064.595] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.595] GetProcessHeap () returned 0x440000
	[0064.595] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.595] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1
	[0064.595] GetProcessHeap () returned 0x440000
	[0064.595] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.597] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.597] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DEU", cAlternateFileName="ACCESS~1.DEU")) returned 1
	[0064.597] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DEU", cAlternateFileName="")) returned 1
	[0064.597] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DEU", cAlternateFileName="ADOBEC~1.DEU")) returned 1
	[0064.597] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DEU", cAlternateFileName="")) returned 1
	[0064.597] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DEU", cAlternateFileName="BRDLAN~1.DEU")) returned 1
	[0064.597] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DEU", cAlternateFileName="")) returned 1
	[0064.597] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DEU", cAlternateFileName="")) returned 1
	[0064.597] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DEU", cAlternateFileName="")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DEU", cAlternateFileName="")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Escript.deu", cAlternateFileName="")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DEU", cAlternateFileName="")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DEU", cAlternateFileName="MAKEAC~1.DEU")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DEU", cAlternateFileName="MULTIM~1.DEU")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DEU", cAlternateFileName="")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x88400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DEU", cAlternateFileName="")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f7de2a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DEU", cAlternateFileName="")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DEU", cAlternateFileName="READOU~1.DEU")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DEU", cAlternateFileName="")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DEU", cAlternateFileName="SAVEAS~1.DEU")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DEU", cAlternateFileName="")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.deu", cAlternateFileName="")) returned 1
	[0064.598] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0064.598] GetProcessHeap () returned 0x440000
	[0064.599] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37938c8
	[0064.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.606] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.606] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1
	[0064.606] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1
	[0064.606] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0
	[0064.606] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.606] GetProcessHeap () returned 0x440000
	[0064.606] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.606] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DEU", cAlternateFileName="")) returned 1
	[0064.606] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DEU", cAlternateFileName="")) returned 1
	[0064.607] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DEU", cAlternateFileName="")) returned 1
	[0064.607] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DEU", cAlternateFileName="")) returned 0
	[0064.607] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.607] GetProcessHeap () returned 0x440000
	[0064.607] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.607] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1
	[0064.607] GetProcessHeap () returned 0x440000
	[0064.607] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.625] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.625] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.ESP", cAlternateFileName="ACCESS~1.ESP")) returned 1
	[0064.625] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.ESP", cAlternateFileName="")) returned 1
	[0064.625] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.ESP", cAlternateFileName="ADOBEC~1.ESP")) returned 1
	[0064.625] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.ESP", cAlternateFileName="")) returned 1
	[0064.625] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8207ba00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.ESP", cAlternateFileName="BRDLAN~1.ESP")) returned 1
	[0064.625] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.ESP", cAlternateFileName="")) returned 1
	[0064.625] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.ESP", cAlternateFileName="")) returned 1
	[0064.625] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.ESP", cAlternateFileName="")) returned 1
	[0064.625] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.ESP", cAlternateFileName="")) returned 1
	[0064.625] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.ESP", cAlternateFileName="")) returned 1
	[0064.625] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.ESP", cAlternateFileName="")) returned 1
	[0064.626] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da69260, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.ESP", cAlternateFileName="MAKEAC~1.ESP")) returned 1
	[0064.626] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.ESP", cAlternateFileName="MULTIM~1.ESP")) returned 1
	[0064.626] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.ESP", cAlternateFileName="")) returned 1
	[0064.626] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x83c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.ESP", cAlternateFileName="")) returned 1
	[0064.626] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f8506c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x156a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.ESP", cAlternateFileName="")) returned 1
	[0064.626] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.ESP", cAlternateFileName="READOU~1.ESP")) returned 1
	[0064.626] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.ESP", cAlternateFileName="")) returned 1
	[0064.626] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.ESP", cAlternateFileName="SAVEAS~1.ESP")) returned 1
	[0064.626] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.ESP", cAlternateFileName="")) returned 1
	[0064.626] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.ESP", cAlternateFileName="")) returned 1
	[0064.626] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0064.626] GetProcessHeap () returned 0x440000
	[0064.626] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37938c8
	[0064.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.627] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.627] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1
	[0064.627] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1
	[0064.627] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0
	[0064.627] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.627] GetProcessHeap () returned 0x440000
	[0064.627] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.627] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.ESP", cAlternateFileName="")) returned 1
	[0064.627] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4e4720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ESP", cAlternateFileName="")) returned 1
	[0064.627] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ESP", cAlternateFileName="")) returned 1
	[0064.627] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c88960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.ESP", cAlternateFileName="")) returned 0
	[0064.627] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.627] GetProcessHeap () returned 0x440000
	[0064.627] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.627] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1
	[0064.627] GetProcessHeap () returned 0x440000
	[0064.627] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.888] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.EUQ", cAlternateFileName="ACCESS~1.EUQ")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x66c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.EUQ", cAlternateFileName="")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.EUQ", cAlternateFileName="ADOBEC~1.EUQ")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.EUQ", cAlternateFileName="")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.EUQ", cAlternateFileName="BRDLAN~1.EUQ")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.EUQ", cAlternateFileName="")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.EUQ", cAlternateFileName="")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.EUQ", cAlternateFileName="")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.EUQ", cAlternateFileName="")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.EUQ", cAlternateFileName="")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.EUQ", cAlternateFileName="")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.EUQ", cAlternateFileName="MAKEAC~1.EUQ")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.EUQ", cAlternateFileName="MULTIM~1.EUQ")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.EUQ", cAlternateFileName="")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x81400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.EUQ", cAlternateFileName="")) returned 1
	[0064.889] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.EUQ", cAlternateFileName="")) returned 1
	[0064.890] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.EUQ", cAlternateFileName="READOU~1.EUQ")) returned 1
	[0064.890] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.EUQ", cAlternateFileName="")) returned 1
	[0064.890] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.EUQ", cAlternateFileName="SAVEAS~1.EUQ")) returned 1
	[0064.890] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.EUQ", cAlternateFileName="")) returned 1
	[0064.890] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.EUQ", cAlternateFileName="")) returned 1
	[0064.890] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0064.890] GetProcessHeap () returned 0x440000
	[0064.890] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37938c8
	[0064.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.890] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.890] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9251, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1
	[0064.890] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1
	[0064.890] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0
	[0064.890] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.891] GetProcessHeap () returned 0x440000
	[0064.891] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.891] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.EUQ", cAlternateFileName="")) returned 1
	[0064.891] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.EUQ", cAlternateFileName="")) returned 1
	[0064.891] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.EUQ", cAlternateFileName="")) returned 1
	[0064.891] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.EUQ", cAlternateFileName="")) returned 0
	[0064.891] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.891] GetProcessHeap () returned 0x440000
	[0064.891] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.891] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1
	[0064.891] GetProcessHeap () returned 0x440000
	[0064.891] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.961] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.SUO", cAlternateFileName="ACCESS~1.SUO")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.SUO", cAlternateFileName="")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.SUO", cAlternateFileName="ADOBEC~1.SUO")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d6d1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x77800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.SUO", cAlternateFileName="")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.SUO", cAlternateFileName="BRDLAN~1.SUO")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.SUO", cAlternateFileName="")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.SUO", cAlternateFileName="")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.SUO", cAlternateFileName="")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.SUO", cAlternateFileName="")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.SUO", cAlternateFileName="")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.SUO", cAlternateFileName="")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da43100, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.SUO", cAlternateFileName="MAKEAC~1.SUO")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.SUO", cAlternateFileName="MULTIM~1.SUO")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.SUO", cAlternateFileName="")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.SUO", cAlternateFileName="")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.SUO", cAlternateFileName="")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.SUO", cAlternateFileName="READOU~1.SUO")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.SUO", cAlternateFileName="")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.SUO", cAlternateFileName="SAVEAS~1.SUO")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.SUO", cAlternateFileName="")) returned 1
	[0064.962] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.SUO", cAlternateFileName="")) returned 1
	[0064.963] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0064.963] GetProcessHeap () returned 0x440000
	[0064.963] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37938c8
	[0064.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.963] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.964] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9299, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1
	[0064.964] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1
	[0064.964] FindNextFileW (in: hFindFile=0x513100, lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f71060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0
	[0064.964] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.964] GetProcessHeap () returned 0x440000
	[0064.964] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.964] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.SUO", cAlternateFileName="")) returned 1
	[0064.964] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.SUO", cAlternateFileName="")) returned 1
	[0064.964] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SUO", cAlternateFileName="")) returned 1
	[0064.964] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b57e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.SUO", cAlternateFileName="")) returned 0
	[0064.964] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.964] GetProcessHeap () returned 0x440000
	[0064.964] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.964] FindNextFileW (in: hFindFile=0x512f80, lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1
	[0064.965] GetProcessHeap () returned 0x440000
	[0064.965] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37838c0
	[0064.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.966] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.FRA", cAlternateFileName="ACCESS~1.FRA")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.FRA", cAlternateFileName="")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.FRA", cAlternateFileName="ADOBEC~1.FRA")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82b7dfc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.FRA", cAlternateFileName="")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.FRA", cAlternateFileName="BRDLAN~1.FRA")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.FRA", cAlternateFileName="")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.FRA", cAlternateFileName="")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.FRA", cAlternateFileName="")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.FRA", cAlternateFileName="")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.fra", cAlternateFileName="")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x5130c0, lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ddf5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.FRA", cAlternateFileName="")) returned 1
	[0064.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.968] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.968] GetProcessHeap () returned 0x440000
	[0064.968] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.968] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.968] GetProcessHeap () returned 0x440000
	[0064.968] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.970] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.970] GetProcessHeap () returned 0x440000
	[0064.970] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.970] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.970] GetProcessHeap () returned 0x440000
	[0064.970] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.972] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.972] GetProcessHeap () returned 0x440000
	[0064.972] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.973] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.973] GetProcessHeap () returned 0x440000
	[0064.973] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.976] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.976] GetProcessHeap () returned 0x440000
	[0064.976] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.976] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.976] GetProcessHeap () returned 0x440000
	[0064.976] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.978] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.978] GetProcessHeap () returned 0x440000
	[0064.978] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.978] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.978] GetProcessHeap () returned 0x440000
	[0064.978] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.981] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.981] GetProcessHeap () returned 0x440000
	[0064.981] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.981] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.982] GetProcessHeap () returned 0x440000
	[0064.982] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.983] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.983] GetProcessHeap () returned 0x440000
	[0064.983] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.983] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.983] GetProcessHeap () returned 0x440000
	[0064.983] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0064.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0064.986] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0064.986] GetProcessHeap () returned 0x440000
	[0064.986] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0064.986] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0064.987] GetProcessHeap () returned 0x440000
	[0064.987] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0064.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.200] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0065.200] GetProcessHeap () returned 0x440000
	[0065.200] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0065.200] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0065.200] GetProcessHeap () returned 0x440000
	[0065.200] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0065.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.279] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0065.279] GetProcessHeap () returned 0x440000
	[0065.279] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0065.279] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0065.279] GetProcessHeap () returned 0x440000
	[0065.279] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0065.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.293] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0065.293] GetProcessHeap () returned 0x440000
	[0065.293] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0065.293] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0065.293] GetProcessHeap () returned 0x440000
	[0065.293] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0065.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.303] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0065.303] GetProcessHeap () returned 0x440000
	[0065.303] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0065.303] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0065.304] GetProcessHeap () returned 0x440000
	[0065.304] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0065.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.307] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0065.307] GetProcessHeap () returned 0x440000
	[0065.307] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0065.307] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0065.307] GetProcessHeap () returned 0x440000
	[0065.307] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0065.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.399] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0065.399] GetProcessHeap () returned 0x440000
	[0065.399] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0065.399] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0065.399] GetProcessHeap () returned 0x440000
	[0065.399] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0065.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.495] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.497] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0065.497] GetProcessHeap () returned 0x440000
	[0065.497] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0065.503] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0065.541] GetProcessHeap () returned 0x440000
	[0065.541] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0065.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.563] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0065.563] GetProcessHeap () returned 0x440000
	[0065.563] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0065.563] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0065.563] GetProcessHeap () returned 0x440000
	[0065.563] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0065.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.570] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0065.571] GetProcessHeap () returned 0x440000
	[0065.571] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0065.571] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0065.571] GetProcessHeap () returned 0x440000
	[0065.571] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0065.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.601] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0065.601] GetProcessHeap () returned 0x440000
	[0065.606] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0065.650] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0065.650] GetProcessHeap () returned 0x440000
	[0065.650] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0065.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.656] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0065.658] GetProcessHeap () returned 0x440000
	[0065.658] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0065.658] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0065.658] GetProcessHeap () returned 0x440000
	[0065.658] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0065.658] FindClose (in: hFindFile=0x512f80 | out: hFindFile=0x512f80) returned 1
	[0065.658] GetProcessHeap () returned 0x440000
	[0065.658] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x501bb0 | out: hHeap=0x440000) returned 1
	[0065.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x346ed40 | out: lpFindFileData=0x346ed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x512f80
	[0065.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.676] FindClose (in: hFindFile=0x513100 | out: hFindFile=0x513100) returned 1
	[0065.676] GetProcessHeap () returned 0x440000
	[0065.676] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37938c8 | out: hHeap=0x440000) returned 1
	[0065.676] FindClose (in: hFindFile=0x5130c0 | out: hFindFile=0x5130c0) returned 1
	[0065.676] GetProcessHeap () returned 0x440000
	[0065.676] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x37838c0 | out: hHeap=0x440000) returned 1
	[0065.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x346eab0 | out: lpFindFileData=0x346eab0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5130c0
	[0065.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x346e820 | out: lpFindFileData=0x346e820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x513100
	[0065.728] FindFirstFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x346e590) 

Thread:
	id = 13
	os_tid = 0xa3c

	[0044.471] GetProcessHeap () returned 0x440000
	[0044.471] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3711088
	[0044.471] GetProcessHeap () returned 0x440000
	[0044.471] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x513de8
	[0044.471] GetProcessHeap () returned 0x440000
	[0044.471] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x28) returned 0x4cd208
	[0044.471] GetProcessHeap () returned 0x440000
	[0044.471] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x110102) returned 0x37f0020
	[0044.471] GetProcessHeap () returned 0x440000
	[0044.471] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x50) returned 0x463610
	[0044.472] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76c20000
	[0044.472] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0044.472] Wow64DisableWow64FsRedirection (in: OldValue=0x278fc48 | out: OldValue=0x278fc48*=0x0) returned 1
	[0044.472] GetProcessHeap () returned 0x440000
	[0044.472] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x463610 | out: hHeap=0x440000) returned 1
	[0044.472] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0044.472] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=129) returned 1
	[0044.472] CloseHandle (hObject=0x198) returned 1
	[0044.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 0x26
	[0044.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 0x26
	[0044.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.472] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0044.473] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0044.473] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0044.473] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x19c
	[0044.474] ReadFile (in: hFile=0x198, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x81, lpOverlapped=0x0) returned 1
	[0044.482] WriteFile (in: hFile=0x19c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x90, lpOverlapped=0x0) returned 1
	[0044.483] WriteFile (in: hFile=0x19c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0044.483] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0044.483] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0044.483] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x81, lpOverlapped=0x0) returned 1
	[0044.483] FlushFileBuffers (hFile=0x198) returned 1
	[0044.590] FlushFileBuffers (hFile=0x19c) returned 1
	[0044.610] CloseHandle (hObject=0x198) returned 1
	[0044.611] CloseHandle (hObject=0x19c) returned 1
	[0044.611] DeleteFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 1
	[0044.612] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.613] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=89168) returned 1
	[0044.613] CloseHandle (hObject=0x19c) returned 1
	[0044.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20
	[0044.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20
	[0044.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.613] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.613] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.613] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=87616) returned 1
	[0044.613] CloseHandle (hObject=0x19c) returned 1
	[0044.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20
	[0044.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20
	[0044.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.614] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.614] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.614] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=91712) returned 1
	[0044.617] CloseHandle (hObject=0x19c) returned 1
	[0044.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20
	[0044.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20
	[0044.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.621] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.621] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.621] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=94800) returned 1
	[0044.621] CloseHandle (hObject=0x19c) returned 1
	[0044.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20
	[0044.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20
	[0044.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.621] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.622] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.622] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=85056) returned 1
	[0044.622] CloseHandle (hObject=0x19c) returned 1
	[0044.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20
	[0044.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20
	[0044.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.622] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.622] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.622] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=43600) returned 1
	[0044.622] CloseHandle (hObject=0x19c) returned 1
	[0044.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20
	[0044.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20
	[0044.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.623] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.623] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.623] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=90192) returned 1
	[0044.623] CloseHandle (hObject=0x19c) returned 1
	[0044.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20
	[0044.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20
	[0044.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.623] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.624] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.624] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=89152) returned 1
	[0044.624] CloseHandle (hObject=0x19c) returned 1
	[0044.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20
	[0044.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20
	[0044.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.624] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.624] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.624] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=3694080) returned 1
	[0044.624] CloseHandle (hObject=0x19c) returned 1
	[0044.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0x20
	[0044.625] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0044.625] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0
	[0044.625] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.626] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=3876772) returned 1
	[0044.626] CloseHandle (hObject=0x19c) returned 1
	[0044.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0x20
	[0044.626] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0044.626] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0
	[0044.626] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.626] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1984228) returned 1
	[0044.626] CloseHandle (hObject=0x19c) returned 1
	[0044.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20
	[0044.627] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0044.627] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0
	[0044.627] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.627] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=2371360) returned 1
	[0044.627] CloseHandle (hObject=0x19c) returned 1
	[0044.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20
	[0044.627] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0044.627] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0
	[0044.627] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.628] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=47452) returned 1
	[0044.628] CloseHandle (hObject=0x19c) returned 1
	[0044.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20
	[0044.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20
	[0044.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.628] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.628] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.628] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=93248) returned 1
	[0044.628] CloseHandle (hObject=0x19c) returned 1
	[0044.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20
	[0044.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20
	[0044.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.629] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.629] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.629] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=90688) returned 1
	[0044.629] CloseHandle (hObject=0x19c) returned 1
	[0044.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20
	[0044.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20
	[0044.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.629] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.630] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.630] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=90704) returned 1
	[0044.630] CloseHandle (hObject=0x19c) returned 1
	[0044.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20
	[0044.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20
	[0044.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.630] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.630] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.630] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=76352) returned 1
	[0044.630] CloseHandle (hObject=0x19c) returned 1
	[0044.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20
	[0044.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20
	[0044.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.631] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.631] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.631] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=75344) returned 1
	[0044.631] CloseHandle (hObject=0x19c) returned 1
	[0044.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20
	[0044.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20
	[0044.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.631] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.631] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.632] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=485760) returned 1
	[0044.632] CloseHandle (hObject=0x19c) returned 1
	[0044.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20
	[0044.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20
	[0044.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\memtest.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.632] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.632] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.632] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=88144) returned 1
	[0044.632] CloseHandle (hObject=0x19c) returned 1
	[0044.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20
	[0044.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20
	[0044.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.633] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.633] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.633] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=90704) returned 1
	[0044.633] CloseHandle (hObject=0x19c) returned 1
	[0044.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20
	[0044.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20
	[0044.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.633] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.634] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.634] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=90704) returned 1
	[0044.634] CloseHandle (hObject=0x19c) returned 1
	[0044.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20
	[0044.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20
	[0044.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.634] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.634] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.635] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=90176) returned 1
	[0044.635] CloseHandle (hObject=0x19c) returned 1
	[0044.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20
	[0044.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20
	[0044.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.635] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.635] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.635] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=89664) returned 1
	[0044.635] CloseHandle (hObject=0x19c) returned 1
	[0044.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20
	[0044.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20
	[0044.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.635] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.636] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.636] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=90192) returned 1
	[0044.636] CloseHandle (hObject=0x19c) returned 1
	[0044.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20
	[0044.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20
	[0044.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.636] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.636] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.636] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=87616) returned 1
	[0044.636] CloseHandle (hObject=0x19c) returned 1
	[0044.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20
	[0044.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20
	[0044.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.637] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.637] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.637] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=87104) returned 1
	[0044.637] CloseHandle (hObject=0x19c) returned 1
	[0044.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20
	[0044.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20
	[0044.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.638] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.638] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.638] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=70720) returned 1
	[0044.638] CloseHandle (hObject=0x19c) returned 1
	[0044.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20
	[0044.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20
	[0044.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.638] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.638] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.639] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=70224) returned 1
	[0044.639] CloseHandle (hObject=0x19c) returned 1
	[0044.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20
	[0044.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20
	[0044.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.639] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.639] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.639] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=70208) returned 1
	[0044.639] CloseHandle (hObject=0x19c) returned 1
	[0044.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20
	[0044.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20
	[0044.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.639] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.640] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.640] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=383786) returned 1
	[0044.640] CloseHandle (hObject=0x19c) returned 1
	[0044.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27
	[0044.640] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x26) returned 0
	[0044.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27
	[0044.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\bootmgr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.640] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.640] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x27) returned 0
	[0044.640] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.641] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=8192) returned 1
	[0044.641] CloseHandle (hObject=0x19c) returned 1
	[0044.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27
	[0044.641] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1
	[0044.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x26
	[0044.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\bootsect.bak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.642] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0044.642] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0044.642] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0044.642] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\bootsect.bak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x198
	[0044.642] ReadFile (in: hFile=0x19c, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x2000, lpOverlapped=0x0) returned 1
	[0044.644] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x2010, lpOverlapped=0x0) returned 1
	[0044.645] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0044.645] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0044.645] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0044.645] WriteFile (in: hFile=0x19c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x2000, lpOverlapped=0x0) returned 1
	[0044.645] FlushFileBuffers (hFile=0x19c) returned 1
	[0044.648] FlushFileBuffers (hFile=0x198) returned 1
	[0044.650] CloseHandle (hObject=0x19c) returned 1
	[0044.650] CloseHandle (hObject=0x198) returned 1
	[0044.651] DeleteFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 1
	[0044.652] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", dwFileAttributes=0x27) returned 1
	[0044.653] CreateFileW (lpFileName="\\\\?\\C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.653] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0044.654] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=16972987) returned 1
	[0044.654] CloseHandle (hObject=0x198) returned 1
	[0044.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab")) returned 0x2020
	[0044.654] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0044.656] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0044.656] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0044.656] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0044.656] ReadFile (in: hFile=0x198, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0044.661] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x56543e, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0044.661] ReadFile (in: hFile=0x198, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0044.664] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xfefcbb, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0044.664] ReadFile (in: hFile=0x198, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0044.677] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0044.677] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0102, lpOverlapped=0x0) returned 1
	[0044.690] SetEndOfFile (hFile=0x198) returned 1
	[0044.690] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xfefcbb, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0044.690] WriteFile (in: hFile=0x198, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0044.691] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x56543e, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0044.691] WriteFile (in: hFile=0x198, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0044.692] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0044.692] WriteFile (in: hFile=0x198, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0044.693] FlushFileBuffers (hFile=0x198) returned 1
	[0045.838] CloseHandle (hObject=0x198) returned 1
	[0046.728] SetEvent (hEvent=0x144) returned 1
	[0046.729] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0046.729] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1565) returned 1
	[0046.729] CloseHandle (hObject=0x198) returned 1
	[0046.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 0x2020
	[0046.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 0x2020
	[0046.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0046.730] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0046.730] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0046.730] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0046.730] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0046.730] ReadFile (in: hFile=0x198, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x61d, lpOverlapped=0x0) returned 1
	[0046.732] WriteFile (in: hFile=0x204, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x620, lpOverlapped=0x0) returned 1
	[0046.733] WriteFile (in: hFile=0x204, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0046.734] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0046.734] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0046.734] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x61d, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x61d, lpOverlapped=0x0) returned 1
	[0046.734] FlushFileBuffers (hFile=0x198) returned 1
	[0046.737] FlushFileBuffers (hFile=0x204) returned 1
	[0046.738] CloseHandle (hObject=0x198) returned 1
	[0046.739] CloseHandle (hObject=0x204) returned 1
	[0046.740] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 1
	[0046.741] SetEvent (hEvent=0x144) returned 1
	[0046.741] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0046.741] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=2296) returned 1
	[0046.741] CloseHandle (hObject=0x204) returned 1
	[0046.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0046.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0046.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0046.742] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0046.742] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0046.742] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0046.742] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x198
	[0046.742] ReadFile (in: hFile=0x204, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x8f8, lpOverlapped=0x0) returned 1
	[0046.744] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x900, lpOverlapped=0x0) returned 1
	[0046.745] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0046.745] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0046.745] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0046.745] WriteFile (in: hFile=0x204, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x8f8, lpOverlapped=0x0) returned 1
	[0046.745] FlushFileBuffers (hFile=0x204) returned 1
	[0046.749] FlushFileBuffers (hFile=0x198) returned 1
	[0046.750] CloseHandle (hObject=0x204) returned 1
	[0046.750] CloseHandle (hObject=0x198) returned 1
	[0046.751] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0046.752] SetEvent (hEvent=0x144) returned 1
	[0046.752] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0046.753] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=2503680) returned 1
	[0046.753] CloseHandle (hObject=0x198) returned 1
	[0046.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi")) returned 0x2020
	[0046.753] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0046.754] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0046.754] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0046.754] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0046.754] ReadFile (in: hFile=0x198, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0046.761] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0046.761] ReadFile (in: hFile=0x198, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0046.770] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0046.770] ReadFile (in: hFile=0x198, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0046.783] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0046.783] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0112, lpOverlapped=0x0) returned 1
	[0046.960] SetEndOfFile (hFile=0x198) returned 1
	[0046.960] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0046.960] WriteFile (in: hFile=0x198, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0046.962] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0046.962] WriteFile (in: hFile=0x198, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0046.966] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0046.966] WriteFile (in: hFile=0x198, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0046.967] FlushFileBuffers (hFile=0x198) returned 1
	[0048.506] CloseHandle (hObject=0x198) returned 1
	[0048.653] SetEvent (hEvent=0x144) returned 1
	[0048.653] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0048.653] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1886) returned 1
	[0048.653] CloseHandle (hObject=0x198) returned 1
	[0048.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0048.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0048.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0048.654] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0048.654] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0048.654] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0048.654] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x194
	[0048.655] ReadFile (in: hFile=0x198, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x75e, lpOverlapped=0x0) returned 1
	[0048.656] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x760, lpOverlapped=0x0) returned 1
	[0048.657] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0048.657] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0048.657] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0048.657] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x75e, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x75e, lpOverlapped=0x0) returned 1
	[0048.657] FlushFileBuffers (hFile=0x198) returned 1
	[0048.660] FlushFileBuffers (hFile=0x194) returned 1
	[0048.662] CloseHandle (hObject=0x198) returned 1
	[0048.663] CloseHandle (hObject=0x194) returned 1
	[0048.663] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0048.664] SetEvent (hEvent=0x144) returned 1
	[0048.664] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0048.665] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=2513920) returned 1
	[0048.666] CloseHandle (hObject=0x194) returned 1
	[0048.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi")) returned 0x2020
	[0048.666] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0048.666] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0048.666] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0048.667] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0048.667] ReadFile (in: hFile=0x194, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0048.671] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xcc955, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0048.671] ReadFile (in: hFile=0x194, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0048.679] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x225c00, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0048.679] ReadFile (in: hFile=0x194, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0048.692] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0048.692] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0112, lpOverlapped=0x0) returned 1
	[0048.892] SetEndOfFile (hFile=0x194) returned 1
	[0048.892] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x225c00, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0048.892] WriteFile (in: hFile=0x194, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0048.894] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xcc955, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0048.894] WriteFile (in: hFile=0x194, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0048.898] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0048.898] WriteFile (in: hFile=0x194, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0048.900] FlushFileBuffers (hFile=0x194) returned 1
	[0049.863] CloseHandle (hObject=0x194) returned 1
	[0050.067] SetEvent (hEvent=0x144) returned 1
	[0050.069] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0050.070] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1450) returned 1
	[0050.070] CloseHandle (hObject=0x194) returned 1
	[0050.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 0x2020
	[0050.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 0x2020
	[0050.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0050.070] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0050.070] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0050.070] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0050.070] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x198
	[0050.071] ReadFile (in: hFile=0x194, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x5aa, lpOverlapped=0x0) returned 1
	[0050.076] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x5b0, lpOverlapped=0x0) returned 1
	[0050.077] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x102, lpOverlapped=0x0) returned 1
	[0050.077] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0050.077] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0050.077] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x5aa, lpOverlapped=0x0) returned 1
	[0050.077] FlushFileBuffers (hFile=0x194) returned 1
	[0050.730] FlushFileBuffers (hFile=0x198) returned 1
	[0051.109] CloseHandle (hObject=0x194) returned 1
	[0051.109] CloseHandle (hObject=0x198) returned 1
	[0051.111] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 1
	[0051.113] SetEvent (hEvent=0x144) returned 1
	[0051.113] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0051.113] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1608) returned 1
	[0051.113] CloseHandle (hObject=0x198) returned 1
	[0051.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0051.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0051.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0051.114] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0051.114] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0051.114] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0051.114] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x194
	[0051.114] ReadFile (in: hFile=0x198, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x648, lpOverlapped=0x0) returned 1
	[0051.116] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x650, lpOverlapped=0x0) returned 1
	[0051.117] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0051.117] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0051.117] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0051.117] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x648, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x648, lpOverlapped=0x0) returned 1
	[0051.118] FlushFileBuffers (hFile=0x198) returned 1
	[0051.120] FlushFileBuffers (hFile=0x194) returned 1
	[0051.122] CloseHandle (hObject=0x198) returned 1
	[0051.122] CloseHandle (hObject=0x194) returned 1
	[0051.123] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0051.124] SetEvent (hEvent=0x144) returned 1
	[0051.124] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0051.125] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=14819276) returned 1
	[0051.125] CloseHandle (hObject=0x194) returned 1
	[0051.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab")) returned 0x2020
	[0051.125] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0051.126] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0051.126] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0051.126] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0051.126] ReadFile (in: hFile=0x194, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0051.131] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x4b5fee, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0051.132] ReadFile (in: hFile=0x194, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0051.135] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xde1fcc, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0051.135] ReadFile (in: hFile=0x194, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0051.148] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0051.148] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0102, lpOverlapped=0x0) returned 1
	[0051.277] SetEndOfFile (hFile=0x194) returned 1
	[0051.277] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xde1fcc, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0051.277] WriteFile (in: hFile=0x194, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0051.278] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x4b5fee, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0051.278] WriteFile (in: hFile=0x194, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0051.279] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0051.279] WriteFile (in: hFile=0x194, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0051.280] FlushFileBuffers (hFile=0x194) returned 1
	[0052.530] CloseHandle (hObject=0x194) returned 1
	[0053.899] SetEvent (hEvent=0x144) returned 1
	[0053.899] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0053.900] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=3186) returned 1
	[0053.900] CloseHandle (hObject=0x194) returned 1
	[0053.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml")) returned 0x2020
	[0053.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml")) returned 0x2020
	[0053.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0053.900] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0053.901] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0053.901] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0053.901] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0053.901] ReadFile (in: hFile=0x194, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0xc72, lpOverlapped=0x0) returned 1
	[0053.905] WriteFile (in: hFile=0x210, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xc80, lpOverlapped=0x0) returned 1
	[0053.907] WriteFile (in: hFile=0x210, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0053.907] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0053.907] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0053.907] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc72, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0xc72, lpOverlapped=0x0) returned 1
	[0053.907] FlushFileBuffers (hFile=0x194) returned 1
	[0054.136] FlushFileBuffers (hFile=0x210) returned 1
	[0054.356] CloseHandle (hObject=0x194) returned 1
	[0054.358] CloseHandle (hObject=0x210) returned 1
	[0054.359] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml")) returned 1
	[0054.361] SetEvent (hEvent=0x144) returned 1
	[0054.362] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0054.363] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=4207) returned 1
	[0054.363] CloseHandle (hObject=0x210) returned 1
	[0054.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0054.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0054.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0054.364] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0054.364] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0054.364] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0054.364] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x194
	[0054.365] ReadFile (in: hFile=0x210, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x106f, lpOverlapped=0x0) returned 1
	[0054.367] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x1070, lpOverlapped=0x0) returned 1
	[0054.368] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0054.368] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0054.368] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0054.368] WriteFile (in: hFile=0x210, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x106f, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x106f, lpOverlapped=0x0) returned 1
	[0054.368] FlushFileBuffers (hFile=0x210) returned 1
	[0054.374] FlushFileBuffers (hFile=0x194) returned 1
	[0054.376] CloseHandle (hObject=0x210) returned 1
	[0054.376] CloseHandle (hObject=0x194) returned 1
	[0054.377] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0054.378] SetEvent (hEvent=0x144) returned 1
	[0054.378] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0054.379] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=2424) returned 1
	[0054.379] CloseHandle (hObject=0x194) returned 1
	[0054.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0054.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0054.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0054.379] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0054.379] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0054.379] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0054.379] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0054.382] ReadFile (in: hFile=0x194, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x978, lpOverlapped=0x0) returned 1
	[0054.383] WriteFile (in: hFile=0x210, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x980, lpOverlapped=0x0) returned 1
	[0054.384] WriteFile (in: hFile=0x210, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0054.384] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0054.384] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0054.384] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x978, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x978, lpOverlapped=0x0) returned 1
	[0054.384] FlushFileBuffers (hFile=0x194) returned 1
	[0054.387] FlushFileBuffers (hFile=0x210) returned 1
	[0054.388] CloseHandle (hObject=0x194) returned 1
	[0054.388] CloseHandle (hObject=0x210) returned 1
	[0054.389] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0054.390] SetEvent (hEvent=0x144) returned 1
	[0054.390] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0054.390] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=43806141) returned 1
	[0054.390] CloseHandle (hObject=0x210) returned 1
	[0054.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab")) returned 0x2020
	[0054.391] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0054.391] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0054.391] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0054.391] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0054.391] ReadFile (in: hFile=0x210, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0054.399] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0xdecf3f, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0054.399] ReadFile (in: hFile=0x210, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0054.404] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x2986dbd, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0054.404] ReadFile (in: hFile=0x210, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0054.416] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0054.417] WriteFile (in: hFile=0x210, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0102, lpOverlapped=0x0) returned 1
	[0054.433] SetEndOfFile (hFile=0x210) returned 1
	[0054.433] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x2986dbd, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0054.433] WriteFile (in: hFile=0x210, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0054.535] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0xdecf3f, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0054.535] WriteFile (in: hFile=0x210, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0054.537] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0054.537] WriteFile (in: hFile=0x210, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0054.538] FlushFileBuffers (hFile=0x210) returned 1
	[0055.885] CloseHandle (hObject=0x210) returned 1
	[0056.694] SetEvent (hEvent=0x144) returned 1
	[0056.694] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0056.695] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1800) returned 1
	[0056.695] CloseHandle (hObject=0x210) returned 1
	[0056.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml")) returned 0x2020
	[0056.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml")) returned 0x2020
	[0056.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0056.695] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0056.695] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0056.695] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0056.695] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b4
	[0056.712] ReadFile (in: hFile=0x210, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x708, lpOverlapped=0x0) returned 1
	[0056.716] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x710, lpOverlapped=0x0) returned 1
	[0056.721] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0056.721] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0056.721] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0056.721] WriteFile (in: hFile=0x210, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x708, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x708, lpOverlapped=0x0) returned 1
	[0056.721] FlushFileBuffers (hFile=0x210) returned 1
	[0056.724] FlushFileBuffers (hFile=0x1b4) returned 1
	[0056.725] CloseHandle (hObject=0x210) returned 1
	[0056.726] CloseHandle (hObject=0x1b4) returned 1
	[0056.727] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml")) returned 1
	[0056.728] SetEvent (hEvent=0x144) returned 1
	[0056.728] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0056.730] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=11482605) returned 1
	[0056.730] CloseHandle (hObject=0x1b4) returned 1
	[0056.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab")) returned 0x2020
	[0056.730] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0056.730] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0056.731] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0056.731] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0056.731] ReadFile (in: hFile=0x1b4, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0056.735] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3a674f, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0056.735] ReadFile (in: hFile=0x1b4, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0056.738] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xab35ed, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0056.738] ReadFile (in: hFile=0x1b4, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0056.750] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0056.750] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0102, lpOverlapped=0x0) returned 1
	[0056.769] SetEndOfFile (hFile=0x1b4) returned 1
	[0056.769] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xab35ed, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0056.769] WriteFile (in: hFile=0x1b4, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0056.771] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3a674f, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0056.771] WriteFile (in: hFile=0x1b4, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0056.773] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0056.773] WriteFile (in: hFile=0x1b4, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0056.955] FlushFileBuffers (hFile=0x1b4) returned 1
	[0057.773] CloseHandle (hObject=0x1b4) returned 1
	[0058.867] SetEvent (hEvent=0x144) returned 1
	[0058.867] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0058.868] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=881152) returned 1
	[0058.868] CloseHandle (hObject=0x1b4) returned 1
	[0058.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi")) returned 0x2020
	[0058.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi")) returned 0x2020
	[0058.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0058.868] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0058.868] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0058.868] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0058.868] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x21c
	[0058.991] ReadFile (in: hFile=0x1b4, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0xd7200, lpOverlapped=0x0) returned 1
	[0059.009] WriteFile (in: hFile=0x21c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xd7210, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xd7210, lpOverlapped=0x0) returned 1
	[0059.027] WriteFile (in: hFile=0x21c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0059.027] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0059.027] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0059.027] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xd7200, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0xd7200, lpOverlapped=0x0) returned 1
	[0059.030] FlushFileBuffers (hFile=0x1b4) returned 1
	[0059.333] FlushFileBuffers (hFile=0x21c) returned 1
	[0059.383] CloseHandle (hObject=0x1b4) returned 1
	[0059.390] CloseHandle (hObject=0x21c) returned 1
	[0059.400] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi")) returned 1
	[0059.409] SetEvent (hEvent=0x144) returned 1
	[0059.409] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0059.409] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1457) returned 1
	[0059.409] CloseHandle (hObject=0x21c) returned 1
	[0059.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml")) returned 0x2020
	[0059.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml")) returned 0x2020
	[0059.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0059.410] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0059.410] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0059.410] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0059.411] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b4
	[0059.411] ReadFile (in: hFile=0x21c, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x5b1, lpOverlapped=0x0) returned 1
	[0059.414] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x5c0, lpOverlapped=0x0) returned 1
	[0059.415] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0059.415] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0059.415] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0059.415] WriteFile (in: hFile=0x21c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x5b1, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x5b1, lpOverlapped=0x0) returned 1
	[0059.416] FlushFileBuffers (hFile=0x21c) returned 1
	[0059.424] FlushFileBuffers (hFile=0x1b4) returned 1
	[0059.431] CloseHandle (hObject=0x21c) returned 1
	[0059.432] CloseHandle (hObject=0x1b4) returned 1
	[0059.432] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml")) returned 1
	[0059.433] SetEvent (hEvent=0x144) returned 1
	[0059.433] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0059.434] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=21064532) returned 1
	[0059.434] CloseHandle (hObject=0x1b4) returned 1
	[0059.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab")) returned 0x2020
	[0059.434] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0059.435] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0059.435] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0059.435] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0059.435] ReadFile (in: hFile=0x1b4, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0059.444] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6b23c6, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0059.444] ReadFile (in: hFile=0x1b4, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0059.447] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x13d6b54, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0059.447] ReadFile (in: hFile=0x1b4, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0059.462] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0059.462] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0102, lpOverlapped=0x0) returned 1
	[0059.666] SetEndOfFile (hFile=0x1b4) returned 1
	[0059.667] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x13d6b54, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0059.667] WriteFile (in: hFile=0x1b4, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0059.668] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6b23c6, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0059.668] WriteFile (in: hFile=0x1b4, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0059.669] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0059.669] WriteFile (in: hFile=0x1b4, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0059.670] FlushFileBuffers (hFile=0x1b4) returned 1
	[0060.159] CloseHandle (hObject=0x1b4) returned 1
	[0060.382] SetEvent (hEvent=0x144) returned 1
	[0060.382] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0060.383] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=868864) returned 1
	[0060.383] CloseHandle (hObject=0x1b4) returned 1
	[0060.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi")) returned 0x2020
	[0060.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi")) returned 0x2020
	[0060.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0060.383] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0060.384] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0060.384] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0060.384] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0060.384] ReadFile (in: hFile=0x1b4, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0xd4200, lpOverlapped=0x0) returned 1
	[0060.400] WriteFile (in: hFile=0x20c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xd4210, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xd4210, lpOverlapped=0x0) returned 1
	[0060.416] WriteFile (in: hFile=0x20c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0060.416] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0060.416] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0060.416] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xd4200, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0xd4200, lpOverlapped=0x0) returned 1
	[0060.418] FlushFileBuffers (hFile=0x1b4) returned 1
	[0060.464] FlushFileBuffers (hFile=0x20c) returned 1
	[0060.515] CloseHandle (hObject=0x1b4) returned 1
	[0060.525] CloseHandle (hObject=0x20c) returned 1
	[0060.525] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi")) returned 1
	[0060.533] SetEvent (hEvent=0x144) returned 1
	[0060.533] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0060.533] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=5884) returned 1
	[0060.533] CloseHandle (hObject=0x20c) returned 1
	[0060.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0060.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0060.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0060.534] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0060.534] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0060.534] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0060.534] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b4
	[0060.534] ReadFile (in: hFile=0x20c, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x16fc, lpOverlapped=0x0) returned 1
	[0060.536] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x1700, lpOverlapped=0x0) returned 1
	[0060.537] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0060.538] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0060.538] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0060.538] WriteFile (in: hFile=0x20c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x16fc, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x16fc, lpOverlapped=0x0) returned 1
	[0060.538] FlushFileBuffers (hFile=0x20c) returned 1
	[0060.540] FlushFileBuffers (hFile=0x1b4) returned 1
	[0060.542] CloseHandle (hObject=0x20c) returned 1
	[0060.542] CloseHandle (hObject=0x1b4) returned 1
	[0060.542] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0060.543] SetEvent (hEvent=0x144) returned 1
	[0060.543] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0060.544] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=873984) returned 1
	[0060.544] CloseHandle (hObject=0x1b4) returned 1
	[0060.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi")) returned 0x2020
	[0060.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi")) returned 0x2020
	[0060.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0060.544] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0060.544] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0060.544] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0060.545] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0060.545] ReadFile (in: hFile=0x1b4, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0xd5600, lpOverlapped=0x0) returned 1
	[0060.561] WriteFile (in: hFile=0x20c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xd5610, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xd5610, lpOverlapped=0x0) returned 1
	[0060.578] WriteFile (in: hFile=0x20c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0060.578] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0060.578] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0060.578] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xd5600, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0xd5600, lpOverlapped=0x0) returned 1
	[0060.581] FlushFileBuffers (hFile=0x1b4) returned 1
	[0060.851] FlushFileBuffers (hFile=0x20c) returned 1
	[0060.976] CloseHandle (hObject=0x1b4) returned 1
	[0060.976] CloseHandle (hObject=0x20c) returned 1
	[0060.976] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi")) returned 1
	[0060.983] SetEvent (hEvent=0x144) returned 1
	[0060.984] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0060.984] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=2362) returned 1
	[0060.984] CloseHandle (hObject=0x20c) returned 1
	[0060.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0060.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0060.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0060.984] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0060.984] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0060.985] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0060.985] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b4
	[0060.985] ReadFile (in: hFile=0x20c, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x93a, lpOverlapped=0x0) returned 1
	[0060.987] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x940, lpOverlapped=0x0) returned 1
	[0060.988] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0060.988] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0060.988] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0060.988] WriteFile (in: hFile=0x20c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x93a, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x93a, lpOverlapped=0x0) returned 1
	[0060.988] FlushFileBuffers (hFile=0x20c) returned 1
	[0060.992] FlushFileBuffers (hFile=0x1b4) returned 1
	[0060.996] CloseHandle (hObject=0x20c) returned 1
	[0060.996] CloseHandle (hObject=0x1b4) returned 1
	[0060.996] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0060.997] SetEvent (hEvent=0x144) returned 1
	[0060.997] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0060.998] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=18874884) returned 1
	[0060.998] CloseHandle (hObject=0x1b4) returned 1
	[0060.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab")) returned 0x2020
	[0060.999] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0060.999] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0060.999] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0060.999] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0060.999] ReadFile (in: hFile=0x1b4, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.004] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6000ac, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0061.004] ReadFile (in: hFile=0x1b4, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.011] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x11c0204, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0061.011] ReadFile (in: hFile=0x1b4, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.025] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0061.025] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0102, lpOverlapped=0x0) returned 1
	[0061.049] SetEndOfFile (hFile=0x1b4) returned 1
	[0061.049] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x11c0204, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0061.049] WriteFile (in: hFile=0x1b4, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0061.051] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6000ac, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0061.051] WriteFile (in: hFile=0x1b4, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0061.051] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0061.051] WriteFile (in: hFile=0x1b4, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0061.053] FlushFileBuffers (hFile=0x1b4) returned 1
	[0061.357] CloseHandle (hObject=0x1b4) returned 1
	[0061.358] SetEvent (hEvent=0x144) returned 1
	[0061.358] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0061.359] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1231) returned 1
	[0061.359] CloseHandle (hObject=0x1b4) returned 1
	[0061.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml")) returned 0x2020
	[0061.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml")) returned 0x2020
	[0061.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0061.360] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0061.360] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0061.360] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0061.360] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0061.360] ReadFile (in: hFile=0x1b4, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x4cf, lpOverlapped=0x0) returned 1
	[0061.362] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x4d0, lpOverlapped=0x0) returned 1
	[0061.363] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0061.363] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0061.363] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0061.363] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x4cf, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x4cf, lpOverlapped=0x0) returned 1
	[0061.363] FlushFileBuffers (hFile=0x1b4) returned 1
	[0061.380] FlushFileBuffers (hFile=0x1ac) returned 1
	[0061.382] CloseHandle (hObject=0x1b4) returned 1
	[0061.382] CloseHandle (hObject=0x1ac) returned 1
	[0061.383] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml")) returned 1
	[0061.384] SetEvent (hEvent=0x144) returned 1
	[0061.384] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0061.384] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1852) returned 1
	[0061.384] CloseHandle (hObject=0x1ac) returned 1
	[0061.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0061.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0061.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0061.384] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0061.384] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0061.384] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0061.384] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b4
	[0061.385] ReadFile (in: hFile=0x1ac, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x73c, lpOverlapped=0x0) returned 1
	[0061.386] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x740, lpOverlapped=0x0) returned 1
	[0061.387] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0061.387] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0061.387] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0061.388] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x73c, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x73c, lpOverlapped=0x0) returned 1
	[0061.388] FlushFileBuffers (hFile=0x1ac) returned 1
	[0061.391] FlushFileBuffers (hFile=0x1b4) returned 1
	[0061.393] CloseHandle (hObject=0x1ac) returned 1
	[0061.394] CloseHandle (hObject=0x1b4) returned 1
	[0061.394] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0061.395] SetEvent (hEvent=0x144) returned 1
	[0061.395] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0061.398] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=6241) returned 1
	[0061.398] CloseHandle (hObject=0x1b4) returned 1
	[0061.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0061.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0061.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0061.398] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0061.398] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0061.398] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0061.398] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0061.400] ReadFile (in: hFile=0x1b4, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x1861, lpOverlapped=0x0) returned 1
	[0061.402] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x1870, lpOverlapped=0x0) returned 1
	[0061.403] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0061.403] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0061.403] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0061.403] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x1861, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x1861, lpOverlapped=0x0) returned 1
	[0061.403] FlushFileBuffers (hFile=0x1b4) returned 1
	[0061.406] FlushFileBuffers (hFile=0x1ac) returned 1
	[0061.409] CloseHandle (hObject=0x1b4) returned 1
	[0061.409] CloseHandle (hObject=0x1ac) returned 1
	[0061.409] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0061.410] SetEvent (hEvent=0x144) returned 1
	[0061.410] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0061.410] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=50823389) returned 1
	[0061.410] CloseHandle (hObject=0x1ac) returned 1
	[0061.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab")) returned 0x2020
	[0061.410] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0061.411] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0061.411] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0061.411] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0061.411] ReadFile (in: hFile=0x1ac, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.416] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x1028049, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0061.417] ReadFile (in: hFile=0x1ac, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.420] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x30380dd, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0061.420] ReadFile (in: hFile=0x1ac, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.432] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0061.432] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0102, lpOverlapped=0x0) returned 1
	[0061.450] SetEndOfFile (hFile=0x1ac) returned 1
	[0061.451] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x30380dd, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0061.451] WriteFile (in: hFile=0x1ac, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0061.453] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x1028049, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0061.453] WriteFile (in: hFile=0x1ac, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0061.453] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0061.453] WriteFile (in: hFile=0x1ac, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0061.856] FlushFileBuffers (hFile=0x1ac) returned 1
	[0061.954] CloseHandle (hObject=0x1ac) returned 1
	[0061.954] SetEvent (hEvent=0x144) returned 1
	[0061.956] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0061.956] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=9503) returned 1
	[0061.956] CloseHandle (hObject=0x22c) returned 1
	[0061.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml")) returned 0x2020
	[0061.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml")) returned 0x2020
	[0061.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0061.956] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0061.957] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0061.957] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0061.957] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0061.957] ReadFile (in: hFile=0x22c, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x251f, lpOverlapped=0x0) returned 1
	[0061.958] WriteFile (in: hFile=0x230, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x2520, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x2520, lpOverlapped=0x0) returned 1
	[0061.959] WriteFile (in: hFile=0x230, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0061.960] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0061.960] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0061.960] WriteFile (in: hFile=0x22c, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x251f, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x251f, lpOverlapped=0x0) returned 1
	[0061.960] FlushFileBuffers (hFile=0x22c) returned 1
	[0061.962] FlushFileBuffers (hFile=0x230) returned 1
	[0061.964] CloseHandle (hObject=0x22c) returned 1
	[0061.964] CloseHandle (hObject=0x230) returned 1
	[0061.965] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml")) returned 1
	[0061.966] SetEvent (hEvent=0x144) returned 1
	[0061.966] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0061.967] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=2503680) returned 1
	[0061.967] CloseHandle (hObject=0x230) returned 1
	[0061.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi")) returned 0x2020
	[0061.967] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0061.967] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0061.967] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0061.967] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0061.967] ReadFile (in: hFile=0x230, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.975] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0061.975] ReadFile (in: hFile=0x230, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.983] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0061.983] ReadFile (in: hFile=0x230, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.996] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0061.996] WriteFile (in: hFile=0x230, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0112, lpOverlapped=0x0) returned 1
	[0062.096] SetEndOfFile (hFile=0x230) returned 1
	[0062.096] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x223400, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0062.096] WriteFile (in: hFile=0x230, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0062.098] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0xcbc00, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0062.098] WriteFile (in: hFile=0x230, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0062.101] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0062.101] WriteFile (in: hFile=0x230, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0062.103] FlushFileBuffers (hFile=0x230) returned 1
	[0062.176] CloseHandle (hObject=0x230) returned 1
	[0062.176] SetEvent (hEvent=0x144) returned 1
	[0062.177] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0062.177] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1988) returned 1
	[0062.177] CloseHandle (hObject=0x230) returned 1
	[0062.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0062.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0062.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.177] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0062.177] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0062.177] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0062.177] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0062.178] ReadFile (in: hFile=0x230, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x7c4, lpOverlapped=0x0) returned 1
	[0062.179] WriteFile (in: hFile=0x210, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x7d0, lpOverlapped=0x0) returned 1
	[0062.180] WriteFile (in: hFile=0x210, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0062.180] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0062.180] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0062.180] WriteFile (in: hFile=0x230, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x7c4, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x7c4, lpOverlapped=0x0) returned 1
	[0062.180] FlushFileBuffers (hFile=0x230) returned 1
	[0062.189] FlushFileBuffers (hFile=0x210) returned 1
	[0062.191] CloseHandle (hObject=0x230) returned 1
	[0062.191] CloseHandle (hObject=0x210) returned 1
	[0062.192] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0062.192] SetEvent (hEvent=0x144) returned 1
	[0062.193] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0062.194] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1452) returned 1
	[0062.194] CloseHandle (hObject=0x210) returned 1
	[0062.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml")) returned 0x2020
	[0062.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml")) returned 0x2020
	[0062.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.194] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0062.194] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0062.194] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0062.194] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0062.195] ReadFile (in: hFile=0x210, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x5ac, lpOverlapped=0x0) returned 1
	[0062.196] WriteFile (in: hFile=0x230, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x5b0, lpOverlapped=0x0) returned 1
	[0062.197] WriteFile (in: hFile=0x230, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0062.197] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0062.197] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0062.197] WriteFile (in: hFile=0x210, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x5ac, lpOverlapped=0x0) returned 1
	[0062.197] FlushFileBuffers (hFile=0x210) returned 1
	[0062.234] FlushFileBuffers (hFile=0x230) returned 1
	[0062.236] CloseHandle (hObject=0x210) returned 1
	[0062.236] CloseHandle (hObject=0x230) returned 1
	[0062.236] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml")) returned 1
	[0062.238] SetEvent (hEvent=0x144) returned 1
	[0062.238] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0062.238] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=8265165) returned 1
	[0062.239] CloseHandle (hObject=0x230) returned 1
	[0062.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab")) returned 0x2020
	[0062.239] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0062.239] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0062.239] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0062.239] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0062.239] ReadFile (in: hFile=0x230, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.242] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x2a09ef, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0062.244] ReadFile (in: hFile=0x230, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.259] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x7a1dcd, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0062.259] ReadFile (in: hFile=0x230, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.271] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0062.271] WriteFile (in: hFile=0x230, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0102, lpOverlapped=0x0) returned 1
	[0062.370] SetEndOfFile (hFile=0x230) returned 1
	[0062.370] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x7a1dcd, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0062.370] WriteFile (in: hFile=0x230, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0062.372] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x2a09ef, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0062.372] WriteFile (in: hFile=0x230, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0062.374] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0062.374] WriteFile (in: hFile=0x230, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0062.375] FlushFileBuffers (hFile=0x230) returned 1
	[0062.436] CloseHandle (hObject=0x230) returned 1
	[0062.437] SetEvent (hEvent=0x144) returned 1
	[0062.438] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0062.438] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=2507776) returned 1
	[0062.438] CloseHandle (hObject=0x1b4) returned 1
	[0062.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi")) returned 0x2020
	[0062.438] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0062.441] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0062.442] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0062.442] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0062.442] ReadFile (in: hFile=0x1b4, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.446] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xcc155, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0062.446] ReadFile (in: hFile=0x1b4, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.455] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x224400, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0062.455] ReadFile (in: hFile=0x1b4, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.469] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0062.469] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0112, lpOverlapped=0x0) returned 1
	[0062.509] SetEndOfFile (hFile=0x1b4) returned 1
	[0062.510] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x224400, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0062.510] WriteFile (in: hFile=0x1b4, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0062.512] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xcc155, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0062.512] WriteFile (in: hFile=0x1b4, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0062.515] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0062.515] WriteFile (in: hFile=0x1b4, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0062.516] FlushFileBuffers (hFile=0x1b4) returned 1
	[0062.577] CloseHandle (hObject=0x1b4) returned 1
	[0062.578] SetEvent (hEvent=0x144) returned 1
	[0062.609] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0062.610] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=107912) returned 1
	[0062.610] CloseHandle (hObject=0x1b4) returned 1
	[0062.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll")) returned 0x2020
	[0062.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll")) returned 0x2020
	[0062.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.610] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0062.610] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0062.610] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0062.610] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1bc
	[0062.619] ReadFile (in: hFile=0x1b4, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x1a588, lpOverlapped=0x0) returned 1
	[0062.624] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x1a590, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x1a590, lpOverlapped=0x0) returned 1
	[0062.626] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0062.626] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0062.626] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0062.627] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x1a588, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x1a588, lpOverlapped=0x0) returned 1
	[0062.627] FlushFileBuffers (hFile=0x1b4) returned 1
	[0062.707] FlushFileBuffers (hFile=0x1bc) returned 1
	[0062.714] CloseHandle (hObject=0x1b4) returned 1
	[0062.714] CloseHandle (hObject=0x1bc) returned 1
	[0062.714] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll")) returned 1
	[0062.716] SetEvent (hEvent=0x144) returned 1
	[0062.717] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0062.717] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=526176) returned 1
	[0062.718] CloseHandle (hObject=0x230) returned 1
	[0062.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll")) returned 0x2020
	[0062.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll")) returned 0x2020
	[0062.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.718] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0062.718] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0062.718] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0062.718] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1bc
	[0062.718] ReadFile (in: hFile=0x230, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x80760, lpOverlapped=0x0) returned 1
	[0062.728] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x80770, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x80770, lpOverlapped=0x0) returned 1
	[0062.738] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0062.738] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0062.738] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0062.738] WriteFile (in: hFile=0x230, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x80760, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x80760, lpOverlapped=0x0) returned 1
	[0062.739] FlushFileBuffers (hFile=0x230) returned 1
	[0062.802] FlushFileBuffers (hFile=0x1bc) returned 1
	[0062.864] CloseHandle (hObject=0x230) returned 1
	[0062.864] CloseHandle (hObject=0x1bc) returned 1
	[0062.864] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll")) returned 1
	[0062.869] SetEvent (hEvent=0x144) returned 1
	[0062.870] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0062.870] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=14127746) returned 1
	[0062.870] CloseHandle (hObject=0x1bc) returned 1
	[0062.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab")) returned 0x2020
	[0062.870] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0062.871] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0062.871] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0062.871] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0062.871] ReadFile (in: hFile=0x1bc, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.876] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x47db80, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0062.876] ReadFile (in: hFile=0x1bc, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.879] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xd39282, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0062.879] ReadFile (in: hFile=0x1bc, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.894] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0062.894] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0112, lpOverlapped=0x0) returned 1
	[0062.936] SetEndOfFile (hFile=0x1bc) returned 1
	[0062.936] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xd39282, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0062.936] WriteFile (in: hFile=0x1bc, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0062.938] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x47db80, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0062.938] WriteFile (in: hFile=0x1bc, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0062.939] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0062.939] WriteFile (in: hFile=0x1bc, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0062.940] FlushFileBuffers (hFile=0x1bc) returned 1
	[0063.087] CloseHandle (hObject=0x1bc) returned 1
	[0063.087] SetEvent (hEvent=0x144) returned 1
	[0063.088] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0063.088] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=5557) returned 1
	[0063.088] CloseHandle (hObject=0x1bc) returned 1
	[0063.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml")) returned 0x2020
	[0063.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml")) returned 0x2020
	[0063.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.088] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0063.088] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.088] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.088] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0063.089] ReadFile (in: hFile=0x1bc, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x15b5, lpOverlapped=0x0) returned 1
	[0063.092] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x15c0, lpOverlapped=0x0) returned 1
	[0063.093] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0063.093] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.093] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.093] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x15b5, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x15b5, lpOverlapped=0x0) returned 1
	[0063.093] FlushFileBuffers (hFile=0x1bc) returned 1
	[0063.096] FlushFileBuffers (hFile=0x1ac) returned 1
	[0063.097] CloseHandle (hObject=0x1bc) returned 1
	[0063.097] CloseHandle (hObject=0x1ac) returned 1
	[0063.097] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml")) returned 1
	[0063.098] SetEvent (hEvent=0x144) returned 1
	[0063.099] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.099] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=868864) returned 1
	[0063.099] CloseHandle (hObject=0x1ac) returned 1
	[0063.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi")) returned 0x2020
	[0063.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi")) returned 0x2020
	[0063.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.099] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.099] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.099] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.099] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1bc
	[0063.100] ReadFile (in: hFile=0x1ac, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0xd4200, lpOverlapped=0x0) returned 1
	[0063.116] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xd4210, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xd4210, lpOverlapped=0x0) returned 1
	[0063.132] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x102, lpOverlapped=0x0) returned 1
	[0063.132] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.132] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.132] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xd4200, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0xd4200, lpOverlapped=0x0) returned 1
	[0063.134] FlushFileBuffers (hFile=0x1ac) returned 1
	[0063.216] FlushFileBuffers (hFile=0x1bc) returned 1
	[0063.227] CloseHandle (hObject=0x1ac) returned 1
	[0063.228] CloseHandle (hObject=0x1bc) returned 1
	[0063.228] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi")) returned 1
	[0063.235] SetEvent (hEvent=0x144) returned 1
	[0063.235] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0063.235] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=191872) returned 1
	[0063.235] CloseHandle (hObject=0x1bc) returned 1
	[0063.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll")) returned 0x2020
	[0063.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll")) returned 0x2020
	[0063.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.236] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0063.236] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.236] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.236] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0063.236] ReadFile (in: hFile=0x1bc, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x2ed80, lpOverlapped=0x0) returned 1
	[0063.240] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x2ed90, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x2ed90, lpOverlapped=0x0) returned 1
	[0063.244] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0063.244] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.244] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.244] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x2ed80, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x2ed80, lpOverlapped=0x0) returned 1
	[0063.244] FlushFileBuffers (hFile=0x1bc) returned 1
	[0063.275] FlushFileBuffers (hFile=0x1ac) returned 1
	[0063.277] CloseHandle (hObject=0x1bc) returned 1
	[0063.277] CloseHandle (hObject=0x1ac) returned 1
	[0063.277] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll")) returned 1
	[0063.279] SetEvent (hEvent=0x144) returned 1
	[0063.279] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.279] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=27195) returned 1
	[0063.279] CloseHandle (hObject=0x1ac) returned 1
	[0063.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm")) returned 0x2020
	[0063.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm")) returned 0x2020
	[0063.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.279] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.279] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.280] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.280] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1bc
	[0063.280] ReadFile (in: hFile=0x1ac, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x6a3b, lpOverlapped=0x0) returned 1
	[0063.281] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x6a40, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x6a40, lpOverlapped=0x0) returned 1
	[0063.283] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0063.283] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.283] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.283] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x6a3b, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x6a3b, lpOverlapped=0x0) returned 1
	[0063.283] FlushFileBuffers (hFile=0x1ac) returned 1
	[0063.300] FlushFileBuffers (hFile=0x1bc) returned 1
	[0063.301] CloseHandle (hObject=0x1ac) returned 1
	[0063.301] CloseHandle (hObject=0x1bc) returned 1
	[0063.302] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm")) returned 1
	[0063.303] SetEvent (hEvent=0x144) returned 1
	[0063.303] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0063.303] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=9352) returned 1
	[0063.303] CloseHandle (hObject=0x1bc) returned 1
	[0063.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0063.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0063.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.303] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0063.303] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.303] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.303] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0063.304] ReadFile (in: hFile=0x1bc, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x2488, lpOverlapped=0x0) returned 1
	[0063.305] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x2490, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x2490, lpOverlapped=0x0) returned 1
	[0063.306] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0063.306] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.306] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.306] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x2488, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x2488, lpOverlapped=0x0) returned 1
	[0063.306] FlushFileBuffers (hFile=0x1bc) returned 1
	[0063.310] FlushFileBuffers (hFile=0x1ac) returned 1
	[0063.313] CloseHandle (hObject=0x1bc) returned 1
	[0063.313] CloseHandle (hObject=0x1ac) returned 1
	[0063.313] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0063.314] SetEvent (hEvent=0x144) returned 1
	[0063.314] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.314] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=3584) returned 1
	[0063.314] CloseHandle (hObject=0x1ac) returned 1
	[0063.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst")) returned 0x2020
	[0063.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst")) returned 0x2020
	[0063.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.315] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.315] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.315] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.315] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1bc
	[0063.315] ReadFile (in: hFile=0x1ac, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0xe00, lpOverlapped=0x0) returned 1
	[0063.317] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xe10, lpOverlapped=0x0) returned 1
	[0063.317] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0063.318] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.318] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.318] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0xe00, lpOverlapped=0x0) returned 1
	[0063.318] FlushFileBuffers (hFile=0x1ac) returned 1
	[0063.325] FlushFileBuffers (hFile=0x1bc) returned 1
	[0063.358] CloseHandle (hObject=0x1ac) returned 1
	[0063.358] CloseHandle (hObject=0x1bc) returned 1
	[0063.358] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst")) returned 1
	[0063.360] SetEvent (hEvent=0x144) returned 1
	[0063.360] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0063.361] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1349) returned 1
	[0063.361] CloseHandle (hObject=0x1bc) returned 1
	[0063.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml")) returned 0x2020
	[0063.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml")) returned 0x2020
	[0063.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.362] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0063.362] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.362] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.362] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0063.362] ReadFile (in: hFile=0x1bc, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x545, lpOverlapped=0x0) returned 1
	[0063.364] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x550, lpOverlapped=0x0) returned 1
	[0063.364] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0063.365] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.365] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.365] WriteFile (in: hFile=0x1bc, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x545, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x545, lpOverlapped=0x0) returned 1
	[0063.365] FlushFileBuffers (hFile=0x1bc) returned 1
	[0063.387] FlushFileBuffers (hFile=0x1ac) returned 1
	[0063.389] CloseHandle (hObject=0x1bc) returned 1
	[0063.389] CloseHandle (hObject=0x1ac) returned 1
	[0063.389] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml")) returned 1
	[0063.390] SetEvent (hEvent=0x144) returned 1
	[0063.390] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.391] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=28016276) returned 1
	[0063.391] CloseHandle (hObject=0x1ac) returned 1
	[0063.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab")) returned 0x2020
	[0063.391] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0063.391] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.391] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0063.391] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0063.391] ReadFile (in: hFile=0x1ac, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.396] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x8e7f86, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0063.396] ReadFile (in: hFile=0x1ac, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.400] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x1a77e94, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0063.400] ReadFile (in: hFile=0x1ac, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.414] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0063.414] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0102, lpOverlapped=0x0) returned 1
	[0063.431] SetEndOfFile (hFile=0x1ac) returned 1
	[0063.431] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x1a77e94, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0063.431] WriteFile (in: hFile=0x1ac, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0063.433] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x8e7f86, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0063.433] WriteFile (in: hFile=0x1ac, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0063.557] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0063.557] WriteFile (in: hFile=0x1ac, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0063.558] FlushFileBuffers (hFile=0x1ac) returned 1
	[0063.617] CloseHandle (hObject=0x1ac) returned 1
	[0063.617] SetEvent (hEvent=0x144) returned 1
	[0063.618] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.618] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=596341) returned 1
	[0063.618] CloseHandle (hObject=0x1ac) returned 1
	[0063.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml")) returned 0x2020
	[0063.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml")) returned 0x2020
	[0063.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.618] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.618] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.618] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.618] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x198
	[0063.619] ReadFile (in: hFile=0x1ac, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x91975, lpOverlapped=0x0) returned 1
	[0063.630] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x91980, lpOverlapped=0x0) returned 1
	[0063.641] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0063.642] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.642] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.642] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x91975, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x91975, lpOverlapped=0x0) returned 1
	[0063.643] FlushFileBuffers (hFile=0x1ac) returned 1
	[0063.668] FlushFileBuffers (hFile=0x198) returned 1
	[0063.671] CloseHandle (hObject=0x1ac) returned 1
	[0063.671] CloseHandle (hObject=0x198) returned 1
	[0063.671] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml")) returned 1
	[0063.676] SetEvent (hEvent=0x144) returned 1
	[0063.676] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0063.676] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=819) returned 1
	[0063.676] CloseHandle (hObject=0x198) returned 1
	[0063.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml")) returned 0x2020
	[0063.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml")) returned 0x2020
	[0063.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.677] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0063.677] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.677] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.677] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0063.677] ReadFile (in: hFile=0x198, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x333, lpOverlapped=0x0) returned 1
	[0063.678] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x340, lpOverlapped=0x0) returned 1
	[0063.679] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x102, lpOverlapped=0x0) returned 1
	[0063.679] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.679] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.679] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x333, lpOverlapped=0x0) returned 1
	[0063.679] FlushFileBuffers (hFile=0x198) returned 1
	[0063.682] FlushFileBuffers (hFile=0x1ac) returned 1
	[0063.684] CloseHandle (hObject=0x198) returned 1
	[0063.684] CloseHandle (hObject=0x1ac) returned 1
	[0063.684] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml")) returned 1
	[0063.685] SetEvent (hEvent=0x144) returned 1
	[0063.685] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.685] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=2624) returned 1
	[0063.685] CloseHandle (hObject=0x1ac) returned 1
	[0063.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0063.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0063.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.685] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0063.685] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.686] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0063.686] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x198
	[0063.686] ReadFile (in: hFile=0x1ac, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0xa40, lpOverlapped=0x0) returned 1
	[0063.687] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xa50, lpOverlapped=0x0) returned 1
	[0063.688] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0063.688] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.688] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0063.688] WriteFile (in: hFile=0x1ac, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0xa40, lpOverlapped=0x0) returned 1
	[0063.688] FlushFileBuffers (hFile=0x1ac) returned 1
	[0063.741] FlushFileBuffers (hFile=0x198) returned 1
	[0063.742] CloseHandle (hObject=0x1ac) returned 1
	[0063.742] CloseHandle (hObject=0x198) returned 1
	[0063.742] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0063.743] SetEvent (hEvent=0x144) returned 1
	[0063.743] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0063.744] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1992192) returned 1
	[0063.744] CloseHandle (hObject=0x198) returned 1
	[0063.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi")) returned 0x2020
	[0063.744] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0063.745] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0063.745] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0063.745] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0063.745] ReadFile (in: hFile=0x198, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.750] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0063.750] ReadFile (in: hFile=0x198, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.753] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0063.753] ReadFile (in: hFile=0x198, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.766] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0063.766] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0112, lpOverlapped=0x0) returned 1
	[0063.788] SetEndOfFile (hFile=0x198) returned 1
	[0063.788] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0063.788] WriteFile (in: hFile=0x198, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0063.790] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0063.790] WriteFile (in: hFile=0x198, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0063.792] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0063.792] WriteFile (in: hFile=0x198, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0063.794] FlushFileBuffers (hFile=0x198) returned 1
	[0063.857] CloseHandle (hObject=0x198) returned 1
	[0063.857] SetEvent (hEvent=0x144) returned 1
	[0063.857] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0063.857] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=7378792) returned 1
	[0063.858] CloseHandle (hObject=0x198) returned 1
	[0063.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll")) returned 0x2020
	[0063.858] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0063.858] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0063.858] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0063.859] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0063.859] ReadFile (in: hFile=0x198, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.864] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0063.864] ReadFile (in: hFile=0x198, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.867] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0063.867] ReadFile (in: hFile=0x198, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.887] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0063.887] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0102, lpOverlapped=0x0) returned 1
	[0063.907] SetEndOfFile (hFile=0x198) returned 1
	[0063.907] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0063.907] WriteFile (in: hFile=0x198, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0063.908] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0063.908] WriteFile (in: hFile=0x198, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0063.950] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0063.950] WriteFile (in: hFile=0x198, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0063.952] FlushFileBuffers (hFile=0x198) returned 1
	[0064.203] CloseHandle (hObject=0x198) returned 1
	[0064.203] SetEvent (hEvent=0x144) returned 1
	[0064.204] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0064.204] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1463568) returned 1
	[0064.204] CloseHandle (hObject=0x198) returned 1
	[0064.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 0x2020
	[0064.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 0x2020
	[0064.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0064.204] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0064.204] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0064.205] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0064.205] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x194
	[0064.205] ReadFile (in: hFile=0x198, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x110100, lpOverlapped=0x0) returned 1
	[0064.239] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x110100, lpOverlapped=0x0) returned 1
	[0064.283] ReadFile (in: hFile=0x198, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x55410, lpOverlapped=0x0) returned 1
	[0064.287] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x55420, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x55420, lpOverlapped=0x0) returned 1
	[0064.292] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0064.293] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0064.293] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0064.293] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x110102, lpOverlapped=0x0) returned 1
	[0064.298] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x5540e, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x5540e, lpOverlapped=0x0) returned 1
	[0064.299] FlushFileBuffers (hFile=0x198) returned 1
	[0064.498] FlushFileBuffers (hFile=0x194) returned 1
	[0064.515] CloseHandle (hObject=0x198) returned 1
	[0064.515] CloseHandle (hObject=0x194) returned 1
	[0064.515] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 1
	[0064.526] SetEvent (hEvent=0x144) returned 1
	[0064.526] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0064.527] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=16852) returned 1
	[0064.527] CloseHandle (hObject=0x194) returned 1
	[0064.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml")) returned 0x2020
	[0064.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml")) returned 0x2020
	[0064.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0064.527] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0064.527] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0064.527] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0064.528] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x198
	[0064.528] ReadFile (in: hFile=0x194, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x41d4, lpOverlapped=0x0) returned 1
	[0064.530] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x41e0, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x41e0, lpOverlapped=0x0) returned 1
	[0064.531] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0064.531] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0064.531] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0064.531] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x41d4, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x41d4, lpOverlapped=0x0) returned 1
	[0064.531] FlushFileBuffers (hFile=0x194) returned 1
	[0064.544] FlushFileBuffers (hFile=0x198) returned 1
	[0064.545] CloseHandle (hObject=0x194) returned 1
	[0064.545] CloseHandle (hObject=0x198) returned 1
	[0064.545] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml")) returned 1
	[0064.546] SetEvent (hEvent=0x144) returned 1
	[0064.546] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0064.547] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=177720283) returned 1
	[0064.547] CloseHandle (hObject=0x198) returned 1
	[0064.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab")) returned 0x2020
	[0064.547] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0064.548] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0064.548] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0064.548] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0064.548] ReadFile (in: hFile=0x198, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0064.555] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x387ee9e, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0064.555] ReadFile (in: hFile=0x198, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0064.558] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xa93cbdb, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0064.558] ReadFile (in: hFile=0x198, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0064.570] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0064.570] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0102, lpOverlapped=0x0) returned 1
	[0064.588] SetEndOfFile (hFile=0x198) returned 1
	[0064.588] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xa93cbdb, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0064.588] WriteFile (in: hFile=0x198, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0064.600] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x387ee9e, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0064.600] WriteFile (in: hFile=0x198, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0064.601] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0064.601] WriteFile (in: hFile=0x198, lpBuffer=0x38b013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b013a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0064.601] FlushFileBuffers (hFile=0x198) returned 1
	[0065.305] CloseHandle (hObject=0x198) returned 1
	[0065.305] SetEvent (hEvent=0x144) returned 1
	[0065.305] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0065.305] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=1377656) returned 1
	[0065.306] CloseHandle (hObject=0x198) returned 1
	[0065.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 0x2020
	[0065.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 0x2020
	[0065.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0065.306] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0065.306] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0065.306] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb8 | out: lpNewFilePointer=0x0) returned 1
	[0065.306] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b4
	[0065.308] ReadFile (in: hFile=0x198, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x110100, lpOverlapped=0x0) returned 1
	[0065.337] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x110100, lpOverlapped=0x0) returned 1
	[0065.361] ReadFile (in: hFile=0x198, lpBuffer=0x37f0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x278fbcc, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesRead=0x278fbcc*=0x40478, lpOverlapped=0x0) returned 1
	[0065.364] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x40480, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0x40480, lpOverlapped=0x0) returned 1
	[0065.369] WriteFile (in: hFile=0x1b4, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x278fba4, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba4*=0xf2, lpOverlapped=0x0) returned 1
	[0065.369] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0065.369] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278f918 | out: lpNewFilePointer=0x0) returned 1
	[0065.369] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x110102, lpOverlapped=0x0) returned 1
	[0065.374] WriteFile (in: hFile=0x198, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0x40476, lpNumberOfBytesWritten=0x278f924, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278f924*=0x40476, lpOverlapped=0x0) returned 1
	[0065.375] FlushFileBuffers (hFile=0x198) returned 1
	[0065.572] FlushFileBuffers (hFile=0x1b4) returned 1
	[0065.662] CloseHandle (hObject=0x198) returned 1
	[0065.663] CloseHandle (hObject=0x1b4) returned 1
	[0065.663] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe")) returned 1
	[0065.674] SetEvent (hEvent=0x144) returned 1
	[0065.674] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0065.677] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x278fbf0 | out: lpFileSize=0x278fbf0*=36233052) returned 1
	[0065.677] CloseHandle (hObject=0x194) returned 1
	[0065.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab")) returned 0x2020
	[0065.677] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0065.678] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0065.678] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0065.678] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0065.678] ReadFile (in: hFile=0x194, lpBuffer=0x37f0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x37f0058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0065.683] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0065.683] ReadFile (in: hFile=0x194, lpBuffer=0x3830058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3830058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0065.688] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x278fa40 | out: lpNewFilePointer=0x0) returned 1
	[0065.688] ReadFile (in: hFile=0x194, lpBuffer=0x3870058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x278fa4c, lpOverlapped=0x0 | out: lpBuffer=0x3870058*, lpNumberOfBytesRead=0x278fa4c*=0x40000, lpOverlapped=0x0) returned 1
	[0065.700] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fbb0 | out: lpNewFilePointer=0x0) returned 1
	[0065.700] WriteFile (in: hFile=0x194, lpBuffer=0x37f0020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x278fba8, lpOverlapped=0x0 | out: lpBuffer=0x37f0020*, lpNumberOfBytesWritten=0x278fba8*=0xc0112, lpOverlapped=0x0) returned 1
	[0065.720] SetEndOfFile (hFile=0x194) returned 1
	[0065.720] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0065.720] WriteFile (in: hFile=0x194, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0065.722] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0065.722] WriteFile (in: hFile=0x194, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0065.723] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x278fa48 | out: lpNewFilePointer=0x0) returned 1
	[0065.723] WriteFile (in: hFile=0x194, lpBuffer=0x38b014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x278fa54, lpOverlapped=0x0 | out: lpBuffer=0x38b014a*, lpNumberOfBytesWritten=0x278fa54*=0x40000, lpOverlapped=0x0) returned 1
	[0065.723] FlushFileBuffers (hFile=0x194) 

Thread:
	id = 14
	os_tid = 0xa40

	[0044.486] GetProcessHeap () returned 0x440000
	[0044.486] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3721090
	[0044.487] GetProcessHeap () returned 0x440000
	[0044.487] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x3731098
	[0044.487] GetProcessHeap () returned 0x440000
	[0044.487] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x28) returned 0x47bfd0
	[0044.487] GetProcessHeap () returned 0x440000
	[0044.487] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x110102) returned 0x3910020
	[0044.487] GetProcessHeap () returned 0x440000
	[0044.487] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x50) returned 0x463610
	[0044.487] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76c20000
	[0044.487] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0044.487] Wow64DisableWow64FsRedirection (in: OldValue=0x335fbd0 | out: OldValue=0x335fbd0*=0x0) returned 1
	[0044.487] GetProcessHeap () returned 0x440000
	[0044.488] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x463610 | out: hHeap=0x440000) returned 1
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.488] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.489] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.490] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.491] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.492] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.493] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.494] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.495] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.496] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.496] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.496] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.496] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.496] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.496] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.496] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.496] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.496] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.496] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.496] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.496] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.497] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.498] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.499] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.500] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.501] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.502] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.503] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.504] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.505] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.505] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.505] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.505] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.505] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.505] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.505] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.505] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.505] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.505] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0056.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0056.450] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x335fb78 | out: lpFileSize=0x335fb78*=483328) returned 1
	[0056.450] CloseHandle (hObject=0x214) returned 1
	[0056.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb")) returned 0x20
	[0056.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb")) returned 0x20
	[0056.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0056.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0056.450] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fb40 | out: lpNewFilePointer=0x0) returned 1
	[0056.450] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fb40 | out: lpNewFilePointer=0x0) returned 1
	[0056.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x218
	[0056.451] ReadFile (in: hFile=0x214, lpBuffer=0x3910020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fb54, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesRead=0x335fb54*=0x76000, lpOverlapped=0x0) returned 1
	[0056.470] WriteFile (in: hFile=0x218, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x76010, lpNumberOfBytesWritten=0x335fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335fb2c*=0x76010, lpOverlapped=0x0) returned 1
	[0056.478] WriteFile (in: hFile=0x218, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x335fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335fb2c*=0xf2, lpOverlapped=0x0) returned 1
	[0056.479] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f8a0 | out: lpNewFilePointer=0x0) returned 1
	[0056.479] SetFilePointerEx (in: hFile=0x214, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f8a0 | out: lpNewFilePointer=0x0) returned 1
	[0056.479] WriteFile (in: hFile=0x214, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x76000, lpNumberOfBytesWritten=0x335f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335f8ac*=0x76000, lpOverlapped=0x0) returned 1
	[0056.480] FlushFileBuffers (hFile=0x214) returned 1
	[0056.717] FlushFileBuffers (hFile=0x218) returned 1
	[0057.008] CloseHandle (hObject=0x214) returned 1
	[0057.013] CloseHandle (hObject=0x218) returned 1
	[0057.017] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbsample.mdb")) returned 1
	[0057.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0057.021] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x335fb78 | out: lpFileSize=0x335fb78*=9404416) returned 1
	[0057.021] CloseHandle (hObject=0x218) returned 1
	[0057.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde")) returned 0x20
	[0057.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde")) returned 0x20
	[0057.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0057.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0057.021] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fb40 | out: lpNewFilePointer=0x0) returned 1
	[0057.021] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fb40 | out: lpNewFilePointer=0x0) returned 1
	[0057.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x214
	[0057.022] ReadFile (in: hFile=0x218, lpBuffer=0x3910020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fb54, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesRead=0x335fb54*=0x110100, lpOverlapped=0x0) returned 1
	[0057.141] WriteFile (in: hFile=0x214, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335fb2c*=0x110100, lpOverlapped=0x0) returned 1
	[0057.163] ReadFile (in: hFile=0x218, lpBuffer=0x3910020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fb54, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesRead=0x335fb54*=0x110100, lpOverlapped=0x0) returned 1
	[0057.247] WriteFile (in: hFile=0x214, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335fb2c*=0x110100, lpOverlapped=0x0) returned 1
	[0057.266] ReadFile (in: hFile=0x218, lpBuffer=0x3910020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fb54, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesRead=0x335fb54*=0x110100, lpOverlapped=0x0) returned 1
	[0057.327] WriteFile (in: hFile=0x214, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335fb2c*=0x110100, lpOverlapped=0x0) returned 1
	[0057.347] ReadFile (in: hFile=0x218, lpBuffer=0x3910020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fb54, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesRead=0x335fb54*=0x110100, lpOverlapped=0x0) returned 1
	[0057.395] WriteFile (in: hFile=0x214, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335fb2c*=0x110100, lpOverlapped=0x0) returned 1
	[0057.427] ReadFile (in: hFile=0x218, lpBuffer=0x3910020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fb54, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesRead=0x335fb54*=0x110100, lpOverlapped=0x0) returned 1
	[0057.447] WriteFile (in: hFile=0x214, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335fb2c*=0x110100, lpOverlapped=0x0) returned 1
	[0057.572] ReadFile (in: hFile=0x218, lpBuffer=0x3910020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fb54, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesRead=0x335fb54*=0x110100, lpOverlapped=0x0) returned 1
	[0057.593] WriteFile (in: hFile=0x214, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335fb2c*=0x110100, lpOverlapped=0x0) returned 1
	[0057.627] ReadFile (in: hFile=0x218, lpBuffer=0x3910020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fb54, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesRead=0x335fb54*=0x110100, lpOverlapped=0x0) returned 1
	[0057.646] WriteFile (in: hFile=0x214, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335fb2c*=0x110100, lpOverlapped=0x0) returned 1
	[0057.678] ReadFile (in: hFile=0x218, lpBuffer=0x3910020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fb54, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesRead=0x335fb54*=0x110100, lpOverlapped=0x0) returned 1
	[0057.738] WriteFile (in: hFile=0x214, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335fb2c*=0x110100, lpOverlapped=0x0) returned 1
	[0057.762] ReadFile (in: hFile=0x218, lpBuffer=0x3910020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fb54, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesRead=0x335fb54*=0x77800, lpOverlapped=0x0) returned 1
	[0057.768] WriteFile (in: hFile=0x214, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x77810, lpNumberOfBytesWritten=0x335fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335fb2c*=0x77810, lpOverlapped=0x0) returned 1
	[0057.811] WriteFile (in: hFile=0x214, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x335fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335fb2c*=0xf2, lpOverlapped=0x0) returned 1
	[0057.811] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f8a0 | out: lpNewFilePointer=0x0) returned 1
	[0057.811] SetFilePointerEx (in: hFile=0x218, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f8a0 | out: lpNewFilePointer=0x0) returned 1
	[0057.811] WriteFile (in: hFile=0x218, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335f8ac*=0x110102, lpOverlapped=0x0) returned 1
	[0057.826] WriteFile (in: hFile=0x218, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335f8ac*=0x110102, lpOverlapped=0x0) returned 1
	[0057.840] WriteFile (in: hFile=0x218, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335f8ac*=0x110102, lpOverlapped=0x0) returned 1
	[0057.903] WriteFile (in: hFile=0x218, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335f8ac*=0x110102, lpOverlapped=0x0) returned 1
	[0057.917] WriteFile (in: hFile=0x218, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335f8ac*=0x110102, lpOverlapped=0x0) returned 1
	[0057.930] WriteFile (in: hFile=0x218, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335f8ac*=0x110102, lpOverlapped=0x0) returned 1
	[0057.943] WriteFile (in: hFile=0x218, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335f8ac*=0x110102, lpOverlapped=0x0) returned 1
	[0058.068] WriteFile (in: hFile=0x218, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335f8ac*=0x110102, lpOverlapped=0x0) returned 1
	[0058.080] WriteFile (in: hFile=0x218, lpBuffer=0x3910020*, nNumberOfBytesToWrite=0x777f0, lpNumberOfBytesWritten=0x335f8ac, lpOverlapped=0x0 | out: lpBuffer=0x3910020*, lpNumberOfBytesWritten=0x335f8ac*=0x777f0, lpOverlapped=0x0) returned 1
	[0058.081] FlushFileBuffers (hFile=0x218) returned 1
	[0060.423] FlushFileBuffers (hFile=0x214) returned 1
	[0060.593] CloseHandle (hObject=0x218) returned 1
	[0060.594] CloseHandle (hObject=0x214) returned 1
	[0060.595] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzmain.accde")) returned 1
	[0060.651] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) 

Thread:
	id = 15
	os_tid = 0xa44

	[0044.532] GetProcessHeap () returned 0x440000
	[0044.532] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37410a0
	[0044.532] GetProcessHeap () returned 0x440000
	[0044.532] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37510a8
	[0044.532] GetProcessHeap () returned 0x440000
	[0044.532] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x28) returned 0x47c000
	[0044.532] GetProcessHeap () returned 0x440000
	[0044.532] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x110102) returned 0x3a30020
	[0044.533] GetProcessHeap () returned 0x440000
	[0044.533] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x50) returned 0x463610
	[0044.533] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76c20000
	[0044.533] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0044.533] Wow64DisableWow64FsRedirection (in: OldValue=0x35bfa58 | out: OldValue=0x35bfa58*=0x0) returned 1
	[0044.533] GetProcessHeap () returned 0x440000
	[0044.533] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x463610 | out: hHeap=0x440000) returned 1
	[0044.533] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.533] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0044.534] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0044.534] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=0) returned 1
	[0044.534] CloseHandle (hObject=0x194) returned 1
	[0044.534] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0044.534] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=0) returned 1
	[0044.534] CloseHandle (hObject=0x194) returned 1
	[0044.535] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0044.535] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=65536) returned 1
	[0044.535] CloseHandle (hObject=0x194) returned 1
	[0044.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26
	[0044.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26
	[0044.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\bootstat.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0044.535] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0044.535] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0044.535] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0044.535] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\bootstat.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x1a0
	[0044.536] ReadFile (in: hFile=0x194, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x10000, lpOverlapped=0x0) returned 1
	[0044.592] WriteFile (in: hFile=0x1a0, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x10010, lpOverlapped=0x0) returned 1
	[0044.594] WriteFile (in: hFile=0x1a0, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0044.594] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0044.594] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0044.594] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x10000, lpOverlapped=0x0) returned 1
	[0044.594] FlushFileBuffers (hFile=0x194) returned 1
	[0045.261] FlushFileBuffers (hFile=0x1a0) returned 1
	[0045.448] CloseHandle (hObject=0x194) returned 1
	[0045.450] CloseHandle (hObject=0x1a0) returned 1
	[0045.451] DeleteFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 1
	[0045.452] SetEvent (hEvent=0x144) returned 1
	[0045.453] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0045.453] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=2506240) returned 1
	[0045.453] CloseHandle (hObject=0x194) returned 1
	[0045.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi")) returned 0x2020
	[0045.453] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0045.453] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0045.453] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0045.454] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0045.454] ReadFile (in: hFile=0x194, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0045.458] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xcbf55, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0045.458] ReadFile (in: hFile=0x194, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0045.467] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x223e00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0045.467] ReadFile (in: hFile=0x194, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0045.492] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0045.492] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0045.508] SetEndOfFile (hFile=0x194) returned 1
	[0045.508] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x223e00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0045.508] WriteFile (in: hFile=0x194, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0045.510] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xcbf55, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0045.579] WriteFile (in: hFile=0x194, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0045.582] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0045.582] WriteFile (in: hFile=0x194, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0045.584] FlushFileBuffers (hFile=0x194) returned 1
	[0047.334] CloseHandle (hObject=0x194) returned 1
	[0047.549] SetEvent (hEvent=0x144) returned 1
	[0047.549] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0047.549] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=1450) returned 1
	[0047.549] CloseHandle (hObject=0x194) returned 1
	[0047.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 0x2020
	[0047.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 0x2020
	[0047.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0047.549] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0047.550] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0047.550] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0047.550] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0047.550] ReadFile (in: hFile=0x194, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x5aa, lpOverlapped=0x0) returned 1
	[0047.551] WriteFile (in: hFile=0x20c, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x5b0, lpOverlapped=0x0) returned 1
	[0047.552] WriteFile (in: hFile=0x20c, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x102, lpOverlapped=0x0) returned 1
	[0047.553] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0047.553] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0047.553] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x5aa, lpOverlapped=0x0) returned 1
	[0047.553] FlushFileBuffers (hFile=0x194) returned 1
	[0048.007] FlushFileBuffers (hFile=0x20c) returned 1
	[0048.335] CloseHandle (hObject=0x194) returned 1
	[0048.336] CloseHandle (hObject=0x20c) returned 1
	[0048.338] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 1
	[0048.339] SetEvent (hEvent=0x144) returned 1
	[0048.340] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0048.559] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=70361744) returned 1
	[0048.559] CloseHandle (hObject=0x20c) returned 1
	[0048.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab")) returned 0x2020
	[0048.559] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0048.560] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0048.560] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0048.560] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0048.560] ReadFile (in: hFile=0x20c, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0048.566] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x165e0da, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0048.566] ReadFile (in: hFile=0x20c, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0048.578] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x42da290, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0048.578] ReadFile (in: hFile=0x20c, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0048.710] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0048.711] WriteFile (in: hFile=0x20c, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0102, lpOverlapped=0x0) returned 1
	[0048.724] SetEndOfFile (hFile=0x20c) returned 1
	[0048.725] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x42da290, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0048.725] WriteFile (in: hFile=0x20c, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0048.726] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x165e0da, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0048.726] WriteFile (in: hFile=0x20c, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0048.727] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0048.727] WriteFile (in: hFile=0x20c, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0048.728] FlushFileBuffers (hFile=0x20c) returned 1
	[0049.660] CloseHandle (hObject=0x20c) returned 1
	[0050.877] SetEvent (hEvent=0x144) returned 1
	[0050.877] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0050.878] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=9958388) returned 1
	[0050.878] CloseHandle (hObject=0x20c) returned 1
	[0050.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab")) returned 0x2020
	[0050.878] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0050.879] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0050.879] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0050.879] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0050.879] ReadFile (in: hFile=0x20c, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0050.884] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x32a6a6, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0050.884] ReadFile (in: hFile=0x20c, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0050.892] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x93f3f4, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0050.892] ReadFile (in: hFile=0x20c, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0050.907] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0050.907] WriteFile (in: hFile=0x20c, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0102, lpOverlapped=0x0) returned 1
	[0050.923] SetEndOfFile (hFile=0x20c) returned 1
	[0051.100] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x93f3f4, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0051.100] WriteFile (in: hFile=0x20c, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0051.102] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x32a6a6, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0051.103] WriteFile (in: hFile=0x20c, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0051.105] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0051.105] WriteFile (in: hFile=0x20c, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0051.107] FlushFileBuffers (hFile=0x20c) returned 1
	[0052.206] CloseHandle (hObject=0x20c) returned 1
	[0053.694] SetEvent (hEvent=0x144) returned 1
	[0053.695] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0053.696] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=2865664) returned 1
	[0053.696] CloseHandle (hObject=0x198) returned 1
	[0053.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi")) returned 0x2020
	[0053.696] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0053.697] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0053.697] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0053.697] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0053.697] ReadFile (in: hFile=0x198, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0053.702] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xe9355, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0053.702] ReadFile (in: hFile=0x198, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0053.711] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x27ba00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0053.711] ReadFile (in: hFile=0x198, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0053.724] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0053.724] WriteFile (in: hFile=0x198, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0053.883] SetEndOfFile (hFile=0x198) returned 1
	[0053.885] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x27ba00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0053.885] WriteFile (in: hFile=0x198, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0053.887] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xe9355, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0053.887] WriteFile (in: hFile=0x198, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0053.891] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0053.891] WriteFile (in: hFile=0x198, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0053.892] FlushFileBuffers (hFile=0x198) returned 1
	[0055.035] CloseHandle (hObject=0x198) returned 1
	[0055.225] SetEvent (hEvent=0x144) returned 1
	[0055.277] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0055.278] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=2522624) returned 1
	[0055.278] CloseHandle (hObject=0x198) returned 1
	[0055.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi")) returned 0x2020
	[0055.278] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0055.279] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0055.279] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0055.279] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0055.279] ReadFile (in: hFile=0x198, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0055.284] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xcd4aa, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0055.285] ReadFile (in: hFile=0x198, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0055.296] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x227e00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0055.296] ReadFile (in: hFile=0x198, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0055.309] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0055.309] WriteFile (in: hFile=0x198, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0102, lpOverlapped=0x0) returned 1
	[0055.447] SetEndOfFile (hFile=0x198) returned 1
	[0055.447] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x227e00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0055.447] WriteFile (in: hFile=0x198, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0055.449] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xcd4aa, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0055.449] WriteFile (in: hFile=0x198, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0055.453] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0055.453] WriteFile (in: hFile=0x198, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0055.454] FlushFileBuffers (hFile=0x198) returned 1
	[0056.774] CloseHandle (hObject=0x198) returned 1
	[0056.956] SetEvent (hEvent=0x144) returned 1
	[0056.958] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0056.958] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=875520) returned 1
	[0056.958] CloseHandle (hObject=0x1bc) returned 1
	[0056.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi")) returned 0x2020
	[0056.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi")) returned 0x2020
	[0056.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0056.959] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0056.959] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0056.959] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0056.959] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1c8
	[0057.092] ReadFile (in: hFile=0x1bc, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0xd5c00, lpOverlapped=0x0) returned 1
	[0057.112] WriteFile (in: hFile=0x1c8, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xd5c10, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xd5c10, lpOverlapped=0x0) returned 1
	[0057.127] WriteFile (in: hFile=0x1c8, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0057.127] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0057.127] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0057.127] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xd5c00, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0xd5c00, lpOverlapped=0x0) returned 1
	[0057.130] FlushFileBuffers (hFile=0x1bc) returned 1
	[0057.352] FlushFileBuffers (hFile=0x1c8) returned 1
	[0057.461] CloseHandle (hObject=0x1bc) returned 1
	[0057.469] CloseHandle (hObject=0x1c8) returned 1
	[0057.477] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi")) returned 1
	[0057.484] SetEvent (hEvent=0x144) returned 1
	[0057.485] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8
	[0057.485] GetFileSizeEx (in: hFile=0x1c8, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=1347) returned 1
	[0057.485] CloseHandle (hObject=0x1c8) returned 1
	[0057.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml")) returned 0x2020
	[0057.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml")) returned 0x2020
	[0057.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0057.492] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1c8
	[0057.493] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0057.493] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0057.493] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1bc
	[0057.493] ReadFile (in: hFile=0x1c8, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x543, lpOverlapped=0x0) returned 1
	[0057.495] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x550, lpOverlapped=0x0) returned 1
	[0057.495] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0057.496] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0057.496] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0057.496] WriteFile (in: hFile=0x1c8, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x543, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x543, lpOverlapped=0x0) returned 1
	[0057.496] FlushFileBuffers (hFile=0x1c8) returned 1
	[0057.500] FlushFileBuffers (hFile=0x1bc) returned 1
	[0057.502] CloseHandle (hObject=0x1c8) returned 1
	[0057.502] CloseHandle (hObject=0x1bc) returned 1
	[0057.503] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml")) returned 1
	[0057.504] SetEvent (hEvent=0x144) returned 1
	[0057.504] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0057.505] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=13642474) returned 1
	[0057.505] CloseHandle (hObject=0x1bc) returned 1
	[0057.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab")) returned 0x2020
	[0057.505] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0057.506] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0057.506] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0057.506] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0057.506] ReadFile (in: hFile=0x1bc, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0057.511] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x4563a3, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0057.511] ReadFile (in: hFile=0x1bc, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0057.514] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xcc2aea, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0057.514] ReadFile (in: hFile=0x1bc, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0057.528] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0057.528] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0102, lpOverlapped=0x0) returned 1
	[0057.606] SetEndOfFile (hFile=0x1bc) returned 1
	[0057.606] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xcc2aea, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0057.606] WriteFile (in: hFile=0x1bc, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0057.608] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x4563a3, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0057.608] WriteFile (in: hFile=0x1bc, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0057.608] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0057.608] WriteFile (in: hFile=0x1bc, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0057.609] FlushFileBuffers (hFile=0x1bc) returned 1
	[0058.756] CloseHandle (hObject=0x1bc) returned 1
	[0059.802] SetEvent (hEvent=0x144) returned 1
	[0059.803] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0059.867] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=885760) returned 1
	[0059.867] CloseHandle (hObject=0x1bc) returned 1
	[0059.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi")) returned 0x2020
	[0059.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi")) returned 0x2020
	[0059.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0059.867] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0059.867] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0059.867] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0059.867] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x21c
	[0059.871] ReadFile (in: hFile=0x1bc, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0xd8400, lpOverlapped=0x0) returned 1
	[0059.891] WriteFile (in: hFile=0x21c, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xd8410, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xd8410, lpOverlapped=0x0) returned 1
	[0059.906] WriteFile (in: hFile=0x21c, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0059.906] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0059.906] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0059.907] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xd8400, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0xd8400, lpOverlapped=0x0) returned 1
	[0059.909] FlushFileBuffers (hFile=0x1bc) returned 1
	[0060.142] FlushFileBuffers (hFile=0x21c) returned 1
	[0060.284] CloseHandle (hObject=0x1bc) returned 1
	[0060.289] CloseHandle (hObject=0x21c) returned 1
	[0060.295] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi")) returned 1
	[0060.304] SetEvent (hEvent=0x144) returned 1
	[0060.304] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0060.304] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=1458) returned 1
	[0060.304] CloseHandle (hObject=0x21c) returned 1
	[0060.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml")) returned 0x2020
	[0060.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml")) returned 0x2020
	[0060.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0060.304] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0060.305] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0060.305] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0060.305] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1bc
	[0060.305] ReadFile (in: hFile=0x21c, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x5b2, lpOverlapped=0x0) returned 1
	[0060.369] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x5c0, lpOverlapped=0x0) returned 1
	[0060.379] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0060.380] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0060.380] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0060.380] WriteFile (in: hFile=0x21c, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x5b2, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x5b2, lpOverlapped=0x0) returned 1
	[0060.380] FlushFileBuffers (hFile=0x21c) returned 1
	[0060.449] FlushFileBuffers (hFile=0x1bc) returned 1
	[0060.484] CloseHandle (hObject=0x21c) returned 1
	[0060.484] CloseHandle (hObject=0x1bc) returned 1
	[0060.484] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml")) returned 1
	[0060.485] SetEvent (hEvent=0x144) returned 1
	[0060.489] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0060.489] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=811) returned 1
	[0060.489] CloseHandle (hObject=0x1bc) returned 1
	[0060.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml")) returned 0x2020
	[0060.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml")) returned 0x2020
	[0060.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0060.489] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0060.489] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0060.490] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0060.490] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x21c
	[0060.490] ReadFile (in: hFile=0x1bc, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x32b, lpOverlapped=0x0) returned 1
	[0060.491] WriteFile (in: hFile=0x21c, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x330, lpOverlapped=0x0) returned 1
	[0060.492] WriteFile (in: hFile=0x21c, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0060.493] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0060.493] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0060.493] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x32b, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x32b, lpOverlapped=0x0) returned 1
	[0060.493] FlushFileBuffers (hFile=0x1bc) returned 1
	[0060.515] FlushFileBuffers (hFile=0x21c) returned 1
	[0060.540] CloseHandle (hObject=0x1bc) returned 1
	[0060.547] CloseHandle (hObject=0x21c) returned 1
	[0060.580] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml")) returned 1
	[0060.586] SetEvent (hEvent=0x144) returned 1
	[0060.586] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0060.587] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=1383) returned 1
	[0060.587] CloseHandle (hObject=0x21c) returned 1
	[0060.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml")) returned 0x2020
	[0060.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml")) returned 0x2020
	[0060.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0060.587] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0060.587] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0060.587] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0060.587] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1bc
	[0060.588] ReadFile (in: hFile=0x21c, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x567, lpOverlapped=0x0) returned 1
	[0060.591] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x570, lpOverlapped=0x0) returned 1
	[0060.592] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0060.592] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0060.592] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0060.592] WriteFile (in: hFile=0x21c, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x567, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x567, lpOverlapped=0x0) returned 1
	[0060.592] FlushFileBuffers (hFile=0x21c) returned 1
	[0060.595] FlushFileBuffers (hFile=0x1bc) returned 1
	[0060.597] CloseHandle (hObject=0x21c) returned 1
	[0060.597] CloseHandle (hObject=0x1bc) returned 1
	[0060.598] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml")) returned 1
	[0060.598] SetEvent (hEvent=0x144) returned 1
	[0060.599] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0060.599] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=2928955) returned 1
	[0060.599] CloseHandle (hObject=0x1bc) returned 1
	[0060.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab")) returned 0x2020
	[0060.599] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0060.599] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0060.600] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0060.600] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0060.600] ReadFile (in: hFile=0x1bc, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0060.604] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xee5be, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0060.604] ReadFile (in: hFile=0x1bc, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0060.612] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x28b13b, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0060.612] ReadFile (in: hFile=0x1bc, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0060.625] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0060.625] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0060.737] SetEndOfFile (hFile=0x1bc) returned 1
	[0060.737] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x28b13b, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0060.737] WriteFile (in: hFile=0x1bc, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0060.739] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xee5be, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0060.739] WriteFile (in: hFile=0x1bc, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0060.742] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0060.742] WriteFile (in: hFile=0x1bc, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0060.744] FlushFileBuffers (hFile=0x1bc) returned 1
	[0061.241] CloseHandle (hObject=0x1bc) returned 1
	[0061.242] SetEvent (hEvent=0x144) returned 1
	[0061.242] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0061.242] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=3124224) returned 1
	[0061.242] CloseHandle (hObject=0x1bc) returned 1
	[0061.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi")) returned 0x2020
	[0061.242] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0061.252] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0061.252] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0061.252] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0061.252] ReadFile (in: hFile=0x1bc, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.259] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xfe400, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0061.259] ReadFile (in: hFile=0x1bc, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.267] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x2bac00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0061.267] ReadFile (in: hFile=0x1bc, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.279] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0061.279] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0061.314] SetEndOfFile (hFile=0x1bc) returned 1
	[0061.314] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x2bac00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0061.314] WriteFile (in: hFile=0x1bc, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0061.316] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xfe400, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0061.316] WriteFile (in: hFile=0x1bc, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0061.318] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0061.318] WriteFile (in: hFile=0x1bc, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0061.320] FlushFileBuffers (hFile=0x1bc) returned 1
	[0061.550] CloseHandle (hObject=0x1bc) returned 1
	[0061.550] SetEvent (hEvent=0x144) returned 1
	[0061.550] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0061.550] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=2797568) returned 1
	[0061.551] CloseHandle (hObject=0x1bc) returned 1
	[0061.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi")) returned 0x2020
	[0061.551] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0061.551] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0061.551] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0061.551] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0061.551] ReadFile (in: hFile=0x1bc, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.558] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xe3aaa, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0061.558] ReadFile (in: hFile=0x1bc, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.566] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x26b000, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0061.566] ReadFile (in: hFile=0x1bc, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0061.581] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0061.581] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0061.894] SetEndOfFile (hFile=0x1bc) returned 1
	[0061.894] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x26b000, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0061.894] WriteFile (in: hFile=0x1bc, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0061.896] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0xe3aaa, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0061.896] WriteFile (in: hFile=0x1bc, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0061.899] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0061.899] WriteFile (in: hFile=0x1bc, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0061.901] FlushFileBuffers (hFile=0x1bc) returned 1
	[0062.026] CloseHandle (hObject=0x1bc) returned 1
	[0062.026] SetEvent (hEvent=0x144) returned 1
	[0062.026] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0062.027] GetFileSizeEx (in: hFile=0x1bc, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=1606) returned 1
	[0062.027] CloseHandle (hObject=0x1bc) returned 1
	[0062.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml")) returned 0x2020
	[0062.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml")) returned 0x2020
	[0062.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.027] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1bc
	[0062.027] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.027] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.027] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x198
	[0062.027] ReadFile (in: hFile=0x1bc, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x646, lpOverlapped=0x0) returned 1
	[0062.029] WriteFile (in: hFile=0x198, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x650, lpOverlapped=0x0) returned 1
	[0062.030] WriteFile (in: hFile=0x198, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0062.030] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.030] SetFilePointerEx (in: hFile=0x1bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.030] WriteFile (in: hFile=0x1bc, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x646, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x646, lpOverlapped=0x0) returned 1
	[0062.030] FlushFileBuffers (hFile=0x1bc) returned 1
	[0062.033] FlushFileBuffers (hFile=0x198) returned 1
	[0062.038] CloseHandle (hObject=0x1bc) returned 1
	[0062.039] CloseHandle (hObject=0x198) returned 1
	[0062.039] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml")) returned 1
	[0062.040] SetEvent (hEvent=0x144) returned 1
	[0062.040] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0062.040] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=17456632) returned 1
	[0062.040] CloseHandle (hObject=0x198) returned 1
	[0062.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab")) returned 0x2020
	[0062.040] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0062.041] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0062.041] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.041] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.041] ReadFile (in: hFile=0x198, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.046] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x58c9fd, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.046] ReadFile (in: hFile=0x198, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.049] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x1065df8, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.049] ReadFile (in: hFile=0x198, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.063] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0062.063] WriteFile (in: hFile=0x198, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0102, lpOverlapped=0x0) returned 1
	[0062.108] SetEndOfFile (hFile=0x198) returned 1
	[0062.108] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x1065df8, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0062.108] WriteFile (in: hFile=0x198, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0062.110] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x58c9fd, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0062.110] WriteFile (in: hFile=0x198, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0062.111] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0062.111] WriteFile (in: hFile=0x198, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0062.111] FlushFileBuffers (hFile=0x198) returned 1
	[0062.190] CloseHandle (hObject=0x198) returned 1
	[0062.191] SetEvent (hEvent=0x144) returned 1
	[0062.197] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0062.199] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=2511872) returned 1
	[0062.200] CloseHandle (hObject=0x198) returned 1
	[0062.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi")) returned 0x2020
	[0062.200] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0062.200] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0062.200] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.200] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.200] ReadFile (in: hFile=0x198, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.205] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xcc6aa, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.205] ReadFile (in: hFile=0x198, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.213] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x225400, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.213] ReadFile (in: hFile=0x198, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.227] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0062.227] WriteFile (in: hFile=0x198, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0062.294] SetEndOfFile (hFile=0x198) returned 1
	[0062.294] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x225400, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0062.294] WriteFile (in: hFile=0x198, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0062.296] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xcc6aa, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0062.296] WriteFile (in: hFile=0x198, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0062.300] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0062.300] WriteFile (in: hFile=0x198, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0062.301] FlushFileBuffers (hFile=0x198) returned 1
	[0062.310] CloseHandle (hObject=0x198) returned 1
	[0062.310] SetEvent (hEvent=0x144) returned 1
	[0062.310] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0062.311] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=1872) returned 1
	[0062.311] CloseHandle (hObject=0x198) returned 1
	[0062.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0062.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0062.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.311] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0062.311] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.311] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.311] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0062.311] ReadFile (in: hFile=0x198, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x750, lpOverlapped=0x0) returned 1
	[0062.313] WriteFile (in: hFile=0x210, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x760, lpOverlapped=0x0) returned 1
	[0062.314] WriteFile (in: hFile=0x210, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0062.314] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.314] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.314] WriteFile (in: hFile=0x198, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x750, lpOverlapped=0x0) returned 1
	[0062.314] FlushFileBuffers (hFile=0x198) returned 1
	[0062.316] FlushFileBuffers (hFile=0x210) returned 1
	[0062.318] CloseHandle (hObject=0x198) returned 1
	[0062.318] CloseHandle (hObject=0x210) returned 1
	[0062.318] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0062.319] SetEvent (hEvent=0x144) returned 1
	[0062.319] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0062.320] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=4095519) returned 1
	[0062.320] CloseHandle (hObject=0x210) returned 1
	[0062.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab")) returned 0x2020
	[0062.320] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0062.321] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0062.321] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.321] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.321] ReadFile (in: hFile=0x210, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.325] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x14d4b5, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.326] ReadFile (in: hFile=0x210, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.329] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x3a7e1f, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.329] ReadFile (in: hFile=0x210, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.341] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0062.341] WriteFile (in: hFile=0x210, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0062.383] SetEndOfFile (hFile=0x210) returned 1
	[0062.383] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x3a7e1f, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0062.383] WriteFile (in: hFile=0x210, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0062.385] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x14d4b5, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0062.385] WriteFile (in: hFile=0x210, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0062.387] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0062.387] WriteFile (in: hFile=0x210, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0062.388] FlushFileBuffers (hFile=0x210) returned 1
	[0062.552] CloseHandle (hObject=0x210) returned 1
	[0062.552] SetEvent (hEvent=0x144) returned 1
	[0062.552] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0062.552] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=913) returned 1
	[0062.552] CloseHandle (hObject=0x210) returned 1
	[0062.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml")) returned 0x2020
	[0062.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml")) returned 0x2020
	[0062.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.553] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0062.553] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.553] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.553] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0062.553] ReadFile (in: hFile=0x210, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x391, lpOverlapped=0x0) returned 1
	[0062.557] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x3a0, lpOverlapped=0x0) returned 1
	[0062.558] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0062.559] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.559] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.559] WriteFile (in: hFile=0x210, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x391, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x391, lpOverlapped=0x0) returned 1
	[0062.559] FlushFileBuffers (hFile=0x210) returned 1
	[0062.562] FlushFileBuffers (hFile=0x1ac) returned 1
	[0062.564] CloseHandle (hObject=0x210) returned 1
	[0062.564] CloseHandle (hObject=0x1ac) returned 1
	[0062.564] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml")) returned 1
	[0062.565] SetEvent (hEvent=0x144) returned 1
	[0062.565] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.567] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=1452) returned 1
	[0062.567] CloseHandle (hObject=0x1ac) returned 1
	[0062.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0062.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0062.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.568] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.568] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.568] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.568] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0062.568] ReadFile (in: hFile=0x1ac, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x5ac, lpOverlapped=0x0) returned 1
	[0062.569] WriteFile (in: hFile=0x210, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x5b0, lpOverlapped=0x0) returned 1
	[0062.570] WriteFile (in: hFile=0x210, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0062.570] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.571] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.571] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x5ac, lpOverlapped=0x0) returned 1
	[0062.571] FlushFileBuffers (hFile=0x1ac) returned 1
	[0062.577] FlushFileBuffers (hFile=0x210) returned 1
	[0062.579] CloseHandle (hObject=0x1ac) returned 1
	[0062.579] CloseHandle (hObject=0x210) returned 1
	[0062.579] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0062.580] SetEvent (hEvent=0x144) returned 1
	[0062.580] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0062.582] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=596341) returned 1
	[0062.582] CloseHandle (hObject=0x210) returned 1
	[0062.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml")) returned 0x2020
	[0062.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml")) returned 0x2020
	[0062.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.582] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0062.582] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.582] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.582] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0062.582] ReadFile (in: hFile=0x210, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x91975, lpOverlapped=0x0) returned 1
	[0062.594] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x91980, lpOverlapped=0x0) returned 1
	[0062.604] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0062.604] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.604] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.604] WriteFile (in: hFile=0x210, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x91975, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x91975, lpOverlapped=0x0) returned 1
	[0062.606] FlushFileBuffers (hFile=0x210) returned 1
	[0062.633] FlushFileBuffers (hFile=0x1ac) returned 1
	[0062.635] CloseHandle (hObject=0x210) returned 1
	[0062.636] CloseHandle (hObject=0x1ac) returned 1
	[0062.636] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml")) returned 1
	[0062.641] SetEvent (hEvent=0x144) returned 1
	[0062.641] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0062.643] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=838536) returned 1
	[0062.643] CloseHandle (hObject=0x194) returned 1
	[0062.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe")) returned 0x2020
	[0062.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe")) returned 0x2020
	[0062.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.643] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0062.643] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.643] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.644] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0062.644] ReadFile (in: hFile=0x194, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0xccb88, lpOverlapped=0x0) returned 1
	[0062.659] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xccb90, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xccb90, lpOverlapped=0x0) returned 1
	[0062.683] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0062.683] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.683] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.683] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xccb88, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0xccb88, lpOverlapped=0x0) returned 1
	[0062.685] FlushFileBuffers (hFile=0x194) returned 1
	[0062.711] FlushFileBuffers (hFile=0x1ac) returned 1
	[0062.755] CloseHandle (hObject=0x194) returned 1
	[0062.755] CloseHandle (hObject=0x1ac) returned 1
	[0062.755] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe")) returned 1
	[0062.762] SetEvent (hEvent=0x144) returned 1
	[0062.762] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.762] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=519584) returned 1
	[0062.762] CloseHandle (hObject=0x1ac) returned 1
	[0062.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe")) returned 0x2020
	[0062.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe")) returned 0x2020
	[0062.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.763] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.763] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.763] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.763] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x194
	[0062.763] ReadFile (in: hFile=0x1ac, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x7eda0, lpOverlapped=0x0) returned 1
	[0062.774] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x7edb0, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x7edb0, lpOverlapped=0x0) returned 1
	[0062.784] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0062.784] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.784] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.784] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x7eda0, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x7eda0, lpOverlapped=0x0) returned 1
	[0062.785] FlushFileBuffers (hFile=0x1ac) returned 1
	[0062.803] FlushFileBuffers (hFile=0x194) returned 1
	[0062.806] CloseHandle (hObject=0x1ac) returned 1
	[0062.806] CloseHandle (hObject=0x194) returned 1
	[0062.806] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe")) returned 1
	[0062.810] SetEvent (hEvent=0x144) returned 1
	[0062.810] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0062.811] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=1857) returned 1
	[0062.811] CloseHandle (hObject=0x194) returned 1
	[0062.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest")) returned 0x2020
	[0062.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest")) returned 0x2020
	[0062.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.812] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0062.812] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.812] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.812] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0062.812] ReadFile (in: hFile=0x194, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x741, lpOverlapped=0x0) returned 1
	[0062.813] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x750, lpOverlapped=0x0) returned 1
	[0062.814] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x112, lpOverlapped=0x0) returned 1
	[0062.814] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.815] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.815] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x741, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x741, lpOverlapped=0x0) returned 1
	[0062.815] FlushFileBuffers (hFile=0x194) returned 1
	[0062.820] FlushFileBuffers (hFile=0x1ac) returned 1
	[0062.822] CloseHandle (hObject=0x194) returned 1
	[0062.822] CloseHandle (hObject=0x1ac) returned 1
	[0062.822] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest")) returned 1
	[0062.823] SetEvent (hEvent=0x144) returned 1
	[0062.823] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.823] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=655872) returned 1
	[0062.823] CloseHandle (hObject=0x1ac) returned 1
	[0062.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll")) returned 0x2020
	[0062.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll")) returned 0x2020
	[0062.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0062.824] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0062.824] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.824] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0062.824] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x194
	[0062.824] ReadFile (in: hFile=0x1ac, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0xa0200, lpOverlapped=0x0) returned 1
	[0062.836] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xa0210, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xa0210, lpOverlapped=0x0) returned 1
	[0062.848] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0062.848] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.848] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0062.849] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xa0200, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0xa0200, lpOverlapped=0x0) returned 1
	[0062.850] FlushFileBuffers (hFile=0x1ac) returned 1
	[0062.970] FlushFileBuffers (hFile=0x194) returned 1
	[0062.975] CloseHandle (hObject=0x1ac) returned 1
	[0062.976] CloseHandle (hObject=0x194) returned 1
	[0062.976] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll")) returned 1
	[0062.981] SetEvent (hEvent=0x144) returned 1
	[0062.984] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0062.984] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=3702272) returned 1
	[0062.984] CloseHandle (hObject=0x194) returned 1
	[0062.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi")) returned 0x2020
	[0062.984] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0062.992] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0062.992] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.992] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.992] ReadFile (in: hFile=0x194, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0062.996] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x12d4aa, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0062.996] ReadFile (in: hFile=0x194, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.014] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x347e00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0063.014] ReadFile (in: hFile=0x194, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.027] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0063.027] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0063.049] SetEndOfFile (hFile=0x194) returned 1
	[0063.049] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x347e00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0063.049] WriteFile (in: hFile=0x194, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0063.051] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x12d4aa, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0063.051] WriteFile (in: hFile=0x194, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0063.053] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0063.053] WriteFile (in: hFile=0x194, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0063.055] FlushFileBuffers (hFile=0x194) returned 1
	[0063.169] CloseHandle (hObject=0x194) returned 1
	[0063.170] SetEvent (hEvent=0x144) returned 1
	[0063.170] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0063.170] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=819) returned 1
	[0063.170] CloseHandle (hObject=0x194) returned 1
	[0063.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml")) returned 0x2020
	[0063.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml")) returned 0x2020
	[0063.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.170] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0063.171] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0063.171] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0063.171] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0063.171] ReadFile (in: hFile=0x194, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x333, lpOverlapped=0x0) returned 1
	[0063.172] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x340, lpOverlapped=0x0) returned 1
	[0063.173] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x102, lpOverlapped=0x0) returned 1
	[0063.173] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0063.173] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0063.173] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x333, lpOverlapped=0x0) returned 1
	[0063.174] FlushFileBuffers (hFile=0x194) returned 1
	[0063.272] FlushFileBuffers (hFile=0x230) returned 1
	[0063.291] CloseHandle (hObject=0x194) returned 1
	[0063.291] CloseHandle (hObject=0x230) returned 1
	[0063.291] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml")) returned 1
	[0063.292] SetEvent (hEvent=0x144) returned 1
	[0063.292] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0063.293] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=67190) returned 1
	[0063.293] CloseHandle (hObject=0x230) returned 1
	[0063.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm")) returned 0x2020
	[0063.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm")) returned 0x2020
	[0063.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.293] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0063.293] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0063.293] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0063.293] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x194
	[0063.293] ReadFile (in: hFile=0x230, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x10676, lpOverlapped=0x0) returned 1
	[0063.296] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x10680, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x10680, lpOverlapped=0x0) returned 1
	[0063.297] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0063.298] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0063.298] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0063.298] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x10676, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x10676, lpOverlapped=0x0) returned 1
	[0063.298] FlushFileBuffers (hFile=0x230) returned 1
	[0063.311] FlushFileBuffers (hFile=0x194) returned 1
	[0063.319] CloseHandle (hObject=0x230) returned 1
	[0063.319] CloseHandle (hObject=0x194) returned 1
	[0063.319] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm")) returned 1
	[0063.321] SetEvent (hEvent=0x144) returned 1
	[0063.321] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0063.323] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=2517504) returned 1
	[0063.323] CloseHandle (hObject=0x194) returned 1
	[0063.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi")) returned 0x2020
	[0063.323] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0063.324] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0063.324] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0063.324] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0063.324] ReadFile (in: hFile=0x194, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.329] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xcce00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0063.329] ReadFile (in: hFile=0x194, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.337] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x226a00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0063.337] ReadFile (in: hFile=0x194, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0063.350] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0063.350] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0063.377] SetEndOfFile (hFile=0x194) returned 1
	[0063.377] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x226a00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0063.377] WriteFile (in: hFile=0x194, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0063.379] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0xcce00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0063.379] WriteFile (in: hFile=0x194, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0063.382] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0063.382] WriteFile (in: hFile=0x194, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0063.384] FlushFileBuffers (hFile=0x194) returned 1
	[0063.667] CloseHandle (hObject=0x194) returned 1
	[0063.669] SetEvent (hEvent=0x144) returned 1
	[0063.681] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0063.689] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=868864) returned 1
	[0063.690] CloseHandle (hObject=0x194) returned 1
	[0063.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi")) returned 0x2020
	[0063.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi")) returned 0x2020
	[0063.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.690] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0063.690] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0063.690] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0063.690] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0063.690] ReadFile (in: hFile=0x194, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0xd4200, lpOverlapped=0x0) returned 1
	[0063.706] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xd4210, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xd4210, lpOverlapped=0x0) returned 1
	[0063.721] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x102, lpOverlapped=0x0) returned 1
	[0063.721] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0063.721] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0063.721] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xd4200, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0xd4200, lpOverlapped=0x0) returned 1
	[0063.723] FlushFileBuffers (hFile=0x194) returned 1
	[0063.808] FlushFileBuffers (hFile=0x230) returned 1
	[0063.819] CloseHandle (hObject=0x194) returned 1
	[0063.819] CloseHandle (hObject=0x230) returned 1
	[0063.819] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi")) returned 1
	[0063.826] SetEvent (hEvent=0x144) returned 1
	[0063.827] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0063.827] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=4274) returned 1
	[0063.827] CloseHandle (hObject=0x230) returned 1
	[0063.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020
	[0063.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020
	[0063.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.827] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0063.827] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0063.827] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0063.827] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x194
	[0063.828] ReadFile (in: hFile=0x230, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x10b2, lpOverlapped=0x0) returned 1
	[0063.831] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x10c0, lpOverlapped=0x0) returned 1
	[0063.831] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0063.832] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0063.832] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0063.832] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x10b2, lpOverlapped=0x0) returned 1
	[0063.832] FlushFileBuffers (hFile=0x230) returned 1
	[0063.835] FlushFileBuffers (hFile=0x194) returned 1
	[0063.836] CloseHandle (hObject=0x230) returned 1
	[0063.836] CloseHandle (hObject=0x194) returned 1
	[0063.836] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1
	[0063.837] SetEvent (hEvent=0x144) returned 1
	[0063.837] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0063.838] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=174440) returned 1
	[0063.838] CloseHandle (hObject=0x194) returned 1
	[0063.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 0x2020
	[0063.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 0x2020
	[0063.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0063.838] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0063.838] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0063.838] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0063.839] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0063.839] ReadFile (in: hFile=0x194, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x2a968, lpOverlapped=0x0) returned 1
	[0063.843] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x2a970, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x2a970, lpOverlapped=0x0) returned 1
	[0063.845] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xe2, lpOverlapped=0x0) returned 1
	[0063.846] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0063.846] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0063.846] WriteFile (in: hFile=0x194, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x2a968, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x2a968, lpOverlapped=0x0) returned 1
	[0063.846] FlushFileBuffers (hFile=0x194) returned 1
	[0063.984] FlushFileBuffers (hFile=0x230) returned 1
	[0064.004] CloseHandle (hObject=0x194) returned 1
	[0064.004] CloseHandle (hObject=0x230) returned 1
	[0064.004] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 1
	[0064.006] SetEvent (hEvent=0x144) returned 1
	[0064.006] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0064.006] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=36233052) returned 1
	[0064.006] CloseHandle (hObject=0x230) returned 1
	[0064.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab")) returned 0x2020
	[0064.006] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0064.007] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0064.007] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0064.007] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0064.007] ReadFile (in: hFile=0x230, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0064.031] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0064.031] ReadFile (in: hFile=0x230, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0064.034] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0064.034] ReadFile (in: hFile=0x230, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0064.046] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0064.046] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0064.072] SetEndOfFile (hFile=0x230) returned 1
	[0064.073] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x224df5c, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0064.073] WriteFile (in: hFile=0x230, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0064.075] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0xb84a74, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0064.075] WriteFile (in: hFile=0x230, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0064.075] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0064.076] WriteFile (in: hFile=0x230, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0064.076] FlushFileBuffers (hFile=0x230) returned 1
	[0064.353] CloseHandle (hObject=0x230) returned 1
	[0064.353] SetEvent (hEvent=0x144) returned 1
	[0064.354] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0064.354] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=715834) returned 1
	[0064.354] CloseHandle (hObject=0x230) returned 1
	[0064.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 0x2020
	[0064.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 0x2020
	[0064.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0064.354] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0064.354] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0064.354] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0064.354] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b4
	[0064.355] ReadFile (in: hFile=0x230, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0xaec3a, lpOverlapped=0x0) returned 1
	[0064.369] WriteFile (in: hFile=0x1b4, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xaec40, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xaec40, lpOverlapped=0x0) returned 1
	[0064.382] WriteFile (in: hFile=0x1b4, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x112, lpOverlapped=0x0) returned 1
	[0064.382] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0064.382] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0064.382] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xaec3a, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0xaec3a, lpOverlapped=0x0) returned 1
	[0064.383] FlushFileBuffers (hFile=0x230) returned 1
	[0064.417] FlushFileBuffers (hFile=0x1b4) returned 1
	[0064.421] CloseHandle (hObject=0x230) returned 1
	[0064.421] CloseHandle (hObject=0x1b4) returned 1
	[0064.421] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms")) returned 1
	[0064.428] SetEvent (hEvent=0x144) returned 1
	[0064.428] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0064.428] GetFileSizeEx (in: hFile=0x1b4, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=27532288) returned 1
	[0064.428] CloseHandle (hObject=0x1b4) returned 1
	[0064.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi")) returned 0x2020
	[0064.429] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0064.429] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b4
	[0064.429] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0064.429] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0064.429] ReadFile (in: hFile=0x1b4, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0064.435] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x8c0955, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0064.435] ReadFile (in: hFile=0x1b4, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0064.440] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1a01c00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0064.440] ReadFile (in: hFile=0x1b4, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0064.452] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0064.452] WriteFile (in: hFile=0x1b4, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0064.478] SetEndOfFile (hFile=0x1b4) returned 1
	[0064.478] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1a01c00, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0064.478] WriteFile (in: hFile=0x1b4, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0064.481] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x8c0955, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0064.481] WriteFile (in: hFile=0x1b4, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0064.484] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0064.484] WriteFile (in: hFile=0x1b4, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0064.485] FlushFileBuffers (hFile=0x1b4) returned 1
	[0064.886] CloseHandle (hObject=0x1b4) returned 1
	[0064.886] SetEvent (hEvent=0x144) returned 1
	[0064.886] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0064.899] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=222948913) returned 1
	[0064.899] CloseHandle (hObject=0x230) returned 1
	[0064.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab")) returned 0x2020
	[0064.899] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0064.900] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0064.900] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0064.900] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0064.900] ReadFile (in: hFile=0x230, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0064.906] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x46dfa10, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0064.907] ReadFile (in: hFile=0x230, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0064.911] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0xd45ee31, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0064.911] ReadFile (in: hFile=0x230, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0064.924] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0064.924] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0064.994] SetEndOfFile (hFile=0x230) returned 1
	[0064.994] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0xd45ee31, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0064.994] WriteFile (in: hFile=0x230, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0065.043] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x46dfa10, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0065.043] WriteFile (in: hFile=0x230, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0065.046] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0065.046] WriteFile (in: hFile=0x230, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0065.047] FlushFileBuffers (hFile=0x230) returned 1
	[0065.403] CloseHandle (hObject=0x230) returned 1
	[0065.403] SetEvent (hEvent=0x144) returned 1
	[0065.403] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0065.404] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=31094) returned 1
	[0065.404] CloseHandle (hObject=0x230) returned 1
	[0065.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0065.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 0x2020
	[0065.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0065.404] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0065.404] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0065.404] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0065.404] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0065.404] ReadFile (in: hFile=0x230, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x7976, lpOverlapped=0x0) returned 1
	[0065.491] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x7980, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x7980, lpOverlapped=0x0) returned 1
	[0065.493] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0065.493] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0065.493] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0065.493] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x7976, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x7976, lpOverlapped=0x0) returned 1
	[0065.493] FlushFileBuffers (hFile=0x230) returned 1
	[0065.495] FlushFileBuffers (hFile=0x1ac) returned 1
	[0065.498] CloseHandle (hObject=0x230) returned 1
	[0065.498] CloseHandle (hObject=0x1ac) returned 1
	[0065.498] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1
	[0065.499] SetEvent (hEvent=0x144) returned 1
	[0065.499] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0065.501] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=1992192) returned 1
	[0065.501] CloseHandle (hObject=0x1ac) returned 1
	[0065.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi")) returned 0x2020
	[0065.501] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0065.501] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0065.501] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0065.501] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0065.502] ReadFile (in: hFile=0x1ac, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0065.506] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0065.506] ReadFile (in: hFile=0x1ac, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0065.509] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0065.509] ReadFile (in: hFile=0x1ac, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0065.521] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0065.521] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0112, lpOverlapped=0x0) returned 1
	[0065.548] SetEndOfFile (hFile=0x1ac) returned 1
	[0065.548] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x1a6600, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0065.548] WriteFile (in: hFile=0x1ac, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0065.550] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0xa2200, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0065.550] WriteFile (in: hFile=0x1ac, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0065.552] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0065.552] WriteFile (in: hFile=0x1ac, lpBuffer=0x3af014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af014a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0065.554] FlushFileBuffers (hFile=0x1ac) returned 1
	[0065.576] CloseHandle (hObject=0x1ac) returned 1
	[0065.576] SetEvent (hEvent=0x144) returned 1
	[0065.576] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0065.577] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=4274) returned 1
	[0065.577] CloseHandle (hObject=0x1ac) returned 1
	[0065.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020
	[0065.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 0x2020
	[0065.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0065.577] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0065.577] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0065.577] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0065.577] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0065.577] ReadFile (in: hFile=0x1ac, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x10b2, lpOverlapped=0x0) returned 1
	[0065.581] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x10c0, lpOverlapped=0x0) returned 1
	[0065.581] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xf2, lpOverlapped=0x0) returned 1
	[0065.582] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0065.582] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0065.582] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x10b2, lpOverlapped=0x0) returned 1
	[0065.582] FlushFileBuffers (hFile=0x1ac) returned 1
	[0065.585] FlushFileBuffers (hFile=0x230) returned 1
	[0065.586] CloseHandle (hObject=0x1ac) returned 1
	[0065.586] CloseHandle (hObject=0x230) returned 1
	[0065.586] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1
	[0065.587] SetEvent (hEvent=0x144) returned 1
	[0065.588] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0065.588] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=174440) returned 1
	[0065.588] CloseHandle (hObject=0x230) returned 1
	[0065.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 0x2020
	[0065.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 0x2020
	[0065.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0065.588] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0065.588] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0065.588] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0065.588] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1ac
	[0065.589] ReadFile (in: hFile=0x230, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x2a968, lpOverlapped=0x0) returned 1
	[0065.592] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x2a970, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0x2a970, lpOverlapped=0x0) returned 1
	[0065.596] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x35bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b4*=0xe2, lpOverlapped=0x0) returned 1
	[0065.596] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0065.596] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf728 | out: lpNewFilePointer=0x0) returned 1
	[0065.596] WriteFile (in: hFile=0x230, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0x2a968, lpNumberOfBytesWritten=0x35bf734, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf734*=0x2a968, lpOverlapped=0x0) returned 1
	[0065.596] FlushFileBuffers (hFile=0x230) returned 1
	[0065.600] FlushFileBuffers (hFile=0x1ac) returned 1
	[0065.602] CloseHandle (hObject=0x230) returned 1
	[0065.602] CloseHandle (hObject=0x1ac) returned 1
	[0065.602] DeleteFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe")) returned 1
	[0065.604] SetEvent (hEvent=0x144) returned 1
	[0065.604] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0065.604] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=7378792) returned 1
	[0065.604] CloseHandle (hObject=0x1ac) returned 1
	[0065.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll")) returned 0x2020
	[0065.605] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0065.605] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0065.605] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0065.605] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0065.605] ReadFile (in: hFile=0x1ac, lpBuffer=0x3a30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a30058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0065.610] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0065.610] ReadFile (in: hFile=0x1ac, lpBuffer=0x3a70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3a70058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0065.613] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x35bf850 | out: lpNewFilePointer=0x0) returned 1
	[0065.613] ReadFile (in: hFile=0x1ac, lpBuffer=0x3ab0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bf85c, lpOverlapped=0x0 | out: lpBuffer=0x3ab0058*, lpNumberOfBytesRead=0x35bf85c*=0x40000, lpOverlapped=0x0) returned 1
	[0065.633] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c0 | out: lpNewFilePointer=0x0) returned 1
	[0065.633] WriteFile (in: hFile=0x1ac, lpBuffer=0x3a30020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x35bf9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesWritten=0x35bf9b8*=0xc0102, lpOverlapped=0x0) returned 1
	[0065.646] SetEndOfFile (hFile=0x1ac) returned 1
	[0065.646] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x6c9768, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0065.646] WriteFile (in: hFile=0x1ac, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0065.648] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x2587cd, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0065.648] WriteFile (in: hFile=0x1ac, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0065.650] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf858 | out: lpNewFilePointer=0x0) returned 1
	[0065.650] WriteFile (in: hFile=0x1ac, lpBuffer=0x3af013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bf864, lpOverlapped=0x0 | out: lpBuffer=0x3af013a*, lpNumberOfBytesWritten=0x35bf864*=0x40000, lpOverlapped=0x0) returned 1
	[0065.654] FlushFileBuffers (hFile=0x1ac) returned 1
	[0065.732] CloseHandle (hObject=0x1ac) returned 1
	[0065.732] SetEvent (hEvent=0x144) returned 1
	[0065.732] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0065.733] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x35bfa00 | out: lpFileSize=0x35bfa00*=1463568) returned 1
	[0065.733] CloseHandle (hObject=0x1ac) returned 1
	[0065.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 0x2020
	[0065.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll")) returned 0x2020
	[0065.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0065.733] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0065.733] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0065.733] SetFilePointerEx (in: hFile=0x1ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bf9c8 | out: lpNewFilePointer=0x0) returned 1
	[0065.733] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0065.733] ReadFile (in: hFile=0x1ac, lpBuffer=0x3a30020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x3a30020*, lpNumberOfBytesRead=0x35bf9dc*=0x110100, lpOverlapped=0x0) returned 1

Thread:
	id = 16
	os_tid = 0xa48

	[0044.546] GetProcessHeap () returned 0x440000
	[0044.546] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37610b0
	[0044.546] GetProcessHeap () returned 0x440000
	[0044.546] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x10000) returned 0x37710b8
	[0044.547] GetProcessHeap () returned 0x440000
	[0044.547] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x28) returned 0x37810d8
	[0044.547] GetProcessHeap () returned 0x440000
	[0044.547] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x110102) returned 0x3b50020
	[0044.547] GetProcessHeap () returned 0x440000
	[0044.547] RtlAllocateHeap (HeapHandle=0x440000, Flags=0x0, Size=0x50) returned 0x463610
	[0044.547] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76c20000
	[0044.547] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x76c4d650
	[0044.547] Wow64DisableWow64FsRedirection (in: OldValue=0x36efab8 | out: OldValue=0x36efab8*=0x0) returned 1
	[0044.547] GetProcessHeap () returned 0x440000
	[0044.547] HeapFree (in: hHeap=0x440000, dwFlags=0x0, lpMem=0x463610 | out: hHeap=0x440000) returned 1
	[0044.547] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.547] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.548] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.549] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.550] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.551] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.552] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.553] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.554] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.555] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.556] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.557] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.558] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.559] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.559] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.559] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.559] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.559] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.559] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.559] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.559] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.559] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.559] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.559] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.559] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.560] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.561] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.562] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.563] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.564] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.565] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.565] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.565] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.565] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.565] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.565] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.565] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.565] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.565] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.565] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0044.565] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) returned 0x0
	[0056.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0056.719] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x36efa60 | out: lpFileSize=0x36efa60*=2113536) returned 1
	[0056.719] CloseHandle (hObject=0x194) returned 1
	[0056.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde")) returned 0x20
	[0056.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde")) returned 0x20
	[0056.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0056.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0056.719] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36efa28 | out: lpNewFilePointer=0x0) returned 1
	[0056.719] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36efa28 | out: lpNewFilePointer=0x0) returned 1
	[0056.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x210
	[0056.829] ReadFile (in: hFile=0x194, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0x110100, lpOverlapped=0x0) returned 1
	[0056.872] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0x110100, lpOverlapped=0x0) returned 1
	[0056.892] ReadFile (in: hFile=0x194, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0xf3f00, lpOverlapped=0x0) returned 1
	[0056.911] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0xf3f10, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0xf3f10, lpOverlapped=0x0) returned 1
	[0056.979] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0xf2, lpOverlapped=0x0) returned 1
	[0056.979] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ef788 | out: lpNewFilePointer=0x0) returned 1
	[0056.979] SetFilePointerEx (in: hFile=0x194, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ef788 | out: lpNewFilePointer=0x0) returned 1
	[0056.979] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0x110102, lpOverlapped=0x0) returned 1
	[0056.993] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0xf3efe, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0xf3efe, lpOverlapped=0x0) returned 1
	[0057.005] FlushFileBuffers (hFile=0x194) returned 1
	[0057.647] FlushFileBuffers (hFile=0x210) returned 1
	[0057.898] CloseHandle (hObject=0x194) returned 1
	[0058.100] CloseHandle (hObject=0x210) returned 1
	[0058.245] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzlib.accde")) returned 1
	[0058.247] ResetEvent (hEvent=0x158) returned 1
	[0058.247] SetEvent (hEvent=0x15c) returned 1
	[0058.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0058.247] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x36efa60 | out: lpFileSize=0x36efa60*=11767808) returned 1
	[0058.247] CloseHandle (hObject=0x210) returned 1
	[0058.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde")) returned 0x20
	[0058.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde")) returned 0x20
	[0058.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0058.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0058.248] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36efa28 | out: lpNewFilePointer=0x0) returned 1
	[0058.248] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36efa28 | out: lpNewFilePointer=0x0) returned 1
	[0058.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x194
	[0058.248] ReadFile (in: hFile=0x210, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0x110100, lpOverlapped=0x0) returned 1
	[0058.293] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0x110100, lpOverlapped=0x0) returned 1
	[0058.316] ReadFile (in: hFile=0x210, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0x110100, lpOverlapped=0x0) returned 1
	[0058.350] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0x110100, lpOverlapped=0x0) returned 1
	[0058.424] ReadFile (in: hFile=0x210, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0x110100, lpOverlapped=0x0) returned 1
	[0058.463] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0x110100, lpOverlapped=0x0) returned 1
	[0058.536] ReadFile (in: hFile=0x210, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0x110100, lpOverlapped=0x0) returned 1
	[0058.578] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0x110100, lpOverlapped=0x0) returned 1
	[0058.657] ReadFile (in: hFile=0x210, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0x110100, lpOverlapped=0x0) returned 1
	[0058.805] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0x110100, lpOverlapped=0x0) returned 1
	[0058.826] ReadFile (in: hFile=0x210, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0x110100, lpOverlapped=0x0) returned 1
	[0058.946] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0x110100, lpOverlapped=0x0) returned 1
	[0058.968] ReadFile (in: hFile=0x210, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0x110100, lpOverlapped=0x0) returned 1
	[0059.099] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0x110100, lpOverlapped=0x0) returned 1
	[0059.127] ReadFile (in: hFile=0x210, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0x110100, lpOverlapped=0x0) returned 1
	[0059.253] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0x110100, lpOverlapped=0x0) returned 1
	[0059.276] ReadFile (in: hFile=0x210, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0x110100, lpOverlapped=0x0) returned 1
	[0059.349] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0x110100, lpOverlapped=0x0) returned 1
	[0059.518] ReadFile (in: hFile=0x210, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0x110100, lpOverlapped=0x0) returned 1
	[0059.540] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0x110100, lpOverlapped=0x0) returned 1
	[0059.722] ReadFile (in: hFile=0x210, lpBuffer=0x3b50020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36efa3c, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesRead=0x36efa3c*=0x98600, lpOverlapped=0x0) returned 1
	[0059.737] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x98610, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0x98610, lpOverlapped=0x0) returned 1
	[0059.750] WriteFile (in: hFile=0x194, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36efa14, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36efa14*=0xf2, lpOverlapped=0x0) returned 1
	[0059.750] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ef788 | out: lpNewFilePointer=0x0) returned 1
	[0059.750] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ef788 | out: lpNewFilePointer=0x0) returned 1
	[0059.750] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0x110102, lpOverlapped=0x0) returned 1
	[0059.832] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0x110102, lpOverlapped=0x0) returned 1
	[0059.845] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0x110102, lpOverlapped=0x0) returned 1
	[0059.857] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0x110102, lpOverlapped=0x0) returned 1
	[0059.924] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0x110102, lpOverlapped=0x0) returned 1
	[0059.937] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0x110102, lpOverlapped=0x0) returned 1
	[0059.950] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0x110102, lpOverlapped=0x0) returned 1
	[0060.012] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0x110102, lpOverlapped=0x0) returned 1
	[0060.025] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0x110102, lpOverlapped=0x0) returned 1
	[0060.043] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0x110102, lpOverlapped=0x0) returned 1
	[0060.078] WriteFile (in: hFile=0x210, lpBuffer=0x3b50020*, nNumberOfBytesToWrite=0x985ec, lpNumberOfBytesWritten=0x36ef794, lpOverlapped=0x0 | out: lpBuffer=0x3b50020*, lpNumberOfBytesWritten=0x36ef794*=0x985ec, lpOverlapped=0x0) returned 1
	[0060.087] FlushFileBuffers (hFile=0x210) returned 1
	[0061.380] FlushFileBuffers (hFile=0x194) returned 1
	[0062.129] CloseHandle (hObject=0x210) returned 1
	[0062.129] CloseHandle (hObject=0x194) returned 1
	[0062.129] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwztool.accde")) returned 1
	[0062.132] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0xffffffff) 

Thread:
	id = 17
	os_tid = 0xa4c


Thread:
	id = 26
	os_tid = 0xabc


Process:
	id = "3"
	image_name = "rsfd234df.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe"
	page_root = "0x10acb000"
	os_pid = "0xa18"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0xa08"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\""
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 5
	os_tid = 0xa1c

	[0038.866] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x36f860 | out: lpSystemTimeAsFileTime=0x36f860*(dwLowDateTime=0xf7f4d3d0, dwHighDateTime=0x1d57293)) 
	[0038.866] GetCurrentThreadId () returned 0xa1c
	[0038.866] GetCurrentProcessId () returned 0xa18
	[0038.866] QueryPerformanceCounter (in: lpPerformanceCount=0x36f858 | out: lpPerformanceCount=0x36f858*=15915498363) returned 1
	[0038.872] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0038.872] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0038.872] GetLastError () returned 0x57
	[0038.873] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x74650000
	[0038.874] GetProcAddress (hModule=0x74650000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0038.874] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0038.874] GetLastError () returned 0x57
	[0038.874] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0038.875] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0038.875] GetLastError () returned 0x57
	[0038.875] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000
	[0038.875] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b
	[0038.875] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208
	[0038.875] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0038.875] GetLastError () returned 0x57
	[0038.875] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x74650000
	[0038.875] GetProcAddress (hModule=0x74650000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0038.876] GetProcessHeap () returned 0xf0000
	[0038.876] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0038.876] GetLastError () returned 0x57
	[0038.876] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0038.876] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0038.876] GetLastError () returned 0x57
	[0038.876] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000
	[0038.876] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b
	[0038.876] GetLastError () returned 0x57
	[0038.876] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252
	[0038.876] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x364) returned 0x1082c8
	[0038.876] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208
	[0038.877] SetLastError (dwErrCode=0x57) 
	[0038.877] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0xc00) returned 0x108638
	[0038.878] GetStartupInfoW (in: lpStartupInfo=0x36f788 | out: lpStartupInfo=0x36f788*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xfa8da0, hStdOutput=0x424ff09f, hStdError=0xfffffffe)) 
	[0038.878] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0038.878] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0038.878] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0038.878] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\""
	[0038.878] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\""
	[0038.878] GetLastError () returned 0x57
	[0038.878] SetLastError (dwErrCode=0x57) 
	[0038.878] GetLastError () returned 0x57
	[0038.878] SetLastError (dwErrCode=0x57) 
	[0038.878] GetACP () returned 0x4e4
	[0038.878] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x0, Size=0x220) returned 0x107f80
	[0038.878] IsValidCodePage (CodePage=0x4e4) returned 1
	[0038.878] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x36f7b8 | out: lpCPInfo=0x36f7b8) returned 1
	[0038.878] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x36f080 | out: lpCPInfo=0x36f080) returned 1
	[0038.878] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x36f694, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0038.878] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x36f694, cbMultiByte=256, lpWideCharStr=0x36ee18, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0038.878] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x36f094 | out: lpCharType=0x36f094) returned 1
	[0038.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x36f694, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0038.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x36f694, cbMultiByte=256, lpWideCharStr=0x36edc8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0038.879] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0038.879] GetLastError () returned 0x57
	[0038.879] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0038.879] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1
	[0038.879] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0038.879] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x36ebb8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0038.879] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x36f594, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÏ\x95\x82BÐ÷6", lpUsedDefaultChar=0x0) returned 256
	[0038.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x36f694, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0038.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x36f694, cbMultiByte=256, lpWideCharStr=0x36ede8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0038.879] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0038.879] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x36ebd8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
	[0038.879] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x36f494, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÏ\x95\x82BÐ÷6", lpUsedDefaultChar=0x0) returned 256
	[0038.879] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x0, Size=0x80) returned 0x1081a8
	[0038.879] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xfbc2a0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0038.879] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x70) returned 0x10a240
	[0038.879] RtlInitializeSListHead (in: ListHead=0xfbbe98 | out: ListHead=0xfbbe98) 
	[0038.880] GetLastError () returned 0x0
	[0038.880] SetLastError (dwErrCode=0x0) 
	[0038.880] GetEnvironmentStringsW () returned 0x10a2b8*
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x0, Size=0xaca) returned 0x10ad90
	[0038.880] FreeEnvironmentStringsW (penv=0x10a2b8) returned 1
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x98) returned 0x10b868
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x3e) returned 0x1061d0
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x6c) returned 0x10b908
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x6e) returned 0x10b980
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x78) returned 0xff388
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x62) returned 0x10b9f8
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x2e) returned 0x10ba68
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x48) returned 0x10baa0
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x28) returned 0x10baf0
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x1a) returned 0x109c10
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x4a) returned 0x10bb20
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x72) returned 0xff408
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x30) returned 0x10bb78
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x2e) returned 0x10bbb0
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x1c) returned 0x109c38
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0xd2) returned 0x10bbe8
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x7c) returned 0x10bcc8
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x36) returned 0x10bd50
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x3a) returned 0x106218
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x90) returned 0x10bd90
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x24) returned 0x10be28
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x30) returned 0x10be58
	[0038.880] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x36) returned 0x10be90
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x48) returned 0x10bed0
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x52) returned 0x10bf20
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x3c) returned 0x106260
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x82) returned 0x10a2b8
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x2e) returned 0x10bf80
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x1e) returned 0x109c60
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x2c) returned 0x10a348
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x54) returned 0x10a380
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x52) returned 0x10a3e0
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x2a) returned 0x10a440
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x3c) returned 0x1062a8
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x54) returned 0x10a478
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x24) returned 0x10bfb8
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x30) returned 0x10a4d8
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x8c) returned 0x10a510
	[0038.881] HeapFree (in: hHeap=0xf0000, dwFlags=0x0, lpMem=0x10ad90 | out: hHeap=0xf0000) returned 1
	[0038.881] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x8, Size=0x800) returned 0x10a5a8
	[0038.881] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0038.881] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xfa897a) returned 0x0
	[0038.881] GetStartupInfoW (in: lpStartupInfo=0x36f7f0 | out: lpStartupInfo=0x36f7f0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0038.882] RtlAllocateHeap (HeapHandle=0xf0000, Flags=0x0, Size=0xc74c9b0) returned 0x23d0020
	[0040.782] HeapFree (in: hHeap=0xf0000, dwFlags=0x0, lpMem=0x23d0020 | out: hHeap=0xf0000) returned 1
	[0041.662] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.663] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.663] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xa8
	[0041.664] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa8
	[0041.669] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.669] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.670] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.670] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.670] Process32First (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0041.671] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.671] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.671] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.671] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.672] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0041.672] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.672] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.672] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.673] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.673] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0041.673] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.673] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.674] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.674] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.674] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0041.674] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.674] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.674] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.675] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.675] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0041.675] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.675] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.675] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.676] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.676] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0041.676] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.676] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.676] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.677] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.677] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0041.677] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.677] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.677] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.678] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.678] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0041.678] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.678] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.678] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.679] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.679] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0041.679] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.679] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.679] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.680] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.680] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0041.680] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.680] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.680] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.681] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.681] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.681] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.681] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.681] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.682] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.682] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.682] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.682] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.682] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.682] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.683] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.683] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.683] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.683] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.683] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.684] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.684] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.684] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.684] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.684] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.684] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.685] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.685] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.685] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.685] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.685] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0041.686] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.686] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.686] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.686] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.686] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.687] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.687] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.687] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.687] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.687] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.688] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.688] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.688] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.688] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.688] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0041.689] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.689] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.690] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.690] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.690] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0041.690] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.690] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.691] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.691] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.691] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0041.691] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.691] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.691] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.692] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.692] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0041.692] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.692] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.692] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.693] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.693] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.693] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.693] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.693] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.694] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.694] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0041.694] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.694] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.694] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.695] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.695] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0041.695] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.695] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.695] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.696] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.696] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0041.696] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.696] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.696] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.697] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.697] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0041.697] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.697] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.697] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.697] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.698] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0041.698] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.698] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.698] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.698] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.699] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0041.699] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.699] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.699] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.699] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.699] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0041.700] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.700] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.700] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.700] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.700] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0041.701] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.701] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.701] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.701] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.701] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0041.702] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.702] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.702] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.702] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.702] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0041.703] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.703] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.703] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.703] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.703] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0041.704] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.704] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.704] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.704] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.704] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0041.705] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.705] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.705] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.705] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.705] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0041.706] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.706] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.706] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.706] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.706] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0041.707] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.707] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.707] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.707] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.707] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0041.708] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.708] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.708] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.708] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.708] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0041.709] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.709] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.709] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.709] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.709] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0041.709] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.710] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.710] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.710] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.710] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0041.710] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.711] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.711] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.711] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.711] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0041.711] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.712] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.712] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.712] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.712] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0041.712] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.713] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.713] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.713] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.713] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0041.713] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.714] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.714] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.714] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.714] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0041.714] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.714] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.715] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.715] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.715] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0041.715] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.715] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.716] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.716] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.716] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0041.716] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.716] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.716] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.717] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0041.717] Process32Next (in: hSnapshot=0xa8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x369530, pcPriClassBase=1042832, dwFlags=0xfe9cc, szExeFile="???6???6?\x0f???6?6")) returned 0
	[0041.718] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.718] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.718] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.718] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xac
	[0041.718] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xac
	[0041.720] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.720] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.720] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.721] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.721] Process32First (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0041.721] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.722] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.722] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.722] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.722] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0041.723] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.723] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.723] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.723] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.723] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0041.724] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.724] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.724] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.724] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.724] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0041.725] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.725] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.725] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.725] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.725] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0041.726] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.726] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.726] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.726] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.726] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0041.727] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.727] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.727] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.727] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.727] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0041.728] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.728] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.728] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.728] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.728] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0041.729] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.729] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.729] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.729] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.729] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0041.730] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.730] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.730] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.730] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.730] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0041.731] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.731] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.731] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.731] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.731] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.731] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.732] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.732] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.732] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.732] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.732] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.733] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.733] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.733] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.733] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.733] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.734] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.734] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.734] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.734] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.734] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.734] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.735] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.735] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.735] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.735] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.735] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.736] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.736] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.736] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0041.736] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.736] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.737] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.737] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.737] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.737] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.737] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.737] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.738] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.738] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.738] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.738] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.738] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.739] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.739] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0041.739] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.739] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.739] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.740] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.740] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0041.740] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.740] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.740] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.741] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.741] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0041.741] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.741] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.741] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.742] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.742] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0041.742] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.742] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.742] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.742] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.743] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.743] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.743] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.743] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.743] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.743] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0041.744] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.744] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.744] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.744] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.744] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0041.745] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.745] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.745] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.745] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.745] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0041.746] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.746] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.746] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.746] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.746] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0041.747] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.747] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.747] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.747] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.747] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0041.748] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.748] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.748] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.748] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.748] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0041.749] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.749] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.749] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.749] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.749] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0041.750] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.750] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.750] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.750] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.750] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0041.751] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.751] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.751] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.751] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.751] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0041.752] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.752] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.752] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.752] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.752] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0041.753] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.753] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.753] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.753] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.753] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0041.754] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.754] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.754] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.754] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.754] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0041.755] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.755] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.755] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.755] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.755] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0041.756] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.756] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.756] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.756] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.756] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0041.757] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.757] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.757] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.757] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.757] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0041.758] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.758] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.758] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.758] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.758] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0041.759] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.759] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.759] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.759] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.759] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0041.760] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.760] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.760] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.760] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.760] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0041.761] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.761] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.761] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.761] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.761] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0041.761] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.762] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.762] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.762] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.762] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0041.762] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.763] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.763] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.763] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.763] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0041.763] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.764] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.764] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.764] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.764] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0041.764] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.764] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.765] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.765] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.765] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0041.765] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.765] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.766] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.766] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.766] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0041.766] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.766] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.767] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000
	[0041.767] CallWindowProcW (lpPrevWndFunc=0x1f0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0041.767] Process32Next (in: hSnapshot=0xac, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x369530, pcPriClassBase=1042832, dwFlags=0xfe9cc, szExeFile="???6???6?\x0f???6?6")) returned 0
	[0041.767] VirtualFree (lpAddress=0x1f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.770] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0041.770] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0x1f0000
	[0041.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2, flAllocationType=0x3000, flProtect=0x4) returned 0x200000
	[0041.771] VirtualAlloc (lpAddress=0x0, dwSize=0x5, flAllocationType=0x3000, flProtect=0x4) returned 0x210000
	[0041.771] VirtualAlloc (lpAddress=0x0, dwSize=0xd, flAllocationType=0x3000, flProtect=0x4) returned 0x260000
	[0041.771] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x3e0000
	[0041.771] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x3f0000
	[0041.771] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x400000
	[0041.771] VirtualAlloc (lpAddress=0x0, dwSize=0x3c, flAllocationType=0x3000, flProtect=0x4) returned 0x410000
	[0041.771] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x4b0000
	[0041.771] VirtualAlloc (lpAddress=0x0, dwSize=0xd200, flAllocationType=0x3000, flProtect=0x4) returned 0x4c0000
	[0041.772] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x36966c, nSize=0x103 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0041.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0041.772] GetFileSize (in: hFile=0xb0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x49c53
	[0041.772] VirtualAlloc (lpAddress=0x0, dwSize=0x49c53, flAllocationType=0x3000, flProtect=0x4) returned 0x4d0000
	[0041.772] ReadFile (in: hFile=0xb0, lpBuffer=0x4d0000, nNumberOfBytesToRead=0x49c53, lpNumberOfBytesRead=0x369a84, lpOverlapped=0x0 | out: lpBuffer=0x4d0000*, lpNumberOfBytesRead=0x369a84*=0x49c53, lpOverlapped=0x0) returned 1
	[0041.779] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0x520000
	[0041.781] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.781] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x6
	[0041.782] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x210000, cbMultiByte=-1, lpWideCharStr=0x369fd4, cchWideChar=50 | out: lpWideCharStr="ymgyr") returned 6
	[0041.782] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.782] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.782] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xe
	[0041.783] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x260000, cbMultiByte=-1, lpWideCharStr=0x36a038, cchWideChar=50 | out: lpWideCharStr="bpomwdckuqiso") returned 14
	[0041.783] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.783] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.783] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.783] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb4
	[0041.784] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb4
	[0041.785] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.786] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.786] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.786] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.786] Process32First (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0041.787] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.787] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.787] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.787] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.788] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0041.788] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.788] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.789] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.789] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.789] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0041.789] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.789] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.790] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.790] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.790] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0041.790] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.791] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.791] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.791] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.791] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0041.791] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.791] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.792] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.792] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.792] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0041.792] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.793] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.793] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.793] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.793] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0041.793] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.794] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.794] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.794] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.794] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0041.794] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.794] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.795] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.795] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.795] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0041.795] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.795] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.796] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.796] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.796] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0041.796] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.796] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.797] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.797] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.797] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.797] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.797] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.813] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.814] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.814] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.814] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.814] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.814] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.815] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.815] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.815] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.815] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.815] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.816] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.816] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.816] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.816] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.816] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.817] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.817] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.817] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.817] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.817] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.818] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.818] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0041.818] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.818] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.818] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.819] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.819] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.819] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.819] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.819] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.820] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.820] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.820] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.820] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.820] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.821] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.821] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0041.821] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.821] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.821] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.822] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.822] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0041.822] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.822] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.822] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.823] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.823] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0041.823] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.823] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.823] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.824] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.824] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0041.824] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.824] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.824] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.825] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.825] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.825] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.825] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.825] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.826] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.826] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0041.826] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.826] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.826] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.827] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.827] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0041.827] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.827] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.827] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.828] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.828] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0041.828] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.828] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.828] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.829] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.829] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0041.829] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.830] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.830] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.830] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.830] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0041.830] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.831] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.831] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.831] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.831] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0041.831] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.832] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.832] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.832] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.832] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0041.832] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.833] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.833] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.833] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.833] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0041.833] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.834] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.834] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.834] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.834] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0041.834] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.835] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.835] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.835] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.835] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0041.835] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.836] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.836] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.836] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.836] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0041.836] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.837] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.837] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.837] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.837] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0041.837] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.838] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.838] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.838] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.838] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0041.838] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.839] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.839] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.839] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.839] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0041.839] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.840] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.840] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.840] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.840] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0041.840] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.841] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.841] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.841] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.841] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0041.841] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.842] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.842] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.842] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.842] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0041.842] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.843] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.843] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.843] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.843] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0041.843] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.844] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.844] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.844] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.844] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0041.845] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.845] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.845] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.845] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.845] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0041.846] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.846] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.846] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.846] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.846] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0041.847] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.847] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.847] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.847] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.847] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0041.848] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.848] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.848] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.848] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.848] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0041.849] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.849] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.849] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.849] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.849] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0041.850] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.850] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.850] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.850] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0041.850] Process32Next (in: hSnapshot=0xb4, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x369530, pcPriClassBase=1042832, dwFlags=0xfe9cc, szExeFile="???6???6?\x0f???6?6")) returned 0
	[0041.850] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.851] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.851] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.851] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb8
	[0041.851] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb8
	[0041.853] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.853] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.853] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.853] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.854] Process32First (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0041.855] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.855] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.855] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.855] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.856] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0041.856] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.856] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.856] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.857] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.857] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0041.857] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.857] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.857] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.858] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.858] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0041.858] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.858] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.858] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.859] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.859] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0041.859] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.859] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.859] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.859] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.860] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0041.860] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.860] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.860] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.861] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.861] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0041.861] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.861] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.861] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.862] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.862] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0041.862] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.862] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.862] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.863] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.863] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0041.863] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.863] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.863] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.864] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.864] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0041.864] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.864] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.864] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.865] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.865] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.865] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.865] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.865] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.866] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.866] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.866] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.866] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.866] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.867] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.867] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.867] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.867] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.867] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.868] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.868] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.868] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.868] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.868] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.869] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.869] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.869] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.869] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.869] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.870] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.870] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0041.870] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.870] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.870] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.871] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.871] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.871] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.871] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.871] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.872] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.872] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.872] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.872] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.872] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.873] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.873] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0041.873] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.873] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.873] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.874] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.874] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x45c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x440, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0041.874] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.874] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.874] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.875] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.875] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0041.875] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.875] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.875] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.876] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.876] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0041.876] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.876] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.877] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.877] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.877] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0041.877] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.877] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.878] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.878] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.878] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
	[0041.878] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.878] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.879] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.879] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.879] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0041.879] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.879] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.880] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.880] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.880] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x788, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="in-abstracts.exe")) returned 1
	[0041.880] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.880] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.881] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.881] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.881] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="convenient-distance-tramadol.exe")) returned 1
	[0041.881] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.881] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.882] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.882] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.882] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="tray.exe")) returned 1
	[0041.882] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.882] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.883] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.883] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.883] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spare-mg.exe")) returned 1
	[0041.883] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.883] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.883] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.884] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.884] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="purple-extending.exe")) returned 1
	[0041.884] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.884] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.884] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.885] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.885] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x240, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="finland_biz.exe")) returned 1
	[0041.885] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.885] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.885] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.886] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.886] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="toe-solely.exe")) returned 1
	[0041.886] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.886] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.886] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.887] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.887] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="coordinates.exe")) returned 1
	[0041.887] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.887] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.887] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.888] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.888] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x320, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="assured blacks won.exe")) returned 1
	[0041.888] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.888] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.888] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.889] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.889] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="boost.exe")) returned 1
	[0041.889] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.889] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.889] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.890] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.890] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="societies.exe")) returned 1
	[0041.890] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.890] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.890] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.891] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.891] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x774, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="defense navigation.exe")) returned 1
	[0041.891] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.892] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.892] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.892] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.892] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="nationslynnship.exe")) returned 1
	[0041.892] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.893] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.893] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.893] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.893] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="hopes_thousands_wishing.exe")) returned 1
	[0041.893] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.894] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.894] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.894] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.894] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lastingquit.exe")) returned 1
	[0041.894] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.895] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.895] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.895] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.895] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="golden-issn.exe")) returned 1
	[0041.895] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.896] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.896] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.896] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.896] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="pool therapeutic ebony.exe")) returned 1
	[0041.896] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.897] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.897] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.897] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.897] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="close.exe")) returned 1
	[0041.897] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.898] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.898] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.898] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.898] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x45c, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveys.exe")) returned 1
	[0041.898] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.898] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.899] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.899] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.899] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x694, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0041.899] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.899] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.900] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.900] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.900] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x970, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0041.900] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.900] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.901] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.901] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0041.901] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0041.901] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.901] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.902] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.902] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0041.902] Process32Next (in: hSnapshot=0xb8, lppe=0x3698dc | out: lppe=0x3698dc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x369530, pcPriClassBase=1042832, dwFlags=0xfe9cc, szExeFile="???6???6?\x0f???6?6")) returned 0
	[0041.902] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0041.902] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0041.903] VirtualAlloc (lpAddress=0x0, dwSize=0x16, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0041.903] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0041.903] Sleep (dwMilliseconds=0x1388) 
	[0047.321] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.321] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x369b3c, nSize=0x103 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0047.321] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0047.321] VirtualAlloc (lpAddress=0x0, dwSize=0x25, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0047.322] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x540000
	[0047.322] VirtualAlloc (lpAddress=0x0, dwSize=0x410, flAllocationType=0x3000, flProtect=0x4) returned 0x540000
	[0047.323] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.323] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\""
	[0047.323] CreateProcessW (in: lpApplicationName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe", lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x3699d8*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x369a70 | out: lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\"", lpProcessInformation=0x369a70*(hProcess=0xc0, hThread=0xbc, dwProcessId=0xa50, dwThreadId=0xa54)) returned 1
	[0047.333] GetThreadContext (in: hThread=0xbc, lpContext=0x36970c | out: lpContext=0x36970c*(ContextFlags=0x10007, Dr0=0x7715fa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x369a94, FloatSave.ErrorSelector=0x3698cc, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x80, [37]=0x97, [38]=0x36, [39]=0x0, [40]=0x90, [41]=0xe9, [42]=0xf, [43]=0x0, [44]=0xcc, [45]=0xe9, [46]=0xf, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0x23, [51]=0x77, [52]=0x98, [53]=0x97, [54]=0x36, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0x15, [59]=0x77, [60]=0xa8, [61]=0x9a, [62]=0x36, [63]=0x0, [64]=0xbc, [65]=0xe9, [66]=0xf, [67]=0x0, [68]=0x4, [69]=0x4d, [70]=0xd9, [71]=0xff, [72]=0xcc, [73]=0x98, [74]=0x36, [75]=0x0, [76]=0x2c, [77]=0x9a, [78]=0x36, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xfa8432, Ebp=0x0, Eip=0x771401c4, SegCs=0x23, EFlags=0x202, Esp=0x37fd38, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x53, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0x14, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x96, [39]=0x75, [40]=0x48, [41]=0x9a, [42]=0x36, [43]=0x0, [44]=0x30, [45]=0x98, [46]=0x36, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x78, [53]=0x9a, [54]=0x36, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0x15, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x36, [67]=0x0, [68]=0x64, [69]=0x9a, [70]=0x36, [71]=0x0, [72]=0x4c, [73]=0x98, [74]=0x36, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x94, [81]=0x9a, [82]=0x36, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0x15, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0xc8, [93]=0x98, [94]=0x36, [95]=0x0, [96]=0x24, [97]=0x12, [98]=0x14, [99]=0x77, [100]=0x7c, [101]=0x98, [102]=0x36, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0x15, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x64, [113]=0x9a, [114]=0x36, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0x15, [119]=0x77, [120]=0xcc, [121]=0x98, [122]=0x36, [123]=0x0, [124]=0xc0, [125]=0x98, [126]=0x36, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0xac, [145]=0x97, [146]=0x36, [147]=0x0, [148]=0x64, [149]=0x9a, [150]=0x36, [151]=0x0, [152]=0xf0, [153]=0x99, [154]=0x36, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0x1a, [159]=0x77, [160]=0x40, [161]=0x37, [162]=0x37, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0x16, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x94, [181]=0x9a, [182]=0x36, [183]=0x0, [184]=0x0, [185]=0x9a, [186]=0x36, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0x16, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0x15, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0x16, [199]=0x77, [200]=0x18, [201]=0x10, [202]=0x14, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0x15, [215]=0x77, [216]=0x48, [217]=0x9a, [218]=0x36, [219]=0x0, [220]=0x78, [221]=0x9a, [222]=0x36, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x98, [230]=0x36, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x2c, [241]=0x9a, [242]=0x36, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0x94, [249]=0x9a, [250]=0x36, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0xcc, [257]=0x98, [258]=0x36, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x90, [265]=0xe9, [266]=0xf, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0x14, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x97, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x97, [295]=0x75, [296]=0xfa, [297]=0x5d, [298]=0x53, [299]=0x42, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x53, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0x14, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x96, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0x6c, [365]=0x99, [366]=0x36, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x58, [373]=0x99, [374]=0x36, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x53, [387]=0x0, [388]=0x78, [389]=0x99, [390]=0x36, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x96, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x54, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0xa8, [417]=0x99, [418]=0x36, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x53, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xf5, [443]=0x74, [444]=0x4, [445]=0x0, [446]=0x53, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x53, [463]=0x0, [464]=0x20, [465]=0x9a, [466]=0x36, [467]=0x0, [468]=0xd4, [469]=0x99, [470]=0x36, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x53, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x20, [481]=0x9a, [482]=0x36, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xf5, [487]=0x74, [488]=0x51, [489]=0x6d, [490]=0xf5, [491]=0x74, [492]=0x4e, [493]=0x2e, [494]=0x68, [495]=0x42, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x53, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0047.477] ReadProcessMemory (in: hProcess=0xc0, lpBaseAddress=0x7efde008, lpBuffer=0x369a6c, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x369a6c*, lpNumberOfBytesRead=0x0) returned 1
	[0047.480] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0047.483] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0047.483] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x36956c | out: Wow64Process=0x36956c) returned 1
	[0047.486] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0047.486] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0047.487] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0047.487] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x970000
	[0047.487] ReadFile (in: hFile=0xc8, lpBuffer=0x970000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x3695a8, lpOverlapped=0x0 | out: lpBuffer=0x970000*, lpNumberOfBytesRead=0x3695a8*=0x13b740, lpOverlapped=0x0) returned 1
	[0047.517] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xab0000
	[0047.685] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0047.688] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0047.689] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x369540 | out: Wow64Process=0x369540) returned 1
	[0047.691] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0047.692] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0047.692] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0047.692] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x970000
	[0047.692] ReadFile (in: hFile=0xc4, lpBuffer=0x970000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x36957c, lpOverlapped=0x0 | out: lpBuffer=0x970000*, lpNumberOfBytesRead=0x36957c*=0x13b740, lpOverlapped=0x0) returned 1
	[0047.710] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xab0000
	[0047.842] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0047.845] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0047.846] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x369540 | out: Wow64Process=0x369540) returned 1
	[0047.848] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0047.849] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0047.849] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0047.849] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x970000
	[0047.849] ReadFile (in: hFile=0xc4, lpBuffer=0x970000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x36957c, lpOverlapped=0x0 | out: lpBuffer=0x970000*, lpNumberOfBytesRead=0x36957c*=0x13b740, lpOverlapped=0x0) returned 1
	[0047.965] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xab0000
	[0047.989] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0047.993] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0047.993] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x369580 | out: Wow64Process=0x369580) returned 1
	[0047.996] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0047.996] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0047.997] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0047.997] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x970000
	[0047.997] ReadFile (in: hFile=0xc4, lpBuffer=0x970000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x3695bc, lpOverlapped=0x0 | out: lpBuffer=0x970000*, lpNumberOfBytesRead=0x3695bc*=0x13b740, lpOverlapped=0x0) returned 1
	[0048.006] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xab0000
	[0048.123] SetThreadContext (hThread=0xbc, lpContext=0x36970c*(ContextFlags=0x10007, Dr0=0x7715fa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x369a94, FloatSave.ErrorSelector=0x3698cc, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x80, [37]=0x97, [38]=0x36, [39]=0x0, [40]=0x90, [41]=0xe9, [42]=0xf, [43]=0x0, [44]=0xcc, [45]=0xe9, [46]=0xf, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0x23, [51]=0x77, [52]=0x98, [53]=0x97, [54]=0x36, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0x15, [59]=0x77, [60]=0xa8, [61]=0x9a, [62]=0x36, [63]=0x0, [64]=0xbc, [65]=0xe9, [66]=0xf, [67]=0x0, [68]=0x4, [69]=0x4d, [70]=0xd9, [71]=0xff, [72]=0xcc, [73]=0x98, [74]=0x36, [75]=0x0, [76]=0x2c, [77]=0x9a, [78]=0x36, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x402518, Ebp=0x0, Eip=0x771401c4, SegCs=0x23, EFlags=0x202, Esp=0x37fd38, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x53, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0x14, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x96, [39]=0x75, [40]=0x48, [41]=0x9a, [42]=0x36, [43]=0x0, [44]=0x30, [45]=0x98, [46]=0x36, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x78, [53]=0x9a, [54]=0x36, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0x15, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x36, [67]=0x0, [68]=0x64, [69]=0x9a, [70]=0x36, [71]=0x0, [72]=0x4c, [73]=0x98, [74]=0x36, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x94, [81]=0x9a, [82]=0x36, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0x15, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0xc8, [93]=0x98, [94]=0x36, [95]=0x0, [96]=0x24, [97]=0x12, [98]=0x14, [99]=0x77, [100]=0x7c, [101]=0x98, [102]=0x36, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0x15, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x64, [113]=0x9a, [114]=0x36, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0x15, [119]=0x77, [120]=0xcc, [121]=0x98, [122]=0x36, [123]=0x0, [124]=0xc0, [125]=0x98, [126]=0x36, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0xac, [145]=0x97, [146]=0x36, [147]=0x0, [148]=0x64, [149]=0x9a, [150]=0x36, [151]=0x0, [152]=0xf0, [153]=0x99, [154]=0x36, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0x1a, [159]=0x77, [160]=0x40, [161]=0x37, [162]=0x37, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0x16, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x94, [181]=0x9a, [182]=0x36, [183]=0x0, [184]=0x0, [185]=0x9a, [186]=0x36, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0x16, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0x15, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0x16, [199]=0x77, [200]=0x18, [201]=0x10, [202]=0x14, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0x15, [215]=0x77, [216]=0x48, [217]=0x9a, [218]=0x36, [219]=0x0, [220]=0x78, [221]=0x9a, [222]=0x36, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x98, [230]=0x36, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x2c, [241]=0x9a, [242]=0x36, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0x94, [249]=0x9a, [250]=0x36, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0xcc, [257]=0x98, [258]=0x36, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x90, [265]=0xe9, [266]=0xf, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0x14, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x97, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x97, [295]=0x75, [296]=0xfa, [297]=0x5d, [298]=0x53, [299]=0x42, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x53, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0x14, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x96, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0x6c, [365]=0x99, [366]=0x36, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x58, [373]=0x99, [374]=0x36, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x53, [387]=0x0, [388]=0x78, [389]=0x99, [390]=0x36, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x96, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x54, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0xa8, [417]=0x99, [418]=0x36, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x53, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xf5, [443]=0x74, [444]=0x4, [445]=0x0, [446]=0x53, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x53, [463]=0x0, [464]=0x20, [465]=0x9a, [466]=0x36, [467]=0x0, [468]=0xd4, [469]=0x99, [470]=0x36, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x53, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x20, [481]=0x9a, [482]=0x36, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xf5, [487]=0x74, [488]=0x51, [489]=0x6d, [490]=0xf5, [491]=0x74, [492]=0x4e, [493]=0x2e, [494]=0x68, [495]=0x42, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x53, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0048.126] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0048.129] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0048.130] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x3695a8 | out: Wow64Process=0x3695a8) returned 1
	[0048.133] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0048.133] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0048.133] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0048.133] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x970000
	[0048.133] ReadFile (in: hFile=0xc4, lpBuffer=0x970000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x3695e4, lpOverlapped=0x0 | out: lpBuffer=0x970000*, lpNumberOfBytesRead=0x3695e4*=0x13b740, lpOverlapped=0x0) returned 1
	[0048.142] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xab0000
	[0048.276] LoadLibraryW (lpLibFileName="User32.dll") returned 0x74f40000
	[0048.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x530000
	[0048.319] CallWindowProcW (lpPrevWndFunc=0x530004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0048.320] VirtualProtectEx (in: hProcess=0xc0, lpAddress=0x0, dwSize=0x12000, flNewProtect=0x1, lpflOldProtect=0x369a1c | out: lpflOldProtect=0x369a1c*=0xc7ba) returned 0
	[0048.320] VirtualFree (lpAddress=0x530000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.320] CloseHandle (hObject=0xc0) returned 1
	[0048.320] CloseHandle (hObject=0xbc) returned 1
	[0048.320] CloseHandle (hObject=0xc8) returned 1
	[0048.323] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0048.326] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0048.326] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x3695b0 | out: Wow64Process=0x3695b0) returned 1
	[0048.329] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x74d40000
	[0048.329] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0048.330] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0048.330] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x970000
	[0048.330] ReadFile (in: hFile=0xc8, lpBuffer=0x970000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x3695ec, lpOverlapped=0x0 | out: lpBuffer=0x970000*, lpNumberOfBytesRead=0x3695ec*=0x13b740, lpOverlapped=0x0) returned 1
	[0048.486] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xab0000
	[0048.651] ExitProcess (uExitCode=0x0) 
	[0048.651] HeapFree (in: hHeap=0xf0000, dwFlags=0x0, lpMem=0x1082c8 | out: hHeap=0xf0000) returned 1

Process:
	id = "4"
	image_name = "rsfd234df.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe"
	page_root = "0x514a6000"
	os_pid = "0xa50"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "3"
	os_parent_pid = "0xa18"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe\""
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 18
	os_tid = 0xa54

	[0048.836] GetProcessHeap () returned 0x4f0000
	[0048.836] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x30) returned 0x5016c0
	[0048.836] GetProcessHeap () returned 0x4f0000
	[0048.836] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x3550) returned 0x505140
	[0048.843] GetProcessHeap () returned 0x4f0000
	[0048.843] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x204) returned 0x508698
	[0048.843] GetProcessHeap () returned 0x4f0000
	[0048.843] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x10) returned 0x501470
	[0048.843] GetTickCount () returned 0x11478c9
	[0048.843] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x37fb38 | out: lpWSAData=0x37fb38) returned 0
	[0048.851] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x37fb18, cchData=32 | out: lpLCData="\x03") returned 16
	[0048.852] GetProcessHeap () returned 0x4f0000
	[0048.852] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1c) returned 0x503e28
	[0048.852] GetProcessHeap () returned 0x4f0000
	[0048.852] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1c) returned 0x50cba0
	[0048.852] GetVersion () returned 0x1db10106
	[0048.852] GetCurrentProcess () returned 0xffffffff
	[0048.852] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x37fa8c | out: TokenHandle=0x37fa8c*=0xb4) returned 1
	[0048.852] GetTokenInformation (in: TokenHandle=0xb4, TokenInformationClass=0x14, TokenInformation=0x37fa84, TokenInformationLength=0x4, ReturnLength=0x37fa88 | out: TokenInformation=0x37fa84, ReturnLength=0x37fa88) returned 1
	[0048.852] CloseHandle (hObject=0xb4) returned 1
	[0048.852] GetProcessHeap () returned 0x4f0000
	[0048.852] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x50cbf0
	[0048.852] GetProcessHeap () returned 0x4f0000
	[0048.852] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x50cc18
	[0048.852] GetProcessHeap () returned 0x4f0000
	[0048.852] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x50cc40
	[0048.852] GetProcessHeap () returned 0x4f0000
	[0048.852] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50d388
	[0048.852] GetProcessHeap () returned 0x4f0000
	[0048.852] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d388 | out: hHeap=0x4f0000) returned 1
	[0048.852] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x50cc18, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0048.852] GetProcessHeap () returned 0x4f0000
	[0048.853] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cc40 | out: hHeap=0x4f0000) returned 1
	[0048.853] GetProcessHeap () returned 0x4f0000
	[0048.853] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cbf0 | out: hHeap=0x4f0000) returned 1
	[0048.853] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x37fa2c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x37fa2c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0048.853] GetProcessHeap () returned 0x4f0000
	[0048.853] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cc18 | out: hHeap=0x4f0000) returned 1
	[0048.853] GetProcessHeap () returned 0x4f0000
	[0048.853] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d388
	[0048.853] GetProcessHeap () returned 0x4f0000
	[0048.853] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d3e8
	[0048.853] GetProcessHeap () returned 0x4f0000
	[0048.853] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d3e8, Size=0x72) returned 0x4ff530
	[0048.853] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x0
	[0048.853] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0xb4
	[0048.853] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x0) returned 0x0
	[0048.853] GetProcessHeap () returned 0x4f0000
	[0048.853] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d388 | out: hHeap=0x4f0000) returned 1
	[0048.853] GetProcessHeap () returned 0x4f0000
	[0048.853] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ff530 | out: hHeap=0x4f0000) returned 1
	[0048.853] GetProcessHeap () returned 0x4f0000
	[0048.853] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x50cc18
	[0048.853] GetProcessHeap () returned 0x4f0000
	[0048.853] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x50cbf0
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x50cc40
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50e3d0
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e3d0 | out: hHeap=0x4f0000) returned 1
	[0048.854] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x50cbf0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cc40 | out: hHeap=0x4f0000) returned 1
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cc18 | out: hHeap=0x4f0000) returned 1
	[0048.854] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x37fa14, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x37fa14*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cbf0 | out: hHeap=0x4f0000) returned 1
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d3e8
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d430
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d430, Size=0x72) returned 0x4ff530
	[0048.854] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0xb8
	[0048.854] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x0) returned 0x102
	[0048.854] CloseHandle (hObject=0xb8) returned 1
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d3e8 | out: hHeap=0x4f0000) returned 1
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ff530 | out: hHeap=0x4f0000) returned 1
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x60) returned 0x50e3d0
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x50cbf0
	[0048.854] GetProcessHeap () returned 0x4f0000
	[0048.854] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x50cc18
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x50cc40
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50e438
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e438 | out: hHeap=0x4f0000) returned 1
	[0048.855] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x50cc18, nSize=0xf | out: lpDst="") returned 0x2c
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cc40 | out: hHeap=0x4f0000) returned 1
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50cc18, Size=0x3a) returned 0x50d3e8
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x3a) returned 0x50d430
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50e438
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e438 | out: hHeap=0x4f0000) returned 1
	[0048.855] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x50d3e8, nSize=0x1d | out: lpDst="") returned 0x2c
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d430 | out: hHeap=0x4f0000) returned 1
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d3e8, Size=0x72) returned 0x4ff530
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x72) returned 0x4ff5b0
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50e438
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e438 | out: hHeap=0x4f0000) returned 1
	[0048.855] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x4ff530, nSize=0x39 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x2c
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ff5b0 | out: hHeap=0x4f0000) returned 1
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cbf0 | out: hHeap=0x4f0000) returned 1
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d3e8
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3e) returned 0x50d430
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x3e) returned 0x50d478
	[0048.855] GetProcessHeap () returned 0x4f0000
	[0048.855] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50e438
	[0048.856] GetProcessHeap () returned 0x4f0000
	[0048.856] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x10) returned 0x5014a0
	[0048.856] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x37f96c | out: phkResult=0x37f96c*=0xbc) returned 0x0
	[0048.856] RegQueryValueExW (in: hKey=0xbc, lpValueName="Startup", lpReserved=0x0, lpType=0x37f968, lpData=0x50d478, lpcbData=0x37f970*=0x3e | out: lpType=0x37f968*=0x2, lpData=0x50d478*=0x1d, lpcbData=0x37f970*=0x98) returned 0xea
	[0048.856] RegCloseKey (hKey=0xbc) returned 0x0
	[0048.856] GetProcessHeap () returned 0x4f0000
	[0048.856] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x5014a0 | out: hHeap=0x4f0000) returned 1
	[0048.856] GetProcessHeap () returned 0x4f0000
	[0048.856] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e438 | out: hHeap=0x4f0000) returned 1
	[0048.856] GetProcessHeap () returned 0x4f0000
	[0048.856] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d478 | out: hHeap=0x4f0000) returned 1
	[0048.856] GetProcessHeap () returned 0x4f0000
	[0048.856] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d430, Size=0x7a) returned 0x50e438
	[0048.856] GetProcessHeap () returned 0x4f0000
	[0048.856] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x7a) returned 0x50e4c0
	[0048.856] GetProcessHeap () returned 0x4f0000
	[0048.856] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50e548
	[0048.856] GetProcessHeap () returned 0x4f0000
	[0048.856] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x10) returned 0x5014a0
	[0048.856] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x37f96c | out: phkResult=0x37f96c*=0xbc) returned 0x0
	[0048.856] RegQueryValueExW (in: hKey=0xbc, lpValueName="Startup", lpReserved=0x0, lpType=0x37f968, lpData=0x50e4c0, lpcbData=0x37f970*=0x7a | out: lpType=0x37f968*=0x2, lpData=0x50e4c0*=0xc4, lpcbData=0x37f970*=0x98) returned 0xea
	[0048.856] RegCloseKey (hKey=0xbc) returned 0x0
	[0048.856] GetProcessHeap () returned 0x4f0000
	[0048.856] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x5014a0 | out: hHeap=0x4f0000) returned 1
	[0048.856] GetProcessHeap () returned 0x4f0000
	[0048.856] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e548 | out: hHeap=0x4f0000) returned 1
	[0048.857] GetProcessHeap () returned 0x4f0000
	[0048.857] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e4c0 | out: hHeap=0x4f0000) returned 1
	[0048.857] GetProcessHeap () returned 0x4f0000
	[0048.857] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50e438, Size=0xf2) returned 0x50e438
	[0048.857] GetProcessHeap () returned 0x4f0000
	[0048.857] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0xf2) returned 0x50e538
	[0048.857] GetProcessHeap () returned 0x4f0000
	[0048.857] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50e638
	[0048.857] GetProcessHeap () returned 0x4f0000
	[0048.857] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x10) returned 0x5014a0
	[0048.857] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x37f96c | out: phkResult=0x37f96c*=0xbc) returned 0x0
	[0048.857] RegQueryValueExW (in: hKey=0xbc, lpValueName="Startup", lpReserved=0x0, lpType=0x37f968, lpData=0x50e538, lpcbData=0x37f970*=0xf2 | out: lpType=0x37f968*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x37f970*=0x98) returned 0x0
	[0048.857] RegCloseKey (hKey=0xbc) returned 0x0
	[0048.857] GetProcessHeap () returned 0x4f0000
	[0048.857] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x5014a0 | out: hHeap=0x4f0000) returned 1
	[0048.857] GetProcessHeap () returned 0x4f0000
	[0048.857] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x50cbf0
	[0048.857] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x37f96c | out: phkResult=0x37f96c*=0xbc) returned 0x0
	[0048.857] RegQueryValueExW (in: hKey=0xbc, lpValueName="Common Startup", lpReserved=0x0, lpType=0x37f968, lpData=0x50e5d0, lpcbData=0x37f970*=0x5a | out: lpType=0x37f968*=0x0, lpData=0x50e5d0*=0x73, lpcbData=0x37f970*=0x5a) returned 0x2
	[0048.857] RegCloseKey (hKey=0xbc) returned 0x0
	[0048.857] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x37f980 | out: phkResult=0x37f980*=0xbc) returned 0x0
	[0048.857] RegQueryValueExW (in: hKey=0xbc, lpValueName="Common Startup", lpReserved=0x0, lpType=0x37f97c, lpData=0x50e5d0, lpcbData=0x37f984*=0x5a | out: lpType=0x37f97c*=0x2, lpData=0x50e5d0*=0x73, lpcbData=0x37f984*=0x78) returned 0xea
	[0048.857] RegCloseKey (hKey=0xbc) returned 0x0
	[0048.858] GetProcessHeap () returned 0x4f0000
	[0048.858] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cbf0 | out: hHeap=0x4f0000) returned 1
	[0048.858] GetProcessHeap () returned 0x4f0000
	[0048.858] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e638 | out: hHeap=0x4f0000) returned 1
	[0048.858] GetProcessHeap () returned 0x4f0000
	[0048.858] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e538 | out: hHeap=0x4f0000) returned 1
	[0048.858] GetProcessHeap () returned 0x4f0000
	[0048.858] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50e438, Size=0x1e2) returned 0x50e438
	[0048.858] GetProcessHeap () returned 0x4f0000
	[0048.858] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e2) returned 0x50e628
	[0048.858] GetProcessHeap () returned 0x4f0000
	[0048.858] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50e818
	[0048.858] GetProcessHeap () returned 0x4f0000
	[0048.858] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x10) returned 0x5014a0
	[0048.858] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x37f96c | out: phkResult=0x37f96c*=0xbc) returned 0x0
	[0048.858] RegQueryValueExW (in: hKey=0xbc, lpValueName="Startup", lpReserved=0x0, lpType=0x37f968, lpData=0x50e628, lpcbData=0x37f970*=0x1e2 | out: lpType=0x37f968*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x37f970*=0x98) returned 0x0
	[0048.858] RegCloseKey (hKey=0xbc) returned 0x0
	[0048.858] GetProcessHeap () returned 0x4f0000
	[0048.858] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x5014a0 | out: hHeap=0x4f0000) returned 1
	[0048.858] GetProcessHeap () returned 0x4f0000
	[0048.858] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x50cbf0
	[0048.858] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x37f96c | out: phkResult=0x37f96c*=0xbc) returned 0x0
	[0048.858] RegQueryValueExW (in: hKey=0xbc, lpValueName="Common Startup", lpReserved=0x0, lpType=0x37f968, lpData=0x50e6c0, lpcbData=0x37f970*=0x14a | out: lpType=0x37f968*=0x0, lpData=0x50e6c0*=0x73, lpcbData=0x37f970*=0x14a) returned 0x2
	[0048.858] RegCloseKey (hKey=0xbc) returned 0x0
	[0048.858] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x37f980 | out: phkResult=0x37f980*=0xbc) returned 0x0
	[0048.858] RegQueryValueExW (in: hKey=0xbc, lpValueName="Common Startup", lpReserved=0x0, lpType=0x37f97c, lpData=0x50e6c0, lpcbData=0x37f984*=0x14a | out: lpType=0x37f97c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x37f984*=0x78) returned 0x0
	[0048.858] RegCloseKey (hKey=0xbc) returned 0x0
	[0048.859] GetProcessHeap () returned 0x4f0000
	[0048.859] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cbf0 | out: hHeap=0x4f0000) returned 1
	[0048.859] GetProcessHeap () returned 0x4f0000
	[0048.859] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e818 | out: hHeap=0x4f0000) returned 1
	[0048.859] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x50e438, nSize=0xf1 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x99
	[0048.859] GetProcessHeap () returned 0x4f0000
	[0048.859] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e628 | out: hHeap=0x4f0000) returned 1
	[0048.859] GetProcessHeap () returned 0x4f0000
	[0048.859] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d3e8 | out: hHeap=0x4f0000) returned 1
	[0048.859] GetProcessHeap () returned 0x4f0000
	[0048.859] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20a) returned 0x50e628
	[0048.859] GetProcessHeap () returned 0x4f0000
	[0048.859] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20a) returned 0x50e840
	[0048.859] GetProcessHeap () returned 0x4f0000
	[0048.859] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20a) returned 0x50ea58
	[0048.859] GetProcessHeap () returned 0x4f0000
	[0048.859] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20a) returned 0x50ec70
	[0048.859] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x50e628, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0048.859] GetProcessHeap () returned 0x4f0000
	[0048.859] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20a) returned 0x50ee88
	[0048.859] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x50ee88, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0048.859] GetProcessHeap () returned 0x4f0000
	[0048.859] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50ee88 | out: hHeap=0x4f0000) returned 1
	[0048.859] GetProcessHeap () returned 0x4f0000
	[0048.859] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20a) returned 0x50ee88
	[0048.859] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x50ee88, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0048.859] GetProcessHeap () returned 0x4f0000
	[0048.859] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50ee88 | out: hHeap=0x4f0000) returned 1
	[0048.859] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"), bFailIfExists=0) returned 1
	[0048.872] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x37fa68 | out: phkResult=0x37fa68*=0x0) returned 0x5
	[0048.872] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x37fa64 | out: phkResult=0x37fa64*=0xc0) returned 0x0
	[0048.872] RegSetValueExW (in: hKey=0xc0, lpValueName="rsfd234df", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", cbData=0x72 | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe") returned 0x0
	[0048.872] RegCloseKey (hKey=0xc0) returned 0x0
	[0048.872] GetProcessHeap () returned 0x4f0000
	[0048.872] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x134) returned 0x50ee88
	[0048.872] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe"), lpNewFileName="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe"), bFailIfExists=1) returned 0
	[0048.873] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe"), bFailIfExists=1) returned 0
	[0048.873] GetProcessHeap () returned 0x4f0000
	[0048.873] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50ee88 | out: hHeap=0x4f0000) returned 1
	[0048.873] GetProcessHeap () returned 0x4f0000
	[0048.873] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e628 | out: hHeap=0x4f0000) returned 1
	[0048.873] GetProcessHeap () returned 0x4f0000
	[0048.873] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e840 | out: hHeap=0x4f0000) returned 1
	[0048.873] GetProcessHeap () returned 0x4f0000
	[0048.873] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50ea58 | out: hHeap=0x4f0000) returned 1
	[0048.873] GetProcessHeap () returned 0x4f0000
	[0048.873] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50ec70 | out: hHeap=0x4f0000) returned 1
	[0048.873] GetProcessHeap () returned 0x4f0000
	[0048.873] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e3d0 | out: hHeap=0x4f0000) returned 1
	[0048.873] GetProcessHeap () returned 0x4f0000
	[0048.874] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ff530 | out: hHeap=0x4f0000) returned 1
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e438 | out: hHeap=0x4f0000) returned 1
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x50cbf0
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x50cc18
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x50cc40
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50e3d0
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e3d0 | out: hHeap=0x4f0000) returned 1
	[0048.874] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x50cc18, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cc40 | out: hHeap=0x4f0000) returned 1
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cbf0 | out: hHeap=0x4f0000) returned 1
	[0048.874] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x37fa84, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x37fa84*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cc18 | out: hHeap=0x4f0000) returned 1
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x28) returned 0x50d388
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x10) returned 0x5014a0
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x80) returned 0x50e3d0
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x74) returned 0x4ff530
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x4ff530, Size=0xe6) returned 0x50e458
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x10) returned 0x5014d0
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.874] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x180) returned 0x50e548
	[0048.874] GetProcessHeap () returned 0x4f0000
	[0048.875] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x250) returned 0x50e6d0
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50e928
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x84) returned 0x50e9c0
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x84) returned 0x50ea50
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50eae0
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50eae0 | out: hHeap=0x4f0000) returned 1
	[0048.875] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x50e9c0, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50ea50 | out: hHeap=0x4f0000) returned 1
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e928 | out: hHeap=0x4f0000) returned 1
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0xc0) returned 0x50ea50
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0xb8) returned 0x50eb18
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0xb8) returned 0x50ebd8
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50e928
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e928 | out: hHeap=0x4f0000) returned 1
	[0048.875] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;", lpDst=0x50eb18, nSize=0x5c | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;") returned 0x5c
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50ebd8 | out: hHeap=0x4f0000) returned 1
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50ea50 | out: hHeap=0x4f0000) returned 1
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20a) returned 0x50ebd8
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20a) returned 0x50edf0
	[0048.875] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x50edf0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50edf0 | out: hHeap=0x4f0000) returned 1
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.875] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x174) returned 0x50edf0
	[0048.875] GetProcessHeap () returned 0x4f0000
	[0048.876] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50edf0, Size=0x3be) returned 0x50edf0
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x86) returned 0x50e928
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50e928, Size=0xa2) returned 0x50ea50
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0xba) returned 0x50f1b8
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50ebd8 | out: hHeap=0x4f0000) returned 1
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e548 | out: hHeap=0x4f0000) returned 1
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e6d0 | out: hHeap=0x4f0000) returned 1
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e9c0 | out: hHeap=0x4f0000) returned 1
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50eb18 | out: hHeap=0x4f0000) returned 1
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x5014a0 | out: hHeap=0x4f0000) returned 1
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e3d0 | out: hHeap=0x4f0000) returned 1
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x50cc18
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x50cbf0
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x50cc40
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50eb00
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50eb00 | out: hHeap=0x4f0000) returned 1
	[0048.876] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x50cbf0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cc40 | out: hHeap=0x4f0000) returned 1
	[0048.876] GetProcessHeap () returned 0x4f0000
	[0048.876] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cc18 | out: hHeap=0x4f0000) returned 1
	[0048.876] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x37fa84, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x37fa84*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cbf0 | out: hHeap=0x4f0000) returned 1
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x28) returned 0x50e3d0
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x10) returned 0x5014a0
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x80) returned 0x50eb00
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x74) returned 0x4ff530
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x4ff530, Size=0xe6) returned 0x50eb88
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x10) returned 0x5014e8
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x180) returned 0x50e548
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x250) returned 0x50e6d0
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x84) returned 0x50e928
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x84) returned 0x50e9b8
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f330
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f330 | out: hHeap=0x4f0000) returned 1
	[0048.877] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x50e928, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e9b8 | out: hHeap=0x4f0000) returned 1
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0xc0) returned 0x50ec78
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.877] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0xb8) returned 0x511280
	[0048.877] GetProcessHeap () returned 0x4f0000
	[0048.878] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0xb8) returned 0x511340
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0048.878] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;", lpDst=0x511280, nSize=0x5c | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;") returned 0x5c
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x511340 | out: hHeap=0x4f0000) returned 1
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50ec78 | out: hHeap=0x4f0000) returned 1
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20a) returned 0x511340
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20a) returned 0x511558
	[0048.878] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x511558, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rsfd234df.exe")) returned 0x33
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x511558 | out: hHeap=0x4f0000) returned 1
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x174) returned 0x511558
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x24e) returned 0x5116d8
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x86) returned 0x50e9b8
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50e9b8, Size=0xa2) returned 0x50ec78
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0xba) returned 0x50ed28
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x511340 | out: hHeap=0x4f0000) returned 1
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e548 | out: hHeap=0x4f0000) returned 1
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e6d0 | out: hHeap=0x4f0000) returned 1
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50e928 | out: hHeap=0x4f0000) returned 1
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x511280 | out: hHeap=0x4f0000) returned 1
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x5014a0 | out: hHeap=0x4f0000) returned 1
	[0048.878] GetProcessHeap () returned 0x4f0000
	[0048.878] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50eb00 | out: hHeap=0x4f0000) returned 1
	[0048.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x402013, lpParameter=0x37fab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0
	[0048.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401fab, lpParameter=0x37fac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc
	[0048.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401e4e, lpParameter=0x37facc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4
	[0048.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401859, lpParameter=0x37fac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8
	[0048.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40197c, lpParameter=0x37fac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc
	[0048.883] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0
	[0049.148] WaitForMultipleObjects (nCount=0x4, lpHandles=0x37fad8*=0xc0, bWaitAll=1, dwMilliseconds=0xffffffff) 

Thread:
	id = 19
	os_tid = 0xa58

	[0048.992] GetVersion () returned 0x1db10106
	[0048.992] GetCurrentProcess () returned 0xffffffff
	[0048.992] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xeeff20 | out: TokenHandle=0xeeff20*=0xd0) returned 1
	[0048.992] GetTokenInformation (in: TokenHandle=0xd0, TokenInformationClass=0x14, TokenInformation=0xeeff18, TokenInformationLength=0x4, ReturnLength=0xeeff1c | out: TokenInformation=0xeeff18, ReturnLength=0xeeff1c) returned 1
	[0048.992] CloseHandle (hObject=0xd0) returned 1
	[0048.992] GetProcessHeap () returned 0x4f0000
	[0048.992] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x50cbf0
	[0048.992] GetProcessHeap () returned 0x4f0000
	[0048.992] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x50cc18
	[0048.992] GetProcessHeap () returned 0x4f0000
	[0048.992] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x50cc40
	[0048.992] GetProcessHeap () returned 0x4f0000
	[0048.992] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0048.992] GetProcessHeap () returned 0x4f0000
	[0048.992] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0048.992] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x50cc18, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0048.992] GetProcessHeap () returned 0x4f0000
	[0048.992] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cc40 | out: hHeap=0x4f0000) returned 1
	[0048.992] GetProcessHeap () returned 0x4f0000
	[0048.992] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cbf0 | out: hHeap=0x4f0000) returned 1
	[0048.992] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0048.993] GetProcessHeap () returned 0x4f0000
	[0048.993] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50cc18 | out: hHeap=0x4f0000) returned 1
	[0048.993] GetProcessHeap () returned 0x4f0000
	[0048.993] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d3e8
	[0048.993] GetProcessHeap () returned 0x4f0000
	[0048.993] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d430
	[0048.993] GetProcessHeap () returned 0x4f0000
	[0048.993] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d430, Size=0x72) returned 0x4ff530
	[0048.993] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0xd0
	[0048.993] WaitForSingleObject (hHandle=0xd0, dwMilliseconds=0x0) returned 0x102
	[0048.993] CloseHandle (hObject=0xd0) returned 1
	[0048.993] GetProcessHeap () returned 0x4f0000
	[0048.993] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d3e8 | out: hHeap=0x4f0000) returned 1
	[0048.993] GetProcessHeap () returned 0x4f0000
	[0048.993] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ff530 | out: hHeap=0x4f0000) returned 1
	[0048.993] Sleep (dwMilliseconds=0x3e8) 
	[0050.113] GetProcessHeap () returned 0x4f0000
	[0050.114] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ace0
	[0050.114] GetProcessHeap () returned 0x4f0000
	[0050.114] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ad58
	[0050.114] GetProcessHeap () returned 0x4f0000
	[0050.114] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0050.114] GetProcessHeap () returned 0x4f0000
	[0050.114] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0050.114] GetProcessHeap () returned 0x4f0000
	[0050.114] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0050.114] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ad58, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0050.114] GetProcessHeap () returned 0x4f0000
	[0050.114] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0050.114] GetProcessHeap () returned 0x4f0000
	[0050.114] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0050.114] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0050.114] GetProcessHeap () returned 0x4f0000
	[0050.114] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0050.114] GetProcessHeap () returned 0x4f0000
	[0050.114] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0050.114] GetProcessHeap () returned 0x4f0000
	[0050.114] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0050.114] GetProcessHeap () returned 0x4f0000
	[0050.114] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0050.114] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0050.115] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0050.115] CloseHandle (hObject=0x17c) returned 1
	[0050.115] GetProcessHeap () returned 0x4f0000
	[0050.115] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0050.115] GetProcessHeap () returned 0x4f0000
	[0050.115] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0050.115] Sleep (dwMilliseconds=0x3e8) 
	[0051.271] GetProcessHeap () returned 0x4f0000
	[0051.271] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ad58
	[0051.271] GetProcessHeap () returned 0x4f0000
	[0051.271] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ace0
	[0051.271] GetProcessHeap () returned 0x4f0000
	[0051.272] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0051.272] GetProcessHeap () returned 0x4f0000
	[0051.272] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0051.272] GetProcessHeap () returned 0x4f0000
	[0051.272] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0051.272] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ace0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0051.272] GetProcessHeap () returned 0x4f0000
	[0051.272] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0051.272] GetProcessHeap () returned 0x4f0000
	[0051.272] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0051.272] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0051.272] GetProcessHeap () returned 0x4f0000
	[0051.272] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0051.272] GetProcessHeap () returned 0x4f0000
	[0051.272] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0051.272] GetProcessHeap () returned 0x4f0000
	[0051.272] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0051.272] GetProcessHeap () returned 0x4f0000
	[0051.272] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0051.272] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0051.272] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0051.272] CloseHandle (hObject=0x17c) returned 1
	[0051.272] GetProcessHeap () returned 0x4f0000
	[0051.272] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0051.272] GetProcessHeap () returned 0x4f0000
	[0051.272] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0051.272] Sleep (dwMilliseconds=0x3e8) 
	[0052.437] GetProcessHeap () returned 0x4f0000
	[0052.437] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ace0
	[0052.438] GetProcessHeap () returned 0x4f0000
	[0052.438] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ad58
	[0052.438] GetProcessHeap () returned 0x4f0000
	[0052.438] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0052.438] GetProcessHeap () returned 0x4f0000
	[0052.438] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0052.438] GetProcessHeap () returned 0x4f0000
	[0052.438] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0052.438] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ad58, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0052.438] GetProcessHeap () returned 0x4f0000
	[0052.438] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0052.438] GetProcessHeap () returned 0x4f0000
	[0052.438] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0052.438] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0052.438] GetProcessHeap () returned 0x4f0000
	[0052.438] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0052.438] GetProcessHeap () returned 0x4f0000
	[0052.438] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0052.438] GetProcessHeap () returned 0x4f0000
	[0052.438] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0052.438] GetProcessHeap () returned 0x4f0000
	[0052.438] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0052.438] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0052.438] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0052.438] CloseHandle (hObject=0x17c) returned 1
	[0052.438] GetProcessHeap () returned 0x4f0000
	[0052.438] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0052.438] GetProcessHeap () returned 0x4f0000
	[0052.438] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0052.439] Sleep (dwMilliseconds=0x3e8) 
	[0053.623] GetProcessHeap () returned 0x4f0000
	[0053.623] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ad58
	[0053.623] GetProcessHeap () returned 0x4f0000
	[0053.623] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ace0
	[0053.623] GetProcessHeap () returned 0x4f0000
	[0053.623] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0053.623] GetProcessHeap () returned 0x4f0000
	[0053.623] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0053.624] GetProcessHeap () returned 0x4f0000
	[0053.624] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0053.624] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ace0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0053.624] GetProcessHeap () returned 0x4f0000
	[0053.624] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0053.624] GetProcessHeap () returned 0x4f0000
	[0053.624] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0053.624] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0053.624] GetProcessHeap () returned 0x4f0000
	[0053.624] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0053.624] GetProcessHeap () returned 0x4f0000
	[0053.624] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0053.624] GetProcessHeap () returned 0x4f0000
	[0053.624] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0053.624] GetProcessHeap () returned 0x4f0000
	[0053.624] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0053.624] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0053.624] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0053.624] CloseHandle (hObject=0x17c) returned 1
	[0053.625] GetProcessHeap () returned 0x4f0000
	[0053.625] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0053.625] GetProcessHeap () returned 0x4f0000
	[0053.625] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0053.625] Sleep (dwMilliseconds=0x3e8) 
	[0054.824] GetProcessHeap () returned 0x4f0000
	[0054.824] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ace0
	[0054.824] GetProcessHeap () returned 0x4f0000
	[0054.824] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ad58
	[0054.824] GetProcessHeap () returned 0x4f0000
	[0054.824] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0054.825] GetProcessHeap () returned 0x4f0000
	[0054.825] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0054.825] GetProcessHeap () returned 0x4f0000
	[0054.825] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0054.825] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ad58, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0054.825] GetProcessHeap () returned 0x4f0000
	[0054.825] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0054.825] GetProcessHeap () returned 0x4f0000
	[0054.825] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0054.825] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0054.825] GetProcessHeap () returned 0x4f0000
	[0054.825] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0054.825] GetProcessHeap () returned 0x4f0000
	[0054.825] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0054.825] GetProcessHeap () returned 0x4f0000
	[0054.825] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0054.825] GetProcessHeap () returned 0x4f0000
	[0054.825] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0054.825] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0054.825] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0054.825] CloseHandle (hObject=0x17c) returned 1
	[0054.825] GetProcessHeap () returned 0x4f0000
	[0054.825] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0054.825] GetProcessHeap () returned 0x4f0000
	[0054.825] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0054.825] Sleep (dwMilliseconds=0x3e8) 
	[0055.933] GetProcessHeap () returned 0x4f0000
	[0055.933] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ad58
	[0055.933] GetProcessHeap () returned 0x4f0000
	[0055.933] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ace0
	[0055.933] GetProcessHeap () returned 0x4f0000
	[0055.933] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0055.933] GetProcessHeap () returned 0x4f0000
	[0055.933] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0055.933] GetProcessHeap () returned 0x4f0000
	[0055.933] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0055.933] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ace0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0055.933] GetProcessHeap () returned 0x4f0000
	[0055.933] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0055.933] GetProcessHeap () returned 0x4f0000
	[0055.933] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0055.933] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0055.933] GetProcessHeap () returned 0x4f0000
	[0055.933] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0055.933] GetProcessHeap () returned 0x4f0000
	[0055.933] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0055.933] GetProcessHeap () returned 0x4f0000
	[0055.933] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0055.933] GetProcessHeap () returned 0x4f0000
	[0055.933] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0055.933] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0055.933] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0055.934] CloseHandle (hObject=0x17c) returned 1
	[0055.934] GetProcessHeap () returned 0x4f0000
	[0055.934] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0055.934] GetProcessHeap () returned 0x4f0000
	[0055.934] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0055.934] Sleep (dwMilliseconds=0x3e8) 
	[0057.136] GetProcessHeap () returned 0x4f0000
	[0057.136] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ace0
	[0057.136] GetProcessHeap () returned 0x4f0000
	[0057.136] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ad58
	[0057.136] GetProcessHeap () returned 0x4f0000
	[0057.136] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0057.136] GetProcessHeap () returned 0x4f0000
	[0057.136] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0057.136] GetProcessHeap () returned 0x4f0000
	[0057.136] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0057.136] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ad58, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0057.136] GetProcessHeap () returned 0x4f0000
	[0057.136] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0057.136] GetProcessHeap () returned 0x4f0000
	[0057.136] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0057.136] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0057.137] GetProcessHeap () returned 0x4f0000
	[0057.137] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0057.137] GetProcessHeap () returned 0x4f0000
	[0057.137] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0057.137] GetProcessHeap () returned 0x4f0000
	[0057.137] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0057.137] GetProcessHeap () returned 0x4f0000
	[0057.137] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0057.137] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0057.137] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0057.137] CloseHandle (hObject=0x17c) returned 1
	[0057.137] GetProcessHeap () returned 0x4f0000
	[0057.137] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0057.137] GetProcessHeap () returned 0x4f0000
	[0057.137] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0057.137] Sleep (dwMilliseconds=0x3e8) 
	[0058.372] GetProcessHeap () returned 0x4f0000
	[0058.372] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ad58
	[0058.372] GetProcessHeap () returned 0x4f0000
	[0058.372] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ace0
	[0058.372] GetProcessHeap () returned 0x4f0000
	[0058.372] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0058.372] GetProcessHeap () returned 0x4f0000
	[0058.372] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0058.372] GetProcessHeap () returned 0x4f0000
	[0058.372] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0058.372] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ace0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0058.372] GetProcessHeap () returned 0x4f0000
	[0058.372] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0058.372] GetProcessHeap () returned 0x4f0000
	[0058.372] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0058.372] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0058.373] GetProcessHeap () returned 0x4f0000
	[0058.373] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0058.373] GetProcessHeap () returned 0x4f0000
	[0058.373] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0058.373] GetProcessHeap () returned 0x4f0000
	[0058.373] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0058.373] GetProcessHeap () returned 0x4f0000
	[0058.373] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0058.373] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0058.373] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0058.373] CloseHandle (hObject=0x17c) returned 1
	[0058.374] GetProcessHeap () returned 0x4f0000
	[0058.374] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0058.374] GetProcessHeap () returned 0x4f0000
	[0058.374] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0058.374] Sleep (dwMilliseconds=0x3e8) 
	[0059.574] GetProcessHeap () returned 0x4f0000
	[0059.574] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ace0
	[0059.574] GetProcessHeap () returned 0x4f0000
	[0059.574] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ad58
	[0059.574] GetProcessHeap () returned 0x4f0000
	[0059.574] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0059.574] GetProcessHeap () returned 0x4f0000
	[0059.574] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0059.574] GetProcessHeap () returned 0x4f0000
	[0059.574] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0059.574] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ad58, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0059.574] GetProcessHeap () returned 0x4f0000
	[0059.574] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0059.574] GetProcessHeap () returned 0x4f0000
	[0059.574] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0059.574] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0059.574] GetProcessHeap () returned 0x4f0000
	[0059.574] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0059.575] GetProcessHeap () returned 0x4f0000
	[0059.575] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0059.575] GetProcessHeap () returned 0x4f0000
	[0059.575] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0059.575] GetProcessHeap () returned 0x4f0000
	[0059.575] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0059.575] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0059.575] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0059.575] CloseHandle (hObject=0x17c) returned 1
	[0059.575] GetProcessHeap () returned 0x4f0000
	[0059.575] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0059.575] GetProcessHeap () returned 0x4f0000
	[0059.575] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0059.575] Sleep (dwMilliseconds=0x3e8) 
	[0060.676] GetProcessHeap () returned 0x4f0000
	[0060.676] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ad58
	[0060.676] GetProcessHeap () returned 0x4f0000
	[0060.676] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ace0
	[0060.676] GetProcessHeap () returned 0x4f0000
	[0060.676] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0060.677] GetProcessHeap () returned 0x4f0000
	[0060.677] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0060.677] GetProcessHeap () returned 0x4f0000
	[0060.677] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0060.677] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ace0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0060.677] GetProcessHeap () returned 0x4f0000
	[0060.677] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0060.677] GetProcessHeap () returned 0x4f0000
	[0060.677] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0060.677] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0060.677] GetProcessHeap () returned 0x4f0000
	[0060.677] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0060.677] GetProcessHeap () returned 0x4f0000
	[0060.677] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0060.677] GetProcessHeap () returned 0x4f0000
	[0060.677] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0060.677] GetProcessHeap () returned 0x4f0000
	[0060.677] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0060.677] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0060.677] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0060.677] CloseHandle (hObject=0x17c) returned 1
	[0060.677] GetProcessHeap () returned 0x4f0000
	[0060.677] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0060.677] GetProcessHeap () returned 0x4f0000
	[0060.677] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0060.677] Sleep (dwMilliseconds=0x3e8) 
	[0061.930] GetProcessHeap () returned 0x4f0000
	[0061.930] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ace0
	[0061.930] GetProcessHeap () returned 0x4f0000
	[0061.930] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ad58
	[0061.930] GetProcessHeap () returned 0x4f0000
	[0061.930] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0061.930] GetProcessHeap () returned 0x4f0000
	[0061.930] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0061.930] GetProcessHeap () returned 0x4f0000
	[0061.930] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0061.930] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ad58, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0061.930] GetProcessHeap () returned 0x4f0000
	[0061.930] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0061.930] GetProcessHeap () returned 0x4f0000
	[0061.931] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0061.931] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0061.931] GetProcessHeap () returned 0x4f0000
	[0061.931] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0061.931] GetProcessHeap () returned 0x4f0000
	[0061.931] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0061.931] GetProcessHeap () returned 0x4f0000
	[0061.931] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0061.931] GetProcessHeap () returned 0x4f0000
	[0061.931] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0061.931] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0061.931] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0061.931] CloseHandle (hObject=0x17c) returned 1
	[0061.931] GetProcessHeap () returned 0x4f0000
	[0061.931] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0061.931] GetProcessHeap () returned 0x4f0000
	[0061.931] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0061.931] Sleep (dwMilliseconds=0x3e8) 
	[0062.966] GetProcessHeap () returned 0x4f0000
	[0062.966] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ad58
	[0062.966] GetProcessHeap () returned 0x4f0000
	[0062.966] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ace0
	[0062.966] GetProcessHeap () returned 0x4f0000
	[0062.966] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0062.966] GetProcessHeap () returned 0x4f0000
	[0062.966] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0062.966] GetProcessHeap () returned 0x4f0000
	[0062.966] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0062.966] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ace0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0062.966] GetProcessHeap () returned 0x4f0000
	[0062.966] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0062.966] GetProcessHeap () returned 0x4f0000
	[0062.967] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0062.967] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0062.967] GetProcessHeap () returned 0x4f0000
	[0062.967] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0062.967] GetProcessHeap () returned 0x4f0000
	[0062.967] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0062.967] GetProcessHeap () returned 0x4f0000
	[0062.967] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0062.967] GetProcessHeap () returned 0x4f0000
	[0062.967] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0062.967] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0062.967] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0062.967] CloseHandle (hObject=0x17c) returned 1
	[0062.967] GetProcessHeap () returned 0x4f0000
	[0062.967] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0062.967] GetProcessHeap () returned 0x4f0000
	[0062.967] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0062.968] Sleep (dwMilliseconds=0x3e8) 
	[0064.066] GetProcessHeap () returned 0x4f0000
	[0064.066] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ace0
	[0064.066] GetProcessHeap () returned 0x4f0000
	[0064.067] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ad58
	[0064.067] GetProcessHeap () returned 0x4f0000
	[0064.067] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0064.067] GetProcessHeap () returned 0x4f0000
	[0064.067] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0064.067] GetProcessHeap () returned 0x4f0000
	[0064.067] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0064.067] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ad58, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0064.067] GetProcessHeap () returned 0x4f0000
	[0064.067] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0064.067] GetProcessHeap () returned 0x4f0000
	[0064.067] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0064.067] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0064.067] GetProcessHeap () returned 0x4f0000
	[0064.067] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0064.067] GetProcessHeap () returned 0x4f0000
	[0064.067] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0064.068] GetProcessHeap () returned 0x4f0000
	[0064.068] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0064.068] GetProcessHeap () returned 0x4f0000
	[0064.068] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0064.068] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0064.068] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0064.068] CloseHandle (hObject=0x17c) returned 1
	[0064.068] GetProcessHeap () returned 0x4f0000
	[0064.068] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0064.068] GetProcessHeap () returned 0x4f0000
	[0064.068] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0064.068] Sleep (dwMilliseconds=0x3e8) 
	[0065.209] GetProcessHeap () returned 0x4f0000
	[0065.209] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x52ad58
	[0065.209] GetProcessHeap () returned 0x4f0000
	[0065.209] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x52ace0
	[0065.209] GetProcessHeap () returned 0x4f0000
	[0065.209] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x52abf0
	[0065.209] GetProcessHeap () returned 0x4f0000
	[0065.209] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0065.209] GetProcessHeap () returned 0x4f0000
	[0065.209] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0065.209] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ace0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0065.209] GetProcessHeap () returned 0x4f0000
	[0065.209] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52abf0 | out: hHeap=0x4f0000) returned 1
	[0065.209] GetProcessHeap () returned 0x4f0000
	[0065.209] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ad58 | out: hHeap=0x4f0000) returned 1
	[0065.209] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeefea8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeefea8*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0065.209] GetProcessHeap () returned 0x4f0000
	[0065.209] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x52ace0 | out: hHeap=0x4f0000) returned 1
	[0065.209] GetProcessHeap () returned 0x4f0000
	[0065.210] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d868
	[0065.210] GetProcessHeap () returned 0x4f0000
	[0065.210] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x3a) returned 0x50d8b0
	[0065.210] GetProcessHeap () returned 0x4f0000
	[0065.210] RtlReAllocateHeap (Heap=0x4f0000, Flags=0x0, Ptr=0x50d8b0, Size=0x72) returned 0x4ffa30
	[0065.210] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x17c
	[0065.210] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0x0) returned 0x102
	[0065.210] CloseHandle (hObject=0x17c) returned 1
	[0065.210] GetProcessHeap () returned 0x4f0000
	[0065.210] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d868 | out: hHeap=0x4f0000) returned 1
	[0065.210] GetProcessHeap () returned 0x4f0000
	[0065.210] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x4ffa30 | out: hHeap=0x4f0000) returned 1
	[0065.210] Sleep (dwMilliseconds=0x3e8) 

Thread:
	id = 20
	os_tid = 0xa5c

	[0048.993] GetProcessHeap () returned 0x4f0000
	[0048.993] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x440) returned 0x511930
	[0048.993] GetProcessHeap () returned 0x4f0000
	[0048.993] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x434) returned 0x511d78
	[0048.994] GetProcessHeap () returned 0x4f0000
	[0048.994] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x511d78 | out: hHeap=0x4f0000) returned 1
	[0048.994] GetProcessHeap () returned 0x4f0000
	[0048.994] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x511930 | out: hHeap=0x4f0000) returned 1

Thread:
	id = 21
	os_tid = 0xa60

	[0048.994] GetProcessHeap () returned 0x4f0000
	[0048.994] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x21a) returned 0x50e758
	[0048.994] GetProcessHeap () returned 0x4f0000
	[0048.994] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x28) returned 0x50e420
	[0048.994] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0xd0
	[0048.995] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0xd4
	[0048.995] GetComputerNameW (in: lpBuffer=0x50e768, nSize=0x260fe84 | out: lpBuffer="XDUWTFONO", nSize=0x260fe84) returned 1
	[0048.995] GetProcessHeap () returned 0x4f0000
	[0048.995] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x26) returned 0x511490
	[0048.995] GetProcessHeap () returned 0x4f0000
	[0048.995] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x4000) returned 0x511930
	[0048.995] GetProcessHeap () returned 0x4f0000
	[0048.995] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x10000) returned 0x515938
	[0048.995] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x260fe3c | out: lphEnum=0x260fe3c*=0x526430) returned 0x0
	[0049.275] WNetEnumResourceW (in: hEnum=0x526430, lpcCount=0x260fe30, lpBuffer=0x511930, lpBufferSize=0x260fe44 | out: lpcCount=0x260fe30, lpBuffer=0x511930, lpBufferSize=0x260fe44) returned 0x103
	[0049.275] WNetCloseEnum (hEnum=0x526430) returned 0x0
	[0049.275] GetProcessHeap () returned 0x4f0000
	[0049.275] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x511930 | out: hHeap=0x4f0000) returned 1
	[0049.275] GetProcessHeap () returned 0x4f0000
	[0049.275] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x515938 | out: hHeap=0x4f0000) returned 1
	[0049.275] GetProcessHeap () returned 0x4f0000
	[0049.275] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x4000) returned 0x530b68
	[0049.275] GetProcessHeap () returned 0x4f0000
	[0049.275] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x10000) returned 0x511930
	[0049.275] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x260fe24 | out: lphEnum=0x260fe24*=0x526ac8) returned 0x0
	[0049.275] WNetEnumResourceW (in: hEnum=0x526ac8, lpcCount=0x260fe18, lpBuffer=0x530b68, lpBufferSize=0x260fe2c | out: lpcCount=0x260fe18, lpBuffer=0x530b68, lpBufferSize=0x260fe2c) returned 0x103
	[0049.275] WNetCloseEnum (hEnum=0x526ac8) returned 0x0
	[0049.275] GetProcessHeap () returned 0x4f0000
	[0049.275] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x530b68 | out: hHeap=0x4f0000) returned 1
	[0049.275] GetProcessHeap () returned 0x4f0000
	[0049.276] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x511930 | out: hHeap=0x4f0000) returned 1
	[0049.276] GetProcessHeap () returned 0x4f0000
	[0049.276] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x4000) returned 0x530b68
	[0049.276] GetProcessHeap () returned 0x4f0000
	[0049.276] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x10000) returned 0x511930
	[0049.276] WNetOpenEnumW (dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x260fe0c) 

Thread:
	id = 22
	os_tid = 0xa64

	[0049.011] GetLogicalDrives () returned 0x4
	[0049.011] GetProcessHeap () returned 0x4f0000
	[0049.011] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d700
	[0049.011] GetProcessHeap () returned 0x4f0000
	[0049.012] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x28) returned 0x528f08
	[0049.012] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x128
	[0049.012] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x12c
	[0049.012] GetProcessHeap () returned 0x4f0000
	[0049.012] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x50d2f8
	[0049.012] GetProcessHeap () returned 0x4f0000
	[0049.012] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x50d320
	[0049.012] GetProcessHeap () returned 0x4f0000
	[0049.012] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x50d2a8
	[0049.012] GetProcessHeap () returned 0x4f0000
	[0049.012] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0049.012] GetProcessHeap () returned 0x4f0000
	[0049.012] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0049.012] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x50d320, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0049.012] GetProcessHeap () returned 0x4f0000
	[0049.012] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d2a8 | out: hHeap=0x4f0000) returned 1
	[0049.012] GetProcessHeap () returned 0x4f0000
	[0049.012] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d2f8 | out: hHeap=0x4f0000) returned 1
	[0049.012] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x271fecc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x271fecc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0049.012] GetProcessHeap () returned 0x4f0000
	[0049.012] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d320 | out: hHeap=0x4f0000) returned 1
	[0049.012] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0049.012] CloseHandle (hObject=0x12c) returned 1
	[0049.012] CloseHandle (hObject=0x128) returned 1
	[0049.012] GetProcessHeap () returned 0x4f0000
	[0049.012] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x528f08 | out: hHeap=0x4f0000) returned 1
	[0049.012] GetProcessHeap () returned 0x4f0000
	[0049.012] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d700 | out: hHeap=0x4f0000) returned 1

Thread:
	id = 23
	os_tid = 0xa68

	[0049.013] GetLogicalDrives () returned 0x4
	[0049.013] GetProcessHeap () returned 0x4f0000
	[0049.013] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x20) returned 0x50d320
	[0049.013] GetProcessHeap () returned 0x4f0000
	[0049.013] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x8, Size=0x1e) returned 0x50d2f8
	[0049.013] GetProcessHeap () returned 0x4f0000
	[0049.013] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x1e) returned 0x50d2a8
	[0049.013] GetProcessHeap () returned 0x4f0000
	[0049.013] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x90) returned 0x50f298
	[0049.013] GetProcessHeap () returned 0x4f0000
	[0049.013] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50f298 | out: hHeap=0x4f0000) returned 1
	[0049.013] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x50d2f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0049.013] GetProcessHeap () returned 0x4f0000
	[0049.013] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d2a8 | out: hHeap=0x4f0000) returned 1
	[0049.013] GetProcessHeap () returned 0x4f0000
	[0049.014] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d320 | out: hHeap=0x4f0000) returned 1
	[0049.014] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x294f774, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x294f774*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0049.014] GetProcessHeap () returned 0x4f0000
	[0049.014] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d2f8 | out: hHeap=0x4f0000) returned 1
	[0049.014] GetProcessHeap () returned 0x4f0000
	[0049.014] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x40) returned 0x50d700
	[0049.014] GetProcessHeap () returned 0x4f0000
	[0049.014] RtlAllocateHeap (HeapHandle=0x4f0000, Flags=0x0, Size=0x28) returned 0x528f08
	[0049.014] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x128
	[0049.014] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x12c
	[0049.014] CloseHandle (hObject=0x12c) returned 1
	[0049.014] CloseHandle (hObject=0x128) returned 1
	[0049.014] GetProcessHeap () returned 0x4f0000
	[0049.014] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x528f08 | out: hHeap=0x4f0000) returned 1
	[0049.014] GetProcessHeap () returned 0x4f0000
	[0049.014] HeapFree (in: hHeap=0x4f0000, dwFlags=0x0, lpMem=0x50d700 | out: hHeap=0x4f0000) returned 1

Thread:
	id = 24
	os_tid = 0xa6c


Thread:
	id = 25
	os_tid = 0xa70


Process:
	id = "5"
	image_name = "rsfd234df.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"
	page_root = "0x76fc1000"
	os_pid = "0x7a0"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "autostart"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 27
	os_tid = 0x7a4

	[0098.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x34fa88 | out: lpSystemTimeAsFileTime=0x34fa88*(dwLowDateTime=0x1c4398c0, dwHighDateTime=0x1d57294)) 
	[0098.230] GetCurrentThreadId () returned 0x7a4
	[0098.230] GetCurrentProcessId () returned 0x7a0
	[0098.230] QueryPerformanceCounter (in: lpPerformanceCount=0x34fa80 | out: lpPerformanceCount=0x34fa80*=6392034163) returned 1
	[0098.236] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0098.236] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.236] GetLastError () returned 0x57
	[0098.236] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x757a0000
	[0098.237] GetProcAddress (hModule=0x757a0000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0098.238] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.238] GetLastError () returned 0x57
	[0098.238] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0098.238] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.238] GetLastError () returned 0x57
	[0098.238] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76300000
	[0098.238] GetProcAddress (hModule=0x76300000, lpProcName="FlsAlloc") returned 0x76314f2b
	[0098.238] GetProcAddress (hModule=0x76300000, lpProcName="FlsSetValue") returned 0x76314208
	[0098.238] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.238] GetLastError () returned 0x57
	[0098.238] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x757a0000
	[0098.238] GetProcAddress (hModule=0x757a0000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0098.239] GetProcessHeap () returned 0x390000
	[0098.239] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.239] GetLastError () returned 0x57
	[0098.239] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0098.239] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.239] GetLastError () returned 0x57
	[0098.239] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76300000
	[0098.239] GetProcAddress (hModule=0x76300000, lpProcName="FlsAlloc") returned 0x76314f2b
	[0098.239] GetLastError () returned 0x57
	[0098.239] GetProcAddress (hModule=0x76300000, lpProcName="FlsGetValue") returned 0x76311252
	[0098.239] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x364) returned 0x3a82e0
	[0098.240] GetProcAddress (hModule=0x76300000, lpProcName="FlsSetValue") returned 0x76314208
	[0098.240] SetLastError (dwErrCode=0x57) 
	[0098.240] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xc00) returned 0x3a8650
	[0098.241] GetStartupInfoW (in: lpStartupInfo=0x34f9b0 | out: lpStartupInfo=0x34f9b0*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xd98da0, hStdOutput=0x6186317a, hStdError=0xfffffffe)) 
	[0098.241] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0098.241] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0098.241] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0098.241] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" "
	[0098.241] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" "
	[0098.241] GetLastError () returned 0x57
	[0098.241] SetLastError (dwErrCode=0x57) 
	[0098.241] GetLastError () returned 0x57
	[0098.241] SetLastError (dwErrCode=0x57) 
	[0098.241] GetACP () returned 0x4e4
	[0098.241] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x0, Size=0x220) returned 0x3a7f98
	[0098.241] IsValidCodePage (CodePage=0x4e4) returned 1
	[0098.241] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x34f9e0 | out: lpCPInfo=0x34f9e0) returned 1
	[0098.241] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x34f2a8 | out: lpCPInfo=0x34f2a8) returned 1
	[0098.242] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x34f8bc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0098.242] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x34f8bc, cbMultiByte=256, lpWideCharStr=0x34f048, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ췋ÙĀ") returned 256
	[0098.242] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ췋ÙĀ", cchSrc=256, lpCharType=0x34f2bc | out: lpCharType=0x34f2bc) returned 1
	[0098.242] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x34f8bc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0098.242] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x34f8bc, cbMultiByte=256, lpWideCharStr=0x34eff8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÙĀ") returned 256
	[0098.242] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.242] GetLastError () returned 0x57
	[0098.242] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0098.242] GetProcAddress (hModule=0x76300000, lpProcName="LCMapStringEx") returned 0x763947f1
	[0098.242] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÙĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0098.242] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÙĀ", cchSrc=256, lpDestStr=0x34ede8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0098.242] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x34f7bc, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿrZhaøù4", lpUsedDefaultChar=0x0) returned 256
	[0098.242] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x34f8bc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0098.242] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x34f8bc, cbMultiByte=256, lpWideCharStr=0x34f018, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0098.242] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0098.242] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x34ee08, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
	[0098.242] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x34f6bc, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿrZhaøù4", lpUsedDefaultChar=0x0) returned 256
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x0, Size=0x80) returned 0x3a81c0
	[0098.243] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xdac2a0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x7c) returned 0x3aa258
	[0098.243] RtlInitializeSListHead (in: ListHead=0xdabe98 | out: ListHead=0xdabe98) 
	[0098.243] GetLastError () returned 0x0
	[0098.243] SetLastError (dwErrCode=0x0) 
	[0098.243] GetEnvironmentStringsW () returned 0x3aa2e0*
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x0, Size=0xb02) returned 0x3aadf0
	[0098.243] FreeEnvironmentStringsW (penv=0x3aa2e0) returned 1
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x9c) returned 0x3ab900
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x3e) returned 0x3a6218
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x6c) returned 0x3ab9a8
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x6e) returned 0x3aba20
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x78) returned 0x39f4b0
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x62) returned 0x3aba98
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x2e) returned 0x3abb08
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x48) returned 0x3abb40
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x28) returned 0x3abb90
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x1a) returned 0x3a9c28
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x4a) returned 0x3abbc0
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x72) returned 0x39f530
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x30) returned 0x3abc18
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x2e) returned 0x3abc50
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x1c) returned 0x3a9c50
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xd2) returned 0x3abc88
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x7c) returned 0x3abd68
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x36) returned 0x3abdf0
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x3a) returned 0x3a6260
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x90) returned 0x3abe30
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x24) returned 0x3abec8
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x30) returned 0x3abef8
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x36) returned 0x3abf30
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x48) returned 0x3abf70
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x52) returned 0x3aa2e0
	[0098.243] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x3c) returned 0x3a62a8
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x82) returned 0x3aa340
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x2e) returned 0x3aa3d0
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x28) returned 0x3aa408
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x1e) returned 0x3a9c78
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x2c) returned 0x3aa438
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x54) returned 0x3aa470
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x52) returned 0x3aa4d0
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x2a) returned 0x3aa530
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x3c) returned 0x3a62f0
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x54) returned 0x3aa568
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x24) returned 0x3aa5c8
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x30) returned 0x3aa5f8
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x8c) returned 0x3aa630
	[0098.244] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3aadf0 | out: hHeap=0x390000) returned 1
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x800) returned 0x3aa6c8
	[0098.244] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0098.244] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xd9897a) returned 0x0
	[0098.244] GetStartupInfoW (in: lpStartupInfo=0x34fa18 | out: lpStartupInfo=0x34fa18*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0098.244] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x0, Size=0xc74c9b0) returned 0x21c0020
	[0116.365] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x21c0020 | out: hHeap=0x390000) returned 1
	[0119.948] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.948] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0119.948] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xa8
	[0119.949] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa8
	[0119.951] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.951] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.951] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0119.952] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.952] Process32First (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0119.952] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.952] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.952] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0119.952] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.952] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0119.953] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.953] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.953] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0119.953] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.953] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0119.953] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.954] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.954] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0119.954] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.954] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0119.954] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.954] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.954] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0119.955] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.955] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0119.955] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.955] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.083] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.083] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.083] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.084] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.084] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.084] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.084] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.084] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0120.084] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.084] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.085] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.085] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.085] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0120.085] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.085] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.085] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.085] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.086] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0120.086] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.086] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.086] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.086] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.086] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0120.087] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.087] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.087] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.087] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.087] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.087] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.087] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.088] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.088] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.088] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.088] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.088] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.088] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.088] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.089] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.089] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.089] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.089] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.089] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.089] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.090] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.090] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.090] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.090] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.090] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.090] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.090] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.091] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.091] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.091] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0120.091] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.091] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.091] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.091] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.092] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.092] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.092] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.092] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.092] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.092] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0120.093] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.093] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.093] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.093] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.093] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.093] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.093] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.094] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.094] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.094] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0120.094] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.094] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.094] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.095] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.095] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.095] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.095] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.095] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.095] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.095] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.096] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.096] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.096] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.096] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.096] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0120.097] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.097] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.097] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.097] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.097] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0120.097] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.097] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.098] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.098] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.098] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0120.098] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.098] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.098] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.099] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.099] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.099] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.099] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.099] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.099] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.099] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.100] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.100] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.100] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.100] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.100] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.100] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.101] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.101] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.101] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.101] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.101] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.101] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.101] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.102] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.102] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0120.102] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.102] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.102] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.102] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.102] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.103] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.103] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.103] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.103] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.103] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0120.103] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.104] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.104] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.104] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0120.104] Process32Next (in: hSnapshot=0xa8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x349758, pcPriClassBase=3795512, dwFlags=0x39ea74, szExeFile="???4???4?9?\x05?4?4")) returned 0
	[0120.105] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.105] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.105] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.105] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xac
	[0120.105] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xac
	[0120.106] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.107] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.107] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.107] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.107] Process32First (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0120.107] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.107] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.107] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.108] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.108] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0120.108] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.108] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.108] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.108] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.108] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0120.109] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.109] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.109] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.109] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.109] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.109] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.110] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.110] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.110] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.110] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0120.110] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.110] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.110] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.111] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.111] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.111] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.111] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.111] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.112] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.112] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0120.112] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.112] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.112] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.112] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.112] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0120.113] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.113] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.113] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.113] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.113] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0120.114] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.114] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.114] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.114] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.114] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0120.114] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.114] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.115] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.115] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.115] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.115] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.115] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.115] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.115] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.116] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.116] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.116] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.116] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.116] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.116] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.117] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.117] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.117] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.117] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.117] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.117] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.117] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.118] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.118] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.118] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.118] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.118] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.118] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.118] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.119] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0120.119] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.119] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.119] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.119] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.119] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.120] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.120] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.120] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.120] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.120] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0120.120] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.120] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.121] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.121] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.121] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.121] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.121] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.121] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.121] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.122] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0120.122] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.122] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.122] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.122] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.122] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.123] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.123] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.123] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.123] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.123] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.123] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.123] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.124] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.124] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.124] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0120.124] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.124] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.124] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.124] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.125] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0120.125] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.125] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.125] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.125] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.125] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0120.126] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.126] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.126] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.126] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.126] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.126] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.127] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.127] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.223] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.223] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.224] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.224] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.224] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.224] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.224] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.224] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.225] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.225] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.225] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.225] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.225] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.225] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.225] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.226] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.226] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0120.226] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.226] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.226] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.226] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.226] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.227] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.227] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.227] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.227] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.227] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0120.228] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.228] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.228] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x70000
	[0120.228] CallWindowProcW (lpPrevWndFunc=0x70004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0120.228] Process32Next (in: hSnapshot=0xac, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x349758, pcPriClassBase=3795512, dwFlags=0x39ea74, szExeFile="???4???4?9?\x05?4?4")) returned 0
	[0120.228] VirtualFree (lpAddress=0x70000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.231] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0120.231] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0x70000
	[0120.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2, flAllocationType=0x3000, flProtect=0x4) returned 0x80000
	[0120.232] VirtualAlloc (lpAddress=0x0, dwSize=0x5, flAllocationType=0x3000, flProtect=0x4) returned 0x90000
	[0120.232] VirtualAlloc (lpAddress=0x0, dwSize=0xd, flAllocationType=0x3000, flProtect=0x4) returned 0xa0000
	[0120.232] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x1e0000
	[0120.232] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x1f0000
	[0120.232] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x200000
	[0120.232] VirtualAlloc (lpAddress=0x0, dwSize=0x3c, flAllocationType=0x3000, flProtect=0x4) returned 0x210000
	[0120.232] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x220000
	[0120.232] VirtualAlloc (lpAddress=0x0, dwSize=0xd200, flAllocationType=0x3000, flProtect=0x4) returned 0x230000
	[0120.232] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x349894, nSize=0x103 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0120.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0120.233] GetFileSize (in: hFile=0xb0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x49c53
	[0120.233] VirtualAlloc (lpAddress=0x0, dwSize=0x49c53, flAllocationType=0x3000, flProtect=0x4) returned 0x510000
	[0120.233] ReadFile (in: hFile=0xb0, lpBuffer=0x510000, nNumberOfBytesToRead=0x49c53, lpNumberOfBytesRead=0x349cac, lpOverlapped=0x0 | out: lpBuffer=0x510000*, lpNumberOfBytesRead=0x349cac*=0x49c53, lpOverlapped=0x0) returned 1
	[0120.237] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0x240000
	[0120.239] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.239] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x6
	[0120.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x90000, cbMultiByte=-1, lpWideCharStr=0x34a1fc, cchWideChar=50 | out: lpWideCharStr="ymgyr") returned 6
	[0120.240] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.240] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.240] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xe
	[0120.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xa0000, cbMultiByte=-1, lpWideCharStr=0x34a260, cchWideChar=50 | out: lpWideCharStr="bpomwdckuqiso") returned 14
	[0120.240] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.240] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.240] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.240] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb4
	[0120.240] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb4
	[0120.242] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.242] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.242] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.242] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.242] Process32First (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0120.243] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.243] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.243] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.243] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.243] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0120.244] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.244] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.244] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.244] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.244] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0120.244] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.245] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.245] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.245] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.245] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.245] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.245] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.245] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.246] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.246] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0120.246] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.246] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.246] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.246] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.246] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.247] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.247] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.247] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.247] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.247] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0120.248] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.248] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.248] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.248] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.248] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0120.248] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.249] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.249] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.249] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.249] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0120.249] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.249] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.249] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.250] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.250] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0120.250] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.250] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.250] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.250] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.250] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.251] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.251] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.251] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.251] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.251] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.252] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.252] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.252] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.252] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.252] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.253] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.253] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.253] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.253] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.253] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.253] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.253] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.254] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.254] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.254] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.254] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.254] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.254] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.255] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.255] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0120.255] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.255] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.255] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.255] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.255] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.256] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.256] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.256] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.256] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.256] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0120.257] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.257] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.257] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.257] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.257] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.257] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.257] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.258] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.258] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.258] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0120.258] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.258] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.258] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.259] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.259] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.259] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.259] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.259] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.259] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.259] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.260] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.260] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.260] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.260] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.260] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0120.260] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.261] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.261] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.261] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.261] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0120.261] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.261] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.262] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.262] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.262] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0120.262] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.262] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.262] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.263] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.263] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.263] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.263] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.263] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.263] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.263] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.264] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.264] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.264] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.264] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.264] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.264] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.265] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.265] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.265] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.265] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.265] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.265] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.265] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.266] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.266] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0120.266] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.266] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.266] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.266] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.266] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.267] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.267] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.267] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.361] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.361] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0120.361] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.361] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.362] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.362] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0120.362] Process32Next (in: hSnapshot=0xb4, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x349758, pcPriClassBase=3795512, dwFlags=0x39ea74, szExeFile="???4???4?9?\x05?4?4")) returned 0
	[0120.362] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.362] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.362] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.363] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb8
	[0120.363] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb8
	[0120.364] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.364] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.364] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.364] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.364] Process32First (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0120.364] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.365] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.365] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.365] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.365] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0120.365] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.365] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.366] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.366] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.366] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0120.366] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.366] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.366] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.367] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.367] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.367] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.367] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.367] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.367] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.367] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0120.368] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.368] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.368] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.368] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.368] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.369] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.369] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.369] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.369] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.369] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0120.370] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.370] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.370] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.370] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.370] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0120.370] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.371] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.371] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.371] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.371] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0120.371] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.371] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.371] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.372] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.372] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0120.372] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.372] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.372] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.372] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.372] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.373] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.373] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.373] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.373] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.373] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.374] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.374] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.374] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.374] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.374] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.374] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.374] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.375] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.375] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.375] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.375] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.375] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.375] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.376] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.376] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.376] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.376] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.376] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.376] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.376] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0120.377] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.377] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.377] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.377] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.377] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.378] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.378] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.378] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.378] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.378] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0120.378] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.379] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.379] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.379] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.379] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.379] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.379] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.379] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.380] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.380] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0120.380] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.380] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.380] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.380] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.380] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.381] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.381] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.381] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.381] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.381] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.382] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.382] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.382] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.382] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.382] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0120.382] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.382] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.383] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.383] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.383] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0120.383] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.383] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.383] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.384] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.384] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0120.384] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.384] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.384] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.384] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.384] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.385] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.385] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.385] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.385] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.385] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.386] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.386] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.386] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.386] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.386] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.386] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.386] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.387] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.387] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.387] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.387] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.387] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.387] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.388] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.388] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0120.388] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.388] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.388] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.388] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.388] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.389] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.389] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.389] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.389] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.389] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0120.389] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.389] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.390] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.390] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0120.390] Process32Next (in: hSnapshot=0xb8, lppe=0x349b04 | out: lppe=0x349b04*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x349758, pcPriClassBase=3795512, dwFlags=0x39ea74, szExeFile="???4???4?9?\x05?4?4")) returned 0
	[0120.390] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.390] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.390] VirtualAlloc (lpAddress=0x0, dwSize=0x16, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0120.391] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0120.391] Sleep (dwMilliseconds=0x1388) 
	[0125.400] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.400] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x349d64, nSize=0x103 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0125.400] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0125.400] VirtualAlloc (lpAddress=0x0, dwSize=0x25, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0125.401] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x360000
	[0125.401] VirtualAlloc (lpAddress=0x0, dwSize=0x410, flAllocationType=0x3000, flProtect=0x4) returned 0x360000
	[0125.401] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.401] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" "
	[0125.401] CreateProcessW (in: lpApplicationName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x349c00*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x349c98 | out: lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" ", lpProcessInformation=0x349c98*(hProcess=0xc0, hThread=0xbc, dwProcessId=0x7c8, dwThreadId=0x77c)) returned 1
	[0125.405] GetThreadContext (in: hThread=0xbc, lpContext=0x349934 | out: lpContext=0x349934*(ContextFlags=0x10007, Dr0=0x77dbfa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x349cbc, FloatSave.ErrorSelector=0x349af4, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0xa8, [37]=0x99, [38]=0x34, [39]=0x0, [40]=0x38, [41]=0xea, [42]=0x39, [43]=0x0, [44]=0x74, [45]=0xea, [46]=0x39, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0xe9, [51]=0x77, [52]=0xc0, [53]=0x99, [54]=0x34, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0xdb, [59]=0x77, [60]=0xd0, [61]=0x9c, [62]=0x34, [63]=0x0, [64]=0x64, [65]=0xea, [66]=0x39, [67]=0x0, [68]=0x84, [69]=0x4b, [70]=0x5, [71]=0x0, [72]=0xf4, [73]=0x9a, [74]=0x34, [75]=0x0, [76]=0x54, [77]=0x9c, [78]=0x34, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xd98432, Ebp=0x0, Eip=0x77da01c4, SegCs=0x23, EFlags=0x202, Esp=0x43fcc4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x35, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0xda, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x95, [39]=0x75, [40]=0x70, [41]=0x9c, [42]=0x34, [43]=0x0, [44]=0x58, [45]=0x9a, [46]=0x34, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0xa0, [53]=0x9c, [54]=0x34, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0xdb, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x34, [67]=0x0, [68]=0x8c, [69]=0x9c, [70]=0x34, [71]=0x0, [72]=0x74, [73]=0x9a, [74]=0x34, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0xbc, [81]=0x9c, [82]=0x34, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0xdb, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0xf0, [93]=0x9a, [94]=0x34, [95]=0x0, [96]=0xf1, [97]=0xfd, [98]=0xdd, [99]=0x77, [100]=0xa4, [101]=0x9a, [102]=0x34, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0xdb, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x8c, [113]=0x9c, [114]=0x34, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0xdb, [119]=0x77, [120]=0xf4, [121]=0x9a, [122]=0x34, [123]=0x0, [124]=0xe8, [125]=0x9a, [126]=0x34, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0xd4, [145]=0x99, [146]=0x34, [147]=0x0, [148]=0x8c, [149]=0x9c, [150]=0x34, [151]=0x0, [152]=0x18, [153]=0x9c, [154]=0x34, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0xe0, [159]=0x77, [160]=0xcd, [161]=0xda, [162]=0x32, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0xdc, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xbc, [181]=0x9c, [182]=0x34, [183]=0x0, [184]=0x28, [185]=0x9c, [186]=0x34, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0xdc, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0xdb, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0xdc, [199]=0x77, [200]=0xbd, [201]=0xfb, [202]=0xdd, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0xdb, [215]=0x77, [216]=0x70, [217]=0x9c, [218]=0x34, [219]=0x0, [220]=0xa0, [221]=0x9c, [222]=0x34, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x9a, [230]=0x34, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x54, [241]=0x9c, [242]=0x34, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0xbc, [249]=0x9c, [250]=0x34, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0xf4, [257]=0x9a, [258]=0x34, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x38, [265]=0xea, [266]=0x39, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0xda, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x96, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x96, [295]=0x75, [296]=0xe6, [297]=0xc6, [298]=0xad, [299]=0x6f, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x35, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0xda, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x95, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0x94, [365]=0x9b, [366]=0x34, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x80, [373]=0x9b, [374]=0x34, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x35, [387]=0x0, [388]=0xa0, [389]=0x9b, [390]=0x34, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x95, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x36, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0xd0, [417]=0x9b, [418]=0x34, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x35, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xd8, [443]=0x75, [444]=0x4, [445]=0x0, [446]=0x35, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x35, [463]=0x0, [464]=0x48, [465]=0x9c, [466]=0x34, [467]=0x0, [468]=0xfc, [469]=0x9b, [470]=0x34, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x35, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x48, [481]=0x9c, [482]=0x34, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xd8, [487]=0x75, [488]=0x51, [489]=0x6d, [490]=0xd8, [491]=0x75, [492]=0xed, [493]=0x2d, [494]=0xbc, [495]=0x6f, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x35, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0125.442] ReadProcessMemory (in: hProcess=0xc0, lpBaseAddress=0x7efde008, lpBuffer=0x349c94, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x349c94*, lpNumberOfBytesRead=0x0) returned 1
	[0125.445] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.448] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.449] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x349794 | out: Wow64Process=0x349794) returned 1
	[0125.451] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.452] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0125.452] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.452] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x960000
	[0125.452] ReadFile (in: hFile=0xc8, lpBuffer=0x960000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x3497d0, lpOverlapped=0x0 | out: lpBuffer=0x960000*, lpNumberOfBytesRead=0x3497d0*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.461] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xaa0000
	[0125.475] CloseHandle (hObject=0xc8) returned 1
	[0125.475] VirtualFree (lpAddress=0x960000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.491] VirtualFree (lpAddress=0xaa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.496] NtCreateSection (in: SectionHandle=0x3498f8, DesiredAccess=0xe, ObjectAttributes=0x0, MaximumSize=0x349c48, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x3498f8*=0xc8) returned 0x0
	[0125.499] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.502] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.502] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x349768 | out: Wow64Process=0x349768) returned 1
	[0125.505] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.505] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0125.505] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.506] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x960000
	[0125.506] ReadFile (in: hFile=0xc4, lpBuffer=0x960000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x3497a4, lpOverlapped=0x0 | out: lpBuffer=0x960000*, lpNumberOfBytesRead=0x3497a4*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.515] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xaa0000
	[0125.536] CloseHandle (hObject=0xc4) returned 1
	[0125.536] VirtualFree (lpAddress=0x960000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.541] VirtualFree (lpAddress=0xaa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.546] NtMapViewOfSection (in: SectionHandle=0xc8, ProcessHandle=0xc0, BaseAddress=0x3498ec*=0x400000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x3498e4*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x3498ec*=0x400000, SectionOffset=0x0, ViewSize=0x3498e4*=0x0) returned 0xc0000018
	[0125.549] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.552] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.552] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x349768 | out: Wow64Process=0x349768) returned 1
	[0125.555] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.555] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0125.556] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.556] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x960000
	[0125.556] ReadFile (in: hFile=0xc4, lpBuffer=0x960000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x3497a4, lpOverlapped=0x0 | out: lpBuffer=0x960000*, lpNumberOfBytesRead=0x3497a4*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.565] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xaa0000
	[0125.672] CloseHandle (hObject=0xc4) returned 1
	[0125.672] VirtualFree (lpAddress=0x960000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.677] VirtualFree (lpAddress=0xaa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.682] NtMapViewOfSection (in: SectionHandle=0xc8, ProcessHandle=0xc0, BaseAddress=0x3498ec*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x3498e4*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x3498ec*=0x70000, SectionOffset=0x0, ViewSize=0x3498e4*=0x12000) returned 0x0
	[0125.685] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.688] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.689] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x349768 | out: Wow64Process=0x349768) returned 1
	[0125.691] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.692] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0125.692] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.692] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x960000
	[0125.692] ReadFile (in: hFile=0xc4, lpBuffer=0x960000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x3497a4, lpOverlapped=0x0 | out: lpBuffer=0x960000*, lpNumberOfBytesRead=0x3497a4*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.701] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xaa0000
	[0125.808] CloseHandle (hObject=0xc4) returned 1
	[0125.808] VirtualFree (lpAddress=0x960000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.813] VirtualFree (lpAddress=0xaa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.818] NtMapViewOfSection (in: SectionHandle=0xc8, ProcessHandle=0xffffffffffffffff, BaseAddress=0x3498ec*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x3498e4*=0x12000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x3498ec*=0x370000, SectionOffset=0x0, ViewSize=0x3498e4*=0x12000) returned 0x0
	[0125.826] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.829] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.829] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x3497a8 | out: Wow64Process=0x3497a8) returned 1
	[0125.832] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.832] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0125.832] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.832] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x960000
	[0125.832] ReadFile (in: hFile=0xc4, lpBuffer=0x960000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x3497e4, lpOverlapped=0x0 | out: lpBuffer=0x960000*, lpNumberOfBytesRead=0x3497e4*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.841] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xaa0000
	[0125.949] CloseHandle (hObject=0xc4) returned 1
	[0125.949] VirtualFree (lpAddress=0x960000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.954] VirtualFree (lpAddress=0xaa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.960] NtWriteVirtualMemory (in: ProcessHandle=0xc0, BaseAddress=0x7efde008, Buffer=0x349cac*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x3498fc | out: Buffer=0x349cac*, NumberOfBytesWritten=0x3498fc*=0x4) returned 0x0
	[0125.960] SetThreadContext (hThread=0xbc, lpContext=0x349934*(ContextFlags=0x10007, Dr0=0x77dbfa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x349cbc, FloatSave.ErrorSelector=0x349af4, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0xa8, [37]=0x99, [38]=0x34, [39]=0x0, [40]=0x38, [41]=0xea, [42]=0x39, [43]=0x0, [44]=0x74, [45]=0xea, [46]=0x39, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0xe9, [51]=0x77, [52]=0xc0, [53]=0x99, [54]=0x34, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0xdb, [59]=0x77, [60]=0xd0, [61]=0x9c, [62]=0x34, [63]=0x0, [64]=0x64, [65]=0xea, [66]=0x39, [67]=0x0, [68]=0x84, [69]=0x4b, [70]=0x5, [71]=0x0, [72]=0xf4, [73]=0x9a, [74]=0x34, [75]=0x0, [76]=0x54, [77]=0x9c, [78]=0x34, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x72518, Ebp=0x0, Eip=0x77da01c4, SegCs=0x23, EFlags=0x202, Esp=0x43fcc4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x35, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0xda, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x95, [39]=0x75, [40]=0x70, [41]=0x9c, [42]=0x34, [43]=0x0, [44]=0x58, [45]=0x9a, [46]=0x34, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0xa0, [53]=0x9c, [54]=0x34, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0xdb, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x34, [67]=0x0, [68]=0x8c, [69]=0x9c, [70]=0x34, [71]=0x0, [72]=0x74, [73]=0x9a, [74]=0x34, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0xbc, [81]=0x9c, [82]=0x34, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0xdb, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0xf0, [93]=0x9a, [94]=0x34, [95]=0x0, [96]=0xf1, [97]=0xfd, [98]=0xdd, [99]=0x77, [100]=0xa4, [101]=0x9a, [102]=0x34, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0xdb, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x8c, [113]=0x9c, [114]=0x34, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0xdb, [119]=0x77, [120]=0xf4, [121]=0x9a, [122]=0x34, [123]=0x0, [124]=0xe8, [125]=0x9a, [126]=0x34, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0xd4, [145]=0x99, [146]=0x34, [147]=0x0, [148]=0x8c, [149]=0x9c, [150]=0x34, [151]=0x0, [152]=0x18, [153]=0x9c, [154]=0x34, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0xe0, [159]=0x77, [160]=0xcd, [161]=0xda, [162]=0x32, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0xdc, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xbc, [181]=0x9c, [182]=0x34, [183]=0x0, [184]=0x28, [185]=0x9c, [186]=0x34, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0xdc, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0xdb, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0xdc, [199]=0x77, [200]=0xbd, [201]=0xfb, [202]=0xdd, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0xdb, [215]=0x77, [216]=0x70, [217]=0x9c, [218]=0x34, [219]=0x0, [220]=0xa0, [221]=0x9c, [222]=0x34, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x9a, [230]=0x34, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x54, [241]=0x9c, [242]=0x34, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0xbc, [249]=0x9c, [250]=0x34, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0xf4, [257]=0x9a, [258]=0x34, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x38, [265]=0xea, [266]=0x39, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0xda, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x96, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x96, [295]=0x75, [296]=0xe6, [297]=0xc6, [298]=0xad, [299]=0x6f, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x35, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0xda, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x95, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0x94, [365]=0x9b, [366]=0x34, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x80, [373]=0x9b, [374]=0x34, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x35, [387]=0x0, [388]=0xa0, [389]=0x9b, [390]=0x34, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x95, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x36, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0xd0, [417]=0x9b, [418]=0x34, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x35, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xd8, [443]=0x75, [444]=0x4, [445]=0x0, [446]=0x35, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x35, [463]=0x0, [464]=0x48, [465]=0x9c, [466]=0x34, [467]=0x0, [468]=0xfc, [469]=0x9b, [470]=0x34, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x35, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x48, [481]=0x9c, [482]=0x34, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xd8, [487]=0x75, [488]=0x51, [489]=0x6d, [490]=0xd8, [491]=0x75, [492]=0xed, [493]=0x2d, [494]=0xbc, [495]=0x6f, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x35, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0125.963] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.966] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.966] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x3497d0 | out: Wow64Process=0x3497d0) returned 1
	[0125.969] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.969] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0125.969] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.969] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x960000
	[0125.970] ReadFile (in: hFile=0xc4, lpBuffer=0x960000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x34980c, lpOverlapped=0x0 | out: lpBuffer=0x960000*, lpNumberOfBytesRead=0x34980c*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.978] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xaa0000
	[0125.991] CloseHandle (hObject=0xc4) returned 1
	[0125.991] VirtualFree (lpAddress=0x960000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.077] VirtualFree (lpAddress=0xaa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.082] NtResumeThread (in: ThreadHandle=0xbc, SuspendCount=0x34990c | out: SuspendCount=0x34990c*=0x1) returned 0x0
	[0126.118] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0126.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x350000
	[0126.118] CallWindowProcW (lpPrevWndFunc=0x350004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0126.119] VirtualProtectEx (in: hProcess=0xc0, lpAddress=0x0, dwSize=0x12000, flNewProtect=0x1, lpflOldProtect=0x349c44 | out: lpflOldProtect=0x349c44*=0xc77b) returned 0
	[0126.119] VirtualFree (lpAddress=0x350000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.119] CloseHandle (hObject=0xc0) returned 1
	[0126.119] CloseHandle (hObject=0xbc) returned 1
	[0126.119] CloseHandle (hObject=0xc8) returned 1
	[0126.122] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.125] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.125] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x3497d8 | out: Wow64Process=0x3497d8) returned 1
	[0126.128] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.128] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0126.128] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0126.128] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x960000
	[0126.128] ReadFile (in: hFile=0xc8, lpBuffer=0x960000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x349814, lpOverlapped=0x0 | out: lpBuffer=0x960000*, lpNumberOfBytesRead=0x349814*=0x13b740, lpOverlapped=0x0) returned 1
	[0126.137] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xaa0000
	[0126.297] CloseHandle (hObject=0xc8) returned 1
	[0126.297] VirtualFree (lpAddress=0x960000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.302] VirtualFree (lpAddress=0xaa0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.308] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x370000) returned 0x0
	[0126.308] ExitProcess (uExitCode=0x0) 
	[0126.309] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a82e0 | out: hHeap=0x390000) returned 1

Process:
	id = "6"
	image_name = "rsfd234df.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"
	page_root = "0x76fc9000"
	os_pid = "0x7a8"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "autostart"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 28
	os_tid = 0x7ac

	[0097.429] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1bf7cc | out: lpSystemTimeAsFileTime=0x1bf7cc*(dwLowDateTime=0x1bca32a0, dwHighDateTime=0x1d57294)) 
	[0097.429] GetCurrentThreadId () returned 0x7ac
	[0097.429] GetCurrentProcessId () returned 0x7a8
	[0097.429] QueryPerformanceCounter (in: lpPerformanceCount=0x1bf7c4 | out: lpPerformanceCount=0x1bf7c4*=6384851829) returned 1
	[0098.164] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0098.164] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.164] GetLastError () returned 0x57
	[0098.164] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x757a0000
	[0098.169] GetProcAddress (hModule=0x757a0000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0098.170] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.170] GetLastError () returned 0x57
	[0098.170] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0098.179] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.179] GetLastError () returned 0x57
	[0098.179] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76300000
	[0098.179] GetProcAddress (hModule=0x76300000, lpProcName="FlsAlloc") returned 0x76314f2b
	[0098.179] GetProcAddress (hModule=0x76300000, lpProcName="FlsSetValue") returned 0x76314208
	[0098.179] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.179] GetLastError () returned 0x57
	[0098.179] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x757a0000
	[0098.179] GetProcAddress (hModule=0x757a0000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0098.179] GetProcessHeap () returned 0x460000
	[0098.179] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.179] GetLastError () returned 0x57
	[0098.179] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0098.181] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.181] GetLastError () returned 0x57
	[0098.181] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76300000
	[0098.181] GetProcAddress (hModule=0x76300000, lpProcName="FlsAlloc") returned 0x76314f2b
	[0098.181] GetLastError () returned 0x57
	[0098.181] GetProcAddress (hModule=0x76300000, lpProcName="FlsGetValue") returned 0x76311252
	[0098.181] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x364) returned 0x4782e0
	[0098.181] GetProcAddress (hModule=0x76300000, lpProcName="FlsSetValue") returned 0x76314208
	[0098.182] SetLastError (dwErrCode=0x57) 
	[0098.182] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0xc00) returned 0x478650
	[0098.183] GetStartupInfoW (in: lpStartupInfo=0x1bf6f4 | out: lpStartupInfo=0x1bf6f4*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xd98da0, hStdOutput=0x664f3e58, hStdError=0xfffffffe)) 
	[0098.183] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0098.183] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0098.183] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0098.183] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" "
	[0098.183] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" "
	[0098.183] GetLastError () returned 0x57
	[0098.183] SetLastError (dwErrCode=0x57) 
	[0098.183] GetLastError () returned 0x57
	[0098.183] SetLastError (dwErrCode=0x57) 
	[0098.183] GetACP () returned 0x4e4
	[0098.183] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x0, Size=0x220) returned 0x477f98
	[0098.183] IsValidCodePage (CodePage=0x4e4) returned 1
	[0098.183] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x1bf724 | out: lpCPInfo=0x1bf724) returned 1
	[0098.183] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x1befec | out: lpCPInfo=0x1befec) returned 1
	[0098.183] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1bf600, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0098.183] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1bf600, cbMultiByte=256, lpWideCharStr=0x1bed88, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0098.183] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpCharType=0x1bf000 | out: lpCharType=0x1bf000) returned 1
	[0098.184] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1bf600, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0098.184] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1bf600, cbMultiByte=256, lpWideCharStr=0x1bed38, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0098.184] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.184] GetLastError () returned 0x57
	[0098.184] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0098.184] GetProcAddress (hModule=0x76300000, lpProcName="LCMapStringEx") returned 0x763947f1
	[0098.206] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0098.213] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x1beb28, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0098.213] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x1bf500, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x94[\x8ef<÷\x1b", lpUsedDefaultChar=0x0) returned 256
	[0098.213] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1bf600, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0098.213] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1bf600, cbMultiByte=256, lpWideCharStr=0x1bed58, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÙĀ") returned 256
	[0098.213] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÙĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0098.213] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÙĀ", cchSrc=256, lpDestStr=0x1beb48, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
	[0098.213] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x1bf400, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x94[\x8ef<÷\x1b", lpUsedDefaultChar=0x0) returned 256
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x0, Size=0x80) returned 0x4781c0
	[0098.213] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xdac2a0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x7c) returned 0x47a258
	[0098.213] RtlInitializeSListHead (in: ListHead=0xdabe98 | out: ListHead=0xdabe98) 
	[0098.213] GetLastError () returned 0x0
	[0098.213] SetLastError (dwErrCode=0x0) 
	[0098.213] GetEnvironmentStringsW () returned 0x47a2e0*
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x0, Size=0xb02) returned 0x47adf0
	[0098.213] FreeEnvironmentStringsW (penv=0x47a2e0) returned 1
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x9c) returned 0x47b900
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x3e) returned 0x476218
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x6c) returned 0x47b9a8
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x6e) returned 0x47ba20
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x78) returned 0x46f4b0
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x62) returned 0x47ba98
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x2e) returned 0x47bb08
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x48) returned 0x47bb40
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x28) returned 0x47bb90
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x1a) returned 0x479c28
	[0098.213] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x4a) returned 0x47bbc0
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x72) returned 0x46f530
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x30) returned 0x47bc18
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x2e) returned 0x47bc50
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x1c) returned 0x479c50
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0xd2) returned 0x47bc88
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x7c) returned 0x47bd68
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x36) returned 0x47bdf0
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x3a) returned 0x476260
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x90) returned 0x47be30
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x24) returned 0x47bec8
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x30) returned 0x47bef8
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x36) returned 0x47bf30
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x48) returned 0x47bf70
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x52) returned 0x47a2e0
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x3c) returned 0x4762a8
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x82) returned 0x47a340
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x2e) returned 0x47a3d0
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x28) returned 0x47a408
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x1e) returned 0x479c78
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x2c) returned 0x47a438
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x54) returned 0x47a470
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x52) returned 0x47a4d0
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x2a) returned 0x47a530
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x3c) returned 0x4762f0
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x54) returned 0x47a568
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x24) returned 0x47a5c8
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x30) returned 0x47a5f8
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x8c) returned 0x47a630
	[0098.214] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47adf0 | out: hHeap=0x460000) returned 1
	[0098.214] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x800) returned 0x47a6c8
	[0098.214] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0098.215] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xd9897a) returned 0x0
	[0098.215] GetStartupInfoW (in: lpStartupInfo=0x1bf75c | out: lpStartupInfo=0x1bf75c*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0098.215] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x0, Size=0xc74c9b0) returned 0x21c0020
	[0115.654] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x21c0020 | out: hHeap=0x460000) returned 1
	[0119.140] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.140] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.140] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xa8
	[0119.142] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa8
	[0119.286] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.287] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.287] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.287] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.288] Process32First (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0119.288] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.288] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.288] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.289] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.289] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0119.289] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.290] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.290] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.290] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.290] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0119.290] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.291] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.291] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.291] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.291] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0119.291] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.291] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.292] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.292] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.292] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0119.292] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.292] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.292] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.293] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.293] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0119.293] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.293] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.293] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.294] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.294] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0119.294] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.294] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.294] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.294] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.295] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0119.295] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.295] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.295] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.295] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.295] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0119.296] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.296] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.296] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.296] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.296] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0119.297] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.297] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.297] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.297] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.297] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.298] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.298] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.298] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.298] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.298] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.298] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.299] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.299] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.299] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.299] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.299] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.299] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.299] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.300] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.300] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.300] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.300] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.301] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.301] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.301] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.301] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.301] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.301] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.302] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.302] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0119.302] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.302] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.302] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.303] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.303] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.303] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.303] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.303] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.303] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.303] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0119.304] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.304] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.304] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.304] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.304] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.305] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.305] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.305] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.305] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.305] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0119.306] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.306] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.306] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.306] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.306] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0119.306] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.307] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.307] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.307] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.307] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.307] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.307] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.308] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.308] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.308] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0119.308] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.308] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.308] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.309] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.309] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0119.309] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.309] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.309] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.310] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.310] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0119.310] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.310] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.310] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.310] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.310] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.311] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.311] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.311] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.311] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.311] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.312] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.312] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.312] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.312] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.312] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.313] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.313] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.313] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.313] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.313] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.313] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.314] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.314] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.314] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.314] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0119.314] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.314] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.315] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.315] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.315] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0119.315] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.315] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.315] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.316] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.316] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0119.316] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.316] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.317] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.317] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0119.317] Process32Next (in: hSnapshot=0xa8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x1b949c, pcPriClassBase=4647480, dwFlags=0x46ea74, szExeFile="???\x1b???\x1b?F?+?\x1b?\x1b")) returned 0
	[0119.318] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.318] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.318] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.318] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xac
	[0119.318] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xac
	[0119.320] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.320] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.320] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.320] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.321] Process32First (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0119.321] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.321] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.321] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.322] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.322] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0119.322] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.323] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.323] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.323] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.323] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0119.323] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.323] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.324] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.324] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.324] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0119.324] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.324] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.324] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.325] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.325] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0119.325] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.325] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.325] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.326] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.326] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0119.326] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.326] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.326] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.326] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.327] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0119.327] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.327] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.327] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.327] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.327] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0119.328] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.328] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.328] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.328] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.328] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0119.329] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.329] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.329] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.329] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.329] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0119.330] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.330] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.330] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.330] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.331] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.331] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.331] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.331] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.480] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.480] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.480] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.480] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.480] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.481] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.481] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.481] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.481] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.481] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.482] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.482] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.482] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.482] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.482] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.482] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.483] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.483] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.483] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.483] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.483] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.483] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0119.484] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.484] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.484] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.484] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.484] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.485] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.485] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.485] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.485] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.485] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0119.485] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.486] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.486] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.486] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.486] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.486] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.486] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.487] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.487] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.487] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0119.487] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.488] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.488] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.488] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.488] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0119.488] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.488] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.489] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.489] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.489] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.489] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.489] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.489] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.490] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.490] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0119.490] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.490] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.490] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.490] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.491] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0119.491] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.491] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.491] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.491] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.491] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0119.492] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.492] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.492] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.492] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.492] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.493] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.493] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.493] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.493] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.493] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.493] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.494] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.494] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.494] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.494] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.494] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.494] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.495] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.495] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.495] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.495] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.495] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.495] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.496] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.496] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0119.496] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.496] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.496] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.497] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.497] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0119.497] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.497] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.497] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.497] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.497] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0119.498] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.498] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.498] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xb0000
	[0119.498] CallWindowProcW (lpPrevWndFunc=0xb0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0119.498] Process32Next (in: hSnapshot=0xac, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x1b949c, pcPriClassBase=4647480, dwFlags=0x46ea74, szExeFile="???\x1b???\x1b?F?+?\x1b?\x1b")) returned 0
	[0119.499] VirtualFree (lpAddress=0xb0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.501] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0119.502] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0xb0000
	[0119.502] VirtualAlloc (lpAddress=0x0, dwSize=0x2, flAllocationType=0x3000, flProtect=0x4) returned 0x2b0000
	[0119.502] VirtualAlloc (lpAddress=0x0, dwSize=0x5, flAllocationType=0x3000, flProtect=0x4) returned 0x2c0000
	[0119.502] VirtualAlloc (lpAddress=0x0, dwSize=0xd, flAllocationType=0x3000, flProtect=0x4) returned 0x350000
	[0119.502] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x360000
	[0119.502] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x370000
	[0119.502] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x380000
	[0119.503] VirtualAlloc (lpAddress=0x0, dwSize=0x3c, flAllocationType=0x3000, flProtect=0x4) returned 0x390000
	[0119.503] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x3a0000
	[0119.503] VirtualAlloc (lpAddress=0x0, dwSize=0xd200, flAllocationType=0x3000, flProtect=0x4) returned 0x3b0000
	[0119.503] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1b95d8, nSize=0x103 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0119.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0119.504] GetFileSize (in: hFile=0xb0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x49c53
	[0119.504] VirtualAlloc (lpAddress=0x0, dwSize=0x49c53, flAllocationType=0x3000, flProtect=0x4) returned 0x3c0000
	[0119.504] ReadFile (in: hFile=0xb0, lpBuffer=0x3c0000, nNumberOfBytesToRead=0x49c53, lpNumberOfBytesRead=0x1b99f0, lpOverlapped=0x0 | out: lpBuffer=0x3c0000*, lpNumberOfBytesRead=0x1b99f0*=0x49c53, lpOverlapped=0x0) returned 1
	[0119.511] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0x410000
	[0119.514] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.514] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x6
	[0119.515] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2c0000, cbMultiByte=-1, lpWideCharStr=0x1b9f40, cchWideChar=50 | out: lpWideCharStr="ymgyr") returned 6
	[0119.515] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.515] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.516] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xe
	[0119.516] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x350000, cbMultiByte=-1, lpWideCharStr=0x1b9fa4, cchWideChar=50 | out: lpWideCharStr="bpomwdckuqiso") returned 14
	[0119.516] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.516] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.516] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.517] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb4
	[0119.517] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb4
	[0119.660] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.660] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.661] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.661] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.662] Process32First (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0119.662] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.662] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.662] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.662] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.663] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0119.663] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.663] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.663] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.664] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.664] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0119.664] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.664] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.664] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.665] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.665] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0119.665] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.665] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.665] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.665] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.666] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0119.666] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.666] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.666] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.666] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.666] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0119.667] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.667] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.667] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.667] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.667] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0119.668] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.668] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.668] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.668] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.668] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0119.669] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.669] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.669] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.669] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.669] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0119.669] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.670] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.670] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.670] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.670] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0119.670] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.670] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.671] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.671] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.671] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.671] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.671] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.671] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.672] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.672] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.672] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.672] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.672] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.673] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.673] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.673] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.673] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.673] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.673] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.674] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.674] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.674] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.674] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.675] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.675] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.675] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.675] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.675] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.676] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.676] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0119.676] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.676] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.676] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.677] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.677] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.677] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.677] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.677] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.677] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.678] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0119.678] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.678] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.678] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.678] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.678] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.679] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.679] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.679] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.679] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.679] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0119.680] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.680] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.680] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.680] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.680] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0119.680] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.681] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.681] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.681] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.681] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.681] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.682] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.682] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.682] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.682] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0119.682] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.682] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.682] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.683] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.683] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0119.683] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.683] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.683] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.684] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.684] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0119.684] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.684] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.684] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.685] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.685] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.685] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.685] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.685] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.685] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.685] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.686] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.686] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.686] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.686] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.686] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.687] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.687] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.687] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.687] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.687] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.688] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.688] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.688] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.688] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.688] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0119.688] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.689] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.689] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.689] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.689] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0119.689] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.689] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.690] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.690] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.690] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0119.690] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.691] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.691] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.691] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0119.691] Process32Next (in: hSnapshot=0xb4, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x1b949c, pcPriClassBase=4647480, dwFlags=0x46ea74, szExeFile="???\x1b???\x1b?F?+?\x1b?\x1b")) returned 0
	[0119.691] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.691] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.691] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.692] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb8
	[0119.692] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb8
	[0119.693] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.693] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.694] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.694] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.694] Process32First (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0119.694] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.694] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.694] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.695] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.695] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0119.695] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.695] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.695] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.695] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.696] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0119.696] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.696] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.696] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.696] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.696] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0119.697] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.697] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.697] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.697] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.697] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0119.697] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.698] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.698] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.698] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.698] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0119.698] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.698] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.699] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.699] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.699] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0119.699] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.699] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.699] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.700] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.700] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0119.700] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.700] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.700] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.700] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.700] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0119.701] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.701] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.701] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.701] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.701] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0119.702] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.702] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.702] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.702] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.702] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.702] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.702] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.703] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.703] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.703] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.703] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.703] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.703] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.704] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.704] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.704] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.704] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.704] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.704] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.704] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.705] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.705] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.705] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.705] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.705] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.893] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.893] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.893] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.894] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.894] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0119.894] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.894] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.894] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.894] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.894] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.895] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.895] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.895] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.895] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.895] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0119.896] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.896] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.896] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.896] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.896] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.896] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.896] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.897] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.897] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.897] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0119.897] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.897] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.897] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.898] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.898] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0119.898] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.898] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.898] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.898] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.898] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0119.899] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.899] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.899] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.899] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.899] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0119.899] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.900] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.900] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.900] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.900] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0119.900] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.900] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.900] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.901] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.901] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0119.901] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.901] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.901] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.902] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.902] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.902] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.902] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.902] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.902] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.902] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.903] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.903] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.903] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.903] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.903] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.903] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.904] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.904] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.904] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.904] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0119.904] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.904] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.904] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.905] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.905] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0119.905] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.905] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.905] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.905] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.905] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0119.906] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.906] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.906] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.906] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0119.906] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0119.907] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.907] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.907] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.907] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0119.907] Process32Next (in: hSnapshot=0xb8, lppe=0x1b9848 | out: lppe=0x1b9848*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x1b949c, pcPriClassBase=4647480, dwFlags=0x46ea74, szExeFile="???\x1b???\x1b?F?+?\x1b?\x1b")) returned 0
	[0119.907] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0119.907] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0119.908] VirtualAlloc (lpAddress=0x0, dwSize=0x16, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0119.908] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0119.908] Sleep (dwMilliseconds=0x1388) 
	[0124.901] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.901] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1b9aa8, nSize=0x103 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0124.901] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0124.901] VirtualAlloc (lpAddress=0x0, dwSize=0x25, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0124.902] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x570000
	[0124.902] VirtualAlloc (lpAddress=0x0, dwSize=0x410, flAllocationType=0x3000, flProtect=0x4) returned 0x570000
	[0124.902] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.902] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" "
	[0124.902] CreateProcessW (in: lpApplicationName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x1b9944*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1b99dc | out: lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" ", lpProcessInformation=0x1b99dc*(hProcess=0xc0, hThread=0xbc, dwProcessId=0x30c, dwThreadId=0x768)) returned 1
	[0124.914] GetThreadContext (in: hThread=0xbc, lpContext=0x1b9678 | out: lpContext=0x1b9678*(ContextFlags=0x10007, Dr0=0x77dbfa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x1b9a00, FloatSave.ErrorSelector=0x1b9838, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0xec, [37]=0x96, [38]=0x1b, [39]=0x0, [40]=0x38, [41]=0xea, [42]=0x46, [43]=0x0, [44]=0x74, [45]=0xea, [46]=0x46, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0xe9, [51]=0x77, [52]=0x4, [53]=0x97, [54]=0x1b, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0xdb, [59]=0x77, [60]=0x14, [61]=0x9a, [62]=0x1b, [63]=0x0, [64]=0x64, [65]=0xea, [66]=0x46, [67]=0x0, [68]=0x40, [69]=0x4e, [70]=0x2b, [71]=0x0, [72]=0x38, [73]=0x98, [74]=0x1b, [75]=0x0, [76]=0x98, [77]=0x99, [78]=0x1b, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xd98432, Ebp=0x0, Eip=0x77da01c4, SegCs=0x23, EFlags=0x202, Esp=0x28fdf8, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x56, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0xda, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x95, [39]=0x75, [40]=0xb4, [41]=0x99, [42]=0x1b, [43]=0x0, [44]=0x9c, [45]=0x97, [46]=0x1b, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0xe4, [53]=0x99, [54]=0x1b, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0xdb, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x1b, [67]=0x0, [68]=0xd0, [69]=0x99, [70]=0x1b, [71]=0x0, [72]=0xb8, [73]=0x97, [74]=0x1b, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x9a, [82]=0x1b, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0xdb, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x34, [93]=0x98, [94]=0x1b, [95]=0x0, [96]=0x9f, [97]=0xf1, [98]=0xf2, [99]=0x77, [100]=0xe8, [101]=0x97, [102]=0x1b, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0xdb, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0xd0, [113]=0x99, [114]=0x1b, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0xdb, [119]=0x77, [120]=0x38, [121]=0x98, [122]=0x1b, [123]=0x0, [124]=0x2c, [125]=0x98, [126]=0x1b, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x18, [145]=0x97, [146]=0x1b, [147]=0x0, [148]=0xd0, [149]=0x99, [150]=0x1b, [151]=0x0, [152]=0x5c, [153]=0x99, [154]=0x1b, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0xe0, [159]=0x77, [160]=0x6f, [161]=0xdb, [162]=0x32, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0xdc, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x9a, [182]=0x1b, [183]=0x0, [184]=0x6c, [185]=0x99, [186]=0x1b, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0xdc, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0xdb, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0xdc, [199]=0x77, [200]=0x5b, [201]=0xff, [202]=0xf2, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0xdb, [215]=0x77, [216]=0xb4, [217]=0x99, [218]=0x1b, [219]=0x0, [220]=0xe4, [221]=0x99, [222]=0x1b, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x98, [230]=0x1b, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x98, [241]=0x99, [242]=0x1b, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0x0, [249]=0x9a, [250]=0x1b, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x38, [257]=0x98, [258]=0x1b, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x38, [265]=0xea, [266]=0x46, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0xda, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x96, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x96, [295]=0x75, [296]=0x6, [297]=0xc1, [298]=0xef, [299]=0x6b, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x56, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0xda, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x95, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0xd8, [365]=0x98, [366]=0x1b, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0xc4, [373]=0x98, [374]=0x1b, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x56, [387]=0x0, [388]=0xe4, [389]=0x98, [390]=0x1b, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x95, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x57, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x14, [417]=0x99, [418]=0x1b, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x56, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xd8, [443]=0x75, [444]=0x4, [445]=0x0, [446]=0x56, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x56, [463]=0x0, [464]=0x8c, [465]=0x99, [466]=0x1b, [467]=0x0, [468]=0x40, [469]=0x99, [470]=0x1b, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x56, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x8c, [481]=0x99, [482]=0x1b, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xd8, [487]=0x75, [488]=0x51, [489]=0x6d, [490]=0xd8, [491]=0x75, [492]=0x6e, [493]=0x88, [494]=0x28, [495]=0x69, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x56, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0124.916] ReadProcessMemory (in: hProcess=0xc0, lpBaseAddress=0x7efde008, lpBuffer=0x1b99d8, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x1b99d8*, lpNumberOfBytesRead=0x0) returned 1
	[0124.919] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0124.922] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0124.923] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x1b94d8 | out: Wow64Process=0x1b94d8) returned 1
	[0124.925] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0124.926] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0124.926] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0124.926] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x580000
	[0124.926] ReadFile (in: hFile=0xc8, lpBuffer=0x580000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x1b9514, lpOverlapped=0x0 | out: lpBuffer=0x580000*, lpNumberOfBytesRead=0x1b9514*=0x13b740, lpOverlapped=0x0) returned 1
	[0124.953] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0x9f0000
	[0124.967] CloseHandle (hObject=0xc8) returned 1
	[0124.967] VirtualFree (lpAddress=0x580000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.973] VirtualFree (lpAddress=0x9f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0124.979] NtCreateSection (in: SectionHandle=0x1b963c, DesiredAccess=0xe, ObjectAttributes=0x0, MaximumSize=0x1b998c, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x1b963c*=0xc8) returned 0x0
	[0124.982] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0124.985] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0124.985] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x1b94ac | out: Wow64Process=0x1b94ac) returned 1
	[0124.988] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0124.988] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0124.988] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0124.988] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x580000
	[0124.988] ReadFile (in: hFile=0xc4, lpBuffer=0x580000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x1b94e8, lpOverlapped=0x0 | out: lpBuffer=0x580000*, lpNumberOfBytesRead=0x1b94e8*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.007] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0x9f0000
	[0125.017] CloseHandle (hObject=0xc4) returned 1
	[0125.017] VirtualFree (lpAddress=0x580000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.022] VirtualFree (lpAddress=0x9f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.028] NtMapViewOfSection (in: SectionHandle=0xc8, ProcessHandle=0xc0, BaseAddress=0x1b9630*=0x400000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x1b9628*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x1b9630*=0x400000, SectionOffset=0x0, ViewSize=0x1b9628*=0x12000) returned 0x0
	[0125.030] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.034] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.034] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x1b94ac | out: Wow64Process=0x1b94ac) returned 1
	[0125.037] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.037] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0125.037] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.037] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x580000
	[0125.037] ReadFile (in: hFile=0xc4, lpBuffer=0x580000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x1b94e8, lpOverlapped=0x0 | out: lpBuffer=0x580000*, lpNumberOfBytesRead=0x1b94e8*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.053] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0x9f0000
	[0125.062] CloseHandle (hObject=0xc4) returned 1
	[0125.062] VirtualFree (lpAddress=0x580000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.068] VirtualFree (lpAddress=0x9f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.073] NtMapViewOfSection (in: SectionHandle=0xc8, ProcessHandle=0xffffffffffffffff, BaseAddress=0x1b9630*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x1b9628*=0x12000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x1b9630*=0x580000, SectionOffset=0x0, ViewSize=0x1b9628*=0x12000) returned 0x0
	[0125.076] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.079] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.080] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x1b94ec | out: Wow64Process=0x1b94ec) returned 1
	[0125.083] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.083] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0125.083] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.083] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x9f0000
	[0125.083] ReadFile (in: hFile=0xc4, lpBuffer=0x9f0000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x1b9528, lpOverlapped=0x0 | out: lpBuffer=0x9f0000*, lpNumberOfBytesRead=0x1b9528*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.103] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xb30000
	[0125.112] CloseHandle (hObject=0xc4) returned 1
	[0125.112] VirtualFree (lpAddress=0x9f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.118] VirtualFree (lpAddress=0xb30000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.123] NtWriteVirtualMemory (in: ProcessHandle=0xc0, BaseAddress=0x7efde008, Buffer=0x1b99f0*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x1b9640 | out: Buffer=0x1b99f0*, NumberOfBytesWritten=0x1b9640*=0x4) returned 0x0
	[0125.123] SetThreadContext (hThread=0xbc, lpContext=0x1b9678*(ContextFlags=0x10007, Dr0=0x77dbfa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x1b9a00, FloatSave.ErrorSelector=0x1b9838, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0xec, [37]=0x96, [38]=0x1b, [39]=0x0, [40]=0x38, [41]=0xea, [42]=0x46, [43]=0x0, [44]=0x74, [45]=0xea, [46]=0x46, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0xe9, [51]=0x77, [52]=0x4, [53]=0x97, [54]=0x1b, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0xdb, [59]=0x77, [60]=0x14, [61]=0x9a, [62]=0x1b, [63]=0x0, [64]=0x64, [65]=0xea, [66]=0x46, [67]=0x0, [68]=0x40, [69]=0x4e, [70]=0x2b, [71]=0x0, [72]=0x38, [73]=0x98, [74]=0x1b, [75]=0x0, [76]=0x98, [77]=0x99, [78]=0x1b, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x402518, Ebp=0x0, Eip=0x77da01c4, SegCs=0x23, EFlags=0x202, Esp=0x28fdf8, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x56, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0xda, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x95, [39]=0x75, [40]=0xb4, [41]=0x99, [42]=0x1b, [43]=0x0, [44]=0x9c, [45]=0x97, [46]=0x1b, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0xe4, [53]=0x99, [54]=0x1b, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0xdb, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x1b, [67]=0x0, [68]=0xd0, [69]=0x99, [70]=0x1b, [71]=0x0, [72]=0xb8, [73]=0x97, [74]=0x1b, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x9a, [82]=0x1b, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0xdb, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x34, [93]=0x98, [94]=0x1b, [95]=0x0, [96]=0x9f, [97]=0xf1, [98]=0xf2, [99]=0x77, [100]=0xe8, [101]=0x97, [102]=0x1b, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0xdb, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0xd0, [113]=0x99, [114]=0x1b, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0xdb, [119]=0x77, [120]=0x38, [121]=0x98, [122]=0x1b, [123]=0x0, [124]=0x2c, [125]=0x98, [126]=0x1b, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x18, [145]=0x97, [146]=0x1b, [147]=0x0, [148]=0xd0, [149]=0x99, [150]=0x1b, [151]=0x0, [152]=0x5c, [153]=0x99, [154]=0x1b, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0xe0, [159]=0x77, [160]=0x6f, [161]=0xdb, [162]=0x32, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0xdc, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x9a, [182]=0x1b, [183]=0x0, [184]=0x6c, [185]=0x99, [186]=0x1b, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0xdc, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0xdb, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0xdc, [199]=0x77, [200]=0x5b, [201]=0xff, [202]=0xf2, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0xdb, [215]=0x77, [216]=0xb4, [217]=0x99, [218]=0x1b, [219]=0x0, [220]=0xe4, [221]=0x99, [222]=0x1b, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x98, [230]=0x1b, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x98, [241]=0x99, [242]=0x1b, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0x0, [249]=0x9a, [250]=0x1b, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x38, [257]=0x98, [258]=0x1b, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x38, [265]=0xea, [266]=0x46, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0xda, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x96, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x96, [295]=0x75, [296]=0x6, [297]=0xc1, [298]=0xef, [299]=0x6b, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x56, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0xda, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x95, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0xd8, [365]=0x98, [366]=0x1b, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0xc4, [373]=0x98, [374]=0x1b, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x56, [387]=0x0, [388]=0xe4, [389]=0x98, [390]=0x1b, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x95, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x57, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x14, [417]=0x99, [418]=0x1b, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x56, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xd8, [443]=0x75, [444]=0x4, [445]=0x0, [446]=0x56, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x56, [463]=0x0, [464]=0x8c, [465]=0x99, [466]=0x1b, [467]=0x0, [468]=0x40, [469]=0x99, [470]=0x1b, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x56, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x8c, [481]=0x99, [482]=0x1b, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xd8, [487]=0x75, [488]=0x51, [489]=0x6d, [490]=0xd8, [491]=0x75, [492]=0x6e, [493]=0x88, [494]=0x28, [495]=0x69, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x56, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0125.126] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.129] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.130] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x1b9514 | out: Wow64Process=0x1b9514) returned 1
	[0125.132] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.133] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0125.133] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.133] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x9f0000
	[0125.133] ReadFile (in: hFile=0xc4, lpBuffer=0x9f0000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x1b9550, lpOverlapped=0x0 | out: lpBuffer=0x9f0000*, lpNumberOfBytesRead=0x1b9550*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.143] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xb30000
	[0125.152] CloseHandle (hObject=0xc4) returned 1
	[0125.152] VirtualFree (lpAddress=0x9f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.157] VirtualFree (lpAddress=0xb30000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.162] NtResumeThread (in: ThreadHandle=0xbc, SuspendCount=0x1b9650 | out: SuspendCount=0x1b9650*=0x1) returned 0x0
	[0125.189] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0125.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x560000
	[0125.259] CallWindowProcW (lpPrevWndFunc=0x560004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0125.259] VirtualProtectEx (in: hProcess=0xc0, lpAddress=0x0, dwSize=0x12000, flNewProtect=0x1, lpflOldProtect=0x1b9988 | out: lpflOldProtect=0x1b9988*=0xc77b) returned 0
	[0125.259] VirtualFree (lpAddress=0x560000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.259] CloseHandle (hObject=0xc0) returned 1
	[0125.259] CloseHandle (hObject=0xbc) returned 1
	[0125.259] CloseHandle (hObject=0xc8) returned 1
	[0125.262] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.265] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.265] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x1b951c | out: Wow64Process=0x1b951c) returned 1
	[0125.268] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.268] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0125.268] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.269] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x9f0000
	[0125.269] ReadFile (in: hFile=0xc8, lpBuffer=0x9f0000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x1b9558, lpOverlapped=0x0 | out: lpBuffer=0x9f0000*, lpNumberOfBytesRead=0x1b9558*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.288] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xb30000
	[0125.301] CloseHandle (hObject=0xc8) returned 1
	[0125.301] VirtualFree (lpAddress=0x9f0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.307] VirtualFree (lpAddress=0xb30000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.312] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x580000) returned 0x0
	[0125.312] ExitProcess (uExitCode=0x0) 
	[0125.313] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x4782e0 | out: hHeap=0x460000) returned 1

Process:
	id = "7"
	image_name = "rsfd234df.exe"
	filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe"
	page_root = "0x76a0a000"
	os_pid = "0x7b8"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "autostart"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 29
	os_tid = 0x7bc

	[0097.513] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x25fedc | out: lpSystemTimeAsFileTime=0x25fedc*(dwLowDateTime=0x1bd61980, dwHighDateTime=0x1d57294)) 
	[0097.513] GetCurrentThreadId () returned 0x7bc
	[0097.513] GetCurrentProcessId () returned 0x7b8
	[0097.513] QueryPerformanceCounter (in: lpPerformanceCount=0x25fed4 | out: lpPerformanceCount=0x25fed4*=6465634996) returned 1
	[0098.972] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0098.972] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.972] GetLastError () returned 0x57
	[0098.972] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x757a0000
	[0098.974] GetProcAddress (hModule=0x757a0000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0098.974] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.974] GetLastError () returned 0x57
	[0098.974] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0098.974] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.974] GetLastError () returned 0x57
	[0098.974] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76300000
	[0098.974] GetProcAddress (hModule=0x76300000, lpProcName="FlsAlloc") returned 0x76314f2b
	[0098.974] GetProcAddress (hModule=0x76300000, lpProcName="FlsSetValue") returned 0x76314208
	[0098.974] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.974] GetLastError () returned 0x57
	[0098.975] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x757a0000
	[0098.975] GetProcAddress (hModule=0x757a0000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0098.975] GetProcessHeap () returned 0x680000
	[0098.975] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.975] GetLastError () returned 0x57
	[0098.975] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0098.975] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.975] GetLastError () returned 0x57
	[0098.975] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76300000
	[0098.975] GetProcAddress (hModule=0x76300000, lpProcName="FlsAlloc") returned 0x76314f2b
	[0098.975] GetLastError () returned 0x57
	[0098.975] GetProcAddress (hModule=0x76300000, lpProcName="FlsGetValue") returned 0x76311252
	[0098.975] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x364) returned 0x698498
	[0098.976] GetProcAddress (hModule=0x76300000, lpProcName="FlsSetValue") returned 0x76314208
	[0098.976] SetLastError (dwErrCode=0x57) 
	[0098.976] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0xc00) returned 0x698808
	[0098.977] GetStartupInfoW (in: lpStartupInfo=0x25fe04 | out: lpStartupInfo=0x25fe04*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x13b8da0, hStdOutput=0x9a7bc589, hStdError=0xfffffffe)) 
	[0098.977] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0098.977] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0098.977] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0098.977] GetCommandLineA () returned="\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" "
	[0098.977] GetCommandLineW () returned="\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" "
	[0098.977] GetLastError () returned 0x57
	[0098.977] SetLastError (dwErrCode=0x57) 
	[0098.977] GetLastError () returned 0x57
	[0098.977] SetLastError (dwErrCode=0x57) 
	[0098.977] GetACP () returned 0x4e4
	[0098.977] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x220) returned 0x698130
	[0098.977] IsValidCodePage (CodePage=0x4e4) returned 1
	[0098.977] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x25fe34 | out: lpCPInfo=0x25fe34) returned 1
	[0098.978] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x25f6fc | out: lpCPInfo=0x25f6fc) returned 1
	[0098.978] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x25fd10, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0098.978] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x25fd10, cbMultiByte=256, lpWideCharStr=0x25f498, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0098.978] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpCharType=0x25f710 | out: lpCharType=0x25f710) returned 1
	[0098.978] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x25fd10, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0098.978] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x25fd10, cbMultiByte=256, lpWideCharStr=0x25f448, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0098.978] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0098.978] GetLastError () returned 0x57
	[0098.978] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0098.978] GetProcAddress (hModule=0x76300000, lpProcName="LCMapStringEx") returned 0x763947f1
	[0098.978] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0098.978] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x25f238, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0098.978] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x25fc10, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿU©b\x9bLþ%", lpUsedDefaultChar=0x0) returned 256
	[0098.978] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x25fd10, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0098.978] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x25fd10, cbMultiByte=256, lpWideCharStr=0x25f468, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĻĀ") returned 256
	[0098.978] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĻĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0098.978] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĻĀ", cchSrc=256, lpDestStr=0x25f258, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
	[0098.978] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x25fb10, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿU©b\x9bLþ%", lpUsedDefaultChar=0x0) returned 256
	[0098.978] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x80) returned 0x698358
	[0098.979] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x13cc2a0, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe")) returned 0x4a
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x9e) returned 0x69a410
	[0098.979] RtlInitializeSListHead (in: ListHead=0x13cbe98 | out: ListHead=0x13cbe98) 
	[0098.979] GetLastError () returned 0x0
	[0098.979] SetLastError (dwErrCode=0x0) 
	[0098.979] GetEnvironmentStringsW () returned 0x69a4b8*
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0xb02) returned 0x69afc8
	[0098.979] FreeEnvironmentStringsW (penv=0x69a4b8) returned 1
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x9c) returned 0x69bad8
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x3e) returned 0x696350
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x6c) returned 0x69bb80
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x6e) returned 0x69bbf8
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x78) returned 0x68f498
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x62) returned 0x69bc70
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x2e) returned 0x6983e0
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x48) returned 0x69bce0
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x28) returned 0x69bd30
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x1a) returned 0x699de0
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x4a) returned 0x69bd60
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x72) returned 0x68f518
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x30) returned 0x69bdb8
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x2e) returned 0x69bdf0
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x1c) returned 0x699e08
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0xd2) returned 0x69be28
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x7c) returned 0x69bf08
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x36) returned 0x69bf90
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x3a) returned 0x696398
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x90) returned 0x69a4b8
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x24) returned 0x69a550
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x30) returned 0x69a580
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x36) returned 0x69a5b8
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x48) returned 0x69a5f8
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x52) returned 0x69a648
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x3c) returned 0x6963e0
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x82) returned 0x69a6a8
	[0098.979] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x2e) returned 0x69a738
	[0098.980] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x28) returned 0x69a770
	[0098.980] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x1e) returned 0x699e30
	[0098.980] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x2c) returned 0x69a7a0
	[0098.980] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x54) returned 0x69a7d8
	[0098.980] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x52) returned 0x69a838
	[0098.980] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x2a) returned 0x69a898
	[0098.980] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x3c) returned 0x696428
	[0098.980] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x54) returned 0x69a8d0
	[0098.980] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x24) returned 0x69a930
	[0098.980] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x30) returned 0x69a960
	[0098.980] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x8c) returned 0x69a998
	[0098.980] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x69afc8 | out: hHeap=0x680000) returned 1
	[0098.980] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x800) returned 0x69aa30
	[0098.980] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0098.980] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x13b897a) returned 0x0
	[0098.980] GetStartupInfoW (in: lpStartupInfo=0x25fe6c | out: lpStartupInfo=0x25fe6c*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0098.981] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0xc74c9b0) returned 0x27e0020
	[0116.418] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x27e0020 | out: hHeap=0x680000) returned 1
	[0120.081] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.081] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.082] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xa8
	[0120.174] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa8
	[0120.176] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.176] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.177] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.177] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.177] Process32First (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0120.177] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.177] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.177] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.177] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.178] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0120.178] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.178] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.178] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.178] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.178] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0120.179] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.179] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.179] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.179] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.179] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.179] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.179] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.180] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.180] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.180] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0120.180] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.180] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.180] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.181] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.181] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.181] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.181] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.181] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.181] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.181] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0120.182] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.182] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.182] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.182] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.182] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0120.182] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.182] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.183] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.183] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.183] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0120.183] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.183] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.183] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.184] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.184] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0120.184] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.184] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.184] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.184] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.184] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.185] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.185] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.185] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.185] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.185] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.185] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.185] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.186] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.186] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.186] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.186] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.186] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.186] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.187] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.187] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.187] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.187] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.187] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.187] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.187] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.188] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.188] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.188] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.188] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.188] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0120.188] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.188] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.189] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.189] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.189] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.189] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.190] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.190] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.190] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.190] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0120.190] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.190] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.190] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.191] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.191] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.191] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.191] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.191] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.191] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.191] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0120.192] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.192] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.192] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.192] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.192] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.192] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.193] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.193] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.193] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.193] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.193] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.193] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.193] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.194] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.194] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0120.194] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.194] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.194] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.194] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.194] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0120.195] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.195] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.195] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.195] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.195] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0120.195] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.196] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.196] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.196] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.196] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.196] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.196] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.196] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.197] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.197] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.197] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.198] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.198] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.198] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.198] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.198] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.198] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.198] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.199] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.199] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.199] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.199] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.199] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.199] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.200] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0120.200] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.200] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.200] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.200] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.200] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.201] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.201] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.201] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.201] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.201] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0120.201] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.202] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.202] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.202] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0120.202] Process32Next (in: hSnapshot=0xa8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x259bac, pcPriClassBase=6875880, dwFlags=0x68eb24, szExeFile="???%???%?h?C?%?%")) returned 0
	[0120.202] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.203] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.203] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.203] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xac
	[0120.203] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xac
	[0120.204] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.205] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.205] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.205] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.205] Process32First (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0120.205] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.206] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.206] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.206] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.206] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0120.206] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.206] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.206] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.207] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.207] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0120.207] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.207] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.207] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.207] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.207] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.208] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.208] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.208] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.208] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.208] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0120.209] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.209] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.209] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.209] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.209] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.209] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.209] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.209] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.210] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.210] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0120.210] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.210] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.210] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.210] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.211] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0120.211] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.211] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.211] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.211] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.211] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0120.212] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.212] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.212] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.212] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.212] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0120.212] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.212] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.213] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.213] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.213] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.213] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.213] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.213] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.214] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.214] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.214] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.214] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.214] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.214] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.214] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.215] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.215] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.215] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.215] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.215] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.216] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.216] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.216] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.216] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.216] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.216] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.216] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.217] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.217] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.217] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0120.217] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.217] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.217] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.217] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.218] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.218] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.218] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.218] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.218] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.218] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0120.219] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.219] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.219] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.219] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.219] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.219] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.220] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.220] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.220] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.220] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0120.220] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.314] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.314] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.314] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.314] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.315] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.315] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.315] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.315] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.315] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.316] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.316] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.316] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.316] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.316] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0120.316] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.316] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.317] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.317] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.317] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0120.317] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.317] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.317] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.318] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.318] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0120.318] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.318] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.318] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.318] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.318] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.319] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.319] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.319] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.319] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.319] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.319] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.320] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.320] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.320] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.320] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.320] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.320] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.320] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.321] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.321] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.321] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.321] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.321] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.321] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.322] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0120.322] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.322] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.322] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.322] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.322] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.323] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.323] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.323] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.323] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.323] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0120.323] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.323] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.324] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.324] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0120.324] Process32Next (in: hSnapshot=0xac, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x259bac, pcPriClassBase=6875880, dwFlags=0x68eb24, szExeFile="???%???%?h?C?%?%")) returned 0
	[0120.324] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.327] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0120.327] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0xe0000
	[0120.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2, flAllocationType=0x3000, flProtect=0x4) returned 0xf0000
	[0120.327] VirtualAlloc (lpAddress=0x0, dwSize=0x5, flAllocationType=0x3000, flProtect=0x4) returned 0x140000
	[0120.327] VirtualAlloc (lpAddress=0x0, dwSize=0xd, flAllocationType=0x3000, flProtect=0x4) returned 0x150000
	[0120.328] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x260000
	[0120.328] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x270000
	[0120.328] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x280000
	[0120.328] VirtualAlloc (lpAddress=0x0, dwSize=0x3c, flAllocationType=0x3000, flProtect=0x4) returned 0x290000
	[0120.328] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x330000
	[0120.328] VirtualAlloc (lpAddress=0x0, dwSize=0xd200, flAllocationType=0x3000, flProtect=0x4) returned 0x340000
	[0120.328] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x259ce8, nSize=0x103 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe")) returned 0x4a
	[0120.328] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0120.328] GetFileSize (in: hFile=0xb0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x49c53
	[0120.328] VirtualAlloc (lpAddress=0x0, dwSize=0x49c53, flAllocationType=0x3000, flProtect=0x4) returned 0x350000
	[0120.329] ReadFile (in: hFile=0xb0, lpBuffer=0x350000, nNumberOfBytesToRead=0x49c53, lpNumberOfBytesRead=0x25a100, lpOverlapped=0x0 | out: lpBuffer=0x350000*, lpNumberOfBytesRead=0x25a100*=0x49c53, lpOverlapped=0x0) returned 1
	[0120.335] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0x3a0000
	[0120.338] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.338] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x6
	[0120.338] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x140000, cbMultiByte=-1, lpWideCharStr=0x25a650, cchWideChar=50 | out: lpWideCharStr="ymgyr") returned 6
	[0120.338] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.338] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.338] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xe
	[0120.338] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x150000, cbMultiByte=-1, lpWideCharStr=0x25a6b4, cchWideChar=50 | out: lpWideCharStr="bpomwdckuqiso") returned 14
	[0120.338] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.339] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.339] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.339] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb4
	[0120.339] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb4
	[0120.340] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.341] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.341] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.341] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.341] Process32First (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0120.341] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.341] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.341] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.342] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.342] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0120.342] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.342] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.342] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.342] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.343] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0120.343] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.343] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.343] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.343] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.343] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.344] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.344] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.344] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.344] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.344] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0120.344] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.345] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.345] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.345] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.345] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.345] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.346] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.346] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.346] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.346] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0120.346] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.346] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.346] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.347] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.347] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0120.347] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.347] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.347] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.348] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.348] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0120.348] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.348] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.348] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.348] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.348] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0120.349] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.349] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.349] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.349] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.349] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.349] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.350] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.350] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.350] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.350] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.350] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.350] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.350] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.351] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.351] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.351] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.351] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.351] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.352] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.352] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.352] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.352] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.352] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.352] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.352] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.353] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.353] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.353] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.353] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.353] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0120.353] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.354] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.354] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.354] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.354] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.354] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.354] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.354] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.355] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.355] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0120.355] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.355] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.355] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.355] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.356] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.356] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.356] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.356] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.356] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.356] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0120.357] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.357] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.357] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.357] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.357] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.357] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.358] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.358] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.358] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.358] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.359] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.360] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.360] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.360] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.360] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0120.360] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.361] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.492] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.492] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.493] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0120.493] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.493] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.493] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.493] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.493] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0120.494] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.494] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.494] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.494] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.494] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.494] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.495] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.495] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.495] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.495] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.495] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.495] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.495] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.496] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.496] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.496] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.496] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.496] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.496] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.497] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.497] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.497] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.497] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.497] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.497] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0120.498] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.498] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.498] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.498] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.498] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.498] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.499] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.499] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.499] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.499] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0120.499] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.499] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.499] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.500] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0120.500] Process32Next (in: hSnapshot=0xb4, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x259bac, pcPriClassBase=6875880, dwFlags=0x68eb24, szExeFile="???%???%?h?C?%?%")) returned 0
	[0120.500] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.500] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.500] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.500] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb8
	[0120.500] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb8
	[0120.502] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.502] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.502] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.503] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.503] Process32First (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0120.503] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.503] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.503] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.503] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.504] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0120.504] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.504] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.504] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.504] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.504] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0120.505] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.505] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.505] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.505] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.505] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.505] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.506] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.506] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.506] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.506] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0120.506] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.506] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.506] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.507] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.507] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.507] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.507] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.507] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.507] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.508] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0120.508] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.508] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.508] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.508] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.508] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0120.509] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.509] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.509] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.509] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.509] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0120.509] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.510] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.510] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.510] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.510] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0120.510] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.510] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.510] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.511] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.511] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.511] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.511] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.511] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.511] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.511] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.512] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.512] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.512] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.512] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.512] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.513] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.513] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.513] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.513] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.513] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.513] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.513] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.514] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.514] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.514] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.514] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.514] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.514] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.515] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.515] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0120.515] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.515] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.515] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.515] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.515] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.516] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.516] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.516] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.516] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.516] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0120.516] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.517] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.517] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.517] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.517] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.517] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.518] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.518] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.518] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.518] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0120.518] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.518] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.518] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.519] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.519] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.519] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.519] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.519] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.519] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.519] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.520] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.520] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.520] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.520] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.520] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0120.521] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.521] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.521] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.521] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.521] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0120.521] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.521] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.522] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.522] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.522] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0120.522] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.522] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.522] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.523] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.523] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.523] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.523] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.523] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.523] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.523] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.524] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.524] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.524] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.524] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.524] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.524] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.525] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.525] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.525] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.525] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.525] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.525] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.525] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.526] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.526] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0120.526] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.526] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.526] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.526] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.527] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.527] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.527] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.527] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.527] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.527] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0120.528] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.528] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.528] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.528] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0120.528] Process32Next (in: hSnapshot=0xb8, lppe=0x259f58 | out: lppe=0x259f58*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x259bac, pcPriClassBase=6875880, dwFlags=0x68eb24, szExeFile="???%???%?h?C?%?%")) returned 0
	[0120.528] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.529] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.529] VirtualAlloc (lpAddress=0x0, dwSize=0x16, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0120.529] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0120.529] Sleep (dwMilliseconds=0x1388) 
	[0125.525] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.525] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x25a1b8, nSize=0x103 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe")) returned 0x4a
	[0125.525] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0125.525] VirtualAlloc (lpAddress=0x0, dwSize=0x25, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0125.525] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x3c0000
	[0125.525] VirtualAlloc (lpAddress=0x0, dwSize=0x410, flAllocationType=0x3000, flProtect=0x4) returned 0x3c0000
	[0125.526] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.526] GetCommandLineW () returned="\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" "
	[0125.526] CreateProcessW (in: lpApplicationName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe", lpCommandLine="\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x25a054*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x25a0ec | out: lpCommandLine="\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" ", lpProcessInformation=0x25a0ec*(hProcess=0xc0, hThread=0xbc, dwProcessId=0x7d4, dwThreadId=0x798)) returned 1
	[0125.572] GetThreadContext (in: hThread=0xbc, lpContext=0x259d88 | out: lpContext=0x259d88*(ContextFlags=0x10007, Dr0=0x77dbfa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x25a110, FloatSave.ErrorSelector=0x259f48, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0xfc, [37]=0x9d, [38]=0x25, [39]=0x0, [40]=0xe8, [41]=0xea, [42]=0x68, [43]=0x0, [44]=0x24, [45]=0xeb, [46]=0x68, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0xe9, [51]=0x77, [52]=0x14, [53]=0x9e, [54]=0x25, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0xdb, [59]=0x77, [60]=0x24, [61]=0xa1, [62]=0x25, [63]=0x0, [64]=0x14, [65]=0xeb, [66]=0x68, [67]=0x0, [68]=0xe0, [69]=0x47, [70]=0x43, [71]=0x0, [72]=0x48, [73]=0x9f, [74]=0x25, [75]=0x0, [76]=0xa8, [77]=0xa0, [78]=0x25, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x13b8432, Ebp=0x0, Eip=0x77da01c4, SegCs=0x23, EFlags=0x202, Esp=0x31ffa4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x3b, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0xda, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x95, [39]=0x75, [40]=0xc4, [41]=0xa0, [42]=0x25, [43]=0x0, [44]=0xac, [45]=0x9e, [46]=0x25, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0xf4, [53]=0xa0, [54]=0x25, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0xdb, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x25, [67]=0x0, [68]=0xe0, [69]=0xa0, [70]=0x25, [71]=0x0, [72]=0xc8, [73]=0x9e, [74]=0x25, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x10, [81]=0xa1, [82]=0x25, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0xdb, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x44, [93]=0x9f, [94]=0x25, [95]=0x0, [96]=0xde, [97]=0xf8, [98]=0xcc, [99]=0x77, [100]=0xf8, [101]=0x9e, [102]=0x25, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0xdb, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0xe0, [113]=0xa0, [114]=0x25, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0xdb, [119]=0x77, [120]=0x48, [121]=0x9f, [122]=0x25, [123]=0x0, [124]=0x3c, [125]=0x9f, [126]=0x25, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x28, [145]=0x9e, [146]=0x25, [147]=0x0, [148]=0xe0, [149]=0xa0, [150]=0x25, [151]=0x0, [152]=0x6c, [153]=0xa0, [154]=0x25, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0xe0, [159]=0x77, [160]=0x3e, [161]=0xdb, [162]=0x32, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0xdc, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x10, [181]=0xa1, [182]=0x25, [183]=0x0, [184]=0x7c, [185]=0xa0, [186]=0x25, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0xdc, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0xdb, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0xdc, [199]=0x77, [200]=0x1a, [201]=0xc6, [202]=0xcc, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0xdb, [215]=0x77, [216]=0xc4, [217]=0xa0, [218]=0x25, [219]=0x0, [220]=0xf4, [221]=0xa0, [222]=0x25, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x9f, [230]=0x25, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0xa8, [241]=0xa0, [242]=0x25, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0x10, [249]=0xa1, [250]=0x25, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x48, [257]=0x9f, [258]=0x25, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0xe8, [265]=0xea, [266]=0x68, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0xda, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x96, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x96, [295]=0x75, [296]=0x1d, [297]=0xe2, [298]=0xf7, [299]=0x6f, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x3b, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0xda, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x95, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0xe8, [365]=0x9f, [366]=0x25, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0xd4, [373]=0x9f, [374]=0x25, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x3b, [387]=0x0, [388]=0xf4, [389]=0x9f, [390]=0x25, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x95, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x3c, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x24, [417]=0xa0, [418]=0x25, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x3b, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xd8, [443]=0x75, [444]=0x4, [445]=0x0, [446]=0x3b, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x3b, [463]=0x0, [464]=0x9c, [465]=0xa0, [466]=0x25, [467]=0x0, [468]=0x50, [469]=0xa0, [470]=0x25, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x3b, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x9c, [481]=0xa0, [482]=0x25, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xd8, [487]=0x75, [488]=0x51, [489]=0x6d, [490]=0xd8, [491]=0x75, [492]=0xe8, [493]=0xb6, [494]=0xe1, [495]=0x6f, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x3b, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0125.619] ReadProcessMemory (in: hProcess=0xc0, lpBaseAddress=0x7efde008, lpBuffer=0x25a0e8, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x25a0e8*, lpNumberOfBytesRead=0x0) returned 1
	[0125.622] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.625] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.625] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x259be8 | out: Wow64Process=0x259be8) returned 1
	[0125.628] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.628] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0125.628] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.628] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x980000
	[0125.629] ReadFile (in: hFile=0xc8, lpBuffer=0x980000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x259c24, lpOverlapped=0x0 | out: lpBuffer=0x980000*, lpNumberOfBytesRead=0x259c24*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.638] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xac0000
	[0125.651] CloseHandle (hObject=0xc8) returned 1
	[0125.651] VirtualFree (lpAddress=0x980000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.657] VirtualFree (lpAddress=0xac0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.662] NtCreateSection (in: SectionHandle=0x259d4c, DesiredAccess=0xe, ObjectAttributes=0x0, MaximumSize=0x25a09c, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x259d4c*=0xc8) returned 0x0
	[0125.665] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.762] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.762] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x259bbc | out: Wow64Process=0x259bbc) returned 1
	[0125.765] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.765] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0125.765] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.766] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x980000
	[0125.766] ReadFile (in: hFile=0xc4, lpBuffer=0x980000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x259bf8, lpOverlapped=0x0 | out: lpBuffer=0x980000*, lpNumberOfBytesRead=0x259bf8*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.774] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xac0000
	[0125.787] CloseHandle (hObject=0xc4) returned 1
	[0125.788] VirtualFree (lpAddress=0x980000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.793] VirtualFree (lpAddress=0xac0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.798] NtMapViewOfSection (in: SectionHandle=0xc8, ProcessHandle=0xc0, BaseAddress=0x259d40*=0x400000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x259d38*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x259d40*=0x400000, SectionOffset=0x0, ViewSize=0x259d38*=0x12000) returned 0x0
	[0125.801] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.804] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.805] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x259bbc | out: Wow64Process=0x259bbc) returned 1
	[0125.901] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.902] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0125.902] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.902] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x980000
	[0125.902] ReadFile (in: hFile=0xc4, lpBuffer=0x980000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x259bf8, lpOverlapped=0x0 | out: lpBuffer=0x980000*, lpNumberOfBytesRead=0x259bf8*=0x13b740, lpOverlapped=0x0) returned 1
	[0125.911] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xac0000
	[0125.924] CloseHandle (hObject=0xc4) returned 1
	[0125.924] VirtualFree (lpAddress=0x980000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.929] VirtualFree (lpAddress=0xac0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0125.935] NtMapViewOfSection (in: SectionHandle=0xc8, ProcessHandle=0xffffffffffffffff, BaseAddress=0x259d40*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x259d38*=0x12000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x259d40*=0x3d0000, SectionOffset=0x0, ViewSize=0x259d38*=0x12000) returned 0x0
	[0125.938] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.941] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.942] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x259bfc | out: Wow64Process=0x259bfc) returned 1
	[0125.945] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0125.945] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0125.945] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0125.945] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x980000
	[0125.945] ReadFile (in: hFile=0xc4, lpBuffer=0x980000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x259c38, lpOverlapped=0x0 | out: lpBuffer=0x980000*, lpNumberOfBytesRead=0x259c38*=0x13b740, lpOverlapped=0x0) returned 1
	[0126.047] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xac0000
	[0126.059] CloseHandle (hObject=0xc4) returned 1
	[0126.059] VirtualFree (lpAddress=0x980000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.065] VirtualFree (lpAddress=0xac0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.070] NtWriteVirtualMemory (in: ProcessHandle=0xc0, BaseAddress=0x7efde008, Buffer=0x25a100*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x259d50 | out: Buffer=0x25a100*, NumberOfBytesWritten=0x259d50*=0x4) returned 0x0
	[0126.070] SetThreadContext (hThread=0xbc, lpContext=0x259d88*(ContextFlags=0x10007, Dr0=0x77dbfa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x25a110, FloatSave.ErrorSelector=0x259f48, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0xfc, [37]=0x9d, [38]=0x25, [39]=0x0, [40]=0xe8, [41]=0xea, [42]=0x68, [43]=0x0, [44]=0x24, [45]=0xeb, [46]=0x68, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0xe9, [51]=0x77, [52]=0x14, [53]=0x9e, [54]=0x25, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0xdb, [59]=0x77, [60]=0x24, [61]=0xa1, [62]=0x25, [63]=0x0, [64]=0x14, [65]=0xeb, [66]=0x68, [67]=0x0, [68]=0xe0, [69]=0x47, [70]=0x43, [71]=0x0, [72]=0x48, [73]=0x9f, [74]=0x25, [75]=0x0, [76]=0xa8, [77]=0xa0, [78]=0x25, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x402518, Ebp=0x0, Eip=0x77da01c4, SegCs=0x23, EFlags=0x202, Esp=0x31ffa4, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x3b, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0xda, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x95, [39]=0x75, [40]=0xc4, [41]=0xa0, [42]=0x25, [43]=0x0, [44]=0xac, [45]=0x9e, [46]=0x25, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0xf4, [53]=0xa0, [54]=0x25, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0xdb, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x25, [67]=0x0, [68]=0xe0, [69]=0xa0, [70]=0x25, [71]=0x0, [72]=0xc8, [73]=0x9e, [74]=0x25, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x10, [81]=0xa1, [82]=0x25, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0xdb, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x44, [93]=0x9f, [94]=0x25, [95]=0x0, [96]=0xde, [97]=0xf8, [98]=0xcc, [99]=0x77, [100]=0xf8, [101]=0x9e, [102]=0x25, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0xdb, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0xe0, [113]=0xa0, [114]=0x25, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0xdb, [119]=0x77, [120]=0x48, [121]=0x9f, [122]=0x25, [123]=0x0, [124]=0x3c, [125]=0x9f, [126]=0x25, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x28, [145]=0x9e, [146]=0x25, [147]=0x0, [148]=0xe0, [149]=0xa0, [150]=0x25, [151]=0x0, [152]=0x6c, [153]=0xa0, [154]=0x25, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0xe0, [159]=0x77, [160]=0x3e, [161]=0xdb, [162]=0x32, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0xdc, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x10, [181]=0xa1, [182]=0x25, [183]=0x0, [184]=0x7c, [185]=0xa0, [186]=0x25, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0xdc, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0xdb, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0xdc, [199]=0x77, [200]=0x1a, [201]=0xc6, [202]=0xcc, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0xdb, [215]=0x77, [216]=0xc4, [217]=0xa0, [218]=0x25, [219]=0x0, [220]=0xf4, [221]=0xa0, [222]=0x25, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x9f, [230]=0x25, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0xa8, [241]=0xa0, [242]=0x25, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0x10, [249]=0xa1, [250]=0x25, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x48, [257]=0x9f, [258]=0x25, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0xe8, [265]=0xea, [266]=0x68, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0xda, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x96, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x96, [295]=0x75, [296]=0x1d, [297]=0xe2, [298]=0xf7, [299]=0x6f, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x3b, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0xda, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x95, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0xe8, [365]=0x9f, [366]=0x25, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0xd4, [373]=0x9f, [374]=0x25, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x3b, [387]=0x0, [388]=0xf4, [389]=0x9f, [390]=0x25, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x95, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x3c, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x24, [417]=0xa0, [418]=0x25, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x3b, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xd8, [443]=0x75, [444]=0x4, [445]=0x0, [446]=0x3b, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x3b, [463]=0x0, [464]=0x9c, [465]=0xa0, [466]=0x25, [467]=0x0, [468]=0x50, [469]=0xa0, [470]=0x25, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x3b, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x9c, [481]=0xa0, [482]=0x25, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xd8, [487]=0x75, [488]=0x51, [489]=0x6d, [490]=0xd8, [491]=0x75, [492]=0xe8, [493]=0xb6, [494]=0xe1, [495]=0x6f, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x3b, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0126.198] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.201] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.202] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x259c24 | out: Wow64Process=0x259c24) returned 1
	[0126.205] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.205] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0126.205] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0126.205] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x980000
	[0126.206] ReadFile (in: hFile=0xc4, lpBuffer=0x980000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x259c60, lpOverlapped=0x0 | out: lpBuffer=0x980000*, lpNumberOfBytesRead=0x259c60*=0x13b740, lpOverlapped=0x0) returned 1
	[0126.215] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xac0000
	[0126.228] CloseHandle (hObject=0xc4) returned 1
	[0126.228] VirtualFree (lpAddress=0x980000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.234] VirtualFree (lpAddress=0xac0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.239] NtResumeThread (in: ThreadHandle=0xbc, SuspendCount=0x259d60 | out: SuspendCount=0x259d60*=0x1) returned 0x0
	[0126.352] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0126.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0126.352] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0126.352] VirtualProtectEx (in: hProcess=0xc0, lpAddress=0x0, dwSize=0x12000, flNewProtect=0x1, lpflOldProtect=0x25a098 | out: lpflOldProtect=0x25a098*=0xc7c4) returned 0
	[0126.352] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.352] CloseHandle (hObject=0xc0) returned 1
	[0126.352] CloseHandle (hObject=0xbc) returned 1
	[0126.352] CloseHandle (hObject=0xc8) returned 1
	[0126.355] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.359] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.359] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x259c2c | out: Wow64Process=0x259c2c) returned 1
	[0126.362] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.362] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0126.363] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0126.363] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x980000
	[0126.363] ReadFile (in: hFile=0xc8, lpBuffer=0x980000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x259c68, lpOverlapped=0x0 | out: lpBuffer=0x980000*, lpNumberOfBytesRead=0x259c68*=0x13b740, lpOverlapped=0x0) returned 1
	[0126.371] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xac0000
	[0126.385] CloseHandle (hObject=0xc8) returned 1
	[0126.385] VirtualFree (lpAddress=0x980000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.390] VirtualFree (lpAddress=0xac0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.395] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x3d0000) returned 0x0
	[0126.396] ExitProcess (uExitCode=0x0) 
	[0126.396] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x698498 | out: hHeap=0x680000) returned 1

Process:
	id = "8"
	image_name = "rsfd234df.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe"
	page_root = "0x77535000"
	os_pid = "0x7c0"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "autostart"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 30
	os_tid = 0x7c4

	[0097.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x38fed8 | out: lpSystemTimeAsFileTime=0x38fed8*(dwLowDateTime=0x1bf76cc0, dwHighDateTime=0x1d57294)) 
	[0097.719] GetCurrentThreadId () returned 0x7c4
	[0097.719] GetCurrentProcessId () returned 0x7c0
	[0097.719] QueryPerformanceCounter (in: lpPerformanceCount=0x38fed0 | out: lpPerformanceCount=0x38fed0*=6590298831) returned 1
	[0100.219] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0100.219] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0100.219] GetLastError () returned 0x57
	[0100.219] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x757a0000
	[0100.220] GetProcAddress (hModule=0x757a0000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0100.220] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0100.220] GetLastError () returned 0x57
	[0100.220] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0100.221] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0100.221] GetLastError () returned 0x57
	[0100.221] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76300000
	[0100.221] GetProcAddress (hModule=0x76300000, lpProcName="FlsAlloc") returned 0x76314f2b
	[0100.221] GetProcAddress (hModule=0x76300000, lpProcName="FlsSetValue") returned 0x76314208
	[0100.221] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0100.221] GetLastError () returned 0x57
	[0100.221] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x757a0000
	[0100.221] GetProcAddress (hModule=0x757a0000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0100.222] GetProcessHeap () returned 0x770000
	[0100.222] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0100.222] GetLastError () returned 0x57
	[0100.222] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0100.222] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0100.222] GetLastError () returned 0x57
	[0100.222] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76300000
	[0100.222] GetProcAddress (hModule=0x76300000, lpProcName="FlsAlloc") returned 0x76314f2b
	[0100.222] GetLastError () returned 0x57
	[0100.222] GetProcAddress (hModule=0x76300000, lpProcName="FlsGetValue") returned 0x76311252
	[0100.222] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x364) returned 0x788668
	[0100.222] GetProcAddress (hModule=0x76300000, lpProcName="FlsSetValue") returned 0x76314208
	[0100.222] SetLastError (dwErrCode=0x57) 
	[0100.222] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xc00) returned 0x7889d8
	[0100.224] GetStartupInfoW (in: lpStartupInfo=0x38fe00 | out: lpStartupInfo=0x38fe00*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xe68da0, hStdOutput=0x923288b6, hStdError=0xfffffffe)) 
	[0100.224] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0100.224] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0100.224] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0100.224] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" "
	[0100.224] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" "
	[0100.224] GetLastError () returned 0x57
	[0100.224] SetLastError (dwErrCode=0x57) 
	[0100.224] GetLastError () returned 0x57
	[0100.224] SetLastError (dwErrCode=0x57) 
	[0100.224] GetACP () returned 0x4e4
	[0100.224] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x0, Size=0x220) returned 0x7882c0
	[0100.224] IsValidCodePage (CodePage=0x4e4) returned 1
	[0100.224] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x38fe30 | out: lpCPInfo=0x38fe30) returned 1
	[0100.224] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x38f6f8 | out: lpCPInfo=0x38f6f8) returned 1
	[0100.224] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38fd0c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0100.224] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38fd0c, cbMultiByte=256, lpWideCharStr=0x38f498, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ췋æĀ") returned 256
	[0100.224] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ췋æĀ", cchSrc=256, lpCharType=0x38f70c | out: lpCharType=0x38f70c) returned 1
	[0100.224] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38fd0c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0100.224] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38fd0c, cbMultiByte=256, lpWideCharStr=0x38f448, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿæĀ") returned 256
	[0100.224] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0100.224] GetLastError () returned 0x57
	[0100.224] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0100.225] GetProcAddress (hModule=0x76300000, lpProcName="LCMapStringEx") returned 0x763947f1
	[0100.225] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿæĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0100.225] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿæĀ", cchSrc=256, lpDestStr=0x38f238, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0100.225] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x38fc0c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿnäí\x92Hþ8", lpUsedDefaultChar=0x0) returned 256
	[0100.225] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38fd0c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0100.225] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38fd0c, cbMultiByte=256, lpWideCharStr=0x38f468, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0100.225] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0100.225] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x38f258, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
	[0100.225] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x38fb0c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿnäí\x92Hþ8", lpUsedDefaultChar=0x0) returned 256
	[0100.225] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x0, Size=0x80) returned 0x7884e8
	[0100.225] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xe7c2a0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe")) returned 0x69
	[0100.225] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xdc) returned 0x78a5e0
	[0100.225] RtlInitializeSListHead (in: ListHead=0xe7be98 | out: ListHead=0xe7be98) 
	[0100.225] GetLastError () returned 0x0
	[0100.225] SetLastError (dwErrCode=0x0) 
	[0100.225] GetEnvironmentStringsW () returned 0x78a6c8*
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x0, Size=0xb02) returned 0x78b1d8
	[0100.226] FreeEnvironmentStringsW (penv=0x78a6c8) returned 1
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x9c) returned 0x78bce8
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x3e) returned 0x7864a0
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x6c) returned 0x788570
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x6e) returned 0x78bd90
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x78) returned 0x77f5b8
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x62) returned 0x78be08
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x2e) returned 0x78be78
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x48) returned 0x78beb0
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x28) returned 0x78bf00
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x1a) returned 0x789fb0
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x4a) returned 0x78bf30
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x72) returned 0x77f638
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x30) returned 0x78bf88
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x2e) returned 0x78a6c8
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x1c) returned 0x789fd8
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0xd2) returned 0x78a700
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x7c) returned 0x78a7e0
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x36) returned 0x78a868
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x3a) returned 0x7864e8
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x90) returned 0x78a8a8
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x24) returned 0x78a940
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x30) returned 0x78a970
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x36) returned 0x78a9a8
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x48) returned 0x78a9e8
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x52) returned 0x78aa38
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x3c) returned 0x786530
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x82) returned 0x78aa98
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x2e) returned 0x78ab28
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x28) returned 0x78ab60
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x1e) returned 0x78a000
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x2c) returned 0x78ab90
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x54) returned 0x78abc8
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x52) returned 0x78ac28
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x2a) returned 0x78ac88
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x3c) returned 0x786578
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x54) returned 0x78acc0
	[0100.226] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x24) returned 0x78ad20
	[0100.227] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x30) returned 0x78ad50
	[0100.227] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x8c) returned 0x78ad88
	[0100.227] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x78b1d8 | out: hHeap=0x770000) returned 1
	[0100.227] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x8, Size=0x800) returned 0x78ae20
	[0100.227] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0100.227] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xe6897a) returned 0x0
	[0100.227] GetStartupInfoW (in: lpStartupInfo=0x38fe68 | out: lpStartupInfo=0x38fe68*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0100.228] RtlAllocateHeap (HeapHandle=0x770000, Flags=0x0, Size=0xc74c9b0) returned 0x2290020
	[0117.904] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x2290020 | out: hHeap=0x770000) returned 1
	[0120.914] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.914] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.914] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xa8
	[0120.915] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa8
	[0120.917] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.917] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.917] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.918] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.918] Process32First (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0120.918] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.918] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.918] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.918] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.918] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0120.919] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.919] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.919] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.919] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.919] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0120.920] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.920] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.920] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.920] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.920] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.920] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.920] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.921] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.921] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.921] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0120.921] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.921] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.921] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.921] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.922] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.922] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.922] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.922] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.922] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.922] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0120.937] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.938] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.938] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.938] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.938] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0120.939] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.939] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.939] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.939] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.939] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0120.939] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.939] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.940] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.940] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.940] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0120.940] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.940] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.940] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.941] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.941] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.941] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.941] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.941] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.941] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.941] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.942] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.942] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.942] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.942] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.942] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.942] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.942] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.943] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.943] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.943] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.943] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.943] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.943] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.944] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.944] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.944] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.944] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.944] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.944] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.944] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0120.945] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.945] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.945] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.945] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.945] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.945] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.946] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.946] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.946] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.946] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0120.946] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.946] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.946] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.947] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.947] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.947] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.947] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.947] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.947] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.947] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0120.948] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.948] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.948] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.948] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.948] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.948] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.949] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.949] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.949] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.949] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.949] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.949] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.949] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.950] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.950] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0120.950] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.950] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.950] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.950] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.950] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0120.951] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.951] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.951] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.951] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.951] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0120.951] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.952] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.952] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.952] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.952] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.952] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.952] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.952] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.953] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.953] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.953] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.953] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.953] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.953] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.953] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.954] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.954] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.954] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.954] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.954] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.955] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.955] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.955] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.955] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.955] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0120.955] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.955] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.956] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.956] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.956] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.956] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.956] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.956] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.957] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.957] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0120.957] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.957] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.957] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.957] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0120.957] Process32Next (in: hSnapshot=0xa8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x389ba8, pcPriClassBase=7859208, dwFlags=0x77ec44, szExeFile="???8???8?w???8?8")) returned 0
	[0120.958] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.958] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.958] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.958] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xac
	[0120.958] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xac
	[0120.959] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.959] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.960] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.960] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.960] Process32First (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0120.960] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.960] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.960] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.960] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.960] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0120.961] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.961] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.961] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.961] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.961] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0120.962] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.962] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.962] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.962] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.962] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.962] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.962] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.962] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.963] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.963] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0120.963] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.963] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.963] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.963] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.963] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0120.964] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.964] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.964] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.964] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.964] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0120.964] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.965] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.965] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.965] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.965] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0120.965] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.965] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.965] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.966] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.966] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0120.966] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.966] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.966] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.966] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.966] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0120.967] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.967] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.967] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.967] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.967] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.967] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.967] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.968] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.968] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.968] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.968] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.968] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.968] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.968] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.968] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.969] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.969] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.969] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.972] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.972] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.973] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.973] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.973] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.973] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.973] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.973] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.974] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.974] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.974] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.974] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0120.974] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.974] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.974] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.974] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.975] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.975] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.975] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.975] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.975] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.975] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0120.976] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.976] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.976] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.976] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.976] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.976] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.976] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.976] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.977] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.977] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0120.977] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.977] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.977] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.977] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.977] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.978] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.978] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.978] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.978] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.978] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0120.978] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.979] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.979] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.979] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.979] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0120.979] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.979] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.979] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.980] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.980] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0120.980] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.980] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.980] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.980] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.980] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0120.981] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.981] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.981] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.981] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.981] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.981] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.981] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.982] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.982] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.982] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.982] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.982] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.982] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.982] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.982] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.983] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.983] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.983] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.983] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.983] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0120.984] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.984] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.984] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.984] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.984] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0120.984] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.984] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.984] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.985] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.985] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0120.985] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.985] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.985] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.986] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0120.986] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0120.986] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.986] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.986] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0120.986] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0120.986] Process32Next (in: hSnapshot=0xac, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x389ba8, pcPriClassBase=7859208, dwFlags=0x77ec44, szExeFile="???8???8?w???8?8")) returned 0
	[0120.987] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.989] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0120.990] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0xe0000
	[0120.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2, flAllocationType=0x3000, flProtect=0x4) returned 0x1b0000
	[0120.990] VirtualAlloc (lpAddress=0x0, dwSize=0x5, flAllocationType=0x3000, flProtect=0x4) returned 0x1c0000
	[0120.990] VirtualAlloc (lpAddress=0x0, dwSize=0xd, flAllocationType=0x3000, flProtect=0x4) returned 0x1d0000
	[0120.990] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x1e0000
	[0120.990] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x1f0000
	[0120.990] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x200000
	[0120.990] VirtualAlloc (lpAddress=0x0, dwSize=0x3c, flAllocationType=0x3000, flProtect=0x4) returned 0x210000
	[0120.990] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x220000
	[0120.991] VirtualAlloc (lpAddress=0x0, dwSize=0xd200, flAllocationType=0x3000, flProtect=0x4) returned 0x230000
	[0120.991] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x389ce4, nSize=0x103 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe")) returned 0x69
	[0120.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0120.991] GetFileSize (in: hFile=0xb0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x49c53
	[0120.991] VirtualAlloc (lpAddress=0x0, dwSize=0x49c53, flAllocationType=0x3000, flProtect=0x4) returned 0x240000
	[0120.991] ReadFile (in: hFile=0xb0, lpBuffer=0x240000, nNumberOfBytesToRead=0x49c53, lpNumberOfBytesRead=0x38a0fc, lpOverlapped=0x0 | out: lpBuffer=0x240000*, lpNumberOfBytesRead=0x38a0fc*=0x49c53, lpOverlapped=0x0) returned 1
	[0120.997] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0x390000
	[0120.999] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0120.999] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x6
	[0120.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1c0000, cbMultiByte=-1, lpWideCharStr=0x38a64c, cchWideChar=50 | out: lpWideCharStr="ymgyr") returned 6
	[0120.999] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0120.999] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0120.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.000] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xe
	[0121.000] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1d0000, cbMultiByte=-1, lpWideCharStr=0x38a6b0, cchWideChar=50 | out: lpWideCharStr="bpomwdckuqiso") returned 14
	[0121.000] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.000] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.000] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.000] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb4
	[0121.000] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb4
	[0121.002] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.002] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.002] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.002] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.002] Process32First (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0121.003] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.003] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.003] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.003] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.003] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0121.003] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.004] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.004] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.004] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.004] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0121.004] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.004] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.004] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.005] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.005] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0121.005] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.005] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.005] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.005] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.005] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0121.006] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.006] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.006] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.006] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.006] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0121.007] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.007] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.007] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.007] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.007] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0121.007] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.007] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.008] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.008] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.008] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0121.008] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.008] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.008] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.009] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.009] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0121.009] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.009] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.009] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.009] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.009] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0121.010] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.010] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.010] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.010] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.010] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.010] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.011] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.011] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.011] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.011] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.011] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.011] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.011] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.012] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.012] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.012] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.012] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.012] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.012] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.012] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.013] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.013] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.013] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.013] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.013] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.014] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.014] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.014] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.014] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.014] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0121.014] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.014] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.015] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.015] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.015] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.015] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.015] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.015] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.016] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.016] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0121.016] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.028] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.029] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.029] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.029] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.029] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.029] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.029] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.030] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.030] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0121.030] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.030] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.030] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.030] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.030] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0121.031] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.031] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.031] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.031] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.031] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.031] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.032] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.032] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.032] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.032] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0121.033] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.033] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.033] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.033] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.033] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0121.033] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.033] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.034] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.034] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.034] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0121.034] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.034] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.034] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.035] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.035] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0121.035] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.035] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.035] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.035] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.035] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0121.036] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.036] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.036] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.036] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.036] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0121.036] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.037] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.037] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.037] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.037] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0121.037] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.037] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.037] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.038] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.038] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0121.038] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.038] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.038] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.038] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.038] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0121.039] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.039] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.039] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.039] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.039] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0121.040] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.040] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.040] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.040] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0121.040] Process32Next (in: hSnapshot=0xb4, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x389ba8, pcPriClassBase=7859208, dwFlags=0x77ec44, szExeFile="???8???8?w???8?8")) returned 0
	[0121.040] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.040] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.041] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.041] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb8
	[0121.041] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb8
	[0121.042] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.042] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.042] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.043] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.043] Process32First (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0121.043] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.043] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.043] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.043] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.044] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0121.044] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.044] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.044] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.044] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.044] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0121.045] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.045] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.045] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.045] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.045] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0121.045] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.046] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.046] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.046] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.046] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0121.046] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.046] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.046] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.047] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.047] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0121.047] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.047] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.047] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.048] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.048] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0121.048] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.048] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.048] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.048] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.048] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0121.049] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.049] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.049] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.049] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.049] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0121.049] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.050] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.050] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.050] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.050] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0121.050] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.050] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.050] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.051] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.051] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.051] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.051] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.051] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.051] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.051] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.052] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.052] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.052] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.052] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.052] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.052] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.053] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.053] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.053] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.053] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.053] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.053] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.053] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.054] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.054] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.054] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.054] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.054] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.054] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.054] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0121.055] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.055] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.055] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.055] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.055] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.055] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.056] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.056] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.056] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.056] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0121.058] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.058] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.058] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.059] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.059] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.059] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.059] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.059] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.059] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.059] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0121.060] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.060] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.060] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.060] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.060] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0121.060] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.061] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.061] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.061] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.061] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0121.061] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.061] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.061] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.062] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.062] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0121.062] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.062] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.062] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.062] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.063] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0121.085] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.085] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.085] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.085] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.085] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0121.086] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.086] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.086] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.086] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.086] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0121.086] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.087] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.087] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.087] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.087] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0121.087] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.087] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.087] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.088] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.088] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0121.088] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.088] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.088] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.088] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.088] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x748, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0121.089] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.089] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.089] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.089] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.089] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x454, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0121.090] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.090] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.090] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.090] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.090] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0121.090] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.090] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.091] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.091] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0121.091] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0121.091] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.091] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.091] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.091] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0121.092] Process32Next (in: hSnapshot=0xb8, lppe=0x389f54 | out: lppe=0x389f54*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x389ba8, pcPriClassBase=7859208, dwFlags=0x77ec44, szExeFile="???8???8?w???8?8")) returned 0
	[0121.092] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0121.092] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0121.092] VirtualAlloc (lpAddress=0x0, dwSize=0x16, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0121.092] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0121.092] Sleep (dwMilliseconds=0x1388) 
	[0126.274] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.275] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x38a1b4, nSize=0x103 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe")) returned 0x69
	[0126.275] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0126.275] VirtualAlloc (lpAddress=0x0, dwSize=0x25, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0126.275] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x3b0000
	[0126.275] VirtualAlloc (lpAddress=0x0, dwSize=0x410, flAllocationType=0x3000, flProtect=0x4) returned 0x3b0000
	[0126.275] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.276] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" "
	[0126.276] CreateProcessW (in: lpApplicationName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe", lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x38a050*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x38a0e8 | out: lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" ", lpProcessInformation=0x38a0e8*(hProcess=0xc0, hThread=0xbc, dwProcessId=0x794, dwThreadId=0x334)) returned 1
	[0126.283] GetThreadContext (in: hThread=0xbc, lpContext=0x389d84 | out: lpContext=0x389d84*(ContextFlags=0x10007, Dr0=0x77dbfa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x38a10c, FloatSave.ErrorSelector=0x389f44, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0xf8, [37]=0x9d, [38]=0x38, [39]=0x0, [40]=0x8, [41]=0xec, [42]=0x77, [43]=0x0, [44]=0x44, [45]=0xec, [46]=0x77, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0xe9, [51]=0x77, [52]=0x10, [53]=0x9e, [54]=0x38, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0xdb, [59]=0x77, [60]=0x20, [61]=0xa1, [62]=0x38, [63]=0x0, [64]=0x34, [65]=0xec, [66]=0x77, [67]=0x0, [68]=0x14, [69]=0x4a, [70]=0x3f, [71]=0x0, [72]=0x44, [73]=0x9f, [74]=0x38, [75]=0x0, [76]=0xa4, [77]=0xa0, [78]=0x38, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xe68432, Ebp=0x0, Eip=0x77da01c4, SegCs=0x23, EFlags=0x202, Esp=0x3df90c, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x3a, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0xda, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x95, [39]=0x75, [40]=0xc0, [41]=0xa0, [42]=0x38, [43]=0x0, [44]=0xa8, [45]=0x9e, [46]=0x38, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0xf0, [53]=0xa0, [54]=0x38, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0xdb, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x38, [67]=0x0, [68]=0xdc, [69]=0xa0, [70]=0x38, [71]=0x0, [72]=0xc4, [73]=0x9e, [74]=0x38, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0xc, [81]=0xa1, [82]=0x38, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0xdb, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x40, [93]=0x9f, [94]=0x38, [95]=0x0, [96]=0xc2, [97]=0xf8, [98]=0xd1, [99]=0x77, [100]=0xf4, [101]=0x9e, [102]=0x38, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0xdb, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0xdc, [113]=0xa0, [114]=0x38, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0xdb, [119]=0x77, [120]=0x44, [121]=0x9f, [122]=0x38, [123]=0x0, [124]=0x38, [125]=0x9f, [126]=0x38, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x24, [145]=0x9e, [146]=0x38, [147]=0x0, [148]=0xdc, [149]=0xa0, [150]=0x38, [151]=0x0, [152]=0x68, [153]=0xa0, [154]=0x38, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0xe0, [159]=0x77, [160]=0x2e, [161]=0xdb, [162]=0x32, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0xdc, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xc, [181]=0xa1, [182]=0x38, [183]=0x0, [184]=0x78, [185]=0xa0, [186]=0x38, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0xdc, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0xdb, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0xdc, [199]=0x77, [200]=0xe, [201]=0xc6, [202]=0xd1, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0xdb, [215]=0x77, [216]=0xc0, [217]=0xa0, [218]=0x38, [219]=0x0, [220]=0xf0, [221]=0xa0, [222]=0x38, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x9f, [230]=0x38, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0xa4, [241]=0xa0, [242]=0x38, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0xc, [249]=0xa1, [250]=0x38, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x44, [257]=0x9f, [258]=0x38, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x8, [265]=0xec, [266]=0x77, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0xda, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x96, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x96, [295]=0x75, [296]=0xe7, [297]=0x3f, [298]=0xc6, [299]=0x6f, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x3a, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0xda, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x95, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0xe4, [365]=0x9f, [366]=0x38, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0xd0, [373]=0x9f, [374]=0x38, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x3a, [387]=0x0, [388]=0xf0, [389]=0x9f, [390]=0x38, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x95, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x3b, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x20, [417]=0xa0, [418]=0x38, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x3a, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xd8, [443]=0x75, [444]=0x4, [445]=0x0, [446]=0x3a, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x3a, [463]=0x0, [464]=0x98, [465]=0xa0, [466]=0x38, [467]=0x0, [468]=0x4c, [469]=0xa0, [470]=0x38, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x3a, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x98, [481]=0xa0, [482]=0x38, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xd8, [487]=0x75, [488]=0x51, [489]=0x6d, [490]=0xd8, [491]=0x75, [492]=0xf4, [493]=0xa2, [494]=0xd0, [495]=0x6f, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x3a, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0126.407] ReadProcessMemory (in: hProcess=0xc0, lpBaseAddress=0x7efde008, lpBuffer=0x38a0e4, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x38a0e4*, lpNumberOfBytesRead=0x0) returned 1
	[0126.410] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.413] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.413] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x389be4 | out: Wow64Process=0x389be4) returned 1
	[0126.416] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.417] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0126.417] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0126.417] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0xa40000
	[0126.417] ReadFile (in: hFile=0xc8, lpBuffer=0xa40000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x389c20, lpOverlapped=0x0 | out: lpBuffer=0xa40000*, lpNumberOfBytesRead=0x389c20*=0x13b740, lpOverlapped=0x0) returned 1
	[0126.425] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xb80000
	[0126.438] CloseHandle (hObject=0xc8) returned 1
	[0126.438] VirtualFree (lpAddress=0xa40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.443] VirtualFree (lpAddress=0xb80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.503] NtCreateSection (in: SectionHandle=0x389d48, DesiredAccess=0xe, ObjectAttributes=0x0, MaximumSize=0x38a098, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x389d48*=0xc8) returned 0x0
	[0126.506] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.509] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.510] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x389bb8 | out: Wow64Process=0x389bb8) returned 1
	[0126.512] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.513] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0126.513] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0126.513] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0xa40000
	[0126.514] ReadFile (in: hFile=0xc4, lpBuffer=0xa40000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x389bf4, lpOverlapped=0x0 | out: lpBuffer=0xa40000*, lpNumberOfBytesRead=0x389bf4*=0x13b740, lpOverlapped=0x0) returned 1
	[0126.522] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xb80000
	[0126.536] CloseHandle (hObject=0xc4) returned 1
	[0126.536] VirtualFree (lpAddress=0xa40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.612] VirtualFree (lpAddress=0xb80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.617] NtMapViewOfSection (in: SectionHandle=0xc8, ProcessHandle=0xc0, BaseAddress=0x389d3c*=0x400000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x389d34*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x389d3c*=0x400000, SectionOffset=0x0, ViewSize=0x389d34*=0x12000) returned 0x0
	[0126.620] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.623] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.624] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x389bb8 | out: Wow64Process=0x389bb8) returned 1
	[0126.626] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.627] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0126.627] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0126.627] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0xa40000
	[0126.627] ReadFile (in: hFile=0xc4, lpBuffer=0xa40000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x389bf4, lpOverlapped=0x0 | out: lpBuffer=0xa40000*, lpNumberOfBytesRead=0x389bf4*=0x13b740, lpOverlapped=0x0) returned 1
	[0126.636] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xb80000
	[0126.696] CloseHandle (hObject=0xc4) returned 1
	[0126.696] VirtualFree (lpAddress=0xa40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.701] VirtualFree (lpAddress=0xb80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.707] NtMapViewOfSection (in: SectionHandle=0xc8, ProcessHandle=0xffffffffffffffff, BaseAddress=0x389d3c*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x389d34*=0x12000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x389d3c*=0x3c0000, SectionOffset=0x0, ViewSize=0x389d34*=0x12000) returned 0x0
	[0126.710] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.713] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.713] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x389bf8 | out: Wow64Process=0x389bf8) returned 1
	[0126.718] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.718] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0126.718] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0126.718] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0xa40000
	[0126.718] ReadFile (in: hFile=0xc4, lpBuffer=0xa40000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x389c34, lpOverlapped=0x0 | out: lpBuffer=0xa40000*, lpNumberOfBytesRead=0x389c34*=0x13b740, lpOverlapped=0x0) returned 1
	[0126.727] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xb80000
	[0126.740] CloseHandle (hObject=0xc4) returned 1
	[0126.740] VirtualFree (lpAddress=0xa40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.808] VirtualFree (lpAddress=0xb80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.814] NtWriteVirtualMemory (in: ProcessHandle=0xc0, BaseAddress=0x7efde008, Buffer=0x38a0fc*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x389d4c | out: Buffer=0x38a0fc*, NumberOfBytesWritten=0x389d4c*=0x4) returned 0x0
	[0126.814] SetThreadContext (hThread=0xbc, lpContext=0x389d84*(ContextFlags=0x10007, Dr0=0x77dbfa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x38a10c, FloatSave.ErrorSelector=0x389f44, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0xf8, [37]=0x9d, [38]=0x38, [39]=0x0, [40]=0x8, [41]=0xec, [42]=0x77, [43]=0x0, [44]=0x44, [45]=0xec, [46]=0x77, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0xe9, [51]=0x77, [52]=0x10, [53]=0x9e, [54]=0x38, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0xdb, [59]=0x77, [60]=0x20, [61]=0xa1, [62]=0x38, [63]=0x0, [64]=0x34, [65]=0xec, [66]=0x77, [67]=0x0, [68]=0x14, [69]=0x4a, [70]=0x3f, [71]=0x0, [72]=0x44, [73]=0x9f, [74]=0x38, [75]=0x0, [76]=0xa4, [77]=0xa0, [78]=0x38, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x402518, Ebp=0x0, Eip=0x77da01c4, SegCs=0x23, EFlags=0x202, Esp=0x3df90c, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x3a, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0xda, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x95, [39]=0x75, [40]=0xc0, [41]=0xa0, [42]=0x38, [43]=0x0, [44]=0xa8, [45]=0x9e, [46]=0x38, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0xf0, [53]=0xa0, [54]=0x38, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0xdb, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x38, [67]=0x0, [68]=0xdc, [69]=0xa0, [70]=0x38, [71]=0x0, [72]=0xc4, [73]=0x9e, [74]=0x38, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0xc, [81]=0xa1, [82]=0x38, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0xdb, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x40, [93]=0x9f, [94]=0x38, [95]=0x0, [96]=0xc2, [97]=0xf8, [98]=0xd1, [99]=0x77, [100]=0xf4, [101]=0x9e, [102]=0x38, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0xdb, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0xdc, [113]=0xa0, [114]=0x38, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0xdb, [119]=0x77, [120]=0x44, [121]=0x9f, [122]=0x38, [123]=0x0, [124]=0x38, [125]=0x9f, [126]=0x38, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x24, [145]=0x9e, [146]=0x38, [147]=0x0, [148]=0xdc, [149]=0xa0, [150]=0x38, [151]=0x0, [152]=0x68, [153]=0xa0, [154]=0x38, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0xe0, [159]=0x77, [160]=0x2e, [161]=0xdb, [162]=0x32, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0xdc, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0xc, [181]=0xa1, [182]=0x38, [183]=0x0, [184]=0x78, [185]=0xa0, [186]=0x38, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0xdc, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0xdb, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0xdc, [199]=0x77, [200]=0xe, [201]=0xc6, [202]=0xd1, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0xdb, [215]=0x77, [216]=0xc0, [217]=0xa0, [218]=0x38, [219]=0x0, [220]=0xf0, [221]=0xa0, [222]=0x38, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x9f, [230]=0x38, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0xa4, [241]=0xa0, [242]=0x38, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0xc, [249]=0xa1, [250]=0x38, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x44, [257]=0x9f, [258]=0x38, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x8, [265]=0xec, [266]=0x77, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0xda, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x96, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x96, [295]=0x75, [296]=0xe7, [297]=0x3f, [298]=0xc6, [299]=0x6f, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x3a, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0xda, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x95, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0xe4, [365]=0x9f, [366]=0x38, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0xd0, [373]=0x9f, [374]=0x38, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x3a, [387]=0x0, [388]=0xf0, [389]=0x9f, [390]=0x38, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x95, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x3b, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x20, [417]=0xa0, [418]=0x38, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x3a, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xd8, [443]=0x75, [444]=0x4, [445]=0x0, [446]=0x3a, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x3a, [463]=0x0, [464]=0x98, [465]=0xa0, [466]=0x38, [467]=0x0, [468]=0x4c, [469]=0xa0, [470]=0x38, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x3a, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x98, [481]=0xa0, [482]=0x38, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xd8, [487]=0x75, [488]=0x51, [489]=0x6d, [490]=0xd8, [491]=0x75, [492]=0xf4, [493]=0xa2, [494]=0xd0, [495]=0x6f, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x3a, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0126.817] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.828] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.828] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x389c20 | out: Wow64Process=0x389c20) returned 1
	[0126.831] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.831] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0126.831] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0126.831] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0xa40000
	[0126.831] ReadFile (in: hFile=0xc4, lpBuffer=0xa40000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x389c5c, lpOverlapped=0x0 | out: lpBuffer=0xa40000*, lpNumberOfBytesRead=0x389c5c*=0x13b740, lpOverlapped=0x0) returned 1
	[0126.840] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xb80000
	[0126.907] CloseHandle (hObject=0xc4) returned 1
	[0126.907] VirtualFree (lpAddress=0xa40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.912] VirtualFree (lpAddress=0xb80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.917] NtResumeThread (in: ThreadHandle=0xbc, SuspendCount=0x389d5c | out: SuspendCount=0x389d5c*=0x1) returned 0x0
	[0126.958] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0126.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x3a0000
	[0126.959] CallWindowProcW (lpPrevWndFunc=0x3a0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0126.959] VirtualProtectEx (in: hProcess=0xc0, lpAddress=0x0, dwSize=0x12000, flNewProtect=0x1, lpflOldProtect=0x38a094 | out: lpflOldProtect=0x38a094*=0xc866) returned 0
	[0126.959] VirtualFree (lpAddress=0x3a0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0126.959] CloseHandle (hObject=0xc0) returned 1
	[0126.959] CloseHandle (hObject=0xbc) returned 1
	[0126.959] CloseHandle (hObject=0xc8) returned 1
	[0126.962] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.964] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.965] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x389c28 | out: Wow64Process=0x389c28) returned 1
	[0126.967] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0126.968] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0126.968] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0126.968] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0xa40000
	[0126.968] ReadFile (in: hFile=0xc8, lpBuffer=0xa40000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x389c64, lpOverlapped=0x0 | out: lpBuffer=0xa40000*, lpNumberOfBytesRead=0x389c64*=0x13b740, lpOverlapped=0x0) returned 1
	[0126.977] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xb80000
	[0126.989] CloseHandle (hObject=0xc8) returned 1
	[0126.989] VirtualFree (lpAddress=0xa40000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.052] VirtualFree (lpAddress=0xb80000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0127.057] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x3c0000) returned 0x0
	[0127.057] ExitProcess (uExitCode=0x0) 
	[0127.058] HeapFree (in: hHeap=0x770000, dwFlags=0x0, lpMem=0x788668 | out: hHeap=0x770000) returned 1

Process:
	id = "9"
	image_name = "rsfd234df.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"
	page_root = "0x3d6dc000"
	os_pid = "0x30c"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "6"
	os_parent_pid = "0x7a8"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 31
	os_tid = 0x768

	[0125.321] GetProcessHeap () returned 0x800000
	[0125.321] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x30) returned 0x811768
	[0125.321] GetProcessHeap () returned 0x800000
	[0125.321] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x3550) returned 0x815188
	[0125.322] GetProcessHeap () returned 0x800000
	[0125.322] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x204) returned 0x8186e0
	[0125.323] GetProcessHeap () returned 0x800000
	[0125.323] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x811518
	[0125.323] GetTickCount () returned 0x113620e
	[0125.323] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x28fbf8 | out: lpWSAData=0x28fbf8) returned 0
	[0125.375] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x28fbd8, cchData=32 | out: lpLCData="\x03") returned 16
	[0125.376] GetProcessHeap () returned 0x800000
	[0125.376] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1c) returned 0x813ee0
	[0125.376] GetProcessHeap () returned 0x800000
	[0125.376] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1c) returned 0x81cbe8
	[0125.376] GetVersion () returned 0x1db10106
	[0125.376] GetCurrentProcess () returned 0xffffffff
	[0125.376] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x28fb4c | out: TokenHandle=0x28fb4c*=0xb4) returned 1
	[0125.376] GetTokenInformation (in: TokenHandle=0xb4, TokenInformationClass=0x14, TokenInformation=0x28fb44, TokenInformationLength=0x4, ReturnLength=0x28fb48 | out: TokenInformation=0x28fb44, ReturnLength=0x28fb48) returned 1
	[0125.376] CloseHandle (hObject=0xb4) returned 1
	[0125.376] GetProcessHeap () returned 0x800000
	[0125.376] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cc38
	[0125.376] GetProcessHeap () returned 0x800000
	[0125.376] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cc60
	[0125.376] GetProcessHeap () returned 0x800000
	[0125.376] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81cc88
	[0125.376] GetProcessHeap () returned 0x800000
	[0125.376] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81d3d0
	[0125.377] GetProcessHeap () returned 0x800000
	[0125.377] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d3d0 | out: hHeap=0x800000) returned 1
	[0125.377] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81cc60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0125.377] GetProcessHeap () returned 0x800000
	[0125.377] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc88 | out: hHeap=0x800000) returned 1
	[0125.377] GetProcessHeap () returned 0x800000
	[0125.377] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc38 | out: hHeap=0x800000) returned 1
	[0125.377] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x28faec, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x28faec*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0125.377] GetProcessHeap () returned 0x800000
	[0125.377] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc60 | out: hHeap=0x800000) returned 1
	[0125.377] GetProcessHeap () returned 0x800000
	[0125.377] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d3e8
	[0125.377] GetProcessHeap () returned 0x800000
	[0125.377] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d430
	[0125.377] GetProcessHeap () returned 0x800000
	[0125.377] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d430, Size=0x72) returned 0x80f658
	[0125.377] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0x0
	[0125.377] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0xb4
	[0125.377] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x0) returned 0x0
	[0125.377] GetProcessHeap () returned 0x800000
	[0125.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d3e8 | out: hHeap=0x800000) returned 1
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80f658 | out: hHeap=0x800000) returned 1
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cc60
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cc38
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81cc88
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81e3d0
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e3d0 | out: hHeap=0x800000) returned 1
	[0125.378] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81cc38, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc88 | out: hHeap=0x800000) returned 1
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc60 | out: hHeap=0x800000) returned 1
	[0125.378] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x28fad4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x28fad4*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc38 | out: hHeap=0x800000) returned 1
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d3e8
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d430
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d430, Size=0x72) returned 0x80f658
	[0125.378] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0125.378] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0xb8
	[0125.378] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x0) returned 0x0
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d3e8 | out: hHeap=0x800000) returned 1
	[0125.378] GetProcessHeap () returned 0x800000
	[0125.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80f658 | out: hHeap=0x800000) returned 1
	[0125.378] ReleaseMutex (hMutex=0xb8) returned 1
	[0125.379] CloseHandle (hObject=0xb8) returned 1
	[0125.379] GetProcessHeap () returned 0x800000
	[0125.379] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20a) returned 0x81e3d0
	[0125.379] GetProcessHeap () returned 0x800000
	[0125.379] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x50) returned 0x81e5e8
	[0125.379] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0125.379] GetProcAddress (hModule=0x76300000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7632d650
	[0125.379] Wow64DisableWow64FsRedirection (in: OldValue=0x28fb48 | out: OldValue=0x28fb48*=0x0) returned 1
	[0125.379] GetProcessHeap () returned 0x800000
	[0125.379] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e5e8 | out: hHeap=0x800000) returned 1
	[0125.379] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x81e3d0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0125.379] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x28faf0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x28fb38 | out: lpCommandLine="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", lpProcessInformation=0x28fb38*(hProcess=0xbc, hThread=0xb8, dwProcessId=0x778, dwThreadId=0x780)) returned 1
	[0125.391] CloseHandle (hObject=0xbc) returned 1
	[0125.391] CloseHandle (hObject=0xb8) returned 1
	[0125.391] GetProcessHeap () returned 0x800000
	[0125.391] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x50) returned 0x81edb0
	[0125.391] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0125.391] GetProcAddress (hModule=0x76300000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7632d668
	[0125.391] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1
	[0125.391] GetProcessHeap () returned 0x800000
	[0125.391] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81edb0 | out: hHeap=0x800000) returned 1
	[0125.391] GetProcessHeap () returned 0x800000
	[0125.391] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e3d0 | out: hHeap=0x800000) returned 1
	[0125.391] Sleep (dwMilliseconds=0x1388) 
	[0131.894] GetProcessHeap () returned 0x800000
	[0131.894] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x60) returned 0x81edb0
	[0131.894] GetProcessHeap () returned 0x800000
	[0131.894] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cc60
	[0131.894] GetProcessHeap () returned 0x800000
	[0131.894] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cc88
	[0131.894] GetProcessHeap () returned 0x800000
	[0131.894] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81ccb0
	[0131.894] GetProcessHeap () returned 0x800000
	[0131.894] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81ea68
	[0131.894] GetProcessHeap () returned 0x800000
	[0131.894] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ea68 | out: hHeap=0x800000) returned 1
	[0131.894] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x81cc88, nSize=0xf | out: lpDst="") returned 0x2c
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ccb0 | out: hHeap=0x800000) returned 1
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81cc88, Size=0x3a) returned 0x81d478
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x3a) returned 0x81d4c0
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81ea68
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ea68 | out: hHeap=0x800000) returned 1
	[0131.895] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x81d478, nSize=0x1d | out: lpDst="") returned 0x2c
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d4c0 | out: hHeap=0x800000) returned 1
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d478, Size=0x72) returned 0x80f658
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x72) returned 0x80f6d8
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81ea68
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ea68 | out: hHeap=0x800000) returned 1
	[0131.895] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x80f658, nSize=0x39 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x2c
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80f6d8 | out: hHeap=0x800000) returned 1
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc60 | out: hHeap=0x800000) returned 1
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d478
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3e) returned 0x81d4c0
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x3e) returned 0x81d508
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81ea68
	[0131.895] GetProcessHeap () returned 0x800000
	[0131.895] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x10) returned 0x811548
	[0131.895] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fa2c | out: phkResult=0x28fa2c*=0xbc) returned 0x0
	[0131.896] RegQueryValueExW (in: hKey=0xbc, lpValueName="Startup", lpReserved=0x0, lpType=0x28fa28, lpData=0x81d508, lpcbData=0x28fa30*=0x3e | out: lpType=0x28fa28*=0x2, lpData=0x81d508*=0x2f, lpcbData=0x28fa30*=0x98) returned 0xea
	[0131.896] RegCloseKey (hKey=0xbc) returned 0x0
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811548 | out: hHeap=0x800000) returned 1
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ea68 | out: hHeap=0x800000) returned 1
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d508 | out: hHeap=0x800000) returned 1
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d4c0, Size=0x7a) returned 0x81ea68
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x7a) returned 0x81eaf0
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81eb78
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x10) returned 0x811548
	[0131.896] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fa2c | out: phkResult=0x28fa2c*=0xbc) returned 0x0
	[0131.896] RegQueryValueExW (in: hKey=0xbc, lpValueName="Startup", lpReserved=0x0, lpType=0x28fa28, lpData=0x81eaf0, lpcbData=0x28fa30*=0x7a | out: lpType=0x28fa28*=0x2, lpData=0x81eaf0*=0xd0, lpcbData=0x28fa30*=0x98) returned 0xea
	[0131.896] RegCloseKey (hKey=0xbc) returned 0x0
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811548 | out: hHeap=0x800000) returned 1
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81eb78 | out: hHeap=0x800000) returned 1
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81eaf0 | out: hHeap=0x800000) returned 1
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81ea68, Size=0xf2) returned 0x81ea68
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0xf2) returned 0x81eb68
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81e3d0
	[0131.896] GetProcessHeap () returned 0x800000
	[0131.896] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x10) returned 0x811548
	[0131.896] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fa2c | out: phkResult=0x28fa2c*=0xbc) returned 0x0
	[0131.896] RegQueryValueExW (in: hKey=0xbc, lpValueName="Startup", lpReserved=0x0, lpType=0x28fa28, lpData=0x81eb68, lpcbData=0x28fa30*=0xf2 | out: lpType=0x28fa28*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x28fa30*=0x98) returned 0x0
	[0131.897] RegCloseKey (hKey=0xbc) returned 0x0
	[0131.897] GetProcessHeap () returned 0x800000
	[0131.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811548 | out: hHeap=0x800000) returned 1
	[0131.897] GetProcessHeap () returned 0x800000
	[0131.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cc60
	[0131.897] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fa2c | out: phkResult=0x28fa2c*=0xbc) returned 0x0
	[0131.897] RegQueryValueExW (in: hKey=0xbc, lpValueName="Common Startup", lpReserved=0x0, lpType=0x28fa28, lpData=0x81ec00, lpcbData=0x28fa30*=0x5a | out: lpType=0x28fa28*=0x0, lpData=0x81ec00*=0x73, lpcbData=0x28fa30*=0x5a) returned 0x2
	[0131.897] RegCloseKey (hKey=0xbc) returned 0x0
	[0131.897] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fa40 | out: phkResult=0x28fa40*=0xbc) returned 0x0
	[0131.897] RegQueryValueExW (in: hKey=0xbc, lpValueName="Common Startup", lpReserved=0x0, lpType=0x28fa3c, lpData=0x81ec00, lpcbData=0x28fa44*=0x5a | out: lpType=0x28fa3c*=0x2, lpData=0x81ec00*=0x73, lpcbData=0x28fa44*=0x78) returned 0xea
	[0131.897] RegCloseKey (hKey=0xbc) returned 0x0
	[0131.897] GetProcessHeap () returned 0x800000
	[0131.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc60 | out: hHeap=0x800000) returned 1
	[0131.897] GetProcessHeap () returned 0x800000
	[0131.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e3d0 | out: hHeap=0x800000) returned 1
	[0131.897] GetProcessHeap () returned 0x800000
	[0131.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81eb68 | out: hHeap=0x800000) returned 1
	[0131.897] GetProcessHeap () returned 0x800000
	[0131.897] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81ea68, Size=0x1e2) returned 0x81ea68
	[0131.897] GetProcessHeap () returned 0x800000
	[0131.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e2) returned 0x81e3d0
	[0131.897] GetProcessHeap () returned 0x800000
	[0131.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81e5c0
	[0131.897] GetProcessHeap () returned 0x800000
	[0131.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x10) returned 0x811548
	[0131.897] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fa2c | out: phkResult=0x28fa2c*=0xbc) returned 0x0
	[0131.897] RegQueryValueExW (in: hKey=0xbc, lpValueName="Startup", lpReserved=0x0, lpType=0x28fa28, lpData=0x81e3d0, lpcbData=0x28fa30*=0x1e2 | out: lpType=0x28fa28*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x28fa30*=0x98) returned 0x0
	[0131.897] RegCloseKey (hKey=0xbc) returned 0x0
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811548 | out: hHeap=0x800000) returned 1
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cc60
	[0131.898] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fa2c | out: phkResult=0x28fa2c*=0xbc) returned 0x0
	[0131.898] RegQueryValueExW (in: hKey=0xbc, lpValueName="Common Startup", lpReserved=0x0, lpType=0x28fa28, lpData=0x81e468, lpcbData=0x28fa30*=0x14a | out: lpType=0x28fa28*=0x0, lpData=0x81e468*=0x80, lpcbData=0x28fa30*=0x14a) returned 0x2
	[0131.898] RegCloseKey (hKey=0xbc) returned 0x0
	[0131.898] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x28fa40 | out: phkResult=0x28fa40*=0xbc) returned 0x0
	[0131.898] RegQueryValueExW (in: hKey=0xbc, lpValueName="Common Startup", lpReserved=0x0, lpType=0x28fa3c, lpData=0x81e468, lpcbData=0x28fa44*=0x14a | out: lpType=0x28fa3c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x28fa44*=0x78) returned 0x0
	[0131.898] RegCloseKey (hKey=0xbc) returned 0x0
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc60 | out: hHeap=0x800000) returned 1
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e5c0 | out: hHeap=0x800000) returned 1
	[0131.898] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x81ea68, nSize=0xf1 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x99
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e3d0 | out: hHeap=0x800000) returned 1
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d478 | out: hHeap=0x800000) returned 1
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20a) returned 0x81e3d0
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20a) returned 0x81f080
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20a) returned 0x81f298
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20a) returned 0x81f4b0
	[0131.898] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x81e3d0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20a) returned 0x81f6c8
	[0131.898] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x81f6c8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f6c8 | out: hHeap=0x800000) returned 1
	[0131.898] GetProcessHeap () returned 0x800000
	[0131.898] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20a) returned 0x81f6c8
	[0131.898] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x81f6c8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0131.899] GetProcessHeap () returned 0x800000
	[0131.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f6c8 | out: hHeap=0x800000) returned 1
	[0131.899] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"), bFailIfExists=0) returned 0
	[0131.900] GetProcessHeap () returned 0x800000
	[0131.900] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x134) returned 0x81e5e8
	[0131.900] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"), lpNewFileName="c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe"), bFailIfExists=1) returned 0
	[0131.900] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe"), bFailIfExists=1) returned 0
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e5e8 | out: hHeap=0x800000) returned 1
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e3d0 | out: hHeap=0x800000) returned 1
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f080 | out: hHeap=0x800000) returned 1
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f298 | out: hHeap=0x800000) returned 1
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f4b0 | out: hHeap=0x800000) returned 1
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81edb0 | out: hHeap=0x800000) returned 1
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80f658 | out: hHeap=0x800000) returned 1
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ea68 | out: hHeap=0x800000) returned 1
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cc60
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cc88
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81ccb0
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81edb0
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81edb0 | out: hHeap=0x800000) returned 1
	[0131.901] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81cc88, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ccb0 | out: hHeap=0x800000) returned 1
	[0131.901] GetProcessHeap () returned 0x800000
	[0131.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc60 | out: hHeap=0x800000) returned 1
	[0131.901] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x28fb44, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x28fb44*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc88 | out: hHeap=0x800000) returned 1
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x28) returned 0x81edb0
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x811548
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x80) returned 0x81ede0
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x74) returned 0x80f658
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x80f658, Size=0xe6) returned 0x81ea68
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x811578
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x180) returned 0x81e3d0
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x250) returned 0x81e558
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81eb58
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x84) returned 0x81ebf0
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x84) returned 0x81f080
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f110
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f110 | out: hHeap=0x800000) returned 1
	[0131.902] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x81ebf0, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f080 | out: hHeap=0x800000) returned 1
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81eb58 | out: hHeap=0x800000) returned 1
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0xc0) returned 0x81f080
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0xb8) returned 0x81f148
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0xb8) returned 0x81f208
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81eb58
	[0131.902] GetProcessHeap () returned 0x800000
	[0131.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81eb58 | out: hHeap=0x800000) returned 1
	[0131.903] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;", lpDst=0x81f148, nSize=0x5c | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;") returned 0x5c
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f208 | out: hHeap=0x800000) returned 1
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f080 | out: hHeap=0x800000) returned 1
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20a) returned 0x81f208
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20a) returned 0x81f420
	[0131.903] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x81f420, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f420 | out: hHeap=0x800000) returned 1
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x174) returned 0x81f420
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81f420, Size=0x3be) returned 0x81f420
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x86) returned 0x81eb58
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81eb58, Size=0xa2) returned 0x81f080
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0xba) returned 0x81f7e8
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f208 | out: hHeap=0x800000) returned 1
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e3d0 | out: hHeap=0x800000) returned 1
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e558 | out: hHeap=0x800000) returned 1
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ebf0 | out: hHeap=0x800000) returned 1
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f148 | out: hHeap=0x800000) returned 1
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811548 | out: hHeap=0x800000) returned 1
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ede0 | out: hHeap=0x800000) returned 1
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cc88
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cc60
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81ccb0
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81ede0
	[0131.903] GetProcessHeap () returned 0x800000
	[0131.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ede0 | out: hHeap=0x800000) returned 1
	[0131.904] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81cc60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ccb0 | out: hHeap=0x800000) returned 1
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc88 | out: hHeap=0x800000) returned 1
	[0131.904] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x28fb44, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x28fb44*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc60 | out: hHeap=0x800000) returned 1
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x28) returned 0x81ede0
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x811548
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x80) returned 0x81eb58
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x74) returned 0x80f658
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x80f658, Size=0xe6) returned 0x81f130
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x811590
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x180) returned 0x81f220
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x250) returned 0x81e3d0
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x84) returned 0x81ebe0
	[0131.904] GetProcessHeap () returned 0x800000
	[0131.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x84) returned 0x81e628
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0131.905] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x81ebe0, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e628 | out: hHeap=0x800000) returned 1
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0xc0) returned 0x81e628
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0xb8) returned 0x81e6f0
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0xb8) returned 0x8218b0
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0131.905] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;", lpDst=0x81e6f0, nSize=0x5c | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;") returned 0x5c
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8218b0 | out: hHeap=0x800000) returned 1
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e628 | out: hHeap=0x800000) returned 1
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20a) returned 0x8218b0
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20a) returned 0x821ac8
	[0131.905] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x821ac8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x821ac8 | out: hHeap=0x800000) returned 1
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x174) returned 0x821ac8
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x24e) returned 0x821c48
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x86) returned 0x81e628
	[0131.905] GetProcessHeap () returned 0x800000
	[0131.906] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81e628, Size=0xa2) returned 0x81e628
	[0131.906] GetProcessHeap () returned 0x800000
	[0131.906] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0xba) returned 0x821ea0
	[0131.906] GetProcessHeap () returned 0x800000
	[0131.906] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8218b0 | out: hHeap=0x800000) returned 1
	[0131.906] GetProcessHeap () returned 0x800000
	[0131.906] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f220 | out: hHeap=0x800000) returned 1
	[0131.906] GetProcessHeap () returned 0x800000
	[0131.906] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e3d0 | out: hHeap=0x800000) returned 1
	[0131.906] GetProcessHeap () returned 0x800000
	[0131.906] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ebe0 | out: hHeap=0x800000) returned 1
	[0131.906] GetProcessHeap () returned 0x800000
	[0131.906] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e6f0 | out: hHeap=0x800000) returned 1
	[0131.906] GetProcessHeap () returned 0x800000
	[0131.906] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811548 | out: hHeap=0x800000) returned 1
	[0131.906] GetProcessHeap () returned 0x800000
	[0131.906] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81eb58 | out: hHeap=0x800000) returned 1
	[0131.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x402013, lpParameter=0x28fb70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc
	[0131.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401fab, lpParameter=0x28fb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4
	[0131.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401e4e, lpParameter=0x28fb8c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0
	[0131.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401859, lpParameter=0x28fb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc
	[0131.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40197c, lpParameter=0x28fb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0
	[0131.909] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xffffffff) 

Thread:
	id = 46
	os_tid = 0x6d0

	[0132.014] GetVersion () returned 0x1db10106
	[0132.014] GetCurrentProcess () returned 0xffffffff
	[0132.014] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x239f90c | out: TokenHandle=0x239f90c*=0xd4) returned 1
	[0132.014] GetTokenInformation (in: TokenHandle=0xd4, TokenInformationClass=0x14, TokenInformation=0x239f904, TokenInformationLength=0x4, ReturnLength=0x239f908 | out: TokenInformation=0x239f904, ReturnLength=0x239f908) returned 1
	[0132.014] CloseHandle (hObject=0xd4) returned 1
	[0132.014] GetProcessHeap () returned 0x800000
	[0132.014] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cc60
	[0132.014] GetProcessHeap () returned 0x800000
	[0132.014] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cc88
	[0132.014] GetProcessHeap () returned 0x800000
	[0132.014] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81ccb0
	[0132.014] GetProcessHeap () returned 0x800000
	[0132.014] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0132.014] GetProcessHeap () returned 0x800000
	[0132.014] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0132.014] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81cc88, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.014] GetProcessHeap () returned 0x800000
	[0132.014] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ccb0 | out: hHeap=0x800000) returned 1
	[0132.014] GetProcessHeap () returned 0x800000
	[0132.014] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc60 | out: hHeap=0x800000) returned 1
	[0132.014] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.015] GetProcessHeap () returned 0x800000
	[0132.015] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cc88 | out: hHeap=0x800000) returned 1
	[0132.015] GetProcessHeap () returned 0x800000
	[0132.015] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d478
	[0132.015] GetProcessHeap () returned 0x800000
	[0132.015] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d4c0
	[0132.015] GetProcessHeap () returned 0x800000
	[0132.015] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d4c0, Size=0x72) returned 0x80f658
	[0132.015] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.015] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0xd4
	[0132.015] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x0
	[0132.015] GetProcessHeap () returned 0x800000
	[0132.015] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d478 | out: hHeap=0x800000) returned 1
	[0132.015] GetProcessHeap () returned 0x800000
	[0132.015] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80f658 | out: hHeap=0x800000) returned 1
	[0132.015] ReleaseMutex (hMutex=0xd4) returned 1
	[0132.015] CloseHandle (hObject=0xd4) returned 1
	[0132.015] Sleep (dwMilliseconds=0x3e8) 
	[0133.036] GetProcessHeap () returned 0x800000
	[0133.036] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81d160
	[0133.036] GetProcessHeap () returned 0x800000
	[0133.036] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81d188
	[0133.037] GetProcessHeap () returned 0x800000
	[0133.037] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81d1b0
	[0133.037] GetProcessHeap () returned 0x800000
	[0133.037] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0133.037] GetProcessHeap () returned 0x800000
	[0133.037] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0133.037] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81d188, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0133.037] GetProcessHeap () returned 0x800000
	[0133.037] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d1b0 | out: hHeap=0x800000) returned 1
	[0133.037] GetProcessHeap () returned 0x800000
	[0133.037] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d160 | out: hHeap=0x800000) returned 1
	[0133.037] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0133.037] GetProcessHeap () returned 0x800000
	[0133.037] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d188 | out: hHeap=0x800000) returned 1
	[0133.037] GetProcessHeap () returned 0x800000
	[0133.037] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d6b8
	[0133.037] GetProcessHeap () returned 0x800000
	[0133.037] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d700
	[0133.037] GetProcessHeap () returned 0x800000
	[0133.037] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d700, Size=0x72) returned 0x80f858
	[0133.037] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0133.037] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x168
	[0133.037] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0x0) returned 0x0
	[0133.037] GetProcessHeap () returned 0x800000
	[0133.037] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d6b8 | out: hHeap=0x800000) returned 1
	[0133.037] GetProcessHeap () returned 0x800000
	[0133.037] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80f858 | out: hHeap=0x800000) returned 1
	[0133.037] ReleaseMutex (hMutex=0x168) returned 1
	[0133.037] CloseHandle (hObject=0x168) returned 1
	[0133.037] Sleep (dwMilliseconds=0x3e8) 
	[0134.206] GetProcessHeap () returned 0x800000
	[0134.206] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35548f8
	[0134.206] GetProcessHeap () returned 0x800000
	[0134.206] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554970
	[0134.206] GetProcessHeap () returned 0x800000
	[0134.206] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0134.206] GetProcessHeap () returned 0x800000
	[0134.206] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0134.206] GetProcessHeap () returned 0x800000
	[0134.206] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0134.206] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554970, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0134.206] GetProcessHeap () returned 0x800000
	[0134.206] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0134.206] GetProcessHeap () returned 0x800000
	[0134.206] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0134.206] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0134.207] GetProcessHeap () returned 0x800000
	[0134.207] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554970 | out: hHeap=0x800000) returned 1
	[0134.207] GetProcessHeap () returned 0x800000
	[0134.207] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0134.207] GetProcessHeap () returned 0x800000
	[0134.207] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0134.207] GetProcessHeap () returned 0x800000
	[0134.207] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fbd8
	[0134.207] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0134.207] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x148
	[0134.207] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x0) returned 0x0
	[0134.207] GetProcessHeap () returned 0x800000
	[0134.207] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0134.207] GetProcessHeap () returned 0x800000
	[0134.207] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fbd8 | out: hHeap=0x800000) returned 1
	[0134.207] ReleaseMutex (hMutex=0x148) returned 1
	[0134.207] CloseHandle (hObject=0x148) returned 1
	[0134.207] Sleep (dwMilliseconds=0x3e8) 
	[0135.312] GetProcessHeap () returned 0x800000
	[0135.312] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554970
	[0135.312] GetProcessHeap () returned 0x800000
	[0135.312] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548f8
	[0135.313] GetProcessHeap () returned 0x800000
	[0135.313] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0135.313] GetProcessHeap () returned 0x800000
	[0135.313] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0135.313] GetProcessHeap () returned 0x800000
	[0135.313] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0135.313] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0135.313] GetProcessHeap () returned 0x800000
	[0135.313] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0135.313] GetProcessHeap () returned 0x800000
	[0135.313] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554970 | out: hHeap=0x800000) returned 1
	[0135.313] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0135.313] GetProcessHeap () returned 0x800000
	[0135.313] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0135.313] GetProcessHeap () returned 0x800000
	[0135.313] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0135.313] GetProcessHeap () returned 0x800000
	[0135.313] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0135.313] GetProcessHeap () returned 0x800000
	[0135.313] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fb58
	[0135.313] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0135.313] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x1fc
	[0135.313] WaitForSingleObject (hHandle=0x1fc, dwMilliseconds=0x0) returned 0x0
	[0135.313] GetProcessHeap () returned 0x800000
	[0135.313] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0135.313] GetProcessHeap () returned 0x800000
	[0135.313] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fb58 | out: hHeap=0x800000) returned 1
	[0135.313] ReleaseMutex (hMutex=0x1fc) returned 1
	[0135.313] CloseHandle (hObject=0x1fc) returned 1
	[0135.314] Sleep (dwMilliseconds=0x3e8) 
	[0136.429] GetProcessHeap () returned 0x800000
	[0136.429] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35548f8
	[0136.429] GetProcessHeap () returned 0x800000
	[0136.429] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554970
	[0136.429] GetProcessHeap () returned 0x800000
	[0136.429] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0136.429] GetProcessHeap () returned 0x800000
	[0136.429] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0136.429] GetProcessHeap () returned 0x800000
	[0136.429] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0136.429] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554970, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0136.429] GetProcessHeap () returned 0x800000
	[0136.429] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0136.429] GetProcessHeap () returned 0x800000
	[0136.429] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0136.429] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0136.430] GetProcessHeap () returned 0x800000
	[0136.430] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554970 | out: hHeap=0x800000) returned 1
	[0136.430] GetProcessHeap () returned 0x800000
	[0136.430] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0136.430] GetProcessHeap () returned 0x800000
	[0136.430] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0136.430] GetProcessHeap () returned 0x800000
	[0136.430] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fb58
	[0136.430] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0136.430] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x168
	[0136.430] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0x0) returned 0x0
	[0136.430] GetProcessHeap () returned 0x800000
	[0136.430] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0136.430] GetProcessHeap () returned 0x800000
	[0136.430] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fb58 | out: hHeap=0x800000) returned 1
	[0136.430] ReleaseMutex (hMutex=0x168) returned 1
	[0136.430] CloseHandle (hObject=0x168) returned 1
	[0136.430] Sleep (dwMilliseconds=0x3e8) 
	[0137.548] GetProcessHeap () returned 0x800000
	[0137.548] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cfd0
	[0137.548] GetProcessHeap () returned 0x800000
	[0137.548] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554970
	[0137.548] GetProcessHeap () returned 0x800000
	[0137.548] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x35548f8
	[0137.548] GetProcessHeap () returned 0x800000
	[0137.548] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0137.548] GetProcessHeap () returned 0x800000
	[0137.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0137.548] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554970, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0137.548] GetProcessHeap () returned 0x800000
	[0137.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0137.548] GetProcessHeap () returned 0x800000
	[0137.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cfd0 | out: hHeap=0x800000) returned 1
	[0137.548] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0137.548] GetProcessHeap () returned 0x800000
	[0137.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554970 | out: hHeap=0x800000) returned 1
	[0137.548] GetProcessHeap () returned 0x800000
	[0137.548] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0137.549] GetProcessHeap () returned 0x800000
	[0137.549] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0137.549] GetProcessHeap () returned 0x800000
	[0137.549] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0137.549] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0137.549] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x148
	[0137.549] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x0) returned 0x0
	[0137.549] GetProcessHeap () returned 0x800000
	[0137.549] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0137.549] GetProcessHeap () returned 0x800000
	[0137.549] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0137.549] ReleaseMutex (hMutex=0x148) returned 1
	[0137.549] CloseHandle (hObject=0x148) returned 1
	[0137.549] Sleep (dwMilliseconds=0x3e8) 
	[0138.604] GetProcessHeap () returned 0x800000
	[0138.604] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554970
	[0138.604] GetProcessHeap () returned 0x800000
	[0138.604] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548f8
	[0138.604] GetProcessHeap () returned 0x800000
	[0138.604] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0138.604] GetProcessHeap () returned 0x800000
	[0138.604] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0138.604] GetProcessHeap () returned 0x800000
	[0138.604] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0138.604] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0138.604] GetProcessHeap () returned 0x800000
	[0138.604] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0138.604] GetProcessHeap () returned 0x800000
	[0138.604] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554970 | out: hHeap=0x800000) returned 1
	[0138.604] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0138.605] GetProcessHeap () returned 0x800000
	[0138.605] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0138.605] GetProcessHeap () returned 0x800000
	[0138.605] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0138.605] GetProcessHeap () returned 0x800000
	[0138.605] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0138.605] GetProcessHeap () returned 0x800000
	[0138.605] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0138.605] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0138.605] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x148
	[0138.605] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x0) returned 0x0
	[0138.605] GetProcessHeap () returned 0x800000
	[0138.605] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0138.605] GetProcessHeap () returned 0x800000
	[0138.605] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0138.605] ReleaseMutex (hMutex=0x148) returned 1
	[0138.605] CloseHandle (hObject=0x148) returned 1
	[0138.605] Sleep (dwMilliseconds=0x3e8) 
	[0139.776] GetProcessHeap () returned 0x800000
	[0139.776] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35548f8
	[0139.776] GetProcessHeap () returned 0x800000
	[0139.776] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554970
	[0139.776] GetProcessHeap () returned 0x800000
	[0139.776] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0139.776] GetProcessHeap () returned 0x800000
	[0139.776] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0139.776] GetProcessHeap () returned 0x800000
	[0139.776] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0139.776] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554970, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0139.776] GetProcessHeap () returned 0x800000
	[0139.776] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0139.776] GetProcessHeap () returned 0x800000
	[0139.776] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0139.776] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0139.777] GetProcessHeap () returned 0x800000
	[0139.777] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554970 | out: hHeap=0x800000) returned 1
	[0139.777] GetProcessHeap () returned 0x800000
	[0139.777] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0139.777] GetProcessHeap () returned 0x800000
	[0139.777] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0139.777] GetProcessHeap () returned 0x800000
	[0139.777] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0139.777] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0139.777] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x148
	[0139.777] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x0) returned 0x0
	[0139.777] GetProcessHeap () returned 0x800000
	[0139.777] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0139.777] GetProcessHeap () returned 0x800000
	[0139.777] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0139.777] ReleaseMutex (hMutex=0x148) returned 1
	[0139.777] CloseHandle (hObject=0x148) returned 1
	[0139.777] Sleep (dwMilliseconds=0x3e8) 
	[0140.804] GetProcessHeap () returned 0x800000
	[0140.804] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554970
	[0140.804] GetProcessHeap () returned 0x800000
	[0140.804] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548f8
	[0140.804] GetProcessHeap () returned 0x800000
	[0140.804] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0140.804] GetProcessHeap () returned 0x800000
	[0140.804] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0140.804] GetProcessHeap () returned 0x800000
	[0140.804] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0140.804] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0140.804] GetProcessHeap () returned 0x800000
	[0140.804] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0140.804] GetProcessHeap () returned 0x800000
	[0140.804] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554970 | out: hHeap=0x800000) returned 1
	[0140.804] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0140.804] GetProcessHeap () returned 0x800000
	[0140.804] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0140.805] GetProcessHeap () returned 0x800000
	[0140.805] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0140.805] GetProcessHeap () returned 0x800000
	[0140.805] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0140.805] GetProcessHeap () returned 0x800000
	[0140.805] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0140.805] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0140.805] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x148
	[0140.805] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x0) returned 0x0
	[0140.805] GetProcessHeap () returned 0x800000
	[0140.805] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0140.805] GetProcessHeap () returned 0x800000
	[0140.805] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0140.805] ReleaseMutex (hMutex=0x148) returned 1
	[0140.805] CloseHandle (hObject=0x148) returned 1
	[0140.806] Sleep (dwMilliseconds=0x3e8) 
	[0141.938] GetProcessHeap () returned 0x800000
	[0141.938] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35548f8
	[0141.938] GetProcessHeap () returned 0x800000
	[0141.938] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554970
	[0141.938] GetProcessHeap () returned 0x800000
	[0141.938] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0141.938] GetProcessHeap () returned 0x800000
	[0141.939] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0141.939] GetProcessHeap () returned 0x800000
	[0141.939] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0141.939] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554970, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0141.939] GetProcessHeap () returned 0x800000
	[0141.939] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0141.939] GetProcessHeap () returned 0x800000
	[0141.939] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0141.939] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0141.939] GetProcessHeap () returned 0x800000
	[0141.939] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554970 | out: hHeap=0x800000) returned 1
	[0141.939] GetProcessHeap () returned 0x800000
	[0141.939] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0141.939] GetProcessHeap () returned 0x800000
	[0141.939] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0141.939] GetProcessHeap () returned 0x800000
	[0141.939] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0141.939] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0141.939] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x148
	[0141.939] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x0) returned 0x0
	[0141.939] GetProcessHeap () returned 0x800000
	[0141.939] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0141.939] GetProcessHeap () returned 0x800000
	[0141.939] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0141.939] ReleaseMutex (hMutex=0x148) returned 1
	[0141.939] CloseHandle (hObject=0x148) returned 1
	[0141.939] Sleep (dwMilliseconds=0x3e8) 
	[0143.654] GetProcessHeap () returned 0x800000
	[0143.654] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554970
	[0143.654] GetProcessHeap () returned 0x800000
	[0143.654] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548f8
	[0143.654] GetProcessHeap () returned 0x800000
	[0143.654] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0143.654] GetProcessHeap () returned 0x800000
	[0143.654] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0143.654] GetProcessHeap () returned 0x800000
	[0143.654] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0143.654] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0143.654] GetProcessHeap () returned 0x800000
	[0143.654] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0143.654] GetProcessHeap () returned 0x800000
	[0143.654] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554970 | out: hHeap=0x800000) returned 1
	[0143.655] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0143.655] GetProcessHeap () returned 0x800000
	[0143.655] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0143.655] GetProcessHeap () returned 0x800000
	[0143.655] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0143.655] GetProcessHeap () returned 0x800000
	[0143.655] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0143.655] GetProcessHeap () returned 0x800000
	[0143.655] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0143.655] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0143.655] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x1f4
	[0143.655] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0x0) returned 0x0
	[0143.655] GetProcessHeap () returned 0x800000
	[0143.655] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0143.655] GetProcessHeap () returned 0x800000
	[0143.655] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0143.655] ReleaseMutex (hMutex=0x1f4) returned 1
	[0143.655] CloseHandle (hObject=0x1f4) returned 1
	[0143.655] Sleep (dwMilliseconds=0x3e8) 
	[0144.759] GetProcessHeap () returned 0x800000
	[0144.759] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35548f8
	[0144.759] GetProcessHeap () returned 0x800000
	[0144.759] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554970
	[0144.759] GetProcessHeap () returned 0x800000
	[0144.759] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0144.760] GetProcessHeap () returned 0x800000
	[0144.760] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0144.760] GetProcessHeap () returned 0x800000
	[0144.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0144.760] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554970, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0144.760] GetProcessHeap () returned 0x800000
	[0144.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0144.760] GetProcessHeap () returned 0x800000
	[0144.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0144.760] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0144.760] GetProcessHeap () returned 0x800000
	[0144.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554970 | out: hHeap=0x800000) returned 1
	[0144.760] GetProcessHeap () returned 0x800000
	[0144.760] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0144.760] GetProcessHeap () returned 0x800000
	[0144.760] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0144.760] GetProcessHeap () returned 0x800000
	[0144.760] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0144.760] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0144.760] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x168
	[0144.760] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0x0) returned 0x0
	[0144.760] GetProcessHeap () returned 0x800000
	[0144.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0144.760] GetProcessHeap () returned 0x800000
	[0144.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0144.760] ReleaseMutex (hMutex=0x168) returned 1
	[0144.760] CloseHandle (hObject=0x168) returned 1
	[0144.760] Sleep (dwMilliseconds=0x3e8) 
	[0145.825] GetProcessHeap () returned 0x800000
	[0145.825] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554970
	[0145.825] GetProcessHeap () returned 0x800000
	[0145.825] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548f8
	[0145.825] GetProcessHeap () returned 0x800000
	[0145.825] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0145.825] GetProcessHeap () returned 0x800000
	[0145.825] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0145.825] GetProcessHeap () returned 0x800000
	[0145.825] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0145.825] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0145.825] GetProcessHeap () returned 0x800000
	[0145.825] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0145.825] GetProcessHeap () returned 0x800000
	[0145.825] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554970 | out: hHeap=0x800000) returned 1
	[0145.825] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0145.826] GetProcessHeap () returned 0x800000
	[0145.826] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0145.826] GetProcessHeap () returned 0x800000
	[0145.826] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0145.826] GetProcessHeap () returned 0x800000
	[0145.826] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0145.826] GetProcessHeap () returned 0x800000
	[0145.826] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0145.826] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0145.826] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x200
	[0145.826] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0x0) returned 0x0
	[0145.826] GetProcessHeap () returned 0x800000
	[0145.826] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0145.826] GetProcessHeap () returned 0x800000
	[0145.826] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0145.826] ReleaseMutex (hMutex=0x200) returned 1
	[0145.826] CloseHandle (hObject=0x200) returned 1
	[0145.826] Sleep (dwMilliseconds=0x3e8) 
	[0146.944] GetProcessHeap () returned 0x800000
	[0146.944] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554808
	[0146.944] GetProcessHeap () returned 0x800000
	[0146.944] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554a10
	[0146.944] GetProcessHeap () returned 0x800000
	[0146.944] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554a38
	[0146.944] GetProcessHeap () returned 0x800000
	[0146.944] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0146.944] GetProcessHeap () returned 0x800000
	[0146.944] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0146.944] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554a10, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0146.944] GetProcessHeap () returned 0x800000
	[0146.944] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a38 | out: hHeap=0x800000) returned 1
	[0146.944] GetProcessHeap () returned 0x800000
	[0146.944] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0146.944] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0146.944] GetProcessHeap () returned 0x800000
	[0146.944] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a10 | out: hHeap=0x800000) returned 1
	[0146.944] GetProcessHeap () returned 0x800000
	[0146.944] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0146.944] GetProcessHeap () returned 0x800000
	[0146.944] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0146.944] GetProcessHeap () returned 0x800000
	[0146.944] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0146.944] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0146.944] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x148
	[0146.944] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x0) returned 0x0
	[0146.945] GetProcessHeap () returned 0x800000
	[0146.945] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0146.945] GetProcessHeap () returned 0x800000
	[0146.945] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0146.945] ReleaseMutex (hMutex=0x148) returned 1
	[0146.945] CloseHandle (hObject=0x148) returned 1
	[0146.945] Sleep (dwMilliseconds=0x3e8) 
	[0148.096] GetProcessHeap () returned 0x800000
	[0148.096] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554a10
	[0148.096] GetProcessHeap () returned 0x800000
	[0148.096] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554a38
	[0148.096] GetProcessHeap () returned 0x800000
	[0148.096] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554948
	[0148.096] GetProcessHeap () returned 0x800000
	[0148.096] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0148.096] GetProcessHeap () returned 0x800000
	[0148.096] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0148.096] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554a38, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0148.096] GetProcessHeap () returned 0x800000
	[0148.096] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554948 | out: hHeap=0x800000) returned 1
	[0148.096] GetProcessHeap () returned 0x800000
	[0148.096] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a10 | out: hHeap=0x800000) returned 1
	[0148.096] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0148.097] GetProcessHeap () returned 0x800000
	[0148.097] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a38 | out: hHeap=0x800000) returned 1
	[0148.097] GetProcessHeap () returned 0x800000
	[0148.097] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0148.097] GetProcessHeap () returned 0x800000
	[0148.097] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0148.097] GetProcessHeap () returned 0x800000
	[0148.097] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0148.097] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0148.097] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x204
	[0148.097] WaitForSingleObject (hHandle=0x204, dwMilliseconds=0x0) returned 0x0
	[0148.097] GetProcessHeap () returned 0x800000
	[0148.097] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0148.097] GetProcessHeap () returned 0x800000
	[0148.097] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0148.097] ReleaseMutex (hMutex=0x204) returned 1
	[0148.097] CloseHandle (hObject=0x204) returned 1
	[0148.097] Sleep (dwMilliseconds=0x3e8) 
	[0149.237] GetProcessHeap () returned 0x800000
	[0149.238] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554a38
	[0149.238] GetProcessHeap () returned 0x800000
	[0149.238] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554a10
	[0149.238] GetProcessHeap () returned 0x800000
	[0149.238] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554948
	[0149.238] GetProcessHeap () returned 0x800000
	[0149.238] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0149.238] GetProcessHeap () returned 0x800000
	[0149.238] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0149.238] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554a10, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0149.238] GetProcessHeap () returned 0x800000
	[0149.238] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554948 | out: hHeap=0x800000) returned 1
	[0149.238] GetProcessHeap () returned 0x800000
	[0149.238] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a38 | out: hHeap=0x800000) returned 1
	[0149.238] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0149.238] GetProcessHeap () returned 0x800000
	[0149.238] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a10 | out: hHeap=0x800000) returned 1
	[0149.238] GetProcessHeap () returned 0x800000
	[0149.238] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0149.238] GetProcessHeap () returned 0x800000
	[0149.238] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0149.238] GetProcessHeap () returned 0x800000
	[0149.239] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0149.239] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0149.239] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x168
	[0149.239] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0x0) returned 0x0
	[0149.239] GetProcessHeap () returned 0x800000
	[0149.239] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0149.239] GetProcessHeap () returned 0x800000
	[0149.239] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0149.239] ReleaseMutex (hMutex=0x168) returned 1
	[0149.239] CloseHandle (hObject=0x168) returned 1
	[0149.239] Sleep (dwMilliseconds=0x3e8) 
	[0150.314] GetProcessHeap () returned 0x800000
	[0150.314] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554a10
	[0150.314] GetProcessHeap () returned 0x800000
	[0150.314] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554a38
	[0150.314] GetProcessHeap () returned 0x800000
	[0150.314] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554948
	[0150.314] GetProcessHeap () returned 0x800000
	[0150.315] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0150.315] GetProcessHeap () returned 0x800000
	[0150.315] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0150.315] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554a38, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0150.315] GetProcessHeap () returned 0x800000
	[0150.315] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554948 | out: hHeap=0x800000) returned 1
	[0150.315] GetProcessHeap () returned 0x800000
	[0150.315] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a10 | out: hHeap=0x800000) returned 1
	[0150.315] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0150.315] GetProcessHeap () returned 0x800000
	[0150.315] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a38 | out: hHeap=0x800000) returned 1
	[0150.315] GetProcessHeap () returned 0x800000
	[0150.315] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0150.315] GetProcessHeap () returned 0x800000
	[0150.315] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0150.315] GetProcessHeap () returned 0x800000
	[0150.316] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0150.316] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0150.316] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x204
	[0150.316] WaitForSingleObject (hHandle=0x204, dwMilliseconds=0x0) returned 0x0
	[0150.316] GetProcessHeap () returned 0x800000
	[0150.316] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0150.316] GetProcessHeap () returned 0x800000
	[0150.316] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0150.316] ReleaseMutex (hMutex=0x204) returned 1
	[0150.316] CloseHandle (hObject=0x204) returned 1
	[0150.316] Sleep (dwMilliseconds=0x3e8) 
	[0151.407] GetProcessHeap () returned 0x800000
	[0151.407] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554a38
	[0151.407] GetProcessHeap () returned 0x800000
	[0151.407] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554a10
	[0151.407] GetProcessHeap () returned 0x800000
	[0151.407] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554948
	[0151.407] GetProcessHeap () returned 0x800000
	[0151.407] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0151.407] GetProcessHeap () returned 0x800000
	[0151.407] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0151.407] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554a10, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0151.407] GetProcessHeap () returned 0x800000
	[0151.407] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554948 | out: hHeap=0x800000) returned 1
	[0151.407] GetProcessHeap () returned 0x800000
	[0151.407] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a38 | out: hHeap=0x800000) returned 1
	[0151.407] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0151.407] GetProcessHeap () returned 0x800000
	[0151.407] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a10 | out: hHeap=0x800000) returned 1
	[0151.407] GetProcessHeap () returned 0x800000
	[0151.407] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0151.407] GetProcessHeap () returned 0x800000
	[0151.407] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0151.408] GetProcessHeap () returned 0x800000
	[0151.408] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0151.408] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0151.408] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x1f4
	[0151.408] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0x0) returned 0x0
	[0151.408] GetProcessHeap () returned 0x800000
	[0151.408] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0151.408] GetProcessHeap () returned 0x800000
	[0151.408] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0151.408] ReleaseMutex (hMutex=0x1f4) returned 1
	[0151.408] CloseHandle (hObject=0x1f4) returned 1
	[0151.408] Sleep (dwMilliseconds=0x3e8) 
	[0152.545] GetProcessHeap () returned 0x800000
	[0152.545] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554a10
	[0152.545] GetProcessHeap () returned 0x800000
	[0152.545] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554a38
	[0152.545] GetProcessHeap () returned 0x800000
	[0152.545] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554948
	[0152.545] GetProcessHeap () returned 0x800000
	[0152.545] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0152.545] GetProcessHeap () returned 0x800000
	[0152.545] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0152.545] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554a38, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0152.545] GetProcessHeap () returned 0x800000
	[0152.545] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554948 | out: hHeap=0x800000) returned 1
	[0152.545] GetProcessHeap () returned 0x800000
	[0152.545] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a10 | out: hHeap=0x800000) returned 1
	[0152.545] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0152.546] GetProcessHeap () returned 0x800000
	[0152.546] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a38 | out: hHeap=0x800000) returned 1
	[0152.546] GetProcessHeap () returned 0x800000
	[0152.546] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0152.546] GetProcessHeap () returned 0x800000
	[0152.546] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0152.546] GetProcessHeap () returned 0x800000
	[0152.546] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0152.546] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0152.546] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x200
	[0152.546] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0x0) returned 0x0
	[0152.546] GetProcessHeap () returned 0x800000
	[0152.546] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0152.546] GetProcessHeap () returned 0x800000
	[0152.546] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0152.546] ReleaseMutex (hMutex=0x200) returned 1
	[0152.546] CloseHandle (hObject=0x200) returned 1
	[0152.547] Sleep (dwMilliseconds=0x3e8) 
	[0153.669] GetProcessHeap () returned 0x800000
	[0153.669] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554a10
	[0153.669] GetProcessHeap () returned 0x800000
	[0153.669] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554948
	[0153.669] GetProcessHeap () returned 0x800000
	[0153.669] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554a88
	[0153.669] GetProcessHeap () returned 0x800000
	[0153.669] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0153.669] GetProcessHeap () returned 0x800000
	[0153.669] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0153.669] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554948, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0153.669] GetProcessHeap () returned 0x800000
	[0153.669] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a88 | out: hHeap=0x800000) returned 1
	[0153.669] GetProcessHeap () returned 0x800000
	[0153.669] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a10 | out: hHeap=0x800000) returned 1
	[0153.669] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0153.669] GetProcessHeap () returned 0x800000
	[0153.669] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554948 | out: hHeap=0x800000) returned 1
	[0153.669] GetProcessHeap () returned 0x800000
	[0153.669] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0153.669] GetProcessHeap () returned 0x800000
	[0153.669] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0153.669] GetProcessHeap () returned 0x800000
	[0153.669] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0153.669] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0153.670] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x214
	[0153.670] WaitForSingleObject (hHandle=0x214, dwMilliseconds=0x0) returned 0x0
	[0153.670] GetProcessHeap () returned 0x800000
	[0153.670] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0153.670] GetProcessHeap () returned 0x800000
	[0153.670] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0153.670] ReleaseMutex (hMutex=0x214) returned 1
	[0153.670] CloseHandle (hObject=0x214) returned 1
	[0153.670] Sleep (dwMilliseconds=0x3e8) 
	[0154.750] GetProcessHeap () returned 0x800000
	[0154.750] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554a10
	[0154.750] GetProcessHeap () returned 0x800000
	[0154.751] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554a88
	[0154.751] GetProcessHeap () returned 0x800000
	[0154.751] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554ab0
	[0154.751] GetProcessHeap () returned 0x800000
	[0154.751] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0154.751] GetProcessHeap () returned 0x800000
	[0154.751] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0154.751] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554a88, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0154.751] GetProcessHeap () returned 0x800000
	[0154.751] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554ab0 | out: hHeap=0x800000) returned 1
	[0154.751] GetProcessHeap () returned 0x800000
	[0154.751] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a10 | out: hHeap=0x800000) returned 1
	[0154.751] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0154.751] GetProcessHeap () returned 0x800000
	[0154.751] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554a88 | out: hHeap=0x800000) returned 1
	[0154.751] GetProcessHeap () returned 0x800000
	[0154.751] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0154.752] GetProcessHeap () returned 0x800000
	[0154.752] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0154.752] GetProcessHeap () returned 0x800000
	[0154.752] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fb58
	[0154.752] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0154.752] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x214
	[0154.752] WaitForSingleObject (hHandle=0x214, dwMilliseconds=0x0) returned 0x0
	[0154.752] GetProcessHeap () returned 0x800000
	[0154.752] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0154.752] GetProcessHeap () returned 0x800000
	[0154.752] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fb58 | out: hHeap=0x800000) returned 1
	[0154.752] ReleaseMutex (hMutex=0x214) returned 1
	[0154.752] CloseHandle (hObject=0x214) returned 1
	[0154.753] Sleep (dwMilliseconds=0x3e8) 
	[0155.871] GetProcessHeap () returned 0x800000
	[0155.871] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554ad8
	[0155.871] GetProcessHeap () returned 0x800000
	[0155.871] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554b00
	[0155.871] GetProcessHeap () returned 0x800000
	[0155.871] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554b28
	[0155.871] GetProcessHeap () returned 0x800000
	[0155.871] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0155.871] GetProcessHeap () returned 0x800000
	[0155.871] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0155.871] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554b00, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0155.871] GetProcessHeap () returned 0x800000
	[0155.871] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554b28 | out: hHeap=0x800000) returned 1
	[0155.871] GetProcessHeap () returned 0x800000
	[0155.871] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554ad8 | out: hHeap=0x800000) returned 1
	[0155.871] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0155.872] GetProcessHeap () returned 0x800000
	[0155.872] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554b00 | out: hHeap=0x800000) returned 1
	[0155.872] GetProcessHeap () returned 0x800000
	[0155.872] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0155.872] GetProcessHeap () returned 0x800000
	[0155.872] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0155.872] GetProcessHeap () returned 0x800000
	[0155.872] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fb58
	[0155.872] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0155.872] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x210
	[0155.872] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x0) returned 0x0
	[0155.872] GetProcessHeap () returned 0x800000
	[0155.872] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0155.872] GetProcessHeap () returned 0x800000
	[0155.872] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fb58 | out: hHeap=0x800000) returned 1
	[0155.872] ReleaseMutex (hMutex=0x210) returned 1
	[0155.872] CloseHandle (hObject=0x210) returned 1
	[0155.873] Sleep (dwMilliseconds=0x3e8) 
	[0156.983] GetProcessHeap () returned 0x800000
	[0156.983] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35549e8
	[0156.983] GetProcessHeap () returned 0x800000
	[0156.983] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548f8
	[0156.983] GetProcessHeap () returned 0x800000
	[0156.983] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554b00
	[0156.983] GetProcessHeap () returned 0x800000
	[0156.983] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0156.983] GetProcessHeap () returned 0x800000
	[0156.984] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0156.984] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0156.984] GetProcessHeap () returned 0x800000
	[0156.984] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554b00 | out: hHeap=0x800000) returned 1
	[0156.984] GetProcessHeap () returned 0x800000
	[0156.984] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35549e8 | out: hHeap=0x800000) returned 1
	[0156.984] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0156.984] GetProcessHeap () returned 0x800000
	[0156.984] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0156.984] GetProcessHeap () returned 0x800000
	[0156.984] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0156.984] GetProcessHeap () returned 0x800000
	[0156.984] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0156.984] GetProcessHeap () returned 0x800000
	[0156.984] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fb58
	[0156.984] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0156.984] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x168
	[0156.984] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0x0) returned 0x0
	[0156.984] GetProcessHeap () returned 0x800000
	[0156.984] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0156.984] GetProcessHeap () returned 0x800000
	[0156.984] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fb58 | out: hHeap=0x800000) returned 1
	[0156.984] ReleaseMutex (hMutex=0x168) returned 1
	[0156.984] CloseHandle (hObject=0x168) returned 1
	[0156.985] Sleep (dwMilliseconds=0x3e8) 
	[0158.038] GetProcessHeap () returned 0x800000
	[0158.038] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35548f8
	[0158.038] GetProcessHeap () returned 0x800000
	[0158.038] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35549e8
	[0158.038] GetProcessHeap () returned 0x800000
	[0158.038] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554b00
	[0158.038] GetProcessHeap () returned 0x800000
	[0158.038] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0158.038] GetProcessHeap () returned 0x800000
	[0158.038] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0158.038] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35549e8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0158.038] GetProcessHeap () returned 0x800000
	[0158.038] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554b00 | out: hHeap=0x800000) returned 1
	[0158.038] GetProcessHeap () returned 0x800000
	[0158.038] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0158.038] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0158.039] GetProcessHeap () returned 0x800000
	[0158.039] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35549e8 | out: hHeap=0x800000) returned 1
	[0158.039] GetProcessHeap () returned 0x800000
	[0158.039] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0158.039] GetProcessHeap () returned 0x800000
	[0158.039] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0158.039] GetProcessHeap () returned 0x800000
	[0158.039] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fcd8
	[0158.039] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0158.039] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x140
	[0158.039] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0x0) returned 0x0
	[0158.039] GetProcessHeap () returned 0x800000
	[0158.040] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0158.040] GetProcessHeap () returned 0x800000
	[0158.040] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fcd8 | out: hHeap=0x800000) returned 1
	[0158.040] ReleaseMutex (hMutex=0x140) returned 1
	[0158.040] CloseHandle (hObject=0x140) returned 1
	[0158.040] Sleep (dwMilliseconds=0x3e8) 
	[0159.168] GetProcessHeap () returned 0x800000
	[0159.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554970
	[0159.168] GetProcessHeap () returned 0x800000
	[0159.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35549e8
	[0159.168] GetProcessHeap () returned 0x800000
	[0159.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x35548f8
	[0159.168] GetProcessHeap () returned 0x800000
	[0159.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0159.168] GetProcessHeap () returned 0x800000
	[0159.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0159.168] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35549e8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0159.168] GetProcessHeap () returned 0x800000
	[0159.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0159.168] GetProcessHeap () returned 0x800000
	[0159.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554970 | out: hHeap=0x800000) returned 1
	[0159.168] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0159.168] GetProcessHeap () returned 0x800000
	[0159.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35549e8 | out: hHeap=0x800000) returned 1
	[0159.168] GetProcessHeap () returned 0x800000
	[0159.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0159.168] GetProcessHeap () returned 0x800000
	[0159.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0159.168] GetProcessHeap () returned 0x800000
	[0159.168] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0159.169] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0159.169] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x140
	[0159.169] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0x0) returned 0x0
	[0159.169] GetProcessHeap () returned 0x800000
	[0159.169] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0159.169] GetProcessHeap () returned 0x800000
	[0159.169] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0159.169] ReleaseMutex (hMutex=0x140) returned 1
	[0159.169] CloseHandle (hObject=0x140) returned 1
	[0159.169] Sleep (dwMilliseconds=0x3e8) 
	[0160.425] GetProcessHeap () returned 0x800000
	[0160.425] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35549e8
	[0160.425] GetProcessHeap () returned 0x800000
	[0160.425] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548f8
	[0160.425] GetProcessHeap () returned 0x800000
	[0160.425] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0160.425] GetProcessHeap () returned 0x800000
	[0160.425] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0160.425] GetProcessHeap () returned 0x800000
	[0160.425] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0160.425] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0160.425] GetProcessHeap () returned 0x800000
	[0160.425] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0160.425] GetProcessHeap () returned 0x800000
	[0160.425] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35549e8 | out: hHeap=0x800000) returned 1
	[0160.425] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0160.426] GetProcessHeap () returned 0x800000
	[0160.426] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0160.426] GetProcessHeap () returned 0x800000
	[0160.426] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0160.426] GetProcessHeap () returned 0x800000
	[0160.426] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0160.426] GetProcessHeap () returned 0x800000
	[0160.426] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0160.426] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0160.426] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x140
	[0160.426] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0x0) returned 0x0
	[0160.426] GetProcessHeap () returned 0x800000
	[0160.426] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0160.426] GetProcessHeap () returned 0x800000
	[0160.426] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0160.426] ReleaseMutex (hMutex=0x140) returned 1
	[0160.426] CloseHandle (hObject=0x140) returned 1
	[0160.427] Sleep (dwMilliseconds=0x3e8) 
	[0161.529] GetProcessHeap () returned 0x800000
	[0161.529] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35548f8
	[0161.529] GetProcessHeap () returned 0x800000
	[0161.529] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35549e8
	[0161.529] GetProcessHeap () returned 0x800000
	[0161.530] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0161.530] GetProcessHeap () returned 0x800000
	[0161.530] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0161.530] GetProcessHeap () returned 0x800000
	[0161.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0161.530] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35549e8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0161.530] GetProcessHeap () returned 0x800000
	[0161.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0161.530] GetProcessHeap () returned 0x800000
	[0161.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0161.530] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0161.530] GetProcessHeap () returned 0x800000
	[0161.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35549e8 | out: hHeap=0x800000) returned 1
	[0161.530] GetProcessHeap () returned 0x800000
	[0161.530] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0161.530] GetProcessHeap () returned 0x800000
	[0161.530] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0161.530] GetProcessHeap () returned 0x800000
	[0161.530] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0161.530] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0161.530] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x140
	[0161.530] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0x0) returned 0x0
	[0161.531] GetProcessHeap () returned 0x800000
	[0161.531] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0161.531] GetProcessHeap () returned 0x800000
	[0161.531] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0161.531] ReleaseMutex (hMutex=0x140) returned 1
	[0161.531] CloseHandle (hObject=0x140) returned 1
	[0161.531] Sleep (dwMilliseconds=0x3e8) 
	[0162.642] GetProcessHeap () returned 0x800000
	[0162.642] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35549e8
	[0162.642] GetProcessHeap () returned 0x800000
	[0162.642] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548f8
	[0162.642] GetProcessHeap () returned 0x800000
	[0162.642] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0162.642] GetProcessHeap () returned 0x800000
	[0162.642] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0162.642] GetProcessHeap () returned 0x800000
	[0162.642] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0162.642] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0162.642] GetProcessHeap () returned 0x800000
	[0162.642] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0162.642] GetProcessHeap () returned 0x800000
	[0162.642] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35549e8 | out: hHeap=0x800000) returned 1
	[0162.642] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0162.643] GetProcessHeap () returned 0x800000
	[0162.643] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0162.643] GetProcessHeap () returned 0x800000
	[0162.643] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d8f8
	[0162.643] GetProcessHeap () returned 0x800000
	[0162.643] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0162.643] GetProcessHeap () returned 0x800000
	[0162.643] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fc58
	[0162.643] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0162.643] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x20c
	[0162.643] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0
	[0162.643] GetProcessHeap () returned 0x800000
	[0162.643] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d8f8 | out: hHeap=0x800000) returned 1
	[0162.643] GetProcessHeap () returned 0x800000
	[0162.643] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0162.643] ReleaseMutex (hMutex=0x20c) returned 1
	[0162.643] CloseHandle (hObject=0x20c) returned 1
	[0162.643] Sleep (dwMilliseconds=0x3e8) 
	[0163.810] GetProcessHeap () returned 0x800000
	[0163.810] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35544e8
	[0163.810] GetProcessHeap () returned 0x800000
	[0163.810] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548f8
	[0163.810] GetProcessHeap () returned 0x800000
	[0163.810] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x35549e8
	[0163.810] GetProcessHeap () returned 0x800000
	[0163.810] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0163.810] GetProcessHeap () returned 0x800000
	[0163.810] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0163.810] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0163.810] GetProcessHeap () returned 0x800000
	[0163.810] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35549e8 | out: hHeap=0x800000) returned 1
	[0163.810] GetProcessHeap () returned 0x800000
	[0163.810] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35544e8 | out: hHeap=0x800000) returned 1
	[0163.810] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0163.811] GetProcessHeap () returned 0x800000
	[0163.811] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0163.811] GetProcessHeap () returned 0x800000
	[0163.811] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d748
	[0163.811] GetProcessHeap () returned 0x800000
	[0163.811] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d790
	[0163.811] GetProcessHeap () returned 0x800000
	[0163.811] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d790, Size=0x72) returned 0x80fc58
	[0163.811] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0163.811] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x168
	[0163.811] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0x0) returned 0x0
	[0163.811] GetProcessHeap () returned 0x800000
	[0163.811] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d748 | out: hHeap=0x800000) returned 1
	[0163.811] GetProcessHeap () returned 0x800000
	[0163.811] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0163.811] ReleaseMutex (hMutex=0x168) returned 1
	[0163.811] CloseHandle (hObject=0x168) returned 1
	[0163.811] Sleep (dwMilliseconds=0x3e8) 
	[0165.040] GetProcessHeap () returned 0x800000
	[0165.040] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35548f8
	[0165.040] GetProcessHeap () returned 0x800000
	[0165.040] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35544e8
	[0165.040] GetProcessHeap () returned 0x800000
	[0165.040] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x35549e8
	[0165.040] GetProcessHeap () returned 0x800000
	[0165.041] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0165.041] GetProcessHeap () returned 0x800000
	[0165.041] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0165.041] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35544e8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0165.041] GetProcessHeap () returned 0x800000
	[0165.041] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35549e8 | out: hHeap=0x800000) returned 1
	[0165.041] GetProcessHeap () returned 0x800000
	[0165.041] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0165.041] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0165.042] GetProcessHeap () returned 0x800000
	[0165.042] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35544e8 | out: hHeap=0x800000) returned 1
	[0165.042] GetProcessHeap () returned 0x800000
	[0165.042] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d748
	[0165.042] GetProcessHeap () returned 0x800000
	[0165.042] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d790
	[0165.042] GetProcessHeap () returned 0x800000
	[0165.042] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d790, Size=0x72) returned 0x80fb58
	[0165.042] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0165.042] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x20c
	[0165.042] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0
	[0165.042] GetProcessHeap () returned 0x800000
	[0165.042] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d748 | out: hHeap=0x800000) returned 1
	[0165.042] GetProcessHeap () returned 0x800000
	[0165.042] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fb58 | out: hHeap=0x800000) returned 1
	[0165.042] ReleaseMutex (hMutex=0x20c) returned 1
	[0165.042] CloseHandle (hObject=0x20c) returned 1
	[0165.042] Sleep (dwMilliseconds=0x3e8) 
	[0166.241] GetProcessHeap () returned 0x800000
	[0166.241] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35544e8
	[0166.241] GetProcessHeap () returned 0x800000
	[0166.241] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548f8
	[0166.241] GetProcessHeap () returned 0x800000
	[0166.241] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x35549e8
	[0166.241] GetProcessHeap () returned 0x800000
	[0166.241] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81fa90
	[0166.241] GetProcessHeap () returned 0x800000
	[0166.241] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81fa90 | out: hHeap=0x800000) returned 1
	[0166.241] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0166.241] GetProcessHeap () returned 0x800000
	[0166.241] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35549e8 | out: hHeap=0x800000) returned 1
	[0166.241] GetProcessHeap () returned 0x800000
	[0166.241] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35544e8 | out: hHeap=0x800000) returned 1
	[0166.241] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0166.241] GetProcessHeap () returned 0x800000
	[0166.241] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548f8 | out: hHeap=0x800000) returned 1
	[0166.241] GetProcessHeap () returned 0x800000
	[0166.242] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d748
	[0166.242] GetProcessHeap () returned 0x800000
	[0166.242] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d790
	[0166.242] GetProcessHeap () returned 0x800000
	[0166.242] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d790, Size=0x72) returned 0x80fb58
	[0166.242] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0166.242] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x1a0
	[0166.242] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0x0) returned 0x0
	[0166.242] GetProcessHeap () returned 0x800000
	[0166.242] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d748 | out: hHeap=0x800000) returned 1
	[0166.242] GetProcessHeap () returned 0x800000
	[0166.242] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fb58 | out: hHeap=0x800000) returned 1
	[0166.242] ReleaseMutex (hMutex=0x1a0) returned 1
	[0166.242] CloseHandle (hObject=0x1a0) returned 1
	[0166.242] Sleep (dwMilliseconds=0x3e8) 
	[0167.348] GetProcessHeap () returned 0x800000
	[0167.348] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cf58
	[0167.348] GetProcessHeap () returned 0x800000
	[0167.348] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cfa8
	[0167.348] GetProcessHeap () returned 0x800000
	[0167.348] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81d020
	[0167.348] GetProcessHeap () returned 0x800000
	[0167.348] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0167.348] GetProcessHeap () returned 0x800000
	[0167.349] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0167.349] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81cfa8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0167.349] GetProcessHeap () returned 0x800000
	[0167.349] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d020 | out: hHeap=0x800000) returned 1
	[0167.349] GetProcessHeap () returned 0x800000
	[0167.349] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cf58 | out: hHeap=0x800000) returned 1
	[0167.349] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0167.349] GetProcessHeap () returned 0x800000
	[0167.349] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cfa8 | out: hHeap=0x800000) returned 1
	[0167.349] GetProcessHeap () returned 0x800000
	[0167.349] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d748
	[0167.349] GetProcessHeap () returned 0x800000
	[0167.349] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d790
	[0167.349] GetProcessHeap () returned 0x800000
	[0167.349] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d790, Size=0x72) returned 0x80fb58
	[0167.349] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0167.349] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x1a0
	[0167.349] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0x0) returned 0x0
	[0167.349] GetProcessHeap () returned 0x800000
	[0167.349] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d748 | out: hHeap=0x800000) returned 1
	[0167.349] GetProcessHeap () returned 0x800000
	[0167.349] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fb58 | out: hHeap=0x800000) returned 1
	[0167.349] ReleaseMutex (hMutex=0x1a0) returned 1
	[0167.350] CloseHandle (hObject=0x1a0) returned 1
	[0167.350] Sleep (dwMilliseconds=0x3e8) 
	[0168.501] GetProcessHeap () returned 0x800000
	[0168.501] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cfa8
	[0168.501] GetProcessHeap () returned 0x800000
	[0168.501] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cf58
	[0168.501] GetProcessHeap () returned 0x800000
	[0168.501] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81d020
	[0168.501] GetProcessHeap () returned 0x800000
	[0168.501] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0168.501] GetProcessHeap () returned 0x800000
	[0168.501] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0168.501] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81cf58, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0168.501] GetProcessHeap () returned 0x800000
	[0168.501] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d020 | out: hHeap=0x800000) returned 1
	[0168.501] GetProcessHeap () returned 0x800000
	[0168.501] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cfa8 | out: hHeap=0x800000) returned 1
	[0168.501] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0168.502] GetProcessHeap () returned 0x800000
	[0168.502] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cf58 | out: hHeap=0x800000) returned 1
	[0168.502] GetProcessHeap () returned 0x800000
	[0168.502] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d748
	[0168.502] GetProcessHeap () returned 0x800000
	[0168.502] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d790
	[0168.502] GetProcessHeap () returned 0x800000
	[0168.502] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d790, Size=0x72) returned 0x80fb58
	[0168.502] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0168.502] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x208
	[0168.502] WaitForSingleObject (hHandle=0x208, dwMilliseconds=0x0) returned 0x0
	[0168.502] GetProcessHeap () returned 0x800000
	[0168.502] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d748 | out: hHeap=0x800000) returned 1
	[0168.502] GetProcessHeap () returned 0x800000
	[0168.502] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fb58 | out: hHeap=0x800000) returned 1
	[0168.502] ReleaseMutex (hMutex=0x208) returned 1
	[0168.502] CloseHandle (hObject=0x208) returned 1
	[0168.503] Sleep (dwMilliseconds=0x3e8) 
	[0169.616] GetProcessHeap () returned 0x800000
	[0169.616] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cf58
	[0169.617] GetProcessHeap () returned 0x800000
	[0169.617] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cfa8
	[0169.617] GetProcessHeap () returned 0x800000
	[0169.617] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81d020
	[0169.617] GetProcessHeap () returned 0x800000
	[0169.617] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0169.617] GetProcessHeap () returned 0x800000
	[0169.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0169.617] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81cfa8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0169.617] GetProcessHeap () returned 0x800000
	[0169.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d020 | out: hHeap=0x800000) returned 1
	[0169.617] GetProcessHeap () returned 0x800000
	[0169.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cf58 | out: hHeap=0x800000) returned 1
	[0169.617] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0169.617] GetProcessHeap () returned 0x800000
	[0169.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cfa8 | out: hHeap=0x800000) returned 1
	[0169.617] GetProcessHeap () returned 0x800000
	[0169.617] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d748
	[0169.617] GetProcessHeap () returned 0x800000
	[0169.617] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d790
	[0169.617] GetProcessHeap () returned 0x800000
	[0169.618] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d790, Size=0x72) returned 0x80fc58
	[0169.618] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0169.618] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x20c
	[0169.618] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0
	[0169.618] GetProcessHeap () returned 0x800000
	[0169.618] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d748 | out: hHeap=0x800000) returned 1
	[0169.618] GetProcessHeap () returned 0x800000
	[0169.618] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0169.618] ReleaseMutex (hMutex=0x20c) returned 1
	[0169.618] CloseHandle (hObject=0x20c) returned 1
	[0169.618] Sleep (dwMilliseconds=0x3e8) 
	[0170.718] GetProcessHeap () returned 0x800000
	[0170.718] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cfa8
	[0170.718] GetProcessHeap () returned 0x800000
	[0170.718] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cf58
	[0170.718] GetProcessHeap () returned 0x800000
	[0170.718] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81d020
	[0170.718] GetProcessHeap () returned 0x800000
	[0170.718] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0170.718] GetProcessHeap () returned 0x800000
	[0170.718] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0170.718] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81cf58, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0170.718] GetProcessHeap () returned 0x800000
	[0170.718] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d020 | out: hHeap=0x800000) returned 1
	[0170.718] GetProcessHeap () returned 0x800000
	[0170.718] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cfa8 | out: hHeap=0x800000) returned 1
	[0170.719] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0170.719] GetProcessHeap () returned 0x800000
	[0170.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cf58 | out: hHeap=0x800000) returned 1
	[0170.719] GetProcessHeap () returned 0x800000
	[0170.719] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d748
	[0170.719] GetProcessHeap () returned 0x800000
	[0170.719] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d790
	[0170.719] GetProcessHeap () returned 0x800000
	[0170.719] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d790, Size=0x72) returned 0x80fc58
	[0170.719] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0170.719] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x208
	[0170.719] WaitForSingleObject (hHandle=0x208, dwMilliseconds=0x0) returned 0x0
	[0170.719] GetProcessHeap () returned 0x800000
	[0170.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d748 | out: hHeap=0x800000) returned 1
	[0170.719] GetProcessHeap () returned 0x800000
	[0170.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0170.719] ReleaseMutex (hMutex=0x208) returned 1
	[0170.719] CloseHandle (hObject=0x208) returned 1
	[0170.719] Sleep (dwMilliseconds=0x3e8) 
	[0171.893] GetProcessHeap () returned 0x800000
	[0171.893] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cf58
	[0171.893] GetProcessHeap () returned 0x800000
	[0171.893] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cfa8
	[0171.893] GetProcessHeap () returned 0x800000
	[0171.893] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81d020
	[0171.893] GetProcessHeap () returned 0x800000
	[0171.893] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0171.893] GetProcessHeap () returned 0x800000
	[0171.893] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0171.893] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81cfa8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0171.893] GetProcessHeap () returned 0x800000
	[0171.893] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d020 | out: hHeap=0x800000) returned 1
	[0171.893] GetProcessHeap () returned 0x800000
	[0171.893] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cf58 | out: hHeap=0x800000) returned 1
	[0171.893] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0171.893] GetProcessHeap () returned 0x800000
	[0171.893] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cfa8 | out: hHeap=0x800000) returned 1
	[0171.893] GetProcessHeap () returned 0x800000
	[0171.894] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d748
	[0171.894] GetProcessHeap () returned 0x800000
	[0171.894] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d790
	[0171.894] GetProcessHeap () returned 0x800000
	[0171.894] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d790, Size=0x72) returned 0x80fc58
	[0171.894] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0171.894] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x208
	[0171.894] WaitForSingleObject (hHandle=0x208, dwMilliseconds=0x0) returned 0x0
	[0171.894] GetProcessHeap () returned 0x800000
	[0171.894] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d748 | out: hHeap=0x800000) returned 1
	[0171.894] GetProcessHeap () returned 0x800000
	[0171.894] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0171.894] ReleaseMutex (hMutex=0x208) returned 1
	[0171.894] CloseHandle (hObject=0x208) returned 1
	[0171.894] Sleep (dwMilliseconds=0x3e8) 
	[0172.964] GetProcessHeap () returned 0x800000
	[0172.964] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81d020
	[0172.964] GetProcessHeap () returned 0x800000
	[0172.964] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81d070
	[0172.964] GetProcessHeap () returned 0x800000
	[0172.964] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81d098
	[0172.964] GetProcessHeap () returned 0x800000
	[0172.964] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0172.964] GetProcessHeap () returned 0x800000
	[0172.964] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0172.965] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81d070, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0172.965] GetProcessHeap () returned 0x800000
	[0172.965] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d098 | out: hHeap=0x800000) returned 1
	[0172.965] GetProcessHeap () returned 0x800000
	[0172.965] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d020 | out: hHeap=0x800000) returned 1
	[0172.965] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0172.965] GetProcessHeap () returned 0x800000
	[0172.965] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d070 | out: hHeap=0x800000) returned 1
	[0172.965] GetProcessHeap () returned 0x800000
	[0172.965] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d748
	[0172.965] GetProcessHeap () returned 0x800000
	[0172.965] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d790
	[0172.965] GetProcessHeap () returned 0x800000
	[0172.965] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d790, Size=0x72) returned 0x80fc58
	[0172.965] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0172.965] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x200
	[0172.965] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0x0) returned 0x0
	[0172.965] GetProcessHeap () returned 0x800000
	[0172.965] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d748 | out: hHeap=0x800000) returned 1
	[0172.965] GetProcessHeap () returned 0x800000
	[0172.965] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fc58 | out: hHeap=0x800000) returned 1
	[0172.966] ReleaseMutex (hMutex=0x200) returned 1
	[0172.966] CloseHandle (hObject=0x200) returned 1
	[0172.966] Sleep (dwMilliseconds=0x3e8) 
	[0174.323] GetProcessHeap () returned 0x800000
	[0174.323] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1f78
	[0174.323] GetProcessHeap () returned 0x800000
	[0174.323] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1fa0
	[0174.323] GetProcessHeap () returned 0x800000
	[0174.323] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1fc8
	[0174.323] GetProcessHeap () returned 0x800000
	[0174.323] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0174.323] GetProcessHeap () returned 0x800000
	[0174.323] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0174.323] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1fa0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0174.323] GetProcessHeap () returned 0x800000
	[0174.323] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1fc8 | out: hHeap=0x800000) returned 1
	[0174.323] GetProcessHeap () returned 0x800000
	[0174.323] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f78 | out: hHeap=0x800000) returned 1
	[0174.323] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0174.324] GetProcessHeap () returned 0x800000
	[0174.324] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1fa0 | out: hHeap=0x800000) returned 1
	[0174.324] GetProcessHeap () returned 0x800000
	[0174.324] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0174.324] GetProcessHeap () returned 0x800000
	[0174.324] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0174.324] GetProcessHeap () returned 0x800000
	[0174.324] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0174.324] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0174.324] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x210
	[0174.324] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x0) returned 0x0
	[0174.324] GetProcessHeap () returned 0x800000
	[0174.324] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0174.325] GetProcessHeap () returned 0x800000
	[0174.325] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0174.325] ReleaseMutex (hMutex=0x210) returned 1
	[0174.325] CloseHandle (hObject=0x210) returned 1
	[0174.325] Sleep (dwMilliseconds=0x3e8) 
	[0175.445] GetProcessHeap () returned 0x800000
	[0175.445] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f21f0
	[0175.445] GetProcessHeap () returned 0x800000
	[0175.445] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f23f8
	[0175.445] GetProcessHeap () returned 0x800000
	[0175.445] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0175.445] GetProcessHeap () returned 0x800000
	[0175.445] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0175.445] GetProcessHeap () returned 0x800000
	[0175.445] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0175.445] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f23f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0175.445] GetProcessHeap () returned 0x800000
	[0175.445] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0175.445] GetProcessHeap () returned 0x800000
	[0175.445] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21f0 | out: hHeap=0x800000) returned 1
	[0175.445] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0175.446] GetProcessHeap () returned 0x800000
	[0175.446] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f23f8 | out: hHeap=0x800000) returned 1
	[0175.446] GetProcessHeap () returned 0x800000
	[0175.446] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0175.446] GetProcessHeap () returned 0x800000
	[0175.446] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0175.446] GetProcessHeap () returned 0x800000
	[0175.446] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0175.446] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0175.446] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x234
	[0175.446] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x0) returned 0x0
	[0175.446] GetProcessHeap () returned 0x800000
	[0175.446] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0175.446] GetProcessHeap () returned 0x800000
	[0175.446] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0175.446] ReleaseMutex (hMutex=0x234) returned 1
	[0175.446] CloseHandle (hObject=0x234) returned 1
	[0175.446] Sleep (dwMilliseconds=0x3e8) 
	[0176.617] GetProcessHeap () returned 0x800000
	[0176.617] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f23f8
	[0176.617] GetProcessHeap () returned 0x800000
	[0176.617] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f21f0
	[0176.617] GetProcessHeap () returned 0x800000
	[0176.617] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0176.617] GetProcessHeap () returned 0x800000
	[0176.617] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0176.617] GetProcessHeap () returned 0x800000
	[0176.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0176.617] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f21f0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0176.617] GetProcessHeap () returned 0x800000
	[0176.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0176.617] GetProcessHeap () returned 0x800000
	[0176.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f23f8 | out: hHeap=0x800000) returned 1
	[0176.617] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0176.618] GetProcessHeap () returned 0x800000
	[0176.618] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21f0 | out: hHeap=0x800000) returned 1
	[0176.618] GetProcessHeap () returned 0x800000
	[0176.618] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0176.618] GetProcessHeap () returned 0x800000
	[0176.618] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0176.618] GetProcessHeap () returned 0x800000
	[0176.618] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0176.618] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0176.618] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x210
	[0176.618] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x0) returned 0x0
	[0176.618] GetProcessHeap () returned 0x800000
	[0176.618] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0176.618] GetProcessHeap () returned 0x800000
	[0176.618] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0176.618] ReleaseMutex (hMutex=0x210) returned 1
	[0176.618] CloseHandle (hObject=0x210) returned 1
	[0176.618] Sleep (dwMilliseconds=0x3e8) 
	[0178.767] GetProcessHeap () returned 0x800000
	[0178.767] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554948
	[0178.767] GetProcessHeap () returned 0x800000
	[0178.767] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554510
	[0178.768] GetProcessHeap () returned 0x800000
	[0178.768] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0178.768] GetProcessHeap () returned 0x800000
	[0178.768] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0178.768] GetProcessHeap () returned 0x800000
	[0178.768] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0178.768] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554510, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0178.768] GetProcessHeap () returned 0x800000
	[0178.768] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0178.768] GetProcessHeap () returned 0x800000
	[0178.768] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554948 | out: hHeap=0x800000) returned 1
	[0178.768] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0178.768] GetProcessHeap () returned 0x800000
	[0178.768] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554510 | out: hHeap=0x800000) returned 1
	[0178.768] GetProcessHeap () returned 0x800000
	[0178.768] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0178.768] GetProcessHeap () returned 0x800000
	[0178.768] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0178.768] GetProcessHeap () returned 0x800000
	[0178.768] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0178.768] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0178.768] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x168
	[0178.769] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0x0) returned 0x0
	[0178.769] GetProcessHeap () returned 0x800000
	[0178.769] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0178.769] GetProcessHeap () returned 0x800000
	[0178.769] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0178.769] ReleaseMutex (hMutex=0x168) returned 1
	[0178.769] CloseHandle (hObject=0x168) returned 1
	[0178.769] Sleep (dwMilliseconds=0x3e8) 
	[0180.032] GetProcessHeap () returned 0x800000
	[0180.032] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554510
	[0180.032] GetProcessHeap () returned 0x800000
	[0180.032] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554948
	[0180.032] GetProcessHeap () returned 0x800000
	[0180.032] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0180.032] GetProcessHeap () returned 0x800000
	[0180.032] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0180.032] GetProcessHeap () returned 0x800000
	[0180.032] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0180.032] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554948, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0180.032] GetProcessHeap () returned 0x800000
	[0180.032] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0180.032] GetProcessHeap () returned 0x800000
	[0180.032] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554510 | out: hHeap=0x800000) returned 1
	[0180.032] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0180.033] GetProcessHeap () returned 0x800000
	[0180.033] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554948 | out: hHeap=0x800000) returned 1
	[0180.033] GetProcessHeap () returned 0x800000
	[0180.033] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0180.033] GetProcessHeap () returned 0x800000
	[0180.033] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0180.033] GetProcessHeap () returned 0x800000
	[0180.033] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0180.033] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0180.033] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x200
	[0180.033] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0x0) returned 0x0
	[0180.033] GetProcessHeap () returned 0x800000
	[0180.033] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0180.033] GetProcessHeap () returned 0x800000
	[0180.033] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0180.033] ReleaseMutex (hMutex=0x200) returned 1
	[0180.033] CloseHandle (hObject=0x200) returned 1
	[0180.033] Sleep (dwMilliseconds=0x3e8) 
	[0181.283] GetProcessHeap () returned 0x800000
	[0181.283] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554510
	[0181.283] GetProcessHeap () returned 0x800000
	[0181.283] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554808
	[0181.283] GetProcessHeap () returned 0x800000
	[0181.283] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1ed8
	[0181.283] GetProcessHeap () returned 0x800000
	[0181.283] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0181.283] GetProcessHeap () returned 0x800000
	[0181.283] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0181.283] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554808, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0181.283] GetProcessHeap () returned 0x800000
	[0181.283] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1ed8 | out: hHeap=0x800000) returned 1
	[0181.283] GetProcessHeap () returned 0x800000
	[0181.283] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554510 | out: hHeap=0x800000) returned 1
	[0181.283] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0181.283] GetProcessHeap () returned 0x800000
	[0181.283] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0181.283] GetProcessHeap () returned 0x800000
	[0181.283] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0181.283] GetProcessHeap () returned 0x800000
	[0181.283] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0181.283] GetProcessHeap () returned 0x800000
	[0181.283] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0181.283] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0181.284] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x20c
	[0181.284] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0
	[0181.284] GetProcessHeap () returned 0x800000
	[0181.284] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0181.284] GetProcessHeap () returned 0x800000
	[0181.284] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0181.284] ReleaseMutex (hMutex=0x20c) returned 1
	[0181.284] CloseHandle (hObject=0x20c) returned 1
	[0181.284] Sleep (dwMilliseconds=0x3e8) 
	[0182.416] GetProcessHeap () returned 0x800000
	[0182.416] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f21f0
	[0182.416] GetProcessHeap () returned 0x800000
	[0182.416] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f23f8
	[0182.416] GetProcessHeap () returned 0x800000
	[0182.416] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0182.416] GetProcessHeap () returned 0x800000
	[0182.416] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0182.416] GetProcessHeap () returned 0x800000
	[0182.416] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0182.416] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f23f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0182.416] GetProcessHeap () returned 0x800000
	[0182.416] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0182.416] GetProcessHeap () returned 0x800000
	[0182.416] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21f0 | out: hHeap=0x800000) returned 1
	[0182.416] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0182.417] GetProcessHeap () returned 0x800000
	[0182.417] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f23f8 | out: hHeap=0x800000) returned 1
	[0182.417] GetProcessHeap () returned 0x800000
	[0182.417] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0182.417] GetProcessHeap () returned 0x800000
	[0182.417] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0182.417] GetProcessHeap () returned 0x800000
	[0182.417] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0182.417] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0182.417] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x228
	[0182.417] WaitForSingleObject (hHandle=0x228, dwMilliseconds=0x0) returned 0x0
	[0182.418] GetProcessHeap () returned 0x800000
	[0182.418] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0182.418] GetProcessHeap () returned 0x800000
	[0182.418] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0182.418] ReleaseMutex (hMutex=0x228) returned 1
	[0182.418] CloseHandle (hObject=0x228) returned 1
	[0182.418] Sleep (dwMilliseconds=0x3e8) 
	[0183.564] GetProcessHeap () returned 0x800000
	[0183.564] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f23f8
	[0183.564] GetProcessHeap () returned 0x800000
	[0183.564] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f21f0
	[0183.564] GetProcessHeap () returned 0x800000
	[0183.564] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0183.564] GetProcessHeap () returned 0x800000
	[0183.564] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0183.564] GetProcessHeap () returned 0x800000
	[0183.564] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0183.564] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f21f0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0183.564] GetProcessHeap () returned 0x800000
	[0183.564] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0183.564] GetProcessHeap () returned 0x800000
	[0183.564] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f23f8 | out: hHeap=0x800000) returned 1
	[0183.564] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0183.565] GetProcessHeap () returned 0x800000
	[0183.565] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21f0 | out: hHeap=0x800000) returned 1
	[0183.565] GetProcessHeap () returned 0x800000
	[0183.566] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0183.566] GetProcessHeap () returned 0x800000
	[0183.566] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0183.566] GetProcessHeap () returned 0x800000
	[0183.566] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0183.566] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0183.566] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x210
	[0183.566] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x0) returned 0x0
	[0183.566] GetProcessHeap () returned 0x800000
	[0183.566] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0183.566] GetProcessHeap () returned 0x800000
	[0183.566] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0183.566] ReleaseMutex (hMutex=0x210) returned 1
	[0183.566] CloseHandle (hObject=0x210) returned 1
	[0183.566] Sleep (dwMilliseconds=0x3e8) 
	[0184.775] GetProcessHeap () returned 0x800000
	[0184.775] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f21f0
	[0184.775] GetProcessHeap () returned 0x800000
	[0184.775] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f23f8
	[0184.775] GetProcessHeap () returned 0x800000
	[0184.775] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0184.775] GetProcessHeap () returned 0x800000
	[0184.775] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0184.775] GetProcessHeap () returned 0x800000
	[0184.775] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0184.775] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f23f8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0184.775] GetProcessHeap () returned 0x800000
	[0184.775] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0184.775] GetProcessHeap () returned 0x800000
	[0184.775] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21f0 | out: hHeap=0x800000) returned 1
	[0184.775] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0184.776] GetProcessHeap () returned 0x800000
	[0184.776] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f23f8 | out: hHeap=0x800000) returned 1
	[0184.776] GetProcessHeap () returned 0x800000
	[0184.776] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0184.776] GetProcessHeap () returned 0x800000
	[0184.776] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0184.776] GetProcessHeap () returned 0x800000
	[0184.776] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0184.776] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0184.776] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x144
	[0184.776] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x0) returned 0x0
	[0184.776] GetProcessHeap () returned 0x800000
	[0184.776] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0184.776] GetProcessHeap () returned 0x800000
	[0184.776] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0184.776] ReleaseMutex (hMutex=0x144) returned 1
	[0184.776] CloseHandle (hObject=0x144) returned 1
	[0184.776] Sleep (dwMilliseconds=0x3e8) 
	[0185.897] GetProcessHeap () returned 0x800000
	[0185.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f2470
	[0185.897] GetProcessHeap () returned 0x800000
	[0185.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f2448
	[0185.897] GetProcessHeap () returned 0x800000
	[0185.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f23f8
	[0185.897] GetProcessHeap () returned 0x800000
	[0185.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0185.897] GetProcessHeap () returned 0x800000
	[0185.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0185.897] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f2448, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0185.897] GetProcessHeap () returned 0x800000
	[0185.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f23f8 | out: hHeap=0x800000) returned 1
	[0185.897] GetProcessHeap () returned 0x800000
	[0185.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2470 | out: hHeap=0x800000) returned 1
	[0185.897] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0185.899] GetProcessHeap () returned 0x800000
	[0185.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2448 | out: hHeap=0x800000) returned 1
	[0185.899] GetProcessHeap () returned 0x800000
	[0185.899] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0185.899] GetProcessHeap () returned 0x800000
	[0185.899] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0185.899] GetProcessHeap () returned 0x800000
	[0185.899] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fe58
	[0185.899] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0185.899] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x1b8
	[0185.899] WaitForSingleObject (hHandle=0x1b8, dwMilliseconds=0x0) returned 0x0
	[0185.899] GetProcessHeap () returned 0x800000
	[0185.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0185.899] GetProcessHeap () returned 0x800000
	[0185.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fe58 | out: hHeap=0x800000) returned 1
	[0185.899] ReleaseMutex (hMutex=0x1b8) returned 1
	[0185.900] CloseHandle (hObject=0x1b8) returned 1
	[0185.900] Sleep (dwMilliseconds=0x3e8) 
	[0187.022] GetProcessHeap () returned 0x800000
	[0187.025] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e38
	[0187.025] GetProcessHeap () returned 0x800000
	[0187.025] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1f28
	[0187.028] GetProcessHeap () returned 0x800000
	[0187.028] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1e88
	[0187.031] GetProcessHeap () returned 0x800000
	[0187.031] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0187.031] GetProcessHeap () returned 0x800000
	[0187.033] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0187.033] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1f28, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0187.033] GetProcessHeap () returned 0x800000
	[0187.034] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e88 | out: hHeap=0x800000) returned 1
	[0187.034] GetProcessHeap () returned 0x800000
	[0187.034] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0187.034] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0187.034] GetProcessHeap () returned 0x800000
	[0187.034] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0187.034] GetProcessHeap () returned 0x800000
	[0187.034] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0187.034] GetProcessHeap () returned 0x800000
	[0187.034] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0187.034] GetProcessHeap () returned 0x800000
	[0187.034] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fdd8
	[0187.034] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0187.034] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x1f4
	[0187.034] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0x0) returned 0x0
	[0187.034] GetProcessHeap () returned 0x800000
	[0187.034] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0187.034] GetProcessHeap () returned 0x800000
	[0187.034] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fdd8 | out: hHeap=0x800000) returned 1
	[0187.034] ReleaseMutex (hMutex=0x1f4) returned 1
	[0187.034] CloseHandle (hObject=0x1f4) returned 1
	[0187.035] Sleep (dwMilliseconds=0x3e8) 
	[0188.139] GetProcessHeap () returned 0x800000
	[0188.139] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1f28
	[0188.139] GetProcessHeap () returned 0x800000
	[0188.139] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e38
	[0188.139] GetProcessHeap () returned 0x800000
	[0188.139] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1e88
	[0188.139] GetProcessHeap () returned 0x800000
	[0188.139] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0188.139] GetProcessHeap () returned 0x800000
	[0188.140] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0188.140] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e38, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0188.140] GetProcessHeap () returned 0x800000
	[0188.140] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e88 | out: hHeap=0x800000) returned 1
	[0188.140] GetProcessHeap () returned 0x800000
	[0188.140] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0188.140] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0188.140] GetProcessHeap () returned 0x800000
	[0188.140] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0188.140] GetProcessHeap () returned 0x800000
	[0188.140] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0188.140] GetProcessHeap () returned 0x800000
	[0188.140] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0188.140] GetProcessHeap () returned 0x800000
	[0188.140] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0188.140] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0188.141] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x200
	[0188.141] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0x0) returned 0x0
	[0188.141] GetProcessHeap () returned 0x800000
	[0188.141] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0188.141] GetProcessHeap () returned 0x800000
	[0188.141] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0188.141] ReleaseMutex (hMutex=0x200) returned 1
	[0188.141] CloseHandle (hObject=0x200) returned 1
	[0188.141] Sleep (dwMilliseconds=0x3e8) 
	[0189.267] GetProcessHeap () returned 0x800000
	[0189.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e38
	[0189.267] GetProcessHeap () returned 0x800000
	[0189.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1f28
	[0189.267] GetProcessHeap () returned 0x800000
	[0189.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1e88
	[0189.267] GetProcessHeap () returned 0x800000
	[0189.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0189.267] GetProcessHeap () returned 0x800000
	[0189.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0189.267] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1f28, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0189.267] GetProcessHeap () returned 0x800000
	[0189.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e88 | out: hHeap=0x800000) returned 1
	[0189.267] GetProcessHeap () returned 0x800000
	[0189.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0189.267] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0189.267] GetProcessHeap () returned 0x800000
	[0189.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0189.267] GetProcessHeap () returned 0x800000
	[0189.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0189.267] GetProcessHeap () returned 0x800000
	[0189.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0189.267] GetProcessHeap () returned 0x800000
	[0189.267] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fe58
	[0189.267] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0189.268] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x168
	[0189.268] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0x0) returned 0x0
	[0189.268] GetProcessHeap () returned 0x800000
	[0189.268] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0189.268] GetProcessHeap () returned 0x800000
	[0189.268] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fe58 | out: hHeap=0x800000) returned 1
	[0189.268] ReleaseMutex (hMutex=0x168) returned 1
	[0189.268] CloseHandle (hObject=0x168) returned 1
	[0189.268] Sleep (dwMilliseconds=0x3e8) 
	[0190.421] GetProcessHeap () returned 0x800000
	[0190.421] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1f28
	[0190.421] GetProcessHeap () returned 0x800000
	[0190.421] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e38
	[0190.421] GetProcessHeap () returned 0x800000
	[0190.421] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1e88
	[0190.421] GetProcessHeap () returned 0x800000
	[0190.421] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0190.421] GetProcessHeap () returned 0x800000
	[0190.421] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0190.421] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e38, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0190.421] GetProcessHeap () returned 0x800000
	[0190.421] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e88 | out: hHeap=0x800000) returned 1
	[0190.421] GetProcessHeap () returned 0x800000
	[0190.421] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0190.421] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0190.421] GetProcessHeap () returned 0x800000
	[0190.421] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0190.421] GetProcessHeap () returned 0x800000
	[0190.422] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0190.422] GetProcessHeap () returned 0x800000
	[0190.422] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0190.422] GetProcessHeap () returned 0x800000
	[0190.422] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0190.422] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0190.422] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x20c
	[0190.422] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0
	[0190.422] GetProcessHeap () returned 0x800000
	[0190.422] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0190.422] GetProcessHeap () returned 0x800000
	[0190.422] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0190.422] ReleaseMutex (hMutex=0x20c) returned 1
	[0190.422] CloseHandle (hObject=0x20c) returned 1
	[0190.422] Sleep (dwMilliseconds=0x3e8) 
	[0191.509] GetProcessHeap () returned 0x800000
	[0191.509] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e38
	[0191.509] GetProcessHeap () returned 0x800000
	[0191.509] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1f28
	[0191.509] GetProcessHeap () returned 0x800000
	[0191.509] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1e88
	[0191.509] GetProcessHeap () returned 0x800000
	[0191.509] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0191.509] GetProcessHeap () returned 0x800000
	[0191.510] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0191.510] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1f28, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0191.510] GetProcessHeap () returned 0x800000
	[0191.510] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e88 | out: hHeap=0x800000) returned 1
	[0191.510] GetProcessHeap () returned 0x800000
	[0191.510] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0191.510] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0191.510] GetProcessHeap () returned 0x800000
	[0191.510] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0191.510] GetProcessHeap () returned 0x800000
	[0191.510] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0191.510] GetProcessHeap () returned 0x800000
	[0191.510] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0191.510] GetProcessHeap () returned 0x800000
	[0191.510] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0191.510] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0191.510] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x20c
	[0191.511] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0
	[0191.511] GetProcessHeap () returned 0x800000
	[0191.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0191.511] GetProcessHeap () returned 0x800000
	[0191.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0191.511] ReleaseMutex (hMutex=0x20c) returned 1
	[0191.511] CloseHandle (hObject=0x20c) returned 1
	[0191.511] Sleep (dwMilliseconds=0x3e8) 
	[0192.739] GetProcessHeap () returned 0x800000
	[0192.739] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1f28
	[0192.740] GetProcessHeap () returned 0x800000
	[0192.740] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e38
	[0192.740] GetProcessHeap () returned 0x800000
	[0192.740] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1e88
	[0192.740] GetProcessHeap () returned 0x800000
	[0192.740] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0192.740] GetProcessHeap () returned 0x800000
	[0192.740] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0192.740] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e38, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0192.740] GetProcessHeap () returned 0x800000
	[0192.740] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e88 | out: hHeap=0x800000) returned 1
	[0192.740] GetProcessHeap () returned 0x800000
	[0192.740] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0192.740] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0192.740] GetProcessHeap () returned 0x800000
	[0192.741] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0192.741] GetProcessHeap () returned 0x800000
	[0192.741] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d940
	[0192.741] GetProcessHeap () returned 0x800000
	[0192.741] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81da18
	[0192.741] GetProcessHeap () returned 0x800000
	[0192.741] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81da18, Size=0x72) returned 0x80fd58
	[0192.741] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0192.741] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x1f4
	[0192.741] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0x0) returned 0x0
	[0192.741] GetProcessHeap () returned 0x800000
	[0192.741] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d940 | out: hHeap=0x800000) returned 1
	[0192.741] GetProcessHeap () returned 0x800000
	[0192.741] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0192.741] ReleaseMutex (hMutex=0x1f4) returned 1
	[0192.741] CloseHandle (hObject=0x1f4) returned 1
	[0192.741] Sleep (dwMilliseconds=0x3e8) 
	[0193.965] GetProcessHeap () returned 0x800000
	[0193.965] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e88
	[0193.965] GetProcessHeap () returned 0x800000
	[0193.965] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e60
	[0193.965] GetProcessHeap () returned 0x800000
	[0193.965] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1eb0
	[0193.965] GetProcessHeap () returned 0x800000
	[0193.965] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0193.965] GetProcessHeap () returned 0x800000
	[0193.966] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0193.966] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0193.966] GetProcessHeap () returned 0x800000
	[0193.966] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1eb0 | out: hHeap=0x800000) returned 1
	[0193.966] GetProcessHeap () returned 0x800000
	[0193.966] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e88 | out: hHeap=0x800000) returned 1
	[0193.966] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0193.966] GetProcessHeap () returned 0x800000
	[0193.966] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0193.966] GetProcessHeap () returned 0x800000
	[0193.966] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0193.966] GetProcessHeap () returned 0x800000
	[0193.966] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0193.966] GetProcessHeap () returned 0x800000
	[0193.966] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0193.966] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0193.966] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x20c
	[0193.967] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0
	[0193.967] GetProcessHeap () returned 0x800000
	[0193.967] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0193.967] GetProcessHeap () returned 0x800000
	[0193.967] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0193.967] ReleaseMutex (hMutex=0x20c) returned 1
	[0193.967] CloseHandle (hObject=0x20c) returned 1
	[0193.967] Sleep (dwMilliseconds=0x3e8) 
	[0195.151] GetProcessHeap () returned 0x800000
	[0195.151] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1ff0
	[0195.151] GetProcessHeap () returned 0x800000
	[0195.151] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e2018
	[0195.151] GetProcessHeap () returned 0x800000
	[0195.151] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e2040
	[0195.151] GetProcessHeap () returned 0x800000
	[0195.151] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0195.151] GetProcessHeap () returned 0x800000
	[0195.151] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0195.151] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e2018, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0195.151] GetProcessHeap () returned 0x800000
	[0195.151] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2040 | out: hHeap=0x800000) returned 1
	[0195.151] GetProcessHeap () returned 0x800000
	[0195.151] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1ff0 | out: hHeap=0x800000) returned 1
	[0195.151] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0195.152] GetProcessHeap () returned 0x800000
	[0195.152] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2018 | out: hHeap=0x800000) returned 1
	[0195.152] GetProcessHeap () returned 0x800000
	[0195.152] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0195.152] GetProcessHeap () returned 0x800000
	[0195.153] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0195.153] GetProcessHeap () returned 0x800000
	[0195.153] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0195.153] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0195.153] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x26c
	[0195.153] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x0) returned 0x0
	[0195.153] GetProcessHeap () returned 0x800000
	[0195.153] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0195.153] GetProcessHeap () returned 0x800000
	[0195.153] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0195.153] ReleaseMutex (hMutex=0x26c) returned 1
	[0195.153] CloseHandle (hObject=0x26c) returned 1
	[0195.153] Sleep (dwMilliseconds=0x3e8) 
	[0196.289] GetProcessHeap () returned 0x800000
	[0196.289] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e2018
	[0196.290] GetProcessHeap () returned 0x800000
	[0196.290] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1ff0
	[0196.290] GetProcessHeap () returned 0x800000
	[0196.290] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e2040
	[0196.290] GetProcessHeap () returned 0x800000
	[0196.290] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0196.290] GetProcessHeap () returned 0x800000
	[0196.290] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0196.290] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1ff0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0196.290] GetProcessHeap () returned 0x800000
	[0196.290] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2040 | out: hHeap=0x800000) returned 1
	[0196.290] GetProcessHeap () returned 0x800000
	[0196.290] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2018 | out: hHeap=0x800000) returned 1
	[0196.290] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0196.290] GetProcessHeap () returned 0x800000
	[0196.290] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1ff0 | out: hHeap=0x800000) returned 1
	[0196.290] GetProcessHeap () returned 0x800000
	[0196.290] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0196.290] GetProcessHeap () returned 0x800000
	[0196.290] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0196.290] GetProcessHeap () returned 0x800000
	[0196.291] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0196.291] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0196.291] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x22c
	[0196.291] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0
	[0196.291] GetProcessHeap () returned 0x800000
	[0196.291] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0196.291] GetProcessHeap () returned 0x800000
	[0196.291] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0196.291] ReleaseMutex (hMutex=0x22c) returned 1
	[0196.291] CloseHandle (hObject=0x22c) returned 1
	[0196.291] Sleep (dwMilliseconds=0x3e8) 
	[0197.472] GetProcessHeap () returned 0x800000
	[0197.472] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e2040
	[0197.472] GetProcessHeap () returned 0x800000
	[0197.472] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e2068
	[0197.472] GetProcessHeap () returned 0x800000
	[0197.472] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e2090
	[0197.472] GetProcessHeap () returned 0x800000
	[0197.472] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0197.472] GetProcessHeap () returned 0x800000
	[0197.472] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0197.472] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e2068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0197.472] GetProcessHeap () returned 0x800000
	[0197.472] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2090 | out: hHeap=0x800000) returned 1
	[0197.472] GetProcessHeap () returned 0x800000
	[0197.472] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2040 | out: hHeap=0x800000) returned 1
	[0197.472] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0197.535] GetProcessHeap () returned 0x800000
	[0197.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2068 | out: hHeap=0x800000) returned 1
	[0197.535] GetProcessHeap () returned 0x800000
	[0197.535] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0197.535] GetProcessHeap () returned 0x800000
	[0197.535] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0197.535] GetProcessHeap () returned 0x800000
	[0197.535] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0197.535] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0197.535] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x260
	[0197.536] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0x0) returned 0x0
	[0197.536] GetProcessHeap () returned 0x800000
	[0197.536] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0197.536] GetProcessHeap () returned 0x800000
	[0197.536] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0197.536] ReleaseMutex (hMutex=0x260) returned 1
	[0197.536] CloseHandle (hObject=0x260) returned 1
	[0197.536] Sleep (dwMilliseconds=0x3e8) 
	[0198.674] GetProcessHeap () returned 0x800000
	[0198.674] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e2090
	[0198.674] GetProcessHeap () returned 0x800000
	[0198.674] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e20b8
	[0198.674] GetProcessHeap () returned 0x800000
	[0198.674] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e20e0
	[0198.674] GetProcessHeap () returned 0x800000
	[0198.674] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0198.674] GetProcessHeap () returned 0x800000
	[0198.674] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0198.675] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e20b8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0198.675] GetProcessHeap () returned 0x800000
	[0198.675] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e20e0 | out: hHeap=0x800000) returned 1
	[0198.675] GetProcessHeap () returned 0x800000
	[0198.675] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2090 | out: hHeap=0x800000) returned 1
	[0198.675] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0198.675] GetProcessHeap () returned 0x800000
	[0198.675] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e20b8 | out: hHeap=0x800000) returned 1
	[0198.675] GetProcessHeap () returned 0x800000
	[0198.675] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0198.675] GetProcessHeap () returned 0x800000
	[0198.675] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0198.675] GetProcessHeap () returned 0x800000
	[0198.675] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0198.675] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0198.675] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x230
	[0198.676] WaitForSingleObject (hHandle=0x230, dwMilliseconds=0x0) returned 0x0
	[0198.676] GetProcessHeap () returned 0x800000
	[0198.676] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0198.676] GetProcessHeap () returned 0x800000
	[0198.676] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0198.676] ReleaseMutex (hMutex=0x230) returned 1
	[0198.676] CloseHandle (hObject=0x230) returned 1
	[0198.676] Sleep (dwMilliseconds=0x3e8) 
	[0199.765] GetProcessHeap () returned 0x800000
	[0199.765] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f21a0
	[0199.765] GetProcessHeap () returned 0x800000
	[0199.765] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f24c0
	[0199.765] GetProcessHeap () returned 0x800000
	[0199.765] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2498
	[0199.765] GetProcessHeap () returned 0x800000
	[0199.765] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0199.765] GetProcessHeap () returned 0x800000
	[0199.765] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0199.765] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f24c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0199.765] GetProcessHeap () returned 0x800000
	[0199.765] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2498 | out: hHeap=0x800000) returned 1
	[0199.765] GetProcessHeap () returned 0x800000
	[0199.765] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21a0 | out: hHeap=0x800000) returned 1
	[0199.765] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0199.766] GetProcessHeap () returned 0x800000
	[0199.766] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0199.766] GetProcessHeap () returned 0x800000
	[0199.766] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0199.766] GetProcessHeap () returned 0x800000
	[0199.766] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0199.766] GetProcessHeap () returned 0x800000
	[0199.766] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0199.766] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0199.766] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x280
	[0199.766] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0x0) returned 0x0
	[0199.766] GetProcessHeap () returned 0x800000
	[0199.766] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0199.766] GetProcessHeap () returned 0x800000
	[0199.766] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0199.766] ReleaseMutex (hMutex=0x280) returned 1
	[0199.766] CloseHandle (hObject=0x280) returned 1
	[0199.766] Sleep (dwMilliseconds=0x3e8) 
	[0200.853] GetProcessHeap () returned 0x800000
	[0200.853] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f24c0
	[0200.853] GetProcessHeap () returned 0x800000
	[0200.853] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f21a0
	[0200.853] GetProcessHeap () returned 0x800000
	[0200.853] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2498
	[0200.853] GetProcessHeap () returned 0x800000
	[0200.853] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0200.853] GetProcessHeap () returned 0x800000
	[0200.853] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0200.853] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f21a0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0200.853] GetProcessHeap () returned 0x800000
	[0200.853] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2498 | out: hHeap=0x800000) returned 1
	[0200.853] GetProcessHeap () returned 0x800000
	[0200.853] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0200.853] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0200.854] GetProcessHeap () returned 0x800000
	[0200.854] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21a0 | out: hHeap=0x800000) returned 1
	[0200.854] GetProcessHeap () returned 0x800000
	[0200.854] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0200.854] GetProcessHeap () returned 0x800000
	[0200.854] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0200.854] GetProcessHeap () returned 0x800000
	[0200.854] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0200.854] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0200.854] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x280
	[0200.854] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0x0) returned 0x0
	[0200.854] GetProcessHeap () returned 0x800000
	[0200.854] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0200.854] GetProcessHeap () returned 0x800000
	[0200.854] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0200.854] ReleaseMutex (hMutex=0x280) returned 1
	[0200.854] CloseHandle (hObject=0x280) returned 1
	[0200.854] Sleep (dwMilliseconds=0x3e8) 
	[0201.902] GetProcessHeap () returned 0x800000
	[0201.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f21a0
	[0201.906] GetProcessHeap () returned 0x800000
	[0201.906] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f24c0
	[0201.906] GetProcessHeap () returned 0x800000
	[0201.906] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2498
	[0201.906] GetProcessHeap () returned 0x800000
	[0201.906] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0201.906] GetProcessHeap () returned 0x800000
	[0201.906] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0201.906] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f24c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0201.906] GetProcessHeap () returned 0x800000
	[0201.906] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2498 | out: hHeap=0x800000) returned 1
	[0201.906] GetProcessHeap () returned 0x800000
	[0201.907] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21a0 | out: hHeap=0x800000) returned 1
	[0201.907] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0201.907] GetProcessHeap () returned 0x800000
	[0201.907] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0201.907] GetProcessHeap () returned 0x800000
	[0201.907] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0201.907] GetProcessHeap () returned 0x800000
	[0201.907] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0201.907] GetProcessHeap () returned 0x800000
	[0201.907] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0201.907] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0201.907] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x270
	[0201.907] WaitForSingleObject (hHandle=0x270, dwMilliseconds=0x0) returned 0x0
	[0201.907] GetProcessHeap () returned 0x800000
	[0201.907] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0201.907] GetProcessHeap () returned 0x800000
	[0201.907] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0201.908] ReleaseMutex (hMutex=0x270) returned 1
	[0201.908] CloseHandle (hObject=0x270) returned 1
	[0201.908] Sleep (dwMilliseconds=0x3e8) 
	[0202.994] GetProcessHeap () returned 0x800000
	[0202.994] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f24c0
	[0202.994] GetProcessHeap () returned 0x800000
	[0202.994] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f21a0
	[0202.994] GetProcessHeap () returned 0x800000
	[0202.994] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2498
	[0202.994] GetProcessHeap () returned 0x800000
	[0202.994] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0202.994] GetProcessHeap () returned 0x800000
	[0202.994] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0202.994] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f21a0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0202.994] GetProcessHeap () returned 0x800000
	[0202.995] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2498 | out: hHeap=0x800000) returned 1
	[0202.995] GetProcessHeap () returned 0x800000
	[0202.995] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0202.995] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0202.995] GetProcessHeap () returned 0x800000
	[0202.995] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21a0 | out: hHeap=0x800000) returned 1
	[0202.995] GetProcessHeap () returned 0x800000
	[0202.995] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0202.995] GetProcessHeap () returned 0x800000
	[0202.995] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0202.995] GetProcessHeap () returned 0x800000
	[0202.995] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0202.995] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0202.996] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x270
	[0202.996] WaitForSingleObject (hHandle=0x270, dwMilliseconds=0x0) returned 0x0
	[0202.996] GetProcessHeap () returned 0x800000
	[0202.996] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0202.996] GetProcessHeap () returned 0x800000
	[0202.996] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0202.996] ReleaseMutex (hMutex=0x270) returned 1
	[0202.996] CloseHandle (hObject=0x270) returned 1
	[0202.996] Sleep (dwMilliseconds=0x3e8) 
	[0204.149] GetProcessHeap () returned 0x800000
	[0204.149] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f21a0
	[0204.149] GetProcessHeap () returned 0x800000
	[0204.149] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f24c0
	[0204.149] GetProcessHeap () returned 0x800000
	[0204.149] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2498
	[0204.149] GetProcessHeap () returned 0x800000
	[0204.149] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0204.149] GetProcessHeap () returned 0x800000
	[0204.149] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0204.149] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f24c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0204.149] GetProcessHeap () returned 0x800000
	[0204.149] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2498 | out: hHeap=0x800000) returned 1
	[0204.149] GetProcessHeap () returned 0x800000
	[0204.149] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21a0 | out: hHeap=0x800000) returned 1
	[0204.149] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0204.150] GetProcessHeap () returned 0x800000
	[0204.150] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0204.150] GetProcessHeap () returned 0x800000
	[0204.150] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0204.150] GetProcessHeap () returned 0x800000
	[0204.150] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0204.150] GetProcessHeap () returned 0x800000
	[0204.150] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0204.150] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0204.150] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x27c
	[0204.150] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x0
	[0204.150] GetProcessHeap () returned 0x800000
	[0204.150] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0204.150] GetProcessHeap () returned 0x800000
	[0204.150] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0204.150] ReleaseMutex (hMutex=0x27c) returned 1
	[0204.150] CloseHandle (hObject=0x27c) returned 1
	[0204.150] Sleep (dwMilliseconds=0x3e8) 
	[0205.243] GetProcessHeap () returned 0x800000
	[0205.243] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f24c0
	[0205.243] GetProcessHeap () returned 0x800000
	[0205.243] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f21a0
	[0205.243] GetProcessHeap () returned 0x800000
	[0205.243] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2498
	[0205.243] GetProcessHeap () returned 0x800000
	[0205.243] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0205.243] GetProcessHeap () returned 0x800000
	[0205.243] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0205.243] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f21a0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0205.243] GetProcessHeap () returned 0x800000
	[0205.243] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2498 | out: hHeap=0x800000) returned 1
	[0205.243] GetProcessHeap () returned 0x800000
	[0205.243] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0205.243] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0205.244] GetProcessHeap () returned 0x800000
	[0205.244] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21a0 | out: hHeap=0x800000) returned 1
	[0205.244] GetProcessHeap () returned 0x800000
	[0205.244] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0205.244] GetProcessHeap () returned 0x800000
	[0205.244] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0205.244] GetProcessHeap () returned 0x800000
	[0205.244] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0205.244] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0205.244] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x280
	[0205.244] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0x0) returned 0x0
	[0205.244] GetProcessHeap () returned 0x800000
	[0205.244] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0205.244] GetProcessHeap () returned 0x800000
	[0205.244] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0205.244] ReleaseMutex (hMutex=0x280) returned 1
	[0205.245] CloseHandle (hObject=0x280) returned 1
	[0205.245] Sleep (dwMilliseconds=0x3e8) 
	[0206.317] GetProcessHeap () returned 0x800000
	[0206.317] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f21a0
	[0206.317] GetProcessHeap () returned 0x800000
	[0206.317] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f24c0
	[0206.317] GetProcessHeap () returned 0x800000
	[0206.317] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2498
	[0206.317] GetProcessHeap () returned 0x800000
	[0206.317] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0206.317] GetProcessHeap () returned 0x800000
	[0206.317] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0206.317] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f24c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0206.317] GetProcessHeap () returned 0x800000
	[0206.317] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2498 | out: hHeap=0x800000) returned 1
	[0206.317] GetProcessHeap () returned 0x800000
	[0206.317] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21a0 | out: hHeap=0x800000) returned 1
	[0206.317] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0206.318] GetProcessHeap () returned 0x800000
	[0206.318] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0206.318] GetProcessHeap () returned 0x800000
	[0206.318] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0206.318] GetProcessHeap () returned 0x800000
	[0206.318] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0206.318] GetProcessHeap () returned 0x800000
	[0206.318] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0206.318] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0206.318] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x260
	[0206.318] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0x0) returned 0x0
	[0206.318] GetProcessHeap () returned 0x800000
	[0206.318] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0206.318] GetProcessHeap () returned 0x800000
	[0206.318] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0206.318] ReleaseMutex (hMutex=0x260) returned 1
	[0206.318] CloseHandle (hObject=0x260) returned 1
	[0206.319] Sleep (dwMilliseconds=0x3e8) 
	[0207.477] GetProcessHeap () returned 0x800000
	[0207.477] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f24c0
	[0207.477] GetProcessHeap () returned 0x800000
	[0207.477] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f21a0
	[0207.477] GetProcessHeap () returned 0x800000
	[0207.477] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2498
	[0207.477] GetProcessHeap () returned 0x800000
	[0207.477] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0207.477] GetProcessHeap () returned 0x800000
	[0207.477] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0207.477] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f21a0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0207.477] GetProcessHeap () returned 0x800000
	[0207.477] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2498 | out: hHeap=0x800000) returned 1
	[0207.477] GetProcessHeap () returned 0x800000
	[0207.477] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0207.477] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0207.478] GetProcessHeap () returned 0x800000
	[0207.478] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21a0 | out: hHeap=0x800000) returned 1
	[0207.478] GetProcessHeap () returned 0x800000
	[0207.478] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0207.478] GetProcessHeap () returned 0x800000
	[0207.478] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0207.478] GetProcessHeap () returned 0x800000
	[0207.478] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0207.478] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0207.478] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x274
	[0207.478] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0x0) returned 0x0
	[0207.478] GetProcessHeap () returned 0x800000
	[0207.478] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0207.478] GetProcessHeap () returned 0x800000
	[0207.478] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0207.478] ReleaseMutex (hMutex=0x274) returned 1
	[0207.478] CloseHandle (hObject=0x274) returned 1
	[0207.478] Sleep (dwMilliseconds=0x3e8) 
	[0208.548] GetProcessHeap () returned 0x800000
	[0208.548] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f21a0
	[0208.548] GetProcessHeap () returned 0x800000
	[0208.548] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f24c0
	[0208.548] GetProcessHeap () returned 0x800000
	[0208.548] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2498
	[0208.548] GetProcessHeap () returned 0x800000
	[0208.548] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0208.548] GetProcessHeap () returned 0x800000
	[0208.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0208.548] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f24c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0208.548] GetProcessHeap () returned 0x800000
	[0208.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2498 | out: hHeap=0x800000) returned 1
	[0208.548] GetProcessHeap () returned 0x800000
	[0208.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21a0 | out: hHeap=0x800000) returned 1
	[0208.548] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0208.549] GetProcessHeap () returned 0x800000
	[0208.549] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0208.549] GetProcessHeap () returned 0x800000
	[0208.549] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0208.549] GetProcessHeap () returned 0x800000
	[0208.549] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0208.549] GetProcessHeap () returned 0x800000
	[0208.549] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0208.549] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0208.549] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x280
	[0208.549] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0x0) returned 0x0
	[0208.549] GetProcessHeap () returned 0x800000
	[0208.549] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0208.549] GetProcessHeap () returned 0x800000
	[0208.549] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0208.549] ReleaseMutex (hMutex=0x280) returned 1
	[0208.549] CloseHandle (hObject=0x280) returned 1
	[0208.549] Sleep (dwMilliseconds=0x3e8) 
	[0209.718] GetProcessHeap () returned 0x800000
	[0209.718] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f24c0
	[0209.718] GetProcessHeap () returned 0x800000
	[0209.718] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f21a0
	[0209.718] GetProcessHeap () returned 0x800000
	[0209.718] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2498
	[0209.718] GetProcessHeap () returned 0x800000
	[0209.718] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0209.718] GetProcessHeap () returned 0x800000
	[0209.718] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0209.718] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f21a0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0209.718] GetProcessHeap () returned 0x800000
	[0209.718] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2498 | out: hHeap=0x800000) returned 1
	[0209.718] GetProcessHeap () returned 0x800000
	[0209.718] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0209.718] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0209.719] GetProcessHeap () returned 0x800000
	[0209.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21a0 | out: hHeap=0x800000) returned 1
	[0209.719] GetProcessHeap () returned 0x800000
	[0209.719] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0209.719] GetProcessHeap () returned 0x800000
	[0209.719] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0209.719] GetProcessHeap () returned 0x800000
	[0209.719] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0209.719] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0209.719] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x260
	[0209.719] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0x0) returned 0x0
	[0209.719] GetProcessHeap () returned 0x800000
	[0209.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0209.719] GetProcessHeap () returned 0x800000
	[0209.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0209.719] ReleaseMutex (hMutex=0x260) returned 1
	[0209.719] CloseHandle (hObject=0x260) returned 1
	[0209.719] Sleep (dwMilliseconds=0x3e8) 
	[0211.267] GetProcessHeap () returned 0x800000
	[0211.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f21a0
	[0211.267] GetProcessHeap () returned 0x800000
	[0211.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f24c0
	[0211.267] GetProcessHeap () returned 0x800000
	[0211.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2498
	[0211.267] GetProcessHeap () returned 0x800000
	[0211.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0211.267] GetProcessHeap () returned 0x800000
	[0211.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0211.267] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f24c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0211.267] GetProcessHeap () returned 0x800000
	[0211.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2498 | out: hHeap=0x800000) returned 1
	[0211.267] GetProcessHeap () returned 0x800000
	[0211.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21a0 | out: hHeap=0x800000) returned 1
	[0211.267] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0211.268] GetProcessHeap () returned 0x800000
	[0211.268] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0211.268] GetProcessHeap () returned 0x800000
	[0211.268] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0211.268] GetProcessHeap () returned 0x800000
	[0211.268] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0211.268] GetProcessHeap () returned 0x800000
	[0211.268] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0211.268] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0211.268] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x230
	[0211.268] WaitForSingleObject (hHandle=0x230, dwMilliseconds=0x0) returned 0x0
	[0211.268] GetProcessHeap () returned 0x800000
	[0211.268] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0211.268] GetProcessHeap () returned 0x800000
	[0211.268] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0211.268] ReleaseMutex (hMutex=0x230) returned 1
	[0211.268] CloseHandle (hObject=0x230) returned 1
	[0211.268] Sleep (dwMilliseconds=0x3e8) 
	[0212.354] GetProcessHeap () returned 0x800000
	[0212.354] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f24c0
	[0212.354] GetProcessHeap () returned 0x800000
	[0212.354] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f21a0
	[0212.354] GetProcessHeap () returned 0x800000
	[0212.354] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2498
	[0212.354] GetProcessHeap () returned 0x800000
	[0212.354] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0212.354] GetProcessHeap () returned 0x800000
	[0212.354] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0212.354] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f21a0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0212.354] GetProcessHeap () returned 0x800000
	[0212.354] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2498 | out: hHeap=0x800000) returned 1
	[0212.354] GetProcessHeap () returned 0x800000
	[0212.354] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0212.354] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0212.356] GetProcessHeap () returned 0x800000
	[0212.356] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f21a0 | out: hHeap=0x800000) returned 1
	[0212.356] GetProcessHeap () returned 0x800000
	[0212.356] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0212.356] GetProcessHeap () returned 0x800000
	[0212.356] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0212.356] GetProcessHeap () returned 0x800000
	[0212.356] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0212.356] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0212.356] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x230
	[0212.356] WaitForSingleObject (hHandle=0x230, dwMilliseconds=0x0) returned 0x0
	[0212.356] GetProcessHeap () returned 0x800000
	[0212.356] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0212.356] GetProcessHeap () returned 0x800000
	[0212.357] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0212.357] ReleaseMutex (hMutex=0x230) returned 1
	[0212.357] CloseHandle (hObject=0x230) returned 1
	[0212.357] Sleep (dwMilliseconds=0x3e8) 
	[0213.431] GetProcessHeap () returned 0x800000
	[0213.431] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f24c0
	[0213.431] GetProcessHeap () returned 0x800000
	[0213.431] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f2510
	[0213.431] GetProcessHeap () returned 0x800000
	[0213.431] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0213.431] GetProcessHeap () returned 0x800000
	[0213.431] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0213.431] GetProcessHeap () returned 0x800000
	[0213.431] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0213.431] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f2510, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0213.431] GetProcessHeap () returned 0x800000
	[0213.431] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0213.431] GetProcessHeap () returned 0x800000
	[0213.431] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0213.431] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0213.432] GetProcessHeap () returned 0x800000
	[0213.432] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2510 | out: hHeap=0x800000) returned 1
	[0213.432] GetProcessHeap () returned 0x800000
	[0213.432] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0213.432] GetProcessHeap () returned 0x800000
	[0213.432] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0213.432] GetProcessHeap () returned 0x800000
	[0213.432] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0213.433] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0213.433] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x230
	[0213.433] WaitForSingleObject (hHandle=0x230, dwMilliseconds=0x0) returned 0x0
	[0213.433] GetProcessHeap () returned 0x800000
	[0213.433] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0213.433] GetProcessHeap () returned 0x800000
	[0213.433] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0213.433] ReleaseMutex (hMutex=0x230) returned 1
	[0213.433] CloseHandle (hObject=0x230) returned 1
	[0213.433] Sleep (dwMilliseconds=0x3e8) 
	[0214.507] GetProcessHeap () returned 0x800000
	[0214.507] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f2510
	[0214.507] GetProcessHeap () returned 0x800000
	[0214.507] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f24c0
	[0214.507] GetProcessHeap () returned 0x800000
	[0214.507] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0214.507] GetProcessHeap () returned 0x800000
	[0214.507] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0214.507] GetProcessHeap () returned 0x800000
	[0214.507] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0214.507] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f24c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0214.507] GetProcessHeap () returned 0x800000
	[0214.507] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0214.507] GetProcessHeap () returned 0x800000
	[0214.507] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2510 | out: hHeap=0x800000) returned 1
	[0214.507] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0214.509] GetProcessHeap () returned 0x800000
	[0214.509] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0214.509] GetProcessHeap () returned 0x800000
	[0214.509] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0214.509] GetProcessHeap () returned 0x800000
	[0214.509] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0214.509] GetProcessHeap () returned 0x800000
	[0214.509] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0214.509] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0214.509] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x230
	[0214.509] WaitForSingleObject (hHandle=0x230, dwMilliseconds=0x0) returned 0x0
	[0214.509] GetProcessHeap () returned 0x800000
	[0214.509] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0214.509] GetProcessHeap () returned 0x800000
	[0214.509] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0214.509] ReleaseMutex (hMutex=0x230) returned 1
	[0214.509] CloseHandle (hObject=0x230) returned 1
	[0214.509] Sleep (dwMilliseconds=0x3e8) 
	[0215.584] GetProcessHeap () returned 0x800000
	[0215.584] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f24c0
	[0215.584] GetProcessHeap () returned 0x800000
	[0215.584] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f2510
	[0215.584] GetProcessHeap () returned 0x800000
	[0215.584] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0215.584] GetProcessHeap () returned 0x800000
	[0215.584] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0215.584] GetProcessHeap () returned 0x800000
	[0215.584] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0215.584] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f2510, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0215.584] GetProcessHeap () returned 0x800000
	[0215.584] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0215.584] GetProcessHeap () returned 0x800000
	[0215.584] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0215.584] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0215.585] GetProcessHeap () returned 0x800000
	[0215.585] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2510 | out: hHeap=0x800000) returned 1
	[0215.585] GetProcessHeap () returned 0x800000
	[0215.585] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0215.585] GetProcessHeap () returned 0x800000
	[0215.585] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0215.585] GetProcessHeap () returned 0x800000
	[0215.585] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0215.585] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0215.585] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x230
	[0215.586] WaitForSingleObject (hHandle=0x230, dwMilliseconds=0x0) returned 0x0
	[0215.586] GetProcessHeap () returned 0x800000
	[0215.586] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0215.586] GetProcessHeap () returned 0x800000
	[0215.586] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0215.586] ReleaseMutex (hMutex=0x230) returned 1
	[0215.586] CloseHandle (hObject=0x230) returned 1
	[0215.586] Sleep (dwMilliseconds=0x3e8) 
	[0216.645] GetProcessHeap () returned 0x800000
	[0216.645] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f2510
	[0216.645] GetProcessHeap () returned 0x800000
	[0216.645] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f24c0
	[0216.645] GetProcessHeap () returned 0x800000
	[0216.645] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0216.645] GetProcessHeap () returned 0x800000
	[0216.645] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0216.645] GetProcessHeap () returned 0x800000
	[0216.645] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0216.646] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f24c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0216.646] GetProcessHeap () returned 0x800000
	[0216.646] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0216.646] GetProcessHeap () returned 0x800000
	[0216.646] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2510 | out: hHeap=0x800000) returned 1
	[0216.646] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0216.648] GetProcessHeap () returned 0x800000
	[0216.648] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0216.648] GetProcessHeap () returned 0x800000
	[0216.648] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0216.648] GetProcessHeap () returned 0x800000
	[0216.648] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0216.648] GetProcessHeap () returned 0x800000
	[0216.648] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0216.648] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0216.648] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x274
	[0216.648] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0x0) returned 0x0
	[0216.648] GetProcessHeap () returned 0x800000
	[0216.648] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0216.648] GetProcessHeap () returned 0x800000
	[0216.648] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0216.648] ReleaseMutex (hMutex=0x274) returned 1
	[0216.648] CloseHandle (hObject=0x274) returned 1
	[0216.648] Sleep (dwMilliseconds=0x3e8) 
	[0217.721] GetProcessHeap () returned 0x800000
	[0217.721] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f24c0
	[0217.721] GetProcessHeap () returned 0x800000
	[0217.721] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f2510
	[0217.721] GetProcessHeap () returned 0x800000
	[0217.721] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0217.721] GetProcessHeap () returned 0x800000
	[0217.721] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0217.721] GetProcessHeap () returned 0x800000
	[0217.721] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0217.721] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f2510, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0217.721] GetProcessHeap () returned 0x800000
	[0217.721] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0217.721] GetProcessHeap () returned 0x800000
	[0217.721] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0217.721] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0217.723] GetProcessHeap () returned 0x800000
	[0217.723] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2510 | out: hHeap=0x800000) returned 1
	[0217.723] GetProcessHeap () returned 0x800000
	[0217.723] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0217.723] GetProcessHeap () returned 0x800000
	[0217.723] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0217.723] GetProcessHeap () returned 0x800000
	[0217.723] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0217.723] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0217.723] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x274
	[0217.723] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0x0) returned 0x0
	[0217.723] GetProcessHeap () returned 0x800000
	[0217.723] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0217.723] GetProcessHeap () returned 0x800000
	[0217.723] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0217.724] ReleaseMutex (hMutex=0x274) returned 1
	[0217.724] CloseHandle (hObject=0x274) returned 1
	[0217.724] Sleep (dwMilliseconds=0x3e8) 
	[0218.782] GetProcessHeap () returned 0x800000
	[0218.782] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f2510
	[0218.782] GetProcessHeap () returned 0x800000
	[0218.782] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f24c0
	[0218.782] GetProcessHeap () returned 0x800000
	[0218.782] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0218.782] GetProcessHeap () returned 0x800000
	[0218.782] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0218.782] GetProcessHeap () returned 0x800000
	[0218.782] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0218.782] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f24c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0218.782] GetProcessHeap () returned 0x800000
	[0218.782] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0218.782] GetProcessHeap () returned 0x800000
	[0218.782] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2510 | out: hHeap=0x800000) returned 1
	[0218.782] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0218.784] GetProcessHeap () returned 0x800000
	[0218.784] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0218.784] GetProcessHeap () returned 0x800000
	[0218.784] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0218.784] GetProcessHeap () returned 0x800000
	[0218.784] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0218.784] GetProcessHeap () returned 0x800000
	[0218.784] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0218.784] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0218.784] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x274
	[0218.784] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0x0) returned 0x0
	[0218.784] GetProcessHeap () returned 0x800000
	[0218.784] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0218.784] GetProcessHeap () returned 0x800000
	[0218.784] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0218.784] ReleaseMutex (hMutex=0x274) returned 1
	[0218.784] CloseHandle (hObject=0x274) returned 1
	[0218.784] Sleep (dwMilliseconds=0x3e8) 
	[0219.842] GetProcessHeap () returned 0x800000
	[0219.842] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f24c0
	[0219.842] GetProcessHeap () returned 0x800000
	[0219.842] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f2510
	[0219.843] GetProcessHeap () returned 0x800000
	[0219.843] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0219.843] GetProcessHeap () returned 0x800000
	[0219.843] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0219.843] GetProcessHeap () returned 0x800000
	[0219.843] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0219.843] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f2510, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0219.843] GetProcessHeap () returned 0x800000
	[0219.843] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0219.843] GetProcessHeap () returned 0x800000
	[0219.843] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0219.843] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0219.844] GetProcessHeap () returned 0x800000
	[0219.844] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2510 | out: hHeap=0x800000) returned 1
	[0219.844] GetProcessHeap () returned 0x800000
	[0219.844] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0219.844] GetProcessHeap () returned 0x800000
	[0219.844] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0219.845] GetProcessHeap () returned 0x800000
	[0219.845] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0219.845] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0219.845] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x274
	[0219.845] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0x0) returned 0x0
	[0219.845] GetProcessHeap () returned 0x800000
	[0219.845] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0219.845] GetProcessHeap () returned 0x800000
	[0219.845] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0219.845] ReleaseMutex (hMutex=0x274) returned 1
	[0219.845] CloseHandle (hObject=0x274) returned 1
	[0219.845] Sleep (dwMilliseconds=0x3e8) 
	[0221.168] GetProcessHeap () returned 0x800000
	[0221.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f2510
	[0221.168] GetProcessHeap () returned 0x800000
	[0221.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f24c0
	[0221.168] GetProcessHeap () returned 0x800000
	[0221.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0221.168] GetProcessHeap () returned 0x800000
	[0221.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0221.168] GetProcessHeap () returned 0x800000
	[0221.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0221.168] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f24c0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0221.168] GetProcessHeap () returned 0x800000
	[0221.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0221.168] GetProcessHeap () returned 0x800000
	[0221.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2510 | out: hHeap=0x800000) returned 1
	[0221.168] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0221.169] GetProcessHeap () returned 0x800000
	[0221.169] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0221.169] GetProcessHeap () returned 0x800000
	[0221.169] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0221.169] GetProcessHeap () returned 0x800000
	[0221.169] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0221.169] GetProcessHeap () returned 0x800000
	[0221.170] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0221.170] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0221.170] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x270
	[0221.170] WaitForSingleObject (hHandle=0x270, dwMilliseconds=0x0) returned 0x0
	[0221.170] GetProcessHeap () returned 0x800000
	[0221.170] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0221.170] GetProcessHeap () returned 0x800000
	[0221.170] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0221.170] ReleaseMutex (hMutex=0x270) returned 1
	[0221.170] CloseHandle (hObject=0x270) returned 1
	[0221.170] Sleep (dwMilliseconds=0x3e8) 
	[0222.334] GetProcessHeap () returned 0x800000
	[0222.334] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f24c0
	[0222.334] GetProcessHeap () returned 0x800000
	[0222.334] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f2510
	[0222.334] GetProcessHeap () returned 0x800000
	[0222.334] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f2420
	[0222.334] GetProcessHeap () returned 0x800000
	[0222.334] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0222.334] GetProcessHeap () returned 0x800000
	[0222.334] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0222.334] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f2510, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0222.334] GetProcessHeap () returned 0x800000
	[0222.334] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2420 | out: hHeap=0x800000) returned 1
	[0222.334] GetProcessHeap () returned 0x800000
	[0222.334] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24c0 | out: hHeap=0x800000) returned 1
	[0222.334] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0222.335] GetProcessHeap () returned 0x800000
	[0222.335] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2510 | out: hHeap=0x800000) returned 1
	[0222.335] GetProcessHeap () returned 0x800000
	[0222.335] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0222.335] GetProcessHeap () returned 0x800000
	[0222.335] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0222.335] GetProcessHeap () returned 0x800000
	[0222.335] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0222.335] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0222.335] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x26c
	[0222.335] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x0) returned 0x0
	[0222.335] GetProcessHeap () returned 0x800000
	[0222.335] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0222.335] GetProcessHeap () returned 0x800000
	[0222.335] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0222.335] ReleaseMutex (hMutex=0x26c) returned 1
	[0222.335] CloseHandle (hObject=0x26c) returned 1
	[0222.336] Sleep (dwMilliseconds=0x3e8) 
	[0223.436] GetProcessHeap () returned 0x800000
	[0223.437] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1f00
	[0223.437] GetProcessHeap () returned 0x800000
	[0223.437] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1f50
	[0223.437] GetProcessHeap () returned 0x800000
	[0223.437] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e20b8
	[0223.437] GetProcessHeap () returned 0x800000
	[0223.437] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0223.437] GetProcessHeap () returned 0x800000
	[0223.437] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0223.437] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1f50, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0223.437] GetProcessHeap () returned 0x800000
	[0223.437] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e20b8 | out: hHeap=0x800000) returned 1
	[0223.437] GetProcessHeap () returned 0x800000
	[0223.437] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f00 | out: hHeap=0x800000) returned 1
	[0223.437] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0223.437] GetProcessHeap () returned 0x800000
	[0223.437] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f50 | out: hHeap=0x800000) returned 1
	[0223.437] GetProcessHeap () returned 0x800000
	[0223.437] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0223.437] GetProcessHeap () returned 0x800000
	[0223.437] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0223.437] GetProcessHeap () returned 0x800000
	[0223.438] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0223.438] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0223.438] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x260
	[0223.438] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0x0) returned 0x0
	[0223.438] GetProcessHeap () returned 0x800000
	[0223.438] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0223.438] GetProcessHeap () returned 0x800000
	[0223.438] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0223.438] ReleaseMutex (hMutex=0x260) returned 1
	[0223.438] CloseHandle (hObject=0x260) returned 1
	[0223.438] Sleep (dwMilliseconds=0x3e8) 
	[0225.031] GetProcessHeap () returned 0x800000
	[0225.031] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1fc8
	[0225.031] GetProcessHeap () returned 0x800000
	[0225.031] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e2068
	[0225.031] GetProcessHeap () returned 0x800000
	[0225.031] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1eb0
	[0225.031] GetProcessHeap () returned 0x800000
	[0225.031] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f960
	[0225.031] GetProcessHeap () returned 0x800000
	[0225.031] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f960 | out: hHeap=0x800000) returned 1
	[0225.031] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e2068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0225.031] GetProcessHeap () returned 0x800000
	[0225.031] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1eb0 | out: hHeap=0x800000) returned 1
	[0225.031] GetProcessHeap () returned 0x800000
	[0225.032] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1fc8 | out: hHeap=0x800000) returned 1
	[0225.032] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0225.032] GetProcessHeap () returned 0x800000
	[0225.032] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2068 | out: hHeap=0x800000) returned 1
	[0225.032] GetProcessHeap () returned 0x800000
	[0225.032] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d988
	[0225.032] GetProcessHeap () returned 0x800000
	[0225.032] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0225.032] GetProcessHeap () returned 0x800000
	[0225.032] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0225.032] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0225.032] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x248
	[0225.032] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x0) returned 0x0
	[0225.032] GetProcessHeap () returned 0x800000
	[0225.032] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81d988 | out: hHeap=0x800000) returned 1
	[0225.032] GetProcessHeap () returned 0x800000
	[0225.032] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0225.033] ReleaseMutex (hMutex=0x248) returned 1
	[0225.033] CloseHandle (hObject=0x248) returned 1
	[0225.033] Sleep (dwMilliseconds=0x3e8) 
	[0227.345] GetProcessHeap () returned 0x800000
	[0227.345] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1c80
	[0227.345] GetProcessHeap () returned 0x800000
	[0227.345] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1ca8
	[0227.345] GetProcessHeap () returned 0x800000
	[0227.345] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1cd0
	[0227.345] GetProcessHeap () returned 0x800000
	[0227.345] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0227.345] GetProcessHeap () returned 0x800000
	[0227.345] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0227.345] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1ca8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0227.345] GetProcessHeap () returned 0x800000
	[0227.345] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1cd0 | out: hHeap=0x800000) returned 1
	[0227.345] GetProcessHeap () returned 0x800000
	[0227.345] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1c80 | out: hHeap=0x800000) returned 1
	[0227.346] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0227.346] GetProcessHeap () returned 0x800000
	[0227.346] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1ca8 | out: hHeap=0x800000) returned 1
	[0227.346] GetProcessHeap () returned 0x800000
	[0227.346] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0227.346] GetProcessHeap () returned 0x800000
	[0227.346] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0227.346] GetProcessHeap () returned 0x800000
	[0227.346] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0227.346] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0227.346] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x258
	[0227.346] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0x0) returned 0x0
	[0227.346] GetProcessHeap () returned 0x800000
	[0227.346] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0227.346] GetProcessHeap () returned 0x800000
	[0227.346] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0227.347] ReleaseMutex (hMutex=0x258) returned 1
	[0227.347] CloseHandle (hObject=0x258) returned 1
	[0227.347] Sleep (dwMilliseconds=0x3e8) 
	[0229.339] GetProcessHeap () returned 0x800000
	[0229.339] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1ff0
	[0229.339] GetProcessHeap () returned 0x800000
	[0229.339] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e2018
	[0229.339] GetProcessHeap () returned 0x800000
	[0229.339] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1ca8
	[0229.339] GetProcessHeap () returned 0x800000
	[0229.339] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0229.339] GetProcessHeap () returned 0x800000
	[0229.339] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0229.339] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e2018, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0229.339] GetProcessHeap () returned 0x800000
	[0229.339] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1ca8 | out: hHeap=0x800000) returned 1
	[0229.339] GetProcessHeap () returned 0x800000
	[0229.339] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1ff0 | out: hHeap=0x800000) returned 1
	[0229.339] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0229.339] GetProcessHeap () returned 0x800000
	[0229.339] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2018 | out: hHeap=0x800000) returned 1
	[0229.339] GetProcessHeap () returned 0x800000
	[0229.339] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0229.339] GetProcessHeap () returned 0x800000
	[0229.339] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0229.339] GetProcessHeap () returned 0x800000
	[0229.339] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0229.340] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0229.340] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x260
	[0229.340] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0x0) returned 0x0
	[0229.340] GetProcessHeap () returned 0x800000
	[0229.340] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0229.340] GetProcessHeap () returned 0x800000
	[0229.340] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0229.340] ReleaseMutex (hMutex=0x260) returned 1
	[0229.340] CloseHandle (hObject=0x260) returned 1
	[0229.340] Sleep (dwMilliseconds=0x3e8) 
	[0230.492] GetProcessHeap () returned 0x800000
	[0230.492] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e2018
	[0230.492] GetProcessHeap () returned 0x800000
	[0230.492] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1ff0
	[0230.492] GetProcessHeap () returned 0x800000
	[0230.492] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1ca8
	[0230.492] GetProcessHeap () returned 0x800000
	[0230.492] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0230.492] GetProcessHeap () returned 0x800000
	[0230.492] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0230.492] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1ff0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0230.492] GetProcessHeap () returned 0x800000
	[0230.492] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1ca8 | out: hHeap=0x800000) returned 1
	[0230.492] GetProcessHeap () returned 0x800000
	[0230.492] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2018 | out: hHeap=0x800000) returned 1
	[0230.492] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0230.492] GetProcessHeap () returned 0x800000
	[0230.492] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1ff0 | out: hHeap=0x800000) returned 1
	[0230.492] GetProcessHeap () returned 0x800000
	[0230.492] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0230.492] GetProcessHeap () returned 0x800000
	[0230.492] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0230.493] GetProcessHeap () returned 0x800000
	[0230.493] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0230.493] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0230.493] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x248
	[0230.493] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x0) returned 0x0
	[0230.493] GetProcessHeap () returned 0x800000
	[0230.493] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0230.493] GetProcessHeap () returned 0x800000
	[0230.493] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0230.493] ReleaseMutex (hMutex=0x248) returned 1
	[0230.493] CloseHandle (hObject=0x248) returned 1
	[0230.493] Sleep (dwMilliseconds=0x3e8) 
	[0231.675] GetProcessHeap () returned 0x800000
	[0231.675] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f2218
	[0231.675] GetProcessHeap () returned 0x800000
	[0231.675] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f2128
	[0231.675] GetProcessHeap () returned 0x800000
	[0231.675] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f24e8
	[0231.675] GetProcessHeap () returned 0x800000
	[0231.675] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0231.675] GetProcessHeap () returned 0x800000
	[0231.675] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0231.675] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f2128, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0231.676] GetProcessHeap () returned 0x800000
	[0231.676] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24e8 | out: hHeap=0x800000) returned 1
	[0231.676] GetProcessHeap () returned 0x800000
	[0231.676] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2218 | out: hHeap=0x800000) returned 1
	[0231.676] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0231.677] GetProcessHeap () returned 0x800000
	[0231.677] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2128 | out: hHeap=0x800000) returned 1
	[0231.677] GetProcessHeap () returned 0x800000
	[0231.677] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0231.677] GetProcessHeap () returned 0x800000
	[0231.677] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0231.677] GetProcessHeap () returned 0x800000
	[0231.677] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0231.677] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0231.677] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x260
	[0231.678] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0x0) returned 0x0
	[0231.678] GetProcessHeap () returned 0x800000
	[0231.678] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0231.678] GetProcessHeap () returned 0x800000
	[0231.678] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0231.678] ReleaseMutex (hMutex=0x260) returned 1
	[0231.678] CloseHandle (hObject=0x260) returned 1
	[0231.678] Sleep (dwMilliseconds=0x3e8) 
	[0233.076] GetProcessHeap () returned 0x800000
	[0233.076] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8f2128
	[0233.076] GetProcessHeap () returned 0x800000
	[0233.076] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8f2218
	[0233.076] GetProcessHeap () returned 0x800000
	[0233.076] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8f24e8
	[0233.076] GetProcessHeap () returned 0x800000
	[0233.076] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0233.076] GetProcessHeap () returned 0x800000
	[0233.076] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0233.076] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8f2218, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0233.077] GetProcessHeap () returned 0x800000
	[0233.077] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f24e8 | out: hHeap=0x800000) returned 1
	[0233.077] GetProcessHeap () returned 0x800000
	[0233.077] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2128 | out: hHeap=0x800000) returned 1
	[0233.077] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0233.077] GetProcessHeap () returned 0x800000
	[0233.077] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8f2218 | out: hHeap=0x800000) returned 1
	[0233.077] GetProcessHeap () returned 0x800000
	[0233.077] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0233.077] GetProcessHeap () returned 0x800000
	[0233.077] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0233.077] GetProcessHeap () returned 0x800000
	[0233.077] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0233.077] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0233.077] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x260
	[0233.077] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0x0) returned 0x0
	[0233.077] GetProcessHeap () returned 0x800000
	[0233.078] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0233.078] GetProcessHeap () returned 0x800000
	[0233.078] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0233.078] ReleaseMutex (hMutex=0x260) returned 1
	[0233.078] CloseHandle (hObject=0x260) returned 1
	[0233.078] Sleep (dwMilliseconds=0x3e8) 
	[0234.108] GetProcessHeap () returned 0x800000
	[0234.108] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554948
	[0234.108] GetProcessHeap () returned 0x800000
	[0234.108] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548a8
	[0234.108] GetProcessHeap () returned 0x800000
	[0234.108] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0234.108] GetProcessHeap () returned 0x800000
	[0234.108] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0234.108] GetProcessHeap () returned 0x800000
	[0234.108] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0234.108] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548a8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0234.108] GetProcessHeap () returned 0x800000
	[0234.108] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0234.108] GetProcessHeap () returned 0x800000
	[0234.108] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554948 | out: hHeap=0x800000) returned 1
	[0234.108] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0234.109] GetProcessHeap () returned 0x800000
	[0234.109] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548a8 | out: hHeap=0x800000) returned 1
	[0234.109] GetProcessHeap () returned 0x800000
	[0234.109] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0234.109] GetProcessHeap () returned 0x800000
	[0234.109] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0234.109] GetProcessHeap () returned 0x800000
	[0234.109] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0234.109] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0234.109] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x26c
	[0234.109] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x0) returned 0x0
	[0234.109] GetProcessHeap () returned 0x800000
	[0234.109] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0234.109] GetProcessHeap () returned 0x800000
	[0234.110] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0234.110] ReleaseMutex (hMutex=0x26c) returned 1
	[0234.110] CloseHandle (hObject=0x26c) returned 1
	[0234.110] Sleep (dwMilliseconds=0x3e8) 
	[0235.346] GetProcessHeap () returned 0x800000
	[0235.346] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x35548a8
	[0235.346] GetProcessHeap () returned 0x800000
	[0235.346] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x3554948
	[0235.346] GetProcessHeap () returned 0x800000
	[0235.346] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0235.346] GetProcessHeap () returned 0x800000
	[0235.346] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0235.346] GetProcessHeap () returned 0x800000
	[0235.346] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0235.346] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3554948, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0235.346] GetProcessHeap () returned 0x800000
	[0235.346] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0235.346] GetProcessHeap () returned 0x800000
	[0235.346] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548a8 | out: hHeap=0x800000) returned 1
	[0235.346] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0235.346] GetProcessHeap () returned 0x800000
	[0235.346] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554948 | out: hHeap=0x800000) returned 1
	[0235.346] GetProcessHeap () returned 0x800000
	[0235.346] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0235.346] GetProcessHeap () returned 0x800000
	[0235.346] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0235.346] GetProcessHeap () returned 0x800000
	[0235.346] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0235.346] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0235.347] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x274
	[0235.347] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0x0) returned 0x0
	[0235.347] GetProcessHeap () returned 0x800000
	[0235.347] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0235.347] GetProcessHeap () returned 0x800000
	[0235.347] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0235.347] ReleaseMutex (hMutex=0x274) returned 1
	[0235.347] CloseHandle (hObject=0x274) returned 1
	[0235.347] Sleep (dwMilliseconds=0x3e8) 
	[0236.547] GetProcessHeap () returned 0x800000
	[0236.547] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554948
	[0236.547] GetProcessHeap () returned 0x800000
	[0236.547] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548a8
	[0236.547] GetProcessHeap () returned 0x800000
	[0236.547] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554808
	[0236.547] GetProcessHeap () returned 0x800000
	[0236.547] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0236.547] GetProcessHeap () returned 0x800000
	[0236.547] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0236.548] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548a8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0236.548] GetProcessHeap () returned 0x800000
	[0236.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554808 | out: hHeap=0x800000) returned 1
	[0236.548] GetProcessHeap () returned 0x800000
	[0236.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554948 | out: hHeap=0x800000) returned 1
	[0236.548] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0236.548] GetProcessHeap () returned 0x800000
	[0236.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548a8 | out: hHeap=0x800000) returned 1
	[0236.548] GetProcessHeap () returned 0x800000
	[0236.548] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0236.548] GetProcessHeap () returned 0x800000
	[0236.548] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0236.548] GetProcessHeap () returned 0x800000
	[0236.548] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0236.548] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0236.548] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x25c
	[0236.548] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x0) returned 0x0
	[0236.548] GetProcessHeap () returned 0x800000
	[0236.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0236.548] GetProcessHeap () returned 0x800000
	[0236.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0236.548] ReleaseMutex (hMutex=0x25c) returned 1
	[0236.548] CloseHandle (hObject=0x25c) returned 1
	[0236.548] Sleep (dwMilliseconds=0x3e8) 
	[0238.094] GetProcessHeap () returned 0x800000
	[0238.094] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81cf08
	[0238.094] GetProcessHeap () returned 0x800000
	[0238.094] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81cf80
	[0238.094] GetProcessHeap () returned 0x800000
	[0238.094] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1ff0
	[0238.094] GetProcessHeap () returned 0x800000
	[0238.094] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0238.094] GetProcessHeap () returned 0x800000
	[0238.094] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0238.094] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81cf80, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0238.094] GetProcessHeap () returned 0x800000
	[0238.094] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1ff0 | out: hHeap=0x800000) returned 1
	[0238.094] GetProcessHeap () returned 0x800000
	[0238.094] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cf08 | out: hHeap=0x800000) returned 1
	[0238.094] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0238.095] GetProcessHeap () returned 0x800000
	[0238.095] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81cf80 | out: hHeap=0x800000) returned 1
	[0238.095] GetProcessHeap () returned 0x800000
	[0238.095] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0238.095] GetProcessHeap () returned 0x800000
	[0238.095] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0238.095] GetProcessHeap () returned 0x800000
	[0238.095] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0238.095] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0238.095] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x114
	[0238.095] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x0) returned 0x0
	[0238.095] GetProcessHeap () returned 0x800000
	[0238.095] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0238.095] GetProcessHeap () returned 0x800000
	[0238.095] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0238.095] ReleaseMutex (hMutex=0x114) returned 1
	[0238.095] CloseHandle (hObject=0x114) returned 1
	[0238.095] Sleep (dwMilliseconds=0x3e8) 
	[0239.254] GetProcessHeap () returned 0x800000
	[0239.254] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x879970
	[0239.254] GetProcessHeap () returned 0x800000
	[0239.254] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x879998
	[0239.255] GetProcessHeap () returned 0x800000
	[0239.255] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x879948
	[0239.255] GetProcessHeap () returned 0x800000
	[0239.255] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0239.255] GetProcessHeap () returned 0x800000
	[0239.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0239.255] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x879998, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0239.255] GetProcessHeap () returned 0x800000
	[0239.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879948 | out: hHeap=0x800000) returned 1
	[0239.255] GetProcessHeap () returned 0x800000
	[0239.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879970 | out: hHeap=0x800000) returned 1
	[0239.255] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0239.255] GetProcessHeap () returned 0x800000
	[0239.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879998 | out: hHeap=0x800000) returned 1
	[0239.255] GetProcessHeap () returned 0x800000
	[0239.255] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0239.255] GetProcessHeap () returned 0x800000
	[0239.255] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0239.255] GetProcessHeap () returned 0x800000
	[0239.255] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0239.255] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0239.255] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0239.255] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0239.255] GetProcessHeap () returned 0x800000
	[0239.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0239.255] GetProcessHeap () returned 0x800000
	[0239.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0239.255] ReleaseMutex (hMutex=0x170) returned 1
	[0239.255] CloseHandle (hObject=0x170) returned 1
	[0239.255] Sleep (dwMilliseconds=0x3e8) 
	[0240.407] GetProcessHeap () returned 0x800000
	[0240.407] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x879998
	[0240.407] GetProcessHeap () returned 0x800000
	[0240.407] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x879948
	[0240.407] GetProcessHeap () returned 0x800000
	[0240.407] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x879808
	[0240.407] GetProcessHeap () returned 0x800000
	[0240.407] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0240.407] GetProcessHeap () returned 0x800000
	[0240.407] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0240.407] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x879948, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0240.407] GetProcessHeap () returned 0x800000
	[0240.407] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879808 | out: hHeap=0x800000) returned 1
	[0240.407] GetProcessHeap () returned 0x800000
	[0240.407] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879998 | out: hHeap=0x800000) returned 1
	[0240.407] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0240.407] GetProcessHeap () returned 0x800000
	[0240.408] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879948 | out: hHeap=0x800000) returned 1
	[0240.408] GetProcessHeap () returned 0x800000
	[0240.408] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0240.408] GetProcessHeap () returned 0x800000
	[0240.408] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0240.408] GetProcessHeap () returned 0x800000
	[0240.408] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0240.408] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0240.408] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x10c
	[0240.408] WaitForSingleObject (hHandle=0x10c, dwMilliseconds=0x0) returned 0x0
	[0240.408] GetProcessHeap () returned 0x800000
	[0240.408] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0240.408] GetProcessHeap () returned 0x800000
	[0240.408] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0240.408] ReleaseMutex (hMutex=0x10c) returned 1
	[0240.408] CloseHandle (hObject=0x10c) returned 1
	[0240.408] Sleep (dwMilliseconds=0x3e8) 
	[0241.511] GetProcessHeap () returned 0x800000
	[0241.511] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x879948
	[0241.511] GetProcessHeap () returned 0x800000
	[0241.511] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x879998
	[0241.511] GetProcessHeap () returned 0x800000
	[0241.511] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x879808
	[0241.511] GetProcessHeap () returned 0x800000
	[0241.511] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0241.511] GetProcessHeap () returned 0x800000
	[0241.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0241.511] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x879998, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0241.511] GetProcessHeap () returned 0x800000
	[0241.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879808 | out: hHeap=0x800000) returned 1
	[0241.511] GetProcessHeap () returned 0x800000
	[0241.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879948 | out: hHeap=0x800000) returned 1
	[0241.511] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0241.512] GetProcessHeap () returned 0x800000
	[0241.512] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879998 | out: hHeap=0x800000) returned 1
	[0241.512] GetProcessHeap () returned 0x800000
	[0241.512] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0241.512] GetProcessHeap () returned 0x800000
	[0241.512] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0241.512] GetProcessHeap () returned 0x800000
	[0241.512] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0241.512] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0241.512] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x10c
	[0241.512] WaitForSingleObject (hHandle=0x10c, dwMilliseconds=0x0) returned 0x0
	[0241.512] GetProcessHeap () returned 0x800000
	[0241.512] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0241.512] GetProcessHeap () returned 0x800000
	[0241.513] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0241.513] ReleaseMutex (hMutex=0x10c) returned 1
	[0241.513] CloseHandle (hObject=0x10c) returned 1
	[0241.513] Sleep (dwMilliseconds=0x3e8) 
	[0242.581] GetProcessHeap () returned 0x800000
	[0242.581] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1fa0
	[0242.581] GetProcessHeap () returned 0x800000
	[0242.581] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1de8
	[0242.581] GetProcessHeap () returned 0x800000
	[0242.581] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1ff0
	[0242.581] GetProcessHeap () returned 0x800000
	[0242.581] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0242.581] GetProcessHeap () returned 0x800000
	[0242.581] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0242.581] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1de8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0242.581] GetProcessHeap () returned 0x800000
	[0242.581] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1ff0 | out: hHeap=0x800000) returned 1
	[0242.581] GetProcessHeap () returned 0x800000
	[0242.581] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1fa0 | out: hHeap=0x800000) returned 1
	[0242.581] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0242.582] GetProcessHeap () returned 0x800000
	[0242.582] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1de8 | out: hHeap=0x800000) returned 1
	[0242.582] GetProcessHeap () returned 0x800000
	[0242.582] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0242.582] GetProcessHeap () returned 0x800000
	[0242.582] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0242.582] GetProcessHeap () returned 0x800000
	[0242.582] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0242.582] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0242.582] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x10c
	[0242.582] WaitForSingleObject (hHandle=0x10c, dwMilliseconds=0x0) returned 0x0
	[0242.582] GetProcessHeap () returned 0x800000
	[0242.582] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0242.582] GetProcessHeap () returned 0x800000
	[0242.582] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0242.582] ReleaseMutex (hMutex=0x10c) returned 1
	[0242.582] CloseHandle (hObject=0x10c) returned 1
	[0242.582] Sleep (dwMilliseconds=0x3e8) 
	[0243.917] GetProcessHeap () returned 0x800000
	[0243.917] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1de8
	[0243.917] GetProcessHeap () returned 0x800000
	[0243.917] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1fa0
	[0243.917] GetProcessHeap () returned 0x800000
	[0243.917] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1ff0
	[0243.917] GetProcessHeap () returned 0x800000
	[0243.917] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0243.917] GetProcessHeap () returned 0x800000
	[0243.917] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0243.917] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1fa0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0243.917] GetProcessHeap () returned 0x800000
	[0243.917] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1ff0 | out: hHeap=0x800000) returned 1
	[0243.917] GetProcessHeap () returned 0x800000
	[0243.917] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1de8 | out: hHeap=0x800000) returned 1
	[0243.917] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0243.918] GetProcessHeap () returned 0x800000
	[0243.918] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1fa0 | out: hHeap=0x800000) returned 1
	[0243.918] GetProcessHeap () returned 0x800000
	[0243.918] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0243.918] GetProcessHeap () returned 0x800000
	[0243.918] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0243.918] GetProcessHeap () returned 0x800000
	[0243.918] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0243.918] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0243.918] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x10c
	[0243.918] WaitForSingleObject (hHandle=0x10c, dwMilliseconds=0x0) returned 0x0
	[0243.918] GetProcessHeap () returned 0x800000
	[0243.918] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0243.918] GetProcessHeap () returned 0x800000
	[0243.918] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0243.918] ReleaseMutex (hMutex=0x10c) returned 1
	[0243.918] CloseHandle (hObject=0x10c) returned 1
	[0243.918] Sleep (dwMilliseconds=0x3e8) 
	[0245.651] GetProcessHeap () returned 0x800000
	[0245.651] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1fa0
	[0245.651] GetProcessHeap () returned 0x800000
	[0245.651] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1de8
	[0245.651] GetProcessHeap () returned 0x800000
	[0245.651] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1ff0
	[0245.651] GetProcessHeap () returned 0x800000
	[0245.651] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0245.651] GetProcessHeap () returned 0x800000
	[0245.651] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0245.651] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1de8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0245.652] GetProcessHeap () returned 0x800000
	[0245.652] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1ff0 | out: hHeap=0x800000) returned 1
	[0245.652] GetProcessHeap () returned 0x800000
	[0245.652] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1fa0 | out: hHeap=0x800000) returned 1
	[0245.652] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0245.652] GetProcessHeap () returned 0x800000
	[0245.652] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1de8 | out: hHeap=0x800000) returned 1
	[0245.652] GetProcessHeap () returned 0x800000
	[0245.652] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0245.652] GetProcessHeap () returned 0x800000
	[0245.652] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0245.652] GetProcessHeap () returned 0x800000
	[0245.652] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0245.652] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0245.652] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x114
	[0245.652] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x0) returned 0x0
	[0245.652] GetProcessHeap () returned 0x800000
	[0245.652] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0245.652] GetProcessHeap () returned 0x800000
	[0245.652] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0245.652] ReleaseMutex (hMutex=0x114) returned 1
	[0245.652] CloseHandle (hObject=0x114) returned 1
	[0245.652] Sleep (dwMilliseconds=0x3e8) 
	[0246.684] GetProcessHeap () returned 0x800000
	[0246.684] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1f78
	[0246.684] GetProcessHeap () returned 0x800000
	[0246.684] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1de8
	[0246.684] GetProcessHeap () returned 0x800000
	[0246.684] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1fa0
	[0246.684] GetProcessHeap () returned 0x800000
	[0246.684] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0246.684] GetProcessHeap () returned 0x800000
	[0246.684] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0246.684] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1de8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0246.684] GetProcessHeap () returned 0x800000
	[0246.684] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1fa0 | out: hHeap=0x800000) returned 1
	[0246.684] GetProcessHeap () returned 0x800000
	[0246.684] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f78 | out: hHeap=0x800000) returned 1
	[0246.684] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0246.684] GetProcessHeap () returned 0x800000
	[0246.684] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1de8 | out: hHeap=0x800000) returned 1
	[0246.685] GetProcessHeap () returned 0x800000
	[0246.685] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0246.685] GetProcessHeap () returned 0x800000
	[0246.685] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0246.685] GetProcessHeap () returned 0x800000
	[0246.685] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0246.685] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0246.685] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x254
	[0246.685] WaitForSingleObject (hHandle=0x254, dwMilliseconds=0x0) returned 0x0
	[0246.685] GetProcessHeap () returned 0x800000
	[0246.685] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0246.685] GetProcessHeap () returned 0x800000
	[0246.685] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0246.685] ReleaseMutex (hMutex=0x254) returned 1
	[0246.685] CloseHandle (hObject=0x254) returned 1
	[0246.685] Sleep (dwMilliseconds=0x3e8) 
	[0247.706] GetProcessHeap () returned 0x800000
	[0247.707] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1f28
	[0247.707] GetProcessHeap () returned 0x800000
	[0247.707] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e60
	[0247.707] GetProcessHeap () returned 0x800000
	[0247.707] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1e88
	[0247.707] GetProcessHeap () returned 0x800000
	[0247.707] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0247.707] GetProcessHeap () returned 0x800000
	[0247.707] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0247.707] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0247.707] GetProcessHeap () returned 0x800000
	[0247.707] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e88 | out: hHeap=0x800000) returned 1
	[0247.707] GetProcessHeap () returned 0x800000
	[0247.707] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0247.707] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0247.707] GetProcessHeap () returned 0x800000
	[0247.707] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0247.707] GetProcessHeap () returned 0x800000
	[0247.707] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0247.707] GetProcessHeap () returned 0x800000
	[0247.707] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0247.707] GetProcessHeap () returned 0x800000
	[0247.707] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0247.707] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0247.707] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x20c
	[0247.707] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0
	[0247.707] GetProcessHeap () returned 0x800000
	[0247.707] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0247.707] GetProcessHeap () returned 0x800000
	[0247.707] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0247.707] ReleaseMutex (hMutex=0x20c) returned 1
	[0247.708] CloseHandle (hObject=0x20c) returned 1
	[0247.708] Sleep (dwMilliseconds=0x3e8) 
	[0248.940] GetProcessHeap () returned 0x800000
	[0248.940] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e60
	[0248.940] GetProcessHeap () returned 0x800000
	[0248.940] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1f28
	[0248.940] GetProcessHeap () returned 0x800000
	[0248.940] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1e88
	[0248.940] GetProcessHeap () returned 0x800000
	[0248.940] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0248.940] GetProcessHeap () returned 0x800000
	[0248.940] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0248.940] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1f28, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0248.940] GetProcessHeap () returned 0x800000
	[0248.940] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e88 | out: hHeap=0x800000) returned 1
	[0248.940] GetProcessHeap () returned 0x800000
	[0248.940] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0248.940] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0248.941] GetProcessHeap () returned 0x800000
	[0248.941] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0248.941] GetProcessHeap () returned 0x800000
	[0248.941] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0248.941] GetProcessHeap () returned 0x800000
	[0248.941] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0248.941] GetProcessHeap () returned 0x800000
	[0248.941] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0248.941] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0248.941] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x22c
	[0248.941] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0
	[0248.941] GetProcessHeap () returned 0x800000
	[0248.941] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0248.941] GetProcessHeap () returned 0x800000
	[0248.941] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0248.941] ReleaseMutex (hMutex=0x22c) returned 1
	[0248.941] CloseHandle (hObject=0x22c) returned 1
	[0248.941] Sleep (dwMilliseconds=0x3e8) 
	[0249.980] GetProcessHeap () returned 0x800000
	[0249.980] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1f28
	[0249.980] GetProcessHeap () returned 0x800000
	[0249.980] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e60
	[0249.980] GetProcessHeap () returned 0x800000
	[0249.980] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1e88
	[0249.980] GetProcessHeap () returned 0x800000
	[0249.980] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0249.980] GetProcessHeap () returned 0x800000
	[0249.980] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0249.980] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0249.980] GetProcessHeap () returned 0x800000
	[0249.980] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e88 | out: hHeap=0x800000) returned 1
	[0249.980] GetProcessHeap () returned 0x800000
	[0249.980] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0249.980] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0249.980] GetProcessHeap () returned 0x800000
	[0249.980] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0249.980] GetProcessHeap () returned 0x800000
	[0249.980] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0249.980] GetProcessHeap () returned 0x800000
	[0249.980] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0249.981] GetProcessHeap () returned 0x800000
	[0249.981] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0249.981] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0249.981] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x22c
	[0249.981] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0
	[0249.981] GetProcessHeap () returned 0x800000
	[0249.981] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0249.981] GetProcessHeap () returned 0x800000
	[0249.981] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0249.981] ReleaseMutex (hMutex=0x22c) returned 1
	[0249.981] CloseHandle (hObject=0x22c) returned 1
	[0249.981] Sleep (dwMilliseconds=0x3e8) 
	[0251.003] GetProcessHeap () returned 0x800000
	[0251.003] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e60
	[0251.011] GetProcessHeap () returned 0x800000
	[0251.011] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1f28
	[0251.073] GetProcessHeap () returned 0x800000
	[0251.073] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1e88
	[0251.073] GetProcessHeap () returned 0x800000
	[0251.073] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0251.073] GetProcessHeap () returned 0x800000
	[0251.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0251.074] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1f28, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0251.074] GetProcessHeap () returned 0x800000
	[0251.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e88 | out: hHeap=0x800000) returned 1
	[0251.074] GetProcessHeap () returned 0x800000
	[0251.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0251.074] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0251.074] GetProcessHeap () returned 0x800000
	[0251.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0251.074] GetProcessHeap () returned 0x800000
	[0251.074] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0251.074] GetProcessHeap () returned 0x800000
	[0251.074] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0251.074] GetProcessHeap () returned 0x800000
	[0251.074] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0251.074] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0251.074] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x22c
	[0251.074] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0
	[0251.074] GetProcessHeap () returned 0x800000
	[0251.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0251.075] GetProcessHeap () returned 0x800000
	[0251.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0251.075] ReleaseMutex (hMutex=0x22c) returned 1
	[0251.075] CloseHandle (hObject=0x22c) returned 1
	[0251.075] Sleep (dwMilliseconds=0x3e8) 
	[0252.106] GetProcessHeap () returned 0x800000
	[0252.106] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1f28
	[0252.106] GetProcessHeap () returned 0x800000
	[0252.106] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e60
	[0252.106] GetProcessHeap () returned 0x800000
	[0252.106] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1e88
	[0252.106] GetProcessHeap () returned 0x800000
	[0252.106] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0252.107] GetProcessHeap () returned 0x800000
	[0252.107] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0252.107] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0252.107] GetProcessHeap () returned 0x800000
	[0252.107] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e88 | out: hHeap=0x800000) returned 1
	[0252.107] GetProcessHeap () returned 0x800000
	[0252.107] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0252.107] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0252.107] GetProcessHeap () returned 0x800000
	[0252.107] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0252.107] GetProcessHeap () returned 0x800000
	[0252.107] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0252.107] GetProcessHeap () returned 0x800000
	[0252.107] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0252.107] GetProcessHeap () returned 0x800000
	[0252.107] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0252.107] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0252.107] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x22c
	[0252.107] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0
	[0252.107] GetProcessHeap () returned 0x800000
	[0252.108] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0252.108] GetProcessHeap () returned 0x800000
	[0252.108] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0252.108] ReleaseMutex (hMutex=0x22c) returned 1
	[0252.108] CloseHandle (hObject=0x22c) returned 1
	[0252.108] Sleep (dwMilliseconds=0x3e8) 
	[0253.403] GetProcessHeap () returned 0x800000
	[0253.403] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x879858
	[0253.403] GetProcessHeap () returned 0x800000
	[0253.403] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x879948
	[0253.403] GetProcessHeap () returned 0x800000
	[0253.403] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x879970
	[0253.404] GetProcessHeap () returned 0x800000
	[0253.404] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0253.404] GetProcessHeap () returned 0x800000
	[0253.404] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0253.404] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x879948, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0253.404] GetProcessHeap () returned 0x800000
	[0253.404] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879970 | out: hHeap=0x800000) returned 1
	[0253.404] GetProcessHeap () returned 0x800000
	[0253.404] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879858 | out: hHeap=0x800000) returned 1
	[0253.404] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0253.404] GetProcessHeap () returned 0x800000
	[0253.404] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879948 | out: hHeap=0x800000) returned 1
	[0253.404] GetProcessHeap () returned 0x800000
	[0253.404] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0253.404] GetProcessHeap () returned 0x800000
	[0253.404] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0253.404] GetProcessHeap () returned 0x800000
	[0253.404] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0253.404] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0253.404] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x22c
	[0253.404] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0
	[0253.404] GetProcessHeap () returned 0x800000
	[0253.404] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0253.404] GetProcessHeap () returned 0x800000
	[0253.404] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0253.405] ReleaseMutex (hMutex=0x22c) returned 1
	[0253.405] CloseHandle (hObject=0x22c) returned 1
	[0253.405] Sleep (dwMilliseconds=0x3e8) 
	[0254.636] GetProcessHeap () returned 0x800000
	[0254.636] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x879948
	[0254.636] GetProcessHeap () returned 0x800000
	[0254.636] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x879858
	[0254.636] GetProcessHeap () returned 0x800000
	[0254.636] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x879970
	[0254.636] GetProcessHeap () returned 0x800000
	[0254.636] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0254.636] GetProcessHeap () returned 0x800000
	[0254.636] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0254.637] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x879858, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0254.637] GetProcessHeap () returned 0x800000
	[0254.637] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879970 | out: hHeap=0x800000) returned 1
	[0254.637] GetProcessHeap () returned 0x800000
	[0254.637] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879948 | out: hHeap=0x800000) returned 1
	[0254.637] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0254.637] GetProcessHeap () returned 0x800000
	[0254.637] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879858 | out: hHeap=0x800000) returned 1
	[0254.637] GetProcessHeap () returned 0x800000
	[0254.637] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0254.637] GetProcessHeap () returned 0x800000
	[0254.637] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0254.637] GetProcessHeap () returned 0x800000
	[0254.637] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0254.637] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0254.637] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x22c
	[0254.637] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0
	[0254.637] GetProcessHeap () returned 0x800000
	[0254.637] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0254.637] GetProcessHeap () returned 0x800000
	[0254.637] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0254.637] ReleaseMutex (hMutex=0x22c) returned 1
	[0254.637] CloseHandle (hObject=0x22c) returned 1
	[0254.637] Sleep (dwMilliseconds=0x3e8) 
	[0255.670] GetProcessHeap () returned 0x800000
	[0255.674] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x879858
	[0255.682] GetProcessHeap () returned 0x800000
	[0255.682] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x879948
	[0255.682] GetProcessHeap () returned 0x800000
	[0255.682] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x879970
	[0255.682] GetProcessHeap () returned 0x800000
	[0255.682] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0255.682] GetProcessHeap () returned 0x800000
	[0255.682] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0255.682] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x879948, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0255.682] GetProcessHeap () returned 0x800000
	[0255.682] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879970 | out: hHeap=0x800000) returned 1
	[0255.682] GetProcessHeap () returned 0x800000
	[0255.682] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879858 | out: hHeap=0x800000) returned 1
	[0255.682] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0255.682] GetProcessHeap () returned 0x800000
	[0255.682] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879948 | out: hHeap=0x800000) returned 1
	[0255.682] GetProcessHeap () returned 0x800000
	[0255.682] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0255.682] GetProcessHeap () returned 0x800000
	[0255.682] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0255.682] GetProcessHeap () returned 0x800000
	[0255.682] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0255.682] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0255.683] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x22c
	[0255.683] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0
	[0255.683] GetProcessHeap () returned 0x800000
	[0255.683] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0255.683] GetProcessHeap () returned 0x800000
	[0255.683] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0255.683] ReleaseMutex (hMutex=0x22c) returned 1
	[0255.683] CloseHandle (hObject=0x22c) returned 1
	[0255.683] Sleep (dwMilliseconds=0x3e8) 
	[0256.718] GetProcessHeap () returned 0x800000
	[0256.718] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x879948
	[0256.718] GetProcessHeap () returned 0x800000
	[0256.718] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x879858
	[0256.718] GetProcessHeap () returned 0x800000
	[0256.718] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x879970
	[0256.718] GetProcessHeap () returned 0x800000
	[0256.718] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0256.718] GetProcessHeap () returned 0x800000
	[0256.718] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0256.719] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x879858, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0256.719] GetProcessHeap () returned 0x800000
	[0256.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879970 | out: hHeap=0x800000) returned 1
	[0256.719] GetProcessHeap () returned 0x800000
	[0256.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879948 | out: hHeap=0x800000) returned 1
	[0256.719] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0256.719] GetProcessHeap () returned 0x800000
	[0256.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x879858 | out: hHeap=0x800000) returned 1
	[0256.719] GetProcessHeap () returned 0x800000
	[0256.719] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0256.719] GetProcessHeap () returned 0x800000
	[0256.719] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0256.719] GetProcessHeap () returned 0x800000
	[0256.719] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0256.719] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0256.719] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x22c
	[0256.719] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0
	[0256.719] GetProcessHeap () returned 0x800000
	[0256.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0256.719] GetProcessHeap () returned 0x800000
	[0256.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0256.719] ReleaseMutex (hMutex=0x22c) returned 1
	[0256.719] CloseHandle (hObject=0x22c) returned 1
	[0256.719] Sleep (dwMilliseconds=0x3e8) 
	[0257.808] GetProcessHeap () returned 0x800000
	[0257.808] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x3554498
	[0257.809] GetProcessHeap () returned 0x800000
	[0257.809] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x35548a8
	[0257.809] GetProcessHeap () returned 0x800000
	[0257.809] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x3554948
	[0257.809] GetProcessHeap () returned 0x800000
	[0257.809] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0257.809] GetProcessHeap () returned 0x800000
	[0257.809] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0257.809] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x35548a8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0257.809] GetProcessHeap () returned 0x800000
	[0257.809] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554948 | out: hHeap=0x800000) returned 1
	[0257.810] GetProcessHeap () returned 0x800000
	[0257.810] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554498 | out: hHeap=0x800000) returned 1
	[0257.810] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0257.811] GetProcessHeap () returned 0x800000
	[0257.811] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x35548a8 | out: hHeap=0x800000) returned 1
	[0257.811] GetProcessHeap () returned 0x800000
	[0257.811] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0257.812] GetProcessHeap () returned 0x800000
	[0257.822] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0257.823] GetProcessHeap () returned 0x800000
	[0257.823] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0257.823] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0257.823] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x144
	[0257.823] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x0) returned 0x0
	[0257.823] GetProcessHeap () returned 0x800000
	[0257.823] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0257.823] GetProcessHeap () returned 0x800000
	[0257.823] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0257.823] ReleaseMutex (hMutex=0x144) returned 1
	[0257.823] CloseHandle (hObject=0x144) returned 1
	[0257.823] Sleep (dwMilliseconds=0x3e8) 
	[0258.976] GetProcessHeap () returned 0x800000
	[0258.976] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e38
	[0258.976] GetProcessHeap () returned 0x800000
	[0258.976] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e60
	[0258.976] GetProcessHeap () returned 0x800000
	[0258.976] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1f28
	[0258.976] GetProcessHeap () returned 0x800000
	[0258.976] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0258.976] GetProcessHeap () returned 0x800000
	[0258.976] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0258.977] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0258.977] GetProcessHeap () returned 0x800000
	[0258.977] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0258.977] GetProcessHeap () returned 0x800000
	[0258.977] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0258.977] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0258.977] GetProcessHeap () returned 0x800000
	[0258.977] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0258.977] GetProcessHeap () returned 0x800000
	[0258.977] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0258.977] GetProcessHeap () returned 0x800000
	[0258.977] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0258.977] GetProcessHeap () returned 0x800000
	[0258.977] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0258.977] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0258.977] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x22c
	[0258.977] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0
	[0258.977] GetProcessHeap () returned 0x800000
	[0258.977] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0258.977] GetProcessHeap () returned 0x800000
	[0258.977] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0258.977] ReleaseMutex (hMutex=0x22c) returned 1
	[0258.977] CloseHandle (hObject=0x22c) returned 1
	[0258.977] Sleep (dwMilliseconds=0x3e8) 
	[0260.063] GetProcessHeap () returned 0x800000
	[0260.063] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e60
	[0260.063] GetProcessHeap () returned 0x800000
	[0260.063] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e38
	[0260.063] GetProcessHeap () returned 0x800000
	[0260.063] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1f28
	[0260.063] GetProcessHeap () returned 0x800000
	[0260.063] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0260.063] GetProcessHeap () returned 0x800000
	[0260.063] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0260.063] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e38, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0260.063] GetProcessHeap () returned 0x800000
	[0260.063] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0260.063] GetProcessHeap () returned 0x800000
	[0260.063] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0260.063] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0260.063] GetProcessHeap () returned 0x800000
	[0260.063] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0260.063] GetProcessHeap () returned 0x800000
	[0260.063] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0260.063] GetProcessHeap () returned 0x800000
	[0260.063] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0260.063] GetProcessHeap () returned 0x800000
	[0260.063] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0260.063] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0260.063] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x22c
	[0260.063] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0
	[0260.064] GetProcessHeap () returned 0x800000
	[0260.064] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0260.064] GetProcessHeap () returned 0x800000
	[0260.064] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0260.064] ReleaseMutex (hMutex=0x22c) returned 1
	[0260.064] CloseHandle (hObject=0x22c) returned 1
	[0260.064] Sleep (dwMilliseconds=0x3e8) 
	[0261.188] GetProcessHeap () returned 0x800000
	[0261.188] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e38
	[0261.188] GetProcessHeap () returned 0x800000
	[0261.188] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e60
	[0261.188] GetProcessHeap () returned 0x800000
	[0261.188] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1f28
	[0261.188] GetProcessHeap () returned 0x800000
	[0261.188] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0261.188] GetProcessHeap () returned 0x800000
	[0261.188] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0261.188] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0261.188] GetProcessHeap () returned 0x800000
	[0261.188] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0261.188] GetProcessHeap () returned 0x800000
	[0261.188] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0261.189] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0261.189] GetProcessHeap () returned 0x800000
	[0261.189] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0261.189] GetProcessHeap () returned 0x800000
	[0261.189] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0261.189] GetProcessHeap () returned 0x800000
	[0261.189] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0261.189] GetProcessHeap () returned 0x800000
	[0261.189] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0261.189] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0261.189] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x22c
	[0261.189] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0
	[0261.189] GetProcessHeap () returned 0x800000
	[0261.189] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0261.189] GetProcessHeap () returned 0x800000
	[0261.189] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0261.189] ReleaseMutex (hMutex=0x22c) returned 1
	[0261.189] CloseHandle (hObject=0x22c) returned 1
	[0261.189] Sleep (dwMilliseconds=0x3e8) 
	[0262.370] GetProcessHeap () returned 0x800000
	[0262.370] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e60
	[0262.370] GetProcessHeap () returned 0x800000
	[0262.370] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e38
	[0262.370] GetProcessHeap () returned 0x800000
	[0262.370] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1f28
	[0262.370] GetProcessHeap () returned 0x800000
	[0262.370] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0262.370] GetProcessHeap () returned 0x800000
	[0262.370] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0262.370] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e38, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0262.370] GetProcessHeap () returned 0x800000
	[0262.370] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0262.370] GetProcessHeap () returned 0x800000
	[0262.370] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0262.370] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0262.370] GetProcessHeap () returned 0x800000
	[0262.370] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0262.370] GetProcessHeap () returned 0x800000
	[0262.370] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0262.370] GetProcessHeap () returned 0x800000
	[0262.370] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0262.371] GetProcessHeap () returned 0x800000
	[0262.371] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0262.371] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0262.371] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x114
	[0262.371] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0x0) returned 0x0
	[0262.371] GetProcessHeap () returned 0x800000
	[0262.371] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0262.371] GetProcessHeap () returned 0x800000
	[0262.371] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0262.371] ReleaseMutex (hMutex=0x114) returned 1
	[0262.371] CloseHandle (hObject=0x114) returned 1
	[0262.371] Sleep (dwMilliseconds=0x3e8) 
	[0263.458] GetProcessHeap () returned 0x800000
	[0263.458] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e38
	[0263.458] GetProcessHeap () returned 0x800000
	[0263.458] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e60
	[0263.458] GetProcessHeap () returned 0x800000
	[0263.458] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1f28
	[0263.458] GetProcessHeap () returned 0x800000
	[0263.458] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0263.458] GetProcessHeap () returned 0x800000
	[0263.458] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0263.458] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0263.458] GetProcessHeap () returned 0x800000
	[0263.458] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0263.458] GetProcessHeap () returned 0x800000
	[0263.458] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0263.458] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0263.458] GetProcessHeap () returned 0x800000
	[0263.458] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0263.458] GetProcessHeap () returned 0x800000
	[0263.458] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0263.458] GetProcessHeap () returned 0x800000
	[0263.458] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0263.458] GetProcessHeap () returned 0x800000
	[0263.458] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0263.458] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0263.458] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x260
	[0263.459] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0x0) returned 0x0
	[0263.459] GetProcessHeap () returned 0x800000
	[0263.459] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0263.459] GetProcessHeap () returned 0x800000
	[0263.459] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0263.459] ReleaseMutex (hMutex=0x260) returned 1
	[0263.459] CloseHandle (hObject=0x260) returned 1
	[0263.459] Sleep (dwMilliseconds=0x3e8) 
	[0264.587] GetProcessHeap () returned 0x800000
	[0264.587] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e60
	[0264.587] GetProcessHeap () returned 0x800000
	[0264.587] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e38
	[0264.587] GetProcessHeap () returned 0x800000
	[0264.587] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1f28
	[0264.587] GetProcessHeap () returned 0x800000
	[0264.587] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0264.587] GetProcessHeap () returned 0x800000
	[0264.587] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0264.587] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e38, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0264.587] GetProcessHeap () returned 0x800000
	[0264.587] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0264.587] GetProcessHeap () returned 0x800000
	[0264.587] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0264.587] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0264.587] GetProcessHeap () returned 0x800000
	[0264.587] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0264.587] GetProcessHeap () returned 0x800000
	[0264.587] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0264.587] GetProcessHeap () returned 0x800000
	[0264.587] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0264.587] GetProcessHeap () returned 0x800000
	[0264.587] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0264.588] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0264.588] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x20c
	[0264.588] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0
	[0264.588] GetProcessHeap () returned 0x800000
	[0264.588] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0264.588] GetProcessHeap () returned 0x800000
	[0264.588] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0264.588] ReleaseMutex (hMutex=0x20c) returned 1
	[0264.588] CloseHandle (hObject=0x20c) returned 1
	[0264.588] Sleep (dwMilliseconds=0x3e8) 
	[0265.937] GetProcessHeap () returned 0x800000
	[0265.937] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x8e1e38
	[0265.937] GetProcessHeap () returned 0x800000
	[0265.937] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x8e1e60
	[0265.937] GetProcessHeap () returned 0x800000
	[0265.937] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x8e1f28
	[0265.937] GetProcessHeap () returned 0x800000
	[0265.937] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f9f8
	[0265.937] GetProcessHeap () returned 0x800000
	[0265.937] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f9f8 | out: hHeap=0x800000) returned 1
	[0265.937] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x8e1e60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0265.937] GetProcessHeap () returned 0x800000
	[0265.937] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1f28 | out: hHeap=0x800000) returned 1
	[0265.938] GetProcessHeap () returned 0x800000
	[0265.938] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e38 | out: hHeap=0x800000) returned 1
	[0265.938] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x239f894, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x239f894*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0265.938] GetProcessHeap () returned 0x800000
	[0265.938] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1e60 | out: hHeap=0x800000) returned 1
	[0265.938] GetProcessHeap () returned 0x800000
	[0265.938] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81da18
	[0265.938] GetProcessHeap () returned 0x800000
	[0265.938] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x3a) returned 0x81d940
	[0265.938] GetProcessHeap () returned 0x800000
	[0265.938] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x81d940, Size=0x72) returned 0x80fd58
	[0265.938] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0265.938] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x20c
	[0265.939] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0x0) returned 0x0
	[0265.939] GetProcessHeap () returned 0x800000
	[0265.939] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81da18 | out: hHeap=0x800000) returned 1
	[0265.939] GetProcessHeap () returned 0x800000
	[0265.939] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x80fd58 | out: hHeap=0x800000) returned 1
	[0265.939] ReleaseMutex (hMutex=0x20c) returned 1
	[0265.939] CloseHandle (hObject=0x20c) returned 1
	[0265.939] Sleep (dwMilliseconds=0x3e8) 

Thread:
	id = 47
	os_tid = 0x268

	[0132.015] GetProcessHeap () returned 0x800000
	[0132.015] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x440) returned 0x821f68
	[0132.015] GetProcessHeap () returned 0x800000
	[0132.015] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x434) returned 0x8223b0
	[0132.016] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xd4
	[0132.018] Process32FirstW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0132.018] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0132.018] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0132.019] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0132.019] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0132.019] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0132.020] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0132.020] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0132.020] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0132.021] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0132.021] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.021] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.021] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.022] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.022] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.022] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0132.023] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.023] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0132.023] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.024] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0132.024] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0132.024] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.024] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0132.025] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0132.025] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0132.025] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0132.026] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0132.026] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0132.026] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0132.026] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0132.027] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.027] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0132.027] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0132.028] Process32NextW (in: hSnapshot=0xd4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0132.028] CloseHandle (hObject=0xd4) returned 1
	[0132.028] Sleep (dwMilliseconds=0x1f4) 
	[0132.576] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xf8
	[0132.577] Process32FirstW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0132.578] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0132.578] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0132.578] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0132.578] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0132.579] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0132.579] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0132.579] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0132.580] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0132.580] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0132.580] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.581] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.581] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.581] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.581] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.582] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0132.582] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.582] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0132.583] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.583] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0132.583] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0132.584] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.584] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0132.584] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0132.585] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0132.585] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0132.585] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0132.586] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0132.586] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0132.586] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0132.586] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0132.587] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0132.587] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0132.587] Process32NextW (in: hSnapshot=0xf8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0132.588] CloseHandle (hObject=0xf8) returned 1
	[0132.588] Sleep (dwMilliseconds=0x1f4) 
	[0133.179] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x198
	[0133.181] Process32FirstW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0133.181] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0133.181] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0133.181] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0133.182] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0133.182] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0133.182] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0133.183] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0133.183] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0133.183] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0133.184] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.184] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.184] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.184] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.185] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.185] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0133.185] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.186] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0133.186] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.186] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0133.187] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0133.187] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.187] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0133.187] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0133.188] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0133.188] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0133.188] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0133.189] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0133.189] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0133.189] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0133.190] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.190] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0133.190] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0133.190] Process32NextW (in: hSnapshot=0x198, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0133.191] CloseHandle (hObject=0x198) returned 1
	[0133.191] Sleep (dwMilliseconds=0x1f4) 
	[0133.840] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b8
	[0133.842] Process32FirstW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0133.842] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0133.842] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0133.843] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0133.843] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0133.843] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0133.844] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0133.844] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0133.844] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0133.845] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0133.845] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.845] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.845] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.846] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.846] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.846] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0133.847] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.847] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0133.847] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.848] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0133.848] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0133.848] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.848] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0133.849] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0133.849] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0133.849] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0133.850] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0133.850] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0133.850] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0133.850] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0133.851] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0133.851] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0133.851] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0133.852] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0133.852] CloseHandle (hObject=0x1b8) returned 1
	[0133.852] Sleep (dwMilliseconds=0x1f4) 
	[0134.412] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f4
	[0134.414] Process32FirstW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0134.414] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0134.415] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0134.415] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0134.415] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0134.416] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0134.416] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0134.416] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0134.417] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0134.417] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0134.417] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0134.418] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0134.418] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0134.418] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0134.418] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0134.419] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0134.419] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0134.419] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0134.420] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0134.420] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0134.420] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0134.421] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0134.421] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0134.421] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0134.421] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0134.422] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0134.422] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0134.422] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0134.423] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0134.423] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0134.423] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0134.424] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0134.424] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0134.424] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0134.424] CloseHandle (hObject=0x1f4) returned 1
	[0134.424] Sleep (dwMilliseconds=0x1f4) 
	[0135.018] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x168
	[0135.020] Process32FirstW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0135.020] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0135.020] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0135.021] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0135.021] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0135.021] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0135.022] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0135.022] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0135.022] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0135.022] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0135.023] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.023] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.023] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.024] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.024] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.024] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0135.025] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.025] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0135.025] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.026] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0135.026] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0135.026] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.027] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0135.027] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0135.027] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0135.027] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0135.028] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0135.028] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0135.028] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0135.029] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0135.029] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.029] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0135.029] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0135.030] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0135.030] CloseHandle (hObject=0x168) returned 1
	[0135.030] Sleep (dwMilliseconds=0x1f4) 
	[0135.635] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1fc
	[0135.637] Process32FirstW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0135.637] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0135.638] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0135.638] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0135.638] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0135.639] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0135.639] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0135.639] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0135.640] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0135.640] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0135.640] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.641] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.641] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.641] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.641] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.642] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0135.642] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.642] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0135.643] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.643] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0135.643] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0135.643] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.644] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0135.644] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0135.644] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0135.645] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0135.645] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0135.645] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0135.645] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0135.646] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0135.646] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0135.646] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0135.647] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0135.647] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0135.647] CloseHandle (hObject=0x1fc) returned 1
	[0135.647] Sleep (dwMilliseconds=0x1f4) 
	[0136.289] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f8
	[0136.290] Process32FirstW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0136.291] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0136.291] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0136.291] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0136.292] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0136.292] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0136.292] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0136.292] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0136.293] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0136.293] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0136.293] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.294] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.294] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.294] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.295] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.295] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0136.295] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.295] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0136.296] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.296] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0136.296] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0136.297] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.297] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0136.297] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0136.298] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0136.298] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0136.298] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0136.299] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0136.299] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0136.299] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0136.299] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.300] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0136.300] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0136.300] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0136.301] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0136.301] CloseHandle (hObject=0x1f8) returned 1
	[0136.301] Sleep (dwMilliseconds=0x1f4) 
	[0136.975] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13c
	[0136.977] Process32FirstW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0136.977] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0136.977] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0136.978] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0136.978] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0136.978] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0136.979] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0136.979] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0136.979] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0136.980] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0136.980] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.980] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.981] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.981] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.981] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.982] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0136.982] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.982] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0136.982] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.983] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0136.983] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0136.983] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.984] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0136.984] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0136.984] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0136.985] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0136.985] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0136.985] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0136.986] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0136.986] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0136.986] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0136.986] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0136.987] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0136.987] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0136.987] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0136.988] CloseHandle (hObject=0x13c) returned 1
	[0136.988] Sleep (dwMilliseconds=0x1f4) 
	[0137.564] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148
	[0137.568] Process32FirstW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0137.568] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0137.569] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0137.569] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0137.569] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0137.570] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0137.570] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0137.570] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0137.570] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0137.571] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0137.571] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0137.571] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0137.572] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0137.572] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0137.572] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0137.573] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0137.573] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0137.573] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0137.574] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0137.574] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0137.574] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0137.574] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0137.575] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0137.575] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0137.575] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0137.576] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0137.576] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0137.576] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0137.577] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0137.577] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0137.577] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0137.578] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0137.578] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0137.578] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0137.578] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0137.579] CloseHandle (hObject=0x148) returned 1
	[0137.579] Sleep (dwMilliseconds=0x1f4) 
	[0138.192] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148
	[0138.193] Process32FirstW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0138.194] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0138.194] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0138.194] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0138.195] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0138.195] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0138.195] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0138.196] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0138.196] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0138.196] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0138.197] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.197] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.197] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.198] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.198] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.198] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0138.199] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.199] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0138.199] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.200] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0138.200] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0138.200] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.200] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0138.201] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0138.201] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0138.201] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0138.202] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0138.202] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0138.202] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0138.203] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.203] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0138.203] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0138.204] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0138.204] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 0
	[0138.204] CloseHandle (hObject=0x148) returned 1
	[0138.204] Sleep (dwMilliseconds=0x1f4) 
	[0138.833] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148
	[0138.834] Process32FirstW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0138.835] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0138.835] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0138.835] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0138.836] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0138.836] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0138.836] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0138.837] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0138.837] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0138.837] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0138.838] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.838] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.838] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.838] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.839] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.839] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0138.839] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.840] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0138.840] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.840] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0138.841] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0138.841] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.841] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0138.842] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0138.842] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0138.842] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0138.843] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0138.843] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0138.843] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0138.843] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0138.844] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0138.844] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0138.844] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0138.845] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0138.845] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0138.845] CloseHandle (hObject=0x148) returned 1
	[0138.845] Sleep (dwMilliseconds=0x1f4) 
	[0139.627] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148
	[0139.629] Process32FirstW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0139.629] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0139.629] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0139.629] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0139.630] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0139.630] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0139.631] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0139.631] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0139.631] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0139.631] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0139.632] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0139.632] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0139.632] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0139.633] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0139.633] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0139.633] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0139.634] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0139.634] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0139.634] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0139.635] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0139.635] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0139.635] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0139.636] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0139.637] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0139.637] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0139.637] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0139.638] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0139.638] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0139.638] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0139.639] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0139.639] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0139.639] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0139.639] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0139.640] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0139.640] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0139.640] CloseHandle (hObject=0x148) returned 1
	[0139.640] Sleep (dwMilliseconds=0x1f4) 
	[0140.272] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148
	[0140.274] Process32FirstW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0140.274] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0140.275] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0140.275] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0140.275] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0140.276] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0140.276] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0140.276] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0140.277] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0140.277] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0140.277] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.278] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.278] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.278] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.279] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.279] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0140.279] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.279] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0140.280] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.280] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0140.280] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0140.281] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.281] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0140.281] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0140.282] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0140.282] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0140.282] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0140.283] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0140.283] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0140.283] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.284] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0140.284] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0140.284] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0140.285] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0140.285] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0140.285] CloseHandle (hObject=0x148) returned 1
	[0140.285] Sleep (dwMilliseconds=0x1f4) 
	[0140.806] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148
	[0140.808] Process32FirstW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0140.810] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0140.810] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0140.811] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0140.811] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0140.812] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0140.812] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0140.812] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0140.813] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0140.813] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0140.813] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.814] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.814] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.815] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.815] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.815] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0140.816] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.816] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0140.816] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.817] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0140.817] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0140.817] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.818] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0140.818] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0140.819] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0140.819] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0140.819] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0140.820] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0140.820] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0140.820] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0140.821] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0140.821] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0140.822] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0140.822] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0140.822] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0140.823] CloseHandle (hObject=0x148) returned 1
	[0140.823] Sleep (dwMilliseconds=0x1f4) 
	[0141.376] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148
	[0141.377] Process32FirstW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0141.378] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0141.378] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0141.378] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0141.379] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0141.379] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0141.379] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0141.380] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0141.380] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0141.380] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0141.381] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.381] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.381] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.382] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.382] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.382] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0141.383] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.383] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0141.383] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.384] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0141.384] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0141.384] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.384] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0141.385] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0141.385] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0141.385] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0141.386] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0141.386] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0141.386] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0141.387] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.387] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0141.387] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0141.387] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0141.388] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0141.388] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0141.388] CloseHandle (hObject=0x148) returned 1
	[0141.388] Sleep (dwMilliseconds=0x1f4) 
	[0141.983] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148
	[0141.984] Process32FirstW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0141.984] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0141.985] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0141.985] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0141.985] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0141.986] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0141.986] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0141.986] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0141.987] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0141.987] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0141.987] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.988] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.988] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.988] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.989] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.989] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0141.989] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.990] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0141.990] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.990] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0141.991] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0141.991] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.991] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0141.991] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0141.992] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0141.992] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0141.992] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0141.993] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0141.993] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0141.993] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0141.994] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0141.994] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0141.994] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0141.995] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0141.995] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0141.995] CloseHandle (hObject=0x148) returned 1
	[0141.995] Sleep (dwMilliseconds=0x1f4) 
	[0142.544] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148
	[0142.546] Process32FirstW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0142.546] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0142.547] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0142.547] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0142.547] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0142.547] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0142.548] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0142.548] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0142.548] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0142.549] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0142.549] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0142.549] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0142.550] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0142.550] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0142.550] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0142.551] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0142.551] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0142.551] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0142.552] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0142.552] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0142.552] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0142.552] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0142.553] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0142.553] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0142.553] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0142.554] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0142.554] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0142.554] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0142.555] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0142.555] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0142.555] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0142.555] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0142.556] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0142.556] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0142.556] CloseHandle (hObject=0x148) returned 1
	[0142.556] Sleep (dwMilliseconds=0x1f4) 
	[0143.655] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f4
	[0143.657] Process32FirstW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0143.657] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0143.658] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0143.658] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0143.658] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0143.659] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0143.659] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0143.659] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0143.659] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0143.660] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0143.660] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0143.660] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0143.661] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0143.661] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0143.661] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0143.662] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0143.662] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0143.662] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0143.663] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0143.663] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0143.663] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0143.663] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0143.664] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0143.664] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0143.664] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0143.665] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0143.665] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0143.665] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0143.665] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0143.666] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0143.666] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0143.666] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0143.667] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0143.667] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0143.667] CloseHandle (hObject=0x1f4) returned 1
	[0143.668] Sleep (dwMilliseconds=0x1f4) 
	[0144.229] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x148
	[0144.230] Process32FirstW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0144.231] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0144.231] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0144.231] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0144.232] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0144.232] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0144.232] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0144.233] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0144.233] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0144.233] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0144.234] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.234] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.234] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.234] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.235] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.235] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0144.235] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.236] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0144.236] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.236] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0144.237] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0144.237] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.237] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0144.237] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0144.238] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0144.238] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0144.238] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0144.239] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0144.239] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.239] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0144.240] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0144.240] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0144.240] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0144.240] Process32NextW (in: hSnapshot=0x148, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0144.241] CloseHandle (hObject=0x148) returned 1
	[0144.241] Sleep (dwMilliseconds=0x1f4) 
	[0144.852] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x168
	[0144.854] Process32FirstW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0144.854] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0144.855] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0144.855] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0144.855] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0144.856] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0144.856] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0144.856] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0144.857] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0144.857] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0144.857] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.858] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.858] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.858] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.859] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.859] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0144.859] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.859] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0144.860] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.860] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0144.860] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0144.861] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.861] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0144.861] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0144.862] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0144.862] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0144.862] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0144.863] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0144.863] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0144.863] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0144.864] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0144.864] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0144.864] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0144.864] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0144.865] CloseHandle (hObject=0x168) returned 1
	[0144.865] Sleep (dwMilliseconds=0x1f4) 
	[0145.463] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0145.465] Process32FirstW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0145.466] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0145.466] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0145.466] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0145.466] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0145.467] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0145.467] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0145.467] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0145.468] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0145.468] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0145.468] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0145.469] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0145.469] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0145.469] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0145.470] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0145.470] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0145.470] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0145.471] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0145.471] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0145.471] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0145.472] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0145.472] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0145.472] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0145.473] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0145.473] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0145.473] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0145.474] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0145.474] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0145.474] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0145.474] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0145.475] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0145.475] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0145.475] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0145.476] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0145.476] CloseHandle (hObject=0x200) returned 1
	[0145.476] Sleep (dwMilliseconds=0x1f4) 
	[0146.148] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0146.149] Process32FirstW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0146.149] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0146.150] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0146.150] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0146.150] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0146.151] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0146.151] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0146.151] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0146.151] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0146.152] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0146.152] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.152] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.153] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.153] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.153] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.154] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0146.154] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.154] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0146.154] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.155] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0146.155] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0146.155] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.156] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0146.156] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0146.156] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0146.157] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0146.157] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0146.157] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0146.157] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.158] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0146.158] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0146.158] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0146.159] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0146.159] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0146.159] CloseHandle (hObject=0x200) returned 1
	[0146.159] Sleep (dwMilliseconds=0x1f4) 
	[0146.790] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x204
	[0146.792] Process32FirstW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0146.792] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0146.793] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0146.793] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0146.793] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0146.794] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0146.794] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0146.794] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0146.795] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0146.795] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0146.795] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.796] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.796] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.796] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.796] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.797] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0146.797] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.797] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0146.798] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.798] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0146.798] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0146.799] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.799] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0146.799] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0146.799] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0146.800] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0146.800] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0146.800] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0146.801] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0146.801] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0146.801] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0146.802] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0146.802] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0146.802] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0146.802] CloseHandle (hObject=0x204) returned 1
	[0146.802] Sleep (dwMilliseconds=0x1f4) 
	[0147.411] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f8
	[0147.413] Process32FirstW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0147.414] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0147.414] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0147.414] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0147.415] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0147.415] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0147.415] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0147.416] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0147.416] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0147.416] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0147.416] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0147.417] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0147.417] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0147.417] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0147.418] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0147.418] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0147.418] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0147.419] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0147.419] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0147.419] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0147.419] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0147.420] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0147.420] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0147.420] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0147.421] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0147.421] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0147.421] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0147.430] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0147.431] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0147.431] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0147.431] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0147.432] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0147.432] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0147.432] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0147.433] CloseHandle (hObject=0x1f8) returned 1
	[0147.433] Sleep (dwMilliseconds=0x1f4) 
	[0148.068] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x204
	[0148.070] Process32FirstW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0148.070] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0148.071] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0148.071] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0148.071] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0148.071] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0148.072] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0148.072] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0148.072] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0148.073] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0148.073] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.073] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.074] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.074] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.074] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.075] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0148.075] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.075] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0148.076] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.076] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0148.076] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0148.077] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.077] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0148.077] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0148.077] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0148.078] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0148.078] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0148.078] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0148.094] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.094] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0148.094] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0148.094] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0148.095] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0148.095] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0148.095] CloseHandle (hObject=0x204) returned 1
	[0148.095] Sleep (dwMilliseconds=0x1f4) 
	[0148.675] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0148.677] Process32FirstW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0148.677] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0148.678] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0148.678] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0148.678] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0148.678] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0148.679] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0148.679] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0148.679] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0148.680] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0148.680] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.680] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.681] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.681] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.681] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.682] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0148.682] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.682] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0148.682] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.683] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0148.683] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0148.683] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.684] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0148.684] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0148.684] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0148.685] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0148.685] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0148.685] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0148.686] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0148.686] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0148.686] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0148.687] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0148.687] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0148.687] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0148.688] CloseHandle (hObject=0x200) returned 1
	[0148.688] Sleep (dwMilliseconds=0x1f4) 
	[0149.295] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x204
	[0149.300] Process32FirstW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0149.300] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0149.300] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0149.301] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0149.301] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0149.301] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0149.302] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0149.302] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0149.302] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0149.303] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0149.303] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.303] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.304] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.304] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.304] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.305] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0149.305] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.305] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0149.306] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.306] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0149.306] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0149.307] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.307] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0149.307] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0149.308] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0149.308] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0149.308] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0149.309] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0149.309] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.309] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0149.310] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0149.310] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0149.310] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0149.311] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0149.311] CloseHandle (hObject=0x204) returned 1
	[0149.311] Sleep (dwMilliseconds=0x1f4) 
	[0149.862] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x204
	[0149.864] Process32FirstW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0149.864] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0149.865] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0149.865] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0149.865] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0149.866] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0149.866] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0149.866] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0149.866] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0149.867] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0149.867] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.867] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.868] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.868] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.868] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.869] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0149.869] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.869] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0149.869] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.870] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0149.870] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0149.870] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.871] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0149.871] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0149.871] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0149.872] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0149.872] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0149.872] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0149.873] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0149.873] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0149.873] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0149.873] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0149.874] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0149.874] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0149.874] CloseHandle (hObject=0x204) returned 1
	[0149.874] Sleep (dwMilliseconds=0x1f4) 
	[0150.453] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x204
	[0150.455] Process32FirstW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0150.456] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0150.456] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0150.456] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0150.456] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0150.457] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0150.457] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0150.457] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0150.458] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0150.458] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0150.458] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0150.459] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0150.459] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0150.459] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0150.459] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0150.460] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0150.460] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0150.460] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0150.461] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0150.461] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0150.461] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0150.462] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0150.462] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0150.462] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0150.463] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0150.463] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0150.463] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0150.463] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0150.464] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0150.464] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0150.464] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0150.465] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0150.465] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0150.465] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0150.466] CloseHandle (hObject=0x204) returned 1
	[0150.466] Sleep (dwMilliseconds=0x1f4) 
	[0151.046] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x140
	[0151.048] Process32FirstW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0151.048] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0151.049] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0151.049] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0151.050] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0151.050] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0151.050] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0151.050] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0151.051] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0151.051] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0151.051] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.052] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.052] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.052] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.053] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.053] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0151.053] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.054] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0151.054] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.054] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0151.055] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0151.055] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.055] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0151.056] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0151.056] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0151.056] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0151.057] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0151.057] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0151.057] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.058] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0151.058] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0151.058] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0151.059] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0151.059] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0151.059] CloseHandle (hObject=0x140) returned 1
	[0151.059] Sleep (dwMilliseconds=0x1f4) 
	[0151.671] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0151.672] Process32FirstW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0151.673] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0151.673] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0151.674] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0151.674] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0151.674] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0151.674] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0151.675] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0151.675] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0151.675] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0151.676] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.676] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.676] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.677] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.677] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.677] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0151.678] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.678] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0151.678] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.678] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0151.679] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0151.679] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.679] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0151.680] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0151.680] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0151.680] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0151.681] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0151.681] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0151.681] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.681] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0151.682] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0151.682] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0151.682] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0151.683] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0151.683] CloseHandle (hObject=0x200) returned 1
	[0151.683] Sleep (dwMilliseconds=0x1f4) 
	[0152.341] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f4
	[0152.342] Process32FirstW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0152.343] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0152.343] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0152.343] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0152.344] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0152.344] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0152.345] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0152.345] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0152.345] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0152.346] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0152.346] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.346] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.346] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.347] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.347] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.347] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0152.348] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.348] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0152.348] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.349] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0152.349] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0152.349] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.350] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0152.350] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0152.350] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0152.351] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0152.351] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0152.351] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0152.352] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.352] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0152.352] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0152.353] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0152.354] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0152.354] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0152.354] CloseHandle (hObject=0x1f4) returned 1
	[0152.354] Sleep (dwMilliseconds=0x1f4) 
	[0152.965] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0152.967] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0152.968] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0152.968] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0152.968] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0152.969] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0152.969] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0152.969] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0152.970] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0152.970] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0152.970] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0152.971] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.971] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.971] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.972] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.972] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.972] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0152.972] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.973] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0152.973] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.973] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0152.974] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0152.974] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.974] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0152.975] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0152.975] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0152.975] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0152.976] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0152.976] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0152.976] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.977] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0152.977] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0152.977] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0152.978] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0152.978] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0152.978] CloseHandle (hObject=0x20c) returned 1
	[0152.978] Sleep (dwMilliseconds=0x1f4) 
	[0153.573] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x218
	[0153.575] Process32FirstW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0153.575] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0153.576] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0153.576] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0153.577] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0153.577] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0153.577] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0153.577] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0153.578] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0153.578] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0153.578] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.579] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.579] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.579] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.580] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.580] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0153.580] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.580] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0153.581] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.581] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0153.581] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0153.582] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.582] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0153.582] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0153.583] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0153.583] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0153.583] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0153.583] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0153.584] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.584] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0153.584] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0153.585] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0153.585] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0153.585] Process32NextW (in: hSnapshot=0x218, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0153.586] CloseHandle (hObject=0x218) returned 1
	[0153.586] Sleep (dwMilliseconds=0x1f4) 
	[0154.198] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x214
	[0154.200] Process32FirstW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0154.200] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0154.201] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0154.201] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0154.201] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0154.202] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0154.202] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0154.202] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0154.203] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0154.203] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0154.203] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.203] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.204] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.204] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.204] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.205] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0154.205] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.205] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0154.206] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.206] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0154.206] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0154.207] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.207] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0154.207] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0154.208] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0154.208] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0154.208] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0154.208] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0154.209] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.209] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0154.209] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0154.210] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0154.210] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0154.210] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0154.211] CloseHandle (hObject=0x214) returned 1
	[0154.211] Sleep (dwMilliseconds=0x1f4) 
	[0154.838] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x214
	[0154.840] Process32FirstW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0154.840] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0154.840] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0154.841] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0154.841] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0154.841] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0154.842] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0154.842] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0154.842] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0154.843] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0154.843] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.843] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.843] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.844] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.844] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.844] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0154.845] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.845] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0154.845] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.846] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0154.846] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0154.846] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.847] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0154.847] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0154.847] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0154.848] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0154.848] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0154.848] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0154.848] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.849] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0154.849] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0154.850] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0154.850] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0154.850] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0154.850] CloseHandle (hObject=0x214) returned 1
	[0154.850] Sleep (dwMilliseconds=0x1f4) 
	[0155.430] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0155.431] Process32FirstW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0155.432] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0155.432] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0155.432] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0155.432] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0155.433] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0155.433] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0155.434] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0155.434] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0155.434] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0155.434] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.435] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.435] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.435] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.436] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.436] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0155.436] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.437] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0155.437] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.437] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0155.438] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0155.438] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.438] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0155.439] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0155.439] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0155.439] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0155.439] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0155.440] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0155.440] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.440] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0155.441] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0155.441] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0155.441] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0155.442] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0155.442] CloseHandle (hObject=0x200) returned 1
	[0155.442] Sleep (dwMilliseconds=0x1f4) 
	[0156.024] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x208
	[0156.026] Process32FirstW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0156.026] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0156.026] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0156.027] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0156.027] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0156.028] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0156.028] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0156.028] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0156.028] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0156.029] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0156.029] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.029] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.030] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.030] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.030] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.031] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0156.031] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.031] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0156.032] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.032] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0156.032] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0156.033] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.033] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0156.033] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0156.033] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0156.034] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0156.034] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0156.034] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0156.035] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.035] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0156.035] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0156.036] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0156.036] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0156.036] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0156.036] CloseHandle (hObject=0x208) returned 1
	[0156.036] Sleep (dwMilliseconds=0x1f4) 
	[0156.609] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x168
	[0156.611] Process32FirstW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0156.611] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0156.612] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0156.612] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0156.612] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0156.613] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0156.613] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0156.613] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0156.614] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0156.614] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0156.614] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.615] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.615] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.616] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.616] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.616] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0156.617] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.617] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0156.618] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.618] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0156.618] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0156.619] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.619] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0156.619] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0156.620] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0156.620] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0156.621] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0156.621] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0156.621] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.622] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0156.622] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0156.622] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0156.623] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0156.623] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0156.624] CloseHandle (hObject=0x168) returned 1
	[0156.624] Sleep (dwMilliseconds=0x1f4) 
	[0157.241] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f8
	[0157.243] Process32FirstW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0157.243] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0157.243] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0157.244] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0157.244] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0157.244] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0157.244] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0157.245] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0157.245] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0157.245] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0157.246] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.246] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.246] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.247] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.247] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.247] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0157.248] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.248] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0157.248] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.249] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0157.249] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0157.249] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.249] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0157.250] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0157.250] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0157.250] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0157.251] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0157.251] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0157.251] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.252] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0157.252] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0157.252] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0157.252] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0157.253] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0157.253] CloseHandle (hObject=0x1f8) returned 1
	[0157.253] Sleep (dwMilliseconds=0x1f4) 
	[0157.863] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x168
	[0157.866] Process32FirstW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0157.867] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0157.867] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0157.867] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0157.868] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0157.868] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0157.868] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0157.869] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0157.869] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0157.869] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0157.870] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.870] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.870] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.871] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.871] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.871] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0157.872] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.872] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0157.872] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.872] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0157.873] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0157.873] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.873] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0157.874] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0157.874] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0157.874] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0157.875] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0157.875] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0157.875] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.876] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0157.876] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0157.876] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0157.877] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0157.877] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0157.877] CloseHandle (hObject=0x168) returned 1
	[0157.878] Sleep (dwMilliseconds=0x1f4) 
	[0158.489] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x168
	[0158.491] Process32FirstW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0158.492] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0158.492] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0158.492] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0158.493] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0158.493] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0158.493] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0158.494] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0158.494] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0158.494] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0158.495] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.495] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.495] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.495] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.496] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.496] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0158.496] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.497] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0158.497] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.497] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0158.498] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0158.498] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.498] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0158.499] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0158.499] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0158.499] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0158.500] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0158.500] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0158.500] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.500] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0158.501] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0158.501] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0158.501] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0158.502] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0158.502] CloseHandle (hObject=0x168) returned 1
	[0158.502] Sleep (dwMilliseconds=0x1f4) 
	[0159.015] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b8
	[0159.017] Process32FirstW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0159.017] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0159.018] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0159.018] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0159.019] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0159.019] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0159.019] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0159.020] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0159.020] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0159.020] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0159.021] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.021] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.022] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.022] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.022] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.023] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0159.023] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.023] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0159.024] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.024] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0159.025] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0159.025] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.025] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0159.026] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0159.026] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0159.026] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0159.027] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0159.027] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0159.028] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.028] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0159.028] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0159.029] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0159.029] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0159.029] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0159.030] CloseHandle (hObject=0x1b8) returned 1
	[0159.030] Sleep (dwMilliseconds=0x1f4) 
	[0159.645] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f4
	[0159.646] Process32FirstW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0159.647] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0159.647] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0159.647] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0159.648] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0159.648] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0159.648] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0159.649] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0159.649] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0159.649] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0159.650] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.650] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.650] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.651] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.651] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.651] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0159.652] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.652] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0159.652] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.653] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0159.653] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0159.653] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.654] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0159.654] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0159.654] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0159.655] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0159.655] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0159.655] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0159.656] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.656] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0159.656] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0159.656] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0159.657] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0159.657] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0159.657] CloseHandle (hObject=0x1f4) returned 1
	[0159.657] Sleep (dwMilliseconds=0x1f4) 
	[0160.427] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x140
	[0160.429] Process32FirstW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0160.430] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0160.430] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0160.430] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0160.431] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0160.431] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0160.431] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0160.432] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0160.432] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0160.432] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0160.433] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.433] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.433] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.434] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.434] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.434] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0160.435] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.435] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0160.435] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.436] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0160.436] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0160.436] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.437] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0160.437] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0160.437] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0160.438] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0160.438] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0160.438] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0160.439] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.439] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0160.439] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0160.440] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0160.440] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0160.440] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0160.441] CloseHandle (hObject=0x140) returned 1
	[0160.441] Sleep (dwMilliseconds=0x1f4) 
	[0161.075] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x140
	[0161.077] Process32FirstW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0161.077] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0161.077] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0161.078] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0161.078] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0161.078] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0161.079] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0161.079] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0161.079] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0161.080] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0161.080] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.080] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.081] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.081] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.081] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.082] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0161.082] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.082] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0161.083] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.083] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0161.083] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0161.084] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.084] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0161.084] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0161.085] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0161.085] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0161.085] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0161.086] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0161.086] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.086] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0161.087] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0161.087] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0161.087] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0161.087] Process32NextW (in: hSnapshot=0x140, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0161.088] CloseHandle (hObject=0x140) returned 1
	[0161.088] Sleep (dwMilliseconds=0x1f4) 
	[0161.705] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f8
	[0161.706] Process32FirstW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0161.707] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0161.707] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0161.707] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0161.708] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0161.708] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0161.708] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0161.709] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0161.709] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0161.709] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0161.710] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.710] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.710] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.711] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.711] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.711] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0161.711] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.712] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0161.712] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.712] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0161.713] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0161.713] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.713] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0161.714] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0161.714] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0161.714] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0161.715] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0161.715] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0161.715] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.716] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0161.716] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0161.716] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0161.717] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0161.717] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0161.717] CloseHandle (hObject=0x1f8) returned 1
	[0161.717] Sleep (dwMilliseconds=0x1f4) 
	[0162.341] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f4
	[0162.342] Process32FirstW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0162.342] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0162.343] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0162.343] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0162.343] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0162.344] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0162.344] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0162.344] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0162.345] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0162.345] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0162.345] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.346] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.346] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.346] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.347] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.347] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0162.347] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.347] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0162.348] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.348] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0162.348] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0162.349] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.349] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0162.349] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0162.350] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0162.350] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0162.350] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0162.351] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0162.351] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.351] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0162.352] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0162.352] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0162.352] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0162.352] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0162.353] CloseHandle (hObject=0x1f4) returned 1
	[0162.353] Sleep (dwMilliseconds=0x1f4) 
	[0162.964] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f4
	[0162.966] Process32FirstW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0162.966] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0162.967] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0162.967] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0162.967] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0162.968] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0162.968] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0162.968] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0162.968] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0162.969] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0162.969] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.969] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.970] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.970] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.970] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.971] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0162.971] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.971] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0162.971] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.972] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0162.972] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0162.972] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.973] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0162.973] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0162.973] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0162.973] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0162.974] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0162.974] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0162.974] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.975] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0162.975] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0162.975] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0162.975] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0162.976] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0162.976] CloseHandle (hObject=0x1f4) returned 1
	[0162.976] Sleep (dwMilliseconds=0x1f4) 
	[0163.590] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f4
	[0163.592] Process32FirstW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0163.592] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0163.592] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0163.593] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0163.593] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0163.593] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0163.594] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0163.594] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0163.594] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0163.594] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0163.595] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.595] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.595] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.596] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.596] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.596] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0163.597] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.597] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0163.597] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.598] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0163.598] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0163.598] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.599] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0163.599] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0163.599] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0163.600] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0163.600] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0163.600] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0163.601] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.601] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0163.601] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0163.601] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0163.602] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0163.602] Process32NextW (in: hSnapshot=0x1f4, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0163.602] CloseHandle (hObject=0x1f4) returned 1
	[0163.602] Sleep (dwMilliseconds=0x1f4) 
	[0164.199] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x168
	[0164.201] Process32FirstW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0164.201] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0164.202] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0164.202] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0164.202] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0164.203] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0164.203] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0164.203] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0164.203] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0164.204] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0164.204] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.204] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.205] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.205] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.205] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.206] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0164.206] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.206] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0164.207] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.207] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0164.207] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0164.208] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.208] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0164.208] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0164.208] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0164.209] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0164.209] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0164.209] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0164.210] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.210] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0164.210] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0164.211] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0164.211] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0164.211] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0164.211] CloseHandle (hObject=0x168) returned 1
	[0164.212] Sleep (dwMilliseconds=0x1f4) 
	[0164.897] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0164.959] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0164.960] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0164.961] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0164.961] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0164.961] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0164.962] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0164.962] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0164.962] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0164.963] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0164.963] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0164.963] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.964] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.964] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.964] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.965] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.965] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0164.965] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.966] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0164.966] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.966] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0164.967] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0164.967] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.967] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0164.968] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0164.968] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0164.968] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0164.969] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0164.969] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0164.969] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.970] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0164.970] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0164.970] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0164.971] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0164.971] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0164.971] CloseHandle (hObject=0x20c) returned 1
	[0164.971] Sleep (dwMilliseconds=0x1f4) 
	[0165.601] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0165.602] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0165.603] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0165.603] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0165.603] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0165.604] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0165.604] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0165.604] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0165.605] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0165.605] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0165.605] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0165.606] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.606] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.606] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.607] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.607] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.607] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0165.608] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.608] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0165.608] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.609] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0165.609] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0165.609] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.610] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0165.610] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0165.610] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0165.610] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0165.611] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0165.611] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0165.612] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.612] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0165.612] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0165.612] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0165.613] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0165.613] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0165.613] CloseHandle (hObject=0x20c) returned 1
	[0165.614] Sleep (dwMilliseconds=0x1f4) 
	[0166.300] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0166.301] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0166.301] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0166.302] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0166.302] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0166.302] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0166.303] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0166.303] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0166.303] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0166.304] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0166.304] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0166.304] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.305] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.305] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.305] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.306] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.306] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0166.306] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.307] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0166.307] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.307] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0166.308] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0166.308] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.308] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0166.309] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0166.309] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0166.309] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0166.309] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0166.310] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0166.310] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.310] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0166.311] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0166.311] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0166.311] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0166.312] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0166.312] CloseHandle (hObject=0x20c) returned 1
	[0166.312] Sleep (dwMilliseconds=0x1f4) 
	[0166.947] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x168
	[0166.948] Process32FirstW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0166.949] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0166.949] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0166.949] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0166.949] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0166.950] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0166.950] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0166.950] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0166.951] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0166.951] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0166.951] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.952] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.952] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.952] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.953] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.953] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0166.953] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.953] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0166.954] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.954] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0166.954] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0166.955] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.955] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0166.955] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0166.956] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0166.956] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0166.956] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0166.957] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0166.957] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.957] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0166.958] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0166.958] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0166.958] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0166.958] CloseHandle (hObject=0x168) returned 1
	[0166.958] Sleep (dwMilliseconds=0x1f4) 
	[0167.602] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0167.631] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0167.631] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0167.631] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0167.632] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0167.632] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0167.635] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0167.635] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0167.636] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0167.636] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0167.636] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0167.637] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.637] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.637] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.637] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.638] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.638] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0167.639] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.639] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0167.639] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.640] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0167.640] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0167.640] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.640] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0167.641] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0167.641] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0167.642] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0167.642] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0167.642] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0167.643] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.643] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0167.643] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0167.643] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0167.644] CloseHandle (hObject=0x20c) returned 1
	[0167.644] Sleep (dwMilliseconds=0x1f4) 
	[0168.237] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0168.240] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0168.240] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0168.240] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0168.241] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0168.241] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0168.242] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0168.242] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0168.242] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0168.242] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0168.243] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0168.243] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.243] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.244] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.244] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.244] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.245] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0168.245] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.245] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0168.245] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.246] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0168.246] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0168.246] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.247] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0168.247] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0168.247] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0168.248] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0168.248] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0168.248] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0168.249] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.249] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0168.249] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0168.250] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0168.250] CloseHandle (hObject=0x20c) returned 1
	[0168.250] Sleep (dwMilliseconds=0x1f4) 
	[0168.848] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13c
	[0168.849] Process32FirstW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0168.850] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0168.850] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0168.850] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0168.851] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0168.851] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0168.851] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0168.852] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0168.852] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0168.852] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0168.853] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.853] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.853] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.854] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.854] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.854] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0168.854] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.855] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0168.855] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.855] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0168.856] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0168.856] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.856] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0168.857] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0168.857] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0168.857] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0168.858] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0168.858] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0168.858] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.859] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0168.859] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0168.859] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0168.860] CloseHandle (hObject=0x13c) returned 1
	[0168.860] Sleep (dwMilliseconds=0x1f4) 
	[0169.423] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0169.424] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0169.425] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0169.425] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0169.425] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0169.426] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0169.431] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0169.431] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0169.432] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0169.432] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0169.432] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0169.433] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.433] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.433] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.433] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.434] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.434] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0169.434] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.435] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0169.435] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.435] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0169.436] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0169.436] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.436] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0169.437] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0169.437] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0169.437] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0169.438] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0169.438] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0169.438] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.438] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0169.439] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0169.439] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0169.439] CloseHandle (hObject=0x20c) returned 1
	[0169.440] Sleep (dwMilliseconds=0x1f4) 
	[0170.144] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13c
	[0170.148] Process32FirstW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0170.148] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0170.148] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0170.149] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0170.149] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0170.149] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0170.150] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0170.150] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0170.160] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0170.160] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0170.161] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.161] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.161] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.162] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.162] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.162] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0170.163] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.163] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0170.163] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.164] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0170.164] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0170.164] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.165] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0170.165] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0170.165] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0170.166] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0170.166] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0170.166] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0170.167] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.167] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0170.167] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0170.168] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0170.168] CloseHandle (hObject=0x13c) returned 1
	[0170.168] Sleep (dwMilliseconds=0x1f4) 
	[0170.721] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0170.722] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0170.723] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0170.723] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0170.723] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0170.723] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0170.724] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0170.724] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0170.724] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0170.725] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0170.725] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0170.726] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.726] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.726] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.727] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.727] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.727] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0170.728] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.728] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0170.728] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.729] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0170.729] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0170.729] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.730] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0170.730] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0170.730] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0170.731] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0170.731] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0170.731] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0170.732] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.732] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0170.732] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0170.732] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0170.733] CloseHandle (hObject=0x20c) returned 1
	[0170.733] Sleep (dwMilliseconds=0x1f4) 
	[0171.289] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x208
	[0171.300] Process32FirstW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0171.300] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0171.301] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0171.301] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0171.301] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0171.302] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0171.302] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0171.302] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0171.303] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0171.303] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0171.303] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.304] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.304] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.304] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.305] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.305] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0171.305] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.306] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0171.306] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.306] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0171.307] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0171.307] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.307] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0171.308] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0171.308] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0171.308] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0171.309] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0171.309] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0171.309] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.310] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0171.310] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0171.310] Process32NextW (in: hSnapshot=0x208, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0171.311] CloseHandle (hObject=0x208) returned 1
	[0171.311] Sleep (dwMilliseconds=0x1f4) 
	[0171.955] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x13c
	[0171.956] Process32FirstW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0171.956] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0171.957] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0171.957] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0171.957] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0171.958] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0171.958] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0171.958] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0171.959] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0171.959] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0171.959] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.960] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.960] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.960] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.961] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.961] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0171.961] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.962] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0171.962] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.962] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0171.963] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0171.963] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.963] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0171.963] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0171.964] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0171.964] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0171.964] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0171.965] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0171.965] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.965] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0171.966] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0171.966] Process32NextW (in: hSnapshot=0x13c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0171.966] CloseHandle (hObject=0x13c) returned 1
	[0171.966] Sleep (dwMilliseconds=0x1f4) 
	[0172.575] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0172.577] Process32FirstW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0172.577] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0172.577] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0172.578] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0172.578] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0172.578] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0172.579] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0172.579] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0172.579] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0172.580] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0172.580] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.580] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.580] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.581] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.581] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.581] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0172.582] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.582] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0172.582] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.583] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0172.583] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0172.583] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.584] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0172.584] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0172.584] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0172.585] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0172.585] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0172.585] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0172.586] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.586] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0172.586] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0172.587] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0172.587] CloseHandle (hObject=0x200) returned 1
	[0172.587] Sleep (dwMilliseconds=0x1f4) 
	[0173.179] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x214
	[0173.180] Process32FirstW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0173.181] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0173.181] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0173.181] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0173.182] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0173.182] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0173.182] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0173.183] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0173.183] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0173.183] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0173.184] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.184] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.184] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.185] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.185] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.185] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0173.186] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.186] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0173.186] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.186] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0173.187] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0173.187] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.187] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0173.188] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0173.188] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0173.188] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0173.189] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0173.189] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0173.189] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.190] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0173.190] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0173.190] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0173.191] CloseHandle (hObject=0x214) returned 1
	[0173.191] Sleep (dwMilliseconds=0x1f4) 
	[0173.860] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x210
	[0174.208] Process32FirstW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0174.208] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0174.209] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0174.209] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0174.209] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0174.210] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0174.210] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0174.210] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0174.211] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0174.211] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0174.211] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.212] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.212] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.212] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.212] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.213] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0174.213] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.213] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0174.214] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.214] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0174.214] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0174.215] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.215] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0174.215] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0174.216] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0174.216] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0174.216] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0174.217] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0174.217] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.217] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0174.218] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0174.218] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0174.218] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0174.219] CloseHandle (hObject=0x210) returned 1
	[0174.219] Sleep (dwMilliseconds=0x1f4) 
	[0174.804] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x228
	[0174.806] Process32FirstW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0174.806] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0174.807] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0174.807] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0174.807] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0174.808] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0174.808] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0174.808] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0174.809] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0174.809] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0174.809] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.810] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.810] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.810] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.810] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.811] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0174.811] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.811] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0174.812] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.812] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0174.812] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0174.813] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.813] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0174.813] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0174.814] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0174.814] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0174.814] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0174.814] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0174.815] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.815] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0174.815] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0174.816] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0174.816] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0174.816] CloseHandle (hObject=0x228) returned 1
	[0174.816] Sleep (dwMilliseconds=0x1f4) 
	[0175.429] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x238
	[0175.431] Process32FirstW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0175.431] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0175.431] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0175.432] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0175.432] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0175.432] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0175.433] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0175.433] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0175.433] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0175.434] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0175.434] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.434] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.434] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.435] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.435] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.435] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0175.436] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.436] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0175.436] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.437] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0175.437] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0175.437] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.437] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0175.438] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0175.438] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0175.438] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0175.439] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0175.439] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0175.439] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.440] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0175.440] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0175.440] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0175.440] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0175.441] CloseHandle (hObject=0x238) returned 1
	[0175.441] Sleep (dwMilliseconds=0x1f4) 
	[0176.131] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0176.133] Process32FirstW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0176.133] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0176.133] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0176.134] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0176.134] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0176.134] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0176.135] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0176.135] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0176.135] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0176.136] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0176.136] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.136] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.137] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.137] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.137] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.137] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0176.138] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.138] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0176.138] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.139] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0176.139] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0176.139] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.140] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0176.140] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0176.140] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0176.141] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0176.141] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0176.141] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0176.142] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.142] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0176.142] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0176.143] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0176.143] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0176.143] CloseHandle (hObject=0x230) returned 1
	[0176.143] Sleep (dwMilliseconds=0x1f4) 
	[0176.775] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x168
	[0176.776] Process32FirstW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0176.776] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0176.777] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0176.777] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0176.777] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0176.778] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0176.778] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0176.778] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0176.779] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0176.779] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0176.779] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.780] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.780] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.780] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.781] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.781] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0176.781] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.782] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0176.782] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.782] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0176.782] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0176.783] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.783] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0176.783] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0176.784] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0176.784] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0176.784] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0176.785] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0176.785] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.785] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0176.786] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0176.786] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0176.786] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0176.787] CloseHandle (hObject=0x168) returned 1
	[0176.787] Sleep (dwMilliseconds=0x1f4) 
	[0178.399] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x228
	[0178.400] Process32FirstW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0178.401] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0178.401] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0178.401] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0178.402] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0178.402] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0178.402] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0178.403] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0178.403] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0178.404] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0178.404] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.404] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.405] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.405] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.406] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.406] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0178.406] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.407] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0178.407] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.408] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0178.408] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0178.408] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.409] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0178.409] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0178.412] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0178.412] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0178.413] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0178.413] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0178.414] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.414] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0178.414] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0178.415] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0178.415] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0178.415] CloseHandle (hObject=0x228) returned 1
	[0178.416] Sleep (dwMilliseconds=0x1f4) 
	[0179.146] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0179.147] Process32FirstW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0179.148] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0179.148] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0179.148] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0179.149] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0179.149] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0179.150] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0179.150] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0179.150] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0179.150] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0179.151] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.151] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.151] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.152] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.152] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.152] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0179.153] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.153] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0179.153] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.154] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0179.154] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0179.154] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.155] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0179.155] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0179.155] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0179.156] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0179.156] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0179.156] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0179.157] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.157] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0179.157] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0179.158] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0179.158] CloseHandle (hObject=0x200) returned 1
	[0179.158] Sleep (dwMilliseconds=0x1f4) 
	[0179.970] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x228
	[0179.971] Process32FirstW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0179.971] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0179.972] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0179.972] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0179.972] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0179.973] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0179.973] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0179.976] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0179.976] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0179.976] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0179.977] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.977] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.977] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.978] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.978] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.978] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0179.979] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.979] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0179.979] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.980] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0179.980] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0179.980] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.981] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0179.981] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0179.981] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0179.982] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0179.982] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0179.982] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0179.983] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.983] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0179.983] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0179.983] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0179.984] CloseHandle (hObject=0x228) returned 1
	[0179.984] Sleep (dwMilliseconds=0x1f4) 
	[0180.730] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x210
	[0180.732] Process32FirstW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0180.732] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0180.733] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0180.733] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0180.733] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0180.734] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0180.734] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0180.734] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0180.734] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0180.735] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0180.735] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.735] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.736] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.736] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.736] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.737] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0180.737] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.737] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0180.738] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.738] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0180.738] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0180.739] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.739] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0180.739] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0180.740] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0180.740] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0180.740] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0180.741] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0180.741] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.741] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0180.742] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0180.742] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0180.742] CloseHandle (hObject=0x210) returned 1
	[0180.742] Sleep (dwMilliseconds=0x1f4) 
	[0181.344] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1fc
	[0181.345] Process32FirstW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0181.345] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0181.346] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0181.346] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0181.346] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0181.347] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0181.347] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0181.347] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0181.348] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0181.348] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0181.348] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.349] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.349] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.349] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.350] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.350] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0181.350] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.351] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0181.351] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.351] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0181.352] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0181.352] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.352] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0181.352] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0181.353] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0181.353] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0181.353] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0181.354] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0181.354] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.354] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0181.355] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0181.355] Process32NextW (in: hSnapshot=0x1fc, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0181.355] CloseHandle (hObject=0x1fc) returned 1
	[0181.355] Sleep (dwMilliseconds=0x1f4) 
	[0181.943] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0181.945] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0181.945] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0181.945] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0181.946] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0181.946] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0181.946] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0181.947] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0181.947] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0181.947] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0181.948] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0181.948] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.948] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.949] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.949] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.949] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.949] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0181.950] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.950] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0181.951] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.951] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0181.951] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0181.951] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.952] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0181.952] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0181.952] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0181.953] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0181.953] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0181.953] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0181.954] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.954] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0181.954] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0181.955] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0181.955] CloseHandle (hObject=0x20c) returned 1
	[0181.955] Sleep (dwMilliseconds=0x1f4) 
	[0182.581] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x210
	[0182.582] Process32FirstW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0182.583] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0182.583] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0182.583] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0182.584] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0182.584] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0182.584] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0182.585] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0182.585] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0182.585] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0182.586] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.586] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.586] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.587] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.587] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.587] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0182.588] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.588] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0182.588] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.589] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0182.589] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0182.589] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.590] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0182.590] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0182.590] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0182.591] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0182.591] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0182.591] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0182.591] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.592] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0182.592] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0182.592] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0182.593] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0182.593] CloseHandle (hObject=0x210) returned 1
	[0182.593] Sleep (dwMilliseconds=0x1f4) 
	[0183.297] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144
	[0183.299] Process32FirstW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0183.300] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0183.300] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0183.300] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0183.301] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0183.301] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0183.301] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0183.302] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0183.302] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0183.302] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0183.303] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.303] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.303] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.304] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.304] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.304] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0183.305] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.305] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0183.305] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.306] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0183.306] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0183.306] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.307] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0183.316] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0183.317] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0183.317] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0183.317] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0183.318] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0183.318] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.318] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0183.319] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0183.319] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0183.319] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0183.319] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0183.320] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0183.320] CloseHandle (hObject=0x144) returned 1
	[0183.320] Sleep (dwMilliseconds=0x1f4) 
	[0183.947] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144
	[0183.948] Process32FirstW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0183.949] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0183.949] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0183.949] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0183.950] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0183.950] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0183.950] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0183.951] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0183.951] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0183.951] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0183.952] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.952] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.952] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.953] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.953] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.953] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0183.954] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.954] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0183.954] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.954] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0183.955] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0183.955] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.955] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0183.956] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0183.956] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0183.956] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0183.957] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0183.957] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0183.957] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.958] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0183.958] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0183.958] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0183.959] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0183.959] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0183.959] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0183.959] CloseHandle (hObject=0x144) returned 1
	[0183.959] Sleep (dwMilliseconds=0x1f4) 
	[0184.672] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144
	[0184.673] Process32FirstW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0184.674] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0184.674] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0184.674] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0184.675] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0184.675] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0184.675] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0184.676] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0184.676] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0184.676] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0184.677] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.677] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.677] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.678] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.678] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.678] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0184.679] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.679] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0184.679] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.680] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0184.680] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0184.680] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.681] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0184.681] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0184.681] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0184.682] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0184.682] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0184.682] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0184.683] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.683] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0184.683] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0184.684] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0184.684] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0184.684] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0184.684] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0184.685] CloseHandle (hObject=0x144) returned 1
	[0184.685] Sleep (dwMilliseconds=0x1f4) 
	[0185.363] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x214
	[0185.368] Process32FirstW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0185.368] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0185.369] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0185.369] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0185.370] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0185.370] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0185.370] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0185.371] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0185.371] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0185.371] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0185.372] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.372] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.373] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.373] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.373] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.374] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0185.374] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.375] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0185.375] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.375] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0185.376] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0185.376] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.376] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0185.377] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0185.377] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0185.378] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0185.378] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0185.378] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0185.379] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.379] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0185.379] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0185.380] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0185.380] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0185.380] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0185.381] Process32NextW (in: hSnapshot=0x214, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0185.381] CloseHandle (hObject=0x214) returned 1
	[0185.381] Sleep (dwMilliseconds=0x1f4) 
	[0186.047] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0186.048] Process32FirstW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0186.049] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0186.049] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0186.049] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0186.050] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0186.050] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0186.050] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0186.051] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0186.051] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0186.051] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0186.054] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.054] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.054] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.055] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.055] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.055] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0186.056] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.056] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0186.056] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.057] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0186.057] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0186.057] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.057] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0186.058] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0186.058] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0186.058] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0186.059] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0186.059] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0186.059] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.060] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0186.060] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0186.060] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0186.061] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0186.061] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0186.061] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0186.062] CloseHandle (hObject=0x200) returned 1
	[0186.062] Sleep (dwMilliseconds=0x1f4) 
	[0186.728] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x210
	[0186.730] Process32FirstW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0186.730] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0186.731] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0186.731] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0186.731] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0186.732] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0186.732] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0186.732] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0186.733] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0186.733] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0186.733] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.734] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.734] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.734] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.735] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.735] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0186.735] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.736] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0186.736] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.736] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0186.737] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0186.737] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.737] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0186.738] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0186.738] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0186.738] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0186.738] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0186.739] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0186.739] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0186.740] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0186.740] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0186.740] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0186.741] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0186.741] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0186.741] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0186.741] CloseHandle (hObject=0x210) returned 1
	[0186.742] Sleep (dwMilliseconds=0x1f4) 
	[0187.504] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x238
	[0187.506] Process32FirstW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0187.506] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0187.506] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0187.507] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0187.507] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0187.507] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0187.508] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0187.508] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0187.508] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0187.509] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0187.509] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.509] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.509] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.510] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.510] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.510] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0187.511] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.511] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0187.511] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.512] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0187.512] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0187.512] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.513] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0187.513] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0187.513] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0187.513] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0187.514] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0187.514] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0187.514] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0187.515] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0187.515] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0187.515] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0187.516] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0187.516] CloseHandle (hObject=0x238) returned 1
	[0187.516] Sleep (dwMilliseconds=0x1f4) 
	[0188.127] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x200
	[0188.129] Process32FirstW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0188.129] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0188.130] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0188.130] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0188.130] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0188.130] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0188.131] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0188.131] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0188.131] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0188.132] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0188.132] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.132] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.133] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.133] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.133] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.134] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0188.134] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.134] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0188.134] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.135] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0188.135] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0188.135] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.136] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0188.136] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0188.136] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0188.137] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0188.137] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0188.137] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.138] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0188.138] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0188.138] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0188.139] Process32NextW (in: hSnapshot=0x200, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0188.139] CloseHandle (hObject=0x200) returned 1
	[0188.139] Sleep (dwMilliseconds=0x1f4) 
	[0188.750] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x238
	[0188.752] Process32FirstW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0188.752] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0188.752] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0188.752] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0188.753] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0188.753] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0188.753] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0188.754] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0188.754] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0188.754] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0188.755] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.755] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.755] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.756] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.756] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.756] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0188.757] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.757] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0188.757] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.757] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0188.758] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0188.758] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.758] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0188.759] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0188.759] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0188.759] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0188.760] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0188.760] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0188.760] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0188.761] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0188.761] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0188.761] Process32NextW (in: hSnapshot=0x238, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0188.762] CloseHandle (hObject=0x238) returned 1
	[0188.762] Sleep (dwMilliseconds=0x1f4) 
	[0189.407] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x228
	[0189.408] Process32FirstW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0189.409] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0189.409] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0189.409] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0189.409] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0189.410] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0189.410] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0189.410] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0189.411] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0189.411] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0189.411] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.411] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.412] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.412] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.412] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.413] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0189.413] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.413] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0189.413] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.414] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0189.414] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0189.414] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.414] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0189.415] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0189.415] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0189.415] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0189.416] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0189.416] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0189.416] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0189.416] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0189.417] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0189.417] CloseHandle (hObject=0x228) returned 1
	[0189.417] Sleep (dwMilliseconds=0x1f4) 
	[0190.047] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x23c
	[0190.048] Process32FirstW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0190.048] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0190.049] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0190.049] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0190.049] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0190.049] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0190.050] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0190.050] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0190.050] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0190.050] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0190.051] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.051] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.051] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.051] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.052] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.052] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0190.052] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.053] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0190.053] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.053] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0190.053] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0190.054] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.054] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0190.054] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0190.054] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0190.055] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0190.055] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0190.055] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.055] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0190.056] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0190.056] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0190.056] CloseHandle (hObject=0x23c) returned 1
	[0190.056] Sleep (dwMilliseconds=0x1f4) 
	[0190.686] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0190.687] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0190.687] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0190.688] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0190.688] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0190.688] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0190.689] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0190.689] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0190.689] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0190.689] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0190.690] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0190.690] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.690] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.691] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.691] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.691] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.691] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0190.692] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.692] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0190.692] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.692] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0190.693] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0190.693] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.693] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0190.694] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0190.694] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0190.694] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0190.694] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0190.697] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0190.697] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0190.698] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0190.698] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0190.698] CloseHandle (hObject=0x20c) returned 1
	[0190.698] Sleep (dwMilliseconds=0x1f4) 
	[0191.398] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0191.399] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0191.399] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0191.400] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0191.400] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0191.400] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0191.401] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0191.401] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0191.401] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0191.401] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0191.402] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0191.402] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.402] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.402] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.403] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.403] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.403] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0191.404] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.404] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0191.404] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.404] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0191.405] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0191.405] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.405] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0191.405] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0191.406] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0191.406] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0191.406] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0191.406] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0191.407] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0191.407] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0191.407] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0191.408] CloseHandle (hObject=0x20c) returned 1
	[0191.408] Sleep (dwMilliseconds=0x1f4) 
	[0192.121] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b8
	[0192.122] Process32FirstW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0192.123] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0192.123] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0192.123] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0192.124] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0192.124] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0192.124] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0192.125] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0192.125] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0192.125] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0192.126] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.126] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.126] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.126] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.127] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.127] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0192.127] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.128] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0192.128] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.128] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0192.129] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0192.129] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.129] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0192.130] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0192.130] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0192.130] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0192.130] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0192.131] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.131] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0192.131] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0192.132] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0192.132] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0192.132] CloseHandle (hObject=0x1b8) returned 1
	[0192.132] Sleep (dwMilliseconds=0x1f4) 
	[0192.886] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0192.889] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0192.889] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0192.889] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0192.890] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0192.890] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0192.890] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0192.890] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0192.891] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0192.891] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0192.892] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0192.892] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.892] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.892] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.893] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.893] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.893] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0192.894] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.894] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0192.894] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.895] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0192.895] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0192.895] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.896] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0192.896] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0192.896] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0192.897] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0192.897] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0192.897] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0192.898] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0192.898] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0192.898] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0192.898] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0192.899] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0192.899] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0192.899] CloseHandle (hObject=0x20c) returned 1
	[0192.899] Sleep (dwMilliseconds=0x1f4) 
	[0193.832] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0193.834] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0193.835] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0193.835] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0193.835] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0193.835] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0193.836] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0193.836] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0193.836] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0193.837] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0193.837] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0193.837] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0193.838] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0193.838] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0193.838] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0193.839] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0193.839] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0193.839] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0193.839] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0193.840] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0193.840] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0193.840] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0193.841] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0193.841] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0193.841] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0193.842] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0193.842] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0193.842] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0193.843] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0193.843] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0193.843] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0193.844] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0193.844] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0193.844] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0193.845] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0193.845] CloseHandle (hObject=0x20c) returned 1
	[0193.845] Sleep (dwMilliseconds=0x1f4) 
	[0194.517] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x24c
	[0194.519] Process32FirstW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0194.519] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0194.519] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0194.520] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0194.520] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0194.520] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0194.521] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0194.521] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0194.521] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0194.521] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0194.522] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0194.522] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0194.522] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0194.523] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0194.523] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0194.524] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0194.524] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0194.524] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0194.524] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0194.525] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0194.525] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0194.525] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0194.526] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0194.526] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0194.526] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0194.527] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0194.527] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0194.527] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0194.528] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0194.528] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0194.528] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0194.528] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0194.529] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0194.529] Process32NextW (in: hSnapshot=0x24c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0194.529] CloseHandle (hObject=0x24c) returned 1
	[0194.530] Sleep (dwMilliseconds=0x1f4) 
	[0195.186] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x26c
	[0195.188] Process32FirstW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0195.188] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0195.189] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0195.189] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0195.189] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0195.190] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0195.190] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0195.190] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0195.191] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0195.191] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0195.192] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.192] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.192] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.193] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.193] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.193] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0195.194] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.194] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0195.195] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.195] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0195.195] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0195.196] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.196] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0195.197] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0195.197] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0195.197] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0195.198] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0195.198] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.198] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0195.199] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0195.199] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0195.199] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0195.200] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0195.200] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0195.200] CloseHandle (hObject=0x26c) returned 1
	[0195.201] Sleep (dwMilliseconds=0x1f4) 
	[0195.913] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0195.917] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0195.917] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0195.917] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0195.918] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0195.918] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0195.918] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0195.918] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0195.919] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0195.919] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0195.919] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0195.920] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.920] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.920] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.921] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.921] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.921] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0195.922] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.922] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0195.922] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.923] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0195.923] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0195.923] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.923] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0195.924] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0195.924] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0195.924] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0195.925] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0195.925] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0195.925] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0195.926] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0195.926] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0195.926] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0195.927] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0195.927] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0195.927] CloseHandle (hObject=0x22c) returned 1
	[0195.927] Sleep (dwMilliseconds=0x1f4) 
	[0196.584] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x240
	[0196.586] Process32FirstW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0196.587] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0196.587] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0196.587] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0196.588] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0196.588] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0196.588] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0196.589] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0196.589] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0196.589] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0196.590] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0196.590] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0196.590] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0196.591] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0196.591] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0196.591] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0196.591] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0196.592] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0196.592] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0196.592] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0196.593] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0196.593] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0196.593] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0196.594] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0196.594] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0196.594] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0196.595] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0196.595] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0196.595] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0196.596] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0196.596] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0196.596] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0196.596] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0196.597] Process32NextW (in: hSnapshot=0x240, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0196.597] CloseHandle (hObject=0x240) returned 1
	[0196.597] Sleep (dwMilliseconds=0x1f4) 
	[0197.287] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x270
	[0197.288] Process32FirstW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0197.289] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0197.289] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0197.290] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0197.290] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0197.290] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0197.290] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0197.291] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0197.291] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0197.291] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0197.292] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.292] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.292] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.293] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.293] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.293] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0197.294] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.294] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0197.294] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.295] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0197.295] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0197.295] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.296] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0197.296] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0197.296] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0197.296] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0197.297] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0197.297] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.297] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0197.298] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0197.298] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0197.298] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0197.299] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0197.299] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0197.299] CloseHandle (hObject=0x270) returned 1
	[0197.299] Sleep (dwMilliseconds=0x1f4) 
	[0197.856] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x270
	[0197.857] Process32FirstW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0197.858] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0197.858] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0197.858] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0197.858] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0197.859] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0197.859] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0197.859] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0197.859] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0197.860] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0197.860] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.860] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.860] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.861] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.861] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.861] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0197.862] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.862] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0197.862] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.862] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0197.863] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0197.863] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.863] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0197.863] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0197.864] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0197.864] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0197.864] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0197.865] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0197.865] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0197.865] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0197.865] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0197.866] CloseHandle (hObject=0x270) returned 1
	[0197.866] Sleep (dwMilliseconds=0x1f4) 
	[0198.548] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0198.550] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0198.550] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0198.550] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0198.551] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0198.551] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0198.551] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0198.551] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0198.552] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0198.552] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0198.552] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0198.553] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0198.553] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0198.553] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0198.553] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0198.554] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0198.554] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0198.554] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0198.554] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0198.555] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0198.555] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0198.555] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0198.556] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0198.556] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0198.556] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0198.556] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0198.557] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0198.557] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0198.557] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0198.557] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0198.558] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0198.558] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0198.558] CloseHandle (hObject=0x22c) returned 1
	[0198.558] Sleep (dwMilliseconds=0x1f4) 
	[0199.206] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x280
	[0199.208] Process32FirstW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0199.208] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0199.208] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0199.209] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0199.209] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0199.209] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0199.210] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0199.210] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0199.210] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0199.210] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0199.211] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.211] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.211] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.211] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.212] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.212] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0199.212] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.213] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0199.213] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.213] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0199.213] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0199.214] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.214] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0199.214] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0199.214] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0199.215] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0199.215] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0199.215] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.215] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0199.216] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0199.216] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0199.216] CloseHandle (hObject=0x280) returned 1
	[0199.216] Sleep (dwMilliseconds=0x1f4) 
	[0199.767] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x280
	[0199.768] Process32FirstW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0199.769] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0199.769] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0199.769] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0199.769] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0199.770] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0199.770] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0199.770] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0199.770] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0199.771] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0199.771] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.771] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.772] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.772] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.772] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.772] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0199.773] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.773] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0199.773] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.774] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0199.774] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0199.774] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.774] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0199.775] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0199.775] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0199.775] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0199.775] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0199.776] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0199.776] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0199.776] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0199.777] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0199.777] CloseHandle (hObject=0x280) returned 1
	[0199.777] Sleep (dwMilliseconds=0x1f4) 
	[0200.530] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x280
	[0200.532] Process32FirstW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0200.532] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0200.532] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0200.532] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0200.533] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0200.533] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0200.533] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0200.533] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0200.534] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0200.534] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0200.534] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0200.534] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0200.535] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0200.535] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0200.535] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0200.536] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0200.536] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0200.536] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0200.536] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0200.537] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0200.537] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0200.537] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0200.537] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0200.538] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0200.538] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0200.538] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0200.538] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0200.539] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0200.539] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0200.539] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0200.539] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0200.540] CloseHandle (hObject=0x280) returned 1
	[0200.540] Sleep (dwMilliseconds=0x1f4) 
	[0201.194] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x280
	[0201.233] Process32FirstW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0201.233] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0201.234] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0201.234] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0201.234] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0201.234] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0201.235] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0201.235] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0201.235] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0201.235] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0201.236] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.236] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.236] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.237] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.237] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.237] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0201.237] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.238] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0201.238] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.238] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0201.238] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0201.239] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.239] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0201.239] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0201.239] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0201.240] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0201.240] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0201.240] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.241] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0201.241] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0201.241] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0201.241] CloseHandle (hObject=0x280) returned 1
	[0201.241] Sleep (dwMilliseconds=0x1f4) 
	[0201.808] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x270
	[0201.810] Process32FirstW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0201.810] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0201.811] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0201.811] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0201.811] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0201.812] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0201.812] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0201.812] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0201.812] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0201.813] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0201.813] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.813] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.813] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.814] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.814] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.814] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0201.814] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.815] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0201.815] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.815] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0201.816] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0201.816] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.816] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0201.816] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0201.817] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0201.817] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0201.817] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0201.817] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0201.818] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0201.818] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0201.818] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0201.819] CloseHandle (hObject=0x270) returned 1
	[0201.819] Sleep (dwMilliseconds=0x1f4) 
	[0202.448] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x270
	[0202.450] Process32FirstW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0202.450] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0202.450] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0202.451] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0202.451] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0202.451] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0202.452] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0202.452] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0202.452] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0202.453] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0202.453] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0202.453] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0202.454] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0202.454] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0202.454] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0202.455] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0202.455] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0202.455] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0202.456] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0202.456] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0202.456] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0202.457] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0202.457] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0202.457] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0202.458] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0202.458] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0202.458] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0202.459] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0202.459] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0202.460] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0202.460] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0202.461] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0202.461] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0202.461] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0202.462] CloseHandle (hObject=0x270) returned 1
	[0202.462] Sleep (dwMilliseconds=0x1f4) 
	[0203.074] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x270
	[0203.077] Process32FirstW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0203.077] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0203.078] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0203.078] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0203.078] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0203.079] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0203.079] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0203.079] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0203.080] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0203.080] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0203.080] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.081] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.081] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.081] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.082] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.082] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0203.082] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.082] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0203.083] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.083] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0203.083] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0203.084] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.084] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0203.084] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0203.085] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0203.085] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0203.085] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0203.086] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.086] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0203.086] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0203.087] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0203.087] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0203.087] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0203.087] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0203.088] CloseHandle (hObject=0x270) returned 1
	[0203.088] Sleep (dwMilliseconds=0x1f4) 
	[0203.817] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x270
	[0203.819] Process32FirstW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0203.819] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0203.820] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0203.820] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0203.820] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0203.821] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0203.821] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0203.822] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0203.822] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0203.822] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0203.823] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.823] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.823] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.824] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.824] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.824] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0203.825] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.825] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0203.825] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.826] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0203.826] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0203.826] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.827] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0203.827] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0203.827] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0203.827] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0203.828] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0203.828] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0203.828] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0203.829] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0203.829] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0203.829] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0203.830] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0203.830] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0203.830] CloseHandle (hObject=0x270) returned 1
	[0203.830] Sleep (dwMilliseconds=0x1f4) 
	[0204.496] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x280
	[0204.498] Process32FirstW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0204.498] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0204.499] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0204.499] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0204.499] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0204.499] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0204.500] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0204.500] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0204.500] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0204.501] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0204.501] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0204.501] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0204.502] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0204.502] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0204.502] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0204.503] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0204.503] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0204.503] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0204.503] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0204.504] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0204.504] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0204.504] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0204.505] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0204.505] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0204.505] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0204.506] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0204.506] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0204.506] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0204.506] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0204.507] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0204.507] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0204.508] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0204.508] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0204.508] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0204.509] CloseHandle (hObject=0x280) returned 1
	[0204.509] Sleep (dwMilliseconds=0x1f4) 
	[0205.116] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x280
	[0205.121] Process32FirstW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0205.121] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0205.122] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0205.122] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0205.122] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0205.123] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0205.123] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0205.123] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0205.124] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0205.124] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0205.124] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.125] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.125] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.125] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.125] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.126] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0205.126] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.126] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0205.127] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.127] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0205.127] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0205.128] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.128] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0205.128] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0205.128] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0205.129] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0205.129] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0205.129] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.130] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0205.130] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0205.130] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0205.131] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0205.131] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0205.131] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0205.132] CloseHandle (hObject=0x280) returned 1
	[0205.132] Sleep (dwMilliseconds=0x1f4) 
	[0205.656] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0205.659] Process32FirstW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0205.659] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0205.659] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0205.660] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0205.660] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0205.660] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0205.661] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0205.661] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0205.662] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0205.662] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0205.662] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.663] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.663] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.663] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.664] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.664] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0205.664] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.665] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0205.665] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.666] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0205.666] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0205.666] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.667] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0205.667] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0205.667] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0205.668] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0205.668] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0205.668] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0205.669] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0205.669] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0205.670] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0205.670] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0205.670] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0205.671] CloseHandle (hObject=0x230) returned 1
	[0205.671] Sleep (dwMilliseconds=0x1f4) 
	[0206.261] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x260
	[0206.263] Process32FirstW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0206.263] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0206.263] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0206.263] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0206.264] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0206.264] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0206.264] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0206.265] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0206.265] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0206.265] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0206.265] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.266] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.266] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.266] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.267] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.267] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0206.267] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.267] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0206.268] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.268] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0206.268] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0206.268] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.269] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0206.269] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0206.269] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0206.270] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0206.270] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0206.270] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.270] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0206.271] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0206.271] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0206.271] CloseHandle (hObject=0x260) returned 1
	[0206.271] Sleep (dwMilliseconds=0x1f4) 
	[0206.871] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x274
	[0206.873] Process32FirstW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0206.873] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0206.873] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0206.874] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0206.874] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0206.874] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0206.875] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0206.875] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0206.875] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0206.875] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0206.876] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.876] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.876] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.876] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.877] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.877] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0206.877] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.878] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0206.878] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.878] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0206.879] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0206.879] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.879] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0206.879] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0206.880] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0206.880] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0206.880] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0206.881] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0206.881] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0206.881] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0206.881] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0206.882] CloseHandle (hObject=0x274) returned 1
	[0206.882] Sleep (dwMilliseconds=0x1f4) 
	[0207.518] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x274
	[0207.520] Process32FirstW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0207.520] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0207.520] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0207.521] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0207.521] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0207.521] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0207.521] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0207.524] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0207.524] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0207.524] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0207.524] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0207.525] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0207.525] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0207.525] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0207.525] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0207.526] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0207.526] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0207.526] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0207.527] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0207.527] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0207.527] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0207.527] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0207.528] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0207.528] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0207.528] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0207.528] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0207.529] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0207.529] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0207.529] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0207.529] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0207.530] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0207.530] CloseHandle (hObject=0x274) returned 1
	[0207.530] Sleep (dwMilliseconds=0x1f4) 
	[0208.100] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x280
	[0208.102] Process32FirstW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0208.102] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0208.103] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0208.103] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0208.103] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0208.103] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0208.104] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0208.104] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0208.104] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0208.105] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0208.105] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.105] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.105] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.106] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.106] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.106] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0208.106] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.107] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0208.107] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.107] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0208.108] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0208.108] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.108] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0208.108] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0208.109] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0208.109] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0208.109] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0208.110] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.110] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0208.110] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0208.110] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0208.111] CloseHandle (hObject=0x280) returned 1
	[0208.111] Sleep (dwMilliseconds=0x1f4) 
	[0208.719] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x280
	[0208.721] Process32FirstW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0208.721] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0208.722] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0208.722] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0208.722] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0208.722] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0208.723] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0208.723] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0208.723] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0208.724] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0208.724] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.724] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.724] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.725] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.725] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.725] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0208.726] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.726] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0208.726] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.726] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0208.727] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0208.727] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.727] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0208.727] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0208.728] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0208.728] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0208.728] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0208.729] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0208.729] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0208.729] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0208.730] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0208.730] CloseHandle (hObject=0x280) returned 1
	[0208.730] Sleep (dwMilliseconds=0x1f4) 
	[0209.316] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x26c
	[0209.318] Process32FirstW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0209.319] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0209.319] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0209.319] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0209.320] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0209.320] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0209.320] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0209.321] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0209.321] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0209.321] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0209.322] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.322] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.322] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.323] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.323] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.323] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0209.324] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.324] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0209.324] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.325] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0209.325] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0209.325] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.326] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0209.326] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0209.326] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0209.327] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0209.327] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0209.327] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.328] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0209.328] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0209.328] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0209.329] CloseHandle (hObject=0x26c) returned 1
	[0209.329] Sleep (dwMilliseconds=0x1f4) 
	[0209.961] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x280
	[0209.963] Process32FirstW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0209.963] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0209.963] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0209.963] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0209.964] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0209.964] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0209.964] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0209.965] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0209.965] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0209.965] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0209.965] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.966] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.966] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.966] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.966] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.967] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0209.967] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.967] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0209.968] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.968] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0209.968] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0209.968] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.969] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0209.969] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0209.969] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0209.969] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0209.970] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0209.970] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0209.970] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0209.971] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0209.971] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0209.971] CloseHandle (hObject=0x280) returned 1
	[0209.971] Sleep (dwMilliseconds=0x1f4) 
	[0211.033] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x280
	[0211.035] Process32FirstW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0211.035] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0211.035] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0211.035] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0211.036] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0211.036] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0211.037] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0211.037] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0211.037] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0211.037] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0211.038] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.038] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.038] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.039] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.039] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.039] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0211.040] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.040] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0211.040] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.041] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0211.041] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0211.041] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.041] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0211.042] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0211.042] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0211.042] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0211.043] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0211.043] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.043] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0211.044] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0211.044] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0211.045] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 0
	[0211.045] CloseHandle (hObject=0x280) returned 1
	[0211.045] Sleep (dwMilliseconds=0x1f4) 
	[0211.621] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0211.623] Process32FirstW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0211.623] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0211.623] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0211.623] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0211.624] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0211.624] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0211.624] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0211.625] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0211.625] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0211.625] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0211.626] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.626] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.626] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.627] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.627] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.627] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0211.627] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.628] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0211.628] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.628] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0211.629] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0211.629] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.629] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0211.630] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0211.630] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0211.630] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0211.630] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0211.631] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0211.631] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0211.631] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0211.632] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0211.632] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 0
	[0211.632] CloseHandle (hObject=0x230) returned 1
	[0211.632] Sleep (dwMilliseconds=0x1f4) 
	[0212.214] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0212.216] Process32FirstW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0212.216] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0212.217] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0212.217] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0212.217] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0212.218] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0212.218] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0212.218] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0212.218] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0212.219] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0212.219] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.219] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.220] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.220] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.220] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.221] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0212.221] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.221] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0212.222] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.222] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0212.222] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0212.223] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.223] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0212.223] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0212.224] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0212.224] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0212.224] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0212.225] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.225] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0212.225] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0212.226] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0212.226] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 0
	[0212.226] CloseHandle (hObject=0x230) returned 1
	[0212.226] Sleep (dwMilliseconds=0x1f4) 
	[0212.775] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0212.777] Process32FirstW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0212.778] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0212.778] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0212.778] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0212.779] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0212.779] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0212.779] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0212.780] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0212.780] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0212.780] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0212.780] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.781] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.781] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.781] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.782] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.782] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0212.782] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.783] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0212.783] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.783] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0212.784] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0212.784] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.784] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0212.785] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0212.785] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0212.785] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0212.785] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0212.786] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0212.786] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0212.786] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0212.787] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0212.787] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 0
	[0212.787] CloseHandle (hObject=0x230) returned 1
	[0212.787] Sleep (dwMilliseconds=0x1f4) 
	[0213.337] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0213.339] Process32FirstW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0213.339] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0213.339] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0213.339] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0213.340] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0213.340] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0213.340] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0213.341] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0213.341] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0213.341] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0213.342] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.342] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.342] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.343] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.343] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.343] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0213.344] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.344] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0213.344] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.344] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0213.345] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0213.345] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.346] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0213.346] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0213.346] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0213.347] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0213.347] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0213.347] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.347] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0213.348] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0213.348] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0213.348] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 0
	[0213.349] CloseHandle (hObject=0x230) returned 1
	[0213.349] Sleep (dwMilliseconds=0x1f4) 
	[0213.899] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0213.900] Process32FirstW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0213.901] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0213.901] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0213.901] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0213.902] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0213.902] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0213.902] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0213.902] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0213.903] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0213.903] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0213.903] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.904] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.904] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.904] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.905] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.905] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0213.905] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.906] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0213.906] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.906] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0213.907] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0213.907] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.907] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0213.907] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0213.908] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0213.908] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0213.909] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0213.909] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0213.909] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0213.909] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0213.910] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0213.910] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 0
	[0213.910] CloseHandle (hObject=0x230) returned 1
	[0213.910] Sleep (dwMilliseconds=0x1f4) 
	[0214.460] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0214.462] Process32FirstW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0214.462] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0214.462] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0214.463] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0214.463] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0214.463] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0214.464] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0214.464] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0214.464] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0214.465] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0214.465] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0214.465] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0214.466] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0214.466] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0214.466] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0214.466] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0214.467] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0214.467] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0214.467] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0214.468] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0214.468] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0214.468] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0214.469] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0214.469] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0214.469] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0214.470] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0214.470] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0214.470] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0214.470] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0214.471] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0214.471] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0214.471] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 0
	[0214.472] CloseHandle (hObject=0x230) returned 1
	[0214.472] Sleep (dwMilliseconds=0x1f4) 
	[0215.022] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0215.023] Process32FirstW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0215.024] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0215.024] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0215.024] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0215.025] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0215.025] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0215.025] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0215.025] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0215.026] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0215.026] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0215.026] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.027] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.027] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.027] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.028] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.028] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0215.028] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.029] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0215.029] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.029] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0215.030] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0215.030] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.030] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0215.030] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0215.031] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0215.031] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0215.031] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0215.032] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.032] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0215.032] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0215.033] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0215.033] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 0
	[0215.033] CloseHandle (hObject=0x230) returned 1
	[0215.033] Sleep (dwMilliseconds=0x1f4) 
	[0215.586] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0215.587] Process32FirstW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0215.588] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0215.588] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0215.588] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0215.588] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0215.589] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0215.589] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0215.589] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0215.590] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0215.590] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0215.590] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.591] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.591] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.591] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.592] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.592] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0215.592] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.592] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0215.593] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.593] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0215.593] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0215.594] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.594] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0215.594] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0215.595] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0215.595] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0215.595] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0215.596] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0215.596] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0215.596] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0215.596] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0215.597] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 0
	[0215.597] CloseHandle (hObject=0x230) returned 1
	[0215.597] Sleep (dwMilliseconds=0x1f4) 
	[0216.146] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x274
	[0216.148] Process32FirstW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0216.149] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0216.149] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0216.149] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0216.149] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0216.150] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0216.150] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0216.151] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0216.151] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0216.151] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0216.152] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.152] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.152] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.152] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.153] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.153] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0216.153] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.154] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0216.154] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.154] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0216.154] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0216.155] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.155] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0216.155] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0216.156] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0216.156] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0216.156] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0216.156] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.157] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0216.157] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0216.157] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0216.157] CloseHandle (hObject=0x274) returned 1
	[0216.158] Sleep (dwMilliseconds=0x1f4) 
	[0216.738] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x274
	[0216.740] Process32FirstW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0216.741] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0216.741] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0216.741] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0216.741] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0216.742] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0216.742] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0216.742] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0216.743] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0216.743] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0216.743] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.743] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.744] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.744] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.744] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.745] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0216.745] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.745] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0216.745] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.746] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0216.746] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0216.746] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.746] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0216.747] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0216.747] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0216.747] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0216.747] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0216.748] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0216.748] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0216.748] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0216.749] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0216.749] CloseHandle (hObject=0x274) returned 1
	[0216.749] Sleep (dwMilliseconds=0x1f4) 
	[0217.299] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x274
	[0217.302] Process32FirstW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0217.302] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0217.302] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0217.302] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0217.303] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0217.303] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0217.303] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0217.303] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0217.304] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0217.304] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0217.304] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.304] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.305] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.305] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.305] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.305] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0217.306] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.306] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0217.306] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.306] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0217.307] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0217.307] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.307] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0217.308] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0217.308] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0217.308] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0217.308] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0217.309] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.309] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0217.309] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0217.309] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0217.310] CloseHandle (hObject=0x274) returned 1
	[0217.310] Sleep (dwMilliseconds=0x1f4) 
	[0217.909] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x274
	[0217.911] Process32FirstW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0217.911] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0217.911] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0217.912] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0217.912] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0217.912] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0217.912] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0217.913] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0217.913] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0217.913] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0217.913] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.914] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.914] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.914] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.914] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.915] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0217.915] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.915] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0217.916] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.916] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0217.916] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0217.916] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.917] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0217.917] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0217.917] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0217.917] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0217.918] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0217.918] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0217.918] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0217.919] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0217.919] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0217.919] CloseHandle (hObject=0x274) returned 1
	[0217.919] Sleep (dwMilliseconds=0x1f4) 
	[0218.423] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x274
	[0218.428] Process32FirstW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0218.428] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0218.428] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0218.429] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0218.429] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0218.430] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0218.430] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0218.430] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0218.430] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0218.431] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0218.431] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0218.431] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0218.431] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0218.432] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0218.432] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0218.432] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0218.433] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0218.433] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0218.433] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0218.433] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0218.434] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0218.434] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0218.434] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0218.434] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0218.435] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0218.435] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0218.435] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0218.435] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0218.436] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0218.436] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0218.436] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0218.437] CloseHandle (hObject=0x274) returned 1
	[0218.437] Sleep (dwMilliseconds=0x1f4) 
	[0219.015] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x274
	[0219.017] Process32FirstW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0219.017] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0219.017] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0219.018] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0219.018] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0219.018] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0219.019] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0219.019] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0219.019] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0219.019] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0219.020] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.020] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.020] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.020] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.021] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.021] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0219.021] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.022] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0219.022] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.022] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0219.022] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0219.023] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.023] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0219.023] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0219.023] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0219.024] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0219.024] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0219.024] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.025] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0219.025] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0219.025] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0219.025] CloseHandle (hObject=0x274) returned 1
	[0219.026] Sleep (dwMilliseconds=0x1f4) 
	[0219.609] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x274
	[0219.611] Process32FirstW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0219.611] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0219.611] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0219.612] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0219.612] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0219.612] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0219.613] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0219.613] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0219.613] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0219.613] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0219.614] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.614] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.614] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.615] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.615] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.615] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0219.615] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.616] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0219.616] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.616] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0219.616] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0219.617] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.617] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0219.617] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0219.618] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0219.618] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0219.618] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0219.618] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0219.619] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0219.619] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0219.619] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0219.620] CloseHandle (hObject=0x274) returned 1
	[0219.620] Sleep (dwMilliseconds=0x1f4) 
	[0220.177] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x274
	[0220.179] Process32FirstW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0220.180] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0220.180] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0220.180] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0220.180] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0220.181] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0220.181] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0220.181] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0220.182] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0220.182] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0220.182] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.182] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.183] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.183] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.183] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.183] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0220.184] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.184] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0220.184] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.185] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0220.185] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0220.185] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.186] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0220.186] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0220.186] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0220.186] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0220.187] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0220.187] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.187] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0220.187] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0220.188] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0220.188] CloseHandle (hObject=0x274) returned 1
	[0220.189] Sleep (dwMilliseconds=0x1f4) 
	[0220.762] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x274
	[0220.764] Process32FirstW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0220.764] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0220.765] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0220.765] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0220.765] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0220.766] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0220.766] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0220.766] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0220.766] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0220.767] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0220.767] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.767] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.768] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.768] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.768] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.768] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0220.769] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.769] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0220.769] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.770] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0220.770] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0220.770] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.771] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0220.771] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0220.771] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0220.771] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0220.772] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0220.772] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0220.772] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0220.773] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0220.773] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0220.773] CloseHandle (hObject=0x274) returned 1
	[0220.773] Sleep (dwMilliseconds=0x1f4) 
	[0221.386] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x270
	[0221.388] Process32FirstW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0221.389] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0221.389] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0221.389] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0221.390] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0221.390] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0221.390] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0221.390] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0221.391] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0221.391] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0221.391] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0221.392] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0221.392] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0221.392] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0221.393] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0221.393] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0221.393] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0221.394] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0221.394] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0221.394] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0221.395] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0221.395] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0221.395] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0221.396] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0221.396] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0221.396] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0221.397] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0221.397] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0221.397] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0221.398] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0221.398] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0221.398] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0221.398] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0221.399] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0221.399] CloseHandle (hObject=0x270) returned 1
	[0221.399] Sleep (dwMilliseconds=0x1f4) 
	[0222.022] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x280
	[0222.023] Process32FirstW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0222.024] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0222.024] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0222.024] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0222.025] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0222.025] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0222.025] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0222.026] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0222.026] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0222.026] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0222.027] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.027] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.027] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.028] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.028] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.028] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0222.029] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.029] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0222.029] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.030] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0222.030] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0222.030] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.030] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0222.031] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0222.031] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0222.031] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0222.032] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0222.032] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.032] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0222.033] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0222.033] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0222.033] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0222.034] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.034] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0222.034] CloseHandle (hObject=0x280) returned 1
	[0222.034] Sleep (dwMilliseconds=0x1f4) 
	[0222.623] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x274
	[0222.625] Process32FirstW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0222.625] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0222.625] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0222.626] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0222.626] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0222.626] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0222.627] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0222.627] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0222.627] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0222.628] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0222.628] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.628] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.628] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.629] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.629] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.629] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0222.630] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.630] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0222.630] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.631] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0222.631] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0222.631] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.632] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0222.632] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0222.632] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0222.633] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0222.633] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0222.633] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.634] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0222.634] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0222.634] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0222.635] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0222.635] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0222.635] Process32NextW (in: hSnapshot=0x274, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0222.636] CloseHandle (hObject=0x274) returned 1
	[0222.636] Sleep (dwMilliseconds=0x1f4) 
	[0223.184] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x230
	[0223.186] Process32FirstW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0223.186] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0223.187] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0223.187] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0223.187] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0223.188] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0223.188] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0223.188] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0223.189] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0223.189] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0223.189] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.190] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.190] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.190] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.191] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1f, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.191] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0223.191] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.191] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0223.192] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.192] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0223.192] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0223.193] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.193] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0223.193] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0223.194] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0223.194] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0223.194] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0223.195] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.195] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0223.195] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0223.196] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0223.196] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0223.196] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.197] Process32NextW (in: hSnapshot=0x230, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0223.197] CloseHandle (hObject=0x230) returned 1
	[0223.197] Sleep (dwMilliseconds=0x1f4) 
	[0223.743] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x280
	[0223.745] Process32FirstW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0223.745] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0223.746] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0223.746] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0223.746] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0223.747] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0223.747] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0223.747] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0223.748] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0223.748] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0223.748] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.749] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.749] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.749] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.750] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.750] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0223.750] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.750] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0223.751] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.751] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0223.751] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0223.752] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.752] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0223.752] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0223.753] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0223.753] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0223.753] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0223.754] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.754] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0223.754] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0223.755] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0223.755] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0223.755] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0223.755] Process32NextW (in: hSnapshot=0x280, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0223.756] CloseHandle (hObject=0x280) returned 1
	[0223.756] Sleep (dwMilliseconds=0x1f4) 
	[0224.293] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x248
	[0224.295] Process32FirstW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0224.295] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0224.296] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0224.296] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0224.296] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0224.297] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0224.297] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0224.297] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0224.298] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0224.298] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0224.298] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0224.298] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0224.299] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0224.299] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0224.299] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0224.300] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0224.300] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0224.300] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0224.301] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0224.301] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0224.301] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0224.302] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0224.302] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0224.302] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0224.302] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0224.303] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0224.303] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0224.303] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0224.304] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0224.304] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0224.305] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0224.305] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0224.305] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0224.306] Process32NextW (in: hSnapshot=0x248, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 0
	[0224.306] CloseHandle (hObject=0x248) returned 1
	[0224.306] Sleep (dwMilliseconds=0x1f4) 
	[0226.133] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x258
	[0226.135] Process32FirstW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0226.136] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0226.136] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0226.136] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0226.137] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0226.137] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0226.138] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0226.138] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0226.138] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0226.139] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0226.139] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.140] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.140] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.140] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.141] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.141] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0226.142] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.142] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0226.143] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.143] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0226.143] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0226.144] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.144] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0226.145] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0226.145] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0226.145] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0226.146] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0226.146] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.147] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0226.147] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.147] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0226.148] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0226.148] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0226.149] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0226.149] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0226.149] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0226.150] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0226.150] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0226.151] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0226.151] CloseHandle (hObject=0x258) returned 1
	[0226.151] Sleep (dwMilliseconds=0x1f4) 
	[0226.761] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x234
	[0226.763] Process32FirstW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0226.763] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0226.764] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0226.764] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0226.765] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0226.765] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0226.765] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0226.766] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0226.766] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0226.766] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0226.767] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.767] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.767] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.768] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.768] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.769] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0226.769] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.769] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0226.770] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.770] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0226.770] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0226.771] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.771] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0226.772] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0226.772] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0226.772] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0226.773] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0226.773] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.773] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0226.774] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0226.774] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0226.774] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0226.775] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0226.775] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0226.776] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0226.776] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0226.776] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0226.777] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0226.777] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0226.777] CloseHandle (hObject=0x234) returned 1
	[0226.777] Sleep (dwMilliseconds=0x1f4) 
	[0227.374] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x258
	[0227.375] Process32FirstW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0227.376] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0227.376] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0227.376] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0227.378] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0227.379] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0227.379] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0227.379] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0227.380] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0227.380] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0227.380] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0227.381] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0227.383] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0227.384] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0227.385] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0227.385] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0227.385] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0227.386] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0227.386] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0227.387] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0227.387] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0227.387] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0227.388] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0227.388] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0227.388] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0227.389] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0227.389] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0227.389] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0227.390] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0227.390] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0227.391] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0227.391] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0227.391] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0227.392] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0227.392] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0227.392] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0227.393] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0227.393] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0227.394] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0227.394] CloseHandle (hObject=0x258) returned 1
	[0227.394] Sleep (dwMilliseconds=0x1f4) 
	[0228.910] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x234
	[0228.912] Process32FirstW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0228.913] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0228.913] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0228.913] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0228.914] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0228.914] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0228.914] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0228.915] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0228.915] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0228.915] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0228.916] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0228.916] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0228.917] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0228.917] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0228.917] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0228.918] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0228.918] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0228.918] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0228.919] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0228.919] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0228.919] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0228.920] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0228.920] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0228.921] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0228.921] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0228.921] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0228.922] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0228.922] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0228.922] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0228.923] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0228.923] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0228.924] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0228.924] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0228.924] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0228.925] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0228.925] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0228.925] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0228.926] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0228.926] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0228.926] CloseHandle (hObject=0x234) returned 1
	[0228.926] Sleep (dwMilliseconds=0x1f4) 
	[0229.521] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x26c
	[0229.522] Process32FirstW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0229.523] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0229.523] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0229.523] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0229.524] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0229.524] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0229.524] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0229.525] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0229.525] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0229.525] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0229.526] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0229.526] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0229.526] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0229.527] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0229.527] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0229.527] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0229.527] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0229.528] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0229.528] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0229.528] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0229.529] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0229.529] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0229.529] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0229.530] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0229.530] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0229.531] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0229.531] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0229.531] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0229.532] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0229.532] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0229.532] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0229.533] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0229.533] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0229.533] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0229.533] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0229.534] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0229.534] Process32NextW (in: hSnapshot=0x26c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0229.534] CloseHandle (hObject=0x26c) returned 1
	[0229.534] Sleep (dwMilliseconds=0x1f4) 
	[0230.195] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x234
	[0230.197] Process32FirstW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0230.197] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0230.198] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0230.198] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0230.198] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0230.198] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0230.199] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0230.199] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0230.199] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0230.200] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0230.200] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.200] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.201] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.201] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.201] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.202] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0230.202] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.202] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0230.203] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.203] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0230.203] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0230.204] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.204] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0230.204] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0230.205] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0230.205] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0230.205] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0230.205] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.206] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0230.206] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.206] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0230.207] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0230.207] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0230.207] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0230.208] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0230.208] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0230.208] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0230.209] CloseHandle (hObject=0x234) returned 1
	[0230.209] Sleep (dwMilliseconds=0x1f4) 
	[0230.781] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x270
	[0230.786] Process32FirstW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0230.786] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0230.786] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0230.787] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0230.787] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0230.787] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0230.788] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0230.788] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0230.788] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0230.789] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0230.789] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.789] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.790] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.790] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.791] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.791] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0230.791] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.792] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0230.792] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.792] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0230.793] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0230.793] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.794] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0230.794] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0230.794] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0230.795] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0230.795] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0230.795] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.796] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0230.796] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0230.796] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0230.797] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0230.797] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0230.797] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0230.798] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0230.798] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0230.799] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0230.799] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0230.799] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0230.800] Process32NextW (in: hSnapshot=0x270, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0230.800] CloseHandle (hObject=0x270) returned 1
	[0230.800] Sleep (dwMilliseconds=0x1f4) 
	[0231.496] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x260
	[0231.498] Process32FirstW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0231.499] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0231.499] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0231.500] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0231.500] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0231.500] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0231.501] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0231.501] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0231.502] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0231.502] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0231.502] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0231.503] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0231.503] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0231.503] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0231.504] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0231.504] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0231.504] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0231.505] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0231.505] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0231.505] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0231.506] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0231.506] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0231.507] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0231.507] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0231.507] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0231.508] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0231.508] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0231.508] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0231.509] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0231.509] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0231.509] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0231.510] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0231.510] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0231.510] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0231.511] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0231.511] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0231.512] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0231.512] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0231.512] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0231.513] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0231.513] CloseHandle (hObject=0x260) returned 1
	[0231.513] Sleep (dwMilliseconds=0x1f4) 
	[0232.158] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x228
	[0232.216] Process32FirstW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0232.216] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0232.217] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0232.217] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0232.218] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0232.218] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0232.218] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0232.219] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0232.219] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0232.219] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0232.220] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0232.220] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0232.220] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0232.221] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0232.221] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0232.221] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0232.222] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0232.222] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0232.223] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0232.223] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0232.223] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0232.224] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0232.224] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0232.224] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0232.225] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0232.225] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0232.225] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0232.226] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0232.226] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0232.226] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0232.227] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0232.227] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0232.228] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0232.228] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0232.228] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0232.229] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0232.229] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0232.229] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0232.230] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0232.230] Process32NextW (in: hSnapshot=0x228, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0232.230] CloseHandle (hObject=0x228) returned 1
	[0232.230] Sleep (dwMilliseconds=0x1f4) 
	[0233.079] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x260
	[0233.082] Process32FirstW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0233.082] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0233.082] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0233.083] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0233.083] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0233.083] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0233.084] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0233.084] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0233.084] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0233.085] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0233.085] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.085] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.086] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.086] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.087] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.087] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0233.087] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.088] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0233.088] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.088] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0233.089] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0233.089] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.089] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0233.090] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0233.090] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0233.090] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0233.091] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0233.091] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.091] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0233.092] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.092] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0233.093] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0233.093] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0233.093] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0233.094] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0233.094] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0233.094] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0233.095] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0233.095] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.095] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0233.096] CloseHandle (hObject=0x260) returned 1
	[0233.096] Sleep (dwMilliseconds=0x1f4) 
	[0233.652] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x23c
	[0233.654] Process32FirstW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0233.655] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0233.655] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0233.655] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0233.655] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0233.656] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0233.656] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0233.656] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0233.657] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0233.657] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0233.657] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.658] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.658] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.658] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.659] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.659] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0233.659] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.659] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0233.660] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.660] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0233.660] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0233.661] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.661] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0233.661] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0233.662] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0233.662] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0233.662] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0233.662] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.663] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0233.663] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.663] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0233.664] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0233.664] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0233.665] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0233.665] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0233.665] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0233.666] Process32NextW (in: hSnapshot=0x23c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0233.666] CloseHandle (hObject=0x23c) returned 1
	[0233.666] Sleep (dwMilliseconds=0x1f4) 
	[0234.434] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x27c
	[0234.437] Process32FirstW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0234.437] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0234.438] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0234.438] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0234.438] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0234.439] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0234.439] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0234.439] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0234.440] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0234.440] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0234.440] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0234.441] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0234.441] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0234.441] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0234.442] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0234.442] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0234.442] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0234.443] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0234.443] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0234.444] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0234.444] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0234.445] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0234.445] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0234.445] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0234.446] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0234.446] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0234.446] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0234.447] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0234.447] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0234.447] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0234.448] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0234.448] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0234.448] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0234.449] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0234.449] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0234.449] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0234.450] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0234.450] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0234.450] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0234.451] Process32NextW (in: hSnapshot=0x27c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0234.451] CloseHandle (hObject=0x27c) returned 1
	[0234.451] Sleep (dwMilliseconds=0x1f4) 
	[0234.998] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1f8
	[0234.999] Process32FirstW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0235.000] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0235.000] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0235.000] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0235.001] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0235.001] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0235.001] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0235.002] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0235.002] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0235.002] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0235.003] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.003] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.003] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.004] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.004] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.005] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0235.005] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.006] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0235.006] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.006] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0235.007] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0235.007] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.007] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0235.008] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0235.008] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0235.008] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0235.009] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0235.009] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.009] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0235.010] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.010] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0235.010] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0235.011] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0235.011] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0235.011] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0235.012] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.012] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0235.012] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0235.013] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0235.013] Process32NextW (in: hSnapshot=0x1f8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0235.013] CloseHandle (hObject=0x1f8) returned 1
	[0235.013] Sleep (dwMilliseconds=0x1f4) 
	[0235.715] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144
	[0235.734] Process32FirstW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0235.734] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0235.735] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0235.735] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0235.735] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0235.736] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0235.736] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0235.737] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0235.737] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0235.737] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0235.738] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.738] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.738] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.739] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.739] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.739] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0235.740] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.740] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0235.740] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.741] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0235.741] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0235.741] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.742] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0235.742] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0235.742] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0235.743] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0235.743] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0235.743] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.744] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0235.744] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.745] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0235.745] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0235.745] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0235.746] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0235.746] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0235.746] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0235.747] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0235.747] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0235.747] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0235.748] CloseHandle (hObject=0x144) returned 1
	[0235.748] Sleep (dwMilliseconds=0x1f4) 
	[0236.368] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x258
	[0236.370] Process32FirstW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0236.370] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0236.371] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0236.371] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0236.371] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0236.372] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0236.372] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0236.372] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0236.373] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0236.373] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0236.374] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0236.374] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0236.374] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0236.375] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0236.375] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0236.375] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0236.376] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0236.376] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0236.376] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0236.377] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0236.377] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0236.377] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0236.378] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0236.378] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0236.378] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0236.379] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0236.379] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0236.380] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0236.380] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0236.380] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0236.381] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0236.381] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0236.382] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0236.382] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0236.382] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0236.383] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0236.383] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0236.383] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0236.384] Process32NextW (in: hSnapshot=0x258, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0236.384] CloseHandle (hObject=0x258) returned 1
	[0236.384] Sleep (dwMilliseconds=0x1f4) 
	[0237.172] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x234
	[0237.174] Process32FirstW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0237.174] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0237.175] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0237.175] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0237.175] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0237.175] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0237.176] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0237.176] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0237.177] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0237.177] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0237.177] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0237.177] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0237.178] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0237.178] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0237.178] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0237.179] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0237.179] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0237.179] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0237.180] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0237.180] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0237.180] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0237.181] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0237.181] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0237.181] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0237.182] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0237.182] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0237.182] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0237.183] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0237.183] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0237.183] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0237.184] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0237.184] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0237.184] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0237.184] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0237.185] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0237.185] Process32NextW (in: hSnapshot=0x234, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0237.185] CloseHandle (hObject=0x234) returned 1
	[0237.186] Sleep (dwMilliseconds=0x1f4) 
	[0238.018] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x168
	[0238.020] Process32FirstW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0238.020] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0238.021] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0238.021] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0238.021] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0238.022] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0238.022] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0238.022] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0238.023] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0238.023] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0238.023] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.024] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.024] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.024] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.025] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.025] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0238.025] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.026] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0238.026] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.026] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0238.027] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0238.027] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.027] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0238.027] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0238.028] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0238.028] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0238.028] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0238.029] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.029] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0238.029] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.030] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0238.030] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0238.030] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0238.031] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0238.031] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.031] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0238.036] Process32NextW (in: hSnapshot=0x168, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0238.036] CloseHandle (hObject=0x168) returned 1
	[0238.036] Sleep (dwMilliseconds=0x1f4) 
	[0238.612] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x114
	[0238.614] Process32FirstW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0238.614] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0238.615] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0238.615] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0238.615] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0238.616] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0238.616] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0238.616] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0238.617] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0238.617] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0238.618] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.618] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.618] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.619] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.619] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.619] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0238.620] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.620] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0238.620] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.621] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0238.621] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0238.621] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.622] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0238.622] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0238.622] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0238.623] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0238.623] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0238.623] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.624] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0238.624] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.625] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0238.625] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0238.625] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0238.626] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0238.626] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0238.626] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0238.627] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0238.627] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0238.628] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0238.628] CloseHandle (hObject=0x114) returned 1
	[0238.628] Sleep (dwMilliseconds=0x1f4) 
	[0239.237] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x170
	[0239.239] Process32FirstW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0239.239] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0239.240] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0239.240] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0239.240] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0239.241] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0239.241] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0239.241] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0239.242] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0239.242] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0239.242] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.243] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.243] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.243] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.244] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.244] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0239.244] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.245] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0239.245] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.245] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0239.246] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0239.246] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.246] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0239.247] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0239.247] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0239.247] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0239.248] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0239.248] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.248] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0239.249] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.249] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0239.249] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0239.250] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0239.250] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0239.250] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.251] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0239.251] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0239.251] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0239.252] Process32NextW (in: hSnapshot=0x170, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0239.252] CloseHandle (hObject=0x170) returned 1
	[0239.252] Sleep (dwMilliseconds=0x1f4) 
	[0239.784] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c
	[0239.786] Process32FirstW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0239.786] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0239.786] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0239.787] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0239.789] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0239.789] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0239.790] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0239.790] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0239.790] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0239.791] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0239.791] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.791] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.792] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.792] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.792] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.793] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0239.793] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.793] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0239.793] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.794] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0239.794] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0239.795] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.795] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0239.795] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0239.796] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0239.796] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0239.796] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0239.796] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.797] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0239.797] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.797] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0239.798] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0239.798] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0239.798] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0239.799] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0239.799] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0239.800] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0239.800] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0239.801] CloseHandle (hObject=0x10c) returned 1
	[0239.801] Sleep (dwMilliseconds=0x1f4) 
	[0240.453] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c
	[0240.455] Process32FirstW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0240.455] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0240.455] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0240.456] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0240.456] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0240.456] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0240.457] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0240.457] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0240.457] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0240.458] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0240.458] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0240.458] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0240.459] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0240.459] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0240.459] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0240.460] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0240.460] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0240.460] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0240.460] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0240.461] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0240.461] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0240.461] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0240.462] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0240.462] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0240.462] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0240.463] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0240.463] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0240.463] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0240.464] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0240.464] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0240.464] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0240.464] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0240.465] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0240.465] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0240.466] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0240.466] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0240.466] CloseHandle (hObject=0x10c) returned 1
	[0240.466] Sleep (dwMilliseconds=0x1f4) 
	[0241.028] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x204
	[0241.030] Process32FirstW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0241.030] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0241.031] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0241.031] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0241.031] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0241.031] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0241.032] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0241.032] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0241.032] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0241.033] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0241.033] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.033] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.034] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.034] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.034] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.034] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0241.035] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.035] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0241.035] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.036] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0241.036] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0241.036] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.037] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0241.037] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0241.037] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0241.037] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0241.038] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.038] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x508, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x778, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0241.038] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.039] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0241.039] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0241.039] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0241.040] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0241.040] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.040] Process32NextW (in: hSnapshot=0x204, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0241.041] CloseHandle (hObject=0x204) returned 1
	[0241.041] Sleep (dwMilliseconds=0x1f4) 
	[0241.572] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x25c
	[0241.574] Process32FirstW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0241.575] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0241.575] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0241.575] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0241.576] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0241.576] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0241.576] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0241.577] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0241.577] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0241.577] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0241.578] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.578] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.578] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.578] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.579] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.579] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0241.579] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.580] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0241.580] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.580] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0241.581] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0241.581] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.581] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0241.581] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0241.582] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0241.582] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.582] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.583] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0241.583] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0241.583] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0241.584] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0241.584] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0241.584] Process32NextW (in: hSnapshot=0x25c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0241.584] CloseHandle (hObject=0x25c) returned 1
	[0241.585] Sleep (dwMilliseconds=0x1f4) 
	[0242.191] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c
	[0242.193] Process32FirstW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0242.194] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0242.194] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0242.194] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0242.194] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0242.195] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0242.195] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0242.195] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0242.196] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0242.196] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0242.196] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.197] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.203] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.243] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.243] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.243] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0242.244] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.244] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0242.244] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.245] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0242.245] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0242.245] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.246] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0242.246] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0242.246] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0242.246] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.247] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.247] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0242.247] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0242.248] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0242.248] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0242.248] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.249] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0242.249] CloseHandle (hObject=0x10c) returned 1
	[0242.249] Sleep (dwMilliseconds=0x1f4) 
	[0242.868] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c
	[0242.870] Process32FirstW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0242.870] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0242.870] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0242.871] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0242.871] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0242.871] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0242.871] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0242.872] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0242.872] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0242.872] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0242.873] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.873] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.873] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.874] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.874] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.874] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0242.874] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.875] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0242.875] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.875] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0242.876] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0242.876] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.876] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0242.877] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0242.877] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0242.877] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.877] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.878] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0242.878] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0242.878] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0242.879] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0242.879] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0242.879] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0242.880] CloseHandle (hObject=0x10c) returned 1
	[0242.880] Sleep (dwMilliseconds=0x1f4) 
	[0243.808] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c
	[0243.811] Process32FirstW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0243.811] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0243.811] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0243.812] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0243.812] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0243.812] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0243.813] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0243.813] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0243.813] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0243.813] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0243.814] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0243.814] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0243.814] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0243.815] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0243.815] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0243.815] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0243.816] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0243.816] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0243.816] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0243.817] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0243.817] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0243.817] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0243.817] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0243.818] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0243.818] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0243.818] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0243.819] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0243.819] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0243.819] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0243.820] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0243.820] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0243.820] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0243.821] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0243.821] CloseHandle (hObject=0x10c) returned 1
	[0243.821] Sleep (dwMilliseconds=0x1f4) 
	[0244.911] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c
	[0244.913] Process32FirstW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0244.913] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0244.914] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0244.914] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0244.914] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0244.915] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0244.915] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0244.915] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0244.915] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0244.916] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0244.916] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0244.916] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0244.917] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0244.917] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0244.917] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0244.917] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0244.918] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0244.918] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0244.918] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0244.919] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0244.919] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0244.919] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0244.920] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0244.920] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0244.920] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0244.920] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0244.921] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0244.921] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0244.921] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0244.922] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0244.922] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0244.922] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0244.923] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0244.923] CloseHandle (hObject=0x10c) returned 1
	[0244.923] Sleep (dwMilliseconds=0x1f4) 
	[0245.569] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x114
	[0245.571] Process32FirstW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0245.571] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0245.572] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0245.572] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0245.572] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0245.573] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0245.573] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0245.573] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0245.574] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0245.574] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0245.574] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0245.574] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0245.575] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0245.575] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0245.575] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0245.576] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0245.576] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0245.576] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0245.577] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0245.577] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0245.577] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0245.578] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0245.578] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0245.578] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0245.578] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0245.579] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0245.579] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0245.579] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0245.580] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0245.580] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0245.580] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0245.581] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0245.581] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0245.581] CloseHandle (hObject=0x114) returned 1
	[0245.581] Sleep (dwMilliseconds=0x1f4) 
	[0246.162] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c
	[0246.163] Process32FirstW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0246.164] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0246.164] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0246.164] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0246.165] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0246.165] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0246.165] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0246.166] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0246.166] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0246.166] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0246.167] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.167] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.167] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.167] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.168] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.168] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0246.168] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.169] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0246.169] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.169] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0246.170] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0246.170] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.170] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0246.170] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0246.171] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0246.171] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.171] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.172] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0246.172] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0246.172] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0246.173] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0246.173] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.173] Process32NextW (in: hSnapshot=0x10c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0246.173] CloseHandle (hObject=0x10c) returned 1
	[0246.174] Sleep (dwMilliseconds=0x1f4) 
	[0246.726] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x254
	[0246.728] Process32FirstW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0246.728] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0246.728] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0246.729] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0246.729] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0246.729] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0246.730] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0246.730] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0246.731] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0246.731] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0246.732] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.732] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.732] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.733] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.733] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.733] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0246.734] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.734] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0246.734] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.735] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0246.735] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0246.735] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.735] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0246.736] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0246.736] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0246.736] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.737] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.737] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0246.737] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0246.738] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0246.738] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0246.738] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0246.739] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0246.739] CloseHandle (hObject=0x254) returned 1
	[0246.739] Sleep (dwMilliseconds=0x1f4) 
	[0247.268] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0247.269] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0247.270] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0247.270] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0247.270] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0247.271] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0247.271] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0247.271] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0247.272] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0247.272] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0247.272] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0247.273] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.273] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.273] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.274] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.274] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.274] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0247.275] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.275] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0247.275] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.276] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0247.276] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0247.276] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.276] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0247.277] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0247.277] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0247.277] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.278] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.278] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0247.278] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0247.279] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0247.279] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.279] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0247.280] CloseHandle (hObject=0x22c) returned 1
	[0247.280] Sleep (dwMilliseconds=0x1f4) 
	[0247.782] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0247.783] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0247.784] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0247.784] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0247.785] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0247.785] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0247.785] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0247.785] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0247.786] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0247.786] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0247.786] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0247.787] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.787] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.787] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.788] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.789] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.789] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0247.789] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.790] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0247.790] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.790] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0247.791] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0247.791] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.791] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0247.791] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0247.792] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0247.792] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.792] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.793] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0247.793] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0247.793] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0247.794] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0247.794] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0247.794] CloseHandle (hObject=0x20c) returned 1
	[0247.794] Sleep (dwMilliseconds=0x1f4) 
	[0248.427] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0248.428] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0248.429] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0248.429] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0248.429] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0248.430] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0248.430] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0248.430] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0248.430] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0248.431] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0248.431] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0248.431] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.432] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.432] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.432] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.433] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.433] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0248.433] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.434] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0248.434] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.434] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0248.435] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0248.435] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.435] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0248.435] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0248.436] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0248.436] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.436] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.437] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0248.437] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0248.438] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0248.438] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.438] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0248.438] CloseHandle (hObject=0x20c) returned 1
	[0248.439] Sleep (dwMilliseconds=0x1f4) 
	[0248.977] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0248.979] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0248.979] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0248.979] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0248.980] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0248.980] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0248.980] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0248.981] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0248.981] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0248.981] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0248.982] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0248.982] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.982] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.983] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.983] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.983] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.983] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0248.984] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.984] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0248.984] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.985] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0248.985] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0248.985] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.986] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0248.986] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0248.986] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0248.987] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.987] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.987] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0248.988] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0248.988] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0248.988] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0248.988] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0248.989] CloseHandle (hObject=0x22c) returned 1
	[0248.989] Sleep (dwMilliseconds=0x1f4) 
	[0249.563] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0249.565] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0249.566] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0249.566] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0249.566] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0249.566] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0249.567] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0249.567] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0249.567] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0249.568] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0249.568] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0249.568] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0249.569] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0249.569] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0249.569] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0249.570] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0249.570] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0249.570] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0249.571] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0249.571] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0249.571] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0249.571] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0249.572] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0249.572] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0249.572] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0249.573] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0249.573] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0249.573] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0249.574] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0249.574] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0249.574] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0249.574] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0249.575] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0249.575] CloseHandle (hObject=0x22c) returned 1
	[0249.575] Sleep (dwMilliseconds=0x1f4) 
	[0250.151] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0250.153] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0250.153] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0250.154] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0250.154] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0250.154] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0250.155] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0250.155] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0250.155] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0250.156] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0250.156] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0250.156] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.157] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.157] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.157] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.158] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.158] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0250.158] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.158] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0250.159] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.159] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0250.159] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0250.160] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.160] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0250.160] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0250.161] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0250.161] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.161] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.162] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0250.162] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0250.162] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0250.163] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.163] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0250.163] CloseHandle (hObject=0x22c) returned 1
	[0250.163] Sleep (dwMilliseconds=0x1f4) 
	[0250.709] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0250.711] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0250.711] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0250.711] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0250.711] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0250.712] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0250.712] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0250.712] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0250.713] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0250.713] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0250.713] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0250.714] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.714] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.714] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.714] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.715] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.715] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0250.715] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.716] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0250.716] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.716] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0250.717] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0250.717] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.717] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0250.718] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0250.718] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0250.718] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.718] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.719] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0250.719] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0250.719] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0250.720] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0250.720] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0250.720] CloseHandle (hObject=0x22c) returned 1
	[0250.720] Sleep (dwMilliseconds=0x1f4) 
	[0251.276] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0251.278] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0251.278] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0251.279] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0251.279] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0251.280] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0251.280] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0251.280] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0251.281] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0251.281] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0251.281] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0251.281] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.282] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.282] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.282] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.283] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.283] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0251.283] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.284] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0251.284] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.284] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0251.285] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0251.285] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.285] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0251.285] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0251.286] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0251.286] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.286] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.287] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0251.287] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0251.287] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0251.288] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.288] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0251.288] CloseHandle (hObject=0x22c) returned 1
	[0251.288] Sleep (dwMilliseconds=0x1f4) 
	[0251.827] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0251.830] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0251.830] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0251.831] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0251.831] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0251.834] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0251.834] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0251.834] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0251.835] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0251.835] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0251.835] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0251.836] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.836] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.836] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.837] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.837] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.837] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0251.838] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.838] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0251.838] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.838] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0251.839] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0251.839] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.839] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0251.840] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0251.840] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0251.840] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.841] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.841] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0251.841] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0251.842] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0251.842] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0251.842] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0251.843] CloseHandle (hObject=0x22c) returned 1
	[0251.843] Sleep (dwMilliseconds=0x1f4) 
	[0252.370] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0252.371] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0252.372] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0252.372] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0252.372] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0252.373] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0252.373] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0252.373] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0252.373] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0252.374] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0252.374] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0252.374] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0252.375] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0252.375] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0252.375] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0252.376] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0252.376] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0252.376] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0252.377] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0252.377] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0252.377] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0252.377] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0252.378] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0252.378] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0252.378] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0252.379] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0252.379] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0252.379] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0252.379] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0252.380] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0252.380] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0252.380] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0252.381] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0252.381] CloseHandle (hObject=0x22c) returned 1
	[0252.381] Sleep (dwMilliseconds=0x1f4) 
	[0253.159] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0253.163] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0253.164] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0253.164] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0253.164] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0253.165] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0253.165] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0253.166] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0253.166] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0253.166] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0253.166] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0253.167] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.167] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.167] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.168] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.168] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.168] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0253.169] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.169] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0253.169] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.170] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0253.170] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0253.170] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.171] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0253.171] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0253.171] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0253.171] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.172] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.172] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0253.172] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0253.173] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0253.173] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.173] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0253.174] CloseHandle (hObject=0x22c) returned 1
	[0253.174] Sleep (dwMilliseconds=0x1f4) 
	[0253.741] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0253.743] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0253.743] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0253.743] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0253.744] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0253.744] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0253.744] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0253.745] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0253.745] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0253.745] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0253.746] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0253.746] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.746] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.747] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.747] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.747] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.748] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0253.748] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.748] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0253.749] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.749] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0253.749] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0253.749] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.750] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0253.750] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0253.750] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0253.751] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.751] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.751] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0253.752] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0253.752] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0253.752] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0253.753] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0253.753] CloseHandle (hObject=0x22c) returned 1
	[0253.753] Sleep (dwMilliseconds=0x1f4) 
	[0254.394] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0254.406] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0254.408] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0254.409] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0254.418] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0254.419] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0254.421] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0254.429] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0254.430] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0254.441] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0254.443] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0254.450] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0254.454] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0254.460] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0254.463] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0254.464] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0254.471] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0254.475] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0254.475] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0254.477] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0254.478] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0254.485] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0254.487] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0254.496] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0254.497] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0254.501] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0254.510] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0254.511] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0254.511] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0254.512] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0254.513] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0254.522] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0254.531] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0254.532] CloseHandle (hObject=0x22c) returned 1
	[0254.533] Sleep (dwMilliseconds=0x1f4) 
	[0255.083] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0255.084] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0255.085] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0255.085] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0255.085] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0255.085] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0255.086] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0255.086] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0255.087] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0255.087] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0255.087] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0255.087] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.088] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.088] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.088] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.089] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.089] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0255.089] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.090] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0255.090] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.090] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0255.090] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0255.091] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.091] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0255.091] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0255.092] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0255.092] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.092] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.093] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0255.093] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0255.093] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0255.093] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.094] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0255.094] CloseHandle (hObject=0x22c) returned 1
	[0255.094] Sleep (dwMilliseconds=0x1f4) 
	[0255.622] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0255.624] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0255.624] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0255.625] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0255.625] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0255.625] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0255.625] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0255.626] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0255.626] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0255.626] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0255.627] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0255.627] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.627] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.628] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.628] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.628] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.629] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0255.629] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.629] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0255.630] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.630] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0255.630] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0255.631] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.631] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0255.631] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0255.632] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0255.632] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.632] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.633] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0255.633] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0255.633] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0255.633] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0255.634] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0255.634] CloseHandle (hObject=0x22c) returned 1
	[0255.634] Sleep (dwMilliseconds=0x1f4) 
	[0256.149] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0256.150] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0256.151] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0256.151] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0256.151] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0256.151] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0256.152] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0256.152] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0256.152] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0256.153] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0256.153] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0256.153] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.153] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.154] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.154] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.154] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.155] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0256.155] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.155] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0256.155] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.156] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0256.156] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0256.156] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.157] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0256.157] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0256.157] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0256.157] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.158] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0256.158] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0256.158] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0256.158] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.159] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0256.159] CloseHandle (hObject=0x22c) returned 1
	[0256.159] Sleep (dwMilliseconds=0x1f4) 
	[0256.708] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0256.710] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0256.710] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0256.710] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0256.710] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0256.711] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0256.711] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0256.711] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0256.711] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0256.712] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0256.712] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0256.712] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.713] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.713] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.713] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.713] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.714] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0256.714] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.714] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0256.715] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.715] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0256.715] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0256.715] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.716] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0256.716] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0256.716] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0256.716] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.717] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0256.717] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0256.717] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0256.717] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0256.718] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0256.718] CloseHandle (hObject=0x22c) returned 1
	[0256.718] Sleep (dwMilliseconds=0x1f4) 
	[0257.302] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x110
	[0257.303] Process32FirstW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0257.303] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0257.304] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0257.304] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0257.304] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0257.304] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0257.305] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0257.305] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0257.305] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0257.305] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0257.306] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0257.306] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0257.306] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0257.306] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0257.307] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0257.307] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0257.307] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0257.308] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0257.308] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0257.308] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0257.308] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0257.309] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0257.309] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0257.309] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0257.309] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0257.310] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0257.310] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0257.310] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0257.311] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0257.311] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0257.311] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0257.312] CloseHandle (hObject=0x110) returned 1
	[0257.312] Sleep (dwMilliseconds=0x1f4) 
	[0257.998] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144
	[0257.999] Process32FirstW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0257.999] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0258.000] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0258.000] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0258.000] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0258.001] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0258.001] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0258.001] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0258.001] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0258.002] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0258.002] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.002] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.003] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.003] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.003] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.003] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0258.004] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.004] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0258.004] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.004] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0258.005] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0258.005] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.005] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0258.005] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0258.006] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0258.006] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.006] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0258.007] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0258.007] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0258.007] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.007] Process32NextW (in: hSnapshot=0x144, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0258.008] CloseHandle (hObject=0x144) returned 1
	[0258.008] Sleep (dwMilliseconds=0x1f4) 
	[0258.545] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x254
	[0258.547] Process32FirstW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0258.547] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0258.548] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0258.548] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0258.548] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0258.548] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0258.549] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0258.549] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0258.549] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0258.550] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0258.550] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.550] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.550] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.551] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.551] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.551] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0258.551] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.552] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0258.552] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.552] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0258.553] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0258.553] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.553] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0258.553] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0258.554] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0258.554] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.554] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0258.554] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0258.555] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0258.555] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0258.555] Process32NextW (in: hSnapshot=0x254, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0258.556] CloseHandle (hObject=0x254) returned 1
	[0258.556] Sleep (dwMilliseconds=0x1f4) 
	[0259.112] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0259.114] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0259.115] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0259.115] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0259.115] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0259.116] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0259.116] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0259.116] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0259.116] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0259.117] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0259.117] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0259.117] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.118] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.118] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.118] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.118] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.119] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0259.119] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.119] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0259.120] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.120] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0259.120] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0259.120] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.121] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0259.121] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0259.121] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0259.122] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.122] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0259.122] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0259.122] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0259.123] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.123] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0259.123] CloseHandle (hObject=0x22c) returned 1
	[0259.123] Sleep (dwMilliseconds=0x1f4) 
	[0259.722] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0259.724] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0259.724] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0259.725] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0259.725] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0259.725] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0259.725] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0259.726] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0259.726] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0259.726] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0259.726] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0259.727] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.727] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.727] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.727] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.728] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.728] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0259.728] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.729] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0259.729] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.729] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0259.729] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0259.730] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.730] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0259.730] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0259.730] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0259.731] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.731] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0259.731] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0259.732] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0259.732] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0259.732] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0259.732] CloseHandle (hObject=0x22c) returned 1
	[0259.733] Sleep (dwMilliseconds=0x1f4) 
	[0260.252] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0260.254] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0260.254] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0260.254] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0260.255] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0260.255] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0260.255] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0260.256] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0260.256] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0260.256] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0260.256] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0260.257] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.257] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.257] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.258] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.258] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.258] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0260.259] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.259] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0260.259] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.259] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0260.260] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0260.260] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.260] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0260.260] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0260.261] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0260.261] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.261] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0260.262] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0260.262] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0260.262] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.263] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0260.263] CloseHandle (hObject=0x22c) returned 1
	[0260.263] Sleep (dwMilliseconds=0x1f4) 
	[0260.873] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x22c
	[0260.875] Process32FirstW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0260.876] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0260.876] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0260.876] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0260.876] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0260.877] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0260.877] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0260.877] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0260.877] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0260.878] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0260.878] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.878] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.878] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.879] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.879] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.879] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0260.880] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.880] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0260.880] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.880] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0260.881] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0260.881] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.881] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0260.881] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0260.882] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0260.882] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.882] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0260.883] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0260.883] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0260.883] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0260.883] Process32NextW (in: hSnapshot=0x22c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0260.884] CloseHandle (hObject=0x22c) returned 1
	[0260.884] Sleep (dwMilliseconds=0x1f4) 
	[0261.541] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b8
	[0261.543] Process32FirstW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0261.543] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0261.543] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0261.544] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0261.544] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0261.544] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0261.544] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0261.545] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0261.545] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0261.545] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0261.545] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0261.546] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0261.546] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0261.546] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0261.546] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0261.547] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0261.547] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0261.547] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0261.548] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0261.548] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0261.548] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0261.548] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0261.549] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0261.549] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0261.549] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0261.549] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0261.550] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0261.550] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0261.550] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0261.550] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0261.551] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0261.551] CloseHandle (hObject=0x1b8) returned 1
	[0261.551] Sleep (dwMilliseconds=0x1f4) 
	[0262.307] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x114
	[0262.309] Process32FirstW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0262.310] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0262.310] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0262.310] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0262.310] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0262.311] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0262.313] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0262.313] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0262.314] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0262.314] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0262.314] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.315] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.315] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.315] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.315] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.316] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0262.316] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.316] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0262.316] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.317] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0262.317] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0262.317] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.317] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0262.318] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0262.318] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0262.318] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.319] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0262.319] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0262.319] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0262.319] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.326] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0262.327] CloseHandle (hObject=0x114) returned 1
	[0262.327] Sleep (dwMilliseconds=0x1f4) 
	[0262.879] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x110
	[0262.880] Process32FirstW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0262.881] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0262.881] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0262.881] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0262.882] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0262.882] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0262.882] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0262.883] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0262.883] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0262.883] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0262.883] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.884] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.884] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.884] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.884] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.885] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0262.885] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.885] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0262.886] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.886] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0262.886] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0262.886] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.887] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0262.887] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0262.887] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0262.887] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.888] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0262.888] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0262.888] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0262.889] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0262.889] Process32NextW (in: hSnapshot=0x110, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0262.889] CloseHandle (hObject=0x110) returned 1
	[0262.889] Sleep (dwMilliseconds=0x1f4) 
	[0263.444] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x260
	[0263.446] Process32FirstW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0263.446] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0263.446] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0263.447] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0263.447] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0263.447] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0263.448] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0263.448] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0263.448] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0263.449] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0263.449] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0263.449] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0263.449] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0263.450] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0263.450] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0263.450] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0263.451] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0263.451] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0263.451] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0263.451] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0263.452] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0263.452] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0263.452] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0263.453] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0263.453] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0263.453] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0263.453] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0263.454] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0263.454] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0263.454] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0263.455] Process32NextW (in: hSnapshot=0x260, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0263.455] CloseHandle (hObject=0x260) returned 1
	[0263.455] Sleep (dwMilliseconds=0x1f4) 
	[0264.121] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x114
	[0264.124] Process32FirstW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0264.125] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0264.125] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0264.125] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0264.126] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0264.126] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0264.126] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0264.126] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0264.127] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0264.127] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0264.127] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.127] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.128] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.128] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.128] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.129] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0264.129] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.129] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0264.129] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.130] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0264.130] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0264.130] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.131] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0264.131] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0264.131] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0264.131] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.132] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0264.132] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0264.132] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0264.132] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.133] Process32NextW (in: hSnapshot=0x114, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0264.133] CloseHandle (hObject=0x114) returned 1
	[0264.133] Sleep (dwMilliseconds=0x1f4) 
	[0264.677] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b8
	[0264.679] Process32FirstW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0264.679] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0264.680] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0264.680] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0264.680] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0264.680] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0264.681] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0264.681] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0264.681] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0264.682] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0264.682] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.682] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.682] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.683] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.683] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.683] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0264.683] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.684] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0264.684] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.684] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0264.685] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0264.685] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.685] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0264.685] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0264.686] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0264.686] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.686] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0264.686] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0264.687] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0264.687] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0264.687] Process32NextW (in: hSnapshot=0x1b8, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0264.688] CloseHandle (hObject=0x1b8) returned 1
	[0264.688] Sleep (dwMilliseconds=0x1f4) 
	[0265.221] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x20c
	[0265.223] Process32FirstW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0265.223] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0265.224] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0265.224] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0265.224] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0265.225] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0265.225] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0265.225] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0265.225] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0265.226] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0265.226] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0265.226] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0265.227] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0265.227] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0265.227] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0265.227] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0265.228] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0265.228] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0265.228] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0265.228] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0265.229] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0265.229] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0265.229] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0265.230] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0265.230] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0265.230] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0265.230] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0265.231] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0265.231] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0265.231] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0265.232] Process32NextW (in: hSnapshot=0x20c, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0265.232] CloseHandle (hObject=0x20c) returned 1
	[0265.232] Sleep (dwMilliseconds=0x1f4) 
	[0266.017] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x210
	[0266.019] Process32FirstW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0266.019] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0266.020] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0266.020] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0266.021] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0266.021] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0266.021] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0266.021] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0266.022] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0266.022] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0266.022] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.022] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.023] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.023] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.023] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.024] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0266.024] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.024] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0266.024] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.025] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0266.025] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0266.025] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.026] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0266.026] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0266.026] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0266.026] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.027] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0266.027] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0266.027] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0266.027] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.028] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0266.028] CloseHandle (hObject=0x210) returned 1
	[0266.028] Sleep (dwMilliseconds=0x1f4) 
	[0266.692] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x210
	[0266.701] Process32FirstW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0266.701] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0266.702] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0266.702] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0266.702] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0266.703] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0266.703] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0266.703] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0266.703] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0266.704] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0266.704] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.704] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.705] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.705] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.705] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.706] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0266.706] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.706] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0266.706] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.707] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0266.707] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0266.707] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.708] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0266.708] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0266.708] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0266.708] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.709] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x794, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0266.709] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x53c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x508, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0266.709] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x7d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mmc.exe")) returned 1
	[0266.710] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0266.710] Process32NextW (in: hSnapshot=0x210, lppe=0xd5f7bc | out: lppe=0xd5f7bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x66c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0266.710] CloseHandle (hObject=0x210) returned 1
	[0266.710] Sleep (dwMilliseconds=0x1f4) 

Thread:
	id = 48
	os_tid = 0x654

	[0132.028] GetProcessHeap () returned 0x800000
	[0132.028] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x21a) returned 0x822a00
	[0132.028] GetProcessHeap () returned 0x800000
	[0132.028] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x28) returned 0x81e5e0
	[0132.028] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0xd4
	[0132.028] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0xd8
	[0132.028] GetComputerNameW (in: lpBuffer=0x822a10, nSize=0x263f888 | out: lpBuffer="XDUWTFONO", nSize=0x263f888) returned 1
	[0132.029] GetProcessHeap () returned 0x800000
	[0132.029] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x26) returned 0x81e738
	[0132.029] GetProcessHeap () returned 0x800000
	[0132.029] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x822c28
	[0132.029] GetProcessHeap () returned 0x800000
	[0132.029] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x826c30
	[0132.029] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f83c | out: lphEnum=0x263f83c*=0x8e05b0) returned 0x0
	[0133.541] WNetEnumResourceW (in: hEnum=0x8e05b0, lpcCount=0x263f830, lpBuffer=0x822c28, lpBufferSize=0x263f844 | out: lpcCount=0x263f830, lpBuffer=0x822c28, lpBufferSize=0x263f844) returned 0x103
	[0133.541] WNetCloseEnum (hEnum=0x8e05b0) returned 0x0
	[0133.541] GetProcessHeap () returned 0x800000
	[0133.541] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0133.541] GetProcessHeap () returned 0x800000
	[0133.542] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x826c30 | out: hHeap=0x800000) returned 1
	[0133.542] GetProcessHeap () returned 0x800000
	[0133.542] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x8e39d0
	[0133.542] GetProcessHeap () returned 0x800000
	[0133.542] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0133.542] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f824 | out: lphEnum=0x263f824*=0x837608) returned 0x0
	[0133.542] WNetEnumResourceW (in: hEnum=0x837608, lpcCount=0x263f818, lpBuffer=0x8e39d0, lpBufferSize=0x263f82c | out: lpcCount=0x263f818, lpBuffer=0x8e39d0, lpBufferSize=0x263f82c) returned 0x103
	[0133.542] WNetCloseEnum (hEnum=0x837608) returned 0x0
	[0133.542] GetProcessHeap () returned 0x800000
	[0133.542] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e39d0 | out: hHeap=0x800000) returned 1
	[0133.542] GetProcessHeap () returned 0x800000
	[0133.542] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0133.542] GetProcessHeap () returned 0x800000
	[0133.542] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x8e39d0
	[0133.542] GetProcessHeap () returned 0x800000
	[0133.542] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0133.542] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f80c | out: lphEnum=0x263f80c*=0x8e05b0) returned 0x0
	[0147.320] WNetEnumResourceW (in: hEnum=0x8e05b0, lpcCount=0x263f800, lpBuffer=0x8e39d0, lpBufferSize=0x263f814 | out: lpcCount=0x263f800, lpBuffer=0x8e39d0, lpBufferSize=0x263f814) returned 0x0
	[0147.320] GetProcessHeap () returned 0x800000
	[0147.320] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x8eb9d8
	[0147.320] GetProcessHeap () returned 0x800000
	[0147.321] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e20058
	[0147.321] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x8e39d0, lphEnum=0x263f7c4 | out: lphEnum=0x263f7c4*=0x8e06b8) returned 0x0
	[0160.346] WNetEnumResourceW (in: hEnum=0x8e06b8, lpcCount=0x263f7b8, lpBuffer=0x8eb9d8, lpBufferSize=0x263f7cc | out: lpcCount=0x263f7b8, lpBuffer=0x8eb9d8, lpBufferSize=0x263f7cc) returned 0x0
	[0160.347] WNetEnumResourceW (in: hEnum=0x8e06b8, lpcCount=0x263f7b8, lpBuffer=0x8eb9d8, lpBufferSize=0x263f7cc | out: lpcCount=0x263f7b8, lpBuffer=0x8eb9d8, lpBufferSize=0x263f7cc) returned 0x103
	[0160.347] WNetCloseEnum (hEnum=0x8e06b8) returned 0x0
	[0160.347] GetProcessHeap () returned 0x800000
	[0160.347] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8eb9d8 | out: hHeap=0x800000) returned 1
	[0160.347] GetProcessHeap () returned 0x800000
	[0160.347] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0160.352] WNetEnumResourceW (in: hEnum=0x8e05b0, lpcCount=0x263f800, lpBuffer=0x8e39d0, lpBufferSize=0x263f814 | out: lpcCount=0x263f800, lpBuffer=0x8e39d0, lpBufferSize=0x263f814) returned 0x103
	[0160.352] WNetCloseEnum (hEnum=0x8e05b0) returned 0x0
	[0160.352] GetProcessHeap () returned 0x800000
	[0160.352] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e39d0 | out: hHeap=0x800000) returned 1
	[0160.353] GetProcessHeap () returned 0x800000
	[0160.353] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0160.353] GetProcessHeap () returned 0x800000
	[0160.353] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x8e39d0
	[0160.353] GetProcessHeap () returned 0x800000
	[0160.353] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0160.353] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f83c | out: lphEnum=0x263f83c*=0x837648) returned 0x0
	[0160.354] WNetEnumResourceW (in: hEnum=0x837648, lpcCount=0x263f830, lpBuffer=0x8e39d0, lpBufferSize=0x263f844 | out: lpcCount=0x263f830, lpBuffer=0x8e39d0, lpBufferSize=0x263f844) returned 0x103
	[0160.354] WNetCloseEnum (hEnum=0x837648) returned 0x0
	[0160.354] GetProcessHeap () returned 0x800000
	[0160.354] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e39d0 | out: hHeap=0x800000) returned 1
	[0160.354] GetProcessHeap () returned 0x800000
	[0160.354] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0160.354] GetProcessHeap () returned 0x800000
	[0160.354] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x8e39d0
	[0160.354] GetProcessHeap () returned 0x800000
	[0160.354] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0160.354] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f824 | out: lphEnum=0x263f824*=0x34d1568) returned 0x0
	[0160.355] WNetEnumResourceW (in: hEnum=0x34d1568, lpcCount=0x263f818, lpBuffer=0x8e39d0, lpBufferSize=0x263f82c | out: lpcCount=0x263f818, lpBuffer=0x8e39d0, lpBufferSize=0x263f82c) returned 0x0
	[0160.355] GetProcessHeap () returned 0x800000
	[0160.355] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x8eb9d8
	[0160.355] GetProcessHeap () returned 0x800000
	[0160.355] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0160.355] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x8e3a10, lphEnum=0x263f7dc | out: lphEnum=0x263f7dc*=0x0) returned 0x4c6
	[0160.357] GetProcessHeap () returned 0x800000
	[0160.357] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8eb9d8 | out: hHeap=0x800000) returned 1
	[0160.357] GetProcessHeap () returned 0x800000
	[0160.357] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0160.357] GetProcessHeap () returned 0x800000
	[0160.357] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x8eb9d8
	[0160.357] GetProcessHeap () returned 0x800000
	[0160.357] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0160.357] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x8e39f0, lphEnum=0x263f7dc | out: lphEnum=0x263f7dc*=0x0) returned 0x4b8
	[0173.371] GetProcessHeap () returned 0x800000
	[0173.371] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8eb9d8 | out: hHeap=0x800000) returned 1
	[0173.371] GetProcessHeap () returned 0x800000
	[0173.371] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0173.371] GetProcessHeap () returned 0x800000
	[0173.371] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x8eb9d8
	[0173.371] GetProcessHeap () returned 0x800000
	[0173.371] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0173.371] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x8e39d0, lphEnum=0x263f7dc | out: lphEnum=0x263f7dc*=0x837668) returned 0x0
	[0173.558] WNetEnumResourceW (in: hEnum=0x837668, lpcCount=0x263f7d0, lpBuffer=0x8eb9d8, lpBufferSize=0x263f7e4 | out: lpcCount=0x263f7d0, lpBuffer=0x8eb9d8, lpBufferSize=0x263f7e4) returned 0x103
	[0173.558] WNetCloseEnum (hEnum=0x837668) returned 0x0
	[0173.558] GetProcessHeap () returned 0x800000
	[0173.558] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8eb9d8 | out: hHeap=0x800000) returned 1
	[0173.560] GetProcessHeap () returned 0x800000
	[0173.560] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0173.560] WNetEnumResourceW (in: hEnum=0x34d1568, lpcCount=0x263f818, lpBuffer=0x8e39d0, lpBufferSize=0x263f82c | out: lpcCount=0x263f818, lpBuffer=0x8e39d0, lpBufferSize=0x263f82c) returned 0x103
	[0173.560] WNetCloseEnum (hEnum=0x34d1568) returned 0x0
	[0173.560] GetProcessHeap () returned 0x800000
	[0173.560] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e39d0 | out: hHeap=0x800000) returned 1
	[0173.560] GetProcessHeap () returned 0x800000
	[0173.560] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0173.560] GetProcessHeap () returned 0x800000
	[0173.560] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x3a98) returned 0x8e39d0
	[0173.560] GetIpAddrTable (in: pIpAddrTable=0x8e39d0, pdwSize=0x263f824, bOrder=0 | out: pIpAddrTable=0x8e39d0, pdwSize=0x263f824) returned 0x0
	[0173.857] htonl (hostlong=0x4700a8c0) returned 0xc0a80047
	[0173.857] htonl (hostlong=0x4700a8c0) returned 0xc0a80047
	[0173.857] htonl (hostlong=0xffffff) returned 0xffffff00
	[0173.857] htons (hostshort=0x1bd) returned 0xbd01
	[0173.857] GetProcessHeap () returned 0x800000
	[0173.857] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x800) returned 0x3566d38
	[0173.857] GetProcessHeap () returned 0x800000
	[0173.857] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x800) returned 0x356adf8
	[0173.857] htonl (hostlong=0xc0a80000) returned 0xa8c0
	[0173.857] socket (af=2, type=1, protocol=6) returned 0x210
	[0173.876] ioctlsocket (in: s=0x210, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.876] connect (s=0x210, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.0"), namelen=16) returned -1
	[0173.881] WSAGetLastError () returned 10035
	[0173.881] htonl (hostlong=0xc0a80001) returned 0x100a8c0
	[0173.881] socket (af=2, type=1, protocol=6) returned 0x228
	[0173.881] ioctlsocket (in: s=0x228, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.881] connect (s=0x228, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.1"), namelen=16) returned -1
	[0173.881] WSAGetLastError () returned 10035
	[0173.881] htonl (hostlong=0xc0a80002) returned 0x200a8c0
	[0173.881] socket (af=2, type=1, protocol=6) returned 0x22c
	[0173.882] ioctlsocket (in: s=0x22c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.882] connect (s=0x22c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.2"), namelen=16) returned -1
	[0173.882] WSAGetLastError () returned 10035
	[0173.882] htonl (hostlong=0xc0a80003) returned 0x300a8c0
	[0173.882] socket (af=2, type=1, protocol=6) returned 0x230
	[0173.882] ioctlsocket (in: s=0x230, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.882] connect (s=0x230, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.3"), namelen=16) returned -1
	[0173.883] WSAGetLastError () returned 10035
	[0173.883] htonl (hostlong=0xc0a80004) returned 0x400a8c0
	[0173.883] socket (af=2, type=1, protocol=6) returned 0x234
	[0173.883] ioctlsocket (in: s=0x234, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.883] connect (s=0x234, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.4"), namelen=16) returned -1
	[0173.883] WSAGetLastError () returned 10035
	[0173.883] htonl (hostlong=0xc0a80005) returned 0x500a8c0
	[0173.883] socket (af=2, type=1, protocol=6) returned 0x238
	[0173.884] ioctlsocket (in: s=0x238, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.884] connect (s=0x238, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.5"), namelen=16) returned -1
	[0173.884] WSAGetLastError () returned 10035
	[0173.884] htonl (hostlong=0xc0a80006) returned 0x600a8c0
	[0173.884] socket (af=2, type=1, protocol=6) returned 0x23c
	[0173.885] ioctlsocket (in: s=0x23c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.885] connect (s=0x23c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.6"), namelen=16) returned -1
	[0173.885] WSAGetLastError () returned 10035
	[0173.885] htonl (hostlong=0xc0a80007) returned 0x700a8c0
	[0173.885] socket (af=2, type=1, protocol=6) returned 0x240
	[0173.885] ioctlsocket (in: s=0x240, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.885] connect (s=0x240, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.7"), namelen=16) returned -1
	[0173.886] WSAGetLastError () returned 10035
	[0173.886] htonl (hostlong=0xc0a80008) returned 0x800a8c0
	[0173.886] socket (af=2, type=1, protocol=6) returned 0x244
	[0173.886] ioctlsocket (in: s=0x244, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.886] connect (s=0x244, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.8"), namelen=16) returned -1
	[0173.886] WSAGetLastError () returned 10035
	[0173.886] htonl (hostlong=0xc0a80009) returned 0x900a8c0
	[0173.886] socket (af=2, type=1, protocol=6) returned 0x248
	[0173.886] ioctlsocket (in: s=0x248, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.887] connect (s=0x248, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.9"), namelen=16) returned -1
	[0173.887] WSAGetLastError () returned 10035
	[0173.887] htonl (hostlong=0xc0a8000a) returned 0xa00a8c0
	[0173.887] socket (af=2, type=1, protocol=6) returned 0x24c
	[0173.887] ioctlsocket (in: s=0x24c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.887] connect (s=0x24c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.10"), namelen=16) returned -1
	[0173.888] WSAGetLastError () returned 10035
	[0173.888] htonl (hostlong=0xc0a8000b) returned 0xb00a8c0
	[0173.888] socket (af=2, type=1, protocol=6) returned 0x250
	[0173.888] ioctlsocket (in: s=0x250, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.888] connect (s=0x250, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.11"), namelen=16) returned -1
	[0173.888] WSAGetLastError () returned 10035
	[0173.888] htonl (hostlong=0xc0a8000c) returned 0xc00a8c0
	[0173.888] socket (af=2, type=1, protocol=6) returned 0x254
	[0173.888] ioctlsocket (in: s=0x254, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.888] connect (s=0x254, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.12"), namelen=16) returned -1
	[0173.889] WSAGetLastError () returned 10035
	[0173.889] htonl (hostlong=0xc0a8000d) returned 0xd00a8c0
	[0173.889] socket (af=2, type=1, protocol=6) returned 0x258
	[0173.889] ioctlsocket (in: s=0x258, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.889] connect (s=0x258, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.13"), namelen=16) returned -1
	[0173.889] WSAGetLastError () returned 10035
	[0173.889] htonl (hostlong=0xc0a8000e) returned 0xe00a8c0
	[0173.889] socket (af=2, type=1, protocol=6) returned 0x25c
	[0173.890] ioctlsocket (in: s=0x25c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.890] connect (s=0x25c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.14"), namelen=16) returned -1
	[0173.890] WSAGetLastError () returned 10035
	[0173.890] htonl (hostlong=0xc0a8000f) returned 0xf00a8c0
	[0173.890] socket (af=2, type=1, protocol=6) returned 0x260
	[0173.890] ioctlsocket (in: s=0x260, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.890] connect (s=0x260, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.15"), namelen=16) returned -1
	[0173.891] WSAGetLastError () returned 10035
	[0173.891] htonl (hostlong=0xc0a80010) returned 0x1000a8c0
	[0173.891] socket (af=2, type=1, protocol=6) returned 0x264
	[0173.891] ioctlsocket (in: s=0x264, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.891] connect (s=0x264, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.16"), namelen=16) returned -1
	[0173.892] WSAGetLastError () returned 10035
	[0173.892] htonl (hostlong=0xc0a80011) returned 0x1100a8c0
	[0173.892] socket (af=2, type=1, protocol=6) returned 0x268
	[0173.892] ioctlsocket (in: s=0x268, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.892] connect (s=0x268, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.17"), namelen=16) returned -1
	[0173.893] WSAGetLastError () returned 10035
	[0173.893] htonl (hostlong=0xc0a80012) returned 0x1200a8c0
	[0173.893] socket (af=2, type=1, protocol=6) returned 0x26c
	[0173.893] ioctlsocket (in: s=0x26c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.893] connect (s=0x26c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.18"), namelen=16) returned -1
	[0173.894] WSAGetLastError () returned 10035
	[0173.894] htonl (hostlong=0xc0a80013) returned 0x1300a8c0
	[0173.894] socket (af=2, type=1, protocol=6) returned 0x270
	[0173.894] ioctlsocket (in: s=0x270, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.894] connect (s=0x270, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.19"), namelen=16) returned -1
	[0173.894] WSAGetLastError () returned 10035
	[0173.894] htonl (hostlong=0xc0a80014) returned 0x1400a8c0
	[0173.894] socket (af=2, type=1, protocol=6) returned 0x274
	[0173.895] ioctlsocket (in: s=0x274, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.895] connect (s=0x274, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.20"), namelen=16) returned -1
	[0173.895] WSAGetLastError () returned 10035
	[0173.895] htonl (hostlong=0xc0a80015) returned 0x1500a8c0
	[0173.895] socket (af=2, type=1, protocol=6) returned 0x278
	[0173.895] ioctlsocket (in: s=0x278, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.895] connect (s=0x278, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.21"), namelen=16) returned -1
	[0173.896] WSAGetLastError () returned 10035
	[0173.896] htonl (hostlong=0xc0a80016) returned 0x1600a8c0
	[0173.896] socket (af=2, type=1, protocol=6) returned 0x27c
	[0173.896] ioctlsocket (in: s=0x27c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.896] connect (s=0x27c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.22"), namelen=16) returned -1
	[0173.896] WSAGetLastError () returned 10035
	[0173.896] htonl (hostlong=0xc0a80017) returned 0x1700a8c0
	[0173.896] socket (af=2, type=1, protocol=6) returned 0x280
	[0173.896] ioctlsocket (in: s=0x280, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.896] connect (s=0x280, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.23"), namelen=16) returned -1
	[0173.897] WSAGetLastError () returned 10035
	[0173.897] htonl (hostlong=0xc0a80018) returned 0x1800a8c0
	[0173.897] socket (af=2, type=1, protocol=6) returned 0x284
	[0173.897] ioctlsocket (in: s=0x284, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.897] connect (s=0x284, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.24"), namelen=16) returned -1
	[0173.897] WSAGetLastError () returned 10035
	[0173.898] htonl (hostlong=0xc0a80019) returned 0x1900a8c0
	[0173.898] socket (af=2, type=1, protocol=6) returned 0x288
	[0173.898] ioctlsocket (in: s=0x288, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.898] connect (s=0x288, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.25"), namelen=16) returned -1
	[0173.898] WSAGetLastError () returned 10035
	[0173.898] htonl (hostlong=0xc0a8001a) returned 0x1a00a8c0
	[0173.898] socket (af=2, type=1, protocol=6) returned 0x28c
	[0173.898] ioctlsocket (in: s=0x28c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.898] connect (s=0x28c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.26"), namelen=16) returned -1
	[0173.899] WSAGetLastError () returned 10035
	[0173.899] htonl (hostlong=0xc0a8001b) returned 0x1b00a8c0
	[0173.899] socket (af=2, type=1, protocol=6) returned 0x290
	[0173.899] ioctlsocket (in: s=0x290, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.899] connect (s=0x290, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.27"), namelen=16) returned -1
	[0173.899] WSAGetLastError () returned 10035
	[0173.899] htonl (hostlong=0xc0a8001c) returned 0x1c00a8c0
	[0173.899] socket (af=2, type=1, protocol=6) returned 0x294
	[0173.900] ioctlsocket (in: s=0x294, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.900] connect (s=0x294, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.28"), namelen=16) returned -1
	[0173.900] WSAGetLastError () returned 10035
	[0173.900] htonl (hostlong=0xc0a8001d) returned 0x1d00a8c0
	[0173.900] socket (af=2, type=1, protocol=6) returned 0x298
	[0173.900] ioctlsocket (in: s=0x298, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.900] connect (s=0x298, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.29"), namelen=16) returned -1
	[0173.901] WSAGetLastError () returned 10035
	[0173.901] htonl (hostlong=0xc0a8001e) returned 0x1e00a8c0
	[0173.901] socket (af=2, type=1, protocol=6) returned 0x29c
	[0173.901] ioctlsocket (in: s=0x29c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.901] connect (s=0x29c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.30"), namelen=16) returned -1
	[0173.901] WSAGetLastError () returned 10035
	[0173.901] htonl (hostlong=0xc0a8001f) returned 0x1f00a8c0
	[0173.901] socket (af=2, type=1, protocol=6) returned 0x2a0
	[0173.901] ioctlsocket (in: s=0x2a0, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.901] connect (s=0x2a0, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.31"), namelen=16) returned -1
	[0173.902] WSAGetLastError () returned 10035
	[0173.902] htonl (hostlong=0xc0a80020) returned 0x2000a8c0
	[0173.902] socket (af=2, type=1, protocol=6) returned 0x2a4
	[0173.902] ioctlsocket (in: s=0x2a4, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.902] connect (s=0x2a4, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.32"), namelen=16) returned -1
	[0173.902] WSAGetLastError () returned 10035
	[0173.902] htonl (hostlong=0xc0a80021) returned 0x2100a8c0
	[0173.902] socket (af=2, type=1, protocol=6) returned 0x2a8
	[0173.903] ioctlsocket (in: s=0x2a8, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.903] connect (s=0x2a8, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.33"), namelen=16) returned -1
	[0173.903] WSAGetLastError () returned 10035
	[0173.903] htonl (hostlong=0xc0a80022) returned 0x2200a8c0
	[0173.903] socket (af=2, type=1, protocol=6) returned 0x2ac
	[0173.903] ioctlsocket (in: s=0x2ac, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.903] connect (s=0x2ac, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.34"), namelen=16) returned -1
	[0173.904] WSAGetLastError () returned 10035
	[0173.904] htonl (hostlong=0xc0a80023) returned 0x2300a8c0
	[0173.904] socket (af=2, type=1, protocol=6) returned 0x2b0
	[0173.904] ioctlsocket (in: s=0x2b0, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.904] connect (s=0x2b0, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.35"), namelen=16) returned -1
	[0173.904] WSAGetLastError () returned 10035
	[0173.904] htonl (hostlong=0xc0a80024) returned 0x2400a8c0
	[0173.904] socket (af=2, type=1, protocol=6) returned 0x2b4
	[0173.904] ioctlsocket (in: s=0x2b4, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.904] connect (s=0x2b4, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.36"), namelen=16) returned -1
	[0173.905] WSAGetLastError () returned 10035
	[0173.905] htonl (hostlong=0xc0a80025) returned 0x2500a8c0
	[0173.905] socket (af=2, type=1, protocol=6) returned 0x2b8
	[0173.905] ioctlsocket (in: s=0x2b8, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.905] connect (s=0x2b8, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.37"), namelen=16) returned -1
	[0173.905] WSAGetLastError () returned 10035
	[0173.905] htonl (hostlong=0xc0a80026) returned 0x2600a8c0
	[0173.905] socket (af=2, type=1, protocol=6) returned 0x2bc
	[0173.906] ioctlsocket (in: s=0x2bc, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.906] connect (s=0x2bc, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.38"), namelen=16) returned -1
	[0173.906] WSAGetLastError () returned 10035
	[0173.906] htonl (hostlong=0xc0a80027) returned 0x2700a8c0
	[0173.906] socket (af=2, type=1, protocol=6) returned 0x2c0
	[0173.906] ioctlsocket (in: s=0x2c0, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.906] connect (s=0x2c0, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.39"), namelen=16) returned -1
	[0173.907] WSAGetLastError () returned 10035
	[0173.907] htonl (hostlong=0xc0a80028) returned 0x2800a8c0
	[0173.907] socket (af=2, type=1, protocol=6) returned 0x2c4
	[0173.907] ioctlsocket (in: s=0x2c4, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.907] connect (s=0x2c4, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.40"), namelen=16) returned -1
	[0173.907] WSAGetLastError () returned 10035
	[0173.907] htonl (hostlong=0xc0a80029) returned 0x2900a8c0
	[0173.907] socket (af=2, type=1, protocol=6) returned 0x2c8
	[0173.908] ioctlsocket (in: s=0x2c8, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.908] connect (s=0x2c8, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.41"), namelen=16) returned -1
	[0173.908] WSAGetLastError () returned 10035
	[0173.908] htonl (hostlong=0xc0a8002a) returned 0x2a00a8c0
	[0173.908] socket (af=2, type=1, protocol=6) returned 0x2cc
	[0173.908] ioctlsocket (in: s=0x2cc, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.908] connect (s=0x2cc, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.42"), namelen=16) returned -1
	[0173.909] WSAGetLastError () returned 10035
	[0173.909] htonl (hostlong=0xc0a8002b) returned 0x2b00a8c0
	[0173.909] socket (af=2, type=1, protocol=6) returned 0x2d0
	[0173.909] ioctlsocket (in: s=0x2d0, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.909] connect (s=0x2d0, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.43"), namelen=16) returned -1
	[0173.909] WSAGetLastError () returned 10035
	[0173.909] htonl (hostlong=0xc0a8002c) returned 0x2c00a8c0
	[0173.909] socket (af=2, type=1, protocol=6) returned 0x2d4
	[0173.909] ioctlsocket (in: s=0x2d4, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.909] connect (s=0x2d4, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.44"), namelen=16) returned -1
	[0173.910] WSAGetLastError () returned 10035
	[0173.910] htonl (hostlong=0xc0a8002d) returned 0x2d00a8c0
	[0173.910] socket (af=2, type=1, protocol=6) returned 0x2d8
	[0173.910] ioctlsocket (in: s=0x2d8, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.910] connect (s=0x2d8, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.45"), namelen=16) returned -1
	[0173.910] WSAGetLastError () returned 10035
	[0173.910] htonl (hostlong=0xc0a8002e) returned 0x2e00a8c0
	[0173.911] socket (af=2, type=1, protocol=6) returned 0x2dc
	[0173.911] ioctlsocket (in: s=0x2dc, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.911] connect (s=0x2dc, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.46"), namelen=16) returned -1
	[0173.911] WSAGetLastError () returned 10035
	[0173.911] htonl (hostlong=0xc0a8002f) returned 0x2f00a8c0
	[0173.911] socket (af=2, type=1, protocol=6) returned 0x2e0
	[0173.911] ioctlsocket (in: s=0x2e0, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.911] connect (s=0x2e0, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.47"), namelen=16) returned -1
	[0173.912] WSAGetLastError () returned 10035
	[0173.912] htonl (hostlong=0xc0a80030) returned 0x3000a8c0
	[0173.912] socket (af=2, type=1, protocol=6) returned 0x2e4
	[0173.912] ioctlsocket (in: s=0x2e4, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.912] connect (s=0x2e4, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.48"), namelen=16) returned -1
	[0173.912] WSAGetLastError () returned 10035
	[0173.912] htonl (hostlong=0xc0a80031) returned 0x3100a8c0
	[0173.912] socket (af=2, type=1, protocol=6) returned 0x2e8
	[0173.913] ioctlsocket (in: s=0x2e8, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.913] connect (s=0x2e8, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.49"), namelen=16) returned -1
	[0173.913] WSAGetLastError () returned 10035
	[0173.913] htonl (hostlong=0xc0a80032) returned 0x3200a8c0
	[0173.913] socket (af=2, type=1, protocol=6) returned 0x2ec
	[0173.913] ioctlsocket (in: s=0x2ec, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.913] connect (s=0x2ec, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.50"), namelen=16) returned -1
	[0173.914] WSAGetLastError () returned 10035
	[0173.914] htonl (hostlong=0xc0a80033) returned 0x3300a8c0
	[0173.914] socket (af=2, type=1, protocol=6) returned 0x2f0
	[0173.914] ioctlsocket (in: s=0x2f0, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.914] connect (s=0x2f0, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.51"), namelen=16) returned -1
	[0173.914] WSAGetLastError () returned 10035
	[0173.914] htonl (hostlong=0xc0a80034) returned 0x3400a8c0
	[0173.914] socket (af=2, type=1, protocol=6) returned 0x2f4
	[0173.915] ioctlsocket (in: s=0x2f4, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.915] connect (s=0x2f4, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.52"), namelen=16) returned -1
	[0173.915] WSAGetLastError () returned 10035
	[0173.915] htonl (hostlong=0xc0a80035) returned 0x3500a8c0
	[0173.915] socket (af=2, type=1, protocol=6) returned 0x2f8
	[0173.915] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.915] connect (s=0x2f8, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.53"), namelen=16) returned -1
	[0173.916] WSAGetLastError () returned 10035
	[0173.916] htonl (hostlong=0xc0a80036) returned 0x3600a8c0
	[0173.916] socket (af=2, type=1, protocol=6) returned 0x2fc
	[0173.916] ioctlsocket (in: s=0x2fc, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.916] connect (s=0x2fc, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.54"), namelen=16) returned -1
	[0173.916] WSAGetLastError () returned 10035
	[0173.916] htonl (hostlong=0xc0a80037) returned 0x3700a8c0
	[0173.916] socket (af=2, type=1, protocol=6) returned 0x300
	[0173.917] ioctlsocket (in: s=0x300, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.917] connect (s=0x300, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.55"), namelen=16) returned -1
	[0173.917] WSAGetLastError () returned 10035
	[0173.917] htonl (hostlong=0xc0a80038) returned 0x3800a8c0
	[0173.917] socket (af=2, type=1, protocol=6) returned 0x304
	[0173.917] ioctlsocket (in: s=0x304, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.917] connect (s=0x304, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.56"), namelen=16) returned -1
	[0173.918] WSAGetLastError () returned 10035
	[0173.918] htonl (hostlong=0xc0a80039) returned 0x3900a8c0
	[0173.918] socket (af=2, type=1, protocol=6) returned 0x308
	[0173.918] ioctlsocket (in: s=0x308, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.918] connect (s=0x308, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.57"), namelen=16) returned -1
	[0173.918] WSAGetLastError () returned 10035
	[0173.918] htonl (hostlong=0xc0a8003a) returned 0x3a00a8c0
	[0173.918] socket (af=2, type=1, protocol=6) returned 0x30c
	[0173.918] ioctlsocket (in: s=0x30c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.918] connect (s=0x30c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.58"), namelen=16) returned -1
	[0173.919] WSAGetLastError () returned 10035
	[0173.919] htonl (hostlong=0xc0a8003b) returned 0x3b00a8c0
	[0173.919] socket (af=2, type=1, protocol=6) returned 0x310
	[0173.919] ioctlsocket (in: s=0x310, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.919] connect (s=0x310, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.59"), namelen=16) returned -1
	[0173.919] WSAGetLastError () returned 10035
	[0173.919] htonl (hostlong=0xc0a8003c) returned 0x3c00a8c0
	[0173.919] socket (af=2, type=1, protocol=6) returned 0x314
	[0173.920] ioctlsocket (in: s=0x314, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.920] connect (s=0x314, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.60"), namelen=16) returned -1
	[0173.920] WSAGetLastError () returned 10035
	[0173.920] htonl (hostlong=0xc0a8003d) returned 0x3d00a8c0
	[0173.920] socket (af=2, type=1, protocol=6) returned 0x318
	[0173.920] ioctlsocket (in: s=0x318, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.920] connect (s=0x318, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.61"), namelen=16) returned -1
	[0173.921] WSAGetLastError () returned 10035
	[0173.921] htonl (hostlong=0xc0a8003e) returned 0x3e00a8c0
	[0173.921] socket (af=2, type=1, protocol=6) returned 0x31c
	[0173.921] ioctlsocket (in: s=0x31c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.921] connect (s=0x31c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.62"), namelen=16) returned -1
	[0173.921] WSAGetLastError () returned 10035
	[0173.921] htonl (hostlong=0xc0a8003f) returned 0x3f00a8c0
	[0173.921] socket (af=2, type=1, protocol=6) returned 0x320
	[0173.922] ioctlsocket (in: s=0x320, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.922] connect (s=0x320, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.63"), namelen=16) returned -1
	[0173.922] WSAGetLastError () returned 10035
	[0173.922] htonl (hostlong=0xc0a80040) returned 0x4000a8c0
	[0173.922] socket (af=2, type=1, protocol=6) returned 0x324
	[0173.922] ioctlsocket (in: s=0x324, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.922] connect (s=0x324, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.64"), namelen=16) returned -1
	[0173.923] WSAGetLastError () returned 10035
	[0173.923] htonl (hostlong=0xc0a80041) returned 0x4100a8c0
	[0173.923] socket (af=2, type=1, protocol=6) returned 0x328
	[0173.923] ioctlsocket (in: s=0x328, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.923] connect (s=0x328, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.65"), namelen=16) returned -1
	[0173.923] WSAGetLastError () returned 10035
	[0173.923] htonl (hostlong=0xc0a80042) returned 0x4200a8c0
	[0173.923] socket (af=2, type=1, protocol=6) returned 0x32c
	[0173.923] ioctlsocket (in: s=0x32c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.923] connect (s=0x32c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.66"), namelen=16) returned -1
	[0173.924] WSAGetLastError () returned 10035
	[0173.924] htonl (hostlong=0xc0a80043) returned 0x4300a8c0
	[0173.924] socket (af=2, type=1, protocol=6) returned 0x330
	[0173.924] ioctlsocket (in: s=0x330, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.924] connect (s=0x330, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.67"), namelen=16) returned -1
	[0173.924] WSAGetLastError () returned 10035
	[0173.924] htonl (hostlong=0xc0a80044) returned 0x4400a8c0
	[0173.924] socket (af=2, type=1, protocol=6) returned 0x334
	[0173.925] ioctlsocket (in: s=0x334, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.925] connect (s=0x334, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.68"), namelen=16) returned -1
	[0173.925] WSAGetLastError () returned 10035
	[0173.925] htonl (hostlong=0xc0a80045) returned 0x4500a8c0
	[0173.925] socket (af=2, type=1, protocol=6) returned 0x338
	[0173.925] ioctlsocket (in: s=0x338, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.925] connect (s=0x338, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.69"), namelen=16) returned -1
	[0173.926] WSAGetLastError () returned 10035
	[0173.926] htonl (hostlong=0xc0a80046) returned 0x4600a8c0
	[0173.926] socket (af=2, type=1, protocol=6) returned 0x33c
	[0173.926] ioctlsocket (in: s=0x33c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0173.926] connect (s=0x33c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.70"), namelen=16) returned -1
	[0173.926] WSAGetLastError () returned 10035
	[0173.926] GetTickCount () returned 0x1141af1
	[0173.926] GetTickCount () returned 0x1141af1
	[0173.926] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.927] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.928] GetTickCount () returned 0x1141af1
	[0173.928] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.929] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.929] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.930] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.930] GetTickCount () returned 0x1141af1
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141af1
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141af1
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141af1
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141af1
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141af1
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141af1
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141af1
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141af1
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141af1
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141af1
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141af1
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141b00
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141b00
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141b00
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141b00
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141b00
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141b00
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141b00
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141b00
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141b00
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.931] GetTickCount () returned 0x1141b00
	[0173.931] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.932] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.932] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.933] GetTickCount () returned 0x1141b00
	[0173.933] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.934] GetTickCount () returned 0x1141b00
	[0173.934] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.935] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.935] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.936] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.936] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.937] GetTickCount () returned 0x1141b00
	[0173.937] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.938] GetTickCount () returned 0x1141b00
	[0173.938] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.939] GetTickCount () returned 0x1141b00
	[0173.939] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.939] GetTickCount () returned 0x1141b00
	[0173.939] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.939] GetTickCount () returned 0x1141b00
	[0173.939] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.939] GetTickCount () returned 0x1141b00
	[0173.939] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.939] GetTickCount () returned 0x1141b00
	[0173.939] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.939] GetTickCount () returned 0x1141b00
	[0173.939] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.939] GetTickCount () returned 0x1141b00
	[0173.939] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.939] GetTickCount () returned 0x1141b00
	[0173.939] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.939] GetTickCount () returned 0x1141b00
	[0173.939] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0173.939] GetTickCount () returned 0x1141b00
	[0173.939] getsockopt (in: s=0x33c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.939] recv (in: s=0x33c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.939] WSAGetLastError () returned 10057
	[0173.939] closesocket (s=0x33c) returned 0
	[0173.940] getsockopt (in: s=0x338, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.941] recv (in: s=0x338, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.941] WSAGetLastError () returned 10057
	[0173.941] closesocket (s=0x338) returned 0
	[0173.941] getsockopt (in: s=0x334, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.941] recv (in: s=0x334, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.941] WSAGetLastError () returned 10057
	[0173.941] closesocket (s=0x334) returned 0
	[0173.942] getsockopt (in: s=0x330, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.942] recv (in: s=0x330, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.942] WSAGetLastError () returned 10057
	[0173.942] closesocket (s=0x330) returned 0
	[0173.944] getsockopt (in: s=0x32c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.944] recv (in: s=0x32c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.944] WSAGetLastError () returned 10057
	[0173.945] closesocket (s=0x32c) returned 0
	[0173.945] getsockopt (in: s=0x328, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.945] recv (in: s=0x328, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.945] WSAGetLastError () returned 10057
	[0173.945] closesocket (s=0x328) returned 0
	[0173.945] getsockopt (in: s=0x324, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.945] recv (in: s=0x324, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.945] WSAGetLastError () returned 10057
	[0173.945] closesocket (s=0x324) returned 0
	[0173.946] getsockopt (in: s=0x320, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.946] recv (in: s=0x320, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.946] WSAGetLastError () returned 10057
	[0173.946] closesocket (s=0x320) returned 0
	[0173.946] getsockopt (in: s=0x31c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.946] recv (in: s=0x31c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.946] WSAGetLastError () returned 10057
	[0173.946] closesocket (s=0x31c) returned 0
	[0173.947] getsockopt (in: s=0x318, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.947] recv (in: s=0x318, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.947] WSAGetLastError () returned 10057
	[0173.947] closesocket (s=0x318) returned 0
	[0173.947] getsockopt (in: s=0x314, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.947] recv (in: s=0x314, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.947] WSAGetLastError () returned 10057
	[0173.947] closesocket (s=0x314) returned 0
	[0173.948] getsockopt (in: s=0x310, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.948] recv (in: s=0x310, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.948] WSAGetLastError () returned 10057
	[0173.948] closesocket (s=0x310) returned 0
	[0173.948] getsockopt (in: s=0x30c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.948] recv (in: s=0x30c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.948] WSAGetLastError () returned 10057
	[0173.948] closesocket (s=0x30c) returned 0
	[0173.949] getsockopt (in: s=0x308, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.949] recv (in: s=0x308, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.949] WSAGetLastError () returned 10057
	[0173.949] closesocket (s=0x308) returned 0
	[0173.949] getsockopt (in: s=0x304, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.949] recv (in: s=0x304, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.949] WSAGetLastError () returned 10057
	[0173.949] closesocket (s=0x304) returned 0
	[0173.950] getsockopt (in: s=0x300, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.950] recv (in: s=0x300, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.950] WSAGetLastError () returned 10057
	[0173.950] closesocket (s=0x300) returned 0
	[0173.950] getsockopt (in: s=0x2fc, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.950] recv (in: s=0x2fc, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.950] WSAGetLastError () returned 10057
	[0173.950] closesocket (s=0x2fc) returned 0
	[0173.951] getsockopt (in: s=0x2f8, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.951] recv (in: s=0x2f8, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.951] WSAGetLastError () returned 10057
	[0173.951] closesocket (s=0x2f8) returned 0
	[0173.951] getsockopt (in: s=0x2f4, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.951] recv (in: s=0x2f4, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.951] WSAGetLastError () returned 10057
	[0173.951] closesocket (s=0x2f4) returned 0
	[0173.952] getsockopt (in: s=0x2f0, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.952] recv (in: s=0x2f0, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.952] WSAGetLastError () returned 10057
	[0173.952] closesocket (s=0x2f0) returned 0
	[0173.952] getsockopt (in: s=0x2ec, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.952] recv (in: s=0x2ec, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.952] WSAGetLastError () returned 10057
	[0173.952] closesocket (s=0x2ec) returned 0
	[0173.953] getsockopt (in: s=0x2e8, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.953] recv (in: s=0x2e8, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.953] WSAGetLastError () returned 10057
	[0173.953] closesocket (s=0x2e8) returned 0
	[0173.953] getsockopt (in: s=0x2e4, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.953] recv (in: s=0x2e4, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.953] WSAGetLastError () returned 10057
	[0173.953] closesocket (s=0x2e4) returned 0
	[0173.953] getsockopt (in: s=0x2e0, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.953] recv (in: s=0x2e0, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.954] WSAGetLastError () returned 10057
	[0173.954] closesocket (s=0x2e0) returned 0
	[0173.954] getsockopt (in: s=0x2dc, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.954] recv (in: s=0x2dc, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.954] WSAGetLastError () returned 10057
	[0173.954] closesocket (s=0x2dc) returned 0
	[0173.954] getsockopt (in: s=0x2d8, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.954] recv (in: s=0x2d8, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.954] WSAGetLastError () returned 10057
	[0173.954] closesocket (s=0x2d8) returned 0
	[0173.955] getsockopt (in: s=0x2d4, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.955] recv (in: s=0x2d4, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.955] WSAGetLastError () returned 10057
	[0173.955] closesocket (s=0x2d4) returned 0
	[0173.955] getsockopt (in: s=0x2d0, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.955] recv (in: s=0x2d0, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.955] WSAGetLastError () returned 10057
	[0173.955] closesocket (s=0x2d0) returned 0
	[0173.956] getsockopt (in: s=0x2cc, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.956] recv (in: s=0x2cc, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.956] WSAGetLastError () returned 10057
	[0173.956] closesocket (s=0x2cc) returned 0
	[0173.956] getsockopt (in: s=0x2c8, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.956] recv (in: s=0x2c8, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.956] WSAGetLastError () returned 10057
	[0173.956] closesocket (s=0x2c8) returned 0
	[0173.957] getsockopt (in: s=0x2c4, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.957] recv (in: s=0x2c4, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.957] WSAGetLastError () returned 10057
	[0173.957] closesocket (s=0x2c4) returned 0
	[0173.957] getsockopt (in: s=0x2c0, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.957] recv (in: s=0x2c0, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.957] WSAGetLastError () returned 10057
	[0173.957] closesocket (s=0x2c0) returned 0
	[0173.958] getsockopt (in: s=0x2bc, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.958] recv (in: s=0x2bc, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.958] WSAGetLastError () returned 10057
	[0173.958] closesocket (s=0x2bc) returned 0
	[0173.958] getsockopt (in: s=0x2b8, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.958] recv (in: s=0x2b8, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.958] WSAGetLastError () returned 10057
	[0173.958] closesocket (s=0x2b8) returned 0
	[0173.959] getsockopt (in: s=0x2b4, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.959] recv (in: s=0x2b4, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.959] WSAGetLastError () returned 10057
	[0173.959] closesocket (s=0x2b4) returned 0
	[0173.959] getsockopt (in: s=0x2b0, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.959] recv (in: s=0x2b0, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.959] WSAGetLastError () returned 10057
	[0173.959] closesocket (s=0x2b0) returned 0
	[0173.960] getsockopt (in: s=0x2ac, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.960] recv (in: s=0x2ac, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.960] WSAGetLastError () returned 10057
	[0173.960] closesocket (s=0x2ac) returned 0
	[0173.960] getsockopt (in: s=0x2a8, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.960] recv (in: s=0x2a8, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.960] WSAGetLastError () returned 10057
	[0173.960] closesocket (s=0x2a8) returned 0
	[0173.960] getsockopt (in: s=0x2a4, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.961] recv (in: s=0x2a4, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.961] WSAGetLastError () returned 10057
	[0173.961] closesocket (s=0x2a4) returned 0
	[0173.961] getsockopt (in: s=0x2a0, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.961] recv (in: s=0x2a0, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.961] WSAGetLastError () returned 10057
	[0173.961] closesocket (s=0x2a0) returned 0
	[0173.961] getsockopt (in: s=0x29c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.961] recv (in: s=0x29c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.961] WSAGetLastError () returned 10057
	[0173.961] closesocket (s=0x29c) returned 0
	[0173.962] getsockopt (in: s=0x298, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.962] recv (in: s=0x298, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.962] WSAGetLastError () returned 10057
	[0173.962] closesocket (s=0x298) returned 0
	[0173.962] getsockopt (in: s=0x294, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.962] recv (in: s=0x294, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.962] WSAGetLastError () returned 10057
	[0173.962] closesocket (s=0x294) returned 0
	[0173.963] getsockopt (in: s=0x290, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.963] recv (in: s=0x290, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.963] WSAGetLastError () returned 10057
	[0173.963] closesocket (s=0x290) returned 0
	[0173.963] getsockopt (in: s=0x28c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.963] recv (in: s=0x28c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.963] WSAGetLastError () returned 10057
	[0173.963] closesocket (s=0x28c) returned 0
	[0173.964] getsockopt (in: s=0x288, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.964] recv (in: s=0x288, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.964] WSAGetLastError () returned 10057
	[0173.964] closesocket (s=0x288) returned 0
	[0173.964] getsockopt (in: s=0x284, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.964] recv (in: s=0x284, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.964] WSAGetLastError () returned 10057
	[0173.964] closesocket (s=0x284) returned 0
	[0173.965] getsockopt (in: s=0x280, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.965] recv (in: s=0x280, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.965] WSAGetLastError () returned 10057
	[0173.965] closesocket (s=0x280) returned 0
	[0173.965] getsockopt (in: s=0x27c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.965] recv (in: s=0x27c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.965] WSAGetLastError () returned 10057
	[0173.965] closesocket (s=0x27c) returned 0
	[0173.966] getsockopt (in: s=0x278, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.966] recv (in: s=0x278, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.966] WSAGetLastError () returned 10057
	[0173.966] closesocket (s=0x278) returned 0
	[0173.966] getsockopt (in: s=0x274, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.966] recv (in: s=0x274, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.966] WSAGetLastError () returned 10057
	[0173.966] closesocket (s=0x274) returned 0
	[0173.967] getsockopt (in: s=0x270, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.967] recv (in: s=0x270, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.967] WSAGetLastError () returned 10057
	[0173.967] closesocket (s=0x270) returned 0
	[0173.967] getsockopt (in: s=0x26c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.967] recv (in: s=0x26c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.967] WSAGetLastError () returned 10057
	[0173.967] closesocket (s=0x26c) returned 0
	[0173.968] getsockopt (in: s=0x268, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.968] recv (in: s=0x268, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.968] WSAGetLastError () returned 10057
	[0173.968] closesocket (s=0x268) returned 0
	[0173.968] getsockopt (in: s=0x264, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.968] recv (in: s=0x264, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.968] WSAGetLastError () returned 10057
	[0173.968] closesocket (s=0x264) returned 0
	[0173.969] getsockopt (in: s=0x260, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.969] recv (in: s=0x260, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.969] WSAGetLastError () returned 10057
	[0173.969] closesocket (s=0x260) returned 0
	[0173.969] getsockopt (in: s=0x25c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.969] recv (in: s=0x25c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.969] WSAGetLastError () returned 10057
	[0173.969] closesocket (s=0x25c) returned 0
	[0173.969] getsockopt (in: s=0x258, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.969] recv (in: s=0x258, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.970] WSAGetLastError () returned 10057
	[0173.970] closesocket (s=0x258) returned 0
	[0173.970] getsockopt (in: s=0x254, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.970] recv (in: s=0x254, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.970] WSAGetLastError () returned 10057
	[0173.970] closesocket (s=0x254) returned 0
	[0173.970] getsockopt (in: s=0x250, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.970] recv (in: s=0x250, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.970] WSAGetLastError () returned 10057
	[0173.970] closesocket (s=0x250) returned 0
	[0173.971] getsockopt (in: s=0x24c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.971] recv (in: s=0x24c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.971] WSAGetLastError () returned 10057
	[0173.971] closesocket (s=0x24c) returned 0
	[0173.971] getsockopt (in: s=0x248, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.971] recv (in: s=0x248, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.971] WSAGetLastError () returned 10057
	[0173.971] closesocket (s=0x248) returned 0
	[0173.972] getsockopt (in: s=0x244, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.972] recv (in: s=0x244, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.972] WSAGetLastError () returned 10057
	[0173.972] closesocket (s=0x244) returned 0
	[0173.972] getsockopt (in: s=0x240, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.972] recv (in: s=0x240, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.972] WSAGetLastError () returned 10057
	[0173.972] closesocket (s=0x240) returned 0
	[0173.973] getsockopt (in: s=0x23c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.973] recv (in: s=0x23c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.973] WSAGetLastError () returned 10057
	[0173.973] closesocket (s=0x23c) returned 0
	[0173.973] getsockopt (in: s=0x238, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.973] recv (in: s=0x238, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.973] WSAGetLastError () returned 10057
	[0173.973] closesocket (s=0x238) returned 0
	[0173.974] getsockopt (in: s=0x234, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.974] recv (in: s=0x234, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.974] WSAGetLastError () returned 10057
	[0173.974] closesocket (s=0x234) returned 0
	[0173.974] getsockopt (in: s=0x230, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.974] recv (in: s=0x230, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.974] WSAGetLastError () returned 10057
	[0173.974] closesocket (s=0x230) returned 0
	[0173.975] getsockopt (in: s=0x22c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.975] recv (in: s=0x22c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.975] WSAGetLastError () returned 10057
	[0173.975] closesocket (s=0x22c) returned 0
	[0173.975] getsockopt (in: s=0x228, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.975] recv (in: s=0x228, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.975] WSAGetLastError () returned 10057
	[0173.975] closesocket (s=0x228) returned 0
	[0173.976] getsockopt (in: s=0x210, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0173.976] recv (in: s=0x210, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0173.976] WSAGetLastError () returned 10057
	[0173.976] closesocket (s=0x210) returned 0
	[0173.976] GetProcessHeap () returned 0x800000
	[0173.976] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3566d38 | out: hHeap=0x800000) returned 1
	[0173.976] GetProcessHeap () returned 0x800000
	[0173.976] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356adf8 | out: hHeap=0x800000) returned 1
	[0173.976] htons (hostshort=0x1bd) returned 0xbd01
	[0173.976] GetProcessHeap () returned 0x800000
	[0173.976] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x800) returned 0x356adf8
	[0173.976] GetProcessHeap () returned 0x800000
	[0173.976] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x800) returned 0x3566d38
	[0173.976] htonl (hostlong=0xc0a80048) returned 0x4800a8c0
	[0173.976] socket (af=2, type=1, protocol=6) returned 0x210
	[0173.976] ioctlsocket (in: s=0x210, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.976] connect (s=0x210, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.72"), namelen=16) returned -1
	[0173.977] WSAGetLastError () returned 10035
	[0173.977] htonl (hostlong=0xc0a80049) returned 0x4900a8c0
	[0173.977] socket (af=2, type=1, protocol=6) returned 0x228
	[0173.977] ioctlsocket (in: s=0x228, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.977] connect (s=0x228, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.73"), namelen=16) returned -1
	[0173.978] WSAGetLastError () returned 10035
	[0173.978] htonl (hostlong=0xc0a8004a) returned 0x4a00a8c0
	[0173.978] socket (af=2, type=1, protocol=6) returned 0x22c
	[0173.978] ioctlsocket (in: s=0x22c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.978] connect (s=0x22c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.74"), namelen=16) returned -1
	[0173.978] WSAGetLastError () returned 10035
	[0173.978] htonl (hostlong=0xc0a8004b) returned 0x4b00a8c0
	[0173.978] socket (af=2, type=1, protocol=6) returned 0x230
	[0173.978] ioctlsocket (in: s=0x230, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.979] connect (s=0x230, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.75"), namelen=16) returned -1
	[0173.979] WSAGetLastError () returned 10035
	[0173.979] htonl (hostlong=0xc0a8004c) returned 0x4c00a8c0
	[0173.979] socket (af=2, type=1, protocol=6) returned 0x234
	[0173.979] ioctlsocket (in: s=0x234, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.979] connect (s=0x234, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.76"), namelen=16) returned -1
	[0173.980] WSAGetLastError () returned 10035
	[0173.980] htonl (hostlong=0xc0a8004d) returned 0x4d00a8c0
	[0173.980] socket (af=2, type=1, protocol=6) returned 0x238
	[0173.980] ioctlsocket (in: s=0x238, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.980] connect (s=0x238, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.77"), namelen=16) returned -1
	[0173.980] WSAGetLastError () returned 10035
	[0173.980] htonl (hostlong=0xc0a8004e) returned 0x4e00a8c0
	[0173.980] socket (af=2, type=1, protocol=6) returned 0x23c
	[0173.980] ioctlsocket (in: s=0x23c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.980] connect (s=0x23c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.78"), namelen=16) returned -1
	[0173.981] WSAGetLastError () returned 10035
	[0173.981] htonl (hostlong=0xc0a8004f) returned 0x4f00a8c0
	[0173.981] socket (af=2, type=1, protocol=6) returned 0x240
	[0173.981] ioctlsocket (in: s=0x240, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.981] connect (s=0x240, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.79"), namelen=16) returned -1
	[0173.981] WSAGetLastError () returned 10035
	[0173.981] htonl (hostlong=0xc0a80050) returned 0x5000a8c0
	[0173.981] socket (af=2, type=1, protocol=6) returned 0x244
	[0173.982] ioctlsocket (in: s=0x244, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.982] connect (s=0x244, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.80"), namelen=16) returned -1
	[0173.982] WSAGetLastError () returned 10035
	[0173.982] htonl (hostlong=0xc0a80051) returned 0x5100a8c0
	[0173.982] socket (af=2, type=1, protocol=6) returned 0x248
	[0173.982] ioctlsocket (in: s=0x248, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.982] connect (s=0x248, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.81"), namelen=16) returned -1
	[0173.983] WSAGetLastError () returned 10035
	[0173.983] htonl (hostlong=0xc0a80052) returned 0x5200a8c0
	[0173.983] socket (af=2, type=1, protocol=6) returned 0x24c
	[0173.983] ioctlsocket (in: s=0x24c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.983] connect (s=0x24c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.82"), namelen=16) returned -1
	[0173.983] WSAGetLastError () returned 10035
	[0173.983] htonl (hostlong=0xc0a80053) returned 0x5300a8c0
	[0173.983] socket (af=2, type=1, protocol=6) returned 0x250
	[0173.983] ioctlsocket (in: s=0x250, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.983] connect (s=0x250, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.83"), namelen=16) returned -1
	[0173.984] WSAGetLastError () returned 10035
	[0173.984] htonl (hostlong=0xc0a80054) returned 0x5400a8c0
	[0173.984] socket (af=2, type=1, protocol=6) returned 0x254
	[0173.984] ioctlsocket (in: s=0x254, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.984] connect (s=0x254, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.84"), namelen=16) returned -1
	[0173.984] WSAGetLastError () returned 10035
	[0173.984] htonl (hostlong=0xc0a80055) returned 0x5500a8c0
	[0173.984] socket (af=2, type=1, protocol=6) returned 0x258
	[0173.985] ioctlsocket (in: s=0x258, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.985] connect (s=0x258, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.85"), namelen=16) returned -1
	[0173.985] WSAGetLastError () returned 10035
	[0173.985] htonl (hostlong=0xc0a80056) returned 0x5600a8c0
	[0173.985] socket (af=2, type=1, protocol=6) returned 0x25c
	[0173.985] ioctlsocket (in: s=0x25c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.985] connect (s=0x25c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.86"), namelen=16) returned -1
	[0173.986] WSAGetLastError () returned 10035
	[0173.986] htonl (hostlong=0xc0a80057) returned 0x5700a8c0
	[0173.986] socket (af=2, type=1, protocol=6) returned 0x260
	[0173.986] ioctlsocket (in: s=0x260, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.986] connect (s=0x260, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.87"), namelen=16) returned -1
	[0173.986] WSAGetLastError () returned 10035
	[0173.986] htonl (hostlong=0xc0a80058) returned 0x5800a8c0
	[0173.986] socket (af=2, type=1, protocol=6) returned 0x264
	[0173.987] ioctlsocket (in: s=0x264, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.987] connect (s=0x264, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.88"), namelen=16) returned -1
	[0173.987] WSAGetLastError () returned 10035
	[0173.987] htonl (hostlong=0xc0a80059) returned 0x5900a8c0
	[0173.987] socket (af=2, type=1, protocol=6) returned 0x268
	[0173.987] ioctlsocket (in: s=0x268, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.987] connect (s=0x268, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.89"), namelen=16) returned -1
	[0173.988] WSAGetLastError () returned 10035
	[0173.988] htonl (hostlong=0xc0a8005a) returned 0x5a00a8c0
	[0173.988] socket (af=2, type=1, protocol=6) returned 0x26c
	[0173.988] ioctlsocket (in: s=0x26c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.988] connect (s=0x26c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.90"), namelen=16) returned -1
	[0173.988] WSAGetLastError () returned 10035
	[0173.988] htonl (hostlong=0xc0a8005b) returned 0x5b00a8c0
	[0173.988] socket (af=2, type=1, protocol=6) returned 0x270
	[0173.988] ioctlsocket (in: s=0x270, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.988] connect (s=0x270, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.91"), namelen=16) returned -1
	[0173.989] WSAGetLastError () returned 10035
	[0173.989] htonl (hostlong=0xc0a8005c) returned 0x5c00a8c0
	[0173.989] socket (af=2, type=1, protocol=6) returned 0x274
	[0173.989] ioctlsocket (in: s=0x274, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.989] connect (s=0x274, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.92"), namelen=16) returned -1
	[0173.989] WSAGetLastError () returned 10035
	[0173.989] htonl (hostlong=0xc0a8005d) returned 0x5d00a8c0
	[0173.989] socket (af=2, type=1, protocol=6) returned 0x278
	[0173.990] ioctlsocket (in: s=0x278, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.990] connect (s=0x278, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.93"), namelen=16) returned -1
	[0173.990] WSAGetLastError () returned 10035
	[0173.990] htonl (hostlong=0xc0a8005e) returned 0x5e00a8c0
	[0173.990] socket (af=2, type=1, protocol=6) returned 0x27c
	[0173.990] ioctlsocket (in: s=0x27c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.990] connect (s=0x27c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.94"), namelen=16) returned -1
	[0173.991] WSAGetLastError () returned 10035
	[0173.991] htonl (hostlong=0xc0a8005f) returned 0x5f00a8c0
	[0173.991] socket (af=2, type=1, protocol=6) returned 0x280
	[0173.991] ioctlsocket (in: s=0x280, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.991] connect (s=0x280, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.95"), namelen=16) returned -1
	[0173.991] WSAGetLastError () returned 10035
	[0173.991] htonl (hostlong=0xc0a80060) returned 0x6000a8c0
	[0173.991] socket (af=2, type=1, protocol=6) returned 0x284
	[0173.991] ioctlsocket (in: s=0x284, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.992] connect (s=0x284, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.96"), namelen=16) returned -1
	[0173.992] WSAGetLastError () returned 10035
	[0173.992] htonl (hostlong=0xc0a80061) returned 0x6100a8c0
	[0173.992] socket (af=2, type=1, protocol=6) returned 0x288
	[0173.992] ioctlsocket (in: s=0x288, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.992] connect (s=0x288, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.97"), namelen=16) returned -1
	[0173.992] WSAGetLastError () returned 10035
	[0173.993] htonl (hostlong=0xc0a80062) returned 0x6200a8c0
	[0173.993] socket (af=2, type=1, protocol=6) returned 0x28c
	[0173.993] ioctlsocket (in: s=0x28c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.993] connect (s=0x28c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.98"), namelen=16) returned -1
	[0173.993] WSAGetLastError () returned 10035
	[0173.993] htonl (hostlong=0xc0a80063) returned 0x6300a8c0
	[0173.993] socket (af=2, type=1, protocol=6) returned 0x290
	[0173.993] ioctlsocket (in: s=0x290, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.993] connect (s=0x290, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.99"), namelen=16) returned -1
	[0173.994] WSAGetLastError () returned 10035
	[0173.994] htonl (hostlong=0xc0a80064) returned 0x6400a8c0
	[0173.994] socket (af=2, type=1, protocol=6) returned 0x294
	[0173.994] ioctlsocket (in: s=0x294, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.994] connect (s=0x294, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.100"), namelen=16) returned -1
	[0173.994] WSAGetLastError () returned 10035
	[0173.994] htonl (hostlong=0xc0a80065) returned 0x6500a8c0
	[0173.994] socket (af=2, type=1, protocol=6) returned 0x298
	[0173.995] ioctlsocket (in: s=0x298, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.995] connect (s=0x298, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.101"), namelen=16) returned -1
	[0173.995] WSAGetLastError () returned 10035
	[0173.995] htonl (hostlong=0xc0a80066) returned 0x6600a8c0
	[0173.995] socket (af=2, type=1, protocol=6) returned 0x29c
	[0173.995] ioctlsocket (in: s=0x29c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.995] connect (s=0x29c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.102"), namelen=16) returned -1
	[0173.996] WSAGetLastError () returned 10035
	[0173.996] htonl (hostlong=0xc0a80067) returned 0x6700a8c0
	[0173.996] socket (af=2, type=1, protocol=6) returned 0x2a0
	[0173.996] ioctlsocket (in: s=0x2a0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.996] connect (s=0x2a0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.103"), namelen=16) returned -1
	[0173.996] WSAGetLastError () returned 10035
	[0173.996] htonl (hostlong=0xc0a80068) returned 0x6800a8c0
	[0173.996] socket (af=2, type=1, protocol=6) returned 0x2a4
	[0173.996] ioctlsocket (in: s=0x2a4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.996] connect (s=0x2a4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.104"), namelen=16) returned -1
	[0173.997] WSAGetLastError () returned 10035
	[0173.997] htonl (hostlong=0xc0a80069) returned 0x6900a8c0
	[0173.997] socket (af=2, type=1, protocol=6) returned 0x2a8
	[0173.997] ioctlsocket (in: s=0x2a8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.997] connect (s=0x2a8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.105"), namelen=16) returned -1
	[0173.997] WSAGetLastError () returned 10035
	[0173.997] htonl (hostlong=0xc0a8006a) returned 0x6a00a8c0
	[0173.997] socket (af=2, type=1, protocol=6) returned 0x2ac
	[0173.998] ioctlsocket (in: s=0x2ac, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.998] connect (s=0x2ac, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.106"), namelen=16) returned -1
	[0173.998] WSAGetLastError () returned 10035
	[0173.998] htonl (hostlong=0xc0a8006b) returned 0x6b00a8c0
	[0173.998] socket (af=2, type=1, protocol=6) returned 0x2b0
	[0173.998] ioctlsocket (in: s=0x2b0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.998] connect (s=0x2b0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.107"), namelen=16) returned -1
	[0173.999] WSAGetLastError () returned 10035
	[0173.999] htonl (hostlong=0xc0a8006c) returned 0x6c00a8c0
	[0173.999] socket (af=2, type=1, protocol=6) returned 0x2b4
	[0173.999] ioctlsocket (in: s=0x2b4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.999] connect (s=0x2b4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.108"), namelen=16) returned -1
	[0173.999] WSAGetLastError () returned 10035
	[0173.999] htonl (hostlong=0xc0a8006d) returned 0x6d00a8c0
	[0173.999] socket (af=2, type=1, protocol=6) returned 0x2b8
	[0173.999] ioctlsocket (in: s=0x2b8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0173.999] connect (s=0x2b8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.109"), namelen=16) returned -1
	[0174.000] WSAGetLastError () returned 10035
	[0174.000] htonl (hostlong=0xc0a8006e) returned 0x6e00a8c0
	[0174.000] socket (af=2, type=1, protocol=6) returned 0x2bc
	[0174.000] ioctlsocket (in: s=0x2bc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.000] connect (s=0x2bc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.110"), namelen=16) returned -1
	[0174.000] WSAGetLastError () returned 10035
	[0174.000] htonl (hostlong=0xc0a8006f) returned 0x6f00a8c0
	[0174.000] socket (af=2, type=1, protocol=6) returned 0x2c0
	[0174.001] ioctlsocket (in: s=0x2c0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.001] connect (s=0x2c0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.111"), namelen=16) returned -1
	[0174.001] WSAGetLastError () returned 10035
	[0174.001] htonl (hostlong=0xc0a80070) returned 0x7000a8c0
	[0174.001] socket (af=2, type=1, protocol=6) returned 0x2c4
	[0174.001] ioctlsocket (in: s=0x2c4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.001] connect (s=0x2c4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.112"), namelen=16) returned -1
	[0174.002] WSAGetLastError () returned 10035
	[0174.002] htonl (hostlong=0xc0a80071) returned 0x7100a8c0
	[0174.002] socket (af=2, type=1, protocol=6) returned 0x2c8
	[0174.002] ioctlsocket (in: s=0x2c8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.002] connect (s=0x2c8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.113"), namelen=16) returned -1
	[0174.002] WSAGetLastError () returned 10035
	[0174.002] htonl (hostlong=0xc0a80072) returned 0x7200a8c0
	[0174.002] socket (af=2, type=1, protocol=6) returned 0x2cc
	[0174.002] ioctlsocket (in: s=0x2cc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.002] connect (s=0x2cc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.114"), namelen=16) returned -1
	[0174.003] WSAGetLastError () returned 10035
	[0174.003] htonl (hostlong=0xc0a80073) returned 0x7300a8c0
	[0174.003] socket (af=2, type=1, protocol=6) returned 0x2d0
	[0174.003] ioctlsocket (in: s=0x2d0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.003] connect (s=0x2d0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.115"), namelen=16) returned -1
	[0174.003] WSAGetLastError () returned 10035
	[0174.003] htonl (hostlong=0xc0a80074) returned 0x7400a8c0
	[0174.003] socket (af=2, type=1, protocol=6) returned 0x2d4
	[0174.003] ioctlsocket (in: s=0x2d4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.003] connect (s=0x2d4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.116"), namelen=16) returned -1
	[0174.004] WSAGetLastError () returned 10035
	[0174.004] htonl (hostlong=0xc0a80075) returned 0x7500a8c0
	[0174.004] socket (af=2, type=1, protocol=6) returned 0x2d8
	[0174.004] ioctlsocket (in: s=0x2d8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.004] connect (s=0x2d8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.117"), namelen=16) returned -1
	[0174.004] WSAGetLastError () returned 10035
	[0174.004] htonl (hostlong=0xc0a80076) returned 0x7600a8c0
	[0174.004] socket (af=2, type=1, protocol=6) returned 0x2dc
	[0174.005] ioctlsocket (in: s=0x2dc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.005] connect (s=0x2dc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.118"), namelen=16) returned -1
	[0174.005] WSAGetLastError () returned 10035
	[0174.005] htonl (hostlong=0xc0a80077) returned 0x7700a8c0
	[0174.005] socket (af=2, type=1, protocol=6) returned 0x2e0
	[0174.005] ioctlsocket (in: s=0x2e0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.005] connect (s=0x2e0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.119"), namelen=16) returned -1
	[0174.006] WSAGetLastError () returned 10035
	[0174.006] htonl (hostlong=0xc0a80078) returned 0x7800a8c0
	[0174.006] socket (af=2, type=1, protocol=6) returned 0x2e4
	[0174.006] ioctlsocket (in: s=0x2e4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.006] connect (s=0x2e4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.120"), namelen=16) returned -1
	[0174.006] WSAGetLastError () returned 10035
	[0174.006] htonl (hostlong=0xc0a80079) returned 0x7900a8c0
	[0174.006] socket (af=2, type=1, protocol=6) returned 0x2e8
	[0174.007] ioctlsocket (in: s=0x2e8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.007] connect (s=0x2e8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.121"), namelen=16) returned -1
	[0174.009] WSAGetLastError () returned 10035
	[0174.009] htonl (hostlong=0xc0a8007a) returned 0x7a00a8c0
	[0174.009] socket (af=2, type=1, protocol=6) returned 0x2ec
	[0174.010] ioctlsocket (in: s=0x2ec, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.010] connect (s=0x2ec, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.122"), namelen=16) returned -1
	[0174.010] WSAGetLastError () returned 10035
	[0174.010] htonl (hostlong=0xc0a8007b) returned 0x7b00a8c0
	[0174.010] socket (af=2, type=1, protocol=6) returned 0x2f0
	[0174.010] ioctlsocket (in: s=0x2f0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.010] connect (s=0x2f0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.123"), namelen=16) returned -1
	[0174.011] WSAGetLastError () returned 10035
	[0174.011] htonl (hostlong=0xc0a8007c) returned 0x7c00a8c0
	[0174.011] socket (af=2, type=1, protocol=6) returned 0x2f4
	[0174.011] ioctlsocket (in: s=0x2f4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.011] connect (s=0x2f4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.124"), namelen=16) returned -1
	[0174.011] WSAGetLastError () returned 10035
	[0174.011] htonl (hostlong=0xc0a8007d) returned 0x7d00a8c0
	[0174.011] socket (af=2, type=1, protocol=6) returned 0x2f8
	[0174.012] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.012] connect (s=0x2f8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.125"), namelen=16) returned -1
	[0174.012] WSAGetLastError () returned 10035
	[0174.012] htonl (hostlong=0xc0a8007e) returned 0x7e00a8c0
	[0174.012] socket (af=2, type=1, protocol=6) returned 0x2fc
	[0174.012] ioctlsocket (in: s=0x2fc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.012] connect (s=0x2fc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.126"), namelen=16) returned -1
	[0174.013] WSAGetLastError () returned 10035
	[0174.013] htonl (hostlong=0xc0a8007f) returned 0x7f00a8c0
	[0174.013] socket (af=2, type=1, protocol=6) returned 0x300
	[0174.013] ioctlsocket (in: s=0x300, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.013] connect (s=0x300, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.127"), namelen=16) returned -1
	[0174.013] WSAGetLastError () returned 10035
	[0174.013] htonl (hostlong=0xc0a80080) returned 0x8000a8c0
	[0174.013] socket (af=2, type=1, protocol=6) returned 0x304
	[0174.013] ioctlsocket (in: s=0x304, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.013] connect (s=0x304, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.128"), namelen=16) returned -1
	[0174.014] WSAGetLastError () returned 10035
	[0174.014] htonl (hostlong=0xc0a80081) returned 0x8100a8c0
	[0174.014] socket (af=2, type=1, protocol=6) returned 0x308
	[0174.014] ioctlsocket (in: s=0x308, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.014] connect (s=0x308, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.129"), namelen=16) returned -1
	[0174.014] WSAGetLastError () returned 10035
	[0174.014] htonl (hostlong=0xc0a80082) returned 0x8200a8c0
	[0174.014] socket (af=2, type=1, protocol=6) returned 0x30c
	[0174.015] ioctlsocket (in: s=0x30c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.015] connect (s=0x30c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.130"), namelen=16) returned -1
	[0174.015] WSAGetLastError () returned 10035
	[0174.015] htonl (hostlong=0xc0a80083) returned 0x8300a8c0
	[0174.015] socket (af=2, type=1, protocol=6) returned 0x310
	[0174.015] ioctlsocket (in: s=0x310, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.015] connect (s=0x310, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.131"), namelen=16) returned -1
	[0174.015] WSAGetLastError () returned 10035
	[0174.016] htonl (hostlong=0xc0a80084) returned 0x8400a8c0
	[0174.016] socket (af=2, type=1, protocol=6) returned 0x314
	[0174.016] ioctlsocket (in: s=0x314, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.016] connect (s=0x314, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.132"), namelen=16) returned -1
	[0174.016] WSAGetLastError () returned 10035
	[0174.016] htonl (hostlong=0xc0a80085) returned 0x8500a8c0
	[0174.016] socket (af=2, type=1, protocol=6) returned 0x318
	[0174.016] ioctlsocket (in: s=0x318, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.016] connect (s=0x318, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.133"), namelen=16) returned -1
	[0174.017] WSAGetLastError () returned 10035
	[0174.017] htonl (hostlong=0xc0a80086) returned 0x8600a8c0
	[0174.017] socket (af=2, type=1, protocol=6) returned 0x31c
	[0174.017] ioctlsocket (in: s=0x31c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.017] connect (s=0x31c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.134"), namelen=16) returned -1
	[0174.017] WSAGetLastError () returned 10035
	[0174.017] htonl (hostlong=0xc0a80087) returned 0x8700a8c0
	[0174.017] socket (af=2, type=1, protocol=6) returned 0x320
	[0174.018] ioctlsocket (in: s=0x320, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.018] connect (s=0x320, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.135"), namelen=16) returned -1
	[0174.018] WSAGetLastError () returned 10035
	[0174.018] htonl (hostlong=0xc0a80088) returned 0x8800a8c0
	[0174.018] socket (af=2, type=1, protocol=6) returned 0x324
	[0174.018] ioctlsocket (in: s=0x324, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.018] connect (s=0x324, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.136"), namelen=16) returned -1
	[0174.019] WSAGetLastError () returned 10035
	[0174.019] htonl (hostlong=0xc0a80089) returned 0x8900a8c0
	[0174.019] socket (af=2, type=1, protocol=6) returned 0x328
	[0174.019] ioctlsocket (in: s=0x328, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.019] connect (s=0x328, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.137"), namelen=16) returned -1
	[0174.019] WSAGetLastError () returned 10035
	[0174.019] htonl (hostlong=0xc0a8008a) returned 0x8a00a8c0
	[0174.019] socket (af=2, type=1, protocol=6) returned 0x32c
	[0174.019] ioctlsocket (in: s=0x32c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.019] connect (s=0x32c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.138"), namelen=16) returned -1
	[0174.020] WSAGetLastError () returned 10035
	[0174.020] htonl (hostlong=0xc0a8008b) returned 0x8b00a8c0
	[0174.020] socket (af=2, type=1, protocol=6) returned 0x330
	[0174.020] ioctlsocket (in: s=0x330, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.020] connect (s=0x330, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.139"), namelen=16) returned -1
	[0174.020] WSAGetLastError () returned 10035
	[0174.020] htonl (hostlong=0xc0a8008c) returned 0x8c00a8c0
	[0174.020] socket (af=2, type=1, protocol=6) returned 0x334
	[0174.021] ioctlsocket (in: s=0x334, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.021] connect (s=0x334, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.140"), namelen=16) returned -1
	[0174.021] WSAGetLastError () returned 10035
	[0174.021] htonl (hostlong=0xc0a8008d) returned 0x8d00a8c0
	[0174.021] socket (af=2, type=1, protocol=6) returned 0x338
	[0174.021] ioctlsocket (in: s=0x338, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.021] connect (s=0x338, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.141"), namelen=16) returned -1
	[0174.022] WSAGetLastError () returned 10035
	[0174.022] htonl (hostlong=0xc0a8008e) returned 0x8e00a8c0
	[0174.022] socket (af=2, type=1, protocol=6) returned 0x33c
	[0174.022] ioctlsocket (in: s=0x33c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.022] connect (s=0x33c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.142"), namelen=16) returned -1
	[0174.022] WSAGetLastError () returned 10035
	[0174.022] htonl (hostlong=0xc0a8008f) returned 0x8f00a8c0
	[0174.022] socket (af=2, type=1, protocol=6) returned 0x340
	[0174.022] ioctlsocket (in: s=0x340, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.022] connect (s=0x340, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.143"), namelen=16) returned -1
	[0174.023] WSAGetLastError () returned 10035
	[0174.023] htonl (hostlong=0xc0a80090) returned 0x9000a8c0
	[0174.023] socket (af=2, type=1, protocol=6) returned 0x344
	[0174.023] ioctlsocket (in: s=0x344, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.023] connect (s=0x344, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.144"), namelen=16) returned -1
	[0174.024] WSAGetLastError () returned 10035
	[0174.024] htonl (hostlong=0xc0a80091) returned 0x9100a8c0
	[0174.024] socket (af=2, type=1, protocol=6) returned 0x348
	[0174.024] ioctlsocket (in: s=0x348, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.024] connect (s=0x348, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.145"), namelen=16) returned -1
	[0174.024] WSAGetLastError () returned 10035
	[0174.024] htonl (hostlong=0xc0a80092) returned 0x9200a8c0
	[0174.024] socket (af=2, type=1, protocol=6) returned 0x34c
	[0174.024] ioctlsocket (in: s=0x34c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.024] connect (s=0x34c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.146"), namelen=16) returned -1
	[0174.025] WSAGetLastError () returned 10035
	[0174.025] htonl (hostlong=0xc0a80093) returned 0x9300a8c0
	[0174.025] socket (af=2, type=1, protocol=6) returned 0x350
	[0174.025] ioctlsocket (in: s=0x350, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.025] connect (s=0x350, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.147"), namelen=16) returned -1
	[0174.026] WSAGetLastError () returned 10035
	[0174.026] htonl (hostlong=0xc0a80094) returned 0x9400a8c0
	[0174.026] socket (af=2, type=1, protocol=6) returned 0x354
	[0174.026] ioctlsocket (in: s=0x354, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.026] connect (s=0x354, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.148"), namelen=16) returned -1
	[0174.026] WSAGetLastError () returned 10035
	[0174.026] htonl (hostlong=0xc0a80095) returned 0x9500a8c0
	[0174.026] socket (af=2, type=1, protocol=6) returned 0x358
	[0174.026] ioctlsocket (in: s=0x358, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.026] connect (s=0x358, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.149"), namelen=16) returned -1
	[0174.027] WSAGetLastError () returned 10035
	[0174.027] htonl (hostlong=0xc0a80096) returned 0x9600a8c0
	[0174.027] socket (af=2, type=1, protocol=6) returned 0x35c
	[0174.027] ioctlsocket (in: s=0x35c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.027] connect (s=0x35c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.150"), namelen=16) returned -1
	[0174.027] WSAGetLastError () returned 10035
	[0174.027] htonl (hostlong=0xc0a80097) returned 0x9700a8c0
	[0174.027] socket (af=2, type=1, protocol=6) returned 0x360
	[0174.028] ioctlsocket (in: s=0x360, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.028] connect (s=0x360, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.151"), namelen=16) returned -1
	[0174.028] WSAGetLastError () returned 10035
	[0174.028] htonl (hostlong=0xc0a80098) returned 0x9800a8c0
	[0174.028] socket (af=2, type=1, protocol=6) returned 0x364
	[0174.028] ioctlsocket (in: s=0x364, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.028] connect (s=0x364, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.152"), namelen=16) returned -1
	[0174.029] WSAGetLastError () returned 10035
	[0174.029] htonl (hostlong=0xc0a80099) returned 0x9900a8c0
	[0174.029] socket (af=2, type=1, protocol=6) returned 0x368
	[0174.029] ioctlsocket (in: s=0x368, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.029] connect (s=0x368, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.153"), namelen=16) returned -1
	[0174.029] WSAGetLastError () returned 10035
	[0174.029] htonl (hostlong=0xc0a8009a) returned 0x9a00a8c0
	[0174.029] socket (af=2, type=1, protocol=6) returned 0x36c
	[0174.029] ioctlsocket (in: s=0x36c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.029] connect (s=0x36c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned -1
	[0174.030] WSAGetLastError () returned 10035
	[0174.030] htonl (hostlong=0xc0a8009b) returned 0x9b00a8c0
	[0174.030] socket (af=2, type=1, protocol=6) returned 0x370
	[0174.030] ioctlsocket (in: s=0x370, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.030] connect (s=0x370, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.155"), namelen=16) returned -1
	[0174.031] WSAGetLastError () returned 10035
	[0174.031] htonl (hostlong=0xc0a8009c) returned 0x9c00a8c0
	[0174.031] socket (af=2, type=1, protocol=6) returned 0x374
	[0174.031] ioctlsocket (in: s=0x374, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.031] connect (s=0x374, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.156"), namelen=16) returned -1
	[0174.031] WSAGetLastError () returned 10035
	[0174.031] htonl (hostlong=0xc0a8009d) returned 0x9d00a8c0
	[0174.031] socket (af=2, type=1, protocol=6) returned 0x378
	[0174.031] ioctlsocket (in: s=0x378, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.031] connect (s=0x378, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.157"), namelen=16) returned -1
	[0174.032] WSAGetLastError () returned 10035
	[0174.032] htonl (hostlong=0xc0a8009e) returned 0x9e00a8c0
	[0174.032] socket (af=2, type=1, protocol=6) returned 0x37c
	[0174.032] ioctlsocket (in: s=0x37c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.032] connect (s=0x37c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.158"), namelen=16) returned -1
	[0174.032] WSAGetLastError () returned 10035
	[0174.032] htonl (hostlong=0xc0a8009f) returned 0x9f00a8c0
	[0174.032] socket (af=2, type=1, protocol=6) returned 0x380
	[0174.033] ioctlsocket (in: s=0x380, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.033] connect (s=0x380, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.159"), namelen=16) returned -1
	[0174.033] WSAGetLastError () returned 10035
	[0174.033] htonl (hostlong=0xc0a800a0) returned 0xa000a8c0
	[0174.033] socket (af=2, type=1, protocol=6) returned 0x384
	[0174.033] ioctlsocket (in: s=0x384, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.033] connect (s=0x384, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.160"), namelen=16) returned -1
	[0174.034] WSAGetLastError () returned 10035
	[0174.034] htonl (hostlong=0xc0a800a1) returned 0xa100a8c0
	[0174.034] socket (af=2, type=1, protocol=6) returned 0x388
	[0174.034] ioctlsocket (in: s=0x388, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.034] connect (s=0x388, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.161"), namelen=16) returned -1
	[0174.034] WSAGetLastError () returned 10035
	[0174.034] htonl (hostlong=0xc0a800a2) returned 0xa200a8c0
	[0174.034] socket (af=2, type=1, protocol=6) returned 0x38c
	[0174.034] ioctlsocket (in: s=0x38c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.034] connect (s=0x38c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.162"), namelen=16) returned -1
	[0174.035] WSAGetLastError () returned 10035
	[0174.035] htonl (hostlong=0xc0a800a3) returned 0xa300a8c0
	[0174.035] socket (af=2, type=1, protocol=6) returned 0x390
	[0174.035] ioctlsocket (in: s=0x390, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.035] connect (s=0x390, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.163"), namelen=16) returned -1
	[0174.035] WSAGetLastError () returned 10035
	[0174.035] htonl (hostlong=0xc0a800a4) returned 0xa400a8c0
	[0174.036] socket (af=2, type=1, protocol=6) returned 0x394
	[0174.036] ioctlsocket (in: s=0x394, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.036] connect (s=0x394, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.164"), namelen=16) returned -1
	[0174.036] WSAGetLastError () returned 10035
	[0174.036] htonl (hostlong=0xc0a800a5) returned 0xa500a8c0
	[0174.036] socket (af=2, type=1, protocol=6) returned 0x398
	[0174.036] ioctlsocket (in: s=0x398, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.036] connect (s=0x398, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.165"), namelen=16) returned -1
	[0174.037] WSAGetLastError () returned 10035
	[0174.037] htonl (hostlong=0xc0a800a6) returned 0xa600a8c0
	[0174.037] socket (af=2, type=1, protocol=6) returned 0x39c
	[0174.037] ioctlsocket (in: s=0x39c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.037] connect (s=0x39c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.166"), namelen=16) returned -1
	[0174.037] WSAGetLastError () returned 10035
	[0174.037] htonl (hostlong=0xc0a800a7) returned 0xa700a8c0
	[0174.037] socket (af=2, type=1, protocol=6) returned 0x3a0
	[0174.038] ioctlsocket (in: s=0x3a0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.038] connect (s=0x3a0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.167"), namelen=16) returned -1
	[0174.038] WSAGetLastError () returned 10035
	[0174.038] htonl (hostlong=0xc0a800a8) returned 0xa800a8c0
	[0174.038] socket (af=2, type=1, protocol=6) returned 0x3a4
	[0174.038] ioctlsocket (in: s=0x3a4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.038] connect (s=0x3a4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.168"), namelen=16) returned -1
	[0174.039] WSAGetLastError () returned 10035
	[0174.039] htonl (hostlong=0xc0a800a9) returned 0xa900a8c0
	[0174.039] socket (af=2, type=1, protocol=6) returned 0x3a8
	[0174.039] ioctlsocket (in: s=0x3a8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.039] connect (s=0x3a8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.169"), namelen=16) returned -1
	[0174.039] WSAGetLastError () returned 10035
	[0174.039] htonl (hostlong=0xc0a800aa) returned 0xaa00a8c0
	[0174.039] socket (af=2, type=1, protocol=6) returned 0x3ac
	[0174.039] ioctlsocket (in: s=0x3ac, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.039] connect (s=0x3ac, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.170"), namelen=16) returned -1
	[0174.040] WSAGetLastError () returned 10035
	[0174.040] htonl (hostlong=0xc0a800ab) returned 0xab00a8c0
	[0174.040] socket (af=2, type=1, protocol=6) returned 0x3b0
	[0174.040] ioctlsocket (in: s=0x3b0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.040] connect (s=0x3b0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.171"), namelen=16) returned -1
	[0174.040] WSAGetLastError () returned 10035
	[0174.040] htonl (hostlong=0xc0a800ac) returned 0xac00a8c0
	[0174.040] socket (af=2, type=1, protocol=6) returned 0x3b4
	[0174.041] ioctlsocket (in: s=0x3b4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.041] connect (s=0x3b4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.172"), namelen=16) returned -1
	[0174.041] WSAGetLastError () returned 10035
	[0174.041] htonl (hostlong=0xc0a800ad) returned 0xad00a8c0
	[0174.041] socket (af=2, type=1, protocol=6) returned 0x3b8
	[0174.041] ioctlsocket (in: s=0x3b8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.041] connect (s=0x3b8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.173"), namelen=16) returned -1
	[0174.042] WSAGetLastError () returned 10035
	[0174.042] htonl (hostlong=0xc0a800ae) returned 0xae00a8c0
	[0174.042] socket (af=2, type=1, protocol=6) returned 0x3bc
	[0174.042] ioctlsocket (in: s=0x3bc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.042] connect (s=0x3bc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.174"), namelen=16) returned -1
	[0174.042] WSAGetLastError () returned 10035
	[0174.042] htonl (hostlong=0xc0a800af) returned 0xaf00a8c0
	[0174.042] socket (af=2, type=1, protocol=6) returned 0x3c0
	[0174.042] ioctlsocket (in: s=0x3c0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.042] connect (s=0x3c0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.175"), namelen=16) returned -1
	[0174.043] WSAGetLastError () returned 10035
	[0174.043] htonl (hostlong=0xc0a800b0) returned 0xb000a8c0
	[0174.043] socket (af=2, type=1, protocol=6) returned 0x3c4
	[0174.043] ioctlsocket (in: s=0x3c4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.043] connect (s=0x3c4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.176"), namelen=16) returned -1
	[0174.043] WSAGetLastError () returned 10035
	[0174.043] htonl (hostlong=0xc0a800b1) returned 0xb100a8c0
	[0174.043] socket (af=2, type=1, protocol=6) returned 0x3c8
	[0174.044] ioctlsocket (in: s=0x3c8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.044] connect (s=0x3c8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.177"), namelen=16) returned -1
	[0174.044] WSAGetLastError () returned 10035
	[0174.044] htonl (hostlong=0xc0a800b2) returned 0xb200a8c0
	[0174.044] socket (af=2, type=1, protocol=6) returned 0x3cc
	[0174.044] ioctlsocket (in: s=0x3cc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.044] connect (s=0x3cc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.178"), namelen=16) returned -1
	[0174.045] WSAGetLastError () returned 10035
	[0174.045] htonl (hostlong=0xc0a800b3) returned 0xb300a8c0
	[0174.045] socket (af=2, type=1, protocol=6) returned 0x3d0
	[0174.045] ioctlsocket (in: s=0x3d0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.045] connect (s=0x3d0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.179"), namelen=16) returned -1
	[0174.045] WSAGetLastError () returned 10035
	[0174.045] htonl (hostlong=0xc0a800b4) returned 0xb400a8c0
	[0174.045] socket (af=2, type=1, protocol=6) returned 0x3d4
	[0174.045] ioctlsocket (in: s=0x3d4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.045] connect (s=0x3d4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.180"), namelen=16) returned -1
	[0174.046] WSAGetLastError () returned 10035
	[0174.046] htonl (hostlong=0xc0a800b5) returned 0xb500a8c0
	[0174.046] socket (af=2, type=1, protocol=6) returned 0x3d8
	[0174.046] ioctlsocket (in: s=0x3d8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.046] connect (s=0x3d8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.181"), namelen=16) returned -1
	[0174.046] WSAGetLastError () returned 10035
	[0174.046] htonl (hostlong=0xc0a800b6) returned 0xb600a8c0
	[0174.046] socket (af=2, type=1, protocol=6) returned 0x3dc
	[0174.047] ioctlsocket (in: s=0x3dc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.047] connect (s=0x3dc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.182"), namelen=16) returned -1
	[0174.047] WSAGetLastError () returned 10035
	[0174.047] htonl (hostlong=0xc0a800b7) returned 0xb700a8c0
	[0174.047] socket (af=2, type=1, protocol=6) returned 0x3e0
	[0174.047] ioctlsocket (in: s=0x3e0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.047] connect (s=0x3e0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.183"), namelen=16) returned -1
	[0174.048] WSAGetLastError () returned 10035
	[0174.048] htonl (hostlong=0xc0a800b8) returned 0xb800a8c0
	[0174.048] socket (af=2, type=1, protocol=6) returned 0x3e4
	[0174.048] ioctlsocket (in: s=0x3e4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.048] connect (s=0x3e4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.184"), namelen=16) returned -1
	[0174.048] WSAGetLastError () returned 10035
	[0174.048] htonl (hostlong=0xc0a800b9) returned 0xb900a8c0
	[0174.048] socket (af=2, type=1, protocol=6) returned 0x3e8
	[0174.048] ioctlsocket (in: s=0x3e8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.048] connect (s=0x3e8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.185"), namelen=16) returned -1
	[0174.049] WSAGetLastError () returned 10035
	[0174.049] htonl (hostlong=0xc0a800ba) returned 0xba00a8c0
	[0174.049] socket (af=2, type=1, protocol=6) returned 0x3ec
	[0174.049] ioctlsocket (in: s=0x3ec, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.049] connect (s=0x3ec, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.186"), namelen=16) returned -1
	[0174.049] WSAGetLastError () returned 10035
	[0174.049] htonl (hostlong=0xc0a800bb) returned 0xbb00a8c0
	[0174.049] socket (af=2, type=1, protocol=6) returned 0x3f0
	[0174.050] ioctlsocket (in: s=0x3f0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.050] connect (s=0x3f0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.187"), namelen=16) returned -1
	[0174.050] WSAGetLastError () returned 10035
	[0174.050] htonl (hostlong=0xc0a800bc) returned 0xbc00a8c0
	[0174.050] socket (af=2, type=1, protocol=6) returned 0x3f4
	[0174.050] ioctlsocket (in: s=0x3f4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.050] connect (s=0x3f4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.188"), namelen=16) returned -1
	[0174.051] WSAGetLastError () returned 10035
	[0174.051] htonl (hostlong=0xc0a800bd) returned 0xbd00a8c0
	[0174.051] socket (af=2, type=1, protocol=6) returned 0x3f8
	[0174.051] ioctlsocket (in: s=0x3f8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.051] connect (s=0x3f8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.189"), namelen=16) returned -1
	[0174.051] WSAGetLastError () returned 10035
	[0174.051] htonl (hostlong=0xc0a800be) returned 0xbe00a8c0
	[0174.051] socket (af=2, type=1, protocol=6) returned 0x3fc
	[0174.052] ioctlsocket (in: s=0x3fc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.052] connect (s=0x3fc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.190"), namelen=16) returned -1
	[0174.052] WSAGetLastError () returned 10035
	[0174.052] htonl (hostlong=0xc0a800bf) returned 0xbf00a8c0
	[0174.052] socket (af=2, type=1, protocol=6) returned 0x404
	[0174.052] ioctlsocket (in: s=0x404, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.052] connect (s=0x404, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.191"), namelen=16) returned -1
	[0174.053] WSAGetLastError () returned 10035
	[0174.053] htonl (hostlong=0xc0a800c0) returned 0xc000a8c0
	[0174.053] socket (af=2, type=1, protocol=6) returned 0x408
	[0174.053] ioctlsocket (in: s=0x408, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.053] connect (s=0x408, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.192"), namelen=16) returned -1
	[0174.053] WSAGetLastError () returned 10035
	[0174.053] htonl (hostlong=0xc0a800c1) returned 0xc100a8c0
	[0174.053] socket (af=2, type=1, protocol=6) returned 0x40c
	[0174.054] ioctlsocket (in: s=0x40c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.054] connect (s=0x40c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.193"), namelen=16) returned -1
	[0174.054] WSAGetLastError () returned 10035
	[0174.054] htonl (hostlong=0xc0a800c2) returned 0xc200a8c0
	[0174.054] socket (af=2, type=1, protocol=6) returned 0x410
	[0174.054] ioctlsocket (in: s=0x410, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.054] connect (s=0x410, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.194"), namelen=16) returned -1
	[0174.055] WSAGetLastError () returned 10035
	[0174.055] htonl (hostlong=0xc0a800c3) returned 0xc300a8c0
	[0174.055] socket (af=2, type=1, protocol=6) returned 0x414
	[0174.055] ioctlsocket (in: s=0x414, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.055] connect (s=0x414, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.195"), namelen=16) returned -1
	[0174.055] WSAGetLastError () returned 10035
	[0174.055] htonl (hostlong=0xc0a800c4) returned 0xc400a8c0
	[0174.055] socket (af=2, type=1, protocol=6) returned 0x418
	[0174.055] ioctlsocket (in: s=0x418, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.055] connect (s=0x418, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.196"), namelen=16) returned -1
	[0174.056] WSAGetLastError () returned 10035
	[0174.056] htonl (hostlong=0xc0a800c5) returned 0xc500a8c0
	[0174.056] socket (af=2, type=1, protocol=6) returned 0x41c
	[0174.056] ioctlsocket (in: s=0x41c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.056] connect (s=0x41c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.197"), namelen=16) returned -1
	[0174.056] WSAGetLastError () returned 10035
	[0174.056] htonl (hostlong=0xc0a800c6) returned 0xc600a8c0
	[0174.056] socket (af=2, type=1, protocol=6) returned 0x420
	[0174.057] ioctlsocket (in: s=0x420, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.057] connect (s=0x420, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.198"), namelen=16) returned -1
	[0174.057] WSAGetLastError () returned 10035
	[0174.057] htonl (hostlong=0xc0a800c7) returned 0xc700a8c0
	[0174.057] socket (af=2, type=1, protocol=6) returned 0x424
	[0174.057] ioctlsocket (in: s=0x424, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.057] connect (s=0x424, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.199"), namelen=16) returned -1
	[0174.058] WSAGetLastError () returned 10035
	[0174.058] htonl (hostlong=0xc0a800c8) returned 0xc800a8c0
	[0174.058] socket (af=2, type=1, protocol=6) returned 0x428
	[0174.058] ioctlsocket (in: s=0x428, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.058] connect (s=0x428, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.200"), namelen=16) returned -1
	[0174.058] WSAGetLastError () returned 10035
	[0174.058] htonl (hostlong=0xc0a800c9) returned 0xc900a8c0
	[0174.058] socket (af=2, type=1, protocol=6) returned 0x42c
	[0174.058] ioctlsocket (in: s=0x42c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.058] connect (s=0x42c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.201"), namelen=16) returned -1
	[0174.059] WSAGetLastError () returned 10035
	[0174.059] htonl (hostlong=0xc0a800ca) returned 0xca00a8c0
	[0174.059] socket (af=2, type=1, protocol=6) returned 0x430
	[0174.059] ioctlsocket (in: s=0x430, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.059] connect (s=0x430, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.202"), namelen=16) returned -1
	[0174.059] WSAGetLastError () returned 10035
	[0174.059] htonl (hostlong=0xc0a800cb) returned 0xcb00a8c0
	[0174.059] socket (af=2, type=1, protocol=6) returned 0x434
	[0174.060] ioctlsocket (in: s=0x434, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.060] connect (s=0x434, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.203"), namelen=16) returned -1
	[0174.060] WSAGetLastError () returned 10035
	[0174.060] htonl (hostlong=0xc0a800cc) returned 0xcc00a8c0
	[0174.060] socket (af=2, type=1, protocol=6) returned 0x438
	[0174.060] ioctlsocket (in: s=0x438, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.060] connect (s=0x438, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.204"), namelen=16) returned -1
	[0174.061] WSAGetLastError () returned 10035
	[0174.061] htonl (hostlong=0xc0a800cd) returned 0xcd00a8c0
	[0174.061] socket (af=2, type=1, protocol=6) returned 0x43c
	[0174.061] ioctlsocket (in: s=0x43c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.061] connect (s=0x43c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.205"), namelen=16) returned -1
	[0174.061] WSAGetLastError () returned 10035
	[0174.061] htonl (hostlong=0xc0a800ce) returned 0xce00a8c0
	[0174.061] socket (af=2, type=1, protocol=6) returned 0x440
	[0174.061] ioctlsocket (in: s=0x440, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.062] connect (s=0x440, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.206"), namelen=16) returned -1
	[0174.062] WSAGetLastError () returned 10035
	[0174.062] htonl (hostlong=0xc0a800cf) returned 0xcf00a8c0
	[0174.062] socket (af=2, type=1, protocol=6) returned 0x444
	[0174.062] ioctlsocket (in: s=0x444, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.062] connect (s=0x444, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.207"), namelen=16) returned -1
	[0174.063] WSAGetLastError () returned 10035
	[0174.063] htonl (hostlong=0xc0a800d0) returned 0xd000a8c0
	[0174.063] socket (af=2, type=1, protocol=6) returned 0x448
	[0174.063] ioctlsocket (in: s=0x448, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.063] connect (s=0x448, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.208"), namelen=16) returned -1
	[0174.063] WSAGetLastError () returned 10035
	[0174.063] htonl (hostlong=0xc0a800d1) returned 0xd100a8c0
	[0174.063] socket (af=2, type=1, protocol=6) returned 0x44c
	[0174.064] ioctlsocket (in: s=0x44c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.064] connect (s=0x44c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.209"), namelen=16) returned -1
	[0174.064] WSAGetLastError () returned 10035
	[0174.064] htonl (hostlong=0xc0a800d2) returned 0xd200a8c0
	[0174.064] socket (af=2, type=1, protocol=6) returned 0x450
	[0174.064] ioctlsocket (in: s=0x450, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.064] connect (s=0x450, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.210"), namelen=16) returned -1
	[0174.065] WSAGetLastError () returned 10035
	[0174.065] htonl (hostlong=0xc0a800d3) returned 0xd300a8c0
	[0174.065] socket (af=2, type=1, protocol=6) returned 0x454
	[0174.065] ioctlsocket (in: s=0x454, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.065] connect (s=0x454, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.211"), namelen=16) returned -1
	[0174.065] WSAGetLastError () returned 10035
	[0174.065] htonl (hostlong=0xc0a800d4) returned 0xd400a8c0
	[0174.065] socket (af=2, type=1, protocol=6) returned 0x458
	[0174.065] ioctlsocket (in: s=0x458, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.065] connect (s=0x458, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.212"), namelen=16) returned -1
	[0174.066] WSAGetLastError () returned 10035
	[0174.066] htonl (hostlong=0xc0a800d5) returned 0xd500a8c0
	[0174.066] socket (af=2, type=1, protocol=6) returned 0x45c
	[0174.066] ioctlsocket (in: s=0x45c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.066] connect (s=0x45c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.213"), namelen=16) returned -1
	[0174.066] WSAGetLastError () returned 10035
	[0174.066] htonl (hostlong=0xc0a800d6) returned 0xd600a8c0
	[0174.066] socket (af=2, type=1, protocol=6) returned 0x460
	[0174.067] ioctlsocket (in: s=0x460, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.067] connect (s=0x460, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.214"), namelen=16) returned -1
	[0174.067] WSAGetLastError () returned 10035
	[0174.067] htonl (hostlong=0xc0a800d7) returned 0xd700a8c0
	[0174.067] socket (af=2, type=1, protocol=6) returned 0x464
	[0174.067] ioctlsocket (in: s=0x464, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.067] connect (s=0x464, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.215"), namelen=16) returned -1
	[0174.068] WSAGetLastError () returned 10035
	[0174.068] htonl (hostlong=0xc0a800d8) returned 0xd800a8c0
	[0174.068] socket (af=2, type=1, protocol=6) returned 0x468
	[0174.068] ioctlsocket (in: s=0x468, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.068] connect (s=0x468, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.216"), namelen=16) returned -1
	[0174.068] WSAGetLastError () returned 10035
	[0174.068] htonl (hostlong=0xc0a800d9) returned 0xd900a8c0
	[0174.068] socket (af=2, type=1, protocol=6) returned 0x46c
	[0174.068] ioctlsocket (in: s=0x46c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.068] connect (s=0x46c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.217"), namelen=16) returned -1
	[0174.069] WSAGetLastError () returned 10035
	[0174.069] htonl (hostlong=0xc0a800da) returned 0xda00a8c0
	[0174.069] socket (af=2, type=1, protocol=6) returned 0x470
	[0174.069] ioctlsocket (in: s=0x470, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.069] connect (s=0x470, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.218"), namelen=16) returned -1
	[0174.069] WSAGetLastError () returned 10035
	[0174.069] htonl (hostlong=0xc0a800db) returned 0xdb00a8c0
	[0174.069] socket (af=2, type=1, protocol=6) returned 0x474
	[0174.070] ioctlsocket (in: s=0x474, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.070] connect (s=0x474, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.219"), namelen=16) returned -1
	[0174.070] WSAGetLastError () returned 10035
	[0174.070] htonl (hostlong=0xc0a800dc) returned 0xdc00a8c0
	[0174.070] socket (af=2, type=1, protocol=6) returned 0x478
	[0174.070] ioctlsocket (in: s=0x478, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.070] connect (s=0x478, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.220"), namelen=16) returned -1
	[0174.071] WSAGetLastError () returned 10035
	[0174.071] htonl (hostlong=0xc0a800dd) returned 0xdd00a8c0
	[0174.071] socket (af=2, type=1, protocol=6) returned 0x47c
	[0174.071] ioctlsocket (in: s=0x47c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.071] connect (s=0x47c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.221"), namelen=16) returned -1
	[0174.071] WSAGetLastError () returned 10035
	[0174.071] htonl (hostlong=0xc0a800de) returned 0xde00a8c0
	[0174.071] socket (af=2, type=1, protocol=6) returned 0x480
	[0174.071] ioctlsocket (in: s=0x480, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.071] connect (s=0x480, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.222"), namelen=16) returned -1
	[0174.072] WSAGetLastError () returned 10035
	[0174.072] htonl (hostlong=0xc0a800df) returned 0xdf00a8c0
	[0174.072] socket (af=2, type=1, protocol=6) returned 0x484
	[0174.072] ioctlsocket (in: s=0x484, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.072] connect (s=0x484, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.223"), namelen=16) returned -1
	[0174.074] WSAGetLastError () returned 10035
	[0174.074] htonl (hostlong=0xc0a800e0) returned 0xe000a8c0
	[0174.074] socket (af=2, type=1, protocol=6) returned 0x488
	[0174.075] ioctlsocket (in: s=0x488, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.075] connect (s=0x488, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.224"), namelen=16) returned -1
	[0174.075] WSAGetLastError () returned 10035
	[0174.075] htonl (hostlong=0xc0a800e1) returned 0xe100a8c0
	[0174.075] socket (af=2, type=1, protocol=6) returned 0x48c
	[0174.075] ioctlsocket (in: s=0x48c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.075] connect (s=0x48c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.225"), namelen=16) returned -1
	[0174.076] WSAGetLastError () returned 10035
	[0174.076] htonl (hostlong=0xc0a800e2) returned 0xe200a8c0
	[0174.076] socket (af=2, type=1, protocol=6) returned 0x490
	[0174.076] ioctlsocket (in: s=0x490, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.076] connect (s=0x490, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.226"), namelen=16) returned -1
	[0174.076] WSAGetLastError () returned 10035
	[0174.076] htonl (hostlong=0xc0a800e3) returned 0xe300a8c0
	[0174.076] socket (af=2, type=1, protocol=6) returned 0x494
	[0174.076] ioctlsocket (in: s=0x494, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.077] connect (s=0x494, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.227"), namelen=16) returned -1
	[0174.077] WSAGetLastError () returned 10035
	[0174.077] htonl (hostlong=0xc0a800e4) returned 0xe400a8c0
	[0174.077] socket (af=2, type=1, protocol=6) returned 0x498
	[0174.077] ioctlsocket (in: s=0x498, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.077] connect (s=0x498, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.228"), namelen=16) returned -1
	[0174.078] WSAGetLastError () returned 10035
	[0174.078] htonl (hostlong=0xc0a800e5) returned 0xe500a8c0
	[0174.078] socket (af=2, type=1, protocol=6) returned 0x49c
	[0174.078] ioctlsocket (in: s=0x49c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.078] connect (s=0x49c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.229"), namelen=16) returned -1
	[0174.078] WSAGetLastError () returned 10035
	[0174.078] htonl (hostlong=0xc0a800e6) returned 0xe600a8c0
	[0174.078] socket (af=2, type=1, protocol=6) returned 0x4a0
	[0174.078] ioctlsocket (in: s=0x4a0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.078] connect (s=0x4a0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.230"), namelen=16) returned -1
	[0174.079] WSAGetLastError () returned 10035
	[0174.079] htonl (hostlong=0xc0a800e7) returned 0xe700a8c0
	[0174.079] socket (af=2, type=1, protocol=6) returned 0x4a4
	[0174.079] ioctlsocket (in: s=0x4a4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.079] connect (s=0x4a4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.231"), namelen=16) returned -1
	[0174.079] WSAGetLastError () returned 10035
	[0174.079] htonl (hostlong=0xc0a800e8) returned 0xe800a8c0
	[0174.079] socket (af=2, type=1, protocol=6) returned 0x4a8
	[0174.080] ioctlsocket (in: s=0x4a8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.080] connect (s=0x4a8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.232"), namelen=16) returned -1
	[0174.080] WSAGetLastError () returned 10035
	[0174.080] htonl (hostlong=0xc0a800e9) returned 0xe900a8c0
	[0174.080] socket (af=2, type=1, protocol=6) returned 0x4ac
	[0174.080] ioctlsocket (in: s=0x4ac, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.080] connect (s=0x4ac, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.233"), namelen=16) returned -1
	[0174.081] WSAGetLastError () returned 10035
	[0174.081] htonl (hostlong=0xc0a800ea) returned 0xea00a8c0
	[0174.081] socket (af=2, type=1, protocol=6) returned 0x4b0
	[0174.081] ioctlsocket (in: s=0x4b0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.081] connect (s=0x4b0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.234"), namelen=16) returned -1
	[0174.081] WSAGetLastError () returned 10035
	[0174.081] htonl (hostlong=0xc0a800eb) returned 0xeb00a8c0
	[0174.081] socket (af=2, type=1, protocol=6) returned 0x4b4
	[0174.081] ioctlsocket (in: s=0x4b4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.081] connect (s=0x4b4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.235"), namelen=16) returned -1
	[0174.082] WSAGetLastError () returned 10035
	[0174.082] htonl (hostlong=0xc0a800ec) returned 0xec00a8c0
	[0174.082] socket (af=2, type=1, protocol=6) returned 0x4b8
	[0174.082] ioctlsocket (in: s=0x4b8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.082] connect (s=0x4b8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.236"), namelen=16) returned -1
	[0174.082] WSAGetLastError () returned 10035
	[0174.082] htonl (hostlong=0xc0a800ed) returned 0xed00a8c0
	[0174.082] socket (af=2, type=1, protocol=6) returned 0x4bc
	[0174.083] ioctlsocket (in: s=0x4bc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.083] connect (s=0x4bc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.237"), namelen=16) returned -1
	[0174.083] WSAGetLastError () returned 10035
	[0174.083] htonl (hostlong=0xc0a800ee) returned 0xee00a8c0
	[0174.083] socket (af=2, type=1, protocol=6) returned 0x4c0
	[0174.083] ioctlsocket (in: s=0x4c0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.083] connect (s=0x4c0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.238"), namelen=16) returned -1
	[0174.084] WSAGetLastError () returned 10035
	[0174.084] htonl (hostlong=0xc0a800ef) returned 0xef00a8c0
	[0174.084] socket (af=2, type=1, protocol=6) returned 0x4c4
	[0174.084] ioctlsocket (in: s=0x4c4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.084] connect (s=0x4c4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.239"), namelen=16) returned -1
	[0174.084] WSAGetLastError () returned 10035
	[0174.084] htonl (hostlong=0xc0a800f0) returned 0xf000a8c0
	[0174.084] socket (af=2, type=1, protocol=6) returned 0x4c8
	[0174.084] ioctlsocket (in: s=0x4c8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.084] connect (s=0x4c8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.240"), namelen=16) returned -1
	[0174.085] WSAGetLastError () returned 10035
	[0174.085] htonl (hostlong=0xc0a800f1) returned 0xf100a8c0
	[0174.085] socket (af=2, type=1, protocol=6) returned 0x4cc
	[0174.085] ioctlsocket (in: s=0x4cc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.085] connect (s=0x4cc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.241"), namelen=16) returned -1
	[0174.085] WSAGetLastError () returned 10035
	[0174.085] htonl (hostlong=0xc0a800f2) returned 0xf200a8c0
	[0174.085] socket (af=2, type=1, protocol=6) returned 0x4d0
	[0174.086] ioctlsocket (in: s=0x4d0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.086] connect (s=0x4d0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.242"), namelen=16) returned -1
	[0174.086] WSAGetLastError () returned 10035
	[0174.086] htonl (hostlong=0xc0a800f3) returned 0xf300a8c0
	[0174.086] socket (af=2, type=1, protocol=6) returned 0x4d4
	[0174.086] ioctlsocket (in: s=0x4d4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.086] connect (s=0x4d4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.243"), namelen=16) returned -1
	[0174.087] WSAGetLastError () returned 10035
	[0174.087] htonl (hostlong=0xc0a800f4) returned 0xf400a8c0
	[0174.087] socket (af=2, type=1, protocol=6) returned 0x4d8
	[0174.087] ioctlsocket (in: s=0x4d8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.087] connect (s=0x4d8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.244"), namelen=16) returned -1
	[0174.093] WSAGetLastError () returned 10035
	[0174.093] htonl (hostlong=0xc0a800f5) returned 0xf500a8c0
	[0174.093] socket (af=2, type=1, protocol=6) returned 0x4dc
	[0174.093] ioctlsocket (in: s=0x4dc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.093] connect (s=0x4dc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.245"), namelen=16) returned -1
	[0174.094] WSAGetLastError () returned 10035
	[0174.094] htonl (hostlong=0xc0a800f6) returned 0xf600a8c0
	[0174.094] socket (af=2, type=1, protocol=6) returned 0x4e0
	[0174.094] ioctlsocket (in: s=0x4e0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.094] connect (s=0x4e0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.246"), namelen=16) returned -1
	[0174.094] WSAGetLastError () returned 10035
	[0174.094] htonl (hostlong=0xc0a800f7) returned 0xf700a8c0
	[0174.094] socket (af=2, type=1, protocol=6) returned 0x4e4
	[0174.094] ioctlsocket (in: s=0x4e4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.095] connect (s=0x4e4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.247"), namelen=16) returned -1
	[0174.095] WSAGetLastError () returned 10035
	[0174.095] htonl (hostlong=0xc0a800f8) returned 0xf800a8c0
	[0174.095] socket (af=2, type=1, protocol=6) returned 0x4e8
	[0174.095] ioctlsocket (in: s=0x4e8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.095] connect (s=0x4e8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.248"), namelen=16) returned -1
	[0174.096] WSAGetLastError () returned 10035
	[0174.096] htonl (hostlong=0xc0a800f9) returned 0xf900a8c0
	[0174.096] socket (af=2, type=1, protocol=6) returned 0x4ec
	[0174.096] ioctlsocket (in: s=0x4ec, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.096] connect (s=0x4ec, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.249"), namelen=16) returned -1
	[0174.096] WSAGetLastError () returned 10035
	[0174.096] htonl (hostlong=0xc0a800fa) returned 0xfa00a8c0
	[0174.096] socket (af=2, type=1, protocol=6) returned 0x4f0
	[0174.096] ioctlsocket (in: s=0x4f0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.096] connect (s=0x4f0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.250"), namelen=16) returned -1
	[0174.097] WSAGetLastError () returned 10035
	[0174.097] htonl (hostlong=0xc0a800fb) returned 0xfb00a8c0
	[0174.097] socket (af=2, type=1, protocol=6) returned 0x4f4
	[0174.097] ioctlsocket (in: s=0x4f4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.097] connect (s=0x4f4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.251"), namelen=16) returned -1
	[0174.097] WSAGetLastError () returned 10035
	[0174.097] htonl (hostlong=0xc0a800fc) returned 0xfc00a8c0
	[0174.097] socket (af=2, type=1, protocol=6) returned 0x4f8
	[0174.098] ioctlsocket (in: s=0x4f8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.098] connect (s=0x4f8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.252"), namelen=16) returned -1
	[0174.098] WSAGetLastError () returned 10035
	[0174.098] htonl (hostlong=0xc0a800fd) returned 0xfd00a8c0
	[0174.098] socket (af=2, type=1, protocol=6) returned 0x4fc
	[0174.098] ioctlsocket (in: s=0x4fc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.098] connect (s=0x4fc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.253"), namelen=16) returned -1
	[0174.099] WSAGetLastError () returned 10035
	[0174.099] htonl (hostlong=0xc0a800fe) returned 0xfe00a8c0
	[0174.099] socket (af=2, type=1, protocol=6) returned 0x500
	[0174.099] ioctlsocket (in: s=0x500, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0174.099] connect (s=0x500, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.254"), namelen=16) returned -1
	[0174.099] WSAGetLastError () returned 10035
	[0174.099] GetTickCount () returned 0x1141b9c
	[0174.099] GetTickCount () returned 0x1141b9c
	[0174.099] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.100] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.100] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.101] GetTickCount () returned 0x1141b9c
	[0174.101] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.102] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.102] GetTickCount () returned 0x1141b9c
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141b9c
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141b9c
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.103] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.103] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.104] GetTickCount () returned 0x1141bac
	[0174.104] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.105] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.105] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.106] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.106] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.107] GetTickCount () returned 0x1141bac
	[0174.107] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.108] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.108] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.109] GetTickCount () returned 0x1141bac
	[0174.109] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.110] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.110] GetTickCount () returned 0x1141bac
	[0174.111] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.111] GetTickCount () returned 0x1141bac
	[0174.111] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.111] GetTickCount () returned 0x1141bac
	[0174.111] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.111] GetTickCount () returned 0x1141bac
	[0174.111] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.111] GetTickCount () returned 0x1141bac
	[0174.111] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0174.111] GetTickCount () returned 0x1141bac
	[0174.111] getsockopt (in: s=0x500, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.111] recv (in: s=0x500, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.111] WSAGetLastError () returned 10057
	[0174.111] closesocket (s=0x500) returned 0
	[0174.112] getsockopt (in: s=0x4fc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.112] recv (in: s=0x4fc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.112] WSAGetLastError () returned 10057
	[0174.112] closesocket (s=0x4fc) returned 0
	[0174.113] getsockopt (in: s=0x4f8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.113] recv (in: s=0x4f8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.113] WSAGetLastError () returned 10057
	[0174.113] closesocket (s=0x4f8) returned 0
	[0174.113] getsockopt (in: s=0x4f4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.113] recv (in: s=0x4f4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.113] WSAGetLastError () returned 10057
	[0174.113] closesocket (s=0x4f4) returned 0
	[0174.114] getsockopt (in: s=0x4f0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.114] recv (in: s=0x4f0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.114] WSAGetLastError () returned 10057
	[0174.114] closesocket (s=0x4f0) returned 0
	[0174.114] getsockopt (in: s=0x4ec, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.114] recv (in: s=0x4ec, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.114] WSAGetLastError () returned 10057
	[0174.114] closesocket (s=0x4ec) returned 0
	[0174.114] getsockopt (in: s=0x4e8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.115] recv (in: s=0x4e8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.115] WSAGetLastError () returned 10057
	[0174.115] closesocket (s=0x4e8) returned 0
	[0174.115] getsockopt (in: s=0x4e4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.115] recv (in: s=0x4e4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.115] WSAGetLastError () returned 10057
	[0174.115] closesocket (s=0x4e4) returned 0
	[0174.115] getsockopt (in: s=0x4e0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.115] recv (in: s=0x4e0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.115] WSAGetLastError () returned 10057
	[0174.115] closesocket (s=0x4e0) returned 0
	[0174.116] getsockopt (in: s=0x4dc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.116] recv (in: s=0x4dc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.116] WSAGetLastError () returned 10057
	[0174.116] closesocket (s=0x4dc) returned 0
	[0174.116] getsockopt (in: s=0x4d8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.116] recv (in: s=0x4d8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.116] WSAGetLastError () returned 10057
	[0174.116] closesocket (s=0x4d8) returned 0
	[0174.117] getsockopt (in: s=0x4d4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.117] recv (in: s=0x4d4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.117] WSAGetLastError () returned 10057
	[0174.117] closesocket (s=0x4d4) returned 0
	[0174.117] getsockopt (in: s=0x4d0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.117] recv (in: s=0x4d0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.117] WSAGetLastError () returned 10057
	[0174.117] closesocket (s=0x4d0) returned 0
	[0174.118] getsockopt (in: s=0x4cc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.118] recv (in: s=0x4cc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.118] WSAGetLastError () returned 10057
	[0174.118] closesocket (s=0x4cc) returned 0
	[0174.118] getsockopt (in: s=0x4c8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.118] recv (in: s=0x4c8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.118] WSAGetLastError () returned 10057
	[0174.118] closesocket (s=0x4c8) returned 0
	[0174.119] getsockopt (in: s=0x4c4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.119] recv (in: s=0x4c4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.119] WSAGetLastError () returned 10057
	[0174.119] closesocket (s=0x4c4) returned 0
	[0174.119] getsockopt (in: s=0x4c0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.119] recv (in: s=0x4c0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.119] WSAGetLastError () returned 10057
	[0174.119] closesocket (s=0x4c0) returned 0
	[0174.120] getsockopt (in: s=0x4bc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.120] recv (in: s=0x4bc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.120] WSAGetLastError () returned 10057
	[0174.120] closesocket (s=0x4bc) returned 0
	[0174.120] getsockopt (in: s=0x4b8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.120] recv (in: s=0x4b8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.120] WSAGetLastError () returned 10057
	[0174.120] closesocket (s=0x4b8) returned 0
	[0174.121] getsockopt (in: s=0x4b4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.121] recv (in: s=0x4b4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.121] WSAGetLastError () returned 10057
	[0174.121] closesocket (s=0x4b4) returned 0
	[0174.121] getsockopt (in: s=0x4b0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.121] recv (in: s=0x4b0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.121] WSAGetLastError () returned 10057
	[0174.121] closesocket (s=0x4b0) returned 0
	[0174.121] getsockopt (in: s=0x4ac, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.121] recv (in: s=0x4ac, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.122] WSAGetLastError () returned 10057
	[0174.122] closesocket (s=0x4ac) returned 0
	[0174.122] getsockopt (in: s=0x4a8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.122] recv (in: s=0x4a8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.122] WSAGetLastError () returned 10057
	[0174.122] closesocket (s=0x4a8) returned 0
	[0174.122] getsockopt (in: s=0x4a4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.122] recv (in: s=0x4a4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.122] WSAGetLastError () returned 10057
	[0174.122] closesocket (s=0x4a4) returned 0
	[0174.123] getsockopt (in: s=0x4a0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.123] recv (in: s=0x4a0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.123] WSAGetLastError () returned 10057
	[0174.123] closesocket (s=0x4a0) returned 0
	[0174.123] getsockopt (in: s=0x49c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.123] recv (in: s=0x49c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.123] WSAGetLastError () returned 10057
	[0174.123] closesocket (s=0x49c) returned 0
	[0174.124] getsockopt (in: s=0x498, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.124] recv (in: s=0x498, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.124] WSAGetLastError () returned 10057
	[0174.124] closesocket (s=0x498) returned 0
	[0174.124] getsockopt (in: s=0x494, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.124] recv (in: s=0x494, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.124] WSAGetLastError () returned 10057
	[0174.124] closesocket (s=0x494) returned 0
	[0174.125] getsockopt (in: s=0x490, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.125] recv (in: s=0x490, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.125] WSAGetLastError () returned 10057
	[0174.125] closesocket (s=0x490) returned 0
	[0174.125] getsockopt (in: s=0x48c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.125] recv (in: s=0x48c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.125] WSAGetLastError () returned 10057
	[0174.125] closesocket (s=0x48c) returned 0
	[0174.126] getsockopt (in: s=0x488, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.126] recv (in: s=0x488, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.126] WSAGetLastError () returned 10057
	[0174.126] closesocket (s=0x488) returned 0
	[0174.126] getsockopt (in: s=0x484, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.126] recv (in: s=0x484, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.126] WSAGetLastError () returned 10057
	[0174.126] closesocket (s=0x484) returned 0
	[0174.127] getsockopt (in: s=0x480, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.127] recv (in: s=0x480, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.127] WSAGetLastError () returned 10057
	[0174.127] closesocket (s=0x480) returned 0
	[0174.127] getsockopt (in: s=0x47c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.127] recv (in: s=0x47c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.127] WSAGetLastError () returned 10057
	[0174.127] closesocket (s=0x47c) returned 0
	[0174.127] getsockopt (in: s=0x478, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.127] recv (in: s=0x478, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.128] WSAGetLastError () returned 10057
	[0174.128] closesocket (s=0x478) returned 0
	[0174.128] getsockopt (in: s=0x474, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.128] recv (in: s=0x474, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.128] WSAGetLastError () returned 10057
	[0174.128] closesocket (s=0x474) returned 0
	[0174.128] getsockopt (in: s=0x470, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.128] recv (in: s=0x470, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.128] WSAGetLastError () returned 10057
	[0174.128] closesocket (s=0x470) returned 0
	[0174.129] getsockopt (in: s=0x46c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.129] recv (in: s=0x46c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.129] WSAGetLastError () returned 10057
	[0174.129] closesocket (s=0x46c) returned 0
	[0174.129] getsockopt (in: s=0x468, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.129] recv (in: s=0x468, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.129] WSAGetLastError () returned 10057
	[0174.129] closesocket (s=0x468) returned 0
	[0174.130] getsockopt (in: s=0x464, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.130] recv (in: s=0x464, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.130] WSAGetLastError () returned 10057
	[0174.130] closesocket (s=0x464) returned 0
	[0174.130] getsockopt (in: s=0x460, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.130] recv (in: s=0x460, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.130] WSAGetLastError () returned 10057
	[0174.130] closesocket (s=0x460) returned 0
	[0174.131] getsockopt (in: s=0x45c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.131] recv (in: s=0x45c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.131] WSAGetLastError () returned 10057
	[0174.131] closesocket (s=0x45c) returned 0
	[0174.131] getsockopt (in: s=0x458, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.131] recv (in: s=0x458, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.131] WSAGetLastError () returned 10057
	[0174.131] closesocket (s=0x458) returned 0
	[0174.132] getsockopt (in: s=0x454, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.132] recv (in: s=0x454, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.132] WSAGetLastError () returned 10057
	[0174.132] closesocket (s=0x454) returned 0
	[0174.132] getsockopt (in: s=0x450, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.132] recv (in: s=0x450, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.132] WSAGetLastError () returned 10057
	[0174.132] closesocket (s=0x450) returned 0
	[0174.133] getsockopt (in: s=0x44c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.133] recv (in: s=0x44c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.133] WSAGetLastError () returned 10057
	[0174.133] closesocket (s=0x44c) returned 0
	[0174.133] getsockopt (in: s=0x448, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.133] recv (in: s=0x448, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.133] WSAGetLastError () returned 10057
	[0174.133] closesocket (s=0x448) returned 0
	[0174.133] getsockopt (in: s=0x444, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.134] recv (in: s=0x444, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.134] WSAGetLastError () returned 10057
	[0174.134] closesocket (s=0x444) returned 0
	[0174.134] getsockopt (in: s=0x440, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.134] recv (in: s=0x440, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.134] WSAGetLastError () returned 10057
	[0174.134] closesocket (s=0x440) returned 0
	[0174.134] getsockopt (in: s=0x43c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.134] recv (in: s=0x43c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.135] WSAGetLastError () returned 10057
	[0174.135] closesocket (s=0x43c) returned 0
	[0174.135] getsockopt (in: s=0x438, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.135] recv (in: s=0x438, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.135] WSAGetLastError () returned 10057
	[0174.135] closesocket (s=0x438) returned 0
	[0174.135] getsockopt (in: s=0x434, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.135] recv (in: s=0x434, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.135] WSAGetLastError () returned 10057
	[0174.135] closesocket (s=0x434) returned 0
	[0174.136] getsockopt (in: s=0x430, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.136] recv (in: s=0x430, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.136] WSAGetLastError () returned 10057
	[0174.136] closesocket (s=0x430) returned 0
	[0174.136] getsockopt (in: s=0x42c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.136] recv (in: s=0x42c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.136] WSAGetLastError () returned 10057
	[0174.136] closesocket (s=0x42c) returned 0
	[0174.137] getsockopt (in: s=0x428, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.137] recv (in: s=0x428, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.137] WSAGetLastError () returned 10057
	[0174.137] closesocket (s=0x428) returned 0
	[0174.139] getsockopt (in: s=0x424, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.140] recv (in: s=0x424, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.140] WSAGetLastError () returned 10057
	[0174.140] closesocket (s=0x424) returned 0
	[0174.140] getsockopt (in: s=0x420, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.140] recv (in: s=0x420, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.140] WSAGetLastError () returned 10057
	[0174.140] closesocket (s=0x420) returned 0
	[0174.140] getsockopt (in: s=0x41c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.140] recv (in: s=0x41c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.140] WSAGetLastError () returned 10057
	[0174.140] closesocket (s=0x41c) returned 0
	[0174.141] getsockopt (in: s=0x418, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.141] recv (in: s=0x418, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.141] WSAGetLastError () returned 10057
	[0174.141] closesocket (s=0x418) returned 0
	[0174.141] getsockopt (in: s=0x414, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.141] recv (in: s=0x414, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.141] WSAGetLastError () returned 10057
	[0174.141] closesocket (s=0x414) returned 0
	[0174.142] getsockopt (in: s=0x410, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.142] recv (in: s=0x410, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.142] WSAGetLastError () returned 10057
	[0174.142] closesocket (s=0x410) returned 0
	[0174.142] getsockopt (in: s=0x40c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.142] recv (in: s=0x40c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.142] WSAGetLastError () returned 10057
	[0174.142] closesocket (s=0x40c) returned 0
	[0174.143] getsockopt (in: s=0x408, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.143] recv (in: s=0x408, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.143] WSAGetLastError () returned 10057
	[0174.143] closesocket (s=0x408) returned 0
	[0174.143] getsockopt (in: s=0x404, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.143] recv (in: s=0x404, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.143] WSAGetLastError () returned 10057
	[0174.143] closesocket (s=0x404) returned 0
	[0174.144] getsockopt (in: s=0x3fc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.144] recv (in: s=0x3fc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.144] WSAGetLastError () returned 10057
	[0174.144] closesocket (s=0x3fc) returned 0
	[0174.144] getsockopt (in: s=0x3f8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.144] recv (in: s=0x3f8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.144] WSAGetLastError () returned 10057
	[0174.144] closesocket (s=0x3f8) returned 0
	[0174.144] getsockopt (in: s=0x3f4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.144] recv (in: s=0x3f4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.144] WSAGetLastError () returned 10057
	[0174.145] closesocket (s=0x3f4) returned 0
	[0174.145] getsockopt (in: s=0x3f0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.145] recv (in: s=0x3f0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.145] WSAGetLastError () returned 10057
	[0174.145] closesocket (s=0x3f0) returned 0
	[0174.145] getsockopt (in: s=0x3ec, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.145] recv (in: s=0x3ec, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.145] WSAGetLastError () returned 10057
	[0174.145] closesocket (s=0x3ec) returned 0
	[0174.146] getsockopt (in: s=0x3e8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.146] recv (in: s=0x3e8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.146] WSAGetLastError () returned 10057
	[0174.146] closesocket (s=0x3e8) returned 0
	[0174.146] getsockopt (in: s=0x3e4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.146] recv (in: s=0x3e4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.146] WSAGetLastError () returned 10057
	[0174.146] closesocket (s=0x3e4) returned 0
	[0174.147] getsockopt (in: s=0x3e0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.147] recv (in: s=0x3e0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.147] WSAGetLastError () returned 10057
	[0174.147] closesocket (s=0x3e0) returned 0
	[0174.147] getsockopt (in: s=0x3dc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.147] recv (in: s=0x3dc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.147] WSAGetLastError () returned 10057
	[0174.147] closesocket (s=0x3dc) returned 0
	[0174.148] getsockopt (in: s=0x3d8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.148] recv (in: s=0x3d8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.148] WSAGetLastError () returned 10057
	[0174.148] closesocket (s=0x3d8) returned 0
	[0174.148] getsockopt (in: s=0x3d4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.148] recv (in: s=0x3d4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.148] WSAGetLastError () returned 10057
	[0174.148] closesocket (s=0x3d4) returned 0
	[0174.148] getsockopt (in: s=0x3d0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.148] recv (in: s=0x3d0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.148] WSAGetLastError () returned 10057
	[0174.149] closesocket (s=0x3d0) returned 0
	[0174.149] getsockopt (in: s=0x3cc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.149] recv (in: s=0x3cc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.149] WSAGetLastError () returned 10057
	[0174.149] closesocket (s=0x3cc) returned 0
	[0174.149] getsockopt (in: s=0x3c8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.149] recv (in: s=0x3c8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.149] WSAGetLastError () returned 10057
	[0174.149] closesocket (s=0x3c8) returned 0
	[0174.150] getsockopt (in: s=0x3c4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.150] recv (in: s=0x3c4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.150] WSAGetLastError () returned 10057
	[0174.150] closesocket (s=0x3c4) returned 0
	[0174.150] getsockopt (in: s=0x3c0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.150] recv (in: s=0x3c0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.150] WSAGetLastError () returned 10057
	[0174.150] closesocket (s=0x3c0) returned 0
	[0174.151] getsockopt (in: s=0x3bc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.151] recv (in: s=0x3bc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.151] WSAGetLastError () returned 10057
	[0174.151] closesocket (s=0x3bc) returned 0
	[0174.151] getsockopt (in: s=0x3b8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.151] recv (in: s=0x3b8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.151] WSAGetLastError () returned 10057
	[0174.151] closesocket (s=0x3b8) returned 0
	[0174.152] getsockopt (in: s=0x3b4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.152] recv (in: s=0x3b4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.152] WSAGetLastError () returned 10057
	[0174.152] closesocket (s=0x3b4) returned 0
	[0174.152] getsockopt (in: s=0x3b0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.152] recv (in: s=0x3b0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.152] WSAGetLastError () returned 10057
	[0174.152] closesocket (s=0x3b0) returned 0
	[0174.152] getsockopt (in: s=0x3ac, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.152] recv (in: s=0x3ac, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.153] WSAGetLastError () returned 10057
	[0174.153] closesocket (s=0x3ac) returned 0
	[0174.153] getsockopt (in: s=0x3a8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.153] recv (in: s=0x3a8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.153] WSAGetLastError () returned 10057
	[0174.153] closesocket (s=0x3a8) returned 0
	[0174.153] getsockopt (in: s=0x3a4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.153] recv (in: s=0x3a4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.153] WSAGetLastError () returned 10057
	[0174.153] closesocket (s=0x3a4) returned 0
	[0174.154] getsockopt (in: s=0x3a0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.154] recv (in: s=0x3a0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.154] WSAGetLastError () returned 10057
	[0174.154] closesocket (s=0x3a0) returned 0
	[0174.154] getsockopt (in: s=0x39c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.154] recv (in: s=0x39c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.154] WSAGetLastError () returned 10057
	[0174.154] closesocket (s=0x39c) returned 0
	[0174.155] getsockopt (in: s=0x398, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.155] recv (in: s=0x398, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.155] WSAGetLastError () returned 10057
	[0174.155] closesocket (s=0x398) returned 0
	[0174.155] getsockopt (in: s=0x394, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.155] recv (in: s=0x394, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.155] WSAGetLastError () returned 10057
	[0174.155] closesocket (s=0x394) returned 0
	[0174.156] getsockopt (in: s=0x390, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.156] recv (in: s=0x390, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.156] WSAGetLastError () returned 10057
	[0174.156] closesocket (s=0x390) returned 0
	[0174.156] getsockopt (in: s=0x38c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.156] recv (in: s=0x38c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.156] WSAGetLastError () returned 10057
	[0174.156] closesocket (s=0x38c) returned 0
	[0174.156] getsockopt (in: s=0x388, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.156] recv (in: s=0x388, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.157] WSAGetLastError () returned 10057
	[0174.157] closesocket (s=0x388) returned 0
	[0174.157] getsockopt (in: s=0x384, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.157] recv (in: s=0x384, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.157] WSAGetLastError () returned 10057
	[0174.157] closesocket (s=0x384) returned 0
	[0174.157] getsockopt (in: s=0x380, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.157] recv (in: s=0x380, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.157] WSAGetLastError () returned 10057
	[0174.157] closesocket (s=0x380) returned 0
	[0174.158] getsockopt (in: s=0x37c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.158] recv (in: s=0x37c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.158] WSAGetLastError () returned 10057
	[0174.158] closesocket (s=0x37c) returned 0
	[0174.158] getsockopt (in: s=0x378, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.158] recv (in: s=0x378, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.158] WSAGetLastError () returned 10057
	[0174.158] closesocket (s=0x378) returned 0
	[0174.159] getsockopt (in: s=0x374, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.159] recv (in: s=0x374, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.159] WSAGetLastError () returned 10057
	[0174.159] closesocket (s=0x374) returned 0
	[0174.159] getsockopt (in: s=0x370, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.159] recv (in: s=0x370, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.159] WSAGetLastError () returned 10057
	[0174.159] closesocket (s=0x370) returned 0
	[0174.160] getsockopt (in: s=0x36c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.160] recv (in: s=0x36c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.160] WSAGetLastError () returned 10057
	[0174.160] closesocket (s=0x36c) returned 0
	[0174.160] getsockopt (in: s=0x368, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.160] recv (in: s=0x368, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.160] WSAGetLastError () returned 10057
	[0174.160] closesocket (s=0x368) returned 0
	[0174.160] getsockopt (in: s=0x364, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.160] recv (in: s=0x364, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.161] WSAGetLastError () returned 10057
	[0174.161] closesocket (s=0x364) returned 0
	[0174.161] getsockopt (in: s=0x360, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.161] recv (in: s=0x360, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.161] WSAGetLastError () returned 10057
	[0174.161] closesocket (s=0x360) returned 0
	[0174.161] getsockopt (in: s=0x35c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.161] recv (in: s=0x35c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.161] WSAGetLastError () returned 10057
	[0174.161] closesocket (s=0x35c) returned 0
	[0174.162] getsockopt (in: s=0x358, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.162] recv (in: s=0x358, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.162] WSAGetLastError () returned 10057
	[0174.162] closesocket (s=0x358) returned 0
	[0174.162] getsockopt (in: s=0x354, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.162] recv (in: s=0x354, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.162] WSAGetLastError () returned 10057
	[0174.162] closesocket (s=0x354) returned 0
	[0174.163] getsockopt (in: s=0x350, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.163] recv (in: s=0x350, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.163] WSAGetLastError () returned 10057
	[0174.163] closesocket (s=0x350) returned 0
	[0174.163] getsockopt (in: s=0x34c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.163] recv (in: s=0x34c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.163] WSAGetLastError () returned 10057
	[0174.163] closesocket (s=0x34c) returned 0
	[0174.164] getsockopt (in: s=0x348, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.164] recv (in: s=0x348, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.164] WSAGetLastError () returned 10057
	[0174.164] closesocket (s=0x348) returned 0
	[0174.164] getsockopt (in: s=0x344, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.164] recv (in: s=0x344, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.164] WSAGetLastError () returned 10057
	[0174.164] closesocket (s=0x344) returned 0
	[0174.164] getsockopt (in: s=0x340, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.164] recv (in: s=0x340, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.165] WSAGetLastError () returned 10057
	[0174.165] closesocket (s=0x340) returned 0
	[0174.165] getsockopt (in: s=0x33c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.165] recv (in: s=0x33c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.165] WSAGetLastError () returned 10057
	[0174.165] closesocket (s=0x33c) returned 0
	[0174.165] getsockopt (in: s=0x338, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.165] recv (in: s=0x338, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.165] WSAGetLastError () returned 10057
	[0174.165] closesocket (s=0x338) returned 0
	[0174.166] getsockopt (in: s=0x334, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.166] recv (in: s=0x334, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.166] WSAGetLastError () returned 10057
	[0174.166] closesocket (s=0x334) returned 0
	[0174.166] getsockopt (in: s=0x330, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.166] recv (in: s=0x330, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.166] WSAGetLastError () returned 10057
	[0174.166] closesocket (s=0x330) returned 0
	[0174.167] getsockopt (in: s=0x32c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.167] recv (in: s=0x32c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.167] WSAGetLastError () returned 10057
	[0174.167] closesocket (s=0x32c) returned 0
	[0174.167] getsockopt (in: s=0x328, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.167] recv (in: s=0x328, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.167] WSAGetLastError () returned 10057
	[0174.167] closesocket (s=0x328) returned 0
	[0174.175] getsockopt (in: s=0x324, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.175] recv (in: s=0x324, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.175] WSAGetLastError () returned 10057
	[0174.175] closesocket (s=0x324) returned 0
	[0174.175] getsockopt (in: s=0x320, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.175] recv (in: s=0x320, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.175] WSAGetLastError () returned 10057
	[0174.175] closesocket (s=0x320) returned 0
	[0174.176] getsockopt (in: s=0x31c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.176] recv (in: s=0x31c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.176] WSAGetLastError () returned 10057
	[0174.176] closesocket (s=0x31c) returned 0
	[0174.176] getsockopt (in: s=0x318, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.176] recv (in: s=0x318, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.176] WSAGetLastError () returned 10057
	[0174.176] closesocket (s=0x318) returned 0
	[0174.177] getsockopt (in: s=0x314, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.177] recv (in: s=0x314, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.177] WSAGetLastError () returned 10057
	[0174.177] closesocket (s=0x314) returned 0
	[0174.177] getsockopt (in: s=0x310, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.177] recv (in: s=0x310, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.177] WSAGetLastError () returned 10057
	[0174.177] closesocket (s=0x310) returned 0
	[0174.178] getsockopt (in: s=0x30c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.178] recv (in: s=0x30c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.178] WSAGetLastError () returned 10057
	[0174.178] closesocket (s=0x30c) returned 0
	[0174.178] getsockopt (in: s=0x308, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.178] recv (in: s=0x308, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.178] WSAGetLastError () returned 10057
	[0174.178] closesocket (s=0x308) returned 0
	[0174.179] getsockopt (in: s=0x304, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.179] recv (in: s=0x304, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.179] WSAGetLastError () returned 10057
	[0174.179] closesocket (s=0x304) returned 0
	[0174.179] getsockopt (in: s=0x300, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.179] recv (in: s=0x300, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.179] WSAGetLastError () returned 10057
	[0174.179] closesocket (s=0x300) returned 0
	[0174.180] getsockopt (in: s=0x2fc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.180] recv (in: s=0x2fc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.180] WSAGetLastError () returned 10057
	[0174.180] closesocket (s=0x2fc) returned 0
	[0174.180] getsockopt (in: s=0x2f8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.180] recv (in: s=0x2f8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.180] WSAGetLastError () returned 10057
	[0174.180] closesocket (s=0x2f8) returned 0
	[0174.180] getsockopt (in: s=0x2f4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.180] recv (in: s=0x2f4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.180] WSAGetLastError () returned 10057
	[0174.181] closesocket (s=0x2f4) returned 0
	[0174.181] getsockopt (in: s=0x2f0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.181] recv (in: s=0x2f0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.181] WSAGetLastError () returned 10057
	[0174.181] closesocket (s=0x2f0) returned 0
	[0174.181] getsockopt (in: s=0x2ec, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.181] recv (in: s=0x2ec, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.181] WSAGetLastError () returned 10057
	[0174.181] closesocket (s=0x2ec) returned 0
	[0174.182] getsockopt (in: s=0x2e8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.182] recv (in: s=0x2e8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.182] WSAGetLastError () returned 10057
	[0174.182] closesocket (s=0x2e8) returned 0
	[0174.182] getsockopt (in: s=0x2e4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.182] recv (in: s=0x2e4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.182] WSAGetLastError () returned 10057
	[0174.182] closesocket (s=0x2e4) returned 0
	[0174.183] getsockopt (in: s=0x2e0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.183] recv (in: s=0x2e0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.183] WSAGetLastError () returned 10057
	[0174.183] closesocket (s=0x2e0) returned 0
	[0174.183] getsockopt (in: s=0x2dc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.183] recv (in: s=0x2dc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.183] WSAGetLastError () returned 10057
	[0174.183] closesocket (s=0x2dc) returned 0
	[0174.184] getsockopt (in: s=0x2d8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.184] recv (in: s=0x2d8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.184] WSAGetLastError () returned 10057
	[0174.184] closesocket (s=0x2d8) returned 0
	[0174.184] getsockopt (in: s=0x2d4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.184] recv (in: s=0x2d4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.184] WSAGetLastError () returned 10057
	[0174.184] closesocket (s=0x2d4) returned 0
	[0174.185] getsockopt (in: s=0x2d0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.185] recv (in: s=0x2d0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.185] WSAGetLastError () returned 10057
	[0174.185] closesocket (s=0x2d0) returned 0
	[0174.185] getsockopt (in: s=0x2cc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.185] recv (in: s=0x2cc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.185] WSAGetLastError () returned 10057
	[0174.185] closesocket (s=0x2cc) returned 0
	[0174.185] getsockopt (in: s=0x2c8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.185] recv (in: s=0x2c8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.185] WSAGetLastError () returned 10057
	[0174.186] closesocket (s=0x2c8) returned 0
	[0174.186] getsockopt (in: s=0x2c4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.186] recv (in: s=0x2c4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.186] WSAGetLastError () returned 10057
	[0174.186] closesocket (s=0x2c4) returned 0
	[0174.186] getsockopt (in: s=0x2c0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.186] recv (in: s=0x2c0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.186] WSAGetLastError () returned 10057
	[0174.186] closesocket (s=0x2c0) returned 0
	[0174.187] getsockopt (in: s=0x2bc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.187] recv (in: s=0x2bc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.187] WSAGetLastError () returned 10057
	[0174.187] closesocket (s=0x2bc) returned 0
	[0174.187] getsockopt (in: s=0x2b8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.187] recv (in: s=0x2b8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.187] WSAGetLastError () returned 10057
	[0174.187] closesocket (s=0x2b8) returned 0
	[0174.188] getsockopt (in: s=0x2b4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.188] recv (in: s=0x2b4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.188] WSAGetLastError () returned 10057
	[0174.188] closesocket (s=0x2b4) returned 0
	[0174.188] getsockopt (in: s=0x2b0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.188] recv (in: s=0x2b0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.188] WSAGetLastError () returned 10057
	[0174.188] closesocket (s=0x2b0) returned 0
	[0174.189] getsockopt (in: s=0x2ac, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.189] recv (in: s=0x2ac, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.189] WSAGetLastError () returned 10057
	[0174.189] closesocket (s=0x2ac) returned 0
	[0174.189] getsockopt (in: s=0x2a8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.189] recv (in: s=0x2a8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.189] WSAGetLastError () returned 10057
	[0174.189] closesocket (s=0x2a8) returned 0
	[0174.189] getsockopt (in: s=0x2a4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.189] recv (in: s=0x2a4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.190] WSAGetLastError () returned 10057
	[0174.190] closesocket (s=0x2a4) returned 0
	[0174.190] getsockopt (in: s=0x2a0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.190] recv (in: s=0x2a0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.190] WSAGetLastError () returned 10057
	[0174.190] closesocket (s=0x2a0) returned 0
	[0174.190] getsockopt (in: s=0x29c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.190] recv (in: s=0x29c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.190] WSAGetLastError () returned 10057
	[0174.190] closesocket (s=0x29c) returned 0
	[0174.191] getsockopt (in: s=0x298, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.191] recv (in: s=0x298, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.191] WSAGetLastError () returned 10057
	[0174.191] closesocket (s=0x298) returned 0
	[0174.191] getsockopt (in: s=0x294, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.191] recv (in: s=0x294, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.191] WSAGetLastError () returned 10057
	[0174.191] closesocket (s=0x294) returned 0
	[0174.192] getsockopt (in: s=0x290, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.192] recv (in: s=0x290, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.192] WSAGetLastError () returned 10057
	[0174.192] closesocket (s=0x290) returned 0
	[0174.192] getsockopt (in: s=0x28c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.192] recv (in: s=0x28c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.192] WSAGetLastError () returned 10057
	[0174.192] closesocket (s=0x28c) returned 0
	[0174.193] getsockopt (in: s=0x288, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.193] recv (in: s=0x288, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.193] WSAGetLastError () returned 10057
	[0174.193] closesocket (s=0x288) returned 0
	[0174.193] getsockopt (in: s=0x284, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.193] recv (in: s=0x284, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.193] WSAGetLastError () returned 10057
	[0174.193] closesocket (s=0x284) returned 0
	[0174.194] getsockopt (in: s=0x280, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.194] recv (in: s=0x280, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.194] WSAGetLastError () returned 10057
	[0174.194] closesocket (s=0x280) returned 0
	[0174.194] getsockopt (in: s=0x27c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.194] recv (in: s=0x27c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.194] WSAGetLastError () returned 10057
	[0174.194] closesocket (s=0x27c) returned 0
	[0174.194] getsockopt (in: s=0x278, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.195] recv (in: s=0x278, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.195] WSAGetLastError () returned 10057
	[0174.195] closesocket (s=0x278) returned 0
	[0174.195] getsockopt (in: s=0x274, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.195] recv (in: s=0x274, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.195] WSAGetLastError () returned 10057
	[0174.195] closesocket (s=0x274) returned 0
	[0174.195] getsockopt (in: s=0x270, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.195] recv (in: s=0x270, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.195] WSAGetLastError () returned 10057
	[0174.195] closesocket (s=0x270) returned 0
	[0174.196] getsockopt (in: s=0x26c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.196] recv (in: s=0x26c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.196] WSAGetLastError () returned 10057
	[0174.196] closesocket (s=0x26c) returned 0
	[0174.196] getsockopt (in: s=0x268, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.196] recv (in: s=0x268, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.196] WSAGetLastError () returned 10057
	[0174.196] closesocket (s=0x268) returned 0
	[0174.197] getsockopt (in: s=0x264, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.197] recv (in: s=0x264, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.197] WSAGetLastError () returned 10057
	[0174.197] closesocket (s=0x264) returned 0
	[0174.197] getsockopt (in: s=0x260, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.197] recv (in: s=0x260, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.197] WSAGetLastError () returned 10057
	[0174.197] closesocket (s=0x260) returned 0
	[0174.198] getsockopt (in: s=0x25c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.198] recv (in: s=0x25c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.198] WSAGetLastError () returned 10057
	[0174.198] closesocket (s=0x25c) returned 0
	[0174.198] getsockopt (in: s=0x258, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.198] recv (in: s=0x258, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.198] WSAGetLastError () returned 10057
	[0174.198] closesocket (s=0x258) returned 0
	[0174.199] getsockopt (in: s=0x254, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.199] recv (in: s=0x254, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.199] WSAGetLastError () returned 10057
	[0174.199] closesocket (s=0x254) returned 0
	[0174.199] getsockopt (in: s=0x250, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.199] recv (in: s=0x250, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.199] WSAGetLastError () returned 10057
	[0174.199] closesocket (s=0x250) returned 0
	[0174.199] getsockopt (in: s=0x24c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.199] recv (in: s=0x24c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.199] WSAGetLastError () returned 10057
	[0174.199] closesocket (s=0x24c) returned 0
	[0174.200] getsockopt (in: s=0x248, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.200] recv (in: s=0x248, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.200] WSAGetLastError () returned 10057
	[0174.200] closesocket (s=0x248) returned 0
	[0174.200] getsockopt (in: s=0x244, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.200] recv (in: s=0x244, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.200] WSAGetLastError () returned 10057
	[0174.200] closesocket (s=0x244) returned 0
	[0174.201] getsockopt (in: s=0x240, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.201] recv (in: s=0x240, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.201] WSAGetLastError () returned 10057
	[0174.201] closesocket (s=0x240) returned 0
	[0174.201] getsockopt (in: s=0x23c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.201] recv (in: s=0x23c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.201] WSAGetLastError () returned 10057
	[0174.201] closesocket (s=0x23c) returned 0
	[0174.202] getsockopt (in: s=0x238, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.202] recv (in: s=0x238, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.202] WSAGetLastError () returned 10057
	[0174.202] closesocket (s=0x238) returned 0
	[0174.202] getsockopt (in: s=0x234, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.202] recv (in: s=0x234, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.202] WSAGetLastError () returned 10057
	[0174.202] closesocket (s=0x234) returned 0
	[0174.205] getsockopt (in: s=0x230, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.205] recv (in: s=0x230, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.205] WSAGetLastError () returned 10057
	[0174.205] closesocket (s=0x230) returned 0
	[0174.205] getsockopt (in: s=0x22c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.205] recv (in: s=0x22c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.205] WSAGetLastError () returned 10057
	[0174.205] closesocket (s=0x22c) returned 0
	[0174.205] getsockopt (in: s=0x228, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.205] recv (in: s=0x228, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.206] WSAGetLastError () returned 10057
	[0174.206] closesocket (s=0x228) returned 0
	[0174.206] getsockopt (in: s=0x210, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0174.206] recv (in: s=0x210, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0174.206] WSAGetLastError () returned 10057
	[0174.206] closesocket (s=0x210) returned 0
	[0174.206] GetProcessHeap () returned 0x800000
	[0174.206] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356adf8 | out: hHeap=0x800000) returned 1
	[0174.206] GetProcessHeap () returned 0x800000
	[0174.206] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3566d38 | out: hHeap=0x800000) returned 1
	[0174.206] htonl (hostlong=0x100007f) returned 0x7f000001
	[0174.206] GetProcessHeap () returned 0x800000
	[0174.206] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e39d0 | out: hHeap=0x800000) returned 1
	[0174.207] WaitForSingleObject (hHandle=0xd8, dwMilliseconds=0xffffffff) returned 0x0
	[0174.207] GetProcessHeap () returned 0x800000
	[0174.207] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81e738 | out: hHeap=0x800000) returned 1
	[0174.207] Sleep (dwMilliseconds=0x2710) 
	[0185.593] GetProcessHeap () returned 0x800000
	[0185.594] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x34ca050
	[0185.594] GetProcessHeap () returned 0x800000
	[0185.594] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0185.594] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f83c | out: lphEnum=0x263f83c*=0x8e06b8) returned 0x0
	[0185.792] WNetEnumResourceW (in: hEnum=0x8e06b8, lpcCount=0x263f830, lpBuffer=0x34ca050, lpBufferSize=0x263f844 | out: lpcCount=0x263f830, lpBuffer=0x34ca050, lpBufferSize=0x263f844) returned 0x103
	[0185.792] WNetCloseEnum (hEnum=0x8e06b8) returned 0x0
	[0185.792] GetProcessHeap () returned 0x800000
	[0185.792] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34ca050 | out: hHeap=0x800000) returned 1
	[0185.792] GetProcessHeap () returned 0x800000
	[0185.792] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0185.792] GetProcessHeap () returned 0x800000
	[0185.793] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x34ca050
	[0185.793] GetProcessHeap () returned 0x800000
	[0185.793] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0185.793] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f824 | out: lphEnum=0x263f824*=0x8376c8) returned 0x0
	[0185.793] WNetEnumResourceW (in: hEnum=0x8376c8, lpcCount=0x263f818, lpBuffer=0x34ca050, lpBufferSize=0x263f82c | out: lpcCount=0x263f818, lpBuffer=0x34ca050, lpBufferSize=0x263f82c) returned 0x103
	[0185.793] WNetCloseEnum (hEnum=0x8376c8) returned 0x0
	[0185.793] GetProcessHeap () returned 0x800000
	[0185.793] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34ca050 | out: hHeap=0x800000) returned 1
	[0185.793] GetProcessHeap () returned 0x800000
	[0185.793] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0185.793] GetProcessHeap () returned 0x800000
	[0185.793] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x34ca050
	[0185.793] GetProcessHeap () returned 0x800000
	[0185.793] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0185.793] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f80c | out: lphEnum=0x263f80c*=0x8e06b8) returned 0x0
	[0199.042] WNetEnumResourceW (in: hEnum=0x8e06b8, lpcCount=0x263f800, lpBuffer=0x34ca050, lpBufferSize=0x263f814 | out: lpcCount=0x263f800, lpBuffer=0x34ca050, lpBufferSize=0x263f814) returned 0x0
	[0199.042] GetProcessHeap () returned 0x800000
	[0199.042] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x3f000c8
	[0199.042] GetProcessHeap () returned 0x800000
	[0199.042] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f040d0
	[0199.043] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x34ca050, lphEnum=0x263f7c4 | out: lphEnum=0x263f7c4*=0x8e05b0) returned 0x0
	[0212.496] WNetEnumResourceW (in: hEnum=0x8e05b0, lpcCount=0x263f7b8, lpBuffer=0x3f000c8, lpBufferSize=0x263f7cc | out: lpcCount=0x263f7b8, lpBuffer=0x3f000c8, lpBufferSize=0x263f7cc) returned 0x0
	[0212.496] WNetEnumResourceW (in: hEnum=0x8e05b0, lpcCount=0x263f7b8, lpBuffer=0x3f000c8, lpBufferSize=0x263f7cc | out: lpcCount=0x263f7b8, lpBuffer=0x3f000c8, lpBufferSize=0x263f7cc) returned 0x103
	[0212.496] WNetCloseEnum (hEnum=0x8e05b0) returned 0x0
	[0212.496] GetProcessHeap () returned 0x800000
	[0212.496] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0212.496] GetProcessHeap () returned 0x800000
	[0212.496] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f040d0 | out: hHeap=0x800000) returned 1
	[0212.496] WNetEnumResourceW (in: hEnum=0x8e06b8, lpcCount=0x263f800, lpBuffer=0x34ca050, lpBufferSize=0x263f814 | out: lpcCount=0x263f800, lpBuffer=0x34ca050, lpBufferSize=0x263f814) returned 0x103
	[0212.496] WNetCloseEnum (hEnum=0x8e06b8) returned 0x0
	[0212.496] GetProcessHeap () returned 0x800000
	[0212.496] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34ca050 | out: hHeap=0x800000) returned 1
	[0212.496] GetProcessHeap () returned 0x800000
	[0212.496] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0212.496] GetProcessHeap () returned 0x800000
	[0212.496] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x34ca050
	[0212.496] GetProcessHeap () returned 0x800000
	[0212.496] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0212.496] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f83c | out: lphEnum=0x263f83c*=0x837688) returned 0x0
	[0212.497] WNetEnumResourceW (in: hEnum=0x837688, lpcCount=0x263f830, lpBuffer=0x34ca050, lpBufferSize=0x263f844 | out: lpcCount=0x263f830, lpBuffer=0x34ca050, lpBufferSize=0x263f844) returned 0x103
	[0212.497] WNetCloseEnum (hEnum=0x837688) returned 0x0
	[0212.497] GetProcessHeap () returned 0x800000
	[0212.497] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34ca050 | out: hHeap=0x800000) returned 1
	[0212.497] GetProcessHeap () returned 0x800000
	[0212.497] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0212.497] GetProcessHeap () returned 0x800000
	[0212.497] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x34ca050
	[0212.497] GetProcessHeap () returned 0x800000
	[0212.497] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0212.497] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f824 | out: lphEnum=0x263f824*=0x34d18a8) returned 0x0
	[0212.497] WNetEnumResourceW (in: hEnum=0x34d18a8, lpcCount=0x263f818, lpBuffer=0x34ca050, lpBufferSize=0x263f82c | out: lpcCount=0x263f818, lpBuffer=0x34ca050, lpBufferSize=0x263f82c) returned 0x0
	[0212.497] GetProcessHeap () returned 0x800000
	[0212.497] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x3f000c8
	[0212.497] GetProcessHeap () returned 0x800000
	[0212.497] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f040d0
	[0212.497] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x34ca090, lphEnum=0x263f7dc | out: lphEnum=0x263f7dc*=0x0) returned 0x4c6
	[0212.498] GetProcessHeap () returned 0x800000
	[0212.498] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0212.498] GetProcessHeap () returned 0x800000
	[0212.498] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f040d0 | out: hHeap=0x800000) returned 1
	[0212.498] GetProcessHeap () returned 0x800000
	[0212.498] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x3f000c8
	[0212.498] GetProcessHeap () returned 0x800000
	[0212.498] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f040d0
	[0212.498] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x34ca070, lphEnum=0x263f7dc | out: lphEnum=0x263f7dc*=0x0) returned 0x4b8
	[0226.649] GetProcessHeap () returned 0x800000
	[0226.649] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0226.649] GetProcessHeap () returned 0x800000
	[0226.649] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f040d0 | out: hHeap=0x800000) returned 1
	[0226.649] GetProcessHeap () returned 0x800000
	[0226.649] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x3f740f8
	[0226.650] GetProcessHeap () returned 0x800000
	[0226.650] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0226.650] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x34ca050, lphEnum=0x263f7dc | out: lphEnum=0x263f7dc*=0x837668) returned 0x0
	[0226.759] WNetEnumResourceW (in: hEnum=0x837668, lpcCount=0x263f7d0, lpBuffer=0x3f740f8, lpBufferSize=0x263f7e4 | out: lpcCount=0x263f7d0, lpBuffer=0x3f740f8, lpBufferSize=0x263f7e4) returned 0x103
	[0226.759] WNetCloseEnum (hEnum=0x837668) returned 0x0
	[0226.759] GetProcessHeap () returned 0x800000
	[0226.759] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0226.759] GetProcessHeap () returned 0x800000
	[0226.759] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0226.759] WNetEnumResourceW (in: hEnum=0x34d18a8, lpcCount=0x263f818, lpBuffer=0x34ca050, lpBufferSize=0x263f82c | out: lpcCount=0x263f818, lpBuffer=0x34ca050, lpBufferSize=0x263f82c) returned 0x103
	[0226.759] WNetCloseEnum (hEnum=0x34d18a8) returned 0x0
	[0226.759] GetProcessHeap () returned 0x800000
	[0226.759] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34ca050 | out: hHeap=0x800000) returned 1
	[0226.760] GetProcessHeap () returned 0x800000
	[0226.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0226.760] GetProcessHeap () returned 0x800000
	[0226.760] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x3a98) returned 0x34ca050
	[0226.760] GetIpAddrTable (in: pIpAddrTable=0x34ca050, pdwSize=0x263f824, bOrder=0 | out: pIpAddrTable=0x34ca050, pdwSize=0x263f824) returned 0x0
	[0226.849] htonl (hostlong=0x4700a8c0) returned 0xc0a80047
	[0226.849] htonl (hostlong=0x4700a8c0) returned 0xc0a80047
	[0226.849] htonl (hostlong=0xffffff) returned 0xffffff00
	[0226.849] htons (hostshort=0x1bd) returned 0xbd01
	[0226.849] GetProcessHeap () returned 0x800000
	[0226.849] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x800) returned 0x3566d38
	[0226.849] GetProcessHeap () returned 0x800000
	[0226.850] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x800) returned 0x356adf8
	[0226.850] htonl (hostlong=0xc0a80000) returned 0xa8c0
	[0226.850] socket (af=2, type=1, protocol=6) returned 0x234
	[0226.850] ioctlsocket (in: s=0x234, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.850] connect (s=0x234, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.0"), namelen=16) returned -1
	[0226.852] WSAGetLastError () returned 10035
	[0226.852] htonl (hostlong=0xc0a80001) returned 0x100a8c0
	[0226.852] socket (af=2, type=1, protocol=6) returned 0x23c
	[0226.853] ioctlsocket (in: s=0x23c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.853] connect (s=0x23c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.1"), namelen=16) returned -1
	[0226.853] WSAGetLastError () returned 10035
	[0226.853] htonl (hostlong=0xc0a80002) returned 0x200a8c0
	[0226.853] socket (af=2, type=1, protocol=6) returned 0x258
	[0226.853] ioctlsocket (in: s=0x258, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.853] connect (s=0x258, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.2"), namelen=16) returned -1
	[0226.854] WSAGetLastError () returned 10035
	[0226.854] htonl (hostlong=0xc0a80003) returned 0x300a8c0
	[0226.854] socket (af=2, type=1, protocol=6) returned 0x248
	[0226.854] ioctlsocket (in: s=0x248, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.854] connect (s=0x248, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.3"), namelen=16) returned -1
	[0226.854] WSAGetLastError () returned 10035
	[0226.854] htonl (hostlong=0xc0a80004) returned 0x400a8c0
	[0226.854] socket (af=2, type=1, protocol=6) returned 0x274
	[0226.854] ioctlsocket (in: s=0x274, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.854] connect (s=0x274, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.4"), namelen=16) returned -1
	[0226.855] WSAGetLastError () returned 10035
	[0226.855] htonl (hostlong=0xc0a80005) returned 0x500a8c0
	[0226.855] socket (af=2, type=1, protocol=6) returned 0x284
	[0226.855] ioctlsocket (in: s=0x284, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.855] connect (s=0x284, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.5"), namelen=16) returned -1
	[0226.855] WSAGetLastError () returned 10035
	[0226.855] htonl (hostlong=0xc0a80006) returned 0x600a8c0
	[0226.855] socket (af=2, type=1, protocol=6) returned 0x230
	[0226.856] ioctlsocket (in: s=0x230, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.856] connect (s=0x230, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.6"), namelen=16) returned -1
	[0226.856] WSAGetLastError () returned 10035
	[0226.856] htonl (hostlong=0xc0a80007) returned 0x700a8c0
	[0226.856] socket (af=2, type=1, protocol=6) returned 0x280
	[0226.856] ioctlsocket (in: s=0x280, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.856] connect (s=0x280, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.7"), namelen=16) returned -1
	[0226.857] WSAGetLastError () returned 10035
	[0226.857] htonl (hostlong=0xc0a80008) returned 0x800a8c0
	[0226.857] socket (af=2, type=1, protocol=6) returned 0x24c
	[0226.857] ioctlsocket (in: s=0x24c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.857] connect (s=0x24c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.8"), namelen=16) returned -1
	[0226.857] WSAGetLastError () returned 10035
	[0226.857] htonl (hostlong=0xc0a80009) returned 0x900a8c0
	[0226.857] socket (af=2, type=1, protocol=6) returned 0x270
	[0226.857] ioctlsocket (in: s=0x270, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.857] connect (s=0x270, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.9"), namelen=16) returned -1
	[0226.858] WSAGetLastError () returned 10035
	[0226.858] htonl (hostlong=0xc0a8000a) returned 0xa00a8c0
	[0226.858] socket (af=2, type=1, protocol=6) returned 0x288
	[0226.858] ioctlsocket (in: s=0x288, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.858] connect (s=0x288, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.10"), namelen=16) returned -1
	[0226.858] WSAGetLastError () returned 10035
	[0226.858] htonl (hostlong=0xc0a8000b) returned 0xb00a8c0
	[0226.858] socket (af=2, type=1, protocol=6) returned 0x28c
	[0226.859] ioctlsocket (in: s=0x28c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.859] connect (s=0x28c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.11"), namelen=16) returned -1
	[0226.859] WSAGetLastError () returned 10035
	[0226.859] htonl (hostlong=0xc0a8000c) returned 0xc00a8c0
	[0226.859] socket (af=2, type=1, protocol=6) returned 0x290
	[0226.859] ioctlsocket (in: s=0x290, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.859] connect (s=0x290, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.12"), namelen=16) returned -1
	[0226.860] WSAGetLastError () returned 10035
	[0226.860] htonl (hostlong=0xc0a8000d) returned 0xd00a8c0
	[0226.860] socket (af=2, type=1, protocol=6) returned 0x294
	[0226.860] ioctlsocket (in: s=0x294, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.860] connect (s=0x294, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.13"), namelen=16) returned -1
	[0226.860] WSAGetLastError () returned 10035
	[0226.860] htonl (hostlong=0xc0a8000e) returned 0xe00a8c0
	[0226.860] socket (af=2, type=1, protocol=6) returned 0x298
	[0226.860] ioctlsocket (in: s=0x298, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.860] connect (s=0x298, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.14"), namelen=16) returned -1
	[0226.861] WSAGetLastError () returned 10035
	[0226.861] htonl (hostlong=0xc0a8000f) returned 0xf00a8c0
	[0226.861] socket (af=2, type=1, protocol=6) returned 0x29c
	[0226.861] ioctlsocket (in: s=0x29c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.861] connect (s=0x29c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.15"), namelen=16) returned -1
	[0226.861] WSAGetLastError () returned 10035
	[0226.862] htonl (hostlong=0xc0a80010) returned 0x1000a8c0
	[0226.862] socket (af=2, type=1, protocol=6) returned 0x2a0
	[0226.862] ioctlsocket (in: s=0x2a0, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.862] connect (s=0x2a0, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.16"), namelen=16) returned -1
	[0226.862] WSAGetLastError () returned 10035
	[0226.862] htonl (hostlong=0xc0a80011) returned 0x1100a8c0
	[0226.862] socket (af=2, type=1, protocol=6) returned 0x2a4
	[0226.862] ioctlsocket (in: s=0x2a4, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.862] connect (s=0x2a4, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.17"), namelen=16) returned -1
	[0226.863] WSAGetLastError () returned 10035
	[0226.863] htonl (hostlong=0xc0a80012) returned 0x1200a8c0
	[0226.863] socket (af=2, type=1, protocol=6) returned 0x2a8
	[0226.863] ioctlsocket (in: s=0x2a8, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.863] connect (s=0x2a8, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.18"), namelen=16) returned -1
	[0226.863] WSAGetLastError () returned 10035
	[0226.863] htonl (hostlong=0xc0a80013) returned 0x1300a8c0
	[0226.863] socket (af=2, type=1, protocol=6) returned 0x2ac
	[0226.864] ioctlsocket (in: s=0x2ac, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.864] connect (s=0x2ac, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.19"), namelen=16) returned -1
	[0226.864] WSAGetLastError () returned 10035
	[0226.864] htonl (hostlong=0xc0a80014) returned 0x1400a8c0
	[0226.864] socket (af=2, type=1, protocol=6) returned 0x2b0
	[0226.864] ioctlsocket (in: s=0x2b0, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.864] connect (s=0x2b0, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.20"), namelen=16) returned -1
	[0226.865] WSAGetLastError () returned 10035
	[0226.865] htonl (hostlong=0xc0a80015) returned 0x1500a8c0
	[0226.865] socket (af=2, type=1, protocol=6) returned 0x2b4
	[0226.865] ioctlsocket (in: s=0x2b4, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.865] connect (s=0x2b4, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.21"), namelen=16) returned -1
	[0226.865] WSAGetLastError () returned 10035
	[0226.865] htonl (hostlong=0xc0a80016) returned 0x1600a8c0
	[0226.865] socket (af=2, type=1, protocol=6) returned 0x2b8
	[0226.865] ioctlsocket (in: s=0x2b8, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.865] connect (s=0x2b8, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.22"), namelen=16) returned -1
	[0226.866] WSAGetLastError () returned 10035
	[0226.866] htonl (hostlong=0xc0a80017) returned 0x1700a8c0
	[0226.866] socket (af=2, type=1, protocol=6) returned 0x2bc
	[0226.866] ioctlsocket (in: s=0x2bc, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.866] connect (s=0x2bc, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.23"), namelen=16) returned -1
	[0226.866] WSAGetLastError () returned 10035
	[0226.866] htonl (hostlong=0xc0a80018) returned 0x1800a8c0
	[0226.866] socket (af=2, type=1, protocol=6) returned 0x2c0
	[0226.866] ioctlsocket (in: s=0x2c0, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.866] connect (s=0x2c0, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.24"), namelen=16) returned -1
	[0226.867] WSAGetLastError () returned 10035
	[0226.867] htonl (hostlong=0xc0a80019) returned 0x1900a8c0
	[0226.867] socket (af=2, type=1, protocol=6) returned 0x2c4
	[0226.867] ioctlsocket (in: s=0x2c4, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.867] connect (s=0x2c4, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.25"), namelen=16) returned -1
	[0226.867] WSAGetLastError () returned 10035
	[0226.867] htonl (hostlong=0xc0a8001a) returned 0x1a00a8c0
	[0226.867] socket (af=2, type=1, protocol=6) returned 0x2c8
	[0226.868] ioctlsocket (in: s=0x2c8, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.868] connect (s=0x2c8, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.26"), namelen=16) returned -1
	[0226.868] WSAGetLastError () returned 10035
	[0226.868] htonl (hostlong=0xc0a8001b) returned 0x1b00a8c0
	[0226.868] socket (af=2, type=1, protocol=6) returned 0x2cc
	[0226.868] ioctlsocket (in: s=0x2cc, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.868] connect (s=0x2cc, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.27"), namelen=16) returned -1
	[0226.868] WSAGetLastError () returned 10035
	[0226.869] htonl (hostlong=0xc0a8001c) returned 0x1c00a8c0
	[0226.869] socket (af=2, type=1, protocol=6) returned 0x2d0
	[0226.869] ioctlsocket (in: s=0x2d0, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.869] connect (s=0x2d0, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.28"), namelen=16) returned -1
	[0226.869] WSAGetLastError () returned 10035
	[0226.869] htonl (hostlong=0xc0a8001d) returned 0x1d00a8c0
	[0226.869] socket (af=2, type=1, protocol=6) returned 0x2d4
	[0226.869] ioctlsocket (in: s=0x2d4, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.869] connect (s=0x2d4, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.29"), namelen=16) returned -1
	[0226.870] WSAGetLastError () returned 10035
	[0226.870] htonl (hostlong=0xc0a8001e) returned 0x1e00a8c0
	[0226.870] socket (af=2, type=1, protocol=6) returned 0x2d8
	[0226.870] ioctlsocket (in: s=0x2d8, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.870] connect (s=0x2d8, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.30"), namelen=16) returned -1
	[0226.870] WSAGetLastError () returned 10035
	[0226.870] htonl (hostlong=0xc0a8001f) returned 0x1f00a8c0
	[0226.870] socket (af=2, type=1, protocol=6) returned 0x2dc
	[0226.870] ioctlsocket (in: s=0x2dc, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.870] connect (s=0x2dc, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.31"), namelen=16) returned -1
	[0226.871] WSAGetLastError () returned 10035
	[0226.871] htonl (hostlong=0xc0a80020) returned 0x2000a8c0
	[0226.871] socket (af=2, type=1, protocol=6) returned 0x2e0
	[0226.871] ioctlsocket (in: s=0x2e0, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.871] connect (s=0x2e0, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.32"), namelen=16) returned -1
	[0226.871] WSAGetLastError () returned 10035
	[0226.871] htonl (hostlong=0xc0a80021) returned 0x2100a8c0
	[0226.871] socket (af=2, type=1, protocol=6) returned 0x2e4
	[0226.871] ioctlsocket (in: s=0x2e4, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.872] connect (s=0x2e4, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.33"), namelen=16) returned -1
	[0226.872] WSAGetLastError () returned 10035
	[0226.872] htonl (hostlong=0xc0a80022) returned 0x2200a8c0
	[0226.872] socket (af=2, type=1, protocol=6) returned 0x2e8
	[0226.872] ioctlsocket (in: s=0x2e8, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.872] connect (s=0x2e8, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.34"), namelen=16) returned -1
	[0226.872] WSAGetLastError () returned 10035
	[0226.872] htonl (hostlong=0xc0a80023) returned 0x2300a8c0
	[0226.872] socket (af=2, type=1, protocol=6) returned 0x2ec
	[0226.873] ioctlsocket (in: s=0x2ec, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.873] connect (s=0x2ec, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.35"), namelen=16) returned -1
	[0226.873] WSAGetLastError () returned 10035
	[0226.873] htonl (hostlong=0xc0a80024) returned 0x2400a8c0
	[0226.873] socket (af=2, type=1, protocol=6) returned 0x2f0
	[0226.873] ioctlsocket (in: s=0x2f0, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.873] connect (s=0x2f0, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.36"), namelen=16) returned -1
	[0226.874] WSAGetLastError () returned 10035
	[0226.874] htonl (hostlong=0xc0a80025) returned 0x2500a8c0
	[0226.874] socket (af=2, type=1, protocol=6) returned 0x2f4
	[0226.874] ioctlsocket (in: s=0x2f4, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.874] connect (s=0x2f4, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.37"), namelen=16) returned -1
	[0226.874] WSAGetLastError () returned 10035
	[0226.874] htonl (hostlong=0xc0a80026) returned 0x2600a8c0
	[0226.874] socket (af=2, type=1, protocol=6) returned 0x2f8
	[0226.874] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.874] connect (s=0x2f8, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.38"), namelen=16) returned -1
	[0226.875] WSAGetLastError () returned 10035
	[0226.875] htonl (hostlong=0xc0a80027) returned 0x2700a8c0
	[0226.875] socket (af=2, type=1, protocol=6) returned 0x2fc
	[0226.875] ioctlsocket (in: s=0x2fc, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.875] connect (s=0x2fc, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.39"), namelen=16) returned -1
	[0226.875] WSAGetLastError () returned 10035
	[0226.875] htonl (hostlong=0xc0a80028) returned 0x2800a8c0
	[0226.875] socket (af=2, type=1, protocol=6) returned 0x300
	[0226.876] ioctlsocket (in: s=0x300, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.876] connect (s=0x300, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.40"), namelen=16) returned -1
	[0226.876] WSAGetLastError () returned 10035
	[0226.876] htonl (hostlong=0xc0a80029) returned 0x2900a8c0
	[0226.876] socket (af=2, type=1, protocol=6) returned 0x304
	[0226.876] ioctlsocket (in: s=0x304, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.876] connect (s=0x304, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.41"), namelen=16) returned -1
	[0226.876] WSAGetLastError () returned 10035
	[0226.877] htonl (hostlong=0xc0a8002a) returned 0x2a00a8c0
	[0226.877] socket (af=2, type=1, protocol=6) returned 0x308
	[0226.877] ioctlsocket (in: s=0x308, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.877] connect (s=0x308, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.42"), namelen=16) returned -1
	[0226.877] WSAGetLastError () returned 10035
	[0226.877] htonl (hostlong=0xc0a8002b) returned 0x2b00a8c0
	[0226.877] socket (af=2, type=1, protocol=6) returned 0x30c
	[0226.877] ioctlsocket (in: s=0x30c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.877] connect (s=0x30c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.43"), namelen=16) returned -1
	[0226.878] WSAGetLastError () returned 10035
	[0226.878] htonl (hostlong=0xc0a8002c) returned 0x2c00a8c0
	[0226.878] socket (af=2, type=1, protocol=6) returned 0x310
	[0226.878] ioctlsocket (in: s=0x310, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.878] connect (s=0x310, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.44"), namelen=16) returned -1
	[0226.879] WSAGetLastError () returned 10035
	[0226.879] htonl (hostlong=0xc0a8002d) returned 0x2d00a8c0
	[0226.879] socket (af=2, type=1, protocol=6) returned 0x314
	[0226.879] ioctlsocket (in: s=0x314, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.879] connect (s=0x314, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.45"), namelen=16) returned -1
	[0226.879] WSAGetLastError () returned 10035
	[0226.879] htonl (hostlong=0xc0a8002e) returned 0x2e00a8c0
	[0226.879] socket (af=2, type=1, protocol=6) returned 0x318
	[0226.879] ioctlsocket (in: s=0x318, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.879] connect (s=0x318, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.46"), namelen=16) returned -1
	[0226.880] WSAGetLastError () returned 10035
	[0226.880] htonl (hostlong=0xc0a8002f) returned 0x2f00a8c0
	[0226.880] socket (af=2, type=1, protocol=6) returned 0x31c
	[0226.880] ioctlsocket (in: s=0x31c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.880] connect (s=0x31c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.47"), namelen=16) returned -1
	[0226.881] WSAGetLastError () returned 10035
	[0226.881] htonl (hostlong=0xc0a80030) returned 0x3000a8c0
	[0226.881] socket (af=2, type=1, protocol=6) returned 0x320
	[0226.882] ioctlsocket (in: s=0x320, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.882] connect (s=0x320, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.48"), namelen=16) returned -1
	[0226.883] WSAGetLastError () returned 10035
	[0226.883] htonl (hostlong=0xc0a80031) returned 0x3100a8c0
	[0226.883] socket (af=2, type=1, protocol=6) returned 0x324
	[0226.883] ioctlsocket (in: s=0x324, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.883] connect (s=0x324, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.49"), namelen=16) returned -1
	[0226.884] WSAGetLastError () returned 10035
	[0226.884] htonl (hostlong=0xc0a80032) returned 0x3200a8c0
	[0226.884] socket (af=2, type=1, protocol=6) returned 0x328
	[0226.884] ioctlsocket (in: s=0x328, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.884] connect (s=0x328, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.50"), namelen=16) returned -1
	[0226.884] WSAGetLastError () returned 10035
	[0226.884] htonl (hostlong=0xc0a80033) returned 0x3300a8c0
	[0226.884] socket (af=2, type=1, protocol=6) returned 0x32c
	[0226.884] ioctlsocket (in: s=0x32c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.884] connect (s=0x32c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.51"), namelen=16) returned -1
	[0226.885] WSAGetLastError () returned 10035
	[0226.885] htonl (hostlong=0xc0a80034) returned 0x3400a8c0
	[0226.885] socket (af=2, type=1, protocol=6) returned 0x330
	[0226.885] ioctlsocket (in: s=0x330, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.885] connect (s=0x330, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.52"), namelen=16) returned -1
	[0226.887] WSAGetLastError () returned 10035
	[0226.887] htonl (hostlong=0xc0a80035) returned 0x3500a8c0
	[0226.887] socket (af=2, type=1, protocol=6) returned 0x334
	[0226.887] ioctlsocket (in: s=0x334, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.887] connect (s=0x334, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.53"), namelen=16) returned -1
	[0226.888] WSAGetLastError () returned 10035
	[0226.888] htonl (hostlong=0xc0a80036) returned 0x3600a8c0
	[0226.888] socket (af=2, type=1, protocol=6) returned 0x338
	[0226.888] ioctlsocket (in: s=0x338, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.888] connect (s=0x338, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.54"), namelen=16) returned -1
	[0226.888] WSAGetLastError () returned 10035
	[0226.888] htonl (hostlong=0xc0a80037) returned 0x3700a8c0
	[0226.888] socket (af=2, type=1, protocol=6) returned 0x33c
	[0226.889] ioctlsocket (in: s=0x33c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.889] connect (s=0x33c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.55"), namelen=16) returned -1
	[0226.889] WSAGetLastError () returned 10035
	[0226.889] htonl (hostlong=0xc0a80038) returned 0x3800a8c0
	[0226.889] socket (af=2, type=1, protocol=6) returned 0x340
	[0226.889] ioctlsocket (in: s=0x340, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.889] connect (s=0x340, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.56"), namelen=16) returned -1
	[0226.890] WSAGetLastError () returned 10035
	[0226.890] htonl (hostlong=0xc0a80039) returned 0x3900a8c0
	[0226.890] socket (af=2, type=1, protocol=6) returned 0x344
	[0226.890] ioctlsocket (in: s=0x344, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.890] connect (s=0x344, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.57"), namelen=16) returned -1
	[0226.890] WSAGetLastError () returned 10035
	[0226.890] htonl (hostlong=0xc0a8003a) returned 0x3a00a8c0
	[0226.890] socket (af=2, type=1, protocol=6) returned 0x348
	[0226.890] ioctlsocket (in: s=0x348, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.890] connect (s=0x348, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.58"), namelen=16) returned -1
	[0226.891] WSAGetLastError () returned 10035
	[0226.891] htonl (hostlong=0xc0a8003b) returned 0x3b00a8c0
	[0226.891] socket (af=2, type=1, protocol=6) returned 0x34c
	[0226.891] ioctlsocket (in: s=0x34c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.891] connect (s=0x34c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.59"), namelen=16) returned -1
	[0226.891] WSAGetLastError () returned 10035
	[0226.891] htonl (hostlong=0xc0a8003c) returned 0x3c00a8c0
	[0226.891] socket (af=2, type=1, protocol=6) returned 0x350
	[0226.891] ioctlsocket (in: s=0x350, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.891] connect (s=0x350, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.60"), namelen=16) returned -1
	[0226.892] WSAGetLastError () returned 10035
	[0226.892] htonl (hostlong=0xc0a8003d) returned 0x3d00a8c0
	[0226.892] socket (af=2, type=1, protocol=6) returned 0x354
	[0226.892] ioctlsocket (in: s=0x354, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.892] connect (s=0x354, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.61"), namelen=16) returned -1
	[0226.892] WSAGetLastError () returned 10035
	[0226.892] htonl (hostlong=0xc0a8003e) returned 0x3e00a8c0
	[0226.892] socket (af=2, type=1, protocol=6) returned 0x358
	[0226.893] ioctlsocket (in: s=0x358, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.893] connect (s=0x358, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.62"), namelen=16) returned -1
	[0226.893] WSAGetLastError () returned 10035
	[0226.893] htonl (hostlong=0xc0a8003f) returned 0x3f00a8c0
	[0226.893] socket (af=2, type=1, protocol=6) returned 0x35c
	[0226.893] ioctlsocket (in: s=0x35c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.893] connect (s=0x35c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.63"), namelen=16) returned -1
	[0226.894] WSAGetLastError () returned 10035
	[0226.894] htonl (hostlong=0xc0a80040) returned 0x4000a8c0
	[0226.894] socket (af=2, type=1, protocol=6) returned 0x360
	[0226.894] ioctlsocket (in: s=0x360, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.894] connect (s=0x360, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.64"), namelen=16) returned -1
	[0226.894] WSAGetLastError () returned 10035
	[0226.894] htonl (hostlong=0xc0a80041) returned 0x4100a8c0
	[0226.894] socket (af=2, type=1, protocol=6) returned 0x364
	[0226.894] ioctlsocket (in: s=0x364, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.894] connect (s=0x364, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.65"), namelen=16) returned -1
	[0226.895] WSAGetLastError () returned 10035
	[0226.895] htonl (hostlong=0xc0a80042) returned 0x4200a8c0
	[0226.895] socket (af=2, type=1, protocol=6) returned 0x368
	[0226.895] ioctlsocket (in: s=0x368, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.895] connect (s=0x368, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.66"), namelen=16) returned -1
	[0226.895] WSAGetLastError () returned 10035
	[0226.895] htonl (hostlong=0xc0a80043) returned 0x4300a8c0
	[0226.895] socket (af=2, type=1, protocol=6) returned 0x36c
	[0226.896] ioctlsocket (in: s=0x36c, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.896] connect (s=0x36c, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.67"), namelen=16) returned -1
	[0226.896] WSAGetLastError () returned 10035
	[0226.896] htonl (hostlong=0xc0a80044) returned 0x4400a8c0
	[0226.896] socket (af=2, type=1, protocol=6) returned 0x370
	[0226.896] ioctlsocket (in: s=0x370, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.896] connect (s=0x370, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.68"), namelen=16) returned -1
	[0226.897] WSAGetLastError () returned 10035
	[0226.897] htonl (hostlong=0xc0a80045) returned 0x4500a8c0
	[0226.897] socket (af=2, type=1, protocol=6) returned 0x374
	[0226.897] ioctlsocket (in: s=0x374, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.897] connect (s=0x374, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.69"), namelen=16) returned -1
	[0226.897] WSAGetLastError () returned 10035
	[0226.897] htonl (hostlong=0xc0a80046) returned 0x4600a8c0
	[0226.897] socket (af=2, type=1, protocol=6) returned 0x378
	[0226.897] ioctlsocket (in: s=0x378, cmd=-2147195266, argp=0x263f7e0 | out: argp=0x263f7e0) returned 0
	[0226.897] connect (s=0x378, name=0x263f7c8*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.70"), namelen=16) returned -1
	[0226.898] WSAGetLastError () returned 10035
	[0226.898] GetTickCount () returned 0x114de20
	[0226.898] GetTickCount () returned 0x114de20
	[0226.898] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.898] GetTickCount () returned 0x114de20
	[0226.898] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.898] GetTickCount () returned 0x114de20
	[0226.898] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.898] GetTickCount () returned 0x114de20
	[0226.898] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.898] GetTickCount () returned 0x114de20
	[0226.898] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.898] GetTickCount () returned 0x114de20
	[0226.898] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.898] GetTickCount () returned 0x114de20
	[0226.898] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.898] GetTickCount () returned 0x114de20
	[0226.898] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.898] GetTickCount () returned 0x114de20
	[0226.898] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.899] GetTickCount () returned 0x114de20
	[0226.899] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.900] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.900] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.901] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.901] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.902] GetTickCount () returned 0x114de20
	[0226.902] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.903] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.903] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.904] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.904] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.905] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.905] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.906] GetTickCount () returned 0x114de20
	[0226.906] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.907] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.907] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.908] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.908] GetTickCount () returned 0x114de20
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de20
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de20
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.909] select (in: nfds=0, readfds=0x263f680, writefds=0x0, exceptfds=0x263f578, timeout=0x263f788 | out: readfds=0x263f680, writefds=0x0, exceptfds=0x263f578) returned -1
	[0226.909] GetTickCount () returned 0x114de2f
	[0226.910] getsockopt (in: s=0x378, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.910] recv (in: s=0x378, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.910] WSAGetLastError () returned 10057
	[0226.910] closesocket (s=0x378) returned 0
	[0226.912] getsockopt (in: s=0x374, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.912] recv (in: s=0x374, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.912] WSAGetLastError () returned 10057
	[0226.912] closesocket (s=0x374) returned 0
	[0226.912] getsockopt (in: s=0x370, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.913] recv (in: s=0x370, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.913] WSAGetLastError () returned 10057
	[0226.913] closesocket (s=0x370) returned 0
	[0226.913] getsockopt (in: s=0x36c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.913] recv (in: s=0x36c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.913] WSAGetLastError () returned 10057
	[0226.913] closesocket (s=0x36c) returned 0
	[0226.914] getsockopt (in: s=0x368, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.914] recv (in: s=0x368, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.914] WSAGetLastError () returned 10057
	[0226.914] closesocket (s=0x368) returned 0
	[0226.914] getsockopt (in: s=0x364, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.914] recv (in: s=0x364, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.914] WSAGetLastError () returned 10057
	[0226.915] closesocket (s=0x364) returned 0
	[0226.915] getsockopt (in: s=0x360, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.915] recv (in: s=0x360, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.915] WSAGetLastError () returned 10057
	[0226.915] closesocket (s=0x360) returned 0
	[0226.916] getsockopt (in: s=0x35c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.916] recv (in: s=0x35c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.916] WSAGetLastError () returned 10057
	[0226.916] closesocket (s=0x35c) returned 0
	[0226.916] getsockopt (in: s=0x358, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.917] recv (in: s=0x358, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.917] WSAGetLastError () returned 10057
	[0226.917] closesocket (s=0x358) returned 0
	[0226.917] getsockopt (in: s=0x354, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.917] recv (in: s=0x354, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.917] WSAGetLastError () returned 10057
	[0226.917] closesocket (s=0x354) returned 0
	[0226.918] getsockopt (in: s=0x350, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.918] recv (in: s=0x350, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.918] WSAGetLastError () returned 10057
	[0226.918] closesocket (s=0x350) returned 0
	[0226.918] getsockopt (in: s=0x34c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.919] recv (in: s=0x34c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.919] WSAGetLastError () returned 10057
	[0226.919] closesocket (s=0x34c) returned 0
	[0226.919] getsockopt (in: s=0x348, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.919] recv (in: s=0x348, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.919] WSAGetLastError () returned 10057
	[0226.919] closesocket (s=0x348) returned 0
	[0226.920] getsockopt (in: s=0x344, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.920] recv (in: s=0x344, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.920] WSAGetLastError () returned 10057
	[0226.920] closesocket (s=0x344) returned 0
	[0226.920] getsockopt (in: s=0x340, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.920] recv (in: s=0x340, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.921] WSAGetLastError () returned 10057
	[0226.921] closesocket (s=0x340) returned 0
	[0226.921] getsockopt (in: s=0x33c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.921] recv (in: s=0x33c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.921] WSAGetLastError () returned 10057
	[0226.921] closesocket (s=0x33c) returned 0
	[0226.922] getsockopt (in: s=0x338, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.922] recv (in: s=0x338, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.922] WSAGetLastError () returned 10057
	[0226.922] closesocket (s=0x338) returned 0
	[0226.922] getsockopt (in: s=0x334, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.922] recv (in: s=0x334, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.922] WSAGetLastError () returned 10057
	[0226.923] closesocket (s=0x334) returned 0
	[0226.923] getsockopt (in: s=0x330, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.923] recv (in: s=0x330, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.923] WSAGetLastError () returned 10057
	[0226.923] closesocket (s=0x330) returned 0
	[0226.924] getsockopt (in: s=0x32c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.924] recv (in: s=0x32c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.924] WSAGetLastError () returned 10057
	[0226.924] closesocket (s=0x32c) returned 0
	[0226.925] getsockopt (in: s=0x328, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.925] recv (in: s=0x328, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.925] WSAGetLastError () returned 10057
	[0226.925] closesocket (s=0x328) returned 0
	[0226.925] getsockopt (in: s=0x324, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.925] recv (in: s=0x324, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.925] WSAGetLastError () returned 10057
	[0226.925] closesocket (s=0x324) returned 0
	[0226.926] getsockopt (in: s=0x320, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.926] recv (in: s=0x320, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.926] WSAGetLastError () returned 10057
	[0226.926] closesocket (s=0x320) returned 0
	[0226.927] getsockopt (in: s=0x31c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.927] recv (in: s=0x31c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.927] WSAGetLastError () returned 10057
	[0226.927] closesocket (s=0x31c) returned 0
	[0226.927] getsockopt (in: s=0x318, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.927] recv (in: s=0x318, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.927] WSAGetLastError () returned 10057
	[0226.927] closesocket (s=0x318) returned 0
	[0226.928] getsockopt (in: s=0x314, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.928] recv (in: s=0x314, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.928] WSAGetLastError () returned 10057
	[0226.928] closesocket (s=0x314) returned 0
	[0226.929] getsockopt (in: s=0x310, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.929] recv (in: s=0x310, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.929] WSAGetLastError () returned 10057
	[0226.929] closesocket (s=0x310) returned 0
	[0226.929] getsockopt (in: s=0x30c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.929] recv (in: s=0x30c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.929] WSAGetLastError () returned 10057
	[0226.929] closesocket (s=0x30c) returned 0
	[0226.930] getsockopt (in: s=0x308, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.930] recv (in: s=0x308, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.930] WSAGetLastError () returned 10057
	[0226.930] closesocket (s=0x308) returned 0
	[0226.930] getsockopt (in: s=0x304, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.931] recv (in: s=0x304, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.931] WSAGetLastError () returned 10057
	[0226.931] closesocket (s=0x304) returned 0
	[0226.931] getsockopt (in: s=0x300, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.931] recv (in: s=0x300, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.931] WSAGetLastError () returned 10057
	[0226.931] closesocket (s=0x300) returned 0
	[0226.932] getsockopt (in: s=0x2fc, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.932] recv (in: s=0x2fc, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.932] WSAGetLastError () returned 10057
	[0226.932] closesocket (s=0x2fc) returned 0
	[0226.932] getsockopt (in: s=0x2f8, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.932] recv (in: s=0x2f8, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.932] WSAGetLastError () returned 10057
	[0226.933] closesocket (s=0x2f8) returned 0
	[0226.933] getsockopt (in: s=0x2f4, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.933] recv (in: s=0x2f4, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.933] WSAGetLastError () returned 10057
	[0226.933] closesocket (s=0x2f4) returned 0
	[0226.934] getsockopt (in: s=0x2f0, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.934] recv (in: s=0x2f0, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.934] WSAGetLastError () returned 10057
	[0226.934] closesocket (s=0x2f0) returned 0
	[0226.934] getsockopt (in: s=0x2ec, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.934] recv (in: s=0x2ec, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.934] WSAGetLastError () returned 10057
	[0226.934] closesocket (s=0x2ec) returned 0
	[0226.935] getsockopt (in: s=0x2e8, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.935] recv (in: s=0x2e8, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.935] WSAGetLastError () returned 10057
	[0226.935] closesocket (s=0x2e8) returned 0
	[0226.936] getsockopt (in: s=0x2e4, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.936] recv (in: s=0x2e4, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.936] WSAGetLastError () returned 10057
	[0226.936] closesocket (s=0x2e4) returned 0
	[0226.936] getsockopt (in: s=0x2e0, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.936] recv (in: s=0x2e0, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.936] WSAGetLastError () returned 10057
	[0226.936] closesocket (s=0x2e0) returned 0
	[0226.937] getsockopt (in: s=0x2dc, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.937] recv (in: s=0x2dc, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.937] WSAGetLastError () returned 10057
	[0226.937] closesocket (s=0x2dc) returned 0
	[0226.938] getsockopt (in: s=0x2d8, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.938] recv (in: s=0x2d8, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.938] WSAGetLastError () returned 10057
	[0226.938] closesocket (s=0x2d8) returned 0
	[0226.938] getsockopt (in: s=0x2d4, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.938] recv (in: s=0x2d4, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.938] WSAGetLastError () returned 10057
	[0226.938] closesocket (s=0x2d4) returned 0
	[0226.939] getsockopt (in: s=0x2d0, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.939] recv (in: s=0x2d0, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.939] WSAGetLastError () returned 10057
	[0226.939] closesocket (s=0x2d0) returned 0
	[0226.940] getsockopt (in: s=0x2cc, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.940] recv (in: s=0x2cc, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.940] WSAGetLastError () returned 10057
	[0226.940] closesocket (s=0x2cc) returned 0
	[0226.940] getsockopt (in: s=0x2c8, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.940] recv (in: s=0x2c8, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.940] WSAGetLastError () returned 10057
	[0226.940] closesocket (s=0x2c8) returned 0
	[0226.941] getsockopt (in: s=0x2c4, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.941] recv (in: s=0x2c4, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.941] WSAGetLastError () returned 10057
	[0226.941] closesocket (s=0x2c4) returned 0
	[0226.942] getsockopt (in: s=0x2c0, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.942] recv (in: s=0x2c0, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.942] WSAGetLastError () returned 10057
	[0226.942] closesocket (s=0x2c0) returned 0
	[0226.942] getsockopt (in: s=0x2bc, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.942] recv (in: s=0x2bc, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.942] WSAGetLastError () returned 10057
	[0226.943] closesocket (s=0x2bc) returned 0
	[0226.943] getsockopt (in: s=0x2b8, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.943] recv (in: s=0x2b8, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.943] WSAGetLastError () returned 10057
	[0226.943] closesocket (s=0x2b8) returned 0
	[0226.944] getsockopt (in: s=0x2b4, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.944] recv (in: s=0x2b4, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.944] WSAGetLastError () returned 10057
	[0226.944] closesocket (s=0x2b4) returned 0
	[0226.944] getsockopt (in: s=0x2b0, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.944] recv (in: s=0x2b0, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.944] WSAGetLastError () returned 10057
	[0226.944] closesocket (s=0x2b0) returned 0
	[0226.945] getsockopt (in: s=0x2ac, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.945] recv (in: s=0x2ac, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.945] WSAGetLastError () returned 10057
	[0226.945] closesocket (s=0x2ac) returned 0
	[0226.946] getsockopt (in: s=0x2a8, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.946] recv (in: s=0x2a8, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.946] WSAGetLastError () returned 10057
	[0226.946] closesocket (s=0x2a8) returned 0
	[0226.946] getsockopt (in: s=0x2a4, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.946] recv (in: s=0x2a4, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.946] WSAGetLastError () returned 10057
	[0226.946] closesocket (s=0x2a4) returned 0
	[0226.947] getsockopt (in: s=0x2a0, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.947] recv (in: s=0x2a0, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.947] WSAGetLastError () returned 10057
	[0226.947] closesocket (s=0x2a0) returned 0
	[0226.948] getsockopt (in: s=0x29c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.948] recv (in: s=0x29c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.948] WSAGetLastError () returned 10057
	[0226.948] closesocket (s=0x29c) returned 0
	[0226.948] getsockopt (in: s=0x298, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.948] recv (in: s=0x298, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.948] WSAGetLastError () returned 10057
	[0226.948] closesocket (s=0x298) returned 0
	[0226.949] getsockopt (in: s=0x294, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.949] recv (in: s=0x294, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.949] WSAGetLastError () returned 10057
	[0226.949] closesocket (s=0x294) returned 0
	[0226.950] getsockopt (in: s=0x290, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.950] recv (in: s=0x290, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.950] WSAGetLastError () returned 10057
	[0226.950] closesocket (s=0x290) returned 0
	[0226.950] getsockopt (in: s=0x28c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.950] recv (in: s=0x28c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.950] WSAGetLastError () returned 10057
	[0226.950] closesocket (s=0x28c) returned 0
	[0226.951] getsockopt (in: s=0x288, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.951] recv (in: s=0x288, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.951] WSAGetLastError () returned 10057
	[0226.951] closesocket (s=0x288) returned 0
	[0226.952] getsockopt (in: s=0x270, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.952] recv (in: s=0x270, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.952] WSAGetLastError () returned 10057
	[0226.952] closesocket (s=0x270) returned 0
	[0226.952] getsockopt (in: s=0x24c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.952] recv (in: s=0x24c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.953] WSAGetLastError () returned 10057
	[0226.953] closesocket (s=0x24c) returned 0
	[0226.953] getsockopt (in: s=0x280, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.953] recv (in: s=0x280, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.953] WSAGetLastError () returned 10057
	[0226.953] closesocket (s=0x280) returned 0
	[0226.954] getsockopt (in: s=0x230, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.954] recv (in: s=0x230, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.954] WSAGetLastError () returned 10057
	[0226.954] closesocket (s=0x230) returned 0
	[0226.954] getsockopt (in: s=0x284, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.954] recv (in: s=0x284, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.955] WSAGetLastError () returned 10057
	[0226.955] closesocket (s=0x284) returned 0
	[0226.955] getsockopt (in: s=0x274, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.955] recv (in: s=0x274, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.955] WSAGetLastError () returned 10057
	[0226.955] closesocket (s=0x274) returned 0
	[0226.956] getsockopt (in: s=0x248, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.956] recv (in: s=0x248, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.956] WSAGetLastError () returned 10057
	[0226.956] closesocket (s=0x248) returned 0
	[0226.956] getsockopt (in: s=0x258, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.956] recv (in: s=0x258, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.957] WSAGetLastError () returned 10057
	[0226.957] closesocket (s=0x258) returned 0
	[0226.957] getsockopt (in: s=0x23c, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.957] recv (in: s=0x23c, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.957] WSAGetLastError () returned 10057
	[0226.957] closesocket (s=0x23c) returned 0
	[0226.958] getsockopt (in: s=0x234, level=65535, optname=4103, optval=0x263f7f0, optlen=0x263f7dc | out: optval="", optlen=0x263f7dc) returned 0
	[0226.958] recv (in: s=0x234, buf=0x263f7ff, len=1, flags=2 | out: buf=0x263f7ff) returned -1
	[0226.958] WSAGetLastError () returned 10057
	[0226.958] closesocket (s=0x234) returned 0
	[0226.958] GetProcessHeap () returned 0x800000
	[0226.958] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3566d38 | out: hHeap=0x800000) returned 1
	[0226.959] GetProcessHeap () returned 0x800000
	[0226.959] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356adf8 | out: hHeap=0x800000) returned 1
	[0226.959] htons (hostshort=0x1bd) returned 0xbd01
	[0226.959] GetProcessHeap () returned 0x800000
	[0226.959] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x800) returned 0x3566d38
	[0226.959] GetProcessHeap () returned 0x800000
	[0226.959] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x800) returned 0x356adf8
	[0226.959] htonl (hostlong=0xc0a80048) returned 0x4800a8c0
	[0226.959] socket (af=2, type=1, protocol=6) returned 0x234
	[0226.959] ioctlsocket (in: s=0x234, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.959] connect (s=0x234, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.72"), namelen=16) returned -1
	[0226.959] WSAGetLastError () returned 10035
	[0226.959] htonl (hostlong=0xc0a80049) returned 0x4900a8c0
	[0226.959] socket (af=2, type=1, protocol=6) returned 0x23c
	[0226.959] ioctlsocket (in: s=0x23c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.960] connect (s=0x23c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.73"), namelen=16) returned -1
	[0226.960] WSAGetLastError () returned 10035
	[0226.960] htonl (hostlong=0xc0a8004a) returned 0x4a00a8c0
	[0226.960] socket (af=2, type=1, protocol=6) returned 0x258
	[0226.960] ioctlsocket (in: s=0x258, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.960] connect (s=0x258, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.74"), namelen=16) returned -1
	[0226.960] WSAGetLastError () returned 10035
	[0226.960] htonl (hostlong=0xc0a8004b) returned 0x4b00a8c0
	[0226.960] socket (af=2, type=1, protocol=6) returned 0x248
	[0226.961] ioctlsocket (in: s=0x248, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.961] connect (s=0x248, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.75"), namelen=16) returned -1
	[0226.961] WSAGetLastError () returned 10035
	[0226.961] htonl (hostlong=0xc0a8004c) returned 0x4c00a8c0
	[0226.961] socket (af=2, type=1, protocol=6) returned 0x274
	[0226.961] ioctlsocket (in: s=0x274, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.961] connect (s=0x274, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.76"), namelen=16) returned -1
	[0226.962] WSAGetLastError () returned 10035
	[0226.962] htonl (hostlong=0xc0a8004d) returned 0x4d00a8c0
	[0226.962] socket (af=2, type=1, protocol=6) returned 0x284
	[0226.962] ioctlsocket (in: s=0x284, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.962] connect (s=0x284, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.77"), namelen=16) returned -1
	[0226.962] WSAGetLastError () returned 10035
	[0226.962] htonl (hostlong=0xc0a8004e) returned 0x4e00a8c0
	[0226.962] socket (af=2, type=1, protocol=6) returned 0x230
	[0226.962] ioctlsocket (in: s=0x230, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.962] connect (s=0x230, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.78"), namelen=16) returned -1
	[0226.963] WSAGetLastError () returned 10035
	[0226.963] htonl (hostlong=0xc0a8004f) returned 0x4f00a8c0
	[0226.963] socket (af=2, type=1, protocol=6) returned 0x280
	[0226.963] ioctlsocket (in: s=0x280, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.963] connect (s=0x280, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.79"), namelen=16) returned -1
	[0226.963] WSAGetLastError () returned 10035
	[0226.963] htonl (hostlong=0xc0a80050) returned 0x5000a8c0
	[0226.963] socket (af=2, type=1, protocol=6) returned 0x24c
	[0226.963] ioctlsocket (in: s=0x24c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.963] connect (s=0x24c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.80"), namelen=16) returned -1
	[0226.964] WSAGetLastError () returned 10035
	[0226.964] htonl (hostlong=0xc0a80051) returned 0x5100a8c0
	[0226.964] socket (af=2, type=1, protocol=6) returned 0x270
	[0226.964] ioctlsocket (in: s=0x270, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.964] connect (s=0x270, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.81"), namelen=16) returned -1
	[0226.964] WSAGetLastError () returned 10035
	[0226.964] htonl (hostlong=0xc0a80052) returned 0x5200a8c0
	[0226.964] socket (af=2, type=1, protocol=6) returned 0x288
	[0226.965] ioctlsocket (in: s=0x288, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.965] connect (s=0x288, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.82"), namelen=16) returned -1
	[0226.965] WSAGetLastError () returned 10035
	[0226.965] htonl (hostlong=0xc0a80053) returned 0x5300a8c0
	[0226.965] socket (af=2, type=1, protocol=6) returned 0x28c
	[0226.965] ioctlsocket (in: s=0x28c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.965] connect (s=0x28c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.83"), namelen=16) returned -1
	[0226.965] WSAGetLastError () returned 10035
	[0226.966] htonl (hostlong=0xc0a80054) returned 0x5400a8c0
	[0226.966] socket (af=2, type=1, protocol=6) returned 0x290
	[0226.966] ioctlsocket (in: s=0x290, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.966] connect (s=0x290, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.84"), namelen=16) returned -1
	[0226.966] WSAGetLastError () returned 10035
	[0226.966] htonl (hostlong=0xc0a80055) returned 0x5500a8c0
	[0226.966] socket (af=2, type=1, protocol=6) returned 0x294
	[0226.966] ioctlsocket (in: s=0x294, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.966] connect (s=0x294, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.85"), namelen=16) returned -1
	[0226.967] WSAGetLastError () returned 10035
	[0226.967] htonl (hostlong=0xc0a80056) returned 0x5600a8c0
	[0226.967] socket (af=2, type=1, protocol=6) returned 0x298
	[0226.967] ioctlsocket (in: s=0x298, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.967] connect (s=0x298, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.86"), namelen=16) returned -1
	[0226.967] WSAGetLastError () returned 10035
	[0226.967] htonl (hostlong=0xc0a80057) returned 0x5700a8c0
	[0226.967] socket (af=2, type=1, protocol=6) returned 0x29c
	[0226.967] ioctlsocket (in: s=0x29c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.967] connect (s=0x29c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.87"), namelen=16) returned -1
	[0226.968] WSAGetLastError () returned 10035
	[0226.968] htonl (hostlong=0xc0a80058) returned 0x5800a8c0
	[0226.968] socket (af=2, type=1, protocol=6) returned 0x2a0
	[0226.968] ioctlsocket (in: s=0x2a0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.968] connect (s=0x2a0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.88"), namelen=16) returned -1
	[0226.968] WSAGetLastError () returned 10035
	[0226.968] htonl (hostlong=0xc0a80059) returned 0x5900a8c0
	[0226.968] socket (af=2, type=1, protocol=6) returned 0x2a4
	[0226.968] ioctlsocket (in: s=0x2a4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.968] connect (s=0x2a4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.89"), namelen=16) returned -1
	[0226.969] WSAGetLastError () returned 10035
	[0226.969] htonl (hostlong=0xc0a8005a) returned 0x5a00a8c0
	[0226.969] socket (af=2, type=1, protocol=6) returned 0x2a8
	[0226.969] ioctlsocket (in: s=0x2a8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.969] connect (s=0x2a8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.90"), namelen=16) returned -1
	[0226.969] WSAGetLastError () returned 10035
	[0226.969] htonl (hostlong=0xc0a8005b) returned 0x5b00a8c0
	[0226.969] socket (af=2, type=1, protocol=6) returned 0x2ac
	[0226.970] ioctlsocket (in: s=0x2ac, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.970] connect (s=0x2ac, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.91"), namelen=16) returned -1
	[0226.970] WSAGetLastError () returned 10035
	[0226.970] htonl (hostlong=0xc0a8005c) returned 0x5c00a8c0
	[0226.970] socket (af=2, type=1, protocol=6) returned 0x2b0
	[0226.970] ioctlsocket (in: s=0x2b0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.970] connect (s=0x2b0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.92"), namelen=16) returned -1
	[0226.971] WSAGetLastError () returned 10035
	[0226.971] htonl (hostlong=0xc0a8005d) returned 0x5d00a8c0
	[0226.971] socket (af=2, type=1, protocol=6) returned 0x2b4
	[0226.971] ioctlsocket (in: s=0x2b4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.971] connect (s=0x2b4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.93"), namelen=16) returned -1
	[0226.971] WSAGetLastError () returned 10035
	[0226.971] htonl (hostlong=0xc0a8005e) returned 0x5e00a8c0
	[0226.971] socket (af=2, type=1, protocol=6) returned 0x2b8
	[0226.971] ioctlsocket (in: s=0x2b8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.971] connect (s=0x2b8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.94"), namelen=16) returned -1
	[0226.972] WSAGetLastError () returned 10035
	[0226.972] htonl (hostlong=0xc0a8005f) returned 0x5f00a8c0
	[0226.972] socket (af=2, type=1, protocol=6) returned 0x2bc
	[0226.972] ioctlsocket (in: s=0x2bc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.972] connect (s=0x2bc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.95"), namelen=16) returned -1
	[0226.972] WSAGetLastError () returned 10035
	[0226.972] htonl (hostlong=0xc0a80060) returned 0x6000a8c0
	[0226.972] socket (af=2, type=1, protocol=6) returned 0x2c0
	[0226.973] ioctlsocket (in: s=0x2c0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.973] connect (s=0x2c0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.96"), namelen=16) returned -1
	[0226.973] WSAGetLastError () returned 10035
	[0226.973] htonl (hostlong=0xc0a80061) returned 0x6100a8c0
	[0226.973] socket (af=2, type=1, protocol=6) returned 0x2c4
	[0226.973] ioctlsocket (in: s=0x2c4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.973] connect (s=0x2c4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.97"), namelen=16) returned -1
	[0226.974] WSAGetLastError () returned 10035
	[0226.974] htonl (hostlong=0xc0a80062) returned 0x6200a8c0
	[0226.974] socket (af=2, type=1, protocol=6) returned 0x2c8
	[0226.974] ioctlsocket (in: s=0x2c8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.974] connect (s=0x2c8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.98"), namelen=16) returned -1
	[0226.974] WSAGetLastError () returned 10035
	[0226.974] htonl (hostlong=0xc0a80063) returned 0x6300a8c0
	[0226.974] socket (af=2, type=1, protocol=6) returned 0x2cc
	[0226.974] ioctlsocket (in: s=0x2cc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.974] connect (s=0x2cc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.99"), namelen=16) returned -1
	[0226.975] WSAGetLastError () returned 10035
	[0226.975] htonl (hostlong=0xc0a80064) returned 0x6400a8c0
	[0226.975] socket (af=2, type=1, protocol=6) returned 0x2d0
	[0226.975] ioctlsocket (in: s=0x2d0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.975] connect (s=0x2d0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.100"), namelen=16) returned -1
	[0226.975] WSAGetLastError () returned 10035
	[0226.975] htonl (hostlong=0xc0a80065) returned 0x6500a8c0
	[0226.975] socket (af=2, type=1, protocol=6) returned 0x2d4
	[0226.975] ioctlsocket (in: s=0x2d4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.975] connect (s=0x2d4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.101"), namelen=16) returned -1
	[0226.976] WSAGetLastError () returned 10035
	[0226.976] htonl (hostlong=0xc0a80066) returned 0x6600a8c0
	[0226.976] socket (af=2, type=1, protocol=6) returned 0x2d8
	[0226.976] ioctlsocket (in: s=0x2d8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.976] connect (s=0x2d8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.102"), namelen=16) returned -1
	[0226.977] WSAGetLastError () returned 10035
	[0226.977] htonl (hostlong=0xc0a80067) returned 0x6700a8c0
	[0226.977] socket (af=2, type=1, protocol=6) returned 0x2dc
	[0226.977] ioctlsocket (in: s=0x2dc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.977] connect (s=0x2dc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.103"), namelen=16) returned -1
	[0226.977] WSAGetLastError () returned 10035
	[0226.977] htonl (hostlong=0xc0a80068) returned 0x6800a8c0
	[0226.977] socket (af=2, type=1, protocol=6) returned 0x2e0
	[0226.977] ioctlsocket (in: s=0x2e0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.977] connect (s=0x2e0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.104"), namelen=16) returned -1
	[0226.978] WSAGetLastError () returned 10035
	[0226.978] htonl (hostlong=0xc0a80069) returned 0x6900a8c0
	[0226.978] socket (af=2, type=1, protocol=6) returned 0x2e4
	[0226.978] ioctlsocket (in: s=0x2e4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.978] connect (s=0x2e4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.105"), namelen=16) returned -1
	[0226.978] WSAGetLastError () returned 10035
	[0226.978] htonl (hostlong=0xc0a8006a) returned 0x6a00a8c0
	[0226.978] socket (af=2, type=1, protocol=6) returned 0x2e8
	[0226.978] ioctlsocket (in: s=0x2e8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.979] connect (s=0x2e8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.106"), namelen=16) returned -1
	[0226.979] WSAGetLastError () returned 10035
	[0226.979] htonl (hostlong=0xc0a8006b) returned 0x6b00a8c0
	[0226.979] socket (af=2, type=1, protocol=6) returned 0x2ec
	[0226.979] ioctlsocket (in: s=0x2ec, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.979] connect (s=0x2ec, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.107"), namelen=16) returned -1
	[0226.979] WSAGetLastError () returned 10035
	[0226.979] htonl (hostlong=0xc0a8006c) returned 0x6c00a8c0
	[0226.979] socket (af=2, type=1, protocol=6) returned 0x2f0
	[0226.980] ioctlsocket (in: s=0x2f0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.980] connect (s=0x2f0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.108"), namelen=16) returned -1
	[0226.980] WSAGetLastError () returned 10035
	[0226.980] htonl (hostlong=0xc0a8006d) returned 0x6d00a8c0
	[0226.980] socket (af=2, type=1, protocol=6) returned 0x2f4
	[0226.980] ioctlsocket (in: s=0x2f4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.980] connect (s=0x2f4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.109"), namelen=16) returned -1
	[0226.981] WSAGetLastError () returned 10035
	[0226.981] htonl (hostlong=0xc0a8006e) returned 0x6e00a8c0
	[0226.981] socket (af=2, type=1, protocol=6) returned 0x2f8
	[0226.981] ioctlsocket (in: s=0x2f8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.981] connect (s=0x2f8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.110"), namelen=16) returned -1
	[0226.981] WSAGetLastError () returned 10035
	[0226.981] htonl (hostlong=0xc0a8006f) returned 0x6f00a8c0
	[0226.981] socket (af=2, type=1, protocol=6) returned 0x2fc
	[0226.981] ioctlsocket (in: s=0x2fc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.981] connect (s=0x2fc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.111"), namelen=16) returned -1
	[0226.982] WSAGetLastError () returned 10035
	[0226.982] htonl (hostlong=0xc0a80070) returned 0x7000a8c0
	[0226.982] socket (af=2, type=1, protocol=6) returned 0x300
	[0226.982] ioctlsocket (in: s=0x300, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.982] connect (s=0x300, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.112"), namelen=16) returned -1
	[0226.982] WSAGetLastError () returned 10035
	[0226.982] htonl (hostlong=0xc0a80071) returned 0x7100a8c0
	[0226.982] socket (af=2, type=1, protocol=6) returned 0x304
	[0226.982] ioctlsocket (in: s=0x304, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.983] connect (s=0x304, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.113"), namelen=16) returned -1
	[0226.983] WSAGetLastError () returned 10035
	[0226.983] htonl (hostlong=0xc0a80072) returned 0x7200a8c0
	[0226.983] socket (af=2, type=1, protocol=6) returned 0x308
	[0226.983] ioctlsocket (in: s=0x308, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.983] connect (s=0x308, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.114"), namelen=16) returned -1
	[0226.983] WSAGetLastError () returned 10035
	[0226.983] htonl (hostlong=0xc0a80073) returned 0x7300a8c0
	[0226.983] socket (af=2, type=1, protocol=6) returned 0x30c
	[0226.984] ioctlsocket (in: s=0x30c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.984] connect (s=0x30c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.115"), namelen=16) returned -1
	[0226.984] WSAGetLastError () returned 10035
	[0226.984] htonl (hostlong=0xc0a80074) returned 0x7400a8c0
	[0226.984] socket (af=2, type=1, protocol=6) returned 0x310
	[0226.984] ioctlsocket (in: s=0x310, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.984] connect (s=0x310, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.116"), namelen=16) returned -1
	[0226.985] WSAGetLastError () returned 10035
	[0226.985] htonl (hostlong=0xc0a80075) returned 0x7500a8c0
	[0226.985] socket (af=2, type=1, protocol=6) returned 0x314
	[0226.985] ioctlsocket (in: s=0x314, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.985] connect (s=0x314, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.117"), namelen=16) returned -1
	[0226.985] WSAGetLastError () returned 10035
	[0226.985] htonl (hostlong=0xc0a80076) returned 0x7600a8c0
	[0226.985] socket (af=2, type=1, protocol=6) returned 0x318
	[0226.985] ioctlsocket (in: s=0x318, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.985] connect (s=0x318, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.118"), namelen=16) returned -1
	[0226.986] WSAGetLastError () returned 10035
	[0226.986] htonl (hostlong=0xc0a80077) returned 0x7700a8c0
	[0226.986] socket (af=2, type=1, protocol=6) returned 0x31c
	[0226.986] ioctlsocket (in: s=0x31c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.986] connect (s=0x31c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.119"), namelen=16) returned -1
	[0226.986] WSAGetLastError () returned 10035
	[0226.986] htonl (hostlong=0xc0a80078) returned 0x7800a8c0
	[0226.986] socket (af=2, type=1, protocol=6) returned 0x320
	[0226.986] ioctlsocket (in: s=0x320, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.986] connect (s=0x320, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.120"), namelen=16) returned -1
	[0226.987] WSAGetLastError () returned 10035
	[0226.987] htonl (hostlong=0xc0a80079) returned 0x7900a8c0
	[0226.987] socket (af=2, type=1, protocol=6) returned 0x324
	[0226.987] ioctlsocket (in: s=0x324, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.987] connect (s=0x324, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.121"), namelen=16) returned -1
	[0226.987] WSAGetLastError () returned 10035
	[0226.988] htonl (hostlong=0xc0a8007a) returned 0x7a00a8c0
	[0226.988] socket (af=2, type=1, protocol=6) returned 0x328
	[0226.988] ioctlsocket (in: s=0x328, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.988] connect (s=0x328, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.122"), namelen=16) returned -1
	[0226.988] WSAGetLastError () returned 10035
	[0226.988] htonl (hostlong=0xc0a8007b) returned 0x7b00a8c0
	[0226.988] socket (af=2, type=1, protocol=6) returned 0x32c
	[0226.988] ioctlsocket (in: s=0x32c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.988] connect (s=0x32c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.123"), namelen=16) returned -1
	[0226.989] WSAGetLastError () returned 10035
	[0226.989] htonl (hostlong=0xc0a8007c) returned 0x7c00a8c0
	[0226.989] socket (af=2, type=1, protocol=6) returned 0x330
	[0226.989] ioctlsocket (in: s=0x330, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.989] connect (s=0x330, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.124"), namelen=16) returned -1
	[0226.989] WSAGetLastError () returned 10035
	[0226.989] htonl (hostlong=0xc0a8007d) returned 0x7d00a8c0
	[0226.989] socket (af=2, type=1, protocol=6) returned 0x334
	[0226.989] ioctlsocket (in: s=0x334, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.989] connect (s=0x334, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.125"), namelen=16) returned -1
	[0226.990] WSAGetLastError () returned 10035
	[0226.990] htonl (hostlong=0xc0a8007e) returned 0x7e00a8c0
	[0226.990] socket (af=2, type=1, protocol=6) returned 0x338
	[0226.990] ioctlsocket (in: s=0x338, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.990] connect (s=0x338, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.126"), namelen=16) returned -1
	[0226.990] WSAGetLastError () returned 10035
	[0226.990] htonl (hostlong=0xc0a8007f) returned 0x7f00a8c0
	[0226.990] socket (af=2, type=1, protocol=6) returned 0x33c
	[0226.991] ioctlsocket (in: s=0x33c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.991] connect (s=0x33c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.127"), namelen=16) returned -1
	[0226.991] WSAGetLastError () returned 10035
	[0226.991] htonl (hostlong=0xc0a80080) returned 0x8000a8c0
	[0226.991] socket (af=2, type=1, protocol=6) returned 0x340
	[0226.991] ioctlsocket (in: s=0x340, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.991] connect (s=0x340, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.128"), namelen=16) returned -1
	[0226.991] WSAGetLastError () returned 10035
	[0226.991] htonl (hostlong=0xc0a80081) returned 0x8100a8c0
	[0226.991] socket (af=2, type=1, protocol=6) returned 0x344
	[0226.992] ioctlsocket (in: s=0x344, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.992] connect (s=0x344, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.129"), namelen=16) returned -1
	[0226.992] WSAGetLastError () returned 10035
	[0226.992] htonl (hostlong=0xc0a80082) returned 0x8200a8c0
	[0226.992] socket (af=2, type=1, protocol=6) returned 0x348
	[0226.992] ioctlsocket (in: s=0x348, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.992] connect (s=0x348, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.130"), namelen=16) returned -1
	[0226.993] WSAGetLastError () returned 10035
	[0226.993] htonl (hostlong=0xc0a80083) returned 0x8300a8c0
	[0226.993] socket (af=2, type=1, protocol=6) returned 0x34c
	[0226.993] ioctlsocket (in: s=0x34c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.993] connect (s=0x34c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.131"), namelen=16) returned -1
	[0226.993] WSAGetLastError () returned 10035
	[0226.993] htonl (hostlong=0xc0a80084) returned 0x8400a8c0
	[0226.993] socket (af=2, type=1, protocol=6) returned 0x350
	[0226.993] ioctlsocket (in: s=0x350, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.993] connect (s=0x350, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.132"), namelen=16) returned -1
	[0226.994] WSAGetLastError () returned 10035
	[0226.994] htonl (hostlong=0xc0a80085) returned 0x8500a8c0
	[0226.994] socket (af=2, type=1, protocol=6) returned 0x354
	[0226.994] ioctlsocket (in: s=0x354, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.994] connect (s=0x354, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.133"), namelen=16) returned -1
	[0226.994] WSAGetLastError () returned 10035
	[0226.994] htonl (hostlong=0xc0a80086) returned 0x8600a8c0
	[0226.994] socket (af=2, type=1, protocol=6) returned 0x358
	[0226.994] ioctlsocket (in: s=0x358, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.994] connect (s=0x358, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.134"), namelen=16) returned -1
	[0226.995] WSAGetLastError () returned 10035
	[0226.995] htonl (hostlong=0xc0a80087) returned 0x8700a8c0
	[0226.995] socket (af=2, type=1, protocol=6) returned 0x35c
	[0226.995] ioctlsocket (in: s=0x35c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.995] connect (s=0x35c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.135"), namelen=16) returned -1
	[0226.995] WSAGetLastError () returned 10035
	[0226.995] htonl (hostlong=0xc0a80088) returned 0x8800a8c0
	[0226.995] socket (af=2, type=1, protocol=6) returned 0x360
	[0226.996] ioctlsocket (in: s=0x360, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.996] connect (s=0x360, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.136"), namelen=16) returned -1
	[0226.996] WSAGetLastError () returned 10035
	[0226.996] htonl (hostlong=0xc0a80089) returned 0x8900a8c0
	[0226.996] socket (af=2, type=1, protocol=6) returned 0x364
	[0226.996] ioctlsocket (in: s=0x364, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.996] connect (s=0x364, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.137"), namelen=16) returned -1
	[0226.997] WSAGetLastError () returned 10035
	[0226.997] htonl (hostlong=0xc0a8008a) returned 0x8a00a8c0
	[0226.997] socket (af=2, type=1, protocol=6) returned 0x368
	[0226.997] ioctlsocket (in: s=0x368, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.997] connect (s=0x368, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.138"), namelen=16) returned -1
	[0226.997] WSAGetLastError () returned 10035
	[0226.997] htonl (hostlong=0xc0a8008b) returned 0x8b00a8c0
	[0226.997] socket (af=2, type=1, protocol=6) returned 0x36c
	[0226.997] ioctlsocket (in: s=0x36c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.997] connect (s=0x36c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.139"), namelen=16) returned -1
	[0226.998] WSAGetLastError () returned 10035
	[0226.998] htonl (hostlong=0xc0a8008c) returned 0x8c00a8c0
	[0226.998] socket (af=2, type=1, protocol=6) returned 0x370
	[0226.998] ioctlsocket (in: s=0x370, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.998] connect (s=0x370, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.140"), namelen=16) returned -1
	[0226.998] WSAGetLastError () returned 10035
	[0226.998] htonl (hostlong=0xc0a8008d) returned 0x8d00a8c0
	[0226.998] socket (af=2, type=1, protocol=6) returned 0x374
	[0226.998] ioctlsocket (in: s=0x374, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.999] connect (s=0x374, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.141"), namelen=16) returned -1
	[0226.999] WSAGetLastError () returned 10035
	[0226.999] htonl (hostlong=0xc0a8008e) returned 0x8e00a8c0
	[0226.999] socket (af=2, type=1, protocol=6) returned 0x378
	[0226.999] ioctlsocket (in: s=0x378, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0226.999] connect (s=0x378, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.142"), namelen=16) returned -1
	[0226.999] WSAGetLastError () returned 10035
	[0226.999] htonl (hostlong=0xc0a8008f) returned 0x8f00a8c0
	[0226.999] socket (af=2, type=1, protocol=6) returned 0x37c
	[0227.000] ioctlsocket (in: s=0x37c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.000] connect (s=0x37c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.143"), namelen=16) returned -1
	[0227.000] WSAGetLastError () returned 10035
	[0227.000] htonl (hostlong=0xc0a80090) returned 0x9000a8c0
	[0227.000] socket (af=2, type=1, protocol=6) returned 0x380
	[0227.000] ioctlsocket (in: s=0x380, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.000] connect (s=0x380, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.144"), namelen=16) returned -1
	[0227.001] WSAGetLastError () returned 10035
	[0227.001] htonl (hostlong=0xc0a80091) returned 0x9100a8c0
	[0227.001] socket (af=2, type=1, protocol=6) returned 0x384
	[0227.001] ioctlsocket (in: s=0x384, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.001] connect (s=0x384, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.145"), namelen=16) returned -1
	[0227.001] WSAGetLastError () returned 10035
	[0227.001] htonl (hostlong=0xc0a80092) returned 0x9200a8c0
	[0227.001] socket (af=2, type=1, protocol=6) returned 0x388
	[0227.001] ioctlsocket (in: s=0x388, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.001] connect (s=0x388, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.146"), namelen=16) returned -1
	[0227.002] WSAGetLastError () returned 10035
	[0227.002] htonl (hostlong=0xc0a80093) returned 0x9300a8c0
	[0227.002] socket (af=2, type=1, protocol=6) returned 0x38c
	[0227.002] ioctlsocket (in: s=0x38c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.002] connect (s=0x38c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.147"), namelen=16) returned -1
	[0227.002] WSAGetLastError () returned 10035
	[0227.002] htonl (hostlong=0xc0a80094) returned 0x9400a8c0
	[0227.002] socket (af=2, type=1, protocol=6) returned 0x390
	[0227.003] ioctlsocket (in: s=0x390, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.003] connect (s=0x390, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.148"), namelen=16) returned -1
	[0227.003] WSAGetLastError () returned 10035
	[0227.003] htonl (hostlong=0xc0a80095) returned 0x9500a8c0
	[0227.003] socket (af=2, type=1, protocol=6) returned 0x394
	[0227.003] ioctlsocket (in: s=0x394, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.003] connect (s=0x394, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.149"), namelen=16) returned -1
	[0227.004] WSAGetLastError () returned 10035
	[0227.004] htonl (hostlong=0xc0a80096) returned 0x9600a8c0
	[0227.004] socket (af=2, type=1, protocol=6) returned 0x398
	[0227.004] ioctlsocket (in: s=0x398, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.004] connect (s=0x398, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.150"), namelen=16) returned -1
	[0227.004] WSAGetLastError () returned 10035
	[0227.004] htonl (hostlong=0xc0a80097) returned 0x9700a8c0
	[0227.004] socket (af=2, type=1, protocol=6) returned 0x39c
	[0227.004] ioctlsocket (in: s=0x39c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.004] connect (s=0x39c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.151"), namelen=16) returned -1
	[0227.005] WSAGetLastError () returned 10035
	[0227.005] htonl (hostlong=0xc0a80098) returned 0x9800a8c0
	[0227.005] socket (af=2, type=1, protocol=6) returned 0x3a0
	[0227.005] ioctlsocket (in: s=0x3a0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.005] connect (s=0x3a0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.152"), namelen=16) returned -1
	[0227.005] WSAGetLastError () returned 10035
	[0227.005] htonl (hostlong=0xc0a80099) returned 0x9900a8c0
	[0227.005] socket (af=2, type=1, protocol=6) returned 0x3a4
	[0227.006] ioctlsocket (in: s=0x3a4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.006] connect (s=0x3a4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.153"), namelen=16) returned -1
	[0227.006] WSAGetLastError () returned 10035
	[0227.006] htonl (hostlong=0xc0a8009a) returned 0x9a00a8c0
	[0227.006] socket (af=2, type=1, protocol=6) returned 0x3a8
	[0227.006] ioctlsocket (in: s=0x3a8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.006] connect (s=0x3a8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.154"), namelen=16) returned -1
	[0227.006] WSAGetLastError () returned 10035
	[0227.007] htonl (hostlong=0xc0a8009b) returned 0x9b00a8c0
	[0227.007] socket (af=2, type=1, protocol=6) returned 0x3ac
	[0227.007] ioctlsocket (in: s=0x3ac, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.007] connect (s=0x3ac, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.155"), namelen=16) returned -1
	[0227.007] WSAGetLastError () returned 10035
	[0227.007] htonl (hostlong=0xc0a8009c) returned 0x9c00a8c0
	[0227.007] socket (af=2, type=1, protocol=6) returned 0x3b0
	[0227.007] ioctlsocket (in: s=0x3b0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.007] connect (s=0x3b0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.156"), namelen=16) returned -1
	[0227.008] WSAGetLastError () returned 10035
	[0227.008] htonl (hostlong=0xc0a8009d) returned 0x9d00a8c0
	[0227.008] socket (af=2, type=1, protocol=6) returned 0x3b4
	[0227.008] ioctlsocket (in: s=0x3b4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.008] connect (s=0x3b4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.157"), namelen=16) returned -1
	[0227.008] WSAGetLastError () returned 10035
	[0227.008] htonl (hostlong=0xc0a8009e) returned 0x9e00a8c0
	[0227.008] socket (af=2, type=1, protocol=6) returned 0x3b8
	[0227.008] ioctlsocket (in: s=0x3b8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.008] connect (s=0x3b8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.158"), namelen=16) returned -1
	[0227.009] WSAGetLastError () returned 10035
	[0227.009] htonl (hostlong=0xc0a8009f) returned 0x9f00a8c0
	[0227.009] socket (af=2, type=1, protocol=6) returned 0x3bc
	[0227.009] ioctlsocket (in: s=0x3bc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.009] connect (s=0x3bc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.159"), namelen=16) returned -1
	[0227.009] WSAGetLastError () returned 10035
	[0227.009] htonl (hostlong=0xc0a800a0) returned 0xa000a8c0
	[0227.009] socket (af=2, type=1, protocol=6) returned 0x3c0
	[0227.010] ioctlsocket (in: s=0x3c0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.010] connect (s=0x3c0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.160"), namelen=16) returned -1
	[0227.010] WSAGetLastError () returned 10035
	[0227.010] htonl (hostlong=0xc0a800a1) returned 0xa100a8c0
	[0227.010] socket (af=2, type=1, protocol=6) returned 0x3c4
	[0227.010] ioctlsocket (in: s=0x3c4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.010] connect (s=0x3c4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.161"), namelen=16) returned -1
	[0227.010] WSAGetLastError () returned 10035
	[0227.010] htonl (hostlong=0xc0a800a2) returned 0xa200a8c0
	[0227.010] socket (af=2, type=1, protocol=6) returned 0x3c8
	[0227.011] ioctlsocket (in: s=0x3c8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.011] connect (s=0x3c8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.162"), namelen=16) returned -1
	[0227.011] WSAGetLastError () returned 10035
	[0227.011] htonl (hostlong=0xc0a800a3) returned 0xa300a8c0
	[0227.011] socket (af=2, type=1, protocol=6) returned 0x3cc
	[0227.011] ioctlsocket (in: s=0x3cc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.011] connect (s=0x3cc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.163"), namelen=16) returned -1
	[0227.012] WSAGetLastError () returned 10035
	[0227.012] htonl (hostlong=0xc0a800a4) returned 0xa400a8c0
	[0227.012] socket (af=2, type=1, protocol=6) returned 0x3d0
	[0227.012] ioctlsocket (in: s=0x3d0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.012] connect (s=0x3d0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.164"), namelen=16) returned -1
	[0227.012] WSAGetLastError () returned 10035
	[0227.012] htonl (hostlong=0xc0a800a5) returned 0xa500a8c0
	[0227.012] socket (af=2, type=1, protocol=6) returned 0x3d4
	[0227.012] ioctlsocket (in: s=0x3d4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.012] connect (s=0x3d4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.165"), namelen=16) returned -1
	[0227.013] WSAGetLastError () returned 10035
	[0227.013] htonl (hostlong=0xc0a800a6) returned 0xa600a8c0
	[0227.013] socket (af=2, type=1, protocol=6) returned 0x3d8
	[0227.013] ioctlsocket (in: s=0x3d8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.013] connect (s=0x3d8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.166"), namelen=16) returned -1
	[0227.013] WSAGetLastError () returned 10035
	[0227.013] htonl (hostlong=0xc0a800a7) returned 0xa700a8c0
	[0227.013] socket (af=2, type=1, protocol=6) returned 0x3dc
	[0227.013] ioctlsocket (in: s=0x3dc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.014] connect (s=0x3dc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.167"), namelen=16) returned -1
	[0227.014] WSAGetLastError () returned 10035
	[0227.014] htonl (hostlong=0xc0a800a8) returned 0xa800a8c0
	[0227.014] socket (af=2, type=1, protocol=6) returned 0x3e0
	[0227.014] ioctlsocket (in: s=0x3e0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.014] connect (s=0x3e0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.168"), namelen=16) returned -1
	[0227.014] WSAGetLastError () returned 10035
	[0227.014] htonl (hostlong=0xc0a800a9) returned 0xa900a8c0
	[0227.014] socket (af=2, type=1, protocol=6) returned 0x3e4
	[0227.015] ioctlsocket (in: s=0x3e4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.015] connect (s=0x3e4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.169"), namelen=16) returned -1
	[0227.017] WSAGetLastError () returned 10035
	[0227.017] htonl (hostlong=0xc0a800aa) returned 0xaa00a8c0
	[0227.017] socket (af=2, type=1, protocol=6) returned 0x3e8
	[0227.018] ioctlsocket (in: s=0x3e8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.018] connect (s=0x3e8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.170"), namelen=16) returned -1
	[0227.018] WSAGetLastError () returned 10035
	[0227.018] htonl (hostlong=0xc0a800ab) returned 0xab00a8c0
	[0227.018] socket (af=2, type=1, protocol=6) returned 0x3ec
	[0227.018] ioctlsocket (in: s=0x3ec, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.018] connect (s=0x3ec, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.171"), namelen=16) returned -1
	[0227.019] WSAGetLastError () returned 10035
	[0227.019] htonl (hostlong=0xc0a800ac) returned 0xac00a8c0
	[0227.019] socket (af=2, type=1, protocol=6) returned 0x3f0
	[0227.019] ioctlsocket (in: s=0x3f0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.019] connect (s=0x3f0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.172"), namelen=16) returned -1
	[0227.019] WSAGetLastError () returned 10035
	[0227.019] htonl (hostlong=0xc0a800ad) returned 0xad00a8c0
	[0227.019] socket (af=2, type=1, protocol=6) returned 0x3f4
	[0227.019] ioctlsocket (in: s=0x3f4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.019] connect (s=0x3f4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.173"), namelen=16) returned -1
	[0227.020] WSAGetLastError () returned 10035
	[0227.020] htonl (hostlong=0xc0a800ae) returned 0xae00a8c0
	[0227.020] socket (af=2, type=1, protocol=6) returned 0x3f8
	[0227.020] ioctlsocket (in: s=0x3f8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.020] connect (s=0x3f8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.174"), namelen=16) returned -1
	[0227.020] WSAGetLastError () returned 10035
	[0227.020] htonl (hostlong=0xc0a800af) returned 0xaf00a8c0
	[0227.020] socket (af=2, type=1, protocol=6) returned 0x3fc
	[0227.021] ioctlsocket (in: s=0x3fc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.021] connect (s=0x3fc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.175"), namelen=16) returned -1
	[0227.021] WSAGetLastError () returned 10035
	[0227.021] htonl (hostlong=0xc0a800b0) returned 0xb000a8c0
	[0227.021] socket (af=2, type=1, protocol=6) returned 0x404
	[0227.021] ioctlsocket (in: s=0x404, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.021] connect (s=0x404, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.176"), namelen=16) returned -1
	[0227.022] WSAGetLastError () returned 10035
	[0227.022] htonl (hostlong=0xc0a800b1) returned 0xb100a8c0
	[0227.022] socket (af=2, type=1, protocol=6) returned 0x408
	[0227.022] ioctlsocket (in: s=0x408, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.022] connect (s=0x408, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.177"), namelen=16) returned -1
	[0227.022] WSAGetLastError () returned 10035
	[0227.022] htonl (hostlong=0xc0a800b2) returned 0xb200a8c0
	[0227.022] socket (af=2, type=1, protocol=6) returned 0x40c
	[0227.022] ioctlsocket (in: s=0x40c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.022] connect (s=0x40c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.178"), namelen=16) returned -1
	[0227.023] WSAGetLastError () returned 10035
	[0227.023] htonl (hostlong=0xc0a800b3) returned 0xb300a8c0
	[0227.023] socket (af=2, type=1, protocol=6) returned 0x410
	[0227.023] ioctlsocket (in: s=0x410, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.023] connect (s=0x410, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.179"), namelen=16) returned -1
	[0227.023] WSAGetLastError () returned 10035
	[0227.023] htonl (hostlong=0xc0a800b4) returned 0xb400a8c0
	[0227.023] socket (af=2, type=1, protocol=6) returned 0x414
	[0227.023] ioctlsocket (in: s=0x414, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.023] connect (s=0x414, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.180"), namelen=16) returned -1
	[0227.024] WSAGetLastError () returned 10035
	[0227.024] htonl (hostlong=0xc0a800b5) returned 0xb500a8c0
	[0227.024] socket (af=2, type=1, protocol=6) returned 0x418
	[0227.024] ioctlsocket (in: s=0x418, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.024] connect (s=0x418, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.181"), namelen=16) returned -1
	[0227.024] WSAGetLastError () returned 10035
	[0227.024] htonl (hostlong=0xc0a800b6) returned 0xb600a8c0
	[0227.024] socket (af=2, type=1, protocol=6) returned 0x41c
	[0227.025] ioctlsocket (in: s=0x41c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.025] connect (s=0x41c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.182"), namelen=16) returned -1
	[0227.025] WSAGetLastError () returned 10035
	[0227.025] htonl (hostlong=0xc0a800b7) returned 0xb700a8c0
	[0227.025] socket (af=2, type=1, protocol=6) returned 0x420
	[0227.025] ioctlsocket (in: s=0x420, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.025] connect (s=0x420, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.183"), namelen=16) returned -1
	[0227.026] WSAGetLastError () returned 10035
	[0227.026] htonl (hostlong=0xc0a800b8) returned 0xb800a8c0
	[0227.026] socket (af=2, type=1, protocol=6) returned 0x424
	[0227.026] ioctlsocket (in: s=0x424, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.026] connect (s=0x424, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.184"), namelen=16) returned -1
	[0227.026] WSAGetLastError () returned 10035
	[0227.026] htonl (hostlong=0xc0a800b9) returned 0xb900a8c0
	[0227.026] socket (af=2, type=1, protocol=6) returned 0x428
	[0227.026] ioctlsocket (in: s=0x428, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.026] connect (s=0x428, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.185"), namelen=16) returned -1
	[0227.027] WSAGetLastError () returned 10035
	[0227.027] htonl (hostlong=0xc0a800ba) returned 0xba00a8c0
	[0227.027] socket (af=2, type=1, protocol=6) returned 0x42c
	[0227.027] ioctlsocket (in: s=0x42c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.027] connect (s=0x42c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.186"), namelen=16) returned -1
	[0227.027] WSAGetLastError () returned 10035
	[0227.027] htonl (hostlong=0xc0a800bb) returned 0xbb00a8c0
	[0227.027] socket (af=2, type=1, protocol=6) returned 0x430
	[0227.027] ioctlsocket (in: s=0x430, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.027] connect (s=0x430, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.187"), namelen=16) returned -1
	[0227.028] WSAGetLastError () returned 10035
	[0227.028] htonl (hostlong=0xc0a800bc) returned 0xbc00a8c0
	[0227.028] socket (af=2, type=1, protocol=6) returned 0x434
	[0227.028] ioctlsocket (in: s=0x434, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.028] connect (s=0x434, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.188"), namelen=16) returned -1
	[0227.028] WSAGetLastError () returned 10035
	[0227.028] htonl (hostlong=0xc0a800bd) returned 0xbd00a8c0
	[0227.028] socket (af=2, type=1, protocol=6) returned 0x438
	[0227.029] ioctlsocket (in: s=0x438, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.029] connect (s=0x438, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.189"), namelen=16) returned -1
	[0227.029] WSAGetLastError () returned 10035
	[0227.029] htonl (hostlong=0xc0a800be) returned 0xbe00a8c0
	[0227.029] socket (af=2, type=1, protocol=6) returned 0x43c
	[0227.029] ioctlsocket (in: s=0x43c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.029] connect (s=0x43c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.190"), namelen=16) returned -1
	[0227.030] WSAGetLastError () returned 10035
	[0227.030] htonl (hostlong=0xc0a800bf) returned 0xbf00a8c0
	[0227.030] socket (af=2, type=1, protocol=6) returned 0x440
	[0227.030] ioctlsocket (in: s=0x440, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.030] connect (s=0x440, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.191"), namelen=16) returned -1
	[0227.030] WSAGetLastError () returned 10035
	[0227.030] htonl (hostlong=0xc0a800c0) returned 0xc000a8c0
	[0227.030] socket (af=2, type=1, protocol=6) returned 0x444
	[0227.030] ioctlsocket (in: s=0x444, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.030] connect (s=0x444, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.192"), namelen=16) returned -1
	[0227.031] WSAGetLastError () returned 10035
	[0227.031] htonl (hostlong=0xc0a800c1) returned 0xc100a8c0
	[0227.031] socket (af=2, type=1, protocol=6) returned 0x448
	[0227.031] ioctlsocket (in: s=0x448, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.031] connect (s=0x448, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.193"), namelen=16) returned -1
	[0227.031] WSAGetLastError () returned 10035
	[0227.031] htonl (hostlong=0xc0a800c2) returned 0xc200a8c0
	[0227.031] socket (af=2, type=1, protocol=6) returned 0x44c
	[0227.031] ioctlsocket (in: s=0x44c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.032] connect (s=0x44c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.194"), namelen=16) returned -1
	[0227.032] WSAGetLastError () returned 10035
	[0227.032] htonl (hostlong=0xc0a800c3) returned 0xc300a8c0
	[0227.032] socket (af=2, type=1, protocol=6) returned 0x450
	[0227.032] ioctlsocket (in: s=0x450, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.032] connect (s=0x450, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.195"), namelen=16) returned -1
	[0227.032] WSAGetLastError () returned 10035
	[0227.032] htonl (hostlong=0xc0a800c4) returned 0xc400a8c0
	[0227.032] socket (af=2, type=1, protocol=6) returned 0x454
	[0227.033] ioctlsocket (in: s=0x454, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.033] connect (s=0x454, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.196"), namelen=16) returned -1
	[0227.033] WSAGetLastError () returned 10035
	[0227.033] htonl (hostlong=0xc0a800c5) returned 0xc500a8c0
	[0227.033] socket (af=2, type=1, protocol=6) returned 0x458
	[0227.033] ioctlsocket (in: s=0x458, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.033] connect (s=0x458, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.197"), namelen=16) returned -1
	[0227.034] WSAGetLastError () returned 10035
	[0227.034] htonl (hostlong=0xc0a800c6) returned 0xc600a8c0
	[0227.034] socket (af=2, type=1, protocol=6) returned 0x45c
	[0227.034] ioctlsocket (in: s=0x45c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.034] connect (s=0x45c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.198"), namelen=16) returned -1
	[0227.034] WSAGetLastError () returned 10035
	[0227.034] htonl (hostlong=0xc0a800c7) returned 0xc700a8c0
	[0227.034] socket (af=2, type=1, protocol=6) returned 0x460
	[0227.034] ioctlsocket (in: s=0x460, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.035] connect (s=0x460, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.199"), namelen=16) returned -1
	[0227.035] WSAGetLastError () returned 10035
	[0227.035] htonl (hostlong=0xc0a800c8) returned 0xc800a8c0
	[0227.035] socket (af=2, type=1, protocol=6) returned 0x464
	[0227.035] ioctlsocket (in: s=0x464, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.035] connect (s=0x464, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.200"), namelen=16) returned -1
	[0227.035] WSAGetLastError () returned 10035
	[0227.035] htonl (hostlong=0xc0a800c9) returned 0xc900a8c0
	[0227.035] socket (af=2, type=1, protocol=6) returned 0x468
	[0227.036] ioctlsocket (in: s=0x468, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.036] connect (s=0x468, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.201"), namelen=16) returned -1
	[0227.036] WSAGetLastError () returned 10035
	[0227.036] htonl (hostlong=0xc0a800ca) returned 0xca00a8c0
	[0227.036] socket (af=2, type=1, protocol=6) returned 0x46c
	[0227.036] ioctlsocket (in: s=0x46c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.036] connect (s=0x46c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.202"), namelen=16) returned -1
	[0227.037] WSAGetLastError () returned 10035
	[0227.037] htonl (hostlong=0xc0a800cb) returned 0xcb00a8c0
	[0227.037] socket (af=2, type=1, protocol=6) returned 0x470
	[0227.037] ioctlsocket (in: s=0x470, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.037] connect (s=0x470, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.203"), namelen=16) returned -1
	[0227.037] WSAGetLastError () returned 10035
	[0227.037] htonl (hostlong=0xc0a800cc) returned 0xcc00a8c0
	[0227.037] socket (af=2, type=1, protocol=6) returned 0x474
	[0227.037] ioctlsocket (in: s=0x474, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.037] connect (s=0x474, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.204"), namelen=16) returned -1
	[0227.038] WSAGetLastError () returned 10035
	[0227.038] htonl (hostlong=0xc0a800cd) returned 0xcd00a8c0
	[0227.038] socket (af=2, type=1, protocol=6) returned 0x478
	[0227.038] ioctlsocket (in: s=0x478, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.038] connect (s=0x478, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.205"), namelen=16) returned -1
	[0227.038] WSAGetLastError () returned 10035
	[0227.038] htonl (hostlong=0xc0a800ce) returned 0xce00a8c0
	[0227.038] socket (af=2, type=1, protocol=6) returned 0x47c
	[0227.039] ioctlsocket (in: s=0x47c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.039] connect (s=0x47c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.206"), namelen=16) returned -1
	[0227.039] WSAGetLastError () returned 10035
	[0227.039] htonl (hostlong=0xc0a800cf) returned 0xcf00a8c0
	[0227.039] socket (af=2, type=1, protocol=6) returned 0x480
	[0227.039] ioctlsocket (in: s=0x480, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.039] connect (s=0x480, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.207"), namelen=16) returned -1
	[0227.039] WSAGetLastError () returned 10035
	[0227.040] htonl (hostlong=0xc0a800d0) returned 0xd000a8c0
	[0227.040] socket (af=2, type=1, protocol=6) returned 0x484
	[0227.040] ioctlsocket (in: s=0x484, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.040] connect (s=0x484, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.208"), namelen=16) returned -1
	[0227.040] WSAGetLastError () returned 10035
	[0227.040] htonl (hostlong=0xc0a800d1) returned 0xd100a8c0
	[0227.040] socket (af=2, type=1, protocol=6) returned 0x488
	[0227.040] ioctlsocket (in: s=0x488, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.040] connect (s=0x488, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.209"), namelen=16) returned -1
	[0227.041] WSAGetLastError () returned 10035
	[0227.041] htonl (hostlong=0xc0a800d2) returned 0xd200a8c0
	[0227.041] socket (af=2, type=1, protocol=6) returned 0x48c
	[0227.041] ioctlsocket (in: s=0x48c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.041] connect (s=0x48c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.210"), namelen=16) returned -1
	[0227.041] WSAGetLastError () returned 10035
	[0227.041] htonl (hostlong=0xc0a800d3) returned 0xd300a8c0
	[0227.041] socket (af=2, type=1, protocol=6) returned 0x490
	[0227.041] ioctlsocket (in: s=0x490, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.041] connect (s=0x490, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.211"), namelen=16) returned -1
	[0227.042] WSAGetLastError () returned 10035
	[0227.042] htonl (hostlong=0xc0a800d4) returned 0xd400a8c0
	[0227.042] socket (af=2, type=1, protocol=6) returned 0x494
	[0227.042] ioctlsocket (in: s=0x494, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.042] connect (s=0x494, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.212"), namelen=16) returned -1
	[0227.042] WSAGetLastError () returned 10035
	[0227.042] htonl (hostlong=0xc0a800d5) returned 0xd500a8c0
	[0227.042] socket (af=2, type=1, protocol=6) returned 0x498
	[0227.043] ioctlsocket (in: s=0x498, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.043] connect (s=0x498, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.213"), namelen=16) returned -1
	[0227.043] WSAGetLastError () returned 10035
	[0227.043] htonl (hostlong=0xc0a800d6) returned 0xd600a8c0
	[0227.043] socket (af=2, type=1, protocol=6) returned 0x49c
	[0227.043] ioctlsocket (in: s=0x49c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.043] connect (s=0x49c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.214"), namelen=16) returned -1
	[0227.043] WSAGetLastError () returned 10035
	[0227.043] htonl (hostlong=0xc0a800d7) returned 0xd700a8c0
	[0227.043] socket (af=2, type=1, protocol=6) returned 0x4a0
	[0227.044] ioctlsocket (in: s=0x4a0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.044] connect (s=0x4a0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.215"), namelen=16) returned -1
	[0227.044] WSAGetLastError () returned 10035
	[0227.044] htonl (hostlong=0xc0a800d8) returned 0xd800a8c0
	[0227.044] socket (af=2, type=1, protocol=6) returned 0x4a4
	[0227.044] ioctlsocket (in: s=0x4a4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.044] connect (s=0x4a4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.216"), namelen=16) returned -1
	[0227.045] WSAGetLastError () returned 10035
	[0227.045] htonl (hostlong=0xc0a800d9) returned 0xd900a8c0
	[0227.045] socket (af=2, type=1, protocol=6) returned 0x4a8
	[0227.045] ioctlsocket (in: s=0x4a8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.045] connect (s=0x4a8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.217"), namelen=16) returned -1
	[0227.045] WSAGetLastError () returned 10035
	[0227.045] htonl (hostlong=0xc0a800da) returned 0xda00a8c0
	[0227.045] socket (af=2, type=1, protocol=6) returned 0x4ac
	[0227.045] ioctlsocket (in: s=0x4ac, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.045] connect (s=0x4ac, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.218"), namelen=16) returned -1
	[0227.046] WSAGetLastError () returned 10035
	[0227.046] htonl (hostlong=0xc0a800db) returned 0xdb00a8c0
	[0227.046] socket (af=2, type=1, protocol=6) returned 0x4b0
	[0227.046] ioctlsocket (in: s=0x4b0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.046] connect (s=0x4b0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.219"), namelen=16) returned -1
	[0227.046] WSAGetLastError () returned 10035
	[0227.046] htonl (hostlong=0xc0a800dc) returned 0xdc00a8c0
	[0227.046] socket (af=2, type=1, protocol=6) returned 0x4b4
	[0227.046] ioctlsocket (in: s=0x4b4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.046] connect (s=0x4b4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.220"), namelen=16) returned -1
	[0227.047] WSAGetLastError () returned 10035
	[0227.047] htonl (hostlong=0xc0a800dd) returned 0xdd00a8c0
	[0227.047] socket (af=2, type=1, protocol=6) returned 0x4b8
	[0227.047] ioctlsocket (in: s=0x4b8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.047] connect (s=0x4b8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.221"), namelen=16) returned -1
	[0227.047] WSAGetLastError () returned 10035
	[0227.047] htonl (hostlong=0xc0a800de) returned 0xde00a8c0
	[0227.047] socket (af=2, type=1, protocol=6) returned 0x4bc
	[0227.048] ioctlsocket (in: s=0x4bc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.048] connect (s=0x4bc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.222"), namelen=16) returned -1
	[0227.048] WSAGetLastError () returned 10035
	[0227.048] htonl (hostlong=0xc0a800df) returned 0xdf00a8c0
	[0227.048] socket (af=2, type=1, protocol=6) returned 0x4c0
	[0227.048] ioctlsocket (in: s=0x4c0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.048] connect (s=0x4c0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.223"), namelen=16) returned -1
	[0227.049] WSAGetLastError () returned 10035
	[0227.049] htonl (hostlong=0xc0a800e0) returned 0xe000a8c0
	[0227.049] socket (af=2, type=1, protocol=6) returned 0x4c4
	[0227.049] ioctlsocket (in: s=0x4c4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.049] connect (s=0x4c4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.224"), namelen=16) returned -1
	[0227.049] WSAGetLastError () returned 10035
	[0227.049] htonl (hostlong=0xc0a800e1) returned 0xe100a8c0
	[0227.049] socket (af=2, type=1, protocol=6) returned 0x4c8
	[0227.049] ioctlsocket (in: s=0x4c8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.049] connect (s=0x4c8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.225"), namelen=16) returned -1
	[0227.050] WSAGetLastError () returned 10035
	[0227.050] htonl (hostlong=0xc0a800e2) returned 0xe200a8c0
	[0227.050] socket (af=2, type=1, protocol=6) returned 0x4cc
	[0227.050] ioctlsocket (in: s=0x4cc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.050] connect (s=0x4cc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.226"), namelen=16) returned -1
	[0227.050] WSAGetLastError () returned 10035
	[0227.050] htonl (hostlong=0xc0a800e3) returned 0xe300a8c0
	[0227.050] socket (af=2, type=1, protocol=6) returned 0x4d0
	[0227.051] ioctlsocket (in: s=0x4d0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.051] connect (s=0x4d0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.227"), namelen=16) returned -1
	[0227.051] WSAGetLastError () returned 10035
	[0227.051] htonl (hostlong=0xc0a800e4) returned 0xe400a8c0
	[0227.051] socket (af=2, type=1, protocol=6) returned 0x4d4
	[0227.051] ioctlsocket (in: s=0x4d4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.051] connect (s=0x4d4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.228"), namelen=16) returned -1
	[0227.051] WSAGetLastError () returned 10035
	[0227.052] htonl (hostlong=0xc0a800e5) returned 0xe500a8c0
	[0227.052] socket (af=2, type=1, protocol=6) returned 0x4d8
	[0227.052] ioctlsocket (in: s=0x4d8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.052] connect (s=0x4d8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.229"), namelen=16) returned -1
	[0227.052] WSAGetLastError () returned 10035
	[0227.052] htonl (hostlong=0xc0a800e6) returned 0xe600a8c0
	[0227.052] socket (af=2, type=1, protocol=6) returned 0x4dc
	[0227.052] ioctlsocket (in: s=0x4dc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.052] connect (s=0x4dc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.230"), namelen=16) returned -1
	[0227.053] WSAGetLastError () returned 10035
	[0227.053] htonl (hostlong=0xc0a800e7) returned 0xe700a8c0
	[0227.053] socket (af=2, type=1, protocol=6) returned 0x4e0
	[0227.053] ioctlsocket (in: s=0x4e0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.053] connect (s=0x4e0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.231"), namelen=16) returned -1
	[0227.053] WSAGetLastError () returned 10035
	[0227.053] htonl (hostlong=0xc0a800e8) returned 0xe800a8c0
	[0227.053] socket (af=2, type=1, protocol=6) returned 0x4e4
	[0227.053] ioctlsocket (in: s=0x4e4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.053] connect (s=0x4e4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.232"), namelen=16) returned -1
	[0227.054] WSAGetLastError () returned 10035
	[0227.054] htonl (hostlong=0xc0a800e9) returned 0xe900a8c0
	[0227.054] socket (af=2, type=1, protocol=6) returned 0x4e8
	[0227.054] ioctlsocket (in: s=0x4e8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.054] connect (s=0x4e8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.233"), namelen=16) returned -1
	[0227.054] WSAGetLastError () returned 10035
	[0227.054] htonl (hostlong=0xc0a800ea) returned 0xea00a8c0
	[0227.054] socket (af=2, type=1, protocol=6) returned 0x4ec
	[0227.055] ioctlsocket (in: s=0x4ec, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.055] connect (s=0x4ec, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.234"), namelen=16) returned -1
	[0227.055] WSAGetLastError () returned 10035
	[0227.055] htonl (hostlong=0xc0a800eb) returned 0xeb00a8c0
	[0227.055] socket (af=2, type=1, protocol=6) returned 0x4f0
	[0227.055] ioctlsocket (in: s=0x4f0, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.055] connect (s=0x4f0, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.235"), namelen=16) returned -1
	[0227.055] WSAGetLastError () returned 10035
	[0227.056] htonl (hostlong=0xc0a800ec) returned 0xec00a8c0
	[0227.056] socket (af=2, type=1, protocol=6) returned 0x4f4
	[0227.056] ioctlsocket (in: s=0x4f4, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.056] connect (s=0x4f4, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.236"), namelen=16) returned -1
	[0227.056] WSAGetLastError () returned 10035
	[0227.056] htonl (hostlong=0xc0a800ed) returned 0xed00a8c0
	[0227.056] socket (af=2, type=1, protocol=6) returned 0x4f8
	[0227.056] ioctlsocket (in: s=0x4f8, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.056] connect (s=0x4f8, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.237"), namelen=16) returned -1
	[0227.057] WSAGetLastError () returned 10035
	[0227.057] htonl (hostlong=0xc0a800ee) returned 0xee00a8c0
	[0227.057] socket (af=2, type=1, protocol=6) returned 0x4fc
	[0227.057] ioctlsocket (in: s=0x4fc, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.057] connect (s=0x4fc, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.238"), namelen=16) returned -1
	[0227.057] WSAGetLastError () returned 10035
	[0227.057] htonl (hostlong=0xc0a800ef) returned 0xef00a8c0
	[0227.057] socket (af=2, type=1, protocol=6) returned 0x500
	[0227.057] ioctlsocket (in: s=0x500, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.057] connect (s=0x500, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.239"), namelen=16) returned -1
	[0227.058] WSAGetLastError () returned 10035
	[0227.058] htonl (hostlong=0xc0a800f0) returned 0xf000a8c0
	[0227.058] socket (af=2, type=1, protocol=6) returned 0x504
	[0227.058] ioctlsocket (in: s=0x504, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.058] connect (s=0x504, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.240"), namelen=16) returned -1
	[0227.058] WSAGetLastError () returned 10035
	[0227.058] htonl (hostlong=0xc0a800f1) returned 0xf100a8c0
	[0227.058] socket (af=2, type=1, protocol=6) returned 0x508
	[0227.059] ioctlsocket (in: s=0x508, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.059] connect (s=0x508, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.241"), namelen=16) returned -1
	[0227.059] WSAGetLastError () returned 10035
	[0227.059] htonl (hostlong=0xc0a800f2) returned 0xf200a8c0
	[0227.059] socket (af=2, type=1, protocol=6) returned 0x50c
	[0227.059] ioctlsocket (in: s=0x50c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.059] connect (s=0x50c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.242"), namelen=16) returned -1
	[0227.060] WSAGetLastError () returned 10035
	[0227.060] htonl (hostlong=0xc0a800f3) returned 0xf300a8c0
	[0227.060] socket (af=2, type=1, protocol=6) returned 0x510
	[0227.060] ioctlsocket (in: s=0x510, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.060] connect (s=0x510, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.243"), namelen=16) returned -1
	[0227.060] WSAGetLastError () returned 10035
	[0227.060] htonl (hostlong=0xc0a800f4) returned 0xf400a8c0
	[0227.060] socket (af=2, type=1, protocol=6) returned 0x514
	[0227.060] ioctlsocket (in: s=0x514, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.060] connect (s=0x514, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.244"), namelen=16) returned -1
	[0227.061] WSAGetLastError () returned 10035
	[0227.061] htonl (hostlong=0xc0a800f5) returned 0xf500a8c0
	[0227.061] socket (af=2, type=1, protocol=6) returned 0x518
	[0227.061] ioctlsocket (in: s=0x518, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.061] connect (s=0x518, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.245"), namelen=16) returned -1
	[0227.061] WSAGetLastError () returned 10035
	[0227.061] htonl (hostlong=0xc0a800f6) returned 0xf600a8c0
	[0227.061] socket (af=2, type=1, protocol=6) returned 0x51c
	[0227.062] ioctlsocket (in: s=0x51c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.062] connect (s=0x51c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.246"), namelen=16) returned -1
	[0227.062] WSAGetLastError () returned 10035
	[0227.062] htonl (hostlong=0xc0a800f7) returned 0xf700a8c0
	[0227.062] socket (af=2, type=1, protocol=6) returned 0x520
	[0227.062] ioctlsocket (in: s=0x520, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.062] connect (s=0x520, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.247"), namelen=16) returned -1
	[0227.062] WSAGetLastError () returned 10035
	[0227.062] htonl (hostlong=0xc0a800f8) returned 0xf800a8c0
	[0227.062] socket (af=2, type=1, protocol=6) returned 0x524
	[0227.063] ioctlsocket (in: s=0x524, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.063] connect (s=0x524, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.248"), namelen=16) returned -1
	[0227.063] WSAGetLastError () returned 10035
	[0227.063] htonl (hostlong=0xc0a800f9) returned 0xf900a8c0
	[0227.063] socket (af=2, type=1, protocol=6) returned 0x528
	[0227.063] ioctlsocket (in: s=0x528, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.063] connect (s=0x528, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.249"), namelen=16) returned -1
	[0227.064] WSAGetLastError () returned 10035
	[0227.064] htonl (hostlong=0xc0a800fa) returned 0xfa00a8c0
	[0227.064] socket (af=2, type=1, protocol=6) returned 0x52c
	[0227.064] ioctlsocket (in: s=0x52c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.064] connect (s=0x52c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.250"), namelen=16) returned -1
	[0227.064] WSAGetLastError () returned 10035
	[0227.064] htonl (hostlong=0xc0a800fb) returned 0xfb00a8c0
	[0227.064] socket (af=2, type=1, protocol=6) returned 0x530
	[0227.064] ioctlsocket (in: s=0x530, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.064] connect (s=0x530, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.251"), namelen=16) returned -1
	[0227.065] WSAGetLastError () returned 10035
	[0227.065] htonl (hostlong=0xc0a800fc) returned 0xfc00a8c0
	[0227.065] socket (af=2, type=1, protocol=6) returned 0x534
	[0227.065] ioctlsocket (in: s=0x534, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.065] connect (s=0x534, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.252"), namelen=16) returned -1
	[0227.065] WSAGetLastError () returned 10035
	[0227.065] htonl (hostlong=0xc0a800fd) returned 0xfd00a8c0
	[0227.066] socket (af=2, type=1, protocol=6) returned 0x538
	[0227.066] ioctlsocket (in: s=0x538, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.066] connect (s=0x538, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.253"), namelen=16) returned -1
	[0227.066] WSAGetLastError () returned 10035
	[0227.066] htonl (hostlong=0xc0a800fe) returned 0xfe00a8c0
	[0227.066] socket (af=2, type=1, protocol=6) returned 0x53c
	[0227.066] ioctlsocket (in: s=0x53c, cmd=-2147195266, argp=0x263f7d8 | out: argp=0x263f7d8) returned 0
	[0227.066] connect (s=0x53c, name=0x263f7c0*(sa_family=2, sin_port=0x1bd, sin_addr="192.168.0.254"), namelen=16) returned -1
	[0227.067] WSAGetLastError () returned 10035
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.067] GetTickCount () returned 0x114decb
	[0227.067] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.068] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.068] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.069] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.069] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.070] GetTickCount () returned 0x114decb
	[0227.070] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.071] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.071] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.072] GetTickCount () returned 0x114decb
	[0227.072] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.073] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.073] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.074] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.074] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.075] GetTickCount () returned 0x114decb
	[0227.075] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.076] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.076] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.077] GetTickCount () returned 0x114decb
	[0227.077] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.078] GetTickCount () returned 0x114decb
	[0227.078] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.078] GetTickCount () returned 0x114decb
	[0227.078] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.078] GetTickCount () returned 0x114decb
	[0227.078] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.078] GetTickCount () returned 0x114decb
	[0227.078] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.078] GetTickCount () returned 0x114decb
	[0227.078] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.078] GetTickCount () returned 0x114decb
	[0227.078] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.078] GetTickCount () returned 0x114decb
	[0227.078] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.078] GetTickCount () returned 0x114decb
	[0227.078] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.078] GetTickCount () returned 0x114decb
	[0227.078] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.078] GetTickCount () returned 0x114decb
	[0227.078] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.078] GetTickCount () returned 0x114decb
	[0227.078] select (in: nfds=0, readfds=0x263f678, writefds=0x0, exceptfds=0x263f570, timeout=0x263f780 | out: readfds=0x263f678, writefds=0x0, exceptfds=0x263f570) returned -1
	[0227.078] GetTickCount () returned 0x114decb
	[0227.078] getsockopt (in: s=0x53c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.078] recv (in: s=0x53c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.078] WSAGetLastError () returned 10057
	[0227.078] closesocket (s=0x53c) returned 0
	[0227.079] getsockopt (in: s=0x538, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.079] recv (in: s=0x538, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.079] WSAGetLastError () returned 10057
	[0227.080] closesocket (s=0x538) returned 0
	[0227.080] getsockopt (in: s=0x534, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.080] recv (in: s=0x534, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.080] WSAGetLastError () returned 10057
	[0227.080] closesocket (s=0x534) returned 0
	[0227.081] getsockopt (in: s=0x530, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.081] recv (in: s=0x530, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.081] WSAGetLastError () returned 10057
	[0227.081] closesocket (s=0x530) returned 0
	[0227.081] getsockopt (in: s=0x52c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.082] recv (in: s=0x52c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.082] WSAGetLastError () returned 10057
	[0227.082] closesocket (s=0x52c) returned 0
	[0227.082] getsockopt (in: s=0x528, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.082] recv (in: s=0x528, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.082] WSAGetLastError () returned 10057
	[0227.082] closesocket (s=0x528) returned 0
	[0227.083] getsockopt (in: s=0x524, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.083] recv (in: s=0x524, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.083] WSAGetLastError () returned 10057
	[0227.083] closesocket (s=0x524) returned 0
	[0227.084] getsockopt (in: s=0x520, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.084] recv (in: s=0x520, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.084] WSAGetLastError () returned 10057
	[0227.084] closesocket (s=0x520) returned 0
	[0227.084] getsockopt (in: s=0x51c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.084] recv (in: s=0x51c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.084] WSAGetLastError () returned 10057
	[0227.084] closesocket (s=0x51c) returned 0
	[0227.085] getsockopt (in: s=0x518, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.085] recv (in: s=0x518, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.085] WSAGetLastError () returned 10057
	[0227.085] closesocket (s=0x518) returned 0
	[0227.086] getsockopt (in: s=0x514, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.086] recv (in: s=0x514, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.086] WSAGetLastError () returned 10057
	[0227.086] closesocket (s=0x514) returned 0
	[0227.086] getsockopt (in: s=0x510, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.086] recv (in: s=0x510, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.086] WSAGetLastError () returned 10057
	[0227.086] closesocket (s=0x510) returned 0
	[0227.087] getsockopt (in: s=0x50c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.087] recv (in: s=0x50c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.087] WSAGetLastError () returned 10057
	[0227.087] closesocket (s=0x50c) returned 0
	[0227.087] getsockopt (in: s=0x508, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.087] recv (in: s=0x508, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.088] WSAGetLastError () returned 10057
	[0227.088] closesocket (s=0x508) returned 0
	[0227.088] getsockopt (in: s=0x504, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.088] recv (in: s=0x504, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.088] WSAGetLastError () returned 10057
	[0227.088] closesocket (s=0x504) returned 0
	[0227.089] getsockopt (in: s=0x500, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.089] recv (in: s=0x500, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.089] WSAGetLastError () returned 10057
	[0227.089] closesocket (s=0x500) returned 0
	[0227.089] getsockopt (in: s=0x4fc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.089] recv (in: s=0x4fc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.089] WSAGetLastError () returned 10057
	[0227.089] closesocket (s=0x4fc) returned 0
	[0227.090] getsockopt (in: s=0x4f8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.090] recv (in: s=0x4f8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.090] WSAGetLastError () returned 10057
	[0227.090] closesocket (s=0x4f8) returned 0
	[0227.091] getsockopt (in: s=0x4f4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.091] recv (in: s=0x4f4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.091] WSAGetLastError () returned 10057
	[0227.091] closesocket (s=0x4f4) returned 0
	[0227.091] getsockopt (in: s=0x4f0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.091] recv (in: s=0x4f0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.091] WSAGetLastError () returned 10057
	[0227.091] closesocket (s=0x4f0) returned 0
	[0227.092] getsockopt (in: s=0x4ec, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.092] recv (in: s=0x4ec, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.092] WSAGetLastError () returned 10057
	[0227.092] closesocket (s=0x4ec) returned 0
	[0227.093] getsockopt (in: s=0x4e8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.093] recv (in: s=0x4e8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.093] WSAGetLastError () returned 10057
	[0227.093] closesocket (s=0x4e8) returned 0
	[0227.093] getsockopt (in: s=0x4e4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.093] recv (in: s=0x4e4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.093] WSAGetLastError () returned 10057
	[0227.093] closesocket (s=0x4e4) returned 0
	[0227.094] getsockopt (in: s=0x4e0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.094] recv (in: s=0x4e0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.094] WSAGetLastError () returned 10057
	[0227.094] closesocket (s=0x4e0) returned 0
	[0227.095] getsockopt (in: s=0x4dc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.095] recv (in: s=0x4dc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.095] WSAGetLastError () returned 10057
	[0227.095] closesocket (s=0x4dc) returned 0
	[0227.095] getsockopt (in: s=0x4d8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.095] recv (in: s=0x4d8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.095] WSAGetLastError () returned 10057
	[0227.095] closesocket (s=0x4d8) returned 0
	[0227.190] getsockopt (in: s=0x4d4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.190] recv (in: s=0x4d4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.190] WSAGetLastError () returned 10057
	[0227.190] closesocket (s=0x4d4) returned 0
	[0227.191] getsockopt (in: s=0x4d0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.191] recv (in: s=0x4d0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.191] WSAGetLastError () returned 10057
	[0227.191] closesocket (s=0x4d0) returned 0
	[0227.192] getsockopt (in: s=0x4cc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.192] recv (in: s=0x4cc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.192] WSAGetLastError () returned 10057
	[0227.192] closesocket (s=0x4cc) returned 0
	[0227.193] getsockopt (in: s=0x4c8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.193] recv (in: s=0x4c8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.193] WSAGetLastError () returned 10057
	[0227.193] closesocket (s=0x4c8) returned 0
	[0227.194] getsockopt (in: s=0x4c4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.194] recv (in: s=0x4c4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.194] WSAGetLastError () returned 10057
	[0227.194] closesocket (s=0x4c4) returned 0
	[0227.194] getsockopt (in: s=0x4c0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.194] recv (in: s=0x4c0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.194] WSAGetLastError () returned 10057
	[0227.194] closesocket (s=0x4c0) returned 0
	[0227.195] getsockopt (in: s=0x4bc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.195] recv (in: s=0x4bc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.195] WSAGetLastError () returned 10057
	[0227.195] closesocket (s=0x4bc) returned 0
	[0227.196] getsockopt (in: s=0x4b8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.196] recv (in: s=0x4b8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.196] WSAGetLastError () returned 10057
	[0227.196] closesocket (s=0x4b8) returned 0
	[0227.196] getsockopt (in: s=0x4b4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.196] recv (in: s=0x4b4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.196] WSAGetLastError () returned 10057
	[0227.196] closesocket (s=0x4b4) returned 0
	[0227.197] getsockopt (in: s=0x4b0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.197] recv (in: s=0x4b0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.197] WSAGetLastError () returned 10057
	[0227.197] closesocket (s=0x4b0) returned 0
	[0227.198] getsockopt (in: s=0x4ac, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.198] recv (in: s=0x4ac, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.198] WSAGetLastError () returned 10057
	[0227.198] closesocket (s=0x4ac) returned 0
	[0227.198] getsockopt (in: s=0x4a8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.198] recv (in: s=0x4a8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.198] WSAGetLastError () returned 10057
	[0227.198] closesocket (s=0x4a8) returned 0
	[0227.199] getsockopt (in: s=0x4a4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.199] recv (in: s=0x4a4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.199] WSAGetLastError () returned 10057
	[0227.199] closesocket (s=0x4a4) returned 0
	[0227.199] getsockopt (in: s=0x4a0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.199] recv (in: s=0x4a0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.200] WSAGetLastError () returned 10057
	[0227.200] closesocket (s=0x4a0) returned 0
	[0227.200] getsockopt (in: s=0x49c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.200] recv (in: s=0x49c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.200] WSAGetLastError () returned 10057
	[0227.200] closesocket (s=0x49c) returned 0
	[0227.201] getsockopt (in: s=0x498, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.201] recv (in: s=0x498, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.201] WSAGetLastError () returned 10057
	[0227.201] closesocket (s=0x498) returned 0
	[0227.201] getsockopt (in: s=0x494, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.201] recv (in: s=0x494, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.202] WSAGetLastError () returned 10057
	[0227.202] closesocket (s=0x494) returned 0
	[0227.202] getsockopt (in: s=0x490, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.202] recv (in: s=0x490, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.202] WSAGetLastError () returned 10057
	[0227.202] closesocket (s=0x490) returned 0
	[0227.203] getsockopt (in: s=0x48c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.203] recv (in: s=0x48c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.203] WSAGetLastError () returned 10057
	[0227.203] closesocket (s=0x48c) returned 0
	[0227.203] getsockopt (in: s=0x488, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.203] recv (in: s=0x488, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.203] WSAGetLastError () returned 10057
	[0227.203] closesocket (s=0x488) returned 0
	[0227.204] getsockopt (in: s=0x484, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.204] recv (in: s=0x484, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.204] WSAGetLastError () returned 10057
	[0227.204] closesocket (s=0x484) returned 0
	[0227.205] getsockopt (in: s=0x480, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.205] recv (in: s=0x480, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.205] WSAGetLastError () returned 10057
	[0227.205] closesocket (s=0x480) returned 0
	[0227.206] getsockopt (in: s=0x47c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.206] recv (in: s=0x47c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.206] WSAGetLastError () returned 10057
	[0227.206] closesocket (s=0x47c) returned 0
	[0227.206] getsockopt (in: s=0x478, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.206] recv (in: s=0x478, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.206] WSAGetLastError () returned 10057
	[0227.206] closesocket (s=0x478) returned 0
	[0227.207] getsockopt (in: s=0x474, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.207] recv (in: s=0x474, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.207] WSAGetLastError () returned 10057
	[0227.207] closesocket (s=0x474) returned 0
	[0227.208] getsockopt (in: s=0x470, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.208] recv (in: s=0x470, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.208] WSAGetLastError () returned 10057
	[0227.208] closesocket (s=0x470) returned 0
	[0227.208] getsockopt (in: s=0x46c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.208] recv (in: s=0x46c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.208] WSAGetLastError () returned 10057
	[0227.208] closesocket (s=0x46c) returned 0
	[0227.209] getsockopt (in: s=0x468, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.209] recv (in: s=0x468, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.209] WSAGetLastError () returned 10057
	[0227.209] closesocket (s=0x468) returned 0
	[0227.210] getsockopt (in: s=0x464, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.210] recv (in: s=0x464, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.210] WSAGetLastError () returned 10057
	[0227.210] closesocket (s=0x464) returned 0
	[0227.210] getsockopt (in: s=0x460, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.210] recv (in: s=0x460, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.210] WSAGetLastError () returned 10057
	[0227.210] closesocket (s=0x460) returned 0
	[0227.211] getsockopt (in: s=0x45c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.211] recv (in: s=0x45c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.211] WSAGetLastError () returned 10057
	[0227.211] closesocket (s=0x45c) returned 0
	[0227.212] getsockopt (in: s=0x458, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.212] recv (in: s=0x458, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.212] WSAGetLastError () returned 10057
	[0227.212] closesocket (s=0x458) returned 0
	[0227.212] getsockopt (in: s=0x454, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.212] recv (in: s=0x454, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.212] WSAGetLastError () returned 10057
	[0227.212] closesocket (s=0x454) returned 0
	[0227.213] getsockopt (in: s=0x450, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.213] recv (in: s=0x450, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.213] WSAGetLastError () returned 10057
	[0227.213] closesocket (s=0x450) returned 0
	[0227.214] getsockopt (in: s=0x44c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.214] recv (in: s=0x44c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.214] WSAGetLastError () returned 10057
	[0227.214] closesocket (s=0x44c) returned 0
	[0227.214] getsockopt (in: s=0x448, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.214] recv (in: s=0x448, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.214] WSAGetLastError () returned 10057
	[0227.214] closesocket (s=0x448) returned 0
	[0227.215] getsockopt (in: s=0x444, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.215] recv (in: s=0x444, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.215] WSAGetLastError () returned 10057
	[0227.215] closesocket (s=0x444) returned 0
	[0227.215] getsockopt (in: s=0x440, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.216] recv (in: s=0x440, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.216] WSAGetLastError () returned 10057
	[0227.216] closesocket (s=0x440) returned 0
	[0227.216] getsockopt (in: s=0x43c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.216] recv (in: s=0x43c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.216] WSAGetLastError () returned 10057
	[0227.216] closesocket (s=0x43c) returned 0
	[0227.217] getsockopt (in: s=0x438, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.217] recv (in: s=0x438, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.217] WSAGetLastError () returned 10057
	[0227.217] closesocket (s=0x438) returned 0
	[0227.217] getsockopt (in: s=0x434, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.218] recv (in: s=0x434, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.218] WSAGetLastError () returned 10057
	[0227.218] closesocket (s=0x434) returned 0
	[0227.218] getsockopt (in: s=0x430, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.218] recv (in: s=0x430, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.218] WSAGetLastError () returned 10057
	[0227.218] closesocket (s=0x430) returned 0
	[0227.219] getsockopt (in: s=0x42c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.219] recv (in: s=0x42c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.219] WSAGetLastError () returned 10057
	[0227.219] closesocket (s=0x42c) returned 0
	[0227.219] getsockopt (in: s=0x428, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.219] recv (in: s=0x428, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.220] WSAGetLastError () returned 10057
	[0227.220] closesocket (s=0x428) returned 0
	[0227.220] getsockopt (in: s=0x424, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.220] recv (in: s=0x424, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.220] WSAGetLastError () returned 10057
	[0227.220] closesocket (s=0x424) returned 0
	[0227.221] getsockopt (in: s=0x420, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.221] recv (in: s=0x420, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.221] WSAGetLastError () returned 10057
	[0227.221] closesocket (s=0x420) returned 0
	[0227.221] getsockopt (in: s=0x41c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.222] recv (in: s=0x41c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.222] WSAGetLastError () returned 10057
	[0227.222] closesocket (s=0x41c) returned 0
	[0227.222] getsockopt (in: s=0x418, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.222] recv (in: s=0x418, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.222] WSAGetLastError () returned 10057
	[0227.222] closesocket (s=0x418) returned 0
	[0227.223] getsockopt (in: s=0x414, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.223] recv (in: s=0x414, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.223] WSAGetLastError () returned 10057
	[0227.223] closesocket (s=0x414) returned 0
	[0227.224] getsockopt (in: s=0x410, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.224] recv (in: s=0x410, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.224] WSAGetLastError () returned 10057
	[0227.224] closesocket (s=0x410) returned 0
	[0227.224] getsockopt (in: s=0x40c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.224] recv (in: s=0x40c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.224] WSAGetLastError () returned 10057
	[0227.224] closesocket (s=0x40c) returned 0
	[0227.225] getsockopt (in: s=0x408, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.225] recv (in: s=0x408, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.225] WSAGetLastError () returned 10057
	[0227.225] closesocket (s=0x408) returned 0
	[0227.226] getsockopt (in: s=0x404, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.226] recv (in: s=0x404, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.226] WSAGetLastError () returned 10057
	[0227.226] closesocket (s=0x404) returned 0
	[0227.226] getsockopt (in: s=0x3fc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.226] recv (in: s=0x3fc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.226] WSAGetLastError () returned 10057
	[0227.226] closesocket (s=0x3fc) returned 0
	[0227.227] getsockopt (in: s=0x3f8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.227] recv (in: s=0x3f8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.227] WSAGetLastError () returned 10057
	[0227.227] closesocket (s=0x3f8) returned 0
	[0227.227] getsockopt (in: s=0x3f4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.228] recv (in: s=0x3f4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.228] WSAGetLastError () returned 10057
	[0227.228] closesocket (s=0x3f4) returned 0
	[0227.228] getsockopt (in: s=0x3f0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.228] recv (in: s=0x3f0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.228] WSAGetLastError () returned 10057
	[0227.228] closesocket (s=0x3f0) returned 0
	[0227.229] getsockopt (in: s=0x3ec, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.229] recv (in: s=0x3ec, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.229] WSAGetLastError () returned 10057
	[0227.229] closesocket (s=0x3ec) returned 0
	[0227.230] getsockopt (in: s=0x3e8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.230] recv (in: s=0x3e8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.230] WSAGetLastError () returned 10057
	[0227.230] closesocket (s=0x3e8) returned 0
	[0227.230] getsockopt (in: s=0x3e4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.230] recv (in: s=0x3e4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.230] WSAGetLastError () returned 10057
	[0227.230] closesocket (s=0x3e4) returned 0
	[0227.231] getsockopt (in: s=0x3e0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.231] recv (in: s=0x3e0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.231] WSAGetLastError () returned 10057
	[0227.231] closesocket (s=0x3e0) returned 0
	[0227.232] getsockopt (in: s=0x3dc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.232] recv (in: s=0x3dc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.232] WSAGetLastError () returned 10057
	[0227.232] closesocket (s=0x3dc) returned 0
	[0227.232] getsockopt (in: s=0x3d8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.232] recv (in: s=0x3d8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.232] WSAGetLastError () returned 10057
	[0227.232] closesocket (s=0x3d8) returned 0
	[0227.233] getsockopt (in: s=0x3d4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.233] recv (in: s=0x3d4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.233] WSAGetLastError () returned 10057
	[0227.233] closesocket (s=0x3d4) returned 0
	[0227.234] getsockopt (in: s=0x3d0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.234] recv (in: s=0x3d0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.234] WSAGetLastError () returned 10057
	[0227.234] closesocket (s=0x3d0) returned 0
	[0227.234] getsockopt (in: s=0x3cc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.234] recv (in: s=0x3cc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.234] WSAGetLastError () returned 10057
	[0227.234] closesocket (s=0x3cc) returned 0
	[0227.235] getsockopt (in: s=0x3c8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.235] recv (in: s=0x3c8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.235] WSAGetLastError () returned 10057
	[0227.235] closesocket (s=0x3c8) returned 0
	[0227.236] getsockopt (in: s=0x3c4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.236] recv (in: s=0x3c4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.236] WSAGetLastError () returned 10057
	[0227.236] closesocket (s=0x3c4) returned 0
	[0227.236] getsockopt (in: s=0x3c0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.236] recv (in: s=0x3c0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.236] WSAGetLastError () returned 10057
	[0227.236] closesocket (s=0x3c0) returned 0
	[0227.237] getsockopt (in: s=0x3bc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.237] recv (in: s=0x3bc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.237] WSAGetLastError () returned 10057
	[0227.237] closesocket (s=0x3bc) returned 0
	[0227.238] getsockopt (in: s=0x3b8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.238] recv (in: s=0x3b8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.238] WSAGetLastError () returned 10057
	[0227.238] closesocket (s=0x3b8) returned 0
	[0227.238] getsockopt (in: s=0x3b4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.238] recv (in: s=0x3b4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.238] WSAGetLastError () returned 10057
	[0227.238] closesocket (s=0x3b4) returned 0
	[0227.239] getsockopt (in: s=0x3b0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.239] recv (in: s=0x3b0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.239] WSAGetLastError () returned 10057
	[0227.239] closesocket (s=0x3b0) returned 0
	[0227.240] getsockopt (in: s=0x3ac, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.240] recv (in: s=0x3ac, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.240] WSAGetLastError () returned 10057
	[0227.240] closesocket (s=0x3ac) returned 0
	[0227.240] getsockopt (in: s=0x3a8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.240] recv (in: s=0x3a8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.240] WSAGetLastError () returned 10057
	[0227.240] closesocket (s=0x3a8) returned 0
	[0227.241] getsockopt (in: s=0x3a4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.241] recv (in: s=0x3a4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.241] WSAGetLastError () returned 10057
	[0227.241] closesocket (s=0x3a4) returned 0
	[0227.242] getsockopt (in: s=0x3a0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.242] recv (in: s=0x3a0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.242] WSAGetLastError () returned 10057
	[0227.242] closesocket (s=0x3a0) returned 0
	[0227.242] getsockopt (in: s=0x39c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.242] recv (in: s=0x39c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.242] WSAGetLastError () returned 10057
	[0227.242] closesocket (s=0x39c) returned 0
	[0227.243] getsockopt (in: s=0x398, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.243] recv (in: s=0x398, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.243] WSAGetLastError () returned 10057
	[0227.243] closesocket (s=0x398) returned 0
	[0227.244] getsockopt (in: s=0x394, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.244] recv (in: s=0x394, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.244] WSAGetLastError () returned 10057
	[0227.244] closesocket (s=0x394) returned 0
	[0227.244] getsockopt (in: s=0x390, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.245] recv (in: s=0x390, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.245] WSAGetLastError () returned 10057
	[0227.245] closesocket (s=0x390) returned 0
	[0227.245] getsockopt (in: s=0x38c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.245] recv (in: s=0x38c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.245] WSAGetLastError () returned 10057
	[0227.245] closesocket (s=0x38c) returned 0
	[0227.246] getsockopt (in: s=0x388, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.246] recv (in: s=0x388, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.246] WSAGetLastError () returned 10057
	[0227.246] closesocket (s=0x388) returned 0
	[0227.246] getsockopt (in: s=0x384, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.247] recv (in: s=0x384, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.247] WSAGetLastError () returned 10057
	[0227.247] closesocket (s=0x384) returned 0
	[0227.247] getsockopt (in: s=0x380, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.247] recv (in: s=0x380, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.247] WSAGetLastError () returned 10057
	[0227.247] closesocket (s=0x380) returned 0
	[0227.248] getsockopt (in: s=0x37c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.248] recv (in: s=0x37c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.248] WSAGetLastError () returned 10057
	[0227.248] closesocket (s=0x37c) returned 0
	[0227.248] getsockopt (in: s=0x378, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.249] recv (in: s=0x378, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.249] WSAGetLastError () returned 10057
	[0227.249] closesocket (s=0x378) returned 0
	[0227.249] getsockopt (in: s=0x374, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.249] recv (in: s=0x374, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.249] WSAGetLastError () returned 10057
	[0227.249] closesocket (s=0x374) returned 0
	[0227.250] getsockopt (in: s=0x370, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.250] recv (in: s=0x370, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.250] WSAGetLastError () returned 10057
	[0227.250] closesocket (s=0x370) returned 0
	[0227.250] getsockopt (in: s=0x36c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.251] recv (in: s=0x36c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.251] WSAGetLastError () returned 10057
	[0227.251] closesocket (s=0x36c) returned 0
	[0227.251] getsockopt (in: s=0x368, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.251] recv (in: s=0x368, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.251] WSAGetLastError () returned 10057
	[0227.251] closesocket (s=0x368) returned 0
	[0227.252] getsockopt (in: s=0x364, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.252] recv (in: s=0x364, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.252] WSAGetLastError () returned 10057
	[0227.252] closesocket (s=0x364) returned 0
	[0227.252] getsockopt (in: s=0x360, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.253] recv (in: s=0x360, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.253] WSAGetLastError () returned 10057
	[0227.253] closesocket (s=0x360) returned 0
	[0227.253] getsockopt (in: s=0x35c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.253] recv (in: s=0x35c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.253] WSAGetLastError () returned 10057
	[0227.253] closesocket (s=0x35c) returned 0
	[0227.254] getsockopt (in: s=0x358, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.254] recv (in: s=0x358, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.254] WSAGetLastError () returned 10057
	[0227.254] closesocket (s=0x358) returned 0
	[0227.254] getsockopt (in: s=0x354, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.255] recv (in: s=0x354, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.255] WSAGetLastError () returned 10057
	[0227.255] closesocket (s=0x354) returned 0
	[0227.255] getsockopt (in: s=0x350, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.255] recv (in: s=0x350, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.255] WSAGetLastError () returned 10057
	[0227.255] closesocket (s=0x350) returned 0
	[0227.256] getsockopt (in: s=0x34c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.256] recv (in: s=0x34c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.256] WSAGetLastError () returned 10057
	[0227.256] closesocket (s=0x34c) returned 0
	[0227.256] getsockopt (in: s=0x348, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.257] recv (in: s=0x348, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.257] WSAGetLastError () returned 10057
	[0227.257] closesocket (s=0x348) returned 0
	[0227.257] getsockopt (in: s=0x344, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.257] recv (in: s=0x344, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.257] WSAGetLastError () returned 10057
	[0227.257] closesocket (s=0x344) returned 0
	[0227.258] getsockopt (in: s=0x340, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.258] recv (in: s=0x340, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.258] WSAGetLastError () returned 10057
	[0227.258] closesocket (s=0x340) returned 0
	[0227.258] getsockopt (in: s=0x33c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.258] recv (in: s=0x33c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.259] WSAGetLastError () returned 10057
	[0227.259] closesocket (s=0x33c) returned 0
	[0227.259] getsockopt (in: s=0x338, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.259] recv (in: s=0x338, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.259] WSAGetLastError () returned 10057
	[0227.259] closesocket (s=0x338) returned 0
	[0227.260] getsockopt (in: s=0x334, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.260] recv (in: s=0x334, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.260] WSAGetLastError () returned 10057
	[0227.260] closesocket (s=0x334) returned 0
	[0227.260] getsockopt (in: s=0x330, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.260] recv (in: s=0x330, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.261] WSAGetLastError () returned 10057
	[0227.261] closesocket (s=0x330) returned 0
	[0227.261] getsockopt (in: s=0x32c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.261] recv (in: s=0x32c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.261] WSAGetLastError () returned 10057
	[0227.261] closesocket (s=0x32c) returned 0
	[0227.262] getsockopt (in: s=0x328, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.262] recv (in: s=0x328, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.262] WSAGetLastError () returned 10057
	[0227.262] closesocket (s=0x328) returned 0
	[0227.262] getsockopt (in: s=0x324, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.262] recv (in: s=0x324, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.262] WSAGetLastError () returned 10057
	[0227.262] closesocket (s=0x324) returned 0
	[0227.263] getsockopt (in: s=0x320, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.263] recv (in: s=0x320, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.263] WSAGetLastError () returned 10057
	[0227.263] closesocket (s=0x320) returned 0
	[0227.264] getsockopt (in: s=0x31c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.264] recv (in: s=0x31c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.264] WSAGetLastError () returned 10057
	[0227.264] closesocket (s=0x31c) returned 0
	[0227.264] getsockopt (in: s=0x318, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.264] recv (in: s=0x318, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.264] WSAGetLastError () returned 10057
	[0227.264] closesocket (s=0x318) returned 0
	[0227.265] getsockopt (in: s=0x314, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.265] recv (in: s=0x314, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.265] WSAGetLastError () returned 10057
	[0227.265] closesocket (s=0x314) returned 0
	[0227.266] getsockopt (in: s=0x310, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.266] recv (in: s=0x310, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.266] WSAGetLastError () returned 10057
	[0227.266] closesocket (s=0x310) returned 0
	[0227.266] getsockopt (in: s=0x30c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.266] recv (in: s=0x30c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.266] WSAGetLastError () returned 10057
	[0227.266] closesocket (s=0x30c) returned 0
	[0227.267] getsockopt (in: s=0x308, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.267] recv (in: s=0x308, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.267] WSAGetLastError () returned 10057
	[0227.267] closesocket (s=0x308) returned 0
	[0227.268] getsockopt (in: s=0x304, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.268] recv (in: s=0x304, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.268] WSAGetLastError () returned 10057
	[0227.268] closesocket (s=0x304) returned 0
	[0227.269] getsockopt (in: s=0x300, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.269] recv (in: s=0x300, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.269] WSAGetLastError () returned 10057
	[0227.269] closesocket (s=0x300) returned 0
	[0227.269] getsockopt (in: s=0x2fc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.269] recv (in: s=0x2fc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.269] WSAGetLastError () returned 10057
	[0227.269] closesocket (s=0x2fc) returned 0
	[0227.270] getsockopt (in: s=0x2f8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.270] recv (in: s=0x2f8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.270] WSAGetLastError () returned 10057
	[0227.270] closesocket (s=0x2f8) returned 0
	[0227.271] getsockopt (in: s=0x2f4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.271] recv (in: s=0x2f4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.271] WSAGetLastError () returned 10057
	[0227.271] closesocket (s=0x2f4) returned 0
	[0227.271] getsockopt (in: s=0x2f0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.271] recv (in: s=0x2f0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.271] WSAGetLastError () returned 10057
	[0227.271] closesocket (s=0x2f0) returned 0
	[0227.272] getsockopt (in: s=0x2ec, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.272] recv (in: s=0x2ec, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.272] WSAGetLastError () returned 10057
	[0227.272] closesocket (s=0x2ec) returned 0
	[0227.273] getsockopt (in: s=0x2e8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.273] recv (in: s=0x2e8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.273] WSAGetLastError () returned 10057
	[0227.273] closesocket (s=0x2e8) returned 0
	[0227.273] getsockopt (in: s=0x2e4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.273] recv (in: s=0x2e4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.273] WSAGetLastError () returned 10057
	[0227.273] closesocket (s=0x2e4) returned 0
	[0227.274] getsockopt (in: s=0x2e0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.274] recv (in: s=0x2e0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.274] WSAGetLastError () returned 10057
	[0227.274] closesocket (s=0x2e0) returned 0
	[0227.275] getsockopt (in: s=0x2dc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.275] recv (in: s=0x2dc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.275] WSAGetLastError () returned 10057
	[0227.275] closesocket (s=0x2dc) returned 0
	[0227.275] getsockopt (in: s=0x2d8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.275] recv (in: s=0x2d8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.275] WSAGetLastError () returned 10057
	[0227.275] closesocket (s=0x2d8) returned 0
	[0227.276] getsockopt (in: s=0x2d4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.276] recv (in: s=0x2d4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.276] WSAGetLastError () returned 10057
	[0227.276] closesocket (s=0x2d4) returned 0
	[0227.277] getsockopt (in: s=0x2d0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.277] recv (in: s=0x2d0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.277] WSAGetLastError () returned 10057
	[0227.277] closesocket (s=0x2d0) returned 0
	[0227.277] getsockopt (in: s=0x2cc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.277] recv (in: s=0x2cc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.277] WSAGetLastError () returned 10057
	[0227.277] closesocket (s=0x2cc) returned 0
	[0227.278] getsockopt (in: s=0x2c8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.278] recv (in: s=0x2c8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.278] WSAGetLastError () returned 10057
	[0227.278] closesocket (s=0x2c8) returned 0
	[0227.279] getsockopt (in: s=0x2c4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.279] recv (in: s=0x2c4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.279] WSAGetLastError () returned 10057
	[0227.279] closesocket (s=0x2c4) returned 0
	[0227.279] getsockopt (in: s=0x2c0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.279] recv (in: s=0x2c0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.279] WSAGetLastError () returned 10057
	[0227.279] closesocket (s=0x2c0) returned 0
	[0227.280] getsockopt (in: s=0x2bc, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.280] recv (in: s=0x2bc, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.280] WSAGetLastError () returned 10057
	[0227.280] closesocket (s=0x2bc) returned 0
	[0227.281] getsockopt (in: s=0x2b8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.281] recv (in: s=0x2b8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.281] WSAGetLastError () returned 10057
	[0227.281] closesocket (s=0x2b8) returned 0
	[0227.281] getsockopt (in: s=0x2b4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.281] recv (in: s=0x2b4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.281] WSAGetLastError () returned 10057
	[0227.281] closesocket (s=0x2b4) returned 0
	[0227.282] getsockopt (in: s=0x2b0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.282] recv (in: s=0x2b0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.282] WSAGetLastError () returned 10057
	[0227.282] closesocket (s=0x2b0) returned 0
	[0227.282] getsockopt (in: s=0x2ac, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.282] recv (in: s=0x2ac, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.283] WSAGetLastError () returned 10057
	[0227.283] closesocket (s=0x2ac) returned 0
	[0227.283] getsockopt (in: s=0x2a8, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.283] recv (in: s=0x2a8, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.283] WSAGetLastError () returned 10057
	[0227.283] closesocket (s=0x2a8) returned 0
	[0227.284] getsockopt (in: s=0x2a4, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.284] recv (in: s=0x2a4, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.284] WSAGetLastError () returned 10057
	[0227.284] closesocket (s=0x2a4) returned 0
	[0227.285] getsockopt (in: s=0x2a0, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.285] recv (in: s=0x2a0, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.285] WSAGetLastError () returned 10057
	[0227.285] closesocket (s=0x2a0) returned 0
	[0227.285] getsockopt (in: s=0x29c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.285] recv (in: s=0x29c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.285] WSAGetLastError () returned 10057
	[0227.285] closesocket (s=0x29c) returned 0
	[0227.286] getsockopt (in: s=0x298, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.286] recv (in: s=0x298, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.286] WSAGetLastError () returned 10057
	[0227.286] closesocket (s=0x298) returned 0
	[0227.286] getsockopt (in: s=0x294, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.287] recv (in: s=0x294, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.287] WSAGetLastError () returned 10057
	[0227.287] closesocket (s=0x294) returned 0
	[0227.287] getsockopt (in: s=0x290, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.287] recv (in: s=0x290, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.287] WSAGetLastError () returned 10057
	[0227.287] closesocket (s=0x290) returned 0
	[0227.288] getsockopt (in: s=0x28c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.288] recv (in: s=0x28c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.288] WSAGetLastError () returned 10057
	[0227.288] closesocket (s=0x28c) returned 0
	[0227.288] getsockopt (in: s=0x288, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.289] recv (in: s=0x288, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.289] WSAGetLastError () returned 10057
	[0227.289] closesocket (s=0x288) returned 0
	[0227.289] getsockopt (in: s=0x270, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.289] recv (in: s=0x270, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.289] WSAGetLastError () returned 10057
	[0227.289] closesocket (s=0x270) returned 0
	[0227.290] getsockopt (in: s=0x24c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.290] recv (in: s=0x24c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.290] WSAGetLastError () returned 10057
	[0227.290] closesocket (s=0x24c) returned 0
	[0227.290] getsockopt (in: s=0x280, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.291] recv (in: s=0x280, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.291] WSAGetLastError () returned 10057
	[0227.291] closesocket (s=0x280) returned 0
	[0227.291] getsockopt (in: s=0x230, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.291] recv (in: s=0x230, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.291] WSAGetLastError () returned 10057
	[0227.291] closesocket (s=0x230) returned 0
	[0227.292] getsockopt (in: s=0x284, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.292] recv (in: s=0x284, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.292] WSAGetLastError () returned 10057
	[0227.292] closesocket (s=0x284) returned 0
	[0227.292] getsockopt (in: s=0x274, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.292] recv (in: s=0x274, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.293] WSAGetLastError () returned 10057
	[0227.293] closesocket (s=0x274) returned 0
	[0227.293] getsockopt (in: s=0x248, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.293] recv (in: s=0x248, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.293] WSAGetLastError () returned 10057
	[0227.293] closesocket (s=0x248) returned 0
	[0227.294] getsockopt (in: s=0x258, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.294] recv (in: s=0x258, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.294] WSAGetLastError () returned 10057
	[0227.294] closesocket (s=0x258) returned 0
	[0227.294] getsockopt (in: s=0x23c, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.294] recv (in: s=0x23c, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.294] WSAGetLastError () returned 10057
	[0227.294] closesocket (s=0x23c) returned 0
	[0227.295] getsockopt (in: s=0x234, level=65535, optname=4103, optval=0x263f7e8, optlen=0x263f7d4 | out: optval="", optlen=0x263f7d4) returned 0
	[0227.295] recv (in: s=0x234, buf=0x263f7f7, len=1, flags=2 | out: buf=0x263f7f7) returned -1
	[0227.295] WSAGetLastError () returned 10057
	[0227.295] closesocket (s=0x234) returned 0
	[0227.296] GetProcessHeap () returned 0x800000
	[0227.296] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3566d38 | out: hHeap=0x800000) returned 1
	[0227.296] GetProcessHeap () returned 0x800000
	[0227.296] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356adf8 | out: hHeap=0x800000) returned 1
	[0227.296] htonl (hostlong=0x100007f) returned 0x7f000001
	[0227.296] GetProcessHeap () returned 0x800000
	[0227.296] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34ca050 | out: hHeap=0x800000) returned 1
	[0227.296] WaitForSingleObject (hHandle=0xd8, dwMilliseconds=0xffffffff) returned 0x0
	[0227.296] Sleep (dwMilliseconds=0x2710) 
	[0239.253] GetProcessHeap () returned 0x800000
	[0239.253] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x34ca050
	[0239.253] GetProcessHeap () returned 0x800000
	[0239.253] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0239.253] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f83c | out: lphEnum=0x263f83c*=0x8e05b0) returned 0x0
	[0239.377] WNetEnumResourceW (in: hEnum=0x8e05b0, lpcCount=0x263f830, lpBuffer=0x34ca050, lpBufferSize=0x263f844 | out: lpcCount=0x263f830, lpBuffer=0x34ca050, lpBufferSize=0x263f844) returned 0x103
	[0239.377] WNetCloseEnum (hEnum=0x8e05b0) returned 0x0
	[0239.377] GetProcessHeap () returned 0x800000
	[0239.377] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34ca050 | out: hHeap=0x800000) returned 1
	[0239.377] GetProcessHeap () returned 0x800000
	[0239.377] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0239.377] GetProcessHeap () returned 0x800000
	[0239.377] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x34ca050
	[0239.377] GetProcessHeap () returned 0x800000
	[0239.377] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0239.377] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f824 | out: lphEnum=0x263f824*=0x8373a8) returned 0x0
	[0239.377] WNetEnumResourceW (in: hEnum=0x8373a8, lpcCount=0x263f818, lpBuffer=0x34ca050, lpBufferSize=0x263f82c | out: lpcCount=0x263f818, lpBuffer=0x34ca050, lpBufferSize=0x263f82c) returned 0x103
	[0239.377] WNetCloseEnum (hEnum=0x8373a8) returned 0x0
	[0239.377] GetProcessHeap () returned 0x800000
	[0239.377] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34ca050 | out: hHeap=0x800000) returned 1
	[0239.377] GetProcessHeap () returned 0x800000
	[0239.377] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0239.377] GetProcessHeap () returned 0x800000
	[0239.377] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x34ca050
	[0239.378] GetProcessHeap () returned 0x800000
	[0239.378] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0239.378] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f80c | out: lphEnum=0x263f80c*=0x8e05b0) returned 0x0
	[0253.392] WNetEnumResourceW (in: hEnum=0x8e05b0, lpcCount=0x263f800, lpBuffer=0x34ca050, lpBufferSize=0x263f814 | out: lpcCount=0x263f800, lpBuffer=0x34ca050, lpBufferSize=0x263f814) returned 0x0
	[0253.392] GetProcessHeap () returned 0x800000
	[0253.392] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x3502368
	[0253.392] GetProcessHeap () returned 0x800000
	[0253.392] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3532380
	[0253.393] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x34ca050, lphEnum=0x263f7c4 | out: lphEnum=0x263f7c4*=0x8e06b8) returned 0x0
	[0266.712] WNetEnumResourceW (in: hEnum=0x8e06b8, lpcCount=0x263f7b8, lpBuffer=0x3502368, lpBufferSize=0x263f7cc | out: lpcCount=0x263f7b8, lpBuffer=0x3502368, lpBufferSize=0x263f7cc) returned 0x0
	[0266.712] WNetEnumResourceW (in: hEnum=0x8e06b8, lpcCount=0x263f7b8, lpBuffer=0x3502368, lpBufferSize=0x263f7cc | out: lpcCount=0x263f7b8, lpBuffer=0x3502368, lpBufferSize=0x263f7cc) returned 0x103
	[0266.712] WNetCloseEnum (hEnum=0x8e06b8) returned 0x0
	[0266.712] GetProcessHeap () returned 0x800000
	[0266.712] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3502368 | out: hHeap=0x800000) returned 1
	[0266.712] GetProcessHeap () returned 0x800000
	[0266.712] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3532380 | out: hHeap=0x800000) returned 1
	[0266.712] WNetEnumResourceW (in: hEnum=0x8e05b0, lpcCount=0x263f800, lpBuffer=0x34ca050, lpBufferSize=0x263f814 | out: lpcCount=0x263f800, lpBuffer=0x34ca050, lpBufferSize=0x263f814) returned 0x103
	[0266.712] WNetCloseEnum (hEnum=0x8e05b0) returned 0x0
	[0266.712] GetProcessHeap () returned 0x800000
	[0266.713] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34ca050 | out: hHeap=0x800000) returned 1
	[0266.713] GetProcessHeap () returned 0x800000
	[0266.713] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0266.713] GetProcessHeap () returned 0x800000
	[0266.713] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x34ca050
	[0266.713] GetProcessHeap () returned 0x800000
	[0266.713] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0266.713] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f83c | out: lphEnum=0x263f83c*=0x837388) returned 0x0
	[0266.713] WNetEnumResourceW (in: hEnum=0x837388, lpcCount=0x263f830, lpBuffer=0x34ca050, lpBufferSize=0x263f844 | out: lpcCount=0x263f830, lpBuffer=0x34ca050, lpBufferSize=0x263f844) returned 0x103
	[0266.713] WNetCloseEnum (hEnum=0x837388) returned 0x0
	[0266.713] GetProcessHeap () returned 0x800000
	[0266.713] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34ca050 | out: hHeap=0x800000) returned 1
	[0266.713] GetProcessHeap () returned 0x800000
	[0266.714] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0266.714] GetProcessHeap () returned 0x800000
	[0266.714] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x34ca050
	[0266.714] GetProcessHeap () returned 0x800000
	[0266.714] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0266.714] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x263f824 | out: lphEnum=0x263f824*=0x34d1928) returned 0x0
	[0266.714] WNetEnumResourceW (in: hEnum=0x34d1928, lpcCount=0x263f818, lpBuffer=0x34ca050, lpBufferSize=0x263f82c | out: lpcCount=0x263f818, lpBuffer=0x34ca050, lpBufferSize=0x263f82c) returned 0x0
	[0266.714] GetProcessHeap () returned 0x800000
	[0266.714] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x3502368
	[0266.714] GetProcessHeap () returned 0x800000
	[0266.714] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3532380
	[0266.714] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x34ca090, lphEnum=0x263f7dc | out: lphEnum=0x263f7dc*=0x0) returned 0x4c6
	[0266.716] GetProcessHeap () returned 0x800000
	[0266.716] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3502368 | out: hHeap=0x800000) returned 1
	[0266.716] GetProcessHeap () returned 0x800000
	[0266.716] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3532380 | out: hHeap=0x800000) returned 1
	[0266.716] GetProcessHeap () returned 0x800000
	[0266.716] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4000) returned 0x3502368
	[0266.716] GetProcessHeap () returned 0x800000
	[0266.716] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3532380
	[0266.716] WNetOpenEnumW (dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x34ca070, lphEnum=0x263f7dc) 

Thread:
	id = 49
	os_tid = 0x6d8

	[0132.524] GetLogicalDrives () returned 0x4
	[0132.524] GetProcessHeap () returned 0x800000
	[0132.524] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d598
	[0132.524] GetProcessHeap () returned 0x800000
	[0132.524] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x28) returned 0x8371c8
	[0132.524] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0xe4
	[0132.524] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0xe8
	[0132.524] GetProcessHeap () returned 0x800000
	[0132.524] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81ce18
	[0132.524] GetProcessHeap () returned 0x800000
	[0132.524] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81ce40
	[0132.524] GetProcessHeap () returned 0x800000
	[0132.524] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81ce68
	[0132.524] GetProcessHeap () returned 0x800000
	[0132.524] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0132.524] GetProcessHeap () returned 0x800000
	[0132.524] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0132.524] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81ce40, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.524] GetProcessHeap () returned 0x800000
	[0132.524] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ce68 | out: hHeap=0x800000) returned 1
	[0132.524] GetProcessHeap () returned 0x800000
	[0132.524] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ce18 | out: hHeap=0x800000) returned 1
	[0132.524] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x278fcc4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x278fcc4*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.524] GetProcessHeap () returned 0x800000
	[0132.524] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ce40 | out: hHeap=0x800000) returned 1
	[0132.525] GetProcessHeap () returned 0x800000
	[0132.525] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x811698
	[0132.525] GetProcessHeap () returned 0x800000
	[0132.525] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x8116b0
	[0132.525] GetProcessHeap () returned 0x800000
	[0132.525] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x8116c8
	[0132.525] GetProcessHeap () returned 0x800000
	[0132.525] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0132.525] GetProcessHeap () returned 0x800000
	[0132.525] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x8116e0
	[0132.525] htonl (hostlong=0x9c354b42) returned 0x424b359c
	[0132.525] QueryPerformanceCounter (in: lpPerformanceCount=0x278fbc0 | out: lpPerformanceCount=0x278fbc0*=9821048176) returned 1
	[0132.526] GetTickCount () returned 0x1137945
	[0132.526] GetCurrentProcessId () returned 0x30c
	[0132.526] GetCurrentThreadId () returned 0x6d8
	[0132.526] GetLocalTime (in: lpSystemTime=0x278fba8 | out: lpSystemTime=0x278fba8*(wYear=0x7e3, wMonth=0x9, wDayOfWeek=0x2, wDay=0x18, wHour=0xe, wMinute=0x36, wSecond=0x2e, wMilliseconds=0x7b)) 
	[0132.526] SystemTimeToFileTime (in: lpSystemTime=0x278fba8, lpFileTime=0x278fbb8 | out: lpFileTime=0x278fbb8) returned 1
	[0132.526] QueryPerformanceCounter (in: lpPerformanceCount=0x278fbc0 | out: lpPerformanceCount=0x278fbc0*=9821070684) returned 1
	[0132.526] GetProcessHeap () returned 0x800000
	[0132.526] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x28) returned 0x8371f8
	[0132.526] GetProcessHeap () returned 0x800000
	[0132.526] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x8116f8
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4) returned 0x81ee70
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x14) returned 0x837228
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x811710
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x80) returned 0x837248
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x811728
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x82) returned 0x8372d0
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x811740
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4) returned 0x837360
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x837388
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x80) returned 0x837770
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x8373a0
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x2) returned 0x8377f8
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4) returned 0x837808
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x8373b8
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x80) returned 0x837818
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x8373d0
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4) returned 0x8378b8
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x8377f8, Size=0x82) returned 0x837ca0
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x8378b8, Size=0x100) returned 0x837d30
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x8373e8
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x82) returned 0x837e38
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x837400
	[0132.527] GetProcessHeap () returned 0x800000
	[0132.528] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x82) returned 0x837ec8
	[0132.528] GetProcessHeap () returned 0x800000
	[0132.528] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x837ca0, Size=0x104) returned 0x837f58
	[0132.528] GetProcessHeap () returned 0x800000
	[0132.528] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x837d30, Size=0x200) returned 0x838068
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837808 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x838068 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8373d0 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837770 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837388 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837818 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8373b8 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837f58 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8373a0 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837e38 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8373e8 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837ec8 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837400 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ee70 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8116f8 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8372d0 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811728 | out: hHeap=0x800000) returned 1
	[0132.529] GetProcessHeap () returned 0x800000
	[0132.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837248 | out: hHeap=0x800000) returned 1
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811710 | out: hHeap=0x800000) returned 1
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837360 | out: hHeap=0x800000) returned 1
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811740 | out: hHeap=0x800000) returned 1
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8371f8 | out: hHeap=0x800000) returned 1
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837228 | out: hHeap=0x800000) returned 1
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0xa4) returned 0x837770
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8116b0 | out: hHeap=0x800000) returned 1
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8116c8 | out: hHeap=0x800000) returned 1
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8116e0 | out: hHeap=0x800000) returned 1
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811698 | out: hHeap=0x800000) returned 1
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x14) returned 0x837820
	[0132.530] GetProcessHeap () returned 0x800000
	[0132.530] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0xe) returned 0x811698
	[0132.530] ResetEvent (hEvent=0xe8) returned 1
	[0132.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x404a4c, lpParameter=0x837820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec
	[0132.532] CloseHandle (hObject=0xec) returned 1
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x8116e0
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x8116c8
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x8116b0
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x811740
	[0132.532] htonl (hostlong=0x9c354b42) returned 0x424b359c
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x28) returned 0x8371f8
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x811710
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4) returned 0x8378b8
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x14) returned 0x837388
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x811728
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x80) returned 0x837228
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x8116f8
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x82) returned 0x8372b0
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x837ec8
	[0132.532] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4) returned 0x8378c8
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x837ee0
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x80) returned 0x8382b0
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x837ef8
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x2) returned 0x8378d8
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4) returned 0x8378e8
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x837f10
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x80) returned 0x838338
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x837f28
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x4) returned 0x8378f8
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x8378d8, Size=0x82) returned 0x8383c0
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x8378f8, Size=0x100) returned 0x838450
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x837f40
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x82) returned 0x838558
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10) returned 0x837f58
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x82) returned 0x8385e8
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x8383c0, Size=0x104) returned 0x838678
	[0132.533] GetProcessHeap () returned 0x800000
	[0132.533] RtlReAllocateHeap (Heap=0x800000, Flags=0x0, Ptr=0x838450, Size=0x200) returned 0x838788
	[0132.534] GetProcessHeap () returned 0x800000
	[0132.534] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8378e8 | out: hHeap=0x800000) returned 1
	[0132.534] GetProcessHeap () returned 0x800000
	[0132.534] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x838788 | out: hHeap=0x800000) returned 1
	[0132.534] GetProcessHeap () returned 0x800000
	[0132.534] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837f28 | out: hHeap=0x800000) returned 1
	[0132.534] GetProcessHeap () returned 0x800000
	[0132.534] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8382b0 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837ee0 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x838338 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837f10 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x838678 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837ef8 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x838558 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837f40 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8385e8 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837f58 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8378b8 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811710 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8372b0 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8116f8 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837228 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811728 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8378c8 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837ec8 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8371f8 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837388 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0xa4) returned 0x8371f8
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8116c8 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8116b0 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0132.535] GetProcessHeap () returned 0x800000
	[0132.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x811740 | out: hHeap=0x800000) returned 1
	[0132.536] GetProcessHeap () returned 0x800000
	[0132.536] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8116e0 | out: hHeap=0x800000) returned 1
	[0132.536] GetProcessHeap () returned 0x800000
	[0132.536] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x14) returned 0x837388
	[0132.536] GetProcessHeap () returned 0x800000
	[0132.536] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0xe) returned 0x8116e0
	[0132.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x404a4c, lpParameter=0x837388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec
	[0132.536] CloseHandle (hObject=0xec) returned 1
	[0132.537] WaitForSingleObject (hHandle=0xe8, dwMilliseconds=0xffffffff) 

Thread:
	id = 50
	os_tid = 0x6cc

	[0132.531] GetLogicalDrives () returned 0x4
	[0132.531] GetProcessHeap () returned 0x800000
	[0132.531] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x20) returned 0x81ce18
	[0132.531] GetProcessHeap () returned 0x800000
	[0132.531] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x8, Size=0x1e) returned 0x81ce68
	[0132.531] GetProcessHeap () returned 0x800000
	[0132.531] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x1e) returned 0x81ce90
	[0132.531] GetProcessHeap () returned 0x800000
	[0132.531] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x90) returned 0x81f8c8
	[0132.531] GetProcessHeap () returned 0x800000
	[0132.531] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81f8c8 | out: hHeap=0x800000) returned 1
	[0132.531] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x81ce68, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.531] GetProcessHeap () returned 0x800000
	[0132.531] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ce90 | out: hHeap=0x800000) returned 1
	[0132.531] GetProcessHeap () returned 0x800000
	[0132.531] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ce18 | out: hHeap=0x800000) returned 1
	[0132.531] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x296f75c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x296f75c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.531] GetProcessHeap () returned 0x800000
	[0132.531] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x81ce68 | out: hHeap=0x800000) returned 1
	[0132.531] GetProcessHeap () returned 0x800000
	[0132.531] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x40) returned 0x81d5e0
	[0132.531] GetProcessHeap () returned 0x800000
	[0132.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x28) returned 0x837860
	[0132.532] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0xf0
	[0132.532] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0xf4
	[0132.532] GetLogicalDrives () returned 0x4
	[0132.532] Sleep (dwMilliseconds=0x3e8) 
	[0133.652] GetLogicalDrives () returned 0x4
	[0133.652] Sleep (dwMilliseconds=0x3e8) 
	[0134.714] GetLogicalDrives () returned 0x4
	[0134.714] Sleep (dwMilliseconds=0x3e8) 
	[0135.857] GetLogicalDrives () returned 0x4
	[0135.857] Sleep (dwMilliseconds=0x3e8) 
	[0137.023] GetLogicalDrives () returned 0x4
	[0137.023] Sleep (dwMilliseconds=0x3e8) 
	[0138.144] GetLogicalDrives () returned 0x4
	[0138.144] Sleep (dwMilliseconds=0x3e8) 
	[0139.538] GetLogicalDrives () returned 0x4
	[0139.538] Sleep (dwMilliseconds=0x3e8) 
	[0140.627] GetLogicalDrives () returned 0x4
	[0140.627] Sleep (dwMilliseconds=0x3e8) 
	[0141.717] GetLogicalDrives () returned 0x4
	[0141.717] Sleep (dwMilliseconds=0x3e8) 
	[0143.654] GetLogicalDrives () returned 0x4
	[0143.654] Sleep (dwMilliseconds=0x3e8) 
	[0144.759] GetLogicalDrives () returned 0x4
	[0144.759] Sleep (dwMilliseconds=0x3e8) 
	[0145.825] GetLogicalDrives () returned 0x4
	[0145.825] Sleep (dwMilliseconds=0x3e8) 
	[0146.943] GetLogicalDrives () returned 0x4
	[0146.943] Sleep (dwMilliseconds=0x3e8) 
	[0148.096] GetLogicalDrives () returned 0x4
	[0148.096] Sleep (dwMilliseconds=0x3e8) 
	[0149.237] GetLogicalDrives () returned 0x4
	[0149.237] Sleep (dwMilliseconds=0x3e8) 
	[0150.314] GetLogicalDrives () returned 0x4
	[0150.314] Sleep (dwMilliseconds=0x3e8) 
	[0151.407] GetLogicalDrives () returned 0x4
	[0151.407] Sleep (dwMilliseconds=0x3e8) 
	[0152.545] GetLogicalDrives () returned 0x4
	[0152.545] Sleep (dwMilliseconds=0x3e8) 
	[0153.668] GetLogicalDrives () returned 0x4
	[0153.668] Sleep (dwMilliseconds=0x3e8) 
	[0154.750] GetLogicalDrives () returned 0x4
	[0154.750] Sleep (dwMilliseconds=0x3e8) 
	[0155.868] GetLogicalDrives () returned 0x4
	[0155.868] Sleep (dwMilliseconds=0x3e8) 
	[0156.983] GetLogicalDrives () returned 0x4
	[0156.983] Sleep (dwMilliseconds=0x3e8) 
	[0158.038] GetLogicalDrives () returned 0x4
	[0158.038] Sleep (dwMilliseconds=0x3e8) 
	[0159.167] GetLogicalDrives () returned 0x4
	[0159.167] Sleep (dwMilliseconds=0x3e8) 
	[0160.425] GetLogicalDrives () returned 0x4
	[0160.425] Sleep (dwMilliseconds=0x3e8) 
	[0161.529] GetLogicalDrives () returned 0x4
	[0161.529] Sleep (dwMilliseconds=0x3e8) 
	[0162.642] GetLogicalDrives () returned 0x4
	[0162.642] Sleep (dwMilliseconds=0x3e8) 
	[0163.810] GetLogicalDrives () returned 0x4
	[0163.810] Sleep (dwMilliseconds=0x3e8) 
	[0165.040] GetLogicalDrives () returned 0x4
	[0165.040] Sleep (dwMilliseconds=0x3e8) 
	[0166.240] GetLogicalDrives () returned 0x4
	[0166.240] Sleep (dwMilliseconds=0x3e8) 
	[0167.348] GetLogicalDrives () returned 0x4
	[0167.348] Sleep (dwMilliseconds=0x3e8) 
	[0168.501] GetLogicalDrives () returned 0x4
	[0168.501] Sleep (dwMilliseconds=0x3e8) 
	[0169.616] GetLogicalDrives () returned 0x4
	[0169.616] Sleep (dwMilliseconds=0x3e8) 
	[0170.718] GetLogicalDrives () returned 0x4
	[0170.718] Sleep (dwMilliseconds=0x3e8) 
	[0171.890] GetLogicalDrives () returned 0x4
	[0171.890] Sleep (dwMilliseconds=0x3e8) 
	[0172.964] GetLogicalDrives () returned 0x4
	[0172.964] Sleep (dwMilliseconds=0x3e8) 
	[0174.323] GetLogicalDrives () returned 0x4
	[0174.323] Sleep (dwMilliseconds=0x3e8) 
	[0175.444] GetLogicalDrives () returned 0x4
	[0175.445] Sleep (dwMilliseconds=0x3e8) 
	[0176.617] GetLogicalDrives () returned 0x4
	[0176.617] Sleep (dwMilliseconds=0x3e8) 
	[0178.767] GetLogicalDrives () returned 0x4
	[0178.767] Sleep (dwMilliseconds=0x3e8) 
	[0180.031] GetLogicalDrives () returned 0x4
	[0180.031] Sleep (dwMilliseconds=0x3e8) 
	[0181.282] GetLogicalDrives () returned 0x4
	[0181.282] Sleep (dwMilliseconds=0x3e8) 
	[0182.415] GetLogicalDrives () returned 0x4
	[0182.416] Sleep (dwMilliseconds=0x3e8) 
	[0183.557] GetLogicalDrives () returned 0x4
	[0183.557] Sleep (dwMilliseconds=0x3e8) 
	[0184.775] GetLogicalDrives () returned 0x4
	[0184.775] Sleep (dwMilliseconds=0x3e8) 
	[0185.897] GetLogicalDrives () returned 0x4
	[0185.897] Sleep (dwMilliseconds=0x3e8) 
	[0187.014] GetLogicalDrives () returned 0x4
	[0187.017] Sleep (dwMilliseconds=0x3e8) 
	[0188.139] GetLogicalDrives () returned 0x4
	[0188.139] Sleep (dwMilliseconds=0x3e8) 
	[0189.266] GetLogicalDrives () returned 0x4
	[0189.266] Sleep (dwMilliseconds=0x3e8) 
	[0190.420] GetLogicalDrives () returned 0x4
	[0190.420] Sleep (dwMilliseconds=0x3e8) 
	[0191.509] GetLogicalDrives () returned 0x4
	[0191.509] Sleep (dwMilliseconds=0x3e8) 
	[0192.739] GetLogicalDrives () returned 0x4
	[0192.739] Sleep (dwMilliseconds=0x3e8) 
	[0193.965] GetLogicalDrives () returned 0x4
	[0193.965] Sleep (dwMilliseconds=0x3e8) 
	[0195.151] GetLogicalDrives () returned 0x4
	[0195.151] Sleep (dwMilliseconds=0x3e8) 
	[0196.289] GetLogicalDrives () returned 0x4
	[0196.289] Sleep (dwMilliseconds=0x3e8) 
	[0197.472] GetLogicalDrives () returned 0x4
	[0197.472] Sleep (dwMilliseconds=0x3e8) 
	[0198.640] GetLogicalDrives () returned 0x4
	[0198.640] Sleep (dwMilliseconds=0x3e8) 
	[0199.729] GetLogicalDrives () returned 0x4
	[0199.730] Sleep (dwMilliseconds=0x3e8) 
	[0200.780] GetLogicalDrives () returned 0x4
	[0200.780] Sleep (dwMilliseconds=0x3e8) 
	[0201.863] GetLogicalDrives () returned 0x4
	[0201.863] Sleep (dwMilliseconds=0x3e8) 
	[0202.947] GetLogicalDrives () returned 0x4
	[0202.947] Sleep (dwMilliseconds=0x3e8) 
	[0204.103] GetLogicalDrives () returned 0x4
	[0204.103] Sleep (dwMilliseconds=0x3e8) 
	[0205.243] GetLogicalDrives () returned 0x4
	[0205.243] Sleep (dwMilliseconds=0x3e8) 
	[0206.317] GetLogicalDrives () returned 0x4
	[0206.317] Sleep (dwMilliseconds=0x3e8) 
	[0207.477] GetLogicalDrives () returned 0x4
	[0207.477] Sleep (dwMilliseconds=0x3e8) 
	[0208.548] GetLogicalDrives () returned 0x4
	[0208.548] Sleep (dwMilliseconds=0x3e8) 
	[0209.718] GetLogicalDrives () returned 0x4
	[0209.718] Sleep (dwMilliseconds=0x3e8) 
	[0211.267] GetLogicalDrives () returned 0x4
	[0211.267] Sleep (dwMilliseconds=0x3e8) 
	[0212.354] GetLogicalDrives () returned 0x4
	[0212.354] Sleep (dwMilliseconds=0x3e8) 
	[0213.431] GetLogicalDrives () returned 0x4
	[0213.431] Sleep (dwMilliseconds=0x3e8) 
	[0214.507] GetLogicalDrives () returned 0x4
	[0214.507] Sleep (dwMilliseconds=0x3e8) 
	[0215.583] GetLogicalDrives () returned 0x4
	[0215.583] Sleep (dwMilliseconds=0x3e8) 
	[0216.645] GetLogicalDrives () returned 0x4
	[0216.645] Sleep (dwMilliseconds=0x3e8) 
	[0217.721] GetLogicalDrives () returned 0x4
	[0217.721] Sleep (dwMilliseconds=0x3e8) 
	[0218.781] GetLogicalDrives () returned 0x4
	[0218.782] Sleep (dwMilliseconds=0x3e8) 
	[0219.842] GetLogicalDrives () returned 0x4
	[0219.842] Sleep (dwMilliseconds=0x3e8) 
	[0221.168] GetLogicalDrives () returned 0x4
	[0221.168] Sleep (dwMilliseconds=0x3e8) 
	[0222.285] GetLogicalDrives () returned 0x4
	[0222.285] Sleep (dwMilliseconds=0x3e8) 
	[0223.347] GetLogicalDrives () returned 0x4
	[0223.347] Sleep (dwMilliseconds=0x3e8) 
	[0224.956] GetLogicalDrives () returned 0x4
	[0224.956] Sleep (dwMilliseconds=0x3e8) 
	[0227.296] GetLogicalDrives () returned 0x4
	[0227.296] Sleep (dwMilliseconds=0x3e8) 
	[0229.271] GetLogicalDrives () returned 0x4
	[0229.271] Sleep (dwMilliseconds=0x3e8) 
	[0230.408] GetLogicalDrives () returned 0x4
	[0230.408] Sleep (dwMilliseconds=0x3e8) 
	[0231.627] GetLogicalDrives () returned 0x4
	[0231.627] Sleep (dwMilliseconds=0x3e8) 
	[0233.072] GetLogicalDrives () returned 0x4
	[0233.072] Sleep (dwMilliseconds=0x3e8) 
	[0234.108] GetLogicalDrives () returned 0x4
	[0234.108] Sleep (dwMilliseconds=0x3e8) 
	[0235.346] GetLogicalDrives () returned 0x4
	[0235.346] Sleep (dwMilliseconds=0x3e8) 
	[0236.547] GetLogicalDrives () returned 0x4
	[0236.547] Sleep (dwMilliseconds=0x3e8) 
	[0238.094] GetLogicalDrives () returned 0x4
	[0238.094] Sleep (dwMilliseconds=0x3e8) 
	[0239.252] GetLogicalDrives () returned 0x4
	[0239.252] Sleep (dwMilliseconds=0x3e8) 
	[0240.407] GetLogicalDrives () returned 0x4
	[0240.407] Sleep (dwMilliseconds=0x3e8) 
	[0241.511] GetLogicalDrives () returned 0x4
	[0241.511] Sleep (dwMilliseconds=0x3e8) 
	[0242.581] GetLogicalDrives () returned 0x4
	[0242.581] Sleep (dwMilliseconds=0x3e8) 
	[0243.917] GetLogicalDrives () returned 0x4
	[0243.917] Sleep (dwMilliseconds=0x3e8) 
	[0245.651] GetLogicalDrives () returned 0x4
	[0245.651] Sleep (dwMilliseconds=0x3e8) 
	[0246.683] GetLogicalDrives () returned 0x4
	[0246.684] Sleep (dwMilliseconds=0x3e8) 
	[0247.706] GetLogicalDrives () returned 0x4
	[0247.706] Sleep (dwMilliseconds=0x3e8) 
	[0248.940] GetLogicalDrives () returned 0x4
	[0248.940] Sleep (dwMilliseconds=0x3e8) 
	[0249.980] GetLogicalDrives () returned 0x4
	[0249.980] Sleep (dwMilliseconds=0x3e8) 
	[0250.989] GetLogicalDrives () returned 0x4
	[0251.002] Sleep (dwMilliseconds=0x3e8) 
	[0252.054] GetLogicalDrives () returned 0x4
	[0252.054] Sleep (dwMilliseconds=0x3e8) 
	[0253.403] GetLogicalDrives () returned 0x4
	[0253.403] Sleep (dwMilliseconds=0x3e8) 
	[0254.636] GetLogicalDrives () returned 0x4
	[0254.636] Sleep (dwMilliseconds=0x3e8) 
	[0255.669] GetLogicalDrives () returned 0x4
	[0255.670] Sleep (dwMilliseconds=0x3e8) 
	[0256.707] GetLogicalDrives () returned 0x4
	[0256.708] Sleep (dwMilliseconds=0x3e8) 
	[0257.799] GetLogicalDrives () returned 0x4
	[0257.800] Sleep (dwMilliseconds=0x3e8) 
	[0258.976] GetLogicalDrives () returned 0x4
	[0258.976] Sleep (dwMilliseconds=0x3e8) 
	[0260.062] GetLogicalDrives () returned 0x4
	[0260.062] Sleep (dwMilliseconds=0x3e8) 
	[0261.188] GetLogicalDrives () returned 0x4
	[0261.188] Sleep (dwMilliseconds=0x3e8) 
	[0262.369] GetLogicalDrives () returned 0x4
	[0262.369] Sleep (dwMilliseconds=0x3e8) 
	[0263.457] GetLogicalDrives () returned 0x4
	[0263.457] Sleep (dwMilliseconds=0x3e8) 
	[0264.586] GetLogicalDrives () returned 0x4
	[0264.587] Sleep (dwMilliseconds=0x3e8) 
	[0265.937] GetLogicalDrives () returned 0x4
	[0265.937] Sleep (dwMilliseconds=0x3e8) 

Thread:
	id = 51
	os_tid = 0x700

	[0132.755] GetProcessHeap () returned 0x800000
	[0132.755] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x38) returned 0x8372f8
	[0132.755] GetProcessHeap () returned 0x800000
	[0132.755] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x18) returned 0x8373c8
	[0132.755] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0xfc
	[0132.755] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x100
	[0132.755] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x104
	[0132.755] GetProcessHeap () returned 0x800000
	[0132.755] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8384c0
	[0132.755] GetProcessHeap () returned 0x800000
	[0132.755] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x50) returned 0x8484c8
	[0132.755] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0132.756] GetProcAddress (hModule=0x76300000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7632d650
	[0132.756] Wow64DisableWow64FsRedirection (in: OldValue=0x2f2ff5c | out: OldValue=0x2f2ff5c*=0x0) returned 1
	[0132.756] GetProcessHeap () returned 0x800000
	[0132.756] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0132.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x4048ba, lpParameter=0x2f2ff60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108
	[0132.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x4048ba, lpParameter=0x2f2ff60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c
	[0132.759] GetProcessHeap () returned 0x800000
	[0132.759] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x858720
	[0132.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2f2fcd0 | out: lpFindFileData=0x2f2fcd0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x868728
	[0132.760] GetProcessHeap () returned 0x800000
	[0132.760] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x868768
	[0132.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x878770
	[0132.761] FindNextFileW (in: hFindFile=0x878770, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.761] FindNextFileW (in: hFindFile=0x878770, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1b689a40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x1b689a40, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0132.761] GetProcessHeap () returned 0x800000
	[0132.761] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8797b8
	[0132.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1b689a40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x1b689a40, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8897c0
	[0132.762] FindNextFileW (in: hFindFile=0x8897c0, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1b689a40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x1b689a40, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.762] FindNextFileW (in: hFindFile=0x8897c0, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1b689a40, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x1b689a40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x1b689a40, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0132.762] SetEvent (hEvent=0x100) returned 1
	[0132.762] ResetEvent (hEvent=0x104) returned 1
	[0132.762] FindNextFileW (in: hFindFile=0x8897c0, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb2a0e30, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xfb2a0e30, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfb3d1930, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="DESKTO~1.ADA")) returned 1
	[0132.762] FindNextFileW (in: hFindFile=0x8897c0, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb2a0e30, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xfb2a0e30, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfb3d1930, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="DESKTO~1.ADA")) returned 0
	[0132.762] FindClose (in: hFindFile=0x8897c0 | out: hFindFile=0x8897c0) returned 1
	[0132.762] GetProcessHeap () returned 0x800000
	[0132.762] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8797b8 | out: hHeap=0x800000) returned 1
	[0132.762] FindNextFileW (in: hFindFile=0x878770, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1b689a40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x1b689a40, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0132.762] FindClose (in: hFindFile=0x878770 | out: hFindFile=0x878770) returned 1
	[0132.762] GetProcessHeap () returned 0x800000
	[0132.762] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x868768 | out: hHeap=0x800000) returned 1
	[0132.762] FindNextFileW (in: hFindFile=0x868728, lpFindFileData=0x2f2fcd0 | out: lpFindFileData=0x2f2fcd0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xfb3393b0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfb3393b0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0132.762] GetProcessHeap () returned 0x800000
	[0132.762] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0132.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xfb3393b0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfb3393b0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x879778
	[0132.763] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xfb3393b0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfb3393b0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.763] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xc58a540, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc58a540, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0132.763] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc21e5a0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0132.763] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0132.763] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0132.763] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb3393b0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xfb3393b0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfbaa9870, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x10102, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="BOOTST~1.ADA")) returned 1
	[0132.763] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0132.763] GetProcessHeap () returned 0x800000
	[0132.763] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc8a0
	[0132.769] FindNextFileW (in: hFindFile=0x8bc8a0, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.771] FindNextFileW (in: hFindFile=0x8bc8a0, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.772] FindNextFileW (in: hFindFile=0x8bc8a0, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.774] FindClose (in: hFindFile=0x8bc8a0 | out: hFindFile=0x8bc8a0) returned 1
	[0132.775] GetProcessHeap () returned 0x800000
	[0132.775] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.775] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0132.782] GetProcessHeap () returned 0x800000
	[0132.782] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.786] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.788] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.791] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.798] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.800] GetProcessHeap () returned 0x800000
	[0132.800] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.800] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0132.800] GetProcessHeap () returned 0x800000
	[0132.800] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.800] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.801] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.801] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.801] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.801] GetProcessHeap () returned 0x800000
	[0132.801] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.801] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0132.801] GetProcessHeap () returned 0x800000
	[0132.801] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.801] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.801] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.801] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.801] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.801] GetProcessHeap () returned 0x800000
	[0132.801] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.801] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0132.801] GetProcessHeap () returned 0x800000
	[0132.801] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.801] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.801] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.802] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0132.802] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0132.802] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.802] GetProcessHeap () returned 0x800000
	[0132.802] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.802] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0132.802] GetProcessHeap () returned 0x800000
	[0132.802] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.802] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.802] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.802] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.802] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.802] GetProcessHeap () returned 0x800000
	[0132.802] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.802] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0132.802] GetProcessHeap () returned 0x800000
	[0132.802] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.802] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.803] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.803] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.803] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.803] GetProcessHeap () returned 0x800000
	[0132.803] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.803] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0132.803] GetProcessHeap () returned 0x800000
	[0132.803] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.803] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.803] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0132.803] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0132.803] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0132.803] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0132.803] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0132.803] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0
	[0132.804] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.804] GetProcessHeap () returned 0x800000
	[0132.804] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.804] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0132.804] GetProcessHeap () returned 0x800000
	[0132.804] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.804] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.804] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.804] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.804] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.804] GetProcessHeap () returned 0x800000
	[0132.804] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.804] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0132.804] GetProcessHeap () returned 0x800000
	[0132.804] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.804] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.804] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.804] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.804] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.805] GetProcessHeap () returned 0x800000
	[0132.805] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.805] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0132.805] GetProcessHeap () returned 0x800000
	[0132.805] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.805] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.805] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.805] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.805] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.805] GetProcessHeap () returned 0x800000
	[0132.805] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.805] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0132.805] GetProcessHeap () returned 0x800000
	[0132.805] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.805] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.805] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.805] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.805] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.805] GetProcessHeap () returned 0x800000
	[0132.805] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.806] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0132.806] GetProcessHeap () returned 0x800000
	[0132.806] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.806] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.806] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.806] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.806] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.806] GetProcessHeap () returned 0x800000
	[0132.806] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.806] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0132.806] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0132.806] GetProcessHeap () returned 0x800000
	[0132.806] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.806] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.806] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.806] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.806] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.807] GetProcessHeap () returned 0x800000
	[0132.807] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.807] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0132.807] GetProcessHeap () returned 0x800000
	[0132.807] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.807] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.807] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.807] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.807] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.807] GetProcessHeap () returned 0x800000
	[0132.807] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.807] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0132.807] GetProcessHeap () returned 0x800000
	[0132.807] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.807] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.807] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.807] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.807] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.807] GetProcessHeap () returned 0x800000
	[0132.807] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.807] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0132.808] GetProcessHeap () returned 0x800000
	[0132.808] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.808] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.808] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.808] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.808] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.808] GetProcessHeap () returned 0x800000
	[0132.808] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.808] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0132.808] GetProcessHeap () returned 0x800000
	[0132.808] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.808] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.808] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.808] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.808] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.808] GetProcessHeap () returned 0x800000
	[0132.808] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.808] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0132.809] GetProcessHeap () returned 0x800000
	[0132.809] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.809] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.809] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.809] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.809] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.809] GetProcessHeap () returned 0x800000
	[0132.809] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.809] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0132.809] GetProcessHeap () returned 0x800000
	[0132.809] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.809] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.809] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.809] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.809] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.809] GetProcessHeap () returned 0x800000
	[0132.809] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.809] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0132.809] GetProcessHeap () returned 0x800000
	[0132.809] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.810] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.810] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.810] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.810] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.810] GetProcessHeap () returned 0x800000
	[0132.810] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.810] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0132.810] GetProcessHeap () returned 0x800000
	[0132.810] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.810] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.810] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.810] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.810] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.810] GetProcessHeap () returned 0x800000
	[0132.811] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.811] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0132.811] GetProcessHeap () returned 0x800000
	[0132.811] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.811] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.811] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.811] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.811] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.811] GetProcessHeap () returned 0x800000
	[0132.811] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.811] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0132.811] GetProcessHeap () returned 0x800000
	[0132.811] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.811] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.811] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.811] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.811] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.811] GetProcessHeap () returned 0x800000
	[0132.811] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.811] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0132.812] FindClose (in: hFindFile=0x879778 | out: hFindFile=0x879778) returned 1
	[0132.812] GetProcessHeap () returned 0x800000
	[0132.812] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0132.812] FindNextFileW (in: hFindFile=0x868728, lpFindFileData=0x2f2fcd0 | out: lpFindFileData=0x2f2fcd0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x1, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0132.812] FindNextFileW (in: hFindFile=0x868728, lpFindFileData=0x2f2fcd0 | out: lpFindFileData=0x2f2fcd0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xfb443d50, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xfb443d50, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfb443d50, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x2102, dwReserved0=0x1, dwReserved1=0x0, cFileName="BOOTSECT.BAK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="BOOTSE~1.ADA")) returned 1
	[0132.812] FindNextFileW (in: hFindFile=0x868728, lpFindFileData=0x2f2fcd0 | out: lpFindFileData=0x2f2fcd0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
	[0132.812] GetProcessHeap () returned 0x800000
	[0132.812] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0132.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Config.Msi\\*", lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="䗺@")) returned 0xffffffff
	[0132.813] GetProcessHeap () returned 0x800000
	[0132.813] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0132.813] FindNextFileW (in: hFindFile=0x868728, lpFindFileData=0x2f2fcd0 | out: lpFindFileData=0x2f2fcd0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0132.813] FindNextFileW (in: hFindFile=0x868728, lpFindFileData=0x2f2fcd0 | out: lpFindFileData=0x2f2fcd0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x14ad36c0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0132.813] FindNextFileW (in: hFindFile=0x868728, lpFindFileData=0x2f2fcd0 | out: lpFindFileData=0x2f2fcd0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
	[0132.813] GetProcessHeap () returned 0x800000
	[0132.813] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0132.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\*", lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="䗺@")) returned 0xffffffff
	[0132.813] GetProcessHeap () returned 0x800000
	[0132.813] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0132.813] FindNextFileW (in: hFindFile=0x868728, lpFindFileData=0x2f2fcd0 | out: lpFindFileData=0x2f2fcd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x14af9820, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0132.813] FindNextFileW (in: hFindFile=0x868728, lpFindFileData=0x2f2fcd0 | out: lpFindFileData=0x2f2fcd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0132.813] GetProcessHeap () returned 0x800000
	[0132.814] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0132.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="䗺@")) returned 0xffffffff
	[0132.814] GetProcessHeap () returned 0x800000
	[0132.814] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0132.814] FindNextFileW (in: hFindFile=0x868728, lpFindFileData=0x2f2fcd0 | out: lpFindFileData=0x2f2fcd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec4df2a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec4df2a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0132.814] GetProcessHeap () returned 0x800000
	[0132.814] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0132.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec4df2a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec4df2a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x879778
	[0132.814] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec4df2a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec4df2a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.814] FindNextFileW (in: hFindFile=0x879778, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0132.814] GetProcessHeap () returned 0x800000
	[0132.814] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.814] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.814] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1
	[0132.814] GetProcessHeap () returned 0x800000
	[0132.814] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0132.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34c0050
	[0132.815] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.815] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1
	[0132.815] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0
	[0132.815] FindClose (in: hFindFile=0x34c0050 | out: hFindFile=0x34c0050) returned 1
	[0132.815] GetProcessHeap () returned 0x800000
	[0132.815] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0132.815] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0132.815] GetProcessHeap () returned 0x800000
	[0132.815] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0132.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34c0050
	[0132.816] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.816] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1
	[0132.816] GetProcessHeap () returned 0x800000
	[0132.816] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0132.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d10a0
	[0132.816] FindNextFileW (in: hFindFile=0x34d10a0, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.816] FindNextFileW (in: hFindFile=0x34d10a0, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0132.816] FindNextFileW (in: hFindFile=0x34d10a0, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0132.816] FindNextFileW (in: hFindFile=0x34d10a0, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1
	[0132.816] FindNextFileW (in: hFindFile=0x34d10a0, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0
	[0132.816] FindClose (in: hFindFile=0x34d10a0 | out: hFindFile=0x34d10a0) returned 1
	[0132.817] GetProcessHeap () returned 0x800000
	[0132.817] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0132.817] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1
	[0132.817] GetProcessHeap () returned 0x800000
	[0132.817] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0132.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0132.835] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.835] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0132.835] GetProcessHeap () returned 0x800000
	[0132.835] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d2350
	[0132.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.836] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.836] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1
	[0132.836] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0
	[0132.836] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.836] GetProcessHeap () returned 0x800000
	[0132.836] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d2350 | out: hHeap=0x800000) returned 1
	[0132.836] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1
	[0132.836] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1
	[0132.836] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1
	[0132.836] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1
	[0132.837] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1
	[0132.837] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0
	[0132.837] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0132.837] GetProcessHeap () returned 0x800000
	[0132.837] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0132.837] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1
	[0132.837] GetProcessHeap () returned 0x800000
	[0132.837] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0132.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.838] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.838] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1
	[0132.838] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0
	[0132.838] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.838] GetProcessHeap () returned 0x800000
	[0132.838] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0132.838] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1
	[0132.838] GetProcessHeap () returned 0x800000
	[0132.838] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0132.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.839] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.839] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1
	[0132.839] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1
	[0132.839] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1
	[0132.839] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1
	[0132.839] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0
	[0132.839] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.840] GetProcessHeap () returned 0x800000
	[0132.840] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0132.840] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1
	[0132.840] GetProcessHeap () returned 0x800000
	[0132.840] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0132.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0132.842] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.842] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1
	[0132.842] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1
	[0132.843] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1
	[0132.843] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1
	[0132.843] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1
	[0132.843] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1
	[0132.843] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1
	[0132.843] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1
	[0132.843] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1
	[0132.843] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1
	[0132.843] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1
	[0132.843] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1
	[0132.844] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1
	[0132.844] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1
	[0132.844] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1
	[0132.844] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0
	[0132.844] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0132.845] GetProcessHeap () returned 0x800000
	[0132.845] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0132.845] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0132.845] GetProcessHeap () returned 0x800000
	[0132.845] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0132.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0132.846] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.847] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1
	[0132.847] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1
	[0132.847] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1
	[0132.847] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0
	[0132.847] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0132.847] GetProcessHeap () returned 0x800000
	[0132.847] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0132.847] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1
	[0132.847] GetProcessHeap () returned 0x800000
	[0132.847] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0132.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0132.848] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.848] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1
	[0132.848] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1
	[0132.848] GetProcessHeap () returned 0x800000
	[0132.848] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.849] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.850] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.850] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.850] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.850] GetProcessHeap () returned 0x800000
	[0132.850] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.850] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0132.850] GetProcessHeap () returned 0x800000
	[0132.850] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.850] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.850] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.850] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.850] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.851] GetProcessHeap () returned 0x800000
	[0132.851] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.851] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1
	[0132.851] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1
	[0132.851] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0132.851] GetProcessHeap () returned 0x800000
	[0132.851] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.851] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.851] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.851] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.851] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.851] GetProcessHeap () returned 0x800000
	[0132.851] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.851] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0132.851] GetProcessHeap () returned 0x800000
	[0132.852] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.852] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.852] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.852] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.852] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.852] GetProcessHeap () returned 0x800000
	[0132.852] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.852] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0132.852] GetProcessHeap () returned 0x800000
	[0132.852] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.853] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.853] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.853] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.853] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.853] GetProcessHeap () returned 0x800000
	[0132.853] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.853] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0132.853] GetProcessHeap () returned 0x800000
	[0132.853] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.854] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.854] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.854] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.854] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.854] GetProcessHeap () returned 0x800000
	[0132.854] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.854] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0132.854] GetProcessHeap () returned 0x800000
	[0132.854] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.873] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.873] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1
	[0132.877] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1
	[0132.880] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1
	[0132.884] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1
	[0132.893] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1
	[0132.893] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1
	[0132.894] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1
	[0132.894] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1
	[0132.894] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1
	[0132.894] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1
	[0132.894] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1
	[0132.894] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1
	[0132.894] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1
	[0132.894] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1
	[0132.894] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1
	[0132.894] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1
	[0132.895] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1
	[0132.895] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1
	[0132.895] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1
	[0132.895] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1
	[0132.895] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1
	[0132.895] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1
	[0132.895] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.895] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1
	[0132.895] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0
	[0132.895] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.896] GetProcessHeap () returned 0x800000
	[0132.896] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.896] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0132.896] GetProcessHeap () returned 0x800000
	[0132.896] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.896] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.896] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.896] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.896] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.897] GetProcessHeap () returned 0x800000
	[0132.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.897] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0132.897] GetProcessHeap () returned 0x800000
	[0132.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.897] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.897] GetProcessHeap () returned 0x800000
	[0132.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.897] GetProcessHeap () returned 0x800000
	[0132.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.897] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.897] GetProcessHeap () returned 0x800000
	[0132.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.897] GetProcessHeap () returned 0x800000
	[0132.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.897] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.897] GetProcessHeap () returned 0x800000
	[0132.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.898] GetProcessHeap () returned 0x800000
	[0132.898] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.898] GetProcessHeap () returned 0x800000
	[0132.898] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.898] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.898] GetProcessHeap () returned 0x800000
	[0132.898] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.898] GetProcessHeap () returned 0x800000
	[0132.898] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.898] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.898] GetProcessHeap () returned 0x800000
	[0132.898] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.898] GetProcessHeap () returned 0x800000
	[0132.898] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.899] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.900] GetProcessHeap () returned 0x800000
	[0132.900] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.900] GetProcessHeap () returned 0x800000
	[0132.900] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.900] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.900] GetProcessHeap () returned 0x800000
	[0132.900] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.900] GetProcessHeap () returned 0x800000
	[0132.900] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.900] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.900] GetProcessHeap () returned 0x800000
	[0132.900] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.900] GetProcessHeap () returned 0x800000
	[0132.900] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.900] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.900] GetProcessHeap () returned 0x800000
	[0132.900] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.901] GetProcessHeap () returned 0x800000
	[0132.901] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.901] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.901] GetProcessHeap () returned 0x800000
	[0132.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.901] GetProcessHeap () returned 0x800000
	[0132.901] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.901] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.901] GetProcessHeap () returned 0x800000
	[0132.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.901] GetProcessHeap () returned 0x800000
	[0132.901] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.901] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.901] GetProcessHeap () returned 0x800000
	[0132.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.901] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.901] GetProcessHeap () returned 0x800000
	[0132.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.901] GetProcessHeap () returned 0x800000
	[0132.901] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.902] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.902] GetProcessHeap () returned 0x800000
	[0132.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.902] GetProcessHeap () returned 0x800000
	[0132.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.902] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.902] GetProcessHeap () returned 0x800000
	[0132.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.902] GetProcessHeap () returned 0x800000
	[0132.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.902] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.902] GetProcessHeap () returned 0x800000
	[0132.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.902] GetProcessHeap () returned 0x800000
	[0132.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.902] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.903] GetProcessHeap () returned 0x800000
	[0132.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.903] GetProcessHeap () returned 0x800000
	[0132.903] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.903] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.903] GetProcessHeap () returned 0x800000
	[0132.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.903] GetProcessHeap () returned 0x800000
	[0132.903] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.903] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.904] GetProcessHeap () returned 0x800000
	[0132.904] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.904] GetProcessHeap () returned 0x800000
	[0132.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.904] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.904] GetProcessHeap () returned 0x800000
	[0132.904] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.904] GetProcessHeap () returned 0x800000
	[0132.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.906] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.906] GetProcessHeap () returned 0x800000
	[0132.906] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.906] GetProcessHeap () returned 0x800000
	[0132.906] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.907] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.907] GetProcessHeap () returned 0x800000
	[0132.907] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.907] GetProcessHeap () returned 0x800000
	[0132.907] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.907] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.907] GetProcessHeap () returned 0x800000
	[0132.907] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.907] GetProcessHeap () returned 0x800000
	[0132.907] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.908] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.908] GetProcessHeap () returned 0x800000
	[0132.908] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.908] GetProcessHeap () returned 0x800000
	[0132.908] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.909] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.909] GetProcessHeap () returned 0x800000
	[0132.909] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.909] GetProcessHeap () returned 0x800000
	[0132.909] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.909] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.909] GetProcessHeap () returned 0x800000
	[0132.909] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.909] GetProcessHeap () returned 0x800000
	[0132.909] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.909] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.909] GetProcessHeap () returned 0x800000
	[0132.909] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.909] GetProcessHeap () returned 0x800000
	[0132.909] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.910] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.910] GetProcessHeap () returned 0x800000
	[0132.910] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.910] GetProcessHeap () returned 0x800000
	[0132.910] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.911] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.911] GetProcessHeap () returned 0x800000
	[0132.911] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.911] GetProcessHeap () returned 0x800000
	[0132.911] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.911] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.911] GetProcessHeap () returned 0x800000
	[0132.911] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.911] GetProcessHeap () returned 0x800000
	[0132.911] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.911] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.912] GetProcessHeap () returned 0x800000
	[0132.912] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.912] GetProcessHeap () returned 0x800000
	[0132.912] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.912] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.912] GetProcessHeap () returned 0x800000
	[0132.912] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.912] GetProcessHeap () returned 0x800000
	[0132.912] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.913] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.913] GetProcessHeap () returned 0x800000
	[0132.913] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.913] GetProcessHeap () returned 0x800000
	[0132.913] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.913] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.913] GetProcessHeap () returned 0x800000
	[0132.913] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.913] GetProcessHeap () returned 0x800000
	[0132.913] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.914] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.914] GetProcessHeap () returned 0x800000
	[0132.914] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.914] GetProcessHeap () returned 0x800000
	[0132.914] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.914] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.914] GetProcessHeap () returned 0x800000
	[0132.914] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.914] GetProcessHeap () returned 0x800000
	[0132.914] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.915] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.915] GetProcessHeap () returned 0x800000
	[0132.915] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.915] GetProcessHeap () returned 0x800000
	[0132.915] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.915] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.916] GetProcessHeap () returned 0x800000
	[0132.916] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.916] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0132.916] GetProcessHeap () returned 0x800000
	[0132.916] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0132.916] GetProcessHeap () returned 0x800000
	[0132.917] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0132.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0132.918] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0132.918] GetProcessHeap () returned 0x800000
	[0132.918] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0132.918] GetProcessHeap () returned 0x800000
	[0132.918] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0132.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0132.918] GetProcessHeap () returned 0x800000
	[0132.918] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d3358
	[0132.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.919] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.919] GetProcessHeap () returned 0x800000
	[0132.919] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d3358 | out: hHeap=0x800000) returned 1
	[0132.919] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0132.919] GetProcessHeap () returned 0x800000
	[0132.919] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0132.920] GetProcessHeap () returned 0x800000
	[0132.920] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0132.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.923] GetProcessHeap () returned 0x800000
	[0132.923] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d2350
	[0132.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0132.925] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0132.926] GetProcessHeap () returned 0x800000
	[0132.926] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d2350 | out: hHeap=0x800000) returned 1
	[0132.926] GetProcessHeap () returned 0x800000
	[0132.926] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d2350
	[0132.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0132.926] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0132.926] GetProcessHeap () returned 0x800000
	[0132.926] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d2350 | out: hHeap=0x800000) returned 1
	[0132.926] GetProcessHeap () returned 0x800000
	[0132.926] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d2350
	[0132.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0132.929] GetProcessHeap () returned 0x800000
	[0132.929] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.953] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.956] GetProcessHeap () returned 0x800000
	[0132.957] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.957] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1
	[0132.959] GetProcessHeap () returned 0x800000
	[0132.959] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.964] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.964] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1
	[0132.964] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.964] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.968] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.969] GetProcessHeap () returned 0x800000
	[0132.970] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.971] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1
	[0132.972] GetProcessHeap () returned 0x800000
	[0132.972] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.975] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.975] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0132.975] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.975] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.975] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.975] GetProcessHeap () returned 0x800000
	[0132.975] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.975] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1
	[0132.975] GetProcessHeap () returned 0x800000
	[0132.975] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.975] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.975] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e345a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.XML", cAlternateFileName="INFOPA~1.XML")) returned 1
	[0132.976] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.976] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.976] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.976] GetProcessHeap () returned 0x800000
	[0132.976] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.976] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1
	[0132.976] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1
	[0132.976] GetProcessHeap () returned 0x800000
	[0132.976] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.981] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.981] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9fff00, ftCreationTime.dwHighDateTime=0x1cba028, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e9fff00, ftLastWriteTime.dwHighDateTime=0x1cba028, nFileSizeHigh=0x0, nFileSizeLow=0x3b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1
	[0132.981] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470e1800, ftCreationTime.dwHighDateTime=0x1caccea, ftLastAccessTime.dwLowDateTime=0x15334ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x470e1800, ftLastWriteTime.dwHighDateTime=0x1caccea, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1
	[0132.981] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4114ea00, ftCreationTime.dwHighDateTime=0x1ca6af2, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4114ea00, ftLastWriteTime.dwHighDateTime=0x1ca6af2, nFileSizeHigh=0x0, nFileSizeLow=0x11644, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCT.CHM", cAlternateFileName="")) returned 1
	[0132.981] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c27050, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0132.981] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.XML", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0132.982] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUPUI.DLL", cAlternateFileName="")) returned 1
	[0132.982] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4804a00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd4804a00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="promointl.dll", cAlternateFileName="PROMOI~1.DLL")) returned 1
	[0132.982] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0b6300, ftCreationTime.dwHighDateTime=0x1ca9107, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2d0b6300, ftLastWriteTime.dwHighDateTime=0x1ca9107, nFileSizeHigh=0x0, nFileSizeLow=0x9339, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSCONFIG.CHM", cAlternateFileName="")) returned 1
	[0132.982] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8bce00, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7a8bce00, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6931, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1
	[0132.982] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7d4800, ftCreationTime.dwHighDateTime=0x1ca910f, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa7d4800, ftLastWriteTime.dwHighDateTime=0x1ca910f, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1
	[0132.982] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49087c00, ftCreationTime.dwHighDateTime=0x1ca95c1, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49087c00, ftLastWriteTime.dwHighDateTime=0x1ca95c1, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1
	[0132.982] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.982] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf2b422b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.982] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.983] GetProcessHeap () returned 0x800000
	[0132.983] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="OFFICE~2.EN-")) returned 1
	[0132.983] GetProcessHeap () returned 0x800000
	[0132.983] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.983] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.983] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.984] GetProcessHeap () returned 0x800000
	[0132.984] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1
	[0132.984] GetProcessHeap () returned 0x800000
	[0132.984] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.984] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe09b760, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.XML", cAlternateFileName="OFFICE~1.XML")) returned 0
	[0132.984] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.984] GetProcessHeap () returned 0x800000
	[0132.984] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="ONENOT~1.EN-")) returned 1
	[0132.984] GetProcessHeap () returned 0x800000
	[0132.984] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.984] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ed930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.XML", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6e0d4a0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.985] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.985] GetProcessHeap () returned 0x800000
	[0132.985] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.985] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1
	[0132.985] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1
	[0132.985] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="OUTLOO~1.EN-")) returned 1
	[0132.985] GetProcessHeap () returned 0x800000
	[0132.985] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.985] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.985] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee827f20, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.XML", cAlternateFileName="OUTLOO~1.XML")) returned 1
	[0132.985] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.985] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.985] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.985] GetProcessHeap () returned 0x800000
	[0132.985] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.985] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1
	[0132.986] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0132.986] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1
	[0132.986] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="POWERP~1.EN-")) returned 1
	[0132.986] GetProcessHeap () returned 0x800000
	[0132.986] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.986] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.986] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8728670, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5db14d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.XML", cAlternateFileName="POWERP~1.XML")) returned 1
	[0132.986] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.986] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.986] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.986] GetProcessHeap () returned 0x800000
	[0132.986] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.986] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1
	[0132.986] GetProcessHeap () returned 0x800000
	[0132.986] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.986] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.987] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60fd8f0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbe2e8f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.XML", cAlternateFileName="PRJPRO~1.XML")) returned 1
	[0132.987] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.987] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c227b0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.987] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.987] GetProcessHeap () returned 0x800000
	[0132.987] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.987] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="PROJEC~1.EN-")) returned 1
	[0132.987] GetProcessHeap () returned 0x800000
	[0132.987] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.987] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.987] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b2ebe0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf551ba0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.XML", cAlternateFileName="PROJEC~1.XML")) returned 1
	[0132.987] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.987] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc88d0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.987] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.987] GetProcessHeap () returned 0x800000
	[0132.987] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.987] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
	[0132.988] GetProcessHeap () returned 0x800000
	[0132.988] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.988] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.988] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0132.988] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01be3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0
	[0132.988] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.988] GetProcessHeap () returned 0x800000
	[0132.988] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.988] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
	[0132.988] GetProcessHeap () returned 0x800000
	[0132.988] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.988] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.988] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0132.988] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e37e00, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0
	[0132.988] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.988] GetProcessHeap () returned 0x800000
	[0132.988] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.988] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
	[0132.989] GetProcessHeap () returned 0x800000
	[0132.989] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.989] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.989] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 1
	[0132.989] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bd90c0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.XML", cAlternateFileName="")) returned 0
	[0132.989] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.989] GetProcessHeap () returned 0x800000
	[0132.989] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.989] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="PROOFI~1.EN-")) returned 1
	[0132.989] GetProcessHeap () returned 0x800000
	[0132.989] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.989] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.989] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00db300, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.XML", cAlternateFileName="")) returned 1
	[0132.989] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.989] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c6830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.989] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.990] GetProcessHeap () returned 0x800000
	[0132.990] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.990] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1
	[0132.990] GetProcessHeap () returned 0x800000
	[0132.990] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.990] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.990] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170fe40, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.XML", cAlternateFileName="PROPLU~1.XML")) returned 1
	[0132.990] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.990] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18177c50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.990] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.990] GetProcessHeap () returned 0x800000
	[0132.990] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.990] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="PUBLIS~1.EN-")) returned 1
	[0132.990] GetProcessHeap () returned 0x800000
	[0132.990] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.990] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.990] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3e4630, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.XML", cAlternateFileName="PUBLIS~1.XML")) returned 1
	[0132.990] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.991] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0
	[0132.991] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.991] GetProcessHeap () returned 0x800000
	[0132.991] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.991] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0132.991] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="VISIO~1.EN-")) returned 1
	[0132.991] GetProcessHeap () returned 0x800000
	[0132.991] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.991] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.991] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bdc500, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.991] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 1
	[0132.991] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4359ac00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.XML", cAlternateFileName="")) returned 0
	[0132.991] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.991] GetProcessHeap () returned 0x800000
	[0132.991] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.991] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1
	[0132.991] GetProcessHeap () returned 0x800000
	[0132.991] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.992] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.992] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d3200, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.992] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 1
	[0132.992] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468a2b70, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x83258520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.XML", cAlternateFileName="")) returned 0
	[0132.992] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.992] GetProcessHeap () returned 0x800000
	[0132.992] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.992] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 1
	[0132.992] GetProcessHeap () returned 0x800000
	[0132.992] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.992] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.992] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe076d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1
	[0132.992] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 1
	[0132.992] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.XML", cAlternateFileName="")) returned 0
	[0132.993] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.993] GetProcessHeap () returned 0x800000
	[0132.993] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.993] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 0
	[0132.993] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0132.993] GetProcessHeap () returned 0x800000
	[0132.993] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d2350 | out: hHeap=0x800000) returned 1
	[0132.993] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1
	[0132.993] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1
	[0132.993] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1
	[0132.993] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1
	[0132.993] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1
	[0132.993] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1
	[0132.993] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1
	[0132.993] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1
	[0132.994] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1
	[0132.994] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1
	[0132.994] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1
	[0132.994] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0
	[0132.994] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.994] GetProcessHeap () returned 0x800000
	[0132.994] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0132.995] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0132.995] GetProcessHeap () returned 0x800000
	[0132.995] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0132.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.998] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.998] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x24500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPC.DLL", cAlternateFileName="")) returned 1
	[0132.998] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59922e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x1be700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPCEXT.DLL", cAlternateFileName="")) returned 1
	[0132.998] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osppobjs-spp-plugin-manifest-signed.xrm-ms", cAlternateFileName="OSPPOB~1.XRM")) returned 1
	[0132.998] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x212b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPOBJS.DLL", cAlternateFileName="")) returned 1
	[0132.998] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf332800, ftCreationTime.dwHighDateTime=0x1cabc8a, ftLastAccessTime.dwLowDateTime=0x59948fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf332800, ftLastWriteTime.dwHighDateTime=0x1cabc8a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1
	[0132.999] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4b2700, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPSVC.EXE", cAlternateFileName="")) returned 1
	[0132.999] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x23b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.DLL", cAlternateFileName="")) returned 1
	[0132.999] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 1
	[0132.999] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0xba5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPWMI.MOF", cAlternateFileName="")) returned 0
	[0132.999] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0133.001] GetProcessHeap () returned 0x800000
	[0133.001] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0133.001] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1
	[0133.001] GetProcessHeap () returned 0x800000
	[0133.001] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0133.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0133.002] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.002] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1
	[0133.002] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1
	[0133.002] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1
	[0133.002] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1
	[0133.002] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0
	[0133.002] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0133.002] GetProcessHeap () returned 0x800000
	[0133.002] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0133.002] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1
	[0133.002] GetProcessHeap () returned 0x800000
	[0133.002] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d2350
	[0133.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0133.005] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.005] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0133.005] GetProcessHeap () returned 0x800000
	[0133.005] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0133.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0133.006] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.006] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1
	[0133.006] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1
	[0133.006] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 1
	[0133.006] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 0
	[0133.006] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0133.006] GetProcessHeap () returned 0x800000
	[0133.006] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0133.006] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1
	[0133.007] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1
	[0133.007] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1
	[0133.007] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1
	[0133.007] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1
	[0133.007] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1
	[0133.007] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="IMCONT~1.DLL")) returned 1
	[0133.007] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1
	[0133.007] GetProcessHeap () returned 0x800000
	[0133.007] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0133.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0133.008] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.008] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0133.008] GetProcessHeap () returned 0x800000
	[0133.008] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0133.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0133.008] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.008] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1
	[0133.009] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1
	[0133.009] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1
	[0133.009] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1
	[0133.009] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1
	[0133.009] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0
	[0133.009] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0133.009] GetProcessHeap () returned 0x800000
	[0133.009] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0133.009] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1
	[0133.009] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0
	[0133.009] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0133.009] GetProcessHeap () returned 0x800000
	[0133.009] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0133.009] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1
	[0133.009] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1
	[0133.009] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1
	[0133.010] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1
	[0133.010] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 1
	[0133.010] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 0
	[0133.010] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0133.010] GetProcessHeap () returned 0x800000
	[0133.011] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d2350 | out: hHeap=0x800000) returned 1
	[0133.011] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0133.011] GetProcessHeap () returned 0x800000
	[0133.011] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0133.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0133.013] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.013] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1
	[0133.013] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0
	[0133.013] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0133.013] GetProcessHeap () returned 0x800000
	[0133.013] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0133.014] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0133.014] GetProcessHeap () returned 0x800000
	[0133.014] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0133.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0133.016] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.017] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0133.017] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0133.017] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1
	[0133.017] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1
	[0133.017] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1
	[0133.017] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0133.017] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1
	[0133.018] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0133.018] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0133.018] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1
	[0133.018] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1
	[0133.018] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1
	[0133.018] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1
	[0133.018] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1
	[0133.018] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1
	[0133.018] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1
	[0133.018] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1
	[0133.018] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1
	[0133.019] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1
	[0133.019] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1
	[0133.019] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1
	[0133.019] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1
	[0133.019] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1
	[0133.019] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1
	[0133.019] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1
	[0133.019] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
	[0133.019] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
	[0133.019] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1
	[0133.020] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1
	[0133.020] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1
	[0133.020] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
	[0133.020] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
	[0133.020] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1
	[0133.020] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1
	[0133.020] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1
	[0133.020] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1
	[0133.020] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1
	[0133.020] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1
	[0133.020] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1
	[0133.021] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
	[0133.021] ResetEvent (hEvent=0xfc) returned 1
	[0133.021] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.090] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
	[0133.091] ResetEvent (hEvent=0xfc) returned 1
	[0133.091] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.137] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
	[0133.137] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1
	[0133.138] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1
	[0133.138] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1
	[0133.138] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1
	[0133.138] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1
	[0133.138] ResetEvent (hEvent=0xfc) returned 1
	[0133.138] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.166] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1
	[0133.166] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0
	[0133.167] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0133.167] GetProcessHeap () returned 0x800000
	[0133.167] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0133.167] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0133.167] GetProcessHeap () returned 0x800000
	[0133.167] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0133.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0133.167] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.167] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0133.168] GetProcessHeap () returned 0x800000
	[0133.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3554390
	[0133.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0133.168] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.168] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0133.168] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0133.168] GetProcessHeap () returned 0x800000
	[0133.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3554390 | out: hHeap=0x800000) returned 1
	[0133.168] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1
	[0133.169] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1
	[0133.169] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1
	[0133.169] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1
	[0133.169] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1
	[0133.169] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0
	[0133.169] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0133.169] GetProcessHeap () returned 0x800000
	[0133.169] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0133.169] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1
	[0133.169] GetProcessHeap () returned 0x800000
	[0133.169] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0133.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0133.174] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.174] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1
	[0133.174] GetProcessHeap () returned 0x800000
	[0133.174] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.174] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.174] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1
	[0133.174] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1
	[0133.175] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.175] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.175] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.175] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.175] GetProcessHeap () returned 0x800000
	[0133.175] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.175] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1
	[0133.175] GetProcessHeap () returned 0x800000
	[0133.175] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.175] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.175] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1
	[0133.175] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1
	[0133.175] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.175] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.176] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.176] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.176] GetProcessHeap () returned 0x800000
	[0133.176] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.176] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1
	[0133.176] GetProcessHeap () returned 0x800000
	[0133.176] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.176] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.176] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1
	[0133.176] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1
	[0133.176] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.176] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.176] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.176] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.176] GetProcessHeap () returned 0x800000
	[0133.176] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.177] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1
	[0133.177] GetProcessHeap () returned 0x800000
	[0133.177] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.177] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.177] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1
	[0133.177] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1
	[0133.177] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.177] ResetEvent (hEvent=0xfc) returned 1
	[0133.177] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.266] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.266] ResetEvent (hEvent=0xfc) returned 1
	[0133.266] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.269] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.269] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.269] GetProcessHeap () returned 0x800000
	[0133.269] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.269] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1
	[0133.269] GetProcessHeap () returned 0x800000
	[0133.269] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.269] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.269] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1
	[0133.269] ResetEvent (hEvent=0xfc) returned 1
	[0133.269] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.272] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1
	[0133.272] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.272] ResetEvent (hEvent=0xfc) returned 1
	[0133.272] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.273] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.274] ResetEvent (hEvent=0xfc) returned 1
	[0133.274] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.275] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.276] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.276] GetProcessHeap () returned 0x800000
	[0133.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.276] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1
	[0133.276] GetProcessHeap () returned 0x800000
	[0133.276] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.316] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.316] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1
	[0133.316] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1
	[0133.316] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.316] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.316] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.316] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.316] GetProcessHeap () returned 0x800000
	[0133.316] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.317] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1
	[0133.317] GetProcessHeap () returned 0x800000
	[0133.317] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.317] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.317] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1
	[0133.317] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1
	[0133.318] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.318] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.318] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.318] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.318] GetProcessHeap () returned 0x800000
	[0133.318] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.318] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1
	[0133.318] GetProcessHeap () returned 0x800000
	[0133.318] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.319] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.319] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1
	[0133.319] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1
	[0133.319] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.319] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.319] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.319] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.319] GetProcessHeap () returned 0x800000
	[0133.319] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.319] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1
	[0133.319] GetProcessHeap () returned 0x800000
	[0133.320] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.323] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.323] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1
	[0133.323] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1
	[0133.323] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.323] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.323] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.323] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.323] GetProcessHeap () returned 0x800000
	[0133.323] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.323] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1
	[0133.323] GetProcessHeap () returned 0x800000
	[0133.323] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.324] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.324] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1
	[0133.324] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1
	[0133.325] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.325] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.325] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.325] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.325] GetProcessHeap () returned 0x800000
	[0133.325] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.325] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1
	[0133.325] GetProcessHeap () returned 0x800000
	[0133.325] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.326] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.326] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1
	[0133.326] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1
	[0133.326] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.326] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.326] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.326] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.327] GetProcessHeap () returned 0x800000
	[0133.327] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.327] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1
	[0133.327] GetProcessHeap () returned 0x800000
	[0133.327] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.327] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.328] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1
	[0133.328] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1
	[0133.328] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.328] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.328] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.328] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.328] GetProcessHeap () returned 0x800000
	[0133.328] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.328] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1
	[0133.328] GetProcessHeap () returned 0x800000
	[0133.328] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.328] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.328] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1
	[0133.329] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1
	[0133.329] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.329] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.329] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.329] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.329] GetProcessHeap () returned 0x800000
	[0133.329] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.329] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1
	[0133.329] GetProcessHeap () returned 0x800000
	[0133.329] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.330] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.330] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1
	[0133.330] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1
	[0133.331] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.331] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.331] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.331] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.331] GetProcessHeap () returned 0x800000
	[0133.331] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.331] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1
	[0133.331] GetProcessHeap () returned 0x800000
	[0133.331] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.332] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.332] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1
	[0133.332] ResetEvent (hEvent=0xfc) returned 1
	[0133.332] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.418] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1
	[0133.418] ResetEvent (hEvent=0xfc) returned 1
	[0133.418] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.421] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.421] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.422] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.422] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.422] GetProcessHeap () returned 0x800000
	[0133.422] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.422] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1
	[0133.422] GetProcessHeap () returned 0x800000
	[0133.422] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.466] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.466] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1
	[0133.466] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1
	[0133.466] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.466] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.466] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.466] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.466] GetProcessHeap () returned 0x800000
	[0133.466] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.466] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1
	[0133.466] GetProcessHeap () returned 0x800000
	[0133.466] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.467] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.467] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1
	[0133.468] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1
	[0133.468] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.468] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.468] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.468] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.468] GetProcessHeap () returned 0x800000
	[0133.468] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.468] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1
	[0133.468] GetProcessHeap () returned 0x800000
	[0133.468] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.469] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.469] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1
	[0133.469] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1
	[0133.469] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.469] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.469] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.469] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.469] GetProcessHeap () returned 0x800000
	[0133.469] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.469] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1
	[0133.470] GetProcessHeap () returned 0x800000
	[0133.470] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.470] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.470] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1
	[0133.470] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1
	[0133.470] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.470] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.470] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.470] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.470] GetProcessHeap () returned 0x800000
	[0133.470] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.470] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1
	[0133.470] GetProcessHeap () returned 0x800000
	[0133.470] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.471] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.471] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1
	[0133.471] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1
	[0133.472] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.472] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.472] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.472] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.472] GetProcessHeap () returned 0x800000
	[0133.472] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.472] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1
	[0133.472] GetProcessHeap () returned 0x800000
	[0133.472] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.473] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.473] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1
	[0133.473] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1
	[0133.474] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.474] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.474] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.474] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.474] GetProcessHeap () returned 0x800000
	[0133.474] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.474] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1
	[0133.474] GetProcessHeap () returned 0x800000
	[0133.474] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.474] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.474] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1
	[0133.474] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1
	[0133.474] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.475] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.475] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.475] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.475] GetProcessHeap () returned 0x800000
	[0133.475] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.475] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1
	[0133.475] GetProcessHeap () returned 0x800000
	[0133.475] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.476] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.476] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1
	[0133.476] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1
	[0133.476] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.476] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.476] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.476] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.476] GetProcessHeap () returned 0x800000
	[0133.476] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.476] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1
	[0133.476] GetProcessHeap () returned 0x800000
	[0133.476] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.477] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.477] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1
	[0133.477] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1
	[0133.477] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.477] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.478] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.478] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.478] GetProcessHeap () returned 0x800000
	[0133.478] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.478] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1
	[0133.478] GetProcessHeap () returned 0x800000
	[0133.478] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.479] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.479] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1
	[0133.479] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1
	[0133.479] ResetEvent (hEvent=0xfc) returned 1
	[0133.479] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.553] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.553] ResetEvent (hEvent=0xfc) returned 1
	[0133.553] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.555] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.555] ResetEvent (hEvent=0xfc) returned 1
	[0133.555] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.656] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.656] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.656] GetProcessHeap () returned 0x800000
	[0133.656] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.656] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1
	[0133.656] GetProcessHeap () returned 0x800000
	[0133.656] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.656] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.656] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1
	[0133.656] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1
	[0133.656] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.656] ResetEvent (hEvent=0xfc) returned 1
	[0133.656] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.658] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.659] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.659] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.659] GetProcessHeap () returned 0x800000
	[0133.659] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.659] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1
	[0133.659] GetProcessHeap () returned 0x800000
	[0133.659] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.721] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.721] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1
	[0133.721] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1
	[0133.722] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.722] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.722] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.722] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.722] GetProcessHeap () returned 0x800000
	[0133.722] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.722] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1
	[0133.722] GetProcessHeap () returned 0x800000
	[0133.722] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.722] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.722] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1
	[0133.722] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1
	[0133.723] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.723] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.723] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.723] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.723] GetProcessHeap () returned 0x800000
	[0133.723] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.723] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1
	[0133.723] GetProcessHeap () returned 0x800000
	[0133.723] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.724] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.724] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.724] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1
	[0133.724] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1
	[0133.724] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.724] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.724] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.724] GetProcessHeap () returned 0x800000
	[0133.724] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.724] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1
	[0133.725] GetProcessHeap () returned 0x800000
	[0133.725] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.725] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.725] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.726] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1
	[0133.726] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1
	[0133.726] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.726] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.726] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.726] GetProcessHeap () returned 0x800000
	[0133.726] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.726] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1
	[0133.726] GetProcessHeap () returned 0x800000
	[0133.726] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.727] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.727] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.727] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1
	[0133.727] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1
	[0133.727] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.727] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.727] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.728] GetProcessHeap () returned 0x800000
	[0133.728] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.728] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1
	[0133.728] GetProcessHeap () returned 0x800000
	[0133.728] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.728] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.728] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.728] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1
	[0133.728] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1
	[0133.728] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.728] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.729] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.729] GetProcessHeap () returned 0x800000
	[0133.729] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.729] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1
	[0133.729] GetProcessHeap () returned 0x800000
	[0133.729] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.730] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.730] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.730] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1
	[0133.730] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1
	[0133.730] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.730] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.730] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.730] GetProcessHeap () returned 0x800000
	[0133.730] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.730] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1
	[0133.730] GetProcessHeap () returned 0x800000
	[0133.730] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.731] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.731] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.731] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1
	[0133.731] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1
	[0133.731] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.731] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.731] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.734] GetProcessHeap () returned 0x800000
	[0133.734] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.734] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1
	[0133.734] GetProcessHeap () returned 0x800000
	[0133.734] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.735] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.735] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.735] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1
	[0133.735] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1
	[0133.735] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.735] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.735] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.735] GetProcessHeap () returned 0x800000
	[0133.735] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.735] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1
	[0133.735] GetProcessHeap () returned 0x800000
	[0133.735] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.736] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.736] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.736] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1
	[0133.736] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1
	[0133.736] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.736] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.736] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.736] GetProcessHeap () returned 0x800000
	[0133.736] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.736] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1
	[0133.736] GetProcessHeap () returned 0x800000
	[0133.736] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.737] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.737] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.737] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1
	[0133.737] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1
	[0133.737] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.738] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.738] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.738] GetProcessHeap () returned 0x800000
	[0133.738] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.738] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1
	[0133.738] GetProcessHeap () returned 0x800000
	[0133.738] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.739] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.739] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.739] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1
	[0133.739] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1
	[0133.739] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.739] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.739] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.739] GetProcessHeap () returned 0x800000
	[0133.739] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.739] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1
	[0133.739] GetProcessHeap () returned 0x800000
	[0133.739] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.740] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.740] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.740] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1
	[0133.740] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1
	[0133.740] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.740] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.740] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.741] GetProcessHeap () returned 0x800000
	[0133.741] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.741] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1
	[0133.741] GetProcessHeap () returned 0x800000
	[0133.741] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.741] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.742] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.742] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1
	[0133.742] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1
	[0133.742] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.742] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.742] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.742] GetProcessHeap () returned 0x800000
	[0133.742] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.742] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1
	[0133.742] GetProcessHeap () returned 0x800000
	[0133.742] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.743] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.743] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.743] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1
	[0133.743] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1
	[0133.743] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.743] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.743] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.743] GetProcessHeap () returned 0x800000
	[0133.744] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.744] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1
	[0133.744] GetProcessHeap () returned 0x800000
	[0133.744] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.744] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.744] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.744] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1
	[0133.744] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1
	[0133.744] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.744] ResetEvent (hEvent=0xfc) returned 1
	[0133.744] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.853] ResetEvent (hEvent=0xfc) returned 1
	[0133.853] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.854] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.854] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.855] GetProcessHeap () returned 0x800000
	[0133.855] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.855] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1
	[0133.855] GetProcessHeap () returned 0x800000
	[0133.855] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.857] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.857] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.857] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1
	[0133.857] ResetEvent (hEvent=0xfc) returned 1
	[0133.857] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.949] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1
	[0133.949] ResetEvent (hEvent=0xfc) returned 1
	[0133.949] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0133.959] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.960] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.960] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.960] GetProcessHeap () returned 0x800000
	[0133.960] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.960] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1
	[0133.960] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1
	[0133.960] GetProcessHeap () returned 0x800000
	[0133.960] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.991] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.991] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.991] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.991] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1
	[0133.991] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1
	[0133.991] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0
	[0133.991] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.991] GetProcessHeap () returned 0x800000
	[0133.991] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.992] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1
	[0133.992] GetProcessHeap () returned 0x800000
	[0133.992] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3557d38
	[0133.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.992] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.992] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.992] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.992] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1
	[0133.992] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1
	[0133.992] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0
	[0133.992] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.992] GetProcessHeap () returned 0x800000
	[0133.992] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3557d38 | out: hHeap=0x800000) returned 1
	[0133.992] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0
	[0133.992] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0133.993] GetProcessHeap () returned 0x800000
	[0133.993] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0133.993] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1
	[0133.993] GetProcessHeap () returned 0x800000
	[0133.993] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0133.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.994] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.994] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1
	[0133.994] GetProcessHeap () returned 0x800000
	[0133.994] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0133.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.995] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.995] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1
	[0133.995] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0
	[0133.995] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.996] GetProcessHeap () returned 0x800000
	[0133.996] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0133.996] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1
	[0133.996] GetProcessHeap () returned 0x800000
	[0133.996] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0133.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.996] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.996] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1
	[0133.996] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0
	[0133.997] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.997] GetProcessHeap () returned 0x800000
	[0133.997] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0133.997] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1
	[0133.997] GetProcessHeap () returned 0x800000
	[0133.997] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0133.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.997] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.997] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1
	[0133.997] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0
	[0133.997] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.997] GetProcessHeap () returned 0x800000
	[0133.997] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0133.997] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1
	[0133.997] GetProcessHeap () returned 0x800000
	[0133.997] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0133.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.998] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.998] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1
	[0133.998] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1
	[0133.998] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1
	[0133.998] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0
	[0133.998] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.998] GetProcessHeap () returned 0x800000
	[0133.998] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0133.998] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1
	[0133.998] GetProcessHeap () returned 0x800000
	[0133.998] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0133.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.999] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.999] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1
	[0133.999] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0
	[0133.999] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.999] GetProcessHeap () returned 0x800000
	[0133.999] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0133.999] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1
	[0133.999] GetProcessHeap () returned 0x800000
	[0133.999] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0133.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.000] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.000] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1
	[0134.000] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1
	[0134.000] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1
	[0134.001] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0
	[0134.001] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.001] GetProcessHeap () returned 0x800000
	[0134.001] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0134.001] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1
	[0134.001] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1
	[0134.001] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1
	[0134.001] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1
	[0134.001] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1
	[0134.001] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1
	[0134.001] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0
	[0134.001] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.001] GetProcessHeap () returned 0x800000
	[0134.001] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0134.001] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0134.001] GetProcessHeap () returned 0x800000
	[0134.002] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0134.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.002] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.002] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0134.002] GetProcessHeap () returned 0x800000
	[0134.002] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0134.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.003] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.003] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0134.003] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.003] GetProcessHeap () returned 0x800000
	[0134.003] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0134.003] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0134.003] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.003] GetProcessHeap () returned 0x800000
	[0134.003] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0134.003] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0134.003] GetProcessHeap () returned 0x800000
	[0134.003] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0134.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.004] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.004] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1
	[0134.004] GetProcessHeap () returned 0x800000
	[0134.004] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0134.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.004] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.004] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0134.004] GetProcessHeap () returned 0x800000
	[0134.004] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0134.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.006] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.006] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1
	[0134.006] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1
	[0134.007] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1
	[0134.007] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1
	[0134.007] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1
	[0134.007] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1
	[0134.007] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1
	[0134.007] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1
	[0134.007] ResetEvent (hEvent=0xfc) returned 1
	[0134.007] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0134.126] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0
	[0134.127] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.128] GetProcessHeap () returned 0x800000
	[0134.128] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0134.128] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1
	[0134.128] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 0
	[0134.128] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.128] GetProcessHeap () returned 0x800000
	[0134.128] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0134.129] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 0
	[0134.129] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.129] GetProcessHeap () returned 0x800000
	[0134.129] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0134.129] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1
	[0134.130] GetProcessHeap () returned 0x800000
	[0134.130] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0134.130] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.174] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.174] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ef3e00, ftCreationTime.dwHighDateTime=0x1cbd033, ftLastAccessTime.dwLowDateTime=0xd2618ca0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc9ef3e00, ftLastWriteTime.dwHighDateTime=0x1cbd033, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1
	[0134.174] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1
	[0134.174] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c53c00, ftCreationTime.dwHighDateTime=0x1cbfdf3, ftLastAccessTime.dwLowDateTime=0xbd2c6940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xc1c53c00, ftLastWriteTime.dwHighDateTime=0x1cbfdf3, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0
	[0134.174] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.174] GetProcessHeap () returned 0x800000
	[0134.174] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0134.174] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1
	[0134.174] GetProcessHeap () returned 0x800000
	[0134.174] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0134.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.174] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.174] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1
	[0134.174] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a7ff6, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xee7a7ff6, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x454d7b80, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x10f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0
	[0134.174] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.175] GetProcessHeap () returned 0x800000
	[0134.175] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0134.175] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1
	[0134.175] GetProcessHeap () returned 0x800000
	[0134.175] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0134.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.176] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.176] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0134.176] GetProcessHeap () returned 0x800000
	[0134.176] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0134.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.179] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.179] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1
	[0134.179] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81c076e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1
	[0134.179] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x81eb4fa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1
	[0134.179] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8207e020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1
	[0134.179] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2656900, ftCreationTime.dwHighDateTime=0x1c2706c, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2656900, ftLastWriteTime.dwHighDateTime=0x1c2706c, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1
	[0134.179] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8f60300, ftCreationTime.dwHighDateTime=0x1c324cc, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc8f60300, ftLastWriteTime.dwHighDateTime=0x1c324cc, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1
	[0134.179] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1
	[0134.179] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x853f7be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1
	[0134.180] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1
	[0134.180] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1
	[0134.180] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b362800, ftCreationTime.dwHighDateTime=0x1c10ce8, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2b362800, ftLastWriteTime.dwHighDateTime=0x1c10ce8, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0
	[0134.180] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.180] GetProcessHeap () returned 0x800000
	[0134.180] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0134.180] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0
	[0134.180] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.181] GetProcessHeap () returned 0x800000
	[0134.181] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0134.181] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1
	[0134.181] GetProcessHeap () returned 0x800000
	[0134.181] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0134.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.181] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.182] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0134.182] GetProcessHeap () returned 0x800000
	[0134.182] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0134.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.184] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.184] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0134.184] GetProcessHeap () returned 0x800000
	[0134.184] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0134.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0134.188] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.188] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1
	[0134.189] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0134.189] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0
	[0134.189] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0134.189] GetProcessHeap () returned 0x800000
	[0134.189] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0134.189] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc251dc00, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x5e4b68d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc251dc00, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="VSTOIN~1.CON")) returned 1
	[0134.189] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x18558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1
	[0134.189] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5e950, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0134.189] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1
	[0134.189] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd51096e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0
	[0134.189] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.189] GetProcessHeap () returned 0x800000
	[0134.189] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0134.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1
	[0134.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1
	[0134.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1
	[0134.191] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5550, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0
	[0134.191] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.191] GetProcessHeap () returned 0x800000
	[0134.191] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0134.191] FindNextFileW (in: hFindFile=0x34c0050, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="WEBFOL~1")) returned 1
	[0134.191] GetProcessHeap () returned 0x800000
	[0134.191] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c1098
	[0134.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.192] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.192] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.192] GetProcessHeap () returned 0x800000
	[0134.192] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0134.192] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.192] GetProcessHeap () returned 0x800000
	[0134.193] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0134.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0134.196] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0134.196] GetProcessHeap () returned 0x800000
	[0134.196] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.196] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.196] GetProcessHeap () returned 0x800000
	[0134.196] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0134.196] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.196] GetProcessHeap () returned 0x800000
	[0134.196] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0134.197] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.197] GetProcessHeap () returned 0x800000
	[0134.197] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c1098 | out: hHeap=0x800000) returned 1
	[0134.197] FindClose (in: hFindFile=0x34c0050 | out: hFindFile=0x34c0050) returned 1
	[0134.197] GetProcessHeap () returned 0x800000
	[0134.197] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0134.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.198] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.198] GetProcessHeap () returned 0x800000
	[0134.198] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0134.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0134.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0134.301] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0134.302] GetProcessHeap () returned 0x800000
	[0134.302] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.302] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.302] GetProcessHeap () returned 0x800000
	[0134.302] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0134.302] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0134.302] GetProcessHeap () returned 0x800000
	[0134.302] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0134.303] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.303] GetProcessHeap () returned 0x800000
	[0134.303] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0134.303] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.303] GetProcessHeap () returned 0x800000
	[0134.303] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0134.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0134.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0134.309] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0134.309] GetProcessHeap () returned 0x800000
	[0134.309] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.516] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.516] GetProcessHeap () returned 0x800000
	[0134.516] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0134.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.516] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.516] GetProcessHeap () returned 0x800000
	[0134.516] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0134.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.559] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.560] GetProcessHeap () returned 0x800000
	[0134.560] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0134.560] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.560] GetProcessHeap () returned 0x800000
	[0134.560] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0134.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.561] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.561] GetProcessHeap () returned 0x800000
	[0134.561] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0134.561] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.562] GetProcessHeap () returned 0x800000
	[0134.562] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0134.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.565] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.565] GetProcessHeap () returned 0x800000
	[0134.565] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0134.565] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.565] GetProcessHeap () returned 0x800000
	[0134.565] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0134.566] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0134.566] GetProcessHeap () returned 0x800000
	[0134.566] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0134.566] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0134.566] GetProcessHeap () returned 0x800000
	[0134.566] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0134.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0134.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.569] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.569] GetProcessHeap () returned 0x800000
	[0134.569] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0134.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0134.912] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0134.912] GetProcessHeap () returned 0x800000
	[0134.912] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0134.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0134.914] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0134.915] GetProcessHeap () returned 0x800000
	[0134.915] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0135.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0135.159] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0135.160] GetProcessHeap () returned 0x800000
	[0135.160] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0135.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0135.188] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0135.188] GetProcessHeap () returned 0x800000
	[0135.188] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0135.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0135.278] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0135.279] GetProcessHeap () returned 0x800000
	[0135.279] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0135.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0135.307] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0135.307] GetProcessHeap () returned 0x800000
	[0135.307] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0135.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0135.361] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0135.361] GetProcessHeap () returned 0x800000
	[0135.361] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0135.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0135.397] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0135.397] GetProcessHeap () returned 0x800000
	[0135.397] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0135.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0135.592] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0135.593] GetProcessHeap () returned 0x800000
	[0135.593] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0135.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0135.620] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0135.620] GetProcessHeap () returned 0x800000
	[0135.620] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0135.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0135.737] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0135.738] GetProcessHeap () returned 0x800000
	[0135.738] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0135.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0135.794] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0135.794] GetProcessHeap () returned 0x800000
	[0135.794] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0135.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0136.047] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0136.048] GetProcessHeap () returned 0x800000
	[0136.048] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0136.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0136.065] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0136.066] GetProcessHeap () returned 0x800000
	[0136.066] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0136.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0136.535] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0136.536] GetProcessHeap () returned 0x800000
	[0136.536] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0136.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0136.565] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0136.566] GetProcessHeap () returned 0x800000
	[0136.566] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0136.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0136.722] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0136.723] GetProcessHeap () returned 0x800000
	[0136.723] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0136.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0136.882] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0136.883] GetProcessHeap () returned 0x800000
	[0136.883] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0136.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0137.071] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0137.072] GetProcessHeap () returned 0x800000
	[0137.072] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0137.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0137.241] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0137.242] GetProcessHeap () returned 0x800000
	[0137.242] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0137.244] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0137.245] GetProcessHeap () returned 0x800000
	[0137.245] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0137.245] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0137.245] GetProcessHeap () returned 0x800000
	[0137.245] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0137.248] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0137.250] GetProcessHeap () returned 0x800000
	[0137.250] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0137.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0137.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0137.268] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0137.269] GetProcessHeap () returned 0x800000
	[0137.269] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0137.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0137.372] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0137.372] GetProcessHeap () returned 0x800000
	[0137.372] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0137.372] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0137.372] GetProcessHeap () returned 0x800000
	[0137.372] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0137.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0137.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0137.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0137.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0137.395] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0137.395] GetProcessHeap () returned 0x800000
	[0137.395] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0137.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0137.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0137.400] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0137.400] GetProcessHeap () returned 0x800000
	[0137.401] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0137.401] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0137.401] GetProcessHeap () returned 0x800000
	[0137.401] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0137.401] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0137.401] GetProcessHeap () returned 0x800000
	[0137.401] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0137.401] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0137.401] GetProcessHeap () returned 0x800000
	[0137.401] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0137.406] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0137.406] GetProcessHeap () returned 0x800000
	[0137.406] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0137.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x512f1610, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0137.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0137.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0143.509] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0143.516] GetProcessHeap () returned 0x800000
	[0143.516] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0143.517] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ce908
	[0143.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0143.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0143.552] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0143.553] GetProcessHeap () returned 0x800000
	[0143.553] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0143.553] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0143.553] GetProcessHeap () returned 0x800000
	[0143.553] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0143.553] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0143.554] GetProcessHeap () returned 0x800000
	[0143.554] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0143.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0143.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0144.185] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0144.186] GetProcessHeap () returned 0x800000
	[0144.186] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0144.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0144.415] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0144.416] GetProcessHeap () returned 0x800000
	[0144.416] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0144.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0144.565] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0144.566] GetProcessHeap () returned 0x800000
	[0144.566] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0144.570] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0144.570] GetProcessHeap () returned 0x800000
	[0144.570] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0144.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0144.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0144.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0144.571] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0144.571] GetProcessHeap () returned 0x800000
	[0144.571] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0144.975] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0144.976] GetProcessHeap () returned 0x800000
	[0144.976] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0144.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0144.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0144.977] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0144.977] GetProcessHeap () returned 0x800000
	[0144.977] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0144.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0145.361] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0145.362] GetProcessHeap () returned 0x800000
	[0145.362] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0145.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0146.283] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0146.293] GetProcessHeap () returned 0x800000
	[0146.293] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0146.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0146.518] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0146.519] GetProcessHeap () returned 0x800000
	[0146.519] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0146.519] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0146.519] GetProcessHeap () returned 0x800000
	[0146.519] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0146.520] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0146.520] GetProcessHeap () returned 0x800000
	[0146.520] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0146.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0146.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22a7990, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x22a7990, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0146.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0146.536] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0146.536] GetProcessHeap () returned 0x800000
	[0146.536] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0146.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0146.654] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0146.655] GetProcessHeap () returned 0x800000
	[0146.655] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0146.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0146.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0146.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.051] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.051] GetProcessHeap () returned 0x800000
	[0147.051] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0147.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.068] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.068] GetProcessHeap () returned 0x800000
	[0147.068] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.073] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.073] GetProcessHeap () returned 0x800000
	[0147.073] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.187] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.188] GetProcessHeap () returned 0x800000
	[0147.188] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.196] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.197] GetProcessHeap () returned 0x800000
	[0147.197] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.203] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.204] GetProcessHeap () returned 0x800000
	[0147.204] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.216] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.217] GetProcessHeap () returned 0x800000
	[0147.217] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.221] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.221] GetProcessHeap () returned 0x800000
	[0147.221] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.330] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.331] GetProcessHeap () returned 0x800000
	[0147.331] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.345] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.345] GetProcessHeap () returned 0x800000
	[0147.345] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.353] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.354] GetProcessHeap () returned 0x800000
	[0147.354] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.364] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.365] GetProcessHeap () returned 0x800000
	[0147.365] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.485] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.485] GetProcessHeap () returned 0x800000
	[0147.485] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.496] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.497] GetProcessHeap () returned 0x800000
	[0147.497] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.497] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0147.504] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0147.504] GetProcessHeap () returned 0x800000
	[0147.504] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0147.510] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0147.510] GetProcessHeap () returned 0x800000
	[0147.510] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0147.510] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0147.511] GetProcessHeap () returned 0x800000
	[0147.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0148.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0148.506] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0148.507] GetProcessHeap () returned 0x800000
	[0148.507] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0148.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0149.174] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0149.175] GetProcessHeap () returned 0x800000
	[0149.175] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0149.175] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0149.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0149.188] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0149.289] GetProcessHeap () returned 0x800000
	[0149.289] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0151.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0151.240] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0151.240] GetProcessHeap () returned 0x800000
	[0151.240] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0151.399] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0151.399] GetProcessHeap () returned 0x800000
	[0151.399] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0151.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0151.400] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0151.400] GetProcessHeap () returned 0x800000
	[0151.400] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0151.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0151.400] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0151.401] GetProcessHeap () returned 0x800000
	[0151.401] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0151.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0151.401] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0151.401] GetProcessHeap () returned 0x800000
	[0151.401] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0151.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x33774f0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x33774f0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0151.502] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0151.503] GetProcessHeap () returned 0x800000
	[0151.503] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0151.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0151.631] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0151.641] GetProcessHeap () returned 0x800000
	[0151.641] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0151.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0151.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0151.772] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0151.772] GetProcessHeap () returned 0x800000
	[0151.772] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0151.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0151.799] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0151.799] GetProcessHeap () returned 0x800000
	[0151.799] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0151.800] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0151.800] GetProcessHeap () returned 0x800000
	[0151.800] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0151.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0151.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x7df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART1.BDR", cAlternateFileName="")) returned 1
	[0151.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x244c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART10.BDR", cAlternateFileName="")) returned 1
	[0151.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART11.BDR", cAlternateFileName="")) returned 1
	[0151.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xe584, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART12.BDR", cAlternateFileName="")) returned 1
	[0151.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART13.BDR", cAlternateFileName="")) returned 1
	[0151.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc8bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART14.BDR", cAlternateFileName="")) returned 1
	[0151.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x6b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART15.BDR", cAlternateFileName="")) returned 1
	[0151.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xb854, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART2.BDR", cAlternateFileName="")) returned 1
	[0151.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xe12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART3.BDR", cAlternateFileName="")) returned 1
	[0151.806] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x3902, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART4.BDR", cAlternateFileName="")) returned 1
	[0151.806] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x3dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART5.BDR", cAlternateFileName="")) returned 1
	[0151.806] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xd7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART6.BDR", cAlternateFileName="")) returned 1
	[0151.806] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART7.BDR", cAlternateFileName="")) returned 1
	[0151.806] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xbfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART8.BDR", cAlternateFileName="")) returned 1
	[0151.806] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 1
	[0151.806] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 0
	[0151.806] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0151.807] GetProcessHeap () returned 0x800000
	[0151.807] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0151.807] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd248dbc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2d998, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRTVIEW.DLL", cAlternateFileName="")) returned 1
	[0151.807] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf8844c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xe7380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1
	[0151.807] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500f7b00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd83c4bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x500f7b00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x81d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDLMSO.DLL", cAlternateFileName="")) returned 1
	[0151.807] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x7b09, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.HLP", cAlternateFileName="")) returned 1
	[0151.807] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44f4800, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44f4800, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xdcc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CharSetTable.chr", cAlternateFileName="CHARSE~1.CHR")) returned 1
	[0151.808] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22bf4c00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf0edea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x22bf4c00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x41f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1
	[0151.808] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2149b700, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24d9e80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2149b700, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xb0578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAX20.DLL", cAlternateFileName="")) returned 1
	[0151.808] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x37160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1
	[0151.808] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24fffe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xcf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="CODEEDIT.DLL", cAlternateFileName="")) returned 1
	[0151.808] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337e5b00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x337e5b00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x2cb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1
	[0151.808] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6471c400, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6471c400, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x36580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPicker.dll", cAlternateFileName="CONTAC~1.DLL")) returned 1
	[0151.808] ResetEvent (hEvent=0xfc) returned 1
	[0151.808] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0151.810] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1
	[0151.811] GetProcessHeap () returned 0x800000
	[0151.811] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0151.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0151.826] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.826] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0151.826] GetProcessHeap () returned 0x800000
	[0151.826] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0151.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0151.828] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.828] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3R.SAM", cAlternateFileName="")) returned 1
	[0151.829] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMR.FAE", cAlternateFileName="")) returned 1
	[0151.829] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9180, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCALDV.DLL", cAlternateFileName="")) returned 1
	[0151.829] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCR.SAM", cAlternateFileName="")) returned 1
	[0151.829] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADDR.FAE", cAlternateFileName="")) returned 1
	[0151.829] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf79ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPTR.FAE", cAlternateFileName="")) returned 1
	[0151.829] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1332250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNLR.FAE", cAlternateFileName="")) returned 1
	[0151.829] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAILR.FAE", cAlternateFileName="")) returned 1
	[0151.829] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x25b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTER.FAE", cAlternateFileName="")) returned 1
	[0151.829] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLR.SAM", cAlternateFileName="")) returned 1
	[0151.829] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASKR.FAE", cAlternateFileName="")) returned 1
	[0151.830] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x31a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97R.SAM", cAlternateFileName="")) returned 1
	[0151.830] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PABR.SAM", cAlternateFileName="")) returned 1
	[0151.830] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 1
	[0151.830] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 0
	[0151.830] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0151.831] GetProcessHeap () returned 0x800000
	[0151.831] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0151.831] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16178, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3.SAM", cAlternateFileName="")) returned 1
	[0151.831] ResetEvent (hEvent=0xfc) returned 1
	[0151.831] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0151.938] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7990, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMDOS.FAE", cAlternateFileName="")) returned 1
	[0151.938] ResetEvent (hEvent=0xfc) returned 1
	[0151.938] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0151.941] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x79a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1
	[0151.941] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKSAM.SAM", cAlternateFileName="")) returned 1
	[0151.941] ResetEvent (hEvent=0xfc) returned 1
	[0151.941] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0151.948] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf978, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC.SAM", cAlternateFileName="")) returned 1
	[0151.948] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd53ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OL.SAM", cAlternateFileName="")) returned 1
	[0151.948] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x207a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADD.FAE", cAlternateFileName="")) returned 1
	[0151.948] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd79c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1dda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPT.FAE", cAlternateFileName="")) returned 1
	[0151.948] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x117a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNL.FAE", cAlternateFileName="")) returned 1
	[0151.948] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd9fd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAIL.FAE", cAlternateFileName="")) returned 1
	[0151.949] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTE.FAE", cAlternateFileName="")) returned 1
	[0151.949] ResetEvent (hEvent=0xfc) returned 1
	[0151.949] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0151.953] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6be5e470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c398, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASK.FAE", cAlternateFileName="")) returned 1
	[0151.953] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x5988a8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc588, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97.SAM", cAlternateFileName="")) returned 1
	[0151.953] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAB.SAM", cAlternateFileName="")) returned 1
	[0151.953] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x18568, dwReserved0=0x0, dwReserved1=0x0, cFileName="RM.DLL", cAlternateFileName="")) returned 1
	[0151.953] ResetEvent (hEvent=0xfc) returned 1
	[0151.953] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0151.960] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 1
	[0151.960] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 0
	[0151.960] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0151.960] GetProcessHeap () returned 0x800000
	[0151.960] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0151.960] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a49800, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa2045a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x18a49800, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x911b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="CSS7DA~3.DLL")) returned 1
	[0151.960] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d4df100, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa6dee7e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3d4df100, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="CSS7DA~1.DLL")) returned 1
	[0151.961] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f18900, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa408e480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x64f18900, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="CSS7DA~2.DLL")) returned 1
	[0151.961] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ab7000, ftCreationTime.dwHighDateTime=0x1c8d9fe, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9ab7000, ftLastWriteTime.dwHighDateTime=0x1c8d9fe, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="CUSTOM~1.PRO")) returned 1
	[0151.961] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b53d600, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd25e4820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b53d600, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x91170, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1
	[0151.961] ResetEvent (hEvent=0xfc) returned 1
	[0151.961] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0151.962] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf942ba0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x124578, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.DLL", cAlternateFileName="")) returned 1
	[0151.962] ResetEvent (hEvent=0xfc) returned 1
	[0151.962] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.063] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0152.063] ResetEvent (hEvent=0xfc) returned 1
	[0152.063] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.068] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2630ae0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSHARE.DLL", cAlternateFileName="")) returned 1
	[0152.068] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2904500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x137b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1
	[0152.068] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3242fa00, ftCreationTime.dwHighDateTime=0x1cb7017, ftLastAccessTime.dwLowDateTime=0xd2a812c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3242fa00, ftLastWriteTime.dwHighDateTime=0x1cb7017, nFileSizeHigh=0x0, nFileSizeLow=0x1a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGRMLNCH.DLL", cAlternateFileName="")) returned 1
	[0152.068] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1c770, dwReserved0=0x0, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1
	[0152.068] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="DOCUME~1")) returned 1
	[0152.068] GetProcessHeap () returned 0x800000
	[0152.068] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0152.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0152.068] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.069] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0152.069] GetProcessHeap () returned 0x800000
	[0152.069] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8be900
	[0152.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0152.069] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.069] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0152.069] GetProcessHeap () returned 0x800000
	[0152.069] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ce908
	[0152.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0152.070] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.070] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3845b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1
	[0152.070] ResetEvent (hEvent=0xfc) returned 1
	[0152.070] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.074] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3845b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0
	[0152.074] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0152.074] GetProcessHeap () returned 0x800000
	[0152.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0152.074] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0
	[0152.074] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0152.075] GetProcessHeap () returned 0x800000
	[0152.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0152.075] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0152.075] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0152.075] GetProcessHeap () returned 0x800000
	[0152.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0152.075] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff0d00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xcfd6d220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ff0d00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x1acf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1
	[0152.075] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3357b00, ftCreationTime.dwHighDateTime=0x1cba075, ftLastAccessTime.dwLowDateTime=0xcfdb94e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa3357b00, ftLastWriteTime.dwHighDateTime=0x1cba075, nFileSizeHigh=0x0, nFileSizeLow=0x36160, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1
	[0152.075] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd00b3060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x8f3d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1
	[0152.075] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f6a020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x30968, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITOR.EXE", cAlternateFileName="")) returned 1
	[0152.076] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f90180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xad88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITORS.DLL", cAlternateFileName="")) returned 1
	[0152.076] ResetEvent (hEvent=0xfc) returned 1
	[0152.076] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.081] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2fdc440, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMENTS.DLL", cAlternateFileName="")) returned 1
	[0152.082] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd30c0c80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x237a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMUTIL.DLL", cAlternateFileName="")) returned 1
	[0152.082] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1
	[0152.082] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x60903850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x206fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1
	[0152.082] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGDIC.DAT", cAlternateFileName="")) returned 1
	[0152.082] ResetEvent (hEvent=0xfc) returned 1
	[0152.082] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.087] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x8578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGIDX.DAT", cAlternateFileName="")) returned 1
	[0152.087] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x4c22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGLISH.LNG", cAlternateFileName="")) returned 1
	[0152.087] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xf380, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="ENTITY~2.DLL")) returned 1
	[0152.087] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x41980, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1
	[0152.087] ResetEvent (hEvent=0xfc) returned 1
	[0152.087] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.107] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6094fb10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x35980, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1
	[0152.108] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x81e8ee40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERXIMP.ADD", cAlternateFileName="")) returned 1
	[0152.108] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cdf900, ftCreationTime.dwHighDateTime=0x1cac26b, ftLastAccessTime.dwLowDateTime=0x5221e250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52cdf900, ftLastWriteTime.dwHighDateTime=0x1cac26b, nFileSizeHigh=0x0, nFileSizeLow=0x1aecb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1
	[0152.108] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e14a00, ftCreationTime.dwHighDateTime=0x1cac1f0, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8e14a00, ftLastWriteTime.dwHighDateTime=0x1cac1f0, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="EXCELE~1.MAN")) returned 1
	[0152.108] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd64d0300, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd64d0300, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x17d6360, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1
	[0152.108] ResetEvent (hEvent=0xfc) returned 1
	[0152.108] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.114] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51bd600, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd51bd600, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0xbd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="EXCELC~1.DLL")) returned 1
	[0152.114] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x522443b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x1372c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRM.XML", cAlternateFileName="")) returned 1
	[0152.115] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x60acc8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x13574, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRMV.XML", cAlternateFileName="")) returned 1
	[0152.115] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x73f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1
	[0152.115] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd3159200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x533a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTRACT.DLL", cAlternateFileName="")) returned 1
	[0152.115] ResetEvent (hEvent=0xfc) returned 1
	[0152.115] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.122] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd01e3b60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x18bf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1
	[0152.122] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.DLL", cAlternateFileName="")) returned 1
	[0152.123] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1
	[0152.123] GetProcessHeap () returned 0x800000
	[0152.123] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0152.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0152.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0152.123] GetProcessHeap () returned 0x800000
	[0152.123] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8be900
	[0152.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0152.127] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.128] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75974300, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75974300, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITL.ICO", cAlternateFileName="")) returned 1
	[0152.128] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITS.ICO", cAlternateFileName="")) returned 1
	[0152.128] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITY.CFG", cAlternateFileName="")) returned 1
	[0152.128] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPT.CFG", cAlternateFileName="")) returned 1
	[0152.128] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTL.ICO", cAlternateFileName="")) returned 1
	[0152.128] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTS.ICO", cAlternateFileName="")) returned 1
	[0152.128] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.CFG", cAlternateFileName="")) returned 1
	[0152.129] ResetEvent (hEvent=0xfc) returned 1
	[0152.129] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.222] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8ed400, ftCreationTime.dwHighDateTime=0x1c68837, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec8ed400, ftLastWriteTime.dwHighDateTime=0x1c68837, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.ICO", cAlternateFileName="")) returned 1
	[0152.222] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFRES.CFG", cAlternateFileName="")) returned 1
	[0152.223] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONFLICT.ICO", cAlternateFileName="")) returned 1
	[0152.223] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.CFG", cAlternateFileName="")) returned 1
	[0152.223] ResetEvent (hEvent=0xfc) returned 1
	[0152.223] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.227] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTL.ICO", cAlternateFileName="")) returned 1
	[0152.227] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTS.ICO", cAlternateFileName="")) returned 1
	[0152.227] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLIST.CFG", cAlternateFileName="")) returned 1
	[0152.228] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTL.ICO", cAlternateFileName="")) returned 1
	[0152.228] ResetEvent (hEvent=0xfc) returned 1
	[0152.228] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.233] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTS.ICO", cAlternateFileName="")) returned 1
	[0152.233] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOC.CFG", cAlternateFileName="")) returned 1
	[0152.234] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCL.ICO", cAlternateFileName="")) returned 1
	[0152.234] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCS.ICO", cAlternateFileName="")) returned 1
	[0152.234] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473e9c00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x473e9c00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEM.CFG", cAlternateFileName="")) returned 1
	[0152.234] ResetEvent (hEvent=0xfc) returned 1
	[0152.234] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.238] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEML.ICO", cAlternateFileName="")) returned 1
	[0152.238] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEMS.ICO", cAlternateFileName="")) returned 1
	[0152.238] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb999900, ftCreationTime.dwHighDateTime=0x1c451be, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb999900, ftLastWriteTime.dwHighDateTime=0x1c451be, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMAIL.CFG", cAlternateFileName="")) returned 1
	[0152.239] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0fd900, ftCreationTime.dwHighDateTime=0x1c6bc1a, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d0fd900, ftLastWriteTime.dwHighDateTime=0x1c6bc1a, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOML.ICO", cAlternateFileName="")) returned 1
	[0152.239] ResetEvent (hEvent=0xfc) returned 1
	[0152.239] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.244] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1839500, ftCreationTime.dwHighDateTime=0x1c6bc1a, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1839500, ftLastWriteTime.dwHighDateTime=0x1c6bc1a, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMS.ICO", cAlternateFileName="")) returned 1
	[0152.245] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fc900, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x486fc900, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPM.CFG", cAlternateFileName="")) returned 1
	[0152.245] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPML.ICO", cAlternateFileName="")) returned 1
	[0152.245] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPMS.ICO", cAlternateFileName="")) returned 1
	[0152.245] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97071d00, ftCreationTime.dwHighDateTime=0x1c67f43, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97071d00, ftLastWriteTime.dwHighDateTime=0x1c67f43, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSL.ICO", cAlternateFileName="")) returned 1
	[0152.245] ResetEvent (hEvent=0xfc) returned 1
	[0152.245] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.249] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7feec00, ftCreationTime.dwHighDateTime=0x1c6859b, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7feec00, ftLastWriteTime.dwHighDateTime=0x1c6859b, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSS.ICO", cAlternateFileName="")) returned 1
	[0152.250] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a0f600, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a0f600, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTE.CFG", cAlternateFileName="")) returned 1
	[0152.250] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEL.ICO", cAlternateFileName="")) returned 1
	[0152.250] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTES.ICO", cAlternateFileName="")) returned 1
	[0152.250] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142d2200, ftCreationTime.dwHighDateTime=0x1c9d96b, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x142d2200, ftLastWriteTime.dwHighDateTime=0x1c9d96b, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMMS.CFG", cAlternateFileName="")) returned 1
	[0152.250] ResetEvent (hEvent=0xfc) returned 1
	[0152.250] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.254] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273ff200, ftCreationTime.dwHighDateTime=0x1c9d96b, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x273ff200, ftLastWriteTime.dwHighDateTime=0x1c9d96b, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSSMS.CFG", cAlternateFileName="")) returned 1
	[0152.261] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFL.ICO", cAlternateFileName="")) returned 1
	[0152.261] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFS.ICO", cAlternateFileName="")) returned 1
	[0152.261] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4466a600, ftCreationTime.dwHighDateTime=0x1c9449a, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4466a600, ftLastWriteTime.dwHighDateTime=0x1c9449a, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFTMPL.CFG", cAlternateFileName="")) returned 1
	[0152.261] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c035000, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fb15d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c035000, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST.CFG", cAlternateFileName="")) returned 1
	[0152.261] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c035000, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c035000, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTIT.CFG", cAlternateFileName="")) returned 1
	[0152.261] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITL.ICO", cAlternateFileName="")) returned 1
	[0152.262] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITS.ICO", cAlternateFileName="")) returned 1
	[0152.262] ResetEvent (hEvent=0xfc) returned 1
	[0152.262] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.266] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTL.ICO", cAlternateFileName="")) returned 1
	[0152.266] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTS.ICO", cAlternateFileName="")) returned 1
	[0152.266] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCLRPT.CFG", cAlternateFileName="")) returned 1
	[0152.267] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x0, dwReserved1=0x0, cFileName="REC.CFG", cAlternateFileName="")) returned 1
	[0152.267] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECL.ICO", cAlternateFileName="")) returned 1
	[0152.267] ResetEvent (hEvent=0xfc) returned 1
	[0152.267] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.273] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECS.ICO", cAlternateFileName="")) returned 1
	[0152.273] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTE.CFG", cAlternateFileName="")) returned 1
	[0152.273] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTEL.ICO", cAlternateFileName="")) returned 1
	[0152.273] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTES.ICO", cAlternateFileName="")) returned 1
	[0152.273] ResetEvent (hEvent=0xfc) returned 1
	[0152.273] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.277] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPLTMPL.CFG", cAlternateFileName="")) returned 1
	[0152.278] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.CFG", cAlternateFileName="")) returned 1
	[0152.278] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTL.ICO", cAlternateFileName="")) returned 1
	[0152.278] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTS.ICO", cAlternateFileName="")) returned 1
	[0152.278] ResetEvent (hEvent=0xfc) returned 1
	[0152.278] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.283] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e65aa00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e65aa00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESEND.CFG", cAlternateFileName="")) returned 1
	[0152.283] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDL.ICO", cAlternateFileName="")) returned 1
	[0152.283] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDS.ICO", cAlternateFileName="")) returned 1
	[0152.283] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x216f7400, ftCreationTime.dwHighDateTime=0x1c61668, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x216f7400, ftLastWriteTime.dwHighDateTime=0x1c61668, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEM.CFG", cAlternateFileName="")) returned 1
	[0152.283] ResetEvent (hEvent=0xfc) returned 1
	[0152.283] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.287] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ecff500, ftCreationTime.dwHighDateTime=0x1c68838, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ecff500, ftLastWriteTime.dwHighDateTime=0x1c68838, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEML.ICO", cAlternateFileName="")) returned 1
	[0152.288] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3081d900, ftCreationTime.dwHighDateTime=0x1c68838, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3081d900, ftLastWriteTime.dwHighDateTime=0x1c68838, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEMS.ICO", cAlternateFileName="")) returned 1
	[0152.288] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLL.ICO", cAlternateFileName="")) returned 1
	[0152.288] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLS.ICO", cAlternateFileName="")) returned 1
	[0152.288] ResetEvent (hEvent=0xfc) returned 1
	[0152.288] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.292] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQL.ICO", cAlternateFileName="")) returned 1
	[0152.292] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQS.ICO", cAlternateFileName="")) returned 1
	[0152.293] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNL.ICO", cAlternateFileName="")) returned 1
	[0152.293] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNS.ICO", cAlternateFileName="")) returned 1
	[0152.293] ResetEvent (hEvent=0xfc) returned 1
	[0152.293] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.297] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPL.ICO", cAlternateFileName="")) returned 1
	[0152.297] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPS.ICO", cAlternateFileName="")) returned 1
	[0152.298] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTL.ICO", cAlternateFileName="")) returned 1
	[0152.298] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTS.ICO", cAlternateFileName="")) returned 1
	[0152.298] ResetEvent (hEvent=0xfc) returned 1
	[0152.298] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.299] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e65aa00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e65aa00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDCNCL.CFG", cAlternateFileName="")) returned 1
	[0152.299] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabc91200, ftCreationTime.dwHighDateTime=0x1bfc4b1, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabc91200, ftLastWriteTime.dwHighDateTime=0x1bfc4b1, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREQ.CFG", cAlternateFileName="")) returned 1
	[0152.300] ResetEvent (hEvent=0xfc) returned 1
	[0152.300] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.393] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESN.CFG", cAlternateFileName="")) returned 1
	[0152.393] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESP.CFG", cAlternateFileName="")) returned 1
	[0152.393] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96d700, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x206fcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f96d700, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREST.CFG", cAlternateFileName="")) returned 1
	[0152.393] ResetEvent (hEvent=0xfc) returned 1
	[0152.393] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.398] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ca1800, ftCreationTime.dwHighDateTime=0x1c2b07e, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84ca1800, ftLastWriteTime.dwHighDateTime=0x1c2b07e, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECREC.CFG", cAlternateFileName="")) returned 1
	[0152.398] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECL.ICO", cAlternateFileName="")) returned 1
	[0152.399] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECS.ICO", cAlternateFileName="")) returned 1
	[0152.399] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURE.CFG", cAlternateFileName="")) returned 1
	[0152.399] ResetEvent (hEvent=0xfc) returned 1
	[0152.399] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.403] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURL.ICO", cAlternateFileName="")) returned 1
	[0152.403] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURS.ICO", cAlternateFileName="")) returned 1
	[0152.403] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b799300, ftCreationTime.dwHighDateTime=0x1c61668, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b799300, ftLastWriteTime.dwHighDateTime=0x1c61668, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHARING.CFG", cAlternateFileName="")) returned 1
	[0152.403] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.CFG", cAlternateFileName="")) returned 1
	[0152.404] ResetEvent (hEvent=0xfc) returned 1
	[0152.404] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.408] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNL.ICO", cAlternateFileName="")) returned 1
	[0152.408] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNS.ICO", cAlternateFileName="")) returned 1
	[0152.408] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMEE.CFG", cAlternateFileName="")) returned 1
	[0152.408] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMES.CFG", cAlternateFileName="")) returned 1
	[0152.408] ResetEvent (hEvent=0xfc) returned 1
	[0152.408] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.413] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff90d00, ftCreationTime.dwHighDateTime=0x1c666e6, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ff90d00, ftLastWriteTime.dwHighDateTime=0x1c666e6, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSL.ICO", cAlternateFileName="")) returned 1
	[0152.413] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac132a00, ftCreationTime.dwHighDateTime=0x1c6859b, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac132a00, ftLastWriteTime.dwHighDateTime=0x1c6859b, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSS.ICO", cAlternateFileName="")) returned 1
	[0152.413] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASK.CFG", cAlternateFileName="")) returned 1
	[0152.413] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACC.CFG", cAlternateFileName="")) returned 1
	[0152.413] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCL.ICO", cAlternateFileName="")) returned 1
	[0152.413] ResetEvent (hEvent=0xfc) returned 1
	[0152.413] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.422] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCS.ICO", cAlternateFileName="")) returned 1
	[0152.422] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDEC.CFG", cAlternateFileName="")) returned 1
	[0152.422] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECL.ICO", cAlternateFileName="")) returned 1
	[0152.422] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x217a650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECS.ICO", cAlternateFileName="")) returned 1
	[0152.422] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x217a650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKL.ICO", cAlternateFileName="")) returned 1
	[0152.422] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c80400, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50c80400, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQ.CFG", cAlternateFileName="")) returned 1
	[0152.423] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQL.ICO", cAlternateFileName="")) returned 1
	[0152.423] ResetEvent (hEvent=0xfc) returned 1
	[0152.423] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.547] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQS.ICO", cAlternateFileName="")) returned 1
	[0152.547] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x21a07b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKS.ICO", cAlternateFileName="")) returned 1
	[0152.547] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f93100, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51f93100, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 1
	[0152.547] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f93100, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51f93100, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 0
	[0152.547] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0152.548] GetProcessHeap () returned 0x800000
	[0152.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0152.548] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0152.548] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0152.548] GetProcessHeap () returned 0x800000
	[0152.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0152.549] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x88933, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRENCH.LNG", cAlternateFileName="")) returned 1
	[0152.549] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd02ee500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x17d368, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1
	[0152.549] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76567200, ftCreationTime.dwHighDateTime=0x1cbc9ed, ftLastAccessTime.dwLowDateTime=0xd7980ce0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x76567200, ftLastWriteTime.dwHighDateTime=0x1cbc9ed, nFileSizeHigh=0x0, nFileSizeLow=0x26cb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="GFX.DLL", cAlternateFileName="")) returned 1
	[0152.549] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f91a00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x52abf210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66f91a00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x45a180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1
	[0152.549] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f91a00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66f91a00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2a6b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKPowerPoint.dll", cAlternateFileName="GKPOWE~1.DLL")) returned 1
	[0152.549] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65c7ed00, ftCreationTime.dwHighDateTime=0x1cab8ab, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65c7ed00, ftLastWriteTime.dwHighDateTime=0x1cab8ab, nFileSizeHigh=0x0, nFileSizeLow=0x2f8580, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKWord.dll", cAlternateFileName="")) returned 1
	[0152.549] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x52befd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x623b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.EXE", cAlternateFileName="")) returned 1
	[0152.549] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ca8e00, ftCreationTime.dwHighDateTime=0x1cac1de, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2ca8e00, ftLastWriteTime.dwHighDateTime=0x1cac1de, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.exe.manifest", cAlternateFileName="GRAPHE~1.MAN")) returned 1
	[0152.549] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f5d600, ftCreationTime.dwHighDateTime=0x1c3b950, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32f5d600, ftLastWriteTime.dwHighDateTime=0x1c3b950, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.ICO", cAlternateFileName="")) returned 1
	[0152.549] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1
	[0152.549] GetProcessHeap () returned 0x800000
	[0152.550] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8be900
	[0152.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0152.550] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.550] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1
	[0152.550] GetProcessHeap () returned 0x800000
	[0152.550] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0152.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0152.574] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.574] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1
	[0152.574] GetProcessHeap () returned 0x800000
	[0152.574] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0152.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0152.579] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.580] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1
	[0152.580] GetProcessHeap () returned 0x800000
	[0152.580] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0152.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0152.584] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.584] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 1
	[0152.585] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 0
	[0152.585] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0152.585] GetProcessHeap () returned 0x800000
	[0152.585] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0152.585] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ManagedObjects", cAlternateFileName="MANAGE~1")) returned 1
	[0152.585] GetProcessHeap () returned 0x800000
	[0152.585] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0152.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0152.591] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.591] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 1
	[0152.591] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcf1000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcf1000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 0
	[0152.591] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0152.591] GetProcessHeap () returned 0x800000
	[0152.591] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0152.591] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 1
	[0152.591] GetProcessHeap () returned 0x800000
	[0152.591] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0152.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0152.592] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.592] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Management.cer", cAlternateFileName="MANAGE~1.CER")) returned 1
	[0152.592] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 1
	[0152.592] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0x0, cFileName="RELAY.CER", cAlternateFileName="")) returned 0
	[0152.592] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0152.592] GetProcessHeap () returned 0x800000
	[0152.592] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0152.592] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Servers", cAlternateFileName="")) returned 0
	[0152.592] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0152.593] GetProcessHeap () returned 0x800000
	[0152.593] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0152.593] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 1
	[0152.593] GetProcessHeap () returned 0x800000
	[0152.593] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0152.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0152.598] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.598] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1
	[0152.598] GetProcessHeap () returned 0x800000
	[0152.598] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0152.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0152.602] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.603] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", cAlternateFileName="VERISI~1.CER")) returned 1
	[0152.603] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSign_Class_3_Public_Primary_CA.cer", cAlternateFileName="VERISI~2.CER")) returned 1
	[0152.603] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 1
	[0152.603] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 0
	[0152.603] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0152.604] GetProcessHeap () returned 0x800000
	[0152.604] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0152.604] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 0
	[0152.604] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0152.604] GetProcessHeap () returned 0x800000
	[0152.604] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0152.604] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 0
	[0152.604] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0152.605] GetProcessHeap () returned 0x800000
	[0152.605] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0152.605] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sounds", cAlternateFileName="")) returned 1
	[0152.605] GetProcessHeap () returned 0x800000
	[0152.605] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0152.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0152.605] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.605] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="People", cAlternateFileName="")) returned 1
	[0152.606] GetProcessHeap () returned 0x800000
	[0152.606] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0152.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0152.608] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.608] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604d91d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUGH.WAV", cAlternateFileName="")) returned 1
	[0152.608] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7860, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIGGLE.WAV", cAlternateFileName="")) returned 1
	[0152.608] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="HICCUP.WAV", cAlternateFileName="")) returned 1
	[0152.608] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x58adaa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMHMM.WAV", cAlternateFileName="")) returned 1
	[0152.608] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNEEZE.WAV", cAlternateFileName="")) returned 1
	[0152.608] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="THROAT.WAV", cAlternateFileName="")) returned 1
	[0152.608] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 1
	[0152.608] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0x0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 0
	[0152.608] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0152.609] GetProcessHeap () returned 0x800000
	[0152.609] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0152.609] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1
	[0152.609] GetProcessHeap () returned 0x800000
	[0152.609] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0152.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0152.611] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.611] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x84e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALARM.WAV", cAlternateFileName="")) returned 1
	[0152.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUZZ.WAV", cAlternateFileName="")) returned 1
	[0152.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d003d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd686, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1
	[0152.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x100ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADAR.WAV", cAlternateFileName="")) returned 1
	[0152.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOT.WAV", cAlternateFileName="")) returned 1
	[0152.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xea72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIBE.WAV", cAlternateFileName="")) returned 1
	[0152.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e54ee50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 1
	[0152.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e54ee50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WARN.WAV", cAlternateFileName="")) returned 0
	[0152.612] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0152.613] GetProcessHeap () returned 0x800000
	[0152.613] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0152.613] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1
	[0152.613] GetProcessHeap () returned 0x800000
	[0152.613] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0152.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0152.615] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.615] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAN.WAV", cAlternateFileName="")) returned 1
	[0152.615] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51ce9230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPLER.WAV", cAlternateFileName="")) returned 1
	[0152.615] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa412, dwReserved0=0x0, dwReserved1=0x0, cFileName="HORN.WAV", cAlternateFileName="")) returned 1
	[0152.615] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOT.WAV", cAlternateFileName="")) returned 1
	[0152.615] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf548, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOVEL.WAV", cAlternateFileName="")) returned 1
	[0152.615] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xedd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPLASH.WAV", cAlternateFileName="")) returned 1
	[0152.616] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1
	[0152.616] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e316a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e316a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 0
	[0152.616] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0152.617] GetProcessHeap () returned 0x800000
	[0152.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0152.617] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 0
	[0152.617] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0152.617] GetProcessHeap () returned 0x800000
	[0152.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0152.617] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolBMPs", cAlternateFileName="")) returned 1
	[0152.617] GetProcessHeap () returned 0x800000
	[0152.617] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0152.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0152.621] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.623] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7093c400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="CALEND~1.JPG")) returned 1
	[0152.623] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7093c400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="CALEND~1.BMP")) returned 1
	[0152.623] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImages.bmp", cAlternateFileName="CHESSI~1.BMP")) returned 1
	[0152.623] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChessIconImagesMask.bmp", cAlternateFileName="CHESSI~2.BMP")) returned 1
	[0152.623] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImage.jpg", cAlternateFileName="CREATE~1.JPG")) returned 1
	[0152.623] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CreateSpaceImageMask.bmp", cAlternateFileName="CREATE~1.BMP")) returned 1
	[0152.623] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImages.jpg", cAlternateFileName="DATALI~1.JPG")) returned 1
	[0152.623] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71c4f100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImagesMask.bmp", cAlternateFileName="DATALI~1.BMP")) returned 1
	[0152.623] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImages.jpg", cAlternateFileName="DATAVI~1.JPG")) returned 1
	[0152.624] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataViewIconImagesMask.bmp", cAlternateFileName="DATAVI~1.BMP")) returned 1
	[0152.624] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2eaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1
	[0152.624] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 1
	[0152.624] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72f61e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImage.jpg", cAlternateFileName="FORM_S~1.JPG")) returned 1
	[0152.624] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3618, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form_StatusImageMask.bmp", cAlternateFileName="FORM_S~1.BMP")) returned 1
	[0152.624] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c0e850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIP.JPG", cAlternateFileName="")) returned 1
	[0152.624] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c0e850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIPMASK.BMP", cAlternateFileName="")) returned 1
	[0152.624] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIcon.jpg", cAlternateFileName="INFORM~1.JPG")) returned 1
	[0152.624] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74274b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74274b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIconMask.bmp", cAlternateFileName="INFORM~1.BMP")) returned 1
	[0152.624] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x675aa300, ftCreationTime.dwHighDateTime=0x1c9f921, ftLastAccessTime.dwLowDateTime=0x581a1510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x675aa300, ftLastWriteTime.dwHighDateTime=0x1c9f921, nFileSizeHigh=0x0, nFileSizeLow=0xceed, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginDialogBackground.jpg", cAlternateFileName="LOGIND~1.JPG")) returned 1
	[0152.625] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24Images.jpg", cAlternateFileName="LOGINT~1.JPG")) returned 1
	[0152.625] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24ImagesMask.bmp", cAlternateFileName="LOGINT~1.BMP")) returned 1
	[0152.625] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x25e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImages.jpg", cAlternateFileName="MESSAG~2.JPG")) returned 1
	[0152.625] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1
	[0152.625] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x22f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1
	[0152.625] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75587800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75587800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImagesMask.bmp", cAlternateFileName="MESSAG~2.BMP")) returned 1
	[0152.625] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b7a400, ftCreationTime.dwHighDateTime=0x1c9e8b3, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46b7a400, ftLastWriteTime.dwHighDateTime=0x1c9e8b3, nFileSizeHigh=0x0, nFileSizeLow=0x3efd, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackground.jpg", cAlternateFileName="NOTIFI~1.JPG")) returned 1
	[0152.625] ResetEvent (hEvent=0xfc) returned 1
	[0152.625] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.722] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50410c00, ftCreationTime.dwHighDateTime=0x1c9e8b3, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50410c00, ftLastWriteTime.dwHighDateTime=0x1c9e8b3, nFileSizeHigh=0x0, nFileSizeLow=0x40aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackgroundRTL.jpg", cAlternateFileName="NOTIFI~2.JPG")) returned 1
	[0152.723] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79304700, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79304700, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierCloseButton.jpg", cAlternateFileName="NO00D7~1.JPG")) returned 1
	[0152.727] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f262800, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a539c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f262800, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableDownArrow.jpg", cAlternateFileName="NO74B3~1.JPG")) returned 1
	[0152.728] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b9af00, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82b9af00, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableUpArrow.jpg", cAlternateFileName="NOTIFI~3.JPG")) returned 1
	[0152.728] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864d3600, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x864d3600, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDownArrow.jpg", cAlternateFileName="NOTIFI~4.JPG")) returned 1
	[0152.728] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e0bd00, ftCreationTime.dwHighDateTime=0x1c91151, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89e0bd00, ftLastWriteTime.dwHighDateTime=0x1c91151, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierUpArrow.jpg", cAlternateFileName="NO6669~1.JPG")) returned 1
	[0152.728] ResetEvent (hEvent=0xfc) returned 1
	[0152.728] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.731] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8472000, ftCreationTime.dwHighDateTime=0x1c90f02, ftLastAccessTime.dwLowDateTime=0x59590d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8472000, ftLastWriteTime.dwHighDateTime=0x1c90f02, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMask.bmp", cAlternateFileName="NOTIFI~1.BMP")) returned 1
	[0152.731] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a588200, ftCreationTime.dwHighDateTime=0x1c90f02, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3a588200, ftLastWriteTime.dwHighDateTime=0x1c90f02, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMaskRTL.bmp", cAlternateFileName="NOTIFI~2.BMP")) returned 1
	[0152.732] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7689a500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7689a500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImages.jpg", cAlternateFileName="OUTLIN~1.JPG")) returned 1
	[0152.732] ResetEvent (hEvent=0xfc) returned 1
	[0152.732] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.737] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6c393490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1938, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlineToolIconImagesMask.bmp", cAlternateFileName="OUTLIN~1.BMP")) returned 1
	[0152.738] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImages.jpg", cAlternateFileName="OUTOFS~1.JPG")) returned 1
	[0152.738] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59c42b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImagesMask.bmp", cAlternateFileName="OUTOFS~1.BMP")) returned 1
	[0152.738] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a3c500, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a3c500, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x5203, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImages.jpg", cAlternateFileName="PICTUR~1.JPG")) returned 1
	[0152.738] ResetEvent (hEvent=0xfc) returned 1
	[0152.738] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.831] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1a5d00, ftCreationTime.dwHighDateTime=0x1ca032e, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe1a5d00, ftLastWriteTime.dwHighDateTime=0x1ca032e, nFileSizeHigh=0x0, nFileSizeLow=0x1238, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturesToolIconImagesMask.bmp", cAlternateFileName="PICTUR~1.BMP")) returned 1
	[0152.831] ResetEvent (hEvent=0xfc) returned 1
	[0152.831] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.834] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIcon.jpg", cAlternateFileName="QUESTI~1.JPG")) returned 1
	[0152.834] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIconMask.bmp", cAlternateFileName="QUESTI~1.BMP")) returned 1
	[0152.834] ResetEvent (hEvent=0xfc) returned 1
	[0152.834] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.836] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bad200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77bad200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x64fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16Images.jpg", cAlternateFileName="SHARED~1.JPG")) returned 1
	[0152.836] ResetEvent (hEvent=0xfc) returned 1
	[0152.836] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.838] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16ImagesMask.bmp", cAlternateFileName="SHARED~1.BMP")) returned 1
	[0152.838] ResetEvent (hEvent=0xfc) returned 1
	[0152.838] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.845] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1963, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24Images.jpg", cAlternateFileName="SHARED~2.JPG")) returned 1
	[0152.845] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24ImagesMask.bmp", cAlternateFileName="SHARED~2.BMP")) returned 1
	[0152.845] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SketchIconImages.bmp", cAlternateFileName="SKETCH~1.BMP")) returned 1
	[0152.845] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupicons.jpg", cAlternateFileName="SPACEB~1.JPG")) returned 1
	[0152.846] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacebackupiconsmask.bmp", cAlternateFileName="SPACEB~1.BMP")) returned 1
	[0152.846] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOPICON.JPG", cAlternateFileName="")) returned 1
	[0152.846] ResetEvent (hEvent=0xfc) returned 1
	[0152.846] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.848] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ebff00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ebff00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="StopIconMask.bmp", cAlternateFileName="STOPIC~1.BMP")) returned 1
	[0152.848] ResetEvent (hEvent=0xfc) returned 1
	[0152.848] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.850] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d554a00, ftCreationTime.dwHighDateTime=0x1ca0b45, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d554a00, ftLastWriteTime.dwHighDateTime=0x1ca0b45, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImages256Colors.bmp", cAlternateFileName="TASKBA~1.BMP")) returned 1
	[0152.850] ResetEvent (hEvent=0xfc) returned 1
	[0152.850] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.855] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cd49300, ftCreationTime.dwHighDateTime=0x1ca0b45, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd49300, ftLastWriteTime.dwHighDateTime=0x1ca0b45, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImagesMask256Colors.bmp", cAlternateFileName="TASKBA~2.BMP")) returned 1
	[0152.855] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1d2c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5adf6ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a1d2c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2605, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImage.jpg", cAlternateFileName="TIPSIM~1.JPG")) returned 1
	[0152.855] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1d2c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ae1d030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a1d2c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImageMask.bmp", cAlternateFileName="TIPSIM~1.BMP")) returned 1
	[0152.855] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSignLogo.jpg", cAlternateFileName="VERISI~1.JPG")) returned 1
	[0152.856] ResetEvent (hEvent=0xfc) returned 1
	[0152.856] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.859] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bafc00, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90bafc00, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x5431, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImages.jpg", cAlternateFileName="WEBTOO~1.JPG")) returned 1
	[0152.859] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8862c100, ftCreationTime.dwHighDateTime=0x1ca032f, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8862c100, ftLastWriteTime.dwHighDateTime=0x1ca032f, nFileSizeHigh=0x0, nFileSizeLow=0x1538, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolIconImagesMask.bmp", cAlternateFileName="WEBTOO~1.BMP")) returned 1
	[0152.859] ResetEvent (hEvent=0xfc) returned 1
	[0152.859] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.862] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708c13f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1995, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImages16x16.jpg", cAlternateFileName="WEBTOO~2.JPG")) returned 1
	[0152.862] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b4e5900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebToolImagesMask16x16.bmp", cAlternateFileName="WEBTOO~2.BMP")) returned 1
	[0152.862] ResetEvent (hEvent=0xfc) returned 1
	[0152.862] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.863] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2308, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImages.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1
	[0152.864] ResetEvent (hEvent=0xfc) returned 1
	[0152.864] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.866] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="WSSFIL~1.BMP")) returned 1
	[0152.866] ResetEvent (hEvent=0xfc) returned 1
	[0152.866] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.869] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolIconImagesMask.bmp", cAlternateFileName="WSSFIL~1.BMP")) returned 0
	[0152.869] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0152.870] GetProcessHeap () returned 0x800000
	[0152.870] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0152.870] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolData", cAlternateFileName="")) returned 1
	[0152.870] GetProcessHeap () returned 0x800000
	[0152.870] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ce908
	[0152.870] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0152.878] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.878] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1
	[0152.878] GetProcessHeap () returned 0x800000
	[0152.878] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0152.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0152.880] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.880] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar", cAlternateFileName="")) returned 1
	[0152.880] GetProcessHeap () returned 0x800000
	[0152.880] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0152.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0152.881] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.881] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b62000, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4b62000, ftLastWriteTime.dwHighDateTime=0x1ca0408, nFileSizeHigh=0x0, nFileSizeLow=0x3424, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImages.jpg", cAlternateFileName="CALEND~1.JPG")) returned 1
	[0152.881] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb2cb800, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb2cb800, ftLastWriteTime.dwHighDateTime=0x1ca0408, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarToolIconImagesMask.bmp", cAlternateFileName="CALEND~1.BMP")) returned 1
	[0152.882] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3fa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarViewButtonImages.jpg", cAlternateFileName="CALEND~2.JPG")) returned 1
	[0152.882] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52b0b4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b49, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImage.jpg", cAlternateFileName="GLOBEB~1.JPG")) returned 1
	[0152.882] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="GLOBEB~1.BMP")) returned 1
	[0152.882] ResetEvent (hEvent=0xfc) returned 1
	[0152.882] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.980] ResetEvent (hEvent=0xfc) returned 1
	[0152.980] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0152.984] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f8600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c7f8600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobeButtonImageMask.bmp", cAlternateFileName="GLOBEB~1.BMP")) returned 0
	[0152.984] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0152.985] GetProcessHeap () returned 0x800000
	[0152.985] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0152.985] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommonData", cAlternateFileName="COMMON~1")) returned 1
	[0152.985] GetProcessHeap () returned 0x800000
	[0152.985] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0152.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0153.028] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.029] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x633fe700, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x633fe700, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x44c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Auto.jpg", cAlternateFileName="ALERTI~3.JPG")) returned 1
	[0153.029] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3390df00, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3390df00, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_AutoMask.bmp", cAlternateFileName="AL1E3B~1.BMP")) returned 1
	[0153.029] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3356, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHigh.jpg", cAlternateFileName="ALERTI~1.JPG")) returned 1
	[0153.029] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHighMask.bmp", cAlternateFileName="ALERTI~1.BMP")) returned 1
	[0153.029] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLow.jpg", cAlternateFileName="ALERTI~4.JPG")) returned 1
	[0153.029] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db0b300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7db0b300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLowMask.bmp", cAlternateFileName="AL1F1D~1.BMP")) returned 1
	[0153.029] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc125fc00, ftCreationTime.dwHighDateTime=0x1c95fd3, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc125fc00, ftLastWriteTime.dwHighDateTime=0x1c95fd3, nFileSizeHigh=0x0, nFileSizeLow=0x480d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHigh.jpg", cAlternateFileName="ALERTI~2.JPG")) returned 1
	[0153.029] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b558100, ftCreationTime.dwHighDateTime=0x1c95fd2, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b558100, ftLastWriteTime.dwHighDateTime=0x1c95fd2, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHighMask.bmp", cAlternateFileName="ALERTI~2.BMP")) returned 1
	[0153.029] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5eab000, ftCreationTime.dwHighDateTime=0x1c95fd3, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5eab000, ftLastWriteTime.dwHighDateTime=0x1c95fd3, nFileSizeHigh=0x0, nFileSizeLow=0x46de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOff.jpg", cAlternateFileName="AL97F4~1.JPG")) returned 1
	[0153.030] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427c8f00, ftCreationTime.dwHighDateTime=0x1c95fd2, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x427c8f00, ftLastWriteTime.dwHighDateTime=0x1c95fd2, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOffMask.bmp", cAlternateFileName="ALFE83~1.BMP")) returned 1
	[0153.030] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b7f600, ftCreationTime.dwHighDateTime=0x1c95f2a, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2b7f600, ftLastWriteTime.dwHighDateTime=0x1c95f2a, nFileSizeHigh=0x0, nFileSizeLow=0x13ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_High.jpg", cAlternateFileName="AL5980~1.JPG")) returned 1
	[0153.030] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3177400, ftCreationTime.dwHighDateTime=0x1c95f2a, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3177400, ftLastWriteTime.dwHighDateTime=0x1c95f2a, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_HighMask.bmp", cAlternateFileName="ALERTI~3.BMP")) returned 1
	[0153.030] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefeaa500, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefeaa500, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x41de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Medium.jpg", cAlternateFileName="ALF33C~1.JPG")) returned 1
	[0153.030] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd34e6d00, ftCreationTime.dwHighDateTime=0x1c95fc8, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd34e6d00, ftLastWriteTime.dwHighDateTime=0x1c95fc8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_MediumMAsk.bmp", cAlternateFileName="ALERTI~4.BMP")) returned 1
	[0153.030] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e983f00, ftCreationTime.dwHighDateTime=0x1c95fc9, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e983f00, ftLastWriteTime.dwHighDateTime=0x1c95fc9, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Off.jpg", cAlternateFileName="AL0F2A~1.JPG")) returned 1
	[0153.030] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x258f8e00, ftCreationTime.dwHighDateTime=0x1c95fc9, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x258f8e00, ftLastWriteTime.dwHighDateTime=0x1c95fc9, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_OffMask.bmp", cAlternateFileName="ALA9A1~1.BMP")) returned 1
	[0153.030] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbb75100, ftCreationTime.dwHighDateTime=0x1c9bcb4, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbb75100, ftLastWriteTime.dwHighDateTime=0x1c9bcb4, nFileSizeHigh=0x0, nFileSizeLow=0x2256, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImage.jpg", cAlternateFileName="COMMSI~1.JPG")) returned 1
	[0153.030] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d183d00, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d183d00, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMask.bmp", cAlternateFileName="COMMSI~2.BMP")) returned 1
	[0153.030] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMaskSmall.bmp", cAlternateFileName="COMMSI~1.BMP")) returned 1
	[0153.030] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1de3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageSmall.jpg", cAlternateFileName="COMMSI~2.JPG")) returned 1
	[0153.031] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c468e00, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c468e00, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x22c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImage.jpg", cAlternateFileName="COMMSO~2.JPG")) returned 1
	[0153.031] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf59600, ftCreationTime.dwHighDateTime=0x1c9bcb5, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bf59600, ftLastWriteTime.dwHighDateTime=0x1c9bcb5, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMask.bmp", cAlternateFileName="COMMSO~1.BMP")) returned 1
	[0153.031] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMaskSmall.bmp", cAlternateFileName="COMMSO~2.BMP")) returned 1
	[0153.031] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1e000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ee1e000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageSmall.jpg", cAlternateFileName="COMMSO~1.JPG")) returned 1
	[0153.031] ResetEvent (hEvent=0xfc) returned 1
	[0153.031] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.123] ResetEvent (hEvent=0xfc) returned 1
	[0153.123] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.125] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1
	[0153.125] ResetEvent (hEvent=0xfc) returned 1
	[0153.125] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.127] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1
	[0153.128] ResetEvent (hEvent=0xfc) returned 1
	[0153.128] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.130] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c135400, ftCreationTime.dwHighDateTime=0x1ca0330, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c135400, ftLastWriteTime.dwHighDateTime=0x1ca0330, nFileSizeHigh=0x0, nFileSizeLow=0x1fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIcon.jpg", cAlternateFileName="UNREAD~1.JPG")) returned 1
	[0153.130] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb98fc100, ftCreationTime.dwHighDateTime=0x1ca0330, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb98fc100, ftLastWriteTime.dwHighDateTime=0x1ca0330, nFileSizeHigh=0x0, nFileSizeLow=0x1ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImages.jpg", cAlternateFileName="UNREAD~2.JPG")) returned 1
	[0153.130] ResetEvent (hEvent=0xfc) returned 1
	[0153.130] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.132] ResetEvent (hEvent=0xfc) returned 1
	[0153.132] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.133] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90c2000, ftCreationTime.dwHighDateTime=0x1ca035a, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb90c2000, ftLastWriteTime.dwHighDateTime=0x1ca035a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 1
	[0153.133] ResetEvent (hEvent=0xfc) returned 1
	[0153.134] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.135] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90c2000, ftCreationTime.dwHighDateTime=0x1ca035a, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb90c2000, ftLastWriteTime.dwHighDateTime=0x1ca035a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 0
	[0153.135] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0153.136] GetProcessHeap () returned 0x800000
	[0153.136] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0153.136] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 1
	[0153.136] GetProcessHeap () returned 0x800000
	[0153.136] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0153.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0153.136] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.137] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericon.jpg", cAlternateFileName="COMPUT~1.JPG")) returned 1
	[0153.137] ResetEvent (hEvent=0xfc) returned 1
	[0153.137] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.138] ResetEvent (hEvent=0xfc) returned 1
	[0153.138] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.140] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 1
	[0153.140] ResetEvent (hEvent=0xfc) returned 1
	[0153.140] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.141] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80130d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 0
	[0153.141] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0153.142] GetProcessHeap () returned 0x800000
	[0153.142] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0153.142] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion", cAlternateFileName="DISCUS~1")) returned 1
	[0153.142] GetProcessHeap () returned 0x800000
	[0153.142] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0153.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0153.151] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.152] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0009600, ftCreationTime.dwHighDateTime=0x1ca0588, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0009600, ftLastWriteTime.dwHighDateTime=0x1ca0588, nFileSizeHigh=0x0, nFileSizeLow=0x393c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1
	[0153.152] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac9e00, ftCreationTime.dwHighDateTime=0x1ca033a, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9ac9e00, ftLastWriteTime.dwHighDateTime=0x1ca033a, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 1
	[0153.152] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac9e00, ftCreationTime.dwHighDateTime=0x1ca033a, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9ac9e00, ftLastWriteTime.dwHighDateTime=0x1ca033a, nFileSizeHigh=0x0, nFileSizeLow=0x1738, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 0
	[0153.152] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0153.152] GetProcessHeap () returned 0x800000
	[0153.152] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0153.152] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentShare", cAlternateFileName="DOCUME~1")) returned 1
	[0153.152] GetProcessHeap () returned 0x800000
	[0153.152] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0153.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0153.163] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.163] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1
	[0153.163] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab11, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 0
	[0153.163] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0153.163] GetProcessHeap () returned 0x800000
	[0153.163] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0153.163] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveDocumentReview", cAlternateFileName="GROOVE~1")) returned 1
	[0153.163] GetProcessHeap () returned 0x800000
	[0153.163] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0153.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0153.167] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.167] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2519, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImage.jpg", cAlternateFileName="ACTIVE~1.JPG")) returned 1
	[0153.167] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81443a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImageMask.bmp", cAlternateFileName="ACTIVE~1.BMP")) returned 1
	[0153.167] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BodyPaneBackground.jpg", cAlternateFileName="BODYPA~1.JPG")) returned 1
	[0153.167] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x24ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImage.jpg", cAlternateFileName="INACTI~1.JPG")) returned 1
	[0153.167] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImageMask.bmp", cAlternateFileName="INACTI~1.BMP")) returned 1
	[0153.168] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImages.jpg", cAlternateFileName="MARKUP~1.JPG")) returned 1
	[0153.168] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="MARKUP~1.BMP")) returned 1
	[0153.168] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="MARKUP~1.BMP")) returned 0
	[0153.168] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0153.169] GetProcessHeap () returned 0x800000
	[0153.169] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0153.169] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms", cAlternateFileName="GROOVE~3")) returned 1
	[0153.169] GetProcessHeap () returned 0x800000
	[0153.169] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0153.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0153.178] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.183] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82756700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1
	[0153.183] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1
	[0153.183] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1
	[0153.184] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1
	[0153.184] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1
	[0153.184] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1
	[0153.184] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1
	[0153.184] ResetEvent (hEvent=0xfc) returned 1
	[0153.184] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.186] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1
	[0153.187] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1
	[0153.187] ResetEvent (hEvent=0xfc) returned 1
	[0153.187] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.190] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1
	[0153.190] ResetEvent (hEvent=0xfc) returned 1
	[0153.190] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.279] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1
	[0153.279] ResetEvent (hEvent=0xfc) returned 1
	[0153.279] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.373] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1
	[0153.374] ResetEvent (hEvent=0xfc) returned 1
	[0153.374] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.379] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1
	[0153.379] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1
	[0153.379] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1
	[0153.380] ResetEvent (hEvent=0xfc) returned 1
	[0153.380] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.381] ResetEvent (hEvent=0xfc) returned 1
	[0153.382] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.383] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1
	[0153.383] ResetEvent (hEvent=0xfc) returned 1
	[0153.383] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.385] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1
	[0153.385] ResetEvent (hEvent=0xfc) returned 1
	[0153.385] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.387] ResetEvent (hEvent=0xfc) returned 1
	[0153.387] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.389] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1
	[0153.390] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_disable.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1
	[0153.390] ResetEvent (hEvent=0xfc) returned 1
	[0153.390] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.391] ResetEvent (hEvent=0xfc) returned 1
	[0153.391] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.393] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUAC31~1.GIF")) returned 1
	[0153.394] ResetEvent (hEvent=0xfc) returned 1
	[0153.394] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.398] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1
	[0153.398] ResetEvent (hEvent=0xfc) returned 1
	[0153.398] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.403] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_disable.gif", cAlternateFileName="BUABE1~1.GIF")) returned 1
	[0153.403] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BU1E84~1.GIF")) returned 1
	[0153.403] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BU7DFA~1.GIF")) returned 1
	[0153.403] ResetEvent (hEvent=0xfc) returned 1
	[0153.404] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.406] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_disable.gif", cAlternateFileName="BUC143~1.GIF")) returned 1
	[0153.406] ResetEvent (hEvent=0xfc) returned 1
	[0153.406] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.407] ResetEvent (hEvent=0xfc) returned 1
	[0153.408] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.409] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1
	[0153.409] ResetEvent (hEvent=0xfc) returned 1
	[0153.409] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.411] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FieldTypePreview", cAlternateFileName="FIELDT~1")) returned 1
	[0153.411] GetProcessHeap () returned 0x800000
	[0153.411] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e40068
	[0153.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0153.412] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.412] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x368c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attachments.jpg", cAlternateFileName="ATTACH~1.JPG")) returned 1
	[0153.412] ResetEvent (hEvent=0xfc) returned 1
	[0153.412] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.413] ResetEvent (hEvent=0xfc) returned 1
	[0153.413] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.499] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREAK.JPG", cAlternateFileName="")) returned 1
	[0153.499] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.JPG", cAlternateFileName="")) returned 1
	[0153.500] ResetEvent (hEvent=0xfc) returned 1
	[0153.500] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.508] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKBOX.JPG", cAlternateFileName="")) returned 1
	[0153.508] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMBOBOX.JPG", cAlternateFileName="")) returned 1
	[0153.509] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x36bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.JPG", cAlternateFileName="")) returned 1
	[0153.509] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.JPG", cAlternateFileName="")) returned 1
	[0153.509] ResetEvent (hEvent=0xfc) returned 1
	[0153.509] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.511] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATE.JPG", cAlternateFileName="")) returned 1
	[0153.511] ResetEvent (hEvent=0xfc) returned 1
	[0153.511] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.513] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4139, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATETIME.JPG", cAlternateFileName="")) returned 1
	[0153.513] ResetEvent (hEvent=0xfc) returned 1
	[0153.513] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.516] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalInk.jpg", cAlternateFileName="DIGITA~1.JPG")) returned 1
	[0153.516] ResetEvent (hEvent=0xfc) returned 1
	[0153.517] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.519] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51f96af0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmbeddedView.jpg", cAlternateFileName="EMBEDD~1.JPG")) returned 1
	[0153.519] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e72, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADING.JPG", cAlternateFileName="")) returned 1
	[0153.519] ResetEvent (hEvent=0xfc) returned 1
	[0153.519] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.526] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x139a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMAGE.JPG", cAlternateFileName="")) returned 1
	[0153.526] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe65, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINE.JPG", cAlternateFileName="")) returned 1
	[0153.526] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTBOX.JPG", cAlternateFileName="")) returned 1
	[0153.526] ResetEvent (hEvent=0xfc) returned 1
	[0153.526] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.528] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x443a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NUMERIC.JPG", cAlternateFileName="")) returned 1
	[0153.529] ResetEvent (hEvent=0xfc) returned 1
	[0153.529] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.532] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSWORD.JPG", cAlternateFileName="")) returned 1
	[0153.532] ResetEvent (hEvent=0xfc) returned 1
	[0153.532] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.534] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIO.JPG", cAlternateFileName="")) returned 1
	[0153.534] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9342d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ad9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SectionHeading.jpg", cAlternateFileName="SECTIO~1.JPG")) returned 1
	[0153.534] ResetEvent (hEvent=0xfc) returned 1
	[0153.534] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.535] ResetEvent (hEvent=0xfc) returned 1
	[0153.535] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.623] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="StaticText.jpg", cAlternateFileName="STATIC~1.JPG")) returned 1
	[0153.623] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3983, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTAREA.JPG", cAlternateFileName="")) returned 1
	[0153.623] ResetEvent (hEvent=0xfc) returned 1
	[0153.623] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.625] ResetEvent (hEvent=0xfc) returned 1
	[0153.625] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.627] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a97, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTBOX.JPG", cAlternateFileName="")) returned 1
	[0153.628] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTVIEW.JPG", cAlternateFileName="")) returned 1
	[0153.628] ResetEvent (hEvent=0xfc) returned 1
	[0153.628] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.631] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 1
	[0153.632] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 0
	[0153.632] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0153.633] GetProcessHeap () returned 0x800000
	[0153.633] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0153.633] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1
	[0153.633] ResetEvent (hEvent=0xfc) returned 1
	[0153.633] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.639] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1
	[0153.639] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1
	[0153.639] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x805, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsDoNotTrust.html", cAlternateFileName="FORMSD~1.HTM")) returned 1
	[0153.639] ResetEvent (hEvent=0xfc) returned 1
	[0153.639] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.647] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc96, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1
	[0153.647] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x15fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1
	[0153.647] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1
	[0153.647] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1
	[0153.647] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1
	[0153.647] ResetEvent (hEvent=0xfc) returned 1
	[0153.647] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.650] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsTemplates", cAlternateFileName="FORMST~1")) returned 1
	[0153.650] GetProcessHeap () returned 0x800000
	[0153.650] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e40068
	[0153.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0153.665] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.665] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2021e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Customer Support.fdt", cAlternateFileName="CUSTOM~1.FDT")) returned 1
	[0153.665] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x20b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardware Tracker.fdt", cAlternateFileName="HARDWA~1.FDT")) returned 1
	[0153.665] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x24051, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition - Customized.fdt", cAlternateFileName="HIRING~2.FDT")) returned 1
	[0153.666] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x248db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition.fdt", cAlternateFileName="HIRING~1.FDT")) returned 1
	[0153.666] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a52fdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x17d6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POLICIES.FDT", cAlternateFileName="")) returned 1
	[0153.666] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16b33, dwReserved0=0x0, dwReserved1=0x0, cFileName="Process Library.fdt", cAlternateFileName="PROCES~1.FDT")) returned 1
	[0153.666] ResetEvent (hEvent=0xfc) returned 1
	[0153.666] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.762] ResetEvent (hEvent=0xfc) returned 1
	[0153.762] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.764] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x18ead, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status Report.fdt", cAlternateFileName="STATUS~1.FDT")) returned 1
	[0153.764] ResetEvent (hEvent=0xfc) returned 1
	[0153.764] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.766] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 1
	[0153.766] ResetEvent (hEvent=0xfc) returned 1
	[0153.766] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.774] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 0
	[0153.774] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0153.775] GetProcessHeap () returned 0x800000
	[0153.775] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0153.775] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1
	[0153.775] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1
	[0153.776] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1
	[0153.776] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1
	[0153.776] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1
	[0153.776] ResetEvent (hEvent=0xfc) returned 1
	[0153.776] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.779] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveFormsMetaData.xml", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0153.779] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENUS.JS", cAlternateFileName="")) returned 1
	[0153.779] ResetEvent (hEvent=0xfc) returned 1
	[0153.779] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.781] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5836a590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_arrow.gif", cAlternateFileName="MENU_A~1.GIF")) returned 1
	[0153.781] ResetEvent (hEvent=0xfc) returned 1
	[0153.781] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.782] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d273e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEARCH.GIF", cAlternateFileName="")) returned 1
	[0153.785] ResetEvent (hEvent=0xfc) returned 1
	[0153.785] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.787] ResetEvent (hEvent=0xfc) returned 1
	[0153.787] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.788] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x31, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1
	[0153.788] ResetEvent (hEvent=0xfc) returned 1
	[0153.788] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.791] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1
	[0153.791] ResetEvent (hEvent=0xfc) returned 1
	[0153.791] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.793] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x103f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1
	[0153.793] ResetEvent (hEvent=0xfc) returned 1
	[0153.793] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.794] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1
	[0153.794] ResetEvent (hEvent=0xfc) returned 1
	[0153.794] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.797] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.CSS", cAlternateFileName="")) returned 1
	[0153.797] ResetEvent (hEvent=0xfc) returned 1
	[0153.797] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.798] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1
	[0153.798] ResetEvent (hEvent=0xfc) returned 1
	[0153.799] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.807] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x505b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1
	[0153.807] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWBY.GIF", cAlternateFileName="")) returned 1
	[0153.807] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewDblClick.js", cAlternateFileName="VIEWDB~1.JS")) returned 1
	[0153.808] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1
	[0153.808] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 1
	[0153.808] ResetEvent (hEvent=0xfc) returned 1
	[0153.808] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.809] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 0
	[0153.809] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0153.809] GetProcessHeap () returned 0x800000
	[0153.809] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0153.809] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms3", cAlternateFileName="GR96F1~1")) returned 1
	[0153.809] GetProcessHeap () returned 0x800000
	[0153.809] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0153.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0153.811] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.812] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1
	[0153.812] ResetEvent (hEvent=0xfc) returned 1
	[0153.812] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.856] ResetEvent (hEvent=0xfc) returned 1
	[0153.856] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.935] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1
	[0153.935] ResetEvent (hEvent=0xfc) returned 1
	[0153.935] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.937] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1
	[0153.937] ResetEvent (hEvent=0xfc) returned 1
	[0153.937] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.942] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1
	[0153.942] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1
	[0153.943] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1
	[0153.943] ResetEvent (hEvent=0xfc) returned 1
	[0153.943] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.945] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1
	[0153.945] ResetEvent (hEvent=0xfc) returned 1
	[0153.945] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.954] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1
	[0153.954] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1
	[0153.954] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1
	[0153.955] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="BG_FOR~3.GIF")) returned 1
	[0153.955] ResetEvent (hEvent=0xfc) returned 1
	[0153.955] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.965] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1
	[0153.965] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1
	[0153.966] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1
	[0153.966] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1
	[0153.966] ResetEvent (hEvent=0xfc) returned 1
	[0153.966] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.967] ResetEvent (hEvent=0xfc) returned 1
	[0153.967] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.970] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1
	[0153.970] ResetEvent (hEvent=0xfc) returned 1
	[0153.970] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0153.972] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1
	[0153.973] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1
	[0153.973] ResetEvent (hEvent=0xfc) returned 1
	[0153.973] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.070] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1
	[0154.070] ResetEvent (hEvent=0xfc) returned 1
	[0154.070] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.075] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1
	[0154.075] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1
	[0154.075] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1
	[0154.075] ResetEvent (hEvent=0xfc) returned 1
	[0154.075] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.079] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1
	[0154.080] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BU7DFA~1.GIF")) returned 1
	[0154.080] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1
	[0154.080] ResetEvent (hEvent=0xfc) returned 1
	[0154.080] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.084] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1
	[0154.084] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1
	[0154.085] ResetEvent (hEvent=0xfc) returned 1
	[0154.085] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.086] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60975c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1
	[0154.086] ResetEvent (hEvent=0xfc) returned 1
	[0154.086] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.101] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1
	[0154.101] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1388d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1
	[0154.101] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~2.HTM")) returned 1
	[0154.101] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~1.HTM")) returned 1
	[0154.102] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1
	[0154.102] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~1.HTM")) returned 1
	[0154.102] ResetEvent (hEvent=0xfc) returned 1
	[0154.102] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.106] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1
	[0154.106] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1dda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1
	[0154.107] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1
	[0154.107] ResetEvent (hEvent=0xfc) returned 1
	[0154.107] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.113] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1
	[0154.113] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x856, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1
	[0154.113] ResetEvent (hEvent=0xfc) returned 1
	[0154.113] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.114] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529685b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x46fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1
	[0154.114] ResetEvent (hEvent=0xfc) returned 1
	[0154.115] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.231] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1
	[0154.231] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1
	[0154.231] GetProcessHeap () returned 0x800000
	[0154.231] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0154.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0154.243] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.246] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1
	[0154.247] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="AMERIC~1")) returned 1
	[0154.247] GetProcessHeap () returned 0x800000
	[0154.247] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0154.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0154.252] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.252] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0154.252] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0154.252] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0154.252] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0154.253] GetProcessHeap () returned 0x800000
	[0154.253] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.253] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1
	[0154.253] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1
	[0154.253] GetProcessHeap () returned 0x800000
	[0154.253] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0154.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0154.253] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.253] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1
	[0154.253] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0154.253] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0154.253] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0154.254] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0154.254] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0154.254] GetProcessHeap () returned 0x800000
	[0154.254] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.254] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1
	[0154.254] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1
	[0154.254] GetProcessHeap () returned 0x800000
	[0154.254] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0154.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0154.259] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.259] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0154.259] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0154.259] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0154.259] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0154.260] GetProcessHeap () returned 0x800000
	[0154.260] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.260] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1
	[0154.260] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="BRIGHT~1")) returned 1
	[0154.260] GetProcessHeap () returned 0x800000
	[0154.260] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0154.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0154.260] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.260] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0154.260] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button.gif", cAlternateFileName="")) returned 1
	[0154.260] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1
	[0154.261] ResetEvent (hEvent=0xfc) returned 1
	[0154.261] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.265] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1
	[0154.265] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0
	[0154.265] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0154.265] GetProcessHeap () returned 0x800000
	[0154.265] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.265] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1
	[0154.266] ResetEvent (hEvent=0xfc) returned 1
	[0154.266] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.270] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="BRIGHT~2")) returned 1
	[0154.270] GetProcessHeap () returned 0x800000
	[0154.270] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0154.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0154.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0154.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0154.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0154.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0154.275] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0154.276] GetProcessHeap () returned 0x800000
	[0154.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.276] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1
	[0154.276] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1
	[0154.276] ResetEvent (hEvent=0xfc) returned 1
	[0154.276] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.279] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604d91d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1
	[0154.279] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1
	[0154.279] GetProcessHeap () returned 0x800000
	[0154.279] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0154.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0154.282] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.282] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0154.282] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0154.282] ResetEvent (hEvent=0xfc) returned 1
	[0154.282] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.285] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0154.285] ResetEvent (hEvent=0xfc) returned 1
	[0154.285] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.294] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0154.294] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0154.295] GetProcessHeap () returned 0x800000
	[0154.295] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.295] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x977, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1
	[0154.295] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51e3fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1
	[0154.295] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="GRAYCH~1")) returned 1
	[0154.295] GetProcessHeap () returned 0x800000
	[0154.295] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0154.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0154.295] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.295] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0154.295] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0154.295] ResetEvent (hEvent=0xfc) returned 1
	[0154.296] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.302] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0154.303] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0154.303] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0154.303] GetProcessHeap () returned 0x800000
	[0154.303] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.303] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xaf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1
	[0154.303] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1
	[0154.303] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="LIGHTS~1.CSS")) returned 1
	[0154.303] ResetEvent (hEvent=0xfc) returned 1
	[0154.304] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.310] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1
	[0154.310] GetProcessHeap () returned 0x800000
	[0154.310] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0154.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0154.315] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.315] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0154.315] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0154.315] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0154.315] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0154.315] GetProcessHeap () returned 0x800000
	[0154.316] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.316] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1
	[0154.316] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1
	[0154.316] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1
	[0154.316] GetProcessHeap () returned 0x800000
	[0154.316] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0154.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0154.316] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.316] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0154.316] ResetEvent (hEvent=0xfc) returned 1
	[0154.316] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.322] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0154.322] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0154.322] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0154.322] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0154.323] GetProcessHeap () returned 0x800000
	[0154.323] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.323] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1
	[0154.323] ResetEvent (hEvent=0xfc) returned 1
	[0154.323] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.418] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6bd79c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1
	[0154.418] ResetEvent (hEvent=0xfc) returned 1
	[0154.418] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.463] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1
	[0154.463] ResetEvent (hEvent=0xfc) returned 1
	[0154.463] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.466] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1
	[0154.467] GetProcessHeap () returned 0x800000
	[0154.467] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0154.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.467] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.467] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0154.467] ResetEvent (hEvent=0xfc) returned 1
	[0154.467] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.469] ResetEvent (hEvent=0xfc) returned 1
	[0154.469] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.471] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0154.471] ResetEvent (hEvent=0xfc) returned 1
	[0154.471] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.479] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0154.479] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.479] GetProcessHeap () returned 0x800000
	[0154.479] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0154.480] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1
	[0154.480] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1
	[0154.480] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1
	[0154.480] GetProcessHeap () returned 0x800000
	[0154.480] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0154.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.480] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.480] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0154.480] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1
	[0154.480] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1
	[0154.480] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0
	[0154.480] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.481] GetProcessHeap () returned 0x800000
	[0154.481] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0154.481] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe34, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1
	[0154.481] ResetEvent (hEvent=0xfc) returned 1
	[0154.481] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.482] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1
	[0154.483] GetProcessHeap () returned 0x800000
	[0154.483] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0154.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.489] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.489] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1
	[0154.489] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0154.489] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0154.489] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0154.489] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.489] GetProcessHeap () returned 0x800000
	[0154.490] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0154.490] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1
	[0154.490] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x736, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1
	[0154.490] ResetEvent (hEvent=0xfc) returned 1
	[0154.490] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.562] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1
	[0154.563] GetProcessHeap () returned 0x800000
	[0154.563] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0154.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.598] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.598] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0154.598] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1
	[0154.598] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1
	[0154.598] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1
	[0154.598] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0
	[0154.598] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.599] GetProcessHeap () returned 0x800000
	[0154.599] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0154.599] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1
	[0154.599] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1
	[0154.599] GetProcessHeap () returned 0x800000
	[0154.599] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0154.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.599] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.599] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0154.599] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1
	[0154.599] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1
	[0154.599] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1
	[0154.599] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0
	[0154.599] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.600] GetProcessHeap () returned 0x800000
	[0154.600] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0154.600] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1
	[0154.600] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5acc63d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1
	[0154.600] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1
	[0154.600] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1
	[0154.600] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0
	[0154.600] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0154.601] GetProcessHeap () returned 0x800000
	[0154.601] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0154.601] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1
	[0154.601] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1
	[0154.601] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1
	[0154.601] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1313, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1
	[0154.601] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa89, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="FORMSV~3.HTM")) returned 1
	[0154.601] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1
	[0154.601] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e612900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e612900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x23ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1
	[0154.601] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1
	[0154.601] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418f4a00, ftCreationTime.dwHighDateTime=0x1c9fe9d, ftLastAccessTime.dwLowDateTime=0x58285d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x418f4a00, ftLastWriteTime.dwHighDateTime=0x1c9fe9d, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1
	[0154.602] ResetEvent (hEvent=0xfc) returned 1
	[0154.602] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.701] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d0aad90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1
	[0154.701] ResetEvent (hEvent=0xfc) returned 1
	[0154.701] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.707] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1
	[0154.707] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1
	[0154.707] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1
	[0154.707] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1
	[0154.707] ResetEvent (hEvent=0xfc) returned 1
	[0154.707] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.711] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1
	[0154.711] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3031bc00, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3031bc00, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1
	[0154.711] ResetEvent (hEvent=0xfc) returned 1
	[0154.711] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.715] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b96400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x96b96400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~2.GIF")) returned 1
	[0154.715] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1
	[0154.715] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1
	[0154.715] ResetEvent (hEvent=0xfc) returned 1
	[0154.715] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.717] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1
	[0154.718] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1
	[0154.718] ResetEvent (hEvent=0xfc) returned 1
	[0154.718] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.723] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1
	[0154.723] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1
	[0154.723] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b9b600, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58b9b600, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1
	[0154.723] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ea9100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97ea9100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x12b79, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1
	[0154.724] ResetEvent (hEvent=0xfc) returned 1
	[0154.724] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.725] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e57, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1
	[0154.725] ResetEvent (hEvent=0xfc) returned 1
	[0154.725] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.736] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e4444b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6427, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1
	[0154.736] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1
	[0154.737] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1db1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1
	[0154.737] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1
	[0154.737] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 0
	[0154.737] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0154.737] GetProcessHeap () returned 0x800000
	[0154.737] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0154.738] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms4", cAlternateFileName="GROOVE~4")) returned 1
	[0154.738] GetProcessHeap () returned 0x800000
	[0154.739] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0154.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0154.748] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1
	[0154.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1
	[0154.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1
	[0154.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1
	[0154.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1
	[0154.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1
	[0154.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1
	[0154.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1
	[0154.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1
	[0154.749] ResetEvent (hEvent=0xfc) returned 1
	[0154.750] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.851] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1
	[0154.851] ResetEvent (hEvent=0xfc) returned 1
	[0154.851] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.902] ResetEvent (hEvent=0xfc) returned 1
	[0154.902] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.914] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="BG_FOR~3.GIF")) returned 1
	[0154.914] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1
	[0154.914] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1
	[0154.914] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1
	[0154.914] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1
	[0154.915] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1
	[0154.915] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1
	[0154.915] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1
	[0154.915] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1
	[0154.915] ResetEvent (hEvent=0xfc) returned 1
	[0154.915] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.918] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1
	[0154.918] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1
	[0154.918] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1
	[0154.918] ResetEvent (hEvent=0xfc) returned 1
	[0154.918] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.924] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BU1E84~1.GIF")) returned 1
	[0154.924] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1
	[0154.924] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1
	[0154.924] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1
	[0154.924] ResetEvent (hEvent=0xfc) returned 1
	[0154.924] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.929] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1
	[0154.930] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1
	[0154.930] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1
	[0154.930] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x135f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1
	[0154.930] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1
	[0154.930] ResetEvent (hEvent=0xfc) returned 1
	[0154.930] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.932] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1
	[0154.939] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1
	[0154.939] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x115a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~1.HTM")) returned 1
	[0154.939] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1
	[0154.939] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1
	[0154.939] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1
	[0154.939] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1
	[0154.940] ResetEvent (hEvent=0xfc) returned 1
	[0154.940] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0154.941] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1
	[0154.941] ResetEvent (hEvent=0xfc) returned 1
	[0154.941] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.029] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529685b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x46a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1
	[0155.029] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1
	[0155.029] ResetEvent (hEvent=0xfc) returned 1
	[0155.029] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.044] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1
	[0155.044] GetProcessHeap () returned 0x800000
	[0155.044] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0155.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0155.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.css", cAlternateFileName="")) returned 1
	[0155.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana", cAlternateFileName="AMERIC~1")) returned 1
	[0155.068] GetProcessHeap () returned 0x800000
	[0155.068] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0155.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.068] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.068] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.068] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.068] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.068] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.069] GetProcessHeap () returned 0x800000
	[0155.069] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.069] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Americana.css", cAlternateFileName="AMERIC~1.CSS")) returned 1
	[0155.069] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue", cAlternateFileName="")) returned 1
	[0155.069] GetProcessHeap () returned 0x800000
	[0155.069] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0155.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.069] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.069] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1
	[0155.069] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0155.070] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.070] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.070] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.070] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.070] GetProcessHeap () returned 0x800000
	[0155.070] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.070] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x100d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BabyBlue.css", cAlternateFileName="")) returned 1
	[0155.070] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay", cAlternateFileName="")) returned 1
	[0155.070] GetProcessHeap () returned 0x800000
	[0155.070] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0155.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.071] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.071] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.072] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.072] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.072] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.072] GetProcessHeap () returned 0x800000
	[0155.072] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.072] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biscay.css", cAlternateFileName="")) returned 1
	[0155.072] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange", cAlternateFileName="BRIGHT~1")) returned 1
	[0155.072] GetProcessHeap () returned 0x800000
	[0155.072] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0155.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.073] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.073] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0155.073] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1
	[0155.073] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.074] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.074] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.074] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.074] GetProcessHeap () returned 0x800000
	[0155.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.074] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de07200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightOrange.css", cAlternateFileName="BRIGHT~1.CSS")) returned 1
	[0155.074] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow", cAlternateFileName="BRIGHT~2")) returned 1
	[0155.074] GetProcessHeap () returned 0x800000
	[0155.074] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0155.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.075] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.075] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0155.075] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.075] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.075] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.075] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.075] GetProcessHeap () returned 0x800000
	[0155.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.075] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1074, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrightYellow.css", cAlternateFileName="BRIGHT~2.CSS")) returned 1
	[0155.075] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Casual.css", cAlternateFileName="")) returned 1
	[0155.075] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51ce9230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Country.css", cAlternateFileName="")) returned 1
	[0155.076] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert", cAlternateFileName="")) returned 1
	[0155.076] GetProcessHeap () returned 0x800000
	[0155.076] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0155.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.077] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.077] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0155.077] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.077] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.077] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.077] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.077] GetProcessHeap () returned 0x800000
	[0155.077] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.077] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.css", cAlternateFileName="")) returned 1
	[0155.077] ResetEvent (hEvent=0xfc) returned 1
	[0155.077] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.214] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x72e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Earthy.css", cAlternateFileName="")) returned 1
	[0155.214] ResetEvent (hEvent=0xfc) returned 1
	[0155.215] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.217] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck", cAlternateFileName="GRAYCH~1")) returned 1
	[0155.217] GetProcessHeap () returned 0x800000
	[0155.217] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0155.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.223] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.223] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0155.223] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.223] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.223] ResetEvent (hEvent=0xfc) returned 1
	[0155.223] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.225] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.225] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.225] GetProcessHeap () returned 0x800000
	[0155.225] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0155.225] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f119f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xeb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrayCheck.css", cAlternateFileName="GRAYCH~1.CSS")) returned 1
	[0155.225] ResetEvent (hEvent=0xfc) returned 1
	[0155.225] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.227] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x762, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenTea.css", cAlternateFileName="")) returned 1
	[0155.227] ResetEvent (hEvent=0xfc) returned 1
	[0155.227] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.231] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightSpirit.css", cAlternateFileName="LIGHTS~1.CSS")) returned 1
	[0155.232] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime", cAlternateFileName="")) returned 1
	[0155.232] GetProcessHeap () returned 0x800000
	[0155.232] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0155.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.234] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.234] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.234] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.234] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.234] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.235] GetProcessHeap () returned 0x800000
	[0155.235] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0155.235] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1091, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lime.css", cAlternateFileName="")) returned 1
	[0155.235] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maroon.css", cAlternateFileName="")) returned 1
	[0155.235] ResetEvent (hEvent=0xfc) returned 1
	[0155.235] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.236] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis", cAlternateFileName="")) returned 1
	[0155.237] GetProcessHeap () returned 0x800000
	[0155.237] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0155.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.237] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.237] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0155.237] ResetEvent (hEvent=0xfc) returned 1
	[0155.237] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.240] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.240] ResetEvent (hEvent=0xfc) returned 1
	[0155.240] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.243] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.243] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.243] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.243] GetProcessHeap () returned 0x800000
	[0155.243] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0155.243] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa042cc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1
	[0155.243] ResetEvent (hEvent=0xfc) returned 1
	[0155.243] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.245] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1
	[0155.245] ResetEvent (hEvent=0xfc) returned 1
	[0155.245] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.250] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x706, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1
	[0155.250] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1
	[0155.250] GetProcessHeap () returned 0x800000
	[0155.250] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0155.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.250] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.250] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.250] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.250] ResetEvent (hEvent=0xfc) returned 1
	[0155.250] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.272] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.272] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.273] GetProcessHeap () returned 0x800000
	[0155.273] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0155.273] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1
	[0155.273] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1
	[0155.273] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1
	[0155.273] GetProcessHeap () returned 0x800000
	[0155.273] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0155.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.273] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.273] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0155.273] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.274] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.274] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.274] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.274] GetProcessHeap () returned 0x800000
	[0155.274] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0155.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x11ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1
	[0155.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1
	[0155.274] GetProcessHeap () returned 0x800000
	[0155.274] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0155.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.275] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.275] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1
	[0155.275] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.275] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.275] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.275] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.276] GetProcessHeap () returned 0x800000
	[0155.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0155.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa173f900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1
	[0155.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xadd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1
	[0155.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1
	[0155.276] GetProcessHeap () returned 0x800000
	[0155.276] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0155.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0155.277] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.277] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0155.277] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0155.277] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac07cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.277] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac07cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.277] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac07cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.277] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0155.278] GetProcessHeap () returned 0x800000
	[0155.278] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0155.278] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1
	[0155.278] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1
	[0155.278] GetProcessHeap () returned 0x800000
	[0155.278] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e70080
	[0155.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0155.279] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.279] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0155.279] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0155.279] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0155.279] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0155.279] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0155.279] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0155.280] GetProcessHeap () returned 0x800000
	[0155.280] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0155.280] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2a52600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xfb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1
	[0155.280] ResetEvent (hEvent=0xfc) returned 1
	[0155.280] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.387] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5acc63d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1
	[0155.387] ResetEvent (hEvent=0xfc) returned 1
	[0155.387] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.486] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1
	[0155.486] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1
	[0155.486] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0
	[0155.486] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0155.487] GetProcessHeap () returned 0x800000
	[0155.487] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0155.487] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1
	[0155.487] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1
	[0155.487] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1
	[0155.487] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x164a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1
	[0155.487] ResetEvent (hEvent=0xfc) returned 1
	[0155.487] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.489] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="FORMSV~3.HTM")) returned 1
	[0155.489] ResetEvent (hEvent=0xfc) returned 1
	[0155.489] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.490] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1
	[0155.491] ResetEvent (hEvent=0xfc) returned 1
	[0155.491] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.492] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2577, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1
	[0155.493] ResetEvent (hEvent=0xfc) returned 1
	[0155.493] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.602] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1
	[0155.602] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x58285d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa52f, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1
	[0155.602] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a76b250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1
	[0155.602] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1
	[0155.602] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1
	[0155.603] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1
	[0155.603] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1
	[0155.603] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1
	[0155.603] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1
	[0155.603] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~2.GIF")) returned 1
	[0155.603] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1
	[0155.603] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="RTF_HY~1.GIF")) returned 1
	[0155.603] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1
	[0155.603] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1
	[0155.604] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1
	[0155.604] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1
	[0155.604] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="RTF_SP~1.GIF")) returned 1
	[0155.604] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1
	[0155.604] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1
	[0155.604] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14307, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1
	[0155.604] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1
	[0155.604] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x64b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1
	[0155.604] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1
	[0155.604] ResetEvent (hEvent=0xfc) returned 1
	[0155.604] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.606] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2095, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1
	[0155.606] ResetEvent (hEvent=0xfc) returned 1
	[0155.606] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.611] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1
	[0155.611] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 0
	[0155.611] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0155.611] GetProcessHeap () returned 0x800000
	[0155.611] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0155.612] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="GROOVE~2")) returned 1
	[0155.612] GetProcessHeap () returned 0x800000
	[0155.612] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0155.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0155.620] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.620] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1
	[0155.620] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1
	[0155.620] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa769da00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa769da00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1
	[0155.620] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa769da00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa769da00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1
	[0155.620] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1
	[0155.620] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e3c400, ftCreationTime.dwHighDateTime=0x1ca5dc0, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77e3c400, ftLastWriteTime.dwHighDateTime=0x1ca5dc0, nFileSizeHigh=0x0, nFileSizeLow=0x14484, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1
	[0155.621] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1
	[0155.621] ResetEvent (hEvent=0xfc) returned 1
	[0155.621] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.622] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x829, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1
	[0155.622] ResetEvent (hEvent=0xfc) returned 1
	[0155.622] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.642] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1
	[0155.642] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~1.HTM")) returned 1
	[0155.642] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69fe8900, ftCreationTime.dwHighDateTime=0x1c7d303, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69fe8900, ftLastWriteTime.dwHighDateTime=0x1c7d303, nFileSizeHigh=0x0, nFileSizeLow=0x13c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplateRTL.html", cAlternateFileName="FORMSF~2.HTM")) returned 1
	[0155.642] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1
	[0155.642] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52942450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1
	[0155.642] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x46ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1
	[0155.642] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797dd200, ftCreationTime.dwHighDateTime=0x1c7d303, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x797dd200, ftLastWriteTime.dwHighDateTime=0x1c7d303, nFileSizeHigh=0x0, nFileSizeLow=0x4709, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplateRTL.html", cAlternateFileName="FORMSP~3.HTM")) returned 1
	[0155.642] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1
	[0155.643] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2e4800, ftCreationTime.dwHighDateTime=0x1c7d303, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a2e4800, ftLastWriteTime.dwHighDateTime=0x1c7d303, nFileSizeHigh=0x0, nFileSizeLow=0x5c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplateRTL.html", cAlternateFileName="FORMSP~4.HTM")) returned 1
	[0155.643] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f34200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0f34200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1
	[0155.643] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1
	[0155.643] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa89b0700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1
	[0155.643] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14316, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathWelcomeImage.jpg", cAlternateFileName="INFOPA~1.JPG")) returned 1
	[0155.643] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1
	[0155.643] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418f4a00, ftCreationTime.dwHighDateTime=0x1c9fe9d, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x418f4a00, ftLastWriteTime.dwHighDateTime=0x1c9fe9d, nFileSizeHigh=0x0, nFileSizeLow=0x30074, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1
	[0155.643] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a76b250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x275e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1
	[0155.643] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1
	[0155.643] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1
	[0155.644] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1
	[0155.644] ResetEvent (hEvent=0xfc) returned 1
	[0155.644] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.728] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1
	[0155.728] ResetEvent (hEvent=0xfc) returned 1
	[0155.728] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.732] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3031bc00, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3031bc00, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1
	[0155.732] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2246f00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1
	[0155.732] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="RTF_HY~1.GIF")) returned 1
	[0155.733] ResetEvent (hEvent=0xfc) returned 1
	[0155.733] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.740] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1
	[0155.740] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1
	[0155.741] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1
	[0155.741] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b9b600, ftCreationTime.dwHighDateTime=0x1ca033b, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58b9b600, ftLastWriteTime.dwHighDateTime=0x1ca033b, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1
	[0155.741] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27739b00, ftCreationTime.dwHighDateTime=0x1ca408b, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27739b00, ftLastWriteTime.dwHighDateTime=0x1ca408b, nFileSizeHigh=0x0, nFileSizeLow=0x15162, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1
	[0155.741] ResetEvent (hEvent=0xfc) returned 1
	[0155.741] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.744] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xefe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1
	[0155.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b43100, ftCreationTime.dwHighDateTime=0x1ca0352, ftLastAccessTime.dwLowDateTime=0x5e4444b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x53b43100, ftLastWriteTime.dwHighDateTime=0x1ca0352, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1
	[0155.745] ResetEvent (hEvent=0xfc) returned 1
	[0155.745] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.762] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b43100, ftCreationTime.dwHighDateTime=0x1ca0352, ftLastAccessTime.dwLowDateTime=0x5e4444b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x53b43100, ftLastWriteTime.dwHighDateTime=0x1ca0352, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 0
	[0155.763] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0155.764] GetProcessHeap () returned 0x800000
	[0155.764] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0155.765] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveProjectToolset", cAlternateFileName="GRA998~1")) returned 1
	[0155.765] GetProcessHeap () returned 0x800000
	[0155.765] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0155.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0155.769] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.769] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x140b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIcon.jpg", cAlternateFileName="BRIEFC~1.JPG")) returned 1
	[0155.769] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf76, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIconMask.bmp", cAlternateFileName="BRIEFC~1.BMP")) returned 1
	[0155.769] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIcons.jpg", cAlternateFileName="CIRCLE~1.JPG")) returned 1
	[0155.769] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x114c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIconsMask.bmp", cAlternateFileName="CIRCLE~1.BMP")) returned 1
	[0155.770] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIcon.jpg", cAlternateFileName="MEETIN~1.JPG")) returned 1
	[0155.770] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIconMask.bmp", cAlternateFileName="MEETIN~1.BMP")) returned 1
	[0155.770] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x19e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIcons.jpg", cAlternateFileName="PROJEC~1.JPG")) returned 1
	[0155.770] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa10, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIconsMask.bmp", cAlternateFileName="PROJEC~1.BMP")) returned 1
	[0155.770] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIcon.jpg", cAlternateFileName="PROJEC~2.JPG")) returned 1
	[0155.770] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIconMask.bmp", cAlternateFileName="PROJEC~2.BMP")) returned 1
	[0155.770] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTool", cAlternateFileName="PROJEC~1")) returned 1
	[0155.770] GetProcessHeap () returned 0x800000
	[0155.770] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e40068
	[0155.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0155.771] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.771] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="PROJEC~1")) returned 1
	[0155.771] GetProcessHeap () returned 0x800000
	[0155.771] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0155.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0155.771] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.772] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Basic", cAlternateFileName="")) returned 1
	[0155.772] GetProcessHeap () returned 0x800000
	[0155.772] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0155.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.772] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.772] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 1
	[0155.772] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 0
	[0155.772] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.772] GetProcessHeap () returned 0x800000
	[0155.772] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.772] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 1
	[0155.772] GetProcessHeap () returned 0x800000
	[0155.773] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0155.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.774] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.774] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.js", cAlternateFileName="HIERAR~1.JS")) returned 1
	[0155.774] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x157e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.xsl", cAlternateFileName="HIERAR~1.XSL")) returned 1
	[0155.774] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="MINUS.GIF", cAlternateFileName="")) returned 1
	[0155.774] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a497830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUS.GIF", cAlternateFileName="")) returned 1
	[0155.774] ResetEvent (hEvent=0xfc) returned 1
	[0155.774] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.874] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1
	[0155.874] ResetEvent (hEvent=0xfc) returned 1
	[0155.874] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.878] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 0
	[0155.878] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.879] GetProcessHeap () returned 0x800000
	[0155.879] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.879] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 0
	[0155.879] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0155.879] GetProcessHeap () returned 0x800000
	[0155.879] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0155.879] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="PROJEC~1")) returned 0
	[0155.879] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0155.879] GetProcessHeap () returned 0x800000
	[0155.879] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0155.879] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImages.jpg", cAlternateFileName="PROJEC~3.JPG")) returned 1
	[0155.880] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2338, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImagesMask.bmp", cAlternateFileName="PROJEC~3.BMP")) returned 1
	[0155.880] ResetEvent (hEvent=0xfc) returned 1
	[0155.880] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.881] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImage.jpg", cAlternateFileName="SPLASH~1.JPG")) returned 1
	[0155.881] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImageMask.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1
	[0155.881] ResetEvent (hEvent=0xfc) returned 1
	[0155.881] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.979] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABMASK.BMP", cAlternateFileName="")) returned 1
	[0155.979] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABOFF.JPG", cAlternateFileName="")) returned 1
	[0155.979] ResetEvent (hEvent=0xfc) returned 1
	[0155.979] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0155.981] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABON.JPG", cAlternateFileName="")) returned 1
	[0155.981] ResetEvent (hEvent=0xfc) returned 1
	[0155.981] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0156.084] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHITEBOX.JPG", cAlternateFileName="")) returned 1
	[0156.084] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteboxMask.bmp", cAlternateFileName="WHITEB~1.BMP")) returned 1
	[0156.084] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIcons.jpg", cAlternateFileName="ZOOMIC~1.JPG")) returned 1
	[0156.084] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="ZOOMIC~1.BMP")) returned 1
	[0156.084] ResetEvent (hEvent=0xfc) returned 1
	[0156.084] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0156.148] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="ZOOMIC~1.BMP")) returned 0
	[0156.148] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0156.148] GetProcessHeap () returned 0x800000
	[0156.148] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0156.149] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="WELCOM~1")) returned 1
	[0156.149] GetProcessHeap () returned 0x800000
	[0156.149] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0156.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0156.149] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.149] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbadd700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbbadd700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImages.jpg", cAlternateFileName="ICONIM~1.JPG")) returned 1
	[0156.149] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="ICONIM~1.BMP")) returned 1
	[0156.149] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="ICONIM~1.BMP")) returned 0
	[0156.149] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0156.150] GetProcessHeap () returned 0x800000
	[0156.150] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0156.150] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Tool", cAlternateFileName="WELCOM~1")) returned 0
	[0156.150] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0156.150] GetProcessHeap () returned 0x800000
	[0156.150] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0156.150] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 0
	[0156.150] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0156.151] GetProcessHeap () returned 0x800000
	[0156.151] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0156.151] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 1
	[0156.151] GetProcessHeap () returned 0x800000
	[0156.151] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ce908
	[0156.151] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0156.154] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.170] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALERT.ICO", cAlternateFileName="")) returned 1
	[0156.170] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHEVRON.ICO", cAlternateFileName="")) returned 1
	[0156.170] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPUTER.ICO", cAlternateFileName="")) returned 1
	[0156.170] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactSelector.ico", cAlternateFileName="CONTAC~1.ICO")) returned 1
	[0156.170] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e764200, ftCreationTime.dwHighDateTime=0x1c9ff6c, ftLastAccessTime.dwLowDateTime=0x52a4cdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e764200, ftLastWriteTime.dwHighDateTime=0x1c9ff6c, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrorfromgroove.ico", cAlternateFileName="GFSERR~1.ICO")) returned 1
	[0156.170] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78806100, ftCreationTime.dwHighDateTime=0x1c9ff6c, ftLastAccessTime.dwLowDateTime=0x52a4cdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78806100, ftLastWriteTime.dwHighDateTime=0x1c9ff6c, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrortogroove.ico", cAlternateFileName="GFSERR~2.ICO")) returned 1
	[0156.170] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddee4300, ftCreationTime.dwHighDateTime=0x1c9dff9, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xddee4300, ftLastWriteTime.dwHighDateTime=0x1c9dff9, nFileSizeHigh=0x0, nFileSizeLow=0x294dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWE.ICO", cAlternateFileName="")) returned 1
	[0156.170] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe103100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe103100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INCOMING.ICO", cAlternateFileName="")) returned 1
	[0156.171] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe103100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe103100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDOMAIN.ICO", cAlternateFileName="")) returned 1
	[0156.171] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIL.ICO", cAlternateFileName="")) returned 1
	[0156.171] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANUAL.ICO", cAlternateFileName="")) returned 1
	[0156.171] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxalert.ico", cAlternateFileName="MESSAG~2.ICO")) returned 1
	[0156.171] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxerror.ico", cAlternateFileName="MESSAG~1.ICO")) returned 1
	[0156.171] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxinfo.ico", cAlternateFileName="MESSAG~3.ICO")) returned 1
	[0156.171] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1608e400, ftCreationTime.dwHighDateTime=0x1ca03f6, ftLastAccessTime.dwLowDateTime=0x58b00bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1608e400, ftLastWriteTime.dwHighDateTime=0x1ca03f6, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModifiedTelespace.ico", cAlternateFileName="MODIFI~1.ICO")) returned 1
	[0156.171] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x596e79b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLINE.ICO", cAlternateFileName="")) returned 1
	[0156.171] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLINE.ICO", cAlternateFileName="")) returned 1
	[0156.171] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6bf68e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineBusy.ico", cAlternateFileName="ONLINE~2.ICO")) returned 1
	[0156.171] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineIdle.ico", cAlternateFileName="ONLINE~1.ICO")) returned 1
	[0156.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutDomain.ico", cAlternateFileName="OUTDOM~1.ICO")) returned 1
	[0156.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTGOING.ICO", cAlternateFileName="")) returned 1
	[0156.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutSyncPC.ico", cAlternateFileName="OUTSYN~1.ICO")) returned 1
	[0156.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cdd7370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalContact.ico", cAlternateFileName="PERSON~1.ICO")) returned 1
	[0156.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionMember.ico", cAlternateFileName="SESSIO~1.ICO")) returned 1
	[0156.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionOwner.ico", cAlternateFileName="SESSIO~2.ICO")) returned 1
	[0156.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpaceSelector.ico", cAlternateFileName="SPACES~1.ICO")) returned 1
	[0156.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusAway.ico", cAlternateFileName="STATUS~1.ICO")) returned 1
	[0156.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusDoNotDisturb.ico", cAlternateFileName="STATUS~2.ICO")) returned 1
	[0156.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusOnline.ico", cAlternateFileName="STATUS~3.ICO")) returned 1
	[0156.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOLICON.ICO", cAlternateFileName="")) returned 1
	[0156.173] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2d4e500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2366, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS.ICO", cAlternateFileName="")) returned 1
	[0156.173] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430b200, ftCreationTime.dwHighDateTime=0x1c9d442, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x430b200, ftLastWriteTime.dwHighDateTime=0x1c9d442, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 1
	[0156.173] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430b200, ftCreationTime.dwHighDateTime=0x1c9d442, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x430b200, ftLastWriteTime.dwHighDateTime=0x1c9d442, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 0
	[0156.173] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0156.173] GetProcessHeap () returned 0x800000
	[0156.173] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0156.173] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="XMLFIL~1")) returned 1
	[0156.173] GetProcessHeap () returned 0x800000
	[0156.173] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ce908
	[0156.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0156.177] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.177] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd279da00, ftCreationTime.dwHighDateTime=0x1c8a0cd, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd279da00, ftLastWriteTime.dwHighDateTime=0x1c8a0cd, nFileSizeHigh=0x0, nFileSizeLow=0x487, dwReserved0=0x0, dwReserved1=0x0, cFileName="builtincontrolsschema.xsd", cAlternateFileName="BUILTI~1.XSD")) returned 1
	[0156.177] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd279da00, ftCreationTime.dwHighDateTime=0x1c8a0cd, ftLastAccessTime.dwLowDateTime=0x537646f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd279da00, ftLastWriteTime.dwHighDateTime=0x1c8a0cd, nFileSizeHigh=0x0, nFileSizeLow=0x5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="grvschema.xsd", cAlternateFileName="GRVSCH~1.XSD")) returned 1
	[0156.177] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2d4e500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Messenger.xml", cAlternateFileName="MESSEN~1.XML")) returned 1
	[0156.177] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Space Templates", cAlternateFileName="SPACET~1")) returned 1
	[0156.177] GetProcessHeap () returned 0x800000
	[0156.177] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0156.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0156.194] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.194] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0156.194] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0156.195] GetProcessHeap () returned 0x800000
	[0156.195] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0156.195] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a42b900, ftCreationTime.dwHighDateTime=0x1c9d747, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a42b900, ftLastWriteTime.dwHighDateTime=0x1c9d747, nFileSizeHigh=0x0, nFileSizeLow=0x17e2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterApplicationDescriptors.xml", cAlternateFileName="STARTE~1.XML")) returned 1
	[0156.195] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4061200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4061200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b875, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterNotificationDescriptors.xml", cAlternateFileName="STARTE~3.XML")) returned 1
	[0156.195] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22545300, ftCreationTime.dwHighDateTime=0x1c9a48f, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22545300, ftLastWriteTime.dwHighDateTime=0x1c9a48f, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~2.XML")) returned 1
	[0156.195] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22545300, ftCreationTime.dwHighDateTime=0x1c9a48f, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22545300, ftLastWriteTime.dwHighDateTime=0x1c9a48f, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~2.XML")) returned 0
	[0156.195] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0156.195] GetProcessHeap () returned 0x800000
	[0156.195] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0156.195] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XML Files", cAlternateFileName="XMLFIL~1")) returned 0
	[0156.195] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0156.196] GetProcessHeap () returned 0x800000
	[0156.196] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0156.197] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fd7600, ftCreationTime.dwHighDateTime=0x1cacbb3, ftLastAccessTime.dwLowDateTime=0x52fce0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fd7600, ftLastWriteTime.dwHighDateTime=0x1cacbb3, nFileSizeHigh=0x0, nFileSizeLow=0x3112b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1
	[0156.197] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fd7600, ftCreationTime.dwHighDateTime=0x1cacbb3, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6fd7600, ftLastWriteTime.dwHighDateTime=0x1cacbb3, nFileSizeHigh=0x0, nFileSizeLow=0x669390, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1
	[0156.197] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c91e000, ftCreationTime.dwHighDateTime=0x1cacb46, ftLastAccessTime.dwLowDateTime=0x52fce0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c91e000, ftLastWriteTime.dwHighDateTime=0x1cacb46, nFileSizeHigh=0x0, nFileSizeLow=0x14ed88, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVEMN.EXE", cAlternateFileName="")) returned 1
	[0156.197] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd0360920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x91b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.DLL", cAlternateFileName="")) returned 1
	[0156.197] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50eeca00, ftCreationTime.dwHighDateTime=0x1cbceff, ftLastAccessTime.dwLowDateTime=0xcf0a1be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50eeca00, ftLastWriteTime.dwHighDateTime=0x1cbceff, nFileSizeHigh=0x0, nFileSizeLow=0x3b360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1
	[0156.198] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82531f00, ftCreationTime.dwHighDateTime=0x1cab7f0, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82531f00, ftLastWriteTime.dwHighDateTime=0x1cab7f0, nFileSizeHigh=0x0, nFileSizeLow=0xb13a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEContentService.exe", cAlternateFileName="IECONT~1.EXE")) returned 1
	[0156.198] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58c5e60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xa6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCOMMON.DLL", cAlternateFileName="")) returned 1
	[0156.198] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dc7c00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x820ca2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb5dc7c00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x73c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMDIMP.ADD", cAlternateFileName="")) returned 1
	[0156.198] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x2d168, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMPMAIL.DLL", cAlternateFileName="")) returned 1
	[0156.198] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58ebfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2f180, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMUTIL.DLL", cAlternateFileName="")) returned 1
	[0156.198] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db63000, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd58ebfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1db63000, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x38388, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWDD.DLL", cAlternateFileName="")) returned 1
	[0156.198] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5912120, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMWIZ.DLL", cAlternateFileName="")) returned 1
	[0156.198] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3501d300, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x53979a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3501d300, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x275770, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.EXE", cAlternateFileName="")) returned 1
	[0156.198] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOM", cAlternateFileName="INFOPA~1")) returned 1
	[0156.198] GetProcessHeap () returned 0x800000
	[0156.198] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0156.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0156.201] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.201] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServices", cAlternateFileName="INFOPA~2")) returned 1
	[0156.201] GetProcessHeap () returned 0x800000
	[0156.201] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8be900
	[0156.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0156.204] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.204] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServicesV12", cAlternateFileName="INFOPA~1")) returned 1
	[0156.204] GetProcessHeap () returned 0x800000
	[0156.204] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ce908
	[0156.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0156.205] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.205] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae85c00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x553a8c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ae85c00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xa770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0156.205] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x65c9fd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1
	[0156.205] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x65c9fd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0
	[0156.205] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0156.205] GetProcessHeap () returned 0x800000
	[0156.206] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0156.206] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae85c00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ae85c00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xb770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0156.206] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x55382ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1
	[0156.206] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x55382ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0
	[0156.206] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0156.206] GetProcessHeap () returned 0x800000
	[0156.206] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0156.206] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMV12", cAlternateFileName="INFOPA~1")) returned 1
	[0156.206] GetProcessHeap () returned 0x800000
	[0156.206] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8be900
	[0156.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0156.206] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.206] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c198900, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c198900, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xd770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0156.207] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1
	[0156.207] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0
	[0156.207] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0156.207] GetProcessHeap () returned 0x800000
	[0156.207] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0156.207] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c198900, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c198900, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xe770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0156.207] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1
	[0156.207] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0
	[0156.207] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0156.208] GetProcessHeap () returned 0x800000
	[0156.208] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0156.208] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x61d191f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x7bb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="INLAUNCH.DLL", cAlternateFileName="")) returned 1
	[0156.208] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb562a700, ftCreationTime.dwHighDateTime=0x1cacb3f, ftLastAccessTime.dwLowDateTime=0x61e23b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb562a700, ftLastWriteTime.dwHighDateTime=0x1cacb3f, nFileSizeHigh=0x0, nFileSizeLow=0x1bac000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_resources14.xss", cAlternateFileName="INSTAL~1.XSS")) returned 1
	[0156.208] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb562a700, ftCreationTime.dwHighDateTime=0x1cacb3f, ftLastAccessTime.dwLowDateTime=0x61e23b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb562a700, ftLastWriteTime.dwHighDateTime=0x1cacb3f, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installed_schemas14.xss", cAlternateFileName="INSTAL~2.XSS")) returned 1
	[0156.208] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf65300, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xd5938280, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2bf65300, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="INTLDATE.DLL", cAlternateFileName="")) returned 1
	[0156.208] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36330000, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x64a2d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36330000, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x98b578, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDESIGN.DLL", cAlternateFileName="")) returned 1
	[0156.208] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3501d300, ftCreationTime.dwHighDateTime=0x1cacf91, ftLastAccessTime.dwLowDateTime=0x64cdab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3501d300, ftLastWriteTime.dwHighDateTime=0x1cacf91, nFileSizeHigh=0x0, nFileSizeLow=0x8a4d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDITOR.DLL", cAlternateFileName="")) returned 1
	[0156.208] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x543977b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x1375c, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRM.XML", cAlternateFileName="")) returned 1
	[0156.208] ResetEvent (hEvent=0xfc) returned 1
	[0156.208] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0156.305] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424a0a00, ftCreationTime.dwHighDateTime=0x1c9244d, ftLastAccessTime.dwLowDateTime=0x64d730d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x424a0a00, ftLastWriteTime.dwHighDateTime=0x1c9244d, nFileSizeHigh=0x0, nFileSizeLow=0x135a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPIRMV.XML", cAlternateFileName="")) returned 1
	[0156.305] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x64d730d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x39988, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLK.DLL", cAlternateFileName="")) returned 1
	[0156.305] ResetEvent (hEvent=0xfc) returned 1
	[0156.305] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0156.308] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x551a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXACS.PDL", cAlternateFileName="")) returned 1
	[0156.308] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x34188, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXDB2.PDL", cAlternateFileName="")) returned 1
	[0156.308] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x16db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXGENERC.PDL", cAlternateFileName="")) returned 1
	[0156.308] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2ada0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXOLEDB.PDL", cAlternateFileName="")) returned 1
	[0156.309] ResetEvent (hEvent=0xfc) returned 1
	[0156.309] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0156.312] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x63fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXORACLE.PDL", cAlternateFileName="")) returned 1
	[0156.312] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x821165a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2fda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXSSRV.PDL", cAlternateFileName="")) returned 1
	[0156.312] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5adb1a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x4db80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IXUTIL.DLL", cAlternateFileName="")) returned 1
	[0156.312] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e2cf00, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7e2cf00, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x499c, dwReserved0=0x0, dwReserved1=0x0, cFileName="JFONT.DAT", cAlternateFileName="")) returned 1
	[0156.312] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x89e6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LATIN1.SHP", cAlternateFileName="")) returned 1
	[0156.312] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5d88a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xaa570, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.DLL", cAlternateFileName="")) returned 1
	[0156.313] ResetEvent (hEvent=0xfc) returned 1
	[0156.313] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0156.313] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Library", cAlternateFileName="")) returned 1
	[0156.313] GetProcessHeap () returned 0x800000
	[0156.313] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0156.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0156.314] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.314] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Analysis", cAlternateFileName="")) returned 1
	[0156.314] GetProcessHeap () returned 0x800000
	[0156.314] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0156.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0156.316] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.316] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x3bb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANALYS32.XLL", cAlternateFileName="")) returned 1
	[0156.316] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xe0c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATPVBAEN.XLAM", cAlternateFileName="ATPVBA~1.XLA")) returned 1
	[0156.316] ResetEvent (hEvent=0xfc) returned 1
	[0156.316] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0156.370] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa5ff110, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUNCRES.XLAM", cAlternateFileName="FUNCRE~1.XLA")) returned 1
	[0156.370] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xcf2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 1
	[0156.371] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xcf2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 0
	[0156.371] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0156.372] GetProcessHeap () returned 0x800000
	[0156.372] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0156.372] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x62688, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1
	[0156.372] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 1
	[0156.372] GetProcessHeap () returned 0x800000
	[0156.372] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0156.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0156.381] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.381] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x6c340, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER.XLAM", cAlternateFileName="SOLVER~1.XLA")) returned 1
	[0156.381] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x36158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 1
	[0156.381] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x36158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 0
	[0156.381] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0156.382] GetProcessHeap () returned 0x800000
	[0156.382] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0156.382] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 0
	[0156.382] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0156.382] GetProcessHeap () returned 0x800000
	[0156.382] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0156.382] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5dfae80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xfafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGELEMS.DLL", cAlternateFileName="")) returned 1
	[0156.382] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x82482540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xb590, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGMODEL.MDL", cAlternateFileName="")) returned 1
	[0156.382] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c850300, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd5e93400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c850300, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x77da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGVIEW.DLL", cAlternateFileName="")) returned 1
	[0156.400] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ce9100, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x6960cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3ce9100, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOOKUP.DAT", cAlternateFileName="")) returned 1
	[0156.400] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ae6c00, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6ae6c00, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x65da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIPH.DLL", cAlternateFileName="")) returned 1
	[0156.400] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x473d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELL.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1
	[0156.400] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x23570, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCPS.DLL", cAlternateFileName="")) returned 1
	[0156.400] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dec00, ftCreationTime.dwHighDateTime=0x1cb7010, ftLastAccessTime.dwLowDateTime=0xcf009660, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x40dec00, ftLastWriteTime.dwHighDateTime=0x1cb7010, nFileSizeHigh=0x0, nFileSizeLow=0xfdb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDCAT.DLL", cAlternateFileName="")) returned 1
	[0156.400] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1
	[0156.400] GetProcessHeap () returned 0x800000
	[0156.400] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0156.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0156.428] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.428] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x5ebdaad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPLAUSE.WAV", cAlternateFileName="")) returned 1
	[0156.428] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb46b000, ftCreationTime.dwHighDateTime=0x1bfbeee, ftLastAccessTime.dwLowDateTime=0x5ed57890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb46b000, ftLastWriteTime.dwHighDateTime=0x1bfbeee, nFileSizeHigh=0x0, nFileSizeLow=0x59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROW.WAV", cAlternateFileName="")) returned 1
	[0156.428] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90776900, ftCreationTime.dwHighDateTime=0x1bfbeeb, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90776900, ftLastWriteTime.dwHighDateTime=0x1bfbeeb, nFileSizeHigh=0x0, nFileSizeLow=0x2f676, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOMB.WAV", cAlternateFileName="")) returned 1
	[0156.428] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106db200, ftCreationTime.dwHighDateTime=0x1bfc6e8, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x106db200, ftLastWriteTime.dwHighDateTime=0x1bfc6e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.WAV", cAlternateFileName="")) returned 1
	[0156.428] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAMERA.WAV", cAlternateFileName="")) returned 1
	[0156.429] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASHREG.WAV", cAlternateFileName="")) returned 1
	[0156.429] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x91be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHIMES.WAV", cAlternateFileName="")) returned 1
	[0156.429] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffbd3c00, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffbd3c00, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLICK.WAV", cAlternateFileName="")) returned 1
	[0156.429] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef0cc600, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef0cc600, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="COIN.WAV", cAlternateFileName="")) returned 1
	[0156.429] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x4be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRUMROLL.WAV", cAlternateFileName="")) returned 1
	[0156.429] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x5c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLODE.WAV", cAlternateFileName="")) returned 1
	[0156.429] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb836b000, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x53822dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb836b000, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HAMMER.WAV", cAlternateFileName="")) returned 1
	[0156.429] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x72d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1
	[0156.429] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5dc00, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x5a7913b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4b5dc00, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x3d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUSH.WAV", cAlternateFileName="")) returned 1
	[0156.429] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eba3e00, ftCreationTime.dwHighDateTime=0x1bfa2b0, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3eba3e00, ftLastWriteTime.dwHighDateTime=0x1bfa2b0, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUCTION.WAV", cAlternateFileName="")) returned 1
	[0156.430] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x6d56d990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TYPE.WAV", cAlternateFileName="")) returned 1
	[0156.430] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdb8800, ftCreationTime.dwHighDateTime=0x1bfbeed, ftLastAccessTime.dwLowDateTime=0x7071e4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecdb8800, ftLastWriteTime.dwHighDateTime=0x1bfbeed, nFileSizeHigh=0x0, nFileSizeLow=0x35c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VOLTAGE.WAV", cAlternateFileName="")) returned 1
	[0156.430] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1
	[0156.430] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcde5800, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcde5800, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 1
	[0156.430] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcde5800, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcde5800, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 0
	[0156.430] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0156.431] GetProcessHeap () returned 0x800000
	[0156.431] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0156.431] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4f5000, ftCreationTime.dwHighDateTime=0x1cac037, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4f5000, ftLastWriteTime.dwHighDateTime=0x1cac037, nFileSizeHigh=0x0, nFileSizeLow=0x1c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="MI5659~1.DLL")) returned 1
	[0156.431] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c06100, ftCreationTime.dwHighDateTime=0x1ca24ad, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36c06100, ftLastWriteTime.dwHighDateTime=0x1ca24ad, nFileSizeHigh=0x0, nFileSizeLow=0x5a768, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.xml", cAlternateFileName="MI1B7D~1.XML")) returned 1
	[0156.431] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17441800, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x662b9570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17441800, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x8a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.dll", cAlternateFileName="MI2E5E~1.DLL")) returned 1
	[0156.431] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x568a2e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x295c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Runtime.xml", cAlternateFileName="MICROS~3.XML")) returned 1
	[0156.431] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad79f00, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ad79f00, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xa2780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.dll", cAlternateFileName="MIBA26~1.DLL")) returned 1
	[0156.431] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33c3f00, ftCreationTime.dwHighDateTime=0x1ca2551, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd33c3f00, ftLastWriteTime.dwHighDateTime=0x1ca2551, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.RuntimeUi.xml", cAlternateFileName="MI8366~1.XML")) returned 1
	[0156.431] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad79f00, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ad79f00, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xe9780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0156.432] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x33737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.xml", cAlternateFileName="MICROS~4.XML")) returned 1
	[0156.432] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x4998, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll", cAlternateFileName="MI6145~1.DLL")) returned 1
	[0156.432] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdb13800, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x543977b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcdb13800, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xa780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.FormControl.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0156.432] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x61e95fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x63790, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.dll", cAlternateFileName="MIE42F~1.DLL")) returned 1
	[0156.432] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x542d90d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0xc5265, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.SemiTrust.xml", cAlternateFileName="MICROS~1.XML")) returned 1
	[0156.432] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0139200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x561caed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0139200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x15780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0156.432] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62def200, ftCreationTime.dwHighDateTime=0x1c9bc30, ftLastAccessTime.dwLowDateTime=0x65d38290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62def200, ftLastWriteTime.dwHighDateTime=0x1c9bc30, nFileSizeHigh=0x0, nFileSizeLow=0x837d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.InfoPath.Xml.xml", cAlternateFileName="MI4026~1.XML")) returned 1
	[0156.432] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102e00, ftCreationTime.dwHighDateTime=0x1cab7e3, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x102e00, ftLastWriteTime.dwHighDateTime=0x1cab7e3, nFileSizeHigh=0x0, nFileSizeLow=0x12798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", cAlternateFileName="MIAE71~1.DLL")) returned 1
	[0156.432] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x67760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.workflow.actions.proxy.dll", cAlternateFileName="MIF37A~1.DLL")) returned 1
	[0156.432] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17441800, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x5687ccb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17441800, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x7d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0156.432] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x5687ccb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe853200, ftLastWriteTime.dwHighDateTime=0x1ca24ae, nFileSizeHigh=0x0, nFileSizeLow=0x311b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SharePoint.BusinessData.Administration.Client.xml", cAlternateFileName="MICROS~2.XML")) returned 1
	[0156.433] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x853ab920, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x74760, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.sharepoint.workflowactions.proxy.dll", cAlternateFileName="MI6AA3~1.DLL")) returned 1
	[0156.433] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x69c26830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x84760, dwReserved0=0x0, dwReserved1=0x0, cFileName="MIMEDIR.DLL", cAlternateFileName="")) returned 1
	[0156.433] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2796a00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2796a00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x8b760, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1
	[0156.433] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x58adaa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLCFG32.CPL", cAlternateFileName="")) returned 1
	[0156.434] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x5980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLSHEXT.DLL", cAlternateFileName="")) returned 1
	[0156.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0156.756] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0156.756] GetProcessHeap () returned 0x800000
	[0156.756] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0156.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0156.980] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0156.981] GetProcessHeap () returned 0x800000
	[0156.981] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0156.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ce49790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0157.149] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0157.155] GetProcessHeap () returned 0x800000
	[0157.155] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0157.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa6f6b5a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0157.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0157.309] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0157.310] GetProcessHeap () returned 0x800000
	[0157.310] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0157.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0157.398] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0157.398] GetProcessHeap () returned 0x800000
	[0157.398] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0157.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0157.398] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0157.399] GetProcessHeap () returned 0x800000
	[0157.399] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0157.399] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0157.399] GetProcessHeap () returned 0x800000
	[0157.399] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0157.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a1819b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0157.424] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0157.425] GetProcessHeap () returned 0x800000
	[0157.425] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0157.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70959970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70959970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0158.200] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0158.201] GetProcessHeap () returned 0x800000
	[0158.202] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0158.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0158.214] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0158.215] GetProcessHeap () returned 0x800000
	[0158.215] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0158.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0158.543] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0158.543] GetProcessHeap () returned 0x800000
	[0158.543] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0158.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0158.579] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0158.579] GetProcessHeap () returned 0x800000
	[0158.579] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0158.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x504da6a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x504da6a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0158.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0161.693] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0161.694] GetProcessHeap () returned 0x800000
	[0161.694] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0161.694] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0161.695] GetProcessHeap () returned 0x800000
	[0161.695] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0161.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0161.832] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0161.832] GetProcessHeap () returned 0x800000
	[0161.832] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0161.837] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0161.838] GetProcessHeap () returned 0x800000
	[0161.838] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0161.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0161.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0161.857] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0161.858] GetProcessHeap () returned 0x800000
	[0161.858] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0161.858] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0161.858] GetProcessHeap () returned 0x800000
	[0161.858] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0161.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0161.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0161.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0162.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0162.014] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0162.015] GetProcessHeap () returned 0x800000
	[0162.015] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0162.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0162.154] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0162.155] GetProcessHeap () returned 0x800000
	[0162.155] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0162.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0162.156] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0162.156] GetProcessHeap () returned 0x800000
	[0162.156] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0162.156] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0162.157] GetProcessHeap () returned 0x800000
	[0162.157] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0162.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0162.398] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0162.399] GetProcessHeap () returned 0x800000
	[0162.399] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0162.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0162.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0162.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0162.409] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0162.409] GetProcessHeap () returned 0x800000
	[0162.409] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0162.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0162.414] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0162.414] GetProcessHeap () returned 0x800000
	[0162.415] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0162.415] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0162.415] GetProcessHeap () returned 0x800000
	[0162.415] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0162.415] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0162.416] GetProcessHeap () returned 0x800000
	[0162.416] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0162.503] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0162.504] GetProcessHeap () returned 0x800000
	[0162.504] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0162.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0162.505] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0162.505] GetProcessHeap () returned 0x800000
	[0162.505] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0162.505] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0162.506] GetProcessHeap () returned 0x800000
	[0162.506] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0162.506] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0162.506] GetProcessHeap () returned 0x800000
	[0162.506] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0162.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0162.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0162.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0162.509] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0162.510] GetProcessHeap () returned 0x800000
	[0162.510] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0162.510] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0162.510] GetProcessHeap () returned 0x800000
	[0162.510] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0162.510] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0162.510] GetProcessHeap () returned 0x800000
	[0162.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0162.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0162.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0162.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0162.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0162.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0162.524] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0162.525] GetProcessHeap () returned 0x800000
	[0162.525] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0162.525] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0162.525] GetProcessHeap () returned 0x800000
	[0162.525] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0162.525] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0162.525] GetProcessHeap () returned 0x800000
	[0162.525] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0162.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0162.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0162.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0162.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0162.527] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0162.527] GetProcessHeap () returned 0x800000
	[0162.527] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0162.527] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0162.528] GetProcessHeap () returned 0x800000
	[0162.528] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0162.528] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0162.528] GetProcessHeap () returned 0x800000
	[0162.528] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0162.528] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0162.529] GetProcessHeap () returned 0x800000
	[0162.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0162.529] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0162.529] GetProcessHeap () returned 0x800000
	[0162.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0162.530] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0162.531] GetProcessHeap () returned 0x800000
	[0162.531] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0162.531] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe617dc20, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe617dc20, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0162.531] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0162.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0162.542] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0162.543] GetProcessHeap () returned 0x800000
	[0162.543] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0162.543] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0162.544] GetProcessHeap () returned 0x800000
	[0162.544] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0162.544] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0162.544] GetProcessHeap () returned 0x800000
	[0162.544] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0162.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0162.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0162.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0162.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0162.547] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0162.547] GetProcessHeap () returned 0x800000
	[0162.547] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0162.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0162.548] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0162.548] GetProcessHeap () returned 0x800000
	[0162.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0162.548] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0162.548] GetProcessHeap () returned 0x800000
	[0162.548] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0162.549] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0162.549] GetProcessHeap () returned 0x800000
	[0162.549] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0162.549] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0162.549] GetProcessHeap () returned 0x800000
	[0162.549] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0162.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0162.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0162.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0162.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0162.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0162.737] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0162.737] GetProcessHeap () returned 0x800000
	[0162.737] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0162.761] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0162.761] GetProcessHeap () returned 0x800000
	[0162.761] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0162.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0162.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0162.770] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0162.770] GetProcessHeap () returned 0x800000
	[0162.770] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0163.038] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0163.039] GetProcessHeap () returned 0x800000
	[0163.039] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0163.039] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0163.039] GetProcessHeap () returned 0x800000
	[0163.039] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0163.039] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0163.039] GetProcessHeap () returned 0x800000
	[0163.039] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0163.041] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0163.041] GetProcessHeap () returned 0x800000
	[0163.041] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0163.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x4232b3dd, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x4232b3dd, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0163.041] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0163.041] GetProcessHeap () returned 0x800000
	[0163.041] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0163.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0163.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0163.046] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0163.047] GetProcessHeap () returned 0x800000
	[0163.047] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0163.058] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0163.058] GetProcessHeap () returned 0x800000
	[0163.058] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0163.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0163.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0163.266] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0163.267] GetProcessHeap () returned 0x800000
	[0163.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0163.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.489] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.489] GetProcessHeap () returned 0x800000
	[0163.489] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0163.490] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0163.490] GetProcessHeap () returned 0x800000
	[0163.490] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0163.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6640820, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6640820, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0163.491] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.491] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.491] GetProcessHeap () returned 0x800000
	[0163.491] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0163.617] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0163.617] GetProcessHeap () returned 0x800000
	[0163.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0163.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0163.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.628] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.629] GetProcessHeap () returned 0x800000
	[0163.629] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0163.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.629] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.629] GetProcessHeap () returned 0x800000
	[0163.629] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0163.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.642] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.643] GetProcessHeap () returned 0x800000
	[0163.643] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0163.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.748] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.749] GetProcessHeap () returned 0x800000
	[0163.749] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0163.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.749] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.749] GetProcessHeap () returned 0x800000
	[0163.749] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0163.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.750] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.750] GetProcessHeap () returned 0x800000
	[0163.750] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0163.766] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0163.767] GetProcessHeap () returned 0x800000
	[0163.767] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0163.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0163.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0163.768] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0163.768] GetProcessHeap () returned 0x800000
	[0163.768] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0163.768] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.768] GetProcessHeap () returned 0x800000
	[0163.768] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0163.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0163.773] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0163.774] GetProcessHeap () returned 0x800000
	[0163.774] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0163.786] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.786] GetProcessHeap () returned 0x800000
	[0163.786] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0163.786] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0163.787] GetProcessHeap () returned 0x800000
	[0163.787] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0163.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0163.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.788] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.788] GetProcessHeap () returned 0x800000
	[0163.788] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0163.798] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0163.798] GetProcessHeap () returned 0x800000
	[0163.798] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0163.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x987bf1ac, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x987bf1ac, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0163.799] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0163.799] GetProcessHeap () returned 0x800000
	[0163.799] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0163.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0163.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.800] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.800] GetProcessHeap () returned 0x800000
	[0163.800] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0163.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0163.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0163.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0163.803] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0163.803] GetProcessHeap () returned 0x800000
	[0163.803] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0163.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0163.804] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0163.804] GetProcessHeap () returned 0x800000
	[0163.804] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0163.804] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0163.804] GetProcessHeap () returned 0x800000
	[0163.804] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0163.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0164.029] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0164.030] GetProcessHeap () returned 0x800000
	[0164.030] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0164.030] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0164.031] GetProcessHeap () returned 0x800000
	[0164.031] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0164.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0164.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0164.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0164.132] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0164.132] GetProcessHeap () returned 0x800000
	[0164.132] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0164.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0164.133] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0164.133] GetProcessHeap () returned 0x800000
	[0164.133] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0164.133] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0164.133] GetProcessHeap () returned 0x800000
	[0164.133] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0164.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805c807b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805c807b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0164.653] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0164.655] GetProcessHeap () returned 0x800000
	[0164.655] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0164.655] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0164.655] GetProcessHeap () returned 0x800000
	[0164.655] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0164.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0164.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0164.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0164.665] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0164.665] GetProcessHeap () returned 0x800000
	[0164.665] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0164.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0164.666] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0164.666] GetProcessHeap () returned 0x800000
	[0164.666] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0164.666] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0164.667] GetProcessHeap () returned 0x800000
	[0164.667] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0164.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8057bdba, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8057bdba, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0164.677] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0164.678] GetProcessHeap () returned 0x800000
	[0164.678] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0164.680] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0164.680] GetProcessHeap () returned 0x800000
	[0164.681] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0164.681] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0164.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0164.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0164.685] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0164.686] GetProcessHeap () returned 0x800000
	[0164.686] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0164.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0164.865] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0164.865] GetProcessHeap () returned 0x800000
	[0164.865] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0164.865] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0164.866] GetProcessHeap () returned 0x800000
	[0164.866] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0164.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8063a49c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8063a49c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0164.893] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0164.895] GetProcessHeap () returned 0x800000
	[0164.895] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0164.895] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0164.895] GetProcessHeap () returned 0x800000
	[0164.895] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0164.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0164.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0164.912] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0164.912] GetProcessHeap () returned 0x800000
	[0164.912] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0164.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa48ceb9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0164.913] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0164.913] GetProcessHeap () returned 0x800000
	[0164.913] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0164.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0164.954] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0164.955] GetProcessHeap () returned 0x800000
	[0164.955] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0164.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0164.955] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0164.956] GetProcessHeap () returned 0x800000
	[0164.956] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0164.956] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0164.956] GetProcessHeap () returned 0x800000
	[0164.956] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0164.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0164.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0164.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0164.957] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0164.957] GetProcessHeap () returned 0x800000
	[0164.957] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0164.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0165.124] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0165.124] GetProcessHeap () returned 0x800000
	[0165.124] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0165.124] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0165.124] GetProcessHeap () returned 0x800000
	[0165.124] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0165.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806605fc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806605fc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0165.370] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0165.371] GetProcessHeap () returned 0x800000
	[0165.371] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0165.375] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0165.375] GetProcessHeap () returned 0x800000
	[0165.375] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0165.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0165.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0165.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0165.380] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0165.381] GetProcessHeap () returned 0x800000
	[0165.381] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0165.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0165.386] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0165.386] GetProcessHeap () returned 0x800000
	[0165.386] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0165.386] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0165.387] GetProcessHeap () returned 0x800000
	[0165.387] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0165.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8061433b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8061433b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0165.506] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0165.507] GetProcessHeap () returned 0x800000
	[0165.507] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0165.507] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0165.508] GetProcessHeap () returned 0x800000
	[0165.508] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0165.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0165.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0165.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0165.527] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0165.528] GetProcessHeap () returned 0x800000
	[0165.528] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0165.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0165.528] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0165.529] GetProcessHeap () returned 0x800000
	[0165.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0165.529] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0165.529] GetProcessHeap () returned 0x800000
	[0165.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0165.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0165.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0165.537] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0165.538] GetProcessHeap () returned 0x800000
	[0165.538] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0165.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0165.693] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0165.693] GetProcessHeap () returned 0x800000
	[0165.693] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0165.842] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0165.842] GetProcessHeap () returned 0x800000
	[0165.842] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0165.843] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0165.843] GetProcessHeap () returned 0x800000
	[0165.843] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0165.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0165.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0165.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0165.851] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0165.852] GetProcessHeap () returned 0x800000
	[0165.852] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0165.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0165.958] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0165.959] GetProcessHeap () returned 0x800000
	[0165.959] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0165.963] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0165.964] GetProcessHeap () returned 0x800000
	[0165.964] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0165.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8052fafa, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8052fafa, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0166.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0166.289] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0166.290] GetProcessHeap () returned 0x800000
	[0166.290] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0166.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0166.291] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0166.291] GetProcessHeap () returned 0x800000
	[0166.292] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0166.962] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0166.963] GetProcessHeap () returned 0x800000
	[0166.963] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0166.963] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0166.963] GetProcessHeap () returned 0x800000
	[0166.963] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0166.963] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0166.964] GetProcessHeap () returned 0x800000
	[0166.964] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0166.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0166.967] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0166.968] GetProcessHeap () returned 0x800000
	[0166.968] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0166.971] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0166.972] GetProcessHeap () returned 0x800000
	[0166.972] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0166.972] FindClose (in: hFindFile=0x879778 | out: hFindFile=0x879778) returned 1
	[0166.972] GetProcessHeap () returned 0x800000
	[0166.972] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0166.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\*", lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0166.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf40b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf40b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0166.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0166.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0166.976] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0166.976] GetProcessHeap () returned 0x800000
	[0166.976] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0166.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0167.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.266] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.268] GetProcessHeap () returned 0x800000
	[0167.268] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0167.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.305] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.306] GetProcessHeap () returned 0x800000
	[0167.306] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0167.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.557] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.557] GetProcessHeap () returned 0x800000
	[0167.557] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.558] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.558] GetProcessHeap () returned 0x800000
	[0167.558] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.559] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.562] GetProcessHeap () returned 0x800000
	[0167.562] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.563] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.563] GetProcessHeap () returned 0x800000
	[0167.563] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.564] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.565] GetProcessHeap () returned 0x800000
	[0167.565] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.566] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.566] GetProcessHeap () returned 0x800000
	[0167.566] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.567] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.567] GetProcessHeap () returned 0x800000
	[0167.567] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.569] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.569] GetProcessHeap () returned 0x800000
	[0167.569] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.569] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.569] GetProcessHeap () returned 0x800000
	[0167.570] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.570] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.571] GetProcessHeap () returned 0x800000
	[0167.571] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.571] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.571] GetProcessHeap () returned 0x800000
	[0167.571] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.591] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.592] GetProcessHeap () returned 0x800000
	[0167.592] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.594] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.595] GetProcessHeap () returned 0x800000
	[0167.595] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.741] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.742] GetProcessHeap () returned 0x800000
	[0167.742] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.743] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.744] GetProcessHeap () returned 0x800000
	[0167.744] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.745] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.745] GetProcessHeap () returned 0x800000
	[0167.745] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.746] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.746] GetProcessHeap () returned 0x800000
	[0167.746] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.747] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.748] GetProcessHeap () returned 0x800000
	[0167.748] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.749] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.749] GetProcessHeap () returned 0x800000
	[0167.749] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.750] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.750] GetProcessHeap () returned 0x800000
	[0167.750] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.751] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.751] GetProcessHeap () returned 0x800000
	[0167.751] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.752] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.755] GetProcessHeap () returned 0x800000
	[0167.755] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.756] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.756] GetProcessHeap () returned 0x800000
	[0167.756] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.757] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.757] GetProcessHeap () returned 0x800000
	[0167.757] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.758] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.758] GetProcessHeap () returned 0x800000
	[0167.758] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.759] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.760] GetProcessHeap () returned 0x800000
	[0167.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.760] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.761] GetProcessHeap () returned 0x800000
	[0167.761] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.761] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.761] GetProcessHeap () returned 0x800000
	[0167.761] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0167.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.761] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.762] GetProcessHeap () returned 0x800000
	[0167.762] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0167.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.910] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.913] GetProcessHeap () returned 0x800000
	[0167.913] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.920] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.922] GetProcessHeap () returned 0x800000
	[0167.922] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.928] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.931] GetProcessHeap () returned 0x800000
	[0167.931] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.935] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.935] GetProcessHeap () returned 0x800000
	[0167.935] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.935] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.936] GetProcessHeap () returned 0x800000
	[0167.936] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.939] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.940] GetProcessHeap () returned 0x800000
	[0167.940] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.943] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.943] GetProcessHeap () returned 0x800000
	[0167.943] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.946] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.946] GetProcessHeap () returned 0x800000
	[0167.946] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.949] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.950] GetProcessHeap () returned 0x800000
	[0167.950] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.954] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.954] GetProcessHeap () returned 0x800000
	[0167.954] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.954] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.955] GetProcessHeap () returned 0x800000
	[0167.955] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.958] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.959] GetProcessHeap () returned 0x800000
	[0167.959] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.961] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.962] GetProcessHeap () returned 0x800000
	[0167.962] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.965] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.966] GetProcessHeap () returned 0x800000
	[0167.966] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.158] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.158] GetProcessHeap () returned 0x800000
	[0168.159] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0168.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.159] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.159] GetProcessHeap () returned 0x800000
	[0168.159] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.159] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.160] GetProcessHeap () returned 0x800000
	[0168.160] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.170] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.170] GetProcessHeap () returned 0x800000
	[0168.170] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.173] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.174] GetProcessHeap () returned 0x800000
	[0168.174] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.177] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.177] GetProcessHeap () returned 0x800000
	[0168.177] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.180] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.181] GetProcessHeap () returned 0x800000
	[0168.181] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.183] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.184] GetProcessHeap () returned 0x800000
	[0168.184] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.187] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.187] GetProcessHeap () returned 0x800000
	[0168.187] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.187] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.188] GetProcessHeap () returned 0x800000
	[0168.188] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.190] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.191] GetProcessHeap () returned 0x800000
	[0168.191] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.194] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.194] GetProcessHeap () returned 0x800000
	[0168.194] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.302] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.303] GetProcessHeap () returned 0x800000
	[0168.303] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.303] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0168.304] GetProcessHeap () returned 0x800000
	[0168.304] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0168.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0168.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0168.451] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0168.452] GetProcessHeap () returned 0x800000
	[0168.452] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0168.452] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.452] GetProcessHeap () returned 0x800000
	[0168.452] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0168.600] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0168.600] GetProcessHeap () returned 0x800000
	[0168.600] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0168.601] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.601] GetProcessHeap () returned 0x800000
	[0168.601] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0168.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0168.641] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0168.641] GetProcessHeap () returned 0x800000
	[0168.642] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0168.647] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0168.647] GetProcessHeap () returned 0x800000
	[0168.647] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0168.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0168.723] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0168.724] GetProcessHeap () returned 0x800000
	[0168.724] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0168.724] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0168.724] GetProcessHeap () returned 0x800000
	[0168.724] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0168.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0168.869] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0168.869] GetProcessHeap () returned 0x800000
	[0168.869] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0168.872] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0168.872] GetProcessHeap () returned 0x800000
	[0168.872] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0168.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0168.987] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0168.987] GetProcessHeap () returned 0x800000
	[0168.987] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0168.987] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0168.988] GetProcessHeap () returned 0x800000
	[0168.988] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0169.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0169.153] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0169.154] GetProcessHeap () returned 0x800000
	[0169.154] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0169.154] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0169.155] GetProcessHeap () returned 0x800000
	[0169.155] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0169.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0169.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0169.272] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0169.273] GetProcessHeap () returned 0x800000
	[0169.273] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0169.278] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0169.279] GetProcessHeap () returned 0x800000
	[0169.279] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0169.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0169.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0169.509] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0169.510] GetProcessHeap () returned 0x800000
	[0169.510] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0169.513] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0169.513] GetProcessHeap () returned 0x800000
	[0169.513] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0169.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0169.732] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e30060
	[0169.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0169.741] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0169.741] GetProcessHeap () returned 0x800000
	[0169.742] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0169.755] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0169.755] GetProcessHeap () returned 0x800000
	[0169.755] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0169.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0169.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0169.962] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0169.962] GetProcessHeap () returned 0x800000
	[0169.962] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0169.969] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0169.969] GetProcessHeap () returned 0x800000
	[0169.969] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0169.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0170.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0170.266] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0170.267] GetProcessHeap () returned 0x800000
	[0170.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0170.267] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0170.268] GetProcessHeap () returned 0x800000
	[0170.268] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0170.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0170.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0170.271] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0170.272] GetProcessHeap () returned 0x800000
	[0170.272] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0170.272] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0170.272] GetProcessHeap () returned 0x800000
	[0170.272] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0170.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0170.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0170.323] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0170.324] GetProcessHeap () returned 0x800000
	[0170.324] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0170.324] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0170.324] GetProcessHeap () returned 0x800000
	[0170.324] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0170.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0170.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0170.409] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0170.409] GetProcessHeap () returned 0x800000
	[0170.409] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0170.409] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0170.410] GetProcessHeap () returned 0x800000
	[0170.410] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0170.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0170.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0170.412] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0170.412] GetProcessHeap () returned 0x800000
	[0170.412] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0170.413] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0170.413] GetProcessHeap () returned 0x800000
	[0170.413] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0170.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0170.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0170.516] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0170.516] GetProcessHeap () returned 0x800000
	[0170.516] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0170.516] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0170.516] GetProcessHeap () returned 0x800000
	[0170.516] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0170.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0170.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0170.626] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0170.626] GetProcessHeap () returned 0x800000
	[0170.626] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0170.633] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0170.633] GetProcessHeap () returned 0x800000
	[0170.633] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0170.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0170.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0170.890] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0170.890] GetProcessHeap () returned 0x800000
	[0170.890] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0170.890] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0170.890] GetProcessHeap () returned 0x800000
	[0170.890] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0170.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0170.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0170.892] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0170.893] GetProcessHeap () returned 0x800000
	[0170.893] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0170.893] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0170.893] GetProcessHeap () returned 0x800000
	[0170.893] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0170.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0170.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0171.014] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0171.015] GetProcessHeap () returned 0x800000
	[0171.015] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0171.015] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0171.015] GetProcessHeap () returned 0x800000
	[0171.015] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0171.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0171.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0171.067] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0171.067] GetProcessHeap () returned 0x800000
	[0171.067] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0171.086] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0171.086] GetProcessHeap () returned 0x800000
	[0171.086] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0171.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0171.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0171.234] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0171.234] GetProcessHeap () returned 0x800000
	[0171.234] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0171.285] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0171.286] GetProcessHeap () returned 0x800000
	[0171.286] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0171.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0171.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0171.383] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0171.383] GetProcessHeap () returned 0x800000
	[0171.383] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0171.383] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0171.384] GetProcessHeap () returned 0x800000
	[0171.384] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0171.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0171.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0171.596] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0171.597] GetProcessHeap () returned 0x800000
	[0171.597] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0171.597] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0171.597] GetProcessHeap () returned 0x800000
	[0171.597] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0171.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0171.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0171.770] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0171.771] GetProcessHeap () returned 0x800000
	[0171.771] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0171.785] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0171.786] GetProcessHeap () returned 0x800000
	[0171.786] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0171.786] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0171.786] GetProcessHeap () returned 0x800000
	[0171.786] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0171.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0171.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0171.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0172.060] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0172.061] GetProcessHeap () returned 0x800000
	[0172.061] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0172.061] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.061] GetProcessHeap () returned 0x800000
	[0172.061] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0172.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0172.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0172.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.083] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.084] GetProcessHeap () returned 0x800000
	[0172.084] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.084] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.084] GetProcessHeap () returned 0x800000
	[0172.084] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.084] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.085] GetProcessHeap () returned 0x800000
	[0172.085] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.086] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.087] GetProcessHeap () returned 0x800000
	[0172.087] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.087] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.087] GetProcessHeap () returned 0x800000
	[0172.087] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.088] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.088] GetProcessHeap () returned 0x800000
	[0172.088] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.097] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.098] GetProcessHeap () returned 0x800000
	[0172.098] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.104] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.105] GetProcessHeap () returned 0x800000
	[0172.105] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.113] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.114] GetProcessHeap () returned 0x800000
	[0172.114] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.114] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.123] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.123] GetProcessHeap () returned 0x800000
	[0172.123] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.224] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.225] GetProcessHeap () returned 0x800000
	[0172.225] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.238] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.239] GetProcessHeap () returned 0x800000
	[0172.239] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.239] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.240] GetProcessHeap () returned 0x800000
	[0172.240] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.387] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.387] GetProcessHeap () returned 0x800000
	[0172.387] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.388] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.388] GetProcessHeap () returned 0x800000
	[0172.388] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.388] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.389] GetProcessHeap () returned 0x800000
	[0172.389] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.436] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.437] GetProcessHeap () returned 0x800000
	[0172.437] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.439] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.440] GetProcessHeap () returned 0x800000
	[0172.440] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.441] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.441] GetProcessHeap () returned 0x800000
	[0172.441] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.443] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.444] GetProcessHeap () returned 0x800000
	[0172.444] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.446] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.447] GetProcessHeap () returned 0x800000
	[0172.447] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.449] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.450] GetProcessHeap () returned 0x800000
	[0172.450] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.452] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.453] GetProcessHeap () returned 0x800000
	[0172.453] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.453] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.453] GetProcessHeap () returned 0x800000
	[0172.453] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.455] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.456] GetProcessHeap () returned 0x800000
	[0172.456] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.458] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.459] GetProcessHeap () returned 0x800000
	[0172.459] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0172.461] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0172.462] GetProcessHeap () returned 0x800000
	[0172.462] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0172.462] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0172.463] GetProcessHeap () returned 0x800000
	[0172.463] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0172.463] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.463] GetProcessHeap () returned 0x800000
	[0172.463] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0172.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0172.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0173.039] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0173.040] GetProcessHeap () returned 0x800000
	[0173.040] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0173.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0173.047] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0173.047] GetProcessHeap () returned 0x800000
	[0173.047] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0173.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0173.062] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0173.063] GetProcessHeap () returned 0x800000
	[0173.063] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0173.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0173.063] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0173.064] GetProcessHeap () returned 0x800000
	[0173.064] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0173.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0173.065] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0173.065] GetProcessHeap () returned 0x800000
	[0173.065] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0173.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0173.175] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0173.176] GetProcessHeap () returned 0x800000
	[0173.176] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0173.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0173.238] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0173.239] GetProcessHeap () returned 0x800000
	[0173.239] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0173.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0173.270] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0173.271] GetProcessHeap () returned 0x800000
	[0173.271] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0173.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0173.272] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0173.272] GetProcessHeap () returned 0x800000
	[0173.272] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0173.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0173.273] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0173.273] GetProcessHeap () returned 0x800000
	[0173.273] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0173.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0173.274] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0173.274] GetProcessHeap () returned 0x800000
	[0173.274] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0173.274] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0173.275] GetProcessHeap () returned 0x800000
	[0173.275] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0173.378] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0173.378] GetProcessHeap () returned 0x800000
	[0173.379] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0173.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0173.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0173.449] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0173.450] GetProcessHeap () returned 0x800000
	[0173.450] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0173.450] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0173.450] GetProcessHeap () returned 0x800000
	[0173.450] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0173.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0173.455] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0173.456] GetProcessHeap () returned 0x800000
	[0173.456] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0173.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0173.456] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0173.457] GetProcessHeap () returned 0x800000
	[0173.457] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0173.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0173.460] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0173.461] GetProcessHeap () returned 0x800000
	[0173.461] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0173.461] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0173.461] GetProcessHeap () returned 0x800000
	[0173.461] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0173.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0173.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0173.737] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0173.738] GetProcessHeap () returned 0x800000
	[0173.738] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0173.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0174.547] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0174.554] GetProcessHeap () returned 0x800000
	[0174.554] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0174.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0174.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f556b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0174.799] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0174.799] GetProcessHeap () returned 0x800000
	[0174.799] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0174.799] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0174.800] GetProcessHeap () returned 0x800000
	[0174.800] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0174.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0174.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0175.544] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0175.545] GetProcessHeap () returned 0x800000
	[0175.545] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0175.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0175.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0175.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0176.734] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0176.735] GetProcessHeap () returned 0x800000
	[0176.735] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0176.736] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0176.736] GetProcessHeap () returned 0x800000
	[0176.736] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0176.736] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0176.737] GetProcessHeap () returned 0x800000
	[0176.737] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0176.738] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0176.738] GetProcessHeap () returned 0x800000
	[0176.738] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0176.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0176.739] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0176.740] GetProcessHeap () returned 0x800000
	[0176.740] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0176.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0176.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0176.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0176.754] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0176.754] GetProcessHeap () returned 0x800000
	[0176.754] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0176.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0176.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0176.756] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0176.757] GetProcessHeap () returned 0x800000
	[0176.757] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0176.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0176.908] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0176.909] GetProcessHeap () returned 0x800000
	[0176.909] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0176.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0178.274] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0178.275] GetProcessHeap () returned 0x800000
	[0178.275] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0178.275] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0178.275] GetProcessHeap () returned 0x800000
	[0178.275] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0178.276] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0178.276] GetProcessHeap () returned 0x800000
	[0178.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0178.276] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0178.276] GetProcessHeap () returned 0x800000
	[0178.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0178.277] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0178.277] GetProcessHeap () returned 0x800000
	[0178.277] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0178.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0178.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0178.554] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0178.555] GetProcessHeap () returned 0x800000
	[0178.555] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0178.555] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0178.556] GetProcessHeap () returned 0x800000
	[0178.556] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0178.559] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0178.560] GetProcessHeap () returned 0x800000
	[0178.560] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0178.560] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0178.561] GetProcessHeap () returned 0x800000
	[0178.561] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0178.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xbdc44680, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbdc44680, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0178.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0178.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0178.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0178.829] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0178.830] GetProcessHeap () returned 0x800000
	[0178.830] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0178.831] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0178.831] GetProcessHeap () returned 0x800000
	[0178.831] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0178.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0178.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0178.837] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0178.838] GetProcessHeap () returned 0x800000
	[0178.838] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0178.838] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0178.838] GetProcessHeap () returned 0x800000
	[0178.838] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0178.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0178.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0178.988] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0178.989] GetProcessHeap () returned 0x800000
	[0178.989] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0178.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0178.990] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0178.990] GetProcessHeap () returned 0x800000
	[0178.990] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0178.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0178.991] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0178.992] GetProcessHeap () returned 0x800000
	[0178.992] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0178.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0178.993] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0178.993] GetProcessHeap () returned 0x800000
	[0178.993] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0178.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0178.994] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0178.994] GetProcessHeap () returned 0x800000
	[0178.994] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0178.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0178.995] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0178.995] GetProcessHeap () returned 0x800000
	[0178.995] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0178.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0178.998] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0178.998] GetProcessHeap () returned 0x800000
	[0178.998] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0178.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0178.999] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0178.999] GetProcessHeap () returned 0x800000
	[0178.999] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.000] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.001] GetProcessHeap () returned 0x800000
	[0179.001] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.001] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.002] GetProcessHeap () returned 0x800000
	[0179.002] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.002] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.003] GetProcessHeap () returned 0x800000
	[0179.003] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.004] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.004] GetProcessHeap () returned 0x800000
	[0179.004] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.005] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.005] GetProcessHeap () returned 0x800000
	[0179.005] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.006] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.007] GetProcessHeap () returned 0x800000
	[0179.007] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.008] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.008] GetProcessHeap () returned 0x800000
	[0179.008] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.008] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.009] GetProcessHeap () returned 0x800000
	[0179.009] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.009] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.010] GetProcessHeap () returned 0x800000
	[0179.010] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.010] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.010] GetProcessHeap () returned 0x800000
	[0179.010] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.011] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.012] GetProcessHeap () returned 0x800000
	[0179.012] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.012] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.013] GetProcessHeap () returned 0x800000
	[0179.013] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.014] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.014] GetProcessHeap () returned 0x800000
	[0179.014] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.014] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.015] GetProcessHeap () returned 0x800000
	[0179.015] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.016] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.016] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1
	[0179.016] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0
	[0179.016] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.016] GetProcessHeap () returned 0x800000
	[0179.016] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.016] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1
	[0179.016] GetProcessHeap () returned 0x800000
	[0179.016] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0179.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.018] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.018] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1
	[0179.018] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0
	[0179.018] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.018] GetProcessHeap () returned 0x800000
	[0179.018] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.018] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1
	[0179.018] GetProcessHeap () returned 0x800000
	[0179.018] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0179.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.019] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.019] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1
	[0179.019] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0
	[0179.019] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.019] GetProcessHeap () returned 0x800000
	[0179.019] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.019] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0179.019] GetProcessHeap () returned 0x800000
	[0179.019] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0179.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.020] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.020] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1
	[0179.020] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0
	[0179.020] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.020] GetProcessHeap () returned 0x800000
	[0179.020] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.020] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0179.020] GetProcessHeap () returned 0x800000
	[0179.020] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0179.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.021] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.021] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1
	[0179.021] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0
	[0179.021] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.021] GetProcessHeap () returned 0x800000
	[0179.021] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.021] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0179.021] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.022] GetProcessHeap () returned 0x800000
	[0179.022] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.022] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 0
	[0179.022] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0179.022] GetProcessHeap () returned 0x800000
	[0179.022] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.022] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0179.022] GetProcessHeap () returned 0x800000
	[0179.022] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0179.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0179.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1
	[0179.023] GetProcessHeap () returned 0x800000
	[0179.023] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.023] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.023] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa1fc00, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x801fa420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xaa1fc00, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x3cb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaucheck.exe", cAlternateFileName="")) returned 1
	[0179.024] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83fa200, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x801fa420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83fa200, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x39780, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureg.exe", cAlternateFileName="")) returned 1
	[0179.024] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dd4800, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x5dd4800, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x7bd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jucheck.exe", cAlternateFileName="")) returned 1
	[0179.024] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x249c100, ftCreationTime.dwHighDateTime=0x1ce76b1, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x249c100, ftLastWriteTime.dwHighDateTime=0x1ce76b1, nFileSizeHigh=0x0, nFileSizeLow=0x3e180, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.exe", cAlternateFileName="")) returned 1
	[0179.024] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x583, dwReserved0=0x0, dwReserved1=0x0, cFileName="task.xml", cAlternateFileName="")) returned 1
	[0179.024] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 1
	[0179.024] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfeb63a00, ftLastWriteTime.dwHighDateTime=0x1ce76b0, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="task64.xml", cAlternateFileName="")) returned 0
	[0179.024] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.025] GetProcessHeap () returned 0x800000
	[0179.025] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.025] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0
	[0179.025] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0179.026] GetProcessHeap () returned 0x800000
	[0179.026] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0179.026] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1
	[0179.026] GetProcessHeap () returned 0x800000
	[0179.026] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0179.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0179.026] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.026] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAO", cAlternateFileName="")) returned 1
	[0179.026] GetProcessHeap () returned 0x800000
	[0179.026] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.026] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.026] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b309dbc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5b309dbc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x872c4350, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="dao360.dll", cAlternateFileName="")) returned 1
	[0179.026] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b309dbc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5b309dbc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x872c4350, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="dao360.dll", cAlternateFileName="")) returned 0
	[0179.026] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.028] GetProcessHeap () returned 0x800000
	[0179.028] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.028] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0179.028] GetProcessHeap () returned 0x800000
	[0179.028] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1
	[0179.029] GetProcessHeap () returned 0x800000
	[0179.029] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.030] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.030] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b50f00, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x52b50f00, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x3340, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0179.030] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b50f00, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x52b50f00, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x3340, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0179.030] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.031] GetProcessHeap () returned 0x800000
	[0179.031] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.031] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1
	[0179.031] GetProcessHeap () returned 0x800000
	[0179.031] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.031] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.031] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538a200, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x538a200, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x4f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0179.031] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538a200, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x538a200, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x4f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0179.031] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.032] GetProcessHeap () returned 0x800000
	[0179.032] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.032] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0179.032] GetProcessHeap () returned 0x800000
	[0179.032] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.033] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.033] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6c3700, ftCreationTime.dwHighDateTime=0x1c9db16, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7c6c3700, ftLastWriteTime.dwHighDateTime=0x1c9db16, nFileSizeHigh=0x0, nFileSizeLow=0x4548, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0179.033] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6c3700, ftCreationTime.dwHighDateTime=0x1c9db16, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7c6c3700, ftLastWriteTime.dwHighDateTime=0x1c9db16, nFileSizeHigh=0x0, nFileSizeLow=0x4548, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0179.033] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.033] GetProcessHeap () returned 0x800000
	[0179.033] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.033] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0179.033] GetProcessHeap () returned 0x800000
	[0179.033] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.034] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.034] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c48f00, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57c48f00, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x4d48, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0179.034] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57c48f00, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57c48f00, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x4d48, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0179.034] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.035] GetProcessHeap () returned 0x800000
	[0179.035] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.035] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1
	[0179.035] GetProcessHeap () returned 0x800000
	[0179.035] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.035] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.035] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b581600, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b581600, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x4d48, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0179.035] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b581600, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b581600, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x4d48, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0179.035] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.036] GetProcessHeap () returned 0x800000
	[0179.036] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.036] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1
	[0179.036] GetProcessHeap () returned 0x800000
	[0179.036] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.037] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.037] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c04500, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xb4c04500, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x3948, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0179.037] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c04500, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xb4c04500, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x3948, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0179.037] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.038] GetProcessHeap () returned 0x800000
	[0179.038] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.038] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1
	[0179.038] GetProcessHeap () returned 0x800000
	[0179.038] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.038] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.038] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b1dc00, ftCreationTime.dwHighDateTime=0x1c9db18, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b1dc00, ftLastWriteTime.dwHighDateTime=0x1c9db18, nFileSizeHigh=0x0, nFileSizeLow=0x3948, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0179.038] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b1dc00, ftCreationTime.dwHighDateTime=0x1c9db18, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b1dc00, ftLastWriteTime.dwHighDateTime=0x1c9db18, nFileSizeHigh=0x0, nFileSizeLow=0x3948, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0179.038] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.038] GetProcessHeap () returned 0x800000
	[0179.039] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.039] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1
	[0179.039] GetProcessHeap () returned 0x800000
	[0179.039] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.087] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.087] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ac4100, ftCreationTime.dwHighDateTime=0x1c9db19, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66ac4100, ftLastWriteTime.dwHighDateTime=0x1c9db19, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0179.087] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ac4100, ftCreationTime.dwHighDateTime=0x1c9db19, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66ac4100, ftLastWriteTime.dwHighDateTime=0x1c9db19, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0179.087] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.088] GetProcessHeap () returned 0x800000
	[0179.088] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.088] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1
	[0179.088] GetProcessHeap () returned 0x800000
	[0179.088] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.088] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.088] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3add8b00, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3add8b00, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0179.088] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3add8b00, ftCreationTime.dwHighDateTime=0x1c9db1a, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3add8b00, ftLastWriteTime.dwHighDateTime=0x1c9db1a, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0179.089] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.089] GetProcessHeap () returned 0x800000
	[0179.089] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.089] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1
	[0179.089] GetProcessHeap () returned 0x800000
	[0179.089] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.089] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.089] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00e4400, ftCreationTime.dwHighDateTime=0x1c9db16, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00e4400, ftLastWriteTime.dwHighDateTime=0x1c9db16, nFileSizeHigh=0x0, nFileSizeLow=0x3140, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0179.090] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00e4400, ftCreationTime.dwHighDateTime=0x1c9db16, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00e4400, ftLastWriteTime.dwHighDateTime=0x1c9db16, nFileSizeHigh=0x0, nFileSizeLow=0x3140, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0179.090] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.090] GetProcessHeap () returned 0x800000
	[0179.090] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.090] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0179.090] GetProcessHeap () returned 0x800000
	[0179.090] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.090] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.090] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf63fa00, ftCreationTime.dwHighDateTime=0x1c9db19, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaf63fa00, ftLastWriteTime.dwHighDateTime=0x1c9db19, nFileSizeHigh=0x0, nFileSizeLow=0x4d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0179.091] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf63fa00, ftCreationTime.dwHighDateTime=0x1c9db19, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaf63fa00, ftLastWriteTime.dwHighDateTime=0x1c9db19, nFileSizeHigh=0x0, nFileSizeLow=0x4d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0179.091] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.091] GetProcessHeap () returned 0x800000
	[0179.091] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.091] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x323, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.HxC", cAlternateFileName="")) returned 1
	[0179.091] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x60ce1c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0xa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.HxT", cAlternateFileName="")) returned 1
	[0179.091] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x6cee, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxRuntime.HxS", cAlternateFileName="HXRUNT~1.HXS")) returned 1
	[0179.091] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x60d7a190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keywords.HxK", cAlternateFileName="")) returned 1
	[0179.091] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x52706fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NamedURLs.HxK", cAlternateFileName="NAMEDU~1.HXK")) returned 1
	[0179.092] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93aa2500, ftCreationTime.dwHighDateTime=0x1c9db14, ftLastAccessTime.dwLowDateTime=0x52706fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93aa2500, ftLastWriteTime.dwHighDateTime=0x1c9db14, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NamedURLs.HxK", cAlternateFileName="NAMEDU~1.HXK")) returned 0
	[0179.092] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.092] GetProcessHeap () returned 0x800000
	[0179.092] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.092] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1
	[0179.092] GetProcessHeap () returned 0x800000
	[0179.092] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.093] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.094] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1
	[0179.094] GetProcessHeap () returned 0x800000
	[0179.094] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.094] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.095] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7818f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc7818f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc7818f1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1
	[0179.095] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7818f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc7818f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc7818f1c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 0
	[0179.095] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.095] GetProcessHeap () returned 0x800000
	[0179.095] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.095] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.7", cAlternateFileName="")) returned 1
	[0179.095] GetProcessHeap () returned 0x800000
	[0179.095] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.095] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.096] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7ecacfc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc7ecacfc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc7ef0e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1
	[0179.096] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7ecacfc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc7ecacfc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc7ef0e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 0
	[0179.096] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.096] GetProcessHeap () returned 0x800000
	[0179.096] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.096] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0179.096] GetProcessHeap () returned 0x800000
	[0179.096] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.098] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.098] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1
	[0179.098] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1
	[0179.098] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1101e045, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1
	[0179.098] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1
	[0179.098] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcad4f4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcad4f4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1
	[0179.098] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1
	[0179.098] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1
	[0179.098] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1
	[0179.098] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0
	[0179.098] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.099] GetProcessHeap () returned 0x800000
	[0179.099] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.100] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1
	[0179.100] GetProcessHeap () returned 0x800000
	[0179.100] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0179.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.100] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.100] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0179.100] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.100] GetProcessHeap () returned 0x800000
	[0179.100] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.100] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aad17fd, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2aad17fd, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x959f4c70, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1
	[0179.100] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56787bbf, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x56787bbf, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x959f4c70, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x159800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1
	[0179.101] ResetEvent (hEvent=0xfc) returned 1
	[0179.101] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0179.145] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67731975, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x67731975, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x96f16ef0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="journal.dll", cAlternateFileName="")) returned 1
	[0179.145] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a95f54, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x36a95f54, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x99e8b5f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x151e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1
	[0179.145] ResetEvent (hEvent=0xfc) returned 1
	[0179.145] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0179.330] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa822ba, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0xcfa822ba, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xcc41afc5, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1
	[0179.330] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19b39d9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb19b39d9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1a25dfa, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1
	[0179.330] ResetEvent (hEvent=0xfc) returned 1
	[0179.330] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0179.333] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2644b3, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2d2644b3, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x9b490940, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1
	[0179.333] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x475edf2f, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x475edf2f, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x9c6db320, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1
	[0179.333] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0734e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x53e0734e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x9c702420, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1
	[0179.333] ResetEvent (hEvent=0xfc) returned 1
	[0179.333] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0179.336] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20326ec4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x20326ec4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb95fefd0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="penchs.dll", cAlternateFileName="")) returned 1
	[0179.336] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20373182, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x20373182, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb964aac0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="pencht.dll", cAlternateFileName="")) returned 1
	[0179.336] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203992e1, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x203992e1, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb964aac0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="penjpn.dll", cAlternateFileName="")) returned 1
	[0179.337] ResetEvent (hEvent=0xfc) returned 1
	[0179.337] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0179.338] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203bf440, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x203bf440, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb964aac0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="penkor.dll", cAlternateFileName="")) returned 1
	[0179.338] ResetEvent (hEvent=0xfc) returned 1
	[0179.338] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0179.345] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x203bf440, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x203bf440, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xb96965b0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="penusa.dll", cAlternateFileName="")) returned 1
	[0179.345] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa13b21, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x1fa13b21, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xba4df950, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pipanel.dll", cAlternateFileName="")) returned 1
	[0179.345] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fda5c09, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x1fda5c09, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x6f4de180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pipanel.exe", cAlternateFileName="")) returned 1
	[0179.346] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2043185d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2043185d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xbae186c0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="pipres.dll", cAlternateFileName="")) returned 1
	[0179.346] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2612d14c, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2612d14c, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xadc05c90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1
	[0179.346] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2040b6fe, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2040b6fe, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe2234520, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="skchobj.dll", cAlternateFileName="")) returned 1
	[0179.346] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2043185d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x2043185d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xe2234520, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="skchui.dll", cAlternateFileName="")) returned 1
	[0179.346] ResetEvent (hEvent=0xfc) returned 1
	[0179.346] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0179.350] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5c335e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x1f5c335e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x7764cdc0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip32.exe", cAlternateFileName="")) returned 1
	[0179.350] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da0ed4, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x37da0ed4, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xaf635e30, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1
	[0179.350] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232762c6, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x232762c6, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xaf6cd410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1
	[0179.350] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232762c6, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0x232762c6, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0xaf6cd410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 0
	[0179.350] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.351] GetProcessHeap () returned 0x800000
	[0179.351] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.351] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSEnv", cAlternateFileName="")) returned 1
	[0179.351] GetProcessHeap () returned 0x800000
	[0179.351] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.371] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.371] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 1
	[0179.371] GetProcessHeap () returned 0x800000
	[0179.371] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0179.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.372] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.372] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b285700, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b285700, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="EXTENS~1.DLL")) returned 1
	[0179.372] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b285700, ftCreationTime.dwHighDateTime=0x1c9db17, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b285700, ftLastWriteTime.dwHighDateTime=0x1c9db17, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="EXTENS~1.DLL")) returned 0
	[0179.373] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.373] GetProcessHeap () returned 0x800000
	[0179.373] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.373] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 0
	[0179.373] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.373] GetProcessHeap () returned 0x800000
	[0179.373] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.374] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1
	[0179.374] GetProcessHeap () returned 0x800000
	[0179.374] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.374] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.374] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0179.374] GetProcessHeap () returned 0x800000
	[0179.374] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0179.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.375] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.375] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bae7b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x99bae7b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1
	[0179.375] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bae7b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x99bae7b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0
	[0179.375] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.375] GetProcessHeap () returned 0x800000
	[0179.375] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.375] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a868239, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a868239, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a868239, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1
	[0179.375] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a868239, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a868239, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a868239, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0
	[0179.376] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.376] GetProcessHeap () returned 0x800000
	[0179.376] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.376] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1
	[0179.376] GetProcessHeap () returned 0x800000
	[0179.376] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.376] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.376] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0179.376] GetProcessHeap () returned 0x800000
	[0179.376] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0179.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.377] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.377] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdeee800, ftCreationTime.dwHighDateTime=0x1cbf448, ftLastAccessTime.dwLowDateTime=0xba7d7d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcdeee800, ftLastWriteTime.dwHighDateTime=0x1cbf448, nFileSizeHigh=0x0, nFileSizeLow=0x262180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1
	[0179.377] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b36970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1
	[0179.377] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b5cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1
	[0179.378] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe4200, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x19b5cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78fe4200, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 0
	[0179.378] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.378] GetProcessHeap () returned 0x800000
	[0179.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.378] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a395f00, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xae3504c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7a395f00, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x35afb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1
	[0179.378] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf72d00, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xae376620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf72d00, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x129b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1
	[0179.378] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1
	[0179.378] GetProcessHeap () returned 0x800000
	[0179.378] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0179.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.379] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.379] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715a00, ftCreationTime.dwHighDateTime=0x1cbe3e4, ftLastAccessTime.dwLowDateTime=0xad3b1460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3715a00, ftLastWriteTime.dwHighDateTime=0x1cbe3e4, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1
	[0179.379] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3715a00, ftCreationTime.dwHighDateTime=0x1cbe3e4, ftLastAccessTime.dwLowDateTime=0xad3b1460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3715a00, ftLastWriteTime.dwHighDateTime=0x1cbe3e4, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0
	[0179.379] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.379] GetProcessHeap () returned 0x800000
	[0179.379] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.379] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c46c00, ftCreationTime.dwHighDateTime=0x1cbdfac, ftLastAccessTime.dwLowDateTime=0xacfacf40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb1c46c00, ftLastWriteTime.dwHighDateTime=0x1cbdfac, nFileSizeHigh=0x0, nFileSizeLow=0x11e9780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1
	[0179.379] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf201500, ftCreationTime.dwHighDateTime=0x1cbf448, ftLastAccessTime.dwLowDateTime=0xb34d7640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf201500, ftLastWriteTime.dwHighDateTime=0x1cbf448, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1
	[0179.380] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec942b00, ftCreationTime.dwHighDateTime=0x1cbc467, ftLastAccessTime.dwLowDateTime=0xae1f9860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec942b00, ftLastWriteTime.dwHighDateTime=0x1cbc467, nFileSizeHigh=0x0, nFileSizeLow=0xf1390, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1
	[0179.380] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd09ff800, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x220cfc30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd09ff800, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0xbf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1
	[0179.380] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1
	[0179.380] GetProcessHeap () returned 0x800000
	[0179.380] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0179.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.380] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.380] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0179.380] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.381] GetProcessHeap () returned 0x800000
	[0179.381] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.381] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96cba700, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0x30cd96d0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x96cba700, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x4588, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1
	[0179.381] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32421600, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xae0a2c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x32421600, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x14db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1
	[0179.381] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32421600, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xae0a2c00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x32421600, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x14db68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 0
	[0179.381] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.381] GetProcessHeap () returned 0x800000
	[0179.381] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.381] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Portal", cAlternateFileName="")) returned 1
	[0179.381] GetProcessHeap () returned 0x800000
	[0179.381] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.382] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.382] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0179.382] GetProcessHeap () returned 0x800000
	[0179.382] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0179.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.383] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.383] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e9d00, ftCreationTime.dwHighDateTime=0x1ca912d, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc77e9d00, ftLastWriteTime.dwHighDateTime=0x1ca912d, nFileSizeHigh=0x0, nFileSizeLow=0x43a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1
	[0179.383] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e9d00, ftCreationTime.dwHighDateTime=0x1ca912d, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc77e9d00, ftLastWriteTime.dwHighDateTime=0x1ca912d, nFileSizeHigh=0x0, nFileSizeLow=0x43a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0
	[0179.383] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.383] GetProcessHeap () returned 0x800000
	[0179.383] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.383] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bdf7300, ftCreationTime.dwHighDateTime=0x1cb7004, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bdf7300, ftLastWriteTime.dwHighDateTime=0x1cb7004, nFileSizeHigh=0x0, nFileSizeLow=0x87180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1
	[0179.383] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bdf7300, ftCreationTime.dwHighDateTime=0x1cb7004, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bdf7300, ftLastWriteTime.dwHighDateTime=0x1cb7004, nFileSizeHigh=0x0, nFileSizeLow=0x87180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0
	[0179.383] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.384] GetProcessHeap () returned 0x800000
	[0179.384] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.384] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0179.384] GetProcessHeap () returned 0x800000
	[0179.384] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.388] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.388] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42146c84, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42146c84, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41e4d104, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0179.388] ResetEvent (hEvent=0xfc) returned 1
	[0179.388] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0179.726] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8267651c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0179.726] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x81305af3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0179.726] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41e73264, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0179.726] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4216cde4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4216cde4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82780ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0179.726] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41ebf524, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1
	[0179.726] ResetEvent (hEvent=0xfc) returned 1
	[0179.726] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0179.742] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x827cd17c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1
	[0179.742] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42192f44, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42192f44, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41f0b7e4, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1
	[0179.742] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421b90a4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421b90a4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x827f32dc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1
	[0179.742] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421b90a4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421b90a4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41f57aa4, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1
	[0179.742] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421df204, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421df204, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x8283f59c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1
	[0179.742] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421df204, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x421df204, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41fa3d64, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
	[0179.742] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828d7b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
	[0179.742] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42205364, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42205364, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x41ff0024, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
	[0179.743] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4222b4c4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4222b4c4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x828fdc7c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
	[0179.743] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4222b4c4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4222b4c4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x42016184, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1
	[0179.743] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42251624, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42251624, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x82949f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1
	[0179.743] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42251624, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42251624, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x42062444, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1
	[0179.743] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829961fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
	[0179.743] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42277784, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x42277784, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x420ae704, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
	[0179.743] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4229d8e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4229d8e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829bc35c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
	[0179.743] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4229d8e4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x4229d8e4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x829bc35c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0
	[0179.743] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.744] GetProcessHeap () returned 0x800000
	[0179.744] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.744] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0179.744] GetProcessHeap () returned 0x800000
	[0179.744] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.781] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.781] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0179.781] GetProcessHeap () returned 0x800000
	[0179.781] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0179.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.782] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.782] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0179.782] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.783] GetProcessHeap () returned 0x800000
	[0179.783] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.783] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 1
	[0179.783] GetProcessHeap () returned 0x800000
	[0179.783] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0179.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.783] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.783] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 1
	[0179.783] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 0
	[0179.783] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.784] GetProcessHeap () returned 0x800000
	[0179.784] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.784] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 0
	[0179.784] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.784] GetProcessHeap () returned 0x800000
	[0179.784] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.784] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0179.784] GetProcessHeap () returned 0x800000
	[0179.784] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.785] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.785] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0179.785] GetProcessHeap () returned 0x800000
	[0179.785] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0179.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.785] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.785] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0179.785] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.785] GetProcessHeap () returned 0x800000
	[0179.785] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.785] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0179.785] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.786] GetProcessHeap () returned 0x800000
	[0179.786] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.786] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0179.786] GetProcessHeap () returned 0x800000
	[0179.786] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.786] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.786] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 1
	[0179.786] GetProcessHeap () returned 0x800000
	[0179.786] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0179.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.787] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.787] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 1
	[0179.787] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 0
	[0179.787] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.787] GetProcessHeap () returned 0x800000
	[0179.787] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.787] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 0
	[0179.787] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.788] GetProcessHeap () returned 0x800000
	[0179.788] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.788] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1
	[0179.788] GetProcessHeap () returned 0x800000
	[0179.788] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.789] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.789] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1
	[0179.789] GetProcessHeap () returned 0x800000
	[0179.789] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0179.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.789] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.790] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1
	[0179.790] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 0
	[0179.790] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.790] GetProcessHeap () returned 0x800000
	[0179.790] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.790] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdca800, ftCreationTime.dwHighDateTime=0x1cbd035, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5cdca800, ftLastWriteTime.dwHighDateTime=0x1cbd035, nFileSizeHigh=0x0, nFileSizeLow=0xc3350, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1
	[0179.790] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bff900, ftCreationTime.dwHighDateTime=0x1cc115e, ftLastAccessTime.dwLowDateTime=0x8f641300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x90bff900, ftLastWriteTime.dwHighDateTime=0x1cc115e, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1
	[0179.790] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1
	[0179.790] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0
	[0179.791] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.791] GetProcessHeap () returned 0x800000
	[0179.791] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.791] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1
	[0179.791] GetProcessHeap () returned 0x800000
	[0179.791] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.791] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.791] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1
	[0179.791] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0
	[0179.791] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.792] GetProcessHeap () returned 0x800000
	[0179.792] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0179.792] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1
	[0179.792] GetProcessHeap () returned 0x800000
	[0179.792] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0179.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.792] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.792] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1
	[0179.792] GetProcessHeap () returned 0x800000
	[0179.792] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0179.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.794] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.794] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x60fb5630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb", cAlternateFileName="MICROS~2.TLB")) returned 1
	[0179.795] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x185f4200, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x52622770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x185f4200, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb", cAlternateFileName="MICROS~1.TLB")) returned 1
	[0179.795] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x8f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.tlb", cAlternateFileName="VSTARE~1.TLB")) returned 1
	[0179.795] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1
	[0179.795] GetProcessHeap () returned 0x800000
	[0179.795] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0179.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.797] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.797] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8fb0600, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8fb0600, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x7b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.dll", cAlternateFileName="VSTARE~1.DLL")) returned 1
	[0179.797] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedbfba00, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedbfba00, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x4b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe", cAlternateFileName="VSTA_E~1.EXE")) returned 1
	[0179.798] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="VSTA_E~1.CON")) returned 1
	[0179.798] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="VSTA_E~1.CON")) returned 0
	[0179.798] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.799] GetProcessHeap () returned 0x800000
	[0179.799] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.799] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0
	[0179.799] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.799] GetProcessHeap () returned 0x800000
	[0179.799] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.799] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppInfoDocument", cAlternateFileName="APPINF~1")) returned 1
	[0179.799] GetProcessHeap () returned 0x800000
	[0179.799] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0179.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.800] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.800] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c9040, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed5c9040, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x25b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns.store", cAlternateFileName="ADDINS~1.STO")) returned 1
	[0179.800] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 1
	[0179.800] GetProcessHeap () returned 0x800000
	[0179.800] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0179.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.800] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.800] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0179.800] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0179.800] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0179.801] GetProcessHeap () returned 0x800000
	[0179.801] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.801] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 0
	[0179.801] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.801] GetProcessHeap () returned 0x800000
	[0179.801] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.801] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="PIPELI~1.0")) returned 1
	[0179.801] GetProcessHeap () returned 0x800000
	[0179.801] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0179.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0179.803] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.803] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInSideAdapters", cAlternateFileName="ADDINS~1")) returned 1
	[0179.803] GetProcessHeap () returned 0x800000
	[0179.803] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0179.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0179.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0179.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x5863dfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0179.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587bad70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0179.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587e0ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0179.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 1
	[0179.805] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 0
	[0179.805] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0179.806] GetProcessHeap () returned 0x800000
	[0179.806] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.806] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInViews", cAlternateFileName="ADDINV~1")) returned 1
	[0179.807] GetProcessHeap () returned 0x800000
	[0179.807] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0179.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.809] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.809] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x6a2fe770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0179.809] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x7fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0179.809] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0179.809] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0179.809] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.810] GetProcessHeap () returned 0x800000
	[0179.810] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.810] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contracts", cAlternateFileName="CONTRA~1")) returned 1
	[0179.810] GetProcessHeap () returned 0x800000
	[0179.810] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0179.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.813] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.813] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd31a54c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0179.813] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x60d7a190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0179.813] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0179.813] ResetEvent (hEvent=0xfc) returned 1
	[0179.813] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0179.963] ResetEvent (hEvent=0xfc) returned 1
	[0179.963] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0179.965] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0179.965] ResetEvent (hEvent=0xfc) returned 1
	[0179.965] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0179.966] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0179.966] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.967] GetProcessHeap () returned 0x800000
	[0179.967] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.969] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HostSideAdapters", cAlternateFileName="HOSTSI~1")) returned 1
	[0179.969] GetProcessHeap () returned 0x800000
	[0179.969] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0179.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.984] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.984] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5f9dda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x89b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", cAlternateFileName="MIE07F~1.DLL")) returned 1
	[0179.984] ResetEvent (hEvent=0xfc) returned 1
	[0179.984] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.085] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x12fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0180.085] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xf7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0180.085] ResetEvent (hEvent=0xfc) returned 1
	[0180.085] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.092] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0180.092] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0180.092] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 0
	[0180.092] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0180.093] GetProcessHeap () returned 0x800000
	[0180.093] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0180.093] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 1
	[0180.094] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 0
	[0180.094] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0180.094] GetProcessHeap () returned 0x800000
	[0180.094] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0180.094] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="PIPELI~1.0")) returned 0
	[0180.094] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0180.095] GetProcessHeap () returned 0x800000
	[0180.095] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0180.095] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1
	[0180.095] GetProcessHeap () returned 0x800000
	[0180.095] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0180.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0180.106] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.106] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0180.106] GetProcessHeap () returned 0x800000
	[0180.106] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0180.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0180.109] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.109] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0180.109] GetProcessHeap () returned 0x800000
	[0180.109] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0180.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0180.110] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.110] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1
	[0180.110] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0180.110] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0
	[0180.110] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0180.110] GetProcessHeap () returned 0x800000
	[0180.110] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0180.110] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1336200, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x274de510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1336200, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="VSTOIN~1.CON")) returned 1
	[0180.111] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1
	[0180.111] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x40d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0180.111] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1
	[0180.111] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0
	[0180.111] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0180.111] GetProcessHeap () returned 0x800000
	[0180.111] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0180.111] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a6ab00, ftCreationTime.dwHighDateTime=0x1cacb2a, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a6ab00, ftLastWriteTime.dwHighDateTime=0x1cacb2a, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActionsPane3.xsd", cAlternateFileName="ACTION~1.XSD")) returned 1
	[0180.111] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x1e948, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1
	[0180.112] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1
	[0180.112] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1
	[0180.112] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0
	[0180.112] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0180.112] GetProcessHeap () returned 0x800000
	[0180.112] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0180.112] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0180.112] GetProcessHeap () returned 0x800000
	[0180.112] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0180.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0180.123] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.123] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0180.123] GetProcessHeap () returned 0x800000
	[0180.123] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0180.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0180.123] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.124] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1
	[0180.124] GetProcessHeap () returned 0x800000
	[0180.124] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0180.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0180.126] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.126] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e690a00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e690a00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x193378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1
	[0180.126] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1
	[0180.126] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0
	[0180.126] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0180.126] GetProcessHeap () returned 0x800000
	[0180.127] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0180.127] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0
	[0180.127] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0180.127] GetProcessHeap () returned 0x800000
	[0180.127] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0180.127] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0
	[0180.127] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0180.128] GetProcessHeap () returned 0x800000
	[0180.128] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0180.128] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0
	[0180.128] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0180.128] GetProcessHeap () returned 0x800000
	[0180.128] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0180.129] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0180.129] GetProcessHeap () returned 0x800000
	[0180.129] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0180.130] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0180.138] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.138] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1
	[0180.138] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0
	[0180.138] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0180.138] GetProcessHeap () returned 0x800000
	[0180.138] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0180.138] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1
	[0180.138] GetProcessHeap () returned 0x800000
	[0180.138] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0180.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0180.139] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.139] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0180.139] GetProcessHeap () returned 0x800000
	[0180.139] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0180.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0180.139] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.139] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1
	[0180.139] GetProcessHeap () returned 0x800000
	[0180.139] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0180.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0180.140] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.140] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0180.140] GetProcessHeap () returned 0x800000
	[0180.140] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0180.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0180.147] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.147] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1
	[0180.147] GetProcessHeap () returned 0x800000
	[0180.147] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0180.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0180.152] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.152] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb848fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x7bb848fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x7bb848fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.APL", cAlternateFileName="")) returned 1
	[0180.153] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7650f9d, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7650f9d, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7bc1ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x764f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CRT", cAlternateFileName="")) returned 1
	[0180.153] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77357d7, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc77357d7, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c84ff3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c6aed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CSD", cAlternateFileName="")) returned 1
	[0180.153] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d9b2cc, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7d9b2cc, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c93477c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2059c, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.IDX", cAlternateFileName="")) returned 1
	[0180.153] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e0d6e9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7e0d6e9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7da2a43c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe3770, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.LTS", cAlternateFileName="")) returned 1
	[0180.153] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f8a49f, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7f8a49f, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dc3f77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2515b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.TTS", cAlternateFileName="")) returned 1
	[0180.153] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc812d3b4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc812d3b4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dcfde5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UDT", cAlternateFileName="")) returned 1
	[0180.153] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8153513, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc8153513, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7df1319c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x308e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UNT", cAlternateFileName="")) returned 1
	[0180.153] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 1
	[0180.153] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 0
	[0180.153] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0180.154] GetProcessHeap () returned 0x800000
	[0180.154] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0180.154] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b89235, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b89235, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1
	[0180.155] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2bbb36, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc2bbb36, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1
	[0180.155] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2bbb36, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc2bbb36, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0
	[0180.155] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0180.155] GetProcessHeap () returned 0x800000
	[0180.155] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0180.155] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7523740, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7523740, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f416c90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1
	[0180.155] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b630d6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b630d6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f4f9d60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSDecWrp.dll", cAlternateFileName="")) returned 1
	[0180.155] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80be232, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf80be232, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f6c4d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1
	[0180.155] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1
	[0180.317] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0
	[0180.317] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0180.318] GetProcessHeap () returned 0x800000
	[0180.318] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0180.319] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0
	[0180.319] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0180.319] GetProcessHeap () returned 0x800000
	[0180.319] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0180.319] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0180.319] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0180.320] GetProcessHeap () returned 0x800000
	[0180.320] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0180.320] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0180.320] GetProcessHeap () returned 0x800000
	[0180.320] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0180.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0180.320] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.320] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1
	[0180.320] GetProcessHeap () returned 0x800000
	[0180.320] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0180.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0180.322] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.322] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252bcdd, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x252bcdd, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab6cf35d, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1
	[0180.322] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2505b7e, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x2505b7e, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5eab23, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1
	[0180.323] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0180.323] GetProcessHeap () returned 0x800000
	[0180.323] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0180.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0180.324] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.324] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1
	[0180.324] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0
	[0180.324] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0180.324] GetProcessHeap () returned 0x800000
	[0180.325] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0180.325] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7465328, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb7465328, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1
	[0180.325] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b80ab9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99b80ab9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99bccd79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1
	[0180.325] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1
	[0180.325] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1
	[0180.325] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1
	[0180.326] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1
	[0180.326] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab87f1f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab87f1f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1
	[0180.326] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abd41df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8abd41df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8abd41df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1
	[0180.326] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dae14ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9dae14ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dae14ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1
	[0180.326] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6fc88a7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6fc88a7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6f0a1cc, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1
	[0180.326] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f0bf91, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1
	[0180.326] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9c1e89, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e9c1e89, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e9e7fe9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1
	[0180.326] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e25992, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6e25992, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6db3575, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1
	[0180.326] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb775ee94, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb775ee94, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b894690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1
	[0180.326] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 1
	[0180.326] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 0
	[0180.327] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0180.327] GetProcessHeap () returned 0x800000
	[0180.327] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0180.327] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886e43c6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x886e43c6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x89202410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0180.327] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0180.327] GetProcessHeap () returned 0x800000
	[0180.327] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0180.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\en-US\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0180.327] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.328] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1
	[0180.328] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0
	[0180.328] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0180.328] GetProcessHeap () returned 0x800000
	[0180.328] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0180.328] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1
	[0180.328] GetProcessHeap () returned 0x800000
	[0180.328] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0180.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0180.330] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.330] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6f591, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d6f591, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5525a7, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1
	[0180.330] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d956f0, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d956f0, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab636de1, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1
	[0180.330] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0180.330] GetProcessHeap () returned 0x800000
	[0180.330] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0180.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0180.331] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.332] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9af1ce, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa9af1ce, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1
	[0180.332] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1
	[0180.332] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa219f9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xaa219f9, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1
	[0180.332] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2d3490, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa2d3490, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1
	[0180.332] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35461a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc35461a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1
	[0180.332] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1
	[0180.332] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0
	[0180.332] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0180.333] GetProcessHeap () returned 0x800000
	[0180.333] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0180.333] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c9a97c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x22c9a97c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x22c9a97c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1
	[0180.333] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8dd6e4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0x6f8dd6e4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x22f4823c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1
	[0180.333] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930aeeb4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x930aeeb4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x930d5014, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1
	[0180.334] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b5cb2a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0b5cb2a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f8ffe50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1
	[0180.334] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b9ffeb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b9ffeb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1
	[0180.334] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c41364, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0c41364, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f926f50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1
	[0180.334] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b79e8a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b79e8a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x34000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1
	[0180.334] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e0a3d8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0e0a3d8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fa0a020, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1
	[0180.334] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad9d263, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad9d263, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad9d263, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1
	[0180.334] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8098396, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb8098396, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b60d700, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1
	[0180.334] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fd344c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0fd344c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1
	[0180.334] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1091b27, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb1091b27, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60936490, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1
	[0180.334] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ffc4e3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb9ffc4e3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1
	[0180.335] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d87fee9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d87fee9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d87fee9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1
	[0180.335] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10b7c86, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb10b7c86, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60b01450, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1
	[0180.335] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1
	[0180.335] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0
	[0180.335] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0180.335] GetProcessHeap () returned 0x800000
	[0180.335] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0180.335] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0180.335] GetProcessHeap () returned 0x800000
	[0180.335] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0180.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0180.337] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.337] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0180.337] GetProcessHeap () returned 0x800000
	[0180.337] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0180.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0180.337] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.337] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a39353, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8eb2501, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a39353, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll.mui", cAlternateFileName="")) returned 1
	[0180.337] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a858c5, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a858c5, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1
	[0180.337] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a5395f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a5395f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1
	[0180.338] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1
	[0180.338] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1
	[0180.338] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0
	[0180.338] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0180.338] GetProcessHeap () returned 0x800000
	[0180.338] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0180.338] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7e30c4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad7e30c4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb42720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdadc.dll", cAlternateFileName="")) returned 1
	[0180.338] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadbe75c9, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadbe75c9, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaenum.dll", cAlternateFileName="")) returned 1
	[0180.338] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8554e1, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad8554e1, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaer.dll", cAlternateFileName="")) returned 1
	[0180.339] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaecb70b8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaecb70b8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb8e210, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaora.dll", cAlternateFileName="")) returned 1
	[0180.339] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b5129, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaf3b5129, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x608c5fb0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll", cAlternateFileName="")) returned 1
	[0180.339] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868e16a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868e16a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1
	[0180.339] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6e1ed2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbd6e1ed2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1
	[0180.339] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaddd679c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaddd679c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bcbf4e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasc.dll", cAlternateFileName="")) returned 1
	[0180.339] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb5ad74, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eb5ad74, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eb80ed5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1
	[0180.339] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb37fe67e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb37fe67e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60d883e0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1
	[0180.339] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeaee044, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaeaee044, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1
	[0180.339] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ee79a4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb4ee79a4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatt.dll", cAlternateFileName="")) returned 1
	[0180.339] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad9d2297, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad9d2297, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaurl.dll", cAlternateFileName="")) returned 1
	[0180.340] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2b0cf35, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb2b0cf35, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xa0f9caf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1
	[0180.340] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6fc914, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b6fc914, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b722a74, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1
	[0180.340] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb02d8f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadb02d8f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb51db240, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1
	[0180.340] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bddc5, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28bddc5, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x26a8a93, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1
	[0180.340] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e3f24, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28e3f24, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x27ff6ea, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1
	[0180.340] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b07acbf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b07acbf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0a0e20, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1
	[0180.340] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4e18eb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbc4e18eb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xbc38ac94, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1
	[0180.340] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba82b04c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba82b04c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xaed6d5a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x41000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1
	[0180.340] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba87730a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba87730a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xba804eed, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1
	[0180.340] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x29618, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1
	[0180.341] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1
	[0180.341] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0
	[0180.341] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0180.341] GetProcessHeap () returned 0x800000
	[0180.341] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0180.341] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2406d7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2406d7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0180.341] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1
	[0180.341] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0
	[0180.341] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0180.342] GetProcessHeap () returned 0x800000
	[0180.342] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0180.342] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0
	[0180.342] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0180.342] GetProcessHeap () returned 0x800000
	[0180.342] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0180.344] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0180.344] ResetEvent (hEvent=0xfc) returned 1
	[0180.344] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.573] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1
	[0180.573] GetProcessHeap () returned 0x800000
	[0180.573] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0180.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0180.574] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.574] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1
	[0180.574] GetProcessHeap () returned 0x800000
	[0180.574] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0180.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0180.575] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.575] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 1
	[0180.575] GetProcessHeap () returned 0x800000
	[0180.575] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0180.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0180.575] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.575] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110", cAlternateFileName="580302~1.110")) returned 1
	[0180.575] GetProcessHeap () returned 0x800000
	[0180.575] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0180.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0180.609] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.609] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe661340, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="58.0.3029.110.manifest", cAlternateFileName="580302~1.MAN")) returned 1
	[0180.609] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db1d780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7db1d780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x744b1e7c, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x2f01758, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll", cAlternateFileName="")) returned 1
	[0180.609] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x74ce3fd2, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll.sig", cAlternateFileName="CHROME~3.SIG")) returned 1
	[0180.609] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x73db0ff6, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe.sig", cAlternateFileName="CHROME~2.SIG")) returned 1
	[0180.610] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe6e02b4, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6f44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_100_percent.pak", cAlternateFileName="CHROME~1.PAK")) returned 1
	[0180.610] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff5b27e6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb0b82, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_200_percent.pak", cAlternateFileName="CHROME~2.PAK")) returned 1
	[0180.610] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd7ed80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7dd7ed80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7553c382, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x3953558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll", cAlternateFileName="CHROME~1.DLL")) returned 1
	[0180.610] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x75e2d09a, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll.sig", cAlternateFileName="CHROME~1.SIG")) returned 1
	[0180.610] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76043186, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x86558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~2.DLL")) returned 1
	[0180.610] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7638a542, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x94b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_watcher.dll", cAlternateFileName="CHROME~3.DLL")) returned 1
	[0180.610] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe9a43f6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x447ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1
	[0180.610] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_apps", cAlternateFileName="DEFAUL~1")) returned 1
	[0180.610] GetProcessHeap () returned 0x800000
	[0180.610] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0180.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0180.612] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.612] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea6c768, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="docs.crx", cAlternateFileName="")) returned 1
	[0180.612] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea82701, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drive.crx", cAlternateFileName="")) returned 1
	[0180.612] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab0d44, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1
	[0180.612] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea9adab, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmail.crx", cAlternateFileName="")) returned 1
	[0180.612] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeaa9811, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 1
	[0180.612] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeaa9811, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 0
	[0180.612] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0180.613] GetProcessHeap () returned 0x800000
	[0180.613] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0180.613] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7689b536, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x3358, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventlog_provider.dll", cAlternateFileName="EVENTL~1.DLL")) returned 1
	[0180.614] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1
	[0180.614] GetProcessHeap () returned 0x800000
	[0180.614] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0180.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0180.614] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.614] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab3455, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1
	[0180.615] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7b17e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeab3455, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 0
	[0180.615] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0180.615] GetProcessHeap () returned 0x800000
	[0180.615] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0180.615] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7d7940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7d7940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe9bf1b1, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9a9480, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1
	[0180.615] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1
	[0180.615] GetProcessHeap () returned 0x800000
	[0180.615] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0180.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0180.615] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.616] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrmstp.exe", cAlternateFileName="")) returned 1
	[0180.616] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8388e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7c8388e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81d5b9a8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0xad7d02b, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.7z", cAlternateFileName="")) returned 1
	[0180.616] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0180.616] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa51480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 0
	[0180.616] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0180.616] GetProcessHeap () returned 0x800000
	[0180.616] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0180.616] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76be28f2, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x18958, dwReserved0=0x0, dwReserved1=0x0, cFileName="libegl.dll", cAlternateFileName="")) returned 1
	[0180.616] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deaf880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7deaf880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x76f4ff08, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x397d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="libglesv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1
	[0180.617] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locales", cAlternateFileName="")) returned 1
	[0180.617] GetProcessHeap () returned 0x800000
	[0180.617] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0180.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0180.618] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.619] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeae1a98, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6f4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am.pak", cAlternateFileName="")) returned 1
	[0180.619] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb0b2b9, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x6df65, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar.pak", cAlternateFileName="")) returned 1
	[0180.619] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb34ada, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x84ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg.pak", cAlternateFileName="")) returned 1
	[0180.619] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb6582e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa9727, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn.pak", cAlternateFileName="")) returned 1
	[0180.619] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeb91760, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5082b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca.pak", cAlternateFileName="")) returned 1
	[0180.619] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfebbaf81, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51809, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs.pak", cAlternateFileName="")) returned 1
	[0180.620] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfebdf980, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x494f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="da.pak", cAlternateFileName="")) returned 1
	[0180.620] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec06a90, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x463fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="de.pak", cAlternateFileName="")) returned 1
	[0180.620] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec329c2, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x8f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="el.pak", cAlternateFileName="")) returned 1
	[0180.620] ResetEvent (hEvent=0xfc) returned 1
	[0180.620] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.744] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec63716, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4244f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.pak", cAlternateFileName="")) returned 1
	[0180.744] ResetEvent (hEvent=0xfc) returned 1
	[0180.744] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec796af, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42442, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1
	[0180.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7fdaa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7fdaa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfec9928c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4fca5, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-419.pak", cAlternateFileName="")) returned 1
	[0180.746] ResetEvent (hEvent=0xfc) returned 1
	[0180.746] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.748] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfecc51be, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x512b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="es.pak", cAlternateFileName="")) returned 1
	[0180.748] ResetEvent (hEvent=0xfc) returned 1
	[0180.748] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfecf10f0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x469ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="et.pak", cAlternateFileName="")) returned 1
	[0180.749] ResetEvent (hEvent=0xfc) returned 1
	[0180.749] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed1f733, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x72286, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa.pak", cAlternateFileName="")) returned 1
	[0180.751] ResetEvent (hEvent=0xfc) returned 1
	[0180.751] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.752] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed44132, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4b6ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi.pak", cAlternateFileName="")) returned 1
	[0180.752] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed72775, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51c09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil.pak", cAlternateFileName="")) returned 1
	[0180.753] ResetEvent (hEvent=0xfc) returned 1
	[0180.753] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.754] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfed97174, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x55a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr.pak", cAlternateFileName="")) returned 1
	[0180.754] ResetEvent (hEvent=0xfc) returned 1
	[0180.754] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.921] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfedd1b0c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9f1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu.pak", cAlternateFileName="")) returned 1
	[0180.922] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee07682, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5df23, dwReserved0=0x0, dwReserved1=0x0, cFileName="he.pak", cAlternateFileName="")) returned 1
	[0180.922] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee383d6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa3281, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi.pak", cAlternateFileName="")) returned 1
	[0180.922] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee6df4c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4bc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr.pak", cAlternateFileName="")) returned 1
	[0180.922] ResetEvent (hEvent=0xfc) returned 1
	[0180.922] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.927] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfee9505c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x54a87, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu.pak", cAlternateFileName="")) returned 1
	[0180.927] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeebe87d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="id.pak", cAlternateFileName="")) returned 1
	[0180.927] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeee598d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4e532, dwReserved0=0x0, dwReserved1=0x0, cFileName="it.pak", cAlternateFileName="")) returned 1
	[0180.927] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef118bf, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5f8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja.pak", cAlternateFileName="")) returned 1
	[0180.928] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef3ff02, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb6beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn.pak", cAlternateFileName="")) returned 1
	[0180.928] ResetEvent (hEvent=0xfc) returned 1
	[0180.928] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.933] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d823c00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d823c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef67012, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x50b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko.pak", cAlternateFileName="")) returned 1
	[0180.933] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfef95655, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt.pak", cAlternateFileName="")) returned 1
	[0180.933] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfefd4e0f, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv.pak", cAlternateFileName="")) returned 1
	[0180.933] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfeffe630, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xccccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml.pak", cAlternateFileName="")) returned 1
	[0180.933] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0341a6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xa1beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr.pak", cAlternateFileName="")) returned 1
	[0180.933] ResetEvent (hEvent=0xfc) returned 1
	[0180.933] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0180.939] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff03ddea, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3e2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms.pak", cAlternateFileName="")) returned 1
	[0180.939] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff069d1c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x487e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb.pak", cAlternateFileName="")) returned 1
	[0180.939] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff08c00a, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4d450, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl.pak", cAlternateFileName="")) returned 1
	[0180.939] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0b7f3c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x500e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl.pak", cAlternateFileName="")) returned 1
	[0180.939] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff0e3e6e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4e63d, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR.pak", cAlternateFileName="")) returned 1
	[0180.939] ResetEvent (hEvent=0xfc) returned 1
	[0180.939] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0181.134] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff10fda0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f596, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT.pak", cAlternateFileName="")) returned 1
	[0181.134] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff13208e, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x51b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro.pak", cAlternateFileName="")) returned 1
	[0181.134] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff162de2, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x7e47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru.pak", cAlternateFileName="")) returned 1
	[0181.134] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff18ed14, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5402d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk.pak", cAlternateFileName="")) returned 1
	[0181.134] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff1b1002, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4bb7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl.pak", cAlternateFileName="")) returned 1
	[0181.134] ResetEvent (hEvent=0xfc) returned 1
	[0181.134] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0181.138] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d849d60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d849d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff1d8112, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x79e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr.pak", cAlternateFileName="")) returned 1
	[0181.138] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff206755, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x496bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv.pak", cAlternateFileName="")) returned 1
	[0181.138] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff22d865, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x44b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw.pak", cAlternateFileName="")) returned 1
	[0181.138] ResetEvent (hEvent=0xfc) returned 1
	[0181.138] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0181.284] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff25bea8, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xbcd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta.pak", cAlternateFileName="")) returned 1
	[0181.284] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff298f51, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0xb0b7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="te.pak", cAlternateFileName="")) returned 1
	[0181.284] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff2c4e83, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x9efb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="th.pak", cAlternateFileName="")) returned 1
	[0181.284] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff2f0db5, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4f508, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.pak", cAlternateFileName="")) returned 1
	[0181.284] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff31cce7, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x7e1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk.pak", cAlternateFileName="")) returned 1
	[0181.284] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff343df7, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5af42, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi.pak", cAlternateFileName="")) returned 1
	[0181.284] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3687f6, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x4217c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN.pak", cAlternateFileName="")) returned 1
	[0181.285] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff394728, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 1
	[0181.285] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d86fec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff394728, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x42194, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 0
	[0181.285] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0181.286] GetProcessHeap () returned 0x800000
	[0181.286] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0181.286] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d896020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d896020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea2818c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x380630, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl_irt_x86_64.nexe", cAlternateFileName="NACL_I~1.NEX")) returned 1
	[0181.286] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d896020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d896020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea2a89d, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x40323, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1
	[0181.286] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d97a860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d97a860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea58ee0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x118671c, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pak", cAlternateFileName="RESOUR~1.PAK")) returned 1
	[0181.286] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfea5dd02, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x161db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="SNAPSH~1.BIN")) returned 1
	[0181.286] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 1
	[0181.286] GetProcessHeap () returned 0x800000
	[0181.286] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0181.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0181.287] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.287] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a589f, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x442a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0181.287] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3a7fb0, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x5741, dwReserved0=0x0, dwReserved1=0x0, cFileName="logocanary.png", cAlternateFileName="LOGOCA~1.PNG")) returned 1
	[0181.287] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3b6a16, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogo.png", cAlternateFileName="SMALLL~1.PNG")) returned 1
	[0181.287] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3c547c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~2.PNG")) returned 1
	[0181.287] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3c547c, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~2.PNG")) returned 0
	[0181.287] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0181.288] GetProcessHeap () returned 0x800000
	[0181.288] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0181.288] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1
	[0181.288] GetProcessHeap () returned 0x800000
	[0181.288] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0181.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0181.289] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.289] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3db415, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0181.289] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 1
	[0181.289] GetProcessHeap () returned 0x800000
	[0181.289] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0181.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.289] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.289] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 1
	[0181.289] GetProcessHeap () returned 0x800000
	[0181.289] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0181.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0181.290] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.290] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff57cc70, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x440df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1
	[0181.290] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9c6b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9c6b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff588fc5, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x665, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="WIDEVI~1.SIG")) returned 1
	[0181.290] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77b158ce, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x43b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~2.DLL")) returned 1
	[0181.291] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 1
	[0181.291] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 0
	[0181.291] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0181.292] GetProcessHeap () returned 0x800000
	[0181.292] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0181.292] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 0
	[0181.292] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.292] GetProcessHeap () returned 0x800000
	[0181.292] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0181.292] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 0
	[0181.292] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0181.293] GetProcessHeap () returned 0x800000
	[0181.293] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0181.293] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0
	[0181.293] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0181.293] GetProcessHeap () returned 0x800000
	[0181.293] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0181.294] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7344dbd0, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x117358, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1
	[0181.294] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.VisualElementsManifest.xml", cAlternateFileName="CHROME~1.XML")) returned 1
	[0181.294] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 1
	[0181.294] GetProcessHeap () returned 0x800000
	[0181.294] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0181.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0181.295] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.295] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="201706~1.PMA")) returned 1
	[0181.295] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="201706~1.PMA")) returned 0
	[0181.295] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0181.295] GetProcessHeap () returned 0x800000
	[0181.295] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0181.295] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 0
	[0181.295] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0181.296] GetProcessHeap () returned 0x800000
	[0181.296] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.296] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0
	[0181.296] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0181.297] GetProcessHeap () returned 0x800000
	[0181.297] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0181.297] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1
	[0181.297] GetProcessHeap () returned 0x800000
	[0181.297] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0181.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="䗺@")) returned 0xffffffff
	[0181.297] GetProcessHeap () returned 0x800000
	[0181.297] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0181.298] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4921490, ftCreationTime.dwHighDateTime=0x1d51a8a, ftLastAccessTime.dwLowDateTime=0x2823f380, ftLastAccessTime.dwHighDateTime=0x1d53cf0, ftLastWriteTime.dwLowDateTime=0x2823f380, ftLastWriteTime.dwHighDateTime=0x1d53cf0, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="in-abstracts.exe", cAlternateFileName="IN-ABS~1.EXE")) returned 1
	[0181.298] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4921490, ftCreationTime.dwHighDateTime=0x1d51a8a, ftLastAccessTime.dwLowDateTime=0x2823f380, ftLastAccessTime.dwHighDateTime=0x1d53cf0, ftLastWriteTime.dwLowDateTime=0x2823f380, ftLastWriteTime.dwHighDateTime=0x1d53cf0, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="in-abstracts.exe", cAlternateFileName="IN-ABS~1.EXE")) returned 0
	[0181.298] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0181.298] GetProcessHeap () returned 0x800000
	[0181.298] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0181.298] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0181.298] GetProcessHeap () returned 0x800000
	[0181.298] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0181.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0181.299] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.299] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe69ea610, ftCreationTime.dwHighDateTime=0x1d4f615, ftLastAccessTime.dwLowDateTime=0x3af46630, ftLastAccessTime.dwHighDateTime=0x1d51265, ftLastWriteTime.dwLowDateTime=0x3af46630, ftLastWriteTime.dwHighDateTime=0x1d51265, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="convenient-distance-tramadol.exe", cAlternateFileName="CONVEN~1.EXE")) returned 1
	[0181.299] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0181.299] GetProcessHeap () returned 0x800000
	[0181.299] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0181.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0181.301] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.301] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1
	[0181.301] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1
	[0181.302] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1
	[0181.302] ResetEvent (hEvent=0xfc) returned 1
	[0181.302] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0181.366] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1
	[0181.366] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3537636, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf3537636, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81b77500, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1
	[0181.366] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1
	[0181.366] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1
	[0181.366] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1
	[0181.366] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1
	[0181.366] ResetEvent (hEvent=0xfc) returned 1
	[0181.366] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0181.374] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0
	[0181.375] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0181.376] GetProcessHeap () returned 0x800000
	[0181.376] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0181.376] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a37297, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a37297, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2a5d3f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1
	[0181.376] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be033e8, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2be033e8, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x90894420, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1
	[0181.376] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7f46f7c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xd7f46f7c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xd7f6d0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1
	[0181.376] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22549a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22549a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb22a0c69, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1
	[0181.376] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22ecf2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22ecf2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23391ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1
	[0181.376] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb273d712, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb273d712, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1
	[0181.376] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27a3bdc, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb27a3bdc, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6b1085f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1
	[0181.376] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb23391ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb23391ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23854ab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1
	[0181.376] ResetEvent (hEvent=0xfc) returned 1
	[0181.376] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0181.389] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27fbdf3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb27fbdf3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1
	[0181.389] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e87a7f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2e87a7f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2eadbdf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa4510, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1
	[0181.389] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a5d3f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a5d3f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2aa96b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1
	[0181.389] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d665b0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d665b0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1
	[0181.389] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d8c70f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d8c70f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1
	[0181.389] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2aa96b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2aa96b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2acf818, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1
	[0181.389] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4239426f, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4239426f, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x67fe631c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x40df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1
	[0181.389] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0ea3c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x68b0ea3c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x68b34b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x56df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1
	[0181.389] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1
	[0181.389] GetProcessHeap () returned 0x800000
	[0181.390] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0181.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0181.436] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.436] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1
	[0181.530] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0
	[0181.530] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0181.531] GetProcessHeap () returned 0x800000
	[0181.531] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0181.531] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0181.531] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0
	[0181.531] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0181.531] GetProcessHeap () returned 0x800000
	[0181.531] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0181.531] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe617dc20, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe617dc20, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0181.532] GetProcessHeap () returned 0x800000
	[0181.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0181.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe617dc20, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe617dc20, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0181.575] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe617dc20, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe617dc20, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.575] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x109ce190, ftCreationTime.dwHighDateTime=0x1d56e55, ftLastAccessTime.dwLowDateTime=0x1c84b2b0, ftLastAccessTime.dwHighDateTime=0x1d54044, ftLastWriteTime.dwLowDateTime=0x1c84b2b0, ftLastWriteTime.dwHighDateTime=0x1d54044, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="assured blacks won.exe", cAlternateFileName="ASSURE~1.EXE")) returned 1
	[0181.575] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 1
	[0181.575] GetProcessHeap () returned 0x800000
	[0181.575] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0181.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0181.581] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.581] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1
	[0181.581] GetProcessHeap () returned 0x800000
	[0181.581] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0181.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0181.596] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.607] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1
	[0181.607] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x255a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="axbridge.dll", cAlternateFileName="")) returned 1
	[0181.607] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1
	[0181.607] GetProcessHeap () returned 0x800000
	[0181.607] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0181.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0181.612] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.612] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x76eb12e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76ed7440, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1
	[0181.612] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3665a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1
	[0181.612] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1
	[0181.612] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0
	[0181.612] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0181.613] GetProcessHeap () returned 0x800000
	[0181.613] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0181.613] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1
	[0181.613] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora-sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1
	[0181.613] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x58fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1
	[0181.613] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1
	[0181.613] GetProcessHeap () returned 0x800000
	[0181.613] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0181.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0181.614] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.614] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1
	[0181.614] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1
	[0181.614] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0
	[0181.614] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0181.615] GetProcessHeap () returned 0x800000
	[0181.615] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0181.615] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1
	[0181.615] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1
	[0181.615] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1
	[0181.615] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x34fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1
	[0181.615] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x263a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1
	[0181.615] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x26fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1
	[0181.615] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1
	[0181.615] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1
	[0181.616] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x205a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1
	[0181.616] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x32ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installer.dll", cAlternateFileName="INSTAL~1.DLL")) returned 1
	[0181.616] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1
	[0181.616] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1
	[0181.616] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1
	[0181.616] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1
	[0181.616] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1
	[0181.616] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1
	[0181.616] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1
	[0181.616] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1
	[0181.617] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-32.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1
	[0181.617] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1
	[0181.617] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1
	[0181.617] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-iio.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1
	[0181.617] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2aba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1
	[0181.617] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x409a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1
	[0181.617] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1
	[0181.617] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1
	[0181.617] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-32.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1
	[0181.618] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdbcOdbc.dll", cAlternateFileName="")) returned 1
	[0181.619] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x283a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1
	[0181.619] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1
	[0181.619] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1afa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1
	[0181.619] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb579a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1
	[0181.619] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1
	[0181.619] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x313a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1
	[0181.619] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1
	[0181.619] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1
	[0181.619] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1
	[0181.619] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x239a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1
	[0181.620] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x16da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpicom.dll", cAlternateFileName="")) returned 1
	[0181.620] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x261a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpiexp.dll", cAlternateFileName="")) returned 1
	[0181.620] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x195a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpinscp.dll", cAlternateFileName="")) returned 1
	[0181.620] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpioji.dll", cAlternateFileName="")) returned 1
	[0181.620] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x229a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpishare.dll", cAlternateFileName="")) returned 1
	[0181.620] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.exe", cAlternateFileName="")) returned 1
	[0181.620] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1
	[0181.620] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1
	[0181.620] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1
	[0181.620] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1
	[0181.621] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1
	[0181.621] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1
	[0181.621] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1
	[0181.621] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1
	[0181.621] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6dba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1
	[0181.621] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x269a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxslt.dll", cAlternateFileName="")) returned 1
	[0181.621] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1
	[0181.621] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1
	[0181.621] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0181.621] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1
	[0181.621] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1
	[0181.622] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x367a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjpi170_45.dll", cAlternateFileName="NPJPI1~1.DLL")) returned 1
	[0181.622] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x35da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npoji610.dll", cAlternateFileName="")) returned 1
	[0181.622] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1
	[0181.623] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1
	[0181.623] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1
	[0181.623] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1
	[0181.623] GetProcessHeap () returned 0x800000
	[0181.623] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0181.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0181.624] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.624] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0181.624] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1
	[0181.625] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0
	[0181.625] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0181.625] GetProcessHeap () returned 0x800000
	[0181.625] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0181.625] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1
	[0181.625] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism-d3d.dll", cAlternateFileName="PRISM-~1.DLL")) returned 1
	[0181.625] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1
	[0181.625] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1
	[0181.625] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1
	[0181.626] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1
	[0181.626] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x70fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1
	[0181.626] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1
	[0181.626] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1
	[0181.626] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1
	[0181.626] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1
	[0181.626] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1
	[0181.626] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1
	[0181.626] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x23ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1
	[0181.626] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1
	[0181.626] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1
	[0181.627] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x177a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-32.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1
	[0181.627] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1
	[0181.627] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1
	[0181.627] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0
	[0181.627] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0181.627] GetProcessHeap () returned 0x800000
	[0181.627] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0181.628] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1
	[0181.628] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1
	[0181.628] GetProcessHeap () returned 0x800000
	[0181.628] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0181.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0181.780] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.786] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1
	[0181.789] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="alt-rt.jar", cAlternateFileName="")) returned 1
	[0181.792] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1
	[0181.792] GetProcessHeap () returned 0x800000
	[0181.794] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0181.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.801] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.802] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0181.804] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.807] GetProcessHeap () returned 0x800000
	[0181.808] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0181.808] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1
	[0181.812] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751d4820, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x751d4820, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75220ae0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x364427, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1
	[0181.812] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12543, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1
	[0181.812] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1
	[0181.812] GetProcessHeap () returned 0x800000
	[0181.812] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0181.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.814] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.814] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1
	[0181.814] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1
	[0181.814] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1
	[0181.814] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1
	[0181.814] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1
	[0181.814] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0
	[0181.814] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.815] GetProcessHeap () returned 0x800000
	[0181.815] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0181.815] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1
	[0181.815] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1
	[0181.815] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1
	[0181.815] GetProcessHeap () returned 0x800000
	[0181.815] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0181.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.815] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.815] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x48cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1
	[0181.815] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs", cAlternateFileName="")) returned 1
	[0181.815] GetProcessHeap () returned 0x800000
	[0181.815] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0181.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0181.815] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.815] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.conf", cAlternateFileName="JQS~1.CON")) returned 1
	[0181.816] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 1
	[0181.816] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqsmessages.properties", cAlternateFileName="JQSMES~1.PRO")) returned 0
	[0181.816] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0181.816] GetProcessHeap () returned 0x800000
	[0181.816] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0181.816] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1
	[0181.816] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1
	[0181.816] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1
	[0181.817] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1
	[0181.817] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1
	[0181.817] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1
	[0181.817] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1657, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1
	[0181.817] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1
	[0181.817] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1
	[0181.817] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1
	[0181.817] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1
	[0181.817] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1
	[0181.817] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1
	[0181.818] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3687, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 0
	[0181.818] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.818] GetProcessHeap () returned 0x800000
	[0181.818] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0181.818] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75246c40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x75246c40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75305320, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x449777, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1
	[0181.818] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1
	[0181.818] GetProcessHeap () returned 0x800000
	[0181.818] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0181.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.819] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0181.819] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x148f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-32.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1
	[0181.819] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1
	[0181.819] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1
	[0181.819] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753c3a00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753c3a00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753e9b60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf790d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1
	[0181.819] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x33d, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1
	[0181.819] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.820] GetProcessHeap () returned 0x800000
	[0181.820] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0181.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.821] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.822] GetProcessHeap () returned 0x800000
	[0181.822] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0181.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.823] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.823] GetProcessHeap () returned 0x800000
	[0181.823] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0181.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0181.824] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0181.825] GetProcessHeap () returned 0x800000
	[0181.825] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0181.825] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.825] GetProcessHeap () returned 0x800000
	[0181.825] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0181.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.826] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.826] GetProcessHeap () returned 0x800000
	[0181.826] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0181.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.926] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.927] GetProcessHeap () returned 0x800000
	[0181.927] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0181.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0182.169] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0182.170] GetProcessHeap () returned 0x800000
	[0182.170] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0182.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0182.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0182.395] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0182.396] GetProcessHeap () returned 0x800000
	[0182.396] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0182.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0182.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0182.501] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0182.502] GetProcessHeap () returned 0x800000
	[0182.502] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0182.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0182.628] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0182.629] GetProcessHeap () returned 0x800000
	[0182.629] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0182.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0182.740] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0182.740] GetProcessHeap () returned 0x800000
	[0182.740] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0182.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0182.772] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0182.772] GetProcessHeap () returned 0x800000
	[0182.772] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0183.081] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0183.081] GetProcessHeap () returned 0x800000
	[0183.081] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0183.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0183.095] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0183.095] GetProcessHeap () returned 0x800000
	[0183.095] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0183.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0183.573] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0183.574] GetProcessHeap () returned 0x800000
	[0183.574] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0183.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0183.607] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0183.607] GetProcessHeap () returned 0x800000
	[0183.607] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0183.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0183.609] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0183.610] GetProcessHeap () returned 0x800000
	[0183.610] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0183.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0183.862] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0183.863] GetProcessHeap () returned 0x800000
	[0183.863] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0183.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0184.424] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0184.425] GetProcessHeap () returned 0x800000
	[0184.425] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0184.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0184.926] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0184.927] GetProcessHeap () returned 0x800000
	[0184.927] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0184.928] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0184.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0185.501] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0185.502] GetProcessHeap () returned 0x800000
	[0185.502] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0185.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0185.512] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0185.513] GetProcessHeap () returned 0x800000
	[0185.513] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0185.515] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0185.515] GetProcessHeap () returned 0x800000
	[0185.515] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0185.516] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0185.516] GetProcessHeap () returned 0x800000
	[0185.516] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0185.524] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0185.524] GetProcessHeap () returned 0x800000
	[0185.524] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0185.526] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0185.526] GetProcessHeap () returned 0x800000
	[0185.526] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0185.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0185.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0185.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0185.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0185.811] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0185.812] GetProcessHeap () returned 0x800000
	[0185.812] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0185.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0185.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0185.819] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0185.820] GetProcessHeap () returned 0x800000
	[0185.820] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0185.820] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0185.820] GetProcessHeap () returned 0x800000
	[0185.820] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0185.820] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0185.821] GetProcessHeap () returned 0x800000
	[0185.821] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0185.821] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0185.821] GetProcessHeap () returned 0x800000
	[0185.821] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0185.823] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0185.823] GetProcessHeap () returned 0x800000
	[0185.823] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0185.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef0a44f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0185.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0185.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0185.844] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0185.845] GetProcessHeap () returned 0x800000
	[0185.845] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0186.219] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0186.220] GetProcessHeap () returned 0x800000
	[0186.220] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0186.220] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0186.220] GetProcessHeap () returned 0x800000
	[0186.220] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0186.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0186.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0186.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0186.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0186.241] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0186.242] GetProcessHeap () returned 0x800000
	[0186.242] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0186.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0186.243] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0186.244] GetProcessHeap () returned 0x800000
	[0186.244] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0186.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0186.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0186.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0186.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0186.525] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0186.526] GetProcessHeap () returned 0x800000
	[0186.527] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0186.527] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0186.527] GetProcessHeap () returned 0x800000
	[0186.527] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0186.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0186.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0186.532] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.532] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigurationInternal.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1
	[0186.532] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1
	[0186.532] ResetEvent (hEvent=0xfc) returned 1
	[0186.532] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0186.536] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1
	[0186.536] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dataset.zip", cAlternateFileName="")) returned 1
	[0186.536] ResetEvent (hEvent=0xfc) returned 1
	[0186.536] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0186.541] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.zip", cAlternateFileName="")) returned 1
	[0186.542] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1
	[0186.542] ResetEvent (hEvent=0xfc) returned 1
	[0186.542] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0186.545] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4faa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.zip", cAlternateFileName="")) returned 1
	[0186.545] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1
	[0186.545] ResetEvent (hEvent=0xfc) returned 1
	[0186.545] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0186.548] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xb090, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginForm.zip", cAlternateFileName="LOGINF~1.ZIP")) returned 1
	[0186.548] ResetEvent (hEvent=0xfc) returned 1
	[0186.548] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0186.551] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x36b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1
	[0186.551] ResetEvent (hEvent=0xfc) returned 1
	[0186.551] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0186.553] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11042530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.zip", cAlternateFileName="")) returned 1
	[0186.554] ResetEvent (hEvent=0xfc) returned 1
	[0186.554] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0186.555] ResetEvent (hEvent=0xfc) returned 1
	[0186.555] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0186.726] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1
	[0186.726] ResetEvent (hEvent=0xfc) returned 1
	[0186.726] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0186.850] ResetEvent (hEvent=0xfc) returned 1
	[0186.851] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0186.855] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1
	[0186.855] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11126d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xec16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.zip", cAlternateFileName="SPLASH~1.ZIP")) returned 1
	[0186.855] ResetEvent (hEvent=0xfc) returned 1
	[0186.855] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0186.863] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111bf2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text.zip", cAlternateFileName="")) returned 1
	[0186.863] ResetEvent (hEvent=0xfc) returned 1
	[0186.863] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0186.867] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1
	[0186.867] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 0
	[0186.867] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0186.868] GetProcessHeap () returned 0x800000
	[0186.868] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0186.869] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0186.869] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0186.869] GetProcessHeap () returned 0x800000
	[0186.869] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0186.869] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="VISUAL~1")) returned 0
	[0186.869] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0186.870] GetProcessHeap () returned 0x800000
	[0186.870] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0186.870] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="ITEMTE~1")) returned 0
	[0186.870] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0186.870] GetProcessHeap () returned 0x800000
	[0186.870] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0186.872] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0
	[0186.872] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0186.872] GetProcessHeap () returned 0x800000
	[0186.872] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0186.873] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1
	[0186.873] GetProcessHeap () returned 0x800000
	[0186.873] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0186.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0186.873] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.873] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 1
	[0186.873] GetProcessHeap () returned 0x800000
	[0186.873] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0186.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0186.873] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.873] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0186.873] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0186.874] GetProcessHeap () returned 0x800000
	[0186.874] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0186.874] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 0
	[0186.874] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0186.874] GetProcessHeap () returned 0x800000
	[0186.874] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0186.874] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0
	[0186.874] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0186.875] GetProcessHeap () returned 0x800000
	[0186.875] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0186.875] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDK", cAlternateFileName="")) returned 1
	[0186.875] GetProcessHeap () returned 0x800000
	[0186.875] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0186.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0186.875] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.875] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0186.875] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0186.875] GetProcessHeap () returned 0x800000
	[0186.875] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0186.875] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1
	[0186.875] GetProcessHeap () returned 0x800000
	[0186.875] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0186.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0186.876] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.876] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 1
	[0186.876] GetProcessHeap () returned 0x800000
	[0186.876] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0186.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0186.895] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.895] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0186.895] GetProcessHeap () returned 0x800000
	[0186.895] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0186.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0186.895] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.895] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf09b00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf09b00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkgUI.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1
	[0186.895] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1
	[0186.896] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0
	[0186.896] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0186.896] GetProcessHeap () returned 0x800000
	[0186.896] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0186.896] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557a0300, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x557a0300, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x11348, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkg.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1
	[0186.896] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1
	[0186.896] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0
	[0186.896] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0186.897] GetProcessHeap () returned 0x800000
	[0186.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0186.897] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 0
	[0186.897] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0186.897] GetProcessHeap () returned 0x800000
	[0186.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0186.897] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0
	[0186.897] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0186.898] GetProcessHeap () returned 0x800000
	[0186.898] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0186.899] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0186.899] GetProcessHeap () returned 0x800000
	[0186.899] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0186.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0186.900] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.900] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1
	[0186.900] GetProcessHeap () returned 0x800000
	[0186.900] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0186.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0186.902] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.902] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd106f400, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd106f400, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1
	[0186.902] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c210700, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x523e72d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c210700, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0186.902] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8de7800, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5253df30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8de7800, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0186.902] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e72900, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e72900, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1
	[0186.903] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1
	[0186.903] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0
	[0186.903] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0186.904] GetProcessHeap () returned 0x800000
	[0186.904] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0186.904] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0186.904] GetProcessHeap () returned 0x800000
	[0186.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0186.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0186.905] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.905] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc1cf9700, ftLastWriteTime.dwHighDateTime=0x1cac649, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="ASSEMB~1.XML")) returned 1
	[0186.905] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 1
	[0186.905] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 0
	[0186.905] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0186.905] GetProcessHeap () returned 0x800000
	[0186.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0186.905] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7188df0, ftCreationTime.dwHighDateTime=0x1d56a08, ftLastAccessTime.dwLowDateTime=0x8bf5c470, ftLastAccessTime.dwHighDateTime=0x1d54bae, ftLastWriteTime.dwLowDateTime=0x8bf5c470, ftLastWriteTime.dwHighDateTime=0x1d54bae, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="societies.exe", cAlternateFileName="SOCIET~1.EXE")) returned 1
	[0186.905] ResetEvent (hEvent=0xfc) returned 1
	[0186.905] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.008] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7188df0, ftCreationTime.dwHighDateTime=0x1d56a08, ftLastAccessTime.dwLowDateTime=0x8bf5c470, ftLastAccessTime.dwHighDateTime=0x1d54bae, ftLastWriteTime.dwLowDateTime=0x8bf5c470, ftLastWriteTime.dwHighDateTime=0x1d54bae, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="societies.exe", cAlternateFileName="SOCIET~1.EXE")) returned 0
	[0187.008] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0187.009] GetProcessHeap () returned 0x800000
	[0187.009] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0187.009] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf1a38c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0187.009] GetProcessHeap () returned 0x800000
	[0187.009] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0187.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf1a38c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0187.035] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf1a38c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.036] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef422c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef422c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x23996480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1
	[0187.036] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x774f8200, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="APPLIC~1.INI")) returned 1
	[0187.036] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2431fb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x12670, dwReserved0=0x0, dwReserved1=0x0, cFileName="breakpadinjector.dll", cAlternateFileName="BREAKP~1.DLL")) returned 1
	[0187.036] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1
	[0187.036] GetProcessHeap () returned 0x800000
	[0187.036] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0187.038] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.038] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4910680, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x14623, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1
	[0187.038] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1
	[0187.039] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="components", cAlternateFileName="COMPON~1")) returned 1
	[0187.039] GetProcessHeap () returned 0x800000
	[0187.039] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0187.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0187.040] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.040] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49bf0480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42870, dwReserved0=0x0, dwReserved1=0x0, cFileName="browsercomps.dll", cAlternateFileName="BROWSE~1.DLL")) returned 1
	[0187.040] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="COMPON~1.MAN")) returned 1
	[0187.040] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="COMPON~1.MAN")) returned 0
	[0187.040] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0187.041] GetProcessHeap () returned 0x800000
	[0187.041] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0187.041] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd9ee5100, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="CRASHR~1.INI")) returned 1
	[0187.041] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions", cAlternateFileName="EXTENS~1")) returned 1
	[0187.041] GetProcessHeap () returned 0x800000
	[0187.041] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0187.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0187.042] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.042] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 1
	[0187.042] GetProcessHeap () returned 0x800000
	[0187.042] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0187.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.043] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.043] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xdc50ab00, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x889, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0187.043] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 1
	[0187.043] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 0
	[0187.043] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.044] GetProcessHeap () returned 0x800000
	[0187.044] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0187.044] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 0
	[0187.044] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0187.044] GetProcessHeap () returned 0x800000
	[0187.044] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0187.044] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x57748a00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x44080e, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0187.044] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 1
	[0187.044] GetProcessHeap () returned 0x800000
	[0187.044] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0187.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0187.046] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.046] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amazondotcom.xml", cAlternateFileName="AMAZON~1.XML")) returned 1
	[0187.046] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.xml", cAlternateFileName="")) returned 1
	[0187.046] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa17, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBay.xml", cAlternateFileName="")) returned 1
	[0187.046] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="google.xml", cAlternateFileName="")) returned 1
	[0187.046] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb91, dwReserved0=0x0, dwReserved1=0x0, cFileName="twitter.xml", cAlternateFileName="")) returned 1
	[0187.046] ResetEvent (hEvent=0xfc) returned 1
	[0187.047] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.153] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="wikipedia.xml", cAlternateFileName="WIKIPE~1.XML")) returned 1
	[0187.153] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 1
	[0187.153] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 0
	[0187.153] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0187.154] GetProcessHeap () returned 0x800000
	[0187.154] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0187.154] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 0
	[0187.154] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0187.155] GetProcessHeap () returned 0x800000
	[0187.155] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.155] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x24ca9180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="CRASHR~1.EXE")) returned 1
	[0187.155] ResetEvent (hEvent=0xfc) returned 1
	[0187.155] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.157] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x45382300, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.ini", cAlternateFileName="CRASHR~1.INI")) returned 1
	[0187.158] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xfd9a7300, ftLastWriteTime.dwHighDateTime=0x1cafd02, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="D3DCompiler_43.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1
	[0187.158] ResetEvent (hEvent=0xfc) returned 1
	[0187.158] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.159] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="defaults", cAlternateFileName="")) returned 1
	[0187.160] GetProcessHeap () returned 0x800000
	[0187.160] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0187.182] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.182] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1
	[0187.182] GetProcessHeap () returned 0x800000
	[0187.182] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0187.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.183] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.183] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 1
	[0187.183] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 0
	[0187.183] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.183] GetProcessHeap () returned 0x800000
	[0187.183] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0187.183] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 0
	[0187.183] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0187.184] GetProcessHeap () returned 0x800000
	[0187.184] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.184] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x52aed680, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1
	[0187.184] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dictionaries", cAlternateFileName="DICTIO~1")) returned 1
	[0187.184] GetProcessHeap () returned 0x800000
	[0187.184] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0187.185] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.185] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0xcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1
	[0187.185] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 1
	[0187.185] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 0
	[0187.185] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0187.186] GetProcessHeap () returned 0x800000
	[0187.186] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.186] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x25fbbe80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x43470, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1
	[0187.186] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1
	[0187.186] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x49c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.dll", cAlternateFileName="")) returned 1
	[0187.186] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2ac07280, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x34ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="gkmedias.dll", cAlternateFileName="")) returned 1
	[0187.186] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaeef6000, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb125e740, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x5aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.log", cAlternateFileName="")) returned 1
	[0187.186] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2b590900, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1
	[0187.186] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2c8a3600, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x86270, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1
	[0187.186] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1
	[0187.186] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x2f7f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice_installer.exe", cAlternateFileName="MAINTE~2.EXE")) returned 1
	[0187.186] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2e53f980, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4270, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozalloc.dll", cAlternateFileName="")) returned 1
	[0187.187] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2eec9000, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1fe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozglue.dll", cAlternateFileName="")) returned 1
	[0187.187] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x314eea00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x336470, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozjs.dll", cAlternateFileName="")) returned 1
	[0187.187] ResetEvent (hEvent=0xfc) returned 1
	[0187.187] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.287] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0x66d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp100.dll", cAlternateFileName="")) returned 1
	[0187.287] ResetEvent (hEvent=0xfc) returned 1
	[0187.287] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.289] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0xbc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0187.289] ResetEvent (hEvent=0xfc) returned 1
	[0187.289] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.291] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3318ad80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1b1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nss3.dll", cAlternateFileName="")) returned 1
	[0187.291] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3449da80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x60070, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1
	[0187.291] ResetEvent (hEvent=0xfc) returned 1
	[0187.291] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.294] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1
	[0187.294] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x16870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1
	[0187.294] ResetEvent (hEvent=0xfc) returned 1
	[0187.294] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.297] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x58a5b700, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x771d55, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0187.297] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf10b340, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf10b340, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1218800, ftLastWriteTime.dwHighDateTime=0x1ced1df, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="platform.ini", cAlternateFileName="")) returned 1
	[0187.297] ResetEvent (hEvent=0xfc) returned 1
	[0187.297] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.299] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x357b0780, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-container.exe", cAlternateFileName="PLUGIN~1.EXE")) returned 1
	[0187.299] ResetEvent (hEvent=0xfc) returned 1
	[0187.299] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.366] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x36139e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x6e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-hang-ui.exe", cAlternateFileName="PLUGIN~2.EXE")) returned 1
	[0187.367] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5c2963ee, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="precomplete", cAlternateFileName="PRECOM~1")) returned 1
	[0187.367] ResetEvent (hEvent=0xfc) returned 1
	[0187.367] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.368] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x13c55480, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x8f3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="REMOVE~1")) returned 1
	[0187.369] ResetEvent (hEvent=0xfc) returned 1
	[0187.369] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.370] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1
	[0187.370] ResetEvent (hEvent=0xfc) returned 1
	[0187.370] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.374] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x25870, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.dll", cAlternateFileName="")) returned 1
	[0187.375] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall", cAlternateFileName="UNINST~1")) returned 1
	[0187.375] GetProcessHeap () returned 0x800000
	[0187.375] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0187.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0187.436] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.436] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4a579b00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xd4fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1
	[0187.436] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925200, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1049400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="shortcuts_log.ini", cAlternateFileName="SHORTC~1.INI")) returned 1
	[0187.436] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 1
	[0187.436] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 0
	[0187.436] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0187.437] GetProcessHeap () returned 0x800000
	[0187.437] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0187.437] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x9f38e880, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1
	[0187.437] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x37dd6180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1
	[0187.437] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1
	[0187.437] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3875f800, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x29bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapp-uninstaller.exe", cAlternateFileName="WEBAPP~1.EXE")) returned 1
	[0187.437] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt", cAlternateFileName="")) returned 1
	[0187.437] GetProcessHeap () returned 0x800000
	[0187.437] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0187.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0187.440] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.440] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1efb80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1efb80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x593e4d80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x69f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0187.440] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 1
	[0187.440] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 0
	[0187.440] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0187.440] GetProcessHeap () returned 0x800000
	[0187.440] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0187.441] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x390e8e80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a670, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt-stub.exe", cAlternateFileName="WEBAPP~2.EXE")) returned 1
	[0187.441] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1
	[0187.441] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 0
	[0187.441] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0187.441] GetProcessHeap () returned 0x800000
	[0187.441] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0187.441] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~2")) returned 1
	[0187.442] GetProcessHeap () returned 0x800000
	[0187.442] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0187.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0187.443] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.443] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8093e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8093e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1
	[0187.443] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08409c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x19ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1
	[0187.443] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1
	[0187.443] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 0
	[0187.443] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0187.444] GetProcessHeap () returned 0x800000
	[0187.444] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0187.444] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0187.444] GetProcessHeap () returned 0x800000
	[0187.444] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0187.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0187.445] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.445] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0187.445] GetProcessHeap () returned 0x800000
	[0187.445] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0187.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0187.445] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.445] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1
	[0187.445] GetProcessHeap () returned 0x800000
	[0187.445] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0187.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.445] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.445] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0187.445] GetProcessHeap () returned 0x800000
	[0187.445] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0187.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0187.446] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.446] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1
	[0187.446] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1
	[0187.446] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 0
	[0187.446] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0187.447] GetProcessHeap () returned 0x800000
	[0187.447] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0187.447] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0187.447] GetProcessHeap () returned 0x800000
	[0187.447] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0187.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0187.447] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.447] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fae55dc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5fae55dc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x5fc160dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1
	[0187.447] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1
	[0187.447] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0
	[0187.447] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0187.448] GetProcessHeap () returned 0x800000
	[0187.448] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0187.448] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0187.448] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.448] GetProcessHeap () returned 0x800000
	[0187.448] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0187.448] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0
	[0187.449] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0187.449] GetProcessHeap () returned 0x800000
	[0187.449] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0187.449] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8de300, ftCreationTime.dwHighDateTime=0x1cacf26, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a8de300, ftLastWriteTime.dwHighDateTime=0x1cacf26, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="MICROS~1.TAR")) returned 1
	[0187.449] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe56809a0, ftCreationTime.dwHighDateTime=0x1d50662, ftLastAccessTime.dwLowDateTime=0x24b50a90, ftLastAccessTime.dwHighDateTime=0x1d53273, ftLastWriteTime.dwLowDateTime=0x24b50a90, ftLastWriteTime.dwHighDateTime=0x1d53273, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tray.exe", cAlternateFileName="")) returned 1
	[0187.449] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe56809a0, ftCreationTime.dwHighDateTime=0x1d50662, ftLastAccessTime.dwLowDateTime=0x24b50a90, ftLastAccessTime.dwHighDateTime=0x1d53273, ftLastWriteTime.dwLowDateTime=0x24b50a90, ftLastWriteTime.dwHighDateTime=0x1d53273, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tray.exe", cAlternateFileName="")) returned 0
	[0187.449] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0187.450] GetProcessHeap () returned 0x800000
	[0187.450] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0187.451] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe61c9ee0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61c9ee0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0187.451] GetProcessHeap () returned 0x800000
	[0187.451] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0187.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe61c9ee0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61c9ee0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0187.451] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe61c9ee0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61c9ee0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.451] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42156600, ftCreationTime.dwHighDateTime=0x1d5092b, ftLastAccessTime.dwLowDateTime=0x168a9ae0, ftLastAccessTime.dwHighDateTime=0x1d51bc4, ftLastWriteTime.dwLowDateTime=0x168a9ae0, ftLastWriteTime.dwHighDateTime=0x1d51bc4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="golden-issn.exe", cAlternateFileName="GOLDEN~1.EXE")) returned 1
	[0187.451] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0187.451] GetProcessHeap () returned 0x800000
	[0187.452] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0187.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0187.452] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.452] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1
	[0187.452] GetProcessHeap () returned 0x800000
	[0187.452] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0187.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0187.618] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.627] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0187.631] GetProcessHeap () returned 0x800000
	[0187.633] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0187.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0187.640] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.640] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5f4b44, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa5f4b44, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaaa915ec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1
	[0187.640] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1db959, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab1db959, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab4fb63f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x406000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1
	[0187.640] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de43cb, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4de43cb, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79b03bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1
	[0187.640] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff96fd, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4ff96fd, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79e95cbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1
	[0187.640] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa915ec, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaaa915ec, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab0aae57, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x509000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1
	[0187.640] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9dec0f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9dec0f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa0e5c7a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1
	[0187.640] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653fb0e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x653fb0e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7a4fb7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1
	[0187.641] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa10bdda, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa10bdda, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa262a3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1
	[0187.641] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0187.641] GetProcessHeap () returned 0x800000
	[0187.641] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.641] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.641] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1
	[0187.641] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0
	[0187.641] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.642] GetProcessHeap () returned 0x800000
	[0187.642] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.642] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1
	[0187.642] GetProcessHeap () returned 0x800000
	[0187.642] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.642] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.642] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.642] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1
	[0187.642] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0
	[0187.643] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.643] GetProcessHeap () returned 0x800000
	[0187.643] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.643] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1
	[0187.643] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1
	[0187.643] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a94654c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x1a94654c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x5c12c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1
	[0187.643] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab0aae57, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab0aae57, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab1db959, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1
	[0187.643] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45bd12a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb45bd12a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb45e328a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1
	[0187.644] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4524ba9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4524ba9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4596fca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1
	[0187.644] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1158c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x6f1158c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ac6bc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1
	[0187.644] ResetEvent (hEvent=0xfc) returned 1
	[0187.644] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.731] ResetEvent (hEvent=0xfc) returned 1
	[0187.731] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.733] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44b2788, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44b2788, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x117000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1
	[0187.733] ResetEvent (hEvent=0xfc) returned 1
	[0187.733] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.829] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44664c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44664c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44b2788, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1
	[0187.829] ResetEvent (hEvent=0xfc) returned 1
	[0187.829] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.833] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x84000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1
	[0187.834] ResetEvent (hEvent=0xfc) returned 1
	[0187.834] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.835] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7231257, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7231257, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ae0ebbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1
	[0187.836] ResetEvent (hEvent=0xfc) returned 1
	[0187.836] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.843] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752adc3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x752adc3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b23923c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1
	[0187.843] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778c3b3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x778c3b3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b532dbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1
	[0187.843] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a39c61, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7a39c61, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b5a51dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1
	[0187.843] ResetEvent (hEvent=0xfc) returned 1
	[0187.843] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.846] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa262a3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa262a3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa49dee1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x132000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1
	[0187.846] ResetEvent (hEvent=0xfc) returned 1
	[0187.847] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.848] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c58b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x80c58b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b91117c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1
	[0187.848] ResetEvent (hEvent=0xfc) returned 1
	[0187.848] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0187.941] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1
	[0187.941] ResetEvent (hEvent=0xfc) returned 1
	[0187.941] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.039] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0
	[0188.040] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0188.040] GetProcessHeap () returned 0x800000
	[0188.040] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0188.040] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0188.040] GetProcessHeap () returned 0x800000
	[0188.040] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0188.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0188.041] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.041] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565d698d, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x565d698d, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754f141c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1
	[0188.041] ResetEvent (hEvent=0xfc) returned 1
	[0188.041] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.045] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6605bc5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6605bc5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1
	[0188.045] ResetEvent (hEvent=0xfc) returned 1
	[0188.045] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.049] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d930d9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56d930d9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x777e773c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1
	[0188.049] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1
	[0188.049] ResetEvent (hEvent=0xfc) returned 1
	[0188.049] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.053] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e9da72, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56e9da72, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77d8eb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1
	[0188.053] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0188.053] GetProcessHeap () returned 0x800000
	[0188.053] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0188.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0188.053] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.053] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1
	[0188.053] ResetEvent (hEvent=0xfc) returned 1
	[0188.053] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0
	[0188.061] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0188.061] GetProcessHeap () returned 0x800000
	[0188.061] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0188.061] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1
	[0188.062] GetProcessHeap () returned 0x800000
	[0188.062] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0188.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0188.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1
	[0188.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0
	[0188.062] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0188.062] GetProcessHeap () returned 0x800000
	[0188.062] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0188.062] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1
	[0188.063] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65474e4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65474e4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1
	[0188.063] ResetEvent (hEvent=0xfc) returned 1
	[0188.063] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1
	[0188.067] ResetEvent (hEvent=0xfc) returned 1
	[0188.067] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.070] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6651e86, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1
	[0188.071] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1
	[0188.071] ResetEvent (hEvent=0xfc) returned 1
	[0188.071] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.074] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1
	[0188.075] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46a196b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1
	[0188.075] ResetEvent (hEvent=0xfc) returned 1
	[0188.075] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.078] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1
	[0188.079] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1
	[0188.079] ResetEvent (hEvent=0xfc) returned 1
	[0188.079] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.187] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1
	[0188.187] ResetEvent (hEvent=0xfc) returned 1
	[0188.187] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.195] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1
	[0188.196] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1
	[0188.196] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1
	[0188.196] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1
	[0188.196] ResetEvent (hEvent=0xfc) returned 1
	[0188.196] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.198] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44fea48, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44fea48, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1
	[0188.198] ResetEvent (hEvent=0xfc) returned 1
	[0188.198] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.199] ResetEvent (hEvent=0xfc) returned 1
	[0188.200] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.201] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1
	[0188.201] ResetEvent (hEvent=0xfc) returned 1
	[0188.201] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.204] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6488e03, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6488e03, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6488e03, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1
	[0188.204] ResetEvent (hEvent=0xfc) returned 1
	[0188.204] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.207] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64d50c3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1
	[0188.207] ResetEvent (hEvent=0xfc) returned 1
	[0188.207] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.212] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6521384, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6521384, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1
	[0188.212] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1
	[0188.212] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65b9905, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65b9905, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1
	[0188.213] ResetEvent (hEvent=0xfc) returned 1
	[0188.213] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.215] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46a196b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46a196b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46c7acc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1
	[0188.215] ResetEvent (hEvent=0xfc) returned 1
	[0188.215] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.217] ResetEvent (hEvent=0xfc) returned 1
	[0188.217] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.220] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1
	[0188.220] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e608f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x8e608f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x8e62f07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1
	[0188.220] ResetEvent (hEvent=0xfc) returned 1
	[0188.220] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.320] ResetEvent (hEvent=0xfc) returned 1
	[0188.320] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.324] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1
	[0188.325] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1
	[0188.325] ResetEvent (hEvent=0xfc) returned 1
	[0188.325] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.326] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 0
	[0188.326] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0188.327] GetProcessHeap () returned 0x800000
	[0188.327] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0188.327] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0188.327] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0188.327] GetProcessHeap () returned 0x800000
	[0188.327] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0188.328] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0
	[0188.328] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0188.328] GetProcessHeap () returned 0x800000
	[0188.328] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0188.329] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0188.329] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0188.330] GetProcessHeap () returned 0x800000
	[0188.330] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0188.330] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0188.330] GetProcessHeap () returned 0x800000
	[0188.330] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0188.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0188.330] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.330] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0188.330] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0188.331] GetProcessHeap () returned 0x800000
	[0188.331] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0188.331] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1
	[0188.331] GetProcessHeap () returned 0x800000
	[0188.331] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0188.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0188.331] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.331] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1901f390, ftCreationTime.dwHighDateTime=0x1d4ed4d, ftLastAccessTime.dwLowDateTime=0x54f31190, ftLastAccessTime.dwHighDateTime=0x1d4f99b, ftLastWriteTime.dwLowDateTime=0x54f31190, ftLastWriteTime.dwHighDateTime=0x1d4f99b, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="coordinates.exe", cAlternateFileName="COORDI~1.EXE")) returned 1
	[0188.331] ResetEvent (hEvent=0xfc) returned 1
	[0188.331] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.333] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0188.333] GetProcessHeap () returned 0x800000
	[0188.333] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0188.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0188.333] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.333] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1
	[0188.333] ResetEvent (hEvent=0xfc) returned 1
	[0188.333] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.337] ResetEvent (hEvent=0xfc) returned 1
	[0188.337] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.341] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1
	[0188.341] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 0
	[0188.341] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0188.342] GetProcessHeap () returned 0x800000
	[0188.342] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0188.342] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc1c145, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdcc1c145, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1
	[0188.342] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7732a07, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe7732a07, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1
	[0188.342] ResetEvent (hEvent=0xfc) returned 1
	[0188.342] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.343] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9910bf, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde9910bf, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ac13ba0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1
	[0188.344] ResetEvent (hEvent=0xfc) returned 1
	[0188.344] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.347] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe6c321, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbe6c321, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x6c6758d0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1
	[0188.347] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434cc330, ftCreationTime.dwHighDateTime=0x1d53ce1, ftLastAccessTime.dwLowDateTime=0x5caa7220, ftLastAccessTime.dwHighDateTime=0x1d54ee1, ftLastWriteTime.dwLowDateTime=0x5caa7220, ftLastWriteTime.dwHighDateTime=0x1d54ee1, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nationslynnship.exe", cAlternateFileName="NATION~1.EXE")) returned 1
	[0188.347] ResetEvent (hEvent=0xfc) returned 1
	[0188.347] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.349] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434cc330, ftCreationTime.dwHighDateTime=0x1d53ce1, ftLastAccessTime.dwLowDateTime=0x5caa7220, ftLastAccessTime.dwHighDateTime=0x1d54ee1, ftLastWriteTime.dwLowDateTime=0x5caa7220, ftLastWriteTime.dwHighDateTime=0x1d54ee1, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nationslynnship.exe", cAlternateFileName="NATION~1.EXE")) returned 0
	[0188.350] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0188.350] GetProcessHeap () returned 0x800000
	[0188.350] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0188.350] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1
	[0188.350] GetProcessHeap () returned 0x800000
	[0188.350] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0188.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0188.350] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.350] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0188.351] GetProcessHeap () returned 0x800000
	[0188.351] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0188.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0188.351] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.351] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1
	[0188.351] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1
	[0188.351] ResetEvent (hEvent=0xfc) returned 1
	[0188.351] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.355] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0
	[0188.355] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0188.356] GetProcessHeap () returned 0x800000
	[0188.356] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0188.356] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b530d7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b530d7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1
	[0188.356] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1
	[0188.356] ResetEvent (hEvent=0xfc) returned 1
	[0188.356] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.360] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b9f397, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b9f397, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1
	[0188.360] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879b1223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x879b1223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87a95a65, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1
	[0188.361] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1
	[0188.361] ResetEvent (hEvent=0xfc) returned 1
	[0188.361] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.363] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1
	[0188.364] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1
	[0188.364] ResetEvent (hEvent=0xfc) returned 1
	[0188.364] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.368] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1
	[0188.368] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0
	[0188.368] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0188.369] GetProcessHeap () returned 0x800000
	[0188.369] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0188.369] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0188.369] GetProcessHeap () returned 0x800000
	[0188.369] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0188.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0188.369] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.369] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0188.369] GetProcessHeap () returned 0x800000
	[0188.369] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0188.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0188.370] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.370] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1
	[0188.370] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1
	[0188.370] ResetEvent (hEvent=0xfc) returned 1
	[0188.370] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.372] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1
	[0188.372] ResetEvent (hEvent=0xfc) returned 1
	[0188.372] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.458] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe.mui", cAlternateFileName="")) returned 1
	[0188.458] ResetEvent (hEvent=0xfc) returned 1
	[0188.458] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.461] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll.mui", cAlternateFileName="")) returned 1
	[0188.461] ResetEvent (hEvent=0xfc) returned 1
	[0188.461] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.463] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1
	[0188.464] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1
	[0188.464] ResetEvent (hEvent=0xfc) returned 1
	[0188.464] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.470] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1
	[0188.470] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1
	[0188.470] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0
	[0188.470] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0188.471] GetProcessHeap () returned 0x800000
	[0188.471] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0188.471] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1
	[0188.471] GetProcessHeap () returned 0x800000
	[0188.471] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0188.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0188.471] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.471] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0188.471] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0188.472] GetProcessHeap () returned 0x800000
	[0188.472] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0188.472] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1
	[0188.472] GetProcessHeap () returned 0x800000
	[0188.472] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0188.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0188.473] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.473] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x55587e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1
	[0188.473] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555d411c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1
	[0188.473] ResetEvent (hEvent=0xfc) returned 1
	[0188.473] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.478] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e0d5d3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e0d5d3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x550eb3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1
	[0188.478] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79de7474, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79de7474, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1
	[0188.478] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d9b1b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79d9b1b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1
	[0188.478] ResetEvent (hEvent=0xfc) returned 1
	[0188.478] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.480] ResetEvent (hEvent=0xfc) returned 1
	[0188.480] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.484] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5511151c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x5511151c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1
	[0188.484] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1
	[0188.484] ResetEvent (hEvent=0xfc) returned 1
	[0188.484] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.486] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 0
	[0188.486] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0188.487] GetProcessHeap () returned 0x800000
	[0188.487] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0188.487] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5da15071, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5da15071, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b03e9f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1
	[0188.487] ResetEvent (hEvent=0xfc) returned 1
	[0188.488] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.489] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1
	[0188.489] GetProcessHeap () returned 0x800000
	[0188.489] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0188.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0188.489] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.489] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0188.489] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0188.490] GetProcessHeap () returned 0x800000
	[0188.490] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0188.490] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e72dbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e72dbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e98f1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1
	[0188.490] ResetEvent (hEvent=0xfc) returned 1
	[0188.490] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.493] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1
	[0188.493] GetProcessHeap () returned 0x800000
	[0188.493] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0188.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0188.493] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.493] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1
	[0188.493] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0
	[0188.493] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0188.494] GetProcessHeap () returned 0x800000
	[0188.494] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0188.494] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1
	[0188.494] GetProcessHeap () returned 0x800000
	[0188.494] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0188.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0188.494] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.494] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0188.494] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0188.495] GetProcessHeap () returned 0x800000
	[0188.495] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0188.495] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ee51dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ee51dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1
	[0188.495] ResetEvent (hEvent=0xfc) returned 1
	[0188.495] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.496] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f0b33d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f0b33d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1
	[0188.496] ResetEvent (hEvent=0xfc) returned 1
	[0188.497] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.498] ResetEvent (hEvent=0xfc) returned 1
	[0188.498] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.500] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb66c42a7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1
	[0188.500] ResetEvent (hEvent=0xfc) returned 1
	[0188.500] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.502] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8907f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x42b8907f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19c3730, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1
	[0188.502] ResetEvent (hEvent=0xfc) returned 1
	[0188.502] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.504] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdc01da, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4fdc01da, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7a92dc30, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1
	[0188.504] ResetEvent (hEvent=0xfc) returned 1
	[0188.504] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.604] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1
	[0188.604] ResetEvent (hEvent=0xfc) returned 1
	[0188.604] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.702] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5749e95b, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5749e95b, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1
	[0188.702] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c0b4b2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x59c0b4b2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1
	[0188.702] ResetEvent (hEvent=0xfc) returned 1
	[0188.702] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.705] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4041c528, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4041c528, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb1a36320, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1
	[0188.705] ResetEvent (hEvent=0xfc) returned 1
	[0188.706] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.707] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53bc9d99, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53bc9d99, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7ad31980, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1
	[0188.707] ResetEvent (hEvent=0xfc) returned 1
	[0188.707] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.710] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1
	[0188.710] ResetEvent (hEvent=0xfc) returned 1
	[0188.710] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.711] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0
	[0188.712] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0188.712] GetProcessHeap () returned 0x800000
	[0188.712] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0188.712] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6640820, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6640820, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
	[0188.712] GetProcessHeap () returned 0x800000
	[0188.712] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0188.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6640820, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6640820, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0188.712] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6640820, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6640820, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.712] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1
	[0188.712] GetProcessHeap () returned 0x800000
	[0188.712] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0188.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0188.713] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.713] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0188.713] GetProcessHeap () returned 0x800000
	[0188.713] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0188.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0188.713] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.713] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1
	[0188.713] ResetEvent (hEvent=0xfc) returned 1
	[0188.713] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.718] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0
	[0188.718] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0188.719] GetProcessHeap () returned 0x800000
	[0188.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0188.719] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8585f48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1
	[0188.719] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1
	[0188.719] ResetEvent (hEvent=0xfc) returned 1
	[0188.719] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.722] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0
	[0188.722] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0188.722] GetProcessHeap () returned 0x800000
	[0188.722] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0188.722] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8af3640, ftCreationTime.dwHighDateTime=0x1d4f556, ftLastAccessTime.dwLowDateTime=0x69226c10, ftLastAccessTime.dwHighDateTime=0x1d50215, ftLastWriteTime.dwLowDateTime=0x69226c10, ftLastWriteTime.dwHighDateTime=0x1d50215, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="boost.exe", cAlternateFileName="")) returned 1
	[0188.722] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e07e290, ftCreationTime.dwHighDateTime=0x1d4e9e0, ftLastAccessTime.dwLowDateTime=0x3c2dcb00, ftLastAccessTime.dwHighDateTime=0x1d52344, ftLastWriteTime.dwLowDateTime=0x3c2dcb00, ftLastWriteTime.dwHighDateTime=0x1d52344, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="pool therapeutic ebony.exe", cAlternateFileName="POOLTH~1.EXE")) returned 1
	[0188.723] ResetEvent (hEvent=0xfc) returned 1
	[0188.723] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.725] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e237270, ftCreationTime.dwHighDateTime=0x1d5009f, ftLastAccessTime.dwLowDateTime=0xede18870, ftLastAccessTime.dwHighDateTime=0x1d528b5, ftLastWriteTime.dwLowDateTime=0xede18870, ftLastWriteTime.dwHighDateTime=0x1d528b5, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="surveys.exe", cAlternateFileName="")) returned 1
	[0188.725] ResetEvent (hEvent=0xfc) returned 1
	[0188.725] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.728] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1
	[0188.728] GetProcessHeap () returned 0x800000
	[0188.728] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0188.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0188.728] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.729] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0188.729] GetProcessHeap () returned 0x800000
	[0188.729] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0188.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0188.729] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.729] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2eda9c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2eda9c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1
	[0188.729] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2eda9c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2eda9c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0
	[0188.729] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0188.729] GetProcessHeap () returned 0x800000
	[0188.729] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0188.729] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688296e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x688296e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xaf1e3ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1
	[0188.730] ResetEvent (hEvent=0xfc) returned 1
	[0188.730] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.732] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77dccedc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1
	[0188.732] ResetEvent (hEvent=0xfc) returned 1
	[0188.732] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.735] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47eeed6d, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47eeed6d, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77e3f2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1
	[0188.735] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e3f2fc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x77e3f2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x77ed787c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1
	[0188.735] ResetEvent (hEvent=0xfc) returned 1
	[0188.735] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.738] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f6118a, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47f6118a, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x7821d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1
	[0188.738] ResetEvent (hEvent=0xfc) returned 1
	[0188.738] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.741] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ff9706, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47ff9706, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x782dbd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1
	[0188.741] ResetEvent (hEvent=0xfc) returned 1
	[0188.741] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.746] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480459c4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x480459c4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1
	[0188.746] ResetEvent (hEvent=0xfc) returned 1
	[0188.746] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.860] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1
	[0188.860] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0
	[0188.861] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0188.861] GetProcessHeap () returned 0x800000
	[0188.861] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0188.861] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0
	[0188.861] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0188.862] GetProcessHeap () returned 0x800000
	[0188.862] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0188.863] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1
	[0188.863] GetProcessHeap () returned 0x800000
	[0188.863] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0188.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0188.863] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.863] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0188.863] GetProcessHeap () returned 0x800000
	[0188.863] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0188.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0188.864] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.864] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1
	[0188.864] ResetEvent (hEvent=0xfc) returned 1
	[0188.864] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.866] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1
	[0188.867] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1
	[0188.867] ResetEvent (hEvent=0xfc) returned 1
	[0188.867] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.870] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0
	[0188.870] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0188.870] GetProcessHeap () returned 0x800000
	[0188.870] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0188.870] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7849cb5e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7849cb5e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacc7aae, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1
	[0188.870] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67366c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67366c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb675c828, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1
	[0188.870] ResetEvent (hEvent=0xfc) returned 1
	[0188.870] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.875] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6710567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6710567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67366c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1
	[0188.875] ResetEvent (hEvent=0xfc) returned 1
	[0188.875] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.878] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b02653, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x78b02653, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xad33fb10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1
	[0188.878] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66ea407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb66ea407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6710567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x163800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1
	[0188.879] ResetEvent (hEvent=0xfc) returned 1
	[0188.879] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.881] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66ea407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb66ea407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6710567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x163800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0
	[0188.881] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0188.882] GetProcessHeap () returned 0x800000
	[0188.882] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0188.882] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0188.882] GetProcessHeap () returned 0x800000
	[0188.882] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0188.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0188.882] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.882] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42e9705, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb42e9705, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb430f865, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0188.882] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42e9705, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb42e9705, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb430f865, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0
	[0188.882] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0188.883] GetProcessHeap () returned 0x800000
	[0188.883] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0188.883] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0188.883] GetProcessHeap () returned 0x800000
	[0188.883] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0188.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0188.883] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.883] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0188.883] GetProcessHeap () returned 0x800000
	[0188.883] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0188.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0188.883] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.883] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1
	[0188.883] ResetEvent (hEvent=0xfc) returned 1
	[0188.883] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.885] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1
	[0188.885] ResetEvent (hEvent=0xfc) returned 1
	[0188.885] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.888] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 0
	[0188.888] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0188.889] GetProcessHeap () returned 0x800000
	[0188.889] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0188.889] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
	[0188.889] GetProcessHeap () returned 0x800000
	[0188.889] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0188.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0188.889] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.889] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="CALEND~1.GAD")) returned 1
	[0188.889] GetProcessHeap () returned 0x800000
	[0188.889] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0188.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0188.889] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.889] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb371d95c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0188.890] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0188.890] GetProcessHeap () returned 0x800000
	[0188.890] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0188.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0188.890] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.890] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.html", cAlternateFileName="")) returned 1
	[0188.890] ResetEvent (hEvent=0xfc) returned 1
	[0188.890] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.892] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0188.892] GetProcessHeap () returned 0x800000
	[0188.892] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0188.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0188.893] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.893] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 1
	[0188.893] ResetEvent (hEvent=0xfc) returned 1
	[0188.893] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.895] ResetEvent (hEvent=0xfc) returned 1
	[0188.895] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.898] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.css", cAlternateFileName="")) returned 0
	[0188.898] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0188.899] GetProcessHeap () returned 0x800000
	[0188.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0188.899] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0188.899] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0188.899] GetProcessHeap () returned 0x800000
	[0188.899] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0188.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0188.899] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.899] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 1
	[0188.899] ResetEvent (hEvent=0xfc) returned 1
	[0188.899] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.902] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xff08, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar.js", cAlternateFileName="")) returned 0
	[0188.902] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0188.902] GetProcessHeap () returned 0x800000
	[0188.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0188.902] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0188.902] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0188.903] GetProcessHeap () returned 0x800000
	[0188.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0188.904] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3743abc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3743abc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0188.904] ResetEvent (hEvent=0xfc) returned 1
	[0188.904] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.906] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0188.906] GetProcessHeap () returned 0x800000
	[0188.906] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0188.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0188.910] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.910] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3769c1c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3769c1c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-desk.png", cAlternateFileName="")) returned 1
	[0188.910] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e7160b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e7160b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-dock.png", cAlternateFileName="")) returned 1
	[0188.910] ResetEvent (hEvent=0xfc) returned 1
	[0188.910] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.006] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-today.png", cAlternateFileName="")) returned 1
	[0189.006] ResetEvent (hEvent=0xfc) returned 1
	[0189.006] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.052] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb378fd7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-disable.png", cAlternateFileName="")) returned 1
	[0189.052] ResetEvent (hEvent=0xfc) returned 1
	[0189.052] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.057] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e9776a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7e9776a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb38745bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-down.png", cAlternateFileName="")) returned 1
	[0189.057] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext-hot.png", cAlternateFileName="")) returned 1
	[0189.057] ResetEvent (hEvent=0xfc) returned 1
	[0189.057] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.061] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ebd8c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ebd8c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bNext.png", cAlternateFileName="")) returned 1
	[0189.061] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-disable.png", cAlternateFileName="")) returned 1
	[0189.061] ResetEvent (hEvent=0xfc) returned 1
	[0189.061] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.065] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ee3a28, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7ee3a28, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3a174dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-down.png", cAlternateFileName="")) returned 1
	[0189.065] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3aafa5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev-hot.png", cAlternateFileName="")) returned 1
	[0189.065] ResetEvent (hEvent=0xfc) returned 1
	[0189.065] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.071] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bPrev.png", cAlternateFileName="")) returned 1
	[0189.071] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f7bfa4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f7bfa4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3ad5bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double.png", cAlternateFileName="")) returned 1
	[0189.072] ResetEvent (hEvent=0xfc) returned 1
	[0189.072] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.076] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_bkg.png", cAlternateFileName="")) returned 1
	[0189.076] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_double_orange.png", cAlternateFileName="")) returned 1
	[0189.076] ResetEvent (hEvent=0xfc) returned 1
	[0189.076] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.083] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7fee3c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7fee3c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3afbd1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_ring_docked.png", cAlternateFileName="")) returned 1
	[0189.083] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8014520, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8014520, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single.png", cAlternateFileName="")) returned 1
	[0189.083] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803a67f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb803a67f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg.png", cAlternateFileName="")) returned 1
	[0189.083] ResetEvent (hEvent=0xfc) returned 1
	[0189.083] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.087] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb803a67f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb803a67f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_bkg_orange.png", cAlternateFileName="")) returned 1
	[0189.087] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3b21e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xaa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendar_single_orange.png", cAlternateFileName="")) returned 1
	[0189.087] ResetEvent (hEvent=0xfc) returned 1
	[0189.087] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.089] ResetEvent (hEvent=0xfc) returned 1
	[0189.089] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.177] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80607de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb80607de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c5297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="corner.png", cAlternateFileName="")) returned 1
	[0189.178] ResetEvent (hEvent=0xfc) returned 1
	[0189.178] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.181] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f09b87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f09b87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl-hot.png", cAlternateFileName="")) returned 1
	[0189.181] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb3c78adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="curl.png", cAlternateFileName="")) returned 1
	[0189.181] ResetEvent (hEvent=0xfc) returned 1
	[0189.181] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.183] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb40ef41c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="month.png", cAlternateFileName="")) returned 1
	[0189.183] ResetEvent (hEvent=0xfc) returned 1
	[0189.183] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.184] ResetEvent (hEvent=0xfc) returned 1
	[0189.185] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.186] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f2fce6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f2fce6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-desk.png", cAlternateFileName="")) returned 1
	[0189.186] ResetEvent (hEvent=0xfc) returned 1
	[0189.186] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.188] ResetEvent (hEvent=0xfc) returned 1
	[0189.188] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.191] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 1
	[0189.192] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f55e45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb7f55e45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb411557c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rings-dock.png", cAlternateFileName="")) returned 0
	[0189.192] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0189.193] GetProcessHeap () returned 0x800000
	[0189.193] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0189.193] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0189.193] ResetEvent (hEvent=0xfc) returned 1
	[0189.193] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.195] ResetEvent (hEvent=0xfc) returned 1
	[0189.195] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.197] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0
	[0189.197] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0189.197] GetProcessHeap () returned 0x800000
	[0189.197] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0189.198] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="CLOCK~1.GAD")) returned 1
	[0189.198] GetProcessHeap () returned 0x800000
	[0189.198] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0189.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0189.198] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.198] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ccadbf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9ccadbf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44a767c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0189.198] ResetEvent (hEvent=0xfc) returned 1
	[0189.198] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.202] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0189.202] GetProcessHeap () returned 0x800000
	[0189.202] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0189.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0189.202] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.202] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104c, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.html", cAlternateFileName="")) returned 1
	[0189.202] ResetEvent (hEvent=0xfc) returned 1
	[0189.202] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.204] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0189.204] GetProcessHeap () returned 0x800000
	[0189.204] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0189.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0189.205] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.206] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.css", cAlternateFileName="")) returned 1
	[0189.206] ResetEvent (hEvent=0xfc) returned 1
	[0189.206] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.207] ResetEvent (hEvent=0xfc) returned 1
	[0189.207] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.209] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1
	[0189.209] ResetEvent (hEvent=0xfc) returned 1
	[0189.209] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.212] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0
	[0189.212] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0189.212] GetProcessHeap () returned 0x800000
	[0189.212] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0189.212] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0189.212] ResetEvent (hEvent=0xfc) returned 1
	[0189.212] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.215] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0189.215] GetProcessHeap () returned 0x800000
	[0189.215] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0189.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0189.215] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.215] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x467a, dwReserved0=0x0, dwReserved1=0x0, cFileName="clock.js", cAlternateFileName="")) returned 1
	[0189.216] ResetEvent (hEvent=0xfc) returned 1
	[0189.216] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.217] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1
	[0189.217] ResetEvent (hEvent=0xfc) returned 1
	[0189.217] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.219] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 1
	[0189.219] ResetEvent (hEvent=0xfc) returned 1
	[0189.219] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.221] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timeZones.js", cAlternateFileName="")) returned 0
	[0189.221] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0189.221] GetProcessHeap () returned 0x800000
	[0189.221] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0189.221] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0189.221] ResetEvent (hEvent=0xfc) returned 1
	[0189.221] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.355] ResetEvent (hEvent=0xfc) returned 1
	[0189.355] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.357] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2814, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0
	[0189.357] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0189.357] GetProcessHeap () returned 0x800000
	[0189.357] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0189.360] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0189.360] ResetEvent (hEvent=0xfc) returned 1
	[0189.360] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.362] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0189.362] GetProcessHeap () returned 0x800000
	[0189.362] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0189.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0189.504] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.504] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6530, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer.png", cAlternateFileName="")) returned 1
	[0189.504] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6d6ed, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c6d6ed, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44f393c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_dot.png", cAlternateFileName="")) returned 1
	[0189.504] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c2142f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c2142f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44f393c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_h.png", cAlternateFileName="")) returned 1
	[0189.504] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c4758e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c4758e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4bf19dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_m.png", cAlternateFileName="")) returned 1
	[0189.504] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6d6ed, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c6d6ed, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e2ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_s.png", cAlternateFileName="")) returned 1
	[0189.504] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c9384c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8c9384c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7454, dwReserved0=0x0, dwReserved1=0x0, cFileName="cronometer_settings.png", cAlternateFileName="")) returned 1
	[0189.504] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e52fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x77b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner.png", cAlternateFileName="")) returned 1
	[0189.504] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_dot.png", cAlternateFileName="")) returned 1
	[0189.505] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e7913c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_h.png", cAlternateFileName="")) returned 1
	[0189.505] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cb99ab, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cb99ab, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4e9f29c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_m.png", cAlternateFileName="")) returned 1
	[0189.505] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8cdfb0a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8cdfb0a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ec53fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_s.png", cAlternateFileName="")) returned 1
	[0189.505] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7fb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="diner_settings.png", cAlternateFileName="")) returned 1
	[0189.505] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d05c69, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d05c69, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x876e, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower.png", cAlternateFileName="")) returned 1
	[0189.505] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d51f27, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d51f27, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4eeb55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_dot.png", cAlternateFileName="")) returned 1
	[0189.505] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f3781c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_h.png", cAlternateFileName="")) returned 1
	[0189.505] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_m.png", cAlternateFileName="")) returned 1
	[0189.505] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d2bdc8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d2bdc8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc14, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_s.png", cAlternateFileName="")) returned 1
	[0189.505] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d51f27, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d51f27, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x827b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower_settings.png", cAlternateFileName="")) returned 1
	[0189.506] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4f83adc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3cfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern.png", cAlternateFileName="")) returned 1
	[0189.506] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8dc4344, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8dc4344, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_dot.png", cAlternateFileName="")) returned 1
	[0189.506] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d78086, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d78086, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_h.png", cAlternateFileName="")) returned 1
	[0189.506] ResetEvent (hEvent=0xfc) returned 1
	[0189.506] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.607] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_m.png", cAlternateFileName="")) returned 1
	[0189.607] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d9e1e5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8d9e1e5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fa9c3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbde, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_s.png", cAlternateFileName="")) returned 1
	[0189.607] ResetEvent (hEvent=0xfc) returned 1
	[0189.607] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.610] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8dea4a3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8dea4a3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x51d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="modern_settings.png", cAlternateFileName="")) returned 1
	[0189.610] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e10602, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e10602, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6408, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty.png", cAlternateFileName="")) returned 1
	[0189.610] ResetEvent (hEvent=0xfc) returned 1
	[0189.610] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.612] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e5c8c0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e5c8c0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4fcfd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_dot.png", cAlternateFileName="")) returned 1
	[0189.613] ResetEvent (hEvent=0xfc) returned 1
	[0189.613] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.670] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e36761, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e36761, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_h.png", cAlternateFileName="")) returned 1
	[0189.670] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e36761, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e36761, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_m.png", cAlternateFileName="")) returned 1
	[0189.670] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e5c8c0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e5c8c0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_s.png", cAlternateFileName="")) returned 1
	[0189.670] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e82a1f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e82a1f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb4ff5efc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x702e, dwReserved0=0x0, dwReserved1=0x0, cFileName="novelty_settings.png", cAlternateFileName="")) returned 1
	[0189.670] ResetEvent (hEvent=0xfc) returned 1
	[0189.670] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.703] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9025934, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9025934, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9025934, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9025934, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb501c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1
	[0189.703] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb904ba93, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb904ba93, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9071bf2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9071bf2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50421bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9071bf2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9071bf2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb506831c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb508e47c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb508e47c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90e400f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90e400f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50b45dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb910a16e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb910a16e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91302cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb91302cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1
	[0189.704] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91302cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb91302cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb50da73c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb915642c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb915642c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb510089c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb917c58b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb917c58b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb51269fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1
	[0189.705] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8e82a1f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8e82a1f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="spacer_highlights.png", cAlternateFileName="")) returned 1
	[0189.705] ResetEvent (hEvent=0xfc) returned 1
	[0189.705] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.707] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="square.png", cAlternateFileName="")) returned 1
	[0189.707] ResetEvent (hEvent=0xfc) returned 1
	[0189.707] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.709] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb533bd3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_dot.png", cAlternateFileName="")) returned 1
	[0189.709] ResetEvent (hEvent=0xfc) returned 1
	[0189.709] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.711] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_h.png", cAlternateFileName="")) returned 1
	[0189.711] ResetEvent (hEvent=0xfc) returned 1
	[0189.711] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.713] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea8b7e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ea8b7e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5361e9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_m.png", cAlternateFileName="")) returned 1
	[0189.713] ResetEvent (hEvent=0xfc) returned 1
	[0189.713] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.715] ResetEvent (hEvent=0xfc) returned 1
	[0189.715] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.717] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ececdd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ececdd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb54466dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_s.png", cAlternateFileName="")) returned 1
	[0189.717] ResetEvent (hEvent=0xfc) returned 1
	[0189.717] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.719] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d87, dwReserved0=0x0, dwReserved1=0x0, cFileName="square_settings.png", cAlternateFileName="")) returned 1
	[0189.719] ResetEvent (hEvent=0xfc) returned 1
	[0189.719] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.723] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ef4e3c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8ef4e3c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56a7cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x519b, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.png", cAlternateFileName="")) returned 1
	[0189.723] ResetEvent (hEvent=0xfc) returned 1
	[0189.723] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.725] ResetEvent (hEvent=0xfc) returned 1
	[0189.725] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.726] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f410fa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f410fa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_dot.png", cAlternateFileName="")) returned 1
	[0189.727] ResetEvent (hEvent=0xfc) returned 1
	[0189.727] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.728] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_h.png", cAlternateFileName="")) returned 1
	[0189.728] ResetEvent (hEvent=0xfc) returned 1
	[0189.729] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.730] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56cde3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_m.png", cAlternateFileName="")) returned 1
	[0189.731] ResetEvent (hEvent=0xfc) returned 1
	[0189.731] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.815] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f1af9b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f1af9b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_s.png", cAlternateFileName="")) returned 1
	[0189.815] ResetEvent (hEvent=0xfc) returned 1
	[0189.815] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.920] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f410fa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f410fa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb56f3f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5a3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="system_settings.png", cAlternateFileName="")) returned 1
	[0189.920] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f67259, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f67259, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb571a0fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad.png", cAlternateFileName="")) returned 1
	[0189.920] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fd9676, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fd9676, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_dot.png", cAlternateFileName="")) returned 1
	[0189.920] ResetEvent (hEvent=0xfc) returned 1
	[0189.920] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.930] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb574025c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_h.png", cAlternateFileName="")) returned 1
	[0189.930] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f8d3b8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8f8d3b8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb57663bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_m.png", cAlternateFileName="")) returned 1
	[0189.930] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fb3517, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fb3517, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb5ad235c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_s.png", cAlternateFileName="")) returned 1
	[0189.930] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb621c6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 1
	[0189.930] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8fff7d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb8fff7d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb621c6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5385, dwReserved0=0x0, dwReserved1=0x0, cFileName="trad_settings.png", cAlternateFileName="")) returned 0
	[0189.930] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0189.931] GetProcessHeap () returned 0x800000
	[0189.931] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0189.933] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0189.933] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0
	[0189.933] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0189.933] GetProcessHeap () returned 0x800000
	[0189.933] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0189.933] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="CPU~1.GAD")) returned 1
	[0189.933] GetProcessHeap () returned 0x800000
	[0189.933] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0189.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0189.934] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.934] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb79c415c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0189.934] ResetEvent (hEvent=0xfc) returned 1
	[0189.934] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.943] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0189.943] GetProcessHeap () returned 0x800000
	[0189.943] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0189.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0189.943] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.943] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.html", cAlternateFileName="")) returned 1
	[0189.944] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0189.944] GetProcessHeap () returned 0x800000
	[0189.944] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0189.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0189.945] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.945] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 1
	[0189.945] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.css", cAlternateFileName="")) returned 0
	[0189.945] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0189.945] GetProcessHeap () returned 0x800000
	[0189.946] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0189.946] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0189.946] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0189.946] GetProcessHeap () returned 0x800000
	[0189.946] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0189.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0189.946] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.946] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 1
	[0189.946] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpu.js", cAlternateFileName="")) returned 0
	[0189.946] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0189.947] GetProcessHeap () returned 0x800000
	[0189.947] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0189.947] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0189.947] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0189.947] GetProcessHeap () returned 0x800000
	[0189.947] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0189.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c4b8bc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7c4b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0189.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0189.949] GetProcessHeap () returned 0x800000
	[0189.949] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0189.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0189.950] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.950] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x42e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="back.png", cAlternateFileName="")) returned 1
	[0189.950] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6651, dwReserved0=0x0, dwReserved1=0x0, cFileName="back_lrg.png", cAlternateFileName="")) returned 1
	[0189.950] ResetEvent (hEvent=0xfc) returned 1
	[0189.950] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.955] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cbdcdc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7cbdcdc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7cbdcdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial.png", cAlternateFileName="")) returned 1
	[0189.955] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94e8514, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94e8514, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc91, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot.png", cAlternateFileName="")) returned 1
	[0189.955] ResetEvent (hEvent=0xfc) returned 1
	[0189.955] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.961] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb950e673, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb950e673, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94d7b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="dialdot_lrg.png", cAlternateFileName="")) returned 1
	[0189.961] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb7e3aa9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg.png", cAlternateFileName="")) returned 1
	[0189.962] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb949c256, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb949c256, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc03, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_lrg_sml.png", cAlternateFileName="")) returned 1
	[0189.962] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94760f7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb94760f7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb94b1a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="dial_sml.png", cAlternateFileName="")) returned 1
	[0189.962] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b3d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.png", cAlternateFileName="")) returned 1
	[0189.962] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b6381c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 1
	[0189.962] ResetEvent (hEvent=0xfc) returned 1
	[0189.962] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.963] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb95347d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb95347d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb9b6381c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass_lrg.png", cAlternateFileName="")) returned 0
	[0189.963] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0189.964] GetProcessHeap () returned 0x800000
	[0189.964] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0189.964] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0189.965] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0
	[0189.965] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0189.965] GetProcessHeap () returned 0x800000
	[0189.965] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0189.965] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="CURREN~1.GAD")) returned 1
	[0189.965] GetProcessHeap () returned 0x800000
	[0189.965] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0189.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0189.965] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.965] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6510fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0189.965] ResetEvent (hEvent=0xfc) returned 1
	[0189.966] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.968] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0189.968] GetProcessHeap () returned 0x800000
	[0189.968] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0189.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0189.972] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.972] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0189.972] GetProcessHeap () returned 0x800000
	[0189.972] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0189.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0189.973] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.973] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 1
	[0189.973] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.css", cAlternateFileName="")) returned 0
	[0189.973] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0189.974] GetProcessHeap () returned 0x800000
	[0189.974] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0189.974] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1792, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.html", cAlternateFileName="")) returned 1
	[0189.974] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0189.974] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0189.974] GetProcessHeap () returned 0x800000
	[0189.974] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0189.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0189.975] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.975] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x104de, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.js", cAlternateFileName="")) returned 1
	[0189.975] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="init.js", cAlternateFileName="")) returned 1
	[0189.975] ResetEvent (hEvent=0xfc) returned 1
	[0189.975] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.058] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x161e, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1
	[0190.058] ResetEvent (hEvent=0xfc) returned 1
	[0190.058] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.160] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1
	[0190.160] ResetEvent (hEvent=0xfc) returned 1
	[0190.160] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.163] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 1
	[0190.163] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e28, dwReserved0=0x0, dwReserved1=0x0, cFileName="service.js", cAlternateFileName="")) returned 0
	[0190.163] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0190.164] GetProcessHeap () returned 0x800000
	[0190.164] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0190.165] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0190.165] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0190.165] GetProcessHeap () returned 0x800000
	[0190.165] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0190.166] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb67725c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb67725c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0190.167] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0190.167] GetProcessHeap () returned 0x800000
	[0190.167] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0190.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0190.168] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.168] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3129, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1
	[0190.168] ResetEvent (hEvent=0xfc) returned 1
	[0190.168] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.170] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb661993, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb661993, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_down.png", cAlternateFileName="")) returned 1
	[0190.170] ResetEvent (hEvent=0xfc) returned 1
	[0190.170] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.173] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_over.png", cAlternateFileName="")) returned 1
	[0190.173] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb69d3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_up.png", cAlternateFileName="")) returned 1
	[0190.173] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6156d5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6156d5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-docked.png", cAlternateFileName="")) returned 1
	[0190.173] ResetEvent (hEvent=0xfc) returned 1
	[0190.173] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.178] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6c351c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb6c351c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xaa66, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-2.png", cAlternateFileName="")) returned 1
	[0190.178] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5c9417, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb5c9417, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6c351c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd31a, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-3.png", cAlternateFileName="")) returned 1
	[0190.178] ResetEvent (hEvent=0xfc) returned 1
	[0190.178] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.182] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5ef576, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb5ef576, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6e967c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf240, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-undocked-4.png", cAlternateFileName="")) returned 1
	[0190.182] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb76c32c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb76c32c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb93, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-left.png", cAlternateFileName="")) returned 1
	[0190.183] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb79248b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb79248b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb45, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-middle.png", cAlternateFileName="")) returned 1
	[0190.183] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb70f7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="combo-hover-right.png", cAlternateFileName="")) returned 1
	[0190.183] ResetEvent (hEvent=0xfc) returned 1
	[0190.183] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.202] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d3db0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6d3db0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb73593c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x304, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_down.png", cAlternateFileName="")) returned 1
	[0190.202] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb687af2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb687af2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb73593c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_over.png", cAlternateFileName="")) returned 1
	[0190.202] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb687af2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb687af2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_up.png", cAlternateFileName="")) returned 1
	[0190.202] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7461cd, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7461cd, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_down.png", cAlternateFileName="")) returned 1
	[0190.202] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6f9f0f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb6f9f0f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_over.png", cAlternateFileName="")) returned 1
	[0190.203] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb72006e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb72006e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7cdebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb71, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph_up.png", cAlternateFileName="")) returned 1
	[0190.203] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8048a8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb8048a8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1
	[0190.203] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7b85ea, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb7b85ea, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb7f401c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbda, dwReserved0=0x0, dwReserved1=0x0, cFileName="row_over.png", cAlternateFileName="")) returned 1
	[0190.203] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb81a17c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 1
	[0190.203] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb63b834, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbb63b834, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb81a17c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="triangle.png", cAlternateFileName="")) returned 0
	[0190.203] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0190.204] GetProcessHeap () returned 0x800000
	[0190.204] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0190.204] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0190.204] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0
	[0190.204] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0190.205] GetProcessHeap () returned 0x800000
	[0190.205] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0190.205] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="PICTUR~1.GAD")) returned 1
	[0190.205] GetProcessHeap () returned 0x800000
	[0190.205] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0190.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0190.205] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.205] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa54a84, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa54a84, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc07b211c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0190.205] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0190.205] GetProcessHeap () returned 0x800000
	[0190.205] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0190.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0190.207] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.207] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0190.207] GetProcessHeap () returned 0x800000
	[0190.207] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0190.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0190.208] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.208] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.css", cAlternateFileName="")) returned 1
	[0190.208] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1
	[0190.208] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1454, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0
	[0190.208] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0190.209] GetProcessHeap () returned 0x800000
	[0190.209] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0190.209] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0190.209] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0190.209] GetProcessHeap () returned 0x800000
	[0190.209] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0190.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0190.209] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.209] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.js", cAlternateFileName="")) returned 1
	[0190.210] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1
	[0190.210] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x267e, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0
	[0190.210] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0190.210] GetProcessHeap () returned 0x800000
	[0190.210] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0190.210] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="picturePuzzle.html", cAlternateFileName="")) returned 1
	[0190.210] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0190.210] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0
	[0190.210] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0190.211] GetProcessHeap () returned 0x800000
	[0190.211] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0190.212] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0190.212] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1
	[0190.212] GetProcessHeap () returned 0x800000
	[0190.212] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0190.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0190.214] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.215] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.png", cAlternateFileName="")) returned 1
	[0190.215] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba036d48, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba036d48, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5323, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1
	[0190.215] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1
	[0190.215] ResetEvent (hEvent=0xfc) returned 1
	[0190.215] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.348] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc084a69c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6936, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1
	[0190.348] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba05cea7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba05cea7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7210, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1
	[0190.348] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1
	[0190.348] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba083006, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba083006, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08707fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1
	[0190.348] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0a9165, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0a9165, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc089695c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1
	[0190.348] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08bcabc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1
	[0190.348] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0cf2c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0cf2c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x493b, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1
	[0190.348] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba0f5423, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba0f5423, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc08e2c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x52a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1
	[0190.349] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba11b582, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba11b582, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x531b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1
	[0190.349] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1b3afe, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1b3afe, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0908d7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x46a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0190.349] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1416e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1416e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa3d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="daisies.png", cAlternateFileName="")) returned 1
	[0190.349] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="glow.png", cAlternateFileName="")) returned 1
	[0190.349] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba24c07a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba24c07a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd75, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_down.png", cAlternateFileName="")) returned 1
	[0190.349] ResetEvent (hEvent=0xfc) returned 1
	[0190.349] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.352] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba225f1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba225f1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc092eedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_over.png", cAlternateFileName="")) returned 1
	[0190.352] ResetEvent (hEvent=0xfc) returned 1
	[0190.352] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.354] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2721d9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2721d9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="hint_up.png", cAlternateFileName="")) returned 1
	[0190.354] ResetEvent (hEvent=0xfc) returned 1
	[0190.354] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.358] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_bottom.png", cAlternateFileName="")) returned 1
	[0190.359] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2e45f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2e45f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_left.png", cAlternateFileName="")) returned 1
	[0190.359] ResetEvent (hEvent=0xfc) returned 1
	[0190.359] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.363] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2e45f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2e45f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_divider_right.png", cAlternateFileName="")) returned 1
	[0190.364] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_left.png", cAlternateFileName="")) returned 1
	[0190.364] ResetEvent (hEvent=0xfc) returned 1
	[0190.364] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.366] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_right.png", cAlternateFileName="")) returned 1
	[0190.366] ResetEvent (hEvent=0xfc) returned 1
	[0190.366] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.368] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba30a755, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba30a755, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc097b19c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_box_top.png", cAlternateFileName="")) returned 1
	[0190.368] ResetEvent (hEvent=0xfc) returned 1
	[0190.368] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.374] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3308b4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3308b4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_left.png", cAlternateFileName="")) returned 1
	[0190.374] ResetEvent (hEvent=0xfc) returned 1
	[0190.374] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.375] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba356a13, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba356a13, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_bottom_right.png", cAlternateFileName="")) returned 1
	[0190.375] ResetEvent (hEvent=0xfc) returned 1
	[0190.375] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.470] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba356a13, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba356a13, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_left.png", cAlternateFileName="")) returned 1
	[0190.470] ResetEvent (hEvent=0xfc) returned 1
	[0190.470] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.471] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba37cb72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba37cb72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09a12fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_corner_top_right.png", cAlternateFileName="")) returned 1
	[0190.472] ResetEvent (hEvent=0xfc) returned 1
	[0190.472] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.474] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba37cb72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba37cb72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x83, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider.png", cAlternateFileName="")) returned 1
	[0190.475] ResetEvent (hEvent=0xfc) returned 1
	[0190.475] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.478] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3a2cd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3a2cd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_left.png", cAlternateFileName="")) returned 1
	[0190.478] ResetEvent (hEvent=0xfc) returned 1
	[0190.478] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.481] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3a2cd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3a2cd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09c745c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_divider_right.png", cAlternateFileName="")) returned 1
	[0190.481] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3c8e30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3c8e30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09ed5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_disabled.png", cAlternateFileName="")) returned 1
	[0190.481] ResetEvent (hEvent=0xfc) returned 1
	[0190.481] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.482] ResetEvent (hEvent=0xfc) returned 1
	[0190.483] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.487] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3c8e30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3c8e30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc09ed5bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_hover.png", cAlternateFileName="")) returned 1
	[0190.487] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3eef8f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba3eef8f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a1371c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_pressed.png", cAlternateFileName="")) returned 1
	[0190.487] ResetEvent (hEvent=0xfc) returned 1
	[0190.487] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.490] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4150ee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4150ee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a3987c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_left_rest.png", cAlternateFileName="")) returned 1
	[0190.490] ResetEvent (hEvent=0xfc) returned 1
	[0190.490] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.493] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4150ee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4150ee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0a3987c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_disabled.png", cAlternateFileName="")) returned 1
	[0190.493] ResetEvent (hEvent=0xfc) returned 1
	[0190.493] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.495] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba43b24d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba43b24d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0aabc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_hover.png", cAlternateFileName="")) returned 1
	[0190.495] ResetEvent (hEvent=0xfc) returned 1
	[0190.495] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.502] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4613ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4613ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0ad1dfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_pressed.png", cAlternateFileName="")) returned 1
	[0190.502] ResetEvent (hEvent=0xfc) returned 1
	[0190.502] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.505] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0ad1dfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings_right_rest.png", cAlternateFileName="")) returned 1
	[0190.505] ResetEvent (hEvent=0xfc) returned 1
	[0190.505] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.507] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc095503c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="setting_back.png", cAlternateFileName="")) returned 1
	[0190.507] ResetEvent (hEvent=0xfc) returned 1
	[0190.507] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.594] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_down.png", cAlternateFileName="")) returned 1
	[0190.594] ResetEvent (hEvent=0xfc) returned 1
	[0190.594] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.603] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba298338, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba298338, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd33, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_over.png", cAlternateFileName="")) returned 1
	[0190.603] ResetEvent (hEvent=0xfc) returned 1
	[0190.603] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.605] ResetEvent (hEvent=0xfc) returned 1
	[0190.605] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.607] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2be497, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba2be497, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b1e0bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="shuffle_up.png", cAlternateFileName="")) returned 1
	[0190.607] ResetEvent (hEvent=0xfc) returned 1
	[0190.608] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.609] ResetEvent (hEvent=0xfc) returned 1
	[0190.609] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.612] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba167840, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba167840, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile16.png", cAlternateFileName="")) returned 1
	[0190.612] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba18d99f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba18d99f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0b6a37c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_bezel.png", cAlternateFileName="")) returned 1
	[0190.612] ResetEvent (hEvent=0xfc) returned 1
	[0190.612] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.614] ResetEvent (hEvent=0xfc) returned 1
	[0190.614] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.616] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba18d99f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba18d99f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0bdc79c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="tile_drop_shadow.png", cAlternateFileName="")) returned 1
	[0190.616] ResetEvent (hEvent=0xfc) returned 1
	[0190.616] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.619] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba225f1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba225f1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_down.png", cAlternateFileName="")) returned 1
	[0190.619] ResetEvent (hEvent=0xfc) returned 1
	[0190.619] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.625] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd37, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_over.png", cAlternateFileName="")) returned 1
	[0190.625] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 1
	[0190.626] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1d9c5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba1d9c5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c028fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="timer_up.png", cAlternateFileName="")) returned 0
	[0190.626] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0190.627] GetProcessHeap () returned 0x800000
	[0190.627] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0190.627] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0190.627] ResetEvent (hEvent=0xfc) returned 1
	[0190.627] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.629] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0
	[0190.629] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0190.629] GetProcessHeap () returned 0x800000
	[0190.629] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0190.629] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="RSSFEE~1.GAD")) returned 1
	[0190.629] GetProcessHeap () returned 0x800000
	[0190.629] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0190.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0190.630] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.630] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb96990, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb96990, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc45e1fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0190.630] ResetEvent (hEvent=0xfc) returned 1
	[0190.630] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.635] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0190.635] GetProcessHeap () returned 0x800000
	[0190.635] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0190.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0190.635] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.635] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0190.635] GetProcessHeap () returned 0x800000
	[0190.635] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0190.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0190.635] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.635] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb92, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.css", cAlternateFileName="")) returned 1
	[0190.635] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.css", cAlternateFileName="")) returned 1
	[0190.635] ResetEvent (hEvent=0xfc) returned 1
	[0190.635] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.765] ResetEvent (hEvent=0xfc) returned 1
	[0190.765] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.767] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1
	[0190.768] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 0
	[0190.768] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0190.768] GetProcessHeap () returned 0x800000
	[0190.768] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0190.769] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x86a, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1
	[0190.770] ResetEvent (hEvent=0xfc) returned 1
	[0190.770] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.771] ResetEvent (hEvent=0xfc) returned 1
	[0190.771] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.777] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0190.777] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0190.777] GetProcessHeap () returned 0x800000
	[0190.777] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0190.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0190.778] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.778] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1aee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.js", cAlternateFileName="")) returned 1
	[0190.778] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1
	[0190.778] ResetEvent (hEvent=0xfc) returned 1
	[0190.778] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.780] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 0
	[0190.780] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0190.781] GetProcessHeap () returned 0x800000
	[0190.781] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0190.781] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x271c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.html", cAlternateFileName="")) returned 1
	[0190.781] ResetEvent (hEvent=0xfc) returned 1
	[0190.781] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.783] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0190.783] ResetEvent (hEvent=0xfc) returned 1
	[0190.783] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.798] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xcfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0
	[0190.798] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0190.799] GetProcessHeap () returned 0x800000
	[0190.799] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0190.799] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc467a55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0190.799] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0190.799] GetProcessHeap () returned 0x800000
	[0190.799] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0190.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0190.800] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.800] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc48435dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1369, dwReserved0=0x0, dwReserved1=0x0, cFileName="16-on-black.gif", cAlternateFileName="")) returned 1
	[0190.800] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f4167c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_Off.png", cAlternateFileName="")) returned 1
	[0190.800] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5de162, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5de162, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f677dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonDown_On.png", cAlternateFileName="")) returned 1
	[0190.800] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f8d93c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x118, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_Off.png", cAlternateFileName="")) returned 1
	[0190.800] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba5b8003, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba5b8003, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4f8d93c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="buttonUp_On.png", cAlternateFileName="")) returned 1
	[0190.800] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba6042c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba6042c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4fb3a9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x112b, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyoutBack.png", cAlternateFileName="")) returned 1
	[0190.800] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4f9928, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4f9928, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc4fb3a9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_docked.png", cAlternateFileName="")) returned 1
	[0190.801] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba51fa87, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba51fa87, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc5d89a7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_floating.png", cAlternateFileName="")) returned 1
	[0190.801] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba545be6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba545be6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="item_hover_flyout.png", cAlternateFileName="")) returned 1
	[0190.801] ResetEvent (hEvent=0xfc) returned 1
	[0190.801] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.805] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="navBack.png", cAlternateFileName="")) returned 1
	[0190.805] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba6042c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba6042c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_docked.png", cAlternateFileName="")) returned 1
	[0190.805] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba62a420, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba62a420, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssBackBlue_Undocked.png", cAlternateFileName="")) returned 1
	[0190.805] ResetEvent (hEvent=0xfc) returned 1
	[0190.805] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.809] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69bcb3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rssLogo.gif", cAlternateFileName="")) returned 1
	[0190.809] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56bd45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba56bd45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_docked.png", cAlternateFileName="")) returned 1
	[0190.809] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_floating.png", cAlternateFileName="")) returned 1
	[0190.809] ResetEvent (hEvent=0xfc) returned 1
	[0190.809] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.811] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 1
	[0190.811] ResetEvent (hEvent=0xfc) returned 1
	[0190.811] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.966] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba591ea4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba591ea4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc69969dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss_headline_glow_flyout.png", cAlternateFileName="")) returned 0
	[0190.967] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0190.968] GetProcessHeap () returned 0x800000
	[0190.968] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0190.968] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0190.968] ResetEvent (hEvent=0xfc) returned 1
	[0190.968] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.121] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0
	[0191.122] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0191.122] GetProcessHeap () returned 0x800000
	[0191.122] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0191.122] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="SLIDES~1.GAD")) returned 1
	[0191.122] GetProcessHeap () returned 0x800000
	[0191.122] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0191.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0191.122] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.122] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbafe414, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbafe414, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0b3b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0191.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0191.123] GetProcessHeap () returned 0x800000
	[0191.123] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0191.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0191.123] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.123] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0191.123] GetProcessHeap () returned 0x800000
	[0191.123] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0191.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0191.124] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.124] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1
	[0191.125] ResetEvent (hEvent=0xfc) returned 1
	[0191.125] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.129] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 1
	[0191.129] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x11b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.css", cAlternateFileName="")) returned 0
	[0191.129] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0191.129] GetProcessHeap () returned 0x800000
	[0191.129] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0191.129] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0191.129] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0191.129] GetProcessHeap () returned 0x800000
	[0191.130] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0191.130] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0191.130] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.130] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 1
	[0191.130] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.js", cAlternateFileName="")) returned 0
	[0191.130] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0191.130] GetProcessHeap () returned 0x800000
	[0191.130] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0191.130] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1910, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0191.130] ResetEvent (hEvent=0xfc) returned 1
	[0191.131] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.132] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 1
	[0191.132] ResetEvent (hEvent=0xfc) returned 1
	[0191.132] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.135] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideShow.html", cAlternateFileName="")) returned 0
	[0191.135] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0191.136] GetProcessHeap () returned 0x800000
	[0191.136] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0191.137] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb0ffddc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb0ffddc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0191.137] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0191.137] GetProcessHeap () returned 0x800000
	[0191.137] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0191.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0191.138] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.138] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.png", cAlternateFileName="")) returned 1
	[0191.138] ResetEvent (hEvent=0xfc) returned 1
	[0191.138] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.141] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="in_sidebar", cAlternateFileName="IN_SID~1")) returned 1
	[0191.141] GetProcessHeap () returned 0x800000
	[0191.141] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0191.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0191.142] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.142] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb125f3c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb125f3c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb125f3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_sidebar.png", cAlternateFileName="")) returned 1
	[0191.142] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1
	[0191.143] ResetEvent (hEvent=0xfc) returned 1
	[0191.143] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.148] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0
	[0191.148] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0191.148] GetProcessHeap () returned 0x800000
	[0191.148] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0191.148] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb14c09c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb14c09c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_down.png", cAlternateFileName="")) returned 1
	[0191.148] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad9a8ae, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbad9a8ae, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb14c09c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_hov.png", cAlternateFileName="")) returned 1
	[0191.149] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbadc0a0d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbadc0a0d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1721fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="next_rest.png", cAlternateFileName="")) returned 1
	[0191.149] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="on_desktop", cAlternateFileName="ON_DES~1")) returned 1
	[0191.149] GetProcessHeap () returned 0x800000
	[0191.149] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0191.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0191.149] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.149] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19835c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb19835c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 1
	[0191.149] ResetEvent (hEvent=0xfc) returned 1
	[0191.149] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.158] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19835c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb19835c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="slideshow_glass_frame.png", cAlternateFileName="")) returned 0
	[0191.158] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0191.159] GetProcessHeap () returned 0x800000
	[0191.159] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0191.159] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae7f0e8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbae7f0e8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb19835c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbca, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_down.png", cAlternateFileName="")) returned 1
	[0191.159] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaea5247, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaea5247, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1be4bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_hov.png", cAlternateFileName="")) returned 1
	[0191.159] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaecb3a6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaecb3a6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1e461c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb11, dwReserved0=0x0, dwReserved1=0x0, cFileName="pause_rest.png", cAlternateFileName="")) returned 1
	[0191.159] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaef1505, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaef1505, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb1e461c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_down.png", cAlternateFileName="")) returned 1
	[0191.159] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb20a77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_hov.png", cAlternateFileName="")) returned 1
	[0191.159] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf17664, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf17664, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb256a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb46, dwReserved0=0x0, dwReserved1=0x0, cFileName="play_rest.png", cAlternateFileName="")) returned 1
	[0191.159] ResetEvent (hEvent=0xfc) returned 1
	[0191.159] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.162] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb256a3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_down.png", cAlternateFileName="")) returned 1
	[0191.162] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf3d7c3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf3d7c3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc05, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_hov.png", cAlternateFileName="")) returned 1
	[0191.162] ResetEvent (hEvent=0xfc) returned 1
	[0191.163] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.164] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf89a81, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf89a81, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb58, dwReserved0=0x0, dwReserved1=0x0, cFileName="prev_rest.png", cAlternateFileName="")) returned 1
	[0191.164] ResetEvent (hEvent=0xfc) returned 1
	[0191.164] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.168] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf89a81, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaf89a81, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb27cb9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_down.png", cAlternateFileName="")) returned 1
	[0191.169] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafafbe0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbafafbe0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb31511c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_hov.png", cAlternateFileName="")) returned 1
	[0191.169] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafafbe0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbafafbe0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb31511c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba6, dwReserved0=0x0, dwReserved1=0x0, cFileName="reveal_rest.png", cAlternateFileName="")) returned 1
	[0191.169] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade6b6c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbade6b6c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb33b27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 1
	[0191.169] ResetEvent (hEvent=0xfc) returned 1
	[0191.169] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.170] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade6b6c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbade6b6c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb33b27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulip.jpg", cAlternateFileName="")) returned 0
	[0191.170] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0191.171] GetProcessHeap () returned 0x800000
	[0191.171] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0191.172] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0191.172] ResetEvent (hEvent=0xfc) returned 1
	[0191.172] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.307] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0
	[0191.307] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0191.307] GetProcessHeap () returned 0x800000
	[0191.307] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0191.307] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 1
	[0191.308] GetProcessHeap () returned 0x800000
	[0191.308] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0191.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0191.308] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.308] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf39e8c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf39e8c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd379e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1
	[0191.308] ResetEvent (hEvent=0xfc) returned 1
	[0191.308] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.319] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0191.319] GetProcessHeap () returned 0x800000
	[0191.319] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0191.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0191.319] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.319] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0191.319] GetProcessHeap () returned 0x800000
	[0191.319] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0191.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0191.321] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.321] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedSettings.css", cAlternateFileName="")) returned 1
	[0191.321] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2786, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.css", cAlternateFileName="")) returned 1
	[0191.321] ResetEvent (hEvent=0xfc) returned 1
	[0191.321] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.324] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 1
	[0191.324] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x603c, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.css", cAlternateFileName="")) returned 0
	[0191.324] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0191.325] GetProcessHeap () returned 0x800000
	[0191.325] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0191.325] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gadget.xml", cAlternateFileName="")) returned 1
	[0191.325] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0191.325] GetProcessHeap () returned 0x800000
	[0191.325] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0191.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0191.325] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.325] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highDpiImageSwap.js", cAlternateFileName="")) returned 1
	[0191.325] ResetEvent (hEvent=0xfc) returned 1
	[0191.325] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.328] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xab00, dwReserved0=0x0, dwReserved1=0x0, cFileName="library.js", cAlternateFileName="")) returned 1
	[0191.328] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x388c, dwReserved0=0x0, dwReserved1=0x0, cFileName="localizedStrings.js", cAlternateFileName="")) returned 1
	[0191.328] ResetEvent (hEvent=0xfc) returned 1
	[0191.328] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.331] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe268, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.js", cAlternateFileName="")) returned 1
	[0191.331] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 1
	[0191.331] ResetEvent (hEvent=0xfc) returned 1
	[0191.332] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.334] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x210ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.js", cAlternateFileName="")) returned 0
	[0191.334] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0191.335] GetProcessHeap () returned 0x800000
	[0191.335] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0191.335] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x20be, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1
	[0191.335] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 1
	[0191.335] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118ea0e8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x118ea0e8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weather.html", cAlternateFileName="")) returned 0
	[0191.335] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0191.336] GetProcessHeap () returned 0x800000
	[0191.336] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0191.337] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6739fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd6739fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd6739fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0191.337] ResetEvent (hEvent=0xfc) returned 1
	[0191.337] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.340] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0191.340] GetProcessHeap () returned 0x800000
	[0191.340] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0191.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0191.384] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.384] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd699b5c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd699b5c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.png", cAlternateFileName="")) returned 1
	[0191.384] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd699b5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.png", cAlternateFileName="")) returned 1
	[0191.384] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc00d2b2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc00d2b2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.png", cAlternateFileName="")) returned 1
	[0191.385] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.png", cAlternateFileName="")) returned 1
	[0191.385] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="120DPI", cAlternateFileName="")) returned 1
	[0191.385] GetProcessHeap () returned 0x800000
	[0191.385] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0191.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0191.387] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.387] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe19c11c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbe19c11c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)alertIcon.png", cAlternateFileName="")) returned 1
	[0191.387] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf02919, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf02919, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1c227c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)grayStateIcon.png", cAlternateFileName="")) returned 1
	[0191.387] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf28a78, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf28a78, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1c227c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)greenStateIcon.png", cAlternateFileName="")) returned 1
	[0191.388] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf28a78, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf28a78, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1
	[0191.388] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf4ebd7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf4ebd7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 1
	[0191.388] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf4ebd7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbf4ebd7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe1e83dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="(120DPI)redStateIcon.png", cAlternateFileName="")) returned 0
	[0191.388] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0191.389] GetProcessHeap () returned 0x800000
	[0191.389] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0191.389] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc033411, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc033411, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6bfcbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="13.png", cAlternateFileName="")) returned 1
	[0191.389] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc07f6cf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc07f6cf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.png", cAlternateFileName="")) returned 1
	[0191.389] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="144DPI", cAlternateFileName="")) returned 1
	[0191.389] GetProcessHeap () returned 0x800000
	[0191.389] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0191.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0191.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe38b2fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbe38b2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbe38b2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)alertIcon.png", cAlternateFileName="")) returned 1
	[0191.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3b145c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)grayStateIcon.png", cAlternateFileName="")) returned 1
	[0191.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3d75bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)greenStateIcon.png", cAlternateFileName="")) returned 1
	[0191.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)notConnectedStateIcon.png", cAlternateFileName="")) returned 1
	[0191.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 1
	[0191.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe3fd71c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="(144DPI)redStateIcon.png", cAlternateFileName="")) returned 0
	[0191.391] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0191.392] GetProcessHeap () returned 0x800000
	[0191.392] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0191.392] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="15.png", cAlternateFileName="")) returned 1
	[0191.392] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0a582e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0a582e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd6e5e1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.png", cAlternateFileName="")) returned 1
	[0191.392] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="17.png", cAlternateFileName="")) returned 1
	[0191.393] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0cb98d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0cb98d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="18.png", cAlternateFileName="")) returned 1
	[0191.393] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="19.png", cAlternateFileName="")) returned 1
	[0191.393] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0f1aec, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc0f1aec, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1px.gif", cAlternateFileName="")) returned 1
	[0191.393] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc117c4b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc117c4b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.png", cAlternateFileName="")) returned 1
	[0191.393] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="20.png", cAlternateFileName="")) returned 1
	[0191.393] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="21.png", cAlternateFileName="")) returned 1
	[0191.393] ResetEvent (hEvent=0xfc) returned 1
	[0191.393] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.508] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd70bf7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x17b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="22.png", cAlternateFileName="")) returned 1
	[0191.508] ResetEvent (hEvent=0xfc) returned 1
	[0191.508] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.609] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13ddaa, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc13ddaa, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="23.png", cAlternateFileName="")) returned 1
	[0191.609] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc163f09, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc163f09, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24.png", cAlternateFileName="")) returned 1
	[0191.610] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x15c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="25.png", cAlternateFileName="")) returned 1
	[0191.610] ResetEvent (hEvent=0xfc) returned 1
	[0191.610] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.615] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc18a068, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc18a068, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="26.png", cAlternateFileName="")) returned 1
	[0191.615] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1b01c7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1b01c7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="27.png", cAlternateFileName="")) returned 1
	[0191.615] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1d6326, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1d6326, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x13c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="28.png", cAlternateFileName="")) returned 1
	[0191.615] ResetEvent (hEvent=0xfc) returned 1
	[0191.615] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.629] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7320dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="29.png", cAlternateFileName="")) returned 1
	[0191.629] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1fc485, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc1fc485, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.png", cAlternateFileName="")) returned 1
	[0191.629] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="30.png", cAlternateFileName="")) returned 1
	[0191.629] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2225e4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2225e4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="31.png", cAlternateFileName="")) returned 1
	[0191.629] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="32.png", cAlternateFileName="")) returned 1
	[0191.629] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc248743, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc248743, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd75823c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="33.png", cAlternateFileName="")) returned 1
	[0191.629] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc26e8a2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc26e8a2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1010, dwReserved0=0x0, dwReserved1=0x0, cFileName="34.png", cAlternateFileName="")) returned 1
	[0191.629] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd77e39c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="35.png", cAlternateFileName="")) returned 1
	[0191.629] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc294a01, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc294a01, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x16df, dwReserved0=0x0, dwReserved1=0x0, cFileName="36.png", cAlternateFileName="")) returned 1
	[0191.630] ResetEvent (hEvent=0xfc) returned 1
	[0191.630] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.640] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="37.png", cAlternateFileName="")) returned 1
	[0191.640] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="38.png", cAlternateFileName="")) returned 1
	[0191.641] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2bab60, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc2bab60, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="39.png", cAlternateFileName="")) returned 1
	[0191.641] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc306e1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc306e1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7a44fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.png", cAlternateFileName="")) returned 1
	[0191.641] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1874, dwReserved0=0x0, dwReserved1=0x0, cFileName="40.png", cAlternateFileName="")) returned 1
	[0191.641] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc32cf7d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc32cf7d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7ca65c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="41.png", cAlternateFileName="")) returned 1
	[0191.641] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3530dc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc3530dc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="42.png", cAlternateFileName="")) returned 1
	[0191.641] ResetEvent (hEvent=0xfc) returned 1
	[0191.642] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.736] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="43.png", cAlternateFileName="")) returned 1
	[0191.737] ResetEvent (hEvent=0xfc) returned 1
	[0191.737] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.742] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc37923b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc37923b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd7f07bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xb1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="44.png", cAlternateFileName="")) returned 1
	[0191.742] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="45.png", cAlternateFileName="")) returned 1
	[0191.742] ResetEvent (hEvent=0xfc) returned 1
	[0191.742] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.761] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc39f39a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc39f39a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="46.png", cAlternateFileName="")) returned 1
	[0191.761] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd81691c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1456, dwReserved0=0x0, dwReserved1=0x0, cFileName="47.png", cAlternateFileName="")) returned 1
	[0191.761] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4117b7, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4117b7, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="5.png", cAlternateFileName="")) returned 1
	[0191.761] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc437916, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc437916, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.png", cAlternateFileName="")) returned 1
	[0191.761] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4a9d33, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4a9d33, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd83ca7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1701, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.png", cAlternateFileName="")) returned 1
	[0191.761] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4cfe92, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc4cfe92, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.png", cAlternateFileName="")) returned 1
	[0191.762] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc51c150, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc51c150, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd862bdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1551, dwReserved0=0x0, dwReserved1=0x0, cFileName="9.png", cAlternateFileName="")) returned 1
	[0191.762] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc5422af, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc5422af, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8aee9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3032, dwReserved0=0x0, dwReserved1=0x0, cFileName="activity16v.png", cAlternateFileName="")) returned 1
	[0191.762] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="alertIcon.png", cAlternateFileName="")) returned 1
	[0191.762] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0dcda1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0dcda1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcde, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down.png", cAlternateFileName="")) returned 1
	[0191.762] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8d4ffc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_down_BIDI.png", cAlternateFileName="")) returned 1
	[0191.762] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12905f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd12905f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd8fb15c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xcdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_over.png", cAlternateFileName="")) returned 1
	[0191.762] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd102f00, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd102f00, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd9936dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_close_up.png", cAlternateFileName="")) returned 1
	[0191.762] ResetEvent (hEvent=0xfc) returned 1
	[0191.762] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.768] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd17531d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd17531d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda05afc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down.png", cAlternateFileName="")) returned 1
	[0191.768] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda2bc5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_down_BIDI.png", cAlternateFileName="")) returned 1
	[0191.768] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd19b47c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd19b47c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xde7, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over.png", cAlternateFileName="")) returned 1
	[0191.768] ResetEvent (hEvent=0xfc) returned 1
	[0191.768] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.774] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1e773a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1e773a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbda9e07c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xdfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_over_BIDI.png", cAlternateFileName="")) returned 1
	[0191.774] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd14f1be, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd14f1be, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up.png", cAlternateFileName="")) returned 1
	[0191.774] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1c15db, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1c15db, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdac41dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn_search_up_BIDI.png", cAlternateFileName="")) returned 1
	[0191.775] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd259b57, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd259b57, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-horizontal.png", cAlternateFileName="")) returned 1
	[0191.775] ResetEvent (hEvent=0xfc) returned 1
	[0191.775] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.776] ResetEvent (hEvent=0xfc) returned 1
	[0191.776] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.980] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdb828bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xafd, dwReserved0=0x0, dwReserved1=0x0, cFileName="divider-vertical.png", cAlternateFileName="")) returned 1
	[0191.981] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd20d899, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd20d899, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2261, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked-loading.png", cAlternateFileName="")) returned 1
	[0191.981] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb81c45, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb81c45, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbceb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x274e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_cloudy.png", cAlternateFileName="")) returned 1
	[0191.981] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2685, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_few-showers.png", cAlternateFileName="")) returned 1
	[0191.981] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdbf4cdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2930, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_foggy.png", cAlternateFileName="")) returned 1
	[0191.981] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbf4062, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbf4062, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_hail.png", cAlternateFileName="")) returned 1
	[0191.981] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1
	[0191.982] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc1a1c1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc1a1c1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc1ae3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ace, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0191.982] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc40320, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc40320, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2264, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full.png", cAlternateFileName="")) returned 1
	[0191.982] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc6647f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc6647f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdc40f9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0191.982] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc8c5de, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcc8c5de, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1
	[0191.982] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b86, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0191.982] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccb273d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccb273d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdcff67c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x251a, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new.png", cAlternateFileName="")) returned 1
	[0191.982] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccd889c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccd889c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0191.982] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbccfe9fb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbccfe9fb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdd257dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2334, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1
	[0191.982] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbddbdd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2c73, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0191.982] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd24b5a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd24b5a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1
	[0191.983] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdde3ebc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b35, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0191.983] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd70e18, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd70e18, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x22a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1
	[0191.983] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd96f77, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcd96f77, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0191.983] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2203, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1
	[0191.983] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdbd0d6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcdbd0d6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde0a01c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0191.983] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3173, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_rainy.png", cAlternateFileName="")) returned 1
	[0191.983] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce2f4f3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbce2f4f3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3369, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_snow.png", cAlternateFileName="")) returned 1
	[0191.983] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcea1910, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcea1910, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde3017c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2fcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_thunderstorm.png", cAlternateFileName="")) returned 1
	[0191.983] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbceedbce, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbceedbce, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbde562dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3229, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_black_windy.png", cAlternateFileName="")) returned 1
	[0191.983] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x21a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0191.984] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf5ffeb, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf5ffeb, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdea259c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ea3, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_snow.png", cAlternateFileName="")) returned 1
	[0191.984] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfac2a9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcfac2a9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2ce5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_sun.png", cAlternateFileName="")) returned 1
	[0192.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcff8567, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcff8567, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_blue_windy.png", cAlternateFileName="")) returned 1
	[0192.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd01e6c6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd01e6c6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2929, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_cloudy.png", cAlternateFileName="")) returned 1
	[0192.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd044825, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd044825, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdec86fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x29d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_few-showers.png", cAlternateFileName="")) returned 1
	[0192.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06a984, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd06a984, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x273c, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_foggy.png", cAlternateFileName="")) returned 1
	[0192.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd090ae3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd090ae3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3071, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_hail.png", cAlternateFileName="")) returned 1
	[0192.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd090ae3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd090ae3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3253, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_rainy.png", cAlternateFileName="")) returned 1
	[0192.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b6c42, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0b6c42, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdeee85c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_snow.png", cAlternateFileName="")) returned 1
	[0192.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0b6c42, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd0b6c42, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf149bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x31d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="docked_gray_thunderstorm.png", cAlternateFileName="")) returned 1
	[0192.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf149bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="grayStateIcon.png", cAlternateFileName="")) returned 1
	[0192.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="greenStateIcon.png", cAlternateFileName="")) returned 1
	[0192.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc58e56d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc58e56d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.png", cAlternateFileName="")) returned 1
	[0192.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2a5e15, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2a5e15, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="notConnectedStateIcon.png", cAlternateFileName="")) returned 1
	[0192.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd27fcb6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd27fcb6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf3ab1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="redStateIcon.png", cAlternateFileName="")) returned 1
	[0192.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd1e773a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd1e773a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf60c7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_background.png", cAlternateFileName="")) returned 1
	[0192.030] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2339f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbd2339f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf60c7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x758e, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked-loading.png", cAlternateFileName="")) returned 1
	[0192.030] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc58e56d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc58e56d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf86ddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6ddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_cloudy.png", cAlternateFileName="")) returned 1
	[0192.030] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc5b46cc, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc5b46cc, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdf86ddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_few-showers.png", cAlternateFileName="")) returned 1
	[0192.030] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc60098a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc60098a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_foggy.png", cAlternateFileName="")) returned 1
	[0192.030] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6e51c4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc6e51c4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7aae, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_hail.png", cAlternateFileName="")) returned 1
	[0192.030] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc70b323, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc70b323, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfacf3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-first-quarter.png", cAlternateFileName="")) returned 1
	[0192.030] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7575e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7575e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x60f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-first-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0192.030] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7575e1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7575e1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4ee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-full.png", cAlternateFileName="")) returned 1
	[0192.030] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc77d740, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc77d740, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdfd309c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x65e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-full_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0192.030] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a389f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7a389f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdff91fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4a10, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-last-quarter.png", cAlternateFileName="")) returned 1
	[0192.031] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a389f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7a389f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbdff91fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x61ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-last-quarter_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0192.031] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7c99fe, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7c99fe, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0454bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x558a, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-new.png", cAlternateFileName="")) returned 1
	[0192.031] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7efb5d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc7efb5d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0454bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-new_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0192.031] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc83be1b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc83be1b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe06b61c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-crescent.png", cAlternateFileName="")) returned 1
	[0192.031] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc861f7a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc861f7a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe06b61c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6469, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0192.031] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc861f7a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc861f7a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe09177c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4b87, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-gibbous.png", cAlternateFileName="")) returned 1
	[0192.031] ResetEvent (hEvent=0xfc) returned 1
	[0192.031] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.033] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8880d9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8880d9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe09177c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x62fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waning-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0192.033] ResetEvent (hEvent=0xfc) returned 1
	[0192.033] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.034] ResetEvent (hEvent=0xfc) returned 1
	[0192.034] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.036] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8ae238, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8ae238, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0b78dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-crescent.png", cAlternateFileName="")) returned 1
	[0192.036] ResetEvent (hEvent=0xfc) returned 1
	[0192.036] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.037] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8ae238, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8ae238, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0b78dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6455, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-crescent_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0192.037] ResetEvent (hEvent=0xfc) returned 1
	[0192.037] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.039] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8d4397, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8d4397, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0dda3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-gibbous.png", cAlternateFileName="")) returned 1
	[0192.039] ResetEvent (hEvent=0xfc) returned 1
	[0192.039] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.041] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8fa4f6, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc8fa4f6, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe0dda3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6222, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_moon-waxing-gibbous_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0192.041] ResetEvent (hEvent=0xfc) returned 1
	[0192.041] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.042] ResetEvent (hEvent=0xfc) returned 1
	[0192.043] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.044] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc920655, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc920655, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe103b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x94ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_rainy.png", cAlternateFileName="")) returned 1
	[0192.044] ResetEvent (hEvent=0xfc) returned 1
	[0192.044] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.046] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9467b4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9467b4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_snow.png", cAlternateFileName="")) returned 1
	[0192.046] ResetEvent (hEvent=0xfc) returned 1
	[0192.046] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.047] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc96c913, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc96c913, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_thunderstorm.png", cAlternateFileName="")) returned 1
	[0192.047] ResetEvent (hEvent=0xfc) returned 1
	[0192.047] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.051] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc992a72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc992a72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x9c38, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_black_windy.png", cAlternateFileName="")) returned 1
	[0192.051] ResetEvent (hEvent=0xfc) returned 1
	[0192.051] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.053] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc992a72, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc992a72, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x6add, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_partly-cloudy.png", cAlternateFileName="")) returned 1
	[0192.053] ResetEvent (hEvent=0xfc) returned 1
	[0192.053] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.054] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9b8bd1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9b8bd1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_snow.png", cAlternateFileName="")) returned 1
	[0192.054] ResetEvent (hEvent=0xfc) returned 1
	[0192.054] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.056] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc9ded30, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbc9ded30, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe129cfc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8f5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_sun.png", cAlternateFileName="")) returned 1
	[0192.056] ResetEvent (hEvent=0xfc) returned 1
	[0192.056] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.057] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca04e8f, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca04e8f, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xbc54, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_blue_windy.png", cAlternateFileName="")) returned 1
	[0192.057] ResetEvent (hEvent=0xfc) returned 1
	[0192.058] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.059] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca2afee, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca2afee, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8184, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_cloudy.png", cAlternateFileName="")) returned 1
	[0192.059] ResetEvent (hEvent=0xfc) returned 1
	[0192.059] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.061] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca772ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca772ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x8450, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_few-showers.png", cAlternateFileName="")) returned 1
	[0192.061] ResetEvent (hEvent=0xfc) returned 1
	[0192.061] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.062] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca772ac, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbca772ac, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe14fe5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x893d, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_foggy.png", cAlternateFileName="")) returned 1
	[0192.062] ResetEvent (hEvent=0xfc) returned 1
	[0192.062] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.064] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac356a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcac356a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x9508, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_hail.png", cAlternateFileName="")) returned 1
	[0192.064] ResetEvent (hEvent=0xfc) returned 1
	[0192.064] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.065] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcae96c9, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcae96c9, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa742, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_rainy.png", cAlternateFileName="")) returned 1
	[0192.065] ResetEvent (hEvent=0xfc) returned 1
	[0192.066] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.067] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe175fbc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xa0df, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_snow.png", cAlternateFileName="")) returned 1
	[0192.067] ResetEvent (hEvent=0xfc) returned 1
	[0192.067] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.069] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x92d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_thunderstorm.png", cAlternateFileName="")) returned 1
	[0192.069] ResetEvent (hEvent=0xfc) returned 1
	[0192.069] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0192.230] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb35987, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcb35987, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbe19c11c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x92d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="undocked_gray_thunderstorm.png", cAlternateFileName="")) returned 0
	[0192.230] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0192.231] GetProcessHeap () returned 0x800000
	[0192.231] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0192.232] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0192.232] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0
	[0192.232] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0192.233] GetProcessHeap () returned 0x800000
	[0192.233] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.233] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 0
	[0192.233] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.233] GetProcessHeap () returned 0x800000
	[0192.233] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.233] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b6cc007, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b6cc007, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xadcc4370, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1
	[0192.233] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c393c21, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c393c21, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1
	[0192.234] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1
	[0192.234] GetProcessHeap () returned 0x800000
	[0192.234] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.234] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.234] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.234] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.234] GetProcessHeap () returned 0x800000
	[0192.234] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.234] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e26afc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e26afc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e4cc5c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1
	[0192.234] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 1
	[0192.235] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 0
	[0192.235] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0192.235] GetProcessHeap () returned 0x800000
	[0192.235] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0192.235] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 0
	[0192.235] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0192.236] GetProcessHeap () returned 0x800000
	[0192.236] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0192.237] FindNextFileW (in: hFindFile=0x868728, lpFindFileData=0x2f2fcd0 | out: lpFindFileData=0x2f2fcd0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
	[0192.237] GetProcessHeap () returned 0x800000
	[0192.237] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0192.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\*", lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0192.237] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.237] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0192.237] GetProcessHeap () returned 0x800000
	[0192.237] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0192.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0192.238] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.238] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0192.238] GetProcessHeap () returned 0x800000
	[0192.238] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.238] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.238] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0192.238] GetProcessHeap () returned 0x800000
	[0192.238] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0192.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0192.239] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.239] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1
	[0192.239] GetProcessHeap () returned 0x800000
	[0192.239] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0192.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0192.239] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.239] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1
	[0192.239] GetProcessHeap () returned 0x800000
	[0192.240] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0192.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0192.241] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.241] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1
	[0192.241] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0
	[0192.241] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0192.241] GetProcessHeap () returned 0x800000
	[0192.241] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0192.241] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0
	[0192.241] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0192.242] GetProcessHeap () returned 0x800000
	[0192.242] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0192.243] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0
	[0192.243] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0192.244] GetProcessHeap () returned 0x800000
	[0192.244] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.244] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0
	[0192.244] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.244] GetProcessHeap () returned 0x800000
	[0192.244] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.244] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1
	[0192.244] GetProcessHeap () returned 0x800000
	[0192.244] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.521] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.525] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1
	[0192.534] GetProcessHeap () returned 0x800000
	[0192.539] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0192.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.558] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.558] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1
	[0192.558] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1
	[0192.558] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1
	[0192.558] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 0
	[0192.558] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.559] GetProcessHeap () returned 0x800000
	[0192.559] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.559] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 0
	[0192.559] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.560] GetProcessHeap () returned 0x800000
	[0192.560] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.560] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0
	[0192.560] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0192.560] GetProcessHeap () returned 0x800000
	[0192.560] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0192.561] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0192.561] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0192.561] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0192.561] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0192.562] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0192.562] GetProcessHeap () returned 0x800000
	[0192.562] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x822c28
	[0192.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0192.778] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.778] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1
	[0192.778] GetProcessHeap () returned 0x800000
	[0192.778] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.778] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.778] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
	[0192.778] GetProcessHeap () returned 0x800000
	[0192.778] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.779] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.779] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1
	[0192.779] GetProcessHeap () returned 0x800000
	[0192.779] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0192.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.779] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.779] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0192.779] GetProcessHeap () returned 0x800000
	[0192.779] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0192.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.781] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.781] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1
	[0192.781] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1
	[0192.781] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1
	[0192.781] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1
	[0192.781] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1
	[0192.781] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1
	[0192.781] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1
	[0192.781] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0
	[0192.781] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.782] GetProcessHeap () returned 0x800000
	[0192.782] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.782] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0192.782] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.783] GetProcessHeap () returned 0x800000
	[0192.783] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.783] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0
	[0192.783] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.783] GetProcessHeap () returned 0x800000
	[0192.783] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.783] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0
	[0192.783] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.784] GetProcessHeap () returned 0x800000
	[0192.784] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.785] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0192.785] GetProcessHeap () returned 0x800000
	[0192.785] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.785] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.785] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1
	[0192.786] GetProcessHeap () returned 0x800000
	[0192.786] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.786] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.786] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
	[0192.786] GetProcessHeap () returned 0x800000
	[0192.786] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0192.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.786] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.786] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.787] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.787] GetProcessHeap () returned 0x800000
	[0192.787] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.787] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0
	[0192.787] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.787] GetProcessHeap () returned 0x800000
	[0192.787] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.787] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1
	[0192.787] GetProcessHeap () returned 0x800000
	[0192.788] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.788] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.788] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.788] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.788] GetProcessHeap () returned 0x800000
	[0192.788] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.788] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0192.788] GetProcessHeap () returned 0x800000
	[0192.788] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.788] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.788] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
	[0192.789] GetProcessHeap () returned 0x800000
	[0192.789] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0192.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.789] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.789] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.789] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.789] GetProcessHeap () returned 0x800000
	[0192.789] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.789] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0192.789] GetProcessHeap () returned 0x800000
	[0192.789] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0192.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="䗺@")) returned 0xffffffff
	[0192.789] GetProcessHeap () returned 0x800000
	[0192.789] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.789] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0
	[0192.789] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.790] GetProcessHeap () returned 0x800000
	[0192.790] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.790] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
	[0192.790] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.790] GetProcessHeap () returned 0x800000
	[0192.790] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.790] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1
	[0192.790] GetProcessHeap () returned 0x800000
	[0192.790] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.791] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.791] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1
	[0192.791] GetProcessHeap () returned 0x800000
	[0192.791] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.791] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.791] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1
	[0192.791] GetProcessHeap () returned 0x800000
	[0192.791] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0192.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.799] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.799] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0192.800] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
	[0192.800] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1
	[0192.800] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1
	[0192.800] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1
	[0192.800] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0
	[0192.800] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.801] GetProcessHeap () returned 0x800000
	[0192.801] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.801] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1
	[0192.801] GetProcessHeap () returned 0x800000
	[0192.801] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0192.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.801] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.802] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0192.802] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
	[0192.802] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1
	[0192.802] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0
	[0192.802] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.802] GetProcessHeap () returned 0x800000
	[0192.802] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.802] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0
	[0192.802] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.803] GetProcessHeap () returned 0x800000
	[0192.803] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.803] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1
	[0192.803] GetProcessHeap () returned 0x800000
	[0192.803] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.803] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.803] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1
	[0192.803] GetProcessHeap () returned 0x800000
	[0192.803] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0192.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.803] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.804] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0192.804] GetProcessHeap () returned 0x800000
	[0192.804] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0192.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.804] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.804] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0192.804] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
	[0192.804] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.805] GetProcessHeap () returned 0x800000
	[0192.805] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.805] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0192.805] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1
	[0192.805] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1
	[0192.805] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0192.805] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1
	[0192.805] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1
	[0192.805] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1
	[0192.805] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1
	[0192.806] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1
	[0192.806] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0
	[0192.806] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.806] GetProcessHeap () returned 0x800000
	[0192.806] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.806] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1
	[0192.806] GetProcessHeap () returned 0x800000
	[0192.806] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0192.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.806] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.806] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0192.806] GetProcessHeap () returned 0x800000
	[0192.807] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0192.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.807] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.807] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0192.807] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
	[0192.807] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.807] GetProcessHeap () returned 0x800000
	[0192.807] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.807] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0192.808] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1
	[0192.808] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1
	[0192.808] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1
	[0192.808] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1
	[0192.808] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1
	[0192.808] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1
	[0192.808] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1
	[0192.808] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0
	[0192.808] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.809] GetProcessHeap () returned 0x800000
	[0192.809] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.809] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0
	[0192.809] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.809] GetProcessHeap () returned 0x800000
	[0192.809] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.809] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0
	[0192.809] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.810] GetProcessHeap () returned 0x800000
	[0192.810] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.811] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1
	[0192.811] GetProcessHeap () returned 0x800000
	[0192.811] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.811] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.811] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.811] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.812] GetProcessHeap () returned 0x800000
	[0192.812] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.812] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1
	[0192.812] GetProcessHeap () returned 0x800000
	[0192.812] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.812] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.812] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1
	[0192.812] GetProcessHeap () returned 0x800000
	[0192.812] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.813] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.813] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.813] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.813] GetProcessHeap () returned 0x800000
	[0192.813] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.813] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0
	[0192.813] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.814] GetProcessHeap () returned 0x800000
	[0192.814] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.814] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1
	[0192.814] GetProcessHeap () returned 0x800000
	[0192.814] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.814] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.814] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1
	[0192.814] GetProcessHeap () returned 0x800000
	[0192.814] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.814] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.814] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.814] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.815] GetProcessHeap () returned 0x800000
	[0192.815] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.815] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0
	[0192.815] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.815] GetProcessHeap () returned 0x800000
	[0192.815] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.815] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
	[0192.815] GetProcessHeap () returned 0x800000
	[0192.815] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.816] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.816] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1
	[0192.816] GetProcessHeap () returned 0x800000
	[0192.816] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.817] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.817] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1
	[0192.817] GetProcessHeap () returned 0x800000
	[0192.817] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0192.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.818] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.818] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.818] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.818] GetProcessHeap () returned 0x800000
	[0192.818] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.818] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0
	[0192.818] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.818] GetProcessHeap () returned 0x800000
	[0192.819] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.819] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0
	[0192.819] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.819] GetProcessHeap () returned 0x800000
	[0192.819] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.819] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1
	[0192.819] GetProcessHeap () returned 0x800000
	[0192.819] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.819] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.819] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1
	[0192.819] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1
	[0192.820] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0
	[0192.820] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.820] GetProcessHeap () returned 0x800000
	[0192.820] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.820] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0192.820] GetProcessHeap () returned 0x800000
	[0192.820] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.822] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.822] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.822] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.822] GetProcessHeap () returned 0x800000
	[0192.822] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.822] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1
	[0192.822] GetProcessHeap () returned 0x800000
	[0192.822] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.822] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.822] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1
	[0192.823] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1
	[0192.823] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0
	[0192.823] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.823] GetProcessHeap () returned 0x800000
	[0192.823] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.823] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1
	[0192.823] GetProcessHeap () returned 0x800000
	[0192.823] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.824] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.824] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1
	[0192.824] GetProcessHeap () returned 0x800000
	[0192.824] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.824] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.824] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.824] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.824] GetProcessHeap () returned 0x800000
	[0192.824] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.824] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0
	[0192.824] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.825] GetProcessHeap () returned 0x800000
	[0192.825] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.825] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1
	[0192.825] GetProcessHeap () returned 0x800000
	[0192.825] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.825] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.825] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1
	[0192.825] GetProcessHeap () returned 0x800000
	[0192.826] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x1d2e676, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2010, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䗺@")) returned 0xffffffff
	[0192.826] GetProcessHeap () returned 0x800000
	[0192.826] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.826] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0
	[0192.826] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.826] GetProcessHeap () returned 0x800000
	[0192.826] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.826] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0192.826] GetProcessHeap () returned 0x800000
	[0192.826] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.827] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.827] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0192.827] GetProcessHeap () returned 0x800000
	[0192.827] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.827] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.827] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.827] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.827] GetProcessHeap () returned 0x800000
	[0192.828] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.828] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1
	[0192.828] GetProcessHeap () returned 0x800000
	[0192.828] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="䗺@")) returned 0xffffffff
	[0192.828] GetProcessHeap () returned 0x800000
	[0192.828] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.828] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0
	[0192.828] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.828] GetProcessHeap () returned 0x800000
	[0192.828] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0192.828] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1
	[0192.828] GetProcessHeap () returned 0x800000
	[0192.828] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0192.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.830] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.830] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1
	[0192.830] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1
	[0192.830] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1
	[0192.830] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1
	[0192.830] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1
	[0192.831] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1
	[0192.831] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1
	[0192.831] GetProcessHeap () returned 0x800000
	[0192.831] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0192.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.832] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.832] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0192.832] GetProcessHeap () returned 0x800000
	[0192.832] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0192.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.027] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.039] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
	[0193.042] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
	[0193.060] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1
	[0193.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1
	[0193.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1
	[0193.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1
	[0193.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1
	[0193.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1
	[0193.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1
	[0193.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1
	[0193.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1
	[0193.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1
	[0193.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1
	[0193.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1
	[0193.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1
	[0193.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1
	[0193.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1
	[0193.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1
	[0193.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1
	[0193.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1
	[0193.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1
	[0193.063] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1
	[0193.063] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1
	[0193.063] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1
	[0193.063] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1
	[0193.063] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1
	[0193.063] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1
	[0193.063] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0
	[0193.063] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.064] GetProcessHeap () returned 0x800000
	[0193.064] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.064] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0193.064] GetProcessHeap () returned 0x800000
	[0193.064] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0193.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.065] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.065] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
	[0193.065] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
	[0193.065] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1
	[0193.065] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1
	[0193.066] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1
	[0193.066] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1
	[0193.066] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1
	[0193.066] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1
	[0193.066] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1
	[0193.066] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1
	[0193.066] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1
	[0193.066] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1
	[0193.066] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1
	[0193.066] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1
	[0193.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1
	[0193.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1
	[0193.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1
	[0193.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1
	[0193.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1
	[0193.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1
	[0193.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1
	[0193.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1
	[0193.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1
	[0193.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1
	[0193.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1
	[0193.068] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1
	[0193.068] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1
	[0193.068] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0
	[0193.068] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.069] GetProcessHeap () returned 0x800000
	[0193.069] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.069] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0
	[0193.069] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.069] GetProcessHeap () returned 0x800000
	[0193.069] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.069] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0
	[0193.069] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0193.070] GetProcessHeap () returned 0x800000
	[0193.070] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0193.071] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0193.071] GetProcessHeap () returned 0x800000
	[0193.071] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0193.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0193.071] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.071] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0193.072] GetProcessHeap () returned 0x800000
	[0193.072] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0193.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.072] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.072] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1
	[0193.072] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0
	[0193.072] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.073] GetProcessHeap () returned 0x800000
	[0193.073] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.073] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1
	[0193.073] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0
	[0193.073] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0193.073] GetProcessHeap () returned 0x800000
	[0193.073] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0193.073] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1
	[0193.073] GetProcessHeap () returned 0x800000
	[0193.073] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0193.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0193.073] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.073] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1
	[0193.073] GetProcessHeap () returned 0x800000
	[0193.073] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0193.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.074] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.074] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0193.074] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.074] GetProcessHeap () returned 0x800000
	[0193.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.074] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe4ccfd00, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe4ccfd00, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1
	[0193.074] GetProcessHeap () returned 0x800000
	[0193.074] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0193.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe4ccfd00, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe4ccfd00, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.074] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe4ccfd00, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe4ccfd00, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.074] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4ccfd00, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1
	[0193.074] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4ccfd00, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0
	[0193.075] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.075] GetProcessHeap () returned 0x800000
	[0193.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.075] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc07b680, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1
	[0193.075] GetProcessHeap () returned 0x800000
	[0193.075] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0193.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc07b680, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.076] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc07b680, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.076] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb35800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xecb35800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1
	[0193.076] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1
	[0193.076] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc07b680, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0xc07b680, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x401c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDataBookmarks.dat", cAlternateFileName="RACWMI~2.DAT")) returned 1
	[0193.076] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc055520, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0xc055520, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x401c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 1
	[0193.076] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc055520, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0xc055520, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x401c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 0
	[0193.076] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.077] GetProcessHeap () returned 0x800000
	[0193.077] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.077] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe594f080, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe594f080, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0193.077] GetProcessHeap () returned 0x800000
	[0193.077] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0193.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe594f080, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe594f080, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.077] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe594f080, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe594f080, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.078] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe594f080, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe594f080, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0193.078] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.078] GetProcessHeap () returned 0x800000
	[0193.078] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.078] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe594f080, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe594f080, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0
	[0193.078] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0193.078] GetProcessHeap () returned 0x800000
	[0193.078] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0193.078] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
	[0193.079] GetProcessHeap () returned 0x800000
	[0193.079] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0193.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0193.079] FindNextFileW (in: hFindFile=0x34d1668, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.079] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a778
	[0193.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x1d2dd9c, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2010, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䗺@")) returned 0xffffffff
	[0193.079] GetProcessHeap () returned 0x800000
	[0193.079] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.079] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0193.080] GetProcessHeap () returned 0x800000
	[0193.080] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0193.080] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0193.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0193.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.081] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.082] GetProcessHeap () returned 0x800000
	[0193.082] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.082] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0193.082] GetProcessHeap () returned 0x800000
	[0193.082] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0193.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0193.083] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0193.083] GetProcessHeap () returned 0x800000
	[0193.083] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0193.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0193.083] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0193.084] GetProcessHeap () returned 0x800000
	[0193.084] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0193.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0193.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.084] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.085] GetProcessHeap () returned 0x800000
	[0193.085] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.085] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.086] GetProcessHeap () returned 0x800000
	[0193.086] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.086] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.086] GetProcessHeap () returned 0x800000
	[0193.086] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.086] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.087] GetProcessHeap () returned 0x800000
	[0193.087] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.087] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.087] GetProcessHeap () returned 0x800000
	[0193.087] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.088] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.088] GetProcessHeap () returned 0x800000
	[0193.088] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="䗺@")) returned 0xffffffff
	[0193.088] GetProcessHeap () returned 0x800000
	[0193.088] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.229] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.229] GetProcessHeap () returned 0x800000
	[0193.229] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.230] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.230] GetProcessHeap () returned 0x800000
	[0193.230] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.231] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.231] GetProcessHeap () returned 0x800000
	[0193.231] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.232] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.232] GetProcessHeap () returned 0x800000
	[0193.232] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.232] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.232] GetProcessHeap () returned 0x800000
	[0193.232] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.235] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.235] GetProcessHeap () returned 0x800000
	[0193.235] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0193.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.235] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.236] GetProcessHeap () returned 0x800000
	[0193.236] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0193.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.236] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.236] GetProcessHeap () returned 0x800000
	[0193.236] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0193.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.237] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.237] GetProcessHeap () returned 0x800000
	[0193.237] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0193.237] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.238] GetProcessHeap () returned 0x800000
	[0193.238] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.240] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.240] GetProcessHeap () returned 0x800000
	[0193.240] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.240] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.241] GetProcessHeap () returned 0x800000
	[0193.241] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.242] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.243] GetProcessHeap () returned 0x800000
	[0193.243] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.243] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.243] GetProcessHeap () returned 0x800000
	[0193.243] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.352] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.353] GetProcessHeap () returned 0x800000
	[0193.353] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0193.375] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.376] GetProcessHeap () returned 0x800000
	[0193.376] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.697] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.698] GetProcessHeap () returned 0x800000
	[0193.698] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfaec2a70, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfaec2a70, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.698] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.698] GetProcessHeap () returned 0x800000
	[0193.698] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.699] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.699] GetProcessHeap () returned 0x800000
	[0193.699] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.699] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.700] GetProcessHeap () returned 0x800000
	[0193.700] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.700] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.700] GetProcessHeap () returned 0x800000
	[0193.700] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.700] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.701] GetProcessHeap () returned 0x800000
	[0193.701] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.701] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.702] GetProcessHeap () returned 0x800000
	[0193.702] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.702] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.702] GetProcessHeap () returned 0x800000
	[0193.702] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.702] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.703] GetProcessHeap () returned 0x800000
	[0193.703] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.703] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0193.703] GetProcessHeap () returned 0x800000
	[0193.703] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0193.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="䗺@")) returned 0xffffffff
	[0193.705] GetProcessHeap () returned 0x800000
	[0193.705] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0193.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0193.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x1ca0444, ftCreationTime.dwLowDateTime=0xa6802240, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2010, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䗺@")) returned 0xffffffff
	[0193.744] GetProcessHeap () returned 0x800000
	[0193.744] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.745] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.745] GetProcessHeap () returned 0x800000
	[0193.745] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.746] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0193.746] GetProcessHeap () returned 0x800000
	[0193.746] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0193.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0193.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.747] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.747] GetProcessHeap () returned 0x800000
	[0193.747] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.747] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0193.747] GetProcessHeap () returned 0x800000
	[0193.748] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0193.748] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0193.748] GetProcessHeap () returned 0x800000
	[0193.748] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0193.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0193.751] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0193.752] GetProcessHeap () returned 0x800000
	[0193.752] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0193.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0193.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0193.753] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0193.754] GetProcessHeap () returned 0x800000
	[0193.754] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.754] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0193.754] GetProcessHeap () returned 0x800000
	[0193.754] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0193.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Oracle\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0193.755] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0193.755] GetProcessHeap () returned 0x800000
	[0193.755] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0193.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0193.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0193.759] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0193.759] GetProcessHeap () returned 0x800000
	[0193.759] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.760] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.760] GetProcessHeap () returned 0x800000
	[0193.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.760] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.761] GetProcessHeap () returned 0x800000
	[0193.761] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.761] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.761] GetProcessHeap () returned 0x800000
	[0193.761] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0193.765] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0193.765] GetProcessHeap () returned 0x800000
	[0193.765] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.766] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.766] GetProcessHeap () returned 0x800000
	[0193.766] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.766] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.766] GetProcessHeap () returned 0x800000
	[0193.766] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.767] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.767] GetProcessHeap () returned 0x800000
	[0193.767] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.770] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.770] GetProcessHeap () returned 0x800000
	[0193.770] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.770] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.771] GetProcessHeap () returned 0x800000
	[0193.771] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.771] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.771] GetProcessHeap () returned 0x800000
	[0193.771] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.772] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.772] GetProcessHeap () returned 0x800000
	[0193.772] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.774] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.774] GetProcessHeap () returned 0x800000
	[0193.774] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.774] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.775] GetProcessHeap () returned 0x800000
	[0193.775] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.775] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.775] GetProcessHeap () returned 0x800000
	[0193.775] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.776] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.776] GetProcessHeap () returned 0x800000
	[0193.776] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.779] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.779] GetProcessHeap () returned 0x800000
	[0193.779] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.779] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.781] GetProcessHeap () returned 0x800000
	[0193.781] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.781] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.781] GetProcessHeap () returned 0x800000
	[0193.781] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.790] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.790] GetProcessHeap () returned 0x800000
	[0193.790] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.791] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.791] GetProcessHeap () returned 0x800000
	[0193.791] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.791] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.792] GetProcessHeap () returned 0x800000
	[0193.792] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.795] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.796] GetProcessHeap () returned 0x800000
	[0193.796] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.796] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.796] GetProcessHeap () returned 0x800000
	[0193.796] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.796] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.797] GetProcessHeap () returned 0x800000
	[0193.797] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.798] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.799] GetProcessHeap () returned 0x800000
	[0193.799] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.799] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.799] GetProcessHeap () returned 0x800000
	[0193.799] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.799] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.800] GetProcessHeap () returned 0x800000
	[0193.800] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.801] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.802] GetProcessHeap () returned 0x800000
	[0193.802] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.802] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.802] GetProcessHeap () returned 0x800000
	[0193.802] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.802] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.803] GetProcessHeap () returned 0x800000
	[0193.803] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.806] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.807] GetProcessHeap () returned 0x800000
	[0193.807] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.807] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.807] GetProcessHeap () returned 0x800000
	[0193.807] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.807] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.808] GetProcessHeap () returned 0x800000
	[0193.808] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.811] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.811] GetProcessHeap () returned 0x800000
	[0193.811] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.811] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.811] GetProcessHeap () returned 0x800000
	[0193.811] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.812] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.812] GetProcessHeap () returned 0x800000
	[0193.812] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.813] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.813] GetProcessHeap () returned 0x800000
	[0193.813] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.815] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.815] GetProcessHeap () returned 0x800000
	[0193.815] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.815] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.816] GetProcessHeap () returned 0x800000
	[0193.816] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.816] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0193.816] GetProcessHeap () returned 0x800000
	[0193.816] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0193.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0193.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0194.025] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0194.025] GetProcessHeap () returned 0x800000
	[0194.025] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.025] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.026] GetProcessHeap () returned 0x800000
	[0194.026] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0194.027] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0194.027] GetProcessHeap () returned 0x800000
	[0194.027] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0194.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.135] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.138] GetProcessHeap () returned 0x800000
	[0194.138] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0194.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0194.158] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0194.158] GetProcessHeap () returned 0x800000
	[0194.158] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0194.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0194.158] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0194.159] GetProcessHeap () returned 0x800000
	[0194.159] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0194.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0194.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0194.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0194.159] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0194.160] GetProcessHeap () returned 0x800000
	[0194.160] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0194.160] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0194.160] GetProcessHeap () returned 0x800000
	[0194.160] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0194.160] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0194.161] GetProcessHeap () returned 0x800000
	[0194.161] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0194.162] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0194.163] GetProcessHeap () returned 0x800000
	[0194.163] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0194.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Sun\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0194.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0194.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0194.164] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0194.165] GetProcessHeap () returned 0x800000
	[0194.165] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0194.165] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0194.165] GetProcessHeap () returned 0x800000
	[0194.165] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0194.167] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0194.167] GetProcessHeap () returned 0x800000
	[0194.167] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0194.167] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0194.168] GetProcessHeap () returned 0x800000
	[0194.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0194.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Recovery\\*", lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="䗺@")) returned 0xffffffff
	[0194.168] GetProcessHeap () returned 0x800000
	[0194.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0194.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\System Volume Information\\*", lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="䗺@")) returned 0xffffffff
	[0194.168] GetProcessHeap () returned 0x800000
	[0194.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0194.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\*", lpFindFileData=0x2f2fa40 | out: lpFindFileData=0x2f2fa40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0194.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x2f2f7b0 | out: lpFindFileData=0x2f2f7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0194.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0194.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfae767b0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfae767b0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0194.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0194.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0194.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0194.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0194.302] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0194.303] GetProcessHeap () returned 0x800000
	[0194.303] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0194.303] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0194.303] GetProcessHeap () returned 0x800000
	[0194.303] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0194.303] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0194.304] GetProcessHeap () returned 0x800000
	[0194.304] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0194.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0194.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0194.319] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0194.320] GetProcessHeap () returned 0x800000
	[0194.320] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0194.320] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0194.321] GetProcessHeap () returned 0x800000
	[0194.321] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0194.321] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0194.321] GetProcessHeap () returned 0x800000
	[0194.321] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0194.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0194.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0194.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0194.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0194.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0194.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0194.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0194.353] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0194.354] GetProcessHeap () returned 0x800000
	[0194.354] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0194.354] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0194.354] GetProcessHeap () returned 0x800000
	[0194.354] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0194.354] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0194.355] GetProcessHeap () returned 0x800000
	[0194.355] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.355] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0194.355] GetProcessHeap () returned 0x800000
	[0194.355] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0194.355] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0194.356] GetProcessHeap () returned 0x800000
	[0194.356] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0194.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0194.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0194.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0194.360] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0194.361] GetProcessHeap () returned 0x800000
	[0194.361] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0194.363] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0194.364] GetProcessHeap () returned 0x800000
	[0194.364] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0194.366] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0194.366] GetProcessHeap () returned 0x800000
	[0194.366] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.367] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0194.367] GetProcessHeap () returned 0x800000
	[0194.367] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0194.368] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0194.369] GetProcessHeap () returned 0x800000
	[0194.369] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0194.370] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0194.370] GetProcessHeap () returned 0x800000
	[0194.370] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0194.370] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0194.370] GetProcessHeap () returned 0x800000
	[0194.370] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0194.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0194.372] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0194.374] GetProcessHeap () returned 0x800000
	[0194.374] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0194.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0194.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0194.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0194.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0194.380] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0194.381] GetProcessHeap () returned 0x800000
	[0194.381] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0194.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0194.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0194.381] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0194.382] GetProcessHeap () returned 0x800000
	[0194.382] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0194.382] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0194.382] GetProcessHeap () returned 0x800000
	[0194.382] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0194.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0194.684] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0194.687] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0194.691] GetProcessHeap () returned 0x800000
	[0194.691] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0194.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.718] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.719] GetProcessHeap () returned 0x800000
	[0194.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0194.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0196.706] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0196.708] GetProcessHeap () returned 0x800000
	[0196.708] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0196.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0196.836] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0196.837] GetProcessHeap () returned 0x800000
	[0196.837] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0196.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0196.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0197.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0197.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.117] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.118] GetProcessHeap () returned 0x800000
	[0197.118] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.123] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.123] GetProcessHeap () returned 0x800000
	[0197.123] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.124] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.124] GetProcessHeap () returned 0x800000
	[0197.124] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.124] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.125] GetProcessHeap () returned 0x800000
	[0197.125] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.128] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.129] GetProcessHeap () returned 0x800000
	[0197.129] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.134] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.134] GetProcessHeap () returned 0x800000
	[0197.134] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.134] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.135] GetProcessHeap () returned 0x800000
	[0197.135] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.135] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.135] GetProcessHeap () returned 0x800000
	[0197.135] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.142] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.143] GetProcessHeap () returned 0x800000
	[0197.143] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.143] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.144] GetProcessHeap () returned 0x800000
	[0197.144] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.144] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.144] GetProcessHeap () returned 0x800000
	[0197.144] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.159] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.159] GetProcessHeap () returned 0x800000
	[0197.159] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.159] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.160] GetProcessHeap () returned 0x800000
	[0197.160] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.160] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.160] GetProcessHeap () returned 0x800000
	[0197.161] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.161] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.161] GetProcessHeap () returned 0x800000
	[0197.161] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.168] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.169] GetProcessHeap () returned 0x800000
	[0197.169] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.169] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.170] GetProcessHeap () returned 0x800000
	[0197.170] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.170] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.170] GetProcessHeap () returned 0x800000
	[0197.170] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.176] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.177] GetProcessHeap () returned 0x800000
	[0197.177] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.189] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.189] GetProcessHeap () returned 0x800000
	[0197.189] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.190] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.190] GetProcessHeap () returned 0x800000
	[0197.190] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.190] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.191] GetProcessHeap () returned 0x800000
	[0197.191] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.191] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.191] GetProcessHeap () returned 0x800000
	[0197.191] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.192] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.192] GetProcessHeap () returned 0x800000
	[0197.192] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.192] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.193] GetProcessHeap () returned 0x800000
	[0197.193] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.195] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.196] GetProcessHeap () returned 0x800000
	[0197.196] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.199] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.199] GetProcessHeap () returned 0x800000
	[0197.199] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.206] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.207] GetProcessHeap () returned 0x800000
	[0197.207] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.207] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.207] GetProcessHeap () returned 0x800000
	[0197.207] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.210] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.211] GetProcessHeap () returned 0x800000
	[0197.211] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.213] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.214] GetProcessHeap () returned 0x800000
	[0197.214] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.217] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.217] GetProcessHeap () returned 0x800000
	[0197.217] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.220] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.220] GetProcessHeap () returned 0x800000
	[0197.220] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.223] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.223] GetProcessHeap () returned 0x800000
	[0197.223] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.228] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.228] GetProcessHeap () returned 0x800000
	[0197.228] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.231] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.231] GetProcessHeap () returned 0x800000
	[0197.231] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.234] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.234] GetProcessHeap () returned 0x800000
	[0197.234] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.237] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.237] GetProcessHeap () returned 0x800000
	[0197.237] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.240] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.241] GetProcessHeap () returned 0x800000
	[0197.241] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.243] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.244] GetProcessHeap () returned 0x800000
	[0197.244] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.539] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.540] GetProcessHeap () returned 0x800000
	[0197.540] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.561] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.562] GetProcessHeap () returned 0x800000
	[0197.562] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0197.562] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0197.562] GetProcessHeap () returned 0x800000
	[0197.562] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0197.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0197.574] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0197.575] GetProcessHeap () returned 0x800000
	[0197.575] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0197.575] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0197.575] GetProcessHeap () returned 0x800000
	[0197.575] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.576] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0197.576] GetProcessHeap () returned 0x800000
	[0197.576] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ec00a8 | out: hHeap=0x800000) returned 1
	[0197.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0197.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0197.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0197.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.598] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.598] GetProcessHeap () returned 0x800000
	[0197.598] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.599] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.599] GetProcessHeap () returned 0x800000
	[0197.599] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.600] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.600] GetProcessHeap () returned 0x800000
	[0197.600] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.601] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.601] GetProcessHeap () returned 0x800000
	[0197.601] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.602] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.602] GetProcessHeap () returned 0x800000
	[0197.602] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.603] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.603] GetProcessHeap () returned 0x800000
	[0197.603] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.701] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.702] GetProcessHeap () returned 0x800000
	[0197.702] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.707] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.708] GetProcessHeap () returned 0x800000
	[0197.708] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.728] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.728] GetProcessHeap () returned 0x800000
	[0197.728] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.730] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.730] GetProcessHeap () returned 0x800000
	[0197.730] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.730] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.731] GetProcessHeap () returned 0x800000
	[0197.731] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.732] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.732] GetProcessHeap () returned 0x800000
	[0197.732] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.733] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.733] GetProcessHeap () returned 0x800000
	[0197.733] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.734] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.734] GetProcessHeap () returned 0x800000
	[0197.734] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.735] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.735] GetProcessHeap () returned 0x800000
	[0197.735] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.736] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.736] GetProcessHeap () returned 0x800000
	[0197.736] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.737] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.737] GetProcessHeap () returned 0x800000
	[0197.737] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.847] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.848] GetProcessHeap () returned 0x800000
	[0197.848] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.961] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.962] GetProcessHeap () returned 0x800000
	[0197.962] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.970] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.970] GetProcessHeap () returned 0x800000
	[0197.970] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.970] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.971] GetProcessHeap () returned 0x800000
	[0197.971] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0197.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.033] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.033] GetProcessHeap () returned 0x800000
	[0198.033] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.033] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.034] GetProcessHeap () returned 0x800000
	[0198.034] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.035] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.035] GetProcessHeap () returned 0x800000
	[0198.035] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.035] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.036] GetProcessHeap () returned 0x800000
	[0198.036] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.036] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.037] GetProcessHeap () returned 0x800000
	[0198.037] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.037] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.038] GetProcessHeap () returned 0x800000
	[0198.038] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.038] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.039] GetProcessHeap () returned 0x800000
	[0198.039] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.039] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.039] GetProcessHeap () returned 0x800000
	[0198.040] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.041] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.041] GetProcessHeap () returned 0x800000
	[0198.041] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.041] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.042] GetProcessHeap () returned 0x800000
	[0198.042] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.043] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.043] GetProcessHeap () returned 0x800000
	[0198.043] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.043] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.044] GetProcessHeap () returned 0x800000
	[0198.044] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.045] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.045] GetProcessHeap () returned 0x800000
	[0198.045] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.046] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.046] GetProcessHeap () returned 0x800000
	[0198.046] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.047] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.047] GetProcessHeap () returned 0x800000
	[0198.047] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.048] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.048] GetProcessHeap () returned 0x800000
	[0198.048] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.049] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.049] GetProcessHeap () returned 0x800000
	[0198.049] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.050] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.050] GetProcessHeap () returned 0x800000
	[0198.050] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.051] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.051] GetProcessHeap () returned 0x800000
	[0198.051] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.052] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.052] GetProcessHeap () returned 0x800000
	[0198.052] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.053] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.053] GetProcessHeap () returned 0x800000
	[0198.053] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.053] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.054] GetProcessHeap () returned 0x800000
	[0198.054] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ec00a8 | out: hHeap=0x800000) returned 1
	[0198.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.055] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.055] GetProcessHeap () returned 0x800000
	[0198.055] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0198.055] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0198.055] GetProcessHeap () returned 0x800000
	[0198.055] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.056] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0198.056] GetProcessHeap () returned 0x800000
	[0198.056] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0198.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0198.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.060] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.062] GetProcessHeap () returned 0x800000
	[0198.062] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.063] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.063] GetProcessHeap () returned 0x800000
	[0198.064] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.064] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.064] GetProcessHeap () returned 0x800000
	[0198.064] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.065] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.066] GetProcessHeap () returned 0x800000
	[0198.066] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.066] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.066] GetProcessHeap () returned 0x800000
	[0198.066] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.067] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.068] GetProcessHeap () returned 0x800000
	[0198.068] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.068] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.068] GetProcessHeap () returned 0x800000
	[0198.068] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.069] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.069] GetProcessHeap () returned 0x800000
	[0198.069] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.070] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.070] GetProcessHeap () returned 0x800000
	[0198.070] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.219] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.219] GetProcessHeap () returned 0x800000
	[0198.219] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.219] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.220] GetProcessHeap () returned 0x800000
	[0198.220] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.367] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.375] GetProcessHeap () returned 0x800000
	[0198.379] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.386] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0198.386] GetProcessHeap () returned 0x800000
	[0198.386] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.386] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.386] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.386] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.386] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.386] GetProcessHeap () returned 0x800000
	[0198.387] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.387] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0198.387] GetProcessHeap () returned 0x800000
	[0198.387] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.387] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.387] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.387] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.387] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.388] GetProcessHeap () returned 0x800000
	[0198.388] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.388] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0198.388] GetProcessHeap () returned 0x800000
	[0198.388] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.388] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.388] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.388] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.388] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.388] GetProcessHeap () returned 0x800000
	[0198.388] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.388] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0198.389] GetProcessHeap () returned 0x800000
	[0198.389] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.389] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.389] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.389] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.389] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.389] GetProcessHeap () returned 0x800000
	[0198.389] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.389] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0198.389] GetProcessHeap () returned 0x800000
	[0198.389] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.389] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.390] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.390] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.390] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.390] GetProcessHeap () returned 0x800000
	[0198.390] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.390] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0198.390] GetProcessHeap () returned 0x800000
	[0198.390] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.390] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.390] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.390] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.390] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.391] GetProcessHeap () returned 0x800000
	[0198.391] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.391] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0198.391] GetProcessHeap () returned 0x800000
	[0198.391] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.391] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.391] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.391] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.391] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.392] GetProcessHeap () returned 0x800000
	[0198.392] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.392] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0198.392] GetProcessHeap () returned 0x800000
	[0198.392] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.392] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.392] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.392] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.392] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.392] GetProcessHeap () returned 0x800000
	[0198.392] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.392] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0198.392] GetProcessHeap () returned 0x800000
	[0198.393] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.393] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.393] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.393] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.393] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.393] GetProcessHeap () returned 0x800000
	[0198.393] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.393] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0198.393] GetProcessHeap () returned 0x800000
	[0198.393] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.393] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.393] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.394] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.394] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.394] GetProcessHeap () returned 0x800000
	[0198.394] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.394] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0198.394] GetProcessHeap () returned 0x800000
	[0198.394] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.394] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.394] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.394] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.394] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.395] GetProcessHeap () returned 0x800000
	[0198.395] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.395] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0198.395] GetProcessHeap () returned 0x800000
	[0198.395] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.395] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.395] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.395] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.395] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.395] GetProcessHeap () returned 0x800000
	[0198.395] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.395] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0198.396] GetProcessHeap () returned 0x800000
	[0198.396] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.396] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.396] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.396] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.396] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.396] GetProcessHeap () returned 0x800000
	[0198.396] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.396] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0198.396] GetProcessHeap () returned 0x800000
	[0198.396] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.396] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.397] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.397] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.397] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.397] GetProcessHeap () returned 0x800000
	[0198.397] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.397] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0198.397] GetProcessHeap () returned 0x800000
	[0198.397] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.397] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.397] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.397] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.397] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.398] GetProcessHeap () returned 0x800000
	[0198.398] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.398] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0198.398] GetProcessHeap () returned 0x800000
	[0198.398] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.398] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.398] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.398] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.398] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.398] GetProcessHeap () returned 0x800000
	[0198.399] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.399] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0198.399] GetProcessHeap () returned 0x800000
	[0198.399] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.399] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.399] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.399] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.399] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.399] GetProcessHeap () returned 0x800000
	[0198.399] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.399] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0198.399] GetProcessHeap () returned 0x800000
	[0198.399] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.399] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.400] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.400] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.400] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.400] GetProcessHeap () returned 0x800000
	[0198.400] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.400] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0198.400] GetProcessHeap () returned 0x800000
	[0198.400] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.400] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.400] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.400] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.400] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.401] GetProcessHeap () returned 0x800000
	[0198.401] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.401] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0198.401] GetProcessHeap () returned 0x800000
	[0198.401] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.401] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.401] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.401] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.401] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.402] GetProcessHeap () returned 0x800000
	[0198.402] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.402] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0198.402] GetProcessHeap () returned 0x800000
	[0198.402] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.402] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.402] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.402] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.402] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.402] GetProcessHeap () returned 0x800000
	[0198.402] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.402] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0198.402] GetProcessHeap () returned 0x800000
	[0198.402] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.403] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.403] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.403] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.403] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.403] GetProcessHeap () returned 0x800000
	[0198.403] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.403] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0198.403] GetProcessHeap () returned 0x800000
	[0198.403] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.403] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.403] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f7ed20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.403] ResetEvent (hEvent=0xfc) returned 1
	[0198.403] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.404] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f7ed20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.404] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.405] GetProcessHeap () returned 0x800000
	[0198.405] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.405] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0198.405] GetProcessHeap () returned 0x800000
	[0198.405] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.405] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.405] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.405] ResetEvent (hEvent=0xfc) returned 1
	[0198.405] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.409] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.409] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.409] GetProcessHeap () returned 0x800000
	[0198.409] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.409] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0198.409] GetProcessHeap () returned 0x800000
	[0198.409] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.409] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.410] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.410] ResetEvent (hEvent=0xfc) returned 1
	[0198.410] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.418] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.418] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.419] GetProcessHeap () returned 0x800000
	[0198.419] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.419] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0198.419] GetProcessHeap () returned 0x800000
	[0198.419] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.419] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.419] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.419] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.419] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.419] GetProcessHeap () returned 0x800000
	[0198.419] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.419] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0198.419] GetProcessHeap () returned 0x800000
	[0198.420] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.420] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.420] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.420] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.420] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.420] GetProcessHeap () returned 0x800000
	[0198.420] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.420] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0198.420] GetProcessHeap () returned 0x800000
	[0198.420] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.420] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.420] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.421] ResetEvent (hEvent=0xfc) returned 1
	[0198.421] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.426] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.426] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.427] GetProcessHeap () returned 0x800000
	[0198.427] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.427] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0198.427] GetProcessHeap () returned 0x800000
	[0198.427] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.427] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.427] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.427] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.427] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.427] GetProcessHeap () returned 0x800000
	[0198.427] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.427] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0198.428] GetProcessHeap () returned 0x800000
	[0198.428] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.428] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.428] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.428] ResetEvent (hEvent=0xfc) returned 1
	[0198.428] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.434] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.435] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.435] GetProcessHeap () returned 0x800000
	[0198.435] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.435] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0198.435] GetProcessHeap () returned 0x800000
	[0198.435] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.435] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.435] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.435] ResetEvent (hEvent=0xfc) returned 1
	[0198.435] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.437] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.437] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.437] GetProcessHeap () returned 0x800000
	[0198.437] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.437] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0198.437] GetProcessHeap () returned 0x800000
	[0198.437] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.438] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.438] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.438] ResetEvent (hEvent=0xfc) returned 1
	[0198.438] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.443] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.443] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.443] GetProcessHeap () returned 0x800000
	[0198.443] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.443] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0198.443] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.443] GetProcessHeap () returned 0x800000
	[0198.444] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ec00a8 | out: hHeap=0x800000) returned 1
	[0198.444] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0198.444] GetProcessHeap () returned 0x800000
	[0198.444] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ec00a8
	[0198.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.444] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.444] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0198.444] ResetEvent (hEvent=0xfc) returned 1
	[0198.444] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.446] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
	[0198.446] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.447] GetProcessHeap () returned 0x800000
	[0198.447] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ec00a8 | out: hHeap=0x800000) returned 1
	[0198.447] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0198.447] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0198.447] GetProcessHeap () returned 0x800000
	[0198.447] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.447] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.1_0", cAlternateFileName="")) returned 0
	[0198.447] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0198.448] GetProcessHeap () returned 0x800000
	[0198.448] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0198.449] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1
	[0198.449] GetProcessHeap () returned 0x800000
	[0198.449] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ec00a8
	[0198.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0198.450] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.450] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.8_0", cAlternateFileName="4278E1~1.8_0")) returned 1
	[0198.450] GetProcessHeap () returned 0x800000
	[0198.450] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.569] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.569] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
	[0198.569] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0198.569] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0198.569] GetProcessHeap () returned 0x800000
	[0198.569] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0198.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.720] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.720] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0198.720] GetProcessHeap () returned 0x800000
	[0198.720] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.720] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.720] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.720] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.720] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.721] GetProcessHeap () returned 0x800000
	[0198.721] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.721] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0198.721] GetProcessHeap () returned 0x800000
	[0198.721] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.722] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.722] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.722] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.722] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.722] GetProcessHeap () returned 0x800000
	[0198.722] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.722] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0198.722] GetProcessHeap () returned 0x800000
	[0198.722] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.722] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.722] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.723] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.723] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.723] GetProcessHeap () returned 0x800000
	[0198.723] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.723] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0198.723] GetProcessHeap () returned 0x800000
	[0198.723] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.723] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.723] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.723] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.723] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.724] GetProcessHeap () returned 0x800000
	[0198.724] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.724] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0198.724] GetProcessHeap () returned 0x800000
	[0198.724] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.724] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.724] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.724] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.724] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.725] GetProcessHeap () returned 0x800000
	[0198.725] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.725] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0198.725] GetProcessHeap () returned 0x800000
	[0198.725] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.725] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.725] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.725] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.725] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.725] GetProcessHeap () returned 0x800000
	[0198.725] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.725] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0198.726] GetProcessHeap () returned 0x800000
	[0198.726] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.726] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.726] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.726] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.726] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.726] GetProcessHeap () returned 0x800000
	[0198.726] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.726] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0198.726] GetProcessHeap () returned 0x800000
	[0198.726] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.727] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.727] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.727] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.727] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.727] GetProcessHeap () returned 0x800000
	[0198.727] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.727] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0198.727] GetProcessHeap () returned 0x800000
	[0198.727] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.727] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.727] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.727] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.728] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.728] GetProcessHeap () returned 0x800000
	[0198.728] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.728] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0198.728] GetProcessHeap () returned 0x800000
	[0198.728] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.728] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.728] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.728] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.728] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.729] GetProcessHeap () returned 0x800000
	[0198.729] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.729] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0198.729] GetProcessHeap () returned 0x800000
	[0198.729] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.729] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.729] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.729] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.729] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.729] GetProcessHeap () returned 0x800000
	[0198.730] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.730] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0198.730] GetProcessHeap () returned 0x800000
	[0198.730] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.730] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.730] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.730] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.730] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.730] GetProcessHeap () returned 0x800000
	[0198.730] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.730] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0198.730] GetProcessHeap () returned 0x800000
	[0198.730] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.731] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.731] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.731] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.731] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.731] GetProcessHeap () returned 0x800000
	[0198.731] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.731] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0198.731] GetProcessHeap () returned 0x800000
	[0198.731] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.731] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.731] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.732] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.732] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.732] GetProcessHeap () returned 0x800000
	[0198.732] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.732] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0198.732] GetProcessHeap () returned 0x800000
	[0198.732] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.732] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.732] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.732] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.732] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.733] GetProcessHeap () returned 0x800000
	[0198.733] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.733] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0198.733] GetProcessHeap () returned 0x800000
	[0198.733] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.733] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.733] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.733] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.733] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.734] GetProcessHeap () returned 0x800000
	[0198.734] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.734] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0198.734] GetProcessHeap () returned 0x800000
	[0198.734] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.734] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.734] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.734] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.734] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.734] GetProcessHeap () returned 0x800000
	[0198.734] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.734] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0198.734] GetProcessHeap () returned 0x800000
	[0198.734] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.735] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.735] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.735] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.735] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.735] GetProcessHeap () returned 0x800000
	[0198.735] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.735] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0198.735] GetProcessHeap () returned 0x800000
	[0198.735] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.735] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.735] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.736] ResetEvent (hEvent=0xfc) returned 1
	[0198.736] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.832] ResetEvent (hEvent=0xfc) returned 1
	[0198.832] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.834] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.834] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.834] GetProcessHeap () returned 0x800000
	[0198.834] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.834] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0198.834] GetProcessHeap () returned 0x800000
	[0198.834] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.835] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.835] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.835] ResetEvent (hEvent=0xfc) returned 1
	[0198.835] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.837] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.837] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.838] GetProcessHeap () returned 0x800000
	[0198.838] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.838] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0198.838] GetProcessHeap () returned 0x800000
	[0198.838] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.838] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.838] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.838] ResetEvent (hEvent=0xfc) returned 1
	[0198.838] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.840] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.841] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.841] GetProcessHeap () returned 0x800000
	[0198.841] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.841] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0198.841] GetProcessHeap () returned 0x800000
	[0198.841] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.841] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.841] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.841] ResetEvent (hEvent=0xfc) returned 1
	[0198.841] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.847] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.847] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.847] GetProcessHeap () returned 0x800000
	[0198.847] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.847] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0198.847] GetProcessHeap () returned 0x800000
	[0198.847] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.847] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.847] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.847] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.847] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.848] GetProcessHeap () returned 0x800000
	[0198.848] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.848] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0198.848] GetProcessHeap () returned 0x800000
	[0198.848] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.848] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.848] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.848] ResetEvent (hEvent=0xfc) returned 1
	[0198.848] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.858] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.859] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.859] GetProcessHeap () returned 0x800000
	[0198.859] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.859] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0198.859] GetProcessHeap () returned 0x800000
	[0198.859] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.859] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.859] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.859] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.859] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.860] GetProcessHeap () returned 0x800000
	[0198.860] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.860] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0198.860] GetProcessHeap () returned 0x800000
	[0198.860] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.860] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.860] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.860] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.860] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.861] GetProcessHeap () returned 0x800000
	[0198.861] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.861] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0198.861] GetProcessHeap () returned 0x800000
	[0198.861] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.861] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.861] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.861] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.861] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.862] GetProcessHeap () returned 0x800000
	[0198.862] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.862] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0198.862] GetProcessHeap () returned 0x800000
	[0198.862] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.862] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.862] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.862] ResetEvent (hEvent=0xfc) returned 1
	[0198.862] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.871] ResetEvent (hEvent=0xfc) returned 1
	[0198.872] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.875] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.875] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.875] GetProcessHeap () returned 0x800000
	[0198.875] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.875] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0198.876] GetProcessHeap () returned 0x800000
	[0198.876] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.876] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.876] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.876] ResetEvent (hEvent=0xfc) returned 1
	[0198.876] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.887] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.887] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.888] GetProcessHeap () returned 0x800000
	[0198.888] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.888] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0198.888] GetProcessHeap () returned 0x800000
	[0198.888] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.888] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.888] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.888] ResetEvent (hEvent=0xfc) returned 1
	[0198.888] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.911] ResetEvent (hEvent=0xfc) returned 1
	[0198.911] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.923] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.923] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.923] GetProcessHeap () returned 0x800000
	[0198.923] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0198.923] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0198.923] GetProcessHeap () returned 0x800000
	[0198.923] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0198.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.923] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.923] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.924] ResetEvent (hEvent=0xfc) returned 1
	[0198.924] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0198.935] ResetEvent (hEvent=0xfc) returned 1
	[0198.935] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0199.057] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0199.057] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0199.058] GetProcessHeap () returned 0x800000
	[0199.058] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0199.058] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0199.058] GetProcessHeap () returned 0x800000
	[0199.058] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0199.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0199.058] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0199.058] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0199.058] ResetEvent (hEvent=0xfc) returned 1
	[0199.058] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0199.071] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0199.072] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0199.072] GetProcessHeap () returned 0x800000
	[0199.072] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0199.072] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0199.072] GetProcessHeap () returned 0x800000
	[0199.072] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0199.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0199.072] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0199.072] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0199.072] ResetEvent (hEvent=0xfc) returned 1
	[0199.073] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0199.517] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0199.517] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0199.518] GetProcessHeap () returned 0x800000
	[0199.518] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0199.518] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0199.518] GetProcessHeap () returned 0x800000
	[0199.518] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0199.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0199.519] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0199.519] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0199.519] ResetEvent (hEvent=0xfc) returned 1
	[0199.519] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0199.534] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0199.534] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0199.534] GetProcessHeap () returned 0x800000
	[0199.534] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0199.534] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0199.535] GetProcessHeap () returned 0x800000
	[0199.535] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0199.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0199.535] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0199.535] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0199.535] ResetEvent (hEvent=0xfc) returned 1
	[0199.535] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0200.000] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0200.000] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0200.001] GetProcessHeap () returned 0x800000
	[0200.001] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0200.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0200.001] GetProcessHeap () returned 0x800000
	[0200.001] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0200.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0200.001] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0200.001] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0200.002] ResetEvent (hEvent=0xfc) returned 1
	[0200.002] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0200.096] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0200.096] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0200.097] GetProcessHeap () returned 0x800000
	[0200.097] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0200.097] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0200.097] GetProcessHeap () returned 0x800000
	[0200.097] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0200.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0200.097] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0200.097] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0200.097] ResetEvent (hEvent=0xfc) returned 1
	[0200.097] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0200.113] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0200.113] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0200.113] GetProcessHeap () returned 0x800000
	[0200.113] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0200.113] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0200.113] GetProcessHeap () returned 0x800000
	[0200.113] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0200.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0200.114] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0200.114] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0200.114] ResetEvent (hEvent=0xfc) returned 1
	[0200.114] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0200.155] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0200.155] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0200.155] GetProcessHeap () returned 0x800000
	[0200.155] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0200.155] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0200.156] GetProcessHeap () returned 0x800000
	[0200.156] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0200.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0200.156] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0200.156] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0200.156] ResetEvent (hEvent=0xfc) returned 1
	[0200.156] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0201.342] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0201.342] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0201.343] GetProcessHeap () returned 0x800000
	[0201.343] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0201.343] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0201.343] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0201.344] GetProcessHeap () returned 0x800000
	[0201.344] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0201.344] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0201.344] GetProcessHeap () returned 0x800000
	[0201.344] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0201.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0201.344] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0201.344] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x628aed00, ftLastWriteTime.dwHighDateTime=0x1d0f5b2, nFileSizeHigh=0x0, nFileSizeLow=0x2769, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0201.344] ResetEvent (hEvent=0xfc) returned 1
	[0201.344] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0201.631] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x628aed00, ftLastWriteTime.dwHighDateTime=0x1d0f5b2, nFileSizeHigh=0x0, nFileSizeLow=0x2769, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
	[0201.631] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0201.632] GetProcessHeap () returned 0x800000
	[0201.632] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0201.632] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0201.632] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0201.632] GetProcessHeap () returned 0x800000
	[0201.632] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0201.632] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.8_0", cAlternateFileName="4278E1~1.8_0")) returned 0
	[0201.632] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0201.633] GetProcessHeap () returned 0x800000
	[0201.633] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ec00a8 | out: hHeap=0x800000) returned 1
	[0201.633] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="felcaaldnbdncclmgdcncolpebgiejap", cAlternateFileName="FELCAA~1")) returned 1
	[0201.633] GetProcessHeap () returned 0x800000
	[0201.633] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ec00a8
	[0201.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0201.633] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0201.633] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1_0", cAlternateFileName="")) returned 1
	[0201.633] GetProcessHeap () returned 0x800000
	[0201.633] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0201.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0201.633] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0201.633] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84234950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd47, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
	[0201.633] ResetEvent (hEvent=0xfc) returned 1
	[0201.634] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0202.045] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84239770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
	[0202.045] ResetEvent (hEvent=0xfc) returned 1
	[0202.045] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0202.247] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8423be80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8423e590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1
	[0202.247] ResetEvent (hEvent=0xfc) returned 1
	[0202.247] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0202.699] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84240ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84240ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1
	[0202.699] ResetEvent (hEvent=0xfc) returned 1
	[0202.700] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0203.418] ResetEvent (hEvent=0xfc) returned 1
	[0203.418] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0203.420] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x840205b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84245ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844aa770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0203.420] ResetEvent (hEvent=0xfc) returned 1
	[0203.420] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0203.870] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0203.870] GetProcessHeap () returned 0x800000
	[0203.871] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0203.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0203.871] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.871] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0203.871] GetProcessHeap () returned 0x800000
	[0203.871] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0203.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0203.871] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.871] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8403b360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0203.871] ResetEvent (hEvent=0xfc) returned 1
	[0203.871] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0204.681] ResetEvent (hEvent=0xfc) returned 1
	[0204.681] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0205.228] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8403b360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.228] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0205.229] GetProcessHeap () returned 0x800000
	[0205.229] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0205.229] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0205.229] GetProcessHeap () returned 0x800000
	[0205.229] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0205.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0205.229] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.229] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84056110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84058820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.229] ResetEvent (hEvent=0xfc) returned 1
	[0205.229] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0205.650] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84056110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84058820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.650] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0205.651] GetProcessHeap () returned 0x800000
	[0205.651] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0205.651] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0205.651] GetProcessHeap () returned 0x800000
	[0205.651] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0205.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0205.651] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.651] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84067280, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.651] ResetEvent (hEvent=0xfc) returned 1
	[0205.651] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0206.006] ResetEvent (hEvent=0xfc) returned 1
	[0206.006] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0206.630] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84067280, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.630] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0206.631] GetProcessHeap () returned 0x800000
	[0206.631] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0206.631] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0206.631] GetProcessHeap () returned 0x800000
	[0206.631] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0206.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0206.632] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.632] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.632] ResetEvent (hEvent=0xfc) returned 1
	[0206.632] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0206.647] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.647] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0206.647] GetProcessHeap () returned 0x800000
	[0206.647] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0206.648] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0206.648] GetProcessHeap () returned 0x800000
	[0206.648] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0206.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0206.648] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.648] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.648] ResetEvent (hEvent=0xfc) returned 1
	[0206.648] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0206.667] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.667] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0206.668] GetProcessHeap () returned 0x800000
	[0206.668] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0206.668] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0206.668] GetProcessHeap () returned 0x800000
	[0206.668] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0206.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0206.668] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.668] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.668] ResetEvent (hEvent=0xfc) returned 1
	[0206.668] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0206.679] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.679] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0206.679] GetProcessHeap () returned 0x800000
	[0206.679] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0206.679] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0206.679] GetProcessHeap () returned 0x800000
	[0206.679] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0206.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0206.680] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.680] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.680] ResetEvent (hEvent=0xfc) returned 1
	[0206.680] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0206.696] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.696] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0206.697] GetProcessHeap () returned 0x800000
	[0206.697] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0206.697] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0206.697] GetProcessHeap () returned 0x800000
	[0206.697] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0206.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0206.697] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.697] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.697] ResetEvent (hEvent=0xfc) returned 1
	[0206.697] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0206.710] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.710] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0206.710] GetProcessHeap () returned 0x800000
	[0206.710] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0206.710] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0206.710] GetProcessHeap () returned 0x800000
	[0206.710] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0206.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0206.710] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.710] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.711] ResetEvent (hEvent=0xfc) returned 1
	[0206.711] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0206.720] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.721] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0206.721] GetProcessHeap () returned 0x800000
	[0206.721] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0206.721] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0206.721] GetProcessHeap () returned 0x800000
	[0206.722] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0206.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0206.722] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.722] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.722] ResetEvent (hEvent=0xfc) returned 1
	[0206.722] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0206.730] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.731] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0206.731] GetProcessHeap () returned 0x800000
	[0206.731] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0206.731] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0206.731] GetProcessHeap () returned 0x800000
	[0206.731] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0206.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0206.731] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.731] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.731] ResetEvent (hEvent=0xfc) returned 1
	[0206.731] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0206.736] ResetEvent (hEvent=0xfc) returned 1
	[0206.736] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0206.738] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.738] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0206.738] GetProcessHeap () returned 0x800000
	[0206.738] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0206.738] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0206.738] GetProcessHeap () returned 0x800000
	[0206.738] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0206.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0206.738] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.738] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.738] ResetEvent (hEvent=0xfc) returned 1
	[0206.739] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0207.449] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.449] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0207.450] GetProcessHeap () returned 0x800000
	[0207.450] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0207.450] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0207.450] GetProcessHeap () returned 0x800000
	[0207.450] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0207.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0207.450] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.450] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.450] ResetEvent (hEvent=0xfc) returned 1
	[0207.451] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0207.911] ResetEvent (hEvent=0xfc) returned 1
	[0207.911] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0208.003] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.003] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0208.003] GetProcessHeap () returned 0x800000
	[0208.003] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0208.003] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0208.004] GetProcessHeap () returned 0x800000
	[0208.004] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0208.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0208.004] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.004] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.004] ResetEvent (hEvent=0xfc) returned 1
	[0208.004] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0208.300] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.300] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0208.301] GetProcessHeap () returned 0x800000
	[0208.301] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0208.301] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0208.301] GetProcessHeap () returned 0x800000
	[0208.301] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0208.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0208.301] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.301] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.301] ResetEvent (hEvent=0xfc) returned 1
	[0208.301] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0208.302] ResetEvent (hEvent=0xfc) returned 1
	[0208.302] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0208.503] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.503] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0208.504] GetProcessHeap () returned 0x800000
	[0208.504] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0208.504] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0208.504] GetProcessHeap () returned 0x800000
	[0208.504] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0208.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0208.505] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.505] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.505] ResetEvent (hEvent=0xfc) returned 1
	[0208.505] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0209.267] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0209.267] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0209.268] GetProcessHeap () returned 0x800000
	[0209.268] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0209.268] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0209.268] GetProcessHeap () returned 0x800000
	[0209.268] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0209.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0209.268] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0209.268] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0209.268] ResetEvent (hEvent=0xfc) returned 1
	[0209.268] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0209.626] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0209.626] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0209.626] GetProcessHeap () returned 0x800000
	[0209.626] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0209.626] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0209.626] GetProcessHeap () returned 0x800000
	[0209.627] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0209.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0209.627] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0209.627] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0209.627] ResetEvent (hEvent=0xfc) returned 1
	[0209.627] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0211.144] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0211.145] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0211.145] GetProcessHeap () returned 0x800000
	[0211.145] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0211.145] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0211.145] GetProcessHeap () returned 0x800000
	[0211.145] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0211.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0211.145] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0211.146] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0211.146] ResetEvent (hEvent=0xfc) returned 1
	[0211.146] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0211.154] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0211.155] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0211.155] GetProcessHeap () returned 0x800000
	[0211.155] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0211.155] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0211.155] GetProcessHeap () returned 0x800000
	[0211.156] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0211.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0211.156] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0211.156] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0211.156] ResetEvent (hEvent=0xfc) returned 1
	[0211.156] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0211.163] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0211.163] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0211.164] GetProcessHeap () returned 0x800000
	[0211.164] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0211.164] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0211.164] GetProcessHeap () returned 0x800000
	[0211.164] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0211.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0211.164] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0211.164] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0211.164] ResetEvent (hEvent=0xfc) returned 1
	[0211.164] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0220.898] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.898] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0220.899] GetProcessHeap () returned 0x800000
	[0220.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0220.899] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0220.899] GetProcessHeap () returned 0x800000
	[0220.899] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0220.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0220.899] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.899] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.900] ResetEvent (hEvent=0xfc) returned 1
	[0220.900] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0220.970] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.971] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0220.971] GetProcessHeap () returned 0x800000
	[0220.971] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0220.971] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0220.971] GetProcessHeap () returned 0x800000
	[0220.971] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0220.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0220.971] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.971] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.971] ResetEvent (hEvent=0xfc) returned 1
	[0220.971] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0221.891] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.891] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0221.892] GetProcessHeap () returned 0x800000
	[0221.892] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0221.892] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0221.892] GetProcessHeap () returned 0x800000
	[0221.892] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0221.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0221.892] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.892] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.892] ResetEvent (hEvent=0xfc) returned 1
	[0221.892] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0222.144] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0222.144] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0222.145] GetProcessHeap () returned 0x800000
	[0222.145] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0222.145] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0222.146] GetProcessHeap () returned 0x800000
	[0222.146] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0222.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0222.146] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.146] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0222.146] ResetEvent (hEvent=0xfc) returned 1
	[0222.146] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0222.595] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0222.595] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0222.596] GetProcessHeap () returned 0x800000
	[0222.596] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0222.598] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0222.598] GetProcessHeap () returned 0x800000
	[0222.598] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0222.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0222.598] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.598] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0222.598] ResetEvent (hEvent=0xfc) returned 1
	[0222.599] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0222.654] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0222.654] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0222.655] GetProcessHeap () returned 0x800000
	[0222.655] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0222.655] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0222.655] GetProcessHeap () returned 0x800000
	[0222.655] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0222.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0222.655] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.655] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0222.655] ResetEvent (hEvent=0xfc) returned 1
	[0222.655] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.119] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.119] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.119] GetProcessHeap () returned 0x800000
	[0223.119] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.119] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0223.119] GetProcessHeap () returned 0x800000
	[0223.119] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.120] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.120] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841bf650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.120] ResetEvent (hEvent=0xfc) returned 1
	[0223.120] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.207] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841bf650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.208] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.209] GetProcessHeap () returned 0x800000
	[0223.209] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.209] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0223.209] GetProcessHeap () returned 0x800000
	[0223.209] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.209] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.209] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841c9290, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.209] ResetEvent (hEvent=0xfc) returned 1
	[0223.209] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.263] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841c9290, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.263] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.264] GetProcessHeap () returned 0x800000
	[0223.264] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.264] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0223.264] GetProcessHeap () returned 0x800000
	[0223.264] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.264] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.264] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d07c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.265] ResetEvent (hEvent=0xfc) returned 1
	[0223.265] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.300] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d07c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.301] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.301] GetProcessHeap () returned 0x800000
	[0223.301] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.301] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0223.301] GetProcessHeap () returned 0x800000
	[0223.301] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.302] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.302] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d7cf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.302] ResetEvent (hEvent=0xfc) returned 1
	[0223.302] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.311] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d7cf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.312] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.312] GetProcessHeap () returned 0x800000
	[0223.312] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.312] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0223.312] GetProcessHeap () returned 0x800000
	[0223.312] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.312] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.313] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841df220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.313] ResetEvent (hEvent=0xfc) returned 1
	[0223.313] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.324] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841df220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.324] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.324] GetProcessHeap () returned 0x800000
	[0223.324] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.324] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0223.324] GetProcessHeap () returned 0x800000
	[0223.324] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.325] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.325] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f0390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.325] ResetEvent (hEvent=0xfc) returned 1
	[0223.325] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.333] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f0390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.334] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.335] GetProcessHeap () returned 0x800000
	[0223.335] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.335] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0223.335] GetProcessHeap () returned 0x800000
	[0223.335] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.335] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.335] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f78c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.335] ResetEvent (hEvent=0xfc) returned 1
	[0223.335] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.344] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f78c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.344] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.345] GetProcessHeap () returned 0x800000
	[0223.345] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.345] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0223.345] GetProcessHeap () returned 0x800000
	[0223.345] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.345] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.346] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.346] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841fedf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.346] ResetEvent (hEvent=0xfc) returned 1
	[0223.346] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.348] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841fedf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.348] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.349] GetProcessHeap () returned 0x800000
	[0223.349] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.349] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0223.349] GetProcessHeap () returned 0x800000
	[0223.349] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.349] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.349] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84206320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.349] ResetEvent (hEvent=0xfc) returned 1
	[0223.349] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.545] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84206320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.545] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.545] GetProcessHeap () returned 0x800000
	[0223.545] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.545] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0223.545] GetProcessHeap () returned 0x800000
	[0223.545] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.546] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.546] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8420d850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.546] ResetEvent (hEvent=0xfc) returned 1
	[0223.546] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.564] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8420d850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.564] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.565] GetProcessHeap () returned 0x800000
	[0223.565] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.565] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0223.565] GetProcessHeap () returned 0x800000
	[0223.565] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.565] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.565] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84214d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.565] ResetEvent (hEvent=0xfc) returned 1
	[0223.565] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.781] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84214d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.781] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.782] GetProcessHeap () returned 0x800000
	[0223.782] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.782] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0223.782] GetProcessHeap () returned 0x800000
	[0223.782] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.782] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.782] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8421c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.782] ResetEvent (hEvent=0xfc) returned 1
	[0223.782] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.789] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8421c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.789] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.789] GetProcessHeap () returned 0x800000
	[0223.789] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.789] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0223.790] GetProcessHeap () returned 0x800000
	[0223.790] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.790] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.790] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842237e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.790] ResetEvent (hEvent=0xfc) returned 1
	[0223.790] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.907] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842237e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.907] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.908] GetProcessHeap () returned 0x800000
	[0223.908] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.908] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0223.908] GetProcessHeap () returned 0x800000
	[0223.908] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.908] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.908] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8422ad10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.908] ResetEvent (hEvent=0xfc) returned 1
	[0223.908] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.928] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8422ad10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.928] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.928] GetProcessHeap () returned 0x800000
	[0223.928] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.928] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0223.928] GetProcessHeap () returned 0x800000
	[0223.928] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.928] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.928] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84232240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0223.929] ResetEvent (hEvent=0xfc) returned 1
	[0223.929] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.963] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84232240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0223.963] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.963] GetProcessHeap () returned 0x800000
	[0223.963] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.964] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0223.964] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0223.964] GetProcessHeap () returned 0x800000
	[0223.964] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0223.964] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0223.964] GetProcessHeap () returned 0x800000
	[0223.964] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0223.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0223.964] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.964] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x844eed30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
	[0223.965] ResetEvent (hEvent=0xfc) returned 1
	[0223.965] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0223.977] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8424a8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8424a8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0223.977] ResetEvent (hEvent=0xfc) returned 1
	[0223.977] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.028] ResetEvent (hEvent=0xfc) returned 1
	[0224.028] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.043] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8424a8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8424a8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
	[0224.043] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0224.043] GetProcessHeap () returned 0x800000
	[0224.043] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0224.043] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0224.043] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0224.044] GetProcessHeap () returned 0x800000
	[0224.044] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0224.044] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1_0", cAlternateFileName="")) returned 0
	[0224.044] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0224.045] GetProcessHeap () returned 0x800000
	[0224.045] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ec00a8 | out: hHeap=0x800000) returned 1
	[0224.045] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1
	[0224.045] GetProcessHeap () returned 0x800000
	[0224.045] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0224.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0224.045] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.045] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 1
	[0224.045] GetProcessHeap () returned 0x800000
	[0224.045] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0224.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0224.046] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.046] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
	[0224.046] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="contentscript_bin_prod.js", cAlternateFileName="CONTEN~1.JS")) returned 1
	[0224.046] ResetEvent (hEvent=0xfc) returned 1
	[0224.046] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.065] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="dasherSettingSchema.json", cAlternateFileName="DASHER~1.JSO")) returned 1
	[0224.065] ResetEvent (hEvent=0xfc) returned 1
	[0224.065] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.074] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventpage_bin_prod.js", cAlternateFileName="EVENTP~1.JS")) returned 1
	[0224.075] ResetEvent (hEvent=0xfc) returned 1
	[0224.075] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.087] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0224.087] ResetEvent (hEvent=0xfc) returned 1
	[0224.087] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.098] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="page_embed_script.js", cAlternateFileName="PAGE_E~1.JS")) returned 1
	[0224.099] ResetEvent (hEvent=0xfc) returned 1
	[0224.099] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.108] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0224.109] GetProcessHeap () returned 0x800000
	[0224.109] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0224.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0224.110] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.110] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1
	[0224.110] GetProcessHeap () returned 0x800000
	[0224.110] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0224.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.110] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.110] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.111] ResetEvent (hEvent=0xfc) returned 1
	[0224.111] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.122] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.122] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.123] GetProcessHeap () returned 0x800000
	[0224.123] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0224.124] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1
	[0224.129] GetProcessHeap () returned 0x800000
	[0224.129] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.130] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.130] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.130] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.131] ResetEvent (hEvent=0xfc) returned 1
	[0224.131] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.140] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.140] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.141] GetProcessHeap () returned 0x800000
	[0224.141] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.141] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0224.141] GetProcessHeap () returned 0x800000
	[0224.141] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.141] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.142] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.142] ResetEvent (hEvent=0xfc) returned 1
	[0224.142] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.151] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.152] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.153] GetProcessHeap () returned 0x800000
	[0224.153] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.153] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az", cAlternateFileName="")) returned 1
	[0224.153] GetProcessHeap () returned 0x800000
	[0224.153] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.153] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.153] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.153] ResetEvent (hEvent=0xfc) returned 1
	[0224.153] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.165] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.166] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.166] GetProcessHeap () returned 0x800000
	[0224.166] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.166] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0224.167] GetProcessHeap () returned 0x800000
	[0224.167] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.167] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.167] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.167] ResetEvent (hEvent=0xfc) returned 1
	[0224.167] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.183] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.184] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.185] GetProcessHeap () returned 0x800000
	[0224.185] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.185] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1
	[0224.185] GetProcessHeap () returned 0x800000
	[0224.185] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.186] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.186] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.186] ResetEvent (hEvent=0xfc) returned 1
	[0224.186] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.196] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.196] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.197] GetProcessHeap () returned 0x800000
	[0224.197] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.197] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0224.197] GetProcessHeap () returned 0x800000
	[0224.197] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.198] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.198] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.198] ResetEvent (hEvent=0xfc) returned 1
	[0224.198] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.201] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.201] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.202] GetProcessHeap () returned 0x800000
	[0224.202] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.202] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0224.202] GetProcessHeap () returned 0x800000
	[0224.202] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.202] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.202] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.202] ResetEvent (hEvent=0xfc) returned 1
	[0224.202] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.208] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.209] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.209] GetProcessHeap () returned 0x800000
	[0224.209] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.209] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0224.210] GetProcessHeap () returned 0x800000
	[0224.210] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.210] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.210] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.210] ResetEvent (hEvent=0xfc) returned 1
	[0224.210] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.219] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.219] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.220] GetProcessHeap () returned 0x800000
	[0224.220] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.220] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0224.221] GetProcessHeap () returned 0x800000
	[0224.221] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.221] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.221] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.221] ResetEvent (hEvent=0xfc) returned 1
	[0224.221] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.231] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.232] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.233] GetProcessHeap () returned 0x800000
	[0224.233] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.233] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0224.233] GetProcessHeap () returned 0x800000
	[0224.233] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.233] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.233] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.233] ResetEvent (hEvent=0xfc) returned 1
	[0224.233] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.241] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.242] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.243] GetProcessHeap () returned 0x800000
	[0224.243] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.243] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0224.243] GetProcessHeap () returned 0x800000
	[0224.243] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.243] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.243] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.243] ResetEvent (hEvent=0xfc) returned 1
	[0224.243] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.253] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.254] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.254] GetProcessHeap () returned 0x800000
	[0224.254] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.254] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0224.254] GetProcessHeap () returned 0x800000
	[0224.254] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.254] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.254] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.254] ResetEvent (hEvent=0xfc) returned 1
	[0224.254] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.266] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.266] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.266] GetProcessHeap () returned 0x800000
	[0224.266] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.267] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0224.267] GetProcessHeap () returned 0x800000
	[0224.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.267] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.267] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.267] ResetEvent (hEvent=0xfc) returned 1
	[0224.267] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0224.281] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0224.281] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.282] GetProcessHeap () returned 0x800000
	[0224.282] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.282] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0224.282] GetProcessHeap () returned 0x800000
	[0224.282] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0224.282] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.282] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0224.282] ResetEvent (hEvent=0xfc) returned 1
	[0224.282] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0225.048] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0225.048] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0225.048] GetProcessHeap () returned 0x800000
	[0225.048] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0225.048] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0225.048] GetProcessHeap () returned 0x800000
	[0225.048] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0225.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0225.048] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.048] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0225.048] ResetEvent (hEvent=0xfc) returned 1
	[0225.049] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0225.086] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0225.086] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0225.086] GetProcessHeap () returned 0x800000
	[0225.086] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0225.086] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0225.086] GetProcessHeap () returned 0x800000
	[0225.086] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0225.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0225.087] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.087] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0225.087] ResetEvent (hEvent=0xfc) returned 1
	[0225.087] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0225.088] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0225.089] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0225.089] GetProcessHeap () returned 0x800000
	[0225.089] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0225.089] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1
	[0225.089] GetProcessHeap () returned 0x800000
	[0225.089] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0225.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0225.089] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.089] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0225.089] ResetEvent (hEvent=0xfc) returned 1
	[0225.090] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0226.128] ResetEvent (hEvent=0xfc) returned 1
	[0226.128] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0226.168] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0226.168] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0226.168] GetProcessHeap () returned 0x800000
	[0226.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0226.168] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0226.168] GetProcessHeap () returned 0x800000
	[0226.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0226.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0226.169] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.169] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0226.169] ResetEvent (hEvent=0xfc) returned 1
	[0226.169] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0226.221] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0226.221] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0226.222] GetProcessHeap () returned 0x800000
	[0226.222] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0226.222] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0226.222] GetProcessHeap () returned 0x800000
	[0226.222] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0226.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0226.222] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.222] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0226.222] ResetEvent (hEvent=0xfc) returned 1
	[0226.222] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0226.412] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0226.413] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0226.414] GetProcessHeap () returned 0x800000
	[0226.414] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0226.414] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0226.414] GetProcessHeap () returned 0x800000
	[0226.414] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0226.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0226.414] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.414] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0226.414] ResetEvent (hEvent=0xfc) returned 1
	[0226.414] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0227.555] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0227.555] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0227.555] GetProcessHeap () returned 0x800000
	[0227.555] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0227.555] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_CA", cAlternateFileName="")) returned 1
	[0227.555] GetProcessHeap () returned 0x800000
	[0227.555] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0227.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0227.555] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.555] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0227.556] ResetEvent (hEvent=0xfc) returned 1
	[0227.556] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0227.827] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0227.828] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0227.829] GetProcessHeap () returned 0x800000
	[0227.829] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0227.829] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1
	[0227.829] GetProcessHeap () returned 0x800000
	[0227.829] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0227.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0227.829] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.829] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0227.830] ResetEvent (hEvent=0xfc) returned 1
	[0227.830] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0228.964] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0228.964] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0228.966] GetProcessHeap () returned 0x800000
	[0228.966] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0228.966] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1
	[0228.966] GetProcessHeap () returned 0x800000
	[0228.966] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0228.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0228.966] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0228.966] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0228.966] ResetEvent (hEvent=0xfc) returned 1
	[0228.966] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0228.976] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0228.976] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0228.976] GetProcessHeap () returned 0x800000
	[0228.976] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0228.976] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0228.977] GetProcessHeap () returned 0x800000
	[0228.977] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0228.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0228.977] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0228.977] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0228.977] ResetEvent (hEvent=0xfc) returned 1
	[0228.977] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0228.985] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0228.987] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0228.987] GetProcessHeap () returned 0x800000
	[0228.987] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0228.987] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0228.987] GetProcessHeap () returned 0x800000
	[0228.987] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0228.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0228.987] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0228.987] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0228.987] ResetEvent (hEvent=0xfc) returned 1
	[0228.988] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0228.996] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0228.997] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0228.997] GetProcessHeap () returned 0x800000
	[0228.997] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0228.997] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0228.997] GetProcessHeap () returned 0x800000
	[0228.997] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0228.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0228.997] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0228.998] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0228.998] ResetEvent (hEvent=0xfc) returned 1
	[0228.998] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0229.023] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0229.023] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0229.023] GetProcessHeap () returned 0x800000
	[0229.023] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0229.023] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1
	[0229.024] GetProcessHeap () returned 0x800000
	[0229.024] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0229.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0229.024] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.024] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0229.024] ResetEvent (hEvent=0xfc) returned 1
	[0229.024] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0229.295] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0229.295] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0229.295] GetProcessHeap () returned 0x800000
	[0229.295] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0229.295] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0229.295] GetProcessHeap () returned 0x800000
	[0229.295] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0229.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0229.295] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.295] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0229.296] ResetEvent (hEvent=0xfc) returned 1
	[0229.296] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0229.308] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0229.308] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0229.309] GetProcessHeap () returned 0x800000
	[0229.309] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0229.309] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1
	[0229.309] GetProcessHeap () returned 0x800000
	[0229.309] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0229.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0229.309] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.309] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0229.309] ResetEvent (hEvent=0xfc) returned 1
	[0229.309] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0229.370] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0229.370] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0229.371] GetProcessHeap () returned 0x800000
	[0229.371] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0229.371] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0229.371] GetProcessHeap () returned 0x800000
	[0229.371] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0229.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0229.371] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.371] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0229.371] ResetEvent (hEvent=0xfc) returned 1
	[0229.371] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0229.391] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0229.391] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0229.392] GetProcessHeap () returned 0x800000
	[0229.392] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0229.392] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1
	[0229.392] GetProcessHeap () returned 0x800000
	[0229.392] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0229.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0229.392] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.392] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0229.392] ResetEvent (hEvent=0xfc) returned 1
	[0229.392] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0229.513] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0229.513] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0229.514] GetProcessHeap () returned 0x800000
	[0229.514] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0229.514] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0229.514] GetProcessHeap () returned 0x800000
	[0229.514] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0229.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0229.514] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.514] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0229.515] ResetEvent (hEvent=0xfc) returned 1
	[0229.515] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0229.580] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0229.581] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0229.581] GetProcessHeap () returned 0x800000
	[0229.581] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0229.582] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1
	[0229.582] GetProcessHeap () returned 0x800000
	[0229.582] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0229.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0229.582] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.582] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0229.582] ResetEvent (hEvent=0xfc) returned 1
	[0229.582] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0229.598] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0229.598] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0229.598] GetProcessHeap () returned 0x800000
	[0229.598] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0229.598] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km", cAlternateFileName="")) returned 1
	[0229.598] GetProcessHeap () returned 0x800000
	[0229.598] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0229.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0229.599] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.599] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0229.599] ResetEvent (hEvent=0xfc) returned 1
	[0229.599] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0229.891] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0229.891] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0229.892] GetProcessHeap () returned 0x800000
	[0229.892] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0229.892] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1
	[0229.892] GetProcessHeap () returned 0x800000
	[0229.892] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0229.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0229.892] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.892] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0229.892] ResetEvent (hEvent=0xfc) returned 1
	[0229.892] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0229.941] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0229.941] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0229.941] GetProcessHeap () returned 0x800000
	[0229.941] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0229.941] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0229.941] GetProcessHeap () returned 0x800000
	[0229.941] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0229.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0229.942] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.942] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0229.942] ResetEvent (hEvent=0xfc) returned 1
	[0229.942] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0229.978] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0229.978] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0229.978] GetProcessHeap () returned 0x800000
	[0229.978] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0229.978] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo", cAlternateFileName="")) returned 1
	[0229.978] GetProcessHeap () returned 0x800000
	[0229.978] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0229.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0229.979] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.979] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0229.979] ResetEvent (hEvent=0xfc) returned 1
	[0229.979] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0230.346] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0230.347] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0230.347] GetProcessHeap () returned 0x800000
	[0230.347] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0230.347] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0230.347] GetProcessHeap () returned 0x800000
	[0230.347] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0230.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0230.348] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0230.348] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0230.348] ResetEvent (hEvent=0xfc) returned 1
	[0230.348] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0230.383] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0230.383] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0230.383] GetProcessHeap () returned 0x800000
	[0230.384] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0230.384] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0230.384] GetProcessHeap () returned 0x800000
	[0230.384] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0230.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0230.384] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0230.384] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0230.384] ResetEvent (hEvent=0xfc) returned 1
	[0230.384] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0230.779] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0230.779] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0230.780] GetProcessHeap () returned 0x800000
	[0230.780] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0230.780] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1
	[0230.780] GetProcessHeap () returned 0x800000
	[0230.780] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0230.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0230.780] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0230.780] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0230.780] ResetEvent (hEvent=0xfc) returned 1
	[0230.780] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0230.864] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0230.864] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0230.865] GetProcessHeap () returned 0x800000
	[0230.865] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0230.865] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1
	[0230.866] GetProcessHeap () returned 0x800000
	[0230.866] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0230.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0230.866] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0230.866] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0230.866] ResetEvent (hEvent=0xfc) returned 1
	[0230.866] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0230.867] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0230.867] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0230.868] GetProcessHeap () returned 0x800000
	[0230.868] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0230.868] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1
	[0230.868] GetProcessHeap () returned 0x800000
	[0230.868] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0230.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0230.868] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0230.868] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0230.868] ResetEvent (hEvent=0xfc) returned 1
	[0230.868] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0232.489] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0232.489] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0232.489] GetProcessHeap () returned 0x800000
	[0232.489] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0232.489] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0232.489] GetProcessHeap () returned 0x800000
	[0232.489] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0232.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0232.490] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.490] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0232.490] ResetEvent (hEvent=0xfc) returned 1
	[0232.490] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0232.875] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0232.876] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0232.876] GetProcessHeap () returned 0x800000
	[0232.876] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0232.876] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne", cAlternateFileName="")) returned 1
	[0232.877] GetProcessHeap () returned 0x800000
	[0232.877] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0232.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0232.877] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.877] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0232.877] ResetEvent (hEvent=0xfc) returned 1
	[0232.877] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0232.891] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0232.891] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0232.891] GetProcessHeap () returned 0x800000
	[0232.891] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0232.891] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0232.891] GetProcessHeap () returned 0x800000
	[0232.891] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0232.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0232.892] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.892] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0232.892] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0232.892] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0232.892] GetProcessHeap () returned 0x800000
	[0232.892] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0232.892] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0232.892] GetProcessHeap () returned 0x800000
	[0232.892] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0232.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0232.893] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.893] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0232.893] ResetEvent (hEvent=0xfc) returned 1
	[0232.893] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0232.912] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0232.912] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0232.912] GetProcessHeap () returned 0x800000
	[0232.912] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0232.912] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0232.912] GetProcessHeap () returned 0x800000
	[0232.912] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0232.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0232.913] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.913] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0232.913] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0232.913] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0232.913] GetProcessHeap () returned 0x800000
	[0232.913] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0232.913] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0232.913] GetProcessHeap () returned 0x800000
	[0232.913] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0232.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0232.913] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.914] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0232.914] ResetEvent (hEvent=0xfc) returned 1
	[0232.914] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0232.932] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0232.932] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0232.933] GetProcessHeap () returned 0x800000
	[0232.933] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0232.933] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0232.933] GetProcessHeap () returned 0x800000
	[0232.933] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0232.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0232.933] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.933] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0232.933] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0232.933] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0232.934] GetProcessHeap () returned 0x800000
	[0232.934] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0232.934] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0232.934] GetProcessHeap () returned 0x800000
	[0232.934] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0232.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0232.934] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.934] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0232.934] ResetEvent (hEvent=0xfc) returned 1
	[0232.934] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0233.645] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0233.646] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0233.646] GetProcessHeap () returned 0x800000
	[0233.646] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0233.646] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0233.646] GetProcessHeap () returned 0x800000
	[0233.646] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0233.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0233.647] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.647] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0233.647] ResetEvent (hEvent=0xfc) returned 1
	[0233.647] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0233.735] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0233.735] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0233.736] GetProcessHeap () returned 0x800000
	[0233.736] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0233.736] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1
	[0233.736] GetProcessHeap () returned 0x800000
	[0233.736] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0233.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0233.736] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.736] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0233.736] ResetEvent (hEvent=0xfc) returned 1
	[0233.736] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0233.822] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0233.822] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0233.825] GetProcessHeap () returned 0x800000
	[0233.825] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0233.825] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0233.825] GetProcessHeap () returned 0x800000
	[0233.825] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0233.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0233.825] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.825] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0233.825] ResetEvent (hEvent=0xfc) returned 1
	[0233.825] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0234.001] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.001] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.002] GetProcessHeap () returned 0x800000
	[0234.002] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.002] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0234.002] GetProcessHeap () returned 0x800000
	[0234.002] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.002] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.002] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.002] ResetEvent (hEvent=0xfc) returned 1
	[0234.002] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0234.332] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.332] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.333] GetProcessHeap () returned 0x800000
	[0234.333] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.333] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0234.333] GetProcessHeap () returned 0x800000
	[0234.333] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.333] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.333] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.334] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.334] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.334] GetProcessHeap () returned 0x800000
	[0234.334] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.334] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0234.334] GetProcessHeap () returned 0x800000
	[0234.334] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.335] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.335] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.335] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.335] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.335] GetProcessHeap () returned 0x800000
	[0234.335] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.335] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1
	[0234.335] GetProcessHeap () returned 0x800000
	[0234.335] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.335] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.336] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.336] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.336] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.336] GetProcessHeap () returned 0x800000
	[0234.336] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.336] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1
	[0234.336] GetProcessHeap () returned 0x800000
	[0234.336] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.336] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.336] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.337] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.337] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.337] GetProcessHeap () returned 0x800000
	[0234.337] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.337] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1
	[0234.337] GetProcessHeap () returned 0x800000
	[0234.337] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.337] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.337] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.338] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.338] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.338] GetProcessHeap () returned 0x800000
	[0234.338] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.338] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0234.338] GetProcessHeap () returned 0x800000
	[0234.338] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.338] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.338] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.338] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.338] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.339] GetProcessHeap () returned 0x800000
	[0234.339] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.339] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0234.339] GetProcessHeap () returned 0x800000
	[0234.339] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.339] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.339] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.339] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.339] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.340] GetProcessHeap () returned 0x800000
	[0234.340] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.340] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0234.340] GetProcessHeap () returned 0x800000
	[0234.340] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.340] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.340] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.340] ResetEvent (hEvent=0xfc) returned 1
	[0234.340] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0234.348] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.348] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.348] GetProcessHeap () returned 0x800000
	[0234.348] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.348] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1
	[0234.348] GetProcessHeap () returned 0x800000
	[0234.348] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.348] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.348] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.348] ResetEvent (hEvent=0xfc) returned 1
	[0234.348] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0234.363] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.363] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.363] GetProcessHeap () returned 0x800000
	[0234.363] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.363] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0234.363] GetProcessHeap () returned 0x800000
	[0234.364] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.364] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.364] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.364] ResetEvent (hEvent=0xfc) returned 1
	[0234.364] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0234.376] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.377] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.377] GetProcessHeap () returned 0x800000
	[0234.377] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.377] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0234.377] GetProcessHeap () returned 0x800000
	[0234.377] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.378] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.378] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.378] ResetEvent (hEvent=0xfc) returned 1
	[0234.378] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0234.394] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.394] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.395] GetProcessHeap () returned 0x800000
	[0234.395] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.395] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_HK", cAlternateFileName="")) returned 1
	[0234.395] GetProcessHeap () returned 0x800000
	[0234.395] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.396] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.396] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.396] ResetEvent (hEvent=0xfc) returned 1
	[0234.396] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0234.408] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.408] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.408] GetProcessHeap () returned 0x800000
	[0234.408] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.409] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0234.409] GetProcessHeap () returned 0x800000
	[0234.409] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.409] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.409] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.410] ResetEvent (hEvent=0xfc) returned 1
	[0234.410] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0234.418] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.419] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.419] GetProcessHeap () returned 0x800000
	[0234.419] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.419] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 1
	[0234.419] GetProcessHeap () returned 0x800000
	[0234.419] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.419] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.419] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0234.420] ResetEvent (hEvent=0xfc) returned 1
	[0234.420] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0234.430] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0234.430] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.430] GetProcessHeap () returned 0x800000
	[0234.430] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.430] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 0
	[0234.430] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0234.430] GetProcessHeap () returned 0x800000
	[0234.430] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0234.430] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0234.430] GetProcessHeap () returned 0x800000
	[0234.430] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0234.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0234.430] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.430] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8636e710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
	[0234.430] ResetEvent (hEvent=0xfc) returned 1
	[0234.430] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0234.537] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0234.537] ResetEvent (hEvent=0xfc) returned 1
	[0234.538] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0235.665] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
	[0235.665] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0235.665] GetProcessHeap () returned 0x800000
	[0235.665] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0235.665] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0235.665] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0235.665] GetProcessHeap () returned 0x800000
	[0235.665] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0235.665] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 0
	[0235.665] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0235.665] GetProcessHeap () returned 0x800000
	[0235.665] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0235.669] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1
	[0235.669] GetProcessHeap () returned 0x800000
	[0235.669] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0235.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0235.669] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.669] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 1
	[0235.669] GetProcessHeap () returned 0x800000
	[0235.669] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0235.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0235.670] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.670] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82888510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8288ac20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_background.js", cAlternateFileName="CRAW_B~1.JS")) returned 1
	[0235.670] ResetEvent (hEvent=0xfc) returned 1
	[0235.670] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0236.288] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8288d330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82892150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x3b059, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.js", cAlternateFileName="CRAW_W~1.JS")) returned 1
	[0236.288] ResetEvent (hEvent=0xfc) returned 1
	[0236.288] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0236.356] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0236.356] GetProcessHeap () returned 0x800000
	[0236.357] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0236.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0236.357] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.357] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 1
	[0236.357] ResetEvent (hEvent=0xfc) returned 1
	[0236.357] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0236.778] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 0
	[0236.779] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0236.779] GetProcessHeap () returned 0x800000
	[0236.779] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0236.779] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="html", cAlternateFileName="")) returned 1
	[0236.779] GetProcessHeap () returned 0x800000
	[0236.779] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0236.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0236.779] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.779] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 1
	[0236.779] ResetEvent (hEvent=0xfc) returned 1
	[0236.779] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0236.789] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 0
	[0236.790] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0236.790] GetProcessHeap () returned 0x800000
	[0236.790] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0236.790] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0236.790] GetProcessHeap () returned 0x800000
	[0236.790] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0236.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0236.791] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.791] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1
	[0236.791] ResetEvent (hEvent=0xfc) returned 1
	[0236.791] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0236.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
	[0236.801] ResetEvent (hEvent=0xfc) returned 1
	[0236.801] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0236.809] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
	[0236.811] ResetEvent (hEvent=0xfc) returned 1
	[0236.811] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0236.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1
	[0236.846] ResetEvent (hEvent=0xfc) returned 1
	[0236.847] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0236.890] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1
	[0236.890] ResetEvent (hEvent=0xfc) returned 1
	[0236.890] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0237.091] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1
	[0237.091] ResetEvent (hEvent=0xfc) returned 1
	[0237.091] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0237.385] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1
	[0237.386] ResetEvent (hEvent=0xfc) returned 1
	[0237.386] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0237.469] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1
	[0237.469] ResetEvent (hEvent=0xfc) returned 1
	[0237.469] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0237.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 0
	[0237.503] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0237.503] GetProcessHeap () returned 0x800000
	[0237.503] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0237.504] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826545a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e2a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aa3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0237.504] ResetEvent (hEvent=0xfc) returned 1
	[0237.504] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0237.517] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0237.517] GetProcessHeap () returned 0x800000
	[0237.517] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0237.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0237.518] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.518] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0237.518] GetProcessHeap () returned 0x800000
	[0237.518] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0237.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0237.518] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.518] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0237.518] ResetEvent (hEvent=0xfc) returned 1
	[0237.518] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0238.330] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0238.330] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0238.330] GetProcessHeap () returned 0x800000
	[0238.330] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0238.330] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0238.330] GetProcessHeap () returned 0x800000
	[0238.330] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0238.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0238.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0238.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0238.331] ResetEvent (hEvent=0xfc) returned 1
	[0238.331] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0238.455] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0238.455] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0238.455] GetProcessHeap () returned 0x800000
	[0238.455] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0238.455] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0238.455] GetProcessHeap () returned 0x800000
	[0238.455] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0238.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0238.456] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0238.456] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0238.456] ResetEvent (hEvent=0xfc) returned 1
	[0238.456] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0238.678] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0238.679] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0238.679] GetProcessHeap () returned 0x800000
	[0238.679] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0238.679] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0238.679] GetProcessHeap () returned 0x800000
	[0238.679] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0238.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0238.679] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0238.679] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0238.679] ResetEvent (hEvent=0xfc) returned 1
	[0238.680] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0238.689] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0238.689] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0238.690] GetProcessHeap () returned 0x800000
	[0238.690] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0238.690] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0238.690] GetProcessHeap () returned 0x800000
	[0238.690] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0238.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0238.690] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0238.690] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0238.690] ResetEvent (hEvent=0xfc) returned 1
	[0238.691] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0238.696] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0238.696] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0238.697] GetProcessHeap () returned 0x800000
	[0238.697] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0238.697] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0238.697] GetProcessHeap () returned 0x800000
	[0238.697] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0238.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0238.697] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0238.697] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0238.697] ResetEvent (hEvent=0xfc) returned 1
	[0238.697] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0238.702] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0238.703] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0238.703] GetProcessHeap () returned 0x800000
	[0238.703] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0238.703] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0238.703] GetProcessHeap () returned 0x800000
	[0238.703] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0238.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0238.703] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0238.703] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0238.703] ResetEvent (hEvent=0xfc) returned 1
	[0238.703] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0238.712] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0238.712] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0238.713] GetProcessHeap () returned 0x800000
	[0238.713] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0238.713] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0238.713] GetProcessHeap () returned 0x800000
	[0238.713] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0238.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0238.713] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0238.713] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0238.713] ResetEvent (hEvent=0xfc) returned 1
	[0238.713] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0238.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0238.723] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0238.723] GetProcessHeap () returned 0x800000
	[0238.723] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0238.724] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0238.724] GetProcessHeap () returned 0x800000
	[0238.724] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0238.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0238.724] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0238.724] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0238.724] ResetEvent (hEvent=0xfc) returned 1
	[0238.724] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0238.741] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0238.741] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0238.741] GetProcessHeap () returned 0x800000
	[0238.741] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0238.741] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0238.741] GetProcessHeap () returned 0x800000
	[0238.741] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0238.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0238.742] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0238.742] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0238.742] ResetEvent (hEvent=0xfc) returned 1
	[0238.742] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0238.938] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0238.938] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0238.938] GetProcessHeap () returned 0x800000
	[0238.938] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0238.939] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0238.939] GetProcessHeap () returned 0x800000
	[0238.939] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0238.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0238.939] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0238.939] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0238.939] ResetEvent (hEvent=0xfc) returned 1
	[0238.939] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0239.235] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0239.235] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0239.235] GetProcessHeap () returned 0x800000
	[0239.235] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0239.235] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0239.235] GetProcessHeap () returned 0x800000
	[0239.235] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0239.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0239.236] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.236] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0239.236] ResetEvent (hEvent=0xfc) returned 1
	[0239.236] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0239.524] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0239.524] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0239.524] GetProcessHeap () returned 0x800000
	[0239.524] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0239.524] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0239.524] GetProcessHeap () returned 0x800000
	[0239.524] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0239.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0239.525] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.525] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0239.525] ResetEvent (hEvent=0xfc) returned 1
	[0239.525] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0239.725] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0239.725] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0239.725] GetProcessHeap () returned 0x800000
	[0239.725] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0239.725] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0239.725] GetProcessHeap () returned 0x800000
	[0239.725] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0239.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0239.725] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.726] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0239.726] ResetEvent (hEvent=0xfc) returned 1
	[0239.726] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0240.064] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0240.064] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0240.064] GetProcessHeap () returned 0x800000
	[0240.064] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0240.064] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0240.064] GetProcessHeap () returned 0x800000
	[0240.064] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0240.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0240.065] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.065] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0240.065] ResetEvent (hEvent=0xfc) returned 1
	[0240.065] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0240.090] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0240.090] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0240.090] GetProcessHeap () returned 0x800000
	[0240.090] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0240.090] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0240.090] GetProcessHeap () returned 0x800000
	[0240.090] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0240.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0240.090] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.090] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0240.090] ResetEvent (hEvent=0xfc) returned 1
	[0240.090] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0240.100] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0240.100] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0240.100] GetProcessHeap () returned 0x800000
	[0240.100] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0240.100] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0240.100] GetProcessHeap () returned 0x800000
	[0240.100] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0240.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0240.100] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.100] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0240.100] ResetEvent (hEvent=0xfc) returned 1
	[0240.100] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0240.258] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0240.258] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0240.258] GetProcessHeap () returned 0x800000
	[0240.258] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0240.258] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0240.258] GetProcessHeap () returned 0x800000
	[0240.259] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0240.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0240.259] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.259] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0240.259] ResetEvent (hEvent=0xfc) returned 1
	[0240.259] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0240.569] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0240.570] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0240.570] GetProcessHeap () returned 0x800000
	[0240.570] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0240.570] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0240.570] GetProcessHeap () returned 0x800000
	[0240.570] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0240.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0240.570] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.570] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0240.570] ResetEvent (hEvent=0xfc) returned 1
	[0240.570] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0240.659] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0240.659] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0240.659] GetProcessHeap () returned 0x800000
	[0240.659] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0240.659] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0240.659] GetProcessHeap () returned 0x800000
	[0240.659] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0240.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0240.659] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.660] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0240.660] ResetEvent (hEvent=0xfc) returned 1
	[0240.660] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0240.690] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0240.690] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0240.691] GetProcessHeap () returned 0x800000
	[0240.691] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0240.691] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0240.691] GetProcessHeap () returned 0x800000
	[0240.691] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0240.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0240.692] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.692] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0240.692] ResetEvent (hEvent=0xfc) returned 1
	[0240.692] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0240.910] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0240.910] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0240.910] GetProcessHeap () returned 0x800000
	[0240.910] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0240.910] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0240.910] GetProcessHeap () returned 0x800000
	[0240.910] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0240.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0240.911] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0240.911] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0240.911] ResetEvent (hEvent=0xfc) returned 1
	[0240.911] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.052] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.052] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.052] GetProcessHeap () returned 0x800000
	[0241.052] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.052] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0241.052] GetProcessHeap () returned 0x800000
	[0241.052] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.052] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.052] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.053] ResetEvent (hEvent=0xfc) returned 1
	[0241.053] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.061] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.061] GetProcessHeap () returned 0x800000
	[0241.061] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.061] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1
	[0241.061] GetProcessHeap () returned 0x800000
	[0241.061] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.061] ResetEvent (hEvent=0xfc) returned 1
	[0241.061] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.135] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.135] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.136] GetProcessHeap () returned 0x800000
	[0241.136] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.136] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0241.136] GetProcessHeap () returned 0x800000
	[0241.136] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.137] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.137] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.137] ResetEvent (hEvent=0xfc) returned 1
	[0241.137] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.165] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.165] GetProcessHeap () returned 0x800000
	[0241.165] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.165] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0241.165] GetProcessHeap () returned 0x800000
	[0241.165] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.166] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.166] ResetEvent (hEvent=0xfc) returned 1
	[0241.166] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.240] ResetEvent (hEvent=0xfc) returned 1
	[0241.241] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.248] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.248] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.248] GetProcessHeap () returned 0x800000
	[0241.248] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.248] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0241.248] GetProcessHeap () returned 0x800000
	[0241.248] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.248] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.248] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.248] ResetEvent (hEvent=0xfc) returned 1
	[0241.248] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.529] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.529] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.529] GetProcessHeap () returned 0x800000
	[0241.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.529] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0241.529] GetProcessHeap () returned 0x800000
	[0241.530] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.530] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.530] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.530] ResetEvent (hEvent=0xfc) returned 1
	[0241.530] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.540] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.540] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.540] GetProcessHeap () returned 0x800000
	[0241.541] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.541] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0241.541] GetProcessHeap () returned 0x800000
	[0241.541] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.541] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.541] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827b65b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.541] ResetEvent (hEvent=0xfc) returned 1
	[0241.541] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.546] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827b65b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.546] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.546] GetProcessHeap () returned 0x800000
	[0241.546] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.546] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0241.546] GetProcessHeap () returned 0x800000
	[0241.546] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.547] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.547] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827cc540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cec50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.547] ResetEvent (hEvent=0xfc) returned 1
	[0241.547] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.557] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827cc540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cec50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.557] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.557] GetProcessHeap () returned 0x800000
	[0241.557] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.557] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0241.557] GetProcessHeap () returned 0x800000
	[0241.557] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.557] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.557] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827e72f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e9a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.558] ResetEvent (hEvent=0xfc) returned 1
	[0241.558] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.563] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827e72f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e9a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.563] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.563] GetProcessHeap () returned 0x800000
	[0241.563] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.563] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0241.563] GetProcessHeap () returned 0x800000
	[0241.563] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.564] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.564] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827fab70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fd280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.564] ResetEvent (hEvent=0xfc) returned 1
	[0241.564] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827fab70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fd280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.847] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.847] GetProcessHeap () returned 0x800000
	[0241.847] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.847] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0241.847] GetProcessHeap () returned 0x800000
	[0241.847] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.848] ResetEvent (hEvent=0xfc) returned 1
	[0241.848] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.865] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.865] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.865] GetProcessHeap () returned 0x800000
	[0241.865] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.866] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0241.866] GetProcessHeap () returned 0x800000
	[0241.866] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.866] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.866] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.867] ResetEvent (hEvent=0xfc) returned 1
	[0241.867] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.876] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.877] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.877] GetProcessHeap () returned 0x800000
	[0241.877] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.877] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0241.878] GetProcessHeap () returned 0x800000
	[0241.878] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.878] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.878] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.878] ResetEvent (hEvent=0xfc) returned 1
	[0241.878] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.893] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.893] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.893] GetProcessHeap () returned 0x800000
	[0241.893] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.893] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0241.893] GetProcessHeap () returned 0x800000
	[0241.893] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.893] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.894] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.894] ResetEvent (hEvent=0xfc) returned 1
	[0241.894] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.903] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.903] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.904] GetProcessHeap () returned 0x800000
	[0241.904] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.904] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0241.904] GetProcessHeap () returned 0x800000
	[0241.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.904] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.904] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.904] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.904] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.904] GetProcessHeap () returned 0x800000
	[0241.904] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.904] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0241.905] GetProcessHeap () returned 0x800000
	[0241.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.905] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.905] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.905] ResetEvent (hEvent=0xfc) returned 1
	[0241.905] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.913] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.914] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.914] GetProcessHeap () returned 0x800000
	[0241.914] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.914] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0241.915] GetProcessHeap () returned 0x800000
	[0241.915] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.915] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.915] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.915] ResetEvent (hEvent=0xfc) returned 1
	[0241.915] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.934] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.934] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.938] GetProcessHeap () returned 0x800000
	[0241.938] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.938] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0241.938] GetProcessHeap () returned 0x800000
	[0241.938] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.939] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.939] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.939] ResetEvent (hEvent=0xfc) returned 1
	[0241.939] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.951] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.952] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.952] GetProcessHeap () returned 0x800000
	[0241.952] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0241.952] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0241.952] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0241.952] GetProcessHeap () returned 0x800000
	[0241.952] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0241.952] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0241.952] GetProcessHeap () returned 0x800000
	[0241.952] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0241.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0241.952] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.952] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0241.952] ResetEvent (hEvent=0xfc) returned 1
	[0241.953] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.965] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
	[0241.965] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0241.965] GetProcessHeap () returned 0x800000
	[0241.965] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0241.965] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0241.965] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0241.965] GetProcessHeap () returned 0x800000
	[0241.965] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0241.967] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 0
	[0241.967] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0241.967] GetProcessHeap () returned 0x800000
	[0241.967] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0241.968] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1
	[0241.968] GetProcessHeap () returned 0x800000
	[0241.968] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0241.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0241.968] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.968] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 1
	[0241.968] GetProcessHeap () returned 0x800000
	[0241.968] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0241.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0241.969] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.969] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x180f, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
	[0241.969] ResetEvent (hEvent=0xfc) returned 1
	[0241.969] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.973] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x869b0fb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0241.974] ResetEvent (hEvent=0xfc) returned 1
	[0241.974] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.984] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0241.985] GetProcessHeap () returned 0x800000
	[0241.985] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0241.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0241.986] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.987] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0241.987] GetProcessHeap () returned 0x800000
	[0241.987] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0241.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.987] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.987] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.987] ResetEvent (hEvent=0xfc) returned 1
	[0241.987] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0241.996] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0241.996] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0241.996] GetProcessHeap () returned 0x800000
	[0241.996] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0241.996] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0241.997] GetProcessHeap () returned 0x800000
	[0241.997] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0241.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0241.998] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0241.998] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0241.998] ResetEvent (hEvent=0xfc) returned 1
	[0241.998] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.007] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.008] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.009] GetProcessHeap () returned 0x800000
	[0242.009] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.009] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0242.009] GetProcessHeap () returned 0x800000
	[0242.009] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.009] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.009] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.009] ResetEvent (hEvent=0xfc) returned 1
	[0242.009] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.018] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.019] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.019] GetProcessHeap () returned 0x800000
	[0242.019] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.019] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0242.019] GetProcessHeap () returned 0x800000
	[0242.019] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.020] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.020] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.020] ResetEvent (hEvent=0xfc) returned 1
	[0242.020] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.037] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.038] GetProcessHeap () returned 0x800000
	[0242.038] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.038] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0242.038] GetProcessHeap () returned 0x800000
	[0242.038] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.038] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.038] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.038] ResetEvent (hEvent=0xfc) returned 1
	[0242.038] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.048] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.048] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.048] GetProcessHeap () returned 0x800000
	[0242.048] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.048] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0242.048] GetProcessHeap () returned 0x800000
	[0242.048] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.049] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.049] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.049] ResetEvent (hEvent=0xfc) returned 1
	[0242.049] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.063] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.063] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.064] GetProcessHeap () returned 0x800000
	[0242.064] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.064] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0242.064] GetProcessHeap () returned 0x800000
	[0242.064] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.064] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.064] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.064] ResetEvent (hEvent=0xfc) returned 1
	[0242.064] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.075] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.075] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.076] GetProcessHeap () returned 0x800000
	[0242.076] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.076] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0242.076] GetProcessHeap () returned 0x800000
	[0242.076] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.076] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.076] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.076] ResetEvent (hEvent=0xfc) returned 1
	[0242.076] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.085] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.085] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.086] GetProcessHeap () returned 0x800000
	[0242.086] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.086] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0242.086] GetProcessHeap () returned 0x800000
	[0242.086] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.087] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.087] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.087] ResetEvent (hEvent=0xfc) returned 1
	[0242.087] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.096] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.097] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.097] GetProcessHeap () returned 0x800000
	[0242.097] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.097] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0242.097] GetProcessHeap () returned 0x800000
	[0242.097] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.097] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.097] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.097] ResetEvent (hEvent=0xfc) returned 1
	[0242.097] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.106] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.107] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.107] GetProcessHeap () returned 0x800000
	[0242.107] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.107] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0242.107] GetProcessHeap () returned 0x800000
	[0242.107] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.107] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.107] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.108] ResetEvent (hEvent=0xfc) returned 1
	[0242.108] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.116] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.116] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.117] GetProcessHeap () returned 0x800000
	[0242.117] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.117] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0242.117] GetProcessHeap () returned 0x800000
	[0242.117] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.117] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.117] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.118] ResetEvent (hEvent=0xfc) returned 1
	[0242.118] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.292] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.292] GetProcessHeap () returned 0x800000
	[0242.292] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.292] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0242.292] GetProcessHeap () returned 0x800000
	[0242.292] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.293] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.293] ResetEvent (hEvent=0xfc) returned 1
	[0242.293] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.573] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.573] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.573] GetProcessHeap () returned 0x800000
	[0242.573] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.573] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0242.573] GetProcessHeap () returned 0x800000
	[0242.573] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.573] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.573] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.573] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.573] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.574] GetProcessHeap () returned 0x800000
	[0242.574] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.574] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0242.574] GetProcessHeap () returned 0x800000
	[0242.574] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.574] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.574] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.574] ResetEvent (hEvent=0xfc) returned 1
	[0242.574] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0242.683] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0242.684] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0242.684] GetProcessHeap () returned 0x800000
	[0242.684] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0242.684] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0242.684] GetProcessHeap () returned 0x800000
	[0242.684] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0242.684] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0242.684] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.684] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0242.684] ResetEvent (hEvent=0xfc) returned 1
	[0242.684] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0243.385] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0243.385] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0243.386] GetProcessHeap () returned 0x800000
	[0243.386] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0243.386] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0243.386] GetProcessHeap () returned 0x800000
	[0243.386] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0243.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0243.386] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.386] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0243.387] ResetEvent (hEvent=0xfc) returned 1
	[0243.387] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0243.396] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0243.396] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0243.397] GetProcessHeap () returned 0x800000
	[0243.397] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0243.397] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0243.397] GetProcessHeap () returned 0x800000
	[0243.397] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0243.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0243.397] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.397] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0243.397] ResetEvent (hEvent=0xfc) returned 1
	[0243.397] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0243.401] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0243.401] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0243.401] GetProcessHeap () returned 0x800000
	[0243.401] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0243.401] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0243.401] GetProcessHeap () returned 0x800000
	[0243.401] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0243.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0243.401] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.401] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0243.401] ResetEvent (hEvent=0xfc) returned 1
	[0243.402] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0243.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0243.409] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0243.409] GetProcessHeap () returned 0x800000
	[0243.409] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0243.409] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0243.409] GetProcessHeap () returned 0x800000
	[0243.409] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0243.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0243.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0243.409] ResetEvent (hEvent=0xfc) returned 1
	[0243.409] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0243.414] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0243.414] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0243.414] GetProcessHeap () returned 0x800000
	[0243.414] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0243.414] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0243.414] GetProcessHeap () returned 0x800000
	[0243.414] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0243.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0243.422] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.422] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0243.422] ResetEvent (hEvent=0xfc) returned 1
	[0243.422] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0243.436] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0243.436] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0243.437] GetProcessHeap () returned 0x800000
	[0243.437] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0243.438] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0243.438] GetProcessHeap () returned 0x800000
	[0243.438] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0243.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0243.438] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.438] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0243.438] ResetEvent (hEvent=0xfc) returned 1
	[0243.438] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0243.448] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0243.449] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0243.449] GetProcessHeap () returned 0x800000
	[0243.449] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0243.449] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0243.449] GetProcessHeap () returned 0x800000
	[0243.449] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0243.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0243.449] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.449] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0243.449] ResetEvent (hEvent=0xfc) returned 1
	[0243.449] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0243.457] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0243.458] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0243.458] GetProcessHeap () returned 0x800000
	[0243.458] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0243.458] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0243.459] GetProcessHeap () returned 0x800000
	[0243.459] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0243.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0243.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0243.459] ResetEvent (hEvent=0xfc) returned 1
	[0243.459] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0243.478] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0243.478] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0243.478] GetProcessHeap () returned 0x800000
	[0243.478] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0243.478] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0243.478] GetProcessHeap () returned 0x800000
	[0243.478] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0243.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0243.478] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.478] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0243.479] ResetEvent (hEvent=0xfc) returned 1
	[0243.479] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0243.493] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0243.494] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0243.494] GetProcessHeap () returned 0x800000
	[0243.494] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0243.494] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0243.494] GetProcessHeap () returned 0x800000
	[0243.494] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0243.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0243.494] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.494] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0243.494] ResetEvent (hEvent=0xfc) returned 1
	[0243.494] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0243.997] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0243.997] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0243.997] GetProcessHeap () returned 0x800000
	[0243.997] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0243.997] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0243.997] GetProcessHeap () returned 0x800000
	[0243.997] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0243.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0243.998] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0243.998] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0243.998] ResetEvent (hEvent=0xfc) returned 1
	[0243.998] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0244.012] ResetEvent (hEvent=0xfc) returned 1
	[0244.012] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0244.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0244.706] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0244.706] GetProcessHeap () returned 0x800000
	[0244.706] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0244.706] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0244.706] GetProcessHeap () returned 0x800000
	[0244.706] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0244.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0244.706] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.707] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0244.707] ResetEvent (hEvent=0xfc) returned 1
	[0244.707] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0244.714] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0244.715] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0244.715] GetProcessHeap () returned 0x800000
	[0244.715] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0244.715] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1
	[0244.715] GetProcessHeap () returned 0x800000
	[0244.715] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0244.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0244.715] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.715] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0244.715] ResetEvent (hEvent=0xfc) returned 1
	[0244.715] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0244.730] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0244.730] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0244.731] GetProcessHeap () returned 0x800000
	[0244.731] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0244.731] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0244.731] GetProcessHeap () returned 0x800000
	[0244.731] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0244.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0244.731] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.731] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0244.731] ResetEvent (hEvent=0xfc) returned 1
	[0244.731] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0244.732] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0244.732] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0244.735] GetProcessHeap () returned 0x800000
	[0244.735] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0244.735] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0244.735] GetProcessHeap () returned 0x800000
	[0244.735] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0244.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0244.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0244.735] ResetEvent (hEvent=0xfc) returned 1
	[0244.735] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0244.748] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0244.748] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0244.748] GetProcessHeap () returned 0x800000
	[0244.748] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0244.748] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0244.748] GetProcessHeap () returned 0x800000
	[0244.748] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0244.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0244.749] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.749] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0244.749] ResetEvent (hEvent=0xfc) returned 1
	[0244.749] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0244.757] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0244.757] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0244.758] GetProcessHeap () returned 0x800000
	[0244.758] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0244.758] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0244.758] GetProcessHeap () returned 0x800000
	[0244.758] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0244.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0244.758] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.758] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0244.758] ResetEvent (hEvent=0xfc) returned 1
	[0244.758] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0244.767] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0244.767] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0244.767] GetProcessHeap () returned 0x800000
	[0244.767] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0244.767] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0244.767] GetProcessHeap () returned 0x800000
	[0244.767] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0244.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0244.768] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.768] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0244.768] ResetEvent (hEvent=0xfc) returned 1
	[0244.768] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0244.780] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0244.780] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0244.780] GetProcessHeap () returned 0x800000
	[0244.780] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0244.780] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0244.780] GetProcessHeap () returned 0x800000
	[0244.780] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0244.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0244.781] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.781] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0244.781] ResetEvent (hEvent=0xfc) returned 1
	[0244.781] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0244.840] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0244.840] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0244.840] GetProcessHeap () returned 0x800000
	[0244.840] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0244.840] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0244.840] GetProcessHeap () returned 0x800000
	[0244.840] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0244.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0244.840] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0244.840] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0244.841] ResetEvent (hEvent=0xfc) returned 1
	[0244.841] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.135] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.135] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.135] GetProcessHeap () returned 0x800000
	[0245.135] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.135] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0245.135] GetProcessHeap () returned 0x800000
	[0245.135] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.136] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.136] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.136] ResetEvent (hEvent=0xfc) returned 1
	[0245.136] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.139] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.139] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.139] GetProcessHeap () returned 0x800000
	[0245.139] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.139] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0245.139] GetProcessHeap () returned 0x800000
	[0245.139] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.140] ResetEvent (hEvent=0xfc) returned 1
	[0245.140] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.148] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.148] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.149] GetProcessHeap () returned 0x800000
	[0245.149] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.149] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0245.149] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0245.149] GetProcessHeap () returned 0x800000
	[0245.149] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0245.149] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0245.149] GetProcessHeap () returned 0x800000
	[0245.149] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0245.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0245.149] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.149] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ae0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86adfb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdd12c400, ftLastWriteTime.dwHighDateTime=0x1d0683e, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0245.149] ResetEvent (hEvent=0xfc) returned 1
	[0245.149] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.186] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ae0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86adfb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdd12c400, ftLastWriteTime.dwHighDateTime=0x1d0683e, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
	[0245.186] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0245.186] GetProcessHeap () returned 0x800000
	[0245.186] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0245.186] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0245.186] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0245.186] GetProcessHeap () returned 0x800000
	[0245.186] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0245.188] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 0
	[0245.188] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0245.188] GetProcessHeap () returned 0x800000
	[0245.188] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0245.188] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1
	[0245.188] GetProcessHeap () returned 0x800000
	[0245.188] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0245.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0245.188] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.188] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5817.313.0.5_0", cAlternateFileName="581731~1.5_0")) returned 1
	[0245.188] GetProcessHeap () returned 0x800000
	[0245.188] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0245.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0245.189] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.189] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83637bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8363f0f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="angular.js", cAlternateFileName="")) returned 1
	[0245.189] ResetEvent (hEvent=0xfc) returned 1
	[0245.189] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.350] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83641800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83643f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xa89c, dwReserved0=0x0, dwReserved1=0x0, cFileName="background_script.js", cAlternateFileName="BACKGR~1.JS")) returned 1
	[0245.350] ResetEvent (hEvent=0xfc) returned 1
	[0245.350] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.360] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83646620, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83648d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x181aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_game_sender.js", cAlternateFileName="CAST_G~1.JS")) returned 1
	[0245.360] ResetEvent (hEvent=0xfc) returned 1
	[0245.360] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.371] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x111e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_route_details.html", cAlternateFileName="CAST_R~1.HTM")) returned 1
	[0245.371] ResetEvent (hEvent=0xfc) returned 1
	[0245.371] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.386] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83652970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83657790, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3a258, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_route_details.js", cAlternateFileName="CAST_R~1.JS")) returned 1
	[0245.386] ResetEvent (hEvent=0xfc) returned 1
	[0245.386] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.401] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8365ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836613d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xce17, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_sender.js", cAlternateFileName="CAST_S~1.JS")) returned 1
	[0245.402] ResetEvent (hEvent=0xfc) returned 1
	[0245.402] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.413] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_setup", cAlternateFileName="CAST_S~1")) returned 1
	[0245.413] GetProcessHeap () returned 0x800000
	[0245.413] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0245.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0245.414] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.414] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.css", cAlternateFileName="")) returned 1
	[0245.415] ResetEvent (hEvent=0xfc) returned 1
	[0245.415] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.485] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.js", cAlternateFileName="")) returned 1
	[0245.485] ResetEvent (hEvent=0xfc) returned 1
	[0245.485] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.502] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app_redirect.js", cAlternateFileName="CAST_A~1.JS")) returned 1
	[0245.502] ResetEvent (hEvent=0xfc) returned 1
	[0245.502] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.515] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="chromecast_logo_grey.png", cAlternateFileName="CHROME~1.PNG")) returned 1
	[0245.515] ResetEvent (hEvent=0xfc) returned 1
	[0245.515] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.533] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="devices.html", cAlternateFileName="DEVICE~1.HTM")) returned 1
	[0245.533] ResetEvent (hEvent=0xfc) returned 1
	[0245.533] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.543] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0245.543] ResetEvent (hEvent=0xfc) returned 1
	[0245.543] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.556] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="offers.html", cAlternateFileName="OFFERS~1.HTM")) returned 1
	[0245.556] ResetEvent (hEvent=0xfc) returned 1
	[0245.556] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.565] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 1
	[0245.565] ResetEvent (hEvent=0xfc) returned 1
	[0245.565] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.595] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 0
	[0245.595] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0245.596] GetProcessHeap () returned 0x800000
	[0245.596] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0245.596] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_route_details", cAlternateFileName="CLOUD_~1")) returned 1
	[0245.596] GetProcessHeap () returned 0x800000
	[0245.596] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0245.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0245.596] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.596] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.html", cAlternateFileName="VIEW~1.HTM")) returned 1
	[0245.596] ResetEvent (hEvent=0xfc) returned 1
	[0245.596] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.613] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 1
	[0245.613] ResetEvent (hEvent=0xfc) returned 1
	[0245.613] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.640] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 0
	[0245.640] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0245.640] GetProcessHeap () returned 0x800000
	[0245.640] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0245.640] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83696f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83699640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc878, dwReserved0=0x0, dwReserved1=0x0, cFileName="common.js", cAlternateFileName="")) returned 1
	[0245.640] ResetEvent (hEvent=0xfc) returned 1
	[0245.641] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.649] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8369bd50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8369bd50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc26, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback.css", cAlternateFileName="")) returned 1
	[0245.649] ResetEvent (hEvent=0xfc) returned 1
	[0245.650] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.680] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x38a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback.html", cAlternateFileName="FEEDBA~1.HTM")) returned 1
	[0245.680] ResetEvent (hEvent=0xfc) returned 1
	[0245.680] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.690] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a5990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a5990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback_script.js", cAlternateFileName="FEEDBA~1.JS")) returned 1
	[0245.691] ResetEvent (hEvent=0xfc) returned 1
	[0245.691] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.701] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836af5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8395fd70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0245.701] ResetEvent (hEvent=0xfc) returned 1
	[0245.701] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.710] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b1ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b43f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x46039, dwReserved0=0x0, dwReserved1=0x0, cFileName="material_css_min.css", cAlternateFileName="MATERI~1.CSS")) returned 1
	[0245.711] ResetEvent (hEvent=0xfc) returned 1
	[0245.711] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.719] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b6b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b9210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x7c33, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_cast_streaming.js", cAlternateFileName="MIRROR~1.JS")) returned 1
	[0245.720] ResetEvent (hEvent=0xfc) returned 1
	[0245.720] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.729] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836c2e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836c5560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_common.js", cAlternateFileName="MIRROR~2.JS")) returned 1
	[0245.729] ResetEvent (hEvent=0xfc) returned 1
	[0245.729] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.741] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836ca380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836cf1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x794cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_hangouts.js", cAlternateFileName="MIRROR~3.JS")) returned 1
	[0245.741] ResetEvent (hEvent=0xfc) returned 1
	[0245.741] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.750] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836d3fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836d66d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x941, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_webrtc.js", cAlternateFileName="MIRROR~4.JS")) returned 1
	[0245.751] ResetEvent (hEvent=0xfc) returned 1
	[0245.751] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.763] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0245.763] GetProcessHeap () returned 0x800000
	[0245.763] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0245.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0245.764] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.764] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1
	[0245.764] GetProcessHeap () returned 0x800000
	[0245.764] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.765] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.765] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.765] ResetEvent (hEvent=0xfc) returned 1
	[0245.765] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.774] ResetEvent (hEvent=0xfc) returned 1
	[0245.774] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.784] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.784] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.784] GetProcessHeap () returned 0x800000
	[0245.785] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.785] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0245.785] GetProcessHeap () returned 0x800000
	[0245.785] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.785] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.785] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.785] ResetEvent (hEvent=0xfc) returned 1
	[0245.785] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.794] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.794] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.795] GetProcessHeap () returned 0x800000
	[0245.795] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.795] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0245.795] GetProcessHeap () returned 0x800000
	[0245.795] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.795] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.795] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.795] ResetEvent (hEvent=0xfc) returned 1
	[0245.795] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.804] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.804] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.804] GetProcessHeap () returned 0x800000
	[0245.804] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.804] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1
	[0245.806] GetProcessHeap () returned 0x800000
	[0245.806] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.806] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.806] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.806] ResetEvent (hEvent=0xfc) returned 1
	[0245.806] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.815] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.816] GetProcessHeap () returned 0x800000
	[0245.816] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.816] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0245.816] GetProcessHeap () returned 0x800000
	[0245.816] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.816] ResetEvent (hEvent=0xfc) returned 1
	[0245.816] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.825] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.825] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.825] GetProcessHeap () returned 0x800000
	[0245.825] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.825] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0245.825] GetProcessHeap () returned 0x800000
	[0245.825] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.825] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.825] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.825] ResetEvent (hEvent=0xfc) returned 1
	[0245.825] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.838] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.838] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.839] GetProcessHeap () returned 0x800000
	[0245.839] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.839] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0245.839] GetProcessHeap () returned 0x800000
	[0245.839] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.839] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.839] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.839] ResetEvent (hEvent=0xfc) returned 1
	[0245.839] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.853] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.854] GetProcessHeap () returned 0x800000
	[0245.854] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.854] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0245.854] GetProcessHeap () returned 0x800000
	[0245.854] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.854] ResetEvent (hEvent=0xfc) returned 1
	[0245.854] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.862] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.862] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.862] GetProcessHeap () returned 0x800000
	[0245.862] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.862] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0245.862] GetProcessHeap () returned 0x800000
	[0245.862] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.862] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.863] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.863] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.863] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.864] GetProcessHeap () returned 0x800000
	[0245.864] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.864] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0245.864] GetProcessHeap () returned 0x800000
	[0245.864] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.864] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.864] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.864] ResetEvent (hEvent=0xfc) returned 1
	[0245.864] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.895] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.896] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.896] GetProcessHeap () returned 0x800000
	[0245.896] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.896] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0245.896] GetProcessHeap () returned 0x800000
	[0245.896] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.896] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.896] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.896] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.896] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.896] GetProcessHeap () returned 0x800000
	[0245.896] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.896] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0245.897] GetProcessHeap () returned 0x800000
	[0245.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.897] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.897] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.897] ResetEvent (hEvent=0xfc) returned 1
	[0245.897] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.914] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.915] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.915] GetProcessHeap () returned 0x800000
	[0245.915] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.915] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1
	[0245.915] GetProcessHeap () returned 0x800000
	[0245.915] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.916] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.916] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.916] ResetEvent (hEvent=0xfc) returned 1
	[0245.916] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.924] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.925] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.925] GetProcessHeap () returned 0x800000
	[0245.925] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.934] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0245.934] GetProcessHeap () returned 0x800000
	[0245.934] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.934] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.934] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.934] ResetEvent (hEvent=0xfc) returned 1
	[0245.934] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.943] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.943] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.944] GetProcessHeap () returned 0x800000
	[0245.944] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.944] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0245.944] GetProcessHeap () returned 0x800000
	[0245.944] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.944] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.944] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.944] ResetEvent (hEvent=0xfc) returned 1
	[0245.944] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.953] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.953] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.954] GetProcessHeap () returned 0x800000
	[0245.954] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.954] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0245.954] GetProcessHeap () returned 0x800000
	[0245.954] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.954] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.954] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.954] ResetEvent (hEvent=0xfc) returned 1
	[0245.954] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.962] ResetEvent (hEvent=0xfc) returned 1
	[0245.962] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.973] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.973] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.973] GetProcessHeap () returned 0x800000
	[0245.973] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.973] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1
	[0245.973] GetProcessHeap () returned 0x800000
	[0245.973] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.973] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.973] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.973] ResetEvent (hEvent=0xfc) returned 1
	[0245.973] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.976] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.976] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.976] GetProcessHeap () returned 0x800000
	[0245.977] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.977] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0245.977] GetProcessHeap () returned 0x800000
	[0245.977] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.977] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.977] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.977] ResetEvent (hEvent=0xfc) returned 1
	[0245.977] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.992] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.992] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.993] GetProcessHeap () returned 0x800000
	[0245.993] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.993] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0245.993] GetProcessHeap () returned 0x800000
	[0245.993] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.993] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.993] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.993] ResetEvent (hEvent=0xfc) returned 1
	[0245.993] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0245.996] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0245.996] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0245.996] GetProcessHeap () returned 0x800000
	[0245.996] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0245.996] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0245.996] GetProcessHeap () returned 0x800000
	[0245.996] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0245.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0245.996] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.996] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0245.996] ResetEvent (hEvent=0xfc) returned 1
	[0245.996] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.062] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.063] GetProcessHeap () returned 0x800000
	[0246.063] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.063] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0246.063] GetProcessHeap () returned 0x800000
	[0246.063] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.063] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.064] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.064] ResetEvent (hEvent=0xfc) returned 1
	[0246.064] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.072] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.072] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.073] GetProcessHeap () returned 0x800000
	[0246.073] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.073] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0246.073] GetProcessHeap () returned 0x800000
	[0246.073] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.073] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.074] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.074] ResetEvent (hEvent=0xfc) returned 1
	[0246.074] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.082] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.082] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.082] GetProcessHeap () returned 0x800000
	[0246.082] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.082] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1
	[0246.082] GetProcessHeap () returned 0x800000
	[0246.082] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.083] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.083] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.083] ResetEvent (hEvent=0xfc) returned 1
	[0246.083] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.093] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.093] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.094] GetProcessHeap () returned 0x800000
	[0246.094] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.094] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0246.094] GetProcessHeap () returned 0x800000
	[0246.094] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.094] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.094] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.094] ResetEvent (hEvent=0xfc) returned 1
	[0246.094] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.102] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.102] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.102] GetProcessHeap () returned 0x800000
	[0246.102] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.103] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1
	[0246.104] GetProcessHeap () returned 0x800000
	[0246.104] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.104] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.104] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.104] ResetEvent (hEvent=0xfc) returned 1
	[0246.104] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.113] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.113] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.113] GetProcessHeap () returned 0x800000
	[0246.113] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.113] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0246.113] GetProcessHeap () returned 0x800000
	[0246.113] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.113] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.113] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.113] ResetEvent (hEvent=0xfc) returned 1
	[0246.114] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.122] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.122] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.122] GetProcessHeap () returned 0x800000
	[0246.122] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.122] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0246.123] GetProcessHeap () returned 0x800000
	[0246.123] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.123] ResetEvent (hEvent=0xfc) returned 1
	[0246.123] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.132] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.133] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.133] GetProcessHeap () returned 0x800000
	[0246.134] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.134] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0246.134] GetProcessHeap () returned 0x800000
	[0246.134] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.134] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.134] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.134] ResetEvent (hEvent=0xfc) returned 1
	[0246.134] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.142] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.143] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.143] GetProcessHeap () returned 0x800000
	[0246.143] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.143] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1
	[0246.143] GetProcessHeap () returned 0x800000
	[0246.143] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.143] ResetEvent (hEvent=0xfc) returned 1
	[0246.143] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.154] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.155] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.155] GetProcessHeap () returned 0x800000
	[0246.155] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.155] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1
	[0246.155] GetProcessHeap () returned 0x800000
	[0246.155] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.155] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.155] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.155] ResetEvent (hEvent=0xfc) returned 1
	[0246.156] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.180] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.181] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.181] GetProcessHeap () returned 0x800000
	[0246.181] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.181] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0246.181] GetProcessHeap () returned 0x800000
	[0246.181] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.182] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.182] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.182] ResetEvent (hEvent=0xfc) returned 1
	[0246.182] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.190] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.190] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.190] GetProcessHeap () returned 0x800000
	[0246.191] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.191] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1
	[0246.191] GetProcessHeap () returned 0x800000
	[0246.191] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.191] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.191] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.191] ResetEvent (hEvent=0xfc) returned 1
	[0246.191] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.199] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.200] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.200] GetProcessHeap () returned 0x800000
	[0246.200] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.200] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0246.201] GetProcessHeap () returned 0x800000
	[0246.201] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.201] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.201] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.201] ResetEvent (hEvent=0xfc) returned 1
	[0246.201] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.209] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.212] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.213] GetProcessHeap () returned 0x800000
	[0246.213] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.213] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0246.213] GetProcessHeap () returned 0x800000
	[0246.213] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.213] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.213] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.213] ResetEvent (hEvent=0xfc) returned 1
	[0246.213] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.235] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.235] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.236] GetProcessHeap () returned 0x800000
	[0246.236] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.236] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1
	[0246.236] GetProcessHeap () returned 0x800000
	[0246.236] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.236] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.237] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.237] ResetEvent (hEvent=0xfc) returned 1
	[0246.237] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.287] ResetEvent (hEvent=0xfc) returned 1
	[0246.288] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.296] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.297] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.297] GetProcessHeap () returned 0x800000
	[0246.297] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.297] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0246.297] GetProcessHeap () returned 0x800000
	[0246.297] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.298] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.298] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.298] ResetEvent (hEvent=0xfc) returned 1
	[0246.298] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.306] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.307] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.307] GetProcessHeap () returned 0x800000
	[0246.307] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.307] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0246.307] GetProcessHeap () returned 0x800000
	[0246.307] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.307] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.307] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.307] ResetEvent (hEvent=0xfc) returned 1
	[0246.307] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.317] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.318] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.318] GetProcessHeap () returned 0x800000
	[0246.318] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.318] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0246.319] GetProcessHeap () returned 0x800000
	[0246.319] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.319] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.319] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.319] ResetEvent (hEvent=0xfc) returned 1
	[0246.319] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.327] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.327] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.327] GetProcessHeap () returned 0x800000
	[0246.327] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.327] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0246.328] GetProcessHeap () returned 0x800000
	[0246.328] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.328] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.328] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.328] ResetEvent (hEvent=0xfc) returned 1
	[0246.328] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.343] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.343] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.343] GetProcessHeap () returned 0x800000
	[0246.343] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.343] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0246.343] GetProcessHeap () returned 0x800000
	[0246.343] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.344] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.344] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.344] ResetEvent (hEvent=0xfc) returned 1
	[0246.344] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.393] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.393] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.393] GetProcessHeap () returned 0x800000
	[0246.393] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.393] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0246.393] GetProcessHeap () returned 0x800000
	[0246.393] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.394] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.394] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.394] ResetEvent (hEvent=0xfc) returned 1
	[0246.394] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.428] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.428] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.428] GetProcessHeap () returned 0x800000
	[0246.429] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.429] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0246.429] GetProcessHeap () returned 0x800000
	[0246.429] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.429] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.429] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.429] ResetEvent (hEvent=0xfc) returned 1
	[0246.429] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.440] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.440] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.440] GetProcessHeap () returned 0x800000
	[0246.440] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.440] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0246.440] GetProcessHeap () returned 0x800000
	[0246.440] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.440] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.440] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.440] ResetEvent (hEvent=0xfc) returned 1
	[0246.441] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.469] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.469] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.469] GetProcessHeap () returned 0x800000
	[0246.469] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.469] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1
	[0246.469] GetProcessHeap () returned 0x800000
	[0246.469] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.469] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.469] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.469] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.469] ResetEvent (hEvent=0xfc) returned 1
	[0246.469] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.488] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.488] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.488] GetProcessHeap () returned 0x800000
	[0246.488] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.488] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1
	[0246.488] GetProcessHeap () returned 0x800000
	[0246.488] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.488] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.489] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.489] ResetEvent (hEvent=0xfc) returned 1
	[0246.489] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.506] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.506] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.506] GetProcessHeap () returned 0x800000
	[0246.506] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.506] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1
	[0246.506] GetProcessHeap () returned 0x800000
	[0246.506] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.506] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.506] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f0ef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5593, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.506] ResetEvent (hEvent=0xfc) returned 1
	[0246.506] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.528] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f0ef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5593, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.528] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.529] GetProcessHeap () returned 0x800000
	[0246.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.529] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0246.529] GetProcessHeap () returned 0x800000
	[0246.529] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.529] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.529] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f8420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835fab30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.529] ResetEvent (hEvent=0xfc) returned 1
	[0246.529] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.532] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f8420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835fab30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.532] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.532] GetProcessHeap () returned 0x800000
	[0246.532] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.532] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0246.532] GetProcessHeap () returned 0x800000
	[0246.532] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.533] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.533] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835ff950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83602060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.533] ResetEvent (hEvent=0xfc) returned 1
	[0246.533] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.541] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835ff950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83602060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.541] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.542] GetProcessHeap () returned 0x800000
	[0246.542] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.542] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0246.542] GetProcessHeap () returned 0x800000
	[0246.542] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8360e3b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83610ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.542] ResetEvent (hEvent=0xfc) returned 1
	[0246.543] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.561] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8360e3b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83610ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.561] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.561] GetProcessHeap () returned 0x800000
	[0246.561] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.561] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0246.561] GetProcessHeap () returned 0x800000
	[0246.561] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.561] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.561] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83617ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x426b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.562] ResetEvent (hEvent=0xfc) returned 1
	[0246.562] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.571] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83617ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x426b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.571] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.572] GetProcessHeap () returned 0x800000
	[0246.572] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.572] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh", cAlternateFileName="")) returned 1
	[0246.572] GetProcessHeap () returned 0x800000
	[0246.572] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.572] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.572] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8361f520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d11, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.572] ResetEvent (hEvent=0xfc) returned 1
	[0246.572] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.579] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8361f520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d11, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.579] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.579] GetProcessHeap () returned 0x800000
	[0246.579] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.579] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0246.579] GetProcessHeap () returned 0x800000
	[0246.579] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0246.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0246.580] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.580] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8362b870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0246.580] ResetEvent (hEvent=0xfc) returned 1
	[0246.580] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.592] ResetEvent (hEvent=0xfc) returned 1
	[0246.592] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.603] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8362b870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0246.603] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0246.603] GetProcessHeap () returned 0x800000
	[0246.603] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0246.603] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0246.604] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0246.604] GetProcessHeap () returned 0x800000
	[0246.604] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0246.604] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0246.604] GetProcessHeap () returned 0x800000
	[0246.604] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0246.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0246.604] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.604] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x839fe880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7299, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
	[0246.604] ResetEvent (hEvent=0xfc) returned 1
	[0246.604] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.613] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836e0310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0246.613] ResetEvent (hEvent=0xfc) returned 1
	[0246.613] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.622] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836e0310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
	[0246.622] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0246.622] GetProcessHeap () returned 0x800000
	[0246.622] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0246.622] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0246.622] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0246.622] GetProcessHeap () returned 0x800000
	[0246.622] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0246.623] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5817.313.0.5_0", cAlternateFileName="581731~1.5_0")) returned 0
	[0246.623] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0246.623] GetProcessHeap () returned 0x800000
	[0246.623] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0246.624] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0
	[0246.624] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0246.624] GetProcessHeap () returned 0x800000
	[0246.624] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0246.624] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1
	[0246.624] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1
	[0246.624] ResetEvent (hEvent=0xfc) returned 1
	[0246.625] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.634] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1
	[0246.634] ResetEvent (hEvent=0xfc) returned 1
	[0246.635] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.800] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0246.800] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1
	[0246.800] ResetEvent (hEvent=0xfc) returned 1
	[0246.800] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0246.847] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1
	[0246.847] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~2")) returned 1
	[0246.847] GetProcessHeap () returned 0x800000
	[0246.847] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0246.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0246.848] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.848] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A058.tmp", cAlternateFileName="")) returned 1
	[0246.848] ResetEvent (hEvent=0xfc) returned 1
	[0246.848] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.015] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A059.tmp", cAlternateFileName="")) returned 1
	[0247.015] ResetEvent (hEvent=0xfc) returned 1
	[0247.015] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.025] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A059.tmp", cAlternateFileName="")) returned 0
	[0247.025] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0247.025] GetProcessHeap () returned 0x800000
	[0247.025] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.025] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIconsOld", cAlternateFileName="JUMPLI~1")) returned 1
	[0247.025] GetProcessHeap () returned 0x800000
	[0247.025] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0247.025] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.025] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B03.tmp", cAlternateFileName="")) returned 1
	[0247.025] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B04.tmp", cAlternateFileName="")) returned 1
	[0247.026] ResetEvent (hEvent=0xfc) returned 1
	[0247.026] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.039] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B04.tmp", cAlternateFileName="")) returned 0
	[0247.039] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0247.039] GetProcessHeap () returned 0x800000
	[0247.039] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.039] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1
	[0247.039] GetProcessHeap () returned 0x800000
	[0247.039] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0247.039] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.039] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1
	[0247.039] GetProcessHeap () returned 0x800000
	[0247.039] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0247.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0247.040] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.040] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86513570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0247.041] ResetEvent (hEvent=0xfc) returned 1
	[0247.041] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.049] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
	[0247.049] ResetEvent (hEvent=0xfc) returned 1
	[0247.049] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.064] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
	[0247.064] ResetEvent (hEvent=0xfc) returned 1
	[0247.064] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.074] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97256fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
	[0247.074] ResetEvent (hEvent=0xfc) returned 1
	[0247.074] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.098] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
	[0247.099] ResetEvent (hEvent=0xfc) returned 1
	[0247.100] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.108] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0
	[0247.108] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0247.109] GetProcessHeap () returned 0x800000
	[0247.109] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0247.109] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 0
	[0247.109] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0247.109] GetProcessHeap () returned 0x800000
	[0247.109] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.109] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1
	[0247.110] GetProcessHeap () returned 0x800000
	[0247.110] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0247.110] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.110] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9048b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", cAlternateFileName="CHROME~1.LOC")) returned 1
	[0247.110] ResetEvent (hEvent=0xfc) returned 1
	[0247.111] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.115] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x904b1a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", cAlternateFileName="CHROME~2.LOC")) returned 1
	[0247.115] ResetEvent (hEvent=0xfc) returned 1
	[0247.115] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.120] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x904b1a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", cAlternateFileName="CHROME~2.LOC")) returned 0
	[0247.120] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0247.121] GetProcessHeap () returned 0x800000
	[0247.122] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.122] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1
	[0247.122] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1
	[0247.122] ResetEvent (hEvent=0xfc) returned 1
	[0247.122] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.132] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1
	[0247.133] ResetEvent (hEvent=0xfc) returned 1
	[0247.133] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.141] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8262ad90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1
	[0247.142] ResetEvent (hEvent=0xfc) returned 1
	[0247.142] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.151] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1
	[0247.151] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1
	[0247.151] ResetEvent (hEvent=0xfc) returned 1
	[0247.151] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.160] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1
	[0247.161] ResetEvent (hEvent=0xfc) returned 1
	[0247.161] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.171] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1
	[0247.171] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1
	[0247.172] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1
	[0247.172] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1
	[0247.172] ResetEvent (hEvent=0xfc) returned 1
	[0247.172] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.181] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1
	[0247.181] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1
	[0247.181] ResetEvent (hEvent=0xfc) returned 1
	[0247.181] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.190] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1
	[0247.190] ResetEvent (hEvent=0xfc) returned 1
	[0247.190] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.199] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1
	[0247.200] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x822e3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1
	[0247.200] ResetEvent (hEvent=0xfc) returned 1
	[0247.200] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.208] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1
	[0247.209] GetProcessHeap () returned 0x800000
	[0247.209] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0247.209] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.209] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1
	[0247.209] GetProcessHeap () returned 0x800000
	[0247.209] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0247.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0247.210] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.210] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8448d2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0247.210] ResetEvent (hEvent=0xfc) returned 1
	[0247.210] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.218] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
	[0247.219] ResetEvent (hEvent=0xfc) returned 1
	[0247.219] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.227] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
	[0247.228] ResetEvent (hEvent=0xfc) returned 1
	[0247.229] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.234] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x93935fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
	[0247.234] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
	[0247.234] ResetEvent (hEvent=0xfc) returned 1
	[0247.234] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.287] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0
	[0247.287] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0247.288] GetProcessHeap () returned 0x800000
	[0247.288] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0247.288] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0
	[0247.288] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0247.288] GetProcessHeap () returned 0x800000
	[0247.288] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.288] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1
	[0247.288] ResetEvent (hEvent=0xfc) returned 1
	[0247.288] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.341] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d8c9a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81984910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1
	[0247.342] ResetEvent (hEvent=0xfc) returned 1
	[0247.342] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.483] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c2e920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x88c2e920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x88c2e920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1
	[0247.483] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ee3600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80ee3600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6cde50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1
	[0247.483] ResetEvent (hEvent=0xfc) returned 1
	[0247.483] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.505] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1
	[0247.505] GetProcessHeap () returned 0x800000
	[0247.505] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0247.506] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.506] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1
	[0247.506] GetProcessHeap () returned 0x800000
	[0247.506] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0247.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0247.506] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.506] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1
	[0247.506] ResetEvent (hEvent=0xfc) returned 1
	[0247.506] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.530] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 1
	[0247.530] ResetEvent (hEvent=0xfc) returned 1
	[0247.530] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.542] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 0
	[0247.542] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0247.543] GetProcessHeap () returned 0x800000
	[0247.543] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0247.543] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 0
	[0247.543] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0247.543] GetProcessHeap () returned 0x800000
	[0247.543] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.543] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1
	[0247.543] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1
	[0247.543] ResetEvent (hEvent=0xfc) returned 1
	[0247.543] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.561] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 0
	[0247.561] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.561] GetProcessHeap () returned 0x800000
	[0247.561] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0247.561] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1
	[0247.561] GetProcessHeap () returned 0x800000
	[0247.562] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.562] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.562] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.562] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.562] GetProcessHeap () returned 0x800000
	[0247.562] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.563] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1
	[0247.563] GetProcessHeap () returned 0x800000
	[0247.563] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.564] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.564] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.564] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.564] GetProcessHeap () returned 0x800000
	[0247.564] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.564] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1
	[0247.564] ResetEvent (hEvent=0xfc) returned 1
	[0247.564] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.576] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1
	[0247.576] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1
	[0247.576] GetProcessHeap () returned 0x800000
	[0247.576] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.576] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.576] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.576] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.576] GetProcessHeap () returned 0x800000
	[0247.576] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.576] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1
	[0247.577] GetProcessHeap () returned 0x800000
	[0247.577] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.577] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.577] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.577] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.577] GetProcessHeap () returned 0x800000
	[0247.577] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.577] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1
	[0247.577] GetProcessHeap () returned 0x800000
	[0247.577] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.577] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.577] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.577] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.578] GetProcessHeap () returned 0x800000
	[0247.578] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.578] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAFEBR~3")) returned 1
	[0247.578] ResetEvent (hEvent=0xfc) returned 1
	[0247.578] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.596] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAFEBR~4")) returned 1
	[0247.596] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SAFEBR~1")) returned 1
	[0247.597] ResetEvent (hEvent=0xfc) returned 1
	[0247.597] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.619] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAFEBR~2")) returned 1
	[0247.620] ResetEvent (hEvent=0xfc) returned 1
	[0247.620] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.629] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1
	[0247.630] GetProcessHeap () returned 0x800000
	[0247.630] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.630] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.630] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.630] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.630] GetProcessHeap () returned 0x800000
	[0247.630] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.630] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1
	[0247.630] GetProcessHeap () returned 0x800000
	[0247.630] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.630] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.630] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.631] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.631] GetProcessHeap () returned 0x800000
	[0247.631] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.631] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1
	[0247.631] GetProcessHeap () returned 0x800000
	[0247.631] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.631] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.631] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.631] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.631] GetProcessHeap () returned 0x800000
	[0247.631] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.631] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0
	[0247.631] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0247.631] GetProcessHeap () returned 0x800000
	[0247.631] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0247.632] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0
	[0247.632] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0247.632] GetProcessHeap () returned 0x800000
	[0247.632] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0247.632] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1
	[0247.632] GetProcessHeap () returned 0x800000
	[0247.632] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0247.632] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.632] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.632] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0247.633] GetProcessHeap () returned 0x800000
	[0247.633] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.634] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0
	[0247.634] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0247.634] GetProcessHeap () returned 0x800000
	[0247.634] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0247.634] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0247.634] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6acf470, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x126f87, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
	[0247.634] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0247.634] GetProcessHeap () returned 0x800000
	[0247.634] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0247.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0247.634] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.634] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0247.634] GetProcessHeap () returned 0x800000
	[0247.634] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0247.635] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.635] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.635] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0247.635] GetProcessHeap () returned 0x800000
	[0247.635] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.635] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
	[0247.635] GetProcessHeap () returned 0x800000
	[0247.635] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0247.635] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.635] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.635] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0247.636] GetProcessHeap () returned 0x800000
	[0247.636] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.636] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0247.636] GetProcessHeap () returned 0x800000
	[0247.636] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0247.636] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.636] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
	[0247.636] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1
	[0247.636] GetProcessHeap () returned 0x800000
	[0247.636] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0247.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0247.637] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.637] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1
	[0247.637] ResetEvent (hEvent=0xfc) returned 1
	[0247.637] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.646] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1
	[0247.647] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1
	[0247.647] ResetEvent (hEvent=0xfc) returned 1
	[0247.647] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.655] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0
	[0247.655] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0247.656] GetProcessHeap () returned 0x800000
	[0247.656] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0247.656] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
	[0247.656] GetProcessHeap () returned 0x800000
	[0247.656] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0247.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0247.657] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.657] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1
	[0247.657] GetProcessHeap () returned 0x800000
	[0247.657] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0247.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.657] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.657] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites~.feed-ms", cAlternateFileName="SUGGES~1.FEE")) returned 1
	[0247.657] ResetEvent (hEvent=0xfc) returned 1
	[0247.658] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.666] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1
	[0247.666] ResetEvent (hEvent=0xfc) returned 1
	[0247.667] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.687] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0
	[0247.687] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.687] GetProcessHeap () returned 0x800000
	[0247.687] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0247.687] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0
	[0247.687] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0247.687] GetProcessHeap () returned 0x800000
	[0247.687] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0247.687] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0
	[0247.687] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0247.687] GetProcessHeap () returned 0x800000
	[0247.687] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.687] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0247.687] GetProcessHeap () returned 0x800000
	[0247.687] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0247.689] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.689] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1
	[0247.689] GetProcessHeap () returned 0x800000
	[0247.689] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0247.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0247.689] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.689] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0247.689] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0247.689] ResetEvent (hEvent=0xfc) returned 1
	[0247.689] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.700] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
	[0247.700] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0247.700] GetProcessHeap () returned 0x800000
	[0247.700] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0247.700] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1
	[0247.700] GetProcessHeap () returned 0x800000
	[0247.700] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0247.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0247.700] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.700] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0247.700] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0247.700] ResetEvent (hEvent=0xfc) returned 1
	[0247.700] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.711] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
	[0247.711] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0247.711] GetProcessHeap () returned 0x800000
	[0247.711] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0247.711] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1
	[0247.711] GetProcessHeap () returned 0x800000
	[0247.711] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0247.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0247.712] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.712] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0247.712] ResetEvent (hEvent=0xfc) returned 1
	[0247.712] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.726] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0247.726] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
	[0247.726] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0247.726] GetProcessHeap () returned 0x800000
	[0247.727] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0247.727] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0247.727] ResetEvent (hEvent=0xfc) returned 1
	[0247.727] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.746] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0247.746] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1
	[0247.746] GetProcessHeap () returned 0x800000
	[0247.746] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0247.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0247.746] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.746] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0247.747] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0247.747] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1
	[0247.747] ResetEvent (hEvent=0xfc) returned 1
	[0247.747] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.821] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 0
	[0247.821] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0247.821] GetProcessHeap () returned 0x800000
	[0247.821] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0247.821] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0
	[0247.821] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0247.821] GetProcessHeap () returned 0x800000
	[0247.821] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.821] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1
	[0247.821] GetProcessHeap () returned 0x800000
	[0247.821] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0247.822] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.822] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1
	[0247.822] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0
	[0247.822] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0247.822] GetProcessHeap () returned 0x800000
	[0247.822] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.822] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
	[0247.822] GetProcessHeap () returned 0x800000
	[0247.822] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0247.822] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.822] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.822] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0247.822] GetProcessHeap () returned 0x800000
	[0247.822] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.823] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
	[0247.823] GetProcessHeap () returned 0x800000
	[0247.823] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0247.823] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.823] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.823] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0247.823] GetProcessHeap () returned 0x800000
	[0247.823] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.823] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
	[0247.823] GetProcessHeap () returned 0x800000
	[0247.823] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0247.823] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.823] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.823] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0247.823] GetProcessHeap () returned 0x800000
	[0247.823] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.823] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
	[0247.823] GetProcessHeap () returned 0x800000
	[0247.824] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0247.824] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.824] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.824] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0247.824] GetProcessHeap () returned 0x800000
	[0247.824] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.824] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0247.824] GetProcessHeap () returned 0x800000
	[0247.824] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0247.824] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.824] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1
	[0247.824] ResetEvent (hEvent=0xfc) returned 1
	[0247.824] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.836] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1
	[0247.836] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1
	[0247.836] GetProcessHeap () returned 0x800000
	[0247.836] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0247.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0247.837] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.837] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3LKBQZJ3", cAlternateFileName="")) returned 1
	[0247.837] GetProcessHeap () returned 0x800000
	[0247.837] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0247.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.837] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.837] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.837] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.837] GetProcessHeap () returned 0x800000
	[0247.837] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0247.837] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NES5H33", cAlternateFileName="")) returned 1
	[0247.837] GetProcessHeap () returned 0x800000
	[0247.837] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0247.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.837] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.837] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 1
	[0247.837] ResetEvent (hEvent=0xfc) returned 1
	[0247.838] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.848] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 0
	[0247.848] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.848] GetProcessHeap () returned 0x800000
	[0247.848] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0247.848] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKLUIDU0", cAlternateFileName="")) returned 1
	[0247.848] GetProcessHeap () returned 0x800000
	[0247.848] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0247.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.848] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.848] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.848] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.848] GetProcessHeap () returned 0x800000
	[0247.848] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0247.848] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0247.848] ResetEvent (hEvent=0xfc) returned 1
	[0247.848] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.852] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 1
	[0247.852] GetProcessHeap () returned 0x800000
	[0247.852] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0247.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.852] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.852] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.852] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.852] GetProcessHeap () returned 0x800000
	[0247.852] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0247.852] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 0
	[0247.852] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0247.852] GetProcessHeap () returned 0x800000
	[0247.852] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0247.852] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1
	[0247.852] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1
	[0247.852] ResetEvent (hEvent=0xfc) returned 1
	[0247.853] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.876] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0247.876] GetProcessHeap () returned 0x800000
	[0247.876] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0247.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0247.877] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.877] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1
	[0247.877] GetProcessHeap () returned 0x800000
	[0247.877] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0247.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.877] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.877] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0247.877] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.877] GetProcessHeap () returned 0x800000
	[0247.877] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0247.877] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1
	[0247.877] GetProcessHeap () returned 0x800000
	[0247.877] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0247.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.878] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.878] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 1
	[0247.878] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1
	[0247.878] ResetEvent (hEvent=0xfc) returned 1
	[0247.879] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.896] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{4BD65~1.DAT")) returned 1
	[0247.897] ResetEvent (hEvent=0xfc) returned 1
	[0247.897] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.905] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 1
	[0247.905] ResetEvent (hEvent=0xfc) returned 1
	[0247.906] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.915] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 0
	[0247.915] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0247.915] GetProcessHeap () returned 0x800000
	[0247.915] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0247.915] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 0
	[0247.915] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0247.916] GetProcessHeap () returned 0x800000
	[0247.916] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0247.916] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 0
	[0247.916] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0247.916] GetProcessHeap () returned 0x800000
	[0247.916] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0247.916] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0247.916] GetProcessHeap () returned 0x800000
	[0247.916] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0247.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0247.916] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.916] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1
	[0247.916] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1
	[0247.916] ResetEvent (hEvent=0xfc) returned 1
	[0247.916] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.931] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1
	[0247.931] GetProcessHeap () returned 0x800000
	[0247.931] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0247.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0247.932] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.932] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0247.932] GetProcessHeap () returned 0x800000
	[0247.932] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0247.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0247.932] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.932] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0000E713", cAlternateFileName="")) returned 1
	[0247.932] GetProcessHeap () returned 0x800000
	[0247.932] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0247.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0247.933] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0247.933] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0247.933] ResetEvent (hEvent=0xfc) returned 1
	[0247.933] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0247.942] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
	[0247.942] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
	[0247.942] ResetEvent (hEvent=0xfc) returned 1
	[0247.942] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.039] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
	[0248.039] ResetEvent (hEvent=0xfc) returned 1
	[0248.039] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.060] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
	[0248.060] ResetEvent (hEvent=0xfc) returned 1
	[0248.060] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.074] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
	[0248.074] ResetEvent (hEvent=0xfc) returned 1
	[0248.074] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.090] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
	[0248.090] ResetEvent (hEvent=0xfc) returned 1
	[0248.090] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.100] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
	[0248.100] ResetEvent (hEvent=0xfc) returned 1
	[0248.100] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.113] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
	[0248.113] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
	[0248.113] ResetEvent (hEvent=0xfc) returned 1
	[0248.113] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.117] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
	[0248.117] ResetEvent (hEvent=0xfc) returned 1
	[0248.117] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.133] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
	[0248.133] ResetEvent (hEvent=0xfc) returned 1
	[0248.133] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.140] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0
	[0248.141] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0248.141] GetProcessHeap () returned 0x800000
	[0248.141] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0248.141] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1
	[0248.141] GetProcessHeap () returned 0x800000
	[0248.141] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0248.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0248.142] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.142] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0248.142] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
	[0248.142] ResetEvent (hEvent=0xfc) returned 1
	[0248.142] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.150] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
	[0248.150] ResetEvent (hEvent=0xfc) returned 1
	[0248.150] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.167] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
	[0248.168] ResetEvent (hEvent=0xfc) returned 1
	[0248.168] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.311] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
	[0248.311] ResetEvent (hEvent=0xfc) returned 1
	[0248.311] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.322] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
	[0248.322] ResetEvent (hEvent=0xfc) returned 1
	[0248.322] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.332] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
	[0248.333] ResetEvent (hEvent=0xfc) returned 1
	[0248.333] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.342] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
	[0248.342] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
	[0248.343] ResetEvent (hEvent=0xfc) returned 1
	[0248.343] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.363] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
	[0248.363] ResetEvent (hEvent=0xfc) returned 1
	[0248.363] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.404] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
	[0248.405] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
	[0248.405] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0
	[0248.405] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0248.406] GetProcessHeap () returned 0x800000
	[0248.406] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0248.406] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0
	[0248.406] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0248.406] GetProcessHeap () returned 0x800000
	[0248.406] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0248.406] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0248.406] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.406] GetProcessHeap () returned 0x800000
	[0248.406] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.406] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1
	[0248.406] GetProcessHeap () returned 0x800000
	[0248.406] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.406] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.406] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0248.406] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.406] GetProcessHeap () returned 0x800000
	[0248.406] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.407] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0
	[0248.407] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0248.407] GetProcessHeap () returned 0x800000
	[0248.407] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0248.408] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0248.408] GetProcessHeap () returned 0x800000
	[0248.408] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0248.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0248.408] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.408] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.0", cAlternateFileName="")) returned 1
	[0248.409] GetProcessHeap () returned 0x800000
	[0248.409] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.409] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.409] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 1
	[0248.409] GetProcessHeap () returned 0x800000
	[0248.409] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0248.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0248.410] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.410] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7aab700, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7aab700, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-CNRY.FSD", cAlternateFileName="")) returned 1
	[0248.410] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", cAlternateFileName="FSD-{4~1.FSD")) returned 1
	[0248.410] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSF-CTBL.FSF", cAlternateFileName="")) returned 1
	[0248.410] ResetEvent (hEvent=0xfc) returned 1
	[0248.410] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.420] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSF-CTBL.FSF", cAlternateFileName="")) returned 0
	[0248.420] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0248.420] GetProcessHeap () returned 0x800000
	[0248.420] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0248.420] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 0
	[0248.420] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.420] GetProcessHeap () returned 0x800000
	[0248.420] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.420] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1
	[0248.420] GetProcessHeap () returned 0x800000
	[0248.420] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.420] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.420] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0248.421] GetProcessHeap () returned 0x800000
	[0248.421] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0248.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0248.421] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.421] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0248.421] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0248.421] GetProcessHeap () returned 0x800000
	[0248.421] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0248.421] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1
	[0248.421] GetProcessHeap () returned 0x800000
	[0248.421] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0248.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0248.421] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.421] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0248.421] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0248.421] GetProcessHeap () returned 0x800000
	[0248.421] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0248.421] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 0
	[0248.422] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.422] GetProcessHeap () returned 0x800000
	[0248.422] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.422] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 1
	[0248.422] GetProcessHeap () returned 0x800000
	[0248.422] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.423] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.423] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.sig", cAlternateFileName="350DB9~1.SIG")) returned 1
	[0248.423] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.xml", cAlternateFileName="350DB9~1.XML")) returned 1
	[0248.423] ResetEvent (hEvent=0xfc) returned 1
	[0248.423] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.448] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.xml", cAlternateFileName="350DB9~1.XML")) returned 0
	[0248.448] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.448] GetProcessHeap () returned 0x800000
	[0248.448] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.448] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 0
	[0248.448] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0248.448] GetProcessHeap () returned 0x800000
	[0248.448] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0248.448] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0248.448] GetProcessHeap () returned 0x800000
	[0248.448] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0248.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0248.449] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.449] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1
	[0248.449] ResetEvent (hEvent=0xfc) returned 1
	[0248.449] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.501] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c4d2d00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4d2d00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.sharing.xml.obi", cAlternateFileName="OUTLOO~1.OBI")) returned 1
	[0248.501] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1
	[0248.501] GetProcessHeap () returned 0x800000
	[0248.501] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.501] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.502] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.502] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 1
	[0248.502] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 0
	[0248.502] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.502] GetProcessHeap () returned 0x800000
	[0248.502] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.502] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 0
	[0248.502] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0248.502] GetProcessHeap () returned 0x800000
	[0248.502] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0248.502] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0248.502] GetProcessHeap () returned 0x800000
	[0248.502] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0248.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0248.503] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.503] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0248.503] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0248.503] GetProcessHeap () returned 0x800000
	[0248.503] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0248.503] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1
	[0248.503] GetProcessHeap () returned 0x800000
	[0248.503] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0248.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0248.503] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.503] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0248.503] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0248.503] GetProcessHeap () returned 0x800000
	[0248.503] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0248.503] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1
	[0248.503] GetProcessHeap () returned 0x800000
	[0248.503] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0248.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0248.503] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.504] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content14.dat", cAlternateFileName="CONTEN~1.DAT")) returned 1
	[0248.504] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 1
	[0248.504] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 0
	[0248.504] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0248.504] GetProcessHeap () returned 0x800000
	[0248.504] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0248.504] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0248.504] GetProcessHeap () returned 0x800000
	[0248.504] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0248.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0248.504] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.504] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1024", cAlternateFileName="")) returned 1
	[0248.504] GetProcessHeap () returned 0x800000
	[0248.504] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.504] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.505] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0248.505] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.505] GetProcessHeap () returned 0x800000
	[0248.505] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.505] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x34ef3970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0248.505] GetProcessHeap () returned 0x800000
	[0248.505] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x34ef3970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.505] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x34ef3970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.505] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ef3970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8ecd4180, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x49098, dwReserved0=0x0, dwReserved1=0x0, cFileName="StructuredQuerySchema.bin", cAlternateFileName="STRUCT~1.BIN")) returned 1
	[0248.505] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ef3970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8ecd4180, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x49098, dwReserved0=0x0, dwReserved1=0x0, cFileName="StructuredQuerySchema.bin", cAlternateFileName="STRUCT~1.BIN")) returned 0
	[0248.505] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.505] GetProcessHeap () returned 0x800000
	[0248.505] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.505] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x926116d0, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x926116d0, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1
	[0248.505] GetProcessHeap () returned 0x800000
	[0248.505] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x926116d0, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x926116d0, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.505] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x926116d0, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x926116d0, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.506] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1
	[0248.506] GetProcessHeap () returned 0x800000
	[0248.506] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0248.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0248.506] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.506] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.506] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0248.506] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0248.506] GetProcessHeap () returned 0x800000
	[0248.506] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0248.506] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3b9ee2a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b9f09b0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b9f30c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn1", cAlternateFileName="")) returned 1
	[0248.506] GetProcessHeap () returned 0x800000
	[0248.506] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0248.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3b9ee2a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b9f09b0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b9f30c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0248.506] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3b9ee2a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b9f09b0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b9f30c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.506] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3b9f09b0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b9f09b0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b9f09b0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.506] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3b9f09b0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b9f09b0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b9f09b0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0248.507] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0248.507] GetProcessHeap () returned 0x800000
	[0248.507] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0248.507] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x926116d0, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn2", cAlternateFileName="")) returned 1
	[0248.507] GetProcessHeap () returned 0x800000
	[0248.507] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0248.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x926116d0, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0248.507] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x926116d0, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.507] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x92637830, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.507] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x92637830, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0248.507] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0248.507] GetProcessHeap () returned 0x800000
	[0248.507] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0248.507] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x926116d0, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn2", cAlternateFileName="")) returned 0
	[0248.507] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.507] GetProcessHeap () returned 0x800000
	[0248.507] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.507] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65017be0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x65017be0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1
	[0248.507] GetProcessHeap () returned 0x800000
	[0248.507] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65017be0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x65017be0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.508] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65017be0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x65017be0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.508] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64fcb920, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x64fcb920, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x64fcb920, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x4102, dwReserved0=0x0, dwReserved1=0x0, cFileName="cversions.1.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="CVERSI~1.ADA")) returned 1
	[0248.508] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64fcb920, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x64fcb920, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x65017be0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x1eb72, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="{AFBF9~1.ADA")) returned 1
	[0248.508] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6bfff70, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x6bfff70, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x65017be0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x1fd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db", cAlternateFileName="{AFBF9~2.DB")) returned 1
	[0248.508] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64ff1a80, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x64ff1a80, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x65017be0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x1fef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="{AFBF9~2.ADA")) returned 1
	[0248.508] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64ff1a80, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x64ff1a80, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x65017be0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x1fef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="{AFBF9~2.ADA")) returned 0
	[0248.508] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.508] GetProcessHeap () returned 0x800000
	[0248.508] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.508] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x653cfe40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x653cfe40, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer", cAlternateFileName="")) returned 1
	[0248.508] GetProcessHeap () returned 0x800000
	[0248.508] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x653cfe40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x654b4680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.508] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x653cfe40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x654b4680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.508] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x30db3250, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExplorerStartupLog.etl", cAlternateFileName="EXPLOR~2.ETL")) returned 1
	[0248.508] ResetEvent (hEvent=0xfc) returned 1
	[0248.508] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.517] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1e886840, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExplorerStartupLog_RunOnce.etl", cAlternateFileName="EXPLOR~1.ETL")) returned 1
	[0248.517] ResetEvent (hEvent=0xfc) returned 1
	[0248.517] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.534] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65017be0, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x65017be0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x650fc420, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_1024.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="THUMBC~1.ADA")) returned 1
	[0248.535] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6503dd40, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x6503dd40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x651bab00, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x100112, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_256.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="THUMBC~2.ADA")) returned 1
	[0248.535] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650fc420, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x650fc420, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x651bab00, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_32.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="THUMBC~3.ADA")) returned 1
	[0248.535] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65206dc0, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x65206dc0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x653cfe40, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x100112, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_96.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="THUMBC~4.ADA")) returned 1
	[0248.535] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x652791e0, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x652791e0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6548e520, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0xdc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_idx.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="TH39F5~1.ADA")) returned 1
	[0248.535] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x653cfe40, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x653cfe40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x654683c0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_sr.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="TH2165~1.ADA")) returned 1
	[0248.535] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x653cfe40, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x653cfe40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x654683c0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_sr.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="TH2165~1.ADA")) returned 0
	[0248.536] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.536] GetProcessHeap () returned 0x800000
	[0248.536] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.536] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1
	[0248.536] GetProcessHeap () returned 0x800000
	[0248.536] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.536] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.536] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0248.536] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.536] GetProcessHeap () returned 0x800000
	[0248.536] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.536] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0248.536] GetProcessHeap () returned 0x800000
	[0248.536] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.536] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.536] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.537] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1
	[0248.537] GetProcessHeap () returned 0x800000
	[0248.537] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0248.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0248.537] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.537] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.538] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb85ef80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0248.538] ResetEvent (hEvent=0xfc) returned 1
	[0248.538] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.557] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe6f79d60, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHist012019092420190925", cAlternateFileName="MSHIST~1")) returned 1
	[0248.558] GetProcessHeap () returned 0x800000
	[0248.558] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0248.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019092420190925\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe6f79d60, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0248.559] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe6f79d60, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.559] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe6f79d60, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0x83c55340, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0248.559] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe6f79d60, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0x83c55340, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
	[0248.559] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0248.559] GetProcessHeap () returned 0x800000
	[0248.559] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0248.559] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe6f79d60, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHist012019092420190925", cAlternateFileName="MSHIST~1")) returned 0
	[0248.559] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0248.559] GetProcessHeap () returned 0x800000
	[0248.559] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0248.559] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0248.559] GetProcessHeap () returned 0x800000
	[0248.559] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0248.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0248.559] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.559] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.559] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1
	[0248.559] GetProcessHeap () returned 0x800000
	[0248.559] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0248.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0248.560] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.560] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.560] ResetEvent (hEvent=0xfc) returned 1
	[0248.560] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.570] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f0b6db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f0b6db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x432daef0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0248.570] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45c34df0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHist012017071220170713", cAlternateFileName="MSHIST~1")) returned 1
	[0248.570] GetProcessHeap () returned 0x800000
	[0248.570] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0248.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45c34df0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0248.571] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45c34df0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.571] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x45c34df0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0248.571] ResetEvent (hEvent=0xfc) returned 1
	[0248.571] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.586] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x45c34df0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
	[0248.586] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0248.586] GetProcessHeap () returned 0x800000
	[0248.586] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0248.586] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45c34df0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHist012017071220170713", cAlternateFileName="MSHIST~1")) returned 0
	[0248.586] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0248.586] GetProcessHeap () returned 0x800000
	[0248.586] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0248.586] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 0
	[0248.586] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0248.586] GetProcessHeap () returned 0x800000
	[0248.586] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0248.587] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0248.587] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.587] GetProcessHeap () returned 0x800000
	[0248.587] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.587] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1
	[0248.587] GetProcessHeap () returned 0x800000
	[0248.587] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.588] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.588] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0248.588] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0248.589] GetProcessHeap () returned 0x800000
	[0248.589] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0248.589] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe7138400, ftLastAccessTime.dwHighDateTime=0x1d2e625, ftLastWriteTime.dwLowDateTime=0xe7138400, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0248.589] GetProcessHeap () returned 0x800000
	[0248.589] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0248.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe7138400, ftLastAccessTime.dwHighDateTime=0x1d2e625, ftLastWriteTime.dwLowDateTime=0xe7138400, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0248.589] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe7138400, ftLastAccessTime.dwHighDateTime=0x1d2e625, ftLastWriteTime.dwLowDateTime=0xe7138400, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.589] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 1
	[0248.589] GetProcessHeap () returned 0x800000
	[0248.589] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0248.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0248.589] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.590] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e570c75, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.590] ResetEvent (hEvent=0xfc) returned 1
	[0248.590] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.594] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb85ef80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0248.594] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b7a8160, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2b7a8160, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MM5O9XQS", cAlternateFileName="")) returned 1
	[0248.594] GetProcessHeap () returned 0x800000
	[0248.594] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0248.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b7a8160, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2b7a8160, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0248.595] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b7a8160, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2b7a8160, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.595] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.595] ResetEvent (hEvent=0xfc) returned 1
	[0248.595] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.604] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0248.604] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0248.605] GetProcessHeap () returned 0x800000
	[0248.605] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0248.605] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c153ac0, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2c153ac0, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMMR5K9K", cAlternateFileName="")) returned 1
	[0248.605] GetProcessHeap () returned 0x800000
	[0248.605] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0248.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c153ac0, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2c153ac0, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0248.606] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c153ac0, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2c153ac0, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.606] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.606] ResetEvent (hEvent=0xfc) returned 1
	[0248.606] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.792] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0248.792] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0248.818] GetProcessHeap () returned 0x800000
	[0248.818] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0248.828] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b7a8160, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2b7a8160, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIJUQL1C", cAlternateFileName="")) returned 1
	[0248.854] GetProcessHeap () returned 0x800000
	[0248.854] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0248.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b7a8160, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2b7a8160, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0248.927] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b7a8160, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2b7a8160, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.927] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.928] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0248.928] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0248.929] GetProcessHeap () returned 0x800000
	[0248.929] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0248.929] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c153ac0, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2c153ac0, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="X9OHK109", cAlternateFileName="")) returned 1
	[0248.929] GetProcessHeap () returned 0x800000
	[0248.929] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0248.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c153ac0, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2c153ac0, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0248.930] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c153ac0, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2c153ac0, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.930] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.930] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0248.930] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0248.931] GetProcessHeap () returned 0x800000
	[0248.931] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0248.931] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c153ac0, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2c153ac0, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="X9OHK109", cAlternateFileName="")) returned 0
	[0248.931] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0248.931] GetProcessHeap () returned 0x800000
	[0248.931] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0248.931] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x2dbf3370, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2dbf3370, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2dbf3370, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.MSO", cAlternateFileName="")) returned 1
	[0248.931] GetProcessHeap () returned 0x800000
	[0248.931] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0248.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x2dbf3370, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2dbf3370, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2dbf3370, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0248.931] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x2dbf3370, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2dbf3370, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2dbf3370, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.931] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x2dbf3370, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2dbf3370, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2dbf3370, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0248.931] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0248.931] GetProcessHeap () returned 0x800000
	[0248.931] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0248.931] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe7138400, ftCreationTime.dwHighDateTime=0x1d2e625, ftLastAccessTime.dwLowDateTime=0x27b4c650, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x32c0a7d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.Word", cAlternateFileName="CONTEN~1.WOR")) returned 1
	[0248.931] GetProcessHeap () returned 0x800000
	[0248.931] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0248.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe7138400, ftCreationTime.dwHighDateTime=0x1d2e625, ftLastAccessTime.dwLowDateTime=0x27b4c650, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x32c0a7d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0248.932] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe7138400, ftCreationTime.dwHighDateTime=0x1d2e625, ftLastAccessTime.dwLowDateTime=0x27b4c650, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x32c0a7d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.932] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe7138400, ftCreationTime.dwHighDateTime=0x1d2e625, ftLastAccessTime.dwLowDateTime=0x27b4c650, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x32c0a7d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0248.932] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0248.932] GetProcessHeap () returned 0x800000
	[0248.932] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0248.932] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe710360, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0248.932] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51445650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51445650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0248.932] GetProcessHeap () returned 0x800000
	[0248.932] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0248.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51445650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51445650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0248.932] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51445650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51445650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.932] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f10630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f10630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f10630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AntiPhishing", cAlternateFileName="ANTIPH~1")) returned 1
	[0248.932] GetProcessHeap () returned 0x800000
	[0248.932] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0248.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f10630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f10630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f10630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0248.932] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f10630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f10630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f10630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.932] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50f10630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f10630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f10630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x47f94, dwReserved0=0x0, dwReserved1=0x0, cFileName="2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat", cAlternateFileName="2CEDBF~1.DAT")) returned 1
	[0248.933] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50f10630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f10630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f10630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x47f94, dwReserved0=0x0, dwReserved1=0x0, cFileName="2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat", cAlternateFileName="2CEDBF~1.DAT")) returned 0
	[0248.933] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0248.933] GetProcessHeap () returned 0x800000
	[0248.933] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0248.933] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 1
	[0248.933] GetProcessHeap () returned 0x800000
	[0248.933] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0248.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0248.933] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.933] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5137ebf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x5137ebf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9QH4S0GZ", cAlternateFileName="")) returned 1
	[0248.933] GetProcessHeap () returned 0x800000
	[0248.933] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0248.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5137ebf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x5137ebf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0248.934] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5137ebf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x5137ebf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0248.934] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdbb73b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbdbb73b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbdc03670, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x39d41, dwReserved0=0x0, dwReserved1=0x0, cFileName="28-8f3193-f30905ea[1]", cAlternateFileName="28-8F3~1")) returned 1
	[0248.934] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x551dcf90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x551dcf90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5529b670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ecb, dwReserved0=0x0, dwReserved1=0x0, cFileName="528d82a2[1].js", cAlternateFileName="528D82~1.JS")) returned 1
	[0248.935] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454c4930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x135, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA3e3XC[2].png", cAlternateFileName="AA3E3X~2.PNG")) returned 1
	[0248.935] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a1fab0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA3vOVA[1].png", cAlternateFileName="AA3VOV~1.PNG")) returned 1
	[0248.935] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539049f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42EP9[1].png", cAlternateFileName="AA42EP~1.PNG")) returned 1
	[0248.935] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x514ddbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x514ddbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x514ddbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x191, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA54rQj[1].png", cAlternateFileName="AA54RQ~1.PNG")) returned 1
	[0248.935] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA61yi9[1].png", cAlternateFileName="AA61YI~1.PNG")) returned 1
	[0248.935] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fa5350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA8uCo4[1].png", cAlternateFileName="AA8UCO~1.PNG")) returned 1
	[0248.935] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4593b270, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x342, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAdAVrM[1].png", cAlternateFileName="AADAVR~1.PNG")) returned 1
	[0248.935] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf4697f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf4697f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf4b5ab0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x21e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="adServer[1].htm", cAlternateFileName="ADSERV~1.HTM")) returned 1
	[0248.935] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="advertisement.ad[1].js", cAlternateFileName="ADVERT~1.JS")) returned 1
	[0248.935] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x545d0030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545d0030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x545d0030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="async_usersync[1]", cAlternateFileName="ASYNC_~1")) returned 1
	[0248.935] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe9ff7b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe9ff7b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe9ff7b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x534, dwReserved0=0x0, dwReserved1=0x0, cFileName="async_usersync[2]", cAlternateFileName="ASYNC_~2")) returned 1
	[0248.936] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe9ff7b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe9ff7b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe9ff7b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="async_usersync[3]", cAlternateFileName="ASYNC_~3")) returned 1
	[0248.936] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454c4930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB1CcOi[1].png", cAlternateFileName="BB1CCO~1.PNG")) returned 1
	[0248.936] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB46JmN[1].png", cAlternateFileName="BB46JM~1.PNG")) returned 1
	[0248.936] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB5kJAC[1].png", cAlternateFileName="BB5KJA~1.PNG")) returned 1
	[0248.936] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53337450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB5kTiV[1].png", cAlternateFileName="BB5KTI~1.PNG")) returned 1
	[0248.936] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x18c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB6Ma4a[1].png", cAlternateFileName="BB6MA4~1.PNG")) returned 1
	[0248.936] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe399c90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB74fLs[1].png", cAlternateFileName="BB74FL~1.PNG")) returned 1
	[0248.936] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6421e580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6421e580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x642446e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x333f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBIqq8[1].jpg", cAlternateFileName="BBBIQQ~1.JPG")) returned 1
	[0248.937] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x532eb190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x90b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBL0ij[1].jpg", cAlternateFileName="BBBL0I~1.JPG")) returned 1
	[0248.937] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53630fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53630fd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53657130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBLhZX[1].jpg", cAlternateFileName="BBBLHZ~1.JPG")) returned 1
	[0248.937] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53467f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53467f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53467f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBNiEo[1].jpg", cAlternateFileName="BBBNIE~1.JPG")) returned 1
	[0248.937] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b65ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b65ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53b8c150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x176d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO1mQ[1].jpg", cAlternateFileName="BBBO1M~1.JPG")) returned 1
	[0248.937] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d18e120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6d18e120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6d1b4280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6218, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO3tl[1].jpg", cAlternateFileName="BBBO3T~1.JPG")) returned 1
	[0248.937] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x532eb190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x75a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO8dQ[1].jpg", cAlternateFileName="BBBO8D~1.JPG")) returned 1
	[0248.937] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x537add90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x537add90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x537add90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d89, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOe7C[1].jpg", cAlternateFileName="BBBOE7~1.JPG")) returned 1
	[0248.937] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5303d8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5303d8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5303d8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPThN[1].jpg", cAlternateFileName="BBBPTH~1.JPG")) returned 1
	[0248.937] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53063a30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ee7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPUFJ[1].jpg", cAlternateFileName="BBBPUF~1.JPG")) returned 1
	[0248.937] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533a9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533a9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533a9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBQxzx[1].jpg", cAlternateFileName="BBBQXZ~1.JPG")) returned 1
	[0248.937] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1963, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBseMP[1].jpg", cAlternateFileName="BBBSEM~1.JPG")) returned 1
	[0248.938] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53af3bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53af3bd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53af3bd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x16d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBsqNL[1].jpg", cAlternateFileName="BBBSQN~1.JPG")) returned 1
	[0248.938] ResetEvent (hEvent=0xfc) returned 1
	[0248.938] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0248.966] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x515e8570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBTpvW[1].jpg", cAlternateFileName="BBBTPV~1.JPG")) returned 1
	[0248.966] ResetEvent (hEvent=0xfc) returned 1
	[0248.966] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.003] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x974, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVEOW[1].jpg", cAlternateFileName="BBBVEO~1.JPG")) returned 1
	[0249.004] ResetEvent (hEvent=0xfc) returned 1
	[0249.004] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.024] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1e67, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVGsM[1].jpg", cAlternateFileName="BBBVGS~1.JPG")) returned 1
	[0249.024] ResetEvent (hEvent=0xfc) returned 1
	[0249.024] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.057] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530afcf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVIzI[1].jpg", cAlternateFileName="BBBVIZ~1.JPG")) returned 1
	[0249.057] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f59090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f59090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f59090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x97a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVJ4r[1].jpg", cAlternateFileName="BBBVJ4~1.JPG")) returned 1
	[0249.057] ResetEvent (hEvent=0xfc) returned 1
	[0249.057] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.070] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5160e6d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5160e6d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5160e6d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVxM8[1].jpg", cAlternateFileName="BBBVXM~1.JPG")) returned 1
	[0249.070] ResetEvent (hEvent=0xfc) returned 1
	[0249.070] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.094] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538de890, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538de890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538de890, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBz9wz[1].jpg", cAlternateFileName="BBBZ9W~1.JPG")) returned 1
	[0249.094] ResetEvent (hEvent=0xfc) returned 1
	[0249.094] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.097] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6421e580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6421e580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x642446e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x24be, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBzxW1[1].jpg", cAlternateFileName="BBBZXW~1.JPG")) returned 1
	[0249.097] ResetEvent (hEvent=0xfc) returned 1
	[0249.097] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.109] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6125cc20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6125cc20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61282d80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x33a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC06Ub[1].jpg", cAlternateFileName="BBC06U~1.JPG")) returned 1
	[0249.109] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53017770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC095c[1].jpg", cAlternateFileName="BBC095~1.JPG")) returned 1
	[0249.109] ResetEvent (hEvent=0xfc) returned 1
	[0249.109] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.122] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ff1610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ff1610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ff1610, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x17a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0ALC[1].jpg", cAlternateFileName="BBC0AL~1.JPG")) returned 1
	[0249.122] ResetEvent (hEvent=0xfc) returned 1
	[0249.122] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.129] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53089b90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53089b90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53089b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2720, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0lYn[1].jpg", cAlternateFileName="BBC0LY~1.JPG")) returned 1
	[0249.129] ResetEvent (hEvent=0xfc) returned 1
	[0249.129] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.146] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f0cdd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x522, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0mlu[1].jpg", cAlternateFileName="BBC0ML~1.JPG")) returned 1
	[0249.146] ResetEvent (hEvent=0xfc) returned 1
	[0249.146] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.150] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x188f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0rDa[1].jpg", cAlternateFileName="BBC0RD~1.JPG")) returned 1
	[0249.150] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e9a9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e9a9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e9a9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0rDa[2].jpg", cAlternateFileName="BBC0RD~2.JPG")) returned 1
	[0249.150] ResetEvent (hEvent=0xfc) returned 1
	[0249.151] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.171] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e275160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e275160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5e275160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x320d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0tCi[1].jpg", cAlternateFileName="BBC0TC~1.JPG")) returned 1
	[0249.172] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459d37f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459d37f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459d37f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x28f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDK7Yy[1].jpg", cAlternateFileName="BBDK7Y~1.JPG")) returned 1
	[0249.173] ResetEvent (hEvent=0xfc) returned 1
	[0249.173] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.185] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458eefb0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458eefb0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458eefb0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDRbsH[1].jpg", cAlternateFileName="BBDRBS~1.JPG")) returned 1
	[0249.185] ResetEvent (hEvent=0xfc) returned 1
	[0249.185] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.203] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b9c870, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x968, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDZoZR[1].jpg", cAlternateFileName="BBDZOZ~1.JPG")) returned 1
	[0249.203] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458c8e50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE97O8[1].jpg", cAlternateFileName="BBE97O~1.JPG")) returned 1
	[0249.203] ResetEvent (hEvent=0xfc) returned 1
	[0249.203] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.219] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459d37f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459d37f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459d37f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x6e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE9wSt[1].jpg", cAlternateFileName="BBE9WS~1.JPG")) returned 1
	[0249.219] ResetEvent (hEvent=0xfc) returned 1
	[0249.219] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.222] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a6bd70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEcHle[1].jpg", cAlternateFileName="BBECHL~1.JPG")) returned 1
	[0249.222] ResetEvent (hEvent=0xfc) returned 1
	[0249.222] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.236] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458eefb0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458eefb0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458eefb0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2086, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdE0f[1].jpg", cAlternateFileName="BBEDE0~1.JPG")) returned 1
	[0249.237] ResetEvent (hEvent=0xfc) returned 1
	[0249.237] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.247] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe399c90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x97b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdoQv[1].jpg", cAlternateFileName="BBEDOQ~1.JPG")) returned 1
	[0249.247] ResetEvent (hEvent=0xfc) returned 1
	[0249.248] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.273] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458a2cf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x69a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdqEy[1].jpg", cAlternateFileName="BBEDQE~1.JPG")) returned 1
	[0249.273] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdtWw[1].jpg", cAlternateFileName="BBEDTW~1.JPG")) returned 1
	[0249.273] ResetEvent (hEvent=0xfc) returned 1
	[0249.274] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.294] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a1fab0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x687, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdXJj[1].jpg", cAlternateFileName="BBEDXJ~1.JPG")) returned 1
	[0249.294] ResetEvent (hEvent=0xfc) returned 1
	[0249.294] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.334] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4580a770, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x24c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeP0k[1].jpg", cAlternateFileName="BBEEP0~1.JPG")) returned 1
	[0249.334] ResetEvent (hEvent=0xfc) returned 1
	[0249.335] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.412] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b76710, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3417, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeTuf[1].jpg", cAlternateFileName="BBEETU~1.JPG")) returned 1
	[0249.412] ResetEvent (hEvent=0xfc) returned 1
	[0249.412] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.427] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xc0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfE6e[1].jpg", cAlternateFileName="BBEFE6~1.JPG")) returned 1
	[0249.427] ResetEvent (hEvent=0xfc) returned 1
	[0249.427] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.583] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45510bf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfjuT[1].jpg", cAlternateFileName="BBEFJU~1.JPG")) returned 1
	[0249.583] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459f9950, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1f0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEg9QV[1].jpg", cAlternateFileName="BBEG9Q~1.JPG")) returned 1
	[0249.583] ResetEvent (hEvent=0xfc) returned 1
	[0249.583] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.631] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4587cb90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgGSl[1].jpg", cAlternateFileName="BBEGGS~1.JPG")) returned 1
	[0249.632] ResetEvent (hEvent=0xfc) returned 1
	[0249.632] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.638] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458308d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x23fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgiYw[1].jpg", cAlternateFileName="BBEGIY~1.JPG")) returned 1
	[0249.638] ResetEvent (hEvent=0xfc) returned 1
	[0249.638] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.664] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1a59, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgJfz[1].jpg", cAlternateFileName="BBEGJF~1.JPG")) returned 1
	[0249.664] ResetEvent (hEvent=0xfc) returned 1
	[0249.665] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.673] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgqtY[1].jpg", cAlternateFileName="BBEGQT~1.JPG")) returned 1
	[0249.673] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x44ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgsz3[1].jpg", cAlternateFileName="BBEGSZ~1.JPG")) returned 1
	[0249.673] ResetEvent (hEvent=0xfc) returned 1
	[0249.673] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.698] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde8add0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbde8add0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbde8add0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x171b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgtcS[1].jpg", cAlternateFileName="BBEGTC~1.JPG")) returned 1
	[0249.698] ResetEvent (hEvent=0xfc) returned 1
	[0249.698] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.703] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457721f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457721f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457721f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1826, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgtcS[2].jpg", cAlternateFileName="BBEGTC~2.JPG")) returned 1
	[0249.703] ResetEvent (hEvent=0xfc) returned 1
	[0249.703] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.728] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgx5f[1].jpg", cAlternateFileName="BBEGX5~1.JPG")) returned 1
	[0249.728] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b505b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x5e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgx5f[2].jpg", cAlternateFileName="BBEGX5~2.JPG")) returned 1
	[0249.728] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3565, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgyIm[1].jpg", cAlternateFileName="BBEGYI~1.JPG")) returned 1
	[0249.728] ResetEvent (hEvent=0xfc) returned 1
	[0249.729] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.742] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe399c90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBg3ODX[2].png", cAlternateFileName="BBG3OD~2.PNG")) returned 1
	[0249.745] ResetEvent (hEvent=0xfc) returned 1
	[0249.746] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.931] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde8add0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbde8add0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbde8add0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBiyCq[1].png", cAlternateFileName="BBIYCQ~1.PNG")) returned 1
	[0249.931] ResetEvent (hEvent=0xfc) returned 1
	[0249.931] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.936] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f7f1f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBn4lUU[1].png", cAlternateFileName="BBN4LU~1.PNG")) returned 1
	[0249.936] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBnMKeN[1].png", cAlternateFileName="BBNMKE~1.PNG")) returned 1
	[0249.936] ResetEvent (hEvent=0xfc) returned 1
	[0249.936] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.966] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459ad690, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x38b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBwGan9[1].jpg", cAlternateFileName="BBWGAN~1.JPG")) returned 1
	[0249.966] ResetEvent (hEvent=0xfc) returned 1
	[0249.966] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0249.999] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBz3ebk[1].png", cAlternateFileName="BBZ3EB~1.PNG")) returned 1
	[0249.999] ResetEvent (hEvent=0xfc) returned 1
	[0249.999] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.172] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60d4dd60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60d4dd60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60d4dd60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="benefits-5-mobile[1].png", cAlternateFileName="BENEFI~1.PNG")) returned 1
	[0250.172] ResetEvent (hEvent=0xfc) returned 1
	[0250.172] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.198] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61804060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61804060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61850320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[1].loaded_1", cAlternateFileName="CB_GAP~1.LOA")) returned 1
	[0250.198] ResetEvent (hEvent=0xfc) returned 1
	[0250.198] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.213] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60ea49c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60ea49c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60ef0c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-new[1].jpg", cAlternateFileName="CHROME~1.JPG")) returned 1
	[0250.214] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60aec760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60aec760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60b128c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4739, dwReserved0=0x0, dwReserved1=0x0, cFileName="cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE[1].eot", cAlternateFileName="CJZKEO~1.EOT")) returned 1
	[0250.214] ResetEvent (hEvent=0xfc) returned 1
	[0250.214] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.227] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b8c150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b8c150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53bb22b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainerTag[1].js", cAlternateFileName="CONTAI~1.JS")) returned 1
	[0250.228] ResetEvent (hEvent=0xfc) returned 1
	[0250.228] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.242] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe6dfad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe6dfad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe6dfad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainerTag[2].js", cAlternateFileName="CONTAI~2.JS")) returned 1
	[0250.243] ResetEvent (hEvent=0xfc) returned 1
	[0250.243] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.255] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ddbc1a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5ddbc1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5ddbc1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="css[2].txt", cAlternateFileName="CSS_2_~1.TXT")) returned 1
	[0250.255] ResetEvent (hEvent=0xfc) returned 1
	[0250.255] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.266] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0250.266] ResetEvent (hEvent=0xfc) returned 1
	[0250.266] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.278] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5114bad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5114bad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x511bdef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x39a21, dwReserved0=0x0, dwReserved1=0x0, cFileName="f8-028d9f-f30905ea[1]", cAlternateFileName="F8-028~1")) returned 1
	[0250.278] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf893e70, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf893e70, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf893e70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x7f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="fallback_728x90[1].jpg", cAlternateFileName="FALLBA~1.JPG")) returned 1
	[0250.279] ResetEvent (hEvent=0xfc) returned 1
	[0250.279] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.293] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53063a30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1]", cAlternateFileName="GETYPE~1")) returned 1
	[0250.293] ResetEvent (hEvent=0xfc) returned 1
	[0250.293] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.301] ResetEvent (hEvent=0xfc) returned 1
	[0250.301] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.430] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde189b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbde189b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbde189b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1305, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1]", cAlternateFileName="GETYPE~2")) returned 1
	[0250.430] ResetEvent (hEvent=0xfc) returned 1
	[0250.430] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.473] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x551dcf90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x551dcf90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x551dcf90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8[1].txt", cAlternateFileName="IE8_1_~1.TXT")) returned 1
	[0250.473] ResetEvent (hEvent=0xfc) returned 1
	[0250.473] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.734] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44bff750, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44bff750, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44bff750, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[1]", cAlternateFileName="JS_1_~1")) returned 1
	[0250.734] ResetEvent (hEvent=0xfc) returned 1
	[0250.734] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.777] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54e4ae90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54e4ae90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e4ae90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x88e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[1].eot", cAlternateFileName="LATEST~1.EOT")) returned 1
	[0250.777] ResetEvent (hEvent=0xfc) returned 1
	[0250.777] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.787] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54772f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54772f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54772f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1180, dwReserved0=0x0, dwReserved1=0x0, cFileName="meversion[1]", cAlternateFileName="MEVERS~1")) returned 1
	[0250.788] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfaa91b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfaa91b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfaa91b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="only[1].htm", cAlternateFileName="ONLY_1~1.HTM")) returned 1
	[0250.788] ResetEvent (hEvent=0xfc) returned 1
	[0250.788] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.882] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56ed3860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56ed3860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x56ed3860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport[1].htm", cAlternateFileName="PASSPO~1.HTM")) returned 1
	[0250.882] ResetEvent (hEvent=0xfc) returned 1
	[0250.882] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.898] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61282d80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61282d80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9f32, dwReserved0=0x0, dwReserved1=0x0, cFileName="plusone[1].js", cAlternateFileName="PLUSON~1.JS")) returned 1
	[0250.898] ResetEvent (hEvent=0xfc) returned 1
	[0250.898] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.934] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6371bfc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6371bfc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6371bfc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="postmessageRelay[1].htm", cAlternateFileName="POSTME~1.HTM")) returned 1
	[0250.934] ResetEvent (hEvent=0xfc) returned 1
	[0250.935] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.951] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x555ac120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x555ac120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x55a97d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19a6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="search[1].htm", cAlternateFileName="SEARCH~1.HTM")) returned 1
	[0250.951] ResetEvent (hEvent=0xfc) returned 1
	[0250.951] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.960] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54772f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54772f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54772f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c85b, dwReserved0=0x0, dwReserved1=0x0, cFileName="uhf-west-european-default.min[1].css", cAlternateFileName="UHF-WE~1.CSS")) returned 1
	[0250.960] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54726c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54726c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54726c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1687, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCore.4.19.0.ltr.light.min[1].css", cAlternateFileName="WEBCOR~1.CSS")) returned 1
	[0250.960] ResetEvent (hEvent=0xfc) returned 1
	[0250.960] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.980] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54726c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54726c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54726c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1687, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCore.4.19.0.ltr.light.min[1].css", cAlternateFileName="WEBCOR~1.CSS")) returned 0
	[0250.980] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0250.981] GetProcessHeap () returned 0x800000
	[0250.981] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0250.981] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABV8L7MY", cAlternateFileName="")) returned 1
	[0250.981] GetProcessHeap () returned 0x800000
	[0250.981] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0250.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0250.982] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0250.982] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfa36d90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfa36d90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfa83050, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xe455, dwReserved0=0x0, dwReserved1=0x0, cFileName="000000929096[1].gif", cAlternateFileName="000000~1.GIF")) returned 1
	[0250.982] ResetEvent (hEvent=0xfc) returned 1
	[0250.982] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0250.997] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6384cac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6384cac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6384cac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2929, dwReserved0=0x0, dwReserved1=0x0, cFileName="1223855322-postmessagerelay[1].js", cAlternateFileName="122385~1.JS")) returned 1
	[0250.997] ResetEvent (hEvent=0xfc) returned 1
	[0250.997] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.008] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458a2cf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA3e1oO[1].png", cAlternateFileName="AA3E1O~1.PNG")) returned 1
	[0251.008] ResetEvent (hEvent=0xfc) returned 1
	[0251.008] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.096] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459d37f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459d37f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459d37f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA429NP[1].png", cAlternateFileName="AA429N~1.PNG")) returned 1
	[0251.096] ResetEvent (hEvent=0xfc) returned 1
	[0251.096] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.109] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530d5e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530d5e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530fbfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x252, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42pjY[1].png", cAlternateFileName="AA42PJ~1.PNG")) returned 1
	[0251.109] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe327870, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe327870, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe327870, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA61AKN[2].png", cAlternateFileName="AA61AK~2.PNG")) returned 1
	[0251.109] ResetEvent (hEvent=0xfc) returned 1
	[0251.109] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.130] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA6KizP[2].png", cAlternateFileName="AA6KIZ~2.PNG")) returned 1
	[0251.130] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x27b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA7XCQ3[1].png", cAlternateFileName="AA7XCQ~1.PNG")) returned 1
	[0251.130] ResetEvent (hEvent=0xfc) returned 1
	[0251.130] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.146] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA8Tave[1].png", cAlternateFileName="AA8TAV~1.PNG")) returned 1
	[0251.146] ResetEvent (hEvent=0xfc) returned 1
	[0251.146] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.170] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe399c90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAfOIDq[1].png", cAlternateFileName="AAFOID~1.PNG")) returned 1
	[0251.171] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAkhMz9[2].png", cAlternateFileName="AAKHMZ~2.PNG")) returned 1
	[0251.171] ResetEvent (hEvent=0xfc) returned 1
	[0251.171] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.181] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAmRY2Q[1].png", cAlternateFileName="AAMRY2~1.PNG")) returned 1
	[0251.181] ResetEvent (hEvent=0xfc) returned 1
	[0251.181] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.186] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAni8qk[1].png", cAlternateFileName="AANI8Q~1.PNG")) returned 1
	[0251.186] ResetEvent (hEvent=0xfc) returned 1
	[0251.186] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.203] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf1239b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf1239b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf1239b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x7a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="adition[1].js", cAlternateFileName="ADITIO~1.JS")) returned 1
	[0251.203] ResetEvent (hEvent=0xfc) returned 1
	[0251.203] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.215] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53c4a830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="async_usersync[1].htm", cAlternateFileName="ASYNC_~1.HTM")) returned 1
	[0251.216] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53bb22b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bb22b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53bfe570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5feb, dwReserved0=0x0, dwReserved1=0x0, cFileName="b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg", cAlternateFileName="B367C0~1.JPG")) returned 1
	[0251.216] ResetEvent (hEvent=0xfc) returned 1
	[0251.216] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.327] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459613d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB8jcOr[2].png", cAlternateFileName="BB8JCO~2.PNG")) returned 1
	[0251.327] ResetEvent (hEvent=0xfc) returned 1
	[0251.327] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.340] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBB8ZbM[1].jpg", cAlternateFileName="BBB8ZB~1.JPG")) returned 1
	[0251.340] ResetEvent (hEvent=0xfc) returned 1
	[0251.340] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.394] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a1fab0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x234, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBB9wH0[1].png", cAlternateFileName="BBB9WH~1.PNG")) returned 1
	[0251.394] ResetEvent (hEvent=0xfc) returned 1
	[0251.394] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.437] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x642446e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x642446e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x642446e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBCFjo[1].jpg", cAlternateFileName="BBBCFJ~1.JPG")) returned 1
	[0251.438] ResetEvent (hEvent=0xfc) returned 1
	[0251.438] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.448] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533cf9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533cf9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533cf9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBDtcM[1].jpg", cAlternateFileName="BBBDTC~1.JPG")) returned 1
	[0251.448] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b8c150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b8c150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53b8c150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBIeNJ[1].jpg", cAlternateFileName="BBBIEN~1.JPG")) returned 1
	[0251.448] ResetEvent (hEvent=0xfc) returned 1
	[0251.448] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.567] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53598a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53598a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53598a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x711, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBImKX[1].jpg", cAlternateFileName="BBBIMK~1.JPG")) returned 1
	[0251.567] ResetEvent (hEvent=0xfc) returned 1
	[0251.568] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.593] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b9c870, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2569, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBL4R9[1].jpg", cAlternateFileName="BBBL4R~1.JPG")) returned 1
	[0251.593] ResetEvent (hEvent=0xfc) returned 1
	[0251.593] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.607] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539049f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBLhTZ[1].jpg", cAlternateFileName="BBBLHT~1.JPG")) returned 1
	[0251.607] ResetEvent (hEvent=0xfc) returned 1
	[0251.607] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.618] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533a9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBnhZY[1].jpg", cAlternateFileName="BBBNHZ~1.JPG")) returned 1
	[0251.619] ResetEvent (hEvent=0xfc) returned 1
	[0251.619] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.643] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x671dfee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x671dfee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x67206040, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPhAr[1].jpg", cAlternateFileName="BBBPHA~1.JPG")) returned 1
	[0251.643] ResetEvent (hEvent=0xfc) returned 1
	[0251.644] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.654] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c21, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPiby[1].jpg", cAlternateFileName="BBBPIB~1.JPG")) returned 1
	[0251.654] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53063a30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x16bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPmXJ[1].jpg", cAlternateFileName="BBBPMX~1.JPG")) returned 1
	[0251.654] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530d5e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530d5e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x21feb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPS37[1].png", cAlternateFileName="BBBPS3~1.PNG")) returned 1
	[0251.654] ResetEvent (hEvent=0xfc) returned 1
	[0251.654] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.666] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBQiBF[1].jpg", cAlternateFileName="BBBQIB~1.JPG")) returned 1
	[0251.667] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533cf9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533cf9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533cf9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBty8h[1].jpg", cAlternateFileName="BBBTY8~1.JPG")) returned 1
	[0251.667] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5303d8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5303d8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5303d8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVACL[1].jpg", cAlternateFileName="BBBVAC~1.JPG")) returned 1
	[0251.667] ResetEvent (hEvent=0xfc) returned 1
	[0251.667] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.694] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e29b2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e29b2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5e29b2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c41, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVGyR[1].jpg", cAlternateFileName="BBBVGY~1.JPG")) returned 1
	[0251.695] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x515e8570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVMtX[1].jpg", cAlternateFileName="BBBVMT~1.JPG")) returned 1
	[0251.695] ResetEvent (hEvent=0xfc) returned 1
	[0251.695] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.705] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5530da90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVYsu[1].jpg", cAlternateFileName="BBBVYS~1.JPG")) returned 1
	[0251.706] ResetEvent (hEvent=0xfc) returned 1
	[0251.706] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.714] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5154fff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5154fff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51576150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x76a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBWLtW[1].jpg", cAlternateFileName="BBBWLT~1.JPG")) returned 1
	[0251.714] ResetEvent (hEvent=0xfc) returned 1
	[0251.715] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.727] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f32f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f32f30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f32f30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x95f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBX3xB[1].jpg", cAlternateFileName="BBBX3X~1.JPG")) returned 1
	[0251.728] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533112f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533112f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533112f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x241e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBY98e[1].jpg", cAlternateFileName="BBBY98~1.JPG")) returned 1
	[0251.728] ResetEvent (hEvent=0xfc) returned 1
	[0251.728] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.758] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBZYVP[1].jpg", cAlternateFileName="BBBZYV~1.JPG")) returned 1
	[0251.759] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x192a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC04o2[1].jpg", cAlternateFileName="BBC04O~1.JPG")) returned 1
	[0251.759] ResetEvent (hEvent=0xfc) returned 1
	[0251.759] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.772] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC04ok[1].jpg", cAlternateFileName="BBC04O~2.JPG")) returned 1
	[0251.772] ResetEvent (hEvent=0xfc) returned 1
	[0251.772] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.774] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539e9230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539e9230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539e9230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC04we[1].jpg", cAlternateFileName="BBC04W~1.JPG")) returned 1
	[0251.774] ResetEvent (hEvent=0xfc) returned 1
	[0251.774] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.792] ResetEvent (hEvent=0xfc) returned 1
	[0251.792] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.804] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e02430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e02430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC05rl[1].jpg", cAlternateFileName="BBC05R~1.JPG")) returned 1
	[0251.804] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ec0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC05rl[2].jpg", cAlternateFileName="BBC05R~2.JPG")) returned 1
	[0251.804] ResetEvent (hEvent=0xfc) returned 1
	[0251.804] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.819] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ff1610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ff1610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ff1610, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1b4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0ATj[1].jpg", cAlternateFileName="BBC0AT~1.JPG")) returned 1
	[0251.819] ResetEvent (hEvent=0xfc) returned 1
	[0251.819] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.856] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5392ab50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5392ab50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5392ab50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x751, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0D8i[1].jpg", cAlternateFileName="BBC0D8~1.JPG")) returned 1
	[0251.857] ResetEvent (hEvent=0xfc) returned 1
	[0251.857] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.869] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51256470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0g7a[1].jpg", cAlternateFileName="BBC0G7~1.JPG")) returned 1
	[0251.870] ResetEvent (hEvent=0xfc) returned 1
	[0251.870] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.874] ResetEvent (hEvent=0xfc) returned 1
	[0251.875] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.895] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f7f1f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0w1b[1].jpg", cAlternateFileName="BBC0W1~1.JPG")) returned 1
	[0251.896] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x55333bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0xLt[1].jpg", cAlternateFileName="BBC0XL~1.JPG")) returned 1
	[0251.896] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xb58, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDWA22[1].jpg", cAlternateFileName="BBDWA2~1.JPG")) returned 1
	[0251.896] ResetEvent (hEvent=0xfc) returned 1
	[0251.896] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.907] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a45c10, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x91d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE7d3b[1].jpg", cAlternateFileName="BBE7D3~1.JPG")) returned 1
	[0251.907] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45583010, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45583010, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x455a9170, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2850, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE85ld[1].jpg", cAlternateFileName="BBE85L~1.JPG")) returned 1
	[0251.907] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459613d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x16ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdckp[1].jpg", cAlternateFileName="BBEDCK~1.JPG")) returned 1
	[0251.907] ResetEvent (hEvent=0xfc) returned 1
	[0251.907] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.916] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdMci[1].jpg", cAlternateFileName="BBEDMC~1.JPG")) returned 1
	[0251.922] ResetEvent (hEvent=0xfc) returned 1
	[0251.922] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.929] ResetEvent (hEvent=0xfc) returned 1
	[0251.930] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.961] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4580a770, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4580a770, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4580a770, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdSLV[1].jpg", cAlternateFileName="BBEDSL~1.JPG")) returned 1
	[0251.961] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458c8e50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x87f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEe2Pd[1].jpg", cAlternateFileName="BBEE2P~1.JPG")) returned 1
	[0251.961] ResetEvent (hEvent=0xfc) returned 1
	[0251.961] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.970] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4587cb90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3faf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEe4Oo[1].png", cAlternateFileName="BBEE4O~1.PNG")) returned 1
	[0251.971] ResetEvent (hEvent=0xfc) returned 1
	[0251.971] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.980] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b505b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEe6Ew[1].jpg", cAlternateFileName="BBEE6E~1.JPG")) returned 1
	[0251.980] ResetEvent (hEvent=0xfc) returned 1
	[0251.980] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0251.987] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454c4930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeFp3[1].jpg", cAlternateFileName="BBEEFP~1.JPG")) returned 1
	[0251.987] ResetEvent (hEvent=0xfc) returned 1
	[0251.988] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.001] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe3bfdf0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe3bfdf0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe3bfdf0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeGwU[1].jpg", cAlternateFileName="BBEEGW~1.JPG")) returned 1
	[0252.001] ResetEvent (hEvent=0xfc) returned 1
	[0252.001] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.135] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b505b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x7be, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeUg0[1].jpg", cAlternateFileName="BBEEUG~1.JPG")) returned 1
	[0252.136] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459ad690, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeZnr[1].jpg", cAlternateFileName="BBEEZN~1.JPG")) returned 1
	[0252.136] ResetEvent (hEvent=0xfc) returned 1
	[0252.136] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.152] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2f76, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEf5Lq[1].jpg", cAlternateFileName="BBEF5L~1.JPG")) returned 1
	[0252.152] ResetEvent (hEvent=0xfc) returned 1
	[0252.154] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.165] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4574c090, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfwtU[1].jpg", cAlternateFileName="BBEFWT~1.JPG")) returned 1
	[0252.166] ResetEvent (hEvent=0xfc) returned 1
	[0252.166] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.167] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xa07, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfzSd[1].jpg", cAlternateFileName="BBEFZS~1.JPG")) returned 1
	[0252.169] ResetEvent (hEvent=0xfc) returned 1
	[0252.170] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.177] ResetEvent (hEvent=0xfc) returned 1
	[0252.177] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.189] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454eaa90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454eaa90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454eaa90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgCuQ[1].jpg", cAlternateFileName="BBEGCU~1.JPG")) returned 1
	[0252.193] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454eaa90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1a65, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgHzB[1].jpg", cAlternateFileName="BBEGHZ~1.JPG")) returned 1
	[0252.193] ResetEvent (hEvent=0xfc) returned 1
	[0252.193] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.222] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde8add0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbde8add0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbdeb0f30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5a45, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgIl2[1].jpg", cAlternateFileName="BBEGIL~1.JPG")) returned 1
	[0252.222] ResetEvent (hEvent=0xfc) returned 1
	[0252.226] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.230] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b2a450, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x388f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgIl2[2].jpg", cAlternateFileName="BBEGIL~2.JPG")) returned 1
	[0252.231] ResetEvent (hEvent=0xfc) returned 1
	[0252.231] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.247] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1e97, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgIyL[1].jpg", cAlternateFileName="BBEGIY~1.JPG")) returned 1
	[0252.248] ResetEvent (hEvent=0xfc) returned 1
	[0252.248] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.274] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x23bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgkY6[1].jpg", cAlternateFileName="BBEGKY~1.JPG")) returned 1
	[0252.276] ResetEvent (hEvent=0xfc) returned 1
	[0252.285] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.287] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4574c090, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8df, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgLzV[1].jpg", cAlternateFileName="BBEGLZ~1.JPG")) returned 1
	[0252.294] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a45c10, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2b8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgUri[1].jpg", cAlternateFileName="BBEGUR~1.JPG")) returned 1
	[0252.295] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457721f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457721f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457721f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x201f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgXBv[1].jpg", cAlternateFileName="BBEGXB~1.JPG")) returned 1
	[0252.297] ResetEvent (hEvent=0xfc) returned 1
	[0252.304] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.305] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe327870, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe327870, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe34d9d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgZME[1].jpg", cAlternateFileName="BBEGZM~1.JPG")) returned 1
	[0252.305] ResetEvent (hEvent=0xfc) returned 1
	[0252.305] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.310] ResetEvent (hEvent=0xfc) returned 1
	[0252.312] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.322] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBghfVy[1].png", cAlternateFileName="BBGHFV~1.PNG")) returned 1
	[0252.326] ResetEvent (hEvent=0xfc) returned 1
	[0252.326] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.333] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBkwUr[1].png", cAlternateFileName="BBKWUR~1.PNG")) returned 1
	[0252.336] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a45c10, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x23b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBlBV0U[1].png", cAlternateFileName="BBLBV0~1.PNG")) returned 1
	[0252.336] ResetEvent (hEvent=0xfc) returned 1
	[0252.336] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.357] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5159c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3376, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBzhWWE[1].jpg", cAlternateFileName="BBZHWW~1.JPG")) returned 1
	[0252.361] ResetEvent (hEvent=0xfc) returned 1
	[0252.361] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.400] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60baae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60baae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60c433c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="benefits-2[1].jpg", cAlternateFileName="BENEFI~2.JPG")) returned 1
	[0252.401] ResetEvent (hEvent=0xfc) returned 1
	[0252.401] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.407] ResetEvent (hEvent=0xfc) returned 1
	[0252.407] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.432] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60b84ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60b84ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60c1d260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="benefits-4[1].jpg", cAlternateFileName="BENEFI~1.JPG")) returned 1
	[0252.435] ResetEvent (hEvent=0xfc) returned 1
	[0252.438] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.449] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf4dbc10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf4dbc10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf4dbc10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6f15, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap[1].js", cAlternateFileName="BOOTST~1.JS")) returned 1
	[0252.451] ResetEvent (hEvent=0xfc) returned 1
	[0252.454] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.465] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x583e0320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x583e0320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x583e0320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser[1].htm", cAlternateFileName="BROWSE~1.HTM")) returned 1
	[0252.469] ResetEvent (hEvent=0xfc) returned 1
	[0252.470] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.479] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b2b1b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b2b1b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b2b1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bs-jsdep[1].css", cAlternateFileName="BS-JSD~1.CSS")) returned 1
	[0252.479] ResetEvent (hEvent=0xfc) returned 1
	[0252.480] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.489] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61341460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61341460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x613675c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[1].loaded_0", cAlternateFileName="CB_GAP~1.LOA")) returned 1
	[0252.490] ResetEvent (hEvent=0xfc) returned 1
	[0252.491] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.499] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="collect[1].gif", cAlternateFileName="COLLEC~1.GIF")) returned 1
	[0252.500] ResetEvent (hEvent=0xfc) returned 1
	[0252.501] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.507] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b51310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b51310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b51310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29349, dwReserved0=0x0, dwReserved1=0x0, cFileName="core[1].css", cAlternateFileName="CORE_1~1.CSS")) returned 1
	[0252.510] ResetEvent (hEvent=0xfc) returned 1
	[0252.511] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.570] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0252.574] ResetEvent (hEvent=0xfc) returned 1
	[0252.574] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.597] ResetEvent (hEvent=0xfc) returned 1
	[0252.597] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.619] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54ca7f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54ca7f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54ca7f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DevCMDL2.2.18[1].eot", cAlternateFileName="DEVCMD~1.EOT")) returned 1
	[0252.619] ResetEvent (hEvent=0xfc) returned 1
	[0252.619] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.639] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5120a1b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5120a1b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5120a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e151e5[1].gif", cAlternateFileName="E151E5~1.GIF")) returned 1
	[0252.639] ResetEvent (hEvent=0xfc) returned 1
	[0252.639] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.652] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5101afd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5101afd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5101afd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x24e29, dwReserved0=0x0, dwReserved1=0x0, cFileName="e4-190963-91cdfbc1[1].txt", cAlternateFileName="E4-190~1.TXT")) returned 1
	[0252.652] ResetEvent (hEvent=0xfc) returned 1
	[0252.652] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.668] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60b5eb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60b5eb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60f89200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf8f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula_text[1].htm", cAlternateFileName="EULA_T~1.HTM")) returned 1
	[0252.669] ResetEvent (hEvent=0xfc) returned 1
	[0252.669] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.708] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62410fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62410fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x62410fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x34ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="f[1].txt", cAlternateFileName="F_1_~1.TXT")) returned 1
	[0252.729] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53089b90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53089b90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53089b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1254, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]", cAlternateFileName="GETYPE~1")) returned 1
	[0252.734] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60ef0c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60ef0c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60f16de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="google_plus_16dp[1].png", cAlternateFileName="GOOGLE~1.PNG")) returned 1
	[0252.734] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de2e5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5de2e5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5de54720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="index[1].htm", cAlternateFileName="INDEX_~1.HTM")) returned 1
	[0252.735] ResetEvent (hEvent=0xfc) returned 1
	[0252.735] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.739] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54fa1af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54fa1af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54fa1af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="print[1].txt", cAlternateFileName="PRINT_~1.TXT")) returned 1
	[0252.739] ResetEvent (hEvent=0xfc) returned 1
	[0252.739] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.785] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f697b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44f697b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44f8f910, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x15429, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard[1]", cAlternateFileName="STANDA~1")) returned 1
	[0252.785] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfbb3b50, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfbb3b50, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfbb3b50, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="tecjslog[1].png", cAlternateFileName="TECJSL~1.PNG")) returned 1
	[0252.785] ResetEvent (hEvent=0xfc) returned 1
	[0252.785] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.824] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x548efd10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x548efd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x548efd10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="uhf-main.var.min[1].js", cAlternateFileName="UHF-MA~1.JS")) returned 1
	[0252.842] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5386c470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5386c470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5386c470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2dd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[1]", cAlternateFileName="V2_1_~1")) returned 1
	[0252.845] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5386c470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5386c470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5386c470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[2]", cAlternateFileName="V2_2_~1")) returned 1
	[0252.848] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe751ef0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe751ef0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe751ef0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[3]", cAlternateFileName="V2_3_~1")) returned 1
	[0252.848] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe8829f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe8829f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe8829f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2da9, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[4]", cAlternateFileName="V2_4_~1")) returned 1
	[0252.848] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe8829f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe8829f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe8829f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2da9, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[4]", cAlternateFileName="V2_4_~1")) returned 0
	[0252.848] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0252.849] GetProcessHeap () returned 0x800000
	[0252.849] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0252.849] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0252.849] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x527ba6f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x527ba6f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IKQEEPZR", cAlternateFileName="")) returned 1
	[0252.849] GetProcessHeap () returned 0x800000
	[0252.849] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0252.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x527ba6f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x527ba6f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0252.850] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x527ba6f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x527ba6f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0252.850] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45027e90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45027e90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45027e90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xa756, dwReserved0=0x0, dwReserved1=0x0, cFileName="19619569[1].gif", cAlternateFileName="196195~1.GIF")) returned 1
	[0252.850] ResetEvent (hEvent=0xfc) returned 1
	[0252.851] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.884] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54962130, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54962130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x549ae3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x461fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="7962161087[1].js", cAlternateFileName="796216~1.JS")) returned 1
	[0252.884] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53017770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA3DGHW[1].png", cAlternateFileName="AA3DGH~1.PNG")) returned 1
	[0252.897] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA3e1pt[2].png", cAlternateFileName="AA3E1P~2.PNG")) returned 1
	[0252.900] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42ckd[1].png", cAlternateFileName="AA42CK~1.PNG")) returned 1
	[0252.901] ResetEvent (hEvent=0xfc) returned 1
	[0252.901] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.908] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a1fab0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42eYr[1].png", cAlternateFileName="AA42EY~1.PNG")) returned 1
	[0252.910] ResetEvent (hEvent=0xfc) returned 1
	[0252.910] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.920] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA61ILp[2].png", cAlternateFileName="AA61IL~2.PNG")) returned 1
	[0252.921] ResetEvent (hEvent=0xfc) returned 1
	[0252.922] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.926] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50ebbff0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50ebbff0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50ebbff0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA6SNZ6[1].png", cAlternateFileName="AA6SNZ~1.PNG")) returned 1
	[0252.926] ResetEvent (hEvent=0xfc) returned 1
	[0252.939] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.958] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454eaa90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454eaa90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454eaa90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAbyinC[1].png", cAlternateFileName="AABYIN~1.PNG")) returned 1
	[0252.958] ResetEvent (hEvent=0xfc) returned 1
	[0252.959] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.980] ResetEvent (hEvent=0xfc) returned 1
	[0252.983] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0252.986] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x340b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAicW5W[1].jpg", cAlternateFileName="AAICW5~1.JPG")) returned 1
	[0252.991] ResetEvent (hEvent=0xfc) returned 1
	[0252.991] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.002] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538925d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538925d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAj0doQ[1].jpg", cAlternateFileName="AAJ0DO~1.JPG")) returned 1
	[0253.004] ResetEvent (hEvent=0xfc) returned 1
	[0253.008] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.009] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5159c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAkqhIf[1].png", cAlternateFileName="AAKQHI~1.PNG")) returned 1
	[0253.011] ResetEvent (hEvent=0xfc) returned 1
	[0253.014] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.035] ResetEvent (hEvent=0xfc) returned 1
	[0253.036] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.045] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458308d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x278e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAmo09p[1].jpg", cAlternateFileName="AAMO09~1.JPG")) returned 1
	[0253.050] ResetEvent (hEvent=0xfc) returned 1
	[0253.050] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.058] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAmUyV2[1].png", cAlternateFileName="AAMUYV~1.PNG")) returned 1
	[0253.058] ResetEvent (hEvent=0xfc) returned 1
	[0253.058] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.072] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAn7gKR[1].png", cAlternateFileName="AAN7GK~1.PNG")) returned 1
	[0253.072] ResetEvent (hEvent=0xfc) returned 1
	[0253.074] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.093] ResetEvent (hEvent=0xfc) returned 1
	[0253.093] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.155] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61be2420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61be2420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61be2420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x650, dwReserved0=0x0, dwReserved1=0x0, cFileName="activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm", cAlternateFileName="ACTIVI~1.HTM")) returned 1
	[0253.155] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2a0770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf2a0770, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf2a0770, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfscript[1]", cAlternateFileName="ADFSCR~1")) returned 1
	[0253.155] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf54e030, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf54e030, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf54e030, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xf1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfserve[1]", cAlternateFileName="ADFSER~1")) returned 1
	[0253.155] ResetEvent (hEvent=0xfc) returned 1
	[0253.155] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.277] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533a9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533a9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533a9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11835, dwReserved0=0x0, dwReserved1=0x0, cFileName="ast[2].js", cAlternateFileName="AST_2_~1.JS")) returned 1
	[0253.287] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53d7b330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53d7b330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53d7b330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="async_usersync[1]", cAlternateFileName="ASYNC_~1")) returned 1
	[0253.371] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5108d3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5108d3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x86e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="b2fd15[1].eot", cAlternateFileName="B2FD15~1.EOT")) returned 1
	[0253.373] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB5zDwX[1].png", cAlternateFileName="BB5ZDW~1.PNG")) returned 1
	[0253.378] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBaK3Nm[1].png", cAlternateFileName="BBAK3N~1.PNG")) returned 1
	[0253.378] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53337450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2143, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBLcCz[1].jpg", cAlternateFileName="BBBLCC~1.JPG")) returned 1
	[0253.378] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5348e0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5348e0b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5348e0b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x912, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBLdzQ[1].jpg", cAlternateFileName="BBBLDZ~1.JPG")) returned 1
	[0253.378] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x532eb190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO1mQ[1].jpg", cAlternateFileName="BBBO1M~1.JPG")) returned 1
	[0253.379] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x537add90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x537add90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x537add90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO1qB[1].jpg", cAlternateFileName="BBBO1Q~1.JPG")) returned 1
	[0253.389] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOIAt[1].jpg", cAlternateFileName="BBBOIA~1.JPG")) returned 1
	[0253.389] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539049f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOmuh[1].jpg", cAlternateFileName="BBBOMU~1.JPG")) returned 1
	[0253.389] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53467f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53467f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5348e0b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9be, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPK5J[1].jpg", cAlternateFileName="BBBPK5~1.JPG")) returned 1
	[0253.390] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1694, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPMvJ[1].jpg", cAlternateFileName="BBBPMV~1.JPG")) returned 1
	[0253.390] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539e9230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539e9230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53a0f390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBUL3E[1].jpg", cAlternateFileName="BBBUL3~1.JPG")) returned 1
	[0253.390] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x515e8570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBUqkT[1].jpg", cAlternateFileName="BBBUQK~1.JPG")) returned 1
	[0253.390] ResetEvent (hEvent=0xfc) returned 1
	[0253.390] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.435] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f59090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f59090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f59090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBUqkT[2].jpg", cAlternateFileName="BBBUQK~2.JPG")) returned 1
	[0253.465] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530afcf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBX3z0[1].jpg", cAlternateFileName="BBBX3Z~1.JPG")) returned 1
	[0253.466] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBYEW1[1].jpg", cAlternateFileName="BBBYEW~1.JPG")) returned 1
	[0253.467] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ec0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBYfEH[1].jpg", cAlternateFileName="BBBYFE~1.JPG")) returned 1
	[0253.467] ResetEvent (hEvent=0xfc) returned 1
	[0253.467] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.475] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2bd440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2bd440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5b2bd440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ca1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBZ20W[1].jpg", cAlternateFileName="BBBZ20~1.JPG")) returned 1
	[0253.476] ResetEvent (hEvent=0xfc) returned 1
	[0253.477] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.483] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53950cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53950cb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539c30d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1f37, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBzaxY[1].jpg", cAlternateFileName="BBBZAX~1.JPG")) returned 1
	[0253.485] ResetEvent (hEvent=0xfc) returned 1
	[0253.486] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.494] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53089b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2131, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBZzuz[1].jpg", cAlternateFileName="BBBZZU~1.JPG")) returned 1
	[0253.496] ResetEvent (hEvent=0xfc) returned 1
	[0253.496] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.501] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5530da90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x370a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC03B1[1].jpg", cAlternateFileName="BBC03B~1.JPG")) returned 1
	[0253.504] ResetEvent (hEvent=0xfc) returned 1
	[0253.507] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.516] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51256470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC04o2[1].jpg", cAlternateFileName="BBC04O~1.JPG")) returned 1
	[0253.517] ResetEvent (hEvent=0xfc) returned 1
	[0253.517] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.526] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53657130, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53657130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53657130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2036, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC06ZQ[1].jpg", cAlternateFileName="BBC06Z~1.JPG")) returned 1
	[0253.528] ResetEvent (hEvent=0xfc) returned 1
	[0253.528] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.537] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2bd440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2bd440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5b2bd440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0ALC[1].jpg", cAlternateFileName="BBC0AL~1.JPG")) returned 1
	[0253.537] ResetEvent (hEvent=0xfc) returned 1
	[0253.539] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.547] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x884, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0BiZ[1].jpg", cAlternateFileName="BBC0BI~1.JPG")) returned 1
	[0253.550] ResetEvent (hEvent=0xfc) returned 1
	[0253.550] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.555] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f0cdd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0FXU[1].jpg", cAlternateFileName="BBC0FX~1.JPG")) returned 1
	[0253.558] ResetEvent (hEvent=0xfc) returned 1
	[0253.558] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.569] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61282d80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61282d80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0FXU[2].jpg", cAlternateFileName="BBC0FX~2.JPG")) returned 1
	[0253.569] ResetEvent (hEvent=0xfc) returned 1
	[0253.571] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.582] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0mkg[1].jpg", cAlternateFileName="BBC0MK~1.JPG")) returned 1
	[0253.584] ResetEvent (hEvent=0xfc) returned 1
	[0253.584] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.594] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e9a9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e9a9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e9a9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0mkg[2].jpg", cAlternateFileName="BBC0MK~2.JPG")) returned 1
	[0253.594] ResetEvent (hEvent=0xfc) returned 1
	[0253.595] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.602] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5127c5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5127c5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5127c5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x17af, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0oQi[1].jpg", cAlternateFileName="BBC0OQ~1.JPG")) returned 1
	[0253.604] ResetEvent (hEvent=0xfc) returned 1
	[0253.604] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.624] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fa5350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0tCi[1].jpg", cAlternateFileName="BBC0TC~1.JPG")) returned 1
	[0253.624] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459f9950, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x350a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBCM2U2[1].jpg", cAlternateFileName="BBCM2U~1.JPG")) returned 1
	[0253.624] ResetEvent (hEvent=0xfc) returned 1
	[0253.640] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.642] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4593b270, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDGTbx[1].jpg", cAlternateFileName="BBDGTB~1.JPG")) returned 1
	[0253.643] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe399c90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDk44m[1].png", cAlternateFileName="BBDK44~1.PNG")) returned 1
	[0253.643] ResetEvent (hEvent=0xfc) returned 1
	[0253.643] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.667] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a6bd70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2d04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDWXoC[1].jpg", cAlternateFileName="BBDWXO~1.JPG")) returned 1
	[0253.672] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458c8e50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE3NcH[1].jpg", cAlternateFileName="BBE3NC~1.JPG")) returned 1
	[0253.672] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459ad690, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE7GLE[1].png", cAlternateFileName="BBE7GL~1.PNG")) returned 1
	[0253.672] ResetEvent (hEvent=0xfc) returned 1
	[0253.673] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.702] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ade190, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ade190, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE8aLO[1].jpg", cAlternateFileName="BBE8AL~1.JPG")) returned 1
	[0253.707] ResetEvent (hEvent=0xfc) returned 1
	[0253.707] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.712] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a45c10, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x702, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEd5bF[1].jpg", cAlternateFileName="BBED5B~1.JPG")) returned 1
	[0253.714] ResetEvent (hEvent=0xfc) returned 1
	[0253.714] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.721] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50ebbff0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50ebbff0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50ebbff0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xaca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdDNm[1].jpg", cAlternateFileName="BBEDDN~1.JPG")) returned 1
	[0253.724] ResetEvent (hEvent=0xfc) returned 1
	[0253.724] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.763] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458a2cf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x755, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdpyr[1].jpg", cAlternateFileName="BBEDPY~1.JPG")) returned 1
	[0253.765] ResetEvent (hEvent=0xfc) returned 1
	[0253.767] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.783] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c72, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdQdv[1].jpg", cAlternateFileName="BBEDQD~1.JPG")) returned 1
	[0253.784] ResetEvent (hEvent=0xfc) returned 1
	[0253.784] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.794] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe399c90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xa23, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEe62t[1].jpg", cAlternateFileName="BBEE62~1.JPG")) returned 1
	[0253.794] ResetEvent (hEvent=0xfc) returned 1
	[0253.794] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.810] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEedPR[1].jpg", cAlternateFileName="BBEEDP~1.JPG")) returned 1
	[0253.811] ResetEvent (hEvent=0xfc) returned 1
	[0253.811] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.821] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe34d9d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe34d9d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe34d9d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeTpB[1].jpg", cAlternateFileName="BBEETP~1.JPG")) returned 1
	[0253.822] ResetEvent (hEvent=0xfc) returned 1
	[0253.822] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.846] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x952, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeTuf[1].jpg", cAlternateFileName="BBEETU~1.JPG")) returned 1
	[0253.846] ResetEvent (hEvent=0xfc) returned 1
	[0253.846] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.855] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b76710, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x7a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeU5U[1].jpg", cAlternateFileName="BBEEU5~1.JPG")) returned 1
	[0253.856] ResetEvent (hEvent=0xfc) returned 1
	[0253.856] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.860] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x86f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEf306[1].jpg", cAlternateFileName="BBEF30~1.JPG")) returned 1
	[0253.860] ResetEvent (hEvent=0xfc) returned 1
	[0253.860] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.874] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459613d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEf54R[1].jpg", cAlternateFileName="BBEF54~1.JPG")) returned 1
	[0253.874] ResetEvent (hEvent=0xfc) returned 1
	[0253.876] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.879] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4587cb90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3860, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfBbH[1].jpg", cAlternateFileName="BBEFBB~1.JPG")) returned 1
	[0253.879] ResetEvent (hEvent=0xfc) returned 1
	[0253.879] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.903] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457be4b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x19a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfBq0[1].jpg", cAlternateFileName="BBEFBQ~1.JPG")) returned 1
	[0253.905] ResetEvent (hEvent=0xfc) returned 1
	[0253.905] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.972] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2619, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfBrz[1].jpg", cAlternateFileName="BBEFBR~1.JPG")) returned 1
	[0253.972] ResetEvent (hEvent=0xfc) returned 1
	[0253.972] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.977] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b76710, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1f84, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfXl6[1].jpg", cAlternateFileName="BBEFXL~1.JPG")) returned 1
	[0253.977] ResetEvent (hEvent=0xfc) returned 1
	[0253.977] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0253.997] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbded7090, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbded7090, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbded7090, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1c7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgEH3[1].jpg", cAlternateFileName="BBEGEH~1.JPG")) returned 1
	[0253.997] ResetEvent (hEvent=0xfc) returned 1
	[0253.997] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.001] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgsz3[1].jpg", cAlternateFileName="BBEGSZ~1.JPG")) returned 1
	[0254.004] ResetEvent (hEvent=0xfc) returned 1
	[0254.005] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.015] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4574c090, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgTxB[1].jpg", cAlternateFileName="BBEGTX~1.JPG")) returned 1
	[0254.015] ResetEvent (hEvent=0xfc) returned 1
	[0254.015] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.144] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x36e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBo1lFJ[2].png", cAlternateFileName="BBO1LF~2.PNG")) returned 1
	[0254.144] ResetEvent (hEvent=0xfc) returned 1
	[0254.144] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.172] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x455f5430, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x455f5430, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x455f5430, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBs47TE[1].png", cAlternateFileName="BBS47T~1.PNG")) returned 1
	[0254.172] ResetEvent (hEvent=0xfc) returned 1
	[0254.172] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.204] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBu9sWQ[1].jpg", cAlternateFileName="BBU9SW~1.JPG")) returned 1
	[0254.204] ResetEvent (hEvent=0xfc) returned 1
	[0254.204] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.213] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x228c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BByazif[2].jpg", cAlternateFileName="BBYAZI~2.JPG")) returned 1
	[0254.214] ResetEvent (hEvent=0xfc) returned 1
	[0254.214] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.221] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b51310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b51310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b51310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="bs-components[1].css", cAlternateFileName="BS-COM~1.CSS")) returned 1
	[0254.221] ResetEvent (hEvent=0xfc) returned 1
	[0254.221] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.228] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30be, dwReserved0=0x0, dwReserved1=0x0, cFileName="bs-util[1].css", cAlternateFileName="BS-UTI~1.CSS")) returned 1
	[0254.228] ResetEvent (hEvent=0xfc) returned 1
	[0254.228] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.242] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd97bf10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbd97bf10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbd9a2070, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x254f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="c7-bdbd0d-91cdfbc1[1].txt", cAlternateFileName="C7-BDB~1.TXT")) returned 1
	[0254.242] ResetEvent (hEvent=0xfc) returned 1
	[0254.242] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.259] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x614e4380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x614e4380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x614e4380, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x211dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[1].loaded_0", cAlternateFileName="CB_GAP~1.LOA")) returned 1
	[0254.259] ResetEvent (hEvent=0xfc) returned 1
	[0254.259] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.269] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63c04d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c04d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63c04d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x653e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[2].loaded_0", cAlternateFileName="CB_GAP~2.LOA")) returned 1
	[0254.269] ResetEvent (hEvent=0xfc) returned 1
	[0254.269] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.277] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x584c4b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x584c4b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x58510e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a03f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.min[1].css", cAlternateFileName="CHROME~1.CSS")) returned 1
	[0254.277] ResetEvent (hEvent=0xfc) returned 1
	[0254.277] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.287] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60c69520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60c69520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60c69520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x60c, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_throbber_fast_16[1].gif", cAlternateFileName="CHROME~1.GIF")) returned 1
	[0254.287] ResetEvent (hEvent=0xfc) returned 1
	[0254.287] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.297] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55333bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x55333bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x55333bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="collect[1].gif", cAlternateFileName="COLLEC~1.GIF")) returned 1
	[0254.297] ResetEvent (hEvent=0xfc) returned 1
	[0254.297] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.311] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe8f4e10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe8f4e10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe8f4e10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainerTag[1].js", cAlternateFileName="CONTAI~1.JS")) returned 1
	[0254.311] ResetEvent (hEvent=0xfc) returned 1
	[0254.311] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.322] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0254.322] ResetEvent (hEvent=0xfc) returned 1
	[0254.322] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.333] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60d9a020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60d9a020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60de62e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula-mac[1].jpg", cAlternateFileName="EULA-M~1.JPG")) returned 1
	[0254.333] ResetEvent (hEvent=0xfc) returned 1
	[0254.333] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.347] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61093ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61093ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61093ba0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa84a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ga[1].js", cAlternateFileName="GA_1_~1.JS")) returned 1
	[0254.347] ResetEvent (hEvent=0xfc) returned 1
	[0254.347] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.361] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe15e7f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe15e7f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe1f6d70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1305, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]", cAlternateFileName="GETYPE~1")) returned 1
	[0254.361] ResetEvent (hEvent=0xfc) returned 1
	[0254.361] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.375] ResetEvent (hEvent=0xfc) returned 1
	[0254.375] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.387] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x659c6020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x659c6020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65c99a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleInstaller_de[1].application", cAlternateFileName="GOOGLE~1.APP")) returned 1
	[0254.387] ResetEvent (hEvent=0xfc) returned 1
	[0254.387] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.398] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf03f170, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf03f170, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf0652d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[1]", cAlternateFileName="JS_1_~1")) returned 1
	[0254.398] ResetEvent (hEvent=0xfc) returned 1
	[0254.398] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.411] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2544b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf2544b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf2544b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[2]", cAlternateFileName="JS_2_~1")) returned 1
	[0254.411] ResetEvent (hEvent=0xfc) returned 1
	[0254.411] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.423] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54feddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54feddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x550601d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7a43, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[1].eot", cAlternateFileName="LATEST~1.EOT")) returned 1
	[0254.423] ResetEvent (hEvent=0xfc) returned 1
	[0254.423] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.435] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54cce0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54cce0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54d1a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a114, dwReserved0=0x0, dwReserved1=0x0, cFileName="MemMDL2.2.17[1].eot", cAlternateFileName="MEMMDL~1.EOT")) returned 1
	[0254.436] ResetEvent (hEvent=0xfc) returned 1
	[0254.436] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.447] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605b7740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605b7740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605b7740, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="modernizr[1].js", cAlternateFileName="MODERN~1.JS")) returned 1
	[0254.447] ResetEvent (hEvent=0xfc) returned 1
	[0254.447] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.457] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xec5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNIdSync[1].js", cAlternateFileName="MSNIDS~1.JS")) returned 1
	[0254.457] ResetEvent (hEvent=0xfc) returned 1
	[0254.458] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.468] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfbb3b50, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfbb3b50, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfbb3b50, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="only[1].htm", cAlternateFileName="ONLY_1~1.HTM")) returned 1
	[0254.468] ResetEvent (hEvent=0xfc) returned 1
	[0254.468] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.480] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x6b6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="player[1].js", cAlternateFileName="PLAYER~1.JS")) returned 1
	[0254.480] ResetEvent (hEvent=0xfc) returned 1
	[0254.480] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.490] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x5f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="player[2].js", cAlternateFileName="PLAYER~2.JS")) returned 1
	[0254.490] ResetEvent (hEvent=0xfc) returned 1
	[0254.491] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.504] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfb41730, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfb41730, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfb41730, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="tecjslog[1].png", cAlternateFileName="TECJSL~1.PNG")) returned 1
	[0254.504] ResetEvent (hEvent=0xfc) returned 1
	[0254.504] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.516] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x692027e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x692027e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69232580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x805a, dwReserved0=0x0, dwReserved1=0x0, cFileName="thankyou[1].htm", cAlternateFileName="THANKY~1.HTM")) returned 1
	[0254.516] ResetEvent (hEvent=0xfc) returned 1
	[0254.516] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.526] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55c14b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x55c14b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x55c14b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x911, dwReserved0=0x0, dwReserved1=0x0, cFileName="th[1].jpg", cAlternateFileName="TH_1_~1.JPG")) returned 1
	[0254.526] ResetEvent (hEvent=0xfc) returned 1
	[0254.526] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.537] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55c14b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x55c14b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x55c14b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x911, dwReserved0=0x0, dwReserved1=0x0, cFileName="th[1].jpg", cAlternateFileName="TH_1_~1.JPG")) returned 0
	[0254.537] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0254.537] GetProcessHeap () returned 0x800000
	[0254.537] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0254.538] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x54000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0254.538] ResetEvent (hEvent=0xfc) returned 1
	[0254.538] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.552] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50fa0830, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YG1R61Z8", cAlternateFileName="")) returned 1
	[0254.552] GetProcessHeap () returned 0x800000
	[0254.552] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0254.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50fa0830, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0254.553] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50fa0830, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0254.553] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe967230, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe967230, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x7f7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg", cAlternateFileName="0FF929~1.JPG")) returned 1
	[0254.553] ResetEvent (hEvent=0xfc) returned 1
	[0254.553] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.562] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54a20810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54a20810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54a46970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc05f, dwReserved0=0x0, dwReserved1=0x0, cFileName="26158[1].png", cAlternateFileName="26158_~1.PNG")) returned 1
	[0254.563] ResetEvent (hEvent=0xfc) returned 1
	[0254.563] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.657] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458eefb0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458eefb0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458eefb0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42x3V[1].png", cAlternateFileName="AA42X3~1.PNG")) returned 1
	[0254.657] ResetEvent (hEvent=0xfc) returned 1
	[0254.657] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.693] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5341bc90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5341bc90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5341bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA58NQj[1].png", cAlternateFileName="AA58NQ~1.PNG")) returned 1
	[0254.693] ResetEvent (hEvent=0xfc) returned 1
	[0254.693] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.706] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x515e8570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA61Ofl[1].png", cAlternateFileName="AA61OF~1.PNG")) returned 1
	[0254.706] ResetEvent (hEvent=0xfc) returned 1
	[0254.706] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.708] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA6SFRQ[2].png", cAlternateFileName="AA6SFR~2.PNG")) returned 1
	[0254.708] ResetEvent (hEvent=0xfc) returned 1
	[0254.708] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.726] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4580a770, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4580a770, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4580a770, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x19e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAa1vhm[1].png", cAlternateFileName="AAA1VH~1.PNG")) returned 1
	[0254.726] ResetEvent (hEvent=0xfc) returned 1
	[0254.726] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.742] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53846310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53846310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53846310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAa1xJF[1].png", cAlternateFileName="AAA1XJ~1.PNG")) returned 1
	[0254.743] ResetEvent (hEvent=0xfc) returned 1
	[0254.743] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.757] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5159c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAlG41q[1].jpg", cAlternateFileName="AALG41~1.JPG")) returned 1
	[0254.757] ResetEvent (hEvent=0xfc) returned 1
	[0254.757] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.772] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAmin0Z[1].png", cAlternateFileName="AAMIN0~1.PNG")) returned 1
	[0254.772] ResetEvent (hEvent=0xfc) returned 1
	[0254.772] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.790] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533f5b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533f5b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5341bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAnhRyj[1].jpg", cAlternateFileName="AANHRY~1.JPG")) returned 1
	[0254.790] ResetEvent (hEvent=0xfc) returned 1
	[0254.790] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.796] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c161a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64c161a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x64e9d900, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm", cAlternateFileName="ACTIVI~1.HTM")) returned 1
	[0254.797] ResetEvent (hEvent=0xfc) returned 1
	[0254.797] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.814] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2eca30, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf2eca30, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x91dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="adex[1].js", cAlternateFileName="ADEX_1~1.JS")) returned 1
	[0254.814] ResetEvent (hEvent=0xfc) returned 1
	[0254.814] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.821] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x540e72d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540e72d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x540e72d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2874, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfscript[1]", cAlternateFileName="ADFSCR~1")) returned 1
	[0254.832] ResetEvent (hEvent=0xfc) returned 1
	[0254.833] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.835] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdb6b0f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbdb6b0f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbdb6b0f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x525b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adsWrapperMSNI[1].js", cAlternateFileName="ADSWRA~1.JS")) returned 1
	[0254.835] ResetEvent (hEvent=0xfc) returned 1
	[0254.835] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.850] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe967230, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe967230, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8217, dwReserved0=0x0, dwReserved1=0x0, cFileName="ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg", cAlternateFileName="AE8E98~1.JPG")) returned 1
	[0254.851] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe112530, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe112530, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe15e7f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ast[1].js", cAlternateFileName="AST_1_~1.JS")) returned 1
	[0254.851] ResetEvent (hEvent=0xfc) returned 1
	[0254.851] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.891] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58798580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58798580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x58798580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="autotrack[1].js", cAlternateFileName="AUTOTR~1.JS")) returned 1
	[0254.891] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB56XTo[1].png", cAlternateFileName="BB56XT~1.PNG")) returned 1
	[0254.891] ResetEvent (hEvent=0xfc) returned 1
	[0254.891] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.904] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB5vO0g[1].png", cAlternateFileName="BB5VO0~1.PNG")) returned 1
	[0254.905] ResetEvent (hEvent=0xfc) returned 1
	[0254.905] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.919] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB8AdqN[1].png", cAlternateFileName="BB8ADQ~1.PNG")) returned 1
	[0254.919] ResetEvent (hEvent=0xfc) returned 1
	[0254.919] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0254.967] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45be8b30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45be8b30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ca7210, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x152c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBALZyp[1].jpg", cAlternateFileName="BBALZY~1.JPG")) returned 1
	[0254.968] ResetEvent (hEvent=0xfc) returned 1
	[0254.968] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.186] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5360ae70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5360ae70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5360ae70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x97c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBImKp[1].jpg", cAlternateFileName="BBBIMK~1.JPG")) returned 1
	[0255.186] ResetEvent (hEvent=0xfc) returned 1
	[0255.186] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.195] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53598a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53598a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53630fd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBMGJo[1].jpg", cAlternateFileName="BBBMGJ~1.JPG")) returned 1
	[0255.195] ResetEvent (hEvent=0xfc) returned 1
	[0255.195] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.197] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539049f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x862, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBMKDF[1].jpg", cAlternateFileName="BBBMKD~1.JPG")) returned 1
	[0255.197] ResetEvent (hEvent=0xfc) returned 1
	[0255.198] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.214] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53846310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53846310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53846310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBMQch[1].jpg", cAlternateFileName="BBBMQC~1.JPG")) returned 1
	[0255.214] ResetEvent (hEvent=0xfc) returned 1
	[0255.214] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.244] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58321c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58321c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x58321c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBMyVh[1].jpg", cAlternateFileName="BBBMYV~1.JPG")) returned 1
	[0255.244] ResetEvent (hEvent=0xfc) returned 1
	[0255.244] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.257] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53337450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x812, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBNAf7[1].jpg", cAlternateFileName="BBBNAF~1.JPG")) returned 1
	[0255.257] ResetEvent (hEvent=0xfc) returned 1
	[0255.257] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.285] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533a9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533a9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533a9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBNnTF[1].jpg", cAlternateFileName="BBBNNT~1.JPG")) returned 1
	[0255.285] ResetEvent (hEvent=0xfc) returned 1
	[0255.285] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.306] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539c30d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539c30d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539c30d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1529, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO4dZ[1].jpg", cAlternateFileName="BBBO4D~1.JPG")) returned 1
	[0255.306] ResetEvent (hEvent=0xfc) returned 1
	[0255.306] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.317] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO8ow[1].jpg", cAlternateFileName="BBBO8O~1.JPG")) returned 1
	[0255.317] ResetEvent (hEvent=0xfc) returned 1
	[0255.317] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.348] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x532eb190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x636, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOaeS[1].jpg", cAlternateFileName="BBBOAE~1.JPG")) returned 1
	[0255.349] ResetEvent (hEvent=0xfc) returned 1
	[0255.349] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.358] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53278d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53278d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53278d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOcIb[1].jpg", cAlternateFileName="BBBOCI~1.JPG")) returned 1
	[0255.358] ResetEvent (hEvent=0xfc) returned 1
	[0255.359] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.376] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b8c150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b8c150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53b8c150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x161e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOddp[1].jpg", cAlternateFileName="BBBODD~1.JPG")) returned 1
	[0255.376] ResetEvent (hEvent=0xfc) returned 1
	[0255.376] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.384] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a1fd500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a1fd500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a223660, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5685, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOmar[1].jpg", cAlternateFileName="BBBOMA~1.JPG")) returned 1
	[0255.384] ResetEvent (hEvent=0xfc) returned 1
	[0255.384] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.392] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f7f1f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2f6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBR4yQ[1].jpg", cAlternateFileName="BBBR4Y~1.JPG")) returned 1
	[0255.392] ResetEvent (hEvent=0xfc) returned 1
	[0255.392] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.415] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e4e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e4e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e4e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBUPaj[1].jpg", cAlternateFileName="BBBUPA~1.JPG")) returned 1
	[0255.415] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e275160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e275160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5e275160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVEOW[1].jpg", cAlternateFileName="BBBVEO~1.JPG")) returned 1
	[0255.435] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f32f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f32f30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f32f30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVLcG[1].jpg", cAlternateFileName="BBBVLC~1.JPG")) returned 1
	[0255.455] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530afcf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x82d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVSkP[1].jpg", cAlternateFileName="BBBVSK~1.JPG")) returned 1
	[0255.458] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x612a8ee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x612a8ee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x612a8ee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x16f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBYfEH[1].jpg", cAlternateFileName="BBBYFE~1.JPG")) returned 1
	[0255.459] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53017770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBZ5vT[1].jpg", cAlternateFileName="BBBZ5V~1.JPG")) returned 1
	[0255.459] ResetEvent (hEvent=0xfc) returned 1
	[0255.459] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.468] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x514ddbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x514ddbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x514ddbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x86e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC02Gr[1].jpg", cAlternateFileName="BBC02G~1.JPG")) returned 1
	[0255.468] ResetEvent (hEvent=0xfc) returned 1
	[0255.469] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.476] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5392ab50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5392ab50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5392ab50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x86e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC02Gr[2].jpg", cAlternateFileName="BBC02G~2.JPG")) returned 1
	[0255.476] ResetEvent (hEvent=0xfc) returned 1
	[0255.476] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.492] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fa5350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x89a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC03B1[1].jpg", cAlternateFileName="BBC03B~1.JPG")) returned 1
	[0255.495] ResetEvent (hEvent=0xfc) returned 1
	[0255.496] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.504] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f0cdd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC06Ub[1].jpg", cAlternateFileName="BBC06U~1.JPG")) returned 1
	[0255.505] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0Djg[1].jpg", cAlternateFileName="BBC0DJ~1.JPG")) returned 1
	[0255.505] ResetEvent (hEvent=0xfc) returned 1
	[0255.505] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.516] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ec0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0g7a[1].jpg", cAlternateFileName="BBC0G7~1.JPG")) returned 1
	[0255.516] ResetEvent (hEvent=0xfc) returned 1
	[0255.516] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.539] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x82f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0lf2[1].jpg", cAlternateFileName="BBC0LF~1.JPG")) returned 1
	[0255.540] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2e35a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2e35a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5b2e35a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0mK1[1].jpg", cAlternateFileName="BBC0MK~1.JPG")) returned 1
	[0255.559] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53089b90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53089b90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53089b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1fc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0qlB[1].jpg", cAlternateFileName="BBC0QL~1.JPG")) returned 1
	[0255.560] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458308d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2ecb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE7KPZ[1].jpg", cAlternateFileName="BBE7KP~1.JPG")) returned 1
	[0255.562] ResetEvent (hEvent=0xfc) returned 1
	[0255.566] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.569] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a6bd70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x9c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE8IlA[1].jpg", cAlternateFileName="BBE8IL~1.JPG")) returned 1
	[0255.570] ResetEvent (hEvent=0xfc) returned 1
	[0255.571] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.579] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b9c870, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2669, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE972F[1].jpg", cAlternateFileName="BBE972~1.JPG")) returned 1
	[0255.580] ResetEvent (hEvent=0xfc) returned 1
	[0255.580] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.609] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458308d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2a77, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE9tdx[1].jpg", cAlternateFileName="BBE9TD~1.JPG")) returned 1
	[0255.610] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458a2cf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2fe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdrqt[1].jpg", cAlternateFileName="BBEDRQ~1.JPG")) returned 1
	[0255.610] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459ad690, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x857, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeEwt[1].jpg", cAlternateFileName="BBEEEW~1.JPG")) returned 1
	[0255.610] ResetEvent (hEvent=0xfc) returned 1
	[0255.610] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.645] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4593b270, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x7d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeis3[1].jpg", cAlternateFileName="BBEEIS~1.JPG")) returned 1
	[0255.646] ResetEvent (hEvent=0xfc) returned 1
	[0255.646] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.681] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a1fab0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeKvV[1].jpg", cAlternateFileName="BBEEKV~1.JPG")) returned 1
	[0255.681] ResetEvent (hEvent=0xfc) returned 1
	[0255.682] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.735] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a91ed0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a91ed0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xef00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeNd8[1].png", cAlternateFileName="BBEEND~1.PNG")) returned 1
	[0255.735] ResetEvent (hEvent=0xfc) returned 1
	[0255.735] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.780] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3323, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEewZB[1].jpg", cAlternateFileName="BBEEWZ~1.JPG")) returned 1
	[0255.781] ResetEvent (hEvent=0xfc) returned 1
	[0255.781] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.860] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x9d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeZ0k[1].jpg", cAlternateFileName="BBEEZ0~1.JPG")) returned 1
	[0255.860] ResetEvent (hEvent=0xfc) returned 1
	[0255.860] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.877] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2d32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEf6s4[1].jpg", cAlternateFileName="BBEF6S~1.JPG")) returned 1
	[0255.877] ResetEvent (hEvent=0xfc) returned 1
	[0255.878] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.885] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b2a450, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfAc5[1].jpg", cAlternateFileName="BBEFAC~1.JPG")) returned 1
	[0255.885] ResetEvent (hEvent=0xfc) returned 1
	[0255.885] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.909] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45510bf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x197c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfgDi[1].jpg", cAlternateFileName="BBEFGD~1.JPG")) returned 1
	[0255.909] ResetEvent (hEvent=0xfc) returned 1
	[0255.909] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.910] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xb7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfjuT[1].jpg", cAlternateFileName="BBEFJU~1.JPG")) returned 1
	[0255.910] ResetEvent (hEvent=0xfc) returned 1
	[0255.910] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.946] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457be4b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfkgi[1].jpg", cAlternateFileName="BBEFKG~1.JPG")) returned 1
	[0255.946] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2978, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfRKA[1].jpg", cAlternateFileName="BBEFRK~1.JPG")) returned 1
	[0255.946] ResetEvent (hEvent=0xfc) returned 1
	[0255.946] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.954] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457721f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfRwv[1].jpg", cAlternateFileName="BBEFRW~1.JPG")) returned 1
	[0255.954] ResetEvent (hEvent=0xfc) returned 1
	[0255.954] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.964] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45478670, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45478670, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45478670, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2676, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfwtU[1].jpg", cAlternateFileName="BBEFWT~1.JPG")) returned 1
	[0255.964] ResetEvent (hEvent=0xfc) returned 1
	[0255.964] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.978] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xb41, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfY4X[1].jpg", cAlternateFileName="BBEFY4~1.JPG")) returned 1
	[0255.980] ResetEvent (hEvent=0xfc) returned 1
	[0255.980] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0255.990] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x25f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgD9f[1].jpg", cAlternateFileName="BBEGD9~1.JPG")) returned 1
	[0255.990] ResetEvent (hEvent=0xfc) returned 1
	[0255.990] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.003] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x819, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgJfz[1].jpg", cAlternateFileName="BBEGJF~1.JPG")) returned 1
	[0256.003] ResetEvent (hEvent=0xfc) returned 1
	[0256.004] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.016] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b2a450, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x916, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgsWA[1].jpg", cAlternateFileName="BBEGSW~1.JPG")) returned 1
	[0256.016] ResetEvent (hEvent=0xfc) returned 1
	[0256.016] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.347] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x918, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgX5G[1].jpg", cAlternateFileName="BBEGX5~1.JPG")) returned 1
	[0256.348] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51256470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBih5H[1].png", cAlternateFileName="BBIH5H~1.PNG")) returned 1
	[0256.348] ResetEvent (hEvent=0xfc) returned 1
	[0256.348] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.584] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBmUxRK[1].png", cAlternateFileName="BBMUXR~1.PNG")) returned 1
	[0256.584] ResetEvent (hEvent=0xfc) returned 1
	[0256.584] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.606] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459f9950, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x398, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBndhJA[1].png", cAlternateFileName="BBNDHJ~1.PNG")) returned 1
	[0256.606] ResetEvent (hEvent=0xfc) returned 1
	[0256.606] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.610] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458c8e50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBoqF0J[1].png", cAlternateFileName="BBOQF0~1.PNG")) returned 1
	[0256.610] ResetEvent (hEvent=0xfc) returned 1
	[0256.610] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.731] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53063a30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBzjV9E[1].png", cAlternateFileName="BBZJV9~1.PNG")) returned 1
	[0256.731] ResetEvent (hEvent=0xfc) returned 1
	[0256.731] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.750] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60cdb940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60cdb940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60d4dd60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1fdaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="benefits-1[1].jpg", cAlternateFileName="BENEFI~1.JPG")) returned 1
	[0256.750] ResetEvent (hEvent=0xfc) returned 1
	[0256.750] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.764] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6157c900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6157c900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x615c8bc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12282, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[1].loaded_1", cAlternateFileName="CB_GAP~1.LOA")) returned 1
	[0256.764] ResetEvent (hEvent=0xfc) returned 1
	[0256.764] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.773] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50fa0830, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50fa0830, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x82d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="chartbeat[1].js", cAlternateFileName="CHARTB~1.JS")) returned 1
	[0256.773] ResetEvent (hEvent=0xfc) returned 1
	[0256.773] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.788] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60c8f680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60c8f680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60d01aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3bf20, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-installer.min[1].js", cAlternateFileName="CHROME~1.JS")) returned 1
	[0256.789] ResetEvent (hEvent=0xfc) returned 1
	[0256.789] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.798] ResetEvent (hEvent=0xfc) returned 1
	[0256.798] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.809] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60aec760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60aec760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60aec760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1622, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_logo_2x[1].png", cAlternateFileName="CHROME~1.PNG")) returned 1
	[0256.809] ResetEvent (hEvent=0xfc) returned 1
	[0256.809] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.822] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x610b9d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x610b9d00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x610b9d00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13d, dwReserved0=0x0, dwReserved1=0x0, cFileName="close-icon[1].png", cAlternateFileName="CLOSE-~1.PNG")) returned 1
	[0256.822] ResetEvent (hEvent=0xfc) returned 1
	[0256.822] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.831] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54e4ae90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54e4ae90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e4ae90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="css[1].txt", cAlternateFileName="CSS_1_~1.TXT")) returned 1
	[0256.831] ResetEvent (hEvent=0xfc) returned 1
	[0256.831] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.843] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0256.843] ResetEvent (hEvent=0xfc) returned 1
	[0256.843] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.853] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf7af630, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7af630, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf821a50, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x4d5b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ebHtml5Banner[1].js", cAlternateFileName="EBHTML~1.JS")) returned 1
	[0256.854] ResetEvent (hEvent=0xfc) returned 1
	[0256.854] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.867] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64009240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64009240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6402f3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5244, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula-win[1].jpg", cAlternateFileName="EULA-W~1.JPG")) returned 1
	[0256.867] ResetEvent (hEvent=0xfc) returned 1
	[0256.867] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.877] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe15e7f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe15e7f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe15e7f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1303, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]", cAlternateFileName="GETYPE~3")) returned 1
	[0256.878] ResetEvent (hEvent=0xfc) returned 1
	[0256.878] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.891] ResetEvent (hEvent=0xfc) returned 1
	[0256.892] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.902] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530afcf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]", cAlternateFileName="GETYPE~1")) returned 1
	[0256.902] ResetEvent (hEvent=0xfc) returned 1
	[0256.902] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.916] ResetEvent (hEvent=0xfc) returned 1
	[0256.916] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.924] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe138690, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe138690, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe138690, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]", cAlternateFileName="GETYPE~2")) returned 1
	[0256.924] ResetEvent (hEvent=0xfc) returned 1
	[0256.924] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.935] ResetEvent (hEvent=0xfc) returned 1
	[0256.935] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.946] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510ff810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510ff810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51125970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1762e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery-1.11.1.min[1].js", cAlternateFileName="JQUERY~1.JS")) returned 1
	[0256.946] ResetEvent (hEvent=0xfc) returned 1
	[0256.946] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.960] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5442d110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5442d110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5442d110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[1]", cAlternateFileName="JS_1_~1")) returned 1
	[0256.960] ResetEvent (hEvent=0xfc) returned 1
	[0256.960] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.970] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44bd95f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44bd95f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44bd95f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[2]", cAlternateFileName="JS_2_~1")) returned 1
	[0256.970] ResetEvent (hEvent=0xfc) returned 1
	[0256.970] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.985] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d66650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d66650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e70ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7154, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[1].eot", cAlternateFileName="LATEST~1.EOT")) returned 1
	[0256.985] ResetEvent (hEvent=0xfc) returned 1
	[0256.985] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0256.996] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d8c7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d8c7b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e97150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6e9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[2].eot", cAlternateFileName="LATEST~2.EOT")) returned 1
	[0256.996] ResetEvent (hEvent=0xfc) returned 1
	[0256.996] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.006] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d8c7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d8c7b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e97150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x77b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[3].eot", cAlternateFileName="LATEST~3.EOT")) returned 1
	[0257.007] ResetEvent (hEvent=0xfc) returned 1
	[0257.007] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.025] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e4e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e4e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53122110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x922, dwReserved0=0x0, dwReserved1=0x0, cFileName="msn[1].htm", cAlternateFileName="MSN_1_~1.HTM")) returned 1
	[0257.025] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6378e3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6378e3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x637b4540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3112, dwReserved0=0x0, dwReserved1=0x0, cFileName="rpc_shindig_random[1].js", cAlternateFileName="RPC_SH~1.JS")) returned 1
	[0257.025] ResetEvent (hEvent=0xfc) returned 1
	[0257.025] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.033] ResetEvent (hEvent=0xfc) returned 1
	[0257.033] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.049] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xbf7d5790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7d5790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7d5790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thirdparty[1]", cAlternateFileName="THIRDP~1")) returned 1
	[0257.049] ResetEvent (hEvent=0xfc) returned 1
	[0257.049] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.058] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54a20810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54a20810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54adeef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa33, dwReserved0=0x0, dwReserved1=0x0, cFileName="uid[1].htm", cAlternateFileName="UID_1_~1.HTM")) returned 1
	[0257.058] ResetEvent (hEvent=0xfc) returned 1
	[0257.058] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.070] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe5d5130, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe5d5130, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe5d5130, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x3325, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[1]", cAlternateFileName="V2_1_~1")) returned 1
	[0257.070] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54c35b50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54c35b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54c5bcb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x24fea, dwReserved0=0x0, dwReserved1=0x0, cFileName="wc-addons[1].css", cAlternateFileName="WC-ADD~1.CSS")) returned 1
	[0257.070] ResetEvent (hEvent=0xfc) returned 1
	[0257.070] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.080] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54c35b50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54c35b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54c5bcb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x24fea, dwReserved0=0x0, dwReserved1=0x0, cFileName="wc-addons[1].css", cAlternateFileName="WC-ADD~1.CSS")) returned 0
	[0257.080] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.081] GetProcessHeap () returned 0x800000
	[0257.081] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0257.081] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50fa0830, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YG1R61Z8", cAlternateFileName="")) returned 0
	[0257.081] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0257.081] GetProcessHeap () returned 0x800000
	[0257.081] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.081] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0257.081] ResetEvent (hEvent=0xfc) returned 1
	[0257.081] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.092] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51445650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51445650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51445650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1
	[0257.092] ResetEvent (hEvent=0xfc) returned 1
	[0257.092] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.101] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51445650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51445650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51445650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 0
	[0257.101] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0257.102] GetProcessHeap () returned 0x800000
	[0257.102] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.102] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Virtualized", cAlternateFileName="VIRTUA~1")) returned 1
	[0257.102] GetProcessHeap () returned 0x800000
	[0257.102] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0257.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0257.102] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.102] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1
	[0257.102] GetProcessHeap () returned 0x800000
	[0257.102] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0257.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0257.103] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.103] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0257.103] GetProcessHeap () returned 0x800000
	[0257.103] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.103] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.103] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1
	[0257.103] GetProcessHeap () returned 0x800000
	[0257.103] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.103] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.103] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0257.103] GetProcessHeap () returned 0x800000
	[0257.103] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0257.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0257.104] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.104] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
	[0257.105] GetProcessHeap () returned 0x800000
	[0257.105] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f84100
	[0257.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0257.105] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.105] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0257.105] GetProcessHeap () returned 0x800000
	[0257.105] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f94108
	[0257.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x2f2d8f0 | out: lpFindFileData=0x2f2d8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0257.105] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2d8f0 | out: lpFindFileData=0x2f2d8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.105] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2d8f0 | out: lpFindFileData=0x2f2d8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0257.105] GetProcessHeap () returned 0x800000
	[0257.105] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x88a780
	[0257.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x2f2d660 | out: lpFindFileData=0x2f2d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0257.106] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2d660 | out: lpFindFileData=0x2f2d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.107] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2d660 | out: lpFindFileData=0x2f2d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1
	[0257.107] GetProcessHeap () returned 0x800000
	[0257.107] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89a788
	[0257.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x2f2d3d0 | out: lpFindFileData=0x2f2d3d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0257.107] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2d3d0 | out: lpFindFileData=0x2f2d3d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.107] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2d3d0 | out: lpFindFileData=0x2f2d3d0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0257.107] GetProcessHeap () returned 0x800000
	[0257.107] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8aa790
	[0257.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x2f2d140 | out: lpFindFileData=0x2f2d140*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0257.107] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2d140 | out: lpFindFileData=0x2f2d140*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.107] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x2f2d140 | out: lpFindFileData=0x2f2d140*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.107] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0257.107] GetProcessHeap () returned 0x800000
	[0257.107] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8aa790 | out: hHeap=0x800000) returned 1
	[0257.107] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x2f2d3d0 | out: lpFindFileData=0x2f2d3d0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0257.108] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0257.108] GetProcessHeap () returned 0x800000
	[0257.108] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89a788 | out: hHeap=0x800000) returned 1
	[0257.108] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x2f2d660 | out: lpFindFileData=0x2f2d660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 0
	[0257.108] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0257.108] GetProcessHeap () returned 0x800000
	[0257.108] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x88a780 | out: hHeap=0x800000) returned 1
	[0257.108] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x2f2d8f0 | out: lpFindFileData=0x2f2d8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
	[0257.108] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0257.108] GetProcessHeap () returned 0x800000
	[0257.108] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f94108 | out: hHeap=0x800000) returned 1
	[0257.109] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x2f2db80 | out: lpFindFileData=0x2f2db80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0257.109] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0257.109] GetProcessHeap () returned 0x800000
	[0257.109] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f84100 | out: hHeap=0x800000) returned 1
	[0257.110] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x2f2de10 | out: lpFindFileData=0x2f2de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0
	[0257.110] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0257.110] GetProcessHeap () returned 0x800000
	[0257.110] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0257.110] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 0
	[0257.110] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.110] GetProcessHeap () returned 0x800000
	[0257.110] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.111] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0
	[0257.111] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.111] GetProcessHeap () returned 0x800000
	[0257.111] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.111] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0
	[0257.111] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0257.111] GetProcessHeap () returned 0x800000
	[0257.111] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0257.111] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 0
	[0257.111] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0257.111] GetProcessHeap () returned 0x800000
	[0257.111] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0257.111] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Virtualized", cAlternateFileName="VIRTUA~1")) returned 0
	[0257.111] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0257.111] GetProcessHeap () returned 0x800000
	[0257.111] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0257.112] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0257.112] GetProcessHeap () returned 0x800000
	[0257.112] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0257.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0257.113] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.113] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d6bf40, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x70a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.theme", cAlternateFileName="CUSTOM~1.THE")) returned 1
	[0257.113] ResetEvent (hEvent=0xfc) returned 1
	[0257.113] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.167] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d6bf40, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x70a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.theme", cAlternateFileName="CUSTOM~1.THE")) returned 0
	[0257.168] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0257.168] GetProcessHeap () returned 0x800000
	[0257.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0257.168] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e7e880, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x8e7e880, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat", cAlternateFileName="")) returned 1
	[0257.168] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8e58720, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG1", cAlternateFileName="USRCLA~2.LOG")) returned 1
	[0257.168] ResetEvent (hEvent=0xfc) returned 1
	[0257.168] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.205] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9c5705f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG2", cAlternateFileName="USRCLA~1.LOG")) returned 1
	[0257.205] ResetEvent (hEvent=0xfc) returned 1
	[0257.205] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.237] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x962222ec, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf", cAlternateFileName="USRCLA~1.BLF")) returned 1
	[0257.237] ResetEvent (hEvent=0xfc) returned 1
	[0257.238] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.251] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="USRCLA~2.REG")) returned 1
	[0257.251] ResetEvent (hEvent=0xfc) returned 1
	[0257.251] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.266] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="USRCLA~1.REG")) returned 1
	[0257.266] ResetEvent (hEvent=0xfc) returned 1
	[0257.266] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.381] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1
	[0257.381] GetProcessHeap () returned 0x800000
	[0257.381] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0257.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0257.381] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.381] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERC", cAlternateFileName="")) returned 1
	[0257.381] GetProcessHeap () returned 0x800000
	[0257.381] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0257.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0257.382] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.382] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.382] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0257.382] GetProcessHeap () returned 0x800000
	[0257.382] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0257.382] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1
	[0257.382] GetProcessHeap () returned 0x800000
	[0257.382] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0257.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0257.382] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.382] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.382] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0257.382] GetProcessHeap () returned 0x800000
	[0257.382] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0257.382] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 0
	[0257.382] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0257.382] GetProcessHeap () returned 0x800000
	[0257.382] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0257.382] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa734ff0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xa734ff0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa734ff0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 1
	[0257.383] ResetEvent (hEvent=0xfc) returned 1
	[0257.383] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.417] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa734ff0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xa734ff0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa734ff0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 0
	[0257.417] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0257.417] GetProcessHeap () returned 0x800000
	[0257.417] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0257.417] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1
	[0257.417] GetProcessHeap () returned 0x800000
	[0257.417] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0257.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0257.417] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.417] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1
	[0257.417] ResetEvent (hEvent=0xfc) returned 1
	[0257.417] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.435] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1
	[0257.436] ResetEvent (hEvent=0xfc) returned 1
	[0257.436] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.455] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1
	[0257.456] ResetEvent (hEvent=0xfc) returned 1
	[0257.456] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.462] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1
	[0257.462] GetProcessHeap () returned 0x800000
	[0257.462] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0257.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0257.462] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.462] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="old", cAlternateFileName="")) returned 1
	[0257.462] GetProcessHeap () returned 0x800000
	[0257.462] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0257.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0257.463] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.463] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
	[0257.463] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
	[0257.463] ResetEvent (hEvent=0xfc) returned 1
	[0257.463] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.488] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
	[0257.488] ResetEvent (hEvent=0xfc) returned 1
	[0257.488] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.499] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0
	[0257.499] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0257.500] GetProcessHeap () returned 0x800000
	[0257.500] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0257.500] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="old", cAlternateFileName="")) returned 0
	[0257.500] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0257.500] GetProcessHeap () returned 0x800000
	[0257.500] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0257.500] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1
	[0257.500] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1
	[0257.500] ResetEvent (hEvent=0xfc) returned 1
	[0257.500] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.517] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
	[0257.518] ResetEvent (hEvent=0xfc) returned 1
	[0257.518] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.527] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1
	[0257.527] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1
	[0257.527] ResetEvent (hEvent=0xfc) returned 1
	[0257.527] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeold.xml", cAlternateFileName="")) returned 1
	[0257.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0257.541] GetProcessHeap () returned 0x800000
	[0257.541] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0257.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0257.542] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.542] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0257.542] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0257.542] ResetEvent (hEvent=0xfc) returned 1
	[0257.542] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.567] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0257.567] ResetEvent (hEvent=0xfc) returned 1
	[0257.567] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.583] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0257.584] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0257.584] ResetEvent (hEvent=0xfc) returned 1
	[0257.584] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.593] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="GREENB~1.HTM")) returned 1
	[0257.593] ResetEvent (hEvent=0xfc) returned 1
	[0257.593] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.602] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="GREENB~1.JPG")) returned 1
	[0257.602] ResetEvent (hEvent=0xfc) returned 1
	[0257.602] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.604] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="HANDPR~1.HTM")) returned 1
	[0257.605] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="HANDPR~1.JPG")) returned 1
	[0257.605] ResetEvent (hEvent=0xfc) returned 1
	[0257.605] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.633] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="ORANGE~1.HTM")) returned 1
	[0257.634] ResetEvent (hEvent=0xfc) returned 1
	[0257.634] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.638] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="ORANGE~1.JPG")) returned 1
	[0257.638] ResetEvent (hEvent=0xfc) returned 1
	[0257.638] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.648] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
	[0257.648] ResetEvent (hEvent=0xfc) returned 1
	[0257.648] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.656] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
	[0257.656] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
	[0257.656] ResetEvent (hEvent=0xfc) returned 1
	[0257.656] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.670] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
	[0257.670] ResetEvent (hEvent=0xfc) returned 1
	[0257.670] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.678] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="SHADES~1.HTM")) returned 1
	[0257.679] ResetEvent (hEvent=0xfc) returned 1
	[0257.679] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.692] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="SHADES~1.JPG")) returned 1
	[0257.692] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="SOFTBL~1.HTM")) returned 1
	[0257.692] ResetEvent (hEvent=0xfc) returned 1
	[0257.693] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.725] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
	[0257.726] ResetEvent (hEvent=0xfc) returned 1
	[0257.726] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.731] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
	[0257.732] ResetEvent (hEvent=0xfc) returned 1
	[0257.732] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.739] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
	[0257.739] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0
	[0257.739] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0257.740] GetProcessHeap () returned 0x800000
	[0257.740] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0257.740] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
	[0257.740] ResetEvent (hEvent=0xfc) returned 1
	[0257.740] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.753] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9a12c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
	[0257.753] ResetEvent (hEvent=0xfc) returned 1
	[0257.753] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.765] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9a12c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0
	[0257.765] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0257.765] GetProcessHeap () returned 0x800000
	[0257.765] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0257.765] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1
	[0257.765] GetProcessHeap () returned 0x800000
	[0257.765] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0257.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0257.765] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.765] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1
	[0257.765] GetProcessHeap () returned 0x800000
	[0257.765] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0257.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0257.766] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.766] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1
	[0257.766] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 1
	[0257.766] ResetEvent (hEvent=0xfc) returned 1
	[0257.766] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.773] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 0
	[0257.773] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0257.773] GetProcessHeap () returned 0x800000
	[0257.773] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0257.773] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 0
	[0257.773] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0257.773] GetProcessHeap () returned 0x800000
	[0257.773] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0257.773] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
	[0257.773] GetProcessHeap () returned 0x800000
	[0257.773] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0257.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0257.774] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.774] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
	[0257.774] GetProcessHeap () returned 0x800000
	[0257.774] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0257.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0257.774] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.774] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.774] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0257.774] GetProcessHeap () returned 0x800000
	[0257.774] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0257.774] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1
	[0257.774] ResetEvent (hEvent=0xfc) returned 1
	[0257.774] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.788] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 0
	[0257.788] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0257.788] GetProcessHeap () returned 0x800000
	[0257.788] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0257.788] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0
	[0257.788] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0257.788] GetProcessHeap () returned 0x800000
	[0257.788] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0257.789] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1
	[0257.789] GetProcessHeap () returned 0x800000
	[0257.789] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0257.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0257.790] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.790] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.790] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0257.790] GetProcessHeap () returned 0x800000
	[0257.790] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0257.790] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
	[0257.790] GetProcessHeap () returned 0x800000
	[0257.790] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0257.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0257.790] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.790] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1
	[0257.790] GetProcessHeap () returned 0x800000
	[0257.791] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0257.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0257.791] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.791] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
	[0257.791] GetProcessHeap () returned 0x800000
	[0257.791] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0257.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0257.791] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.791] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1
	[0257.792] GetProcessHeap () returned 0x800000
	[0257.792] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0257.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0257.792] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.792] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0257.792] GetProcessHeap () returned 0x800000
	[0257.792] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0257.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0257.793] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.793] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1
	[0257.793] GetProcessHeap () returned 0x800000
	[0257.793] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.794] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.794] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="98", cAlternateFileName="")) returned 1
	[0257.794] GetProcessHeap () returned 0x800000
	[0257.794] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.794] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.794] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 1
	[0257.795] ResetEvent (hEvent=0xfc) returned 1
	[0257.795] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.802] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 0
	[0257.802] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.802] GetProcessHeap () returned 0x800000
	[0257.802] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.802] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 1
	[0257.802] GetProcessHeap () returned 0x800000
	[0257.802] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.802] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.802] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 1
	[0257.802] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 0
	[0257.802] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.802] GetProcessHeap () returned 0x800000
	[0257.802] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.802] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 0
	[0257.802] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.802] GetProcessHeap () returned 0x800000
	[0257.803] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.803] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1
	[0257.803] GetProcessHeap () returned 0x800000
	[0257.803] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.803] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.803] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B", cAlternateFileName="")) returned 1
	[0257.803] GetProcessHeap () returned 0x800000
	[0257.803] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.803] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.803] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 1
	[0257.803] ResetEvent (hEvent=0xfc) returned 1
	[0257.803] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.816] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 0
	[0257.816] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.816] GetProcessHeap () returned 0x800000
	[0257.816] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.816] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2", cAlternateFileName="")) returned 1
	[0257.817] GetProcessHeap () returned 0x800000
	[0257.817] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.817] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.817] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 1
	[0257.817] ResetEvent (hEvent=0xfc) returned 1
	[0257.817] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.832] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 0
	[0257.832] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.832] GetProcessHeap () returned 0x800000
	[0257.833] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.833] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 1
	[0257.833] GetProcessHeap () returned 0x800000
	[0257.833] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.833] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.833] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 1
	[0257.833] ResetEvent (hEvent=0xfc) returned 1
	[0257.833] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.848] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 0
	[0257.849] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.849] GetProcessHeap () returned 0x800000
	[0257.849] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.849] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 0
	[0257.849] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.849] GetProcessHeap () returned 0x800000
	[0257.849] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.849] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1
	[0257.849] GetProcessHeap () returned 0x800000
	[0257.849] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.849] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.849] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.849] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.849] GetProcessHeap () returned 0x800000
	[0257.850] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.850] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1
	[0257.850] GetProcessHeap () returned 0x800000
	[0257.850] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.850] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.850] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 1
	[0257.850] GetProcessHeap () returned 0x800000
	[0257.850] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.850] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.850] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 1
	[0257.850] ResetEvent (hEvent=0xfc) returned 1
	[0257.850] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.861] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 0
	[0257.861] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.861] GetProcessHeap () returned 0x800000
	[0257.861] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.861] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 0
	[0257.861] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.861] GetProcessHeap () returned 0x800000
	[0257.861] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.861] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1
	[0257.862] GetProcessHeap () returned 0x800000
	[0257.862] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.862] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.862] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.862] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.862] GetProcessHeap () returned 0x800000
	[0257.862] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.862] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1
	[0257.862] GetProcessHeap () returned 0x800000
	[0257.862] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.862] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.862] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.862] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.862] GetProcessHeap () returned 0x800000
	[0257.862] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.862] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1
	[0257.863] GetProcessHeap () returned 0x800000
	[0257.863] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.863] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.863] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.863] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.863] GetProcessHeap () returned 0x800000
	[0257.863] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.863] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1
	[0257.863] GetProcessHeap () returned 0x800000
	[0257.863] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.863] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.863] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.863] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.863] GetProcessHeap () returned 0x800000
	[0257.864] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.864] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1
	[0257.864] GetProcessHeap () returned 0x800000
	[0257.864] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.864] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.864] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.864] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.864] GetProcessHeap () returned 0x800000
	[0257.864] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.864] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1
	[0257.864] GetProcessHeap () returned 0x800000
	[0257.864] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.864] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.864] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1
	[0257.864] GetProcessHeap () returned 0x800000
	[0257.864] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.865] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.865] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 1
	[0257.865] ResetEvent (hEvent=0xfc) returned 1
	[0257.865] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.876] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 0
	[0257.876] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.876] GetProcessHeap () returned 0x800000
	[0257.876] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.876] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C", cAlternateFileName="")) returned 1
	[0257.876] GetProcessHeap () returned 0x800000
	[0257.876] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.877] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.877] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 1
	[0257.877] ResetEvent (hEvent=0xfc) returned 1
	[0257.877] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.888] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 0
	[0257.888] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.888] GetProcessHeap () returned 0x800000
	[0257.888] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.888] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1
	[0257.888] GetProcessHeap () returned 0x800000
	[0257.888] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.888] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.888] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 1
	[0257.888] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 0
	[0257.888] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.888] GetProcessHeap () returned 0x800000
	[0257.888] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.888] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 1
	[0257.888] GetProcessHeap () returned 0x800000
	[0257.888] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.889] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.889] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 1
	[0257.889] ResetEvent (hEvent=0xfc) returned 1
	[0257.889] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.899] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 0
	[0257.899] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.899] GetProcessHeap () returned 0x800000
	[0257.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.899] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 0
	[0257.899] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.899] GetProcessHeap () returned 0x800000
	[0257.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.899] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A", cAlternateFileName="")) returned 1
	[0257.899] GetProcessHeap () returned 0x800000
	[0257.899] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.900] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.900] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.900] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.900] GetProcessHeap () returned 0x800000
	[0257.900] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.900] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B", cAlternateFileName="")) returned 1
	[0257.900] GetProcessHeap () returned 0x800000
	[0257.900] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.900] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.900] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0257.900] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.900] GetProcessHeap () returned 0x800000
	[0257.900] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.900] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1
	[0257.900] GetProcessHeap () returned 0x800000
	[0257.900] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.901] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.901] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 1
	[0257.901] GetProcessHeap () returned 0x800000
	[0257.901] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.901] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.901] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f21b70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x21839, dwReserved0=0x0, dwReserved1=0x0, cFileName="9DCB7d01", cAlternateFileName="")) returned 1
	[0257.901] ResetEvent (hEvent=0xfc) returned 1
	[0257.901] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0257.911] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f21b70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x21839, dwReserved0=0x0, dwReserved1=0x0, cFileName="9DCB7d01", cAlternateFileName="")) returned 0
	[0257.911] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.911] GetProcessHeap () returned 0x800000
	[0257.911] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.911] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 0
	[0257.911] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.911] GetProcessHeap () returned 0x800000
	[0257.911] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.911] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D", cAlternateFileName="")) returned 1
	[0257.911] GetProcessHeap () returned 0x800000
	[0257.911] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.912] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.912] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="08", cAlternateFileName="")) returned 1
	[0257.912] GetProcessHeap () returned 0x800000
	[0257.912] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.912] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.912] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8266, dwReserved0=0x0, dwReserved1=0x0, cFileName="71469d01", cAlternateFileName="")) returned 1
	[0257.912] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8266, dwReserved0=0x0, dwReserved1=0x0, cFileName="71469d01", cAlternateFileName="")) returned 0
	[0257.912] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0257.912] GetProcessHeap () returned 0x800000
	[0257.912] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0257.912] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="08", cAlternateFileName="")) returned 0
	[0257.912] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0257.912] GetProcessHeap () returned 0x800000
	[0257.912] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0257.912] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E", cAlternateFileName="")) returned 1
	[0257.912] GetProcessHeap () returned 0x800000
	[0257.913] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0257.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0257.913] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.913] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="69", cAlternateFileName="")) returned 1
	[0257.913] GetProcessHeap () returned 0x800000
	[0257.913] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0257.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0257.913] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0257.913] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb80063b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="885EEd01", cAlternateFileName="")) returned 1
	[0257.913] ResetEvent (hEvent=0xfc) returned 1
	[0257.913] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.010] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb80063b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="885EEd01", cAlternateFileName="")) returned 0
	[0258.010] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0258.010] GetProcessHeap () returned 0x800000
	[0258.010] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.010] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="69", cAlternateFileName="")) returned 0
	[0258.010] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0258.010] GetProcessHeap () returned 0x800000
	[0258.010] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0258.010] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F", cAlternateFileName="")) returned 1
	[0258.010] GetProcessHeap () returned 0x800000
	[0258.010] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0258.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0258.010] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.010] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="23", cAlternateFileName="")) returned 1
	[0258.010] GetProcessHeap () returned 0x800000
	[0258.011] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0258.011] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.011] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fe0250, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf888, dwReserved0=0x0, dwReserved1=0x0, cFileName="7E0FEd01", cAlternateFileName="")) returned 1
	[0258.011] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fe0250, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf888, dwReserved0=0x0, dwReserved1=0x0, cFileName="7E0FEd01", cAlternateFileName="")) returned 0
	[0258.011] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0258.011] GetProcessHeap () returned 0x800000
	[0258.011] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.011] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F0", cAlternateFileName="")) returned 1
	[0258.011] GetProcessHeap () returned 0x800000
	[0258.011] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0258.011] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.011] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x823c2350, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa80f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECB2Dd01", cAlternateFileName="")) returned 1
	[0258.011] ResetEvent (hEvent=0xfc) returned 1
	[0258.011] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.123] FindNextFileW (in: hFindFile=0x34d1a28, lpFindFileData=0x2f2e0a0 | out: lpFindFileData=0x2f2e0a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x823c2350, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa80f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECB2Dd01", cAlternateFileName="")) returned 0
	[0258.123] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0258.123] GetProcessHeap () returned 0x800000
	[0258.123] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.123] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F0", cAlternateFileName="")) returned 0
	[0258.123] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0258.123] GetProcessHeap () returned 0x800000
	[0258.123] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0258.123] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1
	[0258.123] ResetEvent (hEvent=0xfc) returned 1
	[0258.124] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.140] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1
	[0258.141] ResetEvent (hEvent=0xfc) returned 1
	[0258.141] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.148] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_003_", cAlternateFileName="_CACHE~4")) returned 1
	[0258.149] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 1
	[0258.149] ResetEvent (hEvent=0xfc) returned 1
	[0258.149] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.161] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 0
	[0258.162] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.162] GetProcessHeap () returned 0x800000
	[0258.162] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0258.162] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x655bf020, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x655bf020, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1
	[0258.162] GetProcessHeap () returned 0x800000
	[0258.162] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0258.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x655bf020, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6560b2e0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.162] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x655bf020, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6560b2e0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.162] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x655bf020, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x655bf020, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6560b2e0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x40102, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="INDEXS~1.ADA")) returned 1
	[0258.162] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x655bf020, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x655bf020, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6560b2e0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x40102, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="INDEXS~1.ADA")) returned 0
	[0258.162] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.162] GetProcessHeap () returned 0x800000
	[0258.162] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0258.162] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1
	[0258.162] GetProcessHeap () returned 0x800000
	[0258.162] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0258.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.163] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.163] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x825fd7f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x825fd7f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x825fd7f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.cache", cAlternateFileName="TEST-M~1.CAC")) returned 1
	[0258.163] ResetEvent (hEvent=0xfc) returned 1
	[0258.163] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.172] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8234ff30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.pset", cAlternateFileName="TEST-M~1.PSE")) returned 1
	[0258.173] ResetEvent (hEvent=0xfc) returned 1
	[0258.173] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.236] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82376090, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.sbstore", cAlternateFileName="TEST-M~1.SBS")) returned 1
	[0258.236] ResetEvent (hEvent=0xfc) returned 1
	[0258.236] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.247] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82695d70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82695d70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82695d70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.cache", cAlternateFileName="TEST-P~1.CAC")) returned 1
	[0258.247] ResetEvent (hEvent=0xfc) returned 1
	[0258.247] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.256] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.pset", cAlternateFileName="TEST-P~1.PSE")) returned 1
	[0258.256] ResetEvent (hEvent=0xfc) returned 1
	[0258.257] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.261] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82649ab0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82649ab0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.sbstore", cAlternateFileName="TEST-P~1.SBS")) returned 1
	[0258.261] ResetEvent (hEvent=0xfc) returned 1
	[0258.261] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.273] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82649ab0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82649ab0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.sbstore", cAlternateFileName="TEST-P~1.SBS")) returned 0
	[0258.273] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.274] GetProcessHeap () returned 0x800000
	[0258.274] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0258.274] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1
	[0258.274] GetProcessHeap () returned 0x800000
	[0258.274] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0258.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.274] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.274] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x854b47b0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache.4.little", cAlternateFileName="STARTU~1.LIT")) returned 1
	[0258.274] ResetEvent (hEvent=0xfc) returned 1
	[0258.274] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.286] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x854b47b0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache.4.little", cAlternateFileName="STARTU~1.LIT")) returned 0
	[0258.286] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.286] GetProcessHeap () returned 0x800000
	[0258.286] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0258.286] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1
	[0258.286] GetProcessHeap () returned 0x800000
	[0258.286] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0258.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.287] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.287] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4cc87c1409819bf06f42b782d4902b2f.png", cAlternateFileName="4CC87C~1.PNG")) returned 1
	[0258.287] ResetEvent (hEvent=0xfc) returned 1
	[0258.287] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.294] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ba182bcd131f1f3c6b6fbbb1ba078341.png", cAlternateFileName="BA182B~1.PNG")) returned 1
	[0258.294] ResetEvent (hEvent=0xfc) returned 1
	[0258.294] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.306] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb97ade50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1c362, dwReserved0=0x0, dwReserved1=0x0, cFileName="ce8c0453589216a67cddb50284fbfe8d.png", cAlternateFileName="CE8C04~1.PNG")) returned 1
	[0258.307] ResetEvent (hEvent=0xfc) returned 1
	[0258.307] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.316] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb97ade50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1c362, dwReserved0=0x0, dwReserved1=0x0, cFileName="ce8c0453589216a67cddb50284fbfe8d.png", cAlternateFileName="CE8C04~1.PNG")) returned 0
	[0258.316] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.316] GetProcessHeap () returned 0x800000
	[0258.316] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0258.316] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1
	[0258.316] ResetEvent (hEvent=0xfc) returned 1
	[0258.317] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.326] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 0
	[0258.326] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0258.326] GetProcessHeap () returned 0x800000
	[0258.326] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0258.327] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0
	[0258.327] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0258.327] GetProcessHeap () returned 0x800000
	[0258.327] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0258.328] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0
	[0258.328] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0258.328] GetProcessHeap () returned 0x800000
	[0258.328] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0258.328] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1
	[0258.328] GetProcessHeap () returned 0x800000
	[0258.328] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0258.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0258.328] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.328] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E7CF176E110C211B", cAlternateFileName="E7CF17~1")) returned 1
	[0258.328] GetProcessHeap () returned 0x800000
	[0258.328] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0258.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0258.329] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.329] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-update.xml", cAlternateFileName="ACTIVE~1.XML")) returned 1
	[0258.329] ResetEvent (hEvent=0xfc) returned 1
	[0258.329] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.336] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1
	[0258.336] GetProcessHeap () returned 0x800000
	[0258.336] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0258.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0258.337] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.337] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1
	[0258.337] GetProcessHeap () returned 0x800000
	[0258.337] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0258.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.338] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.338] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.mar", cAlternateFileName="")) returned 1
	[0258.338] ResetEvent (hEvent=0xfc) returned 1
	[0258.338] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.352] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 1
	[0258.352] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 0
	[0258.352] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.352] GetProcessHeap () returned 0x800000
	[0258.352] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0258.352] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 0
	[0258.352] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0258.352] GetProcessHeap () returned 0x800000
	[0258.352] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0258.352] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 1
	[0258.352] ResetEvent (hEvent=0xfc) returned 1
	[0258.352] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.382] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 0
	[0258.382] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0258.382] GetProcessHeap () returned 0x800000
	[0258.383] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0258.383] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E7CF176E110C211B", cAlternateFileName="E7CF17~1")) returned 0
	[0258.383] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0258.383] GetProcessHeap () returned 0x800000
	[0258.383] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0258.384] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 0
	[0258.384] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0258.384] GetProcessHeap () returned 0x800000
	[0258.384] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0258.384] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfae767b0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xfae767b0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xdfee6800, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x49c53, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rsfd234df.exe", cAlternateFileName="RSFD23~1.EXE")) returned 1
	[0258.384] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d53d260, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x2d53d260, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0258.384] GetProcessHeap () returned 0x800000
	[0258.384] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0258.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d53d260, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6d5b0ea0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0258.384] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d53d260, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6d5b0ea0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.384] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98617bf0, ftCreationTime.dwHighDateTime=0x1d4d188, ftLastAccessTime.dwLowDateTime=0xa511fbc0, ftLastAccessTime.dwHighDateTime=0x1d4d531, ftLastWriteTime.dwLowDateTime=0xa511fbc0, ftLastWriteTime.dwHighDateTime=0x1d4d531, nFileSizeHigh=0x0, nFileSizeLow=0x2c8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0CyEX1bdaUTstsgk.bmp", cAlternateFileName="0CYEX1~1.BMP")) returned 1
	[0258.384] ResetEvent (hEvent=0xfc) returned 1
	[0258.384] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.401] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62e347b0, ftCreationTime.dwHighDateTime=0x1d4c76a, ftLastAccessTime.dwLowDateTime=0x91607160, ftLastAccessTime.dwHighDateTime=0x1d4d54a, ftLastWriteTime.dwLowDateTime=0x91607160, ftLastWriteTime.dwHighDateTime=0x1d4d54a, nFileSizeHigh=0x0, nFileSizeLow=0xcf2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0xCgXbTFGg8.bmp", cAlternateFileName="0XCGXB~1.BMP")) returned 1
	[0258.401] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8426eba0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x8426eba0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0x20fcd340, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.log", cAlternateFileName="")) returned 1
	[0258.401] ResetEvent (hEvent=0xfc) returned 1
	[0258.401] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.410] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa16ae620, ftCreationTime.dwHighDateTime=0x1d4c722, ftLastAccessTime.dwLowDateTime=0x3ee99260, ftLastAccessTime.dwHighDateTime=0x1d4d0c0, ftLastWriteTime.dwLowDateTime=0x3ee99260, ftLastWriteTime.dwHighDateTime=0x1d4d0c0, nFileSizeHigh=0x0, nFileSizeLow=0xca1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cf86wM.bmp", cAlternateFileName="")) returned 1
	[0258.410] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0258.410] GetProcessHeap () returned 0x800000
	[0258.410] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0258.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0258.411] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.411] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0258.411] ResetEvent (hEvent=0xfc) returned 1
	[0258.411] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.417] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
	[0258.417] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0258.417] GetProcessHeap () returned 0x800000
	[0258.417] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0258.417] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd585fbf0, ftCreationTime.dwHighDateTime=0x1d4cf53, ftLastAccessTime.dwLowDateTime=0x2ce9e2b0, ftLastAccessTime.dwHighDateTime=0x1d4c691, ftLastWriteTime.dwLowDateTime=0x2ce9e2b0, ftLastWriteTime.dwHighDateTime=0x1d4c691, nFileSizeHigh=0x0, nFileSizeLow=0x17ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="fJEj 5HP.bmp", cAlternateFileName="FJEJ5H~1.BMP")) returned 1
	[0258.417] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1
	[0258.417] ResetEvent (hEvent=0xfc) returned 1
	[0258.417] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.432] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20bce5f0, ftCreationTime.dwHighDateTime=0x1d4cd08, ftLastAccessTime.dwLowDateTime=0xbd5b16a0, ftLastAccessTime.dwHighDateTime=0x1d4cd78, ftLastWriteTime.dwLowDateTime=0xbd5b16a0, ftLastWriteTime.dwHighDateTime=0x1d4cd78, nFileSizeHigh=0x0, nFileSizeLow=0x14f9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gfgz4rWfp7oT.mp3", cAlternateFileName="GFGZ4R~1.MP3")) returned 1
	[0258.432] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4967f730, ftCreationTime.dwHighDateTime=0x1d4c748, ftLastAccessTime.dwLowDateTime=0x86512a40, ftLastAccessTime.dwHighDateTime=0x1d4d0f8, ftLastWriteTime.dwLowDateTime=0x86512a40, ftLastWriteTime.dwHighDateTime=0x1d4d0f8, nFileSizeHigh=0x0, nFileSizeLow=0x1187a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gg4xk1N.flv", cAlternateFileName="")) returned 1
	[0258.432] ResetEvent (hEvent=0xfc) returned 1
	[0258.432] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.441] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa72a4f90, ftCreationTime.dwHighDateTime=0x1d4ca1c, ftLastAccessTime.dwLowDateTime=0x30fc05c0, ftLastAccessTime.dwHighDateTime=0x1d4c724, ftLastWriteTime.dwLowDateTime=0x30fc05c0, ftLastWriteTime.dwHighDateTime=0x1d4c724, nFileSizeHigh=0x0, nFileSizeLow=0x5dbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="gVnNwVh4Hp2qq-cKD.swf", cAlternateFileName="GVNNWV~1.SWF")) returned 1
	[0258.442] ResetEvent (hEvent=0xfc) returned 1
	[0258.442] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.467] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87c55940, ftCreationTime.dwHighDateTime=0x1d4cc4e, ftLastAccessTime.dwLowDateTime=0xd92825b0, ftLastAccessTime.dwHighDateTime=0x1d4cda2, ftLastWriteTime.dwLowDateTime=0xd92825b0, ftLastWriteTime.dwHighDateTime=0x1d4cda2, nFileSizeHigh=0x0, nFileSizeLow=0xa47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="H6EkUkPNBU5LkRGeQ.png", cAlternateFileName="H6EKUK~1.PNG")) returned 1
	[0258.468] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0258.468] GetProcessHeap () returned 0x800000
	[0258.468] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0258.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0258.468] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.468] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1
	[0258.468] GetProcessHeap () returned 0x800000
	[0258.468] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0258.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0258.469] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.469] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9824200, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0258.469] ResetEvent (hEvent=0xfc) returned 1
	[0258.469] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.491] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0258.491] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
	[0258.491] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0258.492] GetProcessHeap () returned 0x800000
	[0258.492] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0258.492] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 0
	[0258.492] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0258.492] GetProcessHeap () returned 0x800000
	[0258.492] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0258.492] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde18bdc0, ftCreationTime.dwHighDateTime=0x1d4c896, ftLastAccessTime.dwLowDateTime=0x142d920, ftLastAccessTime.dwHighDateTime=0x1d4d2ec, ftLastWriteTime.dwLowDateTime=0x142d920, ftLastWriteTime.dwHighDateTime=0x1d4d2ec, nFileSizeHigh=0x0, nFileSizeLow=0x4fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="jAxYfa-8PuC01ur.wav", cAlternateFileName="JAXYFA~1.WAV")) returned 1
	[0258.492] ResetEvent (hEvent=0xfc) returned 1
	[0258.492] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.535] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x73f6faa0, ftCreationTime.dwHighDateTime=0x1d4d413, ftLastAccessTime.dwLowDateTime=0x37717710, ftLastAccessTime.dwHighDateTime=0x1d4d295, ftLastWriteTime.dwLowDateTime=0x37717710, ftLastWriteTime.dwHighDateTime=0x1d4d295, nFileSizeHigh=0x0, nFileSizeLow=0x62c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jn_32c-RrWu.wav", cAlternateFileName="JN_32C~1.WAV")) returned 1
	[0258.538] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc4b6e760, ftCreationTime.dwHighDateTime=0x1d4d3a6, ftLastAccessTime.dwLowDateTime=0x2df3fbf0, ftLastAccessTime.dwHighDateTime=0x1d4cfe2, ftLastWriteTime.dwLowDateTime=0x2df3fbf0, ftLastWriteTime.dwHighDateTime=0x1d4cfe2, nFileSizeHigh=0x0, nFileSizeLow=0x14ff7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jw3joWweu.jpg", cAlternateFileName="JW3JOW~1.JPG")) returned 1
	[0258.538] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x809811a0, ftCreationTime.dwHighDateTime=0x1d4d19c, ftLastAccessTime.dwLowDateTime=0x1c9c4550, ftLastAccessTime.dwHighDateTime=0x1d4c7d2, ftLastWriteTime.dwLowDateTime=0x1c9c4550, ftLastWriteTime.dwHighDateTime=0x1d4c7d2, nFileSizeHigh=0x0, nFileSizeLow=0xb704, dwReserved0=0x0, dwReserved1=0x0, cFileName="jZQWJ.gif", cAlternateFileName="")) returned 1
	[0258.538] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96948e40, ftCreationTime.dwHighDateTime=0x1d4cd21, ftLastAccessTime.dwLowDateTime=0xd627d440, ftLastAccessTime.dwHighDateTime=0x1d4d253, ftLastWriteTime.dwLowDateTime=0xd627d440, ftLastWriteTime.dwHighDateTime=0x1d4d253, nFileSizeHigh=0x0, nFileSizeLow=0x10fcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka0fUIDQ.mp4", cAlternateFileName="")) returned 1
	[0258.538] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7f8b3f0, ftCreationTime.dwHighDateTime=0x1d4c62f, ftLastAccessTime.dwLowDateTime=0x3067ff10, ftLastAccessTime.dwHighDateTime=0x1d4ca85, ftLastWriteTime.dwLowDateTime=0x3067ff10, ftLastWriteTime.dwHighDateTime=0x1d4ca85, nFileSizeHigh=0x0, nFileSizeLow=0x444a, dwReserved0=0x0, dwReserved1=0x0, cFileName="KilKwkIKEnU.png", cAlternateFileName="KILKWK~1.PNG")) returned 1
	[0258.538] ResetEvent (hEvent=0xfc) returned 1
	[0258.538] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.568] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe44d7b0, ftCreationTime.dwHighDateTime=0x1d4c57f, ftLastAccessTime.dwLowDateTime=0x713614a0, ftLastAccessTime.dwHighDateTime=0x1d4c567, ftLastWriteTime.dwLowDateTime=0x713614a0, ftLastWriteTime.dwHighDateTime=0x1d4c567, nFileSizeHigh=0x0, nFileSizeLow=0x428e, dwReserved0=0x0, dwReserved1=0x0, cFileName="kKl5pOD1DYy3po.bmp", cAlternateFileName="KKL5PO~1.BMP")) returned 1
	[0258.569] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa05109b0, ftCreationTime.dwHighDateTime=0x1d4d3af, ftLastAccessTime.dwLowDateTime=0x52a40530, ftLastAccessTime.dwHighDateTime=0x1d4d24e, ftLastWriteTime.dwLowDateTime=0x52a40530, ftLastWriteTime.dwHighDateTime=0x1d4d24e, nFileSizeHigh=0x0, nFileSizeLow=0x109b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="KsTqCAR.wav", cAlternateFileName="")) returned 1
	[0258.570] ResetEvent (hEvent=0xfc) returned 1
	[0258.570] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.577] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1cdd2370, ftCreationTime.dwHighDateTime=0x1d4d1d9, ftLastAccessTime.dwLowDateTime=0xa782aa80, ftLastAccessTime.dwHighDateTime=0x1d4d1f8, ftLastWriteTime.dwLowDateTime=0xa782aa80, ftLastWriteTime.dwHighDateTime=0x1d4d1f8, nFileSizeHigh=0x0, nFileSizeLow=0x17925, dwReserved0=0x0, dwReserved1=0x0, cFileName="LIXc9zepSV8sXh.gif", cAlternateFileName="LIXC9Z~1.GIF")) returned 1
	[0258.579] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c7c15a0, ftCreationTime.dwHighDateTime=0x1d4d328, ftLastAccessTime.dwLowDateTime=0xd325aff0, ftLastAccessTime.dwHighDateTime=0x1d4cc41, ftLastWriteTime.dwLowDateTime=0xd325aff0, ftLastWriteTime.dwHighDateTime=0x1d4cc41, nFileSizeHigh=0x0, nFileSizeLow=0x127d, dwReserved0=0x0, dwReserved1=0x0, cFileName="lRUR1FB.png", cAlternateFileName="")) returned 1
	[0258.580] ResetEvent (hEvent=0xfc) returned 1
	[0258.580] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.585] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b422110, ftCreationTime.dwHighDateTime=0x1d4d40f, ftLastAccessTime.dwLowDateTime=0x3f2e3710, ftLastAccessTime.dwHighDateTime=0x1d4ca1e, ftLastWriteTime.dwLowDateTime=0x3f2e3710, ftLastWriteTime.dwHighDateTime=0x1d4ca1e, nFileSizeHigh=0x0, nFileSizeLow=0x9b11, dwReserved0=0x0, dwReserved1=0x0, cFileName="LSvRKzh.avi", cAlternateFileName="")) returned 1
	[0258.587] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d396f0, ftCreationTime.dwHighDateTime=0x1d4ce5b, ftLastAccessTime.dwLowDateTime=0x7979c240, ftLastAccessTime.dwHighDateTime=0x1d4cde3, ftLastWriteTime.dwLowDateTime=0x7979c240, ftLastWriteTime.dwHighDateTime=0x1d4cde3, nFileSizeHigh=0x0, nFileSizeLow=0x149c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LziKnoR2UQ91ZAXB.jpg", cAlternateFileName="LZIKNO~1.JPG")) returned 1
	[0258.588] ResetEvent (hEvent=0xfc) returned 1
	[0258.588] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.625] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a25c890, ftCreationTime.dwHighDateTime=0x1d4c550, ftLastAccessTime.dwLowDateTime=0x6c0464f0, ftLastAccessTime.dwHighDateTime=0x1d4c68e, ftLastWriteTime.dwLowDateTime=0x6c0464f0, ftLastWriteTime.dwHighDateTime=0x1d4c68e, nFileSizeHigh=0x0, nFileSizeLow=0xf651, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mae5WPDu0BBoIWoHS6o.ots", cAlternateFileName="MAE5WP~1.OTS")) returned 1
	[0258.625] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d60bfd0, ftCreationTime.dwHighDateTime=0x1d4d0a9, ftLastAccessTime.dwLowDateTime=0xb7bd7200, ftLastAccessTime.dwHighDateTime=0x1d4cc6b, ftLastWriteTime.dwLowDateTime=0xb7bd7200, ftLastWriteTime.dwHighDateTime=0x1d4cc6b, nFileSizeHigh=0x0, nFileSizeLow=0x1525a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxFz.mkv", cAlternateFileName="")) returned 1
	[0258.627] ResetEvent (hEvent=0xfc) returned 1
	[0258.627] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.636] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ce43650, ftCreationTime.dwHighDateTime=0x1d4d4e8, ftLastAccessTime.dwLowDateTime=0x406a0b00, ftLastAccessTime.dwHighDateTime=0x1d4d4a9, ftLastWriteTime.dwLowDateTime=0x406a0b00, ftLastWriteTime.dwHighDateTime=0x1d4d4a9, nFileSizeHigh=0x0, nFileSizeLow=0xabab, dwReserved0=0x0, dwReserved1=0x0, cFileName="qjfCEYsLZ6d.mp3", cAlternateFileName="QJFCEY~1.MP3")) returned 1
	[0258.637] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30dd3e90, ftCreationTime.dwHighDateTime=0x1d4cd84, ftLastAccessTime.dwLowDateTime=0xb42fa950, ftLastAccessTime.dwHighDateTime=0x1d4cdc9, ftLastWriteTime.dwLowDateTime=0xb42fa950, ftLastWriteTime.dwHighDateTime=0x1d4cdc9, nFileSizeHigh=0x0, nFileSizeLow=0x7640, dwReserved0=0x0, dwReserved1=0x0, cFileName="sOIfBHl.swf", cAlternateFileName="")) returned 1
	[0258.638] ResetEvent (hEvent=0xfc) returned 1
	[0258.638] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.644] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0258.646] GetProcessHeap () returned 0x800000
	[0258.646] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0258.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0258.648] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.648] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 1
	[0258.649] GetProcessHeap () returned 0x800000
	[0258.649] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0258.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0258.657] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.657] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="03J4UQW0", cAlternateFileName="")) returned 1
	[0258.657] GetProcessHeap () returned 0x800000
	[0258.657] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0258.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0258.659] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.659] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0258.660] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0258.660] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0258.660] GetProcessHeap () returned 0x800000
	[0258.664] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0258.664] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0258.669] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0258.669] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KETAJP6D", cAlternateFileName="")) returned 1
	[0258.669] GetProcessHeap () returned 0x800000
	[0258.669] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0258.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0258.670] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.670] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0258.676] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0258.678] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0258.678] GetProcessHeap () returned 0x800000
	[0258.679] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0258.679] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VB18B0KB", cAlternateFileName="")) returned 1
	[0258.679] GetProcessHeap () returned 0x800000
	[0258.679] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0258.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0258.685] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.687] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0258.688] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0258.689] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0258.689] GetProcessHeap () returned 0x800000
	[0258.689] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0258.689] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XT1RPYG9", cAlternateFileName="")) returned 1
	[0258.690] GetProcessHeap () returned 0x800000
	[0258.691] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0258.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0258.697] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.697] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0258.698] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0258.698] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0258.698] GetProcessHeap () returned 0x800000
	[0258.698] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0258.698] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XT1RPYG9", cAlternateFileName="")) returned 0
	[0258.698] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0258.698] GetProcessHeap () returned 0x800000
	[0258.698] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0258.699] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 0
	[0258.706] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0258.707] GetProcessHeap () returned 0x800000
	[0258.707] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0258.707] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x873bb0e0, ftCreationTime.dwHighDateTime=0x1d4d172, ftLastAccessTime.dwLowDateTime=0xd35dac30, ftLastAccessTime.dwHighDateTime=0x1d4c628, ftLastWriteTime.dwLowDateTime=0xd35dac30, ftLastWriteTime.dwHighDateTime=0x1d4c628, nFileSizeHigh=0x0, nFileSizeLow=0xa1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="TuOvlM4Kcs4ITjKO.mp3", cAlternateFileName="TUOVLM~1.MP3")) returned 1
	[0258.708] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x685ca920, ftCreationTime.dwHighDateTime=0x1d4ce22, ftLastAccessTime.dwLowDateTime=0xfeae1ef0, ftLastAccessTime.dwHighDateTime=0x1d4c8ef, ftLastWriteTime.dwLowDateTime=0xfeae1ef0, ftLastWriteTime.dwHighDateTime=0x1d4c8ef, nFileSizeHigh=0x0, nFileSizeLow=0x161be, dwReserved0=0x0, dwReserved1=0x0, cFileName="U80XxO8Y__4OvDRQKwTk.swf", cAlternateFileName="U80XXO~1.SWF")) returned 1
	[0258.708] ResetEvent (hEvent=0xfc) returned 1
	[0258.708] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.716] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5375b00, ftCreationTime.dwHighDateTime=0x1d4ccc7, ftLastAccessTime.dwLowDateTime=0xa4af2530, ftLastAccessTime.dwHighDateTime=0x1d4ce34, ftLastWriteTime.dwLowDateTime=0xa4af2530, ftLastWriteTime.dwHighDateTime=0x1d4ce34, nFileSizeHigh=0x0, nFileSizeLow=0x13657, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMGdr1Rbcy9oUdNJMV.mkv", cAlternateFileName="UMGDR1~1.MKV")) returned 1
	[0258.718] ResetEvent (hEvent=0xfc) returned 1
	[0258.718] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.727] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x22873c00, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x22873c00, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x22873c00, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1
	[0258.728] GetProcessHeap () returned 0x800000
	[0258.728] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0258.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x22873c00, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x22873c00, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x22873c00, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0258.729] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x22873c00, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x22873c00, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x22873c00, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.729] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x22873c00, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x22873c00, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x22873c00, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.730] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0258.730] GetProcessHeap () returned 0x800000
	[0258.730] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0258.730] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x963112e0, ftCreationTime.dwHighDateTime=0x1d4c87e, ftLastAccessTime.dwLowDateTime=0x3584ae20, ftLastAccessTime.dwHighDateTime=0x1d4cb35, ftLastWriteTime.dwLowDateTime=0x3584ae20, ftLastWriteTime.dwHighDateTime=0x1d4cb35, nFileSizeHigh=0x0, nFileSizeLow=0x4754, dwReserved0=0x0, dwReserved1=0x0, cFileName="zbWmBsw0RqRH4QqSw6.gif", cAlternateFileName="ZBWMBS~1.GIF")) returned 1
	[0258.730] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf89311a0, ftCreationTime.dwHighDateTime=0x1d4d061, ftLastAccessTime.dwLowDateTime=0x32c4f9e0, ftLastAccessTime.dwHighDateTime=0x1d4cfbf, ftLastWriteTime.dwLowDateTime=0x32c4f9e0, ftLastWriteTime.dwHighDateTime=0x1d4cfbf, nFileSizeHigh=0x0, nFileSizeLow=0x21c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zc0kBdG.odp", cAlternateFileName="")) returned 1
	[0258.730] ResetEvent (hEvent=0xfc) returned 1
	[0258.730] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.741] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc16ad1d0, ftCreationTime.dwHighDateTime=0x1d4d102, ftLastAccessTime.dwLowDateTime=0xdda671d0, ftLastAccessTime.dwHighDateTime=0x1d4c7c3, ftLastWriteTime.dwLowDateTime=0xdda671d0, ftLastWriteTime.dwHighDateTime=0x1d4c7c3, nFileSizeHigh=0x0, nFileSizeLow=0x9cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Z8q5Y8k3Go_B3W.wav", cAlternateFileName="_Z8Q5Y~1.WAV")) returned 1
	[0258.742] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc16ad1d0, ftCreationTime.dwHighDateTime=0x1d4d102, ftLastAccessTime.dwLowDateTime=0xdda671d0, ftLastAccessTime.dwHighDateTime=0x1d4c7c3, ftLastWriteTime.dwLowDateTime=0xdda671d0, ftLastWriteTime.dwHighDateTime=0x1d4c7c3, nFileSizeHigh=0x0, nFileSizeLow=0x9cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Z8q5Y8k3Go_B3W.wav", cAlternateFileName="_Z8Q5Y~1.WAV")) returned 0
	[0258.742] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0258.742] GetProcessHeap () returned 0x800000
	[0258.742] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0258.750] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1
	[0258.754] GetProcessHeap () returned 0x800000
	[0258.754] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e00048
	[0258.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0258.761] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.762] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.762] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0258.762] GetProcessHeap () returned 0x800000
	[0258.762] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0258.762] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0
	[0258.762] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0258.762] GetProcessHeap () returned 0x800000
	[0258.763] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0258.771] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1
	[0258.773] GetProcessHeap () returned 0x800000
	[0258.774] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0258.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0258.776] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.776] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0258.784] GetProcessHeap () returned 0x800000
	[0258.784] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0258.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0258.788] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.788] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0258.788] GetProcessHeap () returned 0x800000
	[0258.788] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0258.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0258.799] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.799] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0258.799] GetProcessHeap () returned 0x800000
	[0258.800] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0258.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0258.818] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.818] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1
	[0258.818] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1
	[0258.818] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
	[0258.818] GetProcessHeap () returned 0x800000
	[0258.818] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0258.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0258.821] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.828] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.828] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0258.828] GetProcessHeap () returned 0x800000
	[0258.828] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0258.829] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0
	[0258.829] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0258.829] GetProcessHeap () returned 0x800000
	[0258.829] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0258.829] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0
	[0258.829] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0258.835] GetProcessHeap () returned 0x800000
	[0258.837] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0258.837] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
	[0258.838] GetProcessHeap () returned 0x800000
	[0258.838] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0258.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0258.840] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.840] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1
	[0258.841] GetProcessHeap () returned 0x800000
	[0258.841] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0258.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0258.847] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.848] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1
	[0258.849] GetProcessHeap () returned 0x800000
	[0258.849] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0258.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0258.867] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.869] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1
	[0258.870] GetProcessHeap () returned 0x800000
	[0258.870] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.877] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.880] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.880] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.883] GetProcessHeap () returned 0x800000
	[0258.883] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.883] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1
	[0258.883] GetProcessHeap () returned 0x800000
	[0258.883] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.885] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.885] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.889] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.891] GetProcessHeap () returned 0x800000
	[0258.891] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.892] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1
	[0258.892] GetProcessHeap () returned 0x800000
	[0258.892] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.893] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.893] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.893] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.893] GetProcessHeap () returned 0x800000
	[0258.894] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.894] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1
	[0258.894] GetProcessHeap () returned 0x800000
	[0258.894] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.900] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.900] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.900] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.900] GetProcessHeap () returned 0x800000
	[0258.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.902] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1
	[0258.903] GetProcessHeap () returned 0x800000
	[0258.903] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.903] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.903] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.903] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.903] GetProcessHeap () returned 0x800000
	[0258.904] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.904] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1
	[0258.904] GetProcessHeap () returned 0x800000
	[0258.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.912] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.913] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.913] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.913] GetProcessHeap () returned 0x800000
	[0258.913] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.913] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1
	[0258.913] GetProcessHeap () returned 0x800000
	[0258.913] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.914] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.914] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.914] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.914] GetProcessHeap () returned 0x800000
	[0258.915] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.915] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1
	[0258.915] GetProcessHeap () returned 0x800000
	[0258.915] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.923] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.923] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.924] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.924] GetProcessHeap () returned 0x800000
	[0258.924] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.924] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1
	[0258.924] GetProcessHeap () returned 0x800000
	[0258.924] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.925] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.925] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.925] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.929] GetProcessHeap () returned 0x800000
	[0258.933] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.933] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1
	[0258.936] GetProcessHeap () returned 0x800000
	[0258.936] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.937] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.937] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.938] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.938] GetProcessHeap () returned 0x800000
	[0258.938] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.938] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1
	[0258.939] GetProcessHeap () returned 0x800000
	[0258.939] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.946] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.947] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.947] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.947] GetProcessHeap () returned 0x800000
	[0258.947] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.947] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1
	[0258.947] GetProcessHeap () returned 0x800000
	[0258.947] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.948] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.948] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.954] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.954] GetProcessHeap () returned 0x800000
	[0258.954] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.954] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1
	[0258.957] GetProcessHeap () returned 0x800000
	[0258.957] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0258.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0258.958] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.960] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0258.960] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0258.960] GetProcessHeap () returned 0x800000
	[0258.960] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0258.960] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 0
	[0258.960] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0258.960] GetProcessHeap () returned 0x800000
	[0258.960] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0258.960] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0
	[0258.960] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0258.960] GetProcessHeap () returned 0x800000
	[0258.960] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0258.960] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0
	[0258.961] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0258.961] GetProcessHeap () returned 0x800000
	[0258.961] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0258.967] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0
	[0258.968] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0258.970] GetProcessHeap () returned 0x800000
	[0258.970] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0258.970] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0258.971] GetProcessHeap () returned 0x800000
	[0258.971] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0258.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0258.971] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.971] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1
	[0258.971] GetProcessHeap () returned 0x800000
	[0258.971] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0258.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0258.972] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.972] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1
	[0258.972] GetProcessHeap () returned 0x800000
	[0258.972] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0258.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0258.972] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.972] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1
	[0258.973] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1
	[0258.973] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1
	[0258.973] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1
	[0258.973] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1
	[0258.973] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1
	[0258.973] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1
	[0258.973] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1
	[0258.973] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1
	[0258.973] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1
	[0258.973] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1
	[0258.974] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1
	[0258.974] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1
	[0258.974] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1
	[0258.974] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1
	[0258.974] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1
	[0258.974] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1
	[0258.974] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
	[0258.974] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1
	[0258.974] ResetEvent (hEvent=0xfc) returned 1
	[0258.974] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0258.979] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1
	[0258.980] ResetEvent (hEvent=0xfc) returned 1
	[0258.980] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.007] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1
	[0259.007] ResetEvent (hEvent=0xfc) returned 1
	[0259.007] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.170] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1
	[0259.170] ResetEvent (hEvent=0xfc) returned 1
	[0259.170] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.182] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1
	[0259.182] ResetEvent (hEvent=0xfc) returned 1
	[0259.182] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.212] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1
	[0259.213] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1
	[0259.213] ResetEvent (hEvent=0xfc) returned 1
	[0259.213] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.225] ResetEvent (hEvent=0xfc) returned 1
	[0259.226] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.237] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1
	[0259.238] ResetEvent (hEvent=0xfc) returned 1
	[0259.238] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.245] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1
	[0259.245] ResetEvent (hEvent=0xfc) returned 1
	[0259.245] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.255] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1
	[0259.255] ResetEvent (hEvent=0xfc) returned 1
	[0259.255] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.398] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1
	[0259.398] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1
	[0259.399] ResetEvent (hEvent=0xfc) returned 1
	[0259.399] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.416] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1
	[0259.416] ResetEvent (hEvent=0xfc) returned 1
	[0259.416] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.424] ResetEvent (hEvent=0xfc) returned 1
	[0259.424] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.432] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1
	[0259.432] ResetEvent (hEvent=0xfc) returned 1
	[0259.432] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.439] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1
	[0259.439] ResetEvent (hEvent=0xfc) returned 1
	[0259.439] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.460] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1
	[0259.460] ResetEvent (hEvent=0xfc) returned 1
	[0259.460] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.478] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1
	[0259.478] ResetEvent (hEvent=0xfc) returned 1
	[0259.478] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.488] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
	[0259.488] ResetEvent (hEvent=0xfc) returned 1
	[0259.488] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.511] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1
	[0259.511] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1
	[0259.512] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1
	[0259.512] ResetEvent (hEvent=0xfc) returned 1
	[0259.512] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.529] ResetEvent (hEvent=0xfc) returned 1
	[0259.529] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.539] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1
	[0259.540] ResetEvent (hEvent=0xfc) returned 1
	[0259.540] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.548] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1
	[0259.549] ResetEvent (hEvent=0xfc) returned 1
	[0259.549] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.564] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1
	[0259.564] ResetEvent (hEvent=0xfc) returned 1
	[0259.564] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.590] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1
	[0259.590] ResetEvent (hEvent=0xfc) returned 1
	[0259.590] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.608] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1
	[0259.608] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1
	[0259.608] ResetEvent (hEvent=0xfc) returned 1
	[0259.608] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.622] ResetEvent (hEvent=0xfc) returned 1
	[0259.622] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.647] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1
	[0259.647] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1
	[0259.647] ResetEvent (hEvent=0xfc) returned 1
	[0259.647] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.663] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1
	[0259.663] ResetEvent (hEvent=0xfc) returned 1
	[0259.663] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.674] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1
	[0259.674] ResetEvent (hEvent=0xfc) returned 1
	[0259.674] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.684] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1
	[0259.684] ResetEvent (hEvent=0xfc) returned 1
	[0259.684] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.921] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1
	[0259.921] ResetEvent (hEvent=0xfc) returned 1
	[0259.921] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.940] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1
	[0259.940] ResetEvent (hEvent=0xfc) returned 1
	[0259.940] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.942] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1
	[0259.942] ResetEvent (hEvent=0xfc) returned 1
	[0259.942] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.969] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1
	[0259.969] ResetEvent (hEvent=0xfc) returned 1
	[0259.969] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0259.987] ResetEvent (hEvent=0xfc) returned 1
	[0259.987] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.001] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1
	[0260.001] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0
	[0260.001] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0260.001] GetProcessHeap () returned 0x800000
	[0260.001] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0260.001] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1
	[0260.002] GetProcessHeap () returned 0x800000
	[0260.002] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0260.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0260.002] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0260.002] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1
	[0260.003] ResetEvent (hEvent=0xfc) returned 1
	[0260.003] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.024] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1
	[0260.024] ResetEvent (hEvent=0xfc) returned 1
	[0260.024] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.038] ResetEvent (hEvent=0xfc) returned 1
	[0260.038] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.209] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1
	[0260.209] ResetEvent (hEvent=0xfc) returned 1
	[0260.209] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.413] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1
	[0260.413] ResetEvent (hEvent=0xfc) returned 1
	[0260.413] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.434] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1
	[0260.434] ResetEvent (hEvent=0xfc) returned 1
	[0260.434] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.439] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1
	[0260.439] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1
	[0260.439] ResetEvent (hEvent=0xfc) returned 1
	[0260.439] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.444] ResetEvent (hEvent=0xfc) returned 1
	[0260.444] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.454] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1
	[0260.454] ResetEvent (hEvent=0xfc) returned 1
	[0260.454] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.469] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1
	[0260.469] ResetEvent (hEvent=0xfc) returned 1
	[0260.470] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.486] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1
	[0260.487] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1
	[0260.487] ResetEvent (hEvent=0xfc) returned 1
	[0260.487] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.505] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1
	[0260.505] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1
	[0260.505] ResetEvent (hEvent=0xfc) returned 1
	[0260.506] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.518] ResetEvent (hEvent=0xfc) returned 1
	[0260.518] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.533] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1
	[0260.533] ResetEvent (hEvent=0xfc) returned 1
	[0260.533] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.543] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1
	[0260.543] ResetEvent (hEvent=0xfc) returned 1
	[0260.543] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.553] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1
	[0260.553] ResetEvent (hEvent=0xfc) returned 1
	[0260.553] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.565] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1
	[0260.565] ResetEvent (hEvent=0xfc) returned 1
	[0260.565] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.574] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd48e2bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
	[0260.574] ResetEvent (hEvent=0xfc) returned 1
	[0260.574] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.581] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1
	[0260.582] ResetEvent (hEvent=0xfc) returned 1
	[0260.582] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.597] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1
	[0260.597] ResetEvent (hEvent=0xfc) returned 1
	[0260.597] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.609] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1
	[0260.609] ResetEvent (hEvent=0xfc) returned 1
	[0260.609] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.626] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1
	[0260.626] ResetEvent (hEvent=0xfc) returned 1
	[0260.626] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.634] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x611ea800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x611ea800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1
	[0260.634] ResetEvent (hEvent=0xfc) returned 1
	[0260.634] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.655] ResetEvent (hEvent=0xfc) returned 1
	[0260.655] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.664] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1
	[0260.664] ResetEvent (hEvent=0xfc) returned 1
	[0260.664] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.673] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1
	[0260.673] ResetEvent (hEvent=0xfc) returned 1
	[0260.673] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.681] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5836df00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5836df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1
	[0260.682] ResetEvent (hEvent=0xfc) returned 1
	[0260.682] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.691] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1
	[0260.692] ResetEvent (hEvent=0xfc) returned 1
	[0260.692] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.701] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1
	[0260.702] ResetEvent (hEvent=0xfc) returned 1
	[0260.702] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.712] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1
	[0260.713] ResetEvent (hEvent=0xfc) returned 1
	[0260.713] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.727] ResetEvent (hEvent=0xfc) returned 1
	[0260.728] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.734] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1
	[0260.735] ResetEvent (hEvent=0xfc) returned 1
	[0260.735] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.742] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1
	[0260.743] ResetEvent (hEvent=0xfc) returned 1
	[0260.743] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.760] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1
	[0260.760] ResetEvent (hEvent=0xfc) returned 1
	[0260.760] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.768] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1
	[0260.768] ResetEvent (hEvent=0xfc) returned 1
	[0260.768] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.779] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1
	[0260.779] ResetEvent (hEvent=0xfc) returned 1
	[0260.779] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.787] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1
	[0260.788] ResetEvent (hEvent=0xfc) returned 1
	[0260.788] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.797] ResetEvent (hEvent=0xfc) returned 1
	[0260.798] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.809] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbf0dd70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
	[0260.809] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1
	[0260.810] ResetEvent (hEvent=0xfc) returned 1
	[0260.810] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.819] ResetEvent (hEvent=0xfc) returned 1
	[0260.819] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.830] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1
	[0260.831] ResetEvent (hEvent=0xfc) returned 1
	[0260.832] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.859] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1
	[0260.859] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1
	[0260.859] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1
	[0260.859] ResetEvent (hEvent=0xfc) returned 1
	[0260.859] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.869] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1
	[0260.869] ResetEvent (hEvent=0xfc) returned 1
	[0260.870] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.896] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1
	[0260.896] ResetEvent (hEvent=0xfc) returned 1
	[0260.896] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.907] ResetEvent (hEvent=0xfc) returned 1
	[0260.907] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.917] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1
	[0260.917] ResetEvent (hEvent=0xfc) returned 1
	[0260.917] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.927] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1
	[0260.927] ResetEvent (hEvent=0xfc) returned 1
	[0260.927] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.938] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1
	[0260.939] ResetEvent (hEvent=0xfc) returned 1
	[0260.939] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.949] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1
	[0260.949] ResetEvent (hEvent=0xfc) returned 1
	[0260.949] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.959] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1
	[0260.959] ResetEvent (hEvent=0xfc) returned 1
	[0260.959] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.972] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1
	[0260.972] ResetEvent (hEvent=0xfc) returned 1
	[0260.972] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.981] ResetEvent (hEvent=0xfc) returned 1
	[0260.981] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0260.994] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1
	[0260.994] ResetEvent (hEvent=0xfc) returned 1
	[0260.995] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0261.004] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1
	[0261.005] ResetEvent (hEvent=0xfc) returned 1
	[0261.005] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0261.104] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1
	[0261.106] ResetEvent (hEvent=0xfc) returned 1
	[0261.107] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0261.114] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1
	[0261.116] ResetEvent (hEvent=0xfc) returned 1
	[0261.117] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0261.124] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1
	[0261.126] ResetEvent (hEvent=0xfc) returned 1
	[0261.127] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0261.210] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1
	[0261.212] ResetEvent (hEvent=0xfc) returned 1
	[0261.213] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0261.220] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0
	[0261.222] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0261.223] GetProcessHeap () returned 0x800000
	[0261.223] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0261.223] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0
	[0261.223] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0261.224] GetProcessHeap () returned 0x800000
	[0261.224] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0261.224] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
	[0261.225] GetProcessHeap () returned 0x800000
	[0261.225] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0261.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0261.232] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.233] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0261.234] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0261.234] GetProcessHeap () returned 0x800000
	[0261.235] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0261.235] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
	[0261.240] GetProcessHeap () returned 0x800000
	[0261.242] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0261.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0261.242] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.243] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0261.243] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0261.243] GetProcessHeap () returned 0x800000
	[0261.243] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0261.244] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
	[0261.244] GetProcessHeap () returned 0x800000
	[0261.244] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0261.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0261.251] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.252] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0261.253] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0261.253] GetProcessHeap () returned 0x800000
	[0261.254] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0261.254] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
	[0261.259] GetProcessHeap () returned 0x800000
	[0261.259] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0261.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0261.266] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.266] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0261.266] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0261.266] GetProcessHeap () returned 0x800000
	[0261.266] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0261.266] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0261.267] GetProcessHeap () returned 0x800000
	[0261.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0261.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0261.267] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.267] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1
	[0261.267] GetProcessHeap () returned 0x800000
	[0261.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0261.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0261.267] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.267] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="36USA68T", cAlternateFileName="")) returned 1
	[0261.267] GetProcessHeap () returned 0x800000
	[0261.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0261.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0261.268] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.268] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 1
	[0261.268] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 0
	[0261.268] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0261.268] GetProcessHeap () returned 0x800000
	[0261.268] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0261.268] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3O75JDME", cAlternateFileName="")) returned 1
	[0261.268] GetProcessHeap () returned 0x800000
	[0261.268] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0261.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0261.268] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.268] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1
	[0261.269] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 0
	[0261.269] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0261.269] GetProcessHeap () returned 0x800000
	[0261.269] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0261.269] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0261.269] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UV0DUWVB", cAlternateFileName="")) returned 1
	[0261.269] GetProcessHeap () returned 0x800000
	[0261.269] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0261.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0261.269] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.269] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0261.269] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0261.269] GetProcessHeap () returned 0x800000
	[0261.269] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0261.269] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 1
	[0261.269] GetProcessHeap () returned 0x800000
	[0261.269] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0261.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0261.270] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.270] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 1
	[0261.270] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 0
	[0261.270] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0261.270] GetProcessHeap () returned 0x800000
	[0261.270] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0261.270] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 0
	[0261.270] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0261.270] GetProcessHeap () returned 0x800000
	[0261.270] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0261.270] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0261.270] GetProcessHeap () returned 0x800000
	[0261.270] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0261.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0261.270] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.270] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0261.270] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0261.270] GetProcessHeap () returned 0x800000
	[0261.270] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0261.270] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0
	[0261.270] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0261.270] GetProcessHeap () returned 0x800000
	[0261.271] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0261.271] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0
	[0261.271] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0261.271] GetProcessHeap () returned 0x800000
	[0261.271] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0261.272] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1
	[0261.272] GetProcessHeap () returned 0x800000
	[0261.272] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0261.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0261.272] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.273] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0261.273] GetProcessHeap () returned 0x800000
	[0261.273] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0261.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0261.273] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.273] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1
	[0261.273] GetProcessHeap () returned 0x800000
	[0261.273] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0261.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0261.274] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.274] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1
	[0261.274] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1
	[0261.274] ResetEvent (hEvent=0xfc) returned 1
	[0261.274] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0261.275] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 0
	[0261.275] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0261.275] GetProcessHeap () returned 0x800000
	[0261.275] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0261.275] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1
	[0261.275] GetProcessHeap () returned 0x800000
	[0261.275] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0261.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0261.276] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.276] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1
	[0261.276] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1
	[0261.276] GetProcessHeap () returned 0x800000
	[0261.276] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0261.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0261.276] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.277] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0261.277] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0261.277] GetProcessHeap () returned 0x800000
	[0261.277] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0261.277] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1
	[0261.277] GetProcessHeap () returned 0x800000
	[0261.277] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0261.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0261.277] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.277] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1
	[0261.277] GetProcessHeap () returned 0x800000
	[0261.277] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0261.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0261.278] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.278] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0261.278] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0261.278] GetProcessHeap () returned 0x800000
	[0261.278] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0261.278] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0
	[0261.278] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0261.278] GetProcessHeap () returned 0x800000
	[0261.278] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0261.278] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0
	[0261.278] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0261.278] GetProcessHeap () returned 0x800000
	[0261.278] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0261.278] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1
	[0261.278] GetProcessHeap () returned 0x800000
	[0261.278] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0261.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0261.278] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.278] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1
	[0261.278] ResetEvent (hEvent=0xfc) returned 1
	[0261.278] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0261.399] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1
	[0261.400] ResetEvent (hEvent=0xfc) returned 1
	[0261.400] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0261.410] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 0
	[0261.410] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0261.422] GetProcessHeap () returned 0x800000
	[0261.422] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0261.422] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0
	[0261.423] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0261.423] GetProcessHeap () returned 0x800000
	[0261.423] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0261.433] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0
	[0261.433] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0261.435] GetProcessHeap () returned 0x800000
	[0261.435] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0261.435] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0
	[0261.436] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0261.437] GetProcessHeap () returned 0x800000
	[0261.437] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0261.438] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x2f2f520 | out: lpFindFileData=0x2f2f520*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6026fc0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6026fc0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
	[0261.443] GetProcessHeap () returned 0x800000
	[0261.445] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0261.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6026fc0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6026fc0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0261.447] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6026fc0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6026fc0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0261.452] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcda5d800, ftCreationTime.dwHighDateTime=0x1d4d5b2, ftLastAccessTime.dwLowDateTime=0xc0a6f750, ftLastAccessTime.dwHighDateTime=0x1d4d34c, ftLastWriteTime.dwLowDateTime=0xc0a6f750, ftLastWriteTime.dwHighDateTime=0x1d4d34c, nFileSizeHigh=0x0, nFileSizeLow=0x8378, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="12MDMvZwImnce_.pps", cAlternateFileName="12MDMV~1.PPS")) returned 1
	[0261.461] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5aa81f0, ftCreationTime.dwHighDateTime=0x1d4cbab, ftLastAccessTime.dwLowDateTime=0xbb68a3b0, ftLastAccessTime.dwHighDateTime=0x1d4d121, ftLastWriteTime.dwLowDateTime=0xbb68a3b0, ftLastWriteTime.dwHighDateTime=0x1d4d121, nFileSizeHigh=0x0, nFileSizeLow=0x11483, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2vmVAamal.odt", cAlternateFileName="2VMVAA~1.ODT")) returned 1
	[0261.461] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf884fe0, ftCreationTime.dwHighDateTime=0x1d4d0fa, ftLastAccessTime.dwLowDateTime=0x5c1d91d0, ftLastAccessTime.dwHighDateTime=0x1d4d0a5, ftLastWriteTime.dwLowDateTime=0x5c1d91d0, ftLastWriteTime.dwHighDateTime=0x1d4d0a5, nFileSizeHigh=0x0, nFileSizeLow=0xbfe8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4r_Q_.swf", cAlternateFileName="")) returned 1
	[0261.461] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x22461fb0, ftCreationTime.dwHighDateTime=0x1d4d0c6, ftLastAccessTime.dwLowDateTime=0x579c2b60, ftLastAccessTime.dwHighDateTime=0x1d4c6c0, ftLastWriteTime.dwLowDateTime=0x579c2b60, ftLastWriteTime.dwHighDateTime=0x1d4c6c0, nFileSizeHigh=0x0, nFileSizeLow=0x31cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4UcSkD.mkv", cAlternateFileName="")) returned 1
	[0261.461] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6800d640, ftCreationTime.dwHighDateTime=0x1d4d0cf, ftLastAccessTime.dwLowDateTime=0xd85dd010, ftLastAccessTime.dwHighDateTime=0x1d4d1f0, ftLastWriteTime.dwLowDateTime=0xd85dd010, ftLastWriteTime.dwHighDateTime=0x1d4d1f0, nFileSizeHigh=0x0, nFileSizeLow=0x14e18, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6DC3JhaxRwUoLzS2.swf", cAlternateFileName="6DC3JH~1.SWF")) returned 1
	[0261.461] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3db97dd0, ftCreationTime.dwHighDateTime=0x1d4ce02, ftLastAccessTime.dwLowDateTime=0xa6128e20, ftLastAccessTime.dwHighDateTime=0x1d4d579, ftLastWriteTime.dwLowDateTime=0xa6128e20, ftLastWriteTime.dwHighDateTime=0x1d4d579, nFileSizeHigh=0x0, nFileSizeLow=0xd25a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7f-gY324OMO2n6.docx", cAlternateFileName="7F-GY3~1.DOC")) returned 1
	[0261.461] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3bf355e0, ftCreationTime.dwHighDateTime=0x1d4cdd8, ftLastAccessTime.dwLowDateTime=0x330beae0, ftLastAccessTime.dwHighDateTime=0x1d4d315, ftLastWriteTime.dwLowDateTime=0x330beae0, ftLastWriteTime.dwHighDateTime=0x1d4d315, nFileSizeHigh=0x0, nFileSizeLow=0x1695d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8pAG6EhFz0PsyID.bmp", cAlternateFileName="8PAG6E~1.BMP")) returned 1
	[0261.461] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99c7e300, ftCreationTime.dwHighDateTime=0x1d4d3a7, ftLastAccessTime.dwLowDateTime=0x54e785c0, ftLastAccessTime.dwHighDateTime=0x1d4d2c0, ftLastWriteTime.dwLowDateTime=0x54e785c0, ftLastWriteTime.dwHighDateTime=0x1d4d2c0, nFileSizeHigh=0x0, nFileSizeLow=0x11d1a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9Au5_SUb7gu_f.png", cAlternateFileName="9AU5_S~1.PNG")) returned 1
	[0261.462] ResetEvent (hEvent=0xfc) returned 1
	[0261.462] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0262.123] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x452624f0, ftCreationTime.dwHighDateTime=0x1d4c62e, ftLastAccessTime.dwLowDateTime=0x876d8a60, ftLastAccessTime.dwHighDateTime=0x1d4d132, ftLastWriteTime.dwLowDateTime=0x876d8a60, ftLastWriteTime.dwHighDateTime=0x1d4d132, nFileSizeHigh=0x0, nFileSizeLow=0x6231, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A4r6Du9NQyiq.pps", cAlternateFileName="A4R6DU~1.PPS")) returned 1
	[0262.123] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0262.123] GetProcessHeap () returned 0x800000
	[0262.123] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0262.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0262.124] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.124] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0262.124] GetProcessHeap () returned 0x800000
	[0262.124] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0262.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0262.125] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.125] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0262.125] GetProcessHeap () returned 0x800000
	[0262.125] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0262.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0262.126] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.126] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1
	[0262.126] GetProcessHeap () returned 0x800000
	[0262.126] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0262.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0262.126] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.126] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0262.126] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0262.126] GetProcessHeap () returned 0x800000
	[0262.126] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0262.126] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1
	[0262.126] GetProcessHeap () returned 0x800000
	[0262.127] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0262.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0262.127] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.127] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0262.127] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0262.127] GetProcessHeap () returned 0x800000
	[0262.127] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0262.127] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1
	[0262.127] GetProcessHeap () returned 0x800000
	[0262.127] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0262.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0262.127] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.127] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.js", cAlternateFileName="")) returned 1
	[0262.127] ResetEvent (hEvent=0xfc) returned 1
	[0262.127] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0262.645] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1
	[0262.645] ResetEvent (hEvent=0xfc) returned 1
	[0262.645] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0262.680] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 0
	[0262.680] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0262.680] GetProcessHeap () returned 0x800000
	[0262.680] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0262.680] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1
	[0262.681] GetProcessHeap () returned 0x800000
	[0262.681] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0262.681] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0262.681] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.681] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8f3d60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1
	[0262.681] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1
	[0262.681] GetProcessHeap () returned 0x800000
	[0262.681] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0262.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0262.682] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.682] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5adf20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefc97c0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1
	[0262.682] ResetEvent (hEvent=0xfc) returned 1
	[0262.682] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0262.860] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1
	[0262.860] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 0
	[0262.861] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0262.861] GetProcessHeap () returned 0x800000
	[0262.861] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0262.861] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0
	[0262.861] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0262.861] GetProcessHeap () returned 0x800000
	[0262.861] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0262.861] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0
	[0262.861] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0262.861] GetProcessHeap () returned 0x800000
	[0262.861] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0262.861] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0
	[0262.861] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0262.861] GetProcessHeap () returned 0x800000
	[0262.861] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0262.863] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
	[0262.863] GetProcessHeap () returned 0x800000
	[0262.863] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0262.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0262.863] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.863] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1
	[0262.863] GetProcessHeap () returned 0x800000
	[0262.863] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0262.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0262.864] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.864] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 1
	[0262.864] GetProcessHeap () returned 0x800000
	[0262.864] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0262.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0262.865] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.865] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0262.865] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0262.865] GetProcessHeap () returned 0x800000
	[0262.865] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0262.865] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 0
	[0262.865] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0262.865] GetProcessHeap () returned 0x800000
	[0262.865] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0262.865] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 0
	[0262.865] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0262.865] GetProcessHeap () returned 0x800000
	[0262.865] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0262.865] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1
	[0262.865] GetProcessHeap () returned 0x800000
	[0262.865] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0262.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0262.865] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.865] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0262.865] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0262.865] GetProcessHeap () returned 0x800000
	[0262.866] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0262.866] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
	[0262.866] GetProcessHeap () returned 0x800000
	[0262.866] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0262.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0262.866] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.866] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1
	[0262.866] GetProcessHeap () returned 0x800000
	[0262.866] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0262.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0262.866] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.866] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0262.866] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0262.866] GetProcessHeap () returned 0x800000
	[0262.866] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0262.866] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0
	[0262.866] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0262.866] GetProcessHeap () returned 0x800000
	[0262.867] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0262.867] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1
	[0262.867] GetProcessHeap () returned 0x800000
	[0262.867] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0262.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0262.867] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.867] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0262.867] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0262.867] GetProcessHeap () returned 0x800000
	[0262.867] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0262.867] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 0
	[0262.867] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0262.867] GetProcessHeap () returned 0x800000
	[0262.867] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0262.868] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa5a249c0, ftCreationTime.dwHighDateTime=0x1d4c88c, ftLastAccessTime.dwLowDateTime=0x5ffe6f40, ftLastAccessTime.dwHighDateTime=0x1d4cca4, ftLastWriteTime.dwLowDateTime=0x5ffe6f40, ftLastWriteTime.dwHighDateTime=0x1d4cca4, nFileSizeHigh=0x0, nFileSizeLow=0x812a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bx-WLZhXhMwB.mp3", cAlternateFileName="BX-WLZ~1.MP3")) returned 1
	[0262.868] ResetEvent (hEvent=0xfc) returned 1
	[0262.868] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0262.925] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1f02cf50, ftCreationTime.dwHighDateTime=0x1d4d1e9, ftLastAccessTime.dwLowDateTime=0x4d8b3f60, ftLastAccessTime.dwHighDateTime=0x1d4d45f, ftLastWriteTime.dwLowDateTime=0x4d8b3f60, ftLastWriteTime.dwHighDateTime=0x1d4d45f, nFileSizeHigh=0x0, nFileSizeLow=0x173c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cURo55IBl5u PH7QEcL.png", cAlternateFileName="CURO55~1.PNG")) returned 1
	[0262.925] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafbf4140, ftCreationTime.dwHighDateTime=0x1d4ca23, ftLastAccessTime.dwLowDateTime=0x6d6107e0, ftLastAccessTime.dwHighDateTime=0x1d4d188, ftLastWriteTime.dwLowDateTime=0x6d6107e0, ftLastWriteTime.dwHighDateTime=0x1d4d188, nFileSizeHigh=0x0, nFileSizeLow=0x6553, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CvMy2ysHQHc9BfZ.pps", cAlternateFileName="CVMY2Y~1.PPS")) returned 1
	[0262.925] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc1b3460, ftCreationTime.dwHighDateTime=0x1d4c594, ftLastAccessTime.dwLowDateTime=0xcb7d9aa0, ftLastAccessTime.dwHighDateTime=0x1d4c99a, ftLastWriteTime.dwLowDateTime=0xcb7d9aa0, ftLastWriteTime.dwHighDateTime=0x1d4c99a, nFileSizeHigh=0x0, nFileSizeLow=0x62d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EOV62xwT3w9z2ZfuohKF.mp4", cAlternateFileName="EOV62X~1.MP4")) returned 1
	[0262.925] ResetEvent (hEvent=0xfc) returned 1
	[0262.925] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0262.936] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9778540, ftCreationTime.dwHighDateTime=0x1d4ca96, ftLastAccessTime.dwLowDateTime=0x7c5a8e90, ftLastAccessTime.dwHighDateTime=0x1d4c852, ftLastWriteTime.dwLowDateTime=0x7c5a8e90, ftLastWriteTime.dwHighDateTime=0x1d4c852, nFileSizeHigh=0x0, nFileSizeLow=0x12aaf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="feHZYs7WYyXLhL.ppt", cAlternateFileName="FEHZYS~1.PPT")) returned 1
	[0262.936] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b50af0, ftCreationTime.dwHighDateTime=0x1d4cb29, ftLastAccessTime.dwLowDateTime=0xfe7398e0, ftLastAccessTime.dwHighDateTime=0x1d4cdcf, ftLastWriteTime.dwLowDateTime=0xfe7398e0, ftLastWriteTime.dwHighDateTime=0x1d4cdcf, nFileSizeHigh=0x0, nFileSizeLow=0x3ea2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FMeC G.flv", cAlternateFileName="FMECG~1.FLV")) returned 1
	[0262.936] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf3e692b0, ftCreationTime.dwHighDateTime=0x1d4cf73, ftLastAccessTime.dwLowDateTime=0xc5d91d90, ftLastAccessTime.dwHighDateTime=0x1d4d4d5, ftLastWriteTime.dwLowDateTime=0xc5d91d90, ftLastWriteTime.dwHighDateTime=0x1d4d4d5, nFileSizeHigh=0x0, nFileSizeLow=0x11e50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="i1NQNVG5t b72RabJ.mkv", cAlternateFileName="I1NQNV~1.MKV")) returned 1
	[0262.937] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1
	[0262.937] GetProcessHeap () returned 0x800000
	[0262.937] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0262.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0262.937] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.937] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1
	[0262.937] GetProcessHeap () returned 0x800000
	[0262.937] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0262.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0262.938] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0262.938] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0262.938] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0262.938] GetProcessHeap () returned 0x800000
	[0262.938] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0262.938] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0
	[0262.938] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0262.938] GetProcessHeap () returned 0x800000
	[0262.938] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0262.938] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a661c30, ftCreationTime.dwHighDateTime=0x1d4c9d9, ftLastAccessTime.dwLowDateTime=0xe2ac3880, ftLastAccessTime.dwHighDateTime=0x1d4c639, ftLastWriteTime.dwLowDateTime=0xe2ac3880, ftLastWriteTime.dwHighDateTime=0x1d4c639, nFileSizeHigh=0x0, nFileSizeLow=0x120af, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ik07iIRReGtvo5pN.xls", cAlternateFileName="IK07II~1.XLS")) returned 1
	[0262.938] ResetEvent (hEvent=0xfc) returned 1
	[0262.938] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0262.948] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1770e4f0, ftCreationTime.dwHighDateTime=0x1d4cde0, ftLastAccessTime.dwLowDateTime=0x64ae1440, ftLastAccessTime.dwHighDateTime=0x1d4c9e9, ftLastWriteTime.dwLowDateTime=0x64ae1440, ftLastWriteTime.dwHighDateTime=0x1d4c9e9, nFileSizeHigh=0x0, nFileSizeLow=0x13e58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="j9JUip.mkv", cAlternateFileName="")) returned 1
	[0262.948] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a689d70, ftCreationTime.dwHighDateTime=0x1d4d227, ftLastAccessTime.dwLowDateTime=0x4b001e10, ftLastAccessTime.dwHighDateTime=0x1d4d517, ftLastWriteTime.dwLowDateTime=0x4b001e10, ftLastWriteTime.dwHighDateTime=0x1d4d517, nFileSizeHigh=0x0, nFileSizeLow=0x17c14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="juAW.swf", cAlternateFileName="")) returned 1
	[0262.948] ResetEvent (hEvent=0xfc) returned 1
	[0262.948] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.029] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6bfb90c0, ftCreationTime.dwHighDateTime=0x1d4cabf, ftLastAccessTime.dwLowDateTime=0x531c5ea0, ftLastAccessTime.dwHighDateTime=0x1d4d13f, ftLastWriteTime.dwLowDateTime=0x531c5ea0, ftLastWriteTime.dwHighDateTime=0x1d4d13f, nFileSizeHigh=0x0, nFileSizeLow=0x15c6e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KiTxc.png", cAlternateFileName="")) returned 1
	[0263.029] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1d50210, ftCreationTime.dwHighDateTime=0x1d4cd07, ftLastAccessTime.dwLowDateTime=0xda366cb0, ftLastAccessTime.dwHighDateTime=0x1d4c955, ftLastWriteTime.dwLowDateTime=0xda366cb0, ftLastWriteTime.dwHighDateTime=0x1d4c955, nFileSizeHigh=0x0, nFileSizeLow=0x9292, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kSnYONdXQD8.mp3", cAlternateFileName="KSNYON~1.MP3")) returned 1
	[0263.029] ResetEvent (hEvent=0xfc) returned 1
	[0263.029] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.048] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc1d19270, ftCreationTime.dwHighDateTime=0x1d4c708, ftLastAccessTime.dwLowDateTime=0xe209040, ftLastAccessTime.dwHighDateTime=0x1d4c9ac, ftLastWriteTime.dwLowDateTime=0xe209040, ftLastWriteTime.dwHighDateTime=0x1d4c9ac, nFileSizeHigh=0x0, nFileSizeLow=0x6700, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KvwopP.bmp", cAlternateFileName="")) returned 1
	[0263.048] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e011ac0, ftCreationTime.dwHighDateTime=0x1d4d00f, ftLastAccessTime.dwLowDateTime=0xaeca1fe0, ftLastAccessTime.dwHighDateTime=0x1d4d4b8, ftLastWriteTime.dwLowDateTime=0xaeca1fe0, ftLastWriteTime.dwHighDateTime=0x1d4d4b8, nFileSizeHigh=0x0, nFileSizeLow=0x9f2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kw5kUN4r8U5jzBclBU.png", cAlternateFileName="KW5KUN~1.PNG")) returned 1
	[0263.048] ResetEvent (hEvent=0xfc) returned 1
	[0263.048] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.069] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1
	[0263.069] GetProcessHeap () returned 0x800000
	[0263.069] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0263.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0263.070] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.070] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
	[0263.070] GetProcessHeap () returned 0x800000
	[0263.070] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.070] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.070] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1
	[0263.070] GetProcessHeap () returned 0x800000
	[0263.070] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0263.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0263.071] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.071] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 1
	[0263.071] GetProcessHeap () returned 0x800000
	[0263.071] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0263.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0263.072] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.072] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.072] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0263.072] GetProcessHeap () returned 0x800000
	[0263.072] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0263.072] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 0
	[0263.072] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0263.072] GetProcessHeap () returned 0x800000
	[0263.072] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0263.072] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1
	[0263.072] GetProcessHeap () returned 0x800000
	[0263.072] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0263.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0263.072] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.072] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1
	[0263.072] GetProcessHeap () returned 0x800000
	[0263.072] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0263.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0263.073] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.073] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1
	[0263.073] GetProcessHeap () returned 0x800000
	[0263.073] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0263.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0263.073] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.073] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1
	[0263.073] GetProcessHeap () returned 0x800000
	[0263.073] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0263.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0263.074] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.074] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1
	[0263.074] ResetEvent (hEvent=0xfc) returned 1
	[0263.074] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.100] FindNextFileW (in: hFindFile=0x34d1968, lpFindFileData=0x2f2e330 | out: lpFindFileData=0x2f2e330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0
	[0263.100] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0263.100] GetProcessHeap () returned 0x800000
	[0263.100] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0263.100] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 0
	[0263.100] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0263.100] GetProcessHeap () returned 0x800000
	[0263.100] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0263.101] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0
	[0263.101] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0263.101] GetProcessHeap () returned 0x800000
	[0263.101] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0263.101] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0
	[0263.101] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0263.101] GetProcessHeap () returned 0x800000
	[0263.101] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0263.101] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0
	[0263.101] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.101] GetProcessHeap () returned 0x800000
	[0263.101] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.101] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0
	[0263.102] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0263.102] GetProcessHeap () returned 0x800000
	[0263.102] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0263.103] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6f61c40, ftCreationTime.dwHighDateTime=0x1d4d348, ftLastAccessTime.dwLowDateTime=0xd10db930, ftLastAccessTime.dwHighDateTime=0x1d4cdb1, ftLastWriteTime.dwLowDateTime=0xd10db930, ftLastWriteTime.dwHighDateTime=0x1d4cdb1, nFileSizeHigh=0x0, nFileSizeLow=0xef27, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mF5ZvnzVylL7Rv6d HI4.wav", cAlternateFileName="MF5ZVN~1.WAV")) returned 1
	[0263.103] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x2f2f290 | out: lpFindFileData=0x2f2f290*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0263.103] GetProcessHeap () returned 0x800000
	[0263.103] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0263.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0263.103] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.103] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1
	[0263.103] GetProcessHeap () returned 0x800000
	[0263.103] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.104] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.104] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.104] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.104] GetProcessHeap () returned 0x800000
	[0263.104] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.104] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0263.104] GetProcessHeap () returned 0x800000
	[0263.104] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.104] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.104] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.104] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.104] GetProcessHeap () returned 0x800000
	[0263.105] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.105] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0263.105] GetProcessHeap () returned 0x800000
	[0263.105] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.105] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.105] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0263.105] GetProcessHeap () returned 0x800000
	[0263.105] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0263.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0263.105] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.105] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0263.105] GetProcessHeap () returned 0x800000
	[0263.105] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0263.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0263.106] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.107] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa1e34990, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="83AA4C~1")) returned 1
	[0263.107] ResetEvent (hEvent=0xfc) returned 1
	[0263.107] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.116] ResetEvent (hEvent=0xfc) returned 1
	[0263.116] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.134] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="932A2D~1")) returned 1
	[0263.134] ResetEvent (hEvent=0xfc) returned 1
	[0263.134] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.144] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 1
	[0263.144] ResetEvent (hEvent=0xfc) returned 1
	[0263.144] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.155] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 0
	[0263.155] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0263.156] GetProcessHeap () returned 0x800000
	[0263.156] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0263.156] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0263.156] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0263.158] GetProcessHeap () returned 0x800000
	[0263.158] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0263.158] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
	[0263.158] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.158] GetProcessHeap () returned 0x800000
	[0263.158] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.158] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1
	[0263.158] GetProcessHeap () returned 0x800000
	[0263.158] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.158] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.158] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0263.158] GetProcessHeap () returned 0x800000
	[0263.158] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0263.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0263.159] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.159] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0263.159] GetProcessHeap () returned 0x800000
	[0263.159] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0263.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0263.159] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.159] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1
	[0263.159] ResetEvent (hEvent=0xfc) returned 1
	[0263.159] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.168] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0
	[0263.168] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0263.168] GetProcessHeap () returned 0x800000
	[0263.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0263.168] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0
	[0263.168] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0263.168] GetProcessHeap () returned 0x800000
	[0263.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0263.168] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0263.168] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.168] GetProcessHeap () returned 0x800000
	[0263.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.168] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1
	[0263.168] GetProcessHeap () returned 0x800000
	[0263.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.168] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.168] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1
	[0263.169] GetProcessHeap () returned 0x800000
	[0263.169] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0263.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0263.169] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.169] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.169] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0263.169] GetProcessHeap () returned 0x800000
	[0263.169] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0263.169] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 0
	[0263.169] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.169] GetProcessHeap () returned 0x800000
	[0263.169] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.169] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
	[0263.169] GetProcessHeap () returned 0x800000
	[0263.169] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.169] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.169] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.169] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.170] GetProcessHeap () returned 0x800000
	[0263.170] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.170] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
	[0263.170] GetProcessHeap () returned 0x800000
	[0263.170] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.170] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.170] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.170] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.170] GetProcessHeap () returned 0x800000
	[0263.170] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.170] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
	[0263.170] GetProcessHeap () returned 0x800000
	[0263.170] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.170] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.170] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.170] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.170] GetProcessHeap () returned 0x800000
	[0263.171] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.171] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
	[0263.171] GetProcessHeap () returned 0x800000
	[0263.171] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.171] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.171] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.171] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.171] GetProcessHeap () returned 0x800000
	[0263.171] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.171] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0263.171] GetProcessHeap () returned 0x800000
	[0263.171] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.171] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.171] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1
	[0263.171] GetProcessHeap () returned 0x800000
	[0263.172] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0263.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0263.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4eb35ad0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0263.172] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a683760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0263.172] ResetEvent (hEvent=0xfc) returned 1
	[0263.172] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.187] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0f970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4eb0f970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4eb0f970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Launch Internet Explorer Browser.lnk", cAlternateFileName="LAUNCH~1.LNK")) returned 1
	[0263.187] ResetEvent (hEvent=0xfc) returned 1
	[0263.187] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.217] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1
	[0263.217] ResetEvent (hEvent=0xfc) returned 1
	[0263.217] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.240] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1
	[0263.240] GetProcessHeap () returned 0x800000
	[0263.240] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0263.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0263.240] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.240] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1
	[0263.240] GetProcessHeap () returned 0x800000
	[0263.240] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0263.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0263.241] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.241] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.241] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0263.241] GetProcessHeap () returned 0x800000
	[0263.241] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0263.241] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1
	[0263.241] GetProcessHeap () returned 0x800000
	[0263.241] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0263.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0263.241] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.242] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc4b320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0263.242] ResetEvent (hEvent=0xfc) returned 1
	[0263.242] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.246] ResetEvent (hEvent=0xfc) returned 1
	[0263.246] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.264] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0263.264] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (2).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1
	[0263.264] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1
	[0263.265] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1
	[0263.265] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer (2).lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1
	[0263.265] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1
	[0263.265] ResetEvent (hEvent=0xfc) returned 1
	[0263.265] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.269] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player (2).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1
	[0263.269] ResetEvent (hEvent=0xfc) returned 1
	[0263.269] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.278] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0263.279] ResetEvent (hEvent=0xfc) returned 1
	[0263.279] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.286] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
	[0263.286] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0263.286] GetProcessHeap () returned 0x800000
	[0263.286] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0263.286] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0
	[0263.286] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0263.286] GetProcessHeap () returned 0x800000
	[0263.286] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0263.286] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0263.286] ResetEvent (hEvent=0xfc) returned 1
	[0263.286] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.301] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
	[0263.301] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0263.301] GetProcessHeap () returned 0x800000
	[0263.301] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0263.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1
	[0263.301] GetProcessHeap () returned 0x800000
	[0263.301] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0263.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0263.302] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.302] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0263.302] GetProcessHeap () returned 0x800000
	[0263.302] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0263.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0263.302] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.302] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="65UX3YG0", cAlternateFileName="")) returned 1
	[0263.302] GetProcessHeap () returned 0x800000
	[0263.302] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0263.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0263.302] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.302] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.302] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0263.303] GetProcessHeap () returned 0x800000
	[0263.303] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0263.303] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AY721QDR", cAlternateFileName="")) returned 1
	[0263.303] GetProcessHeap () returned 0x800000
	[0263.303] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0263.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0263.303] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.303] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.303] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0263.303] GetProcessHeap () returned 0x800000
	[0263.303] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0263.303] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZBKZBIC", cAlternateFileName="")) returned 1
	[0263.303] GetProcessHeap () returned 0x800000
	[0263.303] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0263.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0263.303] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.303] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.303] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0263.304] GetProcessHeap () returned 0x800000
	[0263.304] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0263.304] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0263.304] ResetEvent (hEvent=0xfc) returned 1
	[0263.304] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.389] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 1
	[0263.389] GetProcessHeap () returned 0x800000
	[0263.389] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0263.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0263.389] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.389] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.390] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0263.390] GetProcessHeap () returned 0x800000
	[0263.390] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0263.390] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 0
	[0263.390] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0263.390] GetProcessHeap () returned 0x800000
	[0263.390] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0263.390] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0263.390] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0263.390] GetProcessHeap () returned 0x800000
	[0263.390] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0263.390] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 0
	[0263.390] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.390] GetProcessHeap () returned 0x800000
	[0263.390] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.391] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1
	[0263.391] GetProcessHeap () returned 0x800000
	[0263.391] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.392] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.392] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0263.392] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.392] GetProcessHeap () returned 0x800000
	[0263.392] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.392] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1
	[0263.392] GetProcessHeap () returned 0x800000
	[0263.392] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.392] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.392] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0263.392] GetProcessHeap () returned 0x800000
	[0263.392] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0263.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0263.393] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.393] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0263.393] GetProcessHeap () returned 0x800000
	[0263.393] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0263.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0263.393] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.394] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 1
	[0263.394] ResetEvent (hEvent=0xfc) returned 1
	[0263.394] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.497] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 0
	[0263.497] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0263.497] GetProcessHeap () returned 0x800000
	[0263.497] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0263.497] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0263.497] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0263.497] GetProcessHeap () returned 0x800000
	[0263.497] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0263.497] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0
	[0263.498] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.498] GetProcessHeap () returned 0x800000
	[0263.498] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.498] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0263.498] GetProcessHeap () returned 0x800000
	[0263.498] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.498] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.498] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0263.498] GetProcessHeap () returned 0x800000
	[0263.498] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0263.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0263.498] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.498] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1
	[0263.499] GetProcessHeap () returned 0x800000
	[0263.499] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0263.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0263.499] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.499] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1
	[0263.499] GetProcessHeap () returned 0x800000
	[0263.499] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0263.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0263.500] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.500] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1
	[0263.500] ResetEvent (hEvent=0xfc) returned 1
	[0263.500] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.511] FindNextFileW (in: hFindFile=0x34d1928, lpFindFileData=0x2f2e5c0 | out: lpFindFileData=0x2f2e5c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 0
	[0263.511] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0263.511] GetProcessHeap () returned 0x800000
	[0263.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0263.511] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 0
	[0263.511] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0263.511] GetProcessHeap () returned 0x800000
	[0263.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0263.511] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 0
	[0263.511] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0263.511] GetProcessHeap () returned 0x800000
	[0263.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0263.511] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0
	[0263.511] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.511] GetProcessHeap () returned 0x800000
	[0263.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.512] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0263.512] GetProcessHeap () returned 0x800000
	[0263.512] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.513] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.513] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1
	[0263.513] ResetEvent (hEvent=0xfc) returned 1
	[0263.513] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.527] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0263.527] GetProcessHeap () returned 0x800000
	[0263.528] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0263.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0263.528] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.528] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.LNK", cAlternateFileName="")) returned 1
	[0263.528] ResetEvent (hEvent=0xfc) returned 1
	[0263.528] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.575] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x34, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0263.575] ResetEvent (hEvent=0xfc) returned 1
	[0263.575] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.683] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1
	[0263.683] ResetEvent (hEvent=0xfc) returned 1
	[0263.683] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0263.728] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 0
	[0263.728] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0263.728] GetProcessHeap () returned 0x800000
	[0263.728] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0263.728] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0
	[0263.728] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0263.728] GetProcessHeap () returned 0x800000
	[0263.728] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0263.728] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0263.728] GetProcessHeap () returned 0x800000
	[0263.728] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0263.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0263.728] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0263.728] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1
	[0263.728] ResetEvent (hEvent=0xfc) returned 1
	[0263.729] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.155] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1
	[0264.155] ResetEvent (hEvent=0xfc) returned 1
	[0264.155] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.265] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 0
	[0264.265] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0264.265] GetProcessHeap () returned 0x800000
	[0264.265] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0264.265] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1
	[0264.265] GetProcessHeap () returned 0x800000
	[0264.265] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0264.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0264.265] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.265] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0264.265] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0264.265] GetProcessHeap () returned 0x800000
	[0264.265] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0264.265] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1
	[0264.265] GetProcessHeap () returned 0x800000
	[0264.266] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0264.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0264.266] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.266] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0264.266] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0264.268] GetProcessHeap () returned 0x800000
	[0264.268] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0264.268] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
	[0264.268] GetProcessHeap () returned 0x800000
	[0264.268] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0264.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0264.269] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.269] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1
	[0264.269] ResetEvent (hEvent=0xfc) returned 1
	[0264.269] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.294] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1
	[0264.294] GetProcessHeap () returned 0x800000
	[0264.294] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0264.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0264.295] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.295] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1
	[0264.295] ResetEvent (hEvent=0xfc) returned 1
	[0264.295] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.325] ResetEvent (hEvent=0xfc) returned 1
	[0264.325] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.341] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1
	[0264.341] ResetEvent (hEvent=0xfc) returned 1
	[0264.341] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.350] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0
	[0264.350] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0264.351] GetProcessHeap () returned 0x800000
	[0264.351] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0264.351] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6af9aea0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6af9aea0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~2")) returned 1
	[0264.351] GetProcessHeap () returned 0x800000
	[0264.351] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0264.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6af9aea0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6af9aea0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0264.351] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6af9aea0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6af9aea0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.351] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="02540a10-7eb7-4b20-a8c7-470f8986389c", cAlternateFileName="02540A~1")) returned 1
	[0264.351] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdc5ea830, ftCreationTime.dwHighDateTime=0x1d41fce, ftLastAccessTime.dwLowDateTime=0xdc5ea830, ftLastAccessTime.dwHighDateTime=0x1d41fce, ftLastWriteTime.dwLowDateTime=0xdc5ea830, ftLastWriteTime.dwHighDateTime=0x1d41fce, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0e15476d-d8fe-46ca-8099-ebdcf80f637c", cAlternateFileName="0E1547~1")) returned 1
	[0264.351] ResetEvent (hEvent=0xfc) returned 1
	[0264.352] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.370] ResetEvent (hEvent=0xfc) returned 1
	[0264.370] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.384] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf6409280, ftCreationTime.dwHighDateTime=0x1d4ae2c, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="102a7bc8-3f85-4bb4-840a-38257d2965d2", cAlternateFileName="102A7B~1")) returned 1
	[0264.384] ResetEvent (hEvent=0xfc) returned 1
	[0264.384] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.391] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542b0350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542b0350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x542b0350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2be989a0-16a1-424b-9211-51aa3bb43e5d", cAlternateFileName="2BE989~1")) returned 1
	[0264.391] ResetEvent (hEvent=0xfc) returned 1
	[0264.391] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.399] ResetEvent (hEvent=0xfc) returned 1
	[0264.399] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.410] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6af9aea0, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x6af9aea0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6af9aea0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfc465d0-cf34-4b83-9cb9-0db91aadab23", cAlternateFileName="CFC465~1")) returned 1
	[0264.411] ResetEvent (hEvent=0xfc) returned 1
	[0264.411] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.429] ResetEvent (hEvent=0xfc) returned 1
	[0264.429] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.437] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x17ffec90, ftCreationTime.dwHighDateTime=0x1d3373c, ftLastAccessTime.dwLowDateTime=0x17ffec90, ftLastAccessTime.dwHighDateTime=0x1d3373c, ftLastWriteTime.dwLowDateTime=0x18024df0, ftLastWriteTime.dwHighDateTime=0x1d3373c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fbbe72db-afd8-443b-88dd-64b20388700d", cAlternateFileName="FBBE72~1")) returned 1
	[0264.437] ResetEvent (hEvent=0xfc) returned 1
	[0264.437] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.452] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6afe7160, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1
	[0264.452] ResetEvent (hEvent=0xfc) returned 1
	[0264.452] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.459] ResetEvent (hEvent=0xfc) returned 1
	[0264.460] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.473] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6afe7160, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0
	[0264.473] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0264.473] GetProcessHeap () returned 0x800000
	[0264.473] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0264.473] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1
	[0264.473] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 0
	[0264.473] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0264.474] GetProcessHeap () returned 0x800000
	[0264.474] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0264.474] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0264.474] GetProcessHeap () returned 0x800000
	[0264.474] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0264.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0264.474] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.474] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0264.474] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0264.474] GetProcessHeap () returned 0x800000
	[0264.474] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0264.474] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1
	[0264.474] GetProcessHeap () returned 0x800000
	[0264.474] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0264.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0264.475] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.475] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 1
	[0264.475] ResetEvent (hEvent=0xfc) returned 1
	[0264.475] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.482] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 0
	[0264.482] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0264.482] GetProcessHeap () returned 0x800000
	[0264.482] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0264.482] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1
	[0264.482] GetProcessHeap () returned 0x800000
	[0264.482] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0264.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0264.483] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.483] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0264.483] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0264.483] GetProcessHeap () returned 0x800000
	[0264.483] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0264.483] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
	[0264.483] GetProcessHeap () returned 0x800000
	[0264.483] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0264.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0264.483] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.483] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1
	[0264.483] GetProcessHeap () returned 0x800000
	[0264.483] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0264.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0264.484] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.484] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1
	[0264.484] GetProcessHeap () returned 0x800000
	[0264.484] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0264.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0264.484] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.484] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0264.485] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0264.485] GetProcessHeap () returned 0x800000
	[0264.485] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0264.485] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1
	[0264.485] GetProcessHeap () returned 0x800000
	[0264.485] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0264.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0264.485] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.485] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0264.485] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0264.485] GetProcessHeap () returned 0x800000
	[0264.485] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0264.485] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1
	[0264.485] GetProcessHeap () returned 0x800000
	[0264.485] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0264.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0264.485] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.485] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0264.486] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0264.486] GetProcessHeap () returned 0x800000
	[0264.486] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0264.486] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 0
	[0264.486] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0264.486] GetProcessHeap () returned 0x800000
	[0264.486] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0264.486] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0
	[0264.486] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0264.486] GetProcessHeap () returned 0x800000
	[0264.486] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0264.486] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0264.486] GetProcessHeap () returned 0x800000
	[0264.486] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0264.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0264.486] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.486] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1
	[0264.486] ResetEvent (hEvent=0xfc) returned 1
	[0264.486] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.498] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0
	[0264.499] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0264.499] GetProcessHeap () returned 0x800000
	[0264.499] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0264.499] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1
	[0264.499] GetProcessHeap () returned 0x800000
	[0264.499] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0264.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0264.500] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.500] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1
	[0264.500] ResetEvent (hEvent=0xfc) returned 1
	[0264.500] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.504] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 0
	[0264.504] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0264.504] GetProcessHeap () returned 0x800000
	[0264.504] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0264.504] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x2f2f000 | out: lpFindFileData=0x2f2f000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0264.504] GetProcessHeap () returned 0x800000
	[0264.504] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0264.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0264.505] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.505] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0264.505] GetProcessHeap () returned 0x800000
	[0264.505] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0264.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0264.505] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.505] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c3625f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1c3625f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1c3625f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adobe[1].txt", cAlternateFileName="5P5NRG~1.TXT")) returned 1
	[0264.505] ResetEvent (hEvent=0xfc) returned 1
	[0264.505] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.518] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d72bcd0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e6a4bd0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1e6a4bd0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adobe[3].txt", cAlternateFileName="5P0100~1.TXT")) returned 1
	[0264.518] ResetEvent (hEvent=0xfc) returned 1
	[0264.518] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.529] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d8f4d50, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e658910, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1e658910, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@demdex[1].txt", cAlternateFileName="5PFFE8~1.TXT")) returned 1
	[0264.529] ResetEvent (hEvent=0xfc) returned 1
	[0264.529] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.543] ResetEvent (hEvent=0xfc) returned 1
	[0264.543] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.673] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e658910, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e658910, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1e658910, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt", cAlternateFileName="5PB43E~1.TXT")) returned 1
	[0264.673] ResetEvent (hEvent=0xfc) returned 1
	[0264.674] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.695] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dcf9270, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1dcf9270, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1dcf9270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@everesttech[1].txt", cAlternateFileName="5P5NRG~4.TXT")) returned 1
	[0264.695] ResetEvent (hEvent=0xfc) returned 1
	[0264.695] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.736] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86af2d0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[2].txt", cAlternateFileName="5P5NRG~2.TXT")) returned 1
	[0264.736] ResetEvent (hEvent=0xfc) returned 1
	[0264.736] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.751] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dcf9270, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1dcf9270, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1dcf9270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x56, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@ml314[1].txt", cAlternateFileName="5P0DBF~1.TXT")) returned 1
	[0264.751] ResetEvent (hEvent=0xfc) returned 1
	[0264.751] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.776] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e5e64f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e5e64f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1e5e64f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x19e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@rlcdn[2].txt", cAlternateFileName="5P94E6~1.TXT")) returned 1
	[0264.776] ResetEvent (hEvent=0xfc) returned 1
	[0264.776] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.790] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb85ef80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0264.790] ResetEvent (hEvent=0xfc) returned 1
	[0264.791] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.804] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52878dd0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0264.804] GetProcessHeap () returned 0x800000
	[0264.804] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0264.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52878dd0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0264.805] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52878dd0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0264.805] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44eb6480, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44eb6480, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44eb6480, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt", cAlternateFileName="5P9943~1.TXT")) returned 1
	[0264.806] ResetEvent (hEvent=0xfc) returned 1
	[0264.806] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.887] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44bd95f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44bd95f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44bd95f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt", cAlternateFileName="5P37D9~1.TXT")) returned 1
	[0264.887] ResetEvent (hEvent=0xfc) returned 1
	[0264.887] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.900] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf73d210, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf73d210, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf73d210, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adformdsp[1].txt", cAlternateFileName="5P2CBA~1.TXT")) returned 1
	[0264.900] ResetEvent (hEvent=0xfc) returned 1
	[0264.900] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.916] ResetEvent (hEvent=0xfc) returned 1
	[0264.916] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.962] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2a0770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7d5790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7d5790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adform[1].txt", cAlternateFileName="5P8600~1.TXT")) returned 1
	[0264.963] ResetEvent (hEvent=0xfc) returned 1
	[0264.963] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.977] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe5d5130, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0x45f08810, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45f08810, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adnxs[1].txt", cAlternateFileName="5P89EF~1.TXT")) returned 1
	[0264.977] ResetEvent (hEvent=0xfc) returned 1
	[0264.978] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0264.993] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adtech[2].txt", cAlternateFileName="5PC5B2~1.TXT")) returned 1
	[0264.993] ResetEvent (hEvent=0xfc) returned 1
	[0264.993] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0265.005] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53c70990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53c70990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53c70990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adtr02[1].txt", cAlternateFileName="5P5NRG~3.TXT")) returned 1
	[0265.005] ResetEvent (hEvent=0xfc) returned 1
	[0265.005] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0265.035] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x517fd8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51332930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x51332930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@advertising[1].txt", cAlternateFileName="5P5NRG~1.TXT")) returned 1
	[0265.036] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54cce0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54cce0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54cce0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@api.bing[2].txt", cAlternateFileName="5P40FC~1.TXT")) returned 1
	[0265.036] ResetEvent (hEvent=0xfc) returned 1
	[0265.036] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0265.056] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4611db50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4611db50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4611db50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@at.atwola[1].txt", cAlternateFileName="5P74F0~1.TXT")) returned 1
	[0265.056] ResetEvent (hEvent=0xfc) returned 1
	[0265.056] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0265.069] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x534b4210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x562c6900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x562c6900, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@bing[1].txt", cAlternateFileName="5PBE12~1.TXT")) returned 1
	[0265.070] ResetEvent (hEvent=0xfc) returned 1
	[0265.070] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0265.102] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@c.bing[1].txt", cAlternateFileName="5P5NRG~2.TXT")) returned 1
	[0265.102] ResetEvent (hEvent=0xfc) returned 1
	[0265.102] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0265.122] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdf95770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbdf95770, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbdf95770, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@c.msn[1].txt", cAlternateFileName="5PB89C~1.TXT")) returned 1
	[0265.122] ResetEvent (hEvent=0xfc) returned 1
	[0265.122] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0265.150] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6301df20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63a15b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63a15b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@doubleclick[2].txt", cAlternateFileName="5P93CC~1.TXT")) returned 1
	[0265.150] ResetEvent (hEvent=0xfc) returned 1
	[0265.150] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0265.294] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61093ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61093ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61093ba0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x256, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[1].txt", cAlternateFileName="5P12F9~1.TXT")) returned 1
	[0265.294] ResetEvent (hEvent=0xfc) returned 1
	[0265.294] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0265.983] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x610b9d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61282d80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[3].txt", cAlternateFileName="5P692F~1.TXT")) returned 1
	[0265.983] ResetEvent (hEvent=0xfc) returned 1
	[0265.983] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0265.987] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e777a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64e777a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x64e777a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x21f, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[4].txt", cAlternateFileName="5P3B8C~1.TXT")) returned 1
	[0265.987] ResetEvent (hEvent=0xfc) returned 1
	[0265.987] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.012] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x465ba5f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x465ba5f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x465ba5f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@linkedin[1].txt", cAlternateFileName="5P1C80~1.TXT")) returned 1
	[0266.012] ResetEvent (hEvent=0xfc) returned 1
	[0266.012] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.052] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfa5cef0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfa5cef0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfa5cef0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x76, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@m.exactag[1].txt", cAlternateFileName="5PD7A3~1.TXT")) returned 1
	[0266.053] ResetEvent (hEvent=0xfc) returned 1
	[0266.053] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.062] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50b50050, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50b50050, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50b50050, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@msn[1].txt", cAlternateFileName="5PBFF9~1.TXT")) returned 1
	[0266.062] ResetEvent (hEvent=0xfc) returned 1
	[0266.063] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.090] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5348e0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5348e0b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5348e0b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt", cAlternateFileName="5P5NRG~4.TXT")) returned 1
	[0266.091] ResetEvent (hEvent=0xfc) returned 1
	[0266.091] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.114] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf73d210, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf73d210, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf73d210, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt", cAlternateFileName="5P4910~1.TXT")) returned 1
	[0266.114] ResetEvent (hEvent=0xfc) returned 1
	[0266.114] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.120] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf99e810, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf99e810, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf99e810, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x68, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@skadtec[1].txt", cAlternateFileName="5P37A2~1.TXT")) returned 1
	[0266.120] ResetEvent (hEvent=0xfc) returned 1
	[0266.120] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.228] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf54e030, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf54e030, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf54e030, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@track.adform[2].txt", cAlternateFileName="5PD4D3~1.TXT")) returned 1
	[0266.228] ResetEvent (hEvent=0xfc) returned 1
	[0266.228] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.283] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x555a9a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x555a9a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x555a9a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@www.bing[2].txt", cAlternateFileName="5PA943~1.TXT")) returned 1
	[0266.283] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d8c7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d8c7b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54d8c7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@www.linkedin[1].txt", cAlternateFileName="5PC3D9~1.TXT")) returned 1
	[0266.283] ResetEvent (hEvent=0xfc) returned 1
	[0266.283] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.405] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4523d1d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x526fc010, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x526fc010, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@www.msn[2].txt", cAlternateFileName="5PD551~1.TXT")) returned 1
	[0266.405] ResetEvent (hEvent=0xfc) returned 1
	[0266.405] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.420] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x432daef0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0266.420] ResetEvent (hEvent=0xfc) returned 1
	[0266.420] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.538] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x432daef0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
	[0266.538] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0266.539] GetProcessHeap () returned 0x800000
	[0266.539] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0266.539] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52878dd0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0266.539] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0266.539] GetProcessHeap () returned 0x800000
	[0266.539] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0266.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1
	[0266.539] GetProcessHeap () returned 0x800000
	[0266.539] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0266.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0266.539] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0266.540] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0266.540] GetProcessHeap () returned 0x800000
	[0266.540] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0266.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0266.540] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0266.540] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0266.540] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0266.540] GetProcessHeap () returned 0x800000
	[0266.540] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0266.540] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0266.540] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0266.540] GetProcessHeap () returned 0x800000
	[0266.540] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0266.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETldCache", cAlternateFileName="IETLDC~1")) returned 1
	[0266.540] GetProcessHeap () returned 0x800000
	[0266.540] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0266.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0266.541] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0266.541] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x83c55340, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0266.541] ResetEvent (hEvent=0xfc) returned 1
	[0266.541] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.556] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f0dcf10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0266.556] GetProcessHeap () returned 0x800000
	[0266.556] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0266.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f0dcf10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0266.556] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f0dcf10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0266.556] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f0dcf10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x64c3a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0266.556] ResetEvent (hEvent=0xfc) returned 1
	[0266.556] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.773] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f0dcf10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x64c3a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
	[0266.773] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0266.773] GetProcessHeap () returned 0x800000
	[0266.773] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0266.773] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f0dcf10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0266.774] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0266.774] GetProcessHeap () returned 0x800000
	[0266.774] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0266.774] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0266.774] GetProcessHeap () returned 0x800000
	[0266.774] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0266.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0266.774] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0266.774] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0266.774] ResetEvent (hEvent=0xfc) returned 1
	[0266.774] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.791] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d1e12e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.library-ms", cAlternateFileName="DOCUME~1.LIB")) returned 1
	[0266.791] ResetEvent (hEvent=0xfc) returned 1
	[0266.791] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.798] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.library-ms", cAlternateFileName="MUSIC~1.LIB")) returned 1
	[0266.799] ResetEvent (hEvent=0xfc) returned 1
	[0266.799] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.815] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d207440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures.library-ms", cAlternateFileName="PICTUR~1.LIB")) returned 1
	[0266.815] ResetEvent (hEvent=0xfc) returned 1
	[0266.815] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.831] ResetEvent (hEvent=0xfc) returned 1
	[0266.831] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.835] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d207440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 1
	[0266.835] ResetEvent (hEvent=0xfc) returned 1
	[0266.835] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.852] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d207440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 0
	[0266.852] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0266.852] GetProcessHeap () returned 0x800000
	[0266.852] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0266.852] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1
	[0266.852] GetProcessHeap () returned 0x800000
	[0266.852] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0266.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0266.852] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0266.852] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0266.852] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0266.852] GetProcessHeap () returned 0x800000
	[0266.852] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0266.852] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1
	[0266.853] GetProcessHeap () returned 0x800000
	[0266.853] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0266.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0266.853] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0266.853] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0266.853] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0266.853] GetProcessHeap () returned 0x800000
	[0266.853] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0266.853] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x94fde710, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1
	[0266.853] GetProcessHeap () returned 0x800000
	[0266.853] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0266.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x94fde710, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0266.853] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x94fde710, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0266.853] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x94fde710, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0266.853] ResetEvent (hEvent=0xfc) returned 1
	[0266.853] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.863] ResetEvent (hEvent=0xfc) returned 1
	[0266.863] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.879] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0266.879] GetProcessHeap () returned 0x800000
	[0266.879] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8484c8
	[0266.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0266.879] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0266.879] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x50fa8bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0266.879] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x2f2e850 | out: lpFindFileData=0x2f2e850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x50fa8bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
	[0266.879] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0266.879] GetProcessHeap () returned 0x800000
	[0266.880] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8484c8 | out: hHeap=0x800000) returned 1
	[0266.880] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0266.880] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0266.880] GetProcessHeap () returned 0x800000
	[0266.880] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1
	[0266.880] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x2f2ed70 | out: lpFindFileData=0x2f2ed70*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xeafe50c0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xeafe50c0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0266.880] GetProcessHeap () returned 0x800000
	[0266.880] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0266.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xeafe50c0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xeafe50c0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0266.880] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xeafe50c0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xeafe50c0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0266.880] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe75211a0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xea176b60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xea176b60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x989, dwReserved0=0x0, dwReserved1=0x0, cFileName="0KembV9Mr.lnk", cAlternateFileName="0KEMBV~1.LNK")) returned 1
	[0266.880] ResetEvent (hEvent=0xfc) returned 1
	[0266.880] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.895] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe77827a0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe77827a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe77827a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x406, dwReserved0=0x0, dwReserved1=0x0, cFileName="12MDMvZwImnce_.lnk", cAlternateFileName="12MDMV~1.LNK")) returned 1
	[0266.896] ResetEvent (hEvent=0xfc) returned 1
	[0266.896] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.905] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83695a0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe83695a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe83b5860, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0xfef, dwReserved0=0x0, dwReserved1=0x0, cFileName="1cdPlnabgH9NmuLt.lnk", cAlternateFileName="1CDPLN~1.LNK")) returned 1
	[0266.905] ResetEvent (hEvent=0xfc) returned 1
	[0266.905] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.916] ResetEvent (hEvent=0xfc) returned 1
	[0266.916] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.935] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe81c6680, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xea554f20, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xea554f20, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x1a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="1olAy1-_R9IJbc.lnk", cAlternateFileName="1OLAY1~1.LNK")) returned 1
	[0266.935] ResetEvent (hEvent=0xfc) returned 1
	[0266.935] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.941] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea4e2b00, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xea4e2b00, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xea4e2b00, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x21ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="1tnXWKR-EfENc2OQfS.lnk", cAlternateFileName="1TNXWK~1.LNK")) returned 1
	[0266.941] ResetEvent (hEvent=0xfc) returned 1
	[0266.941] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.954] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9b11040, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe9b11040, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe9b11040, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="2vmVAamal.lnk", cAlternateFileName="2VMVAA~1.LNK")) returned 1
	[0266.954] ResetEvent (hEvent=0xfc) returned 1
	[0266.954] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.965] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9758de0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe9758de0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe97cb200, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0xfb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="3HLa_AdzzNI.lnk", cAlternateFileName="3HLA_A~1.LNK")) returned 1
	[0266.965] ResetEvent (hEvent=0xfc) returned 1
	[0266.965] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.976] ResetEvent (hEvent=0xfc) returned 1
	[0266.976] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.989] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d4c4e0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe9d4c4e0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe9d4c4e0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x26b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3meTNLVbS7So6NoBx4.lnk", cAlternateFileName="3METNL~1.LNK")) returned 1
	[0266.990] ResetEvent (hEvent=0xfc) returned 1
	[0266.990] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0266.998] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7227620, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xeaf72ca0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xeaf72ca0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="3u48sJt.lnk", cAlternateFileName="")) returned 1
	[0266.998] ResetEvent (hEvent=0xfc) returned 1
	[0266.998] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0267.013] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9439100, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe9439100, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe9439100, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x19aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="42rgEUI.lnk", cAlternateFileName="")) returned 1
	[0267.013] ResetEvent (hEvent=0xfc) returned 1
	[0267.013] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0267.023] ResetEvent (hEvent=0xfc) returned 1
	[0267.024] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0267.037] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe96c0860, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe96c0860, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe96c0860, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x275, dwReserved0=0x0, dwReserved1=0x0, cFileName="4EGLj3TxhC3 m0CZX1z-.lnk", cAlternateFileName="4EGLJ3~1.LNK")) returned 1
	[0267.038] ResetEvent (hEvent=0xfc) returned 1
	[0267.038] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0267.050] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d4c4e0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe9d4c4e0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe9d4c4e0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x252, dwReserved0=0x0, dwReserved1=0x0, cFileName="4EHV x4pIWAZg.ots.lnk", cAlternateFileName="4EHVX4~1.LNK")) returned 1
	[0267.050] ResetEvent (hEvent=0xfc) returned 1
	[0267.050] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0267.064] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe94f77e0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe94f77e0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe94f77e0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="4UcSkD.mkv.lnk", cAlternateFileName="4UCSKD~1.LNK")) returned 1
	[0267.064] ResetEvent (hEvent=0xfc) returned 1
	[0267.064] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0267.073] ResetEvent (hEvent=0xfc) returned 1
	[0267.074] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0267.084] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe93a0b80, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe93a0b80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe93a0b80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0xe3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="5D40F.mkv.lnk", cAlternateFileName="5D40FM~1.LNK")) returned 1
	[0267.085] ResetEvent (hEvent=0xfc) returned 1
	[0267.085] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0267.097] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9b371a0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe9b371a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe9b371a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0xa30, dwReserved0=0x0, dwReserved1=0x0, cFileName="5Zahx14NTNTNJpNh_U.flv.lnk", cAlternateFileName="5ZAHX1~1.LNK")) returned 1
	[0267.098] ResetEvent (hEvent=0xfc) returned 1
	[0267.098] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0267.109] ResetEvent (hEvent=0xfc) returned 1
	[0267.109] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0267.124] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe951d940, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe951d940, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe951d940, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0xe37, dwReserved0=0x0, dwReserved1=0x0, cFileName="69_Z.mkv.lnk", cAlternateFileName="69_ZMK~1.LNK")) returned 1
	[0267.125] ResetEvent (hEvent=0xfc) returned 1
	[0267.125] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) returned 0x0
	[0267.136] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x2f2eae0 | out: lpFindFileData=0x2f2eae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9aeaee0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe9aeaee0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe9aeaee0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="7 9V5P8ZB6-EMJQSsz.mkv.lnk", cAlternateFileName="79V5P8~1.LNK")) returned 1
	[0267.136] ResetEvent (hEvent=0xfc) returned 1
	[0267.136] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0xffffffff) 

Thread:
	id = 52
	os_tid = 0x444

	[0132.756] GetProcessHeap () returned 0x800000
	[0132.756] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x38) returned 0x8486d8
	[0132.756] GetProcessHeap () returned 0x800000
	[0132.756] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x18) returned 0x837408
	[0132.756] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x10c
	[0132.756] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x110
	[0132.756] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x114
	[0132.757] GetProcessHeap () returned 0x800000
	[0132.757] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x848718
	[0132.757] GetProcessHeap () returned 0x800000
	[0132.757] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x50) returned 0x858720
	[0132.757] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0132.757] GetProcAddress (hModule=0x76300000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7632d650
	[0132.757] Wow64DisableWow64FsRedirection (in: OldValue=0x304faec | out: OldValue=0x304faec*=0x0) returned 1
	[0132.757] GetProcessHeap () returned 0x800000
	[0132.757] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x858720 | out: hHeap=0x800000) returned 1
	[0132.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x4048ba, lpParameter=0x304faf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118
	[0132.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x4048ba, lpParameter=0x304faf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120
	[0132.764] GetProcessHeap () returned 0x800000
	[0132.764] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x88a7c8
	[0132.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x304f860 | out: lpFindFileData=0x304f860*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x89a7d0
	[0132.764] GetProcessHeap () returned 0x800000
	[0132.764] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89a810
	[0132.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8aa818
	[0132.765] FindNextFileW (in: hFindFile=0x8aa818, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.765] FindNextFileW (in: hFindFile=0x8aa818, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1b689a40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x1b689a40, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0132.765] GetProcessHeap () returned 0x800000
	[0132.765] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab860
	[0132.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1b689a40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x1b689a40, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bb868
	[0132.765] FindNextFileW (in: hFindFile=0x8bb868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1b689a40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x1b689a40, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.765] FindNextFileW (in: hFindFile=0x8bb868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1b689a40, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x1b689a40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x1b689a40, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0132.766] FindNextFileW (in: hFindFile=0x8bb868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb2a0e30, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xfb2a0e30, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfb3d1930, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="DESKTO~1.ADA")) returned 1
	[0132.766] FindNextFileW (in: hFindFile=0x8bb868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb2a0e30, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xfb2a0e30, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfb3d1930, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="DESKTO~1.ADA")) returned 0
	[0132.766] FindClose (in: hFindFile=0x8bb868 | out: hFindFile=0x8bb868) returned 1
	[0132.766] GetProcessHeap () returned 0x800000
	[0132.766] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab860 | out: hHeap=0x800000) returned 1
	[0132.766] FindNextFileW (in: hFindFile=0x8aa818, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1b689a40, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x1b689a40, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0132.766] FindClose (in: hFindFile=0x8aa818 | out: hFindFile=0x8aa818) returned 1
	[0132.766] GetProcessHeap () returned 0x800000
	[0132.766] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89a810 | out: hHeap=0x800000) returned 1
	[0132.766] FindNextFileW (in: hFindFile=0x89a7d0, lpFindFileData=0x304f860 | out: lpFindFileData=0x304f860*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xfb3393b0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfb3393b0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0132.766] GetProcessHeap () returned 0x800000
	[0132.766] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0132.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xfb3393b0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfb3393b0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8ab820
	[0132.767] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xfb3393b0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfb3393b0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.767] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xc58a540, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc58a540, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0132.767] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc21e5a0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0132.767] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0132.767] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0132.767] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb3393b0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xfb3393b0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfbaa9870, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x10102, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="BOOTST~1.ADA")) returned 1
	[0132.767] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0132.767] GetProcessHeap () returned 0x800000
	[0132.767] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.768] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.768] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.768] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.768] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.768] GetProcessHeap () returned 0x800000
	[0132.768] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.768] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0132.768] GetProcessHeap () returned 0x800000
	[0132.768] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.768] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.768] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.768] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.768] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.768] GetProcessHeap () returned 0x800000
	[0132.768] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.768] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0132.769] GetProcessHeap () returned 0x800000
	[0132.769] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8e8
	[0132.770] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.770] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.770] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.770] FindClose (in: hFindFile=0x8bd8e8 | out: hFindFile=0x8bd8e8) returned 1
	[0132.770] GetProcessHeap () returned 0x800000
	[0132.770] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.770] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0132.770] GetProcessHeap () returned 0x800000
	[0132.770] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8e8
	[0132.770] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.770] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.770] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.770] FindClose (in: hFindFile=0x8bd8e8 | out: hFindFile=0x8bd8e8) returned 1
	[0132.770] GetProcessHeap () returned 0x800000
	[0132.770] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.770] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0132.770] GetProcessHeap () returned 0x800000
	[0132.770] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8e8
	[0132.771] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.771] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.771] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0132.771] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0132.771] FindClose (in: hFindFile=0x8bd8e8 | out: hFindFile=0x8bd8e8) returned 1
	[0132.771] GetProcessHeap () returned 0x800000
	[0132.771] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.771] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0132.772] GetProcessHeap () returned 0x800000
	[0132.772] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8e8
	[0132.772] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.772] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.772] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.773] FindClose (in: hFindFile=0x8bd8e8 | out: hFindFile=0x8bd8e8) returned 1
	[0132.773] GetProcessHeap () returned 0x800000
	[0132.773] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.773] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0132.773] GetProcessHeap () returned 0x800000
	[0132.773] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8e8
	[0132.773] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.773] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.773] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.773] FindClose (in: hFindFile=0x8bd8e8 | out: hFindFile=0x8bd8e8) returned 1
	[0132.773] GetProcessHeap () returned 0x800000
	[0132.773] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.773] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0132.773] GetProcessHeap () returned 0x800000
	[0132.773] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8e8
	[0132.774] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.774] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0132.774] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0132.774] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0132.774] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0132.774] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0132.774] FindNextFileW (in: hFindFile=0x8bd8e8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0
	[0132.774] FindClose (in: hFindFile=0x8bd8e8 | out: hFindFile=0x8bd8e8) returned 1
	[0132.774] GetProcessHeap () returned 0x800000
	[0132.775] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.775] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0132.775] GetProcessHeap () returned 0x800000
	[0132.775] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ac868
	[0132.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.775] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.776] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.776] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.776] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.776] GetProcessHeap () returned 0x800000
	[0132.776] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0132.776] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0132.776] GetProcessHeap () returned 0x800000
	[0132.776] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8ac868
	[0132.777] FindNextFileW (in: hFindFile=0x8ac868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.777] FindNextFileW (in: hFindFile=0x8ac868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.777] FindNextFileW (in: hFindFile=0x8ac868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.777] FindClose (in: hFindFile=0x8ac868 | out: hFindFile=0x8ac868) returned 1
	[0132.777] GetProcessHeap () returned 0x800000
	[0132.777] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.778] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0132.778] GetProcessHeap () returned 0x800000
	[0132.778] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8ac868
	[0132.779] FindNextFileW (in: hFindFile=0x8ac868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.779] FindNextFileW (in: hFindFile=0x8ac868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.779] FindNextFileW (in: hFindFile=0x8ac868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.779] FindClose (in: hFindFile=0x8ac868 | out: hFindFile=0x8ac868) returned 1
	[0132.779] GetProcessHeap () returned 0x800000
	[0132.779] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.780] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0132.780] GetProcessHeap () returned 0x800000
	[0132.780] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8ac868
	[0132.781] FindNextFileW (in: hFindFile=0x8ac868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.781] FindNextFileW (in: hFindFile=0x8ac868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.781] FindNextFileW (in: hFindFile=0x8ac868, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.781] FindClose (in: hFindFile=0x8ac868 | out: hFindFile=0x8ac868) returned 1
	[0132.781] GetProcessHeap () returned 0x800000
	[0132.781] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.781] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0132.781] GetProcessHeap () returned 0x800000
	[0132.782] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.783] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.783] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.783] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.783] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.783] GetProcessHeap () returned 0x800000
	[0132.783] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.783] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0132.783] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0132.783] GetProcessHeap () returned 0x800000
	[0132.783] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.784] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.784] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.784] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.784] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.784] GetProcessHeap () returned 0x800000
	[0132.784] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.784] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0132.784] GetProcessHeap () returned 0x800000
	[0132.784] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.785] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.785] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.785] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.785] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.785] GetProcessHeap () returned 0x800000
	[0132.785] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.785] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0132.785] GetProcessHeap () returned 0x800000
	[0132.785] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bc870
	[0132.785] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.785] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.785] FindNextFileW (in: hFindFile=0x8bc870, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.785] FindClose (in: hFindFile=0x8bc870 | out: hFindFile=0x8bc870) returned 1
	[0132.786] GetProcessHeap () returned 0x800000
	[0132.786] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.786] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0132.786] GetProcessHeap () returned 0x800000
	[0132.786] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8b8
	[0132.786] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.787] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.787] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.787] FindClose (in: hFindFile=0x8bd8b8 | out: hFindFile=0x8bd8b8) returned 1
	[0132.787] GetProcessHeap () returned 0x800000
	[0132.787] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.787] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0132.787] GetProcessHeap () returned 0x800000
	[0132.787] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8b8
	[0132.787] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.787] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.787] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.787] FindClose (in: hFindFile=0x8bd8b8 | out: hFindFile=0x8bd8b8) returned 1
	[0132.787] GetProcessHeap () returned 0x800000
	[0132.787] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.787] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0132.787] GetProcessHeap () returned 0x800000
	[0132.787] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8b8
	[0132.788] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.788] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.788] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.788] FindClose (in: hFindFile=0x8bd8b8 | out: hFindFile=0x8bd8b8) returned 1
	[0132.788] GetProcessHeap () returned 0x800000
	[0132.788] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.788] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0132.789] GetProcessHeap () returned 0x800000
	[0132.789] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8b8
	[0132.789] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.789] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.789] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.789] FindClose (in: hFindFile=0x8bd8b8 | out: hFindFile=0x8bd8b8) returned 1
	[0132.789] GetProcessHeap () returned 0x800000
	[0132.789] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.789] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0132.789] GetProcessHeap () returned 0x800000
	[0132.789] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8b8
	[0132.790] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.790] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.790] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.790] FindClose (in: hFindFile=0x8bd8b8 | out: hFindFile=0x8bd8b8) returned 1
	[0132.790] GetProcessHeap () returned 0x800000
	[0132.790] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.790] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0132.790] GetProcessHeap () returned 0x800000
	[0132.790] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8b8
	[0132.791] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.791] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.791] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.791] FindClose (in: hFindFile=0x8bd8b8 | out: hFindFile=0x8bd8b8) returned 1
	[0132.791] GetProcessHeap () returned 0x800000
	[0132.791] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.791] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0132.791] GetProcessHeap () returned 0x800000
	[0132.791] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8b8
	[0132.792] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.792] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.792] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.792] FindClose (in: hFindFile=0x8bd8b8 | out: hFindFile=0x8bd8b8) returned 1
	[0132.792] GetProcessHeap () returned 0x800000
	[0132.792] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.792] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0132.792] GetProcessHeap () returned 0x800000
	[0132.792] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8b8
	[0132.792] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.792] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0132.792] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0132.792] FindClose (in: hFindFile=0x8bd8b8 | out: hFindFile=0x8bd8b8) returned 1
	[0132.792] GetProcessHeap () returned 0x800000
	[0132.792] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.792] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0132.793] FindClose (in: hFindFile=0x8ab820 | out: hFindFile=0x8ab820) returned 1
	[0132.793] GetProcessHeap () returned 0x800000
	[0132.793] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0132.793] FindNextFileW (in: hFindFile=0x89a7d0, lpFindFileData=0x304f860 | out: lpFindFileData=0x304f860*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x1, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0132.793] FindNextFileW (in: hFindFile=0x89a7d0, lpFindFileData=0x304f860 | out: lpFindFileData=0x304f860*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xfb443d50, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xfb443d50, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfb443d50, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x2102, dwReserved0=0x1, dwReserved1=0x0, cFileName="BOOTSECT.BAK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="BOOTSE~1.ADA")) returned 1
	[0132.793] FindNextFileW (in: hFindFile=0x89a7d0, lpFindFileData=0x304f860 | out: lpFindFileData=0x304f860*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
	[0132.793] GetProcessHeap () returned 0x800000
	[0132.793] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Config.Msi\\*", lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="䗺@")) returned 0xffffffff
	[0132.794] GetProcessHeap () returned 0x800000
	[0132.794] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.794] FindNextFileW (in: hFindFile=0x89a7d0, lpFindFileData=0x304f860 | out: lpFindFileData=0x304f860*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0132.794] FindNextFileW (in: hFindFile=0x89a7d0, lpFindFileData=0x304f860 | out: lpFindFileData=0x304f860*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x14ad36c0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0132.794] FindNextFileW (in: hFindFile=0x89a7d0, lpFindFileData=0x304f860 | out: lpFindFileData=0x304f860*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
	[0132.794] GetProcessHeap () returned 0x800000
	[0132.794] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\*", lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="䗺@")) returned 0xffffffff
	[0132.794] GetProcessHeap () returned 0x800000
	[0132.794] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.794] FindNextFileW (in: hFindFile=0x89a7d0, lpFindFileData=0x304f860 | out: lpFindFileData=0x304f860*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x14af9820, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0132.795] FindNextFileW (in: hFindFile=0x89a7d0, lpFindFileData=0x304f860 | out: lpFindFileData=0x304f860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0132.795] GetProcessHeap () returned 0x800000
	[0132.795] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="䗺@")) returned 0xffffffff
	[0132.795] GetProcessHeap () returned 0x800000
	[0132.795] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0132.795] FindNextFileW (in: hFindFile=0x89a7d0, lpFindFileData=0x304f860 | out: lpFindFileData=0x304f860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec4df2a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec4df2a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0132.795] GetProcessHeap () returned 0x800000
	[0132.795] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x87a7c0
	[0132.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec4df2a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec4df2a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8bd8b8
	[0132.795] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec4df2a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec4df2a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.795] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0132.795] GetProcessHeap () returned 0x800000
	[0132.795] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0132.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8ab820
	[0132.796] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x69da35f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69da35f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.796] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1
	[0132.796] GetProcessHeap () returned 0x800000
	[0132.796] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8be900
	[0132.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8ce908
	[0132.796] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.796] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1
	[0132.796] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0
	[0132.796] FindClose (in: hFindFile=0x8ce908 | out: hFindFile=0x8ce908) returned 1
	[0132.797] GetProcessHeap () returned 0x800000
	[0132.797] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0132.797] FindNextFileW (in: hFindFile=0x8ab820, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0132.797] GetProcessHeap () returned 0x800000
	[0132.797] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8be900
	[0132.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8ce908
	[0132.797] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.797] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1
	[0132.797] GetProcessHeap () returned 0x800000
	[0132.797] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0132.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8df958
	[0132.798] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.798] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0132.798] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0132.798] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1
	[0132.798] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0
	[0132.798] FindClose (in: hFindFile=0x8df958 | out: hFindFile=0x8df958) returned 1
	[0132.798] GetProcessHeap () returned 0x800000
	[0132.798] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0132.799] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1
	[0132.799] GetProcessHeap () returned 0x800000
	[0132.799] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0132.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8df958
	[0132.799] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.799] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0132.799] GetProcessHeap () returned 0x800000
	[0132.799] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e09a0
	[0132.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0132.837] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.838] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1
	[0132.840] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0
	[0132.840] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0132.842] GetProcessHeap () returned 0x800000
	[0132.842] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e09a0 | out: hHeap=0x800000) returned 1
	[0132.842] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1
	[0132.842] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1
	[0132.846] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1
	[0132.846] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1
	[0132.848] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1
	[0132.852] FindNextFileW (in: hFindFile=0x8df958, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0
	[0132.852] FindClose (in: hFindFile=0x8df958 | out: hFindFile=0x8df958) returned 1
	[0132.855] GetProcessHeap () returned 0x800000
	[0132.855] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0132.855] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1
	[0132.855] GetProcessHeap () returned 0x800000
	[0132.855] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0132.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.856] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.856] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1
	[0132.856] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0
	[0132.856] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.856] GetProcessHeap () returned 0x800000
	[0132.856] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0132.856] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1
	[0132.856] GetProcessHeap () returned 0x800000
	[0132.856] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0132.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.856] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.856] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1
	[0132.857] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1
	[0132.857] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1
	[0132.857] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1
	[0132.857] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0
	[0132.857] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.857] GetProcessHeap () returned 0x800000
	[0132.857] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0132.857] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1
	[0132.857] GetProcessHeap () returned 0x800000
	[0132.857] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0132.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1
	[0132.858] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1
	[0132.859] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1
	[0132.859] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1
	[0132.859] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0
	[0132.859] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.859] GetProcessHeap () returned 0x800000
	[0132.859] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0132.859] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0132.859] GetProcessHeap () returned 0x800000
	[0132.859] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0132.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.860] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.860] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1
	[0132.860] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1
	[0132.860] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1
	[0132.860] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 0
	[0132.860] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.860] GetProcessHeap () returned 0x800000
	[0132.860] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0132.860] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1
	[0132.860] GetProcessHeap () returned 0x800000
	[0132.860] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0132.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.860] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.860] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2bbccc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c2bbccc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc1486, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1
	[0132.860] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1
	[0132.860] GetProcessHeap () returned 0x800000
	[0132.860] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.860] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.861] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.861] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe846a08f, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe86330eb, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe8659248, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.861] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.861] GetProcessHeap () returned 0x800000
	[0132.861] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.861] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0132.861] GetProcessHeap () returned 0x800000
	[0132.861] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.861] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7545b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7545b2, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.861] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.861] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1207ac, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xea335ac2, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xea35bc1f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.861] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.861] GetProcessHeap () returned 0x800000
	[0132.861] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.861] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90daefa5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90daefa5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90daefa5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1
	[0132.861] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c92176b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c92176b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xdd6ec0f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConvertInkStore.exe", cAlternateFileName="")) returned 1
	[0132.861] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0132.861] GetProcessHeap () returned 0x800000
	[0132.861] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.862] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.862] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.862] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ce8929, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe6f23d9c, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe6f23d9c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.862] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.862] GetProcessHeap () returned 0x800000
	[0132.862] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.862] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0132.862] GetProcessHeap () returned 0x800000
	[0132.862] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.862] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.862] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.862] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fbc310, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe71ab4c9, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe71d1626, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.862] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.862] GetProcessHeap () returned 0x800000
	[0132.862] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.862] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0132.862] GetProcessHeap () returned 0x800000
	[0132.862] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.862] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.863] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.863] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe728fcf7, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe74cb16a, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe74cb16a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.863] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.863] GetProcessHeap () returned 0x800000
	[0132.863] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.863] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0132.863] GetProcessHeap () returned 0x800000
	[0132.863] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.863] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.863] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.863] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31667d9, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe337baef, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe337baef, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.863] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.863] GetProcessHeap () returned 0x800000
	[0132.863] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.863] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0132.863] GetProcessHeap () returned 0x800000
	[0132.863] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.865] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.865] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a407849, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9a407849, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x9a407849, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b3de0, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23b3de0, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a49fdc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d9f3d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x23d9f3d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a4c5f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24261f7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24261f7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a538339, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244c354, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x244c354, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a55e497, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x30200, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be76b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x24be76b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5845f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8723b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdc8723b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe.mui", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aa25, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x250aa25, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5aa753, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36400, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1
	[0132.866] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1
	[0132.867] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1
	[0132.867] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c90f6, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x25c90f6, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9a5d08b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1
	[0132.867] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa23a9ac, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa23a9ac, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1
	[0132.867] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipBand.dll.mui", cAlternateFileName="")) returned 1
	[0132.867] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1
	[0132.867] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5cd75ed, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe5f38bbd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe5f38bbd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.867] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1
	[0132.867] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0
	[0132.867] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.867] GetProcessHeap () returned 0x800000
	[0132.867] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.867] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0132.867] GetProcessHeap () returned 0x800000
	[0132.867] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.867] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.867] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.867] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3f3c6a2, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe41519b8, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe41519b8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.868] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.868] GetProcessHeap () returned 0x800000
	[0132.868] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.868] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0132.868] GetProcessHeap () returned 0x800000
	[0132.868] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.870] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd77a70c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd77a70c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.870] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.871] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4e9cfd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xeb74b2cd, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xeb74b2cd, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.871] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.871] GetProcessHeap () returned 0x800000
	[0132.871] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.871] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0132.871] GetProcessHeap () returned 0x800000
	[0132.871] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.871] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd77a70c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.871] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.871] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47dd5b4, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe4a64ce1, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe4a64ce1, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.871] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.871] GetProcessHeap () returned 0x800000
	[0132.871] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.871] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f4e4a1, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f4e4a1, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f9a75d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1
	[0132.871] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c53a9c4, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5c53a9c4, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe29c9700, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xe2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1
	[0132.871] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0132.872] GetProcessHeap () returned 0x800000
	[0132.872] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.872] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98159680, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98159680, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.872] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.872] FindNextFileW (in: hFindFile=0x34d13e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8311729d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8311729d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8311729d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.872] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.872] GetProcessHeap () returned 0x800000
	[0132.872] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.872] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1
	[0132.872] GetProcessHeap () returned 0x800000
	[0132.872] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.874] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.874] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1
	[0132.874] GetProcessHeap () returned 0x800000
	[0132.874] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.875] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.875] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1
	[0132.875] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2d7bf7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2d7bf7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2d7bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0
	[0132.875] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.875] GetProcessHeap () returned 0x800000
	[0132.875] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.875] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2b1a99, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f2b1a99, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f2b1a99, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1
	[0132.875] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1
	[0132.875] GetProcessHeap () returned 0x800000
	[0132.875] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.876] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.876] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4a0c5f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f4a0c5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1
	[0132.876] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4c6dbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1
	[0132.876] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1
	[0132.876] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0
	[0132.876] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.876] GetProcessHeap () returned 0x800000
	[0132.876] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.876] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f47ab01, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f47ab01, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1
	[0132.876] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1
	[0132.876] GetProcessHeap () returned 0x800000
	[0132.876] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f643b69, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f643b69, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8fc70, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1c8fc70, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cb5dcd, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cb5dcd, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f669cc7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdbf2a, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1cdbf2a, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02087, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d02087, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f68fe25, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d281e4, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d281e4, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4e341, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d4e341, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f6dc0e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7449e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d7449e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f774659, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1
	[0132.878] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7ee29, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e7ee29, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1
	[0132.879] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1
	[0132.879] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e32b6f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1e32b6f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x8f79a7b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0
	[0132.879] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.879] GetProcessHeap () returned 0x800000
	[0132.879] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.879] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f513079, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f513079, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f513079, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9655, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1
	[0132.879] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers", cAlternateFileName="")) returned 1
	[0132.879] GetProcessHeap () returned 0x800000
	[0132.879] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.880] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.880] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 1
	[0132.880] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7e6a73, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f7e6a73, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7e6a73, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbase.xml", cAlternateFileName="")) returned 0
	[0132.880] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.880] GetProcessHeap () returned 0x800000
	[0132.880] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.880] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f79a7b7, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f79a7b7, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f7c0915, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="numbers.xml", cAlternateFileName="")) returned 1
	[0132.880] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1
	[0132.880] GetProcessHeap () returned 0x800000
	[0132.880] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.881] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7a0866, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7a0866, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.881] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1
	[0132.881] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f832d2f, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f832d2f, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f858e8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0
	[0132.881] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.881] GetProcessHeap () returned 0x800000
	[0132.881] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.881] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f80cbd1, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8f80cbd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8f832d2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1
	[0132.881] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1
	[0132.881] GetProcessHeap () returned 0x800000
	[0132.881] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.881] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7a0866, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.882] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1
	[0132.882] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdda123, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdda123, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdda123, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0
	[0132.882] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.882] GetProcessHeap () returned 0x800000
	[0132.882] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.882] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fdb3fc5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fdb3fc5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fdb3fc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1
	[0132.882] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1
	[0132.882] GetProcessHeap () returned 0x800000
	[0132.882] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.882] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7c69c0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7c69c0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.882] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1
	[0132.882] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe263df, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe263df, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe263df, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0
	[0132.882] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.882] GetProcessHeap () returned 0x800000
	[0132.882] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.882] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe00281, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe00281, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe00281, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1
	[0132.882] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1
	[0132.883] GetProcessHeap () returned 0x800000
	[0132.883] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.883] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.883] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc0758, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1dc0758, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1
	[0132.883] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d9a5fb, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x1d9a5fb, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x900155a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1
	[0132.883] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1
	[0132.883] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9003b703, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x9003b703, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0
	[0132.883] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.883] GetProcessHeap () returned 0x800000
	[0132.883] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.883] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe7269b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x8fe7269b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x8fe7269b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1
	[0132.883] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="web", cAlternateFileName="")) returned 1
	[0132.883] GetProcessHeap () returned 0x800000
	[0132.883] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.884] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7c69c0, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.884] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 1
	[0132.884] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900d3c7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x900d3c7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x900f9dd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="webbase.xml", cAlternateFileName="")) returned 0
	[0132.884] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.884] GetProcessHeap () returned 0x800000
	[0132.884] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.884] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 1
	[0132.884] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90061861, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x90061861, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x90061861, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="web.xml", cAlternateFileName="")) returned 0
	[0132.885] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.885] GetProcessHeap () returned 0x800000
	[0132.885] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.885] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0132.885] GetProcessHeap () returned 0x800000
	[0132.885] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.885] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.885] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.885] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2bbf40b, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe2dd4721, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe2dd4721, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.885] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.886] GetProcessHeap () returned 0x800000
	[0132.886] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.886] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0132.886] GetProcessHeap () returned 0x800000
	[0132.886] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.887] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.887] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.887] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f08dd, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe539e167, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe539e167, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.887] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.887] GetProcessHeap () returned 0x800000
	[0132.887] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.887] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0132.887] GetProcessHeap () returned 0x800000
	[0132.887] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.887] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.887] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0132.887] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8e3ba89, ftCreationTime.dwHighDateTime=0x1ca0420, ftLastAccessTime.dwLowDateTime=0xe9004ae5, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0xe9004ae5, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0132.887] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.888] GetProcessHeap () returned 0x800000
	[0132.888] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.888] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ece8572, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2ece8572, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2ea60e45, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1
	[0132.888] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1
	[0132.888] GetProcessHeap () returned 0x800000
	[0132.888] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\HWRCustomization\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.888] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.888] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e0df36a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabda5f8, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0132.889] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.889] GetProcessHeap () returned 0x800000
	[0132.889] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7eaa54, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x2f7eaa54, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x2f301d57, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xb6710, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenalm.dat", cAlternateFileName="")) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33535c00, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x33535c00, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x332fa78d, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0xc7240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32bd661d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x32bd661d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x32a7f9d8, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x10ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d94dbb3, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3d94dbb3, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3c28ab1e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x2e99a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruklm.dat", cAlternateFileName="")) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da5853e, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3da5853e, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d7f6f6e, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x21ff00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwruksh.dat", cAlternateFileName="")) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db89026, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3db89026, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3d3cc942, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x30c330, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbfb43d, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x3dbfb43d, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x3da7e69b, ftLastWriteTime.dwHighDateTime=0x1ca03fa, nFileSizeHigh=0x0, nFileSizeLow=0x3ee0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4bfb78, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x4c4bfb78, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x298e8420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c412911, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x6c412911, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29a8c2e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x201800, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eab8150, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5eab8150, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe4490e80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.exe", cAlternateFileName="")) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7700d105, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x7700d105, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xe45c2150, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x5da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91865215, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x91865215, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1
	[0132.889] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27bfdab7, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27bfdab7, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1
	[0132.890] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1
	[0132.890] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c23c14, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c23c14, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1
	[0132.890] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1
	[0132.890] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c49d71, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c49d71, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1
	[0132.890] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c6fece, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c6fece, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1
	[0132.890] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1
	[0132.890] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58cd8515, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x58cd8515, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x5ca35e50, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1
	[0132.890] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c9602b, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27c9602b, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1
	[0132.891] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27cbc188, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27cbc188, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1
	[0132.891] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1
	[0132.891] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ce22e5, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27ce22e5, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x91865215, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1
	[0132.891] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d08442, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d08442, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x9188b373, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1
	[0132.891] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2e59f, ftCreationTime.dwHighDateTime=0x1ca03fa, ftLastAccessTime.dwLowDateTime=0x27d2e59f, ftLastAccessTime.dwHighDateTime=0x1ca03fa, ftLastWriteTime.dwLowDateTime=0x918b14d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1
	[0132.891] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc49d13, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x5dc49d13, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2a1fc7a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1
	[0132.891] GetProcessHeap () returned 0x800000
	[0132.891] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd7ecb1a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd7ecb1a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.892] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.892] GetProcessHeap () returned 0x800000
	[0132.892] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.892] GetProcessHeap () returned 0x800000
	[0132.892] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.892] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.892] GetProcessHeap () returned 0x800000
	[0132.892] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.892] GetProcessHeap () returned 0x800000
	[0132.892] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7ecb1a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.893] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.893] GetProcessHeap () returned 0x800000
	[0132.893] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.893] GetProcessHeap () returned 0x800000
	[0132.893] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.908] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.910] GetProcessHeap () returned 0x800000
	[0132.910] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.912] GetProcessHeap () returned 0x800000
	[0132.912] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e3360
	[0132.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0132.917] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0132.920] GetProcessHeap () returned 0x800000
	[0132.920] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e3360 | out: hHeap=0x800000) returned 1
	[0132.925] GetProcessHeap () returned 0x800000
	[0132.925] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.930] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.930] GetProcessHeap () returned 0x800000
	[0132.930] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.930] GetProcessHeap () returned 0x800000
	[0132.930] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.931] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.931] GetProcessHeap () returned 0x800000
	[0132.931] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.931] GetProcessHeap () returned 0x800000
	[0132.931] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.931] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.931] GetProcessHeap () returned 0x800000
	[0132.931] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.931] GetProcessHeap () returned 0x800000
	[0132.931] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.931] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.931] GetProcessHeap () returned 0x800000
	[0132.931] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.931] GetProcessHeap () returned 0x800000
	[0132.931] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.931] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.931] GetProcessHeap () returned 0x800000
	[0132.932] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.932] GetProcessHeap () returned 0x800000
	[0132.932] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd812c74, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd812c74, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.932] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.932] GetProcessHeap () returned 0x800000
	[0132.932] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.932] GetProcessHeap () returned 0x800000
	[0132.932] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd812c74, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.932] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.932] GetProcessHeap () returned 0x800000
	[0132.932] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.932] GetProcessHeap () returned 0x800000
	[0132.932] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.932] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.932] GetProcessHeap () returned 0x800000
	[0132.932] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.932] GetProcessHeap () returned 0x800000
	[0132.932] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.933] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.933] GetProcessHeap () returned 0x800000
	[0132.933] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.933] GetProcessHeap () returned 0x800000
	[0132.933] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.933] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.933] GetProcessHeap () returned 0x800000
	[0132.933] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.933] GetProcessHeap () returned 0x800000
	[0132.933] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.933] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.933] GetProcessHeap () returned 0x800000
	[0132.933] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.933] GetProcessHeap () returned 0x800000
	[0132.933] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.933] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.933] GetProcessHeap () returned 0x800000
	[0132.933] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.934] GetProcessHeap () returned 0x800000
	[0132.934] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x980e725f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x980e725f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.934] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.934] GetProcessHeap () returned 0x800000
	[0132.934] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.934] GetProcessHeap () returned 0x800000
	[0132.934] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.934] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.934] GetProcessHeap () returned 0x800000
	[0132.934] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.934] GetProcessHeap () returned 0x800000
	[0132.934] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98074e3f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98074e3f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.934] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.935] GetProcessHeap () returned 0x800000
	[0132.935] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.935] GetProcessHeap () returned 0x800000
	[0132.935] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd838dce, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd838dce, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.935] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.935] GetProcessHeap () returned 0x800000
	[0132.935] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.935] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.935] GetProcessHeap () returned 0x800000
	[0132.935] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0132.935] GetProcessHeap () returned 0x800000
	[0132.935] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.935] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.935] GetProcessHeap () returned 0x800000
	[0132.935] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.935] GetProcessHeap () returned 0x800000
	[0132.935] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.935] GetProcessHeap () returned 0x800000
	[0132.935] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0132.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.936] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.936] GetProcessHeap () returned 0x800000
	[0132.936] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0132.936] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.936] GetProcessHeap () returned 0x800000
	[0132.936] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.936] GetProcessHeap () returned 0x800000
	[0132.936] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0132.936] GetProcessHeap () returned 0x800000
	[0132.936] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0132.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.937] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.937] GetProcessHeap () returned 0x800000
	[0132.937] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0132.937] GetProcessHeap () returned 0x800000
	[0132.938] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0132.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.938] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.938] GetProcessHeap () returned 0x800000
	[0132.938] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0132.938] GetProcessHeap () returned 0x800000
	[0132.938] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0132.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0132.940] GetProcessHeap () returned 0x800000
	[0132.940] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4440
	[0132.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.943] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.949] GetProcessHeap () returned 0x800000
	[0132.950] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4440 | out: hHeap=0x800000) returned 1
	[0132.950] GetProcessHeap () returned 0x800000
	[0132.950] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4440
	[0132.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0132.950] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0132.951] GetProcessHeap () returned 0x800000
	[0132.951] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4440 | out: hHeap=0x800000) returned 1
	[0132.951] GetProcessHeap () returned 0x800000
	[0132.951] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0132.953] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0132.953] GetProcessHeap () returned 0x800000
	[0132.953] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.954] GetProcessHeap () returned 0x800000
	[0132.954] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0132.955] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0132.955] GetProcessHeap () returned 0x800000
	[0132.955] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.955] GetProcessHeap () returned 0x800000
	[0132.956] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f4370
	[0132.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.958] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.958] GetProcessHeap () returned 0x800000
	[0132.958] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f4370 | out: hHeap=0x800000) returned 1
	[0132.958] GetProcessHeap () returned 0x800000
	[0132.958] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.959] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.959] GetProcessHeap () returned 0x800000
	[0132.959] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.959] GetProcessHeap () returned 0x800000
	[0132.959] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.960] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.960] GetProcessHeap () returned 0x800000
	[0132.960] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.960] GetProcessHeap () returned 0x800000
	[0132.960] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.961] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.961] GetProcessHeap () returned 0x800000
	[0132.961] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.961] GetProcessHeap () returned 0x800000
	[0132.961] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.962] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.962] GetProcessHeap () returned 0x800000
	[0132.962] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.962] GetProcessHeap () returned 0x800000
	[0132.962] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0132.963] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0132.963] GetProcessHeap () returned 0x800000
	[0132.963] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.963] GetProcessHeap () returned 0x800000
	[0132.963] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0132.965] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0132.965] GetProcessHeap () returned 0x800000
	[0132.965] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.965] GetProcessHeap () returned 0x800000
	[0132.965] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0132.968] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0132.968] GetProcessHeap () returned 0x800000
	[0132.968] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.969] GetProcessHeap () returned 0x800000
	[0132.969] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.969] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.970] GetProcessHeap () returned 0x800000
	[0132.970] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.970] GetProcessHeap () returned 0x800000
	[0132.970] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.970] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.970] GetProcessHeap () returned 0x800000
	[0132.970] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.970] GetProcessHeap () returned 0x800000
	[0132.971] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.971] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.971] GetProcessHeap () returned 0x800000
	[0132.971] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.971] GetProcessHeap () returned 0x800000
	[0132.971] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.972] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.972] GetProcessHeap () returned 0x800000
	[0132.972] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.972] GetProcessHeap () returned 0x800000
	[0132.972] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.973] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.973] GetProcessHeap () returned 0x800000
	[0132.973] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.973] GetProcessHeap () returned 0x800000
	[0132.973] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.974] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.974] GetProcessHeap () returned 0x800000
	[0132.974] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.974] GetProcessHeap () returned 0x800000
	[0132.974] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.977] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.977] GetProcessHeap () returned 0x800000
	[0132.977] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.977] GetProcessHeap () returned 0x800000
	[0132.977] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.978] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.978] GetProcessHeap () returned 0x800000
	[0132.978] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.978] GetProcessHeap () returned 0x800000
	[0132.978] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e0960
	[0132.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0132.979] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0132.979] GetProcessHeap () returned 0x800000
	[0132.979] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e0960 | out: hHeap=0x800000) returned 1
	[0132.979] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0132.979] GetProcessHeap () returned 0x800000
	[0132.979] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0132.979] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0132.979] GetProcessHeap () returned 0x800000
	[0132.979] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0132.980] GetProcessHeap () returned 0x800000
	[0132.980] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0132.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13e8
	[0133.003] FindClose (in: hFindFile=0x34d13e8 | out: hFindFile=0x34d13e8) returned 1
	[0133.006] GetProcessHeap () returned 0x800000
	[0133.007] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34e2358 | out: hHeap=0x800000) returned 1
	[0133.008] GetProcessHeap () returned 0x800000
	[0133.011] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0133.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0133.016] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.021] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07d0e00, ftCreationTime.dwHighDateTime=0x1ca2cea, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07d0e00, ftLastWriteTime.dwHighDateTime=0x1ca2cea, nFileSizeHigh=0x0, nFileSizeLow=0x90540, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1
	[0133.021] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782b2c00, ftCreationTime.dwHighDateTime=0x1bada3f, ftLastAccessTime.dwLowDateTime=0x98a53b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x782b2c00, ftLastWriteTime.dwHighDateTime=0x1bada3f, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1
	[0133.021] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e2ea00, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x5b0da70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5e2ea00, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1
	[0133.021] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1
	[0133.021] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf3c9300, ftCreationTime.dwHighDateTime=0x1bdf5d3, ftLastAccessTime.dwLowDateTime=0x78ced70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf3c9300, ftLastWriteTime.dwHighDateTime=0x1bdf5d3, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0
	[0133.021] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0133.021] GetProcessHeap () returned 0x800000
	[0133.021] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0133.021] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1
	[0133.021] GetProcessHeap () returned 0x800000
	[0133.021] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0133.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0133.021] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.021] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0133.022] GetProcessHeap () returned 0x800000
	[0133.022] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e1968
	[0133.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0133.022] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.022] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52bb100, ftCreationTime.dwHighDateTime=0x1ca6185, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc52bb100, ftLastWriteTime.dwHighDateTime=0x1ca6185, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1
	[0133.022] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x4380, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1
	[0133.022] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 1
	[0133.022] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65b900, ftCreationTime.dwHighDateTime=0x1caac22, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdc65b900, ftLastWriteTime.dwHighDateTime=0x1caac22, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.IDX_DLL", cAlternateFileName="STINTL~1.IDX")) returned 0
	[0133.022] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0133.022] GetProcessHeap () returned 0x800000
	[0133.022] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1968 | out: hHeap=0x800000) returned 1
	[0133.022] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x1e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1
	[0133.022] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x17f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1
	[0133.022] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x35380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1
	[0133.022] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f78700, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xc251c2e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x66f78700, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x2c380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1
	[0133.022] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79275700, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79275700, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x26d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1
	[0133.022] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x39580, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1
	[0133.022] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b89b100, ftCreationTime.dwHighDateTime=0x1caac21, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b89b100, ftLastWriteTime.dwHighDateTime=0x1caac21, nFileSizeHigh=0x0, nFileSizeLow=0x18b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="IMCONT~1.DLL")) returned 1
	[0133.023] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1
	[0133.023] GetProcessHeap () returned 0x800000
	[0133.023] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e1968
	[0133.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0133.023] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.023] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0133.023] GetProcessHeap () returned 0x800000
	[0133.023] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d2350
	[0133.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.023] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.024] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310fad00, ftCreationTime.dwHighDateTime=0x1c2d758, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x310fad00, ftLastWriteTime.dwHighDateTime=0x1c2d758, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1
	[0133.024] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a301d00, ftCreationTime.dwHighDateTime=0x1c2d7fa, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a301d00, ftLastWriteTime.dwHighDateTime=0x1c2d7fa, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1
	[0133.024] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1271800, ftCreationTime.dwHighDateTime=0x1c4481e, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc1271800, ftLastWriteTime.dwHighDateTime=0x1c4481e, nFileSizeHigh=0x0, nFileSizeLow=0x9869, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.DAT", cAlternateFileName="")) returned 1
	[0133.024] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5866b900, ftCreationTime.dwHighDateTime=0x1c29047, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5866b900, ftLastWriteTime.dwHighDateTime=0x1c29047, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOCKS.XML", cAlternateFileName="")) returned 1
	[0133.024] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1
	[0133.024] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36acb00, ftCreationTime.dwHighDateTime=0x1c2dd39, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x36acb00, ftLastWriteTime.dwHighDateTime=0x1c2dd39, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0
	[0133.024] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.024] GetProcessHeap () returned 0x800000
	[0133.024] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d2350 | out: hHeap=0x800000) returned 1
	[0133.024] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1
	[0133.024] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f34c00, ftCreationTime.dwHighDateTime=0x1c62260, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11f34c00, ftLastWriteTime.dwHighDateTime=0x1c62260, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0
	[0133.024] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0133.024] GetProcessHeap () returned 0x800000
	[0133.024] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1968 | out: hHeap=0x800000) returned 1
	[0133.025] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e94600, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93e94600, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x1b180, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1
	[0133.025] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f12000, ftCreationTime.dwHighDateTime=0x1c9a11f, ftLastAccessTime.dwLowDateTime=0x69a83910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85f12000, ftLastWriteTime.dwHighDateTime=0x1c9a11f, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1
	[0133.025] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802a9400, ftCreationTime.dwHighDateTime=0x1caad0b, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x802a9400, ftLastWriteTime.dwHighDateTime=0x1caad0b, nFileSizeHigh=0x0, nFileSizeLow=0x59180, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1
	[0133.025] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab68100, ftCreationTime.dwHighDateTime=0x1cac9a5, ftLastAccessTime.dwLowDateTime=0x5943a0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab68100, ftLastWriteTime.dwHighDateTime=0x1cac9a5, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1
	[0133.025] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 1
	[0133.025] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x3d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 0
	[0133.025] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0133.025] GetProcessHeap () returned 0x800000
	[0133.025] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0133.025] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0133.025] GetProcessHeap () returned 0x800000
	[0133.025] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0133.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0133.026] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.026] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1
	[0133.026] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfcedc00, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcfcedc00, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0
	[0133.026] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0133.026] GetProcessHeap () returned 0x800000
	[0133.026] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0133.026] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0133.026] GetProcessHeap () returned 0x800000
	[0133.026] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0133.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0133.026] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.026] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2608de, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2608de, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0133.026] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0133.026] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ca9e3b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ca9e3b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4421c165, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue_Gradient.jpg", cAlternateFileName="")) returned 1
	[0133.026] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ccff98, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ccff98, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x442422c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x11eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cave_Drawings.gif", cAlternateFileName="")) returned 1
	[0133.026] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4d6850c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4d6850c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4434cc55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x90f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connectivity.gif", cAlternateFileName="")) returned 1
	[0133.026] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80425158, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0133.026] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5015d96, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5015d96, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444c9a01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Lines.emf", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2acb98, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2acb98, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50881ad, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50881ad, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x444efb5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.emf", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50d4467, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc50d4467, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44515cbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2864, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.emf", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5120721, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5120721, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.emf", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2d2cf5, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2d2cf5, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2f8e52, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce2f8e52, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fc9adc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fc9adc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4453be1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(cm).wmf", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fa397f, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4fa397f, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44692a69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grid_(inch).wmf", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5192b38, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5192b38, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4480f815, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x252ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.emf", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e4cd3a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4e4cd3a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44835973, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Monet.jpg", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc51dedf2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc51dedf2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.emf", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc522b0ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc522b0ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x448cdeeb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x65b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.emf", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ebf151, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4ebf151, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b2f4cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook.jpg", cAlternateFileName="")) returned 1
	[0133.027] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce31efaf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce31efaf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce34510c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce34510c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0b40b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f0b40b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44b55629, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pine_Lumber.jpg", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f31568, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f31568, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pretty_Peacock.jpg", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f7d822, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc4f7d822, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x44bc7a43, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x36e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psychedelic.jpg", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3913c6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3913c6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53cdfab, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc53cdfab, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45148cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sand_Paper.jpg", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5277366, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5277366, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4516ee37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x91c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.emf", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3b7523, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3b7523, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc530f8da, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc530f8da, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x45194f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.emf", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc541a265, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc541a265, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x451bb0f3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Small_News.jpg", cAlternateFileName="")) returned 1
	[0133.028] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1
	[0133.029] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
	[0133.029] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3dd680, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce3dd680, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
	[0133.029] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4037dd, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xce4037dd, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
	[0133.029] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54403c2, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54403c2, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x452797c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stucco.gif", cAlternateFileName="")) returned 1
	[0133.029] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc548c67c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc548c67c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4529f927, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tanspecks.jpg", cAlternateFileName="")) returned 1
	[0133.029] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54b27d9, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54b27d9, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x121e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiki.gif", cAlternateFileName="")) returned 1
	[0133.029] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc535bb94, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc535bb94, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x4573c389, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x6860, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.emf", cAlternateFileName="")) returned 1
	[0133.029] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54fea93, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc54fea93, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457ae7a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="White_Chocolate.jpg", cAlternateFileName="")) returned 1
	[0133.029] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 1
	[0133.029] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5524bf0, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5524bf0, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x457faa5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3ad7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wrinkled_Paper.gif", cAlternateFileName="")) returned 0
	[0133.029] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0133.029] GetProcessHeap () returned 0x800000
	[0133.029] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0133.029] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0133.029] GetProcessHeap () returned 0x800000
	[0133.029] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0133.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0133.030] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.030] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0133.030] GetProcessHeap () returned 0x800000
	[0133.030] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e1968
	[0133.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0133.032] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.032] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0133.032] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0133.033] GetProcessHeap () returned 0x800000
	[0133.033] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e1968 | out: hHeap=0x800000) returned 1
	[0133.033] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1
	[0133.033] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1
	[0133.033] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1
	[0133.033] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1
	[0133.033] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1
	[0133.033] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0
	[0133.033] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0133.033] GetProcessHeap () returned 0x800000
	[0133.033] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0133.034] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1
	[0133.034] GetProcessHeap () returned 0x800000
	[0133.034] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0133.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0133.041] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.043] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1
	[0133.043] GetProcessHeap () returned 0x800000
	[0133.043] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0133.043] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.043] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1
	[0133.043] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1
	[0133.043] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.043] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.043] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.043] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0133.044] GetProcessHeap () returned 0x800000
	[0133.044] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.044] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1
	[0133.044] GetProcessHeap () returned 0x800000
	[0133.044] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0133.048] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.048] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1
	[0133.048] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1
	[0133.049] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.049] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.049] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.049] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0133.049] GetProcessHeap () returned 0x800000
	[0133.049] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.049] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1
	[0133.049] GetProcessHeap () returned 0x800000
	[0133.049] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0133.051] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.051] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1
	[0133.051] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1
	[0133.051] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.051] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.051] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.051] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0133.051] GetProcessHeap () returned 0x800000
	[0133.051] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.051] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1
	[0133.051] GetProcessHeap () returned 0x800000
	[0133.051] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.177] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.177] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1
	[0133.178] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1
	[0133.178] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.178] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.178] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.178] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.178] GetProcessHeap () returned 0x800000
	[0133.178] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.178] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1
	[0133.178] GetProcessHeap () returned 0x800000
	[0133.178] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.178] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.178] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1
	[0133.178] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1
	[0133.178] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.178] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.178] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.178] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.179] GetProcessHeap () returned 0x800000
	[0133.179] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.179] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1
	[0133.179] GetProcessHeap () returned 0x800000
	[0133.179] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.318] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.318] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1
	[0133.320] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1
	[0133.324] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.324] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.327] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.327] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.331] GetProcessHeap () returned 0x800000
	[0133.331] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.331] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1
	[0133.332] GetProcessHeap () returned 0x800000
	[0133.332] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.332] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.332] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1
	[0133.332] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1
	[0133.332] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.332] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.333] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.333] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.333] GetProcessHeap () returned 0x800000
	[0133.333] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.333] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1
	[0133.333] GetProcessHeap () returned 0x800000
	[0133.333] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.333] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.333] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1
	[0133.333] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1
	[0133.333] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.333] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.333] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.333] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.333] GetProcessHeap () returned 0x800000
	[0133.333] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.333] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1
	[0133.333] GetProcessHeap () returned 0x800000
	[0133.333] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.334] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.334] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1
	[0133.334] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1
	[0133.334] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.334] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.334] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.334] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.334] GetProcessHeap () returned 0x800000
	[0133.334] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.334] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1
	[0133.334] GetProcessHeap () returned 0x800000
	[0133.334] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.334] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.334] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1
	[0133.334] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1
	[0133.334] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.334] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.335] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.335] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.335] GetProcessHeap () returned 0x800000
	[0133.335] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.335] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1
	[0133.335] GetProcessHeap () returned 0x800000
	[0133.335] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.335] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.335] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1
	[0133.335] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1
	[0133.335] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.335] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.335] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.335] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.335] GetProcessHeap () returned 0x800000
	[0133.335] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.335] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1
	[0133.335] GetProcessHeap () returned 0x800000
	[0133.335] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.336] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.336] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf17d4300, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6041aaf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf17d4300, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1
	[0133.336] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1
	[0133.336] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.336] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.336] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.336] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.336] GetProcessHeap () returned 0x800000
	[0133.336] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.336] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1
	[0133.336] GetProcessHeap () returned 0x800000
	[0133.336] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.336] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.336] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ae7000, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ae7000, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1
	[0133.336] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1
	[0133.336] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.336] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.336] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.337] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.337] GetProcessHeap () returned 0x800000
	[0133.337] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.337] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1
	[0133.337] GetProcessHeap () returned 0x800000
	[0133.337] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.337] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.337] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf641f700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf641f700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1
	[0133.337] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1
	[0133.337] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.337] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.337] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.337] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.337] GetProcessHeap () returned 0x800000
	[0133.337] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.337] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1
	[0133.337] GetProcessHeap () returned 0x800000
	[0133.337] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.338] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.338] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a45100, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a45100, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1
	[0133.338] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1
	[0133.338] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.338] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.338] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.338] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.338] GetProcessHeap () returned 0x800000
	[0133.338] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.338] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1
	[0133.338] GetProcessHeap () returned 0x800000
	[0133.338] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.467] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.468] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9d57e00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51eb22b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d57e00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1
	[0133.468] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1
	[0133.473] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.475] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.475] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.477] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.478] GetProcessHeap () returned 0x800000
	[0133.479] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.479] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1
	[0133.479] GetProcessHeap () returned 0x800000
	[0133.479] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.479] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.479] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.479] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb06ab00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb06ab00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1
	[0133.479] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1
	[0133.479] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.479] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.479] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.479] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.480] GetProcessHeap () returned 0x800000
	[0133.480] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.480] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1
	[0133.480] GetProcessHeap () returned 0x800000
	[0133.480] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8e2970
	[0133.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1468
	[0133.480] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.480] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc37d800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x52008f10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37d800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1
	[0133.480] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1
	[0133.480] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.480] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.480] FindNextFileW (in: hFindFile=0x34d1468, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.480] FindClose (in: hFindFile=0x34d1468 | out: hFindFile=0x34d1468) returned 1
	[0133.480] GetProcessHeap () returned 0x800000
	[0133.480] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e2970 | out: hHeap=0x800000) returned 1
	[0133.480] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1
	[0133.556] GetProcessHeap () returned 0x800000
	[0133.556] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.557] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.557] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd690500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd690500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1
	[0133.557] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1
	[0133.557] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.557] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.557] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.557] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.557] GetProcessHeap () returned 0x800000
	[0133.558] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.558] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1
	[0133.558] GetProcessHeap () returned 0x800000
	[0133.558] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.558] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.558] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ee600, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35ee600, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1
	[0133.558] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE.INF", cAlternateFileName="")) returned 1
	[0133.558] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.558] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.558] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.559] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.559] GetProcessHeap () returned 0x800000
	[0133.559] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.559] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1
	[0133.559] GetProcessHeap () returned 0x800000
	[0133.559] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.559] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.559] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4901300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x539538d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4901300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1
	[0133.559] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1
	[0133.559] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.559] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.559] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.559] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.560] GetProcessHeap () returned 0x800000
	[0133.560] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.560] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1
	[0133.560] GetProcessHeap () returned 0x800000
	[0133.560] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.560] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.560] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f26d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f26d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1
	[0133.560] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1
	[0133.560] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.560] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.560] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.561] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.561] GetProcessHeap () returned 0x800000
	[0133.561] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.561] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1
	[0133.561] GetProcessHeap () returned 0x800000
	[0133.561] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.561] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.561] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8239a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8239a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1
	[0133.561] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1
	[0133.561] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.561] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.561] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.562] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.562] GetProcessHeap () returned 0x800000
	[0133.562] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.562] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1
	[0133.562] GetProcessHeap () returned 0x800000
	[0133.562] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.562] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.562] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954c700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x954c700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1
	[0133.562] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1
	[0133.562] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.562] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.562] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.563] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.563] GetProcessHeap () returned 0x800000
	[0133.563] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.563] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1
	[0133.563] GetProcessHeap () returned 0x800000
	[0133.563] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.563] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.563] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85f400, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa85f400, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1
	[0133.563] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1
	[0133.563] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.563] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.563] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.563] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.564] GetProcessHeap () returned 0x800000
	[0133.564] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.564] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1
	[0133.564] GetProcessHeap () returned 0x800000
	[0133.564] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.564] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.564] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107bd500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x107bd500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1
	[0133.564] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1
	[0133.564] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.564] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.564] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.565] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.565] GetProcessHeap () returned 0x800000
	[0133.565] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.565] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1
	[0133.565] GetProcessHeap () returned 0x800000
	[0133.565] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0133.723] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.725] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140f5c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x140f5c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1
	[0133.725] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1
	[0133.726] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.729] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.734] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.734] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0133.739] GetProcessHeap () returned 0x800000
	[0133.739] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.740] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1
	[0133.741] GetProcessHeap () returned 0x800000
	[0133.741] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.744] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.744] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a2e300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a2e300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1
	[0133.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a44b570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1
	[0133.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.745] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.745] GetProcessHeap () returned 0x800000
	[0133.745] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.745] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1
	[0133.745] GetProcessHeap () returned 0x800000
	[0133.745] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a053d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a053d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1
	[0133.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1
	[0133.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.745] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.746] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.746] GetProcessHeap () returned 0x800000
	[0133.746] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.746] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1
	[0133.746] GetProcessHeap () returned 0x800000
	[0133.746] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.746] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.746] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.746] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b366a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a8037d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b366a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1
	[0133.746] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1
	[0133.746] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.746] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.746] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.746] GetProcessHeap () returned 0x800000
	[0133.746] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.746] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1
	[0133.746] GetProcessHeap () returned 0x800000
	[0133.746] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.747] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.747] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.747] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c679700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c679700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1
	[0133.747] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1
	[0133.747] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.747] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.747] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.747] GetProcessHeap () returned 0x800000
	[0133.747] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.747] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1
	[0133.747] GetProcessHeap () returned 0x800000
	[0133.747] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.747] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.747] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.747] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec9f100, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec9f100, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1
	[0133.747] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a84fa90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1
	[0133.747] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.747] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.748] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.748] GetProcessHeap () returned 0x800000
	[0133.748] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.748] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1
	[0133.748] GetProcessHeap () returned 0x800000
	[0133.748] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.748] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.748] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.748] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffb1e00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ffb1e00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1
	[0133.748] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1
	[0133.748] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.748] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.748] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.748] GetProcessHeap () returned 0x800000
	[0133.748] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.748] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1
	[0133.748] GetProcessHeap () returned 0x800000
	[0133.748] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212c4b00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x212c4b00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1
	[0133.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1
	[0133.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.749] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.749] GetProcessHeap () returned 0x800000
	[0133.749] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.749] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1
	[0133.749] GetProcessHeap () returned 0x800000
	[0133.749] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225d7800, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2019f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x225d7800, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1
	[0133.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1
	[0133.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.749] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.750] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.750] GetProcessHeap () returned 0x800000
	[0133.750] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.750] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1
	[0133.750] GetProcessHeap () returned 0x800000
	[0133.750] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.750] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.750] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.750] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bfd200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bfd200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1
	[0133.750] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1
	[0133.750] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.750] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.750] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.750] GetProcessHeap () returned 0x800000
	[0133.750] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.750] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1
	[0133.750] GetProcessHeap () returned 0x800000
	[0133.750] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f0ff00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25f0ff00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1
	[0133.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1
	[0133.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.751] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.751] GetProcessHeap () returned 0x800000
	[0133.751] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.751] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1
	[0133.751] GetProcessHeap () returned 0x800000
	[0133.751] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27222c00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27222c00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1
	[0133.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a9f29b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1
	[0133.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.751] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.751] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.752] GetProcessHeap () returned 0x800000
	[0133.752] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.752] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1
	[0133.752] GetProcessHeap () returned 0x800000
	[0133.752] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.752] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.752] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.752] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28535900, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28535900, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1
	[0133.752] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1
	[0133.752] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.752] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.752] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.752] GetProcessHeap () returned 0x800000
	[0133.752] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.752] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1
	[0133.752] GetProcessHeap () returned 0x800000
	[0133.752] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.752] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab5b300, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2ab5b300, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1
	[0133.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1
	[0133.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.753] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.753] GetProcessHeap () returned 0x800000
	[0133.753] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.753] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1
	[0133.753] GetProcessHeap () returned 0x800000
	[0133.753] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376bcd00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x376bcd00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d180d00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d180d00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1
	[0133.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1
	[0133.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.754] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.754] GetProcessHeap () returned 0x800000
	[0133.754] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.754] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1
	[0133.754] GetProcessHeap () returned 0x800000
	[0133.754] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.754] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.754] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.754] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e493a00, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e493a00, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1
	[0133.754] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1
	[0133.754] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.754] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.754] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.754] GetProcessHeap () returned 0x800000
	[0133.754] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.754] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1
	[0133.754] GetProcessHeap () returned 0x800000
	[0133.754] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0133.858] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.858] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.858] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7a6700, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f7a6700, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1
	[0133.858] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1
	[0133.858] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.858] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0133.858] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0133.858] GetProcessHeap () returned 0x800000
	[0133.858] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0133.858] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1
	[0133.858] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1
	[0133.858] GetProcessHeap () returned 0x800000
	[0133.858] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0133.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0133.994] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.994] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0133.994] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0133.998] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a17500, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x5e574fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x36a17500, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1
	[0134.000] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1
	[0134.002] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0
	[0134.002] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.003] GetProcessHeap () returned 0x800000
	[0134.003] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0134.003] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1
	[0134.005] GetProcessHeap () returned 0x800000
	[0134.005] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x357bfa0
	[0134.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.007] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.007] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0134.008] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad387f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0134.008] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d2a200, ftCreationTime.dwHighDateTime=0x1cab7f2, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37d2a200, ftLastWriteTime.dwHighDateTime=0x1cab7f2, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1
	[0134.008] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1
	[0134.008] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389cfa00, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x70875130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x389cfa00, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0
	[0134.008] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.008] GetProcessHeap () returned 0x800000
	[0134.008] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.008] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0
	[0134.008] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0134.008] GetProcessHeap () returned 0x800000
	[0134.008] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0134.008] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1
	[0134.008] GetProcessHeap () returned 0x800000
	[0134.008] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0134.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0134.008] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.008] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARFR", cAlternateFileName="")) returned 1
	[0134.008] GetProcessHeap () returned 0x800000
	[0134.008] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x357bfa0
	[0134.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.008] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.009] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 1
	[0134.009] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b324b00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b324b00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x195018, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ARFR.ITS", cAlternateFileName="")) returned 0
	[0134.009] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.009] GetProcessHeap () returned 0x800000
	[0134.009] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.009] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1
	[0134.009] GetProcessHeap () returned 0x800000
	[0134.009] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x357bfa0
	[0134.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.009] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.009] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1
	[0134.009] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0
	[0134.009] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.009] GetProcessHeap () returned 0x800000
	[0134.009] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.009] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1
	[0134.009] GetProcessHeap () returned 0x800000
	[0134.009] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x357bfa0
	[0134.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.009] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.009] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1
	[0134.009] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c637800, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c637800, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0
	[0134.010] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.010] GetProcessHeap () returned 0x800000
	[0134.010] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.010] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1
	[0134.010] GetProcessHeap () returned 0x800000
	[0134.010] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x357bfa0
	[0134.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.010] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.010] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9890c900, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x54a7f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9890c900, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1
	[0134.010] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22595900, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22595900, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1
	[0134.010] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1
	[0134.010] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c79400, ftCreationTime.dwHighDateTime=0x1be6f42, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8c79400, ftLastWriteTime.dwHighDateTime=0x1be6f42, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0
	[0134.010] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.010] GetProcessHeap () returned 0x800000
	[0134.010] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.010] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAR", cAlternateFileName="")) returned 1
	[0134.010] GetProcessHeap () returned 0x800000
	[0134.010] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x357bfa0
	[0134.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.010] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7562dd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7562dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.010] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 1
	[0134.010] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21282c00, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21282c00, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x166bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FRAR.ITS", cAlternateFileName="")) returned 0
	[0134.011] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.011] GetProcessHeap () returned 0x800000
	[0134.011] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.011] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1
	[0134.011] GetProcessHeap () returned 0x800000
	[0134.011] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x357bfa0
	[0134.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.011] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7516b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.011] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb22e200, ftCreationTime.dwHighDateTime=0x1c82168, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb22e200, ftLastWriteTime.dwHighDateTime=0x1c82168, nFileSizeHigh=0x0, nFileSizeLow=0x38200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1
	[0134.011] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x238a8600, ftCreationTime.dwHighDateTime=0x1c6e3e3, ftLastAccessTime.dwLowDateTime=0x753cc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x238a8600, ftLastWriteTime.dwHighDateTime=0x1c6e3e3, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1
	[0134.011] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1
	[0134.011] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d99e900, ftCreationTime.dwHighDateTime=0x1be6f08, ftLastAccessTime.dwLowDateTime=0x79672f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d99e900, ftLastWriteTime.dwHighDateTime=0x1be6f08, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0
	[0134.011] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.011] GetProcessHeap () returned 0x800000
	[0134.011] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.011] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd541900, ftCreationTime.dwHighDateTime=0x1c911ec, ftLastAccessTime.dwLowDateTime=0x7562dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd541900, ftLastWriteTime.dwHighDateTime=0x1c911ec, nFileSizeHigh=0x0, nFileSizeLow=0x205b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1AR.LEX", cAlternateFileName="")) returned 1
	[0134.011] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7780a100, ftCreationTime.dwHighDateTime=0x1c4d75f, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7780a100, ftLastWriteTime.dwHighDateTime=0x1c4d75f, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1
	[0134.011] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c6bc00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c6bc00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x2b990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1
	[0134.011] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c6e400, ftCreationTime.dwHighDateTime=0x1ca6d6a, ftLastAccessTime.dwLowDateTime=0x7588f30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38c6e400, ftLastWriteTime.dwHighDateTime=0x1ca6d6a, nFileSizeHigh=0x0, nFileSizeLow=0x40f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1STAR.DLL", cAlternateFileName="")) returned 1
	[0134.012] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4958f00, ftCreationTime.dwHighDateTime=0x1ca9121, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4958f00, ftLastWriteTime.dwHighDateTime=0x1ca9121, nFileSizeHigh=0x0, nFileSizeLow=0x11390, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1
	[0134.012] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 1
	[0134.012] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44a7300, ftCreationTime.dwHighDateTime=0x1c3af23, ftLastAccessTime.dwLowDateTime=0x5ba5ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44a7300, ftLastWriteTime.dwHighDateTime=0x1c3af23, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTSP61MS.DLL", cAlternateFileName="")) returned 0
	[0134.012] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0134.012] GetProcessHeap () returned 0x800000
	[0134.012] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0134.012] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0134.012] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0134.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0134.012] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.012] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0134.012] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x357bfa0
	[0134.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.012] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.012] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0134.012] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.012] GetProcessHeap () returned 0x800000
	[0134.012] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.012] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0134.012] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0134.012] GetProcessHeap () returned 0x800000
	[0134.012] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0134.013] FindNextFileW (in: hFindFile=0x8ce908, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0134.013] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0134.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0134.013] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.013] FindNextFileW (in: hFindFile=0x34d1368, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA7", cAlternateFileName="")) returned 1
	[0134.013] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x357bfa0
	[0134.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.013] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe22f4b00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe22f4b00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.013] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0134.013] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x358cfb0
	[0134.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0134.013] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25685a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.013] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1574f00, ftCreationTime.dwHighDateTime=0x1be23e3, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1574f00, ftLastWriteTime.dwHighDateTime=0x1be23e3, nFileSizeHigh=0x0, nFileSizeLow=0x51a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1
	[0134.013] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edd8500, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6edd8500, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1ac96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1
	[0134.014] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xc25685a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x25d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1
	[0134.014] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2ba100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7d2ba100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1
	[0134.014] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8583dc00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8583dc00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1
	[0134.014] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903e7100, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x903e7100, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0xe6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1
	[0134.014] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9896ac00, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9896ac00, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1
	[0134.014] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1
	[0134.014] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eee700, ftCreationTime.dwHighDateTime=0x1c685f9, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa0eee700, ftLastWriteTime.dwHighDateTime=0x1c685f9, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0
	[0134.014] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0134.014] GetProcessHeap () returned 0x800000
	[0134.014] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x358cfb0 | out: hHeap=0x800000) returned 1
	[0134.014] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d3ae00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xe2340dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56d3ae00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x381748, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1
	[0134.014] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.014] GetProcessHeap () returned 0x800000
	[0134.014] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.014] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0134.014] GetProcessHeap () returned 0x800000
	[0134.014] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0134.014] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cf950
	[0134.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.182] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.193] GetProcessHeap () returned 0x800000
	[0134.195] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0134.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.198] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.198] GetProcessHeap () returned 0x800000
	[0134.198] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0134.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8541dd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8541dd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.199] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.200] GetProcessHeap () returned 0x800000
	[0134.200] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0134.200] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.200] GetProcessHeap () returned 0x800000
	[0134.200] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0134.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6d4dc20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d4dc20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x617be070, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.200] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.200] GetProcessHeap () returned 0x800000
	[0134.200] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0134.201] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.201] GetProcessHeap () returned 0x800000
	[0134.201] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0134.201] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.201] GetProcessHeap () returned 0x800000
	[0134.201] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0134.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeeeb5310, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.201] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.201] GetProcessHeap () returned 0x800000
	[0134.201] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0134.201] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.201] GetProcessHeap () returned 0x800000
	[0134.201] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0134.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb7d6d00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdb7d6d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1368
	[0134.202] FindClose (in: hFindFile=0x34d1368 | out: hFindFile=0x34d1368) returned 1
	[0134.202] GetProcessHeap () returned 0x800000
	[0134.202] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0134.202] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.202] GetProcessHeap () returned 0x800000
	[0134.202] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0134.203] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.203] GetProcessHeap () returned 0x800000
	[0134.203] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0134.204] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.204] GetProcessHeap () returned 0x800000
	[0134.204] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cf950 | out: hHeap=0x800000) returned 1
	[0134.204] FindClose (in: hFindFile=0x8ce908 | out: hFindFile=0x8ce908) returned 1
	[0134.204] GetProcessHeap () returned 0x800000
	[0134.204] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0134.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.205] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.205] GetProcessHeap () returned 0x800000
	[0134.205] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0134.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0134.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0134.309] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0134.309] GetProcessHeap () returned 0x800000
	[0134.309] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x357bfa0 | out: hHeap=0x800000) returned 1
	[0134.309] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0134.310] GetProcessHeap () returned 0x800000
	[0134.310] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0134.310] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.310] GetProcessHeap () returned 0x800000
	[0134.310] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0134.311] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.311] GetProcessHeap () returned 0x800000
	[0134.311] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0134.311] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.311] GetProcessHeap () returned 0x800000
	[0134.311] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0134.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0134.311] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0134.312] GetProcessHeap () returned 0x800000
	[0134.312] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0134.312] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.312] GetProcessHeap () returned 0x800000
	[0134.312] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0134.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.312] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.312] GetProcessHeap () returned 0x800000
	[0134.312] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0134.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.569] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.570] GetProcessHeap () returned 0x800000
	[0134.570] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0134.570] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.570] GetProcessHeap () returned 0x800000
	[0134.570] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0134.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.572] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.572] GetProcessHeap () returned 0x800000
	[0134.572] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0134.572] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.572] GetProcessHeap () returned 0x800000
	[0134.572] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0134.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0134.572] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0134.572] GetProcessHeap () returned 0x800000
	[0134.573] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ac868 | out: hHeap=0x800000) returned 1
	[0134.573] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.573] GetProcessHeap () returned 0x800000
	[0134.573] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0134.573] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0134.573] GetProcessHeap () returned 0x800000
	[0134.573] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0134.573] FindClose (in: hFindFile=0x8ab820 | out: hFindFile=0x8ab820) returned 1
	[0134.574] GetProcessHeap () returned 0x800000
	[0134.574] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0134.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9ef07a9b, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9ef07a9b, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0134.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.574] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0134.574] GetProcessHeap () returned 0x800000
	[0134.575] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0134.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0134.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0852f1, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaabb4389, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0134.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f9e8c42, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7d4443, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fbd8be5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0134.916] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0134.917] GetProcessHeap () returned 0x800000
	[0134.917] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0134.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa12338ef, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa15a10e8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0134.918] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0134.918] GetProcessHeap () returned 0x800000
	[0134.918] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0134.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f43efc8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f465237, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0135.016] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0135.016] GetProcessHeap () returned 0x800000
	[0135.016] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0135.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a3fc59, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa63097e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a65ec8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0135.190] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0135.191] GetProcessHeap () returned 0x800000
	[0135.191] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0135.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0fd11ff, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa787f65, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa108fe2a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0135.191] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0135.191] GetProcessHeap () returned 0x800000
	[0135.191] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0135.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa19a729d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7fa6b2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1a3fc59, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0135.308] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0135.311] GetProcessHeap () returned 0x800000
	[0135.311] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0135.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbd8be5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9fdc8b88, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0135.311] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0135.311] GetProcessHeap () returned 0x800000
	[0135.311] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0135.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f465237, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa7ae1d4, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f48b4a6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0135.402] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0135.402] GetProcessHeap () returned 0x800000
	[0135.402] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0135.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4fdbf3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab8e11a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f9e8c42, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0135.402] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0135.403] GetProcessHeap () returned 0x800000
	[0135.403] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0135.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa15a10e8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa198102e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0135.495] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0135.496] GetProcessHeap () returned 0x800000
	[0135.496] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0135.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa11287e6, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa73ba87, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa119af33, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0135.631] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0135.631] GetProcessHeap () returned 0x800000
	[0135.631] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0135.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0135.796] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f38039d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa89306e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f3f2aea, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.796] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f955d49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f955d49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0135.796] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9c8160, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9c8160, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1
	[0135.796] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eee5249, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0135.796] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a2003, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9a2003, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1
	[0135.796] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa86831, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa86831, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0135.797] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0135.797] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa606d4, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa606d4, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0135.797] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1441a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa1441a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0135.797] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9ee2bd, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f9ee2bd, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0135.797] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa3a577, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6fa3a577, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef0b3a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0135.797] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f92fbec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f92fbec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6114, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflect.png", cAlternateFileName="")) returned 1
	[0135.797] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 1
	[0135.797] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f97bea6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f97bea6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ef31505, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2fcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vistabg.png", cAlternateFileName="")) returned 0
	[0135.797] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0135.798] GetProcessHeap () returned 0x800000
	[0135.798] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0135.798] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_babypink_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0135.798] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea9b652, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea9b652, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_glass_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0135.798] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eac17af, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eac17af, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ee98f8d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_highlights_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0135.798] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eae790c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eae790c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_performance_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0135.798] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb0da69, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb0da69, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_photo_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0135.798] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea754f5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ea754f5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_plain_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0135.798] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb33bc6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb33bc6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_postage_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0135.798] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_scrapbook_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0135.798] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb59d23, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb59d23, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_specialocc_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0135.798] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_travel_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0135.798] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb7fe80, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6eb7fe80, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4eebf0eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rectangle_widescreen_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0135.798] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResizingPanels", cAlternateFileName="RESIZI~1")) returned 1
	[0135.799] GetProcessHeap () returned 0x800000
	[0135.799] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0135.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa119af33, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa12338ef, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7091adcb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7091adcb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandwidth.png", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a25756, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a25756, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x191f, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbars80.png", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708ceb11, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x708ceb11, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70810440, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70810440, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7083659d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7083659d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c4186, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707c4186, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079e029, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7079e029, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efa391f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707ea2e3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x707ea2e3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70940f28, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70940f28, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4efc9a7d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask.wmv", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 1
	[0135.799] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709b333f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x709b333f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f0d440f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x84702, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panel_Mask_PAL.wmv", cAlternateFileName="")) returned 0
	[0135.800] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0135.800] GetProcessHeap () returned 0x800000
	[0135.800] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0135.800] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e91e8b0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e91e8b0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scene_button_style_default_Thumbnail.bmp", cAlternateFileName="")) returned 1
	[0135.800] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8d25f6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8d25f6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd86, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_buttongraphic.png", cAlternateFileName="")) returned 1
	[0135.800] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8f8753, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8f8753, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_selectionsubpicture.png", cAlternateFileName="")) returned 1
	[0135.800] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8ac499, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6e8ac499, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="shadowonlyframe_videoinset.png", cAlternateFileName="")) returned 1
	[0135.800] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shatter", cAlternateFileName="")) returned 1
	[0135.800] GetProcessHeap () returned 0x800000
	[0135.800] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0135.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0135.904] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f4d7984, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f4fdbf3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.904] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f204eff, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0135.904] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff493d1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff493d1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f29d477, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0135.904] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4f92909f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0135.904] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffe1945, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffe1945, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0135.904] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70007aa2, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70007aa2, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fa59b8f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0135.904] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff9568b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff9568b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0135.905] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff6f52e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff6f52e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0135.905] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ffbb7e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ffbb7e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0135.905] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 1
	[0135.905] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff23274, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ff23274, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4faf2107, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x547b, dwReserved0=0x0, dwReserved1=0x0, cFileName="shatter.png", cAlternateFileName="")) returned 0
	[0135.905] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0135.905] GetProcessHeap () returned 0x800000
	[0135.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0135.905] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialOccasion", cAlternateFileName="SPECIA~1")) returned 1
	[0135.906] GetProcessHeap () returned 0x800000
	[0135.906] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0135.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0136.079] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1a65ec8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa92ba2a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.079] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f446eef, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f446eef, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0136.079] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4df463, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4df463, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xca59, dwReserved0=0x0, dwReserved1=0x0, cFileName="mainscroll.png", cAlternateFileName="")) returned 1
	[0136.079] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e9dee, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5e9dee, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc22bf7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0136.079] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fc95011, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0136.079] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60ff4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f60ff4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6360a8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6360a8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f65c205, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f65c205, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f52b71d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f52b71d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x17719, dwReserved0=0x0, dwReserved1=0x0, cFileName="scenesscroll.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5055c0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5055c0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialmainsubpicture.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd536e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5c3c91, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5c3c91, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f59db34, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f59db34, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f55187a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f55187a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4fd79845, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5779d7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f5779d7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpecialNavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fac35, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f3fac35, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialoccasion.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4b9306, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f4b9306, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff1c74f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1917, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitemask1047.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 1
	[0136.080] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f46d04c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f46d04c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x296fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="whitevignette1047.png", cAlternateFileName="")) returned 0
	[0136.080] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0136.081] GetProcessHeap () returned 0x800000
	[0136.081] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0136.081] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1
	[0136.081] GetProcessHeap () returned 0x800000
	[0136.081] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0136.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0136.244] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fdc8b88, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa0e2d73a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.244] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ead378, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ead378, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleSubpicture.png", cAlternateFileName="")) returned 1
	[0136.244] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ed34d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ed34d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x120d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoldRing.png", cAlternateFileName="")) returned 1
	[0136.244] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71338a7f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71338a7f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="highlight.png", cAlternateFileName="")) returned 1
	[0136.244] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationButtonSubpicture.png", cAlternateFileName="")) returned 1
	[0136.244] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ef9632, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71ef9632, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NextMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0136.244] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0136.244] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f1f78f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f1f78f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff428ad, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xeeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousMenuButtonIcon.png", cAlternateFileName="")) returned 1
	[0136.244] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f458ec, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f458ec, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha1.png", cAlternateFileName="")) returned 1
	[0136.244] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f6ba49, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71f6ba49, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonInset_Alpha2.png", cAlternateFileName="")) returned 1
	[0136.244] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e8721b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71e8721b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SceneButtonSubpicture.png", cAlternateFileName="")) returned 1
	[0136.244] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71893b93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71893b93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x500e57b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x539540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground.wmv", cAlternateFileName="")) returned 1
	[0136.245] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aa8ea9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71aa8ea9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x502ae81f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x57bbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0136.245] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c25c4b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71c25c4b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50320c39, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1beae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground.wmv", cAlternateFileName="")) returned 1
	[0136.245] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cbe1bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71cbe1bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50393053, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0136.245] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d7c890, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71d7c890, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x504c3b43, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x184166, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground.wmv", cAlternateFileName="")) returned 1
	[0136.245] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71deeca7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71deeca7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x50add351, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x189f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsMainToScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0136.245] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713aae96, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x713aae96, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x514fb049, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6680f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground.wmv", cAlternateFileName="")) returned 1
	[0136.245] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71501adb, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71501adb, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5206f98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x673c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsNotesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0136.245] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716a49da, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x716a49da, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x522f70cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca474, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground.wmv", cAlternateFileName="")) returned 1
	[0136.245] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71789208, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71789208, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x524e6293, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2e59f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SportsScenesBackground_PAL.wmv", cAlternateFileName="")) returned 1
	[0136.245] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 1
	[0136.245] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71384d39, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x71384d39, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x4ff68a0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x23d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sports_disc_mask.png", cAlternateFileName="")) returned 0
	[0136.245] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0136.246] GetProcessHeap () returned 0x800000
	[0136.246] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0136.246] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stacking", cAlternateFileName="")) returned 1
	[0136.246] GetProcessHeap () returned 0x800000
	[0136.246] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0136.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0136.571] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa198102e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa19a729d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.571] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x540920df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0136.571] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71a8d6, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f71a8d6, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5396df3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576_91n92.png", cAlternateFileName="")) returned 1
	[0136.571] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x544241af, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0136.571] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f740a33, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f740a33, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="720x480icongraphic.png", cAlternateFileName="")) returned 1
	[0136.571] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ce61c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6ce61c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5444a30d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="720_480shadow.png", cAlternateFileName="")) returned 1
	[0136.571] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7ff104, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7ff104, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54613375, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0136.571] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54e68005, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0136.571] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7d8fa7, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7d8fa7, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x54f98af5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0136.571] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78cced, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f78cced, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0136.571] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f766b90, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f766b90, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5529264d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0136.571] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b2e4a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f7b2e4a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0136.572] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 1
	[0136.572] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a84bf, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f6a84bf, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x60d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="photograph.png", cAlternateFileName="")) returned 0
	[0136.572] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0136.572] GetProcessHeap () returned 0x800000
	[0136.572] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0136.572] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Travel", cAlternateFileName="")) returned 1
	[0136.572] GetProcessHeap () returned 0x800000
	[0136.572] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0136.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0136.752] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa108fe2a, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8b92dd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa11287e6, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.752] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x701d, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-background.png", cAlternateFileName="")) returned 1
	[0136.752] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726438ff, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726438ff, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x552b87ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x609, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-highlight.png", cAlternateFileName="")) returned 1
	[0136.752] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72669a5c, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72669a5c, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553c313d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc57, dwReserved0=0x0, dwReserved1=0x0, cFileName="16_9-frame-image-inset.png", cAlternateFileName="")) returned 1
	[0136.752] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x213d, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-back-static.png", cAlternateFileName="")) returned 1
	[0136.752] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-next-static.png", cAlternateFileName="")) returned 1
	[0136.752] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7268fbb9, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7268fbb9, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x20d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="btn-previous-static.png", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-bullet.png", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726b5d16, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726b5d16, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x553e929b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="button-highlight.png", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x726dbe73, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x726dbe73, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x47c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-background.png", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5540f3f9, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11276, dwReserved0=0x0, dwReserved1=0x0, cFileName="header-background.png", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72701fd0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72701fd0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3126b, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport.png", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7272812d, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7272812d, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x10e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport.wmv", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x58bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="passportcover.png", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask.wmv", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7279a544, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7279a544, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7254, dwReserved0=0x0, dwReserved1=0x0, cFileName="PassportMask_PAL.wmv", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727c06a1, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727c06a1, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_left.png", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727e67fe, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x727e67fe, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="passport_mask_right.png", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7274e28a, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7274e28a, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55435557, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1aaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Passport_PAL.wmv", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72538f74, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72538f74, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18337, dwReserved0=0x0, dwReserved1=0x0, cFileName="play-background.png", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72512e17, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x72512e17, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection_subpicture.png", cAlternateFileName="")) returned 1
	[0136.753] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x5545b6b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x658e, dwReserved0=0x0, dwReserved1=0x0, cFileName="travel.png", cAlternateFileName="")) returned 1
	[0136.754] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7258522e, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x7258522e, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x321a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain.wmv", cAlternateFileName="")) returned 1
	[0136.754] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725d14e8, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725d14e8, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask.wmv", cAlternateFileName="")) returned 1
	[0136.754] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725f7645, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725f7645, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef24, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMainMask_PAL.wmv", cAlternateFileName="")) returned 1
	[0136.754] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 1
	[0136.754] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ab38b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x725ab38b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x55481813, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x37f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="TravelIntroToMain_PAL.wmv", cAlternateFileName="")) returned 0
	[0136.754] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0136.754] GetProcessHeap () returned 0x800000
	[0136.754] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0136.754] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VideoWall", cAlternateFileName="VIDEOW~1")) returned 1
	[0136.754] GetProcessHeap () returned 0x800000
	[0136.754] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0136.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0136.754] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa820921, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1ad8615, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.754] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2a3ff0, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f2a3ff0, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="203x8subpicture.png", cAlternateFileName="")) returned 1
	[0136.754] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 1
	[0136.754] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f27de93, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f27de93, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="videowall.png", cAlternateFileName="")) returned 0
	[0136.755] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0136.755] GetProcessHeap () returned 0x800000
	[0136.755] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0136.755] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vignette", cAlternateFileName="")) returned 1
	[0136.755] GetProcessHeap () returned 0x800000
	[0136.755] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x356bf98
	[0136.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0136.887] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1ad8615, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa761cf6, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.888] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x11da, dwReserved0=0x0, dwReserved1=0x0, cFileName="1047x576black.png", cAlternateFileName="")) returned 1
	[0136.888] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="15x15dot.png", cAlternateFileName="")) returned 1
	[0136.888] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0136.888] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e3932, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8e3932, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationLeft_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0136.888] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554a7971, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0136.888] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f909a8f, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f909a8f, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationRight_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0136.888] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_ButtonGraphic.png", cAlternateFileName="")) returned 1
	[0136.888] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8bd7d5, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f8bd7d5, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc09, dwReserved0=0x0, dwReserved1=0x0, cFileName="NavigationUp_SelectionSubpicture.png", cAlternateFileName="")) returned 1
	[0136.888] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84b3be, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f84b3be, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6c2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="softedges.png", cAlternateFileName="")) returned 1
	[0136.888] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f897678, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f897678, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vignettemask25.png", cAlternateFileName="")) returned 1
	[0136.888] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 1
	[0136.888] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f87151b, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6f87151b, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiteband.png", cAlternateFileName="")) returned 0
	[0136.888] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0136.889] GetProcessHeap () returned 0x800000
	[0136.889] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x356bf98 | out: hHeap=0x800000) returned 1
	[0136.889] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 1
	[0136.889] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee53867, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x6ee53867, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x554cdacf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5caa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteDot.png", cAlternateFileName="")) returned 0
	[0136.889] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0136.889] GetProcessHeap () returned 0x800000
	[0136.889] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0136.889] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9060745b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x9060745b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4877fc17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x379f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters.xml", cAlternateFileName="")) returned 1
	[0136.889] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 1
	[0136.889] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e437ad, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x93e437ad, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x689cd275, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8edf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parity.fx", cAlternateFileName="")) returned 0
	[0136.889] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0136.890] GetProcessHeap () returned 0x800000
	[0136.890] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0136.890] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1
	[0136.890] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonicsptransform.ax", cAlternateFileName="")) returned 1
	[0136.890] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 1
	[0136.890] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bb787f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bb787f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMM2CLIP.dll", cAlternateFileName="")) returned 0
	[0136.890] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0136.890] GetProcessHeap () returned 0x800000
	[0136.890] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0136.891] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0136.891] GetProcessHeap () returned 0x800000
	[0136.891] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8be900
	[0136.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0137.269] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.269] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0137.269] GetProcessHeap () returned 0x800000
	[0137.269] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0137.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0137.270] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.270] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1
	[0137.270] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1
	[0137.270] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1
	[0137.270] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1
	[0137.270] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1
	[0137.270] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1
	[0137.270] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1
	[0137.270] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1
	[0137.271] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1
	[0137.271] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0
	[0137.271] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0137.271] GetProcessHeap () returned 0x800000
	[0137.271] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0137.271] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1
	[0137.271] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1
	[0137.272] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1
	[0137.272] GetProcessHeap () returned 0x800000
	[0137.272] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0137.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0137.273] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.273] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1
	[0137.273] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0
	[0137.273] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0137.273] GetProcessHeap () returned 0x800000
	[0137.273] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0137.273] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0137.273] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0
	[0137.273] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0137.273] GetProcessHeap () returned 0x800000
	[0137.273] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0137.273] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1
	[0137.274] GetProcessHeap () returned 0x800000
	[0137.274] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0137.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0137.423] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.423] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1
	[0137.423] GetProcessHeap () returned 0x800000
	[0137.423] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0137.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0137.423] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.423] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1
	[0137.423] GetProcessHeap () returned 0x800000
	[0137.423] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0137.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0137.423] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.424] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0137.424] GetProcessHeap () returned 0x800000
	[0137.424] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0137.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0137.425] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.425] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1
	[0137.425] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1
	[0137.425] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1
	[0137.425] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1
	[0137.425] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1
	[0137.425] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1
	[0137.425] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1
	[0137.425] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1
	[0137.425] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0
	[0137.425] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0137.426] GetProcessHeap () returned 0x800000
	[0137.426] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0137.426] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1
	[0137.426] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1
	[0137.426] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1
	[0137.426] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1
	[0137.426] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0137.426] GetProcessHeap () returned 0x800000
	[0137.426] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0137.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0137.426] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.426] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0137.426] GetProcessHeap () returned 0x800000
	[0137.426] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0137.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0137.427] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.427] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1
	[0137.427] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1
	[0137.427] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0
	[0137.427] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0137.427] GetProcessHeap () returned 0x800000
	[0137.427] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0137.427] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0137.427] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0137.427] GetProcessHeap () returned 0x800000
	[0137.427] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0137.427] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 0
	[0137.427] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0137.427] GetProcessHeap () returned 0x800000
	[0137.427] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0137.427] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0
	[0137.427] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0137.427] GetProcessHeap () returned 0x800000
	[0137.427] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0137.428] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6003f570, ftCreationTime.dwHighDateTime=0x1d54e75, ftLastAccessTime.dwLowDateTime=0x48faa7b0, ftLastAccessTime.dwHighDateTime=0x1d52b67, ftLastWriteTime.dwLowDateTime=0x48faa7b0, ftLastWriteTime.dwHighDateTime=0x1d52b67, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="lastingquit.exe", cAlternateFileName="LASTIN~1.EXE")) returned 1
	[0137.428] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6003f570, ftCreationTime.dwHighDateTime=0x1d54e75, ftLastAccessTime.dwLowDateTime=0x48faa7b0, ftLastAccessTime.dwHighDateTime=0x1d52b67, ftLastWriteTime.dwLowDateTime=0x48faa7b0, ftLastWriteTime.dwHighDateTime=0x1d52b67, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="lastingquit.exe", cAlternateFileName="LASTIN~1.EXE")) returned 0
	[0137.428] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0137.428] GetProcessHeap () returned 0x800000
	[0137.428] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0137.428] FindNextFileW (in: hFindFile=0x8bd8b8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x512f1610, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0137.428] GetProcessHeap () returned 0x800000
	[0137.429] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0137.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x512f1610, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0137.429] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x512f1610, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.429] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0137.429] GetProcessHeap () returned 0x800000
	[0137.429] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0137.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0137.429] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.429] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1
	[0137.429] GetProcessHeap () returned 0x800000
	[0137.429] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0137.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54952c00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54952c00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83130700, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83130700, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78587200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78587200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64147500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64147500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47589c00, ftCreationTime.dwHighDateTime=0x1bf325d, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47589c00, ftLastWriteTime.dwHighDateTime=0x1bf325d, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fc100, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4fc100, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e5400, ftCreationTime.dwHighDateTime=0x1bd4c10, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x262e5400, ftLastWriteTime.dwHighDateTime=0x1bd4c10, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6b4200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b6b4200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29618e00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29618e00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ff3400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26ff3400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef57700, ftCreationTime.dwHighDateTime=0x1bd4f8b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ef57700, ftLastWriteTime.dwHighDateTime=0x1bd4f8b, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf316a100, ftCreationTime.dwHighDateTime=0x1bd4bcc, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf316a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcc, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bee00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33bee00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa86700, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffa86700, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1
	[0137.430] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b28600, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b28600, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3bca500, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3bca500, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc6c400, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedc6c400, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9688900, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9688900, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2417b00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2417b00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7cc700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad7cc700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a69f700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a69f700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a54300, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a54300, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e47e00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65e47e00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d0800, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4d0800, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b98100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89b98100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81614600, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81614600, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9c9200, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9c9200, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a6b100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76a6b100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e1fd00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71e1fd00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a04e500, ftCreationTime.dwHighDateTime=0x1bd4e61, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a04e500, ftLastWriteTime.dwHighDateTime=0x1bd4e61, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4d3e00, ftCreationTime.dwHighDateTime=0x1bd4e56, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde4d3e00, ftLastWriteTime.dwHighDateTime=0x1bd4e56, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc18a400, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc18a400, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1
	[0137.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3cb900, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e3cb900, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1
	[0137.541] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5f2300, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a5f2300, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1c4f00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab1c4f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e812b00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e812b00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9eb2200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9eb2200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efb2900, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2efb2900, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9f500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8b9f500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14efd00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc14efd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d83ea00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d83ea00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e92000, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31e92000, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1fda300, ftCreationTime.dwHighDateTime=0x1bd4b21, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1fda300, ftLastWriteTime.dwHighDateTime=0x1bd4b21, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dd6400, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86dd6400, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54406500, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54406500, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530f3800, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x530f3800, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbf4f00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cbf4f00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8335e700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8335e700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1
	[0137.542] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa26000, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fa26000, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bb3800, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x68bb3800, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc436f700, ftCreationTime.dwHighDateTime=0x1bd4b08, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc436f700, ftLastWriteTime.dwHighDateTime=0x1bd4b08, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37a5800, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe37a5800, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec9bd00, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcec9bd00, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b6bc300, ftCreationTime.dwHighDateTime=0x1bd4c00, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b6bc300, ftLastWriteTime.dwHighDateTime=0x1bd4c00, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c87b100, ftCreationTime.dwHighDateTime=0x1bd4c18, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c87b100, ftLastWriteTime.dwHighDateTime=0x1bd4c18, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1
	[0137.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1
	[0137.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1
	[0137.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1
	[0137.703] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1
	[0137.703] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1
	[0137.703] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1
	[0137.703] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1
	[0137.703] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc41400, ftCreationTime.dwHighDateTime=0x1bd4c15, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfc41400, ftLastWriteTime.dwHighDateTime=0x1bd4c15, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2332bb00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2332bb00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d1cf00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d1cf00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaac100, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaaac100, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbb900, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcafbb900, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1
	[0137.704] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c365a00, ftCreationTime.dwHighDateTime=0x1bd4f6a, ftLastAccessTime.dwLowDateTime=0x5f47ba90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c365a00, ftLastWriteTime.dwHighDateTime=0x1bd4f6a, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93701b00, ftCreationTime.dwHighDateTime=0x1bd4f69, ftLastAccessTime.dwLowDateTime=0x517da370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93701b00, ftLastWriteTime.dwHighDateTime=0x1bd4f69, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6557800, ftCreationTime.dwHighDateTime=0x1bd4d57, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6557800, ftLastWriteTime.dwHighDateTime=0x1bd4d57, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f48c00, ftCreationTime.dwHighDateTime=0x1bd4d56, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe4f48c00, ftLastWriteTime.dwHighDateTime=0x1bd4d56, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c6cc00, ftCreationTime.dwHighDateTime=0x1bd4d5a, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4c6cc00, ftLastWriteTime.dwHighDateTime=0x1bd4d5a, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1
	[0137.705] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee332800, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xee332800, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1
	[0137.859] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01fb00, ftCreationTime.dwHighDateTime=0x1bd4d59, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed01fb00, ftLastWriteTime.dwHighDateTime=0x1bd4d59, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1
	[0137.859] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe58e2200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe58e2200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1fa9b00, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5190ae70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1fa9b00, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf688200, ftCreationTime.dwHighDateTime=0x1bd4d58, ftLastAccessTime.dwLowDateTime=0x5f586430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf688200, ftLastWriteTime.dwHighDateTime=0x1bd4d58, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b147c00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b147c00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851e9b00, ftCreationTime.dwHighDateTime=0x1bd4b34, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x851e9b00, ftLastWriteTime.dwHighDateTime=0x1bd4b34, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c98800, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1c98800, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a40fd00, ftCreationTime.dwHighDateTime=0x1bd4b27, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a40fd00, ftLastWriteTime.dwHighDateTime=0x1bd4b27, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888a3600, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x888a3600, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0f5c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d0f5c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fc8c00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39fc8c00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c58200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83c58200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82945500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82945500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a72500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a72500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81632800, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81632800, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81891500, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81891500, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1
	[0137.860] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9438d00, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9438d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5124300, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x519c9550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe5124300, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b9eb00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5f6dd090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b9eb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b67a200, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b67a200, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9e7400, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9e7400, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae0bf00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ae0bf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b9b100, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63b9b100, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaca6c00, ftCreationTime.dwHighDateTime=0x1bd4b12, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcaca6c00, ftLastWriteTime.dwHighDateTime=0x1bd4b12, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2253700, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2253700, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbde25400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbde25400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d095f00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d095f00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd2a9800, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd2a9800, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e80900, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e80900, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac309900, ftCreationTime.dwHighDateTime=0x1bd4b43, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac309900, ftLastWriteTime.dwHighDateTime=0x1bd4b43, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf533800, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdf533800, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1
	[0137.861] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf0de00, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcf0de00, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1
	[0137.862] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65d6900, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd65d6900, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1
	[0137.862] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52c3c00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd52c3c00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1
	[0138.139] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3fb0f00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3fb0f00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1
	[0138.139] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20fce500, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20fce500, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1
	[0138.139] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeba4c700, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeba4c700, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1
	[0138.139] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74832900, ftCreationTime.dwHighDateTime=0x1bd4bf7, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74832900, ftLastWriteTime.dwHighDateTime=0x1bd4bf7, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1
	[0138.139] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f7031f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1
	[0138.139] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d46d00, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x519ef6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7d46d00, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1
	[0138.139] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1
	[0138.139] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1
	[0138.139] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77641800, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77641800, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfadcd00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfadcd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395c300, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6395c300, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60023c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60023c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c6eb500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c6eb500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5295200, ftCreationTime.dwHighDateTime=0x1bd4b23, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5295200, ftLastWriteTime.dwHighDateTime=0x1bd4b23, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99a2a00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99a2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca47100, ftCreationTime.dwHighDateTime=0x1bd4af0, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ca47100, ftLastWriteTime.dwHighDateTime=0x1bd4af0, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f738600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7f738600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c60b600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c60b600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9efd600, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9efd600, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54fadc00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x600889f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54fadc00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c55700, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x62c55700, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x276b5e00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x276b5e00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263a3100, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x263a3100, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1
	[0138.140] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25090400, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25090400, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1
	[0138.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d7d700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23d7d700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1
	[0138.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7ffa00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbb7ffa00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1
	[0138.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a6aa00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22a6aa00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1
	[0138.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21757d00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21757d00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1
	[0138.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1
	[0138.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba86700, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ba86700, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1
	[0138.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d186600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d186600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1
	[0138.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31ccd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc31ccd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1
	[0138.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63bebd00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x63bebd00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1
	[0138.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe440e600, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe440e600, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1
	[0138.351] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910b6b00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x910b6b00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1
	[0138.351] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd16ae900, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd16ae900, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1
	[0138.351] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c32800, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x51aadd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88c32800, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1
	[0138.351] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xceceee00, ftCreationTime.dwHighDateTime=0x1c9b81d, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xceceee00, ftLastWriteTime.dwHighDateTime=0x1c9b81d, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x60609cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6849b000, ftCreationTime.dwHighDateTime=0x1bd0318, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6849b000, ftLastWriteTime.dwHighDateTime=0x1bd0318, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce30000, ftCreationTime.dwHighDateTime=0x1bd78be, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ce30000, ftLastWriteTime.dwHighDateTime=0x1bd78be, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6a43700, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6a43700, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf650000, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf650000, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe550c00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe550c00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1
	[0138.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8572f00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8572f00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8c4300, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d8c4300, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ecd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba4ecd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91da000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb91da000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac04fe00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac04fe00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bcb1e00, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6bcb1e00, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb92d600, ftCreationTime.dwHighDateTime=0x1bd4b42, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb92d600, ftLastWriteTime.dwHighDateTime=0x1bd4b42, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1
	[0138.353] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1
	[0138.354] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60714670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9936cb00, ftCreationTime.dwHighDateTime=0x1bd4c0e, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9936cb00, ftLastWriteTime.dwHighDateTime=0x1bd4c0e, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fe9900, ftCreationTime.dwHighDateTime=0x1c7a766, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4fe9900, ftLastWriteTime.dwHighDateTime=0x1c7a766, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1
	[0138.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81594a00, ftCreationTime.dwHighDateTime=0x1bd4c02, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81594a00, ftLastWriteTime.dwHighDateTime=0x1bd4c02, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1
	[0138.356] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55829800, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55829800, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1
	[0138.356] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf93000, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf93000, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1
	[0138.356] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf28f0200, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf28f0200, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1
	[0138.356] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa241400, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa241400, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1
	[0138.356] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef951100, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef951100, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1
	[0138.502] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8660ce00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8660ce00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1
	[0138.502] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1
	[0138.502] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1
	[0138.502] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x51d817b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1
	[0138.502] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x51e3fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1
	[0138.502] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd787d00, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd787d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1
	[0138.502] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a81c00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x51f4a830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2a81c00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1
	[0138.502] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc465ee00, ftCreationTime.dwHighDateTime=0x1bd4bff, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc465ee00, ftLastWriteTime.dwHighDateTime=0x1bd4bff, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95cb3000, ftCreationTime.dwHighDateTime=0x1bd4c5e, ftLastAccessTime.dwLowDateTime=0x51f70990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95cb3000, ftLastWriteTime.dwHighDateTime=0x1bd4c5e, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d81900, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x27d81900, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57852200, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57852200, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7a68a00, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7a68a00, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1dc9900, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1dc9900, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ec7300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7ec7300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24bc3900, ftCreationTime.dwHighDateTime=0x1bd4af5, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24bc3900, ftLastWriteTime.dwHighDateTime=0x1bd4af5, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1131c200, ftCreationTime.dwHighDateTime=0x1bd4b37, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1131c200, ftLastWriteTime.dwHighDateTime=0x1bd4b37, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51904f00, ftCreationTime.dwHighDateTime=0x1bd4bce, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51904f00, ftLastWriteTime.dwHighDateTime=0x1bd4bce, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadef6200, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadef6200, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5bdb00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa5bdb00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bb4600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6bb4600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1
	[0138.503] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb58a1900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb58a1900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1
	[0138.504] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2c1c00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a2c1c00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1
	[0138.504] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb458ec00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb458ec00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1
	[0138.504] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1f69200, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1f69200, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1
	[0138.504] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b40e00, ftCreationTime.dwHighDateTime=0x1bd4aee, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54b40e00, ftLastWriteTime.dwHighDateTime=0x1bd4aee, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1
	[0138.504] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c56500, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0c56500, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1
	[0138.504] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2c8c800, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2c8c800, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1
	[0138.504] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf943800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf943800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1
	[0138.504] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6bcf00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb6bcf00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1
	[0138.504] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcdfcc00, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcdfcc00, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1
	[0138.504] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae630b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae630b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1
	[0138.504] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad31de00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad31de00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1
	[0138.733] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac00b100, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac00b100, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1
	[0138.733] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaacf8400, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaacf8400, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1
	[0138.733] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa86d2a00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa86d2a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1
	[0138.733] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa73bfd00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa73bfd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1
	[0138.733] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60ad000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x60c23530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60ad000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1
	[0138.733] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d9a300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4d9a300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3a87600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3a87600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2774900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa2774900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf50d3100, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf50d3100, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb4f600, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb4f600, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4dd7200, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4dd7200, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef0a100, ftCreationTime.dwHighDateTime=0x1bd4b36, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbef0a100, ftLastWriteTime.dwHighDateTime=0x1bd4b36, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2364900, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2364900, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4adb300, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb4adb300, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad86a500, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad86a500, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fdeb00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95fdeb00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9963a600, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9963a600, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf455c700, ftCreationTime.dwHighDateTime=0x1bd4be8, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf455c700, ftLastWriteTime.dwHighDateTime=0x1bd4be8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ff1000, ftCreationTime.dwHighDateTime=0x1bd4bfe, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78ff1000, ftLastWriteTime.dwHighDateTime=0x1bd4bfe, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d752900, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d752900, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1
	[0138.734] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97014c00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97014c00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e1a200, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49e1a200, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cfde00, ftCreationTime.dwHighDateTime=0x1bf3242, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80cfde00, ftLastWriteTime.dwHighDateTime=0x1bf3242, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4fe7000, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4fe7000, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb44f00, ftCreationTime.dwHighDateTime=0x1bd4c0c, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4eb44f00, ftLastWriteTime.dwHighDateTime=0x1bd4c0c, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02ca800, ftCreationTime.dwHighDateTime=0x1bd4bee, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf02ca800, ftLastWriteTime.dwHighDateTime=0x1bd4bee, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd62f9d00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd62f9d00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1
	[0138.735] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x60c49690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x617e41d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636ce600, ftCreationTime.dwHighDateTime=0x1bd4b2b, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x636ce600, ftLastWriteTime.dwHighDateTime=0x1bd4b2b, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af3b00, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0af3b00, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf81f1600, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf81f1600, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0c84900, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd0c84900, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf971c00, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf971c00, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd54400, ftCreationTime.dwHighDateTime=0x1bd4b22, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cd54400, ftLastWriteTime.dwHighDateTime=0x1bd4b22, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1461c00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1461c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa014ef00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa014ef00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10883400, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10883400, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1
	[0138.736] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe38a5000, ftCreationTime.dwHighDateTime=0x1bd4b19, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe38a5000, ftLastWriteTime.dwHighDateTime=0x1bd4b19, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9cafd00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9cafd00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6576c00, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6576c00, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f51200, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3f51200, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c3e500, ftCreationTime.dwHighDateTime=0x1bd4aed, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2c3e500, ftLastWriteTime.dwHighDateTime=0x1bd4aed, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c49d600, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c49d600, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48e63d00, ftCreationTime.dwHighDateTime=0x1bd4b2a, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48e63d00, ftLastWriteTime.dwHighDateTime=0x1bd4b2a, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eb62b00, ftCreationTime.dwHighDateTime=0x1bd4b47, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb62b00, ftLastWriteTime.dwHighDateTime=0x1bd4b47, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aad3100, ftCreationTime.dwHighDateTime=0x1bd4b1b, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1aad3100, ftLastWriteTime.dwHighDateTime=0x1bd4b1b, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98237200, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98237200, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b873a00, ftCreationTime.dwHighDateTime=0x1bd4b18, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b873a00, ftLastWriteTime.dwHighDateTime=0x1bd4b18, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5d7f800, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5d7f800, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9db29500, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9db29500, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39dc9c00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39dc9c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf47e00, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3cf47e00, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1
	[0138.737] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c816800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9c816800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1
	[0139.159] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x159db100, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x159db100, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1
	[0139.159] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b503b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b503b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1
	[0139.159] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7507bb00, ftCreationTime.dwHighDateTime=0x1bd4b36, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7507bb00, ftLastWriteTime.dwHighDateTime=0x1bd4b36, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1
	[0139.159] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1
	[0139.159] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436e0000, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x436e0000, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1
	[0139.159] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e49800, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39e49800, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1
	[0139.159] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a09b00, ftCreationTime.dwHighDateTime=0x1bd4af4, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a09b00, ftLastWriteTime.dwHighDateTime=0x1bd4af4, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90080a00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90080a00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83101700, ftCreationTime.dwHighDateTime=0x1bd4bdc, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83101700, ftLastWriteTime.dwHighDateTime=0x1bd4bdc, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b938600, ftCreationTime.dwHighDateTime=0x1bd4bf0, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b938600, ftLastWriteTime.dwHighDateTime=0x1bd4bf0, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71426a00, ftCreationTime.dwHighDateTime=0x1bd4c04, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71426a00, ftLastWriteTime.dwHighDateTime=0x1bd4c04, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b48ba00, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b48ba00, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e4b800, ftCreationTime.dwHighDateTime=0x1bd4bf1, ftLastAccessTime.dwLowDateTime=0x538951f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1e4b800, ftLastWriteTime.dwHighDateTime=0x1bd4bf1, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa59600, ftCreationTime.dwHighDateTime=0x1bd4bf5, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5fa59600, ftLastWriteTime.dwHighDateTime=0x1bd4bf5, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cd4300, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3cd4300, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949ef200, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x61ca6dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x949ef200, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1
	[0139.160] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58502100, ftCreationTime.dwHighDateTime=0x1bf0ae8, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58502100, ftLastWriteTime.dwHighDateTime=0x1bf0ae8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc19dc700, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc19dc700, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a1f0e00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a1f0e00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bef4100, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bef4100, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7410300, ftCreationTime.dwHighDateTime=0x1bf3bd8, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7410300, ftLastWriteTime.dwHighDateTime=0x1bf3bd8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c11ec00, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c11ec00, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f3db00, ftCreationTime.dwHighDateTime=0x1bd4b24, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20f3db00, ftLastWriteTime.dwHighDateTime=0x1bd4b24, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x146a8500, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x146a8500, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37eef900, ftCreationTime.dwHighDateTime=0x1bd4b35, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37eef900, ftLastWriteTime.dwHighDateTime=0x1bd4b35, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ede100, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98ede100, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6428b00, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6428b00, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17dd700, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc17dd700, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba56c900, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba56c900, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ee5f00, ftCreationTime.dwHighDateTime=0x1bd4bce, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0ee5f00, ftLastWriteTime.dwHighDateTime=0x1bd4bce, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1
	[0139.161] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9b2000, ftCreationTime.dwHighDateTime=0x1bd4bf2, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9b2000, ftLastWriteTime.dwHighDateTime=0x1bd4bf2, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5570a100, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5570a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a750c00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7a750c00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e4b00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20e4b00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9b0900, ftCreationTime.dwHighDateTime=0x1bd6360, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d9b0900, ftLastWriteTime.dwHighDateTime=0x1bd6360, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1
	[0139.162] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd6c900, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3cd6c900, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e07f600, ftCreationTime.dwHighDateTime=0x1bd6ced, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3e07f600, ftLastWriteTime.dwHighDateTime=0x1bd6ced, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65d84550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1
	[0139.163] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562d5870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1
	[0139.164] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65daa6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1
	[0139.165] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1
	[0139.166] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1
	[0139.166] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1
	[0139.706] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1
	[0139.719] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x183cef00, ftCreationTime.dwHighDateTime=0x1bdbf74, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x183cef00, ftLastWriteTime.dwHighDateTime=0x1bdbf74, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1
	[0139.719] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe4b400, ftCreationTime.dwHighDateTime=0x1bdbf74, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe4b400, ftLastWriteTime.dwHighDateTime=0x1bdbf74, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1
	[0139.719] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1
	[0139.719] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1
	[0139.719] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x562fb9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1
	[0139.719] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1
	[0139.719] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1
	[0139.719] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1
	[0139.719] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1
	[0139.719] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1
	[0139.719] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1
	[0139.720] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1
	[0139.720] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1
	[0139.720] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1
	[0139.720] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1
	[0139.720] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1
	[0139.720] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65dd0810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1
	[0139.720] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1
	[0139.720] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1
	[0139.720] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad71800, ftCreationTime.dwHighDateTime=0x1bd3246, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbad71800, ftLastWriteTime.dwHighDateTime=0x1bd3246, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1
	[0139.720] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd20ae00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbd20ae00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1
	[0139.720] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf830800, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf830800, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1
	[0139.720] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6aa1600, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6aa1600, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac703800, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xac703800, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaed29200, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaed29200, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2661900, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2661900, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5f9a000, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5f9a000, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1e56200, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1e56200, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc447bc00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65df6970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc447bc00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb98d2700, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb98d2700, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbabe5400, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbabe5400, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0dde00, ftCreationTime.dwHighDateTime=0x1bd732d, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa0dde00, ftLastWriteTime.dwHighDateTime=0x1bd732d, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1
	[0139.721] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56321b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e1cad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1
	[0139.722] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e42c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1
	[0139.723] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1
	[0139.916] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1
	[0139.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1
	[0139.947] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1
	[0139.947] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1
	[0139.947] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105386.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105388.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105390.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105396.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105398.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105410.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x24b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105412.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105414.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105490.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105496.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105502.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105504.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105506.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105520.WMF", cAlternateFileName="")) returned 1
	[0139.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x43b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105526.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e68d90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105530.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x542c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105588.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105600.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105638.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105710.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56347c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105846.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105912.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105974.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x274c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106020.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106124.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106146.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106208.WMF", cAlternateFileName="")) returned 1
	[0139.949] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106222.WMF", cAlternateFileName="")) returned 1
	[0140.035] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106572.WMF", cAlternateFileName="")) returned 1
	[0140.035] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106816.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106958.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107024.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107026.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2358, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107042.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107090.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107130.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107132.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107134.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107138.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107146.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107148.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3490, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107150.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5804, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107152.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x571c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107154.WMF", cAlternateFileName="")) returned 1
	[0140.036] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x614c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107158.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107182.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107188.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x26f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107192.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107254.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107258.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65e8eef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107262.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107264.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107266.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107280.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107282.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x347c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107288.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3014, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107290.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5636ddf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107300.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107302.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107308.WMF", cAlternateFileName="")) returned 1
	[0140.037] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107314.WMF", cAlternateFileName="")) returned 1
	[0140.038] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107316.WMF", cAlternateFileName="")) returned 1
	[0140.347] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107328.WMF", cAlternateFileName="")) returned 1
	[0140.364] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107342.WMF", cAlternateFileName="")) returned 1
	[0140.389] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56393f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107344.WMF", cAlternateFileName="")) returned 1
	[0140.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107350.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107358.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107364.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107426.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7680, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107446.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107450.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107452.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107456.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107458.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107468.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107480.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1374, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107482.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107484.WMF", cAlternateFileName="")) returned 1
	[0140.409] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107488.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4054, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107490.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107492.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1918, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107494.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107496.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107500.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107502.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107512.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107514.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x36b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107516.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107526.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107528.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65eb5050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107544.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107658.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107708.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107712.WMF", cAlternateFileName="")) returned 1
	[0140.410] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107718.WMF", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2044, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107722.WMF", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107724.WMF", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563ba0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107728.WMF", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107730.WMF", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107734.WMF", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107742.WMF", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107744.WMF", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x563e0210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107746.WMF", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2020, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107748.WMF", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65edb1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x126c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107750.WMF", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4146, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0136865.WMF", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55eb4900, ftCreationTime.dwHighDateTime=0x1bdbf6f, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55eb4900, ftLastWriteTime.dwHighDateTime=0x1bdbf6f, nFileSizeHigh=0x0, nFileSizeLow=0x9d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0144773.JPG", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8379, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145168.JPG", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145212.JPG", cAlternateFileName="")) returned 1
	[0140.411] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc056, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145272.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f01310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5285, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145361.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c5e300, ftCreationTime.dwHighDateTime=0x1bdbf70, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5c5e300, ftLastWriteTime.dwHighDateTime=0x1bdbf70, nFileSizeHigh=0x0, nFileSizeLow=0x45cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145373.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a35900, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a35900, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145669.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a05b300, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a05b300, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145707.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50dbc900, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50dbc900, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145810.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5d84e00, ftCreationTime.dwHighDateTime=0x1c026b6, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5d84e00, ftLastWriteTime.dwHighDateTime=0x1c026b6, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145879.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7962500, ftCreationTime.dwHighDateTime=0x1c03d89, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7962500, ftLastWriteTime.dwHighDateTime=0x1c03d89, nFileSizeHigh=0x0, nFileSizeLow=0x84a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145895.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912cb00, ftCreationTime.dwHighDateTime=0x1bdbf72, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa912cb00, ftLastWriteTime.dwHighDateTime=0x1bdbf72, nFileSizeHigh=0x0, nFileSizeLow=0x9a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145904.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0146142.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148309.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x107d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148757.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x955d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148798.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149018.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f27470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149118.JPG", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150150.WMF", cAlternateFileName="")) returned 1
	[0140.412] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150861.WMF", cAlternateFileName="")) returned 1
	[0140.413] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151041.WMF", cAlternateFileName="")) returned 1
	[0140.413] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151045.WMF", cAlternateFileName="")) returned 1
	[0140.413] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4844, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151047.WMF", cAlternateFileName="")) returned 1
	[0140.413] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151055.WMF", cAlternateFileName="")) returned 1
	[0140.515] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151061.WMF", cAlternateFileName="")) returned 1
	[0140.534] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151063.WMF", cAlternateFileName="")) returned 1
	[0140.537] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151067.WMF", cAlternateFileName="")) returned 1
	[0140.543] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151073.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151581.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152414.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152430.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x406c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152432.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152436.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152556.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152558.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152560.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152568.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152570.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152590.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152594.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152600.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5642c4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152602.WMF", cAlternateFileName="")) returned 1
	[0140.544] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x40f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152606.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152608.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1748, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152610.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152622.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152626.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x785c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152628.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8774, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152688.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152690.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502c600, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f4d5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7502c600, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152694.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152696.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152698.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152702.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x674, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152704.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x132c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152708.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152716.WMF", cAlternateFileName="")) returned 1
	[0140.545] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152722.WMF", cAlternateFileName="")) returned 1
	[0140.727] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152876.WMF", cAlternateFileName="")) returned 1
	[0140.746] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152878.WMF", cAlternateFileName="")) returned 1
	[0140.759] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2370, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152882.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152884.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152890.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56452630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152892.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152894.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1190, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152898.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x812c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153047.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153087.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153089.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153091.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x22b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153093.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153095.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153265.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153273.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153299.WMF", cAlternateFileName="")) returned 1
	[0140.760] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7850, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153302.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153305.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153307.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4238, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153313.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f73730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153398.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x85d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153508.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x31d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153514.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153516.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x30f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153518.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0156537.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157167.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x54d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157177.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x45f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157191.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157831.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x48dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158071.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x462e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158477.WMF", cAlternateFileName="")) returned 1
	[0140.761] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56478790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x72de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0160590.WMF", cAlternateFileName="")) returned 1
	[0140.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb594, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0164153.JPG", cAlternateFileName="")) returned 1
	[0140.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0168644.WMF", cAlternateFileName="")) returned 1
	[0140.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171685.WMF", cAlternateFileName="")) returned 1
	[0140.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171847.WMF", cAlternateFileName="")) returned 1
	[0140.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172035.WMF", cAlternateFileName="")) returned 1
	[0140.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172067.WMF", cAlternateFileName="")) returned 1
	[0140.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3198, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172193.WMF", cAlternateFileName="")) returned 1
	[0140.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174315.WMF", cAlternateFileName="")) returned 1
	[0140.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174635.WMF", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174639.WMF", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6196, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174952.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175361.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175428.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177257.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd902, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177806.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x907d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178348.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178459.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ff99200, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ff99200, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0x67a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178460.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178523.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178632.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178639.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178932.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0179963.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65f99890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x40e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182689.JPG", cAlternateFileName="")) returned 1
	[0140.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182888.WMF", cAlternateFileName="")) returned 1
	[0140.802] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182898.WMF", cAlternateFileName="")) returned 1
	[0140.802] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182902.WMF", cAlternateFileName="")) returned 1
	[0140.802] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21290a00, ftCreationTime.dwHighDateTime=0x1bdf6f5, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21290a00, ftLastWriteTime.dwHighDateTime=0x1bdf6f5, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182946.WMF", cAlternateFileName="")) returned 1
	[0140.802] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x745c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183172.WMF", cAlternateFileName="")) returned 1
	[0140.802] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183174.WMF", cAlternateFileName="")) returned 1
	[0140.802] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5649e8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183198.WMF", cAlternateFileName="")) returned 1
	[0140.802] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183574.WMF", cAlternateFileName="")) returned 1
	[0140.802] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185670.WMF", cAlternateFileName="")) returned 1
	[0140.802] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4e46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185774.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x69d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185776.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185778.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe956, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185780.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x99a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185786.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x50b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185790.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x650c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185796.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8420, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185798.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564c4a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185800.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x773a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185806.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185818.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185828.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2182, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185834.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x37e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185842.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186346.WMF", cAlternateFileName="")) returned 1
	[0141.143] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x843a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186360.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fbf9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x44fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186362.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4724, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186364.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187647.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1500, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187815.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187817.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187819.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187825.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187829.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2480, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187835.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187837.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187839.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187847.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187849.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x221c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187851.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x564eabb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187859.WMF", cAlternateFileName="")) returned 1
	[0141.144] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187861.WMF", cAlternateFileName="")) returned 1
	[0141.145] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187863.WMF", cAlternateFileName="")) returned 1
	[0141.145] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1258, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187881.WMF", cAlternateFileName="")) returned 1
	[0141.145] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x834, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187883.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187893.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187895.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187921.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188511.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188513.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188519.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188587.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188667.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x73a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188669.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188679.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195248.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81dcbf00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81dcbf00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195254.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85704600, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85704600, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x207a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195260.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98831600, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98831600, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x72f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195320.WMF", cAlternateFileName="")) returned 1
	[0141.331] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9338c00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0x65fe5b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9338c00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x5350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195342.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195428.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195772.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195788.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196060.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196110.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196142.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739e4f00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x739e4f00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x3586, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196354.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cf7c00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74cf7c00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196358.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78630300, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78630300, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x164c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196364.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197979.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23edc800, ftCreationTime.dwHighDateTime=0x1be3d01, ftLastAccessTime.dwLowDateTime=0x56510d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23edc800, ftLastWriteTime.dwHighDateTime=0x1be3d01, nFileSizeHigh=0x0, nFileSizeLow=0x668c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197983.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9fe6800, ftCreationTime.dwHighDateTime=0x1c0323c, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9fe6800, ftLastWriteTime.dwHighDateTime=0x1c0323c, nFileSizeHigh=0x0, nFileSizeLow=0x849c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198016.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f94700, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71f94700, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x5cae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198020.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745ba100, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x745ba100, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x8860, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198021.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18fcfa00, ftCreationTime.dwHighDateTime=0x1c0323d, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18fcfa00, ftLastWriteTime.dwHighDateTime=0x1c0323d, nFileSizeHigh=0x0, nFileSizeLow=0x6624, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198022.WMF", cAlternateFileName="")) returned 1
	[0141.332] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de50900, ftCreationTime.dwHighDateTime=0x1bd8464, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7de50900, ftLastWriteTime.dwHighDateTime=0x1bd8464, nFileSizeHigh=0x0, nFileSizeLow=0x3cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198025.WMF", cAlternateFileName="")) returned 1
	[0141.333] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb570900, ftCreationTime.dwHighDateTime=0x1bd9f2f, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb570900, ftLastWriteTime.dwHighDateTime=0x1bd9f2f, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198102.WMF", cAlternateFileName="")) returned 1
	[0141.333] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce00a00, ftCreationTime.dwHighDateTime=0x1bd9fdf, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcce00a00, ftLastWriteTime.dwHighDateTime=0x1bd9fdf, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198113.WMF", cAlternateFileName="")) returned 1
	[0141.333] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198226.WMF", cAlternateFileName="")) returned 1
	[0141.432] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198234.WMF", cAlternateFileName="")) returned 1
	[0141.457] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198372.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1925100, ftCreationTime.dwHighDateTime=0x1be3a08, ftLastAccessTime.dwLowDateTime=0x6600bcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1925100, ftLastWriteTime.dwHighDateTime=0x1be3a08, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198377.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198447.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xae08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198494.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198712.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56536e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x714e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199279.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199303.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199307.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x662a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199423.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199429.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199465.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x35bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199469.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199473.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199475.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x27b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199483.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbde600, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0x5655cfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6dbde600, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199609.WMF", cAlternateFileName="")) returned 1
	[0141.458] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200151.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200163.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7633f300, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7633f300, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200183.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200189.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa65cc000, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa65cc000, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0x7a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200273.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9f04700, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9f04700, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200279.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb379af00, ftCreationTime.dwHighDateTime=0x1be3e98, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb379af00, ftLastWriteTime.dwHighDateTime=0x1be3e98, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200289.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ec38100, ftCreationTime.dwHighDateTime=0x1be3e99, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ec38100, ftLastWriteTime.dwHighDateTime=0x1be3e99, nFileSizeHigh=0x0, nFileSizeLow=0x4f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200377.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200383.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x366e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200467.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66031e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x273e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200521.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66057f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200611.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66057f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0202045.JPG", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b62300, ftCreationTime.dwHighDateTime=0x1be560f, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60b62300, ftLastWriteTime.dwHighDateTime=0x1be560f, nFileSizeHigh=0x0, nFileSizeLow=0x6e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211981.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212299.WMF", cAlternateFileName="")) returned 1
	[0141.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212601.WMF", cAlternateFileName="")) returned 1
	[0141.460] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66057f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x199a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212685.WMF", cAlternateFileName="")) returned 1
	[0141.581] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212751.WMF", cAlternateFileName="")) returned 1
	[0141.585] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212953.WMF", cAlternateFileName="")) returned 1
	[0141.585] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56583130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213243.WMF", cAlternateFileName="")) returned 1
	[0141.585] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213449.WMF", cAlternateFileName="")) returned 1
	[0141.585] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214934.WMF", cAlternateFileName="")) returned 1
	[0141.585] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaefa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214948.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26227e00, ftCreationTime.dwHighDateTime=0x1be5489, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26227e00, ftLastWriteTime.dwHighDateTime=0x1be5489, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215070.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2209e400, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2209e400, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215076.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x81ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215210.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x852fb100, ftCreationTime.dwHighDateTime=0x1be4927, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x852fb100, ftLastWriteTime.dwHighDateTime=0x1be4927, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215709.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87920b00, ftCreationTime.dwHighDateTime=0x1be4927, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87920b00, ftLastWriteTime.dwHighDateTime=0x1be4927, nFileSizeHigh=0x0, nFileSizeLow=0x45a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215710.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e02700, ftCreationTime.dwHighDateTime=0x1be4927, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95e02700, ftLastWriteTime.dwHighDateTime=0x1be4927, nFileSizeHigh=0x0, nFileSizeLow=0x15f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215718.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216112.JPG", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5474, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216153.JPG", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565a9290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa488, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216540.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216570.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216600.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x24e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216612.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216874.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217262.WMF", cAlternateFileName="")) returned 1
	[0141.586] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217302.WMF", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217872.WMF", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227419.JPG", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227558.JPG", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaccb1700, ftCreationTime.dwHighDateTime=0x1be8602, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaccb1700, ftLastWriteTime.dwHighDateTime=0x1be8602, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228823.WMF", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565cf3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228959.WMF", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230553.WMF", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6607e0d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1066, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230558.WMF", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x332a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232171.WMF", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d8c500, ftCreationTime.dwHighDateTime=0x1be1ff6, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22d8c500, ftLastWriteTime.dwHighDateTime=0x1be1ff6, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232393.WMF", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa1c300, ftCreationTime.dwHighDateTime=0x1be1ff5, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcaa1c300, ftLastWriteTime.dwHighDateTime=0x1be1ff5, nFileSizeHigh=0x0, nFileSizeLow=0xa086, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232395.WMF", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5779c00, ftCreationTime.dwHighDateTime=0x1be05ef, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5779c00, ftLastWriteTime.dwHighDateTime=0x1be05ef, nFileSizeHigh=0x0, nFileSizeLow=0x380a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232795.WMF", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d7d00, ftCreationTime.dwHighDateTime=0x1be05ef, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6d7d00, ftLastWriteTime.dwHighDateTime=0x1be05ef, nFileSizeHigh=0x0, nFileSizeLow=0x899c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232797.WMF", cAlternateFileName="")) returned 1
	[0141.587] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e804d00, ftCreationTime.dwHighDateTime=0x1be05ef, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e804d00, ftLastWriteTime.dwHighDateTime=0x1be05ef, nFileSizeHigh=0x0, nFileSizeLow=0x4de6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232803.WMF", cAlternateFileName="")) returned 1
	[0141.783] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x26e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233512.WMF", cAlternateFileName="")) returned 1
	[0141.790] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x312c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233665.WMF", cAlternateFileName="")) returned 1
	[0141.806] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f43f00, ftCreationTime.dwHighDateTime=0x1be809a, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64f43f00, ftLastWriteTime.dwHighDateTime=0x1be809a, nFileSizeHigh=0x0, nFileSizeLow=0x975e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233992.WMF", cAlternateFileName="")) returned 1
	[0141.806] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f727e00, ftCreationTime.dwHighDateTime=0x1be7b5a, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f727e00, ftLastWriteTime.dwHighDateTime=0x1be7b5a, nFileSizeHigh=0x0, nFileSizeLow=0xcec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234000.WMF", cAlternateFileName="")) returned 1
	[0141.806] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97fc7700, ftCreationTime.dwHighDateTime=0x1be7b5e, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97fc7700, ftLastWriteTime.dwHighDateTime=0x1be7b5e, nFileSizeHigh=0x0, nFileSizeLow=0x4b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234001.WMF", cAlternateFileName="")) returned 1
	[0141.806] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x80d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234376.WMF", cAlternateFileName="")) returned 1
	[0141.806] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237225.WMF", cAlternateFileName="")) returned 1
	[0141.806] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24625400, ftCreationTime.dwHighDateTime=0x1be8fbc, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24625400, ftLastWriteTime.dwHighDateTime=0x1be8fbc, nFileSizeHigh=0x0, nFileSizeLow=0x5700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237228.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660a4230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x60c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237336.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x51be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237759.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x59a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238333.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238927.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238959.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238983.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239057.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239063.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x565f5550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1294, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239079.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239191.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239611.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239935.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239941.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239943.WMF", cAlternateFileName="")) returned 1
	[0141.807] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239951.WMF", cAlternateFileName="")) returned 1
	[0141.808] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239953.WMF", cAlternateFileName="")) returned 1
	[0141.808] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1348, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239955.WMF", cAlternateFileName="")) returned 1
	[0141.808] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239965.WMF", cAlternateFileName="")) returned 1
	[0141.808] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x154c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239967.WMF", cAlternateFileName="")) returned 1
	[0141.808] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239973.WMF", cAlternateFileName="")) returned 1
	[0141.808] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239975.WMF", cAlternateFileName="")) returned 1
	[0141.808] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239997.WMF", cAlternateFileName="")) returned 1
	[0141.808] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240157.WMF", cAlternateFileName="")) returned 1
	[0141.808] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240175.WMF", cAlternateFileName="")) returned 1
	[0141.808] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240189.WMF", cAlternateFileName="")) returned 1
	[0141.808] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1476, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240291.WMF", cAlternateFileName="")) returned 1
	[0141.927] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90da9400, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90da9400, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0x92e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241019.WMF", cAlternateFileName="")) returned 1
	[0141.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cc65600, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9cc65600, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241037.WMF", cAlternateFileName="")) returned 1
	[0141.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa059dd00, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa059dd00, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241041.WMF", cAlternateFileName="")) returned 1
	[0141.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18b0a00, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa18b0a00, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241043.WMF", cAlternateFileName="")) returned 1
	[0141.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49dda00, ftCreationTime.dwHighDateTime=0x1be9cda, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb49dda00, ftLastWriteTime.dwHighDateTime=0x1be9cda, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241077.WMF", cAlternateFileName="")) returned 1
	[0141.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c98900, ftCreationTime.dwHighDateTime=0x1be9cdc, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7c98900, ftLastWriteTime.dwHighDateTime=0x1be9cdc, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241773.WMF", cAlternateFileName="")) returned 1
	[0141.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb5d1000, ftCreationTime.dwHighDateTime=0x1be9cdc, ftLastAccessTime.dwLowDateTime=0x660ca390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb5d1000, ftLastWriteTime.dwHighDateTime=0x1be9cdc, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241781.WMF", cAlternateFileName="")) returned 1
	[0141.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7938, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250504.WMF", cAlternateFileName="")) returned 1
	[0141.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250997.WMF", cAlternateFileName="")) returned 1
	[0141.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1100c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251007.WMF", cAlternateFileName="")) returned 1
	[0141.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1d4200, ftCreationTime.dwHighDateTime=0x1beb2f9, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f1d4200, ftLastWriteTime.dwHighDateTime=0x1beb2f9, nFileSizeHigh=0x0, nFileSizeLow=0xae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252629.WMF", cAlternateFileName="")) returned 1
	[0141.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f4c600, ftCreationTime.dwHighDateTime=0x1beb2f9, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x46f4c600, ftLastWriteTime.dwHighDateTime=0x1beb2f9, nFileSizeHigh=0x0, nFileSizeLow=0xf56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252669.WMF", cAlternateFileName="")) returned 1
	[0141.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89b5600, ftCreationTime.dwHighDateTime=0x1bec0f4, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe89b5600, ftLastWriteTime.dwHighDateTime=0x1bec0f4, nFileSizeHigh=0x0, nFileSizeLow=0xf6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278702.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0279644.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0280468.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30398a00, ftCreationTime.dwHighDateTime=0x1bed30f, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x30398a00, ftLastWriteTime.dwHighDateTime=0x1bed30f, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281008.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd40ff00, ftCreationTime.dwHighDateTime=0x1bed402, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd40ff00, ftLastWriteTime.dwHighDateTime=0x1bed402, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281243.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c757700, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c757700, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x31dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281630.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da6a400, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7da6a400, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281632.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87300c00, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87300c00, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281638.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88613900, ftCreationTime.dwHighDateTime=0x1bee442, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88613900, ftLastWriteTime.dwHighDateTime=0x1bee442, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281640.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba8f5800, ftCreationTime.dwHighDateTime=0x1beecd8, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xba8f5800, ftLastWriteTime.dwHighDateTime=0x1beecd8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282126.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x660f04f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8166, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282928.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5661b6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282932.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56641810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x388a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285462.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56641810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2440, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285484.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285780.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x523e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285782.WMF", cAlternateFileName="")) returned 1
	[0141.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285792.WMF", cAlternateFileName="")) returned 1
	[0141.938] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3550, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285796.WMF", cAlternateFileName="")) returned 1
	[0141.938] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285808.WMF", cAlternateFileName="")) returned 1
	[0141.938] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285820.WMF", cAlternateFileName="")) returned 1
	[0141.938] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56667970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285822.WMF", cAlternateFileName="")) returned 1
	[0141.938] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7898, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287018.WMF", cAlternateFileName="")) returned 1
	[0142.089] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x931a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287019.WMF", cAlternateFileName="")) returned 1
	[0142.113] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x80d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287020.WMF", cAlternateFileName="")) returned 1
	[0142.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287024.WMF", cAlternateFileName="")) returned 1
	[0142.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287408.WMF", cAlternateFileName="")) returned 1
	[0142.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287415.WMF", cAlternateFileName="")) returned 1
	[0142.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287417.WMF", cAlternateFileName="")) returned 1
	[0142.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82369200, ftCreationTime.dwHighDateTime=0x1bf58e6, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82369200, ftLastWriteTime.dwHighDateTime=0x1bf58e6, nFileSizeHigh=0x0, nFileSizeLow=0x89a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287641.JPG", cAlternateFileName="")) returned 1
	[0142.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6d41000, ftCreationTime.dwHighDateTime=0x1bf58da, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd6d41000, ftLastWriteTime.dwHighDateTime=0x1bf58da, nFileSizeHigh=0x0, nFileSizeLow=0x42d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287642.JPG", cAlternateFileName="")) returned 1
	[0142.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5a2e300, ftCreationTime.dwHighDateTime=0x1bf58da, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5a2e300, ftLastWriteTime.dwHighDateTime=0x1bf58da, nFileSizeHigh=0x0, nFileSizeLow=0x3e91, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287643.JPG", cAlternateFileName="")) returned 1
	[0142.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5a2e300, ftCreationTime.dwHighDateTime=0x1bf58da, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5a2e300, ftLastWriteTime.dwHighDateTime=0x1bf58da, nFileSizeHigh=0x0, nFileSizeLow=0x43c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287644.JPG", cAlternateFileName="")) returned 1
	[0142.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5a2e300, ftCreationTime.dwHighDateTime=0x1bf58da, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd5a2e300, ftLastWriteTime.dwHighDateTime=0x1bf58da, nFileSizeHigh=0x0, nFileSizeLow=0x8d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287645.JPG", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0289430.JPG", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0290548.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2590, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291794.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292248.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292270.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66116650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292272.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292278.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5668dad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292286.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293800.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293832.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x37de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0294989.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0294991.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x21b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295069.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296277.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1088e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296279.WMF", cAlternateFileName="")) returned 1
	[0142.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x107ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0296288.WMF", cAlternateFileName="")) returned 1
	[0142.125] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x59ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297229.WMF", cAlternateFileName="")) returned 1
	[0142.125] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297269.WMF", cAlternateFileName="")) returned 1
	[0142.125] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4236, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297725.WMF", cAlternateFileName="")) returned 1
	[0142.125] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566b3c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297727.WMF", cAlternateFileName="")) returned 1
	[0142.125] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x493e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297757.WMF", cAlternateFileName="")) returned 1
	[0142.125] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6613c7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4960, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297759.WMF", cAlternateFileName="")) returned 1
	[0142.125] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x566ffef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300862.WMF", cAlternateFileName="")) returned 1
	[0142.219] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf66f5700, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0x566ffef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf66f5700, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301044.WMF", cAlternateFileName="")) returned 1
	[0142.219] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab7300, ftCreationTime.dwHighDateTime=0x1bf4a6c, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ab7300, ftLastWriteTime.dwHighDateTime=0x1bf4a6c, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301052.WMF", cAlternateFileName="")) returned 1
	[0142.221] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56726050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301418.WMF", cAlternateFileName="")) returned 1
	[0142.221] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301432.WMF", cAlternateFileName="")) returned 1
	[0142.221] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56726050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304371.WMF", cAlternateFileName="")) returned 1
	[0142.221] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56726050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x103e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304405.WMF", cAlternateFileName="")) returned 1
	[0142.221] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56726050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304853.WMF", cAlternateFileName="")) returned 1
	[0142.221] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304861.WMF", cAlternateFileName="")) returned 1
	[0142.221] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304875.WMF", cAlternateFileName="")) returned 1
	[0142.221] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309480.JPG", cAlternateFileName="")) returned 1
	[0142.221] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x544c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309567.JPG", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309585.JPG", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x81f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309598.JPG", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77652000, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77652000, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaabb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309664.JPG", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309705.JPG", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b95a400, ftCreationTime.dwHighDateTime=0x1bf5cb6, ftLastAccessTime.dwLowDateTime=0x66162910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b95a400, ftLastWriteTime.dwHighDateTime=0x1bf5cb6, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309902.WMF", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cc6d100, ftCreationTime.dwHighDateTime=0x1bf5cb6, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5cc6d100, ftLastWriteTime.dwHighDateTime=0x1bf5cb6, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309904.WMF", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea87400, ftCreationTime.dwHighDateTime=0x1bf5cb6, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ea87400, ftLastWriteTime.dwHighDateTime=0x1bf5cb6, nFileSizeHigh=0x0, nFileSizeLow=0x2b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0309920.WMF", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a03b100, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a03b100, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0x911a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313896.JPG", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717bb700, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x717bb700, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0xa75a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313965.JPG", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x527d2500, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527d2500, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0x81ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313970.JPG", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d07fb00, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3d07fb00, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0313974.JPG", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2feb0c00, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2feb0c00, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0x40f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0314068.JPG", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4b02, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315580.JPG", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x423a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315612.JPG", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318448.WMF", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318804.WMF", cAlternateFileName="")) returned 1
	[0142.222] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x28be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0318810.WMF", cAlternateFileName="")) returned 1
	[0142.223] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x24d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0321179.JPG", cAlternateFileName="")) returned 1
	[0142.223] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5674c1b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0324694.WMF", cAlternateFileName="")) returned 1
	[0142.223] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0324704.WMF", cAlternateFileName="")) returned 1
	[0142.223] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0337280.JPG", cAlternateFileName="")) returned 1
	[0142.223] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x27d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341328.JPG", cAlternateFileName="")) returned 1
	[0142.223] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341344.JPG", cAlternateFileName="")) returned 1
	[0142.498] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341439.JPG", cAlternateFileName="")) returned 1
	[0142.498] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341447.JPG", cAlternateFileName="")) returned 1
	[0142.498] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x52c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341448.JPG", cAlternateFileName="")) returned 1
	[0142.498] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7457, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341455.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341475.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341499.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341534.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5a56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341551.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6f43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341554.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341557.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6873, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341559.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa497, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341561.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341634.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3615, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341636.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56772310, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341645.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3df7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341653.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341654.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341738.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66188a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0341742.JPG", cAlternateFileName="")) returned 1
	[0142.499] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382836.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382925.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1672c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382926.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382927.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382930.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382931.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x184d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382938.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382939.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1653a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382942.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382944.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1531c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382947.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382948.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661aebd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x178d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382950.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661d4d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17749, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382952.JPG", cAlternateFileName="")) returned 1
	[0142.500] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382954.JPG", cAlternateFileName="")) returned 1
	[0142.558] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x15fef, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382955.JPG", cAlternateFileName="")) returned 1
	[0142.558] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661d4d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382957.JPG", cAlternateFileName="")) returned 1
	[0142.558] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661d4d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x193e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382958.JPG", cAlternateFileName="")) returned 1
	[0142.558] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661d4d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382959.JPG", cAlternateFileName="")) returned 1
	[0142.558] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382960.JPG", cAlternateFileName="")) returned 1
	[0142.558] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382961.JPG", cAlternateFileName="")) returned 1
	[0142.558] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382962.JPG", cAlternateFileName="")) returned 1
	[0142.558] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382963.JPG", cAlternateFileName="")) returned 1
	[0142.558] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382965.JPG", cAlternateFileName="")) returned 1
	[0142.558] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x56798470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382966.JPG", cAlternateFileName="")) returned 1
	[0142.558] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x16d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382967.JPG", cAlternateFileName="")) returned 1
	[0142.558] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382968.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1779f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382969.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x15b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0382970.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x190e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384862.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17b79, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384885.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x14033, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384888.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384895.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x11780, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0384900.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x787a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386120.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa91e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386267.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386270.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x396a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386485.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x693e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0386764.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387337.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x6cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387578.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x661fae90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x98c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387591.JPG", cAlternateFileName="")) returned 1
	[0142.559] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387604.JPG", cAlternateFileName="")) returned 1
	[0142.993] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x98ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387882.JPG", cAlternateFileName="")) returned 1
	[0143.569] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7df3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0387895.JPG", cAlternateFileName="")) returned 1
	[0143.569] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59a43300, ftCreationTime.dwHighDateTime=0x1c97bb5, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x59a43300, ftLastWriteTime.dwHighDateTime=0x1c97bb5, nFileSizeHigh=0x0, nFileSizeLow=0x351c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0390072.JPG", cAlternateFileName="")) returned 1
	[0143.569] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55f55f00, ftCreationTime.dwHighDateTime=0x1c98cd0, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x55f55f00, ftLastWriteTime.dwHighDateTime=0x1c98cd0, nFileSizeHigh=0x0, nFileSizeLow=0x31883, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400001.PNG", cAlternateFileName="")) returned 1
	[0143.569] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea13f600, ftCreationTime.dwHighDateTime=0x1c98cd1, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea13f600, ftLastWriteTime.dwHighDateTime=0x1c98cd1, nFileSizeHigh=0x0, nFileSizeLow=0x15d49, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400002.PNG", cAlternateFileName="")) returned 1
	[0143.569] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x234c6600, ftCreationTime.dwHighDateTime=0x1c98cd2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x234c6600, ftLastWriteTime.dwHighDateTime=0x1c98cd2, nFileSizeHigh=0x0, nFileSizeLow=0x1e836, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400003.PNG", cAlternateFileName="")) returned 1
	[0143.773] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39f2bd00, ftCreationTime.dwHighDateTime=0x1c98cd2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39f2bd00, ftLastWriteTime.dwHighDateTime=0x1c98cd2, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400004.PNG", cAlternateFileName="")) returned 1
	[0143.783] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82aa7600, ftCreationTime.dwHighDateTime=0x1c98cd2, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82aa7600, ftLastWriteTime.dwHighDateTime=0x1c98cd2, nFileSizeHigh=0x0, nFileSizeLow=0x17742, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0400005.PNG", cAlternateFileName="")) returned 1
	[0143.791] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2645, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAVA_01.MID", cAlternateFileName="")) returned 1
	[0143.799] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x567be5d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNGLE_01.MID", cAlternateFileName="")) returned 1
	[0143.804] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x968b8700, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x58b00bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x968b8700, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x15f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00021_.WMF", cAlternateFileName="")) returned 1
	[0143.813] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19acdd00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x58b00bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19acdd00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x1090, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00132_.WMF", cAlternateFileName="")) returned 1
	[0143.823] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b16fc00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x69c72af0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b16fc00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x31e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MP00646_.WMF", cAlternateFileName="")) returned 1
	[0143.827] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUSIC_01.MID", cAlternateFileName="")) returned 1
	[0143.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070c700, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9070c700, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00042_.WMF", cAlternateFileName="")) returned 1
	[0143.842] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b49b100, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b49b100, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00057_.WMF", cAlternateFileName="")) returned 1
	[0143.842] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c04900, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c04900, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00058_.WMF", cAlternateFileName="")) returned 1
	[0143.842] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfdad700, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfdad700, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0x1324, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00068_.WMF", cAlternateFileName="")) returned 1
	[0143.842] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99589d00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99589d00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00238_.WMF", cAlternateFileName="")) returned 1
	[0143.842] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc013d500, ftCreationTime.dwHighDateTime=0x1bd4b1a, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc013d500, ftLastWriteTime.dwHighDateTime=0x1bd4b1a, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00330_.WMF", cAlternateFileName="")) returned 1
	[0143.842] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x580ec000, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x580ec000, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x1172, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00388_.WMF", cAlternateFileName="")) returned 1
	[0143.842] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c25e800, ftCreationTime.dwHighDateTime=0x1bd4aeb, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c25e800, ftLastWriteTime.dwHighDateTime=0x1bd4aeb, nFileSizeHigh=0x0, nFileSizeLow=0x20ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00389_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af4bb00, ftCreationTime.dwHighDateTime=0x1bd4aeb, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5af4bb00, ftLastWriteTime.dwHighDateTime=0x1bd4aeb, nFileSizeHigh=0x0, nFileSizeLow=0x21c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00390_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde161100, ftCreationTime.dwHighDateTime=0x1bd4aeb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde161100, ftLastWriteTime.dwHighDateTime=0x1bd4aeb, nFileSizeHigh=0x0, nFileSizeLow=0x21ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00391_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24e62400, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24e62400, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00394_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c22fe00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c22fe00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x194a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00395_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af1d100, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4af1d100, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x38c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00396_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239b0400, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x239b0400, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x173e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00417_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x313b9400, ftCreationTime.dwHighDateTime=0x1bd4aeb, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x313b9400, ftLastWriteTime.dwHighDateTime=0x1bd4aeb, nFileSizeHigh=0x0, nFileSizeLow=0x4696, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00433_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea9aa00, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdea9aa00, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0x2f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00438_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f311400, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1f311400, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0x14bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00452_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cceba00, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1cceba00, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00454_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf78d7c00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf78d7c00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00458_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe80e3300, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe80e3300, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00462_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735300, ftCreationTime.dwHighDateTime=0x1bd4b1b, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x735300, ftLastWriteTime.dwHighDateTime=0x1bd4b1b, nFileSizeHigh=0x0, nFileSizeLow=0xc10, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00487_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x955a5a00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x955a5a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00494_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf33f00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bf33f00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00512_.WMF", cAlternateFileName="")) returned 1
	[0143.843] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9b2c00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc9b2c00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x6efa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00523_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6a54b00, ftCreationTime.dwHighDateTime=0x1bd4b20, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6a54b00, ftLastWriteTime.dwHighDateTime=0x1bd4b20, nFileSizeHigh=0x0, nFileSizeLow=0x5880, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00525_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35fc4a00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35fc4a00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x477c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00530_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00532_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34cb1d00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x34cb1d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x7d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00538_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23970600, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x23970600, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00641_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7658, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00784_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43213500, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43213500, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x23f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00798_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc0f000, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecc0f000, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00806_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb8fc300, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb8fc300, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0xba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00807_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bce0800, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7bce0800, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00808_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92d6900, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe92d6900, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00809_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00810_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3210, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA00932_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8abf600, ftCreationTime.dwHighDateTime=0x1bd4b31, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8abf600, ftLastWriteTime.dwHighDateTime=0x1bd4b31, nFileSizeHigh=0x0, nFileSizeLow=0x7c46, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01064_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x117a8f00, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x117a8f00, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x54a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01066_.WMF", cAlternateFileName="")) returned 1
	[0143.844] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0d55d00, ftCreationTime.dwHighDateTime=0x1bd4b03, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0d55d00, ftLastWriteTime.dwHighDateTime=0x1bd4b03, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01069_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe19e000, ftCreationTime.dwHighDateTime=0x1bd4afd, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe19e000, ftLastWriteTime.dwHighDateTime=0x1bd4afd, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01123_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23d3100, ftCreationTime.dwHighDateTime=0x1bd4ae1, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe23d3100, ftLastWriteTime.dwHighDateTime=0x1bd4ae1, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01126_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94292d00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6a34aa30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94292d00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x16a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01130_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22e1e00, ftCreationTime.dwHighDateTime=0x1bd4afd, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22e1e00, ftLastWriteTime.dwHighDateTime=0x1bd4afd, nFileSizeHigh=0x0, nFileSizeLow=0x16d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01141_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc383d00, ftCreationTime.dwHighDateTime=0x1bd4afc, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc383d00, ftLastWriteTime.dwHighDateTime=0x1bd4afc, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01148_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1248, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01149_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7738900, ftCreationTime.dwHighDateTime=0x1bd4afc, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7738900, ftLastWriteTime.dwHighDateTime=0x1bd4afc, nFileSizeHigh=0x0, nFileSizeLow=0x2230, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01152_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6425c00, ftCreationTime.dwHighDateTime=0x1bd4afc, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf6425c00, ftLastWriteTime.dwHighDateTime=0x1bd4afc, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01154_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1858, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01157_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf04c7b00, ftCreationTime.dwHighDateTime=0x1bd4afc, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf04c7b00, ftLastWriteTime.dwHighDateTime=0x1bd4afc, nFileSizeHigh=0x0, nFileSizeLow=0x1c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01158_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1694, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01161_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f80000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x92f80000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xa04, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01164_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91c6d300, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91c6d300, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x70f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01293_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd29f0600, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd29f0600, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0x16ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01354_.WMF", cAlternateFileName="")) returned 1
	[0143.845] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf0b7f00, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x594d2670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf0b7f00, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01356_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdda5200, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcdda5200, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01357_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca92500, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcca92500, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01358_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b34400, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6b34400, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01361_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe5b0900, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe5b0900, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0x40412, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01368_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8653c600, ftCreationTime.dwHighDateTime=0x1bd4b3c, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8653c600, ftLastWriteTime.dwHighDateTime=0x1bd4b3c, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01421_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b435600, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b435600, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x4e82, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01468_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87afcf00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87afcf00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x4ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01470_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x841c4800, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x841c4800, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x2028, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01472_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82eb1b00, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82eb1b00, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01473_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5def00, ftCreationTime.dwHighDateTime=0x1bd4af3, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1f5def00, ftLastWriteTime.dwHighDateTime=0x1bd4af3, nFileSizeHigh=0x0, nFileSizeLow=0x349c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01474_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb77a00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bb77a00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0xce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01627_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f01d600, ftCreationTime.dwHighDateTime=0x1bd4be8, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f01d600, ftLastWriteTime.dwHighDateTime=0x1bd4be8, nFileSizeHigh=0x0, nFileSizeLow=0xb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01680_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6e4f00, ftCreationTime.dwHighDateTime=0x1bd4be8, ftLastAccessTime.dwLowDateTime=0x6a370b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b6e4f00, ftLastWriteTime.dwHighDateTime=0x1bd4be8, nFileSizeHigh=0x0, nFileSizeLow=0xc88, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01682_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65da4900, ftCreationTime.dwHighDateTime=0x1bd4bda, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65da4900, ftLastWriteTime.dwHighDateTime=0x1bd4bda, nFileSizeHigh=0x0, nFileSizeLow=0x14c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01701_.WMF", cAlternateFileName="")) returned 1
	[0143.846] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01848_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01849_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a04ab00, ftCreationTime.dwHighDateTime=0x1bd4bfd, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a04ab00, ftLastWriteTime.dwHighDateTime=0x1bd4bfd, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01852_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01858_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa55a300, ftCreationTime.dwHighDateTime=0x1bd4bfc, ftLastAccessTime.dwLowDateTime=0x594f87d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa55a300, ftLastWriteTime.dwHighDateTime=0x1bd4bfc, nFileSizeHigh=0x0, nFileSizeLow=0xdb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA01866_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x27e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02009_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x620ded00, ftCreationTime.dwHighDateTime=0x1bd4c01, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x620ded00, ftLastWriteTime.dwHighDateTime=0x1bd4c01, nFileSizeHigh=0x0, nFileSizeLow=0x918, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02041_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82d6100, ftCreationTime.dwHighDateTime=0x1bd4bfe, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb82d6100, ftLastWriteTime.dwHighDateTime=0x1bd4bfe, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02066_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3552d900, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3552d900, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02091_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38e66000, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x38e66000, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02092_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x308e2500, ftCreationTime.dwHighDateTime=0x1bd4bf3, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x308e2500, ftLastWriteTime.dwHighDateTime=0x1bd4bf3, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02093_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29651800, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29651800, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02124_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f8b800, ftCreationTime.dwHighDateTime=0x1bd4bd0, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50f8b800, ftLastWriteTime.dwHighDateTime=0x1bd4bd0, nFileSizeHigh=0x0, nFileSizeLow=0x4816, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02125_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x819c1a00, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x819c1a00, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0x7c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02126_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9355900, ftCreationTime.dwHighDateTime=0x1bd4bef, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9355900, ftLastWriteTime.dwHighDateTime=0x1bd4bef, nFileSizeHigh=0x0, nFileSizeLow=0xfe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02127_.WMF", cAlternateFileName="")) returned 1
	[0143.847] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02262_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02264_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02356_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02361_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02368_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02371_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02373_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02384_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02386_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc84, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02388_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02389_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xe64, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02390_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02398_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02400_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2120, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02404_.WMF", cAlternateFileName="")) returned 1
	[0143.848] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02405_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02407_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x28ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02413_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5951e930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xb24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02417_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02423_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02424_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a396cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02426_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02431_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02435_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02439_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3218, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02441_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02443_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02444_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa34, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02446_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02448_.WMF", cAlternateFileName="")) returned 1
	[0143.849] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc28, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02450_.WMF", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59544a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd70, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02451_.WMF", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NA02453_.WMF", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6a3bce50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1750, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBOOK_01.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1540, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCEAN_01.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x19f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTDR_01.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPER_01.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x195b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_01.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_02.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x215a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_03.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x17b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_04.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1784, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_05.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_06.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x19a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_07.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_08.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_09.MID", cAlternateFileName="")) returned 1
	[0143.850] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1511, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARNT_10.MID", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb480d800, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb480d800, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x6140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00013_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed5100, ftCreationTime.dwHighDateTime=0x1bd4b33, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0ed5100, ftLastWriteTime.dwHighDateTime=0x1bd4b33, nFileSizeHigh=0x0, nFileSizeLow=0x411a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00014_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00034_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f647900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f647900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00049_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e334c00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e334c00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x4d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00050_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d021f00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c68c90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d021f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x47ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00052_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00231_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xaf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00272_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c9b200, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0c9b200, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00468_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d320700, ftCreationTime.dwHighDateTime=0x1bd4b43, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d320700, ftLastWriteTime.dwHighDateTime=0x1bd4b43, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00478_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb32c0c00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb32c0c00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00485_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d627000, ftCreationTime.dwHighDateTime=0x1bd98a5, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5d627000, ftLastWriteTime.dwHighDateTime=0x1bd98a5, nFileSizeHigh=0x0, nFileSizeLow=0x1402c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00489_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb32c0c00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb32c0c00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00531_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33585700, ftCreationTime.dwHighDateTime=0x1bf3bda, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33585700, ftLastWriteTime.dwHighDateTime=0x1bf3bda, nFileSizeHigh=0x0, nFileSizeLow=0x8da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00542_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b853b00, ftCreationTime.dwHighDateTime=0x1bd4b14, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7b853b00, ftLastWriteTime.dwHighDateTime=0x1bd4b14, nFileSizeHigh=0x0, nFileSizeLow=0x140c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00555_.WMF", cAlternateFileName="")) returned 1
	[0143.851] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30066900, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x30066900, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x26b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00559_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17bf3a00, ftCreationTime.dwHighDateTime=0x1bd4b35, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bf3a00, ftLastWriteTime.dwHighDateTime=0x1bd4b35, nFileSizeHigh=0x0, nFileSizeLow=0x5670, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00563_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00578_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x896e9800, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x896e9800, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1928, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00608_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c352400, ftCreationTime.dwHighDateTime=0x1bd4b30, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c352400, ftLastWriteTime.dwHighDateTime=0x1bd4b30, nFileSizeHigh=0x0, nFileSizeLow=0x4cea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00633_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bd0f200, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bd0f200, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0xb12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00640_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883d6b00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x883d6b00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x6028, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00668_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9c1f00, ftCreationTime.dwHighDateTime=0x1bd4b32, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3a9c1f00, ftLastWriteTime.dwHighDateTime=0x1bd4b32, nFileSizeHigh=0x0, nFileSizeLow=0x108a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00685_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78490a00, ftCreationTime.dwHighDateTime=0x1bf0b13, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78490a00, ftLastWriteTime.dwHighDateTime=0x1bf0b13, nFileSizeHigh=0x0, nFileSizeLow=0x112e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00686_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45d3900, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb45d3900, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00693_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49cc9e00, ftCreationTime.dwHighDateTime=0x1bd4b2d, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49cc9e00, ftLastWriteTime.dwHighDateTime=0x1bd4b2d, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00720_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe80c3400, ftCreationTime.dwHighDateTime=0x1bd4b2c, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe80c3400, ftLastWriteTime.dwHighDateTime=0x1bd4b2c, nFileSizeHigh=0x0, nFileSizeLow=0x1afc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00723_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d02b300, ftCreationTime.dwHighDateTime=0x1c04210, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d02b300, ftLastWriteTime.dwHighDateTime=0x1c04210, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00726_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfefd5700, ftCreationTime.dwHighDateTime=0x1bd4b29, ftLastAccessTime.dwLowDateTime=0x59c8edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfefd5700, ftLastWriteTime.dwHighDateTime=0x1bd4b29, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00737_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe289fc00, ftCreationTime.dwHighDateTime=0x1bd4ae2, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe289fc00, ftLastWriteTime.dwHighDateTime=0x1bd4ae2, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00833_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870c3e00, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x870c3e00, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x1908, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00898_.WMF", cAlternateFileName="")) returned 1
	[0143.852] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bb8f800, ftCreationTime.dwHighDateTime=0x1bd4b1c, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9bb8f800, ftLastWriteTime.dwHighDateTime=0x1bd4b1c, nFileSizeHigh=0x0, nFileSizeLow=0x3100, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00934_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ca3200, ftCreationTime.dwHighDateTime=0x1bd4b11, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24ca3200, ftLastWriteTime.dwHighDateTime=0x1bd4b11, nFileSizeHigh=0x0, nFileSizeLow=0x2904, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE00998_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c97c200, ftCreationTime.dwHighDateTime=0x1bf1118, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c97c200, ftLastWriteTime.dwHighDateTime=0x1bf1118, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01160_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5efa1c00, ftCreationTime.dwHighDateTime=0x1bf1118, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5efa1c00, ftLastWriteTime.dwHighDateTime=0x1bf1118, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01172_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb58e6600, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb58e6600, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01191_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e9600, ftCreationTime.dwHighDateTime=0x1bd4b0c, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea5e9600, ftLastWriteTime.dwHighDateTime=0x1bd4b0c, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01661_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE01797_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02120_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02169_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8378b700, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8378b700, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x75e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02262_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x824e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02263_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa753f100, ftCreationTime.dwHighDateTime=0x1bd4b13, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa753f100, ftLastWriteTime.dwHighDateTime=0x1bd4b13, nFileSizeHigh=0x0, nFileSizeLow=0x62b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02265_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3f02900, ftCreationTime.dwHighDateTime=0x1bd4b13, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3f02900, ftLastWriteTime.dwHighDateTime=0x1bd4b13, nFileSizeHigh=0x0, nFileSizeLow=0x78e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02267_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe53000, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fe53000, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x6f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02270_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9ebd00, ftCreationTime.dwHighDateTime=0x1c0033f, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f9ebd00, ftLastWriteTime.dwHighDateTime=0x1c0033f, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02278_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2108500, ftCreationTime.dwHighDateTime=0x1bd4b17, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2108500, ftLastWriteTime.dwHighDateTime=0x1bd4b17, nFileSizeHigh=0x0, nFileSizeLow=0x6928, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02280_.WMF", cAlternateFileName="")) returned 1
	[0143.853] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32fdb00, ftCreationTime.dwHighDateTime=0x1bf3250, ftLastAccessTime.dwLowDateTime=0x59cb4f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32fdb00, ftLastWriteTime.dwHighDateTime=0x1bf3250, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02282_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffb65800, ftCreationTime.dwHighDateTime=0x1bf3488, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffb65800, ftLastWriteTime.dwHighDateTime=0x1bf3488, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02285_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bf9300, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6bf9300, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x4584, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02287_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f0c000, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7f0c000, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x76e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02288_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f0c000, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7f0c000, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x5850, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02293_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406e600, ftCreationTime.dwHighDateTime=0x1bf3a32, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x406e600, ftLastWriteTime.dwHighDateTime=0x1bf3a32, nFileSizeHigh=0x0, nFileSizeLow=0x5328, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02296_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf911f00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf911f00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02369_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa494d400, ftCreationTime.dwHighDateTime=0x1bd4af2, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa494d400, ftLastWriteTime.dwHighDateTime=0x1bd4af2, nFileSizeHigh=0x0, nFileSizeLow=0x39f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02522_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02950_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE02957_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b17c400, ftCreationTime.dwHighDateTime=0x1bd4af8, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b17c400, ftLastWriteTime.dwHighDateTime=0x1bd4af8, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03236_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b00e400, ftCreationTime.dwHighDateTime=0x1bd4afa, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b00e400, ftLastWriteTime.dwHighDateTime=0x1bd4afa, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03241_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb921ed00, ftCreationTime.dwHighDateTime=0x1bf323f, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb921ed00, ftLastWriteTime.dwHighDateTime=0x1bf323f, nFileSizeHigh=0x0, nFileSizeLow=0x3380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03257_.WMF", cAlternateFileName="")) returned 1
	[0143.854] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31379600, ftCreationTime.dwHighDateTime=0x1bd4ae3, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31379600, ftLastWriteTime.dwHighDateTime=0x1bd4ae3, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03331_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe160cb00, ftCreationTime.dwHighDateTime=0x1bd4af2, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe160cb00, ftLastWriteTime.dwHighDateTime=0x1bd4af2, nFileSizeHigh=0x0, nFileSizeLow=0x282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03339_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2108, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03451_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d695e00, ftCreationTime.dwHighDateTime=0x1bd4bcf, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d695e00, ftLastWriteTime.dwHighDateTime=0x1bd4bcf, nFileSizeHigh=0x0, nFileSizeLow=0x1f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03453_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03459_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03464_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x41a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03466_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3998, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03470_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3716500, ftCreationTime.dwHighDateTime=0x1bd4be9, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3716500, ftLastWriteTime.dwHighDateTime=0x1bd4be9, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03513_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32062000, ftCreationTime.dwHighDateTime=0x1bd4be8, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32062000, ftLastWriteTime.dwHighDateTime=0x1bd4be8, nFileSizeHigh=0x0, nFileSizeLow=0x1868, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03668_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb300a00, ftCreationTime.dwHighDateTime=0x1bd4be7, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb300a00, ftLastWriteTime.dwHighDateTime=0x1bd4be7, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03731_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd176e300, ftCreationTime.dwHighDateTime=0x1bd4be7, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd176e300, ftLastWriteTime.dwHighDateTime=0x1bd4be7, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03795_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14937f00, ftCreationTime.dwHighDateTime=0x1bd4c05, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14937f00, ftLastWriteTime.dwHighDateTime=0x1bd4c05, nFileSizeHigh=0x0, nFileSizeLow=0x1020, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE04050_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x37f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05665_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f24df00, ftCreationTime.dwHighDateTime=0x1bd4bf5, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6f24df00, ftLastWriteTime.dwHighDateTime=0x1bd4bf5, nFileSizeHigh=0x0, nFileSizeLow=0x167c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05710_.WMF", cAlternateFileName="")) returned 1
	[0143.855] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49073b00, ftCreationTime.dwHighDateTime=0x1bd4c05, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49073b00, ftLastWriteTime.dwHighDateTime=0x1bd4c05, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05869_.WMF", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44428700, ftCreationTime.dwHighDateTime=0x1bd4c05, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44428700, ftLastWriteTime.dwHighDateTime=0x1bd4c05, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05870_.WMF", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x671b6e00, ftCreationTime.dwHighDateTime=0x1bd4bfa, ftLastAccessTime.dwLowDateTime=0x59cdb0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x671b6e00, ftLastWriteTime.dwHighDateTime=0x1bd4bfa, nFileSizeHigh=0x0, nFileSizeLow=0x7fce, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05930_.WMF", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf03a600, ftCreationTime.dwHighDateTime=0x1bd4bf5, ftLastAccessTime.dwLowDateTime=0x6cdb1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf03a600, ftLastWriteTime.dwHighDateTime=0x1bd4bf5, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06049_.WMF", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x59d01210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4048, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06450_.WMF", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15a1100, ftCreationTime.dwHighDateTime=0x1bd4e4a, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf15a1100, ftLastWriteTime.dwHighDateTime=0x1bd4e4a, nFileSizeHigh=0x0, nFileSizeLow=0x629, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00601G.GIF", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe86e3d00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe86e3d00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x8628, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00780U.BMP", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c100, ftCreationTime.dwHighDateTime=0x1bd4e55, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45c100, ftLastWriteTime.dwHighDateTime=0x1bd4e55, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01035U.BMP", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x211bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01046J.JPG", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4a3a00, ftCreationTime.dwHighDateTime=0x1bd50ad, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcd4a3a00, ftLastWriteTime.dwHighDateTime=0x1bd50ad, nFileSizeHigh=0x0, nFileSizeLow=0xa202, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01179J.JPG", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x18be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01213K.JPG", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1c94, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01221K.JPG", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37b36e00, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37b36e00, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01235U.BMP", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83e7e00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc83e7e00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01236U.BMP", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a3d9150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01239K.JPG", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbeb51600, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbeb51600, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01247U.BMP", cAlternateFileName="")) returned 1
	[0143.856] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72230800, ftCreationTime.dwHighDateTime=0x1bd4e5f, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72230800, ftLastWriteTime.dwHighDateTime=0x1bd4e5f, nFileSizeHigh=0x0, nFileSizeLow=0x1e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01255G.GIF", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d799000, ftCreationTime.dwHighDateTime=0x1bd4e53, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d799000, ftLastWriteTime.dwHighDateTime=0x1bd4e53, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01265U.BMP", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8bf3500, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb8bf3500, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01332U.BMP", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa711900, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaa711900, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01478U.BMP", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47b3800, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa47b3800, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01562U.BMP", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fb68400, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9fb68400, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01607U.BMP", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35a3dc00, ftCreationTime.dwHighDateTime=0x1bd4e60, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x35a3dc00, ftLastWriteTime.dwHighDateTime=0x1bd4e60, nFileSizeHigh=0x0, nFileSizeLow=0x9abe, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01931J.JPG", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78964d00, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78964d00, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x451e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02028K.JPG", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a415a00, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a415a00, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02039U.BMP", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x857ca600, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x857ca600, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02040U.BMP", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf32cd000, ftCreationTime.dwHighDateTime=0x1bd4e5c, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf32cd000, ftLastWriteTime.dwHighDateTime=0x1bd4e5c, nFileSizeHigh=0x0, nFileSizeLow=0x6afc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02053J.JPG", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b7f200, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x5a3ff2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x80b7f200, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02058U.BMP", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c73f500, ftCreationTime.dwHighDateTime=0x1bd4e54, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c73f500, ftLastWriteTime.dwHighDateTime=0x1bd4e54, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02062U.BMP", cAlternateFileName="")) returned 1
	[0143.857] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa943ea00, ftCreationTime.dwHighDateTime=0x1bd4e5c, ftLastAccessTime.dwLowDateTime=0x6ce6f8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa943ea00, ftLastWriteTime.dwHighDateTime=0x1bd4e5c, nFileSizeHigh=0x0, nFileSizeLow=0x7297, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02069J.JPG", cAlternateFileName="")) returned 1
	[0143.858] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0144.052] GetProcessHeap () returned 0x800000
	[0144.052] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0144.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0144.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0144.053] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0144.054] GetProcessHeap () returned 0x800000
	[0144.054] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0144.054] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0144.054] GetProcessHeap () returned 0x800000
	[0144.054] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0144.054] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0144.054] GetProcessHeap () returned 0x800000
	[0144.054] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0144.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0144.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0144.056] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0144.056] GetProcessHeap () returned 0x800000
	[0144.056] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0144.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0144.059] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0144.060] GetProcessHeap () returned 0x800000
	[0144.060] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0144.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0144.062] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0144.063] GetProcessHeap () returned 0x800000
	[0144.063] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0144.063] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0144.063] GetProcessHeap () returned 0x800000
	[0144.063] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0144.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0144.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0144.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0144.066] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0144.067] GetProcessHeap () returned 0x800000
	[0144.067] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0144.068] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0144.069] GetProcessHeap () returned 0x800000
	[0144.069] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0144.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0144.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0144.069] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0144.069] GetProcessHeap () returned 0x800000
	[0144.069] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0144.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0144.072] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0144.073] GetProcessHeap () returned 0x800000
	[0144.073] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0144.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0144.078] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0144.079] GetProcessHeap () returned 0x800000
	[0144.079] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0144.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0144.082] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0144.083] GetProcessHeap () returned 0x800000
	[0144.083] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0144.083] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0144.083] GetProcessHeap () returned 0x800000
	[0144.083] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0144.083] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0144.083] GetProcessHeap () returned 0x800000
	[0144.083] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0144.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0144.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x22a7990, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x22a7990, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0144.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0144.095] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0144.095] GetProcessHeap () returned 0x800000
	[0144.095] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0144.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0144.097] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0144.098] GetProcessHeap () returned 0x800000
	[0144.098] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0144.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1528
	[0144.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0144.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0144.993] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0144.994] GetProcessHeap () returned 0x800000
	[0144.994] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0144.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0145.117] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0145.117] GetProcessHeap () returned 0x800000
	[0145.117] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0145.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0145.235] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0145.236] GetProcessHeap () returned 0x800000
	[0145.236] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0145.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0145.368] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0145.368] GetProcessHeap () returned 0x800000
	[0145.368] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0145.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0145.524] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0145.524] GetProcessHeap () returned 0x800000
	[0145.524] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0145.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0145.625] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0145.626] GetProcessHeap () returned 0x800000
	[0145.626] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0145.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0145.732] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0145.732] GetProcessHeap () returned 0x800000
	[0145.732] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0145.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0145.824] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0145.824] GetProcessHeap () returned 0x800000
	[0145.824] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0145.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0145.940] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0145.945] GetProcessHeap () returned 0x800000
	[0145.946] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0145.948] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oasis.css", cAlternateFileName="")) returned 1
	[0145.952] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OliveGreen.css", cAlternateFileName="OLIVEG~1.CSS")) returned 1
	[0145.955] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x705, dwReserved0=0x0, dwReserved1=0x0, cFileName="Premium.css", cAlternateFileName="")) returned 1
	[0145.960] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1
	[0145.962] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79023600, ftCreationTime.dwHighDateTime=0x1ca2b70, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x79023600, ftLastWriteTime.dwHighDateTime=0x1ca2b70, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1
	[0145.962] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1
	[0145.962] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60dfe600, ftCreationTime.dwHighDateTime=0x1ca2b73, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x60dfe600, ftLastWriteTime.dwHighDateTime=0x1ca2b73, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="RTF_SP~1.GIF")) returned 1
	[0145.962] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1
	[0145.963] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate", cAlternateFileName="")) returned 1
	[0146.147] GetProcessHeap () returned 0x800000
	[0146.147] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0146.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0146.294] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.294] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0146.294] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0146.294] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0146.294] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0146.294] GetProcessHeap () returned 0x800000
	[0146.294] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0146.294] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slate.css", cAlternateFileName="")) returned 1
	[0146.294] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x74e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlateBlue.css", cAlternateFileName="SLATEB~1.CSS")) returned 1
	[0146.294] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue", cAlternateFileName="")) returned 1
	[0146.295] GetProcessHeap () returned 0x800000
	[0146.295] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0146.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0146.295] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.295] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0146.295] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0146.295] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0146.295] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0146.295] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0146.295] GetProcessHeap () returned 0x800000
	[0146.295] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0146.295] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.css", cAlternateFileName="")) returned 1
	[0146.295] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions", cAlternateFileName="SOLUTI~1")) returned 1
	[0146.296] GetProcessHeap () returned 0x800000
	[0146.296] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0146.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0146.541] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.541] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow.png", cAlternateFileName="")) returned 1
	[0146.541] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x931, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document.gif", cAlternateFileName="")) returned 1
	[0146.541] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x832, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.gif", cAlternateFileName="")) returned 1
	[0146.541] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gradient.png", cAlternateFileName="")) returned 1
	[0146.541] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Main.gif", cAlternateFileName="")) returned 1
	[0146.542] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Person.gif", cAlternateFileName="")) returned 1
	[0146.542] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 1
	[0146.542] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 0
	[0146.542] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0146.542] GetProcessHeap () returned 0x800000
	[0146.543] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0146.543] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x19cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions.css", cAlternateFileName="SOLUTI~1.CSS")) returned 1
	[0146.543] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Doc.css", cAlternateFileName="SOLUTI~2.CSS")) returned 1
	[0146.543] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Generic.css", cAlternateFileName="SOLUTI~3.CSS")) returned 1
	[0146.543] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Person.css", cAlternateFileName="SOLUTI~4.CSS")) returned 1
	[0146.543] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solutions_Response.css", cAlternateFileName="SOB0ED~1.CSS")) returned 1
	[0146.543] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen", cAlternateFileName="SPRING~1")) returned 1
	[0146.543] GetProcessHeap () returned 0x800000
	[0146.543] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0146.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0146.694] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.694] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1
	[0146.694] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0146.694] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0146.694] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0146.694] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0146.695] GetProcessHeap () returned 0x800000
	[0146.695] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0146.695] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd01, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpringGreen.css", cAlternateFileName="SPRING~1.CSS")) returned 1
	[0146.695] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts.css", cAlternateFileName="")) returned 1
	[0146.695] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STS2", cAlternateFileName="")) returned 1
	[0146.695] GetProcessHeap () returned 0x800000
	[0146.695] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0146.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0146.807] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.807] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0146.807] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0146.807] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0146.807] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0146.807] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0146.807] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0146.807] GetProcessHeap () returned 0x800000
	[0146.807] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0146.807] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sts2.css", cAlternateFileName="")) returned 1
	[0146.807] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl", cAlternateFileName="")) returned 1
	[0146.807] GetProcessHeap () returned 0x800000
	[0146.807] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0146.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0146.941] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.941] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1
	[0146.941] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1
	[0146.941] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1
	[0146.941] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1
	[0146.941] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0
	[0146.941] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0146.941] GetProcessHeap () returned 0x800000
	[0146.942] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0146.942] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Swirl.css", cAlternateFileName="")) returned 1
	[0146.942] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Teal.css", cAlternateFileName="")) returned 1
	[0146.942] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x727, dwReserved0=0x0, dwReserved1=0x0, cFileName="TexturedBlue.css", cAlternateFileName="TEXTUR~1.CSS")) returned 1
	[0146.942] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 1
	[0146.942] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="VelvetRose.css", cAlternateFileName="VELVET~1.CSS")) returned 0
	[0146.942] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0146.942] GetProcessHeap () returned 0x800000
	[0146.942] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0146.942] FindNextFileW (in: hFindFile=0x34d1528, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 0
	[0146.942] FindClose (in: hFindFile=0x34d1528 | out: hFindFile=0x34d1528) returned 1
	[0146.942] GetProcessHeap () returned 0x800000
	[0146.942] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0146.942] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c91e000, ftCreationTime.dwHighDateTime=0x1cacb46, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c91e000, ftLastWriteTime.dwHighDateTime=0x1cacb46, nFileSizeHigh=0x0, nFileSizeLow=0x863360, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1
	[0146.943] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXC", cAlternateFileName="GROOVE~1.HXC")) returned 1
	[0146.943] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXT", cAlternateFileName="GROOVE~1.HXT")) returned 1
	[0146.943] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_F_COL.HXK", cAlternateFileName="GROOVE~1.HXK")) returned 1
	[0146.943] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_K_COL.HXK", cAlternateFileName="GROOVE~2.HXK")) returned 1
	[0146.943] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x8d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.VSL", cAlternateFileName="")) returned 1
	[0146.943] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ede00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDIFF.VRD", cAlternateFileName="")) returned 1
	[0146.943] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ede00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDUCT.VRD", cAlternateFileName="")) returned 1
	[0146.943] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x75790, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFINTL.DLL", cAlternateFileName="")) returned 1
	[0146.943] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98679500, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98679500, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x174d06, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.HXS", cAlternateFileName="")) returned 1
	[0146.943] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98679500, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98679500, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x697e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR.HXS", cAlternateFileName="INFOPA~1.HXS")) returned 1
	[0147.077] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXC", cAlternateFileName="INFOPA~2.HXC")) returned 1
	[0147.077] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXT", cAlternateFileName="INFOPA~2.HXT")) returned 1
	[0147.077] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_F_COL.HXK", cAlternateFileName="INFOPA~3.HXK")) returned 1
	[0147.078] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_K_COL.HXK", cAlternateFileName="INFOPA~4.HXK")) returned 1
	[0147.078] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXC", cAlternateFileName="INFOPA~1.HXC")) returned 1
	[0147.078] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXT", cAlternateFileName="INFOPA~1.HXT")) returned 1
	[0147.078] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_F_COL.HXK", cAlternateFileName="INFOPA~1.HXK")) returned 1
	[0147.078] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_K_COL.HXK", cAlternateFileName="INFOPA~2.HXK")) returned 1
	[0147.078] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x108a400, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x108a400, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="INSTLIST.VRD", cAlternateFileName="")) returned 1
	[0147.078] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37deba00, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37deba00, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVENTRY.VRD", cAlternateFileName="")) returned 1
	[0147.638] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3491f00, ftCreationTime.dwHighDateTime=0x1ca0f52, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3491f00, ftLastWriteTime.dwHighDateTime=0x1ca0f52, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Invite or Link.one", cAlternateFileName="INVITE~1.ONE")) returned 1
	[0147.638] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x22a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDSINTL.DLL", cAlternateFileName="")) returned 1
	[0147.638] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xd7b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDINTL.DLL", cAlternateFileName="")) returned 1
	[0147.638] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3e7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLKINTL.DLL", cAlternateFileName="IPOLKI~1.DLL")) returned 1
	[0147.638] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f81800, ftCreationTime.dwHighDateTime=0x1c913a0, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66f81800, ftLastWriteTime.dwHighDateTime=0x1c913a0, nFileSizeHigh=0x0, nFileSizeLow=0x3cebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issue Tracking.gta", cAlternateFileName="ISSUET~1.GTA")) returned 1
	[0147.638] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JADE.CSS", cAlternateFileName="")) returned 1
	[0147.638] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe69b00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50a35820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xafe69b00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x9980, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.VSL", cAlternateFileName="")) returned 1
	[0147.638] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x112970, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL", cAlternateFileName="")) returned 1
	[0147.638] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.IDX_DLL", cAlternateFileName="MAPIRD~1.IDX")) returned 1
	[0147.638] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x907d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x100fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MERES.DLL", cAlternateFileName="")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe105a200, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe105a200, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6cf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.DLL", cAlternateFileName="")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x9b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.IDX_DLL", cAlternateFileName="MOR6IN~1.IDX")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b00b00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b00b00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x58c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOVE.VRD", cAlternateFileName="")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x3178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXRES.DLL", cAlternateFileName="")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0xa3f874, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV.HXS", cAlternateFileName="MSACCE~1.HXS")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXC", cAlternateFileName="MSACCE~1.HXC")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXT", cAlternateFileName="MSACCE~1.HXT")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_F_COL.HXK", cAlternateFileName="MSACCE~1.HXK")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_K_COL.HXK", cAlternateFileName="MSACCE~2.HXK")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x3b2c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.HXS", cAlternateFileName="")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXC", cAlternateFileName="MSACCE~2.HXC")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXT", cAlternateFileName="MSACCE~2.HXT")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_F_COL.HXK", cAlternateFileName="MSACCE~3.HXK")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_K_COL.HXK", cAlternateFileName="MSACCE~4.HXK")) returned 1
	[0147.639] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x127f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAIN.DLL", cAlternateFileName="")) returned 1
	[0147.640] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x589e0a00, ftCreationTime.dwHighDateTime=0x1c99224, ftLastAccessTime.dwLowDateTime=0x980ce30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x589e0a00, ftLastWriteTime.dwHighDateTime=0x1c99224, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1
	[0147.640] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15bf200, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe15bf200, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x69560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.HXS", cAlternateFileName="")) returned 1
	[0147.640] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXC", cAlternateFileName="MSOUC_~1.HXC")) returned 1
	[0147.640] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXT", cAlternateFileName="MSOUC_~1.HXT")) returned 1
	[0147.640] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_F_COL.HXK", cAlternateFileName="MSOUC_~1.HXK")) returned 1
	[0147.640] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_K_COL.HXK", cAlternateFileName="MSOUC_~2.HXK")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91408700, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91408700, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x487dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV.HXS", cAlternateFileName="MSPUBD~1.HXS")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXC", cAlternateFileName="MSPUBD~1.HXC")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXT", cAlternateFileName="MSPUBD~1.HXT")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_F_COL.HXK", cAlternateFileName="MSPUBD~1.HXK")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_K_COL.HXK", cAlternateFileName="MSPUBD~2.HXK")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9271b400, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9271b400, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x1cc936, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.HXS", cAlternateFileName="")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe30400, ftCreationTime.dwHighDateTime=0x1c2a1b4, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8fe30400, ftLastWriteTime.dwHighDateTime=0x1c2a1b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.OPG", cAlternateFileName="")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXC", cAlternateFileName="MSPUB_~1.HXC")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXT", cAlternateFileName="MSPUB_~1.HXT")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_F_COL.HXK", cAlternateFileName="MSPUB_~1.HXK")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_K_COL.HXK", cAlternateFileName="MSPUB_~2.HXK")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8527700, ftCreationTime.dwHighDateTime=0x1c33a9f, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd8527700, ftLastWriteTime.dwHighDateTime=0x1c33a9f, nFileSizeHigh=0x0, nFileSizeLow=0x7d682, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.CHM", cAlternateFileName="")) returned 1
	[0147.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x15d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTINTL.DLL", cAlternateFileName="")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x5f254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.HXS", cAlternateFileName="")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXC", cAlternateFileName="MSTORE~1.HXC")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXT", cAlternateFileName="MSTORE~1.HXT")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_F_COL.HXK", cAlternateFileName="MSTORE~1.HXK")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_K_COL.HXK", cAlternateFileName="MSTORE~2.HXK")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.CSS", cAlternateFileName="")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK1.VRD", cAlternateFileName="")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK2.VRD", cAlternateFileName="")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK3.VRD", cAlternateFileName="")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeefd00, ftCreationTime.dwHighDateTime=0x1c2c076, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeaeefd00, ftLastWriteTime.dwHighDateTime=0x1c2c076, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCCMPVRD.XML", cAlternateFileName="")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b675400, ftCreationTime.dwHighDateTime=0x1c2c0e2, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4b675400, ftLastWriteTime.dwHighDateTime=0x1c2c0e2, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde567d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xde567d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x81380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWCI.DLL", cAlternateFileName="")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x6fd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.HXS", cAlternateFileName="")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc74da00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc74da00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISINTL.DLL", cAlternateFileName="")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXC", cAlternateFileName="")) returned 1
	[0147.771] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXT", cAlternateFileName="")) returned 1
	[0147.772] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_F_COL.HXK", cAlternateFileName="OIS_F_~1.HXK")) returned 1
	[0147.772] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_K_COL.HXK", cAlternateFileName="OIS_K_~1.HXK")) returned 1
	[0147.772] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8de21e00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8de21e00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x62180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL", cAlternateFileName="")) returned 1
	[0147.772] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70618400, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70618400, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.IDX_DLL", cAlternateFileName="OMSINT~1.IDX")) returned 1
	[0147.927] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xdf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONELEV.EXE", cAlternateFileName="")) returned 1
	[0147.927] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.HXS", cAlternateFileName="")) returned 1
	[0147.927] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabfa4f00, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabfa4f00, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x25e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPCIntl.dll", cAlternateFileName="ONENOT~1.DLL")) returned 1
	[0147.927] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXC", cAlternateFileName="ONENOT~1.HXC")) returned 1
	[0147.927] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXT", cAlternateFileName="ONENOT~1.HXT")) returned 1
	[0147.927] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_F_COL.HXK", cAlternateFileName="ONENOT~1.HXK")) returned 1
	[0147.927] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_K_COL.HXK", cAlternateFileName="ONENOT~2.HXK")) returned 1
	[0147.927] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb96d3b00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb96d3b00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x148d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONGuide.onepkg", cAlternateFileName="ONGUID~1.ONE")) returned 1
	[0147.927] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x341f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL", cAlternateFileName="")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3266200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3266200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.IDX_DLL", cAlternateFileName="ONINTL~1.IDX")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3266200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3266200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1bf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.IDX_DLL", cAlternateFileName="ONINTL~2.IDX")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5439200, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50af3f00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5439200, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH.VRD", cAlternateFileName="")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.VSL", cAlternateFileName="")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5439200, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5439200, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGPOS.VRD", cAlternateFileName="")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dc7c00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb5dc7c00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x105b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.VSL", cAlternateFileName="")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57a100, ftCreationTime.dwHighDateTime=0x1cac466, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4c57a100, ftLastWriteTime.dwHighDateTime=0x1cac466, nFileSizeHigh=0x0, nFileSizeLow=0x4790, dwReserved0=0x0, dwReserved1=0x0, cFileName="ospintl.dll", cAlternateFileName="")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8c4100, ftCreationTime.dwHighDateTime=0x1c67eda, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed8c4100, ftLastWriteTime.dwHighDateTime=0x1c67eda, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTFORM.DAT", cAlternateFileName="")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2fc5400, ftCreationTime.dwHighDateTime=0x1ca0f51, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2fc5400, ftLastWriteTime.dwHighDateTime=0x1ca0f51, nFileSizeHigh=0x0, nFileSizeLow=0x970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLBAR.INF", cAlternateFileName="")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7df9900, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x13f0930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7df9900, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x644d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL", cAlternateFileName="")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x1d380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.IDX_DLL", cAlternateFileName="OUTLLI~1.IDX")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x1416a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x46f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.IDX_DLL", cAlternateFileName="OUTLLI~2.IDX")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa80e2700, ftCreationTime.dwHighDateTime=0x1ca8f17, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa80e2700, ftLastWriteTime.dwHighDateTime=0x1ca8f17, nFileSizeHigh=0x0, nFileSizeLow=0x6aa3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV.HXS", cAlternateFileName="OUTLOO~1.HXS")) returned 1
	[0147.928] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXC", cAlternateFileName="OUTLOO~1.HXC")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXT", cAlternateFileName="OUTLOO~1.HXT")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_F_COL.HXK", cAlternateFileName="OUTLOO~1.HXK")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_K_COL.HXK", cAlternateFileName="OUTLOO~2.HXK")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3475b500, ftCreationTime.dwHighDateTime=0x1ca95bc, ftLastAccessTime.dwLowDateTime=0x1488eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3475b500, ftLastWriteTime.dwHighDateTime=0x1ca95bc, nFileSizeHigh=0x0, nFileSizeLow=0x13a57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HOL", cAlternateFileName="")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ede2d00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8ede2d00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HXS", cAlternateFileName="")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXC", cAlternateFileName="OUTLOO~2.HXC")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXT", cAlternateFileName="OUTLOO~2.HXT")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_F_COL.HXK", cAlternateFileName="OUTLOO~3.HXK")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_K_COL.HXK", cAlternateFileName="OUTLOO~4.HXK")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.H", cAlternateFileName="")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0xa87, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.INI", cAlternateFileName="")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1f760, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL", cAlternateFileName="")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x2b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.IDX_DLL", cAlternateFileName="OUTLWV~1.IDX")) returned 1
	[0147.929] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSPORT.CSS", cAlternateFileName="")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASTEL.CSS", cAlternateFileName="")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b8c480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.VSL", cAlternateFileName="")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd5800, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x50bfe8a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5cd5800, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPELINE.VRD", cAlternateFileName="")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xdf0d2c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x33a380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTL.DLL", cAlternateFileName="")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTLC.DLL", cAlternateFileName="")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50c24a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMENURES.DLL", cAlternateFileName="")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f5a00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x900f5a00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4cf264, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV.HXS", cAlternateFileName="POWERP~1.HXS")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXC", cAlternateFileName="POWERP~1.HXC")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXT", cAlternateFileName="POWERP~1.HXT")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_F_COL.HXK", cAlternateFileName="POWERP~1.HXK")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_K_COL.HXK", cAlternateFileName="POWERP~2.HXK")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02ac500, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe02ac500, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x68013d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.HXS", cAlternateFileName="")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXC", cAlternateFileName="POWERP~2.HXC")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXT", cAlternateFileName="POWERP~2.HXT")) returned 1
	[0147.930] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_F_COL.HXK", cAlternateFileName="POWERP~3.HXK")) returned 1
	[0147.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_K_COL.HXK", cAlternateFileName="POWERP~4.HXK")) returned 1
	[0147.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab1b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e6fbb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcab1b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x139968, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL", cAlternateFileName="")) returned 1
	[0147.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e38b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45e38b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x9580, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.IDX_DLL", cAlternateFileName="PPINTL~1.IDX")) returned 1
	[0147.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e38b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e6fbb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45e38b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x22180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.IDX_DLL", cAlternateFileName="PPINTL~2.IDX")) returned 1
	[0147.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50c4ab60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRIMARY.CSS", cAlternateFileName="")) returned 1
	[0147.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50c70cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x21788, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSL", cAlternateFileName="")) returned 1
	[0147.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e830b00, ftCreationTime.dwHighDateTime=0x1ca4730, ftLastAccessTime.dwLowDateTime=0x50c70cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7e830b00, ftLastWriteTime.dwHighDateTime=0x1ca4730, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSS", cAlternateFileName="")) returned 1
	[0147.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4722d700, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4722d700, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.DOC", cAlternateFileName="")) returned 1
	[0147.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9744d100, ftCreationTime.dwHighDateTime=0x1c7e3af, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9744d100, ftLastWriteTime.dwHighDateTime=0x1c7e3af, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.PPT", cAlternateFileName="")) returned 1
	[0147.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51dd6c00, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x51dd6c00, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.XLS", cAlternateFileName="")) returned 1
	[0147.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f1aa00, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45f1aa00, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.DOC", cAlternateFileName="")) returned 1
	[0147.931] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9744d100, ftCreationTime.dwHighDateTime=0x1c7e3af, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9744d100, ftLastWriteTime.dwHighDateTime=0x1c7e3af, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.PPT", cAlternateFileName="")) returned 1
	[0148.044] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d18b800, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d18b800, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.XLS", cAlternateFileName="")) returned 1
	[0148.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e7da00, ftCreationTime.dwHighDateTime=0x1c5c981, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99e7da00, ftLastWriteTime.dwHighDateTime=0x1c5c981, nFileSizeHigh=0x0, nFileSizeLow=0x4f777, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHKEY.DAT", cAlternateFileName="")) returned 1
	[0148.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLEX.DAT", cAlternateFileName="")) returned 1
	[0148.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0xcd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLTS.DAT", cAlternateFileName="")) returned 1
	[0148.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0xd18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHPHN.DAT", cAlternateFileName="")) returned 1
	[0148.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b190700, ftCreationTime.dwHighDateTime=0x1c5c981, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b190700, ftLastWriteTime.dwHighDateTime=0x1c5c981, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHSRN.DAT", cAlternateFileName="")) returned 1
	[0148.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe236cf00, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe236cf00, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL", cAlternateFileName="")) returned 1
	[0148.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x10980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.IDX_DLL", cAlternateFileName="PUB6IN~1.IDX")) returned 1
	[0148.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x41b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.IDX_DLL", cAlternateFileName="PUB6IN~2.IDX")) returned 1
	[0148.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf925f00, ftCreationTime.dwHighDateTime=0x1c92dac, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf925f00, ftLastWriteTime.dwHighDateTime=0x1c92dac, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCOLOR.SCM", cAlternateFileName="")) returned 1
	[0148.067] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBFTSCM", cAlternateFileName="")) returned 1
	[0148.067] GetProcessHeap () returned 0x800000
	[0148.067] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0148.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0148.284] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0148.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c22e700, ftCreationTime.dwHighDateTime=0x1ca6669, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c22e700, ftLastWriteTime.dwHighDateTime=0x1ca6669, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1
	[0148.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47994900, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47994900, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1
	[0148.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b96a700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b96a700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1
	[0148.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a657a00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a657a00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1
	[0148.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29344d00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29344d00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1
	[0148.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1
	[0148.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1
	[0148.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d1f300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26d1f300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x233e6c00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x233e6c00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220d3f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x220d3f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20dc1200, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20dc1200, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e79b800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e79b800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d488b00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d488b00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c175e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c175e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae63100, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ae63100, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19b50400, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b50400, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1883d700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1883d700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1752aa00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1752aa00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f05000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f05000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1
	[0148.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bf2300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13bf2300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128df600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x128df600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66e800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb66e800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35bb00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa35bb00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff7b2600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff7b2600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fda00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43fda00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME32.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8755100, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8755100, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME33.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eebe900, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9eebe900, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d124, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME34.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce4c100, ftCreationTime.dwHighDateTime=0x1c69a52, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ce4c100, ftLastWriteTime.dwHighDateTime=0x1c69a52, nFileSizeHigh=0x0, nFileSizeLow=0x202f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME35.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94315400, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94315400, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME36.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad35f00, ftCreationTime.dwHighDateTime=0x1c69a52, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad35f00, ftLastWriteTime.dwHighDateTime=0x1c69a52, nFileSizeHigh=0x0, nFileSizeLow=0x205bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME37.CSS", cAlternateFileName="")) returned 1
	[0148.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8380de00, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8380de00, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME38.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532c200, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7532c200, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME39.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cda8700, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cda8700, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME40.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x621ff200, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x621ff200, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME41.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56343000, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56343000, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d920, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME42.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e61400, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47e61400, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e714, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME43.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37359e00, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37359e00, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1ecfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME44.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7b0900, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7b0900, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME45.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cfbc000, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1cfbc000, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME46.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a38500, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a38500, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f190, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME47.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7869600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7869600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f984, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME48.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa69a700, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa69a700, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1da6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME49.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e03f00, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0e03f00, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1f018, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME50.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1922be00, ftCreationTime.dwHighDateTime=0x1c69a7b, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1922be00, ftLastWriteTime.dwHighDateTime=0x1c69a7b, nFileSizeHigh=0x0, nFileSizeLow=0x1df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME51.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ce8a00, ftCreationTime.dwHighDateTime=0x1c69651, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1ce8a00, ftLastWriteTime.dwHighDateTime=0x1c69651, nFileSizeHigh=0x0, nFileSizeLow=0x1e254, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME52.CSS", cAlternateFileName="")) returned 1
	[0148.304] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d95100, ftCreationTime.dwHighDateTime=0x1c69a53, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74d95100, ftLastWriteTime.dwHighDateTime=0x1c69a53, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME53.CSS", cAlternateFileName="")) returned 1
	[0148.305] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c1eb00, ftCreationTime.dwHighDateTime=0x1c69597, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67c1eb00, ftLastWriteTime.dwHighDateTime=0x1c69597, nFileSizeHigh=0x0, nFileSizeLow=0x1f064, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME54.CSS", cAlternateFileName="")) returned 1
	[0148.305] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2a2e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f2a2e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 1
	[0148.305] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2a2e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f2a2e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 0
	[0148.305] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0148.305] GetProcessHeap () returned 0x800000
	[0148.305] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0148.305] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1
	[0148.305] GetProcessHeap () returned 0x800000
	[0148.305] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0148.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0148.538] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPERS.INI", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3bb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR10F.GIF", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR11F.GIF", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x46df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR12F.GIF", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x430d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR13F.GIF", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5cb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR14F.GIF", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR15F.GIF", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x399f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR16F.GIF", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2bb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR17F.GIF", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x41f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR18F.GIF", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR19F.GIF", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd98, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1B.GIF", cAlternateFileName="")) returned 1
	[0148.539] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR1F.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bac0cf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR20F.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR21F.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR22F.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x313b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR23F.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR24F.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd51e200, ftCreationTime.dwHighDateTime=0x1bdb5da, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbd51e200, ftLastWriteTime.dwHighDateTime=0x1bdb5da, nFileSizeHigh=0x0, nFileSizeLow=0x3187, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR25F.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1985, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR26F.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR27F.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x684, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28B.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1786, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR28F.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x11b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29B.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x59bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR29F.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3567a000, ftCreationTime.dwHighDateTime=0x1bdb36e, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3567a000, ftLastWriteTime.dwHighDateTime=0x1bdb36e, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2B.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR2F.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30B.GIF", cAlternateFileName="")) returned 1
	[0148.540] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR30F.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bae6e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31B.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x52da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR31F.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xf47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32B.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x910b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR32F.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1631, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33B.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d13, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR33F.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34B.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x95dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR34F.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x11ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35B.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR35F.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x23e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36B.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR36F.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR37F.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb0cfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xb819, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR38F.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xaf65, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR39F.GIF", cAlternateFileName="")) returned 1
	[0148.541] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3B.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4647, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR3F.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x10f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR40F.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x7d5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR41F.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xdf73, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR42F.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43B.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR43F.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3606, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44B.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3026, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR44F.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2019, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45B.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1ee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR45F.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb33110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46B.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1377, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR46F.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x80d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47B.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR47F.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48B.GIF", cAlternateFileName="")) returned 1
	[0148.542] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x178c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR48F.GIF", cAlternateFileName="")) returned 1
	[0148.543] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4a66, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49B.GIF", cAlternateFileName="")) returned 1
	[0148.543] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR49F.GIF", cAlternateFileName="")) returned 1
	[0148.543] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2a01, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4B.GIF", cAlternateFileName="")) returned 1
	[0148.543] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x76cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR4F.GIF", cAlternateFileName="")) returned 1
	[0148.543] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1001, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50B.GIF", cAlternateFileName="")) returned 1
	[0148.543] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR50F.GIF", cAlternateFileName="")) returned 1
	[0148.543] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4217, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51B.GIF", cAlternateFileName="")) returned 1
	[0148.742] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR51F.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5B.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb59270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xce72, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR5F.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x24dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6B.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR6F.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6054, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7B.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x70bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR7F.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8B.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2204, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR8F.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x445d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9B.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5aec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIR9F.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x189e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPAPERS.INI", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR00.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x13ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR10F.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1706, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR11F.GIF", cAlternateFileName="")) returned 1
	[0148.758] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x6499, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR12F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR13F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x645b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR14F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x452b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR15F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR16F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x34cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR17F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR18F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR19F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1B.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR1F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR20F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcafed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x42ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR21F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcd6030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1983, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR22F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bcd6030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2a71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR23F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3f61, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR24F.GIF", cAlternateFileName="")) returned 1
	[0148.759] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x326c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR25F.GIF", cAlternateFileName="")) returned 1
	[0148.760] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2072, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR26F.GIF", cAlternateFileName="")) returned 1
	[0148.760] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x20f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR27F.GIF", cAlternateFileName="")) returned 1
	[0148.760] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x10a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR28F.GIF", cAlternateFileName="")) returned 1
	[0148.868] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR29F.GIF", cAlternateFileName="")) returned 1
	[0148.890] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a5ff00, ftCreationTime.dwHighDateTime=0x1bdb3a4, ftLastAccessTime.dwLowDateTime=0x1bd222f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20a5ff00, ftLastWriteTime.dwHighDateTime=0x1bdb3a4, nFileSizeHigh=0x0, nFileSizeLow=0xc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR2B.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x154f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR2F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x905a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR30F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3b6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR31F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x9eb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR32F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5a34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR33F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xa9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR34F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x4660, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR35F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd48450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x875e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR36F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xd1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR37F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xcbc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR38F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xdc9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR39F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3a1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR3B.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x58e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR3F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x112a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR40F.GIF", cAlternateFileName="")) returned 1
	[0148.891] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR41F.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xe591, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR42F.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x98a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR43B.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd6e5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR43F.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b06, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR44B.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR44F.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x17bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR45B.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x16eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR45F.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1304, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR46B.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x141c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR46F.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x7517, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR47B.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x539e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR47F.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x67f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR48B.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1ba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR48F.GIF", cAlternateFileName="")) returned 1
	[0148.892] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR49B.GIF", cAlternateFileName="")) returned 1
	[0148.893] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1b99, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR49F.GIF", cAlternateFileName="")) returned 1
	[0148.893] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bd94710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2fc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR4B.GIF", cAlternateFileName="")) returned 1
	[0148.893] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x8edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR4F.GIF", cAlternateFileName="")) returned 1
	[0148.893] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x10a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR50B.GIF", cAlternateFileName="")) returned 1
	[0148.893] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x117f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR50F.GIF", cAlternateFileName="")) returned 1
	[0148.893] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2395, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR51B.GIF", cAlternateFileName="")) returned 1
	[0148.893] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR51F.GIF", cAlternateFileName="")) returned 1
	[0148.893] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x592b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR5B.GIF", cAlternateFileName="")) returned 1
	[0148.893] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0xdb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR5F.GIF", cAlternateFileName="")) returned 1
	[0148.995] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2ade, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR6B.GIF", cAlternateFileName="")) returned 1
	[0149.001] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x41e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR6F.GIF", cAlternateFileName="")) returned 1
	[0149.012] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5559, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR7B.GIF", cAlternateFileName="")) returned 1
	[0149.015] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bdba870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x5fdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR7F.GIF", cAlternateFileName="")) returned 1
	[0149.024] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x1038, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR8B.GIF", cAlternateFileName="")) returned 1
	[0149.033] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR8F.GIF", cAlternateFileName="")) returned 1
	[0149.033] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9B.GIF", cAlternateFileName="")) returned 1
	[0149.037] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 1
	[0149.037] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0e1800, ftCreationTime.dwHighDateTime=0x1bd0320, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca0e1800, ftLastWriteTime.dwHighDateTime=0x1bd0320, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 0
	[0149.037] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0149.038] GetProcessHeap () returned 0x800000
	[0149.038] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0149.038] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc87ce900, ftCreationTime.dwHighDateTime=0x1ca9b87, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc87ce900, ftLastWriteTime.dwHighDateTime=0x1ca9b87, nFileSizeHigh=0x0, nFileSizeLow=0x29d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1
	[0149.038] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9324cb00, ftCreationTime.dwHighDateTime=0x1ca9b88, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9324cb00, ftLastWriteTime.dwHighDateTime=0x1ca9b88, nFileSizeHigh=0x0, nFileSizeLow=0x2a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.IDX_DLL", cAlternateFileName="PUBWZI~1.IDX")) returned 1
	[0149.038] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ad2d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x32ad2d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x14760, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRYINT32.DLL", cAlternateFileName="")) returned 1
	[0149.038] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickStyles", cAlternateFileName="QUICKS~1")) returned 1
	[0149.038] GetProcessHeap () returned 0x800000
	[0149.038] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0149.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0149.289] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0149.289] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95af5900, ftCreationTime.dwHighDateTime=0x1c7e846, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95af5900, ftLastWriteTime.dwHighDateTime=0x1c7e846, nFileSizeHigh=0x0, nFileSizeLow=0x2387, dwReserved0=0x0, dwReserved1=0x0, cFileName="Classic.dotx", cAlternateFileName="CLASSI~1.DOT")) returned 1
	[0149.289] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x23e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.dotx", cAlternateFileName="DEFAUL~1.DOT")) returned 1
	[0149.289] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x20f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultBlackAndWhite.dotx", cAlternateFileName="DEFAUL~2.DOT")) returned 1
	[0149.289] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x2169, dwReserved0=0x0, dwReserved1=0x0, cFileName="Distinctive.dotx", cAlternateFileName="DISTIN~1.DOT")) returned 1
	[0149.290] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e3aa710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x222a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elegant.dotx", cAlternateFileName="ELEGAN~1.DOT")) returned 1
	[0149.290] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x221b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy.dotx", cAlternateFileName="FANCY~1.DOT")) returned 1
	[0149.290] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="Formal.dotx", cAlternateFileName="FORMAL~1.DOT")) returned 1
	[0149.290] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e48ef50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x210c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manuscript.dotx", cAlternateFileName="MANUSC~1.DOT")) returned 1
	[0149.290] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e4b50b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modern.dotx", cAlternateFileName="MODERN~1.DOT")) returned 1
	[0149.290] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e4db210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x8ce63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.dotx", cAlternateFileName="NEWSPR~1.DOT")) returned 1
	[0149.290] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x5adf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.dotx", cAlternateFileName="PERSPE~1.DOT")) returned 1
	[0149.290] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x20f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.dotx", cAlternateFileName="SIMPLE~1.DOT")) returned 1
	[0149.290] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2744700, ftCreationTime.dwHighDateTime=0x1ca568e, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2744700, ftLastWriteTime.dwHighDateTime=0x1ca568e, nFileSizeHigh=0x0, nFileSizeLow=0x5d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.dotx", cAlternateFileName="THATCH~1.DOT")) returned 1
	[0149.290] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="TRADIT~1.DOT")) returned 1
	[0149.290] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc418100, ftCreationTime.dwHighDateTime=0x1c6ea86, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc418100, ftLastWriteTime.dwHighDateTime=0x1c6ea86, nFileSizeHigh=0x0, nFileSizeLow=0x21f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Traditional.dotx", cAlternateFileName="TRADIT~1.DOT")) returned 0
	[0149.290] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0149.291] GetProcessHeap () returned 0x800000
	[0149.291] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0149.291] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x39aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1
	[0149.291] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63ed7300, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63ed7300, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x482d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Review.xsn", cAlternateFileName="REVIEW~2.XSN")) returned 1
	[0149.291] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50d55500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROSE.CSS", cAlternateFileName="")) returned 1
	[0149.291] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1d3a600, ftCreationTime.dwHighDateTime=0x1be1dd7, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1d3a600, ftLastWriteTime.dwHighDateTime=0x1be1dd7, nFileSizeHigh=0x0, nFileSizeLow=0xc06d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPLBRF35.CHM", cAlternateFileName="")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50d55500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xbd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.VSL", cAlternateFileName="")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9271b400, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9271b400, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x61204, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.HXS", cAlternateFileName="")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXC", cAlternateFileName="SETLAN~1.HXC")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76d900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5a76d900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXT", cAlternateFileName="SETLAN~1.HXT")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76d900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5a76d900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_F_COL.HXK", cAlternateFileName="SETLAN~1.HXK")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a76d900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5a76d900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_K_COL.HXK", cAlternateFileName="SETLAN~2.HXK")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x10d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL", cAlternateFileName="")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba4cc00, ftCreationTime.dwHighDateTime=0x1cab7e0, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ba4cc00, ftLastWriteTime.dwHighDateTime=0x1cab7e0, nFileSizeHigh=0x0, nFileSizeLow=0x2d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.IDX_DLL", cAlternateFileName="SGRESD~1.IDX")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa570, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAPNUM.VSL", cAlternateFileName="")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50deda80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.CSS", cAlternateFileName="")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c961300, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7c961300, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x2380, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLINTL.DLL", cAlternateFileName="")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50deda80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIGRATE.VSL", cAlternateFileName="")) returned 1
	[0149.292] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67868700, ftCreationTime.dwHighDateTime=0x1cacbb1, ftLastAccessTime.dwLowDateTime=0x20bbf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67868700, ftLastWriteTime.dwHighDateTime=0x1cacbb1, nFileSizeHigh=0x0, nFileSizeLow=0x4e5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALCONNECTORRES.DLL", cAlternateFileName="SOCIAL~1.DLL")) returned 1
	[0149.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffe2700, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50deda80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xffe2700, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x644, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACE.VRD", cAlternateFileName="")) returned 1
	[0149.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e13be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.CSS", cAlternateFileName="")) returned 1
	[0149.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e13be0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPS.CSS", cAlternateFileName="")) returned 1
	[0149.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e5fea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STEEL.CSS", cAlternateFileName="")) returned 1
	[0149.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33021f00, ftCreationTime.dwHighDateTime=0x1ca6570, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x33021f00, ftLastWriteTime.dwHighDateTime=0x1ca6570, nFileSizeHigh=0x0, nFileSizeLow=0x69d1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLIST.CHM", cAlternateFileName="")) returned 1
	[0149.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6069a300, ftCreationTime.dwHighDateTime=0x1cab8a9, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6069a300, ftLastWriteTime.dwHighDateTime=0x1cab8a9, nFileSizeHigh=0x0, nFileSizeLow=0x15990, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLISTI.DLL", cAlternateFileName="")) returned 1
	[0149.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e5fea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNNY.CSS", cAlternateFileName="")) returned 1
	[0149.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e5fea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNSET.CSS", cAlternateFileName="")) returned 1
	[0149.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50e5fea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TERRCOTT.CSS", cAlternateFileName="")) returned 1
	[0149.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50e86000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x44b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMESOLN.VSL", cAlternateFileName="")) returned 1
	[0149.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad844100, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50ed22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad844100, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x5fd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="UML.VSL", cAlternateFileName="")) returned 1
	[0149.815] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f896e00, ftCreationTime.dwHighDateTime=0x1cab8a9, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f896e00, ftLastWriteTime.dwHighDateTime=0x1cab8a9, nFileSizeHigh=0x0, nFileSizeLow=0xef80, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookStrings.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x960df00, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x50f446e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x960df00, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VALVE.VRD", cAlternateFileName="")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ceb0900, ftCreationTime.dwHighDateTime=0x1cab7d1, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4ceb0900, ftLastWriteTime.dwHighDateTime=0x1cab7d1, nFileSizeHigh=0x0, nFileSizeLow=0x9190, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL", cAlternateFileName="")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b68e400, ftCreationTime.dwHighDateTime=0x1cab7d1, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7b68e400, ftLastWriteTime.dwHighDateTime=0x1cab7d1, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.IDX_DLL", cAlternateFileName="VISBRR~1.IDX")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISCOLOR.VSL", cAlternateFileName="")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d766e00, ftCreationTime.dwHighDateTime=0x1cac1e7, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7d766e00, ftLastWriteTime.dwHighDateTime=0x1cac1e7, nFileSizeHigh=0x0, nFileSizeLow=0xb9378, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL", cAlternateFileName="")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bb60400, ftCreationTime.dwHighDateTime=0x1cac1e7, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1bb60400, ftLastWriteTime.dwHighDateTime=0x1cac1e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a980, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.IDX_DLL", cAlternateFileName="VISINT~1.IDX")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.CSS", cAlternateFileName="")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d40e00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x94d40e00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x588a20, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV.HXS", cAlternateFileName="VISIOD~1.HXS")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_COL.HXC", cAlternateFileName="VISIOD~1.HXC")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cf1400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x62cf1400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_COL.HXT", cAlternateFileName="VISIOD~1.HXT")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cf1400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x62cf1400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_F_COL.HXK", cAlternateFileName="VISIOD~1.HXK")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cf1400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x50fdcc60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x62cf1400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.DEV_K_COL.HXK", cAlternateFileName="VISIOD~2.HXK")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96053b00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x51002dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96053b00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x2b532a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.HXS", cAlternateFileName="")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e34500, ftCreationTime.dwHighDateTime=0x1ca90f4, ftLastAccessTime.dwLowDateTime=0x51002dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4e34500, ftLastWriteTime.dwHighDateTime=0x1ca90f4, nFileSizeHigh=0x0, nFileSizeLow=0xd6cc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET.HXS", cAlternateFileName="VISIOS~1.HXS")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x51028f20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x2a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_COL.HXC", cAlternateFileName="VISIOS~1.HXC")) returned 1
	[0149.816] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa53f300, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x51028f20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa53f300, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_COL.HXT", cAlternateFileName="VISIOS~1.HXT")) returned 1
	[0149.817] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa53f300, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x51ca82a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa53f300, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_F_COL.HXK", cAlternateFileName="VISIOS~1.HXK")) returned 1
	[0149.817] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa53f300, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xaa53f300, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.SHAPESHEET_K_COL.HXK", cAlternateFileName="VISIOS~2.HXK")) returned 1
	[0149.817] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_COL.HXC", cAlternateFileName="VISIO_~1.HXC")) returned 1
	[0149.817] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3b8d00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f3b8d00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_COL.HXT", cAlternateFileName="VISIO_~1.HXT")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3b8d00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f3b8d00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_F_COL.HXK", cAlternateFileName="VISIO_~1.HXK")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3b8d00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f3b8d00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_K_COL.HXK", cAlternateFileName="VISIO_~2.HXK")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62b3700, ftCreationTime.dwHighDateTime=0x1ca5009, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe62b3700, ftLastWriteTime.dwHighDateTime=0x1ca5009, nFileSizeHigh=0x0, nFileSizeLow=0x22e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM.HXS", cAlternateFileName="VISIO_~1.HXS")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65709000, ftCreationTime.dwHighDateTime=0x1ca53a7, ftLastAccessTime.dwLowDateTime=0x5203a3a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x65709000, ftLastWriteTime.dwHighDateTime=0x1ca53a7, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_COL.HXC", cAlternateFileName="VISIO_~2.HXC")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be72800, ftCreationTime.dwHighDateTime=0x1ca53a7, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5be72800, ftLastWriteTime.dwHighDateTime=0x1ca53a7, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_COL.HXT", cAlternateFileName="VISIO_~2.HXT")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa724d200, ftCreationTime.dwHighDateTime=0x1ca5059, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa724d200, ftLastWriteTime.dwHighDateTime=0x1ca5059, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_F_COL.HXK", cAlternateFileName="VISIO_~3.HXK")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa724d200, ftCreationTime.dwHighDateTime=0x1ca5059, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa724d200, ftLastWriteTime.dwHighDateTime=0x1ca5059, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_PRM_K_COL.HXK", cAlternateFileName="VISIO_~4.HXK")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d40e00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x94d40e00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x26745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD.HXS", cAlternateFileName="VISIO_~2.HXS")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_COL.HXC", cAlternateFileName="VISIO_~3.HXC")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb770e200, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb770e200, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_COL.HXT", cAlternateFileName="VISIO_~3.HXT")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb770e200, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb770e200, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_F_COL.HXK", cAlternateFileName="VIB8A9~1.HXK")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb770e200, ftCreationTime.dwHighDateTime=0x1c5aeb1, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb770e200, ftLastWriteTime.dwHighDateTime=0x1c5aeb1, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO_STD_K_COL.HXK", cAlternateFileName="VI5545~1.HXK")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x52060500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xc570, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUTILS.VSL", cAlternateFileName="")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad844100, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x52086660, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad844100, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x10b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISWEB.VSL", cAlternateFileName="")) returned 1
	[0150.408] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vsdir", cAlternateFileName="")) returned 1
	[0150.409] GetProcessHeap () returned 0x800000
	[0150.409] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0150.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0150.522] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0150.523] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b19600, ftCreationTime.dwHighDateTime=0x1c304b9, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x58b19600, ftLastWriteTime.dwHighDateTime=0x1c304b9, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="VISFIL~1.VSD")) returned 1
	[0150.523] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b19600, ftCreationTime.dwHighDateTime=0x1c304b9, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x58b19600, ftLastWriteTime.dwHighDateTime=0x1c304b9, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visfilem.vsdir", cAlternateFileName="VISFIL~1.VSD")) returned 0
	[0150.523] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0150.523] GetProcessHeap () returned 0x800000
	[0150.523] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0150.523] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0xa3380, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1
	[0150.523] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15f40800, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x520ac7c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x15f40800, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDALLLNK.VRD", cAlternateFileName="")) returned 1
	[0150.523] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd43d9b00, ftCreationTime.dwHighDateTime=0x1c2a020, ftLastAccessTime.dwLowDateTime=0x520ac7c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd43d9b00, ftLastWriteTime.dwHighDateTime=0x1c2a020, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDCMPVRD.XML", cAlternateFileName="")) returned 1
	[0150.523] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15f40800, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x520ac7c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x15f40800, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x722, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDERRLNK.VRD", cAlternateFileName="")) returned 1
	[0150.523] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f5a00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x900f5a00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4b425a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV.HXS", cAlternateFileName="WINPRO~1.HXS")) returned 1
	[0150.523] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_COL.HXC", cAlternateFileName="WINPRO~1.HXC")) returned 1
	[0150.523] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711d3000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x711d3000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_COL.HXT", cAlternateFileName="WINPRO~1.HXT")) returned 1
	[0150.523] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711d3000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x711d3000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_F_COL.HXK", cAlternateFileName="WINPRO~1.HXK")) returned 1
	[0150.523] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711d3000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5c3fc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x711d3000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.DEV_K_COL.HXK", cAlternateFileName="WINPRO~2.HXK")) returned 1
	[0150.524] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91408700, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91408700, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x168406, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.HXS", cAlternateFileName="")) returned 1
	[0150.524] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_COL.HXC", cAlternateFileName="WINPRO~2.HXC")) returned 1
	[0150.524] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d89a900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d89a900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_COL.HXT", cAlternateFileName="WINPRO~2.HXT")) returned 1
	[0150.524] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d89a900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d89a900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_F_COL.HXK", cAlternateFileName="WINPRO~3.HXK")) returned 1
	[0150.524] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d89a900, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xaf5ea120, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6d89a900, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ_K_COL.HXK", cAlternateFileName="WINPRO~4.HXK")) returned 1
	[0150.524] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17253500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x521b7160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x17253500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINSCHD.VRD", cAlternateFileName="")) returned 1
	[0150.524] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97366800, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97366800, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x718092, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV.HXS", cAlternateFileName="WINWOR~1.HXS")) returned 1
	[0150.524] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_COL.HXC", cAlternateFileName="WINWOR~1.HXC")) returned 1
	[0150.799] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3a1f00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3a1f00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_COL.HXT", cAlternateFileName="WINWOR~1.HXT")) returned 1
	[0150.799] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3a1f00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3a1f00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_F_COL.HXK", cAlternateFileName="WINWOR~1.HXK")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3a1f00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5998f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e3a1f00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.DEV_K_COL.HXK", cAlternateFileName="WINWOR~2.HXK")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02ac500, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0x1e5bfa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe02ac500, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x4ff5e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD.HXS", cAlternateFileName="")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_COL.HXC", cAlternateFileName="WINWOR~2.HXC")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79756b00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79756b00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_COL.HXT", cAlternateFileName="WINWOR~2.HXT")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79756b00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79756b00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_F_COL.HXK", cAlternateFileName="WINWOR~3.HXK")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79756b00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1e5e5bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x79756b00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINWORD_K_COL.HXK", cAlternateFileName="WINWOR~4.HXK")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x521b7160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa560, dwReserved0=0x0, dwReserved1=0x0, cFileName="WORKFLOW.VSL", cAlternateFileName="")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7466000, ftCreationTime.dwHighDateTime=0x1caccde, ftLastAccessTime.dwLowDateTime=0x225ee90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd7466000, ftLastWriteTime.dwHighDateTime=0x1caccde, nFileSizeHigh=0x0, nFileSizeLow=0xdc158, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL", cAlternateFileName="")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb8a5d00, ftCreationTime.dwHighDateTime=0x1caccde, ftLastAccessTime.dwLowDateTime=0x2212bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb8a5d00, ftLastWriteTime.dwHighDateTime=0x1caccde, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.IDX_DLL", cAlternateFileName="WWINTL~1.IDX")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea593000, ftCreationTime.dwHighDateTime=0x1caccde, ftLastAccessTime.dwLowDateTime=0x2284ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea593000, ftLastWriteTime.dwHighDateTime=0x1caccde, nFileSizeHigh=0x0, nFileSizeLow=0x96180, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.IDX_DLL", cAlternateFileName="WWINTL~2.IDX")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57a100, ftCreationTime.dwHighDateTime=0x1cac466, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4c57a100, ftLastWriteTime.dwHighDateTime=0x1cac466, nFileSizeHigh=0x0, nFileSizeLow=0x4188, dwReserved0=0x0, dwReserved1=0x0, cFileName="wxpr.dll", cAlternateFileName="")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fff8a00, ftCreationTime.dwHighDateTime=0x1bdff9a, ftLastAccessTime.dwLowDateTime=0x1548bc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3fff8a00, ftLastWriteTime.dwHighDateTime=0x1bdff9a, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WZCNFLCT.CHM", cAlternateFileName="")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xcd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="XFUNC.VSL", cAlternateFileName="")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x3283, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xlate_Complete.xsn", cAlternateFileName="XLATE_~1.XSN")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xlate_Init.xsn", cAlternateFileName="XLATE_~2.XSN")) returned 1
	[0150.800] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dd9100, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0xf5ee1fd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x44dd9100, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x240d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL", cAlternateFileName="")) returned 1
	[0150.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427b3700, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0xf5ebbe70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x427b3700, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x18380, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.IDX_DLL", cAlternateFileName="XLINTL~1.IDX")) returned 1
	[0150.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414a0a00, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0xf5ee1fd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x414a0a00, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x5db80, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.IDX_DLL", cAlternateFileName="XLINTL~2.IDX")) returned 1
	[0150.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ac6400, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0xf5ee1fd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x43ac6400, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLLEX.DLL", cAlternateFileName="")) returned 1
	[0150.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae096500, ftCreationTime.dwHighDateTime=0x1c30d4d, ftLastAccessTime.dwLowDateTime=0xfa6bd7f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xae096500, ftLastWriteTime.dwHighDateTime=0x1c30d4d, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLMACRO.CHM", cAlternateFileName="")) returned 1
	[0150.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa6e3950, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x2b580, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL", cAlternateFileName="")) returned 1
	[0150.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc255d100, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa6e3950, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc255d100, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.IDX_DLL", cAlternateFileName="XLSLIC~1.IDX")) returned 1
	[0150.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf94f400, ftCreationTime.dwHighDateTime=0x1c556ae, ftLastAccessTime.dwLowDateTime=0x112efdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf94f400, ftLastWriteTime.dwHighDateTime=0x1c556ae, nFileSizeHigh=0x0, nFileSizeLow=0x349922, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLSDK5.CHM", cAlternateFileName="")) returned 1
	[0150.801] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf94f400, ftCreationTime.dwHighDateTime=0x1c556ae, ftLastAccessTime.dwLowDateTime=0x112efdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf94f400, ftLastWriteTime.dwHighDateTime=0x1c556ae, nFileSizeHigh=0x0, nFileSizeLow=0x349922, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLSDK5.CHM", cAlternateFileName="")) returned 0
	[0150.993] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0150.994] GetProcessHeap () returned 0x800000
	[0150.994] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0150.996] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0150.996] GetProcessHeap () returned 0x800000
	[0150.996] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0150.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0151.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b069000, ftCreationTime.dwHighDateTime=0x1c99227, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b069000, ftLastWriteTime.dwHighDateTime=0x1c99227, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1
	[0151.141] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b069000, ftCreationTime.dwHighDateTime=0x1c99227, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b069000, ftLastWriteTime.dwHighDateTime=0x1c99227, nFileSizeHigh=0x0, nFileSizeLow=0xaa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0
	[0151.141] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0151.142] GetProcessHeap () returned 0x800000
	[0151.142] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0151.142] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0151.142] GetProcessHeap () returned 0x800000
	[0151.142] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0151.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0151.278] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.278] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6ae900, ftCreationTime.dwHighDateTime=0x1c9922b, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d6ae900, ftLastWriteTime.dwHighDateTime=0x1c9922b, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1
	[0151.278] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6ae900, ftCreationTime.dwHighDateTime=0x1c9922b, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2d6ae900, ftLastWriteTime.dwHighDateTime=0x1c9922b, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0
	[0151.278] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0151.278] GetProcessHeap () returned 0x800000
	[0151.278] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0151.278] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x50ff7a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x1313b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDS.DLL", cAlternateFileName="")) returned 1
	[0151.278] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x5e8e0f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x8d7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSF.DLL", cAlternateFileName="")) returned 1
	[0151.278] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x5e8e0f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x86db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSLM.DLL", cAlternateFileName="")) returned 1
	[0151.278] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1
	[0151.279] GetProcessHeap () returned 0x800000
	[0151.279] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0151.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0151.402] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.403] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a45600, ftCreationTime.dwHighDateTime=0x1c90da0, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a45600, ftLastWriteTime.dwHighDateTime=0x1c90da0, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLNTWRAP.HTM", cAlternateFileName="")) returned 1
	[0151.404] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e52d000, ftCreationTime.dwHighDateTime=0x1ca1017, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9e52d000, ftLastWriteTime.dwHighDateTime=0x1ca1017, nFileSizeHigh=0x0, nFileSizeLow=0x104cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPT2HTM4.XSL", cAlternateFileName="")) returned 1
	[0151.404] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa39d00, ftCreationTime.dwHighDateTime=0x1c89eb3, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfa39d00, ftLastWriteTime.dwHighDateTime=0x1c89eb3, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 1
	[0151.404] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa39d00, ftCreationTime.dwHighDateTime=0x1c89eb3, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfa39d00, ftLastWriteTime.dwHighDateTime=0x1c89eb3, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 0
	[0151.404] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0151.404] GetProcessHeap () returned 0x800000
	[0151.404] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0151.404] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73e1e00, ftCreationTime.dwHighDateTime=0x1cacb3c, ftLastAccessTime.dwLowDateTime=0x51090010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf73e1e00, ftLastWriteTime.dwHighDateTime=0x1cacb3c, nFileSizeHigh=0x0, nFileSizeLow=0x161d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1
	[0151.404] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x510dc2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x452988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDT.DLL", cAlternateFileName="")) returned 1
	[0151.404] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x33774f0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x33774f0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ", cAlternateFileName="")) returned 1
	[0151.404] GetProcessHeap () returned 0x800000
	[0151.404] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0151.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x33774f0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x33774f0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0151.405] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x33774f0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x33774f0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.405] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2df3800, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ea11a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2df3800, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x5f6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZDAT12.ACCDU", cAlternateFileName="ACWZDA~1.ACC")) returned 1
	[0151.405] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24e2e30, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x24e2e30, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x2e68630, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x204102, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZLIB.ACCDE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="ACWZLI~1.ADA")) returned 1
	[0151.405] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27b6850, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x27b6850, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x48716d0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x8f8102, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZMAIN.ACCDE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="ACWZMA~1.ADA")) returned 1
	[0151.405] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33774f0, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x33774f0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x5588fd0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0xb39102, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZTOOL.ACCDE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame", cAlternateFileName="ACWZTO~1.ADA")) returned 1
	[0151.405] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0x348000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZUSR12.ACCDU", cAlternateFileName="ACWZUS~1.ACC")) returned 1
	[0151.405] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xbf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 1
	[0151.405] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4106500, ftCreationTime.dwHighDateTime=0x1cab5b6, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd4106500, ftLastWriteTime.dwHighDateTime=0x1cab5b6, nFileSizeHigh=0x0, nFileSizeLow=0xbf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 0
	[0151.405] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0151.405] GetProcessHeap () returned 0x800000
	[0151.405] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0151.405] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x5e953370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x33580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1
	[0151.406] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c38c00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82c38c00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1
	[0151.406] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADDINS", cAlternateFileName="")) returned 1
	[0151.406] GetProcessHeap () returned 0x800000
	[0151.406] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0151.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0151.663] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.663] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x51090010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLK.DLL", cAlternateFileName="")) returned 1
	[0151.664] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x2e780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAddin.dll", cAlternateFileName="")) returned 1
	[0151.664] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4065b100, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4065b100, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="ColleagueImport.dll", cAlternateFileName="COLLEA~1.DLL")) returned 1
	[0151.665] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0725100, ftCreationTime.dwHighDateTime=0x1bdbc1e, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0725100, ftLastWriteTime.dwHighDateTime=0x1bdbc1e, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAXEXT.ECF", cAlternateFileName="")) returned 1
	[0151.665] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87891c00, ftCreationTime.dwHighDateTime=0x1ca15c9, ftLastAccessTime.dwLowDateTime=0x5279f530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87891c00, ftLastWriteTime.dwHighDateTime=0x1ca15c9, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1
	[0151.665] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87891c00, ftCreationTime.dwHighDateTime=0x1ca15c9, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x87891c00, ftLastWriteTime.dwHighDateTime=0x1ca15c9, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.XML", cAlternateFileName="")) returned 1
	[0151.666] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbea7100, ftCreationTime.dwHighDateTime=0x1bdf1f8, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdbea7100, ftLastWriteTime.dwHighDateTime=0x1bdf1f8, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1
	[0151.666] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8a70000, ftCreationTime.dwHighDateTime=0x1ca200c, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd8a70000, ftLastWriteTime.dwHighDateTime=0x1ca200c, nFileSizeHigh=0x0, nFileSizeLow=0x25348, dwReserved0=0x0, dwReserved1=0x0, cFileName="otkloadr_x64.dll", cAlternateFileName="OTKLOA~1.DLL")) returned 1
	[0151.666] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6927e500, ftCreationTime.dwHighDateTime=0x1c8597f, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6927e500, ftLastWriteTime.dwHighDateTime=0x1c8597f, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX.ECF", cAlternateFileName="")) returned 1
	[0151.666] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ef300, ftCreationTime.dwHighDateTime=0x1c8597f, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x704ef300, ftLastWriteTime.dwHighDateTime=0x1c8597f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX2.ECF", cAlternateFileName="")) returned 1
	[0151.666] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x59c42b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x13b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBA.DLL", cAlternateFileName="")) returned 1
	[0151.666] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f32200, ftCreationTime.dwHighDateTime=0x1bdf1f8, ftLastAccessTime.dwLowDateTime=0x1710610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f32200, ftLastWriteTime.dwHighDateTime=0x1bdf1f8, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMAILEXT.ECF", cAlternateFileName="")) returned 1
	[0151.666] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f65c00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81f65c00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1
	[0151.666] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f65c00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81f65c00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 0
	[0151.666] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0151.667] GetProcessHeap () returned 0x800000
	[0151.667] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0151.667] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84eaab00, ftCreationTime.dwHighDateTime=0x1c9c978, ftLastAccessTime.dwLowDateTime=0x512a5350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84eaab00, ftLastWriteTime.dwHighDateTime=0x1c9c978, nFileSizeHigh=0x0, nFileSizeLow=0x1934ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVCMP.DIC", cAlternateFileName="")) returned 1
	[0151.667] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33c7e00, ftCreationTime.dwHighDateTime=0x1c18605, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd33c7e00, ftLastWriteTime.dwHighDateTime=0x1c18605, nFileSizeHigh=0x0, nFileSizeLow=0x3a1fd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVTEL.DIC", cAlternateFileName="")) returned 1
	[0151.667] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895c9700, ftCreationTime.dwHighDateTime=0x1c9c96b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x895c9700, ftLastWriteTime.dwHighDateTime=0x1c9c96b, nFileSizeHigh=0x0, nFileSizeLow=0x2e25e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADVZIP.DIC", cAlternateFileName="")) returned 1
	[0151.667] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf779b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x17fb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.DLL", cAlternateFileName="")) returned 1
	[0151.667] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23ac1100, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2441900, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x23ac1100, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xc2788, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.DLL", cAlternateFileName="")) returned 1
	[0151.667] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb31e1b00, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x5171bc90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb31e1b00, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46080, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASCIIENG.LNG", cAlternateFileName="")) returned 1
	[0151.667] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x5171bc90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x22db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHLTS.DLL", cAlternateFileName="AUDIOS~1.DLL")) returned 1
	[0151.667] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x5f3e3510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x197378, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHMAIN.DLL", cAlternateFileName="AUDIOS~3.DLL")) returned 1
	[0151.667] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d5cf00, ftCreationTime.dwHighDateTime=0x1ca982d, ftLastAccessTime.dwLowDateTime=0x51741df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc3d5cf00, ftLastWriteTime.dwHighDateTime=0x1ca982d, nFileSizeHigh=0x0, nFileSizeLow=0x223998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHSAPIFE.DLL", cAlternateFileName="AUDIOS~2.DLL")) returned 1
	[0151.667] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b828500, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b828500, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x10d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHZAX.DLL", cAlternateFileName="")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xc380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSAutogen.dll", cAlternateFileName="BCSAUT~1.DLL")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x9b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClient.Msg.dll", cAlternateFileName="BCSCLI~1.DLL")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1067d600, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1067d600, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x6886, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSClientManifest.man", cAlternateFileName="BCSCLI~1.MAN")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd44f00, ftCreationTime.dwHighDateTime=0x1cac1f1, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcd44f00, ftLastWriteTime.dwHighDateTime=0x1cac1f1, nFileSizeHigh=0x0, nFileSizeLow=0x8d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSEvents.man", cAlternateFileName="BCSEVE~1.MAN")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c6a8100, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c6a8100, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x11380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSLaunch.dll", cAlternateFileName="BCSLAU~1.DLL")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4052c000, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4052c000, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x21980, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSProxy.dll", cAlternateFileName="")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x568a2e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x95d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntime.dll", cAlternateFileName="BCSRUN~1.DLL")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x67a3aeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x3780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeUI.dll", cAlternateFileName="BCSRUN~2.DLL")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x28f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSStr32.dll", cAlternateFileName="")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4183ed00, ftCreationTime.dwHighDateTime=0x1cac269, ftLastAccessTime.dwLowDateTime=0x5812f0f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4183ed00, ftLastWriteTime.dwHighDateTime=0x1cac269, nFileSizeHigh=0x0, nFileSizeLow=0x1b780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSSync.exe", cAlternateFileName="")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457bf900, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x457bf900, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x65ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadata.xsd", cAlternateFileName="BDCMET~2.XSD")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457bf900, ftCreationTime.dwHighDateTime=0x1cac036, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x457bf900, ftLastWriteTime.dwHighDateTime=0x1cac036, nFileSizeHigh=0x0, nFileSizeLow=0x3321, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadataresource.xsd", cAlternateFileName="BDCMET~1.XSD")) returned 1
	[0151.668] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1
	[0151.668] GetProcessHeap () returned 0x800000
	[0151.668] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0151.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0151.669] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.669] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21181300, ftCreationTime.dwHighDateTime=0x1c6a343, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21181300, ftLastWriteTime.dwHighDateTime=0x1c6a343, nFileSizeHigh=0x0, nFileSizeLow=0x7925, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2String.XSL", cAlternateFileName="AUTHOR~1.XSL")) returned 1
	[0151.669] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21181300, ftCreationTime.dwHighDateTime=0x1c6a343, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21181300, ftLastWriteTime.dwHighDateTime=0x1c6a343, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Author2XML.XSL", cAlternateFileName="AUTHOR~2.XSL")) returned 1
	[0151.669] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sort", cAlternateFileName="")) returned 1
	[0151.669] GetProcessHeap () returned 0x800000
	[0151.669] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8be900
	[0151.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0151.669] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.669] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHOR.XSL", cAlternateFileName="")) returned 1
	[0151.669] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAG.XSL", cAlternateFileName="")) returned 1
	[0151.669] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8c3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE.XSL", cAlternateFileName="")) returned 1
	[0151.669] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 1
	[0151.669] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cb700, ftCreationTime.dwHighDateTime=0x1c6a86d, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff9cb700, ftLastWriteTime.dwHighDateTime=0x1c6a86d, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 0
	[0151.669] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0151.670] GetProcessHeap () returned 0x800000
	[0151.670] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0151.670] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1
	[0151.670] GetProcessHeap () returned 0x800000
	[0151.670] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8be900
	[0151.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0151.826] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.826] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9eed00, ftCreationTime.dwHighDateTime=0x1ca5c5e, ftLastAccessTime.dwLowDateTime=0x51448270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec9eed00, ftLastWriteTime.dwHighDateTime=0x1ca5c5e, nFileSizeHigh=0x0, nFileSizeLow=0x5cd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="APA.XSL", cAlternateFileName="")) returned 1
	[0151.828] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a63000, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x24a63000, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x5282c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1
	[0151.828] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25ddce00, ftCreationTime.dwHighDateTime=0x1c93006, ftLastAccessTime.dwLowDateTime=0x619f9510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25ddce00, ftLastWriteTime.dwHighDateTime=0x1c93006, nFileSizeHigh=0x0, nFileSizeLow=0x40188, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1
	[0151.828] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44d2300, ftCreationTime.dwHighDateTime=0x1c93005, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe44d2300, ftLastWriteTime.dwHighDateTime=0x1c93005, nFileSizeHigh=0x0, nFileSizeLow=0x3cd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1
	[0151.828] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828cb900, ftCreationTime.dwHighDateTime=0x1c93005, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x828cb900, ftLastWriteTime.dwHighDateTime=0x1c93005, nFileSizeHigh=0x0, nFileSizeLow=0x3b9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1
	[0151.831] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbd7dc00, ftCreationTime.dwHighDateTime=0x1c93004, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbd7dc00, ftLastWriteTime.dwHighDateTime=0x1c93004, nFileSizeHigh=0x0, nFileSizeLow=0x4033d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1
	[0151.831] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a982900, ftCreationTime.dwHighDateTime=0x1c93004, ftLastAccessTime.dwLowDateTime=0x56263450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a982900, ftLastWriteTime.dwHighDateTime=0x1c93004, nFileSizeHigh=0x0, nFileSizeLow=0x3ee6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1
	[0151.831] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2f9800, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2e2f9800, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x49051, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLA.XSL", cAlternateFileName="")) returned 1
	[0151.831] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb63100, ftCreationTime.dwHighDateTime=0x1c6da3c, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2fb63100, ftLastWriteTime.dwHighDateTime=0x1c6da3c, nFileSizeHigh=0x0, nFileSizeLow=0x3bd45, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1
	[0151.831] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3556a600, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3556a600, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1
	[0151.831] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3556a600, ftCreationTime.dwHighDateTime=0x1ca5c5f, ftLastAccessTime.dwLowDateTime=0x5aeb55b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3556a600, ftLastWriteTime.dwHighDateTime=0x1ca5c5f, nFileSizeHigh=0x0, nFileSizeLow=0x52a0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0
	[0151.831] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0151.832] GetProcessHeap () returned 0x800000
	[0151.832] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0151.832] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0
	[0151.832] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0151.832] GetProcessHeap () returned 0x800000
	[0151.833] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0151.833] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1
	[0151.834] GetProcessHeap () returned 0x800000
	[0151.834] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0151.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x7df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART1.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x244c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART10.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART11.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xe584, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART12.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART13.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc8bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART14.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x6b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART15.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xb854, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART2.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xe12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART3.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x3902, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART4.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0x3dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART5.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x58b4ce70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xd7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART6.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART7.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xbfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART8.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 1
	[0151.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e533000, ftCreationTime.dwHighDateTime=0x1bc8d39, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8e533000, ftLastWriteTime.dwHighDateTime=0x1bc8d39, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 0
	[0151.836] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0151.836] GetProcessHeap () returned 0x800000
	[0151.836] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0151.836] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee75d00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd248dbc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1ee75d00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x2d998, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRTVIEW.DLL", cAlternateFileName="")) returned 1
	[0151.836] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf8844c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xe7380, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1
	[0151.836] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500f7b00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd83c4bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x500f7b00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x81d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDLMSO.DLL", cAlternateFileName="")) returned 1
	[0151.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x7b09, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.HLP", cAlternateFileName="")) returned 1
	[0151.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44f4800, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb44f4800, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0xdcc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CharSetTable.chr", cAlternateFileName="CHARSE~1.CHR")) returned 1
	[0151.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22bf4c00, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf0edea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x22bf4c00, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x41f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1
	[0151.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2149b700, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24d9e80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2149b700, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xb0578, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAX20.DLL", cAlternateFileName="")) returned 1
	[0151.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x37160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1
	[0151.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd24fffe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xcf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="CODEEDIT.DLL", cAlternateFileName="")) returned 1
	[0151.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337e5b00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x337e5b00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x2cb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1
	[0151.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6471c400, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6471c400, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x36580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPicker.dll", cAlternateFileName="CONTAC~1.DLL")) returned 1
	[0151.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1
	[0151.837] GetProcessHeap () returned 0x800000
	[0151.837] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0151.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0151.837] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.837] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0151.837] GetProcessHeap () returned 0x800000
	[0151.837] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0151.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0151.838] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.838] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3R.SAM", cAlternateFileName="")) returned 1
	[0151.838] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMR.FAE", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x9180, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCALDV.DLL", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCR.SAM", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x35b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADDR.FAE", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0xf79ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPTR.FAE", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1332250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNLR.FAE", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x27b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAILR.FAE", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x25b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTER.FAE", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLR.SAM", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x29b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASKR.FAE", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x31a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97R.SAM", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PABR.SAM", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 1
	[0151.839] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x3590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 0
	[0151.839] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0151.840] GetProcessHeap () returned 0x800000
	[0151.840] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0151.840] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x16178, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACT3.SAM", cAlternateFileName="")) returned 1
	[0151.840] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7990, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMDOS.FAE", cAlternateFileName="")) returned 1
	[0151.840] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x79a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1
	[0151.840] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x5b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKSAM.SAM", cAlternateFileName="")) returned 1
	[0151.840] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf978, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC.SAM", cAlternateFileName="")) returned 1
	[0151.840] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd53ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x7180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OL.SAM", cAlternateFileName="")) returned 1
	[0151.841] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x207a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADD.FAE", cAlternateFileName="")) returned 1
	[0151.841] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd79c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1dda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPT.FAE", cAlternateFileName="")) returned 1
	[0151.841] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x117a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNL.FAE", cAlternateFileName="")) returned 1
	[0151.841] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6bd9fd90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAIL.FAE", cAlternateFileName="")) returned 1
	[0151.841] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xcb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTE.FAE", cAlternateFileName="")) returned 1
	[0151.841] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6be5e470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c398, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASK.FAE", cAlternateFileName="")) returned 1
	[0151.841] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x5988a8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xc588, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORG97.SAM", cAlternateFileName="")) returned 1
	[0151.841] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0xf978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAB.SAM", cAlternateFileName="")) returned 1
	[0151.841] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x5a89bd50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x18568, dwReserved0=0x0, dwReserved1=0x0, cFileName="RM.DLL", cAlternateFileName="")) returned 1
	[0151.841] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 1
	[0151.841] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42794100, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x42794100, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x1ff80, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 0
	[0151.841] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0151.841] GetProcessHeap () returned 0x800000
	[0151.841] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0151.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a49800, ftCreationTime.dwHighDateTime=0x1cbae39, ftLastAccessTime.dwLowDateTime=0xa2045a20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x18a49800, ftLastWriteTime.dwHighDateTime=0x1cbae39, nFileSizeHigh=0x0, nFileSizeLow=0x911b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="CSS7DA~3.DLL")) returned 1
	[0151.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d4df100, ftCreationTime.dwHighDateTime=0x1cba07f, ftLastAccessTime.dwLowDateTime=0xa6dee7e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3d4df100, ftLastWriteTime.dwHighDateTime=0x1cba07f, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="CSS7DA~1.DLL")) returned 1
	[0151.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f18900, ftCreationTime.dwHighDateTime=0x1cba080, ftLastAccessTime.dwLowDateTime=0xa408e480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x64f18900, ftLastWriteTime.dwHighDateTime=0x1cba080, nFileSizeHigh=0x0, nFileSizeLow=0xbb1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="CSS7DA~2.DLL")) returned 1
	[0151.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ab7000, ftCreationTime.dwHighDateTime=0x1c8d9fe, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9ab7000, ftLastWriteTime.dwHighDateTime=0x1c8d9fe, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="CUSTOM~1.PRO")) returned 1
	[0151.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b53d600, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd25e4820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b53d600, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x91170, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1
	[0151.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xcf942ba0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x124578, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.DLL", cAlternateFileName="")) returned 1
	[0151.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x51d5b650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0151.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2630ae0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSHARE.DLL", cAlternateFileName="")) returned 1
	[0151.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2904500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x137b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1
	[0151.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3242fa00, ftCreationTime.dwHighDateTime=0x1cb7017, ftLastAccessTime.dwLowDateTime=0xd2a812c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3242fa00, ftLastWriteTime.dwHighDateTime=0x1cb7017, nFileSizeHigh=0x0, nFileSizeLow=0x1a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGRMLNCH.DLL", cAlternateFileName="")) returned 1
	[0151.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1c770, dwReserved0=0x0, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1
	[0151.843] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="DOCUME~1")) returned 1
	[0151.843] GetProcessHeap () returned 0x800000
	[0151.843] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0151.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0151.963] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.963] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0151.963] GetProcessHeap () returned 0x800000
	[0151.963] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0151.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0151.963] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.963] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0151.963] GetProcessHeap () returned 0x800000
	[0151.963] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34c0050
	[0151.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0151.964] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.964] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3845b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1
	[0151.964] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b18ae00, ftCreationTime.dwHighDateTime=0x1ca911e, ftLastAccessTime.dwLowDateTime=0x1e3845b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b18ae00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0
	[0151.964] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0151.964] GetProcessHeap () returned 0x800000
	[0151.964] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0151.964] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0
	[0151.964] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0151.965] GetProcessHeap () returned 0x800000
	[0151.965] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0151.965] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0151.965] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0151.965] GetProcessHeap () returned 0x800000
	[0151.965] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0151.965] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff0d00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xcfd6d220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6ff0d00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x1acf78, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1
	[0151.965] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3357b00, ftCreationTime.dwHighDateTime=0x1cba075, ftLastAccessTime.dwLowDateTime=0xcfdb94e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa3357b00, ftLastWriteTime.dwHighDateTime=0x1cba075, nFileSizeHigh=0x0, nFileSizeLow=0x36160, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1
	[0151.965] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd00b3060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x8f3d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1
	[0151.965] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f6a020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x30968, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITOR.EXE", cAlternateFileName="")) returned 1
	[0151.965] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2f90180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0xad88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITORS.DLL", cAlternateFileName="")) returned 1
	[0151.965] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd2fdc440, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x3f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMENTS.DLL", cAlternateFileName="")) returned 1
	[0151.965] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd30c0c80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x237a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEMUTIL.DLL", cAlternateFileName="")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x608b7590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x60903850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x206fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x46c86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGDIC.DAT", cAlternateFileName="")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5807500, ftCreationTime.dwHighDateTime=0x1c21319, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5807500, ftLastWriteTime.dwHighDateTime=0x1c21319, nFileSizeHigh=0x0, nFileSizeLow=0x8578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGIDX.DAT", cAlternateFileName="")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc59cb00, ftCreationTime.dwHighDateTime=0x1c3e388, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcc59cb00, ftLastWriteTime.dwHighDateTime=0x1c3e388, nFileSizeHigh=0x0, nFileSizeLow=0x4c22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGLISH.LNG", cAlternateFileName="")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x609299b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0xf380, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="ENTITY~2.DLL")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0x51fbcc50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x41980, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x6094fb10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x35980, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x81e8ee40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERXIMP.ADD", cAlternateFileName="")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cdf900, ftCreationTime.dwHighDateTime=0x1cac26b, ftLastAccessTime.dwLowDateTime=0x5221e250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52cdf900, ftLastWriteTime.dwHighDateTime=0x1cac26b, nFileSizeHigh=0x0, nFileSizeLow=0x1aecb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e14a00, ftCreationTime.dwHighDateTime=0x1cac1f0, ftLastAccessTime.dwLowDateTime=0x6099bdd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8e14a00, ftLastWriteTime.dwHighDateTime=0x1cac1f0, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="EXCELE~1.MAN")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd64d0300, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd64d0300, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0x17d6360, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51bd600, ftCreationTime.dwHighDateTime=0x1cac1f5, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd51bd600, ftLastWriteTime.dwHighDateTime=0x1cac1f5, nFileSizeHigh=0x0, nFileSizeLow=0xbd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="EXCELC~1.DLL")) returned 1
	[0151.966] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x522443b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x1372c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRM.XML", cAlternateFileName="")) returned 1
	[0151.967] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51243c00, ftCreationTime.dwHighDateTime=0x1c7ae59, ftLastAccessTime.dwLowDateTime=0x60acc8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51243c00, ftLastWriteTime.dwHighDateTime=0x1c7ae59, nFileSizeHigh=0x0, nFileSizeLow=0x13574, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXLIRMV.XML", cAlternateFileName="")) returned 1
	[0151.967] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0x5226a510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0x73f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1
	[0151.967] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a22a900, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd3159200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a22a900, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x533a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTRACT.DLL", cAlternateFileName="")) returned 1
	[0151.967] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ca6e00, ftCreationTime.dwHighDateTime=0x1cb701e, ftLastAccessTime.dwLowDateTime=0xd01e3b60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x11ca6e00, ftLastWriteTime.dwHighDateTime=0x1cb701e, nFileSizeHigh=0x0, nFileSizeLow=0x18bf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1
	[0151.967] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc004c700, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc004c700, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.DLL", cAlternateFileName="")) returned 1
	[0151.967] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1
	[0151.967] GetProcessHeap () returned 0x800000
	[0151.967] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0151.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0151.967] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.967] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0151.967] GetProcessHeap () returned 0x800000
	[0151.967] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0151.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0152.129] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.129] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75974300, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75974300, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITL.ICO", cAlternateFileName="")) returned 1
	[0152.129] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITS.ICO", cAlternateFileName="")) returned 1
	[0152.129] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITY.CFG", cAlternateFileName="")) returned 1
	[0152.129] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xcf2890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPT.CFG", cAlternateFileName="")) returned 1
	[0152.129] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTL.ICO", cAlternateFileName="")) returned 1
	[0152.129] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTS.ICO", cAlternateFileName="")) returned 1
	[0152.129] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.CFG", cAlternateFileName="")) returned 1
	[0152.129] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8ed400, ftCreationTime.dwHighDateTime=0x1c68837, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xec8ed400, ftLastWriteTime.dwHighDateTime=0x1c68837, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.ICO", cAlternateFileName="")) returned 1
	[0152.129] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd189f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFRES.CFG", cAlternateFileName="")) returned 1
	[0152.129] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONFLICT.ICO", cAlternateFileName="")) returned 1
	[0152.129] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44dc4200, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x44dc4200, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.CFG", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTL.ICO", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xd3eb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTS.ICO", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLIST.CFG", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTL.ICO", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTS.ICO", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d6f00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x460d6f00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOC.CFG", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCL.ICO", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCS.ICO", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473e9c00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x473e9c00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEM.CFG", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEML.ICO", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEMS.ICO", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb999900, ftCreationTime.dwHighDateTime=0x1c451be, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfb999900, ftLastWriteTime.dwHighDateTime=0x1c451be, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMAIL.CFG", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0fd900, ftCreationTime.dwHighDateTime=0x1c6bc1a, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d0fd900, ftLastWriteTime.dwHighDateTime=0x1c6bc1a, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOML.ICO", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1839500, ftCreationTime.dwHighDateTime=0x1c6bc1a, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1839500, ftLastWriteTime.dwHighDateTime=0x1c6bc1a, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMS.ICO", cAlternateFileName="")) returned 1
	[0152.130] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fc900, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x486fc900, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPM.CFG", cAlternateFileName="")) returned 1
	[0152.131] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPML.ICO", cAlternateFileName="")) returned 1
	[0152.131] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPMS.ICO", cAlternateFileName="")) returned 1
	[0152.131] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97071d00, ftCreationTime.dwHighDateTime=0x1c67f43, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97071d00, ftLastWriteTime.dwHighDateTime=0x1c67f43, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSL.ICO", cAlternateFileName="")) returned 1
	[0152.131] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7feec00, ftCreationTime.dwHighDateTime=0x1c6859b, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb7feec00, ftLastWriteTime.dwHighDateTime=0x1c6859b, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSS.ICO", cAlternateFileName="")) returned 1
	[0152.131] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a0f600, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x49a0f600, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTE.CFG", cAlternateFileName="")) returned 1
	[0152.131] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEL.ICO", cAlternateFileName="")) returned 1
	[0152.131] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTES.ICO", cAlternateFileName="")) returned 1
	[0152.131] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142d2200, ftCreationTime.dwHighDateTime=0x1c9d96b, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x142d2200, ftLastWriteTime.dwHighDateTime=0x1c9d96b, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMMS.CFG", cAlternateFileName="")) returned 1
	[0152.131] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273ff200, ftCreationTime.dwHighDateTime=0x1c9d96b, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x273ff200, ftLastWriteTime.dwHighDateTime=0x1c9d96b, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSSMS.CFG", cAlternateFileName="")) returned 1
	[0152.300] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFL.ICO", cAlternateFileName="")) returned 1
	[0152.300] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFS.ICO", cAlternateFileName="")) returned 1
	[0152.300] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4466a600, ftCreationTime.dwHighDateTime=0x1c9449a, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4466a600, ftLastWriteTime.dwHighDateTime=0x1c9449a, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFTMPL.CFG", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c035000, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fb15d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c035000, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST.CFG", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c035000, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c035000, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTIT.CFG", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITL.ICO", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITS.ICO", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTL.ICO", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTS.ICO", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCLRPT.CFG", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x0, dwReserved1=0x0, cFileName="REC.CFG", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECL.ICO", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECS.ICO", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1fd7730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTE.CFG", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTEL.ICO", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTES.ICO", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPLTMPL.CFG", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d347d00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4d347d00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.CFG", cAlternateFileName="")) returned 1
	[0152.301] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTL.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTS.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e65aa00, ftCreationTime.dwHighDateTime=0x1bdcbd5, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e65aa00, ftLastWriteTime.dwHighDateTime=0x1bdcbd5, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESEND.CFG", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x1ffd890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDL.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDS.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x216f7400, ftCreationTime.dwHighDateTime=0x1c61668, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x216f7400, ftLastWriteTime.dwHighDateTime=0x1c61668, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEM.CFG", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ecff500, ftCreationTime.dwHighDateTime=0x1c68838, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ecff500, ftLastWriteTime.dwHighDateTime=0x1c68838, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEML.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3081d900, ftCreationTime.dwHighDateTime=0x1c68838, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3081d900, ftLastWriteTime.dwHighDateTime=0x1c68838, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEMS.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLL.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLS.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQL.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQS.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNL.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNS.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPL.ICO", cAlternateFileName="")) returned 1
	[0152.302] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPS.ICO", cAlternateFileName="")) returned 1
	[0152.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x20239f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTL.ICO", cAlternateFileName="")) returned 1
	[0152.303] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c87000, ftCreationTime.dwHighDateTime=0x1c50f43, ftLastAccessTime.dwLowDateTime=0x2049b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c87000, ftLastWriteTime.dwHighDateTime=0x1c50f43, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTS.ICO", cAlternateFileName="")) returned 1
	[0152.303] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0152.304] GetProcessHeap () returned 0x800000
	[0152.304] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0152.304] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0152.304] GetProcessHeap () returned 0x800000
	[0152.304] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0152.304] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0152.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0152.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0152.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0152.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0152.611] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0152.617] GetProcessHeap () returned 0x800000
	[0152.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0152.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0152.625] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0152.626] GetProcessHeap () returned 0x800000
	[0152.626] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0152.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0152.626] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0152.626] GetProcessHeap () returned 0x800000
	[0152.626] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0152.626] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0152.627] GetProcessHeap () returned 0x800000
	[0152.627] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0152.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0152.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0152.628] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0152.629] GetProcessHeap () returned 0x800000
	[0152.629] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0152.629] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0152.629] GetProcessHeap () returned 0x800000
	[0152.629] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0152.629] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0152.629] GetProcessHeap () returned 0x800000
	[0152.629] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0152.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0152.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0152.630] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0152.631] GetProcessHeap () returned 0x800000
	[0152.631] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0152.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0152.632] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0152.633] GetProcessHeap () returned 0x800000
	[0152.633] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0152.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0152.634] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0152.635] GetProcessHeap () returned 0x800000
	[0152.635] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0152.635] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0152.635] GetProcessHeap () returned 0x800000
	[0152.635] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0152.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0152.740] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0152.740] GetProcessHeap () returned 0x800000
	[0152.740] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0152.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51174850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0152.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0152.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61a457d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61a457d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0152.883] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0152.883] GetProcessHeap () returned 0x800000
	[0152.883] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0152.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51317770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69a5d7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0153.031] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0153.032] GetProcessHeap () returned 0x800000
	[0153.032] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0153.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0153.032] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0153.032] GetProcessHeap () returned 0x800000
	[0153.032] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0153.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0153.191] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0153.191] GetProcessHeap () returned 0x800000
	[0153.191] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0153.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0153.191] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0153.191] GetProcessHeap () returned 0x800000
	[0153.191] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0153.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0153.192] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0153.193] GetProcessHeap () returned 0x800000
	[0153.193] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0153.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0153.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0153.280] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0153.281] GetProcessHeap () returned 0x800000
	[0153.281] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0153.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0153.666] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0153.666] GetProcessHeap () returned 0x800000
	[0153.666] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0153.666] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0153.667] GetProcessHeap () returned 0x800000
	[0153.667] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0153.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0153.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0154.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.323] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.324] GetProcessHeap () returned 0x800000
	[0154.324] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.324] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.324] GetProcessHeap () returned 0x800000
	[0154.324] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.324] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.325] GetProcessHeap () returned 0x800000
	[0154.325] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.325] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.325] GetProcessHeap () returned 0x800000
	[0154.325] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.326] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.326] GetProcessHeap () returned 0x800000
	[0154.326] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.326] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.326] GetProcessHeap () returned 0x800000
	[0154.326] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.327] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.327] GetProcessHeap () returned 0x800000
	[0154.327] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.327] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.327] GetProcessHeap () returned 0x800000
	[0154.327] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.328] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.328] GetProcessHeap () returned 0x800000
	[0154.328] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.421] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.421] GetProcessHeap () returned 0x800000
	[0154.421] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.422] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.422] GetProcessHeap () returned 0x800000
	[0154.422] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0154.490] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0154.490] GetProcessHeap () returned 0x800000
	[0154.490] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0154.602] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0154.602] GetProcessHeap () returned 0x800000
	[0154.602] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0154.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0154.602] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0154.603] GetProcessHeap () returned 0x800000
	[0154.603] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0154.603] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0154.603] GetProcessHeap () returned 0x800000
	[0154.603] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0154.603] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0154.604] GetProcessHeap () returned 0x800000
	[0154.604] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0154.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0154.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0155.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.078] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.078] GetProcessHeap () returned 0x800000
	[0155.078] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0155.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.078] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.079] GetProcessHeap () returned 0x800000
	[0155.079] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.079] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.079] GetProcessHeap () returned 0x800000
	[0155.079] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.079] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.080] GetProcessHeap () returned 0x800000
	[0155.080] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.080] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.080] GetProcessHeap () returned 0x800000
	[0155.080] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.080] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.081] GetProcessHeap () returned 0x800000
	[0155.081] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.278] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.280] GetProcessHeap () returned 0x800000
	[0155.280] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.281] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.281] GetProcessHeap () returned 0x800000
	[0155.281] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.281] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.282] GetProcessHeap () returned 0x800000
	[0155.282] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.282] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.282] GetProcessHeap () returned 0x800000
	[0155.282] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.282] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.283] GetProcessHeap () returned 0x800000
	[0155.283] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.283] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.283] GetProcessHeap () returned 0x800000
	[0155.283] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.283] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.284] GetProcessHeap () returned 0x800000
	[0155.284] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0155.284] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0155.284] GetProcessHeap () returned 0x800000
	[0155.284] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0155.284] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0155.285] GetProcessHeap () returned 0x800000
	[0155.285] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0155.285] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0155.285] GetProcessHeap () returned 0x800000
	[0155.285] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0155.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0155.644] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0155.644] GetProcessHeap () returned 0x800000
	[0155.644] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0155.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0155.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0155.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0155.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0155.775] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0155.776] GetProcessHeap () returned 0x800000
	[0155.776] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0155.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0155.776] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0155.776] GetProcessHeap () returned 0x800000
	[0155.776] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0155.776] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0155.777] GetProcessHeap () returned 0x800000
	[0155.777] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0155.777] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0155.777] GetProcessHeap () returned 0x800000
	[0155.777] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0155.777] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0155.778] GetProcessHeap () returned 0x800000
	[0155.778] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0155.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0155.882] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0155.882] GetProcessHeap () returned 0x800000
	[0155.882] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0155.882] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0155.883] GetProcessHeap () returned 0x800000
	[0155.883] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0155.884] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0155.885] GetProcessHeap () returned 0x800000
	[0155.885] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0155.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0156.200] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0156.208] GetProcessHeap () returned 0x800000
	[0156.209] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0156.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0156.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0156.210] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0156.210] GetProcessHeap () returned 0x800000
	[0156.211] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0156.211] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0156.211] GetProcessHeap () returned 0x800000
	[0156.211] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0156.211] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0156.211] GetProcessHeap () returned 0x800000
	[0156.211] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0156.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0156.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0156.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0156.212] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0156.212] GetProcessHeap () returned 0x800000
	[0156.212] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34c0050 | out: hHeap=0x800000) returned 1
	[0156.212] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0156.213] GetProcessHeap () returned 0x800000
	[0156.213] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0156.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0156.213] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0156.213] GetProcessHeap () returned 0x800000
	[0156.213] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0156.213] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0156.214] GetProcessHeap () returned 0x800000
	[0156.214] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0156.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0156.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0156.317] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0156.317] GetProcessHeap () returned 0x800000
	[0156.317] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0156.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0156.434] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0156.434] GetProcessHeap () returned 0x800000
	[0156.434] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0156.435] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0156.435] GetProcessHeap () returned 0x800000
	[0156.435] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0156.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0156.436] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0156.437] GetProcessHeap () returned 0x800000
	[0156.437] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0156.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0156.758] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0156.760] GetProcessHeap () returned 0x800000
	[0156.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0156.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0156.761] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0156.761] GetProcessHeap () returned 0x800000
	[0156.761] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0156.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ce49790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0157.156] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0157.158] GetProcessHeap () returned 0x800000
	[0157.158] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0157.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa6f6b5a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0157.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0157.449] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0157.449] GetProcessHeap () returned 0x800000
	[0157.449] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0157.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0157.450] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0157.450] GetProcessHeap () returned 0x800000
	[0157.450] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0157.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0157.450] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0157.450] GetProcessHeap () returned 0x800000
	[0157.450] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0157.451] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0157.451] GetProcessHeap () returned 0x800000
	[0157.451] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0157.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a1819b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0157.452] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0157.453] GetProcessHeap () returned 0x800000
	[0157.453] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0157.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70959970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70959970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0157.945] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0157.945] GetProcessHeap () returned 0x800000
	[0157.945] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0157.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0158.135] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0158.136] GetProcessHeap () returned 0x800000
	[0158.136] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0158.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0158.136] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0158.137] GetProcessHeap () returned 0x800000
	[0158.137] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0158.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0158.399] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0158.399] GetProcessHeap () returned 0x800000
	[0158.399] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0158.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x504da6a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x504da6a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0158.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0158.418] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0158.420] GetProcessHeap () returned 0x800000
	[0158.420] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0158.420] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0158.420] GetProcessHeap () returned 0x800000
	[0158.420] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0158.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0158.421] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0158.421] GetProcessHeap () returned 0x800000
	[0158.421] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0158.421] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0158.422] GetProcessHeap () returned 0x800000
	[0158.422] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0158.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0158.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0158.424] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0158.425] GetProcessHeap () returned 0x800000
	[0158.425] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0158.425] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0158.425] GetProcessHeap () returned 0x800000
	[0158.425] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0158.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0158.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0158.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0158.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0158.434] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0158.435] GetProcessHeap () returned 0x800000
	[0158.435] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0158.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0158.437] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0158.438] GetProcessHeap () returned 0x800000
	[0158.438] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0158.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0158.439] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0158.439] GetProcessHeap () returned 0x800000
	[0158.439] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0158.439] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0158.439] GetProcessHeap () returned 0x800000
	[0158.439] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0158.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0158.445] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0158.446] GetProcessHeap () returned 0x800000
	[0158.446] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0158.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0158.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0158.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0158.448] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0158.452] GetProcessHeap () returned 0x800000
	[0158.452] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0158.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0158.453] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0158.453] GetProcessHeap () returned 0x800000
	[0158.453] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0158.453] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0158.453] GetProcessHeap () returned 0x800000
	[0158.453] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0158.454] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0158.454] GetProcessHeap () returned 0x800000
	[0158.454] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0158.534] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0158.535] GetProcessHeap () returned 0x800000
	[0158.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0158.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0158.535] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0158.535] GetProcessHeap () returned 0x800000
	[0158.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0158.535] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0158.536] GetProcessHeap () returned 0x800000
	[0158.536] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0158.537] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0158.537] GetProcessHeap () returned 0x800000
	[0158.537] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0158.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0158.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0158.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0158.769] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0158.769] GetProcessHeap () returned 0x800000
	[0158.769] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0158.769] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0158.770] GetProcessHeap () returned 0x800000
	[0158.770] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0158.770] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0158.770] GetProcessHeap () returned 0x800000
	[0158.770] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0158.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0158.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0158.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0158.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0158.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0158.772] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0158.772] GetProcessHeap () returned 0x800000
	[0158.772] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0158.772] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0158.773] GetProcessHeap () returned 0x800000
	[0158.773] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0158.773] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0158.774] GetProcessHeap () returned 0x800000
	[0158.774] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0158.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0158.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0159.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0159.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0159.004] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0159.004] GetProcessHeap () returned 0x800000
	[0159.004] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0159.004] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0159.005] GetProcessHeap () returned 0x800000
	[0159.005] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0159.005] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0159.005] GetProcessHeap () returned 0x800000
	[0159.005] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0159.006] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0159.006] GetProcessHeap () returned 0x800000
	[0159.006] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0159.006] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0159.006] GetProcessHeap () returned 0x800000
	[0159.007] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0159.008] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0159.008] GetProcessHeap () returned 0x800000
	[0159.008] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0159.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe617dc20, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe617dc20, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0159.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0159.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0159.299] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0159.300] GetProcessHeap () returned 0x800000
	[0159.300] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0159.300] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0159.300] GetProcessHeap () returned 0x800000
	[0159.300] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0159.300] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0159.300] GetProcessHeap () returned 0x800000
	[0159.300] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0159.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0159.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0159.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0159.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0159.424] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0159.425] GetProcessHeap () returned 0x800000
	[0159.425] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0159.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0159.426] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0159.426] GetProcessHeap () returned 0x800000
	[0159.426] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0159.426] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0159.426] GetProcessHeap () returned 0x800000
	[0159.426] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0159.427] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0159.427] GetProcessHeap () returned 0x800000
	[0159.427] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0159.427] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0159.427] GetProcessHeap () returned 0x800000
	[0159.427] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0159.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0159.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0159.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0159.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0159.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0159.642] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0159.643] GetProcessHeap () returned 0x800000
	[0159.643] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0159.643] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0159.643] GetProcessHeap () returned 0x800000
	[0159.643] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0159.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0159.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0159.970] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0159.971] GetProcessHeap () returned 0x800000
	[0159.971] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0159.971] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0159.971] GetProcessHeap () returned 0x800000
	[0159.971] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0159.971] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0159.971] GetProcessHeap () returned 0x800000
	[0159.972] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0159.972] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0159.972] GetProcessHeap () returned 0x800000
	[0159.972] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0159.976] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0159.977] GetProcessHeap () returned 0x800000
	[0159.977] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0159.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x4232b3dd, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x4232b3dd, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0159.977] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0159.978] GetProcessHeap () returned 0x800000
	[0159.978] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0159.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0159.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0159.978] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0159.979] GetProcessHeap () returned 0x800000
	[0159.979] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0159.979] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0159.979] GetProcessHeap () returned 0x800000
	[0159.979] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0159.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0160.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0160.236] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0160.238] GetProcessHeap () returned 0x800000
	[0160.238] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0160.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0160.490] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0160.492] GetProcessHeap () returned 0x800000
	[0160.492] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0160.492] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0160.492] GetProcessHeap () returned 0x800000
	[0160.492] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0160.492] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6640820, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6640820, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0160.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0160.627] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0160.628] GetProcessHeap () returned 0x800000
	[0160.628] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0160.628] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0160.628] GetProcessHeap () returned 0x800000
	[0160.628] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0160.628] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0160.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0160.921] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0160.922] GetProcessHeap () returned 0x800000
	[0160.922] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0160.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0160.923] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0160.923] GetProcessHeap () returned 0x800000
	[0160.923] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0160.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0161.015] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0161.016] GetProcessHeap () returned 0x800000
	[0161.016] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0161.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0161.218] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0161.219] GetProcessHeap () returned 0x800000
	[0161.219] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0161.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0161.219] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0161.220] GetProcessHeap () returned 0x800000
	[0161.220] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0161.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0161.220] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0161.221] GetProcessHeap () returned 0x800000
	[0161.221] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0161.221] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0161.221] GetProcessHeap () returned 0x800000
	[0161.221] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0161.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0161.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0161.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0161.222] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0161.222] GetProcessHeap () returned 0x800000
	[0161.222] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0161.222] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0161.223] GetProcessHeap () returned 0x800000
	[0161.223] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0161.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0161.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0161.223] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0161.223] GetProcessHeap () returned 0x800000
	[0161.223] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0161.224] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0161.224] GetProcessHeap () returned 0x800000
	[0161.224] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0161.224] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0161.224] GetProcessHeap () returned 0x800000
	[0161.224] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0161.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0161.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0161.344] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0161.345] GetProcessHeap () returned 0x800000
	[0161.345] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0161.345] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0161.345] GetProcessHeap () returned 0x800000
	[0161.345] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0161.345] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x987bf1ac, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x987bf1ac, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0161.346] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0161.346] GetProcessHeap () returned 0x800000
	[0161.346] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0161.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0161.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0161.347] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0161.347] GetProcessHeap () returned 0x800000
	[0161.347] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0161.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0161.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0161.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0161.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0161.579] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0161.580] GetProcessHeap () returned 0x800000
	[0161.580] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0161.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0161.686] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0161.686] GetProcessHeap () returned 0x800000
	[0161.686] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0161.686] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0161.687] GetProcessHeap () returned 0x800000
	[0161.687] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0161.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0161.810] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0161.812] GetProcessHeap () returned 0x800000
	[0161.812] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0161.813] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0161.813] GetProcessHeap () returned 0x800000
	[0161.813] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0161.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0161.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0161.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0161.904] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0161.997] GetProcessHeap () returned 0x800000
	[0161.997] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0161.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0161.998] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0161.998] GetProcessHeap () returned 0x800000
	[0161.998] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ce908 | out: hHeap=0x800000) returned 1
	[0161.998] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0161.998] GetProcessHeap () returned 0x800000
	[0161.998] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0161.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805c807b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805c807b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0162.466] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0162.468] GetProcessHeap () returned 0x800000
	[0162.468] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0162.468] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0162.468] GetProcessHeap () returned 0x800000
	[0162.468] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0162.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0162.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0162.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0162.638] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0162.638] GetProcessHeap () returned 0x800000
	[0162.638] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0162.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0162.638] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0162.639] GetProcessHeap () returned 0x800000
	[0162.639] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0162.639] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0162.639] GetProcessHeap () returned 0x800000
	[0162.639] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0162.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8057bdba, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8057bdba, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0162.730] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0162.731] GetProcessHeap () returned 0x800000
	[0162.731] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0162.731] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0162.733] GetProcessHeap () returned 0x800000
	[0162.733] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0162.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0162.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0162.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0162.872] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0162.872] GetProcessHeap () returned 0x800000
	[0162.872] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0162.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0162.872] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0162.872] GetProcessHeap () returned 0x800000
	[0162.873] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0162.873] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0162.873] GetProcessHeap () returned 0x800000
	[0162.873] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0162.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8063a49c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8063a49c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0163.261] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0163.263] GetProcessHeap () returned 0x800000
	[0163.263] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0163.263] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.263] GetProcessHeap () returned 0x800000
	[0163.263] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0163.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0163.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.464] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.465] GetProcessHeap () returned 0x800000
	[0163.465] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0163.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa48ceb9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0163.465] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0163.466] GetProcessHeap () returned 0x800000
	[0163.466] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0163.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0163.729] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0163.730] GetProcessHeap () returned 0x800000
	[0163.730] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0163.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0163.731] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0163.731] GetProcessHeap () returned 0x800000
	[0163.731] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0163.731] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0163.731] GetProcessHeap () returned 0x800000
	[0163.731] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0163.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0163.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0163.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0163.901] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0163.901] GetProcessHeap () returned 0x800000
	[0163.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0163.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0163.902] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0163.902] GetProcessHeap () returned 0x800000
	[0163.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0163.902] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0163.903] GetProcessHeap () returned 0x800000
	[0163.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0163.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806605fc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806605fc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0164.119] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0164.120] GetProcessHeap () returned 0x800000
	[0164.120] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0164.120] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0164.121] GetProcessHeap () returned 0x800000
	[0164.121] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0164.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0164.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0164.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0164.244] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0164.245] GetProcessHeap () returned 0x800000
	[0164.245] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0164.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0164.245] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0164.245] GetProcessHeap () returned 0x800000
	[0164.245] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0164.245] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0164.246] GetProcessHeap () returned 0x800000
	[0164.246] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0164.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8061433b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8061433b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0164.447] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0164.448] GetProcessHeap () returned 0x800000
	[0164.448] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0164.448] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0164.448] GetProcessHeap () returned 0x800000
	[0164.448] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0164.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0164.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0164.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0164.635] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0164.636] GetProcessHeap () returned 0x800000
	[0164.636] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0164.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0164.636] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0164.637] GetProcessHeap () returned 0x800000
	[0164.637] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0164.637] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0164.637] GetProcessHeap () returned 0x800000
	[0164.637] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0164.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0165.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0165.091] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0165.092] GetProcessHeap () returned 0x800000
	[0165.092] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0165.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0165.100] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0165.100] GetProcessHeap () returned 0x800000
	[0165.100] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0165.100] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0165.101] GetProcessHeap () returned 0x800000
	[0165.101] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0165.101] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0165.101] GetProcessHeap () returned 0x800000
	[0165.101] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0165.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0165.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0165.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0165.212] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0165.212] GetProcessHeap () returned 0x800000
	[0165.212] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0165.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0165.213] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0165.213] GetProcessHeap () returned 0x800000
	[0165.213] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0165.213] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0165.214] GetProcessHeap () returned 0x800000
	[0165.214] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0165.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8052fafa, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8052fafa, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0165.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0165.728] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0165.729] GetProcessHeap () returned 0x800000
	[0165.729] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0165.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80555c5a, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80555c5a, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0165.898] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0165.899] GetProcessHeap () returned 0x800000
	[0165.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0166.662] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0166.663] GetProcessHeap () returned 0x800000
	[0166.663] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0166.663] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0166.664] GetProcessHeap () returned 0x800000
	[0166.664] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0166.664] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0166.664] GetProcessHeap () returned 0x800000
	[0166.664] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0166.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0166.666] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0166.666] GetProcessHeap () returned 0x800000
	[0166.666] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8be900 | out: hHeap=0x800000) returned 1
	[0166.666] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0166.667] GetProcessHeap () returned 0x800000
	[0166.667] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0166.667] FindClose (in: hFindFile=0x8bd8b8 | out: hFindFile=0x8bd8b8) returned 1
	[0166.667] GetProcessHeap () returned 0x800000
	[0166.667] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0166.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\*", lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0166.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf40b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf40b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0166.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0166.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0166.943] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0166.943] GetProcessHeap () returned 0x800000
	[0166.943] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0166.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0167.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0167.179] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0167.180] GetProcessHeap () returned 0x800000
	[0167.180] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0167.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0167.257] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0167.258] GetProcessHeap () returned 0x800000
	[0167.258] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0167.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0167.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.564] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.565] GetProcessHeap () returned 0x800000
	[0167.565] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.570] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.573] GetProcessHeap () returned 0x800000
	[0167.573] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.573] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.573] GetProcessHeap () returned 0x800000
	[0167.573] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.573] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.574] GetProcessHeap () returned 0x800000
	[0167.574] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.574] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.574] GetProcessHeap () returned 0x800000
	[0167.574] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.575] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.575] GetProcessHeap () returned 0x800000
	[0167.575] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.575] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.575] GetProcessHeap () returned 0x800000
	[0167.575] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.576] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.576] GetProcessHeap () returned 0x800000
	[0167.576] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.576] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.576] GetProcessHeap () returned 0x800000
	[0167.577] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.577] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.577] GetProcessHeap () returned 0x800000
	[0167.577] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.577] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.578] GetProcessHeap () returned 0x800000
	[0167.578] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.578] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.578] GetProcessHeap () returned 0x800000
	[0167.578] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.579] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.579] GetProcessHeap () returned 0x800000
	[0167.579] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.744] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.748] GetProcessHeap () returned 0x800000
	[0167.748] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.757] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.759] GetProcessHeap () returned 0x800000
	[0167.759] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0167.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.896] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.896] GetProcessHeap () returned 0x800000
	[0167.896] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.896] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.896] GetProcessHeap () returned 0x800000
	[0167.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.897] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.897] GetProcessHeap () returned 0x800000
	[0167.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.897] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.898] GetProcessHeap () returned 0x800000
	[0167.898] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.898] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.898] GetProcessHeap () returned 0x800000
	[0167.898] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.898] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.899] GetProcessHeap () returned 0x800000
	[0167.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.899] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.899] GetProcessHeap () returned 0x800000
	[0167.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.900] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.900] GetProcessHeap () returned 0x800000
	[0167.900] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.900] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.900] GetProcessHeap () returned 0x800000
	[0167.900] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.901] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.901] GetProcessHeap () returned 0x800000
	[0167.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.901] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.902] GetProcessHeap () returned 0x800000
	[0167.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0167.902] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0167.902] GetProcessHeap () returned 0x800000
	[0167.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.902] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0167.903] GetProcessHeap () returned 0x800000
	[0167.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0167.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0167.903] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0167.903] GetProcessHeap () returned 0x800000
	[0167.903] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0167.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0167.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.905] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.905] GetProcessHeap () returned 0x800000
	[0167.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.907] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.908] GetProcessHeap () returned 0x800000
	[0167.908] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.909] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.909] GetProcessHeap () returned 0x800000
	[0167.909] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.910] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.910] GetProcessHeap () returned 0x800000
	[0167.910] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.912] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.912] GetProcessHeap () returned 0x800000
	[0167.912] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.912] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.913] GetProcessHeap () returned 0x800000
	[0167.913] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.914] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.914] GetProcessHeap () returned 0x800000
	[0167.914] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.915] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.915] GetProcessHeap () returned 0x800000
	[0167.915] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.916] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.916] GetProcessHeap () returned 0x800000
	[0167.916] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.917] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.917] GetProcessHeap () returned 0x800000
	[0167.917] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.918] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.918] GetProcessHeap () returned 0x800000
	[0167.918] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.919] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.919] GetProcessHeap () returned 0x800000
	[0167.919] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.920] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.920] GetProcessHeap () returned 0x800000
	[0167.920] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.922] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.922] GetProcessHeap () returned 0x800000
	[0167.922] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.923] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.923] GetProcessHeap () returned 0x800000
	[0167.923] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.924] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.924] GetProcessHeap () returned 0x800000
	[0167.925] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.925] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.925] GetProcessHeap () returned 0x800000
	[0167.925] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.926] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.926] GetProcessHeap () returned 0x800000
	[0167.926] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.927] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.928] GetProcessHeap () returned 0x800000
	[0167.928] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.929] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.929] GetProcessHeap () returned 0x800000
	[0167.929] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.930] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.930] GetProcessHeap () returned 0x800000
	[0167.930] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0167.931] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0167.931] GetProcessHeap () returned 0x800000
	[0167.931] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.932] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.932] GetProcessHeap () returned 0x800000
	[0167.932] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.933] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.933] GetProcessHeap () returned 0x800000
	[0167.933] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0167.933] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0167.934] GetProcessHeap () returned 0x800000
	[0167.934] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0167.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0168.050] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0168.051] GetProcessHeap () returned 0x800000
	[0168.051] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0168.051] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0168.051] GetProcessHeap () returned 0x800000
	[0168.051] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0168.052] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0168.052] GetProcessHeap () returned 0x800000
	[0168.052] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0168.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0168.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0168.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0168.455] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0168.455] GetProcessHeap () returned 0x800000
	[0168.455] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0168.455] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0168.456] GetProcessHeap () returned 0x800000
	[0168.456] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0168.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0168.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.603] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.603] GetProcessHeap () returned 0x800000
	[0168.603] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0168.604] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0168.604] GetProcessHeap () returned 0x800000
	[0168.604] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0168.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0168.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.604] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.605] GetProcessHeap () returned 0x800000
	[0168.605] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0168.605] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0168.605] GetProcessHeap () returned 0x800000
	[0168.605] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0168.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0168.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.727] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.728] GetProcessHeap () returned 0x800000
	[0168.728] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0168.728] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0168.728] GetProcessHeap () returned 0x800000
	[0168.728] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0168.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0168.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.729] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.730] GetProcessHeap () returned 0x800000
	[0168.730] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0168.730] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0168.730] GetProcessHeap () returned 0x800000
	[0168.730] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0168.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0168.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0168.990] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0168.990] GetProcessHeap () returned 0x800000
	[0168.991] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0168.991] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0168.991] GetProcessHeap () returned 0x800000
	[0168.991] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0168.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0168.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0169.157] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0169.158] GetProcessHeap () returned 0x800000
	[0169.158] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0169.158] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0169.158] GetProcessHeap () returned 0x800000
	[0169.158] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0169.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0169.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0169.159] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0169.159] GetProcessHeap () returned 0x800000
	[0169.159] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0169.159] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0169.160] GetProcessHeap () returned 0x800000
	[0169.160] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0169.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0169.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0169.377] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0169.378] GetProcessHeap () returned 0x800000
	[0169.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0169.378] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0169.378] GetProcessHeap () returned 0x800000
	[0169.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0169.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0169.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0169.612] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0169.613] GetProcessHeap () returned 0x800000
	[0169.613] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0169.613] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0169.613] GetProcessHeap () returned 0x800000
	[0169.613] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0169.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0169.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0169.938] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0169.939] GetProcessHeap () returned 0x800000
	[0169.939] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0169.939] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0169.940] GetProcessHeap () returned 0x800000
	[0169.940] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0169.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0170.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0170.271] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0170.274] GetProcessHeap () returned 0x800000
	[0170.274] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0170.274] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0170.275] GetProcessHeap () returned 0x800000
	[0170.275] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0170.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0170.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0170.275] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0170.275] GetProcessHeap () returned 0x800000
	[0170.275] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0170.275] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0170.276] GetProcessHeap () returned 0x800000
	[0170.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0170.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0170.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0170.276] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0170.277] GetProcessHeap () returned 0x800000
	[0170.277] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0170.277] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0170.277] GetProcessHeap () returned 0x800000
	[0170.277] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0170.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0170.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0170.415] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0170.415] GetProcessHeap () returned 0x800000
	[0170.415] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0170.415] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0170.415] GetProcessHeap () returned 0x800000
	[0170.415] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0170.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0170.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0170.416] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0170.416] GetProcessHeap () returned 0x800000
	[0170.416] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0170.416] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0170.417] GetProcessHeap () returned 0x800000
	[0170.417] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0170.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0170.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0170.518] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0170.518] GetProcessHeap () returned 0x800000
	[0170.518] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0170.518] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0170.519] GetProcessHeap () returned 0x800000
	[0170.519] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0170.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0170.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0170.519] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0170.520] GetProcessHeap () returned 0x800000
	[0170.520] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0170.520] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0170.520] GetProcessHeap () returned 0x800000
	[0170.520] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0170.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0170.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0170.894] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0170.899] GetProcessHeap () returned 0x800000
	[0170.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0170.899] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0170.899] GetProcessHeap () returned 0x800000
	[0170.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0170.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0170.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0170.899] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0170.900] GetProcessHeap () returned 0x800000
	[0170.900] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0170.900] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0170.900] GetProcessHeap () returned 0x800000
	[0170.900] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0170.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0170.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0171.016] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0171.017] GetProcessHeap () returned 0x800000
	[0171.017] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0171.017] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0171.018] GetProcessHeap () returned 0x800000
	[0171.018] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0171.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0171.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0171.018] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0171.018] GetProcessHeap () returned 0x800000
	[0171.019] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0171.019] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0171.019] GetProcessHeap () returned 0x800000
	[0171.019] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0171.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0171.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0171.234] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0171.235] GetProcessHeap () returned 0x800000
	[0171.235] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0171.235] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0171.235] GetProcessHeap () returned 0x800000
	[0171.235] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0171.238] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1
	[0171.238] GetProcessHeap () returned 0x800000
	[0171.238] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0171.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0171.388] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.388] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.UKR", cAlternateFileName="ACCESS~1.UKR")) returned 1
	[0171.388] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x65600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.UKR", cAlternateFileName="")) returned 1
	[0171.388] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d0fa60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.UKR", cAlternateFileName="ADOBEC~1.UKR")) returned 1
	[0171.388] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.UKR", cAlternateFileName="")) returned 1
	[0171.388] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820a1b60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.UKR", cAlternateFileName="BRDLAN~1.UKR")) returned 1
	[0171.388] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.UKR", cAlternateFileName="")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.UKR", cAlternateFileName="")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.UKR", cAlternateFileName="")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83255f00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.UKR", cAlternateFileName="")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.UKR", cAlternateFileName="")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.UKR", cAlternateFileName="")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.UKR", cAlternateFileName="MAKEAC~1.UKR")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.UKR", cAlternateFileName="MULTIM~1.UKR")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.UKR", cAlternateFileName="")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.UKR", cAlternateFileName="")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807571a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.UKR", cAlternateFileName="")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.UKR", cAlternateFileName="READOU~1.UKR")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflow.UKR", cAlternateFileName="")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.UKR", cAlternateFileName="SAVEAS~1.UKR")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830b2fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.UKR", cAlternateFileName="")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.UKR", cAlternateFileName="")) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0171.390] GetProcessHeap () returned 0x800000
	[0171.390] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e30060
	[0171.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0171.390] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.390] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbab1, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1
	[0171.390] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1
	[0171.390] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0
	[0171.390] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0171.390] GetProcessHeap () returned 0x800000
	[0171.390] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0171.390] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfea540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.UKR", cAlternateFileName="")) returned 1
	[0171.390] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f50a880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.UKR", cAlternateFileName="")) returned 1
	[0171.390] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.UKR", cAlternateFileName="")) returned 1
	[0171.390] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x830d9140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.UKR", cAlternateFileName="")) returned 0
	[0171.391] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0171.391] GetProcessHeap () returned 0x800000
	[0171.391] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0171.391] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0171.391] GetProcessHeap () returned 0x800000
	[0171.391] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0171.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0171.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CHS", cAlternateFileName="ACCESS~1.CHS")) returned 1
	[0171.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CHS", cAlternateFileName="")) returned 1
	[0171.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CHS", cAlternateFileName="ADOBEC~1.CHS")) returned 1
	[0171.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CHS", cAlternateFileName="")) returned 1
	[0171.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CHS", cAlternateFileName="BRDLAN~1.CHS")) returned 1
	[0171.391] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CHS", cAlternateFileName="")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CHS", cAlternateFileName="")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CHS", cAlternateFileName="")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CHS", cAlternateFileName="")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CHS", cAlternateFileName="")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CHS", cAlternateFileName="")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CHS", cAlternateFileName="MAKEAC~1.CHS")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CHS", cAlternateFileName="MULTIM~1.CHS")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CHS", cAlternateFileName="")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.CHS", cAlternateFileName="")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CHS", cAlternateFileName="")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CHS", cAlternateFileName="READOU~1.CHS")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CHS", cAlternateFileName="")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CHS", cAlternateFileName="SAVEAS~1.CHS")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CHS", cAlternateFileName="")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CHS", cAlternateFileName="")) returned 1
	[0171.392] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0171.392] GetProcessHeap () returned 0x800000
	[0171.393] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e30060
	[0171.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0171.393] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.393] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x899d, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1
	[0171.393] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1
	[0171.393] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f4af00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0
	[0171.393] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0171.393] GetProcessHeap () returned 0x800000
	[0171.393] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0171.393] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CHS", cAlternateFileName="")) returned 1
	[0171.393] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CHS", cAlternateFileName="")) returned 1
	[0171.393] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHS", cAlternateFileName="")) returned 1
	[0171.394] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82d93300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHS", cAlternateFileName="")) returned 0
	[0171.394] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0171.394] GetProcessHeap () returned 0x800000
	[0171.394] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0171.394] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0171.394] GetProcessHeap () returned 0x800000
	[0171.394] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0171.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CHT", cAlternateFileName="ACCESS~1.CHT")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CHT", cAlternateFileName="")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CHT", cAlternateFileName="ADOBEC~1.CHT")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CHT", cAlternateFileName="")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CHT", cAlternateFileName="BRDLAN~1.CHT")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CHT", cAlternateFileName="")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CHT", cAlternateFileName="")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CHT", cAlternateFileName="")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CHT", cAlternateFileName="")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c3c6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CHT", cAlternateFileName="")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CHT", cAlternateFileName="")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CHT", cAlternateFileName="MAKEAC~1.CHT")) returned 1
	[0171.483] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CHT", cAlternateFileName="MULTIM~1.CHT")) returned 1
	[0171.484] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CHT", cAlternateFileName="")) returned 1
	[0171.484] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.CHT", cAlternateFileName="")) returned 1
	[0171.484] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f876820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe0e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CHT", cAlternateFileName="")) returned 1
	[0171.484] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CHT", cAlternateFileName="READOU~1.CHT")) returned 1
	[0171.484] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CHT", cAlternateFileName="")) returned 1
	[0171.484] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CHT", cAlternateFileName="SAVEAS~1.CHT")) returned 1
	[0171.484] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CHT", cAlternateFileName="")) returned 1
	[0171.484] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CHT", cAlternateFileName="")) returned 1
	[0171.484] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0171.484] GetProcessHeap () returned 0x800000
	[0171.484] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e30060
	[0171.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0171.484] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.484] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x893f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1
	[0171.484] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1
	[0171.485] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0
	[0171.485] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0171.485] GetProcessHeap () returned 0x800000
	[0171.485] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0171.485] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CHT", cAlternateFileName="")) returned 1
	[0171.485] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CHT", cAlternateFileName="")) returned 1
	[0171.485] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHT", cAlternateFileName="")) returned 1
	[0171.485] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82c62800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.CHT", cAlternateFileName="")) returned 0
	[0171.485] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0171.486] GetProcessHeap () returned 0x800000
	[0171.486] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0171.486] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0171.486] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0171.486] GetProcessHeap () returned 0x800000
	[0171.486] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0171.486] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e1a400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1
	[0171.486] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="LOGTRA~1.EXE")) returned 1
	[0171.486] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9808, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1
	[0171.486] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="PDFPRE~1.DLL")) returned 1
	[0171.486] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="PDFSIG~1.PDF")) returned 1
	[0171.486] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18dd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1
	[0171.486] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="piaglbreakfinder.dll", cAlternateFileName="PIAGLB~1.DLL")) returned 1
	[0171.487] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1
	[0171.487] GetProcessHeap () returned 0x800000
	[0171.487] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0171.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0171.701] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.702] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dab5520, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ec63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.api", cAlternateFileName="ACCESS~1.API")) returned 1
	[0171.702] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm", cAlternateFileName="")) returned 1
	[0171.702] GetProcessHeap () returned 0x800000
	[0171.702] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0171.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0171.841] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.841] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e05720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobepdf.xdc", cAlternateFileName="")) returned 1
	[0171.890] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 1
	[0171.890] GetProcessHeap () returned 0x800000
	[0171.890] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e40068
	[0171.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0171.891] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.891] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePDF417.pmp", cAlternateFileName="ADOBEP~1.PMP")) returned 1
	[0171.891] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMatrix.pmp", cAlternateFileName="DATAMA~1.PMP")) returned 1
	[0171.891] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e77b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 1
	[0171.891] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e77b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 0
	[0171.891] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0171.891] GetProcessHeap () returned 0x800000
	[0171.891] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0171.891] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 0
	[0171.891] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0171.892] GetProcessHeap () returned 0x800000
	[0171.892] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0171.892] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8308ce80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xae8a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm.api", cAlternateFileName="")) returned 1
	[0171.892] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e2b880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroSign.prc", cAlternateFileName="")) returned 1
	[0171.892] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annotations", cAlternateFileName="ANNOTA~1")) returned 1
	[0171.892] GetProcessHeap () returned 0x800000
	[0171.892] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0171.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0171.894] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.894] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 1
	[0171.894] GetProcessHeap () returned 0x800000
	[0171.894] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e40068
	[0171.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0171.899] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.899] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1
	[0171.899] GetProcessHeap () returned 0x800000
	[0171.899] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.910] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.910] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.910] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0171.910] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0171.911] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.911] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0171.911] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.911] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.911] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.912] GetProcessHeap () returned 0x800000
	[0171.912] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.912] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1
	[0171.912] GetProcessHeap () returned 0x800000
	[0171.912] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.924] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.924] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.924] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1
	[0171.924] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.924] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.925] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.925] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.925] GetProcessHeap () returned 0x800000
	[0171.925] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.925] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1
	[0171.925] GetProcessHeap () returned 0x800000
	[0171.925] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.927] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.927] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x132cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.927] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1
	[0171.927] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.927] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.927] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.927] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.927] GetProcessHeap () returned 0x800000
	[0171.927] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.927] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1
	[0171.927] GetProcessHeap () returned 0x800000
	[0171.928] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.929] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.929] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.929] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0171.929] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0171.930] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5274b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.930] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c339, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0171.930] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.930] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.930] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.931] GetProcessHeap () returned 0x800000
	[0171.931] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.931] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1
	[0171.931] GetProcessHeap () returned 0x800000
	[0171.931] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.932] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.932] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.932] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9306, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.932] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.932] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.932] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.932] GetProcessHeap () returned 0x800000
	[0171.932] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.932] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1
	[0171.932] GetProcessHeap () returned 0x800000
	[0171.932] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.933] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.933] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.933] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.933] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.933] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.933] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.934] GetProcessHeap () returned 0x800000
	[0171.934] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.934] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1
	[0171.934] GetProcessHeap () returned 0x800000
	[0171.934] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.935] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.935] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.935] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.935] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.935] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.935] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.935] GetProcessHeap () returned 0x800000
	[0171.935] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.935] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1
	[0171.936] GetProcessHeap () returned 0x800000
	[0171.936] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.936] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.936] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.936] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.936] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.937] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.937] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.937] GetProcessHeap () returned 0x800000
	[0171.937] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.937] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1
	[0171.937] GetProcessHeap () returned 0x800000
	[0171.937] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.938] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.938] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.939] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0171.939] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0171.939] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.939] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0171.939] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.939] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.939] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.940] GetProcessHeap () returned 0x800000
	[0171.940] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.940] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1
	[0171.940] GetProcessHeap () returned 0x800000
	[0171.940] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.941] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.941] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x30eb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.941] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.941] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.941] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.941] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.942] GetProcessHeap () returned 0x800000
	[0171.942] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.942] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1
	[0171.942] GetProcessHeap () returned 0x800000
	[0171.942] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.944] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.944] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.944] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0171.944] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0171.944] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.944] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0171.944] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.944] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.945] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.945] GetProcessHeap () returned 0x800000
	[0171.945] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.945] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1
	[0171.946] GetProcessHeap () returned 0x800000
	[0171.946] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.947] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.947] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.948] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0171.948] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0171.948] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9083, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.948] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0171.948] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.948] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.948] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.949] GetProcessHeap () returned 0x800000
	[0171.949] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.949] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1
	[0171.949] GetProcessHeap () returned 0x800000
	[0171.949] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.950] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.950] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xca88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.950] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.950] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.950] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.950] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.950] GetProcessHeap () returned 0x800000
	[0171.950] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.950] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1
	[0171.951] GetProcessHeap () returned 0x800000
	[0171.951] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0171.952] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.952] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0171.952] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xffc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1
	[0171.952] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa447, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0171.952] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0171.952] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0171.952] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0171.953] GetProcessHeap () returned 0x800000
	[0171.953] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0171.953] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1
	[0171.953] GetProcessHeap () returned 0x800000
	[0171.953] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0171.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0172.125] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.125] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.125] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1
	[0172.125] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd074, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.125] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.125] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.125] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0172.125] GetProcessHeap () returned 0x800000
	[0172.125] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0172.125] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1
	[0172.125] GetProcessHeap () returned 0x800000
	[0172.125] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0172.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0172.294] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.294] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xff3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.294] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9542, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.294] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.294] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.294] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0172.294] GetProcessHeap () returned 0x800000
	[0172.294] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0172.294] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1
	[0172.294] GetProcessHeap () returned 0x800000
	[0172.294] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0172.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0172.463] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.463] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.464] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.464] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.464] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.464] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.464] GetProcessHeap () returned 0x800000
	[0172.464] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0172.464] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1
	[0172.464] GetProcessHeap () returned 0x800000
	[0172.464] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0172.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0172.465] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.465] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x907a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.465] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0172.465] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0172.465] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4fff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.465] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0172.465] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.465] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.465] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.466] GetProcessHeap () returned 0x800000
	[0172.466] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0172.466] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1
	[0172.467] GetProcessHeap () returned 0x800000
	[0172.467] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0172.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0172.467] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.467] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.467] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c53, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.467] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.467] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.467] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.467] GetProcessHeap () returned 0x800000
	[0172.467] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0172.467] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1
	[0172.467] GetProcessHeap () returned 0x800000
	[0172.467] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0172.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0172.468] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.468] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.468] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0172.468] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0172.468] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe736, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.469] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0172.469] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.469] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.469] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.470] GetProcessHeap () returned 0x800000
	[0172.470] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0172.470] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1
	[0172.470] GetProcessHeap () returned 0x800000
	[0172.470] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0172.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0172.470] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.471] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.471] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0172.471] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0172.471] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.471] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0172.471] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.471] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.471] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.472] GetProcessHeap () returned 0x800000
	[0172.472] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0172.472] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1
	[0172.472] GetProcessHeap () returned 0x800000
	[0172.472] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0172.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0172.473] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.473] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.473] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0172.473] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0172.473] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.473] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0172.473] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.473] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.473] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.474] GetProcessHeap () returned 0x800000
	[0172.474] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0172.474] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1
	[0172.474] GetProcessHeap () returned 0x800000
	[0172.474] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0172.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0172.475] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.475] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.475] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0172.475] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0172.475] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.475] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0172.475] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.475] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.475] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.476] GetProcessHeap () returned 0x800000
	[0172.476] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0172.476] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1
	[0172.477] GetProcessHeap () returned 0x800000
	[0172.477] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0172.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0172.477] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.477] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.477] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.477] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.477] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.477] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.477] GetProcessHeap () returned 0x800000
	[0172.477] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0172.477] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1
	[0172.477] GetProcessHeap () returned 0x800000
	[0172.477] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0172.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0172.478] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.478] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.478] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.478] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.478] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.478] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.478] GetProcessHeap () returned 0x800000
	[0172.478] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0172.478] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1
	[0172.478] GetProcessHeap () returned 0x800000
	[0172.478] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0172.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0172.479] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.479] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.479] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0172.479] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0172.479] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x992b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.479] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0172.479] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.480] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.480] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.481] GetProcessHeap () returned 0x800000
	[0172.481] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0172.481] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1
	[0172.481] GetProcessHeap () returned 0x800000
	[0172.481] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0172.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0172.481] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.481] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1
	[0172.482] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1
	[0172.482] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1
	[0172.482] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb189, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1
	[0172.482] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1
	[0172.482] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1
	[0172.482] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0
	[0172.482] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0172.483] GetProcessHeap () returned 0x800000
	[0172.483] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0172.483] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 1
	[0172.483] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 0
	[0172.483] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0172.483] GetProcessHeap () returned 0x800000
	[0172.483] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0172.485] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 0
	[0172.485] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0172.485] GetProcessHeap () returned 0x800000
	[0172.485] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0172.485] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5dbe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.api", cAlternateFileName="")) returned 1
	[0172.485] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd2463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.api", cAlternateFileName="")) returned 1
	[0172.486] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15de63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.api", cAlternateFileName="")) returned 1
	[0172.486] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.api", cAlternateFileName="")) returned 1
	[0172.486] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd063, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.api", cAlternateFileName="")) returned 1
	[0172.486] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e2b880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ab863, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.api", cAlternateFileName="")) returned 1
	[0172.486] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18463, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.api", cAlternateFileName="")) returned 1
	[0172.486] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x234a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.api", cAlternateFileName="MAKEAC~1.API")) returned 1
	[0172.486] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia", cAlternateFileName="MULTIM~1")) returned 1
	[0172.486] GetProcessHeap () returned 0x800000
	[0172.486] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0172.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0172.587] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.587] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1
	[0172.588] GetProcessHeap () returned 0x800000
	[0172.588] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0172.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CAT", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHS", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHT", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DAN", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DEU", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ESP", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.EUQ", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.FRA", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ITA", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.JPN", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.KOR", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1
	[0172.709] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6b1000, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NLD", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NOR", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.PTB", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SUO", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SVE", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CAT", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHS", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHT", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DAN", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DEU", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ESP", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.EUQ", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.FRA", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ITA", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.JPN", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.KOR", cAlternateFileName="")) returned 1
	[0172.710] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1
	[0172.711] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NLD", cAlternateFileName="")) returned 1
	[0172.711] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NOR", cAlternateFileName="")) returned 1
	[0172.711] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.PTB", cAlternateFileName="")) returned 1
	[0172.711] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SUO", cAlternateFileName="")) returned 1
	[0172.711] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SVE", cAlternateFileName="")) returned 1
	[0172.711] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CAT", cAlternateFileName="QUICKT~1.CAT")) returned 1
	[0172.829] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHS", cAlternateFileName="QUICKT~1.CHS")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHT", cAlternateFileName="QUICKT~1.CHT")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DAN", cAlternateFileName="QUICKT~1.DAN")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DEU", cAlternateFileName="QUICKT~1.DEU")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ESP", cAlternateFileName="QUICKT~1.ESP")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.EUQ", cAlternateFileName="QUICKT~1.EUQ")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.FRA", cAlternateFileName="QUICKT~1.FRA")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ITA", cAlternateFileName="QUICKT~1.ITA")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.JPN", cAlternateFileName="QUICKT~1.JPN")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.KOR", cAlternateFileName="QUICKT~1.KOR")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="QUICKT~1.MPP")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NLD", cAlternateFileName="QUICKT~1.NLD")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NOR", cAlternateFileName="QUICKT~1.NOR")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.PTB", cAlternateFileName="QUICKT~1.PTB")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SUO", cAlternateFileName="QUICKT~1.SUO")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SVE", cAlternateFileName="QUICKT~1.SVE")) returned 1
	[0172.830] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CAT", cAlternateFileName="WINDOW~1.CAT")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHS", cAlternateFileName="WINDOW~1.CHS")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHT", cAlternateFileName="WINDOW~1.CHT")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DAN", cAlternateFileName="WINDOW~1.DAN")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DEU", cAlternateFileName="WINDOW~1.DEU")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ESP", cAlternateFileName="WINDOW~1.ESP")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.EUQ", cAlternateFileName="WINDOW~1.EUQ")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.FRA", cAlternateFileName="WINDOW~1.FRA")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ITA", cAlternateFileName="WINDOW~1.ITA")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.JPN", cAlternateFileName="WINDOW~1.JPN")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.KOR", cAlternateFileName="WINDOW~1.KOR")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NLD", cAlternateFileName="WINDOW~1.NLD")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NOR", cAlternateFileName="WINDOW~1.NOR")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.PTB", cAlternateFileName="WINDOW~1.PTB")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SUO", cAlternateFileName="WINDOW~1.SUO")) returned 1
	[0172.831] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 1
	[0172.832] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 0
	[0172.832] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0172.832] GetProcessHeap () returned 0x800000
	[0172.832] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0172.832] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_CZE", cAlternateFileName="")) returned 1
	[0172.832] GetProcessHeap () returned 0x800000
	[0172.832] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0172.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0172.921] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.921] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CZE", cAlternateFileName="")) returned 1
	[0172.921] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CZE", cAlternateFileName="")) returned 1
	[0172.921] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CZE", cAlternateFileName="QUICKT~1.CZE")) returned 1
	[0172.921] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 1
	[0172.921] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 0
	[0172.921] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0172.922] GetProcessHeap () returned 0x800000
	[0172.922] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0172.922] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HRV", cAlternateFileName="")) returned 1
	[0172.922] GetProcessHeap () returned 0x800000
	[0172.922] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0172.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0173.065] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.066] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HRV", cAlternateFileName="")) returned 1
	[0173.066] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.HRV", cAlternateFileName="")) returned 1
	[0173.066] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HRV", cAlternateFileName="QUICKT~1.HRV")) returned 1
	[0173.066] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 1
	[0173.066] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 0
	[0173.066] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0173.067] GetProcessHeap () returned 0x800000
	[0173.067] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0173.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HUN", cAlternateFileName="")) returned 1
	[0173.067] GetProcessHeap () returned 0x800000
	[0173.067] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0173.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0173.067] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.067] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HUN", cAlternateFileName="")) returned 1
	[0173.067] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.HUN", cAlternateFileName="")) returned 1
	[0173.067] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HUN", cAlternateFileName="QUICKT~1.HUN")) returned 1
	[0173.067] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 1
	[0173.067] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 0
	[0173.067] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0173.067] GetProcessHeap () returned 0x800000
	[0173.067] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0173.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_POL", cAlternateFileName="")) returned 1
	[0173.068] GetProcessHeap () returned 0x800000
	[0173.068] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0173.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0173.068] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.068] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.POL", cAlternateFileName="")) returned 1
	[0173.068] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.POL", cAlternateFileName="")) returned 1
	[0173.068] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.POL", cAlternateFileName="QUICKT~1.POL")) returned 1
	[0173.068] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 1
	[0173.068] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 0
	[0173.068] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0173.068] GetProcessHeap () returned 0x800000
	[0173.069] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0173.069] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUM", cAlternateFileName="")) returned 1
	[0173.069] GetProcessHeap () returned 0x800000
	[0173.069] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0173.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0173.069] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.069] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUM", cAlternateFileName="")) returned 1
	[0173.069] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUM", cAlternateFileName="")) returned 1
	[0173.069] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUM", cAlternateFileName="QUICKT~1.RUM")) returned 1
	[0173.069] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 1
	[0173.069] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 0
	[0173.069] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0173.070] GetProcessHeap () returned 0x800000
	[0173.070] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0173.070] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUS", cAlternateFileName="")) returned 1
	[0173.070] GetProcessHeap () returned 0x800000
	[0173.070] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0173.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0173.177] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.177] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUS", cAlternateFileName="")) returned 1
	[0173.177] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUS", cAlternateFileName="")) returned 1
	[0173.177] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUS", cAlternateFileName="QUICKT~1.RUS")) returned 1
	[0173.177] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 1
	[0173.177] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 0
	[0173.177] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0173.178] GetProcessHeap () returned 0x800000
	[0173.178] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0173.178] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SKY", cAlternateFileName="")) returned 1
	[0173.178] GetProcessHeap () returned 0x800000
	[0173.178] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0173.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0173.275] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.275] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SKY", cAlternateFileName="")) returned 1
	[0173.275] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SKY", cAlternateFileName="")) returned 1
	[0173.275] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SKY", cAlternateFileName="QUICKT~1.SKY")) returned 1
	[0173.275] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 1
	[0173.275] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 0
	[0173.276] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0173.276] GetProcessHeap () returned 0x800000
	[0173.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0173.277] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SLV", cAlternateFileName="")) returned 1
	[0173.277] GetProcessHeap () returned 0x800000
	[0173.277] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0173.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0173.278] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.278] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SLV", cAlternateFileName="")) returned 1
	[0173.278] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SLV", cAlternateFileName="")) returned 1
	[0173.278] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SLV", cAlternateFileName="QUICKT~1.SLV")) returned 1
	[0173.278] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 1
	[0173.278] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SLV", cAlternateFileName="WINDOW~1.SLV")) returned 0
	[0173.278] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0173.279] GetProcessHeap () returned 0x800000
	[0173.279] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0173.279] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_TUR", cAlternateFileName="")) returned 1
	[0173.279] GetProcessHeap () returned 0x800000
	[0173.279] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0173.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0173.279] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.279] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.TUR", cAlternateFileName="")) returned 1
	[0173.279] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.TUR", cAlternateFileName="")) returned 1
	[0173.279] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.TUR", cAlternateFileName="QUICKT~1.TUR")) returned 1
	[0173.279] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 1
	[0173.280] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.TUR", cAlternateFileName="WINDOW~1.TUR")) returned 0
	[0173.280] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0173.280] GetProcessHeap () returned 0x800000
	[0173.280] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0173.280] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 1
	[0173.280] GetProcessHeap () returned 0x800000
	[0173.280] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0173.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0173.281] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.281] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.UKR", cAlternateFileName="")) returned 1
	[0173.281] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.UKR", cAlternateFileName="")) returned 1
	[0173.281] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.UKR", cAlternateFileName="QUICKT~1.UKR")) returned 1
	[0173.281] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 1
	[0173.281] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.UKR", cAlternateFileName="WINDOW~1.UKR")) returned 0
	[0173.281] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0173.282] GetProcessHeap () returned 0x800000
	[0173.282] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0173.282] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 0
	[0173.282] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0173.282] GetProcessHeap () returned 0x800000
	[0173.282] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0173.282] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x174c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.api", cAlternateFileName="MULTIM~1.API")) returned 1
	[0173.282] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x69263, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.api", cAlternateFileName="")) returned 1
	[0173.282] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0173.283] GetProcessHeap () returned 0x800000
	[0173.283] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0173.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0173.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0173.462] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0173.463] GetProcessHeap () returned 0x800000
	[0173.463] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0173.464] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0173.465] GetProcessHeap () returned 0x800000
	[0173.465] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0173.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0173.466] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0173.466] GetProcessHeap () returned 0x800000
	[0173.466] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0173.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0173.466] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0173.467] GetProcessHeap () returned 0x800000
	[0173.467] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0173.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0173.468] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0173.469] GetProcessHeap () returned 0x800000
	[0173.469] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0173.469] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0173.469] GetProcessHeap () returned 0x800000
	[0173.469] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0173.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0173.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0173.745] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0173.746] GetProcessHeap () returned 0x800000
	[0173.746] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0173.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0174.557] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0174.559] GetProcessHeap () returned 0x800000
	[0174.559] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0174.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0174.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f556b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0174.559] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0174.560] GetProcessHeap () returned 0x800000
	[0174.560] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0174.560] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0174.560] GetProcessHeap () returned 0x800000
	[0174.560] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0174.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0174.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0175.167] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0175.167] GetProcessHeap () returned 0x800000
	[0175.167] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0175.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0175.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0175.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0175.732] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0175.733] GetProcessHeap () returned 0x800000
	[0175.733] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0175.734] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0175.734] GetProcessHeap () returned 0x800000
	[0175.734] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0175.734] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0175.735] GetProcessHeap () returned 0x800000
	[0175.735] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0175.735] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0175.735] GetProcessHeap () returned 0x800000
	[0175.735] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0175.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0175.735] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0175.736] GetProcessHeap () returned 0x800000
	[0175.736] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0175.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0175.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0175.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0175.826] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0175.827] GetProcessHeap () returned 0x800000
	[0175.827] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0175.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0175.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0176.237] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0176.238] GetProcessHeap () returned 0x800000
	[0176.238] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0176.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0176.366] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0176.367] GetProcessHeap () returned 0x800000
	[0176.367] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0176.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0176.608] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0176.609] GetProcessHeap () returned 0x800000
	[0176.609] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0176.609] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0176.609] GetProcessHeap () returned 0x800000
	[0176.609] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0176.610] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0176.610] GetProcessHeap () returned 0x800000
	[0176.610] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0176.610] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0176.611] GetProcessHeap () returned 0x800000
	[0176.611] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0176.611] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0176.611] GetProcessHeap () returned 0x800000
	[0176.611] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0176.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0176.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0176.764] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0176.767] GetProcessHeap () returned 0x800000
	[0176.767] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0176.768] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0176.768] GetProcessHeap () returned 0x800000
	[0176.768] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0176.769] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0176.769] GetProcessHeap () returned 0x800000
	[0176.769] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0176.769] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0176.770] GetProcessHeap () returned 0x800000
	[0176.770] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0176.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xbdc44680, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbdc44680, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0176.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0176.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0177.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0178.725] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0178.726] GetProcessHeap () returned 0x800000
	[0178.726] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0178.727] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0178.727] GetProcessHeap () returned 0x800000
	[0178.727] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0178.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0178.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0178.728] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0178.729] GetProcessHeap () returned 0x800000
	[0178.729] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0178.730] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0178.731] GetProcessHeap () returned 0x800000
	[0178.731] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0178.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0178.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.005] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.011] GetProcessHeap () returned 0x800000
	[0179.013] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.036] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.159] GetProcessHeap () returned 0x800000
	[0179.159] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.160] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.160] GetProcessHeap () returned 0x800000
	[0179.160] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.161] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.161] GetProcessHeap () returned 0x800000
	[0179.161] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.161] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.162] GetProcessHeap () returned 0x800000
	[0179.162] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.162] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.162] GetProcessHeap () returned 0x800000
	[0179.162] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.163] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.163] GetProcessHeap () returned 0x800000
	[0179.163] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.163] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.164] GetProcessHeap () returned 0x800000
	[0179.164] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.164] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.164] GetProcessHeap () returned 0x800000
	[0179.164] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.165] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.165] GetProcessHeap () returned 0x800000
	[0179.165] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.165] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.166] GetProcessHeap () returned 0x800000
	[0179.166] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.166] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.166] GetProcessHeap () returned 0x800000
	[0179.166] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.167] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.167] GetProcessHeap () returned 0x800000
	[0179.167] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.167] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.168] GetProcessHeap () returned 0x800000
	[0179.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.168] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.168] GetProcessHeap () returned 0x800000
	[0179.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.169] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.169] GetProcessHeap () returned 0x800000
	[0179.169] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.169] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.170] GetProcessHeap () returned 0x800000
	[0179.170] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.170] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.170] GetProcessHeap () returned 0x800000
	[0179.170] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.170] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.171] GetProcessHeap () returned 0x800000
	[0179.171] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.171] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.172] GetProcessHeap () returned 0x800000
	[0179.172] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.172] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.172] GetProcessHeap () returned 0x800000
	[0179.172] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.172] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.173] GetProcessHeap () returned 0x800000
	[0179.173] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.173] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.174] GetProcessHeap () returned 0x800000
	[0179.174] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.174] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.174] GetProcessHeap () returned 0x800000
	[0179.174] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.175] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.175] GetProcessHeap () returned 0x800000
	[0179.175] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.175] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.176] GetProcessHeap () returned 0x800000
	[0179.176] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.176] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.176] GetProcessHeap () returned 0x800000
	[0179.176] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0179.176] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.177] GetProcessHeap () returned 0x800000
	[0179.177] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.177] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0179.177] GetProcessHeap () returned 0x800000
	[0179.177] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0179.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0179.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.180] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.181] GetProcessHeap () returned 0x800000
	[0179.181] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.181] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0179.181] GetProcessHeap () returned 0x800000
	[0179.181] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0179.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0179.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.182] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.182] GetProcessHeap () returned 0x800000
	[0179.182] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.183] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.183] GetProcessHeap () returned 0x800000
	[0179.183] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.183] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.184] GetProcessHeap () returned 0x800000
	[0179.184] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.184] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.184] GetProcessHeap () returned 0x800000
	[0179.184] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.185] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.185] GetProcessHeap () returned 0x800000
	[0179.185] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.185] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.186] GetProcessHeap () returned 0x800000
	[0179.186] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.186] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.186] GetProcessHeap () returned 0x800000
	[0179.186] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.187] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.187] GetProcessHeap () returned 0x800000
	[0179.187] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.187] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.188] GetProcessHeap () returned 0x800000
	[0179.188] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.188] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.188] GetProcessHeap () returned 0x800000
	[0179.188] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.189] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.189] GetProcessHeap () returned 0x800000
	[0179.189] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.189] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.190] GetProcessHeap () returned 0x800000
	[0179.190] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.190] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.190] GetProcessHeap () returned 0x800000
	[0179.190] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.191] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.191] GetProcessHeap () returned 0x800000
	[0179.191] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.191] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.192] GetProcessHeap () returned 0x800000
	[0179.192] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.192] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.193] GetProcessHeap () returned 0x800000
	[0179.193] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa060a95, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.194] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.194] GetProcessHeap () returned 0x800000
	[0179.194] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.194] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.195] GetProcessHeap () returned 0x800000
	[0179.195] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.385] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.389] GetProcessHeap () returned 0x800000
	[0179.389] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.389] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.389] GetProcessHeap () returned 0x800000
	[0179.390] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22894196, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.391] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.392] GetProcessHeap () returned 0x800000
	[0179.392] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.392] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.392] GetProcessHeap () returned 0x800000
	[0179.392] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a735b0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb30acfc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb30acfc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b36970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xba7b1bc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba7b1bc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.393] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.393] GetProcessHeap () returned 0x800000
	[0179.393] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad3651a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xad3651a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad3651a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.393] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.394] GetProcessHeap () returned 0x800000
	[0179.394] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ae59d0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xbe284040, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbe284040, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.394] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.394] GetProcessHeap () returned 0x800000
	[0179.394] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.395] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.395] GetProcessHeap () returned 0x800000
	[0179.395] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xadf4bfa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xadf4bfa0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeefe5e10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeefe5e10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.395] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.396] GetProcessHeap () returned 0x800000
	[0179.396] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0179.396] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.396] GetProcessHeap () returned 0x800000
	[0179.396] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8132bc53, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8132bc53, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0179.397] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0179.397] GetProcessHeap () returned 0x800000
	[0179.397] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0179.804] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0179.808] GetProcessHeap () returned 0x800000
	[0179.811] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0179.813] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0179.814] GetProcessHeap () returned 0x800000
	[0179.814] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.814] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.814] GetProcessHeap () returned 0x800000
	[0179.814] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0179.815] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0179.815] GetProcessHeap () returned 0x800000
	[0179.815] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.815] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.816] GetProcessHeap () returned 0x800000
	[0179.816] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0179.816] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0179.816] GetProcessHeap () returned 0x800000
	[0179.816] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.817] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.817] GetProcessHeap () returned 0x800000
	[0179.817] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0179.817] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0179.818] GetProcessHeap () returned 0x800000
	[0179.818] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.818] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.818] GetProcessHeap () returned 0x800000
	[0179.818] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.819] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.819] GetProcessHeap () returned 0x800000
	[0179.819] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0179.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0179.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0179.821] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0179.822] GetProcessHeap () returned 0x800000
	[0179.822] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0179.822] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0179.823] GetProcessHeap () returned 0x800000
	[0179.823] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0179.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0179.826] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0179.826] GetProcessHeap () returned 0x800000
	[0179.826] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0179.826] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0179.827] GetProcessHeap () returned 0x800000
	[0179.827] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0179.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0179.830] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0179.831] GetProcessHeap () returned 0x800000
	[0179.831] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0179.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0179.832] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0179.833] GetProcessHeap () returned 0x800000
	[0179.833] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0179.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0179.833] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0179.834] GetProcessHeap () returned 0x800000
	[0179.834] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0179.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0179.985] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0179.985] GetProcessHeap () returned 0x800000
	[0179.985] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0179.986] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0179.987] GetProcessHeap () returned 0x800000
	[0179.987] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0179.988] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0179.989] GetProcessHeap () returned 0x800000
	[0179.989] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0179.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0180.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0180.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0180.210] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0180.210] GetProcessHeap () returned 0x800000
	[0180.210] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0180.210] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0180.211] GetProcessHeap () returned 0x800000
	[0180.211] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0180.211] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0180.211] GetProcessHeap () returned 0x800000
	[0180.211] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0180.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0180.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0180.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0180.212] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0180.212] GetProcessHeap () returned 0x800000
	[0180.212] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0180.212] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0180.213] GetProcessHeap () returned 0x800000
	[0180.213] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0180.213] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0180.213] GetProcessHeap () returned 0x800000
	[0180.213] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0180.213] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0180.214] GetProcessHeap () returned 0x800000
	[0180.214] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0180.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0180.214] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0180.215] GetProcessHeap () returned 0x800000
	[0180.215] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0180.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0180.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0180.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0180.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0180.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0180.217] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0180.223] GetProcessHeap () returned 0x800000
	[0180.223] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0180.223] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0180.224] GetProcessHeap () returned 0x800000
	[0180.224] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0180.225] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0180.226] GetProcessHeap () returned 0x800000
	[0180.226] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0180.226] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0180.227] GetProcessHeap () returned 0x800000
	[0180.227] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0180.227] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0180.227] GetProcessHeap () returned 0x800000
	[0180.227] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0180.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0180.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0180.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0180.345] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0180.345] GetProcessHeap () returned 0x800000
	[0180.345] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0180.345] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0180.346] GetProcessHeap () returned 0x800000
	[0180.346] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0180.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\en-US\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0180.346] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0180.347] GetProcessHeap () returned 0x800000
	[0180.347] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0180.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0180.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0180.348] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0180.349] GetProcessHeap () returned 0x800000
	[0180.349] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0180.349] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0180.349] GetProcessHeap () returned 0x800000
	[0180.350] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0180.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0180.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0180.350] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0180.350] GetProcessHeap () returned 0x800000
	[0180.350] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0180.350] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0180.351] GetProcessHeap () returned 0x800000
	[0180.351] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0180.351] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0180.351] GetProcessHeap () returned 0x800000
	[0180.351] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0180.352] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0180.352] GetProcessHeap () returned 0x800000
	[0180.352] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0180.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0180.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0180.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0180.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0180.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0180.622] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0180.623] GetProcessHeap () returned 0x800000
	[0180.623] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0180.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0180.623] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0180.624] GetProcessHeap () returned 0x800000
	[0180.624] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0180.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0180.624] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0180.624] GetProcessHeap () returned 0x800000
	[0180.624] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0180.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0180.625] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0180.625] GetProcessHeap () returned 0x800000
	[0180.625] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0180.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0180.755] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0180.756] GetProcessHeap () returned 0x800000
	[0180.756] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0180.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0180.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0180.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0181.170] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0181.178] GetProcessHeap () returned 0x800000
	[0181.178] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0181.178] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0181.179] GetProcessHeap () returned 0x800000
	[0181.179] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0181.179] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0181.179] GetProcessHeap () returned 0x800000
	[0181.179] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0181.179] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0181.180] GetProcessHeap () returned 0x800000
	[0181.180] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0181.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0181.182] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0181.182] GetProcessHeap () returned 0x800000
	[0181.182] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0181.182] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0181.183] GetProcessHeap () returned 0x800000
	[0181.183] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0181.183] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.183] GetProcessHeap () returned 0x800000
	[0181.183] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0181.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="䗺@")) returned 0xffffffff
	[0181.183] GetProcessHeap () returned 0x800000
	[0181.183] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0181.183] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0181.184] GetProcessHeap () returned 0x800000
	[0181.184] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0181.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0181.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0181.302] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0181.302] GetProcessHeap () returned 0x800000
	[0181.302] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0181.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0181.437] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0181.437] GetProcessHeap () returned 0x800000
	[0181.437] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x822c28 | out: hHeap=0x800000) returned 1
	[0181.437] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0181.437] GetProcessHeap () returned 0x800000
	[0181.437] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0181.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xe617dc20, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe617dc20, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0181.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0181.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0181.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0181.741] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0181.741] GetProcessHeap () returned 0x800000
	[0181.741] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0181.741] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0181.742] GetProcessHeap () returned 0x800000
	[0181.742] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0181.742] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0181.742] GetProcessHeap () returned 0x800000
	[0181.743] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.743] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0181.743] GetProcessHeap () returned 0x800000
	[0181.743] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0181.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0181.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0181.761] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0181.761] GetProcessHeap () returned 0x800000
	[0181.761] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0181.778] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0181.779] GetProcessHeap () returned 0x800000
	[0181.779] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0181.782] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0181.782] GetProcessHeap () returned 0x800000
	[0181.782] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0181.782] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.782] GetProcessHeap () returned 0x800000
	[0181.782] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.784] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.785] GetProcessHeap () returned 0x800000
	[0181.785] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.787] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.788] GetProcessHeap () returned 0x800000
	[0181.788] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.789] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.790] GetProcessHeap () returned 0x800000
	[0181.790] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0181.792] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0181.793] GetProcessHeap () returned 0x800000
	[0181.793] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0181.793] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.794] GetProcessHeap () returned 0x800000
	[0181.794] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.794] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.795] GetProcessHeap () returned 0x800000
	[0181.795] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0181.797] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0181.798] GetProcessHeap () returned 0x800000
	[0181.798] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0181.800] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0181.801] GetProcessHeap () returned 0x800000
	[0181.801] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0181.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0181.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0181.805] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0181.806] GetProcessHeap () returned 0x800000
	[0181.806] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0181.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0181.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0181.940] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0181.941] GetProcessHeap () returned 0x800000
	[0181.941] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0182.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0182.414] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0182.415] GetProcessHeap () returned 0x800000
	[0182.415] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0182.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0182.535] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0182.535] GetProcessHeap () returned 0x800000
	[0182.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0182.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0182.773] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0182.773] GetProcessHeap () returned 0x800000
	[0182.773] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0182.773] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0182.774] GetProcessHeap () returned 0x800000
	[0182.774] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0182.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0183.097] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0183.100] GetProcessHeap () returned 0x800000
	[0183.100] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0183.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0183.295] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0183.296] GetProcessHeap () returned 0x800000
	[0183.296] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0183.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0183.611] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0183.612] GetProcessHeap () returned 0x800000
	[0183.612] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0183.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0183.614] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0183.615] GetProcessHeap () returned 0x800000
	[0183.615] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0183.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0183.717] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0183.718] GetProcessHeap () returned 0x800000
	[0183.718] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0183.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0183.867] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0183.868] GetProcessHeap () returned 0x800000
	[0183.868] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0183.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0184.197] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0184.199] GetProcessHeap () returned 0x800000
	[0184.199] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0184.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0184.968] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0184.968] GetProcessHeap () returned 0x800000
	[0184.968] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0184.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0185.352] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0185.355] GetProcessHeap () returned 0x800000
	[0185.355] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0185.355] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0185.356] GetProcessHeap () returned 0x800000
	[0185.356] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0185.356] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0185.356] GetProcessHeap () returned 0x800000
	[0185.356] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0185.357] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0185.357] GetProcessHeap () returned 0x800000
	[0185.357] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0185.360] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0185.360] GetProcessHeap () returned 0x800000
	[0185.360] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0185.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0185.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0185.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0185.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0185.701] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0185.702] GetProcessHeap () returned 0x800000
	[0185.702] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0185.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0185.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0185.704] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0185.704] GetProcessHeap () returned 0x800000
	[0185.704] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0185.704] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0185.705] GetProcessHeap () returned 0x800000
	[0185.705] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0185.706] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0185.707] GetProcessHeap () returned 0x800000
	[0185.707] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0185.707] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0185.707] GetProcessHeap () returned 0x800000
	[0185.707] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0185.708] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0185.708] GetProcessHeap () returned 0x800000
	[0185.708] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0185.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef0a44f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0185.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0185.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0185.845] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0185.846] GetProcessHeap () returned 0x800000
	[0185.846] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0185.846] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0185.847] GetProcessHeap () returned 0x800000
	[0185.847] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0185.847] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0186.020] GetProcessHeap () returned 0x800000
	[0186.021] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0186.033] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visual Studio 8", cAlternateFileName="MICROS~3")) returned 1
	[0186.040] GetProcessHeap () returned 0x800000
	[0186.042] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0186.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0186.043] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.043] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common7", cAlternateFileName="")) returned 1
	[0186.043] GetProcessHeap () returned 0x800000
	[0186.043] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0186.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0186.044] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.044] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDE", cAlternateFileName="")) returned 1
	[0186.044] GetProcessHeap () returned 0x800000
	[0186.044] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0186.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0186.045] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.045] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivateAssemblies", cAlternateFileName="PRIVAT~1")) returned 1
	[0186.045] GetProcessHeap () returned 0x800000
	[0186.045] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0186.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0186.045] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.045] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3eb700, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61027a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a3eb700, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0186.045] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3eb700, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61027a50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a3eb700, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x257a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Project.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0186.045] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0186.046] GetProcessHeap () returned 0x800000
	[0186.046] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0186.046] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 1
	[0186.046] GetProcessHeap () returned 0x800000
	[0186.046] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0186.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0186.244] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.247] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f842200, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x6104dbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4f842200, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x337a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Adapter.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0186.248] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b54f00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50b54f00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x197b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInManager.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0186.248] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57dc5d00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x6104dbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x57dc5d00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x97b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0186.248] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x590d8a00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x590d8a00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x117a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0186.248] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ab3000, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56ab3000, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0186.248] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ab3000, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56ab3000, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x9758, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 0
	[0186.248] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0186.250] GetProcessHeap () returned 0x800000
	[0186.250] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0186.250] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1
	[0186.250] GetProcessHeap () returned 0x800000
	[0186.250] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0186.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0186.250] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.250] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="ITEMTE~1")) returned 1
	[0186.250] GetProcessHeap () returned 0x800000
	[0186.250] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e30060
	[0186.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0186.250] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.250] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSharp", cAlternateFileName="")) returned 1
	[0186.250] GetProcessHeap () returned 0x800000
	[0186.250] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e40068
	[0186.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0186.250] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.250] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0186.250] GetProcessHeap () returned 0x800000
	[0186.251] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0186.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x8b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="AboutBox.zip", cAlternateFileName="")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfig.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigInternal.zip", cAlternateFileName="APPCON~2.ZIP")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x492, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfo.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~2.ZIP")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f83e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeFile.zip", cAlternateFileName="")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataSet.zip", cAlternateFileName="")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x585, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interface.zip", cAlternateFileName="INTERF~1.ZIP")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3719, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1
	[0186.251] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x83f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource.zip", cAlternateFileName="")) returned 1
	[0186.252] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1
	[0186.252] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.zip", cAlternateFileName="")) returned 1
	[0186.252] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x3d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1
	[0186.252] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextFile.zip", cAlternateFileName="")) returned 1
	[0186.252] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1
	[0186.252] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x558, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizer.zip", cAlternateFileName="VISUAL~1.ZIP")) returned 1
	[0186.252] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 1
	[0186.252] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmlFile.zip", cAlternateFileName="")) returned 0
	[0186.252] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0186.252] GetProcessHeap () returned 0x800000
	[0186.253] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0186.253] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0186.253] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0186.253] GetProcessHeap () returned 0x800000
	[0186.253] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0186.253] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="VISUAL~1")) returned 1
	[0186.253] GetProcessHeap () returned 0x800000
	[0186.253] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e40068
	[0186.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0186.403] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.406] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0186.415] GetProcessHeap () returned 0x800000
	[0186.415] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0186.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0186.555] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigurationInternal.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dataset.zip", cAlternateFileName="")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.zip", cAlternateFileName="")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4faa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.zip", cAlternateFileName="")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xb090, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginForm.zip", cAlternateFileName="LOGINF~1.ZIP")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x36b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11042530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.zip", cAlternateFileName="")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11126d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xec16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.zip", cAlternateFileName="SPLASH~1.ZIP")) returned 1
	[0186.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111bf2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text.zip", cAlternateFileName="")) returned 1
	[0186.557] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1
	[0186.557] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 0
	[0186.557] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0186.557] GetProcessHeap () returned 0x800000
	[0186.557] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0186.557] FindNextFileW (in: hFindFile=0x34d16e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0186.557] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0186.558] GetProcessHeap () returned 0x800000
	[0186.558] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e40068 | out: hHeap=0x800000) returned 1
	[0186.558] FindNextFileW (in: hFindFile=0x34d15a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualBasic", cAlternateFileName="VISUAL~1")) returned 0
	[0186.558] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0186.558] GetProcessHeap () returned 0x800000
	[0186.558] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0186.558] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ItemTemplates", cAlternateFileName="ITEMTE~1")) returned 0
	[0186.558] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0186.559] GetProcessHeap () returned 0x800000
	[0186.559] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0186.560] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0
	[0186.560] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0186.560] GetProcessHeap () returned 0x800000
	[0186.561] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0186.561] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1
	[0186.561] GetProcessHeap () returned 0x800000
	[0186.561] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0186.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0186.561] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.561] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 1
	[0186.561] GetProcessHeap () returned 0x800000
	[0186.561] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0186.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0186.562] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.562] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0186.562] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0186.562] GetProcessHeap () returned 0x800000
	[0186.562] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0186.562] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 0
	[0186.562] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0186.563] GetProcessHeap () returned 0x800000
	[0186.563] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0186.563] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0
	[0186.563] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0186.563] GetProcessHeap () returned 0x800000
	[0186.563] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0186.563] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDK", cAlternateFileName="")) returned 1
	[0186.563] GetProcessHeap () returned 0x800000
	[0186.563] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0186.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0186.563] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.564] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0186.564] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0186.564] GetProcessHeap () returned 0x800000
	[0186.564] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0186.564] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1
	[0186.564] GetProcessHeap () returned 0x800000
	[0186.564] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0186.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0186.727] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.727] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 1
	[0186.728] GetProcessHeap () returned 0x800000
	[0186.728] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0186.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0186.728] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.728] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0186.728] GetProcessHeap () returned 0x800000
	[0186.728] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0186.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0186.900] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.902] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf09b00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf09b00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkgUI.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1
	[0186.904] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1
	[0186.906] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0
	[0186.906] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0186.906] GetProcessHeap () returned 0x800000
	[0186.906] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0186.906] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557a0300, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x557a0300, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x11348, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkg.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1
	[0186.906] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1
	[0186.906] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0
	[0186.906] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0186.907] GetProcessHeap () returned 0x800000
	[0186.907] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0186.907] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 0
	[0186.907] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0186.907] GetProcessHeap () returned 0x800000
	[0186.907] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0186.908] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 0
	[0186.908] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0186.909] GetProcessHeap () returned 0x800000
	[0186.909] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0186.909] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0186.909] GetProcessHeap () returned 0x800000
	[0186.909] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0186.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0186.909] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.909] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1
	[0186.909] GetProcessHeap () returned 0x800000
	[0186.909] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0186.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0186.910] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.910] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd106f400, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd106f400, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1
	[0186.910] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c210700, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x523e72d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c210700, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0186.910] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8de7800, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5253df30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8de7800, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0186.910] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e72900, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e72900, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1
	[0186.910] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1
	[0186.911] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0
	[0186.911] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0186.912] GetProcessHeap () returned 0x800000
	[0186.912] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0186.912] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0186.912] GetProcessHeap () returned 0x800000
	[0186.912] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0186.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0186.912] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.912] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc1cf9700, ftLastWriteTime.dwHighDateTime=0x1cac649, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="ASSEMB~1.XML")) returned 1
	[0186.912] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 1
	[0186.912] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 0
	[0186.912] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0186.913] GetProcessHeap () returned 0x800000
	[0186.913] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0186.913] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7188df0, ftCreationTime.dwHighDateTime=0x1d56a08, ftLastAccessTime.dwLowDateTime=0x8bf5c470, ftLastAccessTime.dwHighDateTime=0x1d54bae, ftLastWriteTime.dwLowDateTime=0x8bf5c470, ftLastWriteTime.dwHighDateTime=0x1d54bae, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="societies.exe", cAlternateFileName="SOCIET~1.EXE")) returned 1
	[0186.913] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7188df0, ftCreationTime.dwHighDateTime=0x1d56a08, ftLastAccessTime.dwLowDateTime=0x8bf5c470, ftLastAccessTime.dwHighDateTime=0x1d54bae, ftLastWriteTime.dwLowDateTime=0x8bf5c470, ftLastWriteTime.dwHighDateTime=0x1d54bae, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="societies.exe", cAlternateFileName="SOCIET~1.EXE")) returned 0
	[0186.913] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0186.913] GetProcessHeap () returned 0x800000
	[0186.913] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0186.913] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf1a38c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0186.913] GetProcessHeap () returned 0x800000
	[0186.913] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0186.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf1a38c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0187.037] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf1a38c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.038] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef422c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef422c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x23996480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1
	[0187.041] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x774f8200, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="APPLIC~1.INI")) returned 1
	[0187.042] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2431fb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x12670, dwReserved0=0x0, dwReserved1=0x0, cFileName="breakpadinjector.dll", cAlternateFileName="BREAKP~1.DLL")) returned 1
	[0187.045] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1
	[0187.049] GetProcessHeap () returned 0x800000
	[0187.049] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0187.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.049] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.049] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4910680, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x14623, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1
	[0187.049] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1
	[0187.049] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="components", cAlternateFileName="COMPON~1")) returned 1
	[0187.049] GetProcessHeap () returned 0x800000
	[0187.049] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0187.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0187.050] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.050] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49bf0480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42870, dwReserved0=0x0, dwReserved1=0x0, cFileName="browsercomps.dll", cAlternateFileName="BROWSE~1.DLL")) returned 1
	[0187.050] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="COMPON~1.MAN")) returned 1
	[0187.050] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="COMPON~1.MAN")) returned 0
	[0187.050] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0187.050] GetProcessHeap () returned 0x800000
	[0187.050] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0187.050] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd9ee5100, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="CRASHR~1.INI")) returned 1
	[0187.051] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions", cAlternateFileName="EXTENS~1")) returned 1
	[0187.051] GetProcessHeap () returned 0x800000
	[0187.051] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0187.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0187.051] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.051] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 1
	[0187.051] GetProcessHeap () returned 0x800000
	[0187.051] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0187.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0187.052] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.052] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xdc50ab00, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x889, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1
	[0187.052] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 1
	[0187.052] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 0
	[0187.052] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0187.052] GetProcessHeap () returned 0x800000
	[0187.052] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0187.052] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 0
	[0187.052] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0187.053] GetProcessHeap () returned 0x800000
	[0187.053] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0187.053] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x57748a00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x44080e, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0187.053] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 1
	[0187.053] GetProcessHeap () returned 0x800000
	[0187.053] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0187.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0187.053] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.053] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amazondotcom.xml", cAlternateFileName="AMAZON~1.XML")) returned 1
	[0187.053] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.xml", cAlternateFileName="")) returned 1
	[0187.053] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa17, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBay.xml", cAlternateFileName="")) returned 1
	[0187.053] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="google.xml", cAlternateFileName="")) returned 1
	[0187.053] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb91, dwReserved0=0x0, dwReserved1=0x0, cFileName="twitter.xml", cAlternateFileName="")) returned 1
	[0187.053] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="wikipedia.xml", cAlternateFileName="WIKIPE~1.XML")) returned 1
	[0187.053] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 1
	[0187.053] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 0
	[0187.054] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0187.054] GetProcessHeap () returned 0x800000
	[0187.054] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0187.054] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 0
	[0187.054] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.054] GetProcessHeap () returned 0x800000
	[0187.054] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0187.055] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x24ca9180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="CRASHR~1.EXE")) returned 1
	[0187.055] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x45382300, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.ini", cAlternateFileName="CRASHR~1.INI")) returned 1
	[0187.055] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xfd9a7300, ftLastWriteTime.dwHighDateTime=0x1cafd02, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="D3DCompiler_43.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1
	[0187.056] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="defaults", cAlternateFileName="")) returned 1
	[0187.056] GetProcessHeap () returned 0x800000
	[0187.056] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0187.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0187.182] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.184] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1
	[0187.187] GetProcessHeap () returned 0x800000
	[0187.187] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0187.187] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.187] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 1
	[0187.187] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 0
	[0187.187] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0187.188] GetProcessHeap () returned 0x800000
	[0187.188] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.188] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 0
	[0187.188] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0187.188] GetProcessHeap () returned 0x800000
	[0187.188] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0187.188] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x52aed680, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1
	[0187.188] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dictionaries", cAlternateFileName="DICTIO~1")) returned 1
	[0187.188] GetProcessHeap () returned 0x800000
	[0187.188] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0187.188] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.188] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0xcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1
	[0187.189] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 1
	[0187.189] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 0
	[0187.189] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0187.189] GetProcessHeap () returned 0x800000
	[0187.189] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.189] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x25fbbe80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x43470, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1
	[0187.189] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1
	[0187.189] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x49c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.dll", cAlternateFileName="")) returned 1
	[0187.189] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2ac07280, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x34ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="gkmedias.dll", cAlternateFileName="")) returned 1
	[0187.189] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaeef6000, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb125e740, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x5aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.log", cAlternateFileName="")) returned 1
	[0187.189] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2b590900, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2c8a3600, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x86270, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x2f7f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice_installer.exe", cAlternateFileName="MAINTE~2.EXE")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2e53f980, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4270, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozalloc.dll", cAlternateFileName="")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2eec9000, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1fe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozglue.dll", cAlternateFileName="")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x314eea00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x336470, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozjs.dll", cAlternateFileName="")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0x66d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp100.dll", cAlternateFileName="")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0xbc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3318ad80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1b1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nss3.dll", cAlternateFileName="")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3449da80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x60070, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x16870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x58a5b700, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x771d55, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf10b340, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf10b340, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1218800, ftLastWriteTime.dwHighDateTime=0x1ced1df, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="platform.ini", cAlternateFileName="")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x357b0780, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-container.exe", cAlternateFileName="PLUGIN~1.EXE")) returned 1
	[0187.190] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x36139e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x6e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-hang-ui.exe", cAlternateFileName="PLUGIN~2.EXE")) returned 1
	[0187.191] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5c2963ee, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="precomplete", cAlternateFileName="PRECOM~1")) returned 1
	[0187.191] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x13c55480, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x8f3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="REMOVE~1")) returned 1
	[0187.191] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1
	[0187.191] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x25870, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.dll", cAlternateFileName="")) returned 1
	[0187.191] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall", cAlternateFileName="UNINST~1")) returned 1
	[0187.191] GetProcessHeap () returned 0x800000
	[0187.191] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0187.443] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.453] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4a579b00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xd4fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1
	[0187.453] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925200, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1049400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="shortcuts_log.ini", cAlternateFileName="SHORTC~1.INI")) returned 1
	[0187.453] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 1
	[0187.453] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 0
	[0187.453] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0187.454] GetProcessHeap () returned 0x800000
	[0187.454] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.454] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x9f38e880, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1
	[0187.454] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x37dd6180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1
	[0187.454] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1
	[0187.454] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3875f800, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x29bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapp-uninstaller.exe", cAlternateFileName="WEBAPP~1.EXE")) returned 1
	[0187.454] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt", cAlternateFileName="")) returned 1
	[0187.454] GetProcessHeap () returned 0x800000
	[0187.454] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0187.454] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.454] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1efb80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1efb80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x593e4d80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x69f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0187.454] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 1
	[0187.454] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 0
	[0187.454] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0187.455] GetProcessHeap () returned 0x800000
	[0187.455] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.455] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x390e8e80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a670, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt-stub.exe", cAlternateFileName="WEBAPP~2.EXE")) returned 1
	[0187.455] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1
	[0187.455] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 0
	[0187.455] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0187.456] GetProcessHeap () returned 0x800000
	[0187.456] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0187.456] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~2")) returned 1
	[0187.456] GetProcessHeap () returned 0x800000
	[0187.456] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0187.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0187.456] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.456] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8093e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8093e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1
	[0187.457] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08409c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x19ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1
	[0187.457] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1
	[0187.457] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 0
	[0187.457] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0187.458] GetProcessHeap () returned 0x800000
	[0187.458] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0187.458] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0187.458] GetProcessHeap () returned 0x800000
	[0187.458] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0187.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0187.458] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe6157ac0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6157ac0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.458] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0187.458] GetProcessHeap () returned 0x800000
	[0187.458] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0187.458] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.458] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1
	[0187.458] GetProcessHeap () returned 0x800000
	[0187.458] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0187.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.459] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0187.459] GetProcessHeap () returned 0x800000
	[0187.459] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0187.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0187.461] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.461] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1
	[0187.461] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1
	[0187.461] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 0
	[0187.461] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0187.462] GetProcessHeap () returned 0x800000
	[0187.462] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0187.462] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0187.462] GetProcessHeap () returned 0x800000
	[0187.462] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0187.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0187.462] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.462] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fae55dc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5fae55dc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x5fc160dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1
	[0187.462] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1
	[0187.462] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0
	[0187.462] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0187.463] GetProcessHeap () returned 0x800000
	[0187.463] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0187.463] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0187.463] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.463] GetProcessHeap () returned 0x800000
	[0187.463] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0187.463] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0
	[0187.464] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0187.464] GetProcessHeap () returned 0x800000
	[0187.464] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.465] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8de300, ftCreationTime.dwHighDateTime=0x1cacf26, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a8de300, ftLastWriteTime.dwHighDateTime=0x1cacf26, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="MICROS~1.TAR")) returned 1
	[0187.465] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe56809a0, ftCreationTime.dwHighDateTime=0x1d50662, ftLastAccessTime.dwLowDateTime=0x24b50a90, ftLastAccessTime.dwHighDateTime=0x1d53273, ftLastWriteTime.dwLowDateTime=0x24b50a90, ftLastWriteTime.dwHighDateTime=0x1d53273, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tray.exe", cAlternateFileName="")) returned 1
	[0187.465] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe56809a0, ftCreationTime.dwHighDateTime=0x1d50662, ftLastAccessTime.dwLowDateTime=0x24b50a90, ftLastAccessTime.dwHighDateTime=0x1d53273, ftLastWriteTime.dwLowDateTime=0x24b50a90, ftLastWriteTime.dwHighDateTime=0x1d53273, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tray.exe", cAlternateFileName="")) returned 0
	[0187.465] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0187.465] GetProcessHeap () returned 0x800000
	[0187.465] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0187.465] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe61c9ee0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61c9ee0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0187.466] GetProcessHeap () returned 0x800000
	[0187.466] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0187.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe61c9ee0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61c9ee0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0187.466] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe61c9ee0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61c9ee0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.466] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42156600, ftCreationTime.dwHighDateTime=0x1d5092b, ftLastAccessTime.dwLowDateTime=0x168a9ae0, ftLastAccessTime.dwHighDateTime=0x1d51bc4, ftLastWriteTime.dwLowDateTime=0x168a9ae0, ftLastWriteTime.dwHighDateTime=0x1d51bc4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="golden-issn.exe", cAlternateFileName="GOLDEN~1.EXE")) returned 1
	[0187.466] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0187.466] GetProcessHeap () returned 0x800000
	[0187.466] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0187.599] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.599] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1
	[0187.599] GetProcessHeap () returned 0x800000
	[0187.600] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0187.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.600] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.600] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0187.600] GetProcessHeap () returned 0x800000
	[0187.600] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0187.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0187.602] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.602] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5f4b44, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa5f4b44, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaaa915ec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1
	[0187.602] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1db959, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab1db959, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab4fb63f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x406000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1
	[0187.602] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de43cb, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4de43cb, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79b03bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1
	[0187.602] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff96fd, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4ff96fd, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79e95cbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1
	[0187.602] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa915ec, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaaa915ec, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab0aae57, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x509000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1
	[0187.602] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9dec0f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9dec0f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa0e5c7a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1
	[0187.603] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653fb0e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x653fb0e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7a4fb7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1
	[0187.603] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa10bdda, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa10bdda, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa262a3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1
	[0187.603] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0187.603] GetProcessHeap () returned 0x800000
	[0187.603] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0187.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0187.603] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.603] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1
	[0187.603] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0
	[0187.603] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0187.604] GetProcessHeap () returned 0x800000
	[0187.604] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0187.604] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1
	[0187.604] GetProcessHeap () returned 0x800000
	[0187.604] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0187.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0187.604] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.604] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1
	[0187.604] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0
	[0187.604] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0187.605] GetProcessHeap () returned 0x800000
	[0187.605] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a94654c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x1a94654c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x5c12c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab0aae57, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab0aae57, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab1db959, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45bd12a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb45bd12a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb45e328a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4524ba9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4524ba9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4596fca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1158c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x6f1158c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ac6bc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44b2788, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44b2788, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x117000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44664c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44664c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44b2788, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x84000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7231257, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7231257, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ae0ebbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752adc3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x752adc3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b23923c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778c3b3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x778c3b3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b532dbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a39c61, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7a39c61, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b5a51dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1
	[0187.605] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa262a3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa262a3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa49dee1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x132000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1
	[0187.606] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c58b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x80c58b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b91117c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1
	[0187.606] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1
	[0187.606] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0
	[0187.606] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0187.606] GetProcessHeap () returned 0x800000
	[0187.606] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0187.606] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0187.606] GetProcessHeap () returned 0x800000
	[0187.606] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0187.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0187.608] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.609] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565d698d, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x565d698d, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754f141c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1
	[0187.609] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6605bc5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6605bc5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1
	[0187.609] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d930d9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56d930d9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x777e773c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1
	[0187.609] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1
	[0187.609] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e9da72, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56e9da72, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77d8eb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1
	[0187.609] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0187.609] GetProcessHeap () returned 0x800000
	[0187.609] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0187.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0187.609] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.609] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1
	[0187.609] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0
	[0187.610] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0187.610] GetProcessHeap () returned 0x800000
	[0187.610] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0187.610] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1
	[0187.610] GetProcessHeap () returned 0x800000
	[0187.610] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0187.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0187.610] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.610] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1
	[0187.610] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0
	[0187.611] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0187.611] GetProcessHeap () returned 0x800000
	[0187.611] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0187.611] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1
	[0187.611] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65474e4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65474e4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1
	[0187.611] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1
	[0187.611] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6651e86, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1
	[0187.611] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1
	[0187.611] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1
	[0187.611] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46a196b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1
	[0187.611] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44fea48, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44fea48, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6488e03, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6488e03, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6488e03, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64d50c3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6521384, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6521384, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65b9905, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65b9905, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46a196b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46a196b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46c7acc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1
	[0187.612] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1
	[0187.613] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e608f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x8e608f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x8e62f07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1
	[0187.613] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1
	[0187.613] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1
	[0187.613] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 0
	[0187.613] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0187.613] GetProcessHeap () returned 0x800000
	[0187.613] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0187.613] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0187.613] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.614] GetProcessHeap () returned 0x800000
	[0187.614] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0187.614] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0
	[0187.614] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0187.614] GetProcessHeap () returned 0x800000
	[0187.614] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.615] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0187.615] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0187.616] GetProcessHeap () returned 0x800000
	[0187.616] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0187.616] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0187.616] GetProcessHeap () returned 0x800000
	[0187.616] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0187.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0187.616] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.616] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8907f814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8907f814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0187.616] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0187.617] GetProcessHeap () returned 0x800000
	[0187.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0187.617] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1
	[0187.617] GetProcessHeap () returned 0x800000
	[0187.617] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0187.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0187.619] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe61a3d80, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe61a3d80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.619] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1901f390, ftCreationTime.dwHighDateTime=0x1d4ed4d, ftLastAccessTime.dwLowDateTime=0x54f31190, ftLastAccessTime.dwHighDateTime=0x1d4f99b, ftLastWriteTime.dwLowDateTime=0x54f31190, ftLastWriteTime.dwHighDateTime=0x1d4f99b, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="coordinates.exe", cAlternateFileName="COORDI~1.EXE")) returned 1
	[0187.619] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0187.619] GetProcessHeap () returned 0x800000
	[0187.619] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.619] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.619] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1
	[0187.620] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1
	[0187.620] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 0
	[0187.620] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.620] GetProcessHeap () returned 0x800000
	[0187.620] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.620] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc1c145, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdcc1c145, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1
	[0187.620] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7732a07, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe7732a07, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1
	[0187.620] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9910bf, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde9910bf, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ac13ba0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1
	[0187.620] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe6c321, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbe6c321, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x6c6758d0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1
	[0187.620] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434cc330, ftCreationTime.dwHighDateTime=0x1d53ce1, ftLastAccessTime.dwLowDateTime=0x5caa7220, ftLastAccessTime.dwHighDateTime=0x1d54ee1, ftLastWriteTime.dwLowDateTime=0x5caa7220, ftLastWriteTime.dwHighDateTime=0x1d54ee1, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nationslynnship.exe", cAlternateFileName="NATION~1.EXE")) returned 1
	[0187.620] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434cc330, ftCreationTime.dwHighDateTime=0x1d53ce1, ftLastAccessTime.dwLowDateTime=0x5caa7220, ftLastAccessTime.dwHighDateTime=0x1d54ee1, ftLastWriteTime.dwLowDateTime=0x5caa7220, ftLastWriteTime.dwHighDateTime=0x1d54ee1, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="nationslynnship.exe", cAlternateFileName="NATION~1.EXE")) returned 0
	[0187.621] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0187.621] GetProcessHeap () returned 0x800000
	[0187.621] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0187.621] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1
	[0187.621] GetProcessHeap () returned 0x800000
	[0187.621] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0187.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0187.622] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.623] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0187.623] GetProcessHeap () returned 0x800000
	[0187.623] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.623] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.623] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1
	[0187.623] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1
	[0187.623] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0
	[0187.623] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.623] GetProcessHeap () returned 0x800000
	[0187.624] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.624] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b530d7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b530d7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1
	[0187.624] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1
	[0187.624] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b9f397, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b9f397, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1
	[0187.624] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879b1223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x879b1223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87a95a65, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1
	[0187.624] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1
	[0187.624] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1
	[0187.624] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1
	[0187.624] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1
	[0187.624] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0
	[0187.624] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0187.625] GetProcessHeap () returned 0x800000
	[0187.625] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0187.625] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0187.625] GetProcessHeap () returned 0x800000
	[0187.625] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34b0048
	[0187.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0187.625] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.626] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0187.626] GetProcessHeap () returned 0x800000
	[0187.626] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.627] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.627] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1
	[0187.627] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1
	[0187.627] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1
	[0187.627] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.629] GetProcessHeap () returned 0x800000
	[0187.629] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.629] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0187.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.629] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.629] GetProcessHeap () returned 0x800000
	[0187.629] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.631] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.632] GetProcessHeap () returned 0x800000
	[0187.632] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.633] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.634] GetProcessHeap () returned 0x800000
	[0187.634] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.634] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.635] GetProcessHeap () returned 0x800000
	[0187.635] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.637] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.638] GetProcessHeap () returned 0x800000
	[0187.638] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.638] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0187.638] GetProcessHeap () returned 0x800000
	[0187.638] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0187.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe6640820, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6640820, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0187.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0187.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0187.850] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0187.850] GetProcessHeap () returned 0x800000
	[0187.850] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0187.850] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0187.851] GetProcessHeap () returned 0x800000
	[0187.851] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0187.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0187.942] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0187.943] GetProcessHeap () returned 0x800000
	[0187.943] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0187.943] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0187.943] GetProcessHeap () returned 0x800000
	[0187.943] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0187.944] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0187.944] GetProcessHeap () returned 0x800000
	[0187.944] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0187.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0188.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0188.223] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0188.224] GetProcessHeap () returned 0x800000
	[0188.224] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0188.224] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0188.224] GetProcessHeap () returned 0x800000
	[0188.224] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0188.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0188.225] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0188.225] GetProcessHeap () returned 0x800000
	[0188.225] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0188.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0188.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0188.505] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0188.506] GetProcessHeap () returned 0x800000
	[0188.506] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0188.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0188.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0188.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0188.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0188.747] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0188.747] GetProcessHeap () returned 0x800000
	[0188.747] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0188.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0188.748] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0188.748] GetProcessHeap () returned 0x800000
	[0188.748] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0188.748] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0188.749] GetProcessHeap () returned 0x800000
	[0188.749] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0188.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0188.911] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0188.911] GetProcessHeap () returned 0x800000
	[0188.911] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0188.911] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0188.912] GetProcessHeap () returned 0x800000
	[0188.912] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0188.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0188.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0189.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0189.009] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0189.010] GetProcessHeap () returned 0x800000
	[0189.010] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0189.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0189.010] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0189.011] GetProcessHeap () returned 0x800000
	[0189.011] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0189.011] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0189.011] GetProcessHeap () returned 0x800000
	[0189.011] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0189.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0189.506] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0189.507] GetProcessHeap () returned 0x800000
	[0189.507] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0189.507] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0189.508] GetProcessHeap () returned 0x800000
	[0189.508] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0189.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0189.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0189.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0189.615] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0189.615] GetProcessHeap () returned 0x800000
	[0189.615] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0189.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a5e242, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0189.615] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0189.616] GetProcessHeap () returned 0x800000
	[0189.616] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0189.616] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0189.616] GetProcessHeap () returned 0x800000
	[0189.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0189.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0189.816] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0189.818] GetProcessHeap () returned 0x800000
	[0189.818] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0189.818] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0189.819] GetProcessHeap () returned 0x800000
	[0189.819] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0189.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0189.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0189.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0189.821] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0189.821] GetProcessHeap () returned 0x800000
	[0189.821] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0189.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0189.975] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0189.976] GetProcessHeap () returned 0x800000
	[0189.976] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0189.977] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0189.977] GetProcessHeap () returned 0x800000
	[0189.977] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0189.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0190.059] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0190.060] GetProcessHeap () returned 0x800000
	[0190.060] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0190.060] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0190.060] GetProcessHeap () returned 0x800000
	[0190.060] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0190.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0190.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0190.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0190.216] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0190.216] GetProcessHeap () returned 0x800000
	[0190.216] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0190.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0190.217] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0190.217] GetProcessHeap () returned 0x800000
	[0190.217] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0190.217] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0190.218] GetProcessHeap () returned 0x800000
	[0190.218] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0190.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0190.219] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0190.220] GetProcessHeap () returned 0x800000
	[0190.220] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0190.221] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0190.222] GetProcessHeap () returned 0x800000
	[0190.222] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0190.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0190.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0190.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0190.377] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0190.378] GetProcessHeap () returned 0x800000
	[0190.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0190.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0190.378] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0190.379] GetProcessHeap () returned 0x800000
	[0190.379] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0190.379] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0190.379] GetProcessHeap () returned 0x800000
	[0190.379] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0190.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0190.510] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0190.511] GetProcessHeap () returned 0x800000
	[0190.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0190.511] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0190.512] GetProcessHeap () returned 0x800000
	[0190.512] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0190.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0190.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0190.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0190.638] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0190.638] GetProcessHeap () returned 0x800000
	[0190.638] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0190.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0190.638] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0190.639] GetProcessHeap () returned 0x800000
	[0190.639] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0190.639] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0190.640] GetProcessHeap () returned 0x800000
	[0190.640] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0190.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0190.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0190.969] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0190.970] GetProcessHeap () returned 0x800000
	[0190.970] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0190.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0190.970] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0190.971] GetProcessHeap () returned 0x800000
	[0190.971] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0190.971] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0190.971] GetProcessHeap () returned 0x800000
	[0190.971] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0190.973] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0190.973] GetProcessHeap () returned 0x800000
	[0190.973] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0190.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0190.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0191.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0191.174] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0191.174] GetProcessHeap () returned 0x800000
	[0191.174] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0191.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0191.175] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0191.175] GetProcessHeap () returned 0x800000
	[0191.175] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0191.175] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0191.176] GetProcessHeap () returned 0x800000
	[0191.176] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0191.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0191.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818acf3e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818acf3e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0191.394] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0191.395] GetProcessHeap () returned 0x800000
	[0191.395] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0191.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0191.396] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0191.397] GetProcessHeap () returned 0x800000
	[0191.397] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0192.074] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.075] GetProcessHeap () returned 0x800000
	[0192.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.076] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.077] GetProcessHeap () returned 0x800000
	[0192.077] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.077] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.078] GetProcessHeap () returned 0x800000
	[0192.078] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0192.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.079] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.079] GetProcessHeap () returned 0x800000
	[0192.079] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0192.079] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0192.080] GetProcessHeap () returned 0x800000
	[0192.080] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0192.080] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0192.081] GetProcessHeap () returned 0x800000
	[0192.081] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a7c0 | out: hHeap=0x800000) returned 1
	[0192.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\*", lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0192.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0192.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1668
	[0192.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0192.085] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0192.085] GetProcessHeap () returned 0x800000
	[0192.085] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0192.086] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.295] GetProcessHeap () returned 0x800000
	[0192.295] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.296] FindClose (in: hFindFile=0x34d1668 | out: hFindFile=0x34d1668) returned 1
	[0192.297] GetProcessHeap () returned 0x800000
	[0192.297] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.297] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.298] GetProcessHeap () returned 0x800000
	[0192.298] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.522] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.523] GetProcessHeap () returned 0x800000
	[0192.523] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.523] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.523] GetProcessHeap () returned 0x800000
	[0192.523] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.523] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0192.524] GetProcessHeap () returned 0x800000
	[0192.524] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0192.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0192.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0192.527] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0192.528] GetProcessHeap () returned 0x800000
	[0192.528] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.528] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.529] GetProcessHeap () returned 0x800000
	[0192.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.529] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.529] GetProcessHeap () returned 0x800000
	[0192.529] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.529] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.530] GetProcessHeap () returned 0x800000
	[0192.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.531] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.532] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.533] GetProcessHeap () returned 0x800000
	[0192.533] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.533] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.533] GetProcessHeap () returned 0x800000
	[0192.533] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.534] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.535] GetProcessHeap () returned 0x800000
	[0192.535] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.537] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.537] GetProcessHeap () returned 0x800000
	[0192.537] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="䗺@")) returned 0xffffffff
	[0192.537] GetProcessHeap () returned 0x800000
	[0192.537] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0192.537] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.538] GetProcessHeap () returned 0x800000
	[0192.538] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.538] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.538] GetProcessHeap () returned 0x800000
	[0192.538] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.541] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.542] GetProcessHeap () returned 0x800000
	[0192.542] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.543] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.543] GetProcessHeap () returned 0x800000
	[0192.543] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.543] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.544] GetProcessHeap () returned 0x800000
	[0192.544] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0192.547] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0192.547] GetProcessHeap () returned 0x800000
	[0192.547] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0192.547] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.547] GetProcessHeap () returned 0x800000
	[0192.547] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0192.549] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0192.550] GetProcessHeap () returned 0x800000
	[0192.550] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0192.550] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.550] GetProcessHeap () returned 0x800000
	[0192.550] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.550] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.551] GetProcessHeap () returned 0x800000
	[0192.551] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.551] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.551] GetProcessHeap () returned 0x800000
	[0192.551] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.553] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.554] GetProcessHeap () returned 0x800000
	[0192.554] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.555] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.555] GetProcessHeap () returned 0x800000
	[0192.555] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.555] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.555] GetProcessHeap () returned 0x800000
	[0192.555] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0192.556] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0192.556] GetProcessHeap () returned 0x800000
	[0192.556] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x87a778 | out: hHeap=0x800000) returned 1
	[0192.557] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.557] GetProcessHeap () returned 0x800000
	[0192.557] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.834] GetProcessHeap () returned 0x800000
	[0192.834] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0192.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.834] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.834] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1
	[0192.834] GetProcessHeap () returned 0x800000
	[0192.834] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0192.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0192.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.835] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.835] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0192.835] GetProcessHeap () returned 0x800000
	[0192.835] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0192.835] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0
	[0192.835] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.836] GetProcessHeap () returned 0x800000
	[0192.836] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.836] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0
	[0192.836] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.836] GetProcessHeap () returned 0x800000
	[0192.836] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.836] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1
	[0192.836] GetProcessHeap () returned 0x800000
	[0192.836] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0192.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.836] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.836] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1
	[0192.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1
	[0192.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0
	[0192.837] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.837] GetProcessHeap () returned 0x800000
	[0192.837] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.837] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0192.837] GetProcessHeap () returned 0x800000
	[0192.837] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0192.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.837] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.837] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.838] GetProcessHeap () returned 0x800000
	[0192.838] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.838] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1
	[0192.838] GetProcessHeap () returned 0x800000
	[0192.838] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0192.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.838] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.838] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1
	[0192.838] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1
	[0192.838] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0
	[0192.838] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.839] GetProcessHeap () returned 0x800000
	[0192.839] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.839] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1
	[0192.839] GetProcessHeap () returned 0x800000
	[0192.839] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0192.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.839] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.839] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1
	[0192.839] GetProcessHeap () returned 0x800000
	[0192.839] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0192.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.839] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.839] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.839] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.840] GetProcessHeap () returned 0x800000
	[0192.840] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.840] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0
	[0192.840] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.840] GetProcessHeap () returned 0x800000
	[0192.840] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.840] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1
	[0192.840] GetProcessHeap () returned 0x800000
	[0192.840] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0192.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.840] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.841] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1
	[0192.841] GetProcessHeap () returned 0x800000
	[0192.841] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0192.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x1d2e676, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2010, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䗺@")) returned 0xffffffff
	[0192.841] GetProcessHeap () returned 0x800000
	[0192.841] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.841] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0
	[0192.841] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.841] GetProcessHeap () returned 0x800000
	[0192.841] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.841] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0192.841] GetProcessHeap () returned 0x800000
	[0192.841] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0192.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0192.842] GetProcessHeap () returned 0x800000
	[0192.842] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0192.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.842] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.842] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0192.842] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0192.842] GetProcessHeap () returned 0x800000
	[0192.842] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.842] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1
	[0192.842] GetProcessHeap () returned 0x800000
	[0192.842] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0192.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="䗺@")) returned 0xffffffff
	[0192.843] GetProcessHeap () returned 0x800000
	[0192.843] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0192.843] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0
	[0192.843] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0192.843] GetProcessHeap () returned 0x800000
	[0192.843] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0192.843] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1
	[0192.843] GetProcessHeap () returned 0x800000
	[0192.843] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0192.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0192.843] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.843] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1
	[0192.843] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1
	[0192.843] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1
	[0192.843] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1
	[0192.844] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1
	[0192.844] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1
	[0192.844] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1
	[0192.844] GetProcessHeap () returned 0x800000
	[0192.844] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0192.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0192.844] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.844] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0192.844] GetProcessHeap () returned 0x800000
	[0192.844] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0192.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.021] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.022] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
	[0193.022] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
	[0193.022] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1
	[0193.022] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1
	[0193.023] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1
	[0193.024] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1
	[0193.024] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1
	[0193.024] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1
	[0193.024] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1
	[0193.024] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1
	[0193.024] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1
	[0193.024] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1
	[0193.024] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0
	[0193.024] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0193.024] GetProcessHeap () returned 0x800000
	[0193.024] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.025] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0193.025] GetProcessHeap () returned 0x800000
	[0193.025] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0193.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.026] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.027] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
	[0193.027] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
	[0193.027] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1
	[0193.027] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1
	[0193.027] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1
	[0193.027] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1
	[0193.027] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1
	[0193.028] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1
	[0193.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1
	[0193.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1
	[0193.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1
	[0193.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1
	[0193.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1
	[0193.029] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0
	[0193.029] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.030] GetProcessHeap () returned 0x800000
	[0193.030] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.030] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0
	[0193.030] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.030] GetProcessHeap () returned 0x800000
	[0193.030] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.030] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0
	[0193.031] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0193.031] GetProcessHeap () returned 0x800000
	[0193.031] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0193.031] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0193.031] GetProcessHeap () returned 0x800000
	[0193.031] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0193.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0193.031] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.031] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0193.031] GetProcessHeap () returned 0x800000
	[0193.031] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.032] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.032] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1
	[0193.032] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0
	[0193.032] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.033] GetProcessHeap () returned 0x800000
	[0193.033] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.033] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1
	[0193.033] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0
	[0193.033] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0193.035] GetProcessHeap () returned 0x800000
	[0193.035] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0193.035] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1
	[0193.035] GetProcessHeap () returned 0x800000
	[0193.035] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0193.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0193.035] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.035] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1
	[0193.036] GetProcessHeap () returned 0x800000
	[0193.036] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.036] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.036] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0193.036] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.037] GetProcessHeap () returned 0x800000
	[0193.037] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.037] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe4ccfd00, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe4ccfd00, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1
	[0193.037] GetProcessHeap () returned 0x800000
	[0193.037] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe4ccfd00, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe4ccfd00, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.037] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe4ccfd00, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe4ccfd00, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.037] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4ccfd00, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1
	[0193.037] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4ccfd00, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0
	[0193.037] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.038] GetProcessHeap () returned 0x800000
	[0193.038] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.038] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc07b680, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1
	[0193.038] GetProcessHeap () returned 0x800000
	[0193.038] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc07b680, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.039] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc07b680, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.039] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb35800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xecb35800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1
	[0193.039] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1
	[0193.039] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc07b680, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0xc07b680, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x401c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDataBookmarks.dat", cAlternateFileName="RACWMI~2.DAT")) returned 1
	[0193.039] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc055520, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0xc055520, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x401c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 1
	[0193.039] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc055520, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0xc055520, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0xc07b680, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x401c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 0
	[0193.040] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.040] GetProcessHeap () returned 0x800000
	[0193.041] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.041] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe594f080, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe594f080, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0193.041] GetProcessHeap () returned 0x800000
	[0193.041] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe594f080, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe594f080, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.041] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe594f080, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe594f080, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.041] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe594f080, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe594f080, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0193.041] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.041] GetProcessHeap () returned 0x800000
	[0193.041] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.041] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe594f080, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe594f080, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0
	[0193.041] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0193.042] GetProcessHeap () returned 0x800000
	[0193.042] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0193.042] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
	[0193.042] GetProcessHeap () returned 0x800000
	[0193.042] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0193.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0193.043] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.043] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1
	[0193.043] GetProcessHeap () returned 0x800000
	[0193.043] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x1d2dd9c, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2010, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䗺@")) returned 0xffffffff
	[0193.043] GetProcessHeap () returned 0x800000
	[0193.043] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.043] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0
	[0193.043] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0193.044] GetProcessHeap () returned 0x800000
	[0193.044] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0193.044] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1
	[0193.044] GetProcessHeap () returned 0x800000
	[0193.044] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0193.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0193.044] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.044] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29423840, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz.dat", cAlternateFileName="5P5NRG~1.DAT")) returned 1
	[0193.044] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1
	[0193.044] GetProcessHeap () returned 0x800000
	[0193.044] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.045] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.045] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1
	[0193.046] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1
	[0193.047] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1
	[0193.048] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1
	[0193.048] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1
	[0193.048] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1
	[0193.048] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1
	[0193.048] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0
	[0193.048] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.049] GetProcessHeap () returned 0x800000
	[0193.049] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.049] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1
	[0193.049] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1
	[0193.049] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0
	[0193.049] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0193.049] GetProcessHeap () returned 0x800000
	[0193.049] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0193.050] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0193.050] GetProcessHeap () returned 0x800000
	[0193.050] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0193.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0193.050] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.050] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0193.050] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0193.050] GetProcessHeap () returned 0x800000
	[0193.050] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0193.050] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1
	[0193.050] GetProcessHeap () returned 0x800000
	[0193.050] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0193.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0193.051] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.051] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0193.051] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0193.051] GetProcessHeap () returned 0x800000
	[0193.051] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0193.051] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0193.051] GetProcessHeap () returned 0x800000
	[0193.051] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0193.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1428
	[0193.051] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.052] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1
	[0193.052] GetProcessHeap () returned 0x800000
	[0193.052] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.052] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.052] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0193.052] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.052] GetProcessHeap () returned 0x800000
	[0193.052] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.052] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1
	[0193.053] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1
	[0193.053] GetProcessHeap () returned 0x800000
	[0193.053] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.053] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.053] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0193.053] GetProcessHeap () returned 0x800000
	[0193.053] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0193.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.053] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.053] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1
	[0193.053] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1
	[0193.053] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 0
	[0193.053] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.054] GetProcessHeap () returned 0x800000
	[0193.054] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.054] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0193.054] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.054] GetProcessHeap () returned 0x800000
	[0193.054] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.054] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1
	[0193.054] GetProcessHeap () returned 0x800000
	[0193.054] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.055] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.055] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0193.055] GetProcessHeap () returned 0x800000
	[0193.055] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0193.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.057] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.057] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0193.057] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.058] GetProcessHeap () returned 0x800000
	[0193.058] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.058] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 0
	[0193.058] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.058] GetProcessHeap () returned 0x800000
	[0193.058] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.058] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1
	[0193.058] GetProcessHeap () returned 0x800000
	[0193.058] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.058] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.058] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0193.059] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.059] GetProcessHeap () returned 0x800000
	[0193.059] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.059] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1
	[0193.059] GetProcessHeap () returned 0x800000
	[0193.059] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="䗺@")) returned 0xffffffff
	[0193.059] GetProcessHeap () returned 0x800000
	[0193.059] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.059] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1
	[0193.059] GetProcessHeap () returned 0x800000
	[0193.059] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0193.246] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.246] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0193.246] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x31469, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="RINGTO~3.WMA")) returned 1
	[0193.246] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x21fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="RI5404~1.WMA")) returned 1
	[0193.246] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="RI0FCF~1.WMA")) returned 1
	[0193.246] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a039, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="RINGTO~4.WMA")) returned 1
	[0193.246] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="RINGTO~1.WMA")) returned 1
	[0193.246] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="RIF0DC~1.WMA")) returned 1
	[0193.246] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="RID564~1.WMA")) returned 1
	[0193.247] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x21fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="RINGTO~2.WMA")) returned 1
	[0193.247] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="RI70DC~1.WMA")) returned 1
	[0193.247] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 1
	[0193.247] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 0
	[0193.247] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0193.248] GetProcessHeap () returned 0x800000
	[0193.248] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.248] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1
	[0193.248] GetProcessHeap () returned 0x800000
	[0193.248] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0193.248] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.248] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1
	[0193.248] GetProcessHeap () returned 0x800000
	[0193.248] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0193.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0193.248] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.248] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0193.248] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0193.249] GetProcessHeap () returned 0x800000
	[0193.249] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0193.249] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1
	[0193.249] GetProcessHeap () returned 0x800000
	[0193.249] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0193.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0193.249] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.249] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0193.249] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0193.250] GetProcessHeap () returned 0x800000
	[0193.250] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0193.250] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1
	[0193.250] GetProcessHeap () returned 0x800000
	[0193.250] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0193.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0193.250] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.250] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0193.250] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0193.250] GetProcessHeap () returned 0x800000
	[0193.250] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0193.250] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0
	[0193.250] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0193.251] GetProcessHeap () returned 0x800000
	[0193.251] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.252] FindNextFileW (in: hFindFile=0x34d1428, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0193.252] GetProcessHeap () returned 0x800000
	[0193.252] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0193.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0193.253] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.253] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc35f15, ftCreationTime.dwHighDateTime=0x1ca0440, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="DEFAUL~1.LNK")) returned 1
	[0193.253] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f5a4e15, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f5a4e15, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0193.253] FindNextFileW (in: hFindFile=0x34d1728, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1
	[0193.253] GetProcessHeap () returned 0x800000
	[0193.253] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e10050
	[0193.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0193.254] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.254] FindNextFileW (in: hFindFile=0x34d17e8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1
	[0193.254] GetProcessHeap () returned 0x800000
	[0193.254] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e20058
	[0193.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0193.254] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.254] FindNextFileW (in: hFindFile=0x34d1628, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1
	[0193.254] GetProcessHeap () returned 0x800000
	[0193.254] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e30060
	[0193.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0193.255] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0193.255] GetProcessHeap () returned 0x800000
	[0193.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0193.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0193.255] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0193.256] GetProcessHeap () returned 0x800000
	[0193.256] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0193.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0193.256] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0193.256] GetProcessHeap () returned 0x800000
	[0193.256] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0193.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0193.257] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0193.257] GetProcessHeap () returned 0x800000
	[0193.257] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0193.257] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0193.258] GetProcessHeap () returned 0x800000
	[0193.258] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0193.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0193.258] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0193.258] GetProcessHeap () returned 0x800000
	[0193.258] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0193.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0193.259] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0193.259] GetProcessHeap () returned 0x800000
	[0193.259] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0193.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0193.260] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0193.261] GetProcessHeap () returned 0x800000
	[0193.261] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0193.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0193.261] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0193.261] GetProcessHeap () returned 0x800000
	[0193.262] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0193.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0193.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15a8
	[0193.262] FindClose (in: hFindFile=0x34d15a8 | out: hFindFile=0x34d15a8) returned 1
	[0193.262] GetProcessHeap () returned 0x800000
	[0193.262] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e30060 | out: hHeap=0x800000) returned 1
	[0193.262] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0193.263] GetProcessHeap () returned 0x800000
	[0193.263] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0193.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0193.264] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0193.265] GetProcessHeap () returned 0x800000
	[0193.265] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0193.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfaec2a70, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfaec2a70, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0193.265] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0193.265] GetProcessHeap () returned 0x800000
	[0193.265] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0193.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1628
	[0193.266] FindClose (in: hFindFile=0x34d1628 | out: hFindFile=0x34d1628) returned 1
	[0193.266] GetProcessHeap () returned 0x800000
	[0193.266] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e20058 | out: hHeap=0x800000) returned 1
	[0193.266] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0193.267] GetProcessHeap () returned 0x800000
	[0193.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0193.267] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0193.267] GetProcessHeap () returned 0x800000
	[0193.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0193.269] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0193.270] GetProcessHeap () returned 0x800000
	[0193.270] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1728
	[0193.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0193.271] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0193.271] GetProcessHeap () returned 0x800000
	[0193.272] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0193.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17e8
	[0193.272] FindClose (in: hFindFile=0x34d17e8 | out: hFindFile=0x34d17e8) returned 1
	[0193.274] GetProcessHeap () returned 0x800000
	[0193.274] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e10050 | out: hHeap=0x800000) returned 1
	[0193.274] FindClose (in: hFindFile=0x34d1728 | out: hFindFile=0x34d1728) returned 1
	[0193.274] GetProcessHeap () returned 0x800000
	[0193.274] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.276] FindClose (in: hFindFile=0x34d1428 | out: hFindFile=0x34d1428) returned 1
	[0193.276] GetProcessHeap () returned 0x800000
	[0193.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0193.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="䗺@")) returned 0xffffffff
	[0193.277] GetProcessHeap () returned 0x800000
	[0193.277] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0193.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x1ca0444, ftCreationTime.dwLowDateTime=0xa6802240, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2010, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䗺@")) returned 0xffffffff
	[0193.744] GetProcessHeap () returned 0x800000
	[0193.749] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0193.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0193.755] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0193.989] GetProcessHeap () returned 0x800000
	[0193.989] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0193.989] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.990] GetProcessHeap () returned 0x800000
	[0193.990] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0193.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0193.991] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0193.991] GetProcessHeap () returned 0x800000
	[0193.991] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0193.991] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.991] GetProcessHeap () returned 0x800000
	[0193.991] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.992] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0193.992] GetProcessHeap () returned 0x800000
	[0193.992] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0193.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0193.995] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0193.996] GetProcessHeap () returned 0x800000
	[0193.996] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0193.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0193.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.996] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0193.997] GetProcessHeap () returned 0x800000
	[0193.997] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0193.997] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0193.997] GetProcessHeap () returned 0x800000
	[0193.997] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0193.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Oracle\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0193.997] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0193.998] GetProcessHeap () returned 0x800000
	[0193.998] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0193.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0193.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0193.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0193.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0193.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0193.999] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0193.999] GetProcessHeap () returned 0x800000
	[0193.999] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0194.000] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0194.000] GetProcessHeap () returned 0x800000
	[0194.000] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0194.000] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.000] GetProcessHeap () returned 0x800000
	[0194.001] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.001] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.001] GetProcessHeap () returned 0x800000
	[0194.001] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0194.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0194.003] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0194.004] GetProcessHeap () returned 0x800000
	[0194.004] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0194.004] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0194.004] GetProcessHeap () returned 0x800000
	[0194.004] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0194.004] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.005] GetProcessHeap () returned 0x800000
	[0194.005] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.005] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.005] GetProcessHeap () returned 0x800000
	[0194.005] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.006] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0194.007] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0194.008] GetProcessHeap () returned 0x800000
	[0194.008] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0194.008] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.008] GetProcessHeap () returned 0x800000
	[0194.008] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.008] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.009] GetProcessHeap () returned 0x800000
	[0194.009] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.010] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.010] GetProcessHeap () returned 0x800000
	[0194.010] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0194.011] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0194.012] GetProcessHeap () returned 0x800000
	[0194.012] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0194.012] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.012] GetProcessHeap () returned 0x800000
	[0194.012] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.013] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.013] GetProcessHeap () returned 0x800000
	[0194.013] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.014] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.015] GetProcessHeap () returned 0x800000
	[0194.015] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0194.016] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0194.016] GetProcessHeap () returned 0x800000
	[0194.016] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0194.016] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.017] GetProcessHeap () returned 0x800000
	[0194.017] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.017] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.017] GetProcessHeap () returned 0x800000
	[0194.017] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0194.019] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0194.019] GetProcessHeap () returned 0x800000
	[0194.019] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0194.020] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.020] GetProcessHeap () returned 0x800000
	[0194.020] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.020] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.020] GetProcessHeap () returned 0x800000
	[0194.021] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0194.023] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0194.023] GetProcessHeap () returned 0x800000
	[0194.023] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0194.023] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.023] GetProcessHeap () returned 0x800000
	[0194.023] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.024] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.119] GetProcessHeap () returned 0x800000
	[0194.119] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0194.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.120] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.121] GetProcessHeap () returned 0x800000
	[0194.121] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.121] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0194.122] GetProcessHeap () returned 0x800000
	[0194.122] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0194.122] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.122] GetProcessHeap () returned 0x800000
	[0194.122] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0194.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.123] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.123] GetProcessHeap () returned 0x800000
	[0194.123] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.123] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0194.124] GetProcessHeap () returned 0x800000
	[0194.124] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0194.124] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.124] GetProcessHeap () returned 0x800000
	[0194.124] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0194.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.125] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.125] GetProcessHeap () returned 0x800000
	[0194.125] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.125] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0194.126] GetProcessHeap () returned 0x800000
	[0194.126] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0194.126] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.126] GetProcessHeap () returned 0x800000
	[0194.126] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0194.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.127] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.127] GetProcessHeap () returned 0x800000
	[0194.127] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.127] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0194.128] GetProcessHeap () returned 0x800000
	[0194.128] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0194.128] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.128] GetProcessHeap () returned 0x800000
	[0194.128] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.128] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.129] GetProcessHeap () returned 0x800000
	[0194.129] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0194.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.129] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.130] GetProcessHeap () returned 0x800000
	[0194.130] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.130] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0194.130] GetProcessHeap () returned 0x800000
	[0194.130] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0194.130] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.131] GetProcessHeap () returned 0x800000
	[0194.131] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0194.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.131] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.132] GetProcessHeap () returned 0x800000
	[0194.132] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.132] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0194.132] GetProcessHeap () returned 0x800000
	[0194.132] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0194.132] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.133] GetProcessHeap () returned 0x800000
	[0194.133] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.134] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.134] GetProcessHeap () returned 0x800000
	[0194.134] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0194.135] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0194.136] GetProcessHeap () returned 0x800000
	[0194.136] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0194.137] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0194.137] GetProcessHeap () returned 0x800000
	[0194.137] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.137] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0194.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.139] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.139] GetProcessHeap () returned 0x800000
	[0194.139] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.139] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.139] GetProcessHeap () returned 0x800000
	[0194.140] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0194.140] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0194.140] GetProcessHeap () returned 0x800000
	[0194.140] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.141] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0194.142] GetProcessHeap () returned 0x800000
	[0194.142] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0194.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Sun\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0194.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0194.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.144] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0194.145] GetProcessHeap () returned 0x800000
	[0194.145] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0194.145] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0194.145] GetProcessHeap () returned 0x800000
	[0194.145] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0194.145] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0194.146] GetProcessHeap () returned 0x800000
	[0194.146] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0194.146] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0194.146] GetProcessHeap () returned 0x800000
	[0194.146] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0194.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Recovery\\*", lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="䗺@")) returned 0xffffffff
	[0194.153] GetProcessHeap () returned 0x800000
	[0194.153] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0194.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\System Volume Information\\*", lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="䗺@")) returned 0xffffffff
	[0194.153] GetProcessHeap () returned 0x800000
	[0194.153] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0194.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\*", lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d15e8
	[0194.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0194.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0194.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfae767b0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfae767b0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0194.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0194.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0194.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0194.357] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0194.365] GetProcessHeap () returned 0x800000
	[0194.365] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e00048 | out: hHeap=0x800000) returned 1
	[0194.371] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0194.379] GetProcessHeap () returned 0x800000
	[0194.383] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0194.384] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0194.384] GetProcessHeap () returned 0x800000
	[0194.384] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0194.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0194.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0194.385] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0194.385] GetProcessHeap () returned 0x800000
	[0194.385] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0194.385] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0194.386] GetProcessHeap () returned 0x800000
	[0194.386] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0194.386] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.386] GetProcessHeap () returned 0x800000
	[0194.386] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0194.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0194.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0194.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0194.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0194.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0194.388] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0194.388] GetProcessHeap () returned 0x800000
	[0194.388] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0194.389] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0194.389] GetProcessHeap () returned 0x800000
	[0194.389] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e70080 | out: hHeap=0x800000) returned 1
	[0194.389] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0194.389] GetProcessHeap () returned 0x800000
	[0194.389] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.389] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0194.390] GetProcessHeap () returned 0x800000
	[0194.390] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0194.390] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0194.390] GetProcessHeap () returned 0x800000
	[0194.390] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0194.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0194.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0194.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0194.393] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0194.393] GetProcessHeap () returned 0x800000
	[0194.393] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0194.394] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0194.395] GetProcessHeap () returned 0x800000
	[0194.395] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0194.396] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0194.397] GetProcessHeap () returned 0x800000
	[0194.397] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.397] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0194.397] GetProcessHeap () returned 0x800000
	[0194.397] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0194.397] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0194.398] GetProcessHeap () returned 0x800000
	[0194.398] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0194.399] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0194.399] GetProcessHeap () returned 0x800000
	[0194.399] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0194.400] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.400] GetProcessHeap () returned 0x800000
	[0194.400] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.400] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0194.401] GetProcessHeap () returned 0x800000
	[0194.401] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0194.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0194.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0194.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0194.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0194.402] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0194.402] GetProcessHeap () returned 0x800000
	[0194.402] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0194.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0194.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16e8
	[0194.403] FindClose (in: hFindFile=0x34d16e8 | out: hFindFile=0x34d16e8) returned 1
	[0194.403] GetProcessHeap () returned 0x800000
	[0194.403] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.403] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0194.404] GetProcessHeap () returned 0x800000
	[0194.404] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0194.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0194.681] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0194.682] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0194.683] GetProcessHeap () returned 0x800000
	[0194.683] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0194.684] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0194.686] GetProcessHeap () returned 0x800000
	[0194.686] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0194.688] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0194.689] GetProcessHeap () returned 0x800000
	[0194.689] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0194.691] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0194.692] GetProcessHeap () returned 0x800000
	[0194.692] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0194.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0194.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0194.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0194.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0194.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.703] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.703] GetProcessHeap () returned 0x800000
	[0194.703] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.703] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.704] GetProcessHeap () returned 0x800000
	[0194.704] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.704] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.705] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.705] GetProcessHeap () returned 0x800000
	[0194.705] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.705] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.706] GetProcessHeap () returned 0x800000
	[0194.706] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.707] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.707] GetProcessHeap () returned 0x800000
	[0194.707] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.708] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.708] GetProcessHeap () returned 0x800000
	[0194.708] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.709] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.709] GetProcessHeap () returned 0x800000
	[0194.709] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.710] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.711] GetProcessHeap () returned 0x800000
	[0194.711] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.711] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.711] GetProcessHeap () returned 0x800000
	[0194.711] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.712] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.713] GetProcessHeap () returned 0x800000
	[0194.713] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.713] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.714] GetProcessHeap () returned 0x800000
	[0194.714] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.714] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.715] GetProcessHeap () returned 0x800000
	[0194.715] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.715] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.715] GetProcessHeap () returned 0x800000
	[0194.716] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.716] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.717] GetProcessHeap () returned 0x800000
	[0194.717] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1928
	[0194.717] FindClose (in: hFindFile=0x34d1928 | out: hFindFile=0x34d1928) returned 1
	[0194.718] GetProcessHeap () returned 0x800000
	[0194.718] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0194.888] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0194.889] GetProcessHeap () returned 0x800000
	[0194.889] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0194.890] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0194.890] GetProcessHeap () returned 0x800000
	[0194.890] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0194.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0195.103] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0195.104] GetProcessHeap () returned 0x800000
	[0195.104] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0195.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0195.104] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0195.105] GetProcessHeap () returned 0x800000
	[0195.105] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0195.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0195.297] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0195.298] GetProcessHeap () returned 0x800000
	[0195.298] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0195.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0195.299] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0195.300] GetProcessHeap () returned 0x800000
	[0195.300] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0195.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0195.491] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0195.492] GetProcessHeap () returned 0x800000
	[0195.492] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0195.492] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0195.492] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0195.492] GetProcessHeap () returned 0x800000
	[0195.492] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0195.492] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0195.724] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0195.726] GetProcessHeap () returned 0x800000
	[0195.726] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0195.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0195.726] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0195.727] GetProcessHeap () returned 0x800000
	[0195.727] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0195.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0195.928] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0195.929] GetProcessHeap () returned 0x800000
	[0195.929] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0195.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0195.930] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0195.930] GetProcessHeap () returned 0x800000
	[0195.930] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0195.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.042] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0196.043] GetProcessHeap () returned 0x800000
	[0196.043] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.043] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0196.044] GetProcessHeap () returned 0x800000
	[0196.044] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.158] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0196.159] GetProcessHeap () returned 0x800000
	[0196.159] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.159] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0196.160] GetProcessHeap () returned 0x800000
	[0196.160] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.287] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0196.287] GetProcessHeap () returned 0x800000
	[0196.288] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.288] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0196.288] GetProcessHeap () returned 0x800000
	[0196.289] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.423] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0196.424] GetProcessHeap () returned 0x800000
	[0196.424] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.424] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0196.425] GetProcessHeap () returned 0x800000
	[0196.425] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.582] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0196.583] GetProcessHeap () returned 0x800000
	[0196.583] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.583] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0196.584] GetProcessHeap () returned 0x800000
	[0196.584] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.718] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0196.719] GetProcessHeap () returned 0x800000
	[0196.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1968
	[0196.719] FindClose (in: hFindFile=0x34d1968 | out: hFindFile=0x34d1968) returned 1
	[0196.719] GetProcessHeap () returned 0x800000
	[0196.719] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0196.841] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0196.841] GetProcessHeap () returned 0x800000
	[0196.841] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0196.841] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0196.842] GetProcessHeap () returned 0x800000
	[0196.842] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0196.934] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0196.935] GetProcessHeap () returned 0x800000
	[0196.935] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0196.935] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0196.935] GetProcessHeap () returned 0x800000
	[0196.935] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0196.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.021] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0197.022] GetProcessHeap () returned 0x800000
	[0197.022] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0197.022] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0197.023] GetProcessHeap () returned 0x800000
	[0197.023] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0197.023] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0197.023] GetProcessHeap () returned 0x800000
	[0197.023] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0197.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0197.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0197.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0197.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.604] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.605] GetProcessHeap () returned 0x800000
	[0197.605] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.605] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.605] GetProcessHeap () returned 0x800000
	[0197.605] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.606] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.606] GetProcessHeap () returned 0x800000
	[0197.606] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.606] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.607] GetProcessHeap () returned 0x800000
	[0197.607] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.607] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.607] GetProcessHeap () returned 0x800000
	[0197.607] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.607] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.608] GetProcessHeap () returned 0x800000
	[0197.608] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.608] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.608] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.608] GetProcessHeap () returned 0x800000
	[0197.608] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.609] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.609] GetProcessHeap () returned 0x800000
	[0197.609] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0197.729] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0197.735] GetProcessHeap () returned 0x800000
	[0197.735] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.738] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.739] GetProcessHeap () returned 0x800000
	[0197.739] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.739] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.739] GetProcessHeap () returned 0x800000
	[0197.739] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.739] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.740] GetProcessHeap () returned 0x800000
	[0197.740] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.740] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.740] GetProcessHeap () returned 0x800000
	[0197.741] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.741] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.741] GetProcessHeap () returned 0x800000
	[0197.741] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.741] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.742] GetProcessHeap () returned 0x800000
	[0197.742] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.742] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.742] GetProcessHeap () returned 0x800000
	[0197.742] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.743] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.743] GetProcessHeap () returned 0x800000
	[0197.743] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.743] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.744] GetProcessHeap () returned 0x800000
	[0197.744] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.744] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.744] GetProcessHeap () returned 0x800000
	[0197.744] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.850] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.850] GetProcessHeap () returned 0x800000
	[0197.850] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0197.851] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0197.851] GetProcessHeap () returned 0x800000
	[0197.851] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0197.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a28
	[0198.042] FindClose (in: hFindFile=0x34d1a28 | out: hFindFile=0x34d1a28) returned 1
	[0198.046] GetProcessHeap () returned 0x800000
	[0198.048] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0198.050] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0198.057] GetProcessHeap () returned 0x800000
	[0198.058] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.060] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.060] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.063] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.065] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.069] GetProcessHeap () returned 0x800000
	[0198.070] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.071] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0198.071] GetProcessHeap () returned 0x800000
	[0198.071] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.071] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.071] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.071] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.071] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.072] GetProcessHeap () returned 0x800000
	[0198.072] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.072] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0198.072] GetProcessHeap () returned 0x800000
	[0198.072] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.072] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.072] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.072] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.072] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.072] GetProcessHeap () returned 0x800000
	[0198.072] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.072] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0198.072] GetProcessHeap () returned 0x800000
	[0198.073] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.073] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.073] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.073] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.073] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.073] GetProcessHeap () returned 0x800000
	[0198.073] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.073] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0198.073] GetProcessHeap () returned 0x800000
	[0198.073] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.073] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.073] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.073] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.074] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.074] GetProcessHeap () returned 0x800000
	[0198.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.074] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0198.074] GetProcessHeap () returned 0x800000
	[0198.074] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.074] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.074] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.074] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.074] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.075] GetProcessHeap () returned 0x800000
	[0198.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.075] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0198.075] GetProcessHeap () returned 0x800000
	[0198.075] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.075] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.075] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.075] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.075] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.075] GetProcessHeap () returned 0x800000
	[0198.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.075] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0198.075] GetProcessHeap () returned 0x800000
	[0198.075] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.076] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.076] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.076] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.076] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.076] GetProcessHeap () returned 0x800000
	[0198.076] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.076] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0198.076] GetProcessHeap () returned 0x800000
	[0198.076] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.076] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.076] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.076] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.076] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.077] GetProcessHeap () returned 0x800000
	[0198.077] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.077] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0198.077] GetProcessHeap () returned 0x800000
	[0198.077] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.077] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.077] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.077] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.077] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.078] GetProcessHeap () returned 0x800000
	[0198.078] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.078] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0198.078] GetProcessHeap () returned 0x800000
	[0198.078] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.078] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.078] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.078] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.078] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.078] GetProcessHeap () returned 0x800000
	[0198.078] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.078] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0198.078] GetProcessHeap () returned 0x800000
	[0198.078] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.079] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.079] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.079] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.079] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.079] GetProcessHeap () returned 0x800000
	[0198.079] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.079] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0198.079] GetProcessHeap () returned 0x800000
	[0198.079] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.079] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.079] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.079] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.079] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.080] GetProcessHeap () returned 0x800000
	[0198.080] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.080] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0198.080] GetProcessHeap () returned 0x800000
	[0198.080] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.080] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.080] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.080] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.080] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.080] GetProcessHeap () returned 0x800000
	[0198.081] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.081] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0198.081] GetProcessHeap () returned 0x800000
	[0198.081] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.081] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.081] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.081] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.081] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.081] GetProcessHeap () returned 0x800000
	[0198.081] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.081] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0198.081] GetProcessHeap () returned 0x800000
	[0198.081] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.081] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.082] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.082] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.082] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.082] GetProcessHeap () returned 0x800000
	[0198.082] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.082] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0198.082] GetProcessHeap () returned 0x800000
	[0198.082] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.082] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.082] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.082] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.082] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.083] GetProcessHeap () returned 0x800000
	[0198.083] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.083] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0198.083] GetProcessHeap () returned 0x800000
	[0198.083] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.083] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.083] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.083] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.083] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.083] GetProcessHeap () returned 0x800000
	[0198.083] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.083] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0198.084] GetProcessHeap () returned 0x800000
	[0198.084] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.084] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.084] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.084] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.084] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.084] GetProcessHeap () returned 0x800000
	[0198.084] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.084] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0198.084] GetProcessHeap () returned 0x800000
	[0198.084] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.084] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.084] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.085] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.085] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.085] GetProcessHeap () returned 0x800000
	[0198.085] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.085] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0198.085] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.085] GetProcessHeap () returned 0x800000
	[0198.085] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.085] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0198.085] GetProcessHeap () returned 0x800000
	[0198.085] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.086] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.086] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
	[0198.086] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0198.086] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
	[0198.086] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.086] GetProcessHeap () returned 0x800000
	[0198.086] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.086] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0198.086] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.086] GetProcessHeap () returned 0x800000
	[0198.087] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.087] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0
	[0198.087] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0198.087] GetProcessHeap () returned 0x800000
	[0198.087] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0198.087] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1
	[0198.087] GetProcessHeap () returned 0x800000
	[0198.087] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ee00b8
	[0198.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0198.087] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.087] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.1_0", cAlternateFileName="")) returned 1
	[0198.087] GetProcessHeap () returned 0x800000
	[0198.087] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0198.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.087] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.087] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
	[0198.087] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8716c790, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0198.088] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0198.088] GetProcessHeap () returned 0x800000
	[0198.088] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0198.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.088] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.088] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0198.088] GetProcessHeap () returned 0x800000
	[0198.088] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.088] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.088] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.088] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.088] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.088] GetProcessHeap () returned 0x800000
	[0198.088] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.089] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0198.089] GetProcessHeap () returned 0x800000
	[0198.089] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.089] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.089] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.089] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.089] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.089] GetProcessHeap () returned 0x800000
	[0198.089] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.089] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0198.089] GetProcessHeap () returned 0x800000
	[0198.089] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.089] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.090] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.090] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.090] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.090] GetProcessHeap () returned 0x800000
	[0198.090] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.090] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0198.090] GetProcessHeap () returned 0x800000
	[0198.090] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.090] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.090] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.090] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.090] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.091] GetProcessHeap () returned 0x800000
	[0198.091] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.091] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0198.091] GetProcessHeap () returned 0x800000
	[0198.091] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.091] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.091] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.091] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.091] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.091] GetProcessHeap () returned 0x800000
	[0198.091] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.091] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0198.091] GetProcessHeap () returned 0x800000
	[0198.091] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.092] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.092] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.092] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.092] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.092] GetProcessHeap () returned 0x800000
	[0198.092] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.092] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0198.092] GetProcessHeap () returned 0x800000
	[0198.092] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.092] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.092] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.092] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.092] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.093] GetProcessHeap () returned 0x800000
	[0198.093] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.093] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0198.093] GetProcessHeap () returned 0x800000
	[0198.093] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.093] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.093] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.093] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.093] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.094] GetProcessHeap () returned 0x800000
	[0198.094] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.094] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0198.094] GetProcessHeap () returned 0x800000
	[0198.094] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.094] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.094] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.094] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.094] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.094] GetProcessHeap () returned 0x800000
	[0198.094] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.094] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0198.094] GetProcessHeap () returned 0x800000
	[0198.094] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.094] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.095] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.095] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.095] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.095] GetProcessHeap () returned 0x800000
	[0198.095] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.095] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0198.095] GetProcessHeap () returned 0x800000
	[0198.095] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.095] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.095] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.095] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.095] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.261] GetProcessHeap () returned 0x800000
	[0198.261] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.261] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0198.261] GetProcessHeap () returned 0x800000
	[0198.261] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.345] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.345] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.346] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.346] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.346] GetProcessHeap () returned 0x800000
	[0198.346] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.346] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0198.346] GetProcessHeap () returned 0x800000
	[0198.346] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.346] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.346] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.346] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.346] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.347] GetProcessHeap () returned 0x800000
	[0198.347] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.347] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0198.347] GetProcessHeap () returned 0x800000
	[0198.347] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.349] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.349] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.349] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.349] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.350] GetProcessHeap () returned 0x800000
	[0198.350] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.350] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0198.350] GetProcessHeap () returned 0x800000
	[0198.350] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.350] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.350] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.350] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.350] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.350] GetProcessHeap () returned 0x800000
	[0198.351] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.351] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0198.351] GetProcessHeap () returned 0x800000
	[0198.351] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.351] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.351] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.351] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.351] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.352] GetProcessHeap () returned 0x800000
	[0198.352] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.352] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0198.352] GetProcessHeap () returned 0x800000
	[0198.352] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.352] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.352] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.352] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.352] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.353] GetProcessHeap () returned 0x800000
	[0198.353] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.353] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0198.353] GetProcessHeap () returned 0x800000
	[0198.353] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.353] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.353] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.353] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.353] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.354] GetProcessHeap () returned 0x800000
	[0198.354] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.354] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0198.354] GetProcessHeap () returned 0x800000
	[0198.354] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.354] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.354] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.354] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.354] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.355] GetProcessHeap () returned 0x800000
	[0198.355] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.355] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0198.355] GetProcessHeap () returned 0x800000
	[0198.355] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.355] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.355] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.355] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.356] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.356] GetProcessHeap () returned 0x800000
	[0198.356] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.356] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0198.356] GetProcessHeap () returned 0x800000
	[0198.356] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.356] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.356] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.356] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.356] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.357] GetProcessHeap () returned 0x800000
	[0198.357] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.357] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0198.357] GetProcessHeap () returned 0x800000
	[0198.357] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.357] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.357] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.357] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.358] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.358] GetProcessHeap () returned 0x800000
	[0198.358] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.358] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0198.358] GetProcessHeap () returned 0x800000
	[0198.358] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.358] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.358] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.358] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.358] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.359] GetProcessHeap () returned 0x800000
	[0198.359] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.359] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0198.359] GetProcessHeap () returned 0x800000
	[0198.359] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.360] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.361] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.361] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.361] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.361] GetProcessHeap () returned 0x800000
	[0198.361] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.361] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0198.361] GetProcessHeap () returned 0x800000
	[0198.361] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.361] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.361] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.362] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.362] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.362] GetProcessHeap () returned 0x800000
	[0198.362] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.362] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0198.362] GetProcessHeap () returned 0x800000
	[0198.362] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.363] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.363] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.363] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.363] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.363] GetProcessHeap () returned 0x800000
	[0198.363] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.363] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0198.363] GetProcessHeap () returned 0x800000
	[0198.363] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.364] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.364] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.364] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.364] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.364] GetProcessHeap () returned 0x800000
	[0198.364] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.364] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0198.364] GetProcessHeap () returned 0x800000
	[0198.364] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.365] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.365] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.365] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.365] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.365] GetProcessHeap () returned 0x800000
	[0198.365] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.365] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0198.365] GetProcessHeap () returned 0x800000
	[0198.366] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.366] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.366] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.366] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.366] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.366] GetProcessHeap () returned 0x800000
	[0198.366] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.366] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0198.366] GetProcessHeap () returned 0x800000
	[0198.366] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.367] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.367] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.367] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.367] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.368] GetProcessHeap () returned 0x800000
	[0198.368] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.368] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0198.368] GetProcessHeap () returned 0x800000
	[0198.368] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.368] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.368] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.368] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.368] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.368] GetProcessHeap () returned 0x800000
	[0198.368] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.368] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0198.369] GetProcessHeap () returned 0x800000
	[0198.369] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.369] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.369] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.370] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.370] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.370] GetProcessHeap () returned 0x800000
	[0198.370] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.370] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0198.370] GetProcessHeap () returned 0x800000
	[0198.370] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.370] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.370] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.370] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.370] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.371] GetProcessHeap () returned 0x800000
	[0198.371] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.371] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0198.371] GetProcessHeap () returned 0x800000
	[0198.371] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.371] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.372] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.372] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.372] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.372] GetProcessHeap () returned 0x800000
	[0198.372] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.372] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0198.372] GetProcessHeap () returned 0x800000
	[0198.372] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.372] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.372] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f7ed20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.372] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f7ed20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.372] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.373] GetProcessHeap () returned 0x800000
	[0198.373] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.373] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0198.373] GetProcessHeap () returned 0x800000
	[0198.373] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.374] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.374] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.374] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.374] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.374] GetProcessHeap () returned 0x800000
	[0198.374] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.374] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0198.374] GetProcessHeap () returned 0x800000
	[0198.374] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.374] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.374] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.374] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.374] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.375] GetProcessHeap () returned 0x800000
	[0198.375] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.375] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0198.375] GetProcessHeap () returned 0x800000
	[0198.375] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.376] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.376] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0198.376] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0198.376] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.376] GetProcessHeap () returned 0x800000
	[0198.376] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.376] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0198.377] GetProcessHeap () returned 0x800000
	[0198.377] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e90090
	[0198.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.377] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.377] GetProcessHeap () returned 0x800000
	[0198.377] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.378] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.378] GetProcessHeap () returned 0x800000
	[0198.378] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.379] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.379] GetProcessHeap () returned 0x800000
	[0198.379] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.380] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.380] GetProcessHeap () returned 0x800000
	[0198.380] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.381] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.381] GetProcessHeap () returned 0x800000
	[0198.381] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0198.382] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0198.382] GetProcessHeap () returned 0x800000
	[0198.382] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.382] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.383] GetProcessHeap () returned 0x800000
	[0198.383] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0198.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.383] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.383] GetProcessHeap () returned 0x800000
	[0198.383] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0198.383] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0198.384] GetProcessHeap () returned 0x800000
	[0198.384] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0198.384] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0198.384] GetProcessHeap () returned 0x800000
	[0198.384] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ee00b8 | out: hHeap=0x800000) returned 1
	[0198.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0198.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0198.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0198.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.572] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.573] GetProcessHeap () returned 0x800000
	[0198.573] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.574] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.574] GetProcessHeap () returned 0x800000
	[0198.574] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.575] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.575] GetProcessHeap () returned 0x800000
	[0198.575] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.576] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.577] GetProcessHeap () returned 0x800000
	[0198.577] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.577] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.577] GetProcessHeap () returned 0x800000
	[0198.577] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.578] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.579] GetProcessHeap () returned 0x800000
	[0198.579] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.579] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.580] GetProcessHeap () returned 0x800000
	[0198.580] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.581] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.581] GetProcessHeap () returned 0x800000
	[0198.581] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.582] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.583] GetProcessHeap () returned 0x800000
	[0198.583] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.584] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.585] GetProcessHeap () returned 0x800000
	[0198.585] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.585] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.586] GetProcessHeap () returned 0x800000
	[0198.586] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.587] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.587] GetProcessHeap () returned 0x800000
	[0198.587] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.588] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.588] GetProcessHeap () returned 0x800000
	[0198.588] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.591] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.591] GetProcessHeap () returned 0x800000
	[0198.591] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.591] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.592] GetProcessHeap () returned 0x800000
	[0198.592] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.595] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.596] GetProcessHeap () returned 0x800000
	[0198.596] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.596] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.597] GetProcessHeap () returned 0x800000
	[0198.597] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.601] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.603] GetProcessHeap () returned 0x800000
	[0198.603] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.603] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.604] GetProcessHeap () returned 0x800000
	[0198.604] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.606] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.607] GetProcessHeap () returned 0x800000
	[0198.607] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.607] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.607] GetProcessHeap () returned 0x800000
	[0198.607] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.616] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.617] GetProcessHeap () returned 0x800000
	[0198.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.617] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.617] GetProcessHeap () returned 0x800000
	[0198.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.625] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.625] GetProcessHeap () returned 0x800000
	[0198.625] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.625] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.626] GetProcessHeap () returned 0x800000
	[0198.626] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.631] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.632] GetProcessHeap () returned 0x800000
	[0198.632] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.632] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.633] GetProcessHeap () returned 0x800000
	[0198.633] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.633] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.634] GetProcessHeap () returned 0x800000
	[0198.634] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.634] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.635] GetProcessHeap () returned 0x800000
	[0198.635] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.635] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.636] GetProcessHeap () returned 0x800000
	[0198.636] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0198.636] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0198.637] GetProcessHeap () returned 0x800000
	[0198.637] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.737] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.737] GetProcessHeap () returned 0x800000
	[0198.737] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.737] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.738] GetProcessHeap () returned 0x800000
	[0198.738] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.925] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.927] GetProcessHeap () returned 0x800000
	[0198.927] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0198.941] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0198.941] GetProcessHeap () returned 0x800000
	[0198.941] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0198.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.052] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.060] GetProcessHeap () returned 0x800000
	[0199.060] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0199.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.067] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.111] GetProcessHeap () returned 0x800000
	[0199.111] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0199.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.243] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.244] GetProcessHeap () returned 0x800000
	[0199.244] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0199.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.244] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.247] GetProcessHeap () returned 0x800000
	[0199.247] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e90090 | out: hHeap=0x800000) returned 1
	[0199.247] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0199.247] GetProcessHeap () returned 0x800000
	[0199.247] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0199.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0199.248] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0199.248] GetProcessHeap () returned 0x800000
	[0199.248] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0199.248] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0199.248] GetProcessHeap () returned 0x800000
	[0199.248] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0199.249] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0199.249] GetProcessHeap () returned 0x800000
	[0199.249] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0199.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0199.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0199.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0199.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.539] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.539] GetProcessHeap () returned 0x800000
	[0199.539] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0199.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.627] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.628] GetProcessHeap () returned 0x800000
	[0199.628] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0199.628] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.629] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.629] GetProcessHeap () returned 0x800000
	[0199.629] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0199.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.727] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.728] GetProcessHeap () returned 0x800000
	[0199.728] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0199.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.728] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.729] GetProcessHeap () returned 0x800000
	[0199.729] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0199.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.813] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.814] GetProcessHeap () returned 0x800000
	[0199.814] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0199.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.814] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.815] GetProcessHeap () returned 0x800000
	[0199.815] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0199.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.907] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.908] GetProcessHeap () returned 0x800000
	[0199.908] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0199.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0199.908] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0199.911] GetProcessHeap () returned 0x800000
	[0199.911] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0199.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.006] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.007] GetProcessHeap () returned 0x800000
	[0200.007] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.007] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.008] GetProcessHeap () returned 0x800000
	[0200.008] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.102] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.107] GetProcessHeap () returned 0x800000
	[0200.107] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.117] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.156] GetProcessHeap () returned 0x800000
	[0200.156] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.250] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.251] GetProcessHeap () returned 0x800000
	[0200.251] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.251] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.252] GetProcessHeap () returned 0x800000
	[0200.252] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.253] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.253] GetProcessHeap () returned 0x800000
	[0200.253] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.253] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.254] GetProcessHeap () returned 0x800000
	[0200.254] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.255] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.255] GetProcessHeap () returned 0x800000
	[0200.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.255] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.256] GetProcessHeap () returned 0x800000
	[0200.256] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.257] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.257] GetProcessHeap () returned 0x800000
	[0200.257] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.257] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.258] GetProcessHeap () returned 0x800000
	[0200.258] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.259] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.259] GetProcessHeap () returned 0x800000
	[0200.259] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.260] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.260] GetProcessHeap () returned 0x800000
	[0200.260] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.261] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.261] GetProcessHeap () returned 0x800000
	[0200.261] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.262] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.262] GetProcessHeap () returned 0x800000
	[0200.262] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.263] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.263] GetProcessHeap () returned 0x800000
	[0200.263] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.264] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.264] GetProcessHeap () returned 0x800000
	[0200.264] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.265] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.265] GetProcessHeap () returned 0x800000
	[0200.265] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.266] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.266] GetProcessHeap () returned 0x800000
	[0200.266] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.267] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.267] GetProcessHeap () returned 0x800000
	[0200.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.268] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.268] GetProcessHeap () returned 0x800000
	[0200.268] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.269] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.269] GetProcessHeap () returned 0x800000
	[0200.269] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.270] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.270] GetProcessHeap () returned 0x800000
	[0200.270] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.271] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.272] GetProcessHeap () returned 0x800000
	[0200.272] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.272] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.272] GetProcessHeap () returned 0x800000
	[0200.272] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.273] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.274] GetProcessHeap () returned 0x800000
	[0200.274] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.274] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.274] GetProcessHeap () returned 0x800000
	[0200.274] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.275] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.276] GetProcessHeap () returned 0x800000
	[0200.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.276] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.276] GetProcessHeap () returned 0x800000
	[0200.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.277] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.278] GetProcessHeap () returned 0x800000
	[0200.278] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.278] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.279] GetProcessHeap () returned 0x800000
	[0200.279] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.279] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.280] GetProcessHeap () returned 0x800000
	[0200.280] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0200.280] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0200.280] GetProcessHeap () returned 0x800000
	[0200.280] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0200.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0200.281] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0200.282] GetProcessHeap () returned 0x800000
	[0200.282] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0200.282] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0200.282] GetProcessHeap () returned 0x800000
	[0200.282] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0200.282] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0200.283] GetProcessHeap () returned 0x800000
	[0200.283] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0200.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0200.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0200.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0200.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.739] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.740] GetProcessHeap () returned 0x800000
	[0200.740] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0200.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.741] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.742] GetProcessHeap () returned 0x800000
	[0200.742] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0200.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.827] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.828] GetProcessHeap () returned 0x800000
	[0200.828] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0200.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.829] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.829] GetProcessHeap () returned 0x800000
	[0200.829] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0200.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.937] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.938] GetProcessHeap () returned 0x800000
	[0200.938] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0200.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0200.939] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0200.939] GetProcessHeap () returned 0x800000
	[0200.939] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0200.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0201.092] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0201.093] GetProcessHeap () returned 0x800000
	[0201.093] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0201.094] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0201.095] GetProcessHeap () returned 0x800000
	[0201.095] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0201.350] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0201.351] GetProcessHeap () returned 0x800000
	[0201.351] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0201.351] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0201.351] GetProcessHeap () returned 0x800000
	[0201.351] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0201.529] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0201.530] GetProcessHeap () returned 0x800000
	[0201.530] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0201.531] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0201.531] GetProcessHeap () returned 0x800000
	[0201.531] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.531] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0201.639] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0201.640] GetProcessHeap () returned 0x800000
	[0201.640] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0201.640] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0201.641] GetProcessHeap () returned 0x800000
	[0201.641] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0201.770] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0201.771] GetProcessHeap () returned 0x800000
	[0201.771] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0201.772] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0201.772] GetProcessHeap () returned 0x800000
	[0201.772] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0201.856] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0201.857] GetProcessHeap () returned 0x800000
	[0201.857] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0201.857] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0201.858] GetProcessHeap () returned 0x800000
	[0201.858] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0201.949] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0201.950] GetProcessHeap () returned 0x800000
	[0201.950] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0201.950] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0201.952] GetProcessHeap () returned 0x800000
	[0201.952] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0201.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.053] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.053] GetProcessHeap () returned 0x800000
	[0202.053] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.153] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.154] GetProcessHeap () returned 0x800000
	[0202.154] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.155] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.155] GetProcessHeap () returned 0x800000
	[0202.155] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.254] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.255] GetProcessHeap () returned 0x800000
	[0202.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.255] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.255] GetProcessHeap () returned 0x800000
	[0202.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.403] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.404] GetProcessHeap () returned 0x800000
	[0202.404] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.405] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.405] GetProcessHeap () returned 0x800000
	[0202.405] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.498] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.499] GetProcessHeap () returned 0x800000
	[0202.499] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.499] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.500] GetProcessHeap () returned 0x800000
	[0202.500] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.607] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.608] GetProcessHeap () returned 0x800000
	[0202.608] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.608] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.608] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.609] GetProcessHeap () returned 0x800000
	[0202.609] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.751] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.752] GetProcessHeap () returned 0x800000
	[0202.752] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.752] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.753] GetProcessHeap () returned 0x800000
	[0202.753] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.841] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.842] GetProcessHeap () returned 0x800000
	[0202.842] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.842] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.843] GetProcessHeap () returned 0x800000
	[0202.843] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.945] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.945] GetProcessHeap () returned 0x800000
	[0202.945] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0202.946] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0202.946] GetProcessHeap () returned 0x800000
	[0202.946] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0202.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0203.072] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.072] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0203.072] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0203.072] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0203.073] GetProcessHeap () returned 0x800000
	[0203.073] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0203.073] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0203.166] GetProcessHeap () returned 0x800000
	[0203.166] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0203.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0203.167] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.167] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0203.167] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0203.167] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0203.168] GetProcessHeap () returned 0x800000
	[0203.168] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0203.168] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0203.168] GetProcessHeap () returned 0x800000
	[0203.168] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0203.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0203.316] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.316] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0203.317] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0203.317] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0203.318] GetProcessHeap () returned 0x800000
	[0203.318] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0203.318] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1
	[0203.318] GetProcessHeap () returned 0x800000
	[0203.318] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0203.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0203.319] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.319] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0203.319] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0203.319] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0203.319] GetProcessHeap () returned 0x800000
	[0203.319] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0203.319] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1
	[0203.319] GetProcessHeap () returned 0x800000
	[0203.319] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0203.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0203.479] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.479] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0203.479] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0203.479] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0203.480] GetProcessHeap () returned 0x800000
	[0203.480] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0203.480] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1
	[0203.480] GetProcessHeap () returned 0x800000
	[0203.480] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0203.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0203.480] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.480] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0203.480] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0203.480] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0203.481] GetProcessHeap () returned 0x800000
	[0203.481] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0203.481] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0203.481] GetProcessHeap () returned 0x800000
	[0203.481] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0203.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0203.481] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.481] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0203.481] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0203.481] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0203.482] GetProcessHeap () returned 0x800000
	[0203.482] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0203.482] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne", cAlternateFileName="")) returned 1
	[0203.482] GetProcessHeap () returned 0x800000
	[0203.482] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0203.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0203.665] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.665] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0203.665] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0203.665] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0203.666] GetProcessHeap () returned 0x800000
	[0203.666] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0203.666] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0203.666] GetProcessHeap () returned 0x800000
	[0203.666] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0203.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0203.907] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.907] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0203.907] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0203.907] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0203.908] GetProcessHeap () returned 0x800000
	[0203.908] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0203.908] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0203.908] GetProcessHeap () returned 0x800000
	[0203.908] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0203.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0203.909] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.909] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0203.909] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0203.909] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0203.909] GetProcessHeap () returned 0x800000
	[0203.909] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0203.909] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0203.909] GetProcessHeap () returned 0x800000
	[0203.909] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0203.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0204.097] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.098] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0204.098] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0204.098] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0204.098] GetProcessHeap () returned 0x800000
	[0204.098] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0204.098] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0204.098] GetProcessHeap () returned 0x800000
	[0204.098] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0204.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0204.099] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.099] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0204.099] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0204.099] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0204.099] GetProcessHeap () returned 0x800000
	[0204.099] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0204.099] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0204.099] GetProcessHeap () returned 0x800000
	[0204.099] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0204.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0204.347] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.347] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0204.347] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0204.347] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0204.348] GetProcessHeap () returned 0x800000
	[0204.348] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0204.348] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0204.348] GetProcessHeap () returned 0x800000
	[0204.348] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0204.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0204.349] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.349] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0204.349] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0204.349] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0204.349] GetProcessHeap () returned 0x800000
	[0204.349] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0204.349] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0204.349] GetProcessHeap () returned 0x800000
	[0204.349] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0204.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0204.515] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.515] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0204.515] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0204.515] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0204.516] GetProcessHeap () returned 0x800000
	[0204.516] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0204.516] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1
	[0204.516] GetProcessHeap () returned 0x800000
	[0204.516] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0204.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0204.517] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.517] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0204.517] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0204.517] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0204.517] GetProcessHeap () returned 0x800000
	[0204.517] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0204.517] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0204.517] GetProcessHeap () returned 0x800000
	[0204.518] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0204.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0204.687] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.687] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0204.687] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0204.687] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0204.687] GetProcessHeap () returned 0x800000
	[0204.687] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0204.687] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0204.687] GetProcessHeap () returned 0x800000
	[0204.687] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0204.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0204.688] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.688] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0204.688] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0204.688] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0204.688] GetProcessHeap () returned 0x800000
	[0204.688] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0204.688] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0204.688] GetProcessHeap () returned 0x800000
	[0204.688] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0204.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0204.907] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.907] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0204.907] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0204.907] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0204.908] GetProcessHeap () returned 0x800000
	[0204.908] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0204.908] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0204.908] GetProcessHeap () returned 0x800000
	[0204.909] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0204.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0204.909] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.909] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0204.909] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0204.909] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0204.909] GetProcessHeap () returned 0x800000
	[0204.910] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0204.910] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1
	[0204.910] GetProcessHeap () returned 0x800000
	[0204.910] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0204.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0205.088] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.088] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.088] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.088] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0205.089] GetProcessHeap () returned 0x800000
	[0205.089] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0205.089] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1
	[0205.090] GetProcessHeap () returned 0x800000
	[0205.090] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0205.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0205.090] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.090] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.090] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.090] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0205.090] GetProcessHeap () returned 0x800000
	[0205.090] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0205.091] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1
	[0205.091] GetProcessHeap () returned 0x800000
	[0205.091] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0205.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0205.235] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.236] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.236] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.236] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0205.236] GetProcessHeap () returned 0x800000
	[0205.236] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0205.236] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0205.236] GetProcessHeap () returned 0x800000
	[0205.236] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0205.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0205.236] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.236] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.237] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.237] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0205.237] GetProcessHeap () returned 0x800000
	[0205.237] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0205.237] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0205.237] GetProcessHeap () returned 0x800000
	[0205.237] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0205.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0205.430] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.431] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.431] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.431] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0205.432] GetProcessHeap () returned 0x800000
	[0205.432] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0205.432] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0205.432] GetProcessHeap () returned 0x800000
	[0205.432] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0205.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0205.432] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.432] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.432] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.432] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0205.433] GetProcessHeap () returned 0x800000
	[0205.433] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0205.433] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1
	[0205.433] GetProcessHeap () returned 0x800000
	[0205.433] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0205.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0205.554] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.554] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.554] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.554] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0205.555] GetProcessHeap () returned 0x800000
	[0205.555] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0205.555] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0205.555] GetProcessHeap () returned 0x800000
	[0205.555] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0205.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0205.556] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.556] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.556] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.556] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0205.556] GetProcessHeap () returned 0x800000
	[0205.556] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0205.556] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0205.556] GetProcessHeap () returned 0x800000
	[0205.556] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0205.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0205.652] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.652] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.652] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.652] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0205.653] GetProcessHeap () returned 0x800000
	[0205.653] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0205.653] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_HK", cAlternateFileName="")) returned 1
	[0205.653] GetProcessHeap () returned 0x800000
	[0205.653] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0205.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0205.653] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.653] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.653] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.653] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0205.654] GetProcessHeap () returned 0x800000
	[0205.654] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0205.654] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0205.654] GetProcessHeap () returned 0x800000
	[0205.654] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0205.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0205.766] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.766] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.766] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.766] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0205.766] GetProcessHeap () returned 0x800000
	[0205.766] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0205.766] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 1
	[0205.766] GetProcessHeap () returned 0x800000
	[0205.766] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0205.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0205.767] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.767] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0205.767] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0205.767] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0205.767] GetProcessHeap () returned 0x800000
	[0205.767] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0205.767] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 0
	[0205.767] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0205.768] GetProcessHeap () returned 0x800000
	[0205.768] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0205.768] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0205.768] GetProcessHeap () returned 0x800000
	[0205.768] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0205.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0205.911] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.911] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8636e710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
	[0205.911] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0205.911] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
	[0205.911] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0205.912] GetProcessHeap () returned 0x800000
	[0205.912] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0205.912] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0205.912] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0205.913] GetProcessHeap () returned 0x800000
	[0205.913] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0205.913] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 0
	[0205.913] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0205.913] GetProcessHeap () returned 0x800000
	[0205.913] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0205.913] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1
	[0205.913] GetProcessHeap () returned 0x800000
	[0205.913] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0205.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0206.013] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.013] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 1
	[0206.013] GetProcessHeap () returned 0x800000
	[0206.013] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0206.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0206.170] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.170] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82888510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8288ac20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_background.js", cAlternateFileName="CRAW_B~1.JS")) returned 1
	[0206.171] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8288d330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82892150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x3b059, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.js", cAlternateFileName="CRAW_W~1.JS")) returned 1
	[0206.171] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0206.171] GetProcessHeap () returned 0x800000
	[0206.171] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0206.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0206.258] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.258] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 1
	[0206.258] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 0
	[0206.258] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0206.259] GetProcessHeap () returned 0x800000
	[0206.259] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0206.259] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="html", cAlternateFileName="")) returned 1
	[0206.259] GetProcessHeap () returned 0x800000
	[0206.259] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0206.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0206.260] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.260] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 1
	[0206.260] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 0
	[0206.260] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0206.260] GetProcessHeap () returned 0x800000
	[0206.260] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0206.260] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0206.260] GetProcessHeap () returned 0x800000
	[0206.261] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0206.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0206.508] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.508] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1
	[0206.508] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
	[0206.508] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
	[0206.508] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1
	[0206.508] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1
	[0206.508] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1
	[0206.508] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1
	[0206.509] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1
	[0206.509] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 0
	[0206.509] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0206.511] GetProcessHeap () returned 0x800000
	[0206.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0206.511] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826545a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e2a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aa3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0206.511] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0206.511] GetProcessHeap () returned 0x800000
	[0206.511] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0206.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0206.642] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.642] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0206.642] GetProcessHeap () returned 0x800000
	[0206.643] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0206.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0206.662] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.663] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.664] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.664] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0206.665] GetProcessHeap () returned 0x800000
	[0206.672] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0206.672] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0206.673] GetProcessHeap () returned 0x800000
	[0206.674] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0206.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0206.702] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.711] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.712] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.713] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0206.722] GetProcessHeap () returned 0x800000
	[0206.723] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0206.723] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0206.723] GetProcessHeap () returned 0x800000
	[0206.724] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0206.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0206.734] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.742] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.744] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.744] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0206.744] GetProcessHeap () returned 0x800000
	[0206.744] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0206.744] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0206.744] GetProcessHeap () returned 0x800000
	[0206.744] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0206.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0206.863] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.863] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.863] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.863] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0206.863] GetProcessHeap () returned 0x800000
	[0206.863] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0206.863] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0206.863] GetProcessHeap () returned 0x800000
	[0206.863] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0206.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0206.864] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.864] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.864] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.864] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0206.864] GetProcessHeap () returned 0x800000
	[0206.864] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0206.864] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0206.864] GetProcessHeap () returned 0x800000
	[0206.864] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0206.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0206.963] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.963] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.964] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.964] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0206.965] GetProcessHeap () returned 0x800000
	[0206.965] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0206.965] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0206.965] GetProcessHeap () returned 0x800000
	[0206.965] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0206.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0206.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0206.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0206.965] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0206.966] GetProcessHeap () returned 0x800000
	[0206.966] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0206.966] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0206.966] GetProcessHeap () returned 0x800000
	[0206.966] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0206.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.058] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.058] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.058] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.058] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.059] GetProcessHeap () returned 0x800000
	[0207.059] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.059] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0207.059] GetProcessHeap () returned 0x800000
	[0207.060] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.060] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.060] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.060] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.060] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.061] GetProcessHeap () returned 0x800000
	[0207.061] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.061] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0207.061] GetProcessHeap () returned 0x800000
	[0207.061] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.184] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.184] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.184] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.184] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.185] GetProcessHeap () returned 0x800000
	[0207.185] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.185] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0207.185] GetProcessHeap () returned 0x800000
	[0207.185] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.185] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.185] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.185] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.185] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.186] GetProcessHeap () returned 0x800000
	[0207.186] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.186] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0207.186] GetProcessHeap () returned 0x800000
	[0207.186] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.284] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.284] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.284] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.284] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.285] GetProcessHeap () returned 0x800000
	[0207.285] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.285] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0207.285] GetProcessHeap () returned 0x800000
	[0207.285] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.285] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.285] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.285] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.285] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.286] GetProcessHeap () returned 0x800000
	[0207.286] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.286] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0207.286] GetProcessHeap () returned 0x800000
	[0207.286] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.459] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.459] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.459] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.460] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.461] GetProcessHeap () returned 0x800000
	[0207.461] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.461] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0207.461] GetProcessHeap () returned 0x800000
	[0207.461] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.461] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.461] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.461] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.461] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.462] GetProcessHeap () returned 0x800000
	[0207.462] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.462] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0207.462] GetProcessHeap () returned 0x800000
	[0207.462] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.598] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.598] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.598] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.598] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.599] GetProcessHeap () returned 0x800000
	[0207.599] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.599] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0207.599] GetProcessHeap () returned 0x800000
	[0207.599] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.599] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.599] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.599] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.600] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.600] GetProcessHeap () returned 0x800000
	[0207.600] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.600] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0207.600] GetProcessHeap () returned 0x800000
	[0207.600] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.695] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.695] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.695] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.695] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.696] GetProcessHeap () returned 0x800000
	[0207.696] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.696] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0207.696] GetProcessHeap () returned 0x800000
	[0207.696] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.697] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.697] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.697] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.697] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.697] GetProcessHeap () returned 0x800000
	[0207.697] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.697] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0207.697] GetProcessHeap () returned 0x800000
	[0207.697] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.814] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.814] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.814] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.814] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.815] GetProcessHeap () returned 0x800000
	[0207.815] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.815] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0207.815] GetProcessHeap () returned 0x800000
	[0207.815] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.815] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.815] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.815] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.815] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.816] GetProcessHeap () returned 0x800000
	[0207.816] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.816] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0207.816] GetProcessHeap () returned 0x800000
	[0207.816] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.919] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.919] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.919] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.919] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.920] GetProcessHeap () returned 0x800000
	[0207.920] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.920] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0207.920] GetProcessHeap () returned 0x800000
	[0207.920] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0207.920] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.920] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0207.920] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0207.920] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0207.921] GetProcessHeap () returned 0x800000
	[0207.921] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0207.921] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1
	[0207.921] GetProcessHeap () returned 0x800000
	[0207.921] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0207.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.009] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.010] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.010] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.010] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.010] GetProcessHeap () returned 0x800000
	[0208.010] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.010] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0208.010] GetProcessHeap () returned 0x800000
	[0208.010] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.010] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.010] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.010] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.010] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.011] GetProcessHeap () returned 0x800000
	[0208.011] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.011] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0208.011] GetProcessHeap () returned 0x800000
	[0208.011] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.098] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.098] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.098] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.098] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.099] GetProcessHeap () returned 0x800000
	[0208.099] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.099] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0208.099] GetProcessHeap () returned 0x800000
	[0208.099] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.099] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.099] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.099] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.099] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.100] GetProcessHeap () returned 0x800000
	[0208.100] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.100] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0208.100] GetProcessHeap () returned 0x800000
	[0208.100] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.207] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.207] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.207] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.207] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.208] GetProcessHeap () returned 0x800000
	[0208.208] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.208] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0208.208] GetProcessHeap () returned 0x800000
	[0208.208] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.208] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.208] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827b65b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.208] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827b65b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.208] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.209] GetProcessHeap () returned 0x800000
	[0208.209] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.209] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0208.209] GetProcessHeap () returned 0x800000
	[0208.209] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.308] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.309] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827cc540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cec50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.309] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827cc540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cec50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.309] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.309] GetProcessHeap () returned 0x800000
	[0208.309] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.309] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0208.309] GetProcessHeap () returned 0x800000
	[0208.309] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.309] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.309] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827e72f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e9a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.309] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827e72f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e9a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.310] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.310] GetProcessHeap () returned 0x800000
	[0208.310] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.310] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0208.310] GetProcessHeap () returned 0x800000
	[0208.310] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.409] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.409] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827fab70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fd280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.409] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827fab70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fd280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.410] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.411] GetProcessHeap () returned 0x800000
	[0208.411] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.411] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0208.411] GetProcessHeap () returned 0x800000
	[0208.411] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.411] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.411] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.411] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.411] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.412] GetProcessHeap () returned 0x800000
	[0208.412] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.412] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0208.412] GetProcessHeap () returned 0x800000
	[0208.412] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.510] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.510] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.510] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.510] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.511] GetProcessHeap () returned 0x800000
	[0208.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.511] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0208.511] GetProcessHeap () returned 0x800000
	[0208.511] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.511] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.511] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.511] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.511] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.512] GetProcessHeap () returned 0x800000
	[0208.512] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.512] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0208.512] GetProcessHeap () returned 0x800000
	[0208.512] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.596] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.596] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.596] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.596] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.597] GetProcessHeap () returned 0x800000
	[0208.597] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.597] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0208.597] GetProcessHeap () returned 0x800000
	[0208.597] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.597] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.597] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.597] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.597] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.597] GetProcessHeap () returned 0x800000
	[0208.598] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.598] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0208.598] GetProcessHeap () returned 0x800000
	[0208.598] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.814] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.814] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.814] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.814] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.814] GetProcessHeap () returned 0x800000
	[0208.814] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.814] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0208.815] GetProcessHeap () returned 0x800000
	[0208.815] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.815] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.815] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.815] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.815] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.815] GetProcessHeap () returned 0x800000
	[0208.815] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.815] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0208.815] GetProcessHeap () returned 0x800000
	[0208.815] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.816] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.816] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.816] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.816] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.817] GetProcessHeap () returned 0x800000
	[0208.817] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.817] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0208.817] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0208.817] GetProcessHeap () returned 0x800000
	[0208.817] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0208.817] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0208.817] GetProcessHeap () returned 0x800000
	[0208.817] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0208.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0208.818] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.818] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0208.818] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
	[0208.818] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0208.819] GetProcessHeap () returned 0x800000
	[0208.819] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0208.819] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0208.819] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0208.819] GetProcessHeap () returned 0x800000
	[0208.819] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0208.819] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 0
	[0208.819] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0208.820] GetProcessHeap () returned 0x800000
	[0208.820] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0208.820] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1
	[0208.820] GetProcessHeap () returned 0x800000
	[0208.820] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0208.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0208.820] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.820] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 1
	[0208.820] GetProcessHeap () returned 0x800000
	[0208.820] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0208.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0208.822] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.822] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x180f, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
	[0208.822] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x869b0fb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0208.822] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0208.823] GetProcessHeap () returned 0x800000
	[0208.823] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0208.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0208.824] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.824] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0208.824] GetProcessHeap () returned 0x800000
	[0208.825] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.825] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.825] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.825] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.825] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.826] GetProcessHeap () returned 0x800000
	[0208.826] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.826] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0208.826] GetProcessHeap () returned 0x800000
	[0208.826] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.826] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.826] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.826] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.826] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.827] GetProcessHeap () returned 0x800000
	[0208.827] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.827] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0208.827] GetProcessHeap () returned 0x800000
	[0208.827] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.828] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.828] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.828] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.828] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.828] GetProcessHeap () returned 0x800000
	[0208.828] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.828] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0208.828] GetProcessHeap () returned 0x800000
	[0208.828] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.829] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.829] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.829] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.829] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.830] GetProcessHeap () returned 0x800000
	[0208.830] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.830] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0208.830] GetProcessHeap () returned 0x800000
	[0208.830] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.831] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.831] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.831] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.831] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.831] GetProcessHeap () returned 0x800000
	[0208.831] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.831] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0208.831] GetProcessHeap () returned 0x800000
	[0208.831] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.832] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.832] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.832] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.832] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.833] GetProcessHeap () returned 0x800000
	[0208.833] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.833] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0208.833] GetProcessHeap () returned 0x800000
	[0208.833] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.834] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.834] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.834] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.834] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.834] GetProcessHeap () returned 0x800000
	[0208.834] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.834] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0208.834] GetProcessHeap () returned 0x800000
	[0208.834] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.834] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.834] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.834] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.835] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.835] GetProcessHeap () returned 0x800000
	[0208.835] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.835] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0208.835] GetProcessHeap () returned 0x800000
	[0208.835] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.835] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.835] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.835] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.835] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.836] GetProcessHeap () returned 0x800000
	[0208.836] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.836] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0208.836] GetProcessHeap () returned 0x800000
	[0208.836] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.837] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.837] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.837] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.837] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.837] GetProcessHeap () returned 0x800000
	[0208.837] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.837] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0208.837] GetProcessHeap () returned 0x800000
	[0208.837] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.838] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.838] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.838] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.838] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.839] GetProcessHeap () returned 0x800000
	[0208.839] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.839] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0208.839] GetProcessHeap () returned 0x800000
	[0208.839] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.839] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.839] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.839] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.839] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.839] GetProcessHeap () returned 0x800000
	[0208.839] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.840] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0208.840] GetProcessHeap () returned 0x800000
	[0208.840] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.840] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.840] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.840] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.840] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.840] GetProcessHeap () returned 0x800000
	[0208.840] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.840] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0208.840] GetProcessHeap () returned 0x800000
	[0208.840] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.841] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.841] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.841] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.841] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.841] GetProcessHeap () returned 0x800000
	[0208.841] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.841] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0208.841] GetProcessHeap () returned 0x800000
	[0208.841] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.841] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.842] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.842] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.842] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.842] GetProcessHeap () returned 0x800000
	[0208.842] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.842] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0208.842] GetProcessHeap () returned 0x800000
	[0208.842] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.842] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.842] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.842] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.842] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.843] GetProcessHeap () returned 0x800000
	[0208.843] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.843] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0208.843] GetProcessHeap () returned 0x800000
	[0208.843] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.844] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.844] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.844] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.844] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.844] GetProcessHeap () returned 0x800000
	[0208.844] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.844] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0208.844] GetProcessHeap () returned 0x800000
	[0208.844] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.845] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.845] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.845] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.845] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.845] GetProcessHeap () returned 0x800000
	[0208.845] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.845] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0208.845] GetProcessHeap () returned 0x800000
	[0208.845] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.845] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.846] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.846] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.846] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.846] GetProcessHeap () returned 0x800000
	[0208.846] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.846] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0208.846] GetProcessHeap () returned 0x800000
	[0208.846] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.846] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.846] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.846] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.846] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.847] GetProcessHeap () returned 0x800000
	[0208.847] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.847] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0208.847] GetProcessHeap () returned 0x800000
	[0208.847] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.847] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.847] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.847] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.847] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.848] GetProcessHeap () returned 0x800000
	[0208.848] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.848] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0208.848] GetProcessHeap () returned 0x800000
	[0208.848] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.848] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.848] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.848] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.848] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.848] GetProcessHeap () returned 0x800000
	[0208.848] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.848] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0208.849] GetProcessHeap () returned 0x800000
	[0208.849] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.849] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.849] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.849] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.849] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.849] GetProcessHeap () returned 0x800000
	[0208.849] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.849] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0208.849] GetProcessHeap () returned 0x800000
	[0208.849] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.850] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.850] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.850] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.850] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.850] GetProcessHeap () returned 0x800000
	[0208.850] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.850] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0208.850] GetProcessHeap () returned 0x800000
	[0208.850] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.915] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.915] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.915] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.915] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.916] GetProcessHeap () returned 0x800000
	[0208.916] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.916] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0208.917] GetProcessHeap () returned 0x800000
	[0208.917] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.917] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.917] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.917] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.917] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.918] GetProcessHeap () returned 0x800000
	[0208.918] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.918] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0208.918] GetProcessHeap () returned 0x800000
	[0208.918] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.918] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.918] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.918] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.918] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.919] GetProcessHeap () returned 0x800000
	[0208.919] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.919] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0208.919] GetProcessHeap () returned 0x800000
	[0208.919] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.919] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.919] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.919] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.919] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.920] GetProcessHeap () returned 0x800000
	[0208.920] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.920] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1
	[0208.920] GetProcessHeap () returned 0x800000
	[0208.920] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.920] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.920] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.920] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.921] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.921] GetProcessHeap () returned 0x800000
	[0208.921] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.921] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0208.921] GetProcessHeap () returned 0x800000
	[0208.921] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.921] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.922] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.922] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.922] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.922] GetProcessHeap () returned 0x800000
	[0208.922] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.922] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0208.922] GetProcessHeap () returned 0x800000
	[0208.922] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.923] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.923] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.923] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.923] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.923] GetProcessHeap () returned 0x800000
	[0208.923] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.923] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0208.923] GetProcessHeap () returned 0x800000
	[0208.923] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.924] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.924] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.924] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.924] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.924] GetProcessHeap () returned 0x800000
	[0208.924] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.924] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0208.924] GetProcessHeap () returned 0x800000
	[0208.924] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.925] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.925] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.925] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.925] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.925] GetProcessHeap () returned 0x800000
	[0208.925] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.925] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0208.925] GetProcessHeap () returned 0x800000
	[0208.926] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.926] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.926] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.926] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.926] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.926] GetProcessHeap () returned 0x800000
	[0208.926] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.926] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0208.927] GetProcessHeap () returned 0x800000
	[0208.927] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.927] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.927] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.927] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.927] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.927] GetProcessHeap () returned 0x800000
	[0208.927] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.928] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0208.928] GetProcessHeap () returned 0x800000
	[0208.928] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.928] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.928] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.928] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.928] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.929] GetProcessHeap () returned 0x800000
	[0208.929] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.929] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0208.929] GetProcessHeap () returned 0x800000
	[0208.929] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.929] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.929] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.929] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.929] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.930] GetProcessHeap () returned 0x800000
	[0208.930] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.930] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0208.930] GetProcessHeap () returned 0x800000
	[0208.930] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0208.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0208.930] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.930] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0208.930] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0208.930] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0208.933] GetProcessHeap () returned 0x800000
	[0208.933] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0208.933] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0208.933] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0208.934] GetProcessHeap () returned 0x800000
	[0208.934] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0208.934] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0208.934] GetProcessHeap () returned 0x800000
	[0208.934] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0208.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0209.097] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0209.097] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ae0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86adfb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdd12c400, ftLastWriteTime.dwHighDateTime=0x1d0683e, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0209.097] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ae0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86adfb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdd12c400, ftLastWriteTime.dwHighDateTime=0x1d0683e, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
	[0209.097] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0209.097] GetProcessHeap () returned 0x800000
	[0209.097] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0209.097] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0209.098] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0209.098] GetProcessHeap () returned 0x800000
	[0209.098] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0209.098] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 0
	[0209.098] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0209.098] GetProcessHeap () returned 0x800000
	[0209.098] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0209.098] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1
	[0209.098] GetProcessHeap () returned 0x800000
	[0209.098] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0209.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0209.274] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0209.274] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5817.313.0.5_0", cAlternateFileName="581731~1.5_0")) returned 1
	[0209.275] GetProcessHeap () returned 0x800000
	[0209.275] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0209.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0209.635] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0209.765] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83637bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8363f0f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="angular.js", cAlternateFileName="")) returned 1
	[0209.765] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83641800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83643f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xa89c, dwReserved0=0x0, dwReserved1=0x0, cFileName="background_script.js", cAlternateFileName="BACKGR~1.JS")) returned 1
	[0209.766] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83646620, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83648d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x181aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_game_sender.js", cAlternateFileName="CAST_G~1.JS")) returned 1
	[0209.766] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x111e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_route_details.html", cAlternateFileName="CAST_R~1.HTM")) returned 1
	[0209.766] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83652970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83657790, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3a258, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_route_details.js", cAlternateFileName="CAST_R~1.JS")) returned 1
	[0209.766] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8365ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836613d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xce17, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_sender.js", cAlternateFileName="CAST_S~1.JS")) returned 1
	[0209.766] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_setup", cAlternateFileName="CAST_S~1")) returned 1
	[0209.766] GetProcessHeap () returned 0x800000
	[0209.766] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0209.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0210.062] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0210.062] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.css", cAlternateFileName="")) returned 1
	[0210.062] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.js", cAlternateFileName="")) returned 1
	[0210.062] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app_redirect.js", cAlternateFileName="CAST_A~1.JS")) returned 1
	[0210.062] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="chromecast_logo_grey.png", cAlternateFileName="CHROME~1.PNG")) returned 1
	[0210.062] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="devices.html", cAlternateFileName="DEVICE~1.HTM")) returned 1
	[0210.062] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0210.062] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="offers.html", cAlternateFileName="OFFERS~1.HTM")) returned 1
	[0210.062] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 1
	[0210.062] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 0
	[0210.062] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0210.064] GetProcessHeap () returned 0x800000
	[0210.064] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0210.064] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_route_details", cAlternateFileName="CLOUD_~1")) returned 1
	[0210.064] GetProcessHeap () returned 0x800000
	[0210.064] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0210.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0210.172] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0210.172] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.html", cAlternateFileName="VIEW~1.HTM")) returned 1
	[0210.172] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 1
	[0210.172] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 0
	[0210.172] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0210.173] GetProcessHeap () returned 0x800000
	[0210.173] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0210.173] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83696f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83699640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc878, dwReserved0=0x0, dwReserved1=0x0, cFileName="common.js", cAlternateFileName="")) returned 1
	[0210.173] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8369bd50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8369bd50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc26, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback.css", cAlternateFileName="")) returned 1
	[0210.173] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x38a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback.html", cAlternateFileName="FEEDBA~1.HTM")) returned 1
	[0210.173] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a5990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a5990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback_script.js", cAlternateFileName="FEEDBA~1.JS")) returned 1
	[0210.173] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836af5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8395fd70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0210.173] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b1ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b43f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x46039, dwReserved0=0x0, dwReserved1=0x0, cFileName="material_css_min.css", cAlternateFileName="MATERI~1.CSS")) returned 1
	[0210.173] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b6b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b9210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x7c33, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_cast_streaming.js", cAlternateFileName="MIRROR~1.JS")) returned 1
	[0210.173] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836c2e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836c5560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_common.js", cAlternateFileName="MIRROR~2.JS")) returned 1
	[0210.173] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836ca380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836cf1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x794cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_hangouts.js", cAlternateFileName="MIRROR~3.JS")) returned 1
	[0210.173] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836d3fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836d66d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x941, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_webrtc.js", cAlternateFileName="MIRROR~4.JS")) returned 1
	[0210.173] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0210.173] GetProcessHeap () returned 0x800000
	[0210.173] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0210.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0210.281] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0210.943] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1
	[0210.944] GetProcessHeap () returned 0x800000
	[0210.944] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0210.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0210.944] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0210.944] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0210.944] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0210.944] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0210.945] GetProcessHeap () returned 0x800000
	[0210.945] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0210.945] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0210.945] GetProcessHeap () returned 0x800000
	[0210.945] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0210.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0211.028] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0211.029] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0211.029] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0211.029] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0211.030] GetProcessHeap () returned 0x800000
	[0211.030] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0211.030] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0211.030] GetProcessHeap () returned 0x800000
	[0211.030] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0211.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0211.030] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0211.030] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0211.030] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0211.030] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0211.031] GetProcessHeap () returned 0x800000
	[0211.031] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0211.031] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1
	[0211.031] GetProcessHeap () returned 0x800000
	[0211.031] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0211.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0211.165] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0211.165] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0211.165] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0211.165] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0211.166] GetProcessHeap () returned 0x800000
	[0211.166] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0211.166] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0211.166] GetProcessHeap () returned 0x800000
	[0211.166] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0211.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0215.851] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0215.851] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0215.851] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0215.851] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0215.852] GetProcessHeap () returned 0x800000
	[0215.852] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0215.852] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0215.852] GetProcessHeap () returned 0x800000
	[0215.852] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0215.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.900] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.900] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.900] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.900] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.901] GetProcessHeap () returned 0x800000
	[0220.901] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.901] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0220.901] GetProcessHeap () returned 0x800000
	[0220.901] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.901] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.901] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.901] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.902] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.902] GetProcessHeap () returned 0x800000
	[0220.902] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.902] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0220.902] GetProcessHeap () returned 0x800000
	[0220.902] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.908] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.908] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.908] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.908] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.908] GetProcessHeap () returned 0x800000
	[0220.908] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.908] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0220.908] GetProcessHeap () returned 0x800000
	[0220.908] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.909] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.909] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.909] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.909] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.909] GetProcessHeap () returned 0x800000
	[0220.909] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.909] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0220.909] GetProcessHeap () returned 0x800000
	[0220.909] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.959] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.959] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.959] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.959] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.960] GetProcessHeap () returned 0x800000
	[0220.960] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.960] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0220.960] GetProcessHeap () returned 0x800000
	[0220.960] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.961] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.961] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.961] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.961] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.961] GetProcessHeap () returned 0x800000
	[0220.961] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.961] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0220.961] GetProcessHeap () returned 0x800000
	[0220.961] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.968] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.968] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.968] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.968] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.969] GetProcessHeap () returned 0x800000
	[0220.969] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.969] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1
	[0220.969] GetProcessHeap () returned 0x800000
	[0220.969] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.969] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.969] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.969] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.969] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.970] GetProcessHeap () returned 0x800000
	[0220.970] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.970] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0220.970] GetProcessHeap () returned 0x800000
	[0220.970] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.972] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.972] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.972] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.972] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.975] GetProcessHeap () returned 0x800000
	[0220.975] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.975] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0220.975] GetProcessHeap () returned 0x800000
	[0220.975] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.976] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.976] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.976] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.976] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.976] GetProcessHeap () returned 0x800000
	[0220.976] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.976] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0220.976] GetProcessHeap () returned 0x800000
	[0220.976] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.977] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.977] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.977] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.977] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.978] GetProcessHeap () returned 0x800000
	[0220.978] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.978] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1
	[0220.978] GetProcessHeap () returned 0x800000
	[0220.978] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.978] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.978] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.978] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.978] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.979] GetProcessHeap () returned 0x800000
	[0220.979] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.979] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0220.979] GetProcessHeap () returned 0x800000
	[0220.979] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.980] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.980] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.980] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.980] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.980] GetProcessHeap () returned 0x800000
	[0220.980] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.980] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0220.980] GetProcessHeap () returned 0x800000
	[0220.980] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.980] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.980] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.981] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.981] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.981] GetProcessHeap () returned 0x800000
	[0220.981] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.981] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0220.981] GetProcessHeap () returned 0x800000
	[0220.981] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.982] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.982] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.982] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.982] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.982] GetProcessHeap () returned 0x800000
	[0220.982] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.982] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0220.982] GetProcessHeap () returned 0x800000
	[0220.982] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.983] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.983] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.983] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.983] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.983] GetProcessHeap () returned 0x800000
	[0220.983] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.983] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0220.983] GetProcessHeap () returned 0x800000
	[0220.983] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.984] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.984] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.984] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.984] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.984] GetProcessHeap () returned 0x800000
	[0220.985] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.985] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1
	[0220.985] GetProcessHeap () returned 0x800000
	[0220.985] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.985] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.985] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.985] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.985] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.985] GetProcessHeap () returned 0x800000
	[0220.985] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.985] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0220.985] GetProcessHeap () returned 0x800000
	[0220.985] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.986] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.986] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.986] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.986] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.987] GetProcessHeap () returned 0x800000
	[0220.987] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.987] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1
	[0220.987] GetProcessHeap () returned 0x800000
	[0220.987] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.987] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.987] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.987] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.987] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.988] GetProcessHeap () returned 0x800000
	[0220.988] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.988] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0220.988] GetProcessHeap () returned 0x800000
	[0220.988] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.988] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.988] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.988] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.989] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.989] GetProcessHeap () returned 0x800000
	[0220.989] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.989] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0220.989] GetProcessHeap () returned 0x800000
	[0220.989] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.989] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.989] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.989] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.989] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.990] GetProcessHeap () returned 0x800000
	[0220.990] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.990] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0220.990] GetProcessHeap () returned 0x800000
	[0220.990] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.991] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.991] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.991] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.991] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.991] GetProcessHeap () returned 0x800000
	[0220.991] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.991] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1
	[0220.991] GetProcessHeap () returned 0x800000
	[0220.991] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.991] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.991] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.992] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.992] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.992] GetProcessHeap () returned 0x800000
	[0220.992] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.992] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1
	[0220.992] GetProcessHeap () returned 0x800000
	[0220.992] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.993] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.993] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.993] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.993] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.993] GetProcessHeap () returned 0x800000
	[0220.993] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.993] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0220.993] GetProcessHeap () returned 0x800000
	[0220.993] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.994] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.994] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.994] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.994] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.994] GetProcessHeap () returned 0x800000
	[0220.994] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.994] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1
	[0220.994] GetProcessHeap () returned 0x800000
	[0220.994] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.995] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.995] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.995] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.995] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.996] GetProcessHeap () returned 0x800000
	[0220.996] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.996] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0220.996] GetProcessHeap () returned 0x800000
	[0220.996] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.996] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.996] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.996] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.996] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.997] GetProcessHeap () returned 0x800000
	[0220.997] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.997] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0220.997] GetProcessHeap () returned 0x800000
	[0220.997] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.998] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.998] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.998] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.998] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.998] GetProcessHeap () returned 0x800000
	[0220.998] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.998] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1
	[0220.998] GetProcessHeap () returned 0x800000
	[0220.998] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0220.999] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0220.999] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0220.999] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0220.999] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0220.999] GetProcessHeap () returned 0x800000
	[0220.999] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0220.999] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0220.999] GetProcessHeap () returned 0x800000
	[0220.999] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0220.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.219] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.219] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.219] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.219] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.220] GetProcessHeap () returned 0x800000
	[0221.220] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.220] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0221.220] GetProcessHeap () returned 0x800000
	[0221.220] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.220] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.220] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.220] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.220] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.221] GetProcessHeap () returned 0x800000
	[0221.221] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.221] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0221.221] GetProcessHeap () returned 0x800000
	[0221.221] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.346] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.346] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.346] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.346] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.348] GetProcessHeap () returned 0x800000
	[0221.348] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.348] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0221.348] GetProcessHeap () returned 0x800000
	[0221.348] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.348] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.348] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.348] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.348] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.349] GetProcessHeap () returned 0x800000
	[0221.349] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.349] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0221.349] GetProcessHeap () returned 0x800000
	[0221.349] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.461] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.461] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.461] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.461] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.463] GetProcessHeap () returned 0x800000
	[0221.463] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.463] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0221.463] GetProcessHeap () returned 0x800000
	[0221.463] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.463] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.463] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.463] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.463] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.464] GetProcessHeap () returned 0x800000
	[0221.464] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.464] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0221.464] GetProcessHeap () returned 0x800000
	[0221.464] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.550] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.550] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.550] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.550] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.551] GetProcessHeap () returned 0x800000
	[0221.551] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.551] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0221.551] GetProcessHeap () returned 0x800000
	[0221.551] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.551] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.551] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.551] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.551] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.552] GetProcessHeap () returned 0x800000
	[0221.552] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.552] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1
	[0221.552] GetProcessHeap () returned 0x800000
	[0221.552] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.650] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.650] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.650] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.650] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.651] GetProcessHeap () returned 0x800000
	[0221.651] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.651] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1
	[0221.651] GetProcessHeap () returned 0x800000
	[0221.651] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.651] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.651] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.651] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.651] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.652] GetProcessHeap () returned 0x800000
	[0221.652] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.652] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1
	[0221.652] GetProcessHeap () returned 0x800000
	[0221.652] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.754] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.754] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f0ef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5593, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.754] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f0ef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5593, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.754] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.755] GetProcessHeap () returned 0x800000
	[0221.755] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.755] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0221.755] GetProcessHeap () returned 0x800000
	[0221.755] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.755] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.755] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f8420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835fab30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.755] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f8420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835fab30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.755] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.756] GetProcessHeap () returned 0x800000
	[0221.756] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.756] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0221.756] GetProcessHeap () returned 0x800000
	[0221.756] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.844] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.844] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835ff950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83602060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.844] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835ff950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83602060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.844] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.845] GetProcessHeap () returned 0x800000
	[0221.845] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.845] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0221.845] GetProcessHeap () returned 0x800000
	[0221.845] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.845] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.845] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8360e3b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83610ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.845] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8360e3b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83610ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.845] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.846] GetProcessHeap () returned 0x800000
	[0221.846] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.846] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0221.846] GetProcessHeap () returned 0x800000
	[0221.846] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.903] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.903] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83617ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x426b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.903] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83617ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x426b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.903] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.904] GetProcessHeap () returned 0x800000
	[0221.904] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.904] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh", cAlternateFileName="")) returned 1
	[0221.904] GetProcessHeap () returned 0x800000
	[0221.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0221.904] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0221.905] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8361f520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d11, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0221.905] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8361f520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d11, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0221.905] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0221.905] GetProcessHeap () returned 0x800000
	[0221.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0221.905] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0221.905] GetProcessHeap () returned 0x800000
	[0221.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0221.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0222.041] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.042] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8362b870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0222.042] FindNextFileW (in: hFindFile=0x34d1aa8, lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8362b870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
	[0222.042] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0222.043] GetProcessHeap () returned 0x800000
	[0222.043] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0222.043] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
	[0222.043] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0222.043] GetProcessHeap () returned 0x800000
	[0222.043] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0222.043] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0222.044] GetProcessHeap () returned 0x800000
	[0222.044] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0222.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0222.178] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.178] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x839fe880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7299, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
	[0222.178] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836e0310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0222.178] FindNextFileW (in: hFindFile=0x34d19e8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836e0310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
	[0222.178] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0222.179] GetProcessHeap () returned 0x800000
	[0222.179] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0222.179] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
	[0222.179] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0222.179] GetProcessHeap () returned 0x800000
	[0222.179] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0222.179] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5817.313.0.5_0", cAlternateFileName="581731~1.5_0")) returned 0
	[0222.179] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0222.180] GetProcessHeap () returned 0x800000
	[0222.180] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.180] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0
	[0222.180] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0222.180] GetProcessHeap () returned 0x800000
	[0222.180] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0222.180] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1
	[0222.180] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1
	[0222.180] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1
	[0222.180] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0222.181] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1
	[0222.181] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1
	[0222.181] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~2")) returned 1
	[0222.181] GetProcessHeap () returned 0x800000
	[0222.181] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0222.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0222.308] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.309] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A058.tmp", cAlternateFileName="")) returned 1
	[0222.313] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A059.tmp", cAlternateFileName="")) returned 1
	[0222.313] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A059.tmp", cAlternateFileName="")) returned 0
	[0222.315] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0222.319] GetProcessHeap () returned 0x800000
	[0222.319] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0222.319] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIconsOld", cAlternateFileName="JUMPLI~1")) returned 1
	[0222.323] GetProcessHeap () returned 0x800000
	[0222.323] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0222.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0222.323] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.323] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B03.tmp", cAlternateFileName="")) returned 1
	[0222.327] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B04.tmp", cAlternateFileName="")) returned 1
	[0222.328] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B04.tmp", cAlternateFileName="")) returned 0
	[0222.328] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0222.332] GetProcessHeap () returned 0x800000
	[0222.332] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0222.332] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1
	[0222.332] GetProcessHeap () returned 0x800000
	[0222.332] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0222.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0222.333] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.333] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1
	[0222.333] GetProcessHeap () returned 0x800000
	[0222.333] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0222.423] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.423] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86513570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0222.423] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
	[0222.423] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
	[0222.423] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97256fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
	[0222.423] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
	[0222.423] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0
	[0222.423] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0222.425] GetProcessHeap () returned 0x800000
	[0222.425] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.425] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 0
	[0222.425] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0222.425] GetProcessHeap () returned 0x800000
	[0222.425] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0222.425] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1
	[0222.425] GetProcessHeap () returned 0x800000
	[0222.425] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0222.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0222.535] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.535] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9048b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", cAlternateFileName="CHROME~1.LOC")) returned 1
	[0222.535] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x904b1a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", cAlternateFileName="CHROME~2.LOC")) returned 1
	[0222.535] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x904b1a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", cAlternateFileName="CHROME~2.LOC")) returned 0
	[0222.535] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0222.544] GetProcessHeap () returned 0x800000
	[0222.544] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0222.547] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1
	[0222.549] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1
	[0222.556] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1
	[0222.557] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8262ad90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1
	[0222.557] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1
	[0222.557] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1
	[0222.557] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1
	[0222.557] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1
	[0222.557] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1
	[0222.557] SetEvent (hEvent=0x110) returned 1
	[0222.557] ResetEvent (hEvent=0x114) returned 1
	[0222.557] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1
	[0222.557] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1
	[0222.557] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1
	[0222.650] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1
	[0222.650] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1
	[0222.650] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1
	[0222.650] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x822e3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1
	[0222.650] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1
	[0222.650] GetProcessHeap () returned 0x800000
	[0222.650] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0222.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0222.751] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.751] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1
	[0222.751] GetProcessHeap () returned 0x800000
	[0222.751] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0222.753] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.753] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8448d2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0222.753] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
	[0222.753] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
	[0222.753] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x93935fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
	[0222.753] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
	[0222.753] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0
	[0222.753] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0222.754] GetProcessHeap () returned 0x800000
	[0222.754] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.754] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0
	[0222.754] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0222.755] GetProcessHeap () returned 0x800000
	[0222.755] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0222.755] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1
	[0222.755] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d8c9a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81984910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1
	[0222.755] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c2e920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x88c2e920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x88c2e920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1
	[0222.755] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ee3600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80ee3600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6cde50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1
	[0222.755] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1
	[0222.755] GetProcessHeap () returned 0x800000
	[0222.755] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0222.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0222.755] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.756] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1
	[0222.756] GetProcessHeap () returned 0x800000
	[0222.756] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0222.756] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.756] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1
	[0222.756] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 1
	[0222.756] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 0
	[0222.757] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0222.757] GetProcessHeap () returned 0x800000
	[0222.757] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.757] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 0
	[0222.757] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0222.757] GetProcessHeap () returned 0x800000
	[0222.757] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0222.757] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1
	[0222.757] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1
	[0222.757] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 0
	[0222.758] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.758] GetProcessHeap () returned 0x800000
	[0222.758] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0222.758] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1
	[0222.758] GetProcessHeap () returned 0x800000
	[0222.758] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.760] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.760] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.760] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.760] GetProcessHeap () returned 0x800000
	[0222.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.760] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1
	[0222.760] GetProcessHeap () returned 0x800000
	[0222.760] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.761] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.761] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.761] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.761] GetProcessHeap () returned 0x800000
	[0222.761] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.761] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1
	[0222.761] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1
	[0222.761] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1
	[0222.761] GetProcessHeap () returned 0x800000
	[0222.761] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.761] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.761] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.762] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.764] GetProcessHeap () returned 0x800000
	[0222.764] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.764] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1
	[0222.764] GetProcessHeap () returned 0x800000
	[0222.764] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.764] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.764] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.764] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.765] GetProcessHeap () returned 0x800000
	[0222.765] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.765] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1
	[0222.765] GetProcessHeap () returned 0x800000
	[0222.765] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.765] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.765] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.765] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.765] GetProcessHeap () returned 0x800000
	[0222.765] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.765] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAFEBR~3")) returned 1
	[0222.766] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAFEBR~4")) returned 1
	[0222.766] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SAFEBR~1")) returned 1
	[0222.766] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAFEBR~2")) returned 1
	[0222.766] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1
	[0222.766] GetProcessHeap () returned 0x800000
	[0222.766] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.767] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.767] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.767] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.767] GetProcessHeap () returned 0x800000
	[0222.767] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.767] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1
	[0222.767] GetProcessHeap () returned 0x800000
	[0222.767] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.767] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.767] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.767] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.768] GetProcessHeap () returned 0x800000
	[0222.768] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.768] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1
	[0222.768] GetProcessHeap () returned 0x800000
	[0222.768] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.768] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.768] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.768] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.769] GetProcessHeap () returned 0x800000
	[0222.769] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.769] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0
	[0222.769] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0222.769] GetProcessHeap () returned 0x800000
	[0222.769] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0222.769] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0
	[0222.769] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0222.769] GetProcessHeap () returned 0x800000
	[0222.769] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0222.770] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1
	[0222.770] GetProcessHeap () returned 0x800000
	[0222.770] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0222.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.770] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.770] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0222.770] GetProcessHeap () returned 0x800000
	[0222.770] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0222.770] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0
	[0222.770] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0222.771] GetProcessHeap () returned 0x800000
	[0222.771] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0222.772] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0222.772] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6acf470, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x126f87, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
	[0222.772] SetEvent (hEvent=0x110) returned 1
	[0222.772] ResetEvent (hEvent=0x114) returned 1
	[0222.772] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0222.772] GetProcessHeap () returned 0x800000
	[0222.773] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0222.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0222.773] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.773] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0222.773] GetProcessHeap () returned 0x800000
	[0222.773] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0222.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0222.774] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.774] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.774] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0222.774] GetProcessHeap () returned 0x800000
	[0222.774] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0222.774] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
	[0222.774] GetProcessHeap () returned 0x800000
	[0222.774] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0222.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0222.774] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.774] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.774] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0222.872] GetProcessHeap () returned 0x800000
	[0222.872] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0222.872] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0222.873] GetProcessHeap () returned 0x800000
	[0222.873] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0222.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0222.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
	[0222.948] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1
	[0222.948] GetProcessHeap () returned 0x800000
	[0222.948] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0222.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0222.950] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.951] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1
	[0222.951] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1
	[0222.951] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1
	[0222.951] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0
	[0222.951] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0222.952] GetProcessHeap () returned 0x800000
	[0222.952] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0222.952] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
	[0222.953] GetProcessHeap () returned 0x800000
	[0222.953] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0222.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0222.953] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.953] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1
	[0222.953] GetProcessHeap () returned 0x800000
	[0222.953] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0222.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.954] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.954] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites~.feed-ms", cAlternateFileName="SUGGES~1.FEE")) returned 1
	[0222.954] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1
	[0222.954] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0
	[0222.954] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.954] GetProcessHeap () returned 0x800000
	[0222.954] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0222.954] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0
	[0222.954] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0222.955] GetProcessHeap () returned 0x800000
	[0222.955] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0222.955] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0
	[0222.955] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0222.955] GetProcessHeap () returned 0x800000
	[0222.955] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0222.955] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0222.955] GetProcessHeap () returned 0x800000
	[0222.955] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0222.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0222.969] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.969] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1
	[0222.969] GetProcessHeap () returned 0x800000
	[0222.969] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0222.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0222.970] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.970] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0222.970] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0222.970] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
	[0222.970] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0222.970] GetProcessHeap () returned 0x800000
	[0222.970] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0222.970] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1
	[0222.970] GetProcessHeap () returned 0x800000
	[0222.970] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0222.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0222.970] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.970] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0222.971] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0222.971] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
	[0222.971] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0222.971] GetProcessHeap () returned 0x800000
	[0222.971] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0222.971] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1
	[0222.971] GetProcessHeap () returned 0x800000
	[0222.971] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0222.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0222.971] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.971] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0222.971] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0222.971] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
	[0222.972] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0222.972] GetProcessHeap () returned 0x800000
	[0222.972] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0222.972] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0222.972] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0222.972] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1
	[0222.972] GetProcessHeap () returned 0x800000
	[0222.972] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0222.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0222.972] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.972] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0222.972] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0222.973] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1
	[0222.973] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 0
	[0222.973] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0222.973] GetProcessHeap () returned 0x800000
	[0222.973] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0222.973] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0
	[0222.973] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0222.973] GetProcessHeap () returned 0x800000
	[0222.973] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0222.974] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1
	[0222.974] GetProcessHeap () returned 0x800000
	[0222.974] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0222.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0222.974] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.974] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1
	[0222.974] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0
	[0222.975] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0222.975] GetProcessHeap () returned 0x800000
	[0222.975] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0222.975] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
	[0222.975] GetProcessHeap () returned 0x800000
	[0222.975] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0222.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0222.975] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.975] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.975] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0222.976] GetProcessHeap () returned 0x800000
	[0222.976] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0222.976] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
	[0222.976] GetProcessHeap () returned 0x800000
	[0222.976] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0222.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0222.977] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.977] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.977] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0222.977] GetProcessHeap () returned 0x800000
	[0222.977] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0222.977] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
	[0222.977] GetProcessHeap () returned 0x800000
	[0222.978] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0222.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0222.978] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.978] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.978] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0222.979] GetProcessHeap () returned 0x800000
	[0222.979] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0222.979] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
	[0222.979] GetProcessHeap () returned 0x800000
	[0222.979] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0222.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0222.979] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.979] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.979] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0222.980] GetProcessHeap () returned 0x800000
	[0222.980] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0222.980] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0222.980] GetProcessHeap () returned 0x800000
	[0222.980] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0222.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0222.986] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.986] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1
	[0222.986] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1
	[0222.986] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1
	[0222.986] GetProcessHeap () returned 0x800000
	[0222.986] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0222.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0222.989] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.989] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3LKBQZJ3", cAlternateFileName="")) returned 1
	[0222.990] GetProcessHeap () returned 0x800000
	[0222.990] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0222.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.990] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.990] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.990] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.990] GetProcessHeap () returned 0x800000
	[0222.990] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0222.990] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NES5H33", cAlternateFileName="")) returned 1
	[0222.990] GetProcessHeap () returned 0x800000
	[0222.990] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0222.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.991] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.991] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 1
	[0222.991] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 0
	[0222.991] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.991] GetProcessHeap () returned 0x800000
	[0222.991] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0222.991] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKLUIDU0", cAlternateFileName="")) returned 1
	[0222.991] GetProcessHeap () returned 0x800000
	[0222.991] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0222.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.992] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.992] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.992] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.992] GetProcessHeap () returned 0x800000
	[0222.992] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0222.992] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0222.992] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 1
	[0222.992] GetProcessHeap () returned 0x800000
	[0222.992] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0222.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.992] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.992] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.992] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.993] GetProcessHeap () returned 0x800000
	[0222.993] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0222.993] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 0
	[0222.993] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0222.993] GetProcessHeap () returned 0x800000
	[0222.993] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0222.993] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1
	[0222.994] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1
	[0222.994] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0222.994] GetProcessHeap () returned 0x800000
	[0222.994] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0222.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0222.994] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.994] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1
	[0222.994] GetProcessHeap () returned 0x800000
	[0222.994] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0222.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.995] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.995] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0222.995] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.995] GetProcessHeap () returned 0x800000
	[0222.995] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0222.995] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1
	[0222.995] GetProcessHeap () returned 0x800000
	[0222.995] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0222.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0222.998] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0222.998] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 1
	[0222.998] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1
	[0222.998] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{4BD65~1.DAT")) returned 1
	[0222.998] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 1
	[0222.998] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 0
	[0222.998] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0222.999] GetProcessHeap () returned 0x800000
	[0222.999] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0222.999] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 0
	[0222.999] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0222.999] GetProcessHeap () returned 0x800000
	[0222.999] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0222.999] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 0
	[0222.999] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0223.000] GetProcessHeap () returned 0x800000
	[0223.000] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0223.000] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0223.000] GetProcessHeap () returned 0x800000
	[0223.000] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0223.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0223.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1
	[0223.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1
	[0223.061] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1
	[0223.061] GetProcessHeap () returned 0x800000
	[0223.061] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.061] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.061] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0223.061] GetProcessHeap () returned 0x800000
	[0223.061] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.062] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.062] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0000E713", cAlternateFileName="")) returned 1
	[0223.062] GetProcessHeap () returned 0x800000
	[0223.062] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.068] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.068] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0223.068] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
	[0223.068] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
	[0223.068] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
	[0223.068] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
	[0223.068] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
	[0223.068] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
	[0223.068] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
	[0223.068] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
	[0223.068] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
	[0223.068] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
	[0223.069] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
	[0223.069] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0
	[0223.069] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.070] GetProcessHeap () returned 0x800000
	[0223.070] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.070] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1
	[0223.070] GetProcessHeap () returned 0x800000
	[0223.070] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.125] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
	[0223.126] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0
	[0223.126] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.127] GetProcessHeap () returned 0x800000
	[0223.127] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.127] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0
	[0223.127] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.128] GetProcessHeap () returned 0x800000
	[0223.128] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.128] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0223.128] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.128] GetProcessHeap () returned 0x800000
	[0223.128] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.128] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1
	[0223.128] GetProcessHeap () returned 0x800000
	[0223.128] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.180] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.180] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.180] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.181] GetProcessHeap () returned 0x800000
	[0223.181] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.181] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0
	[0223.181] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0223.182] GetProcessHeap () returned 0x800000
	[0223.182] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0223.182] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0223.182] GetProcessHeap () returned 0x800000
	[0223.182] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0223.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0223.183] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.183] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.0", cAlternateFileName="")) returned 1
	[0223.183] GetProcessHeap () returned 0x800000
	[0223.183] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.214] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.214] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 1
	[0223.214] GetProcessHeap () returned 0x800000
	[0223.214] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.214] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.215] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7aab700, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7aab700, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-CNRY.FSD", cAlternateFileName="")) returned 1
	[0223.215] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", cAlternateFileName="FSD-{4~1.FSD")) returned 1
	[0223.215] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSF-CTBL.FSF", cAlternateFileName="")) returned 1
	[0223.215] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSF-CTBL.FSF", cAlternateFileName="")) returned 0
	[0223.215] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.215] GetProcessHeap () returned 0x800000
	[0223.215] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.215] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 0
	[0223.215] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.216] GetProcessHeap () returned 0x800000
	[0223.216] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.216] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1
	[0223.216] GetProcessHeap () returned 0x800000
	[0223.216] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.216] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.216] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0223.216] GetProcessHeap () returned 0x800000
	[0223.216] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.216] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.216] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.216] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.217] GetProcessHeap () returned 0x800000
	[0223.217] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.217] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1
	[0223.217] GetProcessHeap () returned 0x800000
	[0223.217] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.217] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.217] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.217] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.218] GetProcessHeap () returned 0x800000
	[0223.218] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.218] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 0
	[0223.218] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.218] GetProcessHeap () returned 0x800000
	[0223.218] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.218] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 1
	[0223.218] GetProcessHeap () returned 0x800000
	[0223.218] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.223] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.223] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.sig", cAlternateFileName="350DB9~1.SIG")) returned 1
	[0223.224] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.xml", cAlternateFileName="350DB9~1.XML")) returned 1
	[0223.224] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.xml", cAlternateFileName="350DB9~1.XML")) returned 0
	[0223.224] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.224] GetProcessHeap () returned 0x800000
	[0223.224] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.224] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 0
	[0223.224] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0223.224] GetProcessHeap () returned 0x800000
	[0223.224] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0223.225] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0223.225] GetProcessHeap () returned 0x800000
	[0223.225] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0223.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0223.225] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.225] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1
	[0223.226] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c4d2d00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4d2d00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.sharing.xml.obi", cAlternateFileName="OUTLOO~1.OBI")) returned 1
	[0223.226] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1
	[0223.226] GetProcessHeap () returned 0x800000
	[0223.226] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.240] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.240] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 1
	[0223.240] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 0
	[0223.240] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.240] GetProcessHeap () returned 0x800000
	[0223.240] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.240] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 0
	[0223.240] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0223.241] GetProcessHeap () returned 0x800000
	[0223.241] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0223.241] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0223.241] GetProcessHeap () returned 0x800000
	[0223.241] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0223.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0223.251] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.251] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.251] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0223.252] GetProcessHeap () returned 0x800000
	[0223.252] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0223.252] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1
	[0223.253] GetProcessHeap () returned 0x800000
	[0223.253] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0223.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0223.253] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.253] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.253] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0223.253] GetProcessHeap () returned 0x800000
	[0223.253] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0223.253] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1
	[0223.253] GetProcessHeap () returned 0x800000
	[0223.253] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0223.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0223.254] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.254] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content14.dat", cAlternateFileName="CONTEN~1.DAT")) returned 1
	[0223.254] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 1
	[0223.254] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 0
	[0223.254] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0223.254] GetProcessHeap () returned 0x800000
	[0223.254] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0223.254] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0223.254] GetProcessHeap () returned 0x800000
	[0223.254] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0223.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0223.255] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.255] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1024", cAlternateFileName="")) returned 1
	[0223.255] GetProcessHeap () returned 0x800000
	[0223.255] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.276] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.276] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.276] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.276] GetProcessHeap () returned 0x800000
	[0223.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.276] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x34ef3970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0223.276] GetProcessHeap () returned 0x800000
	[0223.276] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x34ef3970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.277] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x34ef3970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.277] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ef3970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8ecd4180, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x49098, dwReserved0=0x0, dwReserved1=0x0, cFileName="StructuredQuerySchema.bin", cAlternateFileName="STRUCT~1.BIN")) returned 1
	[0223.277] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ef3970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8ecd4180, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x49098, dwReserved0=0x0, dwReserved1=0x0, cFileName="StructuredQuerySchema.bin", cAlternateFileName="STRUCT~1.BIN")) returned 0
	[0223.277] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.277] GetProcessHeap () returned 0x800000
	[0223.277] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.277] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x926116d0, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x926116d0, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1
	[0223.277] GetProcessHeap () returned 0x800000
	[0223.277] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x926116d0, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x926116d0, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.278] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x926116d0, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x926116d0, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.278] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1
	[0223.278] GetProcessHeap () returned 0x800000
	[0223.278] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.278] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.278] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0223.278] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0223.278] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.278] GetProcessHeap () returned 0x800000
	[0223.278] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.278] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3b9ee2a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b9f09b0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b9f30c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn1", cAlternateFileName="")) returned 1
	[0223.278] GetProcessHeap () returned 0x800000
	[0223.278] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3b9ee2a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b9f09b0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b9f30c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.280] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3b9ee2a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b9f09b0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b9f30c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.280] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3b9f09b0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b9f09b0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b9f09b0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0223.281] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3b9f09b0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b9f09b0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b9f09b0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0223.281] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.281] GetProcessHeap () returned 0x800000
	[0223.281] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.281] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x926116d0, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn2", cAlternateFileName="")) returned 1
	[0223.281] GetProcessHeap () returned 0x800000
	[0223.281] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x926116d0, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.351] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x926116d0, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.351] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x92637830, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0223.351] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x92637830, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0223.351] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.352] GetProcessHeap () returned 0x800000
	[0223.352] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.352] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x926116d0, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn2", cAlternateFileName="")) returned 0
	[0223.352] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.352] GetProcessHeap () returned 0x800000
	[0223.352] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6c4c230, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6c4c230, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1
	[0223.352] GetProcessHeap () returned 0x800000
	[0223.352] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6c4c230, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6c4c230, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.352] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6c4c230, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6c4c230, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.353] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa1c6ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xaa1c6ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaa1c6ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cversions.1.db", cAlternateFileName="CVERSI~1.DB")) returned 1
	[0223.353] SetEvent (hEvent=0x110) returned 1
	[0223.353] ResetEvent (hEvent=0x114) returned 1
	[0223.361] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13d2f3e0, ftCreationTime.dwHighDateTime=0x1d3b051, ftLastAccessTime.dwLowDateTime=0x13d2f3e0, ftLastAccessTime.dwHighDateTime=0x1d3b051, ftLastWriteTime.dwLowDateTime=0x13d2f3e0, ftLastWriteTime.dwHighDateTime=0x1d3b051, nFileSizeHigh=0x0, nFileSizeLow=0x1ea08, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db", cAlternateFileName="{AFBF9~1.DB")) returned 1
	[0223.362] SetEvent (hEvent=0x110) returned 1
	[0223.364] ResetEvent (hEvent=0x114) returned 1
	[0223.367] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6bfff70, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x6bfff70, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6bfff70, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x1fd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db", cAlternateFileName="{AFBF9~2.DB")) returned 1
	[0223.367] SetEvent (hEvent=0x110) returned 1
	[0223.367] ResetEvent (hEvent=0x114) returned 1
	[0223.385] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6bfff70, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x6bfff70, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x6bfff70, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x1fd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db", cAlternateFileName="{AFBF9~2.DB")) returned 0
	[0223.392] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.393] GetProcessHeap () returned 0x800000
	[0223.393] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.393] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33af74c0, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33af74c0, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer", cAlternateFileName="")) returned 1
	[0223.394] GetProcessHeap () returned 0x800000
	[0223.394] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33af74c0, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33af74c0, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.394] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33af74c0, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33af74c0, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.394] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x30db3250, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExplorerStartupLog.etl", cAlternateFileName="EXPLOR~2.ETL")) returned 1
	[0223.394] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1e886840, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExplorerStartupLog_RunOnce.etl", cAlternateFileName="EXPLOR~1.ETL")) returned 1
	[0223.394] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33af74c0, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x33af74c0, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33af74c0, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_1024.db", cAlternateFileName="TH78CB~1.DB")) returned 1
	[0223.394] SetEvent (hEvent=0x110) returned 1
	[0223.394] ResetEvent (hEvent=0x114) returned 1
	[0223.399] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33af74c0, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x33af74c0, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33af74c0, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_256.db", cAlternateFileName="THUMBC~4.DB")) returned 1
	[0223.399] SetEvent (hEvent=0x110) returned 1
	[0223.399] ResetEvent (hEvent=0x114) returned 1
	[0223.430] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33ad1360, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x33ad1360, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33ad1360, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_32.db", cAlternateFileName="THUMBC~2.DB")) returned 1
	[0223.430] SetEvent (hEvent=0x110) returned 1
	[0223.430] ResetEvent (hEvent=0x114) returned 1
	[0223.430] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33ad1360, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x33ad1360, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0xe52c3400, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_96.db", cAlternateFileName="THUMBC~3.DB")) returned 1
	[0223.430] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33ad1360, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x33ad1360, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33ad1360, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0xcb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_idx.db", cAlternateFileName="THUMBC~1.DB")) returned 1
	[0223.431] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33af74c0, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x33af74c0, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33af74c0, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_sr.db", cAlternateFileName="TH0F82~1.DB")) returned 1
	[0223.431] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x33af74c0, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x33af74c0, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33af74c0, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_sr.db", cAlternateFileName="TH0F82~1.DB")) returned 0
	[0223.431] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.431] GetProcessHeap () returned 0x800000
	[0223.431] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.431] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1
	[0223.431] GetProcessHeap () returned 0x800000
	[0223.431] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.432] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.432] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.432] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.432] GetProcessHeap () returned 0x800000
	[0223.432] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.432] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0223.432] GetProcessHeap () returned 0x800000
	[0223.432] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.433] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.433] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0223.433] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1
	[0223.433] GetProcessHeap () returned 0x800000
	[0223.433] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.434] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.434] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0223.434] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb85ef80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0223.434] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe6f79d60, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHist012019092420190925", cAlternateFileName="MSHIST~1")) returned 1
	[0223.434] GetProcessHeap () returned 0x800000
	[0223.434] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019092420190925\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe6f79d60, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.434] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe6f79d60, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.434] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe6f79d60, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0x83c55340, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0223.434] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe6f79d60, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0x83c55340, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
	[0223.434] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.435] GetProcessHeap () returned 0x800000
	[0223.435] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.435] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe6f79d60, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe6f79d60, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6f79d60, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHist012019092420190925", cAlternateFileName="MSHIST~1")) returned 0
	[0223.435] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.435] GetProcessHeap () returned 0x800000
	[0223.435] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.435] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0223.435] GetProcessHeap () returned 0x800000
	[0223.435] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.435] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.435] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0223.436] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1
	[0223.436] GetProcessHeap () returned 0x800000
	[0223.436] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.470] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.470] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0223.470] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f0b6db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f0b6db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x432daef0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0223.470] GetProcessHeap () returned 0x800000
	[0223.470] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45c34df0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.472] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.473] GetProcessHeap () returned 0x800000
	[0223.473] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.473] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.473] GetProcessHeap () returned 0x800000
	[0223.473] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.473] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.474] GetProcessHeap () returned 0x800000
	[0223.474] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.474] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.474] GetProcessHeap () returned 0x800000
	[0223.474] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.474] GetProcessHeap () returned 0x800000
	[0223.474] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.475] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.475] GetProcessHeap () returned 0x800000
	[0223.475] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.475] GetProcessHeap () returned 0x800000
	[0223.475] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe7138400, ftLastAccessTime.dwHighDateTime=0x1d2e625, ftLastWriteTime.dwLowDateTime=0xe7138400, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.475] GetProcessHeap () returned 0x800000
	[0223.476] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.476] GetProcessHeap () returned 0x800000
	[0223.476] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b7a8160, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2b7a8160, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.492] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.494] GetProcessHeap () returned 0x800000
	[0223.494] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.494] GetProcessHeap () returned 0x800000
	[0223.494] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c153ac0, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2c153ac0, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.512] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.513] GetProcessHeap () returned 0x800000
	[0223.513] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.513] GetProcessHeap () returned 0x800000
	[0223.513] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b7a8160, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2b7a8160, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.519] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.520] GetProcessHeap () returned 0x800000
	[0223.520] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.520] GetProcessHeap () returned 0x800000
	[0223.520] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c153ac0, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2c153ac0, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.527] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.528] GetProcessHeap () returned 0x800000
	[0223.528] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.528] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.528] GetProcessHeap () returned 0x800000
	[0223.528] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.528] GetProcessHeap () returned 0x800000
	[0223.528] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x2dbf3370, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2dbf3370, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2dbf3370, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.539] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.539] GetProcessHeap () returned 0x800000
	[0223.539] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.539] GetProcessHeap () returned 0x800000
	[0223.539] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe7138400, ftCreationTime.dwHighDateTime=0x1d2e625, ftLastAccessTime.dwLowDateTime=0x27b4c650, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x32c0a7d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.540] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.540] GetProcessHeap () returned 0x800000
	[0223.540] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.540] GetProcessHeap () returned 0x800000
	[0223.540] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x51445650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51445650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.541] GetProcessHeap () returned 0x800000
	[0223.541] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f10630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f10630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f10630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.541] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.541] GetProcessHeap () returned 0x800000
	[0223.542] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.542] GetProcessHeap () returned 0x800000
	[0223.542] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.551] GetProcessHeap () returned 0x800000
	[0223.551] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5137ebf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x5137ebf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.643] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.644] GetProcessHeap () returned 0x800000
	[0223.644] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.644] GetProcessHeap () returned 0x800000
	[0223.644] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.654] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.655] GetProcessHeap () returned 0x800000
	[0223.655] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.655] GetProcessHeap () returned 0x800000
	[0223.655] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x527ba6f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x527ba6f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.662] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.663] GetProcessHeap () returned 0x800000
	[0223.663] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.663] GetProcessHeap () returned 0x800000
	[0223.663] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50fa0830, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.670] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.671] GetProcessHeap () returned 0x800000
	[0223.671] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.671] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.672] GetProcessHeap () returned 0x800000
	[0223.672] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.672] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.672] GetProcessHeap () returned 0x800000
	[0223.672] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.672] GetProcessHeap () returned 0x800000
	[0223.672] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.672] GetProcessHeap () returned 0x800000
	[0223.673] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.673] GetProcessHeap () returned 0x800000
	[0223.673] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.674] GetProcessHeap () returned 0x800000
	[0223.674] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0223.674] GetProcessHeap () returned 0x800000
	[0223.674] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ea0098
	[0223.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19e8
	[0223.676] GetProcessHeap () returned 0x800000
	[0223.676] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3eb00a0
	[0223.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x304d710 | out: lpFindFileData=0x304d710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1aa8
	[0223.676] GetProcessHeap () returned 0x800000
	[0223.676] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0223.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x304d480 | out: lpFindFileData=0x304d480*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1ae8
	[0223.677] GetProcessHeap () returned 0x800000
	[0223.677] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0223.678] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x304d1f0 | out: lpFindFileData=0x304d1f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1b28
	[0223.678] GetProcessHeap () returned 0x800000
	[0223.678] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f340e8
	[0223.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x304cf60 | out: lpFindFileData=0x304cf60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1b68
	[0223.679] GetProcessHeap () returned 0x800000
	[0223.679] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f440f0
	[0223.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x304ccd0 | out: lpFindFileData=0x304ccd0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1ba8
	[0223.681] FindClose (in: hFindFile=0x34d1ba8 | out: hFindFile=0x34d1ba8) returned 1
	[0223.682] GetProcessHeap () returned 0x800000
	[0223.682] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f440f0 | out: hHeap=0x800000) returned 1
	[0223.682] FindClose (in: hFindFile=0x34d1b68 | out: hFindFile=0x34d1b68) returned 1
	[0223.682] GetProcessHeap () returned 0x800000
	[0223.682] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f340e8 | out: hHeap=0x800000) returned 1
	[0223.683] FindClose (in: hFindFile=0x34d1b28 | out: hFindFile=0x34d1b28) returned 1
	[0223.683] GetProcessHeap () returned 0x800000
	[0223.683] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0223.683] FindClose (in: hFindFile=0x34d1ae8 | out: hFindFile=0x34d1ae8) returned 1
	[0223.683] GetProcessHeap () returned 0x800000
	[0223.683] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0223.684] FindClose (in: hFindFile=0x34d1aa8 | out: hFindFile=0x34d1aa8) returned 1
	[0223.684] GetProcessHeap () returned 0x800000
	[0223.684] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3eb00a0 | out: hHeap=0x800000) returned 1
	[0223.684] FindClose (in: hFindFile=0x34d19e8 | out: hFindFile=0x34d19e8) returned 1
	[0223.685] GetProcessHeap () returned 0x800000
	[0223.685] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ea0098 | out: hHeap=0x800000) returned 1
	[0223.686] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0223.687] GetProcessHeap () returned 0x800000
	[0223.687] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.687] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.687] GetProcessHeap () returned 0x800000
	[0223.687] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.687] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.688] GetProcessHeap () returned 0x800000
	[0223.688] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.688] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.688] GetProcessHeap () returned 0x800000
	[0223.688] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.688] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.689] GetProcessHeap () returned 0x800000
	[0223.689] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.689] GetProcessHeap () returned 0x800000
	[0223.689] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.689] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.689] GetProcessHeap () returned 0x800000
	[0223.689] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.690] GetProcessHeap () returned 0x800000
	[0223.690] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.690] GetProcessHeap () returned 0x800000
	[0223.690] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.690] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.691] GetProcessHeap () returned 0x800000
	[0223.691] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.691] GetProcessHeap () returned 0x800000
	[0223.691] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.691] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.691] GetProcessHeap () returned 0x800000
	[0223.691] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.691] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.692] GetProcessHeap () returned 0x800000
	[0223.692] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.692] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0223.692] GetProcessHeap () returned 0x800000
	[0223.692] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0223.692] GetProcessHeap () returned 0x800000
	[0223.692] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0223.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0223.694] GetProcessHeap () returned 0x800000
	[0223.694] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.695] GetProcessHeap () returned 0x800000
	[0223.695] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.696] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0223.697] GetProcessHeap () returned 0x800000
	[0223.697] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0223.698] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.698] GetProcessHeap () returned 0x800000
	[0223.698] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.698] GetProcessHeap () returned 0x800000
	[0223.698] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.700] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.701] GetProcessHeap () returned 0x800000
	[0223.701] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.701] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0223.701] GetProcessHeap () returned 0x800000
	[0223.701] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0223.701] GetProcessHeap () returned 0x800000
	[0223.701] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0223.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0223.701] GetProcessHeap () returned 0x800000
	[0223.702] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.702] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.702] GetProcessHeap () returned 0x800000
	[0223.702] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.702] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0223.703] GetProcessHeap () returned 0x800000
	[0223.703] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0223.703] GetProcessHeap () returned 0x800000
	[0223.703] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0223.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0223.703] GetProcessHeap () returned 0x800000
	[0223.703] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.703] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0223.704] GetProcessHeap () returned 0x800000
	[0223.704] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0223.704] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0223.704] GetProcessHeap () returned 0x800000
	[0223.704] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0223.704] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0223.705] GetProcessHeap () returned 0x800000
	[0223.705] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0223.706] GetProcessHeap () returned 0x800000
	[0223.706] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0223.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0223.707] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0223.707] GetProcessHeap () returned 0x800000
	[0223.707] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0223.708] GetProcessHeap () returned 0x800000
	[0223.708] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ed00b0
	[0223.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0223.708] GetProcessHeap () returned 0x800000
	[0223.708] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0223.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0223.711] GetProcessHeap () returned 0x800000
	[0223.711] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3556d30
	[0223.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0223.712] GetProcessHeap () returned 0x800000
	[0223.712] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0223.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0223.715] GetProcessHeap () returned 0x800000
	[0223.715] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.717] GetProcessHeap () returned 0x800000
	[0223.717] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.719] GetProcessHeap () returned 0x800000
	[0223.719] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0223.719] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0223.720] GetProcessHeap () returned 0x800000
	[0223.720] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.720] GetProcessHeap () returned 0x800000
	[0223.720] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0223.756] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0223.757] GetProcessHeap () returned 0x800000
	[0223.757] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.757] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.758] GetProcessHeap () returned 0x800000
	[0223.758] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.758] GetProcessHeap () returned 0x800000
	[0223.758] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.758] GetProcessHeap () returned 0x800000
	[0223.758] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0223.759] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0223.759] GetProcessHeap () returned 0x800000
	[0223.759] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.759] GetProcessHeap () returned 0x800000
	[0223.759] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0223.799] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0223.800] GetProcessHeap () returned 0x800000
	[0223.800] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.800] GetProcessHeap () returned 0x800000
	[0223.800] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0223.803] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0223.804] GetProcessHeap () returned 0x800000
	[0223.804] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.804] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.804] GetProcessHeap () returned 0x800000
	[0223.804] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.804] GetProcessHeap () returned 0x800000
	[0223.810] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.872] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.873] GetProcessHeap () returned 0x800000
	[0223.873] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.873] GetProcessHeap () returned 0x800000
	[0223.873] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.896] GetProcessHeap () returned 0x800000
	[0223.896] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0223.898] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.898] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 1
	[0223.898] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 0
	[0223.898] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0223.899] GetProcessHeap () returned 0x800000
	[0223.899] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.899] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 0
	[0223.899] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.900] GetProcessHeap () returned 0x800000
	[0223.900] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.900] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1
	[0223.900] GetProcessHeap () returned 0x800000
	[0223.900] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.900] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.900] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.900] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.900] GetProcessHeap () returned 0x800000
	[0223.900] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.900] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1
	[0223.901] GetProcessHeap () returned 0x800000
	[0223.901] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.903] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.903] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.903] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.904] GetProcessHeap () returned 0x800000
	[0223.904] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.904] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1
	[0223.904] GetProcessHeap () returned 0x800000
	[0223.904] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.904] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.904] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.904] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.905] GetProcessHeap () returned 0x800000
	[0223.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.905] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1
	[0223.905] GetProcessHeap () returned 0x800000
	[0223.905] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.914] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.914] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.914] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.914] GetProcessHeap () returned 0x800000
	[0223.914] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.914] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1
	[0223.914] GetProcessHeap () returned 0x800000
	[0223.914] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.915] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.915] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.915] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.915] GetProcessHeap () returned 0x800000
	[0223.915] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.915] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1
	[0223.915] GetProcessHeap () returned 0x800000
	[0223.915] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.917] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.917] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1
	[0223.917] GetProcessHeap () returned 0x800000
	[0223.917] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0223.917] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.917] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 1
	[0223.917] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 0
	[0223.917] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0223.918] GetProcessHeap () returned 0x800000
	[0223.918] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.918] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C", cAlternateFileName="")) returned 1
	[0223.918] GetProcessHeap () returned 0x800000
	[0223.918] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0223.931] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.931] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 1
	[0223.931] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 0
	[0223.932] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0223.932] GetProcessHeap () returned 0x800000
	[0223.932] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.932] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1
	[0223.932] GetProcessHeap () returned 0x800000
	[0223.932] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0223.932] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.932] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 1
	[0223.932] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 0
	[0223.932] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0223.933] GetProcessHeap () returned 0x800000
	[0223.933] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.933] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 1
	[0223.933] GetProcessHeap () returned 0x800000
	[0223.933] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0223.940] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.940] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 1
	[0223.940] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 0
	[0223.941] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0223.941] GetProcessHeap () returned 0x800000
	[0223.941] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.941] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 0
	[0223.941] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.941] GetProcessHeap () returned 0x800000
	[0223.941] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.941] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A", cAlternateFileName="")) returned 1
	[0223.942] GetProcessHeap () returned 0x800000
	[0223.942] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.942] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.942] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.942] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.942] GetProcessHeap () returned 0x800000
	[0223.942] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.942] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B", cAlternateFileName="")) returned 1
	[0223.942] GetProcessHeap () returned 0x800000
	[0223.942] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.947] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.947] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0223.947] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.947] GetProcessHeap () returned 0x800000
	[0223.947] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.947] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1
	[0223.947] GetProcessHeap () returned 0x800000
	[0223.947] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.948] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.948] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 1
	[0223.948] GetProcessHeap () returned 0x800000
	[0223.948] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0223.950] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.950] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f21b70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x21839, dwReserved0=0x0, dwReserved1=0x0, cFileName="9DCB7d01", cAlternateFileName="")) returned 1
	[0223.950] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f21b70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x21839, dwReserved0=0x0, dwReserved1=0x0, cFileName="9DCB7d01", cAlternateFileName="")) returned 0
	[0223.950] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0223.950] GetProcessHeap () returned 0x800000
	[0223.950] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.950] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 0
	[0223.951] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.951] GetProcessHeap () returned 0x800000
	[0223.951] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.951] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D", cAlternateFileName="")) returned 1
	[0223.951] GetProcessHeap () returned 0x800000
	[0223.951] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.960] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.960] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="08", cAlternateFileName="")) returned 1
	[0223.960] GetProcessHeap () returned 0x800000
	[0223.960] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0223.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.972] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.972] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8266, dwReserved0=0x0, dwReserved1=0x0, cFileName="71469d01", cAlternateFileName="")) returned 1
	[0223.972] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8266, dwReserved0=0x0, dwReserved1=0x0, cFileName="71469d01", cAlternateFileName="")) returned 0
	[0223.972] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.973] GetProcessHeap () returned 0x800000
	[0223.973] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0223.973] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="08", cAlternateFileName="")) returned 0
	[0223.973] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.973] GetProcessHeap () returned 0x800000
	[0223.973] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.973] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E", cAlternateFileName="")) returned 1
	[0223.973] GetProcessHeap () returned 0x800000
	[0223.973] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.973] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.974] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="69", cAlternateFileName="")) returned 1
	[0223.974] GetProcessHeap () returned 0x800000
	[0223.974] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.974] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.974] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb80063b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="885EEd01", cAlternateFileName="")) returned 1
	[0223.974] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb80063b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="885EEd01", cAlternateFileName="")) returned 0
	[0223.974] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.974] GetProcessHeap () returned 0x800000
	[0223.974] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.974] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="69", cAlternateFileName="")) returned 0
	[0223.974] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.975] GetProcessHeap () returned 0x800000
	[0223.975] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.975] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F", cAlternateFileName="")) returned 1
	[0223.975] GetProcessHeap () returned 0x800000
	[0223.975] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0223.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0223.980] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.980] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="23", cAlternateFileName="")) returned 1
	[0223.980] GetProcessHeap () returned 0x800000
	[0223.980] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.980] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.980] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fe0250, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf888, dwReserved0=0x0, dwReserved1=0x0, cFileName="7E0FEd01", cAlternateFileName="")) returned 1
	[0223.980] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fe0250, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf888, dwReserved0=0x0, dwReserved1=0x0, cFileName="7E0FEd01", cAlternateFileName="")) returned 0
	[0223.980] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.981] GetProcessHeap () returned 0x800000
	[0223.981] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.981] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F0", cAlternateFileName="")) returned 1
	[0223.981] GetProcessHeap () returned 0x800000
	[0223.981] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0223.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0223.982] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.982] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x823c2350, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa80f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECB2Dd01", cAlternateFileName="")) returned 1
	[0223.982] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x823c2350, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa80f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECB2Dd01", cAlternateFileName="")) returned 0
	[0223.982] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0223.982] GetProcessHeap () returned 0x800000
	[0223.983] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0223.983] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F0", cAlternateFileName="")) returned 0
	[0223.983] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0223.983] GetProcessHeap () returned 0x800000
	[0223.983] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0223.983] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1
	[0223.983] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1
	[0223.983] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_003_", cAlternateFileName="_CACHE~4")) returned 1
	[0223.983] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 1
	[0223.983] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 0
	[0223.983] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.984] GetProcessHeap () returned 0x800000
	[0223.984] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.984] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1
	[0223.984] GetProcessHeap () returned 0x800000
	[0223.984] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0223.985] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0223.985] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc399b820, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.sqlite", cAlternateFileName="INDEX~1.SQL")) returned 1
	[0223.986] SetEvent (hEvent=0x110) returned 1
	[0223.986] ResetEvent (hEvent=0x114) returned 1
	[0223.989] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc399b820, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.sqlite", cAlternateFileName="INDEX~1.SQL")) returned 0
	[0223.989] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0223.989] GetProcessHeap () returned 0x800000
	[0223.989] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0223.989] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1
	[0223.989] GetProcessHeap () returned 0x800000
	[0223.989] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0223.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0224.017] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.017] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x825fd7f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x825fd7f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x825fd7f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.cache", cAlternateFileName="TEST-M~1.CAC")) returned 1
	[0224.017] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8234ff30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.pset", cAlternateFileName="TEST-M~1.PSE")) returned 1
	[0224.018] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82376090, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.sbstore", cAlternateFileName="TEST-M~1.SBS")) returned 1
	[0224.018] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82695d70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82695d70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82695d70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.cache", cAlternateFileName="TEST-P~1.CAC")) returned 1
	[0224.018] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.pset", cAlternateFileName="TEST-P~1.PSE")) returned 1
	[0224.018] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82649ab0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82649ab0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.sbstore", cAlternateFileName="TEST-P~1.SBS")) returned 1
	[0224.018] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82649ab0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82649ab0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.sbstore", cAlternateFileName="TEST-P~1.SBS")) returned 0
	[0224.018] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0224.019] GetProcessHeap () returned 0x800000
	[0224.019] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0224.019] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1
	[0224.019] GetProcessHeap () returned 0x800000
	[0224.019] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0224.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0224.023] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.023] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x854b47b0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache.4.little", cAlternateFileName="STARTU~1.LIT")) returned 1
	[0224.023] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x854b47b0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache.4.little", cAlternateFileName="STARTU~1.LIT")) returned 0
	[0224.023] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0224.023] GetProcessHeap () returned 0x800000
	[0224.023] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0224.023] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1
	[0224.024] GetProcessHeap () returned 0x800000
	[0224.024] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8cb830
	[0224.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0224.034] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.034] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4cc87c1409819bf06f42b782d4902b2f.png", cAlternateFileName="4CC87C~1.PNG")) returned 1
	[0224.034] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ba182bcd131f1f3c6b6fbbb1ba078341.png", cAlternateFileName="BA182B~1.PNG")) returned 1
	[0224.034] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb97ade50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1c362, dwReserved0=0x0, dwReserved1=0x0, cFileName="ce8c0453589216a67cddb50284fbfe8d.png", cAlternateFileName="CE8C04~1.PNG")) returned 1
	[0224.034] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb97ade50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1c362, dwReserved0=0x0, dwReserved1=0x0, cFileName="ce8c0453589216a67cddb50284fbfe8d.png", cAlternateFileName="CE8C04~1.PNG")) returned 0
	[0224.034] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0224.035] GetProcessHeap () returned 0x800000
	[0224.035] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8cb830 | out: hHeap=0x800000) returned 1
	[0224.035] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1
	[0224.035] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 0
	[0224.035] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0224.036] GetProcessHeap () returned 0x800000
	[0224.036] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.036] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0
	[0224.036] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0224.036] GetProcessHeap () returned 0x800000
	[0224.036] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3556d30 | out: hHeap=0x800000) returned 1
	[0224.038] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0
	[0224.038] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0224.038] GetProcessHeap () returned 0x800000
	[0224.038] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0224.038] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1
	[0224.038] GetProcessHeap () returned 0x800000
	[0224.038] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0224.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0224.039] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.039] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E7CF176E110C211B", cAlternateFileName="E7CF17~1")) returned 1
	[0224.039] GetProcessHeap () returned 0x800000
	[0224.039] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0224.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0224.089] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.089] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-update.xml", cAlternateFileName="ACTIVE~1.XML")) returned 1
	[0224.089] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1
	[0224.089] GetProcessHeap () returned 0x800000
	[0224.089] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0224.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0224.111] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.111] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1
	[0224.111] GetProcessHeap () returned 0x800000
	[0224.111] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0224.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0224.114] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.114] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.mar", cAlternateFileName="")) returned 1
	[0224.114] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 1
	[0224.114] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 0
	[0224.114] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0224.115] GetProcessHeap () returned 0x800000
	[0224.115] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0224.115] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 0
	[0224.115] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0224.115] GetProcessHeap () returned 0x800000
	[0224.115] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0224.115] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 1
	[0224.115] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 0
	[0224.115] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0224.116] GetProcessHeap () returned 0x800000
	[0224.116] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0224.116] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E7CF176E110C211B", cAlternateFileName="E7CF17~1")) returned 0
	[0224.116] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0224.116] GetProcessHeap () returned 0x800000
	[0224.116] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0224.116] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 0
	[0224.116] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0224.117] GetProcessHeap () returned 0x800000
	[0224.117] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ed00b0 | out: hHeap=0x800000) returned 1
	[0224.117] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfae767b0, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xfae767b0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xdfee6800, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x49c53, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rsfd234df.exe", cAlternateFileName="RSFD23~1.EXE")) returned 1
	[0224.117] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d53d260, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x2d53d260, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0224.117] GetProcessHeap () returned 0x800000
	[0224.117] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0224.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d53d260, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x2d53d260, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0224.117] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d53d260, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x2d53d260, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.120] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98617bf0, ftCreationTime.dwHighDateTime=0x1d4d188, ftLastAccessTime.dwLowDateTime=0xa511fbc0, ftLastAccessTime.dwHighDateTime=0x1d4d531, ftLastWriteTime.dwLowDateTime=0xa511fbc0, ftLastWriteTime.dwHighDateTime=0x1d4d531, nFileSizeHigh=0x0, nFileSizeLow=0x2c8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0CyEX1bdaUTstsgk.bmp", cAlternateFileName="0CYEX1~1.BMP")) returned 1
	[0224.131] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62e347b0, ftCreationTime.dwHighDateTime=0x1d4c76a, ftLastAccessTime.dwLowDateTime=0x91607160, ftLastAccessTime.dwHighDateTime=0x1d4d54a, ftLastWriteTime.dwLowDateTime=0x91607160, ftLastWriteTime.dwHighDateTime=0x1d4d54a, nFileSizeHigh=0x0, nFileSizeLow=0xcf2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0xCgXbTFGg8.bmp", cAlternateFileName="0XCGXB~1.BMP")) returned 1
	[0224.133] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d53d260, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x2d53d260, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x32f653a0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x537, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C354B42", cAlternateFileName="")) returned 1
	[0224.143] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8426eba0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x8426eba0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0x20fcd340, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.log", cAlternateFileName="")) returned 1
	[0224.143] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa16ae620, ftCreationTime.dwHighDateTime=0x1d4c722, ftLastAccessTime.dwLowDateTime=0x3ee99260, ftLastAccessTime.dwHighDateTime=0x1d4d0c0, ftLastWriteTime.dwLowDateTime=0x3ee99260, ftLastWriteTime.dwHighDateTime=0x1d4d0c0, nFileSizeHigh=0x0, nFileSizeLow=0xca1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cf86wM.bmp", cAlternateFileName="")) returned 1
	[0224.144] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0224.144] GetProcessHeap () returned 0x800000
	[0224.144] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0224.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0224.156] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.156] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0224.156] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
	[0224.156] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0224.157] GetProcessHeap () returned 0x800000
	[0224.157] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0224.157] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd585fbf0, ftCreationTime.dwHighDateTime=0x1d4cf53, ftLastAccessTime.dwLowDateTime=0x2ce9e2b0, ftLastAccessTime.dwHighDateTime=0x1d4c691, ftLastWriteTime.dwLowDateTime=0x2ce9e2b0, ftLastWriteTime.dwHighDateTime=0x1d4c691, nFileSizeHigh=0x0, nFileSizeLow=0x17ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="fJEj 5HP.bmp", cAlternateFileName="FJEJ5H~1.BMP")) returned 1
	[0224.157] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1
	[0224.157] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20bce5f0, ftCreationTime.dwHighDateTime=0x1d4cd08, ftLastAccessTime.dwLowDateTime=0xbd5b16a0, ftLastAccessTime.dwHighDateTime=0x1d4cd78, ftLastWriteTime.dwLowDateTime=0xbd5b16a0, ftLastWriteTime.dwHighDateTime=0x1d4cd78, nFileSizeHigh=0x0, nFileSizeLow=0x14f9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gfgz4rWfp7oT.mp3", cAlternateFileName="GFGZ4R~1.MP3")) returned 1
	[0224.157] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4967f730, ftCreationTime.dwHighDateTime=0x1d4c748, ftLastAccessTime.dwLowDateTime=0x86512a40, ftLastAccessTime.dwHighDateTime=0x1d4d0f8, ftLastWriteTime.dwLowDateTime=0x86512a40, ftLastWriteTime.dwHighDateTime=0x1d4d0f8, nFileSizeHigh=0x0, nFileSizeLow=0x1187a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gg4xk1N.flv", cAlternateFileName="")) returned 1
	[0224.157] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa72a4f90, ftCreationTime.dwHighDateTime=0x1d4ca1c, ftLastAccessTime.dwLowDateTime=0x30fc05c0, ftLastAccessTime.dwHighDateTime=0x1d4c724, ftLastWriteTime.dwLowDateTime=0x30fc05c0, ftLastWriteTime.dwHighDateTime=0x1d4c724, nFileSizeHigh=0x0, nFileSizeLow=0x5dbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="gVnNwVh4Hp2qq-cKD.swf", cAlternateFileName="GVNNWV~1.SWF")) returned 1
	[0224.157] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87c55940, ftCreationTime.dwHighDateTime=0x1d4cc4e, ftLastAccessTime.dwLowDateTime=0xd92825b0, ftLastAccessTime.dwHighDateTime=0x1d4cda2, ftLastWriteTime.dwLowDateTime=0xd92825b0, ftLastWriteTime.dwHighDateTime=0x1d4cda2, nFileSizeHigh=0x0, nFileSizeLow=0xa47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="H6EkUkPNBU5LkRGeQ.png", cAlternateFileName="H6EKUK~1.PNG")) returned 1
	[0224.157] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0224.157] GetProcessHeap () returned 0x800000
	[0224.157] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0224.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0224.256] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.256] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1
	[0224.256] GetProcessHeap () returned 0x800000
	[0224.256] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0224.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0224.257] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.257] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9824200, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0224.257] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0224.257] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
	[0224.257] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0224.257] GetProcessHeap () returned 0x800000
	[0224.257] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0224.257] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 0
	[0224.257] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0224.258] GetProcessHeap () returned 0x800000
	[0224.258] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0224.258] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde18bdc0, ftCreationTime.dwHighDateTime=0x1d4c896, ftLastAccessTime.dwLowDateTime=0x142d920, ftLastAccessTime.dwHighDateTime=0x1d4d2ec, ftLastWriteTime.dwLowDateTime=0x142d920, ftLastWriteTime.dwHighDateTime=0x1d4d2ec, nFileSizeHigh=0x0, nFileSizeLow=0x4fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="jAxYfa-8PuC01ur.wav", cAlternateFileName="JAXYFA~1.WAV")) returned 1
	[0224.258] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x73f6faa0, ftCreationTime.dwHighDateTime=0x1d4d413, ftLastAccessTime.dwLowDateTime=0x37717710, ftLastAccessTime.dwHighDateTime=0x1d4d295, ftLastWriteTime.dwLowDateTime=0x37717710, ftLastWriteTime.dwHighDateTime=0x1d4d295, nFileSizeHigh=0x0, nFileSizeLow=0x62c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jn_32c-RrWu.wav", cAlternateFileName="JN_32C~1.WAV")) returned 1
	[0224.258] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc4b6e760, ftCreationTime.dwHighDateTime=0x1d4d3a6, ftLastAccessTime.dwLowDateTime=0x2df3fbf0, ftLastAccessTime.dwHighDateTime=0x1d4cfe2, ftLastWriteTime.dwLowDateTime=0x2df3fbf0, ftLastWriteTime.dwHighDateTime=0x1d4cfe2, nFileSizeHigh=0x0, nFileSizeLow=0x14ff7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jw3joWweu.jpg", cAlternateFileName="JW3JOW~1.JPG")) returned 1
	[0224.258] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x809811a0, ftCreationTime.dwHighDateTime=0x1d4d19c, ftLastAccessTime.dwLowDateTime=0x1c9c4550, ftLastAccessTime.dwHighDateTime=0x1d4c7d2, ftLastWriteTime.dwLowDateTime=0x1c9c4550, ftLastWriteTime.dwHighDateTime=0x1d4c7d2, nFileSizeHigh=0x0, nFileSizeLow=0xb704, dwReserved0=0x0, dwReserved1=0x0, cFileName="jZQWJ.gif", cAlternateFileName="")) returned 1
	[0224.258] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96948e40, ftCreationTime.dwHighDateTime=0x1d4cd21, ftLastAccessTime.dwLowDateTime=0xd627d440, ftLastAccessTime.dwHighDateTime=0x1d4d253, ftLastWriteTime.dwLowDateTime=0xd627d440, ftLastWriteTime.dwHighDateTime=0x1d4d253, nFileSizeHigh=0x0, nFileSizeLow=0x10fcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka0fUIDQ.mp4", cAlternateFileName="")) returned 1
	[0224.258] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7f8b3f0, ftCreationTime.dwHighDateTime=0x1d4c62f, ftLastAccessTime.dwLowDateTime=0x3067ff10, ftLastAccessTime.dwHighDateTime=0x1d4ca85, ftLastWriteTime.dwLowDateTime=0x3067ff10, ftLastWriteTime.dwHighDateTime=0x1d4ca85, nFileSizeHigh=0x0, nFileSizeLow=0x444a, dwReserved0=0x0, dwReserved1=0x0, cFileName="KilKwkIKEnU.png", cAlternateFileName="KILKWK~1.PNG")) returned 1
	[0224.258] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe44d7b0, ftCreationTime.dwHighDateTime=0x1d4c57f, ftLastAccessTime.dwLowDateTime=0x713614a0, ftLastAccessTime.dwHighDateTime=0x1d4c567, ftLastWriteTime.dwLowDateTime=0x713614a0, ftLastWriteTime.dwHighDateTime=0x1d4c567, nFileSizeHigh=0x0, nFileSizeLow=0x428e, dwReserved0=0x0, dwReserved1=0x0, cFileName="kKl5pOD1DYy3po.bmp", cAlternateFileName="KKL5PO~1.BMP")) returned 1
	[0224.258] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa05109b0, ftCreationTime.dwHighDateTime=0x1d4d3af, ftLastAccessTime.dwLowDateTime=0x52a40530, ftLastAccessTime.dwHighDateTime=0x1d4d24e, ftLastWriteTime.dwLowDateTime=0x52a40530, ftLastWriteTime.dwHighDateTime=0x1d4d24e, nFileSizeHigh=0x0, nFileSizeLow=0x109b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="KsTqCAR.wav", cAlternateFileName="")) returned 1
	[0224.258] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1cdd2370, ftCreationTime.dwHighDateTime=0x1d4d1d9, ftLastAccessTime.dwLowDateTime=0xa782aa80, ftLastAccessTime.dwHighDateTime=0x1d4d1f8, ftLastWriteTime.dwLowDateTime=0xa782aa80, ftLastWriteTime.dwHighDateTime=0x1d4d1f8, nFileSizeHigh=0x0, nFileSizeLow=0x17925, dwReserved0=0x0, dwReserved1=0x0, cFileName="LIXc9zepSV8sXh.gif", cAlternateFileName="LIXC9Z~1.GIF")) returned 1
	[0224.258] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c7c15a0, ftCreationTime.dwHighDateTime=0x1d4d328, ftLastAccessTime.dwLowDateTime=0xd325aff0, ftLastAccessTime.dwHighDateTime=0x1d4cc41, ftLastWriteTime.dwLowDateTime=0xd325aff0, ftLastWriteTime.dwHighDateTime=0x1d4cc41, nFileSizeHigh=0x0, nFileSizeLow=0x127d, dwReserved0=0x0, dwReserved1=0x0, cFileName="lRUR1FB.png", cAlternateFileName="")) returned 1
	[0224.258] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b422110, ftCreationTime.dwHighDateTime=0x1d4d40f, ftLastAccessTime.dwLowDateTime=0x3f2e3710, ftLastAccessTime.dwHighDateTime=0x1d4ca1e, ftLastWriteTime.dwLowDateTime=0x3f2e3710, ftLastWriteTime.dwHighDateTime=0x1d4ca1e, nFileSizeHigh=0x0, nFileSizeLow=0x9b11, dwReserved0=0x0, dwReserved1=0x0, cFileName="LSvRKzh.avi", cAlternateFileName="")) returned 1
	[0224.259] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d396f0, ftCreationTime.dwHighDateTime=0x1d4ce5b, ftLastAccessTime.dwLowDateTime=0x7979c240, ftLastAccessTime.dwHighDateTime=0x1d4cde3, ftLastWriteTime.dwLowDateTime=0x7979c240, ftLastWriteTime.dwHighDateTime=0x1d4cde3, nFileSizeHigh=0x0, nFileSizeLow=0x149c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LziKnoR2UQ91ZAXB.jpg", cAlternateFileName="LZIKNO~1.JPG")) returned 1
	[0224.259] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a25c890, ftCreationTime.dwHighDateTime=0x1d4c550, ftLastAccessTime.dwLowDateTime=0x6c0464f0, ftLastAccessTime.dwHighDateTime=0x1d4c68e, ftLastWriteTime.dwLowDateTime=0x6c0464f0, ftLastWriteTime.dwHighDateTime=0x1d4c68e, nFileSizeHigh=0x0, nFileSizeLow=0xf651, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mae5WPDu0BBoIWoHS6o.ots", cAlternateFileName="MAE5WP~1.OTS")) returned 1
	[0224.259] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d60bfd0, ftCreationTime.dwHighDateTime=0x1d4d0a9, ftLastAccessTime.dwLowDateTime=0xb7bd7200, ftLastAccessTime.dwHighDateTime=0x1d4cc6b, ftLastWriteTime.dwLowDateTime=0xb7bd7200, ftLastWriteTime.dwHighDateTime=0x1d4cc6b, nFileSizeHigh=0x0, nFileSizeLow=0x1525a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxFz.mkv", cAlternateFileName="")) returned 1
	[0224.259] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ce43650, ftCreationTime.dwHighDateTime=0x1d4d4e8, ftLastAccessTime.dwLowDateTime=0x406a0b00, ftLastAccessTime.dwHighDateTime=0x1d4d4a9, ftLastWriteTime.dwLowDateTime=0x406a0b00, ftLastWriteTime.dwHighDateTime=0x1d4d4a9, nFileSizeHigh=0x0, nFileSizeLow=0xabab, dwReserved0=0x0, dwReserved1=0x0, cFileName="qjfCEYsLZ6d.mp3", cAlternateFileName="QJFCEY~1.MP3")) returned 1
	[0224.259] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30dd3e90, ftCreationTime.dwHighDateTime=0x1d4cd84, ftLastAccessTime.dwLowDateTime=0xb42fa950, ftLastAccessTime.dwHighDateTime=0x1d4cdc9, ftLastWriteTime.dwLowDateTime=0xb42fa950, ftLastWriteTime.dwHighDateTime=0x1d4cdc9, nFileSizeHigh=0x0, nFileSizeLow=0x7640, dwReserved0=0x0, dwReserved1=0x0, cFileName="sOIfBHl.swf", cAlternateFileName="")) returned 1
	[0224.259] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0224.259] GetProcessHeap () returned 0x800000
	[0224.259] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0224.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0224.259] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.259] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 1
	[0224.259] GetProcessHeap () returned 0x800000
	[0224.259] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0224.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0224.259] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.260] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="03J4UQW0", cAlternateFileName="")) returned 1
	[0224.260] GetProcessHeap () returned 0x800000
	[0224.260] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0224.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0224.306] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.306] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0224.306] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0224.306] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0224.307] GetProcessHeap () returned 0x800000
	[0224.307] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0224.307] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0224.307] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0224.307] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KETAJP6D", cAlternateFileName="")) returned 1
	[0224.307] GetProcessHeap () returned 0x800000
	[0224.307] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0224.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0224.307] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.308] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0224.308] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0224.308] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0224.308] GetProcessHeap () returned 0x800000
	[0224.308] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0224.308] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VB18B0KB", cAlternateFileName="")) returned 1
	[0224.308] GetProcessHeap () returned 0x800000
	[0224.308] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0224.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0224.308] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.309] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0224.309] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0224.309] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0224.309] GetProcessHeap () returned 0x800000
	[0224.309] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0224.309] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XT1RPYG9", cAlternateFileName="")) returned 1
	[0224.309] GetProcessHeap () returned 0x800000
	[0224.309] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0224.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0224.346] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.346] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0224.346] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0224.346] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0224.347] GetProcessHeap () returned 0x800000
	[0224.347] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0224.347] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XT1RPYG9", cAlternateFileName="")) returned 0
	[0224.347] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0224.347] GetProcessHeap () returned 0x800000
	[0224.347] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0224.347] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 0
	[0224.348] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0224.348] GetProcessHeap () returned 0x800000
	[0224.348] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0224.348] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x873bb0e0, ftCreationTime.dwHighDateTime=0x1d4d172, ftLastAccessTime.dwLowDateTime=0xd35dac30, ftLastAccessTime.dwHighDateTime=0x1d4c628, ftLastWriteTime.dwLowDateTime=0xd35dac30, ftLastWriteTime.dwHighDateTime=0x1d4c628, nFileSizeHigh=0x0, nFileSizeLow=0xa1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="TuOvlM4Kcs4ITjKO.mp3", cAlternateFileName="TUOVLM~1.MP3")) returned 1
	[0224.348] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x685ca920, ftCreationTime.dwHighDateTime=0x1d4ce22, ftLastAccessTime.dwLowDateTime=0xfeae1ef0, ftLastAccessTime.dwHighDateTime=0x1d4c8ef, ftLastWriteTime.dwLowDateTime=0xfeae1ef0, ftLastWriteTime.dwHighDateTime=0x1d4c8ef, nFileSizeHigh=0x0, nFileSizeLow=0x161be, dwReserved0=0x0, dwReserved1=0x0, cFileName="U80XxO8Y__4OvDRQKwTk.swf", cAlternateFileName="U80XXO~1.SWF")) returned 1
	[0224.348] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5375b00, ftCreationTime.dwHighDateTime=0x1d4ccc7, ftLastAccessTime.dwLowDateTime=0xa4af2530, ftLastAccessTime.dwHighDateTime=0x1d4ce34, ftLastWriteTime.dwLowDateTime=0xa4af2530, ftLastWriteTime.dwHighDateTime=0x1d4ce34, nFileSizeHigh=0x0, nFileSizeLow=0x13657, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMGdr1Rbcy9oUdNJMV.mkv", cAlternateFileName="UMGDR1~1.MKV")) returned 1
	[0224.348] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x22873c00, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x22873c00, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x22873c00, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1
	[0224.348] GetProcessHeap () returned 0x800000
	[0224.348] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0224.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x22873c00, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x22873c00, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x22873c00, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0224.348] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x22873c00, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x22873c00, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x22873c00, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.349] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x22873c00, ftCreationTime.dwHighDateTime=0x1d57294, ftLastAccessTime.dwLowDateTime=0x22873c00, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x22873c00, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0224.349] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0224.349] GetProcessHeap () returned 0x800000
	[0224.349] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0224.349] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x963112e0, ftCreationTime.dwHighDateTime=0x1d4c87e, ftLastAccessTime.dwLowDateTime=0x3584ae20, ftLastAccessTime.dwHighDateTime=0x1d4cb35, ftLastWriteTime.dwLowDateTime=0x3584ae20, ftLastWriteTime.dwHighDateTime=0x1d4cb35, nFileSizeHigh=0x0, nFileSizeLow=0x4754, dwReserved0=0x0, dwReserved1=0x0, cFileName="zbWmBsw0RqRH4QqSw6.gif", cAlternateFileName="ZBWMBS~1.GIF")) returned 1
	[0224.349] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf89311a0, ftCreationTime.dwHighDateTime=0x1d4d061, ftLastAccessTime.dwLowDateTime=0x32c4f9e0, ftLastAccessTime.dwHighDateTime=0x1d4cfbf, ftLastWriteTime.dwLowDateTime=0x32c4f9e0, ftLastWriteTime.dwHighDateTime=0x1d4cfbf, nFileSizeHigh=0x0, nFileSizeLow=0x21c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zc0kBdG.odp", cAlternateFileName="")) returned 1
	[0224.349] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc16ad1d0, ftCreationTime.dwHighDateTime=0x1d4d102, ftLastAccessTime.dwLowDateTime=0xdda671d0, ftLastAccessTime.dwHighDateTime=0x1d4c7c3, ftLastWriteTime.dwLowDateTime=0xdda671d0, ftLastWriteTime.dwHighDateTime=0x1d4c7c3, nFileSizeHigh=0x0, nFileSizeLow=0x9cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Z8q5Y8k3Go_B3W.wav", cAlternateFileName="_Z8Q5Y~1.WAV")) returned 1
	[0224.349] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc16ad1d0, ftCreationTime.dwHighDateTime=0x1d4d102, ftLastAccessTime.dwLowDateTime=0xdda671d0, ftLastAccessTime.dwHighDateTime=0x1d4c7c3, ftLastWriteTime.dwLowDateTime=0xdda671d0, ftLastWriteTime.dwHighDateTime=0x1d4c7c3, nFileSizeHigh=0x0, nFileSizeLow=0x9cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Z8q5Y8k3Go_B3W.wav", cAlternateFileName="_Z8Q5Y~1.WAV")) returned 0
	[0224.349] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0224.349] GetProcessHeap () returned 0x800000
	[0224.349] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0224.351] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0224.351] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1
	[0224.351] GetProcessHeap () returned 0x800000
	[0224.351] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0224.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0224.352] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.352] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0224.352] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0224.352] GetProcessHeap () returned 0x800000
	[0224.352] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0224.352] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0
	[0224.352] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0224.353] GetProcessHeap () returned 0x800000
	[0224.353] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0224.353] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1
	[0224.353] GetProcessHeap () returned 0x800000
	[0224.353] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0224.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0224.353] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.353] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0224.353] GetProcessHeap () returned 0x800000
	[0224.353] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0224.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0224.956] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.956] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0224.956] GetProcessHeap () returned 0x800000
	[0224.956] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0224.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0224.957] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.957] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0224.957] GetProcessHeap () returned 0x800000
	[0224.957] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0224.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0225.028] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.028] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1
	[0225.028] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1
	[0225.028] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
	[0225.028] GetProcessHeap () returned 0x800000
	[0225.028] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0225.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0225.042] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.042] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.042] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0225.043] GetProcessHeap () returned 0x800000
	[0225.043] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0225.043] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0
	[0225.043] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0225.043] GetProcessHeap () returned 0x800000
	[0225.043] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0225.043] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0
	[0225.043] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0225.044] GetProcessHeap () returned 0x800000
	[0225.044] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0225.044] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
	[0225.044] GetProcessHeap () returned 0x800000
	[0225.044] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0225.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0225.044] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.044] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1
	[0225.044] GetProcessHeap () returned 0x800000
	[0225.044] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0225.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0225.044] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.045] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1
	[0225.045] GetProcessHeap () returned 0x800000
	[0225.045] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0225.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0225.072] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.072] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1
	[0225.072] GetProcessHeap () returned 0x800000
	[0225.072] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.072] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.072] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.072] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.073] GetProcessHeap () returned 0x800000
	[0225.073] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.073] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1
	[0225.073] GetProcessHeap () returned 0x800000
	[0225.073] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.119] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.119] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.119] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.120] GetProcessHeap () returned 0x800000
	[0225.120] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.120] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1
	[0225.120] GetProcessHeap () returned 0x800000
	[0225.120] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.874] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.874] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.874] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.875] GetProcessHeap () returned 0x800000
	[0225.875] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.875] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1
	[0225.875] GetProcessHeap () returned 0x800000
	[0225.875] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.876] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.876] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.876] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.876] GetProcessHeap () returned 0x800000
	[0225.876] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.876] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1
	[0225.876] GetProcessHeap () returned 0x800000
	[0225.877] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.877] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.877] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.877] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.877] GetProcessHeap () returned 0x800000
	[0225.877] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.877] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1
	[0225.877] GetProcessHeap () returned 0x800000
	[0225.877] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.878] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.878] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.878] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.878] GetProcessHeap () returned 0x800000
	[0225.878] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.878] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1
	[0225.878] GetProcessHeap () returned 0x800000
	[0225.878] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.879] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.879] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.879] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.880] GetProcessHeap () returned 0x800000
	[0225.880] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.881] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1
	[0225.881] GetProcessHeap () returned 0x800000
	[0225.881] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.881] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.881] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.881] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.881] GetProcessHeap () returned 0x800000
	[0225.881] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.881] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1
	[0225.881] GetProcessHeap () returned 0x800000
	[0225.881] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.882] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.882] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.882] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.882] GetProcessHeap () returned 0x800000
	[0225.882] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.882] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1
	[0225.882] GetProcessHeap () returned 0x800000
	[0225.882] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.882] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.882] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.883] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.883] GetProcessHeap () returned 0x800000
	[0225.883] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.883] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1
	[0225.883] GetProcessHeap () returned 0x800000
	[0225.883] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.883] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.883] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.883] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.884] GetProcessHeap () returned 0x800000
	[0225.884] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.885] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1
	[0225.885] GetProcessHeap () returned 0x800000
	[0225.885] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.886] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.886] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.886] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.886] GetProcessHeap () returned 0x800000
	[0225.886] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.886] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1
	[0225.886] GetProcessHeap () returned 0x800000
	[0225.886] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0225.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0225.886] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.886] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0225.886] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0225.887] GetProcessHeap () returned 0x800000
	[0225.887] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0225.887] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 0
	[0225.887] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0225.887] GetProcessHeap () returned 0x800000
	[0225.887] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0225.887] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0
	[0225.887] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0225.888] GetProcessHeap () returned 0x800000
	[0225.888] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0225.888] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0
	[0225.888] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0225.888] GetProcessHeap () returned 0x800000
	[0225.888] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0225.888] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0
	[0225.888] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0225.889] GetProcessHeap () returned 0x800000
	[0225.889] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0225.890] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0225.890] GetProcessHeap () returned 0x800000
	[0225.890] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0225.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0225.891] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.891] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1
	[0225.891] GetProcessHeap () returned 0x800000
	[0225.891] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0225.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0225.892] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.892] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1
	[0225.892] GetProcessHeap () returned 0x800000
	[0225.892] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0225.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0225.892] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.892] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1
	[0225.892] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1
	[0225.892] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1
	[0225.892] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1
	[0225.892] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1
	[0225.892] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1
	[0225.892] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1
	[0225.893] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1
	[0225.894] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1
	[0225.895] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
	[0225.895] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1
	[0225.997] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1
	[0225.998] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1
	[0225.998] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1
	[0225.998] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1
	[0225.998] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1
	[0225.998] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0
	[0225.998] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0225.998] GetProcessHeap () returned 0x800000
	[0225.998] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0225.998] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1
	[0225.998] GetProcessHeap () returned 0x800000
	[0225.998] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0225.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1
	[0225.999] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd48e2bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x611ea800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x611ea800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5836df00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5836df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1
	[0226.000] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbf0dd70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1
	[0226.001] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1
	[0226.002] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0
	[0226.002] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0226.003] GetProcessHeap () returned 0x800000
	[0226.003] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0226.003] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0
	[0226.003] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0226.003] GetProcessHeap () returned 0x800000
	[0226.003] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0226.003] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
	[0226.003] GetProcessHeap () returned 0x800000
	[0226.004] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0226.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0226.055] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.055] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0226.055] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0226.056] GetProcessHeap () returned 0x800000
	[0226.056] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0226.056] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
	[0226.056] GetProcessHeap () returned 0x800000
	[0226.056] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0226.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0226.056] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.056] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0226.056] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0226.056] GetProcessHeap () returned 0x800000
	[0226.056] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0226.056] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
	[0226.057] GetProcessHeap () returned 0x800000
	[0226.057] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0226.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0226.059] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.060] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0226.060] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0226.060] GetProcessHeap () returned 0x800000
	[0226.060] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0226.060] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
	[0226.060] GetProcessHeap () returned 0x800000
	[0226.060] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0226.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0226.060] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.060] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0226.060] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0226.061] GetProcessHeap () returned 0x800000
	[0226.061] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0226.061] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0226.061] GetProcessHeap () returned 0x800000
	[0226.061] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0226.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0226.074] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.074] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1
	[0226.074] GetProcessHeap () returned 0x800000
	[0226.074] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0226.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0226.109] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.110] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="36USA68T", cAlternateFileName="")) returned 1
	[0226.110] GetProcessHeap () returned 0x800000
	[0226.110] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0226.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0226.111] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.111] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 1
	[0226.111] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 0
	[0226.111] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0226.112] GetProcessHeap () returned 0x800000
	[0226.112] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0226.112] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3O75JDME", cAlternateFileName="")) returned 1
	[0226.112] GetProcessHeap () returned 0x800000
	[0226.112] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0226.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0226.123] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.123] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1
	[0226.123] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 0
	[0226.123] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0226.123] GetProcessHeap () returned 0x800000
	[0226.123] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0226.123] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0226.123] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UV0DUWVB", cAlternateFileName="")) returned 1
	[0226.124] GetProcessHeap () returned 0x800000
	[0226.124] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0226.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0226.124] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.124] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0226.124] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0226.124] GetProcessHeap () returned 0x800000
	[0226.124] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0226.124] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 1
	[0226.124] GetProcessHeap () returned 0x800000
	[0226.124] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0226.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0226.125] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.125] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 1
	[0226.125] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 0
	[0226.125] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0226.125] GetProcessHeap () returned 0x800000
	[0226.125] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0226.125] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 0
	[0226.125] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0226.126] GetProcessHeap () returned 0x800000
	[0226.126] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0226.126] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0226.126] GetProcessHeap () returned 0x800000
	[0226.126] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0226.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0226.153] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.153] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0226.153] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0226.153] GetProcessHeap () returned 0x800000
	[0226.154] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0226.154] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0
	[0226.154] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0226.154] GetProcessHeap () returned 0x800000
	[0226.154] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0226.154] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0
	[0226.154] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0226.155] GetProcessHeap () returned 0x800000
	[0226.155] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0226.156] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1
	[0226.156] GetProcessHeap () returned 0x800000
	[0226.156] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0226.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0226.175] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.175] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0226.175] GetProcessHeap () returned 0x800000
	[0226.175] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0226.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0226.184] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.184] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1
	[0226.184] GetProcessHeap () returned 0x800000
	[0226.184] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0226.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0226.184] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.184] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1
	[0226.184] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1
	[0226.185] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 0
	[0226.185] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0226.185] GetProcessHeap () returned 0x800000
	[0226.185] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0226.185] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1
	[0226.185] GetProcessHeap () returned 0x800000
	[0226.185] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0226.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0226.198] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.198] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1
	[0226.198] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1
	[0226.198] GetProcessHeap () returned 0x800000
	[0226.198] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0226.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0226.223] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.223] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0226.223] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0226.223] GetProcessHeap () returned 0x800000
	[0226.223] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0226.223] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1
	[0226.223] GetProcessHeap () returned 0x800000
	[0226.223] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f140d8
	[0226.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0226.224] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.224] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1
	[0226.224] GetProcessHeap () returned 0x800000
	[0226.224] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f240e0
	[0226.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0226.275] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.275] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0226.275] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0226.275] GetProcessHeap () returned 0x800000
	[0226.275] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f240e0 | out: hHeap=0x800000) returned 1
	[0226.275] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0
	[0226.275] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0226.276] GetProcessHeap () returned 0x800000
	[0226.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f140d8 | out: hHeap=0x800000) returned 1
	[0226.276] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0
	[0226.276] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0226.276] GetProcessHeap () returned 0x800000
	[0226.276] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0226.276] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1
	[0226.276] GetProcessHeap () returned 0x800000
	[0226.276] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0226.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0226.276] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.277] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1
	[0226.277] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1
	[0226.277] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 0
	[0226.277] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0226.277] GetProcessHeap () returned 0x800000
	[0226.277] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0226.277] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0
	[0226.277] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0226.278] GetProcessHeap () returned 0x800000
	[0226.278] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0226.278] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0
	[0226.278] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0226.278] GetProcessHeap () returned 0x800000
	[0226.278] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0226.279] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0
	[0226.280] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0226.280] GetProcessHeap () returned 0x800000
	[0226.280] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0226.280] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6026fc0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6026fc0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
	[0226.280] GetProcessHeap () returned 0x800000
	[0226.280] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3ef00c0
	[0226.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6026fc0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6026fc0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0226.419] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6026fc0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6026fc0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.419] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcda5d800, ftCreationTime.dwHighDateTime=0x1d4d5b2, ftLastAccessTime.dwLowDateTime=0xc0a6f750, ftLastAccessTime.dwHighDateTime=0x1d4d34c, ftLastWriteTime.dwLowDateTime=0xc0a6f750, ftLastWriteTime.dwHighDateTime=0x1d4d34c, nFileSizeHigh=0x0, nFileSizeLow=0x8378, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="12MDMvZwImnce_.pps", cAlternateFileName="12MDMV~1.PPS")) returned 1
	[0226.421] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5aa81f0, ftCreationTime.dwHighDateTime=0x1d4cbab, ftLastAccessTime.dwLowDateTime=0xbb68a3b0, ftLastAccessTime.dwHighDateTime=0x1d4d121, ftLastWriteTime.dwLowDateTime=0xbb68a3b0, ftLastWriteTime.dwHighDateTime=0x1d4d121, nFileSizeHigh=0x0, nFileSizeLow=0x11483, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2vmVAamal.odt", cAlternateFileName="2VMVAA~1.ODT")) returned 1
	[0226.422] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf884fe0, ftCreationTime.dwHighDateTime=0x1d4d0fa, ftLastAccessTime.dwLowDateTime=0x5c1d91d0, ftLastAccessTime.dwHighDateTime=0x1d4d0a5, ftLastWriteTime.dwLowDateTime=0x5c1d91d0, ftLastWriteTime.dwHighDateTime=0x1d4d0a5, nFileSizeHigh=0x0, nFileSizeLow=0xbfe8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4r_Q_.swf", cAlternateFileName="")) returned 1
	[0226.422] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x22461fb0, ftCreationTime.dwHighDateTime=0x1d4d0c6, ftLastAccessTime.dwLowDateTime=0x579c2b60, ftLastAccessTime.dwHighDateTime=0x1d4c6c0, ftLastWriteTime.dwLowDateTime=0x579c2b60, ftLastWriteTime.dwHighDateTime=0x1d4c6c0, nFileSizeHigh=0x0, nFileSizeLow=0x31cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4UcSkD.mkv", cAlternateFileName="")) returned 1
	[0226.424] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6800d640, ftCreationTime.dwHighDateTime=0x1d4d0cf, ftLastAccessTime.dwLowDateTime=0xd85dd010, ftLastAccessTime.dwHighDateTime=0x1d4d1f0, ftLastWriteTime.dwLowDateTime=0xd85dd010, ftLastWriteTime.dwHighDateTime=0x1d4d1f0, nFileSizeHigh=0x0, nFileSizeLow=0x14e18, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6DC3JhaxRwUoLzS2.swf", cAlternateFileName="6DC3JH~1.SWF")) returned 1
	[0226.424] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3db97dd0, ftCreationTime.dwHighDateTime=0x1d4ce02, ftLastAccessTime.dwLowDateTime=0xa6128e20, ftLastAccessTime.dwHighDateTime=0x1d4d579, ftLastWriteTime.dwLowDateTime=0xa6128e20, ftLastWriteTime.dwHighDateTime=0x1d4d579, nFileSizeHigh=0x0, nFileSizeLow=0xd25a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7f-gY324OMO2n6.docx", cAlternateFileName="7F-GY3~1.DOC")) returned 1
	[0226.424] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3bf355e0, ftCreationTime.dwHighDateTime=0x1d4cdd8, ftLastAccessTime.dwLowDateTime=0x330beae0, ftLastAccessTime.dwHighDateTime=0x1d4d315, ftLastWriteTime.dwLowDateTime=0x330beae0, ftLastWriteTime.dwHighDateTime=0x1d4d315, nFileSizeHigh=0x0, nFileSizeLow=0x1695d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8pAG6EhFz0PsyID.bmp", cAlternateFileName="8PAG6E~1.BMP")) returned 1
	[0226.426] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99c7e300, ftCreationTime.dwHighDateTime=0x1d4d3a7, ftLastAccessTime.dwLowDateTime=0x54e785c0, ftLastAccessTime.dwHighDateTime=0x1d4d2c0, ftLastWriteTime.dwLowDateTime=0x54e785c0, ftLastWriteTime.dwHighDateTime=0x1d4d2c0, nFileSizeHigh=0x0, nFileSizeLow=0x11d1a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9Au5_SUb7gu_f.png", cAlternateFileName="9AU5_S~1.PNG")) returned 1
	[0226.426] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x452624f0, ftCreationTime.dwHighDateTime=0x1d4c62e, ftLastAccessTime.dwLowDateTime=0x876d8a60, ftLastAccessTime.dwHighDateTime=0x1d4d132, ftLastWriteTime.dwLowDateTime=0x876d8a60, ftLastWriteTime.dwHighDateTime=0x1d4d132, nFileSizeHigh=0x0, nFileSizeLow=0x6231, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A4r6Du9NQyiq.pps", cAlternateFileName="A4R6DU~1.PPS")) returned 1
	[0226.426] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0226.427] GetProcessHeap () returned 0x800000
	[0226.427] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0226.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0226.598] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.598] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0226.598] GetProcessHeap () returned 0x800000
	[0226.598] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0226.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0226.599] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.599] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0226.599] GetProcessHeap () returned 0x800000
	[0226.599] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0226.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0226.720] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0226.720] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1
	[0226.721] GetProcessHeap () returned 0x800000
	[0226.721] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f100d0
	[0226.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0227.337] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.337] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0227.337] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0227.338] GetProcessHeap () returned 0x800000
	[0227.338] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f100d0 | out: hHeap=0x800000) returned 1
	[0227.339] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1
	[0227.339] GetProcessHeap () returned 0x800000
	[0227.339] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0227.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0227.340] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.340] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0227.340] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0227.340] GetProcessHeap () returned 0x800000
	[0227.340] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0227.340] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1
	[0227.340] GetProcessHeap () returned 0x800000
	[0227.341] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0227.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0227.341] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.341] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.js", cAlternateFileName="")) returned 1
	[0227.341] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1
	[0227.341] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 0
	[0227.341] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0227.341] GetProcessHeap () returned 0x800000
	[0227.341] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0227.341] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1
	[0227.341] GetProcessHeap () returned 0x800000
	[0227.341] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0227.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0227.342] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.342] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8f3d60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1
	[0227.342] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1
	[0227.342] GetProcessHeap () returned 0x800000
	[0227.342] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0227.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0227.440] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.440] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5adf20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefc97c0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1
	[0227.440] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1
	[0227.441] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 0
	[0227.441] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0227.442] GetProcessHeap () returned 0x800000
	[0227.442] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0227.442] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0
	[0227.442] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0227.442] GetProcessHeap () returned 0x800000
	[0227.442] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0227.443] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0
	[0227.443] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0227.445] GetProcessHeap () returned 0x800000
	[0227.445] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0227.445] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0
	[0227.445] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0227.445] GetProcessHeap () returned 0x800000
	[0227.445] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0227.445] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
	[0227.446] GetProcessHeap () returned 0x800000
	[0227.446] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0227.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0227.502] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.502] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1
	[0227.502] GetProcessHeap () returned 0x800000
	[0227.502] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0227.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0227.503] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.503] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 1
	[0227.503] GetProcessHeap () returned 0x800000
	[0227.503] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0227.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0227.503] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.503] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0227.503] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0227.504] GetProcessHeap () returned 0x800000
	[0227.504] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0227.504] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 0
	[0227.504] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0227.504] GetProcessHeap () returned 0x800000
	[0227.504] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0227.505] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 0
	[0227.505] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0227.505] GetProcessHeap () returned 0x800000
	[0227.505] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0227.505] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1
	[0227.505] GetProcessHeap () returned 0x800000
	[0227.505] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0227.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0227.505] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.505] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0227.505] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0227.506] GetProcessHeap () returned 0x800000
	[0227.506] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0227.506] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
	[0227.506] GetProcessHeap () returned 0x800000
	[0227.506] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0227.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0227.506] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.506] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1
	[0227.506] GetProcessHeap () returned 0x800000
	[0227.506] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0227.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0227.506] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.506] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0227.506] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0227.507] GetProcessHeap () returned 0x800000
	[0227.507] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0227.507] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0
	[0227.507] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0227.507] GetProcessHeap () returned 0x800000
	[0227.507] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0227.507] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1
	[0227.507] GetProcessHeap () returned 0x800000
	[0227.507] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0227.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0227.508] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.508] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0227.508] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0227.508] GetProcessHeap () returned 0x800000
	[0227.508] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0227.508] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 0
	[0227.508] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0227.509] GetProcessHeap () returned 0x800000
	[0227.509] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0227.509] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa5a249c0, ftCreationTime.dwHighDateTime=0x1d4c88c, ftLastAccessTime.dwLowDateTime=0x5ffe6f40, ftLastAccessTime.dwHighDateTime=0x1d4cca4, ftLastWriteTime.dwLowDateTime=0x5ffe6f40, ftLastWriteTime.dwHighDateTime=0x1d4cca4, nFileSizeHigh=0x0, nFileSizeLow=0x812a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bx-WLZhXhMwB.mp3", cAlternateFileName="BX-WLZ~1.MP3")) returned 1
	[0227.509] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1f02cf50, ftCreationTime.dwHighDateTime=0x1d4d1e9, ftLastAccessTime.dwLowDateTime=0x4d8b3f60, ftLastAccessTime.dwHighDateTime=0x1d4d45f, ftLastWriteTime.dwLowDateTime=0x4d8b3f60, ftLastWriteTime.dwHighDateTime=0x1d4d45f, nFileSizeHigh=0x0, nFileSizeLow=0x173c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cURo55IBl5u PH7QEcL.png", cAlternateFileName="CURO55~1.PNG")) returned 1
	[0227.509] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafbf4140, ftCreationTime.dwHighDateTime=0x1d4ca23, ftLastAccessTime.dwLowDateTime=0x6d6107e0, ftLastAccessTime.dwHighDateTime=0x1d4d188, ftLastWriteTime.dwLowDateTime=0x6d6107e0, ftLastWriteTime.dwHighDateTime=0x1d4d188, nFileSizeHigh=0x0, nFileSizeLow=0x6553, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CvMy2ysHQHc9BfZ.pps", cAlternateFileName="CVMY2Y~1.PPS")) returned 1
	[0227.509] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc1b3460, ftCreationTime.dwHighDateTime=0x1d4c594, ftLastAccessTime.dwLowDateTime=0xcb7d9aa0, ftLastAccessTime.dwHighDateTime=0x1d4c99a, ftLastWriteTime.dwLowDateTime=0xcb7d9aa0, ftLastWriteTime.dwHighDateTime=0x1d4c99a, nFileSizeHigh=0x0, nFileSizeLow=0x62d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EOV62xwT3w9z2ZfuohKF.mp4", cAlternateFileName="EOV62X~1.MP4")) returned 1
	[0227.509] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9778540, ftCreationTime.dwHighDateTime=0x1d4ca96, ftLastAccessTime.dwLowDateTime=0x7c5a8e90, ftLastAccessTime.dwHighDateTime=0x1d4c852, ftLastWriteTime.dwLowDateTime=0x7c5a8e90, ftLastWriteTime.dwHighDateTime=0x1d4c852, nFileSizeHigh=0x0, nFileSizeLow=0x12aaf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="feHZYs7WYyXLhL.ppt", cAlternateFileName="FEHZYS~1.PPT")) returned 1
	[0227.509] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b50af0, ftCreationTime.dwHighDateTime=0x1d4cb29, ftLastAccessTime.dwLowDateTime=0xfe7398e0, ftLastAccessTime.dwHighDateTime=0x1d4cdcf, ftLastWriteTime.dwLowDateTime=0xfe7398e0, ftLastWriteTime.dwHighDateTime=0x1d4cdcf, nFileSizeHigh=0x0, nFileSizeLow=0x3ea2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FMeC G.flv", cAlternateFileName="FMECG~1.FLV")) returned 1
	[0227.509] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf3e692b0, ftCreationTime.dwHighDateTime=0x1d4cf73, ftLastAccessTime.dwLowDateTime=0xc5d91d90, ftLastAccessTime.dwHighDateTime=0x1d4d4d5, ftLastWriteTime.dwLowDateTime=0xc5d91d90, ftLastWriteTime.dwHighDateTime=0x1d4d4d5, nFileSizeHigh=0x0, nFileSizeLow=0x11e50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="i1NQNVG5t b72RabJ.mkv", cAlternateFileName="I1NQNV~1.MKV")) returned 1
	[0227.509] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1
	[0227.509] GetProcessHeap () returned 0x800000
	[0227.509] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0227.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0227.509] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.509] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1
	[0227.509] GetProcessHeap () returned 0x800000
	[0227.509] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0227.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0227.510] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.510] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0227.510] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0227.510] GetProcessHeap () returned 0x800000
	[0227.510] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0227.510] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0
	[0227.510] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0227.511] GetProcessHeap () returned 0x800000
	[0227.511] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0227.511] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a661c30, ftCreationTime.dwHighDateTime=0x1d4c9d9, ftLastAccessTime.dwLowDateTime=0xe2ac3880, ftLastAccessTime.dwHighDateTime=0x1d4c639, ftLastWriteTime.dwLowDateTime=0xe2ac3880, ftLastWriteTime.dwHighDateTime=0x1d4c639, nFileSizeHigh=0x0, nFileSizeLow=0x120af, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ik07iIRReGtvo5pN.xls", cAlternateFileName="IK07II~1.XLS")) returned 1
	[0227.511] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1770e4f0, ftCreationTime.dwHighDateTime=0x1d4cde0, ftLastAccessTime.dwLowDateTime=0x64ae1440, ftLastAccessTime.dwHighDateTime=0x1d4c9e9, ftLastWriteTime.dwLowDateTime=0x64ae1440, ftLastWriteTime.dwHighDateTime=0x1d4c9e9, nFileSizeHigh=0x0, nFileSizeLow=0x13e58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="j9JUip.mkv", cAlternateFileName="")) returned 1
	[0227.511] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a689d70, ftCreationTime.dwHighDateTime=0x1d4d227, ftLastAccessTime.dwLowDateTime=0x4b001e10, ftLastAccessTime.dwHighDateTime=0x1d4d517, ftLastWriteTime.dwLowDateTime=0x4b001e10, ftLastWriteTime.dwHighDateTime=0x1d4d517, nFileSizeHigh=0x0, nFileSizeLow=0x17c14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="juAW.swf", cAlternateFileName="")) returned 1
	[0227.511] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6bfb90c0, ftCreationTime.dwHighDateTime=0x1d4cabf, ftLastAccessTime.dwLowDateTime=0x531c5ea0, ftLastAccessTime.dwHighDateTime=0x1d4d13f, ftLastWriteTime.dwLowDateTime=0x531c5ea0, ftLastWriteTime.dwHighDateTime=0x1d4d13f, nFileSizeHigh=0x0, nFileSizeLow=0x15c6e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KiTxc.png", cAlternateFileName="")) returned 1
	[0227.511] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1d50210, ftCreationTime.dwHighDateTime=0x1d4cd07, ftLastAccessTime.dwLowDateTime=0xda366cb0, ftLastAccessTime.dwHighDateTime=0x1d4c955, ftLastWriteTime.dwLowDateTime=0xda366cb0, ftLastWriteTime.dwHighDateTime=0x1d4c955, nFileSizeHigh=0x0, nFileSizeLow=0x9292, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kSnYONdXQD8.mp3", cAlternateFileName="KSNYON~1.MP3")) returned 1
	[0227.511] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc1d19270, ftCreationTime.dwHighDateTime=0x1d4c708, ftLastAccessTime.dwLowDateTime=0xe209040, ftLastAccessTime.dwHighDateTime=0x1d4c9ac, ftLastWriteTime.dwLowDateTime=0xe209040, ftLastWriteTime.dwHighDateTime=0x1d4c9ac, nFileSizeHigh=0x0, nFileSizeLow=0x6700, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KvwopP.bmp", cAlternateFileName="")) returned 1
	[0227.511] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e011ac0, ftCreationTime.dwHighDateTime=0x1d4d00f, ftLastAccessTime.dwLowDateTime=0xaeca1fe0, ftLastAccessTime.dwHighDateTime=0x1d4d4b8, ftLastWriteTime.dwLowDateTime=0xaeca1fe0, ftLastWriteTime.dwHighDateTime=0x1d4d4b8, nFileSizeHigh=0x0, nFileSizeLow=0x9f2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kw5kUN4r8U5jzBclBU.png", cAlternateFileName="KW5KUN~1.PNG")) returned 1
	[0227.511] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1
	[0227.511] GetProcessHeap () returned 0x800000
	[0227.511] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0227.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0227.511] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.511] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
	[0227.511] GetProcessHeap () returned 0x800000
	[0227.511] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0227.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0227.512] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.512] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1
	[0227.512] GetProcessHeap () returned 0x800000
	[0227.512] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0227.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0227.560] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.560] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 1
	[0227.560] GetProcessHeap () returned 0x800000
	[0227.560] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0227.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0227.569] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.569] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0227.569] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0227.569] GetProcessHeap () returned 0x800000
	[0227.569] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0227.569] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 0
	[0227.569] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0227.570] GetProcessHeap () returned 0x800000
	[0227.570] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0227.570] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1
	[0227.570] GetProcessHeap () returned 0x800000
	[0227.570] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0227.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0227.570] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.570] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1
	[0227.570] GetProcessHeap () returned 0x800000
	[0227.570] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0227.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0227.793] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0227.794] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1
	[0227.794] GetProcessHeap () returned 0x800000
	[0227.794] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0227.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0228.830] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0228.830] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1
	[0228.830] GetProcessHeap () returned 0x800000
	[0228.830] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f100d0
	[0228.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0228.830] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0228.830] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1
	[0228.830] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0
	[0228.831] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0228.831] GetProcessHeap () returned 0x800000
	[0228.831] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f100d0 | out: hHeap=0x800000) returned 1
	[0228.831] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 0
	[0228.831] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0228.832] GetProcessHeap () returned 0x800000
	[0228.832] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0228.832] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0
	[0228.832] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0228.832] GetProcessHeap () returned 0x800000
	[0228.832] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0228.834] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0
	[0228.834] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0228.834] GetProcessHeap () returned 0x800000
	[0228.834] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0228.834] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0
	[0228.834] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0228.835] GetProcessHeap () returned 0x800000
	[0228.835] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0228.835] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0
	[0228.835] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0228.835] GetProcessHeap () returned 0x800000
	[0228.835] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0228.835] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6f61c40, ftCreationTime.dwHighDateTime=0x1d4d348, ftLastAccessTime.dwLowDateTime=0xd10db930, ftLastAccessTime.dwHighDateTime=0x1d4cdb1, ftLastWriteTime.dwLowDateTime=0xd10db930, ftLastWriteTime.dwHighDateTime=0x1d4cdb1, nFileSizeHigh=0x0, nFileSizeLow=0xef27, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mF5ZvnzVylL7Rv6d HI4.wav", cAlternateFileName="MF5ZVN~1.WAV")) returned 1
	[0228.835] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0228.835] GetProcessHeap () returned 0x800000
	[0228.836] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0228.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0228.836] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0228.836] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1
	[0228.836] GetProcessHeap () returned 0x800000
	[0228.836] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0228.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0228.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0228.936] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0228.936] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0228.936] GetProcessHeap () returned 0x800000
	[0228.936] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0228.936] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0228.937] GetProcessHeap () returned 0x800000
	[0228.937] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0228.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0228.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0228.937] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0228.937] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0228.937] GetProcessHeap () returned 0x800000
	[0228.937] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0228.937] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0228.938] GetProcessHeap () returned 0x800000
	[0228.938] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0228.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0228.938] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0228.938] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0228.938] GetProcessHeap () returned 0x800000
	[0228.938] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0228.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0228.938] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0228.938] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0228.938] GetProcessHeap () returned 0x800000
	[0228.938] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0228.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.027] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.027] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa1e34990, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="83AA4C~1")) returned 1
	[0229.027] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="932A2D~1")) returned 1
	[0229.027] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 1
	[0229.027] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 0
	[0229.027] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.028] GetProcessHeap () returned 0x800000
	[0229.028] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.028] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0229.028] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.029] GetProcessHeap () returned 0x800000
	[0229.029] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.029] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
	[0229.029] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.029] GetProcessHeap () returned 0x800000
	[0229.029] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.029] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1
	[0229.029] GetProcessHeap () returned 0x800000
	[0229.029] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.029] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.029] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0229.030] GetProcessHeap () returned 0x800000
	[0229.030] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.030] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.030] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0229.030] GetProcessHeap () returned 0x800000
	[0229.030] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.090] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.090] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1
	[0229.090] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0
	[0229.090] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.091] GetProcessHeap () returned 0x800000
	[0229.091] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.091] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0
	[0229.091] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.091] GetProcessHeap () returned 0x800000
	[0229.091] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.091] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0229.091] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.092] GetProcessHeap () returned 0x800000
	[0229.092] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.092] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1
	[0229.092] GetProcessHeap () returned 0x800000
	[0229.092] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.092] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.092] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1
	[0229.092] GetProcessHeap () returned 0x800000
	[0229.092] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.092] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.092] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.092] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.109] GetProcessHeap () returned 0x800000
	[0229.109] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.109] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 0
	[0229.110] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.110] GetProcessHeap () returned 0x800000
	[0229.110] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.110] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
	[0229.194] GetProcessHeap () returned 0x800000
	[0229.194] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.194] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.194] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.194] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.195] GetProcessHeap () returned 0x800000
	[0229.195] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.195] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
	[0229.195] GetProcessHeap () returned 0x800000
	[0229.195] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.195] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.195] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.195] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.196] GetProcessHeap () returned 0x800000
	[0229.196] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.196] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
	[0229.196] GetProcessHeap () returned 0x800000
	[0229.196] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.196] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.196] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.196] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.197] GetProcessHeap () returned 0x800000
	[0229.197] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.197] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
	[0229.197] GetProcessHeap () returned 0x800000
	[0229.197] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.197] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.197] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.197] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.198] GetProcessHeap () returned 0x800000
	[0229.198] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.198] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0229.198] GetProcessHeap () returned 0x800000
	[0229.198] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.198] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.198] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1
	[0229.198] GetProcessHeap () returned 0x800000
	[0229.198] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.198] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.198] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4eb35ad0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0229.198] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a683760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0229.198] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0f970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4eb0f970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4eb0f970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Launch Internet Explorer Browser.lnk", cAlternateFileName="LAUNCH~1.LNK")) returned 1
	[0229.198] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1
	[0229.198] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1
	[0229.199] GetProcessHeap () returned 0x800000
	[0229.199] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.199] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.199] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1
	[0229.199] GetProcessHeap () returned 0x800000
	[0229.199] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0229.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0229.200] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.200] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.200] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0229.200] GetProcessHeap () returned 0x800000
	[0229.200] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0229.200] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1
	[0229.200] GetProcessHeap () returned 0x800000
	[0229.201] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0229.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0229.201] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.201] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc4b320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0229.201] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0229.201] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (2).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1
	[0229.201] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1
	[0229.201] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1
	[0229.201] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer (2).lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1
	[0229.201] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1
	[0229.201] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player (2).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1
	[0229.201] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0229.201] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
	[0229.201] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0229.202] GetProcessHeap () returned 0x800000
	[0229.202] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0229.202] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0
	[0229.202] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.202] GetProcessHeap () returned 0x800000
	[0229.202] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.204] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0229.204] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
	[0229.204] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.204] GetProcessHeap () returned 0x800000
	[0229.204] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.204] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1
	[0229.205] GetProcessHeap () returned 0x800000
	[0229.205] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.230] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.231] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0229.231] GetProcessHeap () returned 0x800000
	[0229.231] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.231] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.231] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="65UX3YG0", cAlternateFileName="")) returned 1
	[0229.231] GetProcessHeap () returned 0x800000
	[0229.231] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0229.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0229.252] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.252] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.252] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0229.253] GetProcessHeap () returned 0x800000
	[0229.253] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0229.253] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AY721QDR", cAlternateFileName="")) returned 1
	[0229.253] GetProcessHeap () returned 0x800000
	[0229.253] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0229.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0229.253] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.253] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.253] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0229.254] GetProcessHeap () returned 0x800000
	[0229.254] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0229.254] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZBKZBIC", cAlternateFileName="")) returned 1
	[0229.254] GetProcessHeap () returned 0x800000
	[0229.254] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0229.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0229.254] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.254] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.254] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0229.254] GetProcessHeap () returned 0x800000
	[0229.254] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0229.254] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0229.255] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 1
	[0229.255] GetProcessHeap () returned 0x800000
	[0229.255] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0229.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0229.255] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.255] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.255] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0229.255] GetProcessHeap () returned 0x800000
	[0229.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0229.255] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 0
	[0229.255] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.256] GetProcessHeap () returned 0x800000
	[0229.256] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.257] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0229.257] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.257] GetProcessHeap () returned 0x800000
	[0229.257] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.258] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 0
	[0229.258] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.258] GetProcessHeap () returned 0x800000
	[0229.258] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.258] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1
	[0229.258] GetProcessHeap () returned 0x800000
	[0229.258] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.259] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.259] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.259] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.259] GetProcessHeap () returned 0x800000
	[0229.259] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.259] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1
	[0229.259] GetProcessHeap () returned 0x800000
	[0229.259] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.259] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.259] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0229.259] GetProcessHeap () returned 0x800000
	[0229.260] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.260] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.260] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0229.260] GetProcessHeap () returned 0x800000
	[0229.260] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.260] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.260] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 1
	[0229.260] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 0
	[0229.260] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.261] GetProcessHeap () returned 0x800000
	[0229.261] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.261] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0229.261] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.261] GetProcessHeap () returned 0x800000
	[0229.261] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.261] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0
	[0229.261] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.262] GetProcessHeap () returned 0x800000
	[0229.262] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.262] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0229.262] GetProcessHeap () returned 0x800000
	[0229.262] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.262] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.262] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0229.262] GetProcessHeap () returned 0x800000
	[0229.262] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.262] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.262] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1
	[0229.262] GetProcessHeap () returned 0x800000
	[0229.262] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.262] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.263] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1
	[0229.263] GetProcessHeap () returned 0x800000
	[0229.263] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0229.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0229.264] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.264] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1
	[0229.264] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 0
	[0229.264] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0229.264] GetProcessHeap () returned 0x800000
	[0229.264] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0229.264] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 0
	[0229.264] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.265] GetProcessHeap () returned 0x800000
	[0229.265] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.266] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 0
	[0229.266] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.266] GetProcessHeap () returned 0x800000
	[0229.266] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.267] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0
	[0229.267] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.267] GetProcessHeap () returned 0x800000
	[0229.267] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.267] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0229.267] GetProcessHeap () returned 0x800000
	[0229.267] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.271] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.271] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1
	[0229.271] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0229.271] GetProcessHeap () returned 0x800000
	[0229.272] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.287] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.287] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.LNK", cAlternateFileName="")) returned 1
	[0229.287] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x34, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0229.287] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1
	[0229.287] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 0
	[0229.287] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.287] GetProcessHeap () returned 0x800000
	[0229.287] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.287] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0
	[0229.288] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.288] GetProcessHeap () returned 0x800000
	[0229.288] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.288] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0229.288] GetProcessHeap () returned 0x800000
	[0229.288] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.301] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.301] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1
	[0229.301] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1
	[0229.301] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 0
	[0229.301] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.302] GetProcessHeap () returned 0x800000
	[0229.302] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.302] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1
	[0229.302] GetProcessHeap () returned 0x800000
	[0229.302] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.305] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.305] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.305] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.306] GetProcessHeap () returned 0x800000
	[0229.306] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.306] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1
	[0229.306] GetProcessHeap () returned 0x800000
	[0229.306] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.320] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.320] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.320] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.321] GetProcessHeap () returned 0x800000
	[0229.321] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.321] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
	[0229.321] GetProcessHeap () returned 0x800000
	[0229.321] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.322] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.322] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1
	[0229.322] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1
	[0229.322] GetProcessHeap () returned 0x800000
	[0229.322] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.335] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.335] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1
	[0229.335] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1
	[0229.335] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0
	[0229.335] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.336] GetProcessHeap () returned 0x800000
	[0229.336] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.336] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~2")) returned 1
	[0229.336] GetProcessHeap () returned 0x800000
	[0229.336] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.345] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.345] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="02540a10-7eb7-4b20-a8c7-470f8986389c", cAlternateFileName="02540A~1")) returned 1
	[0229.345] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdc5ea830, ftCreationTime.dwHighDateTime=0x1d41fce, ftLastAccessTime.dwLowDateTime=0xdc5ea830, ftLastAccessTime.dwHighDateTime=0x1d41fce, ftLastWriteTime.dwLowDateTime=0xdc5ea830, ftLastWriteTime.dwHighDateTime=0x1d41fce, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0e15476d-d8fe-46ca-8099-ebdcf80f637c", cAlternateFileName="0E1547~1")) returned 1
	[0229.345] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf6409280, ftCreationTime.dwHighDateTime=0x1d4ae2c, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="102a7bc8-3f85-4bb4-840a-38257d2965d2", cAlternateFileName="102A7B~1")) returned 1
	[0229.345] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542b0350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542b0350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x542b0350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2be989a0-16a1-424b-9211-51aa3bb43e5d", cAlternateFileName="2BE989~1")) returned 1
	[0229.345] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x17ffec90, ftCreationTime.dwHighDateTime=0x1d3373c, ftLastAccessTime.dwLowDateTime=0x17ffec90, ftLastAccessTime.dwHighDateTime=0x1d3373c, ftLastWriteTime.dwLowDateTime=0x18024df0, ftLastWriteTime.dwHighDateTime=0x1d3373c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fbbe72db-afd8-443b-88dd-64b20388700d", cAlternateFileName="FBBE72~1")) returned 1
	[0229.345] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xf6455540, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1
	[0229.345] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xf6455540, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0
	[0229.345] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.346] GetProcessHeap () returned 0x800000
	[0229.346] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.346] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1
	[0229.347] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 0
	[0229.347] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.347] GetProcessHeap () returned 0x800000
	[0229.347] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.347] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0229.347] GetProcessHeap () returned 0x800000
	[0229.347] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.352] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.352] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.352] GetProcessHeap () returned 0x800000
	[0229.352] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.353] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1
	[0229.353] GetProcessHeap () returned 0x800000
	[0229.353] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.355] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.356] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 1
	[0229.356] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 0
	[0229.356] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.356] GetProcessHeap () returned 0x800000
	[0229.356] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.356] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1
	[0229.356] GetProcessHeap () returned 0x800000
	[0229.356] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.357] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.357] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.357] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.357] GetProcessHeap () returned 0x800000
	[0229.357] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.357] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
	[0229.357] GetProcessHeap () returned 0x800000
	[0229.357] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.357] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.357] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1
	[0229.357] GetProcessHeap () returned 0x800000
	[0229.357] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.358] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.358] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1
	[0229.358] GetProcessHeap () returned 0x800000
	[0229.358] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.358] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.358] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.358] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.359] GetProcessHeap () returned 0x800000
	[0229.359] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.359] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1
	[0229.359] GetProcessHeap () returned 0x800000
	[0229.359] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.360] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.360] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.360] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.360] GetProcessHeap () returned 0x800000
	[0229.360] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.360] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1
	[0229.360] GetProcessHeap () returned 0x800000
	[0229.360] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.360] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.360] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0229.361] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.361] GetProcessHeap () returned 0x800000
	[0229.361] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.361] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 0
	[0229.361] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.361] GetProcessHeap () returned 0x800000
	[0229.361] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.361] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0
	[0229.361] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.362] GetProcessHeap () returned 0x800000
	[0229.362] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.362] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0229.362] GetProcessHeap () returned 0x800000
	[0229.362] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.364] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.364] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1
	[0229.364] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0
	[0229.364] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.365] GetProcessHeap () returned 0x800000
	[0229.365] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.365] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1
	[0229.365] GetProcessHeap () returned 0x800000
	[0229.365] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.376] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.377] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1
	[0229.377] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 0
	[0229.377] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.377] GetProcessHeap () returned 0x800000
	[0229.377] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.377] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0229.377] GetProcessHeap () returned 0x800000
	[0229.377] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.377] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.377] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0229.378] GetProcessHeap () returned 0x800000
	[0229.378] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.378] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.378] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c3625f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1c3625f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1c3625f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adobe[1].txt", cAlternateFileName="5P5NRG~1.TXT")) returned 1
	[0229.378] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d72bcd0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e6a4bd0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1e6a4bd0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adobe[3].txt", cAlternateFileName="5P0100~1.TXT")) returned 1
	[0229.378] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d8f4d50, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e658910, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1e658910, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@demdex[1].txt", cAlternateFileName="5PFFE8~1.TXT")) returned 1
	[0229.379] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e658910, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e658910, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1e658910, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt", cAlternateFileName="5PB43E~1.TXT")) returned 1
	[0229.379] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dcf9270, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1dcf9270, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1dcf9270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@everesttech[1].txt", cAlternateFileName="5P5NRG~4.TXT")) returned 1
	[0229.379] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86af2d0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[2].txt", cAlternateFileName="5P5NRG~2.TXT")) returned 1
	[0229.379] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dcf9270, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1dcf9270, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1dcf9270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x56, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@ml314[1].txt", cAlternateFileName="5P0DBF~1.TXT")) returned 1
	[0229.379] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e5e64f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e5e64f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1e5e64f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x19e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@rlcdn[2].txt", cAlternateFileName="5P94E6~1.TXT")) returned 1
	[0229.379] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb85ef80, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0229.379] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52878dd0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0229.379] GetProcessHeap () returned 0x800000
	[0229.379] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52878dd0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.389] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52878dd0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0229.412] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44eb6480, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44eb6480, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44eb6480, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt", cAlternateFileName="5P9943~1.TXT")) returned 1
	[0229.412] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44bd95f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44bd95f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44bd95f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt", cAlternateFileName="5P37D9~1.TXT")) returned 1
	[0229.412] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf73d210, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf73d210, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf73d210, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adformdsp[1].txt", cAlternateFileName="5P2CBA~1.TXT")) returned 1
	[0229.412] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2a0770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7d5790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7d5790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adform[1].txt", cAlternateFileName="5P8600~1.TXT")) returned 1
	[0229.412] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe5d5130, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0x45f08810, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45f08810, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adnxs[1].txt", cAlternateFileName="5P89EF~1.TXT")) returned 1
	[0229.412] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adtech[2].txt", cAlternateFileName="5PC5B2~1.TXT")) returned 1
	[0229.412] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53c70990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53c70990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53c70990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adtr02[1].txt", cAlternateFileName="5P5NRG~3.TXT")) returned 1
	[0229.412] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x517fd8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51332930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x51332930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@advertising[1].txt", cAlternateFileName="5P5NRG~1.TXT")) returned 1
	[0229.412] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54cce0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54cce0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54cce0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@api.bing[2].txt", cAlternateFileName="5P40FC~1.TXT")) returned 1
	[0229.412] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4611db50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4611db50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4611db50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@at.atwola[1].txt", cAlternateFileName="5P74F0~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x534b4210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x562c6900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x562c6900, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@bing[1].txt", cAlternateFileName="5PBE12~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@c.bing[1].txt", cAlternateFileName="5P5NRG~2.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdf95770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbdf95770, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbdf95770, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@c.msn[1].txt", cAlternateFileName="5PB89C~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6301df20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63a15b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63a15b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@doubleclick[2].txt", cAlternateFileName="5P93CC~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61093ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61093ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61093ba0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x256, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[1].txt", cAlternateFileName="5P12F9~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x610b9d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61282d80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[3].txt", cAlternateFileName="5P692F~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e777a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64e777a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x64e777a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x21f, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[4].txt", cAlternateFileName="5P3B8C~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x465ba5f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x465ba5f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x465ba5f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@linkedin[1].txt", cAlternateFileName="5P1C80~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfa5cef0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfa5cef0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfa5cef0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x76, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@m.exactag[1].txt", cAlternateFileName="5PD7A3~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50b50050, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50b50050, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50b50050, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@msn[1].txt", cAlternateFileName="5PBFF9~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5348e0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5348e0b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5348e0b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt", cAlternateFileName="5P5NRG~4.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf73d210, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf73d210, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf73d210, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt", cAlternateFileName="5P4910~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf99e810, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf99e810, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf99e810, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x68, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@skadtec[1].txt", cAlternateFileName="5P37A2~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf54e030, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf54e030, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf54e030, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@track.adform[2].txt", cAlternateFileName="5PD4D3~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x555a9a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x555a9a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x555a9a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@www.bing[2].txt", cAlternateFileName="5PA943~1.TXT")) returned 1
	[0229.413] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d8c7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d8c7b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54d8c7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@www.linkedin[1].txt", cAlternateFileName="5PC3D9~1.TXT")) returned 1
	[0229.414] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4523d1d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x526fc010, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x526fc010, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@www.msn[2].txt", cAlternateFileName="5PD551~1.TXT")) returned 1
	[0229.414] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x432daef0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0229.414] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.415] GetProcessHeap () returned 0x800000
	[0229.415] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.415] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.416] GetProcessHeap () returned 0x800000
	[0229.416] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.416] GetProcessHeap () returned 0x800000
	[0229.416] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.443] GetProcessHeap () returned 0x800000
	[0229.443] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.443] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.443] GetProcessHeap () returned 0x800000
	[0229.443] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.443] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.444] GetProcessHeap () returned 0x800000
	[0229.444] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.444] GetProcessHeap () returned 0x800000
	[0229.444] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.444] GetProcessHeap () returned 0x800000
	[0229.444] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f0dcf10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.445] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.445] GetProcessHeap () returned 0x800000
	[0229.445] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.445] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.445] GetProcessHeap () returned 0x800000
	[0229.445] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.446] GetProcessHeap () returned 0x800000
	[0229.446] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.446] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.446] GetProcessHeap () returned 0x800000
	[0229.446] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.446] GetProcessHeap () returned 0x800000
	[0229.446] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.447] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.447] GetProcessHeap () returned 0x800000
	[0229.447] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.447] GetProcessHeap () returned 0x800000
	[0229.447] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.447] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.448] GetProcessHeap () returned 0x800000
	[0229.448] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.448] GetProcessHeap () returned 0x800000
	[0229.448] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x94fde710, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.493] GetProcessHeap () returned 0x800000
	[0229.493] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.493] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.493] GetProcessHeap () returned 0x800000
	[0229.493] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.494] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.494] GetProcessHeap () returned 0x800000
	[0229.494] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.494] GetProcessHeap () returned 0x800000
	[0229.494] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xeafe50c0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xeafe50c0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.658] GetProcessHeap () returned 0x800000
	[0229.700] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4bce65c0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x4bce65c0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.773] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.774] GetProcessHeap () returned 0x800000
	[0229.774] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.774] GetProcessHeap () returned 0x800000
	[0229.774] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xce5f0760, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xce5f0760, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.796] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.797] GetProcessHeap () returned 0x800000
	[0229.797] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.951] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.952] GetProcessHeap () returned 0x800000
	[0229.952] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.952] GetProcessHeap () returned 0x800000
	[0229.952] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.955] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.957] GetProcessHeap () returned 0x800000
	[0229.957] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.957] GetProcessHeap () returned 0x800000
	[0229.957] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.957] GetProcessHeap () returned 0x800000
	[0229.957] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0229.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d7ae880, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0229.957] GetProcessHeap () returned 0x800000
	[0229.957] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0229.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0229.958] GetProcessHeap () returned 0x800000
	[0229.958] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f100d0
	[0229.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0229.959] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0229.959] GetProcessHeap () returned 0x800000
	[0229.959] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f100d0 | out: hHeap=0x800000) returned 1
	[0229.960] GetProcessHeap () returned 0x800000
	[0229.960] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f100d0
	[0229.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0229.961] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0229.961] GetProcessHeap () returned 0x800000
	[0229.961] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f100d0 | out: hHeap=0x800000) returned 1
	[0229.961] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0229.961] GetProcessHeap () returned 0x800000
	[0229.961] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0229.962] GetProcessHeap () returned 0x800000
	[0229.962] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0229.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0229.962] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0229.962] GetProcessHeap () returned 0x800000
	[0229.962] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0229.962] GetProcessHeap () returned 0x800000
	[0229.962] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0229.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0229.962] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0229.963] GetProcessHeap () returned 0x800000
	[0229.963] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0229.963] GetProcessHeap () returned 0x800000
	[0229.963] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0229.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfae9c910, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xfae9c910, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0229.963] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0229.963] GetProcessHeap () returned 0x800000
	[0229.963] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0229.964] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0229.964] GetProcessHeap () returned 0x800000
	[0229.964] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0229.965] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.966] GetProcessHeap () returned 0x800000
	[0229.966] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.966] GetProcessHeap () returned 0x800000
	[0229.966] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.966] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.967] GetProcessHeap () returned 0x800000
	[0229.967] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.967] GetProcessHeap () returned 0x800000
	[0229.967] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.967] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.967] GetProcessHeap () returned 0x800000
	[0229.967] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.968] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.968] GetProcessHeap () returned 0x800000
	[0229.968] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.968] GetProcessHeap () returned 0x800000
	[0229.968] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0229.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0229.985] GetProcessHeap () returned 0x800000
	[0229.985] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0229.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0229.989] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0229.991] GetProcessHeap () returned 0x800000
	[0229.991] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0229.991] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0229.991] GetProcessHeap () returned 0x800000
	[0229.991] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0229.992] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0229.992] GetProcessHeap () returned 0x800000
	[0229.992] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0229.992] GetProcessHeap () returned 0x800000
	[0229.992] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0229.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0230.193] GetProcessHeap () returned 0x800000
	[0230.193] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0230.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0230.232] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0230.234] GetProcessHeap () returned 0x800000
	[0230.234] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0230.234] GetProcessHeap () returned 0x800000
	[0230.234] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0230.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0230.305] GetProcessHeap () returned 0x800000
	[0230.305] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0230.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0230.340] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0230.340] GetProcessHeap () returned 0x800000
	[0230.341] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0230.341] GetProcessHeap () returned 0x800000
	[0230.341] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0230.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0230.367] GetProcessHeap () returned 0x800000
	[0230.367] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0230.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0230.420] GetProcessHeap () returned 0x800000
	[0230.421] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0230.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0230.493] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0230.494] GetProcessHeap () returned 0x800000
	[0230.494] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0230.495] SetEvent (hEvent=0x110) returned 1
	[0230.495] ResetEvent (hEvent=0x114) returned 1
	[0230.495] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1
	[0230.498] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb639bd10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1
	[0230.503] SetEvent (hEvent=0x110) returned 1
	[0230.504] ResetEvent (hEvent=0x114) returned 1
	[0230.524] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x83256a10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1
	[0230.524] SetEvent (hEvent=0x110) returned 1
	[0230.524] ResetEvent (hEvent=0x114) returned 1
	[0230.558] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbc555e20, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloads.sqlite", cAlternateFileName="DOWNLO~1.SQL")) returned 1
	[0230.558] SetEvent (hEvent=0x110) returned 1
	[0230.559] ResetEvent (hEvent=0x114) returned 1
	[0230.561] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b81e50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4b81e50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b81e50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.ini", cAlternateFileName="EXTENS~1.INI")) returned 1
	[0230.561] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b0fa30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.sqlite", cAlternateFileName="EXTENS~1.SQL")) returned 1
	[0230.566] SetEvent (hEvent=0x110) returned 1
	[0230.566] ResetEvent (hEvent=0x114) returned 1
	[0230.567] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexedDB", cAlternateFileName="INDEXE~1")) returned 1
	[0230.567] GetProcessHeap () returned 0x800000
	[0230.567] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0230.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0230.570] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0230.570] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 1
	[0230.570] GetProcessHeap () returned 0x800000
	[0230.570] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f100d0
	[0230.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1868
	[0230.570] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0230.570] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".metadata", cAlternateFileName="METADA~1")) returned 1
	[0230.570] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 1
	[0230.570] GetProcessHeap () returned 0x800000
	[0230.570] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f200d8
	[0230.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1a68
	[0230.768] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0230.768] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht", cAlternateFileName="818200~1")) returned 1
	[0230.769] GetProcessHeap () returned 0x800000
	[0230.769] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f300e0
	[0230.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d19a8
	[0230.850] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0230.850] FindNextFileW (in: hFindFile=0x34d19a8, lpFindFileData=0x304d9a0 | out: lpFindFileData=0x304d9a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0230.850] FindClose (in: hFindFile=0x34d19a8 | out: hFindFile=0x34d19a8) returned 1
	[0230.851] GetProcessHeap () returned 0x800000
	[0230.851] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f300e0 | out: hHeap=0x800000) returned 1
	[0230.851] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 1
	[0230.851] FindNextFileW (in: hFindFile=0x34d1a68, lpFindFileData=0x304dc30 | out: lpFindFileData=0x304dc30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 0
	[0230.851] FindClose (in: hFindFile=0x34d1a68 | out: hFindFile=0x34d1a68) returned 1
	[0230.851] GetProcessHeap () returned 0x800000
	[0230.851] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f200d8 | out: hHeap=0x800000) returned 1
	[0230.851] FindNextFileW (in: hFindFile=0x34d1868, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 0
	[0230.851] FindClose (in: hFindFile=0x34d1868 | out: hFindFile=0x34d1868) returned 1
	[0230.852] GetProcessHeap () returned 0x800000
	[0230.852] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f100d0 | out: hHeap=0x800000) returned 1
	[0230.852] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 0
	[0230.852] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0230.852] GetProcessHeap () returned 0x800000
	[0230.852] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0230.852] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4815eb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4815eb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1
	[0230.852] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x850d63f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x850d63f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x850d63f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0x0, dwReserved1=0x0, cFileName="localstore.rdf", cAlternateFileName="LOCALS~1.RDF")) returned 1
	[0230.852] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="marionette.log", cAlternateFileName="MARION~1.LOG")) returned 1
	[0230.853] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb50b6e70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5175550, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb5175550, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mimeTypes.rdf", cAlternateFileName="MIMETY~1.RDF")) returned 1
	[0230.853] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="minidumps", cAlternateFileName="MINIDU~1")) returned 1
	[0230.853] GetProcessHeap () returned 0x800000
	[0230.853] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0230.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0231.044] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.044] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0231.044] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0231.045] GetProcessHeap () returned 0x800000
	[0231.045] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0231.045] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1
	[0231.045] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb43eb830, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb43eb830, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3b3f6e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="permissions.sqlite", cAlternateFileName="PERMIS~1.SQL")) returned 1
	[0231.045] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x82b58970, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa00000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1
	[0231.046] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81fbde30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81fbde30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81fbde30, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1
	[0231.046] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x12069be0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0xfde, dwReserved0=0x0, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1
	[0231.046] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6fa8c70, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6fa8c70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4183, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.json", cAlternateFileName="SEARCH~1.JSO")) returned 1
	[0231.046] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb477d930, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb477d930, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb47c9bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="secmod.db", cAlternateFileName="")) returned 1
	[0231.046] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3787480, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.bak", cAlternateFileName="SESSIO~1.BAK")) returned 1
	[0231.046] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x84e029d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1
	[0231.046] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6f36850, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x50000, dwReserved0=0x0, dwReserved1=0x0, cFileName="signons.sqlite", cAlternateFileName="SIGNON~1.SQL")) returned 1
	[0231.046] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1
	[0231.046] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps", cAlternateFileName="")) returned 1
	[0231.046] GetProcessHeap () returned 0x800000
	[0231.046] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f000c8
	[0231.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0231.047] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.047] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 1
	[0231.047] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 0
	[0231.047] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0231.048] GetProcessHeap () returned 0x800000
	[0231.048] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f000c8 | out: hHeap=0x800000) returned 1
	[0231.048] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1
	[0231.048] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 0
	[0231.048] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0231.048] GetProcessHeap () returned 0x800000
	[0231.048] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0231.050] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0
	[0231.050] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0231.050] GetProcessHeap () returned 0x800000
	[0231.050] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0231.050] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 1
	[0231.050] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 0
	[0231.050] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0231.051] GetProcessHeap () returned 0x800000
	[0231.051] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0231.051] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 0
	[0231.051] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0231.051] GetProcessHeap () returned 0x800000
	[0231.051] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0231.051] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8171a810, ftCreationTime.dwHighDateTime=0x1d4cdd3, ftLastAccessTime.dwLowDateTime=0x78e71490, ftLastAccessTime.dwHighDateTime=0x1d4cc35, ftLastWriteTime.dwLowDateTime=0x78e71490, ftLastWriteTime.dwHighDateTime=0x1d4cc35, nFileSizeHigh=0x0, nFileSizeLow=0x6c61, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="N4UXw9.jpg", cAlternateFileName="")) returned 1
	[0231.051] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f216830, ftCreationTime.dwHighDateTime=0x1d4cfd0, ftLastAccessTime.dwLowDateTime=0xa22b10, ftLastAccessTime.dwHighDateTime=0x1d4c9d2, ftLastWriteTime.dwLowDateTime=0xa22b10, ftLastWriteTime.dwHighDateTime=0x1d4c9d2, nFileSizeHigh=0x0, nFileSizeLow=0x156ab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NhgT71_FjOJG.docx", cAlternateFileName="NHGT71~1.DOC")) returned 1
	[0231.052] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d7e4ff0, ftCreationTime.dwHighDateTime=0x1d4c669, ftLastAccessTime.dwLowDateTime=0xaf62e450, ftLastAccessTime.dwHighDateTime=0x1d4c74d, ftLastWriteTime.dwLowDateTime=0xaf62e450, ftLastWriteTime.dwHighDateTime=0x1d4c74d, nFileSizeHigh=0x0, nFileSizeLow=0xd6d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nYipD6tF68.m4a", cAlternateFileName="NYIPD6~1.M4A")) returned 1
	[0231.052] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1d6a670, ftCreationTime.dwHighDateTime=0x1d4cbe7, ftLastAccessTime.dwLowDateTime=0x8e2e8400, ftLastAccessTime.dwHighDateTime=0x1d4cbd6, ftLastWriteTime.dwLowDateTime=0x8e2e8400, ftLastWriteTime.dwHighDateTime=0x1d4cbd6, nFileSizeHigh=0x0, nFileSizeLow=0x81bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pxS1IFi.bmp", cAlternateFileName="")) returned 1
	[0231.052] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf57a8700, ftCreationTime.dwHighDateTime=0x1d4d061, ftLastAccessTime.dwLowDateTime=0xab13baf0, ftLastAccessTime.dwHighDateTime=0x1d4c7fc, ftLastWriteTime.dwLowDateTime=0xab13baf0, ftLastWriteTime.dwHighDateTime=0x1d4c7fc, nFileSizeHigh=0x0, nFileSizeLow=0x43e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="R2uS7AJnXa.mp3", cAlternateFileName="R2US7A~1.MP3")) returned 1
	[0231.052] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7877880, ftCreationTime.dwHighDateTime=0x1d4c78a, ftLastAccessTime.dwLowDateTime=0x79494fa0, ftLastAccessTime.dwHighDateTime=0x1d4ca02, ftLastWriteTime.dwLowDateTime=0x79494fa0, ftLastWriteTime.dwHighDateTime=0x1d4ca02, nFileSizeHigh=0x0, nFileSizeLow=0x18e51, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="T694qUi.m4a", cAlternateFileName="")) returned 1
	[0231.052] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfb9d8950, ftCreationTime.dwHighDateTime=0x1d4d581, ftLastAccessTime.dwLowDateTime=0xd43e48b0, ftLastAccessTime.dwHighDateTime=0x1d4cc3d, ftLastWriteTime.dwLowDateTime=0xd43e48b0, ftLastWriteTime.dwHighDateTime=0x1d4cc3d, nFileSizeHigh=0x0, nFileSizeLow=0x11608, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TLXuFQn.gif", cAlternateFileName="")) returned 1
	[0231.052] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4808ea70, ftCreationTime.dwHighDateTime=0x1d4cd3d, ftLastAccessTime.dwLowDateTime=0xa9c5c640, ftLastAccessTime.dwHighDateTime=0x1d4cf93, ftLastWriteTime.dwLowDateTime=0xa9c5c640, ftLastWriteTime.dwHighDateTime=0x1d4cf93, nFileSizeHigh=0x0, nFileSizeLow=0x175fa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tSjwL.docx", cAlternateFileName="TSJWL~1.DOC")) returned 1
	[0231.052] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41eaae30, ftCreationTime.dwHighDateTime=0x1d4c61c, ftLastAccessTime.dwLowDateTime=0x2d1f7010, ftLastAccessTime.dwHighDateTime=0x1d4c62d, ftLastWriteTime.dwLowDateTime=0x2d1f7010, ftLastWriteTime.dwHighDateTime=0x1d4c62d, nFileSizeHigh=0x0, nFileSizeLow=0xc287, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tvm-.csv", cAlternateFileName="")) returned 1
	[0231.053] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9e0af310, ftCreationTime.dwHighDateTime=0x1d4d0b6, ftLastAccessTime.dwLowDateTime=0x8291e090, ftLastAccessTime.dwHighDateTime=0x1d4c63d, ftLastWriteTime.dwLowDateTime=0x8291e090, ftLastWriteTime.dwHighDateTime=0x1d4c63d, nFileSizeHigh=0x0, nFileSizeLow=0xee09, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UDrts.flv", cAlternateFileName="")) returned 1
	[0231.053] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf62f3410, ftCreationTime.dwHighDateTime=0x1d4cd0b, ftLastAccessTime.dwLowDateTime=0x2bac8b20, ftLastAccessTime.dwHighDateTime=0x1d4ccfc, ftLastWriteTime.dwLowDateTime=0x2bac8b20, ftLastWriteTime.dwHighDateTime=0x1d4ccfc, nFileSizeHigh=0x0, nFileSizeLow=0x48eb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vEwmWcQDGY8uZJM.rtf", cAlternateFileName="VEWMWC~1.RTF")) returned 1
	[0231.053] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde52f00, ftCreationTime.dwHighDateTime=0x1d4c5f5, ftLastAccessTime.dwLowDateTime=0x4bbf34e0, ftLastAccessTime.dwHighDateTime=0x1d4d020, ftLastWriteTime.dwLowDateTime=0x4bbf34e0, ftLastWriteTime.dwHighDateTime=0x1d4d020, nFileSizeHigh=0x0, nFileSizeLow=0x33e9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VLx5c7IBVlj1A9uVo.gif", cAlternateFileName="VLX5C7~1.GIF")) returned 1
	[0231.053] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8f916620, ftCreationTime.dwHighDateTime=0x1d4c585, ftLastAccessTime.dwLowDateTime=0x50659330, ftLastAccessTime.dwHighDateTime=0x1d4c6a3, ftLastWriteTime.dwLowDateTime=0x50659330, ftLastWriteTime.dwHighDateTime=0x1d4c6a3, nFileSizeHigh=0x0, nFileSizeLow=0xe368, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zgo_NB7Fmyh88SKECIWf.gif", cAlternateFileName="ZGO_NB~1.GIF")) returned 1
	[0231.053] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x719579a0, ftCreationTime.dwHighDateTime=0x1d4cd31, ftLastAccessTime.dwLowDateTime=0x77c5bc70, ftLastAccessTime.dwHighDateTime=0x1d4c80b, ftLastWriteTime.dwLowDateTime=0x77c5bc70, ftLastWriteTime.dwHighDateTime=0x1d4c80b, nFileSizeHigh=0x0, nFileSizeLow=0xaade, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zXH2rYPhglgsMss9Py.swf", cAlternateFileName="ZXH2RY~1.SWF")) returned 1
	[0231.053] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4ad6cc0, ftCreationTime.dwHighDateTime=0x1d4cb9d, ftLastAccessTime.dwLowDateTime=0xf270d3c0, ftLastAccessTime.dwHighDateTime=0x1d4cc1f, ftLastWriteTime.dwLowDateTime=0xf270d3c0, ftLastWriteTime.dwHighDateTime=0x1d4cc1f, nFileSizeHigh=0x0, nFileSizeLow=0x10318, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_Akm6yNs0lrj5wWUD.wav", cAlternateFileName="_AKM6Y~1.WAV")) returned 1
	[0231.053] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4ad6cc0, ftCreationTime.dwHighDateTime=0x1d4cb9d, ftLastAccessTime.dwLowDateTime=0xf270d3c0, ftLastAccessTime.dwHighDateTime=0x1d4cc1f, ftLastWriteTime.dwLowDateTime=0xf270d3c0, ftLastWriteTime.dwHighDateTime=0x1d4cc1f, nFileSizeHigh=0x0, nFileSizeLow=0x10318, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_Akm6yNs0lrj5wWUD.wav", cAlternateFileName="_AKM6Y~1.WAV")) returned 0
	[0231.053] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0231.053] GetProcessHeap () returned 0x800000
	[0231.053] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3ef00c0 | out: hHeap=0x800000) returned 1
	[0231.054] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6026fc0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe6026fc0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0
	[0231.054] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0231.054] GetProcessHeap () returned 0x800000
	[0231.054] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0231.065] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0231.065] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0231.065] GetProcessHeap () returned 0x800000
	[0231.065] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0231.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0231.065] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.065] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1
	[0231.065] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
	[0231.065] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1
	[0231.065] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1
	[0231.066] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0231.066] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1
	[0231.066] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1
	[0231.066] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0
	[0231.066] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0231.066] GetProcessHeap () returned 0x800000
	[0231.066] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0231.066] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0231.066] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec7d8e20, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec7d8e20, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0231.066] GetProcessHeap () returned 0x800000
	[0231.066] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0231.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec7d8e20, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec7d8e20, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0231.066] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xec7d8e20, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xec7d8e20, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2fa0540, ftCreationTime.dwHighDateTime=0x1d4d120, ftLastAccessTime.dwLowDateTime=0x5a59ea50, ftLastAccessTime.dwHighDateTime=0x1d4c809, ftLastWriteTime.dwLowDateTime=0x5a59ea50, ftLastWriteTime.dwHighDateTime=0x1d4c809, nFileSizeHigh=0x0, nFileSizeLow=0x9c3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-lkfK5gPa.avi", cAlternateFileName="-LKFK5~1.AVI")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e2b310, ftCreationTime.dwHighDateTime=0x1d4ce16, ftLastAccessTime.dwLowDateTime=0x92099ff0, ftLastAccessTime.dwHighDateTime=0x1d4d037, ftLastWriteTime.dwLowDateTime=0x92099ff0, ftLastWriteTime.dwHighDateTime=0x1d4d037, nFileSizeHigh=0x0, nFileSizeLow=0x15765, dwReserved0=0x0, dwReserved1=0x0, cFileName="18ypRjafthTyZ16vFyc.avi", cAlternateFileName="18YPRJ~1.AVI")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee179fd0, ftCreationTime.dwHighDateTime=0x1d4c59d, ftLastAccessTime.dwLowDateTime=0x26b6f7e0, ftLastAccessTime.dwHighDateTime=0x1d4cba3, ftLastWriteTime.dwLowDateTime=0x26b6f7e0, ftLastWriteTime.dwHighDateTime=0x1d4cba3, nFileSizeHigh=0x0, nFileSizeLow=0x11643, dwReserved0=0x0, dwReserved1=0x0, cFileName="2L_s.avi", cAlternateFileName="")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ec64100, ftCreationTime.dwHighDateTime=0x1d4d3f6, ftLastAccessTime.dwLowDateTime=0xa47ec970, ftLastAccessTime.dwHighDateTime=0x1d4d4a2, ftLastWriteTime.dwLowDateTime=0xa47ec970, ftLastWriteTime.dwHighDateTime=0x1d4d4a2, nFileSizeHigh=0x0, nFileSizeLow=0x16273, dwReserved0=0x0, dwReserved1=0x0, cFileName="3meTNLVbS7So6NoBx4.png", cAlternateFileName="3METNL~1.PNG")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3375c510, ftCreationTime.dwHighDateTime=0x1d4ce87, ftLastAccessTime.dwLowDateTime=0x4a7f8a0, ftLastAccessTime.dwHighDateTime=0x1d4c5b0, ftLastWriteTime.dwLowDateTime=0x4a7f8a0, ftLastWriteTime.dwHighDateTime=0x1d4c5b0, nFileSizeHigh=0x0, nFileSizeLow=0xb2a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="4EGLj3TxhC3 m0CZX1z-.bmp", cAlternateFileName="4EGLJ3~1.BMP")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca31c10, ftCreationTime.dwHighDateTime=0x1d4cd9e, ftLastAccessTime.dwLowDateTime=0xe4635a70, ftLastAccessTime.dwHighDateTime=0x1d4ca83, ftLastWriteTime.dwLowDateTime=0xe4635a70, ftLastWriteTime.dwHighDateTime=0x1d4ca83, nFileSizeHigh=0x0, nFileSizeLow=0x14642, dwReserved0=0x0, dwReserved1=0x0, cFileName="4EHV x4pIWAZg.ots", cAlternateFileName="4EHVX4~1.OTS")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54767f0, ftCreationTime.dwHighDateTime=0x1d4cf0e, ftLastAccessTime.dwLowDateTime=0x5f11cb00, ftLastAccessTime.dwHighDateTime=0x1d4cb54, ftLastWriteTime.dwLowDateTime=0x5f11cb00, ftLastWriteTime.dwHighDateTime=0x1d4cb54, nFileSizeHigh=0x0, nFileSizeLow=0x4c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AH8AHq grODw6Lf63YwH.bmp", cAlternateFileName="AH8AHQ~1.BMP")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b49eb0, ftCreationTime.dwHighDateTime=0x1d4ce6d, ftLastAccessTime.dwLowDateTime=0x75367570, ftLastAccessTime.dwHighDateTime=0x1d4c910, ftLastWriteTime.dwLowDateTime=0x75367570, ftLastWriteTime.dwHighDateTime=0x1d4c910, nFileSizeHigh=0x0, nFileSizeLow=0x16677, dwReserved0=0x0, dwReserved1=0x0, cFileName="am-ND5GXZ3C1xXvYQUH.jpg", cAlternateFileName="AM-ND5~1.JPG")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23d35850, ftCreationTime.dwHighDateTime=0x1d4d398, ftLastAccessTime.dwLowDateTime=0x23aee880, ftLastAccessTime.dwHighDateTime=0x1d4ca65, ftLastWriteTime.dwLowDateTime=0x23aee880, ftLastWriteTime.dwHighDateTime=0x1d4ca65, nFileSizeHigh=0x0, nFileSizeLow=0xb6a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="aovSX5KhIn-vg0C.swf", cAlternateFileName="AOVSX5~1.SWF")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596bbf90, ftCreationTime.dwHighDateTime=0x1d4d166, ftLastAccessTime.dwLowDateTime=0xe47f3b70, ftLastAccessTime.dwHighDateTime=0x1d4c905, ftLastWriteTime.dwLowDateTime=0xe47f3b70, ftLastWriteTime.dwHighDateTime=0x1d4c905, nFileSizeHigh=0x0, nFileSizeLow=0x10d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="b4Tv3EzBs.docx", cAlternateFileName="B4TV3E~1.DOC")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789c3880, ftCreationTime.dwHighDateTime=0x1d4cdac, ftLastAccessTime.dwLowDateTime=0xdca70d30, ftLastAccessTime.dwHighDateTime=0x1d4cc37, ftLastWriteTime.dwLowDateTime=0xdca70d30, ftLastWriteTime.dwHighDateTime=0x1d4cc37, nFileSizeHigh=0x0, nFileSizeLow=0x12602, dwReserved0=0x0, dwReserved1=0x0, cFileName="bWkslLt q5Q.ppt", cAlternateFileName="BWKSLL~1.PPT")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd18761e0, ftCreationTime.dwHighDateTime=0x1d4cc44, ftLastAccessTime.dwLowDateTime=0x51952720, ftLastAccessTime.dwHighDateTime=0x1d4c572, ftLastWriteTime.dwLowDateTime=0x51952720, ftLastWriteTime.dwHighDateTime=0x1d4c572, nFileSizeHigh=0x0, nFileSizeLow=0xf197, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAwsXo6.mp3", cAlternateFileName="")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd0e6750, ftCreationTime.dwHighDateTime=0x1d4d288, ftLastAccessTime.dwLowDateTime=0x7e169260, ftLastAccessTime.dwHighDateTime=0x1d4ce24, ftLastWriteTime.dwLowDateTime=0x7e169260, ftLastWriteTime.dwHighDateTime=0x1d4ce24, nFileSizeHigh=0x0, nFileSizeLow=0x18794, dwReserved0=0x0, dwReserved1=0x0, cFileName="CO W17y.m4a", cAlternateFileName="COW17Y~1.M4A")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c57a50, ftCreationTime.dwHighDateTime=0x1d4c5c8, ftLastAccessTime.dwLowDateTime=0xe0ea8cf0, ftLastAccessTime.dwHighDateTime=0x1d4cd2c, ftLastWriteTime.dwLowDateTime=0xe0ea8cf0, ftLastWriteTime.dwHighDateTime=0x1d4cd2c, nFileSizeHigh=0x0, nFileSizeLow=0x13d85, dwReserved0=0x0, dwReserved1=0x0, cFileName="cVhv_C8Sn1.avi", cAlternateFileName="CVHV_C~1.AVI")) returned 1
	[0231.067] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30d0b740, ftCreationTime.dwHighDateTime=0x1d4cd8b, ftLastAccessTime.dwLowDateTime=0xe608b130, ftLastAccessTime.dwHighDateTime=0x1d4d3f3, ftLastWriteTime.dwLowDateTime=0xe608b130, ftLastWriteTime.dwHighDateTime=0x1d4d3f3, nFileSizeHigh=0x0, nFileSizeLow=0x16795, dwReserved0=0x0, dwReserved1=0x0, cFileName="D23L.jpg", cAlternateFileName="")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a7ae0, ftCreationTime.dwHighDateTime=0x1d4d428, ftLastAccessTime.dwLowDateTime=0xb3e6ce0, ftLastAccessTime.dwHighDateTime=0x1d4c654, ftLastWriteTime.dwLowDateTime=0xb3e6ce0, ftLastWriteTime.dwHighDateTime=0x1d4c654, nFileSizeHigh=0x0, nFileSizeLow=0x1613b, dwReserved0=0x0, dwReserved1=0x0, cFileName="faOtX9F31Qqj3m.pptx", cAlternateFileName="FAOTX9~1.PPT")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fc1be0, ftCreationTime.dwHighDateTime=0x1d4ca5e, ftLastAccessTime.dwLowDateTime=0x6808980, ftLastAccessTime.dwHighDateTime=0x1d4d564, ftLastWriteTime.dwLowDateTime=0x6808980, ftLastWriteTime.dwHighDateTime=0x1d4d564, nFileSizeHigh=0x0, nFileSizeLow=0x3c63, dwReserved0=0x0, dwReserved1=0x0, cFileName="fgk15la3vkQG2.mp3", cAlternateFileName="FGK15L~1.MP3")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6f7710, ftCreationTime.dwHighDateTime=0x1d4cf96, ftLastAccessTime.dwLowDateTime=0x1f99a330, ftLastAccessTime.dwHighDateTime=0x1d4cab9, ftLastWriteTime.dwLowDateTime=0x1f99a330, ftLastWriteTime.dwHighDateTime=0x1d4cab9, nFileSizeHigh=0x0, nFileSizeLow=0xf035, dwReserved0=0x0, dwReserved1=0x0, cFileName="G95N55ATuhl.m4a", cAlternateFileName="G95N55~1.M4A")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca985e00, ftCreationTime.dwHighDateTime=0x1d4c719, ftLastAccessTime.dwLowDateTime=0x209cd7c0, ftLastAccessTime.dwHighDateTime=0x1d4cb7c, ftLastWriteTime.dwLowDateTime=0x209cd7c0, ftLastWriteTime.dwHighDateTime=0x1d4cb7c, nFileSizeHigh=0x0, nFileSizeLow=0x76f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gy8J4E75wX.bmp", cAlternateFileName="GY8J4E~1.BMP")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4682e0e0, ftCreationTime.dwHighDateTime=0x1d4cb33, ftLastAccessTime.dwLowDateTime=0x54f837c0, ftLastAccessTime.dwHighDateTime=0x1d4d4a6, ftLastWriteTime.dwLowDateTime=0x54f837c0, ftLastWriteTime.dwHighDateTime=0x1d4d4a6, nFileSizeHigh=0x0, nFileSizeLow=0x550f, dwReserved0=0x0, dwReserved1=0x0, cFileName="H5gPbEmPYuTdi.mkv", cAlternateFileName="H5GPBE~1.MKV")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bf4900, ftCreationTime.dwHighDateTime=0x1d4c8c9, ftLastAccessTime.dwLowDateTime=0x3dea5e60, ftLastAccessTime.dwHighDateTime=0x1d4cded, ftLastWriteTime.dwLowDateTime=0x3dea5e60, ftLastWriteTime.dwHighDateTime=0x1d4cded, nFileSizeHigh=0x0, nFileSizeLow=0x174b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="i3kwwI3l2UIwG_9YyT.ppt", cAlternateFileName="I3KWWI~1.PPT")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x186ce9a0, ftCreationTime.dwHighDateTime=0x1d4d55e, ftLastAccessTime.dwLowDateTime=0xe28373a0, ftLastAccessTime.dwHighDateTime=0x1d4c8d2, ftLastWriteTime.dwLowDateTime=0xe28373a0, ftLastWriteTime.dwHighDateTime=0x1d4c8d2, nFileSizeHigh=0x0, nFileSizeLow=0xc65d, dwReserved0=0x0, dwReserved1=0x0, cFileName="iKnGUjjWNW-v8w71.bmp", cAlternateFileName="IKNGUJ~1.BMP")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba8d740, ftCreationTime.dwHighDateTime=0x1d4d584, ftLastAccessTime.dwLowDateTime=0x38157cb0, ftLastAccessTime.dwHighDateTime=0x1d4d4ad, ftLastWriteTime.dwLowDateTime=0x38157cb0, ftLastWriteTime.dwHighDateTime=0x1d4d4ad, nFileSizeHigh=0x0, nFileSizeLow=0xf01d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Li3lP9jcxkTD.gif", cAlternateFileName="LI3LP9~1.GIF")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff7320, ftCreationTime.dwHighDateTime=0x1d4d5a0, ftLastAccessTime.dwLowDateTime=0x2ee01fc0, ftLastAccessTime.dwHighDateTime=0x1d4c615, ftLastWriteTime.dwLowDateTime=0x2ee01fc0, ftLastWriteTime.dwHighDateTime=0x1d4c615, nFileSizeHigh=0x0, nFileSizeLow=0x6b44, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnrHHjSzs_xeTuxs.png", cAlternateFileName="ONRHHJ~1.PNG")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac9f16a0, ftCreationTime.dwHighDateTime=0x1d4d4c5, ftLastAccessTime.dwLowDateTime=0x8d0c4d50, ftLastAccessTime.dwHighDateTime=0x1d4cbe5, ftLastWriteTime.dwLowDateTime=0x8d0c4d50, ftLastWriteTime.dwHighDateTime=0x1d4cbe5, nFileSizeHigh=0x0, nFileSizeLow=0x4d97, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oo5GDTRp-enXaV1O6O.bmp", cAlternateFileName="OO5GDT~1.BMP")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x255fa620, ftCreationTime.dwHighDateTime=0x1d4d473, ftLastAccessTime.dwLowDateTime=0xe20e6c0, ftLastAccessTime.dwHighDateTime=0x1d4cc0f, ftLastWriteTime.dwLowDateTime=0xe20e6c0, ftLastWriteTime.dwHighDateTime=0x1d4cc0f, nFileSizeHigh=0x0, nFileSizeLow=0x937b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pseeu3HMh6EDtZDO.flv", cAlternateFileName="PSEEU3~1.FLV")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50da73b0, ftCreationTime.dwHighDateTime=0x1d4d299, ftLastAccessTime.dwLowDateTime=0x3ce51a40, ftLastAccessTime.dwHighDateTime=0x1d4caf6, ftLastWriteTime.dwLowDateTime=0x3ce51a40, ftLastWriteTime.dwHighDateTime=0x1d4caf6, nFileSizeHigh=0x0, nFileSizeLow=0x15230, dwReserved0=0x0, dwReserved1=0x0, cFileName="QL_s 8.ots", cAlternateFileName="QL_S8~1.OTS")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35502240, ftCreationTime.dwHighDateTime=0x1d4cdf6, ftLastAccessTime.dwLowDateTime=0xae280a0, ftLastAccessTime.dwHighDateTime=0x1d4c9ca, ftLastWriteTime.dwLowDateTime=0xae280a0, ftLastWriteTime.dwHighDateTime=0x1d4c9ca, nFileSizeHigh=0x0, nFileSizeLow=0xad32, dwReserved0=0x0, dwReserved1=0x0, cFileName="rKPShCaIN6vI1.ppt", cAlternateFileName="RKPSHC~1.PPT")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe11f9500, ftCreationTime.dwHighDateTime=0x1d57293, ftLastAccessTime.dwLowDateTime=0xe11f9500, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xdfee6800, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x49c53, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsfd234df.exe", cAlternateFileName="RSFD23~1.EXE")) returned 1
	[0231.068] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96d3440, ftCreationTime.dwHighDateTime=0x1d4cd49, ftLastAccessTime.dwLowDateTime=0xa20ff0c0, ftLastAccessTime.dwHighDateTime=0x1d4ca38, ftLastWriteTime.dwLowDateTime=0xa20ff0c0, ftLastWriteTime.dwHighDateTime=0x1d4ca38, nFileSizeHigh=0x0, nFileSizeLow=0x16210, dwReserved0=0x0, dwReserved1=0x0, cFileName="rvkjuWQ3l.swf", cAlternateFileName="RVKJUW~1.SWF")) returned 1
	[0231.069] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0067ba0, ftCreationTime.dwHighDateTime=0x1d4d28f, ftLastAccessTime.dwLowDateTime=0xeb62c5b0, ftLastAccessTime.dwHighDateTime=0x1d4d035, ftLastWriteTime.dwLowDateTime=0xeb62c5b0, ftLastWriteTime.dwHighDateTime=0x1d4d035, nFileSizeHigh=0x0, nFileSizeLow=0x72ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="s2OQhIVXZRs5l.rtf", cAlternateFileName="S2OQHI~1.RTF")) returned 1
	[0231.069] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce61c1b0, ftCreationTime.dwHighDateTime=0x1d4c940, ftLastAccessTime.dwLowDateTime=0xb65bf280, ftLastAccessTime.dwHighDateTime=0x1d4d1d7, ftLastWriteTime.dwLowDateTime=0xb65bf280, ftLastWriteTime.dwHighDateTime=0x1d4d1d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tZ10w1B aODX", cAlternateFileName="TZ10W1~1")) returned 1
	[0231.069] GetProcessHeap () returned 0x800000
	[0231.069] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0231.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tZ10w1B aODX\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce61c1b0, ftCreationTime.dwHighDateTime=0x1d4c940, ftLastAccessTime.dwLowDateTime=0xb65bf280, ftLastAccessTime.dwHighDateTime=0x1d4d1d7, ftLastWriteTime.dwLowDateTime=0xb65bf280, ftLastWriteTime.dwHighDateTime=0x1d4d1d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0231.070] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xce61c1b0, ftCreationTime.dwHighDateTime=0x1d4c940, ftLastAccessTime.dwLowDateTime=0xb65bf280, ftLastAccessTime.dwHighDateTime=0x1d4d1d7, ftLastWriteTime.dwLowDateTime=0xb65bf280, ftLastWriteTime.dwHighDateTime=0x1d4d1d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.071] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3764f0, ftCreationTime.dwHighDateTime=0x1d4d4fe, ftLastAccessTime.dwLowDateTime=0xe4b6ac00, ftLastAccessTime.dwHighDateTime=0x1d4cee0, ftLastWriteTime.dwLowDateTime=0xe4b6ac00, ftLastWriteTime.dwHighDateTime=0x1d4cee0, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="5Shu8Wz.mp3", cAlternateFileName="")) returned 1
	[0231.071] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c6bf60, ftCreationTime.dwHighDateTime=0x1d4cea0, ftLastAccessTime.dwLowDateTime=0x724bcfa0, ftLastAccessTime.dwHighDateTime=0x1d4cbe4, ftLastWriteTime.dwLowDateTime=0x724bcfa0, ftLastWriteTime.dwHighDateTime=0x1d4cbe4, nFileSizeHigh=0x0, nFileSizeLow=0x61fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="8xtlp.gif", cAlternateFileName="")) returned 1
	[0231.071] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7afec5a0, ftCreationTime.dwHighDateTime=0x1d4c782, ftLastAccessTime.dwLowDateTime=0x32e245a0, ftLastAccessTime.dwHighDateTime=0x1d4cded, ftLastWriteTime.dwLowDateTime=0x32e245a0, ftLastWriteTime.dwHighDateTime=0x1d4cded, nFileSizeHigh=0x0, nFileSizeLow=0x154bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9vPksYTTq.pdf", cAlternateFileName="9VPKSY~1.PDF")) returned 1
	[0231.071] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc77c800, ftCreationTime.dwHighDateTime=0x1d4ce75, ftLastAccessTime.dwLowDateTime=0x2007f8f0, ftLastAccessTime.dwHighDateTime=0x1d4cd78, ftLastWriteTime.dwLowDateTime=0x2007f8f0, ftLastWriteTime.dwHighDateTime=0x1d4cd78, nFileSizeHigh=0x0, nFileSizeLow=0x6da6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gZGgwoeda1ifw Ynw.png", cAlternateFileName="GZGGWO~1.PNG")) returned 1
	[0231.071] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb903cf90, ftCreationTime.dwHighDateTime=0x1d4c948, ftLastAccessTime.dwLowDateTime=0x55106dc0, ftLastAccessTime.dwHighDateTime=0x1d4c5cb, ftLastWriteTime.dwLowDateTime=0x55106dc0, ftLastWriteTime.dwHighDateTime=0x1d4c5cb, nFileSizeHigh=0x0, nFileSizeLow=0xb058, dwReserved0=0x0, dwReserved1=0x0, cFileName="KcEEPth4x.mp3", cAlternateFileName="KCEEPT~1.MP3")) returned 1
	[0231.071] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2650a0, ftCreationTime.dwHighDateTime=0x1d4cd5a, ftLastAccessTime.dwLowDateTime=0xd55e8750, ftLastAccessTime.dwHighDateTime=0x1d4cf12, ftLastWriteTime.dwLowDateTime=0xd55e8750, ftLastWriteTime.dwHighDateTime=0x1d4cf12, nFileSizeHigh=0x0, nFileSizeLow=0xf93d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegJtC.m4a", cAlternateFileName="")) returned 1
	[0231.071] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2650a0, ftCreationTime.dwHighDateTime=0x1d4cd5a, ftLastAccessTime.dwLowDateTime=0xd55e8750, ftLastAccessTime.dwHighDateTime=0x1d4cf12, ftLastWriteTime.dwLowDateTime=0xd55e8750, ftLastWriteTime.dwHighDateTime=0x1d4cf12, nFileSizeHigh=0x0, nFileSizeLow=0xf93d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegJtC.m4a", cAlternateFileName="")) returned 0
	[0231.071] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0231.072] GetProcessHeap () returned 0x800000
	[0231.072] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0231.072] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8056a670, ftCreationTime.dwHighDateTime=0x1d4c715, ftLastAccessTime.dwLowDateTime=0xf738850, ftLastAccessTime.dwHighDateTime=0x1d4d47c, ftLastWriteTime.dwLowDateTime=0xf738850, ftLastWriteTime.dwHighDateTime=0x1d4d47c, nFileSizeHigh=0x0, nFileSizeLow=0x16f2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="xNw 6LT8Xj3CsX4s9.jpg", cAlternateFileName="XNW6LT~1.JPG")) returned 1
	[0231.072] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4994b6b0, ftCreationTime.dwHighDateTime=0x1d4ce52, ftLastAccessTime.dwLowDateTime=0x570f4140, ftLastAccessTime.dwHighDateTime=0x1d4cf5e, ftLastWriteTime.dwLowDateTime=0x570f4140, ftLastWriteTime.dwHighDateTime=0x1d4cf5e, nFileSizeHigh=0x0, nFileSizeLow=0x26fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="xXeTGpf2HP.pps", cAlternateFileName="XXETGP~1.PPS")) returned 1
	[0231.072] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ddafb00, ftCreationTime.dwHighDateTime=0x1d4c743, ftLastAccessTime.dwLowDateTime=0x23520350, ftLastAccessTime.dwHighDateTime=0x1d4d2e8, ftLastWriteTime.dwLowDateTime=0x23520350, ftLastWriteTime.dwHighDateTime=0x1d4d2e8, nFileSizeHigh=0x0, nFileSizeLow=0x63da, dwReserved0=0x0, dwReserved1=0x0, cFileName="yYuS0NRmf4-BpG.pps", cAlternateFileName="YYUS0N~1.PPS")) returned 1
	[0231.072] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7909fe0, ftCreationTime.dwHighDateTime=0x1d4c989, ftLastAccessTime.dwLowDateTime=0xf68540d0, ftLastAccessTime.dwHighDateTime=0x1d4d341, ftLastWriteTime.dwLowDateTime=0xf68540d0, ftLastWriteTime.dwHighDateTime=0x1d4d341, nFileSizeHigh=0x0, nFileSizeLow=0x8017, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ZeLuhZYE_mhXjCz.mp4", cAlternateFileName="_ZELUH~1.MP4")) returned 1
	[0231.072] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7909fe0, ftCreationTime.dwHighDateTime=0x1d4c989, ftLastAccessTime.dwLowDateTime=0xf68540d0, ftLastAccessTime.dwHighDateTime=0x1d4d341, ftLastWriteTime.dwLowDateTime=0xf68540d0, ftLastWriteTime.dwHighDateTime=0x1d4d341, nFileSizeHigh=0x0, nFileSizeLow=0x8017, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ZeLuhZYE_mhXjCz.mp4", cAlternateFileName="_ZELUH~1.MP4")) returned 0
	[0231.072] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0231.073] GetProcessHeap () returned 0x800000
	[0231.073] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0231.073] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe55e30e0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe55e30e0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0231.073] GetProcessHeap () returned 0x800000
	[0231.073] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0231.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe55e30e0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe55e30e0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0231.073] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe55e30e0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe55e30e0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.074] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbf4a40, ftCreationTime.dwHighDateTime=0x1d4c999, ftLastAccessTime.dwLowDateTime=0x3ae85050, ftLastAccessTime.dwHighDateTime=0x1d4cb2c, ftLastWriteTime.dwLowDateTime=0x3ae85050, ftLastWriteTime.dwHighDateTime=0x1d4cb2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3u48sJt", cAlternateFileName="")) returned 1
	[0231.074] GetProcessHeap () returned 0x800000
	[0231.074] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0231.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3u48sJt\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbf4a40, ftCreationTime.dwHighDateTime=0x1d4c999, ftLastAccessTime.dwLowDateTime=0x3ae85050, ftLastAccessTime.dwHighDateTime=0x1d4cb2c, ftLastWriteTime.dwLowDateTime=0x3ae85050, ftLastWriteTime.dwHighDateTime=0x1d4cb2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0231.076] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fbf4a40, ftCreationTime.dwHighDateTime=0x1d4c999, ftLastAccessTime.dwLowDateTime=0x3ae85050, ftLastAccessTime.dwHighDateTime=0x1d4cb2c, ftLastWriteTime.dwLowDateTime=0x3ae85050, ftLastWriteTime.dwHighDateTime=0x1d4cb2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.076] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3ecc230, ftCreationTime.dwHighDateTime=0x1d4cc1b, ftLastAccessTime.dwLowDateTime=0x461d09f0, ftLastAccessTime.dwHighDateTime=0x1d4d3d5, ftLastWriteTime.dwLowDateTime=0x461d09f0, ftLastWriteTime.dwHighDateTime=0x1d4d3d5, nFileSizeHigh=0x0, nFileSizeLow=0x16c89, dwReserved0=0x0, dwReserved1=0x0, cFileName="LvowdKUNKe1h jUl.odp", cAlternateFileName="LVOWDK~1.ODP")) returned 1
	[0231.076] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaf6ef90, ftCreationTime.dwHighDateTime=0x1d4cc60, ftLastAccessTime.dwLowDateTime=0x91e531f0, ftLastAccessTime.dwHighDateTime=0x1d4ce1c, ftLastWriteTime.dwLowDateTime=0x91e531f0, ftLastWriteTime.dwHighDateTime=0x1d4ce1c, nFileSizeHigh=0x0, nFileSizeLow=0x6621, dwReserved0=0x0, dwReserved1=0x0, cFileName="mhJIcc-_7dF2LIJrL6w.rtf", cAlternateFileName="MHJICC~1.RTF")) returned 1
	[0231.076] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6388fe0, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0xc5835ce0, ftLastAccessTime.dwHighDateTime=0x1d4d45b, ftLastWriteTime.dwLowDateTime=0xc5835ce0, ftLastWriteTime.dwHighDateTime=0x1d4d45b, nFileSizeHigh=0x0, nFileSizeLow=0x89f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="zMhVsm2dCGEWtaj-s.odp", cAlternateFileName="ZMHVSM~1.ODP")) returned 1
	[0231.076] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6388fe0, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0xc5835ce0, ftLastAccessTime.dwHighDateTime=0x1d4d45b, ftLastWriteTime.dwLowDateTime=0xc5835ce0, ftLastWriteTime.dwHighDateTime=0x1d4d45b, nFileSizeHigh=0x0, nFileSizeLow=0x89f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="zMhVsm2dCGEWtaj-s.odp", cAlternateFileName="ZMHVSM~1.ODP")) returned 0
	[0231.076] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0231.077] GetProcessHeap () returned 0x800000
	[0231.077] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0231.077] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e1d1ee0, ftCreationTime.dwHighDateTime=0x1d4d06a, ftLastAccessTime.dwLowDateTime=0xca7950c0, ftLastAccessTime.dwHighDateTime=0x1d4d13f, ftLastWriteTime.dwLowDateTime=0xca7950c0, ftLastWriteTime.dwHighDateTime=0x1d4d13f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="74u4buU24LFNYJjVbOVY", cAlternateFileName="74U4BU~1")) returned 1
	[0231.077] GetProcessHeap () returned 0x800000
	[0231.077] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0231.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\74u4buU24LFNYJjVbOVY\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e1d1ee0, ftCreationTime.dwHighDateTime=0x1d4d06a, ftLastAccessTime.dwLowDateTime=0xca7950c0, ftLastAccessTime.dwHighDateTime=0x1d4d13f, ftLastWriteTime.dwLowDateTime=0xca7950c0, ftLastWriteTime.dwHighDateTime=0x1d4d13f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0231.078] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e1d1ee0, ftCreationTime.dwHighDateTime=0x1d4d06a, ftLastAccessTime.dwLowDateTime=0xca7950c0, ftLastAccessTime.dwHighDateTime=0x1d4d13f, ftLastWriteTime.dwLowDateTime=0xca7950c0, ftLastWriteTime.dwHighDateTime=0x1d4d13f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.078] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e923020, ftCreationTime.dwHighDateTime=0x1d4d406, ftLastAccessTime.dwLowDateTime=0x86db13e0, ftLastAccessTime.dwHighDateTime=0x1d4c86a, ftLastWriteTime.dwLowDateTime=0x86db13e0, ftLastWriteTime.dwHighDateTime=0x1d4c86a, nFileSizeHigh=0x0, nFileSizeLow=0xe76a, dwReserved0=0x0, dwReserved1=0x0, cFileName="1cdPlnabgH9NmuLt.odp", cAlternateFileName="1CDPLN~1.ODP")) returned 1
	[0231.078] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe006a480, ftCreationTime.dwHighDateTime=0x1d4c5f8, ftLastAccessTime.dwLowDateTime=0xd4efe850, ftLastAccessTime.dwHighDateTime=0x1d4d015, ftLastWriteTime.dwLowDateTime=0xd4efe850, ftLastWriteTime.dwHighDateTime=0x1d4d015, nFileSizeHigh=0x0, nFileSizeLow=0xadac, dwReserved0=0x0, dwReserved1=0x0, cFileName="3HLa_AdzzNI.doc", cAlternateFileName="3HLA_A~1.DOC")) returned 1
	[0231.078] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1d56e0, ftCreationTime.dwHighDateTime=0x1d4caf5, ftLastAccessTime.dwLowDateTime=0x67e52ea0, ftLastAccessTime.dwHighDateTime=0x1d4d024, ftLastWriteTime.dwLowDateTime=0x67e52ea0, ftLastWriteTime.dwHighDateTime=0x1d4d024, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fSXmW00aE83k72B1.docx", cAlternateFileName="FSXMW0~1.DOC")) returned 1
	[0231.078] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d2bb2c0, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0x3cbb1330, ftLastAccessTime.dwHighDateTime=0x1d4c547, ftLastWriteTime.dwLowDateTime=0x3cbb1330, ftLastWriteTime.dwHighDateTime=0x1d4c547, nFileSizeHigh=0x0, nFileSizeLow=0x99b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="gaCgxnfRD.rtf", cAlternateFileName="GACGXN~1.RTF")) returned 1
	[0231.079] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5995c50, ftCreationTime.dwHighDateTime=0x1d4ca50, ftLastAccessTime.dwLowDateTime=0xd49e2660, ftLastAccessTime.dwHighDateTime=0x1d4c673, ftLastWriteTime.dwLowDateTime=0xd49e2660, ftLastWriteTime.dwHighDateTime=0x1d4c673, nFileSizeHigh=0x0, nFileSizeLow=0x43e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hny6x.xlsx", cAlternateFileName="HNY6X~1.XLS")) returned 1
	[0231.079] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5995c50, ftCreationTime.dwHighDateTime=0x1d4ca50, ftLastAccessTime.dwLowDateTime=0xd49e2660, ftLastAccessTime.dwHighDateTime=0x1d4c673, ftLastWriteTime.dwLowDateTime=0xd49e2660, ftLastWriteTime.dwHighDateTime=0x1d4c673, nFileSizeHigh=0x0, nFileSizeLow=0x43e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hny6x.xlsx", cAlternateFileName="HNY6X~1.XLS")) returned 0
	[0231.079] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0231.081] GetProcessHeap () returned 0x800000
	[0231.081] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0231.081] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc6f0fe0, ftCreationTime.dwHighDateTime=0x1d56378, ftLastAccessTime.dwLowDateTime=0xdcb6e430, ftLastAccessTime.dwHighDateTime=0x1d52a88, ftLastWriteTime.dwLowDateTime=0xdcb6e430, ftLastWriteTime.dwHighDateTime=0x1d52a88, nFileSizeHigh=0x0, nFileSizeLow=0x15bfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7CuMIpLbCQ.pptx", cAlternateFileName="7CUMIP~1.PPT")) returned 1
	[0231.089] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8a20b0, ftCreationTime.dwHighDateTime=0x1d4f283, ftLastAccessTime.dwLowDateTime=0x69c92e60, ftLastAccessTime.dwHighDateTime=0x1d5247a, ftLastWriteTime.dwLowDateTime=0x69c92e60, ftLastWriteTime.dwHighDateTime=0x1d5247a, nFileSizeHigh=0x0, nFileSizeLow=0xea64, dwReserved0=0x0, dwReserved1=0x0, cFileName="aB92Iv8_7tPp.xlsx", cAlternateFileName="AB92IV~1.XLS")) returned 1
	[0231.089] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62939ae0, ftCreationTime.dwHighDateTime=0x1d54b5d, ftLastAccessTime.dwLowDateTime=0x3d7cc680, ftLastAccessTime.dwHighDateTime=0x1d53e9e, ftLastWriteTime.dwLowDateTime=0x3d7cc680, ftLastWriteTime.dwHighDateTime=0x1d53e9e, nFileSizeHigh=0x0, nFileSizeLow=0x10ed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AgHQxsUf.docx", cAlternateFileName="AGHQXS~1.DOC")) returned 1
	[0231.089] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1666b5e0, ftCreationTime.dwHighDateTime=0x1d4d44c, ftLastAccessTime.dwLowDateTime=0x497f8c70, ftLastAccessTime.dwHighDateTime=0x1d4cfd0, ftLastWriteTime.dwLowDateTime=0x497f8c70, ftLastWriteTime.dwHighDateTime=0x1d4cfd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="c2NqvezXwN8A5K", cAlternateFileName="C2NQVE~1")) returned 1
	[0231.091] GetProcessHeap () returned 0x800000
	[0231.091] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0231.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c2NqvezXwN8A5K\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1666b5e0, ftCreationTime.dwHighDateTime=0x1d4d44c, ftLastAccessTime.dwLowDateTime=0x497f8c70, ftLastAccessTime.dwHighDateTime=0x1d4cfd0, ftLastWriteTime.dwLowDateTime=0x497f8c70, ftLastWriteTime.dwHighDateTime=0x1d4cfd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0231.110] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1666b5e0, ftCreationTime.dwHighDateTime=0x1d4d44c, ftLastAccessTime.dwLowDateTime=0x497f8c70, ftLastAccessTime.dwHighDateTime=0x1d4cfd0, ftLastWriteTime.dwLowDateTime=0x497f8c70, ftLastWriteTime.dwHighDateTime=0x1d4cfd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.110] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80174350, ftCreationTime.dwHighDateTime=0x1d4cef3, ftLastAccessTime.dwLowDateTime=0xfb99e730, ftLastAccessTime.dwHighDateTime=0x1d4c949, ftLastWriteTime.dwLowDateTime=0xfb99e730, ftLastWriteTime.dwHighDateTime=0x1d4c949, nFileSizeHigh=0x0, nFileSizeLow=0x3dea, dwReserved0=0x0, dwReserved1=0x0, cFileName="g003JazQMDFm60.ods", cAlternateFileName="G003JA~1.ODS")) returned 1
	[0231.110] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5286f720, ftCreationTime.dwHighDateTime=0x1d4d54a, ftLastAccessTime.dwLowDateTime=0xfe5c9fc0, ftLastAccessTime.dwHighDateTime=0x1d4d093, ftLastWriteTime.dwLowDateTime=0xfe5c9fc0, ftLastWriteTime.dwHighDateTime=0x1d4d093, nFileSizeHigh=0x0, nFileSizeLow=0xc05d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tD 1t4 EldcsbP.xls", cAlternateFileName="TD1T4E~1.XLS")) returned 1
	[0231.111] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289ded20, ftCreationTime.dwHighDateTime=0x1d4caef, ftLastAccessTime.dwLowDateTime=0x95530350, ftLastAccessTime.dwHighDateTime=0x1d4c94c, ftLastWriteTime.dwLowDateTime=0x95530350, ftLastWriteTime.dwHighDateTime=0x1d4c94c, nFileSizeHigh=0x0, nFileSizeLow=0x108b, dwReserved0=0x0, dwReserved1=0x0, cFileName="yzr70lVMS.pdf", cAlternateFileName="YZR70L~1.PDF")) returned 1
	[0231.111] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289ded20, ftCreationTime.dwHighDateTime=0x1d4caef, ftLastAccessTime.dwLowDateTime=0x95530350, ftLastAccessTime.dwHighDateTime=0x1d4c94c, ftLastWriteTime.dwLowDateTime=0x95530350, ftLastWriteTime.dwHighDateTime=0x1d4c94c, nFileSizeHigh=0x0, nFileSizeLow=0x108b, dwReserved0=0x0, dwReserved1=0x0, cFileName="yzr70lVMS.pdf", cAlternateFileName="YZR70L~1.PDF")) returned 0
	[0231.111] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0231.112] GetProcessHeap () returned 0x800000
	[0231.112] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0231.112] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0231.112] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf39c4c90, ftCreationTime.dwHighDateTime=0x1d4f24c, ftLastAccessTime.dwLowDateTime=0x51f7d40, ftLastAccessTime.dwHighDateTime=0x1d50af6, ftLastWriteTime.dwLowDateTime=0x51f7d40, ftLastWriteTime.dwHighDateTime=0x1d50af6, nFileSizeHigh=0x0, nFileSizeLow=0x17280, dwReserved0=0x0, dwReserved1=0x0, cFileName="e1kvyGUD.pptx", cAlternateFileName="E1KVYG~1.PPT")) returned 1
	[0231.112] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289e2be0, ftCreationTime.dwHighDateTime=0x1d50ac4, ftLastAccessTime.dwLowDateTime=0x7a3f2720, ftLastAccessTime.dwHighDateTime=0x1d56abd, ftLastWriteTime.dwLowDateTime=0x7a3f2720, ftLastWriteTime.dwHighDateTime=0x1d56abd, nFileSizeHigh=0x0, nFileSizeLow=0x12e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mfgb3xQZDgybA.xlsx", cAlternateFileName="MFGB3X~1.XLS")) returned 1
	[0231.112] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0231.112] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0231.112] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1
	[0231.112] GetProcessHeap () returned 0x800000
	[0231.112] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0231.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0231.113] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.113] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0231.113] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1
	[0231.113] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1
	[0231.113] GetProcessHeap () returned 0x800000
	[0231.113] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0231.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0231.114] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.114] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0231.114] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0
	[0231.114] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0231.114] GetProcessHeap () returned 0x800000
	[0231.114] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0231.114] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0
	[0231.114] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0231.115] GetProcessHeap () returned 0x800000
	[0231.115] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0231.115] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0231.115] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x300a6020, ftCreationTime.dwHighDateTime=0x1d5399e, ftLastAccessTime.dwLowDateTime=0x66412b50, ftLastAccessTime.dwHighDateTime=0x1d4e87d, ftLastWriteTime.dwLowDateTime=0x66412b50, ftLastWriteTime.dwHighDateTime=0x1d4e87d, nFileSizeHigh=0x0, nFileSizeLow=0x11668, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nFEx3j8NUCU.pptx", cAlternateFileName="NFEX3J~1.PPT")) returned 1
	[0231.115] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39440610, ftCreationTime.dwHighDateTime=0x1d5058b, ftLastAccessTime.dwLowDateTime=0x4380d20, ftLastAccessTime.dwHighDateTime=0x1d50beb, ftLastWriteTime.dwLowDateTime=0x4380d20, ftLastWriteTime.dwHighDateTime=0x1d50beb, nFileSizeHigh=0x0, nFileSizeLow=0x3e91, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nvWAFxy45tLtoAl0Nr0.pptx", cAlternateFileName="NVWAFX~1.PPT")) returned 1
	[0231.115] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fd2200, ftCreationTime.dwHighDateTime=0x1d50a06, ftLastAccessTime.dwLowDateTime=0xaa25d400, ftLastAccessTime.dwHighDateTime=0x1d5018d, ftLastWriteTime.dwLowDateTime=0xaa25d400, ftLastWriteTime.dwHighDateTime=0x1d5018d, nFileSizeHigh=0x0, nFileSizeLow=0xbce4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OsZQJdLl7SgkzoVFwlhd.xlsx", cAlternateFileName="OSZQJD~1.XLS")) returned 1
	[0231.115] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1
	[0231.115] GetProcessHeap () returned 0x800000
	[0231.115] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0231.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0231.345] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.345] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1
	[0231.345] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0
	[0231.345] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0231.346] GetProcessHeap () returned 0x800000
	[0231.346] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0231.346] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6170290, ftCreationTime.dwHighDateTime=0x1d517ad, ftLastAccessTime.dwLowDateTime=0xcd353e70, ftLastAccessTime.dwHighDateTime=0x1d56fda, ftLastWriteTime.dwLowDateTime=0xcd353e70, ftLastWriteTime.dwHighDateTime=0x1d56fda, nFileSizeHigh=0x0, nFileSizeLow=0xb9fe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qbyEvt.docx", cAlternateFileName="QBYEVT~1.DOC")) returned 1
	[0231.346] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60c33f30, ftCreationTime.dwHighDateTime=0x1d50626, ftLastAccessTime.dwLowDateTime=0x5f4cc70, ftLastAccessTime.dwHighDateTime=0x1d50fc9, ftLastWriteTime.dwLowDateTime=0x5f4cc70, ftLastWriteTime.dwHighDateTime=0x1d50fc9, nFileSizeHigh=0x0, nFileSizeLow=0x11aa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rjxbmbhu.docx", cAlternateFileName="RJXBMB~1.DOC")) returned 1
	[0231.346] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12d4a070, ftCreationTime.dwHighDateTime=0x1d5379f, ftLastAccessTime.dwLowDateTime=0xa09355c0, ftLastAccessTime.dwHighDateTime=0x1d55778, ftLastWriteTime.dwLowDateTime=0xa09355c0, ftLastWriteTime.dwHighDateTime=0x1d55778, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sbXsk0XN9LvK6OLD.xlsx", cAlternateFileName="SBXSK0~1.XLS")) returned 1
	[0231.346] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87ecdd60, ftCreationTime.dwHighDateTime=0x1d50f08, ftLastAccessTime.dwLowDateTime=0x77950140, ftLastAccessTime.dwHighDateTime=0x1d52399, ftLastWriteTime.dwLowDateTime=0x77950140, ftLastWriteTime.dwHighDateTime=0x1d52399, nFileSizeHigh=0x0, nFileSizeLow=0x11836, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="smkaFBw7P2d.xlsx", cAlternateFileName="SMKAFB~1.XLS")) returned 1
	[0231.346] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da57b00, ftCreationTime.dwHighDateTime=0x1d4fffe, ftLastAccessTime.dwLowDateTime=0x996aef0, ftLastAccessTime.dwHighDateTime=0x1d5254c, ftLastWriteTime.dwLowDateTime=0x996aef0, ftLastWriteTime.dwHighDateTime=0x1d5254c, nFileSizeHigh=0x0, nFileSizeLow=0xb701, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t7ymn5CfsRlNWRcQ9i.docx", cAlternateFileName="T7YMN5~1.DOC")) returned 1
	[0231.346] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x686e3a60, ftCreationTime.dwHighDateTime=0x1d4d209, ftLastAccessTime.dwLowDateTime=0x597874e0, ftLastAccessTime.dwHighDateTime=0x1d4d447, ftLastWriteTime.dwLowDateTime=0x597874e0, ftLastWriteTime.dwHighDateTime=0x1d4d447, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TlJQs", cAlternateFileName="")) returned 1
	[0231.346] GetProcessHeap () returned 0x800000
	[0231.346] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0231.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TlJQs\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x686e3a60, ftCreationTime.dwHighDateTime=0x1d4d209, ftLastAccessTime.dwLowDateTime=0x597874e0, ftLastAccessTime.dwHighDateTime=0x1d4d447, ftLastWriteTime.dwLowDateTime=0x597874e0, ftLastWriteTime.dwHighDateTime=0x1d4d447, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0231.617] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x686e3a60, ftCreationTime.dwHighDateTime=0x1d4d209, ftLastAccessTime.dwLowDateTime=0x597874e0, ftLastAccessTime.dwHighDateTime=0x1d4d447, ftLastWriteTime.dwLowDateTime=0x597874e0, ftLastWriteTime.dwHighDateTime=0x1d4d447, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.617] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcadfb130, ftCreationTime.dwHighDateTime=0x1d4cdb1, ftLastAccessTime.dwLowDateTime=0x91b64280, ftLastAccessTime.dwHighDateTime=0x1d4c5f4, ftLastWriteTime.dwLowDateTime=0x91b64280, ftLastWriteTime.dwHighDateTime=0x1d4c5f4, nFileSizeHigh=0x0, nFileSizeLow=0xe7a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gK5WL3Ayp.rtf", cAlternateFileName="GK5WL3~1.RTF")) returned 1
	[0231.617] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcadfb130, ftCreationTime.dwHighDateTime=0x1d4cdb1, ftLastAccessTime.dwLowDateTime=0x91b64280, ftLastAccessTime.dwHighDateTime=0x1d4c5f4, ftLastWriteTime.dwLowDateTime=0x91b64280, ftLastWriteTime.dwHighDateTime=0x1d4c5f4, nFileSizeHigh=0x0, nFileSizeLow=0xe7a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gK5WL3Ayp.rtf", cAlternateFileName="GK5WL3~1.RTF")) returned 0
	[0231.617] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0231.617] GetProcessHeap () returned 0x800000
	[0231.617] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0231.617] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe1e550, ftCreationTime.dwHighDateTime=0x1d4d194, ftLastAccessTime.dwLowDateTime=0x2fd44620, ftLastAccessTime.dwHighDateTime=0x1d4c8ba, ftLastWriteTime.dwLowDateTime=0x2fd44620, ftLastWriteTime.dwHighDateTime=0x1d4c8ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vXfjgJ2OdK_vHv", cAlternateFileName="VXFJGJ~1")) returned 1
	[0231.618] GetProcessHeap () returned 0x800000
	[0231.618] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0231.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vXfjgJ2OdK_vHv\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe1e550, ftCreationTime.dwHighDateTime=0x1d4d194, ftLastAccessTime.dwLowDateTime=0x2fd44620, ftLastAccessTime.dwHighDateTime=0x1d4c8ba, ftLastWriteTime.dwLowDateTime=0x2fd44620, ftLastWriteTime.dwHighDateTime=0x1d4c8ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0231.783] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe1e550, ftCreationTime.dwHighDateTime=0x1d4d194, ftLastAccessTime.dwLowDateTime=0x2fd44620, ftLastAccessTime.dwHighDateTime=0x1d4c8ba, ftLastWriteTime.dwLowDateTime=0x2fd44620, ftLastWriteTime.dwHighDateTime=0x1d4c8ba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.783] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db22850, ftCreationTime.dwHighDateTime=0x1d4c56b, ftLastAccessTime.dwLowDateTime=0x2c762b70, ftLastAccessTime.dwHighDateTime=0x1d4c814, ftLastWriteTime.dwLowDateTime=0x2c762b70, ftLastWriteTime.dwHighDateTime=0x1d4c814, nFileSizeHigh=0x0, nFileSizeLow=0xa8c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="933_LnwnVCiAi.rtf", cAlternateFileName="933_LN~1.RTF")) returned 1
	[0231.783] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d30330, ftCreationTime.dwHighDateTime=0x1d4d43f, ftLastAccessTime.dwLowDateTime=0x53035f10, ftLastAccessTime.dwHighDateTime=0x1d4c620, ftLastWriteTime.dwLowDateTime=0x53035f10, ftLastWriteTime.dwHighDateTime=0x1d4c620, nFileSizeHigh=0x0, nFileSizeLow=0xb870, dwReserved0=0x0, dwReserved1=0x0, cFileName="a5RBPh39gn504bwKk.pps", cAlternateFileName="A5RBPH~1.PPS")) returned 1
	[0231.783] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1941a030, ftCreationTime.dwHighDateTime=0x1d4cff7, ftLastAccessTime.dwLowDateTime=0x9aaf22c0, ftLastAccessTime.dwHighDateTime=0x1d4cab4, ftLastWriteTime.dwLowDateTime=0x9aaf22c0, ftLastWriteTime.dwHighDateTime=0x1d4cab4, nFileSizeHigh=0x0, nFileSizeLow=0x188cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAX5vbf6gRUGHvs.xlsx", cAlternateFileName="CAX5VB~1.XLS")) returned 1
	[0231.783] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87ddf730, ftCreationTime.dwHighDateTime=0x1d4c865, ftLastAccessTime.dwLowDateTime=0xdf36f580, ftLastAccessTime.dwHighDateTime=0x1d4cca8, ftLastWriteTime.dwLowDateTime=0xdf36f580, ftLastWriteTime.dwHighDateTime=0x1d4cca8, nFileSizeHigh=0x0, nFileSizeLow=0x819, dwReserved0=0x0, dwReserved1=0x0, cFileName="cx4LsU4WKwY-fepPlWn.odp", cAlternateFileName="CX4LSU~1.ODP")) returned 1
	[0231.783] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7543e1e0, ftCreationTime.dwHighDateTime=0x1d4c9df, ftLastAccessTime.dwLowDateTime=0x3413e60, ftLastAccessTime.dwHighDateTime=0x1d4d5a3, ftLastWriteTime.dwLowDateTime=0x3413e60, ftLastWriteTime.dwHighDateTime=0x1d4d5a3, nFileSizeHigh=0x0, nFileSizeLow=0x135d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CXnnKKWp.odp", cAlternateFileName="")) returned 1
	[0231.783] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa2d510, ftCreationTime.dwHighDateTime=0x1d4c5f7, ftLastAccessTime.dwLowDateTime=0x49d4dc20, ftLastAccessTime.dwHighDateTime=0x1d4d525, ftLastWriteTime.dwLowDateTime=0x49d4dc20, ftLastWriteTime.dwHighDateTime=0x1d4d525, nFileSizeHigh=0x0, nFileSizeLow=0x5918, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExL7LeU-k-hHKW.pps", cAlternateFileName="EXL7LE~1.PPS")) returned 1
	[0231.783] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fa73e40, ftCreationTime.dwHighDateTime=0x1d4d2fd, ftLastAccessTime.dwLowDateTime=0x12260e20, ftLastAccessTime.dwHighDateTime=0x1d4ca08, ftLastWriteTime.dwLowDateTime=0x12260e20, ftLastWriteTime.dwHighDateTime=0x1d4ca08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="N02b", cAlternateFileName="")) returned 1
	[0231.783] GetProcessHeap () returned 0x800000
	[0231.783] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0231.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vXfjgJ2OdK_vHv\\N02b\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fa73e40, ftCreationTime.dwHighDateTime=0x1d4d2fd, ftLastAccessTime.dwLowDateTime=0x12260e20, ftLastAccessTime.dwHighDateTime=0x1d4ca08, ftLastWriteTime.dwLowDateTime=0x12260e20, ftLastWriteTime.dwHighDateTime=0x1d4ca08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0231.783] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fa73e40, ftCreationTime.dwHighDateTime=0x1d4d2fd, ftLastAccessTime.dwLowDateTime=0x12260e20, ftLastAccessTime.dwHighDateTime=0x1d4ca08, ftLastWriteTime.dwLowDateTime=0x12260e20, ftLastWriteTime.dwHighDateTime=0x1d4ca08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0231.784] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a6d960, ftCreationTime.dwHighDateTime=0x1d4d27a, ftLastAccessTime.dwLowDateTime=0x3e36d0, ftLastAccessTime.dwHighDateTime=0x1d4cb4b, ftLastWriteTime.dwLowDateTime=0x3e36d0, ftLastWriteTime.dwHighDateTime=0x1d4cb4b, nFileSizeHigh=0x0, nFileSizeLow=0x12e7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="sih3AgNP0Yq_d_W.xls", cAlternateFileName="SIH3AG~1.XLS")) returned 1
	[0231.784] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a6d960, ftCreationTime.dwHighDateTime=0x1d4d27a, ftLastAccessTime.dwLowDateTime=0x3e36d0, ftLastAccessTime.dwHighDateTime=0x1d4cb4b, ftLastWriteTime.dwLowDateTime=0x3e36d0, ftLastWriteTime.dwHighDateTime=0x1d4cb4b, nFileSizeHigh=0x0, nFileSizeLow=0x12e7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="sih3AgNP0Yq_d_W.xls", cAlternateFileName="SIH3AG~1.XLS")) returned 0
	[0231.784] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0231.786] GetProcessHeap () returned 0x800000
	[0231.786] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0231.786] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60615670, ftCreationTime.dwHighDateTime=0x1d4c8d8, ftLastAccessTime.dwLowDateTime=0xc372e910, ftLastAccessTime.dwHighDateTime=0x1d4d20e, ftLastWriteTime.dwLowDateTime=0xc372e910, ftLastWriteTime.dwHighDateTime=0x1d4d20e, nFileSizeHigh=0x0, nFileSizeLow=0xc15, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdCJ5.odp", cAlternateFileName="")) returned 1
	[0231.786] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59afbe20, ftCreationTime.dwHighDateTime=0x1d4d0fd, ftLastAccessTime.dwLowDateTime=0xf6d75c50, ftLastAccessTime.dwHighDateTime=0x1d4cd4a, ftLastWriteTime.dwLowDateTime=0xf6d75c50, ftLastWriteTime.dwHighDateTime=0x1d4cd4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vea4LREmU4w98CK5SH", cAlternateFileName="VEA4LR~1")) returned 1
	[0231.786] GetProcessHeap () returned 0x800000
	[0231.786] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0231.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vXfjgJ2OdK_vHv\\vea4LREmU4w98CK5SH\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59afbe20, ftCreationTime.dwHighDateTime=0x1d4d0fd, ftLastAccessTime.dwLowDateTime=0xf6d75c50, ftLastAccessTime.dwHighDateTime=0x1d4cd4a, ftLastWriteTime.dwLowDateTime=0xf6d75c50, ftLastWriteTime.dwHighDateTime=0x1d4cd4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0232.141] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59afbe20, ftCreationTime.dwHighDateTime=0x1d4d0fd, ftLastAccessTime.dwLowDateTime=0xf6d75c50, ftLastAccessTime.dwHighDateTime=0x1d4cd4a, ftLastWriteTime.dwLowDateTime=0xf6d75c50, ftLastWriteTime.dwHighDateTime=0x1d4cd4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.141] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c7e9b70, ftCreationTime.dwHighDateTime=0x1d4cff9, ftLastAccessTime.dwLowDateTime=0x2821ca20, ftLastAccessTime.dwHighDateTime=0x1d4d304, ftLastWriteTime.dwLowDateTime=0x2821ca20, ftLastWriteTime.dwHighDateTime=0x1d4d304, nFileSizeHigh=0x0, nFileSizeLow=0x142bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="bc0QBBB.doc", cAlternateFileName="")) returned 1
	[0232.141] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5d2250, ftCreationTime.dwHighDateTime=0x1d4d357, ftLastAccessTime.dwLowDateTime=0xab412f40, ftLastAccessTime.dwHighDateTime=0x1d4d34f, ftLastWriteTime.dwLowDateTime=0xab412f40, ftLastWriteTime.dwHighDateTime=0x1d4d34f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gKEpweW5-Wz", cAlternateFileName="GKEPWE~1")) returned 1
	[0232.141] GetProcessHeap () returned 0x800000
	[0232.141] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0232.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vXfjgJ2OdK_vHv\\vea4LREmU4w98CK5SH\\gKEpweW5-Wz\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5d2250, ftCreationTime.dwHighDateTime=0x1d4d357, ftLastAccessTime.dwLowDateTime=0xab412f40, ftLastAccessTime.dwHighDateTime=0x1d4d34f, ftLastWriteTime.dwLowDateTime=0xab412f40, ftLastWriteTime.dwHighDateTime=0x1d4d34f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0232.142] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5d2250, ftCreationTime.dwHighDateTime=0x1d4d357, ftLastAccessTime.dwLowDateTime=0xab412f40, ftLastAccessTime.dwHighDateTime=0x1d4d34f, ftLastWriteTime.dwLowDateTime=0xab412f40, ftLastWriteTime.dwHighDateTime=0x1d4d34f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.142] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5d2250, ftCreationTime.dwHighDateTime=0x1d4d357, ftLastAccessTime.dwLowDateTime=0xab412f40, ftLastAccessTime.dwHighDateTime=0x1d4d34f, ftLastWriteTime.dwLowDateTime=0xab412f40, ftLastWriteTime.dwHighDateTime=0x1d4d34f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0232.142] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0232.144] GetProcessHeap () returned 0x800000
	[0232.144] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0232.144] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a619b0, ftCreationTime.dwHighDateTime=0x1d4cd4e, ftLastAccessTime.dwLowDateTime=0x63d83e80, ftLastAccessTime.dwHighDateTime=0x1d4cf4b, ftLastWriteTime.dwLowDateTime=0x63d83e80, ftLastWriteTime.dwHighDateTime=0x1d4cf4b, nFileSizeHigh=0x0, nFileSizeLow=0xd96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ixuHv7boKq.xlsx", cAlternateFileName="IXUHV7~1.XLS")) returned 1
	[0232.144] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe077f1e0, ftCreationTime.dwHighDateTime=0x1d4c9f3, ftLastAccessTime.dwLowDateTime=0x28aed670, ftLastAccessTime.dwHighDateTime=0x1d4d2d9, ftLastWriteTime.dwLowDateTime=0x28aed670, ftLastWriteTime.dwHighDateTime=0x1d4d2d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpgA6NK_", cAlternateFileName="")) returned 1
	[0232.144] GetProcessHeap () returned 0x800000
	[0232.144] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0232.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vXfjgJ2OdK_vHv\\vea4LREmU4w98CK5SH\\MpgA6NK_\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe077f1e0, ftCreationTime.dwHighDateTime=0x1d4c9f3, ftLastAccessTime.dwLowDateTime=0x28aed670, ftLastAccessTime.dwHighDateTime=0x1d4d2d9, ftLastWriteTime.dwLowDateTime=0x28aed670, ftLastWriteTime.dwHighDateTime=0x1d4d2d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0232.298] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe077f1e0, ftCreationTime.dwHighDateTime=0x1d4c9f3, ftLastAccessTime.dwLowDateTime=0x28aed670, ftLastAccessTime.dwHighDateTime=0x1d4d2d9, ftLastWriteTime.dwLowDateTime=0x28aed670, ftLastWriteTime.dwHighDateTime=0x1d4d2d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.298] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3ae2d60, ftCreationTime.dwHighDateTime=0x1d4cddb, ftLastAccessTime.dwLowDateTime=0x5eaf98c0, ftLastAccessTime.dwHighDateTime=0x1d4cf70, ftLastWriteTime.dwLowDateTime=0x5eaf98c0, ftLastWriteTime.dwHighDateTime=0x1d4cf70, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1olAy1-_R9IJbc", cAlternateFileName="1OLAY1~1")) returned 1
	[0232.298] GetProcessHeap () returned 0x800000
	[0232.298] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0232.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vXfjgJ2OdK_vHv\\vea4LREmU4w98CK5SH\\MpgA6NK_\\1olAy1-_R9IJbc\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3ae2d60, ftCreationTime.dwHighDateTime=0x1d4cddb, ftLastAccessTime.dwLowDateTime=0x5eaf98c0, ftLastAccessTime.dwHighDateTime=0x1d4cf70, ftLastWriteTime.dwLowDateTime=0x5eaf98c0, ftLastWriteTime.dwHighDateTime=0x1d4cf70, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0232.460] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3ae2d60, ftCreationTime.dwHighDateTime=0x1d4cddb, ftLastAccessTime.dwLowDateTime=0x5eaf98c0, ftLastAccessTime.dwHighDateTime=0x1d4cf70, ftLastWriteTime.dwLowDateTime=0x5eaf98c0, ftLastWriteTime.dwHighDateTime=0x1d4cf70, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.461] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fccb340, ftCreationTime.dwHighDateTime=0x1d4ca8e, ftLastAccessTime.dwLowDateTime=0x27b84b20, ftLastAccessTime.dwHighDateTime=0x1d4ca0a, ftLastWriteTime.dwLowDateTime=0x27b84b20, ftLastWriteTime.dwHighDateTime=0x1d4ca0a, nFileSizeHigh=0x0, nFileSizeLow=0x494c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1tnXWKR-EfENc2OQfS.ods", cAlternateFileName="1TNXWK~1.ODS")) returned 1
	[0232.461] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd67b0110, ftCreationTime.dwHighDateTime=0x1d4cb73, ftLastAccessTime.dwLowDateTime=0xfd668ee0, ftLastAccessTime.dwHighDateTime=0x1d4d323, ftLastWriteTime.dwLowDateTime=0xfd668ee0, ftLastWriteTime.dwHighDateTime=0x1d4d323, nFileSizeHigh=0x0, nFileSizeLow=0xe50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gw4R2H3 6 K3.csv", cAlternateFileName="GW4R2H~1.CSV")) returned 1
	[0232.461] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a36f7c0, ftCreationTime.dwHighDateTime=0x1d4d29e, ftLastAccessTime.dwLowDateTime=0xf5b7770, ftLastAccessTime.dwHighDateTime=0x1d4ca3f, ftLastWriteTime.dwLowDateTime=0xf5b7770, ftLastWriteTime.dwHighDateTime=0x1d4ca3f, nFileSizeHigh=0x0, nFileSizeLow=0x6ee1, dwReserved0=0x0, dwReserved1=0x0, cFileName="i-Anpem8_GZz.xlsx", cAlternateFileName="I-ANPE~1.XLS")) returned 1
	[0232.461] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1cd70, ftCreationTime.dwHighDateTime=0x1d4cac6, ftLastAccessTime.dwLowDateTime=0x491cc720, ftLastAccessTime.dwHighDateTime=0x1d4cc5b, ftLastWriteTime.dwLowDateTime=0x491cc720, ftLastWriteTime.dwHighDateTime=0x1d4cc5b, nFileSizeHigh=0x0, nFileSizeLow=0xcd43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImCMjf8_tGGgPcp.ods", cAlternateFileName="IMCMJF~1.ODS")) returned 1
	[0232.461] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1cd70, ftCreationTime.dwHighDateTime=0x1d4cac6, ftLastAccessTime.dwLowDateTime=0x491cc720, ftLastAccessTime.dwHighDateTime=0x1d4cc5b, ftLastWriteTime.dwLowDateTime=0x491cc720, ftLastWriteTime.dwHighDateTime=0x1d4cc5b, nFileSizeHigh=0x0, nFileSizeLow=0xcd43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImCMjf8_tGGgPcp.ods", cAlternateFileName="IMCMJF~1.ODS")) returned 0
	[0232.461] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0232.464] GetProcessHeap () returned 0x800000
	[0232.464] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0232.464] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd64ea830, ftCreationTime.dwHighDateTime=0x1d4ce58, ftLastAccessTime.dwLowDateTime=0x65e9f40, ftLastAccessTime.dwHighDateTime=0x1d4cbc4, ftLastWriteTime.dwLowDateTime=0x65e9f40, ftLastWriteTime.dwHighDateTime=0x1d4cbc4, nFileSizeHigh=0x0, nFileSizeLow=0x116f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="EG9M8-.docx", cAlternateFileName="EG9M8-~1.DOC")) returned 1
	[0232.464] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x171ed070, ftCreationTime.dwHighDateTime=0x1d4d119, ftLastAccessTime.dwLowDateTime=0xb6656bb0, ftLastAccessTime.dwHighDateTime=0x1d4cb71, ftLastWriteTime.dwLowDateTime=0xb6656bb0, ftLastWriteTime.dwHighDateTime=0x1d4cb71, nFileSizeHigh=0x0, nFileSizeLow=0x848e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GG4-EF-_zjxUQOXCl.odt", cAlternateFileName="GG4-EF~1.ODT")) returned 1
	[0232.464] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa14acf90, ftCreationTime.dwHighDateTime=0x1d4d1d9, ftLastAccessTime.dwLowDateTime=0x39a31290, ftLastAccessTime.dwHighDateTime=0x1d4cb8e, ftLastWriteTime.dwLowDateTime=0x39a31290, ftLastWriteTime.dwHighDateTime=0x1d4cb8e, nFileSizeHigh=0x0, nFileSizeLow=0x1234b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KXnHZqMjFaI5f.xls", cAlternateFileName="KXNHZQ~1.XLS")) returned 1
	[0232.465] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa14acf90, ftCreationTime.dwHighDateTime=0x1d4d1d9, ftLastAccessTime.dwLowDateTime=0x39a31290, ftLastAccessTime.dwHighDateTime=0x1d4cb8e, ftLastWriteTime.dwLowDateTime=0x39a31290, ftLastWriteTime.dwHighDateTime=0x1d4cb8e, nFileSizeHigh=0x0, nFileSizeLow=0x1234b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KXnHZqMjFaI5f.xls", cAlternateFileName="KXNHZQ~1.XLS")) returned 0
	[0232.465] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0232.465] GetProcessHeap () returned 0x800000
	[0232.465] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0232.465] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65630ed0, ftCreationTime.dwHighDateTime=0x1d4c6e8, ftLastAccessTime.dwLowDateTime=0x3f2201e0, ftLastAccessTime.dwHighDateTime=0x1d4cedb, ftLastWriteTime.dwLowDateTime=0x3f2201e0, ftLastWriteTime.dwHighDateTime=0x1d4cedb, nFileSizeHigh=0x0, nFileSizeLow=0xea8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tLescsVjdJxqG_JET.ots", cAlternateFileName="TLESCS~1.OTS")) returned 1
	[0232.465] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65630ed0, ftCreationTime.dwHighDateTime=0x1d4c6e8, ftLastAccessTime.dwLowDateTime=0x3f2201e0, ftLastAccessTime.dwHighDateTime=0x1d4cedb, ftLastWriteTime.dwLowDateTime=0x3f2201e0, ftLastWriteTime.dwHighDateTime=0x1d4cedb, nFileSizeHigh=0x0, nFileSizeLow=0xea8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tLescsVjdJxqG_JET.ots", cAlternateFileName="TLESCS~1.OTS")) returned 0
	[0232.465] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0232.466] GetProcessHeap () returned 0x800000
	[0232.466] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0232.466] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334ee540, ftCreationTime.dwHighDateTime=0x1d4c7ba, ftLastAccessTime.dwLowDateTime=0x15070e0, ftLastAccessTime.dwHighDateTime=0x1d4c92c, ftLastWriteTime.dwLowDateTime=0x15070e0, ftLastWriteTime.dwHighDateTime=0x1d4c92c, nFileSizeHigh=0x0, nFileSizeLow=0x8d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="yFZloqrRif YjN-M.pps", cAlternateFileName="YFZLOQ~1.PPS")) returned 1
	[0232.466] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d92d000, ftCreationTime.dwHighDateTime=0x1d4cf6f, ftLastAccessTime.dwLowDateTime=0x6f773f10, ftLastAccessTime.dwHighDateTime=0x1d4cf56, ftLastWriteTime.dwLowDateTime=0x6f773f10, ftLastWriteTime.dwHighDateTime=0x1d4cf56, nFileSizeHigh=0x0, nFileSizeLow=0x10beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZdOKquYkrKYMEzh.xls", cAlternateFileName="ZDOKQU~1.XLS")) returned 1
	[0232.466] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d92d000, ftCreationTime.dwHighDateTime=0x1d4cf6f, ftLastAccessTime.dwLowDateTime=0x6f773f10, ftLastAccessTime.dwHighDateTime=0x1d4cf56, ftLastWriteTime.dwLowDateTime=0x6f773f10, ftLastWriteTime.dwHighDateTime=0x1d4cf56, nFileSizeHigh=0x0, nFileSizeLow=0x10beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZdOKquYkrKYMEzh.xls", cAlternateFileName="ZDOKQU~1.XLS")) returned 0
	[0232.466] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0232.466] GetProcessHeap () returned 0x800000
	[0232.466] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0232.466] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd8e1d90, ftCreationTime.dwHighDateTime=0x1d57033, ftLastAccessTime.dwLowDateTime=0x48913980, ftLastAccessTime.dwHighDateTime=0x1d559b4, ftLastWriteTime.dwLowDateTime=0x48913980, ftLastWriteTime.dwHighDateTime=0x1d559b4, nFileSizeHigh=0x0, nFileSizeLow=0x18f99, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_x-J5MyEU.pptx", cAlternateFileName="_X-J5M~1.PPT")) returned 1
	[0232.466] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d83c00, ftCreationTime.dwHighDateTime=0x1d56fbe, ftLastAccessTime.dwLowDateTime=0x758ec060, ftLastAccessTime.dwHighDateTime=0x1d541ea, ftLastWriteTime.dwLowDateTime=0x758ec060, ftLastWriteTime.dwHighDateTime=0x1d541ea, nFileSizeHigh=0x0, nFileSizeLow=0x11a89, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_Xgx3dp0GZE.docx", cAlternateFileName="_XGX3D~1.DOC")) returned 1
	[0232.467] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d83c00, ftCreationTime.dwHighDateTime=0x1d56fbe, ftLastAccessTime.dwLowDateTime=0x758ec060, ftLastAccessTime.dwHighDateTime=0x1d541ea, ftLastWriteTime.dwLowDateTime=0x758ec060, ftLastWriteTime.dwHighDateTime=0x1d541ea, nFileSizeHigh=0x0, nFileSizeLow=0x11a89, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_Xgx3dp0GZE.docx", cAlternateFileName="_XGX3D~1.DOC")) returned 0
	[0232.467] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0232.467] GetProcessHeap () returned 0x800000
	[0232.467] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0232.467] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0232.467] GetProcessHeap () returned 0x800000
	[0232.467] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0232.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0232.467] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.467] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0232.467] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0232.468] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0232.468] GetProcessHeap () returned 0x800000
	[0232.468] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0232.468] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0232.468] GetProcessHeap () returned 0x800000
	[0232.468] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0232.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0232.468] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.468] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0232.468] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0232.468] GetProcessHeap () returned 0x800000
	[0232.468] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0232.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0232.469] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.469] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0232.469] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1
	[0232.469] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
	[0232.469] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0
	[0232.469] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0232.469] GetProcessHeap () returned 0x800000
	[0232.469] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0232.469] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
	[0232.469] GetProcessHeap () returned 0x800000
	[0232.469] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0232.469] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0232.549] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.549] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
	[0232.549] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
	[0232.549] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
	[0232.549] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
	[0232.549] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
	[0232.549] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0
	[0232.549] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0232.550] GetProcessHeap () returned 0x800000
	[0232.550] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0232.550] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
	[0232.551] GetProcessHeap () returned 0x800000
	[0232.551] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0232.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0232.857] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0232.857] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
	[0232.857] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
	[0232.857] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
	[0232.857] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
	[0232.857] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
	[0232.857] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
	[0232.857] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0
	[0232.857] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0232.858] GetProcessHeap () returned 0x800000
	[0232.858] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0232.858] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
	[0232.858] GetProcessHeap () returned 0x800000
	[0232.858] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0232.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0233.072] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.073] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
	[0233.073] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
	[0233.073] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1
	[0233.073] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1
	[0233.073] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0
	[0233.073] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0233.074] GetProcessHeap () returned 0x800000
	[0233.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0233.074] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0
	[0233.074] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0233.074] GetProcessHeap () returned 0x800000
	[0233.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0233.074] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0233.074] GetProcessHeap () returned 0x800000
	[0233.074] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0233.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0233.075] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.075] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0233.075] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0233.075] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0233.075] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1
	[0233.075] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0
	[0233.075] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0233.075] GetProcessHeap () returned 0x800000
	[0233.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0233.075] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0233.075] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe5dc59c0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe5dc59c0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0233.075] GetProcessHeap () returned 0x800000
	[0233.075] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0233.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe5dc59c0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe5dc59c0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0233.076] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe5dc59c0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe5dc59c0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87772580, ftCreationTime.dwHighDateTime=0x1d4c7a9, ftLastAccessTime.dwLowDateTime=0xef9ab8f0, ftLastAccessTime.dwHighDateTime=0x1d4c643, ftLastWriteTime.dwLowDateTime=0xef9ab8f0, ftLastWriteTime.dwHighDateTime=0x1d4c643, nFileSizeHigh=0x0, nFileSizeLow=0xf666, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="35CanYpEqH0c.m4a", cAlternateFileName="35CANY~1.M4A")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a302a0, ftCreationTime.dwHighDateTime=0x1d4d2c1, ftLastAccessTime.dwLowDateTime=0x3cb83200, ftLastAccessTime.dwHighDateTime=0x1d4c9f2, ftLastWriteTime.dwLowDateTime=0x3cb83200, ftLastWriteTime.dwHighDateTime=0x1d4c9f2, nFileSizeHigh=0x0, nFileSizeLow=0x16288, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6K0K9rYmisOB7DSRE.mp3", cAlternateFileName="6K0K9R~1.MP3")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6ec540, ftCreationTime.dwHighDateTime=0x1d4cc20, ftLastAccessTime.dwLowDateTime=0xadbbba00, ftLastAccessTime.dwHighDateTime=0x1d4cc9d, ftLastWriteTime.dwLowDateTime=0xadbbba00, ftLastWriteTime.dwHighDateTime=0x1d4cc9d, nFileSizeHigh=0x0, nFileSizeLow=0x1155d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7W35fbA0qPKK3-xQ.m4a", cAlternateFileName="7W35FB~1.M4A")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1ff2ce0, ftCreationTime.dwHighDateTime=0x1d4c82c, ftLastAccessTime.dwLowDateTime=0xdc5bed40, ftLastAccessTime.dwHighDateTime=0x1d4c7bf, ftLastWriteTime.dwLowDateTime=0xdc5bed40, ftLastWriteTime.dwHighDateTime=0x1d4c7bf, nFileSizeHigh=0x0, nFileSizeLow=0x13c95, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ar0dgn5F.wav", cAlternateFileName="")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb692a180, ftCreationTime.dwHighDateTime=0x1d4c995, ftLastAccessTime.dwLowDateTime=0x3e0f3c90, ftLastAccessTime.dwHighDateTime=0x1d4cb5d, ftLastWriteTime.dwLowDateTime=0x3e0f3c90, ftLastWriteTime.dwHighDateTime=0x1d4cb5d, nFileSizeHigh=0x0, nFileSizeLow=0xccee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bB_BufpxFJCp35.mp3", cAlternateFileName="BB_BUF~1.MP3")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd00729f0, ftCreationTime.dwHighDateTime=0x1d4c6f3, ftLastAccessTime.dwLowDateTime=0xab647d70, ftLastAccessTime.dwHighDateTime=0x1d4cbf6, ftLastWriteTime.dwLowDateTime=0xab647d70, ftLastWriteTime.dwHighDateTime=0x1d4cbf6, nFileSizeHigh=0x0, nFileSizeLow=0x1233b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bq9rYXHf0sBf45.wav", cAlternateFileName="BQ9RYX~1.WAV")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78596490, ftCreationTime.dwHighDateTime=0x1d4d209, ftLastAccessTime.dwLowDateTime=0xc97b29c0, ftLastAccessTime.dwHighDateTime=0x1d4d183, ftLastWriteTime.dwLowDateTime=0xc97b29c0, ftLastWriteTime.dwHighDateTime=0x1d4d183, nFileSizeHigh=0x0, nFileSizeLow=0xaee1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="d34dY_oJcM4xL0ojAj.mp3", cAlternateFileName="D34DY_~1.MP3")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f9589e0, ftCreationTime.dwHighDateTime=0x1d4d21f, ftLastAccessTime.dwLowDateTime=0x6e7dbe0, ftLastAccessTime.dwHighDateTime=0x1d4cd16, ftLastWriteTime.dwLowDateTime=0x6e7dbe0, ftLastWriteTime.dwHighDateTime=0x1d4cd16, nFileSizeHigh=0x0, nFileSizeLow=0x4959, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dJ4y-8MPHaItLFJAb.mp3", cAlternateFileName="DJ4Y-8~1.MP3")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62ce43a0, ftCreationTime.dwHighDateTime=0x1d4c76b, ftLastAccessTime.dwLowDateTime=0xdcaff350, ftLastAccessTime.dwHighDateTime=0x1d4cf57, ftLastWriteTime.dwLowDateTime=0xdcaff350, ftLastWriteTime.dwHighDateTime=0x1d4cf57, nFileSizeHigh=0x0, nFileSizeLow=0x10fab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="E0Fm8A3ZdlhX11yJ.m4a", cAlternateFileName="E0FM8A~1.M4A")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce56a40, ftCreationTime.dwHighDateTime=0x1d4d4a5, ftLastAccessTime.dwLowDateTime=0xea301310, ftLastAccessTime.dwHighDateTime=0x1d4cb48, ftLastWriteTime.dwLowDateTime=0xea301310, ftLastWriteTime.dwHighDateTime=0x1d4cb48, nFileSizeHigh=0x0, nFileSizeLow=0xa3f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eKgWXb.m4a", cAlternateFileName="")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803a9710, ftCreationTime.dwHighDateTime=0x1d4ca43, ftLastAccessTime.dwLowDateTime=0x1b7a580, ftLastAccessTime.dwHighDateTime=0x1d4cb4d, ftLastWriteTime.dwLowDateTime=0x1b7a580, ftLastWriteTime.dwHighDateTime=0x1d4cb4d, nFileSizeHigh=0x0, nFileSizeLow=0xe1b5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="g00eXMcht6YwIqe.m4a", cAlternateFileName="G00EXM~1.M4A")) returned 1
	[0233.274] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x997afcf0, ftCreationTime.dwHighDateTime=0x1d4d0b1, ftLastAccessTime.dwLowDateTime=0x308b72c0, ftLastAccessTime.dwHighDateTime=0x1d4ca1b, ftLastWriteTime.dwLowDateTime=0x308b72c0, ftLastWriteTime.dwHighDateTime=0x1d4ca1b, nFileSizeHigh=0x0, nFileSizeLow=0xff7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="G398z-U6nqaZKhB7J.wav", cAlternateFileName="G398Z-~1.WAV")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x380f9800, ftCreationTime.dwHighDateTime=0x1d4cfc5, ftLastAccessTime.dwLowDateTime=0x34344df0, ftLastAccessTime.dwHighDateTime=0x1d4d157, ftLastWriteTime.dwLowDateTime=0x34344df0, ftLastWriteTime.dwHighDateTime=0x1d4d157, nFileSizeHigh=0x0, nFileSizeLow=0x9aac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gKHEonPIZv0iBuFAyIq.wav", cAlternateFileName="GKHEON~1.WAV")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76b535b0, ftCreationTime.dwHighDateTime=0x1d4c99e, ftLastAccessTime.dwLowDateTime=0x949b5f70, ftLastAccessTime.dwHighDateTime=0x1d4c8c5, ftLastWriteTime.dwLowDateTime=0x949b5f70, ftLastWriteTime.dwHighDateTime=0x1d4c8c5, nFileSizeHigh=0x0, nFileSizeLow=0xcf42, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jJ5X.wav", cAlternateFileName="")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdef017c0, ftCreationTime.dwHighDateTime=0x1d4ccc4, ftLastAccessTime.dwLowDateTime=0x56ea9f30, ftLastAccessTime.dwHighDateTime=0x1d4cb61, ftLastWriteTime.dwLowDateTime=0x56ea9f30, ftLastWriteTime.dwHighDateTime=0x1d4cb61, nFileSizeHigh=0x0, nFileSizeLow=0x8d9e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jt-i1kC0.mp3", cAlternateFileName="")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497d2510, ftCreationTime.dwHighDateTime=0x1d4d189, ftLastAccessTime.dwLowDateTime=0x27dd45b0, ftLastAccessTime.dwHighDateTime=0x1d4c690, ftLastWriteTime.dwLowDateTime=0x27dd45b0, ftLastWriteTime.dwHighDateTime=0x1d4c690, nFileSizeHigh=0x0, nFileSizeLow=0x15d31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="K1bLst3t 4tJ5Fj.mp3", cAlternateFileName="K1BLST~1.MP3")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23140210, ftCreationTime.dwHighDateTime=0x1d4cd18, ftLastAccessTime.dwLowDateTime=0xbed5f320, ftLastAccessTime.dwHighDateTime=0x1d4ceb2, ftLastWriteTime.dwLowDateTime=0xbed5f320, ftLastWriteTime.dwHighDateTime=0x1d4ceb2, nFileSizeHigh=0x0, nFileSizeLow=0xa165, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lHQPvWm7ObNg94.wav", cAlternateFileName="LHQPVW~1.WAV")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4cc2d20, ftCreationTime.dwHighDateTime=0x1d4d4a3, ftLastAccessTime.dwLowDateTime=0xc70c0c90, ftLastAccessTime.dwHighDateTime=0x1d4d025, ftLastWriteTime.dwLowDateTime=0xc70c0c90, ftLastWriteTime.dwHighDateTime=0x1d4d025, nFileSizeHigh=0x0, nFileSizeLow=0xee9f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lHzY7AyuqkMbwl01NS.mp3", cAlternateFileName="LHZY7A~1.MP3")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde7fa3d0, ftCreationTime.dwHighDateTime=0x1d4cb31, ftLastAccessTime.dwLowDateTime=0xdde43b60, ftLastAccessTime.dwHighDateTime=0x1d4d109, ftLastWriteTime.dwLowDateTime=0xdde43b60, ftLastWriteTime.dwHighDateTime=0x1d4d109, nFileSizeHigh=0x0, nFileSizeLow=0xd8d6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ltsXSg.wav", cAlternateFileName="")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d5a280, ftCreationTime.dwHighDateTime=0x1d4d458, ftLastAccessTime.dwLowDateTime=0xdc8670f0, ftLastAccessTime.dwHighDateTime=0x1d4d189, ftLastWriteTime.dwLowDateTime=0xdc8670f0, ftLastWriteTime.dwHighDateTime=0x1d4d189, nFileSizeHigh=0x0, nFileSizeLow=0xd7d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mh7UmfoNCZ.mp3", cAlternateFileName="MH7UMF~1.MP3")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4b58b0, ftCreationTime.dwHighDateTime=0x1d4d42d, ftLastAccessTime.dwLowDateTime=0x79db78f0, ftLastAccessTime.dwHighDateTime=0x1d4cc30, ftLastWriteTime.dwLowDateTime=0x79db78f0, ftLastWriteTime.dwHighDateTime=0x1d4cc30, nFileSizeHigh=0x0, nFileSizeLow=0xf581, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mYAaXZ7-X tErA5OuYe.m4a", cAlternateFileName="MYAAXZ~1.M4A")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa71d0f80, ftCreationTime.dwHighDateTime=0x1d4d177, ftLastAccessTime.dwLowDateTime=0x680c6740, ftLastAccessTime.dwHighDateTime=0x1d4cba6, ftLastWriteTime.dwLowDateTime=0x680c6740, ftLastWriteTime.dwHighDateTime=0x1d4cba6, nFileSizeHigh=0x0, nFileSizeLow=0xd088, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nGbJv_9P5IfMEWpor.mp3", cAlternateFileName="NGBJV_~1.MP3")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2063d5f0, ftCreationTime.dwHighDateTime=0x1d4cdb7, ftLastAccessTime.dwLowDateTime=0xf81703b0, ftLastAccessTime.dwHighDateTime=0x1d4d45a, ftLastWriteTime.dwLowDateTime=0xf81703b0, ftLastWriteTime.dwHighDateTime=0x1d4d45a, nFileSizeHigh=0x0, nFileSizeLow=0xbe24, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nsG4YW2PjfcRJzKDKl0.mp3", cAlternateFileName="NSG4YW~1.MP3")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12052f30, ftCreationTime.dwHighDateTime=0x1d4d349, ftLastAccessTime.dwLowDateTime=0x652bfc70, ftLastAccessTime.dwHighDateTime=0x1d4ce3f, ftLastWriteTime.dwLowDateTime=0x652bfc70, ftLastWriteTime.dwHighDateTime=0x1d4ce3f, nFileSizeHigh=0x0, nFileSizeLow=0x16fc1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ObErAqZNHPckF8CU279.mp3", cAlternateFileName="OBERAQ~1.MP3")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74228b0, ftCreationTime.dwHighDateTime=0x1d4ca3b, ftLastAccessTime.dwLowDateTime=0xa67813a0, ftLastAccessTime.dwHighDateTime=0x1d4cbea, ftLastWriteTime.dwLowDateTime=0xa67813a0, ftLastWriteTime.dwHighDateTime=0x1d4cbea, nFileSizeHigh=0x0, nFileSizeLow=0xdb11, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="onxI-Dby8Nh 6.wav", cAlternateFileName="ONXI-D~1.WAV")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x104f67c0, ftCreationTime.dwHighDateTime=0x1d4d4dc, ftLastAccessTime.dwLowDateTime=0xa78cf210, ftLastAccessTime.dwHighDateTime=0x1d4d419, ftLastWriteTime.dwLowDateTime=0xa78cf210, ftLastWriteTime.dwHighDateTime=0x1d4d419, nFileSizeHigh=0x0, nFileSizeLow=0x43fa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PUc8eWcVWDMgRNM.wav", cAlternateFileName="PUC8EW~1.WAV")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x592afcf0, ftCreationTime.dwHighDateTime=0x1d4c9da, ftLastAccessTime.dwLowDateTime=0xe824db0, ftLastAccessTime.dwHighDateTime=0x1d4d20f, ftLastWriteTime.dwLowDateTime=0xe824db0, ftLastWriteTime.dwHighDateTime=0x1d4d20f, nFileSizeHigh=0x0, nFileSizeLow=0xe961, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="R3J2e.mp3", cAlternateFileName="")) returned 1
	[0233.275] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x147b8950, ftCreationTime.dwHighDateTime=0x1d4cf0a, ftLastAccessTime.dwLowDateTime=0xd7539bd0, ftLastAccessTime.dwHighDateTime=0x1d4ceaa, ftLastWriteTime.dwLowDateTime=0xd7539bd0, ftLastWriteTime.dwHighDateTime=0x1d4ceaa, nFileSizeHigh=0x0, nFileSizeLow=0x1335c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rGbmEz.wav", cAlternateFileName="")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x281ea9b0, ftCreationTime.dwHighDateTime=0x1d4c9ec, ftLastAccessTime.dwLowDateTime=0x42cb7f20, ftLastAccessTime.dwHighDateTime=0x1d4ce5d, ftLastWriteTime.dwLowDateTime=0x42cb7f20, ftLastWriteTime.dwHighDateTime=0x1d4ce5d, nFileSizeHigh=0x0, nFileSizeLow=0x8bd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rGW4LGtaCyHDtcEDigNN.wav", cAlternateFileName="RGW4LG~1.WAV")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74aba540, ftCreationTime.dwHighDateTime=0x1d4cedc, ftLastAccessTime.dwLowDateTime=0x139493c0, ftLastAccessTime.dwHighDateTime=0x1d4cb30, ftLastWriteTime.dwLowDateTime=0x139493c0, ftLastWriteTime.dwHighDateTime=0x1d4cb30, nFileSizeHigh=0x0, nFileSizeLow=0x1494e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uMAEvFNNrhhlxmDy78.mp3", cAlternateFileName="UMAEVF~1.MP3")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe644f70, ftCreationTime.dwHighDateTime=0x1d4d301, ftLastAccessTime.dwLowDateTime=0x694d5a60, ftLastAccessTime.dwHighDateTime=0x1d4cc64, ftLastWriteTime.dwLowDateTime=0x694d5a60, ftLastWriteTime.dwHighDateTime=0x1d4cc64, nFileSizeHigh=0x0, nFileSizeLow=0x5068, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uu_SLUg1YfW.m4a", cAlternateFileName="UU_SLU~1.M4A")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1afd77e0, ftCreationTime.dwHighDateTime=0x1d4c5ad, ftLastAccessTime.dwLowDateTime=0x17a6fc0, ftLastAccessTime.dwHighDateTime=0x1d4d17f, ftLastWriteTime.dwLowDateTime=0x17a6fc0, ftLastWriteTime.dwHighDateTime=0x1d4d17f, nFileSizeHigh=0x0, nFileSizeLow=0xbe41, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vmtHutYR9K.wav", cAlternateFileName="VMTHUT~1.WAV")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x322afe30, ftCreationTime.dwHighDateTime=0x1d4cdda, ftLastAccessTime.dwLowDateTime=0x9f278030, ftLastAccessTime.dwHighDateTime=0x1d4c53d, ftLastWriteTime.dwLowDateTime=0x9f278030, ftLastWriteTime.dwHighDateTime=0x1d4c53d, nFileSizeHigh=0x0, nFileSizeLow=0x1762b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WoOp1oMh2D3Glq0NaEf.mp3", cAlternateFileName="WOOP1O~1.MP3")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94177cd0, ftCreationTime.dwHighDateTime=0x1d4ce80, ftLastAccessTime.dwLowDateTime=0xe945f1b0, ftLastAccessTime.dwHighDateTime=0x1d4cf9c, ftLastWriteTime.dwLowDateTime=0xe945f1b0, ftLastWriteTime.dwHighDateTime=0x1d4cf9c, nFileSizeHigh=0x0, nFileSizeLow=0x126a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XIIEortunFi88.wav", cAlternateFileName="XIIEOR~1.WAV")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e76c20, ftCreationTime.dwHighDateTime=0x1d4d0ad, ftLastAccessTime.dwLowDateTime=0x687abe70, ftLastAccessTime.dwHighDateTime=0x1d4c68d, ftLastWriteTime.dwLowDateTime=0x687abe70, ftLastWriteTime.dwHighDateTime=0x1d4c68d, nFileSizeHigh=0x0, nFileSizeLow=0x1317e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xKFed.m4a", cAlternateFileName="")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a752a0, ftCreationTime.dwHighDateTime=0x1d4d46b, ftLastAccessTime.dwLowDateTime=0xeba410f0, ftLastAccessTime.dwHighDateTime=0x1d4d194, ftLastWriteTime.dwLowDateTime=0xeba410f0, ftLastWriteTime.dwHighDateTime=0x1d4d194, nFileSizeHigh=0x0, nFileSizeLow=0xb5e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yHo0RZM_S6QLp9Z P.mp3", cAlternateFileName="YHO0RZ~1.MP3")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57afc10, ftCreationTime.dwHighDateTime=0x1d4c53f, ftLastAccessTime.dwLowDateTime=0xe5e50910, ftLastAccessTime.dwHighDateTime=0x1d4d231, ftLastWriteTime.dwLowDateTime=0xe5e50910, ftLastWriteTime.dwHighDateTime=0x1d4d231, nFileSizeHigh=0x0, nFileSizeLow=0x18c65, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yurB2N3.m4a", cAlternateFileName="")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d7f1aa0, ftCreationTime.dwHighDateTime=0x1d4d310, ftLastAccessTime.dwLowDateTime=0xb3f8a0e0, ftLastAccessTime.dwHighDateTime=0x1d4c6d0, ftLastWriteTime.dwLowDateTime=0xb3f8a0e0, ftLastWriteTime.dwHighDateTime=0x1d4c6d0, nFileSizeHigh=0x0, nFileSizeLow=0xcf4a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Z8KfgUpfMdqybum2.m4a", cAlternateFileName="Z8KFGU~1.M4A")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2897cf0, ftCreationTime.dwHighDateTime=0x1d4c968, ftLastAccessTime.dwLowDateTime=0xb3cd3a00, ftLastAccessTime.dwHighDateTime=0x1d4d2d7, ftLastWriteTime.dwLowDateTime=0xb3cd3a00, ftLastWriteTime.dwHighDateTime=0x1d4d2d7, nFileSizeHigh=0x0, nFileSizeLow=0x189b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZPVlO.m4a", cAlternateFileName="")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cfa6fa0, ftCreationTime.dwHighDateTime=0x1d4d5a7, ftLastAccessTime.dwLowDateTime=0x2a625460, ftLastAccessTime.dwHighDateTime=0x1d4d33d, ftLastWriteTime.dwLowDateTime=0x2a625460, ftLastWriteTime.dwHighDateTime=0x1d4d33d, nFileSizeHigh=0x0, nFileSizeLow=0x344d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_lql6m.mp3", cAlternateFileName="")) returned 1
	[0233.276] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cfa6fa0, ftCreationTime.dwHighDateTime=0x1d4d5a7, ftLastAccessTime.dwLowDateTime=0x2a625460, ftLastAccessTime.dwHighDateTime=0x1d4d33d, ftLastWriteTime.dwLowDateTime=0x2a625460, ftLastWriteTime.dwHighDateTime=0x1d4d33d, nFileSizeHigh=0x0, nFileSizeLow=0x344d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_lql6m.mp3", cAlternateFileName="")) returned 0
	[0233.276] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0233.277] GetProcessHeap () returned 0x800000
	[0233.277] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0233.277] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0233.277] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0233.277] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e325c0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x8e325c0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0233.277] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8e325c0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0233.277] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
	[0233.277] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
	[0233.277] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
	[0233.277] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
	[0233.277] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
	[0233.277] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe5f8ea40, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe5f8ea40, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0233.277] GetProcessHeap () returned 0x800000
	[0233.277] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0233.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe5f8ea40, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe5f8ea40, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0233.278] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe5f8ea40, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe5f8ea40, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.278] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fc998a0, ftCreationTime.dwHighDateTime=0x1d4d449, ftLastAccessTime.dwLowDateTime=0x5a88b240, ftLastAccessTime.dwHighDateTime=0x1d4c958, ftLastWriteTime.dwLowDateTime=0x5a88b240, ftLastWriteTime.dwHighDateTime=0x1d4c958, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0KembV9Mr", cAlternateFileName="0KEMBV~1")) returned 1
	[0233.278] GetProcessHeap () returned 0x800000
	[0233.278] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0233.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0KembV9Mr\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fc998a0, ftCreationTime.dwHighDateTime=0x1d4d449, ftLastAccessTime.dwLowDateTime=0x5a88b240, ftLastAccessTime.dwHighDateTime=0x1d4c958, ftLastWriteTime.dwLowDateTime=0x5a88b240, ftLastWriteTime.dwHighDateTime=0x1d4c958, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0233.507] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fc998a0, ftCreationTime.dwHighDateTime=0x1d4d449, ftLastAccessTime.dwLowDateTime=0x5a88b240, ftLastAccessTime.dwHighDateTime=0x1d4c958, ftLastWriteTime.dwLowDateTime=0x5a88b240, ftLastWriteTime.dwHighDateTime=0x1d4c958, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.507] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a83ca80, ftCreationTime.dwHighDateTime=0x1d4cbba, ftLastAccessTime.dwLowDateTime=0xd5fbb480, ftLastAccessTime.dwHighDateTime=0x1d4cecc, ftLastWriteTime.dwLowDateTime=0xd5fbb480, ftLastWriteTime.dwHighDateTime=0x1d4cecc, nFileSizeHigh=0x0, nFileSizeLow=0x1506b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jlvv9M.png", cAlternateFileName="")) returned 1
	[0233.507] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b5efc0, ftCreationTime.dwHighDateTime=0x1d4cc3f, ftLastAccessTime.dwLowDateTime=0xef7a690, ftLastAccessTime.dwHighDateTime=0x1d4cf63, ftLastWriteTime.dwLowDateTime=0xef7a690, ftLastWriteTime.dwHighDateTime=0x1d4cf63, nFileSizeHigh=0x0, nFileSizeLow=0x55ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="KsJL.png", cAlternateFileName="")) returned 1
	[0233.507] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c593ef0, ftCreationTime.dwHighDateTime=0x1d4d1b5, ftLastAccessTime.dwLowDateTime=0xa5dccf30, ftLastAccessTime.dwHighDateTime=0x1d4c8e3, ftLastWriteTime.dwLowDateTime=0xa5dccf30, ftLastWriteTime.dwHighDateTime=0x1d4c8e3, nFileSizeHigh=0x0, nFileSizeLow=0x183cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wgw5b-H5hzUOl.bmp", cAlternateFileName="WGW5B-~1.BMP")) returned 1
	[0233.507] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ef0c00, ftCreationTime.dwHighDateTime=0x1d4d27e, ftLastAccessTime.dwLowDateTime=0x70b6d1b0, ftLastAccessTime.dwHighDateTime=0x1d4c597, ftLastWriteTime.dwLowDateTime=0x70b6d1b0, ftLastWriteTime.dwHighDateTime=0x1d4c597, nFileSizeHigh=0x0, nFileSizeLow=0x1153e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YpLUZQ5TI3P__Tu-9ra.bmp", cAlternateFileName="YPLUZQ~1.BMP")) returned 1
	[0233.507] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ef0c00, ftCreationTime.dwHighDateTime=0x1d4d27e, ftLastAccessTime.dwLowDateTime=0x70b6d1b0, ftLastAccessTime.dwHighDateTime=0x1d4c597, ftLastWriteTime.dwLowDateTime=0x70b6d1b0, ftLastWriteTime.dwHighDateTime=0x1d4c597, nFileSizeHigh=0x0, nFileSizeLow=0x1153e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YpLUZQ5TI3P__Tu-9ra.bmp", cAlternateFileName="YPLUZQ~1.BMP")) returned 0
	[0233.507] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0233.509] GetProcessHeap () returned 0x800000
	[0233.509] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0233.509] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ee3fd0, ftCreationTime.dwHighDateTime=0x1d4c59e, ftLastAccessTime.dwLowDateTime=0x16cc58e0, ftLastAccessTime.dwHighDateTime=0x1d4d204, ftLastWriteTime.dwLowDateTime=0x16cc58e0, ftLastWriteTime.dwHighDateTime=0x1d4d204, nFileSizeHigh=0x0, nFileSizeLow=0xd1a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8mI7lxMl.bmp", cAlternateFileName="")) returned 1
	[0233.509] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d24b60, ftCreationTime.dwHighDateTime=0x1d4c88e, ftLastAccessTime.dwLowDateTime=0x2d94f70, ftLastAccessTime.dwHighDateTime=0x1d4d0ae, ftLastWriteTime.dwLowDateTime=0x2d94f70, ftLastWriteTime.dwHighDateTime=0x1d4d0ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9iM7WV7", cAlternateFileName="")) returned 1
	[0233.509] GetProcessHeap () returned 0x800000
	[0233.509] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0233.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\9iM7WV7\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d24b60, ftCreationTime.dwHighDateTime=0x1d4c88e, ftLastAccessTime.dwLowDateTime=0x2d94f70, ftLastAccessTime.dwHighDateTime=0x1d4d0ae, ftLastWriteTime.dwLowDateTime=0x2d94f70, ftLastWriteTime.dwHighDateTime=0x1d4d0ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0233.571] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d24b60, ftCreationTime.dwHighDateTime=0x1d4c88e, ftLastAccessTime.dwLowDateTime=0x2d94f70, ftLastAccessTime.dwHighDateTime=0x1d4d0ae, ftLastWriteTime.dwLowDateTime=0x2d94f70, ftLastWriteTime.dwHighDateTime=0x1d4d0ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.571] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23325f30, ftCreationTime.dwHighDateTime=0x1d4c728, ftLastAccessTime.dwLowDateTime=0x16607e40, ftLastAccessTime.dwHighDateTime=0x1d4c86d, ftLastWriteTime.dwLowDateTime=0x16607e40, ftLastWriteTime.dwHighDateTime=0x1d4c86d, nFileSizeHigh=0x0, nFileSizeLow=0xa60c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dtmEVM5.png", cAlternateFileName="")) returned 1
	[0233.571] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b691510, ftCreationTime.dwHighDateTime=0x1d4c64f, ftLastAccessTime.dwLowDateTime=0xf3ceb520, ftLastAccessTime.dwHighDateTime=0x1d4d2b9, ftLastWriteTime.dwLowDateTime=0xf3ceb520, ftLastWriteTime.dwHighDateTime=0x1d4d2b9, nFileSizeHigh=0x0, nFileSizeLow=0x123ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOFBbY.png", cAlternateFileName="")) returned 1
	[0233.571] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6efd2bb0, ftCreationTime.dwHighDateTime=0x1d4c553, ftLastAccessTime.dwLowDateTime=0xc0a20ad0, ftLastAccessTime.dwHighDateTime=0x1d4d4f8, ftLastWriteTime.dwLowDateTime=0xc0a20ad0, ftLastWriteTime.dwHighDateTime=0x1d4d4f8, nFileSizeHigh=0x0, nFileSizeLow=0xdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCkl.bmp", cAlternateFileName="")) returned 1
	[0233.571] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450741f0, ftCreationTime.dwHighDateTime=0x1d4d53a, ftLastAccessTime.dwLowDateTime=0x7f0eb300, ftLastAccessTime.dwHighDateTime=0x1d4d05e, ftLastWriteTime.dwLowDateTime=0x7f0eb300, ftLastWriteTime.dwHighDateTime=0x1d4d05e, nFileSizeHigh=0x0, nFileSizeLow=0xbc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="V1CXTOUiosk16VC6qia9.png", cAlternateFileName="V1CXTO~1.PNG")) returned 1
	[0233.571] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450741f0, ftCreationTime.dwHighDateTime=0x1d4d53a, ftLastAccessTime.dwLowDateTime=0x7f0eb300, ftLastAccessTime.dwHighDateTime=0x1d4d05e, ftLastWriteTime.dwLowDateTime=0x7f0eb300, ftLastWriteTime.dwHighDateTime=0x1d4d05e, nFileSizeHigh=0x0, nFileSizeLow=0xbc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="V1CXTOUiosk16VC6qia9.png", cAlternateFileName="V1CXTO~1.PNG")) returned 0
	[0233.571] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0233.572] GetProcessHeap () returned 0x800000
	[0233.572] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0233.572] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22ee93d0, ftCreationTime.dwHighDateTime=0x1d4c7f6, ftLastAccessTime.dwLowDateTime=0xc5226c00, ftLastAccessTime.dwHighDateTime=0x1d4c885, ftLastWriteTime.dwLowDateTime=0xc5226c00, ftLastWriteTime.dwHighDateTime=0x1d4c885, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B4pfTwJ9xBM9-", cAlternateFileName="B4PFTW~1")) returned 1
	[0233.572] GetProcessHeap () returned 0x800000
	[0233.572] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0233.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B4pfTwJ9xBM9-\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22ee93d0, ftCreationTime.dwHighDateTime=0x1d4c7f6, ftLastAccessTime.dwLowDateTime=0xc5226c00, ftLastAccessTime.dwHighDateTime=0x1d4c885, ftLastWriteTime.dwLowDateTime=0xc5226c00, ftLastWriteTime.dwHighDateTime=0x1d4c885, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0233.708] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22ee93d0, ftCreationTime.dwHighDateTime=0x1d4c7f6, ftLastAccessTime.dwLowDateTime=0xc5226c00, ftLastAccessTime.dwHighDateTime=0x1d4c885, ftLastWriteTime.dwLowDateTime=0xc5226c00, ftLastWriteTime.dwHighDateTime=0x1d4c885, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.708] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4fb5f0, ftCreationTime.dwHighDateTime=0x1d4cd0b, ftLastAccessTime.dwLowDateTime=0xef4c34a0, ftLastAccessTime.dwHighDateTime=0x1d4cbf2, ftLastWriteTime.dwLowDateTime=0xef4c34a0, ftLastWriteTime.dwHighDateTime=0x1d4cbf2, nFileSizeHigh=0x0, nFileSizeLow=0x18fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="1V4Y2-WswZBt.png", cAlternateFileName="1V4Y2-~1.PNG")) returned 1
	[0233.708] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafbeb190, ftCreationTime.dwHighDateTime=0x1d4c79d, ftLastAccessTime.dwLowDateTime=0xf51eea70, ftLastAccessTime.dwHighDateTime=0x1d4d1ca, ftLastWriteTime.dwLowDateTime=0xf51eea70, ftLastWriteTime.dwHighDateTime=0x1d4d1ca, nFileSizeHigh=0x0, nFileSizeLow=0x12a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUv0emHbxJqV.png", cAlternateFileName="AUV0EM~1.PNG")) returned 1
	[0233.708] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6973e460, ftCreationTime.dwHighDateTime=0x1d4cd44, ftLastAccessTime.dwLowDateTime=0xb5074ad0, ftLastAccessTime.dwHighDateTime=0x1d4d4ff, ftLastWriteTime.dwLowDateTime=0xb5074ad0, ftLastWriteTime.dwHighDateTime=0x1d4d4ff, nFileSizeHigh=0x0, nFileSizeLow=0x172ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMwJOJIT.png", cAlternateFileName="")) returned 1
	[0233.708] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6973e460, ftCreationTime.dwHighDateTime=0x1d4cd44, ftLastAccessTime.dwLowDateTime=0xb5074ad0, ftLastAccessTime.dwHighDateTime=0x1d4d4ff, ftLastWriteTime.dwLowDateTime=0xb5074ad0, ftLastWriteTime.dwHighDateTime=0x1d4d4ff, nFileSizeHigh=0x0, nFileSizeLow=0x172ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMwJOJIT.png", cAlternateFileName="")) returned 0
	[0233.708] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0233.710] GetProcessHeap () returned 0x800000
	[0233.710] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0233.710] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0233.710] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bab8ad0, ftCreationTime.dwHighDateTime=0x1d4c69a, ftLastAccessTime.dwLowDateTime=0xbc864f0, ftLastAccessTime.dwHighDateTime=0x1d4cdc9, ftLastWriteTime.dwLowDateTime=0xbc864f0, ftLastWriteTime.dwHighDateTime=0x1d4cdc9, nFileSizeHigh=0x0, nFileSizeLow=0xa8da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tpquhAB0xc6q4.jpg", cAlternateFileName="TPQUHA~1.JPG")) returned 1
	[0233.710] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee07840, ftCreationTime.dwHighDateTime=0x1d4c5a3, ftLastAccessTime.dwLowDateTime=0xd224f240, ftLastAccessTime.dwHighDateTime=0x1d4d417, ftLastWriteTime.dwLowDateTime=0xd224f240, ftLastWriteTime.dwHighDateTime=0x1d4d417, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_IQvqnYKaT", cAlternateFileName="_IQVQN~1")) returned 1
	[0233.710] GetProcessHeap () returned 0x800000
	[0233.710] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0233.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_IQvqnYKaT\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee07840, ftCreationTime.dwHighDateTime=0x1d4c5a3, ftLastAccessTime.dwLowDateTime=0xd224f240, ftLastAccessTime.dwHighDateTime=0x1d4d417, ftLastWriteTime.dwLowDateTime=0xd224f240, ftLastWriteTime.dwHighDateTime=0x1d4d417, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0233.763] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee07840, ftCreationTime.dwHighDateTime=0x1d4c5a3, ftLastAccessTime.dwLowDateTime=0xd224f240, ftLastAccessTime.dwHighDateTime=0x1d4d417, ftLastWriteTime.dwLowDateTime=0xd224f240, ftLastWriteTime.dwHighDateTime=0x1d4d417, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.763] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc437650, ftCreationTime.dwHighDateTime=0x1d4cf53, ftLastAccessTime.dwLowDateTime=0x55aa8ef0, ftLastAccessTime.dwHighDateTime=0x1d4c9bd, ftLastWriteTime.dwLowDateTime=0x55aa8ef0, ftLastWriteTime.dwHighDateTime=0x1d4c9bd, nFileSizeHigh=0x0, nFileSizeLow=0xce88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bf3SWcl8iMtHbd.png", cAlternateFileName="BF3SWC~1.PNG")) returned 1
	[0233.763] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6757bbf0, ftCreationTime.dwHighDateTime=0x1d4c832, ftLastAccessTime.dwLowDateTime=0x7aa0aad0, ftLastAccessTime.dwHighDateTime=0x1d4ca19, ftLastWriteTime.dwLowDateTime=0x7aa0aad0, ftLastWriteTime.dwHighDateTime=0x1d4ca19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bG0W-yojEKjaTnN", cAlternateFileName="BG0W-Y~1")) returned 1
	[0233.763] GetProcessHeap () returned 0x800000
	[0233.763] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0233.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_IQvqnYKaT\\bG0W-yojEKjaTnN\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6757bbf0, ftCreationTime.dwHighDateTime=0x1d4c832, ftLastAccessTime.dwLowDateTime=0x7aa0aad0, ftLastAccessTime.dwHighDateTime=0x1d4ca19, ftLastWriteTime.dwLowDateTime=0x7aa0aad0, ftLastWriteTime.dwHighDateTime=0x1d4ca19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0233.764] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6757bbf0, ftCreationTime.dwHighDateTime=0x1d4c832, ftLastAccessTime.dwLowDateTime=0x7aa0aad0, ftLastAccessTime.dwHighDateTime=0x1d4ca19, ftLastWriteTime.dwLowDateTime=0x7aa0aad0, ftLastWriteTime.dwHighDateTime=0x1d4ca19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.764] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2f50e0, ftCreationTime.dwHighDateTime=0x1d4cd11, ftLastAccessTime.dwLowDateTime=0x7e7d5840, ftLastAccessTime.dwHighDateTime=0x1d4c5c5, ftLastWriteTime.dwLowDateTime=0x7e7d5840, ftLastWriteTime.dwHighDateTime=0x1d4c5c5, nFileSizeHigh=0x0, nFileSizeLow=0xaaf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ht8JeC7xxR.gif", cAlternateFileName="HT8JEC~1.GIF")) returned 1
	[0233.764] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaa409cc0, ftCreationTime.dwHighDateTime=0x1d4d48f, ftLastAccessTime.dwLowDateTime=0xe49e1930, ftLastAccessTime.dwHighDateTime=0x1d4d339, ftLastWriteTime.dwLowDateTime=0xe49e1930, ftLastWriteTime.dwHighDateTime=0x1d4d339, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HvOc", cAlternateFileName="")) returned 1
	[0233.764] GetProcessHeap () returned 0x800000
	[0233.764] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0233.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_IQvqnYKaT\\bG0W-yojEKjaTnN\\HvOc\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaa409cc0, ftCreationTime.dwHighDateTime=0x1d4d48f, ftLastAccessTime.dwLowDateTime=0xe49e1930, ftLastAccessTime.dwHighDateTime=0x1d4d339, ftLastWriteTime.dwLowDateTime=0xe49e1930, ftLastWriteTime.dwHighDateTime=0x1d4d339, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0233.764] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaa409cc0, ftCreationTime.dwHighDateTime=0x1d4d48f, ftLastAccessTime.dwLowDateTime=0xe49e1930, ftLastAccessTime.dwHighDateTime=0x1d4d339, ftLastWriteTime.dwLowDateTime=0xe49e1930, ftLastWriteTime.dwHighDateTime=0x1d4d339, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.764] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1747fe0, ftCreationTime.dwHighDateTime=0x1d4cc27, ftLastAccessTime.dwLowDateTime=0xdd7c6550, ftLastAccessTime.dwHighDateTime=0x1d4cefa, ftLastWriteTime.dwLowDateTime=0xdd7c6550, ftLastWriteTime.dwHighDateTime=0x1d4cefa, nFileSizeHigh=0x0, nFileSizeLow=0x7542, dwReserved0=0x0, dwReserved1=0x0, cFileName="42rgEUI.gif", cAlternateFileName="")) returned 1
	[0233.764] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdf59090, ftCreationTime.dwHighDateTime=0x1d4c9f0, ftLastAccessTime.dwLowDateTime=0x5a4a620, ftLastAccessTime.dwHighDateTime=0x1d4d1fb, ftLastWriteTime.dwLowDateTime=0x5a4a620, ftLastWriteTime.dwHighDateTime=0x1d4d1fb, nFileSizeHigh=0x0, nFileSizeLow=0xf89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="p4NUNTfUEHQ9R9FU.jpg", cAlternateFileName="P4NUNT~1.JPG")) returned 1
	[0233.764] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628087a0, ftCreationTime.dwHighDateTime=0x1d4d436, ftLastAccessTime.dwLowDateTime=0x9caed9b0, ftLastAccessTime.dwHighDateTime=0x1d4d3d0, ftLastWriteTime.dwLowDateTime=0x9caed9b0, ftLastWriteTime.dwHighDateTime=0x1d4d3d0, nFileSizeHigh=0x0, nFileSizeLow=0x17e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SJ1s5S22.bmp", cAlternateFileName="")) returned 1
	[0233.764] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc03133e0, ftCreationTime.dwHighDateTime=0x1d4d2c4, ftLastAccessTime.dwLowDateTime=0xe07e3e40, ftLastAccessTime.dwHighDateTime=0x1d4c6e4, ftLastWriteTime.dwLowDateTime=0xe07e3e40, ftLastWriteTime.dwHighDateTime=0x1d4c6e4, nFileSizeHigh=0x0, nFileSizeLow=0x5cfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="TVS-.png", cAlternateFileName="")) returned 1
	[0233.764] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc03133e0, ftCreationTime.dwHighDateTime=0x1d4d2c4, ftLastAccessTime.dwLowDateTime=0xe07e3e40, ftLastAccessTime.dwHighDateTime=0x1d4c6e4, ftLastWriteTime.dwLowDateTime=0xe07e3e40, ftLastWriteTime.dwHighDateTime=0x1d4c6e4, nFileSizeHigh=0x0, nFileSizeLow=0x5cfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="TVS-.png", cAlternateFileName="")) returned 0
	[0233.764] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0233.765] GetProcessHeap () returned 0x800000
	[0233.765] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0233.765] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3455d40, ftCreationTime.dwHighDateTime=0x1d4cffb, ftLastAccessTime.dwLowDateTime=0x4ced3030, ftLastAccessTime.dwHighDateTime=0x1d4c5f1, ftLastWriteTime.dwLowDateTime=0x4ced3030, ftLastWriteTime.dwHighDateTime=0x1d4c5f1, nFileSizeHigh=0x0, nFileSizeLow=0x323f, dwReserved0=0x0, dwReserved1=0x0, cFileName="jgnh.gif", cAlternateFileName="")) returned 1
	[0233.765] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3455d40, ftCreationTime.dwHighDateTime=0x1d4cffb, ftLastAccessTime.dwLowDateTime=0x4ced3030, ftLastAccessTime.dwHighDateTime=0x1d4c5f1, ftLastWriteTime.dwLowDateTime=0x4ced3030, ftLastWriteTime.dwHighDateTime=0x1d4c5f1, nFileSizeHigh=0x0, nFileSizeLow=0x323f, dwReserved0=0x0, dwReserved1=0x0, cFileName="jgnh.gif", cAlternateFileName="")) returned 0
	[0233.765] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0233.766] GetProcessHeap () returned 0x800000
	[0233.766] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0233.766] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea4a6a00, ftCreationTime.dwHighDateTime=0x1d4d429, ftLastAccessTime.dwLowDateTime=0x9a7f9520, ftLastAccessTime.dwHighDateTime=0x1d4d2f5, ftLastWriteTime.dwLowDateTime=0x9a7f9520, ftLastWriteTime.dwHighDateTime=0x1d4d2f5, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFR-Lq.jpg", cAlternateFileName="")) returned 1
	[0233.766] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2b85f50, ftCreationTime.dwHighDateTime=0x1d4d30a, ftLastAccessTime.dwLowDateTime=0xd6f6f90, ftLastAccessTime.dwHighDateTime=0x1d4cd58, ftLastWriteTime.dwLowDateTime=0xd6f6f90, ftLastWriteTime.dwHighDateTime=0x1d4cd58, nFileSizeHigh=0x0, nFileSizeLow=0x5e6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rGEzs0d5olCsJouWT_Z.png", cAlternateFileName="RGEZS0~1.PNG")) returned 1
	[0233.766] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xba5f9a60, ftCreationTime.dwHighDateTime=0x1d4c6a8, ftLastAccessTime.dwLowDateTime=0x2d05ae70, ftLastAccessTime.dwHighDateTime=0x1d4cb7b, ftLastWriteTime.dwLowDateTime=0x2d05ae70, ftLastWriteTime.dwHighDateTime=0x1d4cb7b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vXy7KNHJ", cAlternateFileName="")) returned 1
	[0233.766] GetProcessHeap () returned 0x800000
	[0233.766] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0233.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_IQvqnYKaT\\vXy7KNHJ\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xba5f9a60, ftCreationTime.dwHighDateTime=0x1d4c6a8, ftLastAccessTime.dwLowDateTime=0x2d05ae70, ftLastAccessTime.dwHighDateTime=0x1d4cb7b, ftLastWriteTime.dwLowDateTime=0x2d05ae70, ftLastWriteTime.dwHighDateTime=0x1d4cb7b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0233.902] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xba5f9a60, ftCreationTime.dwHighDateTime=0x1d4c6a8, ftLastAccessTime.dwLowDateTime=0x2d05ae70, ftLastAccessTime.dwHighDateTime=0x1d4cb7b, ftLastWriteTime.dwLowDateTime=0x2d05ae70, ftLastWriteTime.dwHighDateTime=0x1d4cb7b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.902] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac53bc0, ftCreationTime.dwHighDateTime=0x1d4ccd7, ftLastAccessTime.dwLowDateTime=0x91068330, ftLastAccessTime.dwHighDateTime=0x1d4d59a, ftLastWriteTime.dwLowDateTime=0x91068330, ftLastWriteTime.dwHighDateTime=0x1d4d59a, nFileSizeHigh=0x0, nFileSizeLow=0x14491, dwReserved0=0x0, dwReserved1=0x0, cFileName="5zghv.bmp", cAlternateFileName="")) returned 1
	[0233.902] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc69ff0, ftCreationTime.dwHighDateTime=0x1d4cc0c, ftLastAccessTime.dwLowDateTime=0x76292dc0, ftLastAccessTime.dwHighDateTime=0x1d4c63a, ftLastWriteTime.dwLowDateTime=0x76292dc0, ftLastWriteTime.dwHighDateTime=0x1d4c63a, nFileSizeHigh=0x0, nFileSizeLow=0x1b6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8n52oBRKY.jpg", cAlternateFileName="8N52OB~1.JPG")) returned 1
	[0233.903] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcfc350, ftCreationTime.dwHighDateTime=0x1d4d1df, ftLastAccessTime.dwLowDateTime=0xc01f96e0, ftLastAccessTime.dwHighDateTime=0x1d4d3a4, ftLastWriteTime.dwLowDateTime=0xc01f96e0, ftLastWriteTime.dwHighDateTime=0x1d4d3a4, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="F81_Dde29NDJ7z.jpg", cAlternateFileName="F81_DD~1.JPG")) returned 1
	[0233.903] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cb8c260, ftCreationTime.dwHighDateTime=0x1d4d01a, ftLastAccessTime.dwLowDateTime=0x2bf56e20, ftLastAccessTime.dwHighDateTime=0x1d4cc03, ftLastWriteTime.dwLowDateTime=0x2bf56e20, ftLastWriteTime.dwHighDateTime=0x1d4cc03, nFileSizeHigh=0x0, nFileSizeLow=0x14ceb, dwReserved0=0x0, dwReserved1=0x0, cFileName="I2PkRw0EGHLYgdM.png", cAlternateFileName="I2PKRW~1.PNG")) returned 1
	[0233.903] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23956860, ftCreationTime.dwHighDateTime=0x1d4ce1b, ftLastAccessTime.dwLowDateTime=0x421ae630, ftLastAccessTime.dwHighDateTime=0x1d4cf41, ftLastWriteTime.dwLowDateTime=0x421ae630, ftLastWriteTime.dwHighDateTime=0x1d4cf41, nFileSizeHigh=0x0, nFileSizeLow=0x1341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="lIh5wR 0cCqksZZTLdW-.bmp", cAlternateFileName="LIH5WR~1.BMP")) returned 1
	[0233.903] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x617778d0, ftCreationTime.dwHighDateTime=0x1d4d285, ftLastAccessTime.dwLowDateTime=0x5ef1fa10, ftLastAccessTime.dwHighDateTime=0x1d4d2bf, ftLastWriteTime.dwLowDateTime=0x5ef1fa10, ftLastWriteTime.dwHighDateTime=0x1d4d2bf, nFileSizeHigh=0x0, nFileSizeLow=0x17064, dwReserved0=0x0, dwReserved1=0x0, cFileName="VsknWiljEa7bt_.jpg", cAlternateFileName="VSKNWI~1.JPG")) returned 1
	[0233.903] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x617778d0, ftCreationTime.dwHighDateTime=0x1d4d285, ftLastAccessTime.dwLowDateTime=0x5ef1fa10, ftLastAccessTime.dwHighDateTime=0x1d4d2bf, ftLastWriteTime.dwLowDateTime=0x5ef1fa10, ftLastWriteTime.dwHighDateTime=0x1d4d2bf, nFileSizeHigh=0x0, nFileSizeLow=0x17064, dwReserved0=0x0, dwReserved1=0x0, cFileName="VsknWiljEa7bt_.jpg", cAlternateFileName="VSKNWI~1.JPG")) returned 0
	[0233.903] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0233.904] GetProcessHeap () returned 0x800000
	[0233.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0233.905] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xba5f9a60, ftCreationTime.dwHighDateTime=0x1d4c6a8, ftLastAccessTime.dwLowDateTime=0x2d05ae70, ftLastAccessTime.dwHighDateTime=0x1d4cb7b, ftLastWriteTime.dwLowDateTime=0x2d05ae70, ftLastWriteTime.dwHighDateTime=0x1d4cb7b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vXy7KNHJ", cAlternateFileName="")) returned 0
	[0233.905] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0233.905] GetProcessHeap () returned 0x800000
	[0233.905] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0233.905] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee07840, ftCreationTime.dwHighDateTime=0x1d4c5a3, ftLastAccessTime.dwLowDateTime=0xd224f240, ftLastAccessTime.dwHighDateTime=0x1d4d417, ftLastWriteTime.dwLowDateTime=0xd224f240, ftLastWriteTime.dwHighDateTime=0x1d4d417, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_IQvqnYKaT", cAlternateFileName="_IQVQN~1")) returned 0
	[0233.905] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0233.906] GetProcessHeap () returned 0x800000
	[0233.906] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0233.906] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0233.906] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0233.906] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0233.906] GetProcessHeap () returned 0x800000
	[0233.906] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0233.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0233.906] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.906] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0233.906] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0233.906] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0233.907] GetProcessHeap () returned 0x800000
	[0233.907] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0233.907] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0233.907] GetProcessHeap () returned 0x800000
	[0233.907] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0233.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0233.907] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.907] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0233.907] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0233.907] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
	[0233.907] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0
	[0233.907] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0233.908] GetProcessHeap () returned 0x800000
	[0233.908] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0233.908] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0233.908] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0233.908] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0233.908] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe5e840a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe5e840a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0233.908] GetProcessHeap () returned 0x800000
	[0233.908] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0233.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe5e840a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe5e840a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0233.908] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe5e840a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe5e840a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0233.908] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ff21f0, ftCreationTime.dwHighDateTime=0x1d4cd0f, ftLastAccessTime.dwLowDateTime=0x984f78f0, ftLastAccessTime.dwHighDateTime=0x1d4c5b3, ftLastWriteTime.dwLowDateTime=0x984f78f0, ftLastWriteTime.dwHighDateTime=0x1d4c5b3, nFileSizeHigh=0x0, nFileSizeLow=0xc18, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5Zahx14NTNTNJpNh_U.flv", cAlternateFileName="5ZAHX1~1.FLV")) returned 1
	[0233.908] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2af3050, ftCreationTime.dwHighDateTime=0x1d4c7c1, ftLastAccessTime.dwLowDateTime=0xaa2d7d50, ftLastAccessTime.dwHighDateTime=0x1d4cba4, ftLastWriteTime.dwLowDateTime=0xaa2d7d50, ftLastWriteTime.dwHighDateTime=0x1d4cba4, nFileSizeHigh=0x0, nFileSizeLow=0x77b5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="an2C.mp4", cAlternateFileName="")) returned 1
	[0233.908] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8233540, ftCreationTime.dwHighDateTime=0x1d4d236, ftLastAccessTime.dwLowDateTime=0x36ba3c60, ftLastAccessTime.dwHighDateTime=0x1d4cdb0, ftLastWriteTime.dwLowDateTime=0x36ba3c60, ftLastWriteTime.dwHighDateTime=0x1d4cdb0, nFileSizeHigh=0x0, nFileSizeLow=0xbfae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3T67l 9s.flv", cAlternateFileName="B3T67L~1.FLV")) returned 1
	[0233.908] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0233.908] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b59d30, ftCreationTime.dwHighDateTime=0x1d4c756, ftLastAccessTime.dwLowDateTime=0xd63e1940, ftLastAccessTime.dwHighDateTime=0x1d4c7bc, ftLastWriteTime.dwLowDateTime=0xd63e1940, ftLastWriteTime.dwHighDateTime=0x1d4c7bc, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dgZOPN61Qnaw.mkv", cAlternateFileName="DGZOPN~1.MKV")) returned 1
	[0233.908] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2fffa0, ftCreationTime.dwHighDateTime=0x1d4d1a9, ftLastAccessTime.dwLowDateTime=0xae71eef0, ftLastAccessTime.dwHighDateTime=0x1d4d261, ftLastWriteTime.dwLowDateTime=0xae71eef0, ftLastWriteTime.dwHighDateTime=0x1d4d261, nFileSizeHigh=0x0, nFileSizeLow=0x75e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eVT.avi", cAlternateFileName="")) returned 1
	[0233.909] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab46c40, ftCreationTime.dwHighDateTime=0x1d4cbe7, ftLastAccessTime.dwLowDateTime=0x55ea30a0, ftLastAccessTime.dwHighDateTime=0x1d4c6f7, ftLastWriteTime.dwLowDateTime=0x55ea30a0, ftLastWriteTime.dwHighDateTime=0x1d4c6f7, nFileSizeHigh=0x0, nFileSizeLow=0x142ba, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ib4LCYmwjACTOC.mkv", cAlternateFileName="IB4LCY~1.MKV")) returned 1
	[0233.909] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c2da00, ftCreationTime.dwHighDateTime=0x1d4c608, ftLastAccessTime.dwLowDateTime=0x4892c2d0, ftLastAccessTime.dwHighDateTime=0x1d4cfcd, ftLastWriteTime.dwLowDateTime=0x4892c2d0, ftLastWriteTime.dwHighDateTime=0x1d4cfcd, nFileSizeHigh=0x0, nFileSizeLow=0x177bf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jR2Mu-I5 SQ3u.avi", cAlternateFileName="JR2MU-~1.AVI")) returned 1
	[0233.909] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe05cc700, ftCreationTime.dwHighDateTime=0x1d4d59f, ftLastAccessTime.dwLowDateTime=0x277c6a20, ftLastAccessTime.dwHighDateTime=0x1d4d34b, ftLastWriteTime.dwLowDateTime=0x277c6a20, ftLastWriteTime.dwHighDateTime=0x1d4d34b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Kiz3yd_jKS3G", cAlternateFileName="KIZ3YD~1")) returned 1
	[0233.909] GetProcessHeap () returned 0x800000
	[0233.909] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0233.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Kiz3yd_jKS3G\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe05cc700, ftCreationTime.dwHighDateTime=0x1d4d59f, ftLastAccessTime.dwLowDateTime=0x277c6a20, ftLastAccessTime.dwHighDateTime=0x1d4d34b, ftLastWriteTime.dwLowDateTime=0x277c6a20, ftLastWriteTime.dwHighDateTime=0x1d4d34b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0234.011] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe05cc700, ftCreationTime.dwHighDateTime=0x1d4d59f, ftLastAccessTime.dwLowDateTime=0x277c6a20, ftLastAccessTime.dwHighDateTime=0x1d4d34b, ftLastWriteTime.dwLowDateTime=0x277c6a20, ftLastWriteTime.dwHighDateTime=0x1d4d34b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.011] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77019f60, ftCreationTime.dwHighDateTime=0x1d4c569, ftLastAccessTime.dwLowDateTime=0x92a987d0, ftLastAccessTime.dwHighDateTime=0x1d4d308, ftLastWriteTime.dwLowDateTime=0x92a987d0, ftLastWriteTime.dwHighDateTime=0x1d4d308, nFileSizeHigh=0x0, nFileSizeLow=0x107a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="09w-E4Y71T4.mkv", cAlternateFileName="09W-E4~1.MKV")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414fdb60, ftCreationTime.dwHighDateTime=0x1d4d16d, ftLastAccessTime.dwLowDateTime=0x7db960b0, ftLastAccessTime.dwHighDateTime=0x1d4d3d6, ftLastWriteTime.dwLowDateTime=0x7db960b0, ftLastWriteTime.dwHighDateTime=0x1d4d3d6, nFileSizeHigh=0x0, nFileSizeLow=0x10ea9, dwReserved0=0x0, dwReserved1=0x0, cFileName="6cR9osgR2Tu5qVbk.swf", cAlternateFileName="6CR9OS~1.SWF")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf79eac0, ftCreationTime.dwHighDateTime=0x1d4c7a0, ftLastAccessTime.dwLowDateTime=0xb5be5d80, ftLastAccessTime.dwHighDateTime=0x1d4c814, ftLastWriteTime.dwLowDateTime=0xb5be5d80, ftLastWriteTime.dwHighDateTime=0x1d4c814, nFileSizeHigh=0x0, nFileSizeLow=0x137ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="7 9V5P8ZB6-EMJQSsz.mkv", cAlternateFileName="79V5P8~1.MKV")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e875410, ftCreationTime.dwHighDateTime=0x1d4d1de, ftLastAccessTime.dwLowDateTime=0x7eba54d0, ftLastAccessTime.dwHighDateTime=0x1d4d2f8, ftLastWriteTime.dwLowDateTime=0x7eba54d0, ftLastWriteTime.dwHighDateTime=0x1d4d2f8, nFileSizeHigh=0x0, nFileSizeLow=0x29e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="d9Ht.avi", cAlternateFileName="")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ce20d0, ftCreationTime.dwHighDateTime=0x1d4d153, ftLastAccessTime.dwLowDateTime=0x96c0f420, ftLastAccessTime.dwHighDateTime=0x1d4d371, ftLastWriteTime.dwLowDateTime=0x96c0f420, ftLastWriteTime.dwHighDateTime=0x1d4d371, nFileSizeHigh=0x0, nFileSizeLow=0xa7cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnB1x8hygs8.mkv", cAlternateFileName="DNB1X8~1.MKV")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb3ec00, ftCreationTime.dwHighDateTime=0x1d4cadf, ftLastAccessTime.dwLowDateTime=0x97fd9bc0, ftLastAccessTime.dwHighDateTime=0x1d4d161, ftLastWriteTime.dwLowDateTime=0x97fd9bc0, ftLastWriteTime.dwHighDateTime=0x1d4d161, nFileSizeHigh=0x0, nFileSizeLow=0x757f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fv7TE0xe31VhJVICPaB.flv", cAlternateFileName="FV7TE0~1.FLV")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3517ee0, ftCreationTime.dwHighDateTime=0x1d4c956, ftLastAccessTime.dwLowDateTime=0x669dde50, ftLastAccessTime.dwHighDateTime=0x1d4c720, ftLastWriteTime.dwLowDateTime=0x669dde50, ftLastWriteTime.dwHighDateTime=0x1d4c720, nFileSizeHigh=0x0, nFileSizeLow=0x180fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxnzS.swf", cAlternateFileName="")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x890f4ef0, ftCreationTime.dwHighDateTime=0x1d4c72b, ftLastAccessTime.dwLowDateTime=0x4e704110, ftLastAccessTime.dwHighDateTime=0x1d4d3c3, ftLastWriteTime.dwLowDateTime=0x4e704110, ftLastWriteTime.dwHighDateTime=0x1d4d3c3, nFileSizeHigh=0x0, nFileSizeLow=0x88d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="G-f8PprPfsByp3Qs9kZN.mkv", cAlternateFileName="G-F8PP~1.MKV")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x792bd880, ftCreationTime.dwHighDateTime=0x1d4d4b6, ftLastAccessTime.dwLowDateTime=0x34271460, ftLastAccessTime.dwHighDateTime=0x1d4cfdf, ftLastWriteTime.dwLowDateTime=0x34271460, ftLastWriteTime.dwHighDateTime=0x1d4cfdf, nFileSizeHigh=0x0, nFileSizeLow=0x14f05, dwReserved0=0x0, dwReserved1=0x0, cFileName="hFC9O2gMDMHx63.flv", cAlternateFileName="HFC9O2~1.FLV")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84401780, ftCreationTime.dwHighDateTime=0x1d4cd69, ftLastAccessTime.dwLowDateTime=0x6e4c2c80, ftLastAccessTime.dwHighDateTime=0x1d4c8c7, ftLastWriteTime.dwLowDateTime=0x6e4c2c80, ftLastWriteTime.dwHighDateTime=0x1d4c8c7, nFileSizeHigh=0x0, nFileSizeLow=0x6a55, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlOsYVCjduMTx.mkv", cAlternateFileName="HLOSYV~1.MKV")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x619ed380, ftCreationTime.dwHighDateTime=0x1d4d591, ftLastAccessTime.dwLowDateTime=0x4deb17a0, ftLastAccessTime.dwHighDateTime=0x1d4ca64, ftLastWriteTime.dwLowDateTime=0x4deb17a0, ftLastWriteTime.dwHighDateTime=0x1d4ca64, nFileSizeHigh=0x0, nFileSizeLow=0x9b2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="mUb4QuxW6rxD2.swf", cAlternateFileName="MUB4QU~1.SWF")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433b8d10, ftCreationTime.dwHighDateTime=0x1d4c5ac, ftLastAccessTime.dwLowDateTime=0xa0ac62a0, ftLastAccessTime.dwHighDateTime=0x1d4d09a, ftLastWriteTime.dwLowDateTime=0xa0ac62a0, ftLastWriteTime.dwHighDateTime=0x1d4d09a, nFileSizeHigh=0x0, nFileSizeLow=0xa39e, dwReserved0=0x0, dwReserved1=0x0, cFileName="weWj35I_Rc5.mp4", cAlternateFileName="WEWJ35~1.MP4")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5358a970, ftCreationTime.dwHighDateTime=0x1d4c82d, ftLastAccessTime.dwLowDateTime=0xc6b27310, ftLastAccessTime.dwHighDateTime=0x1d4d313, ftLastWriteTime.dwLowDateTime=0xc6b27310, ftLastWriteTime.dwHighDateTime=0x1d4d313, nFileSizeHigh=0x0, nFileSizeLow=0x16fd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y8QR34B_.swf", cAlternateFileName="")) returned 1
	[0234.012] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5358a970, ftCreationTime.dwHighDateTime=0x1d4c82d, ftLastAccessTime.dwLowDateTime=0xc6b27310, ftLastAccessTime.dwHighDateTime=0x1d4d313, ftLastWriteTime.dwLowDateTime=0xc6b27310, ftLastWriteTime.dwHighDateTime=0x1d4d313, nFileSizeHigh=0x0, nFileSizeLow=0x16fd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y8QR34B_.swf", cAlternateFileName="")) returned 0
	[0234.012] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0234.014] GetProcessHeap () returned 0x800000
	[0234.014] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0234.014] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25ad7f70, ftCreationTime.dwHighDateTime=0x1d4d13b, ftLastAccessTime.dwLowDateTime=0xe6456060, ftLastAccessTime.dwHighDateTime=0x1d4d585, ftLastWriteTime.dwLowDateTime=0xe6456060, ftLastWriteTime.dwHighDateTime=0x1d4d585, nFileSizeHigh=0x0, nFileSizeLow=0x34dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LpHdXt.swf", cAlternateFileName="")) returned 1
	[0234.014] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9761e30, ftCreationTime.dwHighDateTime=0x1d4cb5d, ftLastAccessTime.dwLowDateTime=0xeee49ec0, ftLastAccessTime.dwHighDateTime=0x1d4ce9b, ftLastWriteTime.dwLowDateTime=0xeee49ec0, ftLastWriteTime.dwHighDateTime=0x1d4ce9b, nFileSizeHigh=0x0, nFileSizeLow=0xc2f7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PjEuUQuy_Ek6SQ6YMTlb.swf", cAlternateFileName="PJEUUQ~1.SWF")) returned 1
	[0234.014] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8cca50, ftCreationTime.dwHighDateTime=0x1d4c5a9, ftLastAccessTime.dwLowDateTime=0x43583370, ftLastAccessTime.dwHighDateTime=0x1d4d46b, ftLastWriteTime.dwLowDateTime=0x43583370, ftLastWriteTime.dwHighDateTime=0x1d4d46b, nFileSizeHigh=0x0, nFileSizeLow=0xc1a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="q1IvbzVUoz4Ci cB4VNr.flv", cAlternateFileName="Q1IVBZ~1.FLV")) returned 1
	[0234.014] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a163510, ftCreationTime.dwHighDateTime=0x1d4ce25, ftLastAccessTime.dwLowDateTime=0xb0d1f160, ftLastAccessTime.dwHighDateTime=0x1d4c981, ftLastWriteTime.dwLowDateTime=0xb0d1f160, ftLastWriteTime.dwHighDateTime=0x1d4c981, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qHvZPdWu", cAlternateFileName="")) returned 1
	[0234.014] GetProcessHeap () returned 0x800000
	[0234.014] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0234.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\qHvZPdWu\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a163510, ftCreationTime.dwHighDateTime=0x1d4ce25, ftLastAccessTime.dwLowDateTime=0xb0d1f160, ftLastAccessTime.dwHighDateTime=0x1d4c981, ftLastWriteTime.dwLowDateTime=0xb0d1f160, ftLastWriteTime.dwHighDateTime=0x1d4c981, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0234.082] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a163510, ftCreationTime.dwHighDateTime=0x1d4ce25, ftLastAccessTime.dwLowDateTime=0xb0d1f160, ftLastAccessTime.dwHighDateTime=0x1d4c981, ftLastWriteTime.dwLowDateTime=0xb0d1f160, ftLastWriteTime.dwHighDateTime=0x1d4c981, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.082] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c928b0, ftCreationTime.dwHighDateTime=0x1d4d250, ftLastAccessTime.dwLowDateTime=0x68999740, ftLastAccessTime.dwHighDateTime=0x1d4c670, ftLastWriteTime.dwLowDateTime=0x68999740, ftLastWriteTime.dwHighDateTime=0x1d4c670, nFileSizeHigh=0x0, nFileSizeLow=0x2438, dwReserved0=0x0, dwReserved1=0x0, cFileName="5D40F.mkv", cAlternateFileName="")) returned 1
	[0234.082] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26feef60, ftCreationTime.dwHighDateTime=0x1d4c75b, ftLastAccessTime.dwLowDateTime=0xae247020, ftLastAccessTime.dwHighDateTime=0x1d4d2ee, ftLastWriteTime.dwLowDateTime=0xae247020, ftLastWriteTime.dwHighDateTime=0x1d4d2ee, nFileSizeHigh=0x0, nFileSizeLow=0x117b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="69_Z.mkv", cAlternateFileName="")) returned 1
	[0234.082] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232738f0, ftCreationTime.dwHighDateTime=0x1d4c5e6, ftLastAccessTime.dwLowDateTime=0xe742f2c0, ftLastAccessTime.dwHighDateTime=0x1d4d22e, ftLastWriteTime.dwLowDateTime=0xe742f2c0, ftLastWriteTime.dwHighDateTime=0x1d4d22e, nFileSizeHigh=0x0, nFileSizeLow=0xc37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bLrJJW2eJyY5gS1.swf", cAlternateFileName="BLRJJW~1.SWF")) returned 1
	[0234.082] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x116e66e0, ftCreationTime.dwHighDateTime=0x1d4c6e7, ftLastAccessTime.dwLowDateTime=0x35afc1c0, ftLastAccessTime.dwHighDateTime=0x1d4d475, ftLastWriteTime.dwLowDateTime=0x35afc1c0, ftLastWriteTime.dwHighDateTime=0x1d4d475, nFileSizeHigh=0x0, nFileSizeLow=0x878d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ix0yo_BO-9WLgFp4s.mp4", cAlternateFileName="IX0YO_~1.MP4")) returned 1
	[0234.082] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60d71f10, ftCreationTime.dwHighDateTime=0x1d4c6dd, ftLastAccessTime.dwLowDateTime=0x1a5a96c0, ftLastAccessTime.dwHighDateTime=0x1d4cbc4, ftLastWriteTime.dwLowDateTime=0x1a5a96c0, ftLastWriteTime.dwHighDateTime=0x1d4cbc4, nFileSizeHigh=0x0, nFileSizeLow=0x18bdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="m_QtptbX-.swf", cAlternateFileName="M_QTPT~1.SWF")) returned 1
	[0234.083] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb30b7e80, ftCreationTime.dwHighDateTime=0x1d4ca01, ftLastAccessTime.dwLowDateTime=0xc3cd9440, ftLastAccessTime.dwHighDateTime=0x1d4cc10, ftLastWriteTime.dwLowDateTime=0xc3cd9440, ftLastWriteTime.dwHighDateTime=0x1d4cc10, nFileSizeHigh=0x0, nFileSizeLow=0x111de, dwReserved0=0x0, dwReserved1=0x0, cFileName="nvyeoY1yu.swf", cAlternateFileName="NVYEOY~1.SWF")) returned 1
	[0234.083] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6436f030, ftCreationTime.dwHighDateTime=0x1d4c7bf, ftLastAccessTime.dwLowDateTime=0xf7c38770, ftLastAccessTime.dwHighDateTime=0x1d4d2e4, ftLastWriteTime.dwLowDateTime=0xf7c38770, ftLastWriteTime.dwHighDateTime=0x1d4d2e4, nFileSizeHigh=0x0, nFileSizeLow=0x116a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="nzBNbKlNGAIDF.swf", cAlternateFileName="NZBNBK~1.SWF")) returned 1
	[0234.083] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0670920, ftCreationTime.dwHighDateTime=0x1d4c70c, ftLastAccessTime.dwLowDateTime=0xcecb8240, ftLastAccessTime.dwHighDateTime=0x1d4cfde, ftLastWriteTime.dwLowDateTime=0xcecb8240, ftLastWriteTime.dwHighDateTime=0x1d4cfde, nFileSizeHigh=0x0, nFileSizeLow=0x55c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pxU6LPOvxRVM7F2.mp4", cAlternateFileName="PXU6LP~1.MP4")) returned 1
	[0234.083] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x407aeb90, ftCreationTime.dwHighDateTime=0x1d4d022, ftLastAccessTime.dwLowDateTime=0x97f78200, ftLastAccessTime.dwHighDateTime=0x1d4cf84, ftLastWriteTime.dwLowDateTime=0x97f78200, ftLastWriteTime.dwHighDateTime=0x1d4cf84, nFileSizeHigh=0x0, nFileSizeLow=0x2cb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="sZ2iIiPSh3v9NUhzRi9M.swf", cAlternateFileName="SZ2III~1.SWF")) returned 1
	[0234.083] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe995290, ftCreationTime.dwHighDateTime=0x1d4cccd, ftLastAccessTime.dwLowDateTime=0xb4129870, ftLastAccessTime.dwHighDateTime=0x1d4d10b, ftLastWriteTime.dwLowDateTime=0xb4129870, ftLastWriteTime.dwHighDateTime=0x1d4d10b, nFileSizeHigh=0x0, nFileSizeLow=0xd6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXzS_WDwtnHKR.flv", cAlternateFileName="UXZS_W~1.FLV")) returned 1
	[0234.083] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf2438c0, ftCreationTime.dwHighDateTime=0x1d4ccc6, ftLastAccessTime.dwLowDateTime=0x95abef10, ftLastAccessTime.dwHighDateTime=0x1d4c857, ftLastWriteTime.dwLowDateTime=0x95abef10, ftLastWriteTime.dwHighDateTime=0x1d4c857, nFileSizeHigh=0x0, nFileSizeLow=0x1e54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z8pF4EGT_b5xd4fe.mp4", cAlternateFileName="Z8PF4E~1.MP4")) returned 1
	[0234.083] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x176e8a60, ftCreationTime.dwHighDateTime=0x1d4cee5, ftLastAccessTime.dwLowDateTime=0x10ffa290, ftLastAccessTime.dwHighDateTime=0x1d4d237, ftLastWriteTime.dwLowDateTime=0x10ffa290, ftLastWriteTime.dwHighDateTime=0x1d4d237, nFileSizeHigh=0x0, nFileSizeLow=0x92f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zBRmm908 bFbg.mkv", cAlternateFileName="ZBRMM9~1.MKV")) returned 1
	[0234.083] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcea5d7d0, ftCreationTime.dwHighDateTime=0x1d4c5d8, ftLastAccessTime.dwLowDateTime=0x4463b080, ftLastAccessTime.dwHighDateTime=0x1d4d59e, ftLastWriteTime.dwLowDateTime=0x4463b080, ftLastWriteTime.dwHighDateTime=0x1d4d59e, nFileSizeHigh=0x0, nFileSizeLow=0xd1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="_qR5vxYcP8ww8FHYo8.avi", cAlternateFileName="_QR5VX~1.AVI")) returned 1
	[0234.083] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcea5d7d0, ftCreationTime.dwHighDateTime=0x1d4c5d8, ftLastAccessTime.dwLowDateTime=0x4463b080, ftLastAccessTime.dwHighDateTime=0x1d4d59e, ftLastWriteTime.dwLowDateTime=0x4463b080, ftLastWriteTime.dwHighDateTime=0x1d4d59e, nFileSizeHigh=0x0, nFileSizeLow=0xd1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="_qR5vxYcP8ww8FHYo8.avi", cAlternateFileName="_QR5VX~1.AVI")) returned 0
	[0234.083] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0234.084] GetProcessHeap () returned 0x800000
	[0234.084] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0234.084] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3253f80, ftCreationTime.dwHighDateTime=0x1d4cf68, ftLastAccessTime.dwLowDateTime=0x92de4570, ftLastAccessTime.dwHighDateTime=0x1d4c9de, ftLastWriteTime.dwLowDateTime=0x92de4570, ftLastWriteTime.dwHighDateTime=0x1d4c9de, nFileSizeHigh=0x0, nFileSizeLow=0x4c7a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RcwIm_Ju0c.mkv", cAlternateFileName="RCWIM_~1.MKV")) returned 1
	[0234.084] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da2b840, ftCreationTime.dwHighDateTime=0x1d4c7b1, ftLastAccessTime.dwLowDateTime=0xe930ea0, ftLastAccessTime.dwHighDateTime=0x1d4d414, ftLastWriteTime.dwLowDateTime=0xe930ea0, ftLastWriteTime.dwHighDateTime=0x1d4d414, nFileSizeHigh=0x0, nFileSizeLow=0x7b92, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WLpn513fGl_PV6.flv", cAlternateFileName="WLPN51~1.FLV")) returned 1
	[0234.085] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da2b840, ftCreationTime.dwHighDateTime=0x1d4c7b1, ftLastAccessTime.dwLowDateTime=0xe930ea0, ftLastAccessTime.dwHighDateTime=0x1d4d414, ftLastWriteTime.dwLowDateTime=0xe930ea0, ftLastWriteTime.dwHighDateTime=0x1d4d414, nFileSizeHigh=0x0, nFileSizeLow=0x7b92, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WLpn513fGl_PV6.flv", cAlternateFileName="WLPN51~1.FLV")) returned 0
	[0234.085] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0234.085] GetProcessHeap () returned 0x800000
	[0234.085] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0234.085] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe5e840a0, ftLastAccessTime.dwHighDateTime=0x1d57293, ftLastWriteTime.dwLowDateTime=0xe5e840a0, ftLastWriteTime.dwHighDateTime=0x1d57293, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
	[0234.085] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0234.085] GetProcessHeap () returned 0x800000
	[0234.085] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0234.087] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0234.087] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1
	[0234.087] GetProcessHeap () returned 0x800000
	[0234.087] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0234.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0234.088] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.088] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0234.088] GetProcessHeap () returned 0x800000
	[0234.088] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0234.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0234.088] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.088] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
	[0234.089] GetProcessHeap () returned 0x800000
	[0234.089] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0234.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0234.090] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.090] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0234.090] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0234.090] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
	[0234.090] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0234.090] GetProcessHeap () returned 0x800000
	[0234.090] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0234.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0234.110] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.110] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0234.110] GetProcessHeap () returned 0x800000
	[0234.110] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0234.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0234.123] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.124] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0234.124] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0234.124] GetProcessHeap () returned 0x800000
	[0234.124] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0234.124] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0234.125] GetProcessHeap () returned 0x800000
	[0234.125] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0234.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0234.128] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.128] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
	[0234.128] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1
	[0234.129] GetProcessHeap () returned 0x800000
	[0234.129] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0234.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0234.237] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.237] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1
	[0234.237] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1
	[0234.237] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1
	[0234.237] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0
	[0234.237] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0234.238] GetProcessHeap () returned 0x800000
	[0234.238] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0234.238] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
	[0234.239] GetProcessHeap () returned 0x800000
	[0234.239] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0234.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0234.239] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.239] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1
	[0234.239] GetProcessHeap () returned 0x800000
	[0234.239] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0234.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0234.240] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.240] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1
	[0234.240] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0
	[0234.240] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0234.241] GetProcessHeap () returned 0x800000
	[0234.241] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0234.241] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0
	[0234.241] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0234.242] GetProcessHeap () returned 0x800000
	[0234.242] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0234.243] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0
	[0234.243] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0234.243] GetProcessHeap () returned 0x800000
	[0234.243] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0234.244] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0234.244] GetProcessHeap () returned 0x800000
	[0234.244] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0234.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.492] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.492] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1
	[0234.493] GetProcessHeap () returned 0x800000
	[0234.493] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0234.493] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.493] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0234.493] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0234.493] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
	[0234.493] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0234.493] GetProcessHeap () returned 0x800000
	[0234.493] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.493] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1
	[0234.493] GetProcessHeap () returned 0x800000
	[0234.493] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0234.494] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.494] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0234.494] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0234.494] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
	[0234.494] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0234.494] GetProcessHeap () returned 0x800000
	[0234.494] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.494] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1
	[0234.494] GetProcessHeap () returned 0x800000
	[0234.494] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0234.494] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.494] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0234.494] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0234.494] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
	[0234.495] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0234.495] GetProcessHeap () returned 0x800000
	[0234.495] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.495] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0234.495] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0234.495] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1
	[0234.495] GetProcessHeap () returned 0x800000
	[0234.495] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.495] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0234.495] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.495] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0234.495] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0234.495] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
	[0234.495] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0234.495] GetProcessHeap () returned 0x800000
	[0234.495] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.495] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0
	[0234.495] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.495] GetProcessHeap () returned 0x800000
	[0234.495] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0234.495] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0234.495] GetProcessHeap () returned 0x800000
	[0234.496] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.496] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.496] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1
	[0234.496] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1
	[0234.496] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 0
	[0234.496] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.496] GetProcessHeap () returned 0x800000
	[0234.496] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.496] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0234.496] GetProcessHeap () returned 0x800000
	[0234.496] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0234.820] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.821] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1
	[0234.821] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1
	[0234.821] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1
	[0234.821] GetProcessHeap () returned 0x800000
	[0234.821] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0234.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0234.821] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.821] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0234.821] GetProcessHeap () returned 0x800000
	[0234.821] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0234.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0234.821] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.821] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1
	[0234.822] GetProcessHeap () returned 0x800000
	[0234.822] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e80088
	[0234.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0234.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0234.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0234.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
	[0234.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
	[0234.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
	[0234.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
	[0234.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
	[0234.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
	[0234.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
	[0234.965] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
	[0234.966] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
	[0234.966] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
	[0234.966] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
	[0234.966] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0
	[0234.966] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0234.966] GetProcessHeap () returned 0x800000
	[0234.966] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e80088 | out: hHeap=0x800000) returned 1
	[0234.966] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0
	[0234.966] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0234.967] GetProcessHeap () returned 0x800000
	[0234.967] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0234.968] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0234.968] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0234.968] GetProcessHeap () returned 0x800000
	[0234.968] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0234.968] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 0
	[0234.968] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0234.968] GetProcessHeap () returned 0x800000
	[0234.968] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0234.968] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0234.968] GetProcessHeap () returned 0x800000
	[0234.968] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0234.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0235.062] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.062] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1
	[0235.062] GetProcessHeap () returned 0x800000
	[0235.062] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0235.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0235.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.062] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1
	[0235.062] GetProcessHeap () returned 0x800000
	[0235.062] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0235.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0235.062] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.062] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0235.063] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0235.063] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0235.063] GetProcessHeap () returned 0x800000
	[0235.063] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0235.063] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 0
	[0235.063] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0235.063] GetProcessHeap () returned 0x800000
	[0235.063] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0235.063] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb4bd20c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1
	[0235.063] GetProcessHeap () returned 0x800000
	[0235.063] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0235.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb4bd20c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0235.063] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb4bd20c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.063] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb4bd20c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0235.063] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0235.063] GetProcessHeap () returned 0x800000
	[0235.063] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0235.063] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer", cAlternateFileName="")) returned 1
	[0235.063] GetProcessHeap () returned 0x800000
	[0235.063] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0235.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0235.239] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.239] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4777f11, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExplorerStartupLog.etl", cAlternateFileName="EXPLOR~2.ETL")) returned 1
	[0235.240] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb8291b2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExplorerStartupLog_RunOnce.etl", cAlternateFileName="EXPLOR~1.ETL")) returned 1
	[0235.240] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_1024.db", cAlternateFileName="TH78CB~1.DB")) returned 1
	[0235.240] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_256.db", cAlternateFileName="TH5A2B~1.DB")) returned 1
	[0235.240] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x17dc6ba, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_32.db", cAlternateFileName="THUMBC~4.DB")) returned 1
	[0235.240] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_96.db", cAlternateFileName="THUMBC~3.DB")) returned 1
	[0235.240] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x17dc6ba, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xcb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_idx.db", cAlternateFileName="THUMBC~2.DB")) returned 1
	[0235.240] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_sr.db", cAlternateFileName="THUMBC~1.DB")) returned 1
	[0235.240] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbcache_sr.db", cAlternateFileName="THUMBC~1.DB")) returned 0
	[0235.240] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0235.241] GetProcessHeap () returned 0x800000
	[0235.241] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0235.241] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1
	[0235.241] GetProcessHeap () returned 0x800000
	[0235.241] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0235.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0235.241] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.241] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0235.241] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0235.241] GetProcessHeap () returned 0x800000
	[0235.241] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0235.241] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0235.242] GetProcessHeap () returned 0x800000
	[0235.242] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0235.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0235.427] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.427] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0235.427] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e4d86f4, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1
	[0235.427] GetProcessHeap () returned 0x800000
	[0235.427] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0235.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e4d86f4, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0235.427] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e4d86f4, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.427] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0235.428] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd021fb60, ftLastWriteTime.dwHighDateTime=0x1cb892e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0235.428] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd021fb60, ftLastWriteTime.dwHighDateTime=0x1cb892e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
	[0235.428] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0235.428] GetProcessHeap () returned 0x800000
	[0235.428] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0235.428] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0235.428] GetProcessHeap () returned 0x800000
	[0235.428] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0235.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0235.428] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.428] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0235.428] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0235.428] GetProcessHeap () returned 0x800000
	[0235.428] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0235.428] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0235.428] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0235.428] GetProcessHeap () returned 0x800000
	[0235.428] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0235.428] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1
	[0235.428] GetProcessHeap () returned 0x800000
	[0235.428] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0235.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0235.429] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.429] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0235.429] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0235.429] GetProcessHeap () returned 0x800000
	[0235.429] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0235.429] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7364c0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0235.429] GetProcessHeap () returned 0x800000
	[0235.429] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0235.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7364c0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0235.661] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7364c0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.661] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 1
	[0235.661] GetProcessHeap () returned 0x800000
	[0235.661] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0235.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.100] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.101] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x661a180, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e570c75, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0236.101] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e3cd240, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0236.101] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MM5O9XQS", cAlternateFileName="")) returned 1
	[0236.101] GetProcessHeap () returned 0x800000
	[0236.101] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0236.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0236.102] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.102] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0236.102] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0236.102] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0236.102] GetProcessHeap () returned 0x800000
	[0236.102] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0236.103] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMMR5K9K", cAlternateFileName="")) returned 1
	[0236.103] GetProcessHeap () returned 0x800000
	[0236.103] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0236.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0236.103] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.103] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0236.103] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0236.103] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0236.104] GetProcessHeap () returned 0x800000
	[0236.104] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0236.104] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIJUQL1C", cAlternateFileName="")) returned 1
	[0236.104] GetProcessHeap () returned 0x800000
	[0236.104] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0236.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0236.104] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.104] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0236.104] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0236.104] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0236.104] GetProcessHeap () returned 0x800000
	[0236.104] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0236.104] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="X9OHK109", cAlternateFileName="")) returned 1
	[0236.104] GetProcessHeap () returned 0x800000
	[0236.104] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0236.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0236.104] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.104] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0236.104] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0236.105] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0236.105] GetProcessHeap () returned 0x800000
	[0236.105] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0236.105] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="X9OHK109", cAlternateFileName="")) returned 0
	[0236.105] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.105] GetProcessHeap () returned 0x800000
	[0236.105] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0236.105] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe710360, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0236.105] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedb45673, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0236.105] GetProcessHeap () returned 0x800000
	[0236.105] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0236.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedb45673, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.254] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedb45673, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.254] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedb45673, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.254] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.254] GetProcessHeap () returned 0x800000
	[0236.254] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0236.254] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Virtualized", cAlternateFileName="VIRTUA~1")) returned 1
	[0236.254] GetProcessHeap () returned 0x800000
	[0236.254] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0236.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.255] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.255] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.255] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.255] GetProcessHeap () returned 0x800000
	[0236.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0236.255] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Virtualized", cAlternateFileName="VIRTUA~1")) returned 0
	[0236.255] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0236.255] GetProcessHeap () returned 0x800000
	[0236.255] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0236.255] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x579672e0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat", cAlternateFileName="")) returned 1
	[0236.255] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x579672e0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG1", cAlternateFileName="USRCLA~2.LOG")) returned 1
	[0236.255] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65cdec0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65cdec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9c5705f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG2", cAlternateFileName="USRCLA~1.LOG")) returned 1
	[0236.255] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65cdec0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65cdec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x962222ec, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf", cAlternateFileName="USRCLA~1.BLF")) returned 1
	[0236.255] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6581c00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6581c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="USRCLA~2.REG")) returned 1
	[0236.255] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="USRCLA~1.REG")) returned 1
	[0236.255] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1
	[0236.256] GetProcessHeap () returned 0x800000
	[0236.256] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0236.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0236.256] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.256] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERC", cAlternateFileName="")) returned 1
	[0236.256] GetProcessHeap () returned 0x800000
	[0236.256] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0236.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.256] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.256] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.256] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.256] GetProcessHeap () returned 0x800000
	[0236.256] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0236.256] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2810, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1
	[0236.256] GetProcessHeap () returned 0x800000
	[0236.256] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0236.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2810, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.257] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2810, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.257] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2810, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.257] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.257] GetProcessHeap () returned 0x800000
	[0236.257] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0236.257] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2810, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 0
	[0236.257] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0236.259] GetProcessHeap () returned 0x800000
	[0236.259] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0236.259] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 0
	[0236.259] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0236.259] GetProcessHeap () returned 0x800000
	[0236.260] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0236.260] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1
	[0236.260] GetProcessHeap () returned 0x800000
	[0236.260] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0236.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0236.274] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.274] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1
	[0236.275] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1
	[0236.275] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1
	[0236.275] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1
	[0236.275] GetProcessHeap () returned 0x800000
	[0236.275] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0236.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0236.295] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.295] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="new", cAlternateFileName="")) returned 1
	[0236.295] GetProcessHeap () returned 0x800000
	[0236.295] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0236.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.304] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.304] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
	[0236.304] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
	[0236.304] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
	[0236.304] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0
	[0236.304] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.304] GetProcessHeap () returned 0x800000
	[0236.304] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0236.304] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="new", cAlternateFileName="")) returned 0
	[0236.305] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0236.305] GetProcessHeap () returned 0x800000
	[0236.305] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0236.305] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1
	[0236.305] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1
	[0236.305] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
	[0236.305] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1
	[0236.305] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1
	[0236.305] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeold.xml", cAlternateFileName="")) returned 1
	[0236.305] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0236.305] GetProcessHeap () returned 0x800000
	[0236.305] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0236.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.364] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.364] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0236.364] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="GREENB~1.HTM")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="GREENB~1.JPG")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="HANDPR~1.HTM")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="HANDPR~1.JPG")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="ORANGE~1.HTM")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="ORANGE~1.JPG")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="SHADES~1.HTM")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="SHADES~1.JPG")) returned 1
	[0236.365] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="SOFTBL~1.HTM")) returned 1
	[0236.366] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
	[0236.366] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
	[0236.366] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
	[0236.366] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0
	[0236.366] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.366] GetProcessHeap () returned 0x800000
	[0236.366] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0236.366] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7b05332, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
	[0236.366] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
	[0236.367] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0
	[0236.367] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0236.367] GetProcessHeap () returned 0x800000
	[0236.367] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0236.367] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1
	[0236.367] GetProcessHeap () returned 0x800000
	[0236.367] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0236.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0236.367] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.367] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1
	[0236.367] GetProcessHeap () returned 0x800000
	[0236.367] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0236.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.367] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.367] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1
	[0236.367] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 1
	[0236.367] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 0
	[0236.367] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.368] GetProcessHeap () returned 0x800000
	[0236.368] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0236.368] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 0
	[0236.368] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0236.368] GetProcessHeap () returned 0x800000
	[0236.368] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0236.368] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
	[0236.368] GetProcessHeap () returned 0x800000
	[0236.368] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0236.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0236.536] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.536] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
	[0236.537] GetProcessHeap () returned 0x800000
	[0236.537] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0236.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.537] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.537] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.537] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.537] GetProcessHeap () returned 0x800000
	[0236.537] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0236.537] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1
	[0236.537] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 0
	[0236.537] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0236.537] GetProcessHeap () returned 0x800000
	[0236.537] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0236.537] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0
	[0236.537] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0236.537] GetProcessHeap () returned 0x800000
	[0236.537] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0236.537] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0236.537] GetProcessHeap () returned 0x800000
	[0236.537] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0236.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Temp\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0236.538] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.538] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1
	[0236.538] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 0
	[0236.538] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0236.538] GetProcessHeap () returned 0x800000
	[0236.538] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0236.538] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0236.538] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0
	[0236.538] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0236.538] GetProcessHeap () returned 0x800000
	[0236.538] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0236.539] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1
	[0236.539] GetProcessHeap () returned 0x800000
	[0236.539] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0236.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0236.750] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.750] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0236.750] GetProcessHeap () returned 0x800000
	[0236.750] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0236.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0236.750] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.751] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1
	[0236.751] GetProcessHeap () returned 0x800000
	[0236.751] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0236.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0236.751] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.751] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1
	[0236.751] GetProcessHeap () returned 0x800000
	[0236.751] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0236.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.752] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.752] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
	[0236.752] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
	[0236.752] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 0
	[0236.752] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.752] GetProcessHeap () returned 0x800000
	[0236.752] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0236.752] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1
	[0236.752] GetProcessHeap () returned 0x800000
	[0236.752] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0236.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.752] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.752] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
	[0236.752] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
	[0236.752] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 0
	[0236.752] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.752] GetProcessHeap () returned 0x800000
	[0236.752] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0236.752] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0
	[0236.753] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0236.753] GetProcessHeap () returned 0x800000
	[0236.753] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0236.753] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 0
	[0236.753] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0236.753] GetProcessHeap () returned 0x800000
	[0236.753] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0236.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0236.753] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0236.753] GetProcessHeap () returned 0x800000
	[0236.753] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0236.753] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
	[0236.753] GetProcessHeap () returned 0x800000
	[0236.753] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0236.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0236.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.753] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1
	[0236.753] GetProcessHeap () returned 0x800000
	[0236.753] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0236.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0236.759] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.759] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1
	[0236.759] GetProcessHeap () returned 0x800000
	[0236.759] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0236.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0236.759] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.759] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.760] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0236.760] GetProcessHeap () returned 0x800000
	[0236.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0236.760] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0
	[0236.760] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0236.760] GetProcessHeap () returned 0x800000
	[0236.760] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0236.760] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0236.760] GetProcessHeap () returned 0x800000
	[0236.760] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e50070
	[0236.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0236.794] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.801] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0236.802] GetProcessHeap () returned 0x800000
	[0236.802] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0236.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0236.811] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.811] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.811] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0236.811] GetProcessHeap () returned 0x800000
	[0236.811] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0236.812] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0236.812] GetProcessHeap () returned 0x800000
	[0236.812] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0236.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0236.812] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.812] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0236.812] GetProcessHeap () returned 0x800000
	[0236.812] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0236.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.812] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.812] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.812] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.812] GetProcessHeap () returned 0x800000
	[0236.812] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0236.812] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
	[0236.813] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0236.813] GetProcessHeap () returned 0x800000
	[0236.813] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0236.813] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0236.813] GetProcessHeap () returned 0x800000
	[0236.813] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0236.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0236.813] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.813] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1
	[0236.813] GetProcessHeap () returned 0x800000
	[0236.813] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0236.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.838] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.838] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0236.838] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1
	[0236.838] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1
	[0236.838] GetProcessHeap () returned 0x800000
	[0236.838] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0236.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0236.839] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.839] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1
	[0236.839] GetProcessHeap () returned 0x800000
	[0236.839] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f84100
	[0236.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0236.839] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.839] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.839] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0236.839] GetProcessHeap () returned 0x800000
	[0236.839] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f84100 | out: hHeap=0x800000) returned 1
	[0236.839] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1
	[0236.839] GetProcessHeap () returned 0x800000
	[0236.839] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f84100
	[0236.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0236.849] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.849] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0236.849] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1
	[0236.849] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1
	[0236.849] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0236.849] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
	[0236.850] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0236.850] GetProcessHeap () returned 0x800000
	[0236.850] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f84100 | out: hHeap=0x800000) returned 1
	[0236.850] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0
	[0236.850] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0236.850] GetProcessHeap () returned 0x800000
	[0236.850] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0236.850] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0236.850] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
	[0236.850] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.850] GetProcessHeap () returned 0x800000
	[0236.850] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0236.851] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0
	[0236.851] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0236.851] GetProcessHeap () returned 0x800000
	[0236.851] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0236.851] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
	[0236.851] GetProcessHeap () returned 0x800000
	[0236.851] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0236.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0236.851] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.851] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1
	[0236.851] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1
	[0236.851] GetProcessHeap () returned 0x800000
	[0236.851] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0236.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.855] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.855] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1
	[0236.856] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1
	[0236.856] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0
	[0236.856] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.857] GetProcessHeap () returned 0x800000
	[0236.857] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0236.857] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 0
	[0236.857] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0236.857] GetProcessHeap () returned 0x800000
	[0236.857] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0236.857] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
	[0236.857] GetProcessHeap () returned 0x800000
	[0236.857] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0236.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0236.857] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.857] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1
	[0236.857] GetProcessHeap () returned 0x800000
	[0236.857] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0236.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.857] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.857] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1
	[0236.857] GetProcessHeap () returned 0x800000
	[0236.857] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0236.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0236.864] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.864] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.864] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0236.864] GetProcessHeap () returned 0x800000
	[0236.864] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0236.864] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1
	[0236.864] GetProcessHeap () returned 0x800000
	[0236.864] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0236.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0236.864] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.864] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.864] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0236.864] GetProcessHeap () returned 0x800000
	[0236.864] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0236.864] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1
	[0236.864] GetProcessHeap () returned 0x800000
	[0236.864] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0236.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0236.865] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.865] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.865] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0236.865] GetProcessHeap () returned 0x800000
	[0236.865] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0236.865] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 0
	[0236.865] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.865] GetProcessHeap () returned 0x800000
	[0236.865] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0236.865] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0
	[0236.865] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0236.865] GetProcessHeap () returned 0x800000
	[0236.865] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0236.865] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0236.865] GetProcessHeap () returned 0x800000
	[0236.865] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8ab820
	[0236.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d17a8
	[0236.875] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.875] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7f4ba2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0236.875] GetProcessHeap () returned 0x800000
	[0236.875] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0236.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7f4ba2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.876] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7f4ba2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.876] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd021fb60, ftLastWriteTime.dwHighDateTime=0x1cb892e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0236.876] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd021fb60, ftLastWriteTime.dwHighDateTime=0x1cb892e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
	[0236.876] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.876] GetProcessHeap () returned 0x800000
	[0236.876] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0236.876] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1
	[0236.876] GetProcessHeap () returned 0x800000
	[0236.876] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0236.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.897] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.897] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0236.897] GetProcessHeap () returned 0x800000
	[0236.897] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0236.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0236.897] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.897] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.897] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0236.897] GetProcessHeap () returned 0x800000
	[0236.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0236.897] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0236.897] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.897] GetProcessHeap () returned 0x800000
	[0236.897] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0236.898] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETldCache", cAlternateFileName="IETLDC~1")) returned 1
	[0236.898] GetProcessHeap () returned 0x800000
	[0236.898] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0236.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0236.907] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.907] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe6c3ce0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0236.907] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0236.907] GetProcessHeap () returned 0x800000
	[0236.907] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0236.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0236.907] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.907] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0236.907] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0236.908] GetProcessHeap () returned 0x800000
	[0236.908] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0236.908] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0236.908] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0236.908] GetProcessHeap () returned 0x800000
	[0236.908] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0236.908] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0236.908] GetProcessHeap () returned 0x800000
	[0236.908] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0236.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0237.099] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.099] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.099] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xe03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.library-ms", cAlternateFileName="DOCUME~1.LIB")) returned 1
	[0237.099] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xdd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.library-ms", cAlternateFileName="MUSIC~1.LIB")) returned 1
	[0237.099] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xdfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures.library-ms", cAlternateFileName="PICTUR~1.LIB")) returned 1
	[0237.099] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 1
	[0237.099] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 0
	[0237.099] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0237.100] GetProcessHeap () returned 0x800000
	[0237.100] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0237.100] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1
	[0237.100] GetProcessHeap () returned 0x800000
	[0237.100] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0237.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0237.100] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.101] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0237.101] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0237.101] GetProcessHeap () returned 0x800000
	[0237.101] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0237.101] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1
	[0237.101] GetProcessHeap () returned 0x800000
	[0237.101] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0237.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0237.101] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.101] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0237.101] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0237.101] GetProcessHeap () returned 0x800000
	[0237.101] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0237.101] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1
	[0237.101] GetProcessHeap () returned 0x800000
	[0237.101] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0237.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0237.101] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.101] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0237.102] GetProcessHeap () returned 0x800000
	[0237.102] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0237.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0237.102] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.102] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0237.102] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0237.102] GetProcessHeap () returned 0x800000
	[0237.102] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0237.102] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
	[0237.102] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0237.102] GetProcessHeap () returned 0x800000
	[0237.102] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0237.102] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0237.102] GetProcessHeap () returned 0x800000
	[0237.102] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0237.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0237.146] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.146] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x125b3d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutomaticDestinations", cAlternateFileName="AUTOMA~1")) returned 1
	[0237.146] GetProcessHeap () returned 0x800000
	[0237.146] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0237.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x125b3d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0237.146] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x125b3d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.146] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x14bb620, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1b4dd67f29cb1962.automaticDestinations-ms", cAlternateFileName="1B4DD6~1.AUT")) returned 1
	[0237.146] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x14bb620, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1b4dd67f29cb1962.automaticDestinations-ms", cAlternateFileName="1B4DD6~1.AUT")) returned 0
	[0237.146] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0237.147] GetProcessHeap () returned 0x800000
	[0237.147] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0237.147] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CustomDestinations", cAlternateFileName="CUSTOM~1")) returned 1
	[0237.147] GetProcessHeap () returned 0x800000
	[0237.147] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0237.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0237.163] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.163] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="1b4dd67f29cb1962.customDestinations-ms", cAlternateFileName="1B4DD6~1.CUS")) returned 1
	[0237.163] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xc67cc5, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x3c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="5afe4de1b92fc382.customDestinations-ms", cAlternateFileName="5AFE4D~1.CUS")) returned 1
	[0237.163] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="7e4dca80246863e3.customDestinations-ms", cAlternateFileName="7E4DCA~1.CUS")) returned 1
	[0237.163] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="7e4dca80246863e3.customDestinations-ms", cAlternateFileName="7E4DCA~1.CUS")) returned 0
	[0237.164] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0237.164] GetProcessHeap () returned 0x800000
	[0237.164] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0237.164] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.164] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0237.164] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0237.164] GetProcessHeap () returned 0x800000
	[0237.164] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0237.164] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0237.164] GetProcessHeap () returned 0x800000
	[0237.165] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0237.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0237.188] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.188] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeca9f1ef, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x639ff80f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Compressed (zipped) Folder.ZFSendToTarget", cAlternateFileName="COMPRE~1.ZFS")) returned 1
	[0237.188] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c45a701, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb52ab9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop (create shortcut).DeskLink", cAlternateFileName="DESKTO~1.DES")) returned 1
	[0237.188] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xec18bec6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d828fa3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0237.188] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63dece0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.mydocs", cAlternateFileName="DOCUME~1.MYD")) returned 1
	[0237.188] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d802e42, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d802e42, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fax Recipient.lnk", cAlternateFileName="FAXREC~1.LNK")) returned 1
	[0237.189] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c48085e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb9ed75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 1
	[0237.189] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c48085e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb9ed75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 0
	[0237.189] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0237.189] GetProcessHeap () returned 0x800000
	[0237.189] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0237.189] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0237.189] GetProcessHeap () returned 0x800000
	[0237.189] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0237.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0237.190] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.190] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x63dece0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.190] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1
	[0237.190] GetProcessHeap () returned 0x800000
	[0237.190] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f740f8
	[0237.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1828
	[0237.335] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.335] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1
	[0237.335] GetProcessHeap () returned 0x800000
	[0237.335] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f84100
	[0237.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0237.398] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.399] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1
	[0237.399] GetProcessHeap () returned 0x800000
	[0237.399] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f94108
	[0237.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0237.459] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.459] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0cd7f5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0237.459] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aadace0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1ab4d101, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ease of Access.lnk", cAlternateFileName="EASEOF~1.LNK")) returned 1
	[0237.459] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a911c5d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1a98407e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Magnify.lnk", cAlternateFileName="")) returned 1
	[0237.459] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b733f17, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b733f17, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Narrator.lnk", cAlternateFileName="")) returned 1
	[0237.459] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a9f649f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1aa4275f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="ON-SCR~1.LNK")) returned 1
	[0237.459] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a9f649f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1aa4275f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="ON-SCR~1.LNK")) returned 0
	[0237.459] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0237.461] GetProcessHeap () returned 0x800000
	[0237.461] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f94108 | out: hHeap=0x800000) returned 1
	[0237.461] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a53d8cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2a53d8cd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Command Prompt.lnk", cAlternateFileName="COMMAN~1.LNK")) returned 1
	[0237.461] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec08153b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0237.461] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d655ee8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d73a72a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notepad.lnk", cAlternateFileName="")) returned 1
	[0237.461] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dcf29a8, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfec52d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Run.lnk", cAlternateFileName="")) returned 1
	[0237.461] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1
	[0237.461] GetProcessHeap () returned 0x800000
	[0237.461] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f94108
	[0237.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18e8
	[0237.476] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.476] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ddd71ea, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0d0d6f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="computer.lnk", cAlternateFileName="")) returned 1
	[0237.476] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd8af29, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e084aaf, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Control Panel.lnk", cAlternateFileName="CONTRO~1.LNK")) returned 1
	[0237.476] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec119aaf, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0237.476] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6392a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (No Add-ons).lnk", cAlternateFileName="INTERN~1.LNK")) returned 1
	[0237.476] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3d87bb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d424a7b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x51a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Private Character Editor.lnk", cAlternateFileName="PRIVAT~1.LNK")) returned 1
	[0237.476] FindNextFileW (in: hFindFile=0x34d18e8, lpFindFileData=0x304dec0 | out: lpFindFileData=0x304dec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3d87bb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d424a7b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x51a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Private Character Editor.lnk", cAlternateFileName="PRIVAT~1.LNK")) returned 0
	[0237.476] FindClose (in: hFindFile=0x34d18e8 | out: hFindFile=0x34d18e8) returned 1
	[0237.477] GetProcessHeap () returned 0x800000
	[0237.477] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f94108 | out: hHeap=0x800000) returned 1
	[0237.477] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc80587, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0237.477] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc80587, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
	[0237.477] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0237.477] GetProcessHeap () returned 0x800000
	[0237.477] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f84100 | out: hHeap=0x800000) returned 1
	[0237.477] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1
	[0237.477] GetProcessHeap () returned 0x800000
	[0237.477] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f84100
	[0237.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0237.478] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.478] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.478] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0237.478] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0237.478] GetProcessHeap () returned 0x800000
	[0237.478] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f84100 | out: hHeap=0x800000) returned 1
	[0237.478] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.478] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x587, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (64-bit).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1
	[0237.478] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6392a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1
	[0237.478] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1
	[0237.478] GetProcessHeap () returned 0x800000
	[0237.478] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f84100
	[0237.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0237.478] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.478] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec165d69, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0237.478] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd3ec69, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0387ee, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help.lnk", cAlternateFileName="")) returned 1
	[0237.479] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd3ec69, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0387ee, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help.lnk", cAlternateFileName="")) returned 0
	[0237.479] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0237.479] GetProcessHeap () returned 0x800000
	[0237.479] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f84100 | out: hHeap=0x800000) returned 1
	[0237.479] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1
	[0237.479] GetProcessHeap () returned 0x800000
	[0237.479] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3f84100
	[0237.479] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d18a8
	[0237.479] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.479] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.479] FindNextFileW (in: hFindFile=0x34d18a8, lpFindFileData=0x304e150 | out: lpFindFileData=0x304e150*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0237.479] FindClose (in: hFindFile=0x34d18a8 | out: hFindFile=0x34d18a8) returned 1
	[0237.479] GetProcessHeap () returned 0x800000
	[0237.479] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f84100 | out: hHeap=0x800000) returned 1
	[0237.479] FindNextFileW (in: hFindFile=0x34d1828, lpFindFileData=0x304e3e0 | out: lpFindFileData=0x304e3e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 0
	[0237.479] FindClose (in: hFindFile=0x34d1828 | out: hFindFile=0x34d1828) returned 1
	[0237.479] GetProcessHeap () returned 0x800000
	[0237.479] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3f740f8 | out: hHeap=0x800000) returned 1
	[0237.479] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 0
	[0237.479] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0237.479] GetProcessHeap () returned 0x800000
	[0237.479] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0237.479] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0237.480] GetProcessHeap () returned 0x800000
	[0237.480] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0237.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0237.480] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.480] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0237.480] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0237.480] GetProcessHeap () returned 0x800000
	[0237.480] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0237.480] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0237.480] GetProcessHeap () returned 0x800000
	[0237.480] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x8bb828
	[0237.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1568
	[0237.482] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.482] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff982e02, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x9b944, dwReserved0=0x0, dwReserved1=0x0, cFileName="TranscodedWallpaper.jpg", cAlternateFileName="TRANSC~1.JPG")) returned 1
	[0237.482] FindNextFileW (in: hFindFile=0x34d1568, lpFindFileData=0x304e670 | out: lpFindFileData=0x304e670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff982e02, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x9b944, dwReserved0=0x0, dwReserved1=0x0, cFileName="TranscodedWallpaper.jpg", cAlternateFileName="TRANSC~1.JPG")) returned 0
	[0237.482] FindClose (in: hFindFile=0x34d1568 | out: hFindFile=0x34d1568) returned 1
	[0237.482] GetProcessHeap () returned 0x800000
	[0237.482] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8bb828 | out: hHeap=0x800000) returned 1
	[0237.482] FindNextFileW (in: hFindFile=0x34d17a8, lpFindFileData=0x304e900 | out: lpFindFileData=0x304e900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0237.482] FindClose (in: hFindFile=0x34d17a8 | out: hFindFile=0x34d17a8) returned 1
	[0237.482] GetProcessHeap () returned 0x800000
	[0237.482] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8ab820 | out: hHeap=0x800000) returned 1
	[0237.482] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304eb90 | out: lpFindFileData=0x304eb90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
	[0237.482] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0237.482] GetProcessHeap () returned 0x800000
	[0237.482] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e50070 | out: hHeap=0x800000) returned 1
	[0237.484] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0237.484] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.484] GetProcessHeap () returned 0x800000
	[0237.484] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0237.484] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0
	[0237.484] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0237.484] GetProcessHeap () returned 0x800000
	[0237.484] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0237.484] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0237.484] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0237.484] GetProcessHeap () returned 0x800000
	[0237.484] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0237.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0237.484] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.485] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
	[0237.485] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.485] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0237.485] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0237.485] GetProcessHeap () returned 0x800000
	[0237.485] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0237.485] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0237.485] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0237.485] GetProcessHeap () returned 0x800000
	[0237.485] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0237.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0237.485] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.485] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.485] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0237.485] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0237.486] GetProcessHeap () returned 0x800000
	[0237.486] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0237.486] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0237.486] GetProcessHeap () returned 0x800000
	[0237.486] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0237.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Documents\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0237.487] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.487] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.487] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0237.487] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0237.487] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0237.487] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0
	[0237.487] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0237.488] GetProcessHeap () returned 0x800000
	[0237.488] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0237.488] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0237.488] GetProcessHeap () returned 0x800000
	[0237.488] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0237.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0237.488] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.488] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.488] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0237.488] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0237.489] GetProcessHeap () returned 0x800000
	[0237.489] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0237.489] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0237.489] GetProcessHeap () returned 0x800000
	[0237.489] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0237.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d1768
	[0237.493] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.493] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.493] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0237.493] GetProcessHeap () returned 0x800000
	[0237.493] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0237.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.493] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.493] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.493] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
	[0237.493] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0
	[0237.494] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.494] GetProcessHeap () returned 0x800000
	[0237.494] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0237.494] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
	[0237.494] GetProcessHeap () returned 0x800000
	[0237.494] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0237.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.498] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.499] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
	[0237.499] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
	[0237.499] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
	[0237.499] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
	[0237.499] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
	[0237.499] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0
	[0237.499] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.500] GetProcessHeap () returned 0x800000
	[0237.500] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0237.500] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
	[0237.500] GetProcessHeap () returned 0x800000
	[0237.500] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0237.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0237.509] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.509] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
	[0237.509] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
	[0237.510] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
	[0237.510] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
	[0237.510] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
	[0237.510] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
	[0237.510] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0
	[0237.510] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0237.510] GetProcessHeap () returned 0x800000
	[0237.510] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0237.511] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
	[0237.511] GetProcessHeap () returned 0x800000
	[0237.511] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x359efa0
	[0237.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\Windows Live\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14e8
	[0237.513] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.513] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
	[0237.513] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
	[0237.513] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1
	[0237.513] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1
	[0237.513] FindNextFileW (in: hFindFile=0x34d14e8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0
	[0237.513] FindClose (in: hFindFile=0x34d14e8 | out: hFindFile=0x34d14e8) returned 1
	[0237.514] GetProcessHeap () returned 0x800000
	[0237.514] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x359efa0 | out: hHeap=0x800000) returned 1
	[0237.514] FindNextFileW (in: hFindFile=0x34d1768, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0
	[0237.514] FindClose (in: hFindFile=0x34d1768 | out: hFindFile=0x34d1768) returned 1
	[0237.514] GetProcessHeap () returned 0x800000
	[0237.514] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0237.514] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0237.514] GetProcessHeap () returned 0x800000
	[0237.514] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0237.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Links\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.524] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.524] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.524] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0237.524] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0237.524] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1
	[0237.524] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0
	[0237.524] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.525] GetProcessHeap () returned 0x800000
	[0237.525] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0237.525] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0237.525] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0237.525] GetProcessHeap () returned 0x800000
	[0237.525] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0237.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Music\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.525] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.525] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.525] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0237.525] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.525] GetProcessHeap () returned 0x800000
	[0237.525] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0237.525] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0237.525] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0237.525] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0237.525] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1
	[0237.525] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0237.526] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
	[0237.526] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
	[0237.526] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
	[0237.526] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
	[0237.526] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
	[0237.526] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0237.526] GetProcessHeap () returned 0x800000
	[0237.526] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0237.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.526] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.526] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.526] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0237.526] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.526] GetProcessHeap () returned 0x800000
	[0237.526] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0237.526] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0237.526] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0237.526] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0237.527] GetProcessHeap () returned 0x800000
	[0237.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0237.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.527] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.527] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.527] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0237.527] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.527] GetProcessHeap () returned 0x800000
	[0237.527] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0237.527] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0237.527] GetProcessHeap () returned 0x800000
	[0237.527] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0237.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Searches\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.565] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.565] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.565] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0237.565] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
	[0237.565] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0
	[0237.565] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.566] GetProcessHeap () returned 0x800000
	[0237.566] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0237.566] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0237.566] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0237.566] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0237.566] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0237.566] GetProcessHeap () returned 0x800000
	[0237.566] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0237.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Videos\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.566] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.566] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.566] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0237.566] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.566] GetProcessHeap () returned 0x800000
	[0237.566] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0237.566] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
	[0237.566] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0237.567] GetProcessHeap () returned 0x800000
	[0237.567] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0237.567] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1
	[0237.567] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.567] FindNextFileW (in: hFindFile=0x34d15e8, lpFindFileData=0x304f5d0 | out: lpFindFileData=0x304f5d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1
	[0237.567] GetProcessHeap () returned 0x800000
	[0237.567] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x869770
	[0237.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\*", lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d13a8
	[0237.567] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.567] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0237.567] GetProcessHeap () returned 0x800000
	[0237.567] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0237.568] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.568] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.568] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1
	[0237.568] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.568] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0237.568] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1
	[0237.568] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0
	[0237.568] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.568] GetProcessHeap () returned 0x800000
	[0237.568] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0237.568] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.568] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0237.568] GetProcessHeap () returned 0x800000
	[0237.568] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0237.568] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Documents\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.568] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.568] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.568] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0237.569] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0237.569] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0237.569] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0
	[0237.569] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.569] GetProcessHeap () returned 0x800000
	[0237.569] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0237.569] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0237.569] GetProcessHeap () returned 0x800000
	[0237.569] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0237.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.569] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.569] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.569] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0237.569] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.569] GetProcessHeap () returned 0x800000
	[0237.569] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0237.569] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0237.569] GetProcessHeap () returned 0x800000
	[0237.569] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0237.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.570] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.570] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0237.570] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.570] GetProcessHeap () returned 0x800000
	[0237.570] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0237.570] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0237.570] GetProcessHeap () returned 0x800000
	[0237.570] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0237.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.570] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.570] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.570] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1
	[0237.570] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0
	[0237.570] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.570] GetProcessHeap () returned 0x800000
	[0237.570] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0237.570] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0237.570] GetProcessHeap () returned 0x800000
	[0237.570] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0237.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Music\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.571] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.571] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.571] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1
	[0237.571] GetProcessHeap () returned 0x800000
	[0237.571] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0237.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0237.850] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.850] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.850] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1
	[0237.850] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1
	[0237.850] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1
	[0237.850] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 0
	[0237.850] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0237.851] GetProcessHeap () returned 0x800000
	[0237.851] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0237.851] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 0
	[0237.851] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.851] GetProcessHeap () returned 0x800000
	[0237.851] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0237.851] FindNextFileW (in: hFindFile=0x34d13a8, lpFindFileData=0x304f340 | out: lpFindFileData=0x304f340*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0237.851] GetProcessHeap () returned 0x800000
	[0237.851] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0237.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0237.851] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.851] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.851] FindNextFileW (in: hFindFile=0x34d14a8, lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1
	[0237.851] GetProcessHeap () returned 0x800000
	[0237.851] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0237.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0237.985] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0237.985] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1
	[0237.985] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1
	[0237.985] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0237.985] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1
	[0237.985] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1
	[0237.986] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1
	[0237.986] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1
	[0237.986] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1
	[0237.986] FindNextFileW (in: hFindFile=0x34d16a8, lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1
	[0237.986] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0237.987] GetProcessHeap () returned 0x800000
	[0237.987] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0237.987] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0237.987] GetProcessHeap () returned 0x800000
	[0237.987] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0237.987] GetProcessHeap () returned 0x800000
	[0237.987] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0237.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0238.073] GetProcessHeap () returned 0x800000
	[0238.073] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0238.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0238.074] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0238.074] GetProcessHeap () returned 0x800000
	[0238.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0238.074] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0238.074] GetProcessHeap () returned 0x800000
	[0238.074] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0238.074] GetProcessHeap () returned 0x800000
	[0238.074] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3e60078
	[0238.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Videos\\*", lpFindFileData=0x304f0b0 | out: lpFindFileData=0x304f0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d14a8
	[0238.074] GetProcessHeap () returned 0x800000
	[0238.074] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x89b818
	[0238.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x304ee20 | out: lpFindFileData=0x304ee20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x34d16a8
	[0238.075] FindClose (in: hFindFile=0x34d16a8 | out: hFindFile=0x34d16a8) returned 1
	[0238.075] GetProcessHeap () returned 0x800000
	[0238.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x89b818 | out: hHeap=0x800000) returned 1
	[0238.075] FindClose (in: hFindFile=0x34d14a8 | out: hFindFile=0x34d14a8) returned 1
	[0238.075] GetProcessHeap () returned 0x800000
	[0238.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3e60078 | out: hHeap=0x800000) returned 1
	[0238.075] FindClose (in: hFindFile=0x34d13a8 | out: hFindFile=0x34d13a8) returned 1
	[0238.075] GetProcessHeap () returned 0x800000
	[0238.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x869770 | out: hHeap=0x800000) returned 1
	[0238.075] FindClose (in: hFindFile=0x34d15e8 | out: hFindFile=0x34d15e8) returned 1
	[0238.075] GetProcessHeap () returned 0x800000
	[0238.075] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34b0048 | out: hHeap=0x800000) returned 1
	[0238.077] FindClose (in: hFindFile=0x89a7d0 | out: hFindFile=0x89a7d0) returned 1
	[0238.077] GetProcessHeap () returned 0x800000
	[0238.077] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x88a7c8 | out: hHeap=0x800000) returned 1
	[0238.077] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0xffffffff) returned 0x0
	[0238.077] SetEvent (hEvent=0x110) returned 1
	[0238.078] SetEvent (hEvent=0x10c) returned 1
	[0238.078] SetEvent (hEvent=0x114) returned 1
	[0238.091] WaitForMultipleObjects (nCount=0x2, lpHandles=0x304faf8*=0x118, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0x0
	[0238.091] CloseHandle (hObject=0x120) returned 1
	[0238.091] CloseHandle (hObject=0x118) returned 1
	[0238.091] GetProcessHeap () returned 0x800000
	[0238.091] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x50) returned 0x8e05b0
	[0238.091] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0238.091] GetProcAddress (hModule=0x76300000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7632d668
	[0238.091] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1
	[0238.091] GetProcessHeap () returned 0x800000
	[0238.091] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e05b0 | out: hHeap=0x800000) returned 1
	[0238.092] CloseHandle (hObject=0x10c) returned 1
	[0238.092] CloseHandle (hObject=0x110) returned 1
	[0238.092] CloseHandle (hObject=0x114) returned 1
	[0238.092] GetProcessHeap () returned 0x800000
	[0238.092] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x848718 | out: hHeap=0x800000) returned 1
	[0238.093] GetProcessHeap () returned 0x800000
	[0238.093] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837408 | out: hHeap=0x800000) returned 1
	[0238.093] GetProcessHeap () returned 0x800000
	[0238.093] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8486d8 | out: hHeap=0x800000) returned 1
	[0238.093] GetProcessHeap () returned 0x800000
	[0238.093] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8371f8 | out: hHeap=0x800000) returned 1
	[0238.093] GetProcessHeap () returned 0x800000
	[0238.093] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8116e0 | out: hHeap=0x800000) returned 1
	[0238.093] GetProcessHeap () returned 0x800000
	[0238.093] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837388 | out: hHeap=0x800000) returned 1

Thread:
	id = 53
	os_tid = 0x150

	[0133.053] GetProcessHeap () returned 0x800000
	[0133.053] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34d2350
	[0133.053] GetProcessHeap () returned 0x800000
	[0133.053] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34e2358
	[0133.053] GetProcessHeap () returned 0x800000
	[0133.053] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x28) returned 0x837ec8
	[0133.053] GetProcessHeap () returned 0x800000
	[0133.053] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x110102) returned 0x36c0020
	[0133.053] GetProcessHeap () returned 0x800000
	[0133.053] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x50) returned 0x34d11d8
	[0133.054] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0133.054] GetProcAddress (hModule=0x76300000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7632d650
	[0133.054] Wow64DisableWow64FsRedirection (in: OldValue=0x322fc68 | out: OldValue=0x322fc68*=0x0) returned 1
	[0133.054] GetProcessHeap () returned 0x800000
	[0133.054] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d11d8 | out: hHeap=0x800000) returned 1
	[0133.054] SetEvent (hEvent=0xfc) returned 1
	[0133.054] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.054] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=129) returned 1
	[0133.054] CloseHandle (hObject=0x134) returned 1
	[0133.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 0x26
	[0133.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini")) returned 0x26
	[0133.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\$recycle.bin\\s-1-5-21-3388679973-3930757225-3770151564-1000\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0x26
	[0133.100] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.155] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1984228) returned 1
	[0133.157] CloseHandle (hObject=0x134) returned 1
	[0133.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20
	[0133.158] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.160] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0
	[0133.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.265] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1312656) returned 1
	[0133.265] CloseHandle (hObject=0x198) returned 1
	[0133.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll")) returned 0x20
	[0133.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll")) returned 0x20
	[0133.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\odffilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\odffilt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.265] SetEvent (hEvent=0xfc) returned 1
	[0133.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.266] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1486736) returned 1
	[0133.267] CloseHandle (hObject=0x198) returned 1
	[0133.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll")) returned 0x20
	[0133.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll")) returned 0x20
	[0133.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\offfiltx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\offfiltx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.268] SetEvent (hEvent=0xfc) returned 1
	[0133.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.270] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2124664) returned 1
	[0133.270] CloseHandle (hObject=0x198) returned 1
	[0133.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll")) returned 0x20
	[0133.270] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.270] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\VISFILT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\visfilt.dll")) returned 0
	[0133.270] SetEvent (hEvent=0xfc) returned 1
	[0133.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.271] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6811) returned 1
	[0133.271] CloseHandle (hObject=0x198) returned 1
	[0133.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg")) returned 0x20
	[0133.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg")) returned 0x20
	[0133.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.CFG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.272] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=323936) returned 1
	[0133.272] CloseHandle (hObject=0x198) returned 1
	[0133.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt")) returned 0x20
	[0133.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt")) returned 0x20
	[0133.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.273] SetEvent (hEvent=0xfc) returned 1
	[0133.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.274] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=606062) returned 1
	[0133.274] CloseHandle (hObject=0x198) returned 1
	[0133.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt")) returned 0x20
	[0133.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt")) returned 0x20
	[0133.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\CGMIMP32.FNT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\cgmimp32.fnt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.274] SetEvent (hEvent=0xfc) returned 1
	[0133.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.275] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=712592) returned 1
	[0133.275] CloseHandle (hObject=0x198) returned 1
	[0133.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt")) returned 0x20
	[0133.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt")) returned 0x20
	[0133.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\epsimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0133.276] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=320384) returned 1
	[0133.276] CloseHandle (hObject=0x194) returned 1
	[0133.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt")) returned 0x20
	[0133.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt")) returned 0x20
	[0133.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\gifimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0133.278] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=241024) returned 1
	[0133.278] CloseHandle (hObject=0x194) returned 1
	[0133.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt")) returned 0x20
	[0133.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt")) returned 0x20
	[0133.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\jpegim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0133.279] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1908) returned 1
	[0133.279] CloseHandle (hObject=0x194) returned 1
	[0133.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm")) returned 0x20
	[0133.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm")) returned 0x20
	[0133.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.CGM" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.cgm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0133.280] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15067) returned 1
	[0133.280] CloseHandle (hObject=0x194) returned 1
	[0133.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps")) returned 0x20
	[0133.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps")) returned 0x20
	[0133.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0133.280] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1069) returned 1
	[0133.280] CloseHandle (hObject=0x194) returned 1
	[0133.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif")) returned 0x20
	[0133.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif")) returned 0x20
	[0133.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.282] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1061) returned 1
	[0133.282] CloseHandle (hObject=0x198) returned 1
	[0133.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg")) returned 0x20
	[0133.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg")) returned 0x20
	[0133.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.282] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1682) returned 1
	[0133.282] CloseHandle (hObject=0x198) returned 1
	[0133.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png")) returned 0x20
	[0133.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png")) returned 0x20
	[0133.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.283] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1382) returned 1
	[0133.283] CloseHandle (hObject=0x198) returned 1
	[0133.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg")) returned 0x20
	[0133.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg")) returned 0x20
	[0133.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\ms.wpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0133.284] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=73080) returned 1
	[0133.284] CloseHandle (hObject=0x194) returned 1
	[0133.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt")) returned 0x20
	[0133.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt")) returned 0x20
	[0133.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\pictim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0133.285] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=302976) returned 1
	[0133.285] CloseHandle (hObject=0x194) returned 1
	[0133.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt")) returned 0x20
	[0133.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt")) returned 0x20
	[0133.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\png32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0133.286] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=280448) returned 1
	[0133.286] CloseHandle (hObject=0x194) returned 1
	[0133.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt")) returned 0x20
	[0133.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt")) returned 0x20
	[0133.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\common files\\microsoft shared\\grphflt\\wpgimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0133.287] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1257984) returned 1
	[0133.287] CloseHandle (hObject=0x194) returned 1
	[0133.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll")) returned 0x20
	[0133.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll")) returned 0x20
	[0133.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\hxds.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\hxds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0133.288] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1831424) returned 1
	[0133.289] CloseHandle (hObject=0x194) returned 1
	[0133.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll")) returned 0x20
	[0133.289] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.289] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\ITIRCL55.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\itircl55.dll")) returned 0
	[0133.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0133.290] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=430080) returned 1
	[0133.290] CloseHandle (hObject=0x194) returned 1
	[0133.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll")) returned 0x20
	[0133.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll")) returned 0x20
	[0133.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\msitss55.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\help\\msitss55.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.291] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.291] CloseHandle (hObject=0x198) returned 1
	[0133.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20
	[0133.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20
	[0133.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.292] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4096) returned 1
	[0133.292] CloseHandle (hObject=0x198) returned 1
	[0133.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20
	[0133.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20
	[0133.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.294] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27045) returned 1
	[0133.294] CloseHandle (hObject=0x198) returned 1
	[0133.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20
	[0133.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20
	[0133.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.294] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=193024) returned 1
	[0133.294] CloseHandle (hObject=0x198) returned 1
	[0133.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe")) returned 0x20
	[0133.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe")) returned 0x20
	[0133.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ConvertInkStore.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\convertinkstore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.295] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.295] CloseHandle (hObject=0x198) returned 1
	[0133.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20
	[0133.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20
	[0133.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.296] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.296] CloseHandle (hObject=0x198) returned 1
	[0133.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20
	[0133.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20
	[0133.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.297] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4096) returned 1
	[0133.297] CloseHandle (hObject=0x198) returned 1
	[0133.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20
	[0133.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20
	[0133.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.298] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4096) returned 1
	[0133.298] CloseHandle (hObject=0x198) returned 1
	[0133.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20
	[0133.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20
	[0133.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0133.299] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=89600) returned 1
	[0133.299] CloseHandle (hObject=0x19c) returned 1
	[0133.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20
	[0133.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20
	[0133.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0133.301] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31744) returned 1
	[0133.301] CloseHandle (hObject=0x19c) returned 1
	[0133.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20
	[0133.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20
	[0133.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0133.301] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33280) returned 1
	[0133.301] CloseHandle (hObject=0x19c) returned 1
	[0133.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20
	[0133.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20
	[0133.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0133.302] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=62976) returned 1
	[0133.302] CloseHandle (hObject=0x19c) returned 1
	[0133.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20
	[0133.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20
	[0133.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0133.303] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=197120) returned 1
	[0133.303] CloseHandle (hObject=0x19c) returned 1
	[0133.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20
	[0133.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20
	[0133.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x19c
	[0133.304] GetFileSizeEx (in: hFile=0x19c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=224256) returned 1
	[0133.304] CloseHandle (hObject=0x19c) returned 1
	[0133.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20
	[0133.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20
	[0133.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.305] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8704) returned 1
	[0133.305] CloseHandle (hObject=0x198) returned 1
	[0133.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20
	[0133.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20
	[0133.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.306] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0133.306] CloseHandle (hObject=0x198) returned 1
	[0133.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20
	[0133.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20
	[0133.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.307] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9216) returned 1
	[0133.307] CloseHandle (hObject=0x198) returned 1
	[0133.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui")) returned 0x20
	[0133.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui")) returned 0x20
	[0133.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InkWatson.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkwatson.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.308] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0133.308] CloseHandle (hObject=0x198) returned 1
	[0133.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20
	[0133.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20
	[0133.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.309] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22528) returned 1
	[0133.309] CloseHandle (hObject=0x198) returned 1
	[0133.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20
	[0133.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20
	[0133.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.310] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0133.310] CloseHandle (hObject=0x198) returned 1
	[0133.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20
	[0133.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20
	[0133.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.310] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222208) returned 1
	[0133.310] CloseHandle (hObject=0x198) returned 1
	[0133.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20
	[0133.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20
	[0133.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.312] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8704) returned 1
	[0133.312] CloseHandle (hObject=0x198) returned 1
	[0133.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20
	[0133.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20
	[0133.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.418] SetEvent (hEvent=0xfc) returned 1
	[0133.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8
	[0133.419] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0133.419] CloseHandle (hObject=0x1a8) returned 1
	[0133.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20
	[0133.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20
	[0133.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.419] SetEvent (hEvent=0xfc) returned 1
	[0133.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8
	[0133.420] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43520) returned 1
	[0133.420] CloseHandle (hObject=0x1a8) returned 1
	[0133.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20
	[0133.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20
	[0133.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8
	[0133.420] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=194048) returned 1
	[0133.420] CloseHandle (hObject=0x1a8) returned 1
	[0133.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20
	[0133.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20
	[0133.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.422] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3072) returned 1
	[0133.422] CloseHandle (hObject=0x1a4) returned 1
	[0133.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20
	[0133.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20
	[0133.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.545] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3072) returned 1
	[0133.548] CloseHandle (hObject=0x1e0) returned 1
	[0133.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui")) returned 0x20
	[0133.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui")) returned 0x20
	[0133.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.553] SetEvent (hEvent=0xfc) returned 1
	[0133.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.660] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=219) returned 1
	[0133.663] CloseHandle (hObject=0x1b8) returned 1
	[0133.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20
	[0133.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20
	[0133.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.689] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2652) returned 1
	[0133.689] CloseHandle (hObject=0x1b8) returned 1
	[0133.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20
	[0133.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20
	[0133.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.690] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=94720) returned 1
	[0133.690] CloseHandle (hObject=0x1b8) returned 1
	[0133.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20
	[0133.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20
	[0133.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.693] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2246) returned 1
	[0133.693] CloseHandle (hObject=0x1b8) returned 1
	[0133.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20
	[0133.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20
	[0133.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.693] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2240) returned 1
	[0133.693] CloseHandle (hObject=0x1b8) returned 1
	[0133.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20
	[0133.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20
	[0133.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.694] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2644) returned 1
	[0133.694] CloseHandle (hObject=0x1b8) returned 1
	[0133.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20
	[0133.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20
	[0133.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.695] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2542) returned 1
	[0133.695] CloseHandle (hObject=0x1b8) returned 1
	[0133.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20
	[0133.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20
	[0133.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.696] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2568) returned 1
	[0133.696] CloseHandle (hObject=0x1b8) returned 1
	[0133.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20
	[0133.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20
	[0133.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.696] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2596) returned 1
	[0133.696] CloseHandle (hObject=0x1b8) returned 1
	[0133.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20
	[0133.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20
	[0133.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.697] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2520) returned 1
	[0133.697] CloseHandle (hObject=0x1b8) returned 1
	[0133.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20
	[0133.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20
	[0133.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.698] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.698] CloseHandle (hObject=0x1b8) returned 1
	[0133.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20
	[0133.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20
	[0133.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.698] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.698] CloseHandle (hObject=0x1b8) returned 1
	[0133.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20
	[0133.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20
	[0133.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\journal.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.699] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1367552) returned 1
	[0133.699] CloseHandle (hObject=0x1b8) returned 1
	[0133.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\journal.dll")) returned 0x20
	[0133.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\journal.dll")) returned 0x20
	[0133.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\journal.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\journal.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\journal.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.700] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.700] CloseHandle (hObject=0x1b8) returned 1
	[0133.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20
	[0133.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20
	[0133.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.701] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4096) returned 1
	[0133.701] CloseHandle (hObject=0x1b8) returned 1
	[0133.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20
	[0133.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20
	[0133.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.702] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4096) returned 1
	[0133.702] CloseHandle (hObject=0x1b8) returned 1
	[0133.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20
	[0133.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20
	[0133.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.703] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1704448) returned 1
	[0133.703] CloseHandle (hObject=0x1b8) returned 1
	[0133.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0x20
	[0133.703] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.704] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0
	[0133.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.704] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=507904) returned 1
	[0133.704] CloseHandle (hObject=0x1b8) returned 1
	[0133.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20
	[0133.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20
	[0133.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.705] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1547264) returned 1
	[0133.705] CloseHandle (hObject=0x1b8) returned 1
	[0133.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20
	[0133.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20
	[0133.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.705] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6331392) returned 1
	[0133.705] CloseHandle (hObject=0x1b8) returned 1
	[0133.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0x20
	[0133.706] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.706] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0
	[0133.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.708] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49664) returned 1
	[0133.708] CloseHandle (hObject=0x1b8) returned 1
	[0133.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20
	[0133.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20
	[0133.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.709] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1071616) returned 1
	[0133.709] CloseHandle (hObject=0x1b8) returned 1
	[0133.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20
	[0133.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20
	[0133.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.710] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.710] CloseHandle (hObject=0x1b8) returned 1
	[0133.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20
	[0133.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20
	[0133.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.710] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.710] CloseHandle (hObject=0x1b8) returned 1
	[0133.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20
	[0133.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20
	[0133.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.712] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4096) returned 1
	[0133.712] CloseHandle (hObject=0x1b8) returned 1
	[0133.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20
	[0133.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20
	[0133.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.712] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.712] CloseHandle (hObject=0x1b8) returned 1
	[0133.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20
	[0133.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20
	[0133.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.713] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4096) returned 1
	[0133.713] CloseHandle (hObject=0x1b8) returned 1
	[0133.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20
	[0133.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20
	[0133.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.714] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.714] CloseHandle (hObject=0x1b8) returned 1
	[0133.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20
	[0133.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20
	[0133.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.715] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=169984) returned 1
	[0133.715] CloseHandle (hObject=0x1b8) returned 1
	[0133.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20
	[0133.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20
	[0133.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.716] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.716] CloseHandle (hObject=0x1b8) returned 1
	[0133.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20
	[0133.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20
	[0133.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.718] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=695296) returned 1
	[0133.718] CloseHandle (hObject=0x1b8) returned 1
	[0133.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20
	[0133.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20
	[0133.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.718] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.718] CloseHandle (hObject=0x1b8) returned 1
	[0133.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20
	[0133.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20
	[0133.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.719] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.719] CloseHandle (hObject=0x1b8) returned 1
	[0133.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20
	[0133.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20
	[0133.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.720] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.720] CloseHandle (hObject=0x1b8) returned 1
	[0133.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui")) returned 0x20
	[0133.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui")) returned 0x20
	[0133.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sr-Latn-CS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.852] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0133.853] CloseHandle (hObject=0x1b8) returned 1
	[0133.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20
	[0133.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20
	[0133.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.853] SetEvent (hEvent=0xfc) returned 1
	[0133.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.854] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40448) returned 1
	[0133.854] CloseHandle (hObject=0x1b8) returned 1
	[0133.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20
	[0133.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20
	[0133.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.854] SetEvent (hEvent=0xfc) returned 1
	[0133.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.855] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=448000) returned 1
	[0133.855] CloseHandle (hObject=0x1e0) returned 1
	[0133.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0x20
	[0133.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0x20
	[0133.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.972] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=224256) returned 1
	[0133.974] CloseHandle (hObject=0x1e0) returned 1
	[0133.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20
	[0133.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20
	[0133.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0134.123] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1012648) returned 1
	[0134.123] CloseHandle (hObject=0x168) returned 1
	[0134.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll")) returned 0x20
	[0134.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll")) returned 0x20
	[0134.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acees.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.124] SetEvent (hEvent=0xfc) returned 1
	[0134.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0134.125] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15800) returned 1
	[0134.125] CloseHandle (hObject=0x168) returned 1
	[0134.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll")) returned 0x20
	[0134.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll")) returned 0x20
	[0134.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODTXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodtxt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.130] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=537504) returned 1
	[0134.130] CloseHandle (hObject=0x1b8) returned 1
	[0134.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll")) returned 0x20
	[0134.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll")) returned 0x20
	[0134.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.131] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=451480) returned 1
	[0134.131] CloseHandle (hObject=0x1b8) returned 1
	[0134.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll")) returned 0x20
	[0134.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll")) returned 0x20
	[0134.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACER3X.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acer3x.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0134.294] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=55744) returned 1
	[0134.294] CloseHandle (hObject=0x148) returned 1
	[0134.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll")) returned 0x20
	[0134.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll")) returned 0x20
	[0134.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACERCLR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerclr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0134.295] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1565) returned 1
	[0134.295] CloseHandle (hObject=0x148) returned 1
	[0134.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml")) returned 0x20
	[0134.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml")) returned 0x20
	[0134.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\ExcelMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0134.402] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2296) returned 1
	[0134.402] CloseHandle (hObject=0x148) returned 1
	[0134.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml")) returned 0x20
	[0134.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml")) returned 0x20
	[0134.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\excel.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.402] SetEvent (hEvent=0xfc) returned 1
	[0134.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0134.403] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1231) returned 1
	[0134.403] CloseHandle (hObject=0x148) returned 1
	[0134.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml")) returned 0x20
	[0134.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml")) returned 0x20
	[0134.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\InfoPathMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.403] SetEvent (hEvent=0xfc) returned 1
	[0134.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0134.404] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1852) returned 1
	[0134.404] CloseHandle (hObject=0x148) returned 1
	[0134.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml")) returned 0x20
	[0134.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml")) returned 0x20
	[0134.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\infopath.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.404] SetEvent (hEvent=0xfc) returned 1
	[0134.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0134.405] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=571320) returned 1
	[0134.405] CloseHandle (hObject=0x148) returned 1
	[0134.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe")) returned 0x20
	[0134.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe")) returned 0x20
	[0134.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\ODeploy.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\odeploy.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.405] SetEvent (hEvent=0xfc) returned 1
	[0134.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0134.512] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15224) returned 1
	[0134.512] CloseHandle (hObject=0x1f4) returned 1
	[0134.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll")) returned 0x20
	[0134.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll")) returned 0x20
	[0134.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.512] SetEvent (hEvent=0xfc) returned 1
	[0134.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0134.513] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=71236) returned 1
	[0134.513] CloseHandle (hObject=0x1f4) returned 1
	[0134.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm")) returned 0x20
	[0134.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm")) returned 0x20
	[0134.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OCT.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\oct.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.514] SetEvent (hEvent=0xfc) returned 1
	[0134.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0134.514] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5557) returned 1
	[0134.514] CloseHandle (hObject=0x1f4) returned 1
	[0134.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml")) returned 0x20
	[0134.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml")) returned 0x20
	[0134.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0134.515] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=819) returned 1
	[0134.515] CloseHandle (hObject=0x1f4) returned 1
	[0134.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml")) returned 0x20
	[0134.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml")) returned 0x20
	[0134.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OfficeMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.517] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=191872) returned 1
	[0134.517] CloseHandle (hObject=0x1b8) returned 1
	[0134.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll")) returned 0x20
	[0134.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll")) returned 0x20
	[0134.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\OSETUPUI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\osetupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\promointl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0134.666] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15760) returned 1
	[0134.666] CloseHandle (hObject=0x148) returned 1
	[0134.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\promointl.dll")) returned 0x20
	[0134.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\promointl.dll")) returned 0x20
	[0134.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\promointl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\promointl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\promointl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.667] SetEvent (hEvent=0xfc) returned 1
	[0134.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.767] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31094) returned 1
	[0134.770] CloseHandle (hObject=0x190) returned 1
	[0134.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml")) returned 0x20
	[0134.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml")) returned 0x20
	[0134.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.796] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49488) returned 1
	[0134.796] CloseHandle (hObject=0x190) returned 1
	[0134.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll")) returned 0x20
	[0134.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll")) returned 0x20
	[0134.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\vbajet32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.887] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=123776) returned 1
	[0134.887] CloseHandle (hObject=0x1b8) returned 1
	[0134.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll")) returned 0x20
	[0134.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll")) returned 0x20
	[0134.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FBIBLIO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fbiblio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.888] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=181120) returned 1
	[0134.888] CloseHandle (hObject=0x1b8) returned 1
	[0134.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll")) returned 0x20
	[0134.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll")) returned 0x20
	[0134.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPLACE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fplace.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.889] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=159104) returned 1
	[0134.889] CloseHandle (hObject=0x1b8) returned 1
	[0134.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll")) returned 0x20
	[0134.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll")) returned 0x20
	[0134.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FSTOCK.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fstock.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.890] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=234880) returned 1
	[0134.890] CloseHandle (hObject=0x1b8) returned 1
	[0134.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll")) returned 0x20
	[0134.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll")) returned 0x20
	[0134.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IETAG.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\ietag.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.891] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=101248) returned 1
	[0134.891] CloseHandle (hObject=0x1b8) returned 1
	[0134.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll")) returned 0x20
	[0134.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll")) returned 0x20
	[0134.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\IMCONTACT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\imcontact.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.892] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8918) returned 1
	[0134.892] CloseHandle (hObject=0x1b8) returned 1
	[0134.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml")) returned 0x20
	[0134.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml")) returned 0x20
	[0134.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.893] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1844) returned 1
	[0134.893] CloseHandle (hObject=0x1b8) returned 1
	[0134.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml")) returned 0x20
	[0134.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml")) returned 0x20
	[0134.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.894] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39017) returned 1
	[0134.894] CloseHandle (hObject=0x1b8) returned 1
	[0134.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat")) returned 0x20
	[0134.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat")) returned 0x20
	[0134.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.DAT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.894] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2687) returned 1
	[0134.895] CloseHandle (hObject=0x1b8) returned 1
	[0134.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml")) returned 0x20
	[0134.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml")) returned 0x20
	[0134.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\STOCKS.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\stocks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.896] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8564) returned 1
	[0134.896] CloseHandle (hObject=0x1b8) returned 1
	[0134.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml")) returned 0x20
	[0134.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml")) returned 0x20
	[0134.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.897] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=227311) returned 1
	[0134.897] CloseHandle (hObject=0x1b8) returned 1
	[0134.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl")) returned 0x20
	[0134.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl")) returned 0x20
	[0134.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\lists\\basmla.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.898] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=110976) returned 1
	[0134.898] CloseHandle (hObject=0x1b8) returned 1
	[0134.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll")) returned 0x20
	[0134.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll")) returned 0x20
	[0134.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.899] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1183416) returned 1
	[0134.900] CloseHandle (hObject=0x1b8) returned 1
	[0134.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt")) returned 0x20
	[0134.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt")) returned 0x20
	[0134.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.901] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=364928) returned 1
	[0134.901] CloseHandle (hObject=0x1b8) returned 1
	[0134.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll")) returned 0x20
	[0134.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll")) returned 0x20
	[0134.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MOFL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mofl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.902] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13684) returned 1
	[0134.902] CloseHandle (hObject=0x1b8) returned 1
	[0134.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb")) returned 0x20
	[0134.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb")) returned 0x20
	[0134.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\mstag.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.904] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15744) returned 1
	[0134.904] CloseHandle (hObject=0x1b8) returned 1
	[0134.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe")) returned 0x20
	[0134.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe")) returned 0x20
	[0134.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\SmartTagInstall.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\smarttaginstall.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.904] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=174440) returned 1
	[0134.904] CloseHandle (hObject=0x1b8) returned 1
	[0134.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20
	[0134.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20
	[0134.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.906] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=255) returned 1
	[0134.906] CloseHandle (hObject=0x1b8) returned 1
	[0134.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20
	[0134.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20
	[0134.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.907] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1074) returned 1
	[0134.907] CloseHandle (hObject=0x1b8) returned 1
	[0134.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20
	[0134.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20
	[0134.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.135] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2575) returned 1
	[0135.135] CloseHandle (hObject=0x168) returned 1
	[0135.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg")) returned 0x20
	[0135.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg")) returned 0x20
	[0135.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Blue_Gradient.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\blue_gradient.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.136] SetEvent (hEvent=0xfc) returned 1
	[0135.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.136] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2319) returned 1
	[0135.136] CloseHandle (hObject=0x168) returned 1
	[0135.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif")) returned 0x20
	[0135.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif")) returned 0x20
	[0135.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Connectivity.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\connectivity.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.137] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=645) returned 1
	[0135.137] CloseHandle (hObject=0x168) returned 1
	[0135.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26
	[0135.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26
	[0135.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.138] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3792) returned 1
	[0135.138] CloseHandle (hObject=0x168) returned 1
	[0135.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf")) returned 0x20
	[0135.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf")) returned 0x20
	[0135.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Dotted_Lines.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\dotted_lines.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.141] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=231) returned 1
	[0135.141] CloseHandle (hObject=0x168) returned 1
	[0135.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20
	[0135.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20
	[0135.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.141] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23871) returned 1
	[0135.141] CloseHandle (hObject=0x168) returned 1
	[0135.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20
	[0135.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20
	[0135.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.143] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5524) returned 1
	[0135.143] CloseHandle (hObject=0x168) returned 1
	[0135.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf")) returned 0x20
	[0135.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf")) returned 0x20
	[0135.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_1.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_1.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.143] SetEvent (hEvent=0xfc) returned 1
	[0135.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.144] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10340) returned 1
	[0135.144] CloseHandle (hObject=0x168) returned 1
	[0135.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf")) returned 0x20
	[0135.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf")) returned 0x20
	[0135.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Genko_2.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\genko_2.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.146] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=116724) returned 1
	[0135.146] CloseHandle (hObject=0x1fc) returned 1
	[0135.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf")) returned 0x20
	[0135.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf")) returned 0x20
	[0135.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Graph.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\graph.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.146] SetEvent (hEvent=0xfc) returned 1
	[0135.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.275] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=237) returned 1
	[0135.275] CloseHandle (hObject=0x1fc) returned 1
	[0135.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20
	[0135.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20
	[0135.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.275] SetEvent (hEvent=0xfc) returned 1
	[0135.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.276] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15063) returned 1
	[0135.276] CloseHandle (hObject=0x1fc) returned 1
	[0135.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif")) returned 0x20
	[0135.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif")) returned 0x20
	[0135.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Wrinkled_Paper.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\wrinkled_paper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.277] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=146808) returned 1
	[0135.277] CloseHandle (hObject=0x1fc) returned 1
	[0135.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll")) returned 0x20
	[0135.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll")) returned 0x20
	[0135.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\MSCONV97.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\msconv97.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.278] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36712) returned 1
	[0135.278] CloseHandle (hObject=0x1fc) returned 1
	[0135.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv")) returned 0x20
	[0135.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv")) returned 0x20
	[0135.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\RECOVR32.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\recovr32.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.280] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57248) returned 1
	[0135.280] CloseHandle (hObject=0x168) returned 1
	[0135.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv")) returned 0x20
	[0135.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv")) returned 0x20
	[0135.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\Wks9Pxy.cnv" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wks9pxy.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.280] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=196976) returned 1
	[0135.280] CloseHandle (hObject=0x168) returned 1
	[0135.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv")) returned 0x20
	[0135.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv")) returned 0x20
	[0135.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT532.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft532.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.281] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=289648) returned 1
	[0135.281] CloseHandle (hObject=0x168) returned 1
	[0135.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv")) returned 0x20
	[0135.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv")) returned 0x20
	[0135.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\WPFT632.CNV" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\wpft632.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.282] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58766) returned 1
	[0135.282] CloseHandle (hObject=0x168) returned 1
	[0135.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm")) returned 0x20
	[0135.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm")) returned 0x20
	[0135.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.283] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=555) returned 1
	[0135.283] CloseHandle (hObject=0x168) returned 1
	[0135.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf")) returned 0x20
	[0135.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf")) returned 0x20
	[0135.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\aftrnoon.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.285] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1569) returned 1
	[0135.285] CloseHandle (hObject=0x1fc) returned 1
	[0135.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif")) returned 0x20
	[0135.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif")) returned 0x20
	[0135.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.286] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25234) returned 1
	[0135.286] CloseHandle (hObject=0x1fc) returned 1
	[0135.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png")) returned 0x20
	[0135.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png")) returned 0x20
	[0135.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\aftrnoon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.287] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=69575) returned 1
	[0135.287] CloseHandle (hObject=0x168) returned 1
	[0135.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm")) returned 0x20
	[0135.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm")) returned 0x20
	[0135.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.288] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=513) returned 1
	[0135.288] CloseHandle (hObject=0x168) returned 1
	[0135.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf")) returned 0x20
	[0135.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf")) returned 0x20
	[0135.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\arctic.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.289] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2985) returned 1
	[0135.289] CloseHandle (hObject=0x168) returned 1
	[0135.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif")) returned 0x20
	[0135.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif")) returned 0x20
	[0135.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.291] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19780) returned 1
	[0135.291] CloseHandle (hObject=0x168) returned 1
	[0135.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png")) returned 0x20
	[0135.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png")) returned 0x20
	[0135.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\arctic\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.292] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=100798) returned 1
	[0135.292] CloseHandle (hObject=0x168) returned 1
	[0135.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm")) returned 0x20
	[0135.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm")) returned 0x20
	[0135.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.293] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=529) returned 1
	[0135.293] CloseHandle (hObject=0x168) returned 1
	[0135.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf")) returned 0x20
	[0135.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf")) returned 0x20
	[0135.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\axis.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.294] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2848) returned 1
	[0135.294] CloseHandle (hObject=0x168) returned 1
	[0135.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif")) returned 0x20
	[0135.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif")) returned 0x20
	[0135.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.297] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34916) returned 1
	[0135.297] CloseHandle (hObject=0x168) returned 1
	[0135.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png")) returned 0x20
	[0135.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png")) returned 0x20
	[0135.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\axis\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.298] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=69047) returned 1
	[0135.298] CloseHandle (hObject=0x168) returned 1
	[0135.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm")) returned 0x20
	[0135.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm")) returned 0x20
	[0135.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.299] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=534) returned 1
	[0135.299] CloseHandle (hObject=0x168) returned 1
	[0135.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf")) returned 0x20
	[0135.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf")) returned 0x20
	[0135.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\blends.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.301] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2181) returned 1
	[0135.301] CloseHandle (hObject=0x168) returned 1
	[0135.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif")) returned 0x20
	[0135.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif")) returned 0x20
	[0135.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.301] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49850) returned 1
	[0135.301] CloseHandle (hObject=0x168) returned 1
	[0135.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm")) returned 0x20
	[0135.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm")) returned 0x20
	[0135.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.302] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=551) returned 1
	[0135.302] CloseHandle (hObject=0x168) returned 1
	[0135.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf")) returned 0x20
	[0135.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf")) returned 0x20
	[0135.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\bluecalm.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.303] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1560) returned 1
	[0135.303] CloseHandle (hObject=0x168) returned 1
	[0135.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif")) returned 0x20
	[0135.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif")) returned 0x20
	[0135.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.304] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33009) returned 1
	[0135.304] CloseHandle (hObject=0x168) returned 1
	[0135.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png")) returned 0x20
	[0135.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png")) returned 0x20
	[0135.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\bluecalm\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.304] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=55942) returned 1
	[0135.304] CloseHandle (hObject=0x168) returned 1
	[0135.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm")) returned 0x20
	[0135.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm")) returned 0x20
	[0135.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.354] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=549) returned 1
	[0135.355] CloseHandle (hObject=0x1fc) returned 1
	[0135.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf")) returned 0x20
	[0135.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf")) returned 0x20
	[0135.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\blueprnt.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.355] SetEvent (hEvent=0xfc) returned 1
	[0135.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.355] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=60154) returned 1
	[0135.355] CloseHandle (hObject=0x1fc) returned 1
	[0135.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm")) returned 0x20
	[0135.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm")) returned 0x20
	[0135.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.356] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=596) returned 1
	[0135.356] CloseHandle (hObject=0x1fc) returned 1
	[0135.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf")) returned 0x20
	[0135.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf")) returned 0x20
	[0135.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\boldstri.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.357] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3479) returned 1
	[0135.357] CloseHandle (hObject=0x1fc) returned 1
	[0135.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif")) returned 0x20
	[0135.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif")) returned 0x20
	[0135.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.358] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31837) returned 1
	[0135.358] CloseHandle (hObject=0x1fc) returned 1
	[0135.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png")) returned 0x20
	[0135.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png")) returned 0x20
	[0135.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\boldstri\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.359] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=107831) returned 1
	[0135.360] CloseHandle (hObject=0x1fc) returned 1
	[0135.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm")) returned 0x20
	[0135.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm")) returned 0x20
	[0135.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.362] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=450) returned 1
	[0135.362] CloseHandle (hObject=0x168) returned 1
	[0135.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf")) returned 0x20
	[0135.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf")) returned 0x20
	[0135.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\breeze.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.362] SetEvent (hEvent=0xfc) returned 1
	[0135.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.363] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2722) returned 1
	[0135.363] CloseHandle (hObject=0x168) returned 1
	[0135.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif")) returned 0x20
	[0135.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif")) returned 0x20
	[0135.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.364] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43276) returned 1
	[0135.364] CloseHandle (hObject=0x168) returned 1
	[0135.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png")) returned 0x20
	[0135.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png")) returned 0x20
	[0135.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\breeze\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.364] SetEvent (hEvent=0xfc) returned 1
	[0135.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.365] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44745) returned 1
	[0135.365] CloseHandle (hObject=0x168) returned 1
	[0135.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm")) returned 0x20
	[0135.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm")) returned 0x20
	[0135.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.366] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=465) returned 1
	[0135.366] CloseHandle (hObject=0x168) returned 1
	[0135.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf")) returned 0x20
	[0135.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf")) returned 0x20
	[0135.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\canyon.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.367] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=945) returned 1
	[0135.367] CloseHandle (hObject=0x168) returned 1
	[0135.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif")) returned 0x20
	[0135.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif")) returned 0x20
	[0135.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.368] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32607) returned 1
	[0135.368] CloseHandle (hObject=0x168) returned 1
	[0135.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png")) returned 0x20
	[0135.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png")) returned 0x20
	[0135.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\canyon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.369] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57786) returned 1
	[0135.369] CloseHandle (hObject=0x168) returned 1
	[0135.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm")) returned 0x20
	[0135.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm")) returned 0x20
	[0135.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.370] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=501) returned 1
	[0135.370] CloseHandle (hObject=0x168) returned 1
	[0135.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf")) returned 0x20
	[0135.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf")) returned 0x20
	[0135.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\capsules.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.371] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2044) returned 1
	[0135.371] CloseHandle (hObject=0x168) returned 1
	[0135.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif")) returned 0x20
	[0135.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif")) returned 0x20
	[0135.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.372] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29925) returned 1
	[0135.372] CloseHandle (hObject=0x168) returned 1
	[0135.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png")) returned 0x20
	[0135.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png")) returned 0x20
	[0135.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\capsules\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.373] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47684) returned 1
	[0135.373] CloseHandle (hObject=0x168) returned 1
	[0135.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm")) returned 0x20
	[0135.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm")) returned 0x20
	[0135.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.374] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=610) returned 1
	[0135.374] CloseHandle (hObject=0x168) returned 1
	[0135.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf")) returned 0x20
	[0135.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf")) returned 0x20
	[0135.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\cascade.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.374] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1363) returned 1
	[0135.375] CloseHandle (hObject=0x168) returned 1
	[0135.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif")) returned 0x20
	[0135.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif")) returned 0x20
	[0135.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.375] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20371) returned 1
	[0135.375] CloseHandle (hObject=0x168) returned 1
	[0135.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png")) returned 0x20
	[0135.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png")) returned 0x20
	[0135.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\cascade\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.377] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=54803) returned 1
	[0135.377] CloseHandle (hObject=0x168) returned 1
	[0135.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm")) returned 0x20
	[0135.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm")) returned 0x20
	[0135.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.377] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=486) returned 1
	[0135.377] CloseHandle (hObject=0x168) returned 1
	[0135.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf")) returned 0x20
	[0135.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf")) returned 0x20
	[0135.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\compass.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.378] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1293) returned 1
	[0135.378] CloseHandle (hObject=0x168) returned 1
	[0135.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif")) returned 0x20
	[0135.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif")) returned 0x20
	[0135.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.379] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20575) returned 1
	[0135.379] CloseHandle (hObject=0x168) returned 1
	[0135.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png")) returned 0x20
	[0135.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png")) returned 0x20
	[0135.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\compass\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.380] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45528) returned 1
	[0135.380] CloseHandle (hObject=0x168) returned 1
	[0135.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm")) returned 0x20
	[0135.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm")) returned 0x20
	[0135.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.382] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=480) returned 1
	[0135.382] CloseHandle (hObject=0x168) returned 1
	[0135.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf")) returned 0x20
	[0135.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf")) returned 0x20
	[0135.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\concrete.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.382] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1287) returned 1
	[0135.382] CloseHandle (hObject=0x168) returned 1
	[0135.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif")) returned 0x20
	[0135.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif")) returned 0x20
	[0135.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.383] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28595) returned 1
	[0135.383] CloseHandle (hObject=0x168) returned 1
	[0135.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png")) returned 0x20
	[0135.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png")) returned 0x20
	[0135.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\concrete\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.385] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=71388) returned 1
	[0135.385] CloseHandle (hObject=0x168) returned 1
	[0135.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm")) returned 0x20
	[0135.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm")) returned 0x20
	[0135.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.386] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=569) returned 1
	[0135.386] CloseHandle (hObject=0x168) returned 1
	[0135.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf")) returned 0x20
	[0135.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf")) returned 0x20
	[0135.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\deepblue.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.389] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3957) returned 1
	[0135.389] CloseHandle (hObject=0x168) returned 1
	[0135.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif")) returned 0x20
	[0135.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif")) returned 0x20
	[0135.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.390] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33277) returned 1
	[0135.391] CloseHandle (hObject=0x168) returned 1
	[0135.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png")) returned 0x20
	[0135.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png")) returned 0x20
	[0135.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\deepblue\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.392] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45262) returned 1
	[0135.392] CloseHandle (hObject=0x168) returned 1
	[0135.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm")) returned 0x20
	[0135.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm")) returned 0x20
	[0135.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.393] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=503) returned 1
	[0135.393] CloseHandle (hObject=0x168) returned 1
	[0135.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf")) returned 0x20
	[0135.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf")) returned 0x20
	[0135.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\echo.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.393] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1453) returned 1
	[0135.393] CloseHandle (hObject=0x168) returned 1
	[0135.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif")) returned 0x20
	[0135.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif")) returned 0x20
	[0135.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.394] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25106) returned 1
	[0135.394] CloseHandle (hObject=0x168) returned 1
	[0135.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png")) returned 0x20
	[0135.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png")) returned 0x20
	[0135.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\echo\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.395] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=118577) returned 1
	[0135.395] CloseHandle (hObject=0x168) returned 1
	[0135.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm")) returned 0x20
	[0135.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm")) returned 0x20
	[0135.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.587] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=595) returned 1
	[0135.587] CloseHandle (hObject=0x1fc) returned 1
	[0135.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf")) returned 0x20
	[0135.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf")) returned 0x20
	[0135.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\eclipse.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.587] SetEvent (hEvent=0xfc) returned 1
	[0135.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.588] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32403) returned 1
	[0135.588] CloseHandle (hObject=0x1fc) returned 1
	[0135.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png")) returned 0x20
	[0135.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png")) returned 0x20
	[0135.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.588] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47352) returned 1
	[0135.588] CloseHandle (hObject=0x1fc) returned 1
	[0135.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm")) returned 0x20
	[0135.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm")) returned 0x20
	[0135.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.589] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=529) returned 1
	[0135.589] CloseHandle (hObject=0x1fc) returned 1
	[0135.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf")) returned 0x20
	[0135.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf")) returned 0x20
	[0135.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\edge.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.590] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1347) returned 1
	[0135.590] CloseHandle (hObject=0x1fc) returned 1
	[0135.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif")) returned 0x20
	[0135.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif")) returned 0x20
	[0135.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.590] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26402) returned 1
	[0135.591] CloseHandle (hObject=0x1fc) returned 1
	[0135.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png")) returned 0x20
	[0135.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png")) returned 0x20
	[0135.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\edge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.591] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77294) returned 1
	[0135.591] CloseHandle (hObject=0x1fc) returned 1
	[0135.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm")) returned 0x20
	[0135.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm")) returned 0x20
	[0135.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.594] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=547) returned 1
	[0135.594] CloseHandle (hObject=0x1fc) returned 1
	[0135.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf")) returned 0x20
	[0135.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf")) returned 0x20
	[0135.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\evrgreen.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.594] SetEvent (hEvent=0xfc) returned 1
	[0135.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.597] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1354) returned 1
	[0135.597] CloseHandle (hObject=0x1fc) returned 1
	[0135.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif")) returned 0x20
	[0135.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif")) returned 0x20
	[0135.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.597] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32433) returned 1
	[0135.597] CloseHandle (hObject=0x1fc) returned 1
	[0135.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png")) returned 0x20
	[0135.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png")) returned 0x20
	[0135.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\evrgreen\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.598] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=103737) returned 1
	[0135.598] CloseHandle (hObject=0x1fc) returned 1
	[0135.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm")) returned 0x20
	[0135.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm")) returned 0x20
	[0135.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.599] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=597) returned 1
	[0135.599] CloseHandle (hObject=0x1fc) returned 1
	[0135.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf")) returned 0x20
	[0135.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf")) returned 0x20
	[0135.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\expeditn.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.600] SetEvent (hEvent=0xfc) returned 1
	[0135.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.600] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5120) returned 1
	[0135.600] CloseHandle (hObject=0x1fc) returned 1
	[0135.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif")) returned 0x20
	[0135.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif")) returned 0x20
	[0135.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.601] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=60724) returned 1
	[0135.602] CloseHandle (hObject=0x1fc) returned 1
	[0135.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png")) returned 0x20
	[0135.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png")) returned 0x20
	[0135.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\expeditn\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.602] SetEvent (hEvent=0xfc) returned 1
	[0135.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.603] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=68048) returned 1
	[0135.603] CloseHandle (hObject=0x1fc) returned 1
	[0135.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm")) returned 0x20
	[0135.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm")) returned 0x20
	[0135.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.603] SetEvent (hEvent=0xfc) returned 1
	[0135.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.604] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=429) returned 1
	[0135.604] CloseHandle (hObject=0x1fc) returned 1
	[0135.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf")) returned 0x20
	[0135.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf")) returned 0x20
	[0135.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\ICE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\ice.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.604] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2552) returned 1
	[0135.604] CloseHandle (hObject=0x1fc) returned 1
	[0135.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif")) returned 0x20
	[0135.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif")) returned 0x20
	[0135.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.605] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18817) returned 1
	[0135.605] CloseHandle (hObject=0x1fc) returned 1
	[0135.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png")) returned 0x20
	[0135.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png")) returned 0x20
	[0135.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ice\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.606] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=99561) returned 1
	[0135.606] CloseHandle (hObject=0x1fc) returned 1
	[0135.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm")) returned 0x20
	[0135.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm")) returned 0x20
	[0135.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.607] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=549) returned 1
	[0135.607] CloseHandle (hObject=0x1fc) returned 1
	[0135.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf")) returned 0x20
	[0135.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf")) returned 0x20
	[0135.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\indust.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.608] SetEvent (hEvent=0xfc) returned 1
	[0135.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.608] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5179) returned 1
	[0135.608] CloseHandle (hObject=0x1fc) returned 1
	[0135.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif")) returned 0x20
	[0135.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif")) returned 0x20
	[0135.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.609] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33559) returned 1
	[0135.609] CloseHandle (hObject=0x1fc) returned 1
	[0135.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png")) returned 0x20
	[0135.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png")) returned 0x20
	[0135.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\indust\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.610] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65885) returned 1
	[0135.610] CloseHandle (hObject=0x1fc) returned 1
	[0135.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm")) returned 0x20
	[0135.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm")) returned 0x20
	[0135.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.610] SetEvent (hEvent=0xfc) returned 1
	[0135.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.611] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=462) returned 1
	[0135.611] CloseHandle (hObject=0x1fc) returned 1
	[0135.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf")) returned 0x20
	[0135.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf")) returned 0x20
	[0135.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\iris.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.612] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2476) returned 1
	[0135.612] CloseHandle (hObject=0x1fc) returned 1
	[0135.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif")) returned 0x20
	[0135.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif")) returned 0x20
	[0135.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.612] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19485) returned 1
	[0135.612] CloseHandle (hObject=0x1fc) returned 1
	[0135.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png")) returned 0x20
	[0135.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png")) returned 0x20
	[0135.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\iris\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.614] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47666) returned 1
	[0135.614] CloseHandle (hObject=0x1fc) returned 1
	[0135.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm")) returned 0x20
	[0135.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm")) returned 0x20
	[0135.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.614] SetEvent (hEvent=0xfc) returned 1
	[0135.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.615] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=499) returned 1
	[0135.615] CloseHandle (hObject=0x1fc) returned 1
	[0135.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf")) returned 0x20
	[0135.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf")) returned 0x20
	[0135.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\journal.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.615] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1232) returned 1
	[0135.615] CloseHandle (hObject=0x1fc) returned 1
	[0135.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif")) returned 0x20
	[0135.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif")) returned 0x20
	[0135.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.616] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18413) returned 1
	[0135.616] CloseHandle (hObject=0x1fc) returned 1
	[0135.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png")) returned 0x20
	[0135.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png")) returned 0x20
	[0135.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\journal\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.617] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=59203) returned 1
	[0135.617] CloseHandle (hObject=0x1fc) returned 1
	[0135.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm")) returned 0x20
	[0135.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm")) returned 0x20
	[0135.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.618] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=533) returned 1
	[0135.618] CloseHandle (hObject=0x1fc) returned 1
	[0135.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf")) returned 0x20
	[0135.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf")) returned 0x20
	[0135.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\layers.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.618] SetEvent (hEvent=0xfc) returned 1
	[0135.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.619] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1659) returned 1
	[0135.619] CloseHandle (hObject=0x1fc) returned 1
	[0135.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif")) returned 0x20
	[0135.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif")) returned 0x20
	[0135.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.621] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44850) returned 1
	[0135.621] CloseHandle (hObject=0x168) returned 1
	[0135.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png")) returned 0x20
	[0135.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png")) returned 0x20
	[0135.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\layers\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.621] SetEvent (hEvent=0xfc) returned 1
	[0135.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.625] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58092) returned 1
	[0135.625] CloseHandle (hObject=0x1fc) returned 1
	[0135.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm")) returned 0x20
	[0135.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm")) returned 0x20
	[0135.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.626] SetEvent (hEvent=0xfc) returned 1
	[0135.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.626] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=526) returned 1
	[0135.626] CloseHandle (hObject=0x1fc) returned 1
	[0135.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf")) returned 0x20
	[0135.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf")) returned 0x20
	[0135.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\level.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.627] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1379) returned 1
	[0135.627] CloseHandle (hObject=0x1fc) returned 1
	[0135.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif")) returned 0x20
	[0135.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif")) returned 0x20
	[0135.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.627] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=48115) returned 1
	[0135.627] CloseHandle (hObject=0x1fc) returned 1
	[0135.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png")) returned 0x20
	[0135.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png")) returned 0x20
	[0135.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\level\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.628] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50761) returned 1
	[0135.628] CloseHandle (hObject=0x1fc) returned 1
	[0135.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm")) returned 0x20
	[0135.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm")) returned 0x20
	[0135.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.743] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=585) returned 1
	[0135.745] CloseHandle (hObject=0x168) returned 1
	[0135.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf")) returned 0x20
	[0135.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf")) returned 0x20
	[0135.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\network.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.039] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=456) returned 1
	[0136.039] CloseHandle (hObject=0x1fc) returned 1
	[0136.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf")) returned 0x20
	[0136.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf")) returned 0x20
	[0136.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.040] SetEvent (hEvent=0xfc) returned 1
	[0136.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.040] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34163) returned 1
	[0136.040] CloseHandle (hObject=0x1fc) returned 1
	[0136.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png")) returned 0x20
	[0136.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png")) returned 0x20
	[0136.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.041] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=937) returned 1
	[0136.041] CloseHandle (hObject=0x1fc) returned 1
	[0136.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif")) returned 0x20
	[0136.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif")) returned 0x20
	[0136.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.042] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=82237) returned 1
	[0136.042] CloseHandle (hObject=0x1fc) returned 1
	[0136.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm")) returned 0x20
	[0136.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm")) returned 0x20
	[0136.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.043] SetEvent (hEvent=0xfc) returned 1
	[0136.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.043] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=444) returned 1
	[0136.043] CloseHandle (hObject=0x1fc) returned 1
	[0136.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf")) returned 0x20
	[0136.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf")) returned 0x20
	[0136.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\SKY.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\sky.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.044] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29305) returned 1
	[0136.044] CloseHandle (hObject=0x1fc) returned 1
	[0136.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png")) returned 0x20
	[0136.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png")) returned 0x20
	[0136.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sky\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.045] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1009) returned 1
	[0136.045] CloseHandle (hObject=0x1fc) returned 1
	[0136.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif")) returned 0x20
	[0136.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif")) returned 0x20
	[0136.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.045] SetEvent (hEvent=0xfc) returned 1
	[0136.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.046] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=85056) returned 1
	[0136.046] CloseHandle (hObject=0x1fc) returned 1
	[0136.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm")) returned 0x20
	[0136.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm")) returned 0x20
	[0136.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.048] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=500) returned 1
	[0136.048] CloseHandle (hObject=0x168) returned 1
	[0136.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf")) returned 0x20
	[0136.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf")) returned 0x20
	[0136.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\slate.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.049] SetEvent (hEvent=0xfc) returned 1
	[0136.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.049] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27177) returned 1
	[0136.049] CloseHandle (hObject=0x168) returned 1
	[0136.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png")) returned 0x20
	[0136.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png")) returned 0x20
	[0136.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\slate\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.050] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2209) returned 1
	[0136.050] CloseHandle (hObject=0x168) returned 1
	[0136.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif")) returned 0x20
	[0136.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif")) returned 0x20
	[0136.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.053] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=54687) returned 1
	[0136.053] CloseHandle (hObject=0x168) returned 1
	[0136.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm")) returned 0x20
	[0136.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm")) returned 0x20
	[0136.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.053] SetEvent (hEvent=0xfc) returned 1
	[0136.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.053] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=484) returned 1
	[0136.053] CloseHandle (hObject=0x168) returned 1
	[0136.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf")) returned 0x20
	[0136.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf")) returned 0x20
	[0136.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\sonora.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.054] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21812) returned 1
	[0136.054] CloseHandle (hObject=0x168) returned 1
	[0136.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png")) returned 0x20
	[0136.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png")) returned 0x20
	[0136.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sonora\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.055] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2527) returned 1
	[0136.055] CloseHandle (hObject=0x168) returned 1
	[0136.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif")) returned 0x20
	[0136.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif")) returned 0x20
	[0136.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.057] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=68337) returned 1
	[0136.057] CloseHandle (hObject=0x1fc) returned 1
	[0136.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm")) returned 0x20
	[0136.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm")) returned 0x20
	[0136.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.058] SetEvent (hEvent=0xfc) returned 1
	[0136.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.059] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=466) returned 1
	[0136.059] CloseHandle (hObject=0x1fc) returned 1
	[0136.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf")) returned 0x20
	[0136.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf")) returned 0x20
	[0136.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\spring.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.059] SetEvent (hEvent=0xfc) returned 1
	[0136.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.060] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19525) returned 1
	[0136.060] CloseHandle (hObject=0x200) returned 1
	[0136.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png")) returned 0x20
	[0136.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png")) returned 0x20
	[0136.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\spring\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.060] SetEvent (hEvent=0xfc) returned 1
	[0136.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.061] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1737) returned 1
	[0136.061] CloseHandle (hObject=0x200) returned 1
	[0136.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif")) returned 0x20
	[0136.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif")) returned 0x20
	[0136.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.062] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57906) returned 1
	[0136.062] CloseHandle (hObject=0x200) returned 1
	[0136.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm")) returned 0x20
	[0136.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm")) returned 0x20
	[0136.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.063] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=625) returned 1
	[0136.063] CloseHandle (hObject=0x200) returned 1
	[0136.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf")) returned 0x20
	[0136.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf")) returned 0x20
	[0136.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\strtedge.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.063] SetEvent (hEvent=0xfc) returned 1
	[0136.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.064] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33479) returned 1
	[0136.064] CloseHandle (hObject=0x200) returned 1
	[0136.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png")) returned 0x20
	[0136.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png")) returned 0x20
	[0136.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\strtedge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.064] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1675) returned 1
	[0136.064] CloseHandle (hObject=0x200) returned 1
	[0136.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif")) returned 0x20
	[0136.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif")) returned 0x20
	[0136.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.066] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49133) returned 1
	[0136.066] CloseHandle (hObject=0x168) returned 1
	[0136.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm")) returned 0x20
	[0136.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm")) returned 0x20
	[0136.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.068] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=578) returned 1
	[0136.068] CloseHandle (hObject=0x1fc) returned 1
	[0136.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf")) returned 0x20
	[0136.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf")) returned 0x20
	[0136.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\studio.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.069] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18380) returned 1
	[0136.069] CloseHandle (hObject=0x1fc) returned 1
	[0136.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png")) returned 0x20
	[0136.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png")) returned 0x20
	[0136.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\studio\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.069] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4991) returned 1
	[0136.069] CloseHandle (hObject=0x1fc) returned 1
	[0136.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif")) returned 0x20
	[0136.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif")) returned 0x20
	[0136.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.071] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=106004) returned 1
	[0136.071] CloseHandle (hObject=0x1fc) returned 1
	[0136.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm")) returned 0x20
	[0136.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm")) returned 0x20
	[0136.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.072] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=555) returned 1
	[0136.072] CloseHandle (hObject=0x1fc) returned 1
	[0136.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf")) returned 0x20
	[0136.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf")) returned 0x20
	[0136.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\sumipntg.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.072] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44302) returned 1
	[0136.072] CloseHandle (hObject=0x1fc) returned 1
	[0136.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png")) returned 0x20
	[0136.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png")) returned 0x20
	[0136.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\sumipntg\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.074] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7276) returned 1
	[0136.074] CloseHandle (hObject=0x1fc) returned 1
	[0136.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf")) returned 0x20
	[0136.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf")) returned 0x20
	[0136.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\THEMES.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\themes.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.075] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2668) returned 1
	[0136.075] CloseHandle (hObject=0x1fc) returned 1
	[0136.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif")) returned 0x20
	[0136.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif")) returned 0x20
	[0136.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.075] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42453) returned 1
	[0136.075] CloseHandle (hObject=0x1fc) returned 1
	[0136.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png")) returned 0x20
	[0136.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png")) returned 0x20
	[0136.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.077] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65996) returned 1
	[0136.077] CloseHandle (hObject=0x1fc) returned 1
	[0136.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm")) returned 0x20
	[0136.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm")) returned 0x20
	[0136.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.242] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=417) returned 1
	[0136.242] CloseHandle (hObject=0x168) returned 1
	[0136.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf")) returned 0x20
	[0136.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf")) returned 0x20
	[0136.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATER\\WATER.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\water\\water.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.242] SetEvent (hEvent=0xfc) returned 1
	[0136.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.551] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30170) returned 1
	[0136.552] CloseHandle (hObject=0x168) returned 1
	[0136.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png")) returned 0x20
	[0136.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png")) returned 0x20
	[0136.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.712] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11009) returned 1
	[0136.712] CloseHandle (hObject=0x168) returned 1
	[0136.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx")) returned 0x20
	[0136.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx")) returned 0x20
	[0136.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\ic-txt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.713] SetEvent (hEvent=0xfc) returned 1
	[0136.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.713] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=196069) returned 1
	[0136.714] CloseHandle (hObject=0x168) returned 1
	[0136.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx")) returned 0x20
	[0136.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx")) returned 0x20
	[0136.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.714] SetEvent (hEvent=0xfc) returned 1
	[0136.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.714] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=648211) returned 1
	[0136.714] CloseHandle (hObject=0x168) returned 1
	[0136.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx")) returned 0x20
	[0136.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx")) returned 0x20
	[0136.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTGTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtgtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.715] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=916632) returned 1
	[0136.715] CloseHandle (hObject=0x168) returned 1
	[0136.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx")) returned 0x20
	[0136.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx")) returned 0x20
	[0136.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHTMTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whtmtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.717] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10080) returned 1
	[0136.717] CloseHandle (hObject=0x168) returned 1
	[0136.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20
	[0136.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20
	[0136.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.717] SetEvent (hEvent=0xfc) returned 1
	[0136.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.718] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18264) returned 1
	[0136.719] CloseHandle (hObject=0x168) returned 1
	[0136.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20
	[0136.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20
	[0136.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.719] SetEvent (hEvent=0xfc) returned 1
	[0136.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.721] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=716) returned 1
	[0136.721] CloseHandle (hObject=0x168) returned 1
	[0136.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config")) returned 0x20
	[0136.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config")) returned 0x20
	[0136.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.722] SetEvent (hEvent=0xfc) returned 1
	[0136.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.724] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=99672) returned 1
	[0136.724] CloseHandle (hObject=0x1fc) returned 1
	[0136.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20
	[0136.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20
	[0136.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.725] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=387408) returned 1
	[0136.725] CloseHandle (hObject=0x1fc) returned 1
	[0136.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20
	[0136.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20
	[0136.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.726] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47976) returned 1
	[0136.726] CloseHandle (hObject=0x1fc) returned 1
	[0136.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20
	[0136.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20
	[0136.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.729] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=184648) returned 1
	[0136.729] CloseHandle (hObject=0x1fc) returned 1
	[0136.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20
	[0136.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20
	[0136.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.730] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16208) returned 1
	[0136.730] CloseHandle (hObject=0x1fc) returned 1
	[0136.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20
	[0136.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20
	[0136.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.731] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21840) returned 1
	[0136.731] CloseHandle (hObject=0x1fc) returned 1
	[0136.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20
	[0136.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20
	[0136.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.733] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10632) returned 1
	[0136.733] CloseHandle (hObject=0x1fc) returned 1
	[0136.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll")) returned 0x20
	[0136.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll")) returned 0x20
	[0136.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\1033\\MSOSVINT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\1033\\msosvint.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.733] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44936) returned 1
	[0136.733] CloseHandle (hObject=0x1fc) returned 1
	[0136.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll")) returned 0x20
	[0136.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll")) returned 0x20
	[0136.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Folders\\MSOSV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web folders\\msosv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.734] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=169637) returned 1
	[0136.734] CloseHandle (hObject=0x1fc) returned 1
	[0136.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg")) returned 0x20
	[0136.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg")) returned 0x20
	[0136.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\1033\\FPEXT.MSG" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\1033\\fpext.msg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.735] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2522488) returned 1
	[0136.735] CloseHandle (hObject=0x1fc) returned 1
	[0136.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll")) returned 0x20
	[0136.735] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0136.735] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll")) returned 0
	[0136.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.736] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1363344) returned 1
	[0136.736] CloseHandle (hObject=0x1fc) returned 1
	[0136.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll")) returned 0x20
	[0136.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll")) returned 0x20
	[0136.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.737] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2702) returned 1
	[0136.737] CloseHandle (hObject=0x1fc) returned 1
	[0136.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20
	[0136.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20
	[0136.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.738] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=373760) returned 1
	[0136.738] CloseHandle (hObject=0x1fc) returned 1
	[0136.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll")) returned 0x20
	[0136.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll")) returned 0x20
	[0136.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.739] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0136.739] CloseHandle (hObject=0x1fc) returned 1
	[0136.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui")) returned 0x20
	[0136.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui")) returned 0x20
	[0136.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.740] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41472) returned 1
	[0136.740] CloseHandle (hObject=0x1fc) returned 1
	[0136.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll")) returned 0x20
	[0136.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll")) returned 0x20
	[0136.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.741] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=181248) returned 1
	[0136.741] CloseHandle (hObject=0x1fc) returned 1
	[0136.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll")) returned 0x20
	[0136.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll")) returned 0x20
	[0136.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.742] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9728) returned 1
	[0136.742] CloseHandle (hObject=0x1fc) returned 1
	[0136.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll")) returned 0x20
	[0136.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll")) returned 0x20
	[0136.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll" (normalized: "c:\\program files\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.744] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14610) returned 1
	[0136.744] CloseHandle (hObject=0x1fc) returned 1
	[0136.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20
	[0136.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20
	[0136.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.745] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14951) returned 1
	[0136.745] CloseHandle (hObject=0x1fc) returned 1
	[0136.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20
	[0136.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20
	[0136.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.746] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17408) returned 1
	[0136.746] CloseHandle (hObject=0x1fc) returned 1
	[0136.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20
	[0136.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20
	[0136.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.747] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0136.747] CloseHandle (hObject=0x1fc) returned 1
	[0136.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20
	[0136.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20
	[0136.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.748] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1499136) returned 1
	[0136.748] CloseHandle (hObject=0x1fc) returned 1
	[0136.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20
	[0136.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20
	[0136.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.749] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=69632) returned 1
	[0136.749] CloseHandle (hObject=0x1fc) returned 1
	[0136.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20
	[0136.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20
	[0136.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.750] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=73728) returned 1
	[0136.750] CloseHandle (hObject=0x1fc) returned 1
	[0136.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20
	[0136.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20
	[0136.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.750] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=94208) returned 1
	[0136.750] CloseHandle (hObject=0x1fc) returned 1
	[0136.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20
	[0136.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20
	[0136.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.069] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98304) returned 1
	[0137.069] CloseHandle (hObject=0x13c) returned 1
	[0137.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20
	[0137.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20
	[0137.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.069] SetEvent (hEvent=0xfc) returned 1
	[0137.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.070] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98304) returned 1
	[0137.070] CloseHandle (hObject=0x13c) returned 1
	[0137.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20
	[0137.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20
	[0137.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.070] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=466944) returned 1
	[0137.070] CloseHandle (hObject=0x13c) returned 1
	[0137.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20
	[0137.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20
	[0137.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.073] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20480) returned 1
	[0137.073] CloseHandle (hObject=0x13c) returned 1
	[0137.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20
	[0137.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20
	[0137.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.073] SetEvent (hEvent=0xfc) returned 1
	[0137.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.074] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=61440) returned 1
	[0137.074] CloseHandle (hObject=0x13c) returned 1
	[0137.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20
	[0137.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20
	[0137.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.075] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=495616) returned 1
	[0137.075] CloseHandle (hObject=0x13c) returned 1
	[0137.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20
	[0137.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20
	[0137.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.075] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28672) returned 1
	[0137.075] CloseHandle (hObject=0x13c) returned 1
	[0137.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20
	[0137.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20
	[0137.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.076] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=106496) returned 1
	[0137.076] CloseHandle (hObject=0x13c) returned 1
	[0137.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20
	[0137.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20
	[0137.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.077] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29184) returned 1
	[0137.077] CloseHandle (hObject=0x13c) returned 1
	[0137.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20
	[0137.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20
	[0137.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\directdb.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.078] SetEvent (hEvent=0xfc) returned 1
	[0137.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.080] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=93696) returned 1
	[0137.080] CloseHandle (hObject=0x13c) returned 1
	[0137.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20
	[0137.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20
	[0137.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.081] SetEvent (hEvent=0xfc) returned 1
	[0137.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0137.231] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=623) returned 1
	[0137.231] CloseHandle (hObject=0x140) returned 1
	[0137.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20
	[0137.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20
	[0137.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.232] SetEvent (hEvent=0xfc) returned 1
	[0137.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0137.234] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9728) returned 1
	[0137.234] CloseHandle (hObject=0x140) returned 1
	[0137.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20
	[0137.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20
	[0137.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.234] SetEvent (hEvent=0xfc) returned 1
	[0137.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0137.234] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5120) returned 1
	[0137.234] CloseHandle (hObject=0x140) returned 1
	[0137.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui")) returned 0x20
	[0137.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui")) returned 0x20
	[0137.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0137.235] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5632) returned 1
	[0137.235] CloseHandle (hObject=0x140) returned 1
	[0137.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20
	[0137.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20
	[0137.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0137.238] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13824) returned 1
	[0137.238] CloseHandle (hObject=0x140) returned 1
	[0137.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20
	[0137.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20
	[0137.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.239] SetEvent (hEvent=0xfc) returned 1
	[0137.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0137.239] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0137.239] CloseHandle (hObject=0x140) returned 1
	[0137.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20
	[0137.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20
	[0137.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0137.240] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5632) returned 1
	[0137.240] CloseHandle (hObject=0x140) returned 1
	[0137.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20
	[0137.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20
	[0137.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handler.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handler.reg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0137.242] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=518) returned 1
	[0137.242] CloseHandle (hObject=0x1fc) returned 1
	[0137.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handler.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handler.reg")) returned 0x20
	[0137.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handler.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handler.reg")) returned 0x20
	[0137.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handler.reg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\handler.reg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handler.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handler.reg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.242] SetEvent (hEvent=0xfc) returned 1
	[0137.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handsafe.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handsafe.reg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0137.243] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=588) returned 1
	[0137.243] CloseHandle (hObject=0x1fc) returned 1
	[0137.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handsafe.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handsafe.reg")) returned 0x20
	[0137.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handsafe.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handsafe.reg")) returned 0x20
	[0137.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handsafe.reg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\handsafe.reg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\handsafe.reg" (normalized: "c:\\program files\\common files\\system\\msadc\\handsafe.reg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0137.243] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=749568) returned 1
	[0137.243] CloseHandle (hObject=0x1fc) returned 1
	[0137.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20
	[0137.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20
	[0137.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0137.245] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0137.245] CloseHandle (hObject=0x1f4) returned 1
	[0137.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20
	[0137.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20
	[0137.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.246] SetEvent (hEvent=0xfc) returned 1
	[0137.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcf.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0137.246] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114688) returned 1
	[0137.246] CloseHandle (hObject=0x1f4) returned 1
	[0137.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcf.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcf.dll")) returned 0x20
	[0137.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcf.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcf.dll")) returned 0x20
	[0137.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcf.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcf.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcfr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcfr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0137.247] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0137.247] CloseHandle (hObject=0x1f4) returned 1
	[0137.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcfr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcfr.dll")) returned 0x20
	[0137.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcfr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcfr.dll")) returned 0x20
	[0137.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcfr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcfr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcfr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0137.247] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=258048) returned 1
	[0137.247] CloseHandle (hObject=0x1f4) returned 1
	[0137.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20
	[0137.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20
	[0137.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.251] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0137.251] CloseHandle (hObject=0x144) returned 1
	[0137.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20
	[0137.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20
	[0137.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcs.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.252] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98304) returned 1
	[0137.252] CloseHandle (hObject=0x144) returned 1
	[0137.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcs.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcs.dll")) returned 0x20
	[0137.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcs.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcs.dll")) returned 0x20
	[0137.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcs.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcs.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcs.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.252] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=303104) returned 1
	[0137.252] CloseHandle (hObject=0x144) returned 1
	[0137.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20
	[0137.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20
	[0137.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.253] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0137.253] CloseHandle (hObject=0x144) returned 1
	[0137.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20
	[0137.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20
	[0137.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.254] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0137.254] CloseHandle (hObject=0x144) returned 1
	[0137.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20
	[0137.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20
	[0137.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.255] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=389120) returned 1
	[0137.255] CloseHandle (hObject=0x144) returned 1
	[0137.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20
	[0137.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20
	[0137.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.256] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=249856) returned 1
	[0137.256] CloseHandle (hObject=0x144) returned 1
	[0137.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20
	[0137.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20
	[0137.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.257] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0137.257] CloseHandle (hObject=0x144) returned 1
	[0137.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20
	[0137.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20
	[0137.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.257] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57344) returned 1
	[0137.257] CloseHandle (hObject=0x144) returned 1
	[0137.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20
	[0137.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20
	[0137.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.258] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58752) returned 1
	[0137.258] CloseHandle (hObject=0x144) returned 1
	[0137.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll")) returned 0x20
	[0137.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll")) returned 0x20
	[0137.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\MSMAPI32.DLL" (normalized: "c:\\program files\\common files\\system\\msmapi\\1033\\msmapi32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.260] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5632) returned 1
	[0137.260] CloseHandle (hObject=0x144) returned 1
	[0137.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20
	[0137.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20
	[0137.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0137.262] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47616) returned 1
	[0137.262] CloseHandle (hObject=0x1f4) returned 1
	[0137.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20
	[0137.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20
	[0137.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0137.262] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44032) returned 1
	[0137.262] CloseHandle (hObject=0x1f4) returned 1
	[0137.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20
	[0137.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20
	[0137.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0137.263] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17920) returned 1
	[0137.263] CloseHandle (hObject=0x1f4) returned 1
	[0137.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20
	[0137.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20
	[0137.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0137.264] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=126976) returned 1
	[0137.264] CloseHandle (hObject=0x1f4) returned 1
	[0137.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20
	[0137.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20
	[0137.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.367] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=434176) returned 1
	[0137.367] CloseHandle (hObject=0x13c) returned 1
	[0137.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20
	[0137.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20
	[0137.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.367] SetEvent (hEvent=0xfc) returned 1
	[0137.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.367] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=61440) returned 1
	[0137.367] CloseHandle (hObject=0x13c) returned 1
	[0137.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20
	[0137.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20
	[0137.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.368] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=131072) returned 1
	[0137.368] CloseHandle (hObject=0x13c) returned 1
	[0137.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20
	[0137.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20
	[0137.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.369] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36864) returned 1
	[0137.369] CloseHandle (hObject=0x13c) returned 1
	[0137.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20
	[0137.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20
	[0137.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.370] SetEvent (hEvent=0xfc) returned 1
	[0137.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.370] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1101824) returned 1
	[0137.370] CloseHandle (hObject=0x13c) returned 1
	[0137.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20
	[0137.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20
	[0137.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.371] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81920) returned 1
	[0137.371] CloseHandle (hObject=0x13c) returned 1
	[0137.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20
	[0137.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20
	[0137.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.373] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9804) returned 1
	[0137.373] CloseHandle (hObject=0x144) returned 1
	[0137.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20
	[0137.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20
	[0137.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.373] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9975) returned 1
	[0137.373] CloseHandle (hObject=0x144) returned 1
	[0137.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20
	[0137.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20
	[0137.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.374] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1212416) returned 1
	[0137.374] CloseHandle (hObject=0x144) returned 1
	[0137.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20
	[0137.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20
	[0137.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.375] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16384) returned 1
	[0137.375] CloseHandle (hObject=0x144) returned 1
	[0137.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20
	[0137.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20
	[0137.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.375] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=364544) returned 1
	[0137.376] CloseHandle (hObject=0x144) returned 1
	[0137.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20
	[0137.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20
	[0137.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.376] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0137.376] CloseHandle (hObject=0x144) returned 1
	[0137.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20
	[0137.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20
	[0137.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrw.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrw.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.377] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=282136) returned 1
	[0137.377] CloseHandle (hObject=0x144) returned 1
	[0137.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrw.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrw.dll")) returned 0x20
	[0137.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrw.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrw.dll")) returned 0x20
	[0137.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrw.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrw.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrw.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrwbin.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrwbin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.537] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=199192) returned 1
	[0137.538] CloseHandle (hObject=0x148) returned 1
	[0137.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrwbin.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrwbin.dll")) returned 0x20
	[0137.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrwbin.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrwbin.dll")) returned 0x20
	[0137.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrwbin.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrwbin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\xmlrwbin.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\xmlrwbin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.538] SetEvent (hEvent=0xfc) returned 1
	[0137.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.701] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=325322) returned 1
	[0137.701] CloseHandle (hObject=0x148) returned 1
	[0137.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground_pal.wmv")) returned 0x20
	[0137.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground_pal.wmv")) returned 0x20
	[0137.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.702] SetEvent (hEvent=0xfc) returned 1
	[0137.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.857] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=237208) returned 1
	[0137.857] CloseHandle (hObject=0x148) returned 1
	[0137.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb_pal.wmv")) returned 0x20
	[0137.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb_pal.wmv")) returned 0x20
	[0137.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_RGB_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.858] SetEvent (hEvent=0xfc) returned 1
	[0137.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotsdarkoverlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.992] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4563) returned 1
	[0137.992] CloseHandle (hObject=0x148) returned 1
	[0137.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotsdarkoverlay.png")) returned 0x20
	[0137.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotsdarkoverlay.png")) returned 0x20
	[0137.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotsdarkoverlay.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotsdarkoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotsdarkoverlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.993] SetEvent (hEvent=0xfc) returned 1
	[0137.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.994] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5088) returned 1
	[0137.994] CloseHandle (hObject=0x148) returned 1
	[0137.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_buttongraphic.png")) returned 0x20
	[0137.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_buttongraphic.png")) returned 0x20
	[0137.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.994] SetEvent (hEvent=0xfc) returned 1
	[0137.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.995] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3130) returned 1
	[0137.995] CloseHandle (hObject=0x148) returned 1
	[0137.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0137.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0137.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.996] SetEvent (hEvent=0xfc) returned 1
	[0137.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.997] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5025) returned 1
	[0137.997] CloseHandle (hObject=0x148) returned 1
	[0137.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_buttongraphic.png")) returned 0x20
	[0137.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_buttongraphic.png")) returned 0x20
	[0137.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.997] SetEvent (hEvent=0xfc) returned 1
	[0137.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.998] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3118) returned 1
	[0137.998] CloseHandle (hObject=0x148) returned 1
	[0137.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_selectionsubpicture.png")) returned 0x20
	[0137.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_selectionsubpicture.png")) returned 0x20
	[0137.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.998] SetEvent (hEvent=0xfc) returned 1
	[0137.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.999] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4955) returned 1
	[0137.999] CloseHandle (hObject=0x148) returned 1
	[0137.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_buttongraphic.png")) returned 0x20
	[0138.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_buttongraphic.png")) returned 0x20
	[0138.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.000] SetEvent (hEvent=0xfc) returned 1
	[0138.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.001] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3081) returned 1
	[0138.001] CloseHandle (hObject=0x148) returned 1
	[0138.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.001] SetEvent (hEvent=0xfc) returned 1
	[0138.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.002] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2962) returned 1
	[0138.002] CloseHandle (hObject=0x148) returned 1
	[0138.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png")) returned 0x20
	[0138.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png")) returned 0x20
	[0138.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\pushplaysubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.003] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30138) returned 1
	[0138.003] CloseHandle (hObject=0x148) returned 1
	[0138.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_buttongraphic.png")) returned 0x20
	[0138.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_buttongraphic.png")) returned 0x20
	[0138.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.004] SetEvent (hEvent=0xfc) returned 1
	[0138.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\heart_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_glass_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.004] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.004] CloseHandle (hObject=0x148) returned 1
	[0138.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\heart_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_glass_thumbnail.bmp")) returned 0x20
	[0138.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\heart_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_glass_thumbnail.bmp")) returned 0x20
	[0138.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\heart_glass_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_glass_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\heart_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_glass_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.007] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4728) returned 1
	[0138.007] CloseHandle (hObject=0x148) returned 1
	[0138.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_selectionsubpicture.png")) returned 0x20
	[0138.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_selectionsubpicture.png")) returned 0x20
	[0138.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.008] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5742) returned 1
	[0138.008] CloseHandle (hObject=0x148) returned 1
	[0138.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_videoinset.png")) returned 0x20
	[0138.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_videoinset.png")) returned 0x20
	[0138.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_videoinset.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Heart_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\heart_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.009] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4570) returned 1
	[0138.009] CloseHandle (hObject=0x148) returned 1
	[0138.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\1047x576black.png")) returned 0x20
	[0138.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\1047x576black.png")) returned 0x20
	[0138.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\1047x576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.015] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2821) returned 1
	[0138.015] CloseHandle (hObject=0x148) returned 1
	[0138.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\15x15dot.png")) returned 0x20
	[0138.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\15x15dot.png")) returned 0x20
	[0138.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\15x15dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\15x15dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.015] SetEvent (hEvent=0xfc) returned 1
	[0138.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\colorcycle.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.016] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17378) returned 1
	[0138.016] CloseHandle (hObject=0x148) returned 1
	[0138.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\colorcycle.png")) returned 0x20
	[0138.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\colorcycle.png")) returned 0x20
	[0138.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\colorcycle.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\colorcycle.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\colorcycle.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\huemainsubpicture2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.017] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2903) returned 1
	[0138.017] CloseHandle (hObject=0x148) returned 1
	[0138.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\huemainsubpicture2.png")) returned 0x20
	[0138.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\huemainsubpicture2.png")) returned 0x20
	[0138.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\huemainsubpicture2.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\huemainsubpicture2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\huemainsubpicture2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.017] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5088) returned 1
	[0138.017] CloseHandle (hObject=0x148) returned 1
	[0138.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.018] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3130) returned 1
	[0138.018] CloseHandle (hObject=0x148) returned 1
	[0138.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.019] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5025) returned 1
	[0138.019] CloseHandle (hObject=0x148) returned 1
	[0138.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_buttongraphic.png")) returned 0x20
	[0138.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_buttongraphic.png")) returned 0x20
	[0138.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.020] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3118) returned 1
	[0138.020] CloseHandle (hObject=0x148) returned 1
	[0138.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.137] SetEvent (hEvent=0xfc) returned 1
	[0138.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.275] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2820) returned 1
	[0138.275] CloseHandle (hObject=0x148) returned 1
	[0138.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\203x8subpicture.png")) returned 0x20
	[0138.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\203x8subpicture.png")) returned 0x20
	[0138.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\203x8subpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\203x8subpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.275] SetEvent (hEvent=0xfc) returned 1
	[0138.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.276] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5025) returned 1
	[0138.276] CloseHandle (hObject=0x148) returned 1
	[0138.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_buttongraphic.png")) returned 0x20
	[0138.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_buttongraphic.png")) returned 0x20
	[0138.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.276] SetEvent (hEvent=0xfc) returned 1
	[0138.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.277] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3118) returned 1
	[0138.277] CloseHandle (hObject=0x148) returned 1
	[0138.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.278] SetEvent (hEvent=0xfc) returned 1
	[0138.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.279] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4955) returned 1
	[0138.279] CloseHandle (hObject=0x148) returned 1
	[0138.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_buttongraphic.png")) returned 0x20
	[0138.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_buttongraphic.png")) returned 0x20
	[0138.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.279] SetEvent (hEvent=0xfc) returned 1
	[0138.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.280] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3081) returned 1
	[0138.280] CloseHandle (hObject=0x148) returned 1
	[0138.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.281] SetEvent (hEvent=0xfc) returned 1
	[0138.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.282] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45199) returned 1
	[0138.282] CloseHandle (hObject=0x148) returned 1
	[0138.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-background.png")) returned 0x20
	[0138.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-background.png")) returned 0x20
	[0138.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.283] SetEvent (hEvent=0xfc) returned 1
	[0138.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.283] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3122) returned 1
	[0138.283] CloseHandle (hObject=0x148) returned 1
	[0138.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-highlight.png")) returned 0x20
	[0138.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-highlight.png")) returned 0x20
	[0138.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-highlight.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-image-mask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.284] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1400) returned 1
	[0138.284] CloseHandle (hObject=0x148) returned 1
	[0138.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-image-mask.png")) returned 0x20
	[0138.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-image-mask.png")) returned 0x20
	[0138.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-image-mask.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-image-mask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.284] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35858) returned 1
	[0138.284] CloseHandle (hObject=0x148) returned 1
	[0138.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-overlay.png")) returned 0x20
	[0138.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-overlay.png")) returned 0x20
	[0138.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-overlay.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\16_9-frame-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\16_9-frame-overlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.286] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=194963) returned 1
	[0138.286] CloseHandle (hObject=0x148) returned 1
	[0138.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\background.png")) returned 0x20
	[0138.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\background.png")) returned 0x20
	[0138.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.287] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10888) returned 1
	[0138.287] CloseHandle (hObject=0x148) returned 1
	[0138.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png")) returned 0x20
	[0138.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png")) returned 0x20
	[0138.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-back-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.287] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10254) returned 1
	[0138.287] CloseHandle (hObject=0x148) returned 1
	[0138.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png")) returned 0x20
	[0138.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png")) returned 0x20
	[0138.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-next-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.289] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10248) returned 1
	[0138.289] CloseHandle (hObject=0x148) returned 1
	[0138.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png")) returned 0x20
	[0138.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png")) returned 0x20
	[0138.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\btn-previous-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.289] SetEvent (hEvent=0xfc) returned 1
	[0138.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.290] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2374) returned 1
	[0138.290] CloseHandle (hObject=0x148) returned 1
	[0138.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png")) returned 0x20
	[0138.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png")) returned 0x20
	[0138.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.290] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27581) returned 1
	[0138.290] CloseHandle (hObject=0x148) returned 1
	[0138.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png")) returned 0x20
	[0138.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png")) returned 0x20
	[0138.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\button-overlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\button-overlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.291] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2899) returned 1
	[0138.291] CloseHandle (hObject=0x148) returned 1
	[0138.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png")) returned 0x20
	[0138.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png")) returned 0x20
	[0138.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Memories_buttonClear.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\memories_buttonclear.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.292] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10888) returned 1
	[0138.292] CloseHandle (hObject=0x148) returned 1
	[0138.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png")) returned 0x20
	[0138.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png")) returned 0x20
	[0138.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_btn-back-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.293] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=108525) returned 1
	[0138.293] CloseHandle (hObject=0x148) returned 1
	[0138.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png")) returned 0x20
	[0138.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png")) returned 0x20
	[0138.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Notes_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\notes_content-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.293] SetEvent (hEvent=0xfc) returned 1
	[0138.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.294] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20346) returned 1
	[0138.294] CloseHandle (hObject=0x148) returned 1
	[0138.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png")) returned 0x20
	[0138.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png")) returned 0x20
	[0138.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\scrapbook.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\scrapbook.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.294] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=233668) returned 1
	[0138.295] CloseHandle (hObject=0x148) returned 1
	[0138.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png")) returned 0x20
	[0138.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png")) returned 0x20
	[0138.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_content-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.295] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4968) returned 1
	[0138.295] CloseHandle (hObject=0x148) returned 1
	[0138.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png")) returned 0x20
	[0138.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png")) returned 0x20
	[0138.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_mainImage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_mainimage-mask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.296] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3143) returned 1
	[0138.297] CloseHandle (hObject=0x148) returned 1
	[0138.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png")) returned 0x20
	[0138.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png")) returned 0x20
	[0138.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Memories\\Title_select-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\memories\\title_select-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.297] SetEvent (hEvent=0xfc) returned 1
	[0138.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\menu_style_default_thumbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.298] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4842) returned 1
	[0138.298] CloseHandle (hObject=0x148) returned 1
	[0138.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\menu_style_default_thumbnail.png")) returned 0x20
	[0138.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\menu_style_default_thumbnail.png")) returned 0x20
	[0138.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\menu_style_default_thumbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\menu_style_default_Thumbnail.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\menu_style_default_thumbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.298] SetEvent (hEvent=0xfc) returned 1
	[0138.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.299] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5088) returned 1
	[0138.299] CloseHandle (hObject=0x148) returned 1
	[0138.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.299] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3130) returned 1
	[0138.299] CloseHandle (hObject=0x148) returned 1
	[0138.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.300] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5025) returned 1
	[0138.300] CloseHandle (hObject=0x148) returned 1
	[0138.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_buttongraphic.png")) returned 0x20
	[0138.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_buttongraphic.png")) returned 0x20
	[0138.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.302] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3118) returned 1
	[0138.302] CloseHandle (hObject=0x148) returned 1
	[0138.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.302] SetEvent (hEvent=0xfc) returned 1
	[0138.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.302] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4955) returned 1
	[0138.302] CloseHandle (hObject=0x148) returned 1
	[0138.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_buttongraphic.png")) returned 0x20
	[0138.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_buttongraphic.png")) returned 0x20
	[0138.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.303] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3081) returned 1
	[0138.303] CloseHandle (hObject=0x148) returned 1
	[0138.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.304] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4570) returned 1
	[0138.304] CloseHandle (hObject=0x148) returned 1
	[0138.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png")) returned 0x20
	[0138.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png")) returned 0x20
	[0138.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.305] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2821) returned 1
	[0138.305] CloseHandle (hObject=0x148) returned 1
	[0138.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png")) returned 0x20
	[0138.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png")) returned 0x20
	[0138.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\15x15dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.306] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6203) returned 1
	[0138.307] CloseHandle (hObject=0x148) returned 1
	[0138.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png")) returned 0x20
	[0138.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png")) returned 0x20
	[0138.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\decorative_rule.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\decorative_rule.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.307] SetEvent (hEvent=0xfc) returned 1
	[0138.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.307] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5088) returned 1
	[0138.307] CloseHandle (hObject=0x148) returned 1
	[0138.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.308] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3130) returned 1
	[0138.308] CloseHandle (hObject=0x148) returned 1
	[0138.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.309] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5025) returned 1
	[0138.309] CloseHandle (hObject=0x148) returned 1
	[0138.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png")) returned 0x20
	[0138.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png")) returned 0x20
	[0138.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.310] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3118) returned 1
	[0138.310] CloseHandle (hObject=0x148) returned 1
	[0138.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.310] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4955) returned 1
	[0138.310] CloseHandle (hObject=0x148) returned 1
	[0138.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png")) returned 0x20
	[0138.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png")) returned 0x20
	[0138.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.311] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3081) returned 1
	[0138.311] CloseHandle (hObject=0x148) returned 1
	[0138.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.316] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27789) returned 1
	[0138.316] CloseHandle (hObject=0x148) returned 1
	[0138.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png")) returned 0x20
	[0138.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png")) returned 0x20
	[0138.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\OldAge\\vintage.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\oldage\\vintage.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.318] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3823) returned 1
	[0138.318] CloseHandle (hObject=0x148) returned 1
	[0138.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png")) returned 0x20
	[0138.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png")) returned 0x20
	[0138.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\720x480blacksquare.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\720x480blacksquare.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.318] SetEvent (hEvent=0xfc) returned 1
	[0138.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.319] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4456) returned 1
	[0138.319] CloseHandle (hObject=0x148) returned 1
	[0138.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png")) returned 0x20
	[0138.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png")) returned 0x20
	[0138.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.319] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3076) returned 1
	[0138.319] CloseHandle (hObject=0x148) returned 1
	[0138.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png")) returned 0x20
	[0138.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png")) returned 0x20
	[0138.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\NextMenuButtonIconSubpictur.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\nextmenubuttoniconsubpictur.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.321] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=693292) returned 1
	[0138.321] CloseHandle (hObject=0x148) returned 1
	[0138.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv")) returned 0x20
	[0138.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv")) returned 0x20
	[0138.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.321] SetEvent (hEvent=0xfc) returned 1
	[0138.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.322] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=781292) returned 1
	[0138.322] CloseHandle (hObject=0x148) returned 1
	[0138.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv")) returned 0x20
	[0138.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv")) returned 0x20
	[0138.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Notes_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\notes_loop_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.322] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4525) returned 1
	[0138.322] CloseHandle (hObject=0x148) returned 1
	[0138.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png")) returned 0x20
	[0138.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png")) returned 0x20
	[0138.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.323] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3055) returned 1
	[0138.323] CloseHandle (hObject=0x148) returned 1
	[0138.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png")) returned 0x20
	[0138.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png")) returned 0x20
	[0138.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\ParentMenuButtonIconSubpict.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\parentmenubuttoniconsubpict.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.324] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25243) returned 1
	[0138.324] CloseHandle (hObject=0x148) returned 1
	[0138.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png")) returned 0x20
	[0138.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png")) returned 0x20
	[0138.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\performance.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\performance.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.325] SetEvent (hEvent=0xfc) returned 1
	[0138.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.325] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6922) returned 1
	[0138.325] CloseHandle (hObject=0x148) returned 1
	[0138.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png")) returned 0x20
	[0138.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png")) returned 0x20
	[0138.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Mask1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_mask1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.326] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4959) returned 1
	[0138.326] CloseHandle (hObject=0x148) returned 1
	[0138.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png")) returned 0x20
	[0138.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png")) returned 0x20
	[0138.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Perf_Scenes_Subpicture1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\perf_scenes_subpicture1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.327] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4503) returned 1
	[0138.327] CloseHandle (hObject=0x148) returned 1
	[0138.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png")) returned 0x20
	[0138.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png")) returned 0x20
	[0138.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.328] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3082) returned 1
	[0138.328] CloseHandle (hObject=0x148) returned 1
	[0138.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png")) returned 0x20
	[0138.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png")) returned 0x20
	[0138.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\PreviousMenuButtonIconSubpi.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\previousmenubuttoniconsubpi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.328] SetEvent (hEvent=0xfc) returned 1
	[0138.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.329] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3108) returned 1
	[0138.329] CloseHandle (hObject=0x148) returned 1
	[0138.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png")) returned 0x20
	[0138.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png")) returned 0x20
	[0138.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\redmenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\redmenu.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.330] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=533292) returned 1
	[0138.330] CloseHandle (hObject=0x148) returned 1
	[0138.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv")) returned 0x20
	[0138.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv")) returned 0x20
	[0138.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.332] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=613292) returned 1
	[0138.332] CloseHandle (hObject=0x148) returned 1
	[0138.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv")) returned 0x20
	[0138.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv")) returned 0x20
	[0138.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Scene_loop_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\scene_loop_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.333] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=153) returned 1
	[0138.333] CloseHandle (hObject=0x148) returned 1
	[0138.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png")) returned 0x20
	[0138.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png")) returned 0x20
	[0138.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.334] SetEvent (hEvent=0xfc) returned 1
	[0138.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.334] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=132) returned 1
	[0138.334] CloseHandle (hObject=0x148) returned 1
	[0138.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png")) returned 0x20
	[0138.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png")) returned 0x20
	[0138.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\TitleButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\titlebuttonsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.335] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1741316) returned 1
	[0138.335] CloseHandle (hObject=0x148) returned 1
	[0138.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv")) returned 0x20
	[0138.335] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0138.335] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page.wmv")) returned 0
	[0138.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.336] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1901316) returned 1
	[0138.336] CloseHandle (hObject=0x148) returned 1
	[0138.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv")) returned 0x20
	[0138.336] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0138.336] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Page_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_page_pal.wmv")) returned 0
	[0138.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.337] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=709220) returned 1
	[0138.337] CloseHandle (hObject=0x148) returned 1
	[0138.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv")) returned 0x20
	[0138.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv")) returned 0x20
	[0138.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_notes.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.337] SetEvent (hEvent=0xfc) returned 1
	[0138.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.338] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=741220) returned 1
	[0138.338] CloseHandle (hObject=0x148) returned 1
	[0138.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv")) returned 0x20
	[0138.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv")) returned 0x20
	[0138.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Notes_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_notes_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.338] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=629220) returned 1
	[0138.338] CloseHandle (hObject=0x148) returned 1
	[0138.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv")) returned 0x20
	[0138.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv")) returned 0x20
	[0138.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\title_trans_scene.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.339] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=661220) returned 1
	[0138.339] CloseHandle (hObject=0x148) returned 1
	[0138.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv")) returned 0x20
	[0138.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv")) returned 0x20
	[0138.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\Title_Trans_Scene_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\title_trans_scene_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.340] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6716) returned 1
	[0138.340] CloseHandle (hObject=0x148) returned 1
	[0138.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png")) returned 0x20
	[0138.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png")) returned 0x20
	[0138.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\userContent_16x9_imagemask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\usercontent_16x9_imagemask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.341] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12008) returned 1
	[0138.341] CloseHandle (hObject=0x148) returned 1
	[0138.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png")) returned 0x20
	[0138.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png")) returned 0x20
	[0138.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Performance\\whitemenu.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\performance\\whitemenu.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.342] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=237226) returned 1
	[0138.342] CloseHandle (hObject=0x148) returned 1
	[0138.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv")) returned 0x20
	[0138.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv")) returned 0x20
	[0138.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.344] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=253220) returned 1
	[0138.344] CloseHandle (hObject=0x148) returned 1
	[0138.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv")) returned 0x20
	[0138.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv")) returned 0x20
	[0138.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_intro_bg_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.345] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=789322) returned 1
	[0138.345] CloseHandle (hObject=0x148) returned 1
	[0138.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv")) returned 0x20
	[0138.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv")) returned 0x20
	[0138.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.345] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=869322) returned 1
	[0138.345] CloseHandle (hObject=0x148) returned 1
	[0138.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv")) returned 0x20
	[0138.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv")) returned 0x20
	[0138.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Notes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\notes_loop_bg_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.347] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3016) returned 1
	[0138.347] CloseHandle (hObject=0x148) returned 1
	[0138.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png")) returned 0x20
	[0138.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png")) returned 0x20
	[0138.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-over-select.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.347] SetEvent (hEvent=0xfc) returned 1
	[0138.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.347] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1849) returned 1
	[0138.348] CloseHandle (hObject=0x148) returned 1
	[0138.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png")) returned 0x20
	[0138.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png")) returned 0x20
	[0138.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-back-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.349] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3016) returned 1
	[0138.349] CloseHandle (hObject=0x148) returned 1
	[0138.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png")) returned 0x20
	[0138.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png")) returned 0x20
	[0138.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-over-select.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.349] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2041) returned 1
	[0138.350] CloseHandle (hObject=0x148) returned 1
	[0138.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png")) returned 0x20
	[0138.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png")) returned 0x20
	[0138.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-next-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.465] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2891) returned 1
	[0138.465] CloseHandle (hObject=0x148) returned 1
	[0138.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png")) returned 0x20
	[0138.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png")) returned 0x20
	[0138.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-over-DOT.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-over-dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.465] SetEvent (hEvent=0xfc) returned 1
	[0138.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.466] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25662) returned 1
	[0138.466] CloseHandle (hObject=0x148) returned 1
	[0138.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png")) returned 0x20
	[0138.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png")) returned 0x20
	[0138.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-shadow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.466] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6166) returned 1
	[0138.466] CloseHandle (hObject=0x148) returned 1
	[0138.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png")) returned 0x20
	[0138.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png")) returned 0x20
	[0138.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-backglow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-backglow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.467] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7946) returned 1
	[0138.467] CloseHandle (hObject=0x148) returned 1
	[0138.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png")) returned 0x20
	[0138.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png")) returned 0x20
	[0138.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-border.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.468] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4422) returned 1
	[0138.468] CloseHandle (hObject=0x148) returned 1
	[0138.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png")) returned 0x20
	[0138.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png")) returned 0x20
	[0138.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_image-frame-ImageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_image-frame-imagemask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.469] SetEvent (hEvent=0xfc) returned 1
	[0138.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.469] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7888) returned 1
	[0138.469] CloseHandle (hObject=0x148) returned 1
	[0138.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png")) returned 0x20
	[0138.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png")) returned 0x20
	[0138.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_notes-txt-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_notes-txt-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.470] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16842) returned 1
	[0138.470] CloseHandle (hObject=0x148) returned 1
	[0138.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png")) returned 0x20
	[0138.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png")) returned 0x20
	[0138.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\rollinghills.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\rollinghills.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.471] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=253226) returned 1
	[0138.471] CloseHandle (hObject=0x148) returned 1
	[0138.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv")) returned 0x20
	[0138.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv")) returned 0x20
	[0138.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.472] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=261220) returned 1
	[0138.472] CloseHandle (hObject=0x148) returned 1
	[0138.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv")) returned 0x20
	[0138.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv")) returned 0x20
	[0138.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_INTRO_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_intro_bg_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.473] SetEvent (hEvent=0xfc) returned 1
	[0138.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.473] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=797322) returned 1
	[0138.473] CloseHandle (hObject=0x148) returned 1
	[0138.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv")) returned 0x20
	[0138.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv")) returned 0x20
	[0138.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.474] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=869322) returned 1
	[0138.474] CloseHandle (hObject=0x148) returned 1
	[0138.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv")) returned 0x20
	[0138.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv")) returned 0x20
	[0138.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Scenes_LOOP_BG_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\scenes_loop_bg_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.474] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=933322) returned 1
	[0138.475] CloseHandle (hObject=0x148) returned 1
	[0138.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv")) returned 0x20
	[0138.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv")) returned 0x20
	[0138.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.476] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=989322) returned 1
	[0138.476] CloseHandle (hObject=0x148) returned 1
	[0138.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv")) returned 0x20
	[0138.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv")) returned 0x20
	[0138.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Title_Page_Ref_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\title_page_ref_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.476] SetEvent (hEvent=0xfc) returned 1
	[0138.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.477] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5372) returned 1
	[0138.477] CloseHandle (hObject=0x148) returned 1
	[0138.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_buttongraphic.png")) returned 0x20
	[0138.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_buttongraphic.png")) returned 0x20
	[0138.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.479] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4724) returned 1
	[0138.479] CloseHandle (hObject=0x148) returned 1
	[0138.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_selectionsubpicture.png")) returned 0x20
	[0138.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_selectionsubpicture.png")) returned 0x20
	[0138.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.480] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4710) returned 1
	[0138.480] CloseHandle (hObject=0x148) returned 1
	[0138.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_videoinset.png")) returned 0x20
	[0138.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_videoinset.png")) returned 0x20
	[0138.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_videoinset.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\photoedge_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\photoedge_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.481] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22969) returned 1
	[0138.481] CloseHandle (hObject=0x148) returned 1
	[0138.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_buttongraphic.png")) returned 0x20
	[0138.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_buttongraphic.png")) returned 0x20
	[0138.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.482] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5647) returned 1
	[0138.482] CloseHandle (hObject=0x148) returned 1
	[0138.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_selectionsubpicture.png")) returned 0x20
	[0138.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_selectionsubpicture.png")) returned 0x20
	[0138.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.483] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3214) returned 1
	[0138.483] CloseHandle (hObject=0x148) returned 1
	[0138.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_videoinset.png")) returned 0x20
	[0138.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_videoinset.png")) returned 0x20
	[0138.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_videoinset.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Postage_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\postage_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.484] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4570) returned 1
	[0138.484] CloseHandle (hObject=0x148) returned 1
	[0138.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png")) returned 0x20
	[0138.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png")) returned 0x20
	[0138.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.485] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4570) returned 1
	[0138.485] CloseHandle (hObject=0x148) returned 1
	[0138.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png")) returned 0x20
	[0138.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png")) returned 0x20
	[0138.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\1047_576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\1047_576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.486] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5088) returned 1
	[0138.486] CloseHandle (hObject=0x148) returned 1
	[0138.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.486] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3130) returned 1
	[0138.486] CloseHandle (hObject=0x148) returned 1
	[0138.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.487] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5025) returned 1
	[0138.487] CloseHandle (hObject=0x148) returned 1
	[0138.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png")) returned 0x20
	[0138.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png")) returned 0x20
	[0138.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.488] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3118) returned 1
	[0138.488] CloseHandle (hObject=0x148) returned 1
	[0138.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.489] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4955) returned 1
	[0138.489] CloseHandle (hObject=0x148) returned 1
	[0138.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png")) returned 0x20
	[0138.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png")) returned 0x20
	[0138.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.489] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3081) returned 1
	[0138.490] CloseHandle (hObject=0x148) returned 1
	[0138.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.490] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24066) returned 1
	[0138.490] CloseHandle (hObject=0x148) returned 1
	[0138.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png")) returned 0x20
	[0138.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png")) returned 0x20
	[0138.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.491] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2962) returned 1
	[0138.491] CloseHandle (hObject=0x148) returned 1
	[0138.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png")) returned 0x20
	[0138.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png")) returned 0x20
	[0138.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\pushplaysubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\pushplaysubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.492] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2928) returned 1
	[0138.492] CloseHandle (hObject=0x148) returned 1
	[0138.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png")) returned 0x20
	[0138.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png")) returned 0x20
	[0138.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_item.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_item.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.492] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3000) returned 1
	[0138.492] CloseHandle (hObject=0x148) returned 1
	[0138.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png")) returned 0x20
	[0138.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png")) returned 0x20
	[0138.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Push\\push_title.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\push\\push_title.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.494] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4570) returned 1
	[0138.494] CloseHandle (hObject=0x148) returned 1
	[0138.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png")) returned 0x20
	[0138.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png")) returned 0x20
	[0138.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.494] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6440) returned 1
	[0138.494] CloseHandle (hObject=0x148) returned 1
	[0138.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png")) returned 0x20
	[0138.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png")) returned 0x20
	[0138.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\1047x576_91n92.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.495] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2821) returned 1
	[0138.495] CloseHandle (hObject=0x148) returned 1
	[0138.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png")) returned 0x20
	[0138.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png")) returned 0x20
	[0138.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\15x15dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.496] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5620) returned 1
	[0138.496] CloseHandle (hObject=0x148) returned 1
	[0138.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png")) returned 0x20
	[0138.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png")) returned 0x20
	[0138.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\720x480icongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.497] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5088) returned 1
	[0138.497] CloseHandle (hObject=0x148) returned 1
	[0138.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.497] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3130) returned 1
	[0138.497] CloseHandle (hObject=0x148) returned 1
	[0138.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.498] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5025) returned 1
	[0138.498] CloseHandle (hObject=0x148) returned 1
	[0138.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png")) returned 0x20
	[0138.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png")) returned 0x20
	[0138.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.499] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3118) returned 1
	[0138.499] CloseHandle (hObject=0x148) returned 1
	[0138.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.499] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4955) returned 1
	[0138.499] CloseHandle (hObject=0x148) returned 1
	[0138.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png")) returned 0x20
	[0138.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png")) returned 0x20
	[0138.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.500] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3081) returned 1
	[0138.500] CloseHandle (hObject=0x148) returned 1
	[0138.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.691] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24852) returned 1
	[0138.691] CloseHandle (hObject=0x148) returned 1
	[0138.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png")) returned 0x20
	[0138.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png")) returned 0x20
	[0138.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\reflect.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\reflect.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.692] SetEvent (hEvent=0xfc) returned 1
	[0138.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_babypink_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_babypink_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.693] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.693] CloseHandle (hObject=0x148) returned 1
	[0138.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_babypink_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_babypink_thumbnail.bmp")) returned 0x20
	[0138.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_babypink_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_babypink_thumbnail.bmp")) returned 0x20
	[0138.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_babypink_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_babypink_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_babypink_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_babypink_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.693] SetEvent (hEvent=0xfc) returned 1
	[0138.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_glass_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.693] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.694] CloseHandle (hObject=0x148) returned 1
	[0138.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_glass_thumbnail.bmp")) returned 0x20
	[0138.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_glass_thumbnail.bmp")) returned 0x20
	[0138.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_glass_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_glass_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_glass_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_highlights_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_highlights_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.694] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.694] CloseHandle (hObject=0x148) returned 1
	[0138.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_highlights_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_highlights_thumbnail.bmp")) returned 0x20
	[0138.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_highlights_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_highlights_thumbnail.bmp")) returned 0x20
	[0138.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_highlights_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_highlights_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_highlights_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_highlights_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_performance_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_performance_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.695] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.695] CloseHandle (hObject=0x148) returned 1
	[0138.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_performance_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_performance_thumbnail.bmp")) returned 0x20
	[0138.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_performance_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_performance_thumbnail.bmp")) returned 0x20
	[0138.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_performance_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_performance_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_performance_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_performance_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_photo_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_photo_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.697] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.697] CloseHandle (hObject=0x148) returned 1
	[0138.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_photo_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_photo_thumbnail.bmp")) returned 0x20
	[0138.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_photo_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_photo_thumbnail.bmp")) returned 0x20
	[0138.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_photo_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_photo_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_photo_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_photo_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_plain_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_plain_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.697] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.697] CloseHandle (hObject=0x148) returned 1
	[0138.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_plain_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_plain_thumbnail.bmp")) returned 0x20
	[0138.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_plain_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_plain_thumbnail.bmp")) returned 0x20
	[0138.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_plain_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_plain_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_plain_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_plain_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_postage_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_postage_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.698] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.698] CloseHandle (hObject=0x148) returned 1
	[0138.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_postage_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_postage_thumbnail.bmp")) returned 0x20
	[0138.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_postage_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_postage_thumbnail.bmp")) returned 0x20
	[0138.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_postage_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_postage_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_postage_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_postage_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_scrapbook_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_scrapbook_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.699] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.699] CloseHandle (hObject=0x148) returned 1
	[0138.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_scrapbook_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_scrapbook_thumbnail.bmp")) returned 0x20
	[0138.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_scrapbook_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_scrapbook_thumbnail.bmp")) returned 0x20
	[0138.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_scrapbook_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_scrapbook_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_scrapbook_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_scrapbook_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.700] SetEvent (hEvent=0xfc) returned 1
	[0138.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_specialocc_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_specialocc_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.700] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.700] CloseHandle (hObject=0x148) returned 1
	[0138.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_specialocc_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_specialocc_thumbnail.bmp")) returned 0x20
	[0138.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_specialocc_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_specialocc_thumbnail.bmp")) returned 0x20
	[0138.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_specialocc_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_specialocc_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_specialocc_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_specialocc_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_travel_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_travel_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.701] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.701] CloseHandle (hObject=0x148) returned 1
	[0138.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_travel_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_travel_thumbnail.bmp")) returned 0x20
	[0138.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_travel_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_travel_thumbnail.bmp")) returned 0x20
	[0138.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_travel_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_travel_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_travel_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_travel_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_widescreen_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_widescreen_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.702] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.702] CloseHandle (hObject=0x148) returned 1
	[0138.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_widescreen_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_widescreen_thumbnail.bmp")) returned 0x20
	[0138.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_widescreen_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_widescreen_thumbnail.bmp")) returned 0x20
	[0138.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_widescreen_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_widescreen_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\rectangle_widescreen_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangle_widescreen_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.703] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4570) returned 1
	[0138.703] CloseHandle (hObject=0x148) returned 1
	[0138.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png")) returned 0x20
	[0138.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png")) returned 0x20
	[0138.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.704] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2820) returned 1
	[0138.704] CloseHandle (hObject=0x148) returned 1
	[0138.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png")) returned 0x20
	[0138.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png")) returned 0x20
	[0138.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\203x8subpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.705] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23215) returned 1
	[0138.705] CloseHandle (hObject=0x148) returned 1
	[0138.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png")) returned 0x20
	[0138.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png")) returned 0x20
	[0138.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\bandwidth.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\bandwidth.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.706] SetEvent (hEvent=0xfc) returned 1
	[0138.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.706] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6431) returned 1
	[0138.706] CloseHandle (hObject=0x148) returned 1
	[0138.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png")) returned 0x20
	[0138.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png")) returned 0x20
	[0138.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\blackbars80.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\blackbars80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.707] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5088) returned 1
	[0138.707] CloseHandle (hObject=0x148) returned 1
	[0138.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.707] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3130) returned 1
	[0138.708] CloseHandle (hObject=0x148) returned 1
	[0138.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.708] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5025) returned 1
	[0138.708] CloseHandle (hObject=0x148) returned 1
	[0138.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png")) returned 0x20
	[0138.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png")) returned 0x20
	[0138.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.709] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3118) returned 1
	[0138.709] CloseHandle (hObject=0x148) returned 1
	[0138.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.710] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4955) returned 1
	[0138.710] CloseHandle (hObject=0x148) returned 1
	[0138.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png")) returned 0x20
	[0138.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png")) returned 0x20
	[0138.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.710] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3081) returned 1
	[0138.711] CloseHandle (hObject=0x148) returned 1
	[0138.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.711] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=543910) returned 1
	[0138.711] CloseHandle (hObject=0x148) returned 1
	[0138.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv")) returned 0x20
	[0138.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv")) returned 0x20
	[0138.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.712] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=542466) returned 1
	[0138.712] CloseHandle (hObject=0x148) returned 1
	[0138.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv")) returned 0x20
	[0138.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv")) returned 0x20
	[0138.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\ResizingPanels\\Panel_Mask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\resizingpanels\\panel_mask_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\scene_button_style_default_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\scene_button_style_default_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.713] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5072) returned 1
	[0138.713] CloseHandle (hObject=0x148) returned 1
	[0138.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\scene_button_style_default_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\scene_button_style_default_thumbnail.bmp")) returned 0x20
	[0138.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\scene_button_style_default_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\scene_button_style_default_thumbnail.bmp")) returned 0x20
	[0138.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\scene_button_style_default_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\scene_button_style_default_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\scene_button_style_default_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\scene_button_style_default_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.717] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3462) returned 1
	[0138.717] CloseHandle (hObject=0x148) returned 1
	[0138.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_buttongraphic.png")) returned 0x20
	[0138.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_buttongraphic.png")) returned 0x20
	[0138.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.718] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3390) returned 1
	[0138.718] CloseHandle (hObject=0x148) returned 1
	[0138.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_selectionsubpicture.png")) returned 0x20
	[0138.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_selectionsubpicture.png")) returned 0x20
	[0138.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.718] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3214) returned 1
	[0138.718] CloseHandle (hObject=0x148) returned 1
	[0138.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_videoinset.png")) returned 0x20
	[0138.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_videoinset.png")) returned 0x20
	[0138.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_videoinset.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\shadowonlyframe_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shadowonlyframe_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.720] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4570) returned 1
	[0138.720] CloseHandle (hObject=0x148) returned 1
	[0138.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png")) returned 0x20
	[0138.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png")) returned 0x20
	[0138.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.720] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2820) returned 1
	[0138.720] CloseHandle (hObject=0x148) returned 1
	[0138.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png")) returned 0x20
	[0138.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png")) returned 0x20
	[0138.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\203x8subpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.723] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5088) returned 1
	[0138.723] CloseHandle (hObject=0x148) returned 1
	[0138.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.724] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3130) returned 1
	[0138.724] CloseHandle (hObject=0x148) returned 1
	[0138.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.725] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5025) returned 1
	[0138.725] CloseHandle (hObject=0x148) returned 1
	[0138.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png")) returned 0x20
	[0138.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png")) returned 0x20
	[0138.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.726] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3118) returned 1
	[0138.726] CloseHandle (hObject=0x148) returned 1
	[0138.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.726] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4955) returned 1
	[0138.726] CloseHandle (hObject=0x148) returned 1
	[0138.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png")) returned 0x20
	[0138.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png")) returned 0x20
	[0138.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.727] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3081) returned 1
	[0138.727] CloseHandle (hObject=0x148) returned 1
	[0138.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.728] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21627) returned 1
	[0138.728] CloseHandle (hObject=0x148) returned 1
	[0138.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png")) returned 0x20
	[0138.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png")) returned 0x20
	[0138.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Shatter\\shatter.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\shatter\\shatter.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.729] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4570) returned 1
	[0138.729] CloseHandle (hObject=0x148) returned 1
	[0138.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png")) returned 0x20
	[0138.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png")) returned 0x20
	[0138.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.866] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51801) returned 1
	[0138.866] CloseHandle (hObject=0x148) returned 1
	[0138.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png")) returned 0x20
	[0138.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png")) returned 0x20
	[0138.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\mainscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\mainscroll.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.866] SetEvent (hEvent=0xfc) returned 1
	[0138.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.867] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19112) returned 1
	[0138.867] CloseHandle (hObject=0x148) returned 1
	[0138.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png")) returned 0x20
	[0138.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png")) returned 0x20
	[0138.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialoccasion.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialoccasion.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.867] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6423) returned 1
	[0138.867] CloseHandle (hObject=0x148) returned 1
	[0138.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png")) returned 0x20
	[0138.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png")) returned 0x20
	[0138.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitemask1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitemask1047.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.868] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=169722) returned 1
	[0138.868] CloseHandle (hObject=0x148) returned 1
	[0138.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png")) returned 0x20
	[0138.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png")) returned 0x20
	[0138.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\whitevignette1047.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\whitevignette1047.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.869] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2910) returned 1
	[0138.870] CloseHandle (hObject=0x148) returned 1
	[0138.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png")) returned 0x20
	[0138.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png")) returned 0x20
	[0138.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\CircleSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\circlesubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.871] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4621) returned 1
	[0138.871] CloseHandle (hObject=0x148) returned 1
	[0138.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png")) returned 0x20
	[0138.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png")) returned 0x20
	[0138.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\GoldRing.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\goldring.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.872] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27964) returned 1
	[0138.872] CloseHandle (hObject=0x148) returned 1
	[0138.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png")) returned 0x20
	[0138.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png")) returned 0x20
	[0138.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.873] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2978) returned 1
	[0138.873] CloseHandle (hObject=0x148) returned 1
	[0138.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png")) returned 0x20
	[0138.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png")) returned 0x20
	[0138.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NavigationButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\navigationbuttonsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.873] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3808) returned 1
	[0138.873] CloseHandle (hObject=0x148) returned 1
	[0138.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png")) returned 0x20
	[0138.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png")) returned 0x20
	[0138.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\NextMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\nextmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.875] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3810) returned 1
	[0138.875] CloseHandle (hObject=0x148) returned 1
	[0138.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png")) returned 0x20
	[0138.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png")) returned 0x20
	[0138.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\ParentMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\parentmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.875] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3819) returned 1
	[0138.876] CloseHandle (hObject=0x148) returned 1
	[0138.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png")) returned 0x20
	[0138.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png")) returned 0x20
	[0138.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\PreviousMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\previousmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.876] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3133) returned 1
	[0138.876] CloseHandle (hObject=0x148) returned 1
	[0138.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png")) returned 0x20
	[0138.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png")) returned 0x20
	[0138.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha1.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.877] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3518) returned 1
	[0138.877] CloseHandle (hObject=0x148) returned 1
	[0138.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png")) returned 0x20
	[0138.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png")) returned 0x20
	[0138.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonInset_Alpha2.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttoninset_alpha2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.878] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3119) returned 1
	[0138.878] CloseHandle (hObject=0x148) returned 1
	[0138.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png")) returned 0x20
	[0138.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png")) returned 0x20
	[0138.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SceneButtonSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\scenebuttonsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.879] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5477696) returned 1
	[0138.879] CloseHandle (hObject=0x148) returned 1
	[0138.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv")) returned 0x20
	[0138.879] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0138.879] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground.wmv")) returned 0
	[0138.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.880] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5749696) returned 1
	[0138.880] CloseHandle (hObject=0x148) returned 1
	[0138.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv")) returned 0x20
	[0138.880] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0138.880] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmainbackground_pal.wmv")) returned 0
	[0138.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.881] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1829606) returned 1
	[0138.881] CloseHandle (hObject=0x148) returned 1
	[0138.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv")) returned 0x20
	[0138.881] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0138.881] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground.wmv")) returned 0
	[0138.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.882] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1837606) returned 1
	[0138.882] CloseHandle (hObject=0x148) returned 1
	[0138.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv")) returned 0x20
	[0138.882] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0138.882] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintonotesbackground_pal.wmv")) returned 0
	[0138.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.883] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1589606) returned 1
	[0138.883] CloseHandle (hObject=0x148) returned 1
	[0138.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv")) returned 0x20
	[0138.883] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0138.883] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground.wmv")) returned 0
	[0138.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.883] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1613606) returned 1
	[0138.883] CloseHandle (hObject=0x148) returned 1
	[0138.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv")) returned 0x20
	[0138.883] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0138.884] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsmaintoscenesbackground_pal.wmv")) returned 0
	[0138.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.884] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6717684) returned 1
	[0138.884] CloseHandle (hObject=0x148) returned 1
	[0138.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv")) returned 0x20
	[0138.884] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0138.884] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground.wmv")) returned 0
	[0138.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.885] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6765684) returned 1
	[0138.885] CloseHandle (hObject=0x148) returned 1
	[0138.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv")) returned 0x20
	[0138.885] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0138.886] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsnotesbackground_pal.wmv")) returned 0
	[0138.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.886] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2925684) returned 1
	[0138.886] CloseHandle (hObject=0x148) returned 1
	[0138.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv")) returned 0x20
	[0138.886] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0138.886] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground.wmv")) returned 0
	[0138.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.887] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3037684) returned 1
	[0138.887] CloseHandle (hObject=0x148) returned 1
	[0138.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv")) returned 0x20
	[0138.887] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0138.887] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\SportsScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sportsscenesbackground_pal.wmv")) returned 0
	[0138.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.887] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9170) returned 1
	[0138.887] CloseHandle (hObject=0x148) returned 1
	[0138.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png")) returned 0x20
	[0138.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png")) returned 0x20
	[0138.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Sports\\sports_disc_mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\sports\\sports_disc_mask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.889] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4570) returned 1
	[0138.889] CloseHandle (hObject=0x148) returned 1
	[0138.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png")) returned 0x20
	[0138.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png")) returned 0x20
	[0138.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.893] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6440) returned 1
	[0138.893] CloseHandle (hObject=0x148) returned 1
	[0138.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png")) returned 0x20
	[0138.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png")) returned 0x20
	[0138.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\1047x576_91n92.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\1047x576_91n92.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.894] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2821) returned 1
	[0138.894] CloseHandle (hObject=0x148) returned 1
	[0138.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png")) returned 0x20
	[0138.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png")) returned 0x20
	[0138.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\15x15dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.895] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5620) returned 1
	[0138.895] CloseHandle (hObject=0x148) returned 1
	[0138.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png")) returned 0x20
	[0138.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png")) returned 0x20
	[0138.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720x480icongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720x480icongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.896] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5182) returned 1
	[0138.896] CloseHandle (hObject=0x148) returned 1
	[0138.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png")) returned 0x20
	[0138.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png")) returned 0x20
	[0138.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\720_480shadow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\720_480shadow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.897] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5088) returned 1
	[0138.897] CloseHandle (hObject=0x148) returned 1
	[0138.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.898] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3130) returned 1
	[0138.898] CloseHandle (hObject=0x148) returned 1
	[0138.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.898] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5025) returned 1
	[0138.898] CloseHandle (hObject=0x148) returned 1
	[0138.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png")) returned 0x20
	[0138.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png")) returned 0x20
	[0138.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.899] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3118) returned 1
	[0138.899] CloseHandle (hObject=0x148) returned 1
	[0138.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.900] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4955) returned 1
	[0138.900] CloseHandle (hObject=0x148) returned 1
	[0138.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png")) returned 0x20
	[0138.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png")) returned 0x20
	[0138.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.900] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3081) returned 1
	[0138.900] CloseHandle (hObject=0x148) returned 1
	[0138.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.901] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24791) returned 1
	[0138.901] CloseHandle (hObject=0x148) returned 1
	[0138.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png")) returned 0x20
	[0138.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png")) returned 0x20
	[0138.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Stacking\\photograph.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\stacking\\photograph.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.903] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28701) returned 1
	[0138.903] CloseHandle (hObject=0x148) returned 1
	[0138.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png")) returned 0x20
	[0138.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png")) returned 0x20
	[0138.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.904] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1545) returned 1
	[0138.904] CloseHandle (hObject=0x148) returned 1
	[0138.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png")) returned 0x20
	[0138.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png")) returned 0x20
	[0138.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.905] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3159) returned 1
	[0138.905] CloseHandle (hObject=0x148) returned 1
	[0138.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png")) returned 0x20
	[0138.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png")) returned 0x20
	[0138.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\16_9-frame-image-inset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\16_9-frame-image-inset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.905] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8509) returned 1
	[0138.905] CloseHandle (hObject=0x148) returned 1
	[0138.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png")) returned 0x20
	[0138.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png")) returned 0x20
	[0138.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-back-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.089] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8120) returned 1
	[0139.089] CloseHandle (hObject=0x148) returned 1
	[0139.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png")) returned 0x20
	[0139.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png")) returned 0x20
	[0139.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-next-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.090] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=962) returned 1
	[0139.090] CloseHandle (hObject=0x148) returned 1
	[0139.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png")) returned 0x20
	[0139.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png")) returned 0x20
	[0139.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-bullet.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-bullet.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.091] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=716) returned 1
	[0139.091] CloseHandle (hObject=0x148) returned 1
	[0139.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png")) returned 0x20
	[0139.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png")) returned 0x20
	[0139.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\button-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.480] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=293917) returned 1
	[0139.481] CloseHandle (hObject=0x148) returned 1
	[0139.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png")) returned 0x20
	[0139.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png")) returned 0x20
	[0139.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\content-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.534] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=244736) returned 1
	[0139.534] CloseHandle (hObject=0x148) returned 1
	[0139.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20
	[0139.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20
	[0139.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.535] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17248) returned 1
	[0139.535] CloseHandle (hObject=0x148) returned 1
	[0139.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 0x20
	[0139.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 0x20
	[0139.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.672] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18738) returned 1
	[0139.672] CloseHandle (hObject=0x148) returned 1
	[0139.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 0x20
	[0139.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 0x20
	[0139.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.672] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28974) returned 1
	[0139.672] CloseHandle (hObject=0x148) returned 1
	[0139.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 0x20
	[0139.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 0x20
	[0139.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.816] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34076) returned 1
	[0139.816] CloseHandle (hObject=0x148) returned 1
	[0139.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 0x20
	[0139.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 0x20
	[0139.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.817] SetEvent (hEvent=0xfc) returned 1
	[0139.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.330] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3966) returned 1
	[0140.331] CloseHandle (hObject=0x148) returned 1
	[0140.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif")) returned 0x20
	[0140.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif")) returned 0x20
	[0140.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.331] SetEvent (hEvent=0xfc) returned 1
	[0140.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.332] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4296) returned 1
	[0140.332] CloseHandle (hObject=0x148) returned 1
	[0140.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf")) returned 0x20
	[0140.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf")) returned 0x20
	[0140.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.333] SetEvent (hEvent=0xfc) returned 1
	[0140.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.333] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3228) returned 1
	[0140.333] CloseHandle (hObject=0x148) returned 1
	[0140.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf")) returned 0x20
	[0140.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf")) returned 0x20
	[0140.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.334] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4808) returned 1
	[0140.334] CloseHandle (hObject=0x148) returned 1
	[0140.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf")) returned 0x20
	[0140.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf")) returned 0x20
	[0140.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.335] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4996) returned 1
	[0140.335] CloseHandle (hObject=0x148) returned 1
	[0140.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf")) returned 0x20
	[0140.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf")) returned 0x20
	[0140.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.335] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5004) returned 1
	[0140.335] CloseHandle (hObject=0x148) returned 1
	[0140.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf")) returned 0x20
	[0140.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf")) returned 0x20
	[0140.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.336] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7384) returned 1
	[0140.336] CloseHandle (hObject=0x148) returned 1
	[0140.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid")) returned 0x20
	[0140.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid")) returned 0x20
	[0140.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.337] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4870) returned 1
	[0140.337] CloseHandle (hObject=0x148) returned 1
	[0140.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x20
	[0140.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x20
	[0140.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.338] SetEvent (hEvent=0xfc) returned 1
	[0140.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.338] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26886) returned 1
	[0140.338] CloseHandle (hObject=0x148) returned 1
	[0140.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x20
	[0140.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x20
	[0140.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.339] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28948) returned 1
	[0140.339] CloseHandle (hObject=0x148) returned 1
	[0140.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x20
	[0140.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x20
	[0140.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.340] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11636) returned 1
	[0140.340] CloseHandle (hObject=0x148) returned 1
	[0140.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x20
	[0140.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x20
	[0140.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.341] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22516) returned 1
	[0140.341] CloseHandle (hObject=0x148) returned 1
	[0140.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x20
	[0140.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x20
	[0140.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.341] SetEvent (hEvent=0xfc) returned 1
	[0140.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.342] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16180) returned 1
	[0140.342] CloseHandle (hObject=0x148) returned 1
	[0140.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x20
	[0140.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x20
	[0140.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.343] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17236) returned 1
	[0140.343] CloseHandle (hObject=0x148) returned 1
	[0140.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x20
	[0140.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x20
	[0140.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.343] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16112) returned 1
	[0140.343] CloseHandle (hObject=0x148) returned 1
	[0140.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x20
	[0140.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x20
	[0140.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.345] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16676) returned 1
	[0140.345] CloseHandle (hObject=0x148) returned 1
	[0140.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x20
	[0140.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x20
	[0140.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.345] SetEvent (hEvent=0xfc) returned 1
	[0140.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.346] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26748) returned 1
	[0140.346] CloseHandle (hObject=0x148) returned 1
	[0140.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x20
	[0140.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x20
	[0140.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.346] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4924) returned 1
	[0140.346] CloseHandle (hObject=0x148) returned 1
	[0140.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x20
	[0140.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x20
	[0140.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.348] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4066) returned 1
	[0140.348] CloseHandle (hObject=0x148) returned 1
	[0140.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x20
	[0140.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x20
	[0140.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.348] SetEvent (hEvent=0xfc) returned 1
	[0140.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.348] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24320) returned 1
	[0140.349] CloseHandle (hObject=0x148) returned 1
	[0140.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x20
	[0140.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x20
	[0140.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.349] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24778) returned 1
	[0140.349] CloseHandle (hObject=0x148) returned 1
	[0140.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x20
	[0140.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x20
	[0140.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.350] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47996) returned 1
	[0140.350] CloseHandle (hObject=0x148) returned 1
	[0140.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x20
	[0140.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x20
	[0140.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.353] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40206) returned 1
	[0140.353] CloseHandle (hObject=0x148) returned 1
	[0140.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x20
	[0140.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x20
	[0140.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.353] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47786) returned 1
	[0140.353] CloseHandle (hObject=0x148) returned 1
	[0140.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x20
	[0140.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x20
	[0140.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.354] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14540) returned 1
	[0140.354] CloseHandle (hObject=0x148) returned 1
	[0140.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x20
	[0140.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x20
	[0140.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.355] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20554) returned 1
	[0140.355] CloseHandle (hObject=0x148) returned 1
	[0140.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x20
	[0140.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x20
	[0140.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.356] SetEvent (hEvent=0xfc) returned 1
	[0140.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.356] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7966) returned 1
	[0140.356] CloseHandle (hObject=0x148) returned 1
	[0140.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x20
	[0140.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x20
	[0140.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.357] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13515) returned 1
	[0140.357] CloseHandle (hObject=0x148) returned 1
	[0140.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif")) returned 0x20
	[0140.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif")) returned 0x20
	[0140.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.359] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20189) returned 1
	[0140.359] CloseHandle (hObject=0x148) returned 1
	[0140.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif")) returned 0x20
	[0140.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif")) returned 0x20
	[0140.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.360] SetEvent (hEvent=0xfc) returned 1
	[0140.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.360] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20454) returned 1
	[0140.360] CloseHandle (hObject=0x148) returned 1
	[0140.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif")) returned 0x20
	[0140.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif")) returned 0x20
	[0140.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.362] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15733) returned 1
	[0140.362] CloseHandle (hObject=0x148) returned 1
	[0140.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif")) returned 0x20
	[0140.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif")) returned 0x20
	[0140.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.362] SetEvent (hEvent=0xfc) returned 1
	[0140.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.363] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12982) returned 1
	[0140.363] CloseHandle (hObject=0x148) returned 1
	[0140.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x20
	[0140.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x20
	[0140.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.364] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9710) returned 1
	[0140.364] CloseHandle (hObject=0x148) returned 1
	[0140.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x20
	[0140.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x20
	[0140.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.365] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8772) returned 1
	[0140.365] CloseHandle (hObject=0x148) returned 1
	[0140.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x20
	[0140.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x20
	[0140.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.365] SetEvent (hEvent=0xfc) returned 1
	[0140.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.366] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14486) returned 1
	[0140.366] CloseHandle (hObject=0x148) returned 1
	[0140.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x20
	[0140.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x20
	[0140.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.366] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18304) returned 1
	[0140.367] CloseHandle (hObject=0x148) returned 1
	[0140.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x20
	[0140.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x20
	[0140.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.367] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11058) returned 1
	[0140.367] CloseHandle (hObject=0x148) returned 1
	[0140.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x20
	[0140.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x20
	[0140.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.371] SetEvent (hEvent=0xfc) returned 1
	[0140.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.372] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12520) returned 1
	[0140.372] CloseHandle (hObject=0x148) returned 1
	[0140.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x20
	[0140.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x20
	[0140.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.372] SetEvent (hEvent=0xfc) returned 1
	[0140.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.373] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9818) returned 1
	[0140.373] CloseHandle (hObject=0x148) returned 1
	[0140.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x20
	[0140.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x20
	[0140.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.374] SetEvent (hEvent=0xfc) returned 1
	[0140.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.374] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7862) returned 1
	[0140.374] CloseHandle (hObject=0x148) returned 1
	[0140.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x20
	[0140.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x20
	[0140.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.375] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1012) returned 1
	[0140.375] CloseHandle (hObject=0x148) returned 1
	[0140.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x20
	[0140.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x20
	[0140.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.376] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=880) returned 1
	[0140.377] CloseHandle (hObject=0x148) returned 1
	[0140.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x20
	[0140.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x20
	[0140.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.377] SetEvent (hEvent=0xfc) returned 1
	[0140.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.377] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10146) returned 1
	[0140.377] CloseHandle (hObject=0x148) returned 1
	[0140.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x20
	[0140.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x20
	[0140.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.378] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1464) returned 1
	[0140.378] CloseHandle (hObject=0x148) returned 1
	[0140.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x20
	[0140.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x20
	[0140.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.379] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1696) returned 1
	[0140.379] CloseHandle (hObject=0x148) returned 1
	[0140.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x20
	[0140.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x20
	[0140.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.380] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1516) returned 1
	[0140.380] CloseHandle (hObject=0x148) returned 1
	[0140.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x20
	[0140.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x20
	[0140.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.380] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3986) returned 1
	[0140.380] CloseHandle (hObject=0x148) returned 1
	[0140.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x20
	[0140.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x20
	[0140.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.382] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8070) returned 1
	[0140.382] CloseHandle (hObject=0x148) returned 1
	[0140.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x20
	[0140.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x20
	[0140.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.382] SetEvent (hEvent=0xfc) returned 1
	[0140.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.383] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9304) returned 1
	[0140.383] CloseHandle (hObject=0x148) returned 1
	[0140.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x20
	[0140.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x20
	[0140.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.383] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4024) returned 1
	[0140.383] CloseHandle (hObject=0x148) returned 1
	[0140.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x20
	[0140.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x20
	[0140.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.384] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14444) returned 1
	[0140.384] CloseHandle (hObject=0x148) returned 1
	[0140.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x20
	[0140.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x20
	[0140.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.385] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1536) returned 1
	[0140.385] CloseHandle (hObject=0x148) returned 1
	[0140.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x20
	[0140.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x20
	[0140.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.386] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4708) returned 1
	[0140.386] CloseHandle (hObject=0x148) returned 1
	[0140.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x20
	[0140.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x20
	[0140.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.387] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1736) returned 1
	[0140.387] CloseHandle (hObject=0x148) returned 1
	[0140.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x20
	[0140.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x20
	[0140.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.387] SetEvent (hEvent=0xfc) returned 1
	[0140.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.388] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12482) returned 1
	[0140.388] CloseHandle (hObject=0x148) returned 1
	[0140.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x20
	[0140.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x20
	[0140.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.389] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2556) returned 1
	[0140.389] CloseHandle (hObject=0x148) returned 1
	[0140.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x20
	[0140.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x20
	[0140.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.390] SetEvent (hEvent=0xfc) returned 1
	[0140.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.390] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5752) returned 1
	[0140.390] CloseHandle (hObject=0x148) returned 1
	[0140.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x20
	[0140.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x20
	[0140.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.391] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2644) returned 1
	[0140.391] CloseHandle (hObject=0x148) returned 1
	[0140.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x20
	[0140.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x20
	[0140.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.392] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5272) returned 1
	[0140.392] CloseHandle (hObject=0x148) returned 1
	[0140.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x20
	[0140.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x20
	[0140.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.393] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3016) returned 1
	[0140.393] CloseHandle (hObject=0x148) returned 1
	[0140.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x20
	[0140.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x20
	[0140.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.393] SetEvent (hEvent=0xfc) returned 1
	[0140.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.394] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3780) returned 1
	[0140.394] CloseHandle (hObject=0x148) returned 1
	[0140.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x20
	[0140.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x20
	[0140.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.394] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4164) returned 1
	[0140.395] CloseHandle (hObject=0x148) returned 1
	[0140.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x20
	[0140.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x20
	[0140.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.395] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=812) returned 1
	[0140.395] CloseHandle (hObject=0x148) returned 1
	[0140.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x20
	[0140.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x20
	[0140.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.397] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13102) returned 1
	[0140.397] CloseHandle (hObject=0x148) returned 1
	[0140.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x20
	[0140.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x20
	[0140.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.397] SetEvent (hEvent=0xfc) returned 1
	[0140.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.397] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27050) returned 1
	[0140.397] CloseHandle (hObject=0x148) returned 1
	[0140.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x20
	[0140.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x20
	[0140.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.398] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6996) returned 1
	[0140.398] CloseHandle (hObject=0x148) returned 1
	[0140.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x20
	[0140.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x20
	[0140.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.399] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9590) returned 1
	[0140.399] CloseHandle (hObject=0x148) returned 1
	[0140.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x20
	[0140.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x20
	[0140.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.400] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27552) returned 1
	[0140.400] CloseHandle (hObject=0x148) returned 1
	[0140.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x20
	[0140.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x20
	[0140.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.400] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11500) returned 1
	[0140.400] CloseHandle (hObject=0x148) returned 1
	[0140.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x20
	[0140.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x20
	[0140.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.402] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4408) returned 1
	[0140.402] CloseHandle (hObject=0x148) returned 1
	[0140.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x20
	[0140.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x20
	[0140.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.402] SetEvent (hEvent=0xfc) returned 1
	[0140.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.403] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6256) returned 1
	[0140.403] CloseHandle (hObject=0x148) returned 1
	[0140.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x20
	[0140.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x20
	[0140.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.403] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19476) returned 1
	[0140.403] CloseHandle (hObject=0x148) returned 1
	[0140.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x20
	[0140.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x20
	[0140.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.404] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3768) returned 1
	[0140.404] CloseHandle (hObject=0x148) returned 1
	[0140.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x20
	[0140.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x20
	[0140.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.405] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3350) returned 1
	[0140.405] CloseHandle (hObject=0x148) returned 1
	[0140.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf")) returned 0x20
	[0140.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf")) returned 0x20
	[0140.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.406] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29004) returned 1
	[0140.406] CloseHandle (hObject=0x148) returned 1
	[0140.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf")) returned 0x20
	[0140.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf")) returned 0x20
	[0140.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.503] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1330) returned 1
	[0140.503] CloseHandle (hObject=0x148) returned 1
	[0140.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x20
	[0140.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x20
	[0140.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.504] SetEvent (hEvent=0xfc) returned 1
	[0140.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.505] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1444) returned 1
	[0140.505] CloseHandle (hObject=0x148) returned 1
	[0140.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x20
	[0140.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x20
	[0140.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.505] SetEvent (hEvent=0xfc) returned 1
	[0140.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.506] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7974) returned 1
	[0140.506] CloseHandle (hObject=0x148) returned 1
	[0140.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x20
	[0140.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x20
	[0140.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.507] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2378) returned 1
	[0140.507] CloseHandle (hObject=0x148) returned 1
	[0140.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x20
	[0140.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x20
	[0140.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.507] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1044) returned 1
	[0140.507] CloseHandle (hObject=0x148) returned 1
	[0140.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x20
	[0140.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x20
	[0140.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.508] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2166) returned 1
	[0140.508] CloseHandle (hObject=0x148) returned 1
	[0140.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x20
	[0140.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x20
	[0140.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.509] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1712) returned 1
	[0140.509] CloseHandle (hObject=0x148) returned 1
	[0140.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x20
	[0140.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x20
	[0140.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.510] SetEvent (hEvent=0xfc) returned 1
	[0140.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.510] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8366) returned 1
	[0140.510] CloseHandle (hObject=0x148) returned 1
	[0140.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x20
	[0140.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x20
	[0140.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.511] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4976) returned 1
	[0140.511] CloseHandle (hObject=0x148) returned 1
	[0140.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x20
	[0140.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x20
	[0140.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.512] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12788) returned 1
	[0140.512] CloseHandle (hObject=0x148) returned 1
	[0140.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x20
	[0140.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x20
	[0140.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.513] SetEvent (hEvent=0xfc) returned 1
	[0140.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.513] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3104) returned 1
	[0140.513] CloseHandle (hObject=0x148) returned 1
	[0140.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x20
	[0140.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x20
	[0140.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.514] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1588) returned 1
	[0140.514] CloseHandle (hObject=0x148) returned 1
	[0140.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x20
	[0140.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x20
	[0140.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.515] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1212) returned 1
	[0140.515] CloseHandle (hObject=0x148) returned 1
	[0140.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x20
	[0140.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x20
	[0140.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.516] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2052) returned 1
	[0140.516] CloseHandle (hObject=0x148) returned 1
	[0140.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x20
	[0140.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x20
	[0140.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.516] SetEvent (hEvent=0xfc) returned 1
	[0140.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.517] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5580) returned 1
	[0140.517] CloseHandle (hObject=0x148) returned 1
	[0140.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x20
	[0140.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x20
	[0140.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.521] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3524) returned 1
	[0140.521] CloseHandle (hObject=0x148) returned 1
	[0140.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x20
	[0140.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x20
	[0140.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.521] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2488) returned 1
	[0140.521] CloseHandle (hObject=0x148) returned 1
	[0140.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x20
	[0140.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x20
	[0140.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.522] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1676) returned 1
	[0140.522] CloseHandle (hObject=0x148) returned 1
	[0140.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x20
	[0140.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x20
	[0140.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.523] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3896) returned 1
	[0140.524] CloseHandle (hObject=0x148) returned 1
	[0140.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x20
	[0140.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x20
	[0140.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.524] SetEvent (hEvent=0xfc) returned 1
	[0140.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.524] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3796) returned 1
	[0140.524] CloseHandle (hObject=0x148) returned 1
	[0140.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x20
	[0140.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x20
	[0140.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.525] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2436) returned 1
	[0140.525] CloseHandle (hObject=0x148) returned 1
	[0140.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x20
	[0140.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x20
	[0140.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.526] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2732) returned 1
	[0140.526] CloseHandle (hObject=0x148) returned 1
	[0140.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x20
	[0140.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x20
	[0140.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.527] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7176) returned 1
	[0140.527] CloseHandle (hObject=0x148) returned 1
	[0140.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x20
	[0140.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x20
	[0140.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.528] SetEvent (hEvent=0xfc) returned 1
	[0140.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.528] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3494) returned 1
	[0140.528] CloseHandle (hObject=0x148) returned 1
	[0140.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x20
	[0140.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x20
	[0140.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.529] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14996) returned 1
	[0140.529] CloseHandle (hObject=0x148) returned 1
	[0140.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x20
	[0140.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x20
	[0140.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.530] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1874) returned 1
	[0140.530] CloseHandle (hObject=0x148) returned 1
	[0140.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x20
	[0140.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x20
	[0140.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.530] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3948) returned 1
	[0140.531] CloseHandle (hObject=0x148) returned 1
	[0140.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x20
	[0140.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x20
	[0140.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.531] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10538) returned 1
	[0140.531] CloseHandle (hObject=0x148) returned 1
	[0140.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x20
	[0140.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x20
	[0140.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.532] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4236) returned 1
	[0140.532] CloseHandle (hObject=0x148) returned 1
	[0140.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x20
	[0140.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x20
	[0140.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.533] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9322) returned 1
	[0140.533] CloseHandle (hObject=0x148) returned 1
	[0140.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid")) returned 0x20
	[0140.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid")) returned 0x20
	[0140.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.534] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3564) returned 1
	[0140.534] CloseHandle (hObject=0x148) returned 1
	[0140.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf")) returned 0x20
	[0140.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf")) returned 0x20
	[0140.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.535] SetEvent (hEvent=0xfc) returned 1
	[0140.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.536] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2422) returned 1
	[0140.536] CloseHandle (hObject=0x148) returned 1
	[0140.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf")) returned 0x20
	[0140.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf")) returned 0x20
	[0140.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.536] SetEvent (hEvent=0xfc) returned 1
	[0140.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.537] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2262) returned 1
	[0140.537] CloseHandle (hObject=0x148) returned 1
	[0140.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf")) returned 0x20
	[0140.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf")) returned 0x20
	[0140.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.538] SetEvent (hEvent=0xfc) returned 1
	[0140.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.539] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2262) returned 1
	[0140.539] CloseHandle (hObject=0x148) returned 1
	[0140.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf")) returned 0x20
	[0140.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf")) returned 0x20
	[0140.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.539] SetEvent (hEvent=0xfc) returned 1
	[0140.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.540] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6970) returned 1
	[0140.540] CloseHandle (hObject=0x148) returned 1
	[0140.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x20
	[0140.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x20
	[0140.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.541] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5270) returned 1
	[0140.541] CloseHandle (hObject=0x148) returned 1
	[0140.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf")) returned 0x20
	[0140.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf")) returned 0x20
	[0140.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.541] SetEvent (hEvent=0xfc) returned 1
	[0140.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.542] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49546) returned 1
	[0140.542] CloseHandle (hObject=0x148) returned 1
	[0140.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf")) returned 0x20
	[0140.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf")) returned 0x20
	[0140.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.543] SetEvent (hEvent=0xfc) returned 1
	[0140.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.720] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2966) returned 1
	[0140.720] CloseHandle (hObject=0x148) returned 1
	[0140.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf")) returned 0x20
	[0140.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf")) returned 0x20
	[0140.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.721] SetEvent (hEvent=0xfc) returned 1
	[0140.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.722] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10326) returned 1
	[0140.722] CloseHandle (hObject=0x148) returned 1
	[0140.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf")) returned 0x20
	[0140.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf")) returned 0x20
	[0140.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.722] SetEvent (hEvent=0xfc) returned 1
	[0140.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.723] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31122) returned 1
	[0140.723] CloseHandle (hObject=0x148) returned 1
	[0140.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x20
	[0140.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x20
	[0140.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.724] SetEvent (hEvent=0xfc) returned 1
	[0140.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.725] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8256) returned 1
	[0140.725] CloseHandle (hObject=0x148) returned 1
	[0140.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x20
	[0140.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x20
	[0140.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.725] SetEvent (hEvent=0xfc) returned 1
	[0140.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.726] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29628) returned 1
	[0140.726] CloseHandle (hObject=0x148) returned 1
	[0140.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x20
	[0140.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x20
	[0140.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.727] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2690) returned 1
	[0140.727] CloseHandle (hObject=0x148) returned 1
	[0140.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x20
	[0140.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x20
	[0140.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.728] SetEvent (hEvent=0xfc) returned 1
	[0140.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.728] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2832) returned 1
	[0140.728] CloseHandle (hObject=0x148) returned 1
	[0140.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x20
	[0140.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x20
	[0140.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.730] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37974) returned 1
	[0140.730] CloseHandle (hObject=0x148) returned 1
	[0140.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x20
	[0140.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x20
	[0140.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.731] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40030) returned 1
	[0140.731] CloseHandle (hObject=0x148) returned 1
	[0140.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x20
	[0140.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x20
	[0140.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.732] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=792) returned 1
	[0140.732] CloseHandle (hObject=0x148) returned 1
	[0140.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x20
	[0140.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x20
	[0140.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.732] SetEvent (hEvent=0xfc) returned 1
	[0140.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.733] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17584) returned 1
	[0140.733] CloseHandle (hObject=0x148) returned 1
	[0140.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x20
	[0140.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x20
	[0140.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.734] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7828) returned 1
	[0140.734] CloseHandle (hObject=0x148) returned 1
	[0140.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x20
	[0140.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x20
	[0140.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.735] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42992) returned 1
	[0140.735] CloseHandle (hObject=0x148) returned 1
	[0140.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x20
	[0140.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x20
	[0140.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.736] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42908) returned 1
	[0140.736] CloseHandle (hObject=0x148) returned 1
	[0140.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x20
	[0140.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x20
	[0140.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.737] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=712) returned 1
	[0140.737] CloseHandle (hObject=0x148) returned 1
	[0140.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x20
	[0140.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x20
	[0140.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.737] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1932) returned 1
	[0140.737] CloseHandle (hObject=0x148) returned 1
	[0140.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x20
	[0140.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x20
	[0140.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.739] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2952) returned 1
	[0140.739] CloseHandle (hObject=0x148) returned 1
	[0140.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x20
	[0140.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x20
	[0140.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.739] SetEvent (hEvent=0xfc) returned 1
	[0140.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.740] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9992) returned 1
	[0140.740] CloseHandle (hObject=0x148) returned 1
	[0140.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x20
	[0140.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x20
	[0140.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.740] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20784) returned 1
	[0140.741] CloseHandle (hObject=0x148) returned 1
	[0140.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x20
	[0140.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x20
	[0140.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.741] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24588) returned 1
	[0140.741] CloseHandle (hObject=0x148) returned 1
	[0140.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x20
	[0140.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x20
	[0140.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.742] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2226) returned 1
	[0140.742] CloseHandle (hObject=0x148) returned 1
	[0140.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x20
	[0140.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x20
	[0140.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.745] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14820) returned 1
	[0140.745] CloseHandle (hObject=0x148) returned 1
	[0140.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x20
	[0140.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x20
	[0140.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.745] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3692) returned 1
	[0140.745] CloseHandle (hObject=0x148) returned 1
	[0140.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x20
	[0140.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x20
	[0140.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.747] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3632) returned 1
	[0140.747] CloseHandle (hObject=0x148) returned 1
	[0140.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x20
	[0140.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x20
	[0140.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.747] SetEvent (hEvent=0xfc) returned 1
	[0140.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.748] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3616) returned 1
	[0140.748] CloseHandle (hObject=0x148) returned 1
	[0140.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x20
	[0140.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x20
	[0140.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.749] SetEvent (hEvent=0xfc) returned 1
	[0140.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.749] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2140) returned 1
	[0140.749] CloseHandle (hObject=0x148) returned 1
	[0140.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x20
	[0140.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x20
	[0140.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.750] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2780) returned 1
	[0140.750] CloseHandle (hObject=0x148) returned 1
	[0140.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x20
	[0140.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x20
	[0140.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.751] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2796) returned 1
	[0140.751] CloseHandle (hObject=0x148) returned 1
	[0140.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x20
	[0140.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x20
	[0140.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.752] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2960) returned 1
	[0140.752] CloseHandle (hObject=0x148) returned 1
	[0140.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x20
	[0140.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x20
	[0140.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.752] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2960) returned 1
	[0140.752] CloseHandle (hObject=0x148) returned 1
	[0140.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x20
	[0140.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x20
	[0140.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.754] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3588) returned 1
	[0140.754] CloseHandle (hObject=0x148) returned 1
	[0140.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x20
	[0140.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x20
	[0140.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.757] SetEvent (hEvent=0xfc) returned 1
	[0140.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.757] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2228) returned 1
	[0140.757] CloseHandle (hObject=0x148) returned 1
	[0140.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x20
	[0140.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x20
	[0140.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.758] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2300) returned 1
	[0140.758] CloseHandle (hObject=0x148) returned 1
	[0140.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x20
	[0140.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x20
	[0140.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.758] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2300) returned 1
	[0140.758] CloseHandle (hObject=0x148) returned 1
	[0140.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x20
	[0140.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x20
	[0140.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.422] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2080) returned 1
	[0141.422] CloseHandle (hObject=0x148) returned 1
	[0141.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x20
	[0141.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x20
	[0141.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.423] SetEvent (hEvent=0xfc) returned 1
	[0141.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.423] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2004) returned 1
	[0141.423] CloseHandle (hObject=0x148) returned 1
	[0141.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x20
	[0141.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x20
	[0141.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.425] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2020) returned 1
	[0141.425] CloseHandle (hObject=0x148) returned 1
	[0141.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x20
	[0141.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x20
	[0141.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.425] SetEvent (hEvent=0xfc) returned 1
	[0141.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.425] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2404) returned 1
	[0141.425] CloseHandle (hObject=0x148) returned 1
	[0141.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x20
	[0141.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x20
	[0141.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.426] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2052) returned 1
	[0141.426] CloseHandle (hObject=0x148) returned 1
	[0141.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x20
	[0141.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x20
	[0141.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.427] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2232) returned 1
	[0141.427] CloseHandle (hObject=0x148) returned 1
	[0141.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x20
	[0141.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x20
	[0141.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.428] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1804) returned 1
	[0141.428] CloseHandle (hObject=0x148) returned 1
	[0141.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x20
	[0141.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x20
	[0141.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.429] SetEvent (hEvent=0xfc) returned 1
	[0141.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.429] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1888) returned 1
	[0141.429] CloseHandle (hObject=0x148) returned 1
	[0141.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x20
	[0141.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x20
	[0141.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.430] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3796) returned 1
	[0141.430] CloseHandle (hObject=0x148) returned 1
	[0141.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x20
	[0141.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x20
	[0141.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.431] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2024) returned 1
	[0141.431] CloseHandle (hObject=0x148) returned 1
	[0141.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x20
	[0141.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x20
	[0141.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.431] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2084) returned 1
	[0141.432] CloseHandle (hObject=0x148) returned 1
	[0141.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x20
	[0141.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x20
	[0141.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.433] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1448) returned 1
	[0141.433] CloseHandle (hObject=0x148) returned 1
	[0141.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x20
	[0141.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x20
	[0141.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.433] SetEvent (hEvent=0xfc) returned 1
	[0141.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.434] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2996) returned 1
	[0141.434] CloseHandle (hObject=0x148) returned 1
	[0141.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x20
	[0141.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x20
	[0141.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.434] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2296) returned 1
	[0141.434] CloseHandle (hObject=0x148) returned 1
	[0141.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x20
	[0141.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x20
	[0141.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.435] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8564) returned 1
	[0141.435] CloseHandle (hObject=0x148) returned 1
	[0141.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x20
	[0141.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x20
	[0141.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.436] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1768) returned 1
	[0141.436] CloseHandle (hObject=0x148) returned 1
	[0141.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x20
	[0141.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x20
	[0141.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.437] SetEvent (hEvent=0xfc) returned 1
	[0141.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.438] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=900) returned 1
	[0141.438] CloseHandle (hObject=0x148) returned 1
	[0141.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x20
	[0141.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x20
	[0141.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.438] SetEvent (hEvent=0xfc) returned 1
	[0141.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.439] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2524) returned 1
	[0141.439] CloseHandle (hObject=0x148) returned 1
	[0141.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x20
	[0141.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x20
	[0141.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.439] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2324) returned 1
	[0141.439] CloseHandle (hObject=0x148) returned 1
	[0141.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x20
	[0141.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x20
	[0141.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.440] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19068) returned 1
	[0141.440] CloseHandle (hObject=0x148) returned 1
	[0141.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x20
	[0141.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x20
	[0141.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.441] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=580) returned 1
	[0141.441] CloseHandle (hObject=0x148) returned 1
	[0141.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x20
	[0141.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x20
	[0141.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.442] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=296) returned 1
	[0141.442] CloseHandle (hObject=0x148) returned 1
	[0141.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x20
	[0141.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x20
	[0141.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.442] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=552) returned 1
	[0141.442] CloseHandle (hObject=0x148) returned 1
	[0141.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x20
	[0141.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x20
	[0141.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.443] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4148) returned 1
	[0141.443] CloseHandle (hObject=0x148) returned 1
	[0141.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x20
	[0141.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x20
	[0141.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.444] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2300) returned 1
	[0141.444] CloseHandle (hObject=0x148) returned 1
	[0141.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x20
	[0141.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x20
	[0141.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.445] SetEvent (hEvent=0xfc) returned 1
	[0141.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.445] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3252) returned 1
	[0141.445] CloseHandle (hObject=0x148) returned 1
	[0141.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x20
	[0141.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x20
	[0141.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.446] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6165) returned 1
	[0141.446] CloseHandle (hObject=0x148) returned 1
	[0141.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid")) returned 0x20
	[0141.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid")) returned 0x20
	[0141.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.447] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1382) returned 1
	[0141.447] CloseHandle (hObject=0x148) returned 1
	[0141.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x20
	[0141.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x20
	[0141.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.447] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13042) returned 1
	[0141.447] CloseHandle (hObject=0x148) returned 1
	[0141.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x20
	[0141.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x20
	[0141.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.448] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2700) returned 1
	[0141.448] CloseHandle (hObject=0x148) returned 1
	[0141.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x20
	[0141.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x20
	[0141.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.449] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6958) returned 1
	[0141.449] CloseHandle (hObject=0x148) returned 1
	[0141.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x20
	[0141.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x20
	[0141.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.450] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13936) returned 1
	[0141.450] CloseHandle (hObject=0x148) returned 1
	[0141.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf")) returned 0x20
	[0141.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf")) returned 0x20
	[0141.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.451] SetEvent (hEvent=0xfc) returned 1
	[0141.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.452] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6938) returned 1
	[0141.452] CloseHandle (hObject=0x148) returned 1
	[0141.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf")) returned 0x20
	[0141.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf")) returned 0x20
	[0141.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.452] SetEvent (hEvent=0xfc) returned 1
	[0141.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.453] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12356) returned 1
	[0141.453] CloseHandle (hObject=0x148) returned 1
	[0141.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf")) returned 0x20
	[0141.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf")) returned 0x20
	[0141.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.454] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6780) returned 1
	[0141.454] CloseHandle (hObject=0x148) returned 1
	[0141.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf")) returned 0x20
	[0141.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf")) returned 0x20
	[0141.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.455] SetEvent (hEvent=0xfc) returned 1
	[0141.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.455] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2280) returned 1
	[0141.455] CloseHandle (hObject=0x148) returned 1
	[0141.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf")) returned 0x20
	[0141.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf")) returned 0x20
	[0141.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.456] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=736) returned 1
	[0141.456] CloseHandle (hObject=0x148) returned 1
	[0141.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf")) returned 0x20
	[0141.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf")) returned 0x20
	[0141.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.456] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17308) returned 1
	[0141.456] CloseHandle (hObject=0x148) returned 1
	[0141.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf")) returned 0x20
	[0141.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf")) returned 0x20
	[0141.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.547] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7944) returned 1
	[0141.547] CloseHandle (hObject=0x148) returned 1
	[0141.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf")) returned 0x20
	[0141.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf")) returned 0x20
	[0141.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.548] SetEvent (hEvent=0xfc) returned 1
	[0141.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.548] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10562) returned 1
	[0141.548] CloseHandle (hObject=0x148) returned 1
	[0141.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid")) returned 0x20
	[0141.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid")) returned 0x20
	[0141.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.549] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4846) returned 1
	[0141.549] CloseHandle (hObject=0x148) returned 1
	[0141.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid")) returned 0x20
	[0141.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid")) returned 0x20
	[0141.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.550] SetEvent (hEvent=0xfc) returned 1
	[0141.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.550] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17850) returned 1
	[0141.550] CloseHandle (hObject=0x148) returned 1
	[0141.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x20
	[0141.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x20
	[0141.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.551] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11994) returned 1
	[0141.551] CloseHandle (hObject=0x148) returned 1
	[0141.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x20
	[0141.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x20
	[0141.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.552] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30240) returned 1
	[0141.552] CloseHandle (hObject=0x148) returned 1
	[0141.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x20
	[0141.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x20
	[0141.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.553] SetEvent (hEvent=0xfc) returned 1
	[0141.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.553] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29212) returned 1
	[0141.553] CloseHandle (hObject=0x148) returned 1
	[0141.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x20
	[0141.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x20
	[0141.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.554] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14194) returned 1
	[0141.554] CloseHandle (hObject=0x148) returned 1
	[0141.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x20
	[0141.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x20
	[0141.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.555] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37390) returned 1
	[0141.555] CloseHandle (hObject=0x148) returned 1
	[0141.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x20
	[0141.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x20
	[0141.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.555] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15856) returned 1
	[0141.555] CloseHandle (hObject=0x148) returned 1
	[0141.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x20
	[0141.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x20
	[0141.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.557] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18194) returned 1
	[0141.557] CloseHandle (hObject=0x148) returned 1
	[0141.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x20
	[0141.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x20
	[0141.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.559] SetEvent (hEvent=0xfc) returned 1
	[0141.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.560] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46814) returned 1
	[0141.560] CloseHandle (hObject=0x148) returned 1
	[0141.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x20
	[0141.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x20
	[0141.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.561] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6068) returned 1
	[0141.561] CloseHandle (hObject=0x148) returned 1
	[0141.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x20
	[0141.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x20
	[0141.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.562] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4074) returned 1
	[0141.562] CloseHandle (hObject=0x148) returned 1
	[0141.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x20
	[0141.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x20
	[0141.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.563] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8552) returned 1
	[0141.563] CloseHandle (hObject=0x148) returned 1
	[0141.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x20
	[0141.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x20
	[0141.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.564] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8424) returned 1
	[0141.564] CloseHandle (hObject=0x148) returned 1
	[0141.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x20
	[0141.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x20
	[0141.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.564] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10816) returned 1
	[0141.564] CloseHandle (hObject=0x148) returned 1
	[0141.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x20
	[0141.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x20
	[0141.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.566] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7878) returned 1
	[0141.566] CloseHandle (hObject=0x148) returned 1
	[0141.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x20
	[0141.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x20
	[0141.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.567] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11002) returned 1
	[0141.567] CloseHandle (hObject=0x148) returned 1
	[0141.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x20
	[0141.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x20
	[0141.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.567] SetEvent (hEvent=0xfc) returned 1
	[0141.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.568] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16396) returned 1
	[0141.568] CloseHandle (hObject=0x148) returned 1
	[0141.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x20
	[0141.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x20
	[0141.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.569] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4796) returned 1
	[0141.569] CloseHandle (hObject=0x148) returned 1
	[0141.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x20
	[0141.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x20
	[0141.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.570] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2108) returned 1
	[0141.570] CloseHandle (hObject=0x148) returned 1
	[0141.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x20
	[0141.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x20
	[0141.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.571] SetEvent (hEvent=0xfc) returned 1
	[0141.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.571] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5098) returned 1
	[0141.571] CloseHandle (hObject=0x148) returned 1
	[0141.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x20
	[0141.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x20
	[0141.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.572] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8926) returned 1
	[0141.572] CloseHandle (hObject=0x148) returned 1
	[0141.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x20
	[0141.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x20
	[0141.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.573] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17406) returned 1
	[0141.573] CloseHandle (hObject=0x148) returned 1
	[0141.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x20
	[0141.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x20
	[0141.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.574] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1472) returned 1
	[0141.574] CloseHandle (hObject=0x148) returned 1
	[0141.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x20
	[0141.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x20
	[0141.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.575] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5260) returned 1
	[0141.575] CloseHandle (hObject=0x148) returned 1
	[0141.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x20
	[0141.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x20
	[0141.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.575] SetEvent (hEvent=0xfc) returned 1
	[0141.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.576] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=896) returned 1
	[0141.576] CloseHandle (hObject=0x148) returned 1
	[0141.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x20
	[0141.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x20
	[0141.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.576] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=752) returned 1
	[0141.577] CloseHandle (hObject=0x148) returned 1
	[0141.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x20
	[0141.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x20
	[0141.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.577] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11152) returned 1
	[0141.578] CloseHandle (hObject=0x148) returned 1
	[0141.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf")) returned 0x20
	[0141.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf")) returned 0x20
	[0141.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.579] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9010) returned 1
	[0141.579] CloseHandle (hObject=0x148) returned 1
	[0141.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf")) returned 0x20
	[0141.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf")) returned 0x20
	[0141.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.579] SetEvent (hEvent=0xfc) returned 1
	[0141.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.580] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13968) returned 1
	[0141.580] CloseHandle (hObject=0x148) returned 1
	[0141.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf")) returned 0x20
	[0141.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf")) returned 0x20
	[0141.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.580] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42704) returned 1
	[0141.580] CloseHandle (hObject=0x148) returned 1
	[0141.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf")) returned 0x20
	[0141.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf")) returned 0x20
	[0141.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.582] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15164) returned 1
	[0141.582] CloseHandle (hObject=0x148) returned 1
	[0141.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf")) returned 0x20
	[0141.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf")) returned 0x20
	[0141.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.582] SetEvent (hEvent=0xfc) returned 1
	[0141.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.583] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4634) returned 1
	[0141.583] CloseHandle (hObject=0x148) returned 1
	[0141.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf")) returned 0x20
	[0141.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf")) returned 0x20
	[0141.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.583] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2412) returned 1
	[0141.583] CloseHandle (hObject=0x148) returned 1
	[0141.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf")) returned 0x20
	[0141.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf")) returned 0x20
	[0141.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.584] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4984) returned 1
	[0141.584] CloseHandle (hObject=0x148) returned 1
	[0141.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf")) returned 0x20
	[0141.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf")) returned 0x20
	[0141.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.766] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3964) returned 1
	[0141.766] CloseHandle (hObject=0x148) returned 1
	[0141.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf")) returned 0x20
	[0141.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf")) returned 0x20
	[0141.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.766] SetEvent (hEvent=0xfc) returned 1
	[0141.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.767] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2332) returned 1
	[0141.767] CloseHandle (hObject=0x148) returned 1
	[0141.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf")) returned 0x20
	[0141.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf")) returned 0x20
	[0141.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.767] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10316) returned 1
	[0141.767] CloseHandle (hObject=0x148) returned 1
	[0141.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf")) returned 0x20
	[0141.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf")) returned 0x20
	[0141.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.768] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30414) returned 1
	[0141.768] CloseHandle (hObject=0x148) returned 1
	[0141.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf")) returned 0x20
	[0141.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf")) returned 0x20
	[0141.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.770] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17924) returned 1
	[0141.770] CloseHandle (hObject=0x148) returned 1
	[0141.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf")) returned 0x20
	[0141.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf")) returned 0x20
	[0141.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.770] SetEvent (hEvent=0xfc) returned 1
	[0141.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.771] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31180) returned 1
	[0141.771] CloseHandle (hObject=0x148) returned 1
	[0141.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf")) returned 0x20
	[0141.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf")) returned 0x20
	[0141.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.772] SetEvent (hEvent=0xfc) returned 1
	[0141.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.772] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12958) returned 1
	[0141.772] CloseHandle (hObject=0x148) returned 1
	[0141.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf")) returned 0x20
	[0141.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf")) returned 0x20
	[0141.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.773] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2488) returned 1
	[0141.773] CloseHandle (hObject=0x148) returned 1
	[0141.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf")) returned 0x20
	[0141.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf")) returned 0x20
	[0141.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.774] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2188) returned 1
	[0141.774] CloseHandle (hObject=0x148) returned 1
	[0141.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf")) returned 0x20
	[0141.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf")) returned 0x20
	[0141.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.774] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4396) returned 1
	[0141.775] CloseHandle (hObject=0x148) returned 1
	[0141.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf")) returned 0x20
	[0141.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf")) returned 0x20
	[0141.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.775] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3696) returned 1
	[0141.775] CloseHandle (hObject=0x148) returned 1
	[0141.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf")) returned 0x20
	[0141.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf")) returned 0x20
	[0141.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.776] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1564) returned 1
	[0141.776] CloseHandle (hObject=0x148) returned 1
	[0141.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf")) returned 0x20
	[0141.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf")) returned 0x20
	[0141.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.778] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4660) returned 1
	[0141.778] CloseHandle (hObject=0x148) returned 1
	[0141.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf")) returned 0x20
	[0141.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf")) returned 0x20
	[0141.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.778] SetEvent (hEvent=0xfc) returned 1
	[0141.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.779] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3988) returned 1
	[0141.779] CloseHandle (hObject=0x148) returned 1
	[0141.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf")) returned 0x20
	[0141.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf")) returned 0x20
	[0141.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.780] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2636) returned 1
	[0141.780] CloseHandle (hObject=0x148) returned 1
	[0141.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf")) returned 0x20
	[0141.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf")) returned 0x20
	[0141.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.781] SetEvent (hEvent=0xfc) returned 1
	[0141.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.781] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5392) returned 1
	[0141.781] CloseHandle (hObject=0x148) returned 1
	[0141.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf")) returned 0x20
	[0141.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf")) returned 0x20
	[0141.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.782] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1648) returned 1
	[0141.782] CloseHandle (hObject=0x148) returned 1
	[0141.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf")) returned 0x20
	[0141.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf")) returned 0x20
	[0141.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.783] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3128) returned 1
	[0141.783] CloseHandle (hObject=0x148) returned 1
	[0141.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf")) returned 0x20
	[0141.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf")) returned 0x20
	[0141.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.784] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12981) returned 1
	[0141.784] CloseHandle (hObject=0x148) returned 1
	[0141.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid")) returned 0x20
	[0141.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid")) returned 0x20
	[0141.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.784] SetEvent (hEvent=0xfc) returned 1
	[0141.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.785] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9318) returned 1
	[0141.785] CloseHandle (hObject=0x148) returned 1
	[0141.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid")) returned 0x20
	[0141.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid")) returned 0x20
	[0141.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.786] SetEvent (hEvent=0xfc) returned 1
	[0141.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.787] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2070) returned 1
	[0141.787] CloseHandle (hObject=0x148) returned 1
	[0141.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf")) returned 0x20
	[0141.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf")) returned 0x20
	[0141.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.787] SetEvent (hEvent=0xfc) returned 1
	[0141.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.788] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7567) returned 1
	[0141.788] CloseHandle (hObject=0x148) returned 1
	[0141.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid")) returned 0x20
	[0141.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid")) returned 0x20
	[0141.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.789] SetEvent (hEvent=0xfc) returned 1
	[0141.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.789] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6331) returned 1
	[0141.789] CloseHandle (hObject=0x148) returned 1
	[0141.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid")) returned 0x20
	[0141.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid")) returned 0x20
	[0141.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.791] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3764) returned 1
	[0141.791] CloseHandle (hObject=0x148) returned 1
	[0141.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf")) returned 0x20
	[0141.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf")) returned 0x20
	[0141.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.791] SetEvent (hEvent=0xfc) returned 1
	[0141.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.792] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2472) returned 1
	[0141.792] CloseHandle (hObject=0x148) returned 1
	[0141.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf")) returned 0x20
	[0141.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf")) returned 0x20
	[0141.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.793] SetEvent (hEvent=0xfc) returned 1
	[0141.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.794] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2232) returned 1
	[0141.794] CloseHandle (hObject=0x148) returned 1
	[0141.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf")) returned 0x20
	[0141.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf")) returned 0x20
	[0141.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.796] SetEvent (hEvent=0xfc) returned 1
	[0141.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.796] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1026) returned 1
	[0141.796] CloseHandle (hObject=0x148) returned 1
	[0141.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf")) returned 0x20
	[0141.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf")) returned 0x20
	[0141.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.797] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3286) returned 1
	[0141.797] CloseHandle (hObject=0x148) returned 1
	[0141.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf")) returned 0x20
	[0141.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf")) returned 0x20
	[0141.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.797] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1960) returned 1
	[0141.797] CloseHandle (hObject=0x148) returned 1
	[0141.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf")) returned 0x20
	[0141.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf")) returned 0x20
	[0141.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.799] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3662) returned 1
	[0141.799] CloseHandle (hObject=0x148) returned 1
	[0141.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf")) returned 0x20
	[0141.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf")) returned 0x20
	[0141.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.799] SetEvent (hEvent=0xfc) returned 1
	[0141.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.801] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3016) returned 1
	[0141.801] CloseHandle (hObject=0x148) returned 1
	[0141.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf")) returned 0x20
	[0141.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf")) returned 0x20
	[0141.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.801] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1528) returned 1
	[0141.801] CloseHandle (hObject=0x148) returned 1
	[0141.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf")) returned 0x20
	[0141.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf")) returned 0x20
	[0141.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.803] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3298) returned 1
	[0141.803] CloseHandle (hObject=0x148) returned 1
	[0141.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf")) returned 0x20
	[0141.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf")) returned 0x20
	[0141.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.803] SetEvent (hEvent=0xfc) returned 1
	[0141.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.803] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=818) returned 1
	[0141.804] CloseHandle (hObject=0x148) returned 1
	[0141.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf")) returned 0x20
	[0141.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf")) returned 0x20
	[0141.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.804] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14688) returned 1
	[0141.804] CloseHandle (hObject=0x148) returned 1
	[0141.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf")) returned 0x20
	[0141.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf")) returned 0x20
	[0141.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.805] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13538) returned 1
	[0141.805] CloseHandle (hObject=0x148) returned 1
	[0141.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf")) returned 0x20
	[0141.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf")) returned 0x20
	[0141.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.897] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5798) returned 1
	[0141.897] CloseHandle (hObject=0x148) returned 1
	[0141.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf")) returned 0x20
	[0141.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf")) returned 0x20
	[0141.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.898] SetEvent (hEvent=0xfc) returned 1
	[0141.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.898] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3718) returned 1
	[0141.898] CloseHandle (hObject=0x148) returned 1
	[0141.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf")) returned 0x20
	[0141.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf")) returned 0x20
	[0141.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.899] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1468) returned 1
	[0141.899] CloseHandle (hObject=0x148) returned 1
	[0141.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf")) returned 0x20
	[0141.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf")) returned 0x20
	[0141.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.900] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1400) returned 1
	[0141.900] CloseHandle (hObject=0x148) returned 1
	[0141.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf")) returned 0x20
	[0141.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf")) returned 0x20
	[0141.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.901] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12632) returned 1
	[0141.901] CloseHandle (hObject=0x148) returned 1
	[0141.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf")) returned 0x20
	[0141.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf")) returned 0x20
	[0141.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.901] SetEvent (hEvent=0xfc) returned 1
	[0141.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.903] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10644) returned 1
	[0141.903] CloseHandle (hObject=0x148) returned 1
	[0141.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf")) returned 0x20
	[0141.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf")) returned 0x20
	[0141.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.904] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2116) returned 1
	[0141.904] CloseHandle (hObject=0x148) returned 1
	[0141.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf")) returned 0x20
	[0141.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf")) returned 0x20
	[0141.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.905] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1568) returned 1
	[0141.905] CloseHandle (hObject=0x148) returned 1
	[0141.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf")) returned 0x20
	[0141.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf")) returned 0x20
	[0141.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.905] SetEvent (hEvent=0xfc) returned 1
	[0141.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.906] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11490) returned 1
	[0141.906] CloseHandle (hObject=0x148) returned 1
	[0141.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf")) returned 0x20
	[0141.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf")) returned 0x20
	[0141.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.907] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9300) returned 1
	[0141.907] CloseHandle (hObject=0x148) returned 1
	[0141.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf")) returned 0x20
	[0141.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf")) returned 0x20
	[0141.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.907] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4032) returned 1
	[0141.907] CloseHandle (hObject=0x148) returned 1
	[0141.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf")) returned 0x20
	[0141.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf")) returned 0x20
	[0141.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.908] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4340) returned 1
	[0141.908] CloseHandle (hObject=0x148) returned 1
	[0141.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf")) returned 0x20
	[0141.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf")) returned 0x20
	[0141.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.909] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7084) returned 1
	[0141.909] CloseHandle (hObject=0x148) returned 1
	[0141.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf")) returned 0x20
	[0141.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf")) returned 0x20
	[0141.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.910] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7098) returned 1
	[0141.910] CloseHandle (hObject=0x148) returned 1
	[0141.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf")) returned 0x20
	[0141.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf")) returned 0x20
	[0141.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.911] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2848) returned 1
	[0141.911] CloseHandle (hObject=0x148) returned 1
	[0141.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf")) returned 0x20
	[0141.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf")) returned 0x20
	[0141.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.911] SetEvent (hEvent=0xfc) returned 1
	[0141.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.912] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1148) returned 1
	[0141.912] CloseHandle (hObject=0x148) returned 1
	[0141.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf")) returned 0x20
	[0141.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf")) returned 0x20
	[0141.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.913] SetEvent (hEvent=0xfc) returned 1
	[0141.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.913] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2756) returned 1
	[0141.913] CloseHandle (hObject=0x148) returned 1
	[0141.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf")) returned 0x20
	[0141.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf")) returned 0x20
	[0141.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.914] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1268) returned 1
	[0141.914] CloseHandle (hObject=0x148) returned 1
	[0141.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf")) returned 0x20
	[0141.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf")) returned 0x20
	[0141.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.915] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5000) returned 1
	[0141.915] CloseHandle (hObject=0x148) returned 1
	[0141.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf")) returned 0x20
	[0141.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf")) returned 0x20
	[0141.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.916] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7340) returned 1
	[0141.916] CloseHandle (hObject=0x148) returned 1
	[0141.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf")) returned 0x20
	[0141.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf")) returned 0x20
	[0141.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.916] SetEvent (hEvent=0xfc) returned 1
	[0141.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.917] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15806) returned 1
	[0141.917] CloseHandle (hObject=0x148) returned 1
	[0141.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf")) returned 0x20
	[0141.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf")) returned 0x20
	[0141.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.918] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6016) returned 1
	[0141.918] CloseHandle (hObject=0x148) returned 1
	[0141.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf")) returned 0x20
	[0141.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf")) returned 0x20
	[0141.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.918] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5958) returned 1
	[0141.918] CloseHandle (hObject=0x148) returned 1
	[0141.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf")) returned 0x20
	[0141.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf")) returned 0x20
	[0141.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.919] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7296) returned 1
	[0141.919] CloseHandle (hObject=0x148) returned 1
	[0141.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf")) returned 0x20
	[0141.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf")) returned 0x20
	[0141.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.921] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5414) returned 1
	[0141.921] CloseHandle (hObject=0x148) returned 1
	[0141.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf")) returned 0x20
	[0141.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf")) returned 0x20
	[0141.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.921] SetEvent (hEvent=0xfc) returned 1
	[0141.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.921] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2616) returned 1
	[0141.922] CloseHandle (hObject=0x148) returned 1
	[0141.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf")) returned 0x20
	[0141.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf")) returned 0x20
	[0141.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.922] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26706) returned 1
	[0141.922] CloseHandle (hObject=0x148) returned 1
	[0141.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf")) returned 0x20
	[0141.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf")) returned 0x20
	[0141.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.923] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2704) returned 1
	[0141.923] CloseHandle (hObject=0x148) returned 1
	[0141.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf")) returned 0x20
	[0141.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf")) returned 0x20
	[0141.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.924] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1324) returned 1
	[0141.924] CloseHandle (hObject=0x148) returned 1
	[0141.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf")) returned 0x20
	[0141.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf")) returned 0x20
	[0141.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.925] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7932) returned 1
	[0141.925] CloseHandle (hObject=0x148) returned 1
	[0141.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf")) returned 0x20
	[0141.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf")) returned 0x20
	[0141.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.926] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5552) returned 1
	[0141.926] CloseHandle (hObject=0x148) returned 1
	[0141.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf")) returned 0x20
	[0141.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf")) returned 0x20
	[0141.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.926] SetEvent (hEvent=0xfc) returned 1
	[0141.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.927] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4970) returned 1
	[0141.927] CloseHandle (hObject=0x148) returned 1
	[0141.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf")) returned 0x20
	[0141.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf")) returned 0x20
	[0141.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.928] SetEvent (hEvent=0xfc) returned 1
	[0141.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.928] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3082) returned 1
	[0141.928] CloseHandle (hObject=0x148) returned 1
	[0141.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf")) returned 0x20
	[0141.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf")) returned 0x20
	[0141.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.930] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23300) returned 1
	[0141.930] CloseHandle (hObject=0x148) returned 1
	[0141.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf")) returned 0x20
	[0141.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf")) returned 0x20
	[0141.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.930] SetEvent (hEvent=0xfc) returned 1
	[0141.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.931] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22116) returned 1
	[0141.931] CloseHandle (hObject=0x148) returned 1
	[0141.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf")) returned 0x20
	[0141.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf")) returned 0x20
	[0141.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.932] SetEvent (hEvent=0xfc) returned 1
	[0141.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.932] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15852) returned 1
	[0141.932] CloseHandle (hObject=0x148) returned 1
	[0141.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf")) returned 0x20
	[0141.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf")) returned 0x20
	[0141.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.933] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2832) returned 1
	[0141.933] CloseHandle (hObject=0x148) returned 1
	[0141.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf")) returned 0x20
	[0141.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf")) returned 0x20
	[0141.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.934] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=68776) returned 1
	[0141.934] CloseHandle (hObject=0x148) returned 1
	[0141.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf")) returned 0x20
	[0141.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf")) returned 0x20
	[0141.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.935] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7178) returned 1
	[0141.935] CloseHandle (hObject=0x148) returned 1
	[0141.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid")) returned 0x20
	[0141.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid")) returned 0x20
	[0141.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.077] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1158) returned 1
	[0142.077] CloseHandle (hObject=0x148) returned 1
	[0142.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf")) returned 0x20
	[0142.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf")) returned 0x20
	[0142.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.078] SetEvent (hEvent=0xfc) returned 1
	[0142.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.078] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=792) returned 1
	[0142.078] CloseHandle (hObject=0x148) returned 1
	[0142.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf")) returned 0x20
	[0142.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf")) returned 0x20
	[0142.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.079] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1074) returned 1
	[0142.079] CloseHandle (hObject=0x148) returned 1
	[0142.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf")) returned 0x20
	[0142.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf")) returned 0x20
	[0142.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.080] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1848) returned 1
	[0142.080] CloseHandle (hObject=0x148) returned 1
	[0142.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf")) returned 0x20
	[0142.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf")) returned 0x20
	[0142.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.083] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11190) returned 1
	[0142.083] CloseHandle (hObject=0x148) returned 1
	[0142.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf")) returned 0x20
	[0142.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf")) returned 0x20
	[0142.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.083] SetEvent (hEvent=0xfc) returned 1
	[0142.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.084] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1892) returned 1
	[0142.084] CloseHandle (hObject=0x148) returned 1
	[0142.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf")) returned 0x20
	[0142.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf")) returned 0x20
	[0142.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.085] SetEvent (hEvent=0xfc) returned 1
	[0142.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.086] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=696) returned 1
	[0142.086] CloseHandle (hObject=0x148) returned 1
	[0142.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf")) returned 0x20
	[0142.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf")) returned 0x20
	[0142.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.087] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1928) returned 1
	[0142.087] CloseHandle (hObject=0x148) returned 1
	[0142.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf")) returned 0x20
	[0142.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf")) returned 0x20
	[0142.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.088] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9172) returned 1
	[0142.088] CloseHandle (hObject=0x148) returned 1
	[0142.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf")) returned 0x20
	[0142.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf")) returned 0x20
	[0142.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.089] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12748) returned 1
	[0142.090] CloseHandle (hObject=0x148) returned 1
	[0142.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf")) returned 0x20
	[0142.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf")) returned 0x20
	[0142.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.090] SetEvent (hEvent=0xfc) returned 1
	[0142.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.090] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6920) returned 1
	[0142.090] CloseHandle (hObject=0x148) returned 1
	[0142.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf")) returned 0x20
	[0142.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf")) returned 0x20
	[0142.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.091] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1256) returned 1
	[0142.091] CloseHandle (hObject=0x148) returned 1
	[0142.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf")) returned 0x20
	[0142.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf")) returned 0x20
	[0142.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.100] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2944) returned 1
	[0142.100] CloseHandle (hObject=0x148) returned 1
	[0142.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf")) returned 0x20
	[0142.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf")) returned 0x20
	[0142.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.100] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8568) returned 1
	[0142.100] CloseHandle (hObject=0x148) returned 1
	[0142.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid")) returned 0x20
	[0142.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid")) returned 0x20
	[0142.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.102] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1220) returned 1
	[0142.102] CloseHandle (hObject=0x148) returned 1
	[0142.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif")) returned 0x20
	[0142.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif")) returned 0x20
	[0142.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.102] SetEvent (hEvent=0xfc) returned 1
	[0142.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.103] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9734) returned 1
	[0142.103] CloseHandle (hObject=0x148) returned 1
	[0142.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf")) returned 0x20
	[0142.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf")) returned 0x20
	[0142.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.104] SetEvent (hEvent=0xfc) returned 1
	[0142.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.104] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9596) returned 1
	[0142.104] CloseHandle (hObject=0x148) returned 1
	[0142.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf")) returned 0x20
	[0142.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf")) returned 0x20
	[0142.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.105] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17016) returned 1
	[0142.105] CloseHandle (hObject=0x148) returned 1
	[0142.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf")) returned 0x20
	[0142.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf")) returned 0x20
	[0142.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.106] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21782) returned 1
	[0142.106] CloseHandle (hObject=0x148) returned 1
	[0142.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf")) returned 0x20
	[0142.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf")) returned 0x20
	[0142.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.107] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35346) returned 1
	[0142.107] CloseHandle (hObject=0x148) returned 1
	[0142.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf")) returned 0x20
	[0142.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf")) returned 0x20
	[0142.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.108] SetEvent (hEvent=0xfc) returned 1
	[0142.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.108] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33434) returned 1
	[0142.108] CloseHandle (hObject=0x148) returned 1
	[0142.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf")) returned 0x20
	[0142.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf")) returned 0x20
	[0142.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.109] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14174) returned 1
	[0142.109] CloseHandle (hObject=0x148) returned 1
	[0142.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf")) returned 0x20
	[0142.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf")) returned 0x20
	[0142.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.110] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19898) returned 1
	[0142.110] CloseHandle (hObject=0x148) returned 1
	[0142.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf")) returned 0x20
	[0142.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf")) returned 0x20
	[0142.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.111] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15680) returned 1
	[0142.111] CloseHandle (hObject=0x148) returned 1
	[0142.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf")) returned 0x20
	[0142.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf")) returned 0x20
	[0142.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.111] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21268) returned 1
	[0142.112] CloseHandle (hObject=0x148) returned 1
	[0142.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf")) returned 0x20
	[0142.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf")) returned 0x20
	[0142.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.112] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46936) returned 1
	[0142.112] CloseHandle (hObject=0x148) returned 1
	[0142.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf")) returned 0x20
	[0142.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf")) returned 0x20
	[0142.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.114] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15760) returned 1
	[0142.114] CloseHandle (hObject=0x148) returned 1
	[0142.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf")) returned 0x20
	[0142.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf")) returned 0x20
	[0142.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.114] SetEvent (hEvent=0xfc) returned 1
	[0142.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.114] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28212) returned 1
	[0142.115] CloseHandle (hObject=0x148) returned 1
	[0142.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf")) returned 0x20
	[0142.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf")) returned 0x20
	[0142.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.116] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17638) returned 1
	[0142.116] CloseHandle (hObject=0x148) returned 1
	[0142.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf")) returned 0x20
	[0142.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf")) returned 0x20
	[0142.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.116] SetEvent (hEvent=0xfc) returned 1
	[0142.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.117] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3332) returned 1
	[0142.117] CloseHandle (hObject=0x148) returned 1
	[0142.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf")) returned 0x20
	[0142.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf")) returned 0x20
	[0142.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.118] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1456) returned 1
	[0142.118] CloseHandle (hObject=0x148) returned 1
	[0142.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf")) returned 0x20
	[0142.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf")) returned 0x20
	[0142.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.118] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5314) returned 1
	[0142.118] CloseHandle (hObject=0x148) returned 1
	[0142.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf")) returned 0x20
	[0142.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf")) returned 0x20
	[0142.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.119] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6934) returned 1
	[0142.119] CloseHandle (hObject=0x148) returned 1
	[0142.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf")) returned 0x20
	[0142.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf")) returned 0x20
	[0142.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.121] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42050) returned 1
	[0142.121] CloseHandle (hObject=0x148) returned 1
	[0142.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf")) returned 0x20
	[0142.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf")) returned 0x20
	[0142.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.121] SetEvent (hEvent=0xfc) returned 1
	[0142.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.122] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4970) returned 1
	[0142.122] CloseHandle (hObject=0x148) returned 1
	[0142.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf")) returned 0x20
	[0142.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf")) returned 0x20
	[0142.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.123] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24759) returned 1
	[0142.123] CloseHandle (hObject=0x148) returned 1
	[0142.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg")) returned 0x20
	[0142.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg")) returned 0x20
	[0142.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.311] SetEvent (hEvent=0xfc) returned 1
	[0142.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.655] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24377) returned 1
	[0142.655] CloseHandle (hObject=0x148) returned 1
	[0142.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg")) returned 0x20
	[0142.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg")) returned 0x20
	[0142.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.655] SetEvent (hEvent=0xfc) returned 1
	[0142.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.657] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18258) returned 1
	[0142.657] CloseHandle (hObject=0x148) returned 1
	[0142.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg")) returned 0x20
	[0142.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg")) returned 0x20
	[0142.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.657] SetEvent (hEvent=0xfc) returned 1
	[0142.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.660] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21914) returned 1
	[0142.661] CloseHandle (hObject=0x148) returned 1
	[0142.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg")) returned 0x20
	[0142.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg")) returned 0x20
	[0142.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.661] SetEvent (hEvent=0xfc) returned 1
	[0142.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.661] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26086) returned 1
	[0142.661] CloseHandle (hObject=0x148) returned 1
	[0142.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf")) returned 0x20
	[0142.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf")) returned 0x20
	[0142.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.662] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11694) returned 1
	[0142.662] CloseHandle (hObject=0x148) returned 1
	[0142.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg")) returned 0x20
	[0142.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg")) returned 0x20
	[0142.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.665] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13874) returned 1
	[0142.665] CloseHandle (hObject=0x148) returned 1
	[0142.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf")) returned 0x20
	[0142.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf")) returned 0x20
	[0142.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.665] SetEvent (hEvent=0xfc) returned 1
	[0142.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.666] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8826) returned 1
	[0142.666] CloseHandle (hObject=0x148) returned 1
	[0142.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg")) returned 0x20
	[0142.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg")) returned 0x20
	[0142.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.667] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13954) returned 1
	[0142.667] CloseHandle (hObject=0x148) returned 1
	[0142.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg")) returned 0x20
	[0142.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg")) returned 0x20
	[0142.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.667] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9671) returned 1
	[0142.667] CloseHandle (hObject=0x148) returned 1
	[0142.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg")) returned 0x20
	[0142.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg")) returned 0x20
	[0142.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.668] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26160) returned 1
	[0142.668] CloseHandle (hObject=0x148) returned 1
	[0142.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf")) returned 0x20
	[0142.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf")) returned 0x20
	[0142.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.669] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27546) returned 1
	[0142.669] CloseHandle (hObject=0x148) returned 1
	[0142.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf")) returned 0x20
	[0142.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf")) returned 0x20
	[0142.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.676] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15145) returned 1
	[0142.676] CloseHandle (hObject=0x148) returned 1
	[0142.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg")) returned 0x20
	[0142.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg")) returned 0x20
	[0142.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.678] SetEvent (hEvent=0xfc) returned 1
	[0142.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.679] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43949) returned 1
	[0142.679] CloseHandle (hObject=0x148) returned 1
	[0142.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg")) returned 0x20
	[0142.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg")) returned 0x20
	[0142.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.679] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20179) returned 1
	[0142.679] CloseHandle (hObject=0x148) returned 1
	[0142.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg")) returned 0x20
	[0142.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg")) returned 0x20
	[0142.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.680] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10192) returned 1
	[0142.680] CloseHandle (hObject=0x148) returned 1
	[0142.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf")) returned 0x20
	[0142.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf")) returned 0x20
	[0142.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.681] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24292) returned 1
	[0142.681] CloseHandle (hObject=0x148) returned 1
	[0142.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf")) returned 0x20
	[0142.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf")) returned 0x20
	[0142.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.682] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8754) returned 1
	[0142.682] CloseHandle (hObject=0x148) returned 1
	[0142.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf")) returned 0x20
	[0142.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf")) returned 0x20
	[0142.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.688] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58258) returned 1
	[0142.688] CloseHandle (hObject=0x148) returned 1
	[0142.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf")) returned 0x20
	[0142.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf")) returned 0x20
	[0142.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.688] SetEvent (hEvent=0xfc) returned 1
	[0142.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.689] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2488) returned 1
	[0142.689] CloseHandle (hObject=0x148) returned 1
	[0142.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf")) returned 0x20
	[0142.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf")) returned 0x20
	[0142.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.690] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5386) returned 1
	[0142.690] CloseHandle (hObject=0x148) returned 1
	[0142.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf")) returned 0x20
	[0142.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf")) returned 0x20
	[0142.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.695] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3606) returned 1
	[0142.695] CloseHandle (hObject=0x148) returned 1
	[0142.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf")) returned 0x20
	[0142.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf")) returned 0x20
	[0142.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.696] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4118) returned 1
	[0142.696] CloseHandle (hObject=0x148) returned 1
	[0142.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf")) returned 0x20
	[0142.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf")) returned 0x20
	[0142.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.697] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3282) returned 1
	[0142.697] CloseHandle (hObject=0x148) returned 1
	[0142.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg")) returned 0x20
	[0142.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg")) returned 0x20
	[0142.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.698] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16738) returned 1
	[0142.698] CloseHandle (hObject=0x148) returned 1
	[0142.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg")) returned 0x20
	[0142.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg")) returned 0x20
	[0142.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.699] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24528) returned 1
	[0142.699] CloseHandle (hObject=0x148) returned 1
	[0142.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg")) returned 0x20
	[0142.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg")) returned 0x20
	[0142.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.699] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9080) returned 1
	[0142.699] CloseHandle (hObject=0x148) returned 1
	[0142.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg")) returned 0x20
	[0142.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg")) returned 0x20
	[0142.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.701] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8076) returned 1
	[0142.701] CloseHandle (hObject=0x148) returned 1
	[0142.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg")) returned 0x20
	[0142.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg")) returned 0x20
	[0142.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.702] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43892) returned 1
	[0142.702] CloseHandle (hObject=0x148) returned 1
	[0142.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg")) returned 0x20
	[0142.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg")) returned 0x20
	[0142.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.702] SetEvent (hEvent=0xfc) returned 1
	[0142.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.703] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=62367) returned 1
	[0142.703] CloseHandle (hObject=0x148) returned 1
	[0142.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg")) returned 0x20
	[0142.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg")) returned 0x20
	[0142.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.704] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17964) returned 1
	[0142.704] CloseHandle (hObject=0x148) returned 1
	[0142.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif")) returned 0x20
	[0142.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif")) returned 0x20
	[0142.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.704] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35546) returned 1
	[0142.704] CloseHandle (hObject=0x148) returned 1
	[0142.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif")) returned 0x20
	[0142.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif")) returned 0x20
	[0142.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.705] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25265) returned 1
	[0142.705] CloseHandle (hObject=0x148) returned 1
	[0142.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif")) returned 0x20
	[0142.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif")) returned 0x20
	[0142.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.706] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19923) returned 1
	[0142.706] CloseHandle (hObject=0x148) returned 1
	[0142.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif")) returned 0x20
	[0142.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif")) returned 0x20
	[0142.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.719] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14337) returned 1
	[0142.719] CloseHandle (hObject=0x148) returned 1
	[0142.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif")) returned 0x20
	[0142.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif")) returned 0x20
	[0142.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.720] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32184) returned 1
	[0142.720] CloseHandle (hObject=0x148) returned 1
	[0142.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp")) returned 0x20
	[0142.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp")) returned 0x20
	[0142.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.720] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32184) returned 1
	[0142.720] CloseHandle (hObject=0x148) returned 1
	[0142.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp")) returned 0x20
	[0142.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp")) returned 0x20
	[0142.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.721] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31968) returned 1
	[0142.721] CloseHandle (hObject=0x148) returned 1
	[0142.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp")) returned 0x20
	[0142.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp")) returned 0x20
	[0142.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.722] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32184) returned 1
	[0142.722] CloseHandle (hObject=0x148) returned 1
	[0142.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp")) returned 0x20
	[0142.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp")) returned 0x20
	[0142.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.723] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32184) returned 1
	[0142.723] CloseHandle (hObject=0x148) returned 1
	[0142.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp")) returned 0x20
	[0142.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp")) returned 0x20
	[0142.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.724] SetEvent (hEvent=0xfc) returned 1
	[0142.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.724] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32184) returned 1
	[0142.724] CloseHandle (hObject=0x148) returned 1
	[0142.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp")) returned 0x20
	[0142.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp")) returned 0x20
	[0142.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.725] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32184) returned 1
	[0142.725] CloseHandle (hObject=0x148) returned 1
	[0142.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp")) returned 0x20
	[0142.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp")) returned 0x20
	[0142.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.726] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31968) returned 1
	[0142.726] CloseHandle (hObject=0x148) returned 1
	[0142.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp")) returned 0x20
	[0142.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp")) returned 0x20
	[0142.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.726] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32184) returned 1
	[0142.727] CloseHandle (hObject=0x148) returned 1
	[0142.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp")) returned 0x20
	[0142.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp")) returned 0x20
	[0142.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.727] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32184) returned 1
	[0142.727] CloseHandle (hObject=0x148) returned 1
	[0142.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp")) returned 0x20
	[0142.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp")) returned 0x20
	[0142.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.730] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32616) returned 1
	[0142.730] CloseHandle (hObject=0x148) returned 1
	[0142.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp")) returned 0x20
	[0142.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp")) returned 0x20
	[0142.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.730] SetEvent (hEvent=0xfc) returned 1
	[0142.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.731] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15988) returned 1
	[0142.731] CloseHandle (hObject=0x148) returned 1
	[0142.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf")) returned 0x20
	[0142.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf")) returned 0x20
	[0142.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.734] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27000) returned 1
	[0142.734] CloseHandle (hObject=0x148) returned 1
	[0142.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf")) returned 0x20
	[0142.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf")) returned 0x20
	[0142.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.735] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11216) returned 1
	[0142.735] CloseHandle (hObject=0x148) returned 1
	[0142.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf")) returned 0x20
	[0142.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf")) returned 0x20
	[0142.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.736] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17040) returned 1
	[0142.736] CloseHandle (hObject=0x148) returned 1
	[0142.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf")) returned 0x20
	[0142.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf")) returned 0x20
	[0142.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.736] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17344) returned 1
	[0142.736] CloseHandle (hObject=0x148) returned 1
	[0142.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf")) returned 0x20
	[0142.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf")) returned 0x20
	[0142.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.737] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12900) returned 1
	[0142.737] CloseHandle (hObject=0x148) returned 1
	[0142.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf")) returned 0x20
	[0142.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf")) returned 0x20
	[0142.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.744] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44948) returned 1
	[0142.744] CloseHandle (hObject=0x148) returned 1
	[0142.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf")) returned 0x20
	[0142.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf")) returned 0x20
	[0142.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.744] SetEvent (hEvent=0xfc) returned 1
	[0142.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.745] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17172) returned 1
	[0142.745] CloseHandle (hObject=0x148) returned 1
	[0142.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf")) returned 0x20
	[0142.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf")) returned 0x20
	[0142.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.745] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11532) returned 1
	[0142.745] CloseHandle (hObject=0x148) returned 1
	[0142.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf")) returned 0x20
	[0142.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf")) returned 0x20
	[0142.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.746] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11228) returned 1
	[0142.746] CloseHandle (hObject=0x148) returned 1
	[0142.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf")) returned 0x20
	[0142.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf")) returned 0x20
	[0142.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.747] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19328) returned 1
	[0142.747] CloseHandle (hObject=0x148) returned 1
	[0142.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf")) returned 0x20
	[0142.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf")) returned 0x20
	[0142.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.752] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4628) returned 1
	[0142.752] CloseHandle (hObject=0x148) returned 1
	[0142.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf")) returned 0x20
	[0142.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf")) returned 0x20
	[0142.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.753] SetEvent (hEvent=0xfc) returned 1
	[0142.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.753] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4796) returned 1
	[0142.753] CloseHandle (hObject=0x148) returned 1
	[0142.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf")) returned 0x20
	[0142.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf")) returned 0x20
	[0142.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.754] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6568) returned 1
	[0142.754] CloseHandle (hObject=0x148) returned 1
	[0142.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf")) returned 0x20
	[0142.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf")) returned 0x20
	[0142.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.755] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15832) returned 1
	[0142.755] CloseHandle (hObject=0x148) returned 1
	[0142.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf")) returned 0x20
	[0142.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf")) returned 0x20
	[0142.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.755] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14868) returned 1
	[0142.756] CloseHandle (hObject=0x148) returned 1
	[0142.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf")) returned 0x20
	[0142.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf")) returned 0x20
	[0142.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.756] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5504) returned 1
	[0142.756] CloseHandle (hObject=0x148) returned 1
	[0142.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf")) returned 0x20
	[0142.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf")) returned 0x20
	[0142.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.759] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6320) returned 1
	[0142.759] CloseHandle (hObject=0x148) returned 1
	[0142.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf")) returned 0x20
	[0142.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf")) returned 0x20
	[0142.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.760] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4320) returned 1
	[0142.760] CloseHandle (hObject=0x148) returned 1
	[0142.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf")) returned 0x20
	[0142.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf")) returned 0x20
	[0142.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.768] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2020) returned 1
	[0142.768] CloseHandle (hObject=0x148) returned 1
	[0142.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf")) returned 0x20
	[0142.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf")) returned 0x20
	[0142.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.769] SetEvent (hEvent=0xfc) returned 1
	[0142.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.769] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4964) returned 1
	[0142.769] CloseHandle (hObject=0x148) returned 1
	[0142.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf")) returned 0x20
	[0142.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf")) returned 0x20
	[0142.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.770] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4964) returned 1
	[0142.770] CloseHandle (hObject=0x148) returned 1
	[0142.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf")) returned 0x20
	[0142.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf")) returned 0x20
	[0142.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.771] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4624) returned 1
	[0142.771] CloseHandle (hObject=0x148) returned 1
	[0142.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf")) returned 0x20
	[0142.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf")) returned 0x20
	[0142.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.771] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5880) returned 1
	[0142.771] CloseHandle (hObject=0x148) returned 1
	[0142.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf")) returned 0x20
	[0142.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf")) returned 0x20
	[0142.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.772] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5980) returned 1
	[0142.772] CloseHandle (hObject=0x148) returned 1
	[0142.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf")) returned 0x20
	[0142.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf")) returned 0x20
	[0142.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.784] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8252) returned 1
	[0142.784] CloseHandle (hObject=0x148) returned 1
	[0142.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf")) returned 0x20
	[0142.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf")) returned 0x20
	[0142.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.784] SetEvent (hEvent=0xfc) returned 1
	[0142.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.784] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2912) returned 1
	[0142.784] CloseHandle (hObject=0x148) returned 1
	[0142.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf")) returned 0x20
	[0142.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf")) returned 0x20
	[0142.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.785] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31812) returned 1
	[0142.785] CloseHandle (hObject=0x148) returned 1
	[0142.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf")) returned 0x20
	[0142.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf")) returned 0x20
	[0142.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.787] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17332) returned 1
	[0142.787] CloseHandle (hObject=0x148) returned 1
	[0142.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf")) returned 0x20
	[0142.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf")) returned 0x20
	[0142.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.788] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7384) returned 1
	[0142.788] CloseHandle (hObject=0x148) returned 1
	[0142.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf")) returned 0x20
	[0142.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf")) returned 0x20
	[0142.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.789] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21548) returned 1
	[0142.789] CloseHandle (hObject=0x148) returned 1
	[0142.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf")) returned 0x20
	[0142.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf")) returned 0x20
	[0142.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.793] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8680) returned 1
	[0142.793] CloseHandle (hObject=0x148) returned 1
	[0142.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf")) returned 0x20
	[0142.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf")) returned 0x20
	[0142.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.794] SetEvent (hEvent=0xfc) returned 1
	[0142.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.794] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11720) returned 1
	[0142.794] CloseHandle (hObject=0x148) returned 1
	[0142.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf")) returned 0x20
	[0142.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf")) returned 0x20
	[0142.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.795] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4612) returned 1
	[0142.795] CloseHandle (hObject=0x148) returned 1
	[0142.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf")) returned 0x20
	[0142.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf")) returned 0x20
	[0142.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.796] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10060) returned 1
	[0142.796] CloseHandle (hObject=0x148) returned 1
	[0142.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf")) returned 0x20
	[0142.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf")) returned 0x20
	[0142.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.797] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5812) returned 1
	[0142.797] CloseHandle (hObject=0x148) returned 1
	[0142.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf")) returned 0x20
	[0142.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf")) returned 0x20
	[0142.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.797] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23548) returned 1
	[0142.798] CloseHandle (hObject=0x148) returned 1
	[0142.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf")) returned 0x20
	[0142.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf")) returned 0x20
	[0142.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.806] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11900) returned 1
	[0142.806] CloseHandle (hObject=0x148) returned 1
	[0142.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf")) returned 0x20
	[0142.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf")) returned 0x20
	[0142.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.806] SetEvent (hEvent=0xfc) returned 1
	[0142.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.806] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14132) returned 1
	[0142.806] CloseHandle (hObject=0x148) returned 1
	[0142.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf")) returned 0x20
	[0142.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf")) returned 0x20
	[0142.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.807] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27084) returned 1
	[0142.807] CloseHandle (hObject=0x148) returned 1
	[0142.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf")) returned 0x20
	[0142.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf")) returned 0x20
	[0142.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.810] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=48380) returned 1
	[0142.810] CloseHandle (hObject=0x148) returned 1
	[0142.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf")) returned 0x20
	[0142.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf")) returned 0x20
	[0142.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.810] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=48388) returned 1
	[0142.810] CloseHandle (hObject=0x148) returned 1
	[0142.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf")) returned 0x20
	[0142.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf")) returned 0x20
	[0142.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.812] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17200) returned 1
	[0142.812] CloseHandle (hObject=0x148) returned 1
	[0142.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf")) returned 0x20
	[0142.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf")) returned 0x20
	[0142.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.813] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14996) returned 1
	[0142.813] CloseHandle (hObject=0x148) returned 1
	[0142.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf")) returned 0x20
	[0142.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf")) returned 0x20
	[0142.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.814] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20136) returned 1
	[0142.814] CloseHandle (hObject=0x148) returned 1
	[0142.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf")) returned 0x20
	[0142.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf")) returned 0x20
	[0142.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.815] SetEvent (hEvent=0xfc) returned 1
	[0142.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.815] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13456) returned 1
	[0142.815] CloseHandle (hObject=0x148) returned 1
	[0142.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf")) returned 0x20
	[0142.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf")) returned 0x20
	[0142.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.816] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22532) returned 1
	[0142.816] CloseHandle (hObject=0x148) returned 1
	[0142.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf")) returned 0x20
	[0142.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf")) returned 0x20
	[0142.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.817] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22300) returned 1
	[0142.817] CloseHandle (hObject=0x148) returned 1
	[0142.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf")) returned 0x20
	[0142.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf")) returned 0x20
	[0142.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.825] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24908) returned 1
	[0142.825] CloseHandle (hObject=0x148) returned 1
	[0142.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf")) returned 0x20
	[0142.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf")) returned 0x20
	[0142.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.825] SetEvent (hEvent=0xfc) returned 1
	[0142.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.826] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5868) returned 1
	[0142.826] CloseHandle (hObject=0x148) returned 1
	[0142.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf")) returned 0x20
	[0142.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf")) returned 0x20
	[0142.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.827] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11108) returned 1
	[0142.827] CloseHandle (hObject=0x148) returned 1
	[0142.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf")) returned 0x20
	[0142.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf")) returned 0x20
	[0142.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.827] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14132) returned 1
	[0142.827] CloseHandle (hObject=0x148) returned 1
	[0142.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf")) returned 0x20
	[0142.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf")) returned 0x20
	[0142.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.828] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13436) returned 1
	[0142.828] CloseHandle (hObject=0x148) returned 1
	[0142.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf")) returned 0x20
	[0142.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf")) returned 0x20
	[0142.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.829] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12308) returned 1
	[0142.829] CloseHandle (hObject=0x148) returned 1
	[0142.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf")) returned 0x20
	[0142.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf")) returned 0x20
	[0142.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.830] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2460) returned 1
	[0142.830] CloseHandle (hObject=0x148) returned 1
	[0142.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf")) returned 0x20
	[0142.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf")) returned 0x20
	[0142.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.835] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4136) returned 1
	[0142.835] CloseHandle (hObject=0x148) returned 1
	[0142.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf")) returned 0x20
	[0142.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf")) returned 0x20
	[0142.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.835] SetEvent (hEvent=0xfc) returned 1
	[0142.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.836] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4244) returned 1
	[0142.836] CloseHandle (hObject=0x148) returned 1
	[0142.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf")) returned 0x20
	[0142.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf")) returned 0x20
	[0142.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.837] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5076) returned 1
	[0142.837] CloseHandle (hObject=0x148) returned 1
	[0142.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf")) returned 0x20
	[0142.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf")) returned 0x20
	[0142.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.844] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23672) returned 1
	[0142.844] CloseHandle (hObject=0x148) returned 1
	[0142.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf")) returned 0x20
	[0142.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf")) returned 0x20
	[0142.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.846] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21216) returned 1
	[0142.846] CloseHandle (hObject=0x148) returned 1
	[0142.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf")) returned 0x20
	[0142.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf")) returned 0x20
	[0142.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.846] SetEvent (hEvent=0xfc) returned 1
	[0142.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.847] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3724) returned 1
	[0142.847] CloseHandle (hObject=0x148) returned 1
	[0142.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf")) returned 0x20
	[0142.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf")) returned 0x20
	[0142.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.847] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3568) returned 1
	[0142.847] CloseHandle (hObject=0x148) returned 1
	[0142.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf")) returned 0x20
	[0142.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf")) returned 0x20
	[0142.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.848] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9612) returned 1
	[0142.848] CloseHandle (hObject=0x148) returned 1
	[0142.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf")) returned 0x20
	[0142.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf")) returned 0x20
	[0142.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.849] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6024) returned 1
	[0142.849] CloseHandle (hObject=0x148) returned 1
	[0142.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf")) returned 0x20
	[0142.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf")) returned 0x20
	[0142.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.850] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4980) returned 1
	[0142.850] CloseHandle (hObject=0x148) returned 1
	[0142.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf")) returned 0x20
	[0142.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf")) returned 0x20
	[0142.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.854] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3040) returned 1
	[0142.854] CloseHandle (hObject=0x148) returned 1
	[0142.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf")) returned 0x20
	[0142.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf")) returned 0x20
	[0142.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.855] SetEvent (hEvent=0xfc) returned 1
	[0142.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.855] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6424) returned 1
	[0142.855] CloseHandle (hObject=0x148) returned 1
	[0142.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf")) returned 0x20
	[0142.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf")) returned 0x20
	[0142.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.856] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8864) returned 1
	[0142.856] CloseHandle (hObject=0x148) returned 1
	[0142.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf")) returned 0x20
	[0142.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf")) returned 0x20
	[0142.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.857] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4200) returned 1
	[0142.857] CloseHandle (hObject=0x148) returned 1
	[0142.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf")) returned 0x20
	[0142.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf")) returned 0x20
	[0142.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.858] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10836) returned 1
	[0142.858] CloseHandle (hObject=0x148) returned 1
	[0142.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf")) returned 0x20
	[0142.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf")) returned 0x20
	[0142.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.858] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11404) returned 1
	[0142.858] CloseHandle (hObject=0x148) returned 1
	[0142.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf")) returned 0x20
	[0142.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf")) returned 0x20
	[0142.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.862] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12204) returned 1
	[0142.862] CloseHandle (hObject=0x148) returned 1
	[0142.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf")) returned 0x20
	[0142.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf")) returned 0x20
	[0142.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.876] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14008) returned 1
	[0142.876] CloseHandle (hObject=0x148) returned 1
	[0142.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf")) returned 0x20
	[0142.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf")) returned 0x20
	[0142.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.877] SetEvent (hEvent=0xfc) returned 1
	[0142.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.877] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4788) returned 1
	[0142.877] CloseHandle (hObject=0x148) returned 1
	[0142.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf")) returned 0x20
	[0142.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf")) returned 0x20
	[0142.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.878] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8224) returned 1
	[0142.878] CloseHandle (hObject=0x148) returned 1
	[0142.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf")) returned 0x20
	[0142.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf")) returned 0x20
	[0142.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.879] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4716) returned 1
	[0142.879] CloseHandle (hObject=0x148) returned 1
	[0142.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf")) returned 0x20
	[0142.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf")) returned 0x20
	[0142.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.883] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16710) returned 1
	[0142.883] CloseHandle (hObject=0x148) returned 1
	[0142.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf")) returned 0x20
	[0142.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf")) returned 0x20
	[0142.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.883] SetEvent (hEvent=0xfc) returned 1
	[0142.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.884] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33657) returned 1
	[0142.884] CloseHandle (hObject=0x148) returned 1
	[0142.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg")) returned 0x20
	[0142.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg")) returned 0x20
	[0142.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.897] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=61633) returned 1
	[0142.897] CloseHandle (hObject=0x148) returned 1
	[0142.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg")) returned 0x20
	[0142.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg")) returned 0x20
	[0142.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.898] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35419) returned 1
	[0142.898] CloseHandle (hObject=0x148) returned 1
	[0142.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg")) returned 0x20
	[0142.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg")) returned 0x20
	[0142.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.899] SetEvent (hEvent=0xfc) returned 1
	[0142.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.899] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33958) returned 1
	[0142.899] CloseHandle (hObject=0x148) returned 1
	[0142.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg")) returned 0x20
	[0142.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg")) returned 0x20
	[0142.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.900] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39542) returned 1
	[0142.900] CloseHandle (hObject=0x148) returned 1
	[0142.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg")) returned 0x20
	[0142.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg")) returned 0x20
	[0142.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.901] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46508) returned 1
	[0142.901] CloseHandle (hObject=0x148) returned 1
	[0142.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg")) returned 0x20
	[0142.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg")) returned 0x20
	[0142.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.902] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43674) returned 1
	[0142.902] CloseHandle (hObject=0x148) returned 1
	[0142.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg")) returned 0x20
	[0142.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg")) returned 0x20
	[0142.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.904] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67540) returned 1
	[0142.904] CloseHandle (hObject=0x148) returned 1
	[0142.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg")) returned 0x20
	[0142.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg")) returned 0x20
	[0142.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.905] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38237) returned 1
	[0142.905] CloseHandle (hObject=0x148) returned 1
	[0142.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg")) returned 0x20
	[0142.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg")) returned 0x20
	[0142.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.908] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27393) returned 1
	[0142.908] CloseHandle (hObject=0x148) returned 1
	[0142.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg")) returned 0x20
	[0142.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg")) returned 0x20
	[0142.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.908] SetEvent (hEvent=0xfc) returned 1
	[0142.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.909] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46404) returned 1
	[0142.909] CloseHandle (hObject=0x148) returned 1
	[0142.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf")) returned 0x20
	[0142.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf")) returned 0x20
	[0142.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.910] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8494) returned 1
	[0142.910] CloseHandle (hObject=0x148) returned 1
	[0142.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf")) returned 0x20
	[0142.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf")) returned 0x20
	[0142.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.920] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4356) returned 1
	[0142.920] CloseHandle (hObject=0x148) returned 1
	[0142.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf")) returned 0x20
	[0142.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf")) returned 0x20
	[0142.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.921] SetEvent (hEvent=0xfc) returned 1
	[0142.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.921] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24844) returned 1
	[0142.921] CloseHandle (hObject=0x148) returned 1
	[0142.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf")) returned 0x20
	[0142.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf")) returned 0x20
	[0142.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.929] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14132) returned 1
	[0142.929] CloseHandle (hObject=0x148) returned 1
	[0142.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf")) returned 0x20
	[0142.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf")) returned 0x20
	[0142.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.929] SetEvent (hEvent=0xfc) returned 1
	[0142.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.943] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3368) returned 1
	[0142.943] CloseHandle (hObject=0x148) returned 1
	[0142.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf")) returned 0x20
	[0142.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf")) returned 0x20
	[0142.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.943] SetEvent (hEvent=0xfc) returned 1
	[0142.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.944] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1208) returned 1
	[0142.944] CloseHandle (hObject=0x148) returned 1
	[0142.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf")) returned 0x20
	[0142.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf")) returned 0x20
	[0142.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.950] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1208) returned 1
	[0142.950] CloseHandle (hObject=0x148) returned 1
	[0142.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf")) returned 0x20
	[0142.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf")) returned 0x20
	[0142.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.950] SetEvent (hEvent=0xfc) returned 1
	[0142.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.951] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14888) returned 1
	[0142.951] CloseHandle (hObject=0x148) returned 1
	[0142.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf")) returned 0x20
	[0142.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf")) returned 0x20
	[0142.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.951] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9072) returned 1
	[0142.952] CloseHandle (hObject=0x148) returned 1
	[0142.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf")) returned 0x20
	[0142.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf")) returned 0x20
	[0142.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.952] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6956) returned 1
	[0142.952] CloseHandle (hObject=0x148) returned 1
	[0142.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf")) returned 0x20
	[0142.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf")) returned 0x20
	[0142.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.958] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1940) returned 1
	[0142.958] CloseHandle (hObject=0x148) returned 1
	[0142.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf")) returned 0x20
	[0142.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf")) returned 0x20
	[0142.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.960] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1912) returned 1
	[0142.960] CloseHandle (hObject=0x148) returned 1
	[0142.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf")) returned 0x20
	[0142.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf")) returned 0x20
	[0142.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.961] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7848) returned 1
	[0142.961] CloseHandle (hObject=0x148) returned 1
	[0142.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf")) returned 0x20
	[0142.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf")) returned 0x20
	[0142.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.962] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8136) returned 1
	[0142.962] CloseHandle (hObject=0x148) returned 1
	[0142.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf")) returned 0x20
	[0142.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf")) returned 0x20
	[0142.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.963] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8880) returned 1
	[0142.963] CloseHandle (hObject=0x148) returned 1
	[0142.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf")) returned 0x20
	[0142.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf")) returned 0x20
	[0142.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.964] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3704) returned 1
	[0142.964] CloseHandle (hObject=0x148) returned 1
	[0142.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf")) returned 0x20
	[0142.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf")) returned 0x20
	[0142.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.965] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3008) returned 1
	[0142.965] CloseHandle (hObject=0x148) returned 1
	[0142.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf")) returned 0x20
	[0142.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf")) returned 0x20
	[0142.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.966] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20096) returned 1
	[0142.966] CloseHandle (hObject=0x148) returned 1
	[0142.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf")) returned 0x20
	[0142.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf")) returned 0x20
	[0142.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.966] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36620) returned 1
	[0142.966] CloseHandle (hObject=0x148) returned 1
	[0142.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf")) returned 0x20
	[0142.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf")) returned 0x20
	[0142.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.969] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30800) returned 1
	[0142.969] CloseHandle (hObject=0x148) returned 1
	[0142.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf")) returned 0x20
	[0142.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf")) returned 0x20
	[0142.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.970] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38488) returned 1
	[0142.970] CloseHandle (hObject=0x148) returned 1
	[0142.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf")) returned 0x20
	[0142.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf")) returned 0x20
	[0142.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.971] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15448) returned 1
	[0142.971] CloseHandle (hObject=0x148) returned 1
	[0142.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf")) returned 0x20
	[0142.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf")) returned 0x20
	[0142.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.972] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16952) returned 1
	[0142.972] CloseHandle (hObject=0x148) returned 1
	[0142.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf")) returned 0x20
	[0142.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf")) returned 0x20
	[0142.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.972] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17508) returned 1
	[0142.972] CloseHandle (hObject=0x148) returned 1
	[0142.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf")) returned 0x20
	[0142.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf")) returned 0x20
	[0142.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.974] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34256) returned 1
	[0142.974] CloseHandle (hObject=0x148) returned 1
	[0142.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf")) returned 0x20
	[0142.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf")) returned 0x20
	[0142.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.974] SetEvent (hEvent=0xfc) returned 1
	[0142.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.975] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12752) returned 1
	[0142.975] CloseHandle (hObject=0x148) returned 1
	[0142.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf")) returned 0x20
	[0142.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf")) returned 0x20
	[0142.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.975] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7432) returned 1
	[0142.975] CloseHandle (hObject=0x148) returned 1
	[0142.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf")) returned 0x20
	[0142.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf")) returned 0x20
	[0142.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.976] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12528) returned 1
	[0142.976] CloseHandle (hObject=0x148) returned 1
	[0142.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf")) returned 0x20
	[0142.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf")) returned 0x20
	[0142.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.979] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1376) returned 1
	[0142.979] CloseHandle (hObject=0x148) returned 1
	[0142.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf")) returned 0x20
	[0142.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf")) returned 0x20
	[0142.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.980] SetEvent (hEvent=0xfc) returned 1
	[0142.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.980] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21716) returned 1
	[0142.980] CloseHandle (hObject=0x148) returned 1
	[0142.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf")) returned 0x20
	[0142.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf")) returned 0x20
	[0142.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.981] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17912) returned 1
	[0142.981] CloseHandle (hObject=0x148) returned 1
	[0142.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf")) returned 0x20
	[0142.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf")) returned 0x20
	[0142.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.982] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11396) returned 1
	[0142.982] CloseHandle (hObject=0x148) returned 1
	[0142.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf")) returned 0x20
	[0142.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf")) returned 0x20
	[0142.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.983] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18652) returned 1
	[0142.983] CloseHandle (hObject=0x148) returned 1
	[0142.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf")) returned 0x20
	[0142.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf")) returned 0x20
	[0142.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.985] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17966) returned 1
	[0142.986] CloseHandle (hObject=0x148) returned 1
	[0142.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf")) returned 0x20
	[0142.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf")) returned 0x20
	[0142.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.986] SetEvent (hEvent=0xfc) returned 1
	[0142.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.986] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46484) returned 1
	[0142.986] CloseHandle (hObject=0x148) returned 1
	[0142.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg")) returned 0x20
	[0142.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg")) returned 0x20
	[0142.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.987] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20906) returned 1
	[0142.987] CloseHandle (hObject=0x148) returned 1
	[0142.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf")) returned 0x20
	[0142.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf")) returned 0x20
	[0142.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.988] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14472) returned 1
	[0142.988] CloseHandle (hObject=0x148) returned 1
	[0142.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf")) returned 0x20
	[0142.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf")) returned 0x20
	[0142.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.989] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6888) returned 1
	[0142.989] CloseHandle (hObject=0x148) returned 1
	[0142.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf")) returned 0x20
	[0142.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf")) returned 0x20
	[0142.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.989] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7448) returned 1
	[0142.990] CloseHandle (hObject=0x148) returned 1
	[0142.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf")) returned 0x20
	[0142.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf")) returned 0x20
	[0142.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.994] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7028) returned 1
	[0142.994] CloseHandle (hObject=0x148) returned 1
	[0142.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf")) returned 0x20
	[0142.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf")) returned 0x20
	[0142.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.994] SetEvent (hEvent=0xfc) returned 1
	[0142.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.994] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5864) returned 1
	[0142.995] CloseHandle (hObject=0x148) returned 1
	[0142.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf")) returned 0x20
	[0142.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf")) returned 0x20
	[0142.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.995] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9736) returned 1
	[0142.995] CloseHandle (hObject=0x148) returned 1
	[0142.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf")) returned 0x20
	[0142.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf")) returned 0x20
	[0142.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.996] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5100) returned 1
	[0142.996] CloseHandle (hObject=0x148) returned 1
	[0142.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf")) returned 0x20
	[0142.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf")) returned 0x20
	[0142.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.997] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24982) returned 1
	[0142.997] CloseHandle (hObject=0x148) returned 1
	[0142.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg")) returned 0x20
	[0142.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg")) returned 0x20
	[0142.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.998] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46461) returned 1
	[0142.998] CloseHandle (hObject=0x148) returned 1
	[0142.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg")) returned 0x20
	[0142.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg")) returned 0x20
	[0142.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.998] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14552) returned 1
	[0142.999] CloseHandle (hObject=0x148) returned 1
	[0142.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg")) returned 0x20
	[0142.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg")) returned 0x20
	[0142.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.001] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45358) returned 1
	[0143.001] CloseHandle (hObject=0x148) returned 1
	[0143.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg")) returned 0x20
	[0143.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg")) returned 0x20
	[0143.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.002] SetEvent (hEvent=0xfc) returned 1
	[0143.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.002] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36989) returned 1
	[0143.002] CloseHandle (hObject=0x148) returned 1
	[0143.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg")) returned 0x20
	[0143.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg")) returned 0x20
	[0143.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.003] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29204) returned 1
	[0143.003] CloseHandle (hObject=0x148) returned 1
	[0143.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg")) returned 0x20
	[0143.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg")) returned 0x20
	[0143.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.004] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26531) returned 1
	[0143.004] CloseHandle (hObject=0x148) returned 1
	[0143.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg")) returned 0x20
	[0143.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg")) returned 0x20
	[0143.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.005] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24034) returned 1
	[0143.005] CloseHandle (hObject=0x148) returned 1
	[0143.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg")) returned 0x20
	[0143.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg")) returned 0x20
	[0143.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.005] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23338) returned 1
	[0143.005] CloseHandle (hObject=0x148) returned 1
	[0143.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg")) returned 0x20
	[0143.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg")) returned 0x20
	[0143.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.006] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32038) returned 1
	[0143.006] CloseHandle (hObject=0x148) returned 1
	[0143.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg")) returned 0x20
	[0143.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg")) returned 0x20
	[0143.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.010] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35340) returned 1
	[0143.010] CloseHandle (hObject=0x148) returned 1
	[0143.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg")) returned 0x20
	[0143.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg")) returned 0x20
	[0143.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.010] SetEvent (hEvent=0xfc) returned 1
	[0143.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.011] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24392) returned 1
	[0143.011] CloseHandle (hObject=0x148) returned 1
	[0143.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf")) returned 0x20
	[0143.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf")) returned 0x20
	[0143.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.011] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15150) returned 1
	[0143.011] CloseHandle (hObject=0x148) returned 1
	[0143.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf")) returned 0x20
	[0143.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf")) returned 0x20
	[0143.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.012] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7822) returned 1
	[0143.013] CloseHandle (hObject=0x148) returned 1
	[0143.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf")) returned 0x20
	[0143.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf")) returned 0x20
	[0143.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.013] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16082) returned 1
	[0143.013] CloseHandle (hObject=0x148) returned 1
	[0143.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf")) returned 0x20
	[0143.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf")) returned 0x20
	[0143.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.020] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29788) returned 1
	[0143.020] CloseHandle (hObject=0x148) returned 1
	[0143.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf")) returned 0x20
	[0143.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf")) returned 0x20
	[0143.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.020] SetEvent (hEvent=0xfc) returned 1
	[0143.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.020] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7304) returned 1
	[0143.020] CloseHandle (hObject=0x148) returned 1
	[0143.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf")) returned 0x20
	[0143.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf")) returned 0x20
	[0143.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.026] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20038) returned 1
	[0143.026] CloseHandle (hObject=0x148) returned 1
	[0143.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf")) returned 0x20
	[0143.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf")) returned 0x20
	[0143.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.027] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=59734) returned 1
	[0143.027] CloseHandle (hObject=0x148) returned 1
	[0143.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf")) returned 0x20
	[0143.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf")) returned 0x20
	[0143.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.028] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39330) returned 1
	[0143.028] CloseHandle (hObject=0x148) returned 1
	[0143.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf")) returned 0x20
	[0143.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf")) returned 0x20
	[0143.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.029] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20662) returned 1
	[0143.029] CloseHandle (hObject=0x148) returned 1
	[0143.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf")) returned 0x20
	[0143.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf")) returned 0x20
	[0143.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.029] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25868) returned 1
	[0143.029] CloseHandle (hObject=0x148) returned 1
	[0143.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf")) returned 0x20
	[0143.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf")) returned 0x20
	[0143.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.030] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33824) returned 1
	[0143.030] CloseHandle (hObject=0x148) returned 1
	[0143.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf")) returned 0x20
	[0143.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf")) returned 0x20
	[0143.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.032] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24238) returned 1
	[0143.032] CloseHandle (hObject=0x148) returned 1
	[0143.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf")) returned 0x20
	[0143.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf")) returned 0x20
	[0143.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.032] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30522) returned 1
	[0143.032] CloseHandle (hObject=0x148) returned 1
	[0143.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf")) returned 0x20
	[0143.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf")) returned 0x20
	[0143.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.033] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35726) returned 1
	[0143.033] CloseHandle (hObject=0x148) returned 1
	[0143.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf")) returned 0x20
	[0143.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf")) returned 0x20
	[0143.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.034] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7796) returned 1
	[0143.034] CloseHandle (hObject=0x148) returned 1
	[0143.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf")) returned 0x20
	[0143.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf")) returned 0x20
	[0143.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.042] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8578) returned 1
	[0143.042] CloseHandle (hObject=0x148) returned 1
	[0143.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf")) returned 0x20
	[0143.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf")) returned 0x20
	[0143.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.043] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5376) returned 1
	[0143.043] CloseHandle (hObject=0x148) returned 1
	[0143.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf")) returned 0x20
	[0143.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf")) returned 0x20
	[0143.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.044] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11644) returned 1
	[0143.044] CloseHandle (hObject=0x148) returned 1
	[0143.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf")) returned 0x20
	[0143.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf")) returned 0x20
	[0143.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.046] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10352) returned 1
	[0143.046] CloseHandle (hObject=0x148) returned 1
	[0143.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf")) returned 0x20
	[0143.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf")) returned 0x20
	[0143.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.047] SetEvent (hEvent=0xfc) returned 1
	[0143.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.047] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7500) returned 1
	[0143.047] CloseHandle (hObject=0x148) returned 1
	[0143.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf")) returned 0x20
	[0143.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf")) returned 0x20
	[0143.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.048] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12352) returned 1
	[0143.048] CloseHandle (hObject=0x148) returned 1
	[0143.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf")) returned 0x20
	[0143.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf")) returned 0x20
	[0143.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.049] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9344) returned 1
	[0143.049] CloseHandle (hObject=0x148) returned 1
	[0143.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf")) returned 0x20
	[0143.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf")) returned 0x20
	[0143.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.053] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16354) returned 1
	[0143.053] CloseHandle (hObject=0x148) returned 1
	[0143.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf")) returned 0x20
	[0143.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf")) returned 0x20
	[0143.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.055] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8732) returned 1
	[0143.055] CloseHandle (hObject=0x148) returned 1
	[0143.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf")) returned 0x20
	[0143.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf")) returned 0x20
	[0143.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.055] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2732) returned 1
	[0143.055] CloseHandle (hObject=0x148) returned 1
	[0143.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf")) returned 0x20
	[0143.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf")) returned 0x20
	[0143.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.057] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9108) returned 1
	[0143.057] CloseHandle (hObject=0x148) returned 1
	[0143.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf")) returned 0x20
	[0143.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf")) returned 0x20
	[0143.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.057] SetEvent (hEvent=0xfc) returned 1
	[0143.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.057] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10820) returned 1
	[0143.058] CloseHandle (hObject=0x148) returned 1
	[0143.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf")) returned 0x20
	[0143.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf")) returned 0x20
	[0143.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.058] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4696) returned 1
	[0143.058] CloseHandle (hObject=0x148) returned 1
	[0143.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf")) returned 0x20
	[0143.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf")) returned 0x20
	[0143.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.059] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2100) returned 1
	[0143.059] CloseHandle (hObject=0x148) returned 1
	[0143.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf")) returned 0x20
	[0143.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf")) returned 0x20
	[0143.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.060] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5620) returned 1
	[0143.060] CloseHandle (hObject=0x148) returned 1
	[0143.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf")) returned 0x20
	[0143.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf")) returned 0x20
	[0143.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.061] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3472) returned 1
	[0143.061] CloseHandle (hObject=0x148) returned 1
	[0143.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf")) returned 0x20
	[0143.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf")) returned 0x20
	[0143.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.062] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5000) returned 1
	[0143.062] CloseHandle (hObject=0x148) returned 1
	[0143.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf")) returned 0x20
	[0143.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf")) returned 0x20
	[0143.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.069] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10716) returned 1
	[0143.069] CloseHandle (hObject=0x148) returned 1
	[0143.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf")) returned 0x20
	[0143.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf")) returned 0x20
	[0143.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.069] SetEvent (hEvent=0xfc) returned 1
	[0143.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.070] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13162) returned 1
	[0143.070] CloseHandle (hObject=0x148) returned 1
	[0143.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf")) returned 0x20
	[0143.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf")) returned 0x20
	[0143.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.071] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7332) returned 1
	[0143.071] CloseHandle (hObject=0x148) returned 1
	[0143.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf")) returned 0x20
	[0143.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf")) returned 0x20
	[0143.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.071] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4534) returned 1
	[0143.071] CloseHandle (hObject=0x148) returned 1
	[0143.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf")) returned 0x20
	[0143.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf")) returned 0x20
	[0143.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.072] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8314) returned 1
	[0143.072] CloseHandle (hObject=0x148) returned 1
	[0143.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf")) returned 0x20
	[0143.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf")) returned 0x20
	[0143.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.080] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29432) returned 1
	[0143.080] CloseHandle (hObject=0x148) returned 1
	[0143.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf")) returned 0x20
	[0143.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf")) returned 0x20
	[0143.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.081] SetEvent (hEvent=0xfc) returned 1
	[0143.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.081] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3004) returned 1
	[0143.081] CloseHandle (hObject=0x148) returned 1
	[0143.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf")) returned 0x20
	[0143.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf")) returned 0x20
	[0143.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.082] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4750) returned 1
	[0143.082] CloseHandle (hObject=0x148) returned 1
	[0143.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf")) returned 0x20
	[0143.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf")) returned 0x20
	[0143.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.089] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5326) returned 1
	[0143.089] CloseHandle (hObject=0x148) returned 1
	[0143.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf")) returned 0x20
	[0143.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf")) returned 0x20
	[0143.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.094] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33948) returned 1
	[0143.094] CloseHandle (hObject=0x148) returned 1
	[0143.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf")) returned 0x20
	[0143.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf")) returned 0x20
	[0143.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.094] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23726) returned 1
	[0143.094] CloseHandle (hObject=0x148) returned 1
	[0143.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf")) returned 0x20
	[0143.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf")) returned 0x20
	[0143.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.097] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34912) returned 1
	[0143.097] CloseHandle (hObject=0x148) returned 1
	[0143.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf")) returned 0x20
	[0143.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf")) returned 0x20
	[0143.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.098] SetEvent (hEvent=0xfc) returned 1
	[0143.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.098] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15566) returned 1
	[0143.098] CloseHandle (hObject=0x148) returned 1
	[0143.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf")) returned 0x20
	[0143.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf")) returned 0x20
	[0143.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.099] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=54964) returned 1
	[0143.099] CloseHandle (hObject=0x148) returned 1
	[0143.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf")) returned 0x20
	[0143.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf")) returned 0x20
	[0143.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.100] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42272) returned 1
	[0143.100] CloseHandle (hObject=0x148) returned 1
	[0143.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf")) returned 0x20
	[0143.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf")) returned 0x20
	[0143.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.101] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41906) returned 1
	[0143.101] CloseHandle (hObject=0x148) returned 1
	[0143.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf")) returned 0x20
	[0143.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf")) returned 0x20
	[0143.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.101] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42654) returned 1
	[0143.101] CloseHandle (hObject=0x148) returned 1
	[0143.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf")) returned 0x20
	[0143.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf")) returned 0x20
	[0143.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.102] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28572) returned 1
	[0143.102] CloseHandle (hObject=0x148) returned 1
	[0143.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf")) returned 0x20
	[0143.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf")) returned 0x20
	[0143.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.105] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40300) returned 1
	[0143.105] CloseHandle (hObject=0x148) returned 1
	[0143.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf")) returned 0x20
	[0143.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf")) returned 0x20
	[0143.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.106] SetEvent (hEvent=0xfc) returned 1
	[0143.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.106] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44552) returned 1
	[0143.106] CloseHandle (hObject=0x148) returned 1
	[0143.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf")) returned 0x20
	[0143.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf")) returned 0x20
	[0143.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.107] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57722) returned 1
	[0143.107] CloseHandle (hObject=0x148) returned 1
	[0143.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf")) returned 0x20
	[0143.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf")) returned 0x20
	[0143.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.108] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29006) returned 1
	[0143.108] CloseHandle (hObject=0x148) returned 1
	[0143.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf")) returned 0x20
	[0143.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf")) returned 0x20
	[0143.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.115] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31822) returned 1
	[0143.115] CloseHandle (hObject=0x148) returned 1
	[0143.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf")) returned 0x20
	[0143.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf")) returned 0x20
	[0143.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199303.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.115] SetEvent (hEvent=0xfc) returned 1
	[0143.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.115] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10776) returned 1
	[0143.115] CloseHandle (hObject=0x148) returned 1
	[0143.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf")) returned 0x20
	[0143.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf")) returned 0x20
	[0143.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199473.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.116] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5252) returned 1
	[0143.116] CloseHandle (hObject=0x148) returned 1
	[0143.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf")) returned 0x20
	[0143.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf")) returned 0x20
	[0143.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199475.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.117] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10164) returned 1
	[0143.117] CloseHandle (hObject=0x148) returned 1
	[0143.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf")) returned 0x20
	[0143.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf")) returned 0x20
	[0143.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199483.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.118] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12332) returned 1
	[0143.118] CloseHandle (hObject=0x148) returned 1
	[0143.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf")) returned 0x20
	[0143.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf")) returned 0x20
	[0143.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199609.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.121] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8196) returned 1
	[0143.121] CloseHandle (hObject=0x148) returned 1
	[0143.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf")) returned 0x20
	[0143.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf")) returned 0x20
	[0143.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.121] SetEvent (hEvent=0xfc) returned 1
	[0143.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.122] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5312) returned 1
	[0143.122] CloseHandle (hObject=0x148) returned 1
	[0143.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf")) returned 0x20
	[0143.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf")) returned 0x20
	[0143.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.122] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8060) returned 1
	[0143.122] CloseHandle (hObject=0x148) returned 1
	[0143.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf")) returned 0x20
	[0143.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf")) returned 0x20
	[0143.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.123] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31302) returned 1
	[0143.123] CloseHandle (hObject=0x148) returned 1
	[0143.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf")) returned 0x20
	[0143.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf")) returned 0x20
	[0143.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.124] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19466) returned 1
	[0143.124] CloseHandle (hObject=0x148) returned 1
	[0143.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf")) returned 0x20
	[0143.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf")) returned 0x20
	[0143.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.125] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41136) returned 1
	[0143.125] CloseHandle (hObject=0x148) returned 1
	[0143.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf")) returned 0x20
	[0143.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf")) returned 0x20
	[0143.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.126] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20232) returned 1
	[0143.126] CloseHandle (hObject=0x148) returned 1
	[0143.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf")) returned 0x20
	[0143.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf")) returned 0x20
	[0143.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.133] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21400) returned 1
	[0143.133] CloseHandle (hObject=0x148) returned 1
	[0143.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf")) returned 0x20
	[0143.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf")) returned 0x20
	[0143.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200383.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.135] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9676) returned 1
	[0143.135] CloseHandle (hObject=0x148) returned 1
	[0143.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf")) returned 0x20
	[0143.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf")) returned 0x20
	[0143.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.137] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6554) returned 1
	[0143.137] CloseHandle (hObject=0x148) returned 1
	[0143.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf")) returned 0x20
	[0143.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf")) returned 0x20
	[0143.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.138] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2060) returned 1
	[0143.138] CloseHandle (hObject=0x148) returned 1
	[0143.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf")) returned 0x20
	[0143.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf")) returned 0x20
	[0143.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212953.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.139] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7498) returned 1
	[0143.139] CloseHandle (hObject=0x148) returned 1
	[0143.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212953.wmf")) returned 0x20
	[0143.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212953.wmf")) returned 0x20
	[0143.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212953.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213243.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.140] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2652) returned 1
	[0143.140] CloseHandle (hObject=0x148) returned 1
	[0143.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213243.wmf")) returned 0x20
	[0143.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213243.wmf")) returned 0x20
	[0143.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213243.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213449.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.140] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3840) returned 1
	[0143.140] CloseHandle (hObject=0x148) returned 1
	[0143.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213449.wmf")) returned 0x20
	[0143.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213449.wmf")) returned 0x20
	[0143.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213449.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0213449.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214934.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.141] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31926) returned 1
	[0143.141] CloseHandle (hObject=0x148) returned 1
	[0143.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214934.wmf")) returned 0x20
	[0143.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214934.wmf")) returned 0x20
	[0143.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214934.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214934.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214948.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.143] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44794) returned 1
	[0143.143] CloseHandle (hObject=0x148) returned 1
	[0143.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214948.wmf")) returned 0x20
	[0143.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214948.wmf")) returned 0x20
	[0143.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214948.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0214948.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.143] SetEvent (hEvent=0xfc) returned 1
	[0143.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215070.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.143] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11628) returned 1
	[0143.143] CloseHandle (hObject=0x148) returned 1
	[0143.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215070.wmf")) returned 0x20
	[0143.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215070.wmf")) returned 0x20
	[0143.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215070.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215070.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215076.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.144] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8016) returned 1
	[0143.144] CloseHandle (hObject=0x148) returned 1
	[0143.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215076.wmf")) returned 0x20
	[0143.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215076.wmf")) returned 0x20
	[0143.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215076.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215076.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215210.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.145] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33230) returned 1
	[0143.145] CloseHandle (hObject=0x148) returned 1
	[0143.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215210.wmf")) returned 0x20
	[0143.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215210.wmf")) returned 0x20
	[0143.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215210.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215210.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215709.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.151] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9290) returned 1
	[0143.151] CloseHandle (hObject=0x148) returned 1
	[0143.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215709.wmf")) returned 0x20
	[0143.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215709.wmf")) returned 0x20
	[0143.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215709.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215709.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.151] SetEvent (hEvent=0xfc) returned 1
	[0143.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216540.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.152] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42120) returned 1
	[0143.152] CloseHandle (hObject=0x148) returned 1
	[0143.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216540.wmf")) returned 0x20
	[0143.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216540.wmf")) returned 0x20
	[0143.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216540.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216540.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216570.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.153] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24796) returned 1
	[0143.153] CloseHandle (hObject=0x148) returned 1
	[0143.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216570.wmf")) returned 0x20
	[0143.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216570.wmf")) returned 0x20
	[0143.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216570.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216600.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.154] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8006) returned 1
	[0143.154] CloseHandle (hObject=0x148) returned 1
	[0143.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216600.wmf")) returned 0x20
	[0143.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216600.wmf")) returned 0x20
	[0143.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216600.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216612.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.157] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9442) returned 1
	[0143.157] CloseHandle (hObject=0x148) returned 1
	[0143.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216612.wmf")) returned 0x20
	[0143.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216612.wmf")) returned 0x20
	[0143.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216612.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216612.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.157] SetEvent (hEvent=0xfc) returned 1
	[0143.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217262.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.157] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5252) returned 1
	[0143.157] CloseHandle (hObject=0x148) returned 1
	[0143.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217262.wmf")) returned 0x20
	[0143.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217262.wmf")) returned 0x20
	[0143.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217262.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217302.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.158] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3482) returned 1
	[0143.158] CloseHandle (hObject=0x148) returned 1
	[0143.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217302.wmf")) returned 0x20
	[0143.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217302.wmf")) returned 0x20
	[0143.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217302.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.159] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7336) returned 1
	[0143.159] CloseHandle (hObject=0x148) returned 1
	[0143.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf")) returned 0x20
	[0143.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf")) returned 0x20
	[0143.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.173] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35542) returned 1
	[0143.173] CloseHandle (hObject=0x148) returned 1
	[0143.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg")) returned 0x20
	[0143.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg")) returned 0x20
	[0143.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.174] SetEvent (hEvent=0xfc) returned 1
	[0143.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.174] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38750) returned 1
	[0143.174] CloseHandle (hObject=0x148) returned 1
	[0143.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf")) returned 0x20
	[0143.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf")) returned 0x20
	[0143.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.175] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52934) returned 1
	[0143.175] CloseHandle (hObject=0x148) returned 1
	[0143.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf")) returned 0x20
	[0143.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf")) returned 0x20
	[0143.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234001.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.176] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19264) returned 1
	[0143.176] CloseHandle (hObject=0x148) returned 1
	[0143.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234001.wmf")) returned 0x20
	[0143.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234001.wmf")) returned 0x20
	[0143.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234001.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234001.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234376.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.191] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32980) returned 1
	[0143.191] CloseHandle (hObject=0x148) returned 1
	[0143.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234376.wmf")) returned 0x20
	[0143.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234376.wmf")) returned 0x20
	[0143.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234376.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0234376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.192] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5144) returned 1
	[0143.192] CloseHandle (hObject=0x148) returned 1
	[0143.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf")) returned 0x20
	[0143.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf")) returned 0x20
	[0143.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.193] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6552) returned 1
	[0143.193] CloseHandle (hObject=0x148) returned 1
	[0143.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf")) returned 0x20
	[0143.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf")) returned 0x20
	[0143.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.195] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7232) returned 1
	[0143.195] CloseHandle (hObject=0x148) returned 1
	[0143.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf")) returned 0x20
	[0143.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf")) returned 0x20
	[0143.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.196] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7112) returned 1
	[0143.196] CloseHandle (hObject=0x148) returned 1
	[0143.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf")) returned 0x20
	[0143.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf")) returned 0x20
	[0143.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.213] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4936) returned 1
	[0143.213] CloseHandle (hObject=0x148) returned 1
	[0143.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf")) returned 0x20
	[0143.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf")) returned 0x20
	[0143.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241781.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.214] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1970) returned 1
	[0143.214] CloseHandle (hObject=0x148) returned 1
	[0143.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241781.wmf")) returned 0x20
	[0143.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241781.wmf")) returned 0x20
	[0143.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241781.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250504.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.215] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31032) returned 1
	[0143.215] CloseHandle (hObject=0x148) returned 1
	[0143.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250504.wmf")) returned 0x20
	[0143.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250504.wmf")) returned 0x20
	[0143.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250504.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250997.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.215] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26968) returned 1
	[0143.215] CloseHandle (hObject=0x148) returned 1
	[0143.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250997.wmf")) returned 0x20
	[0143.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250997.wmf")) returned 0x20
	[0143.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250997.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0250997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0251007.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.223] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=69644) returned 1
	[0143.223] CloseHandle (hObject=0x148) returned 1
	[0143.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0251007.wmf")) returned 0x20
	[0143.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0251007.wmf")) returned 0x20
	[0143.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0251007.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0251007.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.223] SetEvent (hEvent=0xfc) returned 1
	[0143.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0280468.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.224] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=73198) returned 1
	[0143.224] CloseHandle (hObject=0x148) returned 1
	[0143.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0280468.wmf")) returned 0x20
	[0143.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0280468.wmf")) returned 0x20
	[0143.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0280468.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0280468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281008.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.224] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38084) returned 1
	[0143.224] CloseHandle (hObject=0x148) returned 1
	[0143.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281008.wmf")) returned 0x20
	[0143.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281008.wmf")) returned 0x20
	[0143.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281008.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281008.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281243.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.225] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46516) returned 1
	[0143.225] CloseHandle (hObject=0x148) returned 1
	[0143.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281243.wmf")) returned 0x20
	[0143.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281243.wmf")) returned 0x20
	[0143.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281243.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281630.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.231] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12764) returned 1
	[0143.231] CloseHandle (hObject=0x148) returned 1
	[0143.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281630.wmf")) returned 0x20
	[0143.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281630.wmf")) returned 0x20
	[0143.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281630.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281630.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282932.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.233] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14080) returned 1
	[0143.233] CloseHandle (hObject=0x148) returned 1
	[0143.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282932.wmf")) returned 0x20
	[0143.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282932.wmf")) returned 0x20
	[0143.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282932.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282932.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.233] SetEvent (hEvent=0xfc) returned 1
	[0143.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285462.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.237] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14474) returned 1
	[0143.237] CloseHandle (hObject=0x148) returned 1
	[0143.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285462.wmf")) returned 0x20
	[0143.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285462.wmf")) returned 0x20
	[0143.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285462.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285462.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.238] SetEvent (hEvent=0xfc) returned 1
	[0143.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285792.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.238] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11956) returned 1
	[0143.238] CloseHandle (hObject=0x148) returned 1
	[0143.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285792.wmf")) returned 0x20
	[0143.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285792.wmf")) returned 0x20
	[0143.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285792.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285792.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285796.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.239] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13648) returned 1
	[0143.239] CloseHandle (hObject=0x148) returned 1
	[0143.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285796.wmf")) returned 0x20
	[0143.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285796.wmf")) returned 0x20
	[0143.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285796.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285808.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.243] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9204) returned 1
	[0143.243] CloseHandle (hObject=0x148) returned 1
	[0143.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285808.wmf")) returned 0x20
	[0143.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285808.wmf")) returned 0x20
	[0143.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285808.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285808.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.243] SetEvent (hEvent=0xfc) returned 1
	[0143.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287018.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.244] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30872) returned 1
	[0143.244] CloseHandle (hObject=0x148) returned 1
	[0143.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287018.wmf")) returned 0x20
	[0143.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287018.wmf")) returned 0x20
	[0143.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287018.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287018.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287019.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.244] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37658) returned 1
	[0143.244] CloseHandle (hObject=0x148) returned 1
	[0143.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287019.wmf")) returned 0x20
	[0143.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287019.wmf")) returned 0x20
	[0143.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287019.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287020.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.245] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32984) returned 1
	[0143.245] CloseHandle (hObject=0x148) returned 1
	[0143.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287020.wmf")) returned 0x20
	[0143.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287020.wmf")) returned 0x20
	[0143.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287020.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287024.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.247] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50898) returned 1
	[0143.248] CloseHandle (hObject=0x148) returned 1
	[0143.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287024.wmf")) returned 0x20
	[0143.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287024.wmf")) returned 0x20
	[0143.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287024.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287408.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.248] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52496) returned 1
	[0143.248] CloseHandle (hObject=0x148) returned 1
	[0143.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287408.wmf")) returned 0x20
	[0143.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287408.wmf")) returned 0x20
	[0143.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287408.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287408.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287415.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.249] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43020) returned 1
	[0143.249] CloseHandle (hObject=0x148) returned 1
	[0143.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287415.wmf")) returned 0x20
	[0143.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287415.wmf")) returned 0x20
	[0143.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287415.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287415.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287417.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.250] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=54972) returned 1
	[0143.250] CloseHandle (hObject=0x148) returned 1
	[0143.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287417.wmf")) returned 0x20
	[0143.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287417.wmf")) returned 0x20
	[0143.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287417.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287417.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.258] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35236) returned 1
	[0143.258] CloseHandle (hObject=0x148) returned 1
	[0143.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg")) returned 0x20
	[0143.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg")) returned 0x20
	[0143.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.259] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11553) returned 1
	[0143.259] CloseHandle (hObject=0x148) returned 1
	[0143.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg")) returned 0x20
	[0143.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg")) returned 0x20
	[0143.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0290548.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.260] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40586) returned 1
	[0143.260] CloseHandle (hObject=0x148) returned 1
	[0143.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0290548.wmf")) returned 0x20
	[0143.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0290548.wmf")) returned 0x20
	[0143.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0290548.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0290548.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0291794.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.261] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9616) returned 1
	[0143.261] CloseHandle (hObject=0x148) returned 1
	[0143.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0291794.wmf")) returned 0x20
	[0143.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0291794.wmf")) returned 0x20
	[0143.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0291794.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0291794.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292248.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.262] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8420) returned 1
	[0143.262] CloseHandle (hObject=0x148) returned 1
	[0143.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292248.wmf")) returned 0x20
	[0143.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292248.wmf")) returned 0x20
	[0143.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292248.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292270.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.263] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31398) returned 1
	[0143.263] CloseHandle (hObject=0x148) returned 1
	[0143.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292270.wmf")) returned 0x20
	[0143.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292270.wmf")) returned 0x20
	[0143.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292270.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292270.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292272.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.264] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7012) returned 1
	[0143.264] CloseHandle (hObject=0x148) returned 1
	[0143.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292272.wmf")) returned 0x20
	[0143.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292272.wmf")) returned 0x20
	[0143.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292272.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.265] SetEvent (hEvent=0xfc) returned 1
	[0143.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292278.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.269] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13912) returned 1
	[0143.269] CloseHandle (hObject=0x148) returned 1
	[0143.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292278.wmf")) returned 0x20
	[0143.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292278.wmf")) returned 0x20
	[0143.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292278.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292278.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.269] SetEvent (hEvent=0xfc) returned 1
	[0143.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.273] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14302) returned 1
	[0143.273] CloseHandle (hObject=0x148) returned 1
	[0143.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf")) returned 0x20
	[0143.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf")) returned 0x20
	[0143.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.273] SetEvent (hEvent=0xfc) returned 1
	[0143.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.274] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58412) returned 1
	[0143.274] CloseHandle (hObject=0x148) returned 1
	[0143.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf")) returned 0x20
	[0143.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf")) returned 0x20
	[0143.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296279.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.279] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67726) returned 1
	[0143.279] CloseHandle (hObject=0x148) returned 1
	[0143.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296279.wmf")) returned 0x20
	[0143.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296279.wmf")) returned 0x20
	[0143.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296279.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.280] SetEvent (hEvent=0xfc) returned 1
	[0143.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297727.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.280] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15516) returned 1
	[0143.280] CloseHandle (hObject=0x148) returned 1
	[0143.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297727.wmf")) returned 0x20
	[0143.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297727.wmf")) returned 0x20
	[0143.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297727.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297727.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297757.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.284] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18750) returned 1
	[0143.284] CloseHandle (hObject=0x148) returned 1
	[0143.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297757.wmf")) returned 0x20
	[0143.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297757.wmf")) returned 0x20
	[0143.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297757.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297757.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.285] SetEvent (hEvent=0xfc) returned 1
	[0143.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301044.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.285] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11022) returned 1
	[0143.285] CloseHandle (hObject=0x148) returned 1
	[0143.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301044.wmf")) returned 0x20
	[0143.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301044.wmf")) returned 0x20
	[0143.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301044.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301044.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301052.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.286] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10984) returned 1
	[0143.286] CloseHandle (hObject=0x148) returned 1
	[0143.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301052.wmf")) returned 0x20
	[0143.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301052.wmf")) returned 0x20
	[0143.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301052.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301052.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301418.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.292] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19034) returned 1
	[0143.292] CloseHandle (hObject=0x148) returned 1
	[0143.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301418.wmf")) returned 0x20
	[0143.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301418.wmf")) returned 0x20
	[0143.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301418.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301418.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304875.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.300] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20366) returned 1
	[0143.300] CloseHandle (hObject=0x148) returned 1
	[0143.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304875.wmf")) returned 0x20
	[0143.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304875.wmf")) returned 0x20
	[0143.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304875.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304875.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.300] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19162) returned 1
	[0143.300] CloseHandle (hObject=0x148) returned 1
	[0143.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg")) returned 0x20
	[0143.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg")) returned 0x20
	[0143.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309902.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.301] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0143.301] CloseHandle (hObject=0x148) returned 1
	[0143.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309902.wmf")) returned 0x20
	[0143.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309902.wmf")) returned 0x20
	[0143.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309902.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309904.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.302] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8420) returned 1
	[0143.302] CloseHandle (hObject=0x148) returned 1
	[0143.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309904.wmf")) returned 0x20
	[0143.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309904.wmf")) returned 0x20
	[0143.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309904.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309904.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309920.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.303] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11064) returned 1
	[0143.303] CloseHandle (hObject=0x148) returned 1
	[0143.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309920.wmf")) returned 0x20
	[0143.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309920.wmf")) returned 0x20
	[0143.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309920.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309920.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.304] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37146) returned 1
	[0143.304] CloseHandle (hObject=0x148) returned 1
	[0143.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg")) returned 0x20
	[0143.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg")) returned 0x20
	[0143.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.305] SetEvent (hEvent=0xfc) returned 1
	[0143.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.305] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42842) returned 1
	[0143.305] CloseHandle (hObject=0x148) returned 1
	[0143.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg")) returned 0x20
	[0143.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg")) returned 0x20
	[0143.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.306] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33195) returned 1
	[0143.306] CloseHandle (hObject=0x148) returned 1
	[0143.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg")) returned 0x20
	[0143.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg")) returned 0x20
	[0143.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.308] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47569) returned 1
	[0143.308] CloseHandle (hObject=0x148) returned 1
	[0143.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg")) returned 0x20
	[0143.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg")) returned 0x20
	[0143.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.318] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16626) returned 1
	[0143.318] CloseHandle (hObject=0x148) returned 1
	[0143.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg")) returned 0x20
	[0143.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg")) returned 0x20
	[0143.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.318] SetEvent (hEvent=0xfc) returned 1
	[0143.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.319] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12280) returned 1
	[0143.319] CloseHandle (hObject=0x148) returned 1
	[0143.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf")) returned 0x20
	[0143.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf")) returned 0x20
	[0143.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324704.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.320] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11902) returned 1
	[0143.320] CloseHandle (hObject=0x148) returned 1
	[0143.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324704.wmf")) returned 0x20
	[0143.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324704.wmf")) returned 0x20
	[0143.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324704.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0324704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.320] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12896) returned 1
	[0143.320] CloseHandle (hObject=0x148) returned 1
	[0143.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg")) returned 0x20
	[0143.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg")) returned 0x20
	[0143.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.323] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10196) returned 1
	[0143.323] CloseHandle (hObject=0x148) returned 1
	[0143.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg")) returned 0x20
	[0143.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg")) returned 0x20
	[0143.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.324] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19565) returned 1
	[0143.324] CloseHandle (hObject=0x148) returned 1
	[0143.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg")) returned 0x20
	[0143.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg")) returned 0x20
	[0143.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.325] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19160) returned 1
	[0143.325] CloseHandle (hObject=0x148) returned 1
	[0143.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg")) returned 0x20
	[0143.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg")) returned 0x20
	[0143.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.326] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21187) returned 1
	[0143.326] CloseHandle (hObject=0x148) returned 1
	[0143.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg")) returned 0x20
	[0143.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg")) returned 0x20
	[0143.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.332] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29783) returned 1
	[0143.332] CloseHandle (hObject=0x148) returned 1
	[0143.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg")) returned 0x20
	[0143.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg")) returned 0x20
	[0143.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.333] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27304) returned 1
	[0143.333] CloseHandle (hObject=0x148) returned 1
	[0143.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg")) returned 0x20
	[0143.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg")) returned 0x20
	[0143.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.334] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26739) returned 1
	[0143.334] CloseHandle (hObject=0x148) returned 1
	[0143.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg")) returned 0x20
	[0143.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg")) returned 0x20
	[0143.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.334] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42135) returned 1
	[0143.334] CloseHandle (hObject=0x148) returned 1
	[0143.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg")) returned 0x20
	[0143.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg")) returned 0x20
	[0143.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.335] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7803) returned 1
	[0143.335] CloseHandle (hObject=0x148) returned 1
	[0143.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg")) returned 0x20
	[0143.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg")) returned 0x20
	[0143.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.337] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13845) returned 1
	[0143.337] CloseHandle (hObject=0x148) returned 1
	[0143.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg")) returned 0x20
	[0143.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg")) returned 0x20
	[0143.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.338] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8230) returned 1
	[0143.338] CloseHandle (hObject=0x148) returned 1
	[0143.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg")) returned 0x20
	[0143.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg")) returned 0x20
	[0143.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.339] SetEvent (hEvent=0xfc) returned 1
	[0143.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.339] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15863) returned 1
	[0143.339] CloseHandle (hObject=0x148) returned 1
	[0143.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg")) returned 0x20
	[0143.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg")) returned 0x20
	[0143.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.340] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15743) returned 1
	[0143.340] CloseHandle (hObject=0x148) returned 1
	[0143.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg")) returned 0x20
	[0143.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg")) returned 0x20
	[0143.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.341] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20166) returned 1
	[0143.341] CloseHandle (hObject=0x148) returned 1
	[0143.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg")) returned 0x20
	[0143.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg")) returned 0x20
	[0143.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.342] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18874) returned 1
	[0143.343] CloseHandle (hObject=0x148) returned 1
	[0143.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg")) returned 0x20
	[0143.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg")) returned 0x20
	[0143.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.343] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=68572) returned 1
	[0143.343] CloseHandle (hObject=0x148) returned 1
	[0143.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg")) returned 0x20
	[0143.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg")) returned 0x20
	[0143.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.344] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=118362) returned 1
	[0143.344] CloseHandle (hObject=0x148) returned 1
	[0143.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg")) returned 0x20
	[0143.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg")) returned 0x20
	[0143.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.345] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=91948) returned 1
	[0143.345] CloseHandle (hObject=0x148) returned 1
	[0143.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg")) returned 0x20
	[0143.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg")) returned 0x20
	[0143.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.346] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=129132) returned 1
	[0143.346] CloseHandle (hObject=0x148) returned 1
	[0143.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg")) returned 0x20
	[0143.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg")) returned 0x20
	[0143.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.347] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=112698) returned 1
	[0143.347] CloseHandle (hObject=0x148) returned 1
	[0143.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg")) returned 0x20
	[0143.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg")) returned 0x20
	[0143.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.347] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=122691) returned 1
	[0143.347] CloseHandle (hObject=0x148) returned 1
	[0143.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg")) returned 0x20
	[0143.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg")) returned 0x20
	[0143.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.351] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=99539) returned 1
	[0143.351] CloseHandle (hObject=0x148) returned 1
	[0143.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg")) returned 0x20
	[0143.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg")) returned 0x20
	[0143.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.352] SetEvent (hEvent=0xfc) returned 1
	[0143.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.352] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81437) returned 1
	[0143.352] CloseHandle (hObject=0x148) returned 1
	[0143.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg")) returned 0x20
	[0143.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg")) returned 0x20
	[0143.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.353] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=86812) returned 1
	[0143.353] CloseHandle (hObject=0x148) returned 1
	[0143.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg")) returned 0x20
	[0143.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg")) returned 0x20
	[0143.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.354] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=109879) returned 1
	[0143.354] CloseHandle (hObject=0x148) returned 1
	[0143.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg")) returned 0x20
	[0143.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg")) returned 0x20
	[0143.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.364] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=96466) returned 1
	[0143.365] CloseHandle (hObject=0x148) returned 1
	[0143.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg")) returned 0x20
	[0143.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg")) returned 0x20
	[0143.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.365] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=101060) returned 1
	[0143.365] CloseHandle (hObject=0x148) returned 1
	[0143.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg")) returned 0x20
	[0143.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg")) returned 0x20
	[0143.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.368] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114423) returned 1
	[0143.368] CloseHandle (hObject=0x148) returned 1
	[0143.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg")) returned 0x20
	[0143.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg")) returned 0x20
	[0143.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.369] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97774) returned 1
	[0143.369] CloseHandle (hObject=0x148) returned 1
	[0143.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg")) returned 0x20
	[0143.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg")) returned 0x20
	[0143.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.370] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113410) returned 1
	[0143.370] CloseHandle (hObject=0x148) returned 1
	[0143.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg")) returned 0x20
	[0143.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg")) returned 0x20
	[0143.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.371] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=100488) returned 1
	[0143.371] CloseHandle (hObject=0x148) returned 1
	[0143.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg")) returned 0x20
	[0143.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg")) returned 0x20
	[0143.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.372] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=93448) returned 1
	[0143.372] CloseHandle (hObject=0x148) returned 1
	[0143.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg")) returned 0x20
	[0143.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg")) returned 0x20
	[0143.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.373] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=112479) returned 1
	[0143.373] CloseHandle (hObject=0x148) returned 1
	[0143.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg")) returned 0x20
	[0143.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg")) returned 0x20
	[0143.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.386] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=96159) returned 1
	[0143.386] CloseHandle (hObject=0x148) returned 1
	[0143.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg")) returned 0x20
	[0143.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg")) returned 0x20
	[0143.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.386] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14698) returned 1
	[0143.386] CloseHandle (hObject=0x148) returned 1
	[0143.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg")) returned 0x20
	[0143.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg")) returned 0x20
	[0143.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.387] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26942) returned 1
	[0143.387] CloseHandle (hObject=0x148) returned 1
	[0143.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg")) returned 0x20
	[0143.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg")) returned 0x20
	[0143.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.388] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51978) returned 1
	[0143.388] CloseHandle (hObject=0x148) returned 1
	[0143.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg")) returned 0x20
	[0143.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg")) returned 0x20
	[0143.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.389] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27884) returned 1
	[0143.389] CloseHandle (hObject=0x148) returned 1
	[0143.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg")) returned 0x20
	[0143.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg")) returned 0x20
	[0143.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.390] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39111) returned 1
	[0143.390] CloseHandle (hObject=0x148) returned 1
	[0143.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg")) returned 0x20
	[0143.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg")) returned 0x20
	[0143.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.391] SetEvent (hEvent=0xfc) returned 1
	[0143.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.391] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47551) returned 1
	[0143.391] CloseHandle (hObject=0x148) returned 1
	[0143.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg")) returned 0x20
	[0143.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg")) returned 0x20
	[0143.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.392] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39148) returned 1
	[0143.392] CloseHandle (hObject=0x148) returned 1
	[0143.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg")) returned 0x20
	[0143.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg")) returned 0x20
	[0143.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.405] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32243) returned 1
	[0143.405] CloseHandle (hObject=0x148) returned 1
	[0143.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg")) returned 0x20
	[0143.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg")) returned 0x20
	[0143.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.406] SetEvent (hEvent=0xfc) returned 1
	[0143.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00042_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.406] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20548) returned 1
	[0143.406] CloseHandle (hObject=0x148) returned 1
	[0143.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00042_.wmf")) returned 0x20
	[0143.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00042_.wmf")) returned 0x20
	[0143.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00042_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00042_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00057_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.407] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10818) returned 1
	[0143.407] CloseHandle (hObject=0x148) returned 1
	[0143.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00057_.wmf")) returned 0x20
	[0143.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00057_.wmf")) returned 0x20
	[0143.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00057_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00058_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.408] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3754) returned 1
	[0143.408] CloseHandle (hObject=0x148) returned 1
	[0143.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00058_.wmf")) returned 0x20
	[0143.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00058_.wmf")) returned 0x20
	[0143.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00058_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00068_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.413] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4900) returned 1
	[0143.413] CloseHandle (hObject=0x148) returned 1
	[0143.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00068_.wmf")) returned 0x20
	[0143.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00068_.wmf")) returned 0x20
	[0143.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00068_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.414] SetEvent (hEvent=0xfc) returned 1
	[0143.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00390_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.414] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8642) returned 1
	[0143.414] CloseHandle (hObject=0x148) returned 1
	[0143.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00390_.wmf")) returned 0x20
	[0143.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00390_.wmf")) returned 0x20
	[0143.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00390_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00391_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.415] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8684) returned 1
	[0143.415] CloseHandle (hObject=0x148) returned 1
	[0143.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00391_.wmf")) returned 0x20
	[0143.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00391_.wmf")) returned 0x20
	[0143.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00391_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00391_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00394_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.422] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10964) returned 1
	[0143.422] CloseHandle (hObject=0x148) returned 1
	[0143.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00394_.wmf")) returned 0x20
	[0143.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00394_.wmf")) returned 0x20
	[0143.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00394_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00394_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00452_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.423] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5308) returned 1
	[0143.423] CloseHandle (hObject=0x148) returned 1
	[0143.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00452_.wmf")) returned 0x20
	[0143.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00452_.wmf")) returned 0x20
	[0143.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00452_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00452_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00454_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.425] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5504) returned 1
	[0143.425] CloseHandle (hObject=0x148) returned 1
	[0143.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00454_.wmf")) returned 0x20
	[0143.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00454_.wmf")) returned 0x20
	[0143.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00454_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00454_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00458_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.426] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10148) returned 1
	[0143.426] CloseHandle (hObject=0x148) returned 1
	[0143.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00458_.wmf")) returned 0x20
	[0143.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00458_.wmf")) returned 0x20
	[0143.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00458_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00458_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00462_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.426] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20332) returned 1
	[0143.426] CloseHandle (hObject=0x148) returned 1
	[0143.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00462_.wmf")) returned 0x20
	[0143.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00462_.wmf")) returned 0x20
	[0143.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00462_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00462_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00487_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.428] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3088) returned 1
	[0143.428] CloseHandle (hObject=0x148) returned 1
	[0143.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00487_.wmf")) returned 0x20
	[0143.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00487_.wmf")) returned 0x20
	[0143.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00487_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00487_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.428] SetEvent (hEvent=0xfc) returned 1
	[0143.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00494_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.429] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2360) returned 1
	[0143.429] CloseHandle (hObject=0x148) returned 1
	[0143.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00494_.wmf")) returned 0x20
	[0143.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00494_.wmf")) returned 0x20
	[0143.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00494_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00494_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00512_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.429] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2912) returned 1
	[0143.430] CloseHandle (hObject=0x148) returned 1
	[0143.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00512_.wmf")) returned 0x20
	[0143.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00512_.wmf")) returned 0x20
	[0143.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00512_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00512_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00523_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.430] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28410) returned 1
	[0143.430] CloseHandle (hObject=0x148) returned 1
	[0143.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00523_.wmf")) returned 0x20
	[0143.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00523_.wmf")) returned 0x20
	[0143.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00523_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00523_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00525_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.443] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22656) returned 1
	[0143.443] CloseHandle (hObject=0x148) returned 1
	[0143.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00525_.wmf")) returned 0x20
	[0143.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00525_.wmf")) returned 0x20
	[0143.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00525_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00809_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.443] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1544) returned 1
	[0143.443] CloseHandle (hObject=0x148) returned 1
	[0143.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00809_.wmf")) returned 0x20
	[0143.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00809_.wmf")) returned 0x20
	[0143.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00809_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00809_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00810_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.444] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3416) returned 1
	[0143.444] CloseHandle (hObject=0x148) returned 1
	[0143.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00810_.wmf")) returned 0x20
	[0143.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00810_.wmf")) returned 0x20
	[0143.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00810_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00810_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.445] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12816) returned 1
	[0143.445] CloseHandle (hObject=0x148) returned 1
	[0143.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00932_.wmf")) returned 0x20
	[0143.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00932_.wmf")) returned 0x20
	[0143.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00932_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01064_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.446] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31814) returned 1
	[0143.446] CloseHandle (hObject=0x148) returned 1
	[0143.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01064_.wmf")) returned 0x20
	[0143.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01064_.wmf")) returned 0x20
	[0143.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01064_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01064_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01066_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.448] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21672) returned 1
	[0143.448] CloseHandle (hObject=0x148) returned 1
	[0143.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01066_.wmf")) returned 0x20
	[0143.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01066_.wmf")) returned 0x20
	[0143.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01066_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01066_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01069_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.448] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6782) returned 1
	[0143.449] CloseHandle (hObject=0x148) returned 1
	[0143.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01069_.wmf")) returned 0x20
	[0143.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01069_.wmf")) returned 0x20
	[0143.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01069_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01069_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01123_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.449] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0143.449] CloseHandle (hObject=0x148) returned 1
	[0143.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01123_.wmf")) returned 0x20
	[0143.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01123_.wmf")) returned 0x20
	[0143.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01123_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01123_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01126_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.450] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2928) returned 1
	[0143.450] CloseHandle (hObject=0x148) returned 1
	[0143.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01126_.wmf")) returned 0x20
	[0143.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01126_.wmf")) returned 0x20
	[0143.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01126_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01130_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.451] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5792) returned 1
	[0143.451] CloseHandle (hObject=0x148) returned 1
	[0143.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01130_.wmf")) returned 0x20
	[0143.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01130_.wmf")) returned 0x20
	[0143.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01130_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01141_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.452] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5848) returned 1
	[0143.452] CloseHandle (hObject=0x148) returned 1
	[0143.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01141_.wmf")) returned 0x20
	[0143.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01141_.wmf")) returned 0x20
	[0143.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01141_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01148_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.453] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7992) returned 1
	[0143.453] CloseHandle (hObject=0x148) returned 1
	[0143.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01148_.wmf")) returned 0x20
	[0143.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01148_.wmf")) returned 0x20
	[0143.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01148_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01149_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.454] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4680) returned 1
	[0143.454] CloseHandle (hObject=0x148) returned 1
	[0143.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01149_.wmf")) returned 0x20
	[0143.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01149_.wmf")) returned 0x20
	[0143.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01149_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01149_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.454] SetEvent (hEvent=0xfc) returned 1
	[0143.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.455] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8752) returned 1
	[0143.455] CloseHandle (hObject=0x148) returned 1
	[0143.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01152_.wmf")) returned 0x20
	[0143.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01152_.wmf")) returned 0x20
	[0143.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01152_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01154_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.456] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5552) returned 1
	[0143.456] CloseHandle (hObject=0x148) returned 1
	[0143.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01154_.wmf")) returned 0x20
	[0143.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01154_.wmf")) returned 0x20
	[0143.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01154_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01154_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01157_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.457] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6232) returned 1
	[0143.457] CloseHandle (hObject=0x148) returned 1
	[0143.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01157_.wmf")) returned 0x20
	[0143.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01157_.wmf")) returned 0x20
	[0143.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01157_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01158_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.459] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7284) returned 1
	[0143.460] CloseHandle (hObject=0x148) returned 1
	[0143.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01158_.wmf")) returned 0x20
	[0143.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01158_.wmf")) returned 0x20
	[0143.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01158_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.460] SetEvent (hEvent=0xfc) returned 1
	[0143.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01164_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.460] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2564) returned 1
	[0143.460] CloseHandle (hObject=0x148) returned 1
	[0143.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01164_.wmf")) returned 0x20
	[0143.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01164_.wmf")) returned 0x20
	[0143.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01164_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01164_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01293_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.461] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28912) returned 1
	[0143.461] CloseHandle (hObject=0x148) returned 1
	[0143.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01293_.wmf")) returned 0x20
	[0143.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01293_.wmf")) returned 0x20
	[0143.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01293_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01293_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01354_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.462] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5806) returned 1
	[0143.462] CloseHandle (hObject=0x148) returned 1
	[0143.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01354_.wmf")) returned 0x20
	[0143.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01354_.wmf")) returned 0x20
	[0143.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01354_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01354_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01356_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.463] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18226) returned 1
	[0143.463] CloseHandle (hObject=0x148) returned 1
	[0143.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01356_.wmf")) returned 0x20
	[0143.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01356_.wmf")) returned 0x20
	[0143.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01356_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01356_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01357_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.464] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27638) returned 1
	[0143.464] CloseHandle (hObject=0x148) returned 1
	[0143.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01357_.wmf")) returned 0x20
	[0143.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01357_.wmf")) returned 0x20
	[0143.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01357_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01357_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01358_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.465] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3438) returned 1
	[0143.465] CloseHandle (hObject=0x148) returned 1
	[0143.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01358_.wmf")) returned 0x20
	[0143.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01358_.wmf")) returned 0x20
	[0143.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01358_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01358_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01361_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.466] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7028) returned 1
	[0143.466] CloseHandle (hObject=0x148) returned 1
	[0143.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01361_.wmf")) returned 0x20
	[0143.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01361_.wmf")) returned 0x20
	[0143.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01361_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01368_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.467] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=263186) returned 1
	[0143.467] CloseHandle (hObject=0x148) returned 1
	[0143.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01368_.wmf")) returned 0x20
	[0143.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01368_.wmf")) returned 0x20
	[0143.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01368_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01368_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01421_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.468] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=176494) returned 1
	[0143.468] CloseHandle (hObject=0x148) returned 1
	[0143.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01421_.wmf")) returned 0x20
	[0143.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01421_.wmf")) returned 0x20
	[0143.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01421_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01421_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01468_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.472] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20098) returned 1
	[0143.472] CloseHandle (hObject=0x148) returned 1
	[0143.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01468_.wmf")) returned 0x20
	[0143.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01468_.wmf")) returned 0x20
	[0143.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01468_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01468_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.473] SetEvent (hEvent=0xfc) returned 1
	[0143.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01474_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.473] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13468) returned 1
	[0143.473] CloseHandle (hObject=0x148) returned 1
	[0143.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01474_.wmf")) returned 0x20
	[0143.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01474_.wmf")) returned 0x20
	[0143.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01474_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01474_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01627_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.474] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3296) returned 1
	[0143.474] CloseHandle (hObject=0x148) returned 1
	[0143.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01627_.wmf")) returned 0x20
	[0143.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01627_.wmf")) returned 0x20
	[0143.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01627_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01627_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01680_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.475] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2974) returned 1
	[0143.475] CloseHandle (hObject=0x148) returned 1
	[0143.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01680_.wmf")) returned 0x20
	[0143.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01680_.wmf")) returned 0x20
	[0143.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01680_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01680_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01682_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.475] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3208) returned 1
	[0143.475] CloseHandle (hObject=0x148) returned 1
	[0143.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01682_.wmf")) returned 0x20
	[0143.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01682_.wmf")) returned 0x20
	[0143.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01682_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01682_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01701_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.491] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5316) returned 1
	[0143.491] CloseHandle (hObject=0x148) returned 1
	[0143.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01701_.wmf")) returned 0x20
	[0143.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01701_.wmf")) returned 0x20
	[0143.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01701_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01701_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.492] SetEvent (hEvent=0xfc) returned 1
	[0143.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02126_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.492] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31824) returned 1
	[0143.492] CloseHandle (hObject=0x148) returned 1
	[0143.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02126_.wmf")) returned 0x20
	[0143.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02126_.wmf")) returned 0x20
	[0143.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02126_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02127_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.504] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4068) returned 1
	[0143.504] CloseHandle (hObject=0x148) returned 1
	[0143.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02127_.wmf")) returned 0x20
	[0143.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02127_.wmf")) returned 0x20
	[0143.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02127_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02127_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02386_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.505] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2376) returned 1
	[0143.505] CloseHandle (hObject=0x148) returned 1
	[0143.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02386_.wmf")) returned 0x20
	[0143.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02386_.wmf")) returned 0x20
	[0143.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02386_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02386_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02388_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.506] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3204) returned 1
	[0143.506] CloseHandle (hObject=0x148) returned 1
	[0143.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02388_.wmf")) returned 0x20
	[0143.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02388_.wmf")) returned 0x20
	[0143.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02388_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02389_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.506] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2860) returned 1
	[0143.506] CloseHandle (hObject=0x148) returned 1
	[0143.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02389_.wmf")) returned 0x20
	[0143.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02389_.wmf")) returned 0x20
	[0143.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02389_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02390_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.507] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3684) returned 1
	[0143.507] CloseHandle (hObject=0x148) returned 1
	[0143.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02390_.wmf")) returned 0x20
	[0143.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02390_.wmf")) returned 0x20
	[0143.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02390_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02398_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.508] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7832) returned 1
	[0143.508] CloseHandle (hObject=0x148) returned 1
	[0143.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02398_.wmf")) returned 0x20
	[0143.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02398_.wmf")) returned 0x20
	[0143.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02398_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02398_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02400_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.510] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3364) returned 1
	[0143.510] CloseHandle (hObject=0x148) returned 1
	[0143.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02400_.wmf")) returned 0x20
	[0143.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02400_.wmf")) returned 0x20
	[0143.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02400_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02400_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.511] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8480) returned 1
	[0143.511] CloseHandle (hObject=0x148) returned 1
	[0143.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf")) returned 0x20
	[0143.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf")) returned 0x20
	[0143.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02404_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.512] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20608) returned 1
	[0143.512] CloseHandle (hObject=0x148) returned 1
	[0143.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf")) returned 0x20
	[0143.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf")) returned 0x20
	[0143.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.513] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8136) returned 1
	[0143.513] CloseHandle (hObject=0x148) returned 1
	[0143.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf")) returned 0x20
	[0143.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf")) returned 0x20
	[0143.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.514] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10476) returned 1
	[0143.514] CloseHandle (hObject=0x148) returned 1
	[0143.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf")) returned 0x20
	[0143.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf")) returned 0x20
	[0143.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.514] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2852) returned 1
	[0143.514] CloseHandle (hObject=0x148) returned 1
	[0143.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf")) returned 0x20
	[0143.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf")) returned 0x20
	[0143.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.515] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12216) returned 1
	[0143.515] CloseHandle (hObject=0x148) returned 1
	[0143.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf")) returned 0x20
	[0143.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf")) returned 0x20
	[0143.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02423_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.523] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1340) returned 1
	[0143.523] CloseHandle (hObject=0x1f8) returned 1
	[0143.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf")) returned 0x20
	[0143.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf")) returned 0x20
	[0143.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02424_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.523] SetEvent (hEvent=0xfc) returned 1
	[0143.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.524] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5172) returned 1
	[0143.524] CloseHandle (hObject=0x1f8) returned 1
	[0143.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf")) returned 0x20
	[0143.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf")) returned 0x20
	[0143.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.525] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12824) returned 1
	[0143.525] CloseHandle (hObject=0x1f8) returned 1
	[0143.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf")) returned 0x20
	[0143.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf")) returned 0x20
	[0143.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.526] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1372) returned 1
	[0143.526] CloseHandle (hObject=0x1f8) returned 1
	[0143.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf")) returned 0x20
	[0143.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf")) returned 0x20
	[0143.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.526] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2188) returned 1
	[0143.526] CloseHandle (hObject=0x1f8) returned 1
	[0143.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf")) returned 0x20
	[0143.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf")) returned 0x20
	[0143.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.527] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2612) returned 1
	[0143.527] CloseHandle (hObject=0x1f8) returned 1
	[0143.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf")) returned 0x20
	[0143.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf")) returned 0x20
	[0143.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02446_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.534] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2208) returned 1
	[0143.534] CloseHandle (hObject=0x1f8) returned 1
	[0143.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf")) returned 0x20
	[0143.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf")) returned 0x20
	[0143.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.534] SetEvent (hEvent=0xfc) returned 1
	[0143.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.535] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5440) returned 1
	[0143.535] CloseHandle (hObject=0x1f8) returned 1
	[0143.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid")) returned 0x20
	[0143.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid")) returned 0x20
	[0143.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.536] SetEvent (hEvent=0xfc) returned 1
	[0143.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.537] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6644) returned 1
	[0143.537] CloseHandle (hObject=0x1f8) returned 1
	[0143.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid")) returned 0x20
	[0143.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid")) returned 0x20
	[0143.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.537] SetEvent (hEvent=0xfc) returned 1
	[0143.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.538] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6763) returned 1
	[0143.538] CloseHandle (hObject=0x1f8) returned 1
	[0143.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid")) returned 0x20
	[0143.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid")) returned 0x20
	[0143.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.539] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6491) returned 1
	[0143.539] CloseHandle (hObject=0x1f8) returned 1
	[0143.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid")) returned 0x20
	[0143.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid")) returned 0x20
	[0143.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.540] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5714) returned 1
	[0143.540] CloseHandle (hObject=0x1f8) returned 1
	[0143.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid")) returned 0x20
	[0143.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid")) returned 0x20
	[0143.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.542] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8538) returned 1
	[0143.543] CloseHandle (hObject=0x1f8) returned 1
	[0143.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid")) returned 0x20
	[0143.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid")) returned 0x20
	[0143.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.544] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6070) returned 1
	[0143.544] CloseHandle (hObject=0x1f8) returned 1
	[0143.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid")) returned 0x20
	[0143.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid")) returned 0x20
	[0143.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.544] SetEvent (hEvent=0xfc) returned 1
	[0143.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0144.045] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6020) returned 1
	[0144.045] CloseHandle (hObject=0x140) returned 1
	[0144.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid")) returned 0x20
	[0144.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid")) returned 0x20
	[0144.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.045] SetEvent (hEvent=0xfc) returned 1
	[0144.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0144.045] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32718) returned 1
	[0144.046] CloseHandle (hObject=0x140) returned 1
	[0144.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf")) returned 0x20
	[0144.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf")) returned 0x20
	[0144.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05930_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0144.046] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4636) returned 1
	[0144.046] CloseHandle (hObject=0x140) returned 1
	[0144.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf")) returned 0x20
	[0144.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf")) returned 0x20
	[0144.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06049_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0144.047] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16456) returned 1
	[0144.047] CloseHandle (hObject=0x140) returned 1
	[0144.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf")) returned 0x20
	[0144.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf")) returned 0x20
	[0144.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe06450_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0144.048] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1577) returned 1
	[0144.048] CloseHandle (hObject=0x140) returned 1
	[0144.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif")) returned 0x20
	[0144.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif")) returned 0x20
	[0144.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00601g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0144.049] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34344) returned 1
	[0144.049] CloseHandle (hObject=0x140) returned 1
	[0144.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp")) returned 0x20
	[0144.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp")) returned 0x20
	[0144.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph00780u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0144.050] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32400) returned 1
	[0144.050] CloseHandle (hObject=0x140) returned 1
	[0144.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp")) returned 0x20
	[0144.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp")) returned 0x20
	[0144.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01035u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.051] SetEvent (hEvent=0xfc) returned 1
	[0144.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.277] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=135611) returned 1
	[0144.277] CloseHandle (hObject=0x148) returned 1
	[0144.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg")) returned 0x20
	[0144.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg")) returned 0x20
	[0144.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01046j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.277] SetEvent (hEvent=0xfc) returned 1
	[0144.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.278] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31752) returned 1
	[0144.278] CloseHandle (hObject=0x148) returned 1
	[0144.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp")) returned 0x20
	[0144.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp")) returned 0x20
	[0144.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01247u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.282] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7765) returned 1
	[0144.282] CloseHandle (hObject=0x148) returned 1
	[0144.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif")) returned 0x20
	[0144.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif")) returned 0x20
	[0144.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01255g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.283] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31752) returned 1
	[0144.283] CloseHandle (hObject=0x148) returned 1
	[0144.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp")) returned 0x20
	[0144.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp")) returned 0x20
	[0144.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01265u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.284] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32184) returned 1
	[0144.284] CloseHandle (hObject=0x148) returned 1
	[0144.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp")) returned 0x20
	[0144.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp")) returned 0x20
	[0144.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01332u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.285] SetEvent (hEvent=0xfc) returned 1
	[0144.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.285] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31968) returned 1
	[0144.285] CloseHandle (hObject=0x148) returned 1
	[0144.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp")) returned 0x20
	[0144.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp")) returned 0x20
	[0144.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01478u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.405] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32184) returned 1
	[0144.405] CloseHandle (hObject=0x148) returned 1
	[0144.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp")) returned 0x20
	[0144.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp")) returned 0x20
	[0144.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01562u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.405] SetEvent (hEvent=0xfc) returned 1
	[0144.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.406] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24720) returned 1
	[0144.406] CloseHandle (hObject=0x148) returned 1
	[0144.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif")) returned 0x20
	[0144.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif")) returned 0x20
	[0144.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.407] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32400) returned 1
	[0144.407] CloseHandle (hObject=0x148) returned 1
	[0144.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp")) returned 0x20
	[0144.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp")) returned 0x20
	[0144.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02748u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.407] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34709) returned 1
	[0144.408] CloseHandle (hObject=0x148) returned 1
	[0144.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif")) returned 0x20
	[0144.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif")) returned 0x20
	[0144.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.543] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33048) returned 1
	[0144.543] CloseHandle (hObject=0x1f8) returned 1
	[0144.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp")) returned 0x20
	[0144.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp")) returned 0x20
	[0144.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02749u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.543] SetEvent (hEvent=0xfc) returned 1
	[0144.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.544] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3350) returned 1
	[0144.544] CloseHandle (hObject=0x1f8) returned 1
	[0144.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf")) returned 0x20
	[0144.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf")) returned 0x20
	[0144.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\recycle.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.545] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5983) returned 1
	[0144.545] CloseHandle (hObject=0x1f8) returned 1
	[0144.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid")) returned 0x20
	[0144.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid")) returned 0x20
	[0144.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\road_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.682] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10122) returned 1
	[0144.683] CloseHandle (hObject=0x1f8) returned 1
	[0144.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid")) returned 0x20
	[0144.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid")) returned 0x20
	[0144.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\safri_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.683] SetEvent (hEvent=0xfc) returned 1
	[0144.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.683] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18286) returned 1
	[0144.683] CloseHandle (hObject=0x1f8) returned 1
	[0144.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf")) returned 0x20
	[0144.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf")) returned 0x20
	[0144.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00257_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.684] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=55520) returned 1
	[0144.684] CloseHandle (hObject=0x1f8) returned 1
	[0144.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf")) returned 0x20
	[0144.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf")) returned 0x20
	[0144.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00289_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.685] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=68792) returned 1
	[0144.685] CloseHandle (hObject=0x1f8) returned 1
	[0144.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf")) returned 0x20
	[0144.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf")) returned 0x20
	[0144.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00299_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.808] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31236) returned 1
	[0144.808] CloseHandle (hObject=0x168) returned 1
	[0144.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf")) returned 0x20
	[0144.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf")) returned 0x20
	[0144.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00305_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.810] SetEvent (hEvent=0xfc) returned 1
	[0144.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.811] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21562) returned 1
	[0144.811] CloseHandle (hObject=0x168) returned 1
	[0144.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf")) returned 0x20
	[0144.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf")) returned 0x20
	[0144.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00768_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.812] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5870) returned 1
	[0144.812] CloseHandle (hObject=0x168) returned 1
	[0144.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf")) returned 0x20
	[0144.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf")) returned 0x20
	[0144.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00783_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.812] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16834) returned 1
	[0144.812] CloseHandle (hObject=0x168) returned 1
	[0144.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf")) returned 0x20
	[0144.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf")) returned 0x20
	[0144.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00820_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.813] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10414) returned 1
	[0144.813] CloseHandle (hObject=0x168) returned 1
	[0144.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf")) returned 0x20
	[0144.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf")) returned 0x20
	[0144.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.814] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14042) returned 1
	[0144.814] CloseHandle (hObject=0x168) returned 1
	[0144.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf")) returned 0x20
	[0144.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf")) returned 0x20
	[0144.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00834_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.948] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16360) returned 1
	[0144.948] CloseHandle (hObject=0x168) returned 1
	[0144.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf")) returned 0x20
	[0144.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf")) returned 0x20
	[0144.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00837_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.949] SetEvent (hEvent=0xfc) returned 1
	[0144.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.949] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11308) returned 1
	[0144.949] CloseHandle (hObject=0x168) returned 1
	[0144.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf")) returned 0x20
	[0144.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf")) returned 0x20
	[0144.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02051_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.112] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12490) returned 1
	[0145.114] CloseHandle (hObject=0x204) returned 1
	[0145.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf")) returned 0x20
	[0145.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf")) returned 0x20
	[0145.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02054_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.114] SetEvent (hEvent=0xfc) returned 1
	[0145.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.197] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1264) returned 1
	[0145.197] CloseHandle (hObject=0x200) returned 1
	[0145.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf")) returned 0x20
	[0145.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf")) returned 0x20
	[0145.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00110_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00110_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.198] SetEvent (hEvent=0xfc) returned 1
	[0145.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.324] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2076) returned 1
	[0145.324] CloseHandle (hObject=0x200) returned 1
	[0145.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf")) returned 0x20
	[0145.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf")) returned 0x20
	[0145.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00132_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.325] SetEvent (hEvent=0xfc) returned 1
	[0145.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.325] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3954) returned 1
	[0145.325] CloseHandle (hObject=0x200) returned 1
	[0145.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf")) returned 0x20
	[0145.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf")) returned 0x20
	[0145.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00411_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00411_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.327] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2514) returned 1
	[0145.327] CloseHandle (hObject=0x200) returned 1
	[0145.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf")) returned 0x20
	[0145.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf")) returned 0x20
	[0145.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00687_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.327] SetEvent (hEvent=0xfc) returned 1
	[0145.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.328] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=566) returned 1
	[0145.328] CloseHandle (hObject=0x200) returned 1
	[0145.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf")) returned 0x20
	[0145.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf")) returned 0x20
	[0145.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01164_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01164_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.328] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1642) returned 1
	[0145.328] CloseHandle (hObject=0x200) returned 1
	[0145.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf")) returned 0x20
	[0145.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf")) returned 0x20
	[0145.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01165_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01165_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.476] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19970) returned 1
	[0145.477] CloseHandle (hObject=0x200) returned 1
	[0145.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf")) returned 0x20
	[0145.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf")) returned 0x20
	[0145.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN01308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn01308_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.477] SetEvent (hEvent=0xfc) returned 1
	[0145.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.478] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=318) returned 1
	[0145.478] CloseHandle (hObject=0x200) returned 1
	[0145.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif")) returned 0x20
	[0145.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif")) returned 0x20
	[0145.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01299_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.478] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=592) returned 1
	[0145.479] CloseHandle (hObject=0x200) returned 1
	[0145.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif")) returned 0x20
	[0145.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif")) returned 0x20
	[0145.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01300_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.481] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=681) returned 1
	[0145.481] CloseHandle (hObject=0x200) returned 1
	[0145.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif")) returned 0x20
	[0145.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif")) returned 0x20
	[0145.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01301_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.482] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8310) returned 1
	[0145.482] CloseHandle (hObject=0x200) returned 1
	[0145.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif")) returned 0x20
	[0145.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif")) returned 0x20
	[0145.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01304g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.618] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=370) returned 1
	[0145.619] CloseHandle (hObject=0x200) returned 1
	[0145.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif")) returned 0x20
	[0145.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif")) returned 0x20
	[0145.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01330_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.619] SetEvent (hEvent=0xfc) returned 1
	[0145.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.620] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8430) returned 1
	[0145.620] CloseHandle (hObject=0x200) returned 1
	[0145.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif")) returned 0x20
	[0145.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif")) returned 0x20
	[0145.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.620] SetEvent (hEvent=0xfc) returned 1
	[0145.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.621] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8230) returned 1
	[0145.621] CloseHandle (hObject=0x200) returned 1
	[0145.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif")) returned 0x20
	[0145.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif")) returned 0x20
	[0145.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.621] SetEvent (hEvent=0xfc) returned 1
	[0145.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.622] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8979) returned 1
	[0145.622] CloseHandle (hObject=0x200) returned 1
	[0145.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif")) returned 0x20
	[0145.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif")) returned 0x20
	[0145.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.622] SetEvent (hEvent=0xfc) returned 1
	[0145.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.623] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8079) returned 1
	[0145.623] CloseHandle (hObject=0x200) returned 1
	[0145.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif")) returned 0x20
	[0145.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif")) returned 0x20
	[0145.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.623] SetEvent (hEvent=0xfc) returned 1
	[0145.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.624] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3613) returned 1
	[0145.624] CloseHandle (hObject=0x200) returned 1
	[0145.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif")) returned 0x20
	[0145.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif")) returned 0x20
	[0145.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb01741l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.624] SetEvent (hEvent=0xfc) returned 1
	[0145.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.714] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=908) returned 1
	[0145.714] CloseHandle (hObject=0x200) returned 1
	[0145.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif")) returned 0x20
	[0145.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif")) returned 0x20
	[0145.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02039_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.714] SetEvent (hEvent=0xfc) returned 1
	[0145.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.716] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=893) returned 1
	[0145.716] CloseHandle (hObject=0x200) returned 1
	[0145.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif")) returned 0x20
	[0145.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif")) returned 0x20
	[0145.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02073_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.717] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1302) returned 1
	[0145.717] CloseHandle (hObject=0x200) returned 1
	[0145.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif")) returned 0x20
	[0145.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif")) returned 0x20
	[0145.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02074_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.718] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=765) returned 1
	[0145.718] CloseHandle (hObject=0x200) returned 1
	[0145.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif")) returned 0x20
	[0145.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif")) returned 0x20
	[0145.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02077_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.719] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2454) returned 1
	[0145.719] CloseHandle (hObject=0x200) returned 1
	[0145.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif")) returned 0x20
	[0145.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif")) returned 0x20
	[0145.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02082_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.720] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2316) returned 1
	[0145.720] CloseHandle (hObject=0x200) returned 1
	[0145.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif")) returned 0x20
	[0145.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif")) returned 0x20
	[0145.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02085_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.721] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1409) returned 1
	[0145.721] CloseHandle (hObject=0x200) returned 1
	[0145.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif")) returned 0x20
	[0145.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif")) returned 0x20
	[0145.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02097_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.722] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5626) returned 1
	[0145.722] CloseHandle (hObject=0x200) returned 1
	[0145.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif")) returned 0x20
	[0145.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif")) returned 0x20
	[0145.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.724] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1007) returned 1
	[0145.724] CloseHandle (hObject=0x200) returned 1
	[0145.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif")) returned 0x20
	[0145.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif")) returned 0x20
	[0145.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02116_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.724] SetEvent (hEvent=0xfc) returned 1
	[0145.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.724] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2431) returned 1
	[0145.724] CloseHandle (hObject=0x200) returned 1
	[0145.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif")) returned 0x20
	[0145.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif")) returned 0x20
	[0145.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02134_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.725] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1401) returned 1
	[0145.725] CloseHandle (hObject=0x200) returned 1
	[0145.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif")) returned 0x20
	[0145.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif")) returned 0x20
	[0145.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02187_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.726] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19132) returned 1
	[0145.726] CloseHandle (hObject=0x200) returned 1
	[0145.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif")) returned 0x20
	[0145.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif")) returned 0x20
	[0145.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.727] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5715) returned 1
	[0145.727] CloseHandle (hObject=0x200) returned 1
	[0145.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif")) returned 0x20
	[0145.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif")) returned 0x20
	[0145.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.728] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4971) returned 1
	[0145.728] CloseHandle (hObject=0x200) returned 1
	[0145.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif")) returned 0x20
	[0145.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif")) returned 0x20
	[0145.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.729] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3012) returned 1
	[0145.729] CloseHandle (hObject=0x200) returned 1
	[0145.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif")) returned 0x20
	[0145.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif")) returned 0x20
	[0145.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02218_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.730] SetEvent (hEvent=0xfc) returned 1
	[0145.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.731] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53418) returned 1
	[0145.731] CloseHandle (hObject=0x200) returned 1
	[0145.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx")) returned 0x20
	[0145.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx")) returned 0x20
	[0145.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Adjacency.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\adjacency.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.731] SetEvent (hEvent=0xfc) returned 1
	[0145.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.922] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=69784) returned 1
	[0145.922] CloseHandle (hObject=0x200) returned 1
	[0145.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx")) returned 0x20
	[0145.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx")) returned 0x20
	[0145.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Angles.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\angles.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.922] SetEvent (hEvent=0xfc) returned 1
	[0145.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.057] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=88662) returned 1
	[0146.057] CloseHandle (hObject=0x200) returned 1
	[0146.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx")) returned 0x20
	[0146.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx")) returned 0x20
	[0146.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apothecary.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apothecary.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.057] SetEvent (hEvent=0xfc) returned 1
	[0146.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.058] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=825294) returned 1
	[0146.058] CloseHandle (hObject=0x200) returned 1
	[0146.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx")) returned 0x20
	[0146.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx")) returned 0x20
	[0146.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Pushpin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\pushpin.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.059] SetEvent (hEvent=0xfc) returned 1
	[0146.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.242] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67304) returned 1
	[0146.242] CloseHandle (hObject=0x200) returned 1
	[0146.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx")) returned 0x20
	[0146.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx")) returned 0x20
	[0146.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Slipstream.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\slipstream.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.243] SetEvent (hEvent=0xfc) returned 1
	[0146.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.245] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=961) returned 1
	[0146.246] CloseHandle (hObject=0x200) returned 1
	[0146.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml")) returned 0x20
	[0146.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml")) returned 0x20
	[0146.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.246] SetEvent (hEvent=0xfc) returned 1
	[0146.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.246] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=959) returned 1
	[0146.246] CloseHandle (hObject=0x200) returned 1
	[0146.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml")) returned 0x20
	[0146.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml")) returned 0x20
	[0146.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.247] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=960) returned 1
	[0146.247] CloseHandle (hObject=0x200) returned 1
	[0146.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml")) returned 0x20
	[0146.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml")) returned 0x20
	[0146.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.368] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=960) returned 1
	[0146.368] CloseHandle (hObject=0x200) returned 1
	[0146.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml")) returned 0x20
	[0146.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml")) returned 0x20
	[0146.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.368] SetEvent (hEvent=0xfc) returned 1
	[0146.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.503] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31224) returned 1
	[0146.510] CloseHandle (hObject=0x204) returned 1
	[0146.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx")) returned 0x20
	[0146.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx")) returned 0x20
	[0146.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Verve.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\verve.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.538] SetEvent (hEvent=0xfc) returned 1
	[0146.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.539] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7572) returned 1
	[0146.539] CloseHandle (hObject=0x204) returned 1
	[0146.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf")) returned 0x20
	[0146.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf")) returned 0x20
	[0146.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157995.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157995.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.539] SetEvent (hEvent=0xfc) returned 1
	[0146.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.540] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5158) returned 1
	[0146.540] CloseHandle (hObject=0x204) returned 1
	[0146.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf")) returned 0x20
	[0146.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf")) returned 0x20
	[0146.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0158007.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0158007.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.540] SetEvent (hEvent=0xfc) returned 1
	[0146.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.676] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19768) returned 1
	[0146.677] CloseHandle (hObject=0x200) returned 1
	[0146.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf")) returned 0x20
	[0146.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf")) returned 0x20
	[0146.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183168.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183168.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.677] SetEvent (hEvent=0xfc) returned 1
	[0146.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.677] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7482) returned 1
	[0146.678] CloseHandle (hObject=0x200) returned 1
	[0146.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf")) returned 0x20
	[0146.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf")) returned 0x20
	[0146.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0215086.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0215086.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.678] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12600) returned 1
	[0146.678] CloseHandle (hObject=0x200) returned 1
	[0146.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf")) returned 0x20
	[0146.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf")) returned 0x20
	[0146.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216516.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.679] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7174) returned 1
	[0146.679] CloseHandle (hObject=0x200) returned 1
	[0146.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf")) returned 0x20
	[0146.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf")) returned 0x20
	[0146.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216588.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216588.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.681] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23928) returned 1
	[0146.681] CloseHandle (hObject=0x200) returned 1
	[0146.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf")) returned 0x20
	[0146.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf")) returned 0x20
	[0146.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216724.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216724.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.681] SetEvent (hEvent=0xfc) returned 1
	[0146.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.682] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11716) returned 1
	[0146.682] CloseHandle (hObject=0x200) returned 1
	[0146.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf")) returned 0x20
	[0146.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf")) returned 0x20
	[0146.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0216858.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0216858.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.682] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6890) returned 1
	[0146.682] CloseHandle (hObject=0x200) returned 1
	[0146.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf")) returned 0x20
	[0146.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf")) returned 0x20
	[0146.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0217698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0217698.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.683] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14392) returned 1
	[0146.683] CloseHandle (hObject=0x200) returned 1
	[0146.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf")) returned 0x20
	[0146.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf")) returned 0x20
	[0146.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0221903.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0221903.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.685] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1930) returned 1
	[0146.685] CloseHandle (hObject=0x200) returned 1
	[0146.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf")) returned 0x20
	[0146.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf")) returned 0x20
	[0146.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222015.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222015.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.685] SetEvent (hEvent=0xfc) returned 1
	[0146.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.686] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1586) returned 1
	[0146.686] CloseHandle (hObject=0x200) returned 1
	[0146.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf")) returned 0x20
	[0146.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf")) returned 0x20
	[0146.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222017.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222017.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.686] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1422) returned 1
	[0146.686] CloseHandle (hObject=0x200) returned 1
	[0146.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf")) returned 0x20
	[0146.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf")) returned 0x20
	[0146.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222019.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.687] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1990) returned 1
	[0146.687] CloseHandle (hObject=0x200) returned 1
	[0146.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf")) returned 0x20
	[0146.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf")) returned 0x20
	[0146.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0222021.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0222021.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.689] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3932) returned 1
	[0146.689] CloseHandle (hObject=0x200) returned 1
	[0146.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf")) returned 0x20
	[0146.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf")) returned 0x20
	[0146.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229385.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229385.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.689] SetEvent (hEvent=0xfc) returned 1
	[0146.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.690] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3808) returned 1
	[0146.690] CloseHandle (hObject=0x200) returned 1
	[0146.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf")) returned 0x20
	[0146.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf")) returned 0x20
	[0146.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0229389.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0229389.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.690] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12506) returned 1
	[0146.690] CloseHandle (hObject=0x200) returned 1
	[0146.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf")) returned 0x20
	[0146.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf")) returned 0x20
	[0146.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0230876.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0230876.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.804] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30704) returned 1
	[0146.804] CloseHandle (hObject=0x200) returned 1
	[0146.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf")) returned 0x20
	[0146.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf")) returned 0x20
	[0146.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233018.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233018.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.805] SetEvent (hEvent=0xfc) returned 1
	[0146.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.903] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33016) returned 1
	[0146.903] CloseHandle (hObject=0x200) returned 1
	[0146.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf")) returned 0x20
	[0146.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf")) returned 0x20
	[0146.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233312.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233312.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.903] SetEvent (hEvent=0xfc) returned 1
	[0146.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.904] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3407) returned 1
	[0146.904] CloseHandle (hObject=0x200) returned 1
	[0146.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif")) returned 0x20
	[0146.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif")) returned 0x20
	[0146.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234687.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234687.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.905] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6176) returned 1
	[0146.905] CloseHandle (hObject=0x200) returned 1
	[0146.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf")) returned 0x20
	[0146.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf")) returned 0x20
	[0146.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235241.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235241.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.906] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2596) returned 1
	[0146.906] CloseHandle (hObject=0x200) returned 1
	[0146.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf")) returned 0x20
	[0146.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf")) returned 0x20
	[0146.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0235319.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0235319.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.907] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5078) returned 1
	[0146.907] CloseHandle (hObject=0x200) returned 1
	[0146.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf")) returned 0x20
	[0146.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf")) returned 0x20
	[0146.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240695.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240695.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.907] SetEvent (hEvent=0xfc) returned 1
	[0146.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.908] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6818) returned 1
	[0146.908] CloseHandle (hObject=0x200) returned 1
	[0146.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf")) returned 0x20
	[0146.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf")) returned 0x20
	[0146.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0240719.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0240719.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.909] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5272) returned 1
	[0146.909] CloseHandle (hObject=0x200) returned 1
	[0146.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf")) returned 0x20
	[0146.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf")) returned 0x20
	[0146.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251301.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251301.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.910] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4658) returned 1
	[0146.910] CloseHandle (hObject=0x200) returned 1
	[0146.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf")) returned 0x20
	[0146.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf")) returned 0x20
	[0146.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251871.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251871.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.911] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4534) returned 1
	[0146.911] CloseHandle (hObject=0x200) returned 1
	[0146.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf")) returned 0x20
	[0146.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf")) returned 0x20
	[0146.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0251925.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0251925.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.911] SetEvent (hEvent=0xfc) returned 1
	[0146.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.912] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5516) returned 1
	[0146.912] CloseHandle (hObject=0x200) returned 1
	[0146.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf")) returned 0x20
	[0146.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf")) returned 0x20
	[0146.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0252349.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0252349.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.913] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3792) returned 1
	[0146.913] CloseHandle (hObject=0x200) returned 1
	[0146.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf")) returned 0x20
	[0146.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf")) returned 0x20
	[0146.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0278882.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0278882.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.914] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20474) returned 1
	[0146.914] CloseHandle (hObject=0x200) returned 1
	[0146.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf")) returned 0x20
	[0146.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf")) returned 0x20
	[0146.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0281904.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0281904.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.922] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19910) returned 1
	[0146.922] CloseHandle (hObject=0x204) returned 1
	[0146.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif")) returned 0x20
	[0146.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif")) returned 0x20
	[0146.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0283209.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0283209.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.922] SetEvent (hEvent=0xfc) returned 1
	[0146.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.923] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25315) returned 1
	[0146.923] CloseHandle (hObject=0x204) returned 1
	[0146.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg")) returned 0x20
	[0146.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg")) returned 0x20
	[0146.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0284916.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0284916.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.924] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30838) returned 1
	[0146.924] CloseHandle (hObject=0x204) returned 1
	[0146.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf")) returned 0x20
	[0146.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf")) returned 0x20
	[0146.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285360.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.925] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12516) returned 1
	[0146.925] CloseHandle (hObject=0x204) returned 1
	[0146.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf")) returned 0x20
	[0146.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf")) returned 0x20
	[0146.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285410.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285410.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.926] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9288) returned 1
	[0146.926] CloseHandle (hObject=0x204) returned 1
	[0146.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf")) returned 0x20
	[0146.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf")) returned 0x20
	[0146.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285444.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285444.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.927] SetEvent (hEvent=0xfc) returned 1
	[0146.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.927] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10770) returned 1
	[0146.927] CloseHandle (hObject=0x204) returned 1
	[0146.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf")) returned 0x20
	[0146.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf")) returned 0x20
	[0146.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285698.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285698.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.928] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38284) returned 1
	[0146.928] CloseHandle (hObject=0x204) returned 1
	[0146.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf")) returned 0x20
	[0146.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf")) returned 0x20
	[0146.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285750.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285750.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.929] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13394) returned 1
	[0146.929] CloseHandle (hObject=0x204) returned 1
	[0146.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf")) returned 0x20
	[0146.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf")) returned 0x20
	[0146.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0285926.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0285926.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.930] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2528) returned 1
	[0146.930] CloseHandle (hObject=0x204) returned 1
	[0146.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf")) returned 0x20
	[0146.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf")) returned 0x20
	[0146.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286034.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286034.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.931] SetEvent (hEvent=0xfc) returned 1
	[0146.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.931] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2512) returned 1
	[0146.931] CloseHandle (hObject=0x204) returned 1
	[0146.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf")) returned 0x20
	[0146.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf")) returned 0x20
	[0146.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0286068.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0286068.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.934] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45598) returned 1
	[0146.934] CloseHandle (hObject=0x204) returned 1
	[0146.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf")) returned 0x20
	[0146.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf")) returned 0x20
	[0146.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0287005.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0287005.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.935] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30442) returned 1
	[0146.935] CloseHandle (hObject=0x204) returned 1
	[0146.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf")) returned 0x20
	[0146.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf")) returned 0x20
	[0146.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0291984.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0291984.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.936] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29000) returned 1
	[0146.936] CloseHandle (hObject=0x204) returned 1
	[0146.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf")) returned 0x20
	[0146.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf")) returned 0x20
	[0146.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292020.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.937] SetEvent (hEvent=0xfc) returned 1
	[0146.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.937] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8398) returned 1
	[0146.937] CloseHandle (hObject=0x204) returned 1
	[0146.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf")) returned 0x20
	[0146.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf")) returned 0x20
	[0146.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292152.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292152.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.938] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2456) returned 1
	[0146.938] CloseHandle (hObject=0x204) returned 1
	[0146.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf")) returned 0x20
	[0146.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf")) returned 0x20
	[0146.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0292982.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0292982.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.939] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1466) returned 1
	[0146.939] CloseHandle (hObject=0x204) returned 1
	[0146.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf")) returned 0x20
	[0146.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf")) returned 0x20
	[0146.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293234.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.184] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1894) returned 1
	[0147.184] CloseHandle (hObject=0x1f0) returned 1
	[0147.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf")) returned 0x20
	[0147.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf")) returned 0x20
	[0147.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293236.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293236.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.184] SetEvent (hEvent=0xfc) returned 1
	[0147.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.185] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12248) returned 1
	[0147.185] CloseHandle (hObject=0x1f0) returned 1
	[0147.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf")) returned 0x20
	[0147.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf")) returned 0x20
	[0147.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301050.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301050.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.186] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8782) returned 1
	[0147.186] CloseHandle (hObject=0x1f0) returned 1
	[0147.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf")) returned 0x20
	[0147.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf")) returned 0x20
	[0147.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301076.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301076.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.187] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38202) returned 1
	[0147.187] CloseHandle (hObject=0x1f0) returned 1
	[0147.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf")) returned 0x20
	[0147.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf")) returned 0x20
	[0147.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301252.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301252.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.188] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8000) returned 1
	[0147.188] CloseHandle (hObject=0x168) returned 1
	[0147.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf")) returned 0x20
	[0147.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf")) returned 0x20
	[0147.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0301480.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0301480.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.189] SetEvent (hEvent=0xfc) returned 1
	[0147.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.189] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23083) returned 1
	[0147.189] CloseHandle (hObject=0x168) returned 1
	[0147.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg")) returned 0x20
	[0147.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg")) returned 0x20
	[0147.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302827.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302827.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.190] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9665) returned 1
	[0147.190] CloseHandle (hObject=0x168) returned 1
	[0147.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg")) returned 0x20
	[0147.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg")) returned 0x20
	[0147.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0302953.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0302953.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.191] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19844) returned 1
	[0147.191] CloseHandle (hObject=0x168) returned 1
	[0147.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf")) returned 0x20
	[0147.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf")) returned 0x20
	[0147.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0304933.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0304933.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.192] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23280) returned 1
	[0147.193] CloseHandle (hObject=0x1f0) returned 1
	[0147.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf")) returned 0x20
	[0147.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf")) returned 0x20
	[0147.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305257.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305257.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.194] SetEvent (hEvent=0xfc) returned 1
	[0147.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.194] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13170) returned 1
	[0147.194] CloseHandle (hObject=0x1f0) returned 1
	[0147.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf")) returned 0x20
	[0147.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf")) returned 0x20
	[0147.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0305493.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0305493.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.195] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24804) returned 1
	[0147.195] CloseHandle (hObject=0x1f0) returned 1
	[0147.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg")) returned 0x20
	[0147.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg")) returned 0x20
	[0147.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0315447.JPG" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0315447.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.196] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20840) returned 1
	[0147.196] CloseHandle (hObject=0x1f0) returned 1
	[0147.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf")) returned 0x20
	[0147.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf")) returned 0x20
	[0147.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332268.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332268.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.198] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18370) returned 1
	[0147.198] CloseHandle (hObject=0x1f0) returned 1
	[0147.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf")) returned 0x20
	[0147.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf")) returned 0x20
	[0147.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0332364.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0332364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.198] SetEvent (hEvent=0xfc) returned 1
	[0147.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.198] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8036) returned 1
	[0147.199] CloseHandle (hObject=0x1f0) returned 1
	[0147.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf")) returned 0x20
	[0147.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf")) returned 0x20
	[0147.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0335112.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0335112.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.199] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52890) returned 1
	[0147.199] CloseHandle (hObject=0x1f0) returned 1
	[0147.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf")) returned 0x20
	[0147.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf")) returned 0x20
	[0147.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0336075.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0336075.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.200] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312376) returned 1
	[0147.200] CloseHandle (hObject=0x1f0) returned 1
	[0147.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml")) returned 0x20
	[0147.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml")) returned 0x20
	[0147.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\OFFICE10.MML" (normalized: "c:\\program files\\microsoft office\\media\\office14\\1033\\office10.mml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\AUTOSHAP.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\autoshap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.202] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15776) returned 1
	[0147.202] CloseHandle (hObject=0x1f0) returned 1
	[0147.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\AUTOSHAP.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\autoshap.dll")) returned 0x20
	[0147.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\AUTOSHAP.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\autoshap.dll")) returned 0x20
	[0147.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\AUTOSHAP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\autoshap.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\AUTOSHAP.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\autoshap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.204] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2342) returned 1
	[0147.204] CloseHandle (hObject=0x168) returned 1
	[0147.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf")) returned 0x20
	[0147.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf")) returned 0x20
	[0147.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18180_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.204] SetEvent (hEvent=0xfc) returned 1
	[0147.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.205] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2862) returned 1
	[0147.206] CloseHandle (hObject=0x168) returned 1
	[0147.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf")) returned 0x20
	[0147.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf")) returned 0x20
	[0147.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18181_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.208] SetEvent (hEvent=0xfc) returned 1
	[0147.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.208] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3166) returned 1
	[0147.208] CloseHandle (hObject=0x168) returned 1
	[0147.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf")) returned 0x20
	[0147.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf")) returned 0x20
	[0147.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18182_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.209] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3362) returned 1
	[0147.209] CloseHandle (hObject=0x168) returned 1
	[0147.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf")) returned 0x20
	[0147.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf")) returned 0x20
	[0147.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18184_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.210] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3394) returned 1
	[0147.210] CloseHandle (hObject=0x168) returned 1
	[0147.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf")) returned 0x20
	[0147.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf")) returned 0x20
	[0147.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18185_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18185_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.211] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1880) returned 1
	[0147.211] CloseHandle (hObject=0x1f0) returned 1
	[0147.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf")) returned 0x20
	[0147.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf")) returned 0x20
	[0147.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18187_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18187_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.212] SetEvent (hEvent=0xfc) returned 1
	[0147.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.214] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2432) returned 1
	[0147.214] CloseHandle (hObject=0x1f0) returned 1
	[0147.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf")) returned 0x20
	[0147.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf")) returned 0x20
	[0147.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18189_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18189_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.215] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2452) returned 1
	[0147.215] CloseHandle (hObject=0x1f0) returned 1
	[0147.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf")) returned 0x20
	[0147.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf")) returned 0x20
	[0147.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18190_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18190_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.215] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3230) returned 1
	[0147.216] CloseHandle (hObject=0x1f0) returned 1
	[0147.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf")) returned 0x20
	[0147.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf")) returned 0x20
	[0147.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18191_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.217] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8296) returned 1
	[0147.217] CloseHandle (hObject=0x168) returned 1
	[0147.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf")) returned 0x20
	[0147.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf")) returned 0x20
	[0147.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18192_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18192_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.218] SetEvent (hEvent=0xfc) returned 1
	[0147.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.218] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4750) returned 1
	[0147.218] CloseHandle (hObject=0x168) returned 1
	[0147.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf")) returned 0x20
	[0147.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf")) returned 0x20
	[0147.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18193_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18193_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.219] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3550) returned 1
	[0147.219] CloseHandle (hObject=0x168) returned 1
	[0147.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf")) returned 0x20
	[0147.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf")) returned 0x20
	[0147.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18194_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.220] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1444) returned 1
	[0147.220] CloseHandle (hObject=0x168) returned 1
	[0147.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf")) returned 0x20
	[0147.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf")) returned 0x20
	[0147.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18196_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.222] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1460) returned 1
	[0147.222] CloseHandle (hObject=0x168) returned 1
	[0147.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf")) returned 0x20
	[0147.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf")) returned 0x20
	[0147.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18197_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18197_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.222] SetEvent (hEvent=0xfc) returned 1
	[0147.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.222] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1476) returned 1
	[0147.223] CloseHandle (hObject=0x168) returned 1
	[0147.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf")) returned 0x20
	[0147.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf")) returned 0x20
	[0147.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18198_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18198_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.223] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3132) returned 1
	[0147.223] CloseHandle (hObject=0x168) returned 1
	[0147.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf")) returned 0x20
	[0147.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf")) returned 0x20
	[0147.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18199_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18199_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.326] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1564) returned 1
	[0147.327] CloseHandle (hObject=0x1f8) returned 1
	[0147.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf")) returned 0x20
	[0147.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf")) returned 0x20
	[0147.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18200_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.327] SetEvent (hEvent=0xfc) returned 1
	[0147.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.327] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1388) returned 1
	[0147.328] CloseHandle (hObject=0x1f8) returned 1
	[0147.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf")) returned 0x20
	[0147.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf")) returned 0x20
	[0147.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18202_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.328] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2082) returned 1
	[0147.328] CloseHandle (hObject=0x1f8) returned 1
	[0147.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf")) returned 0x20
	[0147.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf")) returned 0x20
	[0147.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18203_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18203_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.329] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2068) returned 1
	[0147.329] CloseHandle (hObject=0x1f8) returned 1
	[0147.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf")) returned 0x20
	[0147.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf")) returned 0x20
	[0147.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18204_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18204_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.331] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2266) returned 1
	[0147.331] CloseHandle (hObject=0x168) returned 1
	[0147.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf")) returned 0x20
	[0147.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf")) returned 0x20
	[0147.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18205_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18205_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.332] SetEvent (hEvent=0xfc) returned 1
	[0147.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.332] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2266) returned 1
	[0147.332] CloseHandle (hObject=0x168) returned 1
	[0147.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf")) returned 0x20
	[0147.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf")) returned 0x20
	[0147.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18206_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.333] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4028) returned 1
	[0147.333] CloseHandle (hObject=0x168) returned 1
	[0147.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf")) returned 0x20
	[0147.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf")) returned 0x20
	[0147.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18207_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18207_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.334] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6952) returned 1
	[0147.334] CloseHandle (hObject=0x168) returned 1
	[0147.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf")) returned 0x20
	[0147.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf")) returned 0x20
	[0147.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18208_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18208_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.480] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3182) returned 1
	[0147.480] CloseHandle (hObject=0x1f8) returned 1
	[0147.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf")) returned 0x20
	[0147.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf")) returned 0x20
	[0147.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18209_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18209_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.481] SetEvent (hEvent=0xfc) returned 1
	[0147.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.481] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2082) returned 1
	[0147.481] CloseHandle (hObject=0x1f8) returned 1
	[0147.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf")) returned 0x20
	[0147.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf")) returned 0x20
	[0147.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18243_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18243_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.482] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1772) returned 1
	[0147.482] CloseHandle (hObject=0x1f8) returned 1
	[0147.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf")) returned 0x20
	[0147.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf")) returned 0x20
	[0147.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18244_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18244_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.483] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3746) returned 1
	[0147.484] CloseHandle (hObject=0x1f8) returned 1
	[0147.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf")) returned 0x20
	[0147.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf")) returned 0x20
	[0147.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18245_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18245_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.486] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2600) returned 1
	[0147.486] CloseHandle (hObject=0x1f8) returned 1
	[0147.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf")) returned 0x20
	[0147.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf")) returned 0x20
	[0147.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18246_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18246_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.487] SetEvent (hEvent=0xfc) returned 1
	[0147.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.487] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3432) returned 1
	[0147.487] CloseHandle (hObject=0x1f8) returned 1
	[0147.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf")) returned 0x20
	[0147.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf")) returned 0x20
	[0147.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18247_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.489] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3440) returned 1
	[0147.489] CloseHandle (hObject=0x1f8) returned 1
	[0147.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf")) returned 0x20
	[0147.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf")) returned 0x20
	[0147.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18248_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.490] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2212) returned 1
	[0147.490] CloseHandle (hObject=0x1f8) returned 1
	[0147.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf")) returned 0x20
	[0147.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf")) returned 0x20
	[0147.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18249_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18249_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.492] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5166) returned 1
	[0147.492] CloseHandle (hObject=0x1f8) returned 1
	[0147.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf")) returned 0x20
	[0147.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf")) returned 0x20
	[0147.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18250_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18250_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.493] SetEvent (hEvent=0xfc) returned 1
	[0147.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.493] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2316) returned 1
	[0147.493] CloseHandle (hObject=0x1f8) returned 1
	[0147.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf")) returned 0x20
	[0147.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf")) returned 0x20
	[0147.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18251_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.494] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1878) returned 1
	[0147.494] CloseHandle (hObject=0x1f8) returned 1
	[0147.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf")) returned 0x20
	[0147.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf")) returned 0x20
	[0147.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18252_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.495] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1708) returned 1
	[0147.495] CloseHandle (hObject=0x1f8) returned 1
	[0147.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf")) returned 0x20
	[0147.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf")) returned 0x20
	[0147.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18253_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18253_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.498] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1942) returned 1
	[0147.498] CloseHandle (hObject=0x1f8) returned 1
	[0147.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf")) returned 0x20
	[0147.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf")) returned 0x20
	[0147.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18254_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.498] SetEvent (hEvent=0xfc) returned 1
	[0147.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.499] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2082) returned 1
	[0147.499] CloseHandle (hObject=0x1f8) returned 1
	[0147.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf")) returned 0x20
	[0147.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf")) returned 0x20
	[0147.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18255_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.500] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2220) returned 1
	[0147.500] CloseHandle (hObject=0x1f8) returned 1
	[0147.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf")) returned 0x20
	[0147.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf")) returned 0x20
	[0147.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18256_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.501] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4842) returned 1
	[0147.501] CloseHandle (hObject=0x1f8) returned 1
	[0147.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf")) returned 0x20
	[0147.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf")) returned 0x20
	[0147.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18257_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18257_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.505] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2407) returned 1
	[0147.505] CloseHandle (hObject=0x168) returned 1
	[0147.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif")) returned 0x20
	[0147.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif")) returned 0x20
	[0147.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10253_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10253_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.506] SetEvent (hEvent=0xfc) returned 1
	[0147.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.506] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=240) returned 1
	[0147.506] CloseHandle (hObject=0x168) returned 1
	[0147.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif")) returned 0x20
	[0147.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif")) returned 0x20
	[0147.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10254_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10254_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.507] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=234) returned 1
	[0147.507] CloseHandle (hObject=0x168) returned 1
	[0147.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif")) returned 0x20
	[0147.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif")) returned 0x20
	[0147.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10255_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10255_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.600] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=663) returned 1
	[0147.600] CloseHandle (hObject=0x200) returned 1
	[0147.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif")) returned 0x20
	[0147.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif")) returned 0x20
	[0147.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10263_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10263_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.601] SetEvent (hEvent=0xfc) returned 1
	[0147.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.725] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=308) returned 1
	[0147.725] CloseHandle (hObject=0x200) returned 1
	[0147.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif")) returned 0x20
	[0147.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif")) returned 0x20
	[0147.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10265_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10265_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.725] SetEvent (hEvent=0xfc) returned 1
	[0147.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.726] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=185) returned 1
	[0147.726] CloseHandle (hObject=0x200) returned 1
	[0147.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif")) returned 0x20
	[0147.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif")) returned 0x20
	[0147.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14654_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14654_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.727] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=173) returned 1
	[0147.727] CloseHandle (hObject=0x200) returned 1
	[0147.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif")) returned 0x20
	[0147.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif")) returned 0x20
	[0147.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14655_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14655_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.728] SetEvent (hEvent=0xfc) returned 1
	[0147.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.729] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=173) returned 1
	[0147.729] CloseHandle (hObject=0x200) returned 1
	[0147.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif")) returned 0x20
	[0147.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif")) returned 0x20
	[0147.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14656_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14656_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.729] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=185) returned 1
	[0147.730] CloseHandle (hObject=0x200) returned 1
	[0147.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif")) returned 0x20
	[0147.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif")) returned 0x20
	[0147.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14691_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14691_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.867] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=177) returned 1
	[0147.867] CloseHandle (hObject=0x200) returned 1
	[0147.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif")) returned 0x20
	[0147.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif")) returned 0x20
	[0147.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14692_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14692_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.868] SetEvent (hEvent=0xfc) returned 1
	[0147.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.868] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=254) returned 1
	[0147.868] CloseHandle (hObject=0x200) returned 1
	[0147.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif")) returned 0x20
	[0147.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif")) returned 0x20
	[0147.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15019_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15019_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.869] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=99) returned 1
	[0147.869] CloseHandle (hObject=0x200) returned 1
	[0147.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif")) returned 0x20
	[0147.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif")) returned 0x20
	[0147.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15020_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15020_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.870] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=74) returned 1
	[0147.870] CloseHandle (hObject=0x200) returned 1
	[0147.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif")) returned 0x20
	[0147.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif")) returned 0x20
	[0147.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15021_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.872] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97) returned 1
	[0147.872] CloseHandle (hObject=0x200) returned 1
	[0147.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif")) returned 0x20
	[0147.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif")) returned 0x20
	[0147.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15022_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15022_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.872] SetEvent (hEvent=0xfc) returned 1
	[0147.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.873] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=122) returned 1
	[0147.873] CloseHandle (hObject=0x200) returned 1
	[0147.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif")) returned 0x20
	[0147.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif")) returned 0x20
	[0147.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15023_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15023_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.874] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=218) returned 1
	[0147.874] CloseHandle (hObject=0x200) returned 1
	[0147.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif")) returned 0x20
	[0147.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif")) returned 0x20
	[0147.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15056_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15056_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.875] SetEvent (hEvent=0xfc) returned 1
	[0147.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.875] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=218) returned 1
	[0147.875] CloseHandle (hObject=0x200) returned 1
	[0147.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif")) returned 0x20
	[0147.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif")) returned 0x20
	[0147.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15057_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.876] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=199) returned 1
	[0147.876] CloseHandle (hObject=0x200) returned 1
	[0147.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif")) returned 0x20
	[0147.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif")) returned 0x20
	[0147.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15058_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15058_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.877] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=170) returned 1
	[0147.877] CloseHandle (hObject=0x200) returned 1
	[0147.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif")) returned 0x20
	[0147.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif")) returned 0x20
	[0147.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15059_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15059_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.021] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=120) returned 1
	[0148.022] CloseHandle (hObject=0x200) returned 1
	[0148.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif")) returned 0x20
	[0148.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif")) returned 0x20
	[0148.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15060_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15060_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.022] SetEvent (hEvent=0xfc) returned 1
	[0148.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.023] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=257) returned 1
	[0148.023] CloseHandle (hObject=0x200) returned 1
	[0148.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif")) returned 0x20
	[0148.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif")) returned 0x20
	[0148.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21312_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21312_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.024] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=69) returned 1
	[0148.024] CloseHandle (hObject=0x200) returned 1
	[0148.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif")) returned 0x20
	[0148.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif")) returned 0x20
	[0148.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21314_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21314_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.025] SetEvent (hEvent=0xfc) returned 1
	[0148.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.025] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=275) returned 1
	[0148.025] CloseHandle (hObject=0x200) returned 1
	[0148.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif")) returned 0x20
	[0148.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif")) returned 0x20
	[0148.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21316_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21316_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.027] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=174) returned 1
	[0148.027] CloseHandle (hObject=0x200) returned 1
	[0148.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif")) returned 0x20
	[0148.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif")) returned 0x20
	[0148.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21327_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21327_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.027] SetEvent (hEvent=0xfc) returned 1
	[0148.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.028] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=305) returned 1
	[0148.028] CloseHandle (hObject=0x200) returned 1
	[0148.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif")) returned 0x20
	[0148.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif")) returned 0x20
	[0148.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21329_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21329_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0148.177] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1120) returned 1
	[0148.178] CloseHandle (hObject=0x204) returned 1
	[0148.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif")) returned 0x20
	[0148.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif")) returned 0x20
	[0148.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21331_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21331_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.178] SetEvent (hEvent=0xfc) returned 1
	[0148.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.259] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=176) returned 1
	[0148.259] CloseHandle (hObject=0x168) returned 1
	[0148.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif")) returned 0x20
	[0148.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif")) returned 0x20
	[0148.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21520_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21520_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.260] SetEvent (hEvent=0xfc) returned 1
	[0148.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.260] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=240) returned 1
	[0148.261] CloseHandle (hObject=0x168) returned 1
	[0148.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif")) returned 0x20
	[0148.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif")) returned 0x20
	[0148.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21534_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21534_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.262] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=299) returned 1
	[0148.262] CloseHandle (hObject=0x168) returned 1
	[0148.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif")) returned 0x20
	[0148.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif")) returned 0x20
	[0148.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21535_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21535_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.262] SetEvent (hEvent=0xfc) returned 1
	[0148.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BULLETS.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bullets.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0148.396] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15264) returned 1
	[0148.396] CloseHandle (hObject=0x1f8) returned 1
	[0148.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BULLETS.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bullets.dll")) returned 0x20
	[0148.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BULLETS.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bullets.dll")) returned 0x20
	[0148.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BULLETS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bullets.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BULLETS.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bullets.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.397] SetEvent (hEvent=0xfc) returned 1
	[0148.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0148.397] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=316) returned 1
	[0148.397] CloseHandle (hObject=0x1f8) returned 1
	[0148.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif")) returned 0x20
	[0148.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif")) returned 0x20
	[0148.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14844_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14844_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.398] SetEvent (hEvent=0xfc) returned 1
	[0148.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0148.398] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=279) returned 1
	[0148.398] CloseHandle (hObject=0x1f8) returned 1
	[0148.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif")) returned 0x20
	[0148.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif")) returned 0x20
	[0148.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14845_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14845_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.399] SetEvent (hEvent=0xfc) returned 1
	[0148.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0148.400] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=381) returned 1
	[0148.400] CloseHandle (hObject=0x1f8) returned 1
	[0148.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif")) returned 0x20
	[0148.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif")) returned 0x20
	[0148.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14882_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14882_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.400] SetEvent (hEvent=0xfc) returned 1
	[0148.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0148.401] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=324) returned 1
	[0148.401] CloseHandle (hObject=0x1f8) returned 1
	[0148.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif")) returned 0x20
	[0148.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif")) returned 0x20
	[0148.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14883_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14883_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.403] SetEvent (hEvent=0xfc) returned 1
	[0148.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0148.404] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=727) returned 1
	[0148.404] CloseHandle (hObject=0x1f8) returned 1
	[0148.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif")) returned 0x20
	[0148.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif")) returned 0x20
	[0148.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14996_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14996_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.404] SetEvent (hEvent=0xfc) returned 1
	[0148.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0148.405] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=686) returned 1
	[0148.405] CloseHandle (hObject=0x1f8) returned 1
	[0148.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif")) returned 0x20
	[0148.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif")) returned 0x20
	[0148.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14997_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14997_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.405] SetEvent (hEvent=0xfc) returned 1
	[0148.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0148.406] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=544) returned 1
	[0148.406] CloseHandle (hObject=0x1f8) returned 1
	[0148.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif")) returned 0x20
	[0148.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif")) returned 0x20
	[0148.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15034_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15034_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.406] SetEvent (hEvent=0xfc) returned 1
	[0148.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0148.407] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=366) returned 1
	[0148.407] CloseHandle (hObject=0x1f8) returned 1
	[0148.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif")) returned 0x20
	[0148.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif")) returned 0x20
	[0148.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15035_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15035_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.407] SetEvent (hEvent=0xfc) returned 1
	[0148.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0148.408] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=423) returned 1
	[0148.408] CloseHandle (hObject=0x1f8) returned 1
	[0148.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif")) returned 0x20
	[0148.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif")) returned 0x20
	[0148.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15072_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15072_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.408] SetEvent (hEvent=0xfc) returned 1
	[0148.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0148.409] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=390) returned 1
	[0148.409] CloseHandle (hObject=0x1f8) returned 1
	[0148.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif")) returned 0x20
	[0148.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif")) returned 0x20
	[0148.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15073_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15073_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.409] SetEvent (hEvent=0xfc) returned 1
	[0148.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0148.410] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=277) returned 1
	[0148.410] CloseHandle (hObject=0x1f8) returned 1
	[0148.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif")) returned 0x20
	[0148.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif")) returned 0x20
	[0148.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15155_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15155_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.410] SetEvent (hEvent=0xfc) returned 1
	[0148.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.535] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=323) returned 1
	[0148.535] CloseHandle (hObject=0x168) returned 1
	[0148.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif")) returned 0x20
	[0148.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif")) returned 0x20
	[0148.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15156_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15156_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.536] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=350) returned 1
	[0148.536] CloseHandle (hObject=0x168) returned 1
	[0148.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif")) returned 0x20
	[0148.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif")) returned 0x20
	[0148.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115876.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115876.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\LINES.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\lines.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.637] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15256) returned 1
	[0148.637] CloseHandle (hObject=0x200) returned 1
	[0148.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\LINES.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\lines.dll")) returned 0x20
	[0148.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\LINES.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\lines.dll")) returned 0x20
	[0148.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\LINES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\lines.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\LINES.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\lines.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.638] SetEvent (hEvent=0xfc) returned 1
	[0148.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.725] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=495616) returned 1
	[0148.725] CloseHandle (hObject=0x200) returned 1
	[0148.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc")) returned 0x20
	[0148.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc")) returned 0x20
	[0148.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\access12.acc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.725] SetEvent (hEvent=0xfc) returned 1
	[0148.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCOLKI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accolki.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.850] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13240) returned 1
	[0148.850] CloseHandle (hObject=0x200) returned 1
	[0148.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCOLKI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accolki.dll")) returned 0x20
	[0148.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCOLKI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accolki.dll")) returned 0x20
	[0148.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCOLKI.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accolki.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCOLKI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accolki.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.850] SetEvent (hEvent=0xfc) returned 1
	[0148.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.989] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=164216) returned 1
	[0148.989] CloseHandle (hObject=0x200) returned 1
	[0148.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl")) returned 0x20
	[0148.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl")) returned 0x20
	[0148.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbwiz.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.989] SetEvent (hEvent=0xfc) returned 1
	[0148.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.990] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114688) returned 1
	[0148.990] CloseHandle (hObject=0x200) returned 1
	[0148.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla")) returned 0x20
	[0148.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla")) returned 0x20
	[0148.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.xla"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0149.287] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81768) returned 1
	[0149.288] CloseHandle (hObject=0x168) returned 1
	[0149.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl")) returned 0x20
	[0149.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl")) returned 0x20
	[0149.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\facility.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.398] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=890) returned 1
	[0149.399] CloseHandle (hObject=0x204) returned 1
	[0149.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif")) returned 0x20
	[0149.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif")) returned 0x20
	[0149.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_choosefont.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.909] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=364) returned 1
	[0149.909] CloseHandle (hObject=0x204) returned 1
	[0149.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif")) returned 0x20
	[0149.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif")) returned 0x20
	[0149.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.910] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3519) returned 1
	[0149.910] CloseHandle (hObject=0x204) returned 1
	[0149.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css")) returned 0x20
	[0149.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css")) returned 0x20
	[0149.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.911] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1870) returned 1
	[0149.911] CloseHandle (hObject=0x204) returned 1
	[0149.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css")) returned 0x20
	[0149.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css")) returned 0x20
	[0149.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.521] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6906) returned 1
	[0150.521] CloseHandle (hObject=0x204) returned 1
	[0150.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif")) returned 0x20
	[0150.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif")) returned 0x20
	[0150.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.522] SetEvent (hEvent=0xfc) returned 1
	[0150.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.610] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0150.611] CloseHandle (hObject=0x204) returned 1
	[0150.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20
	[0150.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20
	[0150.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.611] SetEvent (hEvent=0xfc) returned 1
	[0150.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.611] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0150.611] CloseHandle (hObject=0x204) returned 1
	[0150.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20
	[0150.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20
	[0150.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.612] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3329) returned 1
	[0150.612] CloseHandle (hObject=0x204) returned 1
	[0150.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css")) returned 0x20
	[0150.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css")) returned 0x20
	[0150.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.613] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2558) returned 1
	[0150.613] CloseHandle (hObject=0x204) returned 1
	[0150.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css")) returned 0x20
	[0150.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css")) returned 0x20
	[0150.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.002] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=233) returned 1
	[0151.002] CloseHandle (hObject=0x140) returned 1
	[0151.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif")) returned 0x20
	[0151.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif")) returned 0x20
	[0151.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.003] SetEvent (hEvent=0xfc) returned 1
	[0151.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.235] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27027) returned 1
	[0151.235] CloseHandle (hObject=0x140) returned 1
	[0151.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif")) returned 0x20
	[0151.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif")) returned 0x20
	[0151.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.236] SetEvent (hEvent=0xfc) returned 1
	[0151.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.236] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0151.236] CloseHandle (hObject=0x140) returned 1
	[0151.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif")) returned 0x20
	[0151.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif")) returned 0x20
	[0151.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.237] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0151.237] CloseHandle (hObject=0x140) returned 1
	[0151.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif")) returned 0x20
	[0151.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif")) returned 0x20
	[0151.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.238] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3332) returned 1
	[0151.238] CloseHandle (hObject=0x140) returned 1
	[0151.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css")) returned 0x20
	[0151.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css")) returned 0x20
	[0151.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.241] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1852) returned 1
	[0151.241] CloseHandle (hObject=0x140) returned 1
	[0151.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css")) returned 0x20
	[0151.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css")) returned 0x20
	[0151.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.241] SetEvent (hEvent=0xfc) returned 1
	[0151.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.241] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1831) returned 1
	[0151.242] CloseHandle (hObject=0x140) returned 1
	[0151.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css")) returned 0x20
	[0151.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css")) returned 0x20
	[0151.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.242] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1842) returned 1
	[0151.242] CloseHandle (hObject=0x140) returned 1
	[0151.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css")) returned 0x20
	[0151.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css")) returned 0x20
	[0151.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveintlresource.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.243] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8794976) returned 1
	[0151.243] CloseHandle (hObject=0x140) returned 1
	[0151.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveintlresource.dll")) returned 0x20
	[0151.243] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveintlresource.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveIntlResource.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveintlresource.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.244] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveIntlResource.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveintlresource.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveintlresource.dll")) returned 0
	[0151.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.245] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=626) returned 1
	[0151.245] CloseHandle (hObject=0x140) returned 1
	[0151.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc")) returned 0x20
	[0151.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc")) returned 0x20
	[0151.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.245] SetEvent (hEvent=0xfc) returned 1
	[0151.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.246] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=218) returned 1
	[0151.246] CloseHandle (hObject=0x140) returned 1
	[0151.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt")) returned 0x20
	[0151.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt")) returned 0x20
	[0151.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.247] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=111) returned 1
	[0151.247] CloseHandle (hObject=0x140) returned 1
	[0151.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk")) returned 0x20
	[0151.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk")) returned 0x20
	[0151.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.247] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=110) returned 1
	[0151.248] CloseHandle (hObject=0x140) returned 1
	[0151.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk")) returned 0x20
	[0151.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk")) returned 0x20
	[0151.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.249] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36200) returned 1
	[0151.249] CloseHandle (hObject=0x140) returned 1
	[0151.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl")) returned 0x20
	[0151.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl")) returned 0x20
	[0151.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvac.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.249] SetEvent (hEvent=0xfc) returned 1
	[0151.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.253] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1919) returned 1
	[0151.253] CloseHandle (hObject=0x140) returned 1
	[0151.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd")) returned 0x20
	[0151.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd")) returned 0x20
	[0151.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacdiff.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.253] SetEvent (hEvent=0xfc) returned 1
	[0151.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.254] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1309) returned 1
	[0151.254] CloseHandle (hObject=0x140) returned 1
	[0151.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd")) returned 0x20
	[0151.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd")) returned 0x20
	[0151.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\hvacduct.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.255] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=481168) returned 1
	[0151.255] CloseHandle (hObject=0x140) returned 1
	[0151.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infintl.dll")) returned 0x20
	[0151.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infintl.dll")) returned 0x20
	[0151.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.256] SetEvent (hEvent=0xfc) returned 1
	[0151.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.256] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1527046) returned 1
	[0151.256] CloseHandle (hObject=0x140) returned 1
	[0151.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs")) returned 0x20
	[0151.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs")) returned 0x20
	[0151.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.257] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=432098) returned 1
	[0151.257] CloseHandle (hObject=0x140) returned 1
	[0151.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs")) returned 0x20
	[0151.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs")) returned 0x20
	[0151.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.258] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=666) returned 1
	[0151.258] CloseHandle (hObject=0x140) returned 1
	[0151.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc")) returned 0x20
	[0151.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc")) returned 0x20
	[0151.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.260] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=214) returned 1
	[0151.260] CloseHandle (hObject=0x140) returned 1
	[0151.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt")) returned 0x20
	[0151.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt")) returned 0x20
	[0151.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.260] SetEvent (hEvent=0xfc) returned 1
	[0151.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.261] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0151.261] CloseHandle (hObject=0x140) returned 1
	[0151.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk")) returned 0x20
	[0151.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk")) returned 0x20
	[0151.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.262] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113) returned 1
	[0151.262] CloseHandle (hObject=0x140) returned 1
	[0151.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk")) returned 0x20
	[0151.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk")) returned 0x20
	[0151.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATHEDITOR_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopatheditor_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.262] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=636) returned 1
	[0151.262] CloseHandle (hObject=0x140) returned 1
	[0151.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc")) returned 0x20
	[0151.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc")) returned 0x20
	[0151.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.263] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=208) returned 1
	[0151.263] CloseHandle (hObject=0x140) returned 1
	[0151.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt")) returned 0x20
	[0151.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt")) returned 0x20
	[0151.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.264] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0151.264] CloseHandle (hObject=0x140) returned 1
	[0151.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk")) returned 0x20
	[0151.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk")) returned 0x20
	[0151.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.265] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113) returned 1
	[0151.265] CloseHandle (hObject=0x140) returned 1
	[0151.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk")) returned 0x20
	[0151.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk")) returned 0x20
	[0151.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INFOPATH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\infopath_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.269] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1899) returned 1
	[0151.269] CloseHandle (hObject=0x140) returned 1
	[0151.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd")) returned 0x20
	[0151.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd")) returned 0x20
	[0151.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\instlist.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.269] SetEvent (hEvent=0xfc) returned 1
	[0151.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.270] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=818) returned 1
	[0151.270] CloseHandle (hObject=0x140) returned 1
	[0151.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd")) returned 0x20
	[0151.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd")) returned 0x20
	[0151.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\inventry.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.271] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11208) returned 1
	[0151.271] CloseHandle (hObject=0x140) returned 1
	[0151.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one")) returned 0x20
	[0151.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one")) returned 0x20
	[0151.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\invite or link.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.272] SetEvent (hEvent=0xfc) returned 1
	[0151.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPDSINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipdsintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.272] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2270608) returned 1
	[0151.272] CloseHandle (hObject=0x140) returned 1
	[0151.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPDSINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipdsintl.dll")) returned 0x20
	[0151.272] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPDSINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipdsintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPDSINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipdsintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.273] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPDSINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipdsintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPDSINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipdsintl.dll")) returned 0
	[0151.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPEDINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipedintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.273] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=883600) returned 1
	[0151.273] CloseHandle (hObject=0x140) returned 1
	[0151.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPEDINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipedintl.dll")) returned 0x20
	[0151.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPEDINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipedintl.dll")) returned 0x20
	[0151.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPEDINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipedintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPEDINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipedintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPOLKINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipolkintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.274] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=255920) returned 1
	[0151.274] CloseHandle (hObject=0x140) returned 1
	[0151.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPOLKINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipolkintl.dll")) returned 0x20
	[0151.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPOLKINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipolkintl.dll")) returned 0x20
	[0151.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPOLKINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipolkintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\IPOLKINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ipolkintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.275] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=249535) returned 1
	[0151.275] CloseHandle (hObject=0x140) returned 1
	[0151.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta")) returned 0x20
	[0151.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta")) returned 0x20
	[0151.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Issue Tracking.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\issue tracking.gta"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.375] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3450) returned 1
	[0151.375] CloseHandle (hObject=0x140) returned 1
	[0151.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css")) returned 0x20
	[0151.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css")) returned 0x20
	[0151.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\jade.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.376] SetEvent (hEvent=0xfc) returned 1
	[0151.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.500] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1124720) returned 1
	[0151.500] CloseHandle (hObject=0x1f4) returned 1
	[0151.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll")) returned 0x20
	[0151.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll")) returned 0x20
	[0151.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.501] SetEvent (hEvent=0xfc) returned 1
	[0151.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.501] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=431456) returned 1
	[0151.501] CloseHandle (hObject=0x1f4) returned 1
	[0151.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs")) returned 0x20
	[0151.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs")) returned 0x20
	[0151.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.502] SetEvent (hEvent=0xfc) returned 1
	[0151.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.503] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=621) returned 1
	[0151.504] CloseHandle (hObject=0x140) returned 1
	[0151.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc")) returned 0x20
	[0151.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc")) returned 0x20
	[0151.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.504] SetEvent (hEvent=0xfc) returned 1
	[0151.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.505] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=205) returned 1
	[0151.505] CloseHandle (hObject=0x140) returned 1
	[0151.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt")) returned 0x20
	[0151.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt")) returned 0x20
	[0151.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.505] SetEvent (hEvent=0xfc) returned 1
	[0151.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.506] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0151.506] CloseHandle (hObject=0x140) returned 1
	[0151.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_f_col.hxk")) returned 0x20
	[0151.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_f_col.hxk")) returned 0x20
	[0151.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.507] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113) returned 1
	[0151.507] CloseHandle (hObject=0x140) returned 1
	[0151.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_k_col.hxk")) returned 0x20
	[0151.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_k_col.hxk")) returned 0x20
	[0151.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msouc_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.508] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4750792) returned 1
	[0151.508] CloseHandle (hObject=0x140) returned 1
	[0151.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs")) returned 0x20
	[0151.508] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.508] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev.hxs")) returned 0
	[0151.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.530] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=641) returned 1
	[0151.530] CloseHandle (hObject=0x140) returned 1
	[0151.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc")) returned 0x20
	[0151.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc")) returned 0x20
	[0151.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.531] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=209) returned 1
	[0151.532] CloseHandle (hObject=0x140) returned 1
	[0151.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt")) returned 0x20
	[0151.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt")) returned 0x20
	[0151.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.532] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0151.532] CloseHandle (hObject=0x140) returned 1
	[0151.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk")) returned 0x20
	[0151.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk")) returned 0x20
	[0151.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.533] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113) returned 1
	[0151.533] CloseHandle (hObject=0x140) returned 1
	[0151.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk")) returned 0x20
	[0151.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk")) returned 0x20
	[0151.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.534] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1886518) returned 1
	[0151.534] CloseHandle (hObject=0x140) returned 1
	[0151.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs")) returned 0x20
	[0151.534] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.535] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.hxs")) returned 0
	[0151.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.640] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12024) returned 1
	[0151.640] CloseHandle (hObject=0x140) returned 1
	[0151.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg")) returned 0x20
	[0151.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg")) returned 0x20
	[0151.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub.opg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.642] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1844) returned 1
	[0151.642] CloseHandle (hObject=0x140) returned 1
	[0151.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd")) returned 0x20
	[0151.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd")) returned 0x20
	[0151.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network1.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.642] SetEvent (hEvent=0xfc) returned 1
	[0151.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.643] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2150) returned 1
	[0151.643] CloseHandle (hObject=0x140) returned 1
	[0151.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd")) returned 0x20
	[0151.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd")) returned 0x20
	[0151.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network2.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.644] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3246) returned 1
	[0151.644] CloseHandle (hObject=0x140) returned 1
	[0151.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd")) returned 0x20
	[0151.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd")) returned 0x20
	[0151.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network3.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.645] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1128) returned 1
	[0151.645] CloseHandle (hObject=0x140) returned 1
	[0151.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml")) returned 0x20
	[0151.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml")) returned 0x20
	[0151.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\occmpvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.646] SetEvent (hEvent=0xfc) returned 1
	[0151.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.646] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1068) returned 1
	[0151.646] CloseHandle (hObject=0x140) returned 1
	[0151.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml")) returned 0x20
	[0151.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml")) returned 0x20
	[0151.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ocmodvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\offowci.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.648] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=529280) returned 1
	[0151.648] CloseHandle (hObject=0x140) returned 1
	[0151.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\offowci.dll")) returned 0x20
	[0151.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\offowci.dll")) returned 0x20
	[0151.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\offowci.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OFFOWCI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\offowci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.649] SetEvent (hEvent=0xfc) returned 1
	[0151.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.649] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=457988) returned 1
	[0151.649] CloseHandle (hObject=0x140) returned 1
	[0151.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois.hxs")) returned 0x20
	[0151.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois.hxs")) returned 0x20
	[0151.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\oisintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.651] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=129432) returned 1
	[0151.651] CloseHandle (hObject=0x140) returned 1
	[0151.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\oisintl.dll")) returned 0x20
	[0151.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\oisintl.dll")) returned 0x20
	[0151.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\oisintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OISINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\oisintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.651] SetEvent (hEvent=0xfc) returned 1
	[0151.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.652] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=611) returned 1
	[0151.652] CloseHandle (hObject=0x140) returned 1
	[0151.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxc")) returned 0x20
	[0151.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxc")) returned 0x20
	[0151.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.653] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=203) returned 1
	[0151.653] CloseHandle (hObject=0x140) returned 1
	[0151.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt")) returned 0x20
	[0151.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt")) returned 0x20
	[0151.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.654] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0151.654] CloseHandle (hObject=0x140) returned 1
	[0151.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_f_col.hxk")) returned 0x20
	[0151.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_f_col.hxk")) returned 0x20
	[0151.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.654] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113) returned 1
	[0151.654] CloseHandle (hObject=0x140) returned 1
	[0151.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_k_col.hxk")) returned 0x20
	[0151.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_k_col.hxk")) returned 0x20
	[0151.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OIS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ois_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.656] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=401792) returned 1
	[0151.656] CloseHandle (hObject=0x140) returned 1
	[0151.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll")) returned 0x20
	[0151.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll")) returned 0x20
	[0151.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.656] SetEvent (hEvent=0xfc) returned 1
	[0151.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.658] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24960) returned 1
	[0151.658] CloseHandle (hObject=0x140) returned 1
	[0151.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll")) returned 0x20
	[0151.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll")) returned 0x20
	[0151.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OMSINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\omsintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onelev.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.659] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57224) returned 1
	[0151.659] CloseHandle (hObject=0x140) returned 1
	[0151.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onelev.exe")) returned 0x20
	[0151.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onelev.exe")) returned 0x20
	[0151.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onelev.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONELEV.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onelev.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.660] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1750992) returned 1
	[0151.660] CloseHandle (hObject=0x140) returned 1
	[0151.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs")) returned 0x20
	[0151.660] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.660] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote.hxs")) returned 0
	[0151.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OneNoteSyncPCIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenotesyncpcintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.661] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9704) returned 1
	[0151.661] CloseHandle (hObject=0x140) returned 1
	[0151.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OneNoteSyncPCIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenotesyncpcintl.dll")) returned 0x20
	[0151.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OneNoteSyncPCIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenotesyncpcintl.dll")) returned 0x20
	[0151.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OneNoteSyncPCIntl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenotesyncpcintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OneNoteSyncPCIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenotesyncpcintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.661] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=631) returned 1
	[0151.662] CloseHandle (hObject=0x140) returned 1
	[0151.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc")) returned 0x20
	[0151.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc")) returned 0x20
	[0151.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.774] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=207) returned 1
	[0151.774] CloseHandle (hObject=0x204) returned 1
	[0151.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt")) returned 0x20
	[0151.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt")) returned 0x20
	[0151.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.775] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1098) returned 1
	[0151.775] CloseHandle (hObject=0x204) returned 1
	[0151.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd")) returned 0x20
	[0151.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd")) returned 0x20
	[0151.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgpos.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.776] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=66992) returned 1
	[0151.776] CloseHandle (hObject=0x204) returned 1
	[0151.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl")) returned 0x20
	[0151.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl")) returned 0x20
	[0151.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgwiz.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ospintl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ospintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.777] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18320) returned 1
	[0151.777] CloseHandle (hObject=0x204) returned 1
	[0151.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ospintl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ospintl.dll")) returned 0x20
	[0151.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ospintl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ospintl.dll")) returned 0x20
	[0151.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ospintl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ospintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ospintl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ospintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.778] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=93696) returned 1
	[0151.778] CloseHandle (hObject=0x204) returned 1
	[0151.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat")) returned 0x20
	[0151.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat")) returned 0x20
	[0151.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outform.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.779] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2416) returned 1
	[0151.779] CloseHandle (hObject=0x204) returned 1
	[0151.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf")) returned 0x20
	[0151.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf")) returned 0x20
	[0151.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLBAR.INF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlbar.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.780] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6573424) returned 1
	[0151.780] CloseHandle (hObject=0x204) returned 1
	[0151.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll")) returned 0x20
	[0151.780] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.781] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll")) returned 0
	[0151.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.781] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=119680) returned 1
	[0151.781] CloseHandle (hObject=0x204) returned 1
	[0151.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll")) returned 0x20
	[0151.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll")) returned 0x20
	[0151.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.782] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=290688) returned 1
	[0151.782] CloseHandle (hObject=0x204) returned 1
	[0151.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll")) returned 0x20
	[0151.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll")) returned 0x20
	[0151.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLLIBR.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outllibr.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.783] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6988760) returned 1
	[0151.783] CloseHandle (hObject=0x204) returned 1
	[0151.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs")) returned 0x20
	[0151.783] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.783] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev.hxs")) returned 0
	[0151.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.784] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=651) returned 1
	[0151.784] CloseHandle (hObject=0x204) returned 1
	[0151.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc")) returned 0x20
	[0151.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc")) returned 0x20
	[0151.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.785] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=211) returned 1
	[0151.785] CloseHandle (hObject=0x204) returned 1
	[0151.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt")) returned 0x20
	[0151.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt")) returned 0x20
	[0151.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.785] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0151.785] CloseHandle (hObject=0x204) returned 1
	[0151.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk")) returned 0x20
	[0151.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk")) returned 0x20
	[0151.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.786] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113) returned 1
	[0151.786] CloseHandle (hObject=0x204) returned 1
	[0151.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk")) returned 0x20
	[0151.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk")) returned 0x20
	[0151.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.787] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1287548) returned 1
	[0151.787] CloseHandle (hObject=0x204) returned 1
	[0151.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol")) returned 0x20
	[0151.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol")) returned 0x20
	[0151.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.788] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5000295) returned 1
	[0151.788] CloseHandle (hObject=0x204) returned 1
	[0151.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs")) returned 0x20
	[0151.788] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.788] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook.hxs")) returned 0
	[0151.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.789] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=631) returned 1
	[0151.789] CloseHandle (hObject=0x204) returned 1
	[0151.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc")) returned 0x20
	[0151.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc")) returned 0x20
	[0151.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.790] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=207) returned 1
	[0151.790] CloseHandle (hObject=0x204) returned 1
	[0151.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt")) returned 0x20
	[0151.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt")) returned 0x20
	[0151.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.791] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0151.791] CloseHandle (hObject=0x204) returned 1
	[0151.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk")) returned 0x20
	[0151.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk")) returned 0x20
	[0151.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.792] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113) returned 1
	[0151.792] CloseHandle (hObject=0x204) returned 1
	[0151.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk")) returned 0x20
	[0151.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk")) returned 0x20
	[0151.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlook_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.792] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=551) returned 1
	[0151.793] CloseHandle (hObject=0x204) returned 1
	[0151.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h")) returned 0x20
	[0151.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h")) returned 0x20
	[0151.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.793] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2695) returned 1
	[0151.793] CloseHandle (hObject=0x204) returned 1
	[0151.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini")) returned 0x20
	[0151.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini")) returned 0x20
	[0151.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLPERF.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlperf.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.794] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=128864) returned 1
	[0151.794] CloseHandle (hObject=0x204) returned 1
	[0151.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll")) returned 0x20
	[0151.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll")) returned 0x20
	[0151.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.795] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11136) returned 1
	[0151.795] CloseHandle (hObject=0x204) returned 1
	[0151.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll")) returned 0x20
	[0151.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll")) returned 0x20
	[0151.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\OUTLWVW.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\outlwvw.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.797] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3450) returned 1
	[0151.797] CloseHandle (hObject=0x204) returned 1
	[0151.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css")) returned 0x20
	[0151.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css")) returned 0x20
	[0151.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\passport.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.798] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3450) returned 1
	[0151.798] CloseHandle (hObject=0x204) returned 1
	[0151.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css")) returned 0x20
	[0151.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css")) returned 0x20
	[0151.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pastel.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.801] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=84352) returned 1
	[0151.801] CloseHandle (hObject=0x140) returned 1
	[0151.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl")) returned 0x20
	[0151.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl")) returned 0x20
	[0151.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pe.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.803] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1920) returned 1
	[0151.803] CloseHandle (hObject=0x204) returned 1
	[0151.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd")) returned 0x20
	[0151.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd")) returned 0x20
	[0151.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pipeline.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.809] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3384192) returned 1
	[0151.809] CloseHandle (hObject=0x140) returned 1
	[0151.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintl.dll")) returned 0x20
	[0151.809] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.809] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintl.dll")) returned 0
	[0151.809] SetEvent (hEvent=0xfc) returned 1
	[0151.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintlc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.810] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=154496) returned 1
	[0151.810] CloseHandle (hObject=0x140) returned 1
	[0151.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintlc.dll")) returned 0x20
	[0151.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintlc.dll")) returned 0x20
	[0151.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintlc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PJINTLC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pjintlc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pmenures.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.811] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10624) returned 1
	[0151.811] CloseHandle (hObject=0x140) returned 1
	[0151.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pmenures.dll")) returned 0x20
	[0151.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pmenures.dll")) returned 0x20
	[0151.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pmenures.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PMENURES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pmenures.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.812] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5042788) returned 1
	[0151.812] CloseHandle (hObject=0x140) returned 1
	[0151.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs")) returned 0x20
	[0151.813] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.813] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev.hxs")) returned 0
	[0151.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.813] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=656) returned 1
	[0151.813] CloseHandle (hObject=0x140) returned 1
	[0151.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc")) returned 0x20
	[0151.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc")) returned 0x20
	[0151.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.814] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=212) returned 1
	[0151.814] CloseHandle (hObject=0x140) returned 1
	[0151.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt")) returned 0x20
	[0151.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt")) returned 0x20
	[0151.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.816] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0151.816] CloseHandle (hObject=0x140) returned 1
	[0151.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk")) returned 0x20
	[0151.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk")) returned 0x20
	[0151.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.817] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113) returned 1
	[0151.817] CloseHandle (hObject=0x140) returned 1
	[0151.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk")) returned 0x20
	[0151.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk")) returned 0x20
	[0151.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.818] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6816061) returned 1
	[0151.818] CloseHandle (hObject=0x140) returned 1
	[0151.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs")) returned 0x20
	[0151.818] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.818] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt.hxs")) returned 0
	[0151.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.818] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=636) returned 1
	[0151.818] CloseHandle (hObject=0x140) returned 1
	[0151.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc")) returned 0x20
	[0151.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc")) returned 0x20
	[0151.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.819] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=208) returned 1
	[0151.819] CloseHandle (hObject=0x140) returned 1
	[0151.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt")) returned 0x20
	[0151.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt")) returned 0x20
	[0151.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.820] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0151.820] CloseHandle (hObject=0x140) returned 1
	[0151.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk")) returned 0x20
	[0151.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk")) returned 0x20
	[0151.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.821] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113) returned 1
	[0151.821] CloseHandle (hObject=0x140) returned 1
	[0151.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk")) returned 0x20
	[0151.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk")) returned 0x20
	[0151.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\powerpnt_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.822] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1284456) returned 1
	[0151.822] CloseHandle (hObject=0x140) returned 1
	[0151.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll")) returned 0x20
	[0151.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll")) returned 0x20
	[0151.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.823] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38272) returned 1
	[0151.823] CloseHandle (hObject=0x140) returned 1
	[0151.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll")) returned 0x20
	[0151.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll")) returned 0x20
	[0151.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.824] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=139648) returned 1
	[0151.824] CloseHandle (hObject=0x140) returned 1
	[0151.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll")) returned 0x20
	[0151.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll")) returned 0x20
	[0151.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PPINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ppintl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.961] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3450) returned 1
	[0151.961] CloseHandle (hObject=0x140) returned 1
	[0151.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css")) returned 0x20
	[0151.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css")) returned 0x20
	[0151.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\primary.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.962] SetEvent (hEvent=0xfc) returned 1
	[0151.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.218] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=129982) returned 1
	[0152.218] CloseHandle (hObject=0x200) returned 1
	[0152.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css")) returned 0x20
	[0152.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css")) returned 0x20
	[0152.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.219] SetEvent (hEvent=0xfc) returned 1
	[0152.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.219] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=123180) returned 1
	[0152.219] CloseHandle (hObject=0x200) returned 1
	[0152.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css")) returned 0x20
	[0152.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css")) returned 0x20
	[0152.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme36.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.220] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=132540) returned 1
	[0152.220] CloseHandle (hObject=0x200) returned 1
	[0152.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css")) returned 0x20
	[0152.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css")) returned 0x20
	[0152.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme37.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.221] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=127100) returned 1
	[0152.221] CloseHandle (hObject=0x200) returned 1
	[0152.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css")) returned 0x20
	[0152.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css")) returned 0x20
	[0152.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme38.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.223] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=123980) returned 1
	[0152.223] CloseHandle (hObject=0x200) returned 1
	[0152.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css")) returned 0x20
	[0152.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css")) returned 0x20
	[0152.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme39.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.224] SetEvent (hEvent=0xfc) returned 1
	[0152.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.224] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=125770) returned 1
	[0152.224] CloseHandle (hObject=0x200) returned 1
	[0152.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css")) returned 0x20
	[0152.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css")) returned 0x20
	[0152.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme40.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.225] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=125272) returned 1
	[0152.225] CloseHandle (hObject=0x200) returned 1
	[0152.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css")) returned 0x20
	[0152.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css")) returned 0x20
	[0152.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme41.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.226] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=121120) returned 1
	[0152.226] CloseHandle (hObject=0x200) returned 1
	[0152.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css")) returned 0x20
	[0152.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css")) returned 0x20
	[0152.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme42.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.229] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=124692) returned 1
	[0152.229] CloseHandle (hObject=0x200) returned 1
	[0152.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css")) returned 0x20
	[0152.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css")) returned 0x20
	[0152.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme43.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.229] SetEvent (hEvent=0xfc) returned 1
	[0152.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.230] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=126204) returned 1
	[0152.230] CloseHandle (hObject=0x200) returned 1
	[0152.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css")) returned 0x20
	[0152.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css")) returned 0x20
	[0152.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme44.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.231] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=124582) returned 1
	[0152.231] CloseHandle (hObject=0x200) returned 1
	[0152.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css")) returned 0x20
	[0152.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css")) returned 0x20
	[0152.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme45.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.232] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=130486) returned 1
	[0152.232] CloseHandle (hObject=0x200) returned 1
	[0152.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css")) returned 0x20
	[0152.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css")) returned 0x20
	[0152.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme46.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.234] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=127376) returned 1
	[0152.234] CloseHandle (hObject=0x200) returned 1
	[0152.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css")) returned 0x20
	[0152.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css")) returned 0x20
	[0152.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme47.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.235] SetEvent (hEvent=0xfc) returned 1
	[0152.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.235] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=129412) returned 1
	[0152.235] CloseHandle (hObject=0x200) returned 1
	[0152.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css")) returned 0x20
	[0152.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css")) returned 0x20
	[0152.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme48.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.236] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=121452) returned 1
	[0152.236] CloseHandle (hObject=0x200) returned 1
	[0152.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css")) returned 0x20
	[0152.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css")) returned 0x20
	[0152.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme49.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.237] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=127000) returned 1
	[0152.237] CloseHandle (hObject=0x200) returned 1
	[0152.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css")) returned 0x20
	[0152.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css")) returned 0x20
	[0152.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme50.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.239] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=122728) returned 1
	[0152.239] CloseHandle (hObject=0x200) returned 1
	[0152.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css")) returned 0x20
	[0152.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css")) returned 0x20
	[0152.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme51.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.240] SetEvent (hEvent=0xfc) returned 1
	[0152.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.240] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=123476) returned 1
	[0152.240] CloseHandle (hObject=0x200) returned 1
	[0152.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css")) returned 0x20
	[0152.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css")) returned 0x20
	[0152.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme52.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.241] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=124580) returned 1
	[0152.241] CloseHandle (hObject=0x200) returned 1
	[0152.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css")) returned 0x20
	[0152.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css")) returned 0x20
	[0152.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme53.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.242] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=127076) returned 1
	[0152.242] CloseHandle (hObject=0x200) returned 1
	[0152.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css")) returned 0x20
	[0152.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css")) returned 0x20
	[0152.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme54.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.243] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=123156) returned 1
	[0152.243] CloseHandle (hObject=0x200) returned 1
	[0152.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css")) returned 0x20
	[0152.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css")) returned 0x20
	[0152.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme55.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.246] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6187) returned 1
	[0152.246] CloseHandle (hObject=0x200) returned 1
	[0152.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini")) returned 0x20
	[0152.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini")) returned 0x20
	[0152.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\papers.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.246] SetEvent (hEvent=0xfc) returned 1
	[0152.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.247] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15285) returned 1
	[0152.247] CloseHandle (hObject=0x200) returned 1
	[0152.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif")) returned 0x20
	[0152.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif")) returned 0x20
	[0152.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir10f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.247] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5167) returned 1
	[0152.248] CloseHandle (hObject=0x200) returned 1
	[0152.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif")) returned 0x20
	[0152.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif")) returned 0x20
	[0152.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir11f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.248] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18143) returned 1
	[0152.248] CloseHandle (hObject=0x200) returned 1
	[0152.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif")) returned 0x20
	[0152.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif")) returned 0x20
	[0152.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir12f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.250] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17165) returned 1
	[0152.251] CloseHandle (hObject=0x200) returned 1
	[0152.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif")) returned 0x20
	[0152.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif")) returned 0x20
	[0152.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir13f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.251] SetEvent (hEvent=0xfc) returned 1
	[0152.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.251] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23735) returned 1
	[0152.251] CloseHandle (hObject=0x200) returned 1
	[0152.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif")) returned 0x20
	[0152.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif")) returned 0x20
	[0152.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir14f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.252] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7352) returned 1
	[0152.252] CloseHandle (hObject=0x200) returned 1
	[0152.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif")) returned 0x20
	[0152.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif")) returned 0x20
	[0152.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir15f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.253] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14751) returned 1
	[0152.253] CloseHandle (hObject=0x200) returned 1
	[0152.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif")) returned 0x20
	[0152.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif")) returned 0x20
	[0152.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir16f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.255] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11191) returned 1
	[0152.255] CloseHandle (hObject=0x200) returned 1
	[0152.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif")) returned 0x20
	[0152.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif")) returned 0x20
	[0152.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir17f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.257] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16884) returned 1
	[0152.257] CloseHandle (hObject=0x200) returned 1
	[0152.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif")) returned 0x20
	[0152.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif")) returned 0x20
	[0152.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir18f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.259] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3151) returned 1
	[0152.259] CloseHandle (hObject=0x200) returned 1
	[0152.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif")) returned 0x20
	[0152.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif")) returned 0x20
	[0152.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir19f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.260] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3480) returned 1
	[0152.260] CloseHandle (hObject=0x200) returned 1
	[0152.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif")) returned 0x20
	[0152.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif")) returned 0x20
	[0152.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.262] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3949) returned 1
	[0152.262] CloseHandle (hObject=0x200) returned 1
	[0152.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif")) returned 0x20
	[0152.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif")) returned 0x20
	[0152.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir1f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.263] SetEvent (hEvent=0xfc) returned 1
	[0152.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.263] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13320) returned 1
	[0152.263] CloseHandle (hObject=0x200) returned 1
	[0152.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif")) returned 0x20
	[0152.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif")) returned 0x20
	[0152.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir20f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.264] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11646) returned 1
	[0152.264] CloseHandle (hObject=0x200) returned 1
	[0152.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif")) returned 0x20
	[0152.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif")) returned 0x20
	[0152.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir21f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.265] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8151) returned 1
	[0152.265] CloseHandle (hObject=0x200) returned 1
	[0152.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif")) returned 0x20
	[0152.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif")) returned 0x20
	[0152.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir22f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.267] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12603) returned 1
	[0152.267] CloseHandle (hObject=0x200) returned 1
	[0152.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif")) returned 0x20
	[0152.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif")) returned 0x20
	[0152.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir23f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.268] SetEvent (hEvent=0xfc) returned 1
	[0152.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.268] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5805) returned 1
	[0152.268] CloseHandle (hObject=0x200) returned 1
	[0152.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif")) returned 0x20
	[0152.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif")) returned 0x20
	[0152.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir24f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.269] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12679) returned 1
	[0152.269] CloseHandle (hObject=0x200) returned 1
	[0152.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif")) returned 0x20
	[0152.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif")) returned 0x20
	[0152.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir25f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.270] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6533) returned 1
	[0152.270] CloseHandle (hObject=0x200) returned 1
	[0152.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif")) returned 0x20
	[0152.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif")) returned 0x20
	[0152.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir26f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.274] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7379) returned 1
	[0152.274] CloseHandle (hObject=0x200) returned 1
	[0152.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif")) returned 0x20
	[0152.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif")) returned 0x20
	[0152.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir27f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.274] SetEvent (hEvent=0xfc) returned 1
	[0152.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.275] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1668) returned 1
	[0152.275] CloseHandle (hObject=0x200) returned 1
	[0152.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif")) returned 0x20
	[0152.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif")) returned 0x20
	[0152.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.275] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6022) returned 1
	[0152.276] CloseHandle (hObject=0x200) returned 1
	[0152.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif")) returned 0x20
	[0152.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif")) returned 0x20
	[0152.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir28f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.276] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4531) returned 1
	[0152.276] CloseHandle (hObject=0x200) returned 1
	[0152.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif")) returned 0x20
	[0152.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif")) returned 0x20
	[0152.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.279] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22972) returned 1
	[0152.279] CloseHandle (hObject=0x200) returned 1
	[0152.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif")) returned 0x20
	[0152.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif")) returned 0x20
	[0152.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir29f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.279] SetEvent (hEvent=0xfc) returned 1
	[0152.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.280] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2966) returned 1
	[0152.280] CloseHandle (hObject=0x200) returned 1
	[0152.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif")) returned 0x20
	[0152.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif")) returned 0x20
	[0152.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.281] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3955) returned 1
	[0152.281] CloseHandle (hObject=0x200) returned 1
	[0152.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif")) returned 0x20
	[0152.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif")) returned 0x20
	[0152.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir2f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.282] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13102) returned 1
	[0152.282] CloseHandle (hObject=0x200) returned 1
	[0152.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif")) returned 0x20
	[0152.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif")) returned 0x20
	[0152.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.284] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19418) returned 1
	[0152.284] CloseHandle (hObject=0x200) returned 1
	[0152.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif")) returned 0x20
	[0152.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif")) returned 0x20
	[0152.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir30f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.284] SetEvent (hEvent=0xfc) returned 1
	[0152.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.285] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2104) returned 1
	[0152.285] CloseHandle (hObject=0x200) returned 1
	[0152.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif")) returned 0x20
	[0152.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif")) returned 0x20
	[0152.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.286] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21210) returned 1
	[0152.286] CloseHandle (hObject=0x200) returned 1
	[0152.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif")) returned 0x20
	[0152.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif")) returned 0x20
	[0152.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir31f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.287] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3911) returned 1
	[0152.287] CloseHandle (hObject=0x200) returned 1
	[0152.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif")) returned 0x20
	[0152.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif")) returned 0x20
	[0152.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.288] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37131) returned 1
	[0152.289] CloseHandle (hObject=0x200) returned 1
	[0152.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif")) returned 0x20
	[0152.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif")) returned 0x20
	[0152.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir32f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.289] SetEvent (hEvent=0xfc) returned 1
	[0152.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.289] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5681) returned 1
	[0152.290] CloseHandle (hObject=0x200) returned 1
	[0152.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif")) returned 0x20
	[0152.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif")) returned 0x20
	[0152.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.290] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11539) returned 1
	[0152.290] CloseHandle (hObject=0x200) returned 1
	[0152.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif")) returned 0x20
	[0152.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif")) returned 0x20
	[0152.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir33f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.291] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4473) returned 1
	[0152.291] CloseHandle (hObject=0x200) returned 1
	[0152.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif")) returned 0x20
	[0152.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif")) returned 0x20
	[0152.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.293] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38365) returned 1
	[0152.293] CloseHandle (hObject=0x200) returned 1
	[0152.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif")) returned 0x20
	[0152.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif")) returned 0x20
	[0152.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir34f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.294] SetEvent (hEvent=0xfc) returned 1
	[0152.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.294] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4588) returned 1
	[0152.294] CloseHandle (hObject=0x200) returned 1
	[0152.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif")) returned 0x20
	[0152.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif")) returned 0x20
	[0152.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.295] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11190) returned 1
	[0152.295] CloseHandle (hObject=0x200) returned 1
	[0152.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif")) returned 0x20
	[0152.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif")) returned 0x20
	[0152.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir35f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.296] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9185) returned 1
	[0152.296] CloseHandle (hObject=0x200) returned 1
	[0152.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif")) returned 0x20
	[0152.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif")) returned 0x20
	[0152.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.390] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36823) returned 1
	[0152.390] CloseHandle (hObject=0x1f4) returned 1
	[0152.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif")) returned 0x20
	[0152.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif")) returned 0x20
	[0152.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir36f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.390] SetEvent (hEvent=0xfc) returned 1
	[0152.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.391] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47129) returned 1
	[0152.391] CloseHandle (hObject=0x1f4) returned 1
	[0152.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif")) returned 0x20
	[0152.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif")) returned 0x20
	[0152.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir38f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.392] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44901) returned 1
	[0152.392] CloseHandle (hObject=0x1f4) returned 1
	[0152.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif")) returned 0x20
	[0152.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif")) returned 0x20
	[0152.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir39f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.394] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11994) returned 1
	[0152.394] CloseHandle (hObject=0x1f4) returned 1
	[0152.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif")) returned 0x20
	[0152.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif")) returned 0x20
	[0152.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.394] SetEvent (hEvent=0xfc) returned 1
	[0152.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.396] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17991) returned 1
	[0152.396] CloseHandle (hObject=0x1f4) returned 1
	[0152.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif")) returned 0x20
	[0152.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif")) returned 0x20
	[0152.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir3f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.396] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=69401) returned 1
	[0152.397] CloseHandle (hObject=0x1f4) returned 1
	[0152.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif")) returned 0x20
	[0152.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif")) returned 0x20
	[0152.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir40f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.397] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32091) returned 1
	[0152.397] CloseHandle (hObject=0x1f4) returned 1
	[0152.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif")) returned 0x20
	[0152.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif")) returned 0x20
	[0152.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir41f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.399] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57203) returned 1
	[0152.399] CloseHandle (hObject=0x1f4) returned 1
	[0152.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif")) returned 0x20
	[0152.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif")) returned 0x20
	[0152.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir42f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.400] SetEvent (hEvent=0xfc) returned 1
	[0152.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.400] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3372) returned 1
	[0152.400] CloseHandle (hObject=0x1f4) returned 1
	[0152.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif")) returned 0x20
	[0152.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif")) returned 0x20
	[0152.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.401] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2654) returned 1
	[0152.401] CloseHandle (hObject=0x1f4) returned 1
	[0152.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif")) returned 0x20
	[0152.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif")) returned 0x20
	[0152.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir43f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.402] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13830) returned 1
	[0152.402] CloseHandle (hObject=0x1f4) returned 1
	[0152.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif")) returned 0x20
	[0152.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif")) returned 0x20
	[0152.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.404] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12326) returned 1
	[0152.404] CloseHandle (hObject=0x1f4) returned 1
	[0152.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif")) returned 0x20
	[0152.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif")) returned 0x20
	[0152.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir44f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.404] SetEvent (hEvent=0xfc) returned 1
	[0152.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.405] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8217) returned 1
	[0152.405] CloseHandle (hObject=0x1f4) returned 1
	[0152.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif")) returned 0x20
	[0152.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif")) returned 0x20
	[0152.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.406] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7913) returned 1
	[0152.406] CloseHandle (hObject=0x1f4) returned 1
	[0152.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif")) returned 0x20
	[0152.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif")) returned 0x20
	[0152.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir45f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.407] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4937) returned 1
	[0152.407] CloseHandle (hObject=0x1f4) returned 1
	[0152.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif")) returned 0x20
	[0152.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif")) returned 0x20
	[0152.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.409] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4983) returned 1
	[0152.409] CloseHandle (hObject=0x1f4) returned 1
	[0152.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif")) returned 0x20
	[0152.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif")) returned 0x20
	[0152.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir46f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.409] SetEvent (hEvent=0xfc) returned 1
	[0152.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.410] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32985) returned 1
	[0152.410] CloseHandle (hObject=0x1f4) returned 1
	[0152.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif")) returned 0x20
	[0152.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif")) returned 0x20
	[0152.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.411] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15080) returned 1
	[0152.411] CloseHandle (hObject=0x1f4) returned 1
	[0152.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif")) returned 0x20
	[0152.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif")) returned 0x20
	[0152.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir47f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.412] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11091) returned 1
	[0152.412] CloseHandle (hObject=0x1f4) returned 1
	[0152.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif")) returned 0x20
	[0152.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif")) returned 0x20
	[0152.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.414] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6028) returned 1
	[0152.414] CloseHandle (hObject=0x1f4) returned 1
	[0152.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif")) returned 0x20
	[0152.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif")) returned 0x20
	[0152.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir48f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.414] SetEvent (hEvent=0xfc) returned 1
	[0152.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.415] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19046) returned 1
	[0152.415] CloseHandle (hObject=0x1f4) returned 1
	[0152.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif")) returned 0x20
	[0152.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif")) returned 0x20
	[0152.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.417] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12982) returned 1
	[0152.417] CloseHandle (hObject=0x1f4) returned 1
	[0152.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif")) returned 0x20
	[0152.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif")) returned 0x20
	[0152.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir49f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.418] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10753) returned 1
	[0152.418] CloseHandle (hObject=0x1f4) returned 1
	[0152.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif")) returned 0x20
	[0152.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif")) returned 0x20
	[0152.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.419] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30413) returned 1
	[0152.419] CloseHandle (hObject=0x1f4) returned 1
	[0152.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif")) returned 0x20
	[0152.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif")) returned 0x20
	[0152.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir4f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.420] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4097) returned 1
	[0152.420] CloseHandle (hObject=0x1f4) returned 1
	[0152.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif")) returned 0x20
	[0152.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif")) returned 0x20
	[0152.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.421] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3714) returned 1
	[0152.421] CloseHandle (hObject=0x1f4) returned 1
	[0152.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif")) returned 0x20
	[0152.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif")) returned 0x20
	[0152.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir50f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.423] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16919) returned 1
	[0152.423] CloseHandle (hObject=0x1f4) returned 1
	[0152.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif")) returned 0x20
	[0152.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif")) returned 0x20
	[0152.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.424] SetEvent (hEvent=0xfc) returned 1
	[0152.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.424] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5793) returned 1
	[0152.424] CloseHandle (hObject=0x1f4) returned 1
	[0152.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif")) returned 0x20
	[0152.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif")) returned 0x20
	[0152.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir51f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.425] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19592) returned 1
	[0152.425] CloseHandle (hObject=0x1f4) returned 1
	[0152.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif")) returned 0x20
	[0152.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif")) returned 0x20
	[0152.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.426] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52850) returned 1
	[0152.426] CloseHandle (hObject=0x1f4) returned 1
	[0152.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif")) returned 0x20
	[0152.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif")) returned 0x20
	[0152.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir5f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.551] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9437) returned 1
	[0152.551] CloseHandle (hObject=0x204) returned 1
	[0152.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif")) returned 0x20
	[0152.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif")) returned 0x20
	[0152.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.551] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5455) returned 1
	[0152.552] CloseHandle (hObject=0x204) returned 1
	[0152.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif")) returned 0x20
	[0152.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif")) returned 0x20
	[0152.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.552] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36954) returned 1
	[0152.552] CloseHandle (hObject=0x204) returned 1
	[0152.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif")) returned 0x20
	[0152.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif")) returned 0x20
	[0152.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir30f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.553] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15214) returned 1
	[0152.553] CloseHandle (hObject=0x204) returned 1
	[0152.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif")) returned 0x20
	[0152.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif")) returned 0x20
	[0152.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir31f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.555] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40625) returned 1
	[0152.555] CloseHandle (hObject=0x204) returned 1
	[0152.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif")) returned 0x20
	[0152.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif")) returned 0x20
	[0152.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir32f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.556] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23092) returned 1
	[0152.556] CloseHandle (hObject=0x204) returned 1
	[0152.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif")) returned 0x20
	[0152.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif")) returned 0x20
	[0152.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir33f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.557] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43504) returned 1
	[0152.557] CloseHandle (hObject=0x204) returned 1
	[0152.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif")) returned 0x20
	[0152.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif")) returned 0x20
	[0152.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir34f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.558] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18016) returned 1
	[0152.558] CloseHandle (hObject=0x204) returned 1
	[0152.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif")) returned 0x20
	[0152.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif")) returned 0x20
	[0152.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir35f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.719] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34654) returned 1
	[0152.719] CloseHandle (hObject=0x204) returned 1
	[0152.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif")) returned 0x20
	[0152.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif")) returned 0x20
	[0152.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir36f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.719] SetEvent (hEvent=0xfc) returned 1
	[0152.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.720] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16869) returned 1
	[0152.720] CloseHandle (hObject=0x204) returned 1
	[0152.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif")) returned 0x20
	[0152.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif")) returned 0x20
	[0152.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.721] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21849) returned 1
	[0152.721] CloseHandle (hObject=0x204) returned 1
	[0152.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif")) returned 0x20
	[0152.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif")) returned 0x20
	[0152.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.722] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24543) returned 1
	[0152.722] CloseHandle (hObject=0x204) returned 1
	[0152.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif")) returned 0x20
	[0152.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif")) returned 0x20
	[0152.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir7f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.724] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4152) returned 1
	[0152.724] CloseHandle (hObject=0x204) returned 1
	[0152.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif")) returned 0x20
	[0152.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif")) returned 0x20
	[0152.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.725] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11604) returned 1
	[0152.725] CloseHandle (hObject=0x204) returned 1
	[0152.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif")) returned 0x20
	[0152.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif")) returned 0x20
	[0152.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir8f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.726] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15929) returned 1
	[0152.726] CloseHandle (hObject=0x204) returned 1
	[0152.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif")) returned 0x20
	[0152.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif")) returned 0x20
	[0152.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.728] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18156) returned 1
	[0152.728] CloseHandle (hObject=0x204) returned 1
	[0152.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif")) returned 0x20
	[0152.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif")) returned 0x20
	[0152.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir9f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.729] SetEvent (hEvent=0xfc) returned 1
	[0152.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.729] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=171368) returned 1
	[0152.729] CloseHandle (hObject=0x204) returned 1
	[0152.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.dll")) returned 0x20
	[0152.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.dll")) returned 0x20
	[0152.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.730] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=173952) returned 1
	[0152.730] CloseHandle (hObject=0x204) returned 1
	[0152.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll")) returned 0x20
	[0152.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll")) returned 0x20
	[0152.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBWZINT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubwzint.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\qryint32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.732] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=83808) returned 1
	[0152.732] CloseHandle (hObject=0x204) returned 1
	[0152.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\qryint32.dll")) returned 0x20
	[0152.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\qryint32.dll")) returned 0x20
	[0152.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\qryint32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QRYINT32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\qryint32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.733] SetEvent (hEvent=0xfc) returned 1
	[0152.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.734] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9095) returned 1
	[0152.734] CloseHandle (hObject=0x204) returned 1
	[0152.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx")) returned 0x20
	[0152.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx")) returned 0x20
	[0152.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.735] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9184) returned 1
	[0152.735] CloseHandle (hObject=0x204) returned 1
	[0152.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx")) returned 0x20
	[0152.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx")) returned 0x20
	[0152.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.735] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8437) returned 1
	[0152.735] CloseHandle (hObject=0x204) returned 1
	[0152.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx")) returned 0x20
	[0152.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx")) returned 0x20
	[0152.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\DefaultBlackAndWhite.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\defaultblackandwhite.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.736] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8553) returned 1
	[0152.736] CloseHandle (hObject=0x204) returned 1
	[0152.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx")) returned 0x20
	[0152.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx")) returned 0x20
	[0152.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Distinctive.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\distinctive.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.831] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8746) returned 1
	[0152.831] CloseHandle (hObject=0x1f4) returned 1
	[0152.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx")) returned 0x20
	[0152.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx")) returned 0x20
	[0152.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Elegant.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\elegant.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.832] SetEvent (hEvent=0xfc) returned 1
	[0152.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.832] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8552) returned 1
	[0152.832] CloseHandle (hObject=0x1f4) returned 1
	[0152.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx")) returned 0x20
	[0152.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx")) returned 0x20
	[0152.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Formal.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\formal.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.835] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8460) returned 1
	[0152.835] CloseHandle (hObject=0x1f4) returned 1
	[0152.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx")) returned 0x20
	[0152.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx")) returned 0x20
	[0152.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Manuscript.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\manuscript.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.835] SetEvent (hEvent=0xfc) returned 1
	[0152.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.837] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8620) returned 1
	[0152.837] CloseHandle (hObject=0x1f4) returned 1
	[0152.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx")) returned 0x20
	[0152.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx")) returned 0x20
	[0152.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Modern.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\modern.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.837] SetEvent (hEvent=0xfc) returned 1
	[0152.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.838] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=577123) returned 1
	[0152.838] CloseHandle (hObject=0x1f4) returned 1
	[0152.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx")) returned 0x20
	[0152.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx")) returned 0x20
	[0152.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Newsprint.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\newsprint.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.839] SetEvent (hEvent=0xfc) returned 1
	[0152.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.839] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23263) returned 1
	[0152.839] CloseHandle (hObject=0x1f4) returned 1
	[0152.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx")) returned 0x20
	[0152.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx")) returned 0x20
	[0152.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Perspective.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\perspective.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.840] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8440) returned 1
	[0152.840] CloseHandle (hObject=0x1f4) returned 1
	[0152.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx")) returned 0x20
	[0152.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx")) returned 0x20
	[0152.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Simple.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\simple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.841] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23870) returned 1
	[0152.841] CloseHandle (hObject=0x1f4) returned 1
	[0152.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx")) returned 0x20
	[0152.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx")) returned 0x20
	[0152.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Thatch.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\thatch.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.842] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8688) returned 1
	[0152.842] CloseHandle (hObject=0x1f4) returned 1
	[0152.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx")) returned 0x20
	[0152.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx")) returned 0x20
	[0152.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Traditional.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\traditional.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.843] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14762) returned 1
	[0152.843] CloseHandle (hObject=0x1f4) returned 1
	[0152.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn")) returned 0x20
	[0152.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn")) returned 0x20
	[0152.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.844] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18477) returned 1
	[0152.844] CloseHandle (hObject=0x1f4) returned 1
	[0152.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn")) returned 0x20
	[0152.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn")) returned 0x20
	[0152.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\reviewrouting_review.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.846] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3450) returned 1
	[0152.846] CloseHandle (hObject=0x1f4) returned 1
	[0152.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css")) returned 0x20
	[0152.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css")) returned 0x20
	[0152.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rose.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.847] SetEvent (hEvent=0xfc) returned 1
	[0152.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.847] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49261) returned 1
	[0152.847] CloseHandle (hObject=0x1f4) returned 1
	[0152.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm")) returned 0x20
	[0152.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm")) returned 0x20
	[0152.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\RPLBRF35.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\rplbrf35.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.849] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=48488) returned 1
	[0152.849] CloseHandle (hObject=0x1f4) returned 1
	[0152.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl")) returned 0x20
	[0152.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl")) returned 0x20
	[0152.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\savasweb.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.849] SetEvent (hEvent=0xfc) returned 1
	[0152.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.850] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=397828) returned 1
	[0152.851] CloseHandle (hObject=0x1f4) returned 1
	[0152.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs")) returned 0x20
	[0152.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs")) returned 0x20
	[0152.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.851] SetEvent (hEvent=0xfc) returned 1
	[0152.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.851] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=631) returned 1
	[0152.851] CloseHandle (hObject=0x1f4) returned 1
	[0152.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc")) returned 0x20
	[0152.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc")) returned 0x20
	[0152.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.852] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=207) returned 1
	[0152.852] CloseHandle (hObject=0x1f4) returned 1
	[0152.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt")) returned 0x20
	[0152.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt")) returned 0x20
	[0152.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.853] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0152.853] CloseHandle (hObject=0x1f4) returned 1
	[0152.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk")) returned 0x20
	[0152.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk")) returned 0x20
	[0152.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.854] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113) returned 1
	[0152.854] CloseHandle (hObject=0x1f4) returned 1
	[0152.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk")) returned 0x20
	[0152.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk")) returned 0x20
	[0152.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\setlang_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.856] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=68984) returned 1
	[0152.856] CloseHandle (hObject=0x1f4) returned 1
	[0152.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll")) returned 0x20
	[0152.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll")) returned 0x20
	[0152.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.857] SetEvent (hEvent=0xfc) returned 1
	[0152.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.857] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11648) returned 1
	[0152.857] CloseHandle (hObject=0x1f4) returned 1
	[0152.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll")) returned 0x20
	[0152.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll")) returned 0x20
	[0152.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SGRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sgres.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.858] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42352) returned 1
	[0152.858] CloseHandle (hObject=0x1f4) returned 1
	[0152.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl")) returned 0x20
	[0152.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl")) returned 0x20
	[0152.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\shapnum.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.860] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3450) returned 1
	[0152.860] CloseHandle (hObject=0x1f4) returned 1
	[0152.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css")) returned 0x20
	[0152.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css")) returned 0x20
	[0152.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sky.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.860] SetEvent (hEvent=0xfc) returned 1
	[0152.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\slintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.861] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9088) returned 1
	[0152.861] CloseHandle (hObject=0x1f4) returned 1
	[0152.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\slintl.dll")) returned 0x20
	[0152.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\slintl.dll")) returned 0x20
	[0152.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\slintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SLINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\slintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.862] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38768) returned 1
	[0152.862] CloseHandle (hObject=0x1f4) returned 1
	[0152.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl")) returned 0x20
	[0152.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl")) returned 0x20
	[0152.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SMIGRATE.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\smigrate.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.863] SetEvent (hEvent=0xfc) returned 1
	[0152.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\socialconnectorres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.864] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=320928) returned 1
	[0152.864] CloseHandle (hObject=0x1f4) returned 1
	[0152.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\socialconnectorres.dll")) returned 0x20
	[0152.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\socialconnectorres.dll")) returned 0x20
	[0152.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\socialconnectorres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SOCIALCONNECTORRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\socialconnectorres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.865] SetEvent (hEvent=0xfc) returned 1
	[0152.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.865] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1604) returned 1
	[0152.865] CloseHandle (hObject=0x1f4) returned 1
	[0152.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd")) returned 0x20
	[0152.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd")) returned 0x20
	[0152.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\space.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.867] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3450) returned 1
	[0152.867] CloseHandle (hObject=0x1f4) returned 1
	[0152.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css")) returned 0x20
	[0152.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css")) returned 0x20
	[0152.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\spring.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.867] SetEvent (hEvent=0xfc) returned 1
	[0152.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.868] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3452) returned 1
	[0152.868] CloseHandle (hObject=0x1f4) returned 1
	[0152.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css")) returned 0x20
	[0152.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css")) returned 0x20
	[0152.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sps.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.870] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3450) returned 1
	[0152.870] CloseHandle (hObject=0x1f8) returned 1
	[0152.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css")) returned 0x20
	[0152.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css")) returned 0x20
	[0152.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\steel.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.871] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=433434) returned 1
	[0152.871] CloseHandle (hObject=0x1f8) returned 1
	[0152.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm")) returned 0x20
	[0152.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm")) returned 0x20
	[0152.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslist.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslisti.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.872] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=88464) returned 1
	[0152.872] CloseHandle (hObject=0x1f8) returned 1
	[0152.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslisti.dll")) returned 0x20
	[0152.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslisti.dll")) returned 0x20
	[0152.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslisti.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\STSLISTI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\stslisti.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.875] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3450) returned 1
	[0152.875] CloseHandle (hObject=0x1f8) returned 1
	[0152.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css")) returned 0x20
	[0152.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css")) returned 0x20
	[0152.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunny.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.876] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3450) returned 1
	[0152.876] CloseHandle (hObject=0x1f8) returned 1
	[0152.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css")) returned 0x20
	[0152.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css")) returned 0x20
	[0152.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\sunset.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0152.979] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3450) returned 1
	[0152.979] CloseHandle (hObject=0x20c) returned 1
	[0152.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css")) returned 0x20
	[0152.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css")) returned 0x20
	[0152.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\terrcott.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.979] SetEvent (hEvent=0xfc) returned 1
	[0152.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0152.980] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=392584) returned 1
	[0152.980] CloseHandle (hObject=0x20c) returned 1
	[0152.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl")) returned 0x20
	[0152.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl")) returned 0x20
	[0152.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UML.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\uml.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.981] SetEvent (hEvent=0xfc) returned 1
	[0152.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UmOutlookStrings.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\umoutlookstrings.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0152.981] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=61312) returned 1
	[0152.981] CloseHandle (hObject=0x20c) returned 1
	[0152.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UmOutlookStrings.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\umoutlookstrings.dll")) returned 0x20
	[0152.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UmOutlookStrings.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\umoutlookstrings.dll")) returned 0x20
	[0152.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UmOutlookStrings.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\umoutlookstrings.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\UmOutlookStrings.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\umoutlookstrings.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.986] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1868) returned 1
	[0152.986] CloseHandle (hObject=0x200) returned 1
	[0152.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd")) returned 0x20
	[0152.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd")) returned 0x20
	[0152.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\valve.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.122] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37264) returned 1
	[0153.122] CloseHandle (hObject=0x20c) returned 1
	[0153.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll")) returned 0x20
	[0153.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll")) returned 0x20
	[0153.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.123] SetEvent (hEvent=0xfc) returned 1
	[0153.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.124] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1940) returned 1
	[0153.124] CloseHandle (hObject=0x20c) returned 1
	[0153.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd")) returned 0x20
	[0153.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd")) returned 0x20
	[0153.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDALLLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdalllnk.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.124] SetEvent (hEvent=0xfc) returned 1
	[0153.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.125] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1401) returned 1
	[0153.126] CloseHandle (hObject=0x20c) returned 1
	[0153.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml")) returned 0x20
	[0153.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml")) returned 0x20
	[0153.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wdcmpvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.126] SetEvent (hEvent=0xfc) returned 1
	[0153.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.126] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1826) returned 1
	[0153.126] CloseHandle (hObject=0x20c) returned 1
	[0153.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd")) returned 0x20
	[0153.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd")) returned 0x20
	[0153.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WDERRLNK.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wderrlnk.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.128] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4932186) returned 1
	[0153.128] CloseHandle (hObject=0x20c) returned 1
	[0153.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs")) returned 0x20
	[0153.128] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.128] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev.hxs")) returned 0
	[0153.128] SetEvent (hEvent=0xfc) returned 1
	[0153.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.129] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=651) returned 1
	[0153.129] CloseHandle (hObject=0x20c) returned 1
	[0153.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxc")) returned 0x20
	[0153.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxc")) returned 0x20
	[0153.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.131] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=211) returned 1
	[0153.131] CloseHandle (hObject=0x20c) returned 1
	[0153.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxt")) returned 0x20
	[0153.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxt")) returned 0x20
	[0153.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.131] SetEvent (hEvent=0xfc) returned 1
	[0153.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.132] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0153.132] CloseHandle (hObject=0x20c) returned 1
	[0153.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_f_col.hxk")) returned 0x20
	[0153.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_f_col.hxk")) returned 0x20
	[0153.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.133] SetEvent (hEvent=0xfc) returned 1
	[0153.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.134] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113) returned 1
	[0153.134] CloseHandle (hObject=0x20c) returned 1
	[0153.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_k_col.hxk")) returned 0x20
	[0153.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_k_col.hxk")) returned 0x20
	[0153.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.134] SetEvent (hEvent=0xfc) returned 1
	[0153.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.137] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1475590) returned 1
	[0153.137] CloseHandle (hObject=0x20c) returned 1
	[0153.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs")) returned 0x20
	[0153.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs")) returned 0x20
	[0153.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.138] SetEvent (hEvent=0xfc) returned 1
	[0153.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.139] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=631) returned 1
	[0153.139] CloseHandle (hObject=0x20c) returned 1
	[0153.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc")) returned 0x20
	[0153.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc")) returned 0x20
	[0153.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.139] SetEvent (hEvent=0xfc) returned 1
	[0153.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.140] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=207) returned 1
	[0153.140] CloseHandle (hObject=0x20c) returned 1
	[0153.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt")) returned 0x20
	[0153.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt")) returned 0x20
	[0153.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.141] SetEvent (hEvent=0xfc) returned 1
	[0153.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.142] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0153.142] CloseHandle (hObject=0x200) returned 1
	[0153.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk")) returned 0x20
	[0153.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk")) returned 0x20
	[0153.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.143] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=113) returned 1
	[0153.143] CloseHandle (hObject=0x200) returned 1
	[0153.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk")) returned 0x20
	[0153.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk")) returned 0x20
	[0153.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winproj_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.278] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1544) returned 1
	[0153.278] CloseHandle (hObject=0x214) returned 1
	[0153.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd")) returned 0x20
	[0153.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd")) returned 0x20
	[0153.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winschd.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.279] SetEvent (hEvent=0xfc) returned 1
	[0153.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accddsf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.497] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=579488) returned 1
	[0153.497] CloseHandle (hObject=0x214) returned 1
	[0153.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accddsf.dll")) returned 0x20
	[0153.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accddsf.dll")) returned 0x20
	[0153.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accddsf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accddsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.497] SetEvent (hEvent=0xfc) returned 1
	[0153.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advzip.dic"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.498] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3024356) returned 1
	[0153.498] CloseHandle (hObject=0x214) returned 1
	[0153.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advzip.dic")) returned 0x20
	[0153.498] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advzip.dic"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\advzip.dic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.498] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\advzip.dic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVZIP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advzip.dic")) returned 0
	[0153.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AEC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\aec.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.498] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1571704) returned 1
	[0153.498] CloseHandle (hObject=0x214) returned 1
	[0153.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AEC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\aec.dll")) returned 0x20
	[0153.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AEC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\aec.dll")) returned 0x20
	[0153.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AEC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\aec.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AEC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\aec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AECUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\aecutils.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.500] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=796552) returned 1
	[0153.500] CloseHandle (hObject=0x214) returned 1
	[0153.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AECUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\aecutils.dll")) returned 0x20
	[0153.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AECUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\aecutils.dll")) returned 0x20
	[0153.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AECUTILS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\aecutils.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AECUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\aecutils.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.501] SetEvent (hEvent=0xfc) returned 1
	[0153.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\asciieng.lng"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.501] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=286848) returned 1
	[0153.501] CloseHandle (hObject=0x214) returned 1
	[0153.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\asciieng.lng")) returned 0x20
	[0153.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\asciieng.lng")) returned 0x20
	[0153.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\asciieng.lng.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ASCIIENG.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\asciieng.lng"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHLTS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchlts.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.502] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=142776) returned 1
	[0153.502] CloseHandle (hObject=0x214) returned 1
	[0153.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHLTS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchlts.dll")) returned 0x20
	[0153.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHLTS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchlts.dll")) returned 0x20
	[0153.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHLTS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchlts.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHLTS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchlts.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchmain.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.503] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1667960) returned 1
	[0153.503] CloseHandle (hObject=0x214) returned 1
	[0153.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchmain.dll")) returned 0x20
	[0153.503] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchmain.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHMAIN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchmain.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.503] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHMAIN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchmain.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchmain.dll")) returned 0
	[0153.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHSAPIFE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchsapife.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.504] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2242968) returned 1
	[0153.504] CloseHandle (hObject=0x214) returned 1
	[0153.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHSAPIFE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchsapife.dll")) returned 0x20
	[0153.504] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHSAPIFE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchsapife.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHSAPIFE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchsapife.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.504] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHSAPIFE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchsapife.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUDIOSEARCHSAPIFE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\audiosearchsapife.dll")) returned 0
	[0153.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUTHZAX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\authzax.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.505] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=69000) returned 1
	[0153.505] CloseHandle (hObject=0x214) returned 1
	[0153.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUTHZAX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\authzax.dll")) returned 0x20
	[0153.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUTHZAX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\authzax.dll")) returned 0x20
	[0153.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUTHZAX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\authzax.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AUTHZAX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\authzax.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSAutogen.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsautogen.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.506] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50048) returned 1
	[0153.506] CloseHandle (hObject=0x214) returned 1
	[0153.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSAutogen.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsautogen.dll")) returned 0x20
	[0153.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSAutogen.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsautogen.dll")) returned 0x20
	[0153.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSAutogen.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bcsautogen.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSAutogen.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsautogen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSClient.Msg.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclient.msg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.507] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39776) returned 1
	[0153.507] CloseHandle (hObject=0x214) returned 1
	[0153.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSClient.Msg.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclient.msg.dll")) returned 0x20
	[0153.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSClient.Msg.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclient.msg.dll")) returned 0x20
	[0153.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSClient.Msg.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclient.msg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSClient.Msg.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclient.msg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclientmanifest.man"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.509] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26758) returned 1
	[0153.509] CloseHandle (hObject=0x214) returned 1
	[0153.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclientmanifest.man")) returned 0x20
	[0153.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclientmanifest.man")) returned 0x20
	[0153.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclientmanifest.man.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSClientManifest.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsclientmanifest.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.510] SetEvent (hEvent=0xfc) returned 1
	[0153.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsevents.man"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.510] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36177) returned 1
	[0153.510] CloseHandle (hObject=0x214) returned 1
	[0153.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsevents.man")) returned 0x20
	[0153.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsevents.man")) returned 0x20
	[0153.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bcsevents.man.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSEvents.man" (normalized: "c:\\program files\\microsoft office\\office14\\bcsevents.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSLaunch.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcslaunch.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.512] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=70528) returned 1
	[0153.512] CloseHandle (hObject=0x214) returned 1
	[0153.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSLaunch.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcslaunch.dll")) returned 0x20
	[0153.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSLaunch.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcslaunch.dll")) returned 0x20
	[0153.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSLaunch.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bcslaunch.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSLaunch.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcslaunch.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.512] SetEvent (hEvent=0xfc) returned 1
	[0153.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSProxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsproxy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.514] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=137600) returned 1
	[0153.514] CloseHandle (hObject=0x214) returned 1
	[0153.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSProxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsproxy.dll")) returned 0x20
	[0153.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSProxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsproxy.dll")) returned 0x20
	[0153.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSProxy.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bcsproxy.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSProxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsproxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.514] SetEvent (hEvent=0xfc) returned 1
	[0153.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSRuntime.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsruntime.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.514] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=613760) returned 1
	[0153.515] CloseHandle (hObject=0x214) returned 1
	[0153.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSRuntime.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsruntime.dll")) returned 0x20
	[0153.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSRuntime.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsruntime.dll")) returned 0x20
	[0153.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSRuntime.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bcsruntime.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSRuntime.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsruntime.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSRuntimeUI.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsruntimeui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.515] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14208) returned 1
	[0153.515] CloseHandle (hObject=0x214) returned 1
	[0153.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSRuntimeUI.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsruntimeui.dll")) returned 0x20
	[0153.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSRuntimeUI.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsruntimeui.dll")) returned 0x20
	[0153.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSRuntimeUI.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bcsruntimeui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSRuntimeUI.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsruntimeui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSStr32.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsstr32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.517] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=167808) returned 1
	[0153.517] CloseHandle (hObject=0x214) returned 1
	[0153.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSStr32.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsstr32.dll")) returned 0x20
	[0153.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSStr32.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsstr32.dll")) returned 0x20
	[0153.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSStr32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bcsstr32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSStr32.dll" (normalized: "c:\\program files\\microsoft office\\office14\\bcsstr32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.517] SetEvent (hEvent=0xfc) returned 1
	[0153.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSSync.exe" (normalized: "c:\\program files\\microsoft office\\office14\\bcssync.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.518] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=112512) returned 1
	[0153.518] CloseHandle (hObject=0x214) returned 1
	[0153.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSSync.exe" (normalized: "c:\\program files\\microsoft office\\office14\\bcssync.exe")) returned 0x20
	[0153.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSSync.exe" (normalized: "c:\\program files\\microsoft office\\office14\\bcssync.exe")) returned 0x20
	[0153.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSSync.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bcssync.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BCSSync.exe" (normalized: "c:\\program files\\microsoft office\\office14\\bcssync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadata.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.520] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26027) returned 1
	[0153.520] CloseHandle (hObject=0x214) returned 1
	[0153.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadata.xsd")) returned 0x20
	[0153.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadata.xsd")) returned 0x20
	[0153.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadata.xsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadata.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.520] SetEvent (hEvent=0xfc) returned 1
	[0153.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadataresource.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.520] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13089) returned 1
	[0153.521] CloseHandle (hObject=0x214) returned 1
	[0153.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadataresource.xsd")) returned 0x20
	[0153.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadataresource.xsd")) returned 0x20
	[0153.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadataresource.xsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2string.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.521] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31013) returned 1
	[0153.521] CloseHandle (hObject=0x214) returned 1
	[0153.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2string.xsl")) returned 0x20
	[0153.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2string.xsl")) returned 0x20
	[0153.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2string.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2string.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2xml.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.522] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4070) returned 1
	[0153.522] CloseHandle (hObject=0x214) returned 1
	[0153.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2xml.xsl")) returned 0x20
	[0153.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2xml.xsl")) returned 0x20
	[0153.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2xml.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\author2xml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\author.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.525] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35682) returned 1
	[0153.525] CloseHandle (hObject=0x214) returned 1
	[0153.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\author.xsl")) returned 0x20
	[0153.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\author.xsl")) returned 0x20
	[0153.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\author.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\author.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\tag.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.526] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35412) returned 1
	[0153.527] CloseHandle (hObject=0x214) returned 1
	[0153.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\tag.xsl")) returned 0x20
	[0153.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\tag.xsl")) returned 0x20
	[0153.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\tag.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\tag.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.527] SetEvent (hEvent=0xfc) returned 1
	[0153.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\title.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.527] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35902) returned 1
	[0153.528] CloseHandle (hObject=0x214) returned 1
	[0153.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\title.xsl")) returned 0x20
	[0153.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\title.xsl")) returned 0x20
	[0153.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\title.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\title.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\year.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.529] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35822) returned 1
	[0153.529] CloseHandle (hObject=0x214) returned 1
	[0153.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\year.xsl")) returned 0x20
	[0153.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\year.xsl")) returned 0x20
	[0153.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\year.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\sort\\year.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.530] SetEvent (hEvent=0xfc) returned 1
	[0153.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\apa.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.531] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=380164) returned 1
	[0153.531] CloseHandle (hObject=0x214) returned 1
	[0153.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\apa.xsl")) returned 0x20
	[0153.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\apa.xsl")) returned 0x20
	[0153.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\apa.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\APA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\apa.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.532] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=337964) returned 1
	[0153.532] CloseHandle (hObject=0x214) returned 1
	[0153.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\chicago.xsl")) returned 0x20
	[0153.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\chicago.xsl")) returned 0x20
	[0153.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\chicago.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.533] SetEvent (hEvent=0xfc) returned 1
	[0153.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.533] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=262536) returned 1
	[0153.533] CloseHandle (hObject=0x214) returned 1
	[0153.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gb.xsl")) returned 0x20
	[0153.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gb.xsl")) returned 0x20
	[0153.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gb.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0153.621] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=249206) returned 1
	[0153.621] CloseHandle (hObject=0x218) returned 1
	[0153.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gostname.xsl")) returned 0x20
	[0153.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gostname.xsl")) returned 0x20
	[0153.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gostname.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.622] SetEvent (hEvent=0xfc) returned 1
	[0153.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0153.622] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=262973) returned 1
	[0153.622] CloseHandle (hObject=0x218) returned 1
	[0153.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690.xsl")) returned 0x20
	[0153.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690.xsl")) returned 0x20
	[0153.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0153.624] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=257647) returned 1
	[0153.624] CloseHandle (hObject=0x218) returned 1
	[0153.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690nmerical.xsl")) returned 0x20
	[0153.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690nmerical.xsl")) returned 0x20
	[0153.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690nmerical.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.624] SetEvent (hEvent=0xfc) returned 1
	[0153.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\mla.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0153.625] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=299089) returned 1
	[0153.625] CloseHandle (hObject=0x218) returned 1
	[0153.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\mla.xsl")) returned 0x20
	[0153.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\mla.xsl")) returned 0x20
	[0153.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\mla.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\MLA.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\mla.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.626] SetEvent (hEvent=0xfc) returned 1
	[0153.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0153.626] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=245061) returned 1
	[0153.626] CloseHandle (hObject=0x218) returned 1
	[0153.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\sist02.xsl")) returned 0x20
	[0153.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\sist02.xsl")) returned 0x20
	[0153.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\sist02.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0153.628] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=338445) returned 1
	[0153.628] CloseHandle (hObject=0x218) returned 1
	[0153.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\turabian.xsl")) returned 0x20
	[0153.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\turabian.xsl")) returned 0x20
	[0153.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\turabian.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.629] SetEvent (hEvent=0xfc) returned 1
	[0153.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart1.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0153.630] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32246) returned 1
	[0153.630] CloseHandle (hObject=0x218) returned 1
	[0153.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart1.bdr")) returned 0x20
	[0153.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart1.bdr")) returned 0x20
	[0153.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart1.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart1.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart10.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0153.631] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9292) returned 1
	[0153.631] CloseHandle (hObject=0x218) returned 1
	[0153.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart10.bdr")) returned 0x20
	[0153.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart10.bdr")) returned 0x20
	[0153.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart10.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart10.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart11.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.633] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30920) returned 1
	[0153.633] CloseHandle (hObject=0x210) returned 1
	[0153.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart11.bdr")) returned 0x20
	[0153.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart11.bdr")) returned 0x20
	[0153.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart11.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart11.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.634] SetEvent (hEvent=0xfc) returned 1
	[0153.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart12.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.634] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58756) returned 1
	[0153.634] CloseHandle (hObject=0x210) returned 1
	[0153.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart12.bdr")) returned 0x20
	[0153.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart12.bdr")) returned 0x20
	[0153.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart12.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart12.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart13.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.635] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28368) returned 1
	[0153.635] CloseHandle (hObject=0x210) returned 1
	[0153.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart13.bdr")) returned 0x20
	[0153.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart13.bdr")) returned 0x20
	[0153.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart13.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart13.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart14.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.636] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51388) returned 1
	[0153.636] CloseHandle (hObject=0x210) returned 1
	[0153.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart14.bdr")) returned 0x20
	[0153.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart14.bdr")) returned 0x20
	[0153.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart14.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart14.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart15.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.637] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27412) returned 1
	[0153.637] CloseHandle (hObject=0x210) returned 1
	[0153.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart15.bdr")) returned 0x20
	[0153.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart15.bdr")) returned 0x20
	[0153.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart15.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart15.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart2.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.638] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47188) returned 1
	[0153.638] CloseHandle (hObject=0x210) returned 1
	[0153.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart2.bdr")) returned 0x20
	[0153.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart2.bdr")) returned 0x20
	[0153.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart2.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart2.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart3.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.640] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57646) returned 1
	[0153.640] CloseHandle (hObject=0x210) returned 1
	[0153.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart3.bdr")) returned 0x20
	[0153.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart3.bdr")) returned 0x20
	[0153.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart3.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart3.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.640] SetEvent (hEvent=0xfc) returned 1
	[0153.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart4.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.641] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14594) returned 1
	[0153.641] CloseHandle (hObject=0x210) returned 1
	[0153.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart4.bdr")) returned 0x20
	[0153.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart4.bdr")) returned 0x20
	[0153.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart4.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart4.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart5.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.642] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15788) returned 1
	[0153.642] CloseHandle (hObject=0x210) returned 1
	[0153.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart5.bdr")) returned 0x20
	[0153.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart5.bdr")) returned 0x20
	[0153.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart5.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart5.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart6.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.642] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=55222) returned 1
	[0153.643] CloseHandle (hObject=0x210) returned 1
	[0153.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart6.bdr")) returned 0x20
	[0153.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart6.bdr")) returned 0x20
	[0153.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart6.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart6.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart7.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.643] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3876) returned 1
	[0153.643] CloseHandle (hObject=0x210) returned 1
	[0153.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart7.bdr")) returned 0x20
	[0153.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart7.bdr")) returned 0x20
	[0153.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart7.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart7.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart8.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.644] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49098) returned 1
	[0153.644] CloseHandle (hObject=0x210) returned 1
	[0153.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart8.bdr")) returned 0x20
	[0153.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart8.bdr")) returned 0x20
	[0153.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart8.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart8.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart9.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.646] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50838) returned 1
	[0153.646] CloseHandle (hObject=0x210) returned 1
	[0153.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart9.bdr")) returned 0x20
	[0153.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart9.bdr")) returned 0x20
	[0153.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart9.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\borders\\msart9.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BRTVIEW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\brtview.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.648] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=186776) returned 1
	[0153.648] CloseHandle (hObject=0x210) returned 1
	[0153.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BRTVIEW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\brtview.dll")) returned 0x20
	[0153.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BRTVIEW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\brtview.dll")) returned 0x20
	[0153.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BRTVIEW.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\brtview.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BRTVIEW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\brtview.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.648] SetEvent (hEvent=0xfc) returned 1
	[0153.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BSTORM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\bstorm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.649] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=947072) returned 1
	[0153.649] CloseHandle (hObject=0x210) returned 1
	[0153.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BSTORM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\bstorm.dll")) returned 0x20
	[0153.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BSTORM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\bstorm.dll")) returned 0x20
	[0153.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BSTORM.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bstorm.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\BSTORM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\bstorm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CDLMSO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\cdlmso.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.651] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=531800) returned 1
	[0153.651] CloseHandle (hObject=0x210) returned 1
	[0153.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CDLMSO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\cdlmso.dll")) returned 0x20
	[0153.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CDLMSO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\cdlmso.dll")) returned 0x20
	[0153.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CDLMSO.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\cdlmso.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CDLMSO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\cdlmso.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CGMIMP32.HLP" (normalized: "c:\\program files\\microsoft office\\office14\\cgmimp32.hlp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.652] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31497) returned 1
	[0153.652] CloseHandle (hObject=0x210) returned 1
	[0153.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CGMIMP32.HLP" (normalized: "c:\\program files\\microsoft office\\office14\\cgmimp32.hlp")) returned 0x20
	[0153.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CGMIMP32.HLP" (normalized: "c:\\program files\\microsoft office\\office14\\cgmimp32.hlp")) returned 0x20
	[0153.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CGMIMP32.HLP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\cgmimp32.hlp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CGMIMP32.HLP" (normalized: "c:\\program files\\microsoft office\\office14\\cgmimp32.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" (normalized: "c:\\program files\\microsoft office\\office14\\charsettable.chr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.655] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=56514) returned 1
	[0153.655] CloseHandle (hObject=0x210) returned 1
	[0153.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" (normalized: "c:\\program files\\microsoft office\\office14\\charsettable.chr")) returned 0x20
	[0153.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" (normalized: "c:\\program files\\microsoft office\\office14\\charsettable.chr")) returned 0x20
	[0153.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\charsettable.chr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CharSetTable.chr" (normalized: "c:\\program files\\microsoft office\\office14\\charsettable.chr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\clview.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.656] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=270200) returned 1
	[0153.656] CloseHandle (hObject=0x210) returned 1
	[0153.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\clview.exe")) returned 0x20
	[0153.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\clview.exe")) returned 0x20
	[0153.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CLVIEW.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\clview.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\clview.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CMAX20.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\cmax20.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.657] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=722296) returned 1
	[0153.657] CloseHandle (hObject=0x210) returned 1
	[0153.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CMAX20.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\cmax20.dll")) returned 0x20
	[0153.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CMAX20.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\cmax20.dll")) returned 0x20
	[0153.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CMAX20.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\cmax20.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CMAX20.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\cmax20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\cnfnot32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.658] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=225632) returned 1
	[0153.658] CloseHandle (hObject=0x210) returned 1
	[0153.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\cnfnot32.exe")) returned 0x20
	[0153.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\cnfnot32.exe")) returned 0x20
	[0153.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CNFNOT32.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\cnfnot32.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\cnfnot32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CODEEDIT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\codeedit.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.659] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53128) returned 1
	[0153.659] CloseHandle (hObject=0x210) returned 1
	[0153.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CODEEDIT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\codeedit.dll")) returned 0x20
	[0153.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CODEEDIT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\codeedit.dll")) returned 0x20
	[0153.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CODEEDIT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\codeedit.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CODEEDIT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\codeedit.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONTAB32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\contab32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.660] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=183160) returned 1
	[0153.660] CloseHandle (hObject=0x210) returned 1
	[0153.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONTAB32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\contab32.dll")) returned 0x20
	[0153.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONTAB32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\contab32.dll")) returned 0x20
	[0153.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONTAB32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\contab32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONTAB32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\contab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ContactPicker.dll" (normalized: "c:\\program files\\microsoft office\\office14\\contactpicker.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.762] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222592) returned 1
	[0153.762] CloseHandle (hObject=0x214) returned 1
	[0153.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ContactPicker.dll" (normalized: "c:\\program files\\microsoft office\\office14\\contactpicker.dll")) returned 0x20
	[0153.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ContactPicker.dll" (normalized: "c:\\program files\\microsoft office\\office14\\contactpicker.dll")) returned 0x20
	[0153.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ContactPicker.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\contactpicker.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ContactPicker.dll" (normalized: "c:\\program files\\microsoft office\\office14\\contactpicker.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.762] SetEvent (hEvent=0xfc) returned 1
	[0153.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\LOCALDV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\localdv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.763] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37248) returned 1
	[0153.763] CloseHandle (hObject=0x214) returned 1
	[0153.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\LOCALDV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\localdv.dll")) returned 0x20
	[0153.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\LOCALDV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\localdv.dll")) returned 0x20
	[0153.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\LOCALDV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\localdv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\LOCALDV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\localdv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.763] SetEvent (hEvent=0xfc) returned 1
	[0153.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\odbcr.sam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.765] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11664) returned 1
	[0153.765] CloseHandle (hObject=0x214) returned 1
	[0153.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\odbcr.sam")) returned 0x20
	[0153.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\odbcr.sam")) returned 0x20
	[0153.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\odbcr.sam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ODBCR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\odbcr.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.765] SetEvent (hEvent=0xfc) returned 1
	[0153.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oladdr.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.766] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13744) returned 1
	[0153.766] CloseHandle (hObject=0x214) returned 1
	[0153.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oladdr.fae")) returned 0x20
	[0153.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oladdr.fae")) returned 0x20
	[0153.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oladdr.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oladdr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.767] SetEvent (hEvent=0xfc) returned 1
	[0153.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olapptr.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.767] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11704) returned 1
	[0153.767] CloseHandle (hObject=0x214) returned 1
	[0153.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olapptr.fae")) returned 0x20
	[0153.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olapptr.fae")) returned 0x20
	[0153.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olapptr.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olapptr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oljrnlr.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.768] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10160) returned 1
	[0153.768] CloseHandle (hObject=0x214) returned 1
	[0153.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oljrnlr.fae")) returned 0x20
	[0153.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oljrnlr.fae")) returned 0x20
	[0153.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oljrnlr.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oljrnlr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olmailr.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.769] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10160) returned 1
	[0153.769] CloseHandle (hObject=0x214) returned 1
	[0153.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olmailr.fae")) returned 0x20
	[0153.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olmailr.fae")) returned 0x20
	[0153.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olmailr.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olmailr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olnoter.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.770] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9648) returned 1
	[0153.770] CloseHandle (hObject=0x214) returned 1
	[0153.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olnoter.fae")) returned 0x20
	[0153.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olnoter.fae")) returned 0x20
	[0153.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olnoter.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olnoter.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olr.sam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.771] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15760) returned 1
	[0153.771] CloseHandle (hObject=0x214) returned 1
	[0153.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olr.sam")) returned 0x20
	[0153.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olr.sam")) returned 0x20
	[0153.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olr.sam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\olr.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oltaskr.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.772] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10672) returned 1
	[0153.772] CloseHandle (hObject=0x214) returned 1
	[0153.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oltaskr.fae")) returned 0x20
	[0153.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oltaskr.fae")) returned 0x20
	[0153.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oltaskr.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\oltaskr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\org97r.sam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.773] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12704) returned 1
	[0153.773] CloseHandle (hObject=0x214) returned 1
	[0153.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\org97r.sam")) returned 0x20
	[0153.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\org97r.sam")) returned 0x20
	[0153.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\org97r.sam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ORG97R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\org97r.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\pabr.sam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.773] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11144) returned 1
	[0153.773] CloseHandle (hObject=0x214) returned 1
	[0153.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\pabr.sam")) returned 0x20
	[0153.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\pabr.sam")) returned 0x20
	[0153.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\pabr.sam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\PABR.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\pabr.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\TRANSMRR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\transmrr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.776] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13712) returned 1
	[0153.776] CloseHandle (hObject=0x210) returned 1
	[0153.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\TRANSMRR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\transmrr.dll")) returned 0x20
	[0153.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\TRANSMRR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\transmrr.dll")) returned 0x20
	[0153.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\TRANSMRR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\transmrr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\TRANSMRR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\transmrr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.777] SetEvent (hEvent=0xfc) returned 1
	[0153.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\act3.sam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.777] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=90488) returned 1
	[0153.777] CloseHandle (hObject=0x210) returned 1
	[0153.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\act3.sam")) returned 0x20
	[0153.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\act3.sam")) returned 0x20
	[0153.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\act3.sam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ACT3.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\act3.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimdos.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.778] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31120) returned 1
	[0153.778] CloseHandle (hObject=0x210) returned 1
	[0153.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimdos.fae")) returned 0x20
	[0153.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimdos.fae")) returned 0x20
	[0153.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimdos.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMDOS.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimdos.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimwin.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.780] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31136) returned 1
	[0153.780] CloseHandle (hObject=0x210) returned 1
	[0153.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimwin.fae")) returned 0x20
	[0153.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimwin.fae")) returned 0x20
	[0153.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimwin.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\delimwin.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.780] SetEvent (hEvent=0xfc) returned 1
	[0153.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\desksam.sam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.781] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23424) returned 1
	[0153.781] CloseHandle (hObject=0x210) returned 1
	[0153.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\desksam.sam")) returned 0x20
	[0153.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\desksam.sam")) returned 0x20
	[0153.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\desksam.sam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\desksam.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.782] SetEvent (hEvent=0xfc) returned 1
	[0153.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\odbc.sam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.786] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=63864) returned 1
	[0153.786] CloseHandle (hObject=0x210) returned 1
	[0153.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\odbc.sam")) returned 0x20
	[0153.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\odbc.sam")) returned 0x20
	[0153.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\odbc.sam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ODBC.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\odbc.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.786] SetEvent (hEvent=0xfc) returned 1
	[0153.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\ol.sam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.787] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29056) returned 1
	[0153.787] CloseHandle (hObject=0x210) returned 1
	[0153.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\ol.sam")) returned 0x20
	[0153.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\ol.sam")) returned 0x20
	[0153.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\ol.sam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\ol.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.788] SetEvent (hEvent=0xfc) returned 1
	[0153.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oladd.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.789] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=133024) returned 1
	[0153.789] CloseHandle (hObject=0x210) returned 1
	[0153.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oladd.fae")) returned 0x20
	[0153.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oladd.fae")) returned 0x20
	[0153.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oladd.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oladd.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.789] SetEvent (hEvent=0xfc) returned 1
	[0153.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olappt.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.790] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=122280) returned 1
	[0153.790] CloseHandle (hObject=0x210) returned 1
	[0153.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olappt.fae")) returned 0x20
	[0153.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olappt.fae")) returned 0x20
	[0153.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olappt.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olappt.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oljrnl.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.791] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=71584) returned 1
	[0153.792] CloseHandle (hObject=0x210) returned 1
	[0153.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oljrnl.fae")) returned 0x20
	[0153.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oljrnl.fae")) returned 0x20
	[0153.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oljrnl.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oljrnl.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.792] SetEvent (hEvent=0xfc) returned 1
	[0153.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olmail.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.793] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=63384) returned 1
	[0153.793] CloseHandle (hObject=0x210) returned 1
	[0153.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olmail.fae")) returned 0x20
	[0153.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olmail.fae")) returned 0x20
	[0153.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olmail.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olmail.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.794] SetEvent (hEvent=0xfc) returned 1
	[0153.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olnote.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.795] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52120) returned 1
	[0153.795] CloseHandle (hObject=0x210) returned 1
	[0153.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olnote.fae")) returned 0x20
	[0153.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olnote.fae")) returned 0x20
	[0153.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olnote.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\olnote.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.795] SetEvent (hEvent=0xfc) returned 1
	[0153.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oltask.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.796] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=115608) returned 1
	[0153.796] CloseHandle (hObject=0x210) returned 1
	[0153.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oltask.fae")) returned 0x20
	[0153.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oltask.fae")) returned 0x20
	[0153.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oltask.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\oltask.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\org97.sam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.797] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50568) returned 1
	[0153.797] CloseHandle (hObject=0x210) returned 1
	[0153.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\org97.sam")) returned 0x20
	[0153.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\org97.sam")) returned 0x20
	[0153.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\org97.sam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\ORG97.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\org97.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.798] SetEvent (hEvent=0xfc) returned 1
	[0153.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\pab.sam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.799] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=63864) returned 1
	[0153.799] CloseHandle (hObject=0x210) returned 1
	[0153.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\pab.sam")) returned 0x20
	[0153.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\pab.sam")) returned 0x20
	[0153.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\pab.sam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\PAB.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\pab.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.799] SetEvent (hEvent=0xfc) returned 1
	[0153.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\RM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\rm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.800] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=99688) returned 1
	[0153.800] CloseHandle (hObject=0x210) returned 1
	[0153.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\RM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\rm.dll")) returned 0x20
	[0153.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\RM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\rm.dll")) returned 0x20
	[0153.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\RM.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\rm.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\RM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\rm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\TRANSMGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\transmgr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.801] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=130944) returned 1
	[0153.801] CloseHandle (hObject=0x210) returned 1
	[0153.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\TRANSMGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\transmgr.dll")) returned 0x20
	[0153.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\TRANSMGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\transmgr.dll")) returned 0x20
	[0153.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\TRANSMGR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\transmgr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\TRANSMGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\transmgr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA0009.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\css7data0009.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.802] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=594352) returned 1
	[0153.802] CloseHandle (hObject=0x210) returned 1
	[0153.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA0009.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\css7data0009.dll")) returned 0x20
	[0153.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA0009.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\css7data0009.dll")) returned 0x20
	[0153.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA0009.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\css7data0009.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA0009.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\css7data0009.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA000A.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\css7data000a.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.803] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=766384) returned 1
	[0153.803] CloseHandle (hObject=0x210) returned 1
	[0153.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA000A.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\css7data000a.dll")) returned 0x20
	[0153.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA000A.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\css7data000a.dll")) returned 0x20
	[0153.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA000A.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\css7data000a.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA000A.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\css7data000a.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA000C.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\css7data000c.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.804] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=766384) returned 1
	[0153.804] CloseHandle (hObject=0x210) returned 1
	[0153.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA000C.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\css7data000c.dll")) returned 0x20
	[0153.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA000C.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\css7data000c.dll")) returned 0x20
	[0153.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA000C.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\css7data000c.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CSS7DATA000C.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\css7data000c.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\custom.propdesc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.804] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1343) returned 1
	[0153.804] CloseHandle (hObject=0x210) returned 1
	[0153.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\custom.propdesc")) returned 0x20
	[0153.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\custom.propdesc")) returned 0x20
	[0153.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\custom.propdesc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\custom.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DATAGATH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\datagath.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.805] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=594288) returned 1
	[0153.805] CloseHandle (hObject=0x210) returned 1
	[0153.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DATAGATH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\datagath.dll")) returned 0x20
	[0153.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DATAGATH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\datagath.dll")) returned 0x20
	[0153.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DATAGATH.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\datagath.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DATAGATH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\datagath.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBENGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbengr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.806] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1197432) returned 1
	[0153.806] CloseHandle (hObject=0x210) returned 1
	[0153.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBENGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbengr.dll")) returned 0x20
	[0153.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBENGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbengr.dll")) returned 0x20
	[0153.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBENGR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\dbengr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBENGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbengr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBGHELP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbghelp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.855] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1369952) returned 1
	[0153.855] CloseHandle (hObject=0x210) returned 1
	[0153.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBGHELP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbghelp.dll")) returned 0x20
	[0153.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBGHELP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbghelp.dll")) returned 0x20
	[0153.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBGHELP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\dbghelp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBGHELP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbghelp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.856] SetEvent (hEvent=0xfc) returned 1
	[0153.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbwiz.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.065] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1276776) returned 1
	[0154.066] CloseHandle (hObject=0x210) returned 1
	[0154.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbwiz.dll")) returned 0x20
	[0154.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbwiz.dll")) returned 0x20
	[0154.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBWIZ.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\dbwiz.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbwiz.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.066] SetEvent (hEvent=0xfc) returned 1
	[0154.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FACILITY.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\facility.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.067] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1621864) returned 1
	[0154.068] CloseHandle (hObject=0x210) returned 1
	[0154.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FACILITY.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\facility.dll")) returned 0x20
	[0154.068] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FACILITY.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\facility.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FACILITY.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\facility.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0154.068] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FACILITY.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\facility.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FACILITY.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\facility.dll")) returned 0
	[0154.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\form.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.068] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=239488) returned 1
	[0154.068] CloseHandle (hObject=0x210) returned 1
	[0154.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\form.dll")) returned 0x20
	[0154.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\form.dll")) returned 0x20
	[0154.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORM.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\form.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\form.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activitl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.071] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1078) returned 1
	[0154.071] CloseHandle (hObject=0x210) returned 1
	[0154.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activitl.ico")) returned 0x20
	[0154.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activitl.ico")) returned 0x20
	[0154.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activitl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activitl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.071] SetEvent (hEvent=0xfc) returned 1
	[0154.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activits.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.072] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.072] CloseHandle (hObject=0x210) returned 1
	[0154.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activits.ico")) returned 0x20
	[0154.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activits.ico")) returned 0x20
	[0154.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activits.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activits.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.073] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=968) returned 1
	[0154.073] CloseHandle (hObject=0x210) returned 1
	[0154.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg")) returned 0x20
	[0154.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg")) returned 0x20
	[0154.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\activity.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.074] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=789) returned 1
	[0154.074] CloseHandle (hObject=0x210) returned 1
	[0154.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg")) returned 0x20
	[0154.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg")) returned 0x20
	[0154.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appt.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\apptl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.076] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1078) returned 1
	[0154.076] CloseHandle (hObject=0x210) returned 1
	[0154.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\apptl.ico")) returned 0x20
	[0154.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\apptl.ico")) returned 0x20
	[0154.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPTL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\apptl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\apptl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.076] SetEvent (hEvent=0xfc) returned 1
	[0154.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appts.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.077] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.077] CloseHandle (hObject=0x210) returned 1
	[0154.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appts.ico")) returned 0x20
	[0154.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appts.ico")) returned 0x20
	[0154.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPTS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appts.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\APPTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\appts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.078] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=320) returned 1
	[0154.078] CloseHandle (hObject=0x210) returned 1
	[0154.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg")) returned 0x20
	[0154.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg")) returned 0x20
	[0154.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.079] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1078) returned 1
	[0154.079] CloseHandle (hObject=0x210) returned 1
	[0154.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.ico")) returned 0x20
	[0154.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.ico")) returned 0x20
	[0154.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFNOT.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfnot.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.080] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=338) returned 1
	[0154.080] CloseHandle (hObject=0x210) returned 1
	[0154.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg")) returned 0x20
	[0154.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg")) returned 0x20
	[0154.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\cnfres.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.081] SetEvent (hEvent=0xfc) returned 1
	[0154.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONFLICT.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\conflict.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.081] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.081] CloseHandle (hObject=0x210) returned 1
	[0154.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONFLICT.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\conflict.ico")) returned 0x20
	[0154.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONFLICT.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\conflict.ico")) returned 0x20
	[0154.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONFLICT.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\conflict.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONFLICT.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\conflict.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.082] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=783) returned 1
	[0154.082] CloseHandle (hObject=0x210) returned 1
	[0154.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg")) returned 0x20
	[0154.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg")) returned 0x20
	[0154.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contact.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contactl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.083] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1078) returned 1
	[0154.083] CloseHandle (hObject=0x210) returned 1
	[0154.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contactl.ico")) returned 0x20
	[0154.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contactl.ico")) returned 0x20
	[0154.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACTL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contactl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contactl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contacts.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.085] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.085] CloseHandle (hObject=0x210) returned 1
	[0154.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contacts.ico")) returned 0x20
	[0154.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contacts.ico")) returned 0x20
	[0154.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACTS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contacts.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\CONTACTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\contacts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.086] SetEvent (hEvent=0xfc) returned 1
	[0154.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.087] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=805) returned 1
	[0154.087] CloseHandle (hObject=0x210) returned 1
	[0154.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg")) returned 0x20
	[0154.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg")) returned 0x20
	[0154.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlist.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.087] SetEvent (hEvent=0xfc) returned 1
	[0154.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLSTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlstl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.088] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1078) returned 1
	[0154.094] CloseHandle (hObject=0x210) returned 1
	[0154.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLSTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlstl.ico")) returned 0x20
	[0154.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLSTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlstl.ico")) returned 0x20
	[0154.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLSTL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlstl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLSTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlstl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLSTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlsts.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.095] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.095] CloseHandle (hObject=0x210) returned 1
	[0154.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLSTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlsts.ico")) returned 0x20
	[0154.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLSTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlsts.ico")) returned 0x20
	[0154.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLSTS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlsts.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DISTLSTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\distlsts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.095] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=765) returned 1
	[0154.095] CloseHandle (hObject=0x210) returned 1
	[0154.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg")) returned 0x20
	[0154.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg")) returned 0x20
	[0154.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\doc.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOCL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\docl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.096] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1078) returned 1
	[0154.096] CloseHandle (hObject=0x210) returned 1
	[0154.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOCL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\docl.ico")) returned 0x20
	[0154.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOCL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\docl.ico")) returned 0x20
	[0154.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOCL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\docl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOCL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\docl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOCS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\docs.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.097] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.097] CloseHandle (hObject=0x210) returned 1
	[0154.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOCS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\docs.ico")) returned 0x20
	[0154.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOCS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\docs.ico")) returned 0x20
	[0154.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOCS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\docs.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\DOCS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.098] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=838) returned 1
	[0154.098] CloseHandle (hObject=0x210) returned 1
	[0154.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg")) returned 0x20
	[0154.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg")) returned 0x20
	[0154.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitem.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exiteml.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.099] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1078) returned 1
	[0154.099] CloseHandle (hObject=0x210) returned 1
	[0154.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exiteml.ico")) returned 0x20
	[0154.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exiteml.ico")) returned 0x20
	[0154.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEML.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exiteml.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exiteml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitems.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.100] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.100] CloseHandle (hObject=0x210) returned 1
	[0154.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitems.ico")) returned 0x20
	[0154.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitems.ico")) returned 0x20
	[0154.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEMS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitems.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\EXITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\exitems.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.102] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=616) returned 1
	[0154.102] CloseHandle (hObject=0x210) returned 1
	[0154.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg")) returned 0x20
	[0154.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg")) returned 0x20
	[0154.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infomail.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.103] SetEvent (hEvent=0xfc) returned 1
	[0154.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infoml.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.103] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25214) returned 1
	[0154.103] CloseHandle (hObject=0x210) returned 1
	[0154.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infoml.ico")) returned 0x20
	[0154.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infoml.ico")) returned 0x20
	[0154.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOML.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infoml.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infoml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infoms.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.104] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.104] CloseHandle (hObject=0x210) returned 1
	[0154.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infoms.ico")) returned 0x20
	[0154.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infoms.ico")) returned 0x20
	[0154.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infoms.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\INFOMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\infoms.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.105] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=795) returned 1
	[0154.105] CloseHandle (hObject=0x210) returned 1
	[0154.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg")) returned 0x20
	[0154.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg")) returned 0x20
	[0154.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipml.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.107] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1078) returned 1
	[0154.107] CloseHandle (hObject=0x210) returned 1
	[0154.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipml.ico")) returned 0x20
	[0154.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipml.ico")) returned 0x20
	[0154.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPML.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipml.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.108] SetEvent (hEvent=0xfc) returned 1
	[0154.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipms.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.108] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.108] CloseHandle (hObject=0x210) returned 1
	[0154.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipms.ico")) returned 0x20
	[0154.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipms.ico")) returned 0x20
	[0154.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPMS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipms.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\IPMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ipms.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\MMSL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\mmsl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.109] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10134) returned 1
	[0154.109] CloseHandle (hObject=0x210) returned 1
	[0154.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\MMSL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\mmsl.ico")) returned 0x20
	[0154.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\MMSL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\mmsl.ico")) returned 0x20
	[0154.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\MMSL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\mmsl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\MMSL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\mmsl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\MMSS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\mmss.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.110] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2238) returned 1
	[0154.110] CloseHandle (hObject=0x210) returned 1
	[0154.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\MMSS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\mmss.ico")) returned 0x20
	[0154.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\MMSS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\mmss.ico")) returned 0x20
	[0154.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\MMSS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\mmss.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\MMSS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\mmss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.223] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=781) returned 1
	[0154.223] CloseHandle (hObject=0x214) returned 1
	[0154.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg")) returned 0x20
	[0154.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg")) returned 0x20
	[0154.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\note.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.223] SetEvent (hEvent=0xfc) returned 1
	[0154.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTES.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\notes.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.224] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.224] CloseHandle (hObject=0x214) returned 1
	[0154.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTES.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\notes.ico")) returned 0x20
	[0154.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTES.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\notes.ico")) returned 0x20
	[0154.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTES.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\notes.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTES.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\notes.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.225] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=615) returned 1
	[0154.225] CloseHandle (hObject=0x214) returned 1
	[0154.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg")) returned 0x20
	[0154.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg")) returned 0x20
	[0154.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omsmms.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.226] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=603) returned 1
	[0154.226] CloseHandle (hObject=0x214) returned 1
	[0154.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg")) returned 0x20
	[0154.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg")) returned 0x20
	[0154.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\omssms.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\oofl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.227] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1078) returned 1
	[0154.227] CloseHandle (hObject=0x214) returned 1
	[0154.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\oofl.ico")) returned 0x20
	[0154.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\oofl.ico")) returned 0x20
	[0154.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\oofl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\oofl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\oofs.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.228] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.228] CloseHandle (hObject=0x214) returned 1
	[0154.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\oofs.ico")) returned 0x20
	[0154.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\oofs.ico")) returned 0x20
	[0154.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\oofs.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\oofs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.229] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=828) returned 1
	[0154.229] CloseHandle (hObject=0x214) returned 1
	[0154.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg")) returned 0x20
	[0154.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg")) returned 0x20
	[0154.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\ooftmpl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.230] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=777) returned 1
	[0154.230] CloseHandle (hObject=0x214) returned 1
	[0154.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg")) returned 0x20
	[0154.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg")) returned 0x20
	[0154.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\post.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.232] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=777) returned 1
	[0154.232] CloseHandle (hObject=0x214) returned 1
	[0154.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg")) returned 0x20
	[0154.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg")) returned 0x20
	[0154.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postit.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTITL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postitl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.233] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1078) returned 1
	[0154.233] CloseHandle (hObject=0x214) returned 1
	[0154.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTITL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postitl.ico")) returned 0x20
	[0154.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTITL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postitl.ico")) returned 0x20
	[0154.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTITL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postitl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTITL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postitl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTITS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postits.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.234] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.234] CloseHandle (hObject=0x214) returned 1
	[0154.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTITS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postits.ico")) returned 0x20
	[0154.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTITS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postits.ico")) returned 0x20
	[0154.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTITS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postits.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTITS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postits.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.235] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1078) returned 1
	[0154.235] CloseHandle (hObject=0x214) returned 1
	[0154.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postl.ico")) returned 0x20
	[0154.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postl.ico")) returned 0x20
	[0154.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\postl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\posts.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.417] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2998) returned 1
	[0154.417] CloseHandle (hObject=0x218) returned 1
	[0154.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\posts.ico")) returned 0x20
	[0154.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\posts.ico")) returned 0x20
	[0154.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\posts.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\POSTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\posts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.418] SetEvent (hEvent=0xfc) returned 1
	[0154.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GANTT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\gantt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.419] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1561448) returned 1
	[0154.419] CloseHandle (hObject=0x218) returned 1
	[0154.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GANTT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\gantt.dll")) returned 0x20
	[0154.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GANTT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\gantt.dll")) returned 0x20
	[0154.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GANTT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\gantt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GANTT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\gantt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.419] SetEvent (hEvent=0xfc) returned 1
	[0154.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GFX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\gfx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.465] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2542440) returned 1
	[0154.465] CloseHandle (hObject=0x218) returned 1
	[0154.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GFX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\gfx.dll")) returned 0x20
	[0154.465] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GFX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\gfx.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GFX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\gfx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0154.465] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GFX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\gfx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GFX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\gfx.dll")) returned 0
	[0154.465] SetEvent (hEvent=0xfc) returned 1
	[0154.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKPowerPoint.dll" (normalized: "c:\\program files\\microsoft office\\office14\\gkpowerpoint.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.466] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2780032) returned 1
	[0154.466] CloseHandle (hObject=0x218) returned 1
	[0154.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKPowerPoint.dll" (normalized: "c:\\program files\\microsoft office\\office14\\gkpowerpoint.dll")) returned 0x20
	[0154.466] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKPowerPoint.dll" (normalized: "c:\\program files\\microsoft office\\office14\\gkpowerpoint.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKPowerPoint.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\gkpowerpoint.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0154.466] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKPowerPoint.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\gkpowerpoint.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKPowerPoint.dll" (normalized: "c:\\program files\\microsoft office\\office14\\gkpowerpoint.dll")) returned 0
	[0154.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKWord.dll" (normalized: "c:\\program files\\microsoft office\\office14\\gkword.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.468] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3114368) returned 1
	[0154.468] CloseHandle (hObject=0x21c) returned 1
	[0154.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKWord.dll" (normalized: "c:\\program files\\microsoft office\\office14\\gkword.dll")) returned 0x20
	[0154.468] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKWord.dll" (normalized: "c:\\program files\\microsoft office\\office14\\gkword.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKWord.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\gkword.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0154.468] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKWord.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\gkword.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKWord.dll" (normalized: "c:\\program files\\microsoft office\\office14\\gkword.dll")) returned 0
	[0154.468] SetEvent (hEvent=0xfc) returned 1
	[0154.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.470] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6437760) returned 1
	[0154.470] CloseHandle (hObject=0x21c) returned 1
	[0154.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe")) returned 0x20
	[0154.470] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GRAPH.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0154.470] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GRAPH.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe")) returned 0
	[0154.470] SetEvent (hEvent=0xfc) returned 1
	[0154.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.471] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=960) returned 1
	[0154.471] CloseHandle (hObject=0x21c) returned 1
	[0154.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.manifest")) returned 0x20
	[0154.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.manifest")) returned 0x20
	[0154.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Graph.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\graph.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.472] SetEvent (hEvent=0xfc) returned 1
	[0154.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\graph.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.472] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=766) returned 1
	[0154.472] CloseHandle (hObject=0x21c) returned 1
	[0154.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\graph.ico")) returned 0x20
	[0154.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\graph.ico")) returned 0x20
	[0154.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GRAPH.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\graph.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\graph.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.473] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=734) returned 1
	[0154.473] CloseHandle (hObject=0x21c) returned 1
	[0154.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer")) returned 0x20
	[0154.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer")) returned 0x20
	[0154.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.474] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=656) returned 1
	[0154.474] CloseHandle (hObject=0x21c) returned 1
	[0154.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer")) returned 0x20
	[0154.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer")) returned 0x20
	[0154.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.475] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=944) returned 1
	[0154.475] CloseHandle (hObject=0x21c) returned 1
	[0154.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer")) returned 0x20
	[0154.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer")) returned 0x20
	[0154.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\management.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.476] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=990) returned 1
	[0154.476] CloseHandle (hObject=0x21c) returned 1
	[0154.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer")) returned 0x20
	[0154.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer")) returned 0x20
	[0154.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\groove.net\\servers\\relay.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.478] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=942) returned 1
	[0154.478] CloseHandle (hObject=0x21c) returned 1
	[0154.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer")) returned 0x20
	[0154.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer")) returned 0x20
	[0154.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.481] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=576) returned 1
	[0154.481] CloseHandle (hObject=0x218) returned 1
	[0154.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer")) returned 0x20
	[0154.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer")) returned 0x20
	[0154.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.482] SetEvent (hEvent=0xfc) returned 1
	[0154.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.483] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=907) returned 1
	[0154.483] CloseHandle (hObject=0x218) returned 1
	[0154.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer")) returned 0x20
	[0154.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer")) returned 0x20
	[0154.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.485] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27604) returned 1
	[0154.485] CloseHandle (hObject=0x218) returned 1
	[0154.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav")) returned 0x20
	[0154.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav")) returned 0x20
	[0154.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\cough.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.486] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30816) returned 1
	[0154.486] CloseHandle (hObject=0x218) returned 1
	[0154.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav")) returned 0x20
	[0154.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav")) returned 0x20
	[0154.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\giggle.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.486] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14570) returned 1
	[0154.487] CloseHandle (hObject=0x218) returned 1
	[0154.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav")) returned 0x20
	[0154.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav")) returned 0x20
	[0154.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\hiccup.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.579] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15104) returned 1
	[0154.581] CloseHandle (hObject=0x218) returned 1
	[0154.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav")) returned 0x20
	[0154.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav")) returned 0x20
	[0154.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\mmhmm.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.744] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13848) returned 1
	[0154.744] CloseHandle (hObject=0x20c) returned 1
	[0154.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp")) returned 0x20
	[0154.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp")) returned 0x20
	[0154.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.745] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3479) returned 1
	[0154.745] CloseHandle (hObject=0x20c) returned 1
	[0154.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg")) returned 0x20
	[0154.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg")) returned 0x20
	[0154.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.901] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1444) returned 1
	[0154.901] CloseHandle (hObject=0x200) returned 1
	[0154.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp")) returned 0x20
	[0154.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp")) returned 0x20
	[0154.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.902] SetEvent (hEvent=0xfc) returned 1
	[0154.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.903] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2104) returned 1
	[0154.903] CloseHandle (hObject=0x200) returned 1
	[0154.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp")) returned 0x20
	[0154.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp")) returned 0x20
	[0154.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.903] SetEvent (hEvent=0xfc) returned 1
	[0154.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.904] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3896) returned 1
	[0154.904] CloseHandle (hObject=0x200) returned 1
	[0154.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp")) returned 0x20
	[0154.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp")) returned 0x20
	[0154.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.905] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1344) returned 1
	[0154.905] CloseHandle (hObject=0x200) returned 1
	[0154.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp")) returned 0x20
	[0154.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp")) returned 0x20
	[0154.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.906] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9733) returned 1
	[0154.906] CloseHandle (hObject=0x200) returned 1
	[0154.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg")) returned 0x20
	[0154.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg")) returned 0x20
	[0154.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.907] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2104) returned 1
	[0154.907] CloseHandle (hObject=0x200) returned 1
	[0154.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp")) returned 0x20
	[0154.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp")) returned 0x20
	[0154.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.908] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1104) returned 1
	[0154.908] CloseHandle (hObject=0x200) returned 1
	[0154.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg")) returned 0x20
	[0154.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg")) returned 0x20
	[0154.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.909] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21553) returned 1
	[0154.909] CloseHandle (hObject=0x200) returned 1
	[0154.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg")) returned 0x20
	[0154.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg")) returned 0x20
	[0154.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.910] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5432) returned 1
	[0154.910] CloseHandle (hObject=0x200) returned 1
	[0154.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp")) returned 0x20
	[0154.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp")) returned 0x20
	[0154.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.911] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6549) returned 1
	[0154.911] CloseHandle (hObject=0x200) returned 1
	[0154.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg")) returned 0x20
	[0154.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg")) returned 0x20
	[0154.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.912] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2104) returned 1
	[0154.912] CloseHandle (hObject=0x200) returned 1
	[0154.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp")) returned 0x20
	[0154.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp")) returned 0x20
	[0154.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.913] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8968) returned 1
	[0154.913] CloseHandle (hObject=0x200) returned 1
	[0154.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg")) returned 0x20
	[0154.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg")) returned 0x20
	[0154.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.915] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1592) returned 1
	[0154.916] CloseHandle (hObject=0x200) returned 1
	[0154.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp")) returned 0x20
	[0154.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp")) returned 0x20
	[0154.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.916] SetEvent (hEvent=0xfc) returned 1
	[0154.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.917] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13348) returned 1
	[0154.917] CloseHandle (hObject=0x200) returned 1
	[0154.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg")) returned 0x20
	[0154.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg")) returned 0x20
	[0154.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.919] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3128) returned 1
	[0154.919] CloseHandle (hObject=0x200) returned 1
	[0154.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp")) returned 0x20
	[0154.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp")) returned 0x20
	[0154.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.919] SetEvent (hEvent=0xfc) returned 1
	[0154.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.920] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16290) returned 1
	[0154.920] CloseHandle (hObject=0x200) returned 1
	[0154.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg")) returned 0x20
	[0154.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg")) returned 0x20
	[0154.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.921] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6985) returned 1
	[0154.921] CloseHandle (hObject=0x200) returned 1
	[0154.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg")) returned 0x20
	[0154.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg")) returned 0x20
	[0154.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.922] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1912) returned 1
	[0154.922] CloseHandle (hObject=0x200) returned 1
	[0154.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp")) returned 0x20
	[0154.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp")) returned 0x20
	[0154.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.924] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17609) returned 1
	[0154.924] CloseHandle (hObject=0x200) returned 1
	[0154.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg")) returned 0x20
	[0154.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg")) returned 0x20
	[0154.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.925] SetEvent (hEvent=0xfc) returned 1
	[0154.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.925] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7278) returned 1
	[0154.925] CloseHandle (hObject=0x200) returned 1
	[0154.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp")) returned 0x20
	[0154.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp")) returned 0x20
	[0154.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.926] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13142) returned 1
	[0154.926] CloseHandle (hObject=0x200) returned 1
	[0154.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg")) returned 0x20
	[0154.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg")) returned 0x20
	[0154.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.927] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7280) returned 1
	[0154.927] CloseHandle (hObject=0x200) returned 1
	[0154.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp")) returned 0x20
	[0154.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp")) returned 0x20
	[0154.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.928] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12153) returned 1
	[0154.928] CloseHandle (hObject=0x200) returned 1
	[0154.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg")) returned 0x20
	[0154.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg")) returned 0x20
	[0154.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.930] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7280) returned 1
	[0154.931] CloseHandle (hObject=0x200) returned 1
	[0154.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp")) returned 0x20
	[0154.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp")) returned 0x20
	[0154.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.931] SetEvent (hEvent=0xfc) returned 1
	[0154.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.932] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18445) returned 1
	[0154.932] CloseHandle (hObject=0x200) returned 1
	[0154.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg")) returned 0x20
	[0154.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg")) returned 0x20
	[0154.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.933] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7278) returned 1
	[0154.933] CloseHandle (hObject=0x200) returned 1
	[0154.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp")) returned 0x20
	[0154.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp")) returned 0x20
	[0154.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.934] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18142) returned 1
	[0154.934] CloseHandle (hObject=0x200) returned 1
	[0154.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg")) returned 0x20
	[0154.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg")) returned 0x20
	[0154.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.935] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7278) returned 1
	[0154.935] CloseHandle (hObject=0x200) returned 1
	[0154.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp")) returned 0x20
	[0154.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp")) returned 0x20
	[0154.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.936] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5066) returned 1
	[0154.936] CloseHandle (hObject=0x200) returned 1
	[0154.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg")) returned 0x20
	[0154.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg")) returned 0x20
	[0154.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.937] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7278) returned 1
	[0154.937] CloseHandle (hObject=0x200) returned 1
	[0154.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp")) returned 0x20
	[0154.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp")) returned 0x20
	[0154.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.064] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16862) returned 1
	[0155.064] CloseHandle (hObject=0x214) returned 1
	[0155.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg")) returned 0x20
	[0155.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg")) returned 0x20
	[0155.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.065] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3048) returned 1
	[0155.065] CloseHandle (hObject=0x214) returned 1
	[0155.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg")) returned 0x20
	[0155.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg")) returned 0x20
	[0155.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.066] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2340) returned 1
	[0155.066] CloseHandle (hObject=0x214) returned 1
	[0155.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp")) returned 0x20
	[0155.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp")) returned 0x20
	[0155.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.222] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2792) returned 1
	[0155.222] CloseHandle (hObject=0x218) returned 1
	[0155.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif")) returned 0x20
	[0155.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif")) returned 0x20
	[0155.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\attention.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.224] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47544) returned 1
	[0155.224] CloseHandle (hObject=0x21c) returned 1
	[0155.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif")) returned 0x20
	[0155.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif")) returned 0x20
	[0155.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepage.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.224] SetEvent (hEvent=0xfc) returned 1
	[0155.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.226] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20155) returned 1
	[0155.226] CloseHandle (hObject=0x218) returned 1
	[0155.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif")) returned 0x20
	[0155.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif")) returned 0x20
	[0155.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_formshomepageblank.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.226] SetEvent (hEvent=0xfc) returned 1
	[0155.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.228] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22160) returned 1
	[0155.228] CloseHandle (hObject=0x218) returned 1
	[0155.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif")) returned 0x20
	[0155.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif")) returned 0x20
	[0155.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_greentea.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.228] SetEvent (hEvent=0xfc) returned 1
	[0155.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.229] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=106) returned 1
	[0155.229] CloseHandle (hObject=0x218) returned 1
	[0155.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif")) returned 0x20
	[0155.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif")) returned 0x20
	[0155.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_groove.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.230] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8614) returned 1
	[0155.230] CloseHandle (hObject=0x218) returned 1
	[0155.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif")) returned 0x20
	[0155.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif")) returned 0x20
	[0155.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_lightspirit.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.231] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15703) returned 1
	[0155.231] CloseHandle (hObject=0x218) returned 1
	[0155.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif")) returned 0x20
	[0155.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif")) returned 0x20
	[0155.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_olivegreen.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.233] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6213) returned 1
	[0155.233] CloseHandle (hObject=0x218) returned 1
	[0155.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif")) returned 0x20
	[0155.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif")) returned 0x20
	[0155.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_premium.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.235] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20801) returned 1
	[0155.236] CloseHandle (hObject=0x218) returned 1
	[0155.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif")) returned 0x20
	[0155.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif")) returned 0x20
	[0155.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_slateblue.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.236] SetEvent (hEvent=0xfc) returned 1
	[0155.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.238] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6460) returned 1
	[0155.238] CloseHandle (hObject=0x21c) returned 1
	[0155.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif")) returned 0x20
	[0155.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif")) returned 0x20
	[0155.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_texturedblue.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.238] SetEvent (hEvent=0xfc) returned 1
	[0155.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.239] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15460) returned 1
	[0155.239] CloseHandle (hObject=0x21c) returned 1
	[0155.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif")) returned 0x20
	[0155.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif")) returned 0x20
	[0155.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_velvetrose.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.240] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=630) returned 1
	[0155.240] CloseHandle (hObject=0x21c) returned 1
	[0155.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif")) returned 0x20
	[0155.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif")) returned 0x20
	[0155.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.241] SetEvent (hEvent=0xfc) returned 1
	[0155.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.241] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=230) returned 1
	[0155.241] CloseHandle (hObject=0x21c) returned 1
	[0155.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif")) returned 0x20
	[0155.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif")) returned 0x20
	[0155.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_disable.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.244] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1051) returned 1
	[0155.244] CloseHandle (hObject=0x218) returned 1
	[0155.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif")) returned 0x20
	[0155.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif")) returned 0x20
	[0155.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_left_over.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.244] SetEvent (hEvent=0xfc) returned 1
	[0155.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.246] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=185) returned 1
	[0155.246] CloseHandle (hObject=0x218) returned 1
	[0155.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif")) returned 0x20
	[0155.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif")) returned 0x20
	[0155.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.246] SetEvent (hEvent=0xfc) returned 1
	[0155.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.247] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53) returned 1
	[0155.247] CloseHandle (hObject=0x218) returned 1
	[0155.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif")) returned 0x20
	[0155.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif")) returned 0x20
	[0155.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_disable.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.248] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=187) returned 1
	[0155.248] CloseHandle (hObject=0x218) returned 1
	[0155.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif")) returned 0x20
	[0155.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif")) returned 0x20
	[0155.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_mid_over.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.251] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=622) returned 1
	[0155.251] CloseHandle (hObject=0x21c) returned 1
	[0155.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif")) returned 0x20
	[0155.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif")) returned 0x20
	[0155.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.251] SetEvent (hEvent=0xfc) returned 1
	[0155.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.252] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=225) returned 1
	[0155.252] CloseHandle (hObject=0x21c) returned 1
	[0155.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif")) returned 0x20
	[0155.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif")) returned 0x20
	[0155.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_disable.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_disable.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.253] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1051) returned 1
	[0155.253] CloseHandle (hObject=0x21c) returned 1
	[0155.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif")) returned 0x20
	[0155.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif")) returned 0x20
	[0155.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\button_right_over.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.254] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13964) returned 1
	[0155.254] CloseHandle (hObject=0x21c) returned 1
	[0155.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg")) returned 0x20
	[0155.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg")) returned 0x20
	[0155.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.255] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14952) returned 1
	[0155.255] CloseHandle (hObject=0x21c) returned 1
	[0155.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg")) returned 0x20
	[0155.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg")) returned 0x20
	[0155.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BREAK.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\break.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.256] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12292) returned 1
	[0155.256] CloseHandle (hObject=0x21c) returned 1
	[0155.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg")) returned 0x20
	[0155.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg")) returned 0x20
	[0155.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\BUTTON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\button.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.257] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13270) returned 1
	[0155.257] CloseHandle (hObject=0x21c) returned 1
	[0155.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg")) returned 0x20
	[0155.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg")) returned 0x20
	[0155.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CHECKBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\checkbox.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.258] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17315) returned 1
	[0155.259] CloseHandle (hObject=0x21c) returned 1
	[0155.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg")) returned 0x20
	[0155.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg")) returned 0x20
	[0155.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\COMBOBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\combobox.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.259] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14013) returned 1
	[0155.260] CloseHandle (hObject=0x21c) returned 1
	[0155.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg")) returned 0x20
	[0155.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg")) returned 0x20
	[0155.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CONTACT.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\contact.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.260] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15650) returned 1
	[0155.261] CloseHandle (hObject=0x21c) returned 1
	[0155.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg")) returned 0x20
	[0155.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg")) returned 0x20
	[0155.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\CURRENCY.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\currency.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.261] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17071) returned 1
	[0155.261] CloseHandle (hObject=0x21c) returned 1
	[0155.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg")) returned 0x20
	[0155.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg")) returned 0x20
	[0155.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\date.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.262] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16697) returned 1
	[0155.262] CloseHandle (hObject=0x21c) returned 1
	[0155.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg")) returned 0x20
	[0155.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg")) returned 0x20
	[0155.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DATETIME.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\datetime.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.263] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15873) returned 1
	[0155.263] CloseHandle (hObject=0x21c) returned 1
	[0155.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg")) returned 0x20
	[0155.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg")) returned 0x20
	[0155.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.264] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8424) returned 1
	[0155.264] CloseHandle (hObject=0x21c) returned 1
	[0155.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg")) returned 0x20
	[0155.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg")) returned 0x20
	[0155.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.265] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15986) returned 1
	[0155.265] CloseHandle (hObject=0x21c) returned 1
	[0155.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg")) returned 0x20
	[0155.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg")) returned 0x20
	[0155.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\HEADING.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\heading.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.266] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5018) returned 1
	[0155.266] CloseHandle (hObject=0x21c) returned 1
	[0155.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg")) returned 0x20
	[0155.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg")) returned 0x20
	[0155.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\IMAGE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\image.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.267] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3685) returned 1
	[0155.267] CloseHandle (hObject=0x21c) returned 1
	[0155.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg")) returned 0x20
	[0155.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg")) returned 0x20
	[0155.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LINE.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\line.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.268] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15167) returned 1
	[0155.268] CloseHandle (hObject=0x21c) returned 1
	[0155.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg")) returned 0x20
	[0155.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg")) returned 0x20
	[0155.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\LISTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\listbox.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.269] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17466) returned 1
	[0155.269] CloseHandle (hObject=0x21c) returned 1
	[0155.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg")) returned 0x20
	[0155.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg")) returned 0x20
	[0155.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\NUMERIC.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\numeric.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.270] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4853) returned 1
	[0155.270] CloseHandle (hObject=0x21c) returned 1
	[0155.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg")) returned 0x20
	[0155.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg")) returned 0x20
	[0155.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\PASSWORD.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\password.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0155.271] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17352) returned 1
	[0155.271] CloseHandle (hObject=0x21c) returned 1
	[0155.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg")) returned 0x20
	[0155.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg")) returned 0x20
	[0155.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\RADIO.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\radio.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0155.478] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15065) returned 1
	[0155.479] CloseHandle (hObject=0x200) returned 1
	[0155.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg")) returned 0x20
	[0155.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg")) returned 0x20
	[0155.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.479] SetEvent (hEvent=0xfc) returned 1
	[0155.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0155.480] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14723) returned 1
	[0155.481] CloseHandle (hObject=0x200) returned 1
	[0155.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg")) returned 0x20
	[0155.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg")) returned 0x20
	[0155.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTAREA.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textarea.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0155.482] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14999) returned 1
	[0155.482] CloseHandle (hObject=0x200) returned 1
	[0155.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg")) returned 0x20
	[0155.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg")) returned 0x20
	[0155.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textbox.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0155.482] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17146) returned 1
	[0155.483] CloseHandle (hObject=0x200) returned 1
	[0155.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg")) returned 0x20
	[0155.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg")) returned 0x20
	[0155.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\TEXTVIEW.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\textview.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0155.483] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16679) returned 1
	[0155.484] CloseHandle (hObject=0x200) returned 1
	[0155.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg")) returned 0x20
	[0155.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg")) returned 0x20
	[0155.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\form.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0155.485] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=318) returned 1
	[0155.485] CloseHandle (hObject=0x200) returned 1
	[0155.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\form.ico")) returned 0x20
	[0155.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\form.ico")) returned 0x20
	[0155.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FORM.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\form.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\form.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.488] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1202) returned 1
	[0155.488] CloseHandle (hObject=0x214) returned 1
	[0155.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html")) returned 0x20
	[0155.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html")) returned 0x20
	[0155.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.488] SetEvent (hEvent=0xfc) returned 1
	[0155.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.489] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1959) returned 1
	[0155.490] CloseHandle (hObject=0x214) returned 1
	[0155.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html")) returned 0x20
	[0155.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html")) returned 0x20
	[0155.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.490] SetEvent (hEvent=0xfc) returned 1
	[0155.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.491] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2053) returned 1
	[0155.491] CloseHandle (hObject=0x214) returned 1
	[0155.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html")) returned 0x20
	[0155.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html")) returned 0x20
	[0155.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.492] SetEvent (hEvent=0xfc) returned 1
	[0155.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.493] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3222) returned 1
	[0155.493] CloseHandle (hObject=0x214) returned 1
	[0155.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html")) returned 0x20
	[0155.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html")) returned 0x20
	[0155.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.494] SetEvent (hEvent=0xfc) returned 1
	[0155.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.495] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5628) returned 1
	[0155.495] CloseHandle (hObject=0x214) returned 1
	[0155.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js")) returned 0x20
	[0155.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js")) returned 0x20
	[0155.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagescript.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0155.497] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1036) returned 1
	[0155.497] CloseHandle (hObject=0x200) returned 1
	[0155.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css")) returned 0x20
	[0155.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css")) returned 0x20
	[0155.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0155.498] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=930) returned 1
	[0155.498] CloseHandle (hObject=0x200) returned 1
	[0155.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html")) returned 0x20
	[0155.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html")) returned 0x20
	[0155.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.500] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=610) returned 1
	[0155.500] CloseHandle (hObject=0x214) returned 1
	[0155.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html")) returned 0x20
	[0155.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html")) returned 0x20
	[0155.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\customer support.fdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.501] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=131614) returned 1
	[0155.501] CloseHandle (hObject=0x214) returned 1
	[0155.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\customer support.fdt")) returned 0x20
	[0155.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\customer support.fdt")) returned 0x20
	[0155.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\customer support.fdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Customer Support.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\customer support.fdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hardware tracker.fdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.502] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=133955) returned 1
	[0155.502] CloseHandle (hObject=0x214) returned 1
	[0155.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hardware tracker.fdt")) returned 0x20
	[0155.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hardware tracker.fdt")) returned 0x20
	[0155.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hardware tracker.fdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hardware Tracker.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hardware tracker.fdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition - customized.fdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.503] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=147537) returned 1
	[0155.503] CloseHandle (hObject=0x214) returned 1
	[0155.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition - customized.fdt")) returned 0x20
	[0155.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition - customized.fdt")) returned 0x20
	[0155.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition - customized.fdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition - Customized.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition - customized.fdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition.fdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.504] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=149723) returned 1
	[0155.504] CloseHandle (hObject=0x214) returned 1
	[0155.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition.fdt")) returned 0x20
	[0155.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition.fdt")) returned 0x20
	[0155.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition.fdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Hiring Requisition.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\hiring requisition.fdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\policies.fdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.506] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97645) returned 1
	[0155.506] CloseHandle (hObject=0x214) returned 1
	[0155.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\policies.fdt")) returned 0x20
	[0155.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\policies.fdt")) returned 0x20
	[0155.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\policies.fdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\POLICIES.FDT" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\policies.fdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\process library.fdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.507] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=92979) returned 1
	[0155.507] CloseHandle (hObject=0x214) returned 1
	[0155.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\process library.fdt")) returned 0x20
	[0155.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\process library.fdt")) returned 0x20
	[0155.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\process library.fdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Process Library.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\process library.fdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\status report.fdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.508] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=102061) returned 1
	[0155.508] CloseHandle (hObject=0x214) returned 1
	[0155.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\status report.fdt")) returned 0x20
	[0155.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\status report.fdt")) returned 0x20
	[0155.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\status report.fdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Status Report.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\status report.fdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\track issues.fdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.509] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=124518) returned 1
	[0155.509] CloseHandle (hObject=0x214) returned 1
	[0155.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\track issues.fdt")) returned 0x20
	[0155.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\track issues.fdt")) returned 0x20
	[0155.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\track issues.fdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\Track Issues.fdt" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formstemplates\\track issues.fdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.510] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1788) returned 1
	[0155.510] CloseHandle (hObject=0x214) returned 1
	[0155.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm")) returned 0x20
	[0155.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm")) returned 0x20
	[0155.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.513] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5273) returned 1
	[0155.513] CloseHandle (hObject=0x214) returned 1
	[0155.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg")) returned 0x20
	[0155.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg")) returned 0x20
	[0155.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.515] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1592) returned 1
	[0155.515] CloseHandle (hObject=0x214) returned 1
	[0155.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp")) returned 0x20
	[0155.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp")) returned 0x20
	[0155.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.516] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4001) returned 1
	[0155.516] CloseHandle (hObject=0x214) returned 1
	[0155.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html")) returned 0x20
	[0155.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html")) returned 0x20
	[0155.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.518] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7163) returned 1
	[0155.518] CloseHandle (hObject=0x214) returned 1
	[0155.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg")) returned 0x20
	[0155.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg")) returned 0x20
	[0155.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.519] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=92113) returned 1
	[0155.519] CloseHandle (hObject=0x214) returned 1
	[0155.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml")) returned 0x20
	[0155.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml")) returned 0x20
	[0155.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.520] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3238) returned 1
	[0155.520] CloseHandle (hObject=0x214) returned 1
	[0155.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js")) returned 0x20
	[0155.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js")) returned 0x20
	[0155.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\MENUS.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menus.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.605] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=826) returned 1
	[0155.605] CloseHandle (hObject=0x214) returned 1
	[0155.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif")) returned 0x20
	[0155.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif")) returned 0x20
	[0155.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\menu_arrow.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\menu_arrow.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.606] SetEvent (hEvent=0xfc) returned 1
	[0155.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.607] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49) returned 1
	[0155.607] CloseHandle (hObject=0x214) returned 1
	[0155.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif")) returned 0x20
	[0155.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif")) returned 0x20
	[0155.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\spacer.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.607] SetEvent (hEvent=0xfc) returned 1
	[0155.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.608] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49432) returned 1
	[0155.608] CloseHandle (hObject=0x214) returned 1
	[0155.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js")) returned 0x20
	[0155.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js")) returned 0x20
	[0155.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\submit.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0155.613] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4159) returned 1
	[0155.613] CloseHandle (hObject=0x20c) returned 1
	[0155.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js")) returned 0x20
	[0155.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js")) returned 0x20
	[0155.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\utilityfunctions.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.727] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13782) returned 1
	[0155.727] CloseHandle (hObject=0x214) returned 1
	[0155.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js")) returned 0x20
	[0155.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js")) returned 0x20
	[0155.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\validation.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.728] SetEvent (hEvent=0xfc) returned 1
	[0155.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.729] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=369) returned 1
	[0155.729] CloseHandle (hObject=0x214) returned 1
	[0155.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif")) returned 0x20
	[0155.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif")) returned 0x20
	[0155.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.729] SetEvent (hEvent=0xfc) returned 1
	[0155.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.730] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=374) returned 1
	[0155.730] CloseHandle (hObject=0x214) returned 1
	[0155.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif")) returned 0x20
	[0155.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif")) returned 0x20
	[0155.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_left_over.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.731] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=181) returned 1
	[0155.731] CloseHandle (hObject=0x214) returned 1
	[0155.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif")) returned 0x20
	[0155.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif")) returned 0x20
	[0155.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.733] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=183) returned 1
	[0155.733] CloseHandle (hObject=0x214) returned 1
	[0155.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif")) returned 0x20
	[0155.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif")) returned 0x20
	[0155.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_mid_over.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.734] SetEvent (hEvent=0xfc) returned 1
	[0155.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.734] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=369) returned 1
	[0155.734] CloseHandle (hObject=0x214) returned 1
	[0155.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif")) returned 0x20
	[0155.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif")) returned 0x20
	[0155.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.735] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=580) returned 1
	[0155.735] CloseHandle (hObject=0x214) returned 1
	[0155.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif")) returned 0x20
	[0155.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif")) returned 0x20
	[0155.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\button_right_over.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.736] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=899) returned 1
	[0155.736] CloseHandle (hObject=0x214) returned 1
	[0155.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif")) returned 0x20
	[0155.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif")) returned 0x20
	[0155.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\calendar.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.737] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=625) returned 1
	[0155.737] CloseHandle (hObject=0x214) returned 1
	[0155.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif")) returned 0x20
	[0155.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif")) returned 0x20
	[0155.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\delete.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.741] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=873) returned 1
	[0155.741] CloseHandle (hObject=0x214) returned 1
	[0155.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif")) returned 0x20
	[0155.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif")) returned 0x20
	[0155.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\error.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.742] SetEvent (hEvent=0xfc) returned 1
	[0155.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.742] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=318) returned 1
	[0155.742] CloseHandle (hObject=0x214) returned 1
	[0155.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.ico")) returned 0x20
	[0155.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.ico")) returned 0x20
	[0155.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.743] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=80013) returned 1
	[0155.743] CloseHandle (hObject=0x214) returned 1
	[0155.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js")) returned 0x20
	[0155.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js")) returned 0x20
	[0155.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.745] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1117) returned 1
	[0155.745] CloseHandle (hObject=0x214) returned 1
	[0155.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html")) returned 0x20
	[0155.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html")) returned 0x20
	[0155.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.746] SetEvent (hEvent=0xfc) returned 1
	[0155.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.746] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2128) returned 1
	[0155.746] CloseHandle (hObject=0x214) returned 1
	[0155.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html")) returned 0x20
	[0155.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html")) returned 0x20
	[0155.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.747] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=749) returned 1
	[0155.747] CloseHandle (hObject=0x214) returned 1
	[0155.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html")) returned 0x20
	[0155.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html")) returned 0x20
	[0155.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.748] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3220) returned 1
	[0155.748] CloseHandle (hObject=0x214) returned 1
	[0155.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html")) returned 0x20
	[0155.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html")) returned 0x20
	[0155.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.749] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3196) returned 1
	[0155.749] CloseHandle (hObject=0x214) returned 1
	[0155.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html")) returned 0x20
	[0155.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html")) returned 0x20
	[0155.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.754] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7642) returned 1
	[0155.754] CloseHandle (hObject=0x214) returned 1
	[0155.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js")) returned 0x20
	[0155.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js")) returned 0x20
	[0155.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagescript.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.755] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=748) returned 1
	[0155.755] CloseHandle (hObject=0x214) returned 1
	[0155.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css")) returned 0x20
	[0155.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css")) returned 0x20
	[0155.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.755] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2030) returned 1
	[0155.756] CloseHandle (hObject=0x214) returned 1
	[0155.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html")) returned 0x20
	[0155.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html")) returned 0x20
	[0155.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.756] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2134) returned 1
	[0155.756] CloseHandle (hObject=0x214) returned 1
	[0155.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html")) returned 0x20
	[0155.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html")) returned 0x20
	[0155.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.758] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18174) returned 1
	[0155.758] CloseHandle (hObject=0x214) returned 1
	[0155.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html")) returned 0x20
	[0155.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html")) returned 0x20
	[0155.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.759] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1554) returned 1
	[0155.759] CloseHandle (hObject=0x214) returned 1
	[0155.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html")) returned 0x20
	[0155.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html")) returned 0x20
	[0155.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.761] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=929) returned 1
	[0155.761] CloseHandle (hObject=0x214) returned 1
	[0155.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css")) returned 0x20
	[0155.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css")) returned 0x20
	[0155.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.762] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0155.762] CloseHandle (hObject=0x214) returned 1
	[0155.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif")) returned 0x20
	[0155.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif")) returned 0x20
	[0155.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0155.873] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0155.873] CloseHandle (hObject=0x210) returned 1
	[0155.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif")) returned 0x20
	[0155.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif")) returned 0x20
	[0155.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.874] SetEvent (hEvent=0xfc) returned 1
	[0155.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0155.875] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0155.875] CloseHandle (hObject=0x210) returned 1
	[0155.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20
	[0155.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20
	[0155.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.875] SetEvent (hEvent=0xfc) returned 1
	[0155.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0155.876] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0155.876] CloseHandle (hObject=0x210) returned 1
	[0155.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20
	[0155.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20
	[0155.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0155.877] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3151) returned 1
	[0155.877] CloseHandle (hObject=0x210) returned 1
	[0155.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css")) returned 0x20
	[0155.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css")) returned 0x20
	[0155.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0155.980] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0155.980] CloseHandle (hObject=0x204) returned 1
	[0155.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif")) returned 0x20
	[0155.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif")) returned 0x20
	[0155.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.980] SetEvent (hEvent=0xfc) returned 1
	[0155.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.080] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=185) returned 1
	[0156.080] CloseHandle (hObject=0x208) returned 1
	[0156.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif")) returned 0x20
	[0156.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif")) returned 0x20
	[0156.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\button.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.080] SetEvent (hEvent=0xfc) returned 1
	[0156.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.081] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0156.081] CloseHandle (hObject=0x208) returned 1
	[0156.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20
	[0156.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20
	[0156.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.082] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0156.082] CloseHandle (hObject=0x208) returned 1
	[0156.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20
	[0156.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20
	[0156.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.083] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3419) returned 1
	[0156.083] CloseHandle (hObject=0x208) returned 1
	[0156.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css")) returned 0x20
	[0156.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css")) returned 0x20
	[0156.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.132] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=367) returned 1
	[0156.132] CloseHandle (hObject=0x208) returned 1
	[0156.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif")) returned 0x20
	[0156.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif")) returned 0x20
	[0156.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.132] SetEvent (hEvent=0xfc) returned 1
	[0156.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.133] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0156.133] CloseHandle (hObject=0x208) returned 1
	[0156.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20
	[0156.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20
	[0156.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.134] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0156.134] CloseHandle (hObject=0x208) returned 1
	[0156.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20
	[0156.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20
	[0156.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.135] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3254) returned 1
	[0156.135] CloseHandle (hObject=0x208) returned 1
	[0156.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css")) returned 0x20
	[0156.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css")) returned 0x20
	[0156.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.136] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=930) returned 1
	[0156.136] CloseHandle (hObject=0x208) returned 1
	[0156.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css")) returned 0x20
	[0156.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css")) returned 0x20
	[0156.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.137] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=883) returned 1
	[0156.137] CloseHandle (hObject=0x208) returned 1
	[0156.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css")) returned 0x20
	[0156.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css")) returned 0x20
	[0156.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.138] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=148) returned 1
	[0156.138] CloseHandle (hObject=0x208) returned 1
	[0156.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif")) returned 0x20
	[0156.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif")) returned 0x20
	[0156.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.139] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=496) returned 1
	[0156.139] CloseHandle (hObject=0x208) returned 1
	[0156.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif")) returned 0x20
	[0156.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif")) returned 0x20
	[0156.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.140] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1025) returned 1
	[0156.140] CloseHandle (hObject=0x208) returned 1
	[0156.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif")) returned 0x20
	[0156.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif")) returned 0x20
	[0156.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.141] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2423) returned 1
	[0156.141] CloseHandle (hObject=0x208) returned 1
	[0156.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css")) returned 0x20
	[0156.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css")) returned 0x20
	[0156.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.142] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=880) returned 1
	[0156.142] CloseHandle (hObject=0x208) returned 1
	[0156.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css")) returned 0x20
	[0156.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css")) returned 0x20
	[0156.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.143] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=440) returned 1
	[0156.143] CloseHandle (hObject=0x208) returned 1
	[0156.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif")) returned 0x20
	[0156.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif")) returned 0x20
	[0156.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.145] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0156.145] CloseHandle (hObject=0x208) returned 1
	[0156.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20
	[0156.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20
	[0156.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.146] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0156.146] CloseHandle (hObject=0x208) returned 1
	[0156.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20
	[0156.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20
	[0156.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0156.147] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2802) returned 1
	[0156.147] CloseHandle (hObject=0x208) returned 1
	[0156.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css")) returned 0x20
	[0156.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css")) returned 0x20
	[0156.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.151] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=932) returned 1
	[0156.151] CloseHandle (hObject=0x1f8) returned 1
	[0156.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css")) returned 0x20
	[0156.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css")) returned 0x20
	[0156.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.304] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1041) returned 1
	[0156.305] CloseHandle (hObject=0x140) returned 1
	[0156.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css")) returned 0x20
	[0156.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css")) returned 0x20
	[0156.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.305] SetEvent (hEvent=0xfc) returned 1
	[0156.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.306] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0156.306] CloseHandle (hObject=0x140) returned 1
	[0156.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif")) returned 0x20
	[0156.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif")) returned 0x20
	[0156.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.307] SetEvent (hEvent=0xfc) returned 1
	[0156.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.307] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3107) returned 1
	[0156.307] CloseHandle (hObject=0x140) returned 1
	[0156.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css")) returned 0x20
	[0156.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css")) returned 0x20
	[0156.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.309] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=890) returned 1
	[0156.309] CloseHandle (hObject=0x140) returned 1
	[0156.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css")) returned 0x20
	[0156.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css")) returned 0x20
	[0156.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.310] SetEvent (hEvent=0xfc) returned 1
	[0156.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.310] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=891) returned 1
	[0156.310] CloseHandle (hObject=0x140) returned 1
	[0156.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css")) returned 0x20
	[0156.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css")) returned 0x20
	[0156.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.311] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=885) returned 1
	[0156.311] CloseHandle (hObject=0x140) returned 1
	[0156.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css")) returned 0x20
	[0156.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css")) returned 0x20
	[0156.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.380] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2294) returned 1
	[0156.380] CloseHandle (hObject=0x1f8) returned 1
	[0156.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm")) returned 0x20
	[0156.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm")) returned 0x20
	[0156.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.383] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4120) returned 1
	[0156.383] CloseHandle (hObject=0x140) returned 1
	[0156.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js")) returned 0x20
	[0156.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js")) returned 0x20
	[0156.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\publicfunctions.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.385] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=848) returned 1
	[0156.385] CloseHandle (hObject=0x140) returned 1
	[0156.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif")) returned 0x20
	[0156.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif")) returned 0x20
	[0156.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignleft.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.387] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=847) returned 1
	[0156.387] CloseHandle (hObject=0x140) returned 1
	[0156.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif")) returned 0x20
	[0156.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif")) returned 0x20
	[0156.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_alignright.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.388] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=870) returned 1
	[0156.388] CloseHandle (hObject=0x140) returned 1
	[0156.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif")) returned 0x20
	[0156.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif")) returned 0x20
	[0156.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bold.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.390] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=869) returned 1
	[0156.390] CloseHandle (hObject=0x140) returned 1
	[0156.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif")) returned 0x20
	[0156.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif")) returned 0x20
	[0156.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_bullets.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.392] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=847) returned 1
	[0156.392] CloseHandle (hObject=0x140) returned 1
	[0156.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif")) returned 0x20
	[0156.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif")) returned 0x20
	[0156.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_center.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.394] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1006) returned 1
	[0156.394] CloseHandle (hObject=0x140) returned 1
	[0156.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif")) returned 0x20
	[0156.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif")) returned 0x20
	[0156.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosecolor.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.395] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=890) returned 1
	[0156.395] CloseHandle (hObject=0x140) returned 1
	[0156.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif")) returned 0x20
	[0156.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif")) returned 0x20
	[0156.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_choosefont.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.396] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=863) returned 1
	[0156.396] CloseHandle (hObject=0x140) returned 1
	[0156.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif")) returned 0x20
	[0156.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif")) returned 0x20
	[0156.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_decreaseindent.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.398] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=861) returned 1
	[0156.398] CloseHandle (hObject=0x140) returned 1
	[0156.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif")) returned 0x20
	[0156.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif")) returned 0x20
	[0156.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_increaseindent.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.401] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=852) returned 1
	[0156.401] CloseHandle (hObject=0x140) returned 1
	[0156.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif")) returned 0x20
	[0156.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif")) returned 0x20
	[0156.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_italic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.402] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=850) returned 1
	[0156.402] CloseHandle (hObject=0x140) returned 1
	[0156.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif")) returned 0x20
	[0156.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif")) returned 0x20
	[0156.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_justify.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.405] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=883) returned 1
	[0156.405] CloseHandle (hObject=0x1f8) returned 1
	[0156.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif")) returned 0x20
	[0156.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif")) returned 0x20
	[0156.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.406] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=860) returned 1
	[0156.406] CloseHandle (hObject=0x1f8) returned 1
	[0156.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif")) returned 0x20
	[0156.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif")) returned 0x20
	[0156.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\rtf_underline.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.407] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=621) returned 1
	[0156.407] CloseHandle (hObject=0x1f8) returned 1
	[0156.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif")) returned 0x20
	[0156.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif")) returned 0x20
	[0156.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\save.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.408] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=76665) returned 1
	[0156.408] CloseHandle (hObject=0x1f8) returned 1
	[0156.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js")) returned 0x20
	[0156.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js")) returned 0x20
	[0156.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\submit.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.409] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28247) returned 1
	[0156.409] CloseHandle (hObject=0x1f8) returned 1
	[0156.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js")) returned 0x20
	[0156.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js")) returned 0x20
	[0156.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\utilityfunctions.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.409] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25639) returned 1
	[0156.410] CloseHandle (hObject=0x1f8) returned 1
	[0156.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js")) returned 0x20
	[0156.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js")) returned 0x20
	[0156.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\validation.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.410] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=318) returned 1
	[0156.410] CloseHandle (hObject=0x1f8) returned 1
	[0156.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.ico")) returned 0x20
	[0156.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.ico")) returned 0x20
	[0156.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.411] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7601) returned 1
	[0156.411] CloseHandle (hObject=0x1f8) returned 1
	[0156.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js")) returned 0x20
	[0156.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js")) returned 0x20
	[0156.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.412] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3448) returned 1
	[0156.412] CloseHandle (hObject=0x1f8) returned 1
	[0156.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg")) returned 0x20
	[0156.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg")) returned 0x20
	[0156.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.413] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=580) returned 1
	[0156.413] CloseHandle (hObject=0x1f8) returned 1
	[0156.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif")) returned 0x20
	[0156.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif")) returned 0x20
	[0156.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\add.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.414] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3048) returned 1
	[0156.414] CloseHandle (hObject=0x1f8) returned 1
	[0156.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg")) returned 0x20
	[0156.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg")) returned 0x20
	[0156.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.415] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2340) returned 1
	[0156.415] CloseHandle (hObject=0x1f8) returned 1
	[0156.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp")) returned 0x20
	[0156.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp")) returned 0x20
	[0156.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.416] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2792) returned 1
	[0156.416] CloseHandle (hObject=0x1f8) returned 1
	[0156.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif")) returned 0x20
	[0156.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif")) returned 0x20
	[0156.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\attention.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.417] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24910) returned 1
	[0156.417] CloseHandle (hObject=0x1f8) returned 1
	[0156.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif")) returned 0x20
	[0156.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif")) returned 0x20
	[0156.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_adobe.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.418] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5661) returned 1
	[0156.418] CloseHandle (hObject=0x1f8) returned 1
	[0156.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif")) returned 0x20
	[0156.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif")) returned 0x20
	[0156.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_casual.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.419] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32211) returned 1
	[0156.419] CloseHandle (hObject=0x1f8) returned 1
	[0156.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif")) returned 0x20
	[0156.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif")) returned 0x20
	[0156.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_country.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.420] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4906) returned 1
	[0156.420] CloseHandle (hObject=0x1f8) returned 1
	[0156.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif")) returned 0x20
	[0156.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif")) returned 0x20
	[0156.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_earthy.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.421] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=92093) returned 1
	[0156.421] CloseHandle (hObject=0x1f8) returned 1
	[0156.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif")) returned 0x20
	[0156.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif")) returned 0x20
	[0156.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepage.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.422] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20155) returned 1
	[0156.422] CloseHandle (hObject=0x1f8) returned 1
	[0156.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif")) returned 0x20
	[0156.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif")) returned 0x20
	[0156.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageblank.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.423] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1039) returned 1
	[0156.423] CloseHandle (hObject=0x1f8) returned 1
	[0156.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif")) returned 0x20
	[0156.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif")) returned 0x20
	[0156.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_formshomepageslice.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.424] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22160) returned 1
	[0156.424] CloseHandle (hObject=0x1f8) returned 1
	[0156.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif")) returned 0x20
	[0156.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif")) returned 0x20
	[0156.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_greentea.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.425] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=106) returned 1
	[0156.425] CloseHandle (hObject=0x1f8) returned 1
	[0156.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif")) returned 0x20
	[0156.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif")) returned 0x20
	[0156.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_groove.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.425] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8614) returned 1
	[0156.426] CloseHandle (hObject=0x1f8) returned 1
	[0156.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif")) returned 0x20
	[0156.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif")) returned 0x20
	[0156.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_lightspirit.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.426] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15703) returned 1
	[0156.426] CloseHandle (hObject=0x1f8) returned 1
	[0156.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif")) returned 0x20
	[0156.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif")) returned 0x20
	[0156.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_olivegreen.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.427] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6213) returned 1
	[0156.427] CloseHandle (hObject=0x1f8) returned 1
	[0156.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif")) returned 0x20
	[0156.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif")) returned 0x20
	[0156.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_premium.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.588] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20801) returned 1
	[0156.588] CloseHandle (hObject=0x168) returned 1
	[0156.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif")) returned 0x20
	[0156.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif")) returned 0x20
	[0156.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_slateblue.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.588] SetEvent (hEvent=0xfc) returned 1
	[0156.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.589] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=318) returned 1
	[0156.589] CloseHandle (hObject=0x168) returned 1
	[0156.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.ico")) returned 0x20
	[0156.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.ico")) returned 0x20
	[0156.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.592] SetEvent (hEvent=0xfc) returned 1
	[0156.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.593] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=79348) returned 1
	[0156.593] CloseHandle (hObject=0x168) returned 1
	[0156.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js")) returned 0x20
	[0156.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js")) returned 0x20
	[0156.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.594] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1119) returned 1
	[0156.594] CloseHandle (hObject=0x168) returned 1
	[0156.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html")) returned 0x20
	[0156.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html")) returned 0x20
	[0156.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.595] SetEvent (hEvent=0xfc) returned 1
	[0156.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.595] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2130) returned 1
	[0156.595] CloseHandle (hObject=0x168) returned 1
	[0156.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html")) returned 0x20
	[0156.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html")) returned 0x20
	[0156.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.597] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=751) returned 1
	[0156.597] CloseHandle (hObject=0x168) returned 1
	[0156.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html")) returned 0x20
	[0156.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html")) returned 0x20
	[0156.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.598] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4442) returned 1
	[0156.598] CloseHandle (hObject=0x168) returned 1
	[0156.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html")) returned 0x20
	[0156.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html")) returned 0x20
	[0156.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.599] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3484) returned 1
	[0156.599] CloseHandle (hObject=0x168) returned 1
	[0156.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html")) returned 0x20
	[0156.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html")) returned 0x20
	[0156.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.600] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7815) returned 1
	[0156.600] CloseHandle (hObject=0x168) returned 1
	[0156.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js")) returned 0x20
	[0156.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js")) returned 0x20
	[0156.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageScript.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagescript.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.601] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=788) returned 1
	[0156.601] CloseHandle (hObject=0x168) returned 1
	[0156.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css")) returned 0x20
	[0156.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css")) returned 0x20
	[0156.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.602] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2032) returned 1
	[0156.602] CloseHandle (hObject=0x168) returned 1
	[0156.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html")) returned 0x20
	[0156.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html")) returned 0x20
	[0156.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.603] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2136) returned 1
	[0156.603] CloseHandle (hObject=0x168) returned 1
	[0156.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html")) returned 0x20
	[0156.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html")) returned 0x20
	[0156.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.604] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18083) returned 1
	[0156.604] CloseHandle (hObject=0x168) returned 1
	[0156.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html")) returned 0x20
	[0156.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html")) returned 0x20
	[0156.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.605] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1554) returned 1
	[0156.605] CloseHandle (hObject=0x168) returned 1
	[0156.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html")) returned 0x20
	[0156.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html")) returned 0x20
	[0156.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.607] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1887) returned 1
	[0156.607] CloseHandle (hObject=0x168) returned 1
	[0156.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css")) returned 0x20
	[0156.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css")) returned 0x20
	[0156.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.739] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0156.739] CloseHandle (hObject=0x140) returned 1
	[0156.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif")) returned 0x20
	[0156.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif")) returned 0x20
	[0156.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.740] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3381) returned 1
	[0156.740] CloseHandle (hObject=0x140) returned 1
	[0156.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css")) returned 0x20
	[0156.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css")) returned 0x20
	[0156.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.741] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1838) returned 1
	[0156.741] CloseHandle (hObject=0x140) returned 1
	[0156.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css")) returned 0x20
	[0156.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css")) returned 0x20
	[0156.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.742] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=440) returned 1
	[0156.742] CloseHandle (hObject=0x140) returned 1
	[0156.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif")) returned 0x20
	[0156.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif")) returned 0x20
	[0156.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.743] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0156.743] CloseHandle (hObject=0x140) returned 1
	[0156.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20
	[0156.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20
	[0156.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.744] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0156.744] CloseHandle (hObject=0x140) returned 1
	[0156.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20
	[0156.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20
	[0156.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.745] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3760) returned 1
	[0156.745] CloseHandle (hObject=0x140) returned 1
	[0156.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css")) returned 0x20
	[0156.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css")) returned 0x20
	[0156.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.746] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1890) returned 1
	[0156.746] CloseHandle (hObject=0x140) returned 1
	[0156.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css")) returned 0x20
	[0156.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css")) returned 0x20
	[0156.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.747] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1999) returned 1
	[0156.747] CloseHandle (hObject=0x140) returned 1
	[0156.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css")) returned 0x20
	[0156.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css")) returned 0x20
	[0156.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.749] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=462) returned 1
	[0156.749] CloseHandle (hObject=0x140) returned 1
	[0156.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif")) returned 0x20
	[0156.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif")) returned 0x20
	[0156.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.750] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=267) returned 1
	[0156.750] CloseHandle (hObject=0x140) returned 1
	[0156.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif")) returned 0x20
	[0156.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif")) returned 0x20
	[0156.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.751] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4241) returned 1
	[0156.751] CloseHandle (hObject=0x140) returned 1
	[0156.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css")) returned 0x20
	[0156.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css")) returned 0x20
	[0156.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.752] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1824) returned 1
	[0156.752] CloseHandle (hObject=0x140) returned 1
	[0156.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css")) returned 0x20
	[0156.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css")) returned 0x20
	[0156.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.753] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2156) returned 1
	[0156.753] CloseHandle (hObject=0x140) returned 1
	[0156.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif")) returned 0x20
	[0156.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif")) returned 0x20
	[0156.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.754] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=496) returned 1
	[0156.755] CloseHandle (hObject=0x140) returned 1
	[0156.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif")) returned 0x20
	[0156.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif")) returned 0x20
	[0156.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.858] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1025) returned 1
	[0156.859] CloseHandle (hObject=0x140) returned 1
	[0156.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif")) returned 0x20
	[0156.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif")) returned 0x20
	[0156.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.859] SetEvent (hEvent=0xfc) returned 1
	[0156.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.945] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=364) returned 1
	[0156.945] CloseHandle (hObject=0x168) returned 1
	[0156.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif")) returned 0x20
	[0156.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif")) returned 0x20
	[0156.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.945] SetEvent (hEvent=0xfc) returned 1
	[0156.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.946] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=364) returned 1
	[0156.946] CloseHandle (hObject=0x168) returned 1
	[0156.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif")) returned 0x20
	[0156.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif")) returned 0x20
	[0156.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.947] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4311) returned 1
	[0156.947] CloseHandle (hObject=0x168) returned 1
	[0156.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css")) returned 0x20
	[0156.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css")) returned 0x20
	[0156.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.948] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1866) returned 1
	[0156.948] CloseHandle (hObject=0x168) returned 1
	[0156.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css")) returned 0x20
	[0156.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css")) returned 0x20
	[0156.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.949] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6906) returned 1
	[0156.949] CloseHandle (hObject=0x168) returned 1
	[0156.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif")) returned 0x20
	[0156.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif")) returned 0x20
	[0156.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.950] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0156.950] CloseHandle (hObject=0x168) returned 1
	[0156.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif")) returned 0x20
	[0156.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif")) returned 0x20
	[0156.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.951] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0156.951] CloseHandle (hObject=0x168) returned 1
	[0156.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif")) returned 0x20
	[0156.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif")) returned 0x20
	[0156.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.952] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4554) returned 1
	[0156.952] CloseHandle (hObject=0x168) returned 1
	[0156.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css")) returned 0x20
	[0156.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css")) returned 0x20
	[0156.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.953] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=428) returned 1
	[0156.953] CloseHandle (hObject=0x168) returned 1
	[0156.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif")) returned 0x20
	[0156.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif")) returned 0x20
	[0156.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.954] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0156.954] CloseHandle (hObject=0x168) returned 1
	[0156.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20
	[0156.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20
	[0156.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.955] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0156.955] CloseHandle (hObject=0x168) returned 1
	[0156.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20
	[0156.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20
	[0156.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.956] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4048) returned 1
	[0156.956] CloseHandle (hObject=0x168) returned 1
	[0156.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css")) returned 0x20
	[0156.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css")) returned 0x20
	[0156.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.957] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2781) returned 1
	[0156.957] CloseHandle (hObject=0x168) returned 1
	[0156.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css")) returned 0x20
	[0156.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css")) returned 0x20
	[0156.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.958] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=233) returned 1
	[0156.958] CloseHandle (hObject=0x168) returned 1
	[0156.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif")) returned 0x20
	[0156.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif")) returned 0x20
	[0156.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.959] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3261) returned 1
	[0156.959] CloseHandle (hObject=0x168) returned 1
	[0156.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif")) returned 0x20
	[0156.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif")) returned 0x20
	[0156.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.960] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=462) returned 1
	[0156.960] CloseHandle (hObject=0x168) returned 1
	[0156.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif")) returned 0x20
	[0156.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif")) returned 0x20
	[0156.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.961] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=264) returned 1
	[0156.961] CloseHandle (hObject=0x168) returned 1
	[0156.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif")) returned 0x20
	[0156.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif")) returned 0x20
	[0156.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.962] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4222) returned 1
	[0156.962] CloseHandle (hObject=0x168) returned 1
	[0156.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css")) returned 0x20
	[0156.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css")) returned 0x20
	[0156.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.963] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=815) returned 1
	[0156.963] CloseHandle (hObject=0x168) returned 1
	[0156.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif")) returned 0x20
	[0156.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif")) returned 0x20
	[0156.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.964] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27027) returned 1
	[0156.964] CloseHandle (hObject=0x168) returned 1
	[0156.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif")) returned 0x20
	[0156.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif")) returned 0x20
	[0156.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.965] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=341) returned 1
	[0156.966] CloseHandle (hObject=0x168) returned 1
	[0156.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif")) returned 0x20
	[0156.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif")) returned 0x20
	[0156.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.966] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0156.967] CloseHandle (hObject=0x168) returned 1
	[0156.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif")) returned 0x20
	[0156.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif")) returned 0x20
	[0156.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.967] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4025) returned 1
	[0156.967] CloseHandle (hObject=0x168) returned 1
	[0156.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css")) returned 0x20
	[0156.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css")) returned 0x20
	[0156.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.968] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1848) returned 1
	[0156.969] CloseHandle (hObject=0x168) returned 1
	[0156.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css")) returned 0x20
	[0156.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css")) returned 0x20
	[0156.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.969] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1849) returned 1
	[0156.970] CloseHandle (hObject=0x168) returned 1
	[0156.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css")) returned 0x20
	[0156.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css")) returned 0x20
	[0156.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.970] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1843) returned 1
	[0156.970] CloseHandle (hObject=0x168) returned 1
	[0156.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css")) returned 0x20
	[0156.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css")) returned 0x20
	[0156.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.971] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2296) returned 1
	[0156.971] CloseHandle (hObject=0x168) returned 1
	[0156.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm")) returned 0x20
	[0156.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm")) returned 0x20
	[0156.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.972] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5273) returned 1
	[0156.972] CloseHandle (hObject=0x168) returned 1
	[0156.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg")) returned 0x20
	[0156.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg")) returned 0x20
	[0156.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.973] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1592) returned 1
	[0156.973] CloseHandle (hObject=0x168) returned 1
	[0156.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp")) returned 0x20
	[0156.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp")) returned 0x20
	[0156.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.974] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5706) returned 1
	[0156.974] CloseHandle (hObject=0x168) returned 1
	[0156.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html")) returned 0x20
	[0156.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html")) returned 0x20
	[0156.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.975] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2783) returned 1
	[0156.975] CloseHandle (hObject=0x168) returned 1
	[0156.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html")) returned 0x20
	[0156.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html")) returned 0x20
	[0156.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.976] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7163) returned 1
	[0156.976] CloseHandle (hObject=0x168) returned 1
	[0156.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg")) returned 0x20
	[0156.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg")) returned 0x20
	[0156.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.977] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9591) returned 1
	[0156.977] CloseHandle (hObject=0x168) returned 1
	[0156.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js")) returned 0x20
	[0156.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js")) returned 0x20
	[0156.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\form_edit.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.146] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=615) returned 1
	[0157.146] CloseHandle (hObject=0x168) returned 1
	[0157.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif")) returned 0x20
	[0157.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif")) returned 0x20
	[0157.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\launch.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.147] SetEvent (hEvent=0xfc) returned 1
	[0157.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.147] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1481) returned 1
	[0157.147] CloseHandle (hObject=0x168) returned 1
	[0157.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html")) returned 0x20
	[0157.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html")) returned 0x20
	[0157.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.148] SetEvent (hEvent=0xfc) returned 1
	[0157.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.149] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5273) returned 1
	[0157.149] CloseHandle (hObject=0x168) returned 1
	[0157.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg")) returned 0x20
	[0157.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg")) returned 0x20
	[0157.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.149] SetEvent (hEvent=0xfc) returned 1
	[0157.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.150] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1592) returned 1
	[0157.150] CloseHandle (hObject=0x1f8) returned 1
	[0157.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp")) returned 0x20
	[0157.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp")) returned 0x20
	[0157.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.151] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9908) returned 1
	[0157.151] CloseHandle (hObject=0x1f8) returned 1
	[0157.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js")) returned 0x20
	[0157.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js")) returned 0x20
	[0157.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form_edit.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.152] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=82710) returned 1
	[0157.152] CloseHandle (hObject=0x1f8) returned 1
	[0157.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg")) returned 0x20
	[0157.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg")) returned 0x20
	[0157.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.153] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=615) returned 1
	[0157.153] CloseHandle (hObject=0x1f8) returned 1
	[0157.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif")) returned 0x20
	[0157.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif")) returned 0x20
	[0157.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\launch.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.154] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=196724) returned 1
	[0157.154] CloseHandle (hObject=0x1f8) returned 1
	[0157.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif")) returned 0x20
	[0157.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif")) returned 0x20
	[0157.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\macroprogress.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.302] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10078) returned 1
	[0157.302] CloseHandle (hObject=0x1f8) returned 1
	[0157.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js")) returned 0x20
	[0157.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js")) returned 0x20
	[0157.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\publicfunctions.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\CHEVRON.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\chevron.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.305] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2862) returned 1
	[0157.305] CloseHandle (hObject=0x1f8) returned 1
	[0157.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\CHEVRON.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\chevron.ico")) returned 0x20
	[0157.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\CHEVRON.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\chevron.ico")) returned 0x20
	[0157.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\CHEVRON.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\chevron.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\CHEVRON.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\chevron.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\COMPUTER.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\computer.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.306] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2606) returned 1
	[0157.306] CloseHandle (hObject=0x1f8) returned 1
	[0157.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\COMPUTER.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\computer.ico")) returned 0x20
	[0157.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\COMPUTER.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\computer.ico")) returned 0x20
	[0157.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\COMPUTER.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\computer.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\COMPUTER.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\computer.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ContactSelector.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\contactselector.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.307] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3750) returned 1
	[0157.307] CloseHandle (hObject=0x1f8) returned 1
	[0157.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ContactSelector.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\contactselector.ico")) returned 0x20
	[0157.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ContactSelector.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\contactselector.ico")) returned 0x20
	[0157.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ContactSelector.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\contactselector.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ContactSelector.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\contactselector.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\gfserrorfromgroove.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gfserrorfromgroove.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.422] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1718) returned 1
	[0157.422] CloseHandle (hObject=0x168) returned 1
	[0157.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\gfserrorfromgroove.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gfserrorfromgroove.ico")) returned 0x20
	[0157.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\gfserrorfromgroove.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gfserrorfromgroove.ico")) returned 0x20
	[0157.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\gfserrorfromgroove.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gfserrorfromgroove.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\gfserrorfromgroove.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gfserrorfromgroove.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OnLineIdle.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\onlineidle.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.429] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3438) returned 1
	[0157.429] CloseHandle (hObject=0x168) returned 1
	[0157.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OnLineIdle.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\onlineidle.ico")) returned 0x20
	[0157.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OnLineIdle.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\onlineidle.ico")) returned 0x20
	[0157.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OnLineIdle.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\onlineidle.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OnLineIdle.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\onlineidle.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OutDomain.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outdomain.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.430] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=318) returned 1
	[0157.430] CloseHandle (hObject=0x168) returned 1
	[0157.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OutDomain.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outdomain.ico")) returned 0x20
	[0157.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OutDomain.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outdomain.ico")) returned 0x20
	[0157.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OutDomain.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outdomain.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OutDomain.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outdomain.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OUTGOING.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outgoing.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.431] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1718) returned 1
	[0157.431] CloseHandle (hObject=0x168) returned 1
	[0157.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OUTGOING.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outgoing.ico")) returned 0x20
	[0157.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OUTGOING.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outgoing.ico")) returned 0x20
	[0157.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OUTGOING.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outgoing.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OUTGOING.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outgoing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OutSyncPC.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outsyncpc.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.431] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=318) returned 1
	[0157.432] CloseHandle (hObject=0x168) returned 1
	[0157.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OutSyncPC.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outsyncpc.ico")) returned 0x20
	[0157.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OutSyncPC.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outsyncpc.ico")) returned 0x20
	[0157.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OutSyncPC.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outsyncpc.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OutSyncPC.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\outsyncpc.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\PersonalContact.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\personalcontact.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.432] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1718) returned 1
	[0157.432] CloseHandle (hObject=0x168) returned 1
	[0157.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\PersonalContact.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\personalcontact.ico")) returned 0x20
	[0157.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\PersonalContact.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\personalcontact.ico")) returned 0x20
	[0157.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\PersonalContact.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\personalcontact.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\PersonalContact.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\personalcontact.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SessionMember.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\sessionmember.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.435] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2862) returned 1
	[0157.435] CloseHandle (hObject=0x168) returned 1
	[0157.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SessionMember.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\sessionmember.ico")) returned 0x20
	[0157.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SessionMember.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\sessionmember.ico")) returned 0x20
	[0157.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SessionMember.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\sessionmember.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SessionMember.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\sessionmember.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SessionOwner.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\sessionowner.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.436] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2550) returned 1
	[0157.436] CloseHandle (hObject=0x168) returned 1
	[0157.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SessionOwner.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\sessionowner.ico")) returned 0x20
	[0157.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SessionOwner.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\sessionowner.ico")) returned 0x20
	[0157.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SessionOwner.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\sessionowner.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SessionOwner.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\sessionowner.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SpaceSelector.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\spaceselector.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.437] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2862) returned 1
	[0157.437] CloseHandle (hObject=0x168) returned 1
	[0157.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SpaceSelector.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\spaceselector.ico")) returned 0x20
	[0157.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SpaceSelector.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\spaceselector.ico")) returned 0x20
	[0157.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SpaceSelector.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\spaceselector.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\SpaceSelector.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\spaceselector.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusAway.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusaway.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.438] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2862) returned 1
	[0157.438] CloseHandle (hObject=0x168) returned 1
	[0157.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusAway.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusaway.ico")) returned 0x20
	[0157.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusAway.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusaway.ico")) returned 0x20
	[0157.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusAway.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusaway.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusAway.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusaway.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusDoNotDisturb.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusdonotdisturb.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.439] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2862) returned 1
	[0157.439] CloseHandle (hObject=0x168) returned 1
	[0157.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusDoNotDisturb.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusdonotdisturb.ico")) returned 0x20
	[0157.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusDoNotDisturb.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusdonotdisturb.ico")) returned 0x20
	[0157.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusDoNotDisturb.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusdonotdisturb.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusDoNotDisturb.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusdonotdisturb.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusOnline.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusonline.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.440] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2862) returned 1
	[0157.440] CloseHandle (hObject=0x168) returned 1
	[0157.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusOnline.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusonline.ico")) returned 0x20
	[0157.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusOnline.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusonline.ico")) returned 0x20
	[0157.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusOnline.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusonline.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\StatusOnline.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\statusonline.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\TOOLICON.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\toolicon.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.441] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10134) returned 1
	[0157.441] CloseHandle (hObject=0x168) returned 1
	[0157.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\TOOLICON.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\toolicon.ico")) returned 0x20
	[0157.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\TOOLICON.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\toolicon.ico")) returned 0x20
	[0157.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\TOOLICON.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\toolicon.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\TOOLICON.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\toolicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\WSS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\wss.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.442] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9062) returned 1
	[0157.442] CloseHandle (hObject=0x168) returned 1
	[0157.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\WSS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\wss.ico")) returned 0x20
	[0157.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\WSS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\wss.ico")) returned 0x20
	[0157.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\WSS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\wss.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\WSS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\wss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\WSS_DocLib.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\wss_doclib.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.443] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2862) returned 1
	[0157.443] CloseHandle (hObject=0x168) returned 1
	[0157.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\WSS_DocLib.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\wss_doclib.ico")) returned 0x20
	[0157.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\WSS_DocLib.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\wss_doclib.ico")) returned 0x20
	[0157.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\WSS_DocLib.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\wss_doclib.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\WSS_DocLib.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\wss_doclib.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\builtincontrolsschema.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.566] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1159) returned 1
	[0157.566] CloseHandle (hObject=0x168) returned 1
	[0157.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\builtincontrolsschema.xsd")) returned 0x20
	[0157.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\builtincontrolsschema.xsd")) returned 0x20
	[0157.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\builtincontrolsschema.xsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\builtincontrolsschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\builtincontrolsschema.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.566] SetEvent (hEvent=0xfc) returned 1
	[0157.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.699] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23030) returned 1
	[0157.699] CloseHandle (hObject=0x168) returned 1
	[0157.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav")) returned 0x20
	[0157.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav")) returned 0x20
	[0157.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\arrow.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.700] SetEvent (hEvent=0xfc) returned 1
	[0157.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.visio.workflowauthoring.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.787] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75672) returned 1
	[0157.787] CloseHandle (hObject=0x168) returned 1
	[0157.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.visio.workflowauthoring.dll")) returned 0x20
	[0157.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.visio.workflowauthoring.dll")) returned 0x20
	[0157.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.visio.workflowauthoring.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.visio.workflowauthoring.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.787] SetEvent (hEvent=0xfc) returned 1
	[0157.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\microsoft.office.workflow.actions.proxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.workflow.actions.proxy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.787] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=423776) returned 1
	[0157.788] CloseHandle (hObject=0x168) returned 1
	[0157.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\microsoft.office.workflow.actions.proxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.workflow.actions.proxy.dll")) returned 0x20
	[0157.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\microsoft.office.workflow.actions.proxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.workflow.actions.proxy.dll")) returned 0x20
	[0157.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\microsoft.office.workflow.actions.proxy.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.workflow.actions.proxy.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\microsoft.office.workflow.actions.proxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.workflow.actions.proxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.788] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=513920) returned 1
	[0157.788] CloseHandle (hObject=0x168) returned 1
	[0157.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.dll")) returned 0x20
	[0157.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.dll")) returned 0x20
	[0157.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.789] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=201136) returned 1
	[0157.789] CloseHandle (hObject=0x168) returned 1
	[0157.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml")) returned 0x20
	[0157.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml")) returned 0x20
	[0157.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\microsoft.sharepoint.workflowactions.proxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.workflowactions.proxy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.790] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=477024) returned 1
	[0157.790] CloseHandle (hObject=0x168) returned 1
	[0157.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\microsoft.sharepoint.workflowactions.proxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.workflowactions.proxy.dll")) returned 0x20
	[0157.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\microsoft.sharepoint.workflowactions.proxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.workflowactions.proxy.dll")) returned 0x20
	[0157.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\microsoft.sharepoint.workflowactions.proxy.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.workflowactions.proxy.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\microsoft.sharepoint.workflowactions.proxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.workflowactions.proxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MIMEDIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mimedir.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.792] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=542560) returned 1
	[0157.792] CloseHandle (hObject=0x168) returned 1
	[0157.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MIMEDIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mimedir.dll")) returned 0x20
	[0157.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MIMEDIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mimedir.dll")) returned 0x20
	[0157.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MIMEDIR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mimedir.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MIMEDIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mimedir.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\misc.exe" (normalized: "c:\\program files\\microsoft office\\office14\\misc.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.793] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=571232) returned 1
	[0157.793] CloseHandle (hObject=0x168) returned 1
	[0157.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\misc.exe" (normalized: "c:\\program files\\microsoft office\\office14\\misc.exe")) returned 0x20
	[0157.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\misc.exe" (normalized: "c:\\program files\\microsoft office\\office14\\misc.exe")) returned 0x20
	[0157.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\misc.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\misc.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\misc.exe" (normalized: "c:\\program files\\microsoft office\\office14\\misc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MLCFG32.CPL" (normalized: "c:\\program files\\microsoft office\\office14\\mlcfg32.cpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.794] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75144) returned 1
	[0157.794] CloseHandle (hObject=0x168) returned 1
	[0157.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MLCFG32.CPL" (normalized: "c:\\program files\\microsoft office\\office14\\mlcfg32.cpl")) returned 0x20
	[0157.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MLCFG32.CPL" (normalized: "c:\\program files\\microsoft office\\office14\\mlcfg32.cpl")) returned 0x20
	[0157.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MLCFG32.CPL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mlcfg32.cpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MLCFG32.CPL" (normalized: "c:\\program files\\microsoft office\\office14\\mlcfg32.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MLSHEXT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mlshext.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.795] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22912) returned 1
	[0157.795] CloseHandle (hObject=0x168) returned 1
	[0157.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MLSHEXT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mlshext.dll")) returned 0x20
	[0157.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MLSHEXT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mlshext.dll")) returned 0x20
	[0157.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MLSHEXT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mlshext.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MLSHEXT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mlshext.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\mml2omml.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.796] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=155527) returned 1
	[0157.796] CloseHandle (hObject=0x168) returned 1
	[0157.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\mml2omml.xsl")) returned 0x20
	[0157.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\mml2omml.xsl")) returned 0x20
	[0157.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mml2omml.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\mml2omml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MODELENG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\modeleng.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.797] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=652136) returned 1
	[0157.797] CloseHandle (hObject=0x168) returned 1
	[0157.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MODELENG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\modeleng.dll")) returned 0x20
	[0157.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MODELENG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\modeleng.dll")) returned 0x20
	[0157.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MODELENG.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\modeleng.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MODELENG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\modeleng.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MORPH9.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\morph9.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.798] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=632720) returned 1
	[0157.798] CloseHandle (hObject=0x168) returned 1
	[0157.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MORPH9.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\morph9.dll")) returned 0x20
	[0157.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MORPH9.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\morph9.dll")) returned 0x20
	[0157.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MORPH9.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\morph9.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MORPH9.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\morph9.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MPXINT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mpxint.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.799] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=207200) returned 1
	[0157.799] CloseHandle (hObject=0x168) returned 1
	[0157.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MPXINT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mpxint.dll")) returned 0x20
	[0157.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MPXINT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mpxint.dll")) returned 0x20
	[0157.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MPXINT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mpxint.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MPXINT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mpxint.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.800] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=677248) returned 1
	[0157.800] CloseHandle (hObject=0x168) returned 1
	[0157.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb")) returned 0x20
	[0157.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb")) returned 0x20
	[0157.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msacc.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSACCESS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.801] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20106080) returned 1
	[0157.801] CloseHandle (hObject=0x168) returned 1
	[0157.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSACCESS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe")) returned 0x20
	[0157.801] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSACCESS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSACCESS.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0157.801] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSACCESS.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSACCESS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe")) returned 0
	[0157.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.802] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1382) returned 1
	[0157.802] CloseHandle (hObject=0x168) returned 1
	[0157.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.manifest")) returned 0x20
	[0157.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.manifest")) returned 0x20
	[0157.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\msaccess.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\msaccess.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSAEXP30.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msaexp30.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.803] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=82312) returned 1
	[0157.803] CloseHandle (hObject=0x168) returned 1
	[0157.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSAEXP30.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msaexp30.dll")) returned 0x20
	[0157.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSAEXP30.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msaexp30.dll")) returned 0x20
	[0157.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSAEXP30.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msaexp30.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSAEXP30.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msaexp30.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.804] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2636) returned 1
	[0157.804] CloseHandle (hObject=0x168) returned 1
	[0157.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.inf")) returned 0x20
	[0157.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.inf")) returned 0x20
	[0157.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.INF" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.804] SetEvent (hEvent=0xfc) returned 1
	[0157.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.ppd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.813] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6829) returned 1
	[0157.813] CloseHandle (hObject=0x168) returned 1
	[0157.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.ppd")) returned 0x20
	[0157.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.ppd")) returned 0x20
	[0157.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.ppd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSCOL11.PPD" (normalized: "c:\\program files\\microsoft office\\office14\\mscol11.ppd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_en.dub"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.814] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0157.814] CloseHandle (hObject=0x168) returned 1
	[0157.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_en.dub")) returned 0x20
	[0157.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_en.dub")) returned 0x20
	[0157.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_en.dub.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_es.dub"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.815] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0157.815] CloseHandle (hObject=0x168) returned 1
	[0157.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_es.dub")) returned 0x20
	[0157.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_es.dub")) returned 0x20
	[0157.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_es.dub.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_fr.dub"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.816] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0157.816] CloseHandle (hObject=0x168) returned 1
	[0157.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_fr.dub")) returned 0x20
	[0157.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_fr.dub")) returned 0x20
	[0157.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_fr.dub.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7cm_fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.817] SetEvent (hEvent=0xfc) returned 1
	[0157.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7en.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7en.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.818] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=480152) returned 1
	[0157.818] CloseHandle (hObject=0x168) returned 1
	[0157.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7en.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7en.dll")) returned 0x20
	[0157.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7en.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7en.dll")) returned 0x20
	[0157.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7en.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7en.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7en.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7en.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.819] SetEvent (hEvent=0xfc) returned 1
	[0157.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7es.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7es.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.928] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=480152) returned 1
	[0157.928] CloseHandle (hObject=0x168) returned 1
	[0157.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7es.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7es.dll")) returned 0x20
	[0157.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7es.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7es.dll")) returned 0x20
	[0157.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7es.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7es.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7es.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7es.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.928] SetEvent (hEvent=0xfc) returned 1
	[0157.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_en.dub"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.929] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=103424) returned 1
	[0157.929] CloseHandle (hObject=0x168) returned 1
	[0157.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_en.dub")) returned 0x20
	[0157.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_en.dub")) returned 0x20
	[0157.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_en.dub.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_es.dub"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.930] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3072) returned 1
	[0157.930] CloseHandle (hObject=0x168) returned 1
	[0157.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_es.dub")) returned 0x20
	[0157.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_es.dub")) returned 0x20
	[0157.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_es.dub.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_fr.dub"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.931] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3072) returned 1
	[0157.931] CloseHandle (hObject=0x168) returned 1
	[0157.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_fr.dub")) returned 0x20
	[0157.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_fr.dub")) returned 0x20
	[0157.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_fr.dub.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7wre_fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mset7.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.932] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=977320) returned 1
	[0157.932] CloseHandle (hObject=0x168) returned 1
	[0157.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mset7.dll")) returned 0x20
	[0157.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mset7.dll")) returned 0x20
	[0157.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mset7.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7db.kic"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.933] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2904064) returned 1
	[0157.933] CloseHandle (hObject=0x168) returned 1
	[0157.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7db.kic")) returned 0x20
	[0157.934] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7db.kic"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7db.kic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0157.934] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7db.kic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7db.kic")) returned 0
	[0157.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7en.kic"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.935] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1858366) returned 1
	[0157.935] CloseHandle (hObject=0x168) returned 1
	[0157.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7en.kic")) returned 0x20
	[0157.935] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7en.kic"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7en.kic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0157.935] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7en.kic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7en.kic")) returned 0
	[0157.935] SetEvent (hEvent=0xfc) returned 1
	[0157.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7es.kic"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.936] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1305074) returned 1
	[0157.936] CloseHandle (hObject=0x168) returned 1
	[0157.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7es.kic")) returned 0x20
	[0157.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7es.kic")) returned 0x20
	[0157.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7es.kic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7es.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7fr.kic"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.937] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1854492) returned 1
	[0157.937] CloseHandle (hObject=0x168) returned 1
	[0157.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7fr.kic")) returned 0x20
	[0157.937] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7fr.kic"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7fr.kic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0157.937] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7fr.kic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7fr.kic")) returned 0
	[0157.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7ge.kic"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.938] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3499942) returned 1
	[0157.938] CloseHandle (hObject=0x168) returned 1
	[0157.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7ge.kic")) returned 0x20
	[0157.939] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7ge.kic"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7ge.kic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0157.939] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7ge.kic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7ge.kic")) returned 0
	[0157.939] SetEvent (hEvent=0xfc) returned 1
	[0157.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7jp.kic"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.939] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1942940) returned 1
	[0157.940] CloseHandle (hObject=0x168) returned 1
	[0157.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7jp.kic")) returned 0x20
	[0157.940] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7jp.kic"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7jp.kic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0157.940] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7jp.kic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\office14\\mset7jp.kic")) returned 0
	[0157.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7tk.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mset7tk.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.940] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=530824) returned 1
	[0157.941] CloseHandle (hObject=0x168) returned 1
	[0157.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7tk.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mset7tk.dll")) returned 0x20
	[0157.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7tk.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mset7tk.dll")) returned 0x20
	[0157.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7tk.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7tk.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7tk.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mset7tk.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7tkjp.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mset7tkjp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.942] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1111960) returned 1
	[0157.942] CloseHandle (hObject=0x168) returned 1
	[0157.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7tkjp.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mset7tkjp.dll")) returned 0x20
	[0157.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7tkjp.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mset7tkjp.dll")) returned 0x20
	[0157.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7tkjp.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mset7tkjp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mset7tkjp.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mset7tkjp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSN.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\msn.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.943] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3638) returned 1
	[0157.943] CloseHandle (hObject=0x168) returned 1
	[0157.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSN.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\msn.ico")) returned 0x20
	[0157.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSN.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\msn.ico")) returned 0x20
	[0157.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSN.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msn.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSN.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\msn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\mso0127.acl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.944] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13202) returned 1
	[0157.944] CloseHandle (hObject=0x168) returned 1
	[0157.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\mso0127.acl")) returned 0x20
	[0157.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\mso0127.acl")) returned 0x20
	[0157.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mso0127.acl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\mso0127.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msocf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.115] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=221560) returned 1
	[0158.115] CloseHandle (hObject=0x140) returned 1
	[0158.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msocf.dll")) returned 0x20
	[0158.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msocf.dll")) returned 0x20
	[0158.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCF.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msocf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msocf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.116] SetEvent (hEvent=0xfc) returned 1
	[0158.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCFU.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msocfu.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.117] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=436112) returned 1
	[0158.117] CloseHandle (hObject=0x140) returned 1
	[0158.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCFU.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msocfu.dll")) returned 0x20
	[0158.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCFU.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msocfu.dll")) returned 0x20
	[0158.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCFU.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msocfu.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCFU.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msocfu.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCFUIUTILITIESDLL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msocfuiutilitiesdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.120] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17808) returned 1
	[0158.120] CloseHandle (hObject=0x140) returned 1
	[0158.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCFUIUTILITIESDLL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msocfuiutilitiesdll.dll")) returned 0x20
	[0158.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCFUIUTILITIESDLL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msocfuiutilitiesdll.dll")) returned 0x20
	[0158.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCFUIUTILITIESDLL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msocfuiutilitiesdll.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOCFUIUTILITIESDLL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msocfuiutilitiesdll.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSODCW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msodcw.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.122] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=687968) returned 1
	[0158.122] CloseHandle (hObject=0x140) returned 1
	[0158.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSODCW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msodcw.dll")) returned 0x20
	[0158.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSODCW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msodcw.dll")) returned 0x20
	[0158.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSODCW.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msodcw.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSODCW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msodcw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.122] SetEvent (hEvent=0xfc) returned 1
	[0158.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHEV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msohev.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.124] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97152) returned 1
	[0158.124] CloseHandle (hObject=0x140) returned 1
	[0158.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHEV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msohev.dll")) returned 0x20
	[0158.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHEV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msohev.dll")) returned 0x20
	[0158.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHEV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msohev.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHEV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msohev.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.124] SetEvent (hEvent=0xfc) returned 1
	[0158.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHEVI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msohevi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.125] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77184) returned 1
	[0158.125] CloseHandle (hObject=0x140) returned 1
	[0158.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHEVI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msohevi.dll")) returned 0x20
	[0158.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHEVI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msohevi.dll")) returned 0x20
	[0158.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHEVI.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msohevi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHEVI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msohevi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.126] SetEvent (hEvent=0xfc) returned 1
	[0158.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHTMED.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msohtmed.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.126] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=87936) returned 1
	[0158.126] CloseHandle (hObject=0x140) returned 1
	[0158.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHTMED.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msohtmed.exe")) returned 0x20
	[0158.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHTMED.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msohtmed.exe")) returned 0x20
	[0158.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHTMED.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msohtmed.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOHTMED.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msohtmed.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOSTYLE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msostyle.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.128] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41880) returned 1
	[0158.128] CloseHandle (hObject=0x140) returned 1
	[0158.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOSTYLE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msostyle.dll")) returned 0x20
	[0158.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOSTYLE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msostyle.dll")) returned 0x20
	[0158.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOSTYLE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msostyle.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOSTYLE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msostyle.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.129] SetEvent (hEvent=0xfc) returned 1
	[0158.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msosync.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.129] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=909696) returned 1
	[0158.129] CloseHandle (hObject=0x140) returned 1
	[0158.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msosync.exe")) returned 0x20
	[0158.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msosync.exe")) returned 0x20
	[0158.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOSYNC.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msosync.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msosync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUC.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msouc.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.130] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=489848) returned 1
	[0158.130] CloseHandle (hObject=0x140) returned 1
	[0158.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUC.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msouc.exe")) returned 0x20
	[0158.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUC.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msouc.exe")) returned 0x20
	[0158.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUC.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msouc.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUC.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msouc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.131] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=417144) returned 1
	[0158.131] CloseHandle (hObject=0x140) returned 1
	[0158.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb")) returned 0x20
	[0158.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb")) returned 0x20
	[0158.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msoutl.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUTLS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msoutls.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.132] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=284024) returned 1
	[0158.132] CloseHandle (hObject=0x140) returned 1
	[0158.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUTLS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msoutls.dll")) returned 0x20
	[0158.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUTLS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msoutls.dll")) returned 0x20
	[0158.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUTLS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msoutls.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSOUTLS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msoutls.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPJEVTS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mspjevts.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0158.405] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=71008) returned 1
	[0158.406] CloseHandle (hObject=0x168) returned 1
	[0158.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPJEVTS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mspjevts.dll")) returned 0x20
	[0158.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPJEVTS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mspjevts.dll")) returned 0x20
	[0158.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPJEVTS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mspjevts.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPJEVTS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mspjevts.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.426] SetEvent (hEvent=0xfc) returned 1
	[0158.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ogalegit.dll" (normalized: "c:\\program files\\microsoft office\\office14\\ogalegit.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0158.435] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=637744) returned 1
	[0158.435] CloseHandle (hObject=0x204) returned 1
	[0158.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ogalegit.dll" (normalized: "c:\\program files\\microsoft office\\office14\\ogalegit.dll")) returned 0x20
	[0158.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ogalegit.dll" (normalized: "c:\\program files\\microsoft office\\office14\\ogalegit.dll")) returned 0x20
	[0158.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ogalegit.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ogalegit.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ogalegit.dll" (normalized: "c:\\program files\\microsoft office\\office14\\ogalegit.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.455] SetEvent (hEvent=0xfc) returned 1
	[0158.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OIMG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oimg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.553] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4966264) returned 1
	[0158.553] CloseHandle (hObject=0x140) returned 1
	[0158.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OIMG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oimg.dll")) returned 0x20
	[0158.553] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OIMG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oimg.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OIMG.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\oimg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.553] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OIMG.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\oimg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OIMG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oimg.dll")) returned 0
	[0158.553] SetEvent (hEvent=0xfc) returned 1
	[0158.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMSXP32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\omsxp32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.554] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=368016) returned 1
	[0158.554] CloseHandle (hObject=0x140) returned 1
	[0158.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMSXP32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\omsxp32.dll")) returned 0x20
	[0158.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMSXP32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\omsxp32.dll")) returned 0x20
	[0158.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMSXP32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\omsxp32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMSXP32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\omsxp32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnIE.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnie.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.556] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=803728) returned 1
	[0158.556] CloseHandle (hObject=0x140) returned 1
	[0158.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnIE.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnie.dll")) returned 0x20
	[0158.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnIE.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnie.dll")) returned 0x20
	[0158.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnIE.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnie.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnIE.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnie.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.556] SetEvent (hEvent=0xfc) returned 1
	[0158.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnIELinkedNotes.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnielinkednotes.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.557] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=594832) returned 1
	[0158.557] CloseHandle (hObject=0x140) returned 1
	[0158.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnIELinkedNotes.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnielinkednotes.dll")) returned 0x20
	[0158.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnIELinkedNotes.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnielinkednotes.dll")) returned 0x20
	[0158.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnIELinkedNotes.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnielinkednotes.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnIELinkedNotes.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnielinkednotes.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnOL.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnol.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.558] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=900480) returned 1
	[0158.558] CloseHandle (hObject=0x140) returned 1
	[0158.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnOL.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnol.dll")) returned 0x20
	[0158.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnOL.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnol.dll")) returned 0x20
	[0158.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnOL.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnol.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnOL.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnol.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnPPT.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnppt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.559] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=644480) returned 1
	[0158.559] CloseHandle (hObject=0x140) returned 1
	[0158.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnPPT.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnppt.dll")) returned 0x20
	[0158.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnPPT.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnppt.dll")) returned 0x20
	[0158.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnPPT.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnppt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnPPT.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnppt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnWD.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnwd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.559] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=644472) returned 1
	[0158.560] CloseHandle (hObject=0x140) returned 1
	[0158.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnWD.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnwd.dll")) returned 0x20
	[0158.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnWD.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnwd.dll")) returned 0x20
	[0158.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnWD.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnwd.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONBttnWD.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onbttnwd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.562] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=506) returned 1
	[0158.562] CloseHandle (hObject=0x140) returned 1
	[0158.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml")) returned 0x20
	[0158.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml")) returned 0x20
	[0158.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.562] SetEvent (hEvent=0xfc) returned 1
	[0158.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.gpd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.563] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9600) returned 1
	[0158.563] CloseHandle (hObject=0x140) returned 1
	[0158.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.gpd")) returned 0x20
	[0158.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.gpd")) returned 0x20
	[0158.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.gpd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.gpd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.564] SetEvent (hEvent=0xfc) returned 1
	[0158.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.564] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=123) returned 1
	[0158.564] CloseHandle (hObject=0x140) returned 1
	[0158.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.ini")) returned 0x20
	[0158.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.ini")) returned 0x20
	[0158.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote.ini" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNOteFilter.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.566] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114568) returned 1
	[0158.566] CloseHandle (hObject=0x140) returned 1
	[0158.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNOteFilter.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.dll")) returned 0x20
	[0158.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNOteFilter.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.dll")) returned 0x20
	[0158.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNOteFilter.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNOteFilter.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.gpd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.567] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81) returned 1
	[0158.567] CloseHandle (hObject=0x140) returned 1
	[0158.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.gpd")) returned 0x20
	[0158.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.gpd")) returned 0x20
	[0158.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.gpd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendtoOneNoteFilter.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotefilter.gpd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotenames.gpd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.568] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7330) returned 1
	[0158.568] CloseHandle (hObject=0x140) returned 1
	[0158.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotenames.gpd")) returned 0x20
	[0158.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotenames.gpd")) returned 0x20
	[0158.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotenames.gpd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenotenames.gpd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.568] SetEvent (hEvent=0xfc) returned 1
	[0158.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteUI.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenoteui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.569] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=60288) returned 1
	[0158.569] CloseHandle (hObject=0x140) returned 1
	[0158.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteUI.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenoteui.dll")) returned 0x20
	[0158.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteUI.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenoteui.dll")) returned 0x20
	[0158.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteUI.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenoteui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNoteUI.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenoteui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\onenote.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.570] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2131296) returned 1
	[0158.570] CloseHandle (hObject=0x140) returned 1
	[0158.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\onenote.exe")) returned 0x20
	[0158.570] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\onenote.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onenote.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.570] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onenote.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\onenote.exe")) returned 0
	[0158.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.571] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=80116) returned 1
	[0158.571] CloseHandle (hObject=0x140) returned 1
	[0158.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml")) returned 0x20
	[0158.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml")) returned 0x20
	[0158.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\onenoteirm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEM.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\onenotem.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.572] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=245120) returned 1
	[0158.572] CloseHandle (hObject=0x140) returned 1
	[0158.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEM.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\onenotem.exe")) returned 0x20
	[0158.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEM.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\onenotem.exe")) returned 0x20
	[0158.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEM.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onenotem.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEM.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\onenotem.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEMANAGED.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onenotemanaged.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.573] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=159088) returned 1
	[0158.573] CloseHandle (hObject=0x140) returned 1
	[0158.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEMANAGED.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onenotemanaged.dll")) returned 0x20
	[0158.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEMANAGED.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onenotemanaged.dll")) returned 0x20
	[0158.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEMANAGED.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onenotemanaged.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONENOTEMANAGED.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onenotemanaged.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONFILTER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onfilter.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.574] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1583472) returned 1
	[0158.574] CloseHandle (hObject=0x140) returned 1
	[0158.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONFILTER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onfilter.dll")) returned 0x20
	[0158.574] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONFILTER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onfilter.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONFILTER.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onfilter.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.574] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONFILTER.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onfilter.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONFILTER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onfilter.dll")) returned 0
	[0158.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONLNTCOMLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onlntcomlib.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.575] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=79264) returned 1
	[0158.575] CloseHandle (hObject=0x140) returned 1
	[0158.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONLNTCOMLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onlntcomlib.dll")) returned 0x20
	[0158.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONLNTCOMLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onlntcomlib.dll")) returned 0x20
	[0158.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONLNTCOMLIB.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onlntcomlib.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONLNTCOMLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onlntcomlib.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onmain.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.576] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13886312) returned 1
	[0158.576] CloseHandle (hObject=0x140) returned 1
	[0158.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onmain.dll")) returned 0x20
	[0158.576] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onmain.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONMAIN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onmain.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.576] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONMAIN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onmain.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\onmain.dll")) returned 0
	[0158.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONPPTAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onpptaddin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.577] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=688512) returned 1
	[0158.577] CloseHandle (hObject=0x140) returned 1
	[0158.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONPPTAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onpptaddin.dll")) returned 0x20
	[0158.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONPPTAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onpptaddin.dll")) returned 0x20
	[0158.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONPPTAddin.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onpptaddin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONPPTAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onpptaddin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONWordAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onwordaddin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.578] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=760184) returned 1
	[0158.578] CloseHandle (hObject=0x140) returned 1
	[0158.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONWordAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onwordaddin.dll")) returned 0x20
	[0158.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONWordAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onwordaddin.dll")) returned 0x20
	[0158.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONWordAddin.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\onwordaddin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ONWordAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\onwordaddin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGCHART.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\orgchart.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.580] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1817480) returned 1
	[0158.580] CloseHandle (hObject=0x140) returned 1
	[0158.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGCHART.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\orgchart.dll")) returned 0x20
	[0158.580] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGCHART.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\orgchart.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGCHART.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\orgchart.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.580] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGCHART.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\orgchart.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGCHART.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\orgchart.dll")) returned 0
	[0158.580] SetEvent (hEvent=0xfc) returned 1
	[0158.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGCHWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\orgchwiz.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.679] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=715656) returned 1
	[0158.679] CloseHandle (hObject=0x140) returned 1
	[0158.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGCHWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\orgchwiz.dll")) returned 0x20
	[0158.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGCHWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\orgchwiz.dll")) returned 0x20
	[0158.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGCHWIZ.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\orgchwiz.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGCHWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\orgchwiz.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.679] SetEvent (hEvent=0xfc) returned 1
	[0158.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\ormmodel.mdl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.777] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=72080) returned 1
	[0158.777] CloseHandle (hObject=0x1f8) returned 1
	[0158.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\ormmodel.mdl")) returned 0x20
	[0158.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\ormmodel.mdl")) returned 0x20
	[0158.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ormmodel.mdl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORMMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\ormmodel.mdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.778] SetEvent (hEvent=0xfc) returned 1
	[0158.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.778] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15621) returned 1
	[0158.778] CloseHandle (hObject=0x1f8) returned 1
	[0158.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm")) returned 0x20
	[0158.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm")) returned 0x20
	[0158.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.779] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49433) returned 1
	[0158.779] CloseHandle (hObject=0x1f8) returned 1
	[0158.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs")) returned 0x20
	[0158.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs")) returned 0x20
	[0158.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office14\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLACCT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlacct.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.780] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41312) returned 1
	[0158.780] CloseHandle (hObject=0x1f8) returned 1
	[0158.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLACCT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlacct.dll")) returned 0x20
	[0158.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLACCT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlacct.dll")) returned 0x20
	[0158.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLACCT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlacct.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLACCT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlacct.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLCTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlctl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.781] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=166240) returned 1
	[0158.781] CloseHandle (hObject=0x1f8) returned 1
	[0158.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLCTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlctl.dll")) returned 0x20
	[0158.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLCTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlctl.dll")) returned 0x20
	[0158.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLCTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlctl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLCTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlctl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.782] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3670016) returned 1
	[0158.782] CloseHandle (hObject=0x1f8) returned 1
	[0158.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat")) returned 0x20
	[0158.786] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.786] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dat")) returned 0
	[0158.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.786] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=702784) returned 1
	[0158.786] CloseHandle (hObject=0x1f8) returned 1
	[0158.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dll")) returned 0x20
	[0158.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dll")) returned 0x20
	[0158.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLFLTR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlfltr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLMIME.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlmime.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.787] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=720776) returned 1
	[0158.787] CloseHandle (hObject=0x1f8) returned 1
	[0158.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLMIME.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlmime.dll")) returned 0x20
	[0158.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLMIME.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlmime.dll")) returned 0x20
	[0158.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLMIME.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlmime.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLMIME.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlmime.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.788] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24505696) returned 1
	[0158.788] CloseHandle (hObject=0x1f8) returned 1
	[0158.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe")) returned 0x20
	[0158.788] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.789] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe")) returned 0
	[0158.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.789] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1206) returned 1
	[0158.789] CloseHandle (hObject=0x1f8) returned 1
	[0158.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.manifest")) returned 0x20
	[0158.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.manifest")) returned 0x20
	[0158.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE.MANIFEST" (normalized: "c:\\program files\\microsoft office\\office14\\outlook.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.791] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=816) returned 1
	[0158.791] CloseHandle (hObject=0x1f8) returned 1
	[0158.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml")) returned 0x20
	[0158.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml")) returned 0x20
	[0158.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\ameritech.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.792] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=807) returned 1
	[0158.792] CloseHandle (hObject=0x1f8) returned 1
	[0158.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml")) returned 0x20
	[0158.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml")) returned 0x20
	[0158.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btinternet.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.793] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=807) returned 1
	[0158.793] CloseHandle (hObject=0x1f8) returned 1
	[0158.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml")) returned 0x20
	[0158.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml")) returned 0x20
	[0158.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\btopenworld.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.794] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=808) returned 1
	[0158.794] CloseHandle (hObject=0x1f8) returned 1
	[0158.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml")) returned 0x20
	[0158.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml")) returned 0x20
	[0158.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\flash.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.795] SetEvent (hEvent=0xfc) returned 1
	[0158.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.795] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=818) returned 1
	[0158.796] CloseHandle (hObject=0x1f8) returned 1
	[0158.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml")) returned 0x20
	[0158.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml")) returned 0x20
	[0158.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nl.rogers.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.796] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=810) returned 1
	[0158.797] CloseHandle (hObject=0x1f8) returned 1
	[0158.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml")) returned 0x20
	[0158.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml")) returned 0x20
	[0158.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\nvbell.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.797] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=812) returned 1
	[0158.798] CloseHandle (hObject=0x1f8) returned 1
	[0158.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml")) returned 0x20
	[0158.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml")) returned 0x20
	[0158.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\pacbell.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.798] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=812) returned 1
	[0158.799] CloseHandle (hObject=0x1f8) returned 1
	[0158.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml")) returned 0x20
	[0158.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml")) returned 0x20
	[0158.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\prodigy.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.800] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=818) returned 1
	[0158.800] CloseHandle (hObject=0x1f8) returned 1
	[0158.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml")) returned 0x20
	[0158.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml")) returned 0x20
	[0158.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\rogers.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.801] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=816) returned 1
	[0158.801] CloseHandle (hObject=0x1f8) returned 1
	[0158.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml")) returned 0x20
	[0158.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml")) returned 0x20
	[0158.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\sbcglobal.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.803] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=806) returned 1
	[0158.803] CloseHandle (hObject=0x1f8) returned 1
	[0158.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml")) returned 0x20
	[0158.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml")) returned 0x20
	[0158.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\snet.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.804] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=810) returned 1
	[0158.804] CloseHandle (hObject=0x1f8) returned 1
	[0158.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml")) returned 0x20
	[0158.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml")) returned 0x20
	[0158.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\swbell.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.805] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=807) returned 1
	[0158.805] CloseHandle (hObject=0x1f8) returned 1
	[0158.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml")) returned 0x20
	[0158.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml")) returned 0x20
	[0158.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\talk21.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.806] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=806) returned 1
	[0158.806] CloseHandle (hObject=0x1f8) returned 1
	[0158.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml")) returned 0x20
	[0158.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml")) returned 0x20
	[0158.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\wans.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0158.809] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=804) returned 1
	[0158.809] CloseHandle (hObject=0x204) returned 1
	[0158.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml")) returned 0x20
	[0158.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml")) returned 0x20
	[0158.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.809] SetEvent (hEvent=0xfc) returned 1
	[0158.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0158.810] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=810) returned 1
	[0158.810] CloseHandle (hObject=0x204) returned 1
	[0158.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml")) returned 0x20
	[0158.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml")) returned 0x20
	[0158.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.id.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.811] SetEvent (hEvent=0xfc) returned 1
	[0158.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.812] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=810) returned 1
	[0158.812] CloseHandle (hObject=0x1f4) returned 1
	[0158.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml")) returned 0x20
	[0158.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml")) returned 0x20
	[0158.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.in.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.812] SetEvent (hEvent=0xfc) returned 1
	[0158.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.813] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=811) returned 1
	[0158.813] CloseHandle (hObject=0x1f4) returned 1
	[0158.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml")) returned 0x20
	[0158.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml")) returned 0x20
	[0158.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.919] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=806) returned 1
	[0158.919] CloseHandle (hObject=0x1f4) returned 1
	[0158.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml")) returned 0x20
	[0158.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml")) returned 0x20
	[0158.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.919] SetEvent (hEvent=0xfc) returned 1
	[0158.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.920] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=806) returned 1
	[0158.920] CloseHandle (hObject=0x1f4) returned 1
	[0158.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml")) returned 0x20
	[0158.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml")) returned 0x20
	[0158.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.mx.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.921] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=812) returned 1
	[0158.921] CloseHandle (hObject=0x1f4) returned 1
	[0158.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml")) returned 0x20
	[0158.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml")) returned 0x20
	[0158.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.my.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.922] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=812) returned 1
	[0158.922] CloseHandle (hObject=0x1f4) returned 1
	[0158.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml")) returned 0x20
	[0158.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml")) returned 0x20
	[0158.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ph.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.923] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=812) returned 1
	[0158.923] CloseHandle (hObject=0x1f4) returned 1
	[0158.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml")) returned 0x20
	[0158.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml")) returned 0x20
	[0158.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.sg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.924] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=812) returned 1
	[0158.924] CloseHandle (hObject=0x1f4) returned 1
	[0158.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml")) returned 0x20
	[0158.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml")) returned 0x20
	[0158.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.tw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.925] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=812) returned 1
	[0158.925] CloseHandle (hObject=0x1f4) returned 1
	[0158.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml")) returned 0x20
	[0158.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml")) returned 0x20
	[0158.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.vn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.926] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=806) returned 1
	[0158.926] CloseHandle (hObject=0x1f4) returned 1
	[0158.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml")) returned 0x20
	[0158.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml")) returned 0x20
	[0158.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.927] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=804) returned 1
	[0158.927] CloseHandle (hObject=0x1f4) returned 1
	[0158.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml")) returned 0x20
	[0158.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml")) returned 0x20
	[0158.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.de.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.928] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=808) returned 1
	[0158.928] CloseHandle (hObject=0x1f4) returned 1
	[0158.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml")) returned 0x20
	[0158.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml")) returned 0x20
	[0158.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.929] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=804) returned 1
	[0158.929] CloseHandle (hObject=0x1f4) returned 1
	[0158.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml")) returned 0x20
	[0158.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml")) returned 0x20
	[0158.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.930] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=806) returned 1
	[0158.930] CloseHandle (hObject=0x1f4) returned 1
	[0158.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml")) returned 0x20
	[0158.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml")) returned 0x20
	[0158.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.hk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.931] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=810) returned 1
	[0158.931] CloseHandle (hObject=0x1f4) returned 1
	[0158.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml")) returned 0x20
	[0158.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml")) returned 0x20
	[0158.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.ie.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.933] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=804) returned 1
	[0158.933] CloseHandle (hObject=0x1f4) returned 1
	[0158.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml")) returned 0x20
	[0158.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml")) returned 0x20
	[0158.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.it.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.934] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=817) returned 1
	[0158.934] CloseHandle (hObject=0x1f4) returned 1
	[0158.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml")) returned 0x20
	[0158.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml")) returned 0x20
	[0158.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.935] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=806) returned 1
	[0158.935] CloseHandle (hObject=0x1f4) returned 1
	[0158.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml")) returned 0x20
	[0158.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml")) returned 0x20
	[0158.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.no.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.936] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=806) returned 1
	[0158.936] CloseHandle (hObject=0x1f4) returned 1
	[0158.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml")) returned 0x20
	[0158.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml")) returned 0x20
	[0158.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.pl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.937] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=806) returned 1
	[0158.937] CloseHandle (hObject=0x1f4) returned 1
	[0158.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml")) returned 0x20
	[0158.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml")) returned 0x20
	[0158.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.se.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLPH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlph.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.938] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=389520) returned 1
	[0158.938] CloseHandle (hObject=0x1f4) returned 1
	[0158.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLPH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlph.dll")) returned 0x20
	[0158.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLPH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlph.dll")) returned 0x20
	[0158.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLPH.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlph.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLPH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlph.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLRPC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlrpc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.939] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58712) returned 1
	[0158.939] CloseHandle (hObject=0x1f4) returned 1
	[0158.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLRPC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlrpc.dll")) returned 0x20
	[0158.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLRPC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlrpc.dll")) returned 0x20
	[0158.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLRPC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlrpc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLRPC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlrpc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLVBS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlvbs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.941] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=71536) returned 1
	[0158.941] CloseHandle (hObject=0x1f4) returned 1
	[0158.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLVBS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlvbs.dll")) returned 0x20
	[0158.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLVBS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlvbs.dll")) returned 0x20
	[0158.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLVBS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlvbs.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OUTLVBS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\outlvbs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.942] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4022) returned 1
	[0158.942] CloseHandle (hObject=0x1f4) returned 1
	[0158.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml")) returned 0x20
	[0158.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml")) returned 0x20
	[0158.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl001.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.943] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1421818) returned 1
	[0158.943] CloseHandle (hObject=0x1f4) returned 1
	[0158.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml")) returned 0x20
	[0158.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml")) returned 0x20
	[0158.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl002.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.948] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=211482) returned 1
	[0158.948] CloseHandle (hObject=0x1f4) returned 1
	[0158.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml")) returned 0x20
	[0158.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml")) returned 0x20
	[0158.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.948] SetEvent (hEvent=0xfc) returned 1
	[0158.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.949] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5008) returned 1
	[0158.949] CloseHandle (hObject=0x1f4) returned 1
	[0158.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml")) returned 0x20
	[0158.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml")) returned 0x20
	[0158.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl011.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.950] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=676216) returned 1
	[0158.950] CloseHandle (hObject=0x1f4) returned 1
	[0158.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml")) returned 0x20
	[0158.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml")) returned 0x20
	[0158.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl012.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.951] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=142576) returned 1
	[0158.951] CloseHandle (hObject=0x1f4) returned 1
	[0158.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml")) returned 0x20
	[0158.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml")) returned 0x20
	[0158.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl016.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.952] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65980) returned 1
	[0158.952] CloseHandle (hObject=0x1f4) returned 1
	[0158.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml")) returned 0x20
	[0158.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml")) returned 0x20
	[0158.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl020.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.953] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=150682) returned 1
	[0158.953] CloseHandle (hObject=0x1f4) returned 1
	[0158.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml")) returned 0x20
	[0158.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml")) returned 0x20
	[0158.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl022.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.954] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=128230) returned 1
	[0158.955] CloseHandle (hObject=0x1f4) returned 1
	[0158.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml")) returned 0x20
	[0158.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml")) returned 0x20
	[0158.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl026.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.955] SetEvent (hEvent=0xfc) returned 1
	[0159.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.133] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28030) returned 1
	[0159.133] CloseHandle (hObject=0x140) returned 1
	[0159.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml")) returned 0x20
	[0159.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml")) returned 0x20
	[0159.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl027.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.133] SetEvent (hEvent=0xfc) returned 1
	[0159.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.134] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=368502) returned 1
	[0159.134] CloseHandle (hObject=0x140) returned 1
	[0159.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml")) returned 0x20
	[0159.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml")) returned 0x20
	[0159.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl054.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.135] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=158788) returned 1
	[0159.135] CloseHandle (hObject=0x140) returned 1
	[0159.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml")) returned 0x20
	[0159.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml")) returned 0x20
	[0159.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl058.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.136] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=91606) returned 1
	[0159.136] CloseHandle (hObject=0x140) returned 1
	[0159.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml")) returned 0x20
	[0159.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml")) returned 0x20
	[0159.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl065.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.137] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=707376) returned 1
	[0159.137] CloseHandle (hObject=0x140) returned 1
	[0159.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml")) returned 0x20
	[0159.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml")) returned 0x20
	[0159.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl075.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.138] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24884) returned 1
	[0159.138] CloseHandle (hObject=0x140) returned 1
	[0159.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml")) returned 0x20
	[0159.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml")) returned 0x20
	[0159.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl077.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.139] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1875) returned 1
	[0159.139] CloseHandle (hObject=0x140) returned 1
	[0159.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml")) returned 0x20
	[0159.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml")) returned 0x20
	[0159.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl078.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.140] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=955470) returned 1
	[0159.140] CloseHandle (hObject=0x140) returned 1
	[0159.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml")) returned 0x20
	[0159.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml")) returned 0x20
	[0159.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl081.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.142] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=232762) returned 1
	[0159.142] CloseHandle (hObject=0x140) returned 1
	[0159.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml")) returned 0x20
	[0159.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml")) returned 0x20
	[0159.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl082.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.142] SetEvent (hEvent=0xfc) returned 1
	[0159.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.143] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36058) returned 1
	[0159.143] CloseHandle (hObject=0x140) returned 1
	[0159.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml")) returned 0x20
	[0159.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml")) returned 0x20
	[0159.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl083.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.206] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=702258) returned 1
	[0159.206] CloseHandle (hObject=0x204) returned 1
	[0159.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml")) returned 0x20
	[0159.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml")) returned 0x20
	[0159.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl086.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.207] SetEvent (hEvent=0xfc) returned 1
	[0159.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.207] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7108) returned 1
	[0159.207] CloseHandle (hObject=0x204) returned 1
	[0159.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml")) returned 0x20
	[0159.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml")) returned 0x20
	[0159.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.208] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58072) returned 1
	[0159.208] CloseHandle (hObject=0x204) returned 1
	[0159.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml")) returned 0x20
	[0159.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml")) returned 0x20
	[0159.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn011.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.210] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10550) returned 1
	[0159.210] CloseHandle (hObject=0x204) returned 1
	[0159.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml")) returned 0x20
	[0159.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml")) returned 0x20
	[0159.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn020.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.210] SetEvent (hEvent=0xfc) returned 1
	[0159.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.211] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=92116) returned 1
	[0159.211] CloseHandle (hObject=0x204) returned 1
	[0159.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml")) returned 0x20
	[0159.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml")) returned 0x20
	[0159.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn022.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.212] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8638) returned 1
	[0159.212] CloseHandle (hObject=0x204) returned 1
	[0159.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml")) returned 0x20
	[0159.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml")) returned 0x20
	[0159.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn026.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.219] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1506) returned 1
	[0159.219] CloseHandle (hObject=0x204) returned 1
	[0159.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml")) returned 0x20
	[0159.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml")) returned 0x20
	[0159.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn027.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.220] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5138) returned 1
	[0159.220] CloseHandle (hObject=0x204) returned 1
	[0159.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml")) returned 0x20
	[0159.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml")) returned 0x20
	[0159.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn044.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.221] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=640202) returned 1
	[0159.221] CloseHandle (hObject=0x204) returned 1
	[0159.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml")) returned 0x20
	[0159.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml")) returned 0x20
	[0159.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn048.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.225] SetEvent (hEvent=0xfc) returned 1
	[0159.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.226] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33360) returned 1
	[0159.226] CloseHandle (hObject=0x204) returned 1
	[0159.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml")) returned 0x20
	[0159.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml")) returned 0x20
	[0159.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn054.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.227] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2276) returned 1
	[0159.227] CloseHandle (hObject=0x204) returned 1
	[0159.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml")) returned 0x20
	[0159.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml")) returned 0x20
	[0159.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn058.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.228] SetEvent (hEvent=0xfc) returned 1
	[0159.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.228] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4902) returned 1
	[0159.228] CloseHandle (hObject=0x204) returned 1
	[0159.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml")) returned 0x20
	[0159.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml")) returned 0x20
	[0159.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn065.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.229] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40948) returned 1
	[0159.229] CloseHandle (hObject=0x204) returned 1
	[0159.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml")) returned 0x20
	[0159.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml")) returned 0x20
	[0159.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn075.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.230] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1053080) returned 1
	[0159.230] CloseHandle (hObject=0x204) returned 1
	[0159.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml")) returned 0x20
	[0159.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml")) returned 0x20
	[0159.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn081.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.231] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=203384) returned 1
	[0159.231] CloseHandle (hObject=0x204) returned 1
	[0159.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml")) returned 0x20
	[0159.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml")) returned 0x20
	[0159.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn082.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.232] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11572) returned 1
	[0159.232] CloseHandle (hObject=0x204) returned 1
	[0159.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml")) returned 0x20
	[0159.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml")) returned 0x20
	[0159.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn086.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0159.233] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4518) returned 1
	[0159.233] CloseHandle (hObject=0x204) returned 1
	[0159.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml")) returned 0x20
	[0159.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml")) returned 0x20
	[0159.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn089.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.337] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41542) returned 1
	[0159.337] CloseHandle (hObject=0x1fc) returned 1
	[0159.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml")) returned 0x20
	[0159.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml")) returned 0x20
	[0159.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn090.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.337] SetEvent (hEvent=0xfc) returned 1
	[0159.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\MSGR3ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082\\msgr3es.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.521] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2259968) returned 1
	[0159.521] CloseHandle (hObject=0x1f4) returned 1
	[0159.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\MSGR3ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082\\msgr3es.dll")) returned 0x20
	[0159.521] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\MSGR3ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082\\msgr3es.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\MSGR3ES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082\\msgr3es.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.521] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\MSGR3ES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082\\msgr3es.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\MSGR3ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\3082\\msgr3es.dll")) returned 0
	[0159.521] SetEvent (hEvent=0xfc) returned 1
	[0159.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3fr.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.522] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25) returned 1
	[0159.522] CloseHandle (hObject=0x1f4) returned 1
	[0159.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3fr.lex")) returned 0x20
	[0159.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3fr.lex")) returned 0x20
	[0159.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3fr.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.524] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=223624) returned 1
	[0159.524] CloseHandle (hObject=0x1f4) returned 1
	[0159.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.dll")) returned 0x20
	[0159.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.dll")) returned 0x20
	[0159.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.524] SetEvent (hEvent=0xfc) returned 1
	[0159.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.525] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=475648) returned 1
	[0159.525] CloseHandle (hObject=0x1f4) returned 1
	[0159.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.lex")) returned 0x20
	[0159.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.lex")) returned 0x20
	[0159.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.527] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=223624) returned 1
	[0159.527] CloseHandle (hObject=0x1f4) returned 1
	[0159.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.dll")) returned 0x20
	[0159.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.dll")) returned 0x20
	[0159.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.528] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=145408) returned 1
	[0159.528] CloseHandle (hObject=0x1f4) returned 1
	[0159.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.lex")) returned 0x20
	[0159.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.lex")) returned 0x20
	[0159.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.529] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=223624) returned 1
	[0159.529] CloseHandle (hObject=0x1f4) returned 1
	[0159.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.dll")) returned 0x20
	[0159.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.dll")) returned 0x20
	[0159.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.530] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=278016) returned 1
	[0159.531] CloseHandle (hObject=0x1f4) returned 1
	[0159.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.lex")) returned 0x20
	[0159.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.lex")) returned 0x20
	[0159.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mshy7fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.532] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2024320) returned 1
	[0159.532] CloseHandle (hObject=0x1f4) returned 1
	[0159.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dll")) returned 0x20
	[0159.532] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.532] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dll")) returned 0
	[0159.533] SetEvent (hEvent=0xfc) returned 1
	[0159.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dub"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.533] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4866) returned 1
	[0159.533] CloseHandle (hObject=0x1f4) returned 1
	[0159.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dub")) returned 0x20
	[0159.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dub")) returned 0x20
	[0159.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dub.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.534] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1334784) returned 1
	[0159.534] CloseHandle (hObject=0x1f4) returned 1
	[0159.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.lex")) returned 0x20
	[0159.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.lex")) returned 0x20
	[0159.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.536] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2024320) returned 1
	[0159.536] CloseHandle (hObject=0x1f4) returned 1
	[0159.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dll")) returned 0x20
	[0159.537] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.537] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dll")) returned 0
	[0159.537] SetEvent (hEvent=0xfc) returned 1
	[0159.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dub"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.537] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16) returned 1
	[0159.537] CloseHandle (hObject=0x1f4) returned 1
	[0159.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dub")) returned 0x20
	[0159.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dub")) returned 0x20
	[0159.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dub.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.538] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1967616) returned 1
	[0159.538] CloseHandle (hObject=0x1f4) returned 1
	[0159.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.lex")) returned 0x20
	[0159.539] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.539] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7es.lex")) returned 0
	[0159.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.540] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2024320) returned 1
	[0159.540] CloseHandle (hObject=0x1f4) returned 1
	[0159.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dll")) returned 0x20
	[0159.540] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.540] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dll")) returned 0
	[0159.540] SetEvent (hEvent=0xfc) returned 1
	[0159.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dub"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.541] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16) returned 1
	[0159.541] CloseHandle (hObject=0x1f4) returned 1
	[0159.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dub")) returned 0x20
	[0159.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dub")) returned 0x20
	[0159.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dub.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.542] SetEvent (hEvent=0xfc) returned 1
	[0159.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.543] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1775616) returned 1
	[0159.543] CloseHandle (hObject=0x1f4) returned 1
	[0159.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.lex")) returned 0x20
	[0159.543] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.543] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\mssp7fr.lex")) returned 0
	[0159.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.543] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=454528) returned 1
	[0159.544] CloseHandle (hObject=0x1f4) returned 1
	[0159.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.dll")) returned 0x20
	[0159.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.dll")) returned 0x20
	[0159.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.544] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4251136) returned 1
	[0159.545] CloseHandle (hObject=0x1f4) returned 1
	[0159.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.lex")) returned 0x20
	[0159.545] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.545] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7en.lex")) returned 0
	[0159.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.545] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=454528) returned 1
	[0159.545] CloseHandle (hObject=0x1f4) returned 1
	[0159.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.dll")) returned 0x20
	[0159.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.dll")) returned 0x20
	[0159.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.546] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5977088) returned 1
	[0159.547] CloseHandle (hObject=0x1f4) returned 1
	[0159.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.lex")) returned 0x20
	[0159.547] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.547] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7es.lex")) returned 0
	[0159.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.547] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=454528) returned 1
	[0159.547] CloseHandle (hObject=0x1f4) returned 1
	[0159.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.dll")) returned 0x20
	[0159.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.dll")) returned 0x20
	[0159.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.549] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13019648) returned 1
	[0159.549] CloseHandle (hObject=0x1f4) returned 1
	[0159.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.lex")) returned 0x20
	[0159.549] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.549] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSTH7FR.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msth7fr.lex")) returned 0
	[0159.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROPMGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\propmgr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.550] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75664) returned 1
	[0159.550] CloseHandle (hObject=0x1f4) returned 1
	[0159.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROPMGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\propmgr.dll")) returned 0x20
	[0159.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROPMGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\propmgr.dll")) returned 0x20
	[0159.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROPMGR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\propmgr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROPMGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\propmgr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROPRPT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proprpt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.552] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1248136) returned 1
	[0159.552] CloseHandle (hObject=0x1f4) returned 1
	[0159.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROPRPT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proprpt.dll")) returned 0x20
	[0159.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROPRPT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proprpt.dll")) returned 0x20
	[0159.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROPRPT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proprpt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROPRPT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proprpt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.552] SetEvent (hEvent=0xfc) returned 1
	[0159.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PRTF9.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\prtf9.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.553] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=170368) returned 1
	[0159.553] CloseHandle (hObject=0x1f4) returned 1
	[0159.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PRTF9.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\prtf9.dll")) returned 0x20
	[0159.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PRTF9.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\prtf9.dll")) returned 0x20
	[0159.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PRTF9.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\prtf9.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PRTF9.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\prtf9.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PSTPRX32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pstprx32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.554] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=426856) returned 1
	[0159.554] CloseHandle (hObject=0x1f4) returned 1
	[0159.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PSTPRX32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pstprx32.dll")) returned 0x20
	[0159.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PSTPRX32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pstprx32.dll")) returned 0x20
	[0159.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PSTPRX32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pstprx32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PSTPRX32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pstprx32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PTXT9.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ptxt9.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.555] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=909696) returned 1
	[0159.555] CloseHandle (hObject=0x1f4) returned 1
	[0159.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PTXT9.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ptxt9.dll")) returned 0x20
	[0159.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PTXT9.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ptxt9.dll")) returned 0x20
	[0159.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PTXT9.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ptxt9.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PTXT9.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ptxt9.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub10.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0159.705] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51808) returned 1
	[0159.705] CloseHandle (hObject=0x20c) returned 1
	[0159.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub10.bdr")) returned 0x20
	[0159.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub10.bdr")) returned 0x20
	[0159.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub10.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub10.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.705] SetEvent (hEvent=0xfc) returned 1
	[0159.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs53boxs.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0159.706] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1024) returned 1
	[0159.706] CloseHandle (hObject=0x20c) returned 1
	[0159.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs53boxs.poc")) returned 0x20
	[0159.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs53boxs.poc")) returned 0x20
	[0159.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs53boxs.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS53BOXS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs53boxs.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.706] SetEvent (hEvent=0xfc) returned 1
	[0159.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcard11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0159.707] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=76842) returned 1
	[0159.707] CloseHandle (hObject=0x20c) returned 1
	[0159.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcard11.poc")) returned 0x20
	[0159.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcard11.poc")) returned 0x20
	[0159.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcard11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcard11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.708] SetEvent (hEvent=0xfc) returned 1
	[0159.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcardhm.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0159.708] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=59128) returned 1
	[0159.708] CloseHandle (hObject=0x20c) returned 1
	[0159.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcardhm.poc")) returned 0x20
	[0159.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcardhm.poc")) returned 0x20
	[0159.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcardhm.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcardhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.709] SetEvent (hEvent=0xfc) returned 1
	[0159.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcd98sp.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0159.710] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25108) returned 1
	[0159.710] CloseHandle (hObject=0x20c) returned 1
	[0159.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcd98sp.poc")) returned 0x20
	[0159.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcd98sp.poc")) returned 0x20
	[0159.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcd98sp.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcd98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.710] SetEvent (hEvent=0xfc) returned 1
	[0159.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcrd98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0159.711] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=248482) returned 1
	[0159.711] CloseHandle (hObject=0x20c) returned 1
	[0159.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcrd98.poc")) returned 0x20
	[0159.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcrd98.poc")) returned 0x20
	[0159.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcrd98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BZCRD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bzcrd98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.711] SetEvent (hEvent=0xfc) returned 1
	[0159.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0159.712] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1347410) returned 1
	[0159.712] CloseHandle (hObject=0x20c) returned 1
	[0159.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.dpv")) returned 0x20
	[0159.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.dpv")) returned 0x20
	[0159.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.713] SetEvent (hEvent=0xfc) returned 1
	[0159.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0159.715] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9748) returned 1
	[0159.715] CloseHandle (hObject=0x20c) returned 1
	[0159.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml")) returned 0x20
	[0159.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml")) returned 0x20
	[0159.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calendar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.716] SetEvent (hEvent=0xfc) returned 1
	[0159.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calhm.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0159.717] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=207328) returned 1
	[0159.717] CloseHandle (hObject=0x20c) returned 1
	[0159.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calhm.poc")) returned 0x20
	[0159.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calhm.poc")) returned 0x20
	[0159.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calhm.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.717] SetEvent (hEvent=0xfc) returned 1
	[0159.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calndr98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0159.718] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1732002) returned 1
	[0159.718] CloseHandle (hObject=0x20c) returned 1
	[0159.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calndr98.poc")) returned 0x20
	[0159.718] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calndr98.poc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calndr98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.718] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calndr98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calndr98.poc")) returned 0
	[0159.718] SetEvent (hEvent=0xfc) returned 1
	[0159.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0159.719] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=112836) returned 1
	[0159.719] CloseHandle (hObject=0x20c) returned 1
	[0159.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso11.poc")) returned 0x20
	[0159.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso11.poc")) returned 0x20
	[0159.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.720] SetEvent (hEvent=0xfc) returned 1
	[0159.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0159.720] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=431828) returned 1
	[0159.721] CloseHandle (hObject=0x20c) returned 1
	[0159.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso98.poc")) returned 0x20
	[0159.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso98.poc")) returned 0x20
	[0159.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CALSO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\calso98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.721] SetEvent (hEvent=0xfc) returned 1
	[0159.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.860] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=320683) returned 1
	[0159.860] CloseHandle (hObject=0x1f4) returned 1
	[0159.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.dpv")) returned 0x20
	[0159.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.dpv")) returned 0x20
	[0159.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.860] SetEvent (hEvent=0xfc) returned 1
	[0159.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.861] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1182) returned 1
	[0159.861] CloseHandle (hObject=0x1f4) returned 1
	[0159.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml")) returned 0x20
	[0159.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml")) returned 0x20
	[0159.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.862] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24706) returned 1
	[0159.862] CloseHandle (hObject=0x1f4) returned 1
	[0159.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.dpv")) returned 0x20
	[0159.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.dpv")) returned 0x20
	[0159.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.863] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=642) returned 1
	[0159.863] CloseHandle (hObject=0x1f4) returned 1
	[0159.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml")) returned 0x20
	[0159.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml")) returned 0x20
	[0159.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcoupon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.864] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6144) returned 1
	[0159.864] CloseHandle (hObject=0x1f4) returned 1
	[0159.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.dpv")) returned 0x20
	[0159.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.dpv")) returned 0x20
	[0159.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.865] SetEvent (hEvent=0xfc) returned 1
	[0159.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.865] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=690) returned 1
	[0159.865] CloseHandle (hObject=0x1f4) returned 1
	[0159.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml")) returned 0x20
	[0159.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml")) returned 0x20
	[0159.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgdots.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.866] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7076) returned 1
	[0159.866] CloseHandle (hObject=0x1f4) returned 1
	[0159.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml")) returned 0x20
	[0159.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml")) returned 0x20
	[0159.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgheading.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.867] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9216) returned 1
	[0159.867] CloseHandle (hObject=0x1f4) returned 1
	[0159.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.dpv")) returned 0x20
	[0159.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.dpv")) returned 0x20
	[0159.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.868] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=542) returned 1
	[0159.869] CloseHandle (hObject=0x1f4) returned 1
	[0159.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml")) returned 0x20
	[0159.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml")) returned 0x20
	[0159.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglinacc.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.870] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11967) returned 1
	[0159.870] CloseHandle (hObject=0x1f4) returned 1
	[0159.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.dpv")) returned 0x20
	[0159.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.dpv")) returned 0x20
	[0159.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.871] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1964) returned 1
	[0159.871] CloseHandle (hObject=0x1f4) returned 1
	[0159.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml")) returned 0x20
	[0159.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml")) returned 0x20
	[0159.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dglogo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.872] SetEvent (hEvent=0xfc) returned 1
	[0159.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.872] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3641) returned 1
	[0159.872] CloseHandle (hObject=0x1f4) returned 1
	[0159.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml")) returned 0x20
	[0159.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml")) returned 0x20
	[0159.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmain.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.873] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0159.873] CloseHandle (hObject=0x1f4) returned 1
	[0159.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.dpv")) returned 0x20
	[0159.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.dpv")) returned 0x20
	[0159.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.875] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=826) returned 1
	[0159.875] CloseHandle (hObject=0x1f4) returned 1
	[0159.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml")) returned 0x20
	[0159.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml")) returned 0x20
	[0159.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmarq.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.875] SetEvent (hEvent=0xfc) returned 1
	[0159.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmasthd.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.877] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=331668) returned 1
	[0159.877] CloseHandle (hObject=0x1f4) returned 1
	[0159.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmasthd.dpv")) returned 0x20
	[0159.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmasthd.dpv")) returned 0x20
	[0159.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmasthd.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgmasthd.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.878] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29092) returned 1
	[0159.878] CloseHandle (hObject=0x1f4) returned 1
	[0159.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.dpv")) returned 0x20
	[0159.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.dpv")) returned 0x20
	[0159.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.879] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4546) returned 1
	[0159.879] CloseHandle (hObject=0x1f4) returned 1
	[0159.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml")) returned 0x20
	[0159.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml")) returned 0x20
	[0159.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgnavbar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.880] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=126682) returned 1
	[0159.880] CloseHandle (hObject=0x1f4) returned 1
	[0159.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.dpv")) returned 0x20
	[0159.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.dpv")) returned 0x20
	[0159.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.881] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6858) returned 1
	[0159.881] CloseHandle (hObject=0x1f4) returned 1
	[0159.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml")) returned 0x20
	[0159.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml")) returned 0x20
	[0159.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpiccap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.984] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37775) returned 1
	[0159.984] CloseHandle (hObject=0x1fc) returned 1
	[0159.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.dpv")) returned 0x20
	[0159.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.dpv")) returned 0x20
	[0159.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.984] SetEvent (hEvent=0xfc) returned 1
	[0159.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.985] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1366) returned 1
	[0159.985] CloseHandle (hObject=0x1fc) returned 1
	[0159.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml")) returned 0x20
	[0159.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml")) returned 0x20
	[0159.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.986] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28295) returned 1
	[0159.986] CloseHandle (hObject=0x1fc) returned 1
	[0159.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.dpv")) returned 0x20
	[0159.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.dpv")) returned 0x20
	[0159.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.987] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1884) returned 1
	[0159.987] CloseHandle (hObject=0x1fc) returned 1
	[0159.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml")) returned 0x20
	[0159.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml")) returned 0x20
	[0159.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgrepfrm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.989] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44609) returned 1
	[0159.989] CloseHandle (hObject=0x1fc) returned 1
	[0159.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.dpv")) returned 0x20
	[0159.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.dpv")) returned 0x20
	[0159.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.989] SetEvent (hEvent=0xfc) returned 1
	[0159.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.990] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8398) returned 1
	[0159.990] CloseHandle (hObject=0x1fc) returned 1
	[0159.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml")) returned 0x20
	[0159.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml")) returned 0x20
	[0159.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.991] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3558) returned 1
	[0159.991] CloseHandle (hObject=0x1fc) returned 1
	[0159.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml")) returned 0x20
	[0159.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml")) returned 0x20
	[0159.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgsidebrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.992] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2948) returned 1
	[0159.992] CloseHandle (hObject=0x1fc) returned 1
	[0159.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml")) returned 0x20
	[0159.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml")) returned 0x20
	[0159.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstory.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.993] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2948) returned 1
	[0159.993] CloseHandle (hObject=0x1fc) returned 1
	[0159.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml")) returned 0x20
	[0159.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml")) returned 0x20
	[0159.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgstoryvert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtear.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.994] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3072) returned 1
	[0159.994] CloseHandle (hObject=0x1fc) returned 1
	[0159.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtear.dpv")) returned 0x20
	[0159.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtear.dpv")) returned 0x20
	[0159.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtear.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtear.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.995] SetEvent (hEvent=0xfc) returned 1
	[0159.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.995] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58638) returned 1
	[0159.995] CloseHandle (hObject=0x1fc) returned 1
	[0159.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.dpv")) returned 0x20
	[0159.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.dpv")) returned 0x20
	[0159.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.996] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5906) returned 1
	[0159.996] CloseHandle (hObject=0x1fc) returned 1
	[0159.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml")) returned 0x20
	[0159.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml")) returned 0x20
	[0159.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgtoc.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.998] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=812) returned 1
	[0159.998] CloseHandle (hObject=0x1fc) returned 1
	[0159.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml")) returned 0x20
	[0159.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml")) returned 0x20
	[0159.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.998] SetEvent (hEvent=0xfc) returned 1
	[0159.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.999] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10240) returned 1
	[0159.999] CloseHandle (hObject=0x1fc) returned 1
	[0159.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.dpv")) returned 0x20
	[0159.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.dpv")) returned 0x20
	[0159.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.000] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4366) returned 1
	[0160.000] CloseHandle (hObject=0x1fc) returned 1
	[0160.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml")) returned 0x20
	[0160.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml")) returned 0x20
	[0160.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebbtn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.001] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=197054) returned 1
	[0160.001] CloseHandle (hObject=0x1fc) returned 1
	[0160.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.dpv")) returned 0x20
	[0160.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.dpv")) returned 0x20
	[0160.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.003] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7344) returned 1
	[0160.003] CloseHandle (hObject=0x1fc) returned 1
	[0160.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml")) returned 0x20
	[0160.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml")) returned 0x20
	[0160.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebcal.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.003] SetEvent (hEvent=0xfc) returned 1
	[0160.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.004] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=194580) returned 1
	[0160.004] CloseHandle (hObject=0x1fc) returned 1
	[0160.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.dpv")) returned 0x20
	[0160.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.dpv")) returned 0x20
	[0160.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.005] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7612) returned 1
	[0160.005] CloseHandle (hObject=0x1fc) returned 1
	[0160.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml")) returned 0x20
	[0160.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml")) returned 0x20
	[0160.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebhd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.006] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20480) returned 1
	[0160.006] CloseHandle (hObject=0x1fc) returned 1
	[0160.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.dpv")) returned 0x20
	[0160.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.dpv")) returned 0x20
	[0160.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.007] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3004) returned 1
	[0160.007] CloseHandle (hObject=0x1fc) returned 1
	[0160.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml")) returned 0x20
	[0160.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml")) returned 0x20
	[0160.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebpqt.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.008] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=544) returned 1
	[0160.008] CloseHandle (hObject=0x1fc) returned 1
	[0160.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml")) returned 0x20
	[0160.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml")) returned 0x20
	[0160.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebref.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.009] SetEvent (hEvent=0xfc) returned 1
	[0160.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.009] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28151) returned 1
	[0160.009] CloseHandle (hObject=0x1fc) returned 1
	[0160.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.dpv")) returned 0x20
	[0160.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.dpv")) returned 0x20
	[0160.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.010] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3004) returned 1
	[0160.010] CloseHandle (hObject=0x1fc) returned 1
	[0160.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml")) returned 0x20
	[0160.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml")) returned 0x20
	[0160.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgwebsbr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzip.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.011] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3072) returned 1
	[0160.011] CloseHandle (hObject=0x1fc) returned 1
	[0160.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzip.dpv")) returned 0x20
	[0160.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzip.dpv")) returned 0x20
	[0160.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzip.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzip.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.015] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=214) returned 1
	[0160.015] CloseHandle (hObject=0x1fc) returned 1
	[0160.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml")) returned 0x20
	[0160.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml")) returned 0x20
	[0160.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgzipc.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dots.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.016] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7254) returned 1
	[0160.016] CloseHandle (hObject=0x1fc) returned 1
	[0160.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dots.poc")) returned 0x20
	[0160.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dots.poc")) returned 0x20
	[0160.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dots.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dots.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dvdhm.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.017] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=68660) returned 1
	[0160.017] CloseHandle (hObject=0x1fc) returned 1
	[0160.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dvdhm.poc")) returned 0x20
	[0160.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dvdhm.poc")) returned 0x20
	[0160.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dvdhm.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dvdhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.018] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=515157) returned 1
	[0160.018] CloseHandle (hObject=0x1fc) returned 1
	[0160.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.dpv")) returned 0x20
	[0160.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.dpv")) returned 0x20
	[0160.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.019] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53350) returned 1
	[0160.019] CloseHandle (hObject=0x1fc) returned 1
	[0160.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml")) returned 0x20
	[0160.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml")) returned 0x20
	[0160.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.020] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=771072) returned 1
	[0160.020] CloseHandle (hObject=0x1fc) returned 1
	[0160.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email11.poc")) returned 0x20
	[0160.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email11.poc")) returned 0x20
	[0160.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\email11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\emailmod.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.021] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10818) returned 1
	[0160.021] CloseHandle (hObject=0x1fc) returned 1
	[0160.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\emailmod.poc")) returned 0x20
	[0160.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\emailmod.poc")) returned 0x20
	[0160.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\emailmod.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\emailmod.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.022] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50682) returned 1
	[0160.022] CloseHandle (hObject=0x1fc) returned 1
	[0160.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env11.poc")) returned 0x20
	[0160.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env11.poc")) returned 0x20
	[0160.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.023] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=172114) returned 1
	[0160.023] CloseHandle (hObject=0x1fc) returned 1
	[0160.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98.poc")) returned 0x20
	[0160.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98.poc")) returned 0x20
	[0160.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98sp.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.024] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19188) returned 1
	[0160.024] CloseHandle (hObject=0x1fc) returned 1
	[0160.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98sp.poc")) returned 0x20
	[0160.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98sp.poc")) returned 0x20
	[0160.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98sp.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\env98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.025] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=151291) returned 1
	[0160.025] CloseHandle (hObject=0x1fc) returned 1
	[0160.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.dpv")) returned 0x20
	[0160.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.dpv")) returned 0x20
	[0160.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.026] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12510) returned 1
	[0160.026] CloseHandle (hObject=0x1fc) returned 1
	[0160.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml")) returned 0x20
	[0160.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml")) returned 0x20
	[0160.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envelope.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envhm.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.027] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35378) returned 1
	[0160.027] CloseHandle (hObject=0x1fc) returned 1
	[0160.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envhm.poc")) returned 0x20
	[0160.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envhm.poc")) returned 0x20
	[0160.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envhm.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\envhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fezip.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.028] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4740) returned 1
	[0160.028] CloseHandle (hObject=0x1fc) returned 1
	[0160.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fezip.poc")) returned 0x20
	[0160.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fezip.poc")) returned 0x20
	[0160.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fezip.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fezip.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fly98sp.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.029] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=64768) returned 1
	[0160.029] CloseHandle (hObject=0x1fc) returned 1
	[0160.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fly98sp.poc")) returned 0x20
	[0160.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fly98sp.poc")) returned 0x20
	[0160.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fly98sp.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fly98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.030] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1390236) returned 1
	[0160.030] CloseHandle (hObject=0x1fc) returned 1
	[0160.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.dpv")) returned 0x20
	[0160.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.dpv")) returned 0x20
	[0160.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.031] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81276) returned 1
	[0160.031] CloseHandle (hObject=0x1fc) returned 1
	[0160.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml")) returned 0x20
	[0160.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml")) returned 0x20
	[0160.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.107] SetEvent (hEvent=0xfc) returned 1
	[0160.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyerhm.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.329] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=55688) returned 1
	[0160.329] CloseHandle (hObject=0x140) returned 1
	[0160.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyerhm.poc")) returned 0x20
	[0160.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyerhm.poc")) returned 0x20
	[0160.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyerhm.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyerhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.329] SetEvent (hEvent=0xfc) returned 1
	[0160.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidbar98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.630] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67422) returned 1
	[0160.630] CloseHandle (hObject=0x1fc) returned 1
	[0160.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidbar98.poc")) returned 0x20
	[0160.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidbar98.poc")) returned 0x20
	[0160.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidbar98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidbar98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.631] SetEvent (hEvent=0xfc) returned 1
	[0160.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wsidbr98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.631] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12758) returned 1
	[0160.631] CloseHandle (hObject=0x1fc) returned 1
	[0160.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wsidbr98.poc")) returned 0x20
	[0160.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wsidbr98.poc")) returned 0x20
	[0160.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wsidbr98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wsidbr98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor currency rates.iqy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.634] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=205) returned 1
	[0160.634] CloseHandle (hObject=0x1fc) returned 1
	[0160.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor currency rates.iqy")) returned 0x20
	[0160.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor currency rates.iqy")) returned 0x20
	[0160.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor currency rates.iqy.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Currency Rates.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor currency rates.iqy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.634] SetEvent (hEvent=0xfc) returned 1
	[0160.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor major indicies.iqy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.635] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=321) returned 1
	[0160.635] CloseHandle (hObject=0x1fc) returned 1
	[0160.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor major indicies.iqy")) returned 0x20
	[0160.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor major indicies.iqy")) returned 0x20
	[0160.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor major indicies.iqy.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Major Indicies.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor major indicies.iqy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor stock quotes.iqy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.636] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=307) returned 1
	[0160.636] CloseHandle (hObject=0x1fc) returned 1
	[0160.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor stock quotes.iqy")) returned 0x20
	[0160.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor stock quotes.iqy")) returned 0x20
	[0160.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor stock quotes.iqy.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\MSN MoneyCentral Investor Stock Quotes.iqy" (normalized: "c:\\program files\\microsoft office\\office14\\queries\\msn moneycentral investor stock quotes.iqy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RECALL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\recall.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.637] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50536) returned 1
	[0160.637] CloseHandle (hObject=0x1fc) returned 1
	[0160.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RECALL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\recall.dll")) returned 0x20
	[0160.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RECALL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\recall.dll")) returned 0x20
	[0160.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RECALL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\recall.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RECALL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\recall.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REFEDIT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\refedit.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.638] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43352) returned 1
	[0160.638] CloseHandle (hObject=0x1fc) returned 1
	[0160.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REFEDIT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\refedit.dll")) returned 0x20
	[0160.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REFEDIT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\refedit.dll")) returned 0x20
	[0160.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REFEDIT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\refedit.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REFEDIT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\refedit.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.639] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=108800) returned 1
	[0160.639] CloseHandle (hObject=0x1fc) returned 1
	[0160.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav")) returned 0x20
	[0160.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav")) returned 0x20
	[0160.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\reminder.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REPORT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\report.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.640] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=230792) returned 1
	[0160.640] CloseHandle (hObject=0x1fc) returned 1
	[0160.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REPORT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\report.dll")) returned 0x20
	[0160.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REPORT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\report.dll")) returned 0x20
	[0160.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REPORT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\report.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REPORT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\report.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REVERSE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\reverse.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.643] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22920) returned 1
	[0160.643] CloseHandle (hObject=0x1fc) returned 1
	[0160.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REVERSE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\reverse.dll")) returned 0x20
	[0160.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REVERSE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\reverse.dll")) returned 0x20
	[0160.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REVERSE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\reverse.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\REVERSE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\reverse.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\office14\\rswop.icm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.644] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=218103) returned 1
	[0160.644] CloseHandle (hObject=0x1fc) returned 1
	[0160.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\office14\\rswop.icm")) returned 0x20
	[0160.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\office14\\rswop.icm")) returned 0x20
	[0160.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\rswop.icm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\office14\\rswop.icm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RTFHTML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\rtfhtml.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.645] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=587632) returned 1
	[0160.645] CloseHandle (hObject=0x1fc) returned 1
	[0160.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RTFHTML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\rtfhtml.dll")) returned 0x20
	[0160.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RTFHTML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\rtfhtml.dll")) returned 0x20
	[0160.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RTFHTML.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\rtfhtml.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\RTFHTML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\rtfhtml.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAEXT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\saext.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.646] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300416) returned 1
	[0160.646] CloseHandle (hObject=0x1fc) returned 1
	[0160.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAEXT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\saext.dll")) returned 0x20
	[0160.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAEXT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\saext.dll")) returned 0x20
	[0160.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAEXT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\saext.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAEXT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\saext.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.647] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=118784) returned 1
	[0160.647] CloseHandle (hObject=0x1fc) returned 1
	[0160.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls")) returned 0x20
	[0160.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls")) returned 0x20
	[0160.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\samples\\solvsamp.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVASWEB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savasweb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.649] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=588136) returned 1
	[0160.649] CloseHandle (hObject=0x1fc) returned 1
	[0160.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVASWEB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savasweb.dll")) returned 0x20
	[0160.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVASWEB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savasweb.dll")) returned 0x20
	[0160.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVASWEB.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\savasweb.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVASWEB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savasweb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.649] SetEvent (hEvent=0xfc) returned 1
	[0160.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBHF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbhf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.650] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=162720) returned 1
	[0160.650] CloseHandle (hObject=0x1fc) returned 1
	[0160.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBHF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbhf.dll")) returned 0x20
	[0160.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBHF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbhf.dll")) returned 0x20
	[0160.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBHF.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\savwbhf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBHF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbhf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBRAS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbras.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.651] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=266120) returned 1
	[0160.651] CloseHandle (hObject=0x1fc) returned 1
	[0160.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBRAS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbras.dll")) returned 0x20
	[0160.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBRAS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbras.dll")) returned 0x20
	[0160.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBRAS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\savwbras.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBRAS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbras.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.652] SetEvent (hEvent=0xfc) returned 1
	[0160.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBVML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbvml.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.652] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=253832) returned 1
	[0160.652] CloseHandle (hObject=0x1fc) returned 1
	[0160.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBVML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbvml.dll")) returned 0x20
	[0160.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBVML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbvml.dll")) returned 0x20
	[0160.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBVML.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\savwbvml.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBVML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbvml.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBXAML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbxaml.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.654] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=168840) returned 1
	[0160.654] CloseHandle (hObject=0x1fc) returned 1
	[0160.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBXAML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbxaml.dll")) returned 0x20
	[0160.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBXAML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbxaml.dll")) returned 0x20
	[0160.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBXAML.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\savwbxaml.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SAVWBXAML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\savwbxaml.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.654] SetEvent (hEvent=0xfc) returned 1
	[0160.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCANPST.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\scanpst.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.655] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47008) returned 1
	[0160.655] CloseHandle (hObject=0x1fc) returned 1
	[0160.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCANPST.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\scanpst.exe")) returned 0x20
	[0160.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCANPST.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\scanpst.exe")) returned 0x20
	[0160.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCANPST.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\scanpst.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCANPST.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\scanpst.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCNPST32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\scnpst32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.656] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=442280) returned 1
	[0160.656] CloseHandle (hObject=0x1fc) returned 1
	[0160.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCNPST32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\scnpst32.dll")) returned 0x20
	[0160.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCNPST32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\scnpst32.dll")) returned 0x20
	[0160.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCNPST32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\scnpst32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCNPST32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\scnpst32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCNPST64.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\scnpst64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.657] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=442288) returned 1
	[0160.658] CloseHandle (hObject=0x1fc) returned 1
	[0160.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCNPST64.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\scnpst64.dll")) returned 0x20
	[0160.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCNPST64.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\scnpst64.dll")) returned 0x20
	[0160.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCNPST64.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\scnpst64.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SCNPST64.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\scnpst64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" (normalized: "c:\\program files\\microsoft office\\office14\\segoechess.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.659] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38768) returned 1
	[0160.659] CloseHandle (hObject=0x1fc) returned 1
	[0160.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" (normalized: "c:\\program files\\microsoft office\\office14\\segoechess.ttf")) returned 0x20
	[0160.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" (normalized: "c:\\program files\\microsoft office\\office14\\segoechess.ttf")) returned 0x20
	[0160.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\segoechess.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SegoeChess.ttf" (normalized: "c:\\program files\\microsoft office\\office14\\segoechess.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SELFCERT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\selfcert.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.660] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=607632) returned 1
	[0160.660] CloseHandle (hObject=0x1fc) returned 1
	[0160.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SELFCERT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\selfcert.exe")) returned 0x20
	[0160.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SELFCERT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\selfcert.exe")) returned 0x20
	[0160.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SELFCERT.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\selfcert.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SELFCERT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\selfcert.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.661] SetEvent (hEvent=0xfc) returned 1
	[0160.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SENDTO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sendto.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.661] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26992) returned 1
	[0160.661] CloseHandle (hObject=0x1fc) returned 1
	[0160.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SENDTO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sendto.dll")) returned 0x20
	[0160.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SENDTO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sendto.dll")) returned 0x20
	[0160.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SENDTO.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\sendto.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SENDTO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sendto.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SEQCHK10.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\seqchk10.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.662] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=87936) returned 1
	[0160.662] CloseHandle (hObject=0x1fc) returned 1
	[0160.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SEQCHK10.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\seqchk10.dll")) returned 0x20
	[0160.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SEQCHK10.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\seqchk10.dll")) returned 0x20
	[0160.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SEQCHK10.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\seqchk10.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SEQCHK10.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\seqchk10.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SETLANG.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\setlang.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.663] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37760) returned 1
	[0160.663] CloseHandle (hObject=0x1fc) returned 1
	[0160.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SETLANG.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\setlang.exe")) returned 0x20
	[0160.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SETLANG.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\setlang.exe")) returned 0x20
	[0160.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SETLANG.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\setlang.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SETLANG.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\setlang.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.664] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2239336) returned 1
	[0160.664] CloseHandle (hObject=0x1fc) returned 1
	[0160.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sg.dll")) returned 0x20
	[0160.665] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sg.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SG.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\sg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0160.665] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SG.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\sg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sg.dll")) returned 0
	[0160.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SHAPNUM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\shapnum.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.665] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=338784) returned 1
	[0160.665] CloseHandle (hObject=0x1fc) returned 1
	[0160.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SHAPNUM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\shapnum.dll")) returned 0x20
	[0160.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SHAPNUM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\shapnum.dll")) returned 0x20
	[0160.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SHAPNUM.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\shapnum.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SHAPNUM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\shapnum.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SHAREPOINTPROVIDER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sharepointprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.666] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=290672) returned 1
	[0160.666] CloseHandle (hObject=0x1fc) returned 1
	[0160.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SHAREPOINTPROVIDER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sharepointprovider.dll")) returned 0x20
	[0160.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SHAREPOINTPROVIDER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sharepointprovider.dll")) returned 0x20
	[0160.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SHAREPOINTPROVIDER.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\sharepointprovider.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SHAREPOINTPROVIDER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sharepointprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.667] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=103) returned 1
	[0160.667] CloseHandle (hObject=0x1fc) returned 1
	[0160.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml")) returned 0x20
	[0160.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml")) returned 0x20
	[0160.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.668] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33019) returned 1
	[0160.669] CloseHandle (hObject=0x1fc) returned 1
	[0160.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml")) returned 0x20
	[0160.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml")) returned 0x20
	[0160.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SMIGRATE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\smigrate.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.670] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=228720) returned 1
	[0160.670] CloseHandle (hObject=0x1fc) returned 1
	[0160.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SMIGRATE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\smigrate.dll")) returned 0x20
	[0160.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SMIGRATE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\smigrate.dll")) returned 0x20
	[0160.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SMIGRATE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\smigrate.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SMIGRATE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\smigrate.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOA.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\soa.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.671] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=691088) returned 1
	[0160.671] CloseHandle (hObject=0x1fc) returned 1
	[0160.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOA.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\soa.dll")) returned 0x20
	[0160.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOA.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\soa.dll")) returned 0x20
	[0160.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOA.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\soa.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOA.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\soa.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOCIALCONNECTOR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\socialconnector.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.793] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2508672) returned 1
	[0160.793] CloseHandle (hObject=0x140) returned 1
	[0160.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOCIALCONNECTOR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\socialconnector.dll")) returned 0x20
	[0160.793] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOCIALCONNECTOR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\socialconnector.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOCIALCONNECTOR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\socialconnector.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0160.793] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOCIALCONNECTOR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\socialconnector.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOCIALCONNECTOR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\socialconnector.dll")) returned 0
	[0160.793] SetEvent (hEvent=0xfc) returned 1
	[0160.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWSTRUCT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twstruct.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.794] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=124824) returned 1
	[0160.794] CloseHandle (hObject=0x140) returned 1
	[0160.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWSTRUCT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twstruct.dll")) returned 0x20
	[0160.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWSTRUCT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twstruct.dll")) returned 0x20
	[0160.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWSTRUCT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\twstruct.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWSTRUCT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twstruct.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\UML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\uml.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.795] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2570608) returned 1
	[0160.795] CloseHandle (hObject=0x140) returned 1
	[0160.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\UML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\uml.dll")) returned 0x20
	[0160.795] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\UML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\uml.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\UML.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\uml.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0160.795] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\UML.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\uml.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\UML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\uml.dll")) returned 0
	[0160.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\UMLSYS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\umlsys.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.796] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=808784) returned 1
	[0160.796] CloseHandle (hObject=0x140) returned 1
	[0160.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\UMLSYS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\umlsys.dll")) returned 0x20
	[0160.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\UMLSYS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\umlsys.dll")) returned 0x20
	[0160.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\UMLSYS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\umlsys.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\UMLSYS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\umlsys.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\URLREDIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\urlredir.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.925] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=689040) returned 1
	[0160.925] CloseHandle (hObject=0x140) returned 1
	[0160.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\URLREDIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\urlredir.dll")) returned 0x20
	[0160.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\URLREDIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\urlredir.dll")) returned 0x20
	[0160.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\URLREDIR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\urlredir.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\URLREDIR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\urlredir.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.925] SetEvent (hEvent=0xfc) returned 1
	[0160.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.020] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=157696) returned 1
	[0161.020] CloseHandle (hObject=0x140) returned 1
	[0161.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_u.vss")) returned 0x20
	[0161.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_u.vss")) returned 0x20
	[0161.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.020] SetEvent (hEvent=0xfc) returned 1
	[0161.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.021] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=133632) returned 1
	[0161.021] CloseHandle (hObject=0x140) returned 1
	[0161.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_u.vss")) returned 0x20
	[0161.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_u.vss")) returned 0x20
	[0161.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.022] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29184) returned 1
	[0161.022] CloseHandle (hObject=0x140) returned 1
	[0161.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_m.vss")) returned 0x20
	[0161.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_m.vss")) returned 0x20
	[0161.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.023] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27648) returned 1
	[0161.023] CloseHandle (hObject=0x140) returned 1
	[0161.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_u.vss")) returned 0x20
	[0161.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_u.vss")) returned 0x20
	[0161.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ARROWS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\arrows_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.025] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16896) returned 1
	[0161.025] CloseHandle (hObject=0x140) returned 1
	[0161.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls")) returned 0x20
	[0161.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls")) returned 0x20
	[0161.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.025] SetEvent (hEvent=0xfc) returned 1
	[0161.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.026] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1179648) returned 1
	[0161.026] CloseHandle (hObject=0x140) returned 1
	[0161.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_m.vst")) returned 0x20
	[0161.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_m.vst")) returned 0x20
	[0161.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.027] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1164800) returned 1
	[0161.027] CloseHandle (hObject=0x140) returned 1
	[0161.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_u.vst")) returned 0x20
	[0161.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_u.vst")) returned 0x20
	[0161.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ASTMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\astmgt_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.028] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=158720) returned 1
	[0161.028] CloseHandle (hObject=0x140) returned 1
	[0161.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vss")) returned 0x20
	[0161.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vss")) returned 0x20
	[0161.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.029] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26112) returned 1
	[0161.029] CloseHandle (hObject=0x140) returned 1
	[0161.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vst")) returned 0x20
	[0161.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vst")) returned 0x20
	[0161.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.030] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=149504) returned 1
	[0161.030] CloseHandle (hObject=0x140) returned 1
	[0161.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vss")) returned 0x20
	[0161.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vss")) returned 0x20
	[0161.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.031] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26112) returned 1
	[0161.031] CloseHandle (hObject=0x140) returned 1
	[0161.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vst")) returned 0x20
	[0161.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vst")) returned 0x20
	[0161.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\AUDIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\audit_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.032] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=64000) returned 1
	[0161.032] CloseHandle (hObject=0x140) returned 1
	[0161.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vss")) returned 0x20
	[0161.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vss")) returned 0x20
	[0161.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.034] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24064) returned 1
	[0161.034] CloseHandle (hObject=0x140) returned 1
	[0161.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vst")) returned 0x20
	[0161.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vst")) returned 0x20
	[0161.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.034] SetEvent (hEvent=0xfc) returned 1
	[0161.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.035] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=62464) returned 1
	[0161.035] CloseHandle (hObject=0x140) returned 1
	[0161.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vss")) returned 0x20
	[0161.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vss")) returned 0x20
	[0161.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.036] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24064) returned 1
	[0161.036] CloseHandle (hObject=0x140) returned 1
	[0161.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vst")) returned 0x20
	[0161.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vst")) returned 0x20
	[0161.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basflo_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.037] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19456) returned 1
	[0161.037] CloseHandle (hObject=0x140) returned 1
	[0161.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_m.vst")) returned 0x20
	[0161.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_m.vst")) returned 0x20
	[0161.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.226] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19456) returned 1
	[0161.226] CloseHandle (hObject=0x1fc) returned 1
	[0161.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_u.vst")) returned 0x20
	[0161.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_u.vst")) returned 0x20
	[0161.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASICD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basicd_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.227] SetEvent (hEvent=0xfc) returned 1
	[0161.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.227] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=108544) returned 1
	[0161.227] CloseHandle (hObject=0x1fc) returned 1
	[0161.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_m.vss")) returned 0x20
	[0161.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_m.vss")) returned 0x20
	[0161.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.228] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=107008) returned 1
	[0161.228] CloseHandle (hObject=0x1fc) returned 1
	[0161.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_u.vss")) returned 0x20
	[0161.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_u.vss")) returned 0x20
	[0161.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmng_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.229] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=315904) returned 1
	[0161.229] CloseHandle (hObject=0x1fc) returned 1
	[0161.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vss")) returned 0x20
	[0161.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vss")) returned 0x20
	[0161.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.230] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=103424) returned 1
	[0161.231] CloseHandle (hObject=0x1fc) returned 1
	[0161.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vst")) returned 0x20
	[0161.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vst")) returned 0x20
	[0161.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.232] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312832) returned 1
	[0161.232] CloseHandle (hObject=0x1fc) returned 1
	[0161.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vss")) returned 0x20
	[0161.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vss")) returned 0x20
	[0161.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.233] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=103424) returned 1
	[0161.233] CloseHandle (hObject=0x1fc) returned 1
	[0161.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vst")) returned 0x20
	[0161.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vst")) returned 0x20
	[0161.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmn_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.234] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=105472) returned 1
	[0161.234] CloseHandle (hObject=0x1fc) returned 1
	[0161.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_m.vss")) returned 0x20
	[0161.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_m.vss")) returned 0x20
	[0161.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.235] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=101888) returned 1
	[0161.235] CloseHandle (hObject=0x1fc) returned 1
	[0161.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_u.vss")) returned 0x20
	[0161.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_u.vss")) returned 0x20
	[0161.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPRES_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpres_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.236] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1369) returned 1
	[0161.236] CloseHandle (hObject=0x1fc) returned 1
	[0161.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml")) returned 0x20
	[0161.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml")) returned 0x20
	[0161.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\brainstm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.237] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34816) returned 1
	[0161.237] CloseHandle (hObject=0x1fc) returned 1
	[0161.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vss")) returned 0x20
	[0161.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vss")) returned 0x20
	[0161.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.238] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30720) returned 1
	[0161.239] CloseHandle (hObject=0x1fc) returned 1
	[0161.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vst")) returned 0x20
	[0161.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vst")) returned 0x20
	[0161.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.239] SetEvent (hEvent=0xfc) returned 1
	[0161.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.240] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34816) returned 1
	[0161.240] CloseHandle (hObject=0x1fc) returned 1
	[0161.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vss")) returned 0x20
	[0161.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vss")) returned 0x20
	[0161.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.241] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30720) returned 1
	[0161.241] CloseHandle (hObject=0x1fc) returned 1
	[0161.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vst")) returned 0x20
	[0161.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vst")) returned 0x20
	[0161.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BSTORM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bstorm_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.242] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=141312) returned 1
	[0161.242] CloseHandle (hObject=0x1fc) returned 1
	[0161.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_m.vss")) returned 0x20
	[0161.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_m.vss")) returned 0x20
	[0161.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.243] SetEvent (hEvent=0xfc) returned 1
	[0161.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.243] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=130048) returned 1
	[0161.243] CloseHandle (hObject=0x1fc) returned 1
	[0161.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_u.vss")) returned 0x20
	[0161.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_u.vss")) returned 0x20
	[0161.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BTHKT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bthkt_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.244] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114688) returned 1
	[0161.244] CloseHandle (hObject=0x1fc) returned 1
	[0161.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_m.vss")) returned 0x20
	[0161.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_m.vss")) returned 0x20
	[0161.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.245] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=115200) returned 1
	[0161.245] CloseHandle (hObject=0x1fc) returned 1
	[0161.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_u.vss")) returned 0x20
	[0161.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_u.vss")) returned 0x20
	[0161.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CABNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cabnt_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.246] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1699840) returned 1
	[0161.247] CloseHandle (hObject=0x1fc) returned 1
	[0161.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vss")) returned 0x20
	[0161.247] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vss"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0161.247] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vss")) returned 0
	[0161.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.247] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81920) returned 1
	[0161.248] CloseHandle (hObject=0x1fc) returned 1
	[0161.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vst")) returned 0x20
	[0161.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vst")) returned 0x20
	[0161.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0161.348] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1694208) returned 1
	[0161.348] CloseHandle (hObject=0x1fc) returned 1
	[0161.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vss")) returned 0x20
	[0161.348] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vss"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0161.348] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vss")) returned 0
	[0161.348] SetEvent (hEvent=0xfc) returned 1
	[0161.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.440] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=137728) returned 1
	[0161.440] CloseHandle (hObject=0x140) returned 1
	[0161.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_m.vss")) returned 0x20
	[0161.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_m.vss")) returned 0x20
	[0161.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.440] SetEvent (hEvent=0xfc) returned 1
	[0161.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.442] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47104) returned 1
	[0161.442] CloseHandle (hObject=0x140) returned 1
	[0161.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vss")) returned 0x20
	[0161.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vss")) returned 0x20
	[0161.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.442] SetEvent (hEvent=0xfc) returned 1
	[0161.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.443] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81920) returned 1
	[0161.443] CloseHandle (hObject=0x140) returned 1
	[0161.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vst")) returned 0x20
	[0161.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vst")) returned 0x20
	[0161.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.445] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46080) returned 1
	[0161.445] CloseHandle (hObject=0x140) returned 1
	[0161.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vss")) returned 0x20
	[0161.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vss")) returned 0x20
	[0161.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.445] SetEvent (hEvent=0xfc) returned 1
	[0161.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.446] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=80896) returned 1
	[0161.446] CloseHandle (hObject=0x140) returned 1
	[0161.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vst")) returned 0x20
	[0161.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vst")) returned 0x20
	[0161.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CAUSEF_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\causef_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.448] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=62464) returned 1
	[0161.448] CloseHandle (hObject=0x140) returned 1
	[0161.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_m.vst")) returned 0x20
	[0161.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_m.vst")) returned 0x20
	[0161.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.449] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=62976) returned 1
	[0161.449] CloseHandle (hObject=0x140) returned 1
	[0161.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_u.vst")) returned 0x20
	[0161.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_u.vst")) returned 0x20
	[0161.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CEILPL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ceilpl_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.450] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=541184) returned 1
	[0161.450] CloseHandle (hObject=0x140) returned 1
	[0161.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vss")) returned 0x20
	[0161.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vss")) returned 0x20
	[0161.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.451] SetEvent (hEvent=0xfc) returned 1
	[0161.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.452] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37888) returned 1
	[0161.452] CloseHandle (hObject=0x140) returned 1
	[0161.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vst")) returned 0x20
	[0161.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vst")) returned 0x20
	[0161.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.453] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=512000) returned 1
	[0161.453] CloseHandle (hObject=0x140) returned 1
	[0161.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vss")) returned 0x20
	[0161.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vss")) returned 0x20
	[0161.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.454] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37376) returned 1
	[0161.454] CloseHandle (hObject=0x140) returned 1
	[0161.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vst")) returned 0x20
	[0161.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vst")) returned 0x20
	[0161.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CHART_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\chart_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.455] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98816) returned 1
	[0161.455] CloseHandle (hObject=0x140) returned 1
	[0161.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vss")) returned 0x20
	[0161.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vss")) returned 0x20
	[0161.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.456] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30720) returned 1
	[0161.456] CloseHandle (hObject=0x140) returned 1
	[0161.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vst")) returned 0x20
	[0161.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vst")) returned 0x20
	[0161.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.458] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=96256) returned 1
	[0161.458] CloseHandle (hObject=0x140) returned 1
	[0161.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vss")) returned 0x20
	[0161.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vss")) returned 0x20
	[0161.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.458] SetEvent (hEvent=0xfc) returned 1
	[0161.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.459] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30208) returned 1
	[0161.459] CloseHandle (hObject=0x140) returned 1
	[0161.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vst")) returned 0x20
	[0161.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vst")) returned 0x20
	[0161.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMOLE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comole_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.460] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=64512) returned 1
	[0161.460] CloseHandle (hObject=0x140) returned 1
	[0161.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_m.vss")) returned 0x20
	[0161.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_m.vss")) returned 0x20
	[0161.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.461] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=63488) returned 1
	[0161.461] CloseHandle (hObject=0x140) returned 1
	[0161.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_u.vss")) returned 0x20
	[0161.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_u.vss")) returned 0x20
	[0161.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPLN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\compln_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.463] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=253440) returned 1
	[0161.463] CloseHandle (hObject=0x140) returned 1
	[0161.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_m.vss")) returned 0x20
	[0161.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_m.vss")) returned 0x20
	[0161.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.463] SetEvent (hEvent=0xfc) returned 1
	[0161.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.464] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=246784) returned 1
	[0161.464] CloseHandle (hObject=0x140) returned 1
	[0161.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_u.vss")) returned 0x20
	[0161.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_u.vss")) returned 0x20
	[0161.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\COMPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\comps_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.465] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=84992) returned 1
	[0161.465] CloseHandle (hObject=0x140) returned 1
	[0161.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_m.vst")) returned 0x20
	[0161.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_m.vst")) returned 0x20
	[0161.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.466] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=84992) returned 1
	[0161.466] CloseHandle (hObject=0x140) returned 1
	[0161.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_u.vst")) returned 0x20
	[0161.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_u.vst")) returned 0x20
	[0161.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONLOG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\conlog_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.468] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=232448) returned 1
	[0161.468] CloseHandle (hObject=0x140) returned 1
	[0161.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_m.vss")) returned 0x20
	[0161.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_m.vss")) returned 0x20
	[0161.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.468] SetEvent (hEvent=0xfc) returned 1
	[0161.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.469] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=214528) returned 1
	[0161.469] CloseHandle (hObject=0x140) returned 1
	[0161.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_u.vss")) returned 0x20
	[0161.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_u.vss")) returned 0x20
	[0161.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CONNEC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\connec_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.470] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=561664) returned 1
	[0161.470] CloseHandle (hObject=0x140) returned 1
	[0161.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_m.vss")) returned 0x20
	[0161.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_m.vss")) returned 0x20
	[0161.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.471] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=577024) returned 1
	[0161.471] CloseHandle (hObject=0x140) returned 1
	[0161.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_u.vss")) returned 0x20
	[0161.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_u.vss")) returned 0x20
	[0161.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CUBICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\cubicl_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.475] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=88576) returned 1
	[0161.475] CloseHandle (hObject=0x140) returned 1
	[0161.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vss")) returned 0x20
	[0161.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vss")) returned 0x20
	[0161.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.475] SetEvent (hEvent=0xfc) returned 1
	[0161.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.476] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23040) returned 1
	[0161.476] CloseHandle (hObject=0x140) returned 1
	[0161.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vst")) returned 0x20
	[0161.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vst")) returned 0x20
	[0161.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.477] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=86528) returned 1
	[0161.477] CloseHandle (hObject=0x140) returned 1
	[0161.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vss")) returned 0x20
	[0161.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vss")) returned 0x20
	[0161.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.478] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22528) returned 1
	[0161.478] CloseHandle (hObject=0x140) returned 1
	[0161.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vst")) returned 0x20
	[0161.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vst")) returned 0x20
	[0161.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datflo_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.479] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19968) returned 1
	[0161.479] CloseHandle (hObject=0x140) returned 1
	[0161.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_m.vst")) returned 0x20
	[0161.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_m.vst")) returned 0x20
	[0161.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.480] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19968) returned 1
	[0161.480] CloseHandle (hObject=0x140) returned 1
	[0161.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_u.vst")) returned 0x20
	[0161.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_u.vst")) returned 0x20
	[0161.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DATMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\datmod_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.481] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35840) returned 1
	[0161.481] CloseHandle (hObject=0x140) returned 1
	[0161.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_m.vst")) returned 0x20
	[0161.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_m.vst")) returned 0x20
	[0161.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.482] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35840) returned 1
	[0161.482] CloseHandle (hObject=0x140) returned 1
	[0161.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_u.vst")) returned 0x20
	[0161.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_u.vst")) returned 0x20
	[0161.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DBMODL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dbmodl_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.584] SetEvent (hEvent=0xfc) returned 1
	[0161.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.695] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=104448) returned 1
	[0161.695] CloseHandle (hObject=0x1f8) returned 1
	[0161.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_u.vss")) returned 0x20
	[0161.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_u.vss")) returned 0x20
	[0161.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.696] SetEvent (hEvent=0xfc) returned 1
	[0161.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.696] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=108032) returned 1
	[0161.696] CloseHandle (hObject=0x1f8) returned 1
	[0161.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_u.vss")) returned 0x20
	[0161.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_u.vss")) returned 0x20
	[0161.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.697] SetEvent (hEvent=0xfc) returned 1
	[0161.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.698] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31232) returned 1
	[0161.698] CloseHandle (hObject=0x1f8) returned 1
	[0161.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vss")) returned 0x20
	[0161.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vss")) returned 0x20
	[0161.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.698] SetEvent (hEvent=0xfc) returned 1
	[0161.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.699] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=110592) returned 1
	[0161.699] CloseHandle (hObject=0x1f8) returned 1
	[0161.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vst")) returned 0x20
	[0161.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vst")) returned 0x20
	[0161.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.699] SetEvent (hEvent=0xfc) returned 1
	[0161.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.700] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31232) returned 1
	[0161.700] CloseHandle (hObject=0x1f8) returned 1
	[0161.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vss")) returned 0x20
	[0161.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vss")) returned 0x20
	[0161.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.701] SetEvent (hEvent=0xfc) returned 1
	[0161.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.702] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=110592) returned 1
	[0161.702] CloseHandle (hObject=0x1f8) returned 1
	[0161.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vst")) returned 0x20
	[0161.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vst")) returned 0x20
	[0161.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRILLD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drilld_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.702] SetEvent (hEvent=0xfc) returned 1
	[0161.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.703] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=411136) returned 1
	[0161.703] CloseHandle (hObject=0x1f8) returned 1
	[0161.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vss")) returned 0x20
	[0161.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vss")) returned 0x20
	[0161.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.703] SetEvent (hEvent=0xfc) returned 1
	[0161.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.827] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=123904) returned 1
	[0161.828] CloseHandle (hObject=0x1f8) returned 1
	[0161.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vst")) returned 0x20
	[0161.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vst")) returned 0x20
	[0161.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.828] SetEvent (hEvent=0xfc) returned 1
	[0161.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.829] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33280) returned 1
	[0161.829] CloseHandle (hObject=0x1f8) returned 1
	[0161.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vst")) returned 0x20
	[0161.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vst")) returned 0x20
	[0161.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.830] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=155648) returned 1
	[0161.830] CloseHandle (hObject=0x1f8) returned 1
	[0161.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_m.vss")) returned 0x20
	[0161.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_m.vss")) returned 0x20
	[0161.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.831] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=148992) returned 1
	[0161.831] CloseHandle (hObject=0x1f8) returned 1
	[0161.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_u.vss")) returned 0x20
	[0161.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_u.vss")) returned 0x20
	[0161.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECOMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eecomp_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.833] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=235520) returned 1
	[0161.833] CloseHandle (hObject=0x1f8) returned 1
	[0161.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_m.vss")) returned 0x20
	[0161.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_m.vss")) returned 0x20
	[0161.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.833] SetEvent (hEvent=0xfc) returned 1
	[0161.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.834] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=228352) returned 1
	[0161.834] CloseHandle (hObject=0x1f8) returned 1
	[0161.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_u.vss")) returned 0x20
	[0161.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_u.vss")) returned 0x20
	[0161.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEFUND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eefund_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.835] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36864) returned 1
	[0161.835] CloseHandle (hObject=0x1f8) returned 1
	[0161.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_m.vst")) returned 0x20
	[0161.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_m.vst")) returned 0x20
	[0161.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.836] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36352) returned 1
	[0161.836] CloseHandle (hObject=0x1f8) returned 1
	[0161.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_u.vst")) returned 0x20
	[0161.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_u.vst")) returned 0x20
	[0161.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEGENR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eegenr_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.839] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37376) returned 1
	[0161.839] CloseHandle (hObject=0x168) returned 1
	[0161.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_m.vst")) returned 0x20
	[0161.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_m.vst")) returned 0x20
	[0161.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.840] SetEvent (hEvent=0xfc) returned 1
	[0161.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.840] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37376) returned 1
	[0161.840] CloseHandle (hObject=0x168) returned 1
	[0161.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_u.vst")) returned 0x20
	[0161.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_u.vst")) returned 0x20
	[0161.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEICS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeics_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.841] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=56832) returned 1
	[0161.841] CloseHandle (hObject=0x168) returned 1
	[0161.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_m.vss")) returned 0x20
	[0161.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_m.vss")) returned 0x20
	[0161.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.842] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=55296) returned 1
	[0161.842] CloseHandle (hObject=0x168) returned 1
	[0161.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_u.vss")) returned 0x20
	[0161.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_u.vss")) returned 0x20
	[0161.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAIN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemain_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.844] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=186880) returned 1
	[0161.844] CloseHandle (hObject=0x168) returned 1
	[0161.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_m.vss")) returned 0x20
	[0161.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_m.vss")) returned 0x20
	[0161.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.844] SetEvent (hEvent=0xfc) returned 1
	[0161.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.845] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=178688) returned 1
	[0161.845] CloseHandle (hObject=0x168) returned 1
	[0161.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_u.vss")) returned 0x20
	[0161.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_u.vss")) returned 0x20
	[0161.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMAPS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemaps_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.846] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=88064) returned 1
	[0161.846] CloseHandle (hObject=0x168) returned 1
	[0161.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_m.vss")) returned 0x20
	[0161.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_m.vss")) returned 0x20
	[0161.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.847] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=83968) returned 1
	[0161.847] CloseHandle (hObject=0x168) returned 1
	[0161.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_u.vss")) returned 0x20
	[0161.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_u.vss")) returned 0x20
	[0161.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEMECH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eemech_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.848] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=111616) returned 1
	[0161.848] CloseHandle (hObject=0x168) returned 1
	[0161.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_m.vss")) returned 0x20
	[0161.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_m.vss")) returned 0x20
	[0161.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.849] SetEvent (hEvent=0xfc) returned 1
	[0161.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.849] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=108544) returned 1
	[0161.849] CloseHandle (hObject=0x168) returned 1
	[0161.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_u.vss")) returned 0x20
	[0161.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_u.vss")) returned 0x20
	[0161.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEPATH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eepath_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.850] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=108032) returned 1
	[0161.850] CloseHandle (hObject=0x168) returned 1
	[0161.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_m.vss")) returned 0x20
	[0161.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_m.vss")) returned 0x20
	[0161.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.851] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=103936) returned 1
	[0161.851] CloseHandle (hObject=0x168) returned 1
	[0161.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_u.vss")) returned 0x20
	[0161.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_u.vss")) returned 0x20
	[0161.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEQUAL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eequal_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.853] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=171008) returned 1
	[0161.853] CloseHandle (hObject=0x168) returned 1
	[0161.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_m.vss")) returned 0x20
	[0161.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_m.vss")) returned 0x20
	[0161.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.853] SetEvent (hEvent=0xfc) returned 1
	[0161.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.854] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=170496) returned 1
	[0161.854] CloseHandle (hObject=0x168) returned 1
	[0161.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_u.vss")) returned 0x20
	[0161.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_u.vss")) returned 0x20
	[0161.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESEMI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesemi_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.855] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=307200) returned 1
	[0161.855] CloseHandle (hObject=0x168) returned 1
	[0161.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_m.vss")) returned 0x20
	[0161.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_m.vss")) returned 0x20
	[0161.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0161.856] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=296448) returned 1
	[0161.856] CloseHandle (hObject=0x168) returned 1
	[0161.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_u.vss")) returned 0x20
	[0161.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_u.vss")) returned 0x20
	[0161.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESWCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeswch_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.907] SetEvent (hEvent=0xfc) returned 1
	[0161.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.124] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33792) returned 1
	[0162.124] CloseHandle (hObject=0x1f4) returned 1
	[0162.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_u.vst")) returned 0x20
	[0162.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_u.vst")) returned 0x20
	[0162.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.124] SetEvent (hEvent=0xfc) returned 1
	[0162.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.125] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65536) returned 1
	[0162.125] CloseHandle (hObject=0x1f4) returned 1
	[0162.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vst")) returned 0x20
	[0162.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vst")) returned 0x20
	[0162.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.126] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=433152) returned 1
	[0162.126] CloseHandle (hObject=0x1f4) returned 1
	[0162.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vss")) returned 0x20
	[0162.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vss")) returned 0x20
	[0162.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.127] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65024) returned 1
	[0162.127] CloseHandle (hObject=0x1f4) returned 1
	[0162.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vst")) returned 0x20
	[0162.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vst")) returned 0x20
	[0162.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.130] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51200) returned 1
	[0162.130] CloseHandle (hObject=0x20c) returned 1
	[0162.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_m.vss")) returned 0x20
	[0162.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_m.vss")) returned 0x20
	[0162.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.130] SetEvent (hEvent=0xfc) returned 1
	[0162.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.131] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50688) returned 1
	[0162.131] CloseHandle (hObject=0x20c) returned 1
	[0162.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_u.vss")) returned 0x20
	[0162.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_u.vss")) returned 0x20
	[0162.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTITY_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entity_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.132] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41472) returned 1
	[0162.132] CloseHandle (hObject=0x20c) returned 1
	[0162.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vss")) returned 0x20
	[0162.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vss")) returned 0x20
	[0162.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.135] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31232) returned 1
	[0162.135] CloseHandle (hObject=0x20c) returned 1
	[0162.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vst")) returned 0x20
	[0162.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vst")) returned 0x20
	[0162.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.136] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39936) returned 1
	[0162.136] CloseHandle (hObject=0x20c) returned 1
	[0162.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vss")) returned 0x20
	[0162.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vss")) returned 0x20
	[0162.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.138] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31232) returned 1
	[0162.138] CloseHandle (hObject=0x20c) returned 1
	[0162.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vst")) returned 0x20
	[0162.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vst")) returned 0x20
	[0162.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EPC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\epc_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.139] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=524288) returned 1
	[0162.139] CloseHandle (hObject=0x20c) returned 1
	[0162.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_m.vss")) returned 0x20
	[0162.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_m.vss")) returned 0x20
	[0162.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.140] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=519168) returned 1
	[0162.140] CloseHandle (hObject=0x20c) returned 1
	[0162.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_u.vss")) returned 0x20
	[0162.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_u.vss")) returned 0x20
	[0162.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EXCOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\excobj_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.141] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=272384) returned 1
	[0162.141] CloseHandle (hObject=0x20c) returned 1
	[0162.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_m.vss")) returned 0x20
	[0162.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_m.vss")) returned 0x20
	[0162.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.142] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=257024) returned 1
	[0162.142] CloseHandle (hObject=0x20c) returned 1
	[0162.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_u.vss")) returned 0x20
	[0162.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_u.vss")) returned 0x20
	[0162.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn1_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.144] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=188928) returned 1
	[0162.144] CloseHandle (hObject=0x20c) returned 1
	[0162.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_m.vss")) returned 0x20
	[0162.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_m.vss")) returned 0x20
	[0162.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.144] SetEvent (hEvent=0xfc) returned 1
	[0162.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.145] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=190464) returned 1
	[0162.145] CloseHandle (hObject=0x20c) returned 1
	[0162.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_u.vss")) returned 0x20
	[0162.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_u.vss")) returned 0x20
	[0162.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FASTN2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fastn2_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.146] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40448) returned 1
	[0162.146] CloseHandle (hObject=0x20c) returned 1
	[0162.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vss")) returned 0x20
	[0162.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vss")) returned 0x20
	[0162.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.147] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30720) returned 1
	[0162.147] CloseHandle (hObject=0x20c) returned 1
	[0162.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vst")) returned 0x20
	[0162.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vst")) returned 0x20
	[0162.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.148] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39424) returned 1
	[0162.148] CloseHandle (hObject=0x20c) returned 1
	[0162.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vss")) returned 0x20
	[0162.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vss")) returned 0x20
	[0162.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.149] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30720) returned 1
	[0162.149] CloseHandle (hObject=0x20c) returned 1
	[0162.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vst")) returned 0x20
	[0162.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vst")) returned 0x20
	[0162.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FAULT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fault_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.150] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=192000) returned 1
	[0162.150] CloseHandle (hObject=0x20c) returned 1
	[0162.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_m.vss")) returned 0x20
	[0162.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_m.vss")) returned 0x20
	[0162.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.151] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=178176) returned 1
	[0162.151] CloseHandle (hObject=0x20c) returned 1
	[0162.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_u.vss")) returned 0x20
	[0162.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_u.vss")) returned 0x20
	[0162.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLOSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\floshp_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.152] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97792) returned 1
	[0162.152] CloseHandle (hObject=0x20c) returned 1
	[0162.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_m.vst")) returned 0x20
	[0162.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_m.vst")) returned 0x20
	[0162.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.153] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97280) returned 1
	[0162.153] CloseHandle (hObject=0x20c) returned 1
	[0162.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_u.vst")) returned 0x20
	[0162.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_u.vst")) returned 0x20
	[0162.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FLRPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\flrpln_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.157] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44032) returned 1
	[0162.157] CloseHandle (hObject=0x168) returned 1
	[0162.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_m.vst")) returned 0x20
	[0162.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_m.vst")) returned 0x20
	[0162.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.158] SetEvent (hEvent=0xfc) returned 1
	[0162.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.158] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44544) returned 1
	[0162.158] CloseHandle (hObject=0x168) returned 1
	[0162.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_u.vst")) returned 0x20
	[0162.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_u.vst")) returned 0x20
	[0162.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpall_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.159] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=310272) returned 1
	[0162.159] CloseHandle (hObject=0x168) returned 1
	[0162.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_m.vss")) returned 0x20
	[0162.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_m.vss")) returned 0x20
	[0162.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.160] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=262656) returned 1
	[0162.160] CloseHandle (hObject=0x168) returned 1
	[0162.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_u.vss")) returned 0x20
	[0162.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_u.vss")) returned 0x20
	[0162.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPASSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpassm_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.253] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=320512) returned 1
	[0162.253] CloseHandle (hObject=0x168) returned 1
	[0162.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_m.vss")) returned 0x20
	[0162.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_m.vss")) returned 0x20
	[0162.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.254] SetEvent (hEvent=0xfc) returned 1
	[0162.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.254] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=108032) returned 1
	[0162.254] CloseHandle (hObject=0x168) returned 1
	[0162.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_u.vss")) returned 0x20
	[0162.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_u.vss")) returned 0x20
	[0162.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.255] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=202240) returned 1
	[0162.255] CloseHandle (hObject=0x168) returned 1
	[0162.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_m.vss")) returned 0x20
	[0162.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_m.vss")) returned 0x20
	[0162.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.256] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=201216) returned 1
	[0162.256] CloseHandle (hObject=0x168) returned 1
	[0162.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_u.vss")) returned 0x20
	[0162.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_u.vss")) returned 0x20
	[0162.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FURN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\furn_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.257] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21504) returned 1
	[0162.257] CloseHandle (hObject=0x168) returned 1
	[0162.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_m.vss")) returned 0x20
	[0162.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_m.vss")) returned 0x20
	[0162.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.258] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20992) returned 1
	[0162.259] CloseHandle (hObject=0x168) returned 1
	[0162.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_u.vss")) returned 0x20
	[0162.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_u.vss")) returned 0x20
	[0162.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANESA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ganesa_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.259] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=124928) returned 1
	[0162.260] CloseHandle (hObject=0x168) returned 1
	[0162.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vss")) returned 0x20
	[0162.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vss")) returned 0x20
	[0162.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.260] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45568) returned 1
	[0162.261] CloseHandle (hObject=0x168) returned 1
	[0162.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vst")) returned 0x20
	[0162.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vst")) returned 0x20
	[0162.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.262] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=119808) returned 1
	[0162.262] CloseHandle (hObject=0x168) returned 1
	[0162.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vss")) returned 0x20
	[0162.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vss")) returned 0x20
	[0162.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.263] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46080) returned 1
	[0162.263] CloseHandle (hObject=0x168) returned 1
	[0162.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vst")) returned 0x20
	[0162.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vst")) returned 0x20
	[0162.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GANTT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gantt_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.264] SetEvent (hEvent=0xfc) returned 1
	[0162.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.264] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=76288) returned 1
	[0162.264] CloseHandle (hObject=0x168) returned 1
	[0162.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_m.vss")) returned 0x20
	[0162.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_m.vss")) returned 0x20
	[0162.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.265] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=74752) returned 1
	[0162.265] CloseHandle (hObject=0x168) returned 1
	[0162.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_u.vss")) returned 0x20
	[0162.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_u.vss")) returned 0x20
	[0162.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GARDEN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\garden_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.266] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=141312) returned 1
	[0162.266] CloseHandle (hObject=0x168) returned 1
	[0162.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_m.vss")) returned 0x20
	[0162.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_m.vss")) returned 0x20
	[0162.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.267] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=137728) returned 1
	[0162.267] CloseHandle (hObject=0x168) returned 1
	[0162.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_u.vss")) returned 0x20
	[0162.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_u.vss")) returned 0x20
	[0162.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\GDT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\gdt_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.268] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=133632) returned 1
	[0162.269] CloseHandle (hObject=0x168) returned 1
	[0162.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_m.vst")) returned 0x20
	[0162.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_m.vst")) returned 0x20
	[0162.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.270] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=133120) returned 1
	[0162.270] CloseHandle (hObject=0x168) returned 1
	[0162.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_u.vst")) returned 0x20
	[0162.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_u.vst")) returned 0x20
	[0162.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HOMPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hompln_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.271] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=177664) returned 1
	[0162.271] CloseHandle (hObject=0x168) returned 1
	[0162.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_m.vss")) returned 0x20
	[0162.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_m.vss")) returned 0x20
	[0162.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.272] SetEvent (hEvent=0xfc) returned 1
	[0162.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.272] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=169984) returned 1
	[0162.272] CloseHandle (hObject=0x168) returned 1
	[0162.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_u.vss")) returned 0x20
	[0162.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_u.vss")) returned 0x20
	[0162.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACCE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacce_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.274] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=192512) returned 1
	[0162.274] CloseHandle (hObject=0x168) returned 1
	[0162.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_m.vss")) returned 0x20
	[0162.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_m.vss")) returned 0x20
	[0162.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.274] SetEvent (hEvent=0xfc) returned 1
	[0162.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.275] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=190464) returned 1
	[0162.275] CloseHandle (hObject=0x168) returned 1
	[0162.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_u.vss")) returned 0x20
	[0162.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_u.vss")) returned 0x20
	[0162.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacc_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.276] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=159232) returned 1
	[0162.276] CloseHandle (hObject=0x168) returned 1
	[0162.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_m.vss")) returned 0x20
	[0162.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_m.vss")) returned 0x20
	[0162.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.277] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=158208) returned 1
	[0162.277] CloseHandle (hObject=0x168) returned 1
	[0162.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_u.vss")) returned 0x20
	[0162.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_u.vss")) returned 0x20
	[0162.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvacd_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.278] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114688) returned 1
	[0162.278] CloseHandle (hObject=0x168) returned 1
	[0162.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_m.vss")) returned 0x20
	[0162.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_m.vss")) returned 0x20
	[0162.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.280] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=112128) returned 1
	[0162.280] CloseHandle (hObject=0x168) returned 1
	[0162.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_u.vss")) returned 0x20
	[0162.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_u.vss")) returned 0x20
	[0162.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVACEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvaceq_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.282] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98304) returned 1
	[0162.282] CloseHandle (hObject=0x168) returned 1
	[0162.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_m.vst")) returned 0x20
	[0162.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_m.vst")) returned 0x20
	[0162.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.283] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97792) returned 1
	[0162.283] CloseHandle (hObject=0x168) returned 1
	[0162.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_u.vst")) returned 0x20
	[0162.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_u.vst")) returned 0x20
	[0162.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\HVAC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\hvac_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.284] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=56320) returned 1
	[0162.284] CloseHandle (hObject=0x168) returned 1
	[0162.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vss")) returned 0x20
	[0162.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vss")) returned 0x20
	[0162.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.286] SetEvent (hEvent=0xfc) returned 1
	[0162.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.287] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29696) returned 1
	[0162.287] CloseHandle (hObject=0x168) returned 1
	[0162.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vst")) returned 0x20
	[0162.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vst")) returned 0x20
	[0162.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.288] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53760) returned 1
	[0162.288] CloseHandle (hObject=0x168) returned 1
	[0162.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vss")) returned 0x20
	[0162.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vss")) returned 0x20
	[0162.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.289] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29696) returned 1
	[0162.289] CloseHandle (hObject=0x168) returned 1
	[0162.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vst")) returned 0x20
	[0162.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vst")) returned 0x20
	[0162.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IDEF0_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\idef0_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.290] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=62464) returned 1
	[0162.290] CloseHandle (hObject=0x168) returned 1
	[0162.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_m.vss")) returned 0x20
	[0162.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_m.vss")) returned 0x20
	[0162.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.291] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=60416) returned 1
	[0162.291] CloseHandle (hObject=0x168) returned 1
	[0162.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_u.vss")) returned 0x20
	[0162.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_u.vss")) returned 0x20
	[0162.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\INTANN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\intann_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.471] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58368) returned 1
	[0162.471] CloseHandle (hObject=0x204) returned 1
	[0162.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_m.vss")) returned 0x20
	[0162.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_m.vss")) returned 0x20
	[0162.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.472] SetEvent (hEvent=0xfc) returned 1
	[0162.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.473] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36352) returned 1
	[0162.473] CloseHandle (hObject=0x204) returned 1
	[0162.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vst")) returned 0x20
	[0162.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vst")) returned 0x20
	[0162.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.474] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=216064) returned 1
	[0162.474] CloseHandle (hObject=0x204) returned 1
	[0162.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vss")) returned 0x20
	[0162.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vss")) returned 0x20
	[0162.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.474] SetEvent (hEvent=0xfc) returned 1
	[0162.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.475] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36352) returned 1
	[0162.475] CloseHandle (hObject=0x204) returned 1
	[0162.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vst")) returned 0x20
	[0162.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vst")) returned 0x20
	[0162.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.476] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58880) returned 1
	[0162.476] CloseHandle (hObject=0x204) returned 1
	[0162.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_m.vst")) returned 0x20
	[0162.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_m.vst")) returned 0x20
	[0162.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.477] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57856) returned 1
	[0162.477] CloseHandle (hObject=0x204) returned 1
	[0162.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_u.vst")) returned 0x20
	[0162.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_u.vst")) returned 0x20
	[0162.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.478] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53248) returned 1
	[0162.478] CloseHandle (hObject=0x204) returned 1
	[0162.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_m.vst")) returned 0x20
	[0162.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_m.vst")) returned 0x20
	[0162.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.479] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53248) returned 1
	[0162.479] CloseHandle (hObject=0x204) returned 1
	[0162.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_u.vst")) returned 0x20
	[0162.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_u.vst")) returned 0x20
	[0162.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEALL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\meall_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.481] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=83456) returned 1
	[0162.481] CloseHandle (hObject=0x204) returned 1
	[0162.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_m.vss")) returned 0x20
	[0162.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_m.vss")) returned 0x20
	[0162.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.482] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81920) returned 1
	[0162.482] CloseHandle (hObject=0x204) returned 1
	[0162.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_u.vss")) returned 0x20
	[0162.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_u.vss")) returned 0x20
	[0162.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MEMOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\memobj_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.483] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39424) returned 1
	[0162.483] CloseHandle (hObject=0x204) returned 1
	[0162.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_m.vss")) returned 0x20
	[0162.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_m.vss")) returned 0x20
	[0162.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.484] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38400) returned 1
	[0162.484] CloseHandle (hObject=0x204) returned 1
	[0162.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_u.vss")) returned 0x20
	[0162.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_u.vss")) returned 0x20
	[0162.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\METRO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\metro_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.485] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=396800) returned 1
	[0162.485] CloseHandle (hObject=0x204) returned 1
	[0162.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vss")) returned 0x20
	[0162.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vss")) returned 0x20
	[0162.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.487] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31232) returned 1
	[0162.487] CloseHandle (hObject=0x204) returned 1
	[0162.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vst")) returned 0x20
	[0162.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vst")) returned 0x20
	[0162.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.487] SetEvent (hEvent=0xfc) returned 1
	[0162.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.488] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=376832) returned 1
	[0162.488] CloseHandle (hObject=0x204) returned 1
	[0162.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vss")) returned 0x20
	[0162.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vss")) returned 0x20
	[0162.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.489] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31232) returned 1
	[0162.489] CloseHandle (hObject=0x204) returned 1
	[0162.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vst")) returned 0x20
	[0162.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vst")) returned 0x20
	[0162.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MRKTDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\mrktdg_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.490] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=191488) returned 1
	[0162.490] CloseHandle (hObject=0x204) returned 1
	[0162.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_m.vss")) returned 0x20
	[0162.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_m.vss")) returned 0x20
	[0162.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.641] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=187392) returned 1
	[0162.641] CloseHandle (hObject=0x20c) returned 1
	[0162.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_u.vss")) returned 0x20
	[0162.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_u.vss")) returned 0x20
	[0162.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETLOC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netloc_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.641] SetEvent (hEvent=0xfc) returned 1
	[0162.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.734] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=109568) returned 1
	[0162.734] CloseHandle (hObject=0x140) returned 1
	[0162.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_m.vss")) returned 0x20
	[0162.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_m.vss")) returned 0x20
	[0162.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.734] SetEvent (hEvent=0xfc) returned 1
	[0162.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.735] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=116736) returned 1
	[0162.735] CloseHandle (hObject=0x140) returned 1
	[0162.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_m.vst")) returned 0x20
	[0162.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_m.vst")) returned 0x20
	[0162.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.736] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=115712) returned 1
	[0162.736] CloseHandle (hObject=0x140) returned 1
	[0162.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_u.vst")) returned 0x20
	[0162.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_u.vst")) returned 0x20
	[0162.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEDG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pedg_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.738] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=201728) returned 1
	[0162.738] CloseHandle (hObject=0x140) returned 1
	[0162.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_m.vss")) returned 0x20
	[0162.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_m.vss")) returned 0x20
	[0162.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.738] SetEvent (hEvent=0xfc) returned 1
	[0162.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.739] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=196096) returned 1
	[0162.739] CloseHandle (hObject=0x140) returned 1
	[0162.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_u.vss")) returned 0x20
	[0162.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_u.vss")) returned 0x20
	[0162.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peeqp_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.740] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=129024) returned 1
	[0162.740] CloseHandle (hObject=0x140) returned 1
	[0162.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_m.vss")) returned 0x20
	[0162.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_m.vss")) returned 0x20
	[0162.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.741] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=125952) returned 1
	[0162.741] CloseHandle (hObject=0x140) returned 1
	[0162.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_u.vss")) returned 0x20
	[0162.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_u.vss")) returned 0x20
	[0162.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEHEAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peheat_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.874] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=337920) returned 1
	[0162.874] CloseHandle (hObject=0x1f4) returned 1
	[0162.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_m.vss")) returned 0x20
	[0162.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_m.vss")) returned 0x20
	[0162.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.874] SetEvent (hEvent=0xfc) returned 1
	[0162.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.875] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16896) returned 1
	[0162.875] CloseHandle (hObject=0x1f4) returned 1
	[0162.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls")) returned 0x20
	[0162.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls")) returned 0x20
	[0162.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.875] SetEvent (hEvent=0xfc) returned 1
	[0162.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.876] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=530944) returned 1
	[0162.876] CloseHandle (hObject=0x1f4) returned 1
	[0162.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_m.vst")) returned 0x20
	[0162.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_m.vst")) returned 0x20
	[0162.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.877] SetEvent (hEvent=0xfc) returned 1
	[0162.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.877] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=522240) returned 1
	[0162.877] CloseHandle (hObject=0x1f4) returned 1
	[0162.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_u.vst")) returned 0x20
	[0162.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_u.vst")) returned 0x20
	[0162.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRCIMP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prcimp_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.878] SetEvent (hEvent=0xfc) returned 1
	[0162.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.014] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19968) returned 1
	[0163.014] CloseHandle (hObject=0x168) returned 1
	[0163.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls")) returned 0x20
	[0163.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls")) returned 0x20
	[0163.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.015] SetEvent (hEvent=0xfc) returned 1
	[0163.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.015] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1005056) returned 1
	[0163.015] CloseHandle (hObject=0x168) returned 1
	[0163.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_u.vst")) returned 0x20
	[0163.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_u.vst")) returned 0x20
	[0163.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.016] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98816) returned 1
	[0163.016] CloseHandle (hObject=0x168) returned 1
	[0163.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_m.vss")) returned 0x20
	[0163.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_m.vss")) returned 0x20
	[0163.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.265] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97792) returned 1
	[0163.265] CloseHandle (hObject=0x1f4) returned 1
	[0163.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_u.vss")) returned 0x20
	[0163.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_u.vss")) returned 0x20
	[0163.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRKRD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prkrd_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.266] SetEvent (hEvent=0xfc) returned 1
	[0163.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.268] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=781824) returned 1
	[0163.268] CloseHandle (hObject=0x13c) returned 1
	[0163.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_m.vst")) returned 0x20
	[0163.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_m.vst")) returned 0x20
	[0163.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.268] SetEvent (hEvent=0xfc) returned 1
	[0163.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.269] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=773632) returned 1
	[0163.269] CloseHandle (hObject=0x13c) returned 1
	[0163.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_u.vst")) returned 0x20
	[0163.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_u.vst")) returned 0x20
	[0163.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.270] SetEvent (hEvent=0xfc) returned 1
	[0163.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.270] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=242176) returned 1
	[0163.270] CloseHandle (hObject=0x13c) returned 1
	[0163.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_m.vss")) returned 0x20
	[0163.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_m.vss")) returned 0x20
	[0163.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.271] SetEvent (hEvent=0xfc) returned 1
	[0163.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.467] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=235520) returned 1
	[0163.467] CloseHandle (hObject=0x13c) returned 1
	[0163.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_u.vss")) returned 0x20
	[0163.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_u.vss")) returned 0x20
	[0163.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcall_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.468] SetEvent (hEvent=0xfc) returned 1
	[0163.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.468] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=228864) returned 1
	[0163.468] CloseHandle (hObject=0x13c) returned 1
	[0163.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_u.vss")) returned 0x20
	[0163.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_u.vss")) returned 0x20
	[0163.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.469] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=90112) returned 1
	[0163.469] CloseHandle (hObject=0x13c) returned 1
	[0163.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vss")) returned 0x20
	[0163.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vss")) returned 0x20
	[0163.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.471] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23552) returned 1
	[0163.471] CloseHandle (hObject=0x13c) returned 1
	[0163.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vst")) returned 0x20
	[0163.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vst")) returned 0x20
	[0163.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.472] SetEvent (hEvent=0xfc) returned 1
	[0163.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.472] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=85504) returned 1
	[0163.472] CloseHandle (hObject=0x13c) returned 1
	[0163.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vss")) returned 0x20
	[0163.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vss")) returned 0x20
	[0163.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.473] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23552) returned 1
	[0163.473] CloseHandle (hObject=0x13c) returned 1
	[0163.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vst")) returned 0x20
	[0163.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vst")) returned 0x20
	[0163.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdl_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.474] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49664) returned 1
	[0163.474] CloseHandle (hObject=0x13c) returned 1
	[0163.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_m.vst")) returned 0x20
	[0163.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_m.vst")) returned 0x20
	[0163.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.475] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49664) returned 1
	[0163.475] CloseHandle (hObject=0x13c) returned 1
	[0163.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_u.vst")) returned 0x20
	[0163.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_u.vst")) returned 0x20
	[0163.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SECACC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\secacc_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.476] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=505344) returned 1
	[0163.476] CloseHandle (hObject=0x13c) returned 1
	[0163.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_m.vss")) returned 0x20
	[0163.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_m.vss")) returned 0x20
	[0163.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.477] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=502272) returned 1
	[0163.477] CloseHandle (hObject=0x13c) returned 1
	[0163.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_u.vss")) returned 0x20
	[0163.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_u.vss")) returned 0x20
	[0163.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SERVER_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\server_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.480] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=270336) returned 1
	[0163.480] CloseHandle (hObject=0x13c) returned 1
	[0163.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_m.vss")) returned 0x20
	[0163.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_m.vss")) returned 0x20
	[0163.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.483] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=272384) returned 1
	[0163.483] CloseHandle (hObject=0x1f4) returned 1
	[0163.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_u.vss")) returned 0x20
	[0163.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_u.vss")) returned 0x20
	[0163.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPMCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpmch_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.485] SetEvent (hEvent=0xfc) returned 1
	[0163.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.485] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=212992) returned 1
	[0163.485] CloseHandle (hObject=0x1f4) returned 1
	[0163.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_m.vss")) returned 0x20
	[0163.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_m.vss")) returned 0x20
	[0163.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.486] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=196608) returned 1
	[0163.486] CloseHandle (hObject=0x1f4) returned 1
	[0163.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_u.vss")) returned 0x20
	[0163.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_u.vss")) returned 0x20
	[0163.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPREC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shprec_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.487] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=364032) returned 1
	[0163.487] CloseHandle (hObject=0x1f4) returned 1
	[0163.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_m.vss")) returned 0x20
	[0163.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_m.vss")) returned 0x20
	[0163.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.733] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=366080) returned 1
	[0163.733] CloseHandle (hObject=0x170) returned 1
	[0163.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_u.vss")) returned 0x20
	[0163.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_u.vss")) returned 0x20
	[0163.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SHPSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\shpstr_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.734] SetEvent (hEvent=0xfc) returned 1
	[0163.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.735] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=184320) returned 1
	[0163.735] CloseHandle (hObject=0x170) returned 1
	[0163.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_u.vss")) returned 0x20
	[0163.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_u.vss")) returned 0x20
	[0163.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.738] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=198656) returned 1
	[0163.738] CloseHandle (hObject=0x170) returned 1
	[0163.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vss")) returned 0x20
	[0163.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vss")) returned 0x20
	[0163.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.739] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23040) returned 1
	[0163.739] CloseHandle (hObject=0x170) returned 1
	[0163.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vst")) returned 0x20
	[0163.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vst")) returned 0x20
	[0163.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.740] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=185344) returned 1
	[0163.740] CloseHandle (hObject=0x170) returned 1
	[0163.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vss")) returned 0x20
	[0163.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vss")) returned 0x20
	[0163.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.741] SetEvent (hEvent=0xfc) returned 1
	[0163.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.742] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22528) returned 1
	[0163.742] CloseHandle (hObject=0x170) returned 1
	[0163.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vst")) returned 0x20
	[0163.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vst")) returned 0x20
	[0163.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TQM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\tqm_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.743] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=279040) returned 1
	[0163.743] CloseHandle (hObject=0x170) returned 1
	[0163.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_m.vss")) returned 0x20
	[0163.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_m.vss")) returned 0x20
	[0163.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.744] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=160256) returned 1
	[0163.744] CloseHandle (hObject=0x170) returned 1
	[0163.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_u.vss")) returned 0x20
	[0163.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_u.vss")) returned 0x20
	[0163.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TRANSP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\transp_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.745] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=76288) returned 1
	[0163.745] CloseHandle (hObject=0x170) returned 1
	[0163.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_m.vss")) returned 0x20
	[0163.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_m.vss")) returned 0x20
	[0163.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.746] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75264) returned 1
	[0163.746] CloseHandle (hObject=0x170) returned 1
	[0163.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_u.vss")) returned 0x20
	[0163.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_u.vss")) returned 0x20
	[0163.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLACT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlact_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.747] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=73728) returned 1
	[0163.747] CloseHandle (hObject=0x170) returned 1
	[0163.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_m.vss")) returned 0x20
	[0163.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_m.vss")) returned 0x20
	[0163.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.751] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=73216) returned 1
	[0163.751] CloseHandle (hObject=0x1f4) returned 1
	[0163.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_u.vss")) returned 0x20
	[0163.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_u.vss")) returned 0x20
	[0163.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcol_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.751] SetEvent (hEvent=0xfc) returned 1
	[0163.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.752] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51712) returned 1
	[0163.752] CloseHandle (hObject=0x1f4) returned 1
	[0163.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_m.vss")) returned 0x20
	[0163.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_m.vss")) returned 0x20
	[0163.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.753] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51200) returned 1
	[0163.753] CloseHandle (hObject=0x1f4) returned 1
	[0163.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_u.vss")) returned 0x20
	[0163.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_u.vss")) returned 0x20
	[0163.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlcom_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.754] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=83456) returned 1
	[0163.754] CloseHandle (hObject=0x1f4) returned 1
	[0163.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_m.vss")) returned 0x20
	[0163.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_m.vss")) returned 0x20
	[0163.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.757] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=82944) returned 1
	[0163.757] CloseHandle (hObject=0x1f4) returned 1
	[0163.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_u.vss")) returned 0x20
	[0163.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_u.vss")) returned 0x20
	[0163.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldep_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.758] SetEvent (hEvent=0xfc) returned 1
	[0163.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.758] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52224) returned 1
	[0163.758] CloseHandle (hObject=0x1f4) returned 1
	[0163.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd")) returned 0x20
	[0163.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd")) returned 0x20
	[0163.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_m.vsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.759] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=55808) returned 1
	[0163.759] CloseHandle (hObject=0x1f4) returned 1
	[0163.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd")) returned 0x20
	[0163.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd")) returned 0x20
	[0163.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umldg_u.vsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.761] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0163.761] CloseHandle (hObject=0x1f4) returned 1
	[0163.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_m.vst")) returned 0x20
	[0163.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_m.vst")) returned 0x20
	[0163.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.904] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75264) returned 1
	[0163.904] CloseHandle (hObject=0x168) returned 1
	[0163.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_u.vst")) returned 0x20
	[0163.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_u.vst")) returned 0x20
	[0163.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLMOD_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlmod_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.905] SetEvent (hEvent=0xfc) returned 1
	[0163.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.906] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40448) returned 1
	[0163.906] CloseHandle (hObject=0x168) returned 1
	[0163.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vst")) returned 0x20
	[0163.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vst")) returned 0x20
	[0163.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.906] SetEvent (hEvent=0xfc) returned 1
	[0163.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.009] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=74752) returned 1
	[0164.009] CloseHandle (hObject=0x168) returned 1
	[0164.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vss")) returned 0x20
	[0164.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vss")) returned 0x20
	[0164.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.009] SetEvent (hEvent=0xfc) returned 1
	[0164.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.010] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=159232) returned 1
	[0164.010] CloseHandle (hObject=0x168) returned 1
	[0164.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_u.vss")) returned 0x20
	[0164.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_u.vss")) returned 0x20
	[0164.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.011] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2193920) returned 1
	[0164.011] CloseHandle (hObject=0x168) returned 1
	[0164.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_m.vss")) returned 0x20
	[0164.011] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_m.vss"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.011] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_m.vss")) returned 0
	[0164.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.012] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2186752) returned 1
	[0164.012] CloseHandle (hObject=0x168) returned 1
	[0164.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_u.vss")) returned 0x20
	[0164.012] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_u.vss"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.012] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdep_u.vss")) returned 0
	[0164.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.014] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40448) returned 1
	[0164.014] CloseHandle (hObject=0x168) returned 1
	[0164.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_m.vst")) returned 0x20
	[0164.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_m.vst")) returned 0x20
	[0164.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.014] SetEvent (hEvent=0xfc) returned 1
	[0164.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.015] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39936) returned 1
	[0164.015] CloseHandle (hObject=0x168) returned 1
	[0164.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_u.vst")) returned 0x20
	[0164.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_u.vst")) returned 0x20
	[0164.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDGM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdgm_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.016] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=96768) returned 1
	[0164.016] CloseHandle (hObject=0x168) returned 1
	[0164.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_m.vss")) returned 0x20
	[0164.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_m.vss")) returned 0x20
	[0164.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.017] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=95232) returned 1
	[0164.017] CloseHandle (hObject=0x168) returned 1
	[0164.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_u.vss")) returned 0x20
	[0164.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_u.vss")) returned 0x20
	[0164.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFDLGS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfdlgs_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.018] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=762880) returned 1
	[0164.018] CloseHandle (hObject=0x168) returned 1
	[0164.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_m.vss")) returned 0x20
	[0164.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_m.vss")) returned 0x20
	[0164.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.019] SetEvent (hEvent=0xfc) returned 1
	[0164.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.019] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=759808) returned 1
	[0164.019] CloseHandle (hObject=0x168) returned 1
	[0164.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_u.vss")) returned 0x20
	[0164.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_u.vss")) returned 0x20
	[0164.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFOBJ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfobj_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.020] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=686592) returned 1
	[0164.020] CloseHandle (hObject=0x168) returned 1
	[0164.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_m.vss")) returned 0x20
	[0164.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_m.vss")) returned 0x20
	[0164.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.021] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=686080) returned 1
	[0164.021] CloseHandle (hObject=0x168) returned 1
	[0164.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_u.vss")) returned 0x20
	[0164.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_u.vss")) returned 0x20
	[0164.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFSTEP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfstep_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.023] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=95744) returned 1
	[0164.023] CloseHandle (hObject=0x168) returned 1
	[0164.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_m.vss")) returned 0x20
	[0164.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_m.vss")) returned 0x20
	[0164.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.023] SetEvent (hEvent=0xfc) returned 1
	[0164.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.024] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=94208) returned 1
	[0164.024] CloseHandle (hObject=0x168) returned 1
	[0164.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_u.vss")) returned 0x20
	[0164.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_u.vss")) returned 0x20
	[0164.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFTLBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wftlbr_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.025] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=142336) returned 1
	[0164.025] CloseHandle (hObject=0x168) returned 1
	[0164.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_m.vss")) returned 0x20
	[0164.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_m.vss")) returned 0x20
	[0164.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.026] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=140800) returned 1
	[0164.026] CloseHandle (hObject=0x168) returned 1
	[0164.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_u.vss")) returned 0x20
	[0164.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_u.vss")) returned 0x20
	[0164.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFWICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfwicn_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.027] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=665088) returned 1
	[0164.027] CloseHandle (hObject=0x168) returned 1
	[0164.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vss")) returned 0x20
	[0164.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vss")) returned 0x20
	[0164.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.028] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=236032) returned 1
	[0164.028] CloseHandle (hObject=0x168) returned 1
	[0164.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vst")) returned 0x20
	[0164.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vst")) returned 0x20
	[0164.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.150] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=636928) returned 1
	[0164.150] CloseHandle (hObject=0x168) returned 1
	[0164.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vss")) returned 0x20
	[0164.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vss")) returned 0x20
	[0164.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.151] SetEvent (hEvent=0xfc) returned 1
	[0164.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VVIEWDWG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vviewdwg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.247] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9261432) returned 1
	[0164.247] CloseHandle (hObject=0x13c) returned 1
	[0164.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VVIEWDWG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vviewdwg.dll")) returned 0x20
	[0164.249] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VVIEWDWG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vviewdwg.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VVIEWDWG.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vviewdwg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.249] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VVIEWDWG.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vviewdwg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VVIEWDWG.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vviewdwg.dll")) returned 0
	[0164.249] SetEvent (hEvent=0xfc) returned 1
	[0164.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VVIEWER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vviewer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.250] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5597032) returned 1
	[0164.250] CloseHandle (hObject=0x13c) returned 1
	[0164.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VVIEWER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vviewer.dll")) returned 0x20
	[0164.250] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VVIEWER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vviewer.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VVIEWER.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vviewer.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.250] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VVIEWER.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vviewer.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VVIEWER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vviewer.dll")) returned 0
	[0164.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WINPROJ.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.251] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20820320) returned 1
	[0164.251] CloseHandle (hObject=0x13c) returned 1
	[0164.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WINPROJ.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe")) returned 0x20
	[0164.251] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WINPROJ.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WINPROJ.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.251] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WINPROJ.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WINPROJ.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe")) returned 0
	[0164.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.252] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3474) returned 1
	[0164.253] CloseHandle (hObject=0x13c) returned 1
	[0164.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe.manifest")) returned 0x20
	[0164.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe.manifest")) returned 0x20
	[0164.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\winproj.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\winproj.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.253] SetEvent (hEvent=0xfc) returned 1
	[0164.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\winword.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.254] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1423192) returned 1
	[0164.254] CloseHandle (hObject=0x13c) returned 1
	[0164.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\winword.exe")) returned 0x20
	[0164.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\winword.exe")) returned 0x20
	[0164.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WINWORD.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\winword.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\winword.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnv.dll" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.255] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6810456) returned 1
	[0164.255] CloseHandle (hObject=0x13c) returned 1
	[0164.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnv.dll" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnv.dll")) returned 0x20
	[0164.255] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnv.dll" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnv.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnv.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.255] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnv.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnv.dll" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnv.dll")) returned 0
	[0164.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvpxy.cnv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.256] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30048) returned 1
	[0164.256] CloseHandle (hObject=0x13c) returned 1
	[0164.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvpxy.cnv")) returned 0x20
	[0164.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvpxy.cnv")) returned 0x20
	[0164.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvpxy.cnv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvpxy.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvr.dll" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.259] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=405344) returned 1
	[0164.259] CloseHandle (hObject=0x13c) returned 1
	[0164.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvr.dll" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvr.dll")) returned 0x20
	[0164.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvr.dll" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvr.dll")) returned 0x20
	[0164.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordcnvr.dll" (normalized: "c:\\program files\\microsoft office\\office14\\wordcnvr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordconv.exe" (normalized: "c:\\program files\\microsoft office\\office14\\wordconv.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.260] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24416) returned 1
	[0164.260] CloseHandle (hObject=0x13c) returned 1
	[0164.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordconv.exe" (normalized: "c:\\program files\\microsoft office\\office14\\wordconv.exe")) returned 0x20
	[0164.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordconv.exe" (normalized: "c:\\program files\\microsoft office\\office14\\wordconv.exe")) returned 0x20
	[0164.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordconv.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\wordconv.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Wordconv.exe" (normalized: "c:\\program files\\microsoft office\\office14\\wordconv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDICON.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\wordicon.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.261] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1858400) returned 1
	[0164.261] CloseHandle (hObject=0x13c) returned 1
	[0164.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDICON.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\wordicon.exe")) returned 0x20
	[0164.261] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDICON.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\wordicon.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDICON.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\wordicon.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.261] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDICON.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\wordicon.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDICON.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\wordicon.exe")) returned 0
	[0164.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.262] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=79676) returned 1
	[0164.262] CloseHandle (hObject=0x13c) returned 1
	[0164.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml")) returned 0x20
	[0164.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml")) returned 0x20
	[0164.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.263] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=79236) returned 1
	[0164.263] CloseHandle (hObject=0x13c) returned 1
	[0164.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml")) returned 0x20
	[0164.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml")) returned 0x20
	[0164.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORDIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\wordirmv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORKFLOW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\workflow.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.265] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=654200) returned 1
	[0164.265] CloseHandle (hObject=0x13c) returned 1
	[0164.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORKFLOW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\workflow.dll")) returned 0x20
	[0164.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORKFLOW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\workflow.dll")) returned 0x20
	[0164.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORKFLOW.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\workflow.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WORKFLOW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\workflow.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.265] SetEvent (hEvent=0xfc) returned 1
	[0164.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WWLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\wwlib.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.266] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25109848) returned 1
	[0164.266] CloseHandle (hObject=0x13c) returned 1
	[0164.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WWLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\wwlib.dll")) returned 0x20
	[0164.267] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WWLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\wwlib.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WWLIB.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\wwlib.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.267] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WWLIB.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\wwlib.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\WWLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\wwlib.dll")) returned 0
	[0164.267] SetEvent (hEvent=0xfc) returned 1
	[0164.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XFUNC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\xfunc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.267] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=826232) returned 1
	[0164.267] CloseHandle (hObject=0x13c) returned 1
	[0164.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XFUNC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\xfunc.dll")) returned 0x20
	[0164.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XFUNC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\xfunc.dll")) returned 0x20
	[0164.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XFUNC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\xfunc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XFUNC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\xfunc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XIMAGE3B.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ximage3b.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.268] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1174936) returned 1
	[0164.268] CloseHandle (hObject=0x13c) returned 1
	[0164.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XIMAGE3B.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ximage3b.dll")) returned 0x20
	[0164.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XIMAGE3B.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ximage3b.dll")) returned 0x20
	[0164.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XIMAGE3B.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ximage3b.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XIMAGE3B.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ximage3b.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLCALL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\xlcall32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.269] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10104) returned 1
	[0164.270] CloseHandle (hObject=0x13c) returned 1
	[0164.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLCALL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\xlcall32.dll")) returned 0x20
	[0164.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLCALL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\xlcall32.dll")) returned 0x20
	[0164.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLCALL32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\xlcall32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLCALL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\xlcall32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.270] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=79748) returned 1
	[0164.271] CloseHandle (hObject=0x13c) returned 1
	[0164.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml")) returned 0x20
	[0164.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml")) returned 0x20
	[0164.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLCPRTID.XML" (normalized: "c:\\program files\\microsoft office\\office14\\xlcprtid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLICONS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\xlicons.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.271] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1479520) returned 1
	[0164.272] CloseHandle (hObject=0x13c) returned 1
	[0164.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLICONS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\xlicons.exe")) returned 0x20
	[0164.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLICONS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\xlicons.exe")) returned 0x20
	[0164.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLICONS.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\xlicons.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XLICONS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\xlicons.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\xml2word.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.272] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10321) returned 1
	[0164.273] CloseHandle (hObject=0x13c) returned 1
	[0164.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\xml2word.xsl")) returned 0x20
	[0164.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\xml2word.xsl")) returned 0x20
	[0164.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\xml2word.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\xml2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\xocr3.psp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.274] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2105856) returned 1
	[0164.274] CloseHandle (hObject=0x13c) returned 1
	[0164.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\xocr3.psp")) returned 0x20
	[0164.274] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\xocr3.psp"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\xocr3.psp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.274] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\xocr3.psp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XOCR3.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\xocr3.psp")) returned 0
	[0164.274] SetEvent (hEvent=0xfc) returned 1
	[0164.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XPAGE3C.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\xpage3c.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.275] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=480144) returned 1
	[0164.275] CloseHandle (hObject=0x13c) returned 1
	[0164.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XPAGE3C.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\xpage3c.dll")) returned 0x20
	[0164.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XPAGE3C.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\xpage3c.dll")) returned 0x20
	[0164.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XPAGE3C.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\xpage3c.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\XPAGE3C.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\xpage3c.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.277] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5999) returned 1
	[0164.277] CloseHandle (hObject=0x13c) returned 1
	[0164.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif")) returned 0x20
	[0164.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif")) returned 0x20
	[0164.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.278] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=548) returned 1
	[0164.278] CloseHandle (hObject=0x13c) returned 1
	[0164.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm")) returned 0x20
	[0164.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm")) returned 0x20
	[0164.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\currency.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.279] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46) returned 1
	[0164.279] CloseHandle (hObject=0x13c) returned 1
	[0164.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif")) returned 0x20
	[0164.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif")) returned 0x20
	[0164.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.280] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=483) returned 1
	[0164.280] CloseHandle (hObject=0x13c) returned 1
	[0164.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm")) returned 0x20
	[0164.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm")) returned 0x20
	[0164.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\dadshirt.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.281] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3382) returned 1
	[0164.281] CloseHandle (hObject=0x13c) returned 1
	[0164.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif")) returned 0x20
	[0164.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif")) returned 0x20
	[0164.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.282] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=507) returned 1
	[0164.282] CloseHandle (hObject=0x13c) returned 1
	[0164.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm")) returned 0x20
	[0164.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm")) returned 0x20
	[0164.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\judgesch.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.283] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4039) returned 1
	[0164.283] CloseHandle (hObject=0x13c) returned 1
	[0164.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif")) returned 0x20
	[0164.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif")) returned 0x20
	[0164.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.284] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=513) returned 1
	[0164.284] CloseHandle (hObject=0x13c) returned 1
	[0164.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm")) returned 0x20
	[0164.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm")) returned 0x20
	[0164.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\jungle.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.285] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=493) returned 1
	[0164.285] CloseHandle (hObject=0x13c) returned 1
	[0164.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm")) returned 0x20
	[0164.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm")) returned 0x20
	[0164.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.286] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2950) returned 1
	[0164.286] CloseHandle (hObject=0x13c) returned 1
	[0164.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg")) returned 0x20
	[0164.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg")) returned 0x20
	[0164.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\notebook.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.287] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4610) returned 1
	[0164.287] CloseHandle (hObject=0x13c) returned 1
	[0164.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif")) returned 0x20
	[0164.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif")) returned 0x20
	[0164.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.288] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=469) returned 1
	[0164.288] CloseHandle (hObject=0x13c) returned 1
	[0164.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm")) returned 0x20
	[0164.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm")) returned 0x20
	[0164.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\offisupp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.450] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1115) returned 1
	[0164.450] CloseHandle (hObject=0x140) returned 1
	[0164.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif")) returned 0x20
	[0164.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif")) returned 0x20
	[0164.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.450] SetEvent (hEvent=0xfc) returned 1
	[0164.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.451] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=489) returned 1
	[0164.451] CloseHandle (hObject=0x140) returned 1
	[0164.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm")) returned 0x20
	[0164.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm")) returned 0x20
	[0164.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.454] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3981) returned 1
	[0164.454] CloseHandle (hObject=0x140) returned 1
	[0164.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg")) returned 0x20
	[0164.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg")) returned 0x20
	[0164.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pinelumb.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.455] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=509) returned 1
	[0164.455] CloseHandle (hObject=0x140) returned 1
	[0164.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm")) returned 0x20
	[0164.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm")) returned 0x20
	[0164.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.456] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6281) returned 1
	[0164.456] CloseHandle (hObject=0x140) returned 1
	[0164.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg")) returned 0x20
	[0164.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg")) returned 0x20
	[0164.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\seamarbl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.457] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2074) returned 1
	[0164.457] CloseHandle (hObject=0x140) returned 1
	[0164.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif")) returned 0x20
	[0164.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif")) returned 0x20
	[0164.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.458] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=474) returned 1
	[0164.458] CloseHandle (hObject=0x140) returned 1
	[0164.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm")) returned 0x20
	[0164.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm")) returned 0x20
	[0164.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\techtool.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.460] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1036366) returned 1
	[0164.460] CloseHandle (hObject=0x140) returned 1
	[0164.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt")) returned 0x20
	[0164.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt")) returned 0x20
	[0164.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Assets.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\assets.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.460] SetEvent (hEvent=0xfc) returned 1
	[0164.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.461] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1766397) returned 1
	[0164.461] CloseHandle (hObject=0x140) returned 1
	[0164.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt")) returned 0x20
	[0164.461] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.461] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Charitable Contributions.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\charitable contributions.accdt")) returned 0
	[0164.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.462] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=869804) returned 1
	[0164.462] CloseHandle (hObject=0x140) returned 1
	[0164.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt")) returned 0x20
	[0164.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt")) returned 0x20
	[0164.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\contacts.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.463] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4417) returned 1
	[0164.463] CloseHandle (hObject=0x140) returned 1
	[0164.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft")) returned 0x20
	[0164.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft")) returned 0x20
	[0164.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\address.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.464] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4364) returned 1
	[0164.464] CloseHandle (hObject=0x140) returned 1
	[0164.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft")) returned 0x20
	[0164.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft")) returned 0x20
	[0164.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\category.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.466] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4404) returned 1
	[0164.466] CloseHandle (hObject=0x140) returned 1
	[0164.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft")) returned 0x20
	[0164.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft")) returned 0x20
	[0164.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\name.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.466] SetEvent (hEvent=0xfc) returned 1
	[0164.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.467] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4361) returned 1
	[0164.467] CloseHandle (hObject=0x140) returned 1
	[0164.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft")) returned 0x20
	[0164.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft")) returned 0x20
	[0164.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\payment type.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.468] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4306) returned 1
	[0164.468] CloseHandle (hObject=0x140) returned 1
	[0164.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft")) returned 0x20
	[0164.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft")) returned 0x20
	[0164.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\phone.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.469] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4397) returned 1
	[0164.469] CloseHandle (hObject=0x140) returned 1
	[0164.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft")) returned 0x20
	[0164.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft")) returned 0x20
	[0164.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\priority.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.470] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4194) returned 1
	[0164.470] CloseHandle (hObject=0x140) returned 1
	[0164.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft")) returned 0x20
	[0164.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft")) returned 0x20
	[0164.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\start end dates.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.471] SetEvent (hEvent=0xfc) returned 1
	[0164.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.472] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4405) returned 1
	[0164.472] CloseHandle (hObject=0x140) returned 1
	[0164.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft")) returned 0x20
	[0164.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft")) returned 0x20
	[0164.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\status.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.475] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4343) returned 1
	[0164.475] CloseHandle (hObject=0x140) returned 1
	[0164.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft")) returned 0x20
	[0164.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft")) returned 0x20
	[0164.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\datatype\\tags.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.476] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=193199) returned 1
	[0164.476] CloseHandle (hObject=0x140) returned 1
	[0164.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt")) returned 0x20
	[0164.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt")) returned 0x20
	[0164.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Events.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\events.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.477] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=477451) returned 1
	[0164.477] CloseHandle (hObject=0x140) returned 1
	[0164.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt")) returned 0x20
	[0164.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt")) returned 0x20
	[0164.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Faculty.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\faculty.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.478] SetEvent (hEvent=0xfc) returned 1
	[0164.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.478] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=528200) returned 1
	[0164.478] CloseHandle (hObject=0x140) returned 1
	[0164.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt")) returned 0x20
	[0164.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt")) returned 0x20
	[0164.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\issues.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.479] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1107436) returned 1
	[0164.479] CloseHandle (hObject=0x140) returned 1
	[0164.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt")) returned 0x20
	[0164.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt")) returned 0x20
	[0164.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Marketing Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\marketing projects.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.480] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2054738) returned 1
	[0164.480] CloseHandle (hObject=0x140) returned 1
	[0164.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt")) returned 0x20
	[0164.481] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.481] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Northwind.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\northwind.accdt")) returned 0
	[0164.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.482] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24538) returned 1
	[0164.482] CloseHandle (hObject=0x140) returned 1
	[0164.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt")) returned 0x20
	[0164.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt")) returned 0x20
	[0164.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.483] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24581) returned 1
	[0164.483] CloseHandle (hObject=0x140) returned 1
	[0164.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt")) returned 0x20
	[0164.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt")) returned 0x20
	[0164.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\1 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.484] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25350) returned 1
	[0164.484] CloseHandle (hObject=0x140) returned 1
	[0164.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt")) returned 0x20
	[0164.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt")) returned 0x20
	[0164.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.638] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25550) returned 1
	[0164.638] CloseHandle (hObject=0x168) returned 1
	[0164.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt")) returned 0x20
	[0164.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt")) returned 0x20
	[0164.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\2 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.639] SetEvent (hEvent=0xfc) returned 1
	[0164.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.640] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312388) returned 1
	[0164.640] CloseHandle (hObject=0x168) returned 1
	[0164.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt")) returned 0x20
	[0164.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt")) returned 0x20
	[0164.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\contacts.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.641] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20749) returned 1
	[0164.641] CloseHandle (hObject=0x168) returned 1
	[0164.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt")) returned 0x20
	[0164.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt")) returned 0x20
	[0164.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\details.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.642] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21465) returned 1
	[0164.642] CloseHandle (hObject=0x168) returned 1
	[0164.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt")) returned 0x20
	[0164.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt")) returned 0x20
	[0164.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\dialog.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.643] SetEvent (hEvent=0xfc) returned 1
	[0164.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.643] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50784) returned 1
	[0164.643] CloseHandle (hObject=0x168) returned 1
	[0164.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt")) returned 0x20
	[0164.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt")) returned 0x20
	[0164.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\issues.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.644] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24690) returned 1
	[0164.644] CloseHandle (hObject=0x168) returned 1
	[0164.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt")) returned 0x20
	[0164.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt")) returned 0x20
	[0164.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\list.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.645] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20690) returned 1
	[0164.645] CloseHandle (hObject=0x168) returned 1
	[0164.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt")) returned 0x20
	[0164.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt")) returned 0x20
	[0164.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\media.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0164.855] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21605) returned 1
	[0164.855] CloseHandle (hObject=0x20c) returned 1
	[0164.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt")) returned 0x20
	[0164.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt")) returned 0x20
	[0164.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\msgbox.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.855] SetEvent (hEvent=0xfc) returned 1
	[0164.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0164.856] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=192754) returned 1
	[0164.856] CloseHandle (hObject=0x20c) returned 1
	[0164.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx")) returned 0x20
	[0164.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx")) returned 0x20
	[0164.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarymergeletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.857] SetEvent (hEvent=0xfc) returned 1
	[0164.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0164.857] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=214570) returned 1
	[0164.858] CloseHandle (hObject=0x20c) returned 1
	[0164.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx")) returned 0x20
	[0164.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx")) returned 0x20
	[0164.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecarynewsletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0164.859] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=227449) returned 1
	[0164.859] CloseHandle (hObject=0x20c) returned 1
	[0164.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx")) returned 0x20
	[0164.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx")) returned 0x20
	[0164.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0164.860] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18376) returned 1
	[0164.860] CloseHandle (hObject=0x20c) returned 1
	[0164.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx")) returned 0x20
	[0164.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx")) returned 0x20
	[0164.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\billingstatement.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0164.861] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6104037) returned 1
	[0164.861] CloseHandle (hObject=0x20c) returned 1
	[0164.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx")) returned 0x20
	[0164.861] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.861] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieletter.dotx")) returned 0
	[0164.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0164.862] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6103321) returned 1
	[0164.862] CloseHandle (hObject=0x20c) returned 1
	[0164.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx")) returned 0x20
	[0164.862] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.862] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktiemergeletter.dotx")) returned 0
	[0164.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0164.863] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9893043) returned 1
	[0164.863] CloseHandle (hObject=0x20c) returned 1
	[0164.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx")) returned 0x20
	[0164.863] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.863] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktienewsletter.dotx")) returned 0
	[0164.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0164.864] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6759587) returned 1
	[0164.864] CloseHandle (hObject=0x20c) returned 1
	[0164.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx")) returned 0x20
	[0164.864] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.864] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BlackTieResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blacktieresume.dotx")) returned 0
	[0164.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.867] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17234) returned 1
	[0164.867] CloseHandle (hObject=0x168) returned 1
	[0164.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx")) returned 0x20
	[0164.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx")) returned 0x20
	[0164.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\blog.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.867] SetEvent (hEvent=0xfc) returned 1
	[0164.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.868] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29350) returned 1
	[0164.868] CloseHandle (hObject=0x168) returned 1
	[0164.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx")) returned 0x20
	[0164.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx")) returned 0x20
	[0164.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\bloodpressuretracker.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.102] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1201176) returned 1
	[0165.102] CloseHandle (hObject=0x13c) returned 1
	[0165.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx")) returned 0x20
	[0165.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx")) returned 0x20
	[0165.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\classicphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.103] SetEvent (hEvent=0xfc) returned 1
	[0165.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceer35EN.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceer35en.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.104] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=148544) returned 1
	[0165.104] CloseHandle (hObject=0x13c) returned 1
	[0165.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceer35EN.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceer35en.dll")) returned 0x20
	[0165.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceer35EN.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceer35en.dll")) returned 0x20
	[0165.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceer35EN.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceer35en.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceer35EN.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceer35en.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.104] SetEvent (hEvent=0xfc) returned 1
	[0165.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceme35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceme35.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.107] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=88640) returned 1
	[0165.107] CloseHandle (hObject=0x13c) returned 1
	[0165.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceme35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceme35.dll")) returned 0x20
	[0165.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceme35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceme35.dll")) returned 0x20
	[0165.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceme35.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceme35.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceme35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceme35.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceoledb35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceoledb35.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.108] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=260672) returned 1
	[0165.108] CloseHandle (hObject=0x13c) returned 1
	[0165.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceoledb35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceoledb35.dll")) returned 0x20
	[0165.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceoledb35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceoledb35.dll")) returned 0x20
	[0165.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceoledb35.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceoledb35.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceoledb35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceoledb35.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceqp35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceqp35.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.109] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1134144) returned 1
	[0165.109] CloseHandle (hObject=0x13c) returned 1
	[0165.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceqp35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceqp35.dll")) returned 0x20
	[0165.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceqp35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceqp35.dll")) returned 0x20
	[0165.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceqp35.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceqp35.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceqp35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceqp35.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlcese35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlcese35.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.110] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=644672) returned 1
	[0165.110] CloseHandle (hObject=0x13c) returned 1
	[0165.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlcese35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlcese35.dll")) returned 0x20
	[0165.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlcese35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlcese35.dll")) returned 0x20
	[0165.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlcese35.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlcese35.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlcese35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlcese35.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.114] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=110551) returned 1
	[0165.114] CloseHandle (hObject=0x13c) returned 1
	[0165.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf")) returned 0x20
	[0165.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf")) returned 0x20
	[0165.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\FeedSync.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\feedsync.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.116] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=231280) returned 1
	[0165.116] CloseHandle (hObject=0x13c) returned 1
	[0165.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\FeedSync.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\feedsync.dll")) returned 0x20
	[0165.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\FeedSync.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\feedsync.dll")) returned 0x20
	[0165.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\FeedSync.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\feedsync.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\FeedSync.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\feedsync.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\Microsoft.Synchronization.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\microsoft.synchronization.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.117] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=210784) returned 1
	[0165.117] CloseHandle (hObject=0x13c) returned 1
	[0165.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\Microsoft.Synchronization.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\microsoft.synchronization.dll")) returned 0x20
	[0165.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\Microsoft.Synchronization.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\microsoft.synchronization.dll")) returned 0x20
	[0165.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\Microsoft.Synchronization.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\microsoft.synchronization.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\Microsoft.Synchronization.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\microsoft.synchronization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\Synchronization.rll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033\\synchronization.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.118] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12656) returned 1
	[0165.118] CloseHandle (hObject=0x13c) returned 1
	[0165.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\Synchronization.rll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033\\synchronization.rll")) returned 0x20
	[0165.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\Synchronization.rll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033\\synchronization.rll")) returned 0x20
	[0165.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\Synchronization.rll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033\\synchronization.rll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\Synchronization.rll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\resources\\1033\\synchronization.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\Synchronization.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\synchronization.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.119] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=449376) returned 1
	[0165.119] CloseHandle (hObject=0x13c) returned 1
	[0165.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\Synchronization.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\synchronization.dll")) returned 0x20
	[0165.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\Synchronization.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\synchronization.dll")) returned 0x20
	[0165.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\Synchronization.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\synchronization.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\Synchronization.dll" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\runtime\\x64\\synchronization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.121] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=115744) returned 1
	[0165.121] CloseHandle (hObject=0x13c) returned 1
	[0165.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.dll")) returned 0x20
	[0165.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.dll")) returned 0x20
	[0165.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.Server.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.server.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.122] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=115744) returned 1
	[0165.122] CloseHandle (hObject=0x13c) returned 1
	[0165.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.Server.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.server.dll")) returned 0x20
	[0165.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.Server.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.server.dll")) returned 0x20
	[0165.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.Server.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.server.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.Server.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.server.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.SqlServerCe.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.sqlserverce.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.123] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=95312) returned 1
	[0165.123] CloseHandle (hObject=0x13c) returned 1
	[0165.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.SqlServerCe.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.sqlserverce.dll")) returned 0x20
	[0165.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.SqlServerCe.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.sqlserverce.dll")) returned 0x20
	[0165.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.SqlServerCe.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.sqlserverce.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\Microsoft.Synchronization.Data.SqlServerCe.dll" (normalized: "c:\\program files\\microsoft synchronization services\\ado.net\\v1.0\\microsoft.synchronization.data.sqlserverce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\finland_biz.exe" (normalized: "c:\\program files\\microsoft synchronization services\\finland_biz.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.216] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0165.216] CloseHandle (hObject=0x13c) returned 1
	[0165.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\finland_biz.exe" (normalized: "c:\\program files\\microsoft synchronization services\\finland_biz.exe")) returned 0x20
	[0165.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\finland_biz.exe" (normalized: "c:\\program files\\microsoft synchronization services\\finland_biz.exe")) returned 0x20
	[0165.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\finland_biz.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft synchronization services\\finland_biz.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\finland_biz.exe" (normalized: "c:\\program files\\microsoft synchronization services\\finland_biz.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.216] SetEvent (hEvent=0xfc) returned 1
	[0165.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.218] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4726) returned 1
	[0165.218] CloseHandle (hObject=0x13c) returned 1
	[0165.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets")) returned 0x20
	[0165.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets")) returned 0x20
	[0165.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.218] SetEvent (hEvent=0xfc) returned 1
	[0165.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.220] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5182) returned 1
	[0165.220] CloseHandle (hObject=0x13c) returned 1
	[0165.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets")) returned 0x20
	[0165.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets")) returned 0x20
	[0165.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.220] SetEvent (hEvent=0xfc) returned 1
	[0165.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.221] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7169) returned 1
	[0165.221] CloseHandle (hObject=0x13c) returned 1
	[0165.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets")) returned 0x20
	[0165.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets")) returned 0x20
	[0165.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.222] SetEvent (hEvent=0xfc) returned 1
	[0165.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.223] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8680) returned 1
	[0165.223] CloseHandle (hObject=0x13c) returned 1
	[0165.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets")) returned 0x20
	[0165.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets")) returned 0x20
	[0165.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.224] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=598016) returned 1
	[0165.224] CloseHandle (hObject=0x13c) returned 1
	[0165.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll")) returned 0x20
	[0165.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll")) returned 0x20
	[0165.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.226] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3997696) returned 1
	[0165.226] CloseHandle (hObject=0x13c) returned 1
	[0165.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll")) returned 0x20
	[0165.226] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0165.226] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll")) returned 0
	[0165.226] SetEvent (hEvent=0xfc) returned 1
	[0165.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.227] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=196608) returned 1
	[0165.227] CloseHandle (hObject=0x13c) returned 1
	[0165.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll")) returned 0x20
	[0165.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll")) returned 0x20
	[0165.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.228] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=139264) returned 1
	[0165.228] CloseHandle (hObject=0x13c) returned 1
	[0165.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll")) returned 0x20
	[0165.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll")) returned 0x20
	[0165.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.229] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4636672) returned 1
	[0165.229] CloseHandle (hObject=0x13c) returned 1
	[0165.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll")) returned 0x20
	[0165.229] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0165.229] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll")) returned 0
	[0165.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.230] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=380928) returned 1
	[0165.230] CloseHandle (hObject=0x13c) returned 1
	[0165.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll")) returned 0x20
	[0165.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll")) returned 0x20
	[0165.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.231] SetEvent (hEvent=0xfc) returned 1
	[0165.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.231] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=163840) returned 1
	[0165.231] CloseHandle (hObject=0x13c) returned 1
	[0165.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll")) returned 0x20
	[0165.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll")) returned 0x20
	[0165.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.232] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=532480) returned 1
	[0165.232] CloseHandle (hObject=0x13c) returned 1
	[0165.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll")) returned 0x20
	[0165.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll")) returned 0x20
	[0165.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.234] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7124) returned 1
	[0165.234] CloseHandle (hObject=0x13c) returned 1
	[0165.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml")) returned 0x20
	[0165.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml")) returned 0x20
	[0165.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.234] SetEvent (hEvent=0xfc) returned 1
	[0165.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.237] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=401408) returned 1
	[0165.237] CloseHandle (hObject=0x13c) returned 1
	[0165.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll")) returned 0x20
	[0165.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll")) returned 0x20
	[0165.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.239] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=122880) returned 1
	[0165.239] CloseHandle (hObject=0x13c) returned 1
	[0165.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll")) returned 0x20
	[0165.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll")) returned 0x20
	[0165.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.239] SetEvent (hEvent=0xfc) returned 1
	[0165.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.240] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=131072) returned 1
	[0165.240] CloseHandle (hObject=0x13c) returned 1
	[0165.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll")) returned 0x20
	[0165.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll")) returned 0x20
	[0165.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.241] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=358912) returned 1
	[0165.241] CloseHandle (hObject=0x13c) returned 1
	[0165.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll")) returned 0x20
	[0165.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll")) returned 0x20
	[0165.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.242] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=847872) returned 1
	[0165.242] CloseHandle (hObject=0x13c) returned 1
	[0165.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll")) returned 0x20
	[0165.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll")) returned 0x20
	[0165.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.243] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5328896) returned 1
	[0165.243] CloseHandle (hObject=0x13c) returned 1
	[0165.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll")) returned 0x20
	[0165.243] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0165.243] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll")) returned 0
	[0165.244] SetEvent (hEvent=0xfc) returned 1
	[0165.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.244] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=688128) returned 1
	[0165.244] CloseHandle (hObject=0x13c) returned 1
	[0165.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll")) returned 0x20
	[0165.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll")) returned 0x20
	[0165.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.246] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1060864) returned 1
	[0165.246] CloseHandle (hObject=0x13c) returned 1
	[0165.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll")) returned 0x20
	[0165.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll")) returned 0x20
	[0165.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.246] SetEvent (hEvent=0xfc) returned 1
	[0165.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.247] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1519616) returned 1
	[0165.247] CloseHandle (hObject=0x13c) returned 1
	[0165.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll")) returned 0x20
	[0165.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll")) returned 0x20
	[0165.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.248] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=454656) returned 1
	[0165.248] CloseHandle (hObject=0x13c) returned 1
	[0165.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll")) returned 0x20
	[0165.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll")) returned 0x20
	[0165.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.249] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=172032) returned 1
	[0165.249] CloseHandle (hObject=0x13c) returned 1
	[0165.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll")) returned 0x20
	[0165.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll")) returned 0x20
	[0165.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.353] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=380928) returned 1
	[0165.353] CloseHandle (hObject=0x13c) returned 1
	[0165.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll")) returned 0x20
	[0165.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll")) returned 0x20
	[0165.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.353] SetEvent (hEvent=0xfc) returned 1
	[0165.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.354] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98304) returned 1
	[0165.354] CloseHandle (hObject=0x13c) returned 1
	[0165.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll")) returned 0x20
	[0165.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll")) returned 0x20
	[0165.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.355] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1114112) returned 1
	[0165.355] CloseHandle (hObject=0x13c) returned 1
	[0165.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll")) returned 0x20
	[0165.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll")) returned 0x20
	[0165.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.358] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=94208) returned 1
	[0165.358] CloseHandle (hObject=0x13c) returned 1
	[0165.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll")) returned 0x20
	[0165.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll")) returned 0x20
	[0165.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.358] SetEvent (hEvent=0xfc) returned 1
	[0165.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.359] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2578) returned 1
	[0165.359] CloseHandle (hObject=0x13c) returned 1
	[0165.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml")) returned 0x20
	[0165.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml")) returned 0x20
	[0165.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.361] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=106496) returned 1
	[0165.361] CloseHandle (hObject=0x13c) returned 1
	[0165.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll")) returned 0x20
	[0165.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll")) returned 0x20
	[0165.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.363] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=638976) returned 1
	[0165.363] CloseHandle (hObject=0x13c) returned 1
	[0165.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll")) returned 0x20
	[0165.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll")) returned 0x20
	[0165.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.363] SetEvent (hEvent=0xfc) returned 1
	[0165.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.364] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36864) returned 1
	[0165.364] CloseHandle (hObject=0x13c) returned 1
	[0165.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll")) returned 0x20
	[0165.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll")) returned 0x20
	[0165.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.365] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81920) returned 1
	[0165.365] CloseHandle (hObject=0x13c) returned 1
	[0165.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll")) returned 0x20
	[0165.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll")) returned 0x20
	[0165.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.367] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43008) returned 1
	[0165.367] CloseHandle (hObject=0x13c) returned 1
	[0165.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll")) returned 0x20
	[0165.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll")) returned 0x20
	[0165.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.369] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24259) returned 1
	[0165.369] CloseHandle (hObject=0x13c) returned 1
	[0165.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml")) returned 0x20
	[0165.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml")) returned 0x20
	[0165.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.369] SetEvent (hEvent=0xfc) returned 1
	[0165.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.372] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45056) returned 1
	[0165.372] CloseHandle (hObject=0x1a0) returned 1
	[0165.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll")) returned 0x20
	[0165.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll")) returned 0x20
	[0165.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.372] SetEvent (hEvent=0xfc) returned 1
	[0165.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.373] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=163840) returned 1
	[0165.373] CloseHandle (hObject=0x1a0) returned 1
	[0165.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll")) returned 0x20
	[0165.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll")) returned 0x20
	[0165.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.374] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57344) returned 1
	[0165.374] CloseHandle (hObject=0x1a0) returned 1
	[0165.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll")) returned 0x20
	[0165.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll")) returned 0x20
	[0165.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.376] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=667648) returned 1
	[0165.376] CloseHandle (hObject=0x20c) returned 1
	[0165.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll")) returned 0x20
	[0165.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll")) returned 0x20
	[0165.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.377] SetEvent (hEvent=0xfc) returned 1
	[0165.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.377] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53248) returned 1
	[0165.377] CloseHandle (hObject=0x20c) returned 1
	[0165.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll")) returned 0x20
	[0165.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll")) returned 0x20
	[0165.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.378] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=229376) returned 1
	[0165.378] CloseHandle (hObject=0x20c) returned 1
	[0165.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll")) returned 0x20
	[0165.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll")) returned 0x20
	[0165.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.379] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2879488) returned 1
	[0165.379] CloseHandle (hObject=0x20c) returned 1
	[0165.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll")) returned 0x20
	[0165.380] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0165.380] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll")) returned 0
	[0165.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.382] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=684032) returned 1
	[0165.382] CloseHandle (hObject=0x20c) returned 1
	[0165.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll")) returned 0x20
	[0165.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll")) returned 0x20
	[0165.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.382] SetEvent (hEvent=0xfc) returned 1
	[0165.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.383] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=462848) returned 1
	[0165.383] CloseHandle (hObject=0x20c) returned 1
	[0165.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll")) returned 0x20
	[0165.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll")) returned 0x20
	[0165.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.384] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=163840) returned 1
	[0165.384] CloseHandle (hObject=0x20c) returned 1
	[0165.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll")) returned 0x20
	[0165.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll")) returned 0x20
	[0165.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.385] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=692224) returned 1
	[0165.385] CloseHandle (hObject=0x20c) returned 1
	[0165.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll")) returned 0x20
	[0165.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll")) returned 0x20
	[0165.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.388] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=290816) returned 1
	[0165.388] CloseHandle (hObject=0x13c) returned 1
	[0165.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll")) returned 0x20
	[0165.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll")) returned 0x20
	[0165.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.388] SetEvent (hEvent=0xfc) returned 1
	[0165.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.389] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=143360) returned 1
	[0165.389] CloseHandle (hObject=0x13c) returned 1
	[0165.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll")) returned 0x20
	[0165.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll")) returned 0x20
	[0165.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.391] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=237568) returned 1
	[0165.391] CloseHandle (hObject=0x13c) returned 1
	[0165.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll")) returned 0x20
	[0165.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll")) returned 0x20
	[0165.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.392] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=491520) returned 1
	[0165.392] CloseHandle (hObject=0x13c) returned 1
	[0165.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll")) returned 0x20
	[0165.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll")) returned 0x20
	[0165.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.493] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77824) returned 1
	[0165.493] CloseHandle (hObject=0x13c) returned 1
	[0165.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll")) returned 0x20
	[0165.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll")) returned 0x20
	[0165.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.494] SetEvent (hEvent=0xfc) returned 1
	[0165.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.494] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=229376) returned 1
	[0165.494] CloseHandle (hObject=0x13c) returned 1
	[0165.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll")) returned 0x20
	[0165.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll")) returned 0x20
	[0165.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.497] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=131072) returned 1
	[0165.497] CloseHandle (hObject=0x13c) returned 1
	[0165.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll")) returned 0x20
	[0165.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll")) returned 0x20
	[0165.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0165.689] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=139264) returned 1
	[0165.689] CloseHandle (hObject=0x208) returned 1
	[0165.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll")) returned 0x20
	[0165.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll")) returned 0x20
	[0165.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.690] SetEvent (hEvent=0xfc) returned 1
	[0165.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\JNTFiltr.dll" (normalized: "c:\\program files\\windows journal\\jntfiltr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0165.850] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1393664) returned 1
	[0165.850] CloseHandle (hObject=0x208) returned 1
	[0165.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\JNTFiltr.dll" (normalized: "c:\\program files\\windows journal\\jntfiltr.dll")) returned 0x20
	[0165.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\JNTFiltr.dll" (normalized: "c:\\program files\\windows journal\\jntfiltr.dll")) returned 0x20
	[0165.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\JNTFiltr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\jntfiltr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\JNTFiltr.dll" (normalized: "c:\\program files\\windows journal\\jntfiltr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.851] SetEvent (hEvent=0xfc) returned 1
	[0165.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files\\windows mail\\oeimport.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.983] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=93184) returned 1
	[0165.983] CloseHandle (hObject=0x1a0) returned 1
	[0165.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files\\windows mail\\oeimport.dll")) returned 0x20
	[0165.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files\\windows mail\\oeimport.dll")) returned 0x20
	[0165.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\oeimport.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\oeimport.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files\\windows mail\\oeimport.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\mediareceiverregistrar.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.151] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2574) returned 1
	[0166.151] CloseHandle (hObject=0x1a0) returned 1
	[0166.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\mediareceiverregistrar.xml")) returned 0x20
	[0166.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\mediareceiverregistrar.xml")) returned 0x20
	[0166.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\mediareceiverregistrar.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\mediareceiverregistrar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.152] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6968) returned 1
	[0166.152] CloseHandle (hObject=0x1a0) returned 1
	[0166.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.bmp")) returned 0x20
	[0166.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.bmp")) returned 0x20
	[0166.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.153] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11397) returned 1
	[0166.153] CloseHandle (hObject=0x1a0) returned 1
	[0166.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.jpg")) returned 0x20
	[0166.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.jpg")) returned 0x20
	[0166.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.154] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5426) returned 1
	[0166.154] CloseHandle (hObject=0x1a0) returned 1
	[0166.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.png")) returned 0x20
	[0166.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.png")) returned 0x20
	[0166.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files\\windows media player\\setup_wm.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.155] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2078208) returned 1
	[0166.155] CloseHandle (hObject=0x1a0) returned 1
	[0166.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files\\windows media player\\setup_wm.exe")) returned 0x20
	[0166.155] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files\\windows media player\\setup_wm.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\setup_wm.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\setup_wm.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0166.156] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\setup_wm.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\setup_wm.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files\\windows media player\\setup_wm.exe")) returned 0
	[0166.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\Revert.wmz" (normalized: "c:\\program files\\windows media player\\skins\\revert.wmz"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.156] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67209) returned 1
	[0166.156] CloseHandle (hObject=0x1a0) returned 1
	[0166.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\Revert.wmz" (normalized: "c:\\program files\\windows media player\\skins\\revert.wmz")) returned 0x20
	[0166.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\Revert.wmz" (normalized: "c:\\program files\\windows media player\\skins\\revert.wmz")) returned 0x20
	[0166.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\Revert.wmz.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\skins\\revert.wmz.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\Revert.wmz" (normalized: "c:\\program files\\windows media player\\skins\\revert.wmz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files\\windows media player\\wmlaunch.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.157] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=263168) returned 1
	[0166.157] CloseHandle (hObject=0x1a0) returned 1
	[0166.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files\\windows media player\\wmlaunch.exe")) returned 0x20
	[0166.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files\\windows media player\\wmlaunch.exe")) returned 0x20
	[0166.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmlaunch.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmlaunch.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files\\windows media player\\wmlaunch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files\\windows media player\\wmpconfig.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.158] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=102400) returned 1
	[0166.158] CloseHandle (hObject=0x1a0) returned 1
	[0166.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files\\windows media player\\wmpconfig.exe")) returned 0x20
	[0166.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files\\windows media player\\wmpconfig.exe")) returned 0x20
	[0166.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpconfig.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmpconfig.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files\\windows media player\\wmpconfig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPDMC.exe" (normalized: "c:\\program files\\windows media player\\wmpdmc.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.159] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1212928) returned 1
	[0166.159] CloseHandle (hObject=0x1a0) returned 1
	[0166.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPDMC.exe" (normalized: "c:\\program files\\windows media player\\wmpdmc.exe")) returned 0x20
	[0166.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPDMC.exe" (normalized: "c:\\program files\\windows media player\\wmpdmc.exe")) returned 0x20
	[0166.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPDMC.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmpdmc.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPDMC.exe" (normalized: "c:\\program files\\windows media player\\wmpdmc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPDMCCore.dll" (normalized: "c:\\program files\\windows media player\\wmpdmccore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.160] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=426496) returned 1
	[0166.160] CloseHandle (hObject=0x1a0) returned 1
	[0166.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPDMCCore.dll" (normalized: "c:\\program files\\windows media player\\wmpdmccore.dll")) returned 0x20
	[0166.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPDMCCore.dll" (normalized: "c:\\program files\\windows media player\\wmpdmccore.dll")) returned 0x20
	[0166.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPDMCCore.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmpdmccore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPDMCCore.dll" (normalized: "c:\\program files\\windows media player\\wmpdmccore.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpenc.exe" (normalized: "c:\\program files\\windows media player\\wmpenc.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.161] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27648) returned 1
	[0166.161] CloseHandle (hObject=0x1a0) returned 1
	[0166.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpenc.exe" (normalized: "c:\\program files\\windows media player\\wmpenc.exe")) returned 0x20
	[0166.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpenc.exe" (normalized: "c:\\program files\\windows media player\\wmpenc.exe")) returned 0x20
	[0166.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpenc.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmpenc.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpenc.exe" (normalized: "c:\\program files\\windows media player\\wmpenc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files\\windows media player\\wmplayer.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.162] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=167424) returned 1
	[0166.162] CloseHandle (hObject=0x1a0) returned 1
	[0166.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files\\windows media player\\wmplayer.exe")) returned 0x20
	[0166.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files\\windows media player\\wmplayer.exe")) returned 0x20
	[0166.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmplayer.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmplayer.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files\\windows media player\\wmplayer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files\\windows media player\\wmpmediasharing.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.163] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=163840) returned 1
	[0166.163] CloseHandle (hObject=0x1a0) returned 1
	[0166.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files\\windows media player\\wmpmediasharing.dll")) returned 0x20
	[0166.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files\\windows media player\\wmpmediasharing.dll")) returned 0x20
	[0166.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPMediaSharing.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmpmediasharing.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files\\windows media player\\wmpmediasharing.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnetwk.exe" (normalized: "c:\\program files\\windows media player\\wmpnetwk.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.164] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1525248) returned 1
	[0166.164] CloseHandle (hObject=0x1a0) returned 1
	[0166.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnetwk.exe" (normalized: "c:\\program files\\windows media player\\wmpnetwk.exe")) returned 0x20
	[0166.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnetwk.exe" (normalized: "c:\\program files\\windows media player\\wmpnetwk.exe")) returned 0x20
	[0166.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnetwk.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmpnetwk.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnetwk.exe" (normalized: "c:\\program files\\windows media player\\wmpnetwk.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnscfg.exe" (normalized: "c:\\program files\\windows media player\\wmpnscfg.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.165] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=70656) returned 1
	[0166.165] CloseHandle (hObject=0x1a0) returned 1
	[0166.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnscfg.exe" (normalized: "c:\\program files\\windows media player\\wmpnscfg.exe")) returned 0x20
	[0166.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnscfg.exe" (normalized: "c:\\program files\\windows media player\\wmpnscfg.exe")) returned 0x20
	[0166.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnscfg.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmpnscfg.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnscfg.exe" (normalized: "c:\\program files\\windows media player\\wmpnscfg.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files\\windows media player\\wmpnssci.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.166] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=553472) returned 1
	[0166.166] CloseHandle (hObject=0x1a0) returned 1
	[0166.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files\\windows media player\\wmpnssci.dll")) returned 0x20
	[0166.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files\\windows media player\\wmpnssci.dll")) returned 0x20
	[0166.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnssci.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmpnssci.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files\\windows media player\\wmpnssci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files\\windows media player\\wmpnssui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.167] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34816) returned 1
	[0166.167] CloseHandle (hObject=0x1a0) returned 1
	[0166.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files\\windows media player\\wmpnssui.dll")) returned 0x20
	[0166.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files\\windows media player\\wmpnssui.dll")) returned 0x20
	[0166.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPNSSUI.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmpnssui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files\\windows media player\\wmpnssui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files\\windows media player\\wmprph.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.168] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0166.168] CloseHandle (hObject=0x1a0) returned 1
	[0166.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files\\windows media player\\wmprph.exe")) returned 0x20
	[0166.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files\\windows media player\\wmprph.exe")) returned 0x20
	[0166.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmprph.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmprph.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files\\windows media player\\wmprph.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files\\windows media player\\wmpshare.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.169] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=102912) returned 1
	[0166.169] CloseHandle (hObject=0x1a0) returned 1
	[0166.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files\\windows media player\\wmpshare.exe")) returned 0x20
	[0166.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files\\windows media player\\wmpshare.exe")) returned 0x20
	[0166.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpshare.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmpshare.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files\\windows media player\\wmpshare.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPSideShowGadget.exe" (normalized: "c:\\program files\\windows media player\\wmpsideshowgadget.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.170] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=165888) returned 1
	[0166.170] CloseHandle (hObject=0x1a0) returned 1
	[0166.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPSideShowGadget.exe" (normalized: "c:\\program files\\windows media player\\wmpsideshowgadget.exe")) returned 0x20
	[0166.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPSideShowGadget.exe" (normalized: "c:\\program files\\windows media player\\wmpsideshowgadget.exe")) returned 0x20
	[0166.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPSideShowGadget.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\wmpsideshowgadget.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\WMPSideShowGadget.exe" (normalized: "c:\\program files\\windows media player\\wmpsideshowgadget.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui" (normalized: "c:\\program files\\windows nt\\accessories\\en-us\\wordpad.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.174] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51712) returned 1
	[0166.174] CloseHandle (hObject=0x1a0) returned 1
	[0166.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui" (normalized: "c:\\program files\\windows nt\\accessories\\en-us\\wordpad.exe.mui")) returned 0x20
	[0166.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui" (normalized: "c:\\program files\\windows nt\\accessories\\en-us\\wordpad.exe.mui")) returned 0x20
	[0166.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\accessories\\en-us\\wordpad.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui" (normalized: "c:\\program files\\windows nt\\accessories\\en-us\\wordpad.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files\\windows nt\\accessories\\wordpad.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.175] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4583424) returned 1
	[0166.175] CloseHandle (hObject=0x1a0) returned 1
	[0166.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files\\windows nt\\accessories\\wordpad.exe")) returned 0x20
	[0166.175] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files\\windows nt\\accessories\\wordpad.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\accessories\\wordpad.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0166.175] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\accessories\\wordpad.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files\\windows nt\\accessories\\wordpad.exe")) returned 0
	[0166.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\WordpadFilter.dll" (normalized: "c:\\program files\\windows nt\\accessories\\wordpadfilter.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.176] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=237568) returned 1
	[0166.176] CloseHandle (hObject=0x1a0) returned 1
	[0166.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\WordpadFilter.dll" (normalized: "c:\\program files\\windows nt\\accessories\\wordpadfilter.dll")) returned 0x20
	[0166.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\WordpadFilter.dll" (normalized: "c:\\program files\\windows nt\\accessories\\wordpadfilter.dll")) returned 0x20
	[0166.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\WordpadFilter.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\accessories\\wordpadfilter.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\WordpadFilter.dll" (normalized: "c:\\program files\\windows nt\\accessories\\wordpadfilter.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\hopes_thousands_wishing.exe" (normalized: "c:\\program files\\windows nt\\hopes_thousands_wishing.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.177] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0166.177] CloseHandle (hObject=0x1a0) returned 1
	[0166.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\hopes_thousands_wishing.exe" (normalized: "c:\\program files\\windows nt\\hopes_thousands_wishing.exe")) returned 0x20
	[0166.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\hopes_thousands_wishing.exe" (normalized: "c:\\program files\\windows nt\\hopes_thousands_wishing.exe")) returned 0x20
	[0166.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\hopes_thousands_wishing.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\hopes_thousands_wishing.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\hopes_thousands_wishing.exe" (normalized: "c:\\program files\\windows nt\\hopes_thousands_wishing.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui" (normalized: "c:\\program files\\windows nt\\tabletextservice\\en-us\\tabletextservice.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.178] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0166.178] CloseHandle (hObject=0x1a0) returned 1
	[0166.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui" (normalized: "c:\\program files\\windows nt\\tabletextservice\\en-us\\tabletextservice.dll.mui")) returned 0x20
	[0166.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui" (normalized: "c:\\program files\\windows nt\\tabletextservice\\en-us\\tabletextservice.dll.mui")) returned 0x20
	[0166.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\tabletextservice\\en-us\\tabletextservice.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui" (normalized: "c:\\program files\\windows nt\\tabletextservice\\en-us\\tabletextservice.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextService.dll" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservice.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.179] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=375808) returned 1
	[0166.179] CloseHandle (hObject=0x1a0) returned 1
	[0166.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextService.dll" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservice.dll")) returned 0x20
	[0166.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextService.dll" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservice.dll")) returned 0x20
	[0166.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextService.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservice.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextService.dll" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservice.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.180] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16212) returned 1
	[0166.180] CloseHandle (hObject=0x1a0) returned 1
	[0166.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceamharic.txt")) returned 0x20
	[0166.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceamharic.txt")) returned 0x20
	[0166.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceamharic.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicearray.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.182] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1272822) returned 1
	[0166.182] CloseHandle (hObject=0x1a0) returned 1
	[0166.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicearray.txt")) returned 0x20
	[0166.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicearray.txt")) returned 0x20
	[0166.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceArray.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicearray.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicearray.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicedayi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.183] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=980102) returned 1
	[0166.183] CloseHandle (hObject=0x1a0) returned 1
	[0166.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicedayi.txt")) returned 0x20
	[0166.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicedayi.txt")) returned 0x20
	[0166.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicedayi.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicedayi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.184] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1665878) returned 1
	[0166.184] CloseHandle (hObject=0x1a0) returned 1
	[0166.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt")) returned 0x20
	[0166.184] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0166.185] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt")) returned 0
	[0166.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.185] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1445430) returned 1
	[0166.185] CloseHandle (hObject=0x1a0) returned 1
	[0166.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt")) returned 0x20
	[0166.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt")) returned 0x20
	[0166.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.186] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1810352) returned 1
	[0166.186] CloseHandle (hObject=0x1a0) returned 1
	[0166.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt")) returned 0x20
	[0166.186] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0166.186] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt")) returned 0
	[0166.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceyi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.187] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44968) returned 1
	[0166.187] CloseHandle (hObject=0x1a0) returned 1
	[0166.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceyi.txt")) returned 0x20
	[0166.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceyi.txt")) returned 0x20
	[0166.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceYi.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceyi.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceyi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\imagingdevices.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.189] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0166.189] CloseHandle (hObject=0x1a0) returned 1
	[0166.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\imagingdevices.exe.mui")) returned 0x20
	[0166.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\imagingdevices.exe.mui")) returned 0x20
	[0166.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows photo viewer\\en-us\\imagingdevices.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\imagingdevices.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\photoacq.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.190] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19456) returned 1
	[0166.190] CloseHandle (hObject=0x1a0) returned 1
	[0166.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\photoacq.dll.mui")) returned 0x20
	[0166.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\photoacq.dll.mui")) returned 0x20
	[0166.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows photo viewer\\en-us\\photoacq.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\photoacq.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\photoviewer.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.191] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17408) returned 1
	[0166.191] CloseHandle (hObject=0x1a0) returned 1
	[0166.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\photoviewer.dll.mui")) returned 0x20
	[0166.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\photoviewer.dll.mui")) returned 0x20
	[0166.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows photo viewer\\en-us\\photoviewer.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\photoviewer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files\\windows photo viewer\\imagingdevices.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.193] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=93976) returned 1
	[0166.193] CloseHandle (hObject=0x1a0) returned 1
	[0166.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files\\windows photo viewer\\imagingdevices.exe")) returned 0x20
	[0166.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files\\windows photo viewer\\imagingdevices.exe")) returned 0x20
	[0166.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\ImagingDevices.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows photo viewer\\imagingdevices.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files\\windows photo viewer\\imagingdevices.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files\\windows photo viewer\\imagingengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.194] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2484224) returned 1
	[0166.194] CloseHandle (hObject=0x1a0) returned 1
	[0166.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files\\windows photo viewer\\imagingengine.dll")) returned 0x20
	[0166.194] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files\\windows photo viewer\\imagingengine.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\ImagingEngine.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows photo viewer\\imagingengine.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0166.194] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\ImagingEngine.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows photo viewer\\imagingengine.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files\\windows photo viewer\\imagingengine.dll")) returned 0
	[0166.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files\\windows photo viewer\\photoacq.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.195] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1096704) returned 1
	[0166.195] CloseHandle (hObject=0x1a0) returned 1
	[0166.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files\\windows photo viewer\\photoacq.dll")) returned 0x20
	[0166.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files\\windows photo viewer\\photoacq.dll")) returned 0x20
	[0166.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoAcq.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows photo viewer\\photoacq.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files\\windows photo viewer\\photoacq.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files\\windows photo viewer\\photobase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.196] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50688) returned 1
	[0166.196] CloseHandle (hObject=0x1a0) returned 1
	[0166.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files\\windows photo viewer\\photobase.dll")) returned 0x20
	[0166.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files\\windows photo viewer\\photobase.dll")) returned 0x20
	[0166.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoBase.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows photo viewer\\photobase.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files\\windows photo viewer\\photobase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files\\windows photo viewer\\photoviewer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.197] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1727488) returned 1
	[0166.197] CloseHandle (hObject=0x1a0) returned 1
	[0166.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files\\windows photo viewer\\photoviewer.dll")) returned 0x20
	[0166.197] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files\\windows photo viewer\\photoviewer.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoViewer.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows photo viewer\\photoviewer.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0166.197] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoViewer.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows photo viewer\\photoviewer.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files\\windows photo viewer\\photoviewer.dll")) returned 0
	[0166.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files\\windows portable devices\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.198] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=244736) returned 1
	[0166.198] CloseHandle (hObject=0x1a0) returned 1
	[0166.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files\\windows portable devices\\sqmapi.dll")) returned 0x20
	[0166.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files\\windows portable devices\\sqmapi.dll")) returned 0x20
	[0166.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\sqmapi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows portable devices\\sqmapi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files\\windows portable devices\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\sbdrop.dll.mui" (normalized: "c:\\program files\\windows sidebar\\en-us\\sbdrop.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.199] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2048) returned 1
	[0166.199] CloseHandle (hObject=0x1a0) returned 1
	[0166.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\sbdrop.dll.mui" (normalized: "c:\\program files\\windows sidebar\\en-us\\sbdrop.dll.mui")) returned 0x20
	[0166.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\sbdrop.dll.mui" (normalized: "c:\\program files\\windows sidebar\\en-us\\sbdrop.dll.mui")) returned 0x20
	[0166.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\sbdrop.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\en-us\\sbdrop.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\sbdrop.dll.mui" (normalized: "c:\\program files\\windows sidebar\\en-us\\sbdrop.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\Sidebar.exe.mui" (normalized: "c:\\program files\\windows sidebar\\en-us\\sidebar.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.201] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18944) returned 1
	[0166.201] CloseHandle (hObject=0x1a0) returned 1
	[0166.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\Sidebar.exe.mui" (normalized: "c:\\program files\\windows sidebar\\en-us\\sidebar.exe.mui")) returned 0x20
	[0166.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\Sidebar.exe.mui" (normalized: "c:\\program files\\windows sidebar\\en-us\\sidebar.exe.mui")) returned 0x20
	[0166.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\Sidebar.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\en-us\\sidebar.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\en-US\\Sidebar.exe.mui" (normalized: "c:\\program files\\windows sidebar\\en-us\\sidebar.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.202] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6772) returned 1
	[0166.202] CloseHandle (hObject=0x1a0) returned 1
	[0166.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\drag.png")) returned 0x20
	[0166.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\drag.png")) returned 0x20
	[0166.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.203] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19102) returned 1
	[0166.203] CloseHandle (hObject=0x1a0) returned 1
	[0166.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html")) returned 0x20
	[0166.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html")) returned 0x20
	[0166.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.205] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4848) returned 1
	[0166.205] CloseHandle (hObject=0x1a0) returned 1
	[0166.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css")) returned 0x20
	[0166.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css")) returned 0x20
	[0166.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.206] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1010) returned 1
	[0166.206] CloseHandle (hObject=0x1a0) returned 1
	[0166.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml")) returned 0x20
	[0166.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml")) returned 0x20
	[0166.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.207] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65288) returned 1
	[0166.207] CloseHandle (hObject=0x1a0) returned 1
	[0166.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js")) returned 0x20
	[0166.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js")) returned 0x20
	[0166.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.332] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3347) returned 1
	[0166.332] CloseHandle (hObject=0x20c) returned 1
	[0166.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\icon.png")) returned 0x20
	[0166.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\icon.png")) returned 0x20
	[0166.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.332] SetEvent (hEvent=0xfc) returned 1
	[0166.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.432] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1174) returned 1
	[0166.432] CloseHandle (hObject=0x20c) returned 1
	[0166.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png")) returned 0x20
	[0166.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png")) returned 0x20
	[0166.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.432] SetEvent (hEvent=0xfc) returned 1
	[0166.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.433] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=413) returned 1
	[0166.433] CloseHandle (hObject=0x20c) returned 1
	[0166.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png")) returned 0x20
	[0166.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png")) returned 0x20
	[0166.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.434] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=578) returned 1
	[0166.434] CloseHandle (hObject=0x20c) returned 1
	[0166.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png")) returned 0x20
	[0166.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png")) returned 0x20
	[0166.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.435] SetEvent (hEvent=0xfc) returned 1
	[0166.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.435] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=203) returned 1
	[0166.435] CloseHandle (hObject=0x20c) returned 1
	[0166.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png")) returned 0x20
	[0166.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png")) returned 0x20
	[0166.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.437] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=217) returned 1
	[0166.437] CloseHandle (hObject=0x20c) returned 1
	[0166.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png")) returned 0x20
	[0166.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png")) returned 0x20
	[0166.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.437] SetEvent (hEvent=0xfc) returned 1
	[0166.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.438] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=409) returned 1
	[0166.438] CloseHandle (hObject=0x20c) returned 1
	[0166.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png")) returned 0x20
	[0166.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png")) returned 0x20
	[0166.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.440] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=574) returned 1
	[0166.440] CloseHandle (hObject=0x20c) returned 1
	[0166.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png")) returned 0x20
	[0166.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png")) returned 0x20
	[0166.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.440] SetEvent (hEvent=0xfc) returned 1
	[0166.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.441] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=216) returned 1
	[0166.441] CloseHandle (hObject=0x20c) returned 1
	[0166.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png")) returned 0x20
	[0166.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png")) returned 0x20
	[0166.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.446] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2262) returned 1
	[0166.446] CloseHandle (hObject=0x20c) returned 1
	[0166.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png")) returned 0x20
	[0166.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png")) returned 0x20
	[0166.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.447] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3009) returned 1
	[0166.447] CloseHandle (hObject=0x20c) returned 1
	[0166.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png")) returned 0x20
	[0166.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png")) returned 0x20
	[0166.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.449] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3541) returned 1
	[0166.449] CloseHandle (hObject=0x20c) returned 1
	[0166.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png")) returned 0x20
	[0166.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png")) returned 0x20
	[0166.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.452] SetEvent (hEvent=0xfc) returned 1
	[0166.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.452] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3026) returned 1
	[0166.452] CloseHandle (hObject=0x20c) returned 1
	[0166.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png")) returned 0x20
	[0166.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png")) returned 0x20
	[0166.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.454] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1500) returned 1
	[0166.454] CloseHandle (hObject=0x20c) returned 1
	[0166.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png")) returned 0x20
	[0166.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png")) returned 0x20
	[0166.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.454] SetEvent (hEvent=0xfc) returned 1
	[0166.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.455] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3544) returned 1
	[0166.455] CloseHandle (hObject=0x20c) returned 1
	[0166.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png")) returned 0x20
	[0166.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png")) returned 0x20
	[0166.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.456] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4773) returned 1
	[0166.456] CloseHandle (hObject=0x20c) returned 1
	[0166.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png")) returned 0x20
	[0166.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png")) returned 0x20
	[0166.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.457] SetEvent (hEvent=0xfc) returned 1
	[0166.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.457] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2726) returned 1
	[0166.457] CloseHandle (hObject=0x20c) returned 1
	[0166.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png")) returned 0x20
	[0166.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png")) returned 0x20
	[0166.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.459] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=214) returned 1
	[0166.459] CloseHandle (hObject=0x20c) returned 1
	[0166.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png")) returned 0x20
	[0166.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png")) returned 0x20
	[0166.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.459] SetEvent (hEvent=0xfc) returned 1
	[0166.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.460] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1016) returned 1
	[0166.460] CloseHandle (hObject=0x20c) returned 1
	[0166.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png")) returned 0x20
	[0166.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png")) returned 0x20
	[0166.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.461] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=896) returned 1
	[0166.461] CloseHandle (hObject=0x20c) returned 1
	[0166.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png")) returned 0x20
	[0166.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png")) returned 0x20
	[0166.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.462] SetEvent (hEvent=0xfc) returned 1
	[0166.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.462] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=150) returned 1
	[0166.462] CloseHandle (hObject=0x20c) returned 1
	[0166.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png")) returned 0x20
	[0166.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png")) returned 0x20
	[0166.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.464] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=502) returned 1
	[0166.464] CloseHandle (hObject=0x20c) returned 1
	[0166.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png")) returned 0x20
	[0166.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png")) returned 0x20
	[0166.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.465] SetEvent (hEvent=0xfc) returned 1
	[0166.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.465] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=334) returned 1
	[0166.465] CloseHandle (hObject=0x20c) returned 1
	[0166.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png")) returned 0x20
	[0166.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png")) returned 0x20
	[0166.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.467] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6166) returned 1
	[0166.467] CloseHandle (hObject=0x20c) returned 1
	[0166.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\logo.png")) returned 0x20
	[0166.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\logo.png")) returned 0x20
	[0166.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.467] SetEvent (hEvent=0xfc) returned 1
	[0166.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.576] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23429) returned 1
	[0166.577] CloseHandle (hObject=0x20c) returned 1
	[0166.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\drag.png")) returned 0x20
	[0166.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\drag.png")) returned 0x20
	[0166.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.577] SetEvent (hEvent=0xfc) returned 1
	[0166.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.684] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29780) returned 1
	[0166.685] CloseHandle (hObject=0x140) returned 1
	[0166.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png")) returned 0x20
	[0166.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png")) returned 0x20
	[0166.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.685] SetEvent (hEvent=0xfc) returned 1
	[0166.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.686] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2944) returned 1
	[0166.686] CloseHandle (hObject=0x140) returned 1
	[0166.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png")) returned 0x20
	[0166.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png")) returned 0x20
	[0166.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.687] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=368) returned 1
	[0166.687] CloseHandle (hObject=0x140) returned 1
	[0166.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png")) returned 0x20
	[0166.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png")) returned 0x20
	[0166.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.688] SetEvent (hEvent=0xfc) returned 1
	[0166.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.688] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=402) returned 1
	[0166.688] CloseHandle (hObject=0x140) returned 1
	[0166.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png")) returned 0x20
	[0166.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png")) returned 0x20
	[0166.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.690] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2956) returned 1
	[0166.690] CloseHandle (hObject=0x140) returned 1
	[0166.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png")) returned 0x20
	[0166.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png")) returned 0x20
	[0166.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.690] SetEvent (hEvent=0xfc) returned 1
	[0166.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.691] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32695) returned 1
	[0166.691] CloseHandle (hObject=0x140) returned 1
	[0166.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png")) returned 0x20
	[0166.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png")) returned 0x20
	[0166.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.692] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34670) returned 1
	[0166.692] CloseHandle (hObject=0x140) returned 1
	[0166.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png")) returned 0x20
	[0166.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png")) returned 0x20
	[0166.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.693] SetEvent (hEvent=0xfc) returned 1
	[0166.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.694] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=321) returned 1
	[0166.694] CloseHandle (hObject=0x140) returned 1
	[0166.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png")) returned 0x20
	[0166.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png")) returned 0x20
	[0166.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.695] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=388) returned 1
	[0166.695] CloseHandle (hObject=0x140) returned 1
	[0166.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png")) returned 0x20
	[0166.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png")) returned 0x20
	[0166.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.696] SetEvent (hEvent=0xfc) returned 1
	[0166.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.696] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=439) returned 1
	[0166.696] CloseHandle (hObject=0x140) returned 1
	[0166.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png")) returned 0x20
	[0166.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png")) returned 0x20
	[0166.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.698] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3092) returned 1
	[0166.698] CloseHandle (hObject=0x140) returned 1
	[0166.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png")) returned 0x20
	[0166.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png")) returned 0x20
	[0166.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.698] SetEvent (hEvent=0xfc) returned 1
	[0166.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.699] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33403) returned 1
	[0166.699] CloseHandle (hObject=0x140) returned 1
	[0166.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png")) returned 0x20
	[0166.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png")) returned 0x20
	[0166.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.700] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15614) returned 1
	[0166.700] CloseHandle (hObject=0x140) returned 1
	[0166.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png")) returned 0x20
	[0166.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png")) returned 0x20
	[0166.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.701] SetEvent (hEvent=0xfc) returned 1
	[0166.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.701] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2966) returned 1
	[0166.701] CloseHandle (hObject=0x140) returned 1
	[0166.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png")) returned 0x20
	[0166.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png")) returned 0x20
	[0166.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.703] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2922) returned 1
	[0166.703] CloseHandle (hObject=0x140) returned 1
	[0166.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png")) returned 0x20
	[0166.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png")) returned 0x20
	[0166.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.703] SetEvent (hEvent=0xfc) returned 1
	[0166.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.704] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2940) returned 1
	[0166.704] CloseHandle (hObject=0x140) returned 1
	[0166.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png")) returned 0x20
	[0166.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png")) returned 0x20
	[0166.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.705] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3038) returned 1
	[0166.705] CloseHandle (hObject=0x140) returned 1
	[0166.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png")) returned 0x20
	[0166.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png")) returned 0x20
	[0166.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.706] SetEvent (hEvent=0xfc) returned 1
	[0166.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.706] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20945) returned 1
	[0166.706] CloseHandle (hObject=0x140) returned 1
	[0166.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png")) returned 0x20
	[0166.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png")) returned 0x20
	[0166.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.708] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25608) returned 1
	[0166.708] CloseHandle (hObject=0x140) returned 1
	[0166.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png")) returned 0x20
	[0166.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png")) returned 0x20
	[0166.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.708] SetEvent (hEvent=0xfc) returned 1
	[0166.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.709] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2903) returned 1
	[0166.709] CloseHandle (hObject=0x140) returned 1
	[0166.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png")) returned 0x20
	[0166.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png")) returned 0x20
	[0166.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.713] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2959) returned 1
	[0166.713] CloseHandle (hObject=0x140) returned 1
	[0166.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png")) returned 0x20
	[0166.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png")) returned 0x20
	[0166.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.714] SetEvent (hEvent=0xfc) returned 1
	[0166.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.714] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2979) returned 1
	[0166.714] CloseHandle (hObject=0x140) returned 1
	[0166.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png")) returned 0x20
	[0166.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png")) returned 0x20
	[0166.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.716] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2919) returned 1
	[0166.716] CloseHandle (hObject=0x140) returned 1
	[0166.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png")) returned 0x20
	[0166.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png")) returned 0x20
	[0166.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.716] SetEvent (hEvent=0xfc) returned 1
	[0166.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.717] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28718) returned 1
	[0166.717] CloseHandle (hObject=0x140) returned 1
	[0166.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png")) returned 0x20
	[0166.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png")) returned 0x20
	[0166.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.718] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=140) returned 1
	[0166.718] CloseHandle (hObject=0x140) returned 1
	[0166.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png")) returned 0x20
	[0166.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png")) returned 0x20
	[0166.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.719] SetEvent (hEvent=0xfc) returned 1
	[0166.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.720] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=135) returned 1
	[0166.720] CloseHandle (hObject=0x140) returned 1
	[0166.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png")) returned 0x20
	[0166.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png")) returned 0x20
	[0166.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.720] SetEvent (hEvent=0xfc) returned 1
	[0166.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.818] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=135) returned 1
	[0166.818] CloseHandle (hObject=0x140) returned 1
	[0166.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png")) returned 0x20
	[0166.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png")) returned 0x20
	[0166.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.818] SetEvent (hEvent=0xfc) returned 1
	[0166.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.819] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=137) returned 1
	[0166.819] CloseHandle (hObject=0x140) returned 1
	[0166.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png")) returned 0x20
	[0166.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png")) returned 0x20
	[0166.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.820] SetEvent (hEvent=0xfc) returned 1
	[0166.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.821] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=137) returned 1
	[0166.821] CloseHandle (hObject=0x140) returned 1
	[0166.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png")) returned 0x20
	[0166.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png")) returned 0x20
	[0166.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.821] SetEvent (hEvent=0xfc) returned 1
	[0166.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.822] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=168) returned 1
	[0166.823] CloseHandle (hObject=0x140) returned 1
	[0166.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png")) returned 0x20
	[0166.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png")) returned 0x20
	[0166.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.823] SetEvent (hEvent=0xfc) returned 1
	[0166.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.824] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=165) returned 1
	[0166.824] CloseHandle (hObject=0x140) returned 1
	[0166.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png")) returned 0x20
	[0166.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png")) returned 0x20
	[0166.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.824] SetEvent (hEvent=0xfc) returned 1
	[0166.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.826] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=166) returned 1
	[0166.826] CloseHandle (hObject=0x140) returned 1
	[0166.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png")) returned 0x20
	[0166.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png")) returned 0x20
	[0166.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.826] SetEvent (hEvent=0xfc) returned 1
	[0166.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.827] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=168) returned 1
	[0166.827] CloseHandle (hObject=0x140) returned 1
	[0166.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png")) returned 0x20
	[0166.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png")) returned 0x20
	[0166.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.828] SetEvent (hEvent=0xfc) returned 1
	[0166.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.829] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=131) returned 1
	[0166.829] CloseHandle (hObject=0x140) returned 1
	[0166.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png")) returned 0x20
	[0166.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png")) returned 0x20
	[0166.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.829] SetEvent (hEvent=0xfc) returned 1
	[0166.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.830] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=145) returned 1
	[0166.830] CloseHandle (hObject=0x140) returned 1
	[0166.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png")) returned 0x20
	[0166.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png")) returned 0x20
	[0166.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.831] SetEvent (hEvent=0xfc) returned 1
	[0166.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.832] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=139) returned 1
	[0166.832] CloseHandle (hObject=0x140) returned 1
	[0166.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png")) returned 0x20
	[0166.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png")) returned 0x20
	[0166.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.832] SetEvent (hEvent=0xfc) returned 1
	[0166.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.833] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=697) returned 1
	[0166.833] CloseHandle (hObject=0x140) returned 1
	[0166.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png")) returned 0x20
	[0166.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png")) returned 0x20
	[0166.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.834] SetEvent (hEvent=0xfc) returned 1
	[0166.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.835] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1050) returned 1
	[0166.835] CloseHandle (hObject=0x140) returned 1
	[0166.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png")) returned 0x20
	[0166.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png")) returned 0x20
	[0166.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.835] SetEvent (hEvent=0xfc) returned 1
	[0166.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.836] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1124) returned 1
	[0166.836] CloseHandle (hObject=0x140) returned 1
	[0166.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png")) returned 0x20
	[0166.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png")) returned 0x20
	[0166.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.837] SetEvent (hEvent=0xfc) returned 1
	[0166.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.838] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=855) returned 1
	[0166.838] CloseHandle (hObject=0x140) returned 1
	[0166.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png")) returned 0x20
	[0166.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png")) returned 0x20
	[0166.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.838] SetEvent (hEvent=0xfc) returned 1
	[0166.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.839] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=697) returned 1
	[0166.839] CloseHandle (hObject=0x140) returned 1
	[0166.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png")) returned 0x20
	[0166.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png")) returned 0x20
	[0166.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.840] SetEvent (hEvent=0xfc) returned 1
	[0166.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.841] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1047) returned 1
	[0166.841] CloseHandle (hObject=0x140) returned 1
	[0166.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png")) returned 0x20
	[0166.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png")) returned 0x20
	[0166.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.841] SetEvent (hEvent=0xfc) returned 1
	[0166.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.842] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1119) returned 1
	[0166.842] CloseHandle (hObject=0x140) returned 1
	[0166.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png")) returned 0x20
	[0166.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png")) returned 0x20
	[0166.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.843] SetEvent (hEvent=0xfc) returned 1
	[0166.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.844] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=856) returned 1
	[0166.844] CloseHandle (hObject=0x140) returned 1
	[0166.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png")) returned 0x20
	[0166.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png")) returned 0x20
	[0166.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.844] SetEvent (hEvent=0xfc) returned 1
	[0166.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.845] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=288) returned 1
	[0166.846] CloseHandle (hObject=0x140) returned 1
	[0166.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png")) returned 0x20
	[0166.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png")) returned 0x20
	[0166.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.846] SetEvent (hEvent=0xfc) returned 1
	[0166.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.846] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20140) returned 1
	[0166.846] CloseHandle (hObject=0x140) returned 1
	[0166.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png")) returned 0x20
	[0166.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png")) returned 0x20
	[0166.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.848] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=240) returned 1
	[0166.848] CloseHandle (hObject=0x140) returned 1
	[0166.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png")) returned 0x20
	[0166.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png")) returned 0x20
	[0166.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.848] SetEvent (hEvent=0xfc) returned 1
	[0166.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.849] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=475) returned 1
	[0166.849] CloseHandle (hObject=0x140) returned 1
	[0166.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png")) returned 0x20
	[0166.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png")) returned 0x20
	[0166.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.851] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=458) returned 1
	[0166.851] CloseHandle (hObject=0x140) returned 1
	[0166.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png")) returned 0x20
	[0166.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png")) returned 0x20
	[0166.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.851] SetEvent (hEvent=0xfc) returned 1
	[0166.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.852] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3119) returned 1
	[0166.852] CloseHandle (hObject=0x140) returned 1
	[0166.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png")) returned 0x20
	[0166.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png")) returned 0x20
	[0166.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.853] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19847) returned 1
	[0166.853] CloseHandle (hObject=0x140) returned 1
	[0166.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png")) returned 0x20
	[0166.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png")) returned 0x20
	[0166.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.853] SetEvent (hEvent=0xfc) returned 1
	[0166.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.854] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20891) returned 1
	[0166.854] CloseHandle (hObject=0x140) returned 1
	[0166.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png")) returned 0x20
	[0166.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png")) returned 0x20
	[0166.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.855] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=243) returned 1
	[0166.855] CloseHandle (hObject=0x140) returned 1
	[0166.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png")) returned 0x20
	[0166.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png")) returned 0x20
	[0166.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.856] SetEvent (hEvent=0xfc) returned 1
	[0166.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.856] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=206) returned 1
	[0166.856] CloseHandle (hObject=0x140) returned 1
	[0166.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png")) returned 0x20
	[0166.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png")) returned 0x20
	[0166.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0167.002] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=206) returned 1
	[0167.002] CloseHandle (hObject=0x170) returned 1
	[0167.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png")) returned 0x20
	[0167.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png")) returned 0x20
	[0167.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.101] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=308) returned 1
	[0167.101] CloseHandle (hObject=0x1a0) returned 1
	[0167.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png")) returned 0x20
	[0167.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png")) returned 0x20
	[0167.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.101] SetEvent (hEvent=0xfc) returned 1
	[0167.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.102] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6166) returned 1
	[0167.102] CloseHandle (hObject=0x1a0) returned 1
	[0167.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\logo.png")) returned 0x20
	[0167.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\logo.png")) returned 0x20
	[0167.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.103] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16491) returned 1
	[0167.103] CloseHandle (hObject=0x1a0) returned 1
	[0167.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\drag.png")) returned 0x20
	[0167.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\drag.png")) returned 0x20
	[0167.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.104] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19502) returned 1
	[0167.104] CloseHandle (hObject=0x1a0) returned 1
	[0167.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css")) returned 0x20
	[0167.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css")) returned 0x20
	[0167.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.105] SetEvent (hEvent=0xfc) returned 1
	[0167.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.106] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6034) returned 1
	[0167.106] CloseHandle (hObject=0x1a0) returned 1
	[0167.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html")) returned 0x20
	[0167.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html")) returned 0x20
	[0167.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.107] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1958) returned 1
	[0167.107] CloseHandle (hObject=0x1a0) returned 1
	[0167.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml")) returned 0x20
	[0167.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml")) returned 0x20
	[0167.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.108] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=66782) returned 1
	[0167.108] CloseHandle (hObject=0x1a0) returned 1
	[0167.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js")) returned 0x20
	[0167.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js")) returned 0x20
	[0167.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.109] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=724) returned 1
	[0167.109] CloseHandle (hObject=0x1a0) returned 1
	[0167.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js")) returned 0x20
	[0167.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js")) returned 0x20
	[0167.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.110] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5662) returned 1
	[0167.110] CloseHandle (hObject=0x1a0) returned 1
	[0167.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js")) returned 0x20
	[0167.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js")) returned 0x20
	[0167.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.112] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11252) returned 1
	[0167.112] CloseHandle (hObject=0x1a0) returned 1
	[0167.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js")) returned 0x20
	[0167.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js")) returned 0x20
	[0167.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.113] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7720) returned 1
	[0167.113] CloseHandle (hObject=0x1a0) returned 1
	[0167.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js")) returned 0x20
	[0167.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js")) returned 0x20
	[0167.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.115] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6889) returned 1
	[0167.115] CloseHandle (hObject=0x1a0) returned 1
	[0167.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\icon.png")) returned 0x20
	[0167.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\icon.png")) returned 0x20
	[0167.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.117] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12585) returned 1
	[0167.117] CloseHandle (hObject=0x1a0) returned 1
	[0167.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png")) returned 0x20
	[0167.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png")) returned 0x20
	[0167.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.118] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=512) returned 1
	[0167.118] CloseHandle (hObject=0x1a0) returned 1
	[0167.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png")) returned 0x20
	[0167.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png")) returned 0x20
	[0167.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.119] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=420) returned 1
	[0167.119] CloseHandle (hObject=0x1a0) returned 1
	[0167.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png")) returned 0x20
	[0167.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png")) returned 0x20
	[0167.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.120] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=228) returned 1
	[0167.120] CloseHandle (hObject=0x1a0) returned 1
	[0167.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png")) returned 0x20
	[0167.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png")) returned 0x20
	[0167.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.121] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16491) returned 1
	[0167.121] CloseHandle (hObject=0x1a0) returned 1
	[0167.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png")) returned 0x20
	[0167.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png")) returned 0x20
	[0167.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.123] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43622) returned 1
	[0167.123] CloseHandle (hObject=0x1a0) returned 1
	[0167.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png")) returned 0x20
	[0167.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png")) returned 0x20
	[0167.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.126] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=54042) returned 1
	[0167.126] CloseHandle (hObject=0x1a0) returned 1
	[0167.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png")) returned 0x20
	[0167.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png")) returned 0x20
	[0167.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.127] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=62016) returned 1
	[0167.127] CloseHandle (hObject=0x1a0) returned 1
	[0167.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png")) returned 0x20
	[0167.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png")) returned 0x20
	[0167.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.128] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2963) returned 1
	[0167.128] CloseHandle (hObject=0x1a0) returned 1
	[0167.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png")) returned 0x20
	[0167.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png")) returned 0x20
	[0167.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.130] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2885) returned 1
	[0167.130] CloseHandle (hObject=0x1a0) returned 1
	[0167.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png")) returned 0x20
	[0167.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png")) returned 0x20
	[0167.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.137] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2979) returned 1
	[0167.137] CloseHandle (hObject=0x1a0) returned 1
	[0167.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png")) returned 0x20
	[0167.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png")) returned 0x20
	[0167.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.263] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=772) returned 1
	[0167.263] CloseHandle (hObject=0x168) returned 1
	[0167.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png")) returned 0x20
	[0167.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png")) returned 0x20
	[0167.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.263] SetEvent (hEvent=0xfc) returned 1
	[0167.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.264] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=477) returned 1
	[0167.264] CloseHandle (hObject=0x168) returned 1
	[0167.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png")) returned 0x20
	[0167.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png")) returned 0x20
	[0167.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.265] SetEvent (hEvent=0xfc) returned 1
	[0167.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.266] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3268) returned 1
	[0167.266] CloseHandle (hObject=0x168) returned 1
	[0167.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png")) returned 0x20
	[0167.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png")) returned 0x20
	[0167.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.269] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3428) returned 1
	[0167.269] CloseHandle (hObject=0x1a0) returned 1
	[0167.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png")) returned 0x20
	[0167.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png")) returned 0x20
	[0167.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.269] SetEvent (hEvent=0xfc) returned 1
	[0167.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.270] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2929) returned 1
	[0167.270] CloseHandle (hObject=0x1a0) returned 1
	[0167.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png")) returned 0x20
	[0167.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png")) returned 0x20
	[0167.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.271] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=729) returned 1
	[0167.271] CloseHandle (hObject=0x1a0) returned 1
	[0167.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png")) returned 0x20
	[0167.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png")) returned 0x20
	[0167.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.272] SetEvent (hEvent=0xfc) returned 1
	[0167.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.274] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3034) returned 1
	[0167.274] CloseHandle (hObject=0x168) returned 1
	[0167.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png")) returned 0x20
	[0167.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png")) returned 0x20
	[0167.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.274] SetEvent (hEvent=0xfc) returned 1
	[0167.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.275] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2831) returned 1
	[0167.275] CloseHandle (hObject=0x168) returned 1
	[0167.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png")) returned 0x20
	[0167.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png")) returned 0x20
	[0167.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.276] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5930) returned 1
	[0167.276] CloseHandle (hObject=0x168) returned 1
	[0167.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\logo.png")) returned 0x20
	[0167.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\logo.png")) returned 0x20
	[0167.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.277] SetEvent (hEvent=0xfc) returned 1
	[0167.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\flyout.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\flyout.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.278] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3860) returned 1
	[0167.278] CloseHandle (hObject=0x168) returned 1
	[0167.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\flyout.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\flyout.css")) returned 0x20
	[0167.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\flyout.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\flyout.css")) returned 0x20
	[0167.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\flyout.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\flyout.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\flyout.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\flyout.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.279] SetEvent (hEvent=0xfc) returned 1
	[0167.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\main.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\main.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.280] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6572) returned 1
	[0167.280] CloseHandle (hObject=0x168) returned 1
	[0167.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\main.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\main.css")) returned 0x20
	[0167.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\main.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\main.css")) returned 0x20
	[0167.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\main.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\main.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\main.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.283] SetEvent (hEvent=0xfc) returned 1
	[0167.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.284] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1644) returned 1
	[0167.284] CloseHandle (hObject=0x168) returned 1
	[0167.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\settings.css")) returned 0x20
	[0167.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\settings.css")) returned 0x20
	[0167.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\settings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\settings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\css\\settings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.285] SetEvent (hEvent=0xfc) returned 1
	[0167.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.286] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1244) returned 1
	[0167.286] CloseHandle (hObject=0x168) returned 1
	[0167.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us\\gadget.xml")) returned 0x20
	[0167.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us\\gadget.xml")) returned 0x20
	[0167.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.286] SetEvent (hEvent=0xfc) returned 1
	[0167.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\flyout.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\flyout.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.287] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6642) returned 1
	[0167.287] CloseHandle (hObject=0x168) returned 1
	[0167.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\flyout.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\flyout.html")) returned 0x20
	[0167.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\flyout.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\flyout.html")) returned 0x20
	[0167.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\flyout.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\flyout.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\flyout.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\flyout.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mousedown.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mousedown.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.289] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=184) returned 1
	[0167.289] CloseHandle (hObject=0x168) returned 1
	[0167.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mousedown.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mousedown.png")) returned 0x20
	[0167.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mousedown.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mousedown.png")) returned 0x20
	[0167.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mousedown.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mousedown.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mousedown.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mousedown.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.290] SetEvent (hEvent=0xfc) returned 1
	[0167.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mouseout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mouseout.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.290] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=184) returned 1
	[0167.290] CloseHandle (hObject=0x168) returned 1
	[0167.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mouseout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mouseout.png")) returned 0x20
	[0167.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mouseout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mouseout.png")) returned 0x20
	[0167.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mouseout.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mouseout.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mouseout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mouseout.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mouseover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mouseover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.291] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=184) returned 1
	[0167.291] CloseHandle (hObject=0x168) returned 1
	[0167.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mouseover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mouseover.png")) returned 0x20
	[0167.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mouseover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mouseover.png")) returned 0x20
	[0167.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mouseover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mouseover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_left_mouseover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_left_mouseover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mousedown.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mousedown.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.293] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1692) returned 1
	[0167.293] CloseHandle (hObject=0x168) returned 1
	[0167.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mousedown.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mousedown.png")) returned 0x20
	[0167.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mousedown.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mousedown.png")) returned 0x20
	[0167.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mousedown.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mousedown.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mousedown.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mousedown.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.293] SetEvent (hEvent=0xfc) returned 1
	[0167.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mouseout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mouseout.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.294] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1692) returned 1
	[0167.294] CloseHandle (hObject=0x168) returned 1
	[0167.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mouseout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mouseout.png")) returned 0x20
	[0167.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mouseout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mouseout.png")) returned 0x20
	[0167.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mouseout.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mouseout.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mouseout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mouseout.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mouseover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mouseover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.295] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1725) returned 1
	[0167.295] CloseHandle (hObject=0x168) returned 1
	[0167.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mouseover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mouseover.png")) returned 0x20
	[0167.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mouseover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mouseover.png")) returned 0x20
	[0167.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mouseover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mouseover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_MCELogo_mouseover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_mcelogo_mouseover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_play.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_play.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.296] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6100) returned 1
	[0167.296] CloseHandle (hObject=0x168) returned 1
	[0167.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_play.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_play.png")) returned 0x20
	[0167.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_play.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_play.png")) returned 0x20
	[0167.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_play.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_play.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_play.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_play.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mousedown.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mousedown.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.297] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0167.297] CloseHandle (hObject=0x168) returned 1
	[0167.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mousedown.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mousedown.png")) returned 0x20
	[0167.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mousedown.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mousedown.png")) returned 0x20
	[0167.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mousedown.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mousedown.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mousedown.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mousedown.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.298] SetEvent (hEvent=0xfc) returned 1
	[0167.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mouseout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mouseout.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.299] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=176) returned 1
	[0167.299] CloseHandle (hObject=0x168) returned 1
	[0167.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mouseout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mouseout.png")) returned 0x20
	[0167.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mouseout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mouseout.png")) returned 0x20
	[0167.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mouseout.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mouseout.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mouseout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mouseout.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mouseover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mouseover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.300] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=176) returned 1
	[0167.300] CloseHandle (hObject=0x168) returned 1
	[0167.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mouseover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mouseover.png")) returned 0x20
	[0167.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mouseover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mouseover.png")) returned 0x20
	[0167.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mouseover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mouseover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\button_right_mouseover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\button_right_mouseover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\default_thumb.jpg" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\default_thumb.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.301] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25070) returned 1
	[0167.301] CloseHandle (hObject=0x168) returned 1
	[0167.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\default_thumb.jpg" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\default_thumb.jpg")) returned 0x20
	[0167.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\default_thumb.jpg" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\default_thumb.jpg")) returned 0x20
	[0167.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\default_thumb.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\default_thumb.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\default_thumb.jpg" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\default_thumb.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\ehshellLogo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\ehshelllogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.302] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5762) returned 1
	[0167.302] CloseHandle (hObject=0x168) returned 1
	[0167.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\ehshellLogo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\ehshelllogo.png")) returned 0x20
	[0167.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\ehshellLogo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\ehshelllogo.png")) returned 0x20
	[0167.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\ehshellLogo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\ehshelllogo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\ehshellLogo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\ehshelllogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\flyout_background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\flyout_background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.303] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=187794) returned 1
	[0167.303] CloseHandle (hObject=0x168) returned 1
	[0167.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\flyout_background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\flyout_background.png")) returned 0x20
	[0167.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\flyout_background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\flyout_background.png")) returned 0x20
	[0167.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\flyout_background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\flyout_background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\flyout_background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\flyout_background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Flyout_Thumbnail_Shadow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_flyout_thumbnail_shadow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.426] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1526) returned 1
	[0167.426] CloseHandle (hObject=0x168) returned 1
	[0167.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Flyout_Thumbnail_Shadow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_flyout_thumbnail_shadow.png")) returned 0x20
	[0167.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Flyout_Thumbnail_Shadow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_flyout_thumbnail_shadow.png")) returned 0x20
	[0167.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Flyout_Thumbnail_Shadow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_flyout_thumbnail_shadow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Flyout_Thumbnail_Shadow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_flyout_thumbnail_shadow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.427] SetEvent (hEvent=0xfc) returned 1
	[0167.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Background_QuickLaunch.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_background_quicklaunch.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.427] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53091) returned 1
	[0167.427] CloseHandle (hObject=0x168) returned 1
	[0167.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Background_QuickLaunch.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_background_quicklaunch.png")) returned 0x20
	[0167.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Background_QuickLaunch.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_background_quicklaunch.png")) returned 0x20
	[0167.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Background_QuickLaunch.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_background_quicklaunch.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Background_QuickLaunch.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_background_quicklaunch.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Gradient.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_gradient.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.428] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34536) returned 1
	[0167.428] CloseHandle (hObject=0x168) returned 1
	[0167.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Gradient.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_gradient.png")) returned 0x20
	[0167.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Gradient.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_gradient.png")) returned 0x20
	[0167.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Gradient.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_gradient.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Gradient.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_gradient.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Empty.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_empty.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.431] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=255) returned 1
	[0167.431] CloseHandle (hObject=0x168) returned 1
	[0167.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Empty.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_empty.png")) returned 0x20
	[0167.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Empty.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_empty.png")) returned 0x20
	[0167.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Empty.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_empty.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Empty.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_empty.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.431] SetEvent (hEvent=0xfc) returned 1
	[0167.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Full.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_full.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.432] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=252) returned 1
	[0167.432] CloseHandle (hObject=0x168) returned 1
	[0167.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Full.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_full.png")) returned 0x20
	[0167.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Full.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_full.png")) returned 0x20
	[0167.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Full.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_full.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Full.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_full.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Half.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_half.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.433] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=260) returned 1
	[0167.433] CloseHandle (hObject=0x168) returned 1
	[0167.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Half.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_half.png")) returned 0x20
	[0167.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Half.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_half.png")) returned 0x20
	[0167.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Half.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_half.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Star_Half.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_star_half.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Waitcursor.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_waitcursor.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.434] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4857) returned 1
	[0167.434] CloseHandle (hObject=0x168) returned 1
	[0167.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Waitcursor.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_waitcursor.gif")) returned 0x20
	[0167.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Waitcursor.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_waitcursor.gif")) returned 0x20
	[0167.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Waitcursor.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_waitcursor.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Waitcursor.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_waitcursor.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_WMC_LogoText.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_wmc_logotext.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.435] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1011) returned 1
	[0167.435] CloseHandle (hObject=0x168) returned 1
	[0167.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_WMC_LogoText.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_wmc_logotext.png")) returned 0x20
	[0167.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_WMC_LogoText.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_wmc_logotext.png")) returned 0x20
	[0167.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_WMC_LogoText.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_wmc_logotext.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_WMC_LogoText.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_wmc_logotext.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.436] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3389) returned 1
	[0167.436] CloseHandle (hObject=0x168) returned 1
	[0167.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\logo.png")) returned 0x20
	[0167.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\logo.png")) returned 0x20
	[0167.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\main_background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\main_background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.437] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12071) returned 1
	[0167.437] CloseHandle (hObject=0x168) returned 1
	[0167.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\main_background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\main_background.png")) returned 0x20
	[0167.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\main_background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\main_background.png")) returned 0x20
	[0167.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\main_background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\main_background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\main_background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\main_background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\main.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.438] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=60636) returned 1
	[0167.438] CloseHandle (hObject=0x168) returned 1
	[0167.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\main.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js\\main.js")) returned 0x20
	[0167.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\main.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js\\main.js")) returned 0x20
	[0167.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\main.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js\\main.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\main.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.439] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29096) returned 1
	[0167.439] CloseHandle (hObject=0x168) returned 1
	[0167.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js\\settings.js")) returned 0x20
	[0167.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js\\settings.js")) returned 0x20
	[0167.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\settings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js\\settings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\js\\settings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\main.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.440] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10574) returned 1
	[0167.440] CloseHandle (hObject=0x168) returned 1
	[0167.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\main.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\main.html")) returned 0x20
	[0167.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\main.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\main.html")) returned 0x20
	[0167.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\main.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\main.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\main.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\MCESidebarCtrl.dll" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\mcesidebarctrl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.443] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53248) returned 1
	[0167.443] CloseHandle (hObject=0x168) returned 1
	[0167.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\MCESidebarCtrl.dll" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\mcesidebarctrl.dll")) returned 0x20
	[0167.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\MCESidebarCtrl.dll" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\mcesidebarctrl.dll")) returned 0x20
	[0167.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\MCESidebarCtrl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\mcesidebarctrl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\MCESidebarCtrl.dll" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\mcesidebarctrl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.444] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22626) returned 1
	[0167.444] CloseHandle (hObject=0x168) returned 1
	[0167.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\settings.html")) returned 0x20
	[0167.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\settings.html")) returned 0x20
	[0167.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\settings.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\settings.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\settings.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.445] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31315) returned 1
	[0167.445] CloseHandle (hObject=0x168) returned 1
	[0167.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png")) returned 0x20
	[0167.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png")) returned 0x20
	[0167.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.448] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4466) returned 1
	[0167.448] CloseHandle (hObject=0x20c) returned 1
	[0167.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css")) returned 0x20
	[0167.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css")) returned 0x20
	[0167.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.449] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5204) returned 1
	[0167.449] CloseHandle (hObject=0x20c) returned 1
	[0167.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0167.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0167.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.453] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1010) returned 1
	[0167.453] CloseHandle (hObject=0x20c) returned 1
	[0167.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml")) returned 0x20
	[0167.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml")) returned 0x20
	[0167.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.454] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47778) returned 1
	[0167.454] CloseHandle (hObject=0x20c) returned 1
	[0167.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js")) returned 0x20
	[0167.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js")) returned 0x20
	[0167.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.455] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9854) returned 1
	[0167.455] CloseHandle (hObject=0x20c) returned 1
	[0167.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0167.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0167.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.456] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3436) returned 1
	[0167.456] CloseHandle (hObject=0x20c) returned 1
	[0167.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html")) returned 0x20
	[0167.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html")) returned 0x20
	[0167.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.458] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5482) returned 1
	[0167.458] CloseHandle (hObject=0x20c) returned 1
	[0167.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html")) returned 0x20
	[0167.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html")) returned 0x20
	[0167.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.459] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9563) returned 1
	[0167.459] CloseHandle (hObject=0x20c) returned 1
	[0167.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png")) returned 0x20
	[0167.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png")) returned 0x20
	[0167.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.462] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2850) returned 1
	[0167.462] CloseHandle (hObject=0x20c) returned 1
	[0167.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png")) returned 0x20
	[0167.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png")) returned 0x20
	[0167.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.588] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21283) returned 1
	[0167.588] CloseHandle (hObject=0x20c) returned 1
	[0167.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png")) returned 0x20
	[0167.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png")) returned 0x20
	[0167.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.588] SetEvent (hEvent=0xfc) returned 1
	[0167.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.589] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26934) returned 1
	[0167.589] CloseHandle (hObject=0x20c) returned 1
	[0167.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png")) returned 0x20
	[0167.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png")) returned 0x20
	[0167.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.590] SetEvent (hEvent=0xfc) returned 1
	[0167.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.590] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29200) returned 1
	[0167.590] CloseHandle (hObject=0x20c) returned 1
	[0167.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png")) returned 0x20
	[0167.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png")) returned 0x20
	[0167.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.592] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24397) returned 1
	[0167.593] CloseHandle (hObject=0x20c) returned 1
	[0167.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png")) returned 0x20
	[0167.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png")) returned 0x20
	[0167.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.593] SetEvent (hEvent=0xfc) returned 1
	[0167.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.594] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15852) returned 1
	[0167.594] CloseHandle (hObject=0x20c) returned 1
	[0167.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png")) returned 0x20
	[0167.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png")) returned 0x20
	[0167.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.596] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25021) returned 1
	[0167.596] CloseHandle (hObject=0x13c) returned 1
	[0167.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png")) returned 0x20
	[0167.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png")) returned 0x20
	[0167.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.596] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28448) returned 1
	[0167.597] CloseHandle (hObject=0x13c) returned 1
	[0167.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png")) returned 0x20
	[0167.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png")) returned 0x20
	[0167.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.771] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18747) returned 1
	[0167.771] CloseHandle (hObject=0x20c) returned 1
	[0167.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png")) returned 0x20
	[0167.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png")) returned 0x20
	[0167.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.807] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1119) returned 1
	[0167.807] CloseHandle (hObject=0x20c) returned 1
	[0167.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png")) returned 0x20
	[0167.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png")) returned 0x20
	[0167.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.808] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=856) returned 1
	[0167.808] CloseHandle (hObject=0x20c) returned 1
	[0167.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png")) returned 0x20
	[0167.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png")) returned 0x20
	[0167.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.809] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1199) returned 1
	[0167.809] CloseHandle (hObject=0x20c) returned 1
	[0167.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png")) returned 0x20
	[0167.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png")) returned 0x20
	[0167.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.938] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3471) returned 1
	[0167.938] CloseHandle (hObject=0x20c) returned 1
	[0167.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png")) returned 0x20
	[0167.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png")) returned 0x20
	[0167.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.939] SetEvent (hEvent=0xfc) returned 1
	[0167.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.941] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3421) returned 1
	[0167.941] CloseHandle (hObject=0x20c) returned 1
	[0167.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png")) returned 0x20
	[0167.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png")) returned 0x20
	[0167.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.941] SetEvent (hEvent=0xfc) returned 1
	[0167.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.942] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=220) returned 1
	[0167.942] CloseHandle (hObject=0x20c) returned 1
	[0167.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png")) returned 0x20
	[0167.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png")) returned 0x20
	[0167.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.944] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3289) returned 1
	[0167.944] CloseHandle (hObject=0x20c) returned 1
	[0167.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png")) returned 0x20
	[0167.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png")) returned 0x20
	[0167.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.944] SetEvent (hEvent=0xfc) returned 1
	[0167.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.945] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2883) returned 1
	[0167.945] CloseHandle (hObject=0x20c) returned 1
	[0167.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png")) returned 0x20
	[0167.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png")) returned 0x20
	[0167.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.947] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3388) returned 1
	[0167.947] CloseHandle (hObject=0x20c) returned 1
	[0167.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png")) returned 0x20
	[0167.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png")) returned 0x20
	[0167.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.948] SetEvent (hEvent=0xfc) returned 1
	[0167.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.948] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3383) returned 1
	[0167.948] CloseHandle (hObject=0x20c) returned 1
	[0167.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png")) returned 0x20
	[0167.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png")) returned 0x20
	[0167.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.950] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3300) returned 1
	[0167.950] CloseHandle (hObject=0x20c) returned 1
	[0167.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png")) returned 0x20
	[0167.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png")) returned 0x20
	[0167.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.951] SetEvent (hEvent=0xfc) returned 1
	[0167.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.952] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6166) returned 1
	[0167.952] CloseHandle (hObject=0x20c) returned 1
	[0167.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png")) returned 0x20
	[0167.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png")) returned 0x20
	[0167.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.953] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8513) returned 1
	[0167.953] CloseHandle (hObject=0x20c) returned 1
	[0167.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png")) returned 0x20
	[0167.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png")) returned 0x20
	[0167.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.956] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2962) returned 1
	[0167.956] CloseHandle (hObject=0x20c) returned 1
	[0167.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css")) returned 0x20
	[0167.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css")) returned 0x20
	[0167.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.958] SetEvent (hEvent=0xfc) returned 1
	[0167.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.959] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3016) returned 1
	[0167.959] CloseHandle (hObject=0x20c) returned 1
	[0167.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css")) returned 0x20
	[0167.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css")) returned 0x20
	[0167.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.960] SetEvent (hEvent=0xfc) returned 1
	[0167.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.961] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1254) returned 1
	[0167.961] CloseHandle (hObject=0x20c) returned 1
	[0167.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0167.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0167.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.963] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2154) returned 1
	[0167.963] CloseHandle (hObject=0x20c) returned 1
	[0167.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html")) returned 0x20
	[0167.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html")) returned 0x20
	[0167.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.963] SetEvent (hEvent=0xfc) returned 1
	[0167.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.964] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1005) returned 1
	[0167.965] CloseHandle (hObject=0x20c) returned 1
	[0167.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml")) returned 0x20
	[0167.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml")) returned 0x20
	[0167.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.965] SetEvent (hEvent=0xfc) returned 1
	[0167.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.153] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=110308) returned 1
	[0168.153] CloseHandle (hObject=0x20c) returned 1
	[0168.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js")) returned 0x20
	[0168.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js")) returned 0x20
	[0168.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.153] SetEvent (hEvent=0xfc) returned 1
	[0168.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.154] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10012) returned 1
	[0168.154] CloseHandle (hObject=0x20c) returned 1
	[0168.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html")) returned 0x20
	[0168.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html")) returned 0x20
	[0168.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.155] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3326) returned 1
	[0168.155] CloseHandle (hObject=0x20c) returned 1
	[0168.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html")) returned 0x20
	[0168.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html")) returned 0x20
	[0168.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.156] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7431) returned 1
	[0168.156] CloseHandle (hObject=0x20c) returned 1
	[0168.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png")) returned 0x20
	[0168.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png")) returned 0x20
	[0168.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.161] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4969) returned 1
	[0168.161] CloseHandle (hObject=0x20c) returned 1
	[0168.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif")) returned 0x20
	[0168.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif")) returned 0x20
	[0168.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.161] SetEvent (hEvent=0xfc) returned 1
	[0168.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.168] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=293) returned 1
	[0168.168] CloseHandle (hObject=0x20c) returned 1
	[0168.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png")) returned 0x20
	[0168.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png")) returned 0x20
	[0168.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.171] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=463) returned 1
	[0168.171] CloseHandle (hObject=0x20c) returned 1
	[0168.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png")) returned 0x20
	[0168.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png")) returned 0x20
	[0168.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.172] SetEvent (hEvent=0xfc) returned 1
	[0168.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.172] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=280) returned 1
	[0168.173] CloseHandle (hObject=0x20c) returned 1
	[0168.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png")) returned 0x20
	[0168.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png")) returned 0x20
	[0168.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.175] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=451) returned 1
	[0168.175] CloseHandle (hObject=0x20c) returned 1
	[0168.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png")) returned 0x20
	[0168.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png")) returned 0x20
	[0168.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.175] SetEvent (hEvent=0xfc) returned 1
	[0168.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.176] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4395) returned 1
	[0168.176] CloseHandle (hObject=0x20c) returned 1
	[0168.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png")) returned 0x20
	[0168.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png")) returned 0x20
	[0168.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.178] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=252) returned 1
	[0168.178] CloseHandle (hObject=0x20c) returned 1
	[0168.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png")) returned 0x20
	[0168.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png")) returned 0x20
	[0168.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.179] SetEvent (hEvent=0xfc) returned 1
	[0168.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.179] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2979) returned 1
	[0168.179] CloseHandle (hObject=0x20c) returned 1
	[0168.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png")) returned 0x20
	[0168.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png")) returned 0x20
	[0168.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.181] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2926) returned 1
	[0168.181] CloseHandle (hObject=0x20c) returned 1
	[0168.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png")) returned 0x20
	[0168.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png")) returned 0x20
	[0168.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.182] SetEvent (hEvent=0xfc) returned 1
	[0168.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.182] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3242) returned 1
	[0168.183] CloseHandle (hObject=0x20c) returned 1
	[0168.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png")) returned 0x20
	[0168.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png")) returned 0x20
	[0168.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.185] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5980) returned 1
	[0168.185] CloseHandle (hObject=0x20c) returned 1
	[0168.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png")) returned 0x20
	[0168.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png")) returned 0x20
	[0168.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.185] SetEvent (hEvent=0xfc) returned 1
	[0168.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.186] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8942) returned 1
	[0168.186] CloseHandle (hObject=0x20c) returned 1
	[0168.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png")) returned 0x20
	[0168.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png")) returned 0x20
	[0168.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.189] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1696) returned 1
	[0168.189] CloseHandle (hObject=0x20c) returned 1
	[0168.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif")) returned 0x20
	[0168.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif")) returned 0x20
	[0168.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.189] SetEvent (hEvent=0xfc) returned 1
	[0168.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.190] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2957) returned 1
	[0168.190] CloseHandle (hObject=0x20c) returned 1
	[0168.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png")) returned 0x20
	[0168.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png")) returned 0x20
	[0168.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.192] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2999) returned 1
	[0168.192] CloseHandle (hObject=0x20c) returned 1
	[0168.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png")) returned 0x20
	[0168.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png")) returned 0x20
	[0168.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.192] SetEvent (hEvent=0xfc) returned 1
	[0168.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.193] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1266) returned 1
	[0168.193] CloseHandle (hObject=0x20c) returned 1
	[0168.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png")) returned 0x20
	[0168.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png")) returned 0x20
	[0168.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.315] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6166) returned 1
	[0168.317] CloseHandle (hObject=0x168) returned 1
	[0168.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png")) returned 0x20
	[0168.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png")) returned 0x20
	[0168.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.343] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2982) returned 1
	[0168.343] CloseHandle (hObject=0x168) returned 1
	[0168.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png")) returned 0x20
	[0168.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png")) returned 0x20
	[0168.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.344] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=400256) returned 1
	[0168.344] CloseHandle (hObject=0x168) returned 1
	[0168.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg")) returned 0x20
	[0168.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg")) returned 0x20
	[0168.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.345] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6166) returned 1
	[0168.345] CloseHandle (hObject=0x168) returned 1
	[0168.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png")) returned 0x20
	[0168.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png")) returned 0x20
	[0168.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.488] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12896) returned 1
	[0168.490] CloseHandle (hObject=0x208) returned 1
	[0168.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\drag.png")) returned 0x20
	[0168.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\drag.png")) returned 0x20
	[0168.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.617] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=752) returned 1
	[0168.617] CloseHandle (hObject=0x20c) returned 1
	[0168.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png")) returned 0x20
	[0168.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png")) returned 0x20
	[0168.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.624] SetEvent (hEvent=0xfc) returned 1
	[0168.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.662] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43) returned 1
	[0168.662] CloseHandle (hObject=0x208) returned 1
	[0168.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif")) returned 0x20
	[0168.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif")) returned 0x20
	[0168.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.663] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4066) returned 1
	[0168.663] CloseHandle (hObject=0x208) returned 1
	[0168.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png")) returned 0x20
	[0168.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png")) returned 0x20
	[0168.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.664] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4405) returned 1
	[0168.664] CloseHandle (hObject=0x208) returned 1
	[0168.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png")) returned 0x20
	[0168.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png")) returned 0x20
	[0168.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.665] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4405) returned 1
	[0168.666] CloseHandle (hObject=0x208) returned 1
	[0168.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png")) returned 0x20
	[0168.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png")) returned 0x20
	[0168.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.666] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2846) returned 1
	[0168.666] CloseHandle (hObject=0x208) returned 1
	[0168.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png")) returned 0x20
	[0168.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png")) returned 0x20
	[0168.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.667] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5457) returned 1
	[0168.667] CloseHandle (hObject=0x208) returned 1
	[0168.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png")) returned 0x20
	[0168.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png")) returned 0x20
	[0168.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.668] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4066) returned 1
	[0168.668] CloseHandle (hObject=0x208) returned 1
	[0168.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png")) returned 0x20
	[0168.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png")) returned 0x20
	[0168.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.669] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5206) returned 1
	[0168.669] CloseHandle (hObject=0x208) returned 1
	[0168.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png")) returned 0x20
	[0168.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png")) returned 0x20
	[0168.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.671] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5889) returned 1
	[0168.671] CloseHandle (hObject=0x208) returned 1
	[0168.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png")) returned 0x20
	[0168.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png")) returned 0x20
	[0168.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.673] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5889) returned 1
	[0168.673] CloseHandle (hObject=0x208) returned 1
	[0168.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png")) returned 0x20
	[0168.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png")) returned 0x20
	[0168.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.674] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5889) returned 1
	[0168.674] CloseHandle (hObject=0x208) returned 1
	[0168.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png")) returned 0x20
	[0168.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png")) returned 0x20
	[0168.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.675] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5457) returned 1
	[0168.675] CloseHandle (hObject=0x208) returned 1
	[0168.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png")) returned 0x20
	[0168.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png")) returned 0x20
	[0168.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.676] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5457) returned 1
	[0168.677] CloseHandle (hObject=0x208) returned 1
	[0168.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png")) returned 0x20
	[0168.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png")) returned 0x20
	[0168.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.678] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12338) returned 1
	[0168.678] CloseHandle (hObject=0x208) returned 1
	[0168.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png")) returned 0x20
	[0168.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png")) returned 0x20
	[0168.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.679] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=426) returned 1
	[0168.679] CloseHandle (hObject=0x208) returned 1
	[0168.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png")) returned 0x20
	[0168.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png")) returned 0x20
	[0168.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.680] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3294) returned 1
	[0168.680] CloseHandle (hObject=0x208) returned 1
	[0168.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png")) returned 0x20
	[0168.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png")) returned 0x20
	[0168.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.861] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3295) returned 1
	[0168.861] CloseHandle (hObject=0x13c) returned 1
	[0168.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png")) returned 0x20
	[0168.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png")) returned 0x20
	[0168.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.861] SetEvent (hEvent=0xfc) returned 1
	[0168.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.862] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11882) returned 1
	[0168.862] CloseHandle (hObject=0x13c) returned 1
	[0168.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png")) returned 0x20
	[0168.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png")) returned 0x20
	[0168.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.992] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8564) returned 1
	[0168.992] CloseHandle (hObject=0x13c) returned 1
	[0168.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png")) returned 0x20
	[0168.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png")) returned 0x20
	[0168.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.993] SetEvent (hEvent=0xfc) returned 1
	[0168.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.993] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12401) returned 1
	[0168.994] CloseHandle (hObject=0x13c) returned 1
	[0168.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png")) returned 0x20
	[0168.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png")) returned 0x20
	[0168.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0169.161] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12883) returned 1
	[0169.161] CloseHandle (hObject=0x208) returned 1
	[0169.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png")) returned 0x20
	[0169.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png")) returned 0x20
	[0169.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.162] SetEvent (hEvent=0xfc) returned 1
	[0169.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.259] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25685) returned 1
	[0169.259] CloseHandle (hObject=0x13c) returned 1
	[0169.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png")) returned 0x20
	[0169.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png")) returned 0x20
	[0169.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.260] SetEvent (hEvent=0xfc) returned 1
	[0169.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.379] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25122) returned 1
	[0169.379] CloseHandle (hObject=0x20c) returned 1
	[0169.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png")) returned 0x20
	[0169.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png")) returned 0x20
	[0169.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.380] SetEvent (hEvent=0xfc) returned 1
	[0169.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leesmij.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.496] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16867) returned 1
	[0169.496] CloseHandle (hObject=0x13c) returned 1
	[0169.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leesmij.htm")) returned 0x20
	[0169.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leesmij.htm")) returned 0x20
	[0169.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leesmij.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leesmij.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.496] SetEvent (hEvent=0xfc) returned 1
	[0169.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\llegiu-me.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.497] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16892) returned 1
	[0169.497] CloseHandle (hObject=0x13c) returned 1
	[0169.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\llegiu-me.htm")) returned 0x20
	[0169.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\llegiu-me.htm")) returned 0x20
	[0169.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\llegiu-me.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\llegiu-me.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lueminut.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.498] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17230) returned 1
	[0169.498] CloseHandle (hObject=0x13c) returned 1
	[0169.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lueminut.htm")) returned 0x20
	[0169.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lueminut.htm")) returned 0x20
	[0169.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lueminut.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lueminut.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\A3DUtils.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\a3dutils.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.499] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=205720) returned 1
	[0169.499] CloseHandle (hObject=0x13c) returned 1
	[0169.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\A3DUtils.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\a3dutils.dll")) returned 0x20
	[0169.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\A3DUtils.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\a3dutils.dll")) returned 0x20
	[0169.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\A3DUtils.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\a3dutils.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\A3DUtils.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\a3dutils.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.500] SetEvent (hEvent=0xfc) returned 1
	[0169.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ACE.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ace.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.502] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=818568) returned 1
	[0169.502] CloseHandle (hObject=0x13c) returned 1
	[0169.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ACE.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ace.dll")) returned 0x20
	[0169.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ACE.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ace.dll")) returned 0x20
	[0169.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ACE.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ace.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ACE.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ace.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.502] SetEvent (hEvent=0xfc) returned 1
	[0169.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrobroker.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.503] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=294808) returned 1
	[0169.503] CloseHandle (hObject=0x13c) returned 1
	[0169.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrobroker.exe")) returned 0x20
	[0169.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrobroker.exe")) returned 0x20
	[0169.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroBroker.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrobroker.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrobroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.504] SetEvent (hEvent=0xfc) returned 1
	[0169.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Acrofx32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrofx32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.504] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=63384) returned 1
	[0169.504] CloseHandle (hObject=0x13c) returned 1
	[0169.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Acrofx32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrofx32.dll")) returned 0x20
	[0169.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Acrofx32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrofx32.dll")) returned 0x20
	[0169.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Acrofx32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrofx32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Acrofx32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrofx32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0169.506] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23724952) returned 1
	[0169.506] CloseHandle (hObject=0x208) returned 1
	[0169.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32.dll")) returned 0x20
	[0169.506] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0169.507] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32.dll")) returned 0
	[0169.507] SetEvent (hEvent=0xfc) returned 1
	[0169.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0169.507] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1289624) returned 1
	[0169.507] CloseHandle (hObject=0x208) returned 1
	[0169.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32.exe")) returned 0x20
	[0169.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32.exe")) returned 0x20
	[0169.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32Info.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32info.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0169.508] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17824) returned 1
	[0169.508] CloseHandle (hObject=0x208) returned 1
	[0169.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32Info.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32info.exe")) returned 0x20
	[0169.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32Info.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32info.exe")) returned 0x20
	[0169.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32Info.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32info.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroRd32Info.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrord32info.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroTextExtractor.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrotextextractor.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.510] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49064) returned 1
	[0169.510] CloseHandle (hObject=0x13c) returned 1
	[0169.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroTextExtractor.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrotextextractor.exe")) returned 0x20
	[0169.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroTextExtractor.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrotextextractor.exe")) returned 0x20
	[0169.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroTextExtractor.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrotextextractor.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AcroTextExtractor.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\acrotextextractor.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.511] SetEvent (hEvent=0xfc) returned 1
	[0169.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobe.reader.dependencies.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.512] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1472) returned 1
	[0169.512] CloseHandle (hObject=0x13c) returned 1
	[0169.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobe.reader.dependencies.manifest")) returned 0x20
	[0169.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobe.reader.dependencies.manifest")) returned 0x20
	[0169.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobe.reader.dependencies.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobe.reader.dependencies.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.512] SetEvent (hEvent=0xfc) returned 1
	[0169.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeCollabSync.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobecollabsync.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.514] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1216416) returned 1
	[0169.514] CloseHandle (hObject=0x214) returned 1
	[0169.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeCollabSync.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobecollabsync.exe")) returned 0x20
	[0169.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeCollabSync.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobecollabsync.exe")) returned 0x20
	[0169.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeCollabSync.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobecollabsync.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeCollabSync.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobecollabsync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeLinguistic.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobelinguistic.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.516] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=757664) returned 1
	[0169.516] CloseHandle (hObject=0x214) returned 1
	[0169.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeLinguistic.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobelinguistic.dll")) returned 0x20
	[0169.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeLinguistic.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobelinguistic.dll")) returned 0x20
	[0169.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeLinguistic.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobelinguistic.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeLinguistic.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobelinguistic.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\adoberfp.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adoberfp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.518] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=226200) returned 1
	[0169.518] CloseHandle (hObject=0x214) returned 1
	[0169.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\adoberfp.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adoberfp.dll")) returned 0x20
	[0169.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\adoberfp.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adoberfp.dll")) returned 0x20
	[0169.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\adoberfp.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adoberfp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\adoberfp.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adoberfp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeXMP.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobexmp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.519] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=304536) returned 1
	[0169.519] CloseHandle (hObject=0x214) returned 1
	[0169.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeXMP.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobexmp.dll")) returned 0x20
	[0169.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeXMP.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobexmp.dll")) returned 0x20
	[0169.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeXMP.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobexmp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AdobeXMP.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\adobexmp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGM.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\agm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.520] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5503368) returned 1
	[0169.520] CloseHandle (hObject=0x214) returned 1
	[0169.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGM.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\agm.dll")) returned 0x20
	[0169.520] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGM.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\agm.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGM.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\agm.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0169.520] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGM.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\agm.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGM.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\agm.dll")) returned 0
	[0169.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\agmgpuoptin.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.521] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1727) returned 1
	[0169.521] CloseHandle (hObject=0x214) returned 1
	[0169.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\agmgpuoptin.ini")) returned 0x20
	[0169.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\agmgpuoptin.ini")) returned 0x20
	[0169.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\agmgpuoptin.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AGMGPUOptIn.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\agmgpuoptin.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ahclient.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ahclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.618] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222920) returned 1
	[0169.618] CloseHandle (hObject=0x20c) returned 1
	[0169.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ahclient.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ahclient.dll")) returned 0x20
	[0169.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ahclient.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ahclient.dll")) returned 0x20
	[0169.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ahclient.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ahclient.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ahclient.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ahclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.619] SetEvent (hEvent=0xfc) returned 1
	[0169.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.723] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.723] CloseHandle (hObject=0x13c) returned 1
	[0169.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.chs")) returned 0x20
	[0169.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.chs")) returned 0x20
	[0169.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.723] SetEvent (hEvent=0xfc) returned 1
	[0169.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.724] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.724] CloseHandle (hObject=0x13c) returned 1
	[0169.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.euq")) returned 0x20
	[0169.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.euq")) returned 0x20
	[0169.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.725] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0169.725] CloseHandle (hObject=0x13c) returned 1
	[0169.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.fra")) returned 0x20
	[0169.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.fra")) returned 0x20
	[0169.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.726] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.726] CloseHandle (hObject=0x13c) returned 1
	[0169.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.hrv")) returned 0x20
	[0169.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.hrv")) returned 0x20
	[0169.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.727] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.727] CloseHandle (hObject=0x13c) returned 1
	[0169.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.hun")) returned 0x20
	[0169.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.hun")) returned 0x20
	[0169.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.728] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.728] CloseHandle (hObject=0x13c) returned 1
	[0169.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ita")) returned 0x20
	[0169.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ita")) returned 0x20
	[0169.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.729] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6144) returned 1
	[0169.729] CloseHandle (hObject=0x13c) returned 1
	[0169.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.jpn")) returned 0x20
	[0169.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.jpn")) returned 0x20
	[0169.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.730] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.730] CloseHandle (hObject=0x13c) returned 1
	[0169.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.kor")) returned 0x20
	[0169.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.kor")) returned 0x20
	[0169.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.731] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.731] CloseHandle (hObject=0x13c) returned 1
	[0169.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.nld")) returned 0x20
	[0169.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.nld")) returned 0x20
	[0169.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.732] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.732] CloseHandle (hObject=0x13c) returned 1
	[0169.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.nor")) returned 0x20
	[0169.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.nor")) returned 0x20
	[0169.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0169.733] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0169.733] CloseHandle (hObject=0x208) returned 1
	[0169.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.pol")) returned 0x20
	[0169.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.pol")) returned 0x20
	[0169.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.734] SetEvent (hEvent=0xfc) returned 1
	[0169.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0169.734] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.734] CloseHandle (hObject=0x208) returned 1
	[0169.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ptb")) returned 0x20
	[0169.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ptb")) returned 0x20
	[0169.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0169.736] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0169.736] CloseHandle (hObject=0x208) returned 1
	[0169.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.rum")) returned 0x20
	[0169.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.rum")) returned 0x20
	[0169.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0169.737] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.737] CloseHandle (hObject=0x208) returned 1
	[0169.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.rus")) returned 0x20
	[0169.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.rus")) returned 0x20
	[0169.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0169.740] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.740] CloseHandle (hObject=0x208) returned 1
	[0169.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.sky")) returned 0x20
	[0169.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.sky")) returned 0x20
	[0169.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.742] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.742] CloseHandle (hObject=0x13c) returned 1
	[0169.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.slv")) returned 0x20
	[0169.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.slv")) returned 0x20
	[0169.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.743] SetEvent (hEvent=0xfc) returned 1
	[0169.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.743] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.743] CloseHandle (hObject=0x13c) returned 1
	[0169.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo")) returned 0x20
	[0169.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo")) returned 0x20
	[0169.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.745] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.745] CloseHandle (hObject=0x13c) returned 1
	[0169.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.sve")) returned 0x20
	[0169.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.sve")) returned 0x20
	[0169.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.746] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.746] CloseHandle (hObject=0x13c) returned 1
	[0169.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.tur")) returned 0x20
	[0169.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.tur")) returned 0x20
	[0169.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.747] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.747] CloseHandle (hObject=0x13c) returned 1
	[0169.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ukr")) returned 0x20
	[0169.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ukr")) returned 0x20
	[0169.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\authplay.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\authplay.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.748] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6222744) returned 1
	[0169.748] CloseHandle (hObject=0x13c) returned 1
	[0169.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\authplay.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\authplay.dll")) returned 0x20
	[0169.748] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\authplay.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\authplay.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\authplay.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\authplay.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0169.749] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\authplay.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\authplay.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\authplay.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\authplay.dll")) returned 0
	[0169.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AXE8SharedExpat.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\axe8sharedexpat.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.749] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=174496) returned 1
	[0169.749] CloseHandle (hObject=0x13c) returned 1
	[0169.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AXE8SharedExpat.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\axe8sharedexpat.dll")) returned 0x20
	[0169.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AXE8SharedExpat.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\axe8sharedexpat.dll")) returned 0x20
	[0169.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AXE8SharedExpat.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\axe8sharedexpat.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AXE8SharedExpat.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\axe8sharedexpat.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AXSLE.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\axsle.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.750] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=595344) returned 1
	[0169.750] CloseHandle (hObject=0x13c) returned 1
	[0169.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AXSLE.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\axsle.dll")) returned 0x20
	[0169.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AXSLE.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\axsle.dll")) returned 0x20
	[0169.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AXSLE.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\axsle.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AXSLE.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\axsle.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\BIB.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\bib.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.752] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=110472) returned 1
	[0169.752] CloseHandle (hObject=0x13c) returned 1
	[0169.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\BIB.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\bib.dll")) returned 0x20
	[0169.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\BIB.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\bib.dll")) returned 0x20
	[0169.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\BIB.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\bib.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\BIB.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\bib.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\BIBUtils.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\bibutils.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.753] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=154520) returned 1
	[0169.753] CloseHandle (hObject=0x13c) returned 1
	[0169.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\BIBUtils.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\bibutils.dll")) returned 0x20
	[0169.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\BIBUtils.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\bibutils.dll")) returned 0x20
	[0169.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\BIBUtils.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\bibutils.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\BIBUtils.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\bibutils.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.756] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.756] CloseHandle (hObject=0x214) returned 1
	[0169.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat")) returned 0x20
	[0169.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat")) returned 0x20
	[0169.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.941] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.941] CloseHandle (hObject=0x20c) returned 1
	[0169.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.chs")) returned 0x20
	[0169.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.chs")) returned 0x20
	[0169.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.942] SetEvent (hEvent=0xfc) returned 1
	[0169.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.943] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.943] CloseHandle (hObject=0x20c) returned 1
	[0169.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cze")) returned 0x20
	[0169.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cze")) returned 0x20
	[0169.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.943] SetEvent (hEvent=0xfc) returned 1
	[0169.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.944] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0169.944] CloseHandle (hObject=0x20c) returned 1
	[0169.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dan")) returned 0x20
	[0169.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dan")) returned 0x20
	[0169.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.143] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0170.143] CloseHandle (hObject=0x13c) returned 1
	[0170.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.deu")) returned 0x20
	[0170.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.deu")) returned 0x20
	[0170.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.346] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77228) returned 1
	[0170.346] CloseHandle (hObject=0x214) returned 1
	[0170.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html")) returned 0x20
	[0170.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html")) returned 0x20
	[0170.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.360] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1412608) returned 1
	[0170.360] CloseHandle (hObject=0x214) returned 1
	[0170.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat")) returned 0x20
	[0170.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat")) returned 0x20
	[0170.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\RdLang32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\rdlang32.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.361] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0170.361] CloseHandle (hObject=0x214) returned 1
	[0170.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat")) returned 0x20
	[0170.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat")) returned 0x20
	[0170.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\ReadOutLoud.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\readoutloud.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.362] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0170.362] CloseHandle (hObject=0x214) returned 1
	[0170.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat")) returned 0x20
	[0170.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat")) returned 0x20
	[0170.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\reflow.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\reflow.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.420] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19456) returned 1
	[0170.420] CloseHandle (hObject=0x20c) returned 1
	[0170.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat")) returned 0x20
	[0170.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat")) returned 0x20
	[0170.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SaveAsRTF.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\saveasrtf.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.420] SetEvent (hEvent=0xfc) returned 1
	[0170.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.453] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16896) returned 1
	[0170.453] CloseHandle (hObject=0x20c) returned 1
	[0170.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat")) returned 0x20
	[0170.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat")) returned 0x20
	[0170.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\SendMail.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\sendmail.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.453] SetEvent (hEvent=0xfc) returned 1
	[0170.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.454] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38278) returned 1
	[0170.454] CloseHandle (hObject=0x20c) returned 1
	[0170.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\dexshare.asfx")) returned 0x20
	[0170.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\dexshare.asfx")) returned 0x20
	[0170.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.458] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=232) returned 1
	[0170.458] CloseHandle (hObject=0x20c) returned 1
	[0170.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\services.asfx")) returned 0x20
	[0170.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\services.asfx")) returned 0x20
	[0170.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.458] SetEvent (hEvent=0xfc) returned 1
	[0170.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.459] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0170.459] CloseHandle (hObject=0x20c) returned 1
	[0170.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat")) returned 0x20
	[0170.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat")) returned 0x20
	[0170.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Spelling.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\spelling.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.460] SetEvent (hEvent=0xfc) returned 1
	[0170.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.461] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0170.461] CloseHandle (hObject=0x20c) returned 1
	[0170.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat")) returned 0x20
	[0170.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat")) returned 0x20
	[0170.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\updater.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\updater.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.461] SetEvent (hEvent=0xfc) returned 1
	[0170.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.462] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29184) returned 1
	[0170.462] CloseHandle (hObject=0x20c) returned 1
	[0170.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat")) returned 0x20
	[0170.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat")) returned 0x20
	[0170.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\WebLink.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\weblink.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\accessibility.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.464] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43008) returned 1
	[0170.464] CloseHandle (hObject=0x20c) returned 1
	[0170.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\accessibility.cze")) returned 0x20
	[0170.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\accessibility.cze")) returned 0x20
	[0170.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\accessibility.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\accessibility.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\accessibility.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.464] SetEvent (hEvent=0xfc) returned 1
	[0170.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\acroform.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.466] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=409088) returned 1
	[0170.466] CloseHandle (hObject=0x20c) returned 1
	[0170.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\acroform.cze")) returned 0x20
	[0170.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\acroform.cze")) returned 0x20
	[0170.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\acroform.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Acroform.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\acroform.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.466] SetEvent (hEvent=0xfc) returned 1
	[0170.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\adobecollabsync.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.467] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0170.467] CloseHandle (hObject=0x20c) returned 1
	[0170.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\adobecollabsync.cze")) returned 0x20
	[0170.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\adobecollabsync.cze")) returned 0x20
	[0170.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\adobecollabsync.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\AdobeCollabSync.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\adobecollabsync.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.468] SetEvent (hEvent=0xfc) returned 1
	[0170.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\annots.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.468] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=486400) returned 1
	[0170.468] CloseHandle (hObject=0x20c) returned 1
	[0170.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\annots.cze")) returned 0x20
	[0170.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\annots.cze")) returned 0x20
	[0170.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\annots.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Annots.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\annots.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\brdlang32.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.472] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12800) returned 1
	[0170.472] CloseHandle (hObject=0x20c) returned 1
	[0170.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\brdlang32.cze")) returned 0x20
	[0170.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\brdlang32.cze")) returned 0x20
	[0170.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\brdlang32.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\BRdlang32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\brdlang32.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\checkers.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.473] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=121344) returned 1
	[0170.473] CloseHandle (hObject=0x20c) returned 1
	[0170.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\checkers.cze")) returned 0x20
	[0170.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\checkers.cze")) returned 0x20
	[0170.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\checkers.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Checkers.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\checkers.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\digsig.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.474] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=122880) returned 1
	[0170.474] CloseHandle (hObject=0x20c) returned 1
	[0170.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\digsig.cze")) returned 0x20
	[0170.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\digsig.cze")) returned 0x20
	[0170.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\digsig.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DigSig.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\digsig.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\dva.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.475] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17920) returned 1
	[0170.475] CloseHandle (hObject=0x20c) returned 1
	[0170.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\dva.cze")) returned 0x20
	[0170.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\dva.cze")) returned 0x20
	[0170.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\dva.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\DVA.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\dva.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ebook.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.477] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0170.477] CloseHandle (hObject=0x20c) returned 1
	[0170.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ebook.cze")) returned 0x20
	[0170.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ebook.cze")) returned 0x20
	[0170.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ebook.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\eBook.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ebook.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\escript.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.478] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39936) returned 1
	[0170.478] CloseHandle (hObject=0x20c) returned 1
	[0170.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\escript.cze")) returned 0x20
	[0170.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\escript.cze")) returned 0x20
	[0170.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\escript.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\EScript.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\escript.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ia32.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.479] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0170.479] CloseHandle (hObject=0x20c) returned 1
	[0170.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ia32.cze")) returned 0x20
	[0170.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ia32.cze")) returned 0x20
	[0170.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ia32.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\IA32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ia32.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\makeaccessible.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.564] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=72192) returned 1
	[0170.564] CloseHandle (hObject=0x214) returned 1
	[0170.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\makeaccessible.cze")) returned 0x20
	[0170.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\makeaccessible.cze")) returned 0x20
	[0170.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\makeaccessible.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\makeaccessible.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\makeaccessible.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.564] SetEvent (hEvent=0xfc) returned 1
	[0170.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ppklite.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.565] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=512000) returned 1
	[0170.565] CloseHandle (hObject=0x214) returned 1
	[0170.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ppklite.cze")) returned 0x20
	[0170.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ppklite.cze")) returned 0x20
	[0170.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ppklite.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\PPKLite.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\ppklite.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\rdlang32.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.566] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1331200) returned 1
	[0170.566] CloseHandle (hObject=0x214) returned 1
	[0170.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\rdlang32.cze")) returned 0x20
	[0170.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\rdlang32.cze")) returned 0x20
	[0170.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\rdlang32.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\RdLang32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\rdlang32.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\readoutloud.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.567] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0170.567] CloseHandle (hObject=0x214) returned 1
	[0170.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\readoutloud.cze")) returned 0x20
	[0170.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\readoutloud.cze")) returned 0x20
	[0170.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\readoutloud.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\ReadOutLoud.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\readoutloud.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.567] SetEvent (hEvent=0xfc) returned 1
	[0170.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\reflow.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.569] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0170.569] CloseHandle (hObject=0x214) returned 1
	[0170.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\reflow.cze")) returned 0x20
	[0170.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\reflow.cze")) returned 0x20
	[0170.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\reflow.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\reflow.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\reflow.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.569] SetEvent (hEvent=0xfc) returned 1
	[0170.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\saveasrtf.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.570] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17920) returned 1
	[0170.570] CloseHandle (hObject=0x214) returned 1
	[0170.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\saveasrtf.cze")) returned 0x20
	[0170.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\saveasrtf.cze")) returned 0x20
	[0170.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\saveasrtf.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SaveAsRTF.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\saveasrtf.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.571] SetEvent (hEvent=0xfc) returned 1
	[0170.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\search.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.572] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23040) returned 1
	[0170.572] CloseHandle (hObject=0x214) returned 1
	[0170.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\search.cze")) returned 0x20
	[0170.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\search.cze")) returned 0x20
	[0170.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\search.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Search.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\search.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.572] SetEvent (hEvent=0xfc) returned 1
	[0170.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\sendmail.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.573] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15360) returned 1
	[0170.573] CloseHandle (hObject=0x214) returned 1
	[0170.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\sendmail.cze")) returned 0x20
	[0170.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\sendmail.cze")) returned 0x20
	[0170.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\sendmail.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\SendMail.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\sendmail.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.609] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37698) returned 1
	[0170.609] CloseHandle (hObject=0x214) returned 1
	[0170.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\dexshare.asfx")) returned 0x20
	[0170.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\dexshare.asfx")) returned 0x20
	[0170.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.609] SetEvent (hEvent=0xfc) returned 1
	[0170.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.610] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=229) returned 1
	[0170.610] CloseHandle (hObject=0x214) returned 1
	[0170.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\services.asfx")) returned 0x20
	[0170.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\services.asfx")) returned 0x20
	[0170.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\spelling.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.612] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10240) returned 1
	[0170.612] CloseHandle (hObject=0x214) returned 1
	[0170.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\spelling.cze")) returned 0x20
	[0170.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\spelling.cze")) returned 0x20
	[0170.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\spelling.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Spelling.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\spelling.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.612] SetEvent (hEvent=0xfc) returned 1
	[0170.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\updater.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.613] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0170.613] CloseHandle (hObject=0x214) returned 1
	[0170.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\updater.cze")) returned 0x20
	[0170.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\updater.cze")) returned 0x20
	[0170.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\updater.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\updater.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\updater.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\weblink.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.614] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27648) returned 1
	[0170.614] CloseHandle (hObject=0x214) returned 1
	[0170.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\weblink.cze")) returned 0x20
	[0170.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\weblink.cze")) returned 0x20
	[0170.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\weblink.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\WebLink.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\weblink.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\accessibility.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.616] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42496) returned 1
	[0170.616] CloseHandle (hObject=0x214) returned 1
	[0170.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\accessibility.dan")) returned 0x20
	[0170.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\accessibility.dan")) returned 0x20
	[0170.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\accessibility.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\accessibility.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\accessibility.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.617] SetEvent (hEvent=0xfc) returned 1
	[0170.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\acroform.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.618] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=411136) returned 1
	[0170.618] CloseHandle (hObject=0x20c) returned 1
	[0170.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\acroform.dan")) returned 0x20
	[0170.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\acroform.dan")) returned 0x20
	[0170.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\acroform.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Acroform.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\acroform.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.618] SetEvent (hEvent=0xfc) returned 1
	[0170.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\adobecollabsync.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.619] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0170.619] CloseHandle (hObject=0x20c) returned 1
	[0170.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\adobecollabsync.dan")) returned 0x20
	[0170.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\adobecollabsync.dan")) returned 0x20
	[0170.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\adobecollabsync.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\AdobeCollabSync.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\adobecollabsync.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.620] SetEvent (hEvent=0xfc) returned 1
	[0170.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\annots.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.621] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=484352) returned 1
	[0170.621] CloseHandle (hObject=0x20c) returned 1
	[0170.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\annots.dan")) returned 0x20
	[0170.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\annots.dan")) returned 0x20
	[0170.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\annots.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Annots.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\annots.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.621] SetEvent (hEvent=0xfc) returned 1
	[0170.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\brdlang32.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.622] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13312) returned 1
	[0170.622] CloseHandle (hObject=0x20c) returned 1
	[0170.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\brdlang32.dan")) returned 0x20
	[0170.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\brdlang32.dan")) returned 0x20
	[0170.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\brdlang32.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\BRdlang32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\brdlang32.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\checkers.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.624] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=122368) returned 1
	[0170.624] CloseHandle (hObject=0x13c) returned 1
	[0170.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\checkers.dan")) returned 0x20
	[0170.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\checkers.dan")) returned 0x20
	[0170.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\checkers.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Checkers.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\checkers.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.624] SetEvent (hEvent=0xfc) returned 1
	[0170.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\digsig.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.627] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=127488) returned 1
	[0170.627] CloseHandle (hObject=0x20c) returned 1
	[0170.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\digsig.dan")) returned 0x20
	[0170.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\digsig.dan")) returned 0x20
	[0170.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\digsig.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DigSig.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\digsig.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.627] SetEvent (hEvent=0xfc) returned 1
	[0170.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\dva.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.628] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18944) returned 1
	[0170.628] CloseHandle (hObject=0x20c) returned 1
	[0170.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\dva.dan")) returned 0x20
	[0170.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\dva.dan")) returned 0x20
	[0170.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\dva.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\DVA.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\dva.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.629] SetEvent (hEvent=0xfc) returned 1
	[0170.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ebook.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.630] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0170.630] CloseHandle (hObject=0x20c) returned 1
	[0170.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ebook.dan")) returned 0x20
	[0170.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ebook.dan")) returned 0x20
	[0170.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ebook.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\eBook.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ebook.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.630] SetEvent (hEvent=0xfc) returned 1
	[0170.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\escript.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.631] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40448) returned 1
	[0170.631] CloseHandle (hObject=0x20c) returned 1
	[0170.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\escript.dan")) returned 0x20
	[0170.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\escript.dan")) returned 0x20
	[0170.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\escript.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\EScript.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\escript.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ia32.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.632] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0170.632] CloseHandle (hObject=0x20c) returned 1
	[0170.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ia32.dan")) returned 0x20
	[0170.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ia32.dan")) returned 0x20
	[0170.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ia32.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\IA32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ia32.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\makeaccessible.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0170.634] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0170.634] CloseHandle (hObject=0x208) returned 1
	[0170.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\makeaccessible.dan")) returned 0x20
	[0170.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\makeaccessible.dan")) returned 0x20
	[0170.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\makeaccessible.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\makeaccessible.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\makeaccessible.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\multimedia.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0170.635] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=78848) returned 1
	[0170.635] CloseHandle (hObject=0x208) returned 1
	[0170.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\multimedia.dan")) returned 0x20
	[0170.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\multimedia.dan")) returned 0x20
	[0170.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\multimedia.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Multimedia.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\multimedia.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\pddom.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0170.636] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0170.636] CloseHandle (hObject=0x208) returned 1
	[0170.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\pddom.dan")) returned 0x20
	[0170.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\pddom.dan")) returned 0x20
	[0170.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\pddom.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\pddom.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\pddom.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ppklite.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0170.637] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=520192) returned 1
	[0170.637] CloseHandle (hObject=0x208) returned 1
	[0170.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ppklite.dan")) returned 0x20
	[0170.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ppklite.dan")) returned 0x20
	[0170.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ppklite.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\PPKLITE.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\ppklite.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\rdlang32.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.765] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1330176) returned 1
	[0170.765] CloseHandle (hObject=0x20c) returned 1
	[0170.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\rdlang32.dan")) returned 0x20
	[0170.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\rdlang32.dan")) returned 0x20
	[0170.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\rdlang32.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\RdLang32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\rdlang32.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.765] SetEvent (hEvent=0xfc) returned 1
	[0170.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\reflow.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.937] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0170.937] CloseHandle (hObject=0x20c) returned 1
	[0170.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\reflow.dan")) returned 0x20
	[0170.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\reflow.dan")) returned 0x20
	[0170.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\reflow.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\reflow.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\reflow.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.937] SetEvent (hEvent=0xfc) returned 1
	[0170.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\weblink.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.938] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28160) returned 1
	[0170.938] CloseHandle (hObject=0x20c) returned 1
	[0170.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\weblink.esp")) returned 0x20
	[0170.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\weblink.esp")) returned 0x20
	[0170.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\weblink.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Weblink.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\weblink.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.939] SetEvent (hEvent=0xfc) returned 1
	[0170.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\accessibility.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.940] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44032) returned 1
	[0170.940] CloseHandle (hObject=0x20c) returned 1
	[0170.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\accessibility.euq")) returned 0x20
	[0170.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\accessibility.euq")) returned 0x20
	[0170.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\accessibility.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\accessibility.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\accessibility.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.941] SetEvent (hEvent=0xfc) returned 1
	[0170.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\acroform.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.941] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=420864) returned 1
	[0170.941] CloseHandle (hObject=0x20c) returned 1
	[0170.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\acroform.euq")) returned 0x20
	[0170.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\acroform.euq")) returned 0x20
	[0170.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\acroform.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Acroform.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\acroform.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\adobecollabsync.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.942] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0170.942] CloseHandle (hObject=0x20c) returned 1
	[0170.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\adobecollabsync.euq")) returned 0x20
	[0170.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\adobecollabsync.euq")) returned 0x20
	[0170.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\adobecollabsync.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\AdobeCollabSync.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\adobecollabsync.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\annots.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.944] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=495616) returned 1
	[0170.944] CloseHandle (hObject=0x13c) returned 1
	[0170.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\annots.euq")) returned 0x20
	[0170.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\annots.euq")) returned 0x20
	[0170.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\annots.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Annots.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\annots.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.944] SetEvent (hEvent=0xfc) returned 1
	[0170.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\brdlang32.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.945] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13312) returned 1
	[0170.945] CloseHandle (hObject=0x13c) returned 1
	[0170.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\brdlang32.euq")) returned 0x20
	[0170.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\brdlang32.euq")) returned 0x20
	[0170.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\brdlang32.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\BRdlang32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\brdlang32.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\checkers.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.946] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=122880) returned 1
	[0170.946] CloseHandle (hObject=0x13c) returned 1
	[0170.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\checkers.euq")) returned 0x20
	[0170.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\checkers.euq")) returned 0x20
	[0170.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\checkers.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Checkers.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\checkers.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\digsig.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.947] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=124416) returned 1
	[0170.947] CloseHandle (hObject=0x13c) returned 1
	[0170.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\digsig.euq")) returned 0x20
	[0170.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\digsig.euq")) returned 0x20
	[0170.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\digsig.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DigSig.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\digsig.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\dva.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.949] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18944) returned 1
	[0170.949] CloseHandle (hObject=0x13c) returned 1
	[0170.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\dva.euq")) returned 0x20
	[0170.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\dva.euq")) returned 0x20
	[0170.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\dva.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\DVA.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\dva.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ebook.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.950] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0170.950] CloseHandle (hObject=0x13c) returned 1
	[0170.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ebook.euq")) returned 0x20
	[0170.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ebook.euq")) returned 0x20
	[0170.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ebook.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\eBook.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ebook.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\escript.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.951] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40448) returned 1
	[0170.951] CloseHandle (hObject=0x13c) returned 1
	[0170.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\escript.euq")) returned 0x20
	[0170.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\escript.euq")) returned 0x20
	[0170.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\escript.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\EScript.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\escript.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ia32.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.953] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0170.953] CloseHandle (hObject=0x13c) returned 1
	[0170.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ia32.euq")) returned 0x20
	[0170.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ia32.euq")) returned 0x20
	[0170.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ia32.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\IA32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ia32.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\makeaccessible.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.954] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77312) returned 1
	[0170.954] CloseHandle (hObject=0x13c) returned 1
	[0170.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\makeaccessible.euq")) returned 0x20
	[0170.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\makeaccessible.euq")) returned 0x20
	[0170.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\makeaccessible.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\makeaccessible.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\makeaccessible.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\multimedia.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.955] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81408) returned 1
	[0170.955] CloseHandle (hObject=0x13c) returned 1
	[0170.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\multimedia.euq")) returned 0x20
	[0170.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\multimedia.euq")) returned 0x20
	[0170.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\multimedia.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Multimedia.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\multimedia.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\pddom.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.956] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0170.956] CloseHandle (hObject=0x13c) returned 1
	[0170.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\pddom.euq")) returned 0x20
	[0170.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\pddom.euq")) returned 0x20
	[0170.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\pddom.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\pddom.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\pddom.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ppklite.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.957] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=529408) returned 1
	[0170.957] CloseHandle (hObject=0x13c) returned 1
	[0170.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ppklite.euq")) returned 0x20
	[0170.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ppklite.euq")) returned 0x20
	[0170.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ppklite.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\PPKLite.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\ppklite.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\rdlang32.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.958] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1368064) returned 1
	[0170.958] CloseHandle (hObject=0x13c) returned 1
	[0170.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\rdlang32.euq")) returned 0x20
	[0170.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\rdlang32.euq")) returned 0x20
	[0170.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\rdlang32.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\RdLang32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\rdlang32.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\readoutloud.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.959] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0170.959] CloseHandle (hObject=0x13c) returned 1
	[0170.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\readoutloud.euq")) returned 0x20
	[0170.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\readoutloud.euq")) returned 0x20
	[0170.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\readoutloud.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\ReadOutLoud.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\readoutloud.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\reflow.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.960] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0170.960] CloseHandle (hObject=0x13c) returned 1
	[0170.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\reflow.euq")) returned 0x20
	[0170.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\reflow.euq")) returned 0x20
	[0170.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\reflow.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\reflow.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\reflow.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\saveasrtf.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.961] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18944) returned 1
	[0170.961] CloseHandle (hObject=0x13c) returned 1
	[0170.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\saveasrtf.euq")) returned 0x20
	[0170.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\saveasrtf.euq")) returned 0x20
	[0170.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\saveasrtf.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SaveAsRTF.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\saveasrtf.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\search.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.962] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24064) returned 1
	[0170.962] CloseHandle (hObject=0x13c) returned 1
	[0170.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\search.euq")) returned 0x20
	[0170.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\search.euq")) returned 0x20
	[0170.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\search.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Search.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\search.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\sendmail.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.963] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16384) returned 1
	[0170.963] CloseHandle (hObject=0x13c) returned 1
	[0170.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\sendmail.euq")) returned 0x20
	[0170.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\sendmail.euq")) returned 0x20
	[0170.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\sendmail.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\SendMail.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\sendmail.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.964] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37457) returned 1
	[0170.964] CloseHandle (hObject=0x13c) returned 1
	[0170.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\dexshare.asfx")) returned 0x20
	[0170.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\dexshare.asfx")) returned 0x20
	[0170.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.965] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=231) returned 1
	[0170.965] CloseHandle (hObject=0x13c) returned 1
	[0170.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\services.asfx")) returned 0x20
	[0170.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\services.asfx")) returned 0x20
	[0170.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\spelling.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0170.966] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0170.966] CloseHandle (hObject=0x13c) returned 1
	[0170.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\spelling.euq")) returned 0x20
	[0170.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\spelling.euq")) returned 0x20
	[0170.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\spelling.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Spelling.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\spelling.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\updater.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.968] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0170.968] CloseHandle (hObject=0x20c) returned 1
	[0170.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\updater.euq")) returned 0x20
	[0170.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\updater.euq")) returned 0x20
	[0170.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\updater.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\updater.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\updater.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\weblink.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.969] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28160) returned 1
	[0170.969] CloseHandle (hObject=0x20c) returned 1
	[0170.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\weblink.euq")) returned 0x20
	[0170.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\weblink.euq")) returned 0x20
	[0170.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\weblink.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\WebLink.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\eu_es\\weblink.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.970] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42496) returned 1
	[0170.970] CloseHandle (hObject=0x20c) returned 1
	[0170.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo")) returned 0x20
	[0170.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo")) returned 0x20
	[0170.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\accessibility.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\accessibility.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.192] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=408064) returned 1
	[0171.192] CloseHandle (hObject=0x208) returned 1
	[0171.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo")) returned 0x20
	[0171.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo")) returned 0x20
	[0171.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Acroform.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\acroform.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\digsig.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.288] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=138240) returned 1
	[0171.288] CloseHandle (hObject=0x208) returned 1
	[0171.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\digsig.fra")) returned 0x20
	[0171.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\digsig.fra")) returned 0x20
	[0171.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\digsig.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DigSig.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\digsig.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\pddom.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.290] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11776) returned 1
	[0171.290] CloseHandle (hObject=0x208) returned 1
	[0171.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\pddom.fra")) returned 0x20
	[0171.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\pddom.fra")) returned 0x20
	[0171.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\pddom.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\pddom.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\pddom.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ppklite.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.291] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=557056) returned 1
	[0171.291] CloseHandle (hObject=0x208) returned 1
	[0171.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ppklite.fra")) returned 0x20
	[0171.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ppklite.fra")) returned 0x20
	[0171.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ppklite.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\PPKLITE.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ppklite.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\rdlang32.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.292] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1437184) returned 1
	[0171.292] CloseHandle (hObject=0x208) returned 1
	[0171.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\rdlang32.fra")) returned 0x20
	[0171.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\rdlang32.fra")) returned 0x20
	[0171.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\rdlang32.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\RdLang32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\rdlang32.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\readoutloud.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.293] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0171.293] CloseHandle (hObject=0x208) returned 1
	[0171.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\readoutloud.fra")) returned 0x20
	[0171.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\readoutloud.fra")) returned 0x20
	[0171.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\readoutloud.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\ReadOutLoud.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\readoutloud.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\reflow.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.295] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0171.295] CloseHandle (hObject=0x208) returned 1
	[0171.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\reflow.fra")) returned 0x20
	[0171.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\reflow.fra")) returned 0x20
	[0171.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\reflow.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\reflow.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\reflow.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\saveasrtf.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.296] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19968) returned 1
	[0171.296] CloseHandle (hObject=0x208) returned 1
	[0171.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\saveasrtf.fra")) returned 0x20
	[0171.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\saveasrtf.fra")) returned 0x20
	[0171.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\saveasrtf.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SaveAsRTF.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\saveasrtf.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\search.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.297] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25088) returned 1
	[0171.297] CloseHandle (hObject=0x208) returned 1
	[0171.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\search.fra")) returned 0x20
	[0171.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\search.fra")) returned 0x20
	[0171.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\search.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Search.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\search.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\sendmail.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.298] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16896) returned 1
	[0171.298] CloseHandle (hObject=0x208) returned 1
	[0171.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\sendmail.fra")) returned 0x20
	[0171.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\sendmail.fra")) returned 0x20
	[0171.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\sendmail.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\SendMail.fra" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\sendmail.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.361] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38992) returned 1
	[0171.362] CloseHandle (hObject=0x208) returned 1
	[0171.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\dexshare.asfx")) returned 0x20
	[0171.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\dexshare.asfx")) returned 0x20
	[0171.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.363] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=230) returned 1
	[0171.363] CloseHandle (hObject=0x208) returned 1
	[0171.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\services.asfx")) returned 0x20
	[0171.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\services.asfx")) returned 0x20
	[0171.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\spelling.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.364] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0171.364] CloseHandle (hObject=0x208) returned 1
	[0171.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\spelling.fra")) returned 0x20
	[0171.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\spelling.fra")) returned 0x20
	[0171.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\spelling.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Spelling.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\spelling.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\updater.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.369] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0171.369] CloseHandle (hObject=0x214) returned 1
	[0171.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\updater.fra")) returned 0x20
	[0171.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\updater.fra")) returned 0x20
	[0171.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\updater.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\updater.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\updater.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\weblink.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.370] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28672) returned 1
	[0171.370] CloseHandle (hObject=0x214) returned 1
	[0171.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\weblink.fra")) returned 0x20
	[0171.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\weblink.fra")) returned 0x20
	[0171.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\weblink.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Weblink.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\weblink.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\accessibility.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.371] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44032) returned 1
	[0171.371] CloseHandle (hObject=0x214) returned 1
	[0171.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\accessibility.hrv")) returned 0x20
	[0171.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\accessibility.hrv")) returned 0x20
	[0171.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\accessibility.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Accessibility.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\accessibility.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\acroform.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.372] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=419328) returned 1
	[0171.372] CloseHandle (hObject=0x214) returned 1
	[0171.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\acroform.hrv")) returned 0x20
	[0171.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\acroform.hrv")) returned 0x20
	[0171.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\acroform.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Acroform.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\acroform.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\adobecollabsync.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.374] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0171.374] CloseHandle (hObject=0x214) returned 1
	[0171.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\adobecollabsync.hrv")) returned 0x20
	[0171.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\adobecollabsync.hrv")) returned 0x20
	[0171.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\adobecollabsync.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\AdobeCollabSync.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\adobecollabsync.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.374] SetEvent (hEvent=0xfc) returned 1
	[0171.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\annots.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.375] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=486912) returned 1
	[0171.375] CloseHandle (hObject=0x214) returned 1
	[0171.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\annots.hrv")) returned 0x20
	[0171.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\annots.hrv")) returned 0x20
	[0171.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\annots.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Annots.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\annots.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\brdlang32.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.376] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13824) returned 1
	[0171.376] CloseHandle (hObject=0x214) returned 1
	[0171.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\brdlang32.hrv")) returned 0x20
	[0171.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\brdlang32.hrv")) returned 0x20
	[0171.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\brdlang32.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\BRdlang32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\brdlang32.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\checkers.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.378] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=125440) returned 1
	[0171.378] CloseHandle (hObject=0x20c) returned 1
	[0171.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\checkers.hrv")) returned 0x20
	[0171.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\checkers.hrv")) returned 0x20
	[0171.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\checkers.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Checkers.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\checkers.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.378] SetEvent (hEvent=0xfc) returned 1
	[0171.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\digsig.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.379] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=127488) returned 1
	[0171.379] CloseHandle (hObject=0x20c) returned 1
	[0171.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\digsig.hrv")) returned 0x20
	[0171.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\digsig.hrv")) returned 0x20
	[0171.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\digsig.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DigSig.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\digsig.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\dva.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.380] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18432) returned 1
	[0171.380] CloseHandle (hObject=0x20c) returned 1
	[0171.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\dva.hrv")) returned 0x20
	[0171.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\dva.hrv")) returned 0x20
	[0171.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\dva.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\DVA.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\dva.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ebook.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.381] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0171.381] CloseHandle (hObject=0x20c) returned 1
	[0171.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ebook.hrv")) returned 0x20
	[0171.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ebook.hrv")) returned 0x20
	[0171.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ebook.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\eBook.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ebook.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\escript.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.382] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41472) returned 1
	[0171.382] CloseHandle (hObject=0x20c) returned 1
	[0171.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\escript.hrv")) returned 0x20
	[0171.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\escript.hrv")) returned 0x20
	[0171.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\escript.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\EScript.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\escript.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ia32.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.385] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0171.385] CloseHandle (hObject=0x208) returned 1
	[0171.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ia32.hrv")) returned 0x20
	[0171.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ia32.hrv")) returned 0x20
	[0171.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ia32.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\IA32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ia32.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\makeaccessible.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.386] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75264) returned 1
	[0171.386] CloseHandle (hObject=0x208) returned 1
	[0171.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\makeaccessible.hrv")) returned 0x20
	[0171.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\makeaccessible.hrv")) returned 0x20
	[0171.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\makeaccessible.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\MakeAccessible.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\makeaccessible.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\multimedia.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0171.529] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=80896) returned 1
	[0171.529] CloseHandle (hObject=0x1a0) returned 1
	[0171.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\multimedia.hrv")) returned 0x20
	[0171.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\multimedia.hrv")) returned 0x20
	[0171.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\multimedia.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Multimedia.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\multimedia.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.530] SetEvent (hEvent=0xfc) returned 1
	[0171.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ppklite.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0171.530] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=517120) returned 1
	[0171.530] CloseHandle (hObject=0x1a0) returned 1
	[0171.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ppklite.hrv")) returned 0x20
	[0171.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ppklite.hrv")) returned 0x20
	[0171.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ppklite.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PPKLITE.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\ppklite.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\rdlang32.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0171.531] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1352192) returned 1
	[0171.531] CloseHandle (hObject=0x1a0) returned 1
	[0171.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\rdlang32.hrv")) returned 0x20
	[0171.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\rdlang32.hrv")) returned 0x20
	[0171.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\rdlang32.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\RdLang32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\rdlang32.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\readoutloud.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.654] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0171.654] CloseHandle (hObject=0x20c) returned 1
	[0171.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\readoutloud.hrv")) returned 0x20
	[0171.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\readoutloud.hrv")) returned 0x20
	[0171.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\readoutloud.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\ReadOutLoud.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\readoutloud.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.654] SetEvent (hEvent=0xfc) returned 1
	[0171.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ppklite.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.655] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=532480) returned 1
	[0171.655] CloseHandle (hObject=0x20c) returned 1
	[0171.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ppklite.hun")) returned 0x20
	[0171.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ppklite.hun")) returned 0x20
	[0171.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ppklite.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\PPKLite.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ppklite.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.656] SetEvent (hEvent=0xfc) returned 1
	[0171.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\rdlang32.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.757] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1382912) returned 1
	[0171.758] CloseHandle (hObject=0x214) returned 1
	[0171.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\rdlang32.hun")) returned 0x20
	[0171.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\rdlang32.hun")) returned 0x20
	[0171.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\rdlang32.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\RdLang32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\rdlang32.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.758] SetEvent (hEvent=0xfc) returned 1
	[0171.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\updater.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.759] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10240) returned 1
	[0171.759] CloseHandle (hObject=0x214) returned 1
	[0171.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\updater.hun")) returned 0x20
	[0171.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\updater.hun")) returned 0x20
	[0171.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\updater.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\updater.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\updater.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\weblink.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.760] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29184) returned 1
	[0171.760] CloseHandle (hObject=0x214) returned 1
	[0171.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\weblink.hun")) returned 0x20
	[0171.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\weblink.hun")) returned 0x20
	[0171.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\weblink.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\WebLink.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\weblink.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\accessibility.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.761] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45568) returned 1
	[0171.761] CloseHandle (hObject=0x214) returned 1
	[0171.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\accessibility.ita")) returned 0x20
	[0171.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\accessibility.ita")) returned 0x20
	[0171.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\accessibility.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\accessibility.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\accessibility.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\acroform.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.762] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=434688) returned 1
	[0171.762] CloseHandle (hObject=0x214) returned 1
	[0171.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\acroform.ita")) returned 0x20
	[0171.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\acroform.ita")) returned 0x20
	[0171.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\acroform.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Acroform.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\acroform.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\adobecollabsync.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.765] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0171.765] CloseHandle (hObject=0x214) returned 1
	[0171.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\adobecollabsync.ita")) returned 0x20
	[0171.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\adobecollabsync.ita")) returned 0x20
	[0171.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\adobecollabsync.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\AdobeCollabSync.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\adobecollabsync.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\annots.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.766] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=509440) returned 1
	[0171.766] CloseHandle (hObject=0x214) returned 1
	[0171.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\annots.ita")) returned 0x20
	[0171.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\annots.ita")) returned 0x20
	[0171.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\annots.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Annots.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\annots.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.767] SetEvent (hEvent=0xfc) returned 1
	[0171.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\brdlang32.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.767] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13312) returned 1
	[0171.767] CloseHandle (hObject=0x214) returned 1
	[0171.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\brdlang32.ita")) returned 0x20
	[0171.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\brdlang32.ita")) returned 0x20
	[0171.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\brdlang32.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\BRdlang32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\brdlang32.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\checkers.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.769] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=133632) returned 1
	[0171.769] CloseHandle (hObject=0x20c) returned 1
	[0171.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\checkers.ita")) returned 0x20
	[0171.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\checkers.ita")) returned 0x20
	[0171.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\checkers.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Checkers.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\checkers.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.770] SetEvent (hEvent=0xfc) returned 1
	[0171.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\digsig.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.771] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=135680) returned 1
	[0171.771] CloseHandle (hObject=0x214) returned 1
	[0171.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\digsig.ita")) returned 0x20
	[0171.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\digsig.ita")) returned 0x20
	[0171.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\digsig.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DigSig.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\digsig.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.772] SetEvent (hEvent=0xfc) returned 1
	[0171.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\dva.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.772] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19456) returned 1
	[0171.772] CloseHandle (hObject=0x214) returned 1
	[0171.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\dva.ita")) returned 0x20
	[0171.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\dva.ita")) returned 0x20
	[0171.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\dva.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\DVA.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\dva.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ebook.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.774] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0171.774] CloseHandle (hObject=0x214) returned 1
	[0171.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ebook.ita")) returned 0x20
	[0171.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ebook.ita")) returned 0x20
	[0171.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ebook.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\eBook.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ebook.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.774] SetEvent (hEvent=0xfc) returned 1
	[0171.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\escript.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.775] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41472) returned 1
	[0171.775] CloseHandle (hObject=0x214) returned 1
	[0171.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\escript.ita")) returned 0x20
	[0171.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\escript.ita")) returned 0x20
	[0171.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\escript.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\EScript.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\escript.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ia32.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.776] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0171.776] CloseHandle (hObject=0x214) returned 1
	[0171.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ia32.ita")) returned 0x20
	[0171.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ia32.ita")) returned 0x20
	[0171.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ia32.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\IA32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ia32.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\makeaccessible.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.777] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=82944) returned 1
	[0171.777] CloseHandle (hObject=0x214) returned 1
	[0171.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\makeaccessible.ita")) returned 0x20
	[0171.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\makeaccessible.ita")) returned 0x20
	[0171.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\makeaccessible.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\makeaccessible.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\makeaccessible.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\multimedia.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.778] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=82432) returned 1
	[0171.778] CloseHandle (hObject=0x214) returned 1
	[0171.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\multimedia.ita")) returned 0x20
	[0171.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\multimedia.ita")) returned 0x20
	[0171.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\multimedia.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Multimedia.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\multimedia.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\pddom.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.780] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0171.780] CloseHandle (hObject=0x214) returned 1
	[0171.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\pddom.ita")) returned 0x20
	[0171.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\pddom.ita")) returned 0x20
	[0171.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\pddom.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\pddom.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\pddom.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ppklite.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.781] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=536064) returned 1
	[0171.781] CloseHandle (hObject=0x214) returned 1
	[0171.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ppklite.ita")) returned 0x20
	[0171.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ppklite.ita")) returned 0x20
	[0171.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ppklite.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\PPKLITE.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\ppklite.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\rdlang32.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.782] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1404928) returned 1
	[0171.782] CloseHandle (hObject=0x214) returned 1
	[0171.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\rdlang32.ita")) returned 0x20
	[0171.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\rdlang32.ita")) returned 0x20
	[0171.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\rdlang32.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\RdLang32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\rdlang32.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\readoutloud.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0171.787] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0171.787] CloseHandle (hObject=0x168) returned 1
	[0171.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\readoutloud.ita")) returned 0x20
	[0171.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\readoutloud.ita")) returned 0x20
	[0171.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\readoutloud.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\ReadOutLoud.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\readoutloud.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\reflow.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0171.788] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0171.788] CloseHandle (hObject=0x168) returned 1
	[0171.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\reflow.ita")) returned 0x20
	[0171.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\reflow.ita")) returned 0x20
	[0171.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\reflow.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\reflow.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\reflow.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\saveasrtf.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0171.789] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18944) returned 1
	[0171.789] CloseHandle (hObject=0x168) returned 1
	[0171.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\saveasrtf.ita")) returned 0x20
	[0171.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\saveasrtf.ita")) returned 0x20
	[0171.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\saveasrtf.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SaveAsRTF.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\saveasrtf.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\search.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0171.790] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25088) returned 1
	[0171.790] CloseHandle (hObject=0x168) returned 1
	[0171.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\search.ita")) returned 0x20
	[0171.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\search.ita")) returned 0x20
	[0171.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\search.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Search.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\search.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\sendmail.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0171.791] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15872) returned 1
	[0171.791] CloseHandle (hObject=0x168) returned 1
	[0171.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\sendmail.ita")) returned 0x20
	[0171.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\sendmail.ita")) returned 0x20
	[0171.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\sendmail.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\SendMail.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\sendmail.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0171.792] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36829) returned 1
	[0171.792] CloseHandle (hObject=0x168) returned 1
	[0171.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\dexshare.asfx")) returned 0x20
	[0171.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\dexshare.asfx")) returned 0x20
	[0171.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0171.793] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=231) returned 1
	[0171.793] CloseHandle (hObject=0x168) returned 1
	[0171.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\services.asfx")) returned 0x20
	[0171.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\services.asfx")) returned 0x20
	[0171.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\spelling.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.954] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10240) returned 1
	[0171.954] CloseHandle (hObject=0x13c) returned 1
	[0171.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\spelling.ita")) returned 0x20
	[0171.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\spelling.ita")) returned 0x20
	[0171.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\spelling.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Spelling.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\spelling.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\search.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.062] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17408) returned 1
	[0172.062] CloseHandle (hObject=0x13c) returned 1
	[0172.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\search.jpn")) returned 0x20
	[0172.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\search.jpn")) returned 0x20
	[0172.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\search.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Search.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\search.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\sendmail.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.063] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12800) returned 1
	[0172.063] CloseHandle (hObject=0x13c) returned 1
	[0172.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\sendmail.jpn")) returned 0x20
	[0172.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\sendmail.jpn")) returned 0x20
	[0172.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\sendmail.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SendMail.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\sendmail.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.065] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41242) returned 1
	[0172.065] CloseHandle (hObject=0x13c) returned 1
	[0172.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\dexshare.asfx")) returned 0x20
	[0172.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\dexshare.asfx")) returned 0x20
	[0172.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.066] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=228) returned 1
	[0172.066] CloseHandle (hObject=0x13c) returned 1
	[0172.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\services.asfx")) returned 0x20
	[0172.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\services.asfx")) returned 0x20
	[0172.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\spelling.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.067] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8704) returned 1
	[0172.067] CloseHandle (hObject=0x13c) returned 1
	[0172.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\spelling.jpn")) returned 0x20
	[0172.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\spelling.jpn")) returned 0x20
	[0172.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\spelling.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Spelling.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\spelling.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\updater.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.217] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8704) returned 1
	[0172.217] CloseHandle (hObject=0x218) returned 1
	[0172.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\updater.jpn")) returned 0x20
	[0172.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\updater.jpn")) returned 0x20
	[0172.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\updater.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\updater.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\updater.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.218] SetEvent (hEvent=0xfc) returned 1
	[0172.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\adobecollabsync.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.219] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0172.219] CloseHandle (hObject=0x218) returned 1
	[0172.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\adobecollabsync.nor")) returned 0x20
	[0172.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\adobecollabsync.nor")) returned 0x20
	[0172.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\adobecollabsync.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\AdobeCollabSync.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\adobecollabsync.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.220] SetEvent (hEvent=0xfc) returned 1
	[0172.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\annots.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.220] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=482304) returned 1
	[0172.220] CloseHandle (hObject=0x218) returned 1
	[0172.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\annots.nor")) returned 0x20
	[0172.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\annots.nor")) returned 0x20
	[0172.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\annots.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Annots.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\annots.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\brdlang32.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.223] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12800) returned 1
	[0172.223] CloseHandle (hObject=0x218) returned 1
	[0172.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\brdlang32.nor")) returned 0x20
	[0172.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\brdlang32.nor")) returned 0x20
	[0172.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\brdlang32.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\BRdlang32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\brdlang32.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\checkers.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.227] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=120832) returned 1
	[0172.227] CloseHandle (hObject=0x218) returned 1
	[0172.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\checkers.nor")) returned 0x20
	[0172.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\checkers.nor")) returned 0x20
	[0172.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\checkers.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Checkers.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\checkers.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.227] SetEvent (hEvent=0xfc) returned 1
	[0172.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\digsig.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.228] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=124928) returned 1
	[0172.228] CloseHandle (hObject=0x218) returned 1
	[0172.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\digsig.nor")) returned 0x20
	[0172.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\digsig.nor")) returned 0x20
	[0172.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\digsig.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DigSig.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\digsig.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.229] SetEvent (hEvent=0xfc) returned 1
	[0172.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\dva.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.229] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17920) returned 1
	[0172.229] CloseHandle (hObject=0x218) returned 1
	[0172.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\dva.nor")) returned 0x20
	[0172.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\dva.nor")) returned 0x20
	[0172.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\dva.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\DVA.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\dva.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ebook.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.230] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0172.230] CloseHandle (hObject=0x218) returned 1
	[0172.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ebook.nor")) returned 0x20
	[0172.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ebook.nor")) returned 0x20
	[0172.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ebook.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\eBook.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ebook.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\escript.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.232] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39936) returned 1
	[0172.232] CloseHandle (hObject=0x218) returned 1
	[0172.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\escript.nor")) returned 0x20
	[0172.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\escript.nor")) returned 0x20
	[0172.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\escript.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\EScript.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\escript.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.232] SetEvent (hEvent=0xfc) returned 1
	[0172.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ia32.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.233] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0172.233] CloseHandle (hObject=0x218) returned 1
	[0172.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ia32.nor")) returned 0x20
	[0172.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ia32.nor")) returned 0x20
	[0172.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ia32.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\IA32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ia32.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\makeaccessible.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.234] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=74240) returned 1
	[0172.234] CloseHandle (hObject=0x218) returned 1
	[0172.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\makeaccessible.nor")) returned 0x20
	[0172.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\makeaccessible.nor")) returned 0x20
	[0172.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\makeaccessible.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\makeaccessible.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\makeaccessible.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\multimedia.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.235] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77824) returned 1
	[0172.235] CloseHandle (hObject=0x218) returned 1
	[0172.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\multimedia.nor")) returned 0x20
	[0172.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\multimedia.nor")) returned 0x20
	[0172.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\multimedia.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Multimedia.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\multimedia.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\pddom.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.236] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0172.236] CloseHandle (hObject=0x218) returned 1
	[0172.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\pddom.nor")) returned 0x20
	[0172.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\pddom.nor")) returned 0x20
	[0172.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\pddom.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\pddom.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\pddom.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ppklite.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.237] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=507904) returned 1
	[0172.237] CloseHandle (hObject=0x218) returned 1
	[0172.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ppklite.nor")) returned 0x20
	[0172.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ppklite.nor")) returned 0x20
	[0172.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ppklite.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\PPKLITE.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\ppklite.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\rdlang32.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.240] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1311744) returned 1
	[0172.241] CloseHandle (hObject=0x218) returned 1
	[0172.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\rdlang32.nor")) returned 0x20
	[0172.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\rdlang32.nor")) returned 0x20
	[0172.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\rdlang32.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\RdLang32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\rdlang32.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.241] SetEvent (hEvent=0xfc) returned 1
	[0172.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\readoutloud.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.242] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0172.242] CloseHandle (hObject=0x218) returned 1
	[0172.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\readoutloud.nor")) returned 0x20
	[0172.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\readoutloud.nor")) returned 0x20
	[0172.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\readoutloud.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\ReadOutLoud.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\readoutloud.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\reflow.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.243] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0172.243] CloseHandle (hObject=0x218) returned 1
	[0172.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\reflow.nor")) returned 0x20
	[0172.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\reflow.nor")) returned 0x20
	[0172.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\reflow.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\reflow.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\reflow.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\saveasrtf.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.244] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17920) returned 1
	[0172.244] CloseHandle (hObject=0x218) returned 1
	[0172.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\saveasrtf.nor")) returned 0x20
	[0172.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\saveasrtf.nor")) returned 0x20
	[0172.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\saveasrtf.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SaveAsRTF.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\saveasrtf.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\search.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.244] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22528) returned 1
	[0172.245] CloseHandle (hObject=0x218) returned 1
	[0172.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\search.nor")) returned 0x20
	[0172.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\search.nor")) returned 0x20
	[0172.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\search.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Search.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\search.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\sendmail.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.245] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14848) returned 1
	[0172.246] CloseHandle (hObject=0x218) returned 1
	[0172.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\sendmail.nor")) returned 0x20
	[0172.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\sendmail.nor")) returned 0x20
	[0172.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\sendmail.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\SendMail.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\sendmail.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.247] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35691) returned 1
	[0172.247] CloseHandle (hObject=0x218) returned 1
	[0172.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\dexshare.asfx")) returned 0x20
	[0172.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\dexshare.asfx")) returned 0x20
	[0172.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.248] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=225) returned 1
	[0172.248] CloseHandle (hObject=0x218) returned 1
	[0172.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\services.asfx")) returned 0x20
	[0172.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\services.asfx")) returned 0x20
	[0172.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\spelling.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.249] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10240) returned 1
	[0172.249] CloseHandle (hObject=0x218) returned 1
	[0172.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\spelling.nor")) returned 0x20
	[0172.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\spelling.nor")) returned 0x20
	[0172.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\spelling.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Spelling.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\spelling.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\updater.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.250] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10240) returned 1
	[0172.250] CloseHandle (hObject=0x218) returned 1
	[0172.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\updater.nor")) returned 0x20
	[0172.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\updater.nor")) returned 0x20
	[0172.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\updater.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\updater.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\updater.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\weblink.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.251] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27648) returned 1
	[0172.251] CloseHandle (hObject=0x218) returned 1
	[0172.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\weblink.nor")) returned 0x20
	[0172.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\weblink.nor")) returned 0x20
	[0172.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\weblink.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Weblink.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\weblink.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\accessibility.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.252] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44544) returned 1
	[0172.252] CloseHandle (hObject=0x218) returned 1
	[0172.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\accessibility.nld")) returned 0x20
	[0172.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\accessibility.nld")) returned 0x20
	[0172.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\accessibility.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\accessibility.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\accessibility.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\acroform.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.253] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=431104) returned 1
	[0172.253] CloseHandle (hObject=0x218) returned 1
	[0172.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\acroform.nld")) returned 0x20
	[0172.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\acroform.nld")) returned 0x20
	[0172.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\acroform.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Acroform.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\acroform.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\adobecollabsync.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.258] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0172.258] CloseHandle (hObject=0x218) returned 1
	[0172.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\adobecollabsync.nld")) returned 0x20
	[0172.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\adobecollabsync.nld")) returned 0x20
	[0172.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\adobecollabsync.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\AdobeCollabSync.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\adobecollabsync.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\annots.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.260] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=503808) returned 1
	[0172.260] CloseHandle (hObject=0x218) returned 1
	[0172.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\annots.nld")) returned 0x20
	[0172.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\annots.nld")) returned 0x20
	[0172.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\annots.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Annots.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\annots.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\brdlang32.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.261] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14336) returned 1
	[0172.261] CloseHandle (hObject=0x218) returned 1
	[0172.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\brdlang32.nld")) returned 0x20
	[0172.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\brdlang32.nld")) returned 0x20
	[0172.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\brdlang32.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\BRdlang32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\brdlang32.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\checkers.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.262] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=128000) returned 1
	[0172.262] CloseHandle (hObject=0x218) returned 1
	[0172.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\checkers.nld")) returned 0x20
	[0172.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\checkers.nld")) returned 0x20
	[0172.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\checkers.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Checkers.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\checkers.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\digsig.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.263] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=136192) returned 1
	[0172.263] CloseHandle (hObject=0x218) returned 1
	[0172.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\digsig.nld")) returned 0x20
	[0172.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\digsig.nld")) returned 0x20
	[0172.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\digsig.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DigSig.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\digsig.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\dva.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.264] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19456) returned 1
	[0172.264] CloseHandle (hObject=0x218) returned 1
	[0172.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\dva.nld")) returned 0x20
	[0172.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\dva.nld")) returned 0x20
	[0172.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\dva.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\DVA.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\dva.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ebook.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.265] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0172.265] CloseHandle (hObject=0x218) returned 1
	[0172.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ebook.nld")) returned 0x20
	[0172.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ebook.nld")) returned 0x20
	[0172.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ebook.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\eBook.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ebook.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\escript.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.266] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41984) returned 1
	[0172.266] CloseHandle (hObject=0x218) returned 1
	[0172.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\escript.nld")) returned 0x20
	[0172.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\escript.nld")) returned 0x20
	[0172.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\escript.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\EScript.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\escript.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ia32.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.267] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0172.267] CloseHandle (hObject=0x218) returned 1
	[0172.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ia32.nld")) returned 0x20
	[0172.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ia32.nld")) returned 0x20
	[0172.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ia32.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\IA32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ia32.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\makeaccessible.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.268] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=79360) returned 1
	[0172.268] CloseHandle (hObject=0x218) returned 1
	[0172.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\makeaccessible.nld")) returned 0x20
	[0172.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\makeaccessible.nld")) returned 0x20
	[0172.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\makeaccessible.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\makeaccessible.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\makeaccessible.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\multimedia.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.269] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81408) returned 1
	[0172.269] CloseHandle (hObject=0x218) returned 1
	[0172.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\multimedia.nld")) returned 0x20
	[0172.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\multimedia.nld")) returned 0x20
	[0172.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\multimedia.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Multimedia.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\multimedia.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\pddom.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.270] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0172.270] CloseHandle (hObject=0x218) returned 1
	[0172.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\pddom.nld")) returned 0x20
	[0172.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\pddom.nld")) returned 0x20
	[0172.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\pddom.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\pddom.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\pddom.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ppklite.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.271] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=541184) returned 1
	[0172.271] CloseHandle (hObject=0x218) returned 1
	[0172.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ppklite.nld")) returned 0x20
	[0172.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ppklite.nld")) returned 0x20
	[0172.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ppklite.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\PPKLITE.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\ppklite.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\rdlang32.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.272] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1399808) returned 1
	[0172.272] CloseHandle (hObject=0x218) returned 1
	[0172.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\rdlang32.nld")) returned 0x20
	[0172.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\rdlang32.nld")) returned 0x20
	[0172.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\rdlang32.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\RdLang32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\rdlang32.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\readoutloud.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.273] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0172.273] CloseHandle (hObject=0x218) returned 1
	[0172.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\readoutloud.nld")) returned 0x20
	[0172.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\readoutloud.nld")) returned 0x20
	[0172.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\readoutloud.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\ReadOutLoud.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\readoutloud.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\reflow.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.274] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0172.274] CloseHandle (hObject=0x218) returned 1
	[0172.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\reflow.nld")) returned 0x20
	[0172.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\reflow.nld")) returned 0x20
	[0172.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\reflow.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\reflow.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\reflow.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\saveasrtf.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.275] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18944) returned 1
	[0172.275] CloseHandle (hObject=0x218) returned 1
	[0172.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\saveasrtf.nld")) returned 0x20
	[0172.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\saveasrtf.nld")) returned 0x20
	[0172.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\saveasrtf.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SaveAsRTF.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\saveasrtf.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\search.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.276] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24576) returned 1
	[0172.276] CloseHandle (hObject=0x218) returned 1
	[0172.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\search.nld")) returned 0x20
	[0172.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\search.nld")) returned 0x20
	[0172.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\search.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Search.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\search.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\sendmail.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.277] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16384) returned 1
	[0172.277] CloseHandle (hObject=0x218) returned 1
	[0172.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\sendmail.nld")) returned 0x20
	[0172.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\sendmail.nld")) returned 0x20
	[0172.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\sendmail.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\SendMail.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\sendmail.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.278] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37454) returned 1
	[0172.278] CloseHandle (hObject=0x218) returned 1
	[0172.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\dexshare.asfx")) returned 0x20
	[0172.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\dexshare.asfx")) returned 0x20
	[0172.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.279] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=227) returned 1
	[0172.279] CloseHandle (hObject=0x218) returned 1
	[0172.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\services.asfx")) returned 0x20
	[0172.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\services.asfx")) returned 0x20
	[0172.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\spelling.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.280] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0172.280] CloseHandle (hObject=0x218) returned 1
	[0172.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\spelling.nld")) returned 0x20
	[0172.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\spelling.nld")) returned 0x20
	[0172.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\spelling.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Spelling.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\spelling.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\updater.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.281] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0172.281] CloseHandle (hObject=0x218) returned 1
	[0172.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\updater.nld")) returned 0x20
	[0172.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\updater.nld")) returned 0x20
	[0172.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\updater.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\updater.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\updater.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\weblink.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.282] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28672) returned 1
	[0172.282] CloseHandle (hObject=0x218) returned 1
	[0172.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\weblink.nld")) returned 0x20
	[0172.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\weblink.nld")) returned 0x20
	[0172.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\weblink.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Weblink.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nl_nl\\weblink.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\accessibility.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.284] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44032) returned 1
	[0172.284] CloseHandle (hObject=0x218) returned 1
	[0172.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\accessibility.pol")) returned 0x20
	[0172.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\accessibility.pol")) returned 0x20
	[0172.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\accessibility.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\accessibility.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\accessibility.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\acroform.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.286] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=426496) returned 1
	[0172.286] CloseHandle (hObject=0x218) returned 1
	[0172.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\acroform.pol")) returned 0x20
	[0172.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\acroform.pol")) returned 0x20
	[0172.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\acroform.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Acroform.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\acroform.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\adobecollabsync.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.287] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0172.287] CloseHandle (hObject=0x218) returned 1
	[0172.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\adobecollabsync.pol")) returned 0x20
	[0172.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\adobecollabsync.pol")) returned 0x20
	[0172.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\adobecollabsync.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\AdobeCollabSync.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\adobecollabsync.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\annots.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.288] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=506880) returned 1
	[0172.288] CloseHandle (hObject=0x218) returned 1
	[0172.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\annots.pol")) returned 0x20
	[0172.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\annots.pol")) returned 0x20
	[0172.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\annots.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Annots.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\annots.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\brdlang32.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.289] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13824) returned 1
	[0172.289] CloseHandle (hObject=0x218) returned 1
	[0172.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\brdlang32.pol")) returned 0x20
	[0172.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\brdlang32.pol")) returned 0x20
	[0172.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\brdlang32.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\BRdlang32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\brdlang32.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\checkers.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.290] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=124928) returned 1
	[0172.290] CloseHandle (hObject=0x218) returned 1
	[0172.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\checkers.pol")) returned 0x20
	[0172.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\checkers.pol")) returned 0x20
	[0172.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\checkers.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Checkers.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\checkers.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\digsig.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.291] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=126976) returned 1
	[0172.291] CloseHandle (hObject=0x218) returned 1
	[0172.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\digsig.pol")) returned 0x20
	[0172.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\digsig.pol")) returned 0x20
	[0172.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\digsig.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DigSig.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\digsig.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\dva.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.434] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18432) returned 1
	[0172.434] CloseHandle (hObject=0x218) returned 1
	[0172.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\dva.pol")) returned 0x20
	[0172.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\dva.pol")) returned 0x20
	[0172.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\dva.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\DVA.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\dva.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\sendmail.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.435] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15872) returned 1
	[0172.435] CloseHandle (hObject=0x218) returned 1
	[0172.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\sendmail.ptb")) returned 0x20
	[0172.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\sendmail.ptb")) returned 0x20
	[0172.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\sendmail.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SendMail.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\sendmail.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0172.669] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36779) returned 1
	[0172.669] CloseHandle (hObject=0x20c) returned 1
	[0172.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\dexshare.asfx")) returned 0x20
	[0172.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\dexshare.asfx")) returned 0x20
	[0172.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.669] SetEvent (hEvent=0xfc) returned 1
	[0172.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\spelling.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0172.670] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0172.670] CloseHandle (hObject=0x20c) returned 1
	[0172.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\spelling.ptb")) returned 0x20
	[0172.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\spelling.ptb")) returned 0x20
	[0172.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\spelling.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Spelling.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\spelling.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\updater.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0172.671] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0172.671] CloseHandle (hObject=0x20c) returned 1
	[0172.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\updater.ptb")) returned 0x20
	[0172.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\updater.ptb")) returned 0x20
	[0172.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\updater.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\updater.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\updater.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\weblink.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0172.672] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28160) returned 1
	[0172.672] CloseHandle (hObject=0x20c) returned 1
	[0172.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\weblink.ptb")) returned 0x20
	[0172.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\weblink.ptb")) returned 0x20
	[0172.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\weblink.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Weblink.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\weblink.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\accessibility.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0172.674] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45568) returned 1
	[0172.674] CloseHandle (hObject=0x20c) returned 1
	[0172.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\accessibility.rum")) returned 0x20
	[0172.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\accessibility.rum")) returned 0x20
	[0172.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\accessibility.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Accessibility.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\accessibility.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\acroform.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.677] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=436224) returned 1
	[0172.677] CloseHandle (hObject=0x214) returned 1
	[0172.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\acroform.rum")) returned 0x20
	[0172.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\acroform.rum")) returned 0x20
	[0172.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\acroform.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Acroform.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\acroform.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\adobecollabsync.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.678] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0172.678] CloseHandle (hObject=0x214) returned 1
	[0172.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\adobecollabsync.rum")) returned 0x20
	[0172.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\adobecollabsync.rum")) returned 0x20
	[0172.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\adobecollabsync.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\AdobeCollabSync.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\adobecollabsync.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\annots.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.679] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=510464) returned 1
	[0172.679] CloseHandle (hObject=0x214) returned 1
	[0172.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\annots.rum")) returned 0x20
	[0172.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\annots.rum")) returned 0x20
	[0172.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\annots.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Annots.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\annots.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\brdlang32.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.680] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14336) returned 1
	[0172.680] CloseHandle (hObject=0x214) returned 1
	[0172.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\brdlang32.rum")) returned 0x20
	[0172.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\brdlang32.rum")) returned 0x20
	[0172.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\brdlang32.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\BRdlang32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\brdlang32.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\checkers.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.681] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=129536) returned 1
	[0172.681] CloseHandle (hObject=0x214) returned 1
	[0172.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\checkers.rum")) returned 0x20
	[0172.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\checkers.rum")) returned 0x20
	[0172.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\checkers.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Checkers.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\checkers.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\digsig.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.682] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=131584) returned 1
	[0172.682] CloseHandle (hObject=0x214) returned 1
	[0172.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\digsig.rum")) returned 0x20
	[0172.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\digsig.rum")) returned 0x20
	[0172.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\digsig.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DigSig.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\digsig.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\dva.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.684] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18432) returned 1
	[0172.684] CloseHandle (hObject=0x214) returned 1
	[0172.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\dva.rum")) returned 0x20
	[0172.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\dva.rum")) returned 0x20
	[0172.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\dva.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\DVA.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\dva.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ebook.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.685] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0172.685] CloseHandle (hObject=0x214) returned 1
	[0172.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ebook.rum")) returned 0x20
	[0172.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ebook.rum")) returned 0x20
	[0172.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ebook.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\eBook.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ebook.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\escript.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.686] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41984) returned 1
	[0172.686] CloseHandle (hObject=0x214) returned 1
	[0172.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\escript.rum")) returned 0x20
	[0172.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\escript.rum")) returned 0x20
	[0172.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\escript.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\EScript.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\escript.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ia32.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.687] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0172.687] CloseHandle (hObject=0x214) returned 1
	[0172.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ia32.rum")) returned 0x20
	[0172.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ia32.rum")) returned 0x20
	[0172.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ia32.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\IA32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ia32.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\makeaccessible.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.688] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=80384) returned 1
	[0172.688] CloseHandle (hObject=0x214) returned 1
	[0172.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\makeaccessible.rum")) returned 0x20
	[0172.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\makeaccessible.rum")) returned 0x20
	[0172.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\makeaccessible.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\MakeAccessible.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\makeaccessible.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\multimedia.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.689] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=80384) returned 1
	[0172.689] CloseHandle (hObject=0x214) returned 1
	[0172.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\multimedia.rum")) returned 0x20
	[0172.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\multimedia.rum")) returned 0x20
	[0172.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\multimedia.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Multimedia.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\multimedia.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\pddom.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.690] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0172.690] CloseHandle (hObject=0x214) returned 1
	[0172.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\pddom.rum")) returned 0x20
	[0172.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\pddom.rum")) returned 0x20
	[0172.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\pddom.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PDDom.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\pddom.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ppklite.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.691] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=534016) returned 1
	[0172.691] CloseHandle (hObject=0x214) returned 1
	[0172.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ppklite.rum")) returned 0x20
	[0172.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ppklite.rum")) returned 0x20
	[0172.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ppklite.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\PPKLITE.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\ppklite.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\rdlang32.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.692] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1394176) returned 1
	[0172.692] CloseHandle (hObject=0x214) returned 1
	[0172.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\rdlang32.rum")) returned 0x20
	[0172.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\rdlang32.rum")) returned 0x20
	[0172.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\rdlang32.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\RdLang32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\rdlang32.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\readoutloud.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.693] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11264) returned 1
	[0172.693] CloseHandle (hObject=0x214) returned 1
	[0172.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\readoutloud.rum")) returned 0x20
	[0172.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\readoutloud.rum")) returned 0x20
	[0172.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\readoutloud.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\ReadOutLoud.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\readoutloud.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\reflow.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.695] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0172.695] CloseHandle (hObject=0x214) returned 1
	[0172.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\reflow.rum")) returned 0x20
	[0172.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\reflow.rum")) returned 0x20
	[0172.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\reflow.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Reflow.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\reflow.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\saveasrtf.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.696] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18944) returned 1
	[0172.696] CloseHandle (hObject=0x214) returned 1
	[0172.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\saveasrtf.rum")) returned 0x20
	[0172.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\saveasrtf.rum")) returned 0x20
	[0172.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\saveasrtf.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SaveAsRTF.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\saveasrtf.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\search.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.697] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24576) returned 1
	[0172.697] CloseHandle (hObject=0x214) returned 1
	[0172.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\search.rum")) returned 0x20
	[0172.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\search.rum")) returned 0x20
	[0172.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\search.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Search.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\search.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\sendmail.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.698] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16384) returned 1
	[0172.698] CloseHandle (hObject=0x214) returned 1
	[0172.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\sendmail.rum")) returned 0x20
	[0172.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\sendmail.rum")) returned 0x20
	[0172.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\sendmail.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\SendMail.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\sendmail.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.701] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37796) returned 1
	[0172.701] CloseHandle (hObject=0x214) returned 1
	[0172.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\dexshare.asfx")) returned 0x20
	[0172.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\dexshare.asfx")) returned 0x20
	[0172.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.702] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=231) returned 1
	[0172.702] CloseHandle (hObject=0x214) returned 1
	[0172.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\services.asfx")) returned 0x20
	[0172.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\services.asfx")) returned 0x20
	[0172.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\spelling.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.703] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0172.703] CloseHandle (hObject=0x214) returned 1
	[0172.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\spelling.rum")) returned 0x20
	[0172.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\spelling.rum")) returned 0x20
	[0172.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\spelling.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Spelling.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\spelling.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\updater.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.704] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0172.704] CloseHandle (hObject=0x214) returned 1
	[0172.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\updater.rum")) returned 0x20
	[0172.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\updater.rum")) returned 0x20
	[0172.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\updater.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Updater.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\updater.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\weblink.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.704] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29184) returned 1
	[0172.705] CloseHandle (hObject=0x214) returned 1
	[0172.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\weblink.rum")) returned 0x20
	[0172.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\weblink.rum")) returned 0x20
	[0172.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\weblink.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Weblink.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ro_ro\\weblink.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\accessibility.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.793] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44544) returned 1
	[0172.793] CloseHandle (hObject=0x13c) returned 1
	[0172.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\accessibility.rus")) returned 0x20
	[0172.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\accessibility.rus")) returned 0x20
	[0172.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\accessibility.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Accessibility.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\accessibility.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.794] SetEvent (hEvent=0xfc) returned 1
	[0172.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\adobecollabsync.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.918] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0172.918] CloseHandle (hObject=0x200) returned 1
	[0172.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\adobecollabsync.rus")) returned 0x20
	[0172.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\adobecollabsync.rus")) returned 0x20
	[0172.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\adobecollabsync.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\AdobeCollabSync.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\adobecollabsync.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.918] SetEvent (hEvent=0xfc) returned 1
	[0172.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\digsig.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.058] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=125440) returned 1
	[0173.058] CloseHandle (hObject=0x200) returned 1
	[0173.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\digsig.sky")) returned 0x20
	[0173.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\digsig.sky")) returned 0x20
	[0173.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\digsig.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DigSig.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\digsig.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\saveasrtf.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.059] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18432) returned 1
	[0173.059] CloseHandle (hObject=0x200) returned 1
	[0173.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\saveasrtf.slv")) returned 0x20
	[0173.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\saveasrtf.slv")) returned 0x20
	[0173.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\saveasrtf.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SaveAsRTF.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\saveasrtf.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\search.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.060] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23040) returned 1
	[0173.060] CloseHandle (hObject=0x200) returned 1
	[0173.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\search.slv")) returned 0x20
	[0173.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\search.slv")) returned 0x20
	[0173.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\search.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Search.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\search.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\sendmail.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.061] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15360) returned 1
	[0173.061] CloseHandle (hObject=0x200) returned 1
	[0173.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\sendmail.slv")) returned 0x20
	[0173.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\sendmail.slv")) returned 0x20
	[0173.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\sendmail.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\SendMail.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\sendmail.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.230] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37123) returned 1
	[0173.230] CloseHandle (hObject=0x214) returned 1
	[0173.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\dexshare.asfx")) returned 0x20
	[0173.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\dexshare.asfx")) returned 0x20
	[0173.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.230] SetEvent (hEvent=0xfc) returned 1
	[0173.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\spelling.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.231] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10240) returned 1
	[0173.231] CloseHandle (hObject=0x214) returned 1
	[0173.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\spelling.slv")) returned 0x20
	[0173.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\spelling.slv")) returned 0x20
	[0173.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\spelling.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Spelling.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\spelling.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\updater.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.232] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10240) returned 1
	[0173.232] CloseHandle (hObject=0x214) returned 1
	[0173.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\updater.slv")) returned 0x20
	[0173.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\updater.slv")) returned 0x20
	[0173.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\updater.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Updater.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\updater.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\weblink.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.233] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28160) returned 1
	[0173.233] CloseHandle (hObject=0x214) returned 1
	[0173.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\weblink.slv")) returned 0x20
	[0173.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\weblink.slv")) returned 0x20
	[0173.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\weblink.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Weblink.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\weblink.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\accessibility.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.234] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41984) returned 1
	[0173.234] CloseHandle (hObject=0x214) returned 1
	[0173.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\accessibility.sve")) returned 0x20
	[0173.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\accessibility.sve")) returned 0x20
	[0173.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\accessibility.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\accessibility.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\accessibility.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\acroform.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.235] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=409088) returned 1
	[0173.235] CloseHandle (hObject=0x214) returned 1
	[0173.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\acroform.sve")) returned 0x20
	[0173.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\acroform.sve")) returned 0x20
	[0173.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\acroform.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Acroform.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\acroform.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\adobecollabsync.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.236] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0173.236] CloseHandle (hObject=0x214) returned 1
	[0173.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\adobecollabsync.sve")) returned 0x20
	[0173.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\adobecollabsync.sve")) returned 0x20
	[0173.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\adobecollabsync.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\AdobeCollabSync.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\adobecollabsync.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\annots.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.237] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=486400) returned 1
	[0173.237] CloseHandle (hObject=0x214) returned 1
	[0173.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\annots.sve")) returned 0x20
	[0173.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\annots.sve")) returned 0x20
	[0173.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\annots.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Annots.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\annots.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\brdlang32.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.239] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12800) returned 1
	[0173.239] CloseHandle (hObject=0x13c) returned 1
	[0173.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\brdlang32.sve")) returned 0x20
	[0173.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\brdlang32.sve")) returned 0x20
	[0173.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\brdlang32.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\BRdlang32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\brdlang32.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\checkers.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.241] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=120320) returned 1
	[0173.241] CloseHandle (hObject=0x13c) returned 1
	[0173.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\checkers.sve")) returned 0x20
	[0173.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\checkers.sve")) returned 0x20
	[0173.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\checkers.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Checkers.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\checkers.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\digsig.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.242] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=127488) returned 1
	[0173.242] CloseHandle (hObject=0x13c) returned 1
	[0173.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\digsig.sve")) returned 0x20
	[0173.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\digsig.sve")) returned 0x20
	[0173.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\digsig.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DigSig.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\digsig.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\dva.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.243] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18432) returned 1
	[0173.243] CloseHandle (hObject=0x13c) returned 1
	[0173.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\dva.sve")) returned 0x20
	[0173.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\dva.sve")) returned 0x20
	[0173.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\dva.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\DVA.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\dva.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ebook.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.244] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0173.244] CloseHandle (hObject=0x13c) returned 1
	[0173.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ebook.sve")) returned 0x20
	[0173.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ebook.sve")) returned 0x20
	[0173.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ebook.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\eBook.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ebook.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\escript.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.245] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39424) returned 1
	[0173.245] CloseHandle (hObject=0x13c) returned 1
	[0173.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\escript.sve")) returned 0x20
	[0173.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\escript.sve")) returned 0x20
	[0173.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\escript.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\EScript.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\escript.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ia32.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.249] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3584) returned 1
	[0173.249] CloseHandle (hObject=0x13c) returned 1
	[0173.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ia32.sve")) returned 0x20
	[0173.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ia32.sve")) returned 0x20
	[0173.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ia32.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\IA32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ia32.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\makeaccessible.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.250] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=73216) returned 1
	[0173.250] CloseHandle (hObject=0x13c) returned 1
	[0173.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\makeaccessible.sve")) returned 0x20
	[0173.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\makeaccessible.sve")) returned 0x20
	[0173.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\makeaccessible.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\makeaccessible.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\makeaccessible.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\multimedia.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.253] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77824) returned 1
	[0173.253] CloseHandle (hObject=0x13c) returned 1
	[0173.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\multimedia.sve")) returned 0x20
	[0173.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\multimedia.sve")) returned 0x20
	[0173.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\multimedia.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Multimedia.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\multimedia.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\pddom.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.254] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0173.254] CloseHandle (hObject=0x13c) returned 1
	[0173.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\pddom.sve")) returned 0x20
	[0173.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\pddom.sve")) returned 0x20
	[0173.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\pddom.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\pddom.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\pddom.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ppklite.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.255] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=515072) returned 1
	[0173.255] CloseHandle (hObject=0x13c) returned 1
	[0173.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ppklite.sve")) returned 0x20
	[0173.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ppklite.sve")) returned 0x20
	[0173.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ppklite.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\PPKLITE.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\ppklite.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\rdlang32.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.256] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1316864) returned 1
	[0173.256] CloseHandle (hObject=0x13c) returned 1
	[0173.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\rdlang32.sve")) returned 0x20
	[0173.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\rdlang32.sve")) returned 0x20
	[0173.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\rdlang32.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\RdLang32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\rdlang32.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\readoutloud.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.257] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10752) returned 1
	[0173.257] CloseHandle (hObject=0x13c) returned 1
	[0173.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\readoutloud.sve")) returned 0x20
	[0173.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\readoutloud.sve")) returned 0x20
	[0173.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\readoutloud.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\ReadOutLoud.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\readoutloud.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\reflow.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.258] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0173.258] CloseHandle (hObject=0x13c) returned 1
	[0173.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\reflow.sve")) returned 0x20
	[0173.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\reflow.sve")) returned 0x20
	[0173.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\reflow.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\reflow.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\reflow.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\saveasrtf.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.259] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17920) returned 1
	[0173.259] CloseHandle (hObject=0x13c) returned 1
	[0173.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\saveasrtf.sve")) returned 0x20
	[0173.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\saveasrtf.sve")) returned 0x20
	[0173.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\saveasrtf.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SaveAsRTF.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\saveasrtf.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\search.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.260] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23552) returned 1
	[0173.260] CloseHandle (hObject=0x13c) returned 1
	[0173.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\search.sve")) returned 0x20
	[0173.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\search.sve")) returned 0x20
	[0173.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\search.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Search.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\search.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\sendmail.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.261] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15360) returned 1
	[0173.261] CloseHandle (hObject=0x13c) returned 1
	[0173.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\sendmail.sve")) returned 0x20
	[0173.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\sendmail.sve")) returned 0x20
	[0173.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\sendmail.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\SendMail.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\sendmail.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.262] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36127) returned 1
	[0173.262] CloseHandle (hObject=0x13c) returned 1
	[0173.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\dexshare.asfx")) returned 0x20
	[0173.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\dexshare.asfx")) returned 0x20
	[0173.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.263] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=226) returned 1
	[0173.263] CloseHandle (hObject=0x13c) returned 1
	[0173.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\services.asfx")) returned 0x20
	[0173.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\services.asfx")) returned 0x20
	[0173.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\spelling.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.264] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10240) returned 1
	[0173.264] CloseHandle (hObject=0x13c) returned 1
	[0173.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\spelling.sve")) returned 0x20
	[0173.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\spelling.sve")) returned 0x20
	[0173.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\spelling.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Spelling.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\spelling.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\updater.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.265] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10240) returned 1
	[0173.265] CloseHandle (hObject=0x13c) returned 1
	[0173.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\updater.sve")) returned 0x20
	[0173.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\updater.sve")) returned 0x20
	[0173.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\updater.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\updater.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\updater.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\weblink.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.266] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27136) returned 1
	[0173.266] CloseHandle (hObject=0x13c) returned 1
	[0173.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\weblink.sve")) returned 0x20
	[0173.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\weblink.sve")) returned 0x20
	[0173.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\weblink.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Weblink.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sv_se\\weblink.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\accessibility.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.268] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41984) returned 1
	[0173.268] CloseHandle (hObject=0x13c) returned 1
	[0173.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\accessibility.tur")) returned 0x20
	[0173.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\accessibility.tur")) returned 0x20
	[0173.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\accessibility.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Accessibility.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\accessibility.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\acroform.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.447] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=397824) returned 1
	[0173.447] CloseHandle (hObject=0x168) returned 1
	[0173.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\acroform.tur")) returned 0x20
	[0173.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\acroform.tur")) returned 0x20
	[0173.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\acroform.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Acroform.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\acroform.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\dva.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.571] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11776) returned 1
	[0173.571] CloseHandle (hObject=0x168) returned 1
	[0173.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\dva.chs")) returned 0x20
	[0173.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\dva.chs")) returned 0x20
	[0173.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\dva.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DVA.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\dva.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.572] SetEvent (hEvent=0xfc) returned 1
	[0173.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ebook.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.573] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5632) returned 1
	[0173.573] CloseHandle (hObject=0x168) returned 1
	[0173.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ebook.chs")) returned 0x20
	[0173.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ebook.chs")) returned 0x20
	[0173.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ebook.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\eBook.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ebook.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\escript.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.574] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29696) returned 1
	[0173.574] CloseHandle (hObject=0x168) returned 1
	[0173.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\escript.chs")) returned 0x20
	[0173.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\escript.chs")) returned 0x20
	[0173.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\escript.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\EScript.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\escript.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ia32.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.575] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3072) returned 1
	[0173.575] CloseHandle (hObject=0x168) returned 1
	[0173.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ia32.chs")) returned 0x20
	[0173.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ia32.chs")) returned 0x20
	[0173.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ia32.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\IA32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ia32.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\makeaccessible.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.576] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37888) returned 1
	[0173.576] CloseHandle (hObject=0x168) returned 1
	[0173.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\makeaccessible.chs")) returned 0x20
	[0173.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\makeaccessible.chs")) returned 0x20
	[0173.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\makeaccessible.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\makeaccessible.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\makeaccessible.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\multimedia.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.577] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=55296) returned 1
	[0173.577] CloseHandle (hObject=0x168) returned 1
	[0173.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\multimedia.chs")) returned 0x20
	[0173.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\multimedia.chs")) returned 0x20
	[0173.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\multimedia.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Multimedia.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\multimedia.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\pddom.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.578] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8704) returned 1
	[0173.578] CloseHandle (hObject=0x168) returned 1
	[0173.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\pddom.chs")) returned 0x20
	[0173.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\pddom.chs")) returned 0x20
	[0173.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\pddom.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\pddom.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\pddom.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ppklite.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.579] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=318464) returned 1
	[0173.579] CloseHandle (hObject=0x168) returned 1
	[0173.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ppklite.chs")) returned 0x20
	[0173.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ppklite.chs")) returned 0x20
	[0173.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ppklite.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\PPKLITE.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\ppklite.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\rdlang32.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.580] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=919040) returned 1
	[0173.580] CloseHandle (hObject=0x168) returned 1
	[0173.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\rdlang32.chs")) returned 0x20
	[0173.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\rdlang32.chs")) returned 0x20
	[0173.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\rdlang32.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\RdLang32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\rdlang32.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\readoutloud.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.581] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8704) returned 1
	[0173.581] CloseHandle (hObject=0x168) returned 1
	[0173.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\readoutloud.chs")) returned 0x20
	[0173.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\readoutloud.chs")) returned 0x20
	[0173.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\readoutloud.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\ReadOutLoud.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\readoutloud.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\reflow.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.582] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4096) returned 1
	[0173.582] CloseHandle (hObject=0x168) returned 1
	[0173.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\reflow.chs")) returned 0x20
	[0173.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\reflow.chs")) returned 0x20
	[0173.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\reflow.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\reflow.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\reflow.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\saveasrtf.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.583] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12800) returned 1
	[0173.583] CloseHandle (hObject=0x168) returned 1
	[0173.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\saveasrtf.chs")) returned 0x20
	[0173.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\saveasrtf.chs")) returned 0x20
	[0173.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\saveasrtf.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SaveAsRTF.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\saveasrtf.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\search.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.584] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14848) returned 1
	[0173.584] CloseHandle (hObject=0x168) returned 1
	[0173.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\search.chs")) returned 0x20
	[0173.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\search.chs")) returned 0x20
	[0173.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\search.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Search.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\search.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\sendmail.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.585] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11776) returned 1
	[0173.585] CloseHandle (hObject=0x168) returned 1
	[0173.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\sendmail.chs")) returned 0x20
	[0173.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\sendmail.chs")) returned 0x20
	[0173.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\sendmail.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\SendMail.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\sendmail.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.729] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35229) returned 1
	[0173.729] CloseHandle (hObject=0x20c) returned 1
	[0173.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\dexshare.asfx")) returned 0x20
	[0173.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\dexshare.asfx")) returned 0x20
	[0173.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\weblink.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.730] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19968) returned 1
	[0173.730] CloseHandle (hObject=0x20c) returned 1
	[0173.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\weblink.cht")) returned 0x20
	[0173.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\weblink.cht")) returned 0x20
	[0173.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\weblink.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Weblink.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\weblink.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\logsession.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\logsession.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.731] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=368096) returned 1
	[0173.731] CloseHandle (hObject=0x20c) returned 1
	[0173.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\logsession.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\logsession.dll")) returned 0x20
	[0173.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\logsession.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\logsession.dll")) returned 0x20
	[0173.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\logsession.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\logsession.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\logsession.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\logsession.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\LogTransport2.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\logtransport2.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.732] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=315872) returned 1
	[0173.732] CloseHandle (hObject=0x20c) returned 1
	[0173.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\LogTransport2.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\logtransport2.exe")) returned 0x20
	[0173.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\LogTransport2.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\logtransport2.exe")) returned 0x20
	[0173.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\LogTransport2.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\logtransport2.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\LogTransport2.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\logtransport2.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Onix32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\onix32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.733] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=759816) returned 1
	[0173.733] CloseHandle (hObject=0x20c) returned 1
	[0173.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Onix32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\onix32.dll")) returned 0x20
	[0173.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Onix32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\onix32.dll")) returned 0x20
	[0173.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Onix32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\onix32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Onix32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\onix32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFPrevHndlr.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfprevhndlr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.734] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=84896) returned 1
	[0173.734] CloseHandle (hObject=0x20c) returned 1
	[0173.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFPrevHndlr.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfprevhndlr.dll")) returned 0x20
	[0173.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFPrevHndlr.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfprevhndlr.dll")) returned 0x20
	[0173.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFPrevHndlr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfprevhndlr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFPrevHndlr.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfprevhndlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.223] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=468206) returned 1
	[0174.223] CloseHandle (hObject=0x210) returned 1
	[0174.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf")) returned 0x20
	[0174.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf")) returned 0x20
	[0174.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.223] SetEvent (hEvent=0xfc) returned 1
	[0174.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\accessibility.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.224] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=519267) returned 1
	[0174.224] CloseHandle (hObject=0x210) returned 1
	[0174.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\accessibility.api")) returned 0x20
	[0174.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\accessibility.api")) returned 0x20
	[0174.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\accessibility.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\accessibility.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\adobepdf.xdc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.225] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45935) returned 1
	[0174.225] CloseHandle (hObject=0x210) returned 1
	[0174.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\adobepdf.xdc")) returned 0x20
	[0174.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\adobepdf.xdc")) returned 0x20
	[0174.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\adobepdf.xdc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\adobepdf.xdc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.226] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=109056) returned 1
	[0174.226] CloseHandle (hObject=0x210) returned 1
	[0174.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp")) returned 0x20
	[0174.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp")) returned 0x20
	[0174.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\AdobePDF417.pmp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\adobepdf417.pmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.227] SetEvent (hEvent=0xfc) returned 1
	[0174.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.228] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=521216) returned 1
	[0174.228] CloseHandle (hObject=0x210) returned 1
	[0174.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp")) returned 0x20
	[0174.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp")) returned 0x20
	[0174.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\DataMatrix.pmp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\datamatrix.pmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.229] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=78848) returned 1
	[0174.229] CloseHandle (hObject=0x210) returned 1
	[0174.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp")) returned 0x20
	[0174.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp")) returned 0x20
	[0174.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\QRCode.pmp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform\\pmp\\qrcode.pmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.230] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11438691) returned 1
	[0174.230] CloseHandle (hObject=0x210) returned 1
	[0174.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform.api")) returned 0x20
	[0174.230] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform.api"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0174.230] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acroform.api")) returned 0
	[0174.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acrosign.prc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.231] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8574) returned 1
	[0174.231] CloseHandle (hObject=0x210) returned 1
	[0174.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acrosign.prc")) returned 0x20
	[0174.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acrosign.prc")) returned 0x20
	[0174.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acrosign.prc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroSign.prc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\acrosign.prc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.232] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52696) returned 1
	[0174.232] CloseHandle (hObject=0x210) returned 1
	[0174.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf")) returned 0x20
	[0174.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf")) returned 0x20
	[0174.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.234] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35117) returned 1
	[0174.234] CloseHandle (hObject=0x210) returned 1
	[0174.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf")) returned 0x20
	[0174.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf")) returned 0x20
	[0174.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.234] SetEvent (hEvent=0xfc) returned 1
	[0174.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.235] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49284) returned 1
	[0174.235] CloseHandle (hObject=0x210) returned 1
	[0174.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf")) returned 0x20
	[0174.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf")) returned 0x20
	[0174.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.236] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35990) returned 1
	[0174.236] CloseHandle (hObject=0x210) returned 1
	[0174.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf")) returned 0x20
	[0174.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf")) returned 0x20
	[0174.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.237] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=191390) returned 1
	[0174.237] CloseHandle (hObject=0x210) returned 1
	[0174.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf")) returned 0x20
	[0174.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf")) returned 0x20
	[0174.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.238] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=632973) returned 1
	[0174.238] CloseHandle (hObject=0x210) returned 1
	[0174.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf")) returned 0x20
	[0174.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf")) returned 0x20
	[0174.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.369] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81422) returned 1
	[0174.369] CloseHandle (hObject=0x210) returned 1
	[0174.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf")) returned 0x20
	[0174.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf")) returned 0x20
	[0174.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.371] SetEvent (hEvent=0xfc) returned 1
	[0174.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.372] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49327) returned 1
	[0174.372] CloseHandle (hObject=0x210) returned 1
	[0174.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf")) returned 0x20
	[0174.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf")) returned 0x20
	[0174.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.373] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=137166) returned 1
	[0174.373] CloseHandle (hObject=0x210) returned 1
	[0174.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf")) returned 0x20
	[0174.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf")) returned 0x20
	[0174.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.374] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=78540) returned 1
	[0174.374] CloseHandle (hObject=0x210) returned 1
	[0174.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf")) returned 0x20
	[0174.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf")) returned 0x20
	[0174.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.375] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47042) returned 1
	[0174.375] CloseHandle (hObject=0x210) returned 1
	[0174.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf")) returned 0x20
	[0174.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf")) returned 0x20
	[0174.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.376] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=71723) returned 1
	[0174.376] CloseHandle (hObject=0x210) returned 1
	[0174.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf")) returned 0x20
	[0174.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf")) returned 0x20
	[0174.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.377] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=205516) returned 1
	[0174.377] CloseHandle (hObject=0x210) returned 1
	[0174.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf")) returned 0x20
	[0174.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf")) returned 0x20
	[0174.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.380] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32000) returned 1
	[0174.380] CloseHandle (hObject=0x210) returned 1
	[0174.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf")) returned 0x20
	[0174.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf")) returned 0x20
	[0174.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.380] SetEvent (hEvent=0xfc) returned 1
	[0174.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.381] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34672) returned 1
	[0174.381] CloseHandle (hObject=0x210) returned 1
	[0174.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf")) returned 0x20
	[0174.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf")) returned 0x20
	[0174.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.382] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47068) returned 1
	[0174.382] CloseHandle (hObject=0x210) returned 1
	[0174.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf")) returned 0x20
	[0174.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf")) returned 0x20
	[0174.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.383] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=337739) returned 1
	[0174.383] CloseHandle (hObject=0x210) returned 1
	[0174.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf")) returned 0x20
	[0174.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf")) returned 0x20
	[0174.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.384] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=181049) returned 1
	[0174.384] CloseHandle (hObject=0x210) returned 1
	[0174.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf")) returned 0x20
	[0174.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf")) returned 0x20
	[0174.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.385] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=89210) returned 1
	[0174.385] CloseHandle (hObject=0x210) returned 1
	[0174.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf")) returned 0x20
	[0174.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf")) returned 0x20
	[0174.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.386] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=59093) returned 1
	[0174.386] CloseHandle (hObject=0x210) returned 1
	[0174.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf")) returned 0x20
	[0174.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf")) returned 0x20
	[0174.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.387] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37638) returned 1
	[0174.387] CloseHandle (hObject=0x210) returned 1
	[0174.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf")) returned 0x20
	[0174.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf")) returned 0x20
	[0174.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.388] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=100183) returned 1
	[0174.388] CloseHandle (hObject=0x210) returned 1
	[0174.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf")) returned 0x20
	[0174.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf")) returned 0x20
	[0174.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.389] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51935) returned 1
	[0174.389] CloseHandle (hObject=0x210) returned 1
	[0174.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf")) returned 0x20
	[0174.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf")) returned 0x20
	[0174.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.390] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41839) returned 1
	[0174.391] CloseHandle (hObject=0x210) returned 1
	[0174.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf")) returned 0x20
	[0174.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf")) returned 0x20
	[0174.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.392] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=96448) returned 1
	[0174.392] CloseHandle (hObject=0x210) returned 1
	[0174.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf")) returned 0x20
	[0174.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf")) returned 0x20
	[0174.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.393] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57218) returned 1
	[0174.393] CloseHandle (hObject=0x210) returned 1
	[0174.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf")) returned 0x20
	[0174.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf")) returned 0x20
	[0174.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.394] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40726) returned 1
	[0174.394] CloseHandle (hObject=0x210) returned 1
	[0174.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf")) returned 0x20
	[0174.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf")) returned 0x20
	[0174.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.395] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=108763) returned 1
	[0174.395] CloseHandle (hObject=0x210) returned 1
	[0174.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf")) returned 0x20
	[0174.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf")) returned 0x20
	[0174.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.396] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52696) returned 1
	[0174.396] CloseHandle (hObject=0x210) returned 1
	[0174.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf")) returned 0x20
	[0174.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf")) returned 0x20
	[0174.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.397] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35990) returned 1
	[0174.397] CloseHandle (hObject=0x210) returned 1
	[0174.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf")) returned 0x20
	[0174.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf")) returned 0x20
	[0174.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.398] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=632973) returned 1
	[0174.398] CloseHandle (hObject=0x210) returned 1
	[0174.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf")) returned 0x20
	[0174.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf")) returned 0x20
	[0174.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.494] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52696) returned 1
	[0174.494] CloseHandle (hObject=0x210) returned 1
	[0174.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf")) returned 0x20
	[0174.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf")) returned 0x20
	[0174.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.494] SetEvent (hEvent=0xfc) returned 1
	[0174.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.495] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49284) returned 1
	[0174.495] CloseHandle (hObject=0x210) returned 1
	[0174.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf")) returned 0x20
	[0174.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf")) returned 0x20
	[0174.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.496] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35990) returned 1
	[0174.496] CloseHandle (hObject=0x210) returned 1
	[0174.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf")) returned 0x20
	[0174.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf")) returned 0x20
	[0174.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.497] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=191390) returned 1
	[0174.497] CloseHandle (hObject=0x210) returned 1
	[0174.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf")) returned 0x20
	[0174.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf")) returned 0x20
	[0174.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.498] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=632973) returned 1
	[0174.498] CloseHandle (hObject=0x210) returned 1
	[0174.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf")) returned 0x20
	[0174.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf")) returned 0x20
	[0174.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.499] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=200375) returned 1
	[0174.500] CloseHandle (hObject=0x210) returned 1
	[0174.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf")) returned 0x20
	[0174.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf")) returned 0x20
	[0174.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.501] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40309) returned 1
	[0174.501] CloseHandle (hObject=0x210) returned 1
	[0174.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf")) returned 0x20
	[0174.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf")) returned 0x20
	[0174.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.502] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=280869) returned 1
	[0174.502] CloseHandle (hObject=0x210) returned 1
	[0174.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf")) returned 0x20
	[0174.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf")) returned 0x20
	[0174.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.504] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=137730) returned 1
	[0174.504] CloseHandle (hObject=0x210) returned 1
	[0174.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf")) returned 0x20
	[0174.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf")) returned 0x20
	[0174.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.505] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33013) returned 1
	[0174.505] CloseHandle (hObject=0x210) returned 1
	[0174.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf")) returned 0x20
	[0174.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf")) returned 0x20
	[0174.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.506] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46897) returned 1
	[0174.506] CloseHandle (hObject=0x210) returned 1
	[0174.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf")) returned 0x20
	[0174.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf")) returned 0x20
	[0174.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.507] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46796) returned 1
	[0174.507] CloseHandle (hObject=0x210) returned 1
	[0174.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf")) returned 0x20
	[0174.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf")) returned 0x20
	[0174.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.509] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=115957) returned 1
	[0174.509] CloseHandle (hObject=0x210) returned 1
	[0174.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf")) returned 0x20
	[0174.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf")) returned 0x20
	[0174.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.510] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=112577) returned 1
	[0174.510] CloseHandle (hObject=0x210) returned 1
	[0174.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf")) returned 0x20
	[0174.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf")) returned 0x20
	[0174.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.512] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47934) returned 1
	[0174.512] CloseHandle (hObject=0x210) returned 1
	[0174.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf")) returned 0x20
	[0174.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf")) returned 0x20
	[0174.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.513] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33013) returned 1
	[0174.513] CloseHandle (hObject=0x210) returned 1
	[0174.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf")) returned 0x20
	[0174.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf")) returned 0x20
	[0174.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.514] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46897) returned 1
	[0174.514] CloseHandle (hObject=0x210) returned 1
	[0174.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf")) returned 0x20
	[0174.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf")) returned 0x20
	[0174.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.515] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36995) returned 1
	[0174.515] CloseHandle (hObject=0x210) returned 1
	[0174.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf")) returned 0x20
	[0174.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf")) returned 0x20
	[0174.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.516] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=115957) returned 1
	[0174.517] CloseHandle (hObject=0x210) returned 1
	[0174.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf")) returned 0x20
	[0174.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf")) returned 0x20
	[0174.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.517] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97044) returned 1
	[0174.518] CloseHandle (hObject=0x210) returned 1
	[0174.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf")) returned 0x20
	[0174.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf")) returned 0x20
	[0174.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.519] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51848) returned 1
	[0174.519] CloseHandle (hObject=0x210) returned 1
	[0174.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf")) returned 0x20
	[0174.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf")) returned 0x20
	[0174.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.521] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36857) returned 1
	[0174.521] CloseHandle (hObject=0x210) returned 1
	[0174.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf")) returned 0x20
	[0174.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf")) returned 0x20
	[0174.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.522] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=99701) returned 1
	[0174.522] CloseHandle (hObject=0x210) returned 1
	[0174.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf")) returned 0x20
	[0174.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf")) returned 0x20
	[0174.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.523] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52268) returned 1
	[0174.523] CloseHandle (hObject=0x210) returned 1
	[0174.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf")) returned 0x20
	[0174.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf")) returned 0x20
	[0174.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.524] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65481) returned 1
	[0174.524] CloseHandle (hObject=0x210) returned 1
	[0174.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf")) returned 0x20
	[0174.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf")) returned 0x20
	[0174.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.526] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42055) returned 1
	[0174.526] CloseHandle (hObject=0x210) returned 1
	[0174.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf")) returned 0x20
	[0174.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf")) returned 0x20
	[0174.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.527] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114693) returned 1
	[0174.527] CloseHandle (hObject=0x210) returned 1
	[0174.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf")) returned 0x20
	[0174.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf")) returned 0x20
	[0174.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.528] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=76548) returned 1
	[0174.528] CloseHandle (hObject=0x210) returned 1
	[0174.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf")) returned 0x20
	[0174.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf")) returned 0x20
	[0174.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.529] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=60097) returned 1
	[0174.529] CloseHandle (hObject=0x210) returned 1
	[0174.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf")) returned 0x20
	[0174.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf")) returned 0x20
	[0174.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.532] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53364) returned 1
	[0174.532] CloseHandle (hObject=0x210) returned 1
	[0174.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf")) returned 0x20
	[0174.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf")) returned 0x20
	[0174.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.533] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=151423) returned 1
	[0174.533] CloseHandle (hObject=0x210) returned 1
	[0174.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf")) returned 0x20
	[0174.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf")) returned 0x20
	[0174.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.534] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65338) returned 1
	[0174.534] CloseHandle (hObject=0x210) returned 1
	[0174.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf")) returned 0x20
	[0174.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf")) returned 0x20
	[0174.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.535] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38210) returned 1
	[0174.535] CloseHandle (hObject=0x210) returned 1
	[0174.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf")) returned 0x20
	[0174.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf")) returned 0x20
	[0174.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.536] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98528) returned 1
	[0174.536] CloseHandle (hObject=0x210) returned 1
	[0174.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf")) returned 0x20
	[0174.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf")) returned 0x20
	[0174.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.537] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=64471) returned 1
	[0174.538] CloseHandle (hObject=0x210) returned 1
	[0174.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf")) returned 0x20
	[0174.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf")) returned 0x20
	[0174.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.539] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38308) returned 1
	[0174.539] CloseHandle (hObject=0x210) returned 1
	[0174.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf")) returned 0x20
	[0174.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf")) returned 0x20
	[0174.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.649] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98296) returned 1
	[0174.649] CloseHandle (hObject=0x210) returned 1
	[0174.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf")) returned 0x20
	[0174.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf")) returned 0x20
	[0174.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.650] SetEvent (hEvent=0xfc) returned 1
	[0174.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.800] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33013) returned 1
	[0174.801] CloseHandle (hObject=0x228) returned 1
	[0174.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf")) returned 0x20
	[0174.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf")) returned 0x20
	[0174.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.894] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33013) returned 1
	[0174.894] CloseHandle (hObject=0x228) returned 1
	[0174.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf")) returned 0x20
	[0174.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf")) returned 0x20
	[0174.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0174.993] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0174.994] CloseHandle (hObject=0x22c) returned 1
	[0174.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.euq")) returned 0x20
	[0174.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.euq")) returned 0x20
	[0174.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.994] SetEvent (hEvent=0xfc) returned 1
	[0174.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.133] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.133] CloseHandle (hObject=0x22c) returned 1
	[0175.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.fra")) returned 0x20
	[0175.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.fra")) returned 0x20
	[0175.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.134] SetEvent (hEvent=0xfc) returned 1
	[0175.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.135] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.135] CloseHandle (hObject=0x22c) returned 1
	[0175.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ita")) returned 0x20
	[0175.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ita")) returned 0x20
	[0175.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.135] SetEvent (hEvent=0xfc) returned 1
	[0175.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.136] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.136] CloseHandle (hObject=0x22c) returned 1
	[0175.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.jpn")) returned 0x20
	[0175.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.jpn")) returned 0x20
	[0175.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.137] SetEvent (hEvent=0xfc) returned 1
	[0175.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.137] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.137] CloseHandle (hObject=0x22c) returned 1
	[0175.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.kor")) returned 0x20
	[0175.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.kor")) returned 0x20
	[0175.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.138] SetEvent (hEvent=0xfc) returned 1
	[0175.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.139] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=278528) returned 1
	[0175.139] CloseHandle (hObject=0x22c) returned 1
	[0175.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp")) returned 0x20
	[0175.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp")) returned 0x20
	[0175.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.mpp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.139] SetEvent (hEvent=0xfc) returned 1
	[0175.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.140] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.140] CloseHandle (hObject=0x22c) returned 1
	[0175.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nld")) returned 0x20
	[0175.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nld")) returned 0x20
	[0175.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.140] SetEvent (hEvent=0xfc) returned 1
	[0175.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.141] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.141] CloseHandle (hObject=0x22c) returned 1
	[0175.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nor")) returned 0x20
	[0175.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nor")) returned 0x20
	[0175.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.142] SetEvent (hEvent=0xfc) returned 1
	[0175.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.142] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.142] CloseHandle (hObject=0x22c) returned 1
	[0175.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ptb")) returned 0x20
	[0175.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ptb")) returned 0x20
	[0175.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.143] SetEvent (hEvent=0xfc) returned 1
	[0175.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.144] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.144] CloseHandle (hObject=0x22c) returned 1
	[0175.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo")) returned 0x20
	[0175.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo")) returned 0x20
	[0175.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.144] SetEvent (hEvent=0xfc) returned 1
	[0175.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.145] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.145] CloseHandle (hObject=0x22c) returned 1
	[0175.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.sve")) returned 0x20
	[0175.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.sve")) returned 0x20
	[0175.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.145] SetEvent (hEvent=0xfc) returned 1
	[0175.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.146] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.146] CloseHandle (hObject=0x22c) returned 1
	[0175.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat")) returned 0x20
	[0175.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat")) returned 0x20
	[0175.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.147] SetEvent (hEvent=0xfc) returned 1
	[0175.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.147] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.148] CloseHandle (hObject=0x22c) returned 1
	[0175.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.chs")) returned 0x20
	[0175.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.chs")) returned 0x20
	[0175.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.148] SetEvent (hEvent=0xfc) returned 1
	[0175.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.149] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.149] CloseHandle (hObject=0x22c) returned 1
	[0175.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cht")) returned 0x20
	[0175.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cht")) returned 0x20
	[0175.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.149] SetEvent (hEvent=0xfc) returned 1
	[0175.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.150] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.150] CloseHandle (hObject=0x22c) returned 1
	[0175.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.dan")) returned 0x20
	[0175.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.dan")) returned 0x20
	[0175.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.151] SetEvent (hEvent=0xfc) returned 1
	[0175.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.151] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.151] CloseHandle (hObject=0x22c) returned 1
	[0175.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.deu")) returned 0x20
	[0175.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.deu")) returned 0x20
	[0175.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.152] SetEvent (hEvent=0xfc) returned 1
	[0175.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.153] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.153] CloseHandle (hObject=0x22c) returned 1
	[0175.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.esp")) returned 0x20
	[0175.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.esp")) returned 0x20
	[0175.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.153] SetEvent (hEvent=0xfc) returned 1
	[0175.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.154] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.154] CloseHandle (hObject=0x22c) returned 1
	[0175.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.euq")) returned 0x20
	[0175.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.euq")) returned 0x20
	[0175.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.154] SetEvent (hEvent=0xfc) returned 1
	[0175.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.155] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.155] CloseHandle (hObject=0x22c) returned 1
	[0175.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.fra")) returned 0x20
	[0175.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.fra")) returned 0x20
	[0175.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.156] SetEvent (hEvent=0xfc) returned 1
	[0175.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.156] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.156] CloseHandle (hObject=0x22c) returned 1
	[0175.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ita")) returned 0x20
	[0175.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ita")) returned 0x20
	[0175.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.157] SetEvent (hEvent=0xfc) returned 1
	[0175.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.158] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.158] CloseHandle (hObject=0x22c) returned 1
	[0175.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.jpn")) returned 0x20
	[0175.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.jpn")) returned 0x20
	[0175.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.158] SetEvent (hEvent=0xfc) returned 1
	[0175.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.159] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.159] CloseHandle (hObject=0x22c) returned 1
	[0175.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.kor")) returned 0x20
	[0175.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.kor")) returned 0x20
	[0175.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.159] SetEvent (hEvent=0xfc) returned 1
	[0175.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.mpp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.160] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=218112) returned 1
	[0175.160] CloseHandle (hObject=0x22c) returned 1
	[0175.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.mpp")) returned 0x20
	[0175.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.mpp")) returned 0x20
	[0175.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.mpp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.mpp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.161] SetEvent (hEvent=0xfc) returned 1
	[0175.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.162] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.162] CloseHandle (hObject=0x22c) returned 1
	[0175.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nld")) returned 0x20
	[0175.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nld")) returned 0x20
	[0175.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.163] SetEvent (hEvent=0xfc) returned 1
	[0175.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.164] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.164] CloseHandle (hObject=0x22c) returned 1
	[0175.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nor")) returned 0x20
	[0175.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nor")) returned 0x20
	[0175.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.164] SetEvent (hEvent=0xfc) returned 1
	[0175.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.165] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.165] CloseHandle (hObject=0x22c) returned 1
	[0175.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ptb")) returned 0x20
	[0175.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ptb")) returned 0x20
	[0175.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.166] SetEvent (hEvent=0xfc) returned 1
	[0175.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.321] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.321] CloseHandle (hObject=0x238) returned 1
	[0175.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo")) returned 0x20
	[0175.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo")) returned 0x20
	[0175.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.321] SetEvent (hEvent=0xfc) returned 1
	[0175.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\windowsmedia.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.322] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.322] CloseHandle (hObject=0x238) returned 1
	[0175.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\windowsmedia.tur")) returned 0x20
	[0175.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\windowsmedia.tur")) returned 0x20
	[0175.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\windowsmedia.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\WindowsMedia.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\windowsmedia.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.323] SetEvent (hEvent=0xfc) returned 1
	[0175.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\flash.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.323] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.323] CloseHandle (hObject=0x238) returned 1
	[0175.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\flash.ukr")) returned 0x20
	[0175.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\flash.ukr")) returned 0x20
	[0175.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\flash.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\Flash.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\flash.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.324] SetEvent (hEvent=0xfc) returned 1
	[0175.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\mcimpp.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.325] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0175.325] CloseHandle (hObject=0x238) returned 1
	[0175.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\mcimpp.ukr")) returned 0x20
	[0175.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\mcimpp.ukr")) returned 0x20
	[0175.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\mcimpp.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\MCIMPP.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\mcimpp.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.325] SetEvent (hEvent=0xfc) returned 1
	[0175.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\quicktime.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.326] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.326] CloseHandle (hObject=0x238) returned 1
	[0175.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\quicktime.ukr")) returned 0x20
	[0175.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\quicktime.ukr")) returned 0x20
	[0175.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\quicktime.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\QuickTime.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\quicktime.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.326] SetEvent (hEvent=0xfc) returned 1
	[0175.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\windowsmedia.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.327] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0175.327] CloseHandle (hObject=0x238) returned 1
	[0175.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\windowsmedia.ukr")) returned 0x20
	[0175.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\windowsmedia.ukr")) returned 0x20
	[0175.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\windowsmedia.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\WindowsMedia.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_ukr\\windowsmedia.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.328] SetEvent (hEvent=0xfc) returned 1
	[0175.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.328] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1526883) returned 1
	[0175.328] CloseHandle (hObject=0x238) returned 1
	[0175.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia.api")) returned 0x20
	[0175.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia.api")) returned 0x20
	[0175.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.329] SetEvent (hEvent=0xfc) returned 1
	[0175.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\pddom.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.330] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=430691) returned 1
	[0175.330] CloseHandle (hObject=0x238) returned 1
	[0175.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\pddom.api")) returned 0x20
	[0175.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\pddom.api")) returned 0x20
	[0175.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\pddom.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\pddom.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.330] SetEvent (hEvent=0xfc) returned 1
	[0175.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.331] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7598691) returned 1
	[0175.331] CloseHandle (hObject=0x238) returned 1
	[0175.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api")) returned 0x20
	[0175.331] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0175.331] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ppklite.api")) returned 0
	[0175.331] SetEvent (hEvent=0xfc) returned 1
	[0175.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\readoutloud.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.332] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=112227) returned 1
	[0175.332] CloseHandle (hObject=0x238) returned 1
	[0175.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\readoutloud.api")) returned 0x20
	[0175.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\readoutloud.api")) returned 0x20
	[0175.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\readoutloud.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\readoutloud.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.332] SetEvent (hEvent=0xfc) returned 1
	[0175.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\reflow.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.333] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=347747) returned 1
	[0175.333] CloseHandle (hObject=0x238) returned 1
	[0175.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\reflow.api")) returned 0x20
	[0175.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\reflow.api")) returned 0x20
	[0175.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\reflow.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\reflow.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.334] SetEvent (hEvent=0xfc) returned 1
	[0175.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\saveasrtf.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.334] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=406115) returned 1
	[0175.334] CloseHandle (hObject=0x238) returned 1
	[0175.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\saveasrtf.api")) returned 0x20
	[0175.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\saveasrtf.api")) returned 0x20
	[0175.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\saveasrtf.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\saveasrtf.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.335] SetEvent (hEvent=0xfc) returned 1
	[0175.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\search.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.336] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=430179) returned 1
	[0175.336] CloseHandle (hObject=0x238) returned 1
	[0175.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\search.api")) returned 0x20
	[0175.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\search.api")) returned 0x20
	[0175.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\search.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\search.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.336] SetEvent (hEvent=0xfc) returned 1
	[0175.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\sendmail.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.337] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=154723) returned 1
	[0175.337] CloseHandle (hObject=0x238) returned 1
	[0175.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\sendmail.api")) returned 0x20
	[0175.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\sendmail.api")) returned 0x20
	[0175.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\sendmail.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\sendmail.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.337] SetEvent (hEvent=0xfc) returned 1
	[0175.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\spelling.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.338] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=277091) returned 1
	[0175.338] CloseHandle (hObject=0x238) returned 1
	[0175.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\spelling.api")) returned 0x20
	[0175.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\spelling.api")) returned 0x20
	[0175.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\spelling.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\spelling.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.339] SetEvent (hEvent=0xfc) returned 1
	[0175.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\updater.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.339] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=169059) returned 1
	[0175.339] CloseHandle (hObject=0x238) returned 1
	[0175.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\updater.api")) returned 0x20
	[0175.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\updater.api")) returned 0x20
	[0175.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\updater.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\updater.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.342] SetEvent (hEvent=0xfc) returned 1
	[0175.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\weblink.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.343] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=306275) returned 1
	[0175.343] CloseHandle (hObject=0x238) returned 1
	[0175.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\weblink.api")) returned 0x20
	[0175.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\weblink.api")) returned 0x20
	[0175.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\weblink.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\weblink.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.344] SetEvent (hEvent=0xfc) returned 1
	[0175.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\2d.x3d"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.539] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=551304) returned 1
	[0175.539] CloseHandle (hObject=0x234) returned 1
	[0175.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\2d.x3d")) returned 0x20
	[0175.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\2d.x3d")) returned 0x20
	[0175.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\2d.x3d.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\2d.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.539] SetEvent (hEvent=0xfc) returned 1
	[0175.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx8.x3d"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.540] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=435600) returned 1
	[0175.540] CloseHandle (hObject=0x234) returned 1
	[0175.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx8.x3d")) returned 0x20
	[0175.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx8.x3d")) returned 0x20
	[0175.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx8.x3d.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX8.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx8.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx9.x3d"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.541] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=814992) returned 1
	[0175.541] CloseHandle (hObject=0x234) returned 1
	[0175.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx9.x3d")) returned 0x20
	[0175.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx9.x3d")) returned 0x20
	[0175.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx9.x3d.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvdx9.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvsoft.x3d"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.542] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=217488) returned 1
	[0175.542] CloseHandle (hObject=0x234) returned 1
	[0175.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvsoft.x3d")) returned 0x20
	[0175.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvsoft.x3d")) returned 0x20
	[0175.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvsoft.x3d.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\drvsoft.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\myriadcad.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.543] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=78276) returned 1
	[0175.543] CloseHandle (hObject=0x234) returned 1
	[0175.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\myriadcad.otf")) returned 0x20
	[0175.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\myriadcad.otf")) returned 0x20
	[0175.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\myriadcad.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prc\\myriadcad.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.546] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3150224) returned 1
	[0175.546] CloseHandle (hObject=0x238) returned 1
	[0175.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d")) returned 0x20
	[0175.546] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0175.547] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\prcr.x3d")) returned 0
	[0175.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\tesselate.x3d"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.547] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22424) returned 1
	[0175.547] CloseHandle (hObject=0x238) returned 1
	[0175.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\tesselate.x3d")) returned 0x20
	[0175.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\tesselate.x3d")) returned 0x20
	[0175.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\tesselate.x3d.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\tesselate.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.548] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=420) returned 1
	[0175.548] CloseHandle (hObject=0x238) returned 1
	[0175.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer")) returned 0x20
	[0175.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer")) returned 0x20
	[0175.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pmd.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\reader_sl.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.549] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35736) returned 1
	[0175.549] CloseHandle (hObject=0x238) returned 1
	[0175.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\reader_sl.exe")) returned 0x20
	[0175.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\reader_sl.exe")) returned 0x20
	[0175.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\reader_sl.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\reader_sl.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\reader_sl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\rt3d.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rt3d.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.550] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2207632) returned 1
	[0175.550] CloseHandle (hObject=0x238) returned 1
	[0175.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\rt3d.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rt3d.dll")) returned 0x20
	[0175.550] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\rt3d.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rt3d.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\rt3d.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rt3d.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0175.550] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\rt3d.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rt3d.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\rt3d.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rt3d.dll")) returned 0
	[0175.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.552] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1098) returned 1
	[0175.552] CloseHandle (hObject=0x238) returned 1
	[0175.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der")) returned 0x20
	[0175.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der")) returned 0x20
	[0175.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\rtc.der"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ScCore.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\sccore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.552] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=589712) returned 1
	[0175.553] CloseHandle (hObject=0x238) returned 1
	[0175.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ScCore.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\sccore.dll")) returned 0x20
	[0175.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ScCore.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\sccore.dll")) returned 0x20
	[0175.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ScCore.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\sccore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ScCore.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\sccore.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\dexshare.spi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.554] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1055685) returned 1
	[0175.554] CloseHandle (hObject=0x238) returned 1
	[0175.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\dexshare.spi")) returned 0x20
	[0175.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\dexshare.spi")) returned 0x20
	[0175.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\dexshare.spi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\DEXShare.spi" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\dexshare.spi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.555] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32633) returned 1
	[0175.555] CloseHandle (hObject=0x238) returned 1
	[0175.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg")) returned 0x20
	[0175.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg")) returned 0x20
	[0175.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\Services.cfg" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\services\\services.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\spplugins\\admplugin.apl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.556] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1396224) returned 1
	[0175.556] CloseHandle (hObject=0x238) returned 1
	[0175.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\spplugins\\admplugin.apl")) returned 0x20
	[0175.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\spplugins\\admplugin.apl")) returned 0x20
	[0175.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\spplugins\\admplugin.apl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\ADMPlugin.apl" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\spplugins\\admplugin.apl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\sqlite.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\sqlite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.557] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=249232) returned 1
	[0175.557] CloseHandle (hObject=0x238) returned 1
	[0175.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\sqlite.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\sqlite.dll")) returned 0x20
	[0175.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\sqlite.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\sqlite.dll")) returned 0x20
	[0175.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\sqlite.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\sqlite.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\sqlite.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\sqlite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.559] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1338) returned 1
	[0175.559] CloseHandle (hObject=0x23c) returned 1
	[0175.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif")) returned 0x20
	[0175.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif")) returned 0x20
	[0175.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\add_reviewer.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.560] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=83) returned 1
	[0175.561] CloseHandle (hObject=0x23c) returned 1
	[0175.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif")) returned 0x20
	[0175.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif")) returned 0x20
	[0175.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\bl.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.562] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=82) returned 1
	[0175.562] CloseHandle (hObject=0x238) returned 1
	[0175.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif")) returned 0x20
	[0175.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif")) returned 0x20
	[0175.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\br.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.563] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1194) returned 1
	[0175.563] CloseHandle (hObject=0x238) returned 1
	[0175.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif")) returned 0x20
	[0175.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif")) returned 0x20
	[0175.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\create_form.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.565] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=821) returned 1
	[0175.565] CloseHandle (hObject=0x238) returned 1
	[0175.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif")) returned 0x20
	[0175.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif")) returned 0x20
	[0175.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\distribute_form.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.565] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1443) returned 1
	[0175.566] CloseHandle (hObject=0x238) returned 1
	[0175.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif")) returned 0x20
	[0175.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif")) returned 0x20
	[0175.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_all.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.566] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1360) returned 1
	[0175.567] CloseHandle (hObject=0x238) returned 1
	[0175.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif")) returned 0x20
	[0175.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif")) returned 0x20
	[0175.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\email_initiator.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.567] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=807) returned 1
	[0175.567] CloseHandle (hObject=0x238) returned 1
	[0175.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif")) returned 0x20
	[0175.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif")) returned 0x20
	[0175.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\ended_review_or_form.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.569] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=900) returned 1
	[0175.569] CloseHandle (hObject=0x238) returned 1
	[0175.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif")) returned 0x20
	[0175.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif")) returned 0x20
	[0175.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\end_review.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.570] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=613) returned 1
	[0175.570] CloseHandle (hObject=0x238) returned 1
	[0175.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif")) returned 0x20
	[0175.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif")) returned 0x20
	[0175.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_distributed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.571] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=615) returned 1
	[0175.571] CloseHandle (hObject=0x238) returned 1
	[0175.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif")) returned 0x20
	[0175.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif")) returned 0x20
	[0175.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_received.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.572] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=552) returned 1
	[0175.572] CloseHandle (hObject=0x238) returned 1
	[0175.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif")) returned 0x20
	[0175.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif")) returned 0x20
	[0175.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\forms_super.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.575] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=969) returned 1
	[0175.575] CloseHandle (hObject=0x238) returned 1
	[0175.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif")) returned 0x20
	[0175.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif")) returned 0x20
	[0175.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\form_responses.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.576] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=578) returned 1
	[0175.576] CloseHandle (hObject=0x238) returned 1
	[0175.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif")) returned 0x20
	[0175.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif")) returned 0x20
	[0175.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\info.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.577] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11930) returned 1
	[0175.577] CloseHandle (hObject=0x238) returned 1
	[0175.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css")) returned 0x20
	[0175.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css")) returned 0x20
	[0175.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.663] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=806) returned 1
	[0175.663] CloseHandle (hObject=0x23c) returned 1
	[0175.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif")) returned 0x20
	[0175.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif")) returned 0x20
	[0175.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\open_original_form.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.664] SetEvent (hEvent=0xfc) returned 1
	[0175.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.665] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1452) returned 1
	[0175.665] CloseHandle (hObject=0x23c) returned 1
	[0175.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif")) returned 0x20
	[0175.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif")) returned 0x20
	[0175.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviewers.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.666] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=914) returned 1
	[0175.666] CloseHandle (hObject=0x23c) returned 1
	[0175.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif")) returned 0x20
	[0175.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif")) returned 0x20
	[0175.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_joined.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.667] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=909) returned 1
	[0175.667] CloseHandle (hObject=0x23c) returned 1
	[0175.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif")) returned 0x20
	[0175.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif")) returned 0x20
	[0175.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_sent.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.668] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=814) returned 1
	[0175.668] CloseHandle (hObject=0x23c) returned 1
	[0175.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif")) returned 0x20
	[0175.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif")) returned 0x20
	[0175.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\reviews_super.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.669] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1151) returned 1
	[0175.669] CloseHandle (hObject=0x23c) returned 1
	[0175.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif")) returned 0x20
	[0175.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif")) returned 0x20
	[0175.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_browser.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.669] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1405) returned 1
	[0175.670] CloseHandle (hObject=0x23c) returned 1
	[0175.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif")) returned 0x20
	[0175.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif")) returned 0x20
	[0175.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_email.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.670] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=962) returned 1
	[0175.671] CloseHandle (hObject=0x23c) returned 1
	[0175.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif")) returned 0x20
	[0175.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif")) returned 0x20
	[0175.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_same_reviewers.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.671] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1365) returned 1
	[0175.671] CloseHandle (hObject=0x23c) returned 1
	[0175.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif")) returned 0x20
	[0175.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif")) returned 0x20
	[0175.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\review_shared.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.672] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0175.672] CloseHandle (hObject=0x23c) returned 1
	[0175.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif")) returned 0x20
	[0175.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif")) returned 0x20
	[0175.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\rss.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.673] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=576) returned 1
	[0175.673] CloseHandle (hObject=0x23c) returned 1
	[0175.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif")) returned 0x20
	[0175.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif")) returned 0x20
	[0175.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_issue.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.674] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1255) returned 1
	[0175.674] CloseHandle (hObject=0x23c) returned 1
	[0175.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif")) returned 0x20
	[0175.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif")) returned 0x20
	[0175.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_lg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.819] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=225) returned 1
	[0175.819] CloseHandle (hObject=0x22c) returned 1
	[0175.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif")) returned 0x20
	[0175.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif")) returned 0x20
	[0175.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\server_ok.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.820] SetEvent (hEvent=0xfc) returned 1
	[0175.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.821] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18837) returned 1
	[0175.821] CloseHandle (hObject=0x22c) returned 1
	[0175.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm")) returned 0x20
	[0175.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm")) returned 0x20
	[0175.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.821] SetEvent (hEvent=0xfc) returned 1
	[0175.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.949] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5497908) returned 1
	[0175.949] CloseHandle (hObject=0x22c) returned 1
	[0175.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf")) returned 0x20
	[0175.950] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0175.950] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeFanHeitiStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobefanheitistd-bold.otf")) returned 0
	[0175.950] SetEvent (hEvent=0xfc) returned 1
	[0175.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-ucs2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.215] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=281794) returned 1
	[0176.215] CloseHandle (hObject=0x230) returned 1
	[0176.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-ucs2")) returned 0x20
	[0176.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-ucs2")) returned 0x20
	[0176.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-ucs2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-ucs2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.215] SetEvent (hEvent=0xfc) returned 1
	[0176.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.216] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3524) returned 1
	[0176.216] CloseHandle (hObject=0x230) returned 1
	[0176.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-1")) returned 0x20
	[0176.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-1")) returned 0x20
	[0176.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-1.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.217] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3564) returned 1
	[0176.217] CloseHandle (hObject=0x230) returned 1
	[0176.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-2")) returned 0x20
	[0176.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-2")) returned 0x20
	[0176.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.218] SetEvent (hEvent=0xfc) returned 1
	[0176.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.218] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3575) returned 1
	[0176.218] CloseHandle (hObject=0x230) returned 1
	[0176.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-3")) returned 0x20
	[0176.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-3")) returned 0x20
	[0176.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-3.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-4"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.219] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4077) returned 1
	[0176.220] CloseHandle (hObject=0x230) returned 1
	[0176.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-4")) returned 0x20
	[0176.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-4")) returned 0x20
	[0176.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-4.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-5"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.221] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4476) returned 1
	[0176.221] CloseHandle (hObject=0x230) returned 1
	[0176.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-5")) returned 0x20
	[0176.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-5")) returned 0x20
	[0176.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-5.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-6"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.222] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4707) returned 1
	[0176.222] CloseHandle (hObject=0x230) returned 1
	[0176.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-6")) returned 0x20
	[0176.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-6")) returned 0x20
	[0176.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-6.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-6" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90ms-rksj"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.225] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6353) returned 1
	[0176.225] CloseHandle (hObject=0x230) returned 1
	[0176.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90ms-rksj")) returned 0x20
	[0176.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90ms-rksj")) returned 0x20
	[0176.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90ms-rksj.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90ms-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90ms-rksj"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90pv-rksj"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.226] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8442) returned 1
	[0176.226] CloseHandle (hObject=0x230) returned 1
	[0176.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90pv-rksj")) returned 0x20
	[0176.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90pv-rksj")) returned 0x20
	[0176.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90pv-rksj.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-90pv-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-90pv-rksj"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.227] SetEvent (hEvent=0xfc) returned 1
	[0176.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-cid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.227] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2291) returned 1
	[0176.228] CloseHandle (hObject=0x230) returned 1
	[0176.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-cid")) returned 0x20
	[0176.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-cid")) returned 0x20
	[0176.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-cid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-cid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-host"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.229] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6625) returned 1
	[0176.229] CloseHandle (hObject=0x230) returned 1
	[0176.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-host")) returned 0x20
	[0176.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-host")) returned 0x20
	[0176.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-host.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-host"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-mac"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.230] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5492) returned 1
	[0176.230] CloseHandle (hObject=0x230) returned 1
	[0176.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-mac")) returned 0x20
	[0176.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-mac")) returned 0x20
	[0176.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-mac.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-h-mac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-ucs2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.231] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=301722) returned 1
	[0176.231] CloseHandle (hObject=0x230) returned 1
	[0176.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-ucs2")) returned 0x20
	[0176.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-ucs2")) returned 0x20
	[0176.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-ucs2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-ucs2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-0"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.328] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3618) returned 1
	[0176.328] CloseHandle (hObject=0x230) returned 1
	[0176.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-0")) returned 0x20
	[0176.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-0")) returned 0x20
	[0176.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-0.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.328] SetEvent (hEvent=0xfc) returned 1
	[0176.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscpc-euc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.329] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11507) returned 1
	[0176.329] CloseHandle (hObject=0x230) returned 1
	[0176.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscpc-euc")) returned 0x20
	[0176.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscpc-euc")) returned 0x20
	[0176.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscpc-euc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscpc-euc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-ucs2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.330] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=154586) returned 1
	[0176.330] CloseHandle (hObject=0x230) returned 1
	[0176.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-ucs2")) returned 0x20
	[0176.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-ucs2")) returned 0x20
	[0176.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-ucs2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-ucs2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.331] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7953) returned 1
	[0176.331] CloseHandle (hObject=0x230) returned 1
	[0176.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-h")) returned 0x20
	[0176.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-h")) returned 0x20
	[0176.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.332] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1225) returned 1
	[0176.332] CloseHandle (hObject=0x230) returned 1
	[0176.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2")) returned 0x20
	[0176.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2")) returned 0x20
	[0176.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2c"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.334] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=284606) returned 1
	[0176.334] CloseHandle (hObject=0x230) returned 1
	[0176.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2c")) returned 0x20
	[0176.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2c")) returned 0x20
	[0176.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2c.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-ucs2c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.334] SetEvent (hEvent=0xfc) returned 1
	[0176.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.335] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3095) returned 1
	[0176.335] CloseHandle (hObject=0x230) returned 1
	[0176.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-v")) returned 0x20
	[0176.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-v")) returned 0x20
	[0176.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\B5pc-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\b5pc-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.336] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12805) returned 1
	[0176.336] CloseHandle (hObject=0x230) returned 1
	[0176.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-h")) returned 0x20
	[0176.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-h")) returned 0x20
	[0176.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.337] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13885) returned 1
	[0176.337] CloseHandle (hObject=0x230) returned 1
	[0176.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-v")) returned 0x20
	[0176.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-v")) returned 0x20
	[0176.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\CNS-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\cns-euc-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.338] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8115) returned 1
	[0176.338] CloseHandle (hObject=0x230) returned 1
	[0176.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-h")) returned 0x20
	[0176.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-h")) returned 0x20
	[0176.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.339] SetEvent (hEvent=0xfc) returned 1
	[0176.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-ucs2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.339] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=288463) returned 1
	[0176.339] CloseHandle (hObject=0x230) returned 1
	[0176.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-ucs2")) returned 0x20
	[0176.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-ucs2")) returned 0x20
	[0176.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-ucs2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-ucs2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.340] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3134) returned 1
	[0176.341] CloseHandle (hObject=0x230) returned 1
	[0176.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-v")) returned 0x20
	[0176.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-v")) returned 0x20
	[0176.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETen-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\eten-b5-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.342] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2877) returned 1
	[0176.342] CloseHandle (hObject=0x230) returned 1
	[0176.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-h")) returned 0x20
	[0176.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-h")) returned 0x20
	[0176.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.343] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3209) returned 1
	[0176.343] CloseHandle (hObject=0x230) returned 1
	[0176.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-v")) returned 0x20
	[0176.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-v")) returned 0x20
	[0176.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETenms-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\etenms-b5-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.344] SetEvent (hEvent=0xfc) returned 1
	[0176.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.344] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24599) returned 1
	[0176.344] CloseHandle (hObject=0x230) returned 1
	[0176.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-h")) returned 0x20
	[0176.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-h")) returned 0x20
	[0176.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.345] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3114) returned 1
	[0176.345] CloseHandle (hObject=0x230) returned 1
	[0176.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-v")) returned 0x20
	[0176.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-v")) returned 0x20
	[0176.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\ETHK-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ethk-b5-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\euc-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.346] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5351) returned 1
	[0176.346] CloseHandle (hObject=0x230) returned 1
	[0176.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\euc-h")) returned 0x20
	[0176.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\euc-h")) returned 0x20
	[0176.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\euc-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\euc-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\euc-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.348] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3397) returned 1
	[0176.348] CloseHandle (hObject=0x230) returned 1
	[0176.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\euc-v")) returned 0x20
	[0176.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\euc-v")) returned 0x20
	[0176.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\euc-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\euc-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.348] SetEvent (hEvent=0xfc) returned 1
	[0176.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.349] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16444) returned 1
	[0176.349] CloseHandle (hObject=0x230) returned 1
	[0176.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-h")) returned 0x20
	[0176.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-h")) returned 0x20
	[0176.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.350] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3667) returned 1
	[0176.350] CloseHandle (hObject=0x230) returned 1
	[0176.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-v")) returned 0x20
	[0176.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-v")) returned 0x20
	[0176.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Ext-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ext-rksj-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.356] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4669) returned 1
	[0176.356] CloseHandle (hObject=0x230) returned 1
	[0176.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-h")) returned 0x20
	[0176.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-h")) returned 0x20
	[0176.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.356] SetEvent (hEvent=0xfc) returned 1
	[0176.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.357] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3267) returned 1
	[0176.357] CloseHandle (hObject=0x230) returned 1
	[0176.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-v")) returned 0x20
	[0176.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-v")) returned 0x20
	[0176.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GB-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gb-euc-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.358] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=87444) returned 1
	[0176.358] CloseHandle (hObject=0x230) returned 1
	[0176.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-h")) returned 0x20
	[0176.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-h")) returned 0x20
	[0176.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-ucs2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.360] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=233552) returned 1
	[0176.360] CloseHandle (hObject=0x230) returned 1
	[0176.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-ucs2")) returned 0x20
	[0176.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-ucs2")) returned 0x20
	[0176.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-ucs2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-ucs2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.362] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3255) returned 1
	[0176.362] CloseHandle (hObject=0x230) returned 1
	[0176.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-v")) returned 0x20
	[0176.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-v")) returned 0x20
	[0176.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk-euc-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.362] SetEvent (hEvent=0xfc) returned 1
	[0176.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.363] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=96320) returned 1
	[0176.364] CloseHandle (hObject=0x230) returned 1
	[0176.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-h")) returned 0x20
	[0176.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-h")) returned 0x20
	[0176.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.365] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3669) returned 1
	[0176.365] CloseHandle (hObject=0x230) returned 1
	[0176.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-v")) returned 0x20
	[0176.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-v")) returned 0x20
	[0176.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBK2K-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbk2k-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.463] SetEvent (hEvent=0xfc) returned 1
	[0176.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.573] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4699) returned 1
	[0176.573] CloseHandle (hObject=0x230) returned 1
	[0176.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-h")) returned 0x20
	[0176.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-h")) returned 0x20
	[0176.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.574] SetEvent (hEvent=0xfc) returned 1
	[0176.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.574] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49274) returned 1
	[0176.574] CloseHandle (hObject=0x230) returned 1
	[0176.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-h")) returned 0x20
	[0176.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-h")) returned 0x20
	[0176.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.575] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3275) returned 1
	[0176.575] CloseHandle (hObject=0x230) returned 1
	[0176.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-v")) returned 0x20
	[0176.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-v")) returned 0x20
	[0176.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBT-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbt-euc-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.576] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5210) returned 1
	[0176.576] CloseHandle (hObject=0x230) returned 1
	[0176.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\h")) returned 0x20
	[0176.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\h")) returned 0x20
	[0176.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.577] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24471) returned 1
	[0176.577] CloseHandle (hObject=0x230) returned 1
	[0176.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-h")) returned 0x20
	[0176.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-h")) returned 0x20
	[0176.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.579] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3099) returned 1
	[0176.579] CloseHandle (hObject=0x230) returned 1
	[0176.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-v")) returned 0x20
	[0176.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-v")) returned 0x20
	[0176.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdla-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdla-b5-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.579] SetEvent (hEvent=0xfc) returned 1
	[0176.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.580] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22013) returned 1
	[0176.580] CloseHandle (hObject=0x230) returned 1
	[0176.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-h")) returned 0x20
	[0176.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-h")) returned 0x20
	[0176.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.581] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3099) returned 1
	[0176.581] CloseHandle (hObject=0x230) returned 1
	[0176.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-v")) returned 0x20
	[0176.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-v")) returned 0x20
	[0176.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKdlb-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkdlb-b5-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.582] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14442) returned 1
	[0176.582] CloseHandle (hObject=0x230) returned 1
	[0176.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-h")) returned 0x20
	[0176.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-h")) returned 0x20
	[0176.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.584] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3105) returned 1
	[0176.584] CloseHandle (hObject=0x230) returned 1
	[0176.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-v")) returned 0x20
	[0176.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-v")) returned 0x20
	[0176.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKgccs-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkgccs-b5-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.584] SetEvent (hEvent=0xfc) returned 1
	[0176.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.585] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14245) returned 1
	[0176.585] CloseHandle (hObject=0x230) returned 1
	[0176.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-h")) returned 0x20
	[0176.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-h")) returned 0x20
	[0176.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.586] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3105) returned 1
	[0176.586] CloseHandle (hObject=0x230) returned 1
	[0176.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-v")) returned 0x20
	[0176.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-v")) returned 0x20
	[0176.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm314-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm314-b5-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.587] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17365) returned 1
	[0176.587] CloseHandle (hObject=0x230) returned 1
	[0176.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-h")) returned 0x20
	[0176.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-h")) returned 0x20
	[0176.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.589] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3105) returned 1
	[0176.589] CloseHandle (hObject=0x230) returned 1
	[0176.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-v")) returned 0x20
	[0176.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-v")) returned 0x20
	[0176.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKm471-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkm471-b5-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.589] SetEvent (hEvent=0xfc) returned 1
	[0176.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.590] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24653) returned 1
	[0176.590] CloseHandle (hObject=0x230) returned 1
	[0176.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-h")) returned 0x20
	[0176.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-h")) returned 0x20
	[0176.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.591] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3120) returned 1
	[0176.591] CloseHandle (hObject=0x230) returned 1
	[0176.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-v")) returned 0x20
	[0176.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-v")) returned 0x20
	[0176.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\HKscs-B5-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\hkscs-b5-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\identity-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.592] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8228) returned 1
	[0176.592] CloseHandle (hObject=0x230) returned 1
	[0176.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\identity-h")) returned 0x20
	[0176.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\identity-h")) returned 0x20
	[0176.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\identity-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\identity-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\identity-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.593] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2761) returned 1
	[0176.593] CloseHandle (hObject=0x230) returned 1
	[0176.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\identity-v")) returned 0x20
	[0176.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\identity-v")) returned 0x20
	[0176.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\identity-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\identity-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.594] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12359) returned 1
	[0176.594] CloseHandle (hObject=0x230) returned 1
	[0176.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-h")) returned 0x20
	[0176.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-h")) returned 0x20
	[0176.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.595] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3199) returned 1
	[0176.595] CloseHandle (hObject=0x230) returned 1
	[0176.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-v")) returned 0x20
	[0176.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-v")) returned 0x20
	[0176.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSC-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ksc-euc-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.596] SetEvent (hEvent=0xfc) returned 1
	[0176.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.597] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16785) returned 1
	[0176.597] CloseHandle (hObject=0x230) returned 1
	[0176.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-h")) returned 0x20
	[0176.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-h")) returned 0x20
	[0176.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.598] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16780) returned 1
	[0176.598] CloseHandle (hObject=0x230) returned 1
	[0176.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-h")) returned 0x20
	[0176.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-h")) returned 0x20
	[0176.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.599] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3211) returned 1
	[0176.599] CloseHandle (hObject=0x230) returned 1
	[0176.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-v")) returned 0x20
	[0176.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-v")) returned 0x20
	[0176.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-HW-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-hw-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-ucs2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.600] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=189847) returned 1
	[0176.600] CloseHandle (hObject=0x230) returned 1
	[0176.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-ucs2")) returned 0x20
	[0176.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-ucs2")) returned 0x20
	[0176.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-ucs2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-ucs2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.601] SetEvent (hEvent=0xfc) returned 1
	[0176.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.601] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3213) returned 1
	[0176.601] CloseHandle (hObject=0x230) returned 1
	[0176.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-v")) returned 0x20
	[0176.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-v")) returned 0x20
	[0176.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCms-UHC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscms-uhc-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.602] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13232) returned 1
	[0176.602] CloseHandle (hObject=0x230) returned 1
	[0176.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-h")) returned 0x20
	[0176.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-h")) returned 0x20
	[0176.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.603] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16328) returned 1
	[0176.603] CloseHandle (hObject=0x230) returned 1
	[0176.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2")) returned 0x20
	[0176.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2")) returned 0x20
	[0176.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2c"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.605] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=156825) returned 1
	[0176.605] CloseHandle (hObject=0x230) returned 1
	[0176.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2c")) returned 0x20
	[0176.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2c")) returned 0x20
	[0176.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2c.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\KSCpc-EUC-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\kscpc-euc-ucs2c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.605] SetEvent (hEvent=0xfc) returned 1
	[0176.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90ms-rksj"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.716] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=155399) returned 1
	[0176.717] CloseHandle (hObject=0x210) returned 1
	[0176.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90ms-rksj")) returned 0x20
	[0176.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90ms-rksj")) returned 0x20
	[0176.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90ms-rksj.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90ms-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90ms-rksj"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.717] SetEvent (hEvent=0xfc) returned 1
	[0176.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscms-uhc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.718] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=196449) returned 1
	[0176.718] CloseHandle (hObject=0x210) returned 1
	[0176.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscms-uhc")) returned 0x20
	[0176.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscms-uhc")) returned 0x20
	[0176.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscms-uhc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCms-UHC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscms-uhc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscpc-euc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.719] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=153399) returned 1
	[0176.719] CloseHandle (hObject=0x210) returned 1
	[0176.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscpc-euc")) returned 0x20
	[0176.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscpc-euc")) returned 0x20
	[0176.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscpc-euc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-KSCpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-kscpc-euc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.720] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=343410) returned 1
	[0176.720] CloseHandle (hObject=0x210) returned 1
	[0176.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-h")) returned 0x20
	[0176.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-h")) returned 0x20
	[0176.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.721] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3130) returned 1
	[0176.721] CloseHandle (hObject=0x210) returned 1
	[0176.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-v")) returned 0x20
	[0176.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-v")) returned 0x20
	[0176.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-ucs2-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.723] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=271849) returned 1
	[0176.723] CloseHandle (hObject=0x210) returned 1
	[0176.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-h")) returned 0x20
	[0176.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-h")) returned 0x20
	[0176.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.724] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3123) returned 1
	[0176.724] CloseHandle (hObject=0x210) returned 1
	[0176.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-v")) returned 0x20
	[0176.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-v")) returned 0x20
	[0176.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniCNS-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unicns-utf16-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.725] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=288773) returned 1
	[0176.725] CloseHandle (hObject=0x210) returned 1
	[0176.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-h")) returned 0x20
	[0176.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-h")) returned 0x20
	[0176.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.726] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3337) returned 1
	[0176.726] CloseHandle (hObject=0x210) returned 1
	[0176.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-v")) returned 0x20
	[0176.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-v")) returned 0x20
	[0176.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-ucs2-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.727] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=214334) returned 1
	[0176.727] CloseHandle (hObject=0x210) returned 1
	[0176.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-h")) returned 0x20
	[0176.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-h")) returned 0x20
	[0176.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.728] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3234) returned 1
	[0176.729] CloseHandle (hObject=0x210) returned 1
	[0176.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-v")) returned 0x20
	[0176.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-v")) returned 0x20
	[0176.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniGB-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unigb-utf16-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.729] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=177536) returned 1
	[0176.730] CloseHandle (hObject=0x210) returned 1
	[0176.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-h")) returned 0x20
	[0176.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-h")) returned 0x20
	[0176.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.731] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2970) returned 1
	[0176.731] CloseHandle (hObject=0x210) returned 1
	[0176.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-h")) returned 0x20
	[0176.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-h")) returned 0x20
	[0176.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.732] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6939) returned 1
	[0176.732] CloseHandle (hObject=0x210) returned 1
	[0176.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-v")) returned 0x20
	[0176.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-v")) returned 0x20
	[0176.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-HW-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-hw-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.733] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6853) returned 1
	[0176.733] CloseHandle (hObject=0x210) returned 1
	[0176.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-v")) returned 0x20
	[0176.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-v")) returned 0x20
	[0176.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-ucs2-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0176.741] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=202173) returned 1
	[0176.741] CloseHandle (hObject=0x238) returned 1
	[0176.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-h")) returned 0x20
	[0176.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-h")) returned 0x20
	[0176.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.741] SetEvent (hEvent=0xfc) returned 1
	[0176.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0176.742] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6061) returned 1
	[0176.742] CloseHandle (hObject=0x238) returned 1
	[0176.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-v")) returned 0x20
	[0176.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-v")) returned 0x20
	[0176.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis-utf16-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0176.743] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=202256) returned 1
	[0176.743] CloseHandle (hObject=0x238) returned 1
	[0176.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-h")) returned 0x20
	[0176.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-h")) returned 0x20
	[0176.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0176.746] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6085) returned 1
	[0176.746] CloseHandle (hObject=0x238) returned 1
	[0176.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-v")) returned 0x20
	[0176.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-v")) returned 0x20
	[0176.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniJIS2004-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\unijis2004-utf16-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0176.747] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=174803) returned 1
	[0176.747] CloseHandle (hObject=0x238) returned 1
	[0176.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-h")) returned 0x20
	[0176.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-h")) returned 0x20
	[0176.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0176.748] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3240) returned 1
	[0176.748] CloseHandle (hObject=0x238) returned 1
	[0176.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-v")) returned 0x20
	[0176.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-v")) returned 0x20
	[0176.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UCS2-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-ucs2-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0176.749] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=131866) returned 1
	[0176.749] CloseHandle (hObject=0x238) returned 1
	[0176.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-h")) returned 0x20
	[0176.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-h")) returned 0x20
	[0176.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0176.750] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3198) returned 1
	[0176.750] CloseHandle (hObject=0x238) returned 1
	[0176.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-v")) returned 0x20
	[0176.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-v")) returned 0x20
	[0176.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UniKS-UTF16-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\uniks-utf16-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0176.751] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3373) returned 1
	[0176.751] CloseHandle (hObject=0x238) returned 1
	[0176.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\v")) returned 0x20
	[0176.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\v")) returned 0x20
	[0176.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0176.752] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7582) returned 1
	[0176.752] CloseHandle (hObject=0x238) returned 1
	[0176.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf")) returned 0x20
	[0176.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf")) returned 0x20
	[0176.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-bold.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.758] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=228988) returned 1
	[0176.758] CloseHandle (hObject=0x210) returned 1
	[0176.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-bold.otf")) returned 0x20
	[0176.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-bold.otf")) returned 0x20
	[0176.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-bold.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.759] SetEvent (hEvent=0xfc) returned 1
	[0176.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-bolditalic.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.759] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=252320) returned 1
	[0176.759] CloseHandle (hObject=0x210) returned 1
	[0176.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-bolditalic.otf")) returned 0x20
	[0176.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-bolditalic.otf")) returned 0x20
	[0176.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-bolditalic.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-BoldItalic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-bolditalic.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-italic.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.760] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=253152) returned 1
	[0176.760] CloseHandle (hObject=0x210) returned 1
	[0176.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-italic.otf")) returned 0x20
	[0176.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-italic.otf")) returned 0x20
	[0176.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-italic.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Italic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-italic.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-regular.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.888] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=228404) returned 1
	[0176.888] CloseHandle (hObject=0x168) returned 1
	[0176.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-regular.otf")) returned 0x20
	[0176.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-regular.otf")) returned 0x20
	[0176.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-regular.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeArabic-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobearabic-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.889] SetEvent (hEvent=0xfc) returned 1
	[0176.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-bold.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.889] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67160) returned 1
	[0176.889] CloseHandle (hObject=0x168) returned 1
	[0176.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-bold.otf")) returned 0x20
	[0176.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-bold.otf")) returned 0x20
	[0176.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-bold.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-bolditalic.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.890] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=70308) returned 1
	[0176.890] CloseHandle (hObject=0x168) returned 1
	[0176.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-bolditalic.otf")) returned 0x20
	[0176.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-bolditalic.otf")) returned 0x20
	[0176.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-bolditalic.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-BoldItalic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-bolditalic.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-italic.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.891] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=70584) returned 1
	[0176.891] CloseHandle (hObject=0x168) returned 1
	[0176.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-italic.otf")) returned 0x20
	[0176.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-italic.otf")) returned 0x20
	[0176.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-italic.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Italic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-italic.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-regular.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.893] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=66864) returned 1
	[0176.893] CloseHandle (hObject=0x168) returned 1
	[0176.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-regular.otf")) returned 0x20
	[0176.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-regular.otf")) returned 0x20
	[0176.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-regular.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeThai-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobethai-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-bold.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.894] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35740) returned 1
	[0176.895] CloseHandle (hObject=0x168) returned 1
	[0176.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-bold.otf")) returned 0x20
	[0176.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-bold.otf")) returned 0x20
	[0176.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-bold.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.895] SetEvent (hEvent=0xfc) returned 1
	[0176.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-boldoblique.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.896] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37084) returned 1
	[0176.896] CloseHandle (hObject=0x168) returned 1
	[0176.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-boldoblique.otf")) returned 0x20
	[0176.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-boldoblique.otf")) returned 0x20
	[0176.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-boldoblique.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-boldoblique.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-oblique.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.897] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37432) returned 1
	[0176.897] CloseHandle (hObject=0x168) returned 1
	[0176.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-oblique.otf")) returned 0x20
	[0176.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-oblique.otf")) returned 0x20
	[0176.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-oblique.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd-oblique.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.898] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35980) returned 1
	[0176.898] CloseHandle (hObject=0x168) returned 1
	[0176.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd.otf")) returned 0x20
	[0176.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd.otf")) returned 0x20
	[0176.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\courierstd.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-bold.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.899] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=230912) returned 1
	[0176.899] CloseHandle (hObject=0x168) returned 1
	[0176.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-bold.otf")) returned 0x20
	[0176.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-bold.otf")) returned 0x20
	[0176.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-bold.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-boldit.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.900] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=276632) returned 1
	[0176.900] CloseHandle (hObject=0x168) returned 1
	[0176.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-boldit.otf")) returned 0x20
	[0176.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-boldit.otf")) returned 0x20
	[0176.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-boldit.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-boldit.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.901] SetEvent (hEvent=0xfc) returned 1
	[0176.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-it.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.901] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=276140) returned 1
	[0176.901] CloseHandle (hObject=0x168) returned 1
	[0176.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-it.otf")) returned 0x20
	[0176.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-it.otf")) returned 0x20
	[0176.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-it.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-it.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-regular.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.902] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=231312) returned 1
	[0176.903] CloseHandle (hObject=0x168) returned 1
	[0176.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-regular.otf")) returned 0x20
	[0176.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-regular.otf")) returned 0x20
	[0176.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-regular.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\minionpro-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-bold.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.904] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=95684) returned 1
	[0176.904] CloseHandle (hObject=0x168) returned 1
	[0176.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-bold.otf")) returned 0x20
	[0176.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-bold.otf")) returned 0x20
	[0176.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-bold.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-boldit.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.905] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=100252) returned 1
	[0176.905] CloseHandle (hObject=0x168) returned 1
	[0176.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-boldit.otf")) returned 0x20
	[0176.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-boldit.otf")) returned 0x20
	[0176.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-boldit.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-boldit.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-it.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.906] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98064) returned 1
	[0176.906] CloseHandle (hObject=0x168) returned 1
	[0176.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-it.otf")) returned 0x20
	[0176.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-it.otf")) returned 0x20
	[0176.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-it.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-it.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-regular.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.907] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=94360) returned 1
	[0176.907] CloseHandle (hObject=0x168) returned 1
	[0176.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-regular.otf")) returned 0x20
	[0176.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-regular.otf")) returned 0x20
	[0176.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-regular.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\myriadpro-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\sy______.pfm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.910] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=672) returned 1
	[0176.911] CloseHandle (hObject=0x168) returned 1
	[0176.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\sy______.pfm")) returned 0x20
	[0176.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\sy______.pfm")) returned 0x20
	[0176.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\sy______.pfm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\sy______.pfm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.911] SetEvent (hEvent=0xfc) returned 1
	[0176.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\zx______.pfm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.912] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=683) returned 1
	[0176.912] CloseHandle (hObject=0x168) returned 1
	[0176.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\zx______.pfm")) returned 0x20
	[0176.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\zx______.pfm")) returned 0x20
	[0176.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\zx______.pfm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\zx______.pfm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\zy______.pfm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.913] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=684) returned 1
	[0176.913] CloseHandle (hObject=0x168) returned 1
	[0176.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\zy______.pfm")) returned 0x20
	[0176.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\zy______.pfm")) returned 0x20
	[0176.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\zy______.pfm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\pfm\\zy______.pfm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\sy______.pfb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.916] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34705) returned 1
	[0176.916] CloseHandle (hObject=0x168) returned 1
	[0176.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\sy______.pfb")) returned 0x20
	[0176.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\sy______.pfb")) returned 0x20
	[0176.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\sy______.pfb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\SY______.PFB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\sy______.pfb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\zx______.pfb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.917] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75573) returned 1
	[0176.917] CloseHandle (hObject=0x168) returned 1
	[0176.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\zx______.pfb")) returned 0x20
	[0176.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\zx______.pfb")) returned 0x20
	[0176.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\zx______.pfb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\ZX______.PFB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\zx______.pfb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\zy______.pfb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.918] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=96418) returned 1
	[0176.918] CloseHandle (hObject=0x168) returned 1
	[0176.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\zy______.pfb")) returned 0x20
	[0176.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\zy______.pfb")) returned 0x20
	[0176.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\zy______.pfb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\ZY______.PFB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\zy______.pfb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0177.505] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27784) returned 1
	[0177.505] CloseHandle (hObject=0x168) returned 1
	[0177.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt")) returned 0x20
	[0177.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt")) returned 0x20
	[0177.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0177.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0177.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0177.507] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27784) returned 1
	[0177.507] CloseHandle (hObject=0x168) returned 1
	[0177.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt")) returned 0x20
	[0177.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt")) returned 0x20
	[0177.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0177.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0177.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0177.508] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0177.508] CloseHandle (hObject=0x168) returned 1
	[0177.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt")) returned 0x20
	[0177.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt")) returned 0x20
	[0177.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0177.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0177.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0177.509] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0177.509] CloseHandle (hObject=0x168) returned 1
	[0177.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt")) returned 0x20
	[0177.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt")) returned 0x20
	[0177.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0177.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0177.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0177.510] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0177.510] CloseHandle (hObject=0x168) returned 1
	[0177.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt")) returned 0x20
	[0177.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt")) returned 0x20
	[0177.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0177.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0177.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0178.270] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.270] CloseHandle (hObject=0x210) returned 1
	[0178.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt")) returned 0x20
	[0178.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt")) returned 0x20
	[0178.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.271] SetEvent (hEvent=0xfc) returned 1
	[0178.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0178.272] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.272] CloseHandle (hObject=0x210) returned 1
	[0178.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt")) returned 0x20
	[0178.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt")) returned 0x20
	[0178.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0178.273] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.273] CloseHandle (hObject=0x210) returned 1
	[0178.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt")) returned 0x20
	[0178.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt")) returned 0x20
	[0178.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.282] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.282] CloseHandle (hObject=0x228) returned 1
	[0178.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt")) returned 0x20
	[0178.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt")) returned 0x20
	[0178.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.283] SetEvent (hEvent=0xfc) returned 1
	[0178.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.283] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.283] CloseHandle (hObject=0x228) returned 1
	[0178.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt")) returned 0x20
	[0178.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt")) returned 0x20
	[0178.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.284] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.284] CloseHandle (hObject=0x228) returned 1
	[0178.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt")) returned 0x20
	[0178.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt")) returned 0x20
	[0178.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.285] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.286] CloseHandle (hObject=0x228) returned 1
	[0178.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt")) returned 0x20
	[0178.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt")) returned 0x20
	[0178.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.287] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.287] CloseHandle (hObject=0x228) returned 1
	[0178.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt")) returned 0x20
	[0178.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt")) returned 0x20
	[0178.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.288] SetEvent (hEvent=0xfc) returned 1
	[0178.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.288] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.288] CloseHandle (hObject=0x228) returned 1
	[0178.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt")) returned 0x20
	[0178.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt")) returned 0x20
	[0178.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.289] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.289] CloseHandle (hObject=0x228) returned 1
	[0178.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt")) returned 0x20
	[0178.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt")) returned 0x20
	[0178.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.290] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.290] CloseHandle (hObject=0x228) returned 1
	[0178.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt")) returned 0x20
	[0178.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt")) returned 0x20
	[0178.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.292] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.292] CloseHandle (hObject=0x228) returned 1
	[0178.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt")) returned 0x20
	[0178.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt")) returned 0x20
	[0178.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.292] SetEvent (hEvent=0xfc) returned 1
	[0178.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.293] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27798) returned 1
	[0178.293] CloseHandle (hObject=0x228) returned 1
	[0178.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt")) returned 0x20
	[0178.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt")) returned 0x20
	[0178.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.295] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27870) returned 1
	[0178.295] CloseHandle (hObject=0x228) returned 1
	[0178.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt")) returned 0x20
	[0178.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt")) returned 0x20
	[0178.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.295] SetEvent (hEvent=0xfc) returned 1
	[0178.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.296] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27870) returned 1
	[0178.296] CloseHandle (hObject=0x228) returned 1
	[0178.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt")) returned 0x20
	[0178.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt")) returned 0x20
	[0178.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.297] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27868) returned 1
	[0178.297] CloseHandle (hObject=0x228) returned 1
	[0178.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt")) returned 0x20
	[0178.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt")) returned 0x20
	[0178.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.299] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27868) returned 1
	[0178.299] CloseHandle (hObject=0x228) returned 1
	[0178.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt")) returned 0x20
	[0178.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt")) returned 0x20
	[0178.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.299] SetEvent (hEvent=0xfc) returned 1
	[0178.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.300] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27868) returned 1
	[0178.300] CloseHandle (hObject=0x228) returned 1
	[0178.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt")) returned 0x20
	[0178.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt")) returned 0x20
	[0178.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.301] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29888) returned 1
	[0178.302] CloseHandle (hObject=0x228) returned 1
	[0178.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt")) returned 0x20
	[0178.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt")) returned 0x20
	[0178.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.302] SetEvent (hEvent=0xfc) returned 1
	[0178.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.303] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29888) returned 1
	[0178.303] CloseHandle (hObject=0x228) returned 1
	[0178.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt")) returned 0x20
	[0178.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt")) returned 0x20
	[0178.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.304] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28018) returned 1
	[0178.304] CloseHandle (hObject=0x228) returned 1
	[0178.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt")) returned 0x20
	[0178.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt")) returned 0x20
	[0178.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.305] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28018) returned 1
	[0178.305] CloseHandle (hObject=0x228) returned 1
	[0178.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt")) returned 0x20
	[0178.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt")) returned 0x20
	[0178.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.306] SetEvent (hEvent=0xfc) returned 1
	[0178.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.306] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29398) returned 1
	[0178.306] CloseHandle (hObject=0x228) returned 1
	[0178.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt")) returned 0x20
	[0178.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt")) returned 0x20
	[0178.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.307] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29480) returned 1
	[0178.308] CloseHandle (hObject=0x228) returned 1
	[0178.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt")) returned 0x20
	[0178.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt")) returned 0x20
	[0178.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.309] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29478) returned 1
	[0178.309] CloseHandle (hObject=0x228) returned 1
	[0178.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt")) returned 0x20
	[0178.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt")) returned 0x20
	[0178.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.310] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28306) returned 1
	[0178.310] CloseHandle (hObject=0x228) returned 1
	[0178.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt")) returned 0x20
	[0178.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt")) returned 0x20
	[0178.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.311] SetEvent (hEvent=0xfc) returned 1
	[0178.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.311] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28306) returned 1
	[0178.311] CloseHandle (hObject=0x228) returned 1
	[0178.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt")) returned 0x20
	[0178.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt")) returned 0x20
	[0178.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.312] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28278) returned 1
	[0178.312] CloseHandle (hObject=0x228) returned 1
	[0178.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt")) returned 0x20
	[0178.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt")) returned 0x20
	[0178.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.569] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28296) returned 1
	[0178.569] CloseHandle (hObject=0x214) returned 1
	[0178.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt")) returned 0x20
	[0178.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt")) returned 0x20
	[0178.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.570] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28360) returned 1
	[0178.570] CloseHandle (hObject=0x214) returned 1
	[0178.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt")) returned 0x20
	[0178.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt")) returned 0x20
	[0178.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.571] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28358) returned 1
	[0178.571] CloseHandle (hObject=0x214) returned 1
	[0178.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt")) returned 0x20
	[0178.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt")) returned 0x20
	[0178.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.575] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28352) returned 1
	[0178.575] CloseHandle (hObject=0x214) returned 1
	[0178.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt")) returned 0x20
	[0178.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt")) returned 0x20
	[0178.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.576] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28360) returned 1
	[0178.576] CloseHandle (hObject=0x214) returned 1
	[0178.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt")) returned 0x20
	[0178.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt")) returned 0x20
	[0178.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.577] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28360) returned 1
	[0178.577] CloseHandle (hObject=0x214) returned 1
	[0178.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt")) returned 0x20
	[0178.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt")) returned 0x20
	[0178.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.578] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28360) returned 1
	[0178.578] CloseHandle (hObject=0x214) returned 1
	[0178.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt")) returned 0x20
	[0178.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt")) returned 0x20
	[0178.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.579] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28352) returned 1
	[0178.579] CloseHandle (hObject=0x214) returned 1
	[0178.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt")) returned 0x20
	[0178.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt")) returned 0x20
	[0178.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.580] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28364) returned 1
	[0178.580] CloseHandle (hObject=0x214) returned 1
	[0178.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt")) returned 0x20
	[0178.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt")) returned 0x20
	[0178.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.582] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28360) returned 1
	[0178.582] CloseHandle (hObject=0x214) returned 1
	[0178.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt")) returned 0x20
	[0178.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt")) returned 0x20
	[0178.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.583] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28360) returned 1
	[0178.583] CloseHandle (hObject=0x214) returned 1
	[0178.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt")) returned 0x20
	[0178.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt")) returned 0x20
	[0178.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.584] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28360) returned 1
	[0178.584] CloseHandle (hObject=0x214) returned 1
	[0178.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt")) returned 0x20
	[0178.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt")) returned 0x20
	[0178.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.585] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28360) returned 1
	[0178.585] CloseHandle (hObject=0x214) returned 1
	[0178.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt")) returned 0x20
	[0178.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt")) returned 0x20
	[0178.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.586] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28360) returned 1
	[0178.586] CloseHandle (hObject=0x214) returned 1
	[0178.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt")) returned 0x20
	[0178.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt")) returned 0x20
	[0178.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.587] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28360) returned 1
	[0178.587] CloseHandle (hObject=0x214) returned 1
	[0178.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt")) returned 0x20
	[0178.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt")) returned 0x20
	[0178.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.588] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28360) returned 1
	[0178.588] CloseHandle (hObject=0x214) returned 1
	[0178.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt")) returned 0x20
	[0178.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt")) returned 0x20
	[0178.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.589] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28360) returned 1
	[0178.589] CloseHandle (hObject=0x214) returned 1
	[0178.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt")) returned 0x20
	[0178.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt")) returned 0x20
	[0178.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.590] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28358) returned 1
	[0178.590] CloseHandle (hObject=0x214) returned 1
	[0178.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt")) returned 0x20
	[0178.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt")) returned 0x20
	[0178.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.591] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27486) returned 1
	[0178.591] CloseHandle (hObject=0x214) returned 1
	[0178.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt")) returned 0x20
	[0178.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt")) returned 0x20
	[0178.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.592] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27486) returned 1
	[0178.593] CloseHandle (hObject=0x214) returned 1
	[0178.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt")) returned 0x20
	[0178.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt")) returned 0x20
	[0178.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.594] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28020) returned 1
	[0178.594] CloseHandle (hObject=0x214) returned 1
	[0178.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt")) returned 0x20
	[0178.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt")) returned 0x20
	[0178.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.595] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28020) returned 1
	[0178.595] CloseHandle (hObject=0x214) returned 1
	[0178.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt")) returned 0x20
	[0178.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt")) returned 0x20
	[0178.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.596] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28026) returned 1
	[0178.596] CloseHandle (hObject=0x214) returned 1
	[0178.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt")) returned 0x20
	[0178.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt")) returned 0x20
	[0178.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.598] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28488) returned 1
	[0178.598] CloseHandle (hObject=0x214) returned 1
	[0178.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt")) returned 0x20
	[0178.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt")) returned 0x20
	[0178.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.599] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28488) returned 1
	[0178.599] CloseHandle (hObject=0x214) returned 1
	[0178.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt")) returned 0x20
	[0178.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt")) returned 0x20
	[0178.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.600] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28484) returned 1
	[0178.600] CloseHandle (hObject=0x214) returned 1
	[0178.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt")) returned 0x20
	[0178.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt")) returned 0x20
	[0178.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.601] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26562) returned 1
	[0178.601] CloseHandle (hObject=0x214) returned 1
	[0178.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt")) returned 0x20
	[0178.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt")) returned 0x20
	[0178.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.602] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26562) returned 1
	[0178.602] CloseHandle (hObject=0x214) returned 1
	[0178.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt")) returned 0x20
	[0178.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt")) returned 0x20
	[0178.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.603] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28200) returned 1
	[0178.603] CloseHandle (hObject=0x214) returned 1
	[0178.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt")) returned 0x20
	[0178.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt")) returned 0x20
	[0178.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.604] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28200) returned 1
	[0178.604] CloseHandle (hObject=0x214) returned 1
	[0178.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt")) returned 0x20
	[0178.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt")) returned 0x20
	[0178.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.844] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28158) returned 1
	[0178.844] CloseHandle (hObject=0x20c) returned 1
	[0178.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt")) returned 0x20
	[0178.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt")) returned 0x20
	[0178.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.845] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27626) returned 1
	[0178.845] CloseHandle (hObject=0x20c) returned 1
	[0178.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt")) returned 0x20
	[0178.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt")) returned 0x20
	[0178.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.846] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27310) returned 1
	[0178.846] CloseHandle (hObject=0x20c) returned 1
	[0178.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt")) returned 0x20
	[0178.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt")) returned 0x20
	[0178.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.847] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27310) returned 1
	[0178.847] CloseHandle (hObject=0x20c) returned 1
	[0178.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt")) returned 0x20
	[0178.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt")) returned 0x20
	[0178.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.848] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28146) returned 1
	[0178.848] CloseHandle (hObject=0x20c) returned 1
	[0178.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt")) returned 0x20
	[0178.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt")) returned 0x20
	[0178.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.850] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28146) returned 1
	[0178.850] CloseHandle (hObject=0x20c) returned 1
	[0178.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt")) returned 0x20
	[0178.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt")) returned 0x20
	[0178.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.851] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28102) returned 1
	[0178.851] CloseHandle (hObject=0x20c) returned 1
	[0178.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt")) returned 0x20
	[0178.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt")) returned 0x20
	[0178.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.852] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28118) returned 1
	[0178.852] CloseHandle (hObject=0x20c) returned 1
	[0178.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt")) returned 0x20
	[0178.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt")) returned 0x20
	[0178.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.853] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28118) returned 1
	[0178.853] CloseHandle (hObject=0x20c) returned 1
	[0178.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt")) returned 0x20
	[0178.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt")) returned 0x20
	[0178.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.854] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28102) returned 1
	[0178.854] CloseHandle (hObject=0x20c) returned 1
	[0178.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt")) returned 0x20
	[0178.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt")) returned 0x20
	[0178.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.855] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28118) returned 1
	[0178.855] CloseHandle (hObject=0x20c) returned 1
	[0178.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt")) returned 0x20
	[0178.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt")) returned 0x20
	[0178.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.857] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28146) returned 1
	[0178.857] CloseHandle (hObject=0x20c) returned 1
	[0178.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt")) returned 0x20
	[0178.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt")) returned 0x20
	[0178.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.858] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28246) returned 1
	[0178.858] CloseHandle (hObject=0x20c) returned 1
	[0178.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt")) returned 0x20
	[0178.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt")) returned 0x20
	[0178.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.859] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28246) returned 1
	[0178.860] CloseHandle (hObject=0x20c) returned 1
	[0178.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt")) returned 0x20
	[0178.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt")) returned 0x20
	[0178.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.861] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28348) returned 1
	[0178.861] CloseHandle (hObject=0x20c) returned 1
	[0178.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt")) returned 0x20
	[0178.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt")) returned 0x20
	[0178.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.862] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28486) returned 1
	[0178.862] CloseHandle (hObject=0x20c) returned 1
	[0178.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt")) returned 0x20
	[0178.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt")) returned 0x20
	[0178.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.863] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28496) returned 1
	[0178.863] CloseHandle (hObject=0x20c) returned 1
	[0178.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt")) returned 0x20
	[0178.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt")) returned 0x20
	[0178.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.865] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27554) returned 1
	[0178.865] CloseHandle (hObject=0x20c) returned 1
	[0178.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt")) returned 0x20
	[0178.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt")) returned 0x20
	[0178.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.868] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27554) returned 1
	[0178.868] CloseHandle (hObject=0x20c) returned 1
	[0178.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt")) returned 0x20
	[0178.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt")) returned 0x20
	[0178.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.869] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29848) returned 1
	[0178.869] CloseHandle (hObject=0x20c) returned 1
	[0178.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt")) returned 0x20
	[0178.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt")) returned 0x20
	[0178.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.870] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29848) returned 1
	[0178.870] CloseHandle (hObject=0x20c) returned 1
	[0178.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt")) returned 0x20
	[0178.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt")) returned 0x20
	[0178.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.872] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29718) returned 1
	[0178.872] CloseHandle (hObject=0x20c) returned 1
	[0178.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt")) returned 0x20
	[0178.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt")) returned 0x20
	[0178.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.873] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28022) returned 1
	[0178.873] CloseHandle (hObject=0x20c) returned 1
	[0178.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt")) returned 0x20
	[0178.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt")) returned 0x20
	[0178.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.874] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28022) returned 1
	[0178.874] CloseHandle (hObject=0x20c) returned 1
	[0178.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt")) returned 0x20
	[0178.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt")) returned 0x20
	[0178.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.875] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28400) returned 1
	[0178.875] CloseHandle (hObject=0x20c) returned 1
	[0178.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt")) returned 0x20
	[0178.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt")) returned 0x20
	[0178.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.877] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28400) returned 1
	[0178.877] CloseHandle (hObject=0x20c) returned 1
	[0178.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt")) returned 0x20
	[0178.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt")) returned 0x20
	[0178.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.878] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29020) returned 1
	[0178.878] CloseHandle (hObject=0x20c) returned 1
	[0178.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt")) returned 0x20
	[0178.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt")) returned 0x20
	[0178.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.879] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28996) returned 1
	[0178.879] CloseHandle (hObject=0x20c) returned 1
	[0178.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt")) returned 0x20
	[0178.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt")) returned 0x20
	[0178.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.880] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29020) returned 1
	[0178.880] CloseHandle (hObject=0x20c) returned 1
	[0178.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt")) returned 0x20
	[0178.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt")) returned 0x20
	[0178.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.881] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29320) returned 1
	[0178.881] CloseHandle (hObject=0x20c) returned 1
	[0178.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt")) returned 0x20
	[0178.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt")) returned 0x20
	[0178.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.882] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29320) returned 1
	[0178.882] CloseHandle (hObject=0x20c) returned 1
	[0178.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt")) returned 0x20
	[0178.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt")) returned 0x20
	[0178.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.883] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29262) returned 1
	[0178.884] CloseHandle (hObject=0x20c) returned 1
	[0178.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt")) returned 0x20
	[0178.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt")) returned 0x20
	[0178.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.885] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29262) returned 1
	[0178.885] CloseHandle (hObject=0x20c) returned 1
	[0178.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt")) returned 0x20
	[0178.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt")) returned 0x20
	[0178.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.886] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24680) returned 1
	[0178.886] CloseHandle (hObject=0x20c) returned 1
	[0178.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt")) returned 0x20
	[0178.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt")) returned 0x20
	[0178.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.887] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24666) returned 1
	[0178.887] CloseHandle (hObject=0x20c) returned 1
	[0178.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt")) returned 0x20
	[0178.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt")) returned 0x20
	[0178.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.888] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24716) returned 1
	[0178.888] CloseHandle (hObject=0x20c) returned 1
	[0178.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt")) returned 0x20
	[0178.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt")) returned 0x20
	[0178.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara131.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.303] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2111488) returned 1
	[0179.304] CloseHandle (hObject=0x168) returned 1
	[0179.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara131.lex")) returned 0x20
	[0179.315] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara131.lex"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara131.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0179.318] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara131.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara131.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara131.lex")) returned 0
	[0179.327] SetEvent (hEvent=0xfc) returned 1
	[0179.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.329] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15600) returned 1
	[0179.329] CloseHandle (hObject=0x168) returned 1
	[0179.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env")) returned 0x20
	[0179.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env")) returned 0x20
	[0179.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\araphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\araphon.env"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.331] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4748) returned 1
	[0179.331] CloseHandle (hObject=0x168) returned 1
	[0179.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.fca")) returned 0x20
	[0179.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.fca")) returned 0x20
	[0179.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.331] SetEvent (hEvent=0xfc) returned 1
	[0179.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.332] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51200) returned 1
	[0179.332] CloseHandle (hObject=0x168) returned 1
	[0179.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.hyp")) returned 0x20
	[0179.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.hyp")) returned 0x20
	[0179.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt04.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.334] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=184786) returned 1
	[0179.334] CloseHandle (hObject=0x168) returned 1
	[0179.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt04.hsp")) returned 0x20
	[0179.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt04.hsp")) returned 0x20
	[0179.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt04.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt04.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt04.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.334] SetEvent (hEvent=0xfc) returned 1
	[0179.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.335] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32768) returned 1
	[0179.335] CloseHandle (hObject=0x168) returned 1
	[0179.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt32.clx")) returned 0x20
	[0179.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt32.clx")) returned 0x20
	[0179.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt55.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.337] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=534528) returned 1
	[0179.337] CloseHandle (hObject=0x168) returned 1
	[0179.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt55.ths")) returned 0x20
	[0179.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt55.ths")) returned 0x20
	[0179.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt55.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brt55.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brt55.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.338] SetEvent (hEvent=0xfc) returned 1
	[0179.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.339] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1596) returned 1
	[0179.339] CloseHandle (hObject=0x168) returned 1
	[0179.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.fca")) returned 0x20
	[0179.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.fca")) returned 0x20
	[0179.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.339] SetEvent (hEvent=0xfc) returned 1
	[0179.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.341] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2048) returned 1
	[0179.341] CloseHandle (hObject=0x168) returned 1
	[0179.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.hyp")) returned 0x20
	[0179.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.hyp")) returned 0x20
	[0179.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.342] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32713) returned 1
	[0179.342] CloseHandle (hObject=0x168) returned 1
	[0179.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz32.clx")) returned 0x20
	[0179.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz32.clx")) returned 0x20
	[0179.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz40.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.343] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97782) returned 1
	[0179.343] CloseHandle (hObject=0x168) returned 1
	[0179.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz40.hsp")) returned 0x20
	[0179.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz40.hsp")) returned 0x20
	[0179.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz40.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\brz40.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\brz40.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.344] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=94208) returned 1
	[0179.344] CloseHandle (hObject=0x168) returned 1
	[0179.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul.hyp")) returned 0x20
	[0179.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul.hyp")) returned 0x20
	[0179.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul120.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.347] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=466944) returned 1
	[0179.347] CloseHandle (hObject=0x168) returned 1
	[0179.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul120.lex")) returned 0x20
	[0179.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul120.lex")) returned 0x20
	[0179.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul120.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul120.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul120.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.347] SetEvent (hEvent=0xfc) returned 1
	[0179.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.348] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32766) returned 1
	[0179.348] CloseHandle (hObject=0x168) returned 1
	[0179.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul32.clx")) returned 0x20
	[0179.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul32.clx")) returned 0x20
	[0179.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bul32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bul32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.349] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5168) returned 1
	[0179.349] CloseHandle (hObject=0x168) returned 1
	[0179.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env")) returned 0x20
	[0179.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env")) returned 0x20
	[0179.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\bulphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\bulphon.env"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.351] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4672) returned 1
	[0179.352] CloseHandle (hObject=0x20c) returned 1
	[0179.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.fca")) returned 0x20
	[0179.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.fca")) returned 0x20
	[0179.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.721] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=107520) returned 1
	[0179.721] CloseHandle (hObject=0x20c) returned 1
	[0179.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.hyp")) returned 0x20
	[0179.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.hyp")) returned 0x20
	[0179.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.722] SetEvent (hEvent=0xfc) returned 1
	[0179.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.722] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57344) returned 1
	[0179.722] CloseHandle (hObject=0x20c) returned 1
	[0179.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.hyp")) returned 0x20
	[0179.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.hyp")) returned 0x20
	[0179.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze108.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.723] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1208836) returned 1
	[0179.723] CloseHandle (hObject=0x20c) returned 1
	[0179.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze108.hsp")) returned 0x20
	[0179.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze108.hsp")) returned 0x20
	[0179.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze108.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze108.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze108.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.724] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32721) returned 1
	[0179.724] CloseHandle (hObject=0x20c) returned 1
	[0179.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze32.clx")) returned 0x20
	[0179.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze32.clx")) returned 0x20
	[0179.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.727] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31744) returned 1
	[0179.727] CloseHandle (hObject=0x20c) returned 1
	[0179.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan.hyp")) returned 0x20
	[0179.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan.hyp")) returned 0x20
	[0179.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.727] SetEvent (hEvent=0xfc) returned 1
	[0179.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.728] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32684) returned 1
	[0179.728] CloseHandle (hObject=0x20c) returned 1
	[0179.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan32.clx")) returned 0x20
	[0179.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan32.clx")) returned 0x20
	[0179.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan45.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.729] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=478208) returned 1
	[0179.729] CloseHandle (hObject=0x20c) returned 1
	[0179.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan45.lex")) returned 0x20
	[0179.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan45.lex")) returned 0x20
	[0179.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan45.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan45.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan45.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan94.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.730] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=370688) returned 1
	[0179.730] CloseHandle (hObject=0x20c) returned 1
	[0179.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan94.ths")) returned 0x20
	[0179.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan94.ths")) returned 0x20
	[0179.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan94.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dan94.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dan94.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.731] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2809) returned 1
	[0179.731] CloseHandle (hObject=0x20c) returned 1
	[0179.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env")) returned 0x20
	[0179.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env")) returned 0x20
	[0179.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\danphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\danphon.env"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.732] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1308) returned 1
	[0179.732] CloseHandle (hObject=0x20c) returned 1
	[0179.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.fca")) returned 0x20
	[0179.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.fca")) returned 0x20
	[0179.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.733] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=72704) returned 1
	[0179.733] CloseHandle (hObject=0x20c) returned 1
	[0179.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.hyp")) returned 0x20
	[0179.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.hyp")) returned 0x20
	[0179.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut102.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.734] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=376938) returned 1
	[0179.734] CloseHandle (hObject=0x20c) returned 1
	[0179.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut102.hsp")) returned 0x20
	[0179.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut102.hsp")) returned 0x20
	[0179.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut102.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut102.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut102.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.735] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32756) returned 1
	[0179.735] CloseHandle (hObject=0x20c) returned 1
	[0179.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut32.clx")) returned 0x20
	[0179.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut32.clx")) returned 0x20
	[0179.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut57.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.736] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=801792) returned 1
	[0179.737] CloseHandle (hObject=0x20c) returned 1
	[0179.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut57.ths")) returned 0x20
	[0179.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut57.ths")) returned 0x20
	[0179.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut57.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\dut57.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\dut57.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.738] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=48128) returned 1
	[0179.738] CloseHandle (hObject=0x20c) returned 1
	[0179.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng.hyp")) returned 0x20
	[0179.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng.hyp")) returned 0x20
	[0179.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.739] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32741) returned 1
	[0179.739] CloseHandle (hObject=0x20c) returned 1
	[0179.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng32.clx")) returned 0x20
	[0179.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng32.clx")) returned 0x20
	[0179.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\eng32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\eng32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.741] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2467) returned 1
	[0179.741] CloseHandle (hObject=0x20c) returned 1
	[0179.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env")) returned 0x20
	[0179.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env")) returned 0x20
	[0179.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\engphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\engphon.env"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.745] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16384) returned 1
	[0179.745] CloseHandle (hObject=0x168) returned 1
	[0179.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est.hyp")) returned 0x20
	[0179.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est.hyp")) returned 0x20
	[0179.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est133.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.746] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2160640) returned 1
	[0179.746] CloseHandle (hObject=0x168) returned 1
	[0179.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est133.lex")) returned 0x20
	[0179.746] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est133.lex"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est133.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0179.747] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est133.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est133.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est133.lex")) returned 0
	[0179.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0179.963] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32748) returned 1
	[0179.963] CloseHandle (hObject=0x238) returned 1
	[0179.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est32.clx")) returned 0x20
	[0179.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est32.clx")) returned 0x20
	[0179.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\est32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\est32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.963] SetEvent (hEvent=0xfc) returned 1
	[0179.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0179.964] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7969) returned 1
	[0179.964] CloseHandle (hObject=0x238) returned 1
	[0179.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env")) returned 0x20
	[0179.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env")) returned 0x20
	[0179.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrvphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrvphon.env"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.965] SetEvent (hEvent=0xfc) returned 1
	[0179.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.100] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1116) returned 1
	[0180.100] CloseHandle (hObject=0x168) returned 1
	[0180.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.fca")) returned 0x20
	[0180.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.fca")) returned 0x20
	[0180.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.101] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32766) returned 1
	[0180.101] CloseHandle (hObject=0x168) returned 1
	[0180.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit32.clx")) returned 0x20
	[0180.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit32.clx")) returned 0x20
	[0180.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.102] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2648) returned 1
	[0180.102] CloseHandle (hObject=0x168) returned 1
	[0180.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env")) returned 0x20
	[0180.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env")) returned 0x20
	[0180.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\litphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\litphon.env"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.108] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1148) returned 1
	[0180.108] CloseHandle (hObject=0x228) returned 1
	[0180.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.fca")) returned 0x20
	[0180.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.fca")) returned 0x20
	[0180.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.113] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31744) returned 1
	[0180.113] CloseHandle (hObject=0x168) returned 1
	[0180.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.hyp")) returned 0x20
	[0180.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.hyp")) returned 0x20
	[0180.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.114] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32753) returned 1
	[0180.115] CloseHandle (hObject=0x168) returned 1
	[0180.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw32.clx")) returned 0x20
	[0180.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw32.clx")) returned 0x20
	[0180.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw38.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.116] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=288414) returned 1
	[0180.116] CloseHandle (hObject=0x168) returned 1
	[0180.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw38.hsp")) returned 0x20
	[0180.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw38.hsp")) returned 0x20
	[0180.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw38.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw38.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw38.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw56.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.117] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=357376) returned 1
	[0180.117] CloseHandle (hObject=0x168) returned 1
	[0180.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw56.ths")) returned 0x20
	[0180.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw56.ths")) returned 0x20
	[0180.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw56.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nrw56.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nrw56.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.118] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1164) returned 1
	[0180.118] CloseHandle (hObject=0x168) returned 1
	[0180.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.fca")) returned 0x20
	[0180.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.fca")) returned 0x20
	[0180.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.119] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28672) returned 1
	[0180.119] CloseHandle (hObject=0x168) returned 1
	[0180.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.hyp")) returned 0x20
	[0180.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.hyp")) returned 0x20
	[0180.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn16.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.120] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15356) returned 1
	[0180.120] CloseHandle (hObject=0x168) returned 1
	[0180.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn16.clx")) returned 0x20
	[0180.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn16.clx")) returned 0x20
	[0180.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn16.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn16.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn16.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn47.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.121] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=241949) returned 1
	[0180.121] CloseHandle (hObject=0x168) returned 1
	[0180.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn47.hsp")) returned 0x20
	[0180.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn47.hsp")) returned 0x20
	[0180.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn47.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\nyn47.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\nyn47.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.122] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=972) returned 1
	[0180.122] CloseHandle (hObject=0x168) returned 1
	[0180.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.fca")) returned 0x20
	[0180.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.fca")) returned 0x20
	[0180.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.125] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=118784) returned 1
	[0180.125] CloseHandle (hObject=0x228) returned 1
	[0180.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.hyp")) returned 0x20
	[0180.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.hyp")) returned 0x20
	[0180.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol103.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0180.131] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=720111) returned 1
	[0180.131] CloseHandle (hObject=0x1f4) returned 1
	[0180.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol103.hsp")) returned 0x20
	[0180.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol103.hsp")) returned 0x20
	[0180.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol103.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol103.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol103.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0180.132] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32766) returned 1
	[0180.132] CloseHandle (hObject=0x1f4) returned 1
	[0180.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol32.clx")) returned 0x20
	[0180.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol32.clx")) returned 0x20
	[0180.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\pol32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\pol32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0180.133] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1188) returned 1
	[0180.133] CloseHandle (hObject=0x1f4) returned 1
	[0180.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.fca")) returned 0x20
	[0180.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.fca")) returned 0x20
	[0180.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0180.134] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2048) returned 1
	[0180.134] CloseHandle (hObject=0x1f4) returned 1
	[0180.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.hyp")) returned 0x20
	[0180.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.hyp")) returned 0x20
	[0180.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0180.135] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32748) returned 1
	[0180.136] CloseHandle (hObject=0x1f4) returned 1
	[0180.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt32.clx")) returned 0x20
	[0180.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt32.clx")) returned 0x20
	[0180.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt39.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0180.137] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=95852) returned 1
	[0180.137] CloseHandle (hObject=0x1f4) returned 1
	[0180.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt39.hsp")) returned 0x20
	[0180.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt39.hsp")) returned 0x20
	[0180.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt39.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\prt39.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\prt39.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.142] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19456) returned 1
	[0180.142] CloseHandle (hObject=0x228) returned 1
	[0180.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum.hyp")) returned 0x20
	[0180.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum.hyp")) returned 0x20
	[0180.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum124.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.143] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=645120) returned 1
	[0180.143] CloseHandle (hObject=0x228) returned 1
	[0180.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum124.lex")) returned 0x20
	[0180.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum124.lex")) returned 0x20
	[0180.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum124.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum124.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum124.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.144] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32759) returned 1
	[0180.144] CloseHandle (hObject=0x228) returned 1
	[0180.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum32.clx")) returned 0x20
	[0180.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum32.clx")) returned 0x20
	[0180.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rum32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rum32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.145] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9336) returned 1
	[0180.145] CloseHandle (hObject=0x228) returned 1
	[0180.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env")) returned 0x20
	[0180.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env")) returned 0x20
	[0180.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rumphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rumphon.env"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.146] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=696) returned 1
	[0180.146] CloseHandle (hObject=0x228) returned 1
	[0180.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.fca")) returned 0x20
	[0180.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.fca")) returned 0x20
	[0180.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0180.149] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32768) returned 1
	[0180.149] CloseHandle (hObject=0x234) returned 1
	[0180.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.hyp")) returned 0x20
	[0180.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.hyp")) returned 0x20
	[0180.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus101.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0180.150] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=461522) returned 1
	[0180.150] CloseHandle (hObject=0x234) returned 1
	[0180.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus101.hsp")) returned 0x20
	[0180.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus101.hsp")) returned 0x20
	[0180.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus101.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus101.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus101.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0180.151] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32805) returned 1
	[0180.151] CloseHandle (hObject=0x234) returned 1
	[0180.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus32.clx")) returned 0x20
	[0180.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus32.clx")) returned 0x20
	[0180.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\rus32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\rus32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.156] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1436) returned 1
	[0180.156] CloseHandle (hObject=0x228) returned 1
	[0180.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.fca")) returned 0x20
	[0180.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.fca")) returned 0x20
	[0180.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.157] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50176) returned 1
	[0180.157] CloseHandle (hObject=0x228) returned 1
	[0180.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.hyp")) returned 0x20
	[0180.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.hyp")) returned 0x20
	[0180.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr105.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.158] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=761387) returned 1
	[0180.158] CloseHandle (hObject=0x228) returned 1
	[0180.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr105.hsp")) returned 0x20
	[0180.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr105.hsp")) returned 0x20
	[0180.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr105.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr105.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr105.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.159] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32766) returned 1
	[0180.159] CloseHandle (hObject=0x228) returned 1
	[0180.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr32.clx")) returned 0x20
	[0180.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr32.clx")) returned 0x20
	[0180.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr96.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.160] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=790528) returned 1
	[0180.160] CloseHandle (hObject=0x228) returned 1
	[0180.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr96.ths")) returned 0x20
	[0180.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr96.ths")) returned 0x20
	[0180.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr96.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\sgr96.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\sgr96.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.162] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=736) returned 1
	[0180.162] CloseHandle (hObject=0x228) returned 1
	[0180.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.fca")) returned 0x20
	[0180.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.fca")) returned 0x20
	[0180.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.163] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23552) returned 1
	[0180.163] CloseHandle (hObject=0x228) returned 1
	[0180.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.hyp")) returned 0x20
	[0180.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.hyp")) returned 0x20
	[0180.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo113.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.164] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=245702) returned 1
	[0180.164] CloseHandle (hObject=0x228) returned 1
	[0180.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo113.hsp")) returned 0x20
	[0180.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo113.hsp")) returned 0x20
	[0180.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo113.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo113.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo113.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.165] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32761) returned 1
	[0180.165] CloseHandle (hObject=0x228) returned 1
	[0180.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo32.clx")) returned 0x20
	[0180.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo32.clx")) returned 0x20
	[0180.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slo32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slo32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.167] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5120) returned 1
	[0180.167] CloseHandle (hObject=0x228) returned 1
	[0180.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv.hyp")) returned 0x20
	[0180.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv.hyp")) returned 0x20
	[0180.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv137.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.168] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=333824) returned 1
	[0180.168] CloseHandle (hObject=0x228) returned 1
	[0180.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv137.lex")) returned 0x20
	[0180.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv137.lex")) returned 0x20
	[0180.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv137.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv137.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv137.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.171] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32767) returned 1
	[0180.171] CloseHandle (hObject=0x228) returned 1
	[0180.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv32.clx")) returned 0x20
	[0180.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv32.clx")) returned 0x20
	[0180.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slv32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slv32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.172] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4255) returned 1
	[0180.172] CloseHandle (hObject=0x228) returned 1
	[0180.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env")) returned 0x20
	[0180.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env")) returned 0x20
	[0180.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\slvphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\slvphon.env"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.173] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=876) returned 1
	[0180.173] CloseHandle (hObject=0x228) returned 1
	[0180.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.fca")) returned 0x20
	[0180.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.fca")) returned 0x20
	[0180.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.176] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0180.176] CloseHandle (hObject=0x228) returned 1
	[0180.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.hyp")) returned 0x20
	[0180.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.hyp")) returned 0x20
	[0180.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn24.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.178] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=212113) returned 1
	[0180.178] CloseHandle (hObject=0x228) returned 1
	[0180.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn24.hsp")) returned 0x20
	[0180.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn24.hsp")) returned 0x20
	[0180.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn24.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn24.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn24.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.180] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32766) returned 1
	[0180.180] CloseHandle (hObject=0x228) returned 1
	[0180.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn32.clx")) returned 0x20
	[0180.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn32.clx")) returned 0x20
	[0180.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn62.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.181] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=542720) returned 1
	[0180.181] CloseHandle (hObject=0x228) returned 1
	[0180.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn62.ths")) returned 0x20
	[0180.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn62.ths")) returned 0x20
	[0180.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn62.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\spn62.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\spn62.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.182] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=908) returned 1
	[0180.182] CloseHandle (hObject=0x228) returned 1
	[0180.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.fca")) returned 0x20
	[0180.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.fca")) returned 0x20
	[0180.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.183] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52224) returned 1
	[0180.183] CloseHandle (hObject=0x228) returned 1
	[0180.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.hyp")) returned 0x20
	[0180.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.hyp")) returned 0x20
	[0180.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.184] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32768) returned 1
	[0180.184] CloseHandle (hObject=0x228) returned 1
	[0180.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd32.clx")) returned 0x20
	[0180.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd32.clx")) returned 0x20
	[0180.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd43.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.185] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=532925) returned 1
	[0180.185] CloseHandle (hObject=0x228) returned 1
	[0180.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd43.hsp")) returned 0x20
	[0180.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd43.hsp")) returned 0x20
	[0180.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd43.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd43.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd43.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd58.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.186] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1112064) returned 1
	[0180.187] CloseHandle (hObject=0x228) returned 1
	[0180.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd58.ths")) returned 0x20
	[0180.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd58.ths")) returned 0x20
	[0180.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd58.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\swd58.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\swd58.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.188] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=708) returned 1
	[0180.188] CloseHandle (hObject=0x228) returned 1
	[0180.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.fca")) returned 0x20
	[0180.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.fca")) returned 0x20
	[0180.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.189] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2048) returned 1
	[0180.189] CloseHandle (hObject=0x228) returned 1
	[0180.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.hyp")) returned 0x20
	[0180.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.hyp")) returned 0x20
	[0180.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur111.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.190] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=469814) returned 1
	[0180.190] CloseHandle (hObject=0x228) returned 1
	[0180.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur111.hsp")) returned 0x20
	[0180.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur111.hsp")) returned 0x20
	[0180.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur111.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur111.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur111.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.191] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32764) returned 1
	[0180.191] CloseHandle (hObject=0x228) returned 1
	[0180.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur32.clx")) returned 0x20
	[0180.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur32.clx")) returned 0x20
	[0180.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\tur32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\tur32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.192] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4668) returned 1
	[0180.192] CloseHandle (hObject=0x228) returned 1
	[0180.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa.fca")) returned 0x20
	[0180.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa.fca")) returned 0x20
	[0180.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.193] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=173786) returned 1
	[0180.193] CloseHandle (hObject=0x228) returned 1
	[0180.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.hsp")) returned 0x20
	[0180.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.hsp")) returned 0x20
	[0180.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.194] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=662528) returned 1
	[0180.194] CloseHandle (hObject=0x228) returned 1
	[0180.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.ths")) returned 0x20
	[0180.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.ths")) returned 0x20
	[0180.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa03.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa03.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa37.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.195] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=88064) returned 1
	[0180.195] CloseHandle (hObject=0x228) returned 1
	[0180.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa37.hyp")) returned 0x20
	[0180.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa37.hyp")) returned 0x20
	[0180.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa37.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\usa37.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\usa37.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.196] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13724) returned 1
	[0180.196] CloseHandle (hObject=0x228) returned 1
	[0180.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp")) returned 0x20
	[0180.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp")) returned 0x20
	[0180.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.197] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=228416) returned 1
	[0180.198] CloseHandle (hObject=0x228) returned 1
	[0180.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv")) returned 0x20
	[0180.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv")) returned 0x20
	[0180.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\ctl_gb18030.cnv" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\ctl_gb18030.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.199] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=214512) returned 1
	[0180.199] CloseHandle (hObject=0x228) returned 1
	[0180.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat")) returned 0x20
	[0180.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat")) returned 0x20
	[0180.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.200] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=391020) returned 1
	[0180.200] CloseHandle (hObject=0x228) returned 1
	[0180.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt")) returned 0x20
	[0180.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt")) returned 0x20
	[0180.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.202] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=205468) returned 1
	[0180.202] CloseHandle (hObject=0x200) returned 1
	[0180.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt")) returned 0x20
	[0180.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt")) returned 0x20
	[0180.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.203] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=106151) returned 1
	[0180.203] CloseHandle (hObject=0x200) returned 1
	[0180.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt")) returned 0x20
	[0180.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt")) returned 0x20
	[0180.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.204] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=171728) returned 1
	[0180.204] CloseHandle (hObject=0x200) returned 1
	[0180.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt")) returned 0x20
	[0180.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt")) returned 0x20
	[0180.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.205] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10381) returned 1
	[0180.205] CloseHandle (hObject=0x200) returned 1
	[0180.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt")) returned 0x20
	[0180.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt")) returned 0x20
	[0180.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.206] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11932) returned 1
	[0180.206] CloseHandle (hObject=0x200) returned 1
	[0180.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt")) returned 0x20
	[0180.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt")) returned 0x20
	[0180.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.208] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23784) returned 1
	[0180.208] CloseHandle (hObject=0x200) returned 1
	[0180.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt")) returned 0x20
	[0180.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt")) returned 0x20
	[0180.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ARABIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\arabic.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0180.568] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12948) returned 1
	[0180.569] CloseHandle (hObject=0x1f4) returned 1
	[0180.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt")) returned 0x20
	[0180.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt")) returned 0x20
	[0180.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.569] SetEvent (hEvent=0xfc) returned 1
	[0180.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0180.570] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=336055) returned 1
	[0180.570] CloseHandle (hObject=0x1f4) returned 1
	[0180.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt")) returned 0x20
	[0180.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt")) returned 0x20
	[0180.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINTRAD.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chintrad.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0180.571] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18952) returned 1
	[0180.571] CloseHandle (hObject=0x1f4) returned 1
	[0180.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt")) returned 0x20
	[0180.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt")) returned 0x20
	[0180.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0180.572] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13552) returned 1
	[0180.572] CloseHandle (hObject=0x1f4) returned 1
	[0180.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt")) returned 0x20
	[0180.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt")) returned 0x20
	[0180.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.576] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13432) returned 1
	[0180.576] CloseHandle (hObject=0x228) returned 1
	[0180.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt")) returned 0x20
	[0180.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt")) returned 0x20
	[0180.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.577] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24901) returned 1
	[0180.577] CloseHandle (hObject=0x228) returned 1
	[0180.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt")) returned 0x20
	[0180.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt")) returned 0x20
	[0180.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\FARSI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\farsi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.578] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13355) returned 1
	[0180.578] CloseHandle (hObject=0x228) returned 1
	[0180.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt")) returned 0x20
	[0180.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt")) returned 0x20
	[0180.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.579] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23875) returned 1
	[0180.579] CloseHandle (hObject=0x228) returned 1
	[0180.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt")) returned 0x20
	[0180.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt")) returned 0x20
	[0180.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HEBREW.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\hebrew.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.580] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14204) returned 1
	[0180.580] CloseHandle (hObject=0x228) returned 1
	[0180.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt")) returned 0x20
	[0180.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt")) returned 0x20
	[0180.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0180.743] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=205020) returned 1
	[0180.743] CloseHandle (hObject=0x210) returned 1
	[0180.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt")) returned 0x20
	[0180.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt")) returned 0x20
	[0180.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\JAPANESE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\japanese.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.743] SetEvent (hEvent=0xfc) returned 1
	[0180.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0180.745] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=522779) returned 1
	[0180.745] CloseHandle (hObject=0x210) returned 1
	[0180.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt")) returned 0x20
	[0180.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt")) returned 0x20
	[0180.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP950.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp950.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.745] SetEvent (hEvent=0xfc) returned 1
	[0180.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1027.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0180.747] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43008) returned 1
	[0180.747] CloseHandle (hObject=0x210) returned 1
	[0180.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1027.mst")) returned 0x21
	[0180.747] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", dwFileAttributes=0x20) returned 0
	[0180.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1027.mst")) returned 0x21
	[0180.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1027.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1027.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.747] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1027.mst", dwFileAttributes=0x21) returned 0
	[0180.747] SetEvent (hEvent=0xfc) returned 1
	[0180.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1028.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0180.749] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34816) returned 1
	[0180.749] CloseHandle (hObject=0x210) returned 1
	[0180.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1028.mst")) returned 0x21
	[0180.749] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", dwFileAttributes=0x20) returned 0
	[0180.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1028.mst")) returned 0x21
	[0180.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1028.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1028.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.749] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1028.mst", dwFileAttributes=0x21) returned 0
	[0180.749] SetEvent (hEvent=0xfc) returned 1
	[0180.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1029.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0180.750] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36864) returned 1
	[0180.750] CloseHandle (hObject=0x210) returned 1
	[0180.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1029.mst")) returned 0x21
	[0180.750] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", dwFileAttributes=0x20) returned 0
	[0180.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1029.mst")) returned 0x21
	[0180.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1029.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1029.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.751] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1029.mst", dwFileAttributes=0x21) returned 0
	[0180.751] SetEvent (hEvent=0xfc) returned 1
	[0180.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1030.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0180.752] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46592) returned 1
	[0180.752] CloseHandle (hObject=0x210) returned 1
	[0180.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1030.mst")) returned 0x21
	[0180.752] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", dwFileAttributes=0x20) returned 0
	[0180.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1030.mst")) returned 0x21
	[0180.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1030.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1030.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.752] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1030.mst", dwFileAttributes=0x21) returned 0
	[0180.752] SetEvent (hEvent=0xfc) returned 1
	[0180.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1031.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.918] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51712) returned 1
	[0180.918] CloseHandle (hObject=0x228) returned 1
	[0180.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1031.mst")) returned 0x21
	[0180.918] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", dwFileAttributes=0x20) returned 0
	[0180.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1031.mst")) returned 0x21
	[0180.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1031.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1031.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.918] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1031.mst", dwFileAttributes=0x21) returned 0
	[0180.918] SetEvent (hEvent=0xfc) returned 1
	[0180.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1034.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.919] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50176) returned 1
	[0180.919] CloseHandle (hObject=0x228) returned 1
	[0180.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1034.mst")) returned 0x21
	[0180.919] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", dwFileAttributes=0x20) returned 0
	[0180.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1034.mst")) returned 0x21
	[0180.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1034.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1034.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.920] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1034.mst", dwFileAttributes=0x21) returned 0
	[0180.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1035.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.920] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46592) returned 1
	[0180.920] CloseHandle (hObject=0x228) returned 1
	[0180.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1035.mst")) returned 0x21
	[0180.920] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", dwFileAttributes=0x20) returned 0
	[0180.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1035.mst")) returned 0x21
	[0180.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1035.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1035.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.921] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1035.mst", dwFileAttributes=0x21) returned 0
	[0180.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1036.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.923] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51200) returned 1
	[0180.923] CloseHandle (hObject=0x228) returned 1
	[0180.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1036.mst")) returned 0x21
	[0180.923] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", dwFileAttributes=0x20) returned 0
	[0180.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1036.mst")) returned 0x21
	[0180.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1036.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1036.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.923] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1036.mst", dwFileAttributes=0x21) returned 0
	[0180.923] SetEvent (hEvent=0xfc) returned 1
	[0180.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1038.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.924] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40448) returned 1
	[0180.924] CloseHandle (hObject=0x228) returned 1
	[0180.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1038.mst")) returned 0x21
	[0180.924] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", dwFileAttributes=0x20) returned 0
	[0180.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1038.mst")) returned 0x21
	[0180.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1038.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1038.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.924] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1038.mst", dwFileAttributes=0x21) returned 0
	[0180.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1040.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.925] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52224) returned 1
	[0180.925] CloseHandle (hObject=0x228) returned 1
	[0180.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1040.mst")) returned 0x21
	[0180.925] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", dwFileAttributes=0x20) returned 0
	[0180.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1040.mst")) returned 0x21
	[0180.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1040.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1040.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.925] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1040.mst", dwFileAttributes=0x21) returned 0
	[0180.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1041.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.926] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47616) returned 1
	[0180.926] CloseHandle (hObject=0x228) returned 1
	[0180.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1041.mst")) returned 0x21
	[0180.926] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", dwFileAttributes=0x20) returned 0
	[0180.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1041.mst")) returned 0x21
	[0180.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1041.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1041.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.927] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1041.mst", dwFileAttributes=0x21) returned 0
	[0180.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1042.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.928] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44544) returned 1
	[0180.928] CloseHandle (hObject=0x228) returned 1
	[0180.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1042.mst")) returned 0x21
	[0180.928] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", dwFileAttributes=0x20) returned 0
	[0180.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1042.mst")) returned 0x21
	[0180.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1042.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1042.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.929] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1042.mst", dwFileAttributes=0x21) returned 0
	[0180.929] SetEvent (hEvent=0xfc) returned 1
	[0180.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1043.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.929] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51200) returned 1
	[0180.930] CloseHandle (hObject=0x228) returned 1
	[0180.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1043.mst")) returned 0x21
	[0180.930] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", dwFileAttributes=0x20) returned 0
	[0180.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1043.mst")) returned 0x21
	[0180.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1043.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1043.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.930] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1043.mst", dwFileAttributes=0x21) returned 0
	[0180.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1044.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.931] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46080) returned 1
	[0180.931] CloseHandle (hObject=0x228) returned 1
	[0180.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1044.mst")) returned 0x21
	[0180.931] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", dwFileAttributes=0x20) returned 0
	[0180.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1044.mst")) returned 0x21
	[0180.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1044.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1044.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.931] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1044.mst", dwFileAttributes=0x21) returned 0
	[0180.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1045.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.932] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37888) returned 1
	[0180.932] CloseHandle (hObject=0x228) returned 1
	[0180.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1045.mst")) returned 0x21
	[0180.932] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", dwFileAttributes=0x20) returned 0
	[0180.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1045.mst")) returned 0x21
	[0180.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1045.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1045.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.932] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1045.mst", dwFileAttributes=0x21) returned 0
	[0180.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1046.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.934] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=48640) returned 1
	[0180.934] CloseHandle (hObject=0x228) returned 1
	[0180.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1046.mst")) returned 0x21
	[0180.934] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", dwFileAttributes=0x20) returned 0
	[0180.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1046.mst")) returned 0x21
	[0180.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1046.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1046.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.935] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1046.mst", dwFileAttributes=0x21) returned 0
	[0180.935] SetEvent (hEvent=0xfc) returned 1
	[0180.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1048.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.935] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40448) returned 1
	[0180.935] CloseHandle (hObject=0x228) returned 1
	[0180.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1048.mst")) returned 0x21
	[0180.935] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", dwFileAttributes=0x20) returned 0
	[0180.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1048.mst")) returned 0x21
	[0180.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1048.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1048.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.936] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1048.mst", dwFileAttributes=0x21) returned 0
	[0180.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1049.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.936] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37888) returned 1
	[0180.936] CloseHandle (hObject=0x228) returned 1
	[0180.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1049.mst")) returned 0x21
	[0180.937] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", dwFileAttributes=0x20) returned 0
	[0180.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1049.mst")) returned 0x21
	[0180.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1049.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1049.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.937] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1049.mst", dwFileAttributes=0x21) returned 0
	[0180.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1050.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.938] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38400) returned 1
	[0180.938] CloseHandle (hObject=0x228) returned 1
	[0180.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1050.mst")) returned 0x21
	[0180.938] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", dwFileAttributes=0x20) returned 0
	[0180.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1050.mst")) returned 0x21
	[0180.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1050.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1050.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.938] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1050.mst", dwFileAttributes=0x21) returned 0
	[0180.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1051.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.144] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38400) returned 1
	[0181.144] CloseHandle (hObject=0x23c) returned 1
	[0181.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1051.mst")) returned 0x21
	[0181.144] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", dwFileAttributes=0x20) returned 0
	[0181.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1051.mst")) returned 0x21
	[0181.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1051.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1051.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.145] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1051.mst", dwFileAttributes=0x21) returned 0
	[0181.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.145] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=928) returned 1
	[0181.145] CloseHandle (hObject=0x23c) returned 1
	[0181.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.ini")) returned 0x21
	[0181.145] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", dwFileAttributes=0x20) returned 0
	[0181.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.ini")) returned 0x21
	[0181.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.146] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\setup.ini", dwFileAttributes=0x21) returned 0
	[0181.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\vigtigt.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.149] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16833) returned 1
	[0181.149] CloseHandle (hObject=0x23c) returned 1
	[0181.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\vigtigt.htm")) returned 0x20
	[0181.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\vigtigt.htm")) returned 0x20
	[0181.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\vigtigt.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\vigtigt.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktig.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.150] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16818) returned 1
	[0181.150] CloseHandle (hObject=0x23c) returned 1
	[0181.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktig.htm")) returned 0x20
	[0181.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktig.htm")) returned 0x20
	[0181.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktig.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktig.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktigt.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.151] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16916) returned 1
	[0181.151] CloseHandle (hObject=0x23c) returned 1
	[0181.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktigt.htm")) returned 0x20
	[0181.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktigt.htm")) returned 0x20
	[0181.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktigt.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktigt.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acroiehelper.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.152] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=64928) returned 1
	[0181.152] CloseHandle (hObject=0x23c) returned 1
	[0181.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acroiehelper.dll")) returned 0x20
	[0181.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acroiehelper.dll")) returned 0x20
	[0181.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acroiehelper.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acroiehelper.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acroiehelpershim.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.153] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=62376) returned 1
	[0181.153] CloseHandle (hObject=0x23c) returned 1
	[0181.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acroiehelpershim.dll")) returned 0x20
	[0181.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acroiehelpershim.dll")) returned 0x20
	[0181.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acroiehelpershim.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acroiehelpershim.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.154] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.155] CloseHandle (hObject=0x23c) returned 1
	[0181.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cat")) returned 0x20
	[0181.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cat")) returned 0x20
	[0181.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CAT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.156] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=310272) returned 1
	[0181.156] CloseHandle (hObject=0x23c) returned 1
	[0181.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.chs")) returned 0x20
	[0181.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.chs")) returned 0x20
	[0181.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.157] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=310272) returned 1
	[0181.157] CloseHandle (hObject=0x23c) returned 1
	[0181.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cht")) returned 0x20
	[0181.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cht")) returned 0x20
	[0181.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CHT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.158] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.158] CloseHandle (hObject=0x23c) returned 1
	[0181.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cze")) returned 0x20
	[0181.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cze")) returned 0x20
	[0181.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.CZE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.159] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.159] CloseHandle (hObject=0x23c) returned 1
	[0181.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.dan")) returned 0x20
	[0181.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.dan")) returned 0x20
	[0181.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DAN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.160] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312832) returned 1
	[0181.160] CloseHandle (hObject=0x23c) returned 1
	[0181.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.deu")) returned 0x20
	[0181.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.deu")) returned 0x20
	[0181.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.DEU" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.161] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=702352) returned 1
	[0181.161] CloseHandle (hObject=0x23c) returned 1
	[0181.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.dll")) returned 0x20
	[0181.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.dll")) returned 0x20
	[0181.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.162] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312832) returned 1
	[0181.162] CloseHandle (hObject=0x23c) returned 1
	[0181.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.esp")) returned 0x20
	[0181.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.esp")) returned 0x20
	[0181.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ESP" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.163] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.163] CloseHandle (hObject=0x23c) returned 1
	[0181.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.euq")) returned 0x20
	[0181.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.euq")) returned 0x20
	[0181.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.EUQ" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.164] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312832) returned 1
	[0181.164] CloseHandle (hObject=0x23c) returned 1
	[0181.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.fra")) returned 0x20
	[0181.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.fra")) returned 0x20
	[0181.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.FRA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.165] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.165] CloseHandle (hObject=0x23c) returned 1
	[0181.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.hrv")) returned 0x20
	[0181.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.hrv")) returned 0x20
	[0181.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HRV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.167] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.167] CloseHandle (hObject=0x23c) returned 1
	[0181.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.hun")) returned 0x20
	[0181.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.hun")) returned 0x20
	[0181.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.HUN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.168] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312832) returned 1
	[0181.168] CloseHandle (hObject=0x23c) returned 1
	[0181.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ita")) returned 0x20
	[0181.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ita")) returned 0x20
	[0181.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.ITA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.169] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=310784) returned 1
	[0181.169] CloseHandle (hObject=0x23c) returned 1
	[0181.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.jpn")) returned 0x20
	[0181.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.jpn")) returned 0x20
	[0181.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.JPN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.170] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=310784) returned 1
	[0181.171] CloseHandle (hObject=0x23c) returned 1
	[0181.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.kor")) returned 0x20
	[0181.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.kor")) returned 0x20
	[0181.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.KOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.171] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312832) returned 1
	[0181.171] CloseHandle (hObject=0x23c) returned 1
	[0181.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.nld")) returned 0x20
	[0181.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.nld")) returned 0x20
	[0181.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NLD" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.172] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.172] CloseHandle (hObject=0x23c) returned 1
	[0181.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.nor")) returned 0x20
	[0181.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.nor")) returned 0x20
	[0181.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.NOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.173] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.173] CloseHandle (hObject=0x23c) returned 1
	[0181.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.pol")) returned 0x20
	[0181.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.pol")) returned 0x20
	[0181.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.POL" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.174] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.174] CloseHandle (hObject=0x23c) returned 1
	[0181.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ptb")) returned 0x20
	[0181.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ptb")) returned 0x20
	[0181.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.PTB" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.175] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.176] CloseHandle (hObject=0x23c) returned 1
	[0181.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.rum")) returned 0x20
	[0181.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.rum")) returned 0x20
	[0181.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUM" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.176] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.177] CloseHandle (hObject=0x23c) returned 1
	[0181.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.rus")) returned 0x20
	[0181.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.rus")) returned 0x20
	[0181.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.RUS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.358] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.358] CloseHandle (hObject=0x1fc) returned 1
	[0181.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.sky")) returned 0x20
	[0181.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.sky")) returned 0x20
	[0181.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SKY" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.358] SetEvent (hEvent=0xfc) returned 1
	[0181.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.359] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.359] CloseHandle (hObject=0x1fc) returned 1
	[0181.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.suo")) returned 0x20
	[0181.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.suo")) returned 0x20
	[0181.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.362] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.362] CloseHandle (hObject=0x1fc) returned 1
	[0181.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.sve")) returned 0x20
	[0181.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.sve")) returned 0x20
	[0181.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SVE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.363] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.363] CloseHandle (hObject=0x1fc) returned 1
	[0181.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.tur")) returned 0x20
	[0181.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.tur")) returned 0x20
	[0181.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.TUR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.364] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312320) returned 1
	[0181.364] CloseHandle (hObject=0x1fc) returned 1
	[0181.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ukr")) returned 0x20
	[0181.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ukr")) returned 0x20
	[0181.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.UKR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.365] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=301056) returned 1
	[0181.365] CloseHandle (hObject=0x1fc) returned 1
	[0181.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cat")) returned 0x20
	[0181.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cat")) returned 0x20
	[0181.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CAT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.367] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300032) returned 1
	[0181.367] CloseHandle (hObject=0x1fc) returned 1
	[0181.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.chs")) returned 0x20
	[0181.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.chs")) returned 0x20
	[0181.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.367] SetEvent (hEvent=0xfc) returned 1
	[0181.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.368] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300032) returned 1
	[0181.368] CloseHandle (hObject=0x1fc) returned 1
	[0181.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cht")) returned 0x20
	[0181.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cht")) returned 0x20
	[0181.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CHT" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.371] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.371] CloseHandle (hObject=0x1fc) returned 1
	[0181.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cze")) returned 0x20
	[0181.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cze")) returned 0x20
	[0181.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.CZE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.372] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.372] CloseHandle (hObject=0x1fc) returned 1
	[0181.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.dan")) returned 0x20
	[0181.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.dan")) returned 0x20
	[0181.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DAN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.373] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=301056) returned 1
	[0181.373] CloseHandle (hObject=0x1fc) returned 1
	[0181.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.deu")) returned 0x20
	[0181.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.deu")) returned 0x20
	[0181.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.DEU" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\pdfshell.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.374] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=390552) returned 1
	[0181.374] CloseHandle (hObject=0x1fc) returned 1
	[0181.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\pdfshell.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.dll")) returned 0x20
	[0181.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\pdfshell.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.dll")) returned 0x20
	[0181.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\pdfshell.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\pdfshell.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.377] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=301056) returned 1
	[0181.377] CloseHandle (hObject=0x168) returned 1
	[0181.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.esp")) returned 0x20
	[0181.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.esp")) returned 0x20
	[0181.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ESP" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.378] SetEvent (hEvent=0xfc) returned 1
	[0181.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.378] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.378] CloseHandle (hObject=0x168) returned 1
	[0181.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.euq")) returned 0x20
	[0181.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.euq")) returned 0x20
	[0181.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.EUQ" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.379] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=301056) returned 1
	[0181.379] CloseHandle (hObject=0x168) returned 1
	[0181.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.fra")) returned 0x20
	[0181.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.fra")) returned 0x20
	[0181.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.FRA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.380] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.381] CloseHandle (hObject=0x168) returned 1
	[0181.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.hrv")) returned 0x20
	[0181.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.hrv")) returned 0x20
	[0181.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HRV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.382] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.382] CloseHandle (hObject=0x168) returned 1
	[0181.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.hun")) returned 0x20
	[0181.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.hun")) returned 0x20
	[0181.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.HUN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.383] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=301056) returned 1
	[0181.383] CloseHandle (hObject=0x168) returned 1
	[0181.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ita")) returned 0x20
	[0181.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ita")) returned 0x20
	[0181.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.ITA" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.385] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300032) returned 1
	[0181.385] CloseHandle (hObject=0x168) returned 1
	[0181.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.jpn")) returned 0x20
	[0181.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.jpn")) returned 0x20
	[0181.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.JPN" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.386] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300032) returned 1
	[0181.386] CloseHandle (hObject=0x168) returned 1
	[0181.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.kor")) returned 0x20
	[0181.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.kor")) returned 0x20
	[0181.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.KOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.387] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.387] CloseHandle (hObject=0x168) returned 1
	[0181.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.nld")) returned 0x20
	[0181.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.nld")) returned 0x20
	[0181.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NLD" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.388] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.388] CloseHandle (hObject=0x168) returned 1
	[0181.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.nor")) returned 0x20
	[0181.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.nor")) returned 0x20
	[0181.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.NOR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.390] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.390] CloseHandle (hObject=0x168) returned 1
	[0181.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.pol")) returned 0x20
	[0181.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.pol")) returned 0x20
	[0181.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.POL" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.391] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=301056) returned 1
	[0181.391] CloseHandle (hObject=0x168) returned 1
	[0181.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ptb")) returned 0x20
	[0181.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ptb")) returned 0x20
	[0181.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.PTB" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.392] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.392] CloseHandle (hObject=0x168) returned 1
	[0181.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.rum")) returned 0x20
	[0181.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.rum")) returned 0x20
	[0181.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUM" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.393] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.393] CloseHandle (hObject=0x168) returned 1
	[0181.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.rus")) returned 0x20
	[0181.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.rus")) returned 0x20
	[0181.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.RUS" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.394] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.394] CloseHandle (hObject=0x168) returned 1
	[0181.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.sky")) returned 0x20
	[0181.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.sky")) returned 0x20
	[0181.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SKY" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.395] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.395] CloseHandle (hObject=0x168) returned 1
	[0181.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.slv")) returned 0x20
	[0181.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.slv")) returned 0x20
	[0181.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SLV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.396] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.396] CloseHandle (hObject=0x168) returned 1
	[0181.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.suo")) returned 0x20
	[0181.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.suo")) returned 0x20
	[0181.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SUO" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.397] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.397] CloseHandle (hObject=0x168) returned 1
	[0181.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.sve")) returned 0x20
	[0181.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.sve")) returned 0x20
	[0181.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.SVE" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.398] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.398] CloseHandle (hObject=0x168) returned 1
	[0181.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.tur")) returned 0x20
	[0181.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.tur")) returned 0x20
	[0181.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.TUR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.399] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300544) returned 1
	[0181.399] CloseHandle (hObject=0x168) returned 1
	[0181.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ukr")) returned 0x20
	[0181.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ukr")) returned 0x20
	[0181.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\PDFShell.UKR" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\pdfshell.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AcrobatUpdater.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\acrobatupdater.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.400] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=338856) returned 1
	[0181.400] CloseHandle (hObject=0x168) returned 1
	[0181.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AcrobatUpdater.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\acrobatupdater.exe")) returned 0x20
	[0181.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AcrobatUpdater.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\acrobatupdater.exe")) returned 0x20
	[0181.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AcrobatUpdater.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\acrobatupdater.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AcrobatUpdater.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\acrobatupdater.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearm.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.401] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=932288) returned 1
	[0181.401] CloseHandle (hObject=0x168) returned 1
	[0181.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearm.exe")) returned 0x20
	[0181.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearm.exe")) returned 0x20
	[0181.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearm.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeExtractFiles.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobeextractfiles.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.402] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=70584) returned 1
	[0181.402] CloseHandle (hObject=0x168) returned 1
	[0181.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeExtractFiles.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobeextractfiles.dll")) returned 0x20
	[0181.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeExtractFiles.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobeextractfiles.dll")) returned 0x20
	[0181.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeExtractFiles.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobeextractfiles.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeExtractFiles.dll" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\adobeextractfiles.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\ReaderUpdater.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\readerupdater.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.403] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=338856) returned 1
	[0181.403] CloseHandle (hObject=0x168) returned 1
	[0181.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\ReaderUpdater.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\readerupdater.exe")) returned 0x20
	[0181.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\ReaderUpdater.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\readerupdater.exe")) returned 0x20
	[0181.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\ReaderUpdater.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\readerupdater.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\ReaderUpdater.exe" (normalized: "c:\\program files (x86)\\common files\\adobe\\arm\\1.0\\readerupdater.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_tw\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0181.574] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=349) returned 1
	[0181.574] CloseHandle (hObject=0x1f4) returned 1
	[0181.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_tw\\reader_10.0.helpcfg")) returned 0x20
	[0181.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_tw\\reader_10.0.helpcfg")) returned 0x20
	[0181.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_tw\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_tw\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.7\\microsoft.ink.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.577] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=516096) returned 1
	[0181.578] CloseHandle (hObject=0x1b8) returned 1
	[0181.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.7\\microsoft.ink.dll")) returned 0x20
	[0181.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.7\\microsoft.ink.dll")) returned 0x20
	[0181.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\Microsoft.Ink.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.7\\microsoft.ink.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.7\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.579] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0181.579] CloseHandle (hObject=0x1b8) returned 1
	[0181.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20
	[0181.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20
	[0181.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.582] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8704) returned 1
	[0181.582] CloseHandle (hObject=0x1b8) returned 1
	[0181.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20
	[0181.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20
	[0181.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.583] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10240) returned 1
	[0181.583] CloseHandle (hObject=0x1b8) returned 1
	[0181.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20
	[0181.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20
	[0181.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.586] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0181.586] CloseHandle (hObject=0x1fc) returned 1
	[0181.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20
	[0181.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20
	[0181.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.587] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0181.587] CloseHandle (hObject=0x1fc) returned 1
	[0181.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20
	[0181.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20
	[0181.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.588] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3072) returned 1
	[0181.588] CloseHandle (hObject=0x1fc) returned 1
	[0181.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui")) returned 0x20
	[0181.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui")) returned 0x20
	[0181.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipBand.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipBand.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tipband.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.589] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32768) returned 1
	[0181.589] CloseHandle (hObject=0x1fc) returned 1
	[0181.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20
	[0181.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20
	[0181.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.590] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3072) returned 1
	[0181.590] CloseHandle (hObject=0x1fc) returned 1
	[0181.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20
	[0181.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20
	[0181.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.592] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=274944) returned 1
	[0181.592] CloseHandle (hObject=0x1fc) returned 1
	[0181.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20
	[0181.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20
	[0181.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\InkDiv.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\inkdiv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.593] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1415168) returned 1
	[0181.593] CloseHandle (hObject=0x1fc) returned 1
	[0181.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0x20
	[0181.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0x20
	[0181.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\InkObj.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\inkobj.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\journal.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\journal.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.594] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=936448) returned 1
	[0181.594] CloseHandle (hObject=0x1fc) returned 1
	[0181.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\journal.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\journal.dll")) returned 0x20
	[0181.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\journal.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\journal.dll")) returned 0x20
	[0181.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\journal.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\journal.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\journal.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\journal.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.594] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1383936) returned 1
	[0181.595] CloseHandle (hObject=0x1fc) returned 1
	[0181.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0x20
	[0181.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0x20
	[0181.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\micaut.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\micaut.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.596] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=507904) returned 1
	[0181.596] CloseHandle (hObject=0x1fc) returned 1
	[0181.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20
	[0181.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20
	[0181.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\microsoft.ink.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.598] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1221632) returned 1
	[0181.598] CloseHandle (hObject=0x1fc) returned 1
	[0181.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20
	[0181.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20
	[0181.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mip.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mip.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.599] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6283264) returned 1
	[0181.599] CloseHandle (hObject=0x1fc) returned 1
	[0181.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0x20
	[0181.599] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mraut.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mraut.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0181.599] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mraut.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mraut.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0
	[0181.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.600] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44032) returned 1
	[0181.600] CloseHandle (hObject=0x1fc) returned 1
	[0181.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20
	[0181.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20
	[0181.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mshwgst.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mshwgst.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.601] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=812544) returned 1
	[0181.601] CloseHandle (hObject=0x1fc) returned 1
	[0181.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20
	[0181.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20
	[0181.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mshwLatin.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mshwlatin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penchs.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penchs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.604] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1536) returned 1
	[0181.604] CloseHandle (hObject=0x1fc) returned 1
	[0181.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penchs.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penchs.dll")) returned 0x20
	[0181.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penchs.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penchs.dll")) returned 0x20
	[0181.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penchs.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penchs.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penchs.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penchs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pencht.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pencht.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.605] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1536) returned 1
	[0181.605] CloseHandle (hObject=0x1fc) returned 1
	[0181.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pencht.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pencht.dll")) returned 0x20
	[0181.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pencht.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pencht.dll")) returned 0x20
	[0181.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pencht.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pencht.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pencht.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pencht.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penjpn.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penjpn.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.608] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1536) returned 1
	[0181.608] CloseHandle (hObject=0x1fc) returned 1
	[0181.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penjpn.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penjpn.dll")) returned 0x20
	[0181.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penjpn.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penjpn.dll")) returned 0x20
	[0181.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penjpn.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penjpn.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penjpn.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penjpn.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penkor.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penkor.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.609] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1536) returned 1
	[0181.609] CloseHandle (hObject=0x1fc) returned 1
	[0181.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penkor.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penkor.dll")) returned 0x20
	[0181.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penkor.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penkor.dll")) returned 0x20
	[0181.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penkor.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penkor.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penkor.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penkor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penusa.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penusa.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.610] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1536) returned 1
	[0181.610] CloseHandle (hObject=0x1fc) returned 1
	[0181.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penusa.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penusa.dll")) returned 0x20
	[0181.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penusa.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penusa.dll")) returned 0x20
	[0181.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penusa.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penusa.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\penusa.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\penusa.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipanel.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0181.611] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=84992) returned 1
	[0181.611] CloseHandle (hObject=0x1fc) returned 1
	[0181.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipanel.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.dll")) returned 0x20
	[0181.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipanel.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.dll")) returned 0x20
	[0181.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipanel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipanel.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipanel.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.726] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6656) returned 1
	[0181.726] CloseHandle (hObject=0x1b8) returned 1
	[0181.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipanel.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.exe")) returned 0x20
	[0181.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipanel.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.exe")) returned 0x20
	[0181.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipanel.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipanel.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipanel.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.731] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=348160) returned 1
	[0181.732] CloseHandle (hObject=0x1b8) returned 1
	[0181.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20
	[0181.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20
	[0181.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tiptsf.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tiptsf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.733] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40960) returned 1
	[0181.733] CloseHandle (hObject=0x1b8) returned 1
	[0181.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20
	[0181.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20
	[0181.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tpcps.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tpcps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\extensibility.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies\\extensibility.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.734] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0181.734] CloseHandle (hObject=0x1b8) returned 1
	[0181.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\extensibility.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies\\extensibility.dll")) returned 0x20
	[0181.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\extensibility.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies\\extensibility.dll")) returned 0x20
	[0181.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\extensibility.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies\\extensibility.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSEnv\\PublicAssemblies\\extensibility.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msenv\\publicassemblies\\extensibility.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.737] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26624) returned 1
	[0181.738] CloseHandle (hObject=0x1b8) returned 1
	[0181.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20
	[0181.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20
	[0181.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.739] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=303104) returned 1
	[0181.739] CloseHandle (hObject=0x1b8) returned 1
	[0181.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20
	[0181.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20
	[0181.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\msinfo32.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0181.744] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2498944) returned 1
	[0181.744] CloseHandle (hObject=0x214) returned 1
	[0181.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.dll")) returned 0x20
	[0181.744] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0181.744] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.dll")) returned 0
	[0181.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0181.745] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=55680) returned 1
	[0181.745] CloseHandle (hObject=0x214) returned 1
	[0181.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll")) returned 0x20
	[0181.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll")) returned 0x20
	[0181.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0181.746] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1388416) returned 1
	[0181.746] CloseHandle (hObject=0x214) returned 1
	[0181.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll")) returned 0x20
	[0181.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll")) returned 0x20
	[0181.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\csi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0181.747] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3518384) returned 1
	[0181.748] CloseHandle (hObject=0x214) returned 1
	[0181.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\csi.dll")) returned 0x20
	[0181.748] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\csi.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Csi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\csi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0181.748] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Csi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\csi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\csi.dll")) returned 0
	[0181.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\csisoap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0181.748] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1219456) returned 1
	[0181.749] CloseHandle (hObject=0x214) returned 1
	[0181.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\csisoap.dll")) returned 0x20
	[0181.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\csisoap.dll")) returned 0x20
	[0181.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\CsiSoap.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\csisoap.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\csisoap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0181.749] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4297568) returned 1
	[0181.749] CloseHandle (hObject=0x214) returned 1
	[0181.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf")) returned 0x20
	[0181.750] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0181.750] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\cultures\\office.odf")) returned 0
	[0181.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\mso.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0181.750] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18782080) returned 1
	[0181.750] CloseHandle (hObject=0x214) returned 1
	[0181.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\mso.dll")) returned 0x20
	[0181.751] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\mso.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSO.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\mso.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0181.751] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSO.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\mso.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\mso.dll")) returned 0
	[0181.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msores.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0181.751] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=72521600) returned 1
	[0181.751] CloseHandle (hObject=0x214) returned 1
	[0181.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msores.dll")) returned 0x20
	[0181.752] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msores.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSORES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msores.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0181.752] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSORES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msores.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msores.dll")) returned 0
	[0181.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msoshext.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.754] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=988048) returned 1
	[0181.754] CloseHandle (hObject=0x200) returned 1
	[0181.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msoshext.dll")) returned 0x20
	[0181.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msoshext.dll")) returned 0x20
	[0181.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\msoshext.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msoshext.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msoshext.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msoxmlmf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.756] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49024) returned 1
	[0181.756] CloseHandle (hObject=0x200) returned 1
	[0181.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msoxmlmf.dll")) returned 0x20
	[0181.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msoxmlmf.dll")) returned 0x20
	[0181.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSOXMLMF.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msoxmlmf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\msoxmlmf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\ophproxy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.757] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17800) returned 1
	[0181.757] CloseHandle (hObject=0x200) returned 1
	[0181.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\ophproxy.dll")) returned 0x20
	[0181.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\ophproxy.dll")) returned 0x20
	[0181.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\OPHPROXY.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\ophproxy.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\ophproxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\riched20.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.759] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1366888) returned 1
	[0181.759] CloseHandle (hObject=0x200) returned 1
	[0181.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\riched20.dll")) returned 0x20
	[0181.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\riched20.dll")) returned 0x20
	[0181.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\RICHED20.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\riched20.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\office14\\riched20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\PortalConnect.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\1033\\portalconnect.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.760] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17312) returned 1
	[0181.760] CloseHandle (hObject=0x200) returned 1
	[0181.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\PortalConnect.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\1033\\portalconnect.dll")) returned 0x20
	[0181.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\PortalConnect.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\1033\\portalconnect.dll")) returned 0x20
	[0181.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\PortalConnect.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\1033\\portalconnect.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\1033\\PortalConnect.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\1033\\portalconnect.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\PortalConnectCore.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\portalconnectcore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.763] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=553344) returned 1
	[0181.763] CloseHandle (hObject=0x200) returned 1
	[0181.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\PortalConnectCore.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\portalconnectcore.dll")) returned 0x20
	[0181.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\PortalConnectCore.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\portalconnectcore.dll")) returned 0x20
	[0181.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\PortalConnectCore.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\portalconnectcore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Portal\\PortalConnectCore.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\portal\\portalconnectcore.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.765] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=255) returned 1
	[0181.765] CloseHandle (hObject=0x200) returned 1
	[0181.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20
	[0181.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20
	[0181.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.766] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1074) returned 1
	[0181.766] CloseHandle (hObject=0x200) returned 1
	[0181.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20
	[0181.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20
	[0181.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.768] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=645) returned 1
	[0181.768] CloseHandle (hObject=0x200) returned 1
	[0181.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26
	[0181.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26
	[0181.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.769] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=231) returned 1
	[0181.769] CloseHandle (hObject=0x200) returned 1
	[0181.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20
	[0181.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20
	[0181.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.770] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23871) returned 1
	[0181.770] CloseHandle (hObject=0x200) returned 1
	[0181.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20
	[0181.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20
	[0181.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.771] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=237) returned 1
	[0181.771] CloseHandle (hObject=0x200) returned 1
	[0181.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20
	[0181.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20
	[0181.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\green bubbles.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.772] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6406) returned 1
	[0181.773] CloseHandle (hObject=0x200) returned 1
	[0181.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20
	[0181.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20
	[0181.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.773] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=235) returned 1
	[0181.774] CloseHandle (hObject=0x200) returned 1
	[0181.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20
	[0181.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20
	[0181.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\hand prints.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.775] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4222) returned 1
	[0181.775] CloseHandle (hObject=0x200) returned 1
	[0181.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20
	[0181.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20
	[0181.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.776] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=237) returned 1
	[0181.776] CloseHandle (hObject=0x200) returned 1
	[0181.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20
	[0181.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20
	[0181.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orange circles.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.777] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6381) returned 1
	[0181.777] CloseHandle (hObject=0x200) returned 1
	[0181.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20
	[0181.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20
	[0181.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0181.778] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=232) returned 1
	[0181.778] CloseHandle (hObject=0x200) returned 1
	[0181.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20
	[0181.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20
	[0181.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.939] SetEvent (hEvent=0xfc) returned 1
	[0181.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6\\vbe6ext.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0182.065] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40960) returned 1
	[0182.065] CloseHandle (hObject=0x20c) returned 1
	[0182.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6\\vbe6ext.olb")) returned 0x20
	[0182.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6\\vbe6ext.olb")) returned 0x20
	[0182.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6\\vbe6ext.olb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\VBE6EXT.OLB" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vba\\vba6\\vbe6ext.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.067] SetEvent (hEvent=0xfc) returned 1
	[0182.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.184] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=799568) returned 1
	[0182.184] CloseHandle (hObject=0x210) returned 1
	[0182.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20
	[0182.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20
	[0182.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia100.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia100.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.185] SetEvent (hEvent=0xfc) returned 1
	[0182.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument.v9.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.185] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=131072) returned 1
	[0182.186] CloseHandle (hObject=0x210) returned 1
	[0182.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument.v9.0.dll")) returned 0x20
	[0182.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument.v9.0.dll")) returned 0x20
	[0182.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument.v9.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument\\microsoft.visualstudio.tools.office.appinfodocument.v9.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.186] SetEvent (hEvent=0xfc) returned 1
	[0182.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.applications.addinadapter.v10.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.187] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41408) returned 1
	[0182.187] CloseHandle (hObject=0x210) returned 1
	[0182.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.applications.addinadapter.v10.0.dll")) returned 0x20
	[0182.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.applications.addinadapter.v10.0.dll")) returned 0x20
	[0182.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.applications.addinadapter.v10.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.applications.addinadapter.v10.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.188] SetEvent (hEvent=0xfc) returned 1
	[0182.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.applications.addinadapter.v9.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.373] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45056) returned 1
	[0182.373] CloseHandle (hObject=0x210) returned 1
	[0182.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.applications.addinadapter.v9.0.dll")) returned 0x20
	[0182.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.applications.addinadapter.v9.0.dll")) returned 0x20
	[0182.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.applications.addinadapter.v9.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.applications.addinadapter.v9.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.374] SetEvent (hEvent=0xfc) returned 1
	[0182.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.excel.addinadapter.v9.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.375] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36864) returned 1
	[0182.375] CloseHandle (hObject=0x210) returned 1
	[0182.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.excel.addinadapter.v9.0.dll")) returned 0x20
	[0182.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.excel.addinadapter.v9.0.dll")) returned 0x20
	[0182.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.excel.addinadapter.v9.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.excel.addinadapter.v9.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.376] SetEvent (hEvent=0xfc) returned 1
	[0182.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.word.addinadapter.v9.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.376] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36864) returned 1
	[0182.376] CloseHandle (hObject=0x210) returned 1
	[0182.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.word.addinadapter.v9.0.dll")) returned 0x20
	[0182.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.word.addinadapter.v9.0.dll")) returned 0x20
	[0182.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.word.addinadapter.v9.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.word.addinadapter.v9.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.Office.Tools.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.office.tools.v9.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.379] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=94208) returned 1
	[0182.379] CloseHandle (hObject=0x210) returned 1
	[0182.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.Office.Tools.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.office.tools.v9.0.dll")) returned 0x20
	[0182.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.Office.Tools.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.office.tools.v9.0.dll")) returned 0x20
	[0182.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.Office.Tools.v9.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.office.tools.v9.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.Office.Tools.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.office.tools.v9.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.379] SetEvent (hEvent=0xfc) returned 1
	[0182.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.visualstudio.tools.applications.runtime.v10.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.380] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32688) returned 1
	[0182.380] CloseHandle (hObject=0x210) returned 1
	[0182.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.visualstudio.tools.applications.runtime.v10.0.dll")) returned 0x20
	[0182.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.visualstudio.tools.applications.runtime.v10.0.dll")) returned 0x20
	[0182.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.visualstudio.tools.applications.runtime.v10.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.visualstudio.tools.applications.runtime.v10.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.visualstudio.tools.applications.runtime.v9.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.381] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77824) returned 1
	[0182.381] CloseHandle (hObject=0x210) returned 1
	[0182.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.visualstudio.tools.applications.runtime.v9.0.dll")) returned 0x20
	[0182.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.visualstudio.tools.applications.runtime.v9.0.dll")) returned 0x20
	[0182.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.visualstudio.tools.applications.runtime.v9.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinviews\\microsoft.visualstudio.tools.applications.runtime.v9.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.applications.contract.v10.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.383] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24496) returned 1
	[0182.383] CloseHandle (hObject=0x210) returned 1
	[0182.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.applications.contract.v10.0.dll")) returned 0x20
	[0182.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.applications.contract.v10.0.dll")) returned 0x20
	[0182.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.applications.contract.v10.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.applications.contract.v10.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.384] SetEvent (hEvent=0xfc) returned 1
	[0182.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.applications.contract.v9.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.384] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22016) returned 1
	[0182.384] CloseHandle (hObject=0x210) returned 1
	[0182.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.applications.contract.v9.0.dll")) returned 0x20
	[0182.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.applications.contract.v9.0.dll")) returned 0x20
	[0182.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.applications.contract.v9.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.applications.contract.v9.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.office.contract.v10.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.386] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23976) returned 1
	[0182.386] CloseHandle (hObject=0x210) returned 1
	[0182.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.office.contract.v10.0.dll")) returned 0x20
	[0182.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.office.contract.v10.0.dll")) returned 0x20
	[0182.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.office.contract.v10.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.office.contract.v10.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.387] SetEvent (hEvent=0xfc) returned 1
	[0182.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.office.contract.v9.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.388] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49152) returned 1
	[0182.388] CloseHandle (hObject=0x210) returned 1
	[0182.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.office.contract.v9.0.dll")) returned 0x20
	[0182.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.office.contract.v9.0.dll")) returned 0x20
	[0182.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.office.contract.v9.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\contracts\\microsoft.visualstudio.tools.office.contract.v9.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.388] SetEvent (hEvent=0xfc) returned 1
	[0182.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.applications.hostadapter.v10.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.390] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35256) returned 1
	[0182.390] CloseHandle (hObject=0x210) returned 1
	[0182.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.applications.hostadapter.v10.0.dll")) returned 0x20
	[0182.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.applications.hostadapter.v10.0.dll")) returned 0x20
	[0182.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.applications.hostadapter.v10.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.applications.hostadapter.v10.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.excel.hostadapter.v10.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.391] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77752) returned 1
	[0182.391] CloseHandle (hObject=0x210) returned 1
	[0182.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.excel.hostadapter.v10.0.dll")) returned 0x20
	[0182.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.excel.hostadapter.v10.0.dll")) returned 0x20
	[0182.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.excel.hostadapter.v10.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.excel.hostadapter.v10.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.hostadapter.v10.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.392] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=63408) returned 1
	[0182.392] CloseHandle (hObject=0x210) returned 1
	[0182.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.hostadapter.v10.0.dll")) returned 0x20
	[0182.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.hostadapter.v10.0.dll")) returned 0x20
	[0182.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.hostadapter.v10.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.hostadapter.v10.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.outlook.hostadapter.v10.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.393] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41408) returned 1
	[0182.393] CloseHandle (hObject=0x210) returned 1
	[0182.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.outlook.hostadapter.v10.0.dll")) returned 0x20
	[0182.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.outlook.hostadapter.v10.0.dll")) returned 0x20
	[0182.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.outlook.hostadapter.v10.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.outlook.hostadapter.v10.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.word.hostadapter.v10.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.394] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=83896) returned 1
	[0182.394] CloseHandle (hObject=0x210) returned 1
	[0182.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.word.hostadapter.v10.0.dll")) returned 0x20
	[0182.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.word.hostadapter.v10.0.dll")) returned 0x20
	[0182.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.word.hostadapter.v10.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\hostsideadapters\\microsoft.visualstudio.tools.office.word.hostadapter.v10.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\PipelineSegments.store" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\pipelinesegments.store"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.399] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=130497) returned 1
	[0182.399] CloseHandle (hObject=0x210) returned 1
	[0182.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\PipelineSegments.store" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\pipelinesegments.store")) returned 0x20
	[0182.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\PipelineSegments.store" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\pipelinesegments.store")) returned 0x20
	[0182.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\PipelineSegments.store.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\pipelinesegments.store.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\PipelineSegments.store" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\pipelinesegments.store"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.399] SetEvent (hEvent=0xfc) returned 1
	[0182.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0182.403] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10080) returned 1
	[0182.403] CloseHandle (hObject=0x23c) returned 1
	[0182.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20
	[0182.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20
	[0182.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.403] SetEvent (hEvent=0xfc) returned 1
	[0182.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0182.404] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18264) returned 1
	[0182.404] CloseHandle (hObject=0x23c) returned 1
	[0182.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20
	[0182.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20
	[0182.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0182.405] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=716) returned 1
	[0182.405] CloseHandle (hObject=0x23c) returned 1
	[0182.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config")) returned 0x20
	[0182.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config")) returned 0x20
	[0182.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.config"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0182.406] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=87384) returned 1
	[0182.406] CloseHandle (hObject=0x23c) returned 1
	[0182.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20
	[0182.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20
	[0182.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0182.407] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=265552) returned 1
	[0182.408] CloseHandle (hObject=0x23c) returned 1
	[0182.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20
	[0182.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20
	[0182.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.408] SetEvent (hEvent=0xfc) returned 1
	[0182.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0182.409] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49000) returned 1
	[0182.409] CloseHandle (hObject=0x23c) returned 1
	[0182.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20
	[0182.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20
	[0182.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\ActionsPane3.xsd" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\actionspane3.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0182.410] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=135) returned 1
	[0182.410] CloseHandle (hObject=0x23c) returned 1
	[0182.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\ActionsPane3.xsd" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\actionspane3.xsd")) returned 0x20
	[0182.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\ActionsPane3.xsd" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\actionspane3.xsd")) returned 0x20
	[0182.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\ActionsPane3.xsd.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\actionspane3.xsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\ActionsPane3.xsd" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\actionspane3.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.411] SetEvent (hEvent=0xfc) returned 1
	[0182.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.497] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=125256) returned 1
	[0182.497] CloseHandle (hObject=0x228) returned 1
	[0182.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20
	[0182.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20
	[0182.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.498] SetEvent (hEvent=0xfc) returned 1
	[0182.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.499] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20816) returned 1
	[0182.499] CloseHandle (hObject=0x228) returned 1
	[0182.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20
	[0182.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20
	[0182.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.500] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1651576) returned 1
	[0182.500] CloseHandle (hObject=0x228) returned 1
	[0182.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll")) returned 0x20
	[0182.500] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0182.500] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPSRVUTL.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpsrvutl.dll")) returned 0
	[0182.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.503] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=983952) returned 1
	[0182.503] CloseHandle (hObject=0x210) returned 1
	[0182.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll")) returned 0x20
	[0182.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll")) returned 0x20
	[0182.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\FPWEC.DLL" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\web server extensions\\14\\bin\\fpwec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.503] SetEvent (hEvent=0xfc) returned 1
	[0182.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.506] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2702) returned 1
	[0182.506] CloseHandle (hObject=0x210) returned 1
	[0182.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp")) returned 0x20
	[0182.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp")) returned 0x20
	[0182.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.apl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.508] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16066) returned 1
	[0182.508] CloseHandle (hObject=0x210) returned 1
	[0182.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.apl")) returned 0x20
	[0182.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.apl")) returned 0x20
	[0182.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.apl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.APL" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.apl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.509] SetEvent (hEvent=0xfc) returned 1
	[0182.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.510] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=484600) returned 1
	[0182.510] CloseHandle (hObject=0x210) returned 1
	[0182.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt")) returned 0x20
	[0182.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt")) returned 0x20
	[0182.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CRT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.crt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.510] SetEvent (hEvent=0xfc) returned 1
	[0182.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.csd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.511] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29798100) returned 1
	[0182.511] CloseHandle (hObject=0x210) returned 1
	[0182.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.csd")) returned 0x20
	[0182.511] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.csd"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.csd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0182.511] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.csd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.CSD" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.csd")) returned 0
	[0182.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.IDX" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.idx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.512] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=132508) returned 1
	[0182.512] CloseHandle (hObject=0x210) returned 1
	[0182.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.IDX" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.idx")) returned 0x20
	[0182.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.IDX" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.idx")) returned 0x20
	[0182.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.IDX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.idx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.IDX" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.idx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.lts"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.513] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=931696) returned 1
	[0182.513] CloseHandle (hObject=0x210) returned 1
	[0182.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.lts")) returned 0x20
	[0182.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.lts")) returned 0x20
	[0182.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.lts.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.LTS" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.lts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.tts"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.516] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2430393) returned 1
	[0182.516] CloseHandle (hObject=0x210) returned 1
	[0182.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.tts")) returned 0x20
	[0182.516] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.tts"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.tts.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0182.517] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.tts.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.TTS" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.tts")) returned 0
	[0182.517] SetEvent (hEvent=0xfc) returned 1
	[0182.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.udt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.517] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11166) returned 1
	[0182.517] CloseHandle (hObject=0x210) returned 1
	[0182.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.udt")) returned 0x20
	[0182.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.udt")) returned 0x20
	[0182.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.udt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UDT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.udt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.unt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.518] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3182160) returned 1
	[0182.518] CloseHandle (hObject=0x210) returned 1
	[0182.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.unt")) returned 0x20
	[0182.519] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.unt"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.unt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0182.519] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.unt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.UNT" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.unt")) returned 0
	[0182.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.wih"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.519] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3597414) returned 1
	[0182.519] CloseHandle (hObject=0x210) returned 1
	[0182.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.wih")) returned 0x20
	[0182.520] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.wih"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.wih.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0182.520] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.wih.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\M1033DSK.WIH" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\enu-dsk\\m1033dsk.wih")) returned 0
	[0182.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.520] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=274944) returned 1
	[0182.520] CloseHandle (hObject=0x210) returned 1
	[0182.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll")) returned 0x20
	[0182.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll")) returned 0x20
	[0182.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsfrontendenu.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.521] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0182.522] CloseHandle (hObject=0x210) returned 1
	[0182.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui")) returned 0x20
	[0182.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui")) returned 0x20
	[0182.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSLoc.dll.mui" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\en-us\\msttsloc.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.523] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35328) returned 1
	[0182.523] CloseHandle (hObject=0x210) returned 1
	[0182.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll")) returned 0x20
	[0182.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll")) returned 0x20
	[0182.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttscommon.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSDecWrp.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsdecwrp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.524] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47616) returned 1
	[0182.524] CloseHandle (hObject=0x210) returned 1
	[0182.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSDecWrp.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsdecwrp.dll")) returned 0x20
	[0182.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSDecWrp.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsdecwrp.dll")) returned 0x20
	[0182.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSDecWrp.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsdecwrp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSDecWrp.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsdecwrp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.525] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=150528) returned 1
	[0182.525] CloseHandle (hObject=0x210) returned 1
	[0182.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll")) returned 0x20
	[0182.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll")) returned 0x20
	[0182.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.526] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8704) returned 1
	[0182.526] CloseHandle (hObject=0x210) returned 1
	[0182.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll")) returned 0x20
	[0182.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll")) returned 0x20
	[0182.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSLoc.dll" (normalized: "c:\\program files (x86)\\common files\\speechengines\\microsoft\\tts20\\msttsloc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.527] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14610) returned 1
	[0182.527] CloseHandle (hObject=0x210) returned 1
	[0182.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\adojavas.inc")) returned 0x20
	[0182.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\adojavas.inc")) returned 0x20
	[0182.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\adojavas.inc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\adojavas.inc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.528] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14951) returned 1
	[0182.529] CloseHandle (hObject=0x210) returned 1
	[0182.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\adovbs.inc")) returned 0x20
	[0182.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\adovbs.inc")) returned 0x20
	[0182.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\adovbs.inc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\adovbs.inc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.530] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17408) returned 1
	[0182.530] CloseHandle (hObject=0x210) returned 1
	[0182.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20
	[0182.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20
	[0182.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\msader15.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us\\msader15.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.531] SetEvent (hEvent=0xfc) returned 1
	[0182.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.532] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0182.532] CloseHandle (hObject=0x210) returned 1
	[0182.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msader15.dll")) returned 0x20
	[0182.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msader15.dll")) returned 0x20
	[0182.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msader15.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msader15.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.532] SetEvent (hEvent=0xfc) returned 1
	[0182.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.595] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1019904) returned 1
	[0182.595] CloseHandle (hObject=0x210) returned 1
	[0182.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado15.dll")) returned 0x20
	[0182.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado15.dll")) returned 0x20
	[0182.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado15.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado15.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.596] SetEvent (hEvent=0xfc) returned 1
	[0182.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.597] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=73728) returned 1
	[0182.597] CloseHandle (hObject=0x210) returned 1
	[0182.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado21.tlb")) returned 0x20
	[0182.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado21.tlb")) returned 0x20
	[0182.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado21.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado21.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.599] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=94208) returned 1
	[0182.599] CloseHandle (hObject=0x210) returned 1
	[0182.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado25.tlb")) returned 0x20
	[0182.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado25.tlb")) returned 0x20
	[0182.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado25.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado25.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.601] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98304) returned 1
	[0182.601] CloseHandle (hObject=0x210) returned 1
	[0182.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado26.tlb")) returned 0x20
	[0182.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado26.tlb")) returned 0x20
	[0182.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado26.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado26.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.601] SetEvent (hEvent=0xfc) returned 1
	[0182.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.602] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98304) returned 1
	[0182.602] CloseHandle (hObject=0x210) returned 1
	[0182.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado27.tlb")) returned 0x20
	[0182.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado27.tlb")) returned 0x20
	[0182.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado27.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado27.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.603] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98304) returned 1
	[0182.603] CloseHandle (hObject=0x210) returned 1
	[0182.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado28.tlb")) returned 0x20
	[0182.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado28.tlb")) returned 0x20
	[0182.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado28.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado28.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.604] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=352256) returned 1
	[0182.604] CloseHandle (hObject=0x210) returned 1
	[0182.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadomd.dll")) returned 0x20
	[0182.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadomd.dll")) returned 0x20
	[0182.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadomd.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.606] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20480) returned 1
	[0182.606] CloseHandle (hObject=0x210) returned 1
	[0182.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20
	[0182.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20
	[0182.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadomd28.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.607] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57344) returned 1
	[0182.607] CloseHandle (hObject=0x210) returned 1
	[0182.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msador15.dll")) returned 0x20
	[0182.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msador15.dll")) returned 0x20
	[0182.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msador15.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msador15.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.608] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=372736) returned 1
	[0182.608] CloseHandle (hObject=0x210) returned 1
	[0182.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadox.dll")) returned 0x20
	[0182.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadox.dll")) returned 0x20
	[0182.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadox.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.609] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28672) returned 1
	[0182.609] CloseHandle (hObject=0x210) returned 1
	[0182.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadox28.tlb")) returned 0x20
	[0182.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadox28.tlb")) returned 0x20
	[0182.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox28.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadox28.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.610] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81920) returned 1
	[0182.610] CloseHandle (hObject=0x210) returned 1
	[0182.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadrh15.dll")) returned 0x20
	[0182.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadrh15.dll")) returned 0x20
	[0182.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadrh15.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadrh15.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msjro.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msjro.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.611] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=143360) returned 1
	[0182.611] CloseHandle (hObject=0x210) returned 1
	[0182.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msjro.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msjro.dll")) returned 0x20
	[0182.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msjro.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msjro.dll")) returned 0x20
	[0182.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msjro.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msjro.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msjro.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msjro.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files (x86)\\common files\\system\\directdb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.612] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24064) returned 1
	[0182.612] CloseHandle (hObject=0x210) returned 1
	[0182.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files (x86)\\common files\\system\\directdb.dll")) returned 0x20
	[0182.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files (x86)\\common files\\system\\directdb.dll")) returned 0x20
	[0182.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\directdb.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files (x86)\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.613] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=93696) returned 1
	[0182.613] CloseHandle (hObject=0x210) returned 1
	[0182.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20
	[0182.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20
	[0182.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\en-US\\wab32res.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\en-us\\wab32res.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.614] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=630) returned 1
	[0182.614] CloseHandle (hObject=0x210) returned 1
	[0182.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20
	[0182.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20
	[0182.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcjavas.inc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\adcjavas.inc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.615] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=623) returned 1
	[0182.615] CloseHandle (hObject=0x210) returned 1
	[0182.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20
	[0182.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20
	[0182.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcvbs.inc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\adcvbs.inc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.619] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9728) returned 1
	[0182.619] CloseHandle (hObject=0x228) returned 1
	[0182.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20
	[0182.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20
	[0182.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcer.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.619] SetEvent (hEvent=0xfc) returned 1
	[0182.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.620] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5120) returned 1
	[0182.620] CloseHandle (hObject=0x228) returned 1
	[0182.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui")) returned 0x20
	[0182.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui")) returned 0x20
	[0182.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcfr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcfr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.622] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5632) returned 1
	[0182.622] CloseHandle (hObject=0x228) returned 1
	[0182.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20
	[0182.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20
	[0182.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcor.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.622] SetEvent (hEvent=0xfc) returned 1
	[0182.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.623] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13824) returned 1
	[0182.623] CloseHandle (hObject=0x228) returned 1
	[0182.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20
	[0182.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20
	[0182.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.624] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0182.624] CloseHandle (hObject=0x228) returned 1
	[0182.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20
	[0182.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20
	[0182.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.625] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5632) returned 1
	[0182.625] CloseHandle (hObject=0x228) returned 1
	[0182.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20
	[0182.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20
	[0182.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\handler.reg" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\handler.reg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.626] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=518) returned 1
	[0182.626] CloseHandle (hObject=0x228) returned 1
	[0182.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\handler.reg" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\handler.reg")) returned 0x20
	[0182.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\handler.reg" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\handler.reg")) returned 0x20
	[0182.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\handler.reg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\handler.reg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\handler.reg" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\handler.reg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\handsafe.reg" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\handsafe.reg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.627] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=588) returned 1
	[0182.627] CloseHandle (hObject=0x228) returned 1
	[0182.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\handsafe.reg" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\handsafe.reg")) returned 0x20
	[0182.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\handsafe.reg" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\handsafe.reg")) returned 0x20
	[0182.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\handsafe.reg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\handsafe.reg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\handsafe.reg" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\handsafe.reg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.734] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=561152) returned 1
	[0182.734] CloseHandle (hObject=0x228) returned 1
	[0182.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadce.dll")) returned 0x20
	[0182.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadce.dll")) returned 0x20
	[0182.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadce.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadce.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.737] SetEvent (hEvent=0xfc) returned 1
	[0182.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcf.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.737] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=94208) returned 1
	[0182.738] CloseHandle (hObject=0x228) returned 1
	[0182.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcf.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcf.dll")) returned 0x20
	[0182.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcf.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcf.dll")) returned 0x20
	[0182.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcf.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcf.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcfr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcfr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.739] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0182.739] CloseHandle (hObject=0x228) returned 1
	[0182.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcfr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcfr.dll")) returned 0x20
	[0182.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcfr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcfr.dll")) returned 0x20
	[0182.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcfr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcfr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcfr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.741] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=212992) returned 1
	[0182.741] CloseHandle (hObject=0x210) returned 1
	[0182.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadco.dll")) returned 0x20
	[0182.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadco.dll")) returned 0x20
	[0182.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadco.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadco.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.742] SetEvent (hEvent=0xfc) returned 1
	[0182.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.742] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0182.742] CloseHandle (hObject=0x210) returned 1
	[0182.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcor.dll")) returned 0x20
	[0182.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcor.dll")) returned 0x20
	[0182.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcor.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcor.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcs.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.743] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81920) returned 1
	[0182.743] CloseHandle (hObject=0x210) returned 1
	[0182.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcs.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcs.dll")) returned 0x20
	[0182.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcs.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcs.dll")) returned 0x20
	[0182.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcs.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcs.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcs.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.744] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=241664) returned 1
	[0182.744] CloseHandle (hObject=0x210) returned 1
	[0182.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadds.dll")) returned 0x20
	[0182.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadds.dll")) returned 0x20
	[0182.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadds.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadds.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.746] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0182.746] CloseHandle (hObject=0x210) returned 1
	[0182.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20
	[0182.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20
	[0182.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msaddsr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msaddsr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.746] SetEvent (hEvent=0xfc) returned 1
	[0182.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.747] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0182.747] CloseHandle (hObject=0x210) returned 1
	[0182.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20
	[0182.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20
	[0182.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprsr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaprsr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.748] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=286720) returned 1
	[0182.748] CloseHandle (hObject=0x210) returned 1
	[0182.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20
	[0182.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20
	[0182.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprst.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaprst.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.749] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=192512) returned 1
	[0182.749] CloseHandle (hObject=0x210) returned 1
	[0182.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdarem.dll")) returned 0x20
	[0182.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdarem.dll")) returned 0x20
	[0182.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdarem.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdarem.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.750] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0182.750] CloseHandle (hObject=0x210) returned 1
	[0182.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20
	[0182.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20
	[0182.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaremr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaremr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.751] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45056) returned 1
	[0182.751] CloseHandle (hObject=0x210) returned 1
	[0182.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20
	[0182.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20
	[0182.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdfmap.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdfmap.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdaorar.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\msdaorar.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.754] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0182.754] CloseHandle (hObject=0x210) returned 1
	[0182.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdaorar.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\msdaorar.dll.mui")) returned 0x20
	[0182.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdaorar.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\msdaorar.dll.mui")) returned 0x20
	[0182.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdaorar.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\msdaorar.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdaorar.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\msdaorar.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.755] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5632) returned 1
	[0182.755] CloseHandle (hObject=0x210) returned 1
	[0182.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20
	[0182.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20
	[0182.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.756] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47616) returned 1
	[0182.756] CloseHandle (hObject=0x210) returned 1
	[0182.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20
	[0182.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20
	[0182.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.757] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44032) returned 1
	[0182.757] CloseHandle (hObject=0x210) returned 1
	[0182.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20
	[0182.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20
	[0182.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.759] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17920) returned 1
	[0182.759] CloseHandle (hObject=0x210) returned 1
	[0182.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20
	[0182.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20
	[0182.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdadc.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdadc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.761] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0182.761] CloseHandle (hObject=0x210) returned 1
	[0182.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdadc.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdadc.dll")) returned 0x20
	[0182.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdadc.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdadc.dll")) returned 0x20
	[0182.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdadc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdadc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdadc.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdadc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.761] SetEvent (hEvent=0xfc) returned 1
	[0182.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaenum.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaenum.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.762] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0182.762] CloseHandle (hObject=0x210) returned 1
	[0182.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaenum.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaenum.dll")) returned 0x20
	[0182.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaenum.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaenum.dll")) returned 0x20
	[0182.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaenum.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaenum.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaenum.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaenum.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaer.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.763] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0182.763] CloseHandle (hObject=0x210) returned 1
	[0182.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaer.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaer.dll")) returned 0x20
	[0182.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaer.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaer.dll")) returned 0x20
	[0182.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaer.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaer.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaer.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaora.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaora.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.764] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=286720) returned 1
	[0182.764] CloseHandle (hObject=0x210) returned 1
	[0182.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaora.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaora.dll")) returned 0x20
	[0182.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaora.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaora.dll")) returned 0x20
	[0182.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaora.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaora.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaora.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaora.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaorar.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaorar.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.766] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0182.766] CloseHandle (hObject=0x210) returned 1
	[0182.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaorar.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaorar.dll")) returned 0x20
	[0182.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaorar.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaorar.dll")) returned 0x20
	[0182.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaorar.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaorar.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaorar.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaorar.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.767] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=94208) returned 1
	[0182.767] CloseHandle (hObject=0x210) returned 1
	[0182.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20
	[0182.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20
	[0182.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaosp.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaosp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.768] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=249856) returned 1
	[0182.768] CloseHandle (hObject=0x210) returned 1
	[0182.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaps.dll")) returned 0x20
	[0182.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaps.dll")) returned 0x20
	[0182.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaps.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasc.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.769] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0182.769] CloseHandle (hObject=0x210) returned 1
	[0182.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasc.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasc.dll")) returned 0x20
	[0182.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasc.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasc.dll")) returned 0x20
	[0182.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasc.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.871] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=610304) returned 1
	[0182.871] CloseHandle (hObject=0x144) returned 1
	[0182.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasql.dll")) returned 0x20
	[0182.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasql.dll")) returned 0x20
	[0182.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasql.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasql.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.872] SetEvent (hEvent=0xfc) returned 1
	[0182.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.873] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98304) returned 1
	[0182.873] CloseHandle (hObject=0x144) returned 1
	[0182.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20
	[0182.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20
	[0182.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatl3.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdatl3.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatt.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdatt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.874] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20480) returned 1
	[0182.874] CloseHandle (hObject=0x144) returned 1
	[0182.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatt.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdatt.dll")) returned 0x20
	[0182.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatt.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdatt.dll")) returned 0x20
	[0182.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatt.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdatt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdatt.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdatt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaurl.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaurl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.875] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0182.876] CloseHandle (hObject=0x144) returned 1
	[0182.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaurl.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaurl.dll")) returned 0x20
	[0182.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaurl.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaurl.dll")) returned 0x20
	[0182.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaurl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaurl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdaurl.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdaurl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.876] SetEvent (hEvent=0xfc) returned 1
	[0182.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.877] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28672) returned 1
	[0182.877] CloseHandle (hObject=0x144) returned 1
	[0182.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msxactps.dll")) returned 0x20
	[0182.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msxactps.dll")) returned 0x20
	[0182.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msxactps.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msxactps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.878] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=864256) returned 1
	[0182.878] CloseHandle (hObject=0x144) returned 1
	[0182.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledb32.dll")) returned 0x20
	[0182.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledb32.dll")) returned 0x20
	[0182.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledb32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.879] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81920) returned 1
	[0182.879] CloseHandle (hObject=0x144) returned 1
	[0182.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20
	[0182.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20
	[0182.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32r.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledb32r.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.880] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9804) returned 1
	[0182.880] CloseHandle (hObject=0x144) returned 1
	[0182.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20
	[0182.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20
	[0182.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbjvs.inc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledbjvs.inc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.882] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9975) returned 1
	[0182.882] CloseHandle (hObject=0x144) returned 1
	[0182.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20
	[0182.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20
	[0182.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbvbs.inc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledbvbs.inc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.883] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=921600) returned 1
	[0182.883] CloseHandle (hObject=0x144) returned 1
	[0182.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20
	[0182.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20
	[0182.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqloledb.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.884] SetEvent (hEvent=0xfc) returned 1
	[0182.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.884] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16384) returned 1
	[0182.884] CloseHandle (hObject=0x144) returned 1
	[0182.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20
	[0182.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20
	[0182.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.rll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqloledb.rll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.895] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=266240) returned 1
	[0182.896] CloseHandle (hObject=0x144) returned 1
	[0182.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20
	[0182.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20
	[0182.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqlxmlx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.900] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0182.900] CloseHandle (hObject=0x144) returned 1
	[0182.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20
	[0182.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20
	[0182.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.rll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqlxmlx.rll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrw.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\xmlrw.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.902] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=169496) returned 1
	[0182.902] CloseHandle (hObject=0x144) returned 1
	[0182.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrw.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\xmlrw.dll")) returned 0x20
	[0182.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrw.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\xmlrw.dll")) returned 0x20
	[0182.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrw.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\xmlrw.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrw.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\xmlrw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrwbin.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\xmlrwbin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.903] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=123416) returned 1
	[0182.903] CloseHandle (hObject=0x144) returned 1
	[0182.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrwbin.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\xmlrwbin.dll")) returned 0x20
	[0182.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrwbin.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\xmlrwbin.dll")) returned 0x20
	[0182.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrwbin.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\xmlrwbin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\xmlrwbin.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\xmlrwbin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.904] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=708608) returned 1
	[0182.904] CloseHandle (hObject=0x144) returned 1
	[0182.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32.dll")) returned 0x20
	[0182.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32.dll")) returned 0x20
	[0182.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\wab32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\wab32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32res.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.905] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1098752) returned 1
	[0182.905] CloseHandle (hObject=0x144) returned 1
	[0182.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32res.dll")) returned 0x20
	[0182.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32res.dll")) returned 0x20
	[0182.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\wab32res.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\desktop.ini" (normalized: "c:\\program files (x86)\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.906] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=174) returned 1
	[0182.906] CloseHandle (hObject=0x144) returned 1
	[0182.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\desktop.ini" (normalized: "c:\\program files (x86)\\desktop.ini")) returned 0x26
	[0182.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\desktop.ini" (normalized: "c:\\program files (x86)\\desktop.ini")) returned 0x26
	[0182.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\desktop.ini" (normalized: "c:\\program files (x86)\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\58.0.3029.110.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.907] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=226) returned 1
	[0182.907] CloseHandle (hObject=0x144) returned 1
	[0182.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\58.0.3029.110.manifest")) returned 0x20
	[0182.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\58.0.3029.110.manifest")) returned 0x20
	[0182.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\58.0.3029.110.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\58.0.3029.110.manifest" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\58.0.3029.110.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.094] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49289048) returned 1
	[0183.094] CloseHandle (hObject=0x20c) returned 1
	[0183.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.dll")) returned 0x20
	[0183.094] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0183.094] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.dll")) returned 0
	[0183.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.402] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=329771) returned 1
	[0183.402] CloseHandle (hObject=0x144) returned 1
	[0183.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak")) returned 0x20
	[0183.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak")) returned 0x20
	[0183.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ca.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.402] SetEvent (hEvent=0xfc) returned 1
	[0183.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.403] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=320818) returned 1
	[0183.403] CloseHandle (hObject=0x144) returned 1
	[0183.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak")) returned 0x20
	[0183.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak")) returned 0x20
	[0183.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\it.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.404] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=391418) returned 1
	[0183.404] CloseHandle (hObject=0x144) returned 1
	[0183.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak")) returned 0x20
	[0183.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak")) returned 0x20
	[0183.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ja.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.405] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=748523) returned 1
	[0183.405] CloseHandle (hObject=0x144) returned 1
	[0183.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak")) returned 0x20
	[0183.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak")) returned 0x20
	[0183.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\kn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.409] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=330644) returned 1
	[0183.409] CloseHandle (hObject=0x144) returned 1
	[0183.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak")) returned 0x20
	[0183.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak")) returned 0x20
	[0183.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ko.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.409] SetEvent (hEvent=0xfc) returned 1
	[0183.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.410] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=334865) returned 1
	[0183.410] CloseHandle (hObject=0x144) returned 1
	[0183.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak")) returned 0x20
	[0183.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak")) returned 0x20
	[0183.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lt.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.417] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=335824) returned 1
	[0183.417] CloseHandle (hObject=0x144) returned 1
	[0183.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak")) returned 0x20
	[0183.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak")) returned 0x20
	[0183.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\lv.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.418] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=838860) returned 1
	[0183.418] CloseHandle (hObject=0x144) returned 1
	[0183.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak")) returned 0x20
	[0183.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak")) returned 0x20
	[0183.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ml.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.419] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=662507) returned 1
	[0183.419] CloseHandle (hObject=0x144) returned 1
	[0183.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak")) returned 0x20
	[0183.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak")) returned 0x20
	[0183.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\mr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.420] SetEvent (hEvent=0xfc) returned 1
	[0183.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.420] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=254701) returned 1
	[0183.420] CloseHandle (hObject=0x144) returned 1
	[0183.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak")) returned 0x20
	[0183.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak")) returned 0x20
	[0183.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ms.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.421] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=296932) returned 1
	[0183.421] CloseHandle (hObject=0x144) returned 1
	[0183.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak")) returned 0x20
	[0183.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak")) returned 0x20
	[0183.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nb.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.422] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=316496) returned 1
	[0183.423] CloseHandle (hObject=0x144) returned 1
	[0183.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak")) returned 0x20
	[0183.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak")) returned 0x20
	[0183.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\nl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.424] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=327912) returned 1
	[0183.424] CloseHandle (hObject=0x144) returned 1
	[0183.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak")) returned 0x20
	[0183.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak")) returned 0x20
	[0183.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.424] SetEvent (hEvent=0xfc) returned 1
	[0183.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.425] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=321085) returned 1
	[0183.425] CloseHandle (hObject=0x144) returned 1
	[0183.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak")) returned 0x20
	[0183.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak")) returned 0x20
	[0183.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-br.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.426] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=325014) returned 1
	[0183.426] CloseHandle (hObject=0x144) returned 1
	[0183.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak")) returned 0x20
	[0183.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak")) returned 0x20
	[0183.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\pt-pt.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.427] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=334595) returned 1
	[0183.427] CloseHandle (hObject=0x144) returned 1
	[0183.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak")) returned 0x20
	[0183.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak")) returned 0x20
	[0183.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ro.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.429] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=517243) returned 1
	[0183.429] CloseHandle (hObject=0x144) returned 1
	[0183.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak")) returned 0x20
	[0183.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak")) returned 0x20
	[0183.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ru.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.429] SetEvent (hEvent=0xfc) returned 1
	[0183.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.430] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=344109) returned 1
	[0183.430] CloseHandle (hObject=0x144) returned 1
	[0183.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak")) returned 0x20
	[0183.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak")) returned 0x20
	[0183.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sk.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.431] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=310142) returned 1
	[0183.431] CloseHandle (hObject=0x144) returned 1
	[0183.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak")) returned 0x20
	[0183.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak")) returned 0x20
	[0183.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.432] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=499260) returned 1
	[0183.432] CloseHandle (hObject=0x144) returned 1
	[0183.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak")) returned 0x20
	[0183.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak")) returned 0x20
	[0183.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.433] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=300731) returned 1
	[0183.433] CloseHandle (hObject=0x144) returned 1
	[0183.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak")) returned 0x20
	[0183.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak")) returned 0x20
	[0183.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sv.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.434] SetEvent (hEvent=0xfc) returned 1
	[0183.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.434] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=281460) returned 1
	[0183.435] CloseHandle (hObject=0x144) returned 1
	[0183.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak")) returned 0x20
	[0183.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak")) returned 0x20
	[0183.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\sw.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.436] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=773454) returned 1
	[0183.436] CloseHandle (hObject=0x144) returned 1
	[0183.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak")) returned 0x20
	[0183.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak")) returned 0x20
	[0183.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ta.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.437] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=723837) returned 1
	[0183.437] CloseHandle (hObject=0x144) returned 1
	[0183.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak")) returned 0x20
	[0183.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak")) returned 0x20
	[0183.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\te.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.438] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=651192) returned 1
	[0183.438] CloseHandle (hObject=0x144) returned 1
	[0183.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak")) returned 0x20
	[0183.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak")) returned 0x20
	[0183.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\th.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.439] SetEvent (hEvent=0xfc) returned 1
	[0183.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.439] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=324872) returned 1
	[0183.439] CloseHandle (hObject=0x144) returned 1
	[0183.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak")) returned 0x20
	[0183.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak")) returned 0x20
	[0183.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\tr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.440] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=516540) returned 1
	[0183.440] CloseHandle (hObject=0x144) returned 1
	[0183.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak")) returned 0x20
	[0183.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak")) returned 0x20
	[0183.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\uk.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.441] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=372546) returned 1
	[0183.441] CloseHandle (hObject=0x144) returned 1
	[0183.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak")) returned 0x20
	[0183.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak")) returned 0x20
	[0183.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\vi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.604] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=270716) returned 1
	[0183.604] CloseHandle (hObject=0x20c) returned 1
	[0183.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak")) returned 0x20
	[0183.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak")) returned 0x20
	[0183.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-cn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\convenient-distance-tramadol.exe" (normalized: "c:\\program files (x86)\\internet explorer\\convenient-distance-tramadol.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.605] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0183.605] CloseHandle (hObject=0x20c) returned 1
	[0183.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\convenient-distance-tramadol.exe" (normalized: "c:\\program files (x86)\\internet explorer\\convenient-distance-tramadol.exe")) returned 0x20
	[0183.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\convenient-distance-tramadol.exe" (normalized: "c:\\program files (x86)\\internet explorer\\convenient-distance-tramadol.exe")) returned 0x20
	[0183.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\convenient-distance-tramadol.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\convenient-distance-tramadol.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\convenient-distance-tramadol.exe" (normalized: "c:\\program files (x86)\\internet explorer\\convenient-distance-tramadol.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.824] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0183.825] CloseHandle (hObject=0x144) returned 1
	[0183.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20
	[0183.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20
	[0183.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\hmmapi.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.825] SetEvent (hEvent=0xfc) returned 1
	[0183.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.826] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2048) returned 1
	[0183.826] CloseHandle (hObject=0x144) returned 1
	[0183.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20
	[0183.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20
	[0183.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ieinstal.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ielowutil.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.827] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2048) returned 1
	[0183.827] CloseHandle (hObject=0x144) returned 1
	[0183.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ielowutil.exe.mui")) returned 0x20
	[0183.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ielowutil.exe.mui")) returned 0x20
	[0183.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ielowutil.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ielowutil.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.829] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5120) returned 1
	[0183.829] CloseHandle (hObject=0x144) returned 1
	[0183.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20
	[0183.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20
	[0183.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iexplore.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.830] SetEvent (hEvent=0xfc) returned 1
	[0183.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsdbgui.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.830] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11776) returned 1
	[0183.830] CloseHandle (hObject=0x144) returned 1
	[0183.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsdbgui.dll.mui")) returned 0x20
	[0183.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsdbgui.dll.mui")) returned 0x20
	[0183.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsdbgui.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsdbgui.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsdebuggeride.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.831] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2048) returned 1
	[0183.831] CloseHandle (hObject=0x144) returned 1
	[0183.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsdebuggeride.dll.mui")) returned 0x20
	[0183.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsdebuggeride.dll.mui")) returned 0x20
	[0183.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsdebuggeride.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsdebuggeride.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsprofilercore.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.832] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2048) returned 1
	[0183.832] CloseHandle (hObject=0x144) returned 1
	[0183.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsprofilercore.dll.mui")) returned 0x20
	[0183.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsprofilercore.dll.mui")) returned 0x20
	[0183.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsprofilercore.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsprofilercore.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsprofilerui.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.839] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0183.839] CloseHandle (hObject=0x144) returned 1
	[0183.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsprofilerui.dll.mui")) returned 0x20
	[0183.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsprofilerui.dll.mui")) returned 0x20
	[0183.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsprofilerui.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\jsprofilerui.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.840] SetEvent (hEvent=0xfc) returned 1
	[0183.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.841] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=145408) returned 1
	[0183.841] CloseHandle (hObject=0x144) returned 1
	[0183.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe")) returned 0x20
	[0183.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe")) returned 0x20
	[0183.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.842] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50688) returned 1
	[0183.842] CloseHandle (hObject=0x144) returned 1
	[0183.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\hmmapi.dll")) returned 0x20
	[0183.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\hmmapi.dll")) returned 0x20
	[0183.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\hmmapi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files (x86)\\internet explorer\\ie8props.propdesc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.843] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2649) returned 1
	[0183.843] CloseHandle (hObject=0x144) returned 1
	[0183.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files (x86)\\internet explorer\\ie8props.propdesc")) returned 0x20
	[0183.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files (x86)\\internet explorer\\ie8props.propdesc")) returned 0x20
	[0183.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\ie8props.propdesc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files (x86)\\internet explorer\\ie8props.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files (x86)\\internet explorer\\iecompat.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.844] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7680) returned 1
	[0183.844] CloseHandle (hObject=0x144) returned 1
	[0183.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files (x86)\\internet explorer\\iecompat.dll")) returned 0x20
	[0183.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files (x86)\\internet explorer\\iecompat.dll")) returned 0x20
	[0183.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iecompat.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\iecompat.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files (x86)\\internet explorer\\iecompat.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files (x86)\\internet explorer\\iedvtool.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.845] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=860160) returned 1
	[0183.845] CloseHandle (hObject=0x144) returned 1
	[0183.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files (x86)\\internet explorer\\iedvtool.dll")) returned 0x20
	[0183.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files (x86)\\internet explorer\\iedvtool.dll")) returned 0x20
	[0183.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\iedvtool.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files (x86)\\internet explorer\\iedvtool.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.846] SetEvent (hEvent=0xfc) returned 1
	[0183.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.846] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=373248) returned 1
	[0183.846] CloseHandle (hObject=0x144) returned 1
	[0183.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe")) returned 0x20
	[0183.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe")) returned 0x20
	[0183.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.847] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=115712) returned 1
	[0183.847] CloseHandle (hObject=0x144) returned 1
	[0183.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe")) returned 0x20
	[0183.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe")) returned 0x20
	[0183.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieproxy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.848] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=163328) returned 1
	[0183.848] CloseHandle (hObject=0x144) returned 1
	[0183.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieproxy.dll")) returned 0x20
	[0183.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieproxy.dll")) returned 0x20
	[0183.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\ieproxy.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieproxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieshims.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.849] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=200704) returned 1
	[0183.850] CloseHandle (hObject=0x144) returned 1
	[0183.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieshims.dll")) returned 0x20
	[0183.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieshims.dll")) returned 0x20
	[0183.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\IEShims.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\ieshims.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.853] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=673040) returned 1
	[0183.853] CloseHandle (hObject=0x144) returned 1
	[0183.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe")) returned 0x20
	[0183.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe")) returned 0x20
	[0183.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsdbgui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.854] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=524288) returned 1
	[0183.854] CloseHandle (hObject=0x144) returned 1
	[0183.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsdbgui.dll")) returned 0x20
	[0183.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsdbgui.dll")) returned 0x20
	[0183.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\jsdbgui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsdbgui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsdebuggeride.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.855] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=122880) returned 1
	[0183.855] CloseHandle (hObject=0x144) returned 1
	[0183.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsdebuggeride.dll")) returned 0x20
	[0183.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsdebuggeride.dll")) returned 0x20
	[0183.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\jsdebuggeride.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsdebuggeride.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsprofilercore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.857] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=119808) returned 1
	[0183.857] CloseHandle (hObject=0x144) returned 1
	[0183.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsprofilercore.dll")) returned 0x20
	[0183.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsprofilercore.dll")) returned 0x20
	[0183.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\jsprofilercore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsprofilercore.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.857] SetEvent (hEvent=0xfc) returned 1
	[0183.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsprofilerui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.858] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=353280) returned 1
	[0183.858] CloseHandle (hObject=0x144) returned 1
	[0183.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsprofilerui.dll")) returned 0x20
	[0183.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsprofilerui.dll")) returned 0x20
	[0183.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\jsprofilerui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files (x86)\\internet explorer\\jsprofilerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files (x86)\\internet explorer\\msdbg2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.859] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=265720) returned 1
	[0183.859] CloseHandle (hObject=0x144) returned 1
	[0183.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files (x86)\\internet explorer\\msdbg2.dll")) returned 0x20
	[0183.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files (x86)\\internet explorer\\msdbg2.dll")) returned 0x20
	[0183.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\msdbg2.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files (x86)\\internet explorer\\msdbg2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files (x86)\\internet explorer\\pdm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.860] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=355832) returned 1
	[0183.860] CloseHandle (hObject=0x144) returned 1
	[0183.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files (x86)\\internet explorer\\pdm.dll")) returned 0x20
	[0183.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files (x86)\\internet explorer\\pdm.dll")) returned 0x20
	[0183.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\pdm.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\pdm.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files (x86)\\internet explorer\\pdm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.861] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=460) returned 1
	[0183.861] CloseHandle (hObject=0x144) returned 1
	[0183.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins")) returned 0x20
	[0183.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins")) returned 0x20
	[0183.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0183.997] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=189952) returned 1
	[0183.997] CloseHandle (hObject=0x144) returned 1
	[0183.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\sqmapi.dll")) returned 0x20
	[0183.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\sqmapi.dll")) returned 0x20
	[0183.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\sqmapi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.998] SetEvent (hEvent=0xfc) returned 1
	[0183.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\awt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\awt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.006] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1173416) returned 1
	[0184.006] CloseHandle (hObject=0x144) returned 1
	[0184.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\awt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\awt.dll")) returned 0x20
	[0184.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\awt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\awt.dll")) returned 0x20
	[0184.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\awt.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\awt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\awt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\awt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.006] SetEvent (hEvent=0xfc) returned 1
	[0184.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\axbridge.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\axbridge.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.007] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=153000) returned 1
	[0184.007] CloseHandle (hObject=0x144) returned 1
	[0184.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\axbridge.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\axbridge.dll")) returned 0x20
	[0184.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\axbridge.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\axbridge.dll")) returned 0x20
	[0184.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\axbridge.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\axbridge.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\axbridge.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\axbridge.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.007] SetEvent (hEvent=0xfc) returned 1
	[0184.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\classes.jsa" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\classes.jsa"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.010] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13762560) returned 1
	[0184.011] CloseHandle (hObject=0x144) returned 1
	[0184.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\classes.jsa" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\classes.jsa")) returned 0x21
	[0184.011] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\classes.jsa", dwFileAttributes=0x20) returned 0
	[0184.011] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\classes.jsa" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\classes.jsa"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\classes.jsa.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\classes.jsa.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0184.011] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\classes.jsa.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\classes.jsa.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\classes.jsa" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\classes.jsa")) returned 0
	[0184.011] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\classes.jsa", dwFileAttributes=0x21) returned 0
	[0184.011] SetEvent (hEvent=0xfc) returned 1
	[0184.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\jvm.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\jvm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.018] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3564968) returned 1
	[0184.018] CloseHandle (hObject=0x144) returned 1
	[0184.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\jvm.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\jvm.dll")) returned 0x20
	[0184.018] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\jvm.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\jvm.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\jvm.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\jvm.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0184.018] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\jvm.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\jvm.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\jvm.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\jvm.dll")) returned 0
	[0184.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.019] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1447) returned 1
	[0184.019] CloseHandle (hObject=0x144) returned 1
	[0184.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt")) returned 0x20
	[0184.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt")) returned 0x20
	[0184.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.020] SetEvent (hEvent=0xfc) returned 1
	[0184.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dcpr.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dcpr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.020] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=142248) returned 1
	[0184.020] CloseHandle (hObject=0x144) returned 1
	[0184.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dcpr.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dcpr.dll")) returned 0x20
	[0184.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dcpr.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dcpr.dll")) returned 0x20
	[0184.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dcpr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dcpr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dcpr.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dcpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\decora-sse.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\decora-sse.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.021] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=62888) returned 1
	[0184.021] CloseHandle (hObject=0x144) returned 1
	[0184.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\decora-sse.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\decora-sse.dll")) returned 0x20
	[0184.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\decora-sse.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\decora-sse.dll")) returned 0x20
	[0184.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\decora-sse.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\decora-sse.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\decora-sse.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\decora-sse.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\deploy.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\deploy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.022] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=364456) returned 1
	[0184.022] CloseHandle (hObject=0x144) returned 1
	[0184.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\deploy.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\deploy.dll")) returned 0x20
	[0184.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\deploy.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\deploy.dll")) returned 0x20
	[0184.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\deploy.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\deploy.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\deploy.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\deploy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.024] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=796072) returned 1
	[0184.024] CloseHandle (hObject=0x144) returned 1
	[0184.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\deployjava1.dll")) returned 0x20
	[0184.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\deployjava1.dll")) returned 0x20
	[0184.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\deployJava1.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\deployjava1.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.024] SetEvent (hEvent=0xfc) returned 1
	[0184.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.025] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=873384) returned 1
	[0184.025] CloseHandle (hObject=0x144) returned 1
	[0184.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\npdeployjava1.dll")) returned 0x20
	[0184.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\npdeployjava1.dll")) returned 0x20
	[0184.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\npdeployJava1.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\npdeployjava1.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_shmem.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dt_shmem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.026] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25512) returned 1
	[0184.026] CloseHandle (hObject=0x144) returned 1
	[0184.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_shmem.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dt_shmem.dll")) returned 0x20
	[0184.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_shmem.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dt_shmem.dll")) returned 0x20
	[0184.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_shmem.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dt_shmem.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_shmem.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dt_shmem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_socket.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dt_socket.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.027] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21928) returned 1
	[0184.027] CloseHandle (hObject=0x144) returned 1
	[0184.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_socket.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dt_socket.dll")) returned 0x20
	[0184.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_socket.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dt_socket.dll")) returned 0x20
	[0184.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_socket.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dt_socket.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\dt_socket.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\dt_socket.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.028] SetEvent (hEvent=0xfc) returned 1
	[0184.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\eula.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\eula.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.028] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=108968) returned 1
	[0184.028] CloseHandle (hObject=0x144) returned 1
	[0184.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\eula.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\eula.dll")) returned 0x20
	[0184.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\eula.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\eula.dll")) returned 0x20
	[0184.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\eula.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\eula.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\eula.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\eula.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\fontmanager.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\fontmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.033] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=217000) returned 1
	[0184.033] CloseHandle (hObject=0x144) returned 1
	[0184.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\fontmanager.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\fontmanager.dll")) returned 0x20
	[0184.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\fontmanager.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\fontmanager.dll")) returned 0x20
	[0184.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\fontmanager.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\fontmanager.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\fontmanager.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\fontmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\fxplugins.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\fxplugins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.035] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=156584) returned 1
	[0184.035] CloseHandle (hObject=0x144) returned 1
	[0184.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\fxplugins.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\fxplugins.dll")) returned 0x20
	[0184.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\fxplugins.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\fxplugins.dll")) returned 0x20
	[0184.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\fxplugins.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\fxplugins.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\fxplugins.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\fxplugins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\glass.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\glass.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.036] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=159656) returned 1
	[0184.036] CloseHandle (hObject=0x144) returned 1
	[0184.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\glass.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\glass.dll")) returned 0x20
	[0184.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\glass.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\glass.dll")) returned 0x20
	[0184.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\glass.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\glass.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\glass.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\glass.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.037] SetEvent (hEvent=0xfc) returned 1
	[0184.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\glib-lite.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\glib-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.037] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=408488) returned 1
	[0184.037] CloseHandle (hObject=0x144) returned 1
	[0184.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\glib-lite.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\glib-lite.dll")) returned 0x20
	[0184.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\glib-lite.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\glib-lite.dll")) returned 0x20
	[0184.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\glib-lite.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\glib-lite.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\glib-lite.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\glib-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.038] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=505768) returned 1
	[0184.038] CloseHandle (hObject=0x144) returned 1
	[0184.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\gstreamer-lite.dll")) returned 0x20
	[0184.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\gstreamer-lite.dll")) returned 0x20
	[0184.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\gstreamer-lite.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\gstreamer-lite.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\hprof.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\hprof.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.039] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=132520) returned 1
	[0184.039] CloseHandle (hObject=0x144) returned 1
	[0184.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\hprof.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\hprof.dll")) returned 0x20
	[0184.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\hprof.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\hprof.dll")) returned 0x20
	[0184.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\hprof.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\hprof.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\hprof.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\hprof.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\installer.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\installer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.389] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=207776) returned 1
	[0184.389] CloseHandle (hObject=0x144) returned 1
	[0184.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\installer.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\installer.dll")) returned 0x20
	[0184.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\installer.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\installer.dll")) returned 0x20
	[0184.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\installer.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\installer.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\installer.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\installer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.390] SetEvent (hEvent=0xfc) returned 1
	[0184.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jabswitch.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jabswitch.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.390] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=48040) returned 1
	[0184.391] CloseHandle (hObject=0x144) returned 1
	[0184.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jabswitch.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jabswitch.exe")) returned 0x20
	[0184.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jabswitch.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jabswitch.exe")) returned 0x20
	[0184.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jabswitch.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jabswitch.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jabswitch.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java-rmi.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java-rmi.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.392] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15784) returned 1
	[0184.392] CloseHandle (hObject=0x144) returned 1
	[0184.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java-rmi.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java-rmi.exe")) returned 0x20
	[0184.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java-rmi.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java-rmi.exe")) returned 0x20
	[0184.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java-rmi.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java-rmi.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java-rmi.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.393] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=120232) returned 1
	[0184.393] CloseHandle (hObject=0x144) returned 1
	[0184.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java.dll")) returned 0x20
	[0184.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java.dll")) returned 0x20
	[0184.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.394] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=174504) returned 1
	[0184.394] CloseHandle (hObject=0x144) returned 1
	[0184.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java.exe")) returned 0x20
	[0184.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java.exe")) returned 0x20
	[0184.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.398] SetEvent (hEvent=0xfc) returned 1
	[0184.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JavaAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaaccessbridge-32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.399] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=124840) returned 1
	[0184.399] CloseHandle (hObject=0x144) returned 1
	[0184.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JavaAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaaccessbridge-32.dll")) returned 0x20
	[0184.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JavaAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaaccessbridge-32.dll")) returned 0x20
	[0184.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JavaAccessBridge-32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaaccessbridge-32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JavaAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaaccessbridge-32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javacpl.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javacpl.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.400] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=66984) returned 1
	[0184.400] CloseHandle (hObject=0x144) returned 1
	[0184.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javacpl.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javacpl.exe")) returned 0x20
	[0184.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javacpl.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javacpl.exe")) returned 0x20
	[0184.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javacpl.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javacpl.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javacpl.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-font.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javafx-font.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.401] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=242600) returned 1
	[0184.401] CloseHandle (hObject=0x144) returned 1
	[0184.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-font.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javafx-font.dll")) returned 0x20
	[0184.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-font.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javafx-font.dll")) returned 0x20
	[0184.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-font.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javafx-font.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-font.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javafx-font.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.402] SetEvent (hEvent=0xfc) returned 1
	[0184.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-iio.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javafx-iio.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.403] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=188328) returned 1
	[0184.403] CloseHandle (hObject=0x144) returned 1
	[0184.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-iio.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javafx-iio.dll")) returned 0x20
	[0184.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-iio.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javafx-iio.dll")) returned 0x20
	[0184.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-iio.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javafx-iio.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javafx-iio.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javafx-iio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.404] SetEvent (hEvent=0xfc) returned 1
	[0184.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javaw.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaw.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.405] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=175016) returned 1
	[0184.405] CloseHandle (hObject=0x144) returned 1
	[0184.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javaw.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaw.exe")) returned 0x20
	[0184.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javaw.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaw.exe")) returned 0x20
	[0184.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javaw.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaw.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javaw.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.405] SetEvent (hEvent=0xfc) returned 1
	[0184.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javaws.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaws.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.406] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=264616) returned 1
	[0184.406] CloseHandle (hObject=0x144) returned 1
	[0184.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javaws.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaws.exe")) returned 0x20
	[0184.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javaws.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaws.exe")) returned 0x20
	[0184.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javaws.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaws.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\javaws.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.407] SetEvent (hEvent=0xfc) returned 1
	[0184.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java_crw_demo.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java_crw_demo.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.408] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23976) returned 1
	[0184.408] CloseHandle (hObject=0x144) returned 1
	[0184.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java_crw_demo.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java_crw_demo.dll")) returned 0x20
	[0184.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java_crw_demo.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java_crw_demo.dll")) returned 0x20
	[0184.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java_crw_demo.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java_crw_demo.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\java_crw_demo.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\java_crw_demo.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jawt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jawt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.409] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14248) returned 1
	[0184.409] CloseHandle (hObject=0x144) returned 1
	[0184.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jawt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jawt.dll")) returned 0x20
	[0184.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jawt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jawt.dll")) returned 0x20
	[0184.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jawt.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jawt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jawt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jawt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.410] SetEvent (hEvent=0xfc) returned 1
	[0184.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JAWTAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jawtaccessbridge-32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.411] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15272) returned 1
	[0184.411] CloseHandle (hObject=0x144) returned 1
	[0184.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JAWTAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jawtaccessbridge-32.dll")) returned 0x20
	[0184.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JAWTAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jawtaccessbridge-32.dll")) returned 0x20
	[0184.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JAWTAccessBridge-32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jawtaccessbridge-32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JAWTAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jawtaccessbridge-32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.411] SetEvent (hEvent=0xfc) returned 1
	[0184.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JdbcOdbc.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jdbcodbc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.412] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45992) returned 1
	[0184.412] CloseHandle (hObject=0x144) returned 1
	[0184.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JdbcOdbc.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jdbcodbc.dll")) returned 0x20
	[0184.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JdbcOdbc.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jdbcodbc.dll")) returned 0x20
	[0184.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JdbcOdbc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jdbcodbc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\JdbcOdbc.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jdbcodbc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jdwp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jdwp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.413] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=164776) returned 1
	[0184.413] CloseHandle (hObject=0x144) returned 1
	[0184.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jdwp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jdwp.dll")) returned 0x20
	[0184.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jdwp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jdwp.dll")) returned 0x20
	[0184.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jdwp.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jdwp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jdwp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jdwp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfr.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.415] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20392) returned 1
	[0184.415] CloseHandle (hObject=0x144) returned 1
	[0184.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfr.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfr.dll")) returned 0x20
	[0184.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfr.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfr.dll")) returned 0x20
	[0184.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfr.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.415] SetEvent (hEvent=0xfc) returned 1
	[0184.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxmedia.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxmedia.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.416] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=110504) returned 1
	[0184.416] CloseHandle (hObject=0x144) returned 1
	[0184.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxmedia.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxmedia.dll")) returned 0x20
	[0184.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxmedia.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxmedia.dll")) returned 0x20
	[0184.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxmedia.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxmedia.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxmedia.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxmedia.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxwebkit.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxwebkit.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.417] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11893160) returned 1
	[0184.417] CloseHandle (hObject=0x144) returned 1
	[0184.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxwebkit.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxwebkit.dll")) returned 0x20
	[0184.417] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxwebkit.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxwebkit.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxwebkit.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxwebkit.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0184.417] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxwebkit.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxwebkit.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jfxwebkit.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jfxwebkit.dll")) returned 0
	[0184.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jli.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jli.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.418] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=142760) returned 1
	[0184.418] CloseHandle (hObject=0x144) returned 1
	[0184.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jli.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jli.dll")) returned 0x20
	[0184.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jli.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jli.dll")) returned 0x20
	[0184.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jli.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jli.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jli.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jli.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2iexp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2iexp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.420] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=201640) returned 1
	[0184.420] CloseHandle (hObject=0x144) returned 1
	[0184.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2iexp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2iexp.dll")) returned 0x20
	[0184.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2iexp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2iexp.dll")) returned 0x20
	[0184.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2iexp.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2iexp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2iexp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2iexp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.420] SetEvent (hEvent=0xfc) returned 1
	[0184.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2launcher.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2launcher.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.421] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=52648) returned 1
	[0184.421] CloseHandle (hObject=0x144) returned 1
	[0184.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2launcher.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2launcher.exe")) returned 0x20
	[0184.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2launcher.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2launcher.exe")) returned 0x20
	[0184.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2launcher.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2launcher.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2launcher.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2native.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2native.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.422] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16808) returned 1
	[0184.422] CloseHandle (hObject=0x144) returned 1
	[0184.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2native.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2native.dll")) returned 0x20
	[0184.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2native.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2native.dll")) returned 0x20
	[0184.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2native.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2native.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2native.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2native.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2ssv.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2ssv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.423] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=171944) returned 1
	[0184.423] CloseHandle (hObject=0x144) returned 1
	[0184.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2ssv.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2ssv.dll")) returned 0x20
	[0184.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2ssv.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2ssv.dll")) returned 0x20
	[0184.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2ssv.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2ssv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2ssv.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jp2ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpeg.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpeg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.428] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=145832) returned 1
	[0184.428] CloseHandle (hObject=0x144) returned 1
	[0184.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpeg.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpeg.dll")) returned 0x20
	[0184.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpeg.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpeg.dll")) returned 0x20
	[0184.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpeg.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpeg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpeg.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.428] SetEvent (hEvent=0xfc) returned 1
	[0184.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpicom.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpicom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.429] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=93608) returned 1
	[0184.429] CloseHandle (hObject=0x144) returned 1
	[0184.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpicom.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpicom.dll")) returned 0x20
	[0184.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpicom.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpicom.dll")) returned 0x20
	[0184.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpicom.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpicom.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpicom.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpicom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpiexp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpiexp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.669] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=156072) returned 1
	[0184.669] CloseHandle (hObject=0x144) returned 1
	[0184.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpiexp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpiexp.dll")) returned 0x20
	[0184.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpiexp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpiexp.dll")) returned 0x20
	[0184.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpiexp.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpiexp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpiexp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpiexp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.670] SetEvent (hEvent=0xfc) returned 1
	[0184.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpishare.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpishare.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.933] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=141736) returned 1
	[0184.933] CloseHandle (hObject=0x20c) returned 1
	[0184.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpishare.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpishare.dll")) returned 0x20
	[0184.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpishare.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpishare.dll")) returned 0x20
	[0184.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpishare.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpishare.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpishare.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpishare.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\msvcr100.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.934] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=773968) returned 1
	[0184.934] CloseHandle (hObject=0x20c) returned 1
	[0184.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\msvcr100.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\msvcr100.dll")) returned 0x20
	[0184.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\msvcr100.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\msvcr100.dll")) returned 0x20
	[0184.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\msvcr100.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\msvcr100.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\msvcr100.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\net.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\net.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.935] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75688) returned 1
	[0184.935] CloseHandle (hObject=0x20c) returned 1
	[0184.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\net.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\net.dll")) returned 0x20
	[0184.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\net.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\net.dll")) returned 0x20
	[0184.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\net.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\net.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\net.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\net.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\nio.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\nio.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.936] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=50088) returned 1
	[0184.936] CloseHandle (hObject=0x20c) returned 1
	[0184.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\nio.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\nio.dll")) returned 0x20
	[0184.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\nio.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\nio.dll")) returned 0x20
	[0184.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\nio.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\nio.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\nio.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\nio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npjpi170_45.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npjpi170_45.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.938] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=223144) returned 1
	[0184.938] CloseHandle (hObject=0x20c) returned 1
	[0184.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npjpi170_45.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npjpi170_45.dll")) returned 0x20
	[0184.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npjpi170_45.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npjpi170_45.dll")) returned 0x20
	[0184.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npjpi170_45.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npjpi170_45.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npjpi170_45.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npjpi170_45.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npoji610.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npoji610.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.939] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=220584) returned 1
	[0184.939] CloseHandle (hObject=0x20c) returned 1
	[0184.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npoji610.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npoji610.dll")) returned 0x20
	[0184.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npoji610.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npoji610.dll")) returned 0x20
	[0184.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npoji610.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npoji610.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npoji610.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npoji610.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.940] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17832) returned 1
	[0184.940] CloseHandle (hObject=0x20c) returned 1
	[0184.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npt.dll")) returned 0x20
	[0184.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npt.dll")) returned 0x20
	[0184.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npt.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\npt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\npt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\orbd.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\orbd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.941] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15784) returned 1
	[0184.941] CloseHandle (hObject=0x20c) returned 1
	[0184.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\orbd.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\orbd.exe")) returned 0x20
	[0184.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\orbd.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\orbd.exe")) returned 0x20
	[0184.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\orbd.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\orbd.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\orbd.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\pack200.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\pack200.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.942] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15784) returned 1
	[0184.942] CloseHandle (hObject=0x20c) returned 1
	[0184.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\pack200.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\pack200.exe")) returned 0x20
	[0184.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\pack200.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\pack200.exe")) returned 0x20
	[0184.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\pack200.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\pack200.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\pack200.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.943] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=773968) returned 1
	[0184.943] CloseHandle (hObject=0x20c) returned 1
	[0184.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\msvcr100.dll")) returned 0x20
	[0184.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\msvcr100.dll")) returned 0x20
	[0184.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\msvcr100.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\msvcr100.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.944] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=163752) returned 1
	[0184.944] CloseHandle (hObject=0x20c) returned 1
	[0184.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\npjp2.dll")) returned 0x20
	[0184.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\npjp2.dll")) returned 0x20
	[0184.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\npjp2.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\npjp2.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\policytool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\policytool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.946] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15784) returned 1
	[0184.946] CloseHandle (hObject=0x20c) returned 1
	[0184.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\policytool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\policytool.exe")) returned 0x20
	[0184.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\policytool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\policytool.exe")) returned 0x20
	[0184.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\policytool.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\policytool.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\policytool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\prism-d3d.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\prism-d3d.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.947] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45992) returned 1
	[0184.948] CloseHandle (hObject=0x20c) returned 1
	[0184.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\prism-d3d.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\prism-d3d.dll")) returned 0x20
	[0184.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\prism-d3d.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\prism-d3d.dll")) returned 0x20
	[0184.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\prism-d3d.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\prism-d3d.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\prism-d3d.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\prism-d3d.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\rmid.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\rmid.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.949] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15784) returned 1
	[0184.949] CloseHandle (hObject=0x20c) returned 1
	[0184.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\rmid.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\rmid.exe")) returned 0x20
	[0184.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\rmid.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\rmid.exe")) returned 0x20
	[0184.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\rmid.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\rmid.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\rmid.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\rmiregistry.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\rmiregistry.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.950] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15784) returned 1
	[0184.950] CloseHandle (hObject=0x20c) returned 1
	[0184.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\rmiregistry.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\rmiregistry.exe")) returned 0x20
	[0184.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\rmiregistry.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\rmiregistry.exe")) returned 0x20
	[0184.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\rmiregistry.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\rmiregistry.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\rmiregistry.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\servertool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\servertool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.955] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15784) returned 1
	[0184.955] CloseHandle (hObject=0x20c) returned 1
	[0184.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\servertool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\servertool.exe")) returned 0x20
	[0184.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\servertool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\servertool.exe")) returned 0x20
	[0184.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\servertool.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\servertool.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\servertool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\splashscreen.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\splashscreen.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.956] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=196520) returned 1
	[0184.956] CloseHandle (hObject=0x20c) returned 1
	[0184.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\splashscreen.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\splashscreen.dll")) returned 0x20
	[0184.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\splashscreen.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\splashscreen.dll")) returned 0x20
	[0184.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\splashscreen.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\splashscreen.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\splashscreen.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\splashscreen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ssv.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ssv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.957] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=462760) returned 1
	[0184.957] CloseHandle (hObject=0x20c) returned 1
	[0184.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ssv.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ssv.dll")) returned 0x20
	[0184.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ssv.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ssv.dll")) returned 0x20
	[0184.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ssv.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ssv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ssv.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ssvagent.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ssvagent.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.958] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49064) returned 1
	[0184.958] CloseHandle (hObject=0x20c) returned 1
	[0184.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ssvagent.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ssvagent.exe")) returned 0x20
	[0184.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ssvagent.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ssvagent.exe")) returned 0x20
	[0184.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ssvagent.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ssvagent.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ssvagent.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\sunec.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\sunec.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.963] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=123816) returned 1
	[0184.963] CloseHandle (hObject=0x20c) returned 1
	[0184.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\sunec.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\sunec.dll")) returned 0x20
	[0184.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\sunec.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\sunec.dll")) returned 0x20
	[0184.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\sunec.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\sunec.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\sunec.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\sunec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\sunmscapi.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\sunmscapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.964] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25512) returned 1
	[0184.964] CloseHandle (hObject=0x20c) returned 1
	[0184.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\sunmscapi.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\sunmscapi.dll")) returned 0x20
	[0184.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\sunmscapi.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\sunmscapi.dll")) returned 0x20
	[0184.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\sunmscapi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\sunmscapi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\sunmscapi.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\sunmscapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\t2k.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\t2k.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.965] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=192936) returned 1
	[0184.965] CloseHandle (hObject=0x20c) returned 1
	[0184.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\t2k.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\t2k.dll")) returned 0x20
	[0184.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\t2k.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\t2k.dll")) returned 0x20
	[0184.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\t2k.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\t2k.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\t2k.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\tnameserv.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\tnameserv.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.966] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16296) returned 1
	[0184.966] CloseHandle (hObject=0x20c) returned 1
	[0184.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\tnameserv.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\tnameserv.exe")) returned 0x20
	[0184.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\tnameserv.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\tnameserv.exe")) returned 0x20
	[0184.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\tnameserv.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\tnameserv.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\tnameserv.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\unpack.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\unpack.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.169] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58280) returned 1
	[0185.169] CloseHandle (hObject=0x210) returned 1
	[0185.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\unpack.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\unpack.dll")) returned 0x20
	[0185.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\unpack.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\unpack.dll")) returned 0x20
	[0185.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\unpack.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\unpack.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\unpack.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\unpack.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.169] SetEvent (hEvent=0xfc) returned 1
	[0185.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\gray.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0185.538] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=632) returned 1
	[0185.538] CloseHandle (hObject=0x168) returned 1
	[0185.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\gray.pf")) returned 0x20
	[0185.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\gray.pf")) returned 0x20
	[0185.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\GRAY.pf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\gray.pf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\meta-index" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0185.695] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=829) returned 1
	[0185.695] CloseHandle (hObject=0x20c) returned 1
	[0185.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\meta-index" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\meta-index")) returned 0x20
	[0185.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\meta-index" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\meta-index")) returned 0x20
	[0185.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\meta-index.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\meta-index.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\meta-index" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunec.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0185.697] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15941) returned 1
	[0185.697] CloseHandle (hObject=0x20c) returned 1
	[0185.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunec.jar")) returned 0x20
	[0185.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunec.jar")) returned 0x20
	[0185.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunec.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunec.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0185.698] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=198013) returned 1
	[0185.698] CloseHandle (hObject=0x20c) returned 1
	[0185.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunjce_provider.jar")) returned 0x20
	[0185.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunjce_provider.jar")) returned 0x20
	[0185.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunjce_provider.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.800] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30695) returned 1
	[0185.800] CloseHandle (hObject=0x210) returned 1
	[0185.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunmscapi.jar")) returned 0x20
	[0185.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunmscapi.jar")) returned 0x20
	[0185.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunmscapi.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.801] SetEvent (hEvent=0xfc) returned 1
	[0185.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.802] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=237526) returned 1
	[0185.802] CloseHandle (hObject=0x210) returned 1
	[0185.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunpkcs11.jar")) returned 0x20
	[0185.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunpkcs11.jar")) returned 0x20
	[0185.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunpkcs11.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.802] SetEvent (hEvent=0xfc) returned 1
	[0185.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.804] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=68762) returned 1
	[0185.804] CloseHandle (hObject=0x210) returned 1
	[0185.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\zipfs.jar")) returned 0x20
	[0185.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\zipfs.jar")) returned 0x20
	[0185.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\zipfs.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.804] SetEvent (hEvent=0xfc) returned 1
	[0185.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\flavormap.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\flavormap.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.805] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3928) returned 1
	[0185.805] CloseHandle (hObject=0x210) returned 1
	[0185.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\flavormap.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\flavormap.properties")) returned 0x20
	[0185.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\flavormap.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\flavormap.properties")) returned 0x20
	[0185.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\flavormap.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\flavormap.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\flavormap.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.bfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fontconfig.bfc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.808] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3670) returned 1
	[0185.808] CloseHandle (hObject=0x210) returned 1
	[0185.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.bfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fontconfig.bfc")) returned 0x20
	[0185.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.bfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fontconfig.bfc")) returned 0x20
	[0185.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.bfc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fontconfig.bfc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.bfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.properties.src" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fontconfig.properties.src"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.809] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10479) returned 1
	[0185.809] CloseHandle (hObject=0x210) returned 1
	[0185.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.properties.src" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fontconfig.properties.src")) returned 0x20
	[0185.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.properties.src" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fontconfig.properties.src")) returned 0x20
	[0185.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.properties.src.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fontconfig.properties.src.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fontconfig.properties.src" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0185.813] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75144) returned 1
	[0185.813] CloseHandle (hObject=0x20c) returned 1
	[0185.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20
	[0185.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20
	[0185.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightdemibold.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.814] SetEvent (hEvent=0xfc) returned 1
	[0185.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0185.815] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75124) returned 1
	[0185.815] CloseHandle (hObject=0x144) returned 1
	[0185.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20
	[0185.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20
	[0185.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightdemiitalic.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.816] SetEvent (hEvent=0xfc) returned 1
	[0185.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0185.817] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=80856) returned 1
	[0185.817] CloseHandle (hObject=0x144) returned 1
	[0185.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20
	[0185.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20
	[0185.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightitalic.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.817] SetEvent (hEvent=0xfc) returned 1
	[0185.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0185.818] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=344908) returned 1
	[0185.818] CloseHandle (hObject=0x144) returned 1
	[0185.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20
	[0185.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20
	[0185.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightregular.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.825] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=317896) returned 1
	[0185.825] CloseHandle (hObject=0x200) returned 1
	[0185.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20
	[0185.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20
	[0185.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidasansdemibold.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.826] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=698236) returned 1
	[0185.826] CloseHandle (hObject=0x200) returned 1
	[0185.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20
	[0185.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20
	[0185.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidasansregular.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.828] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=234068) returned 1
	[0185.828] CloseHandle (hObject=0x200) returned 1
	[0185.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20
	[0185.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20
	[0185.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidatypewriterbold.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.829] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=242700) returned 1
	[0185.829] CloseHandle (hObject=0x200) returned 1
	[0185.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20
	[0185.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20
	[0185.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidatypewriterregular.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.830] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=686) returned 1
	[0185.830] CloseHandle (hObject=0x200) returned 1
	[0185.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg")) returned 0x20
	[0185.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg")) returned 0x20
	[0185.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\jvm.cfg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\i386\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0185.833] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1280) returned 1
	[0185.833] CloseHandle (hObject=0x20c) returned 1
	[0185.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\cursors.properties")) returned 0x20
	[0185.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\cursors.properties")) returned 0x20
	[0185.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\cursors.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\cursors.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0185.834] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=153) returned 1
	[0185.834] CloseHandle (hObject=0x20c) returned 1
	[0185.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20
	[0185.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20
	[0185.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0185.835] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=165) returned 1
	[0185.835] CloseHandle (hObject=0x20c) returned 1
	[0185.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20
	[0185.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20
	[0185.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0185.837] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=153) returned 1
	[0185.837] CloseHandle (hObject=0x20c) returned 1
	[0185.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20
	[0185.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20
	[0185.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0185.839] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=168) returned 1
	[0185.839] CloseHandle (hObject=0x20c) returned 1
	[0185.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20
	[0185.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20
	[0185.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0185.841] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=153) returned 1
	[0185.841] CloseHandle (hObject=0x20c) returned 1
	[0185.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20
	[0185.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20
	[0185.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0185.842] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=147) returned 1
	[0185.842] CloseHandle (hObject=0x20c) returned 1
	[0185.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20
	[0185.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20
	[0185.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0185.994] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=153) returned 1
	[0185.994] CloseHandle (hObject=0x1b8) returned 1
	[0185.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20
	[0185.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20
	[0185.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.995] SetEvent (hEvent=0xfc) returned 1
	[0185.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javaws.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0185.996] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=892183) returned 1
	[0185.996] CloseHandle (hObject=0x1b8) returned 1
	[0185.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javaws.jar")) returned 0x20
	[0185.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javaws.jar")) returned 0x20
	[0185.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javaws.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\javaws.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.996] SetEvent (hEvent=0xfc) returned 1
	[0185.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jce.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0185.997] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=109196) returned 1
	[0185.997] CloseHandle (hObject=0x1b8) returned 1
	[0185.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jce.jar")) returned 0x20
	[0185.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jce.jar")) returned 0x20
	[0185.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jce.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jce.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\default.jfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\default.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0185.998] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18574) returned 1
	[0185.998] CloseHandle (hObject=0x1b8) returned 1
	[0185.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\default.jfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\default.jfc")) returned 0x20
	[0185.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\default.jfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\default.jfc")) returned 0x20
	[0185.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\default.jfc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\default.jfc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\default.jfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0186.000] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18531) returned 1
	[0186.000] CloseHandle (hObject=0x1b8) returned 1
	[0186.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\profile.jfc")) returned 0x20
	[0186.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\profile.jfc")) returned 0x20
	[0186.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\profile.jfc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\profile.jfc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.000] SetEvent (hEvent=0xfc) returned 1
	[0186.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0186.001] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=532559) returned 1
	[0186.001] CloseHandle (hObject=0x1b8) returned 1
	[0186.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr.jar")) returned 0x20
	[0186.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr.jar")) returned 0x20
	[0186.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0186.004] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13526060) returned 1
	[0186.004] CloseHandle (hObject=0x1b8) returned 1
	[0186.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar")) returned 0x20
	[0186.004] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0186.004] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jfxrt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jfxrt.jar")) returned 0
	[0186.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jsse.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0186.005] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=526795) returned 1
	[0186.005] CloseHandle (hObject=0x1b8) returned 1
	[0186.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jsse.jar")) returned 0x20
	[0186.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jsse.jar")) returned 0x20
	[0186.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jsse.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jsse.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.216] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4226) returned 1
	[0186.216] CloseHandle (hObject=0x200) returned 1
	[0186.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt")) returned 0x20
	[0186.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt")) returned 0x20
	[0186.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.216] SetEvent (hEvent=0xfc) returned 1
	[0186.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\tzmappings" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\tzmappings"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.217] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8138) returned 1
	[0186.217] CloseHandle (hObject=0x200) returned 1
	[0186.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\tzmappings" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\tzmappings")) returned 0x20
	[0186.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\tzmappings" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\tzmappings")) returned 0x20
	[0186.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\tzmappings.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\tzmappings.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\tzmappings" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\abidjan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.222] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0186.222] CloseHandle (hObject=0x200) returned 1
	[0186.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\abidjan")) returned 0x20
	[0186.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\abidjan")) returned 0x20
	[0186.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Abidjan.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\abidjan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Abidjan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\abidjan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Accra" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\accra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.223] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=181) returned 1
	[0186.223] CloseHandle (hObject=0x200) returned 1
	[0186.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Accra" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\accra")) returned 0x20
	[0186.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Accra" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\accra")) returned 0x20
	[0186.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Accra.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\accra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Accra" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\accra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\addis_ababa"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.225] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0186.225] CloseHandle (hObject=0x200) returned 1
	[0186.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\addis_ababa")) returned 0x20
	[0186.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\addis_ababa")) returned 0x20
	[0186.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\addis_ababa.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Addis_Ababa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\addis_ababa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Algiers" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\algiers"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.226] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=333) returned 1
	[0186.226] CloseHandle (hObject=0x200) returned 1
	[0186.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Algiers" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\algiers")) returned 0x20
	[0186.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Algiers" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\algiers")) returned 0x20
	[0186.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Algiers.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\algiers.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Algiers" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\algiers"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Asmara" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\asmara"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0186.228] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0186.228] CloseHandle (hObject=0x20c) returned 1
	[0186.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Asmara" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\asmara")) returned 0x20
	[0186.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Asmara" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\asmara")) returned 0x20
	[0186.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Asmara.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\asmara.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Asmara" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\asmara"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bamako" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bamako"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0186.230] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=85) returned 1
	[0186.230] CloseHandle (hObject=0x20c) returned 1
	[0186.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bamako" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bamako")) returned 0x20
	[0186.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bamako" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bamako")) returned 0x20
	[0186.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bamako.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bamako.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bamako" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bamako"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bangui" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bangui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0186.231] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0186.231] CloseHandle (hObject=0x20c) returned 1
	[0186.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bangui" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bangui")) returned 0x20
	[0186.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bangui" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bangui")) returned 0x20
	[0186.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bangui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bangui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bangui" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bangui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Banjul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\banjul"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.232] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77) returned 1
	[0186.232] CloseHandle (hObject=0x200) returned 1
	[0186.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Banjul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\banjul")) returned 0x20
	[0186.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Banjul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\banjul")) returned 0x20
	[0186.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Banjul.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\banjul.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Banjul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\banjul"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bissau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bissau"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.233] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77) returned 1
	[0186.233] CloseHandle (hObject=0x200) returned 1
	[0186.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bissau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bissau")) returned 0x20
	[0186.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bissau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bissau")) returned 0x20
	[0186.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bissau.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bissau.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bissau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bissau"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\blantyre"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.235] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0186.235] CloseHandle (hObject=0x200) returned 1
	[0186.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\blantyre")) returned 0x20
	[0186.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\blantyre")) returned 0x20
	[0186.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Blantyre.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\blantyre.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Blantyre" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\blantyre"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\brazzaville"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.236] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0186.236] CloseHandle (hObject=0x200) returned 1
	[0186.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\brazzaville")) returned 0x20
	[0186.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\brazzaville")) returned 0x20
	[0186.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\brazzaville.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Brazzaville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\brazzaville"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bujumbura"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.238] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27) returned 1
	[0186.238] CloseHandle (hObject=0x200) returned 1
	[0186.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bujumbura")) returned 0x20
	[0186.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bujumbura")) returned 0x20
	[0186.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bujumbura.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Bujumbura" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\bujumbura"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Cairo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\cairo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.239] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1049) returned 1
	[0186.239] CloseHandle (hObject=0x200) returned 1
	[0186.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Cairo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\cairo")) returned 0x20
	[0186.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Cairo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\cairo")) returned 0x20
	[0186.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Cairo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\cairo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Cairo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\cairo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\casablanca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.374] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=848) returned 1
	[0186.374] CloseHandle (hObject=0x230) returned 1
	[0186.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\casablanca")) returned 0x20
	[0186.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\casablanca")) returned 0x20
	[0186.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Casablanca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\casablanca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Casablanca" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\casablanca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.374] SetEvent (hEvent=0xfc) returned 1
	[0186.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Conakry" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\conakry"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.507] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=85) returned 1
	[0186.507] CloseHandle (hObject=0x240) returned 1
	[0186.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Conakry" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\conakry")) returned 0x20
	[0186.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Conakry" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\conakry")) returned 0x20
	[0186.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Conakry.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\conakry.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Conakry" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\conakry"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.507] SetEvent (hEvent=0xfc) returned 1
	[0186.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\mbabane"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.508] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0186.508] CloseHandle (hObject=0x240) returned 1
	[0186.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\mbabane")) returned 0x20
	[0186.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\mbabane")) returned 0x20
	[0186.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mbabane.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\mbabane.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mbabane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\mbabane"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\mogadishu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.509] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=73) returned 1
	[0186.509] CloseHandle (hObject=0x240) returned 1
	[0186.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\mogadishu")) returned 0x20
	[0186.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\mogadishu")) returned 0x20
	[0186.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\mogadishu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Mogadishu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\mogadishu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\monrovia"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.511] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77) returned 1
	[0186.511] CloseHandle (hObject=0x240) returned 1
	[0186.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\monrovia")) returned 0x20
	[0186.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\monrovia")) returned 0x20
	[0186.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Monrovia.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\monrovia.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Monrovia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\monrovia"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.512] SetEvent (hEvent=0xfc) returned 1
	[0186.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\nairobi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.512] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97) returned 1
	[0186.512] CloseHandle (hObject=0x240) returned 1
	[0186.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\nairobi")) returned 0x20
	[0186.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\nairobi")) returned 0x20
	[0186.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nairobi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\nairobi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nairobi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\nairobi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ndjamena"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0186.726] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=89) returned 1
	[0186.726] CloseHandle (hObject=0x1b8) returned 1
	[0186.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ndjamena")) returned 0x20
	[0186.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ndjamena")) returned 0x20
	[0186.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ndjamena.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ndjamena" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ndjamena"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.726] SetEvent (hEvent=0xfc) returned 1
	[0186.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\ushuaia"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.885] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=549) returned 1
	[0186.885] CloseHandle (hObject=0x200) returned 1
	[0186.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\ushuaia")) returned 0x20
	[0186.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\ushuaia")) returned 0x20
	[0186.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\ushuaia.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Ushuaia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\ushuaia"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Curacao" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\curacao"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.012] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77) returned 1
	[0187.012] CloseHandle (hObject=0x1f4) returned 1
	[0187.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Curacao" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\curacao")) returned 0x20
	[0187.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Curacao" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\curacao")) returned 0x20
	[0187.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Curacao.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\curacao.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Curacao" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\curacao"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Detroit" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\detroit"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.013] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1200) returned 1
	[0187.013] CloseHandle (hObject=0x1f4) returned 1
	[0187.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Detroit" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\detroit")) returned 0x20
	[0187.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Detroit" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\detroit")) returned 0x20
	[0187.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Detroit.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\detroit.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Detroit" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\detroit"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dominica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dominica"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.015] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0187.015] CloseHandle (hObject=0x1f4) returned 1
	[0187.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dominica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dominica")) returned 0x20
	[0187.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dominica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dominica")) returned 0x20
	[0187.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dominica.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dominica.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dominica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dominica"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Edmonton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\edmonton"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.016] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1316) returned 1
	[0187.016] CloseHandle (hObject=0x1f4) returned 1
	[0187.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Edmonton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\edmonton")) returned 0x20
	[0187.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Edmonton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\edmonton")) returned 0x20
	[0187.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Edmonton.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\edmonton.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Edmonton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\edmonton"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Eirunepe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\eirunepe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.018] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=321) returned 1
	[0187.018] CloseHandle (hObject=0x1f4) returned 1
	[0187.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Eirunepe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\eirunepe")) returned 0x20
	[0187.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Eirunepe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\eirunepe")) returned 0x20
	[0187.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Eirunepe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\eirunepe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Eirunepe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\eirunepe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\El_Salvador" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\el_salvador"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.019] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=105) returned 1
	[0187.019] CloseHandle (hObject=0x1f4) returned 1
	[0187.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\El_Salvador" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\el_salvador")) returned 0x20
	[0187.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\El_Salvador" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\el_salvador")) returned 0x20
	[0187.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\El_Salvador.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\el_salvador.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\El_Salvador" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\el_salvador"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Fortaleza" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\fortaleza"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.021] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=377) returned 1
	[0187.021] CloseHandle (hObject=0x1f4) returned 1
	[0187.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Fortaleza" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\fortaleza")) returned 0x20
	[0187.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Fortaleza" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\fortaleza")) returned 0x20
	[0187.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Fortaleza.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\fortaleza.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Fortaleza" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\fortaleza"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\glace_bay"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.022] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1204) returned 1
	[0187.022] CloseHandle (hObject=0x1f4) returned 1
	[0187.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\glace_bay")) returned 0x20
	[0187.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\glace_bay")) returned 0x20
	[0187.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Glace_Bay.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\glace_bay.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Glace_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\glace_bay"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Godthab" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\godthab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.023] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1036) returned 1
	[0187.023] CloseHandle (hObject=0x1f4) returned 1
	[0187.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Godthab" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\godthab")) returned 0x20
	[0187.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Godthab" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\godthab")) returned 0x20
	[0187.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Godthab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\godthab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Godthab" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\godthab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\goose_bay"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.024] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1728) returned 1
	[0187.024] CloseHandle (hObject=0x1f4) returned 1
	[0187.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\goose_bay")) returned 0x20
	[0187.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\goose_bay")) returned 0x20
	[0187.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Goose_Bay.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\goose_bay.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Goose_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\goose_bay"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\grand_turk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.026] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1044) returned 1
	[0187.026] CloseHandle (hObject=0x1f4) returned 1
	[0187.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\grand_turk")) returned 0x20
	[0187.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\grand_turk")) returned 0x20
	[0187.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Grand_Turk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\grand_turk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Grand_Turk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\grand_turk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Grenada" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\grenada"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.027] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0187.027] CloseHandle (hObject=0x1f4) returned 1
	[0187.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Grenada" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\grenada")) returned 0x20
	[0187.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Grenada" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\grenada")) returned 0x20
	[0187.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Grenada.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\grenada.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Grenada" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\grenada"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guadeloupe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.029] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0187.029] CloseHandle (hObject=0x1f4) returned 1
	[0187.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guadeloupe")) returned 0x20
	[0187.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guadeloupe")) returned 0x20
	[0187.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guadeloupe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guadeloupe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guadeloupe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guadeloupe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guatemala" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guatemala"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.030] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=137) returned 1
	[0187.030] CloseHandle (hObject=0x1f4) returned 1
	[0187.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guatemala" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guatemala")) returned 0x20
	[0187.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guatemala" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guatemala")) returned 0x20
	[0187.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guatemala.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guatemala.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guatemala" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guatemala"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guayaquil" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guayaquil"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.031] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0187.031] CloseHandle (hObject=0x1f4) returned 1
	[0187.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guayaquil" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guayaquil")) returned 0x20
	[0187.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guayaquil" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guayaquil")) returned 0x20
	[0187.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guayaquil.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guayaquil.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guayaquil" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guayaquil"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guyana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guyana"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.032] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=89) returned 1
	[0187.033] CloseHandle (hObject=0x1f4) returned 1
	[0187.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guyana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guyana")) returned 0x20
	[0187.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guyana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guyana")) returned 0x20
	[0187.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guyana.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guyana.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Guyana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\guyana"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Halifax" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\halifax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.168] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1908) returned 1
	[0187.172] CloseHandle (hObject=0x1b8) returned 1
	[0187.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Halifax" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\halifax")) returned 0x20
	[0187.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Halifax" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\halifax")) returned 0x20
	[0187.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Halifax.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\halifax.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Halifax" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\halifax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Maceio" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\maceio"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.377] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=393) returned 1
	[0187.377] CloseHandle (hObject=0x238) returned 1
	[0187.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Maceio" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\maceio")) returned 0x20
	[0187.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Maceio" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\maceio")) returned 0x20
	[0187.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Maceio.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\maceio.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Maceio" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\maceio"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montserrat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montserrat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.379] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0187.379] CloseHandle (hObject=0x238) returned 1
	[0187.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montserrat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montserrat")) returned 0x20
	[0187.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montserrat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montserrat")) returned 0x20
	[0187.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montserrat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montserrat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montserrat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montserrat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nassau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nassau"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.380] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1284) returned 1
	[0187.380] CloseHandle (hObject=0x238) returned 1
	[0187.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nassau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nassau")) returned 0x20
	[0187.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nassau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nassau")) returned 0x20
	[0187.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nassau.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nassau.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nassau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nassau"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\New_York" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\new_york"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.382] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1960) returned 1
	[0187.382] CloseHandle (hObject=0x238) returned 1
	[0187.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\New_York" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\new_york")) returned 0x20
	[0187.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\New_York" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\new_york")) returned 0x20
	[0187.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\New_York.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\new_york.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\New_York" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\new_york"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nipigon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nipigon"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.384] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1144) returned 1
	[0187.384] CloseHandle (hObject=0x238) returned 1
	[0187.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nipigon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nipigon")) returned 0x20
	[0187.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nipigon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nipigon")) returned 0x20
	[0187.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nipigon.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nipigon.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nipigon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nipigon"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nome"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.385] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1228) returned 1
	[0187.385] CloseHandle (hObject=0x238) returned 1
	[0187.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nome")) returned 0x20
	[0187.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nome")) returned 0x20
	[0187.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nome.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nome.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Nome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\nome"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Noronha" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\noronha"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.387] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=377) returned 1
	[0187.387] CloseHandle (hObject=0x238) returned 1
	[0187.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Noronha" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\noronha")) returned 0x20
	[0187.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Noronha" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\noronha")) returned 0x20
	[0187.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Noronha.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\noronha.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Noronha" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\noronha"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\beulah"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.389] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1276) returned 1
	[0187.389] CloseHandle (hObject=0x238) returned 1
	[0187.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\beulah")) returned 0x20
	[0187.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\beulah")) returned 0x20
	[0187.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\beulah.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Beulah" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\beulah"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\center"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.390] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1276) returned 1
	[0187.390] CloseHandle (hObject=0x238) returned 1
	[0187.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\center")) returned 0x20
	[0187.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\center")) returned 0x20
	[0187.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\center.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\Center" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\center"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\new_salem"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.392] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1276) returned 1
	[0187.392] CloseHandle (hObject=0x238) returned 1
	[0187.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\new_salem")) returned 0x20
	[0187.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\new_salem")) returned 0x20
	[0187.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\new_salem.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\New_Salem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\north_dakota\\new_salem"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Ojinaga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\ojinaga"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.393] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=816) returned 1
	[0187.394] CloseHandle (hObject=0x238) returned 1
	[0187.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Ojinaga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\ojinaga")) returned 0x20
	[0187.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Ojinaga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\ojinaga")) returned 0x20
	[0187.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Ojinaga.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\ojinaga.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Ojinaga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\ojinaga"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Panama" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\panama"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.395] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0187.395] CloseHandle (hObject=0x238) returned 1
	[0187.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Panama" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\panama")) returned 0x20
	[0187.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Panama" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\panama")) returned 0x20
	[0187.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Panama.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\panama.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Panama" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\panama"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\pangnirtung"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.396] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1076) returned 1
	[0187.396] CloseHandle (hObject=0x238) returned 1
	[0187.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\pangnirtung")) returned 0x20
	[0187.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\pangnirtung")) returned 0x20
	[0187.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Pangnirtung.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\pangnirtung.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Pangnirtung" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\pangnirtung"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Paramaribo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\paramaribo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.397] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=101) returned 1
	[0187.397] CloseHandle (hObject=0x238) returned 1
	[0187.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Paramaribo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\paramaribo")) returned 0x20
	[0187.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Paramaribo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\paramaribo")) returned 0x20
	[0187.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Paramaribo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\paramaribo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Paramaribo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\paramaribo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Phoenix" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\phoenix"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.399] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=141) returned 1
	[0187.399] CloseHandle (hObject=0x238) returned 1
	[0187.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Phoenix" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\phoenix")) returned 0x20
	[0187.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Phoenix" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\phoenix")) returned 0x20
	[0187.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Phoenix.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\phoenix.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Phoenix" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\phoenix"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\port-au-prince"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.400] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=788) returned 1
	[0187.400] CloseHandle (hObject=0x238) returned 1
	[0187.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\port-au-prince")) returned 0x20
	[0187.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\port-au-prince")) returned 0x20
	[0187.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\port-au-prince.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Port-au-Prince" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\port-au-prince"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\porto_velho"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.402] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=297) returned 1
	[0187.402] CloseHandle (hObject=0x238) returned 1
	[0187.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\porto_velho")) returned 0x20
	[0187.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\porto_velho")) returned 0x20
	[0187.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Porto_Velho.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\porto_velho.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Porto_Velho" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\porto_velho"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\port_of_spain"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.404] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0187.404] CloseHandle (hObject=0x238) returned 1
	[0187.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\port_of_spain")) returned 0x20
	[0187.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\port_of_spain")) returned 0x20
	[0187.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\port_of_spain.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Port_of_Spain" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\port_of_spain"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\puerto_rico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.406] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77) returned 1
	[0187.406] CloseHandle (hObject=0x238) returned 1
	[0187.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\puerto_rico")) returned 0x20
	[0187.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\puerto_rico")) returned 0x20
	[0187.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\puerto_rico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Puerto_Rico" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\puerto_rico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rainy_River" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rainy_river"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.407] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1144) returned 1
	[0187.407] CloseHandle (hObject=0x238) returned 1
	[0187.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rainy_River" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rainy_river")) returned 0x20
	[0187.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rainy_River" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rainy_river")) returned 0x20
	[0187.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rainy_River.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rainy_river.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rainy_River" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rainy_river"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rankin_inlet"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.409] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1052) returned 1
	[0187.409] CloseHandle (hObject=0x238) returned 1
	[0187.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rankin_inlet")) returned 0x20
	[0187.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rankin_inlet")) returned 0x20
	[0187.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rankin_inlet.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rankin_Inlet" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rankin_inlet"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Recife" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\recife"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.410] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=377) returned 1
	[0187.410] CloseHandle (hObject=0x238) returned 1
	[0187.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Recife" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\recife")) returned 0x20
	[0187.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Recife" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\recife")) returned 0x20
	[0187.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Recife.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\recife.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Recife" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\recife"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Regina" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\regina"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.412] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=481) returned 1
	[0187.412] CloseHandle (hObject=0x238) returned 1
	[0187.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Regina" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\regina")) returned 0x20
	[0187.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Regina" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\regina")) returned 0x20
	[0187.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Regina.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\regina.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Regina" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\regina"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Resolute" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\resolute"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.556] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1052) returned 1
	[0187.556] CloseHandle (hObject=0x238) returned 1
	[0187.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Resolute" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\resolute")) returned 0x20
	[0187.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Resolute" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\resolute")) returned 0x20
	[0187.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Resolute.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\resolute.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Resolute" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\resolute"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Sitka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\sitka"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.558] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1224) returned 1
	[0187.558] CloseHandle (hObject=0x238) returned 1
	[0187.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Sitka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\sitka")) returned 0x20
	[0187.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Sitka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\sitka")) returned 0x20
	[0187.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Sitka.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\sitka.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Sitka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\sitka"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Johns" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_johns"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.559] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2000) returned 1
	[0187.559] CloseHandle (hObject=0x238) returned 1
	[0187.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Johns" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_johns")) returned 0x20
	[0187.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Johns" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_johns")) returned 0x20
	[0187.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Johns.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_johns.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Johns" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_johns"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Kitts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_kitts"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.560] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0187.560] CloseHandle (hObject=0x238) returned 1
	[0187.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Kitts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_kitts")) returned 0x20
	[0187.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Kitts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_kitts")) returned 0x20
	[0187.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Kitts.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_kitts.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Kitts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_kitts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Lucia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_lucia"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.562] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0187.562] CloseHandle (hObject=0x238) returned 1
	[0187.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Lucia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_lucia")) returned 0x20
	[0187.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Lucia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_lucia")) returned 0x20
	[0187.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Lucia.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_lucia.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Lucia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_lucia"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Thomas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_thomas"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.564] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0187.564] CloseHandle (hObject=0x238) returned 1
	[0187.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Thomas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_thomas")) returned 0x20
	[0187.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Thomas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_thomas")) returned 0x20
	[0187.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Thomas.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_thomas.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Thomas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_thomas"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Vincent" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_vincent"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.565] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0187.565] CloseHandle (hObject=0x238) returned 1
	[0187.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Vincent" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_vincent")) returned 0x20
	[0187.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Vincent" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_vincent")) returned 0x20
	[0187.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Vincent.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_vincent.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\St_Vincent" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\st_vincent"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Swift_Current" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\swift_current"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.570] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=241) returned 1
	[0187.570] CloseHandle (hObject=0x238) returned 1
	[0187.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Swift_Current" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\swift_current")) returned 0x20
	[0187.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Swift_Current" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\swift_current")) returned 0x20
	[0187.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Swift_Current.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\swift_current.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Swift_Current" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\swift_current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tegucigalpa"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.571] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=121) returned 1
	[0187.571] CloseHandle (hObject=0x238) returned 1
	[0187.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tegucigalpa")) returned 0x20
	[0187.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tegucigalpa")) returned 0x20
	[0187.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tegucigalpa.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tegucigalpa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tegucigalpa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Thule" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\thule"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.576] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=852) returned 1
	[0187.576] CloseHandle (hObject=0x238) returned 1
	[0187.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Thule" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\thule")) returned 0x20
	[0187.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Thule" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\thule")) returned 0x20
	[0187.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Thule.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\thule.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Thule" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\thule"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\thunder_bay"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.578] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1188) returned 1
	[0187.578] CloseHandle (hObject=0x238) returned 1
	[0187.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\thunder_bay")) returned 0x20
	[0187.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\thunder_bay")) returned 0x20
	[0187.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\thunder_bay.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Thunder_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\thunder_bay"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tijuana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tijuana"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.579] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1276) returned 1
	[0187.579] CloseHandle (hObject=0x238) returned 1
	[0187.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tijuana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tijuana")) returned 0x20
	[0187.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tijuana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tijuana")) returned 0x20
	[0187.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tijuana.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tijuana.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tijuana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tijuana"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Toronto" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\toronto"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.581] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1928) returned 1
	[0187.581] CloseHandle (hObject=0x238) returned 1
	[0187.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Toronto" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\toronto")) returned 0x20
	[0187.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Toronto" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\toronto")) returned 0x20
	[0187.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Toronto.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\toronto.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Toronto" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\toronto"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tortola" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tortola"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.582] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0187.582] CloseHandle (hObject=0x238) returned 1
	[0187.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tortola" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tortola")) returned 0x20
	[0187.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tortola" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tortola")) returned 0x20
	[0187.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tortola.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tortola.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Tortola" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\tortola"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Vancouver" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\vancouver"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.584] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1592) returned 1
	[0187.584] CloseHandle (hObject=0x238) returned 1
	[0187.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Vancouver" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\vancouver")) returned 0x20
	[0187.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Vancouver" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\vancouver")) returned 0x20
	[0187.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Vancouver.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\vancouver.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Vancouver" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\vancouver"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Whitehorse" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\whitehorse"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.592] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1108) returned 1
	[0187.592] CloseHandle (hObject=0x238) returned 1
	[0187.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Whitehorse" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\whitehorse")) returned 0x20
	[0187.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Whitehorse" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\whitehorse")) returned 0x20
	[0187.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Whitehorse.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\whitehorse.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Whitehorse" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\whitehorse"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Winnipeg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\winnipeg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.594] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1560) returned 1
	[0187.594] CloseHandle (hObject=0x238) returned 1
	[0187.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Winnipeg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\winnipeg")) returned 0x20
	[0187.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Winnipeg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\winnipeg")) returned 0x20
	[0187.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Winnipeg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\winnipeg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Winnipeg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\winnipeg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Yakutat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\yakutat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.595] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1220) returned 1
	[0187.595] CloseHandle (hObject=0x238) returned 1
	[0187.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Yakutat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\yakutat")) returned 0x20
	[0187.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Yakutat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\yakutat")) returned 0x20
	[0187.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Yakutat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\yakutat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Yakutat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\yakutat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Yellowknife" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\yellowknife"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.597] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1068) returned 1
	[0187.732] CloseHandle (hObject=0x238) returned 1
	[0187.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Yellowknife" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\yellowknife")) returned 0x20
	[0187.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Yellowknife" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\yellowknife")) returned 0x20
	[0187.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Yellowknife.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\yellowknife.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Yellowknife" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\yellowknife"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.732] SetEvent (hEvent=0xfc) returned 1
	[0187.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\davis"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0187.847] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=117) returned 1
	[0187.847] CloseHandle (hObject=0x200) returned 1
	[0187.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\davis")) returned 0x20
	[0187.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\davis")) returned 0x20
	[0187.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Davis.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\davis.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Davis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\davis"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.848] SetEvent (hEvent=0xfc) returned 1
	[0187.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aqtau"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.037] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=453) returned 1
	[0188.037] CloseHandle (hObject=0x1fc) returned 1
	[0188.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aqtau")) returned 0x20
	[0188.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aqtau")) returned 0x20
	[0188.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aqtau.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aqtau.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aqtau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aqtau"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.038] SetEvent (hEvent=0xfc) returned 1
	[0188.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ashgabat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.039] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=269) returned 1
	[0188.039] CloseHandle (hObject=0x1fc) returned 1
	[0188.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ashgabat")) returned 0x20
	[0188.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ashgabat")) returned 0x20
	[0188.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ashgabat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ashgabat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ashgabat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baghdad"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.042] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=489) returned 1
	[0188.042] CloseHandle (hObject=0x1fc) returned 1
	[0188.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baghdad")) returned 0x20
	[0188.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baghdad")) returned 0x20
	[0188.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baghdad.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baghdad.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baghdad" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baghdad"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.042] SetEvent (hEvent=0xfc) returned 1
	[0188.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bahrain"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.043] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77) returned 1
	[0188.043] CloseHandle (hObject=0x1fc) returned 1
	[0188.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bahrain")) returned 0x20
	[0188.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bahrain")) returned 0x20
	[0188.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bahrain.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bahrain.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bahrain" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bahrain"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baku" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baku"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.044] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=976) returned 1
	[0188.044] CloseHandle (hObject=0x1fc) returned 1
	[0188.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baku" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baku")) returned 0x20
	[0188.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baku" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baku")) returned 0x20
	[0188.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baku.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baku.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Baku" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\baku"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bangkok"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.046] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0188.046] CloseHandle (hObject=0x1fc) returned 1
	[0188.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bangkok")) returned 0x20
	[0188.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bangkok")) returned 0x20
	[0188.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bangkok.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bangkok.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bangkok" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bangkok"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.046] SetEvent (hEvent=0xfc) returned 1
	[0188.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Beirut" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\beirut"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.047] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1208) returned 1
	[0188.047] CloseHandle (hObject=0x1fc) returned 1
	[0188.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Beirut" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\beirut")) returned 0x20
	[0188.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Beirut" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\beirut")) returned 0x20
	[0188.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Beirut.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\beirut.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Beirut" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\beirut"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bishkek"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.048] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=485) returned 1
	[0188.048] CloseHandle (hObject=0x1fc) returned 1
	[0188.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bishkek")) returned 0x20
	[0188.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bishkek")) returned 0x20
	[0188.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bishkek.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bishkek.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Bishkek" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\bishkek"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Brunei" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\brunei"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.050] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77) returned 1
	[0188.050] CloseHandle (hObject=0x1fc) returned 1
	[0188.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Brunei" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\brunei")) returned 0x20
	[0188.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Brunei" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\brunei")) returned 0x20
	[0188.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Brunei.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\brunei.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Brunei" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\brunei"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.050] SetEvent (hEvent=0xfc) returned 1
	[0188.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\choibalsan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.051] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=449) returned 1
	[0188.051] CloseHandle (hObject=0x1fc) returned 1
	[0188.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\choibalsan")) returned 0x20
	[0188.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\choibalsan")) returned 0x20
	[0188.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\choibalsan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Choibalsan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\choibalsan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\chongqing"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.052] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=181) returned 1
	[0188.052] CloseHandle (hObject=0x1fc) returned 1
	[0188.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\chongqing")) returned 0x20
	[0188.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\chongqing")) returned 0x20
	[0188.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Chongqing.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\chongqing.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Chongqing" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\chongqing"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Colombo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\colombo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.054] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=129) returned 1
	[0188.054] CloseHandle (hObject=0x200) returned 1
	[0188.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Colombo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\colombo")) returned 0x20
	[0188.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Colombo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\colombo")) returned 0x20
	[0188.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Colombo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\colombo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Colombo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\colombo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.054] SetEvent (hEvent=0xfc) returned 1
	[0188.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Damascus" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\damascus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.055] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1300) returned 1
	[0188.055] CloseHandle (hObject=0x200) returned 1
	[0188.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Damascus" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\damascus")) returned 0x20
	[0188.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Damascus" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\damascus")) returned 0x20
	[0188.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Damascus.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\damascus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Damascus" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\damascus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dhaka"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.058] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=121) returned 1
	[0188.058] CloseHandle (hObject=0x200) returned 1
	[0188.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dhaka")) returned 0x20
	[0188.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dhaka")) returned 0x20
	[0188.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dhaka.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dhaka.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dhaka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dhaka"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dili" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dili"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.059] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=93) returned 1
	[0188.059] CloseHandle (hObject=0x200) returned 1
	[0188.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dili" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dili")) returned 0x20
	[0188.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dili" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dili")) returned 0x20
	[0188.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dili.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dili.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dili" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dili"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dubai" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dubai"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.060] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0188.060] CloseHandle (hObject=0x200) returned 1
	[0188.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dubai" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dubai")) returned 0x20
	[0188.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dubai" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dubai")) returned 0x20
	[0188.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dubai.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dubai.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dubai" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dubai"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dushanbe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.063] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=261) returned 1
	[0188.063] CloseHandle (hObject=0x1fc) returned 1
	[0188.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dushanbe")) returned 0x20
	[0188.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dushanbe")) returned 0x20
	[0188.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dushanbe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Dushanbe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\dushanbe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.064] SetEvent (hEvent=0xfc) returned 1
	[0188.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Gaza" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\gaza"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.064] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1236) returned 1
	[0188.064] CloseHandle (hObject=0x1fc) returned 1
	[0188.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Gaza" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\gaza")) returned 0x20
	[0188.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Gaza" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\gaza")) returned 0x20
	[0188.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Gaza.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\gaza.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Gaza" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\gaza"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Harbin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\harbin"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.066] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=205) returned 1
	[0188.066] CloseHandle (hObject=0x1fc) returned 1
	[0188.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Harbin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\harbin")) returned 0x20
	[0188.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Harbin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\harbin")) returned 0x20
	[0188.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Harbin.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\harbin.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Harbin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\harbin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hebron" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hebron"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.067] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1252) returned 1
	[0188.067] CloseHandle (hObject=0x1fc) returned 1
	[0188.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hebron" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hebron")) returned 0x20
	[0188.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hebron" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hebron")) returned 0x20
	[0188.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hebron.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hebron.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hebron" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hebron"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.068] SetEvent (hEvent=0xfc) returned 1
	[0188.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hong_kong"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.068] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=617) returned 1
	[0188.068] CloseHandle (hObject=0x1fc) returned 1
	[0188.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hong_kong")) returned 0x20
	[0188.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hong_kong")) returned 0x20
	[0188.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hong_kong.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hong_Kong" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hong_kong"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hovd" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hovd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.070] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=437) returned 1
	[0188.070] CloseHandle (hObject=0x1fc) returned 1
	[0188.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hovd" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hovd")) returned 0x20
	[0188.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hovd" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hovd")) returned 0x20
	[0188.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hovd.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hovd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Hovd" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\hovd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ho_chi_minh"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.071] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97) returned 1
	[0188.071] CloseHandle (hObject=0x1fc) returned 1
	[0188.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ho_chi_minh")) returned 0x20
	[0188.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ho_chi_minh")) returned 0x20
	[0188.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ho_chi_minh.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ho_Chi_Minh" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ho_chi_minh"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.072] SetEvent (hEvent=0xfc) returned 1
	[0188.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\irkutsk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.073] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=581) returned 1
	[0188.073] CloseHandle (hObject=0x1fc) returned 1
	[0188.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\irkutsk")) returned 0x20
	[0188.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\irkutsk")) returned 0x20
	[0188.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\irkutsk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Irkutsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\irkutsk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jakarta"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.074] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=129) returned 1
	[0188.074] CloseHandle (hObject=0x1fc) returned 1
	[0188.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jakarta")) returned 0x20
	[0188.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jakarta")) returned 0x20
	[0188.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jakarta.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jakarta.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jakarta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jakarta"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jayapura"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.075] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=85) returned 1
	[0188.076] CloseHandle (hObject=0x1fc) returned 1
	[0188.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jayapura")) returned 0x20
	[0188.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jayapura")) returned 0x20
	[0188.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jayapura.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jayapura.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jayapura" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jayapura"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.076] SetEvent (hEvent=0xfc) returned 1
	[0188.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jerusalem"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.077] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1236) returned 1
	[0188.077] CloseHandle (hObject=0x1fc) returned 1
	[0188.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jerusalem")) returned 0x20
	[0188.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jerusalem")) returned 0x20
	[0188.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jerusalem.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Jerusalem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\jerusalem"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kabul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kabul"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0188.078] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0188.078] CloseHandle (hObject=0x1fc) returned 1
	[0188.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kabul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kabul")) returned 0x20
	[0188.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kabul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kabul")) returned 0x20
	[0188.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kabul.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kabul.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kabul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kabul"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kamchatka"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.319] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=581) returned 1
	[0188.319] CloseHandle (hObject=0x200) returned 1
	[0188.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kamchatka")) returned 0x20
	[0188.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kamchatka")) returned 0x20
	[0188.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kamchatka.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kamchatka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kamchatka"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.319] SetEvent (hEvent=0xfc) returned 1
	[0188.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh87"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.321] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4821) returned 1
	[0188.321] CloseHandle (hObject=0x200) returned 1
	[0188.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh87")) returned 0x20
	[0188.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh87")) returned 0x20
	[0188.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh87.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh87" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh87"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.321] SetEvent (hEvent=0xfc) returned 1
	[0188.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh88"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.322] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4733) returned 1
	[0188.322] CloseHandle (hObject=0x200) returned 1
	[0188.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh88")) returned 0x20
	[0188.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh88")) returned 0x20
	[0188.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh88.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh88" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh88"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh89"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.323] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4765) returned 1
	[0188.323] CloseHandle (hObject=0x200) returned 1
	[0188.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh89")) returned 0x20
	[0188.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh89")) returned 0x20
	[0188.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh89.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh89" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\sakhalin"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.325] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=585) returned 1
	[0188.325] CloseHandle (hObject=0x200) returned 1
	[0188.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\sakhalin")) returned 0x20
	[0188.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\sakhalin")) returned 0x20
	[0188.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\sakhalin.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Sakhalin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\sakhalin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.326] SetEvent (hEvent=0xfc) returned 1
	[0188.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\samarkand"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.332] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=261) returned 1
	[0188.332] CloseHandle (hObject=0x1b8) returned 1
	[0188.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\samarkand")) returned 0x20
	[0188.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\samarkand")) returned 0x20
	[0188.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Samarkand.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\samarkand.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Samarkand" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\samarkand"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.332] SetEvent (hEvent=0xfc) returned 1
	[0188.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Seoul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\seoul"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.334] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=165) returned 1
	[0188.334] CloseHandle (hObject=0x144) returned 1
	[0188.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Seoul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\seoul")) returned 0x20
	[0188.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Seoul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\seoul")) returned 0x20
	[0188.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Seoul.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\seoul.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Seoul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\seoul"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.336] SetEvent (hEvent=0xfc) returned 1
	[0188.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\shanghai"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.338] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=201) returned 1
	[0188.338] CloseHandle (hObject=0x144) returned 1
	[0188.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\shanghai")) returned 0x20
	[0188.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\shanghai")) returned 0x20
	[0188.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Shanghai.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\shanghai.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Shanghai" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\shanghai"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.338] SetEvent (hEvent=0xfc) returned 1
	[0188.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Singapore" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\singapore"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.339] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=133) returned 1
	[0188.339] CloseHandle (hObject=0x144) returned 1
	[0188.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Singapore" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\singapore")) returned 0x20
	[0188.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Singapore" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\singapore")) returned 0x20
	[0188.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Singapore.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\singapore.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Singapore" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\singapore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Taipei" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\taipei"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.340] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=381) returned 1
	[0188.340] CloseHandle (hObject=0x144) returned 1
	[0188.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Taipei" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\taipei")) returned 0x20
	[0188.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Taipei" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\taipei")) returned 0x20
	[0188.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Taipei.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\taipei.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Taipei" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\taipei"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tashkent"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.342] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=261) returned 1
	[0188.343] CloseHandle (hObject=0x1b8) returned 1
	[0188.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tashkent")) returned 0x20
	[0188.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tashkent")) returned 0x20
	[0188.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tashkent.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tashkent.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tashkent" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tashkent"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.343] SetEvent (hEvent=0xfc) returned 1
	[0188.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tbilisi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.344] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=469) returned 1
	[0188.344] CloseHandle (hObject=0x1b8) returned 1
	[0188.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tbilisi")) returned 0x20
	[0188.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tbilisi")) returned 0x20
	[0188.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tbilisi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tbilisi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tbilisi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.345] SetEvent (hEvent=0xfc) returned 1
	[0188.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tehran" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tehran"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.345] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=892) returned 1
	[0188.345] CloseHandle (hObject=0x1b8) returned 1
	[0188.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tehran" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tehran")) returned 0x20
	[0188.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tehran" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tehran")) returned 0x20
	[0188.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tehran.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tehran.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tehran" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tehran"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\thimphu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.347] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77) returned 1
	[0188.348] CloseHandle (hObject=0x1b8) returned 1
	[0188.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\thimphu")) returned 0x20
	[0188.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\thimphu")) returned 0x20
	[0188.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Thimphu.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\thimphu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Thimphu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\thimphu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.348] SetEvent (hEvent=0xfc) returned 1
	[0188.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tokyo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.349] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=125) returned 1
	[0188.349] CloseHandle (hObject=0x1b8) returned 1
	[0188.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tokyo")) returned 0x20
	[0188.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tokyo")) returned 0x20
	[0188.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tokyo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tokyo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Tokyo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\tokyo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ulaanbaatar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.353] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=437) returned 1
	[0188.353] CloseHandle (hObject=0x144) returned 1
	[0188.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ulaanbaatar")) returned 0x20
	[0188.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ulaanbaatar")) returned 0x20
	[0188.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ulaanbaatar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ulaanbaatar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ulaanbaatar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.354] SetEvent (hEvent=0xfc) returned 1
	[0188.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\urumqi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.354] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=181) returned 1
	[0188.354] CloseHandle (hObject=0x144) returned 1
	[0188.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\urumqi")) returned 0x20
	[0188.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\urumqi")) returned 0x20
	[0188.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Urumqi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\urumqi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Urumqi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\urumqi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ust-nera"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.357] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=597) returned 1
	[0188.357] CloseHandle (hObject=0x1b8) returned 1
	[0188.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ust-nera")) returned 0x20
	[0188.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ust-nera")) returned 0x20
	[0188.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ust-nera.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Ust-Nera" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\ust-nera"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.357] SetEvent (hEvent=0xfc) returned 1
	[0188.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\vientiane"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.358] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97) returned 1
	[0188.358] CloseHandle (hObject=0x1b8) returned 1
	[0188.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\vientiane")) returned 0x20
	[0188.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\vientiane")) returned 0x20
	[0188.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Vientiane.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\vientiane.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Vientiane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\vientiane"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\vladivostok"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.361] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=581) returned 1
	[0188.362] CloseHandle (hObject=0x1b8) returned 1
	[0188.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\vladivostok")) returned 0x20
	[0188.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\vladivostok")) returned 0x20
	[0188.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\vladivostok.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Vladivostok" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\vladivostok"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.362] SetEvent (hEvent=0xfc) returned 1
	[0188.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yakutsk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.363] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=581) returned 1
	[0188.363] CloseHandle (hObject=0x1b8) returned 1
	[0188.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yakutsk")) returned 0x20
	[0188.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yakutsk")) returned 0x20
	[0188.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yakutsk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yakutsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yakutsk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yekaterinburg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.364] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=581) returned 1
	[0188.365] CloseHandle (hObject=0x1b8) returned 1
	[0188.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yekaterinburg")) returned 0x20
	[0188.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yekaterinburg")) returned 0x20
	[0188.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yekaterinburg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yekaterinburg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yekaterinburg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.365] SetEvent (hEvent=0xfc) returned 1
	[0188.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yerevan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.366] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=565) returned 1
	[0188.366] CloseHandle (hObject=0x1b8) returned 1
	[0188.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yerevan")) returned 0x20
	[0188.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yerevan")) returned 0x20
	[0188.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yerevan.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yerevan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Yerevan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\yerevan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Azores" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\azores"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.367] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1868) returned 1
	[0188.367] CloseHandle (hObject=0x1b8) returned 1
	[0188.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Azores" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\azores")) returned 0x20
	[0188.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Azores" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\azores")) returned 0x20
	[0188.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Azores.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\azores.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Azores" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\azores"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\bermuda"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.456] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1124) returned 1
	[0188.457] CloseHandle (hObject=0x144) returned 1
	[0188.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\bermuda")) returned 0x20
	[0188.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\bermuda")) returned 0x20
	[0188.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\bermuda.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Bermuda" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\bermuda"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.457] SetEvent (hEvent=0xfc) returned 1
	[0188.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\cape_verde"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.458] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=97) returned 1
	[0188.459] CloseHandle (hObject=0x144) returned 1
	[0188.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\cape_verde")) returned 0x20
	[0188.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\cape_verde")) returned 0x20
	[0188.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\cape_verde.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Cape_Verde" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\cape_verde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.459] SetEvent (hEvent=0xfc) returned 1
	[0188.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\faroe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.460] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1016) returned 1
	[0188.460] CloseHandle (hObject=0x144) returned 1
	[0188.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\faroe")) returned 0x20
	[0188.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\faroe")) returned 0x20
	[0188.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\faroe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Faroe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\faroe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\madeira"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.461] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1864) returned 1
	[0188.462] CloseHandle (hObject=0x144) returned 1
	[0188.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\madeira")) returned 0x20
	[0188.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\madeira")) returned 0x20
	[0188.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\madeira.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Madeira" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\madeira"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.462] SetEvent (hEvent=0xfc) returned 1
	[0188.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\reykjavik"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.463] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=577) returned 1
	[0188.463] CloseHandle (hObject=0x144) returned 1
	[0188.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\reykjavik")) returned 0x20
	[0188.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\reykjavik")) returned 0x20
	[0188.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\reykjavik.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Reykjavik" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\reykjavik"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\south_georgia"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.465] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27) returned 1
	[0188.465] CloseHandle (hObject=0x144) returned 1
	[0188.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\south_georgia")) returned 0x20
	[0188.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\south_georgia")) returned 0x20
	[0188.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\south_georgia.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\South_Georgia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\south_georgia"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.465] SetEvent (hEvent=0xfc) returned 1
	[0188.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\stanley"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.466] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=621) returned 1
	[0188.466] CloseHandle (hObject=0x144) returned 1
	[0188.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\stanley")) returned 0x20
	[0188.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\stanley")) returned 0x20
	[0188.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\stanley.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Stanley" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\stanley"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\st_helena"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.467] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0188.467] CloseHandle (hObject=0x144) returned 1
	[0188.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\st_helena")) returned 0x20
	[0188.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\st_helena")) returned 0x20
	[0188.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\st_helena.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\St_Helena" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\st_helena"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\adelaide"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.469] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1224) returned 1
	[0188.469] CloseHandle (hObject=0x144) returned 1
	[0188.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\adelaide")) returned 0x20
	[0188.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\adelaide")) returned 0x20
	[0188.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Adelaide.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\adelaide.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Adelaide" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\adelaide"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\brisbane"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.474] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=189) returned 1
	[0188.474] CloseHandle (hObject=0x144) returned 1
	[0188.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\brisbane")) returned 0x20
	[0188.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\brisbane")) returned 0x20
	[0188.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Brisbane.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\brisbane.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Brisbane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\brisbane"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.474] SetEvent (hEvent=0xfc) returned 1
	[0188.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\broken_hill"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.475] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1224) returned 1
	[0188.475] CloseHandle (hObject=0x144) returned 1
	[0188.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\broken_hill")) returned 0x20
	[0188.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\broken_hill")) returned 0x20
	[0188.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\broken_hill.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Broken_Hill" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\broken_hill"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Currie" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\currie"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.476] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1224) returned 1
	[0188.476] CloseHandle (hObject=0x144) returned 1
	[0188.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Currie" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\currie")) returned 0x20
	[0188.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Currie" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\currie")) returned 0x20
	[0188.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Currie.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\currie.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Currie" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\currie"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Darwin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\darwin"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.477] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=125) returned 1
	[0188.477] CloseHandle (hObject=0x144) returned 1
	[0188.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Darwin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\darwin")) returned 0x20
	[0188.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Darwin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\darwin")) returned 0x20
	[0188.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Darwin.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\darwin.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Darwin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\darwin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Eucla" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\eucla"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.479] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=205) returned 1
	[0188.479] CloseHandle (hObject=0x144) returned 1
	[0188.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Eucla" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\eucla")) returned 0x20
	[0188.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Eucla" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\eucla")) returned 0x20
	[0188.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Eucla.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\eucla.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Eucla" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\eucla"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.479] SetEvent (hEvent=0xfc) returned 1
	[0188.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Hobart" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\hobart"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.481] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1288) returned 1
	[0188.481] CloseHandle (hObject=0x144) returned 1
	[0188.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Hobart" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\hobart")) returned 0x20
	[0188.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Hobart" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\hobart")) returned 0x20
	[0188.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Hobart.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\hobart.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Hobart" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\hobart"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.481] SetEvent (hEvent=0xfc) returned 1
	[0188.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\lindeman"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.483] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=221) returned 1
	[0188.483] CloseHandle (hObject=0x144) returned 1
	[0188.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\lindeman")) returned 0x20
	[0188.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\lindeman")) returned 0x20
	[0188.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Lindeman.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\lindeman.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Lindeman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\lindeman"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\lord_howe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.485] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1012) returned 1
	[0188.485] CloseHandle (hObject=0x144) returned 1
	[0188.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\lord_howe")) returned 0x20
	[0188.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\lord_howe")) returned 0x20
	[0188.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\lord_howe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Lord_Howe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\lord_howe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.485] SetEvent (hEvent=0xfc) returned 1
	[0188.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\melbourne"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.488] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1224) returned 1
	[0188.488] CloseHandle (hObject=0x1b8) returned 1
	[0188.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\melbourne")) returned 0x20
	[0188.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\melbourne")) returned 0x20
	[0188.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Melbourne.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\melbourne.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Melbourne" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\melbourne"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.489] SetEvent (hEvent=0xfc) returned 1
	[0188.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Perth" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\perth"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.491] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=205) returned 1
	[0188.491] CloseHandle (hObject=0x1b8) returned 1
	[0188.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Perth" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\perth")) returned 0x20
	[0188.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Perth" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\perth")) returned 0x20
	[0188.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Perth.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\perth.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Perth" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\perth"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.491] SetEvent (hEvent=0xfc) returned 1
	[0188.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Sydney" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\sydney"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.492] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1224) returned 1
	[0188.492] CloseHandle (hObject=0x1b8) returned 1
	[0188.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Sydney" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\sydney")) returned 0x20
	[0188.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Sydney" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\sydney")) returned 0x20
	[0188.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Sydney.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\sydney.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\Sydney" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\australia\\sydney"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\cet"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.495] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1184) returned 1
	[0188.495] CloseHandle (hObject=0x1b8) returned 1
	[0188.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\cet")) returned 0x20
	[0188.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\cet")) returned 0x20
	[0188.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CET.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\cet.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\cet"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.496] SetEvent (hEvent=0xfc) returned 1
	[0188.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CST6CDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\cst6cdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.497] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1272) returned 1
	[0188.497] CloseHandle (hObject=0x1b8) returned 1
	[0188.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CST6CDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\cst6cdt")) returned 0x20
	[0188.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CST6CDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\cst6cdt")) returned 0x20
	[0188.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CST6CDT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\cst6cdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\CST6CDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\cst6cdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.498] SetEvent (hEvent=0xfc) returned 1
	[0188.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\eet"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.499] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1072) returned 1
	[0188.499] CloseHandle (hObject=0x1b8) returned 1
	[0188.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\eet")) returned 0x20
	[0188.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\eet")) returned 0x20
	[0188.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EET.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\eet.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\eet"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.499] SetEvent (hEvent=0xfc) returned 1
	[0188.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\est"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.501] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27) returned 1
	[0188.501] CloseHandle (hObject=0x1b8) returned 1
	[0188.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\est")) returned 0x20
	[0188.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\est")) returned 0x20
	[0188.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\est.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\est"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.501] SetEvent (hEvent=0xfc) returned 1
	[0188.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST5EDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\est5edt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0188.603] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1272) returned 1
	[0188.603] CloseHandle (hObject=0x1b8) returned 1
	[0188.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST5EDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\est5edt")) returned 0x20
	[0188.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST5EDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\est5edt")) returned 0x20
	[0188.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST5EDT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\est5edt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\EST5EDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\est5edt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.604] SetEvent (hEvent=0xfc) returned 1
	[0188.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+1" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.856] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27) returned 1
	[0188.856] CloseHandle (hObject=0x238) returned 1
	[0188.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+1" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+1")) returned 0x20
	[0188.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+1" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+1")) returned 0x20
	[0188.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+1.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+1.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+1" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.857] SetEvent (hEvent=0xfc) returned 1
	[0188.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\UCT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\uct"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.858] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27) returned 1
	[0188.858] CloseHandle (hObject=0x238) returned 1
	[0188.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\UCT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\uct")) returned 0x20
	[0188.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\UCT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\uct")) returned 0x20
	[0188.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\UCT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\uct.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\UCT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\uct"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\UTC" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\utc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.859] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27) returned 1
	[0188.859] CloseHandle (hObject=0x238) returned 1
	[0188.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\UTC" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\utc")) returned 0x20
	[0188.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\UTC" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\utc")) returned 0x20
	[0188.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\UTC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\utc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\UTC" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\utc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\amsterdam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.864] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1544) returned 1
	[0188.864] CloseHandle (hObject=0x238) returned 1
	[0188.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\amsterdam")) returned 0x20
	[0188.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\amsterdam")) returned 0x20
	[0188.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\amsterdam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Amsterdam" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\amsterdam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.865] SetEvent (hEvent=0xfc) returned 1
	[0188.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Andorra" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\andorra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.866] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=968) returned 1
	[0188.866] CloseHandle (hObject=0x238) returned 1
	[0188.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Andorra" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\andorra")) returned 0x20
	[0188.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Andorra" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\andorra")) returned 0x20
	[0188.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Andorra.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\andorra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Andorra" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\andorra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Athens" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\athens"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.867] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1196) returned 1
	[0188.867] CloseHandle (hObject=0x238) returned 1
	[0188.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Athens" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\athens")) returned 0x20
	[0188.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Athens" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\athens")) returned 0x20
	[0188.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Athens.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\athens.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Athens" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\athens"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.868] SetEvent (hEvent=0xfc) returned 1
	[0188.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Belgrade" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\belgrade"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.869] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1040) returned 1
	[0188.869] CloseHandle (hObject=0x238) returned 1
	[0188.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Belgrade" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\belgrade")) returned 0x20
	[0188.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Belgrade" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\belgrade")) returned 0x20
	[0188.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Belgrade.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\belgrade.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Belgrade" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\belgrade"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Berlin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\berlin"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.871] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1236) returned 1
	[0188.871] CloseHandle (hObject=0x200) returned 1
	[0188.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Berlin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\berlin")) returned 0x20
	[0188.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Berlin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\berlin")) returned 0x20
	[0188.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Berlin.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\berlin.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Berlin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\berlin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.871] SetEvent (hEvent=0xfc) returned 1
	[0188.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Brussels" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\brussels"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.872] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1564) returned 1
	[0188.872] CloseHandle (hObject=0x200) returned 1
	[0188.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Brussels" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\brussels")) returned 0x20
	[0188.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Brussels" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\brussels")) returned 0x20
	[0188.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Brussels.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\brussels.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Brussels" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\brussels"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Bucharest" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\bucharest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.876] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1180) returned 1
	[0188.876] CloseHandle (hObject=0x200) returned 1
	[0188.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Bucharest" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\bucharest")) returned 0x20
	[0188.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Bucharest" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\bucharest")) returned 0x20
	[0188.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Bucharest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\bucharest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Bucharest" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\bucharest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.877] SetEvent (hEvent=0xfc) returned 1
	[0188.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Budapest" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\budapest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.877] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1312) returned 1
	[0188.877] CloseHandle (hObject=0x200) returned 1
	[0188.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Budapest" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\budapest")) returned 0x20
	[0188.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Budapest" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\budapest")) returned 0x20
	[0188.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Budapest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\budapest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Budapest" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\budapest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Chisinau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\chisinau"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.879] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1212) returned 1
	[0188.879] CloseHandle (hObject=0x200) returned 1
	[0188.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Chisinau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\chisinau")) returned 0x20
	[0188.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Chisinau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\chisinau")) returned 0x20
	[0188.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Chisinau.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\chisinau.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Chisinau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\chisinau"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.880] SetEvent (hEvent=0xfc) returned 1
	[0188.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\copenhagen"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.880] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1152) returned 1
	[0188.880] CloseHandle (hObject=0x200) returned 1
	[0188.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\copenhagen")) returned 0x20
	[0188.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\copenhagen")) returned 0x20
	[0188.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\copenhagen.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Copenhagen" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\copenhagen"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Dublin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\dublin"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.884] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1916) returned 1
	[0188.884] CloseHandle (hObject=0x238) returned 1
	[0188.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Dublin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\dublin")) returned 0x20
	[0188.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Dublin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\dublin")) returned 0x20
	[0188.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Dublin.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\dublin.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Dublin" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\dublin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.885] SetEvent (hEvent=0xfc) returned 1
	[0188.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\gibraltar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.886] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1676) returned 1
	[0188.886] CloseHandle (hObject=0x238) returned 1
	[0188.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\gibraltar")) returned 0x20
	[0188.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\gibraltar")) returned 0x20
	[0188.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\gibraltar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Gibraltar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\gibraltar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.886] SetEvent (hEvent=0xfc) returned 1
	[0188.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Helsinki" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\helsinki"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.887] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1036) returned 1
	[0188.887] CloseHandle (hObject=0x238) returned 1
	[0188.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Helsinki" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\helsinki")) returned 0x20
	[0188.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Helsinki" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\helsinki")) returned 0x20
	[0188.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Helsinki.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\helsinki.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Helsinki" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\helsinki"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Istanbul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\istanbul"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0188.891] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1464) returned 1
	[0188.891] CloseHandle (hObject=0x228) returned 1
	[0188.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Istanbul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\istanbul")) returned 0x20
	[0188.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Istanbul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\istanbul")) returned 0x20
	[0188.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Istanbul.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\istanbul.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Istanbul" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\istanbul"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.891] SetEvent (hEvent=0xfc) returned 1
	[0188.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\kaliningrad"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0188.894] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=681) returned 1
	[0188.894] CloseHandle (hObject=0x23c) returned 1
	[0188.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\kaliningrad")) returned 0x20
	[0188.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\kaliningrad")) returned 0x20
	[0188.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\kaliningrad.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Kaliningrad" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\kaliningrad"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.895] SetEvent (hEvent=0xfc) returned 1
	[0188.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Kiev" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\kiev"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0188.896] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1048) returned 1
	[0188.896] CloseHandle (hObject=0x23c) returned 1
	[0188.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Kiev" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\kiev")) returned 0x20
	[0188.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Kiev" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\kiev")) returned 0x20
	[0188.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Kiev.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\kiev.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Kiev" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\kiev"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.896] SetEvent (hEvent=0xfc) returned 1
	[0188.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Lisbon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\lisbon"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0188.897] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1868) returned 1
	[0188.897] CloseHandle (hObject=0x23c) returned 1
	[0188.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Lisbon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\lisbon")) returned 0x20
	[0188.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Lisbon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\lisbon")) returned 0x20
	[0188.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Lisbon.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\lisbon.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Lisbon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\lisbon"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\London" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\london"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0188.900] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2024) returned 1
	[0188.900] CloseHandle (hObject=0x23c) returned 1
	[0188.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\London" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\london")) returned 0x20
	[0188.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\London" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\london")) returned 0x20
	[0188.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\London.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\london.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\London" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\london"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.900] SetEvent (hEvent=0xfc) returned 1
	[0188.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\luxembourg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0188.901] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1568) returned 1
	[0188.901] CloseHandle (hObject=0x23c) returned 1
	[0188.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\luxembourg")) returned 0x20
	[0188.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\luxembourg")) returned 0x20
	[0188.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\luxembourg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Luxembourg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\luxembourg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Madrid" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\madrid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0188.905] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1416) returned 1
	[0188.905] CloseHandle (hObject=0x20c) returned 1
	[0188.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Madrid" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\madrid")) returned 0x20
	[0188.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Madrid" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\madrid")) returned 0x20
	[0188.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Madrid.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\madrid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Madrid" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\madrid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.905] SetEvent (hEvent=0xfc) returned 1
	[0188.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Malta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\malta"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.005] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1440) returned 1
	[0189.006] CloseHandle (hObject=0x20c) returned 1
	[0189.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Malta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\malta")) returned 0x20
	[0189.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Malta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\malta")) returned 0x20
	[0189.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Malta.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\malta.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Malta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\malta"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.006] SetEvent (hEvent=0xfc) returned 1
	[0189.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Moscow" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\moscow"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.088] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=693) returned 1
	[0189.088] CloseHandle (hObject=0x168) returned 1
	[0189.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Moscow" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\moscow")) returned 0x20
	[0189.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Moscow" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\moscow")) returned 0x20
	[0189.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Moscow.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\moscow.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Moscow" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\moscow"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.088] SetEvent (hEvent=0xfc) returned 1
	[0189.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Comoro" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\comoro"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0189.220] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0189.220] CloseHandle (hObject=0x23c) returned 1
	[0189.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Comoro" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\comoro")) returned 0x20
	[0189.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Comoro" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\comoro")) returned 0x20
	[0189.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Comoro.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\comoro.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Comoro" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\comoro"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.220] SetEvent (hEvent=0xfc) returned 1
	[0189.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\guadalcanal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.378] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0189.378] CloseHandle (hObject=0x228) returned 1
	[0189.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\guadalcanal")) returned 0x20
	[0189.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\guadalcanal")) returned 0x20
	[0189.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\guadalcanal.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Guadalcanal" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\guadalcanal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Niue" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\niue"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.379] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=89) returned 1
	[0189.379] CloseHandle (hObject=0x228) returned 1
	[0189.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Niue" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\niue")) returned 0x20
	[0189.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Niue" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\niue")) returned 0x20
	[0189.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Niue.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\niue.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Niue" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\niue"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\norfolk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.380] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77) returned 1
	[0189.380] CloseHandle (hObject=0x228) returned 1
	[0189.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\norfolk")) returned 0x20
	[0189.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\norfolk")) returned 0x20
	[0189.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\norfolk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Norfolk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\norfolk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\noumea"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.382] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=121) returned 1
	[0189.382] CloseHandle (hObject=0x228) returned 1
	[0189.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\noumea")) returned 0x20
	[0189.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\noumea")) returned 0x20
	[0189.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Noumea.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\noumea.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Noumea" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\noumea"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pago_pago"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.383] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77) returned 1
	[0189.383] CloseHandle (hObject=0x228) returned 1
	[0189.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pago_pago")) returned 0x20
	[0189.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pago_pago")) returned 0x20
	[0189.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pago_pago.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pago_Pago" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pago_pago"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Palau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\palau"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.384] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0189.384] CloseHandle (hObject=0x228) returned 1
	[0189.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Palau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\palau")) returned 0x20
	[0189.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Palau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\palau")) returned 0x20
	[0189.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Palau.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\palau.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Palau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\palau"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pitcairn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.385] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77) returned 1
	[0189.385] CloseHandle (hObject=0x228) returned 1
	[0189.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pitcairn")) returned 0x20
	[0189.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pitcairn")) returned 0x20
	[0189.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pitcairn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pitcairn" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pitcairn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pohnpei"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.387] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0189.387] CloseHandle (hObject=0x228) returned 1
	[0189.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pohnpei")) returned 0x20
	[0189.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pohnpei")) returned 0x20
	[0189.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pohnpei.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Pohnpei" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\pohnpei"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\port_moresby"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.388] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27) returned 1
	[0189.388] CloseHandle (hObject=0x228) returned 1
	[0189.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\port_moresby")) returned 0x20
	[0189.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\port_moresby")) returned 0x20
	[0189.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\port_moresby.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Port_Moresby" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\port_moresby"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\rarotonga"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.389] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=285) returned 1
	[0189.389] CloseHandle (hObject=0x228) returned 1
	[0189.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\rarotonga")) returned 0x20
	[0189.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\rarotonga")) returned 0x20
	[0189.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\rarotonga.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Rarotonga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\rarotonga"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\saipan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.390] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=77) returned 1
	[0189.390] CloseHandle (hObject=0x228) returned 1
	[0189.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\saipan")) returned 0x20
	[0189.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\saipan")) returned 0x20
	[0189.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Saipan.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\saipan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Saipan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\saipan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tahiti"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.392] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0189.392] CloseHandle (hObject=0x228) returned 1
	[0189.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tahiti")) returned 0x20
	[0189.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tahiti")) returned 0x20
	[0189.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tahiti.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tahiti" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tahiti"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tarawa"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.395] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0189.395] CloseHandle (hObject=0x228) returned 1
	[0189.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tarawa")) returned 0x20
	[0189.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tarawa")) returned 0x20
	[0189.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tarawa.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tarawa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tarawa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tongatapu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.397] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=133) returned 1
	[0189.397] CloseHandle (hObject=0x228) returned 1
	[0189.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tongatapu")) returned 0x20
	[0189.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tongatapu")) returned 0x20
	[0189.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tongatapu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Tongatapu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\tongatapu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Wake" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\wake"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.398] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0189.398] CloseHandle (hObject=0x228) returned 1
	[0189.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Wake" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\wake")) returned 0x20
	[0189.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Wake" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\wake")) returned 0x20
	[0189.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Wake.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\wake.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Wake" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\wake"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\wallis"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.399] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65) returned 1
	[0189.399] CloseHandle (hObject=0x228) returned 1
	[0189.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\wallis")) returned 0x20
	[0189.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\wallis")) returned 0x20
	[0189.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Wallis.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\wallis.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Wallis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\wallis"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\PST8PDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pst8pdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.400] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1272) returned 1
	[0189.400] CloseHandle (hObject=0x228) returned 1
	[0189.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\PST8PDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pst8pdt")) returned 0x20
	[0189.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\PST8PDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pst8pdt")) returned 0x20
	[0189.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\PST8PDT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pst8pdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\PST8PDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pst8pdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\AST4" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\ast4"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.402] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27) returned 1
	[0189.402] CloseHandle (hObject=0x228) returned 1
	[0189.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\AST4" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\ast4")) returned 0x20
	[0189.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\AST4" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\ast4")) returned 0x20
	[0189.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\AST4.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\ast4.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\AST4" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\ast4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\ast4adt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.404] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2288) returned 1
	[0189.404] CloseHandle (hObject=0x228) returned 1
	[0189.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\ast4adt")) returned 0x20
	[0189.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\ast4adt")) returned 0x20
	[0189.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\ast4adt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\AST4ADT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\ast4adt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\CST6" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\cst6"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.405] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27) returned 1
	[0189.405] CloseHandle (hObject=0x228) returned 1
	[0189.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\CST6" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\cst6")) returned 0x20
	[0189.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\CST6" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\cst6")) returned 0x20
	[0189.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\CST6.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\cst6.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\CST6" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\cst6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\cst6cdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.406] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2288) returned 1
	[0189.406] CloseHandle (hObject=0x228) returned 1
	[0189.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\cst6cdt")) returned 0x20
	[0189.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\cst6cdt")) returned 0x20
	[0189.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\cst6cdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\CST6CDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\cst6cdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\EST5" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\est5"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.662] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27) returned 1
	[0189.662] CloseHandle (hObject=0x20c) returned 1
	[0189.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\EST5" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\est5")) returned 0x20
	[0189.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\EST5" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\est5")) returned 0x20
	[0189.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\EST5.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\est5.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\EST5" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\est5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.663] SetEvent (hEvent=0xfc) returned 1
	[0189.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\WET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\wet"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.663] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1068) returned 1
	[0189.663] CloseHandle (hObject=0x20c) returned 1
	[0189.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\WET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\wet")) returned 0x20
	[0189.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\WET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\wet")) returned 0x20
	[0189.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\WET.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\wet.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\WET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\wet"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\zoneinfomappings"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.665] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14736) returned 1
	[0189.665] CloseHandle (hObject=0x20c) returned 1
	[0189.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\zoneinfomappings")) returned 0x20
	[0189.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\zoneinfomappings")) returned 0x20
	[0189.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\ZoneInfoMappings.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\zoneinfomappings.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\ZoneInfoMappings" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\zoneinfomappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\LICENSE" (normalized: "c:\\program files (x86)\\java\\jre7\\license"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.666] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41) returned 1
	[0189.666] CloseHandle (hObject=0x20c) returned 1
	[0189.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\LICENSE" (normalized: "c:\\program files (x86)\\java\\jre7\\license")) returned 0x20
	[0189.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\LICENSE" (normalized: "c:\\program files (x86)\\java\\jre7\\license")) returned 0x20
	[0189.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\LICENSE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\license.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\LICENSE" (normalized: "c:\\program files (x86)\\java\\jre7\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.667] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47) returned 1
	[0189.667] CloseHandle (hObject=0x20c) returned 1
	[0189.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt")) returned 0x20
	[0189.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt")) returned 0x20
	[0189.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\README.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\release" (normalized: "c:\\program files (x86)\\java\\jre7\\release"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.668] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=506) returned 1
	[0189.668] CloseHandle (hObject=0x20c) returned 1
	[0189.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\release" (normalized: "c:\\program files (x86)\\java\\jre7\\release")) returned 0x20
	[0189.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\release" (normalized: "c:\\program files (x86)\\java\\jre7\\release")) returned 0x20
	[0189.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\release.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\release.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\release" (normalized: "c:\\program files (x86)\\java\\jre7\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.669] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=125105) returned 1
	[0189.669] CloseHandle (hObject=0x20c) returned 1
	[0189.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt")) returned 0x20
	[0189.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt")) returned 0x20
	[0189.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.671] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=176976) returned 1
	[0189.671] CloseHandle (hObject=0x20c) returned 1
	[0189.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt")) returned 0x20
	[0189.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt")) returned 0x20
	[0189.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.671] SetEvent (hEvent=0xfc) returned 1
	[0189.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.672] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=983) returned 1
	[0189.672] CloseHandle (hObject=0x20c) returned 1
	[0189.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html")) returned 0x20
	[0189.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html")) returned 0x20
	[0189.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\Welcome.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\toe-solely.exe" (normalized: "c:\\program files (x86)\\java\\toe-solely.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.673] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0189.673] CloseHandle (hObject=0x20c) returned 1
	[0189.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\toe-solely.exe" (normalized: "c:\\program files (x86)\\java\\toe-solely.exe")) returned 0x20
	[0189.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\toe-solely.exe" (normalized: "c:\\program files (x86)\\java\\toe-solely.exe")) returned 0x20
	[0189.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\toe-solely.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\toe-solely.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\toe-solely.exe" (normalized: "c:\\program files (x86)\\java\\toe-solely.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.675] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17248) returned 1
	[0189.675] CloseHandle (hObject=0x20c) returned 1
	[0189.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 0x20
	[0189.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl")) returned 0x20
	[0189.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as80.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.676] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18738) returned 1
	[0189.676] CloseHandle (hObject=0x20c) returned 1
	[0189.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 0x20
	[0189.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl")) returned 0x20
	[0189.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\as90.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.677] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30948) returned 1
	[0189.677] CloseHandle (hObject=0x20c) returned 1
	[0189.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 0x20
	[0189.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 0x20
	[0189.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.678] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28974) returned 1
	[0189.678] CloseHandle (hObject=0x20c) returned 1
	[0189.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 0x20
	[0189.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl")) returned 0x20
	[0189.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\msjet.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.679] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34076) returned 1
	[0189.679] CloseHandle (hObject=0x20c) returned 1
	[0189.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 0x20
	[0189.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl")) returned 0x20
	[0189.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.680] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32146) returned 1
	[0189.680] CloseHandle (hObject=0x20c) returned 1
	[0189.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 0x20
	[0189.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 0x20
	[0189.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.681] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39515) returned 1
	[0189.681] CloseHandle (hObject=0x20c) returned 1
	[0189.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 0x20
	[0189.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 0x20
	[0189.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.682] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29790) returned 1
	[0189.682] CloseHandle (hObject=0x20c) returned 1
	[0189.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 0x20
	[0189.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 0x20
	[0189.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.685] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23476584) returned 1
	[0189.685] CloseHandle (hObject=0x20c) returned 1
	[0189.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll")) returned 0x20
	[0189.685] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0189.685] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll")) returned 0
	[0189.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.686] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8567128) returned 1
	[0189.686] CloseHandle (hObject=0x20c) returned 1
	[0189.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll")) returned 0x20
	[0189.686] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0189.686] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll")) returned 0
	[0189.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msolap100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.687] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6536040) returned 1
	[0189.687] CloseHandle (hObject=0x20c) returned 1
	[0189.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msolap100.dll")) returned 0x20
	[0189.687] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msolap100.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msolap100.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0189.687] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msolap100.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msolap100.dll")) returned 0
	[0189.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msolui100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.688] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=275992) returned 1
	[0189.688] CloseHandle (hObject=0x20c) returned 1
	[0189.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msolui100.dll")) returned 0x20
	[0189.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msolui100.dll")) returned 0x20
	[0189.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msolui100.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\msolui100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.689] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=666984) returned 1
	[0189.689] CloseHandle (hObject=0x20c) returned 1
	[0189.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll")) returned 0x20
	[0189.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll")) returned 0x20
	[0189.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.690] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15384) returned 1
	[0189.690] CloseHandle (hObject=0x20c) returned 1
	[0189.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll")) returned 0x20
	[0189.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll")) returned 0x20
	[0189.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files (x86)\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\bhointl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.692] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10104) returned 1
	[0189.692] CloseHandle (hObject=0x20c) returned 1
	[0189.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\bhointl.dll")) returned 0x20
	[0189.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\bhointl.dll")) returned 0x20
	[0189.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\bhointl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\bhointl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\DL_RES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\dl_res.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.693] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10632) returned 1
	[0189.693] CloseHandle (hObject=0x20c) returned 1
	[0189.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\DL_RES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\dl_res.dll")) returned 0x20
	[0189.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\DL_RES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\dl_res.dll")) returned 0x20
	[0189.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\DL_RES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\dl_res.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\DL_RES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\dl_res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\grooveintlresource.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.694] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8801120) returned 1
	[0189.694] CloseHandle (hObject=0x20c) returned 1
	[0189.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\grooveintlresource.dll")) returned 0x20
	[0189.694] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\grooveintlresource.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\GrooveIntlResource.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\grooveintlresource.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0189.695] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\GrooveIntlResource.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\grooveintlresource.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\grooveintlresource.dll")) returned 0
	[0189.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\MAPISHELLR.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\mapishellr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.695] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=591832) returned 1
	[0189.695] CloseHandle (hObject=0x20c) returned 1
	[0189.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\MAPISHELLR.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\mapishellr.dll")) returned 0x20
	[0189.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\MAPISHELLR.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\mapishellr.dll")) returned 0x20
	[0189.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\MAPISHELLR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\mapishellr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\MAPISHELLR.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\mapishellr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\OCLTINT.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\ocltint.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.696] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=106384) returned 1
	[0189.696] CloseHandle (hObject=0x20c) returned 1
	[0189.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\OCLTINT.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\ocltint.dll")) returned 0x20
	[0189.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\OCLTINT.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\ocltint.dll")) returned 0x20
	[0189.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\OCLTINT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\ocltint.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\OCLTINT.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\ocltint.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\OWSHLP10.CHM" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\owshlp10.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.697] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0189.698] CloseHandle (hObject=0x20c) returned 1
	[0189.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\STSUCRES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\stsucres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.698] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=228240) returned 1
	[0189.698] CloseHandle (hObject=0x20c) returned 1
	[0189.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\STSUCRES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\stsucres.dll")) returned 0x20
	[0189.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\STSUCRES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\stsucres.dll")) returned 0x20
	[0189.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\STSUCRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\stsucres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\STSUCRES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\stsucres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\STSUPLD.INTL.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\stsupld.intl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.699] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12672) returned 1
	[0189.699] CloseHandle (hObject=0x20c) returned 1
	[0189.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\STSUPLD.INTL.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\stsupld.intl.dll")) returned 0x20
	[0189.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\STSUPLD.INTL.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\stsupld.intl.dll")) returned 0x20
	[0189.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\STSUPLD.INTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\stsupld.intl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\STSUPLD.INTL.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\stsupld.intl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVBRES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvbres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.700] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24440) returned 1
	[0189.700] CloseHandle (hObject=0x20c) returned 1
	[0189.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVBRES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvbres.dll")) returned 0x20
	[0189.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVBRES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvbres.dll")) returned 0x20
	[0189.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVBRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvbres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVBRES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvbres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVC60R.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvc60r.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.702] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27008) returned 1
	[0189.702] CloseHandle (hObject=0x20c) returned 1
	[0189.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVC60R.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvc60r.dll")) returned 0x20
	[0189.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVC60R.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvc60r.dll")) returned 0x20
	[0189.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVC60R.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvc60r.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVC60R.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvc60r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVSUI.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.703] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17808) returned 1
	[0189.814] CloseHandle (hObject=0x20c) returned 1
	[0189.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVSUI.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvsui.dll")) returned 0x20
	[0189.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVSUI.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvsui.dll")) returned 0x20
	[0189.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVSUI.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\UMLVSUI.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\umlvsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.815] SetEvent (hEvent=0xfc) returned 1
	[0189.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAMEEXT.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\nameext.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.963] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=135552) returned 1
	[0189.963] CloseHandle (hObject=0x20c) returned 1
	[0189.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAMEEXT.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\nameext.dll")) returned 0x20
	[0189.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAMEEXT.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\nameext.dll")) returned 0x20
	[0189.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAMEEXT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\nameext.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAMEEXT.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\nameext.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.963] SetEvent (hEvent=0xfc) returned 1
	[0189.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.967] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35666) returned 1
	[0189.967] CloseHandle (hObject=0x228) returned 1
	[0189.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip")) returned 0x20
	[0189.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip")) returned 0x20
	[0189.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.967] SetEvent (hEvent=0xfc) returned 1
	[0189.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.969] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=593) returned 1
	[0189.969] CloseHandle (hObject=0x228) returned 1
	[0189.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip")) returned 0x20
	[0189.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip")) returned 0x20
	[0189.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.970] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=621) returned 1
	[0189.970] CloseHandle (hObject=0x228) returned 1
	[0189.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip")) returned 0x20
	[0189.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip")) returned 0x20
	[0189.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.971] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1170) returned 1
	[0189.971] CloseHandle (hObject=0x228) returned 1
	[0189.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip")) returned 0x20
	[0189.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip")) returned 0x20
	[0189.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0190.158] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1250) returned 1
	[0190.158] CloseHandle (hObject=0x23c) returned 1
	[0190.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip")) returned 0x20
	[0190.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip")) returned 0x20
	[0190.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.159] SetEvent (hEvent=0xfc) returned 1
	[0190.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0190.161] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=546) returned 1
	[0190.161] CloseHandle (hObject=0x23c) returned 1
	[0190.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip")) returned 0x20
	[0190.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip")) returned 0x20
	[0190.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.161] SetEvent (hEvent=0xfc) returned 1
	[0190.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0190.162] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1177) returned 1
	[0190.162] CloseHandle (hObject=0x23c) returned 1
	[0190.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip")) returned 0x20
	[0190.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip")) returned 0x20
	[0190.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.168] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=833) returned 1
	[0190.169] CloseHandle (hObject=0x20c) returned 1
	[0190.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip")) returned 0x20
	[0190.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip")) returned 0x20
	[0190.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.169] SetEvent (hEvent=0xfc) returned 1
	[0190.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.170] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1413) returned 1
	[0190.170] CloseHandle (hObject=0x20c) returned 1
	[0190.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip")) returned 0x20
	[0190.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip")) returned 0x20
	[0190.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.171] SetEvent (hEvent=0xfc) returned 1
	[0190.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.172] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=771) returned 1
	[0190.172] CloseHandle (hObject=0x20c) returned 1
	[0190.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip")) returned 0x20
	[0190.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip")) returned 0x20
	[0190.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.174] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14105) returned 1
	[0190.174] CloseHandle (hObject=0x20c) returned 1
	[0190.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip")) returned 0x20
	[0190.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip")) returned 0x20
	[0190.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.174] SetEvent (hEvent=0xfc) returned 1
	[0190.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.177] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2111) returned 1
	[0190.177] CloseHandle (hObject=0x20c) returned 1
	[0190.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip")) returned 0x20
	[0190.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip")) returned 0x20
	[0190.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.179] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2138) returned 1
	[0190.179] CloseHandle (hObject=0x20c) returned 1
	[0190.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip")) returned 0x20
	[0190.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip")) returned 0x20
	[0190.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.179] SetEvent (hEvent=0xfc) returned 1
	[0190.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.180] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=952) returned 1
	[0190.180] CloseHandle (hObject=0x20c) returned 1
	[0190.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip")) returned 0x20
	[0190.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip")) returned 0x20
	[0190.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.181] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=980) returned 1
	[0190.181] CloseHandle (hObject=0x20c) returned 1
	[0190.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip")) returned 0x20
	[0190.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip")) returned 0x20
	[0190.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.183] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=550) returned 1
	[0190.183] CloseHandle (hObject=0x20c) returned 1
	[0190.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip")) returned 0x20
	[0190.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip")) returned 0x20
	[0190.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.184] SetEvent (hEvent=0xfc) returned 1
	[0190.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.185] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1436) returned 1
	[0190.185] CloseHandle (hObject=0x20c) returned 1
	[0190.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip")) returned 0x20
	[0190.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip")) returned 0x20
	[0190.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.186] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1368) returned 1
	[0190.186] CloseHandle (hObject=0x20c) returned 1
	[0190.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip")) returned 0x20
	[0190.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip")) returned 0x20
	[0190.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.187] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=593) returned 1
	[0190.187] CloseHandle (hObject=0x20c) returned 1
	[0190.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip")) returned 0x20
	[0190.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip")) returned 0x20
	[0190.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.189] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1117) returned 1
	[0190.189] CloseHandle (hObject=0x20c) returned 1
	[0190.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip")) returned 0x20
	[0190.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip")) returned 0x20
	[0190.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.190] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1157) returned 1
	[0190.190] CloseHandle (hObject=0x20c) returned 1
	[0190.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip")) returned 0x20
	[0190.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip")) returned 0x20
	[0190.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.191] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=589) returned 1
	[0190.191] CloseHandle (hObject=0x20c) returned 1
	[0190.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip")) returned 0x20
	[0190.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip")) returned 0x20
	[0190.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.192] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1192) returned 1
	[0190.192] CloseHandle (hObject=0x20c) returned 1
	[0190.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip")) returned 0x20
	[0190.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip")) returned 0x20
	[0190.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.193] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2036) returned 1
	[0190.193] CloseHandle (hObject=0x20c) returned 1
	[0190.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip")) returned 0x20
	[0190.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip")) returned 0x20
	[0190.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.194] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=859) returned 1
	[0190.195] CloseHandle (hObject=0x20c) returned 1
	[0190.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip")) returned 0x20
	[0190.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip")) returned 0x20
	[0190.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.196] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20394) returned 1
	[0190.196] CloseHandle (hObject=0x20c) returned 1
	[0190.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip")) returned 0x20
	[0190.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip")) returned 0x20
	[0190.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.197] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1300) returned 1
	[0190.197] CloseHandle (hObject=0x20c) returned 1
	[0190.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip")) returned 0x20
	[0190.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip")) returned 0x20
	[0190.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.198] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45200) returned 1
	[0190.198] CloseHandle (hObject=0x20c) returned 1
	[0190.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip")) returned 0x20
	[0190.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip")) returned 0x20
	[0190.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.199] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14007) returned 1
	[0190.199] CloseHandle (hObject=0x20c) returned 1
	[0190.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip")) returned 0x20
	[0190.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip")) returned 0x20
	[0190.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.200] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=591) returned 1
	[0190.200] CloseHandle (hObject=0x20c) returned 1
	[0190.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip")) returned 0x20
	[0190.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip")) returned 0x20
	[0190.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.201] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2203) returned 1
	[0190.201] CloseHandle (hObject=0x20c) returned 1
	[0190.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip")) returned 0x20
	[0190.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip")) returned 0x20
	[0190.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.374] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1049) returned 1
	[0190.375] CloseHandle (hObject=0x168) returned 1
	[0190.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip")) returned 0x20
	[0190.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip")) returned 0x20
	[0190.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.375] SetEvent (hEvent=0xfc) returned 1
	[0190.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.468] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2878) returned 1
	[0190.469] CloseHandle (hObject=0x20c) returned 1
	[0190.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml")) returned 0x20
	[0190.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml")) returned 0x20
	[0190.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.469] SetEvent (hEvent=0xfc) returned 1
	[0190.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.470] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2583) returned 1
	[0190.470] CloseHandle (hObject=0x20c) returned 1
	[0190.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml")) returned 0x20
	[0190.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml")) returned 0x20
	[0190.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.471] SetEvent (hEvent=0xfc) returned 1
	[0190.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.472] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2971) returned 1
	[0190.472] CloseHandle (hObject=0x20c) returned 1
	[0190.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml")) returned 0x20
	[0190.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml")) returned 0x20
	[0190.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.473] SetEvent (hEvent=0xfc) returned 1
	[0190.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.473] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2961) returned 1
	[0190.474] CloseHandle (hObject=0x20c) returned 1
	[0190.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml")) returned 0x20
	[0190.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml")) returned 0x20
	[0190.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.475] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2226) returned 1
	[0190.475] CloseHandle (hObject=0x20c) returned 1
	[0190.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml")) returned 0x20
	[0190.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml")) returned 0x20
	[0190.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.476] SetEvent (hEvent=0xfc) returned 1
	[0190.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.476] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2675) returned 1
	[0190.477] CloseHandle (hObject=0x20c) returned 1
	[0190.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml")) returned 0x20
	[0190.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml")) returned 0x20
	[0190.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\crashreporter.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.478] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=117360) returned 1
	[0190.478] CloseHandle (hObject=0x20c) returned 1
	[0190.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\crashreporter.exe")) returned 0x20
	[0190.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\crashreporter.exe")) returned 0x20
	[0190.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\crashreporter.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\crashreporter.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.479] SetEvent (hEvent=0xfc) returned 1
	[0190.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\crashreporter.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.479] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4003) returned 1
	[0190.480] CloseHandle (hObject=0x20c) returned 1
	[0190.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\crashreporter.ini")) returned 0x20
	[0190.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\crashreporter.ini")) returned 0x20
	[0190.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\crashreporter.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\crashreporter.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\crashreporter.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\d3dcompiler_43.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.481] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2106216) returned 1
	[0190.481] CloseHandle (hObject=0x20c) returned 1
	[0190.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\d3dcompiler_43.dll")) returned 0x20
	[0190.482] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\d3dcompiler_43.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\d3dcompiler_43.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0190.482] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\d3dcompiler_43.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\D3DCompiler_43.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\d3dcompiler_43.dll")) returned 0
	[0190.482] SetEvent (hEvent=0xfc) returned 1
	[0190.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.483] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=358) returned 1
	[0190.483] CloseHandle (hObject=0x20c) returned 1
	[0190.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js")) returned 0x20
	[0190.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js")) returned 0x20
	[0190.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files (x86)\\mozilla firefox\\defaults\\pref\\channel-prefs.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.484] SetEvent (hEvent=0xfc) returned 1
	[0190.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" (normalized: "c:\\program files (x86)\\mozilla firefox\\dependentlibs.list"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.485] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=99) returned 1
	[0190.485] CloseHandle (hObject=0x20c) returned 1
	[0190.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" (normalized: "c:\\program files (x86)\\mozilla firefox\\dependentlibs.list")) returned 0x20
	[0190.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" (normalized: "c:\\program files (x86)\\mozilla firefox\\dependentlibs.list")) returned 0x20
	[0190.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\dependentlibs.list.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dependentlibs.list" (normalized: "c:\\program files (x86)\\mozilla firefox\\dependentlibs.list"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\en-us.aff"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.486] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3274) returned 1
	[0190.486] CloseHandle (hObject=0x20c) returned 1
	[0190.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\en-us.aff")) returned 0x20
	[0190.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\en-us.aff")) returned 0x20
	[0190.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\en-us.aff.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.aff" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\en-us.aff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\en-us.dic"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.488] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=624190) returned 1
	[0190.488] CloseHandle (hObject=0x20c) returned 1
	[0190.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\en-us.dic")) returned 0x20
	[0190.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\en-us.dic")) returned 0x20
	[0190.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\en-us.dic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\en-US.dic" (normalized: "c:\\program files (x86)\\mozilla firefox\\dictionaries\\en-us.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.488] SetEvent (hEvent=0xfc) returned 1
	[0190.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\firefox.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.489] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=275568) returned 1
	[0190.489] CloseHandle (hObject=0x20c) returned 1
	[0190.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\firefox.exe")) returned 0x20
	[0190.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\firefox.exe")) returned 0x20
	[0190.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\firefox.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\firefox.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.491] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=899) returned 1
	[0190.491] CloseHandle (hObject=0x20c) returned 1
	[0190.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.chk")) returned 0x20
	[0190.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.chk")) returned 0x20
	[0190.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.chk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.491] SetEvent (hEvent=0xfc) returned 1
	[0190.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.492] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=302192) returned 1
	[0190.492] CloseHandle (hObject=0x20c) returned 1
	[0190.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll")) returned 0x20
	[0190.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll")) returned 0x20
	[0190.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\gkmedias.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.494] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3459696) returned 1
	[0190.494] CloseHandle (hObject=0x20c) returned 1
	[0190.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\gkmedias.dll")) returned 0x20
	[0190.494] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\gkmedias.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\gkmedias.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0190.494] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\gkmedias.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\gkmedias.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\gkmedias.dll")) returned 0
	[0190.494] SetEvent (hEvent=0xfc) returned 1
	[0190.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.495] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23274) returned 1
	[0190.495] CloseHandle (hObject=0x20c) returned 1
	[0190.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log")) returned 0x20
	[0190.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log")) returned 0x20
	[0190.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\install.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\install.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\install.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.496] SetEvent (hEvent=0xfc) returned 1
	[0190.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\libegl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.497] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=64112) returned 1
	[0190.497] CloseHandle (hObject=0x20c) returned 1
	[0190.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\libegl.dll")) returned 0x20
	[0190.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\libegl.dll")) returned 0x20
	[0190.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\libegl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\libEGL.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\libegl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\libglesv2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.503] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=549488) returned 1
	[0190.503] CloseHandle (hObject=0x20c) returned 1
	[0190.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\libglesv2.dll")) returned 0x20
	[0190.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\libglesv2.dll")) returned 0x20
	[0190.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\libglesv2.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\libGLESv2.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\libglesv2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.503] SetEvent (hEvent=0xfc) returned 1
	[0190.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\maintenanceservice.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.504] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=119408) returned 1
	[0190.504] CloseHandle (hObject=0x20c) returned 1
	[0190.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\maintenanceservice.exe")) returned 0x20
	[0190.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\maintenanceservice.exe")) returned 0x20
	[0190.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\maintenanceservice.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\maintenanceservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\maintenanceservice_installer.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.506] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=194552) returned 1
	[0190.506] CloseHandle (hObject=0x20c) returned 1
	[0190.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\maintenanceservice_installer.exe")) returned 0x20
	[0190.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\maintenanceservice_installer.exe")) returned 0x20
	[0190.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\maintenanceservice_installer.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\maintenanceservice_installer.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\maintenanceservice_installer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.506] SetEvent (hEvent=0xfc) returned 1
	[0190.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozalloc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.508] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17008) returned 1
	[0190.508] CloseHandle (hObject=0x20c) returned 1
	[0190.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozalloc.dll")) returned 0x20
	[0190.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozalloc.dll")) returned 0x20
	[0190.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozalloc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozalloc.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozalloc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.508] SetEvent (hEvent=0xfc) returned 1
	[0190.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozglue.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.763] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=130672) returned 1
	[0190.763] CloseHandle (hObject=0x20c) returned 1
	[0190.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozglue.dll")) returned 0x20
	[0190.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozglue.dll")) returned 0x20
	[0190.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozglue.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozglue.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.764] SetEvent (hEvent=0xfc) returned 1
	[0190.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\updater.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.765] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=274032) returned 1
	[0190.765] CloseHandle (hObject=0x20c) returned 1
	[0190.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\updater.exe")) returned 0x20
	[0190.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\updater.exe")) returned 0x20
	[0190.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\updater.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\updater.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\updater.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\updater.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.766] SetEvent (hEvent=0xfc) returned 1
	[0190.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\updater.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.766] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1245) returned 1
	[0190.767] CloseHandle (hObject=0x20c) returned 1
	[0190.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\updater.ini")) returned 0x20
	[0190.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\updater.ini")) returned 0x20
	[0190.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\updater.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\updater.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\updater.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapp-uninstaller.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.770] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=170960) returned 1
	[0190.770] CloseHandle (hObject=0x1b8) returned 1
	[0190.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapp-uninstaller.exe")) returned 0x20
	[0190.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapp-uninstaller.exe")) returned 0x20
	[0190.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapp-uninstaller.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapp-uninstaller.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapp-uninstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.771] SetEvent (hEvent=0xfc) returned 1
	[0190.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\omni.ja"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.772] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27127) returned 1
	[0190.772] CloseHandle (hObject=0x1b8) returned 1
	[0190.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\omni.ja")) returned 0x20
	[0190.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\omni.ja")) returned 0x20
	[0190.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\omni.ja.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\omni.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.773] SetEvent (hEvent=0xfc) returned 1
	[0190.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\webapprt.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.773] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=487) returned 1
	[0190.773] CloseHandle (hObject=0x1b8) returned 1
	[0190.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\webapprt.ini")) returned 0x20
	[0190.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\webapprt.ini")) returned 0x20
	[0190.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\webapprt.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\webapprt.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt\\webapprt.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt-stub.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.774] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=108144) returned 1
	[0190.775] CloseHandle (hObject=0x1b8) returned 1
	[0190.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt-stub.exe")) returned 0x20
	[0190.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt-stub.exe")) returned 0x20
	[0190.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt-stub.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\webapprt-stub.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\webapprt-stub.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\xul.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.776] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22028400) returned 1
	[0190.776] CloseHandle (hObject=0x1b8) returned 1
	[0190.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\xul.dll")) returned 0x20
	[0190.776] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\xul.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\xul.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\xul.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0190.776] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\xul.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\xul.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\xul.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\xul.dll")) returned 0
	[0190.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.779] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=119408) returned 1
	[0190.779] CloseHandle (hObject=0x20c) returned 1
	[0190.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe")) returned 0x20
	[0190.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe")) returned 0x20
	[0190.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.779] SetEvent (hEvent=0xfc) returned 1
	[0190.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.781] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=106212) returned 1
	[0190.781] CloseHandle (hObject=0x1b8) returned 1
	[0190.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe")) returned 0x20
	[0190.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe")) returned 0x20
	[0190.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.782] SetEvent (hEvent=0xfc) returned 1
	[0190.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.783] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1245) returned 1
	[0190.783] CloseHandle (hObject=0x1b8) returned 1
	[0190.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini")) returned 0x20
	[0190.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini")) returned 0x20
	[0190.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.784] SetEvent (hEvent=0xfc) returned 1
	[0190.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.785] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4726) returned 1
	[0190.785] CloseHandle (hObject=0x1b8) returned 1
	[0190.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets")) returned 0x20
	[0190.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets")) returned 0x20
	[0190.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.786] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5182) returned 1
	[0190.786] CloseHandle (hObject=0x1b8) returned 1
	[0190.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets")) returned 0x20
	[0190.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets")) returned 0x20
	[0190.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.visualbasic.targets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.787] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7169) returned 1
	[0190.787] CloseHandle (hObject=0x1b8) returned 1
	[0190.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets")) returned 0x20
	[0190.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets")) returned 0x20
	[0190.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.789] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8680) returned 1
	[0190.789] CloseHandle (hObject=0x1b8) returned 1
	[0190.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets")) returned 0x20
	[0190.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets")) returned 0x20
	[0190.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft.Office.InfoPath.targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft.office.infopath.targets"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.790] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=764) returned 1
	[0190.790] CloseHandle (hObject=0x1b8) returned 1
	[0190.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft.Office.InfoPath.targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft.office.infopath.targets")) returned 0x20
	[0190.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft.Office.InfoPath.targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft.office.infopath.targets")) returned 0x20
	[0190.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft.Office.InfoPath.targets.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\msbuild\\microsoft.office.infopath.targets.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft.Office.InfoPath.targets" (normalized: "c:\\program files (x86)\\msbuild\\microsoft.office.infopath.targets"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\tray.exe" (normalized: "c:\\program files (x86)\\msbuild\\tray.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.791] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0190.791] CloseHandle (hObject=0x1b8) returned 1
	[0190.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\tray.exe" (normalized: "c:\\program files (x86)\\msbuild\\tray.exe")) returned 0x20
	[0190.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\tray.exe" (normalized: "c:\\program files (x86)\\msbuild\\tray.exe")) returned 0x20
	[0190.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\tray.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\msbuild\\tray.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\tray.exe" (normalized: "c:\\program files (x86)\\msbuild\\tray.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\golden-issn.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\golden-issn.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.794] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0190.794] CloseHandle (hObject=0x1b8) returned 1
	[0190.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\golden-issn.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\golden-issn.exe")) returned 0x20
	[0190.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\golden-issn.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\golden-issn.exe")) returned 0x20
	[0190.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\golden-issn.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\golden-issn.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\golden-issn.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\golden-issn.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.796] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=598016) returned 1
	[0190.796] CloseHandle (hObject=0x1b8) returned 1
	[0190.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll")) returned 0x20
	[0190.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll")) returned 0x20
	[0190.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationbuildtasks.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.797] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4218880) returned 1
	[0190.797] CloseHandle (hObject=0x1b8) returned 1
	[0190.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll")) returned 0x20
	[0190.797] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0190.797] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationcore.dll")) returned 0
	[0190.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.801] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=196608) returned 1
	[0190.801] CloseHandle (hObject=0x1b8) returned 1
	[0190.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll")) returned 0x20
	[0190.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll")) returned 0x20
	[0190.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.aero.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.802] SetEvent (hEvent=0xfc) returned 1
	[0190.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.803] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=139264) returned 1
	[0190.803] CloseHandle (hObject=0x1b8) returned 1
	[0190.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll")) returned 0x20
	[0190.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll")) returned 0x20
	[0190.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.classic.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.804] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5279744) returned 1
	[0190.804] CloseHandle (hObject=0x1b8) returned 1
	[0190.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll")) returned 0x20
	[0190.804] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0190.804] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.dll")) returned 0
	[0190.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.806] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=397312) returned 1
	[0190.806] CloseHandle (hObject=0x1b8) returned 1
	[0190.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll")) returned 0x20
	[0190.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll")) returned 0x20
	[0190.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.luna.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.806] SetEvent (hEvent=0xfc) returned 1
	[0190.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.807] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=163840) returned 1
	[0190.807] CloseHandle (hObject=0x1b8) returned 1
	[0190.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll")) returned 0x20
	[0190.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll")) returned 0x20
	[0190.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\presentationframework.royale.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.808] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=532480) returned 1
	[0190.808] CloseHandle (hObject=0x1b8) returned 1
	[0190.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll")) returned 0x20
	[0190.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll")) returned 0x20
	[0190.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\reachframework.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.965] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5682) returned 1
	[0190.966] CloseHandle (hObject=0x20c) returned 1
	[0190.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml")) returned 0x20
	[0190.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml")) returned 0x20
	[0190.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.966] SetEvent (hEvent=0xfc) returned 1
	[0190.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.170] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=442368) returned 1
	[0191.170] CloseHandle (hObject=0x228) returned 1
	[0191.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll")) returned 0x20
	[0191.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll")) returned 0x20
	[0191.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.170] SetEvent (hEvent=0xfc) returned 1
	[0191.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.354] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57344) returned 1
	[0191.354] CloseHandle (hObject=0x228) returned 1
	[0191.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll")) returned 0x20
	[0191.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll")) returned 0x20
	[0191.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.componentmodel.dataannotations.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.355] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=507904) returned 1
	[0191.355] CloseHandle (hObject=0x228) returned 1
	[0191.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll")) returned 0x20
	[0191.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll")) returned 0x20
	[0191.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.356] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=139264) returned 1
	[0191.357] CloseHandle (hObject=0x228) returned 1
	[0191.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll")) returned 0x20
	[0191.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll")) returned 0x20
	[0191.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\coordinates.exe" (normalized: "c:\\program files (x86)\\windows defender\\coordinates.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.358] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0191.358] CloseHandle (hObject=0x228) returned 1
	[0191.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\coordinates.exe" (normalized: "c:\\program files (x86)\\windows defender\\coordinates.exe")) returned 0x20
	[0191.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\coordinates.exe" (normalized: "c:\\program files (x86)\\windows defender\\coordinates.exe")) returned 0x20
	[0191.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\coordinates.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows defender\\coordinates.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\coordinates.exe" (normalized: "c:\\program files (x86)\\windows defender\\coordinates.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpasdesc.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.362] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35328) returned 1
	[0191.362] CloseHandle (hObject=0x228) returned 1
	[0191.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpasdesc.dll.mui")) returned 0x20
	[0191.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpasdesc.dll.mui")) returned 0x20
	[0191.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpasdesc.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpasdesc.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpevmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.363] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15360) returned 1
	[0191.363] CloseHandle (hObject=0x228) returned 1
	[0191.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpevmsg.dll.mui")) returned 0x20
	[0191.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpevmsg.dll.mui")) returned 0x20
	[0191.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpevmsg.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpevmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpasdesc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.365] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9216) returned 1
	[0191.365] CloseHandle (hObject=0x228) returned 1
	[0191.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpasdesc.dll")) returned 0x20
	[0191.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpasdesc.dll")) returned 0x20
	[0191.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows defender\\mpasdesc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpasdesc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.366] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=392704) returned 1
	[0191.366] CloseHandle (hObject=0x228) returned 1
	[0191.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpclient.dll")) returned 0x20
	[0191.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpclient.dll")) returned 0x20
	[0191.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpClient.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows defender\\mpclient.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpoav.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.367] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=54784) returned 1
	[0191.367] CloseHandle (hObject=0x228) returned 1
	[0191.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpoav.dll")) returned 0x20
	[0191.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpoav.dll")) returned 0x20
	[0191.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows defender\\mpoav.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpoav.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files (x86)\\windows defender\\msmplics.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.368] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4608) returned 1
	[0191.368] CloseHandle (hObject=0x228) returned 1
	[0191.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files (x86)\\windows defender\\msmplics.dll")) returned 0x20
	[0191.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files (x86)\\windows defender\\msmplics.dll")) returned 0x20
	[0191.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows defender\\msmplics.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files (x86)\\windows defender\\msmplics.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\nationslynnship.exe" (normalized: "c:\\program files (x86)\\windows defender\\nationslynnship.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.369] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0191.369] CloseHandle (hObject=0x228) returned 1
	[0191.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\nationslynnship.exe" (normalized: "c:\\program files (x86)\\windows defender\\nationslynnship.exe")) returned 0x20
	[0191.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\nationslynnship.exe" (normalized: "c:\\program files (x86)\\windows defender\\nationslynnship.exe")) returned 0x20
	[0191.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\nationslynnship.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows defender\\nationslynnship.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\nationslynnship.exe" (normalized: "c:\\program files (x86)\\windows defender\\nationslynnship.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\msoeres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.371] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=518144) returned 1
	[0191.371] CloseHandle (hObject=0x228) returned 1
	[0191.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\msoeres.dll.mui")) returned 0x20
	[0191.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\msoeres.dll.mui")) returned 0x20
	[0191.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\msoeres.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\msoeres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\winmail.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.372] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5632) returned 1
	[0191.372] CloseHandle (hObject=0x228) returned 1
	[0191.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\winmail.exe.mui")) returned 0x20
	[0191.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\winmail.exe.mui")) returned 0x20
	[0191.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\winmail.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\winmail.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\msoe.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.374] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1619968) returned 1
	[0191.374] CloseHandle (hObject=0x228) returned 1
	[0191.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\msoe.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoe.dll")) returned 0x20
	[0191.374] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\msoe.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoe.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\msoe.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows mail\\msoe.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0191.374] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\msoe.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows mail\\msoe.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\msoe.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoe.dll")) returned 0
	[0191.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoeres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.375] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2836992) returned 1
	[0191.375] CloseHandle (hObject=0x228) returned 1
	[0191.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoeres.dll")) returned 0x20
	[0191.375] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoeres.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows mail\\msoeres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0191.375] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows mail\\msoeres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoeres.dll")) returned 0
	[0191.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files (x86)\\windows mail\\oeimport.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.376] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81408) returned 1
	[0191.376] CloseHandle (hObject=0x228) returned 1
	[0191.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files (x86)\\windows mail\\oeimport.dll")) returned 0x20
	[0191.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files (x86)\\windows mail\\oeimport.dll")) returned 0x20
	[0191.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\oeimport.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows mail\\oeimport.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files (x86)\\windows mail\\oeimport.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wab.exe" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.377] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=516096) returned 1
	[0191.377] CloseHandle (hObject=0x228) returned 1
	[0191.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wab.exe" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe")) returned 0x20
	[0191.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wab.exe" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe")) returned 0x20
	[0191.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wab.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wab.exe" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabfind.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabfind.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.379] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33280) returned 1
	[0191.379] CloseHandle (hObject=0x228) returned 1
	[0191.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabfind.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabfind.dll")) returned 0x20
	[0191.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabfind.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabfind.dll")) returned 0x20
	[0191.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabfind.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows mail\\wabfind.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabfind.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabfind.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabimp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.380] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41984) returned 1
	[0191.380] CloseHandle (hObject=0x228) returned 1
	[0191.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabimp.dll")) returned 0x20
	[0191.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabimp.dll")) returned 0x20
	[0191.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabimp.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows mail\\wabimp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabimp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.381] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65536) returned 1
	[0191.381] CloseHandle (hObject=0x228) returned 1
	[0191.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe")) returned 0x20
	[0191.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe")) returned 0x20
	[0191.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabmig.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files (x86)\\windows mail\\winmail.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.382] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=396800) returned 1
	[0191.382] CloseHandle (hObject=0x228) returned 1
	[0191.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files (x86)\\windows mail\\winmail.exe")) returned 0x26
	[0191.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files (x86)\\windows mail\\winmail.exe")) returned 0x26
	[0191.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\WinMail.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows mail\\winmail.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files (x86)\\windows mail\\winmail.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\mpvis.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.604] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0191.604] CloseHandle (hObject=0x20c) returned 1
	[0191.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\mpvis.dll.mui")) returned 0x20
	[0191.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\mpvis.dll.mui")) returned 0x20
	[0191.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\mpvis.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\mpvis.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.605] SetEvent (hEvent=0xfc) returned 1
	[0191.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmlaunch.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.606] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2048) returned 1
	[0191.606] CloseHandle (hObject=0x20c) returned 1
	[0191.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmlaunch.exe.mui")) returned 0x20
	[0191.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmlaunch.exe.mui")) returned 0x20
	[0191.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmlaunch.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmlaunch.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpdmc.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.608] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14848) returned 1
	[0191.608] CloseHandle (hObject=0x20c) returned 1
	[0191.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpdmc.exe.mui")) returned 0x20
	[0191.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpdmc.exe.mui")) returned 0x20
	[0191.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpdmc.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMC.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpdmc.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpdmccore.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.610] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0191.610] CloseHandle (hObject=0x20c) returned 1
	[0191.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpdmccore.dll.mui")) returned 0x20
	[0191.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpdmccore.dll.mui")) returned 0x20
	[0191.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpdmccore.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpdmccore.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.611] SetEvent (hEvent=0xfc) returned 1
	[0191.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmplayer.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.612] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3072) returned 1
	[0191.612] CloseHandle (hObject=0x20c) returned 1
	[0191.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmplayer.exe.mui")) returned 0x20
	[0191.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmplayer.exe.mui")) returned 0x20
	[0191.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmplayer.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmplayer.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpmediasharing.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.613] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0191.613] CloseHandle (hObject=0x20c) returned 1
	[0191.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpmediasharing.dll.mui")) returned 0x20
	[0191.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpmediasharing.dll.mui")) returned 0x20
	[0191.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpmediasharing.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpmediasharing.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssci.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.614] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4096) returned 1
	[0191.614] CloseHandle (hObject=0x20c) returned 1
	[0191.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssci.dll.mui")) returned 0x20
	[0191.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssci.dll.mui")) returned 0x20
	[0191.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssci.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssci.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssui.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.616] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0191.616] CloseHandle (hObject=0x20c) returned 1
	[0191.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssui.dll.mui")) returned 0x20
	[0191.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssui.dll.mui")) returned 0x20
	[0191.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssui.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssui.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.616] SetEvent (hEvent=0xfc) returned 1
	[0191.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.618] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19842) returned 1
	[0191.618] CloseHandle (hObject=0x20c) returned 1
	[0191.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml")) returned 0x20
	[0191.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml")) returned 0x20
	[0191.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.621] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5375) returned 1
	[0191.621] CloseHandle (hObject=0x20c) returned 1
	[0191.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml")) returned 0x20
	[0191.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml")) returned 0x20
	[0191.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.622] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2979) returned 1
	[0191.622] CloseHandle (hObject=0x20c) returned 1
	[0191.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg")) returned 0x20
	[0191.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg")) returned 0x20
	[0191.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.623] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14876) returned 1
	[0191.623] CloseHandle (hObject=0x20c) returned 1
	[0191.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png")) returned 0x20
	[0191.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png")) returned 0x20
	[0191.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.624] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1220) returned 1
	[0191.624] CloseHandle (hObject=0x20c) returned 1
	[0191.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg")) returned 0x20
	[0191.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg")) returned 0x20
	[0191.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.625] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4265) returned 1
	[0191.625] CloseHandle (hObject=0x20c) returned 1
	[0191.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png")) returned 0x20
	[0191.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png")) returned 0x20
	[0191.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.627] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6363) returned 1
	[0191.627] CloseHandle (hObject=0x20c) returned 1
	[0191.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml")) returned 0x20
	[0191.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml")) returned 0x20
	[0191.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files (x86)\\windows media player\\mpvis.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.628] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=154112) returned 1
	[0191.628] CloseHandle (hObject=0x20c) returned 1
	[0191.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files (x86)\\windows media player\\mpvis.dll")) returned 0x20
	[0191.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files (x86)\\windows media player\\mpvis.dll")) returned 0x20
	[0191.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\mpvis.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files (x86)\\windows media player\\mpvis.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.630] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2012672) returned 1
	[0191.630] CloseHandle (hObject=0x20c) returned 1
	[0191.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe")) returned 0x20
	[0191.630] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0191.631] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe")) returned 0
	[0191.631] SetEvent (hEvent=0xfc) returned 1
	[0191.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" (normalized: "c:\\program files (x86)\\windows media player\\skins\\revert.wmz"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.631] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67209) returned 1
	[0191.631] CloseHandle (hObject=0x20c) returned 1
	[0191.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" (normalized: "c:\\program files (x86)\\windows media player\\skins\\revert.wmz")) returned 0x20
	[0191.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" (normalized: "c:\\program files (x86)\\windows media player\\skins\\revert.wmz")) returned 0x20
	[0191.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\skins\\revert.wmz.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" (normalized: "c:\\program files (x86)\\windows media player\\skins\\revert.wmz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmlaunch.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.633] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=228352) returned 1
	[0191.633] CloseHandle (hObject=0x20c) returned 1
	[0191.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmlaunch.exe")) returned 0x20
	[0191.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmlaunch.exe")) returned 0x20
	[0191.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\wmlaunch.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmlaunch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpconfig.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.634] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=101888) returned 1
	[0191.634] CloseHandle (hObject=0x20c) returned 1
	[0191.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpconfig.exe")) returned 0x20
	[0191.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpconfig.exe")) returned 0x20
	[0191.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\wmpconfig.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpconfig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpdmc.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.635] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=983040) returned 1
	[0191.635] CloseHandle (hObject=0x20c) returned 1
	[0191.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpdmc.exe")) returned 0x20
	[0191.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpdmc.exe")) returned 0x20
	[0191.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\wmpdmc.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPDMC.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpdmc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpdmccore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.636] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=324096) returned 1
	[0191.636] CloseHandle (hObject=0x20c) returned 1
	[0191.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpdmccore.dll")) returned 0x20
	[0191.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpdmccore.dll")) returned 0x20
	[0191.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\wmpdmccore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPDMCCore.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpdmccore.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpenc.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.637] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24064) returned 1
	[0191.637] CloseHandle (hObject=0x20c) returned 1
	[0191.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpenc.exe")) returned 0x20
	[0191.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpenc.exe")) returned 0x20
	[0191.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\wmpenc.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpenc.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpenc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmplayer.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.638] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=164864) returned 1
	[0191.638] CloseHandle (hObject=0x20c) returned 1
	[0191.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmplayer.exe")) returned 0x20
	[0191.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmplayer.exe")) returned 0x20
	[0191.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\wmplayer.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmplayer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpmediasharing.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.639] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=133632) returned 1
	[0191.639] CloseHandle (hObject=0x20c) returned 1
	[0191.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpmediasharing.dll")) returned 0x20
	[0191.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpmediasharing.dll")) returned 0x20
	[0191.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\wmpmediasharing.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpmediasharing.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssci.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.736] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=472064) returned 1
	[0191.736] CloseHandle (hObject=0x20c) returned 1
	[0191.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssci.dll")) returned 0x20
	[0191.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssci.dll")) returned 0x20
	[0191.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssci.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.737] SetEvent (hEvent=0xfc) returned 1
	[0191.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmprph.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.737] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=62976) returned 1
	[0191.738] CloseHandle (hObject=0x20c) returned 1
	[0191.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmprph.exe")) returned 0x20
	[0191.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmprph.exe")) returned 0x20
	[0191.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\wmprph.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmprph.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpshare.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.740] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=102400) returned 1
	[0191.741] CloseHandle (hObject=0x20c) returned 1
	[0191.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpshare.exe")) returned 0x20
	[0191.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpshare.exe")) returned 0x20
	[0191.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\wmpshare.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpshare.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\en-us\\wordpad.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.743] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51712) returned 1
	[0191.743] CloseHandle (hObject=0x20c) returned 1
	[0191.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\en-us\\wordpad.exe.mui")) returned 0x20
	[0191.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\en-us\\wordpad.exe.mui")) returned 0x20
	[0191.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\en-us\\wordpad.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\en-us\\wordpad.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.743] SetEvent (hEvent=0xfc) returned 1
	[0191.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.744] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4247040) returned 1
	[0191.744] CloseHandle (hObject=0x20c) returned 1
	[0191.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe")) returned 0x20
	[0191.744] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0191.744] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe")) returned 0
	[0191.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpadfilter.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.745] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=194560) returned 1
	[0191.745] CloseHandle (hObject=0x20c) returned 1
	[0191.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpadfilter.dll")) returned 0x20
	[0191.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpadfilter.dll")) returned 0x20
	[0191.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpadfilter.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpadfilter.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\boost.exe" (normalized: "c:\\program files (x86)\\windows nt\\boost.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.746] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0191.746] CloseHandle (hObject=0x20c) returned 1
	[0191.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\boost.exe" (normalized: "c:\\program files (x86)\\windows nt\\boost.exe")) returned 0x20
	[0191.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\boost.exe" (normalized: "c:\\program files (x86)\\windows nt\\boost.exe")) returned 0x20
	[0191.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\boost.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\boost.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\boost.exe" (normalized: "c:\\program files (x86)\\windows nt\\boost.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\pool therapeutic ebony.exe" (normalized: "c:\\program files (x86)\\windows nt\\pool therapeutic ebony.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.747] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0191.747] CloseHandle (hObject=0x20c) returned 1
	[0191.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\pool therapeutic ebony.exe" (normalized: "c:\\program files (x86)\\windows nt\\pool therapeutic ebony.exe")) returned 0x20
	[0191.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\pool therapeutic ebony.exe" (normalized: "c:\\program files (x86)\\windows nt\\pool therapeutic ebony.exe")) returned 0x20
	[0191.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\pool therapeutic ebony.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\pool therapeutic ebony.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\pool therapeutic ebony.exe" (normalized: "c:\\program files (x86)\\windows nt\\pool therapeutic ebony.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\surveys.exe" (normalized: "c:\\program files (x86)\\windows nt\\surveys.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.748] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=75776) returned 1
	[0191.748] CloseHandle (hObject=0x20c) returned 1
	[0191.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\surveys.exe" (normalized: "c:\\program files (x86)\\windows nt\\surveys.exe")) returned 0x20
	[0191.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\surveys.exe" (normalized: "c:\\program files (x86)\\windows nt\\surveys.exe")) returned 0x20
	[0191.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\surveys.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\surveys.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\surveys.exe" (normalized: "c:\\program files (x86)\\windows nt\\surveys.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\en-us\\tabletextservice.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.750] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0191.750] CloseHandle (hObject=0x20c) returned 1
	[0191.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\en-us\\tabletextservice.dll.mui")) returned 0x20
	[0191.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\en-us\\tabletextservice.dll.mui")) returned 0x20
	[0191.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\en-us\\tabletextservice.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\en-us\\tabletextservice.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservice.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.751] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=325120) returned 1
	[0191.751] CloseHandle (hObject=0x20c) returned 1
	[0191.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservice.dll")) returned 0x20
	[0191.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservice.dll")) returned 0x20
	[0191.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservice.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservice.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.752] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16212) returned 1
	[0191.752] CloseHandle (hObject=0x20c) returned 1
	[0191.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt")) returned 0x20
	[0191.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt")) returned 0x20
	[0191.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.754] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1272822) returned 1
	[0191.754] CloseHandle (hObject=0x20c) returned 1
	[0191.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt")) returned 0x20
	[0191.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt")) returned 0x20
	[0191.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.755] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=980102) returned 1
	[0191.755] CloseHandle (hObject=0x20c) returned 1
	[0191.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt")) returned 0x20
	[0191.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt")) returned 0x20
	[0191.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.756] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1665878) returned 1
	[0191.756] CloseHandle (hObject=0x20c) returned 1
	[0191.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt")) returned 0x20
	[0191.756] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0191.756] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedQuanPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedquanpin.txt")) returned 0
	[0191.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.757] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1445430) returned 1
	[0191.757] CloseHandle (hObject=0x20c) returned 1
	[0191.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt")) returned 0x20
	[0191.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt")) returned 0x20
	[0191.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedShuangPin.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedshuangpin.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.758] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1810352) returned 1
	[0191.758] CloseHandle (hObject=0x20c) returned 1
	[0191.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt")) returned 0x20
	[0191.758] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0191.758] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceSimplifiedZhengMa.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicesimplifiedzhengma.txt")) returned 0
	[0191.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.759] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44968) returned 1
	[0191.759] CloseHandle (hObject=0x20c) returned 1
	[0191.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt")) returned 0x20
	[0191.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt")) returned 0x20
	[0191.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\imagingdevices.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.763] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2560) returned 1
	[0191.763] CloseHandle (hObject=0x20c) returned 1
	[0191.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\imagingdevices.exe.mui")) returned 0x20
	[0191.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\imagingdevices.exe.mui")) returned 0x20
	[0191.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\imagingdevices.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\imagingdevices.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.763] SetEvent (hEvent=0xfc) returned 1
	[0191.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoacq.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.764] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19456) returned 1
	[0191.764] CloseHandle (hObject=0x20c) returned 1
	[0191.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoacq.dll.mui")) returned 0x20
	[0191.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoacq.dll.mui")) returned 0x20
	[0191.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoacq.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoacq.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoviewer.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.765] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17408) returned 1
	[0191.765] CloseHandle (hObject=0x20c) returned 1
	[0191.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoviewer.dll.mui")) returned 0x20
	[0191.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoviewer.dll.mui")) returned 0x20
	[0191.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoviewer.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoviewer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingdevices.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.767] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=92936) returned 1
	[0191.767] CloseHandle (hObject=0x20c) returned 1
	[0191.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingdevices.exe")) returned 0x20
	[0191.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingdevices.exe")) returned 0x20
	[0191.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingdevices.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingdevices.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.769] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1853440) returned 1
	[0191.769] CloseHandle (hObject=0x20c) returned 1
	[0191.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingengine.dll")) returned 0x20
	[0191.769] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingengine.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingengine.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0191.769] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingengine.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingengine.dll")) returned 0
	[0191.769] SetEvent (hEvent=0xfc) returned 1
	[0191.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoacq.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.770] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=917504) returned 1
	[0191.770] CloseHandle (hObject=0x20c) returned 1
	[0191.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoacq.dll")) returned 0x20
	[0191.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoacq.dll")) returned 0x20
	[0191.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoacq.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoacq.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photobase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.771] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34816) returned 1
	[0191.771] CloseHandle (hObject=0x20c) returned 1
	[0191.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photobase.dll")) returned 0x20
	[0191.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photobase.dll")) returned 0x20
	[0191.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows photo viewer\\photobase.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photobase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoviewer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.772] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1456128) returned 1
	[0191.772] CloseHandle (hObject=0x20c) returned 1
	[0191.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoviewer.dll")) returned 0x20
	[0191.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoviewer.dll")) returned 0x20
	[0191.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoviewer.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoviewer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files (x86)\\windows portable devices\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.773] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=189952) returned 1
	[0191.773] CloseHandle (hObject=0x20c) returned 1
	[0191.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files (x86)\\windows portable devices\\sqmapi.dll")) returned 0x20
	[0191.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files (x86)\\windows portable devices\\sqmapi.dll")) returned 0x20
	[0191.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows portable devices\\sqmapi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files (x86)\\windows portable devices\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us\\sbdrop.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.939] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2048) returned 1
	[0191.939] CloseHandle (hObject=0x20c) returned 1
	[0191.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us\\sbdrop.dll.mui")) returned 0x20
	[0191.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us\\sbdrop.dll.mui")) returned 0x20
	[0191.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us\\sbdrop.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\en-US\\sbdrop.dll.mui" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us\\sbdrop.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.942] SetEvent (hEvent=0xfc) returned 1
	[0191.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.942] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6772) returned 1
	[0191.942] CloseHandle (hObject=0x20c) returned 1
	[0191.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\drag.png")) returned 0x20
	[0191.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\drag.png")) returned 0x20
	[0191.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.944] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19102) returned 1
	[0191.944] CloseHandle (hObject=0x20c) returned 1
	[0191.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html")) returned 0x20
	[0191.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html")) returned 0x20
	[0191.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\calendar.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\calendar.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.945] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4848) returned 1
	[0191.945] CloseHandle (hObject=0x20c) returned 1
	[0191.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css")) returned 0x20
	[0191.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css")) returned 0x20
	[0191.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\css\\calendar.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\css\\calendar.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.946] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1010) returned 1
	[0191.946] CloseHandle (hObject=0x20c) returned 1
	[0191.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml")) returned 0x20
	[0191.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml")) returned 0x20
	[0191.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.947] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65288) returned 1
	[0191.947] CloseHandle (hObject=0x20c) returned 1
	[0191.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js")) returned 0x20
	[0191.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js")) returned 0x20
	[0191.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\en-US\\js\\calendar.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\en-us\\js\\calendar.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.949] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3347) returned 1
	[0191.949] CloseHandle (hObject=0x20c) returned 1
	[0191.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\icon.png")) returned 0x20
	[0191.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\icon.png")) returned 0x20
	[0191.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.950] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1702) returned 1
	[0191.950] CloseHandle (hObject=0x20c) returned 1
	[0191.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png")) returned 0x20
	[0191.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png")) returned 0x20
	[0191.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.951] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1367) returned 1
	[0191.951] CloseHandle (hObject=0x20c) returned 1
	[0191.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png")) returned 0x20
	[0191.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png")) returned 0x20
	[0191.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.953] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1174) returned 1
	[0191.953] CloseHandle (hObject=0x20c) returned 1
	[0191.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png")) returned 0x20
	[0191.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png")) returned 0x20
	[0191.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-today.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-today.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.954] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=201) returned 1
	[0191.954] CloseHandle (hObject=0x20c) returned 1
	[0191.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png")) returned 0x20
	[0191.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png")) returned 0x20
	[0191.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.955] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=413) returned 1
	[0191.955] CloseHandle (hObject=0x20c) returned 1
	[0191.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png")) returned 0x20
	[0191.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png")) returned 0x20
	[0191.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.956] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=578) returned 1
	[0191.956] CloseHandle (hObject=0x20c) returned 1
	[0191.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png")) returned 0x20
	[0191.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png")) returned 0x20
	[0191.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-hot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.957] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=203) returned 1
	[0191.957] CloseHandle (hObject=0x20c) returned 1
	[0191.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png")) returned 0x20
	[0191.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png")) returned 0x20
	[0191.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.958] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=217) returned 1
	[0191.958] CloseHandle (hObject=0x20c) returned 1
	[0191.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png")) returned 0x20
	[0191.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png")) returned 0x20
	[0191.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-disable.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-disable.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.959] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=409) returned 1
	[0191.959] CloseHandle (hObject=0x20c) returned 1
	[0191.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png")) returned 0x20
	[0191.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png")) returned 0x20
	[0191.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.960] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=574) returned 1
	[0191.961] CloseHandle (hObject=0x20c) returned 1
	[0191.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png")) returned 0x20
	[0191.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png")) returned 0x20
	[0191.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev-hot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.962] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=216) returned 1
	[0191.962] CloseHandle (hObject=0x20c) returned 1
	[0191.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png")) returned 0x20
	[0191.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png")) returned 0x20
	[0191.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bPrev.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\bprev.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.963] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2262) returned 1
	[0191.963] CloseHandle (hObject=0x20c) returned 1
	[0191.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png")) returned 0x20
	[0191.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png")) returned 0x20
	[0191.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.964] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3009) returned 1
	[0191.964] CloseHandle (hObject=0x20c) returned 1
	[0191.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png")) returned 0x20
	[0191.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png")) returned 0x20
	[0191.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_bkg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.965] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3541) returned 1
	[0191.965] CloseHandle (hObject=0x20c) returned 1
	[0191.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png")) returned 0x20
	[0191.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png")) returned 0x20
	[0191.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_double_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_double_orange.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.966] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3026) returned 1
	[0191.966] CloseHandle (hObject=0x20c) returned 1
	[0191.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png")) returned 0x20
	[0191.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png")) returned 0x20
	[0191.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_ring_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_ring_docked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.967] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1500) returned 1
	[0191.967] CloseHandle (hObject=0x20c) returned 1
	[0191.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png")) returned 0x20
	[0191.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png")) returned 0x20
	[0191.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.968] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3544) returned 1
	[0191.968] CloseHandle (hObject=0x20c) returned 1
	[0191.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png")) returned 0x20
	[0191.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png")) returned 0x20
	[0191.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.969] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4773) returned 1
	[0191.970] CloseHandle (hObject=0x20c) returned 1
	[0191.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png")) returned 0x20
	[0191.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png")) returned 0x20
	[0191.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_bkg_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_bkg_orange.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.971] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2726) returned 1
	[0191.971] CloseHandle (hObject=0x20c) returned 1
	[0191.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png")) returned 0x20
	[0191.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png")) returned 0x20
	[0191.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\calendar_single_orange.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\calendar_single_orange.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.972] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=214) returned 1
	[0191.972] CloseHandle (hObject=0x20c) returned 1
	[0191.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png")) returned 0x20
	[0191.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png")) returned 0x20
	[0191.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\corner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\corner.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.973] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1016) returned 1
	[0191.973] CloseHandle (hObject=0x20c) returned 1
	[0191.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png")) returned 0x20
	[0191.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png")) returned 0x20
	[0191.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl-hot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl-hot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.974] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=896) returned 1
	[0191.974] CloseHandle (hObject=0x20c) returned 1
	[0191.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png")) returned 0x20
	[0191.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png")) returned 0x20
	[0191.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\curl.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\curl.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.975] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=150) returned 1
	[0191.975] CloseHandle (hObject=0x20c) returned 1
	[0191.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png")) returned 0x20
	[0191.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png")) returned 0x20
	[0191.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\month.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\month.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.976] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=502) returned 1
	[0191.976] CloseHandle (hObject=0x20c) returned 1
	[0191.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png")) returned 0x20
	[0191.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png")) returned 0x20
	[0191.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-desk.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-desk.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.977] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=334) returned 1
	[0191.977] CloseHandle (hObject=0x20c) returned 1
	[0191.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png")) returned 0x20
	[0191.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png")) returned 0x20
	[0191.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\rings-dock.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\images\\rings-dock.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.978] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6166) returned 1
	[0191.978] CloseHandle (hObject=0x20c) returned 1
	[0191.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\logo.png")) returned 0x20
	[0191.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\logo.png")) returned 0x20
	[0191.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.979] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23429) returned 1
	[0191.979] CloseHandle (hObject=0x20c) returned 1
	[0191.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\drag.png")) returned 0x20
	[0191.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\drag.png")) returned 0x20
	[0191.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.984] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4172) returned 1
	[0191.985] CloseHandle (hObject=0x20c) returned 1
	[0191.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html")) returned 0x20
	[0191.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html")) returned 0x20
	[0191.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.986] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=674) returned 1
	[0191.986] CloseHandle (hObject=0x20c) returned 1
	[0191.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css")) returned 0x20
	[0191.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css")) returned 0x20
	[0191.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.987] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1374) returned 1
	[0191.987] CloseHandle (hObject=0x20c) returned 1
	[0191.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0191.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0191.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.989] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1003) returned 1
	[0191.989] CloseHandle (hObject=0x20c) returned 1
	[0191.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml")) returned 0x20
	[0191.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml")) returned 0x20
	[0191.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.990] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18042) returned 1
	[0191.990] CloseHandle (hObject=0x20c) returned 1
	[0191.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js")) returned 0x20
	[0191.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js")) returned 0x20
	[0191.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.991] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23630) returned 1
	[0191.991] CloseHandle (hObject=0x20c) returned 1
	[0191.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0191.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0191.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.992] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9612) returned 1
	[0191.992] CloseHandle (hObject=0x20c) returned 1
	[0191.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js")) returned 0x20
	[0191.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js")) returned 0x20
	[0191.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.993] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10260) returned 1
	[0191.993] CloseHandle (hObject=0x20c) returned 1
	[0191.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html")) returned 0x20
	[0191.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html")) returned 0x20
	[0191.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.994] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11788) returned 1
	[0191.994] CloseHandle (hObject=0x20c) returned 1
	[0191.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\icon.png")) returned 0x20
	[0191.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\icon.png")) returned 0x20
	[0191.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.996] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25904) returned 1
	[0191.996] CloseHandle (hObject=0x20c) returned 1
	[0191.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png")) returned 0x20
	[0191.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png")) returned 0x20
	[0191.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.997] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=306) returned 1
	[0191.997] CloseHandle (hObject=0x20c) returned 1
	[0191.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png")) returned 0x20
	[0191.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png")) returned 0x20
	[0191.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.998] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=381) returned 1
	[0191.998] CloseHandle (hObject=0x20c) returned 1
	[0192.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png")) returned 0x20
	[0192.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png")) returned 0x20
	[0192.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.001] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=434) returned 1
	[0192.001] CloseHandle (hObject=0x20c) returned 1
	[0192.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png")) returned 0x20
	[0192.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png")) returned 0x20
	[0192.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.002] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3171) returned 1
	[0192.002] CloseHandle (hObject=0x20c) returned 1
	[0192.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png")) returned 0x20
	[0192.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png")) returned 0x20
	[0192.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.003] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29780) returned 1
	[0192.003] CloseHandle (hObject=0x20c) returned 1
	[0192.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png")) returned 0x20
	[0192.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png")) returned 0x20
	[0192.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.004] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30641) returned 1
	[0192.004] CloseHandle (hObject=0x20c) returned 1
	[0192.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png")) returned 0x20
	[0192.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png")) returned 0x20
	[0192.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.005] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2944) returned 1
	[0192.005] CloseHandle (hObject=0x20c) returned 1
	[0192.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png")) returned 0x20
	[0192.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png")) returned 0x20
	[0192.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.006] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=368) returned 1
	[0192.006] CloseHandle (hObject=0x20c) returned 1
	[0192.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png")) returned 0x20
	[0192.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png")) returned 0x20
	[0192.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.007] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=402) returned 1
	[0192.007] CloseHandle (hObject=0x20c) returned 1
	[0192.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png")) returned 0x20
	[0192.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png")) returned 0x20
	[0192.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.008] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2956) returned 1
	[0192.009] CloseHandle (hObject=0x20c) returned 1
	[0192.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png")) returned 0x20
	[0192.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png")) returned 0x20
	[0192.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.010] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32695) returned 1
	[0192.010] CloseHandle (hObject=0x20c) returned 1
	[0192.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png")) returned 0x20
	[0192.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png")) returned 0x20
	[0192.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\diner_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.011] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34670) returned 1
	[0192.011] CloseHandle (hObject=0x20c) returned 1
	[0192.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png")) returned 0x20
	[0192.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png")) returned 0x20
	[0192.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.012] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=321) returned 1
	[0192.012] CloseHandle (hObject=0x20c) returned 1
	[0192.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png")) returned 0x20
	[0192.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png")) returned 0x20
	[0192.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.013] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=388) returned 1
	[0192.013] CloseHandle (hObject=0x20c) returned 1
	[0192.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png")) returned 0x20
	[0192.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png")) returned 0x20
	[0192.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.014] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=439) returned 1
	[0192.014] CloseHandle (hObject=0x20c) returned 1
	[0192.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png")) returned 0x20
	[0192.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png")) returned 0x20
	[0192.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.015] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3092) returned 1
	[0192.015] CloseHandle (hObject=0x20c) returned 1
	[0192.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png")) returned 0x20
	[0192.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png")) returned 0x20
	[0192.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.016] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33403) returned 1
	[0192.016] CloseHandle (hObject=0x20c) returned 1
	[0192.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png")) returned 0x20
	[0192.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png")) returned 0x20
	[0192.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\flower_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\flower_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.017] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15614) returned 1
	[0192.017] CloseHandle (hObject=0x20c) returned 1
	[0192.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png")) returned 0x20
	[0192.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png")) returned 0x20
	[0192.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.018] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2966) returned 1
	[0192.018] CloseHandle (hObject=0x20c) returned 1
	[0192.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png")) returned 0x20
	[0192.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png")) returned 0x20
	[0192.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.019] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2922) returned 1
	[0192.020] CloseHandle (hObject=0x20c) returned 1
	[0192.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png")) returned 0x20
	[0192.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png")) returned 0x20
	[0192.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.021] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2940) returned 1
	[0192.021] CloseHandle (hObject=0x20c) returned 1
	[0192.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png")) returned 0x20
	[0192.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png")) returned 0x20
	[0192.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.022] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3038) returned 1
	[0192.022] CloseHandle (hObject=0x20c) returned 1
	[0192.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png")) returned 0x20
	[0192.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png")) returned 0x20
	[0192.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.023] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20945) returned 1
	[0192.023] CloseHandle (hObject=0x20c) returned 1
	[0192.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png")) returned 0x20
	[0192.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png")) returned 0x20
	[0192.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\modern_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\modern_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.024] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25608) returned 1
	[0192.024] CloseHandle (hObject=0x20c) returned 1
	[0192.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png")) returned 0x20
	[0192.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png")) returned 0x20
	[0192.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.025] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2903) returned 1
	[0192.025] CloseHandle (hObject=0x20c) returned 1
	[0192.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png")) returned 0x20
	[0192.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png")) returned 0x20
	[0192.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.026] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2959) returned 1
	[0192.026] CloseHandle (hObject=0x20c) returned 1
	[0192.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png")) returned 0x20
	[0192.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png")) returned 0x20
	[0192.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.196] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2979) returned 1
	[0192.196] CloseHandle (hObject=0x20c) returned 1
	[0192.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png")) returned 0x20
	[0192.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png")) returned 0x20
	[0192.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.197] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=475) returned 1
	[0192.197] CloseHandle (hObject=0x20c) returned 1
	[0192.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png")) returned 0x20
	[0192.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png")) returned 0x20
	[0192.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.199] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=458) returned 1
	[0192.199] CloseHandle (hObject=0x20c) returned 1
	[0192.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png")) returned 0x20
	[0192.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png")) returned 0x20
	[0192.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.200] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3119) returned 1
	[0192.200] CloseHandle (hObject=0x20c) returned 1
	[0192.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png")) returned 0x20
	[0192.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png")) returned 0x20
	[0192.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.201] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19847) returned 1
	[0192.201] CloseHandle (hObject=0x20c) returned 1
	[0192.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png")) returned 0x20
	[0192.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png")) returned 0x20
	[0192.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.202] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20891) returned 1
	[0192.202] CloseHandle (hObject=0x20c) returned 1
	[0192.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png")) returned 0x20
	[0192.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png")) returned 0x20
	[0192.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.203] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=243) returned 1
	[0192.203] CloseHandle (hObject=0x20c) returned 1
	[0192.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png")) returned 0x20
	[0192.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png")) returned 0x20
	[0192.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.204] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=206) returned 1
	[0192.204] CloseHandle (hObject=0x20c) returned 1
	[0192.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png")) returned 0x20
	[0192.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png")) returned 0x20
	[0192.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.205] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=206) returned 1
	[0192.206] CloseHandle (hObject=0x20c) returned 1
	[0192.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png")) returned 0x20
	[0192.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png")) returned 0x20
	[0192.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.207] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3003) returned 1
	[0192.207] CloseHandle (hObject=0x20c) returned 1
	[0192.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png")) returned 0x20
	[0192.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png")) returned 0x20
	[0192.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.208] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23101) returned 1
	[0192.208] CloseHandle (hObject=0x20c) returned 1
	[0192.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png")) returned 0x20
	[0192.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png")) returned 0x20
	[0192.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.209] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19515) returned 1
	[0192.209] CloseHandle (hObject=0x20c) returned 1
	[0192.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png")) returned 0x20
	[0192.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png")) returned 0x20
	[0192.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.210] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3019) returned 1
	[0192.210] CloseHandle (hObject=0x20c) returned 1
	[0192.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png")) returned 0x20
	[0192.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png")) returned 0x20
	[0192.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.211] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=351) returned 1
	[0192.211] CloseHandle (hObject=0x20c) returned 1
	[0192.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png")) returned 0x20
	[0192.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png")) returned 0x20
	[0192.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.212] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=361) returned 1
	[0192.212] CloseHandle (hObject=0x20c) returned 1
	[0192.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png")) returned 0x20
	[0192.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png")) returned 0x20
	[0192.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.213] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3000) returned 1
	[0192.213] CloseHandle (hObject=0x20c) returned 1
	[0192.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png")) returned 0x20
	[0192.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png")) returned 0x20
	[0192.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.215] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21381) returned 1
	[0192.215] CloseHandle (hObject=0x20c) returned 1
	[0192.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png")) returned 0x20
	[0192.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png")) returned 0x20
	[0192.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.216] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6166) returned 1
	[0192.216] CloseHandle (hObject=0x20c) returned 1
	[0192.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\logo.png")) returned 0x20
	[0192.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\logo.png")) returned 0x20
	[0192.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.217] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20252) returned 1
	[0192.217] CloseHandle (hObject=0x20c) returned 1
	[0192.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png")) returned 0x20
	[0192.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png")) returned 0x20
	[0192.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.218] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4630) returned 1
	[0192.218] CloseHandle (hObject=0x20c) returned 1
	[0192.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html")) returned 0x20
	[0192.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html")) returned 0x20
	[0192.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.219] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1372) returned 1
	[0192.219] CloseHandle (hObject=0x20c) returned 1
	[0192.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css")) returned 0x20
	[0192.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css")) returned 0x20
	[0192.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.221] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=993) returned 1
	[0192.221] CloseHandle (hObject=0x20c) returned 1
	[0192.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml")) returned 0x20
	[0192.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml")) returned 0x20
	[0192.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.222] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18348) returned 1
	[0192.222] CloseHandle (hObject=0x20c) returned 1
	[0192.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js")) returned 0x20
	[0192.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js")) returned 0x20
	[0192.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.223] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9186) returned 1
	[0192.223] CloseHandle (hObject=0x20c) returned 1
	[0192.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\icon.png")) returned 0x20
	[0192.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\icon.png")) returned 0x20
	[0192.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.225] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17126) returned 1
	[0192.225] CloseHandle (hObject=0x20c) returned 1
	[0192.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png")) returned 0x20
	[0192.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png")) returned 0x20
	[0192.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.226] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26193) returned 1
	[0192.226] CloseHandle (hObject=0x20c) returned 1
	[0192.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png")) returned 0x20
	[0192.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png")) returned 0x20
	[0192.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.227] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=346) returned 1
	[0192.227] CloseHandle (hObject=0x20c) returned 1
	[0192.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png")) returned 0x20
	[0192.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png")) returned 0x20
	[0192.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.228] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3217) returned 1
	[0192.228] CloseHandle (hObject=0x20c) returned 1
	[0192.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png")) returned 0x20
	[0192.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png")) returned 0x20
	[0192.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.229] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4042) returned 1
	[0192.229] CloseHandle (hObject=0x20c) returned 1
	[0192.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png")) returned 0x20
	[0192.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png")) returned 0x20
	[0192.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.483] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3081) returned 1
	[0192.484] CloseHandle (hObject=0x144) returned 1
	[0192.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png")) returned 0x20
	[0192.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png")) returned 0x20
	[0192.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.486] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3268) returned 1
	[0192.486] CloseHandle (hObject=0x144) returned 1
	[0192.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png")) returned 0x20
	[0192.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png")) returned 0x20
	[0192.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.487] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3428) returned 1
	[0192.487] CloseHandle (hObject=0x144) returned 1
	[0192.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png")) returned 0x20
	[0192.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png")) returned 0x20
	[0192.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.488] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2929) returned 1
	[0192.488] CloseHandle (hObject=0x144) returned 1
	[0192.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png")) returned 0x20
	[0192.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png")) returned 0x20
	[0192.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\graph_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\graph_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.489] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=729) returned 1
	[0192.489] CloseHandle (hObject=0x144) returned 1
	[0192.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png")) returned 0x20
	[0192.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png")) returned 0x20
	[0192.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\info.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.490] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3034) returned 1
	[0192.490] CloseHandle (hObject=0x144) returned 1
	[0192.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png")) returned 0x20
	[0192.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png")) returned 0x20
	[0192.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\row_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\row_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.491] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2831) returned 1
	[0192.491] CloseHandle (hObject=0x144) returned 1
	[0192.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png")) returned 0x20
	[0192.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png")) returned 0x20
	[0192.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\triangle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\triangle.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.492] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5930) returned 1
	[0192.493] CloseHandle (hObject=0x144) returned 1
	[0192.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\logo.png")) returned 0x20
	[0192.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\logo.png")) returned 0x20
	[0192.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.494] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31315) returned 1
	[0192.494] CloseHandle (hObject=0x144) returned 1
	[0192.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png")) returned 0x20
	[0192.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png")) returned 0x20
	[0192.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.495] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4466) returned 1
	[0192.495] CloseHandle (hObject=0x144) returned 1
	[0192.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css")) returned 0x20
	[0192.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css")) returned 0x20
	[0192.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\picturePuzzle.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\picturepuzzle.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.496] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5204) returned 1
	[0192.497] CloseHandle (hObject=0x144) returned 1
	[0192.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0192.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0192.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.498] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1010) returned 1
	[0192.498] CloseHandle (hObject=0x144) returned 1
	[0192.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml")) returned 0x20
	[0192.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml")) returned 0x20
	[0192.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.499] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=47778) returned 1
	[0192.499] CloseHandle (hObject=0x144) returned 1
	[0192.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js")) returned 0x20
	[0192.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js")) returned 0x20
	[0192.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\picturePuzzle.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\picturepuzzle.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.501] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9854) returned 1
	[0192.501] CloseHandle (hObject=0x144) returned 1
	[0192.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0192.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0192.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.502] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3436) returned 1
	[0192.502] CloseHandle (hObject=0x144) returned 1
	[0192.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html")) returned 0x20
	[0192.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html")) returned 0x20
	[0192.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\picturePuzzle.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\picturepuzzle.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.503] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5482) returned 1
	[0192.503] CloseHandle (hObject=0x144) returned 1
	[0192.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html")) returned 0x20
	[0192.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html")) returned 0x20
	[0192.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\en-us\\settings.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.504] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9563) returned 1
	[0192.504] CloseHandle (hObject=0x144) returned 1
	[0192.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png")) returned 0x20
	[0192.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png")) returned 0x20
	[0192.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.506] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2850) returned 1
	[0192.506] CloseHandle (hObject=0x144) returned 1
	[0192.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png")) returned 0x20
	[0192.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png")) returned 0x20
	[0192.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\0.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\0.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.507] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21283) returned 1
	[0192.507] CloseHandle (hObject=0x144) returned 1
	[0192.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png")) returned 0x20
	[0192.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png")) returned 0x20
	[0192.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.508] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24128) returned 1
	[0192.509] CloseHandle (hObject=0x144) returned 1
	[0192.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png")) returned 0x20
	[0192.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png")) returned 0x20
	[0192.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.510] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26934) returned 1
	[0192.510] CloseHandle (hObject=0x144) returned 1
	[0192.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png")) returned 0x20
	[0192.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png")) returned 0x20
	[0192.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\11.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.511] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29200) returned 1
	[0192.511] CloseHandle (hObject=0x144) returned 1
	[0192.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png")) returned 0x20
	[0192.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png")) returned 0x20
	[0192.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.512] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24397) returned 1
	[0192.512] CloseHandle (hObject=0x144) returned 1
	[0192.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png")) returned 0x20
	[0192.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png")) returned 0x20
	[0192.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\3.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.513] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15852) returned 1
	[0192.513] CloseHandle (hObject=0x144) returned 1
	[0192.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png")) returned 0x20
	[0192.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png")) returned 0x20
	[0192.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.514] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25021) returned 1
	[0192.514] CloseHandle (hObject=0x144) returned 1
	[0192.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png")) returned 0x20
	[0192.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png")) returned 0x20
	[0192.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\5.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0192.515] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28448) returned 1
	[0192.515] CloseHandle (hObject=0x144) returned 1
	[0192.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png")) returned 0x20
	[0192.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png")) returned 0x20
	[0192.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\6.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.742] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1199) returned 1
	[0192.742] CloseHandle (hObject=0x1f4) returned 1
	[0192.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png")) returned 0x20
	[0192.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png")) returned 0x20
	[0192.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\setting_back.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\setting_back.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.743] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3471) returned 1
	[0192.744] CloseHandle (hObject=0x1f4) returned 1
	[0192.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png")) returned 0x20
	[0192.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png")) returned 0x20
	[0192.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.745] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3379) returned 1
	[0192.745] CloseHandle (hObject=0x1f4) returned 1
	[0192.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png")) returned 0x20
	[0192.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png")) returned 0x20
	[0192.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.746] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3421) returned 1
	[0192.746] CloseHandle (hObject=0x1f4) returned 1
	[0192.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png")) returned 0x20
	[0192.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png")) returned 0x20
	[0192.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.747] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=220) returned 1
	[0192.747] CloseHandle (hObject=0x1f4) returned 1
	[0192.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png")) returned 0x20
	[0192.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png")) returned 0x20
	[0192.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.748] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3289) returned 1
	[0192.748] CloseHandle (hObject=0x1f4) returned 1
	[0192.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png")) returned 0x20
	[0192.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png")) returned 0x20
	[0192.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_bezel.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_bezel.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.749] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2883) returned 1
	[0192.749] CloseHandle (hObject=0x1f4) returned 1
	[0192.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png")) returned 0x20
	[0192.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png")) returned 0x20
	[0192.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\tile_drop_shadow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\tile_drop_shadow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.750] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3388) returned 1
	[0192.750] CloseHandle (hObject=0x1f4) returned 1
	[0192.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png")) returned 0x20
	[0192.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png")) returned 0x20
	[0192.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.751] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3383) returned 1
	[0192.751] CloseHandle (hObject=0x1f4) returned 1
	[0192.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png")) returned 0x20
	[0192.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png")) returned 0x20
	[0192.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.753] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3300) returned 1
	[0192.753] CloseHandle (hObject=0x1f4) returned 1
	[0192.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png")) returned 0x20
	[0192.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png")) returned 0x20
	[0192.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\timer_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\timer_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.754] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6166) returned 1
	[0192.754] CloseHandle (hObject=0x1f4) returned 1
	[0192.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png")) returned 0x20
	[0192.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png")) returned 0x20
	[0192.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.755] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8513) returned 1
	[0192.755] CloseHandle (hObject=0x1f4) returned 1
	[0192.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png")) returned 0x20
	[0192.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png")) returned 0x20
	[0192.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.756] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2962) returned 1
	[0192.756] CloseHandle (hObject=0x1f4) returned 1
	[0192.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css")) returned 0x20
	[0192.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css")) returned 0x20
	[0192.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\flyout.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\flyout.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.757] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3016) returned 1
	[0192.757] CloseHandle (hObject=0x1f4) returned 1
	[0192.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css")) returned 0x20
	[0192.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css")) returned 0x20
	[0192.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\RSSFeeds.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\rssfeeds.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.758] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1254) returned 1
	[0192.758] CloseHandle (hObject=0x1f4) returned 1
	[0192.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0192.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0192.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.759] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2154) returned 1
	[0192.760] CloseHandle (hObject=0x1f4) returned 1
	[0192.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html")) returned 0x20
	[0192.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html")) returned 0x20
	[0192.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\flyout.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\flyout.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.761] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1005) returned 1
	[0192.761] CloseHandle (hObject=0x1f4) returned 1
	[0192.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml")) returned 0x20
	[0192.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml")) returned 0x20
	[0192.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.762] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=110308) returned 1
	[0192.762] CloseHandle (hObject=0x1f4) returned 1
	[0192.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js")) returned 0x20
	[0192.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js")) returned 0x20
	[0192.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\RSSFeeds.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\rssfeeds.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.763] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5542) returned 1
	[0192.763] CloseHandle (hObject=0x1f4) returned 1
	[0192.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0192.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0192.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.764] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10012) returned 1
	[0192.764] CloseHandle (hObject=0x1f4) returned 1
	[0192.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html")) returned 0x20
	[0192.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html")) returned 0x20
	[0192.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\RSSFeeds.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\rssfeeds.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.765] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3326) returned 1
	[0192.765] CloseHandle (hObject=0x1f4) returned 1
	[0192.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html")) returned 0x20
	[0192.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html")) returned 0x20
	[0192.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\settings.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.766] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7431) returned 1
	[0192.766] CloseHandle (hObject=0x1f4) returned 1
	[0192.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png")) returned 0x20
	[0192.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png")) returned 0x20
	[0192.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.768] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4969) returned 1
	[0192.768] CloseHandle (hObject=0x1f4) returned 1
	[0192.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif")) returned 0x20
	[0192.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif")) returned 0x20
	[0192.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\16-on-black.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\16-on-black.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.769] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=293) returned 1
	[0192.769] CloseHandle (hObject=0x1f4) returned 1
	[0192.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png")) returned 0x20
	[0192.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png")) returned 0x20
	[0192.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_off.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.770] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=463) returned 1
	[0192.770] CloseHandle (hObject=0x1f4) returned 1
	[0192.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png")) returned 0x20
	[0192.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png")) returned 0x20
	[0192.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonDown_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttondown_on.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.771] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=280) returned 1
	[0192.772] CloseHandle (hObject=0x1f4) returned 1
	[0192.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png")) returned 0x20
	[0192.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png")) returned 0x20
	[0192.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_Off.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_off.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.773] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=451) returned 1
	[0192.773] CloseHandle (hObject=0x1f4) returned 1
	[0192.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png")) returned 0x20
	[0192.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png")) returned 0x20
	[0192.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\buttonUp_On.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\buttonup_on.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.774] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4395) returned 1
	[0192.774] CloseHandle (hObject=0x1f4) returned 1
	[0192.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png")) returned 0x20
	[0192.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png")) returned 0x20
	[0192.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\flyoutBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\flyoutback.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.775] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=252) returned 1
	[0192.775] CloseHandle (hObject=0x1f4) returned 1
	[0192.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png")) returned 0x20
	[0192.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png")) returned 0x20
	[0192.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_docked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.776] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2979) returned 1
	[0192.776] CloseHandle (hObject=0x1f4) returned 1
	[0192.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png")) returned 0x20
	[0192.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png")) returned 0x20
	[0192.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_floating.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.997] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2926) returned 1
	[0192.997] CloseHandle (hObject=0x20c) returned 1
	[0192.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png")) returned 0x20
	[0192.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png")) returned 0x20
	[0192.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\item_hover_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\item_hover_flyout.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0192.999] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3161) returned 1
	[0192.999] CloseHandle (hObject=0x20c) returned 1
	[0192.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png")) returned 0x20
	[0192.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png")) returned 0x20
	[0192.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.000] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2982) returned 1
	[0193.000] CloseHandle (hObject=0x20c) returned 1
	[0193.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png")) returned 0x20
	[0193.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png")) returned 0x20
	[0193.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.001] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=400256) returned 1
	[0193.001] CloseHandle (hObject=0x20c) returned 1
	[0193.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg")) returned 0x20
	[0193.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg")) returned 0x20
	[0193.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\Tulip.jpg" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\tulip.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.002] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6166) returned 1
	[0193.002] CloseHandle (hObject=0x20c) returned 1
	[0193.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png")) returned 0x20
	[0193.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png")) returned 0x20
	[0193.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.003] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12896) returned 1
	[0193.003] CloseHandle (hObject=0x20c) returned 1
	[0193.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png")) returned 0x20
	[0193.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png")) returned 0x20
	[0193.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.005] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=974) returned 1
	[0193.005] CloseHandle (hObject=0x20c) returned 1
	[0193.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css")) returned 0x20
	[0193.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css")) returned 0x20
	[0193.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.006] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10118) returned 1
	[0193.006] CloseHandle (hObject=0x20c) returned 1
	[0193.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0193.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0193.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.008] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24636) returned 1
	[0193.008] CloseHandle (hObject=0x20c) returned 1
	[0193.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css")) returned 0x20
	[0193.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css")) returned 0x20
	[0193.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.010] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1990) returned 1
	[0193.010] CloseHandle (hObject=0x20c) returned 1
	[0193.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml")) returned 0x20
	[0193.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml")) returned 0x20
	[0193.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.012] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1820) returned 1
	[0193.012] CloseHandle (hObject=0x20c) returned 1
	[0193.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js")) returned 0x20
	[0193.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js")) returned 0x20
	[0193.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.013] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43776) returned 1
	[0193.013] CloseHandle (hObject=0x20c) returned 1
	[0193.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js")) returned 0x20
	[0193.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js")) returned 0x20
	[0193.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.014] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14476) returned 1
	[0193.014] CloseHandle (hObject=0x20c) returned 1
	[0193.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js")) returned 0x20
	[0193.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js")) returned 0x20
	[0193.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.015] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57960) returned 1
	[0193.015] CloseHandle (hObject=0x20c) returned 1
	[0193.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0193.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0193.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.017] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=135370) returned 1
	[0193.017] CloseHandle (hObject=0x20c) returned 1
	[0193.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js")) returned 0x20
	[0193.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js")) returned 0x20
	[0193.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.018] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8382) returned 1
	[0193.018] CloseHandle (hObject=0x20c) returned 1
	[0193.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html")) returned 0x20
	[0193.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html")) returned 0x20
	[0193.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.019] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16190) returned 1
	[0193.019] CloseHandle (hObject=0x20c) returned 1
	[0193.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html")) returned 0x20
	[0193.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html")) returned 0x20
	[0193.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.020] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12960) returned 1
	[0193.020] CloseHandle (hObject=0x20c) returned 1
	[0193.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\icon.png")) returned 0x20
	[0193.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\icon.png")) returned 0x20
	[0193.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.206] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5206) returned 1
	[0193.206] CloseHandle (hObject=0x228) returned 1
	[0193.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png")) returned 0x20
	[0193.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png")) returned 0x20
	[0193.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.208] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=993) returned 1
	[0193.208] CloseHandle (hObject=0x228) returned 1
	[0193.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png")) returned 0x20
	[0193.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png")) returned 0x20
	[0193.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.211] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=578) returned 1
	[0193.211] CloseHandle (hObject=0x228) returned 1
	[0193.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png")) returned 0x20
	[0193.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png")) returned 0x20
	[0193.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.212] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=752) returned 1
	[0193.212] CloseHandle (hObject=0x228) returned 1
	[0193.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png")) returned 0x20
	[0193.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png")) returned 0x20
	[0193.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)greenstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.213] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=963) returned 1
	[0193.213] CloseHandle (hObject=0x228) returned 1
	[0193.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png")) returned 0x20
	[0193.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png")) returned 0x20
	[0193.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.215] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=963) returned 1
	[0193.215] CloseHandle (hObject=0x228) returned 1
	[0193.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png")) returned 0x20
	[0193.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png")) returned 0x20
	[0193.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.216] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4066) returned 1
	[0193.216] CloseHandle (hObject=0x228) returned 1
	[0193.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png")) returned 0x20
	[0193.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png")) returned 0x20
	[0193.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.217] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4066) returned 1
	[0193.217] CloseHandle (hObject=0x228) returned 1
	[0193.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png")) returned 0x20
	[0193.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png")) returned 0x20
	[0193.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.218] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7182) returned 1
	[0193.218] CloseHandle (hObject=0x228) returned 1
	[0193.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png")) returned 0x20
	[0193.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png")) returned 0x20
	[0193.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.219] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7182) returned 1
	[0193.219] CloseHandle (hObject=0x228) returned 1
	[0193.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png")) returned 0x20
	[0193.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png")) returned 0x20
	[0193.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.220] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6073) returned 1
	[0193.220] CloseHandle (hObject=0x228) returned 1
	[0193.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png")) returned 0x20
	[0193.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png")) returned 0x20
	[0193.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.221] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43) returned 1
	[0193.221] CloseHandle (hObject=0x228) returned 1
	[0193.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif")) returned 0x20
	[0193.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif")) returned 0x20
	[0193.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1px.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\1px.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.223] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5206) returned 1
	[0193.223] CloseHandle (hObject=0x228) returned 1
	[0193.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png")) returned 0x20
	[0193.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png")) returned 0x20
	[0193.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.224] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6073) returned 1
	[0193.224] CloseHandle (hObject=0x228) returned 1
	[0193.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png")) returned 0x20
	[0193.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png")) returned 0x20
	[0193.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.225] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6073) returned 1
	[0193.225] CloseHandle (hObject=0x228) returned 1
	[0193.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png")) returned 0x20
	[0193.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png")) returned 0x20
	[0193.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.226] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6073) returned 1
	[0193.226] CloseHandle (hObject=0x228) returned 1
	[0193.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png")) returned 0x20
	[0193.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png")) returned 0x20
	[0193.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.227] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5573) returned 1
	[0193.227] CloseHandle (hObject=0x228) returned 1
	[0193.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png")) returned 0x20
	[0193.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png")) returned 0x20
	[0193.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.228] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5573) returned 1
	[0193.228] CloseHandle (hObject=0x228) returned 1
	[0193.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png")) returned 0x20
	[0193.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png")) returned 0x20
	[0193.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.375] SetEvent (hEvent=0xfc) returned 1
	[0193.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.706] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5457) returned 1
	[0193.706] CloseHandle (hObject=0x23c) returned 1
	[0193.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png")) returned 0x20
	[0193.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png")) returned 0x20
	[0193.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.707] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10958) returned 1
	[0193.707] CloseHandle (hObject=0x23c) returned 1
	[0193.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png")) returned 0x20
	[0193.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png")) returned 0x20
	[0193.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.710] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8804) returned 1
	[0193.710] CloseHandle (hObject=0x23c) returned 1
	[0193.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png")) returned 0x20
	[0193.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png")) returned 0x20
	[0193.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.711] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11053) returned 1
	[0193.711] CloseHandle (hObject=0x23c) returned 1
	[0193.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png")) returned 0x20
	[0193.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png")) returned 0x20
	[0193.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.712] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8621) returned 1
	[0193.712] CloseHandle (hObject=0x23c) returned 1
	[0193.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png")) returned 0x20
	[0193.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png")) returned 0x20
	[0193.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.713] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11142) returned 1
	[0193.713] CloseHandle (hObject=0x23c) returned 1
	[0193.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png")) returned 0x20
	[0193.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png")) returned 0x20
	[0193.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.715] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9498) returned 1
	[0193.715] CloseHandle (hObject=0x23c) returned 1
	[0193.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png")) returned 0x20
	[0193.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png")) returned 0x20
	[0193.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.716] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11631) returned 1
	[0193.716] CloseHandle (hObject=0x23c) returned 1
	[0193.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png")) returned 0x20
	[0193.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png")) returned 0x20
	[0193.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.717] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9012) returned 1
	[0193.717] CloseHandle (hObject=0x23c) returned 1
	[0193.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png")) returned 0x20
	[0193.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png")) returned 0x20
	[0193.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.718] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11379) returned 1
	[0193.718] CloseHandle (hObject=0x23c) returned 1
	[0193.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png")) returned 0x20
	[0193.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png")) returned 0x20
	[0193.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.719] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8636) returned 1
	[0193.719] CloseHandle (hObject=0x23c) returned 1
	[0193.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png")) returned 0x20
	[0193.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png")) returned 0x20
	[0193.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.720] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11061) returned 1
	[0193.720] CloseHandle (hObject=0x23c) returned 1
	[0193.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png")) returned 0x20
	[0193.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png")) returned 0x20
	[0193.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.721] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8870) returned 1
	[0193.721] CloseHandle (hObject=0x23c) returned 1
	[0193.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png")) returned 0x20
	[0193.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png")) returned 0x20
	[0193.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.723] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11038) returned 1
	[0193.723] CloseHandle (hObject=0x23c) returned 1
	[0193.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png")) returned 0x20
	[0193.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png")) returned 0x20
	[0193.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.724] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8707) returned 1
	[0193.724] CloseHandle (hObject=0x23c) returned 1
	[0193.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png")) returned 0x20
	[0193.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png")) returned 0x20
	[0193.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.726] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11101) returned 1
	[0193.726] CloseHandle (hObject=0x23c) returned 1
	[0193.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png")) returned 0x20
	[0193.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png")) returned 0x20
	[0193.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.727] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12659) returned 1
	[0193.727] CloseHandle (hObject=0x23c) returned 1
	[0193.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png")) returned 0x20
	[0193.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png")) returned 0x20
	[0193.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.728] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13161) returned 1
	[0193.728] CloseHandle (hObject=0x23c) returned 1
	[0193.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png")) returned 0x20
	[0193.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png")) returned 0x20
	[0193.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.729] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12239) returned 1
	[0193.729] CloseHandle (hObject=0x23c) returned 1
	[0193.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png")) returned 0x20
	[0193.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png")) returned 0x20
	[0193.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.730] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12841) returned 1
	[0193.730] CloseHandle (hObject=0x23c) returned 1
	[0193.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png")) returned 0x20
	[0193.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png")) returned 0x20
	[0193.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.731] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8609) returned 1
	[0193.731] CloseHandle (hObject=0x23c) returned 1
	[0193.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png")) returned 0x20
	[0193.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png")) returned 0x20
	[0193.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.732] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11939) returned 1
	[0193.732] CloseHandle (hObject=0x23c) returned 1
	[0193.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png")) returned 0x20
	[0193.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png")) returned 0x20
	[0193.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.733] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11493) returned 1
	[0193.733] CloseHandle (hObject=0x23c) returned 1
	[0193.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png")) returned 0x20
	[0193.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png")) returned 0x20
	[0193.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.734] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12998) returned 1
	[0193.735] CloseHandle (hObject=0x23c) returned 1
	[0193.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png")) returned 0x20
	[0193.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png")) returned 0x20
	[0193.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.736] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10537) returned 1
	[0193.736] CloseHandle (hObject=0x23c) returned 1
	[0193.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png")) returned 0x20
	[0193.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png")) returned 0x20
	[0193.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.737] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10704) returned 1
	[0193.737] CloseHandle (hObject=0x23c) returned 1
	[0193.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png")) returned 0x20
	[0193.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png")) returned 0x20
	[0193.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.738] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10044) returned 1
	[0193.738] CloseHandle (hObject=0x23c) returned 1
	[0193.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png")) returned 0x20
	[0193.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png")) returned 0x20
	[0193.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.739] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12401) returned 1
	[0193.739] CloseHandle (hObject=0x23c) returned 1
	[0193.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png")) returned 0x20
	[0193.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png")) returned 0x20
	[0193.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_hail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.740] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12883) returned 1
	[0193.740] CloseHandle (hObject=0x23c) returned 1
	[0193.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png")) returned 0x20
	[0193.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png")) returned 0x20
	[0193.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_rainy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.741] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12974) returned 1
	[0193.741] CloseHandle (hObject=0x23c) returned 1
	[0193.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png")) returned 0x20
	[0193.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png")) returned 0x20
	[0193.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.742] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12757) returned 1
	[0193.742] CloseHandle (hObject=0x23c) returned 1
	[0193.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png")) returned 0x20
	[0193.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png")) returned 0x20
	[0193.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.967] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=325) returned 1
	[0193.967] CloseHandle (hObject=0x23c) returned 1
	[0193.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png")) returned 0x20
	[0193.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png")) returned 0x20
	[0193.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.968] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39992) returned 1
	[0193.968] CloseHandle (hObject=0x23c) returned 1
	[0193.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png")) returned 0x20
	[0193.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png")) returned 0x20
	[0193.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.969] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27357) returned 1
	[0193.969] CloseHandle (hObject=0x23c) returned 1
	[0193.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png")) returned 0x20
	[0193.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png")) returned 0x20
	[0193.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.970] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41932) returned 1
	[0193.970] CloseHandle (hObject=0x23c) returned 1
	[0193.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png")) returned 0x20
	[0193.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png")) returned 0x20
	[0193.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.971] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=36702) returned 1
	[0193.971] CloseHandle (hObject=0x23c) returned 1
	[0193.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png")) returned 0x20
	[0193.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png")) returned 0x20
	[0193.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.972] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=48212) returned 1
	[0193.972] CloseHandle (hObject=0x23c) returned 1
	[0193.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png")) returned 0x20
	[0193.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png")) returned 0x20
	[0193.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.974] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33156) returned 1
	[0193.974] CloseHandle (hObject=0x23c) returned 1
	[0193.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png")) returned 0x20
	[0193.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png")) returned 0x20
	[0193.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.975] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33872) returned 1
	[0193.975] CloseHandle (hObject=0x23c) returned 1
	[0193.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png")) returned 0x20
	[0193.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png")) returned 0x20
	[0193.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.976] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35133) returned 1
	[0193.976] CloseHandle (hObject=0x23c) returned 1
	[0193.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png")) returned 0x20
	[0193.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png")) returned 0x20
	[0193.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.977] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=38152) returned 1
	[0193.977] CloseHandle (hObject=0x23c) returned 1
	[0193.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png")) returned 0x20
	[0193.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png")) returned 0x20
	[0193.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.978] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42818) returned 1
	[0193.978] CloseHandle (hObject=0x23c) returned 1
	[0193.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png")) returned 0x20
	[0193.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png")) returned 0x20
	[0193.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.979] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41183) returned 1
	[0193.979] CloseHandle (hObject=0x23c) returned 1
	[0193.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png")) returned 0x20
	[0193.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png")) returned 0x20
	[0193.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.980] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37584) returned 1
	[0193.980] CloseHandle (hObject=0x23c) returned 1
	[0193.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png")) returned 0x20
	[0193.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png")) returned 0x20
	[0193.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.981] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5930) returned 1
	[0193.981] CloseHandle (hObject=0x23c) returned 1
	[0193.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\logo.png")) returned 0x20
	[0193.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\logo.png")) returned 0x20
	[0193.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" (normalized: "c:\\program files (x86)\\windows sidebar\\sbdrop.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.982] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=82944) returned 1
	[0193.983] CloseHandle (hObject=0x23c) returned 1
	[0193.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" (normalized: "c:\\program files (x86)\\windows sidebar\\sbdrop.dll")) returned 0x20
	[0193.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" (normalized: "c:\\program files (x86)\\windows sidebar\\sbdrop.dll")) returned 0x20
	[0193.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\sbdrop.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\sbdrop.dll" (normalized: "c:\\program files (x86)\\windows sidebar\\sbdrop.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\settings.ini" (normalized: "c:\\program files (x86)\\windows sidebar\\settings.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.984] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=80) returned 1
	[0193.984] CloseHandle (hObject=0x23c) returned 1
	[0193.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\settings.ini" (normalized: "c:\\program files (x86)\\windows sidebar\\settings.ini")) returned 0x20
	[0193.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\settings.ini" (normalized: "c:\\program files (x86)\\windows sidebar\\settings.ini")) returned 0x20
	[0193.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\settings.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\settings.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\settings.ini" (normalized: "c:\\program files (x86)\\windows sidebar\\settings.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\sidebar.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.985] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1174016) returned 1
	[0193.985] CloseHandle (hObject=0x23c) returned 1
	[0193.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\sidebar.exe")) returned 0x20
	[0193.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\sidebar.exe")) returned 0x20
	[0193.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\sidebar.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\sidebar.exe" (normalized: "c:\\program files (x86)\\windows sidebar\\sidebar.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" (normalized: "c:\\program files (x86)\\windows sidebar\\wlsrvc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.986] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=108544) returned 1
	[0193.986] CloseHandle (hObject=0x23c) returned 1
	[0193.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" (normalized: "c:\\program files (x86)\\windows sidebar\\wlsrvc.dll")) returned 0x20
	[0193.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" (normalized: "c:\\program files (x86)\\windows sidebar\\wlsrvc.dll")) returned 0x20
	[0193.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\wlsrvc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\wlsrvc.dll" (normalized: "c:\\program files (x86)\\windows sidebar\\wlsrvc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.986] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0193.987] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=479) returned 1
	[0193.987] CloseHandle (hObject=0x23c) returned 1
	[0193.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata")) returned 0x2020
	[0193.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata")) returned 0x2020
	[0193.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.987] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.988] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0194.274] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=251904) returned 1
	[0194.274] CloseHandle (hObject=0x22c) returned 1
	[0194.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp")) returned 0x20
	[0194.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp")) returned 0x20
	[0194.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0194.275] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0194.275] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0194.275] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0194.275] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x230
	[0194.276] ReadFile (in: hFile=0x22c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3d800, lpOverlapped=0x0) returned 1
	[0194.290] WriteFile (in: hFile=0x230, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3d810, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3d810, lpOverlapped=0x0) returned 1
	[0194.294] WriteFile (in: hFile=0x230, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0194.295] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0194.295] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0194.295] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3d800, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3d800, lpOverlapped=0x0) returned 1
	[0194.295] FlushFileBuffers (hFile=0x22c) returned 1
	[0194.964] FlushFileBuffers (hFile=0x230) returned 1
	[0195.398] CloseHandle (hObject=0x22c) returned 1
	[0195.399] CloseHandle (hObject=0x230) returned 1
	[0195.399] DeleteFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp")) returned 1
	[0195.402] SetEvent (hEvent=0xfc) returned 1
	[0195.402] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0195.403] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17420288) returned 1
	[0195.403] CloseHandle (hObject=0x230) returned 1
	[0195.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp")) returned 0x20
	[0195.403] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp"), lpNewFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0195.404] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0195.404] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0195.404] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0195.404] ReadFile (in: hFile=0x230, lpBuffer=0x36c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x36c0058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0195.409] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x589aaa, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0195.409] ReadFile (in: hFile=0x230, lpBuffer=0x3700058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x3700058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0195.415] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x105d000, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0195.415] ReadFile (in: hFile=0x230, lpBuffer=0x3740058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x3740058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0195.428] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd0 | out: lpNewFilePointer=0x0) returned 1
	[0195.428] WriteFile (in: hFile=0x230, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0122, lpNumberOfBytesWritten=0x322fbc8, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc8*=0xc0122, lpOverlapped=0x0) returned 1
	[0195.587] SetEndOfFile (hFile=0x230) returned 1
	[0195.587] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x105d000, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0195.587] WriteFile (in: hFile=0x230, lpBuffer=0x378015a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378015a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0195.589] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x589aaa, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0195.589] WriteFile (in: hFile=0x230, lpBuffer=0x378015a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378015a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0195.590] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0195.590] WriteFile (in: hFile=0x230, lpBuffer=0x378015a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378015a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0195.591] FlushFileBuffers (hFile=0x230) returned 1
	[0197.019] CloseHandle (hObject=0x230) returned 1
	[0197.020] SetEvent (hEvent=0xfc) returned 1
	[0197.020] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.208] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53411) returned 1
	[0197.208] CloseHandle (hObject=0x26c) returned 1
	[0197.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico")) returned 0x20
	[0197.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico")) returned 0x20
	[0197.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.209] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.209] SetEvent (hEvent=0xfc) returned 1
	[0197.209] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.210] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=94048) returned 1
	[0197.210] CloseHandle (hObject=0x26c) returned 1
	[0197.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll")) returned 0x2020
	[0197.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll")) returned 0x2020
	[0197.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.210] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.210] SetEvent (hEvent=0xfc) returned 1
	[0197.211] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.212] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2827616) returned 1
	[0197.212] CloseHandle (hObject=0x26c) returned 1
	[0197.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll")) returned 0x2020
	[0197.212] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), lpNewFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0197.212] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll")) returned 0
	[0197.212] SetEvent (hEvent=0xfc) returned 1
	[0197.212] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.213] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45920) returned 1
	[0197.213] CloseHandle (hObject=0x26c) returned 1
	[0197.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll")) returned 0x2020
	[0197.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll")) returned 0x2020
	[0197.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.213] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.213] SetEvent (hEvent=0xfc) returned 1
	[0197.214] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.215] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31584) returned 1
	[0197.215] CloseHandle (hObject=0x26c) returned 1
	[0197.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll")) returned 0x2020
	[0197.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll")) returned 0x2020
	[0197.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.215] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.215] SetEvent (hEvent=0xfc) returned 1
	[0197.215] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.216] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=252256) returned 1
	[0197.216] CloseHandle (hObject=0x26c) returned 1
	[0197.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll")) returned 0x2020
	[0197.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll")) returned 0x2020
	[0197.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.216] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.216] SetEvent (hEvent=0xfc) returned 1
	[0197.217] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.218] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=219488) returned 1
	[0197.218] CloseHandle (hObject=0x26c) returned 1
	[0197.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll")) returned 0x2020
	[0197.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll")) returned 0x2020
	[0197.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.218] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.218] SetEvent (hEvent=0xfc) returned 1
	[0197.219] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.219] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=652640) returned 1
	[0197.219] CloseHandle (hObject=0x26c) returned 1
	[0197.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll")) returned 0x2020
	[0197.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll")) returned 0x2020
	[0197.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.219] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.220] SetEvent (hEvent=0xfc) returned 1
	[0197.221] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.221] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11616) returned 1
	[0197.221] CloseHandle (hObject=0x26c) returned 1
	[0197.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll")) returned 0x2020
	[0197.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll")) returned 0x2020
	[0197.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.221] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.221] SetEvent (hEvent=0xfc) returned 1
	[0197.222] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.222] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53600) returned 1
	[0197.222] CloseHandle (hObject=0x26c) returned 1
	[0197.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll")) returned 0x2020
	[0197.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll")) returned 0x2020
	[0197.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.223] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.223] SetEvent (hEvent=0xfc) returned 1
	[0197.224] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.224] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=275808) returned 1
	[0197.224] CloseHandle (hObject=0x26c) returned 1
	[0197.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll")) returned 0x2020
	[0197.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll")) returned 0x2020
	[0197.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.225] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.225] SetEvent (hEvent=0xfc) returned 1
	[0197.225] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.226] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=107872) returned 1
	[0197.226] CloseHandle (hObject=0x26c) returned 1
	[0197.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll")) returned 0x2020
	[0197.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll")) returned 0x2020
	[0197.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.226] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.226] SetEvent (hEvent=0xfc) returned 1
	[0197.226] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.227] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=556896) returned 1
	[0197.227] CloseHandle (hObject=0x26c) returned 1
	[0197.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll")) returned 0x2020
	[0197.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll")) returned 0x2020
	[0197.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.227] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.227] SetEvent (hEvent=0xfc) returned 1
	[0197.228] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.229] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=360288) returned 1
	[0197.229] CloseHandle (hObject=0x26c) returned 1
	[0197.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll")) returned 0x2020
	[0197.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll")) returned 0x2020
	[0197.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.229] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.229] SetEvent (hEvent=0xfc) returned 1
	[0197.230] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.230] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13152) returned 1
	[0197.230] CloseHandle (hObject=0x26c) returned 1
	[0197.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll")) returned 0x2020
	[0197.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll")) returned 0x2020
	[0197.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.230] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.230] SetEvent (hEvent=0xfc) returned 1
	[0197.231] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.232] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17248) returned 1
	[0197.232] CloseHandle (hObject=0x26c) returned 1
	[0197.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll")) returned 0x2020
	[0197.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll")) returned 0x2020
	[0197.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.232] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.232] SetEvent (hEvent=0xfc) returned 1
	[0197.233] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.233] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=26976) returned 1
	[0197.233] CloseHandle (hObject=0x26c) returned 1
	[0197.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll")) returned 0x2020
	[0197.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll")) returned 0x2020
	[0197.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.233] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.234] SetEvent (hEvent=0xfc) returned 1
	[0197.235] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.235] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=473440) returned 1
	[0197.235] CloseHandle (hObject=0x26c) returned 1
	[0197.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll")) returned 0x2020
	[0197.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll")) returned 0x2020
	[0197.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.235] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.236] SetEvent (hEvent=0xfc) returned 1
	[0197.236] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.236] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=148320) returned 1
	[0197.236] CloseHandle (hObject=0x26c) returned 1
	[0197.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll")) returned 0x2020
	[0197.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll")) returned 0x2020
	[0197.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.237] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.237] SetEvent (hEvent=0xfc) returned 1
	[0197.238] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.238] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1117024) returned 1
	[0197.238] CloseHandle (hObject=0x26c) returned 1
	[0197.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll")) returned 0x2020
	[0197.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll")) returned 0x2020
	[0197.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.239] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.239] SetEvent (hEvent=0xfc) returned 1
	[0197.239] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.240] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=145760) returned 1
	[0197.240] CloseHandle (hObject=0x26c) returned 1
	[0197.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll")) returned 0x2020
	[0197.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll")) returned 0x2020
	[0197.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.240] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.240] SetEvent (hEvent=0xfc) returned 1
	[0197.241] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.242] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1206112) returned 1
	[0197.242] CloseHandle (hObject=0x26c) returned 1
	[0197.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll")) returned 0x2020
	[0197.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll")) returned 0x2020
	[0197.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.242] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.242] SetEvent (hEvent=0xfc) returned 1
	[0197.242] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0197.243] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14688) returned 1
	[0197.243] CloseHandle (hObject=0x26c) returned 1
	[0197.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll")) returned 0x2020
	[0197.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll")) returned 0x2020
	[0197.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.243] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.243] SetEvent (hEvent=0xfc) returned 1
	[0197.244] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0197.553] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=262768) returned 1
	[0197.555] CloseHandle (hObject=0x274) returned 1
	[0197.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat")) returned 0x2020
	[0197.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat")) returned 0x2020
	[0197.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.590] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.595] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.846] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=49208) returned 1
	[0197.846] CloseHandle (hObject=0x270) returned 1
	[0197.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp")) returned 0x20
	[0197.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp")) returned 0x20
	[0197.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.846] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.847] SetEvent (hEvent=0xfc) returned 1
	[0197.849] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.995] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=112353) returned 1
	[0198.017] CloseHandle (hObject=0x260) returned 1
	[0198.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma")) returned 0x20
	[0198.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma")) returned 0x20
	[0198.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.029] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.029] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0198.030] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1130) returned 1
	[0198.030] CloseHandle (hObject=0x260) returned 1
	[0198.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\desktop.ini")) returned 0x26
	[0198.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\desktop.ini")) returned 0x26
	[0198.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.030] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.030] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0198.031] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=520) returned 1
	[0198.031] CloseHandle (hObject=0x260) returned 1
	[0198.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\desktop.ini")) returned 0x26
	[0198.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\desktop.ini")) returned 0x26
	[0198.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.031] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.031] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0198.032] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=258) returned 1
	[0198.032] CloseHandle (hObject=0x260) returned 1
	[0198.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk")) returned 0x20
	[0198.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk")) returned 0x20
	[0198.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.032] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.032] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.205] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2269) returned 1
	[0198.206] CloseHandle (hObject=0x274) returned 1
	[0198.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\google chrome.lnk")) returned 0x20
	[0198.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\google chrome.lnk")) returned 0x20
	[0198.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\google chrome.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.206] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.206] SetEvent (hEvent=0xfc) returned 1
	[0198.206] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.207] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1999) returned 1
	[0198.207] CloseHandle (hObject=0x274) returned 1
	[0198.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk")) returned 0x20
	[0198.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk")) returned 0x20
	[0198.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.207] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.208] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.208] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2017) returned 1
	[0198.208] CloseHandle (hObject=0x274) returned 1
	[0198.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk")) returned 0x20
	[0198.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk")) returned 0x20
	[0198.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.209] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.209] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.209] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1975) returned 1
	[0198.209] CloseHandle (hObject=0x274) returned 1
	[0198.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk")) returned 0x20
	[0198.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk")) returned 0x20
	[0198.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.210] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.210] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.210] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1206) returned 1
	[0198.210] CloseHandle (hObject=0x274) returned 1
	[0198.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk")) returned 0x20
	[0198.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk")) returned 0x20
	[0198.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.211] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.211] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.211] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1114) returned 1
	[0198.211] CloseHandle (hObject=0x274) returned 1
	[0198.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk")) returned 0x20
	[0198.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk")) returned 0x20
	[0198.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.212] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.212] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.212] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1304) returned 1
	[0198.212] CloseHandle (hObject=0x274) returned 1
	[0198.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk")) returned 0x20
	[0198.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk")) returned 0x20
	[0198.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.213] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.213] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.213] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1248) returned 1
	[0198.213] CloseHandle (hObject=0x274) returned 1
	[0198.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk")) returned 0x20
	[0198.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk")) returned 0x20
	[0198.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.214] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.214] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.214] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=606) returned 1
	[0198.214] CloseHandle (hObject=0x274) returned 1
	[0198.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini")) returned 0x26
	[0198.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini")) returned 0x26
	[0198.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.215] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.215] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.215] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1212) returned 1
	[0198.215] CloseHandle (hObject=0x274) returned 1
	[0198.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk")) returned 0x20
	[0198.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk")) returned 0x20
	[0198.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.216] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.216] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\media center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.221] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1345) returned 1
	[0198.221] CloseHandle (hObject=0x25c) returned 1
	[0198.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\media center.lnk")) returned 0x20
	[0198.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\media center.lnk")) returned 0x20
	[0198.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\media center.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.221] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\media center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.221] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.222] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2919) returned 1
	[0198.222] CloseHandle (hObject=0x25c) returned 1
	[0198.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk")) returned 0x20
	[0198.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk")) returned 0x20
	[0198.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.223] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.223] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.223] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2951) returned 1
	[0198.223] CloseHandle (hObject=0x25c) returned 1
	[0198.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk")) returned 0x20
	[0198.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk")) returned 0x20
	[0198.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.224] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.224] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.225] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3042) returned 1
	[0198.225] CloseHandle (hObject=0x274) returned 1
	[0198.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk")) returned 0x20
	[0198.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk")) returned 0x20
	[0198.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.225] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.226] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.226] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3026) returned 1
	[0198.226] CloseHandle (hObject=0x274) returned 1
	[0198.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk")) returned 0x20
	[0198.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk")) returned 0x20
	[0198.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.226] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.227] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.228] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2977) returned 1
	[0198.228] CloseHandle (hObject=0x25c) returned 1
	[0198.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk")) returned 0x20
	[0198.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk")) returned 0x20
	[0198.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.229] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.229] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.230] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2917) returned 1
	[0198.230] CloseHandle (hObject=0x25c) returned 1
	[0198.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk")) returned 0x20
	[0198.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk")) returned 0x20
	[0198.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.230] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.230] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.231] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2751) returned 1
	[0198.231] CloseHandle (hObject=0x25c) returned 1
	[0198.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk")) returned 0x20
	[0198.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk")) returned 0x20
	[0198.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.231] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.231] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.232] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2837) returned 1
	[0198.232] CloseHandle (hObject=0x25c) returned 1
	[0198.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk")) returned 0x20
	[0198.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk")) returned 0x20
	[0198.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.232] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.232] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.233] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2875) returned 1
	[0198.233] CloseHandle (hObject=0x25c) returned 1
	[0198.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk")) returned 0x20
	[0198.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk")) returned 0x20
	[0198.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.233] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.233] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.234] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2999) returned 1
	[0198.234] CloseHandle (hObject=0x25c) returned 1
	[0198.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk")) returned 0x20
	[0198.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk")) returned 0x20
	[0198.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.235] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.235] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.236] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2879) returned 1
	[0198.236] CloseHandle (hObject=0x25c) returned 1
	[0198.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk")) returned 0x20
	[0198.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk")) returned 0x20
	[0198.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.236] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.236] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.237] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3029) returned 1
	[0198.237] CloseHandle (hObject=0x25c) returned 1
	[0198.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk")) returned 0x20
	[0198.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk")) returned 0x20
	[0198.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.237] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.237] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.238] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2937) returned 1
	[0198.238] CloseHandle (hObject=0x25c) returned 1
	[0198.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk")) returned 0x20
	[0198.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk")) returned 0x20
	[0198.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.238] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.239] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.239] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2935) returned 1
	[0198.239] CloseHandle (hObject=0x25c) returned 1
	[0198.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk")) returned 0x20
	[0198.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk")) returned 0x20
	[0198.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.239] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.240] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.240] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3041) returned 1
	[0198.240] CloseHandle (hObject=0x25c) returned 1
	[0198.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk")) returned 0x20
	[0198.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk")) returned 0x20
	[0198.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.240] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.241] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.241] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3055) returned 1
	[0198.241] CloseHandle (hObject=0x25c) returned 1
	[0198.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk")) returned 0x20
	[0198.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk")) returned 0x20
	[0198.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.241] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.242] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.242] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2767) returned 1
	[0198.242] CloseHandle (hObject=0x25c) returned 1
	[0198.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk")) returned 0x20
	[0198.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk")) returned 0x20
	[0198.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.242] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.243] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.243] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3021) returned 1
	[0198.243] CloseHandle (hObject=0x25c) returned 1
	[0198.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk")) returned 0x20
	[0198.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk")) returned 0x20
	[0198.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.243] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.244] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.244] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1169) returned 1
	[0198.244] CloseHandle (hObject=0x25c) returned 1
	[0198.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk")) returned 0x20
	[0198.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk")) returned 0x20
	[0198.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.244] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.245] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.246] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3055) returned 1
	[0198.246] CloseHandle (hObject=0x25c) returned 1
	[0198.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk")) returned 0x20
	[0198.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk")) returned 0x20
	[0198.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.246] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.246] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.247] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1330) returned 1
	[0198.247] CloseHandle (hObject=0x25c) returned 1
	[0198.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sidebar.lnk")) returned 0x20
	[0198.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sidebar.lnk")) returned 0x20
	[0198.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sidebar.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.247] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.247] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.248] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=174) returned 1
	[0198.248] CloseHandle (hObject=0x25c) returned 1
	[0198.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini")) returned 0x26
	[0198.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini")) returned 0x26
	[0198.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.248] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.248] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.249] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1352) returned 1
	[0198.249] CloseHandle (hObject=0x25c) returned 1
	[0198.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk")) returned 0x20
	[0198.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk")) returned 0x20
	[0198.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.249] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.249] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.250] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1326) returned 1
	[0198.250] CloseHandle (hObject=0x25c) returned 1
	[0198.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk")) returned 0x20
	[0198.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk")) returned 0x20
	[0198.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.250] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.250] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.251] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1210) returned 1
	[0198.251] CloseHandle (hObject=0x25c) returned 1
	[0198.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk")) returned 0x20
	[0198.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk")) returned 0x20
	[0198.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.251] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.251] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.404] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1547) returned 1
	[0198.404] CloseHandle (hObject=0x25c) returned 1
	[0198.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows media player.lnk")) returned 0x20
	[0198.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows media player.lnk")) returned 0x20
	[0198.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows media player.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.404] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.404] SetEvent (hEvent=0xfc) returned 1
	[0198.405] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.406] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=332) returned 1
	[0198.406] CloseHandle (hObject=0x25c) returned 1
	[0198.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn")) returned 0x2022
	[0198.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn")) returned 0x2022
	[0198.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.406] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.406] SetEvent (hEvent=0xfc) returned 1
	[0198.406] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.407] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=344) returned 1
	[0198.407] CloseHandle (hObject=0x25c) returned 1
	[0198.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn")) returned 0x2022
	[0198.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn")) returned 0x2022
	[0198.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.407] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.407] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.408] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=380) returned 1
	[0198.408] CloseHandle (hObject=0x25c) returned 1
	[0198.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn")) returned 0x2022
	[0198.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn")) returned 0x2022
	[0198.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.408] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.408] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.410] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=344) returned 1
	[0198.410] CloseHandle (hObject=0x25c) returned 1
	[0198.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn")) returned 0x2022
	[0198.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn")) returned 0x2022
	[0198.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.411] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.411] SetEvent (hEvent=0xfc) returned 1
	[0198.411] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.411] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=368) returned 1
	[0198.411] CloseHandle (hObject=0x25c) returned 1
	[0198.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn")) returned 0x2022
	[0198.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn")) returned 0x2022
	[0198.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.412] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.412] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.412] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=326) returned 1
	[0198.412] CloseHandle (hObject=0x25c) returned 1
	[0198.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn")) returned 0x2022
	[0198.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn")) returned 0x2022
	[0198.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.413] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.413] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.413] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=326) returned 1
	[0198.413] CloseHandle (hObject=0x25c) returned 1
	[0198.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn")) returned 0x2022
	[0198.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn")) returned 0x2022
	[0198.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.414] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.414] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.414] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=350) returned 1
	[0198.414] CloseHandle (hObject=0x25c) returned 1
	[0198.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn")) returned 0x2022
	[0198.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn")) returned 0x2022
	[0198.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.415] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.415] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.415] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=332) returned 1
	[0198.415] CloseHandle (hObject=0x25c) returned 1
	[0198.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn")) returned 0x2022
	[0198.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn")) returned 0x2022
	[0198.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.416] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.416] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.416] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=314) returned 1
	[0198.416] CloseHandle (hObject=0x25c) returned 1
	[0198.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn")) returned 0x2022
	[0198.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn")) returned 0x2022
	[0198.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.417] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.417] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.417] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=338) returned 1
	[0198.417] CloseHandle (hObject=0x25c) returned 1
	[0198.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn")) returned 0x2022
	[0198.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn")) returned 0x2022
	[0198.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.418] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.418] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.421] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=338) returned 1
	[0198.421] CloseHandle (hObject=0x25c) returned 1
	[0198.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn")) returned 0x2022
	[0198.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn")) returned 0x2022
	[0198.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.421] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.422] SetEvent (hEvent=0xfc) returned 1
	[0198.422] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.422] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=362) returned 1
	[0198.422] CloseHandle (hObject=0x25c) returned 1
	[0198.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn")) returned 0x2022
	[0198.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn")) returned 0x2022
	[0198.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.422] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.423] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.423] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=344) returned 1
	[0198.423] CloseHandle (hObject=0x25c) returned 1
	[0198.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn")) returned 0x2022
	[0198.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn")) returned 0x2022
	[0198.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.423] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.424] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.424] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=368) returned 1
	[0198.424] CloseHandle (hObject=0x25c) returned 1
	[0198.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn")) returned 0x2022
	[0198.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn")) returned 0x2022
	[0198.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.425] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.425] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.425] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=338) returned 1
	[0198.425] CloseHandle (hObject=0x25c) returned 1
	[0198.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn")) returned 0x2022
	[0198.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn")) returned 0x2022
	[0198.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.426] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.426] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.428] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=326) returned 1
	[0198.428] CloseHandle (hObject=0x25c) returned 1
	[0198.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn")) returned 0x2022
	[0198.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn")) returned 0x2022
	[0198.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.430] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.430] SetEvent (hEvent=0xfc) returned 1
	[0198.430] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.430] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=350) returned 1
	[0198.430] CloseHandle (hObject=0x25c) returned 1
	[0198.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn")) returned 0x2022
	[0198.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn")) returned 0x2022
	[0198.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.431] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.431] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.431] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=392) returned 1
	[0198.431] CloseHandle (hObject=0x25c) returned 1
	[0198.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn")) returned 0x2022
	[0198.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn")) returned 0x2022
	[0198.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.432] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.432] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.432] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=350) returned 1
	[0198.432] CloseHandle (hObject=0x25c) returned 1
	[0198.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn")) returned 0x2022
	[0198.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn")) returned 0x2022
	[0198.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.433] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.433] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.433] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=350) returned 1
	[0198.434] CloseHandle (hObject=0x25c) returned 1
	[0198.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn")) returned 0x2022
	[0198.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn")) returned 0x2022
	[0198.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.434] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.434] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.436] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=338) returned 1
	[0198.436] CloseHandle (hObject=0x25c) returned 1
	[0198.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn")) returned 0x2022
	[0198.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn")) returned 0x2022
	[0198.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.436] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.436] SetEvent (hEvent=0xfc) returned 1
	[0198.436] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.438] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=362) returned 1
	[0198.438] CloseHandle (hObject=0x25c) returned 1
	[0198.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn")) returned 0x2022
	[0198.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn")) returned 0x2022
	[0198.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.439] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.439] SetEvent (hEvent=0xfc) returned 1
	[0198.439] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.440] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=338) returned 1
	[0198.440] CloseHandle (hObject=0x25c) returned 1
	[0198.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn")) returned 0x2022
	[0198.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn")) returned 0x2022
	[0198.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.440] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.440] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.441] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=362) returned 1
	[0198.441] CloseHandle (hObject=0x25c) returned 1
	[0198.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn")) returned 0x2022
	[0198.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn")) returned 0x2022
	[0198.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.441] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.441] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.442] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8668) returned 1
	[0198.442] CloseHandle (hObject=0x25c) returned 1
	[0198.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl")) returned 0x2022
	[0198.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl")) returned 0x2022
	[0198.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\nslist.hxl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.442] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.442] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.445] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=164) returned 1
	[0198.445] CloseHandle (hObject=0x230) returned 1
	[0198.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log")) returned 0x2020
	[0198.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log")) returned 0x2020
	[0198.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.445] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.445] SetEvent (hEvent=0xfc) returned 1
	[0198.445] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0198.451] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1012025) returned 1
	[0198.451] CloseHandle (hObject=0x22c) returned 1
	[0198.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu")) returned 0x20
	[0198.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu")) returned 0x20
	[0198.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.451] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.452] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.638] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1034556) returned 1
	[0198.638] CloseHandle (hObject=0x230) returned 1
	[0198.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu")) returned 0x20
	[0198.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu")) returned 0x20
	[0198.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.640] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.640] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0198.866] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=455576) returned 1
	[0198.866] CloseHandle (hObject=0x278) returned 1
	[0198.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe")) returned 0x20
	[0198.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe")) returned 0x20
	[0198.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.870] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.871] SetEvent (hEvent=0xfc) returned 1
	[0198.878] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0198.884] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=138459) returned 1
	[0198.884] CloseHandle (hObject=0x278) returned 1
	[0198.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst")) returned 0x2020
	[0198.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst")) returned 0x2020
	[0198.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.885] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0198.891] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0198.891] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0198.893] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0198.896] ReadFile (in: hFile=0x278, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x21cdb, lpOverlapped=0x0) returned 1
	[0198.899] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x21ce0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x21ce0, lpOverlapped=0x0) returned 1
	[0198.903] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0198.903] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0198.903] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0198.903] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x21cdb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x21cdb, lpOverlapped=0x0) returned 1
	[0198.903] FlushFileBuffers (hFile=0x278) returned 1
	[0199.051] FlushFileBuffers (hFile=0x27c) returned 1
	[0199.054] CloseHandle (hObject=0x278) returned 1
	[0199.054] CloseHandle (hObject=0x27c) returned 1
	[0199.054] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst")) returned 1
	[0199.056] SetEvent (hEvent=0xfc) returned 1
	[0199.056] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0199.056] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2676) returned 1
	[0199.056] CloseHandle (hObject=0x27c) returned 1
	[0199.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc")) returned 0x2020
	[0199.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc")) returned 0x2020
	[0199.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0199.057] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0199.057] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0199.057] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0199.057] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0199.060] ReadFile (in: hFile=0x27c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xa74, lpOverlapped=0x0) returned 1
	[0199.061] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa80, lpOverlapped=0x0) returned 1
	[0199.062] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0199.062] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0199.062] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0199.062] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa74, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xa74, lpOverlapped=0x0) returned 1
	[0199.062] FlushFileBuffers (hFile=0x27c) returned 1
	[0199.067] FlushFileBuffers (hFile=0x278) returned 1
	[0199.069] CloseHandle (hObject=0x27c) returned 1
	[0199.069] CloseHandle (hObject=0x278) returned 1
	[0199.069] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc")) returned 1
	[0199.070] SetEvent (hEvent=0xfc) returned 1
	[0199.070] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0199.070] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1130328) returned 1
	[0199.071] CloseHandle (hObject=0x278) returned 1
	[0199.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe")) returned 0x20
	[0199.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe")) returned 0x20
	[0199.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0199.071] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0199.071] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0199.071] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0199.071] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x27c
	[0199.074] ReadFile (in: hFile=0x278, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x110100, lpOverlapped=0x0) returned 1
	[0199.103] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110100, lpOverlapped=0x0) returned 1
	[0199.231] ReadFile (in: hFile=0x278, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3e58, lpOverlapped=0x0) returned 1
	[0199.231] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3e60, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3e60, lpOverlapped=0x0) returned 1
	[0199.231] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0199.231] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0199.231] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0199.231] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x110102, lpOverlapped=0x0) returned 1
	[0199.237] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3e56, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3e56, lpOverlapped=0x0) returned 1
	[0199.237] FlushFileBuffers (hFile=0x278) returned 1
	[0199.812] FlushFileBuffers (hFile=0x27c) returned 1
	[0199.999] CloseHandle (hObject=0x278) returned 1
	[0199.999] CloseHandle (hObject=0x27c) returned 1
	[0199.999] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe")) returned 1
	[0200.000] SetEvent (hEvent=0xfc) returned 1
	[0200.002] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0200.002] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13643) returned 1
	[0200.002] CloseHandle (hObject=0x27c) returned 1
	[0200.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest")) returned 0x2020
	[0200.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest")) returned 0x2020
	[0200.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0200.003] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0200.003] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0200.003] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0200.003] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0200.003] ReadFile (in: hFile=0x27c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x354b, lpOverlapped=0x0) returned 1
	[0200.006] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3550, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3550, lpOverlapped=0x0) returned 1
	[0200.094] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0200.094] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0200.094] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0200.094] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x354b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x354b, lpOverlapped=0x0) returned 1
	[0200.094] FlushFileBuffers (hFile=0x27c) returned 1
	[0200.738] FlushFileBuffers (hFile=0x278) returned 1
	[0201.341] CloseHandle (hObject=0x27c) returned 1
	[0201.342] CloseHandle (hObject=0x278) returned 1
	[0201.342] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest")) returned 1
	[0201.342] SetEvent (hEvent=0xfc) returned 1
	[0201.344] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0201.345] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17104) returned 1
	[0201.346] CloseHandle (hObject=0x25c) returned 1
	[0201.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms")) returned 0x2020
	[0201.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms")) returned 0x2020
	[0201.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0201.346] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0201.346] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0201.346] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0201.346] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0201.347] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x42d0, lpOverlapped=0x0) returned 1
	[0201.347] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x42e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x42e0, lpOverlapped=0x0) returned 1
	[0201.348] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x162, lpOverlapped=0x0) returned 1
	[0201.348] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0201.348] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0201.348] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x42d0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x42d0, lpOverlapped=0x0) returned 1
	[0201.348] FlushFileBuffers (hFile=0x25c) returned 1
	[0201.855] FlushFileBuffers (hFile=0x278) returned 1
	[0202.042] CloseHandle (hObject=0x25c) returned 1
	[0202.043] CloseHandle (hObject=0x278) returned 1
	[0202.043] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms")) returned 1
	[0202.044] SetEvent (hEvent=0xfc) returned 1
	[0202.044] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0202.046] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14512) returned 1
	[0202.046] CloseHandle (hObject=0x278) returned 1
	[0202.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms")) returned 0x2020
	[0202.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms")) returned 0x2020
	[0202.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0202.047] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0202.047] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0202.047] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0202.047] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0202.047] ReadFile (in: hFile=0x278, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x38b0, lpOverlapped=0x0) returned 1
	[0202.049] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x38c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x38c0, lpOverlapped=0x0) returned 1
	[0202.050] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x162, lpOverlapped=0x0) returned 1
	[0202.050] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0202.050] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0202.050] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x38b0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x38b0, lpOverlapped=0x0) returned 1
	[0202.050] FlushFileBuffers (hFile=0x278) returned 1
	[0202.497] FlushFileBuffers (hFile=0x25c) returned 1
	[0202.698] CloseHandle (hObject=0x278) returned 1
	[0202.698] CloseHandle (hObject=0x25c) returned 1
	[0202.698] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms")) returned 1
	[0202.699] SetEvent (hEvent=0xfc) returned 1
	[0202.700] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0202.700] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=108824) returned 1
	[0202.700] CloseHandle (hObject=0x25c) returned 1
	[0202.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat")) returned 0x2020
	[0202.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat")) returned 0x2020
	[0202.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0202.701] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0202.701] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0202.701] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0202.701] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0202.702] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1a918, lpOverlapped=0x0) returned 1
	[0202.716] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1a920, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1a920, lpOverlapped=0x0) returned 1
	[0202.720] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0202.721] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0202.721] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0202.721] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1a918, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1a918, lpOverlapped=0x0) returned 1
	[0202.721] FlushFileBuffers (hFile=0x25c) returned 1
	[0203.135] FlushFileBuffers (hFile=0x278) returned 1
	[0203.868] CloseHandle (hObject=0x25c) returned 1
	[0203.868] CloseHandle (hObject=0x278) returned 1
	[0203.868] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat")) returned 1
	[0203.870] SetEvent (hEvent=0xfc) returned 1
	[0203.871] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0204.093] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=45056) returned 1
	[0204.093] CloseHandle (hObject=0x270) returned 1
	[0204.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0")) returned 0x2020
	[0204.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0")) returned 0x2020
	[0204.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0204.093] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0204.093] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0204.093] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0204.093] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0204.230] ReadFile (in: hFile=0x270, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb000, lpOverlapped=0x0) returned 1
	[0204.463] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb010, lpOverlapped=0x0) returned 1
	[0204.464] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0204.465] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0204.465] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0204.465] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb000, lpOverlapped=0x0) returned 1
	[0204.465] FlushFileBuffers (hFile=0x270) returned 1
	[0204.906] FlushFileBuffers (hFile=0x27c) returned 1
	[0205.226] CloseHandle (hObject=0x270) returned 1
	[0205.226] CloseHandle (hObject=0x27c) returned 1
	[0205.226] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0")) returned 1
	[0205.227] SetEvent (hEvent=0xfc) returned 1
	[0205.229] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0205.230] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8192) returned 1
	[0205.230] CloseHandle (hObject=0x27c) returned 1
	[0205.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2")) returned 0x2020
	[0205.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2")) returned 0x2020
	[0205.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0205.230] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0205.230] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0205.231] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0205.231] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0205.231] ReadFile (in: hFile=0x27c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2000, lpOverlapped=0x0) returned 1
	[0205.233] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2010, lpOverlapped=0x0) returned 1
	[0205.233] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0205.234] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0205.234] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0205.234] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2000, lpOverlapped=0x0) returned 1
	[0205.234] FlushFileBuffers (hFile=0x27c) returned 1
	[0205.871] FlushFileBuffers (hFile=0x270) returned 1
	[0206.005] CloseHandle (hObject=0x27c) returned 1
	[0206.005] CloseHandle (hObject=0x270) returned 1
	[0206.005] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2")) returned 1
	[0206.006] SetEvent (hEvent=0xfc) returned 1
	[0206.007] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0206.007] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=524656) returned 1
	[0206.007] CloseHandle (hObject=0x270) returned 1
	[0206.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index")) returned 0x2020
	[0206.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index")) returned 0x2020
	[0206.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0206.008] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0206.008] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.008] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.008] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0206.008] ReadFile (in: hFile=0x270, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x80170, lpOverlapped=0x0) returned 1
	[0206.104] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x80180, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x80180, lpOverlapped=0x0) returned 1
	[0206.114] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0206.114] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.114] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.114] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x80170, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x80170, lpOverlapped=0x0) returned 1
	[0206.116] FlushFileBuffers (hFile=0x270) returned 1
	[0206.408] FlushFileBuffers (hFile=0x27c) returned 1
	[0206.625] CloseHandle (hObject=0x270) returned 1
	[0206.625] CloseHandle (hObject=0x27c) returned 1
	[0206.625] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index")) returned 1
	[0206.630] SetEvent (hEvent=0xfc) returned 1
	[0206.632] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0206.633] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7168) returned 1
	[0206.633] CloseHandle (hObject=0x27c) returned 1
	[0206.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies")) returned 0x2020
	[0206.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies")) returned 0x2020
	[0206.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0206.633] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0206.633] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.633] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.633] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0206.634] ReadFile (in: hFile=0x27c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1c00, lpOverlapped=0x0) returned 1
	[0206.638] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1c10, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1c10, lpOverlapped=0x0) returned 1
	[0206.639] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0206.639] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.639] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.639] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1c00, lpOverlapped=0x0) returned 1
	[0206.639] FlushFileBuffers (hFile=0x27c) returned 1
	[0206.642] FlushFileBuffers (hFile=0x270) returned 1
	[0206.644] CloseHandle (hObject=0x27c) returned 1
	[0206.645] CloseHandle (hObject=0x270) returned 1
	[0206.645] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies")) returned 1
	[0206.646] SetEvent (hEvent=0xfc) returned 1
	[0206.646] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0206.646] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0206.646] CloseHandle (hObject=0x270) returned 1
	[0206.647] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0206.649] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=470) returned 1
	[0206.649] CloseHandle (hObject=0x270) returned 1
	[0206.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session")) returned 0x2020
	[0206.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session")) returned 0x2020
	[0206.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0206.649] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0206.649] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.649] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.649] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0206.659] ReadFile (in: hFile=0x270, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1d6, lpOverlapped=0x0) returned 1
	[0206.660] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1e0, lpOverlapped=0x0) returned 1
	[0206.660] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0206.661] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.661] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.661] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1d6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1d6, lpOverlapped=0x0) returned 1
	[0206.661] FlushFileBuffers (hFile=0x270) returned 1
	[0206.664] FlushFileBuffers (hFile=0x27c) returned 1
	[0206.666] CloseHandle (hObject=0x270) returned 1
	[0206.666] CloseHandle (hObject=0x27c) returned 1
	[0206.666] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session")) returned 1
	[0206.667] SetEvent (hEvent=0xfc) returned 1
	[0206.667] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0206.669] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=294) returned 1
	[0206.669] CloseHandle (hObject=0x27c) returned 1
	[0206.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs")) returned 0x2020
	[0206.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs")) returned 0x2020
	[0206.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0206.669] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0206.669] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.669] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.669] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0206.670] ReadFile (in: hFile=0x27c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x126, lpOverlapped=0x0) returned 1
	[0206.671] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x130, lpOverlapped=0x0) returned 1
	[0206.672] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0206.672] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.672] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.672] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x126, lpOverlapped=0x0) returned 1
	[0206.672] FlushFileBuffers (hFile=0x27c) returned 1
	[0206.674] FlushFileBuffers (hFile=0x270) returned 1
	[0206.676] CloseHandle (hObject=0x27c) returned 1
	[0206.676] CloseHandle (hObject=0x270) returned 1
	[0206.676] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs")) returned 1
	[0206.677] SetEvent (hEvent=0xfc) returned 1
	[0206.677] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0206.678] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0206.678] CloseHandle (hObject=0x270) returned 1
	[0206.678] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0206.680] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16) returned 1
	[0206.680] CloseHandle (hObject=0x270) returned 1
	[0206.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current")) returned 0x2020
	[0206.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current")) returned 0x2020
	[0206.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0206.681] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0206.681] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.681] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.681] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0206.681] ReadFile (in: hFile=0x270, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10, lpOverlapped=0x0) returned 1
	[0206.682] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x20, lpOverlapped=0x0) returned 1
	[0206.683] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0206.683] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.683] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.683] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10, lpOverlapped=0x0) returned 1
	[0206.683] FlushFileBuffers (hFile=0x270) returned 1
	[0206.686] FlushFileBuffers (hFile=0x27c) returned 1
	[0206.688] CloseHandle (hObject=0x270) returned 1
	[0206.688] CloseHandle (hObject=0x27c) returned 1
	[0206.688] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current")) returned 1
	[0206.689] SetEvent (hEvent=0xfc) returned 1
	[0206.689] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0206.690] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0206.690] CloseHandle (hObject=0x27c) returned 1
	[0206.690] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0206.690] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=167) returned 1
	[0206.690] CloseHandle (hObject=0x27c) returned 1
	[0206.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log")) returned 0x2020
	[0206.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log")) returned 0x2020
	[0206.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0206.691] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0206.691] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.691] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.691] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0206.692] ReadFile (in: hFile=0x27c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xa7, lpOverlapped=0x0) returned 1
	[0206.692] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb0, lpOverlapped=0x0) returned 1
	[0206.694] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0206.695] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.695] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.695] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xa7, lpOverlapped=0x0) returned 1
	[0206.695] FlushFileBuffers (hFile=0x27c) returned 1
	[0206.698] FlushFileBuffers (hFile=0x270) returned 1
	[0206.703] CloseHandle (hObject=0x27c) returned 1
	[0206.703] CloseHandle (hObject=0x270) returned 1
	[0206.703] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log")) returned 1
	[0206.704] SetEvent (hEvent=0xfc) returned 1
	[0206.704] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0206.705] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41) returned 1
	[0206.705] CloseHandle (hObject=0x270) returned 1
	[0206.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001")) returned 0x2020
	[0206.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001")) returned 0x2020
	[0206.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0206.705] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0206.705] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.705] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.705] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0206.706] ReadFile (in: hFile=0x270, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x29, lpOverlapped=0x0) returned 1
	[0206.707] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x30, lpOverlapped=0x0) returned 1
	[0206.708] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0206.708] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.708] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.708] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x29, lpOverlapped=0x0) returned 1
	[0206.708] FlushFileBuffers (hFile=0x270) returned 1
	[0206.712] FlushFileBuffers (hFile=0x27c) returned 1
	[0206.714] CloseHandle (hObject=0x270) returned 1
	[0206.714] CloseHandle (hObject=0x27c) returned 1
	[0206.714] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001")) returned 1
	[0206.715] SetEvent (hEvent=0xfc) returned 1
	[0206.715] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0206.716] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=342) returned 1
	[0206.716] CloseHandle (hObject=0x27c) returned 1
	[0206.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log")) returned 0x2020
	[0206.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log")) returned 0x2020
	[0206.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0206.717] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0206.717] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.717] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.717] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0206.717] ReadFile (in: hFile=0x27c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x156, lpOverlapped=0x0) returned 1
	[0206.718] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x160, lpOverlapped=0x0) returned 1
	[0206.719] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0206.719] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.719] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.719] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x156, lpOverlapped=0x0) returned 1
	[0206.720] FlushFileBuffers (hFile=0x27c) returned 1
	[0206.723] FlushFileBuffers (hFile=0x270) returned 1
	[0206.724] CloseHandle (hObject=0x27c) returned 1
	[0206.724] CloseHandle (hObject=0x270) returned 1
	[0206.725] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log")) returned 1
	[0206.725] SetEvent (hEvent=0xfc) returned 1
	[0206.726] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0206.726] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16) returned 1
	[0206.726] CloseHandle (hObject=0x270) returned 1
	[0206.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current")) returned 0x2020
	[0206.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current")) returned 0x2020
	[0206.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0206.726] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0206.726] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.727] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.727] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0206.727] ReadFile (in: hFile=0x270, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10, lpOverlapped=0x0) returned 1
	[0206.728] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x20, lpOverlapped=0x0) returned 1
	[0206.729] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0206.729] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.729] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.729] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10, lpOverlapped=0x0) returned 1
	[0206.729] FlushFileBuffers (hFile=0x270) returned 1
	[0206.732] FlushFileBuffers (hFile=0x27c) returned 1
	[0206.734] CloseHandle (hObject=0x270) returned 1
	[0206.735] CloseHandle (hObject=0x27c) returned 1
	[0206.735] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current")) returned 1
	[0206.736] SetEvent (hEvent=0xfc) returned 1
	[0206.736] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0206.737] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0206.737] CloseHandle (hObject=0x27c) returned 1
	[0206.737] SetEvent (hEvent=0xfc) returned 1
	[0206.737] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0206.739] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=154) returned 1
	[0206.739] CloseHandle (hObject=0x27c) returned 1
	[0206.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log")) returned 0x2020
	[0206.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log")) returned 0x2020
	[0206.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0206.739] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0206.739] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.740] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0206.740] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0206.740] ReadFile (in: hFile=0x27c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x9a, lpOverlapped=0x0) returned 1
	[0206.741] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa0, lpOverlapped=0x0) returned 1
	[0206.742] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0206.742] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.742] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0206.742] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x9a, lpOverlapped=0x0) returned 1
	[0206.742] FlushFileBuffers (hFile=0x27c) returned 1
	[0207.162] FlushFileBuffers (hFile=0x270) returned 1
	[0207.447] CloseHandle (hObject=0x27c) returned 1
	[0207.448] CloseHandle (hObject=0x270) returned 1
	[0207.448] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log")) returned 1
	[0207.449] SetEvent (hEvent=0xfc) returned 1
	[0207.451] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0207.451] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=41) returned 1
	[0207.451] CloseHandle (hObject=0x270) returned 1
	[0207.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001")) returned 0x2020
	[0207.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001")) returned 0x2020
	[0207.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0207.452] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0207.452] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0207.452] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0207.452] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0207.452] ReadFile (in: hFile=0x270, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x29, lpOverlapped=0x0) returned 1
	[0207.453] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x30, lpOverlapped=0x0) returned 1
	[0207.454] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0207.454] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0207.454] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0207.454] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x29, lpOverlapped=0x0) returned 1
	[0207.454] FlushFileBuffers (hFile=0x270) returned 1
	[0207.694] FlushFileBuffers (hFile=0x27c) returned 1
	[0207.910] CloseHandle (hObject=0x270) returned 1
	[0207.910] CloseHandle (hObject=0x27c) returned 1
	[0207.910] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001")) returned 1
	[0207.911] SetEvent (hEvent=0xfc) returned 1
	[0207.911] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0207.913] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1197) returned 1
	[0207.913] CloseHandle (hObject=0x27c) returned 1
	[0207.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log")) returned 0x2020
	[0207.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log")) returned 0x2020
	[0207.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0207.914] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0207.914] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0207.914] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0207.914] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0207.915] ReadFile (in: hFile=0x27c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4ad, lpOverlapped=0x0) returned 1
	[0207.916] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4b0, lpOverlapped=0x0) returned 1
	[0207.917] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0207.917] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0207.917] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0207.917] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4ad, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4ad, lpOverlapped=0x0) returned 1
	[0207.917] FlushFileBuffers (hFile=0x27c) returned 1
	[0208.096] FlushFileBuffers (hFile=0x270) returned 1
	[0208.299] CloseHandle (hObject=0x27c) returned 1
	[0208.299] CloseHandle (hObject=0x270) returned 1
	[0208.299] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log")) returned 1
	[0208.300] SetEvent (hEvent=0xfc) returned 1
	[0208.301] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0208.302] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0208.302] CloseHandle (hObject=0x270) returned 1
	[0208.302] SetEvent (hEvent=0xfc) returned 1
	[0208.302] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0208.303] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=154) returned 1
	[0208.303] CloseHandle (hObject=0x270) returned 1
	[0208.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log")) returned 0x2020
	[0208.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log")) returned 0x2020
	[0208.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0208.304] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0208.304] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0208.304] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0208.304] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0208.305] ReadFile (in: hFile=0x270, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x9a, lpOverlapped=0x0) returned 1
	[0208.306] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa0, lpOverlapped=0x0) returned 1
	[0208.306] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0208.307] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0208.307] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0208.307] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x9a, lpOverlapped=0x0) returned 1
	[0208.307] FlushFileBuffers (hFile=0x270) returned 1
	[0208.688] FlushFileBuffers (hFile=0x27c) returned 1
	[0209.265] CloseHandle (hObject=0x270) returned 1
	[0209.266] CloseHandle (hObject=0x27c) returned 1
	[0209.266] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log")) returned 1
	[0209.267] SetEvent (hEvent=0xfc) returned 1
	[0209.269] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0209.269] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3372) returned 1
	[0209.269] CloseHandle (hObject=0x27c) returned 1
	[0209.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png")) returned 0x2020
	[0209.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png")) returned 0x2020
	[0209.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0209.270] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0209.270] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0209.270] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0209.270] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0209.270] ReadFile (in: hFile=0x27c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd2c, lpOverlapped=0x0) returned 1
	[0209.272] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xd30, lpOverlapped=0x0) returned 1
	[0209.272] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0209.273] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0209.273] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0209.273] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd2c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd2c, lpOverlapped=0x0) returned 1
	[0209.273] FlushFileBuffers (hFile=0x27c) returned 1
	[0210.943] FlushFileBuffers (hFile=0x270) returned 1
	[0211.137] CloseHandle (hObject=0x27c) returned 1
	[0211.138] CloseHandle (hObject=0x270) returned 1
	[0211.138] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png")) returned 1
	[0211.139] SetEvent (hEvent=0xfc) returned 1
	[0211.139] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0211.140] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=92) returned 1
	[0211.140] CloseHandle (hObject=0x270) returned 1
	[0211.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html")) returned 0x2020
	[0211.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html")) returned 0x2020
	[0211.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0211.140] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0211.140] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0211.140] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0211.140] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0211.141] ReadFile (in: hFile=0x270, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5c, lpOverlapped=0x0) returned 1
	[0211.142] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x60, lpOverlapped=0x0) returned 1
	[0211.143] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0211.143] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0211.143] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0211.143] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5c, lpOverlapped=0x0) returned 1
	[0211.143] FlushFileBuffers (hFile=0x270) returned 1
	[0211.147] FlushFileBuffers (hFile=0x27c) returned 1
	[0211.149] CloseHandle (hObject=0x270) returned 1
	[0211.149] CloseHandle (hObject=0x27c) returned 1
	[0211.149] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html")) returned 1
	[0211.150] SetEvent (hEvent=0xfc) returned 1
	[0211.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0211.150] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=95) returned 1
	[0211.150] CloseHandle (hObject=0x27c) returned 1
	[0211.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js")) returned 0x2020
	[0211.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js")) returned 0x2020
	[0211.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0211.151] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0211.151] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0211.151] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0211.151] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0211.151] ReadFile (in: hFile=0x27c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5f, lpOverlapped=0x0) returned 1
	[0211.152] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x60, lpOverlapped=0x0) returned 1
	[0211.153] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0211.153] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0211.153] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0211.153] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5f, lpOverlapped=0x0) returned 1
	[0211.154] FlushFileBuffers (hFile=0x27c) returned 1
	[0211.157] FlushFileBuffers (hFile=0x270) returned 1
	[0211.159] CloseHandle (hObject=0x27c) returned 1
	[0211.159] CloseHandle (hObject=0x270) returned 1
	[0211.159] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js")) returned 1
	[0211.160] SetEvent (hEvent=0xfc) returned 1
	[0211.160] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0211.161] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=725) returned 1
	[0211.161] CloseHandle (hObject=0x270) returned 1
	[0211.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json")) returned 0x2020
	[0211.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json")) returned 0x2020
	[0211.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0211.161] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0211.161] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0211.161] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0211.161] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0211.162] ReadFile (in: hFile=0x270, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2d5, lpOverlapped=0x0) returned 1
	[0211.165] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2e0, lpOverlapped=0x0) returned 1
	[0215.850] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0220.860] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0220.860] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0220.860] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2d5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2d5, lpOverlapped=0x0) returned 1
	[0220.861] FlushFileBuffers (hFile=0x270) returned 1
	[0220.906] FlushFileBuffers (hFile=0x27c) returned 1
	[0220.962] CloseHandle (hObject=0x270) returned 1
	[0220.963] CloseHandle (hObject=0x27c) returned 1
	[0220.963] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json")) returned 1
	[0220.964] SetEvent (hEvent=0xfc) returned 1
	[0220.964] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0220.965] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=272) returned 1
	[0220.965] CloseHandle (hObject=0x27c) returned 1
	[0220.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0220.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0220.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0220.965] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0220.965] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0220.965] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0220.965] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0221.544] ReadFile (in: hFile=0x27c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x110, lpOverlapped=0x0) returned 1
	[0221.545] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x120, lpOverlapped=0x0) returned 1
	[0221.546] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0221.546] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0221.546] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0221.546] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x110, lpOverlapped=0x0) returned 1
	[0221.546] FlushFileBuffers (hFile=0x27c) returned 1
	[0221.746] FlushFileBuffers (hFile=0x270) returned 1
	[0222.143] CloseHandle (hObject=0x27c) returned 1
	[0222.143] CloseHandle (hObject=0x270) returned 1
	[0222.143] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json")) returned 1
	[0222.144] SetEvent (hEvent=0xfc) returned 1
	[0222.146] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0222.147] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=224) returned 1
	[0222.147] CloseHandle (hObject=0x270) returned 1
	[0222.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0222.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0222.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0222.147] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0222.147] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0222.147] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0222.147] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0222.148] ReadFile (in: hFile=0x270, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe0, lpOverlapped=0x0) returned 1
	[0222.149] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0222.150] WriteFile (in: hFile=0x27c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0222.150] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0222.150] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0222.150] WriteFile (in: hFile=0x270, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe0, lpOverlapped=0x0) returned 1
	[0222.150] FlushFileBuffers (hFile=0x270) returned 1
	[0222.521] FlushFileBuffers (hFile=0x27c) returned 1
	[0222.652] CloseHandle (hObject=0x270) returned 1
	[0222.653] CloseHandle (hObject=0x27c) returned 1
	[0222.653] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json")) returned 1
	[0222.654] SetEvent (hEvent=0xfc) returned 1
	[0222.656] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0222.776] GetFileSizeEx (in: hFile=0x248, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=234) returned 1
	[0222.777] CloseHandle (hObject=0x248) returned 1
	[0222.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json")) returned 0x2020
	[0222.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json")) returned 0x2020
	[0222.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0222.777] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0222.777] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0222.777] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0222.777] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x23c
	[0222.891] ReadFile (in: hFile=0x248, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xea, lpOverlapped=0x0) returned 1
	[0222.892] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0222.892] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0222.893] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0222.893] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0222.893] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xea, lpOverlapped=0x0) returned 1
	[0222.893] FlushFileBuffers (hFile=0x248) returned 1
	[0223.057] FlushFileBuffers (hFile=0x23c) returned 1
	[0223.200] CloseHandle (hObject=0x248) returned 1
	[0223.201] CloseHandle (hObject=0x23c) returned 1
	[0223.201] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json")) returned 1
	[0223.202] SetEvent (hEvent=0xfc) returned 1
	[0223.202] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0223.203] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=214) returned 1
	[0223.203] CloseHandle (hObject=0x23c) returned 1
	[0223.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json")) returned 0x2020
	[0223.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json")) returned 0x2020
	[0223.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.203] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0223.203] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.203] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.203] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x248
	[0223.204] ReadFile (in: hFile=0x23c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd6, lpOverlapped=0x0) returned 1
	[0223.205] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0223.206] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0223.206] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.206] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.206] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd6, lpOverlapped=0x0) returned 1
	[0223.207] FlushFileBuffers (hFile=0x23c) returned 1
	[0223.238] FlushFileBuffers (hFile=0x248) returned 1
	[0223.256] CloseHandle (hObject=0x23c) returned 1
	[0223.256] CloseHandle (hObject=0x248) returned 1
	[0223.256] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json")) returned 1
	[0223.257] SetEvent (hEvent=0xfc) returned 1
	[0223.257] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0223.258] GetFileSizeEx (in: hFile=0x248, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=215) returned 1
	[0223.258] CloseHandle (hObject=0x248) returned 1
	[0223.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json")) returned 0x2020
	[0223.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json")) returned 0x2020
	[0223.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.258] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0223.258] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.258] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.258] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x23c
	[0223.259] ReadFile (in: hFile=0x248, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd7, lpOverlapped=0x0) returned 1
	[0223.260] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0223.261] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0223.261] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.261] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.261] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd7, lpOverlapped=0x0) returned 1
	[0223.261] FlushFileBuffers (hFile=0x248) returned 1
	[0223.291] FlushFileBuffers (hFile=0x23c) returned 1
	[0223.294] CloseHandle (hObject=0x248) returned 1
	[0223.294] CloseHandle (hObject=0x23c) returned 1
	[0223.294] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json")) returned 1
	[0223.295] SetEvent (hEvent=0xfc) returned 1
	[0223.295] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0223.296] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=223) returned 1
	[0223.296] CloseHandle (hObject=0x23c) returned 1
	[0223.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json")) returned 0x2020
	[0223.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json")) returned 0x2020
	[0223.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.296] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0223.296] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.296] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.297] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x248
	[0223.297] ReadFile (in: hFile=0x23c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xdf, lpOverlapped=0x0) returned 1
	[0223.298] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0223.299] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0223.299] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.299] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.299] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xdf, lpOverlapped=0x0) returned 1
	[0223.299] FlushFileBuffers (hFile=0x23c) returned 1
	[0223.303] FlushFileBuffers (hFile=0x248) returned 1
	[0223.305] CloseHandle (hObject=0x23c) returned 1
	[0223.305] CloseHandle (hObject=0x248) returned 1
	[0223.305] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json")) returned 1
	[0223.306] SetEvent (hEvent=0xfc) returned 1
	[0223.306] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0223.307] GetFileSizeEx (in: hFile=0x248, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=221) returned 1
	[0223.307] CloseHandle (hObject=0x248) returned 1
	[0223.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json")) returned 0x2020
	[0223.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json")) returned 0x2020
	[0223.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.307] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0223.307] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.307] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.307] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x23c
	[0223.308] ReadFile (in: hFile=0x248, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xdd, lpOverlapped=0x0) returned 1
	[0223.309] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0223.310] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0223.310] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.310] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.310] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xdd, lpOverlapped=0x0) returned 1
	[0223.310] FlushFileBuffers (hFile=0x248) returned 1
	[0223.314] FlushFileBuffers (hFile=0x23c) returned 1
	[0223.316] CloseHandle (hObject=0x248) returned 1
	[0223.316] CloseHandle (hObject=0x23c) returned 1
	[0223.316] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json")) returned 1
	[0223.317] SetEvent (hEvent=0xfc) returned 1
	[0223.317] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0223.318] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=214) returned 1
	[0223.318] CloseHandle (hObject=0x23c) returned 1
	[0223.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json")) returned 0x2020
	[0223.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json")) returned 0x2020
	[0223.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.318] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0223.318] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.318] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.318] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x248
	[0223.319] ReadFile (in: hFile=0x23c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd6, lpOverlapped=0x0) returned 1
	[0223.321] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0223.322] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0223.322] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.322] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.322] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd6, lpOverlapped=0x0) returned 1
	[0223.322] FlushFileBuffers (hFile=0x23c) returned 1
	[0223.326] FlushFileBuffers (hFile=0x248) returned 1
	[0223.328] CloseHandle (hObject=0x23c) returned 1
	[0223.328] CloseHandle (hObject=0x248) returned 1
	[0223.328] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json")) returned 1
	[0223.329] SetEvent (hEvent=0xfc) returned 1
	[0223.329] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0223.330] GetFileSizeEx (in: hFile=0x248, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=217) returned 1
	[0223.330] CloseHandle (hObject=0x248) returned 1
	[0223.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0223.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0223.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.330] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0223.330] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.330] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.331] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x23c
	[0223.331] ReadFile (in: hFile=0x248, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd9, lpOverlapped=0x0) returned 1
	[0223.332] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0223.333] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0223.333] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.333] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.333] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd9, lpOverlapped=0x0) returned 1
	[0223.333] FlushFileBuffers (hFile=0x248) returned 1
	[0223.337] FlushFileBuffers (hFile=0x23c) returned 1
	[0223.338] CloseHandle (hObject=0x248) returned 1
	[0223.339] CloseHandle (hObject=0x23c) returned 1
	[0223.339] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json")) returned 1
	[0223.340] SetEvent (hEvent=0xfc) returned 1
	[0223.340] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0223.340] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=224) returned 1
	[0223.340] CloseHandle (hObject=0x23c) returned 1
	[0223.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0223.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0223.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.341] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0223.341] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.341] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.341] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x248
	[0223.341] ReadFile (in: hFile=0x23c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe0, lpOverlapped=0x0) returned 1
	[0223.342] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0223.343] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0223.343] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.343] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.343] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe0, lpOverlapped=0x0) returned 1
	[0223.343] FlushFileBuffers (hFile=0x23c) returned 1
	[0223.514] FlushFileBuffers (hFile=0x248) returned 1
	[0223.543] CloseHandle (hObject=0x23c) returned 1
	[0223.543] CloseHandle (hObject=0x248) returned 1
	[0223.544] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json")) returned 1
	[0223.544] SetEvent (hEvent=0xfc) returned 1
	[0223.546] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0223.547] GetFileSizeEx (in: hFile=0x248, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=225) returned 1
	[0223.547] CloseHandle (hObject=0x248) returned 1
	[0223.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json")) returned 0x2020
	[0223.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json")) returned 0x2020
	[0223.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.547] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0223.547] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.547] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.547] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x23c
	[0223.547] ReadFile (in: hFile=0x248, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe1, lpOverlapped=0x0) returned 1
	[0223.548] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0223.549] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0223.549] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.549] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.549] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe1, lpOverlapped=0x0) returned 1
	[0223.549] FlushFileBuffers (hFile=0x248) returned 1
	[0223.589] FlushFileBuffers (hFile=0x23c) returned 1
	[0223.639] CloseHandle (hObject=0x248) returned 1
	[0223.763] CloseHandle (hObject=0x23c) returned 1
	[0223.771] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json")) returned 1
	[0223.781] SetEvent (hEvent=0xfc) returned 1
	[0223.782] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0223.783] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=230) returned 1
	[0223.783] CloseHandle (hObject=0x23c) returned 1
	[0223.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0223.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0223.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.783] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0223.783] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.783] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.783] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x248
	[0223.784] ReadFile (in: hFile=0x23c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe6, lpOverlapped=0x0) returned 1
	[0223.785] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0223.786] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0223.786] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.786] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.786] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe6, lpOverlapped=0x0) returned 1
	[0223.786] FlushFileBuffers (hFile=0x23c) returned 1
	[0223.816] FlushFileBuffers (hFile=0x248) returned 1
	[0223.906] CloseHandle (hObject=0x23c) returned 1
	[0223.906] CloseHandle (hObject=0x248) returned 1
	[0223.906] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json")) returned 1
	[0223.907] SetEvent (hEvent=0xfc) returned 1
	[0223.909] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0223.909] GetFileSizeEx (in: hFile=0x248, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=221) returned 1
	[0223.909] CloseHandle (hObject=0x248) returned 1
	[0223.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json")) returned 0x2020
	[0223.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json")) returned 0x2020
	[0223.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.910] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0223.910] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.910] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.910] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x23c
	[0223.910] ReadFile (in: hFile=0x248, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xdd, lpOverlapped=0x0) returned 1
	[0223.911] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0223.912] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0223.912] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.912] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.912] WriteFile (in: hFile=0x248, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xdd, lpOverlapped=0x0) returned 1
	[0223.912] FlushFileBuffers (hFile=0x248) returned 1
	[0223.939] FlushFileBuffers (hFile=0x23c) returned 1
	[0223.961] CloseHandle (hObject=0x248) returned 1
	[0223.962] CloseHandle (hObject=0x23c) returned 1
	[0223.962] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json")) returned 1
	[0223.963] SetEvent (hEvent=0xfc) returned 1
	[0223.965] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0223.967] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=230) returned 1
	[0223.967] CloseHandle (hObject=0x25c) returned 1
	[0223.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0223.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0223.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.968] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0223.968] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.968] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0223.968] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x23c
	[0223.968] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe6, lpOverlapped=0x0) returned 1
	[0223.969] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0223.970] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0223.970] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.970] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0223.970] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe6, lpOverlapped=0x0) returned 1
	[0223.971] FlushFileBuffers (hFile=0x25c) returned 1
	[0224.010] FlushFileBuffers (hFile=0x23c) returned 1
	[0224.026] CloseHandle (hObject=0x25c) returned 1
	[0224.027] CloseHandle (hObject=0x23c) returned 1
	[0224.027] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json")) returned 1
	[0224.028] SetEvent (hEvent=0xfc) returned 1
	[0224.028] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0224.029] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=233) returned 1
	[0224.029] CloseHandle (hObject=0x23c) returned 1
	[0224.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0224.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0224.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.029] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0224.029] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0224.029] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0224.029] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0224.030] ReadFile (in: hFile=0x23c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe9, lpOverlapped=0x0) returned 1
	[0224.031] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0224.032] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0224.032] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0224.032] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0224.032] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe9, lpOverlapped=0x0) returned 1
	[0224.032] FlushFileBuffers (hFile=0x23c) returned 1
	[0224.117] FlushFileBuffers (hFile=0x25c) returned 1
	[0224.167] CloseHandle (hObject=0x23c) returned 1
	[0224.170] CloseHandle (hObject=0x25c) returned 1
	[0224.187] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json")) returned 1
	[0224.200] SetEvent (hEvent=0xfc) returned 1
	[0224.212] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0224.223] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=260) returned 1
	[0224.223] CloseHandle (hObject=0x25c) returned 1
	[0224.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json")) returned 0x2020
	[0224.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json")) returned 0x2020
	[0224.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.235] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0224.235] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0224.244] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0224.244] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0224.272] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x104, lpOverlapped=0x0) returned 1
	[0224.286] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0224.287] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0224.287] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0224.287] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0224.287] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x104, lpOverlapped=0x0) returned 1
	[0224.287] FlushFileBuffers (hFile=0x25c) returned 1
	[0224.354] FlushFileBuffers (hFile=0x278) returned 1
	[0225.046] CloseHandle (hObject=0x25c) returned 1
	[0225.046] CloseHandle (hObject=0x278) returned 1
	[0225.046] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json")) returned 1
	[0225.047] SetEvent (hEvent=0xfc) returned 1
	[0225.049] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0225.049] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3213) returned 1
	[0225.049] CloseHandle (hObject=0x278) returned 1
	[0225.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png")) returned 0x2020
	[0225.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png")) returned 0x2020
	[0225.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0225.050] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0225.050] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0225.050] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0225.050] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0225.050] ReadFile (in: hFile=0x278, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xc8d, lpOverlapped=0x0) returned 1
	[0225.052] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc90, lpOverlapped=0x0) returned 1
	[0225.074] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0225.075] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0225.075] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0225.075] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc8d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xc8d, lpOverlapped=0x0) returned 1
	[0225.075] FlushFileBuffers (hFile=0x278) returned 1
	[0225.078] FlushFileBuffers (hFile=0x25c) returned 1
	[0225.079] CloseHandle (hObject=0x278) returned 1
	[0225.079] CloseHandle (hObject=0x25c) returned 1
	[0225.079] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png")) returned 1
	[0225.080] SetEvent (hEvent=0xfc) returned 1
	[0225.080] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0225.081] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=143) returned 1
	[0225.081] CloseHandle (hObject=0x25c) returned 1
	[0225.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png")) returned 0x2020
	[0225.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png")) returned 0x2020
	[0225.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0225.081] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0225.082] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0225.082] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0225.082] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0225.082] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x8f, lpOverlapped=0x0) returned 1
	[0225.083] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x90, lpOverlapped=0x0) returned 1
	[0225.084] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0225.084] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0225.084] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0225.084] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x8f, lpOverlapped=0x0) returned 1
	[0225.084] FlushFileBuffers (hFile=0x25c) returned 1
	[0226.058] FlushFileBuffers (hFile=0x278) returned 1
	[0226.126] CloseHandle (hObject=0x25c) returned 1
	[0226.127] CloseHandle (hObject=0x278) returned 1
	[0226.127] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png")) returned 1
	[0226.128] SetEvent (hEvent=0xfc) returned 1
	[0226.128] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0226.129] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=91) returned 1
	[0226.129] CloseHandle (hObject=0x278) returned 1
	[0226.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js")) returned 0x2020
	[0226.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js")) returned 0x2020
	[0226.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0226.129] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0226.129] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0226.129] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0226.129] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0226.130] ReadFile (in: hFile=0x278, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5b, lpOverlapped=0x0) returned 1
	[0226.131] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x60, lpOverlapped=0x0) returned 1
	[0226.131] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0226.132] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0226.132] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0226.132] WriteFile (in: hFile=0x278, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5b, lpOverlapped=0x0) returned 1
	[0226.132] FlushFileBuffers (hFile=0x278) returned 1
	[0226.197] FlushFileBuffers (hFile=0x25c) returned 1
	[0226.411] CloseHandle (hObject=0x278) returned 1
	[0226.411] CloseHandle (hObject=0x25c) returned 1
	[0226.411] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js")) returned 1
	[0226.412] SetEvent (hEvent=0xfc) returned 1
	[0226.415] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0226.415] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=264) returned 1
	[0226.415] CloseHandle (hObject=0x25c) returned 1
	[0226.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0226.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0226.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0226.416] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0226.416] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0226.416] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0226.416] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x234
	[0227.333] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x108, lpOverlapped=0x0) returned 1
	[0227.333] WriteFile (in: hFile=0x234, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0227.334] WriteFile (in: hFile=0x234, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0227.334] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0227.335] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0227.335] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x108, lpOverlapped=0x0) returned 1
	[0227.335] FlushFileBuffers (hFile=0x25c) returned 1
	[0227.501] FlushFileBuffers (hFile=0x234) returned 1
	[0227.819] CloseHandle (hObject=0x25c) returned 1
	[0228.852] CloseHandle (hObject=0x234) returned 1
	[0228.959] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json")) returned 1
	[0228.960] SetEvent (hEvent=0xfc) returned 1
	[0228.960] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0228.961] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=216) returned 1
	[0228.961] CloseHandle (hObject=0x170) returned 1
	[0228.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json")) returned 0x2020
	[0228.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json")) returned 0x2020
	[0228.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0228.961] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0228.961] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0228.961] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0228.961] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x23c
	[0228.962] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd8, lpOverlapped=0x0) returned 1
	[0228.962] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0228.963] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0228.964] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0228.964] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0228.964] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd8, lpOverlapped=0x0) returned 1
	[0228.964] FlushFileBuffers (hFile=0x170) returned 1
	[0228.967] FlushFileBuffers (hFile=0x23c) returned 1
	[0228.969] CloseHandle (hObject=0x170) returned 1
	[0228.970] CloseHandle (hObject=0x23c) returned 1
	[0228.970] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json")) returned 1
	[0228.971] SetEvent (hEvent=0xfc) returned 1
	[0228.971] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0228.972] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=217) returned 1
	[0228.972] CloseHandle (hObject=0x23c) returned 1
	[0228.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json")) returned 0x2020
	[0228.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json")) returned 0x2020
	[0228.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0228.972] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0228.972] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0228.972] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0228.972] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0228.973] ReadFile (in: hFile=0x23c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd9, lpOverlapped=0x0) returned 1
	[0228.973] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0228.974] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0228.974] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0228.974] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0228.974] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd9, lpOverlapped=0x0) returned 1
	[0228.975] FlushFileBuffers (hFile=0x23c) returned 1
	[0228.978] FlushFileBuffers (hFile=0x170) returned 1
	[0228.980] CloseHandle (hObject=0x23c) returned 1
	[0228.980] CloseHandle (hObject=0x170) returned 1
	[0228.980] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json")) returned 1
	[0228.981] SetEvent (hEvent=0xfc) returned 1
	[0228.981] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0228.982] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=260) returned 1
	[0228.982] CloseHandle (hObject=0x170) returned 1
	[0228.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json")) returned 0x2020
	[0228.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json")) returned 0x2020
	[0228.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0228.982] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0228.982] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0228.982] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0228.982] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x23c
	[0228.983] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x104, lpOverlapped=0x0) returned 1
	[0228.984] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0228.985] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0228.985] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0228.985] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0228.985] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x104, lpOverlapped=0x0) returned 1
	[0228.985] FlushFileBuffers (hFile=0x170) returned 1
	[0228.989] FlushFileBuffers (hFile=0x23c) returned 1
	[0228.990] CloseHandle (hObject=0x170) returned 1
	[0228.990] CloseHandle (hObject=0x23c) returned 1
	[0228.990] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json")) returned 1
	[0228.991] SetEvent (hEvent=0xfc) returned 1
	[0228.991] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0228.992] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=208) returned 1
	[0228.992] CloseHandle (hObject=0x23c) returned 1
	[0228.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json")) returned 0x2020
	[0228.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json")) returned 0x2020
	[0228.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0228.992] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0228.992] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0228.993] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0228.993] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0228.993] ReadFile (in: hFile=0x23c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd0, lpOverlapped=0x0) returned 1
	[0228.994] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0228.995] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0228.995] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0228.995] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0228.995] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd0, lpOverlapped=0x0) returned 1
	[0228.995] FlushFileBuffers (hFile=0x23c) returned 1
	[0229.243] FlushFileBuffers (hFile=0x170) returned 1
	[0229.293] CloseHandle (hObject=0x23c) returned 1
	[0229.293] CloseHandle (hObject=0x170) returned 1
	[0229.293] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json")) returned 1
	[0229.294] SetEvent (hEvent=0xfc) returned 1
	[0229.296] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0229.296] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=206) returned 1
	[0229.296] CloseHandle (hObject=0x170) returned 1
	[0229.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json")) returned 0x2020
	[0229.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json")) returned 0x2020
	[0229.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0229.297] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0229.297] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0229.297] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0229.297] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x23c
	[0229.298] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xce, lpOverlapped=0x0) returned 1
	[0229.298] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xd0, lpOverlapped=0x0) returned 1
	[0229.299] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0229.299] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0229.300] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0229.300] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xce, lpOverlapped=0x0) returned 1
	[0229.300] FlushFileBuffers (hFile=0x170) returned 1
	[0229.338] FlushFileBuffers (hFile=0x23c) returned 1
	[0229.364] CloseHandle (hObject=0x170) returned 1
	[0229.369] CloseHandle (hObject=0x23c) returned 1
	[0229.369] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json")) returned 1
	[0229.370] SetEvent (hEvent=0xfc) returned 1
	[0229.371] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0229.372] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=216) returned 1
	[0229.372] CloseHandle (hObject=0x23c) returned 1
	[0229.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json")) returned 0x2020
	[0229.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json")) returned 0x2020
	[0229.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0229.372] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0229.372] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0229.372] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0229.372] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0229.373] ReadFile (in: hFile=0x23c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd8, lpOverlapped=0x0) returned 1
	[0229.374] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0229.375] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0229.375] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0229.375] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0229.375] WriteFile (in: hFile=0x23c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd8, lpOverlapped=0x0) returned 1
	[0229.375] FlushFileBuffers (hFile=0x23c) returned 1
	[0229.398] FlushFileBuffers (hFile=0x170) returned 1
	[0229.491] CloseHandle (hObject=0x23c) returned 1
	[0229.512] CloseHandle (hObject=0x170) returned 1
	[0229.512] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json")) returned 1
	[0229.513] SetEvent (hEvent=0xfc) returned 1
	[0229.515] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0229.515] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=219) returned 1
	[0229.515] CloseHandle (hObject=0x170) returned 1
	[0229.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0229.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0229.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0229.516] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0229.516] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0229.516] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0229.516] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0229.516] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xdb, lpOverlapped=0x0) returned 1
	[0229.517] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0229.518] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0229.518] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0229.518] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0229.518] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xdb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xdb, lpOverlapped=0x0) returned 1
	[0229.519] FlushFileBuffers (hFile=0x170) returned 1
	[0229.586] FlushFileBuffers (hFile=0x144) returned 1
	[0229.596] CloseHandle (hObject=0x170) returned 1
	[0229.596] CloseHandle (hObject=0x144) returned 1
	[0229.597] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json")) returned 1
	[0229.597] SetEvent (hEvent=0xfc) returned 1
	[0229.599] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0229.599] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=221) returned 1
	[0229.599] CloseHandle (hObject=0x144) returned 1
	[0229.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json")) returned 0x2020
	[0229.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json")) returned 0x2020
	[0229.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0229.600] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0229.600] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0229.600] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0229.600] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0229.635] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xdd, lpOverlapped=0x0) returned 1
	[0229.636] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0229.637] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0229.637] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0229.637] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0229.637] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xdd, lpOverlapped=0x0) returned 1
	[0229.637] FlushFileBuffers (hFile=0x144) returned 1
	[0229.795] FlushFileBuffers (hFile=0x170) returned 1
	[0229.905] CloseHandle (hObject=0x144) returned 1
	[0229.939] CloseHandle (hObject=0x170) returned 1
	[0229.940] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json")) returned 1
	[0229.940] SetEvent (hEvent=0xfc) returned 1
	[0229.942] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0229.942] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=235) returned 1
	[0229.942] CloseHandle (hObject=0x170) returned 1
	[0229.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0229.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0229.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0229.943] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0229.943] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0229.943] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0229.943] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0229.947] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xeb, lpOverlapped=0x0) returned 1
	[0229.947] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0229.948] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0229.949] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0229.949] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0229.949] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xeb, lpOverlapped=0x0) returned 1
	[0229.949] FlushFileBuffers (hFile=0x170) returned 1
	[0230.137] FlushFileBuffers (hFile=0x144) returned 1
	[0230.345] CloseHandle (hObject=0x170) returned 1
	[0230.345] CloseHandle (hObject=0x144) returned 1
	[0230.345] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json")) returned 1
	[0230.346] SetEvent (hEvent=0xfc) returned 1
	[0230.348] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0230.349] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=213) returned 1
	[0230.349] CloseHandle (hObject=0x144) returned 1
	[0230.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json")) returned 0x2020
	[0230.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json")) returned 0x2020
	[0230.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0230.349] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0230.349] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0230.349] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0230.349] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0230.350] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd5, lpOverlapped=0x0) returned 1
	[0230.350] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0230.351] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0230.352] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0230.352] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0230.352] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd5, lpOverlapped=0x0) returned 1
	[0230.352] FlushFileBuffers (hFile=0x144) returned 1
	[0230.416] FlushFileBuffers (hFile=0x170) returned 1
	[0230.771] CloseHandle (hObject=0x144) returned 1
	[0230.771] CloseHandle (hObject=0x170) returned 1
	[0230.771] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json")) returned 1
	[0230.772] SetEvent (hEvent=0xfc) returned 1
	[0230.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0230.774] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=218) returned 1
	[0230.774] CloseHandle (hObject=0x170) returned 1
	[0230.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0230.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0230.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0230.774] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0230.774] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0230.774] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0230.774] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0230.775] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xda, lpOverlapped=0x0) returned 1
	[0230.776] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0230.777] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0230.777] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0230.777] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0230.777] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xda, lpOverlapped=0x0) returned 1
	[0230.777] FlushFileBuffers (hFile=0x170) returned 1
	[0230.855] FlushFileBuffers (hFile=0x144) returned 1
	[0230.858] CloseHandle (hObject=0x170) returned 1
	[0230.858] CloseHandle (hObject=0x144) returned 1
	[0230.859] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json")) returned 1
	[0230.859] SetEvent (hEvent=0xfc) returned 1
	[0230.860] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0230.860] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=228) returned 1
	[0230.860] CloseHandle (hObject=0x144) returned 1
	[0230.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0230.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0230.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0230.861] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0230.861] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0230.861] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0230.861] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0230.861] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe4, lpOverlapped=0x0) returned 1
	[0230.862] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0230.863] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0230.863] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0230.863] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0230.863] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe4, lpOverlapped=0x0) returned 1
	[0230.864] FlushFileBuffers (hFile=0x144) returned 1
	[0231.367] FlushFileBuffers (hFile=0x170) returned 1
	[0232.471] CloseHandle (hObject=0x144) returned 1
	[0232.471] CloseHandle (hObject=0x170) returned 1
	[0232.471] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json")) returned 1
	[0232.473] SetEvent (hEvent=0xfc) returned 1
	[0232.473] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0232.473] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=207) returned 1
	[0232.473] CloseHandle (hObject=0x170) returned 1
	[0232.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json")) returned 0x2020
	[0232.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json")) returned 0x2020
	[0232.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0232.474] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0232.474] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0232.474] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0232.474] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0232.483] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xcf, lpOverlapped=0x0) returned 1
	[0232.486] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xd0, lpOverlapped=0x0) returned 1
	[0232.487] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0232.487] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0232.487] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0232.487] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xcf, lpOverlapped=0x0) returned 1
	[0232.487] FlushFileBuffers (hFile=0x170) returned 1
	[0232.875] FlushFileBuffers (hFile=0x144) returned 1
	[0232.880] CloseHandle (hObject=0x170) returned 1
	[0232.880] CloseHandle (hObject=0x144) returned 1
	[0232.881] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json")) returned 1
	[0232.882] SetEvent (hEvent=0xfc) returned 1
	[0232.882] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0232.883] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=195) returned 1
	[0232.883] CloseHandle (hObject=0x144) returned 1
	[0232.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json")) returned 0x2020
	[0232.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json")) returned 0x2020
	[0232.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0232.883] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0232.883] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0232.883] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0232.883] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0232.884] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xc3, lpOverlapped=0x0) returned 1
	[0232.885] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xd0, lpOverlapped=0x0) returned 1
	[0232.886] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0232.886] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0232.886] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0232.886] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xc3, lpOverlapped=0x0) returned 1
	[0232.887] FlushFileBuffers (hFile=0x144) returned 1
	[0232.898] FlushFileBuffers (hFile=0x170) returned 1
	[0232.902] CloseHandle (hObject=0x144) returned 1
	[0232.902] CloseHandle (hObject=0x170) returned 1
	[0232.903] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json")) returned 1
	[0232.904] SetEvent (hEvent=0xfc) returned 1
	[0232.904] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0232.905] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=206) returned 1
	[0232.905] CloseHandle (hObject=0x170) returned 1
	[0232.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0232.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0232.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0232.905] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0232.905] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0232.905] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0232.905] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0232.906] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xce, lpOverlapped=0x0) returned 1
	[0232.907] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xd0, lpOverlapped=0x0) returned 1
	[0232.907] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0232.908] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0232.908] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0232.908] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xce, lpOverlapped=0x0) returned 1
	[0232.908] FlushFileBuffers (hFile=0x170) returned 1
	[0232.918] FlushFileBuffers (hFile=0x144) returned 1
	[0232.922] CloseHandle (hObject=0x170) returned 1
	[0232.922] CloseHandle (hObject=0x144) returned 1
	[0232.923] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json")) returned 1
	[0232.924] SetEvent (hEvent=0xfc) returned 1
	[0232.925] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0232.925] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=213) returned 1
	[0232.925] CloseHandle (hObject=0x144) returned 1
	[0232.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0232.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0232.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0232.925] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0232.926] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0232.926] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0232.926] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0232.926] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd5, lpOverlapped=0x0) returned 1
	[0232.927] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0232.928] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0232.928] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0232.928] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0232.928] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd5, lpOverlapped=0x0) returned 1
	[0232.928] FlushFileBuffers (hFile=0x144) returned 1
	[0233.361] FlushFileBuffers (hFile=0x170) returned 1
	[0233.638] CloseHandle (hObject=0x144) returned 1
	[0233.638] CloseHandle (hObject=0x170) returned 1
	[0233.638] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json")) returned 1
	[0233.639] SetEvent (hEvent=0xfc) returned 1
	[0233.639] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0233.641] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=221) returned 1
	[0233.641] CloseHandle (hObject=0x170) returned 1
	[0233.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0233.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0233.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0233.641] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0233.641] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0233.641] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0233.641] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0233.642] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xdd, lpOverlapped=0x0) returned 1
	[0233.643] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0233.644] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0233.644] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0233.644] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0233.644] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xdd, lpOverlapped=0x0) returned 1
	[0233.644] FlushFileBuffers (hFile=0x170) returned 1
	[0233.648] FlushFileBuffers (hFile=0x144) returned 1
	[0233.651] CloseHandle (hObject=0x170) returned 1
	[0233.734] CloseHandle (hObject=0x144) returned 1
	[0233.734] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json")) returned 1
	[0233.735] SetEvent (hEvent=0xfc) returned 1
	[0233.736] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0233.737] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=218) returned 1
	[0233.737] CloseHandle (hObject=0x144) returned 1
	[0233.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0233.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0233.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0233.737] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0233.737] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0233.738] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0233.738] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0233.738] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xda, lpOverlapped=0x0) returned 1
	[0233.740] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0233.741] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0233.741] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0233.741] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0233.741] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xda, lpOverlapped=0x0) returned 1
	[0233.741] FlushFileBuffers (hFile=0x144) returned 1
	[0233.880] FlushFileBuffers (hFile=0x170) returned 1
	[0233.999] CloseHandle (hObject=0x144) returned 1
	[0233.999] CloseHandle (hObject=0x170) returned 1
	[0234.000] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json")) returned 1
	[0234.001] SetEvent (hEvent=0xfc) returned 1
	[0234.002] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0234.003] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=214) returned 1
	[0234.003] CloseHandle (hObject=0x170) returned 1
	[0234.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0234.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0234.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.003] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0234.003] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.004] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.004] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0234.004] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd6, lpOverlapped=0x0) returned 1
	[0234.005] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0234.006] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0234.006] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.006] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.006] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd6, lpOverlapped=0x0) returned 1
	[0234.007] FlushFileBuffers (hFile=0x170) returned 1
	[0234.122] FlushFileBuffers (hFile=0x144) returned 1
	[0234.346] CloseHandle (hObject=0x170) returned 1
	[0234.346] CloseHandle (hObject=0x144) returned 1
	[0234.347] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json")) returned 1
	[0234.347] SetEvent (hEvent=0xfc) returned 1
	[0234.348] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0234.349] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6707) returned 1
	[0234.349] CloseHandle (hObject=0x144) returned 1
	[0234.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png")) returned 0x2020
	[0234.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png")) returned 0x2020
	[0234.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.350] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0234.350] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.350] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.350] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0234.351] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1a33, lpOverlapped=0x0) returned 1
	[0234.353] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1a40, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1a40, lpOverlapped=0x0) returned 1
	[0234.353] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0234.354] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.354] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.354] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1a33, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1a33, lpOverlapped=0x0) returned 1
	[0234.354] FlushFileBuffers (hFile=0x144) returned 1
	[0234.357] FlushFileBuffers (hFile=0x170) returned 1
	[0234.358] CloseHandle (hObject=0x144) returned 1
	[0234.358] CloseHandle (hObject=0x170) returned 1
	[0234.358] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png")) returned 1
	[0234.360] SetEvent (hEvent=0xfc) returned 1
	[0234.360] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0234.361] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1004) returned 1
	[0234.361] CloseHandle (hObject=0x170) returned 1
	[0234.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json")) returned 0x2020
	[0234.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json")) returned 0x2020
	[0234.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.361] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0234.361] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.361] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.361] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0234.362] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3ec, lpOverlapped=0x0) returned 1
	[0234.364] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3f0, lpOverlapped=0x0) returned 1
	[0234.365] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0234.365] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.365] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.365] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3ec, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3ec, lpOverlapped=0x0) returned 1
	[0234.366] FlushFileBuffers (hFile=0x170) returned 1
	[0234.368] FlushFileBuffers (hFile=0x144) returned 1
	[0234.370] CloseHandle (hObject=0x170) returned 1
	[0234.370] CloseHandle (hObject=0x144) returned 1
	[0234.370] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json")) returned 1
	[0234.371] SetEvent (hEvent=0xfc) returned 1
	[0234.371] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0234.372] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=278) returned 1
	[0234.372] CloseHandle (hObject=0x144) returned 1
	[0234.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0234.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0234.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.373] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0234.373] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.373] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.373] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0234.373] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x116, lpOverlapped=0x0) returned 1
	[0234.374] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x120, lpOverlapped=0x0) returned 1
	[0234.375] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0234.375] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.376] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.376] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x116, lpOverlapped=0x0) returned 1
	[0234.376] FlushFileBuffers (hFile=0x144) returned 1
	[0234.379] FlushFileBuffers (hFile=0x170) returned 1
	[0234.381] CloseHandle (hObject=0x144) returned 1
	[0234.381] CloseHandle (hObject=0x170) returned 1
	[0234.381] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json")) returned 1
	[0234.389] SetEvent (hEvent=0xfc) returned 1
	[0234.389] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0234.390] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=319) returned 1
	[0234.390] CloseHandle (hObject=0x170) returned 1
	[0234.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0234.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0234.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.390] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0234.391] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.391] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.391] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0234.391] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x13f, lpOverlapped=0x0) returned 1
	[0234.392] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x140, lpOverlapped=0x0) returned 1
	[0234.393] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0234.393] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.393] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.394] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x13f, lpOverlapped=0x0) returned 1
	[0234.394] FlushFileBuffers (hFile=0x170) returned 1
	[0234.400] FlushFileBuffers (hFile=0x144) returned 1
	[0234.402] CloseHandle (hObject=0x170) returned 1
	[0234.402] CloseHandle (hObject=0x144) returned 1
	[0234.402] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json")) returned 1
	[0234.403] SetEvent (hEvent=0xfc) returned 1
	[0234.403] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0234.404] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=265) returned 1
	[0234.404] CloseHandle (hObject=0x144) returned 1
	[0234.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0234.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0234.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.404] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0234.404] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.404] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.404] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0234.405] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x109, lpOverlapped=0x0) returned 1
	[0234.406] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0234.407] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0234.407] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.407] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.407] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x109, lpOverlapped=0x0) returned 1
	[0234.408] FlushFileBuffers (hFile=0x144) returned 1
	[0234.411] FlushFileBuffers (hFile=0x170) returned 1
	[0234.412] CloseHandle (hObject=0x144) returned 1
	[0234.413] CloseHandle (hObject=0x170) returned 1
	[0234.413] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json")) returned 1
	[0234.413] SetEvent (hEvent=0xfc) returned 1
	[0234.414] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0234.414] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=259) returned 1
	[0234.414] CloseHandle (hObject=0x170) returned 1
	[0234.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0234.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0234.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.415] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0234.415] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.415] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.415] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0234.415] ReadFile (in: hFile=0x170, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x103, lpOverlapped=0x0) returned 1
	[0234.416] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0234.417] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0234.417] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.417] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.417] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x103, lpOverlapped=0x0) returned 1
	[0234.418] FlushFileBuffers (hFile=0x170) returned 1
	[0234.421] FlushFileBuffers (hFile=0x144) returned 1
	[0234.422] CloseHandle (hObject=0x170) returned 1
	[0234.422] CloseHandle (hObject=0x144) returned 1
	[0234.422] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json")) returned 1
	[0234.423] SetEvent (hEvent=0xfc) returned 1
	[0234.423] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0234.425] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=243) returned 1
	[0234.425] CloseHandle (hObject=0x144) returned 1
	[0234.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json")) returned 0x2020
	[0234.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json")) returned 0x2020
	[0234.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.425] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0234.425] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.426] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0234.426] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0234.426] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xf3, lpOverlapped=0x0) returned 1
	[0234.427] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0234.428] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0234.428] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.428] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0234.428] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xf3, lpOverlapped=0x0) returned 1
	[0234.428] FlushFileBuffers (hFile=0x144) returned 1
	[0235.071] FlushFileBuffers (hFile=0x170) returned 1
	[0235.664] CloseHandle (hObject=0x144) returned 1
	[0235.664] CloseHandle (hObject=0x170) returned 1
	[0235.664] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json")) returned 1
	[0235.665] SetEvent (hEvent=0xfc) returned 1
	[0235.670] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x250
	[0235.671] GetFileSizeEx (in: hFile=0x250, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=329) returned 1
	[0235.671] CloseHandle (hObject=0x250) returned 1
	[0235.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json")) returned 0x2020
	[0235.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json")) returned 0x2020
	[0235.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0235.672] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x250
	[0235.672] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0235.672] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0235.672] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0235.673] ReadFile (in: hFile=0x250, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x149, lpOverlapped=0x0) returned 1
	[0235.673] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x150, lpOverlapped=0x0) returned 1
	[0235.674] WriteFile (in: hFile=0x170, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0235.675] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0235.675] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0235.675] WriteFile (in: hFile=0x250, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x149, lpOverlapped=0x0) returned 1
	[0235.675] FlushFileBuffers (hFile=0x250) returned 1
	[0236.261] FlushFileBuffers (hFile=0x170) returned 1
	[0236.355] CloseHandle (hObject=0x250) returned 1
	[0236.355] CloseHandle (hObject=0x170) returned 1
	[0236.355] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json")) returned 1
	[0236.356] SetEvent (hEvent=0xfc) returned 1
	[0236.357] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x250
	[0236.358] GetFileSizeEx (in: hFile=0x250, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=249) returned 1
	[0236.358] CloseHandle (hObject=0x250) returned 1
	[0236.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json")) returned 0x2020
	[0236.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json")) returned 0x2020
	[0236.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0236.359] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x250
	[0236.360] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0236.360] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0236.360] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0236.360] ReadFile (in: hFile=0x250, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xf9, lpOverlapped=0x0) returned 1
	[0236.361] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0236.362] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0236.362] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0236.363] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0236.363] WriteFile (in: hFile=0x250, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xf9, lpOverlapped=0x0) returned 1
	[0236.363] FlushFileBuffers (hFile=0x250) returned 1
	[0236.780] FlushFileBuffers (hFile=0x144) returned 1
	[0236.845] CloseHandle (hObject=0x250) returned 1
	[0236.845] CloseHandle (hObject=0x144) returned 1
	[0236.845] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json")) returned 1
	[0236.846] SetEvent (hEvent=0xfc) returned 1
	[0236.847] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0236.848] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=257) returned 1
	[0236.848] CloseHandle (hObject=0x144) returned 1
	[0236.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0236.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0236.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0236.848] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0236.848] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0236.848] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0236.848] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0236.859] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x101, lpOverlapped=0x0) returned 1
	[0236.860] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0236.861] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0236.861] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0236.861] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0236.861] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x101, lpOverlapped=0x0) returned 1
	[0236.862] FlushFileBuffers (hFile=0x144) returned 1
	[0236.875] FlushFileBuffers (hFile=0x260) returned 1
	[0237.090] CloseHandle (hObject=0x144) returned 1
	[0237.090] CloseHandle (hObject=0x260) returned 1
	[0237.090] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json")) returned 1
	[0237.091] SetEvent (hEvent=0xfc) returned 1
	[0237.091] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0237.093] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=252) returned 1
	[0237.093] CloseHandle (hObject=0x260) returned 1
	[0237.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0237.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0237.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0237.093] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0237.093] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0237.093] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0237.093] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0237.094] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xfc, lpOverlapped=0x0) returned 1
	[0237.095] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0237.096] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0237.096] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0237.096] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0237.097] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xfc, lpOverlapped=0x0) returned 1
	[0237.097] FlushFileBuffers (hFile=0x260) returned 1
	[0237.334] FlushFileBuffers (hFile=0x144) returned 1
	[0237.467] CloseHandle (hObject=0x260) returned 1
	[0237.467] CloseHandle (hObject=0x144) returned 1
	[0237.468] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json")) returned 1
	[0237.468] SetEvent (hEvent=0xfc) returned 1
	[0237.469] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0237.471] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=345) returned 1
	[0237.471] CloseHandle (hObject=0x144) returned 1
	[0237.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0237.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0237.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0237.471] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0237.471] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0237.471] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0237.471] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0237.472] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x159, lpOverlapped=0x0) returned 1
	[0237.473] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x160, lpOverlapped=0x0) returned 1
	[0237.474] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0237.474] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0237.474] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0237.474] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x159, lpOverlapped=0x0) returned 1
	[0237.475] FlushFileBuffers (hFile=0x144) returned 1
	[0237.495] FlushFileBuffers (hFile=0x260) returned 1
	[0237.515] CloseHandle (hObject=0x144) returned 1
	[0237.516] CloseHandle (hObject=0x260) returned 1
	[0237.516] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json")) returned 1
	[0237.516] SetEvent (hEvent=0xfc) returned 1
	[0237.518] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0237.519] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=264) returned 1
	[0237.519] CloseHandle (hObject=0x25c) returned 1
	[0237.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0237.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0237.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0237.519] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0237.519] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0237.519] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0237.519] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0237.520] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x108, lpOverlapped=0x0) returned 1
	[0237.521] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0237.522] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0237.522] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0237.522] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0237.522] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x108, lpOverlapped=0x0) returned 1
	[0237.522] FlushFileBuffers (hFile=0x25c) returned 1
	[0238.072] FlushFileBuffers (hFile=0x204) returned 1
	[0238.454] CloseHandle (hObject=0x25c) returned 1
	[0238.454] CloseHandle (hObject=0x204) returned 1
	[0238.454] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json")) returned 1
	[0238.455] SetEvent (hEvent=0xfc) returned 1
	[0238.456] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0238.458] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=258) returned 1
	[0238.458] CloseHandle (hObject=0x204) returned 1
	[0238.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json")) returned 0x2020
	[0238.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json")) returned 0x2020
	[0238.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0238.458] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0238.458] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0238.458] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0238.458] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0238.550] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x102, lpOverlapped=0x0) returned 1
	[0238.550] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0238.551] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0238.552] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0238.552] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0238.552] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x102, lpOverlapped=0x0) returned 1
	[0238.552] FlushFileBuffers (hFile=0x204) returned 1
	[0238.656] FlushFileBuffers (hFile=0x25c) returned 1
	[0238.681] CloseHandle (hObject=0x204) returned 1
	[0238.681] CloseHandle (hObject=0x25c) returned 1
	[0238.682] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json")) returned 1
	[0238.695] SetEvent (hEvent=0xfc) returned 1
	[0238.704] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0238.706] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=285) returned 1
	[0238.706] CloseHandle (hObject=0x25c) returned 1
	[0238.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0238.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0238.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0238.715] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0238.715] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0238.715] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0238.716] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0238.728] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x11d, lpOverlapped=0x0) returned 1
	[0238.742] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x120, lpOverlapped=0x0) returned 1
	[0238.743] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0238.744] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0238.744] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0238.744] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x11d, lpOverlapped=0x0) returned 1
	[0238.744] FlushFileBuffers (hFile=0x25c) returned 1
	[0238.836] FlushFileBuffers (hFile=0x204) returned 1
	[0238.937] CloseHandle (hObject=0x25c) returned 1
	[0238.937] CloseHandle (hObject=0x204) returned 1
	[0238.937] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json")) returned 1
	[0238.938] SetEvent (hEvent=0xfc) returned 1
	[0238.939] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0238.941] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=257) returned 1
	[0238.941] CloseHandle (hObject=0x204) returned 1
	[0238.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0238.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0238.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0238.941] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0238.941] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0238.941] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0238.941] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0238.942] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x101, lpOverlapped=0x0) returned 1
	[0238.943] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0238.944] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0238.944] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0238.944] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0238.944] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x101, lpOverlapped=0x0) returned 1
	[0238.944] FlushFileBuffers (hFile=0x204) returned 1
	[0239.426] FlushFileBuffers (hFile=0x25c) returned 1
	[0239.523] CloseHandle (hObject=0x204) returned 1
	[0239.523] CloseHandle (hObject=0x25c) returned 1
	[0239.523] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json")) returned 1
	[0239.524] SetEvent (hEvent=0xfc) returned 1
	[0239.525] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0239.526] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=264) returned 1
	[0239.526] CloseHandle (hObject=0x25c) returned 1
	[0239.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0239.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0239.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0239.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0239.527] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0239.527] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0239.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0239.625] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x108, lpOverlapped=0x0) returned 1
	[0239.626] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0239.627] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0239.627] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0239.627] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0239.627] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x108, lpOverlapped=0x0) returned 1
	[0239.627] FlushFileBuffers (hFile=0x25c) returned 1
	[0239.783] FlushFileBuffers (hFile=0x204) returned 1
	[0240.063] CloseHandle (hObject=0x25c) returned 1
	[0240.063] CloseHandle (hObject=0x204) returned 1
	[0240.063] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json")) returned 1
	[0240.064] SetEvent (hEvent=0xfc) returned 1
	[0240.065] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0240.066] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=338) returned 1
	[0240.066] CloseHandle (hObject=0x204) returned 1
	[0240.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0240.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0240.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0240.067] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0240.067] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0240.067] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0240.067] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0240.067] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x152, lpOverlapped=0x0) returned 1
	[0240.068] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x160, lpOverlapped=0x0) returned 1
	[0240.069] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0240.069] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0240.070] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0240.070] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x152, lpOverlapped=0x0) returned 1
	[0240.070] FlushFileBuffers (hFile=0x204) returned 1
	[0240.087] FlushFileBuffers (hFile=0x25c) returned 1
	[0240.098] CloseHandle (hObject=0x204) returned 1
	[0240.098] CloseHandle (hObject=0x25c) returned 1
	[0240.098] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json")) returned 1
	[0240.099] SetEvent (hEvent=0xfc) returned 1
	[0240.100] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0240.101] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=268) returned 1
	[0240.101] CloseHandle (hObject=0x25c) returned 1
	[0240.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0240.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0240.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0240.102] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0240.102] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0240.102] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0240.102] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0240.102] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10c, lpOverlapped=0x0) returned 1
	[0240.103] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0240.104] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0240.104] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0240.104] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0240.104] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10c, lpOverlapped=0x0) returned 1
	[0240.105] FlushFileBuffers (hFile=0x25c) returned 1
	[0240.452] FlushFileBuffers (hFile=0x204) returned 1
	[0240.568] CloseHandle (hObject=0x25c) returned 1
	[0240.568] CloseHandle (hObject=0x204) returned 1
	[0240.568] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json")) returned 1
	[0240.569] SetEvent (hEvent=0xfc) returned 1
	[0240.570] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0240.571] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=253) returned 1
	[0240.571] CloseHandle (hObject=0x204) returned 1
	[0240.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0240.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0240.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0240.571] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0240.571] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0240.571] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0240.571] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0240.572] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xfd, lpOverlapped=0x0) returned 1
	[0240.573] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0240.574] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0240.574] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0240.574] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0240.574] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xfd, lpOverlapped=0x0) returned 1
	[0240.574] FlushFileBuffers (hFile=0x204) returned 1
	[0240.655] FlushFileBuffers (hFile=0x25c) returned 1
	[0240.684] CloseHandle (hObject=0x204) returned 1
	[0240.684] CloseHandle (hObject=0x25c) returned 1
	[0240.684] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json")) returned 1
	[0240.685] SetEvent (hEvent=0xfc) returned 1
	[0240.685] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0240.686] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=270) returned 1
	[0240.686] CloseHandle (hObject=0x25c) returned 1
	[0240.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0240.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0240.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0240.686] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0240.686] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0240.686] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0240.686] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0240.687] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10e, lpOverlapped=0x0) returned 1
	[0240.688] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0240.689] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0240.689] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0240.689] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0240.690] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10e, lpOverlapped=0x0) returned 1
	[0240.690] FlushFileBuffers (hFile=0x25c) returned 1
	[0240.693] FlushFileBuffers (hFile=0x204) returned 1
	[0240.902] CloseHandle (hObject=0x25c) returned 1
	[0240.902] CloseHandle (hObject=0x204) returned 1
	[0240.902] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json")) returned 1
	[0240.903] SetEvent (hEvent=0xfc) returned 1
	[0240.903] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0240.905] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=353) returned 1
	[0240.905] CloseHandle (hObject=0x204) returned 1
	[0240.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0240.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0240.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0240.905] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0240.905] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0240.905] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0240.905] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0240.906] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x161, lpOverlapped=0x0) returned 1
	[0240.907] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x170, lpOverlapped=0x0) returned 1
	[0240.908] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0240.908] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0240.908] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0240.909] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x161, lpOverlapped=0x0) returned 1
	[0240.909] FlushFileBuffers (hFile=0x204) returned 1
	[0240.912] FlushFileBuffers (hFile=0x25c) returned 1
	[0240.914] CloseHandle (hObject=0x204) returned 1
	[0241.051] CloseHandle (hObject=0x25c) returned 1
	[0241.051] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json")) returned 1
	[0241.051] SetEvent (hEvent=0xfc) returned 1
	[0241.053] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.054] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=279) returned 1
	[0241.054] CloseHandle (hObject=0x25c) returned 1
	[0241.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0241.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0241.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.054] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.055] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.055] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.055] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0241.055] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x117, lpOverlapped=0x0) returned 1
	[0241.056] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x120, lpOverlapped=0x0) returned 1
	[0241.057] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.057] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.057] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.057] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x117, lpOverlapped=0x0) returned 1
	[0241.057] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.091] FlushFileBuffers (hFile=0x204) returned 1
	[0241.133] CloseHandle (hObject=0x25c) returned 1
	[0241.133] CloseHandle (hObject=0x204) returned 1
	[0241.133] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json")) returned 1
	[0241.135] SetEvent (hEvent=0xfc) returned 1
	[0241.137] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.138] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=267) returned 1
	[0241.139] CloseHandle (hObject=0x204) returned 1
	[0241.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0241.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0241.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.139] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.139] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.139] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.139] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0241.140] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10b, lpOverlapped=0x0) returned 1
	[0241.141] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0241.142] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.142] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.142] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.142] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10b, lpOverlapped=0x0) returned 1
	[0241.143] FlushFileBuffers (hFile=0x204) returned 1
	[0241.149] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.234] CloseHandle (hObject=0x204) returned 1
	[0241.235] CloseHandle (hObject=0x25c) returned 1
	[0241.237] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json")) returned 1
	[0241.240] SetEvent (hEvent=0xfc) returned 1
	[0241.241] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.250] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3406) returned 1
	[0241.250] CloseHandle (hObject=0x25c) returned 1
	[0241.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png")) returned 0x2020
	[0241.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png")) returned 0x2020
	[0241.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.251] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.251] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.252] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.252] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0241.252] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd4e, lpOverlapped=0x0) returned 1
	[0241.253] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xd50, lpOverlapped=0x0) returned 1
	[0241.254] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0241.255] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.255] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.255] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd4e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd4e, lpOverlapped=0x0) returned 1
	[0241.255] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.516] FlushFileBuffers (hFile=0x204) returned 1
	[0241.542] CloseHandle (hObject=0x25c) returned 1
	[0241.542] CloseHandle (hObject=0x204) returned 1
	[0241.543] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png")) returned 1
	[0241.555] SetEvent (hEvent=0xfc) returned 1
	[0241.561] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.570] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0241.570] CloseHandle (hObject=0x204) returned 1
	[0241.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0241.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0241.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.571] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.571] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.571] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.571] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0241.829] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0241.833] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0241.833] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.834] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.834] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.834] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0241.834] FlushFileBuffers (hFile=0x204) returned 1
	[0241.837] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.840] CloseHandle (hObject=0x204) returned 1
	[0241.840] CloseHandle (hObject=0x25c) returned 1
	[0241.840] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json")) returned 1
	[0241.841] SetEvent (hEvent=0xfc) returned 1
	[0241.841] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.842] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0241.842] CloseHandle (hObject=0x25c) returned 1
	[0241.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json")) returned 0x2020
	[0241.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json")) returned 0x2020
	[0241.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.842] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.842] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.842] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.843] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0241.843] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0241.844] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0241.845] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.845] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.845] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.845] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0241.845] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.849] FlushFileBuffers (hFile=0x204) returned 1
	[0241.851] CloseHandle (hObject=0x25c) returned 1
	[0241.851] CloseHandle (hObject=0x204) returned 1
	[0241.851] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json")) returned 1
	[0241.851] SetEvent (hEvent=0xfc) returned 1
	[0241.852] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.852] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0241.852] CloseHandle (hObject=0x204) returned 1
	[0241.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json")) returned 0x2020
	[0241.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json")) returned 0x2020
	[0241.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.853] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.853] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.853] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.853] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0241.853] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0241.854] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0241.855] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.855] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.855] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.855] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0241.863] FlushFileBuffers (hFile=0x204) returned 1
	[0241.868] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.870] CloseHandle (hObject=0x204) returned 1
	[0241.870] CloseHandle (hObject=0x25c) returned 1
	[0241.870] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json")) returned 1
	[0241.871] SetEvent (hEvent=0xfc) returned 1
	[0241.871] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.872] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0241.872] CloseHandle (hObject=0x25c) returned 1
	[0241.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json")) returned 0x2020
	[0241.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json")) returned 0x2020
	[0241.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.873] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.873] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.873] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.873] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0241.873] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0241.875] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0241.875] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.876] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.876] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.876] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0241.876] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.879] FlushFileBuffers (hFile=0x204) returned 1
	[0241.881] CloseHandle (hObject=0x25c) returned 1
	[0241.881] CloseHandle (hObject=0x204) returned 1
	[0241.881] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json")) returned 1
	[0241.887] SetEvent (hEvent=0xfc) returned 1
	[0241.887] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.887] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0241.887] CloseHandle (hObject=0x204) returned 1
	[0241.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json")) returned 0x2020
	[0241.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json")) returned 0x2020
	[0241.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.888] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.888] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.888] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.888] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0241.889] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0241.889] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0241.890] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.891] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.891] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.891] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0241.891] FlushFileBuffers (hFile=0x204) returned 1
	[0241.895] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.897] CloseHandle (hObject=0x204) returned 1
	[0241.897] CloseHandle (hObject=0x25c) returned 1
	[0241.897] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json")) returned 1
	[0241.898] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.899] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0241.899] CloseHandle (hObject=0x25c) returned 1
	[0241.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0241.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0241.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.899] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.900] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.900] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.900] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0241.900] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0241.901] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0241.902] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.902] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.902] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.902] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0241.902] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.906] FlushFileBuffers (hFile=0x204) returned 1
	[0241.908] CloseHandle (hObject=0x25c) returned 1
	[0241.908] CloseHandle (hObject=0x204) returned 1
	[0241.908] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json")) returned 1
	[0241.909] SetEvent (hEvent=0xfc) returned 1
	[0241.909] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.910] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0241.910] CloseHandle (hObject=0x204) returned 1
	[0241.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0241.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0241.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.910] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.910] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.910] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.910] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0241.911] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0241.912] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0241.912] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.913] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.913] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.913] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0241.913] FlushFileBuffers (hFile=0x204) returned 1
	[0241.926] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.928] CloseHandle (hObject=0x204) returned 1
	[0241.929] CloseHandle (hObject=0x25c) returned 1
	[0241.929] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json")) returned 1
	[0241.929] SetEvent (hEvent=0xfc) returned 1
	[0241.930] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.930] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0241.930] CloseHandle (hObject=0x25c) returned 1
	[0241.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json")) returned 0x2020
	[0241.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json")) returned 0x2020
	[0241.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.931] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.931] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.931] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.931] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0241.931] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0241.932] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0241.933] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.933] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.933] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.933] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0241.934] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.940] FlushFileBuffers (hFile=0x204) returned 1
	[0241.943] CloseHandle (hObject=0x25c) returned 1
	[0241.943] CloseHandle (hObject=0x204) returned 1
	[0241.943] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json")) returned 1
	[0241.944] SetEvent (hEvent=0xfc) returned 1
	[0241.944] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.945] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0241.945] CloseHandle (hObject=0x204) returned 1
	[0241.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0241.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0241.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.945] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.945] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.945] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.945] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0241.946] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0241.947] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0241.948] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.948] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.948] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.948] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0241.948] FlushFileBuffers (hFile=0x204) returned 1
	[0241.954] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.956] CloseHandle (hObject=0x204) returned 1
	[0241.956] CloseHandle (hObject=0x25c) returned 1
	[0241.956] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json")) returned 1
	[0241.957] SetEvent (hEvent=0xfc) returned 1
	[0241.957] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.958] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0241.958] CloseHandle (hObject=0x25c) returned 1
	[0241.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json")) returned 0x2020
	[0241.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json")) returned 0x2020
	[0241.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.958] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.958] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.958] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.958] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0241.959] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0241.960] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0241.963] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.963] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.963] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.963] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0241.963] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.970] FlushFileBuffers (hFile=0x204) returned 1
	[0241.972] CloseHandle (hObject=0x25c) returned 1
	[0241.972] CloseHandle (hObject=0x204) returned 1
	[0241.973] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json")) returned 1
	[0241.974] SetEvent (hEvent=0xfc) returned 1
	[0241.974] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.975] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0241.975] CloseHandle (hObject=0x204) returned 1
	[0241.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json")) returned 0x2020
	[0241.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json")) returned 0x2020
	[0241.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.975] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0241.975] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.975] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.975] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0241.976] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0241.977] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0241.978] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.978] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.978] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.978] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0241.978] FlushFileBuffers (hFile=0x204) returned 1
	[0241.988] FlushFileBuffers (hFile=0x25c) returned 1
	[0241.990] CloseHandle (hObject=0x204) returned 1
	[0241.990] CloseHandle (hObject=0x25c) returned 1
	[0241.990] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json")) returned 1
	[0241.991] SetEvent (hEvent=0xfc) returned 1
	[0241.991] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.992] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0241.992] CloseHandle (hObject=0x25c) returned 1
	[0241.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json")) returned 0x2020
	[0241.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json")) returned 0x2020
	[0241.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.993] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0241.993] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.993] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0241.993] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0241.994] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0241.995] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0241.995] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0241.996] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.996] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0241.996] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0241.996] FlushFileBuffers (hFile=0x25c) returned 1
	[0242.000] FlushFileBuffers (hFile=0x204) returned 1
	[0242.002] CloseHandle (hObject=0x25c) returned 1
	[0242.002] CloseHandle (hObject=0x204) returned 1
	[0242.002] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json")) returned 1
	[0242.003] SetEvent (hEvent=0xfc) returned 1
	[0242.003] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0242.004] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0242.004] CloseHandle (hObject=0x204) returned 1
	[0242.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0242.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0242.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.004] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0242.004] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.004] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.004] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0242.005] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0242.006] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0242.007] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0242.007] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.007] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.007] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0242.007] FlushFileBuffers (hFile=0x204) returned 1
	[0242.010] FlushFileBuffers (hFile=0x25c) returned 1
	[0242.012] CloseHandle (hObject=0x204) returned 1
	[0242.013] CloseHandle (hObject=0x25c) returned 1
	[0242.013] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json")) returned 1
	[0242.013] SetEvent (hEvent=0xfc) returned 1
	[0242.014] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0242.014] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0242.014] CloseHandle (hObject=0x25c) returned 1
	[0242.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0242.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0242.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.015] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0242.015] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.015] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.015] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0242.016] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0242.016] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0242.017] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0242.018] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.018] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.018] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0242.018] FlushFileBuffers (hFile=0x25c) returned 1
	[0242.028] FlushFileBuffers (hFile=0x204) returned 1
	[0242.031] CloseHandle (hObject=0x25c) returned 1
	[0242.031] CloseHandle (hObject=0x204) returned 1
	[0242.031] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json")) returned 1
	[0242.032] SetEvent (hEvent=0xfc) returned 1
	[0242.032] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0242.033] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0242.033] CloseHandle (hObject=0x204) returned 1
	[0242.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0242.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0242.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.033] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0242.033] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.033] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.033] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0242.034] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0242.035] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0242.036] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0242.036] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.036] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.036] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0242.036] FlushFileBuffers (hFile=0x204) returned 1
	[0242.039] FlushFileBuffers (hFile=0x25c) returned 1
	[0242.041] CloseHandle (hObject=0x204) returned 1
	[0242.041] CloseHandle (hObject=0x25c) returned 1
	[0242.041] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json")) returned 1
	[0242.042] SetEvent (hEvent=0xfc) returned 1
	[0242.042] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0242.043] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0242.043] CloseHandle (hObject=0x25c) returned 1
	[0242.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0242.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0242.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.044] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0242.044] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.044] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.044] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0242.044] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0242.045] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0242.046] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0242.047] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.047] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.047] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0242.047] FlushFileBuffers (hFile=0x25c) returned 1
	[0242.050] FlushFileBuffers (hFile=0x204) returned 1
	[0242.053] CloseHandle (hObject=0x25c) returned 1
	[0242.053] CloseHandle (hObject=0x204) returned 1
	[0242.053] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json")) returned 1
	[0242.054] SetEvent (hEvent=0xfc) returned 1
	[0242.054] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0242.055] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0242.055] CloseHandle (hObject=0x204) returned 1
	[0242.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0242.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0242.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.055] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0242.055] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.055] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.055] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0242.056] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0242.057] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0242.058] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0242.058] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.058] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.058] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0242.059] FlushFileBuffers (hFile=0x204) returned 1
	[0242.066] FlushFileBuffers (hFile=0x25c) returned 1
	[0242.069] CloseHandle (hObject=0x204) returned 1
	[0242.069] CloseHandle (hObject=0x25c) returned 1
	[0242.069] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json")) returned 1
	[0242.070] SetEvent (hEvent=0xfc) returned 1
	[0242.070] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0242.071] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=159) returned 1
	[0242.071] CloseHandle (hObject=0x25c) returned 1
	[0242.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json")) returned 0x2020
	[0242.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json")) returned 0x2020
	[0242.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.071] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0242.071] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.071] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.071] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0242.072] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x9f, lpOverlapped=0x0) returned 1
	[0242.073] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa0, lpOverlapped=0x0) returned 1
	[0242.074] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0242.074] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.074] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.074] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x9f, lpOverlapped=0x0) returned 1
	[0242.074] FlushFileBuffers (hFile=0x25c) returned 1
	[0242.078] FlushFileBuffers (hFile=0x204) returned 1
	[0242.080] CloseHandle (hObject=0x25c) returned 1
	[0242.080] CloseHandle (hObject=0x204) returned 1
	[0242.080] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json")) returned 1
	[0242.081] SetEvent (hEvent=0xfc) returned 1
	[0242.081] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0242.082] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0242.082] CloseHandle (hObject=0x204) returned 1
	[0242.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0242.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0242.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.082] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0242.082] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.082] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.082] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0242.083] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0242.083] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0242.084] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0242.084] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.084] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.085] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0242.085] FlushFileBuffers (hFile=0x204) returned 1
	[0242.088] FlushFileBuffers (hFile=0x25c) returned 1
	[0242.090] CloseHandle (hObject=0x204) returned 1
	[0242.090] CloseHandle (hObject=0x25c) returned 1
	[0242.090] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json")) returned 1
	[0242.091] SetEvent (hEvent=0xfc) returned 1
	[0242.091] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0242.092] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0242.092] CloseHandle (hObject=0x25c) returned 1
	[0242.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0242.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0242.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.092] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0242.092] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.093] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.093] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0242.093] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0242.094] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0242.095] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0242.095] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.095] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.095] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0242.095] FlushFileBuffers (hFile=0x25c) returned 1
	[0242.099] FlushFileBuffers (hFile=0x204) returned 1
	[0242.101] CloseHandle (hObject=0x25c) returned 1
	[0242.101] CloseHandle (hObject=0x204) returned 1
	[0242.101] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json")) returned 1
	[0242.102] SetEvent (hEvent=0xfc) returned 1
	[0242.102] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0242.102] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0242.102] CloseHandle (hObject=0x204) returned 1
	[0242.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0242.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0242.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.103] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0242.103] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.103] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.103] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0242.103] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0242.104] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0242.105] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0242.105] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.105] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.105] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0242.106] FlushFileBuffers (hFile=0x204) returned 1
	[0242.109] FlushFileBuffers (hFile=0x25c) returned 1
	[0242.111] CloseHandle (hObject=0x204) returned 1
	[0242.111] CloseHandle (hObject=0x25c) returned 1
	[0242.111] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json")) returned 1
	[0242.112] SetEvent (hEvent=0xfc) returned 1
	[0242.112] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0242.112] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0242.112] CloseHandle (hObject=0x25c) returned 1
	[0242.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0242.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0242.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.113] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0242.113] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.113] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.113] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0242.113] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0242.114] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0242.115] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0242.115] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.115] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.115] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0242.116] FlushFileBuffers (hFile=0x25c) returned 1
	[0242.395] FlushFileBuffers (hFile=0x204) returned 1
	[0242.571] CloseHandle (hObject=0x25c) returned 1
	[0242.572] CloseHandle (hObject=0x204) returned 1
	[0242.572] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json")) returned 1
	[0242.573] SetEvent (hEvent=0xfc) returned 1
	[0242.574] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0242.576] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0242.576] CloseHandle (hObject=0x204) returned 1
	[0242.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0242.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0242.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.576] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0242.576] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.576] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0242.576] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0242.577] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0242.578] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0242.579] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0242.579] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.579] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0242.579] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0242.579] FlushFileBuffers (hFile=0x204) returned 1
	[0242.822] FlushFileBuffers (hFile=0x25c) returned 1
	[0243.102] CloseHandle (hObject=0x204) returned 1
	[0243.102] CloseHandle (hObject=0x25c) returned 1
	[0243.387] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json")) returned 1
	[0243.399] SetEvent (hEvent=0xfc) returned 1
	[0243.410] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0243.425] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0243.438] CloseHandle (hObject=0x25c) returned 1
	[0243.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json")) returned 0x2020
	[0243.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json")) returned 0x2020
	[0243.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0243.452] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0243.460] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0243.465] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0243.465] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0243.484] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0243.487] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0243.497] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0243.498] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0243.498] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0243.498] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0243.498] FlushFileBuffers (hFile=0x25c) returned 1
	[0243.918] FlushFileBuffers (hFile=0x204) returned 1
	[0243.996] CloseHandle (hObject=0x25c) returned 1
	[0243.996] CloseHandle (hObject=0x204) returned 1
	[0243.996] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json")) returned 1
	[0243.997] SetEvent (hEvent=0xfc) returned 1
	[0243.998] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0243.999] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=157) returned 1
	[0243.999] CloseHandle (hObject=0x204) returned 1
	[0244.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png")) returned 0x2020
	[0244.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png")) returned 0x2020
	[0244.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0244.000] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0244.000] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.000] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.000] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0244.001] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x9d, lpOverlapped=0x0) returned 1
	[0244.002] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa0, lpOverlapped=0x0) returned 1
	[0244.003] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0244.003] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.003] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.003] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x9d, lpOverlapped=0x0) returned 1
	[0244.003] FlushFileBuffers (hFile=0x204) returned 1
	[0244.019] FlushFileBuffers (hFile=0x25c) returned 1
	[0244.691] CloseHandle (hObject=0x204) returned 1
	[0244.698] CloseHandle (hObject=0x25c) returned 1
	[0244.698] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png")) returned 1
	[0244.699] SetEvent (hEvent=0xfc) returned 1
	[0244.699] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0244.701] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=95) returned 1
	[0244.701] CloseHandle (hObject=0x25c) returned 1
	[0244.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js")) returned 0x2020
	[0244.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js")) returned 0x2020
	[0244.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0244.701] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0244.701] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.701] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.701] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0244.702] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5f, lpOverlapped=0x0) returned 1
	[0244.703] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x60, lpOverlapped=0x0) returned 1
	[0244.704] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0244.704] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.704] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.704] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5f, lpOverlapped=0x0) returned 1
	[0244.705] FlushFileBuffers (hFile=0x25c) returned 1
	[0244.707] FlushFileBuffers (hFile=0x204) returned 1
	[0244.709] CloseHandle (hObject=0x25c) returned 1
	[0244.709] CloseHandle (hObject=0x204) returned 1
	[0244.709] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js")) returned 1
	[0244.710] SetEvent (hEvent=0xfc) returned 1
	[0244.710] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0244.711] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=726) returned 1
	[0244.711] CloseHandle (hObject=0x204) returned 1
	[0244.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json")) returned 0x2020
	[0244.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json")) returned 0x2020
	[0244.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0244.711] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0244.711] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.711] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.711] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0244.712] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2d6, lpOverlapped=0x0) returned 1
	[0244.715] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2e0, lpOverlapped=0x0) returned 1
	[0244.716] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0244.717] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.717] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.717] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2d6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2d6, lpOverlapped=0x0) returned 1
	[0244.717] FlushFileBuffers (hFile=0x204) returned 1
	[0244.721] FlushFileBuffers (hFile=0x25c) returned 1
	[0244.723] CloseHandle (hObject=0x204) returned 1
	[0244.723] CloseHandle (hObject=0x25c) returned 1
	[0244.723] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json")) returned 1
	[0244.724] SetEvent (hEvent=0xfc) returned 1
	[0244.724] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0244.726] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=254) returned 1
	[0244.726] CloseHandle (hObject=0x25c) returned 1
	[0244.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0244.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0244.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0244.726] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0244.726] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.726] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.726] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0244.727] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xfe, lpOverlapped=0x0) returned 1
	[0244.728] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0244.729] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0244.729] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.729] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.729] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xfe, lpOverlapped=0x0) returned 1
	[0244.729] FlushFileBuffers (hFile=0x25c) returned 1
	[0244.739] FlushFileBuffers (hFile=0x204) returned 1
	[0244.742] CloseHandle (hObject=0x25c) returned 1
	[0244.742] CloseHandle (hObject=0x204) returned 1
	[0244.742] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json")) returned 1
	[0244.743] SetEvent (hEvent=0xfc) returned 1
	[0244.743] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0244.743] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=229) returned 1
	[0244.743] CloseHandle (hObject=0x204) returned 1
	[0244.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0244.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0244.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0244.744] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0244.744] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.744] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.744] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0244.744] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe5, lpOverlapped=0x0) returned 1
	[0244.745] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0244.746] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0244.746] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.747] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.747] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe5, lpOverlapped=0x0) returned 1
	[0244.747] FlushFileBuffers (hFile=0x204) returned 1
	[0244.750] FlushFileBuffers (hFile=0x25c) returned 1
	[0244.751] CloseHandle (hObject=0x204) returned 1
	[0244.751] CloseHandle (hObject=0x25c) returned 1
	[0244.751] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json")) returned 1
	[0244.752] SetEvent (hEvent=0xfc) returned 1
	[0244.752] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0244.753] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=218) returned 1
	[0244.753] CloseHandle (hObject=0x25c) returned 1
	[0244.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0244.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0244.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0244.753] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0244.753] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.753] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.753] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0244.754] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xda, lpOverlapped=0x0) returned 1
	[0244.755] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0244.756] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0244.756] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.756] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.756] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xda, lpOverlapped=0x0) returned 1
	[0244.756] FlushFileBuffers (hFile=0x25c) returned 1
	[0244.759] FlushFileBuffers (hFile=0x204) returned 1
	[0244.761] CloseHandle (hObject=0x25c) returned 1
	[0244.761] CloseHandle (hObject=0x204) returned 1
	[0244.761] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json")) returned 1
	[0244.762] SetEvent (hEvent=0xfc) returned 1
	[0244.762] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0244.762] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=207) returned 1
	[0244.762] CloseHandle (hObject=0x204) returned 1
	[0244.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json")) returned 0x2020
	[0244.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json")) returned 0x2020
	[0244.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0244.763] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0244.763] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.763] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.763] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0244.764] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xcf, lpOverlapped=0x0) returned 1
	[0244.764] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xd0, lpOverlapped=0x0) returned 1
	[0244.765] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0244.765] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.766] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.766] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xcf, lpOverlapped=0x0) returned 1
	[0244.766] FlushFileBuffers (hFile=0x204) returned 1
	[0244.769] FlushFileBuffers (hFile=0x25c) returned 1
	[0244.771] CloseHandle (hObject=0x204) returned 1
	[0244.771] CloseHandle (hObject=0x25c) returned 1
	[0244.771] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json")) returned 1
	[0244.772] SetEvent (hEvent=0xfc) returned 1
	[0244.772] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0244.773] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=220) returned 1
	[0244.773] CloseHandle (hObject=0x25c) returned 1
	[0244.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json")) returned 0x2020
	[0244.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json")) returned 0x2020
	[0244.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0244.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0244.773] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.773] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0244.774] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xdc, lpOverlapped=0x0) returned 1
	[0244.775] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0244.776] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0244.776] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.776] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0244.776] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xdc, lpOverlapped=0x0) returned 1
	[0244.776] FlushFileBuffers (hFile=0x25c) returned 1
	[0244.782] FlushFileBuffers (hFile=0x204) returned 1
	[0244.784] CloseHandle (hObject=0x25c) returned 1
	[0244.784] CloseHandle (hObject=0x204) returned 1
	[0244.784] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json")) returned 1
	[0244.785] SetEvent (hEvent=0xfc) returned 1
	[0244.785] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0244.785] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=304) returned 1
	[0244.786] CloseHandle (hObject=0x204) returned 1
	[0244.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json")) returned 0x2020
	[0244.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json")) returned 0x2020
	[0244.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0244.786] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0244.786] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.786] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0244.786] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0244.840] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x130, lpOverlapped=0x0) returned 1
	[0245.119] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x140, lpOverlapped=0x0) returned 1
	[0245.120] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.120] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.120] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.121] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x130, lpOverlapped=0x0) returned 1
	[0245.121] FlushFileBuffers (hFile=0x204) returned 1
	[0245.125] FlushFileBuffers (hFile=0x25c) returned 1
	[0245.127] CloseHandle (hObject=0x204) returned 1
	[0245.127] CloseHandle (hObject=0x25c) returned 1
	[0245.127] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json")) returned 1
	[0245.128] SetEvent (hEvent=0xfc) returned 1
	[0245.128] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0245.130] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=213) returned 1
	[0245.130] CloseHandle (hObject=0x25c) returned 1
	[0245.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json")) returned 0x2020
	[0245.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json")) returned 0x2020
	[0245.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.130] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0245.130] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.130] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.130] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.131] ReadFile (in: hFile=0x25c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd5, lpOverlapped=0x0) returned 1
	[0245.132] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0245.133] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.133] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.133] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.133] WriteFile (in: hFile=0x25c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd5, lpOverlapped=0x0) returned 1
	[0245.133] FlushFileBuffers (hFile=0x25c) returned 1
	[0245.144] FlushFileBuffers (hFile=0x204) returned 1
	[0245.146] CloseHandle (hObject=0x25c) returned 1
	[0245.146] CloseHandle (hObject=0x204) returned 1
	[0245.146] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json")) returned 1
	[0245.147] SetEvent (hEvent=0xfc) returned 1
	[0245.147] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.148] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=229) returned 1
	[0245.148] CloseHandle (hObject=0x204) returned 1
	[0245.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json")) returned 0x2020
	[0245.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json")) returned 0x2020
	[0245.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.148] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.148] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.148] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.148] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0245.163] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe5, lpOverlapped=0x0) returned 1
	[0245.164] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0245.165] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.165] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.165] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.165] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe5, lpOverlapped=0x0) returned 1
	[0245.166] FlushFileBuffers (hFile=0x204) returned 1
	[0245.171] FlushFileBuffers (hFile=0x144) returned 1
	[0245.175] CloseHandle (hObject=0x204) returned 1
	[0245.175] CloseHandle (hObject=0x144) returned 1
	[0245.176] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json")) returned 1
	[0245.176] SetEvent (hEvent=0xfc) returned 1
	[0245.177] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0245.177] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=229) returned 1
	[0245.177] CloseHandle (hObject=0x144) returned 1
	[0245.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json")) returned 0x2020
	[0245.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json")) returned 0x2020
	[0245.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.178] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0245.178] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.178] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.178] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.178] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe5, lpOverlapped=0x0) returned 1
	[0245.179] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0245.180] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.180] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.180] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.180] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe5, lpOverlapped=0x0) returned 1
	[0245.180] FlushFileBuffers (hFile=0x144) returned 1
	[0245.340] FlushFileBuffers (hFile=0x204) returned 1
	[0245.342] CloseHandle (hObject=0x144) returned 1
	[0245.342] CloseHandle (hObject=0x204) returned 1
	[0245.342] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json")) returned 1
	[0245.343] SetEvent (hEvent=0xfc) returned 1
	[0245.343] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.344] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=226) returned 1
	[0245.344] CloseHandle (hObject=0x204) returned 1
	[0245.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json")) returned 0x2020
	[0245.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json")) returned 0x2020
	[0245.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.345] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.345] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.345] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.345] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0245.346] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe2, lpOverlapped=0x0) returned 1
	[0245.347] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0245.347] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.348] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.348] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.348] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe2, lpOverlapped=0x0) returned 1
	[0245.348] FlushFileBuffers (hFile=0x204) returned 1
	[0245.351] FlushFileBuffers (hFile=0x144) returned 1
	[0245.352] CloseHandle (hObject=0x204) returned 1
	[0245.352] CloseHandle (hObject=0x144) returned 1
	[0245.353] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json")) returned 1
	[0245.353] SetEvent (hEvent=0xfc) returned 1
	[0245.354] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0245.354] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=220) returned 1
	[0245.354] CloseHandle (hObject=0x144) returned 1
	[0245.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0245.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0245.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.354] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0245.355] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.355] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.355] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.355] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xdc, lpOverlapped=0x0) returned 1
	[0245.356] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0245.357] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.357] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.357] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.357] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xdc, lpOverlapped=0x0) returned 1
	[0245.357] FlushFileBuffers (hFile=0x144) returned 1
	[0245.361] FlushFileBuffers (hFile=0x204) returned 1
	[0245.365] CloseHandle (hObject=0x144) returned 1
	[0245.366] CloseHandle (hObject=0x204) returned 1
	[0245.366] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json")) returned 1
	[0245.366] SetEvent (hEvent=0xfc) returned 1
	[0245.366] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.367] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=223) returned 1
	[0245.367] CloseHandle (hObject=0x204) returned 1
	[0245.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0245.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0245.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.367] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.367] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.368] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.368] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0245.368] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xdf, lpOverlapped=0x0) returned 1
	[0245.369] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0245.370] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.370] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.370] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.370] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xdf, lpOverlapped=0x0) returned 1
	[0245.370] FlushFileBuffers (hFile=0x204) returned 1
	[0245.373] FlushFileBuffers (hFile=0x144) returned 1
	[0245.378] CloseHandle (hObject=0x204) returned 1
	[0245.378] CloseHandle (hObject=0x144) returned 1
	[0245.378] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json")) returned 1
	[0245.379] SetEvent (hEvent=0xfc) returned 1
	[0245.379] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0245.380] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=226) returned 1
	[0245.380] CloseHandle (hObject=0x144) returned 1
	[0245.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0245.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0245.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.380] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0245.380] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.380] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.380] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.381] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe2, lpOverlapped=0x0) returned 1
	[0245.382] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0245.382] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.383] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.383] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.383] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe2, lpOverlapped=0x0) returned 1
	[0245.383] FlushFileBuffers (hFile=0x144) returned 1
	[0245.387] FlushFileBuffers (hFile=0x204) returned 1
	[0245.393] CloseHandle (hObject=0x144) returned 1
	[0245.393] CloseHandle (hObject=0x204) returned 1
	[0245.393] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json")) returned 1
	[0245.394] SetEvent (hEvent=0xfc) returned 1
	[0245.394] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.395] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=238) returned 1
	[0245.395] CloseHandle (hObject=0x204) returned 1
	[0245.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json")) returned 0x2020
	[0245.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json")) returned 0x2020
	[0245.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.396] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.396] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.396] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.396] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0245.397] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xee, lpOverlapped=0x0) returned 1
	[0245.397] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0245.398] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.399] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.399] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.399] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xee, lpOverlapped=0x0) returned 1
	[0245.399] FlushFileBuffers (hFile=0x204) returned 1
	[0245.403] FlushFileBuffers (hFile=0x144) returned 1
	[0245.406] CloseHandle (hObject=0x204) returned 1
	[0245.406] CloseHandle (hObject=0x144) returned 1
	[0245.406] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json")) returned 1
	[0245.407] SetEvent (hEvent=0xfc) returned 1
	[0245.407] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0245.407] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=282) returned 1
	[0245.407] CloseHandle (hObject=0x144) returned 1
	[0245.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0245.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0245.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.408] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0245.408] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.408] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.408] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.408] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x11a, lpOverlapped=0x0) returned 1
	[0245.409] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x120, lpOverlapped=0x0) returned 1
	[0245.410] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.410] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.410] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.410] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x11a, lpOverlapped=0x0) returned 1
	[0245.410] FlushFileBuffers (hFile=0x144) returned 1
	[0245.496] FlushFileBuffers (hFile=0x204) returned 1
	[0245.501] CloseHandle (hObject=0x144) returned 1
	[0245.501] CloseHandle (hObject=0x204) returned 1
	[0245.501] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json")) returned 1
	[0245.502] SetEvent (hEvent=0xfc) returned 1
	[0245.503] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.503] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=216) returned 1
	[0245.504] CloseHandle (hObject=0x204) returned 1
	[0245.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json")) returned 0x2020
	[0245.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json")) returned 0x2020
	[0245.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.504] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.504] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.504] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.504] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0245.505] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd8, lpOverlapped=0x0) returned 1
	[0245.506] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0245.509] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.510] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.510] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.510] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd8, lpOverlapped=0x0) returned 1
	[0245.510] FlushFileBuffers (hFile=0x204) returned 1
	[0245.523] FlushFileBuffers (hFile=0x144) returned 1
	[0245.532] CloseHandle (hObject=0x204) returned 1
	[0245.532] CloseHandle (hObject=0x144) returned 1
	[0245.532] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json")) returned 1
	[0245.533] SetEvent (hEvent=0xfc) returned 1
	[0245.533] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0245.534] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=245) returned 1
	[0245.534] CloseHandle (hObject=0x144) returned 1
	[0245.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0245.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0245.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.535] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0245.535] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.535] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.535] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.536] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xf5, lpOverlapped=0x0) returned 1
	[0245.537] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0245.537] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.538] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.538] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.538] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xf5, lpOverlapped=0x0) returned 1
	[0245.538] FlushFileBuffers (hFile=0x144) returned 1
	[0245.551] FlushFileBuffers (hFile=0x204) returned 1
	[0245.554] CloseHandle (hObject=0x144) returned 1
	[0245.555] CloseHandle (hObject=0x204) returned 1
	[0245.555] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json")) returned 1
	[0245.556] SetEvent (hEvent=0xfc) returned 1
	[0245.556] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.558] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=235) returned 1
	[0245.558] CloseHandle (hObject=0x204) returned 1
	[0245.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0245.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0245.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.558] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.559] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.559] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.559] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0245.559] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xeb, lpOverlapped=0x0) returned 1
	[0245.560] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0245.561] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.561] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.561] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.561] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xeb, lpOverlapped=0x0) returned 1
	[0245.562] FlushFileBuffers (hFile=0x204) returned 1
	[0245.585] FlushFileBuffers (hFile=0x144) returned 1
	[0245.594] CloseHandle (hObject=0x204) returned 1
	[0245.594] CloseHandle (hObject=0x144) returned 1
	[0245.594] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json")) returned 1
	[0245.595] SetEvent (hEvent=0xfc) returned 1
	[0245.597] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0245.597] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=208) returned 1
	[0245.598] CloseHandle (hObject=0x144) returned 1
	[0245.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json")) returned 0x2020
	[0245.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json")) returned 0x2020
	[0245.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.598] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0245.598] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.598] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.598] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.599] ReadFile (in: hFile=0x144, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd0, lpOverlapped=0x0) returned 1
	[0245.600] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0245.601] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.601] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.601] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.601] WriteFile (in: hFile=0x144, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd0, lpOverlapped=0x0) returned 1
	[0245.601] FlushFileBuffers (hFile=0x144) returned 1
	[0245.629] FlushFileBuffers (hFile=0x204) returned 1
	[0245.639] CloseHandle (hObject=0x144) returned 1
	[0245.639] CloseHandle (hObject=0x204) returned 1
	[0245.639] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json")) returned 1
	[0245.640] SetEvent (hEvent=0xfc) returned 1
	[0245.641] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.641] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=191) returned 1
	[0245.641] CloseHandle (hObject=0x260) returned 1
	[0245.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json")) returned 0x2020
	[0245.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json")) returned 0x2020
	[0245.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.642] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.642] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.642] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.642] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.643] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xbf, lpOverlapped=0x0) returned 1
	[0245.643] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0245.645] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.645] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.645] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.645] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xbf, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xbf, lpOverlapped=0x0) returned 1
	[0245.645] FlushFileBuffers (hFile=0x260) returned 1
	[0245.662] FlushFileBuffers (hFile=0x204) returned 1
	[0245.665] CloseHandle (hObject=0x260) returned 1
	[0245.667] CloseHandle (hObject=0x204) returned 1
	[0245.667] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json")) returned 1
	[0245.668] SetEvent (hEvent=0xfc) returned 1
	[0245.668] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.668] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=213) returned 1
	[0245.668] CloseHandle (hObject=0x204) returned 1
	[0245.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0245.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0245.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.669] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.669] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.669] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.669] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0245.669] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd5, lpOverlapped=0x0) returned 1
	[0245.670] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0245.671] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.671] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.671] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.671] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd5, lpOverlapped=0x0) returned 1
	[0245.672] FlushFileBuffers (hFile=0x204) returned 1
	[0245.682] FlushFileBuffers (hFile=0x260) returned 1
	[0245.683] CloseHandle (hObject=0x204) returned 1
	[0245.683] CloseHandle (hObject=0x260) returned 1
	[0245.684] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json")) returned 1
	[0245.684] SetEvent (hEvent=0xfc) returned 1
	[0245.685] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.686] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=230) returned 1
	[0245.686] CloseHandle (hObject=0x260) returned 1
	[0245.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0245.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0245.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.686] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.686] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.686] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.686] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.687] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe6, lpOverlapped=0x0) returned 1
	[0245.688] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0245.689] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.689] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.689] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.689] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe6, lpOverlapped=0x0) returned 1
	[0245.689] FlushFileBuffers (hFile=0x260) returned 1
	[0245.692] FlushFileBuffers (hFile=0x204) returned 1
	[0245.694] CloseHandle (hObject=0x260) returned 1
	[0245.694] CloseHandle (hObject=0x204) returned 1
	[0245.694] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json")) returned 1
	[0245.695] SetEvent (hEvent=0xfc) returned 1
	[0245.695] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.696] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=226) returned 1
	[0245.696] CloseHandle (hObject=0x204) returned 1
	[0245.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0245.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0245.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.696] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.696] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.696] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.696] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0245.697] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe2, lpOverlapped=0x0) returned 1
	[0245.698] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0245.699] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.699] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.699] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.699] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe2, lpOverlapped=0x0) returned 1
	[0245.699] FlushFileBuffers (hFile=0x204) returned 1
	[0245.702] FlushFileBuffers (hFile=0x260) returned 1
	[0245.703] CloseHandle (hObject=0x204) returned 1
	[0245.704] CloseHandle (hObject=0x260) returned 1
	[0245.704] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json")) returned 1
	[0245.704] SetEvent (hEvent=0xfc) returned 1
	[0245.705] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.705] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=254) returned 1
	[0245.705] CloseHandle (hObject=0x260) returned 1
	[0245.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0245.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0245.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.706] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.706] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.706] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.706] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.707] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xfe, lpOverlapped=0x0) returned 1
	[0245.708] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0245.709] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.709] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.709] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.709] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xfe, lpOverlapped=0x0) returned 1
	[0245.709] FlushFileBuffers (hFile=0x260) returned 1
	[0245.712] FlushFileBuffers (hFile=0x204) returned 1
	[0245.713] CloseHandle (hObject=0x260) returned 1
	[0245.713] CloseHandle (hObject=0x204) returned 1
	[0245.713] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json")) returned 1
	[0245.714] SetEvent (hEvent=0xfc) returned 1
	[0245.714] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.715] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=219) returned 1
	[0245.715] CloseHandle (hObject=0x204) returned 1
	[0245.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0245.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0245.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.715] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.716] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.716] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.716] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0245.716] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xdb, lpOverlapped=0x0) returned 1
	[0245.717] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0245.718] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.719] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.719] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.719] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xdb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xdb, lpOverlapped=0x0) returned 1
	[0245.719] FlushFileBuffers (hFile=0x204) returned 1
	[0245.721] FlushFileBuffers (hFile=0x260) returned 1
	[0245.723] CloseHandle (hObject=0x204) returned 1
	[0245.723] CloseHandle (hObject=0x260) returned 1
	[0245.723] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json")) returned 1
	[0245.724] SetEvent (hEvent=0xfc) returned 1
	[0245.724] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.725] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0245.725] CloseHandle (hObject=0x260) returned 1
	[0245.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0245.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0245.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.725] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.726] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.726] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.726] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.726] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xde, lpOverlapped=0x0) returned 1
	[0245.727] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0245.728] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.728] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.728] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.728] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xde, lpOverlapped=0x0) returned 1
	[0245.729] FlushFileBuffers (hFile=0x260) returned 1
	[0245.731] FlushFileBuffers (hFile=0x204) returned 1
	[0245.734] CloseHandle (hObject=0x260) returned 1
	[0245.734] CloseHandle (hObject=0x204) returned 1
	[0245.734] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json")) returned 1
	[0245.735] SetEvent (hEvent=0xfc) returned 1
	[0245.735] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.736] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=236) returned 1
	[0245.736] CloseHandle (hObject=0x204) returned 1
	[0245.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0245.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0245.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.736] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.736] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.736] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.736] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0245.737] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xec, lpOverlapped=0x0) returned 1
	[0245.738] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0245.739] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.739] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.739] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.739] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xec, lpOverlapped=0x0) returned 1
	[0245.739] FlushFileBuffers (hFile=0x204) returned 1
	[0245.743] FlushFileBuffers (hFile=0x260) returned 1
	[0245.744] CloseHandle (hObject=0x204) returned 1
	[0245.744] CloseHandle (hObject=0x260) returned 1
	[0245.745] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json")) returned 1
	[0245.745] SetEvent (hEvent=0xfc) returned 1
	[0245.745] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.746] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=216) returned 1
	[0245.746] CloseHandle (hObject=0x260) returned 1
	[0245.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0245.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0245.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.747] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.747] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.747] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.747] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.747] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd8, lpOverlapped=0x0) returned 1
	[0245.748] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0245.749] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.749] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.749] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.749] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd8, lpOverlapped=0x0) returned 1
	[0245.749] FlushFileBuffers (hFile=0x260) returned 1
	[0245.752] FlushFileBuffers (hFile=0x204) returned 1
	[0245.756] CloseHandle (hObject=0x260) returned 1
	[0245.756] CloseHandle (hObject=0x204) returned 1
	[0245.756] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json")) returned 1
	[0245.757] SetEvent (hEvent=0xfc) returned 1
	[0245.757] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.758] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=266) returned 1
	[0245.758] CloseHandle (hObject=0x204) returned 1
	[0245.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json")) returned 0x2020
	[0245.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json")) returned 0x2020
	[0245.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.758] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.759] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.759] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.759] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0245.759] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10a, lpOverlapped=0x0) returned 1
	[0245.760] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0245.761] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.761] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.761] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.761] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10a, lpOverlapped=0x0) returned 1
	[0245.762] FlushFileBuffers (hFile=0x204) returned 1
	[0245.766] FlushFileBuffers (hFile=0x260) returned 1
	[0245.768] CloseHandle (hObject=0x204) returned 1
	[0245.768] CloseHandle (hObject=0x260) returned 1
	[0245.768] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json")) returned 1
	[0245.769] SetEvent (hEvent=0xfc) returned 1
	[0245.769] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.770] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=225) returned 1
	[0245.770] CloseHandle (hObject=0x260) returned 1
	[0245.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0245.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0245.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.770] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.770] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.770] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.770] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.771] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe1, lpOverlapped=0x0) returned 1
	[0245.772] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0245.773] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.773] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.773] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.773] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe1, lpOverlapped=0x0) returned 1
	[0245.773] FlushFileBuffers (hFile=0x260) returned 1
	[0245.776] FlushFileBuffers (hFile=0x204) returned 1
	[0245.778] CloseHandle (hObject=0x260) returned 1
	[0245.778] CloseHandle (hObject=0x204) returned 1
	[0245.778] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json")) returned 1
	[0245.778] SetEvent (hEvent=0xfc) returned 1
	[0245.779] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.779] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=254) returned 1
	[0245.779] CloseHandle (hObject=0x204) returned 1
	[0245.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0245.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0245.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.780] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.780] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.780] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.780] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0245.781] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xfe, lpOverlapped=0x0) returned 1
	[0245.782] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0245.782] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.783] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.783] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.783] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xfe, lpOverlapped=0x0) returned 1
	[0245.783] FlushFileBuffers (hFile=0x204) returned 1
	[0245.786] FlushFileBuffers (hFile=0x260) returned 1
	[0245.788] CloseHandle (hObject=0x204) returned 1
	[0245.788] CloseHandle (hObject=0x260) returned 1
	[0245.788] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json")) returned 1
	[0245.789] SetEvent (hEvent=0xfc) returned 1
	[0245.789] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.790] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=227) returned 1
	[0245.790] CloseHandle (hObject=0x260) returned 1
	[0245.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0245.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0245.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.790] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.790] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.790] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.790] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.791] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe3, lpOverlapped=0x0) returned 1
	[0245.792] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0245.793] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.793] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.793] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.793] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe3, lpOverlapped=0x0) returned 1
	[0245.793] FlushFileBuffers (hFile=0x260) returned 1
	[0245.796] FlushFileBuffers (hFile=0x204) returned 1
	[0245.798] CloseHandle (hObject=0x260) returned 1
	[0245.798] CloseHandle (hObject=0x204) returned 1
	[0245.798] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json")) returned 1
	[0245.799] SetEvent (hEvent=0xfc) returned 1
	[0245.799] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.800] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=212) returned 1
	[0245.800] CloseHandle (hObject=0x204) returned 1
	[0245.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0245.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0245.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.801] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.801] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.801] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.801] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0245.802] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd4, lpOverlapped=0x0) returned 1
	[0245.803] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0245.804] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.804] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.804] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.804] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd4, lpOverlapped=0x0) returned 1
	[0245.804] FlushFileBuffers (hFile=0x204) returned 1
	[0245.807] FlushFileBuffers (hFile=0x260) returned 1
	[0245.809] CloseHandle (hObject=0x204) returned 1
	[0245.809] CloseHandle (hObject=0x260) returned 1
	[0245.809] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json")) returned 1
	[0245.810] SetEvent (hEvent=0xfc) returned 1
	[0245.810] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.811] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=212) returned 1
	[0245.811] CloseHandle (hObject=0x260) returned 1
	[0245.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0245.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0245.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.811] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.811] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.811] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.811] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.812] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd4, lpOverlapped=0x0) returned 1
	[0245.813] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0245.814] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.814] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.814] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.814] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd4, lpOverlapped=0x0) returned 1
	[0245.814] FlushFileBuffers (hFile=0x260) returned 1
	[0245.820] FlushFileBuffers (hFile=0x204) returned 1
	[0245.822] CloseHandle (hObject=0x260) returned 1
	[0245.822] CloseHandle (hObject=0x204) returned 1
	[0245.822] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json")) returned 1
	[0245.823] SetEvent (hEvent=0xfc) returned 1
	[0245.823] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.824] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=352) returned 1
	[0245.824] CloseHandle (hObject=0x204) returned 1
	[0245.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json")) returned 0x2020
	[0245.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json")) returned 0x2020
	[0245.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.824] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.824] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.824] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.824] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0245.827] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x160, lpOverlapped=0x0) returned 1
	[0245.828] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x170, lpOverlapped=0x0) returned 1
	[0245.828] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0245.829] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.829] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.829] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x160, lpOverlapped=0x0) returned 1
	[0245.829] FlushFileBuffers (hFile=0x204) returned 1
	[0245.832] FlushFileBuffers (hFile=0x260) returned 1
	[0245.834] CloseHandle (hObject=0x204) returned 1
	[0245.834] CloseHandle (hObject=0x260) returned 1
	[0245.834] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json")) returned 1
	[0245.835] SetEvent (hEvent=0xfc) returned 1
	[0245.835] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.836] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11094) returned 1
	[0245.836] CloseHandle (hObject=0x260) returned 1
	[0245.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0245.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0245.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.836] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.836] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.836] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.837] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.837] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2b56, lpOverlapped=0x0) returned 1
	[0245.840] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2b60, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2b60, lpOverlapped=0x0) returned 1
	[0245.840] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0245.841] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.841] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.841] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2b56, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2b56, lpOverlapped=0x0) returned 1
	[0245.841] FlushFileBuffers (hFile=0x260) returned 1
	[0245.848] FlushFileBuffers (hFile=0x204) returned 1
	[0245.849] CloseHandle (hObject=0x260) returned 1
	[0245.849] CloseHandle (hObject=0x204) returned 1
	[0245.849] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json")) returned 1
	[0245.850] SetEvent (hEvent=0xfc) returned 1
	[0245.850] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.851] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4984) returned 1
	[0245.851] CloseHandle (hObject=0x204) returned 1
	[0245.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png")) returned 0x2020
	[0245.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png")) returned 0x2020
	[0245.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.851] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.851] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.852] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.852] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0245.852] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1378, lpOverlapped=0x0) returned 1
	[0245.854] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1380, lpOverlapped=0x0) returned 1
	[0245.855] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0245.855] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.856] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.856] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1378, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1378, lpOverlapped=0x0) returned 1
	[0245.856] FlushFileBuffers (hFile=0x204) returned 1
	[0245.859] FlushFileBuffers (hFile=0x260) returned 1
	[0245.860] CloseHandle (hObject=0x204) returned 1
	[0245.860] CloseHandle (hObject=0x260) returned 1
	[0245.860] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png")) returned 1
	[0245.861] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.865] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=854) returned 1
	[0245.865] CloseHandle (hObject=0x260) returned 1
	[0245.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json")) returned 0x2020
	[0245.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json")) returned 0x2020
	[0245.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.865] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.865] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.865] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.865] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.866] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x356, lpOverlapped=0x0) returned 1
	[0245.867] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x360, lpOverlapped=0x0) returned 1
	[0245.868] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0245.868] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.868] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.868] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x356, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x356, lpOverlapped=0x0) returned 1
	[0245.869] FlushFileBuffers (hFile=0x260) returned 1
	[0245.882] FlushFileBuffers (hFile=0x204) returned 1
	[0245.892] CloseHandle (hObject=0x260) returned 1
	[0245.892] CloseHandle (hObject=0x204) returned 1
	[0245.892] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json")) returned 1
	[0245.893] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.893] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1457) returned 1
	[0245.894] CloseHandle (hObject=0x204) returned 1
	[0245.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json")) returned 0x2020
	[0245.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json")) returned 0x2020
	[0245.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.894] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.894] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.894] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.894] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0245.895] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5b1, lpOverlapped=0x0) returned 1
	[0245.900] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x5c0, lpOverlapped=0x0) returned 1
	[0245.902] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.902] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.902] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.902] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5b1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5b1, lpOverlapped=0x0) returned 1
	[0245.902] FlushFileBuffers (hFile=0x204) returned 1
	[0245.908] FlushFileBuffers (hFile=0x260) returned 1
	[0245.918] CloseHandle (hObject=0x204) returned 1
	[0245.918] CloseHandle (hObject=0x260) returned 1
	[0245.918] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json")) returned 1
	[0245.919] SetEvent (hEvent=0xfc) returned 1
	[0245.919] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.920] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=132) returned 1
	[0245.920] CloseHandle (hObject=0x260) returned 1
	[0245.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json")) returned 0x2020
	[0245.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json")) returned 0x2020
	[0245.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.921] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.921] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.921] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.921] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.921] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x84, lpOverlapped=0x0) returned 1
	[0245.922] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x90, lpOverlapped=0x0) returned 1
	[0245.923] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.923] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.923] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.923] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x84, lpOverlapped=0x0) returned 1
	[0245.924] FlushFileBuffers (hFile=0x260) returned 1
	[0245.942] FlushFileBuffers (hFile=0x204) returned 1
	[0245.946] CloseHandle (hObject=0x260) returned 1
	[0245.946] CloseHandle (hObject=0x204) returned 1
	[0245.946] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json")) returned 1
	[0245.947] SetEvent (hEvent=0xfc) returned 1
	[0245.947] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.948] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=237) returned 1
	[0245.948] CloseHandle (hObject=0x204) returned 1
	[0245.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0245.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0245.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.948] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.948] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.948] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.949] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0245.950] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xed, lpOverlapped=0x0) returned 1
	[0245.951] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0245.952] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.952] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.952] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.952] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xed, lpOverlapped=0x0) returned 1
	[0245.952] FlushFileBuffers (hFile=0x204) returned 1
	[0245.961] FlushFileBuffers (hFile=0x260) returned 1
	[0245.965] CloseHandle (hObject=0x204) returned 1
	[0245.965] CloseHandle (hObject=0x260) returned 1
	[0245.966] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json")) returned 1
	[0245.966] SetEvent (hEvent=0xfc) returned 1
	[0245.967] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.967] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=276) returned 1
	[0245.967] CloseHandle (hObject=0x260) returned 1
	[0245.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0245.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0245.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.968] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0245.968] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.968] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.968] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0245.969] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x114, lpOverlapped=0x0) returned 1
	[0245.970] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x120, lpOverlapped=0x0) returned 1
	[0245.971] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0245.971] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.971] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0245.971] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x114, lpOverlapped=0x0) returned 1
	[0245.971] FlushFileBuffers (hFile=0x260) returned 1
	[0245.990] FlushFileBuffers (hFile=0x204) returned 1
	[0245.993] CloseHandle (hObject=0x260) returned 1
	[0245.993] CloseHandle (hObject=0x204) returned 1
	[0245.993] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json")) returned 1
	[0245.994] SetEvent (hEvent=0xfc) returned 1
	[0245.994] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.995] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=173) returned 1
	[0245.995] CloseHandle (hObject=0x204) returned 1
	[0245.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0245.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0245.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.995] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0245.995] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.995] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0245.995] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0246.074] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xad, lpOverlapped=0x0) returned 1
	[0246.096] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb0, lpOverlapped=0x0) returned 1
	[0246.124] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0246.135] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0246.144] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0246.147] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xad, lpOverlapped=0x0) returned 1
	[0246.156] FlushFileBuffers (hFile=0x204) returned 1
	[0246.217] FlushFileBuffers (hFile=0x260) returned 1
	[0246.392] CloseHandle (hObject=0x204) returned 1
	[0246.392] CloseHandle (hObject=0x260) returned 1
	[0246.392] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json")) returned 1
	[0246.393] SetEvent (hEvent=0xfc) returned 1
	[0246.394] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0246.395] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=178) returned 1
	[0246.395] CloseHandle (hObject=0x260) returned 1
	[0246.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json")) returned 0x2020
	[0246.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json")) returned 0x2020
	[0246.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.395] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0246.395] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0246.396] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0246.396] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0246.410] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb2, lpOverlapped=0x0) returned 1
	[0246.411] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0246.412] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0246.412] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0246.412] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0246.412] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb2, lpOverlapped=0x0) returned 1
	[0246.413] FlushFileBuffers (hFile=0x260) returned 1
	[0246.424] FlushFileBuffers (hFile=0x204) returned 1
	[0246.439] CloseHandle (hObject=0x260) returned 1
	[0246.439] CloseHandle (hObject=0x204) returned 1
	[0246.439] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json")) returned 1
	[0246.440] SetEvent (hEvent=0xfc) returned 1
	[0246.441] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0246.441] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=362) returned 1
	[0246.441] CloseHandle (hObject=0x204) returned 1
	[0246.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json")) returned 0x2020
	[0246.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json")) returned 0x2020
	[0246.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.442] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0246.442] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0246.442] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0246.442] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0246.442] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x16a, lpOverlapped=0x0) returned 1
	[0246.443] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x170, lpOverlapped=0x0) returned 1
	[0246.444] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0246.445] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0246.445] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0246.445] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x16a, lpOverlapped=0x0) returned 1
	[0246.445] FlushFileBuffers (hFile=0x204) returned 1
	[0246.460] FlushFileBuffers (hFile=0x260) returned 1
	[0246.486] CloseHandle (hObject=0x204) returned 1
	[0246.486] CloseHandle (hObject=0x260) returned 1
	[0246.487] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json")) returned 1
	[0246.487] SetEvent (hEvent=0xfc) returned 1
	[0246.489] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0246.490] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=357) returned 1
	[0246.490] CloseHandle (hObject=0x260) returned 1
	[0246.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json")) returned 0x2020
	[0246.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json")) returned 0x2020
	[0246.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.490] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0246.490] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0246.490] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0246.490] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0246.491] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x165, lpOverlapped=0x0) returned 1
	[0246.492] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x170, lpOverlapped=0x0) returned 1
	[0246.493] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0246.493] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0246.493] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0246.493] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x165, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x165, lpOverlapped=0x0) returned 1
	[0246.493] FlushFileBuffers (hFile=0x260) returned 1
	[0246.501] FlushFileBuffers (hFile=0x204) returned 1
	[0246.519] CloseHandle (hObject=0x260) returned 1
	[0246.519] CloseHandle (hObject=0x204) returned 1
	[0246.520] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json")) returned 1
	[0246.531] SetEvent (hEvent=0xfc) returned 1
	[0246.543] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0246.543] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=217) returned 1
	[0246.543] CloseHandle (hObject=0x204) returned 1
	[0246.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0246.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0246.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.544] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0246.544] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0246.544] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0246.544] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0246.544] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd9, lpOverlapped=0x0) returned 1
	[0246.545] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0246.546] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0246.547] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0246.547] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0246.547] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd9, lpOverlapped=0x0) returned 1
	[0246.547] FlushFileBuffers (hFile=0x204) returned 1
	[0246.683] FlushFileBuffers (hFile=0x260) returned 1
	[0246.798] CloseHandle (hObject=0x204) returned 1
	[0246.799] CloseHandle (hObject=0x260) returned 1
	[0246.799] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json")) returned 1
	[0246.800] SetEvent (hEvent=0xfc) returned 1
	[0246.800] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0246.802] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=150) returned 1
	[0246.802] CloseHandle (hObject=0x260) returned 1
	[0246.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json")) returned 0x2020
	[0246.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json")) returned 0x2020
	[0246.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.802] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0246.802] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0246.802] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0246.802] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0246.803] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x96, lpOverlapped=0x0) returned 1
	[0246.804] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa0, lpOverlapped=0x0) returned 1
	[0246.805] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0246.805] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0246.805] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0246.805] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x96, lpOverlapped=0x0) returned 1
	[0246.805] FlushFileBuffers (hFile=0x260) returned 1
	[0246.880] FlushFileBuffers (hFile=0x204) returned 1
	[0247.013] CloseHandle (hObject=0x260) returned 1
	[0247.014] CloseHandle (hObject=0x204) returned 1
	[0247.014] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json")) returned 1
	[0247.015] SetEvent (hEvent=0xfc) returned 1
	[0247.015] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0247.016] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=187) returned 1
	[0247.016] CloseHandle (hObject=0x204) returned 1
	[0247.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0247.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0247.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.017] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0247.017] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.017] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.017] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0247.018] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xbb, lpOverlapped=0x0) returned 1
	[0247.019] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0247.020] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.020] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.020] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.020] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xbb, lpOverlapped=0x0) returned 1
	[0247.020] FlushFileBuffers (hFile=0x204) returned 1
	[0247.030] FlushFileBuffers (hFile=0x260) returned 1
	[0247.036] CloseHandle (hObject=0x204) returned 1
	[0247.038] CloseHandle (hObject=0x260) returned 1
	[0247.038] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json")) returned 1
	[0247.038] SetEvent (hEvent=0xfc) returned 1
	[0247.041] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0247.041] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=175) returned 1
	[0247.041] CloseHandle (hObject=0x204) returned 1
	[0247.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0247.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0247.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.042] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0247.042] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.042] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.042] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0247.042] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xaf, lpOverlapped=0x0) returned 1
	[0247.043] WriteFile (in: hFile=0x240, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb0, lpOverlapped=0x0) returned 1
	[0247.044] WriteFile (in: hFile=0x240, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.044] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.044] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.044] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xaf, lpOverlapped=0x0) returned 1
	[0247.045] FlushFileBuffers (hFile=0x204) returned 1
	[0247.054] FlushFileBuffers (hFile=0x240) returned 1
	[0247.062] CloseHandle (hObject=0x204) returned 1
	[0247.062] CloseHandle (hObject=0x240) returned 1
	[0247.062] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json")) returned 1
	[0247.063] SetEvent (hEvent=0xfc) returned 1
	[0247.064] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0247.065] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=334) returned 1
	[0247.065] CloseHandle (hObject=0x240) returned 1
	[0247.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json")) returned 0x2020
	[0247.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json")) returned 0x2020
	[0247.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.066] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0247.066] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.066] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.066] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0247.067] ReadFile (in: hFile=0x240, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x14e, lpOverlapped=0x0) returned 1
	[0247.067] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x150, lpOverlapped=0x0) returned 1
	[0247.068] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.068] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.069] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.069] WriteFile (in: hFile=0x240, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x14e, lpOverlapped=0x0) returned 1
	[0247.069] FlushFileBuffers (hFile=0x240) returned 1
	[0247.078] FlushFileBuffers (hFile=0x204) returned 1
	[0247.100] CloseHandle (hObject=0x240) returned 1
	[0247.101] CloseHandle (hObject=0x204) returned 1
	[0247.102] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json")) returned 1
	[0247.114] SetEvent (hEvent=0xfc) returned 1
	[0247.125] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.135] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=179) returned 1
	[0247.135] CloseHandle (hObject=0x110) returned 1
	[0247.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0247.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0247.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.143] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.144] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.144] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.145] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0247.154] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb3, lpOverlapped=0x0) returned 1
	[0247.191] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0247.240] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.240] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.240] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.240] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb3, lpOverlapped=0x0) returned 1
	[0247.241] FlushFileBuffers (hFile=0x110) returned 1
	[0247.267] FlushFileBuffers (hFile=0x260) returned 1
	[0247.282] CloseHandle (hObject=0x110) returned 1
	[0247.282] CloseHandle (hObject=0x260) returned 1
	[0247.282] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json")) returned 1
	[0247.283] SetEvent (hEvent=0xfc) returned 1
	[0247.283] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.285] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17492) returned 1
	[0247.285] CloseHandle (hObject=0x260) returned 1
	[0247.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0247.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0247.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.285] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.285] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.285] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.285] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0247.286] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4454, lpOverlapped=0x0) returned 1
	[0247.289] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4460, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4460, lpOverlapped=0x0) returned 1
	[0247.290] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0247.290] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.290] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.290] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4454, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4454, lpOverlapped=0x0) returned 1
	[0247.291] FlushFileBuffers (hFile=0x260) returned 1
	[0247.472] FlushFileBuffers (hFile=0x110) returned 1
	[0247.482] CloseHandle (hObject=0x260) returned 1
	[0247.482] CloseHandle (hObject=0x110) returned 1
	[0247.482] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json")) returned 1
	[0247.483] SetEvent (hEvent=0xfc) returned 1
	[0247.484] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.485] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=241753) returned 1
	[0247.485] CloseHandle (hObject=0x110) returned 1
	[0247.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js")) returned 0x2020
	[0247.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js")) returned 0x2020
	[0247.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.485] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.486] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.486] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.486] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0247.487] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3b059, lpOverlapped=0x0) returned 1
	[0247.492] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3b060, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3b060, lpOverlapped=0x0) returned 1
	[0247.499] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.499] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.499] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.499] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3b059, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3b059, lpOverlapped=0x0) returned 1
	[0247.500] FlushFileBuffers (hFile=0x110) returned 1
	[0247.522] FlushFileBuffers (hFile=0x260) returned 1
	[0247.524] CloseHandle (hObject=0x110) returned 1
	[0247.524] CloseHandle (hObject=0x260) returned 1
	[0247.524] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js")) returned 1
	[0247.526] SetEvent (hEvent=0xfc) returned 1
	[0247.526] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.527] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=810) returned 1
	[0247.527] CloseHandle (hObject=0x260) returned 1
	[0247.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html")) returned 0x2020
	[0247.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html")) returned 0x2020
	[0247.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.528] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.528] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.528] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.528] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0247.529] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x32a, lpOverlapped=0x0) returned 1
	[0247.530] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x330, lpOverlapped=0x0) returned 1
	[0247.531] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0247.531] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.531] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.531] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x32a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x32a, lpOverlapped=0x0) returned 1
	[0247.532] FlushFileBuffers (hFile=0x260) returned 1
	[0247.536] FlushFileBuffers (hFile=0x110) returned 1
	[0247.538] CloseHandle (hObject=0x260) returned 1
	[0247.538] CloseHandle (hObject=0x110) returned 1
	[0247.538] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html")) returned 1
	[0247.539] SetEvent (hEvent=0xfc) returned 1
	[0247.539] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.540] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=70364) returned 1
	[0247.540] CloseHandle (hObject=0x110) returned 1
	[0247.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif")) returned 0x2020
	[0247.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif")) returned 0x2020
	[0247.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.541] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.541] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.541] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.541] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0247.541] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x112dc, lpOverlapped=0x0) returned 1
	[0247.544] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112e0, lpOverlapped=0x0) returned 1
	[0247.546] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.546] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.546] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.546] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112dc, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x112dc, lpOverlapped=0x0) returned 1
	[0247.547] FlushFileBuffers (hFile=0x110) returned 1
	[0247.554] FlushFileBuffers (hFile=0x260) returned 1
	[0247.556] CloseHandle (hObject=0x110) returned 1
	[0247.556] CloseHandle (hObject=0x260) returned 1
	[0247.556] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif")) returned 1
	[0247.557] SetEvent (hEvent=0xfc) returned 1
	[0247.557] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.558] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4361) returned 1
	[0247.558] CloseHandle (hObject=0x260) returned 1
	[0247.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png")) returned 0x2020
	[0247.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png")) returned 0x2020
	[0247.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.559] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.559] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.559] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.559] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0247.560] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1109, lpOverlapped=0x0) returned 1
	[0247.564] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1110, lpOverlapped=0x0) returned 1
	[0247.566] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.566] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.566] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.566] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1109, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1109, lpOverlapped=0x0) returned 1
	[0247.566] FlushFileBuffers (hFile=0x260) returned 1
	[0247.587] FlushFileBuffers (hFile=0x110) returned 1
	[0247.588] CloseHandle (hObject=0x260) returned 1
	[0247.588] CloseHandle (hObject=0x110) returned 1
	[0247.588] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png")) returned 1
	[0247.589] SetEvent (hEvent=0xfc) returned 1
	[0247.589] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.590] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=160) returned 1
	[0247.590] CloseHandle (hObject=0x110) returned 1
	[0247.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png")) returned 0x2020
	[0247.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png")) returned 0x2020
	[0247.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.590] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.590] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.590] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.590] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0247.591] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xa0, lpOverlapped=0x0) returned 1
	[0247.593] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb0, lpOverlapped=0x0) returned 1
	[0247.594] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0247.595] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.595] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.595] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xa0, lpOverlapped=0x0) returned 1
	[0247.595] FlushFileBuffers (hFile=0x110) returned 1
	[0247.598] FlushFileBuffers (hFile=0x260) returned 1
	[0247.614] CloseHandle (hObject=0x110) returned 1
	[0247.614] CloseHandle (hObject=0x260) returned 1
	[0247.614] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png")) returned 1
	[0247.615] SetEvent (hEvent=0xfc) returned 1
	[0247.615] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.615] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=252) returned 1
	[0247.615] CloseHandle (hObject=0x260) returned 1
	[0247.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png")) returned 0x2020
	[0247.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png")) returned 0x2020
	[0247.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.616] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.616] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.616] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.616] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0247.616] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xfc, lpOverlapped=0x0) returned 1
	[0247.617] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0247.618] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0247.619] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.619] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.619] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xfc, lpOverlapped=0x0) returned 1
	[0247.619] FlushFileBuffers (hFile=0x260) returned 1
	[0247.621] FlushFileBuffers (hFile=0x110) returned 1
	[0247.623] CloseHandle (hObject=0x260) returned 1
	[0247.623] CloseHandle (hObject=0x110) returned 1
	[0247.623] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png")) returned 1
	[0247.624] SetEvent (hEvent=0xfc) returned 1
	[0247.624] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.625] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=160) returned 1
	[0247.625] CloseHandle (hObject=0x110) returned 1
	[0247.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png")) returned 0x2020
	[0247.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png")) returned 0x2020
	[0247.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.625] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.625] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.625] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.625] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0247.626] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xa0, lpOverlapped=0x0) returned 1
	[0247.627] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb0, lpOverlapped=0x0) returned 1
	[0247.628] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0247.628] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.628] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.628] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xa0, lpOverlapped=0x0) returned 1
	[0247.628] FlushFileBuffers (hFile=0x110) returned 1
	[0247.638] FlushFileBuffers (hFile=0x260) returned 1
	[0247.640] CloseHandle (hObject=0x110) returned 1
	[0247.640] CloseHandle (hObject=0x260) returned 1
	[0247.640] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png")) returned 1
	[0247.641] SetEvent (hEvent=0xfc) returned 1
	[0247.641] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.642] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=166) returned 1
	[0247.642] CloseHandle (hObject=0x260) returned 1
	[0247.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png")) returned 0x2020
	[0247.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png")) returned 0x2020
	[0247.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.642] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.642] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.642] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.643] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0247.643] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xa6, lpOverlapped=0x0) returned 1
	[0247.644] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb0, lpOverlapped=0x0) returned 1
	[0247.645] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0247.645] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.645] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.645] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xa6, lpOverlapped=0x0) returned 1
	[0247.645] FlushFileBuffers (hFile=0x260) returned 1
	[0247.648] FlushFileBuffers (hFile=0x110) returned 1
	[0247.649] CloseHandle (hObject=0x260) returned 1
	[0247.649] CloseHandle (hObject=0x110) returned 1
	[0247.650] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png")) returned 1
	[0247.650] SetEvent (hEvent=0xfc) returned 1
	[0247.650] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.651] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=160) returned 1
	[0247.651] CloseHandle (hObject=0x110) returned 1
	[0247.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png")) returned 0x2020
	[0247.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png")) returned 0x2020
	[0247.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.651] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.651] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.651] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.651] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0247.652] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xa0, lpOverlapped=0x0) returned 1
	[0247.653] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb0, lpOverlapped=0x0) returned 1
	[0247.654] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0247.654] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.654] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.654] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xa0, lpOverlapped=0x0) returned 1
	[0247.654] FlushFileBuffers (hFile=0x110) returned 1
	[0247.659] FlushFileBuffers (hFile=0x260) returned 1
	[0247.660] CloseHandle (hObject=0x110) returned 1
	[0247.663] CloseHandle (hObject=0x260) returned 1
	[0247.663] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png")) returned 1
	[0247.664] SetEvent (hEvent=0xfc) returned 1
	[0247.664] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.664] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1322) returned 1
	[0247.665] CloseHandle (hObject=0x260) returned 1
	[0247.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json")) returned 0x2020
	[0247.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json")) returned 0x2020
	[0247.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.665] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.665] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.665] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.665] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0247.666] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x52a, lpOverlapped=0x0) returned 1
	[0247.667] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x530, lpOverlapped=0x0) returned 1
	[0247.668] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.668] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.668] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.668] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x52a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x52a, lpOverlapped=0x0) returned 1
	[0247.668] FlushFileBuffers (hFile=0x260) returned 1
	[0247.671] FlushFileBuffers (hFile=0x110) returned 1
	[0247.681] CloseHandle (hObject=0x260) returned 1
	[0247.681] CloseHandle (hObject=0x110) returned 1
	[0247.682] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json")) returned 1
	[0247.682] SetEvent (hEvent=0xfc) returned 1
	[0247.683] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.684] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=886) returned 1
	[0247.684] CloseHandle (hObject=0x110) returned 1
	[0247.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0247.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0247.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.684] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.685] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.685] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.685] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0247.685] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x376, lpOverlapped=0x0) returned 1
	[0247.689] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x380, lpOverlapped=0x0) returned 1
	[0247.690] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.691] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.691] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.691] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x376, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x376, lpOverlapped=0x0) returned 1
	[0247.691] FlushFileBuffers (hFile=0x110) returned 1
	[0247.694] FlushFileBuffers (hFile=0x260) returned 1
	[0247.696] CloseHandle (hObject=0x110) returned 1
	[0247.696] CloseHandle (hObject=0x260) returned 1
	[0247.696] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json")) returned 1
	[0247.697] SetEvent (hEvent=0xfc) returned 1
	[0247.697] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.697] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=705) returned 1
	[0247.697] CloseHandle (hObject=0x260) returned 1
	[0247.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0247.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0247.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.698] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.698] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.698] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.698] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0247.698] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2c1, lpOverlapped=0x0) returned 1
	[0247.700] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2d0, lpOverlapped=0x0) returned 1
	[0247.701] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.701] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.702] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.702] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2c1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2c1, lpOverlapped=0x0) returned 1
	[0247.702] FlushFileBuffers (hFile=0x260) returned 1
	[0247.721] FlushFileBuffers (hFile=0x110) returned 1
	[0247.722] CloseHandle (hObject=0x260) returned 1
	[0247.722] CloseHandle (hObject=0x110) returned 1
	[0247.722] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json")) returned 1
	[0247.723] SetEvent (hEvent=0xfc) returned 1
	[0247.723] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.724] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=642) returned 1
	[0247.724] CloseHandle (hObject=0x110) returned 1
	[0247.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json")) returned 0x2020
	[0247.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json")) returned 0x2020
	[0247.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.724] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.724] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.724] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.724] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0247.725] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x282, lpOverlapped=0x0) returned 1
	[0247.727] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x290, lpOverlapped=0x0) returned 1
	[0247.728] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.728] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.728] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.728] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x282, lpOverlapped=0x0) returned 1
	[0247.728] FlushFileBuffers (hFile=0x110) returned 1
	[0247.734] FlushFileBuffers (hFile=0x260) returned 1
	[0247.736] CloseHandle (hObject=0x110) returned 1
	[0247.737] CloseHandle (hObject=0x260) returned 1
	[0247.737] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json")) returned 1
	[0247.738] SetEvent (hEvent=0xfc) returned 1
	[0247.738] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.739] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=701) returned 1
	[0247.739] CloseHandle (hObject=0x260) returned 1
	[0247.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json")) returned 0x2020
	[0247.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json")) returned 0x2020
	[0247.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.739] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.739] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.740] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.740] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0247.740] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2bd, lpOverlapped=0x0) returned 1
	[0247.747] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2c0, lpOverlapped=0x0) returned 1
	[0247.748] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.748] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.748] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.748] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2bd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2bd, lpOverlapped=0x0) returned 1
	[0247.748] FlushFileBuffers (hFile=0x260) returned 1
	[0247.795] FlushFileBuffers (hFile=0x110) returned 1
	[0247.816] CloseHandle (hObject=0x260) returned 1
	[0247.816] CloseHandle (hObject=0x110) returned 1
	[0247.816] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json")) returned 1
	[0247.817] SetEvent (hEvent=0xfc) returned 1
	[0247.817] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.818] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=617) returned 1
	[0247.819] CloseHandle (hObject=0x110) returned 1
	[0247.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json")) returned 0x2020
	[0247.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json")) returned 0x2020
	[0247.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.819] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.819] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.819] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.819] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0247.820] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x269, lpOverlapped=0x0) returned 1
	[0247.824] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x270, lpOverlapped=0x0) returned 1
	[0247.825] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.826] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.826] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.826] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x269, lpOverlapped=0x0) returned 1
	[0247.826] FlushFileBuffers (hFile=0x110) returned 1
	[0247.830] FlushFileBuffers (hFile=0x260) returned 1
	[0247.832] CloseHandle (hObject=0x110) returned 1
	[0247.832] CloseHandle (hObject=0x260) returned 1
	[0247.832] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json")) returned 1
	[0247.833] SetEvent (hEvent=0xfc) returned 1
	[0247.833] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.834] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=617) returned 1
	[0247.834] CloseHandle (hObject=0x260) returned 1
	[0247.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json")) returned 0x2020
	[0247.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json")) returned 0x2020
	[0247.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.834] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.834] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.834] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.834] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0247.835] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x269, lpOverlapped=0x0) returned 1
	[0247.838] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x270, lpOverlapped=0x0) returned 1
	[0247.839] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.839] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.839] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.839] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x269, lpOverlapped=0x0) returned 1
	[0247.839] FlushFileBuffers (hFile=0x260) returned 1
	[0247.841] FlushFileBuffers (hFile=0x110) returned 1
	[0247.843] CloseHandle (hObject=0x260) returned 1
	[0247.843] CloseHandle (hObject=0x110) returned 1
	[0247.844] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json")) returned 1
	[0247.844] SetEvent (hEvent=0xfc) returned 1
	[0247.845] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.845] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=696) returned 1
	[0247.845] CloseHandle (hObject=0x110) returned 1
	[0247.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json")) returned 0x2020
	[0247.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json")) returned 0x2020
	[0247.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.846] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.846] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.846] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.846] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0247.846] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2b8, lpOverlapped=0x0) returned 1
	[0247.849] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2c0, lpOverlapped=0x0) returned 1
	[0247.850] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.850] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.850] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.850] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2b8, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2b8, lpOverlapped=0x0) returned 1
	[0247.850] FlushFileBuffers (hFile=0x110) returned 1
	[0247.866] FlushFileBuffers (hFile=0x260) returned 1
	[0247.872] CloseHandle (hObject=0x110) returned 1
	[0247.872] CloseHandle (hObject=0x260) returned 1
	[0247.872] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json")) returned 1
	[0247.873] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.874] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=673) returned 1
	[0247.874] CloseHandle (hObject=0x260) returned 1
	[0247.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0247.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0247.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.874] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.875] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.875] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.875] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0247.875] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2a1, lpOverlapped=0x0) returned 1
	[0247.881] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2b0, lpOverlapped=0x0) returned 1
	[0247.882] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.882] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.883] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.883] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2a1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2a1, lpOverlapped=0x0) returned 1
	[0247.883] FlushFileBuffers (hFile=0x260) returned 1
	[0247.890] FlushFileBuffers (hFile=0x110) returned 1
	[0247.899] CloseHandle (hObject=0x260) returned 1
	[0247.899] CloseHandle (hObject=0x110) returned 1
	[0247.899] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json")) returned 1
	[0247.901] SetEvent (hEvent=0xfc) returned 1
	[0247.901] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.901] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=708) returned 1
	[0247.901] CloseHandle (hObject=0x110) returned 1
	[0247.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0247.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0247.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.902] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0247.902] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.902] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.902] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0247.903] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2c4, lpOverlapped=0x0) returned 1
	[0247.906] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2d0, lpOverlapped=0x0) returned 1
	[0247.907] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.907] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.907] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.907] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2c4, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2c4, lpOverlapped=0x0) returned 1
	[0247.907] FlushFileBuffers (hFile=0x110) returned 1
	[0247.918] FlushFileBuffers (hFile=0x260) returned 1
	[0247.921] CloseHandle (hObject=0x110) returned 1
	[0247.921] CloseHandle (hObject=0x260) returned 1
	[0247.921] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json")) returned 1
	[0247.922] SetEvent (hEvent=0xfc) returned 1
	[0247.928] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.929] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=633) returned 1
	[0247.929] CloseHandle (hObject=0x260) returned 1
	[0247.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json")) returned 0x2020
	[0247.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json")) returned 0x2020
	[0247.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.929] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0247.929] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.929] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0247.929] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0247.930] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x279, lpOverlapped=0x0) returned 1
	[0247.934] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x280, lpOverlapped=0x0) returned 1
	[0247.935] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0247.935] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.935] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0247.935] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x279, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x279, lpOverlapped=0x0) returned 1
	[0247.935] FlushFileBuffers (hFile=0x260) returned 1
	[0248.016] FlushFileBuffers (hFile=0x110) returned 1
	[0248.037] CloseHandle (hObject=0x260) returned 1
	[0248.037] CloseHandle (hObject=0x110) returned 1
	[0248.037] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json")) returned 1
	[0248.038] SetEvent (hEvent=0xfc) returned 1
	[0248.039] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.040] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=617) returned 1
	[0248.040] CloseHandle (hObject=0x110) returned 1
	[0248.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json")) returned 0x2020
	[0248.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json")) returned 0x2020
	[0248.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.041] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.041] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.041] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.041] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.042] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x269, lpOverlapped=0x0) returned 1
	[0248.043] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x270, lpOverlapped=0x0) returned 1
	[0248.044] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.044] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.044] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.044] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x269, lpOverlapped=0x0) returned 1
	[0248.044] FlushFileBuffers (hFile=0x110) returned 1
	[0248.082] FlushFileBuffers (hFile=0x260) returned 1
	[0248.115] CloseHandle (hObject=0x110) returned 1
	[0248.115] CloseHandle (hObject=0x260) returned 1
	[0248.116] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json")) returned 1
	[0248.117] SetEvent (hEvent=0xfc) returned 1
	[0248.117] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.118] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=644) returned 1
	[0248.118] CloseHandle (hObject=0x260) returned 1
	[0248.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json")) returned 0x2020
	[0248.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json")) returned 0x2020
	[0248.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.118] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.118] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.118] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.118] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0248.119] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x284, lpOverlapped=0x0) returned 1
	[0248.120] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x290, lpOverlapped=0x0) returned 1
	[0248.121] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.121] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.121] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.121] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x284, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x284, lpOverlapped=0x0) returned 1
	[0248.122] FlushFileBuffers (hFile=0x260) returned 1
	[0248.127] FlushFileBuffers (hFile=0x110) returned 1
	[0248.129] CloseHandle (hObject=0x260) returned 1
	[0248.129] CloseHandle (hObject=0x110) returned 1
	[0248.129] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json")) returned 1
	[0248.130] SetEvent (hEvent=0xfc) returned 1
	[0248.130] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.130] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=642) returned 1
	[0248.130] CloseHandle (hObject=0x110) returned 1
	[0248.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0248.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0248.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.131] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.131] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.131] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.131] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.131] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x282, lpOverlapped=0x0) returned 1
	[0248.133] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x290, lpOverlapped=0x0) returned 1
	[0248.134] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.134] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.134] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.134] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x282, lpOverlapped=0x0) returned 1
	[0248.134] FlushFileBuffers (hFile=0x110) returned 1
	[0248.145] FlushFileBuffers (hFile=0x260) returned 1
	[0248.146] CloseHandle (hObject=0x110) returned 1
	[0248.146] CloseHandle (hObject=0x260) returned 1
	[0248.146] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json")) returned 1
	[0248.147] SetEvent (hEvent=0xfc) returned 1
	[0248.147] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.148] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=667) returned 1
	[0248.148] CloseHandle (hObject=0x260) returned 1
	[0248.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0248.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0248.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.148] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.148] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.148] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.149] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0248.149] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x29b, lpOverlapped=0x0) returned 1
	[0248.151] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2a0, lpOverlapped=0x0) returned 1
	[0248.151] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.152] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.152] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.152] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x29b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x29b, lpOverlapped=0x0) returned 1
	[0248.152] FlushFileBuffers (hFile=0x260) returned 1
	[0248.302] FlushFileBuffers (hFile=0x110) returned 1
	[0248.361] CloseHandle (hObject=0x260) returned 1
	[0248.361] CloseHandle (hObject=0x110) returned 1
	[0248.362] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json")) returned 1
	[0248.362] SetEvent (hEvent=0xfc) returned 1
	[0248.363] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.364] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=812) returned 1
	[0248.364] CloseHandle (hObject=0x110) returned 1
	[0248.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0248.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0248.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.365] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.365] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.365] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.365] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.366] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x32c, lpOverlapped=0x0) returned 1
	[0248.367] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x330, lpOverlapped=0x0) returned 1
	[0248.368] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.368] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.368] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.368] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x32c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x32c, lpOverlapped=0x0) returned 1
	[0248.368] FlushFileBuffers (hFile=0x110) returned 1
	[0248.372] FlushFileBuffers (hFile=0x260) returned 1
	[0248.375] CloseHandle (hObject=0x110) returned 1
	[0248.375] CloseHandle (hObject=0x260) returned 1
	[0248.375] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json")) returned 1
	[0248.376] SetEvent (hEvent=0xfc) returned 1
	[0248.376] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.377] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=649) returned 1
	[0248.377] CloseHandle (hObject=0x260) returned 1
	[0248.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0248.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0248.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.377] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.377] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.377] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.377] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0248.378] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x289, lpOverlapped=0x0) returned 1
	[0248.379] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x290, lpOverlapped=0x0) returned 1
	[0248.380] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.381] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.381] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.381] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x289, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x289, lpOverlapped=0x0) returned 1
	[0248.381] FlushFileBuffers (hFile=0x260) returned 1
	[0248.383] FlushFileBuffers (hFile=0x110) returned 1
	[0248.384] CloseHandle (hObject=0x260) returned 1
	[0248.384] CloseHandle (hObject=0x110) returned 1
	[0248.384] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json")) returned 1
	[0248.385] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.386] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1099) returned 1
	[0248.386] CloseHandle (hObject=0x110) returned 1
	[0248.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json")) returned 0x2020
	[0248.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json")) returned 0x2020
	[0248.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.386] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.386] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.387] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.387] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.387] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x44b, lpOverlapped=0x0) returned 1
	[0248.389] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x450, lpOverlapped=0x0) returned 1
	[0248.389] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.390] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.390] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.390] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x44b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x44b, lpOverlapped=0x0) returned 1
	[0248.390] FlushFileBuffers (hFile=0x110) returned 1
	[0248.393] FlushFileBuffers (hFile=0x260) returned 1
	[0248.394] CloseHandle (hObject=0x110) returned 1
	[0248.394] CloseHandle (hObject=0x260) returned 1
	[0248.394] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json")) returned 1
	[0248.395] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.396] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=789) returned 1
	[0248.396] CloseHandle (hObject=0x260) returned 1
	[0248.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0248.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0248.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.396] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.397] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.397] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.397] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0248.397] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x315, lpOverlapped=0x0) returned 1
	[0248.399] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x320, lpOverlapped=0x0) returned 1
	[0248.400] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.400] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.400] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.400] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x315, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x315, lpOverlapped=0x0) returned 1
	[0248.400] FlushFileBuffers (hFile=0x260) returned 1
	[0248.442] FlushFileBuffers (hFile=0x110) returned 1
	[0248.443] CloseHandle (hObject=0x260) returned 1
	[0248.443] CloseHandle (hObject=0x110) returned 1
	[0248.443] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json")) returned 1
	[0248.444] SetEvent (hEvent=0xfc) returned 1
	[0248.444] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.445] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=595) returned 1
	[0248.445] CloseHandle (hObject=0x110) returned 1
	[0248.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0248.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0248.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.446] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.446] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.446] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.446] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.447] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x253, lpOverlapped=0x0) returned 1
	[0248.449] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x260, lpOverlapped=0x0) returned 1
	[0248.450] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.450] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.450] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.450] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x253, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x253, lpOverlapped=0x0) returned 1
	[0248.450] FlushFileBuffers (hFile=0x110) returned 1
	[0248.454] FlushFileBuffers (hFile=0x260) returned 1
	[0248.456] CloseHandle (hObject=0x110) returned 1
	[0248.456] CloseHandle (hObject=0x260) returned 1
	[0248.456] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json")) returned 1
	[0248.457] SetEvent (hEvent=0xfc) returned 1
	[0248.457] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.458] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=640) returned 1
	[0248.458] CloseHandle (hObject=0x260) returned 1
	[0248.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0248.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0248.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.458] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.458] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.458] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.458] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0248.459] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x280, lpOverlapped=0x0) returned 1
	[0248.460] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x290, lpOverlapped=0x0) returned 1
	[0248.461] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.462] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.462] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.462] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x280, lpOverlapped=0x0) returned 1
	[0248.462] FlushFileBuffers (hFile=0x260) returned 1
	[0248.464] FlushFileBuffers (hFile=0x110) returned 1
	[0248.465] CloseHandle (hObject=0x260) returned 1
	[0248.465] CloseHandle (hObject=0x110) returned 1
	[0248.465] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json")) returned 1
	[0248.466] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.467] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11770) returned 1
	[0248.467] CloseHandle (hObject=0x110) returned 1
	[0248.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0248.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0248.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.468] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.468] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.468] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.468] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0248.470] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2dfa, lpOverlapped=0x0) returned 1
	[0248.471] WriteFile (in: hFile=0x240, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2e00, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2e00, lpOverlapped=0x0) returned 1
	[0248.472] WriteFile (in: hFile=0x240, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0248.473] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.473] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.473] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2dfa, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2dfa, lpOverlapped=0x0) returned 1
	[0248.473] FlushFileBuffers (hFile=0x110) returned 1
	[0248.476] FlushFileBuffers (hFile=0x240) returned 1
	[0248.477] CloseHandle (hObject=0x110) returned 1
	[0248.477] CloseHandle (hObject=0x240) returned 1
	[0248.477] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json")) returned 1
	[0248.478] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.479] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=784) returned 1
	[0248.479] CloseHandle (hObject=0x240) returned 1
	[0248.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json")) returned 0x2020
	[0248.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json")) returned 0x2020
	[0248.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.480] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.480] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.480] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.480] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0248.481] ReadFile (in: hFile=0x240, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x310, lpOverlapped=0x0) returned 1
	[0248.482] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x320, lpOverlapped=0x0) returned 1
	[0248.483] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.483] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.483] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.483] WriteFile (in: hFile=0x240, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x310, lpOverlapped=0x0) returned 1
	[0248.483] FlushFileBuffers (hFile=0x240) returned 1
	[0248.486] FlushFileBuffers (hFile=0x110) returned 1
	[0248.490] CloseHandle (hObject=0x240) returned 1
	[0248.491] CloseHandle (hObject=0x110) returned 1
	[0248.491] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json")) returned 1
	[0248.492] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.494] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=312) returned 1
	[0248.494] CloseHandle (hObject=0x110) returned 1
	[0248.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0248.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0248.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.494] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.494] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.494] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.494] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0248.495] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x138, lpOverlapped=0x0) returned 1
	[0248.496] WriteFile (in: hFile=0x240, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x140, lpOverlapped=0x0) returned 1
	[0248.497] WriteFile (in: hFile=0x240, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.497] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.497] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.497] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x138, lpOverlapped=0x0) returned 1
	[0248.497] FlushFileBuffers (hFile=0x110) returned 1
	[0248.523] FlushFileBuffers (hFile=0x240) returned 1
	[0248.526] CloseHandle (hObject=0x110) returned 1
	[0248.526] CloseHandle (hObject=0x240) returned 1
	[0248.526] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json")) returned 1
	[0248.527] SetEvent (hEvent=0xfc) returned 1
	[0248.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.538] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=254) returned 1
	[0248.538] CloseHandle (hObject=0x110) returned 1
	[0248.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0248.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0248.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.539] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0248.539] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.539] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.539] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0248.540] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xfe, lpOverlapped=0x0) returned 1
	[0248.540] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0248.541] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.542] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.542] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.542] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xfe, lpOverlapped=0x0) returned 1
	[0248.542] FlushFileBuffers (hFile=0x110) returned 1
	[0248.548] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.551] CloseHandle (hObject=0x110) returned 1
	[0248.551] CloseHandle (hObject=0x20c) returned 1
	[0248.552] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json")) returned 1
	[0248.552] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.553] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=239) returned 1
	[0248.553] CloseHandle (hObject=0x20c) returned 1
	[0248.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json")) returned 0x2020
	[0248.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json")) returned 0x2020
	[0248.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.553] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.553] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.554] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.554] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0248.554] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xef, lpOverlapped=0x0) returned 1
	[0248.555] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0248.556] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.556] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.556] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.556] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xef, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xef, lpOverlapped=0x0) returned 1
	[0248.556] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.566] FlushFileBuffers (hFile=0x110) returned 1
	[0248.568] CloseHandle (hObject=0x20c) returned 1
	[0248.568] CloseHandle (hObject=0x110) returned 1
	[0248.568] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json")) returned 1
	[0248.569] SetEvent (hEvent=0xfc) returned 1
	[0248.569] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.572] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=332) returned 1
	[0248.572] CloseHandle (hObject=0x20c) returned 1
	[0248.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json")) returned 0x2020
	[0248.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json")) returned 0x2020
	[0248.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.572] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.572] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.572] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.572] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0248.573] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x14c, lpOverlapped=0x0) returned 1
	[0248.574] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x150, lpOverlapped=0x0) returned 1
	[0248.575] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.575] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.575] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.575] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x14c, lpOverlapped=0x0) returned 1
	[0248.575] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.578] FlushFileBuffers (hFile=0x254) returned 1
	[0248.591] CloseHandle (hObject=0x20c) returned 1
	[0248.591] CloseHandle (hObject=0x254) returned 1
	[0248.592] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json")) returned 1
	[0248.592] SetEvent (hEvent=0xfc) returned 1
	[0248.592] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.596] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=269) returned 1
	[0248.596] CloseHandle (hObject=0x20c) returned 1
	[0248.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json")) returned 0x2020
	[0248.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json")) returned 0x2020
	[0248.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.597] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.597] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.597] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.597] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.598] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10d, lpOverlapped=0x0) returned 1
	[0248.599] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0248.599] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.600] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.600] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.600] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10d, lpOverlapped=0x0) returned 1
	[0248.600] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.604] FlushFileBuffers (hFile=0x244) returned 1
	[0248.613] CloseHandle (hObject=0x20c) returned 1
	[0248.613] CloseHandle (hObject=0x244) returned 1
	[0248.613] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json")) returned 1
	[0248.614] SetEvent (hEvent=0xfc) returned 1
	[0248.614] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.616] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=234) returned 1
	[0248.617] CloseHandle (hObject=0x244) returned 1
	[0248.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0248.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0248.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.617] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.617] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.617] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.617] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0248.618] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xea, lpOverlapped=0x0) returned 1
	[0248.619] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0248.619] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.620] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.620] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.620] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xea, lpOverlapped=0x0) returned 1
	[0248.620] FlushFileBuffers (hFile=0x244) returned 1
	[0248.629] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.632] CloseHandle (hObject=0x244) returned 1
	[0248.632] CloseHandle (hObject=0x20c) returned 1
	[0248.632] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json")) returned 1
	[0248.633] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.633] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=289) returned 1
	[0248.634] CloseHandle (hObject=0x20c) returned 1
	[0248.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0248.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0248.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.634] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.634] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.634] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.634] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.635] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x121, lpOverlapped=0x0) returned 1
	[0248.635] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x130, lpOverlapped=0x0) returned 1
	[0248.636] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.637] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.637] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.637] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x121, lpOverlapped=0x0) returned 1
	[0248.637] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.648] FlushFileBuffers (hFile=0x244) returned 1
	[0248.651] CloseHandle (hObject=0x20c) returned 1
	[0248.651] CloseHandle (hObject=0x244) returned 1
	[0248.651] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json")) returned 1
	[0248.652] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.653] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=226) returned 1
	[0248.653] CloseHandle (hObject=0x244) returned 1
	[0248.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0248.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0248.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.653] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.653] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.653] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.653] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0248.654] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe2, lpOverlapped=0x0) returned 1
	[0248.655] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0248.656] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.656] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.656] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.656] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe2, lpOverlapped=0x0) returned 1
	[0248.656] FlushFileBuffers (hFile=0x244) returned 1
	[0248.667] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.669] CloseHandle (hObject=0x244) returned 1
	[0248.669] CloseHandle (hObject=0x20c) returned 1
	[0248.669] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json")) returned 1
	[0248.670] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.671] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=256) returned 1
	[0248.671] CloseHandle (hObject=0x20c) returned 1
	[0248.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json")) returned 0x2020
	[0248.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json")) returned 0x2020
	[0248.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.671] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.671] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.671] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.671] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.672] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x100, lpOverlapped=0x0) returned 1
	[0248.673] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0248.674] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.674] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.674] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.674] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x100, lpOverlapped=0x0) returned 1
	[0248.674] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.694] FlushFileBuffers (hFile=0x244) returned 1
	[0248.697] CloseHandle (hObject=0x20c) returned 1
	[0248.697] CloseHandle (hObject=0x244) returned 1
	[0248.697] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json")) returned 1
	[0248.698] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.699] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=256) returned 1
	[0248.699] CloseHandle (hObject=0x244) returned 1
	[0248.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0248.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0248.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.699] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.699] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.700] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.700] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0248.700] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x100, lpOverlapped=0x0) returned 1
	[0248.701] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0248.702] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.703] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.703] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.703] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x100, lpOverlapped=0x0) returned 1
	[0248.703] FlushFileBuffers (hFile=0x244) returned 1
	[0248.712] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.715] CloseHandle (hObject=0x244) returned 1
	[0248.715] CloseHandle (hObject=0x20c) returned 1
	[0248.715] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json")) returned 1
	[0248.716] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.717] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=238) returned 1
	[0248.717] CloseHandle (hObject=0x20c) returned 1
	[0248.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0248.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0248.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.717] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.717] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.717] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.717] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.718] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xee, lpOverlapped=0x0) returned 1
	[0248.719] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0248.720] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.720] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.720] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.720] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xee, lpOverlapped=0x0) returned 1
	[0248.720] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.729] FlushFileBuffers (hFile=0x244) returned 1
	[0248.732] CloseHandle (hObject=0x20c) returned 1
	[0248.732] CloseHandle (hObject=0x244) returned 1
	[0248.732] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json")) returned 1
	[0248.733] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.734] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=210) returned 1
	[0248.734] CloseHandle (hObject=0x244) returned 1
	[0248.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json")) returned 0x2020
	[0248.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json")) returned 0x2020
	[0248.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.734] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.734] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.734] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.734] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0248.735] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd2, lpOverlapped=0x0) returned 1
	[0248.736] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0248.736] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.737] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.737] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.737] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd2, lpOverlapped=0x0) returned 1
	[0248.737] FlushFileBuffers (hFile=0x244) returned 1
	[0248.740] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.747] CloseHandle (hObject=0x244) returned 1
	[0248.751] CloseHandle (hObject=0x20c) returned 1
	[0248.751] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json")) returned 1
	[0248.752] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.753] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=222) returned 1
	[0248.753] CloseHandle (hObject=0x20c) returned 1
	[0248.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0248.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0248.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.753] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.753] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.753] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.753] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.754] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xde, lpOverlapped=0x0) returned 1
	[0248.755] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0248.755] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.756] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.756] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.756] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xde, lpOverlapped=0x0) returned 1
	[0248.756] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.759] FlushFileBuffers (hFile=0x244) returned 1
	[0248.767] CloseHandle (hObject=0x20c) returned 1
	[0248.768] CloseHandle (hObject=0x244) returned 1
	[0248.768] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json")) returned 1
	[0248.769] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.769] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=265) returned 1
	[0248.769] CloseHandle (hObject=0x244) returned 1
	[0248.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0248.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0248.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.769] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.770] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.770] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.770] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0248.770] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x109, lpOverlapped=0x0) returned 1
	[0248.771] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0248.772] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.772] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.772] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.772] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x109, lpOverlapped=0x0) returned 1
	[0248.772] FlushFileBuffers (hFile=0x244) returned 1
	[0248.777] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.785] CloseHandle (hObject=0x244) returned 1
	[0248.785] CloseHandle (hObject=0x20c) returned 1
	[0248.785] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json")) returned 1
	[0248.786] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.786] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=210) returned 1
	[0248.787] CloseHandle (hObject=0x20c) returned 1
	[0248.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json")) returned 0x2020
	[0248.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json")) returned 0x2020
	[0248.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.787] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.787] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.787] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.787] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.788] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd2, lpOverlapped=0x0) returned 1
	[0248.788] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe0, lpOverlapped=0x0) returned 1
	[0248.789] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.790] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.790] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.790] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd2, lpOverlapped=0x0) returned 1
	[0248.790] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.793] FlushFileBuffers (hFile=0x244) returned 1
	[0248.801] CloseHandle (hObject=0x20c) returned 1
	[0248.802] CloseHandle (hObject=0x244) returned 1
	[0248.802] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json")) returned 1
	[0248.803] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.804] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=234) returned 1
	[0248.804] CloseHandle (hObject=0x244) returned 1
	[0248.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0248.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0248.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.804] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.804] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.804] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.804] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0248.805] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xea, lpOverlapped=0x0) returned 1
	[0248.806] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0248.806] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.807] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.807] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.807] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xea, lpOverlapped=0x0) returned 1
	[0248.807] FlushFileBuffers (hFile=0x244) returned 1
	[0248.811] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.820] CloseHandle (hObject=0x244) returned 1
	[0248.820] CloseHandle (hObject=0x20c) returned 1
	[0248.820] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json")) returned 1
	[0248.821] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.822] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=324) returned 1
	[0248.822] CloseHandle (hObject=0x20c) returned 1
	[0248.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json")) returned 0x2020
	[0248.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json")) returned 0x2020
	[0248.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.822] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.822] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.822] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.822] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.823] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x144, lpOverlapped=0x0) returned 1
	[0248.824] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x150, lpOverlapped=0x0) returned 1
	[0248.825] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.825] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.825] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.825] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x144, lpOverlapped=0x0) returned 1
	[0248.825] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.829] FlushFileBuffers (hFile=0x244) returned 1
	[0248.837] CloseHandle (hObject=0x20c) returned 1
	[0248.837] CloseHandle (hObject=0x244) returned 1
	[0248.837] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json")) returned 1
	[0248.839] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.840] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=304) returned 1
	[0248.840] CloseHandle (hObject=0x244) returned 1
	[0248.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0248.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0248.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.840] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.840] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.840] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.841] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0248.841] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x130, lpOverlapped=0x0) returned 1
	[0248.842] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x140, lpOverlapped=0x0) returned 1
	[0248.843] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.843] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.843] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.843] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x130, lpOverlapped=0x0) returned 1
	[0248.844] FlushFileBuffers (hFile=0x244) returned 1
	[0248.853] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.855] CloseHandle (hObject=0x244) returned 1
	[0248.855] CloseHandle (hObject=0x20c) returned 1
	[0248.855] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json")) returned 1
	[0248.856] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.857] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=258) returned 1
	[0248.857] CloseHandle (hObject=0x20c) returned 1
	[0248.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0248.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0248.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.858] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.858] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.858] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.858] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.859] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x102, lpOverlapped=0x0) returned 1
	[0248.860] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0248.860] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0248.861] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.861] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.861] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x102, lpOverlapped=0x0) returned 1
	[0248.861] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.865] FlushFileBuffers (hFile=0x244) returned 1
	[0248.874] CloseHandle (hObject=0x20c) returned 1
	[0248.874] CloseHandle (hObject=0x244) returned 1
	[0248.874] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json")) returned 1
	[0248.875] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.876] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9862) returned 1
	[0248.876] CloseHandle (hObject=0x244) returned 1
	[0248.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0248.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0248.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.876] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.876] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.877] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.877] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0248.882] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2686, lpOverlapped=0x0) returned 1
	[0248.884] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2690, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2690, lpOverlapped=0x0) returned 1
	[0248.885] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0248.885] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.885] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.885] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2686, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2686, lpOverlapped=0x0) returned 1
	[0248.885] FlushFileBuffers (hFile=0x244) returned 1
	[0248.893] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.919] CloseHandle (hObject=0x244) returned 1
	[0248.919] CloseHandle (hObject=0x20c) returned 1
	[0248.919] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json")) returned 1
	[0248.920] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.921] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43164) returned 1
	[0248.921] CloseHandle (hObject=0x20c) returned 1
	[0248.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js")) returned 0x2020
	[0248.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js")) returned 0x2020
	[0248.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.922] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0248.922] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.922] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.922] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.923] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xa89c, lpOverlapped=0x0) returned 1
	[0248.925] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa8a0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa8a0, lpOverlapped=0x0) returned 1
	[0248.926] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0248.927] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.927] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.927] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa89c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xa89c, lpOverlapped=0x0) returned 1
	[0248.927] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.951] FlushFileBuffers (hFile=0x244) returned 1
	[0248.953] CloseHandle (hObject=0x20c) returned 1
	[0248.953] CloseHandle (hObject=0x244) returned 1
	[0248.953] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js")) returned 1
	[0248.954] SetEvent (hEvent=0xfc) returned 1
	[0248.954] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.955] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98730) returned 1
	[0248.955] CloseHandle (hObject=0x244) returned 1
	[0248.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js")) returned 0x2020
	[0248.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js")) returned 0x2020
	[0248.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.956] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.956] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.956] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0248.956] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0248.965] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x181aa, lpOverlapped=0x0) returned 1
	[0248.968] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x181b0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x181b0, lpOverlapped=0x0) returned 1
	[0248.971] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0248.971] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.971] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0248.971] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x181aa, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x181aa, lpOverlapped=0x0) returned 1
	[0248.972] FlushFileBuffers (hFile=0x244) returned 1
	[0248.996] FlushFileBuffers (hFile=0x20c) returned 1
	[0248.998] CloseHandle (hObject=0x244) returned 1
	[0248.998] CloseHandle (hObject=0x20c) returned 1
	[0248.998] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js")) returned 1
	[0248.999] SetEvent (hEvent=0xfc) returned 1
	[0249.000] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.001] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=70113) returned 1
	[0249.001] CloseHandle (hObject=0x20c) returned 1
	[0249.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html")) returned 0x2020
	[0249.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html")) returned 0x2020
	[0249.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.001] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.001] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.002] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.002] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0249.002] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x111e1, lpOverlapped=0x0) returned 1
	[0249.005] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x111f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x111f0, lpOverlapped=0x0) returned 1
	[0249.007] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0249.007] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.007] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.007] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x111e1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x111e1, lpOverlapped=0x0) returned 1
	[0249.008] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.048] FlushFileBuffers (hFile=0x244) returned 1
	[0249.068] CloseHandle (hObject=0x20c) returned 1
	[0249.068] CloseHandle (hObject=0x244) returned 1
	[0249.068] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html")) returned 1
	[0249.069] SetEvent (hEvent=0xfc) returned 1
	[0249.070] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.071] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6685) returned 1
	[0249.071] CloseHandle (hObject=0x244) returned 1
	[0249.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css")) returned 0x2020
	[0249.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css")) returned 0x2020
	[0249.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.072] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.072] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.072] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.072] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0249.073] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1a1d, lpOverlapped=0x0) returned 1
	[0249.074] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1a20, lpOverlapped=0x0) returned 1
	[0249.075] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.076] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.076] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.076] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1a1d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1a1d, lpOverlapped=0x0) returned 1
	[0249.076] FlushFileBuffers (hFile=0x244) returned 1
	[0249.093] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.095] CloseHandle (hObject=0x244) returned 1
	[0249.095] CloseHandle (hObject=0x20c) returned 1
	[0249.095] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css")) returned 1
	[0249.096] SetEvent (hEvent=0xfc) returned 1
	[0249.096] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.098] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=242) returned 1
	[0249.098] CloseHandle (hObject=0x20c) returned 1
	[0249.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js")) returned 0x2020
	[0249.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js")) returned 0x2020
	[0249.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.098] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.098] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.098] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.098] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0249.099] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xf2, lpOverlapped=0x0) returned 1
	[0249.100] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0249.101] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0249.101] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.101] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.101] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xf2, lpOverlapped=0x0) returned 1
	[0249.101] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.103] FlushFileBuffers (hFile=0x244) returned 1
	[0249.105] CloseHandle (hObject=0x20c) returned 1
	[0249.105] CloseHandle (hObject=0x244) returned 1
	[0249.105] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js")) returned 1
	[0249.106] SetEvent (hEvent=0xfc) returned 1
	[0249.106] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.106] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7151) returned 1
	[0249.107] CloseHandle (hObject=0x244) returned 1
	[0249.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png")) returned 0x2020
	[0249.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png")) returned 0x2020
	[0249.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.107] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.107] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.107] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.107] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0249.108] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1bef, lpOverlapped=0x0) returned 1
	[0249.109] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1bf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1bf0, lpOverlapped=0x0) returned 1
	[0249.110] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0249.110] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.111] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.111] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1bef, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1bef, lpOverlapped=0x0) returned 1
	[0249.111] FlushFileBuffers (hFile=0x244) returned 1
	[0249.114] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.115] CloseHandle (hObject=0x244) returned 1
	[0249.116] CloseHandle (hObject=0x20c) returned 1
	[0249.116] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png")) returned 1
	[0249.116] SetEvent (hEvent=0xfc) returned 1
	[0249.117] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.117] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=59) returned 1
	[0249.117] CloseHandle (hObject=0x20c) returned 1
	[0249.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html")) returned 0x2020
	[0249.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html")) returned 0x2020
	[0249.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.118] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.118] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.118] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.118] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0249.118] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3b, lpOverlapped=0x0) returned 1
	[0249.119] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x40, lpOverlapped=0x0) returned 1
	[0249.120] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.120] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.120] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.120] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3b, lpOverlapped=0x0) returned 1
	[0249.120] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.123] FlushFileBuffers (hFile=0x244) returned 1
	[0249.125] CloseHandle (hObject=0x20c) returned 1
	[0249.125] CloseHandle (hObject=0x244) returned 1
	[0249.125] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html")) returned 1
	[0249.126] SetEvent (hEvent=0xfc) returned 1
	[0249.126] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.126] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2088) returned 1
	[0249.126] CloseHandle (hObject=0x244) returned 1
	[0249.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html")) returned 0x2020
	[0249.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html")) returned 0x2020
	[0249.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.127] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.127] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.127] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.127] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0249.128] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x828, lpOverlapped=0x0) returned 1
	[0249.129] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x830, lpOverlapped=0x0) returned 1
	[0249.130] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.130] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.130] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.130] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x828, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x828, lpOverlapped=0x0) returned 1
	[0249.131] FlushFileBuffers (hFile=0x244) returned 1
	[0249.146] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.149] CloseHandle (hObject=0x244) returned 1
	[0249.149] CloseHandle (hObject=0x20c) returned 1
	[0249.149] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html")) returned 1
	[0249.150] SetEvent (hEvent=0xfc) returned 1
	[0249.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.152] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=59) returned 1
	[0249.152] CloseHandle (hObject=0x20c) returned 1
	[0249.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html")) returned 0x2020
	[0249.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html")) returned 0x2020
	[0249.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.153] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.153] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.153] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.153] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0249.154] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3b, lpOverlapped=0x0) returned 1
	[0249.155] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x40, lpOverlapped=0x0) returned 1
	[0249.155] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.156] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.156] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.156] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3b, lpOverlapped=0x0) returned 1
	[0249.156] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.158] FlushFileBuffers (hFile=0x244) returned 1
	[0249.160] CloseHandle (hObject=0x20c) returned 1
	[0249.160] CloseHandle (hObject=0x244) returned 1
	[0249.160] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html")) returned 1
	[0249.161] SetEvent (hEvent=0xfc) returned 1
	[0249.161] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.162] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5964) returned 1
	[0249.162] CloseHandle (hObject=0x244) returned 1
	[0249.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html")) returned 0x2020
	[0249.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html")) returned 0x2020
	[0249.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.162] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.163] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.163] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.163] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0249.165] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x174c, lpOverlapped=0x0) returned 1
	[0249.167] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1750, lpOverlapped=0x0) returned 1
	[0249.168] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.168] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.168] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.168] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x174c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x174c, lpOverlapped=0x0) returned 1
	[0249.168] FlushFileBuffers (hFile=0x244) returned 1
	[0249.171] FlushFileBuffers (hFile=0x260) returned 1
	[0249.173] CloseHandle (hObject=0x244) returned 1
	[0249.173] CloseHandle (hObject=0x260) returned 1
	[0249.173] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html")) returned 1
	[0249.174] SetEvent (hEvent=0xfc) returned 1
	[0249.174] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.175] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=51320) returned 1
	[0249.175] CloseHandle (hObject=0x260) returned 1
	[0249.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js")) returned 0x2020
	[0249.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js")) returned 0x2020
	[0249.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.176] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.176] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.176] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.176] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0249.176] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xc878, lpOverlapped=0x0) returned 1
	[0249.179] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc880, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc880, lpOverlapped=0x0) returned 1
	[0249.180] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.180] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.180] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.180] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc878, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xc878, lpOverlapped=0x0) returned 1
	[0249.180] FlushFileBuffers (hFile=0x260) returned 1
	[0249.194] FlushFileBuffers (hFile=0x244) returned 1
	[0249.195] CloseHandle (hObject=0x260) returned 1
	[0249.195] CloseHandle (hObject=0x244) returned 1
	[0249.195] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js")) returned 1
	[0249.196] SetEvent (hEvent=0xfc) returned 1
	[0249.196] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.197] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3110) returned 1
	[0249.197] CloseHandle (hObject=0x244) returned 1
	[0249.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css")) returned 0x2020
	[0249.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css")) returned 0x2020
	[0249.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.198] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.198] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.198] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.198] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0249.199] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xc26, lpOverlapped=0x0) returned 1
	[0249.200] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc30, lpOverlapped=0x0) returned 1
	[0249.201] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.201] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.201] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.201] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc26, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xc26, lpOverlapped=0x0) returned 1
	[0249.202] FlushFileBuffers (hFile=0x244) returned 1
	[0249.208] FlushFileBuffers (hFile=0x260) returned 1
	[0249.210] CloseHandle (hObject=0x244) returned 1
	[0249.210] CloseHandle (hObject=0x260) returned 1
	[0249.211] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css")) returned 1
	[0249.211] SetEvent (hEvent=0xfc) returned 1
	[0249.211] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.212] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14504) returned 1
	[0249.212] CloseHandle (hObject=0x260) returned 1
	[0249.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html")) returned 0x2020
	[0249.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html")) returned 0x2020
	[0249.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.213] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.213] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.213] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.213] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0249.214] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x38a8, lpOverlapped=0x0) returned 1
	[0249.215] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x38b0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x38b0, lpOverlapped=0x0) returned 1
	[0249.216] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.217] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.217] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.217] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x38a8, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x38a8, lpOverlapped=0x0) returned 1
	[0249.217] FlushFileBuffers (hFile=0x260) returned 1
	[0249.267] FlushFileBuffers (hFile=0x244) returned 1
	[0249.268] CloseHandle (hObject=0x260) returned 1
	[0249.268] CloseHandle (hObject=0x244) returned 1
	[0249.269] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html")) returned 1
	[0249.269] SetEvent (hEvent=0xfc) returned 1
	[0249.270] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.271] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31795) returned 1
	[0249.271] CloseHandle (hObject=0x244) returned 1
	[0249.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js")) returned 0x2020
	[0249.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js")) returned 0x2020
	[0249.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.271] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.271] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.271] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.271] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0249.272] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7c33, lpOverlapped=0x0) returned 1
	[0249.274] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7c40, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7c40, lpOverlapped=0x0) returned 1
	[0249.275] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0249.276] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.276] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.276] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7c33, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7c33, lpOverlapped=0x0) returned 1
	[0249.276] FlushFileBuffers (hFile=0x244) returned 1
	[0249.287] FlushFileBuffers (hFile=0x260) returned 1
	[0249.288] CloseHandle (hObject=0x244) returned 1
	[0249.288] CloseHandle (hObject=0x260) returned 1
	[0249.288] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js")) returned 1
	[0249.289] SetEvent (hEvent=0xfc) returned 1
	[0249.290] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.291] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=175595) returned 1
	[0249.291] CloseHandle (hObject=0x260) returned 1
	[0249.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js")) returned 0x2020
	[0249.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js")) returned 0x2020
	[0249.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.291] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.291] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.291] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.291] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0249.292] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2adeb, lpOverlapped=0x0) returned 1
	[0249.296] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2adf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2adf0, lpOverlapped=0x0) returned 1
	[0249.299] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0249.300] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.300] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.300] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2adeb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2adeb, lpOverlapped=0x0) returned 1
	[0249.300] FlushFileBuffers (hFile=0x260) returned 1
	[0249.325] FlushFileBuffers (hFile=0x244) returned 1
	[0249.327] CloseHandle (hObject=0x260) returned 1
	[0249.327] CloseHandle (hObject=0x244) returned 1
	[0249.328] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js")) returned 1
	[0249.329] SetEvent (hEvent=0xfc) returned 1
	[0249.329] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.331] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=496847) returned 1
	[0249.331] CloseHandle (hObject=0x244) returned 1
	[0249.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js")) returned 0x2020
	[0249.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js")) returned 0x2020
	[0249.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.331] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.331] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.331] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.331] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0249.332] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x794cf, lpOverlapped=0x0) returned 1
	[0249.342] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x794d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x794d0, lpOverlapped=0x0) returned 1
	[0249.350] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0249.351] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.351] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.351] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x794cf, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x794cf, lpOverlapped=0x0) returned 1
	[0249.352] FlushFileBuffers (hFile=0x244) returned 1
	[0249.562] FlushFileBuffers (hFile=0x260) returned 1
	[0249.578] CloseHandle (hObject=0x244) returned 1
	[0249.578] CloseHandle (hObject=0x260) returned 1
	[0249.578] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js")) returned 1
	[0249.582] SetEvent (hEvent=0xfc) returned 1
	[0249.583] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.585] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17855) returned 1
	[0249.585] CloseHandle (hObject=0x260) returned 1
	[0249.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0249.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0249.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.585] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.585] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.585] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.585] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0249.586] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x45bf, lpOverlapped=0x0) returned 1
	[0249.588] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x45c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x45c0, lpOverlapped=0x0) returned 1
	[0249.589] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.589] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.589] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.589] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x45bf, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x45bf, lpOverlapped=0x0) returned 1
	[0249.590] FlushFileBuffers (hFile=0x260) returned 1
	[0249.600] FlushFileBuffers (hFile=0x244) returned 1
	[0249.626] CloseHandle (hObject=0x260) returned 1
	[0249.627] CloseHandle (hObject=0x244) returned 1
	[0249.627] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json")) returned 1
	[0249.628] SetEvent (hEvent=0xfc) returned 1
	[0249.628] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.629] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=19299) returned 1
	[0249.629] CloseHandle (hObject=0x244) returned 1
	[0249.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0249.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0249.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.629] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.629] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.629] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.629] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0249.630] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4b63, lpOverlapped=0x0) returned 1
	[0249.633] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4b70, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4b70, lpOverlapped=0x0) returned 1
	[0249.635] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.635] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.635] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.635] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4b63, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4b63, lpOverlapped=0x0) returned 1
	[0249.635] FlushFileBuffers (hFile=0x244) returned 1
	[0249.652] FlushFileBuffers (hFile=0x260) returned 1
	[0249.653] CloseHandle (hObject=0x244) returned 1
	[0249.654] CloseHandle (hObject=0x260) returned 1
	[0249.658] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json")) returned 1
	[0249.658] SetEvent (hEvent=0xfc) returned 1
	[0249.659] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.660] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16477) returned 1
	[0249.660] CloseHandle (hObject=0x260) returned 1
	[0249.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0249.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0249.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.660] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.660] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.660] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.660] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0249.661] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x405d, lpOverlapped=0x0) returned 1
	[0249.665] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4060, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4060, lpOverlapped=0x0) returned 1
	[0249.666] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.666] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.667] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.667] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x405d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x405d, lpOverlapped=0x0) returned 1
	[0249.667] FlushFileBuffers (hFile=0x260) returned 1
	[0249.689] FlushFileBuffers (hFile=0x244) returned 1
	[0249.702] CloseHandle (hObject=0x260) returned 1
	[0249.702] CloseHandle (hObject=0x244) returned 1
	[0249.702] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json")) returned 1
	[0249.703] SetEvent (hEvent=0xfc) returned 1
	[0249.703] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.705] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16495) returned 1
	[0249.705] CloseHandle (hObject=0x244) returned 1
	[0249.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json")) returned 0x2020
	[0249.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json")) returned 0x2020
	[0249.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.705] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.705] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.705] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.705] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0249.706] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x406f, lpOverlapped=0x0) returned 1
	[0249.708] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4070, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4070, lpOverlapped=0x0) returned 1
	[0249.709] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.710] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.710] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.710] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x406f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x406f, lpOverlapped=0x0) returned 1
	[0249.710] FlushFileBuffers (hFile=0x244) returned 1
	[0249.717] FlushFileBuffers (hFile=0x260) returned 1
	[0249.724] CloseHandle (hObject=0x244) returned 1
	[0249.724] CloseHandle (hObject=0x260) returned 1
	[0249.724] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json")) returned 1
	[0249.725] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.726] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15738) returned 1
	[0249.726] CloseHandle (hObject=0x260) returned 1
	[0249.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json")) returned 0x2020
	[0249.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json")) returned 0x2020
	[0249.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.726] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.726] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.726] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.726] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0249.727] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3d7a, lpOverlapped=0x0) returned 1
	[0249.732] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3d80, lpOverlapped=0x0) returned 1
	[0249.733] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.734] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.734] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.734] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3d7a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3d7a, lpOverlapped=0x0) returned 1
	[0249.734] FlushFileBuffers (hFile=0x260) returned 1
	[0249.736] FlushFileBuffers (hFile=0x244) returned 1
	[0249.738] CloseHandle (hObject=0x260) returned 1
	[0249.738] CloseHandle (hObject=0x244) returned 1
	[0249.738] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json")) returned 1
	[0249.739] SetEvent (hEvent=0xfc) returned 1
	[0249.739] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.740] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16459) returned 1
	[0249.740] CloseHandle (hObject=0x244) returned 1
	[0249.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json")) returned 0x2020
	[0249.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json")) returned 0x2020
	[0249.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.740] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.741] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.741] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.741] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0249.741] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x404b, lpOverlapped=0x0) returned 1
	[0249.743] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4050, lpOverlapped=0x0) returned 1
	[0249.744] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.744] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.744] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.744] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x404b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x404b, lpOverlapped=0x0) returned 1
	[0249.745] FlushFileBuffers (hFile=0x244) returned 1
	[0249.881] FlushFileBuffers (hFile=0x260) returned 1
	[0249.926] CloseHandle (hObject=0x244) returned 1
	[0249.926] CloseHandle (hObject=0x260) returned 1
	[0249.926] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json")) returned 1
	[0249.927] SetEvent (hEvent=0xfc) returned 1
	[0249.927] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.928] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16005) returned 1
	[0249.929] CloseHandle (hObject=0x260) returned 1
	[0249.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json")) returned 0x2020
	[0249.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json")) returned 0x2020
	[0249.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.929] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.929] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.929] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.929] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0249.930] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3e85, lpOverlapped=0x0) returned 1
	[0249.932] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3e90, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3e90, lpOverlapped=0x0) returned 1
	[0249.933] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.933] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.933] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.933] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3e85, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3e85, lpOverlapped=0x0) returned 1
	[0249.933] FlushFileBuffers (hFile=0x260) returned 1
	[0249.958] FlushFileBuffers (hFile=0x244) returned 1
	[0249.961] CloseHandle (hObject=0x260) returned 1
	[0249.961] CloseHandle (hObject=0x244) returned 1
	[0249.961] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json")) returned 1
	[0249.962] SetEvent (hEvent=0xfc) returned 1
	[0249.962] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.963] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16204) returned 1
	[0249.963] CloseHandle (hObject=0x244) returned 1
	[0249.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0249.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0249.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.963] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0249.964] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.964] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.964] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0249.964] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3f4c, lpOverlapped=0x0) returned 1
	[0249.966] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3f50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3f50, lpOverlapped=0x0) returned 1
	[0249.967] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0249.968] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.968] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0249.968] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3f4c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3f4c, lpOverlapped=0x0) returned 1
	[0249.968] FlushFileBuffers (hFile=0x244) returned 1
	[0249.992] FlushFileBuffers (hFile=0x260) returned 1
	[0249.994] CloseHandle (hObject=0x244) returned 1
	[0249.994] CloseHandle (hObject=0x260) returned 1
	[0249.994] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json")) returned 1
	[0249.995] SetEvent (hEvent=0xfc) returned 1
	[0249.995] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.996] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16514) returned 1
	[0249.996] CloseHandle (hObject=0x260) returned 1
	[0249.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0249.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0249.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.997] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.997] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.997] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0249.997] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0249.998] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4082, lpOverlapped=0x0) returned 1
	[0250.000] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4090, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4090, lpOverlapped=0x0) returned 1
	[0250.001] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0250.001] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.001] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.001] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4082, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4082, lpOverlapped=0x0) returned 1
	[0250.001] FlushFileBuffers (hFile=0x260) returned 1
	[0250.206] FlushFileBuffers (hFile=0x244) returned 1
	[0250.212] CloseHandle (hObject=0x260) returned 1
	[0250.212] CloseHandle (hObject=0x244) returned 1
	[0250.212] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json")) returned 1
	[0250.213] SetEvent (hEvent=0xfc) returned 1
	[0250.214] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0250.214] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20727) returned 1
	[0250.215] CloseHandle (hObject=0x244) returned 1
	[0250.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0250.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0250.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.215] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0250.215] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.215] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.215] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0250.216] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x50f7, lpOverlapped=0x0) returned 1
	[0250.217] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x5100, lpOverlapped=0x0) returned 1
	[0250.218] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0250.219] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.219] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.219] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x50f7, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x50f7, lpOverlapped=0x0) returned 1
	[0250.219] FlushFileBuffers (hFile=0x244) returned 1
	[0250.236] FlushFileBuffers (hFile=0x260) returned 1
	[0250.238] CloseHandle (hObject=0x244) returned 1
	[0250.238] CloseHandle (hObject=0x260) returned 1
	[0250.238] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json")) returned 1
	[0250.239] SetEvent (hEvent=0xfc) returned 1
	[0250.239] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0250.240] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16596) returned 1
	[0250.240] CloseHandle (hObject=0x260) returned 1
	[0250.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0250.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0250.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.240] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0250.240] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.240] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.240] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0250.241] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x40d4, lpOverlapped=0x0) returned 1
	[0250.244] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x40e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x40e0, lpOverlapped=0x0) returned 1
	[0250.245] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0250.245] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.245] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.245] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x40d4, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x40d4, lpOverlapped=0x0) returned 1
	[0250.245] FlushFileBuffers (hFile=0x260) returned 1
	[0250.260] FlushFileBuffers (hFile=0x244) returned 1
	[0250.261] CloseHandle (hObject=0x260) returned 1
	[0250.261] CloseHandle (hObject=0x244) returned 1
	[0250.261] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json")) returned 1
	[0250.263] SetEvent (hEvent=0xfc) returned 1
	[0250.263] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0250.263] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16140) returned 1
	[0250.263] CloseHandle (hObject=0x244) returned 1
	[0250.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json")) returned 0x2020
	[0250.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json")) returned 0x2020
	[0250.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.264] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0250.264] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.264] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.264] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0250.265] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3f0c, lpOverlapped=0x0) returned 1
	[0250.266] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3f10, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3f10, lpOverlapped=0x0) returned 1
	[0250.267] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0250.268] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.268] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.268] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3f0c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3f0c, lpOverlapped=0x0) returned 1
	[0250.268] FlushFileBuffers (hFile=0x244) returned 1
	[0250.286] FlushFileBuffers (hFile=0x260) returned 1
	[0250.288] CloseHandle (hObject=0x244) returned 1
	[0250.289] CloseHandle (hObject=0x260) returned 1
	[0250.289] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json")) returned 1
	[0250.289] SetEvent (hEvent=0xfc) returned 1
	[0250.290] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0250.290] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17530) returned 1
	[0250.290] CloseHandle (hObject=0x260) returned 1
	[0250.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0250.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0250.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.291] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0250.291] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.291] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.291] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0250.291] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x447a, lpOverlapped=0x0) returned 1
	[0250.294] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4480, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4480, lpOverlapped=0x0) returned 1
	[0250.295] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0250.295] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.295] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.295] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x447a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x447a, lpOverlapped=0x0) returned 1
	[0250.295] FlushFileBuffers (hFile=0x260) returned 1
	[0250.419] FlushFileBuffers (hFile=0x244) returned 1
	[0250.429] CloseHandle (hObject=0x260) returned 1
	[0250.429] CloseHandle (hObject=0x244) returned 1
	[0250.429] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json")) returned 1
	[0250.430] SetEvent (hEvent=0xfc) returned 1
	[0250.430] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0250.431] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16442) returned 1
	[0250.431] CloseHandle (hObject=0x244) returned 1
	[0250.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0250.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0250.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.431] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0250.431] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.431] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.431] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0250.432] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x403a, lpOverlapped=0x0) returned 1
	[0250.434] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4040, lpOverlapped=0x0) returned 1
	[0250.435] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0250.435] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.435] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.435] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x403a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x403a, lpOverlapped=0x0) returned 1
	[0250.435] FlushFileBuffers (hFile=0x244) returned 1
	[0250.594] FlushFileBuffers (hFile=0x260) returned 1
	[0250.726] CloseHandle (hObject=0x244) returned 1
	[0250.726] CloseHandle (hObject=0x260) returned 1
	[0250.726] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json")) returned 1
	[0250.727] SetEvent (hEvent=0xfc) returned 1
	[0250.727] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0250.729] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16831) returned 1
	[0250.729] CloseHandle (hObject=0x260) returned 1
	[0250.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0250.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0250.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.729] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0250.729] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.729] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.729] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0250.730] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x41bf, lpOverlapped=0x0) returned 1
	[0250.735] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x41c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x41c0, lpOverlapped=0x0) returned 1
	[0250.736] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0250.736] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.736] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.736] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x41bf, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x41bf, lpOverlapped=0x0) returned 1
	[0250.736] FlushFileBuffers (hFile=0x260) returned 1
	[0250.780] FlushFileBuffers (hFile=0x244) returned 1
	[0250.782] CloseHandle (hObject=0x260) returned 1
	[0250.782] CloseHandle (hObject=0x244) returned 1
	[0250.782] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json")) returned 1
	[0250.783] SetEvent (hEvent=0xfc) returned 1
	[0250.783] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0250.784] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21028) returned 1
	[0250.784] CloseHandle (hObject=0x244) returned 1
	[0250.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json")) returned 0x2020
	[0250.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json")) returned 0x2020
	[0250.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.785] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0250.785] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.785] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.785] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0250.786] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5224, lpOverlapped=0x0) returned 1
	[0250.788] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5230, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x5230, lpOverlapped=0x0) returned 1
	[0250.789] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0250.790] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.790] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.790] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5224, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5224, lpOverlapped=0x0) returned 1
	[0250.790] FlushFileBuffers (hFile=0x244) returned 1
	[0250.877] FlushFileBuffers (hFile=0x260) returned 1
	[0250.896] CloseHandle (hObject=0x244) returned 1
	[0250.896] CloseHandle (hObject=0x260) returned 1
	[0250.896] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json")) returned 1
	[0250.897] SetEvent (hEvent=0xfc) returned 1
	[0250.898] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0250.899] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16060) returned 1
	[0250.899] CloseHandle (hObject=0x260) returned 1
	[0250.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json")) returned 0x2020
	[0250.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json")) returned 0x2020
	[0250.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.899] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0250.899] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.899] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.900] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0250.900] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3ebc, lpOverlapped=0x0) returned 1
	[0250.902] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3ec0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3ec0, lpOverlapped=0x0) returned 1
	[0250.903] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0250.903] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.903] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.903] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3ebc, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3ebc, lpOverlapped=0x0) returned 1
	[0250.903] FlushFileBuffers (hFile=0x260) returned 1
	[0250.925] FlushFileBuffers (hFile=0x244) returned 1
	[0250.927] CloseHandle (hObject=0x260) returned 1
	[0250.927] CloseHandle (hObject=0x244) returned 1
	[0250.927] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json")) returned 1
	[0250.929] SetEvent (hEvent=0xfc) returned 1
	[0250.929] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0250.931] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16197) returned 1
	[0250.931] CloseHandle (hObject=0x244) returned 1
	[0250.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0250.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0250.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.932] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0250.932] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.932] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.932] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0250.933] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3f45, lpOverlapped=0x0) returned 1
	[0250.935] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3f50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3f50, lpOverlapped=0x0) returned 1
	[0250.936] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0250.937] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.937] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.937] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3f45, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3f45, lpOverlapped=0x0) returned 1
	[0250.937] FlushFileBuffers (hFile=0x244) returned 1
	[0250.944] FlushFileBuffers (hFile=0x260) returned 1
	[0250.946] CloseHandle (hObject=0x244) returned 1
	[0250.946] CloseHandle (hObject=0x260) returned 1
	[0250.946] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json")) returned 1
	[0250.947] SetEvent (hEvent=0xfc) returned 1
	[0250.947] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0250.948] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16343) returned 1
	[0250.948] CloseHandle (hObject=0x260) returned 1
	[0250.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0250.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0250.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.948] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0250.949] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.949] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.949] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0250.950] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3fd7, lpOverlapped=0x0) returned 1
	[0250.952] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3fe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3fe0, lpOverlapped=0x0) returned 1
	[0250.953] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0250.953] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.953] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.953] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3fd7, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3fd7, lpOverlapped=0x0) returned 1
	[0250.953] FlushFileBuffers (hFile=0x260) returned 1
	[0250.972] FlushFileBuffers (hFile=0x244) returned 1
	[0250.974] CloseHandle (hObject=0x260) returned 1
	[0250.975] CloseHandle (hObject=0x244) returned 1
	[0250.975] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json")) returned 1
	[0250.976] SetEvent (hEvent=0xfc) returned 1
	[0250.976] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0250.977] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16348) returned 1
	[0250.977] CloseHandle (hObject=0x244) returned 1
	[0250.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0250.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0250.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.977] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0250.978] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.978] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0250.978] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0250.979] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3fdc, lpOverlapped=0x0) returned 1
	[0250.983] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3fe0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3fe0, lpOverlapped=0x0) returned 1
	[0250.984] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0250.984] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.984] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0250.984] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3fdc, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3fdc, lpOverlapped=0x0) returned 1
	[0250.984] FlushFileBuffers (hFile=0x244) returned 1
	[0251.001] FlushFileBuffers (hFile=0x260) returned 1
	[0251.003] CloseHandle (hObject=0x244) returned 1
	[0251.003] CloseHandle (hObject=0x260) returned 1
	[0251.003] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json")) returned 1
	[0251.004] SetEvent (hEvent=0xfc) returned 1
	[0251.004] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.005] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16603) returned 1
	[0251.005] CloseHandle (hObject=0x260) returned 1
	[0251.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0251.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0251.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.006] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.006] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.006] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.006] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0251.007] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x40db, lpOverlapped=0x0) returned 1
	[0251.009] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x40e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x40e0, lpOverlapped=0x0) returned 1
	[0251.010] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0251.010] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.010] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.010] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x40db, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x40db, lpOverlapped=0x0) returned 1
	[0251.010] FlushFileBuffers (hFile=0x260) returned 1
	[0251.086] FlushFileBuffers (hFile=0x244) returned 1
	[0251.088] CloseHandle (hObject=0x260) returned 1
	[0251.088] CloseHandle (hObject=0x244) returned 1
	[0251.088] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json")) returned 1
	[0251.089] SetEvent (hEvent=0xfc) returned 1
	[0251.089] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0251.091] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18702) returned 1
	[0251.091] CloseHandle (hObject=0x244) returned 1
	[0251.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0251.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0251.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.091] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0251.091] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.091] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.091] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0251.092] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x490e, lpOverlapped=0x0) returned 1
	[0251.096] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4910, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4910, lpOverlapped=0x0) returned 1
	[0251.097] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0251.098] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.098] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.098] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x490e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x490e, lpOverlapped=0x0) returned 1
	[0251.098] FlushFileBuffers (hFile=0x244) returned 1
	[0251.118] FlushFileBuffers (hFile=0x260) returned 1
	[0251.120] CloseHandle (hObject=0x244) returned 1
	[0251.120] CloseHandle (hObject=0x260) returned 1
	[0251.120] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json")) returned 1
	[0251.121] SetEvent (hEvent=0xfc) returned 1
	[0251.121] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.122] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16506) returned 1
	[0251.122] CloseHandle (hObject=0x260) returned 1
	[0251.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0251.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0251.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.123] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.123] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.123] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.123] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0251.124] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x407a, lpOverlapped=0x0) returned 1
	[0251.131] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4080, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4080, lpOverlapped=0x0) returned 1
	[0251.132] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0251.132] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.132] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.132] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x407a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x407a, lpOverlapped=0x0) returned 1
	[0251.132] FlushFileBuffers (hFile=0x260) returned 1
	[0251.163] FlushFileBuffers (hFile=0x244) returned 1
	[0251.174] CloseHandle (hObject=0x260) returned 1
	[0251.176] CloseHandle (hObject=0x244) returned 1
	[0251.176] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json")) returned 1
	[0251.185] SetEvent (hEvent=0xfc) returned 1
	[0251.186] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0251.187] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21907) returned 1
	[0251.187] CloseHandle (hObject=0x244) returned 1
	[0251.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json")) returned 0x2020
	[0251.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json")) returned 0x2020
	[0251.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.187] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0251.187] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.187] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.187] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0251.188] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5593, lpOverlapped=0x0) returned 1
	[0251.189] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x55a0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x55a0, lpOverlapped=0x0) returned 1
	[0251.191] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0251.191] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.191] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.191] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5593, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5593, lpOverlapped=0x0) returned 1
	[0251.191] FlushFileBuffers (hFile=0x244) returned 1
	[0251.210] FlushFileBuffers (hFile=0x260) returned 1
	[0251.211] CloseHandle (hObject=0x244) returned 1
	[0251.211] CloseHandle (hObject=0x260) returned 1
	[0251.211] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json")) returned 1
	[0251.212] SetEvent (hEvent=0xfc) returned 1
	[0251.212] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.213] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16462) returned 1
	[0251.213] CloseHandle (hObject=0x260) returned 1
	[0251.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0251.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0251.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.213] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.213] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.214] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.214] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0251.214] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x404e, lpOverlapped=0x0) returned 1
	[0251.216] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4050, lpOverlapped=0x0) returned 1
	[0251.217] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0251.218] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.218] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.218] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x404e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x404e, lpOverlapped=0x0) returned 1
	[0251.218] FlushFileBuffers (hFile=0x260) returned 1
	[0251.321] FlushFileBuffers (hFile=0x244) returned 1
	[0251.339] CloseHandle (hObject=0x260) returned 1
	[0251.339] CloseHandle (hObject=0x244) returned 1
	[0251.339] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json")) returned 1
	[0251.340] SetEvent (hEvent=0xfc) returned 1
	[0251.340] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0251.341] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17003) returned 1
	[0251.342] CloseHandle (hObject=0x244) returned 1
	[0251.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0251.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0251.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.342] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0251.342] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.342] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.342] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0251.343] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x426b, lpOverlapped=0x0) returned 1
	[0251.347] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4270, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4270, lpOverlapped=0x0) returned 1
	[0251.348] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0251.348] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.348] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.349] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x426b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x426b, lpOverlapped=0x0) returned 1
	[0251.349] FlushFileBuffers (hFile=0x244) returned 1
	[0251.367] FlushFileBuffers (hFile=0x260) returned 1
	[0251.385] CloseHandle (hObject=0x244) returned 1
	[0251.385] CloseHandle (hObject=0x260) returned 1
	[0251.386] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json")) returned 1
	[0251.387] SetEvent (hEvent=0xfc) returned 1
	[0251.387] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.388] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15633) returned 1
	[0251.388] CloseHandle (hObject=0x260) returned 1
	[0251.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json")) returned 0x2020
	[0251.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json")) returned 0x2020
	[0251.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.389] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.389] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.389] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.389] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0251.390] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3d11, lpOverlapped=0x0) returned 1
	[0251.395] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3d20, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3d20, lpOverlapped=0x0) returned 1
	[0251.396] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0251.396] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.396] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.396] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3d11, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3d11, lpOverlapped=0x0) returned 1
	[0251.396] FlushFileBuffers (hFile=0x260) returned 1
	[0251.400] FlushFileBuffers (hFile=0x244) returned 1
	[0251.432] CloseHandle (hObject=0x260) returned 1
	[0251.432] CloseHandle (hObject=0x244) returned 1
	[0251.432] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json")) returned 1
	[0251.433] SetEvent (hEvent=0xfc) returned 1
	[0251.433] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0251.435] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15730) returned 1
	[0251.435] CloseHandle (hObject=0x244) returned 1
	[0251.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0251.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0251.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.435] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0251.435] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.435] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.435] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0251.436] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3d72, lpOverlapped=0x0) returned 1
	[0251.438] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3d80, lpOverlapped=0x0) returned 1
	[0251.439] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0251.439] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.439] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.439] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3d72, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3d72, lpOverlapped=0x0) returned 1
	[0251.440] FlushFileBuffers (hFile=0x244) returned 1
	[0251.442] FlushFileBuffers (hFile=0x260) returned 1
	[0251.444] CloseHandle (hObject=0x244) returned 1
	[0251.444] CloseHandle (hObject=0x260) returned 1
	[0251.444] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json")) returned 1
	[0251.445] SetEvent (hEvent=0xfc) returned 1
	[0251.445] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.446] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=29337) returned 1
	[0251.446] CloseHandle (hObject=0x260) returned 1
	[0251.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json")) returned 0x2020
	[0251.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json")) returned 0x2020
	[0251.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.447] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.447] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.447] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.447] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0251.450] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7299, lpOverlapped=0x0) returned 1
	[0251.452] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x72a0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x72a0, lpOverlapped=0x0) returned 1
	[0251.453] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0251.453] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.454] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.454] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7299, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7299, lpOverlapped=0x0) returned 1
	[0251.454] FlushFileBuffers (hFile=0x260) returned 1
	[0251.580] FlushFileBuffers (hFile=0x244) returned 1
	[0251.599] CloseHandle (hObject=0x260) returned 1
	[0251.599] CloseHandle (hObject=0x244) returned 1
	[0251.600] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json")) returned 1
	[0251.618] SetEvent (hEvent=0xfc) returned 1
	[0251.619] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0251.620] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=102400) returned 1
	[0251.620] CloseHandle (hObject=0x244) returned 1
	[0251.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history")) returned 0x2020
	[0251.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history")) returned 0x2020
	[0251.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.620] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0251.620] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.620] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.620] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0251.621] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x19000, lpOverlapped=0x0) returned 1
	[0251.624] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x19010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x19010, lpOverlapped=0x0) returned 1
	[0251.626] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0251.627] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.627] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.627] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x19000, lpOverlapped=0x0) returned 1
	[0251.627] FlushFileBuffers (hFile=0x244) returned 1
	[0251.748] FlushFileBuffers (hFile=0x260) returned 1
	[0251.770] CloseHandle (hObject=0x244) returned 1
	[0251.770] CloseHandle (hObject=0x260) returned 1
	[0251.770] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history")) returned 1
	[0251.772] SetEvent (hEvent=0xfc) returned 1
	[0251.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.773] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0251.774] CloseHandle (hObject=0x260) returned 1
	[0251.774] SetEvent (hEvent=0xfc) returned 1
	[0251.774] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.775] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=40) returned 1
	[0251.775] CloseHandle (hObject=0x260) returned 1
	[0251.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state")) returned 0x2020
	[0251.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state")) returned 0x2020
	[0251.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.775] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.775] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.775] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.775] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0251.776] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x28, lpOverlapped=0x0) returned 1
	[0251.777] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x30, lpOverlapped=0x0) returned 1
	[0251.778] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0251.778] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.778] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.778] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x28, lpOverlapped=0x0) returned 1
	[0251.778] FlushFileBuffers (hFile=0x260) returned 1
	[0251.847] FlushFileBuffers (hFile=0x244) returned 1
	[0251.861] CloseHandle (hObject=0x260) returned 1
	[0251.862] CloseHandle (hObject=0x244) returned 1
	[0251.863] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state")) returned 1
	[0251.874] SetEvent (hEvent=0xfc) returned 1
	[0251.875] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0251.875] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12288) returned 1
	[0251.875] CloseHandle (hObject=0x244) returned 1
	[0251.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts")) returned 0x2020
	[0251.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts")) returned 0x2020
	[0251.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.876] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0251.876] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.876] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0251.876] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0251.877] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3000, lpOverlapped=0x0) returned 1
	[0251.878] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3010, lpOverlapped=0x0) returned 1
	[0251.879] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0251.879] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.879] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0251.879] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3000, lpOverlapped=0x0) returned 1
	[0251.879] FlushFileBuffers (hFile=0x244) returned 1
	[0251.943] FlushFileBuffers (hFile=0x260) returned 1
	[0251.964] CloseHandle (hObject=0x244) returned 1
	[0251.966] CloseHandle (hObject=0x260) returned 1
	[0251.977] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts")) returned 1
	[0251.979] SetEvent (hEvent=0xfc) returned 1
	[0251.981] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0251.992] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=167414) returned 1
	[0251.993] CloseHandle (hObject=0x260) returned 1
	[0251.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico")) returned 0x2020
	[0251.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico")) returned 0x2020
	[0251.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.008] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.008] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.008] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.008] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0252.009] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x28df6, lpOverlapped=0x0) returned 1
	[0252.013] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x28e00, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x28e00, lpOverlapped=0x0) returned 1
	[0252.016] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0252.016] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.016] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.016] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x28df6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x28df6, lpOverlapped=0x0) returned 1
	[0252.017] FlushFileBuffers (hFile=0x260) returned 1
	[0252.141] FlushFileBuffers (hFile=0x244) returned 1
	[0252.143] CloseHandle (hObject=0x260) returned 1
	[0252.144] CloseHandle (hObject=0x244) returned 1
	[0252.145] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico")) returned 1
	[0252.166] SetEvent (hEvent=0xfc) returned 1
	[0252.181] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.183] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0252.183] CloseHandle (hObject=0x244) returned 1
	[0252.184] SetEvent (hEvent=0xfc) returned 1
	[0252.193] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.194] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28672) returned 1
	[0252.194] CloseHandle (hObject=0x244) returned 1
	[0252.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms")) returned 0x2020
	[0252.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms")) returned 0x2020
	[0252.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.194] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.194] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.194] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.194] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0252.195] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7000, lpOverlapped=0x0) returned 1
	[0252.197] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7010, lpOverlapped=0x0) returned 1
	[0252.198] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0252.198] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.198] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.198] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7000, lpOverlapped=0x0) returned 1
	[0252.198] FlushFileBuffers (hFile=0x244) returned 1
	[0252.227] FlushFileBuffers (hFile=0x260) returned 1
	[0252.229] CloseHandle (hObject=0x244) returned 1
	[0252.229] CloseHandle (hObject=0x260) returned 1
	[0252.229] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms")) returned 1
	[0252.230] SetEvent (hEvent=0xfc) returned 1
	[0252.230] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.232] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32768) returned 1
	[0252.232] CloseHandle (hObject=0x260) returned 1
	[0252.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms")) returned 0x2020
	[0252.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms")) returned 0x2020
	[0252.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.232] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.232] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.232] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.232] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0252.234] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x8000, lpOverlapped=0x0) returned 1
	[0252.236] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x8010, lpOverlapped=0x0) returned 1
	[0252.237] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0252.238] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.238] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.238] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x8000, lpOverlapped=0x0) returned 1
	[0252.238] FlushFileBuffers (hFile=0x260) returned 1
	[0252.244] FlushFileBuffers (hFile=0x244) returned 1
	[0252.246] CloseHandle (hObject=0x260) returned 1
	[0252.246] CloseHandle (hObject=0x244) returned 1
	[0252.246] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms")) returned 1
	[0252.247] SetEvent (hEvent=0xfc) returned 1
	[0252.247] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.249] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=28672) returned 1
	[0252.249] CloseHandle (hObject=0x244) returned 1
	[0252.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms")) returned 0x2020
	[0252.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms")) returned 0x2020
	[0252.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.249] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.249] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.249] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.249] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0252.250] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7000, lpOverlapped=0x0) returned 1
	[0252.252] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7010, lpOverlapped=0x0) returned 1
	[0252.253] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0252.253] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.253] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.253] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7000, lpOverlapped=0x0) returned 1
	[0252.253] FlushFileBuffers (hFile=0x244) returned 1
	[0252.386] FlushFileBuffers (hFile=0x260) returned 1
	[0252.406] CloseHandle (hObject=0x244) returned 1
	[0252.406] CloseHandle (hObject=0x260) returned 1
	[0252.406] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms")) returned 1
	[0252.407] SetEvent (hEvent=0xfc) returned 1
	[0252.407] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.409] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13) returned 1
	[0252.409] CloseHandle (hObject=0x260) returned 1
	[0252.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml")) returned 0x2020
	[0252.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml")) returned 0x2020
	[0252.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.409] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.409] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.409] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.409] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0252.410] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xd, lpOverlapped=0x0) returned 1
	[0252.411] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x10, lpOverlapped=0x0) returned 1
	[0252.412] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0252.412] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.412] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.412] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xd, lpOverlapped=0x0) returned 1
	[0252.412] FlushFileBuffers (hFile=0x260) returned 1
	[0252.439] FlushFileBuffers (hFile=0x244) returned 1
	[0252.596] CloseHandle (hObject=0x260) returned 1
	[0252.596] CloseHandle (hObject=0x244) returned 1
	[0252.596] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml")) returned 1
	[0252.597] SetEvent (hEvent=0xfc) returned 1
	[0252.597] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.598] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=69740) returned 1
	[0252.598] CloseHandle (hObject=0x244) returned 1
	[0252.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb")) returned 0x2020
	[0252.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb")) returned 0x2020
	[0252.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.599] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.599] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.599] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.599] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0252.600] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1106c, lpOverlapped=0x0) returned 1
	[0252.604] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x11070, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x11070, lpOverlapped=0x0) returned 1
	[0252.606] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0252.606] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.606] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.606] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1106c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1106c, lpOverlapped=0x0) returned 1
	[0252.607] FlushFileBuffers (hFile=0x244) returned 1
	[0252.610] FlushFileBuffers (hFile=0x260) returned 1
	[0252.614] CloseHandle (hObject=0x244) returned 1
	[0252.614] CloseHandle (hObject=0x260) returned 1
	[0252.614] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb")) returned 1
	[0252.615] SetEvent (hEvent=0xfc) returned 1
	[0252.615] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.617] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1044) returned 1
	[0252.617] CloseHandle (hObject=0x260) returned 1
	[0252.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl")) returned 0x2020
	[0252.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl")) returned 0x2020
	[0252.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.617] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.617] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.617] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.617] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0252.618] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x414, lpOverlapped=0x0) returned 1
	[0252.620] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x420, lpOverlapped=0x0) returned 1
	[0252.620] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0252.621] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.621] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.621] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x414, lpOverlapped=0x0) returned 1
	[0252.621] FlushFileBuffers (hFile=0x260) returned 1
	[0252.646] FlushFileBuffers (hFile=0x244) returned 1
	[0252.648] CloseHandle (hObject=0x260) returned 1
	[0252.648] CloseHandle (hObject=0x244) returned 1
	[0252.648] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl")) returned 1
	[0252.649] SetEvent (hEvent=0xfc) returned 1
	[0252.649] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.650] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1267) returned 1
	[0252.650] CloseHandle (hObject=0x244) returned 1
	[0252.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl")) returned 0x2020
	[0252.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl")) returned 0x2020
	[0252.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.650] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.650] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.650] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.650] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0252.651] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4f3, lpOverlapped=0x0) returned 1
	[0252.652] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x500, lpOverlapped=0x0) returned 1
	[0252.653] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0252.653] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.653] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.654] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4f3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4f3, lpOverlapped=0x0) returned 1
	[0252.654] FlushFileBuffers (hFile=0x244) returned 1
	[0252.662] FlushFileBuffers (hFile=0x260) returned 1
	[0252.674] CloseHandle (hObject=0x244) returned 1
	[0252.690] CloseHandle (hObject=0x260) returned 1
	[0252.705] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl")) returned 1
	[0252.709] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.710] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=785) returned 1
	[0252.710] CloseHandle (hObject=0x260) returned 1
	[0252.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl")) returned 0x2020
	[0252.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl")) returned 0x2020
	[0252.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.710] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.711] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.711] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.711] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0252.711] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x311, lpOverlapped=0x0) returned 1
	[0252.713] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x320, lpOverlapped=0x0) returned 1
	[0252.714] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0252.714] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.714] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.714] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x311, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x311, lpOverlapped=0x0) returned 1
	[0252.714] FlushFileBuffers (hFile=0x260) returned 1
	[0252.717] FlushFileBuffers (hFile=0x244) returned 1
	[0252.719] CloseHandle (hObject=0x260) returned 1
	[0252.719] CloseHandle (hObject=0x244) returned 1
	[0252.719] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl")) returned 1
	[0252.720] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.721] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1020) returned 1
	[0252.721] CloseHandle (hObject=0x244) returned 1
	[0252.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl")) returned 0x2020
	[0252.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl")) returned 0x2020
	[0252.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.721] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.721] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.721] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.722] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0252.722] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3fc, lpOverlapped=0x0) returned 1
	[0252.724] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x400, lpOverlapped=0x0) returned 1
	[0252.725] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0252.725] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.725] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.725] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3fc, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3fc, lpOverlapped=0x0) returned 1
	[0252.725] FlushFileBuffers (hFile=0x244) returned 1
	[0252.755] FlushFileBuffers (hFile=0x260) returned 1
	[0252.757] CloseHandle (hObject=0x244) returned 1
	[0252.757] CloseHandle (hObject=0x260) returned 1
	[0252.757] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl")) returned 1
	[0252.758] SetEvent (hEvent=0xfc) returned 1
	[0252.758] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.759] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1063) returned 1
	[0252.759] CloseHandle (hObject=0x260) returned 1
	[0252.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl")) returned 0x2020
	[0252.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl")) returned 0x2020
	[0252.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.759] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.759] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.759] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.759] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0252.760] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x427, lpOverlapped=0x0) returned 1
	[0252.762] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x430, lpOverlapped=0x0) returned 1
	[0252.763] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0252.763] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.763] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.763] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x427, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x427, lpOverlapped=0x0) returned 1
	[0252.764] FlushFileBuffers (hFile=0x260) returned 1
	[0252.768] FlushFileBuffers (hFile=0x244) returned 1
	[0252.770] CloseHandle (hObject=0x260) returned 1
	[0252.770] CloseHandle (hObject=0x244) returned 1
	[0252.770] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl")) returned 1
	[0252.771] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.772] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1079) returned 1
	[0252.772] CloseHandle (hObject=0x244) returned 1
	[0252.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl")) returned 0x2020
	[0252.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl")) returned 0x2020
	[0252.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.772] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.772] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.772] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.772] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0252.773] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x437, lpOverlapped=0x0) returned 1
	[0252.775] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x440, lpOverlapped=0x0) returned 1
	[0252.776] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0252.776] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.776] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.776] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x437, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x437, lpOverlapped=0x0) returned 1
	[0252.776] FlushFileBuffers (hFile=0x244) returned 1
	[0252.780] FlushFileBuffers (hFile=0x260) returned 1
	[0252.785] CloseHandle (hObject=0x244) returned 1
	[0252.794] CloseHandle (hObject=0x260) returned 1
	[0252.795] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl")) returned 1
	[0252.797] SetEvent (hEvent=0xfc) returned 1
	[0252.797] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.798] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1044) returned 1
	[0252.798] CloseHandle (hObject=0x260) returned 1
	[0252.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl")) returned 0x2020
	[0252.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl")) returned 0x2020
	[0252.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.798] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.798] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.798] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.799] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0252.799] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x414, lpOverlapped=0x0) returned 1
	[0252.800] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x420, lpOverlapped=0x0) returned 1
	[0252.801] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0252.802] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.802] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.802] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x414, lpOverlapped=0x0) returned 1
	[0252.802] FlushFileBuffers (hFile=0x260) returned 1
	[0252.805] FlushFileBuffers (hFile=0x244) returned 1
	[0252.806] CloseHandle (hObject=0x260) returned 1
	[0252.806] CloseHandle (hObject=0x244) returned 1
	[0252.807] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl")) returned 1
	[0252.807] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.808] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1279) returned 1
	[0252.808] CloseHandle (hObject=0x260) returned 1
	[0252.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl")) returned 0x2020
	[0252.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl")) returned 0x2020
	[0252.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.809] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.809] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.809] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.809] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.809] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4ff, lpOverlapped=0x0) returned 1
	[0252.811] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x500, lpOverlapped=0x0) returned 1
	[0252.812] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0252.812] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.812] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.812] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4ff, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4ff, lpOverlapped=0x0) returned 1
	[0252.812] FlushFileBuffers (hFile=0x260) returned 1
	[0252.815] FlushFileBuffers (hFile=0x114) returned 1
	[0252.817] CloseHandle (hObject=0x260) returned 1
	[0252.817] CloseHandle (hObject=0x114) returned 1
	[0252.817] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl")) returned 1
	[0252.818] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.819] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1284) returned 1
	[0252.819] CloseHandle (hObject=0x114) returned 1
	[0252.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl")) returned 0x2020
	[0252.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl")) returned 0x2020
	[0252.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.819] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.820] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.820] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.820] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0252.820] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x504, lpOverlapped=0x0) returned 1
	[0252.821] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x510, lpOverlapped=0x0) returned 1
	[0252.822] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0252.822] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.822] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.822] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x504, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x504, lpOverlapped=0x0) returned 1
	[0252.823] FlushFileBuffers (hFile=0x114) returned 1
	[0252.827] FlushFileBuffers (hFile=0x260) returned 1
	[0252.831] CloseHandle (hObject=0x114) returned 1
	[0252.831] CloseHandle (hObject=0x260) returned 1
	[0252.831] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl")) returned 1
	[0252.833] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.833] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=797) returned 1
	[0252.833] CloseHandle (hObject=0x260) returned 1
	[0252.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl")) returned 0x2020
	[0252.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl")) returned 0x2020
	[0252.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.834] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.834] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.834] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.834] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.834] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x31d, lpOverlapped=0x0) returned 1
	[0252.837] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x320, lpOverlapped=0x0) returned 1
	[0252.837] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0252.838] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.838] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.838] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x31d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x31d, lpOverlapped=0x0) returned 1
	[0252.838] FlushFileBuffers (hFile=0x260) returned 1
	[0252.868] FlushFileBuffers (hFile=0x114) returned 1
	[0252.873] CloseHandle (hObject=0x260) returned 1
	[0252.873] CloseHandle (hObject=0x114) returned 1
	[0252.873] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl")) returned 1
	[0252.874] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.875] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1020) returned 1
	[0252.875] CloseHandle (hObject=0x114) returned 1
	[0252.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl")) returned 0x2020
	[0252.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl")) returned 0x2020
	[0252.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.875] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.875] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.875] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.875] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0252.876] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3fc, lpOverlapped=0x0) returned 1
	[0252.880] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x400, lpOverlapped=0x0) returned 1
	[0252.882] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0252.882] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.882] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.882] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3fc, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3fc, lpOverlapped=0x0) returned 1
	[0252.882] FlushFileBuffers (hFile=0x114) returned 1
	[0252.885] FlushFileBuffers (hFile=0x260) returned 1
	[0252.891] CloseHandle (hObject=0x114) returned 1
	[0252.891] CloseHandle (hObject=0x260) returned 1
	[0252.891] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl")) returned 1
	[0252.892] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.895] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1063) returned 1
	[0252.895] CloseHandle (hObject=0x260) returned 1
	[0252.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl")) returned 0x2020
	[0252.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl")) returned 0x2020
	[0252.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.896] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.896] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.896] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.896] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.897] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x427, lpOverlapped=0x0) returned 1
	[0252.898] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x430, lpOverlapped=0x0) returned 1
	[0252.899] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0252.899] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.899] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.899] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x427, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x427, lpOverlapped=0x0) returned 1
	[0252.899] FlushFileBuffers (hFile=0x260) returned 1
	[0252.902] FlushFileBuffers (hFile=0x114) returned 1
	[0252.903] CloseHandle (hObject=0x260) returned 1
	[0252.903] CloseHandle (hObject=0x114) returned 1
	[0252.903] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl")) returned 1
	[0252.904] SetEvent (hEvent=0xfc) returned 1
	[0252.904] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.905] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=585) returned 1
	[0252.905] CloseHandle (hObject=0x114) returned 1
	[0252.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl")) returned 0x2020
	[0252.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl")) returned 0x2020
	[0252.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.906] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.906] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.906] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.906] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0252.907] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x249, lpOverlapped=0x0) returned 1
	[0252.908] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x250, lpOverlapped=0x0) returned 1
	[0252.909] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0252.909] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.909] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.909] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x249, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x249, lpOverlapped=0x0) returned 1
	[0252.909] FlushFileBuffers (hFile=0x114) returned 1
	[0252.911] FlushFileBuffers (hFile=0x260) returned 1
	[0252.913] CloseHandle (hObject=0x114) returned 1
	[0252.913] CloseHandle (hObject=0x260) returned 1
	[0252.914] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl")) returned 1
	[0252.914] SetEvent (hEvent=0xfc) returned 1
	[0252.914] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.915] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1079) returned 1
	[0252.915] CloseHandle (hObject=0x260) returned 1
	[0252.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl")) returned 0x2020
	[0252.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl")) returned 0x2020
	[0252.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.915] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.915] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.915] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.916] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.916] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x437, lpOverlapped=0x0) returned 1
	[0252.917] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x440, lpOverlapped=0x0) returned 1
	[0252.919] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0252.920] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.920] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.920] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x437, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x437, lpOverlapped=0x0) returned 1
	[0252.920] FlushFileBuffers (hFile=0x260) returned 1
	[0252.922] FlushFileBuffers (hFile=0x114) returned 1
	[0252.923] CloseHandle (hObject=0x260) returned 1
	[0252.924] CloseHandle (hObject=0x114) returned 1
	[0252.924] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl")) returned 1
	[0252.924] SetEvent (hEvent=0xfc) returned 1
	[0252.924] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.925] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=131072) returned 1
	[0252.925] CloseHandle (hObject=0x114) returned 1
	[0252.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd")) returned 0x2020
	[0252.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd")) returned 0x2020
	[0252.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.926] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.926] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.926] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.926] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0252.928] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x20000, lpOverlapped=0x0) returned 1
	[0252.941] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x20010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x20010, lpOverlapped=0x0) returned 1
	[0252.945] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0252.946] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.946] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.946] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x20000, lpOverlapped=0x0) returned 1
	[0252.946] FlushFileBuffers (hFile=0x114) returned 1
	[0252.950] FlushFileBuffers (hFile=0x260) returned 1
	[0252.952] CloseHandle (hObject=0x114) returned 1
	[0252.952] CloseHandle (hObject=0x260) returned 1
	[0252.952] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd")) returned 1
	[0252.954] SetEvent (hEvent=0xfc) returned 1
	[0252.954] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.956] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=131072) returned 1
	[0252.956] CloseHandle (hObject=0x260) returned 1
	[0252.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd")) returned 0x2020
	[0252.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd")) returned 0x2020
	[0252.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.956] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.956] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.957] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.957] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.957] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x20000, lpOverlapped=0x0) returned 1
	[0252.961] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x20010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x20010, lpOverlapped=0x0) returned 1
	[0252.964] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x132, lpOverlapped=0x0) returned 1
	[0252.965] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.965] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.965] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x20000, lpOverlapped=0x0) returned 1
	[0252.965] FlushFileBuffers (hFile=0x260) returned 1
	[0252.968] FlushFileBuffers (hFile=0x114) returned 1
	[0252.970] CloseHandle (hObject=0x260) returned 1
	[0252.970] CloseHandle (hObject=0x114) returned 1
	[0252.970] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd")) returned 1
	[0252.972] SetEvent (hEvent=0xfc) returned 1
	[0252.972] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.973] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=114) returned 1
	[0252.973] CloseHandle (hObject=0x114) returned 1
	[0252.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf")) returned 0x2020
	[0252.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf")) returned 0x2020
	[0252.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.973] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.973] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.973] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.973] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0252.974] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x72, lpOverlapped=0x0) returned 1
	[0252.975] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x80, lpOverlapped=0x0) returned 1
	[0252.976] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0252.976] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.976] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.976] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x72, lpOverlapped=0x0) returned 1
	[0252.976] FlushFileBuffers (hFile=0x114) returned 1
	[0252.979] FlushFileBuffers (hFile=0x260) returned 1
	[0252.981] CloseHandle (hObject=0x114) returned 1
	[0252.981] CloseHandle (hObject=0x260) returned 1
	[0252.981] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf")) returned 1
	[0252.982] SetEvent (hEvent=0xfc) returned 1
	[0252.982] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.985] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=128) returned 1
	[0252.985] CloseHandle (hObject=0x260) returned 1
	[0252.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig")) returned 0x2020
	[0252.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig")) returned 0x2020
	[0252.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.985] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0252.986] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.986] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.986] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.988] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x80, lpOverlapped=0x0) returned 1
	[0252.989] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x90, lpOverlapped=0x0) returned 1
	[0252.990] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0252.990] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.990] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0252.990] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x80, lpOverlapped=0x0) returned 1
	[0252.990] FlushFileBuffers (hFile=0x260) returned 1
	[0252.993] FlushFileBuffers (hFile=0x114) returned 1
	[0252.995] CloseHandle (hObject=0x260) returned 1
	[0252.995] CloseHandle (hObject=0x114) returned 1
	[0252.995] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig")) returned 1
	[0252.996] SetEvent (hEvent=0xfc) returned 1
	[0252.996] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.997] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2031) returned 1
	[0252.997] CloseHandle (hObject=0x114) returned 1
	[0252.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml")) returned 0x2020
	[0252.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml")) returned 0x2020
	[0252.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.997] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.997] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.998] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0252.998] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0252.998] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7ef, lpOverlapped=0x0) returned 1
	[0253.000] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7f0, lpOverlapped=0x0) returned 1
	[0253.001] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0253.001] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.001] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.001] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7ef, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7ef, lpOverlapped=0x0) returned 1
	[0253.001] FlushFileBuffers (hFile=0x114) returned 1
	[0253.003] FlushFileBuffers (hFile=0x260) returned 1
	[0253.005] CloseHandle (hObject=0x114) returned 1
	[0253.005] CloseHandle (hObject=0x260) returned 1
	[0253.005] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml")) returned 1
	[0253.006] SetEvent (hEvent=0xfc) returned 1
	[0253.006] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.007] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1122) returned 1
	[0253.007] CloseHandle (hObject=0x260) returned 1
	[0253.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf")) returned 0x2020
	[0253.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf")) returned 0x2020
	[0253.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.008] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.008] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.008] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.008] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0253.010] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x462, lpOverlapped=0x0) returned 1
	[0253.011] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x470, lpOverlapped=0x0) returned 1
	[0253.012] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.012] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.012] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.013] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x462, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x462, lpOverlapped=0x0) returned 1
	[0253.013] FlushFileBuffers (hFile=0x260) returned 1
	[0253.015] FlushFileBuffers (hFile=0x114) returned 1
	[0253.017] CloseHandle (hObject=0x260) returned 1
	[0253.017] CloseHandle (hObject=0x114) returned 1
	[0253.017] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf")) returned 1
	[0253.018] SetEvent (hEvent=0xfc) returned 1
	[0253.018] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.019] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=185) returned 1
	[0253.019] CloseHandle (hObject=0x114) returned 1
	[0253.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi")) returned 0x2020
	[0253.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi")) returned 0x2020
	[0253.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.019] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.019] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.019] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.019] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0253.020] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb9, lpOverlapped=0x0) returned 1
	[0253.021] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc0, lpOverlapped=0x0) returned 1
	[0253.022] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0253.022] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.022] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.022] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb9, lpOverlapped=0x0) returned 1
	[0253.022] FlushFileBuffers (hFile=0x114) returned 1
	[0253.037] FlushFileBuffers (hFile=0x260) returned 1
	[0253.041] CloseHandle (hObject=0x114) returned 1
	[0253.041] CloseHandle (hObject=0x260) returned 1
	[0253.041] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi")) returned 1
	[0253.041] SetEvent (hEvent=0xfc) returned 1
	[0253.042] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.042] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=260) returned 1
	[0253.042] CloseHandle (hObject=0x260) returned 1
	[0253.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat")) returned 0x2020
	[0253.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat")) returned 0x2020
	[0253.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.043] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.043] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.043] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.043] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0253.047] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x104, lpOverlapped=0x0) returned 1
	[0253.048] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x110, lpOverlapped=0x0) returned 1
	[0253.049] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x152, lpOverlapped=0x0) returned 1
	[0253.049] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.049] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.049] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x104, lpOverlapped=0x0) returned 1
	[0253.049] FlushFileBuffers (hFile=0x260) returned 1
	[0253.052] FlushFileBuffers (hFile=0x114) returned 1
	[0253.054] CloseHandle (hObject=0x260) returned 1
	[0253.054] CloseHandle (hObject=0x114) returned 1
	[0253.054] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat")) returned 1
	[0253.055] SetEvent (hEvent=0xfc) returned 1
	[0253.055] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.056] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=101600) returned 1
	[0253.056] CloseHandle (hObject=0x114) returned 1
	[0253.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat")) returned 0x2020
	[0253.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat")) returned 0x2020
	[0253.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.056] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.057] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.057] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.057] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0253.057] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x18ce0, lpOverlapped=0x0) returned 1
	[0253.061] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x18cf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x18cf0, lpOverlapped=0x0) returned 1
	[0253.063] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.063] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.063] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.063] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x18ce0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x18ce0, lpOverlapped=0x0) returned 1
	[0253.064] FlushFileBuffers (hFile=0x114) returned 1
	[0253.067] FlushFileBuffers (hFile=0x260) returned 1
	[0253.068] CloseHandle (hObject=0x114) returned 1
	[0253.068] CloseHandle (hObject=0x260) returned 1
	[0253.069] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat")) returned 1
	[0253.070] SetEvent (hEvent=0xfc) returned 1
	[0253.070] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.071] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=128000) returned 1
	[0253.071] CloseHandle (hObject=0x260) returned 1
	[0253.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat")) returned 0x2020
	[0253.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat")) returned 0x2020
	[0253.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.071] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.071] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.071] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.071] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0253.073] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1f400, lpOverlapped=0x0) returned 1
	[0253.077] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1f410, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1f410, lpOverlapped=0x0) returned 1
	[0253.080] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.080] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.080] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.080] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1f400, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1f400, lpOverlapped=0x0) returned 1
	[0253.080] FlushFileBuffers (hFile=0x260) returned 1
	[0253.086] FlushFileBuffers (hFile=0x114) returned 1
	[0253.088] CloseHandle (hObject=0x260) returned 1
	[0253.088] CloseHandle (hObject=0x114) returned 1
	[0253.088] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat")) returned 1
	[0253.089] SetEvent (hEvent=0xfc) returned 1
	[0253.090] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.091] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=299160) returned 1
	[0253.091] CloseHandle (hObject=0x114) returned 1
	[0253.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin")) returned 0x2020
	[0253.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin")) returned 0x2020
	[0253.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.091] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.091] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.091] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.091] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0253.092] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x49098, lpOverlapped=0x0) returned 1
	[0253.099] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x490a0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x490a0, lpOverlapped=0x0) returned 1
	[0253.105] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0253.105] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.105] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.105] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x49098, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x49098, lpOverlapped=0x0) returned 1
	[0253.106] FlushFileBuffers (hFile=0x114) returned 1
	[0253.110] FlushFileBuffers (hFile=0x260) returned 1
	[0253.112] CloseHandle (hObject=0x114) returned 1
	[0253.112] CloseHandle (hObject=0x260) returned 1
	[0253.112] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin")) returned 1
	[0253.115] SetEvent (hEvent=0xfc) returned 1
	[0253.115] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.116] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=174) returned 1
	[0253.116] CloseHandle (hObject=0x260) returned 1
	[0253.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini")) returned 0x26
	[0253.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini")) returned 0x26
	[0253.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.116] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.117] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.117] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.117] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x114
	[0253.118] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xae, lpOverlapped=0x0) returned 1
	[0253.118] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb0, lpOverlapped=0x0) returned 1
	[0253.119] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.120] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.120] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.120] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xae, lpOverlapped=0x0) returned 1
	[0253.120] FlushFileBuffers (hFile=0x260) returned 1
	[0253.122] FlushFileBuffers (hFile=0x114) returned 1
	[0253.124] CloseHandle (hObject=0x260) returned 1
	[0253.124] CloseHandle (hObject=0x114) returned 1
	[0253.124] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini")) returned 1
	[0253.125] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.126] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=174) returned 1
	[0253.128] CloseHandle (hObject=0x114) returned 1
	[0253.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini")) returned 0x6
	[0253.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini")) returned 0x6
	[0253.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.128] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.128] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.128] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.128] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x6, hTemplateFile=0x0) returned 0x260
	[0253.129] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xae, lpOverlapped=0x0) returned 1
	[0253.130] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb0, lpOverlapped=0x0) returned 1
	[0253.130] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.131] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.131] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.131] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xae, lpOverlapped=0x0) returned 1
	[0253.131] FlushFileBuffers (hFile=0x114) returned 1
	[0253.133] FlushFileBuffers (hFile=0x260) returned 1
	[0253.135] CloseHandle (hObject=0x114) returned 1
	[0253.135] CloseHandle (hObject=0x260) returned 1
	[0253.135] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini")) returned 1
	[0253.136] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.138] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=174) returned 1
	[0253.138] CloseHandle (hObject=0x260) returned 1
	[0253.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini")) returned 0x6
	[0253.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini")) returned 0x6
	[0253.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.138] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.138] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.138] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.138] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x6, hTemplateFile=0x0) returned 0x114
	[0253.139] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xae, lpOverlapped=0x0) returned 1
	[0253.140] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb0, lpOverlapped=0x0) returned 1
	[0253.141] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.141] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.141] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.141] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xae, lpOverlapped=0x0) returned 1
	[0253.142] FlushFileBuffers (hFile=0x260) returned 1
	[0253.144] FlushFileBuffers (hFile=0x114) returned 1
	[0253.146] CloseHandle (hObject=0x260) returned 1
	[0253.146] CloseHandle (hObject=0x114) returned 1
	[0253.146] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini")) returned 1
	[0253.147] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.148] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24576) returned 1
	[0253.148] CloseHandle (hObject=0x114) returned 1
	[0253.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl")) returned 0x2020
	[0253.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl")) returned 0x2020
	[0253.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.148] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.148] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.148] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.148] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0253.149] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x6000, lpOverlapped=0x0) returned 1
	[0253.151] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x6010, lpOverlapped=0x0) returned 1
	[0253.152] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0253.152] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.152] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.152] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x6000, lpOverlapped=0x0) returned 1
	[0253.153] FlushFileBuffers (hFile=0x114) returned 1
	[0253.178] FlushFileBuffers (hFile=0x260) returned 1
	[0253.180] CloseHandle (hObject=0x114) returned 1
	[0253.180] CloseHandle (hObject=0x260) returned 1
	[0253.180] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl")) returned 1
	[0253.181] SetEvent (hEvent=0xfc) returned 1
	[0253.181] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.182] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16384) returned 1
	[0253.182] CloseHandle (hObject=0x260) returned 1
	[0253.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl")) returned 0x2020
	[0253.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl")) returned 0x2020
	[0253.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.183] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.183] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.183] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.183] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0253.183] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4000, lpOverlapped=0x0) returned 1
	[0253.185] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4010, lpOverlapped=0x0) returned 1
	[0253.187] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0253.187] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.187] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.187] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4000, lpOverlapped=0x0) returned 1
	[0253.187] FlushFileBuffers (hFile=0x260) returned 1
	[0253.190] FlushFileBuffers (hFile=0x114) returned 1
	[0253.191] CloseHandle (hObject=0x260) returned 1
	[0253.192] CloseHandle (hObject=0x114) returned 1
	[0253.192] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl")) returned 1
	[0253.193] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.194] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=145) returned 1
	[0253.194] CloseHandle (hObject=0x114) returned 1
	[0253.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\desktop.ini")) returned 0x2026
	[0253.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\desktop.ini")) returned 0x2026
	[0253.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.195] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.195] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.195] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.195] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x260
	[0253.196] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x91, lpOverlapped=0x0) returned 1
	[0253.197] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa0, lpOverlapped=0x0) returned 1
	[0253.197] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.198] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.198] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.198] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x91, lpOverlapped=0x0) returned 1
	[0253.198] FlushFileBuffers (hFile=0x114) returned 1
	[0253.200] FlushFileBuffers (hFile=0x260) returned 1
	[0253.202] CloseHandle (hObject=0x114) returned 1
	[0253.202] CloseHandle (hObject=0x260) returned 1
	[0253.202] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\desktop.ini")) returned 1
	[0253.203] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.204] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65536) returned 1
	[0253.204] CloseHandle (hObject=0x260) returned 1
	[0253.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat")) returned 0x2026
	[0253.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat")) returned 0x2026
	[0253.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.205] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.205] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.205] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.205] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x114
	[0253.206] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10000, lpOverlapped=0x0) returned 1
	[0253.208] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x10010, lpOverlapped=0x0) returned 1
	[0253.210] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.210] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.210] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.210] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10000, lpOverlapped=0x0) returned 1
	[0253.211] FlushFileBuffers (hFile=0x260) returned 1
	[0253.213] FlushFileBuffers (hFile=0x114) returned 1
	[0253.215] CloseHandle (hObject=0x260) returned 1
	[0253.215] CloseHandle (hObject=0x114) returned 1
	[0253.216] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat")) returned 1
	[0253.217] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019092420190925\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019092420190925\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.218] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65536) returned 1
	[0253.218] CloseHandle (hObject=0x114) returned 1
	[0253.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019092420190925\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019092420190925\\index.dat")) returned 0x2026
	[0253.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019092420190925\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019092420190925\\index.dat")) returned 0x2026
	[0253.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019092420190925\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019092420190925\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.218] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019092420190925\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019092420190925\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.218] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.218] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.218] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019092420190925\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019092420190925\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x260
	[0253.219] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10000, lpOverlapped=0x0) returned 1
	[0253.223] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x10010, lpOverlapped=0x0) returned 1
	[0253.225] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.225] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.225] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.225] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10000, lpOverlapped=0x0) returned 1
	[0253.226] FlushFileBuffers (hFile=0x114) returned 1
	[0253.229] FlushFileBuffers (hFile=0x260) returned 1
	[0253.230] CloseHandle (hObject=0x114) returned 1
	[0253.230] CloseHandle (hObject=0x260) returned 1
	[0253.230] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019092420190925\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019092420190925\\index.dat")) returned 1
	[0253.232] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.232] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=145) returned 1
	[0253.232] CloseHandle (hObject=0x260) returned 1
	[0253.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\desktop.ini")) returned 0x2006
	[0253.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\desktop.ini")) returned 0x2006
	[0253.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.233] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.233] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.233] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.233] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2006, hTemplateFile=0x0) returned 0x114
	[0253.233] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x91, lpOverlapped=0x0) returned 1
	[0253.234] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa0, lpOverlapped=0x0) returned 1
	[0253.235] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.235] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.235] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.235] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x91, lpOverlapped=0x0) returned 1
	[0253.235] FlushFileBuffers (hFile=0x260) returned 1
	[0253.241] FlushFileBuffers (hFile=0x114) returned 1
	[0253.243] CloseHandle (hObject=0x260) returned 1
	[0253.243] CloseHandle (hObject=0x114) returned 1
	[0253.243] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\desktop.ini")) returned 1
	[0253.244] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.245] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=145) returned 1
	[0253.245] CloseHandle (hObject=0x114) returned 1
	[0253.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\desktop.ini")) returned 0x2006
	[0253.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\desktop.ini")) returned 0x2006
	[0253.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.245] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.245] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.245] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.245] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2006, hTemplateFile=0x0) returned 0x260
	[0253.247] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x91, lpOverlapped=0x0) returned 1
	[0253.248] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa0, lpOverlapped=0x0) returned 1
	[0253.249] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.249] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.249] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.249] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x91, lpOverlapped=0x0) returned 1
	[0253.249] FlushFileBuffers (hFile=0x114) returned 1
	[0253.251] FlushFileBuffers (hFile=0x260) returned 1
	[0253.253] CloseHandle (hObject=0x114) returned 1
	[0253.253] CloseHandle (hObject=0x260) returned 1
	[0253.253] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\desktop.ini")) returned 1
	[0253.254] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.255] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32768) returned 1
	[0253.255] CloseHandle (hObject=0x260) returned 1
	[0253.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat")) returned 0x2026
	[0253.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat")) returned 0x2026
	[0253.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.255] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.255] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.255] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.255] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x114
	[0253.256] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x8000, lpOverlapped=0x0) returned 1
	[0253.258] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x8010, lpOverlapped=0x0) returned 1
	[0253.259] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.259] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.259] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.259] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x8000, lpOverlapped=0x0) returned 1
	[0253.260] FlushFileBuffers (hFile=0x260) returned 1
	[0253.263] FlushFileBuffers (hFile=0x114) returned 1
	[0253.265] CloseHandle (hObject=0x260) returned 1
	[0253.265] CloseHandle (hObject=0x114) returned 1
	[0253.265] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat")) returned 1
	[0253.266] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.267] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32768) returned 1
	[0253.267] CloseHandle (hObject=0x114) returned 1
	[0253.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat")) returned 0x2026
	[0253.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat")) returned 0x2026
	[0253.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.268] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.268] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.268] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.268] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x260
	[0253.268] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x8000, lpOverlapped=0x0) returned 1
	[0253.270] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x8010, lpOverlapped=0x0) returned 1
	[0253.272] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.272] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.272] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.272] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x8000, lpOverlapped=0x0) returned 1
	[0253.272] FlushFileBuffers (hFile=0x114) returned 1
	[0253.276] FlushFileBuffers (hFile=0x260) returned 1
	[0253.278] CloseHandle (hObject=0x114) returned 1
	[0253.278] CloseHandle (hObject=0x260) returned 1
	[0253.278] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat")) returned 1
	[0253.280] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.281] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67) returned 1
	[0253.281] CloseHandle (hObject=0x260) returned 1
	[0253.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\desktop.ini")) returned 0x2026
	[0253.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\desktop.ini")) returned 0x2026
	[0253.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.281] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.281] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.281] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.282] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x114
	[0253.282] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x43, lpOverlapped=0x0) returned 1
	[0253.283] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x50, lpOverlapped=0x0) returned 1
	[0253.284] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.284] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.284] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.284] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x43, lpOverlapped=0x0) returned 1
	[0253.284] FlushFileBuffers (hFile=0x260) returned 1
	[0253.287] FlushFileBuffers (hFile=0x114) returned 1
	[0253.289] CloseHandle (hObject=0x260) returned 1
	[0253.289] CloseHandle (hObject=0x114) returned 1
	[0253.289] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\desktop.ini")) returned 1
	[0253.290] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.291] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65536) returned 1
	[0253.291] CloseHandle (hObject=0x114) returned 1
	[0253.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat")) returned 0x2026
	[0253.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat")) returned 0x2026
	[0253.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.291] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.291] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.291] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.291] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x260
	[0253.292] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10000, lpOverlapped=0x0) returned 1
	[0253.294] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x10010, lpOverlapped=0x0) returned 1
	[0253.296] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.296] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.296] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.296] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10000, lpOverlapped=0x0) returned 1
	[0253.297] FlushFileBuffers (hFile=0x114) returned 1
	[0253.300] FlushFileBuffers (hFile=0x260) returned 1
	[0253.302] CloseHandle (hObject=0x114) returned 1
	[0253.302] CloseHandle (hObject=0x260) returned 1
	[0253.302] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat")) returned 1
	[0253.303] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.305] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67) returned 1
	[0253.305] CloseHandle (hObject=0x260) returned 1
	[0253.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs\\desktop.ini")) returned 0x2026
	[0253.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs\\desktop.ini")) returned 0x2026
	[0253.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.305] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.305] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.305] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.306] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x114
	[0253.306] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x43, lpOverlapped=0x0) returned 1
	[0253.307] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x50, lpOverlapped=0x0) returned 1
	[0253.308] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.308] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.308] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.308] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x43, lpOverlapped=0x0) returned 1
	[0253.308] FlushFileBuffers (hFile=0x260) returned 1
	[0253.311] FlushFileBuffers (hFile=0x114) returned 1
	[0253.313] CloseHandle (hObject=0x260) returned 1
	[0253.313] CloseHandle (hObject=0x114) returned 1
	[0253.313] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs\\desktop.ini")) returned 1
	[0253.314] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.316] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67) returned 1
	[0253.316] CloseHandle (hObject=0x114) returned 1
	[0253.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c\\desktop.ini")) returned 0x2026
	[0253.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c\\desktop.ini")) returned 0x2026
	[0253.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.316] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.316] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.316] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.317] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x260
	[0253.317] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x43, lpOverlapped=0x0) returned 1
	[0253.318] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x50, lpOverlapped=0x0) returned 1
	[0253.319] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.319] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.319] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.319] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x43, lpOverlapped=0x0) returned 1
	[0253.319] FlushFileBuffers (hFile=0x114) returned 1
	[0253.321] FlushFileBuffers (hFile=0x260) returned 1
	[0253.324] CloseHandle (hObject=0x114) returned 1
	[0253.324] CloseHandle (hObject=0x260) returned 1
	[0253.324] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c\\desktop.ini")) returned 1
	[0253.325] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.326] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67) returned 1
	[0253.326] CloseHandle (hObject=0x260) returned 1
	[0253.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\desktop.ini")) returned 0x2026
	[0253.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\desktop.ini")) returned 0x2026
	[0253.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.326] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.326] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.326] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.327] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x114
	[0253.327] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x43, lpOverlapped=0x0) returned 1
	[0253.328] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x50, lpOverlapped=0x0) returned 1
	[0253.329] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.329] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.329] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.329] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x43, lpOverlapped=0x0) returned 1
	[0253.329] FlushFileBuffers (hFile=0x260) returned 1
	[0253.331] FlushFileBuffers (hFile=0x114) returned 1
	[0253.334] CloseHandle (hObject=0x260) returned 1
	[0253.335] CloseHandle (hObject=0x114) returned 1
	[0253.335] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\desktop.ini")) returned 1
	[0253.336] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.336] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67) returned 1
	[0253.336] CloseHandle (hObject=0x114) returned 1
	[0253.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\desktop.ini")) returned 0x2026
	[0253.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\desktop.ini")) returned 0x2026
	[0253.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.337] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.337] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.337] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.337] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x260
	[0253.337] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x43, lpOverlapped=0x0) returned 1
	[0253.338] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x50, lpOverlapped=0x0) returned 1
	[0253.339] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.340] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.340] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.340] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x43, lpOverlapped=0x0) returned 1
	[0253.340] FlushFileBuffers (hFile=0x114) returned 1
	[0253.342] FlushFileBuffers (hFile=0x260) returned 1
	[0253.344] CloseHandle (hObject=0x114) returned 1
	[0253.344] CloseHandle (hObject=0x260) returned 1
	[0253.344] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\desktop.ini")) returned 1
	[0253.345] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.346] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=294804) returned 1
	[0253.347] CloseHandle (hObject=0x260) returned 1
	[0253.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat")) returned 0x2020
	[0253.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat")) returned 0x2020
	[0253.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.347] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.347] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.347] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.347] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0253.349] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x47f94, lpOverlapped=0x0) returned 1
	[0253.355] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x47fa0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x47fa0, lpOverlapped=0x0) returned 1
	[0253.362] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x132, lpOverlapped=0x0) returned 1
	[0253.362] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.362] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.362] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x47f94, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x47f94, lpOverlapped=0x0) returned 1
	[0253.363] FlushFileBuffers (hFile=0x260) returned 1
	[0253.417] FlushFileBuffers (hFile=0x114) returned 1
	[0253.421] CloseHandle (hObject=0x260) returned 1
	[0253.421] CloseHandle (hObject=0x114) returned 1
	[0253.422] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat")) returned 1
	[0253.425] SetEvent (hEvent=0xfc) returned 1
	[0253.425] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.427] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11979) returned 1
	[0253.427] CloseHandle (hObject=0x114) returned 1
	[0253.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js")) returned 0x2020
	[0253.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js")) returned 0x2020
	[0253.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.427] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.427] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.427] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.427] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0253.428] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2ecb, lpOverlapped=0x0) returned 1
	[0253.430] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2ed0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2ed0, lpOverlapped=0x0) returned 1
	[0253.431] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.431] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.431] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.431] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2ecb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2ecb, lpOverlapped=0x0) returned 1
	[0253.431] FlushFileBuffers (hFile=0x114) returned 1
	[0253.434] FlushFileBuffers (hFile=0x260) returned 1
	[0253.436] CloseHandle (hObject=0x114) returned 1
	[0253.436] CloseHandle (hObject=0x260) returned 1
	[0253.436] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\528d82a2[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\528d82a2[1].js")) returned 1
	[0253.437] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.438] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=309) returned 1
	[0253.439] CloseHandle (hObject=0x260) returned 1
	[0253.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png")) returned 0x2020
	[0253.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png")) returned 0x2020
	[0253.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.439] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.439] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.439] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.439] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0253.440] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x135, lpOverlapped=0x0) returned 1
	[0253.441] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x140, lpOverlapped=0x0) returned 1
	[0253.442] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.442] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.442] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.442] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x135, lpOverlapped=0x0) returned 1
	[0253.442] FlushFileBuffers (hFile=0x260) returned 1
	[0253.447] FlushFileBuffers (hFile=0x114) returned 1
	[0253.448] CloseHandle (hObject=0x260) returned 1
	[0253.449] CloseHandle (hObject=0x114) returned 1
	[0253.449] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png")) returned 1
	[0253.450] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.451] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=461) returned 1
	[0253.451] CloseHandle (hObject=0x114) returned 1
	[0253.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png")) returned 0x2020
	[0253.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png")) returned 0x2020
	[0253.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.451] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.451] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.451] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.451] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0253.455] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1cd, lpOverlapped=0x0) returned 1
	[0253.457] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1d0, lpOverlapped=0x0) returned 1
	[0253.457] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.458] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.458] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.458] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1cd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1cd, lpOverlapped=0x0) returned 1
	[0253.458] FlushFileBuffers (hFile=0x114) returned 1
	[0253.608] FlushFileBuffers (hFile=0x260) returned 1
	[0253.614] CloseHandle (hObject=0x114) returned 1
	[0253.615] CloseHandle (hObject=0x260) returned 1
	[0253.615] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png")) returned 1
	[0253.615] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.616] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=360) returned 1
	[0253.616] CloseHandle (hObject=0x260) returned 1
	[0253.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png")) returned 0x2020
	[0253.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png")) returned 0x2020
	[0253.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.617] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.617] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.617] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.617] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0253.617] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x168, lpOverlapped=0x0) returned 1
	[0253.621] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x170, lpOverlapped=0x0) returned 1
	[0253.622] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.622] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.622] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.623] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x168, lpOverlapped=0x0) returned 1
	[0253.623] FlushFileBuffers (hFile=0x260) returned 1
	[0253.626] FlushFileBuffers (hFile=0x114) returned 1
	[0253.629] CloseHandle (hObject=0x260) returned 1
	[0253.629] CloseHandle (hObject=0x114) returned 1
	[0253.629] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png")) returned 1
	[0253.631] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.638] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2315) returned 1
	[0253.638] CloseHandle (hObject=0x244) returned 1
	[0253.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg")) returned 0x2020
	[0253.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg")) returned 0x2020
	[0253.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.638] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.639] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.639] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.639] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.639] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x90b, lpOverlapped=0x0) returned 1
	[0253.641] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x910, lpOverlapped=0x0) returned 1
	[0253.642] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.642] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.642] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.642] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x90b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x90b, lpOverlapped=0x0) returned 1
	[0253.642] FlushFileBuffers (hFile=0x244) returned 1
	[0253.655] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.659] CloseHandle (hObject=0x244) returned 1
	[0253.665] CloseHandle (hObject=0x20c) returned 1
	[0253.665] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg")) returned 1
	[0253.667] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.668] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5997) returned 1
	[0253.668] CloseHandle (hObject=0x20c) returned 1
	[0253.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg")) returned 0x2020
	[0253.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg")) returned 0x2020
	[0253.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.668] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.668] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.668] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.668] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.669] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x176d, lpOverlapped=0x0) returned 1
	[0253.670] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1770, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1770, lpOverlapped=0x0) returned 1
	[0253.672] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.672] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.672] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.672] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x176d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x176d, lpOverlapped=0x0) returned 1
	[0253.672] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.702] FlushFileBuffers (hFile=0x244) returned 1
	[0253.707] CloseHandle (hObject=0x20c) returned 1
	[0253.707] CloseHandle (hObject=0x244) returned 1
	[0253.707] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg")) returned 1
	[0253.708] SetEvent (hEvent=0xfc) returned 1
	[0253.708] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.709] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1882) returned 1
	[0253.709] CloseHandle (hObject=0x244) returned 1
	[0253.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg")) returned 0x2020
	[0253.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg")) returned 0x2020
	[0253.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.710] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.710] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.710] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.710] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.711] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x75a, lpOverlapped=0x0) returned 1
	[0253.712] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x760, lpOverlapped=0x0) returned 1
	[0253.713] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.713] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.713] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.713] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x75a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x75a, lpOverlapped=0x0) returned 1
	[0253.713] FlushFileBuffers (hFile=0x244) returned 1
	[0253.716] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.718] CloseHandle (hObject=0x244) returned 1
	[0253.718] CloseHandle (hObject=0x20c) returned 1
	[0253.718] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg")) returned 1
	[0253.719] SetEvent (hEvent=0xfc) returned 1
	[0253.719] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.719] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11657) returned 1
	[0253.719] CloseHandle (hObject=0x20c) returned 1
	[0253.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg")) returned 0x2020
	[0253.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg")) returned 0x2020
	[0253.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.720] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.720] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.720] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.720] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.721] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2d89, lpOverlapped=0x0) returned 1
	[0253.722] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2d90, lpOverlapped=0x0) returned 1
	[0253.723] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.723] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.723] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.723] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2d89, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2d89, lpOverlapped=0x0) returned 1
	[0253.723] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.778] FlushFileBuffers (hFile=0x244) returned 1
	[0253.779] CloseHandle (hObject=0x20c) returned 1
	[0253.779] CloseHandle (hObject=0x244) returned 1
	[0253.779] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg")) returned 1
	[0253.780] SetEvent (hEvent=0xfc) returned 1
	[0253.780] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.781] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7911) returned 1
	[0253.781] CloseHandle (hObject=0x244) returned 1
	[0253.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg")) returned 0x2020
	[0253.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg")) returned 0x2020
	[0253.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.782] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.782] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.782] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.782] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.782] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1ee7, lpOverlapped=0x0) returned 1
	[0253.784] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1ef0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1ef0, lpOverlapped=0x0) returned 1
	[0253.785] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.785] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.785] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.785] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1ee7, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1ee7, lpOverlapped=0x0) returned 1
	[0253.785] FlushFileBuffers (hFile=0x244) returned 1
	[0253.788] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.789] CloseHandle (hObject=0x244) returned 1
	[0253.789] CloseHandle (hObject=0x20c) returned 1
	[0253.789] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg")) returned 1
	[0253.790] SetEvent (hEvent=0xfc) returned 1
	[0253.791] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.791] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2340) returned 1
	[0253.791] CloseHandle (hObject=0x20c) returned 1
	[0253.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg")) returned 0x2020
	[0253.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg")) returned 0x2020
	[0253.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.791] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.792] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.792] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.792] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.792] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x924, lpOverlapped=0x0) returned 1
	[0253.794] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x930, lpOverlapped=0x0) returned 1
	[0253.803] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.803] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.803] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.803] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x924, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x924, lpOverlapped=0x0) returned 1
	[0253.803] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.807] FlushFileBuffers (hFile=0x244) returned 1
	[0253.809] CloseHandle (hObject=0x20c) returned 1
	[0253.809] CloseHandle (hObject=0x244) returned 1
	[0253.809] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg")) returned 1
	[0253.810] SetEvent (hEvent=0xfc) returned 1
	[0253.810] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.811] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6499) returned 1
	[0253.811] CloseHandle (hObject=0x244) returned 1
	[0253.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg")) returned 0x2020
	[0253.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg")) returned 0x2020
	[0253.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.812] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.812] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.812] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.812] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.812] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1963, lpOverlapped=0x0) returned 1
	[0253.814] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1970, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1970, lpOverlapped=0x0) returned 1
	[0253.815] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.815] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.815] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.815] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1963, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1963, lpOverlapped=0x0) returned 1
	[0253.815] FlushFileBuffers (hFile=0x244) returned 1
	[0253.818] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.820] CloseHandle (hObject=0x244) returned 1
	[0253.820] CloseHandle (hObject=0x20c) returned 1
	[0253.820] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg")) returned 1
	[0253.821] SetEvent (hEvent=0xfc) returned 1
	[0253.821] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.822] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5846) returned 1
	[0253.822] CloseHandle (hObject=0x20c) returned 1
	[0253.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg")) returned 0x2020
	[0253.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg")) returned 0x2020
	[0253.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.823] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.823] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.823] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.823] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.823] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x16d6, lpOverlapped=0x0) returned 1
	[0253.825] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x16e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x16e0, lpOverlapped=0x0) returned 1
	[0253.826] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.826] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.826] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.826] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x16d6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x16d6, lpOverlapped=0x0) returned 1
	[0253.826] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.844] FlushFileBuffers (hFile=0x244) returned 1
	[0253.856] CloseHandle (hObject=0x20c) returned 1
	[0253.856] CloseHandle (hObject=0x244) returned 1
	[0253.856] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg")) returned 1
	[0253.857] SetEvent (hEvent=0xfc) returned 1
	[0253.857] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.858] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7783) returned 1
	[0253.858] CloseHandle (hObject=0x244) returned 1
	[0253.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg")) returned 0x2020
	[0253.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg")) returned 0x2020
	[0253.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.858] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.858] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.858] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.858] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.859] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1e67, lpOverlapped=0x0) returned 1
	[0253.861] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1e70, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1e70, lpOverlapped=0x0) returned 1
	[0253.862] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.862] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.862] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.862] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1e67, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1e67, lpOverlapped=0x0) returned 1
	[0253.862] FlushFileBuffers (hFile=0x244) returned 1
	[0253.868] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.877] CloseHandle (hObject=0x244) returned 1
	[0253.877] CloseHandle (hObject=0x20c) returned 1
	[0253.877] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg")) returned 1
	[0253.879] SetEvent (hEvent=0xfc) returned 1
	[0253.879] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.880] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2426) returned 1
	[0253.880] CloseHandle (hObject=0x20c) returned 1
	[0253.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg")) returned 0x2020
	[0253.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg")) returned 0x2020
	[0253.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.880] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.881] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.881] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.881] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.881] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x97a, lpOverlapped=0x0) returned 1
	[0253.883] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x980, lpOverlapped=0x0) returned 1
	[0253.884] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.884] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.884] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.884] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x97a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x97a, lpOverlapped=0x0) returned 1
	[0253.884] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.964] FlushFileBuffers (hFile=0x244) returned 1
	[0253.976] CloseHandle (hObject=0x20c) returned 1
	[0253.976] CloseHandle (hObject=0x244) returned 1
	[0253.976] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg")) returned 1
	[0253.977] SetEvent (hEvent=0xfc) returned 1
	[0253.977] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.978] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9406) returned 1
	[0253.978] CloseHandle (hObject=0x244) returned 1
	[0253.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg")) returned 0x2020
	[0253.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg")) returned 0x2020
	[0253.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.978] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.978] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.978] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0253.978] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.979] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x24be, lpOverlapped=0x0) returned 1
	[0253.981] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x24c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x24c0, lpOverlapped=0x0) returned 1
	[0253.981] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0253.982] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.982] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0253.982] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x24be, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x24be, lpOverlapped=0x0) returned 1
	[0253.982] FlushFileBuffers (hFile=0x244) returned 1
	[0253.993] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.996] CloseHandle (hObject=0x244) returned 1
	[0253.996] CloseHandle (hObject=0x20c) returned 1
	[0253.997] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg")) returned 1
	[0253.998] SetEvent (hEvent=0xfc) returned 1
	[0253.998] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.006] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1848) returned 1
	[0254.006] CloseHandle (hObject=0x114) returned 1
	[0254.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg")) returned 0x2020
	[0254.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg")) returned 0x2020
	[0254.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.006] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.006] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.006] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.006] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.007] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x738, lpOverlapped=0x0) returned 1
	[0254.008] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x740, lpOverlapped=0x0) returned 1
	[0254.009] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.009] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.010] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.010] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x738, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x738, lpOverlapped=0x0) returned 1
	[0254.010] FlushFileBuffers (hFile=0x114) returned 1
	[0254.012] FlushFileBuffers (hFile=0x260) returned 1
	[0254.013] CloseHandle (hObject=0x114) returned 1
	[0254.013] CloseHandle (hObject=0x260) returned 1
	[0254.013] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg")) returned 1
	[0254.014] SetEvent (hEvent=0xfc) returned 1
	[0254.014] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.016] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6053) returned 1
	[0254.016] CloseHandle (hObject=0x260) returned 1
	[0254.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg")) returned 0x2020
	[0254.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg")) returned 0x2020
	[0254.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.016] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.016] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.016] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.016] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.017] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x17a5, lpOverlapped=0x0) returned 1
	[0254.018] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x17b0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x17b0, lpOverlapped=0x0) returned 1
	[0254.019] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.019] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.019] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.019] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x17a5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x17a5, lpOverlapped=0x0) returned 1
	[0254.019] FlushFileBuffers (hFile=0x260) returned 1
	[0254.157] FlushFileBuffers (hFile=0x114) returned 1
	[0254.171] CloseHandle (hObject=0x260) returned 1
	[0254.171] CloseHandle (hObject=0x114) returned 1
	[0254.171] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg")) returned 1
	[0254.172] SetEvent (hEvent=0xfc) returned 1
	[0254.172] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.175] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1314) returned 1
	[0254.175] CloseHandle (hObject=0x114) returned 1
	[0254.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg")) returned 0x2020
	[0254.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg")) returned 0x2020
	[0254.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.176] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.176] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.176] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.176] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.177] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x522, lpOverlapped=0x0) returned 1
	[0254.178] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x530, lpOverlapped=0x0) returned 1
	[0254.179] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.179] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.179] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.179] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x522, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x522, lpOverlapped=0x0) returned 1
	[0254.179] FlushFileBuffers (hFile=0x114) returned 1
	[0254.198] FlushFileBuffers (hFile=0x260) returned 1
	[0254.200] CloseHandle (hObject=0x114) returned 1
	[0254.200] CloseHandle (hObject=0x260) returned 1
	[0254.200] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg")) returned 1
	[0254.201] SetEvent (hEvent=0xfc) returned 1
	[0254.201] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.202] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6287) returned 1
	[0254.202] CloseHandle (hObject=0x260) returned 1
	[0254.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg")) returned 0x2020
	[0254.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg")) returned 0x2020
	[0254.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.202] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.202] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.202] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.202] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.203] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x188f, lpOverlapped=0x0) returned 1
	[0254.205] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1890, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1890, lpOverlapped=0x0) returned 1
	[0254.206] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.206] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.206] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.206] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x188f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x188f, lpOverlapped=0x0) returned 1
	[0254.206] FlushFileBuffers (hFile=0x260) returned 1
	[0254.208] FlushFileBuffers (hFile=0x114) returned 1
	[0254.210] CloseHandle (hObject=0x260) returned 1
	[0254.210] CloseHandle (hObject=0x114) returned 1
	[0254.210] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg")) returned 1
	[0254.211] SetEvent (hEvent=0xfc) returned 1
	[0254.211] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.211] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2046) returned 1
	[0254.212] CloseHandle (hObject=0x114) returned 1
	[0254.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg")) returned 0x2020
	[0254.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg")) returned 0x2020
	[0254.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.212] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.212] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.212] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.212] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.213] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7fe, lpOverlapped=0x0) returned 1
	[0254.214] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x800, lpOverlapped=0x0) returned 1
	[0254.215] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.215] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.215] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.215] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7fe, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7fe, lpOverlapped=0x0) returned 1
	[0254.215] FlushFileBuffers (hFile=0x114) returned 1
	[0254.225] FlushFileBuffers (hFile=0x260) returned 1
	[0254.226] CloseHandle (hObject=0x114) returned 1
	[0254.226] CloseHandle (hObject=0x260) returned 1
	[0254.226] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg")) returned 1
	[0254.227] SetEvent (hEvent=0xfc) returned 1
	[0254.228] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.229] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10482) returned 1
	[0254.229] CloseHandle (hObject=0x260) returned 1
	[0254.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg")) returned 0x2020
	[0254.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg")) returned 0x2020
	[0254.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.229] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.229] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.229] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.229] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.230] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x28f2, lpOverlapped=0x0) returned 1
	[0254.232] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2900, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2900, lpOverlapped=0x0) returned 1
	[0254.233] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.233] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.233] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.233] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x28f2, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x28f2, lpOverlapped=0x0) returned 1
	[0254.233] FlushFileBuffers (hFile=0x260) returned 1
	[0254.236] FlushFileBuffers (hFile=0x114) returned 1
	[0254.240] CloseHandle (hObject=0x260) returned 1
	[0254.240] CloseHandle (hObject=0x114) returned 1
	[0254.240] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg")) returned 1
	[0254.241] SetEvent (hEvent=0xfc) returned 1
	[0254.241] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.243] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2108) returned 1
	[0254.243] CloseHandle (hObject=0x114) returned 1
	[0254.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg")) returned 0x2020
	[0254.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg")) returned 0x2020
	[0254.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.243] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.243] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.243] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.243] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.244] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x83c, lpOverlapped=0x0) returned 1
	[0254.246] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x840, lpOverlapped=0x0) returned 1
	[0254.246] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.247] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.247] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.247] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x83c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x83c, lpOverlapped=0x0) returned 1
	[0254.247] FlushFileBuffers (hFile=0x114) returned 1
	[0254.250] FlushFileBuffers (hFile=0x260) returned 1
	[0254.255] CloseHandle (hObject=0x114) returned 1
	[0254.255] CloseHandle (hObject=0x260) returned 1
	[0254.255] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg")) returned 1
	[0254.256] SetEvent (hEvent=0xfc) returned 1
	[0254.256] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.257] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2408) returned 1
	[0254.257] CloseHandle (hObject=0x260) returned 1
	[0254.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg")) returned 0x2020
	[0254.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg")) returned 0x2020
	[0254.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.257] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.257] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.257] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.257] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.258] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x968, lpOverlapped=0x0) returned 1
	[0254.259] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x970, lpOverlapped=0x0) returned 1
	[0254.260] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.260] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.260] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.260] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x968, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x968, lpOverlapped=0x0) returned 1
	[0254.261] FlushFileBuffers (hFile=0x260) returned 1
	[0254.263] FlushFileBuffers (hFile=0x114) returned 1
	[0254.264] CloseHandle (hObject=0x260) returned 1
	[0254.265] CloseHandle (hObject=0x114) returned 1
	[0254.265] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg")) returned 1
	[0254.265] SetEvent (hEvent=0xfc) returned 1
	[0254.266] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.266] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2260) returned 1
	[0254.266] CloseHandle (hObject=0x114) returned 1
	[0254.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg")) returned 0x2020
	[0254.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg")) returned 0x2020
	[0254.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.266] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.267] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.267] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.267] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.267] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x8d4, lpOverlapped=0x0) returned 1
	[0254.269] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x8e0, lpOverlapped=0x0) returned 1
	[0254.270] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.270] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.270] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.270] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8d4, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x8d4, lpOverlapped=0x0) returned 1
	[0254.270] FlushFileBuffers (hFile=0x114) returned 1
	[0254.273] FlushFileBuffers (hFile=0x260) returned 1
	[0254.275] CloseHandle (hObject=0x114) returned 1
	[0254.275] CloseHandle (hObject=0x260) returned 1
	[0254.275] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg")) returned 1
	[0254.276] SetEvent (hEvent=0xfc) returned 1
	[0254.276] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.278] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1760) returned 1
	[0254.278] CloseHandle (hObject=0x260) returned 1
	[0254.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg")) returned 0x2020
	[0254.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg")) returned 0x2020
	[0254.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.278] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.278] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.278] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.278] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.279] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x6e0, lpOverlapped=0x0) returned 1
	[0254.280] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x6f0, lpOverlapped=0x0) returned 1
	[0254.281] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.281] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.281] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.281] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x6e0, lpOverlapped=0x0) returned 1
	[0254.281] FlushFileBuffers (hFile=0x260) returned 1
	[0254.284] FlushFileBuffers (hFile=0x114) returned 1
	[0254.285] CloseHandle (hObject=0x260) returned 1
	[0254.285] CloseHandle (hObject=0x114) returned 1
	[0254.285] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg")) returned 1
	[0254.286] SetEvent (hEvent=0xfc) returned 1
	[0254.286] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.288] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2233) returned 1
	[0254.288] CloseHandle (hObject=0x114) returned 1
	[0254.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg")) returned 0x2020
	[0254.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg")) returned 0x2020
	[0254.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.288] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.288] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.288] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.288] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.289] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x8b9, lpOverlapped=0x0) returned 1
	[0254.290] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x8c0, lpOverlapped=0x0) returned 1
	[0254.291] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.291] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.291] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.291] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8b9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x8b9, lpOverlapped=0x0) returned 1
	[0254.292] FlushFileBuffers (hFile=0x114) returned 1
	[0254.294] FlushFileBuffers (hFile=0x260) returned 1
	[0254.296] CloseHandle (hObject=0x114) returned 1
	[0254.296] CloseHandle (hObject=0x260) returned 1
	[0254.296] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg")) returned 1
	[0254.297] SetEvent (hEvent=0xfc) returned 1
	[0254.297] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.298] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8326) returned 1
	[0254.298] CloseHandle (hObject=0x260) returned 1
	[0254.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg")) returned 0x2020
	[0254.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg")) returned 0x2020
	[0254.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.298] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.299] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.299] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.299] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.299] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2086, lpOverlapped=0x0) returned 1
	[0254.301] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2090, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2090, lpOverlapped=0x0) returned 1
	[0254.302] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.302] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.302] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.302] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2086, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2086, lpOverlapped=0x0) returned 1
	[0254.302] FlushFileBuffers (hFile=0x260) returned 1
	[0254.307] FlushFileBuffers (hFile=0x114) returned 1
	[0254.309] CloseHandle (hObject=0x260) returned 1
	[0254.309] CloseHandle (hObject=0x114) returned 1
	[0254.309] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg")) returned 1
	[0254.310] SetEvent (hEvent=0xfc) returned 1
	[0254.310] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.311] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2427) returned 1
	[0254.312] CloseHandle (hObject=0x114) returned 1
	[0254.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg")) returned 0x2020
	[0254.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg")) returned 0x2020
	[0254.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.312] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.312] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.312] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.312] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.313] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x97b, lpOverlapped=0x0) returned 1
	[0254.314] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x980, lpOverlapped=0x0) returned 1
	[0254.315] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.315] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.315] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.315] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x97b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x97b, lpOverlapped=0x0) returned 1
	[0254.315] FlushFileBuffers (hFile=0x114) returned 1
	[0254.318] FlushFileBuffers (hFile=0x260) returned 1
	[0254.320] CloseHandle (hObject=0x114) returned 1
	[0254.320] CloseHandle (hObject=0x260) returned 1
	[0254.320] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg")) returned 1
	[0254.321] SetEvent (hEvent=0xfc) returned 1
	[0254.321] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.323] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1690) returned 1
	[0254.323] CloseHandle (hObject=0x260) returned 1
	[0254.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg")) returned 0x2020
	[0254.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg")) returned 0x2020
	[0254.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.323] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.323] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.323] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.323] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.324] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x69a, lpOverlapped=0x0) returned 1
	[0254.325] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x6a0, lpOverlapped=0x0) returned 1
	[0254.326] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.326] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.326] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.326] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x69a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x69a, lpOverlapped=0x0) returned 1
	[0254.326] FlushFileBuffers (hFile=0x260) returned 1
	[0254.329] FlushFileBuffers (hFile=0x114) returned 1
	[0254.331] CloseHandle (hObject=0x260) returned 1
	[0254.331] CloseHandle (hObject=0x114) returned 1
	[0254.331] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg")) returned 1
	[0254.332] SetEvent (hEvent=0xfc) returned 1
	[0254.332] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.334] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1744) returned 1
	[0254.334] CloseHandle (hObject=0x114) returned 1
	[0254.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg")) returned 0x2020
	[0254.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg")) returned 0x2020
	[0254.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.334] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.334] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.334] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.334] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.335] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x6d0, lpOverlapped=0x0) returned 1
	[0254.337] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x6e0, lpOverlapped=0x0) returned 1
	[0254.340] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.341] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.341] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.341] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x6d0, lpOverlapped=0x0) returned 1
	[0254.341] FlushFileBuffers (hFile=0x114) returned 1
	[0254.344] FlushFileBuffers (hFile=0x260) returned 1
	[0254.345] CloseHandle (hObject=0x114) returned 1
	[0254.345] CloseHandle (hObject=0x260) returned 1
	[0254.346] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg")) returned 1
	[0254.346] SetEvent (hEvent=0xfc) returned 1
	[0254.347] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.348] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1671) returned 1
	[0254.349] CloseHandle (hObject=0x260) returned 1
	[0254.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg")) returned 0x2020
	[0254.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg")) returned 0x2020
	[0254.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.349] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.349] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.349] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.349] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.350] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x687, lpOverlapped=0x0) returned 1
	[0254.351] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x690, lpOverlapped=0x0) returned 1
	[0254.352] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.352] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.352] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.352] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x687, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x687, lpOverlapped=0x0) returned 1
	[0254.353] FlushFileBuffers (hFile=0x260) returned 1
	[0254.356] FlushFileBuffers (hFile=0x114) returned 1
	[0254.357] CloseHandle (hObject=0x260) returned 1
	[0254.357] CloseHandle (hObject=0x114) returned 1
	[0254.357] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg")) returned 1
	[0254.359] SetEvent (hEvent=0xfc) returned 1
	[0254.360] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.362] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9416) returned 1
	[0254.362] CloseHandle (hObject=0x114) returned 1
	[0254.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg")) returned 0x2020
	[0254.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg")) returned 0x2020
	[0254.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.362] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.362] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.362] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.362] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.363] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x24c8, lpOverlapped=0x0) returned 1
	[0254.364] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x24d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x24d0, lpOverlapped=0x0) returned 1
	[0254.365] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.366] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.366] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.366] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x24c8, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x24c8, lpOverlapped=0x0) returned 1
	[0254.366] FlushFileBuffers (hFile=0x114) returned 1
	[0254.371] FlushFileBuffers (hFile=0x260) returned 1
	[0254.372] CloseHandle (hObject=0x114) returned 1
	[0254.373] CloseHandle (hObject=0x260) returned 1
	[0254.373] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg")) returned 1
	[0254.374] SetEvent (hEvent=0xfc) returned 1
	[0254.374] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.376] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13335) returned 1
	[0254.376] CloseHandle (hObject=0x260) returned 1
	[0254.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg")) returned 0x2020
	[0254.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg")) returned 0x2020
	[0254.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.376] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.376] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.376] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.376] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.377] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3417, lpOverlapped=0x0) returned 1
	[0254.379] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3420, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3420, lpOverlapped=0x0) returned 1
	[0254.380] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.380] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.380] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.380] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3417, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3417, lpOverlapped=0x0) returned 1
	[0254.380] FlushFileBuffers (hFile=0x260) returned 1
	[0254.383] FlushFileBuffers (hFile=0x114) returned 1
	[0254.385] CloseHandle (hObject=0x260) returned 1
	[0254.385] CloseHandle (hObject=0x114) returned 1
	[0254.385] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg")) returned 1
	[0254.386] SetEvent (hEvent=0xfc) returned 1
	[0254.386] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.388] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3083) returned 1
	[0254.388] CloseHandle (hObject=0x114) returned 1
	[0254.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg")) returned 0x2020
	[0254.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg")) returned 0x2020
	[0254.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.388] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.388] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.388] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.388] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.389] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xc0b, lpOverlapped=0x0) returned 1
	[0254.391] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xc10, lpOverlapped=0x0) returned 1
	[0254.392] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.392] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.392] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.392] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xc0b, lpOverlapped=0x0) returned 1
	[0254.392] FlushFileBuffers (hFile=0x114) returned 1
	[0254.395] FlushFileBuffers (hFile=0x260) returned 1
	[0254.397] CloseHandle (hObject=0x114) returned 1
	[0254.397] CloseHandle (hObject=0x260) returned 1
	[0254.397] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg")) returned 1
	[0254.398] SetEvent (hEvent=0xfc) returned 1
	[0254.398] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.399] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15436) returned 1
	[0254.399] CloseHandle (hObject=0x260) returned 1
	[0254.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg")) returned 0x2020
	[0254.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg")) returned 0x2020
	[0254.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.399] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.400] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.400] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.400] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.401] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3c4c, lpOverlapped=0x0) returned 1
	[0254.403] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3c50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3c50, lpOverlapped=0x0) returned 1
	[0254.404] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.404] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.405] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.405] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3c4c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3c4c, lpOverlapped=0x0) returned 1
	[0254.405] FlushFileBuffers (hFile=0x260) returned 1
	[0254.407] FlushFileBuffers (hFile=0x114) returned 1
	[0254.409] CloseHandle (hObject=0x260) returned 1
	[0254.410] CloseHandle (hObject=0x114) returned 1
	[0254.410] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg")) returned 1
	[0254.411] SetEvent (hEvent=0xfc) returned 1
	[0254.411] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.412] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7950) returned 1
	[0254.412] CloseHandle (hObject=0x114) returned 1
	[0254.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg")) returned 0x2020
	[0254.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg")) returned 0x2020
	[0254.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.412] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.413] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.413] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.413] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.413] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1f0e, lpOverlapped=0x0) returned 1
	[0254.415] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1f10, lpOverlapped=0x0) returned 1
	[0254.416] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.416] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.416] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.416] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1f0e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1f0e, lpOverlapped=0x0) returned 1
	[0254.416] FlushFileBuffers (hFile=0x114) returned 1
	[0254.420] FlushFileBuffers (hFile=0x260) returned 1
	[0254.421] CloseHandle (hObject=0x114) returned 1
	[0254.421] CloseHandle (hObject=0x260) returned 1
	[0254.421] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg")) returned 1
	[0254.422] SetEvent (hEvent=0xfc) returned 1
	[0254.422] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.424] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2432) returned 1
	[0254.424] CloseHandle (hObject=0x260) returned 1
	[0254.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg")) returned 0x2020
	[0254.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg")) returned 0x2020
	[0254.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.424] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.424] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.424] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.424] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.425] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x980, lpOverlapped=0x0) returned 1
	[0254.426] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x990, lpOverlapped=0x0) returned 1
	[0254.427] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.427] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.427] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.427] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x980, lpOverlapped=0x0) returned 1
	[0254.428] FlushFileBuffers (hFile=0x260) returned 1
	[0254.430] FlushFileBuffers (hFile=0x114) returned 1
	[0254.432] CloseHandle (hObject=0x260) returned 1
	[0254.432] CloseHandle (hObject=0x114) returned 1
	[0254.432] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg")) returned 1
	[0254.433] SetEvent (hEvent=0xfc) returned 1
	[0254.433] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.436] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9213) returned 1
	[0254.436] CloseHandle (hObject=0x114) returned 1
	[0254.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg")) returned 0x2020
	[0254.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg")) returned 0x2020
	[0254.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.437] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.437] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.437] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.437] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.438] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x23fd, lpOverlapped=0x0) returned 1
	[0254.439] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2400, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2400, lpOverlapped=0x0) returned 1
	[0254.440] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.440] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.440] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.440] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x23fd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x23fd, lpOverlapped=0x0) returned 1
	[0254.441] FlushFileBuffers (hFile=0x114) returned 1
	[0254.443] FlushFileBuffers (hFile=0x260) returned 1
	[0254.445] CloseHandle (hObject=0x114) returned 1
	[0254.445] CloseHandle (hObject=0x260) returned 1
	[0254.445] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg")) returned 1
	[0254.446] SetEvent (hEvent=0xfc) returned 1
	[0254.446] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.448] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6745) returned 1
	[0254.448] CloseHandle (hObject=0x260) returned 1
	[0254.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg")) returned 0x2020
	[0254.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg")) returned 0x2020
	[0254.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.448] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.448] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.448] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.448] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.449] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1a59, lpOverlapped=0x0) returned 1
	[0254.450] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1a60, lpOverlapped=0x0) returned 1
	[0254.451] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.451] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.451] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.451] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1a59, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1a59, lpOverlapped=0x0) returned 1
	[0254.451] FlushFileBuffers (hFile=0x260) returned 1
	[0254.454] FlushFileBuffers (hFile=0x114) returned 1
	[0254.456] CloseHandle (hObject=0x260) returned 1
	[0254.456] CloseHandle (hObject=0x114) returned 1
	[0254.456] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg")) returned 1
	[0254.457] SetEvent (hEvent=0xfc) returned 1
	[0254.457] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.458] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1968) returned 1
	[0254.458] CloseHandle (hObject=0x114) returned 1
	[0254.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg")) returned 0x2020
	[0254.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg")) returned 0x2020
	[0254.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.459] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.459] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.459] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.459] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.460] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7b0, lpOverlapped=0x0) returned 1
	[0254.461] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7c0, lpOverlapped=0x0) returned 1
	[0254.462] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.462] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.462] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.462] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7b0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7b0, lpOverlapped=0x0) returned 1
	[0254.462] FlushFileBuffers (hFile=0x114) returned 1
	[0254.465] FlushFileBuffers (hFile=0x260) returned 1
	[0254.466] CloseHandle (hObject=0x114) returned 1
	[0254.466] CloseHandle (hObject=0x260) returned 1
	[0254.466] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg")) returned 1
	[0254.467] SetEvent (hEvent=0xfc) returned 1
	[0254.467] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.469] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17644) returned 1
	[0254.469] CloseHandle (hObject=0x260) returned 1
	[0254.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg")) returned 0x2020
	[0254.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg")) returned 0x2020
	[0254.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.469] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.469] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.469] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.469] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.470] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x44ec, lpOverlapped=0x0) returned 1
	[0254.472] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x44f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x44f0, lpOverlapped=0x0) returned 1
	[0254.473] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.473] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.473] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.473] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x44ec, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x44ec, lpOverlapped=0x0) returned 1
	[0254.473] FlushFileBuffers (hFile=0x260) returned 1
	[0254.476] FlushFileBuffers (hFile=0x114) returned 1
	[0254.478] CloseHandle (hObject=0x260) returned 1
	[0254.478] CloseHandle (hObject=0x114) returned 1
	[0254.478] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg")) returned 1
	[0254.479] SetEvent (hEvent=0xfc) returned 1
	[0254.479] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.481] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5915) returned 1
	[0254.481] CloseHandle (hObject=0x114) returned 1
	[0254.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg")) returned 0x2020
	[0254.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg")) returned 0x2020
	[0254.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.481] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.481] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.481] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.481] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.482] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x171b, lpOverlapped=0x0) returned 1
	[0254.483] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1720, lpOverlapped=0x0) returned 1
	[0254.484] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.484] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.484] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.484] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x171b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x171b, lpOverlapped=0x0) returned 1
	[0254.485] FlushFileBuffers (hFile=0x114) returned 1
	[0254.487] FlushFileBuffers (hFile=0x260) returned 1
	[0254.488] CloseHandle (hObject=0x114) returned 1
	[0254.489] CloseHandle (hObject=0x260) returned 1
	[0254.489] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg")) returned 1
	[0254.490] SetEvent (hEvent=0xfc) returned 1
	[0254.490] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.491] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6182) returned 1
	[0254.491] CloseHandle (hObject=0x260) returned 1
	[0254.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg")) returned 0x2020
	[0254.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg")) returned 0x2020
	[0254.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.492] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.492] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.492] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.492] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.493] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1826, lpOverlapped=0x0) returned 1
	[0254.494] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1830, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1830, lpOverlapped=0x0) returned 1
	[0254.495] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.495] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.495] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.495] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1826, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1826, lpOverlapped=0x0) returned 1
	[0254.495] FlushFileBuffers (hFile=0x260) returned 1
	[0254.501] FlushFileBuffers (hFile=0x114) returned 1
	[0254.502] CloseHandle (hObject=0x260) returned 1
	[0254.502] CloseHandle (hObject=0x114) returned 1
	[0254.503] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg")) returned 1
	[0254.503] SetEvent (hEvent=0xfc) returned 1
	[0254.504] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.505] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1509) returned 1
	[0254.505] CloseHandle (hObject=0x114) returned 1
	[0254.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg")) returned 0x2020
	[0254.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg")) returned 0x2020
	[0254.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.505] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.506] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.506] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.506] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.507] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5e5, lpOverlapped=0x0) returned 1
	[0254.508] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x5f0, lpOverlapped=0x0) returned 1
	[0254.509] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.509] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.509] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.509] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5e5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5e5, lpOverlapped=0x0) returned 1
	[0254.509] FlushFileBuffers (hFile=0x114) returned 1
	[0254.513] FlushFileBuffers (hFile=0x260) returned 1
	[0254.514] CloseHandle (hObject=0x114) returned 1
	[0254.514] CloseHandle (hObject=0x260) returned 1
	[0254.514] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg")) returned 1
	[0254.515] SetEvent (hEvent=0xfc) returned 1
	[0254.515] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.517] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1509) returned 1
	[0254.517] CloseHandle (hObject=0x260) returned 1
	[0254.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg")) returned 0x2020
	[0254.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg")) returned 0x2020
	[0254.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.517] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.517] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.517] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.517] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0254.518] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5e5, lpOverlapped=0x0) returned 1
	[0254.519] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x5f0, lpOverlapped=0x0) returned 1
	[0254.520] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.520] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.520] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.520] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5e5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5e5, lpOverlapped=0x0) returned 1
	[0254.520] FlushFileBuffers (hFile=0x260) returned 1
	[0254.523] FlushFileBuffers (hFile=0x114) returned 1
	[0254.524] CloseHandle (hObject=0x260) returned 1
	[0254.524] CloseHandle (hObject=0x114) returned 1
	[0254.524] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg")) returned 1
	[0254.525] SetEvent (hEvent=0xfc) returned 1
	[0254.525] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.527] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13669) returned 1
	[0254.527] CloseHandle (hObject=0x114) returned 1
	[0254.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg")) returned 0x2020
	[0254.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg")) returned 0x2020
	[0254.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0254.527] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.527] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.528] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3565, lpOverlapped=0x0) returned 1
	[0254.529] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3570, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3570, lpOverlapped=0x0) returned 1
	[0254.530] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.530] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.530] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.530] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3565, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3565, lpOverlapped=0x0) returned 1
	[0254.531] FlushFileBuffers (hFile=0x114) returned 1
	[0254.533] FlushFileBuffers (hFile=0x260) returned 1
	[0254.535] CloseHandle (hObject=0x114) returned 1
	[0254.535] CloseHandle (hObject=0x260) returned 1
	[0254.535] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg")) returned 1
	[0254.536] SetEvent (hEvent=0xfc) returned 1
	[0254.536] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.538] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=243) returned 1
	[0254.538] CloseHandle (hObject=0x110) returned 1
	[0254.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png")) returned 0x2020
	[0254.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png")) returned 0x2020
	[0254.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.539] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.539] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.539] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.539] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.540] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xf3, lpOverlapped=0x0) returned 1
	[0254.541] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0254.542] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.542] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.542] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.542] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xf3, lpOverlapped=0x0) returned 1
	[0254.542] FlushFileBuffers (hFile=0x110) returned 1
	[0254.546] FlushFileBuffers (hFile=0x260) returned 1
	[0254.547] CloseHandle (hObject=0x110) returned 1
	[0254.547] CloseHandle (hObject=0x260) returned 1
	[0254.548] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png")) returned 1
	[0254.548] SetEvent (hEvent=0xfc) returned 1
	[0254.549] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.549] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=953) returned 1
	[0254.549] CloseHandle (hObject=0x260) returned 1
	[0254.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png")) returned 0x2020
	[0254.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png")) returned 0x2020
	[0254.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.549] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.550] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.550] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.550] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0254.550] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3b9, lpOverlapped=0x0) returned 1
	[0254.553] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3c0, lpOverlapped=0x0) returned 1
	[0254.554] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.554] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.554] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.554] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3b9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3b9, lpOverlapped=0x0) returned 1
	[0254.554] FlushFileBuffers (hFile=0x260) returned 1
	[0254.557] FlushFileBuffers (hFile=0x110) returned 1
	[0254.558] CloseHandle (hObject=0x260) returned 1
	[0254.558] CloseHandle (hObject=0x110) returned 1
	[0254.558] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png")) returned 1
	[0254.559] SetEvent (hEvent=0xfc) returned 1
	[0254.559] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.560] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=333) returned 1
	[0254.560] CloseHandle (hObject=0x110) returned 1
	[0254.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png")) returned 0x2020
	[0254.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png")) returned 0x2020
	[0254.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.560] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.561] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.561] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.561] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.561] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x14d, lpOverlapped=0x0) returned 1
	[0254.563] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x150, lpOverlapped=0x0) returned 1
	[0254.564] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.564] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.564] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.564] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x14d, lpOverlapped=0x0) returned 1
	[0254.564] FlushFileBuffers (hFile=0x110) returned 1
	[0254.664] FlushFileBuffers (hFile=0x260) returned 1
	[0254.699] CloseHandle (hObject=0x110) returned 1
	[0254.702] CloseHandle (hObject=0x260) returned 1
	[0254.703] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png")) returned 1
	[0254.705] SetEvent (hEvent=0xfc) returned 1
	[0254.712] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.716] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=876) returned 1
	[0254.716] CloseHandle (hObject=0x260) returned 1
	[0254.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png")) returned 0x2020
	[0254.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png")) returned 0x2020
	[0254.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.716] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.716] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.716] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.716] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0254.717] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x36c, lpOverlapped=0x0) returned 1
	[0254.718] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x370, lpOverlapped=0x0) returned 1
	[0254.719] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.719] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.720] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.720] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x36c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x36c, lpOverlapped=0x0) returned 1
	[0254.720] FlushFileBuffers (hFile=0x260) returned 1
	[0254.723] FlushFileBuffers (hFile=0x110) returned 1
	[0254.725] CloseHandle (hObject=0x260) returned 1
	[0254.725] CloseHandle (hObject=0x110) returned 1
	[0254.725] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png")) returned 1
	[0254.726] SetEvent (hEvent=0xfc) returned 1
	[0254.726] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cb=gapi[1].loaded_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cb=gapi[1].loaded_1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.727] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=81727) returned 1
	[0254.727] CloseHandle (hObject=0x110) returned 1
	[0254.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cb=gapi[1].loaded_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cb=gapi[1].loaded_1")) returned 0x2020
	[0254.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cb=gapi[1].loaded_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cb=gapi[1].loaded_1")) returned 0x2020
	[0254.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cb=gapi[1].loaded_1.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cb=gapi[1].loaded_1.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.728] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cb=gapi[1].loaded_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cb=gapi[1].loaded_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.728] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.728] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.728] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cb=gapi[1].loaded_1.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cb=gapi[1].loaded_1.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.728] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x13f3f, lpOverlapped=0x0) returned 1
	[0254.731] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x13f40, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x13f40, lpOverlapped=0x0) returned 1
	[0254.733] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0254.733] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.733] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.733] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x13f3f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x13f3f, lpOverlapped=0x0) returned 1
	[0254.734] FlushFileBuffers (hFile=0x110) returned 1
	[0254.753] FlushFileBuffers (hFile=0x260) returned 1
	[0254.755] CloseHandle (hObject=0x110) returned 1
	[0254.755] CloseHandle (hObject=0x260) returned 1
	[0254.755] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cb=gapi[1].loaded_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cb=gapi[1].loaded_1")) returned 1
	[0254.756] SetEvent (hEvent=0xfc) returned 1
	[0254.756] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cjzkeoubrn4kerxqtauh3fy6323mhuzfjmgtvxag2ie[1].eot"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.758] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18233) returned 1
	[0254.758] CloseHandle (hObject=0x260) returned 1
	[0254.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cjzkeoubrn4kerxqtauh3fy6323mhuzfjmgtvxag2ie[1].eot")) returned 0x2020
	[0254.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cjzkeoubrn4kerxqtauh3fy6323mhuzfjmgtvxag2ie[1].eot")) returned 0x2020
	[0254.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cjzkeoubrn4kerxqtauh3fy6323mhuzfjmgtvxag2ie[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.758] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cjzkeoubrn4kerxqtauh3fy6323mhuzfjmgtvxag2ie[1].eot"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.758] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.758] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.758] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cjzkeoubrn4kerxqtauh3fy6323mhuzfjmgtvxag2ie[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0254.761] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4739, lpOverlapped=0x0) returned 1
	[0254.763] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4740, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4740, lpOverlapped=0x0) returned 1
	[0254.764] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x142, lpOverlapped=0x0) returned 1
	[0254.765] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.765] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.765] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4739, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4739, lpOverlapped=0x0) returned 1
	[0254.765] FlushFileBuffers (hFile=0x260) returned 1
	[0254.783] FlushFileBuffers (hFile=0x110) returned 1
	[0254.784] CloseHandle (hObject=0x260) returned 1
	[0254.785] CloseHandle (hObject=0x110) returned 1
	[0254.785] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\cjzkeoubrn4kerxqtauh3fy6323mhuzfjmgtvxag2ie[1].eot")) returned 1
	[0254.786] SetEvent (hEvent=0xfc) returned 1
	[0254.786] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.787] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1969) returned 1
	[0254.787] CloseHandle (hObject=0x110) returned 1
	[0254.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js")) returned 0x2020
	[0254.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js")) returned 0x2020
	[0254.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.787] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.787] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.787] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.787] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.788] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7b1, lpOverlapped=0x0) returned 1
	[0254.790] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7c0, lpOverlapped=0x0) returned 1
	[0254.791] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0254.791] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.791] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.791] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7b1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7b1, lpOverlapped=0x0) returned 1
	[0254.791] FlushFileBuffers (hFile=0x110) returned 1
	[0254.795] FlushFileBuffers (hFile=0x260) returned 1
	[0254.804] CloseHandle (hObject=0x110) returned 1
	[0254.804] CloseHandle (hObject=0x260) returned 1
	[0254.804] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[2].js")) returned 1
	[0254.805] SetEvent (hEvent=0xfc) returned 1
	[0254.805] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.806] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67) returned 1
	[0254.807] CloseHandle (hObject=0x260) returned 1
	[0254.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\desktop.ini")) returned 0x2006
	[0254.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\desktop.ini")) returned 0x2006
	[0254.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.807] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.807] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.807] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.807] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2006, hTemplateFile=0x0) returned 0x110
	[0254.808] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x43, lpOverlapped=0x0) returned 1
	[0254.809] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x50, lpOverlapped=0x0) returned 1
	[0254.810] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.810] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.810] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.810] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x43, lpOverlapped=0x0) returned 1
	[0254.810] FlushFileBuffers (hFile=0x260) returned 1
	[0254.812] FlushFileBuffers (hFile=0x110) returned 1
	[0254.815] CloseHandle (hObject=0x260) returned 1
	[0254.815] CloseHandle (hObject=0x110) returned 1
	[0254.815] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\desktop.ini")) returned 1
	[0254.816] SetEvent (hEvent=0xfc) returned 1
	[0254.816] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\f8-028d9f-f30905ea[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\f8-028d9f-f30905ea[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.817] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=236065) returned 1
	[0254.817] CloseHandle (hObject=0x110) returned 1
	[0254.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\f8-028d9f-f30905ea[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\f8-028d9f-f30905ea[1]")) returned 0x2020
	[0254.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\f8-028d9f-f30905ea[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\f8-028d9f-f30905ea[1]")) returned 0x2020
	[0254.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\f8-028d9f-f30905ea[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\f8-028d9f-f30905ea[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.818] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\f8-028d9f-f30905ea[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\f8-028d9f-f30905ea[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.818] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.818] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.818] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\f8-028d9f-f30905ea[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\f8-028d9f-f30905ea[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.819] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x39a21, lpOverlapped=0x0) returned 1
	[0254.825] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x39a30, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x39a30, lpOverlapped=0x0) returned 1
	[0254.830] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0254.830] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.830] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.830] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x39a21, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x39a21, lpOverlapped=0x0) returned 1
	[0254.831] FlushFileBuffers (hFile=0x110) returned 1
	[0254.884] FlushFileBuffers (hFile=0x260) returned 1
	[0254.886] CloseHandle (hObject=0x110) returned 1
	[0254.886] CloseHandle (hObject=0x260) returned 1
	[0254.886] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\f8-028d9f-f30905ea[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\f8-028d9f-f30905ea[1]")) returned 1
	[0254.888] SetEvent (hEvent=0xfc) returned 1
	[0254.889] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.892] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4869) returned 1
	[0254.892] CloseHandle (hObject=0x260) returned 1
	[0254.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1]")) returned 0x2020
	[0254.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1]")) returned 0x2020
	[0254.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.892] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.892] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.892] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.892] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0254.893] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1305, lpOverlapped=0x0) returned 1
	[0254.894] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1310, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1310, lpOverlapped=0x0) returned 1
	[0254.895] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x202, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x202, lpOverlapped=0x0) returned 1
	[0254.896] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.896] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.896] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1305, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1305, lpOverlapped=0x0) returned 1
	[0254.896] FlushFileBuffers (hFile=0x260) returned 1
	[0254.899] FlushFileBuffers (hFile=0x110) returned 1
	[0254.900] CloseHandle (hObject=0x260) returned 1
	[0254.900] CloseHandle (hObject=0x110) returned 1
	[0254.900] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=852361999[1]")) returned 1
	[0254.902] SetEvent (hEvent=0xfc) returned 1
	[0254.902] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.902] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=102) returned 1
	[0254.903] CloseHandle (hObject=0x110) returned 1
	[0254.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt")) returned 0x2020
	[0254.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt")) returned 0x2020
	[0254.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.903] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.903] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.903] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.903] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.904] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x66, lpOverlapped=0x0) returned 1
	[0254.905] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x70, lpOverlapped=0x0) returned 1
	[0254.906] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.906] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.906] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.906] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x66, lpOverlapped=0x0) returned 1
	[0254.906] FlushFileBuffers (hFile=0x110) returned 1
	[0254.910] FlushFileBuffers (hFile=0x260) returned 1
	[0254.916] CloseHandle (hObject=0x110) returned 1
	[0254.916] CloseHandle (hObject=0x260) returned 1
	[0254.916] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt")) returned 1
	[0254.917] SetEvent (hEvent=0xfc) returned 1
	[0254.917] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\js[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.920] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=961) returned 1
	[0254.920] CloseHandle (hObject=0x260) returned 1
	[0254.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\js[1]")) returned 0x2020
	[0254.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\js[1]")) returned 0x2020
	[0254.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\js[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\js[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.921] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\js[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0254.921] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.921] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.921] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\js[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\js[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0254.922] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3c1, lpOverlapped=0x0) returned 1
	[0254.936] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3d0, lpOverlapped=0x0) returned 1
	[0254.937] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0254.937] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.938] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.938] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3c1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3c1, lpOverlapped=0x0) returned 1
	[0254.938] FlushFileBuffers (hFile=0x260) returned 1
	[0254.943] FlushFileBuffers (hFile=0x110) returned 1
	[0254.963] CloseHandle (hObject=0x260) returned 1
	[0254.963] CloseHandle (hObject=0x110) returned 1
	[0254.963] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\js[1]")) returned 1
	[0254.964] SetEvent (hEvent=0xfc) returned 1
	[0254.964] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\latest[1].eot"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.965] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=35047) returned 1
	[0254.965] CloseHandle (hObject=0x110) returned 1
	[0254.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\latest[1].eot")) returned 0x2020
	[0254.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\latest[1].eot")) returned 0x2020
	[0254.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\latest[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\latest[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.966] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\latest[1].eot"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0254.966] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.966] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0254.966] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\latest[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\latest[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0254.967] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x88e7, lpOverlapped=0x0) returned 1
	[0254.969] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x88f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x88f0, lpOverlapped=0x0) returned 1
	[0254.970] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0254.970] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.970] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0254.970] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x88e7, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x88e7, lpOverlapped=0x0) returned 1
	[0254.970] FlushFileBuffers (hFile=0x110) returned 1
	[0255.145] FlushFileBuffers (hFile=0x260) returned 1
	[0255.193] CloseHandle (hObject=0x110) returned 1
	[0255.193] CloseHandle (hObject=0x260) returned 1
	[0255.193] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\latest[1].eot")) returned 1
	[0255.194] SetEvent (hEvent=0xfc) returned 1
	[0255.194] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\only[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\only[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.197] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0255.197] CloseHandle (hObject=0x260) returned 1
	[0255.197] SetEvent (hEvent=0xfc) returned 1
	[0255.197] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\Passport[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\passport[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.198] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=320) returned 1
	[0255.198] CloseHandle (hObject=0x260) returned 1
	[0255.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\Passport[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\passport[1].htm")) returned 0x2020
	[0255.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\Passport[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\passport[1].htm")) returned 0x2020
	[0255.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\Passport[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\passport[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.199] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\Passport[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\passport[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.199] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.199] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.199] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\Passport[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\passport[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.199] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x140, lpOverlapped=0x0) returned 1
	[0255.201] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x150, lpOverlapped=0x0) returned 1
	[0255.202] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.202] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.202] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.202] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x140, lpOverlapped=0x0) returned 1
	[0255.203] FlushFileBuffers (hFile=0x260) returned 1
	[0255.240] FlushFileBuffers (hFile=0x110) returned 1
	[0255.284] CloseHandle (hObject=0x260) returned 1
	[0255.284] CloseHandle (hObject=0x110) returned 1
	[0255.284] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\Passport[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\passport[1].htm")) returned 1
	[0255.285] SetEvent (hEvent=0xfc) returned 1
	[0255.286] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.287] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=116827) returned 1
	[0255.287] CloseHandle (hObject=0x110) returned 1
	[0255.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css")) returned 0x2020
	[0255.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css")) returned 0x2020
	[0255.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.287] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.287] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.287] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.287] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.288] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1c85b, lpOverlapped=0x0) returned 1
	[0255.292] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1c860, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1c860, lpOverlapped=0x0) returned 1
	[0255.294] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0255.294] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.295] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.295] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1c85b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1c85b, lpOverlapped=0x0) returned 1
	[0255.295] FlushFileBuffers (hFile=0x110) returned 1
	[0255.299] FlushFileBuffers (hFile=0x260) returned 1
	[0255.300] CloseHandle (hObject=0x110) returned 1
	[0255.300] CloseHandle (hObject=0x260) returned 1
	[0255.300] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css")) returned 1
	[0255.302] SetEvent (hEvent=0xfc) returned 1
	[0255.302] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.303] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5767) returned 1
	[0255.303] CloseHandle (hObject=0x260) returned 1
	[0255.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css")) returned 0x2020
	[0255.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css")) returned 0x2020
	[0255.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.303] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.304] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.304] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.304] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.305] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1687, lpOverlapped=0x0) returned 1
	[0255.306] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1690, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1690, lpOverlapped=0x0) returned 1
	[0255.307] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0255.308] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.308] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.308] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1687, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1687, lpOverlapped=0x0) returned 1
	[0255.308] FlushFileBuffers (hFile=0x260) returned 1
	[0255.310] FlushFileBuffers (hFile=0x110) returned 1
	[0255.312] CloseHandle (hObject=0x260) returned 1
	[0255.312] CloseHandle (hObject=0x110) returned 1
	[0255.312] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css")) returned 1
	[0255.313] SetEvent (hEvent=0xfc) returned 1
	[0255.313] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.315] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=58453) returned 1
	[0255.315] CloseHandle (hObject=0x110) returned 1
	[0255.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif")) returned 0x2020
	[0255.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif")) returned 0x2020
	[0255.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.315] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.315] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.315] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.315] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.316] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe455, lpOverlapped=0x0) returned 1
	[0255.318] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe460, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe460, lpOverlapped=0x0) returned 1
	[0255.320] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0255.320] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.320] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.320] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe455, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe455, lpOverlapped=0x0) returned 1
	[0255.320] FlushFileBuffers (hFile=0x110) returned 1
	[0255.339] FlushFileBuffers (hFile=0x260) returned 1
	[0255.341] CloseHandle (hObject=0x110) returned 1
	[0255.341] CloseHandle (hObject=0x260) returned 1
	[0255.341] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\000000929096[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\000000929096[1].gif")) returned 1
	[0255.342] SetEvent (hEvent=0xfc) returned 1
	[0255.343] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.344] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10537) returned 1
	[0255.344] CloseHandle (hObject=0x260) returned 1
	[0255.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js")) returned 0x2020
	[0255.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js")) returned 0x2020
	[0255.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.344] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.344] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.345] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.345] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.346] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2929, lpOverlapped=0x0) returned 1
	[0255.349] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2930, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2930, lpOverlapped=0x0) returned 1
	[0255.350] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0255.350] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.350] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.350] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2929, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2929, lpOverlapped=0x0) returned 1
	[0255.350] FlushFileBuffers (hFile=0x260) returned 1
	[0255.368] FlushFileBuffers (hFile=0x110) returned 1
	[0255.370] CloseHandle (hObject=0x260) returned 1
	[0255.370] CloseHandle (hObject=0x110) returned 1
	[0255.370] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\1223855322-postmessagerelay[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\1223855322-postmessagerelay[1].js")) returned 1
	[0255.371] SetEvent (hEvent=0xfc) returned 1
	[0255.371] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.372] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=613) returned 1
	[0255.372] CloseHandle (hObject=0x110) returned 1
	[0255.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png")) returned 0x2020
	[0255.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png")) returned 0x2020
	[0255.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.372] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.373] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.373] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.373] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.373] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x265, lpOverlapped=0x0) returned 1
	[0255.376] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x270, lpOverlapped=0x0) returned 1
	[0255.377] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.377] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.377] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.377] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x265, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x265, lpOverlapped=0x0) returned 1
	[0255.377] FlushFileBuffers (hFile=0x110) returned 1
	[0255.386] FlushFileBuffers (hFile=0x260) returned 1
	[0255.390] CloseHandle (hObject=0x110) returned 1
	[0255.390] CloseHandle (hObject=0x260) returned 1
	[0255.390] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png")) returned 1
	[0255.391] SetEvent (hEvent=0xfc) returned 1
	[0255.391] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.399] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=584) returned 1
	[0255.399] CloseHandle (hObject=0x260) returned 1
	[0255.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png")) returned 0x2020
	[0255.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png")) returned 0x2020
	[0255.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.402] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.403] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.403] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.407] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.414] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x248, lpOverlapped=0x0) returned 1
	[0255.416] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x250, lpOverlapped=0x0) returned 1
	[0255.417] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.417] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.417] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.417] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x248, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x248, lpOverlapped=0x0) returned 1
	[0255.417] FlushFileBuffers (hFile=0x260) returned 1
	[0255.420] FlushFileBuffers (hFile=0x110) returned 1
	[0255.422] CloseHandle (hObject=0x260) returned 1
	[0255.422] CloseHandle (hObject=0x110) returned 1
	[0255.422] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png")) returned 1
	[0255.423] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.424] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=616) returned 1
	[0255.424] CloseHandle (hObject=0x110) returned 1
	[0255.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png")) returned 0x2020
	[0255.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png")) returned 0x2020
	[0255.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.424] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.424] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.424] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.424] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.425] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x268, lpOverlapped=0x0) returned 1
	[0255.426] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x270, lpOverlapped=0x0) returned 1
	[0255.427] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.427] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.428] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.428] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x268, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x268, lpOverlapped=0x0) returned 1
	[0255.431] FlushFileBuffers (hFile=0x110) returned 1
	[0255.434] FlushFileBuffers (hFile=0x260) returned 1
	[0255.442] CloseHandle (hObject=0x110) returned 1
	[0255.442] CloseHandle (hObject=0x260) returned 1
	[0255.442] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png")) returned 1
	[0255.444] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.453] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=739) returned 1
	[0255.453] CloseHandle (hObject=0x260) returned 1
	[0255.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png")) returned 0x2020
	[0255.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png")) returned 0x2020
	[0255.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.454] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.454] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.454] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.454] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.454] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2e3, lpOverlapped=0x0) returned 1
	[0255.456] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2f0, lpOverlapped=0x0) returned 1
	[0255.457] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.457] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.457] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.457] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2e3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2e3, lpOverlapped=0x0) returned 1
	[0255.457] FlushFileBuffers (hFile=0x260) returned 1
	[0255.460] FlushFileBuffers (hFile=0x110) returned 1
	[0255.461] CloseHandle (hObject=0x260) returned 1
	[0255.461] CloseHandle (hObject=0x110) returned 1
	[0255.462] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png")) returned 1
	[0255.462] SetEvent (hEvent=0xfc) returned 1
	[0255.463] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.463] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=913) returned 1
	[0255.463] CloseHandle (hObject=0x110) returned 1
	[0255.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png")) returned 0x2020
	[0255.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png")) returned 0x2020
	[0255.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.464] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.464] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.464] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.464] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.465] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x391, lpOverlapped=0x0) returned 1
	[0255.466] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3a0, lpOverlapped=0x0) returned 1
	[0255.467] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.467] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.467] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.467] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x391, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x391, lpOverlapped=0x0) returned 1
	[0255.467] FlushFileBuffers (hFile=0x110) returned 1
	[0255.470] FlushFileBuffers (hFile=0x260) returned 1
	[0255.471] CloseHandle (hObject=0x110) returned 1
	[0255.471] CloseHandle (hObject=0x260) returned 1
	[0255.472] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png")) returned 1
	[0255.472] SetEvent (hEvent=0xfc) returned 1
	[0255.473] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.473] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31314) returned 1
	[0255.474] CloseHandle (hObject=0x260) returned 1
	[0255.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js")) returned 0x2020
	[0255.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js")) returned 0x2020
	[0255.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.474] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.474] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.474] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.474] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.475] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7a52, lpOverlapped=0x0) returned 1
	[0255.479] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7a60, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7a60, lpOverlapped=0x0) returned 1
	[0255.480] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.480] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.480] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.481] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7a52, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7a52, lpOverlapped=0x0) returned 1
	[0255.481] FlushFileBuffers (hFile=0x260) returned 1
	[0255.484] FlushFileBuffers (hFile=0x110) returned 1
	[0255.486] CloseHandle (hObject=0x260) returned 1
	[0255.486] CloseHandle (hObject=0x110) returned 1
	[0255.486] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\adition[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\adition[1].js")) returned 1
	[0255.488] SetEvent (hEvent=0xfc) returned 1
	[0255.488] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\async_usersync[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\async_usersync[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.489] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=995) returned 1
	[0255.489] CloseHandle (hObject=0x110) returned 1
	[0255.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\async_usersync[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\async_usersync[1].htm")) returned 0x2020
	[0255.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\async_usersync[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\async_usersync[1].htm")) returned 0x2020
	[0255.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\async_usersync[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\async_usersync[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.490] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\async_usersync[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\async_usersync[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.490] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.490] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.490] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\async_usersync[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\async_usersync[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.491] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3e3, lpOverlapped=0x0) returned 1
	[0255.492] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3f0, lpOverlapped=0x0) returned 1
	[0255.493] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0255.493] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.493] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.493] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3e3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3e3, lpOverlapped=0x0) returned 1
	[0255.493] FlushFileBuffers (hFile=0x110) returned 1
	[0255.496] FlushFileBuffers (hFile=0x260) returned 1
	[0255.497] CloseHandle (hObject=0x110) returned 1
	[0255.497] CloseHandle (hObject=0x260) returned 1
	[0255.497] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\async_usersync[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\async_usersync[1].htm")) returned 1
	[0255.498] SetEvent (hEvent=0xfc) returned 1
	[0255.498] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.499] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=24555) returned 1
	[0255.499] CloseHandle (hObject=0x260) returned 1
	[0255.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg")) returned 0x2020
	[0255.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg")) returned 0x2020
	[0255.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.499] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.500] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.500] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.500] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.500] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5feb, lpOverlapped=0x0) returned 1
	[0255.502] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5ff0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x5ff0, lpOverlapped=0x0) returned 1
	[0255.503] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x132, lpOverlapped=0x0) returned 1
	[0255.504] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.504] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.504] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5feb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5feb, lpOverlapped=0x0) returned 1
	[0255.504] FlushFileBuffers (hFile=0x260) returned 1
	[0255.520] FlushFileBuffers (hFile=0x110) returned 1
	[0255.529] CloseHandle (hObject=0x260) returned 1
	[0255.529] CloseHandle (hObject=0x110) returned 1
	[0255.529] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg")) returned 1
	[0255.531] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.531] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=564) returned 1
	[0255.531] CloseHandle (hObject=0x110) returned 1
	[0255.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png")) returned 0x2020
	[0255.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png")) returned 0x2020
	[0255.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.532] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.532] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.532] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.532] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.533] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x234, lpOverlapped=0x0) returned 1
	[0255.535] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x240, lpOverlapped=0x0) returned 1
	[0255.536] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.537] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.537] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.537] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x234, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x234, lpOverlapped=0x0) returned 1
	[0255.537] FlushFileBuffers (hFile=0x110) returned 1
	[0255.540] FlushFileBuffers (hFile=0x260) returned 1
	[0255.544] CloseHandle (hObject=0x110) returned 1
	[0255.544] CloseHandle (hObject=0x260) returned 1
	[0255.544] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png")) returned 1
	[0255.545] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.547] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10951) returned 1
	[0255.547] CloseHandle (hObject=0x260) returned 1
	[0255.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg")) returned 0x2020
	[0255.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg")) returned 0x2020
	[0255.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.547] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.547] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.547] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.547] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.548] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2ac7, lpOverlapped=0x0) returned 1
	[0255.550] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2ad0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2ad0, lpOverlapped=0x0) returned 1
	[0255.551] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.551] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.551] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.551] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2ac7, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2ac7, lpOverlapped=0x0) returned 1
	[0255.551] FlushFileBuffers (hFile=0x260) returned 1
	[0255.585] FlushFileBuffers (hFile=0x110) returned 1
	[0255.593] CloseHandle (hObject=0x260) returned 1
	[0255.593] CloseHandle (hObject=0x110) returned 1
	[0255.593] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg")) returned 1
	[0255.594] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.596] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12498) returned 1
	[0255.596] CloseHandle (hObject=0x110) returned 1
	[0255.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg")) returned 0x2020
	[0255.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg")) returned 0x2020
	[0255.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.597] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.597] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.597] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.597] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.598] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x30d2, lpOverlapped=0x0) returned 1
	[0255.601] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x30e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x30e0, lpOverlapped=0x0) returned 1
	[0255.603] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.603] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.603] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.603] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x30d2, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x30d2, lpOverlapped=0x0) returned 1
	[0255.603] FlushFileBuffers (hFile=0x110) returned 1
	[0255.637] FlushFileBuffers (hFile=0x260) returned 1
	[0255.639] CloseHandle (hObject=0x110) returned 1
	[0255.639] CloseHandle (hObject=0x260) returned 1
	[0255.639] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg")) returned 1
	[0255.640] SetEvent (hEvent=0xfc) returned 1
	[0255.640] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.640] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18676) returned 1
	[0255.641] CloseHandle (hObject=0x260) returned 1
	[0255.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg")) returned 0x2020
	[0255.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg")) returned 0x2020
	[0255.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.641] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.641] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.641] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.641] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.642] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x48f4, lpOverlapped=0x0) returned 1
	[0255.643] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4900, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4900, lpOverlapped=0x0) returned 1
	[0255.644] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.644] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.645] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.645] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x48f4, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x48f4, lpOverlapped=0x0) returned 1
	[0255.645] FlushFileBuffers (hFile=0x260) returned 1
	[0255.728] FlushFileBuffers (hFile=0x110) returned 1
	[0255.730] CloseHandle (hObject=0x260) returned 1
	[0255.730] CloseHandle (hObject=0x110) returned 1
	[0255.730] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg")) returned 1
	[0255.731] SetEvent (hEvent=0xfc) returned 1
	[0255.731] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.732] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5823) returned 1
	[0255.732] CloseHandle (hObject=0x110) returned 1
	[0255.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg")) returned 0x2020
	[0255.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg")) returned 0x2020
	[0255.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.732] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.733] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.733] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.733] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.733] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x16bf, lpOverlapped=0x0) returned 1
	[0255.735] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x16c0, lpOverlapped=0x0) returned 1
	[0255.736] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.736] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.736] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.736] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x16bf, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x16bf, lpOverlapped=0x0) returned 1
	[0255.736] FlushFileBuffers (hFile=0x110) returned 1
	[0255.833] FlushFileBuffers (hFile=0x260) returned 1
	[0255.854] CloseHandle (hObject=0x110) returned 1
	[0255.854] CloseHandle (hObject=0x260) returned 1
	[0255.855] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg")) returned 1
	[0255.855] SetEvent (hEvent=0xfc) returned 1
	[0255.856] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.857] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4857) returned 1
	[0255.857] CloseHandle (hObject=0x260) returned 1
	[0255.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg")) returned 0x2020
	[0255.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg")) returned 0x2020
	[0255.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.857] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.857] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.858] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.858] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.859] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x12f9, lpOverlapped=0x0) returned 1
	[0255.860] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1300, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1300, lpOverlapped=0x0) returned 1
	[0255.861] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.862] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.862] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.862] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x12f9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x12f9, lpOverlapped=0x0) returned 1
	[0255.862] FlushFileBuffers (hFile=0x260) returned 1
	[0255.872] FlushFileBuffers (hFile=0x110) returned 1
	[0255.873] CloseHandle (hObject=0x260) returned 1
	[0255.873] CloseHandle (hObject=0x110) returned 1
	[0255.873] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg")) returned 1
	[0255.874] SetEvent (hEvent=0xfc) returned 1
	[0255.874] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.875] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2473) returned 1
	[0255.875] CloseHandle (hObject=0x110) returned 1
	[0255.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg")) returned 0x2020
	[0255.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg")) returned 0x2020
	[0255.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.875] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.875] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.875] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.875] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.876] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x9a9, lpOverlapped=0x0) returned 1
	[0255.878] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x9b0, lpOverlapped=0x0) returned 1
	[0255.879] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.879] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.879] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.879] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9a9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x9a9, lpOverlapped=0x0) returned 1
	[0255.879] FlushFileBuffers (hFile=0x110) returned 1
	[0255.882] FlushFileBuffers (hFile=0x260) returned 1
	[0255.883] CloseHandle (hObject=0x110) returned 1
	[0255.883] CloseHandle (hObject=0x260) returned 1
	[0255.883] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg")) returned 1
	[0255.884] SetEvent (hEvent=0xfc) returned 1
	[0255.884] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.886] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6920) returned 1
	[0255.886] CloseHandle (hObject=0x260) returned 1
	[0255.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg")) returned 0x2020
	[0255.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg")) returned 0x2020
	[0255.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.886] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.886] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.886] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.886] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.887] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1b08, lpOverlapped=0x0) returned 1
	[0255.888] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1b10, lpOverlapped=0x0) returned 1
	[0255.889] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.889] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.889] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.889] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1b08, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1b08, lpOverlapped=0x0) returned 1
	[0255.889] FlushFileBuffers (hFile=0x260) returned 1
	[0255.893] FlushFileBuffers (hFile=0x110) returned 1
	[0255.907] CloseHandle (hObject=0x260) returned 1
	[0255.907] CloseHandle (hObject=0x110) returned 1
	[0255.907] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg")) returned 1
	[0255.909] SetEvent (hEvent=0xfc) returned 1
	[0255.909] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.912] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2384) returned 1
	[0255.912] CloseHandle (hObject=0x110) returned 1
	[0255.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg")) returned 0x2020
	[0255.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg")) returned 0x2020
	[0255.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.912] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.912] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.912] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.912] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.913] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x950, lpOverlapped=0x0) returned 1
	[0255.915] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x960, lpOverlapped=0x0) returned 1
	[0255.916] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.916] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.916] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.916] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x950, lpOverlapped=0x0) returned 1
	[0255.917] FlushFileBuffers (hFile=0x110) returned 1
	[0255.927] FlushFileBuffers (hFile=0x260) returned 1
	[0255.937] CloseHandle (hObject=0x110) returned 1
	[0255.937] CloseHandle (hObject=0x260) returned 1
	[0255.939] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg")) returned 1
	[0255.941] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.942] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1898) returned 1
	[0255.942] CloseHandle (hObject=0x260) returned 1
	[0255.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg")) returned 0x2020
	[0255.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg")) returned 0x2020
	[0255.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.943] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.943] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.944] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.944] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.944] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x76a, lpOverlapped=0x0) returned 1
	[0255.946] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x770, lpOverlapped=0x0) returned 1
	[0255.947] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.947] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.947] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.947] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x76a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x76a, lpOverlapped=0x0) returned 1
	[0255.947] FlushFileBuffers (hFile=0x260) returned 1
	[0255.950] FlushFileBuffers (hFile=0x110) returned 1
	[0255.952] CloseHandle (hObject=0x260) returned 1
	[0255.952] CloseHandle (hObject=0x110) returned 1
	[0255.952] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg")) returned 1
	[0255.953] SetEvent (hEvent=0xfc) returned 1
	[0255.953] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.955] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2399) returned 1
	[0255.955] CloseHandle (hObject=0x110) returned 1
	[0255.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg")) returned 0x2020
	[0255.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg")) returned 0x2020
	[0255.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.955] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.955] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.955] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.955] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.956] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x95f, lpOverlapped=0x0) returned 1
	[0255.957] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x960, lpOverlapped=0x0) returned 1
	[0255.958] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.959] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.959] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.959] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x95f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x95f, lpOverlapped=0x0) returned 1
	[0255.959] FlushFileBuffers (hFile=0x110) returned 1
	[0255.961] FlushFileBuffers (hFile=0x260) returned 1
	[0255.962] CloseHandle (hObject=0x110) returned 1
	[0255.963] CloseHandle (hObject=0x260) returned 1
	[0255.963] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg")) returned 1
	[0255.963] SetEvent (hEvent=0xfc) returned 1
	[0255.964] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.965] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9246) returned 1
	[0255.965] CloseHandle (hObject=0x260) returned 1
	[0255.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg")) returned 0x2020
	[0255.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg")) returned 0x2020
	[0255.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.966] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.966] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.966] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.966] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.966] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x241e, lpOverlapped=0x0) returned 1
	[0255.968] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2420, lpOverlapped=0x0) returned 1
	[0255.970] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.970] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.970] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.970] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x241e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x241e, lpOverlapped=0x0) returned 1
	[0255.970] FlushFileBuffers (hFile=0x260) returned 1
	[0255.973] FlushFileBuffers (hFile=0x110) returned 1
	[0255.974] CloseHandle (hObject=0x260) returned 1
	[0255.974] CloseHandle (hObject=0x110) returned 1
	[0255.974] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg")) returned 1
	[0255.975] SetEvent (hEvent=0xfc) returned 1
	[0255.975] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.976] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2360) returned 1
	[0255.976] CloseHandle (hObject=0x110) returned 1
	[0255.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg")) returned 0x2020
	[0255.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg")) returned 0x2020
	[0255.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.976] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0255.976] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.976] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.977] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0255.977] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x938, lpOverlapped=0x0) returned 1
	[0255.980] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x940, lpOverlapped=0x0) returned 1
	[0255.981] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.982] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.982] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.982] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x938, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x938, lpOverlapped=0x0) returned 1
	[0255.982] FlushFileBuffers (hFile=0x110) returned 1
	[0255.984] FlushFileBuffers (hFile=0x260) returned 1
	[0255.985] CloseHandle (hObject=0x110) returned 1
	[0255.985] CloseHandle (hObject=0x260) returned 1
	[0255.986] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg")) returned 1
	[0255.986] SetEvent (hEvent=0xfc) returned 1
	[0255.987] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.987] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6442) returned 1
	[0255.987] CloseHandle (hObject=0x260) returned 1
	[0255.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg")) returned 0x2020
	[0255.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg")) returned 0x2020
	[0255.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.988] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0255.988] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.988] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0255.988] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0255.989] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x192a, lpOverlapped=0x0) returned 1
	[0255.990] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1930, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1930, lpOverlapped=0x0) returned 1
	[0255.991] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0255.991] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.992] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0255.992] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x192a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x192a, lpOverlapped=0x0) returned 1
	[0255.992] FlushFileBuffers (hFile=0x260) returned 1
	[0255.994] FlushFileBuffers (hFile=0x110) returned 1
	[0255.999] CloseHandle (hObject=0x260) returned 1
	[0255.999] CloseHandle (hObject=0x110) returned 1
	[0255.999] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg")) returned 1
	[0256.000] SetEvent (hEvent=0xfc) returned 1
	[0256.000] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0256.001] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9211) returned 1
	[0256.001] CloseHandle (hObject=0x110) returned 1
	[0256.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg")) returned 0x2020
	[0256.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg")) returned 0x2020
	[0256.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.001] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0256.001] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0256.001] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0256.001] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0256.002] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x23fb, lpOverlapped=0x0) returned 1
	[0256.004] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2400, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2400, lpOverlapped=0x0) returned 1
	[0256.005] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0256.005] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0256.005] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0256.005] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x23fb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x23fb, lpOverlapped=0x0) returned 1
	[0256.005] FlushFileBuffers (hFile=0x110) returned 1
	[0256.162] FlushFileBuffers (hFile=0x260) returned 1
	[0256.346] CloseHandle (hObject=0x110) returned 1
	[0256.346] CloseHandle (hObject=0x260) returned 1
	[0256.346] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg")) returned 1
	[0256.347] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0256.356] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2017) returned 1
	[0256.356] CloseHandle (hObject=0x260) returned 1
	[0256.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg")) returned 0x2020
	[0256.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg")) returned 0x2020
	[0256.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.356] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0256.356] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0256.356] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0256.357] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0256.357] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7e1, lpOverlapped=0x0) returned 1
	[0256.370] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7f0, lpOverlapped=0x0) returned 1
	[0256.371] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0256.371] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0256.371] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0256.371] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7e1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7e1, lpOverlapped=0x0) returned 1
	[0256.371] FlushFileBuffers (hFile=0x260) returned 1
	[0256.569] FlushFileBuffers (hFile=0x110) returned 1
	[0256.582] CloseHandle (hObject=0x260) returned 1
	[0256.582] CloseHandle (hObject=0x110) returned 1
	[0256.582] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg")) returned 1
	[0256.583] SetEvent (hEvent=0xfc) returned 1
	[0256.584] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0256.591] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6990) returned 1
	[0256.591] CloseHandle (hObject=0x110) returned 1
	[0256.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg")) returned 0x2020
	[0256.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg")) returned 0x2020
	[0256.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.591] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0256.591] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0256.592] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0256.592] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0256.593] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1b4e, lpOverlapped=0x0) returned 1
	[0256.594] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1b50, lpOverlapped=0x0) returned 1
	[0256.595] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0256.595] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0256.595] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0256.595] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1b4e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1b4e, lpOverlapped=0x0) returned 1
	[0256.595] FlushFileBuffers (hFile=0x110) returned 1
	[0256.599] FlushFileBuffers (hFile=0x260) returned 1
	[0256.601] CloseHandle (hObject=0x110) returned 1
	[0256.601] CloseHandle (hObject=0x260) returned 1
	[0256.601] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg")) returned 1
	[0256.602] SetEvent (hEvent=0xfc) returned 1
	[0256.602] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0256.603] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1873) returned 1
	[0256.603] CloseHandle (hObject=0x260) returned 1
	[0256.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg")) returned 0x2020
	[0256.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg")) returned 0x2020
	[0256.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.604] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0256.604] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0256.604] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0256.604] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0256.604] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x751, lpOverlapped=0x0) returned 1
	[0256.606] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x760, lpOverlapped=0x0) returned 1
	[0256.607] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0256.607] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0256.607] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0256.607] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x751, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x751, lpOverlapped=0x0) returned 1
	[0256.607] FlushFileBuffers (hFile=0x260) returned 1
	[0256.721] FlushFileBuffers (hFile=0x110) returned 1
	[0256.730] CloseHandle (hObject=0x260) returned 1
	[0256.730] CloseHandle (hObject=0x110) returned 1
	[0256.730] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg")) returned 1
	[0256.731] SetEvent (hEvent=0xfc) returned 1
	[0256.732] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0256.754] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7627) returned 1
	[0256.754] CloseHandle (hObject=0x110) returned 1
	[0256.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg")) returned 0x2020
	[0256.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg")) returned 0x2020
	[0256.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.755] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0256.755] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0256.755] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0256.755] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0256.755] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1dcb, lpOverlapped=0x0) returned 1
	[0256.757] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1dd0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1dd0, lpOverlapped=0x0) returned 1
	[0256.758] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0256.758] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0256.759] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0256.759] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1dcb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1dcb, lpOverlapped=0x0) returned 1
	[0256.759] FlushFileBuffers (hFile=0x110) returned 1
	[0257.164] FlushFileBuffers (hFile=0x260) returned 1
	[0257.166] CloseHandle (hObject=0x110) returned 1
	[0257.166] CloseHandle (hObject=0x260) returned 1
	[0257.166] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg")) returned 1
	[0257.167] SetEvent (hEvent=0xfc) returned 1
	[0257.167] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0257.169] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=80902) returned 1
	[0257.170] CloseHandle (hObject=0x204) returned 1
	[0257.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg")) returned 0x2020
	[0257.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg")) returned 0x2020
	[0257.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.170] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0257.170] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.170] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.170] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0257.171] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x13c06, lpOverlapped=0x0) returned 1
	[0257.174] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x13c10, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x13c10, lpOverlapped=0x0) returned 1
	[0257.176] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0257.176] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.176] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.176] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x13c06, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x13c06, lpOverlapped=0x0) returned 1
	[0257.176] FlushFileBuffers (hFile=0x204) returned 1
	[0257.197] FlushFileBuffers (hFile=0x260) returned 1
	[0257.199] CloseHandle (hObject=0x204) returned 1
	[0257.199] CloseHandle (hObject=0x260) returned 1
	[0257.199] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg")) returned 1
	[0257.200] SetEvent (hEvent=0xfc) returned 1
	[0257.200] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0257.202] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=83149) returned 1
	[0257.202] CloseHandle (hObject=0x260) returned 1
	[0257.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg")) returned 0x2020
	[0257.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg")) returned 0x2020
	[0257.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.202] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0257.202] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.202] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.202] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0257.203] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x144cd, lpOverlapped=0x0) returned 1
	[0257.206] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x144d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x144d0, lpOverlapped=0x0) returned 1
	[0257.208] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0257.208] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.209] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.209] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x144cd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x144cd, lpOverlapped=0x0) returned 1
	[0257.209] FlushFileBuffers (hFile=0x260) returned 1
	[0257.325] FlushFileBuffers (hFile=0x204) returned 1
	[0257.379] CloseHandle (hObject=0x260) returned 1
	[0257.379] CloseHandle (hObject=0x204) returned 1
	[0257.379] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg")) returned 1
	[0257.380] SetEvent (hEvent=0xfc) returned 1
	[0257.383] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\cb=gapi[1].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\cb=gapi[1].loaded_0"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0257.390] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=117238) returned 1
	[0257.390] CloseHandle (hObject=0x204) returned 1
	[0257.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\cb=gapi[1].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\cb=gapi[1].loaded_0")) returned 0x2020
	[0257.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\cb=gapi[1].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\cb=gapi[1].loaded_0")) returned 0x2020
	[0257.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\cb=gapi[1].loaded_0.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\cb=gapi[1].loaded_0.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.390] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\cb=gapi[1].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\cb=gapi[1].loaded_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0257.390] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.390] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.390] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\cb=gapi[1].loaded_0.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\cb=gapi[1].loaded_0.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0257.392] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1c9f6, lpOverlapped=0x0) returned 1
	[0257.395] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1ca00, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1ca00, lpOverlapped=0x0) returned 1
	[0257.397] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0257.398] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.398] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.398] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1c9f6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1c9f6, lpOverlapped=0x0) returned 1
	[0257.398] FlushFileBuffers (hFile=0x204) returned 1
	[0257.426] FlushFileBuffers (hFile=0x260) returned 1
	[0257.429] CloseHandle (hObject=0x204) returned 1
	[0257.429] CloseHandle (hObject=0x260) returned 1
	[0257.429] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\cb=gapi[1].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\cb=gapi[1].loaded_0")) returned 1
	[0257.430] SetEvent (hEvent=0xfc) returned 1
	[0257.431] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0257.432] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=168777) returned 1
	[0257.432] CloseHandle (hObject=0x260) returned 1
	[0257.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css")) returned 0x2020
	[0257.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css")) returned 0x2020
	[0257.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.432] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0257.432] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.432] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.432] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0257.433] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x29349, lpOverlapped=0x0) returned 1
	[0257.439] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x29350, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x29350, lpOverlapped=0x0) returned 1
	[0257.442] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0257.442] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.442] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.442] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x29349, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x29349, lpOverlapped=0x0) returned 1
	[0257.442] FlushFileBuffers (hFile=0x260) returned 1
	[0257.569] FlushFileBuffers (hFile=0x204) returned 1
	[0257.587] CloseHandle (hObject=0x260) returned 1
	[0257.588] CloseHandle (hObject=0x204) returned 1
	[0257.589] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css")) returned 1
	[0257.600] SetEvent (hEvent=0xfc) returned 1
	[0257.610] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\Standard[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\standard[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0257.612] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=87081) returned 1
	[0257.612] CloseHandle (hObject=0x204) returned 1
	[0257.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\Standard[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\standard[1]")) returned 0x2020
	[0257.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\Standard[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\standard[1]")) returned 0x2020
	[0257.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\Standard[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\standard[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.612] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\Standard[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\standard[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0257.612] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.612] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.612] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\Standard[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\standard[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0257.613] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x15429, lpOverlapped=0x0) returned 1
	[0257.616] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x15430, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x15430, lpOverlapped=0x0) returned 1
	[0257.618] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0257.618] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.618] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.618] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x15429, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x15429, lpOverlapped=0x0) returned 1
	[0257.619] FlushFileBuffers (hFile=0x204) returned 1
	[0257.622] FlushFileBuffers (hFile=0x260) returned 1
	[0257.624] CloseHandle (hObject=0x204) returned 1
	[0257.624] CloseHandle (hObject=0x260) returned 1
	[0257.624] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\Standard[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\standard[1]")) returned 1
	[0257.626] SetEvent (hEvent=0xfc) returned 1
	[0257.626] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0257.626] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=66282) returned 1
	[0257.627] CloseHandle (hObject=0x260) returned 1
	[0257.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js")) returned 0x2020
	[0257.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js")) returned 0x2020
	[0257.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.627] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0257.627] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.627] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.627] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0257.628] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x102ea, lpOverlapped=0x0) returned 1
	[0257.630] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102f0, lpOverlapped=0x0) returned 1
	[0257.632] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0257.632] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.632] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.632] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102ea, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x102ea, lpOverlapped=0x0) returned 1
	[0257.633] FlushFileBuffers (hFile=0x260) returned 1
	[0257.698] FlushFileBuffers (hFile=0x204) returned 1
	[0257.707] CloseHandle (hObject=0x260) returned 1
	[0257.707] CloseHandle (hObject=0x204) returned 1
	[0257.707] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\uhf-main.var.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\uhf-main.var.min[1].js")) returned 1
	[0257.709] SetEvent (hEvent=0xfc) returned 1
	[0257.709] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0257.710] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=287230) returned 1
	[0257.710] CloseHandle (hObject=0x204) returned 1
	[0257.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js")) returned 0x2020
	[0257.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js")) returned 0x2020
	[0257.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.710] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0257.711] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.711] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0257.711] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0257.712] ReadFile (in: hFile=0x204, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x461fe, lpOverlapped=0x0) returned 1
	[0257.718] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x46200, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x46200, lpOverlapped=0x0) returned 1
	[0257.722] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0257.723] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.723] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0257.723] WriteFile (in: hFile=0x204, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x461fe, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x461fe, lpOverlapped=0x0) returned 1
	[0257.724] FlushFileBuffers (hFile=0x204) returned 1
	[0258.116] FlushFileBuffers (hFile=0x260) returned 1
	[0258.120] CloseHandle (hObject=0x204) returned 1
	[0258.120] CloseHandle (hObject=0x260) returned 1
	[0258.120] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\7962161087[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\7962161087[1].js")) returned 1
	[0258.123] SetEvent (hEvent=0xfc) returned 1
	[0258.124] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\async_usersync[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\async_usersync[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0258.125] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1347) returned 1
	[0258.125] CloseHandle (hObject=0x114) returned 1
	[0258.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\async_usersync[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\async_usersync[1]")) returned 0x2020
	[0258.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\async_usersync[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\async_usersync[1]")) returned 0x2020
	[0258.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\async_usersync[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\async_usersync[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.125] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\async_usersync[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\async_usersync[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0258.125] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.125] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.126] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\async_usersync[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\async_usersync[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x22c
	[0258.126] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x543, lpOverlapped=0x0) returned 1
	[0258.128] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x550, lpOverlapped=0x0) returned 1
	[0258.130] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0258.131] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.131] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.131] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x543, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x543, lpOverlapped=0x0) returned 1
	[0258.131] FlushFileBuffers (hFile=0x114) returned 1
	[0258.135] FlushFileBuffers (hFile=0x22c) returned 1
	[0258.136] CloseHandle (hObject=0x114) returned 1
	[0258.136] CloseHandle (hObject=0x22c) returned 1
	[0258.137] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\async_usersync[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\async_usersync[1]")) returned 1
	[0258.137] SetEvent (hEvent=0xfc) returned 1
	[0258.138] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\b2fd15[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\b2fd15[1].eot"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0258.138] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=34534) returned 1
	[0258.138] CloseHandle (hObject=0x22c) returned 1
	[0258.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\b2fd15[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\b2fd15[1].eot")) returned 0x2020
	[0258.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\b2fd15[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\b2fd15[1].eot")) returned 0x2020
	[0258.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\b2fd15[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\b2fd15[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.139] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\b2fd15[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\b2fd15[1].eot"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0258.139] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.139] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.139] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\b2fd15[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\b2fd15[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0258.140] ReadFile (in: hFile=0x22c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x86e6, lpOverlapped=0x0) returned 1
	[0258.142] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x86f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x86f0, lpOverlapped=0x0) returned 1
	[0258.144] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.144] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.144] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.144] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x86e6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x86e6, lpOverlapped=0x0) returned 1
	[0258.144] FlushFileBuffers (hFile=0x22c) returned 1
	[0258.238] FlushFileBuffers (hFile=0x114) returned 1
	[0258.251] CloseHandle (hObject=0x22c) returned 1
	[0258.251] CloseHandle (hObject=0x114) returned 1
	[0258.252] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\b2fd15[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\b2fd15[1].eot")) returned 1
	[0258.260] SetEvent (hEvent=0xfc) returned 1
	[0258.261] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0258.262] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1886) returned 1
	[0258.262] CloseHandle (hObject=0x114) returned 1
	[0258.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg")) returned 0x2020
	[0258.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg")) returned 0x2020
	[0258.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.262] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0258.262] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.262] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.262] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x22c
	[0258.263] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x75e, lpOverlapped=0x0) returned 1
	[0258.264] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x760, lpOverlapped=0x0) returned 1
	[0258.265] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.265] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.265] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.265] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x75e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x75e, lpOverlapped=0x0) returned 1
	[0258.266] FlushFileBuffers (hFile=0x114) returned 1
	[0258.268] FlushFileBuffers (hFile=0x22c) returned 1
	[0258.269] CloseHandle (hObject=0x114) returned 1
	[0258.269] CloseHandle (hObject=0x22c) returned 1
	[0258.269] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg")) returned 1
	[0258.270] SetEvent (hEvent=0xfc) returned 1
	[0258.270] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0258.271] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1756) returned 1
	[0258.271] CloseHandle (hObject=0x22c) returned 1
	[0258.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg")) returned 0x2020
	[0258.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg")) returned 0x2020
	[0258.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.271] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0258.271] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.271] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.271] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0258.272] ReadFile (in: hFile=0x22c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x6dc, lpOverlapped=0x0) returned 1
	[0258.275] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x6e0, lpOverlapped=0x0) returned 1
	[0258.278] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.278] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.278] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.278] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6dc, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x6dc, lpOverlapped=0x0) returned 1
	[0258.278] FlushFileBuffers (hFile=0x22c) returned 1
	[0258.280] FlushFileBuffers (hFile=0x114) returned 1
	[0258.282] CloseHandle (hObject=0x22c) returned 1
	[0258.282] CloseHandle (hObject=0x114) returned 1
	[0258.282] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg")) returned 1
	[0258.283] SetEvent (hEvent=0xfc) returned 1
	[0258.283] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0258.284] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2494) returned 1
	[0258.284] CloseHandle (hObject=0x114) returned 1
	[0258.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg")) returned 0x2020
	[0258.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg")) returned 0x2020
	[0258.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.284] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0258.284] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.284] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.284] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x22c
	[0258.285] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x9be, lpOverlapped=0x0) returned 1
	[0258.288] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x9c0, lpOverlapped=0x0) returned 1
	[0258.288] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.289] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.289] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.289] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9be, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x9be, lpOverlapped=0x0) returned 1
	[0258.289] FlushFileBuffers (hFile=0x114) returned 1
	[0258.291] FlushFileBuffers (hFile=0x22c) returned 1
	[0258.292] CloseHandle (hObject=0x114) returned 1
	[0258.293] CloseHandle (hObject=0x22c) returned 1
	[0258.293] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg")) returned 1
	[0258.293] SetEvent (hEvent=0xfc) returned 1
	[0258.294] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0258.295] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5780) returned 1
	[0258.295] CloseHandle (hObject=0x22c) returned 1
	[0258.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg")) returned 0x2020
	[0258.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg")) returned 0x2020
	[0258.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.295] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0258.295] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.295] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.295] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0258.296] ReadFile (in: hFile=0x22c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1694, lpOverlapped=0x0) returned 1
	[0258.297] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x16a0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x16a0, lpOverlapped=0x0) returned 1
	[0258.298] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.298] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.298] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.298] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1694, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1694, lpOverlapped=0x0) returned 1
	[0258.299] FlushFileBuffers (hFile=0x22c) returned 1
	[0258.301] FlushFileBuffers (hFile=0x114) returned 1
	[0258.303] CloseHandle (hObject=0x22c) returned 1
	[0258.303] CloseHandle (hObject=0x114) returned 1
	[0258.303] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg")) returned 1
	[0258.304] SetEvent (hEvent=0xfc) returned 1
	[0258.304] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0258.304] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2141) returned 1
	[0258.304] CloseHandle (hObject=0x114) returned 1
	[0258.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg")) returned 0x2020
	[0258.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg")) returned 0x2020
	[0258.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.305] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0258.305] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.305] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.305] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x22c
	[0258.305] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x85d, lpOverlapped=0x0) returned 1
	[0258.307] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x860, lpOverlapped=0x0) returned 1
	[0258.308] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.308] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.308] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.308] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x85d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x85d, lpOverlapped=0x0) returned 1
	[0258.308] FlushFileBuffers (hFile=0x114) returned 1
	[0258.310] FlushFileBuffers (hFile=0x22c) returned 1
	[0258.312] CloseHandle (hObject=0x114) returned 1
	[0258.312] CloseHandle (hObject=0x22c) returned 1
	[0258.312] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg")) returned 1
	[0258.313] SetEvent (hEvent=0xfc) returned 1
	[0258.313] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0258.313] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2168) returned 1
	[0258.313] CloseHandle (hObject=0x22c) returned 1
	[0258.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg")) returned 0x2020
	[0258.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg")) returned 0x2020
	[0258.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.314] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0258.314] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.314] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.314] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0258.314] ReadFile (in: hFile=0x22c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x878, lpOverlapped=0x0) returned 1
	[0258.317] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x880, lpOverlapped=0x0) returned 1
	[0258.318] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.318] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.318] SetFilePointerEx (in: hFile=0x22c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.318] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x878, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x878, lpOverlapped=0x0) returned 1
	[0258.318] FlushFileBuffers (hFile=0x22c) returned 1
	[0258.321] FlushFileBuffers (hFile=0x114) returned 1
	[0258.322] CloseHandle (hObject=0x22c) returned 1
	[0258.322] CloseHandle (hObject=0x114) returned 1
	[0258.322] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg")) returned 1
	[0258.323] SetEvent (hEvent=0xfc) returned 1
	[0258.323] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0258.324] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2168) returned 1
	[0258.324] CloseHandle (hObject=0x114) returned 1
	[0258.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg")) returned 0x2020
	[0258.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg")) returned 0x2020
	[0258.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.324] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0258.324] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.324] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.324] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x22c
	[0258.325] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x878, lpOverlapped=0x0) returned 1
	[0258.329] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x880, lpOverlapped=0x0) returned 1
	[0258.330] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.330] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.330] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.330] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x878, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x878, lpOverlapped=0x0) returned 1
	[0258.330] FlushFileBuffers (hFile=0x114) returned 1
	[0258.333] FlushFileBuffers (hFile=0x22c) returned 1
	[0258.335] CloseHandle (hObject=0x114) returned 1
	[0258.335] CloseHandle (hObject=0x22c) returned 1
	[0258.335] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg")) returned 1
	[0258.336] SetEvent (hEvent=0xfc) returned 1
	[0258.336] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0258.338] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1919) returned 1
	[0258.338] CloseHandle (hObject=0x20c) returned 1
	[0258.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg")) returned 0x2020
	[0258.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg")) returned 0x2020
	[0258.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.339] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0258.339] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.339] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.339] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0258.340] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x77f, lpOverlapped=0x0) returned 1
	[0258.343] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x780, lpOverlapped=0x0) returned 1
	[0258.344] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.344] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.344] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.344] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x77f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x77f, lpOverlapped=0x0) returned 1
	[0258.344] FlushFileBuffers (hFile=0x20c) returned 1
	[0258.347] FlushFileBuffers (hFile=0x254) returned 1
	[0258.348] CloseHandle (hObject=0x20c) returned 1
	[0258.348] CloseHandle (hObject=0x254) returned 1
	[0258.348] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg")) returned 1
	[0258.349] SetEvent (hEvent=0xfc) returned 1
	[0258.349] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0258.350] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8883) returned 1
	[0258.350] CloseHandle (hObject=0x254) returned 1
	[0258.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg")) returned 0x2020
	[0258.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg")) returned 0x2020
	[0258.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.350] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0258.350] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.350] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.350] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0258.351] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x22b3, lpOverlapped=0x0) returned 1
	[0258.353] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x22c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x22c0, lpOverlapped=0x0) returned 1
	[0258.354] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.354] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.354] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.354] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x22b3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x22b3, lpOverlapped=0x0) returned 1
	[0258.354] FlushFileBuffers (hFile=0x254) returned 1
	[0258.372] FlushFileBuffers (hFile=0x20c) returned 1
	[0258.375] CloseHandle (hObject=0x254) returned 1
	[0258.378] CloseHandle (hObject=0x20c) returned 1
	[0258.378] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg")) returned 1
	[0258.379] SetEvent (hEvent=0xfc) returned 1
	[0258.379] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0258.380] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6607) returned 1
	[0258.380] CloseHandle (hObject=0x20c) returned 1
	[0258.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg")) returned 0x2020
	[0258.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg")) returned 0x2020
	[0258.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.381] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0258.381] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.381] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.381] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0258.381] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x19cf, lpOverlapped=0x0) returned 1
	[0258.385] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x19d0, lpOverlapped=0x0) returned 1
	[0258.385] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.386] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.386] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.386] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x19cf, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x19cf, lpOverlapped=0x0) returned 1
	[0258.394] FlushFileBuffers (hFile=0x20c) returned 1
	[0258.398] FlushFileBuffers (hFile=0x254) returned 1
	[0258.399] CloseHandle (hObject=0x20c) returned 1
	[0258.399] CloseHandle (hObject=0x254) returned 1
	[0258.399] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg")) returned 1
	[0258.400] SetEvent (hEvent=0xfc) returned 1
	[0258.400] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0258.402] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11425) returned 1
	[0258.402] CloseHandle (hObject=0x254) returned 1
	[0258.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg")) returned 0x2020
	[0258.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg")) returned 0x2020
	[0258.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.402] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0258.402] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.402] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.402] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0258.403] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2ca1, lpOverlapped=0x0) returned 1
	[0258.405] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2cb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2cb0, lpOverlapped=0x0) returned 1
	[0258.406] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.406] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.406] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.406] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2ca1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2ca1, lpOverlapped=0x0) returned 1
	[0258.406] FlushFileBuffers (hFile=0x254) returned 1
	[0258.411] FlushFileBuffers (hFile=0x20c) returned 1
	[0258.413] CloseHandle (hObject=0x254) returned 1
	[0258.413] CloseHandle (hObject=0x20c) returned 1
	[0258.413] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg")) returned 1
	[0258.414] SetEvent (hEvent=0xfc) returned 1
	[0258.414] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0258.415] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8497) returned 1
	[0258.415] CloseHandle (hObject=0x20c) returned 1
	[0258.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg")) returned 0x2020
	[0258.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg")) returned 0x2020
	[0258.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.415] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0258.415] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.415] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.415] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0258.416] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2131, lpOverlapped=0x0) returned 1
	[0258.418] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2140, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2140, lpOverlapped=0x0) returned 1
	[0258.418] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.419] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.419] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.419] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2131, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2131, lpOverlapped=0x0) returned 1
	[0258.419] FlushFileBuffers (hFile=0x20c) returned 1
	[0258.461] FlushFileBuffers (hFile=0x254) returned 1
	[0258.490] CloseHandle (hObject=0x20c) returned 1
	[0258.490] CloseHandle (hObject=0x254) returned 1
	[0258.490] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg")) returned 1
	[0258.491] SetEvent (hEvent=0xfc) returned 1
	[0258.492] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.493] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5117) returned 1
	[0258.493] CloseHandle (hObject=0x210) returned 1
	[0258.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg")) returned 0x2020
	[0258.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg")) returned 0x2020
	[0258.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.493] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.493] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.493] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.493] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.507] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x13fd, lpOverlapped=0x0) returned 1
	[0258.508] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1400, lpOverlapped=0x0) returned 1
	[0258.509] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.510] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.510] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.510] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x13fd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x13fd, lpOverlapped=0x0) returned 1
	[0258.510] FlushFileBuffers (hFile=0x210) returned 1
	[0258.513] FlushFileBuffers (hFile=0x244) returned 1
	[0258.515] CloseHandle (hObject=0x210) returned 1
	[0258.515] CloseHandle (hObject=0x244) returned 1
	[0258.515] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg")) returned 1
	[0258.516] SetEvent (hEvent=0xfc) returned 1
	[0258.516] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.517] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2180) returned 1
	[0258.517] CloseHandle (hObject=0x244) returned 1
	[0258.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg")) returned 0x2020
	[0258.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg")) returned 0x2020
	[0258.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.517] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.517] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.517] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.517] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.518] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x884, lpOverlapped=0x0) returned 1
	[0258.519] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x890, lpOverlapped=0x0) returned 1
	[0258.520] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.521] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.521] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.521] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x884, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x884, lpOverlapped=0x0) returned 1
	[0258.521] FlushFileBuffers (hFile=0x244) returned 1
	[0258.523] FlushFileBuffers (hFile=0x210) returned 1
	[0258.524] CloseHandle (hObject=0x244) returned 1
	[0258.524] CloseHandle (hObject=0x210) returned 1
	[0258.525] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg")) returned 1
	[0258.526] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.527] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13528) returned 1
	[0258.527] CloseHandle (hObject=0x210) returned 1
	[0258.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg")) returned 0x2020
	[0258.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg")) returned 0x2020
	[0258.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.527] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.527] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.528] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x34d8, lpOverlapped=0x0) returned 1
	[0258.529] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x34e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x34e0, lpOverlapped=0x0) returned 1
	[0258.530] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.531] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.531] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.531] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x34d8, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x34d8, lpOverlapped=0x0) returned 1
	[0258.531] FlushFileBuffers (hFile=0x210) returned 1
	[0258.559] FlushFileBuffers (hFile=0x244) returned 1
	[0258.561] CloseHandle (hObject=0x210) returned 1
	[0258.561] CloseHandle (hObject=0x244) returned 1
	[0258.561] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg")) returned 1
	[0258.562] SetEvent (hEvent=0xfc) returned 1
	[0258.562] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.563] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10691) returned 1
	[0258.563] CloseHandle (hObject=0x244) returned 1
	[0258.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg")) returned 0x2020
	[0258.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg")) returned 0x2020
	[0258.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.564] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.564] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.564] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.564] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.565] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x29c3, lpOverlapped=0x0) returned 1
	[0258.566] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x29d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x29d0, lpOverlapped=0x0) returned 1
	[0258.567] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.568] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.568] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.568] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x29c3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x29c3, lpOverlapped=0x0) returned 1
	[0258.568] FlushFileBuffers (hFile=0x244) returned 1
	[0258.570] FlushFileBuffers (hFile=0x210) returned 1
	[0258.572] CloseHandle (hObject=0x244) returned 1
	[0258.572] CloseHandle (hObject=0x210) returned 1
	[0258.572] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg")) returned 1
	[0258.573] SetEvent (hEvent=0xfc) returned 1
	[0258.573] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.573] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2683) returned 1
	[0258.573] CloseHandle (hObject=0x210) returned 1
	[0258.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg")) returned 0x2020
	[0258.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg")) returned 0x2020
	[0258.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.574] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.574] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.574] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.574] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.575] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xa7b, lpOverlapped=0x0) returned 1
	[0258.576] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa80, lpOverlapped=0x0) returned 1
	[0258.577] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.577] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.577] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.577] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa7b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xa7b, lpOverlapped=0x0) returned 1
	[0258.577] FlushFileBuffers (hFile=0x210) returned 1
	[0258.579] FlushFileBuffers (hFile=0x244) returned 1
	[0258.581] CloseHandle (hObject=0x210) returned 1
	[0258.581] CloseHandle (hObject=0x244) returned 1
	[0258.581] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg")) returned 1
	[0258.582] SetEvent (hEvent=0xfc) returned 1
	[0258.582] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.583] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6063) returned 1
	[0258.583] CloseHandle (hObject=0x244) returned 1
	[0258.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg")) returned 0x2020
	[0258.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg")) returned 0x2020
	[0258.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.583] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.583] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.583] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.583] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.584] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x17af, lpOverlapped=0x0) returned 1
	[0258.585] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x17b0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x17b0, lpOverlapped=0x0) returned 1
	[0258.586] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.586] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.586] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.587] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x17af, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x17af, lpOverlapped=0x0) returned 1
	[0258.587] FlushFileBuffers (hFile=0x244) returned 1
	[0258.615] FlushFileBuffers (hFile=0x210) returned 1
	[0258.618] CloseHandle (hObject=0x244) returned 1
	[0258.618] CloseHandle (hObject=0x210) returned 1
	[0258.618] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg")) returned 1
	[0258.619] SetEvent (hEvent=0xfc) returned 1
	[0258.619] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.620] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2803) returned 1
	[0258.620] CloseHandle (hObject=0x210) returned 1
	[0258.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg")) returned 0x2020
	[0258.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg")) returned 0x2020
	[0258.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.621] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.621] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.621] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.621] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.622] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xaf3, lpOverlapped=0x0) returned 1
	[0258.623] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb00, lpOverlapped=0x0) returned 1
	[0258.624] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.625] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.625] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.625] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xaf3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xaf3, lpOverlapped=0x0) returned 1
	[0258.625] FlushFileBuffers (hFile=0x210) returned 1
	[0258.628] FlushFileBuffers (hFile=0x244) returned 1
	[0258.629] CloseHandle (hObject=0x210) returned 1
	[0258.629] CloseHandle (hObject=0x244) returned 1
	[0258.629] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg")) returned 1
	[0258.630] SetEvent (hEvent=0xfc) returned 1
	[0258.630] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.631] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13578) returned 1
	[0258.631] CloseHandle (hObject=0x244) returned 1
	[0258.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg")) returned 0x2020
	[0258.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg")) returned 0x2020
	[0258.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.632] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.632] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.632] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.632] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.632] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x350a, lpOverlapped=0x0) returned 1
	[0258.634] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3510, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3510, lpOverlapped=0x0) returned 1
	[0258.635] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.635] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.635] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.635] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x350a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x350a, lpOverlapped=0x0) returned 1
	[0258.635] FlushFileBuffers (hFile=0x244) returned 1
	[0258.638] FlushFileBuffers (hFile=0x210) returned 1
	[0258.640] CloseHandle (hObject=0x244) returned 1
	[0258.640] CloseHandle (hObject=0x210) returned 1
	[0258.640] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg")) returned 1
	[0258.641] SetEvent (hEvent=0xfc) returned 1
	[0258.641] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.642] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1676) returned 1
	[0258.642] CloseHandle (hObject=0x210) returned 1
	[0258.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg")) returned 0x2020
	[0258.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg")) returned 0x2020
	[0258.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.642] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.642] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.642] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.642] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.643] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x68c, lpOverlapped=0x0) returned 1
	[0258.644] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x690, lpOverlapped=0x0) returned 1
	[0258.645] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.645] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.646] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.646] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x68c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x68c, lpOverlapped=0x0) returned 1
	[0258.646] FlushFileBuffers (hFile=0x210) returned 1
	[0258.648] FlushFileBuffers (hFile=0x244) returned 1
	[0258.650] CloseHandle (hObject=0x210) returned 1
	[0258.650] CloseHandle (hObject=0x244) returned 1
	[0258.650] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg")) returned 1
	[0258.651] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.652] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=644) returned 1
	[0258.652] CloseHandle (hObject=0x244) returned 1
	[0258.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png")) returned 0x2020
	[0258.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png")) returned 0x2020
	[0258.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.652] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.652] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.652] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.652] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.653] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x284, lpOverlapped=0x0) returned 1
	[0258.654] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x290, lpOverlapped=0x0) returned 1
	[0258.655] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.655] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.655] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.655] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x284, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x284, lpOverlapped=0x0) returned 1
	[0258.655] FlushFileBuffers (hFile=0x244) returned 1
	[0258.658] FlushFileBuffers (hFile=0x210) returned 1
	[0258.660] CloseHandle (hObject=0x244) returned 1
	[0258.660] CloseHandle (hObject=0x210) returned 1
	[0258.660] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png")) returned 1
	[0258.661] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.662] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11524) returned 1
	[0258.662] CloseHandle (hObject=0x210) returned 1
	[0258.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg")) returned 0x2020
	[0258.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg")) returned 0x2020
	[0258.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.662] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.662] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.663] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.663] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.663] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2d04, lpOverlapped=0x0) returned 1
	[0258.665] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2d10, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2d10, lpOverlapped=0x0) returned 1
	[0258.666] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.666] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.666] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.666] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2d04, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2d04, lpOverlapped=0x0) returned 1
	[0258.666] FlushFileBuffers (hFile=0x210) returned 1
	[0258.670] FlushFileBuffers (hFile=0x244) returned 1
	[0258.672] CloseHandle (hObject=0x210) returned 1
	[0258.672] CloseHandle (hObject=0x244) returned 1
	[0258.672] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg")) returned 1
	[0258.673] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.674] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2147) returned 1
	[0258.674] CloseHandle (hObject=0x244) returned 1
	[0258.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg")) returned 0x2020
	[0258.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg")) returned 0x2020
	[0258.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.674] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.674] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.674] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.674] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.675] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x863, lpOverlapped=0x0) returned 1
	[0258.676] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x870, lpOverlapped=0x0) returned 1
	[0258.677] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.677] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.677] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.678] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x863, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x863, lpOverlapped=0x0) returned 1
	[0258.678] FlushFileBuffers (hFile=0x244) returned 1
	[0258.680] FlushFileBuffers (hFile=0x210) returned 1
	[0258.681] CloseHandle (hObject=0x244) returned 1
	[0258.682] CloseHandle (hObject=0x210) returned 1
	[0258.682] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg")) returned 1
	[0258.683] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.683] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=693) returned 1
	[0258.683] CloseHandle (hObject=0x210) returned 1
	[0258.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png")) returned 0x2020
	[0258.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png")) returned 0x2020
	[0258.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.684] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.684] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.684] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.684] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.684] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2b5, lpOverlapped=0x0) returned 1
	[0258.686] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2c0, lpOverlapped=0x0) returned 1
	[0258.687] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.687] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.687] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.687] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2b5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2b5, lpOverlapped=0x0) returned 1
	[0258.687] FlushFileBuffers (hFile=0x210) returned 1
	[0258.690] FlushFileBuffers (hFile=0x244) returned 1
	[0258.691] CloseHandle (hObject=0x210) returned 1
	[0258.691] CloseHandle (hObject=0x244) returned 1
	[0258.691] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png")) returned 1
	[0258.692] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.693] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7323) returned 1
	[0258.693] CloseHandle (hObject=0x244) returned 1
	[0258.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg")) returned 0x2020
	[0258.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg")) returned 0x2020
	[0258.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.693] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.693] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.693] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.693] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.694] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1c9b, lpOverlapped=0x0) returned 1
	[0258.696] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1ca0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1ca0, lpOverlapped=0x0) returned 1
	[0258.697] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.697] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.697] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.697] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1c9b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1c9b, lpOverlapped=0x0) returned 1
	[0258.697] FlushFileBuffers (hFile=0x244) returned 1
	[0258.707] FlushFileBuffers (hFile=0x210) returned 1
	[0258.709] CloseHandle (hObject=0x244) returned 1
	[0258.709] CloseHandle (hObject=0x210) returned 1
	[0258.709] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg")) returned 1
	[0258.710] SetEvent (hEvent=0xfc) returned 1
	[0258.710] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.712] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1794) returned 1
	[0258.712] CloseHandle (hObject=0x210) returned 1
	[0258.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg")) returned 0x2020
	[0258.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg")) returned 0x2020
	[0258.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.712] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.712] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.712] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.712] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.713] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x702, lpOverlapped=0x0) returned 1
	[0258.714] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x710, lpOverlapped=0x0) returned 1
	[0258.715] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.715] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.715] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.715] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x702, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x702, lpOverlapped=0x0) returned 1
	[0258.715] FlushFileBuffers (hFile=0x210) returned 1
	[0258.718] FlushFileBuffers (hFile=0x244) returned 1
	[0258.719] CloseHandle (hObject=0x210) returned 1
	[0258.719] CloseHandle (hObject=0x244) returned 1
	[0258.719] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg")) returned 1
	[0258.720] SetEvent (hEvent=0xfc) returned 1
	[0258.720] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.722] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44200) returned 1
	[0258.722] CloseHandle (hObject=0x244) returned 1
	[0258.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg")) returned 0x2020
	[0258.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg")) returned 0x2020
	[0258.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.722] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.722] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.722] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.722] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.723] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xaca8, lpOverlapped=0x0) returned 1
	[0258.725] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xacb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xacb0, lpOverlapped=0x0) returned 1
	[0258.726] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.726] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.726] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.726] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xaca8, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xaca8, lpOverlapped=0x0) returned 1
	[0258.727] FlushFileBuffers (hFile=0x244) returned 1
	[0258.729] FlushFileBuffers (hFile=0x210) returned 1
	[0258.734] CloseHandle (hObject=0x244) returned 1
	[0258.734] CloseHandle (hObject=0x210) returned 1
	[0258.734] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg")) returned 1
	[0258.736] SetEvent (hEvent=0xfc) returned 1
	[0258.736] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.737] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1877) returned 1
	[0258.737] CloseHandle (hObject=0x210) returned 1
	[0258.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg")) returned 0x2020
	[0258.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg")) returned 0x2020
	[0258.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.738] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.738] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.738] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.738] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.738] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x755, lpOverlapped=0x0) returned 1
	[0258.740] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x760, lpOverlapped=0x0) returned 1
	[0258.741] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.741] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.741] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.741] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x755, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x755, lpOverlapped=0x0) returned 1
	[0258.741] FlushFileBuffers (hFile=0x210) returned 1
	[0258.744] FlushFileBuffers (hFile=0x244) returned 1
	[0258.745] CloseHandle (hObject=0x210) returned 1
	[0258.745] CloseHandle (hObject=0x244) returned 1
	[0258.746] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg")) returned 1
	[0258.747] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.748] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7282) returned 1
	[0258.748] CloseHandle (hObject=0x244) returned 1
	[0258.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg")) returned 0x2020
	[0258.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg")) returned 0x2020
	[0258.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.748] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.748] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.748] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.748] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.749] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1c72, lpOverlapped=0x0) returned 1
	[0258.750] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1c80, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1c80, lpOverlapped=0x0) returned 1
	[0258.751] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.751] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.751] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.752] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1c72, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1c72, lpOverlapped=0x0) returned 1
	[0258.752] FlushFileBuffers (hFile=0x244) returned 1
	[0258.754] FlushFileBuffers (hFile=0x210) returned 1
	[0258.755] CloseHandle (hObject=0x244) returned 1
	[0258.755] CloseHandle (hObject=0x210) returned 1
	[0258.756] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg")) returned 1
	[0258.757] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.757] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2595) returned 1
	[0258.757] CloseHandle (hObject=0x210) returned 1
	[0258.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg")) returned 0x2020
	[0258.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg")) returned 0x2020
	[0258.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.758] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.758] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.758] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.758] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.758] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xa23, lpOverlapped=0x0) returned 1
	[0258.760] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa30, lpOverlapped=0x0) returned 1
	[0258.761] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.761] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.761] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.761] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa23, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xa23, lpOverlapped=0x0) returned 1
	[0258.761] FlushFileBuffers (hFile=0x210) returned 1
	[0258.764] FlushFileBuffers (hFile=0x244) returned 1
	[0258.765] CloseHandle (hObject=0x210) returned 1
	[0258.765] CloseHandle (hObject=0x244) returned 1
	[0258.766] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg")) returned 1
	[0258.766] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.767] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7335) returned 1
	[0258.767] CloseHandle (hObject=0x244) returned 1
	[0258.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg")) returned 0x2020
	[0258.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg")) returned 0x2020
	[0258.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.769] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.769] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.769] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.769] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.770] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1ca7, lpOverlapped=0x0) returned 1
	[0258.771] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1cb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1cb0, lpOverlapped=0x0) returned 1
	[0258.772] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.772] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.772] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.773] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1ca7, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1ca7, lpOverlapped=0x0) returned 1
	[0258.773] FlushFileBuffers (hFile=0x244) returned 1
	[0258.775] FlushFileBuffers (hFile=0x210) returned 1
	[0258.777] CloseHandle (hObject=0x244) returned 1
	[0258.780] CloseHandle (hObject=0x210) returned 1
	[0258.780] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg")) returned 1
	[0258.781] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.782] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2543) returned 1
	[0258.782] CloseHandle (hObject=0x210) returned 1
	[0258.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg")) returned 0x2020
	[0258.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg")) returned 0x2020
	[0258.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.782] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.782] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.782] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.782] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.783] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x9ef, lpOverlapped=0x0) returned 1
	[0258.784] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x9f0, lpOverlapped=0x0) returned 1
	[0258.785] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.785] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.785] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.785] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9ef, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x9ef, lpOverlapped=0x0) returned 1
	[0258.786] FlushFileBuffers (hFile=0x210) returned 1
	[0258.789] FlushFileBuffers (hFile=0x244) returned 1
	[0258.790] CloseHandle (hObject=0x210) returned 1
	[0258.790] CloseHandle (hObject=0x244) returned 1
	[0258.790] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg")) returned 1
	[0258.791] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.792] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2386) returned 1
	[0258.792] CloseHandle (hObject=0x244) returned 1
	[0258.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg")) returned 0x2020
	[0258.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg")) returned 0x2020
	[0258.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.792] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.792] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.793] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.793] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.793] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x952, lpOverlapped=0x0) returned 1
	[0258.795] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x960, lpOverlapped=0x0) returned 1
	[0258.796] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.796] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.796] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.796] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x952, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x952, lpOverlapped=0x0) returned 1
	[0258.796] FlushFileBuffers (hFile=0x244) returned 1
	[0258.800] FlushFileBuffers (hFile=0x210) returned 1
	[0258.802] CloseHandle (hObject=0x244) returned 1
	[0258.802] CloseHandle (hObject=0x210) returned 1
	[0258.802] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg")) returned 1
	[0258.803] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.803] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1961) returned 1
	[0258.803] CloseHandle (hObject=0x210) returned 1
	[0258.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg")) returned 0x2020
	[0258.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg")) returned 0x2020
	[0258.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.804] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.804] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.804] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.804] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.804] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7a9, lpOverlapped=0x0) returned 1
	[0258.806] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7b0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7b0, lpOverlapped=0x0) returned 1
	[0258.807] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.807] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.807] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.807] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7a9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7a9, lpOverlapped=0x0) returned 1
	[0258.807] FlushFileBuffers (hFile=0x210) returned 1
	[0258.810] FlushFileBuffers (hFile=0x244) returned 1
	[0258.811] CloseHandle (hObject=0x210) returned 1
	[0258.811] CloseHandle (hObject=0x244) returned 1
	[0258.811] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg")) returned 1
	[0258.812] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.813] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2159) returned 1
	[0258.813] CloseHandle (hObject=0x244) returned 1
	[0258.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg")) returned 0x2020
	[0258.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg")) returned 0x2020
	[0258.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.813] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.813] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.813] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.813] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.814] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x86f, lpOverlapped=0x0) returned 1
	[0258.815] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x870, lpOverlapped=0x0) returned 1
	[0258.817] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.817] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.817] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.817] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x86f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x86f, lpOverlapped=0x0) returned 1
	[0258.817] FlushFileBuffers (hFile=0x244) returned 1
	[0258.820] FlushFileBuffers (hFile=0x210) returned 1
	[0258.821] CloseHandle (hObject=0x244) returned 1
	[0258.821] CloseHandle (hObject=0x210) returned 1
	[0258.821] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg")) returned 1
	[0258.822] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.823] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2088) returned 1
	[0258.823] CloseHandle (hObject=0x210) returned 1
	[0258.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg")) returned 0x2020
	[0258.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg")) returned 0x2020
	[0258.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.823] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.823] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.824] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.824] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.824] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x828, lpOverlapped=0x0) returned 1
	[0258.826] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x830, lpOverlapped=0x0) returned 1
	[0258.827] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.827] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.827] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.827] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x828, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x828, lpOverlapped=0x0) returned 1
	[0258.827] FlushFileBuffers (hFile=0x210) returned 1
	[0258.830] FlushFileBuffers (hFile=0x244) returned 1
	[0258.831] CloseHandle (hObject=0x210) returned 1
	[0258.831] CloseHandle (hObject=0x244) returned 1
	[0258.831] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg")) returned 1
	[0258.832] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.833] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=14432) returned 1
	[0258.833] CloseHandle (hObject=0x244) returned 1
	[0258.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg")) returned 0x2020
	[0258.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg")) returned 0x2020
	[0258.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.833] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.833] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.834] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.834] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.834] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3860, lpOverlapped=0x0) returned 1
	[0258.836] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3870, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3870, lpOverlapped=0x0) returned 1
	[0258.837] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.837] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.837] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.837] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3860, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3860, lpOverlapped=0x0) returned 1
	[0258.837] FlushFileBuffers (hFile=0x244) returned 1
	[0258.840] FlushFileBuffers (hFile=0x210) returned 1
	[0258.841] CloseHandle (hObject=0x244) returned 1
	[0258.841] CloseHandle (hObject=0x210) returned 1
	[0258.841] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg")) returned 1
	[0258.843] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.843] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6565) returned 1
	[0258.843] CloseHandle (hObject=0x210) returned 1
	[0258.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg")) returned 0x2020
	[0258.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg")) returned 0x2020
	[0258.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.844] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.844] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.844] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.844] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.844] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x19a5, lpOverlapped=0x0) returned 1
	[0258.846] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x19b0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x19b0, lpOverlapped=0x0) returned 1
	[0258.847] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.847] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.847] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.847] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x19a5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x19a5, lpOverlapped=0x0) returned 1
	[0258.847] FlushFileBuffers (hFile=0x210) returned 1
	[0258.849] FlushFileBuffers (hFile=0x244) returned 1
	[0258.851] CloseHandle (hObject=0x210) returned 1
	[0258.851] CloseHandle (hObject=0x244) returned 1
	[0258.851] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg")) returned 1
	[0258.852] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.853] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9753) returned 1
	[0258.853] CloseHandle (hObject=0x244) returned 1
	[0258.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg")) returned 0x2020
	[0258.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg")) returned 0x2020
	[0258.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.853] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.853] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.853] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.853] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.854] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2619, lpOverlapped=0x0) returned 1
	[0258.855] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2620, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2620, lpOverlapped=0x0) returned 1
	[0258.856] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.856] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.856] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.856] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2619, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2619, lpOverlapped=0x0) returned 1
	[0258.856] FlushFileBuffers (hFile=0x244) returned 1
	[0258.859] FlushFileBuffers (hFile=0x210) returned 1
	[0258.863] CloseHandle (hObject=0x244) returned 1
	[0258.863] CloseHandle (hObject=0x210) returned 1
	[0258.863] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg")) returned 1
	[0258.864] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.865] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8068) returned 1
	[0258.865] CloseHandle (hObject=0x210) returned 1
	[0258.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg")) returned 0x2020
	[0258.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg")) returned 0x2020
	[0258.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.865] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.865] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.865] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.865] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.866] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1f84, lpOverlapped=0x0) returned 1
	[0258.867] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1f90, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1f90, lpOverlapped=0x0) returned 1
	[0258.868] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.869] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.869] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.869] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1f84, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1f84, lpOverlapped=0x0) returned 1
	[0258.869] FlushFileBuffers (hFile=0x210) returned 1
	[0258.871] FlushFileBuffers (hFile=0x244) returned 1
	[0258.874] CloseHandle (hObject=0x210) returned 1
	[0258.874] CloseHandle (hObject=0x244) returned 1
	[0258.874] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg")) returned 1
	[0258.875] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.875] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7294) returned 1
	[0258.875] CloseHandle (hObject=0x244) returned 1
	[0258.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg")) returned 0x2020
	[0258.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg")) returned 0x2020
	[0258.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.876] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.876] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.876] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.876] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.877] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1c7e, lpOverlapped=0x0) returned 1
	[0258.878] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1c80, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1c80, lpOverlapped=0x0) returned 1
	[0258.879] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.879] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.879] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.879] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1c7e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1c7e, lpOverlapped=0x0) returned 1
	[0258.879] FlushFileBuffers (hFile=0x244) returned 1
	[0258.884] FlushFileBuffers (hFile=0x210) returned 1
	[0258.885] CloseHandle (hObject=0x244) returned 1
	[0258.885] CloseHandle (hObject=0x210) returned 1
	[0258.885] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg")) returned 1
	[0258.886] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.887] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2297) returned 1
	[0258.887] CloseHandle (hObject=0x210) returned 1
	[0258.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg")) returned 0x2020
	[0258.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg")) returned 0x2020
	[0258.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.887] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.887] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.888] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.888] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.888] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x8f9, lpOverlapped=0x0) returned 1
	[0258.890] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x900, lpOverlapped=0x0) returned 1
	[0258.891] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.891] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.891] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.891] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8f9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x8f9, lpOverlapped=0x0) returned 1
	[0258.891] FlushFileBuffers (hFile=0x210) returned 1
	[0258.894] FlushFileBuffers (hFile=0x244) returned 1
	[0258.895] CloseHandle (hObject=0x210) returned 1
	[0258.895] CloseHandle (hObject=0x244) returned 1
	[0258.896] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg")) returned 1
	[0258.897] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.897] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2487) returned 1
	[0258.898] CloseHandle (hObject=0x244) returned 1
	[0258.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg")) returned 0x2020
	[0258.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg")) returned 0x2020
	[0258.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.898] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.898] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.898] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.898] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.899] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x9b7, lpOverlapped=0x0) returned 1
	[0258.900] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x9c0, lpOverlapped=0x0) returned 1
	[0258.901] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.901] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.901] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.901] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9b7, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x9b7, lpOverlapped=0x0) returned 1
	[0258.902] FlushFileBuffers (hFile=0x244) returned 1
	[0258.904] FlushFileBuffers (hFile=0x210) returned 1
	[0258.906] CloseHandle (hObject=0x244) returned 1
	[0258.906] CloseHandle (hObject=0x210) returned 1
	[0258.906] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg")) returned 1
	[0258.907] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.908] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=878) returned 1
	[0258.908] CloseHandle (hObject=0x210) returned 1
	[0258.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png")) returned 0x2020
	[0258.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png")) returned 0x2020
	[0258.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.908] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.908] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.908] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.908] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.909] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x36e, lpOverlapped=0x0) returned 1
	[0258.910] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x370, lpOverlapped=0x0) returned 1
	[0258.911] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.911] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.911] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.912] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x36e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x36e, lpOverlapped=0x0) returned 1
	[0258.912] FlushFileBuffers (hFile=0x210) returned 1
	[0258.914] FlushFileBuffers (hFile=0x244) returned 1
	[0258.916] CloseHandle (hObject=0x210) returned 1
	[0258.917] CloseHandle (hObject=0x244) returned 1
	[0258.917] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png")) returned 1
	[0258.918] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.918] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=575) returned 1
	[0258.919] CloseHandle (hObject=0x244) returned 1
	[0258.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png")) returned 0x2020
	[0258.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png")) returned 0x2020
	[0258.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.919] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.919] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.919] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.919] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.920] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x23f, lpOverlapped=0x0) returned 1
	[0258.921] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x240, lpOverlapped=0x0) returned 1
	[0258.922] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.922] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.922] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.922] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x23f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x23f, lpOverlapped=0x0) returned 1
	[0258.922] FlushFileBuffers (hFile=0x244) returned 1
	[0258.925] FlushFileBuffers (hFile=0x210) returned 1
	[0258.929] CloseHandle (hObject=0x244) returned 1
	[0258.929] CloseHandle (hObject=0x210) returned 1
	[0258.929] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png")) returned 1
	[0258.930] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.931] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11440) returned 1
	[0258.931] CloseHandle (hObject=0x210) returned 1
	[0258.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg")) returned 0x2020
	[0258.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg")) returned 0x2020
	[0258.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.931] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.931] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.932] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.932] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.932] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2cb0, lpOverlapped=0x0) returned 1
	[0258.934] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2cc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2cc0, lpOverlapped=0x0) returned 1
	[0258.935] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.935] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.935] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.935] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2cb0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2cb0, lpOverlapped=0x0) returned 1
	[0258.935] FlushFileBuffers (hFile=0x210) returned 1
	[0258.938] FlushFileBuffers (hFile=0x244) returned 1
	[0258.939] CloseHandle (hObject=0x210) returned 1
	[0258.940] CloseHandle (hObject=0x244) returned 1
	[0258.940] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg")) returned 1
	[0258.941] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.942] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8844) returned 1
	[0258.942] CloseHandle (hObject=0x244) returned 1
	[0258.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg")) returned 0x2020
	[0258.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg")) returned 0x2020
	[0258.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.942] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.942] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.942] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.942] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.943] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x228c, lpOverlapped=0x0) returned 1
	[0258.944] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2290, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2290, lpOverlapped=0x0) returned 1
	[0258.945] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.945] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.945] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.945] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x228c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x228c, lpOverlapped=0x0) returned 1
	[0258.946] FlushFileBuffers (hFile=0x244) returned 1
	[0258.948] FlushFileBuffers (hFile=0x210) returned 1
	[0258.950] CloseHandle (hObject=0x244) returned 1
	[0258.950] CloseHandle (hObject=0x210) returned 1
	[0258.950] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg")) returned 1
	[0258.951] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.952] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44819) returned 1
	[0258.952] CloseHandle (hObject=0x210) returned 1
	[0258.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css")) returned 0x2020
	[0258.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css")) returned 0x2020
	[0258.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.952] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0258.952] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.952] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.952] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0258.953] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xaf13, lpOverlapped=0x0) returned 1
	[0258.955] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xaf20, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xaf20, lpOverlapped=0x0) returned 1
	[0258.956] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0258.957] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.957] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.957] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xaf13, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xaf13, lpOverlapped=0x0) returned 1
	[0258.957] FlushFileBuffers (hFile=0x210) returned 1
	[0258.960] FlushFileBuffers (hFile=0x244) returned 1
	[0258.962] CloseHandle (hObject=0x210) returned 1
	[0258.962] CloseHandle (hObject=0x244) returned 1
	[0258.962] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css")) returned 1
	[0258.964] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.965] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12478) returned 1
	[0258.965] CloseHandle (hObject=0x244) returned 1
	[0258.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css")) returned 0x2020
	[0258.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css")) returned 0x2020
	[0258.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.966] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0258.966] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.966] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0258.966] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0258.967] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x30be, lpOverlapped=0x0) returned 1
	[0258.968] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x30c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x30c0, lpOverlapped=0x0) returned 1
	[0258.969] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0258.969] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.969] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0258.969] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x30be, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x30be, lpOverlapped=0x0) returned 1
	[0258.970] FlushFileBuffers (hFile=0x244) returned 1
	[0259.000] FlushFileBuffers (hFile=0x210) returned 1
	[0259.002] CloseHandle (hObject=0x244) returned 1
	[0259.002] CloseHandle (hObject=0x210) returned 1
	[0259.002] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css")) returned 1
	[0259.003] SetEvent (hEvent=0xfc) returned 1
	[0259.003] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[1].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[1].loaded_0"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.004] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=135645) returned 1
	[0259.004] CloseHandle (hObject=0x210) returned 1
	[0259.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[1].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[1].loaded_0")) returned 0x2020
	[0259.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[1].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[1].loaded_0")) returned 0x2020
	[0259.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[1].loaded_0.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[1].loaded_0.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.004] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[1].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[1].loaded_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.005] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.005] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.005] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[1].loaded_0.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[1].loaded_0.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0259.006] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x211dd, lpOverlapped=0x0) returned 1
	[0259.010] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x211e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x211e0, lpOverlapped=0x0) returned 1
	[0259.012] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0259.013] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.013] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.013] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x211dd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x211dd, lpOverlapped=0x0) returned 1
	[0259.013] FlushFileBuffers (hFile=0x210) returned 1
	[0259.158] FlushFileBuffers (hFile=0x244) returned 1
	[0259.179] CloseHandle (hObject=0x210) returned 1
	[0259.180] CloseHandle (hObject=0x244) returned 1
	[0259.181] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[1].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[1].loaded_0")) returned 1
	[0259.182] SetEvent (hEvent=0xfc) returned 1
	[0259.183] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.184] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=172095) returned 1
	[0259.184] CloseHandle (hObject=0x244) returned 1
	[0259.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css")) returned 0x2020
	[0259.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css")) returned 0x2020
	[0259.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.184] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.184] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.184] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.184] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0259.185] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2a03f, lpOverlapped=0x0) returned 1
	[0259.191] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2a040, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2a040, lpOverlapped=0x0) returned 1
	[0259.195] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0259.195] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.195] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.195] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2a03f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2a03f, lpOverlapped=0x0) returned 1
	[0259.196] FlushFileBuffers (hFile=0x244) returned 1
	[0259.200] FlushFileBuffers (hFile=0x210) returned 1
	[0259.208] CloseHandle (hObject=0x244) returned 1
	[0259.208] CloseHandle (hObject=0x210) returned 1
	[0259.208] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css")) returned 1
	[0259.210] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.210] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43) returned 1
	[0259.211] CloseHandle (hObject=0x210) returned 1
	[0259.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif")) returned 0x2020
	[0259.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif")) returned 0x2020
	[0259.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.211] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.211] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.211] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.211] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0259.212] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2b, lpOverlapped=0x0) returned 1
	[0259.216] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x30, lpOverlapped=0x0) returned 1
	[0259.217] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0259.217] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.217] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.217] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2b, lpOverlapped=0x0) returned 1
	[0259.218] FlushFileBuffers (hFile=0x210) returned 1
	[0259.354] FlushFileBuffers (hFile=0x244) returned 1
	[0259.397] CloseHandle (hObject=0x210) returned 1
	[0259.397] CloseHandle (hObject=0x244) returned 1
	[0259.397] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\collect[1].gif")) returned 1
	[0259.398] SetEvent (hEvent=0xfc) returned 1
	[0259.399] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1d;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.400] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4869) returned 1
	[0259.401] CloseHandle (hObject=0x244) returned 1
	[0259.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1d;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]")) returned 0x2020
	[0259.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1d;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]")) returned 0x2020
	[0259.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1d;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.401] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1d;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.401] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.401] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.401] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1d;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0259.402] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1305, lpOverlapped=0x0) returned 1
	[0259.404] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1310, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1310, lpOverlapped=0x0) returned 1
	[0259.405] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x202, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x202, lpOverlapped=0x0) returned 1
	[0259.405] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.405] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.405] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1305, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1305, lpOverlapped=0x0) returned 1
	[0259.405] FlushFileBuffers (hFile=0x244) returned 1
	[0259.408] FlushFileBuffers (hFile=0x210) returned 1
	[0259.411] CloseHandle (hObject=0x244) returned 1
	[0259.411] CloseHandle (hObject=0x210) returned 1
	[0259.411] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1d;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]")) returned 1
	[0259.412] SetEvent (hEvent=0xfc) returned 1
	[0259.412] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\GoogleInstaller_de[1].application" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\googleinstaller_de[1].application"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.414] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3692) returned 1
	[0259.414] CloseHandle (hObject=0x210) returned 1
	[0259.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\GoogleInstaller_de[1].application" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\googleinstaller_de[1].application")) returned 0x2020
	[0259.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\GoogleInstaller_de[1].application" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\googleinstaller_de[1].application")) returned 0x2020
	[0259.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\GoogleInstaller_de[1].application.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\googleinstaller_de[1].application.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.414] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\GoogleInstaller_de[1].application" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\googleinstaller_de[1].application"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.414] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.414] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.414] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\GoogleInstaller_de[1].application.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\googleinstaller_de[1].application.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0259.415] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe6c, lpOverlapped=0x0) returned 1
	[0259.417] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe70, lpOverlapped=0x0) returned 1
	[0259.417] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0259.418] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.418] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.418] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe6c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe6c, lpOverlapped=0x0) returned 1
	[0259.418] FlushFileBuffers (hFile=0x210) returned 1
	[0259.420] FlushFileBuffers (hFile=0x244) returned 1
	[0259.422] CloseHandle (hObject=0x210) returned 1
	[0259.422] CloseHandle (hObject=0x244) returned 1
	[0259.422] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\GoogleInstaller_de[1].application" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\googleinstaller_de[1].application")) returned 1
	[0259.423] SetEvent (hEvent=0xfc) returned 1
	[0259.423] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.425] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1225) returned 1
	[0259.425] CloseHandle (hObject=0x244) returned 1
	[0259.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[1]")) returned 0x2020
	[0259.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[1]")) returned 0x2020
	[0259.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.425] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.425] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.425] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.425] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0259.426] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4c9, lpOverlapped=0x0) returned 1
	[0259.428] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4d0, lpOverlapped=0x0) returned 1
	[0259.429] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe2, lpOverlapped=0x0) returned 1
	[0259.429] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.430] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.430] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4c9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4c9, lpOverlapped=0x0) returned 1
	[0259.430] FlushFileBuffers (hFile=0x244) returned 1
	[0259.433] FlushFileBuffers (hFile=0x210) returned 1
	[0259.434] CloseHandle (hObject=0x244) returned 1
	[0259.434] CloseHandle (hObject=0x210) returned 1
	[0259.434] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[1]")) returned 1
	[0259.435] SetEvent (hEvent=0xfc) returned 1
	[0259.435] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\latest[1].eot"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.436] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=31299) returned 1
	[0259.436] CloseHandle (hObject=0x210) returned 1
	[0259.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\latest[1].eot")) returned 0x2020
	[0259.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\latest[1].eot")) returned 0x2020
	[0259.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\latest[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\latest[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.437] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\latest[1].eot"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.437] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.437] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.437] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\latest[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\latest[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0259.438] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7a43, lpOverlapped=0x0) returned 1
	[0259.440] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7a50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7a50, lpOverlapped=0x0) returned 1
	[0259.441] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0259.441] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.441] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.441] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7a43, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7a43, lpOverlapped=0x0) returned 1
	[0259.441] FlushFileBuffers (hFile=0x210) returned 1
	[0259.473] FlushFileBuffers (hFile=0x244) returned 1
	[0259.487] CloseHandle (hObject=0x210) returned 1
	[0259.487] CloseHandle (hObject=0x244) returned 1
	[0259.487] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\latest[1].eot")) returned 1
	[0259.488] SetEvent (hEvent=0xfc) returned 1
	[0259.489] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.490] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3781) returned 1
	[0259.490] CloseHandle (hObject=0x244) returned 1
	[0259.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js")) returned 0x2020
	[0259.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js")) returned 0x2020
	[0259.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.490] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.490] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.490] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.490] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0259.491] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xec5, lpOverlapped=0x0) returned 1
	[0259.493] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xed0, lpOverlapped=0x0) returned 1
	[0259.493] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0259.494] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.494] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.494] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xec5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xec5, lpOverlapped=0x0) returned 1
	[0259.494] FlushFileBuffers (hFile=0x244) returned 1
	[0259.498] FlushFileBuffers (hFile=0x210) returned 1
	[0259.501] CloseHandle (hObject=0x244) returned 1
	[0259.501] CloseHandle (hObject=0x210) returned 1
	[0259.501] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MSNIdSync[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\msnidsync[1].js")) returned 1
	[0259.502] SetEvent (hEvent=0xfc) returned 1
	[0259.502] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\only[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\only[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.503] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0259.503] CloseHandle (hObject=0x210) returned 1
	[0259.504] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.505] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=27501) returned 1
	[0259.505] CloseHandle (hObject=0x210) returned 1
	[0259.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js")) returned 0x2020
	[0259.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js")) returned 0x2020
	[0259.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.505] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.505] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.505] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.505] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0259.506] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x6b6d, lpOverlapped=0x0) returned 1
	[0259.512] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6b70, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x6b70, lpOverlapped=0x0) returned 1
	[0259.514] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0259.514] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.514] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.514] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6b6d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x6b6d, lpOverlapped=0x0) returned 1
	[0259.514] FlushFileBuffers (hFile=0x210) returned 1
	[0259.522] FlushFileBuffers (hFile=0x244) returned 1
	[0259.543] CloseHandle (hObject=0x210) returned 1
	[0259.543] CloseHandle (hObject=0x244) returned 1
	[0259.544] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[1].js")) returned 1
	[0259.545] SetEvent (hEvent=0xfc) returned 1
	[0259.545] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.550] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2321) returned 1
	[0259.550] CloseHandle (hObject=0x244) returned 1
	[0259.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg")) returned 0x2020
	[0259.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg")) returned 0x2020
	[0259.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.550] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.550] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.550] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.550] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0259.551] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x911, lpOverlapped=0x0) returned 1
	[0259.553] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x920, lpOverlapped=0x0) returned 1
	[0259.554] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0259.554] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.554] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.554] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x911, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x911, lpOverlapped=0x0) returned 1
	[0259.555] FlushFileBuffers (hFile=0x244) returned 1
	[0259.558] FlushFileBuffers (hFile=0x210) returned 1
	[0259.581] CloseHandle (hObject=0x244) returned 1
	[0259.583] CloseHandle (hObject=0x210) returned 1
	[0259.583] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg")) returned 1
	[0259.584] SetEvent (hEvent=0xfc) returned 1
	[0259.584] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.585] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=32638) returned 1
	[0259.585] CloseHandle (hObject=0x210) returned 1
	[0259.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg")) returned 0x2020
	[0259.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg")) returned 0x2020
	[0259.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.586] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.586] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.586] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.586] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0259.587] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7f7e, lpOverlapped=0x0) returned 1
	[0259.591] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7f80, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7f80, lpOverlapped=0x0) returned 1
	[0259.592] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x132, lpOverlapped=0x0) returned 1
	[0259.592] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.592] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.592] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7f7e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7f7e, lpOverlapped=0x0) returned 1
	[0259.593] FlushFileBuffers (hFile=0x210) returned 1
	[0259.596] FlushFileBuffers (hFile=0x244) returned 1
	[0259.604] CloseHandle (hObject=0x210) returned 1
	[0259.604] CloseHandle (hObject=0x244) returned 1
	[0259.604] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg")) returned 1
	[0259.605] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.606] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=995) returned 1
	[0259.606] CloseHandle (hObject=0x244) returned 1
	[0259.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png")) returned 0x2020
	[0259.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png")) returned 0x2020
	[0259.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.606] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.607] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.607] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.607] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0259.607] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3e3, lpOverlapped=0x0) returned 1
	[0259.614] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3f0, lpOverlapped=0x0) returned 1
	[0259.615] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0259.616] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.616] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.616] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3e3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3e3, lpOverlapped=0x0) returned 1
	[0259.616] FlushFileBuffers (hFile=0x244) returned 1
	[0259.618] FlushFileBuffers (hFile=0x210) returned 1
	[0259.620] CloseHandle (hObject=0x244) returned 1
	[0259.621] CloseHandle (hObject=0x210) returned 1
	[0259.621] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png")) returned 1
	[0259.622] SetEvent (hEvent=0xfc) returned 1
	[0259.622] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.623] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=464) returned 1
	[0259.623] CloseHandle (hObject=0x210) returned 1
	[0259.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png")) returned 0x2020
	[0259.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png")) returned 0x2020
	[0259.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.624] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.624] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.624] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.624] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0259.625] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1d0, lpOverlapped=0x0) returned 1
	[0259.626] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1e0, lpOverlapped=0x0) returned 1
	[0259.627] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0259.627] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.628] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.628] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1d0, lpOverlapped=0x0) returned 1
	[0259.628] FlushFileBuffers (hFile=0x210) returned 1
	[0259.631] FlushFileBuffers (hFile=0x244) returned 1
	[0259.634] CloseHandle (hObject=0x210) returned 1
	[0259.634] CloseHandle (hObject=0x244) returned 1
	[0259.634] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png")) returned 1
	[0259.635] SetEvent (hEvent=0xfc) returned 1
	[0259.635] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.636] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=452) returned 1
	[0259.636] CloseHandle (hObject=0x244) returned 1
	[0259.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png")) returned 0x2020
	[0259.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png")) returned 0x2020
	[0259.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.636] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0259.637] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.637] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.637] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0259.638] ReadFile (in: hFile=0x244, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1c4, lpOverlapped=0x0) returned 1
	[0259.647] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1d0, lpOverlapped=0x0) returned 1
	[0259.649] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0259.650] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.650] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.650] WriteFile (in: hFile=0x244, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1c4, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1c4, lpOverlapped=0x0) returned 1
	[0259.650] FlushFileBuffers (hFile=0x244) returned 1
	[0259.888] FlushFileBuffers (hFile=0x210) returned 1
	[0259.920] CloseHandle (hObject=0x244) returned 1
	[0259.920] CloseHandle (hObject=0x210) returned 1
	[0259.920] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png")) returned 1
	[0259.921] SetEvent (hEvent=0xfc) returned 1
	[0259.921] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.923] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=343) returned 1
	[0259.923] CloseHandle (hObject=0x210) returned 1
	[0259.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png")) returned 0x2020
	[0259.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png")) returned 0x2020
	[0259.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.923] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.923] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.923] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.924] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0259.932] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x157, lpOverlapped=0x0) returned 1
	[0259.934] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x160, lpOverlapped=0x0) returned 1
	[0259.935] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0259.935] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.935] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.935] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x157, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x157, lpOverlapped=0x0) returned 1
	[0259.935] FlushFileBuffers (hFile=0x210) returned 1
	[0259.938] FlushFileBuffers (hFile=0x110) returned 1
	[0259.940] CloseHandle (hObject=0x210) returned 1
	[0259.940] CloseHandle (hObject=0x110) returned 1
	[0259.940] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png")) returned 1
	[0259.941] SetEvent (hEvent=0xfc) returned 1
	[0259.941] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.943] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=927) returned 1
	[0259.943] CloseHandle (hObject=0x110) returned 1
	[0259.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm")) returned 0x2020
	[0259.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm")) returned 0x2020
	[0259.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.944] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.944] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.944] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.944] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0259.945] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x39f, lpOverlapped=0x0) returned 1
	[0259.946] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3a0, lpOverlapped=0x0) returned 1
	[0259.947] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x172, lpOverlapped=0x0) returned 1
	[0259.947] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.947] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.947] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x39f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x39f, lpOverlapped=0x0) returned 1
	[0259.947] FlushFileBuffers (hFile=0x110) returned 1
	[0259.955] FlushFileBuffers (hFile=0x210) returned 1
	[0259.958] CloseHandle (hObject=0x110) returned 1
	[0259.958] CloseHandle (hObject=0x210) returned 1
	[0259.963] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm")) returned 1
	[0259.964] SetEvent (hEvent=0xfc) returned 1
	[0259.964] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.966] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=37341) returned 1
	[0259.966] CloseHandle (hObject=0x210) returned 1
	[0259.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js")) returned 0x2020
	[0259.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js")) returned 0x2020
	[0259.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.966] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.966] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.966] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.966] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0259.967] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x91dd, lpOverlapped=0x0) returned 1
	[0259.972] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x91e0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x91e0, lpOverlapped=0x0) returned 1
	[0259.974] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0259.974] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.975] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.975] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x91dd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x91dd, lpOverlapped=0x0) returned 1
	[0259.975] FlushFileBuffers (hFile=0x210) returned 1
	[0259.980] FlushFileBuffers (hFile=0x110) returned 1
	[0259.982] CloseHandle (hObject=0x210) returned 1
	[0259.982] CloseHandle (hObject=0x110) returned 1
	[0259.982] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adex[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adex[1].js")) returned 1
	[0259.983] SetEvent (hEvent=0xfc) returned 1
	[0259.983] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adfscript[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adfscript[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.984] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=10356) returned 1
	[0259.984] CloseHandle (hObject=0x110) returned 1
	[0259.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adfscript[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adfscript[1]")) returned 0x2020
	[0259.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adfscript[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adfscript[1]")) returned 0x2020
	[0259.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adfscript[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adfscript[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.985] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adfscript[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adfscript[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.985] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.985] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.985] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adfscript[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adfscript[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0259.986] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2874, lpOverlapped=0x0) returned 1
	[0259.988] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2880, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2880, lpOverlapped=0x0) returned 1
	[0259.989] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0259.989] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.989] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0259.989] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2874, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2874, lpOverlapped=0x0) returned 1
	[0259.989] FlushFileBuffers (hFile=0x110) returned 1
	[0259.993] FlushFileBuffers (hFile=0x210) returned 1
	[0259.996] CloseHandle (hObject=0x110) returned 1
	[0259.996] CloseHandle (hObject=0x210) returned 1
	[0259.996] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adfscript[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adfscript[1]")) returned 1
	[0259.997] SetEvent (hEvent=0xfc) returned 1
	[0259.997] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.999] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21083) returned 1
	[0259.999] CloseHandle (hObject=0x210) returned 1
	[0259.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js")) returned 0x2020
	[0259.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js")) returned 0x2020
	[0259.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.999] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0259.999] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.999] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0259.999] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.000] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x525b, lpOverlapped=0x0) returned 1
	[0260.003] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5260, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x5260, lpOverlapped=0x0) returned 1
	[0260.005] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0260.005] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.005] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.005] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x525b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x525b, lpOverlapped=0x0) returned 1
	[0260.005] FlushFileBuffers (hFile=0x210) returned 1
	[0260.010] FlushFileBuffers (hFile=0x110) returned 1
	[0260.019] CloseHandle (hObject=0x210) returned 1
	[0260.019] CloseHandle (hObject=0x110) returned 1
	[0260.019] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\adsWrapperMSNI[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\adswrappermsni[1].js")) returned 1
	[0260.020] SetEvent (hEvent=0xfc) returned 1
	[0260.020] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.022] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=33303) returned 1
	[0260.022] CloseHandle (hObject=0x110) returned 1
	[0260.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg")) returned 0x2020
	[0260.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg")) returned 0x2020
	[0260.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.022] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.022] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.022] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.022] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.023] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x8217, lpOverlapped=0x0) returned 1
	[0260.026] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8220, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x8220, lpOverlapped=0x0) returned 1
	[0260.027] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x132, lpOverlapped=0x0) returned 1
	[0260.027] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.027] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.027] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8217, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x8217, lpOverlapped=0x0) returned 1
	[0260.027] FlushFileBuffers (hFile=0x110) returned 1
	[0260.031] FlushFileBuffers (hFile=0x210) returned 1
	[0260.033] CloseHandle (hObject=0x110) returned 1
	[0260.034] CloseHandle (hObject=0x210) returned 1
	[0260.034] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg")) returned 1
	[0260.035] SetEvent (hEvent=0xfc) returned 1
	[0260.035] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.036] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=71739) returned 1
	[0260.036] CloseHandle (hObject=0x210) returned 1
	[0260.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js")) returned 0x2020
	[0260.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js")) returned 0x2020
	[0260.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.036] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.036] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.036] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.036] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.037] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1183b, lpOverlapped=0x0) returned 1
	[0260.040] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x11840, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x11840, lpOverlapped=0x0) returned 1
	[0260.042] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.043] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.043] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.043] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1183b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1183b, lpOverlapped=0x0) returned 1
	[0260.043] FlushFileBuffers (hFile=0x210) returned 1
	[0260.252] FlushFileBuffers (hFile=0x110) returned 1
	[0260.412] CloseHandle (hObject=0x210) returned 1
	[0260.412] CloseHandle (hObject=0x110) returned 1
	[0260.412] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ast[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ast[1].js")) returned 1
	[0260.413] SetEvent (hEvent=0xfc) returned 1
	[0260.414] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.415] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=325) returned 1
	[0260.415] CloseHandle (hObject=0x110) returned 1
	[0260.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png")) returned 0x2020
	[0260.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png")) returned 0x2020
	[0260.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.416] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.416] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.416] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.416] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.417] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x145, lpOverlapped=0x0) returned 1
	[0260.418] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x150, lpOverlapped=0x0) returned 1
	[0260.419] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.419] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.420] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.420] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x145, lpOverlapped=0x0) returned 1
	[0260.420] FlushFileBuffers (hFile=0x110) returned 1
	[0260.428] FlushFileBuffers (hFile=0x210) returned 1
	[0260.430] CloseHandle (hObject=0x110) returned 1
	[0260.430] CloseHandle (hObject=0x210) returned 1
	[0260.430] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png")) returned 1
	[0260.430] SetEvent (hEvent=0xfc) returned 1
	[0260.431] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.431] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=438) returned 1
	[0260.431] CloseHandle (hObject=0x210) returned 1
	[0260.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png")) returned 0x2020
	[0260.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png")) returned 0x2020
	[0260.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.432] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.432] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.432] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.432] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.433] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1b6, lpOverlapped=0x0) returned 1
	[0260.434] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1c0, lpOverlapped=0x0) returned 1
	[0260.435] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.435] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.435] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.435] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1b6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1b6, lpOverlapped=0x0) returned 1
	[0260.435] FlushFileBuffers (hFile=0x210) returned 1
	[0260.439] FlushFileBuffers (hFile=0x110) returned 1
	[0260.441] CloseHandle (hObject=0x210) returned 1
	[0260.441] CloseHandle (hObject=0x110) returned 1
	[0260.441] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png")) returned 1
	[0260.442] SetEvent (hEvent=0xfc) returned 1
	[0260.442] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.442] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5420) returned 1
	[0260.442] CloseHandle (hObject=0x110) returned 1
	[0260.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg")) returned 0x2020
	[0260.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg")) returned 0x2020
	[0260.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.443] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.443] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.443] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.443] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.444] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x152c, lpOverlapped=0x0) returned 1
	[0260.445] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1530, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1530, lpOverlapped=0x0) returned 1
	[0260.446] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.446] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.446] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.446] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x152c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x152c, lpOverlapped=0x0) returned 1
	[0260.446] FlushFileBuffers (hFile=0x110) returned 1
	[0260.448] FlushFileBuffers (hFile=0x210) returned 1
	[0260.450] CloseHandle (hObject=0x110) returned 1
	[0260.450] CloseHandle (hObject=0x210) returned 1
	[0260.450] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg")) returned 1
	[0260.451] SetEvent (hEvent=0xfc) returned 1
	[0260.451] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.452] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2428) returned 1
	[0260.452] CloseHandle (hObject=0x210) returned 1
	[0260.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg")) returned 0x2020
	[0260.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg")) returned 0x2020
	[0260.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.452] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.452] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.452] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.453] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.453] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x97c, lpOverlapped=0x0) returned 1
	[0260.455] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x980, lpOverlapped=0x0) returned 1
	[0260.455] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.455] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.456] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.456] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x97c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x97c, lpOverlapped=0x0) returned 1
	[0260.456] FlushFileBuffers (hFile=0x210) returned 1
	[0260.476] FlushFileBuffers (hFile=0x110) returned 1
	[0260.478] CloseHandle (hObject=0x210) returned 1
	[0260.478] CloseHandle (hObject=0x110) returned 1
	[0260.479] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg")) returned 1
	[0260.479] SetEvent (hEvent=0xfc) returned 1
	[0260.479] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.480] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2146) returned 1
	[0260.480] CloseHandle (hObject=0x110) returned 1
	[0260.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg")) returned 0x2020
	[0260.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg")) returned 0x2020
	[0260.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.481] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.481] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.481] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.481] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.481] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x862, lpOverlapped=0x0) returned 1
	[0260.487] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x870, lpOverlapped=0x0) returned 1
	[0260.488] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.488] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.488] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.488] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x862, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x862, lpOverlapped=0x0) returned 1
	[0260.488] FlushFileBuffers (hFile=0x110) returned 1
	[0260.495] FlushFileBuffers (hFile=0x210) returned 1
	[0260.497] CloseHandle (hObject=0x110) returned 1
	[0260.497] CloseHandle (hObject=0x210) returned 1
	[0260.497] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg")) returned 1
	[0260.498] SetEvent (hEvent=0xfc) returned 1
	[0260.498] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.499] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15979) returned 1
	[0260.499] CloseHandle (hObject=0x210) returned 1
	[0260.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg")) returned 0x2020
	[0260.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg")) returned 0x2020
	[0260.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.499] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.499] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.499] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.499] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.500] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3e6b, lpOverlapped=0x0) returned 1
	[0260.506] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3e70, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3e70, lpOverlapped=0x0) returned 1
	[0260.507] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.507] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.507] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.507] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3e6b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3e6b, lpOverlapped=0x0) returned 1
	[0260.507] FlushFileBuffers (hFile=0x210) returned 1
	[0260.527] FlushFileBuffers (hFile=0x110) returned 1
	[0260.529] CloseHandle (hObject=0x210) returned 1
	[0260.529] CloseHandle (hObject=0x110) returned 1
	[0260.529] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg")) returned 1
	[0260.530] SetEvent (hEvent=0xfc) returned 1
	[0260.530] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.530] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5417) returned 1
	[0260.530] CloseHandle (hObject=0x110) returned 1
	[0260.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg")) returned 0x2020
	[0260.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg")) returned 0x2020
	[0260.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.531] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.531] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.531] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.531] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.532] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1529, lpOverlapped=0x0) returned 1
	[0260.533] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1530, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1530, lpOverlapped=0x0) returned 1
	[0260.534] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.534] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.534] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.534] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1529, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1529, lpOverlapped=0x0) returned 1
	[0260.534] FlushFileBuffers (hFile=0x110) returned 1
	[0260.537] FlushFileBuffers (hFile=0x210) returned 1
	[0260.539] CloseHandle (hObject=0x110) returned 1
	[0260.539] CloseHandle (hObject=0x210) returned 1
	[0260.539] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg")) returned 1
	[0260.540] SetEvent (hEvent=0xfc) returned 1
	[0260.540] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.541] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=7777) returned 1
	[0260.541] CloseHandle (hObject=0x210) returned 1
	[0260.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg")) returned 0x2020
	[0260.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg")) returned 0x2020
	[0260.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.541] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.541] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.541] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.541] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.542] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1e61, lpOverlapped=0x0) returned 1
	[0260.543] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1e70, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1e70, lpOverlapped=0x0) returned 1
	[0260.544] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.544] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.544] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.544] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1e61, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1e61, lpOverlapped=0x0) returned 1
	[0260.545] FlushFileBuffers (hFile=0x210) returned 1
	[0260.547] FlushFileBuffers (hFile=0x110) returned 1
	[0260.549] CloseHandle (hObject=0x210) returned 1
	[0260.549] CloseHandle (hObject=0x110) returned 1
	[0260.549] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg")) returned 1
	[0260.550] SetEvent (hEvent=0xfc) returned 1
	[0260.550] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.551] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1590) returned 1
	[0260.551] CloseHandle (hObject=0x110) returned 1
	[0260.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg")) returned 0x2020
	[0260.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg")) returned 0x2020
	[0260.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.551] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.551] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.551] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.551] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.552] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x636, lpOverlapped=0x0) returned 1
	[0260.553] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x640, lpOverlapped=0x0) returned 1
	[0260.554] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.554] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.554] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.554] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x636, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x636, lpOverlapped=0x0) returned 1
	[0260.554] FlushFileBuffers (hFile=0x110) returned 1
	[0260.559] FlushFileBuffers (hFile=0x210) returned 1
	[0260.561] CloseHandle (hObject=0x110) returned 1
	[0260.561] CloseHandle (hObject=0x210) returned 1
	[0260.561] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg")) returned 1
	[0260.562] SetEvent (hEvent=0xfc) returned 1
	[0260.562] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.562] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2090) returned 1
	[0260.563] CloseHandle (hObject=0x210) returned 1
	[0260.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg")) returned 0x2020
	[0260.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg")) returned 0x2020
	[0260.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.563] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.563] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.563] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.563] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.564] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x82a, lpOverlapped=0x0) returned 1
	[0260.565] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x830, lpOverlapped=0x0) returned 1
	[0260.566] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.566] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.566] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.566] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x82a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x82a, lpOverlapped=0x0) returned 1
	[0260.566] FlushFileBuffers (hFile=0x210) returned 1
	[0260.569] FlushFileBuffers (hFile=0x110) returned 1
	[0260.570] CloseHandle (hObject=0x210) returned 1
	[0260.570] CloseHandle (hObject=0x110) returned 1
	[0260.570] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg")) returned 1
	[0260.571] SetEvent (hEvent=0xfc) returned 1
	[0260.571] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.571] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5662) returned 1
	[0260.571] CloseHandle (hObject=0x110) returned 1
	[0260.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg")) returned 0x2020
	[0260.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg")) returned 0x2020
	[0260.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.572] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.572] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.572] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.572] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.573] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x161e, lpOverlapped=0x0) returned 1
	[0260.574] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1620, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1620, lpOverlapped=0x0) returned 1
	[0260.575] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.575] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.575] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.575] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x161e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x161e, lpOverlapped=0x0) returned 1
	[0260.575] FlushFileBuffers (hFile=0x110) returned 1
	[0260.578] FlushFileBuffers (hFile=0x210) returned 1
	[0260.580] CloseHandle (hObject=0x110) returned 1
	[0260.580] CloseHandle (hObject=0x210) returned 1
	[0260.580] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg")) returned 1
	[0260.581] SetEvent (hEvent=0xfc) returned 1
	[0260.581] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.582] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=22149) returned 1
	[0260.582] CloseHandle (hObject=0x210) returned 1
	[0260.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg")) returned 0x2020
	[0260.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg")) returned 0x2020
	[0260.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.583] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.583] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.583] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.583] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.583] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5685, lpOverlapped=0x0) returned 1
	[0260.585] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5690, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x5690, lpOverlapped=0x0) returned 1
	[0260.586] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.586] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.586] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.586] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5685, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5685, lpOverlapped=0x0) returned 1
	[0260.586] FlushFileBuffers (hFile=0x210) returned 1
	[0260.594] FlushFileBuffers (hFile=0x110) returned 1
	[0260.595] CloseHandle (hObject=0x210) returned 1
	[0260.595] CloseHandle (hObject=0x110) returned 1
	[0260.596] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg")) returned 1
	[0260.596] SetEvent (hEvent=0xfc) returned 1
	[0260.597] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.598] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12139) returned 1
	[0260.598] CloseHandle (hObject=0x110) returned 1
	[0260.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg")) returned 0x2020
	[0260.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg")) returned 0x2020
	[0260.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.598] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.598] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.598] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.598] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.599] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2f6b, lpOverlapped=0x0) returned 1
	[0260.600] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2f70, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2f70, lpOverlapped=0x0) returned 1
	[0260.601] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.602] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.602] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.602] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2f6b, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2f6b, lpOverlapped=0x0) returned 1
	[0260.602] FlushFileBuffers (hFile=0x110) returned 1
	[0260.618] FlushFileBuffers (hFile=0x210) returned 1
	[0260.620] CloseHandle (hObject=0x110) returned 1
	[0260.620] CloseHandle (hObject=0x210) returned 1
	[0260.620] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg")) returned 1
	[0260.621] SetEvent (hEvent=0xfc) returned 1
	[0260.621] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.622] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=15880) returned 1
	[0260.622] CloseHandle (hObject=0x210) returned 1
	[0260.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg")) returned 0x2020
	[0260.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg")) returned 0x2020
	[0260.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.622] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.622] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.623] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.623] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.624] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3e08, lpOverlapped=0x0) returned 1
	[0260.627] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3e10, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3e10, lpOverlapped=0x0) returned 1
	[0260.628] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.628] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.628] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.628] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3e08, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3e08, lpOverlapped=0x0) returned 1
	[0260.628] FlushFileBuffers (hFile=0x210) returned 1
	[0260.655] FlushFileBuffers (hFile=0x110) returned 1
	[0260.659] CloseHandle (hObject=0x210) returned 1
	[0260.659] CloseHandle (hObject=0x110) returned 1
	[0260.660] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg")) returned 1
	[0260.660] SetEvent (hEvent=0xfc) returned 1
	[0260.661] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.661] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=5877) returned 1
	[0260.661] CloseHandle (hObject=0x110) returned 1
	[0260.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg")) returned 0x2020
	[0260.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg")) returned 0x2020
	[0260.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.662] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.662] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.662] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.662] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.663] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x16f5, lpOverlapped=0x0) returned 1
	[0260.664] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1700, lpOverlapped=0x0) returned 1
	[0260.665] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.666] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.666] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.666] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x16f5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x16f5, lpOverlapped=0x0) returned 1
	[0260.666] FlushFileBuffers (hFile=0x110) returned 1
	[0260.673] FlushFileBuffers (hFile=0x210) returned 1
	[0260.677] CloseHandle (hObject=0x110) returned 1
	[0260.677] CloseHandle (hObject=0x210) returned 1
	[0260.677] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg")) returned 1
	[0260.678] SetEvent (hEvent=0xfc) returned 1
	[0260.678] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.679] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2158) returned 1
	[0260.679] CloseHandle (hObject=0x210) returned 1
	[0260.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg")) returned 0x2020
	[0260.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg")) returned 0x2020
	[0260.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.679] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.679] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.679] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.679] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.680] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x86e, lpOverlapped=0x0) returned 1
	[0260.682] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x870, lpOverlapped=0x0) returned 1
	[0260.683] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.683] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.683] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.684] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x86e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x86e, lpOverlapped=0x0) returned 1
	[0260.684] FlushFileBuffers (hFile=0x210) returned 1
	[0260.688] FlushFileBuffers (hFile=0x110) returned 1
	[0260.695] CloseHandle (hObject=0x210) returned 1
	[0260.695] CloseHandle (hObject=0x110) returned 1
	[0260.695] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg")) returned 1
	[0260.696] SetEvent (hEvent=0xfc) returned 1
	[0260.696] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.697] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2202) returned 1
	[0260.697] CloseHandle (hObject=0x110) returned 1
	[0260.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg")) returned 0x2020
	[0260.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg")) returned 0x2020
	[0260.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.697] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.697] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.697] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.697] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.698] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x89a, lpOverlapped=0x0) returned 1
	[0260.702] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x8a0, lpOverlapped=0x0) returned 1
	[0260.703] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.703] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.703] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.703] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x89a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x89a, lpOverlapped=0x0) returned 1
	[0260.703] FlushFileBuffers (hFile=0x110) returned 1
	[0260.706] FlushFileBuffers (hFile=0x210) returned 1
	[0260.708] CloseHandle (hObject=0x110) returned 1
	[0260.708] CloseHandle (hObject=0x210) returned 1
	[0260.708] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg")) returned 1
	[0260.709] SetEvent (hEvent=0xfc) returned 1
	[0260.709] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.710] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1979) returned 1
	[0260.710] CloseHandle (hObject=0x210) returned 1
	[0260.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg")) returned 0x2020
	[0260.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg")) returned 0x2020
	[0260.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.710] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.710] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.710] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.710] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.711] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7bb, lpOverlapped=0x0) returned 1
	[0260.713] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7c0, lpOverlapped=0x0) returned 1
	[0260.714] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.714] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.714] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.714] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7bb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7bb, lpOverlapped=0x0) returned 1
	[0260.714] FlushFileBuffers (hFile=0x210) returned 1
	[0260.730] FlushFileBuffers (hFile=0x110) returned 1
	[0260.733] CloseHandle (hObject=0x210) returned 1
	[0260.733] CloseHandle (hObject=0x110) returned 1
	[0260.733] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg")) returned 1
	[0260.734] SetEvent (hEvent=0xfc) returned 1
	[0260.734] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.736] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2045) returned 1
	[0260.736] CloseHandle (hObject=0x110) returned 1
	[0260.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg")) returned 0x2020
	[0260.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg")) returned 0x2020
	[0260.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.737] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.737] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.737] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.737] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.738] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7fd, lpOverlapped=0x0) returned 1
	[0260.740] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x800, lpOverlapped=0x0) returned 1
	[0260.741] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.741] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.742] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.742] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7fd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7fd, lpOverlapped=0x0) returned 1
	[0260.742] FlushFileBuffers (hFile=0x110) returned 1
	[0260.750] FlushFileBuffers (hFile=0x210) returned 1
	[0260.754] CloseHandle (hObject=0x110) returned 1
	[0260.754] CloseHandle (hObject=0x210) returned 1
	[0260.755] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg")) returned 1
	[0260.755] SetEvent (hEvent=0xfc) returned 1
	[0260.756] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.756] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=6910) returned 1
	[0260.756] CloseHandle (hObject=0x210) returned 1
	[0260.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg")) returned 0x2020
	[0260.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg")) returned 0x2020
	[0260.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.757] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.757] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.757] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.757] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.757] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1afe, lpOverlapped=0x0) returned 1
	[0260.760] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1b00, lpOverlapped=0x0) returned 1
	[0260.761] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.761] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.761] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.761] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1afe, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1afe, lpOverlapped=0x0) returned 1
	[0260.762] FlushFileBuffers (hFile=0x210) returned 1
	[0260.770] FlushFileBuffers (hFile=0x110) returned 1
	[0260.774] CloseHandle (hObject=0x210) returned 1
	[0260.774] CloseHandle (hObject=0x110) returned 1
	[0260.774] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg")) returned 1
	[0260.775] SetEvent (hEvent=0xfc) returned 1
	[0260.775] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.776] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11979) returned 1
	[0260.776] CloseHandle (hObject=0x110) returned 1
	[0260.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg")) returned 0x2020
	[0260.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg")) returned 0x2020
	[0260.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.776] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.776] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.776] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.776] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.777] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2ecb, lpOverlapped=0x0) returned 1
	[0260.780] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2ed0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2ed0, lpOverlapped=0x0) returned 1
	[0260.781] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.781] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.781] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.781] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2ecb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2ecb, lpOverlapped=0x0) returned 1
	[0260.781] FlushFileBuffers (hFile=0x110) returned 1
	[0260.790] FlushFileBuffers (hFile=0x210) returned 1
	[0260.793] CloseHandle (hObject=0x110) returned 1
	[0260.793] CloseHandle (hObject=0x210) returned 1
	[0260.793] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg")) returned 1
	[0260.794] SetEvent (hEvent=0xfc) returned 1
	[0260.794] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.795] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=9833) returned 1
	[0260.795] CloseHandle (hObject=0x210) returned 1
	[0260.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg")) returned 0x2020
	[0260.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg")) returned 0x2020
	[0260.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.795] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.795] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.795] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.795] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.796] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2669, lpOverlapped=0x0) returned 1
	[0260.798] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2670, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2670, lpOverlapped=0x0) returned 1
	[0260.801] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.802] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.802] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.802] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2669, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2669, lpOverlapped=0x0) returned 1
	[0260.802] FlushFileBuffers (hFile=0x210) returned 1
	[0260.809] FlushFileBuffers (hFile=0x110) returned 1
	[0260.814] CloseHandle (hObject=0x210) returned 1
	[0260.814] CloseHandle (hObject=0x110) returned 1
	[0260.814] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg")) returned 1
	[0260.815] SetEvent (hEvent=0xfc) returned 1
	[0260.815] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.816] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12259) returned 1
	[0260.816] CloseHandle (hObject=0x110) returned 1
	[0260.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg")) returned 0x2020
	[0260.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg")) returned 0x2020
	[0260.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.817] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.817] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.817] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.817] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.817] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2fe3, lpOverlapped=0x0) returned 1
	[0260.820] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2ff0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2ff0, lpOverlapped=0x0) returned 1
	[0260.821] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.821] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.821] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.821] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2fe3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2fe3, lpOverlapped=0x0) returned 1
	[0260.821] FlushFileBuffers (hFile=0x110) returned 1
	[0260.832] FlushFileBuffers (hFile=0x210) returned 1
	[0260.841] CloseHandle (hObject=0x110) returned 1
	[0260.842] CloseHandle (hObject=0x210) returned 1
	[0260.842] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg")) returned 1
	[0260.846] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.855] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2245) returned 1
	[0260.855] CloseHandle (hObject=0x210) returned 1
	[0260.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg")) returned 0x2020
	[0260.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg")) returned 0x2020
	[0260.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.857] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0260.857] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.857] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.857] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0260.858] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x8c5, lpOverlapped=0x0) returned 1
	[0260.860] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x8d0, lpOverlapped=0x0) returned 1
	[0260.861] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.861] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.861] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.861] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8c5, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x8c5, lpOverlapped=0x0) returned 1
	[0260.861] FlushFileBuffers (hFile=0x210) returned 1
	[0260.864] FlushFileBuffers (hFile=0x110) returned 1
	[0260.865] CloseHandle (hObject=0x210) returned 1
	[0260.865] CloseHandle (hObject=0x110) returned 1
	[0260.865] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg")) returned 1
	[0260.866] SetEvent (hEvent=0xfc) returned 1
	[0260.866] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.867] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=13091) returned 1
	[0260.867] CloseHandle (hObject=0x110) returned 1
	[0260.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg")) returned 0x2020
	[0260.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg")) returned 0x2020
	[0260.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.867] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0260.867] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.867] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0260.868] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0260.868] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x3323, lpOverlapped=0x0) returned 1
	[0260.870] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3330, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x3330, lpOverlapped=0x0) returned 1
	[0260.871] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0260.871] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.871] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0260.871] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x3323, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x3323, lpOverlapped=0x0) returned 1
	[0260.871] FlushFileBuffers (hFile=0x110) returned 1
	[0261.201] FlushFileBuffers (hFile=0x210) returned 1
	[0261.215] CloseHandle (hObject=0x110) returned 1
	[0261.216] CloseHandle (hObject=0x210) returned 1
	[0261.274] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg")) returned 1
	[0261.275] SetEvent (hEvent=0xfc) returned 1
	[0261.279] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\cb=gapi[1].loaded_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\cb=gapi[1].loaded_1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0261.294] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=74370) returned 1
	[0261.294] CloseHandle (hObject=0x210) returned 1
	[0261.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\cb=gapi[1].loaded_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\cb=gapi[1].loaded_1")) returned 0x2020
	[0261.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\cb=gapi[1].loaded_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\cb=gapi[1].loaded_1")) returned 0x2020
	[0261.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\cb=gapi[1].loaded_1.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\cb=gapi[1].loaded_1.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.294] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\cb=gapi[1].loaded_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\cb=gapi[1].loaded_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0261.294] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0261.294] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0261.294] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\cb=gapi[1].loaded_1.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\cb=gapi[1].loaded_1.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0261.295] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x12282, lpOverlapped=0x0) returned 1
	[0261.297] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x12290, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x12290, lpOverlapped=0x0) returned 1
	[0261.299] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0261.300] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0261.300] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0261.300] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x12282, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x12282, lpOverlapped=0x0) returned 1
	[0261.300] FlushFileBuffers (hFile=0x210) returned 1
	[0261.736] FlushFileBuffers (hFile=0x110) returned 1
	[0262.120] CloseHandle (hObject=0x210) returned 1
	[0262.121] CloseHandle (hObject=0x110) returned 1
	[0262.121] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\cb=gapi[1].loaded_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\cb=gapi[1].loaded_1")) returned 1
	[0262.123] SetEvent (hEvent=0xfc) returned 1
	[0262.127] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0262.129] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67) returned 1
	[0262.129] CloseHandle (hObject=0x20c) returned 1
	[0262.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\desktop.ini")) returned 0x2006
	[0262.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\desktop.ini")) returned 0x2006
	[0262.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0262.130] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0262.130] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0262.130] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0262.130] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2006, hTemplateFile=0x0) returned 0x22c
	[0262.131] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x43, lpOverlapped=0x0) returned 1
	[0262.132] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x50, lpOverlapped=0x0) returned 1
	[0262.133] WriteFile (in: hFile=0x22c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0262.133] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0262.133] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0262.133] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x43, lpOverlapped=0x0) returned 1
	[0262.134] FlushFileBuffers (hFile=0x20c) returned 1
	[0262.652] FlushFileBuffers (hFile=0x22c) returned 1
	[0262.858] CloseHandle (hObject=0x20c) returned 1
	[0262.859] CloseHandle (hObject=0x22c) returned 1
	[0262.859] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\desktop.ini")) returned 1
	[0262.860] SetEvent (hEvent=0xfc) returned 1
	[0262.869] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0262.891] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4867) returned 1
	[0262.891] CloseHandle (hObject=0x110) returned 1
	[0262.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]")) returned 0x2020
	[0262.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]")) returned 0x2020
	[0262.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0262.892] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0262.892] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0262.892] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0262.892] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0262.893] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1303, lpOverlapped=0x0) returned 1
	[0262.897] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1310, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1310, lpOverlapped=0x0) returned 1
	[0262.898] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x202, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x202, lpOverlapped=0x0) returned 1
	[0262.899] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0262.899] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0262.899] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1303, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1303, lpOverlapped=0x0) returned 1
	[0262.899] FlushFileBuffers (hFile=0x110) returned 1
	[0262.902] FlushFileBuffers (hFile=0x210) returned 1
	[0262.903] CloseHandle (hObject=0x110) returned 1
	[0262.904] CloseHandle (hObject=0x210) returned 1
	[0262.904] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]")) returned 1
	[0262.921] SetEvent (hEvent=0xfc) returned 1
	[0262.921] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0262.922] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2243) returned 1
	[0262.923] CloseHandle (hObject=0x210) returned 1
	[0262.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]")) returned 0x2020
	[0262.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]")) returned 0x2020
	[0262.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0262.923] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0262.923] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0262.923] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0262.923] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0262.924] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x8c3, lpOverlapped=0x0) returned 1
	[0262.926] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x8d0, lpOverlapped=0x0) returned 1
	[0262.927] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x202, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x202, lpOverlapped=0x0) returned 1
	[0262.927] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0262.927] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0262.927] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x8c3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x8c3, lpOverlapped=0x0) returned 1
	[0262.927] FlushFileBuffers (hFile=0x210) returned 1
	[0262.930] FlushFileBuffers (hFile=0x110) returned 1
	[0262.932] CloseHandle (hObject=0x210) returned 1
	[0262.932] CloseHandle (hObject=0x110) returned 1
	[0262.932] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]")) returned 1
	[0262.933] SetEvent (hEvent=0xfc) returned 1
	[0262.933] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0262.934] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2418) returned 1
	[0262.934] CloseHandle (hObject=0x110) returned 1
	[0262.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]")) returned 0x2020
	[0262.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]")) returned 0x2020
	[0262.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0262.934] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0262.934] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0262.934] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0262.934] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0262.935] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x972, lpOverlapped=0x0) returned 1
	[0262.939] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x980, lpOverlapped=0x0) returned 1
	[0262.939] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x202, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x202, lpOverlapped=0x0) returned 1
	[0262.940] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0262.940] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0262.940] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x972, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x972, lpOverlapped=0x0) returned 1
	[0262.940] FlushFileBuffers (hFile=0x110) returned 1
	[0262.942] FlushFileBuffers (hFile=0x210) returned 1
	[0262.943] CloseHandle (hObject=0x110) returned 1
	[0262.944] CloseHandle (hObject=0x210) returned 1
	[0262.944] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]")) returned 1
	[0262.944] SetEvent (hEvent=0xfc) returned 1
	[0262.945] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0262.946] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=95790) returned 1
	[0262.946] CloseHandle (hObject=0x210) returned 1
	[0262.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js")) returned 0x2020
	[0262.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js")) returned 0x2020
	[0262.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0262.946] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0262.946] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0262.946] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0262.946] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0262.947] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1762e, lpOverlapped=0x0) returned 1
	[0262.950] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x17630, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x17630, lpOverlapped=0x0) returned 1
	[0262.952] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0262.952] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0262.952] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0262.952] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1762e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1762e, lpOverlapped=0x0) returned 1
	[0262.952] FlushFileBuffers (hFile=0x210) returned 1
	[0263.091] FlushFileBuffers (hFile=0x110) returned 1
	[0263.115] CloseHandle (hObject=0x210) returned 1
	[0263.115] CloseHandle (hObject=0x110) returned 1
	[0263.115] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\jquery-1.11.1.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\jquery-1.11.1.min[1].js")) returned 1
	[0263.116] SetEvent (hEvent=0xfc) returned 1
	[0263.117] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[3].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[3].eot"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0263.118] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30643) returned 1
	[0263.118] CloseHandle (hObject=0x110) returned 1
	[0263.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[3].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[3].eot")) returned 0x2020
	[0263.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[3].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[3].eot")) returned 0x2020
	[0263.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[3].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[3].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.118] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[3].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[3].eot"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0263.118] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0263.118] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0263.118] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[3].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[3].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0263.119] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x77b3, lpOverlapped=0x0) returned 1
	[0263.124] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x77c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x77c0, lpOverlapped=0x0) returned 1
	[0263.125] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0263.125] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0263.126] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0263.126] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x77b3, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x77b3, lpOverlapped=0x0) returned 1
	[0263.126] FlushFileBuffers (hFile=0x110) returned 1
	[0263.205] FlushFileBuffers (hFile=0x210) returned 1
	[0263.233] CloseHandle (hObject=0x110) returned 1
	[0263.244] CloseHandle (hObject=0x210) returned 1
	[0263.245] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[3].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[3].eot")) returned 1
	[0263.246] SetEvent (hEvent=0xfc) returned 1
	[0263.247] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\Custom.theme" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\themes\\custom.theme"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0263.248] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1802) returned 1
	[0263.248] CloseHandle (hObject=0x210) returned 1
	[0263.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\Custom.theme" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\themes\\custom.theme")) returned 0x2020
	[0263.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\Custom.theme" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\themes\\custom.theme")) returned 0x2020
	[0263.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\Custom.theme.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\themes\\custom.theme.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.248] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\Custom.theme" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\themes\\custom.theme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0263.248] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0263.248] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0263.248] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\Custom.theme.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\themes\\custom.theme.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0263.250] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x70a, lpOverlapped=0x0) returned 1
	[0263.251] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x710, lpOverlapped=0x0) returned 1
	[0263.252] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0263.252] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0263.252] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0263.252] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x70a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x70a, lpOverlapped=0x0) returned 1
	[0263.252] FlushFileBuffers (hFile=0x210) returned 1
	[0263.255] FlushFileBuffers (hFile=0x114) returned 1
	[0263.258] CloseHandle (hObject=0x210) returned 1
	[0263.258] CloseHandle (hObject=0x114) returned 1
	[0263.258] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\Custom.theme" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\themes\\custom.theme")) returned 1
	[0263.259] SetEvent (hEvent=0xfc) returned 1
	[0263.259] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0263.259] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0263.259] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0263.259] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tm.blf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0263.260] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=65536) returned 1
	[0263.260] CloseHandle (hObject=0x114) returned 1
	[0263.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tm.blf")) returned 0x2026
	[0263.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tm.blf")) returned 0x2026
	[0263.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tm.blf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.261] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0263.261] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0263.262] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=524288) returned 1
	[0263.262] CloseHandle (hObject=0x114) returned 1
	[0263.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000001.regtrans-ms")) returned 0x2026
	[0263.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000001.regtrans-ms")) returned 0x2026
	[0263.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000001.regtrans-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.262] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0263.262] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0263.263] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=524288) returned 1
	[0263.263] CloseHandle (hObject=0x114) returned 1
	[0263.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000002.regtrans-ms")) returned 0x2026
	[0263.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000002.regtrans-ms")) returned 0x2026
	[0263.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000002.regtrans-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.263] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0263.264] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WindowsUpdate.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\windowsupdate.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0263.266] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0263.266] CloseHandle (hObject=0x114) returned 1
	[0263.266] SetEvent (hEvent=0xfc) returned 1
	[0263.266] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0263.266] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1508) returned 1
	[0263.267] CloseHandle (hObject=0x114) returned 1
	[0263.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount")) returned 0x2020
	[0263.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount")) returned 0x2020
	[0263.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.267] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0263.267] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0263.267] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0263.267] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x210
	[0263.268] ReadFile (in: hFile=0x114, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5e4, lpOverlapped=0x0) returned 1
	[0263.269] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x5f0, lpOverlapped=0x0) returned 1
	[0263.270] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x142, lpOverlapped=0x0) returned 1
	[0263.270] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0263.271] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0263.271] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5e4, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5e4, lpOverlapped=0x0) returned 1
	[0263.271] FlushFileBuffers (hFile=0x114) returned 1
	[0263.273] FlushFileBuffers (hFile=0x210) returned 1
	[0263.274] CloseHandle (hObject=0x114) returned 1
	[0263.274] CloseHandle (hObject=0x210) returned 1
	[0263.275] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount")) returned 1
	[0263.275] SetEvent (hEvent=0xfc) returned 1
	[0263.275] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0263.276] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=672) returned 1
	[0263.276] CloseHandle (hObject=0x210) returned 1
	[0263.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount")) returned 0x2020
	[0263.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount")) returned 0x2020
	[0263.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.277] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0263.277] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0263.277] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0263.277] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0263.278] ReadFile (in: hFile=0x210, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2a0, lpOverlapped=0x0) returned 1
	[0263.279] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2b0, lpOverlapped=0x0) returned 1
	[0263.280] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x142, lpOverlapped=0x0) returned 1
	[0263.280] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0263.280] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0263.280] WriteFile (in: hFile=0x210, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2a0, lpOverlapped=0x0) returned 1
	[0263.280] FlushFileBuffers (hFile=0x210) returned 1
	[0263.283] FlushFileBuffers (hFile=0x114) returned 1
	[0263.284] CloseHandle (hObject=0x210) returned 1
	[0263.284] CloseHandle (hObject=0x114) returned 1
	[0263.284] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount")) returned 1
	[0263.285] SetEvent (hEvent=0xfc) returned 1
	[0263.285] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0263.287] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1736) returned 1
	[0263.287] CloseHandle (hObject=0x110) returned 1
	[0263.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount")) returned 0x2020
	[0263.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount")) returned 0x2020
	[0263.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.287] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0263.287] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0263.287] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0263.287] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0263.288] ReadFile (in: hFile=0x110, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x6c8, lpOverlapped=0x0) returned 1
	[0263.290] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x6d0, lpOverlapped=0x0) returned 1
	[0263.290] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x142, lpOverlapped=0x0) returned 1
	[0263.291] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0263.291] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0263.291] WriteFile (in: hFile=0x110, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x6c8, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x6c8, lpOverlapped=0x0) returned 1
	[0263.291] FlushFileBuffers (hFile=0x110) returned 1
	[0263.293] FlushFileBuffers (hFile=0x20c) returned 1
	[0263.295] CloseHandle (hObject=0x110) returned 1
	[0263.295] CloseHandle (hObject=0x20c) returned 1
	[0263.295] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount")) returned 1
	[0263.296] SetEvent (hEvent=0xfc) returned 1
	[0263.296] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0263.298] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2097152) returned 1
	[0263.298] CloseHandle (hObject=0x20c) returned 1
	[0263.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log")) returned 0x2020
	[0263.298] MoveFileW (lpExistingFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0263.299] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0263.300] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0263.300] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0263.300] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x36c0058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.307] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0xaaaaa, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0263.307] ReadFile (in: hFile=0x20c, lpBuffer=0x3700058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x3700058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.310] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x1c0000, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0263.310] ReadFile (in: hFile=0x20c, lpBuffer=0x3740058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x3740058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.321] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd0 | out: lpNewFilePointer=0x0) returned 1
	[0263.321] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x322fbc8, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc8*=0xc0112, lpOverlapped=0x0) returned 1
	[0263.365] SetEndOfFile (hFile=0x20c) returned 1
	[0263.366] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x1c0000, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0263.366] WriteFile (in: hFile=0x20c, lpBuffer=0x378014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378014a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0263.367] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0xaaaaa, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0263.367] WriteFile (in: hFile=0x20c, lpBuffer=0x378014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378014a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0263.369] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0263.369] WriteFile (in: hFile=0x20c, lpBuffer=0x378014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378014a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0263.370] FlushFileBuffers (hFile=0x20c) returned 1
	[0263.497] CloseHandle (hObject=0x20c) returned 1
	[0263.497] SetEvent (hEvent=0xfc) returned 1
	[0263.500] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0263.502] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16384) returned 1
	[0263.502] CloseHandle (hObject=0x260) returned 1
	[0263.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat")) returned 0x2020
	[0263.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat")) returned 0x2020
	[0263.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.502] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0263.502] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0263.502] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0263.502] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0263.503] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4000, lpOverlapped=0x0) returned 1
	[0263.505] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4010, lpOverlapped=0x0) returned 1
	[0263.506] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0263.506] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0263.506] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0263.506] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4000, lpOverlapped=0x0) returned 1
	[0263.506] FlushFileBuffers (hFile=0x260) returned 1
	[0263.536] FlushFileBuffers (hFile=0x114) returned 1
	[0263.570] CloseHandle (hObject=0x260) returned 1
	[0263.570] CloseHandle (hObject=0x114) returned 1
	[0263.570] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat")) returned 1
	[0263.571] SetEvent (hEvent=0xfc) returned 1
	[0263.571] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0263.572] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2097152) returned 1
	[0263.572] CloseHandle (hObject=0x114) returned 1
	[0263.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log")) returned 0x2020
	[0263.573] MoveFileW (lpExistingFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0263.573] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0263.574] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0263.574] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0263.574] ReadFile (in: hFile=0x114, lpBuffer=0x36c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x36c0058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.577] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xaaaaa, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0263.578] ReadFile (in: hFile=0x114, lpBuffer=0x3700058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x3700058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.581] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x1c0000, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0263.581] ReadFile (in: hFile=0x114, lpBuffer=0x3740058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x3740058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.593] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd0 | out: lpNewFilePointer=0x0) returned 1
	[0263.593] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x322fbc8, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc8*=0xc0112, lpOverlapped=0x0) returned 1
	[0263.614] SetEndOfFile (hFile=0x114) returned 1
	[0263.614] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x1c0000, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0263.614] WriteFile (in: hFile=0x114, lpBuffer=0x378014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378014a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0263.615] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xaaaaa, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0263.615] WriteFile (in: hFile=0x114, lpBuffer=0x378014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378014a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0263.637] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0263.637] WriteFile (in: hFile=0x114, lpBuffer=0x378014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378014a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0263.639] FlushFileBuffers (hFile=0x114) returned 1
	[0263.727] CloseHandle (hObject=0x114) returned 1
	[0263.727] SetEvent (hEvent=0xfc) returned 1
	[0263.729] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0263.756] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=2097152) returned 1
	[0263.756] CloseHandle (hObject=0x1b8) returned 1
	[0263.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs")) returned 0x2020
	[0263.757] MoveFileW (lpExistingFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0263.758] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0263.758] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0263.758] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0263.758] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x36c0058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.761] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xaaaaa, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0263.761] ReadFile (in: hFile=0x1b8, lpBuffer=0x3700058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x3700058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.767] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x1c0000, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0263.767] ReadFile (in: hFile=0x1b8, lpBuffer=0x3740058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x3740058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.779] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd0 | out: lpNewFilePointer=0x0) returned 1
	[0263.779] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x322fbc8, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc8*=0xc0112, lpOverlapped=0x0) returned 1
	[0263.801] SetEndOfFile (hFile=0x1b8) returned 1
	[0263.801] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x1c0000, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0263.801] WriteFile (in: hFile=0x1b8, lpBuffer=0x378014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378014a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0263.802] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0xaaaaa, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0263.802] WriteFile (in: hFile=0x1b8, lpBuffer=0x378014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378014a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0263.805] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0263.805] WriteFile (in: hFile=0x1b8, lpBuffer=0x378014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378014a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0263.806] FlushFileBuffers (hFile=0x1b8) returned 1
	[0264.264] CloseHandle (hObject=0x1b8) returned 1
	[0264.264] SetEvent (hEvent=0xfc) returned 1
	[0264.269] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0264.271] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=255) returned 1
	[0264.271] CloseHandle (hObject=0x1b8) returned 1
	[0264.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm")) returned 0x2020
	[0264.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm")) returned 0x2020
	[0264.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.271] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0264.272] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.272] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.272] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0264.273] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xff, lpOverlapped=0x0) returned 1
	[0264.274] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x100, lpOverlapped=0x0) returned 1
	[0264.274] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0264.275] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.275] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.275] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xff, lpOverlapped=0x0) returned 1
	[0264.275] FlushFileBuffers (hFile=0x1b8) returned 1
	[0264.308] FlushFileBuffers (hFile=0x260) returned 1
	[0264.321] CloseHandle (hObject=0x1b8) returned 1
	[0264.328] CloseHandle (hObject=0x260) returned 1
	[0264.330] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm")) returned 1
	[0264.342] SetEvent (hEvent=0xfc) returned 1
	[0264.352] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0264.354] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23871) returned 1
	[0264.372] CloseHandle (hObject=0x260) returned 1
	[0264.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg")) returned 0x2020
	[0264.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg")) returned 0x2020
	[0264.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.374] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0264.375] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.376] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.385] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0264.395] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5d3f, lpOverlapped=0x0) returned 1
	[0264.418] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5d40, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x5d40, lpOverlapped=0x0) returned 1
	[0264.419] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0264.419] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.419] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.419] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5d3f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5d3f, lpOverlapped=0x0) returned 1
	[0264.419] FlushFileBuffers (hFile=0x260) returned 1
	[0264.619] FlushFileBuffers (hFile=0x1b8) returned 1
	[0264.672] CloseHandle (hObject=0x260) returned 1
	[0264.672] CloseHandle (hObject=0x1b8) returned 1
	[0264.672] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg")) returned 1
	[0264.673] SetEvent (hEvent=0xfc) returned 1
	[0264.674] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0264.694] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0264.694] CloseHandle (hObject=0x1b8) returned 1
	[0264.694] SetEvent (hEvent=0xfc) returned 1
	[0264.695] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0264.696] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=498) returned 1
	[0264.696] CloseHandle (hObject=0x1b8) returned 1
	[0264.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd")) returned 0x2020
	[0264.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd")) returned 0x2020
	[0264.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.696] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0264.696] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.697] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.697] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0264.698] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1f2, lpOverlapped=0x0) returned 1
	[0264.698] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x200, lpOverlapped=0x0) returned 1
	[0264.699] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0264.699] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.700] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.700] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1f2, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1f2, lpOverlapped=0x0) returned 1
	[0264.700] FlushFileBuffers (hFile=0x1b8) returned 1
	[0264.726] FlushFileBuffers (hFile=0x260) returned 1
	[0264.749] CloseHandle (hObject=0x1b8) returned 1
	[0264.749] CloseHandle (hObject=0x260) returned 1
	[0264.749] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd")) returned 1
	[0264.750] SetEvent (hEvent=0xfc) returned 1
	[0264.750] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0264.753] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=84) returned 1
	[0264.753] CloseHandle (hObject=0x260) returned 1
	[0264.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\settings.ini")) returned 0x2020
	[0264.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\settings.ini")) returned 0x2020
	[0264.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.753] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0264.753] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.753] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.753] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0264.755] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x54, lpOverlapped=0x0) returned 1
	[0264.756] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x60, lpOverlapped=0x0) returned 1
	[0264.756] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0264.757] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.757] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.757] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x54, lpOverlapped=0x0) returned 1
	[0264.757] FlushFileBuffers (hFile=0x260) returned 1
	[0264.759] FlushFileBuffers (hFile=0x1b8) returned 1
	[0264.761] CloseHandle (hObject=0x260) returned 1
	[0264.769] CloseHandle (hObject=0x1b8) returned 1
	[0264.769] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\settings.ini")) returned 1
	[0264.770] SetEvent (hEvent=0xfc) returned 1
	[0264.770] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0264.772] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46718) returned 1
	[0264.772] CloseHandle (hObject=0x1b8) returned 1
	[0264.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01")) returned 0x2020
	[0264.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01")) returned 0x2020
	[0264.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0264.773] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.773] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0264.775] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb67e, lpOverlapped=0x0) returned 1
	[0264.777] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb680, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb680, lpOverlapped=0x0) returned 1
	[0264.778] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0264.779] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.779] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.779] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb67e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb67e, lpOverlapped=0x0) returned 1
	[0264.779] FlushFileBuffers (hFile=0x1b8) returned 1
	[0264.784] FlushFileBuffers (hFile=0x260) returned 1
	[0264.786] CloseHandle (hObject=0x1b8) returned 1
	[0264.786] CloseHandle (hObject=0x260) returned 1
	[0264.786] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01")) returned 1
	[0264.787] SetEvent (hEvent=0xfc) returned 1
	[0264.787] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0264.788] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=18584) returned 1
	[0264.788] CloseHandle (hObject=0x260) returned 1
	[0264.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01")) returned 0x2020
	[0264.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01")) returned 0x2020
	[0264.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.788] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0264.788] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.788] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.789] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0264.789] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4898, lpOverlapped=0x0) returned 1
	[0264.791] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x48a0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x48a0, lpOverlapped=0x0) returned 1
	[0264.792] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0264.793] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.793] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.793] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4898, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4898, lpOverlapped=0x0) returned 1
	[0264.793] FlushFileBuffers (hFile=0x260) returned 1
	[0264.799] FlushFileBuffers (hFile=0x1b8) returned 1
	[0264.801] CloseHandle (hObject=0x260) returned 1
	[0264.802] CloseHandle (hObject=0x1b8) returned 1
	[0264.802] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01")) returned 1
	[0264.803] SetEvent (hEvent=0xfc) returned 1
	[0264.803] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0264.807] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=132349) returned 1
	[0264.807] CloseHandle (hObject=0x260) returned 1
	[0264.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01")) returned 0x2020
	[0264.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01")) returned 0x2020
	[0264.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.807] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0264.807] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.807] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.807] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0264.808] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x204fd, lpOverlapped=0x0) returned 1
	[0264.812] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x20500, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x20500, lpOverlapped=0x0) returned 1
	[0264.815] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0264.815] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.815] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.815] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x204fd, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x204fd, lpOverlapped=0x0) returned 1
	[0264.816] FlushFileBuffers (hFile=0x260) returned 1
	[0264.874] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.884] CloseHandle (hObject=0x260) returned 1
	[0264.885] CloseHandle (hObject=0x20c) returned 1
	[0264.885] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01")) returned 1
	[0264.887] SetEvent (hEvent=0xfc) returned 1
	[0264.887] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.889] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43525) returned 1
	[0264.889] CloseHandle (hObject=0x20c) returned 1
	[0264.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01")) returned 0x2020
	[0264.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01")) returned 0x2020
	[0264.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.889] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.890] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.890] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.890] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0264.891] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xaa05, lpOverlapped=0x0) returned 1
	[0264.893] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xaa10, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xaa10, lpOverlapped=0x0) returned 1
	[0264.894] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0264.895] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.895] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.895] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xaa05, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xaa05, lpOverlapped=0x0) returned 1
	[0264.895] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.912] FlushFileBuffers (hFile=0x260) returned 1
	[0264.913] CloseHandle (hObject=0x20c) returned 1
	[0264.914] CloseHandle (hObject=0x260) returned 1
	[0264.914] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01")) returned 1
	[0264.915] SetEvent (hEvent=0xfc) returned 1
	[0264.915] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0264.920] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=132419) returned 1
	[0264.920] CloseHandle (hObject=0x260) returned 1
	[0264.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01")) returned 0x2020
	[0264.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01")) returned 0x2020
	[0264.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.920] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0264.920] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.920] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.920] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0264.921] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x20543, lpOverlapped=0x0) returned 1
	[0264.925] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x20550, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x20550, lpOverlapped=0x0) returned 1
	[0264.927] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0264.928] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.928] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.928] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x20543, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x20543, lpOverlapped=0x0) returned 1
	[0264.928] FlushFileBuffers (hFile=0x260) returned 1
	[0264.953] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.955] CloseHandle (hObject=0x260) returned 1
	[0264.955] CloseHandle (hObject=0x20c) returned 1
	[0264.955] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01")) returned 1
	[0264.956] SetEvent (hEvent=0xfc) returned 1
	[0264.957] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.959] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=21327) returned 1
	[0264.959] CloseHandle (hObject=0x20c) returned 1
	[0264.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01")) returned 0x2020
	[0264.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01")) returned 0x2020
	[0264.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.959] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.959] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.959] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.959] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0264.961] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x534f, lpOverlapped=0x0) returned 1
	[0264.963] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5350, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x5350, lpOverlapped=0x0) returned 1
	[0264.964] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0264.965] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.965] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.965] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x534f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x534f, lpOverlapped=0x0) returned 1
	[0264.965] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.985] FlushFileBuffers (hFile=0x260) returned 1
	[0264.988] CloseHandle (hObject=0x20c) returned 1
	[0264.988] CloseHandle (hObject=0x260) returned 1
	[0264.988] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01")) returned 1
	[0264.989] SetEvent (hEvent=0xfc) returned 1
	[0264.989] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0264.990] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43337) returned 1
	[0264.990] CloseHandle (hObject=0x260) returned 1
	[0264.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01")) returned 0x2020
	[0264.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01")) returned 0x2020
	[0264.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.991] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0264.991] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.991] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0264.991] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0264.992] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xa949, lpOverlapped=0x0) returned 1
	[0264.994] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa950, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa950, lpOverlapped=0x0) returned 1
	[0264.995] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0264.996] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.996] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0264.996] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa949, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xa949, lpOverlapped=0x0) returned 1
	[0264.996] FlushFileBuffers (hFile=0x260) returned 1
	[0264.998] FlushFileBuffers (hFile=0x20c) returned 1
	[0265.000] CloseHandle (hObject=0x260) returned 1
	[0265.000] CloseHandle (hObject=0x20c) returned 1
	[0265.000] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01")) returned 1
	[0265.001] SetEvent (hEvent=0xfc) returned 1
	[0265.002] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0265.002] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16463) returned 1
	[0265.002] CloseHandle (hObject=0x20c) returned 1
	[0265.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01")) returned 0x2020
	[0265.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01")) returned 0x2020
	[0265.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0265.003] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0265.003] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0265.003] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0265.003] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0265.004] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x404f, lpOverlapped=0x0) returned 1
	[0265.006] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4050, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4050, lpOverlapped=0x0) returned 1
	[0265.007] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0265.007] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0265.007] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0265.007] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x404f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x404f, lpOverlapped=0x0) returned 1
	[0265.007] FlushFileBuffers (hFile=0x20c) returned 1
	[0265.021] FlushFileBuffers (hFile=0x260) returned 1
	[0265.025] CloseHandle (hObject=0x20c) returned 1
	[0265.025] CloseHandle (hObject=0x260) returned 1
	[0265.026] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01")) returned 1
	[0265.027] SetEvent (hEvent=0xfc) returned 1
	[0265.027] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0265.028] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=137273) returned 1
	[0265.028] CloseHandle (hObject=0x260) returned 1
	[0265.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01")) returned 0x2020
	[0265.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01")) returned 0x2020
	[0265.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0265.028] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0265.028] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0265.029] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0265.029] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0265.029] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x21839, lpOverlapped=0x0) returned 1
	[0265.038] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x21840, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x21840, lpOverlapped=0x0) returned 1
	[0265.041] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0265.041] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0265.041] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0265.041] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x21839, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x21839, lpOverlapped=0x0) returned 1
	[0265.042] FlushFileBuffers (hFile=0x260) returned 1
	[0265.092] FlushFileBuffers (hFile=0x20c) returned 1
	[0265.113] CloseHandle (hObject=0x260) returned 1
	[0265.113] CloseHandle (hObject=0x20c) returned 1
	[0265.113] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01")) returned 1
	[0265.150] SetEvent (hEvent=0xfc) returned 1
	[0265.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0265.190] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4194304) returned 1
	[0265.190] CloseHandle (hObject=0x114) returned 1
	[0265.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_")) returned 0x2020
	[0265.190] MoveFileW (lpExistingFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0265.192] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0265.192] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0265.192] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0265.192] ReadFile (in: hFile=0x114, lpBuffer=0x36c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x36c0058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0265.237] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x155555, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0265.238] ReadFile (in: hFile=0x114, lpBuffer=0x3700058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x3700058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0265.241] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x3c0000, lpNewFilePointer=0x0, dwMoveMethod=0x322fa60 | out: lpNewFilePointer=0x0) returned 1
	[0265.241] ReadFile (in: hFile=0x114, lpBuffer=0x3740058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x322fa6c, lpOverlapped=0x0 | out: lpBuffer=0x3740058*, lpNumberOfBytesRead=0x322fa6c*=0x40000, lpOverlapped=0x0) returned 1
	[0265.253] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd0 | out: lpNewFilePointer=0x0) returned 1
	[0265.253] WriteFile (in: hFile=0x114, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x322fbc8, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc8*=0xc0102, lpOverlapped=0x0) returned 1
	[0265.716] SetEndOfFile (hFile=0x114) returned 1
	[0265.717] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x3c0000, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0265.717] WriteFile (in: hFile=0x114, lpBuffer=0x378013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378013a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0265.719] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x155555, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0265.719] WriteFile (in: hFile=0x114, lpBuffer=0x378013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378013a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0265.721] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fa68 | out: lpNewFilePointer=0x0) returned 1
	[0265.721] WriteFile (in: hFile=0x114, lpBuffer=0x378013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x322fa74, lpOverlapped=0x0 | out: lpBuffer=0x378013a*, lpNumberOfBytesWritten=0x322fa74*=0x40000, lpOverlapped=0x0) returned 1
	[0265.759] FlushFileBuffers (hFile=0x114) returned 1
	[0265.983] CloseHandle (hObject=0x114) returned 1
	[0265.983] SetEvent (hEvent=0xfc) returned 1
	[0265.983] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0265.997] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=8468) returned 1
	[0265.997] CloseHandle (hObject=0x20c) returned 1
	[0265.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_")) returned 0x2020
	[0265.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_")) returned 0x2020
	[0265.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0265.997] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0265.997] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0265.997] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0265.997] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0265.998] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2114, lpOverlapped=0x0) returned 1
	[0265.999] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2120, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2120, lpOverlapped=0x0) returned 1
	[0266.001] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.001] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.001] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.001] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2114, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2114, lpOverlapped=0x0) returned 1
	[0266.001] FlushFileBuffers (hFile=0x20c) returned 1
	[0266.004] FlushFileBuffers (hFile=0x260) returned 1
	[0266.006] CloseHandle (hObject=0x20c) returned 1
	[0266.006] CloseHandle (hObject=0x260) returned 1
	[0266.006] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_")) returned 1
	[0266.007] SetEvent (hEvent=0xfc) returned 1
	[0266.007] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0266.008] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16) returned 1
	[0266.008] CloseHandle (hObject=0x260) returned 1
	[0266.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset")) returned 0x2020
	[0266.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset")) returned 0x2020
	[0266.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.009] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0266.009] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.009] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.009] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0266.010] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10, lpOverlapped=0x0) returned 1
	[0266.010] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x20, lpOverlapped=0x0) returned 1
	[0266.011] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0266.012] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.012] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.012] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10, lpOverlapped=0x0) returned 1
	[0266.012] FlushFileBuffers (hFile=0x260) returned 1
	[0266.031] FlushFileBuffers (hFile=0x20c) returned 1
	[0266.033] CloseHandle (hObject=0x260) returned 1
	[0266.034] CloseHandle (hObject=0x20c) returned 1
	[0266.034] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset")) returned 1
	[0266.047] SetEvent (hEvent=0xfc) returned 1
	[0266.047] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0266.048] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=232) returned 1
	[0266.048] CloseHandle (hObject=0x20c) returned 1
	[0266.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore")) returned 0x2020
	[0266.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore")) returned 0x2020
	[0266.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.048] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0266.049] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.049] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.049] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0266.050] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe8, lpOverlapped=0x0) returned 1
	[0266.051] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0266.051] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0266.052] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.052] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.052] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe8, lpOverlapped=0x0) returned 1
	[0266.052] FlushFileBuffers (hFile=0x20c) returned 1
	[0266.055] FlushFileBuffers (hFile=0x260) returned 1
	[0266.056] CloseHandle (hObject=0x20c) returned 1
	[0266.056] CloseHandle (hObject=0x260) returned 1
	[0266.056] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore")) returned 1
	[0266.057] SetEvent (hEvent=0xfc) returned 1
	[0266.057] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0266.058] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=44) returned 1
	[0266.058] CloseHandle (hObject=0x260) returned 1
	[0266.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache")) returned 0x2020
	[0266.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache")) returned 0x2020
	[0266.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.058] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0266.058] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.058] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.058] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0266.059] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2c, lpOverlapped=0x0) returned 1
	[0266.060] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x30, lpOverlapped=0x0) returned 1
	[0266.061] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0266.061] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.061] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.061] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2c, lpOverlapped=0x0) returned 1
	[0266.061] FlushFileBuffers (hFile=0x260) returned 1
	[0266.065] FlushFileBuffers (hFile=0x20c) returned 1
	[0266.083] CloseHandle (hObject=0x260) returned 1
	[0266.083] CloseHandle (hObject=0x20c) returned 1
	[0266.083] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache")) returned 1
	[0266.084] SetEvent (hEvent=0xfc) returned 1
	[0266.084] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0266.086] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16) returned 1
	[0266.086] CloseHandle (hObject=0x20c) returned 1
	[0266.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset")) returned 0x2020
	[0266.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset")) returned 0x2020
	[0266.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.086] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0266.086] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.086] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.086] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0266.087] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10, lpOverlapped=0x0) returned 1
	[0266.088] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x20, lpOverlapped=0x0) returned 1
	[0266.089] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0266.089] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.089] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.089] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10, lpOverlapped=0x0) returned 1
	[0266.090] FlushFileBuffers (hFile=0x20c) returned 1
	[0266.092] FlushFileBuffers (hFile=0x260) returned 1
	[0266.094] CloseHandle (hObject=0x20c) returned 1
	[0266.094] CloseHandle (hObject=0x260) returned 1
	[0266.094] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset")) returned 1
	[0266.107] SetEvent (hEvent=0xfc) returned 1
	[0266.107] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0266.108] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=232) returned 1
	[0266.108] CloseHandle (hObject=0x260) returned 1
	[0266.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore")) returned 0x2020
	[0266.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore")) returned 0x2020
	[0266.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.108] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0266.109] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.109] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.109] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0266.110] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe8, lpOverlapped=0x0) returned 1
	[0266.111] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf0, lpOverlapped=0x0) returned 1
	[0266.112] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x112, lpOverlapped=0x0) returned 1
	[0266.112] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.112] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.112] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe8, lpOverlapped=0x0) returned 1
	[0266.112] FlushFileBuffers (hFile=0x260) returned 1
	[0266.115] FlushFileBuffers (hFile=0x20c) returned 1
	[0266.117] CloseHandle (hObject=0x260) returned 1
	[0266.117] CloseHandle (hObject=0x20c) returned 1
	[0266.117] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore")) returned 1
	[0266.118] SetEvent (hEvent=0xfc) returned 1
	[0266.118] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0266.119] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=940534) returned 1
	[0266.119] CloseHandle (hObject=0x20c) returned 1
	[0266.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little")) returned 0x2020
	[0266.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little")) returned 0x2020
	[0266.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.119] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0266.120] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.120] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.120] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0266.122] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xe59f6, lpOverlapped=0x0) returned 1
	[0266.140] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe5a00, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xe5a00, lpOverlapped=0x0) returned 1
	[0266.157] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0266.157] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.157] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.157] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xe59f6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xe59f6, lpOverlapped=0x0) returned 1
	[0266.183] FlushFileBuffers (hFile=0x20c) returned 1
	[0266.238] FlushFileBuffers (hFile=0x260) returned 1
	[0266.274] CloseHandle (hObject=0x20c) returned 1
	[0266.274] CloseHandle (hObject=0x260) returned 1
	[0266.274] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little")) returned 1
	[0266.282] SetEvent (hEvent=0xfc) returned 1
	[0266.283] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0266.285] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16560) returned 1
	[0266.285] CloseHandle (hObject=0x260) returned 1
	[0266.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png")) returned 0x2020
	[0266.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png")) returned 0x2020
	[0266.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.285] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0266.285] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.285] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.286] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0266.287] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x40b0, lpOverlapped=0x0) returned 1
	[0266.289] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x40c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x40c0, lpOverlapped=0x0) returned 1
	[0266.290] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x122, lpOverlapped=0x0) returned 1
	[0266.290] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.290] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.290] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x40b0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x40b0, lpOverlapped=0x0) returned 1
	[0266.290] FlushFileBuffers (hFile=0x260) returned 1
	[0266.397] FlushFileBuffers (hFile=0x20c) returned 1
	[0266.412] CloseHandle (hObject=0x260) returned 1
	[0266.412] CloseHandle (hObject=0x20c) returned 1
	[0266.412] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png")) returned 1
	[0266.413] SetEvent (hEvent=0xfc) returned 1
	[0266.413] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0266.415] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1) returned 1
	[0266.415] CloseHandle (hObject=0x20c) returned 1
	[0266.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_")) returned 0x2020
	[0266.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_")) returned 0x2020
	[0266.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.416] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0266.416] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.416] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.416] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0266.417] ReadFile (in: hFile=0x20c, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1, lpOverlapped=0x0) returned 1
	[0266.418] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x10, lpOverlapped=0x0) returned 1
	[0266.419] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.419] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.419] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.419] WriteFile (in: hFile=0x20c, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1, lpOverlapped=0x0) returned 1
	[0266.419] FlushFileBuffers (hFile=0x20c) returned 1
	[0266.423] FlushFileBuffers (hFile=0x260) returned 1
	[0266.535] CloseHandle (hObject=0x20c) returned 1
	[0266.536] CloseHandle (hObject=0x260) returned 1
	[0266.536] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_")) returned 1
	[0266.537] SetEvent (hEvent=0xfc) returned 1
	[0266.537] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.542] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1124) returned 1
	[0266.542] CloseHandle (hObject=0x1b8) returned 1
	[0266.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml")) returned 0x2020
	[0266.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml")) returned 0x2020
	[0266.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.543] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.543] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.543] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.543] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0266.544] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x464, lpOverlapped=0x0) returned 1
	[0266.545] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x470, lpOverlapped=0x0) returned 1
	[0266.546] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0266.547] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.547] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.547] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x464, lpOverlapped=0x0) returned 1
	[0266.547] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.549] FlushFileBuffers (hFile=0x260) returned 1
	[0266.550] CloseHandle (hObject=0x1b8) returned 1
	[0266.550] CloseHandle (hObject=0x260) returned 1
	[0266.551] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml")) returned 1
	[0266.551] SetEvent (hEvent=0xfc) returned 1
	[0266.552] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0266.553] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=600000) returned 1
	[0266.553] CloseHandle (hObject=0x260) returned 1
	[0266.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar")) returned 0x2020
	[0266.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar")) returned 0x2020
	[0266.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.553] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0266.553] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.553] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.553] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0266.554] ReadFile (in: hFile=0x260, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x927c0, lpOverlapped=0x0) returned 1
	[0266.568] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x927d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x927d0, lpOverlapped=0x0) returned 1
	[0266.579] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.579] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.579] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.579] WriteFile (in: hFile=0x260, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x927c0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x927c0, lpOverlapped=0x0) returned 1
	[0266.581] FlushFileBuffers (hFile=0x260) returned 1
	[0266.755] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.764] CloseHandle (hObject=0x260) returned 1
	[0266.765] CloseHandle (hObject=0x1b8) returned 1
	[0266.765] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar")) returned 1
	[0266.770] SetEvent (hEvent=0xfc) returned 1
	[0266.770] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.772] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=12) returned 1
	[0266.772] CloseHandle (hObject=0x1b8) returned 1
	[0266.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status")) returned 0x2020
	[0266.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status")) returned 0x2020
	[0266.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.772] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.773] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.773] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0266.776] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xc, lpOverlapped=0x0) returned 1
	[0266.777] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x10, lpOverlapped=0x0) returned 1
	[0266.778] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.778] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.778] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.778] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xc, lpOverlapped=0x0) returned 1
	[0266.778] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.781] FlushFileBuffers (hFile=0x254) returned 1
	[0266.783] CloseHandle (hObject=0x1b8) returned 1
	[0266.783] CloseHandle (hObject=0x254) returned 1
	[0266.783] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status")) returned 1
	[0266.784] SetEvent (hEvent=0xfc) returned 1
	[0266.784] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.785] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=57) returned 1
	[0266.785] CloseHandle (hObject=0x254) returned 1
	[0266.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml")) returned 0x2020
	[0266.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml")) returned 0x2020
	[0266.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.785] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.785] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.785] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.786] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0266.786] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x39, lpOverlapped=0x0) returned 1
	[0266.787] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x40, lpOverlapped=0x0) returned 1
	[0266.789] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.790] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.790] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.790] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x39, lpOverlapped=0x0) returned 1
	[0266.790] FlushFileBuffers (hFile=0x254) returned 1
	[0266.795] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.797] CloseHandle (hObject=0x254) returned 1
	[0266.797] CloseHandle (hObject=0x1b8) returned 1
	[0266.797] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml")) returned 1
	[0266.798] SetEvent (hEvent=0xfc) returned 1
	[0266.798] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0CyEX1bdaUTstsgk.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0cyex1bdautstsgk.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.799] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=11402) returned 1
	[0266.799] CloseHandle (hObject=0x1b8) returned 1
	[0266.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0CyEX1bdaUTstsgk.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0cyex1bdautstsgk.bmp")) returned 0x2020
	[0266.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0CyEX1bdaUTstsgk.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0cyex1bdautstsgk.bmp")) returned 0x2020
	[0266.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0CyEX1bdaUTstsgk.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0cyex1bdautstsgk.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.800] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0CyEX1bdaUTstsgk.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0cyex1bdautstsgk.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.800] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.800] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.800] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0CyEX1bdaUTstsgk.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0cyex1bdautstsgk.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0266.801] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x2c8a, lpOverlapped=0x0) returned 1
	[0266.802] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2c90, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x2c90, lpOverlapped=0x0) returned 1
	[0266.806] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0266.806] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.806] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.806] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x2c8a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x2c8a, lpOverlapped=0x0) returned 1
	[0266.806] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.809] FlushFileBuffers (hFile=0x254) returned 1
	[0266.810] CloseHandle (hObject=0x1b8) returned 1
	[0266.810] CloseHandle (hObject=0x254) returned 1
	[0266.811] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0CyEX1bdaUTstsgk.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0cyex1bdautstsgk.bmp")) returned 1
	[0266.812] SetEvent (hEvent=0xfc) returned 1
	[0266.812] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0xCgXbTFGg8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0xcgxbtfgg8.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.813] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=53037) returned 1
	[0266.813] CloseHandle (hObject=0x254) returned 1
	[0266.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0xCgXbTFGg8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0xcgxbtfgg8.bmp")) returned 0x2020
	[0266.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0xCgXbTFGg8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0xcgxbtfgg8.bmp")) returned 0x2020
	[0266.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0xCgXbTFGg8.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0xcgxbtfgg8.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.813] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0xCgXbTFGg8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0xcgxbtfgg8.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.813] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.813] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.813] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0xCgXbTFGg8.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0xcgxbtfgg8.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0266.814] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xcf2d, lpOverlapped=0x0) returned 1
	[0266.816] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xcf30, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xcf30, lpOverlapped=0x0) returned 1
	[0266.818] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.818] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.818] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.818] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xcf2d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xcf2d, lpOverlapped=0x0) returned 1
	[0266.818] FlushFileBuffers (hFile=0x254) returned 1
	[0266.823] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.824] CloseHandle (hObject=0x254) returned 1
	[0266.824] CloseHandle (hObject=0x1b8) returned 1
	[0266.824] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0xCgXbTFGg8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0xcgxbtfgg8.bmp")) returned 1
	[0266.825] SetEvent (hEvent=0xfc) returned 1
	[0266.826] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.826] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=1534) returned 1
	[0266.826] CloseHandle (hObject=0x1b8) returned 1
	[0266.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log")) returned 0x2020
	[0266.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log")) returned 0x2020
	[0266.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.827] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.827] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.827] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.827] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0266.827] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5fe, lpOverlapped=0x0) returned 1
	[0266.828] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x600, lpOverlapped=0x0) returned 1
	[0266.829] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.829] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.829] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.829] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5fe, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5fe, lpOverlapped=0x0) returned 1
	[0266.830] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.832] FlushFileBuffers (hFile=0x254) returned 1
	[0266.833] CloseHandle (hObject=0x1b8) returned 1
	[0266.833] CloseHandle (hObject=0x254) returned 1
	[0266.833] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log")) returned 1
	[0266.834] SetEvent (hEvent=0xfc) returned 1
	[0266.834] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cf86wM.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cf86wm.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.836] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=3233) returned 1
	[0266.836] CloseHandle (hObject=0x254) returned 1
	[0266.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cf86wM.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cf86wm.bmp")) returned 0x2020
	[0266.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cf86wM.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cf86wm.bmp")) returned 0x2020
	[0266.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cf86wM.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cf86wm.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.840] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cf86wM.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cf86wm.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.840] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.840] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.840] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cf86wM.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cf86wm.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0266.841] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xca1, lpOverlapped=0x0) returned 1
	[0266.842] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xcb0, lpOverlapped=0x0) returned 1
	[0266.843] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.843] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.844] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.844] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xca1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xca1, lpOverlapped=0x0) returned 1
	[0266.844] FlushFileBuffers (hFile=0x254) returned 1
	[0266.846] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.847] CloseHandle (hObject=0x254) returned 1
	[0266.847] CloseHandle (hObject=0x1b8) returned 1
	[0266.847] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cf86wM.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cf86wm.bmp")) returned 1
	[0266.848] SetEvent (hEvent=0xfc) returned 1
	[0266.848] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.849] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16384) returned 1
	[0266.849] CloseHandle (hObject=0x1b8) returned 1
	[0266.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat")) returned 0x2026
	[0266.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat")) returned 0x2026
	[0266.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.850] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.850] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.850] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.850] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x254
	[0266.850] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4000, lpOverlapped=0x0) returned 1
	[0266.854] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4010, lpOverlapped=0x0) returned 1
	[0266.855] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.855] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.855] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.855] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4000, lpOverlapped=0x0) returned 1
	[0266.855] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.860] FlushFileBuffers (hFile=0x254) returned 1
	[0266.862] CloseHandle (hObject=0x1b8) returned 1
	[0266.862] CloseHandle (hObject=0x254) returned 1
	[0266.862] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat")) returned 1
	[0266.863] SetEvent (hEvent=0xfc) returned 1
	[0266.863] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fJEj 5HP.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fjej 5hp.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.864] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=98038) returned 1
	[0266.864] CloseHandle (hObject=0x254) returned 1
	[0266.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fJEj 5HP.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fjej 5hp.bmp")) returned 0x2020
	[0266.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fJEj 5HP.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fjej 5hp.bmp")) returned 0x2020
	[0266.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fJEj 5HP.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fjej 5hp.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.865] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fJEj 5HP.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fjej 5hp.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.865] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.865] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.865] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fJEj 5HP.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fjej 5hp.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0266.865] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x17ef6, lpOverlapped=0x0) returned 1
	[0266.868] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x17f00, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x17f00, lpOverlapped=0x0) returned 1
	[0266.871] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.871] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.871] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.871] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x17ef6, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x17ef6, lpOverlapped=0x0) returned 1
	[0266.871] FlushFileBuffers (hFile=0x254) returned 1
	[0266.874] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.876] CloseHandle (hObject=0x254) returned 1
	[0266.876] CloseHandle (hObject=0x1b8) returned 1
	[0266.876] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fJEj 5HP.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fjej 5hp.bmp")) returned 1
	[0266.877] SetEvent (hEvent=0xfc) returned 1
	[0266.877] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.878] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=0) returned 1
	[0266.878] CloseHandle (hObject=0x1b8) returned 1
	[0266.878] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gfgz4rWfp7oT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gfgz4rwfp7ot.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.881] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=85919) returned 1
	[0266.881] CloseHandle (hObject=0x1b8) returned 1
	[0266.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gfgz4rWfp7oT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gfgz4rwfp7ot.mp3")) returned 0x2020
	[0266.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gfgz4rWfp7oT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gfgz4rwfp7ot.mp3")) returned 0x2020
	[0266.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gfgz4rWfp7oT.mp3.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gfgz4rwfp7ot.mp3.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.881] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gfgz4rWfp7oT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gfgz4rwfp7ot.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.881] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.881] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.881] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gfgz4rWfp7oT.mp3.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gfgz4rwfp7ot.mp3.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0266.882] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x14f9f, lpOverlapped=0x0) returned 1
	[0266.885] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x14fa0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x14fa0, lpOverlapped=0x0) returned 1
	[0266.887] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0266.887] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.887] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.887] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x14f9f, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x14f9f, lpOverlapped=0x0) returned 1
	[0266.887] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.889] FlushFileBuffers (hFile=0x254) returned 1
	[0266.891] CloseHandle (hObject=0x1b8) returned 1
	[0266.891] CloseHandle (hObject=0x254) returned 1
	[0266.891] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gfgz4rWfp7oT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gfgz4rwfp7ot.mp3")) returned 1
	[0266.892] SetEvent (hEvent=0xfc) returned 1
	[0266.892] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gg4xk1N.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gg4xk1n.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.893] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=71802) returned 1
	[0266.893] CloseHandle (hObject=0x254) returned 1
	[0266.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gg4xk1N.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gg4xk1n.flv")) returned 0x2020
	[0266.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gg4xk1N.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gg4xk1n.flv")) returned 0x2020
	[0266.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gg4xk1N.flv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gg4xk1n.flv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.893] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gg4xk1N.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gg4xk1n.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.893] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.894] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.894] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gg4xk1N.flv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gg4xk1n.flv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0266.894] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1187a, lpOverlapped=0x0) returned 1
	[0266.897] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x11880, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x11880, lpOverlapped=0x0) returned 1
	[0266.899] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.899] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.899] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.899] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1187a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1187a, lpOverlapped=0x0) returned 1
	[0266.899] FlushFileBuffers (hFile=0x254) returned 1
	[0266.902] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.903] CloseHandle (hObject=0x254) returned 1
	[0266.903] CloseHandle (hObject=0x1b8) returned 1
	[0266.903] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Gg4xk1N.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gg4xk1n.flv")) returned 1
	[0266.904] SetEvent (hEvent=0xfc) returned 1
	[0266.904] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gVnNwVh4Hp2qq-cKD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gvnnwvh4hp2qq-ckd.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.906] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=23995) returned 1
	[0266.906] CloseHandle (hObject=0x1b8) returned 1
	[0266.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gVnNwVh4Hp2qq-cKD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gvnnwvh4hp2qq-ckd.swf")) returned 0x2020
	[0266.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gVnNwVh4Hp2qq-cKD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gvnnwvh4hp2qq-ckd.swf")) returned 0x2020
	[0266.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gVnNwVh4Hp2qq-cKD.swf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gvnnwvh4hp2qq-ckd.swf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.906] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gVnNwVh4Hp2qq-cKD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gvnnwvh4hp2qq-ckd.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.906] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.906] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.906] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gVnNwVh4Hp2qq-cKD.swf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gvnnwvh4hp2qq-ckd.swf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0266.907] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x5dbb, lpOverlapped=0x0) returned 1
	[0266.909] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5dc0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x5dc0, lpOverlapped=0x0) returned 1
	[0266.910] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0266.910] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.910] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.910] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x5dbb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x5dbb, lpOverlapped=0x0) returned 1
	[0266.910] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.912] FlushFileBuffers (hFile=0x254) returned 1
	[0266.914] CloseHandle (hObject=0x1b8) returned 1
	[0266.914] CloseHandle (hObject=0x254) returned 1
	[0266.914] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gVnNwVh4Hp2qq-cKD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gvnnwvh4hp2qq-ckd.swf")) returned 1
	[0266.915] SetEvent (hEvent=0xfc) returned 1
	[0266.915] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\H6EkUkPNBU5LkRGeQ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\h6ekukpnbu5lkrgeq.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.916] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=42110) returned 1
	[0266.916] CloseHandle (hObject=0x254) returned 1
	[0266.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\H6EkUkPNBU5LkRGeQ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\h6ekukpnbu5lkrgeq.png")) returned 0x2020
	[0266.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\H6EkUkPNBU5LkRGeQ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\h6ekukpnbu5lkrgeq.png")) returned 0x2020
	[0266.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\H6EkUkPNBU5LkRGeQ.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\h6ekukpnbu5lkrgeq.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.917] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\H6EkUkPNBU5LkRGeQ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\h6ekukpnbu5lkrgeq.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.917] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.917] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.917] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\H6EkUkPNBU5LkRGeQ.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\h6ekukpnbu5lkrgeq.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0266.917] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xa47e, lpOverlapped=0x0) returned 1
	[0266.919] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa480, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa480, lpOverlapped=0x0) returned 1
	[0266.921] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0266.921] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.921] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.921] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa47e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xa47e, lpOverlapped=0x0) returned 1
	[0266.921] FlushFileBuffers (hFile=0x254) returned 1
	[0266.926] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.928] CloseHandle (hObject=0x254) returned 1
	[0266.928] CloseHandle (hObject=0x1b8) returned 1
	[0266.928] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\H6EkUkPNBU5LkRGeQ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\h6ekukpnbu5lkrgeq.png")) returned 1
	[0266.929] SetEvent (hEvent=0xfc) returned 1
	[0266.929] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.930] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=145) returned 1
	[0266.930] CloseHandle (hObject=0x1b8) returned 1
	[0266.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini")) returned 0x2006
	[0266.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini")) returned 0x2006
	[0266.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.930] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.930] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.931] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.931] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2006, hTemplateFile=0x0) returned 0x254
	[0266.931] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x91, lpOverlapped=0x0) returned 1
	[0266.932] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xa0, lpOverlapped=0x0) returned 1
	[0266.933] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.933] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.933] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.933] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x91, lpOverlapped=0x0) returned 1
	[0266.933] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.936] FlushFileBuffers (hFile=0x254) returned 1
	[0266.938] CloseHandle (hObject=0x1b8) returned 1
	[0266.938] CloseHandle (hObject=0x254) returned 1
	[0266.938] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini")) returned 1
	[0266.939] SetEvent (hEvent=0xfc) returned 1
	[0266.939] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.940] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=16384) returned 1
	[0266.940] CloseHandle (hObject=0x254) returned 1
	[0266.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat")) returned 0x2026
	[0266.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat")) returned 0x2026
	[0266.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.940] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.940] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.940] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.940] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x1b8
	[0266.943] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4000, lpOverlapped=0x0) returned 1
	[0266.944] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4010, lpOverlapped=0x0) returned 1
	[0266.945] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.945] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.945] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.945] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4000, lpOverlapped=0x0) returned 1
	[0266.946] FlushFileBuffers (hFile=0x254) returned 1
	[0266.948] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.950] CloseHandle (hObject=0x254) returned 1
	[0266.950] CloseHandle (hObject=0x1b8) returned 1
	[0266.950] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat")) returned 1
	[0266.951] SetEvent (hEvent=0xfc) returned 1
	[0266.951] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jAxYfa-8PuC01ur.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jaxyfa-8puc01ur.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.952] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=20455) returned 1
	[0266.952] CloseHandle (hObject=0x1b8) returned 1
	[0266.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jAxYfa-8PuC01ur.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jaxyfa-8puc01ur.wav")) returned 0x2020
	[0266.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jAxYfa-8PuC01ur.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jaxyfa-8puc01ur.wav")) returned 0x2020
	[0266.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jAxYfa-8PuC01ur.wav.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jaxyfa-8puc01ur.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.952] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jAxYfa-8PuC01ur.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jaxyfa-8puc01ur.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.952] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.952] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.952] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jAxYfa-8PuC01ur.wav.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jaxyfa-8puc01ur.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0266.953] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x4fe7, lpOverlapped=0x0) returned 1
	[0266.955] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4ff0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4ff0, lpOverlapped=0x0) returned 1
	[0266.956] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0266.956] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.956] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.956] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4fe7, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x4fe7, lpOverlapped=0x0) returned 1
	[0266.956] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.959] FlushFileBuffers (hFile=0x254) returned 1
	[0266.960] CloseHandle (hObject=0x1b8) returned 1
	[0266.960] CloseHandle (hObject=0x254) returned 1
	[0266.961] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jAxYfa-8PuC01ur.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jaxyfa-8puc01ur.wav")) returned 1
	[0266.961] SetEvent (hEvent=0xfc) returned 1
	[0266.962] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jn_32c-RrWu.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jn_32c-rrwu.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.962] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=25280) returned 1
	[0266.962] CloseHandle (hObject=0x254) returned 1
	[0266.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jn_32c-RrWu.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jn_32c-rrwu.wav")) returned 0x2020
	[0266.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jn_32c-RrWu.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jn_32c-rrwu.wav")) returned 0x2020
	[0266.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jn_32c-RrWu.wav.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jn_32c-rrwu.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.963] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jn_32c-RrWu.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jn_32c-rrwu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.963] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.963] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.963] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jn_32c-RrWu.wav.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jn_32c-rrwu.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0266.964] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x62c0, lpOverlapped=0x0) returned 1
	[0266.965] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x62d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x62d0, lpOverlapped=0x0) returned 1
	[0266.967] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.967] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.967] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.967] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x62c0, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x62c0, lpOverlapped=0x0) returned 1
	[0266.967] FlushFileBuffers (hFile=0x254) returned 1
	[0266.970] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.971] CloseHandle (hObject=0x254) returned 1
	[0266.971] CloseHandle (hObject=0x1b8) returned 1
	[0266.971] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jn_32c-RrWu.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jn_32c-rrwu.wav")) returned 1
	[0266.972] SetEvent (hEvent=0xfc) returned 1
	[0266.972] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jw3joWweu.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jw3jowweu.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.973] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=86007) returned 1
	[0266.973] CloseHandle (hObject=0x1b8) returned 1
	[0266.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jw3joWweu.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jw3jowweu.jpg")) returned 0x2020
	[0266.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jw3joWweu.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jw3jowweu.jpg")) returned 0x2020
	[0266.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jw3joWweu.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jw3jowweu.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.973] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jw3joWweu.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jw3jowweu.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.973] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.974] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.974] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jw3joWweu.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jw3jowweu.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0266.974] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x14ff7, lpOverlapped=0x0) returned 1
	[0266.977] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x15000, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x15000, lpOverlapped=0x0) returned 1
	[0266.979] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.979] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.979] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.979] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x14ff7, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x14ff7, lpOverlapped=0x0) returned 1
	[0266.980] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.982] FlushFileBuffers (hFile=0x254) returned 1
	[0266.984] CloseHandle (hObject=0x1b8) returned 1
	[0266.984] CloseHandle (hObject=0x254) returned 1
	[0266.984] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Jw3joWweu.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jw3jowweu.jpg")) returned 1
	[0266.986] SetEvent (hEvent=0xfc) returned 1
	[0266.986] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jZQWJ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jzqwj.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.987] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=46852) returned 1
	[0266.987] CloseHandle (hObject=0x254) returned 1
	[0266.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jZQWJ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jzqwj.gif")) returned 0x2020
	[0266.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jZQWJ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jzqwj.gif")) returned 0x2020
	[0266.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jZQWJ.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jzqwj.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.987] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jZQWJ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jzqwj.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.987] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.987] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.987] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jZQWJ.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jzqwj.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0266.988] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xb704, lpOverlapped=0x0) returned 1
	[0266.990] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb710, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xb710, lpOverlapped=0x0) returned 1
	[0266.992] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0266.992] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.992] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0266.992] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xb704, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xb704, lpOverlapped=0x0) returned 1
	[0266.992] FlushFileBuffers (hFile=0x254) returned 1
	[0266.995] FlushFileBuffers (hFile=0x1b8) returned 1
	[0266.996] CloseHandle (hObject=0x254) returned 1
	[0266.996] CloseHandle (hObject=0x1b8) returned 1
	[0266.996] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jZQWJ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jzqwj.gif")) returned 1
	[0266.997] SetEvent (hEvent=0xfc) returned 1
	[0266.997] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ka0fUIDQ.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ka0fuidq.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.999] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=69579) returned 1
	[0266.999] CloseHandle (hObject=0x1b8) returned 1
	[0266.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ka0fUIDQ.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ka0fuidq.mp4")) returned 0x2020
	[0266.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ka0fUIDQ.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ka0fuidq.mp4")) returned 0x2020
	[0266.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ka0fUIDQ.mp4.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ka0fuidq.mp4.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.999] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ka0fUIDQ.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ka0fuidq.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0266.999] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.999] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0266.999] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ka0fUIDQ.mp4.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ka0fuidq.mp4.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0267.000] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x10fcb, lpOverlapped=0x0) returned 1
	[0267.002] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10fd0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x10fd0, lpOverlapped=0x0) returned 1
	[0267.004] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0267.004] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.004] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.004] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x10fcb, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x10fcb, lpOverlapped=0x0) returned 1
	[0267.004] FlushFileBuffers (hFile=0x1b8) returned 1
	[0267.007] FlushFileBuffers (hFile=0x254) returned 1
	[0267.008] CloseHandle (hObject=0x1b8) returned 1
	[0267.008] CloseHandle (hObject=0x254) returned 1
	[0267.008] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ka0fUIDQ.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ka0fuidq.mp4")) returned 1
	[0267.010] SetEvent (hEvent=0xfc) returned 1
	[0267.010] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KilKwkIKEnU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kilkwkikenu.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0267.010] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17482) returned 1
	[0267.011] CloseHandle (hObject=0x254) returned 1
	[0267.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KilKwkIKEnU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kilkwkikenu.png")) returned 0x2020
	[0267.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KilKwkIKEnU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kilkwkikenu.png")) returned 0x2020
	[0267.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KilKwkIKEnU.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kilkwkikenu.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0267.011] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KilKwkIKEnU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kilkwkikenu.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0267.011] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.011] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.011] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KilKwkIKEnU.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kilkwkikenu.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0267.012] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x444a, lpOverlapped=0x0) returned 1
	[0267.013] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4450, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4450, lpOverlapped=0x0) returned 1
	[0267.014] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0267.015] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.015] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.015] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x444a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x444a, lpOverlapped=0x0) returned 1
	[0267.015] FlushFileBuffers (hFile=0x254) returned 1
	[0267.017] FlushFileBuffers (hFile=0x1b8) returned 1
	[0267.019] CloseHandle (hObject=0x254) returned 1
	[0267.019] CloseHandle (hObject=0x1b8) returned 1
	[0267.019] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KilKwkIKEnU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kilkwkikenu.png")) returned 1
	[0267.020] SetEvent (hEvent=0xfc) returned 1
	[0267.020] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\kKl5pOD1DYy3po.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kkl5pod1dyy3po.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0267.021] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=17038) returned 1
	[0267.021] CloseHandle (hObject=0x1b8) returned 1
	[0267.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\kKl5pOD1DYy3po.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kkl5pod1dyy3po.bmp")) returned 0x2020
	[0267.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\kKl5pOD1DYy3po.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kkl5pod1dyy3po.bmp")) returned 0x2020
	[0267.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\kKl5pOD1DYy3po.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kkl5pod1dyy3po.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0267.021] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\kKl5pOD1DYy3po.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kkl5pod1dyy3po.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0267.022] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.022] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.022] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\kKl5pOD1DYy3po.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kkl5pod1dyy3po.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0267.022] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x428e, lpOverlapped=0x0) returned 1
	[0267.024] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x4290, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x4290, lpOverlapped=0x0) returned 1
	[0267.025] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0267.025] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.025] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.025] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x428e, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x428e, lpOverlapped=0x0) returned 1
	[0267.025] FlushFileBuffers (hFile=0x1b8) returned 1
	[0267.032] FlushFileBuffers (hFile=0x254) returned 1
	[0267.033] CloseHandle (hObject=0x1b8) returned 1
	[0267.033] CloseHandle (hObject=0x254) returned 1
	[0267.033] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\kKl5pOD1DYy3po.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kkl5pod1dyy3po.bmp")) returned 1
	[0267.034] SetEvent (hEvent=0xfc) returned 1
	[0267.034] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KsTqCAR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kstqcar.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0267.035] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=68025) returned 1
	[0267.035] CloseHandle (hObject=0x254) returned 1
	[0267.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KsTqCAR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kstqcar.wav")) returned 0x2020
	[0267.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KsTqCAR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kstqcar.wav")) returned 0x2020
	[0267.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KsTqCAR.wav.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kstqcar.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0267.035] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KsTqCAR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kstqcar.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0267.035] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.036] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.036] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KsTqCAR.wav.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kstqcar.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0267.036] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x109b9, lpOverlapped=0x0) returned 1
	[0267.039] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x109c0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x109c0, lpOverlapped=0x0) returned 1
	[0267.040] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0267.041] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.041] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.041] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x109b9, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x109b9, lpOverlapped=0x0) returned 1
	[0267.041] FlushFileBuffers (hFile=0x254) returned 1
	[0267.044] FlushFileBuffers (hFile=0x1b8) returned 1
	[0267.045] CloseHandle (hObject=0x254) returned 1
	[0267.045] CloseHandle (hObject=0x1b8) returned 1
	[0267.045] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\KsTqCAR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\kstqcar.wav")) returned 1
	[0267.046] SetEvent (hEvent=0xfc) returned 1
	[0267.047] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LIXc9zepSV8sXh.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lixc9zepsv8sxh.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0267.047] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=96549) returned 1
	[0267.048] CloseHandle (hObject=0x1b8) returned 1
	[0267.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LIXc9zepSV8sXh.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lixc9zepsv8sxh.gif")) returned 0x2020
	[0267.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LIXc9zepSV8sXh.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lixc9zepsv8sxh.gif")) returned 0x2020
	[0267.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LIXc9zepSV8sXh.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lixc9zepsv8sxh.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0267.048] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LIXc9zepSV8sXh.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lixc9zepsv8sxh.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0267.048] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.048] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.048] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LIXc9zepSV8sXh.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lixc9zepsv8sxh.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0267.049] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x17925, lpOverlapped=0x0) returned 1
	[0267.052] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x17930, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x17930, lpOverlapped=0x0) returned 1
	[0267.054] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0267.054] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.054] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.054] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x17925, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x17925, lpOverlapped=0x0) returned 1
	[0267.054] FlushFileBuffers (hFile=0x1b8) returned 1
	[0267.057] FlushFileBuffers (hFile=0x254) returned 1
	[0267.058] CloseHandle (hObject=0x1b8) returned 1
	[0267.058] CloseHandle (hObject=0x254) returned 1
	[0267.059] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LIXc9zepSV8sXh.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lixc9zepsv8sxh.gif")) returned 1
	[0267.060] SetEvent (hEvent=0xfc) returned 1
	[0267.060] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lRUR1FB.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lrur1fb.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0267.061] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=4733) returned 1
	[0267.061] CloseHandle (hObject=0x254) returned 1
	[0267.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lRUR1FB.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lrur1fb.png")) returned 0x2020
	[0267.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lRUR1FB.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lrur1fb.png")) returned 0x2020
	[0267.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lRUR1FB.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lrur1fb.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0267.061] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lRUR1FB.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lrur1fb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0267.062] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.062] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.062] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lRUR1FB.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lrur1fb.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0267.062] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x127d, lpOverlapped=0x0) returned 1
	[0267.065] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x1280, lpOverlapped=0x0) returned 1
	[0267.065] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0267.066] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.066] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.066] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x127d, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x127d, lpOverlapped=0x0) returned 1
	[0267.066] FlushFileBuffers (hFile=0x254) returned 1
	[0267.068] FlushFileBuffers (hFile=0x1b8) returned 1
	[0267.069] CloseHandle (hObject=0x254) returned 1
	[0267.069] CloseHandle (hObject=0x1b8) returned 1
	[0267.070] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lRUR1FB.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lrur1fb.png")) returned 1
	[0267.070] SetEvent (hEvent=0xfc) returned 1
	[0267.070] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LSvRKzh.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lsvrkzh.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0267.071] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=39697) returned 1
	[0267.071] CloseHandle (hObject=0x1b8) returned 1
	[0267.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LSvRKzh.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lsvrkzh.avi")) returned 0x2020
	[0267.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LSvRKzh.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lsvrkzh.avi")) returned 0x2020
	[0267.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LSvRKzh.avi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lsvrkzh.avi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0267.072] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LSvRKzh.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lsvrkzh.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0267.072] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.072] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.072] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LSvRKzh.avi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lsvrkzh.avi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0267.072] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x9b11, lpOverlapped=0x0) returned 1
	[0267.074] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9b20, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x9b20, lpOverlapped=0x0) returned 1
	[0267.076] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0267.076] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.076] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.076] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x9b11, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x9b11, lpOverlapped=0x0) returned 1
	[0267.076] FlushFileBuffers (hFile=0x1b8) returned 1
	[0267.078] FlushFileBuffers (hFile=0x254) returned 1
	[0267.080] CloseHandle (hObject=0x1b8) returned 1
	[0267.080] CloseHandle (hObject=0x254) returned 1
	[0267.080] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LSvRKzh.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lsvrkzh.avi")) returned 1
	[0267.081] SetEvent (hEvent=0xfc) returned 1
	[0267.082] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LziKnoR2UQ91ZAXB.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lziknor2uq91zaxb.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0267.082] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=84417) returned 1
	[0267.082] CloseHandle (hObject=0x254) returned 1
	[0267.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LziKnoR2UQ91ZAXB.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lziknor2uq91zaxb.jpg")) returned 0x2020
	[0267.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LziKnoR2UQ91ZAXB.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lziknor2uq91zaxb.jpg")) returned 0x2020
	[0267.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LziKnoR2UQ91ZAXB.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lziknor2uq91zaxb.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0267.082] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LziKnoR2UQ91ZAXB.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lziknor2uq91zaxb.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0267.083] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.083] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.083] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LziKnoR2UQ91ZAXB.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lziknor2uq91zaxb.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0267.083] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x149c1, lpOverlapped=0x0) returned 1
	[0267.086] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x149d0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x149d0, lpOverlapped=0x0) returned 1
	[0267.088] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0267.088] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.088] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.088] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x149c1, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x149c1, lpOverlapped=0x0) returned 1
	[0267.089] FlushFileBuffers (hFile=0x254) returned 1
	[0267.092] FlushFileBuffers (hFile=0x1b8) returned 1
	[0267.093] CloseHandle (hObject=0x254) returned 1
	[0267.093] CloseHandle (hObject=0x1b8) returned 1
	[0267.093] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LziKnoR2UQ91ZAXB.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lziknor2uq91zaxb.jpg")) returned 1
	[0267.094] SetEvent (hEvent=0xfc) returned 1
	[0267.095] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mae5WPDu0BBoIWoHS6o.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mae5wpdu0bboiwohs6o.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0267.095] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=63057) returned 1
	[0267.095] CloseHandle (hObject=0x1b8) returned 1
	[0267.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mae5WPDu0BBoIWoHS6o.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mae5wpdu0bboiwohs6o.ots")) returned 0x2020
	[0267.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mae5WPDu0BBoIWoHS6o.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mae5wpdu0bboiwohs6o.ots")) returned 0x2020
	[0267.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mae5WPDu0BBoIWoHS6o.ots.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mae5wpdu0bboiwohs6o.ots.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0267.095] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mae5WPDu0BBoIWoHS6o.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mae5wpdu0bboiwohs6o.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0267.096] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.096] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.096] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mae5WPDu0BBoIWoHS6o.ots.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mae5wpdu0bboiwohs6o.ots.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0267.096] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xf651, lpOverlapped=0x0) returned 1
	[0267.099] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf660, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf660, lpOverlapped=0x0) returned 1
	[0267.100] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x102, lpOverlapped=0x0) returned 1
	[0267.100] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.101] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.101] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf651, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xf651, lpOverlapped=0x0) returned 1
	[0267.101] FlushFileBuffers (hFile=0x1b8) returned 1
	[0267.103] FlushFileBuffers (hFile=0x254) returned 1
	[0267.105] CloseHandle (hObject=0x1b8) returned 1
	[0267.105] CloseHandle (hObject=0x254) returned 1
	[0267.105] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mae5WPDu0BBoIWoHS6o.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mae5wpdu0bboiwohs6o.ots")) returned 1
	[0267.106] SetEvent (hEvent=0xfc) returned 1
	[0267.106] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mxFz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mxfz.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0267.107] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=86618) returned 1
	[0267.107] CloseHandle (hObject=0x254) returned 1
	[0267.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mxFz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mxfz.mkv")) returned 0x2020
	[0267.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mxFz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mxfz.mkv")) returned 0x2020
	[0267.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mxFz.mkv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mxfz.mkv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0267.107] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mxFz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mxfz.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0267.107] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.107] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.107] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mxFz.mkv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mxfz.mkv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0267.108] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x1525a, lpOverlapped=0x0) returned 1
	[0267.111] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x15260, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x15260, lpOverlapped=0x0) returned 1
	[0267.112] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0267.113] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.113] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.113] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x1525a, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x1525a, lpOverlapped=0x0) returned 1
	[0267.113] FlushFileBuffers (hFile=0x254) returned 1
	[0267.116] FlushFileBuffers (hFile=0x1b8) returned 1
	[0267.119] CloseHandle (hObject=0x254) returned 1
	[0267.119] CloseHandle (hObject=0x1b8) returned 1
	[0267.119] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\mxFz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mxfz.mkv")) returned 1
	[0267.121] SetEvent (hEvent=0xfc) returned 1
	[0267.121] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\qjfCEYsLZ6d.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qjfceyslz6d.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0267.122] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=43947) returned 1
	[0267.122] CloseHandle (hObject=0x1b8) returned 1
	[0267.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\qjfCEYsLZ6d.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qjfceyslz6d.mp3")) returned 0x2020
	[0267.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\qjfCEYsLZ6d.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qjfceyslz6d.mp3")) returned 0x2020
	[0267.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\qjfCEYsLZ6d.mp3.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qjfceyslz6d.mp3.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0267.122] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\qjfCEYsLZ6d.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qjfceyslz6d.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0267.122] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.122] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.122] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\qjfCEYsLZ6d.mp3.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qjfceyslz6d.mp3.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0267.123] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0xabab, lpOverlapped=0x0) returned 1
	[0267.126] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xabb0, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xabb0, lpOverlapped=0x0) returned 1
	[0267.127] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0267.127] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.127] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.127] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xabab, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0xabab, lpOverlapped=0x0) returned 1
	[0267.128] FlushFileBuffers (hFile=0x1b8) returned 1
	[0267.130] FlushFileBuffers (hFile=0x254) returned 1
	[0267.132] CloseHandle (hObject=0x1b8) returned 1
	[0267.132] CloseHandle (hObject=0x254) returned 1
	[0267.132] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\qjfCEYsLZ6d.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qjfceyslz6d.mp3")) returned 1
	[0267.133] SetEvent (hEvent=0xfc) returned 1
	[0267.133] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\sOIfBHl.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\soifbhl.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0267.134] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=30272) returned 1
	[0267.134] CloseHandle (hObject=0x254) returned 1
	[0267.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\sOIfBHl.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\soifbhl.swf")) returned 0x2020
	[0267.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\sOIfBHl.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\soifbhl.swf")) returned 0x2020
	[0267.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\sOIfBHl.swf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\soifbhl.swf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0267.134] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\sOIfBHl.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\soifbhl.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0267.134] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.134] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.134] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\sOIfBHl.swf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\soifbhl.swf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x1b8
	[0267.135] ReadFile (in: hFile=0x254, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x7640, lpOverlapped=0x0) returned 1
	[0267.137] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7650, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x7650, lpOverlapped=0x0) returned 1
	[0267.138] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0267.138] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.138] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.138] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x7640, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x7640, lpOverlapped=0x0) returned 1
	[0267.139] FlushFileBuffers (hFile=0x254) returned 1
	[0267.141] FlushFileBuffers (hFile=0x1b8) returned 1
	[0267.143] CloseHandle (hObject=0x254) returned 1
	[0267.143] CloseHandle (hObject=0x1b8) returned 1
	[0267.143] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\sOIfBHl.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\soifbhl.swf")) returned 1
	[0267.144] SetEvent (hEvent=0xfc) returned 1
	[0267.144] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0267.145] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x322fc10 | out: lpFileSize=0x322fc10*=67) returned 1
	[0267.145] CloseHandle (hObject=0x1b8) returned 1
	[0267.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini")) returned 0x2006
	[0267.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini")) returned 0x2006
	[0267.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0267.145] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0267.145] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.145] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322fbd8 | out: lpNewFilePointer=0x0) returned 1
	[0267.145] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2006, hTemplateFile=0x0) returned 0x254
	[0267.146] ReadFile (in: hFile=0x1b8, lpBuffer=0x36c0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x322fbec, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesRead=0x322fbec*=0x43, lpOverlapped=0x0) returned 1
	[0267.147] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0x50, lpOverlapped=0x0) returned 1
	[0267.148] WriteFile (in: hFile=0x254, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x322fbc4, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322fbc4*=0xf2, lpOverlapped=0x0) returned 1
	[0267.148] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.148] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x322f938 | out: lpNewFilePointer=0x0) returned 1
	[0267.148] WriteFile (in: hFile=0x1b8, lpBuffer=0x36c0020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x322f944, lpOverlapped=0x0 | out: lpBuffer=0x36c0020*, lpNumberOfBytesWritten=0x322f944*=0x43, lpOverlapped=0x0) returned 1
	[0267.148] FlushFileBuffers (hFile=0x1b8) 

Thread:
	id = 54
	os_tid = 0x110

	[0133.055] GetProcessHeap () returned 0x800000
	[0133.055] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x34f2360
	[0133.055] GetProcessHeap () returned 0x800000
	[0133.055] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3502368
	[0133.055] GetProcessHeap () returned 0x800000
	[0133.055] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x28) returned 0x837ef8
	[0133.055] GetProcessHeap () returned 0x800000
	[0133.055] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x110102) returned 0x37e0020
	[0133.056] GetProcessHeap () returned 0x800000
	[0133.056] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x50) returned 0x34d12f8
	[0133.056] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0133.056] GetProcAddress (hModule=0x76300000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7632d650
	[0133.056] Wow64DisableWow64FsRedirection (in: OldValue=0x335fa98 | out: OldValue=0x335fa98*=0x0) returned 1
	[0133.056] GetProcessHeap () returned 0x800000
	[0133.056] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d12f8 | out: hHeap=0x800000) returned 1
	[0133.056] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.056] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.056] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.056] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.056] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.056] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.056] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.056] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.056] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.057] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.058] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.059] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.061] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.062] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.063] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.064] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.065] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.066] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.067] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.068] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.069] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.070] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.071] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.072] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.073] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.074] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.074] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.074] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.074] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.074] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.074] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.074] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.074] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0222.558] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0222.749] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=16384) returned 1
	[0222.749] CloseHandle (hObject=0x274) returned 1
	[0222.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db")) returned 0x2020
	[0222.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db")) returned 0x2020
	[0222.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0222.750] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0222.750] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0222.750] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0222.750] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0222.780] ReadFile (in: hFile=0x274, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x4000, lpOverlapped=0x0) returned 1
	[0222.869] WriteFile (in: hFile=0x230, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x4010, lpOverlapped=0x0) returned 1
	[0222.870] WriteFile (in: hFile=0x230, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x102, lpOverlapped=0x0) returned 1
	[0222.870] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0222.871] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0222.871] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x4000, lpOverlapped=0x0) returned 1
	[0222.871] FlushFileBuffers (hFile=0x274) returned 1
	[0223.058] FlushFileBuffers (hFile=0x230) returned 1
	[0223.059] CloseHandle (hObject=0x274) returned 1
	[0223.059] CloseHandle (hObject=0x230) returned 1
	[0223.059] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db")) returned 1
	[0223.060] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0223.360] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0223.364] ResetEvent (hEvent=0x110) returned 1
	[0223.364] SetEvent (hEvent=0x114) returned 1
	[0223.364] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x24c
	[0223.365] GetFileSizeEx (in: hFile=0x24c, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=125448) returned 1
	[0223.365] CloseHandle (hObject=0x24c) returned 1
	[0223.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db")) returned 0x2020
	[0223.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db")) returned 0x2020
	[0223.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.365] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x24c
	[0223.365] SetFilePointerEx (in: hFile=0x24c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0223.365] SetFilePointerEx (in: hFile=0x24c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0223.365] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0223.366] ReadFile (in: hFile=0x24c, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x1ea08, lpOverlapped=0x0) returned 1
	[0223.373] WriteFile (in: hFile=0x270, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x1ea10, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x1ea10, lpOverlapped=0x0) returned 1
	[0223.375] WriteFile (in: hFile=0x270, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x162, lpOverlapped=0x0) returned 1
	[0223.376] SetFilePointerEx (in: hFile=0x24c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0223.376] SetFilePointerEx (in: hFile=0x24c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0223.376] WriteFile (in: hFile=0x24c, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x1ea08, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x1ea08, lpOverlapped=0x0) returned 1
	[0223.376] FlushFileBuffers (hFile=0x24c) returned 1
	[0223.387] FlushFileBuffers (hFile=0x270) returned 1
	[0223.390] CloseHandle (hObject=0x24c) returned 1
	[0223.390] CloseHandle (hObject=0x270) returned 1
	[0223.390] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db")) returned 1
	[0223.392] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0223.399] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0223.399] ResetEvent (hEvent=0x110) returned 1
	[0223.399] SetEvent (hEvent=0x114) returned 1
	[0223.400] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0223.400] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=1048576) returned 1
	[0223.400] CloseHandle (hObject=0x270) returned 1
	[0223.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db")) returned 0x2020
	[0223.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db")) returned 0x2020
	[0223.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.400] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0223.400] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0223.400] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0223.400] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x24c
	[0223.401] ReadFile (in: hFile=0x270, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x100000, lpOverlapped=0x0) returned 1
	[0223.423] WriteFile (in: hFile=0x24c, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x100010, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x100010, lpOverlapped=0x0) returned 1
	[0223.455] WriteFile (in: hFile=0x24c, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x102, lpOverlapped=0x0) returned 1
	[0223.455] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0223.455] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0223.455] WriteFile (in: hFile=0x270, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x100000, lpOverlapped=0x0) returned 1
	[0223.458] FlushFileBuffers (hFile=0x270) returned 1
	[0223.483] FlushFileBuffers (hFile=0x24c) returned 1
	[0223.633] CloseHandle (hObject=0x270) returned 1
	[0223.633] CloseHandle (hObject=0x24c) returned 1
	[0223.633] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db")) returned 1
	[0223.635] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x24c
	[0223.636] GetFileSizeEx (in: hFile=0x24c, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=3256) returned 1
	[0223.636] CloseHandle (hObject=0x24c) returned 1
	[0223.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db")) returned 0x2020
	[0223.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db")) returned 0x2020
	[0223.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.636] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x24c
	[0223.636] SetFilePointerEx (in: hFile=0x24c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0223.636] SetFilePointerEx (in: hFile=0x24c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0223.636] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x280
	[0223.763] ReadFile (in: hFile=0x24c, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0xcb8, lpOverlapped=0x0) returned 1
	[0223.764] WriteFile (in: hFile=0x280, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0xcc0, lpOverlapped=0x0) returned 1
	[0223.768] WriteFile (in: hFile=0x280, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x102, lpOverlapped=0x0) returned 1
	[0223.768] SetFilePointerEx (in: hFile=0x24c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0223.768] SetFilePointerEx (in: hFile=0x24c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0223.768] WriteFile (in: hFile=0x24c, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0xcb8, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0xcb8, lpOverlapped=0x0) returned 1
	[0223.768] FlushFileBuffers (hFile=0x24c) returned 1
	[0223.859] FlushFileBuffers (hFile=0x280) returned 1
	[0223.863] CloseHandle (hObject=0x24c) returned 1
	[0223.865] CloseHandle (hObject=0x280) returned 1
	[0223.865] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db")) returned 1
	[0223.866] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0223.989] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0230.495] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0230.504] ResetEvent (hEvent=0x110) returned 1
	[0230.504] SetEvent (hEvent=0x114) returned 1
	[0230.504] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0230.505] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=229376) returned 1
	[0230.505] CloseHandle (hObject=0x274) returned 1
	[0230.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite")) returned 0x2020
	[0230.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite")) returned 0x2020
	[0230.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0230.505] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0230.505] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0230.505] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0230.505] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x284
	[0230.506] ReadFile (in: hFile=0x274, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x38000, lpOverlapped=0x0) returned 1
	[0230.511] WriteFile (in: hFile=0x284, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x38010, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x38010, lpOverlapped=0x0) returned 1
	[0230.514] WriteFile (in: hFile=0x284, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x102, lpOverlapped=0x0) returned 1
	[0230.515] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0230.515] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0230.515] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x38000, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x38000, lpOverlapped=0x0) returned 1
	[0230.515] FlushFileBuffers (hFile=0x274) returned 1
	[0230.524] FlushFileBuffers (hFile=0x284) returned 1
	[0230.556] CloseHandle (hObject=0x274) returned 1
	[0230.556] CloseHandle (hObject=0x284) returned 1
	[0230.556] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite")) returned 1
	[0230.558] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0230.559] ResetEvent (hEvent=0x110) returned 1
	[0230.559] SetEvent (hEvent=0x114) returned 1
	[0230.559] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x284
	[0230.560] GetFileSizeEx (in: hFile=0x284, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=98304) returned 1
	[0230.560] CloseHandle (hObject=0x284) returned 1
	[0230.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite")) returned 0x2020
	[0230.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite")) returned 0x2020
	[0230.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0230.560] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x284
	[0230.560] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0230.560] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0230.560] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0230.561] ReadFile (in: hFile=0x284, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x18000, lpOverlapped=0x0) returned 1
	[0230.563] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x18010, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x18010, lpOverlapped=0x0) returned 1
	[0230.565] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x102, lpOverlapped=0x0) returned 1
	[0230.566] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0230.566] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0230.566] WriteFile (in: hFile=0x284, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x18000, lpOverlapped=0x0) returned 1
	[0230.566] FlushFileBuffers (hFile=0x284) returned 1
	[0230.768] FlushFileBuffers (hFile=0x274) returned 1
	[0230.857] CloseHandle (hObject=0x284) returned 1
	[0230.857] CloseHandle (hObject=0x274) returned 1
	[0230.857] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite")) returned 1
	[0231.125] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0231.145] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=655360) returned 1
	[0231.145] CloseHandle (hObject=0x278) returned 1
	[0231.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite")) returned 0x2020
	[0231.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite")) returned 0x2020
	[0231.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0231.145] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0231.146] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0231.146] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0231.146] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x234
	[0231.146] ReadFile (in: hFile=0x278, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0xa0000, lpOverlapped=0x0) returned 1
	[0231.158] WriteFile (in: hFile=0x234, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0xa0010, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0xa0010, lpOverlapped=0x0) returned 1
	[0231.171] WriteFile (in: hFile=0x234, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x112, lpOverlapped=0x0) returned 1
	[0231.171] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0231.171] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0231.171] WriteFile (in: hFile=0x278, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0xa0000, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0xa0000, lpOverlapped=0x0) returned 1
	[0231.173] FlushFileBuffers (hFile=0x278) returned 1
	[0231.792] FlushFileBuffers (hFile=0x234) returned 1
	[0231.794] CloseHandle (hObject=0x278) returned 1
	[0231.795] CloseHandle (hObject=0x234) returned 1
	[0231.795] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite")) returned 1
	[0231.801] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0231.803] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=16384) returned 1
	[0231.803] CloseHandle (hObject=0x234) returned 1
	[0231.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db")) returned 0x2020
	[0231.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db")) returned 0x2020
	[0231.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0231.803] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0231.803] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0231.803] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0231.803] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0231.804] ReadFile (in: hFile=0x234, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x4000, lpOverlapped=0x0) returned 1
	[0231.809] WriteFile (in: hFile=0x278, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x4010, lpOverlapped=0x0) returned 1
	[0231.810] WriteFile (in: hFile=0x278, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0xe2, lpOverlapped=0x0) returned 1
	[0231.810] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0231.810] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0231.810] WriteFile (in: hFile=0x234, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x4000, lpOverlapped=0x0) returned 1
	[0231.811] FlushFileBuffers (hFile=0x234) returned 1
	[0231.814] FlushFileBuffers (hFile=0x278) returned 1
	[0231.816] CloseHandle (hObject=0x234) returned 1
	[0232.146] CloseHandle (hObject=0x278) returned 1
	[0232.380] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db")) returned 1
	[0232.387] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0232.388] GetFileSizeEx (in: hFile=0x248, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=10485760) returned 1
	[0232.388] CloseHandle (hObject=0x248) returned 1
	[0232.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite")) returned 0x2020
	[0232.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite")) returned 0x2020
	[0232.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0232.388] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0232.389] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0232.389] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335fa08 | out: lpNewFilePointer=0x0) returned 1
	[0232.389] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0232.389] ReadFile (in: hFile=0x248, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x110100, lpOverlapped=0x0) returned 1
	[0232.444] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x110100, lpOverlapped=0x0) returned 1
	[0232.573] ReadFile (in: hFile=0x248, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x110100, lpOverlapped=0x0) returned 1
	[0232.936] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x110100, lpOverlapped=0x0) returned 1
	[0232.960] ReadFile (in: hFile=0x248, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x110100, lpOverlapped=0x0) returned 1
	[0233.107] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x110100, lpOverlapped=0x0) returned 1
	[0233.126] ReadFile (in: hFile=0x248, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x110100, lpOverlapped=0x0) returned 1
	[0233.192] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x110100, lpOverlapped=0x0) returned 1
	[0233.211] ReadFile (in: hFile=0x248, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x110100, lpOverlapped=0x0) returned 1
	[0233.289] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x110100, lpOverlapped=0x0) returned 1
	[0233.316] ReadFile (in: hFile=0x248, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x110100, lpOverlapped=0x0) returned 1
	[0233.351] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x110100, lpOverlapped=0x0) returned 1
	[0233.383] ReadFile (in: hFile=0x248, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x110100, lpOverlapped=0x0) returned 1
	[0233.512] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x110100, lpOverlapped=0x0) returned 1
	[0233.533] ReadFile (in: hFile=0x248, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x110100, lpOverlapped=0x0) returned 1
	[0233.552] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x110100, lpOverlapped=0x0) returned 1
	[0233.591] ReadFile (in: hFile=0x248, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x110100, lpOverlapped=0x0) returned 1
	[0233.611] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x110100, lpOverlapped=0x0) returned 1
	[0233.682] ReadFile (in: hFile=0x248, lpBuffer=0x37e0020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x335fa1c, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesRead=0x335fa1c*=0x6f700, lpOverlapped=0x0) returned 1
	[0233.687] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x6f710, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0x6f710, lpOverlapped=0x0) returned 1
	[0233.698] WriteFile (in: hFile=0x274, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x335f9f4, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f9f4*=0xf2, lpOverlapped=0x0) returned 1
	[0233.698] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0233.698] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x335f768 | out: lpNewFilePointer=0x0) returned 1
	[0233.698] WriteFile (in: hFile=0x248, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x110102, lpOverlapped=0x0) returned 1
	[0233.789] WriteFile (in: hFile=0x248, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x110102, lpOverlapped=0x0) returned 1
	[0233.804] WriteFile (in: hFile=0x248, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x110102, lpOverlapped=0x0) returned 1
	[0233.818] WriteFile (in: hFile=0x248, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x110102, lpOverlapped=0x0) returned 1
	[0233.849] WriteFile (in: hFile=0x248, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x110102, lpOverlapped=0x0) returned 1
	[0233.864] WriteFile (in: hFile=0x248, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x110102, lpOverlapped=0x0) returned 1
	[0233.924] WriteFile (in: hFile=0x248, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x110102, lpOverlapped=0x0) returned 1
	[0233.939] WriteFile (in: hFile=0x248, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x110102, lpOverlapped=0x0) returned 1
	[0233.969] WriteFile (in: hFile=0x248, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x110102, lpOverlapped=0x0) returned 1
	[0233.981] WriteFile (in: hFile=0x248, lpBuffer=0x37e0020*, nNumberOfBytesToWrite=0x6f6ee, lpNumberOfBytesWritten=0x335f774, lpOverlapped=0x0 | out: lpBuffer=0x37e0020*, lpNumberOfBytesWritten=0x335f774*=0x6f6ee, lpOverlapped=0x0) returned 1
	[0233.983] FlushFileBuffers (hFile=0x248) returned 1
	[0235.070] FlushFileBuffers (hFile=0x274) returned 1
	[0235.251] CloseHandle (hObject=0x248) returned 1
	[0235.251] CloseHandle (hObject=0x274) returned 1
	[0235.251] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite")) returned 1
	[0235.260] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0235.261] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=776176) returned 1
	[0235.261] CloseHandle (hObject=0x274) returned 1
	[0235.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db")) returned 0x2022
	[0235.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db")) returned 0x2022
	[0235.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\IconCache.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0235.262] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0235.262] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0235.263] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=24) returned 1
	[0235.263] CloseHandle (hObject=0x274) returned 1
	[0235.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db")) returned 0x2020
	[0235.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db")) returned 0x2020
	[0235.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0235.263] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0235.264] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0235.264] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=1048576) returned 1
	[0235.264] CloseHandle (hObject=0x274) returned 1
	[0235.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db")) returned 0x2020
	[0235.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db")) returned 0x2020
	[0235.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0235.264] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0235.265] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0235.265] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=24) returned 1
	[0235.265] CloseHandle (hObject=0x274) returned 1
	[0235.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db")) returned 0x2020
	[0235.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db")) returned 0x2020
	[0235.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0235.265] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0235.266] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0235.266] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=24) returned 1
	[0235.266] CloseHandle (hObject=0x274) returned 1
	[0235.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db")) returned 0x2020
	[0235.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db")) returned 0x2020
	[0235.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0235.266] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0235.267] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0235.267] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=3256) returned 1
	[0235.267] CloseHandle (hObject=0x274) returned 1
	[0235.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db")) returned 0x2020
	[0235.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db")) returned 0x2020
	[0235.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0235.267] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0235.267] ResetEvent (hEvent=0x110) returned 1
	[0235.267] SetEvent (hEvent=0x114) returned 1
	[0235.268] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0235.268] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x335fa40 | out: lpFileSize=0x335fa40*=24) returned 1
	[0235.268] CloseHandle (hObject=0x274) returned 1
	[0235.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db")) returned 0x2020
	[0235.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db")) returned 0x2020
	[0235.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0235.268] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0235.268] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0238.085] GetProcessHeap () returned 0x800000
	[0238.085] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x50) returned 0x8e05b0
	[0238.085] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0238.085] GetProcAddress (hModule=0x76300000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7632d668
	[0238.085] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1
	[0238.085] GetProcessHeap () returned 0x800000
	[0238.086] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e05b0 | out: hHeap=0x800000) returned 1
	[0238.086] SetEvent (hEvent=0x110) returned 1
	[0238.086] SetEvent (hEvent=0x10c) returned 1
	[0238.086] SetEvent (hEvent=0x114) returned 1
	[0238.086] GetProcessHeap () returned 0x800000
	[0238.086] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x37e0020 | out: hHeap=0x800000) returned 1
	[0238.090] GetProcessHeap () returned 0x800000
	[0238.090] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837ef8 | out: hHeap=0x800000) returned 1
	[0238.090] GetProcessHeap () returned 0x800000
	[0238.091] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34f2360 | out: hHeap=0x800000) returned 1
	[0238.091] GetProcessHeap () returned 0x800000
	[0238.091] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3502368 | out: hHeap=0x800000) returned 1

Thread:
	id = 55
	os_tid = 0x67c

	[0133.091] GetProcessHeap () returned 0x800000
	[0133.091] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3512370
	[0133.091] GetProcessHeap () returned 0x800000
	[0133.091] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3522378
	[0133.091] GetProcessHeap () returned 0x800000
	[0133.091] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x28) returned 0x837f28
	[0133.091] GetProcessHeap () returned 0x800000
	[0133.091] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x110102) returned 0x3900020
	[0133.092] GetProcessHeap () returned 0x800000
	[0133.092] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x50) returned 0x34d12f8
	[0133.092] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0133.092] GetProcAddress (hModule=0x76300000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7632d650
	[0133.092] Wow64DisableWow64FsRedirection (in: OldValue=0x34afb28 | out: OldValue=0x34afb28*=0x0) returned 1
	[0133.092] GetProcessHeap () returned 0x800000
	[0133.092] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d12f8 | out: hHeap=0x800000) returned 1
	[0133.092] SetEvent (hEvent=0xfc) returned 1
	[0133.092] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.092] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.093] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.093] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0133.093] CloseHandle (hObject=0x134) returned 1
	[0133.093] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.093] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0133.093] CloseHandle (hObject=0x134) returned 1
	[0133.093] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.094] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89168) returned 1
	[0133.094] CloseHandle (hObject=0x134) returned 1
	[0133.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20
	[0133.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20
	[0133.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.094] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.094] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.094] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=87616) returned 1
	[0133.094] CloseHandle (hObject=0x134) returned 1
	[0133.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20
	[0133.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20
	[0133.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.095] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.095] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.095] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=91712) returned 1
	[0133.095] CloseHandle (hObject=0x134) returned 1
	[0133.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20
	[0133.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20
	[0133.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.095] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.095] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.096] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94800) returned 1
	[0133.096] CloseHandle (hObject=0x134) returned 1
	[0133.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20
	[0133.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20
	[0133.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.096] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.096] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.096] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85056) returned 1
	[0133.096] CloseHandle (hObject=0x134) returned 1
	[0133.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20
	[0133.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20
	[0133.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.097] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.097] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.097] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43600) returned 1
	[0133.097] CloseHandle (hObject=0x134) returned 1
	[0133.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20
	[0133.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20
	[0133.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.097] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.097] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.098] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90192) returned 1
	[0133.098] CloseHandle (hObject=0x134) returned 1
	[0133.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20
	[0133.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20
	[0133.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.098] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.098] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.098] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89152) returned 1
	[0133.098] CloseHandle (hObject=0x134) returned 1
	[0133.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20
	[0133.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20
	[0133.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.098] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.099] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.099] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3694080) returned 1
	[0133.099] CloseHandle (hObject=0x134) returned 1
	[0133.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0x20
	[0133.099] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.099] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0
	[0133.099] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.138] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3876772) returned 1
	[0133.138] CloseHandle (hObject=0x134) returned 1
	[0133.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0x20
	[0133.139] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.139] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0
	[0133.139] SetEvent (hEvent=0xfc) returned 1
	[0133.139] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.139] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2371360) returned 1
	[0133.139] CloseHandle (hObject=0x134) returned 1
	[0133.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20
	[0133.139] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.139] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0
	[0133.140] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.140] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47452) returned 1
	[0133.140] CloseHandle (hObject=0x134) returned 1
	[0133.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20
	[0133.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20
	[0133.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.140] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.140] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.140] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=93248) returned 1
	[0133.140] CloseHandle (hObject=0x134) returned 1
	[0133.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20
	[0133.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20
	[0133.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.141] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.141] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.141] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90688) returned 1
	[0133.141] CloseHandle (hObject=0x134) returned 1
	[0133.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20
	[0133.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20
	[0133.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.141] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.141] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.142] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90704) returned 1
	[0133.142] CloseHandle (hObject=0x134) returned 1
	[0133.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20
	[0133.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20
	[0133.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.142] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.142] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.142] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=76352) returned 1
	[0133.142] CloseHandle (hObject=0x134) returned 1
	[0133.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20
	[0133.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20
	[0133.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.143] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.143] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.143] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75344) returned 1
	[0133.143] CloseHandle (hObject=0x134) returned 1
	[0133.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20
	[0133.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20
	[0133.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.143] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.143] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.145] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=485760) returned 1
	[0133.145] CloseHandle (hObject=0x134) returned 1
	[0133.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20
	[0133.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20
	[0133.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\memtest.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.145] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.145] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.146] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=88144) returned 1
	[0133.146] CloseHandle (hObject=0x134) returned 1
	[0133.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20
	[0133.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20
	[0133.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.146] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.146] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.146] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90704) returned 1
	[0133.146] CloseHandle (hObject=0x134) returned 1
	[0133.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20
	[0133.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20
	[0133.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.147] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.147] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.147] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90704) returned 1
	[0133.147] CloseHandle (hObject=0x134) returned 1
	[0133.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20
	[0133.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20
	[0133.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.147] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.147] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.148] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90176) returned 1
	[0133.148] CloseHandle (hObject=0x134) returned 1
	[0133.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20
	[0133.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20
	[0133.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.148] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.148] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.148] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89664) returned 1
	[0133.148] CloseHandle (hObject=0x134) returned 1
	[0133.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20
	[0133.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20
	[0133.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.148] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.149] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.149] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90192) returned 1
	[0133.149] CloseHandle (hObject=0x134) returned 1
	[0133.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20
	[0133.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20
	[0133.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.149] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.149] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.150] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=87616) returned 1
	[0133.150] CloseHandle (hObject=0x134) returned 1
	[0133.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20
	[0133.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20
	[0133.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.150] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.150] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.150] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=87104) returned 1
	[0133.150] CloseHandle (hObject=0x134) returned 1
	[0133.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20
	[0133.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20
	[0133.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.150] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.151] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.151] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70720) returned 1
	[0133.151] CloseHandle (hObject=0x134) returned 1
	[0133.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20
	[0133.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20
	[0133.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.151] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.151] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.151] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70224) returned 1
	[0133.151] CloseHandle (hObject=0x134) returned 1
	[0133.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20
	[0133.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20
	[0133.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.152] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.152] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.152] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70208) returned 1
	[0133.152] CloseHandle (hObject=0x134) returned 1
	[0133.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20
	[0133.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20
	[0133.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.152] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.153] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.153] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=383786) returned 1
	[0133.153] CloseHandle (hObject=0x134) returned 1
	[0133.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27
	[0133.153] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x26) returned 0
	[0133.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27
	[0133.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\bootmgr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.153] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.153] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x27) returned 0
	[0133.153] CreateFileW (lpFileName="\\\\?\\C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.154] CreateFileW (lpFileName="\\\\?\\C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.155] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=99136) returned 1
	[0133.155] CloseHandle (hObject=0x134) returned 1
	[0133.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll")) returned 0x20
	[0133.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll")) returned 0x20
	[0133.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.DLL" (normalized: "c:\\program files\\common files\\designer\\msaddndr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x160
	[0133.156] GetFileSizeEx (in: hFile=0x160, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1369952) returned 1
	[0133.156] CloseHandle (hObject=0x160) returned 1
	[0133.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll")) returned 0x20
	[0133.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll")) returned 0x20
	[0133.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DBGHELP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dbghelp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.157] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=994184) returned 1
	[0133.157] CloseHandle (hObject=0x134) returned 1
	[0133.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe")) returned 0x20
	[0133.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe")) returned 0x20
	[0133.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DW20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.158] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=629664) returned 1
	[0133.158] CloseHandle (hObject=0x134) returned 1
	[0133.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe")) returned 0x20
	[0133.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe")) returned 0x20
	[0133.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\DWTRIG20.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\dw\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.159] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=64096) returned 1
	[0133.159] CloseHandle (hObject=0x134) returned 1
	[0133.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll")) returned 0x20
	[0133.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll")) returned 0x20
	[0133.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\1033\\eeintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.160] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2557) returned 1
	[0133.161] CloseHandle (hObject=0x134) returned 1
	[0133.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt")) returned 0x20
	[0133.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt")) returned 0x20
	[0133.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.cnt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.161] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=543304) returned 1
	[0133.161] CloseHandle (hObject=0x134) returned 1
	[0133.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe")) returned 0x20
	[0133.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe")) returned 0x20
	[0133.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.162] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=566) returned 1
	[0133.163] CloseHandle (hObject=0x134) returned 1
	[0133.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest")) returned 0x20
	[0133.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest")) returned 0x20
	[0133.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\eqnedt32.exe.manifest" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.163] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=176311) returned 1
	[0133.163] CloseHandle (hObject=0x134) returned 1
	[0133.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp")) returned 0x20
	[0133.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp")) returned 0x20
	[0133.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\eqnedt32.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.164] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7656) returned 1
	[0133.164] CloseHandle (hObject=0x134) returned 1
	[0133.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf")) returned 0x20
	[0133.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf")) returned 0x20
	[0133.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134
	[0133.165] GetFileSizeEx (in: hFile=0x134, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31104) returned 1
	[0133.165] CloseHandle (hObject=0x134) returned 1
	[0133.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll")) returned 0x20
	[0133.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll")) returned 0x20
	[0133.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\MSOEURO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\euro\\msoeuro.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x194
	[0133.281] GetFileSizeEx (in: hFile=0x194, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38768) returned 1
	[0133.284] CloseHandle (hObject=0x194) returned 1
	[0133.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll")) returned 0x20
	[0133.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll")) returned 0x20
	[0133.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\msgfilt.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\filters\\msgfilt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.303] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=791686) returned 1
	[0133.303] CloseHandle (hObject=0x198) returned 1
	[0133.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20
	[0133.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20
	[0133.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198
	[0133.312] GetFileSizeEx (in: hFile=0x198, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0133.312] CloseHandle (hObject=0x198) returned 1
	[0133.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20
	[0133.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20
	[0133.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.423] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0133.423] CloseHandle (hObject=0x1a4) returned 1
	[0133.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20
	[0133.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20
	[0133.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.424] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32768) returned 1
	[0133.424] CloseHandle (hObject=0x1a4) returned 1
	[0133.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20
	[0133.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20
	[0133.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.425] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0133.425] CloseHandle (hObject=0x1a4) returned 1
	[0133.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20
	[0133.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20
	[0133.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.425] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3072) returned 1
	[0133.425] CloseHandle (hObject=0x1a4) returned 1
	[0133.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20
	[0133.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20
	[0133.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.426] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0133.426] CloseHandle (hObject=0x1a4) returned 1
	[0133.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20
	[0133.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20
	[0133.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.427] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0133.427] CloseHandle (hObject=0x1a4) returned 1
	[0133.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20
	[0133.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20
	[0133.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.428] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0133.428] CloseHandle (hObject=0x1a4) returned 1
	[0133.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20
	[0133.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20
	[0133.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.429] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1600388) returned 1
	[0133.429] CloseHandle (hObject=0x1a4) returned 1
	[0133.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0x20
	[0133.429] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.429] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0
	[0133.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.429] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=927744) returned 1
	[0133.430] CloseHandle (hObject=0x1a4) returned 1
	[0133.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20
	[0133.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20
	[0133.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.430] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0133.430] CloseHandle (hObject=0x1a4) returned 1
	[0133.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20
	[0133.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20
	[0133.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.431] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1434) returned 1
	[0133.432] CloseHandle (hObject=0x1a4) returned 1
	[0133.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20
	[0133.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20
	[0133.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.433] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=212) returned 1
	[0133.433] CloseHandle (hObject=0x1a4) returned 1
	[0133.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20
	[0133.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20
	[0133.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.433] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=384) returned 1
	[0133.434] CloseHandle (hObject=0x1a4) returned 1
	[0133.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20
	[0133.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20
	[0133.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.435] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1118) returned 1
	[0133.435] CloseHandle (hObject=0x1a4) returned 1
	[0133.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20
	[0133.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20
	[0133.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.436] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=392) returned 1
	[0133.436] CloseHandle (hObject=0x1a4) returned 1
	[0133.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20
	[0133.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20
	[0133.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.437] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=727) returned 1
	[0133.437] CloseHandle (hObject=0x1a4) returned 1
	[0133.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20
	[0133.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20
	[0133.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8
	[0133.440] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3150) returned 1
	[0133.440] CloseHandle (hObject=0x1a8) returned 1
	[0133.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20
	[0133.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20
	[0133.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8
	[0133.440] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=247) returned 1
	[0133.440] CloseHandle (hObject=0x1a8) returned 1
	[0133.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20
	[0133.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20
	[0133.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8
	[0133.442] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3161) returned 1
	[0133.442] CloseHandle (hObject=0x1a8) returned 1
	[0133.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20
	[0133.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20
	[0133.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a8
	[0133.443] GetFileSizeEx (in: hFile=0x1a8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3166) returned 1
	[0133.443] CloseHandle (hObject=0x1a8) returned 1
	[0133.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20
	[0133.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20
	[0133.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0133.445] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=738) returned 1
	[0133.445] CloseHandle (hObject=0x1ac) returned 1
	[0133.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20
	[0133.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20
	[0133.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1ac
	[0133.446] GetFileSizeEx (in: hFile=0x1ac, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=804) returned 1
	[0133.446] CloseHandle (hObject=0x1ac) returned 1
	[0133.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20
	[0133.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20
	[0133.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.450] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=488) returned 1
	[0133.450] CloseHandle (hObject=0x1a4) returned 1
	[0133.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20
	[0133.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20
	[0133.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.451] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=617) returned 1
	[0133.451] CloseHandle (hObject=0x1a4) returned 1
	[0133.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20
	[0133.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20
	[0133.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.452] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16616) returned 1
	[0133.452] CloseHandle (hObject=0x1a4) returned 1
	[0133.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20
	[0133.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20
	[0133.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.453] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15097) returned 1
	[0133.453] CloseHandle (hObject=0x1a4) returned 1
	[0133.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20
	[0133.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20
	[0133.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.455] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9803) returned 1
	[0133.455] CloseHandle (hObject=0x1a4) returned 1
	[0133.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20
	[0133.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20
	[0133.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.456] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11067) returned 1
	[0133.456] CloseHandle (hObject=0x1a4) returned 1
	[0133.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20
	[0133.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20
	[0133.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.458] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10947) returned 1
	[0133.458] CloseHandle (hObject=0x1a4) returned 1
	[0133.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20
	[0133.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20
	[0133.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.458] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38485) returned 1
	[0133.458] CloseHandle (hObject=0x1a4) returned 1
	[0133.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20
	[0133.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20
	[0133.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a4
	[0133.459] GetFileSizeEx (in: hFile=0x1a4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1218) returned 1
	[0133.459] CloseHandle (hObject=0x1a4) returned 1
	[0133.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml")) returned 0x20
	[0133.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml")) returned 0x20
	[0133.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers\\numbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers\\numbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.462] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=209) returned 1
	[0133.462] CloseHandle (hObject=0x1b8) returned 1
	[0133.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml")) returned 0x20
	[0133.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml")) returned 0x20
	[0133.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\numbers.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\numbers.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.463] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=471) returned 1
	[0133.463] CloseHandle (hObject=0x1b8) returned 1
	[0133.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20
	[0133.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20
	[0133.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.464] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=215) returned 1
	[0133.464] CloseHandle (hObject=0x1b8) returned 1
	[0133.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20
	[0133.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20
	[0133.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.465] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1437) returned 1
	[0133.465] CloseHandle (hObject=0x1b8) returned 1
	[0133.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20
	[0133.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20
	[0133.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.555] SetEvent (hEvent=0xfc) returned 1
	[0133.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.653] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=924) returned 1
	[0133.653] CloseHandle (hObject=0x1e0) returned 1
	[0133.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20
	[0133.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20
	[0133.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.653] SetEvent (hEvent=0xfc) returned 1
	[0133.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.654] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=215) returned 1
	[0133.654] CloseHandle (hObject=0x1e0) returned 1
	[0133.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20
	[0133.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20
	[0133.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.655] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=749) returned 1
	[0133.655] CloseHandle (hObject=0x1e0) returned 1
	[0133.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20
	[0133.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20
	[0133.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.657] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=749) returned 1
	[0133.657] CloseHandle (hObject=0x1e0) returned 1
	[0133.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20
	[0133.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20
	[0133.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.657] SetEvent (hEvent=0xfc) returned 1
	[0133.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.657] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2764) returned 1
	[0133.657] CloseHandle (hObject=0x1e0) returned 1
	[0133.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20
	[0133.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20
	[0133.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.659] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=591) returned 1
	[0133.659] CloseHandle (hObject=0x1b8) returned 1
	[0133.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20
	[0133.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20
	[0133.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.660] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1166) returned 1
	[0133.661] CloseHandle (hObject=0x1e0) returned 1
	[0133.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml")) returned 0x20
	[0133.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml")) returned 0x20
	[0133.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web\\webbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web\\webbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.661] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=207) returned 1
	[0133.661] CloseHandle (hObject=0x1e0) returned 1
	[0133.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml")) returned 0x20
	[0133.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml")) returned 0x20
	[0133.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\fsdefinitions\\web.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\web.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.662] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0133.662] CloseHandle (hObject=0x1e0) returned 1
	[0133.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20
	[0133.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20
	[0133.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.663] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0133.663] CloseHandle (hObject=0x1e0) returned 1
	[0133.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20
	[0133.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20
	[0133.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.664] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0133.664] CloseHandle (hObject=0x1b8) returned 1
	[0133.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20
	[0133.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20
	[0133.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.665] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46624) returned 1
	[0133.665] CloseHandle (hObject=0x1b8) returned 1
	[0133.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20
	[0133.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20
	[0133.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenalm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.666] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=747280) returned 1
	[0133.666] CloseHandle (hObject=0x1b8) returned 1
	[0133.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenalm.dat")) returned 0x20
	[0133.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenalm.dat")) returned 0x20
	[0133.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenalm.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.667] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=815680) returned 1
	[0133.667] CloseHandle (hObject=0x1b8) returned 1
	[0133.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20
	[0133.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20
	[0133.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.668] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1100368) returned 1
	[0133.668] CloseHandle (hObject=0x1b8) returned 1
	[0133.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20
	[0133.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20
	[0133.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.669] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3053984) returned 1
	[0133.669] CloseHandle (hObject=0x1b8) returned 1
	[0133.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat")) returned 0x20
	[0133.669] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.669] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruklm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruklm.dat")) returned 0
	[0133.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.670] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2227968) returned 1
	[0133.670] CloseHandle (hObject=0x1b8) returned 1
	[0133.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat")) returned 0x20
	[0133.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwruksh.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwruksh.dat")) returned 0
	[0133.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.670] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3195696) returned 1
	[0133.670] CloseHandle (hObject=0x1b8) returned 1
	[0133.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0x20
	[0133.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.671] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0
	[0133.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.671] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4120784) returned 1
	[0133.671] CloseHandle (hObject=0x1b8) returned 1
	[0133.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0x20
	[0133.671] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.671] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0
	[0133.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.672] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=353280) returned 1
	[0133.672] CloseHandle (hObject=0x1b8) returned 1
	[0133.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20
	[0133.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20
	[0133.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.672] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2103296) returned 1
	[0133.672] CloseHandle (hObject=0x1b8) returned 1
	[0133.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0x20
	[0133.673] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.673] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0
	[0133.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkwatson.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.673] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=397312) returned 1
	[0133.673] CloseHandle (hObject=0x1b8) returned 1
	[0133.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkwatson.exe")) returned 0x20
	[0133.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkwatson.exe")) returned 0x20
	[0133.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkwatson.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InkWatson.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkwatson.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.674] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=383488) returned 1
	[0133.674] CloseHandle (hObject=0x1b8) returned 1
	[0133.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20
	[0133.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20
	[0133.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.674] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2592) returned 1
	[0133.674] CloseHandle (hObject=0x1b8) returned 1
	[0133.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20
	[0133.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20
	[0133.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.675] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2462) returned 1
	[0133.675] CloseHandle (hObject=0x1b8) returned 1
	[0133.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20
	[0133.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20
	[0133.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.676] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2436) returned 1
	[0133.676] CloseHandle (hObject=0x1b8) returned 1
	[0133.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20
	[0133.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20
	[0133.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.677] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2556) returned 1
	[0133.677] CloseHandle (hObject=0x1b8) returned 1
	[0133.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20
	[0133.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20
	[0133.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.678] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2514) returned 1
	[0133.678] CloseHandle (hObject=0x1b8) returned 1
	[0133.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20
	[0133.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20
	[0133.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.678] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2616) returned 1
	[0133.678] CloseHandle (hObject=0x1b8) returned 1
	[0133.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20
	[0133.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20
	[0133.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.680] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2578) returned 1
	[0133.680] CloseHandle (hObject=0x1b8) returned 1
	[0133.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20
	[0133.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20
	[0133.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.680] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3024) returned 1
	[0133.680] CloseHandle (hObject=0x1b8) returned 1
	[0133.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20
	[0133.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20
	[0133.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.681] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2048) returned 1
	[0133.681] CloseHandle (hObject=0x1b8) returned 1
	[0133.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20
	[0133.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20
	[0133.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.682] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2658) returned 1
	[0133.682] CloseHandle (hObject=0x1b8) returned 1
	[0133.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20
	[0133.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20
	[0133.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.683] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2628) returned 1
	[0133.683] CloseHandle (hObject=0x1b8) returned 1
	[0133.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20
	[0133.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20
	[0133.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.684] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2526) returned 1
	[0133.684] CloseHandle (hObject=0x1b8) returned 1
	[0133.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20
	[0133.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20
	[0133.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.685] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2522) returned 1
	[0133.685] CloseHandle (hObject=0x1b8) returned 1
	[0133.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20
	[0133.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20
	[0133.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.686] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2568) returned 1
	[0133.686] CloseHandle (hObject=0x1b8) returned 1
	[0133.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20
	[0133.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20
	[0133.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.687] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40960) returned 1
	[0133.687] CloseHandle (hObject=0x1b8) returned 1
	[0133.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20
	[0133.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20
	[0133.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.687] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2626) returned 1
	[0133.687] CloseHandle (hObject=0x1b8) returned 1
	[0133.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20
	[0133.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20
	[0133.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.688] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2580) returned 1
	[0133.688] CloseHandle (hObject=0x1b8) returned 1
	[0133.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20
	[0133.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20
	[0133.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.949] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2600) returned 1
	[0133.949] CloseHandle (hObject=0x1b8) returned 1
	[0133.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20
	[0133.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20
	[0133.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.949] SetEvent (hEvent=0xfc) returned 1
	[0133.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.953] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0133.953] CloseHandle (hObject=0x1b8) returned 1
	[0133.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20
	[0133.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20
	[0133.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.953] SetEvent (hEvent=0xfc) returned 1
	[0133.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.953] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=110592) returned 1
	[0133.954] CloseHandle (hObject=0x1b8) returned 1
	[0133.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll")) returned 0x20
	[0133.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll")) returned 0x20
	[0133.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipBand.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipband.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.954] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=544768) returned 1
	[0133.954] CloseHandle (hObject=0x1b8) returned 1
	[0133.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20
	[0133.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20
	[0133.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.955] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12288) returned 1
	[0133.955] CloseHandle (hObject=0x1b8) returned 1
	[0133.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20
	[0133.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20
	[0133.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.956] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1246720) returned 1
	[0133.956] CloseHandle (hObject=0x1b8) returned 1
	[0133.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20
	[0133.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20
	[0133.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.956] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=503296) returned 1
	[0133.956] CloseHandle (hObject=0x1b8) returned 1
	[0133.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20
	[0133.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20
	[0133.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.957] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=101376) returned 1
	[0133.957] CloseHandle (hObject=0x1b8) returned 1
	[0133.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20
	[0133.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20
	[0133.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.958] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0133.958] CloseHandle (hObject=0x1b8) returned 1
	[0133.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20
	[0133.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20
	[0133.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.959] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0133.959] CloseHandle (hObject=0x1b8) returned 1
	[0133.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20
	[0133.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20
	[0133.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.961] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0133.961] CloseHandle (hObject=0x1e0) returned 1
	[0133.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20
	[0133.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20
	[0133.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.961] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0133.961] CloseHandle (hObject=0x1e0) returned 1
	[0133.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20
	[0133.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20
	[0133.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.962] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=419232) returned 1
	[0133.962] CloseHandle (hObject=0x1e0) returned 1
	[0133.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll")) returned 0x20
	[0133.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll")) returned 0x20
	[0133.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\MSCDM.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\msclientdatamgr\\mscdm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.963] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26624) returned 1
	[0133.964] CloseHandle (hObject=0x1e0) returned 1
	[0133.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20
	[0133.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20
	[0133.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.965] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=378880) returned 1
	[0133.965] CloseHandle (hObject=0x1e0) returned 1
	[0133.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20
	[0133.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20
	[0133.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.966] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=198056) returned 1
	[0133.966] CloseHandle (hObject=0x1e0) returned 1
	[0133.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll")) returned 0x20
	[0133.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll")) returned 0x20
	[0133.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.969] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52656) returned 1
	[0133.969] CloseHandle (hObject=0x1e0) returned 1
	[0133.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll")) returned 0x20
	[0133.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll")) returned 0x20
	[0133.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEODBCI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\aceodbci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.969] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20944) returned 1
	[0133.969] CloseHandle (hObject=0x1e0) returned 1
	[0133.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll")) returned 0x20
	[0133.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll")) returned 0x20
	[0133.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACERECR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acerecr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.970] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=862608) returned 1
	[0133.970] CloseHandle (hObject=0x1e0) returned 1
	[0133.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll")) returned 0x20
	[0133.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll")) returned 0x20
	[0133.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\acewstr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.971] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1680383) returned 1
	[0133.971] CloseHandle (hObject=0x1e0) returned 1
	[0133.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm")) returned 0x20
	[0133.971] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.971] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ADO210.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\ado210.chm")) returned 0
	[0133.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.971] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=154448) returned 1
	[0133.971] CloseHandle (hObject=0x1e0) returned 1
	[0133.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll")) returned 0x20
	[0133.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll")) returned 0x20
	[0133.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\ALRTINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\alrtintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.973] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2528128) returned 1
	[0133.973] CloseHandle (hObject=0x1b8) returned 1
	[0133.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll")) returned 0x20
	[0133.973] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.973] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll")) returned 0
	[0133.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.973] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=55680) returned 1
	[0133.973] CloseHandle (hObject=0x1b8) returned 1
	[0133.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll")) returned 0x20
	[0133.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll")) returned 0x20
	[0133.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.975] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1388416) returned 1
	[0133.975] CloseHandle (hObject=0x1b8) returned 1
	[0133.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll")) returned 0x20
	[0133.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll")) returned 0x20
	[0133.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSOINTL.REST.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\msointl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.976] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41864) returned 1
	[0133.976] CloseHandle (hObject=0x1e0) returned 1
	[0133.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll")) returned 0x20
	[0133.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll")) returned 0x20
	[0133.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\MSSOAPR3.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\mssoapr3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.977] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11656) returned 1
	[0133.977] CloseHandle (hObject=0x1e0) returned 1
	[0133.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll")) returned 0x20
	[0133.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll")) returned 0x20
	[0133.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\OARPMANR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\oarpmanr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.978] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1941) returned 1
	[0133.978] CloseHandle (hObject=0x1e0) returned 1
	[0133.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm")) returned 0x20
	[0133.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm")) returned 0x20
	[0133.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\README.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.979] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=105344) returned 1
	[0133.979] CloseHandle (hObject=0x1e0) returned 1
	[0133.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll")) returned 0x20
	[0133.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll")) returned 0x20
	[0133.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\xlsrvintl.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\1033\\xlsrvintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.981] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3213192) returned 1
	[0133.981] CloseHandle (hObject=0x1e0) returned 1
	[0133.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll")) returned 0x20
	[0133.981] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0133.981] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acecore.dll")) returned 0
	[0133.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.981] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=744888) returned 1
	[0133.981] CloseHandle (hObject=0x1e0) returned 1
	[0133.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll")) returned 0x20
	[0133.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll")) returned 0x20
	[0133.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEDAO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acedao.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.983] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43408) returned 1
	[0133.983] CloseHandle (hObject=0x1e0) returned 1
	[0133.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll")) returned 0x20
	[0133.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll")) returned 0x20
	[0133.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceerr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1e0
	[0133.986] GetFileSizeEx (in: hFile=0x1e0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=442272) returned 1
	[0133.986] CloseHandle (hObject=0x1e0) returned 1
	[0133.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll")) returned 0x20
	[0133.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll")) returned 0x20
	[0133.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCH.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexch.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.987] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=899992) returned 1
	[0133.987] CloseHandle (hObject=0x1b8) returned 1
	[0133.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll")) returned 0x20
	[0133.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll")) returned 0x20
	[0133.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEEXCL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceexcl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.988] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=342960) returned 1
	[0133.988] CloseHandle (hObject=0x1b8) returned 1
	[0133.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll")) returned 0x20
	[0133.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll")) returned 0x20
	[0133.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODBC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodbc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0133.989] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15800) returned 1
	[0133.989] CloseHandle (hObject=0x1b8) returned 1
	[0133.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll")) returned 0x20
	[0133.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll")) returned 0x20
	[0133.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0133.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODDBS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceoddbs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0133.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.132] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15800) returned 1
	[0134.132] CloseHandle (hObject=0x1b8) returned 1
	[0134.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll")) returned 0x20
	[0134.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll")) returned 0x20
	[0134.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEODEXL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\aceodexl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.133] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=691616) returned 1
	[0134.133] CloseHandle (hObject=0x1b8) returned 1
	[0134.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll")) returned 0x20
	[0134.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll")) returned 0x20
	[0134.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEREP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acerep.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.134] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=297360) returned 1
	[0134.134] CloseHandle (hObject=0x1b8) returned 1
	[0134.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll")) returned 0x20
	[0134.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll")) returned 0x20
	[0134.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACETXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acetxt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.134] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3050912) returned 1
	[0134.134] CloseHandle (hObject=0x1b8) returned 1
	[0134.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll")) returned 0x20
	[0134.135] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.135] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWDAT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewdat.dll")) returned 0
	[0134.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.136] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=318368) returned 1
	[0134.136] CloseHandle (hObject=0x1b8) returned 1
	[0134.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll")) returned 0x20
	[0134.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll")) returned 0x20
	[0134.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEWSS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acewss.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.137] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=502168) returned 1
	[0134.137] CloseHandle (hObject=0x1b8) returned 1
	[0134.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll")) returned 0x20
	[0134.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll")) returned 0x20
	[0134.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ACEXBE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\acexbe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.139] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=385368) returned 1
	[0134.139] CloseHandle (hObject=0x1b8) returned 1
	[0134.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll")) returned 0x20
	[0134.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll")) returned 0x20
	[0134.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ATLCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\atlconv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.140] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5072816) returned 1
	[0134.140] CloseHandle (hObject=0x1b8) returned 1
	[0134.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll")) returned 0x20
	[0134.140] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.140] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Csi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csi.dll")) returned 0
	[0134.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.141] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1784192) returned 1
	[0134.141] CloseHandle (hObject=0x1b8) returned 1
	[0134.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll")) returned 0x20
	[0134.142] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.142] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\CsiSoap.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\csisoap.dll")) returned 0
	[0134.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.142] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4297568) returned 1
	[0134.142] CloseHandle (hObject=0x1b8) returned 1
	[0134.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf")) returned 0x20
	[0134.142] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.142] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\cultures\\office.odf")) returned 0
	[0134.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.143] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=518984) returned 1
	[0134.143] CloseHandle (hObject=0x1b8) returned 1
	[0134.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll")) returned 0x20
	[0134.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll")) returned 0x20
	[0134.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\expsrv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.144] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=138616) returned 1
	[0134.144] CloseHandle (hObject=0x1b8) returned 1
	[0134.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll")) returned 0x20
	[0134.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll")) returned 0x20
	[0134.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_PDF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_pdf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.146] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=71032) returned 1
	[0134.146] CloseHandle (hObject=0x1b8) returned 1
	[0134.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll")) returned 0x20
	[0134.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll")) returned 0x20
	[0134.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\EXP_XPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\exp_xps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.148] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=157024) returned 1
	[0134.148] CloseHandle (hObject=0x1b8) returned 1
	[0134.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe")) returned 0x20
	[0134.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe")) returned 0x20
	[0134.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\FLTLDR.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\fltldr.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.149] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4289376) returned 1
	[0134.149] CloseHandle (hObject=0x1b8) returned 1
	[0134.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll")) returned 0x20
	[0134.149] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.149] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\IACOM2.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\iacom2.dll")) returned 0
	[0134.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.150] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=204168) returned 1
	[0134.151] CloseHandle (hObject=0x1b8) returned 1
	[0134.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe")) returned 0x20
	[0134.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe")) returned 0x20
	[0134.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\liclua.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.152] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25417600) returned 1
	[0134.152] CloseHandle (hObject=0x1b8) returned 1
	[0134.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll")) returned 0x20
	[0134.152] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.152] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mso.dll")) returned 0
	[0134.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.153] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=473952) returned 1
	[0134.153] CloseHandle (hObject=0x1b8) returned 1
	[0134.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe")) returned 0x20
	[0134.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe")) returned 0x20
	[0134.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOICONS.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoicons.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.154] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=72521600) returned 1
	[0134.154] CloseHandle (hObject=0x1b8) returned 1
	[0134.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll")) returned 0x20
	[0134.155] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.155] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msores.dll")) returned 0
	[0134.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoshext.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.155] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1269648) returned 1
	[0134.155] CloseHandle (hObject=0x1b8) returned 1
	[0134.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoshext.dll")) returned 0x20
	[0134.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoshext.dll")) returned 0x20
	[0134.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoshext.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\msoshext.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoshext.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.156] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56144) returned 1
	[0134.156] CloseHandle (hObject=0x1b8) returned 1
	[0134.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll")) returned 0x20
	[0134.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll")) returned 0x20
	[0134.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXEV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxev.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.158] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=121168) returned 1
	[0134.158] CloseHandle (hObject=0x1b8) returned 1
	[0134.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe")) returned 0x20
	[0134.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe")) returned 0x20
	[0134.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLED.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmled.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmlmf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.159] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56192) returned 1
	[0134.159] CloseHandle (hObject=0x1b8) returned 1
	[0134.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmlmf.dll")) returned 0x20
	[0134.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmlmf.dll")) returned 0x20
	[0134.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmlmf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSOXMLMF.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msoxmlmf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.160] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1198464) returned 1
	[0134.160] CloseHandle (hObject=0x1b8) returned 1
	[0134.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll")) returned 0x20
	[0134.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll")) returned 0x20
	[0134.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\msptls.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.161] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=705392) returned 1
	[0134.161] CloseHandle (hObject=0x1b8) returned 1
	[0134.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll")) returned 0x20
	[0134.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll")) returned 0x20
	[0134.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MSSOAP30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\mssoap30.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.164] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6747) returned 1
	[0134.164] CloseHandle (hObject=0x1b8) returned 1
	[0134.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab")) returned 0x20
	[0134.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab")) returned 0x20
	[0134.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUAUTH.CAB" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.166] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24976) returned 1
	[0134.166] CloseHandle (hObject=0x1b8) returned 1
	[0134.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll")) returned 0x20
	[0134.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll")) returned 0x20
	[0134.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\MUOPTIN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\muoptin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.167] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=232840) returned 1
	[0134.167] CloseHandle (hObject=0x1b8) returned 1
	[0134.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe")) returned 0x20
	[0134.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe")) returned 0x20
	[0134.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Oarpmany.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\oarpmany.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.169] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30056) returned 1
	[0134.169] CloseHandle (hObject=0x1b8) returned 1
	[0134.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll")) returned 0x20
	[0134.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll")) returned 0x20
	[0134.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\ODBCMON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\odbcmon.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.170] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1349) returned 1
	[0134.170] CloseHandle (hObject=0x1b8) returned 1
	[0134.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml")) returned 0x20
	[0134.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml")) returned 0x20
	[0134.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.172] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=819) returned 1
	[0134.172] CloseHandle (hObject=0x1b8) returned 1
	[0134.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml")) returned 0x20
	[0134.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml")) returned 0x20
	[0134.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\AccessMUISet.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0134.297] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2624) returned 1
	[0134.297] CloseHandle (hObject=0x148) returned 1
	[0134.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml")) returned 0x20
	[0134.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml")) returned 0x20
	[0134.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\access.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0134.298] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=913) returned 1
	[0134.298] CloseHandle (hObject=0x148) returned 1
	[0134.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml")) returned 0x20
	[0134.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml")) returned 0x20
	[0134.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\GrooveMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0134.407] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1452) returned 1
	[0134.407] CloseHandle (hObject=0x148) returned 1
	[0134.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml")) returned 0x20
	[0134.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml")) returned 0x20
	[0134.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\groove.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.407] SetEvent (hEvent=0xfc) returned 1
	[0134.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.518] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=596341) returned 1
	[0134.518] CloseHandle (hObject=0x1b8) returned 1
	[0134.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml")) returned 0x20
	[0134.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml")) returned 0x20
	[0134.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.520] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37689) returned 1
	[0134.520] CloseHandle (hObject=0x1b8) returned 1
	[0134.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm")) returned 0x20
	[0134.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm")) returned 0x20
	[0134.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSCONFIG.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\psconfig.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.520] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26929) returned 1
	[0134.520] CloseHandle (hObject=0x1b8) returned 1
	[0134.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm")) returned 0x20
	[0134.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm")) returned 0x20
	[0134.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10o.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.522] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27195) returned 1
	[0134.522] CloseHandle (hObject=0x1b8) returned 1
	[0134.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm")) returned 0x20
	[0134.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm")) returned 0x20
	[0134.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.523] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67190) returned 1
	[0134.523] CloseHandle (hObject=0x1b8) returned 1
	[0134.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm")) returned 0x20
	[0134.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm")) returned 0x20
	[0134.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.524] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9352) returned 1
	[0134.524] CloseHandle (hObject=0x1b8) returned 1
	[0134.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml")) returned 0x20
	[0134.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml")) returned 0x20
	[0134.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.525] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1383) returned 1
	[0134.525] CloseHandle (hObject=0x1b8) returned 1
	[0134.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml")) returned 0x20
	[0134.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml")) returned 0x20
	[0134.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\Office32MUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.526] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2362) returned 1
	[0134.526] CloseHandle (hObject=0x1b8) returned 1
	[0134.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml")) returned 0x20
	[0134.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml")) returned 0x20
	[0134.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.527] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4274) returned 1
	[0134.527] CloseHandle (hObject=0x1b8) returned 1
	[0134.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml")) returned 0x20
	[0134.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml")) returned 0x20
	[0134.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\Office32WW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\office32.ww\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.528] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1606) returned 1
	[0134.528] CloseHandle (hObject=0x1b8) returned 1
	[0134.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml")) returned 0x20
	[0134.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml")) returned 0x20
	[0134.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\OneNoteMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.529] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1988) returned 1
	[0134.529] CloseHandle (hObject=0x1b8) returned 1
	[0134.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml")) returned 0x20
	[0134.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml")) returned 0x20
	[0134.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\onenote.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.531] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7379816) returned 1
	[0134.531] CloseHandle (hObject=0x1b8) returned 1
	[0134.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll")) returned 0x20
	[0134.531] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.531] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSETUP.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetup.dll")) returned 0
	[0134.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetupps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.532] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47520) returned 1
	[0134.532] CloseHandle (hObject=0x1b8) returned 1
	[0134.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetupps.dll")) returned 0x20
	[0134.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetupps.dll")) returned 0x20
	[0134.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetupps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OSetupPS.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\osetupps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.533] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3186) returned 1
	[0134.533] CloseHandle (hObject=0x1b8) returned 1
	[0134.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml")) returned 0x20
	[0134.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml")) returned 0x20
	[0134.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\OutlookMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.534] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4207) returned 1
	[0134.534] CloseHandle (hObject=0x1b8) returned 1
	[0134.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml")) returned 0x20
	[0134.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml")) returned 0x20
	[0134.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\outlook.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.536] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1463568) returned 1
	[0134.536] CloseHandle (hObject=0x1b8) returned 1
	[0134.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pidgenx.dll")) returned 0x20
	[0134.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pidgenx.dll")) returned 0x20
	[0134.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pidgenx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.539] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=715834) returned 1
	[0134.539] CloseHandle (hObject=0x1b8) returned 1
	[0134.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20
	[0134.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20
	[0134.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.540] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15736) returned 1
	[0134.540] CloseHandle (hObject=0x1b8) returned 1
	[0134.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20
	[0134.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20
	[0134.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig.companion.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.541] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1450) returned 1
	[0134.541] CloseHandle (hObject=0x1b8) returned 1
	[0134.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml")) returned 0x20
	[0134.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml")) returned 0x20
	[0134.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\PowerPointMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.542] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1886) returned 1
	[0134.543] CloseHandle (hObject=0x1b8) returned 1
	[0134.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml")) returned 0x20
	[0134.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml")) returned 0x20
	[0134.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\powerpoint.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.544] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6421) returned 1
	[0134.544] CloseHandle (hObject=0x1b8) returned 1
	[0134.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml")) returned 0x20
	[0134.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml")) returned 0x20
	[0134.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\PrjProrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\prjprorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.545] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16683) returned 1
	[0134.545] CloseHandle (hObject=0x1b8) returned 1
	[0134.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml")) returned 0x20
	[0134.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml")) returned 0x20
	[0134.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\prjpror\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.546] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1452) returned 1
	[0134.546] CloseHandle (hObject=0x1b8) returned 1
	[0134.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml")) returned 0x20
	[0134.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml")) returned 0x20
	[0134.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\ProjectMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.548] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1872) returned 1
	[0134.548] CloseHandle (hObject=0x1b8) returned 1
	[0134.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml")) returned 0x20
	[0134.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml")) returned 0x20
	[0134.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\project.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.549] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1347) returned 1
	[0134.549] CloseHandle (hObject=0x1b8) returned 1
	[0134.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml")) returned 0x20
	[0134.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml")) returned 0x20
	[0134.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.550] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1457) returned 1
	[0134.550] CloseHandle (hObject=0x1b8) returned 1
	[0134.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml")) returned 0x20
	[0134.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml")) returned 0x20
	[0134.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.551] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1458) returned 1
	[0134.551] CloseHandle (hObject=0x1b8) returned 1
	[0134.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml")) returned 0x20
	[0134.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml")) returned 0x20
	[0134.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\Proof.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.552] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=811) returned 1
	[0134.552] CloseHandle (hObject=0x1b8) returned 1
	[0134.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml")) returned 0x20
	[0134.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml")) returned 0x20
	[0134.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\Proofing.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.555] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5884) returned 1
	[0134.555] CloseHandle (hObject=0x1b8) returned 1
	[0134.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml")) returned 0x20
	[0134.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml")) returned 0x20
	[0134.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proofing.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0134.760] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16852) returned 1
	[0134.760] CloseHandle (hObject=0x1f4) returned 1
	[0134.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml")) returned 0x20
	[0134.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml")) returned 0x20
	[0134.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\ProPlusrWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\proplusr\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.760] SetEvent (hEvent=0xfc) returned 1
	[0134.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0134.761] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1450) returned 1
	[0134.761] CloseHandle (hObject=0x1f4) returned 1
	[0134.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml")) returned 0x20
	[0134.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml")) returned 0x20
	[0134.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\PublisherMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0134.762] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1608) returned 1
	[0134.762] CloseHandle (hObject=0x1f4) returned 1
	[0134.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml")) returned 0x20
	[0134.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml")) returned 0x20
	[0134.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\publisher.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.763] SetEvent (hEvent=0xfc) returned 1
	[0134.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.764] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1377144) returned 1
	[0134.764] CloseHandle (hObject=0x190) returned 1
	[0134.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe")) returned 0x20
	[0134.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe")) returned 0x20
	[0134.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Setup.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.764] SetEvent (hEvent=0xfc) returned 1
	[0134.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.765] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6241) returned 1
	[0134.765] CloseHandle (hObject=0x190) returned 1
	[0134.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml")) returned 0x20
	[0134.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml")) returned 0x20
	[0134.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.767] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9503) returned 1
	[0134.767] CloseHandle (hObject=0x1b8) returned 1
	[0134.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml")) returned 0x20
	[0134.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml")) returned 0x20
	[0134.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\VisioMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visio.en-us\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.768] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20577) returned 1
	[0134.768] CloseHandle (hObject=0x1b8) returned 1
	[0134.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml")) returned 0x20
	[0134.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml")) returned 0x20
	[0134.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.769] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8723) returned 1
	[0134.769] CloseHandle (hObject=0x1b8) returned 1
	[0134.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml")) returned 0x20
	[0134.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml")) returned 0x20
	[0134.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\VisiorWW.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\visior\\visiorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.770] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2424) returned 1
	[0134.770] CloseHandle (hObject=0x1b8) returned 1
	[0134.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml")) returned 0x20
	[0134.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml")) returned 0x20
	[0134.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\SETUP.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.771] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1800) returned 1
	[0134.771] CloseHandle (hObject=0x1b8) returned 1
	[0134.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml")) returned 0x20
	[0134.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml")) returned 0x20
	[0134.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\WordMUI.XML" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\office setup controller\\word.en-us\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.772] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9568) returned 1
	[0134.772] CloseHandle (hObject=0x190) returned 1
	[0134.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll")) returned 0x20
	[0134.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll")) returned 0x20
	[0134.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OFFREL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\offrel.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.773] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19848) returned 1
	[0134.773] CloseHandle (hObject=0x190) returned 1
	[0134.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll")) returned 0x20
	[0134.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll")) returned 0x20
	[0134.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPHPROXY.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\ophproxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.774] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18336) returned 1
	[0134.774] CloseHandle (hObject=0x190) returned 1
	[0134.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll")) returned 0x20
	[0134.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll")) returned 0x20
	[0134.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\OPTINPS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\optinps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.776] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=752552) returned 1
	[0134.776] CloseHandle (hObject=0x190) returned 1
	[0134.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll")) returned 0x20
	[0134.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll")) returned 0x20
	[0134.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJ11OD11.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pj11od11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.776] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=261008) returned 1
	[0134.776] CloseHandle (hObject=0x190) returned 1
	[0134.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll")) returned 0x20
	[0134.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll")) returned 0x20
	[0134.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PJRESC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\pjresc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.778] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3943312) returned 1
	[0134.778] CloseHandle (hObject=0x190) returned 1
	[0134.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll")) returned 0x20
	[0134.778] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.778] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\PRJRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\prjres.dll")) returned 0
	[0134.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.779] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1870696) returned 1
	[0134.779] CloseHandle (hObject=0x190) returned 1
	[0134.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll")) returned 0x20
	[0134.779] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.779] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\riched20.dll")) returned 0
	[0134.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.780] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=591736) returned 1
	[0134.780] CloseHandle (hObject=0x190) returned 1
	[0134.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll")) returned 0x20
	[0134.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll")) returned 0x20
	[0134.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\SERCONV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\serconv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.781] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=813824) returned 1
	[0134.781] CloseHandle (hObject=0x190) returned 1
	[0134.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll")) returned 0x20
	[0134.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll")) returned 0x20
	[0134.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\USP10.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\usp10.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.783] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=147344) returned 1
	[0134.783] CloseHandle (hObject=0x190) returned 1
	[0134.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll")) returned 0x20
	[0134.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll")) returned 0x20
	[0134.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\WISC30.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office14\\wisc30.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.785] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=148736) returned 1
	[0134.785] CloseHandle (hObject=0x190) returned 1
	[0134.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll")) returned 0x20
	[0134.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll")) returned 0x20
	[0134.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.785] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1828608) returned 1
	[0134.785] CloseHandle (hObject=0x190) returned 1
	[0134.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll")) returned 0x20
	[0134.787] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.787] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPCEXT.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppcext.dll")) returned 0
	[0134.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.788] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11646) returned 1
	[0134.788] CloseHandle (hObject=0x190) returned 1
	[0134.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms")) returned 0x20
	[0134.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms")) returned 0x20
	[0134.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs-spp-plugin-manifest-signed.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.789] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2173696) returned 1
	[0134.789] CloseHandle (hObject=0x190) returned 1
	[0134.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll")) returned 0x20
	[0134.789] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.789] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPOBJS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppobjs.dll")) returned 0
	[0134.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.790] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15712) returned 1
	[0134.790] CloseHandle (hObject=0x190) returned 1
	[0134.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe")) returned 0x20
	[0134.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe")) returned 0x20
	[0134.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPREARM.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.791] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4925184) returned 1
	[0134.791] CloseHandle (hObject=0x190) returned 1
	[0134.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe")) returned 0x20
	[0134.791] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0134.791] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPSVC.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.exe")) returned 0
	[0134.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.791] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=146192) returned 1
	[0134.791] CloseHandle (hObject=0x190) returned 1
	[0134.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll")) returned 0x20
	[0134.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll")) returned 0x20
	[0134.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.792] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47710) returned 1
	[0134.792] CloseHandle (hObject=0x190) returned 1
	[0134.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof")) returned 0x20
	[0134.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof")) returned 0x20
	[0134.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPWMI.MOF" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppwmi.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.793] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=591168) returned 1
	[0134.793] CloseHandle (hObject=0x190) returned 1
	[0134.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll")) returned 0x20
	[0134.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll")) returned 0x20
	[0134.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSLID.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mslid.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.794] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=444027) returned 1
	[0134.794] CloseHandle (hObject=0x1b8) returned 1
	[0134.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex")) returned 0x20
	[0134.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex")) returned 0x20
	[0134.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.795] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=395651) returned 1
	[0134.795] CloseHandle (hObject=0x1b8) returned 1
	[0134.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex")) returned 0x20
	[0134.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex")) returned 0x20
	[0134.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.796] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=295663) returned 1
	[0134.796] CloseHandle (hObject=0x190) returned 1
	[0134.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex")) returned 0x20
	[0134.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex")) returned 0x20
	[0134.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\proof\\mswds_fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.798] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11463) returned 1
	[0134.798] CloseHandle (hObject=0x190) returned 1
	[0134.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm")) returned 0x20
	[0134.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm")) returned 0x20
	[0134.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\mcabout.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x190
	[0134.799] GetFileSizeEx (in: hFile=0x190, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17280) returned 1
	[0134.799] CloseHandle (hObject=0x190) returned 1
	[0134.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll")) returned 0x20
	[0134.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll")) returned 0x20
	[0134.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.885] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13696) returned 1
	[0134.885] CloseHandle (hObject=0x1b8) returned 1
	[0134.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll")) returned 0x20
	[0134.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll")) returned 0x20
	[0134.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\STINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\1033\\stintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0134.886] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=98176) returned 1
	[0134.886] CloseHandle (hObject=0x1b8) returned 1
	[0134.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll")) returned 0x20
	[0134.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll")) returned 0x20
	[0134.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0134.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FDATE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fdate.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0134.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.011] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=217984) returned 1
	[0135.011] CloseHandle (hObject=0x168) returned 1
	[0135.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll")) returned 0x20
	[0135.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll")) returned 0x20
	[0135.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\FPERSON.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\smart tag\\fperson.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.011] SetEvent (hEvent=0xfc) returned 1
	[0135.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.148] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4587) returned 1
	[0135.148] CloseHandle (hObject=0x1fc) returned 1
	[0135.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif")) returned 0x20
	[0135.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif")) returned 0x20
	[0135.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Cave_Drawings.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\cave_drawings.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.148] SetEvent (hEvent=0xfc) returned 1
	[0135.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.148] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6406) returned 1
	[0135.148] CloseHandle (hObject=0x1fc) returned 1
	[0135.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20
	[0135.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20
	[0135.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.149] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2920) returned 1
	[0135.149] CloseHandle (hObject=0x1fc) returned 1
	[0135.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf")) returned 0x20
	[0135.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf")) returned 0x20
	[0135.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(cm).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(cm).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.150] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7498) returned 1
	[0135.150] CloseHandle (hObject=0x1fc) returned 1
	[0135.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf")) returned 0x20
	[0135.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf")) returned 0x20
	[0135.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\grid_(inch).wmf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\grid_(inch).wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.154] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=235) returned 1
	[0135.154] CloseHandle (hObject=0x1fc) returned 1
	[0135.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20
	[0135.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20
	[0135.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.155] SetEvent (hEvent=0xfc) returned 1
	[0135.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.155] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4222) returned 1
	[0135.155] CloseHandle (hObject=0x1fc) returned 1
	[0135.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20
	[0135.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20
	[0135.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.157] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=152300) returned 1
	[0135.157] CloseHandle (hObject=0x1fc) returned 1
	[0135.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf")) returned 0x20
	[0135.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf")) returned 0x20
	[0135.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Memo.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\memo.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.157] SetEvent (hEvent=0xfc) returned 1
	[0135.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.157] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2209) returned 1
	[0135.157] CloseHandle (hObject=0x1fc) returned 1
	[0135.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg")) returned 0x20
	[0135.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg")) returned 0x20
	[0135.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Monet.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\monet.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.158] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4192) returned 1
	[0135.158] CloseHandle (hObject=0x1fc) returned 1
	[0135.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf")) returned 0x20
	[0135.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf")) returned 0x20
	[0135.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Month_Calendar.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\month_calendar.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.160] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26036) returned 1
	[0135.160] CloseHandle (hObject=0x168) returned 1
	[0135.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf")) returned 0x20
	[0135.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf")) returned 0x20
	[0135.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Music.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\music.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.161] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2950) returned 1
	[0135.161] CloseHandle (hObject=0x168) returned 1
	[0135.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg")) returned 0x20
	[0135.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg")) returned 0x20
	[0135.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Notebook.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\notebook.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.162] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=237) returned 1
	[0135.162] CloseHandle (hObject=0x168) returned 1
	[0135.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20
	[0135.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20
	[0135.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.163] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6381) returned 1
	[0135.163] CloseHandle (hObject=0x168) returned 1
	[0135.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20
	[0135.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20
	[0135.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.164] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=232) returned 1
	[0135.164] CloseHandle (hObject=0x168) returned 1
	[0135.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20
	[0135.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20
	[0135.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.166] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5115) returned 1
	[0135.166] CloseHandle (hObject=0x168) returned 1
	[0135.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20
	[0135.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20
	[0135.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.166] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3981) returned 1
	[0135.167] CloseHandle (hObject=0x168) returned 1
	[0135.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg")) returned 0x20
	[0135.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg")) returned 0x20
	[0135.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pine_Lumber.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pine_lumber.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.167] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5115) returned 1
	[0135.167] CloseHandle (hObject=0x168) returned 1
	[0135.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg")) returned 0x20
	[0135.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg")) returned 0x20
	[0135.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Pretty_Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\pretty_peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.169] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14049) returned 1
	[0135.169] CloseHandle (hObject=0x168) returned 1
	[0135.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg")) returned 0x20
	[0135.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg")) returned 0x20
	[0135.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Psychedelic.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\psychedelic.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.170] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=233) returned 1
	[0135.170] CloseHandle (hObject=0x168) returned 1
	[0135.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20
	[0135.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20
	[0135.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.171] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1920) returned 1
	[0135.171] CloseHandle (hObject=0x168) returned 1
	[0135.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20
	[0135.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20
	[0135.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.172] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15776) returned 1
	[0135.172] CloseHandle (hObject=0x168) returned 1
	[0135.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg")) returned 0x20
	[0135.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg")) returned 0x20
	[0135.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Sand_Paper.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\sand_paper.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.173] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37316) returned 1
	[0135.173] CloseHandle (hObject=0x168) returned 1
	[0135.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf")) returned 0x20
	[0135.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf")) returned 0x20
	[0135.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Seyes.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\seyes.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.174] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=237) returned 1
	[0135.174] CloseHandle (hObject=0x168) returned 1
	[0135.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20
	[0135.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20
	[0135.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.175] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4734) returned 1
	[0135.175] CloseHandle (hObject=0x168) returned 1
	[0135.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20
	[0135.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20
	[0135.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.177] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=81292) returned 1
	[0135.177] CloseHandle (hObject=0x168) returned 1
	[0135.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf")) returned 0x20
	[0135.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf")) returned 0x20
	[0135.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Shorthand.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shorthand.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.177] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1990) returned 1
	[0135.177] CloseHandle (hObject=0x168) returned 1
	[0135.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg")) returned 0x20
	[0135.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg")) returned 0x20
	[0135.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Small_News.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\small_news.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.179] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=232) returned 1
	[0135.179] CloseHandle (hObject=0x168) returned 1
	[0135.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20
	[0135.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20
	[0135.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.180] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10569) returned 1
	[0135.180] CloseHandle (hObject=0x168) returned 1
	[0135.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20
	[0135.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20
	[0135.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.181] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=230) returned 1
	[0135.181] CloseHandle (hObject=0x168) returned 1
	[0135.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20
	[0135.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20
	[0135.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.182] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7505) returned 1
	[0135.182] CloseHandle (hObject=0x168) returned 1
	[0135.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20
	[0135.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20
	[0135.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.183] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1864) returned 1
	[0135.183] CloseHandle (hObject=0x168) returned 1
	[0135.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif")) returned 0x20
	[0135.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif")) returned 0x20
	[0135.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Stucco.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stucco.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.185] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3650) returned 1
	[0135.185] CloseHandle (hObject=0x168) returned 1
	[0135.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg")) returned 0x20
	[0135.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg")) returned 0x20
	[0135.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tanspecks.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tanspecks.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.185] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4638) returned 1
	[0135.185] CloseHandle (hObject=0x168) returned 1
	[0135.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif")) returned 0x20
	[0135.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif")) returned 0x20
	[0135.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Tiki.gif" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\tiki.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.186] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26720) returned 1
	[0135.186] CloseHandle (hObject=0x168) returned 1
	[0135.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf")) returned 0x20
	[0135.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf")) returned 0x20
	[0135.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\To_Do_List.emf" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\to_do_list.emf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.285] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3168) returned 1
	[0135.285] CloseHandle (hObject=0x168) returned 1
	[0135.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg")) returned 0x20
	[0135.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg")) returned 0x20
	[0135.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\White_Chocolate.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\white_chocolate.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.306] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20627) returned 1
	[0135.306] CloseHandle (hObject=0x168) returned 1
	[0135.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png")) returned 0x20
	[0135.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png")) returned 0x20
	[0135.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blends\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.353] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1925) returned 1
	[0135.353] CloseHandle (hObject=0x1fc) returned 1
	[0135.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif")) returned 0x20
	[0135.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif")) returned 0x20
	[0135.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.353] SetEvent (hEvent=0xfc) returned 1
	[0135.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.493] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27407) returned 1
	[0135.493] CloseHandle (hObject=0x1fc) returned 1
	[0135.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png")) returned 0x20
	[0135.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png")) returned 0x20
	[0135.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\blueprnt\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.494] SetEvent (hEvent=0xfc) returned 1
	[0135.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.629] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1347) returned 1
	[0135.629] CloseHandle (hObject=0x168) returned 1
	[0135.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif")) returned 0x20
	[0135.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif")) returned 0x20
	[0135.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\eclipse\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.727] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1364) returned 1
	[0135.727] CloseHandle (hObject=0x1fc) returned 1
	[0135.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif")) returned 0x20
	[0135.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif")) returned 0x20
	[0135.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.727] SetEvent (hEvent=0xfc) returned 1
	[0135.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.728] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11573) returned 1
	[0135.728] CloseHandle (hObject=0x1fc) returned 1
	[0135.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png")) returned 0x20
	[0135.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png")) returned 0x20
	[0135.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\network\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.729] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=91861) returned 1
	[0135.729] CloseHandle (hObject=0x1fc) returned 1
	[0135.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm")) returned 0x20
	[0135.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm")) returned 0x20
	[0135.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.730] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=500) returned 1
	[0135.730] CloseHandle (hObject=0x1fc) returned 1
	[0135.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf")) returned 0x20
	[0135.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf")) returned 0x20
	[0135.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\papyrus.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.730] SetEvent (hEvent=0xfc) returned 1
	[0135.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.731] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2574) returned 1
	[0135.731] CloseHandle (hObject=0x1fc) returned 1
	[0135.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif")) returned 0x20
	[0135.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif")) returned 0x20
	[0135.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.732] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37440) returned 1
	[0135.732] CloseHandle (hObject=0x1fc) returned 1
	[0135.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png")) returned 0x20
	[0135.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png")) returned 0x20
	[0135.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\papyrus\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.732] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53477) returned 1
	[0135.732] CloseHandle (hObject=0x1fc) returned 1
	[0135.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm")) returned 0x20
	[0135.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm")) returned 0x20
	[0135.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.733] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=539) returned 1
	[0135.733] CloseHandle (hObject=0x1fc) returned 1
	[0135.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf")) returned 0x20
	[0135.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf")) returned 0x20
	[0135.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\pixel.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.734] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1593) returned 1
	[0135.734] CloseHandle (hObject=0x1fc) returned 1
	[0135.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif")) returned 0x20
	[0135.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif")) returned 0x20
	[0135.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.735] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21745) returned 1
	[0135.735] CloseHandle (hObject=0x1fc) returned 1
	[0135.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png")) returned 0x20
	[0135.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png")) returned 0x20
	[0135.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\pixel\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.736] SetEvent (hEvent=0xfc) returned 1
	[0135.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.736] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1339) returned 1
	[0135.736] CloseHandle (hObject=0x1fc) returned 1
	[0135.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif")) returned 0x20
	[0135.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif")) returned 0x20
	[0135.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.738] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45582) returned 1
	[0135.738] CloseHandle (hObject=0x168) returned 1
	[0135.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm")) returned 0x20
	[0135.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm")) returned 0x20
	[0135.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.739] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=587) returned 1
	[0135.739] CloseHandle (hObject=0x168) returned 1
	[0135.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf")) returned 0x20
	[0135.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf")) returned 0x20
	[0135.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\profile.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.740] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16738) returned 1
	[0135.740] CloseHandle (hObject=0x168) returned 1
	[0135.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png")) returned 0x20
	[0135.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png")) returned 0x20
	[0135.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\profile\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.741] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1439) returned 1
	[0135.741] CloseHandle (hObject=0x168) returned 1
	[0135.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif")) returned 0x20
	[0135.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif")) returned 0x20
	[0135.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.742] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=48039) returned 1
	[0135.742] CloseHandle (hObject=0x1fc) returned 1
	[0135.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm")) returned 0x20
	[0135.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm")) returned 0x20
	[0135.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.744] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=600) returned 1
	[0135.744] CloseHandle (hObject=0x1fc) returned 1
	[0135.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf")) returned 0x20
	[0135.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf")) returned 0x20
	[0135.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\quad.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.745] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37112) returned 1
	[0135.745] CloseHandle (hObject=0x1fc) returned 1
	[0135.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png")) returned 0x20
	[0135.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png")) returned 0x20
	[0135.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\quad\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.746] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1666) returned 1
	[0135.746] CloseHandle (hObject=0x1fc) returned 1
	[0135.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif")) returned 0x20
	[0135.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif")) returned 0x20
	[0135.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.747] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46942) returned 1
	[0135.747] CloseHandle (hObject=0x1fc) returned 1
	[0135.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm")) returned 0x20
	[0135.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm")) returned 0x20
	[0135.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.747] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=586) returned 1
	[0135.748] CloseHandle (hObject=0x1fc) returned 1
	[0135.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf")) returned 0x20
	[0135.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf")) returned 0x20
	[0135.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\radial.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.748] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19563) returned 1
	[0135.748] CloseHandle (hObject=0x1fc) returned 1
	[0135.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png")) returned 0x20
	[0135.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png")) returned 0x20
	[0135.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\radial\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.749] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1423) returned 1
	[0135.749] CloseHandle (hObject=0x1fc) returned 1
	[0135.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif")) returned 0x20
	[0135.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif")) returned 0x20
	[0135.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.750] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45838) returned 1
	[0135.750] CloseHandle (hObject=0x1fc) returned 1
	[0135.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm")) returned 0x20
	[0135.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm")) returned 0x20
	[0135.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.751] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=586) returned 1
	[0135.751] CloseHandle (hObject=0x1fc) returned 1
	[0135.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf")) returned 0x20
	[0135.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf")) returned 0x20
	[0135.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\refined.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.751] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15737) returned 1
	[0135.751] CloseHandle (hObject=0x1fc) returned 1
	[0135.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png")) returned 0x20
	[0135.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png")) returned 0x20
	[0135.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\refined\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0135.752] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3970) returned 1
	[0135.752] CloseHandle (hObject=0x1fc) returned 1
	[0135.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif")) returned 0x20
	[0135.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif")) returned 0x20
	[0135.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.754] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73822) returned 1
	[0135.754] CloseHandle (hObject=0x168) returned 1
	[0135.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm")) returned 0x20
	[0135.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm")) returned 0x20
	[0135.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.755] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=569) returned 1
	[0135.755] CloseHandle (hObject=0x168) returned 1
	[0135.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf")) returned 0x20
	[0135.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf")) returned 0x20
	[0135.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\ricepapr.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.756] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53115) returned 1
	[0135.756] CloseHandle (hObject=0x168) returned 1
	[0135.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png")) returned 0x20
	[0135.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png")) returned 0x20
	[0135.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ricepapr\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.757] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2604) returned 1
	[0135.757] CloseHandle (hObject=0x168) returned 1
	[0135.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif")) returned 0x20
	[0135.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif")) returned 0x20
	[0135.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.757] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=66016) returned 1
	[0135.757] CloseHandle (hObject=0x168) returned 1
	[0135.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm")) returned 0x20
	[0135.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm")) returned 0x20
	[0135.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.758] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=487) returned 1
	[0135.758] CloseHandle (hObject=0x168) returned 1
	[0135.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf")) returned 0x20
	[0135.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf")) returned 0x20
	[0135.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\ripple.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.760] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31975) returned 1
	[0135.760] CloseHandle (hObject=0x168) returned 1
	[0135.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png")) returned 0x20
	[0135.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png")) returned 0x20
	[0135.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\ripple\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.761] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4100) returned 1
	[0135.761] CloseHandle (hObject=0x168) returned 1
	[0135.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif")) returned 0x20
	[0135.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif")) returned 0x20
	[0135.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.761] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73271) returned 1
	[0135.761] CloseHandle (hObject=0x168) returned 1
	[0135.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm")) returned 0x20
	[0135.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm")) returned 0x20
	[0135.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.766] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=613) returned 1
	[0135.766] CloseHandle (hObject=0x168) returned 1
	[0135.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf")) returned 0x20
	[0135.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf")) returned 0x20
	[0135.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\rmnsque.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.767] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47962) returned 1
	[0135.767] CloseHandle (hObject=0x168) returned 1
	[0135.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png")) returned 0x20
	[0135.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png")) returned 0x20
	[0135.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\rmnsque\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0135.768] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3611) returned 1
	[0135.768] CloseHandle (hObject=0x168) returned 1
	[0135.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif")) returned 0x20
	[0135.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif")) returned 0x20
	[0135.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0135.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0135.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.062] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=103279) returned 1
	[0136.067] CloseHandle (hObject=0x1fc) returned 1
	[0136.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm")) returned 0x20
	[0136.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm")) returned 0x20
	[0136.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\satin\\satin.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.523] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1571) returned 1
	[0136.523] CloseHandle (hObject=0x168) returned 1
	[0136.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif")) returned 0x20
	[0136.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif")) returned 0x20
	[0136.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.523] SetEvent (hEvent=0xfc) returned 1
	[0136.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.523] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49094) returned 1
	[0136.524] CloseHandle (hObject=0x168) returned 1
	[0136.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm")) returned 0x20
	[0136.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm")) returned 0x20
	[0136.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.525] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=683) returned 1
	[0136.525] CloseHandle (hObject=0x168) returned 1
	[0136.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf")) returned 0x20
	[0136.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf")) returned 0x20
	[0136.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\common files\\microsoft shared\\themes14\\watermar\\watermar.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.525] SetEvent (hEvent=0xfc) returned 1
	[0136.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.528] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1658904) returned 1
	[0136.528] CloseHandle (hObject=0x168) returned 1
	[0136.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its")) returned 0x20
	[0136.528] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0136.529] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ARFR\\MSB1ARFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\arfr\\msb1arfr.its")) returned 0
	[0136.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.529] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=978206) returned 1
	[0136.529] CloseHandle (hObject=0x168) returned 1
	[0136.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its")) returned 0x20
	[0136.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its")) returned 0x20
	[0136.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enes\\msb1enes.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.530] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=943322) returned 1
	[0136.530] CloseHandle (hObject=0x168) returned 1
	[0136.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its")) returned 0x20
	[0136.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its")) returned 0x20
	[0136.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\enfr\\msb1enfr.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.531] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=229888) returned 1
	[0136.531] CloseHandle (hObject=0x168) returned 1
	[0136.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll")) returned 0x20
	[0136.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll")) returned 0x20
	[0136.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.532] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1046514) returned 1
	[0136.532] CloseHandle (hObject=0x168) returned 1
	[0136.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its")) returned 0x20
	[0136.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its")) returned 0x20
	[0136.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\msb1esen.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.532] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=678912) returned 1
	[0136.532] CloseHandle (hObject=0x168) returned 1
	[0136.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex")) returned 0x20
	[0136.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex")) returned 0x20
	[0136.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\esen\\wt61es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.533] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1469358) returned 1
	[0136.533] CloseHandle (hObject=0x168) returned 1
	[0136.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its")) returned 0x20
	[0136.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its")) returned 0x20
	[0136.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FRAR\\MSB1FRAR.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\frar\\msb1frar.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.534] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=229888) returned 1
	[0136.534] CloseHandle (hObject=0x168) returned 1
	[0136.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll")) returned 0x20
	[0136.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll")) returned 0x20
	[0136.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.535] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=840364) returned 1
	[0136.535] CloseHandle (hObject=0x168) returned 1
	[0136.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its")) returned 0x20
	[0136.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its")) returned 0x20
	[0136.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\msb1fren.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.537] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=616960) returned 1
	[0136.537] CloseHandle (hObject=0x168) returned 1
	[0136.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex")) returned 0x20
	[0136.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex")) returned 0x20
	[0136.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\fren\\wt61fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.538] SetEvent (hEvent=0xfc) returned 1
	[0136.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.538] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2120459) returned 1
	[0136.538] CloseHandle (hObject=0x168) returned 1
	[0136.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex")) returned 0x20
	[0136.539] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0136.539] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1AR.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1ar.lex")) returned 0
	[0136.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.539] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1536) returned 1
	[0136.539] CloseHandle (hObject=0x168) returned 1
	[0136.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex")) returned 0x20
	[0136.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex")) returned 0x20
	[0136.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1cach.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.540] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=178576) returned 1
	[0136.540] CloseHandle (hObject=0x168) returned 1
	[0136.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll")) returned 0x20
	[0136.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll")) returned 0x20
	[0136.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1CORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1core.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.541] SetEvent (hEvent=0xfc) returned 1
	[0136.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.541] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=266096) returned 1
	[0136.541] CloseHandle (hObject=0x168) returned 1
	[0136.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll")) returned 0x20
	[0136.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll")) returned 0x20
	[0136.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1STAR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1star.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.542] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70544) returned 1
	[0136.543] CloseHandle (hObject=0x168) returned 1
	[0136.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll")) returned 0x20
	[0136.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll")) returned 0x20
	[0136.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\MSB1XTOR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\msb1xtor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.543] SetEvent (hEvent=0xfc) returned 1
	[0136.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.543] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=221184) returned 1
	[0136.543] CloseHandle (hObject=0x168) returned 1
	[0136.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll")) returned 0x20
	[0136.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll")) returned 0x20
	[0136.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\TRANSLAT\\WTSP61MS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\translat\\wtsp61ms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.545] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=334427) returned 1
	[0136.545] CloseHandle (hObject=0x168) returned 1
	[0136.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm")) returned 0x20
	[0136.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm")) returned 0x20
	[0136.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\FM20.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\fm20.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.545] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=109718) returned 1
	[0136.545] CloseHandle (hObject=0x168) returned 1
	[0136.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm")) returned 0x20
	[0136.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm")) returned 0x20
	[0136.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBCN6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbcn6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.547] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=154960) returned 1
	[0136.547] CloseHandle (hObject=0x168) returned 1
	[0136.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll")) returned 0x20
	[0136.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll")) returned 0x20
	[0136.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBE7INTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbe7intl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.547] SetEvent (hEvent=0xfc) returned 1
	[0136.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.548] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=72031) returned 1
	[0136.548] CloseHandle (hObject=0x200) returned 1
	[0136.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm")) returned 0x20
	[0136.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm")) returned 0x20
	[0136.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBENDF98.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbendf98.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.549] SetEvent (hEvent=0xfc) returned 1
	[0136.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.549] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=58026) returned 1
	[0136.549] CloseHandle (hObject=0x200) returned 1
	[0136.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm")) returned 0x20
	[0136.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm")) returned 0x20
	[0136.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBHW6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbhw6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.550] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=944994) returned 1
	[0136.550] CloseHandle (hObject=0x200) returned 1
	[0136.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm")) returned 0x20
	[0136.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm")) returned 0x20
	[0136.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBLR6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vblr6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.550] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=123956) returned 1
	[0136.550] CloseHandle (hObject=0x200) returned 1
	[0136.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm")) returned 0x20
	[0136.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm")) returned 0x20
	[0136.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBOB6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbob6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.552] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=416918) returned 1
	[0136.552] CloseHandle (hObject=0x200) returned 1
	[0136.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm")) returned 0x20
	[0136.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm")) returned 0x20
	[0136.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\1033\\VBUI6.CHM" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\1033\\vbui6.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.552] SetEvent (hEvent=0xfc) returned 1
	[0136.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.553] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3675976) returned 1
	[0136.553] CloseHandle (hObject=0x200) returned 1
	[0136.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll")) returned 0x20
	[0136.553] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0136.553] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7\\vbe7.dll")) returned 0
	[0136.553] SetEvent (hEvent=0xfc) returned 1
	[0136.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.555] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=990032) returned 1
	[0136.555] CloseHandle (hObject=0x200) returned 1
	[0136.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20
	[0136.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20
	[0136.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia100.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.555] SetEvent (hEvent=0xfc) returned 1
	[0136.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0136.556] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=855376) returned 1
	[0136.556] CloseHandle (hObject=0x200) returned 1
	[0136.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20
	[0136.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20
	[0136.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia90.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.563] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1110528) returned 1
	[0136.563] CloseHandle (hObject=0x168) returned 1
	[0136.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20
	[0136.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20
	[0136.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\VGX.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.563] SetEvent (hEvent=0xfc) returned 1
	[0136.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.564] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=324330) returned 1
	[0136.564] CloseHandle (hObject=0x168) returned 1
	[0136.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx")) returned 0x20
	[0136.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx")) returned 0x20
	[0136.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\bigfont.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.566] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=665117) returned 1
	[0136.567] CloseHandle (hObject=0x1fc) returned 1
	[0136.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx")) returned 0x20
	[0136.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx")) returned 0x20
	[0136.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\chineset.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0136.568] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=436710) returned 1
	[0136.568] CloseHandle (hObject=0x1fc) returned 1
	[0136.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx")) returned 0x20
	[0136.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx")) returned 0x20
	[0136.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\extfont.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.710] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=902841) returned 1
	[0136.710] CloseHandle (hObject=0x168) returned 1
	[0136.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx")) returned 0x20
	[0136.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx")) returned 0x20
	[0136.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\gbcbig.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.710] SetEvent (hEvent=0xfc) returned 1
	[0136.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.711] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=326) returned 1
	[0136.711] CloseHandle (hObject=0x168) returned 1
	[0136.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp")) returned 0x20
	[0136.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp")) returned 0x20
	[0136.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\icad.fmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0136.882] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=223699) returned 1
	[0136.882] CloseHandle (hObject=0x168) returned 1
	[0136.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx")) returned 0x20
	[0136.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx")) returned 0x20
	[0136.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0136.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Microsoft Shared\\Visio Shared\\Fonts\\WHGDTXT.SHX" (normalized: "c:\\program files\\common files\\microsoft shared\\visio shared\\fonts\\whgdtxt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0136.882] SetEvent (hEvent=0xfc) returned 1
	[0136.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.078] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=98304) returned 1
	[0137.078] CloseHandle (hObject=0x13c) returned 1
	[0137.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20
	[0137.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20
	[0137.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.079] SetEvent (hEvent=0xfc) returned 1
	[0137.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.265] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=630) returned 1
	[0137.265] CloseHandle (hObject=0x144) returned 1
	[0137.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20
	[0137.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20
	[0137.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.379] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=745472) returned 1
	[0137.379] CloseHandle (hObject=0x144) returned 1
	[0137.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20
	[0137.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20
	[0137.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.379] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=886784) returned 1
	[0137.379] CloseHandle (hObject=0x144) returned 1
	[0137.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20
	[0137.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20
	[0137.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\wab32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.380] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1098752) returned 1
	[0137.380] CloseHandle (hObject=0x144) returned 1
	[0137.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20
	[0137.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20
	[0137.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\common files\\system\\wab32res.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.381] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=174) returned 1
	[0137.381] CloseHandle (hObject=0x144) returned 1
	[0137.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26
	[0137.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26
	[0137.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\audiodepthconverter.ax" (normalized: "c:\\program files\\dvd maker\\audiodepthconverter.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.382] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50688) returned 1
	[0137.382] CloseHandle (hObject=0x144) returned 1
	[0137.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\audiodepthconverter.ax" (normalized: "c:\\program files\\dvd maker\\audiodepthconverter.ax")) returned 0x20
	[0137.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\audiodepthconverter.ax" (normalized: "c:\\program files\\dvd maker\\audiodepthconverter.ax")) returned 0x20
	[0137.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\audiodepthconverter.ax.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\audiodepthconverter.ax.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\audiodepthconverter.ax" (normalized: "c:\\program files\\dvd maker\\audiodepthconverter.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\bod_r.TTF" (normalized: "c:\\program files\\dvd maker\\bod_r.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.384] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77884) returned 1
	[0137.384] CloseHandle (hObject=0x144) returned 1
	[0137.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\bod_r.TTF" (normalized: "c:\\program files\\dvd maker\\bod_r.ttf")) returned 0x20
	[0137.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\bod_r.TTF" (normalized: "c:\\program files\\dvd maker\\bod_r.ttf")) returned 0x20
	[0137.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\bod_r.TTF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\bod_r.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\bod_r.TTF" (normalized: "c:\\program files\\dvd maker\\bod_r.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\directshowtap.ax" (normalized: "c:\\program files\\dvd maker\\directshowtap.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.384] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61440) returned 1
	[0137.385] CloseHandle (hObject=0x144) returned 1
	[0137.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\directshowtap.ax" (normalized: "c:\\program files\\dvd maker\\directshowtap.ax")) returned 0x20
	[0137.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\directshowtap.ax" (normalized: "c:\\program files\\dvd maker\\directshowtap.ax")) returned 0x20
	[0137.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\directshowtap.ax.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\directshowtap.ax.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\directshowtap.ax" (normalized: "c:\\program files\\dvd maker\\directshowtap.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\DVDMaker.exe" (normalized: "c:\\program files\\dvd maker\\dvdmaker.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0137.386] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2258432) returned 1
	[0137.386] CloseHandle (hObject=0x144) returned 1
	[0137.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\DVDMaker.exe" (normalized: "c:\\program files\\dvd maker\\dvdmaker.exe")) returned 0x20
	[0137.386] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\DVDMaker.exe" (normalized: "c:\\program files\\dvd maker\\dvdmaker.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\DVDMaker.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\dvdmaker.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0137.386] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\DVDMaker.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\dvdmaker.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\DVDMaker.exe" (normalized: "c:\\program files\\dvd maker\\dvdmaker.exe")) returned 0
	[0137.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\DVDMaker.exe.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\dvdmaker.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0137.389] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51712) returned 1
	[0137.389] CloseHandle (hObject=0x1b8) returned 1
	[0137.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\DVDMaker.exe.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\dvdmaker.exe.mui")) returned 0x20
	[0137.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\DVDMaker.exe.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\dvdmaker.exe.mui")) returned 0x20
	[0137.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\DVDMaker.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\en-us\\dvdmaker.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\DVDMaker.exe.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\dvdmaker.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\OmdProject.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\omdproject.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0137.392] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12288) returned 1
	[0137.392] CloseHandle (hObject=0x1fc) returned 1
	[0137.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\OmdProject.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\omdproject.dll.mui")) returned 0x20
	[0137.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\OmdProject.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\omdproject.dll.mui")) returned 0x20
	[0137.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\OmdProject.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\en-us\\omdproject.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\OmdProject.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\omdproject.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\WMM2CLIP.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\wmm2clip.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0137.397] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7168) returned 1
	[0137.397] CloseHandle (hObject=0x1fc) returned 1
	[0137.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\WMM2CLIP.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\wmm2clip.dll.mui")) returned 0x20
	[0137.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\WMM2CLIP.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\wmm2clip.dll.mui")) returned 0x20
	[0137.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\WMM2CLIP.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\en-us\\wmm2clip.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\en-US\\WMM2CLIP.dll.mui" (normalized: "c:\\program files\\dvd maker\\en-us\\wmm2clip.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Eurosti.TTF" (normalized: "c:\\program files\\dvd maker\\eurosti.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0137.397] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56760) returned 1
	[0137.397] CloseHandle (hObject=0x1fc) returned 1
	[0137.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Eurosti.TTF" (normalized: "c:\\program files\\dvd maker\\eurosti.ttf")) returned 0x20
	[0137.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Eurosti.TTF" (normalized: "c:\\program files\\dvd maker\\eurosti.ttf")) returned 0x20
	[0137.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Eurosti.TTF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\eurosti.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Eurosti.TTF" (normalized: "c:\\program files\\dvd maker\\eurosti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\fieldswitch.ax" (normalized: "c:\\program files\\dvd maker\\fieldswitch.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0137.399] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41472) returned 1
	[0137.399] CloseHandle (hObject=0x140) returned 1
	[0137.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\fieldswitch.ax" (normalized: "c:\\program files\\dvd maker\\fieldswitch.ax")) returned 0x20
	[0137.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\fieldswitch.ax" (normalized: "c:\\program files\\dvd maker\\fieldswitch.ax")) returned 0x20
	[0137.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\fieldswitch.ax.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\fieldswitch.ax.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\fieldswitch.ax" (normalized: "c:\\program files\\dvd maker\\fieldswitch.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.399] SetEvent (hEvent=0xfc) returned 1
	[0137.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\offset.ax" (normalized: "c:\\program files\\dvd maker\\offset.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0137.399] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43008) returned 1
	[0137.399] CloseHandle (hObject=0x140) returned 1
	[0137.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\offset.ax" (normalized: "c:\\program files\\dvd maker\\offset.ax")) returned 0x20
	[0137.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\offset.ax" (normalized: "c:\\program files\\dvd maker\\offset.ax")) returned 0x20
	[0137.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\offset.ax.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\offset.ax.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\offset.ax" (normalized: "c:\\program files\\dvd maker\\offset.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdBase.dll" (normalized: "c:\\program files\\dvd maker\\omdbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.402] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14967808) returned 1
	[0137.402] CloseHandle (hObject=0x13c) returned 1
	[0137.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdBase.dll" (normalized: "c:\\program files\\dvd maker\\omdbase.dll")) returned 0x20
	[0137.402] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdBase.dll" (normalized: "c:\\program files\\dvd maker\\omdbase.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdBase.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\omdbase.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0137.402] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdBase.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\omdbase.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdBase.dll" (normalized: "c:\\program files\\dvd maker\\omdbase.dll")) returned 0
	[0137.402] SetEvent (hEvent=0xfc) returned 1
	[0137.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdProject.dll" (normalized: "c:\\program files\\dvd maker\\omdproject.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.403] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4400640) returned 1
	[0137.403] CloseHandle (hObject=0x13c) returned 1
	[0137.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdProject.dll" (normalized: "c:\\program files\\dvd maker\\omdproject.dll")) returned 0x20
	[0137.403] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdProject.dll" (normalized: "c:\\program files\\dvd maker\\omdproject.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdProject.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\omdproject.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0137.403] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdProject.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\omdproject.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\OmdProject.dll" (normalized: "c:\\program files\\dvd maker\\omdproject.dll")) returned 0
	[0137.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Pipeline.dll" (normalized: "c:\\program files\\dvd maker\\pipeline.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.403] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1852928) returned 1
	[0137.404] CloseHandle (hObject=0x13c) returned 1
	[0137.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Pipeline.dll" (normalized: "c:\\program files\\dvd maker\\pipeline.dll")) returned 0x20
	[0137.404] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Pipeline.dll" (normalized: "c:\\program files\\dvd maker\\pipeline.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Pipeline.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\pipeline.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0137.404] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Pipeline.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\pipeline.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Pipeline.dll" (normalized: "c:\\program files\\dvd maker\\pipeline.dll")) returned 0
	[0137.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\PipeTran.dll" (normalized: "c:\\program files\\dvd maker\\pipetran.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.404] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1884160) returned 1
	[0137.404] CloseHandle (hObject=0x13c) returned 1
	[0137.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\PipeTran.dll" (normalized: "c:\\program files\\dvd maker\\pipetran.dll")) returned 0x20
	[0137.404] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\PipeTran.dll" (normalized: "c:\\program files\\dvd maker\\pipetran.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\PipeTran.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\pipetran.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0137.404] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\DVD Maker\\PipeTran.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\pipetran.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\DVD Maker\\PipeTran.dll" (normalized: "c:\\program files\\dvd maker\\pipetran.dll")) returned 0
	[0137.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsink.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsink.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.405] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=78848) returned 1
	[0137.405] CloseHandle (hObject=0x13c) returned 1
	[0137.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsink.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsink.ax")) returned 0x20
	[0137.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsink.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsink.ax")) returned 0x20
	[0137.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsink.ax.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\rtstreamsink.ax.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsink.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsink.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsource.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsource.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.407] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52736) returned 1
	[0137.407] CloseHandle (hObject=0x13c) returned 1
	[0137.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsource.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsource.ax")) returned 0x20
	[0137.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsource.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsource.ax")) returned 0x20
	[0137.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsource.ax.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\rtstreamsource.ax.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\rtstreamsource.ax" (normalized: "c:\\program files\\dvd maker\\rtstreamsource.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\SecretST.TTF" (normalized: "c:\\program files\\dvd maker\\secretst.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.408] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=98824) returned 1
	[0137.408] CloseHandle (hObject=0x13c) returned 1
	[0137.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\SecretST.TTF" (normalized: "c:\\program files\\dvd maker\\secretst.ttf")) returned 0x20
	[0137.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\SecretST.TTF" (normalized: "c:\\program files\\dvd maker\\secretst.ttf")) returned 0x20
	[0137.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\SecretST.TTF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\secretst.ttf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\SecretST.TTF" (normalized: "c:\\program files\\dvd maker\\secretst.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Common.fxh" (normalized: "c:\\program files\\dvd maker\\shared\\common.fxh"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0137.409] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12516) returned 1
	[0137.409] CloseHandle (hObject=0x13c) returned 1
	[0137.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Common.fxh" (normalized: "c:\\program files\\dvd maker\\shared\\common.fxh")) returned 0x20
	[0137.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Common.fxh" (normalized: "c:\\program files\\dvd maker\\shared\\common.fxh")) returned 0x20
	[0137.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Common.fxh.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\common.fxh.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Common.fxh" (normalized: "c:\\program files\\dvd maker\\shared\\common.fxh"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0137.411] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27935) returned 1
	[0137.411] CloseHandle (hObject=0x1b8) returned 1
	[0137.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png")) returned 0x20
	[0137.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png")) returned 0x20
	[0137.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolvenoise.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0137.412] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=751669) returned 1
	[0137.412] CloseHandle (hObject=0x1b8) returned 1
	[0137.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolvenoise.png")) returned 0x20
	[0137.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolvenoise.png")) returned 0x20
	[0137.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dissolvenoise.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DissolveNoise.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolvenoise.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0137.413] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10123) returned 1
	[0137.413] CloseHandle (hObject=0x1b8) returned 1
	[0137.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_buttongraphic.png")) returned 0x20
	[0137.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_buttongraphic.png")) returned 0x20
	[0137.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0137.414] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3286) returned 1
	[0137.414] CloseHandle (hObject=0x1b8) returned 1
	[0137.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_selectionsubpicture.png")) returned 0x20
	[0137.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_selectionsubpicture.png")) returned 0x20
	[0137.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0137.416] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3316) returned 1
	[0137.416] CloseHandle (hObject=0x1b8) returned 1
	[0137.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_videoinset.png")) returned 0x20
	[0137.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_videoinset.png")) returned 0x20
	[0137.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_videoinset.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\16to9Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\16to9squareframe_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0137.416] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11861) returned 1
	[0137.417] CloseHandle (hObject=0x1b8) returned 1
	[0137.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_buttongraphic.png")) returned 0x20
	[0137.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_buttongraphic.png")) returned 0x20
	[0137.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_Buttongraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0137.417] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3304) returned 1
	[0137.417] CloseHandle (hObject=0x1b8) returned 1
	[0137.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_selectionsubpicture.png")) returned 0x20
	[0137.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_selectionsubpicture.png")) returned 0x20
	[0137.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0137.420] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3467) returned 1
	[0137.420] CloseHandle (hObject=0x1b8) returned 1
	[0137.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_videoinset.png")) returned 0x20
	[0137.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_videoinset.png")) returned 0x20
	[0137.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_videoinset.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\4to3Squareframe_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\4to3squareframe_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyblue.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0137.421] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12349) returned 1
	[0137.421] CloseHandle (hObject=0x1b8) returned 1
	[0137.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyblue.png")) returned 0x20
	[0137.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyblue.png")) returned 0x20
	[0137.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyblue.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\babyblue.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.662] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341322) returned 1
	[0137.662] CloseHandle (hObject=0x148) returned 1
	[0137.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground.wmv")) returned 0x20
	[0137.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground.wmv")) returned 0x20
	[0137.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymainbackground.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.662] SetEvent (hEvent=0xfc) returned 1
	[0137.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.663] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=141214) returned 1
	[0137.663] CloseHandle (hObject=0x148) returned 1
	[0137.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground.wmv")) returned 0x20
	[0137.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground.wmv")) returned 0x20
	[0137.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.663] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=157214) returned 1
	[0137.663] CloseHandle (hObject=0x148) returned 1
	[0137.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground_pal.wmv")) returned 0x20
	[0137.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground_pal.wmv")) returned 0x20
	[0137.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintonotesbackground_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.665] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=117214) returned 1
	[0137.665] CloseHandle (hObject=0x148) returned 1
	[0137.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground.wmv")) returned 0x20
	[0137.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground.wmv")) returned 0x20
	[0137.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.665] SetEvent (hEvent=0xfc) returned 1
	[0137.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.666] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=141214) returned 1
	[0137.666] CloseHandle (hObject=0x148) returned 1
	[0137.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground_pal.wmv")) returned 0x20
	[0137.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground_pal.wmv")) returned 0x20
	[0137.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyMainToScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboymaintoscenesbackground_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.666] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=157292) returned 1
	[0137.667] CloseHandle (hObject=0x148) returned 1
	[0137.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground.wmv")) returned 0x20
	[0137.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground.wmv")) returned 0x20
	[0137.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.667] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=157292) returned 1
	[0137.667] CloseHandle (hObject=0x148) returned 1
	[0137.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground_pal.wmv")) returned 0x20
	[0137.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground_pal.wmv")) returned 0x20
	[0137.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyNotesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboynotesbackground_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.669] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=149292) returned 1
	[0137.669] CloseHandle (hObject=0x148) returned 1
	[0137.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground.wmv")) returned 0x20
	[0137.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground.wmv")) returned 0x20
	[0137.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.669] SetEvent (hEvent=0xfc) returned 1
	[0137.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.669] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=125292) returned 1
	[0137.669] CloseHandle (hObject=0x148) returned 1
	[0137.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground_pal.wmv")) returned 0x20
	[0137.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground_pal.wmv")) returned 0x20
	[0137.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\BabyBoyScenesBackground_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\babyboyscenesbackground_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\lightbluerectangle.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.670] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=220) returned 1
	[0137.670] CloseHandle (hObject=0x148) returned 1
	[0137.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\lightbluerectangle.png")) returned 0x20
	[0137.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\lightbluerectangle.png")) returned 0x20
	[0137.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\lightbluerectangle.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\LightBlueRectangle.PNG" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\lightbluerectangle.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\mainmenubuttonicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.671] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2922) returned 1
	[0137.671] CloseHandle (hObject=0x148) returned 1
	[0137.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\mainmenubuttonicon.png")) returned 0x20
	[0137.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\mainmenubuttonicon.png")) returned 0x20
	[0137.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\mainmenubuttonicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\MainMenuButtonIcon.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\mainmenubuttonicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\navsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.672] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3939) returned 1
	[0137.672] CloseHandle (hObject=0x148) returned 1
	[0137.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\navsubpicture.png")) returned 0x20
	[0137.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\navsubpicture.png")) returned 0x20
	[0137.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\navsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\navSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\navsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.673] SetEvent (hEvent=0xfc) returned 1
	[0137.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_leftarrow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.673] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4503) returned 1
	[0137.673] CloseHandle (hObject=0x148) returned 1
	[0137.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_leftarrow.png")) returned 0x20
	[0137.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_leftarrow.png")) returned 0x20
	[0137.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_leftarrow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_leftarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_leftarrow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_rightarrow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.674] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4515) returned 1
	[0137.674] CloseHandle (hObject=0x148) returned 1
	[0137.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_rightarrow.png")) returned 0x20
	[0137.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_rightarrow.png")) returned 0x20
	[0137.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_rightarrow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_rightarrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_rightarrow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_uparrow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.674] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4200) returned 1
	[0137.675] CloseHandle (hObject=0x148) returned 1
	[0137.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_uparrow.png")) returned 0x20
	[0137.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_uparrow.png")) returned 0x20
	[0137.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_uparrow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyBoy\\nav_uparrow.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babyboy\\nav_uparrow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.676] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2739) returned 1
	[0137.676] CloseHandle (hObject=0x148) returned 1
	[0137.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-background.png")) returned 0x20
	[0137.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-background.png")) returned 0x20
	[0137.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.677] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2211) returned 1
	[0137.678] CloseHandle (hObject=0x148) returned 1
	[0137.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-highlight.png")) returned 0x20
	[0137.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-highlight.png")) returned 0x20
	[0137.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-highlight.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.678] SetEvent (hEvent=0xfc) returned 1
	[0137.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-image-mask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.678] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1551) returned 1
	[0137.678] CloseHandle (hObject=0x148) returned 1
	[0137.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-image-mask.png")) returned 0x20
	[0137.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-image-mask.png")) returned 0x20
	[0137.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-image-mask.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\16_9-frame-image-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\16_9-frame-image-mask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\babypink.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.682] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19477) returned 1
	[0137.682] CloseHandle (hObject=0x148) returned 1
	[0137.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\babypink.png")) returned 0x20
	[0137.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\babypink.png")) returned 0x20
	[0137.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\babypink.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\babypink.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\babypink.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.682] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52251) returned 1
	[0137.682] CloseHandle (hObject=0x148) returned 1
	[0137.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\background.png")) returned 0x20
	[0137.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\background.png")) returned 0x20
	[0137.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.684] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=181298) returned 1
	[0137.684] CloseHandle (hObject=0x148) returned 1
	[0137.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2.wmv")) returned 0x20
	[0137.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2.wmv")) returned 0x20
	[0137.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_matte2.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.684] SetEvent (hEvent=0xfc) returned 1
	[0137.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.685] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=181322) returned 1
	[0137.685] CloseHandle (hObject=0x148) returned 1
	[0137.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2_pal.wmv")) returned 0x20
	[0137.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2_pal.wmv")) returned 0x20
	[0137.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_MATTE2_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_matte2_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.685] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=237298) returned 1
	[0137.685] CloseHandle (hObject=0x148) returned 1
	[0137.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6.wmv")) returned 0x20
	[0137.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6.wmv")) returned 0x20
	[0137.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\bear_formatted_rgb6.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.686] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=269322) returned 1
	[0137.686] CloseHandle (hObject=0x148) returned 1
	[0137.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6_pal.wmv")) returned 0x20
	[0137.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6_pal.wmv")) returned 0x20
	[0137.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\Bear_Formatted_RGB6_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\bear_formatted_rgb6_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-back-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.688] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3525) returned 1
	[0137.688] CloseHandle (hObject=0x148) returned 1
	[0137.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-back-static.png")) returned 0x20
	[0137.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-back-static.png")) returned 0x20
	[0137.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-back-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-back-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-back-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.688] SetEvent (hEvent=0xfc) returned 1
	[0137.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-next-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.688] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3580) returned 1
	[0137.688] CloseHandle (hObject=0x148) returned 1
	[0137.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-next-static.png")) returned 0x20
	[0137.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-next-static.png")) returned 0x20
	[0137.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-next-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-next-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-next-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-previous-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.689] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3595) returned 1
	[0137.689] CloseHandle (hObject=0x148) returned 1
	[0137.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-previous-static.png")) returned 0x20
	[0137.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-previous-static.png")) returned 0x20
	[0137.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-previous-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\btn-previous-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\button-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.693] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1885) returned 1
	[0137.693] CloseHandle (hObject=0x148) returned 1
	[0137.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\button-highlight.png")) returned 0x20
	[0137.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\button-highlight.png")) returned 0x20
	[0137.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\button-highlight.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\button-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\button-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\chapters-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.694] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1375) returned 1
	[0137.694] CloseHandle (hObject=0x148) returned 1
	[0137.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\chapters-static.png")) returned 0x20
	[0137.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\chapters-static.png")) returned 0x20
	[0137.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\chapters-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\chapters-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\chapters-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.694] SetEvent (hEvent=0xfc) returned 1
	[0137.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.695] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=581394) returned 1
	[0137.695] CloseHandle (hObject=0x148) returned 1
	[0137.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-background.png")) returned 0x20
	[0137.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-background.png")) returned 0x20
	[0137.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-foreground.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.695] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49904) returned 1
	[0137.695] CloseHandle (hObject=0x148) returned 1
	[0137.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-foreground.png")) returned 0x20
	[0137.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-foreground.png")) returned 0x20
	[0137.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-foreground.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\content-foreground.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\content-foreground.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\curtains.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.696] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47300) returned 1
	[0137.696] CloseHandle (hObject=0x148) returned 1
	[0137.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\curtains.png")) returned 0x20
	[0137.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\curtains.png")) returned 0x20
	[0137.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\curtains.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\curtains.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\curtains.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.697] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77208) returned 1
	[0137.698] CloseHandle (hObject=0x148) returned 1
	[0137.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte.wmv")) returned 0x20
	[0137.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte.wmv")) returned 0x20
	[0137.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_precomp_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.698] SetEvent (hEvent=0xfc) returned 1
	[0137.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.698] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85208) returned 1
	[0137.698] CloseHandle (hObject=0x148) returned 1
	[0137.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte_pal.wmv")) returned 0x20
	[0137.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte_pal.wmv")) returned 0x20
	[0137.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_PreComp_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_precomp_matte_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.699] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=157208) returned 1
	[0137.699] CloseHandle (hObject=0x148) returned 1
	[0137.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte.wmv")) returned 0x20
	[0137.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte.wmv")) returned 0x20
	[0137.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_matte.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.700] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=165208) returned 1
	[0137.700] CloseHandle (hObject=0x148) returned 1
	[0137.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte_pal.wmv")) returned 0x20
	[0137.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte_pal.wmv")) returned 0x20
	[0137.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_MATTE_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_matte_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.818] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=189214) returned 1
	[0137.818] CloseHandle (hObject=0x148) returned 1
	[0137.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb.wmv")) returned 0x20
	[0137.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb.wmv")) returned 0x20
	[0137.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\flower_trans_rgb.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\flower_trans_rgb.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.818] SetEvent (hEvent=0xfc) returned 1
	[0137.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.819] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1545) returned 1
	[0137.819] CloseHandle (hObject=0x148) returned 1
	[0137.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\highlight.png")) returned 0x20
	[0137.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\highlight.png")) returned 0x20
	[0137.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\highlight.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\mainimage-mask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.820] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9115) returned 1
	[0137.820] CloseHandle (hObject=0x148) returned 1
	[0137.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\mainimage-mask.png")) returned 0x20
	[0137.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\mainimage-mask.png")) returned 0x20
	[0137.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\mainimage-mask.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\mainimage-mask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\mainimage-mask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\notes-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.821] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1369) returned 1
	[0137.821] CloseHandle (hObject=0x148) returned 1
	[0137.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\notes-static.png")) returned 0x20
	[0137.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\notes-static.png")) returned 0x20
	[0137.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\notes-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\notes-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\notes-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.822] SetEvent (hEvent=0xfc) returned 1
	[0137.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\play-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.822] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1285) returned 1
	[0137.822] CloseHandle (hObject=0x148) returned 1
	[0137.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\play-static.png")) returned 0x20
	[0137.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\play-static.png")) returned 0x20
	[0137.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\play-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BabyGirl\\play-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\babygirl\\play-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BlackRectangle.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\blackrectangle.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.823] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4726) returned 1
	[0137.823] CloseHandle (hObject=0x148) returned 1
	[0137.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BlackRectangle.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\blackrectangle.bmp")) returned 0x20
	[0137.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BlackRectangle.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\blackrectangle.bmp")) returned 0x20
	[0137.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BlackRectangle.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\blackrectangle.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\BlackRectangle.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\blackrectangle.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.824] SetEvent (hEvent=0xfc) returned 1
	[0137.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_glass.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.824] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27281) returned 1
	[0137.824] CloseHandle (hObject=0x148) returned 1
	[0137.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_glass.png")) returned 0x20
	[0137.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_glass.png")) returned 0x20
	[0137.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_glass.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_glass.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_glass.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.826] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3878) returned 1
	[0137.826] CloseHandle (hObject=0x148) returned 1
	[0137.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_selectionsubpicture.png")) returned 0x20
	[0137.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_selectionsubpicture.png")) returned 0x20
	[0137.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_selectionsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.826] SetEvent (hEvent=0xfc) returned 1
	[0137.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.826] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5059) returned 1
	[0137.826] CloseHandle (hObject=0x148) returned 1
	[0137.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_videoinset.png")) returned 0x20
	[0137.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_videoinset.png")) returned 0x20
	[0137.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_videoinset.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circleround_videoinset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circleround_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.827] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27281) returned 1
	[0137.827] CloseHandle (hObject=0x148) returned 1
	[0137.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_buttongraphic.png")) returned 0x20
	[0137.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_buttongraphic.png")) returned 0x20
	[0137.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_glass_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.828] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5072) returned 1
	[0137.828] CloseHandle (hObject=0x148) returned 1
	[0137.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_glass_thumbnail.bmp")) returned 0x20
	[0137.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_glass_thumbnail.bmp")) returned 0x20
	[0137.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circle_glass_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_glass_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\circle_glass_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_glass_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpicturea.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.829] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3878) returned 1
	[0137.829] CloseHandle (hObject=0x148) returned 1
	[0137.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpicturea.png")) returned 0x20
	[0137.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpicturea.png")) returned 0x20
	[0137.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpicturea.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureA.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpicturea.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpictureb.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.830] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3215) returned 1
	[0137.830] CloseHandle (hObject=0x148) returned 1
	[0137.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpictureb.png")) returned 0x20
	[0137.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpictureb.png")) returned 0x20
	[0137.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpictureb.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_SelectionSubpictureB.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_selectionsubpictureb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.830] SetEvent (hEvent=0xfc) returned 1
	[0137.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_videoinset.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.831] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5059) returned 1
	[0137.831] CloseHandle (hObject=0x148) returned 1
	[0137.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_videoinset.png")) returned 0x20
	[0137.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_videoinset.png")) returned 0x20
	[0137.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_videoinset.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Circle_VideoInset.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\circle_videoinset.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\cloud_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\cloud_thumbnail.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.832] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5072) returned 1
	[0137.832] CloseHandle (hObject=0x148) returned 1
	[0137.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\cloud_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\cloud_thumbnail.bmp")) returned 0x20
	[0137.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\cloud_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\cloud_thumbnail.bmp")) returned 0x20
	[0137.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\cloud_Thumbnail.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\cloud_thumbnail.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\cloud_Thumbnail.bmp" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\cloud_thumbnail.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.832] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23711) returned 1
	[0137.832] CloseHandle (hObject=0x148) returned 1
	[0137.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dot.png")) returned 0x20
	[0137.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dot.png")) returned 0x20
	[0137.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\DvdTransform.fx" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dvdtransform.fx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.834] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16940) returned 1
	[0137.834] CloseHandle (hObject=0x148) returned 1
	[0137.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\DvdTransform.fx" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dvdtransform.fx")) returned 0x20
	[0137.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\DvdTransform.fx" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dvdtransform.fx")) returned 0x20
	[0137.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\DvdTransform.fx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dvdtransform.fx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\DvdTransform.fx" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\dvdtransform.fx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.836] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4570) returned 1
	[0137.836] CloseHandle (hObject=0x148) returned 1
	[0137.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\1047x576black.png")) returned 0x20
	[0137.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\1047x576black.png")) returned 0x20
	[0137.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\1047x576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.836] SetEvent (hEvent=0xfc) returned 1
	[0137.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.837] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2820) returned 1
	[0137.837] CloseHandle (hObject=0x148) returned 1
	[0137.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\203x8subpicture.png")) returned 0x20
	[0137.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\203x8subpicture.png")) returned 0x20
	[0137.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\203x8subpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\203x8subpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.837] SetEvent (hEvent=0xfc) returned 1
	[0137.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.839] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5088) returned 1
	[0137.839] CloseHandle (hObject=0x148) returned 1
	[0137.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_buttongraphic.png")) returned 0x20
	[0137.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_buttongraphic.png")) returned 0x20
	[0137.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.839] SetEvent (hEvent=0xfc) returned 1
	[0137.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.840] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3130) returned 1
	[0137.840] CloseHandle (hObject=0x148) returned 1
	[0137.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0137.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0137.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.841] SetEvent (hEvent=0xfc) returned 1
	[0137.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.842] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5025) returned 1
	[0137.842] CloseHandle (hObject=0x148) returned 1
	[0137.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_buttongraphic.png")) returned 0x20
	[0137.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_buttongraphic.png")) returned 0x20
	[0137.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.842] SetEvent (hEvent=0xfc) returned 1
	[0137.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.843] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3118) returned 1
	[0137.843] CloseHandle (hObject=0x148) returned 1
	[0137.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_selectionsubpicture.png")) returned 0x20
	[0137.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_selectionsubpicture.png")) returned 0x20
	[0137.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.844] SetEvent (hEvent=0xfc) returned 1
	[0137.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.845] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4955) returned 1
	[0137.845] CloseHandle (hObject=0x148) returned 1
	[0137.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_buttongraphic.png")) returned 0x20
	[0137.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_buttongraphic.png")) returned 0x20
	[0137.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.845] SetEvent (hEvent=0xfc) returned 1
	[0137.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.846] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3081) returned 1
	[0137.846] CloseHandle (hObject=0x148) returned 1
	[0137.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_selectionsubpicture.png")) returned 0x20
	[0137.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_selectionsubpicture.png")) returned 0x20
	[0137.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.846] SetEvent (hEvent=0xfc) returned 1
	[0137.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\pagecurl.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.847] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24520) returned 1
	[0137.847] CloseHandle (hObject=0x148) returned 1
	[0137.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\pagecurl.png")) returned 0x20
	[0137.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\pagecurl.png")) returned 0x20
	[0137.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\pagecurl.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\FlipPage\\pagecurl.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\flippage\\pagecurl.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.849] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4570) returned 1
	[0137.849] CloseHandle (hObject=0x148) returned 1
	[0137.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\1047x576black.png")) returned 0x20
	[0137.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\1047x576black.png")) returned 0x20
	[0137.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\1047x576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.849] SetEvent (hEvent=0xfc) returned 1
	[0137.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.990] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2821) returned 1
	[0137.990] CloseHandle (hObject=0x148) returned 1
	[0137.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\15x15dot.png")) returned 0x20
	[0137.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\15x15dot.png")) returned 0x20
	[0137.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\15x15dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\15x15dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.990] SetEvent (hEvent=0xfc) returned 1
	[0137.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotslightoverlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0137.990] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4669) returned 1
	[0137.991] CloseHandle (hObject=0x148) returned 1
	[0137.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotslightoverlay.png")) returned 0x20
	[0137.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotslightoverlay.png")) returned 0x20
	[0137.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotslightoverlay.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0137.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\dotslightoverlay.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\dotslightoverlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0137.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\full.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.130] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26516) returned 1
	[0138.130] CloseHandle (hObject=0x148) returned 1
	[0138.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\full.png")) returned 0x20
	[0138.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\full.png")) returned 0x20
	[0138.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\full.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Full\\full.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\full\\full.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.130] SetEvent (hEvent=0xfc) returned 1
	[0138.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.131] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4955) returned 1
	[0138.131] CloseHandle (hObject=0x148) returned 1
	[0138.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_buttongraphic.png")) returned 0x20
	[0138.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_buttongraphic.png")) returned 0x20
	[0138.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.131] SetEvent (hEvent=0xfc) returned 1
	[0138.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.132] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3081) returned 1
	[0138.132] CloseHandle (hObject=0x148) returned 1
	[0138.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.132] SetEvent (hEvent=0xfc) returned 1
	[0138.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\title_stripe.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.133] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3887) returned 1
	[0138.133] CloseHandle (hObject=0x148) returned 1
	[0138.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\title_stripe.png")) returned 0x20
	[0138.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\title_stripe.png")) returned 0x20
	[0138.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\title_stripe.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\HueCycle\\title_stripe.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\huecycle\\title_stripe.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.133] SetEvent (hEvent=0xfc) returned 1
	[0138.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.270] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4570) returned 1
	[0138.270] CloseHandle (hObject=0x148) returned 1
	[0138.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\1047x576black.png")) returned 0x20
	[0138.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\1047x576black.png")) returned 0x20
	[0138.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\1047x576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.271] SetEvent (hEvent=0xfc) returned 1
	[0138.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\blackbars60.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.271] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6431) returned 1
	[0138.271] CloseHandle (hObject=0x148) returned 1
	[0138.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\blackbars60.png")) returned 0x20
	[0138.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\blackbars60.png")) returned 0x20
	[0138.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\blackbars60.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\blackbars60.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\blackbars60.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\layers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.272] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24557) returned 1
	[0138.272] CloseHandle (hObject=0x148) returned 1
	[0138.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\layers.png")) returned 0x20
	[0138.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\layers.png")) returned 0x20
	[0138.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\layers.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\layers.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\layers.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.273] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5088) returned 1
	[0138.273] CloseHandle (hObject=0x148) returned 1
	[0138.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.273] SetEvent (hEvent=0xfc) returned 1
	[0138.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.457] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3130) returned 1
	[0138.457] CloseHandle (hObject=0x148) returned 1
	[0138.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\LayeredTitles\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\layeredtitles\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.458] SetEvent (hEvent=0xfc) returned 1
	[0138.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.459] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3016) returned 1
	[0138.459] CloseHandle (hObject=0x148) returned 1
	[0138.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png")) returned 0x20
	[0138.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png")) returned 0x20
	[0138.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-over-select.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-over-select.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.459] SetEvent (hEvent=0xfc) returned 1
	[0138.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.459] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2019) returned 1
	[0138.459] CloseHandle (hObject=0x148) returned 1
	[0138.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png")) returned 0x20
	[0138.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png")) returned 0x20
	[0138.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_btn-previous-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.462] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13239) returned 1
	[0138.462] CloseHandle (hObject=0x148) returned 1
	[0138.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png")) returned 0x20
	[0138.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png")) returned 0x20
	[0138.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-border.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-border.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.463] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5761) returned 1
	[0138.463] CloseHandle (hObject=0x148) returned 1
	[0138.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png")) returned 0x20
	[0138.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png")) returned 0x20
	[0138.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-highlight.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-highlight.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.600] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8169) returned 1
	[0138.600] CloseHandle (hObject=0x148) returned 1
	[0138.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png")) returned 0x20
	[0138.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png")) returned 0x20
	[0138.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Pets\\Pets_frame-imageMask.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\pets\\pets_frame-imagemask.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.600] SetEvent (hEvent=0xfc) returned 1
	[0138.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.731] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=195804) returned 1
	[0138.731] CloseHandle (hObject=0x148) returned 1
	[0138.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png")) returned 0x20
	[0138.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png")) returned 0x20
	[0138.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Rectangles\\vistabg.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\rectangles\\vistabg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.732] SetEvent (hEvent=0xfc) returned 1
	[0138.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.846] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5088) returned 1
	[0138.846] CloseHandle (hObject=0x148) returned 1
	[0138.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png")) returned 0x20
	[0138.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.846] SetEvent (hEvent=0xfc) returned 1
	[0138.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.847] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3130) returned 1
	[0138.847] CloseHandle (hObject=0x148) returned 1
	[0138.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0138.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.848] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5025) returned 1
	[0138.848] CloseHandle (hObject=0x148) returned 1
	[0138.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png")) returned 0x20
	[0138.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png")) returned 0x20
	[0138.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.848] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3118) returned 1
	[0138.848] CloseHandle (hObject=0x148) returned 1
	[0138.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png")) returned 0x20
	[0138.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.849] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4955) returned 1
	[0138.849] CloseHandle (hObject=0x148) returned 1
	[0138.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png")) returned 0x20
	[0138.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png")) returned 0x20
	[0138.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.858] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3081) returned 1
	[0138.858] CloseHandle (hObject=0x148) returned 1
	[0138.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png")) returned 0x20
	[0138.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.859] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=96025) returned 1
	[0138.859] CloseHandle (hObject=0x148) returned 1
	[0138.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png")) returned 0x20
	[0138.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png")) returned 0x20
	[0138.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\scenesscroll.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\scenesscroll.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.860] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2864) returned 1
	[0138.860] CloseHandle (hObject=0x148) returned 1
	[0138.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png")) returned 0x20
	[0138.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png")) returned 0x20
	[0138.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\specialmainsubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialmainsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.861] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4815) returned 1
	[0138.861] CloseHandle (hObject=0x148) returned 1
	[0138.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png")) returned 0x20
	[0138.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png")) returned 0x20
	[0138.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.862] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3030) returned 1
	[0138.862] CloseHandle (hObject=0x148) returned 1
	[0138.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png")) returned 0x20
	[0138.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png")) returned 0x20
	[0138.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.863] SetEvent (hEvent=0xfc) returned 1
	[0138.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.863] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4815) returned 1
	[0138.863] CloseHandle (hObject=0x148) returned 1
	[0138.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png")) returned 0x20
	[0138.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png")) returned 0x20
	[0138.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.864] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3024) returned 1
	[0138.864] CloseHandle (hObject=0x148) returned 1
	[0138.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png")) returned 0x20
	[0138.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png")) returned 0x20
	[0138.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.864] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4866) returned 1
	[0138.864] CloseHandle (hObject=0x148) returned 1
	[0138.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png")) returned 0x20
	[0138.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png")) returned 0x20
	[0138.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0138.989] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3011) returned 1
	[0138.989] CloseHandle (hObject=0x148) returned 1
	[0138.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png")) returned 0x20
	[0138.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png")) returned 0x20
	[0138.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0138.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\SpecialOccasion\\SpecialNavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\specialoccasion\\specialnavigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0138.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.092] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8406) returned 1
	[0139.092] CloseHandle (hObject=0x148) returned 1
	[0139.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png")) returned 0x20
	[0139.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png")) returned 0x20
	[0139.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.092] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\btn-previous-static.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\btn-previous-static.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.093] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70262) returned 1
	[0139.093] CloseHandle (hObject=0x148) returned 1
	[0139.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png")) returned 0x20
	[0139.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png")) returned 0x20
	[0139.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\header-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\header-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.094] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=201323) returned 1
	[0139.094] CloseHandle (hObject=0x148) returned 1
	[0139.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png")) returned 0x20
	[0139.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png")) returned 0x20
	[0139.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.094] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=69268) returned 1
	[0139.094] CloseHandle (hObject=0x148) returned 1
	[0139.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv")) returned 0x20
	[0139.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv")) returned 0x20
	[0139.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.095] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.096] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=363512) returned 1
	[0139.096] CloseHandle (hObject=0x148) returned 1
	[0139.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png")) returned 0x20
	[0139.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png")) returned 0x20
	[0139.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passportcover.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportcover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.102] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29268) returned 1
	[0139.102] CloseHandle (hObject=0x148) returned 1
	[0139.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv")) returned 0x20
	[0139.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv")) returned 0x20
	[0139.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.103] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29268) returned 1
	[0139.103] CloseHandle (hObject=0x148) returned 1
	[0139.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv")) returned 0x20
	[0139.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv")) returned 0x20
	[0139.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\PassportMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passportmask_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.104] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4793) returned 1
	[0139.104] CloseHandle (hObject=0x148) returned 1
	[0139.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png")) returned 0x20
	[0139.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png")) returned 0x20
	[0139.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_left.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.105] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4813) returned 1
	[0139.105] CloseHandle (hObject=0x148) returned 1
	[0139.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png")) returned 0x20
	[0139.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png")) returned 0x20
	[0139.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\passport_mask_right.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_mask_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.106] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=109292) returned 1
	[0139.106] CloseHandle (hObject=0x148) returned 1
	[0139.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv")) returned 0x20
	[0139.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv")) returned 0x20
	[0139.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\Passport_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\passport_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.106] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=99127) returned 1
	[0139.106] CloseHandle (hObject=0x148) returned 1
	[0139.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png")) returned 0x20
	[0139.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png")) returned 0x20
	[0139.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\play-background.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\play-background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.107] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3057) returned 1
	[0139.107] CloseHandle (hObject=0x148) returned 1
	[0139.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png")) returned 0x20
	[0139.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png")) returned 0x20
	[0139.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\selection_subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\selection_subpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.109] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25998) returned 1
	[0139.109] CloseHandle (hObject=0x148) returned 1
	[0139.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png")) returned 0x20
	[0139.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png")) returned 0x20
	[0139.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\travel.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travel.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.109] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=205220) returned 1
	[0139.110] CloseHandle (hObject=0x148) returned 1
	[0139.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv")) returned 0x20
	[0139.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv")) returned 0x20
	[0139.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.110] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61220) returned 1
	[0139.110] CloseHandle (hObject=0x148) returned 1
	[0139.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv")) returned 0x20
	[0139.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv")) returned 0x20
	[0139.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.111] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61220) returned 1
	[0139.111] CloseHandle (hObject=0x148) returned 1
	[0139.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv")) returned 0x20
	[0139.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv")) returned 0x20
	[0139.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMainMask_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomainmask_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.115] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=229220) returned 1
	[0139.115] CloseHandle (hObject=0x148) returned 1
	[0139.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv")) returned 0x20
	[0139.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv")) returned 0x20
	[0139.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Travel\\TravelIntroToMain_PAL.wmv" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\travel\\travelintrotomain_pal.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.116] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2820) returned 1
	[0139.116] CloseHandle (hObject=0x148) returned 1
	[0139.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png")) returned 0x20
	[0139.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png")) returned 0x20
	[0139.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\203x8subpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\203x8subpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.117] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19846) returned 1
	[0139.117] CloseHandle (hObject=0x148) returned 1
	[0139.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png")) returned 0x20
	[0139.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png")) returned 0x20
	[0139.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\VideoWall\\videowall.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\videowall\\videowall.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.119] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4570) returned 1
	[0139.119] CloseHandle (hObject=0x148) returned 1
	[0139.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png")) returned 0x20
	[0139.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png")) returned 0x20
	[0139.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\1047x576black.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\1047x576black.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\15x15dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.120] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2821) returned 1
	[0139.120] CloseHandle (hObject=0x148) returned 1
	[0139.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\15x15dot.png")) returned 0x20
	[0139.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\15x15dot.png")) returned 0x20
	[0139.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\15x15dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\15x15dot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\15x15dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.120] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5088) returned 1
	[0139.121] CloseHandle (hObject=0x148) returned 1
	[0139.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_buttongraphic.png")) returned 0x20
	[0139.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_buttongraphic.png")) returned 0x20
	[0139.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.121] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3130) returned 1
	[0139.121] CloseHandle (hObject=0x148) returned 1
	[0139.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0139.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_selectionsubpicture.png")) returned 0x20
	[0139.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationLeft_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationleft_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.122] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5025) returned 1
	[0139.122] CloseHandle (hObject=0x148) returned 1
	[0139.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_buttongraphic.png")) returned 0x20
	[0139.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_buttongraphic.png")) returned 0x20
	[0139.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.123] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3118) returned 1
	[0139.123] CloseHandle (hObject=0x148) returned 1
	[0139.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_selectionsubpicture.png")) returned 0x20
	[0139.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_selectionsubpicture.png")) returned 0x20
	[0139.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationRight_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationright_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_buttongraphic.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.123] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4955) returned 1
	[0139.123] CloseHandle (hObject=0x148) returned 1
	[0139.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_buttongraphic.png")) returned 0x20
	[0139.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_buttongraphic.png")) returned 0x20
	[0139.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_ButtonGraphic.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_buttongraphic.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_ButtonGraphic.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_buttongraphic.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.124] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3081) returned 1
	[0139.124] CloseHandle (hObject=0x148) returned 1
	[0139.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_selectionsubpicture.png")) returned 0x20
	[0139.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_selectionsubpicture.png")) returned 0x20
	[0139.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_SelectionSubpicture.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_selectionsubpicture.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\NavigationUp_SelectionSubpicture.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\navigationup_selectionsubpicture.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\softedges.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\softedges.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.125] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27691) returned 1
	[0139.125] CloseHandle (hObject=0x148) returned 1
	[0139.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\softedges.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\softedges.png")) returned 0x20
	[0139.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\softedges.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\softedges.png")) returned 0x20
	[0139.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\softedges.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\softedges.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\softedges.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\softedges.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\vignettemask25.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\vignettemask25.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.126] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56543) returned 1
	[0139.126] CloseHandle (hObject=0x148) returned 1
	[0139.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\vignettemask25.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\vignettemask25.png")) returned 0x20
	[0139.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\vignettemask25.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\vignettemask25.png")) returned 0x20
	[0139.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\vignettemask25.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\vignettemask25.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\vignettemask25.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\vignettemask25.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\whiteband.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\whiteband.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.126] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7261) returned 1
	[0139.126] CloseHandle (hObject=0x148) returned 1
	[0139.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\whiteband.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\whiteband.png")) returned 0x20
	[0139.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\whiteband.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\whiteband.png")) returned 0x20
	[0139.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\whiteband.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\whiteband.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\Vignette\\whiteband.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\vignette\\whiteband.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\whitedot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.127] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23722) returned 1
	[0139.127] CloseHandle (hObject=0x148) returned 1
	[0139.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\whitedot.png")) returned 0x20
	[0139.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\whitedot.png")) returned 0x20
	[0139.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\whitedot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\DvdStyles\\WhiteDot.png" (normalized: "c:\\program files\\dvd maker\\shared\\dvdstyles\\whitedot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Filters.xml" (normalized: "c:\\program files\\dvd maker\\shared\\filters.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.128] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14239) returned 1
	[0139.128] CloseHandle (hObject=0x148) returned 1
	[0139.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Filters.xml" (normalized: "c:\\program files\\dvd maker\\shared\\filters.xml")) returned 0x20
	[0139.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Filters.xml" (normalized: "c:\\program files\\dvd maker\\shared\\filters.xml")) returned 0x20
	[0139.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Filters.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\filters.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Filters.xml" (normalized: "c:\\program files\\dvd maker\\shared\\filters.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Parity.fx" (normalized: "c:\\program files\\dvd maker\\shared\\parity.fx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.129] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36575) returned 1
	[0139.129] CloseHandle (hObject=0x148) returned 1
	[0139.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Parity.fx" (normalized: "c:\\program files\\dvd maker\\shared\\parity.fx")) returned 0x20
	[0139.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Parity.fx" (normalized: "c:\\program files\\dvd maker\\shared\\parity.fx")) returned 0x20
	[0139.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Parity.fx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\shared\\parity.fx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\Shared\\Parity.fx" (normalized: "c:\\program files\\dvd maker\\shared\\parity.fx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\soniccolorconverter.ax" (normalized: "c:\\program files\\dvd maker\\soniccolorconverter.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.132] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79360) returned 1
	[0139.133] CloseHandle (hObject=0x148) returned 1
	[0139.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\soniccolorconverter.ax" (normalized: "c:\\program files\\dvd maker\\soniccolorconverter.ax")) returned 0x20
	[0139.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\soniccolorconverter.ax" (normalized: "c:\\program files\\dvd maker\\soniccolorconverter.ax")) returned 0x20
	[0139.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\soniccolorconverter.ax.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\soniccolorconverter.ax.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\soniccolorconverter.ax" (normalized: "c:\\program files\\dvd maker\\soniccolorconverter.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\sonicsptransform.ax" (normalized: "c:\\program files\\dvd maker\\sonicsptransform.ax"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.133] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51712) returned 1
	[0139.133] CloseHandle (hObject=0x148) returned 1
	[0139.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\sonicsptransform.ax" (normalized: "c:\\program files\\dvd maker\\sonicsptransform.ax")) returned 0x20
	[0139.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\sonicsptransform.ax" (normalized: "c:\\program files\\dvd maker\\sonicsptransform.ax")) returned 0x20
	[0139.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\sonicsptransform.ax.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\sonicsptransform.ax.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\sonicsptransform.ax" (normalized: "c:\\program files\\dvd maker\\sonicsptransform.ax"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\WMM2CLIP.dll" (normalized: "c:\\program files\\dvd maker\\wmm2clip.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.134] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=303104) returned 1
	[0139.134] CloseHandle (hObject=0x148) returned 1
	[0139.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\WMM2CLIP.dll" (normalized: "c:\\program files\\dvd maker\\wmm2clip.dll")) returned 0x20
	[0139.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\WMM2CLIP.dll" (normalized: "c:\\program files\\dvd maker\\wmm2clip.dll")) returned 0x20
	[0139.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\WMM2CLIP.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\dvd maker\\wmm2clip.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\DVD Maker\\WMM2CLIP.dll" (normalized: "c:\\program files\\dvd maker\\wmm2clip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.136] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0139.136] CloseHandle (hObject=0x148) returned 1
	[0139.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20
	[0139.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20
	[0139.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iedvtool.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.137] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28672) returned 1
	[0139.137] CloseHandle (hObject=0x148) returned 1
	[0139.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iedvtool.dll.mui")) returned 0x20
	[0139.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iedvtool.dll.mui")) returned 0x20
	[0139.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iedvtool.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\en-us\\iedvtool.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iedvtool.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.137] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2048) returned 1
	[0139.137] CloseHandle (hObject=0x148) returned 1
	[0139.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20
	[0139.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20
	[0139.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ielowutil.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.138] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2048) returned 1
	[0139.138] CloseHandle (hObject=0x148) returned 1
	[0139.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ielowutil.exe.mui")) returned 0x20
	[0139.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ielowutil.exe.mui")) returned 0x20
	[0139.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ielowutil.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\en-us\\ielowutil.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ielowutil.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ielowutil.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.139] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5120) returned 1
	[0139.139] CloseHandle (hObject=0x148) returned 1
	[0139.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20
	[0139.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20
	[0139.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdbgui.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.140] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11776) returned 1
	[0139.140] CloseHandle (hObject=0x148) returned 1
	[0139.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdbgui.dll.mui")) returned 0x20
	[0139.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdbgui.dll.mui")) returned 0x20
	[0139.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdbgui.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdbgui.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdbgui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdbgui.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdebuggeride.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.141] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2048) returned 1
	[0139.141] CloseHandle (hObject=0x148) returned 1
	[0139.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdebuggeride.dll.mui")) returned 0x20
	[0139.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdebuggeride.dll.mui")) returned 0x20
	[0139.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdebuggeride.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsdebuggeride.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsdebuggeride.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilercore.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.142] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2048) returned 1
	[0139.142] CloseHandle (hObject=0x148) returned 1
	[0139.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilercore.dll.mui")) returned 0x20
	[0139.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilercore.dll.mui")) returned 0x20
	[0139.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilercore.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\JSProfilerCore.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilercore.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilerui.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.143] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7168) returned 1
	[0139.143] CloseHandle (hObject=0x148) returned 1
	[0139.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilerui.dll.mui")) returned 0x20
	[0139.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilerui.dll.mui")) returned 0x20
	[0139.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsprofilerui.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilerui.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\jsprofilerui.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\jsprofilerui.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.144] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52736) returned 1
	[0139.144] CloseHandle (hObject=0x148) returned 1
	[0139.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20
	[0139.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20
	[0139.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files\\internet explorer\\ie8props.propdesc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.145] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2649) returned 1
	[0139.145] CloseHandle (hObject=0x148) returned 1
	[0139.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files\\internet explorer\\ie8props.propdesc")) returned 0x20
	[0139.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files\\internet explorer\\ie8props.propdesc")) returned 0x20
	[0139.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ie8props.propdesc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\ie8props.propdesc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ie8props.propdesc" (normalized: "c:\\program files\\internet explorer\\ie8props.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files\\internet explorer\\iecompat.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.146] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0139.146] CloseHandle (hObject=0x148) returned 1
	[0139.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files\\internet explorer\\iecompat.dll")) returned 0x20
	[0139.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files\\internet explorer\\iecompat.dll")) returned 0x20
	[0139.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iecompat.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\iecompat.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iecompat.dll" (normalized: "c:\\program files\\internet explorer\\iecompat.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files\\internet explorer\\iedvtool.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.147] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1013248) returned 1
	[0139.147] CloseHandle (hObject=0x148) returned 1
	[0139.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files\\internet explorer\\iedvtool.dll")) returned 0x20
	[0139.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files\\internet explorer\\iedvtool.dll")) returned 0x20
	[0139.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iedvtool.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\iedvtool.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iedvtool.dll" (normalized: "c:\\program files\\internet explorer\\iedvtool.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.148] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=269824) returned 1
	[0139.148] CloseHandle (hObject=0x148) returned 1
	[0139.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20
	[0139.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20
	[0139.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.149] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=115712) returned 1
	[0139.149] CloseHandle (hObject=0x148) returned 1
	[0139.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20
	[0139.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20
	[0139.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.150] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=451072) returned 1
	[0139.150] CloseHandle (hObject=0x148) returned 1
	[0139.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll")) returned 0x20
	[0139.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll")) returned 0x20
	[0139.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieproxy.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.151] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=293376) returned 1
	[0139.151] CloseHandle (hObject=0x148) returned 1
	[0139.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20
	[0139.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20
	[0139.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\ieshims.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.152] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=695056) returned 1
	[0139.152] CloseHandle (hObject=0x148) returned 1
	[0139.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20
	[0139.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20
	[0139.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\iexplore.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files\\internet explorer\\jsdbgui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.153] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=505344) returned 1
	[0139.153] CloseHandle (hObject=0x148) returned 1
	[0139.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files\\internet explorer\\jsdbgui.dll")) returned 0x20
	[0139.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files\\internet explorer\\jsdbgui.dll")) returned 0x20
	[0139.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdbgui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\jsdbgui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdbgui.dll" (normalized: "c:\\program files\\internet explorer\\jsdbgui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files\\internet explorer\\jsdebuggeride.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.153] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=144896) returned 1
	[0139.153] CloseHandle (hObject=0x148) returned 1
	[0139.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files\\internet explorer\\jsdebuggeride.dll")) returned 0x20
	[0139.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files\\internet explorer\\jsdebuggeride.dll")) returned 0x20
	[0139.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdebuggeride.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\jsdebuggeride.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsdebuggeride.dll" (normalized: "c:\\program files\\internet explorer\\jsdebuggeride.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilercore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.155] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=132096) returned 1
	[0139.155] CloseHandle (hObject=0x148) returned 1
	[0139.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilercore.dll")) returned 0x20
	[0139.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilercore.dll")) returned 0x20
	[0139.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\JSProfilerCore.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\jsprofilercore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\JSProfilerCore.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilercore.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilerui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.155] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=287744) returned 1
	[0139.155] CloseHandle (hObject=0x148) returned 1
	[0139.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilerui.dll")) returned 0x20
	[0139.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilerui.dll")) returned 0x20
	[0139.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsprofilerui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\jsprofilerui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\jsprofilerui.dll" (normalized: "c:\\program files\\internet explorer\\jsprofilerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files\\internet explorer\\msdbg2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.156] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=358904) returned 1
	[0139.156] CloseHandle (hObject=0x148) returned 1
	[0139.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files\\internet explorer\\msdbg2.dll")) returned 0x20
	[0139.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files\\internet explorer\\msdbg2.dll")) returned 0x20
	[0139.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\msdbg2.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\msdbg2.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\msdbg2.dll" (normalized: "c:\\program files\\internet explorer\\msdbg2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files\\internet explorer\\pdm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.157] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=537088) returned 1
	[0139.157] CloseHandle (hObject=0x148) returned 1
	[0139.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files\\internet explorer\\pdm.dll")) returned 0x20
	[0139.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files\\internet explorer\\pdm.dll")) returned 0x20
	[0139.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\pdm.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\pdm.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\pdm.dll" (normalized: "c:\\program files\\internet explorer\\pdm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.538] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=460) returned 1
	[0139.538] CloseHandle (hObject=0x148) returned 1
	[0139.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20
	[0139.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20
	[0139.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.674] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30948) returned 1
	[0139.674] CloseHandle (hObject=0x148) returned 1
	[0139.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 0x20
	[0139.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl")) returned 0x20
	[0139.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.675] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32146) returned 1
	[0139.675] CloseHandle (hObject=0x148) returned 1
	[0139.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 0x20
	[0139.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl")) returned 0x20
	[0139.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.676] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39515) returned 1
	[0139.676] CloseHandle (hObject=0x148) returned 1
	[0139.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 0x20
	[0139.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl")) returned 0x20
	[0139.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.678] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29790) returned 1
	[0139.678] CloseHandle (hObject=0x148) returned 1
	[0139.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 0x20
	[0139.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl")) returned 0x20
	[0139.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.678] SetEvent (hEvent=0xfc) returned 1
	[0139.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.678] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=44457320) returned 1
	[0139.678] CloseHandle (hObject=0x148) returned 1
	[0139.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll")) returned 0x20
	[0139.679] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0139.679] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmdlocal.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmdlocal.dll")) returned 0
	[0139.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.679] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12338536) returned 1
	[0139.679] CloseHandle (hObject=0x148) returned 1
	[0139.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll")) returned 0x20
	[0139.679] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0139.679] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msmgdsrv.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msmgdsrv.dll")) returned 0
	[0139.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.680] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8154984) returned 1
	[0139.680] CloseHandle (hObject=0x148) returned 1
	[0139.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll")) returned 0x20
	[0139.680] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0139.680] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolap100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolap100.dll")) returned 0
	[0139.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolui100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.681] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=318488) returned 1
	[0139.681] CloseHandle (hObject=0x148) returned 1
	[0139.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolui100.dll")) returned 0x20
	[0139.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolui100.dll")) returned 0x20
	[0139.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolui100.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\msolui100.dll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\msolui100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.682] SetEvent (hEvent=0xfc) returned 1
	[0139.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.682] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=666456) returned 1
	[0139.682] CloseHandle (hObject=0x148) returned 1
	[0139.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll")) returned 0x20
	[0139.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll")) returned 0x20
	[0139.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msmdsrv.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msmdsrv.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.683] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14872) returned 1
	[0139.683] CloseHandle (hObject=0x148) returned 1
	[0139.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll")) returned 0x20
	[0139.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll")) returned 0x20
	[0139.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\msolui100.rll" (normalized: "c:\\program files\\microsoft analysis services\\as oledb\\10\\resources\\1033\\msolui100.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\lastingquit.exe" (normalized: "c:\\program files\\microsoft analysis services\\lastingquit.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.684] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75776) returned 1
	[0139.684] CloseHandle (hObject=0x148) returned 1
	[0139.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\lastingquit.exe" (normalized: "c:\\program files\\microsoft analysis services\\lastingquit.exe")) returned 0x20
	[0139.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\lastingquit.exe" (normalized: "c:\\program files\\microsoft analysis services\\lastingquit.exe")) returned 0x20
	[0139.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\lastingquit.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft analysis services\\lastingquit.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Analysis Services\\lastingquit.exe" (normalized: "c:\\program files\\microsoft analysis services\\lastingquit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.685] SetEvent (hEvent=0xfc) returned 1
	[0139.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.686] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9024) returned 1
	[0139.686] CloseHandle (hObject=0x148) returned 1
	[0139.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif")) returned 0x20
	[0139.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif")) returned 0x20
	[0139.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.686] SetEvent (hEvent=0xfc) returned 1
	[0139.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.687] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7216) returned 1
	[0139.687] CloseHandle (hObject=0x148) returned 1
	[0139.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif")) returned 0x20
	[0139.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif")) returned 0x20
	[0139.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.688] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14873) returned 1
	[0139.688] CloseHandle (hObject=0x148) returned 1
	[0139.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif")) returned 0x20
	[0139.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif")) returned 0x20
	[0139.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.689] SetEvent (hEvent=0xfc) returned 1
	[0139.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.689] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6684) returned 1
	[0139.689] CloseHandle (hObject=0x148) returned 1
	[0139.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif")) returned 0x20
	[0139.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif")) returned 0x20
	[0139.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.693] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3251) returned 1
	[0139.693] CloseHandle (hObject=0x148) returned 1
	[0139.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif")) returned 0x20
	[0139.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif")) returned 0x20
	[0139.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.693] SetEvent (hEvent=0xfc) returned 1
	[0139.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.694] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8097) returned 1
	[0139.694] CloseHandle (hObject=0x148) returned 1
	[0139.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif")) returned 0x20
	[0139.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif")) returned 0x20
	[0139.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.695] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7686) returned 1
	[0139.695] CloseHandle (hObject=0x148) returned 1
	[0139.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif")) returned 0x20
	[0139.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif")) returned 0x20
	[0139.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.695] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11891) returned 1
	[0139.695] CloseHandle (hObject=0x148) returned 1
	[0139.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif")) returned 0x20
	[0139.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif")) returned 0x20
	[0139.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.696] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=517) returned 1
	[0139.696] CloseHandle (hObject=0x148) returned 1
	[0139.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif")) returned 0x20
	[0139.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif")) returned 0x20
	[0139.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.697] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=502) returned 1
	[0139.697] CloseHandle (hObject=0x148) returned 1
	[0139.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif")) returned 0x20
	[0139.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif")) returned 0x20
	[0139.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.699] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12702) returned 1
	[0139.699] CloseHandle (hObject=0x148) returned 1
	[0139.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif")) returned 0x20
	[0139.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif")) returned 0x20
	[0139.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.702] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3484) returned 1
	[0139.702] CloseHandle (hObject=0x148) returned 1
	[0139.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif")) returned 0x20
	[0139.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif")) returned 0x20
	[0139.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.702] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3140) returned 1
	[0139.702] CloseHandle (hObject=0x148) returned 1
	[0139.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif")) returned 0x20
	[0139.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif")) returned 0x20
	[0139.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.703] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12482) returned 1
	[0139.703] CloseHandle (hObject=0x148) returned 1
	[0139.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif")) returned 0x20
	[0139.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif")) returned 0x20
	[0139.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.704] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5253) returned 1
	[0139.704] CloseHandle (hObject=0x148) returned 1
	[0139.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif")) returned 0x20
	[0139.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif")) returned 0x20
	[0139.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.705] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2596) returned 1
	[0139.705] CloseHandle (hObject=0x148) returned 1
	[0139.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif")) returned 0x20
	[0139.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif")) returned 0x20
	[0139.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.706] SetEvent (hEvent=0xfc) returned 1
	[0139.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.707] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10607) returned 1
	[0139.707] CloseHandle (hObject=0x148) returned 1
	[0139.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif")) returned 0x20
	[0139.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif")) returned 0x20
	[0139.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.707] SetEvent (hEvent=0xfc) returned 1
	[0139.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.707] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15308) returned 1
	[0139.708] CloseHandle (hObject=0x148) returned 1
	[0139.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif")) returned 0x20
	[0139.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif")) returned 0x20
	[0139.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.708] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5315) returned 1
	[0139.708] CloseHandle (hObject=0x148) returned 1
	[0139.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif")) returned 0x20
	[0139.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif")) returned 0x20
	[0139.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.709] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4955) returned 1
	[0139.709] CloseHandle (hObject=0x148) returned 1
	[0139.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif")) returned 0x20
	[0139.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif")) returned 0x20
	[0139.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.710] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5030) returned 1
	[0139.710] CloseHandle (hObject=0x148) returned 1
	[0139.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif")) returned 0x20
	[0139.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif")) returned 0x20
	[0139.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.710] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1146) returned 1
	[0139.710] CloseHandle (hObject=0x148) returned 1
	[0139.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif")) returned 0x20
	[0139.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif")) returned 0x20
	[0139.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.711] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7583) returned 1
	[0139.711] CloseHandle (hObject=0x148) returned 1
	[0139.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif")) returned 0x20
	[0139.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif")) returned 0x20
	[0139.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.712] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6984) returned 1
	[0139.713] CloseHandle (hObject=0x148) returned 1
	[0139.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif")) returned 0x20
	[0139.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif")) returned 0x20
	[0139.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.713] SetEvent (hEvent=0xfc) returned 1
	[0139.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.713] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13254) returned 1
	[0139.713] CloseHandle (hObject=0x148) returned 1
	[0139.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif")) returned 0x20
	[0139.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif")) returned 0x20
	[0139.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.715] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8582) returned 1
	[0139.715] CloseHandle (hObject=0x148) returned 1
	[0139.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif")) returned 0x20
	[0139.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif")) returned 0x20
	[0139.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.715] SetEvent (hEvent=0xfc) returned 1
	[0139.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.715] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4894) returned 1
	[0139.716] CloseHandle (hObject=0x148) returned 1
	[0139.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif")) returned 0x20
	[0139.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif")) returned 0x20
	[0139.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.716] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5375) returned 1
	[0139.716] CloseHandle (hObject=0x148) returned 1
	[0139.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif")) returned 0x20
	[0139.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif")) returned 0x20
	[0139.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.717] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9248) returned 1
	[0139.717] CloseHandle (hObject=0x148) returned 1
	[0139.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif")) returned 0x20
	[0139.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif")) returned 0x20
	[0139.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.718] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5016) returned 1
	[0139.718] CloseHandle (hObject=0x148) returned 1
	[0139.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif")) returned 0x20
	[0139.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif")) returned 0x20
	[0139.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.909] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4390) returned 1
	[0139.909] CloseHandle (hObject=0x148) returned 1
	[0139.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif")) returned 0x20
	[0139.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif")) returned 0x20
	[0139.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.910] SetEvent (hEvent=0xfc) returned 1
	[0139.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.910] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3378) returned 1
	[0139.910] CloseHandle (hObject=0x148) returned 1
	[0139.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif")) returned 0x20
	[0139.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif")) returned 0x20
	[0139.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.911] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3120) returned 1
	[0139.911] CloseHandle (hObject=0x148) returned 1
	[0139.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif")) returned 0x20
	[0139.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif")) returned 0x20
	[0139.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.912] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3026) returned 1
	[0139.912] CloseHandle (hObject=0x148) returned 1
	[0139.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf")) returned 0x20
	[0139.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf")) returned 0x20
	[0139.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.913] SetEvent (hEvent=0xfc) returned 1
	[0139.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.913] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4734) returned 1
	[0139.913] CloseHandle (hObject=0x148) returned 1
	[0139.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf")) returned 0x20
	[0139.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf")) returned 0x20
	[0139.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.914] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5684) returned 1
	[0139.914] CloseHandle (hObject=0x148) returned 1
	[0139.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf")) returned 0x20
	[0139.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf")) returned 0x20
	[0139.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.915] SetEvent (hEvent=0xfc) returned 1
	[0139.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.915] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20578) returned 1
	[0139.915] CloseHandle (hObject=0x148) returned 1
	[0139.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf")) returned 0x20
	[0139.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf")) returned 0x20
	[0139.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.917] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10832) returned 1
	[0139.917] CloseHandle (hObject=0x148) returned 1
	[0139.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf")) returned 0x20
	[0139.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf")) returned 0x20
	[0139.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.917] SetEvent (hEvent=0xfc) returned 1
	[0139.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.917] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14428) returned 1
	[0139.918] CloseHandle (hObject=0x148) returned 1
	[0139.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf")) returned 0x20
	[0139.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf")) returned 0x20
	[0139.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.918] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7072) returned 1
	[0139.918] CloseHandle (hObject=0x148) returned 1
	[0139.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf")) returned 0x20
	[0139.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf")) returned 0x20
	[0139.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.919] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3344) returned 1
	[0139.919] CloseHandle (hObject=0x148) returned 1
	[0139.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf")) returned 0x20
	[0139.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf")) returned 0x20
	[0139.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.920] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1596) returned 1
	[0139.920] CloseHandle (hObject=0x148) returned 1
	[0139.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf")) returned 0x20
	[0139.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf")) returned 0x20
	[0139.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.921] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7968) returned 1
	[0139.921] CloseHandle (hObject=0x148) returned 1
	[0139.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf")) returned 0x20
	[0139.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf")) returned 0x20
	[0139.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.921] SetEvent (hEvent=0xfc) returned 1
	[0139.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.922] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1832) returned 1
	[0139.922] CloseHandle (hObject=0x148) returned 1
	[0139.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf")) returned 0x20
	[0139.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf")) returned 0x20
	[0139.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.923] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26332) returned 1
	[0139.923] CloseHandle (hObject=0x148) returned 1
	[0139.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf")) returned 0x20
	[0139.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf")) returned 0x20
	[0139.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.924] SetEvent (hEvent=0xfc) returned 1
	[0139.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.924] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27858) returned 1
	[0139.924] CloseHandle (hObject=0x148) returned 1
	[0139.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf")) returned 0x20
	[0139.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf")) returned 0x20
	[0139.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.925] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3746) returned 1
	[0139.925] CloseHandle (hObject=0x148) returned 1
	[0139.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf")) returned 0x20
	[0139.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf")) returned 0x20
	[0139.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.925] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5836) returned 1
	[0139.925] CloseHandle (hObject=0x148) returned 1
	[0139.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf")) returned 0x20
	[0139.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf")) returned 0x20
	[0139.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.926] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3012) returned 1
	[0139.926] CloseHandle (hObject=0x148) returned 1
	[0139.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf")) returned 0x20
	[0139.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf")) returned 0x20
	[0139.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.927] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2756) returned 1
	[0139.927] CloseHandle (hObject=0x148) returned 1
	[0139.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf")) returned 0x20
	[0139.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf")) returned 0x20
	[0139.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.928] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7372) returned 1
	[0139.928] CloseHandle (hObject=0x148) returned 1
	[0139.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf")) returned 0x20
	[0139.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf")) returned 0x20
	[0139.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.929] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7540) returned 1
	[0139.929] CloseHandle (hObject=0x148) returned 1
	[0139.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf")) returned 0x20
	[0139.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf")) returned 0x20
	[0139.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.929] SetEvent (hEvent=0xfc) returned 1
	[0139.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.930] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6632) returned 1
	[0139.930] CloseHandle (hObject=0x148) returned 1
	[0139.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf")) returned 0x20
	[0139.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf")) returned 0x20
	[0139.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.931] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2108) returned 1
	[0139.931] CloseHandle (hObject=0x148) returned 1
	[0139.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf")) returned 0x20
	[0139.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf")) returned 0x20
	[0139.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.932] SetEvent (hEvent=0xfc) returned 1
	[0139.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.932] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9240) returned 1
	[0139.932] CloseHandle (hObject=0x148) returned 1
	[0139.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf")) returned 0x20
	[0139.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf")) returned 0x20
	[0139.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.933] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2344) returned 1
	[0139.933] CloseHandle (hObject=0x148) returned 1
	[0139.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf")) returned 0x20
	[0139.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf")) returned 0x20
	[0139.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.937] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6060) returned 1
	[0139.937] CloseHandle (hObject=0x148) returned 1
	[0139.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf")) returned 0x20
	[0139.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf")) returned 0x20
	[0139.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.937] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3416) returned 1
	[0139.937] CloseHandle (hObject=0x148) returned 1
	[0139.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf")) returned 0x20
	[0139.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf")) returned 0x20
	[0139.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.939] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2636) returned 1
	[0139.939] CloseHandle (hObject=0x148) returned 1
	[0139.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf")) returned 0x20
	[0139.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf")) returned 0x20
	[0139.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.939] SetEvent (hEvent=0xfc) returned 1
	[0139.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.940] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6636) returned 1
	[0139.940] CloseHandle (hObject=0x148) returned 1
	[0139.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf")) returned 0x20
	[0139.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf")) returned 0x20
	[0139.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.940] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4612) returned 1
	[0139.940] CloseHandle (hObject=0x148) returned 1
	[0139.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf")) returned 0x20
	[0139.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf")) returned 0x20
	[0139.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.941] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3144) returned 1
	[0139.941] CloseHandle (hObject=0x148) returned 1
	[0139.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf")) returned 0x20
	[0139.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf")) returned 0x20
	[0139.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.942] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7668) returned 1
	[0139.942] CloseHandle (hObject=0x148) returned 1
	[0139.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf")) returned 0x20
	[0139.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf")) returned 0x20
	[0139.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.943] SetEvent (hEvent=0xfc) returned 1
	[0139.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.943] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8492) returned 1
	[0139.943] CloseHandle (hObject=0x148) returned 1
	[0139.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf")) returned 0x20
	[0139.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf")) returned 0x20
	[0139.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.944] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7804) returned 1
	[0139.944] CloseHandle (hObject=0x148) returned 1
	[0139.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf")) returned 0x20
	[0139.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf")) returned 0x20
	[0139.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.945] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7804) returned 1
	[0139.945] CloseHandle (hObject=0x148) returned 1
	[0139.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf")) returned 0x20
	[0139.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf")) returned 0x20
	[0139.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.945] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2016) returned 1
	[0139.945] CloseHandle (hObject=0x148) returned 1
	[0139.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf")) returned 0x20
	[0139.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf")) returned 0x20
	[0139.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0139.947] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2492) returned 1
	[0139.947] CloseHandle (hObject=0x148) returned 1
	[0139.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf")) returned 0x20
	[0139.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf")) returned 0x20
	[0139.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0139.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0139.947] SetEvent (hEvent=0xfc) returned 1
	[0140.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0140.798] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3348) returned 1
	[0140.798] CloseHandle (hObject=0x148) returned 1
	[0140.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf")) returned 0x20
	[0140.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf")) returned 0x20
	[0140.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0140.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0140.799] SetEvent (hEvent=0xfc) returned 1
	[0140.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0141.671] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2080) returned 1
	[0141.672] CloseHandle (hObject=0x148) returned 1
	[0141.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x20
	[0141.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x20
	[0141.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0141.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0141.672] SetEvent (hEvent=0xfc) returned 1
	[0141.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.218] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1160) returned 1
	[0142.218] CloseHandle (hObject=0x148) returned 1
	[0142.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf")) returned 0x20
	[0142.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf")) returned 0x20
	[0142.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.218] SetEvent (hEvent=0xfc) returned 1
	[0142.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.656] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16596) returned 1
	[0142.656] CloseHandle (hObject=0x148) returned 1
	[0142.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf")) returned 0x20
	[0142.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf")) returned 0x20
	[0142.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.664] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73214) returned 1
	[0142.664] CloseHandle (hObject=0x148) returned 1
	[0142.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf")) returned 0x20
	[0142.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf")) returned 0x20
	[0142.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.664] SetEvent (hEvent=0xfc) returned 1
	[0142.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.670] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6929) returned 1
	[0142.671] CloseHandle (hObject=0x148) returned 1
	[0142.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg")) returned 0x20
	[0142.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg")) returned 0x20
	[0142.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.671] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7154) returned 1
	[0142.671] CloseHandle (hObject=0x148) returned 1
	[0142.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg")) returned 0x20
	[0142.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg")) returned 0x20
	[0142.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.672] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19656) returned 1
	[0142.672] CloseHandle (hObject=0x148) returned 1
	[0142.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg")) returned 0x20
	[0142.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg")) returned 0x20
	[0142.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.673] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22356) returned 1
	[0142.673] CloseHandle (hObject=0x148) returned 1
	[0142.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf")) returned 0x20
	[0142.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf")) returned 0x20
	[0142.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.674] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21946) returned 1
	[0142.674] CloseHandle (hObject=0x148) returned 1
	[0142.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf")) returned 0x20
	[0142.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf")) returned 0x20
	[0142.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.675] SetEvent (hEvent=0xfc) returned 1
	[0142.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.675] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50490) returned 1
	[0142.675] CloseHandle (hObject=0x148) returned 1
	[0142.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg")) returned 0x20
	[0142.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg")) returned 0x20
	[0142.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.683] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=64767) returned 1
	[0142.683] CloseHandle (hObject=0x148) returned 1
	[0142.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg")) returned 0x20
	[0142.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg")) returned 0x20
	[0142.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.684] SetEvent (hEvent=0xfc) returned 1
	[0142.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.684] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37140) returned 1
	[0142.684] CloseHandle (hObject=0x148) returned 1
	[0142.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf")) returned 0x20
	[0142.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf")) returned 0x20
	[0142.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.686] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6214) returned 1
	[0142.686] CloseHandle (hObject=0x148) returned 1
	[0142.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf")) returned 0x20
	[0142.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf")) returned 0x20
	[0142.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.691] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9744) returned 1
	[0142.691] CloseHandle (hObject=0x148) returned 1
	[0142.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf")) returned 0x20
	[0142.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf")) returned 0x20
	[0142.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.691] SetEvent (hEvent=0xfc) returned 1
	[0142.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.692] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9154) returned 1
	[0142.692] CloseHandle (hObject=0x148) returned 1
	[0142.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf")) returned 0x20
	[0142.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf")) returned 0x20
	[0142.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.693] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3394) returned 1
	[0142.693] CloseHandle (hObject=0x148) returned 1
	[0142.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf")) returned 0x20
	[0142.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf")) returned 0x20
	[0142.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.693] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1198) returned 1
	[0142.693] CloseHandle (hObject=0x148) returned 1
	[0142.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf")) returned 0x20
	[0142.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf")) returned 0x20
	[0142.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.694] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3840) returned 1
	[0142.694] CloseHandle (hObject=0x148) returned 1
	[0142.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf")) returned 0x20
	[0142.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf")) returned 0x20
	[0142.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.709] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4946) returned 1
	[0142.709] CloseHandle (hObject=0x148) returned 1
	[0142.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf")) returned 0x20
	[0142.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf")) returned 0x20
	[0142.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.710] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10898) returned 1
	[0142.710] CloseHandle (hObject=0x148) returned 1
	[0142.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif")) returned 0x20
	[0142.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif")) returned 0x20
	[0142.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.710] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5259) returned 1
	[0142.711] CloseHandle (hObject=0x148) returned 1
	[0142.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif")) returned 0x20
	[0142.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif")) returned 0x20
	[0142.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.711] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33975) returned 1
	[0142.711] CloseHandle (hObject=0x148) returned 1
	[0142.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif")) returned 0x20
	[0142.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif")) returned 0x20
	[0142.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.713] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16543) returned 1
	[0142.713] CloseHandle (hObject=0x148) returned 1
	[0142.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif")) returned 0x20
	[0142.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif")) returned 0x20
	[0142.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.713] SetEvent (hEvent=0xfc) returned 1
	[0142.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.713] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51401) returned 1
	[0142.713] CloseHandle (hObject=0x148) returned 1
	[0142.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif")) returned 0x20
	[0142.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif")) returned 0x20
	[0142.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.714] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4967) returned 1
	[0142.714] CloseHandle (hObject=0x148) returned 1
	[0142.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif")) returned 0x20
	[0142.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif")) returned 0x20
	[0142.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.715] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3904) returned 1
	[0142.715] CloseHandle (hObject=0x148) returned 1
	[0142.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif")) returned 0x20
	[0142.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif")) returned 0x20
	[0142.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.717] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17854) returned 1
	[0142.717] CloseHandle (hObject=0x148) returned 1
	[0142.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf")) returned 0x20
	[0142.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf")) returned 0x20
	[0142.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.717] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17854) returned 1
	[0142.717] CloseHandle (hObject=0x148) returned 1
	[0142.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf")) returned 0x20
	[0142.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf")) returned 0x20
	[0142.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.729] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=78840) returned 1
	[0142.729] CloseHandle (hObject=0x148) returned 1
	[0142.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp")) returned 0x20
	[0142.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp")) returned 0x20
	[0142.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.739] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16104) returned 1
	[0142.739] CloseHandle (hObject=0x148) returned 1
	[0142.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf")) returned 0x20
	[0142.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf")) returned 0x20
	[0142.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.739] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5908) returned 1
	[0142.739] CloseHandle (hObject=0x148) returned 1
	[0142.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf")) returned 0x20
	[0142.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf")) returned 0x20
	[0142.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.740] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23596) returned 1
	[0142.740] CloseHandle (hObject=0x148) returned 1
	[0142.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf")) returned 0x20
	[0142.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf")) returned 0x20
	[0142.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.741] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5172) returned 1
	[0142.741] CloseHandle (hObject=0x148) returned 1
	[0142.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf")) returned 0x20
	[0142.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf")) returned 0x20
	[0142.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.742] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5632) returned 1
	[0142.742] CloseHandle (hObject=0x148) returned 1
	[0142.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf")) returned 0x20
	[0142.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf")) returned 0x20
	[0142.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.743] SetEvent (hEvent=0xfc) returned 1
	[0142.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.749] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3444) returned 1
	[0142.749] CloseHandle (hObject=0x148) returned 1
	[0142.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf")) returned 0x20
	[0142.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf")) returned 0x20
	[0142.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.749] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5908) returned 1
	[0142.749] CloseHandle (hObject=0x148) returned 1
	[0142.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf")) returned 0x20
	[0142.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf")) returned 0x20
	[0142.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.750] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17728) returned 1
	[0142.750] CloseHandle (hObject=0x148) returned 1
	[0142.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf")) returned 0x20
	[0142.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf")) returned 0x20
	[0142.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.751] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19240) returned 1
	[0142.751] CloseHandle (hObject=0x148) returned 1
	[0142.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf")) returned 0x20
	[0142.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf")) returned 0x20
	[0142.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.761] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11540) returned 1
	[0142.761] CloseHandle (hObject=0x148) returned 1
	[0142.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf")) returned 0x20
	[0142.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf")) returned 0x20
	[0142.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.762] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7992) returned 1
	[0142.762] CloseHandle (hObject=0x148) returned 1
	[0142.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf")) returned 0x20
	[0142.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf")) returned 0x20
	[0142.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.763] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10508) returned 1
	[0142.763] CloseHandle (hObject=0x148) returned 1
	[0142.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf")) returned 0x20
	[0142.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf")) returned 0x20
	[0142.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.764] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2900) returned 1
	[0142.764] CloseHandle (hObject=0x148) returned 1
	[0142.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf")) returned 0x20
	[0142.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf")) returned 0x20
	[0142.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.764] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11584) returned 1
	[0142.764] CloseHandle (hObject=0x148) returned 1
	[0142.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf")) returned 0x20
	[0142.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf")) returned 0x20
	[0142.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.765] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17060) returned 1
	[0142.765] CloseHandle (hObject=0x148) returned 1
	[0142.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf")) returned 0x20
	[0142.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf")) returned 0x20
	[0142.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.767] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8860) returned 1
	[0142.767] CloseHandle (hObject=0x148) returned 1
	[0142.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf")) returned 0x20
	[0142.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf")) returned 0x20
	[0142.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.767] SetEvent (hEvent=0xfc) returned 1
	[0142.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.774] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12380) returned 1
	[0142.774] CloseHandle (hObject=0x148) returned 1
	[0142.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf")) returned 0x20
	[0142.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf")) returned 0x20
	[0142.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.774] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4944) returned 1
	[0142.774] CloseHandle (hObject=0x148) returned 1
	[0142.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf")) returned 0x20
	[0142.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf")) returned 0x20
	[0142.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.775] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11012) returned 1
	[0142.775] CloseHandle (hObject=0x148) returned 1
	[0142.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf")) returned 0x20
	[0142.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf")) returned 0x20
	[0142.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.776] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3328) returned 1
	[0142.776] CloseHandle (hObject=0x148) returned 1
	[0142.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf")) returned 0x20
	[0142.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf")) returned 0x20
	[0142.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.777] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20444) returned 1
	[0142.777] CloseHandle (hObject=0x148) returned 1
	[0142.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf")) returned 0x20
	[0142.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf")) returned 0x20
	[0142.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.778] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9400) returned 1
	[0142.778] CloseHandle (hObject=0x148) returned 1
	[0142.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf")) returned 0x20
	[0142.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf")) returned 0x20
	[0142.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.779] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6244) returned 1
	[0142.779] CloseHandle (hObject=0x148) returned 1
	[0142.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf")) returned 0x20
	[0142.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf")) returned 0x20
	[0142.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.780] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18728) returned 1
	[0142.780] CloseHandle (hObject=0x148) returned 1
	[0142.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf")) returned 0x20
	[0142.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf")) returned 0x20
	[0142.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.781] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5156) returned 1
	[0142.781] CloseHandle (hObject=0x148) returned 1
	[0142.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf")) returned 0x20
	[0142.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf")) returned 0x20
	[0142.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.782] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5472) returned 1
	[0142.782] CloseHandle (hObject=0x148) returned 1
	[0142.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf")) returned 0x20
	[0142.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf")) returned 0x20
	[0142.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.783] SetEvent (hEvent=0xfc) returned 1
	[0142.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.790] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4148) returned 1
	[0142.790] CloseHandle (hObject=0x148) returned 1
	[0142.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf")) returned 0x20
	[0142.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf")) returned 0x20
	[0142.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.791] SetEvent (hEvent=0xfc) returned 1
	[0142.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.791] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10364) returned 1
	[0142.791] CloseHandle (hObject=0x148) returned 1
	[0142.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf")) returned 0x20
	[0142.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf")) returned 0x20
	[0142.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.792] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13808) returned 1
	[0142.792] CloseHandle (hObject=0x148) returned 1
	[0142.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf")) returned 0x20
	[0142.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf")) returned 0x20
	[0142.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.799] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8240) returned 1
	[0142.799] CloseHandle (hObject=0x148) returned 1
	[0142.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf")) returned 0x20
	[0142.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf")) returned 0x20
	[0142.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.800] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19600) returned 1
	[0142.800] CloseHandle (hObject=0x148) returned 1
	[0142.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf")) returned 0x20
	[0142.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf")) returned 0x20
	[0142.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.801] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2148) returned 1
	[0142.801] CloseHandle (hObject=0x148) returned 1
	[0142.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf")) returned 0x20
	[0142.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf")) returned 0x20
	[0142.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.801] SetEvent (hEvent=0xfc) returned 1
	[0142.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.802] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3332) returned 1
	[0142.802] CloseHandle (hObject=0x148) returned 1
	[0142.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf")) returned 0x20
	[0142.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf")) returned 0x20
	[0142.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.803] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13784) returned 1
	[0142.803] CloseHandle (hObject=0x148) returned 1
	[0142.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf")) returned 0x20
	[0142.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf")) returned 0x20
	[0142.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.803] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3020) returned 1
	[0142.803] CloseHandle (hObject=0x148) returned 1
	[0142.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf")) returned 0x20
	[0142.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf")) returned 0x20
	[0142.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.804] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7632) returned 1
	[0142.804] CloseHandle (hObject=0x148) returned 1
	[0142.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf")) returned 0x20
	[0142.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf")) returned 0x20
	[0142.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.818] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9048) returned 1
	[0142.818] CloseHandle (hObject=0x148) returned 1
	[0142.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf")) returned 0x20
	[0142.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf")) returned 0x20
	[0142.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.819] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16100) returned 1
	[0142.819] CloseHandle (hObject=0x148) returned 1
	[0142.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf")) returned 0x20
	[0142.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf")) returned 0x20
	[0142.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.820] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4536) returned 1
	[0142.820] CloseHandle (hObject=0x148) returned 1
	[0142.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf")) returned 0x20
	[0142.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf")) returned 0x20
	[0142.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.820] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9968) returned 1
	[0142.820] CloseHandle (hObject=0x148) returned 1
	[0142.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf")) returned 0x20
	[0142.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf")) returned 0x20
	[0142.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.821] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20212) returned 1
	[0142.821] CloseHandle (hObject=0x148) returned 1
	[0142.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf")) returned 0x20
	[0142.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf")) returned 0x20
	[0142.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.823] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8552) returned 1
	[0142.823] CloseHandle (hObject=0x148) returned 1
	[0142.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf")) returned 0x20
	[0142.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf")) returned 0x20
	[0142.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.823] SetEvent (hEvent=0xfc) returned 1
	[0142.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.823] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7996) returned 1
	[0142.823] CloseHandle (hObject=0x148) returned 1
	[0142.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf")) returned 0x20
	[0142.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf")) returned 0x20
	[0142.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.831] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5272) returned 1
	[0142.831] CloseHandle (hObject=0x148) returned 1
	[0142.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf")) returned 0x20
	[0142.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf")) returned 0x20
	[0142.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.832] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15888) returned 1
	[0142.832] CloseHandle (hObject=0x148) returned 1
	[0142.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf")) returned 0x20
	[0142.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf")) returned 0x20
	[0142.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.833] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10852) returned 1
	[0142.833] CloseHandle (hObject=0x148) returned 1
	[0142.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf")) returned 0x20
	[0142.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf")) returned 0x20
	[0142.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.834] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11288) returned 1
	[0142.834] CloseHandle (hObject=0x148) returned 1
	[0142.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf")) returned 0x20
	[0142.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf")) returned 0x20
	[0142.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.838] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6532) returned 1
	[0142.838] CloseHandle (hObject=0x148) returned 1
	[0142.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf")) returned 0x20
	[0142.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf")) returned 0x20
	[0142.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.838] SetEvent (hEvent=0xfc) returned 1
	[0142.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.839] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7964) returned 1
	[0142.839] CloseHandle (hObject=0x148) returned 1
	[0142.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf")) returned 0x20
	[0142.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf")) returned 0x20
	[0142.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.841] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16588) returned 1
	[0142.841] CloseHandle (hObject=0x148) returned 1
	[0142.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf")) returned 0x20
	[0142.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf")) returned 0x20
	[0142.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.842] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11492) returned 1
	[0142.842] CloseHandle (hObject=0x148) returned 1
	[0142.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf")) returned 0x20
	[0142.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf")) returned 0x20
	[0142.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.843] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30336) returned 1
	[0142.843] CloseHandle (hObject=0x148) returned 1
	[0142.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf")) returned 0x20
	[0142.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf")) returned 0x20
	[0142.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.851] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4920) returned 1
	[0142.851] CloseHandle (hObject=0x148) returned 1
	[0142.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf")) returned 0x20
	[0142.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf")) returned 0x20
	[0142.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.852] SetEvent (hEvent=0xfc) returned 1
	[0142.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.852] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8000) returned 1
	[0142.852] CloseHandle (hObject=0x148) returned 1
	[0142.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf")) returned 0x20
	[0142.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf")) returned 0x20
	[0142.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.853] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16468) returned 1
	[0142.853] CloseHandle (hObject=0x148) returned 1
	[0142.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf")) returned 0x20
	[0142.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf")) returned 0x20
	[0142.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.863] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6860) returned 1
	[0142.863] CloseHandle (hObject=0x148) returned 1
	[0142.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf")) returned 0x20
	[0142.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf")) returned 0x20
	[0142.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.864] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7948) returned 1
	[0142.864] CloseHandle (hObject=0x148) returned 1
	[0142.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf")) returned 0x20
	[0142.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf")) returned 0x20
	[0142.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.864] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6792) returned 1
	[0142.865] CloseHandle (hObject=0x148) returned 1
	[0142.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf")) returned 0x20
	[0142.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf")) returned 0x20
	[0142.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.865] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26768) returned 1
	[0142.865] CloseHandle (hObject=0x148) returned 1
	[0142.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf")) returned 0x20
	[0142.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf")) returned 0x20
	[0142.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.866] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7072) returned 1
	[0142.866] CloseHandle (hObject=0x148) returned 1
	[0142.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf")) returned 0x20
	[0142.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf")) returned 0x20
	[0142.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.867] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4808) returned 1
	[0142.867] CloseHandle (hObject=0x148) returned 1
	[0142.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf")) returned 0x20
	[0142.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf")) returned 0x20
	[0142.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.868] SetEvent (hEvent=0xfc) returned 1
	[0142.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.868] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4636) returned 1
	[0142.868] CloseHandle (hObject=0x148) returned 1
	[0142.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf")) returned 0x20
	[0142.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf")) returned 0x20
	[0142.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.869] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3800) returned 1
	[0142.869] CloseHandle (hObject=0x148) returned 1
	[0142.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf")) returned 0x20
	[0142.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf")) returned 0x20
	[0142.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.870] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8260) returned 1
	[0142.870] CloseHandle (hObject=0x148) returned 1
	[0142.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf")) returned 0x20
	[0142.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf")) returned 0x20
	[0142.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.871] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7016) returned 1
	[0142.871] CloseHandle (hObject=0x148) returned 1
	[0142.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf")) returned 0x20
	[0142.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf")) returned 0x20
	[0142.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.871] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5492) returned 1
	[0142.872] CloseHandle (hObject=0x148) returned 1
	[0142.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf")) returned 0x20
	[0142.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf")) returned 0x20
	[0142.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.873] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3060) returned 1
	[0142.873] CloseHandle (hObject=0x148) returned 1
	[0142.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf")) returned 0x20
	[0142.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf")) returned 0x20
	[0142.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.874] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3140) returned 1
	[0142.874] CloseHandle (hObject=0x148) returned 1
	[0142.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf")) returned 0x20
	[0142.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf")) returned 0x20
	[0142.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.875] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3644) returned 1
	[0142.875] CloseHandle (hObject=0x148) returned 1
	[0142.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf")) returned 0x20
	[0142.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf")) returned 0x20
	[0142.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.881] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5004) returned 1
	[0142.881] CloseHandle (hObject=0x148) returned 1
	[0142.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf")) returned 0x20
	[0142.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf")) returned 0x20
	[0142.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.882] SetEvent (hEvent=0xfc) returned 1
	[0142.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.885] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40231) returned 1
	[0142.885] CloseHandle (hObject=0x148) returned 1
	[0142.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg")) returned 0x20
	[0142.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg")) returned 0x20
	[0142.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.885] SetEvent (hEvent=0xfc) returned 1
	[0142.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.886] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49238) returned 1
	[0142.886] CloseHandle (hObject=0x148) returned 1
	[0142.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg")) returned 0x20
	[0142.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg")) returned 0x20
	[0142.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.887] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21125) returned 1
	[0142.887] CloseHandle (hObject=0x148) returned 1
	[0142.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg")) returned 0x20
	[0142.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg")) returned 0x20
	[0142.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.887] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17867) returned 1
	[0142.887] CloseHandle (hObject=0x148) returned 1
	[0142.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg")) returned 0x20
	[0142.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg")) returned 0x20
	[0142.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.888] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31850) returned 1
	[0142.888] CloseHandle (hObject=0x148) returned 1
	[0142.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg")) returned 0x20
	[0142.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg")) returned 0x20
	[0142.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.896] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36820) returned 1
	[0142.896] CloseHandle (hObject=0x148) returned 1
	[0142.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg")) returned 0x20
	[0142.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg")) returned 0x20
	[0142.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.906] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36792) returned 1
	[0142.907] CloseHandle (hObject=0x148) returned 1
	[0142.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg")) returned 0x20
	[0142.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg")) returned 0x20
	[0142.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.907] SetEvent (hEvent=0xfc) returned 1
	[0142.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.911] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=64802) returned 1
	[0142.911] CloseHandle (hObject=0x148) returned 1
	[0142.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg")) returned 0x20
	[0142.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg")) returned 0x20
	[0142.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.911] SetEvent (hEvent=0xfc) returned 1
	[0142.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.912] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15464) returned 1
	[0142.912] CloseHandle (hObject=0x148) returned 1
	[0142.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf")) returned 0x20
	[0142.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf")) returned 0x20
	[0142.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.913] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18500) returned 1
	[0142.913] CloseHandle (hObject=0x148) returned 1
	[0142.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf")) returned 0x20
	[0142.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf")) returned 0x20
	[0142.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.915] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14632) returned 1
	[0142.915] CloseHandle (hObject=0x148) returned 1
	[0142.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf")) returned 0x20
	[0142.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf")) returned 0x20
	[0142.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.916] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6752) returned 1
	[0142.916] CloseHandle (hObject=0x148) returned 1
	[0142.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf")) returned 0x20
	[0142.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf")) returned 0x20
	[0142.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.917] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10632) returned 1
	[0142.917] CloseHandle (hObject=0x148) returned 1
	[0142.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf")) returned 0x20
	[0142.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf")) returned 0x20
	[0142.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.918] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13204) returned 1
	[0142.918] CloseHandle (hObject=0x148) returned 1
	[0142.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf")) returned 0x20
	[0142.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf")) returned 0x20
	[0142.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.919] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13336) returned 1
	[0142.919] CloseHandle (hObject=0x148) returned 1
	[0142.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf")) returned 0x20
	[0142.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf")) returned 0x20
	[0142.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.923] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0142.923] CloseHandle (hObject=0x148) returned 1
	[0142.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf")) returned 0x20
	[0142.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf")) returned 0x20
	[0142.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.924] SetEvent (hEvent=0xfc) returned 1
	[0142.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.924] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16492) returned 1
	[0142.924] CloseHandle (hObject=0x148) returned 1
	[0142.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf")) returned 0x20
	[0142.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf")) returned 0x20
	[0142.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.925] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11340) returned 1
	[0142.925] CloseHandle (hObject=0x148) returned 1
	[0142.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf")) returned 0x20
	[0142.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf")) returned 0x20
	[0142.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.926] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16432) returned 1
	[0142.926] CloseHandle (hObject=0x148) returned 1
	[0142.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf")) returned 0x20
	[0142.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf")) returned 0x20
	[0142.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.926] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16052) returned 1
	[0142.926] CloseHandle (hObject=0x148) returned 1
	[0142.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf")) returned 0x20
	[0142.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf")) returned 0x20
	[0142.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.927] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10880) returned 1
	[0142.927] CloseHandle (hObject=0x148) returned 1
	[0142.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf")) returned 0x20
	[0142.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf")) returned 0x20
	[0142.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.930] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3696) returned 1
	[0142.930] CloseHandle (hObject=0x148) returned 1
	[0142.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf")) returned 0x20
	[0142.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf")) returned 0x20
	[0142.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.931] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10932) returned 1
	[0142.931] CloseHandle (hObject=0x148) returned 1
	[0142.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf")) returned 0x20
	[0142.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf")) returned 0x20
	[0142.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.932] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6340) returned 1
	[0142.932] CloseHandle (hObject=0x148) returned 1
	[0142.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf")) returned 0x20
	[0142.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf")) returned 0x20
	[0142.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.932] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9768) returned 1
	[0142.932] CloseHandle (hObject=0x148) returned 1
	[0142.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf")) returned 0x20
	[0142.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf")) returned 0x20
	[0142.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.933] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6276) returned 1
	[0142.933] CloseHandle (hObject=0x148) returned 1
	[0142.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf")) returned 0x20
	[0142.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf")) returned 0x20
	[0142.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.935] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16632) returned 1
	[0142.935] CloseHandle (hObject=0x148) returned 1
	[0142.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf")) returned 0x20
	[0142.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf")) returned 0x20
	[0142.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.935] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12436) returned 1
	[0142.935] CloseHandle (hObject=0x148) returned 1
	[0142.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf")) returned 0x20
	[0142.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf")) returned 0x20
	[0142.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.936] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5960) returned 1
	[0142.936] CloseHandle (hObject=0x148) returned 1
	[0142.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf")) returned 0x20
	[0142.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf")) returned 0x20
	[0142.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.938] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9604) returned 1
	[0142.938] CloseHandle (hObject=0x148) returned 1
	[0142.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf")) returned 0x20
	[0142.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf")) returned 0x20
	[0142.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.938] SetEvent (hEvent=0xfc) returned 1
	[0142.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.938] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26248) returned 1
	[0142.938] CloseHandle (hObject=0x148) returned 1
	[0142.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf")) returned 0x20
	[0142.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf")) returned 0x20
	[0142.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.939] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30812) returned 1
	[0142.939] CloseHandle (hObject=0x148) returned 1
	[0142.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf")) returned 0x20
	[0142.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf")) returned 0x20
	[0142.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.940] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=34676) returned 1
	[0142.940] CloseHandle (hObject=0x148) returned 1
	[0142.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf")) returned 0x20
	[0142.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf")) returned 0x20
	[0142.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.941] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1268) returned 1
	[0142.941] CloseHandle (hObject=0x148) returned 1
	[0142.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf")) returned 0x20
	[0142.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf")) returned 0x20
	[0142.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.942] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1348) returned 1
	[0142.942] CloseHandle (hObject=0x148) returned 1
	[0142.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf")) returned 0x20
	[0142.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf")) returned 0x20
	[0142.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.945] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7320) returned 1
	[0142.945] CloseHandle (hObject=0x148) returned 1
	[0142.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf")) returned 0x20
	[0142.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf")) returned 0x20
	[0142.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.946] SetEvent (hEvent=0xfc) returned 1
	[0142.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.946] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1652) returned 1
	[0142.946] CloseHandle (hObject=0x148) returned 1
	[0142.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf")) returned 0x20
	[0142.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf")) returned 0x20
	[0142.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.947] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4908) returned 1
	[0142.947] CloseHandle (hObject=0x148) returned 1
	[0142.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf")) returned 0x20
	[0142.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf")) returned 0x20
	[0142.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.948] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4580) returned 1
	[0142.948] CloseHandle (hObject=0x148) returned 1
	[0142.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf")) returned 0x20
	[0142.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf")) returned 0x20
	[0142.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.948] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7020) returned 1
	[0142.948] CloseHandle (hObject=0x148) returned 1
	[0142.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf")) returned 0x20
	[0142.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf")) returned 0x20
	[0142.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.954] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7876) returned 1
	[0142.954] CloseHandle (hObject=0x148) returned 1
	[0142.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf")) returned 0x20
	[0142.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf")) returned 0x20
	[0142.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.954] SetEvent (hEvent=0xfc) returned 1
	[0142.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.955] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10668) returned 1
	[0142.955] CloseHandle (hObject=0x148) returned 1
	[0142.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf")) returned 0x20
	[0142.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf")) returned 0x20
	[0142.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.955] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11348) returned 1
	[0142.955] CloseHandle (hObject=0x148) returned 1
	[0142.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf")) returned 0x20
	[0142.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf")) returned 0x20
	[0142.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.956] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4496) returned 1
	[0142.956] CloseHandle (hObject=0x148) returned 1
	[0142.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf")) returned 0x20
	[0142.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf")) returned 0x20
	[0142.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.978] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33068) returned 1
	[0142.978] CloseHandle (hObject=0x148) returned 1
	[0142.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf")) returned 0x20
	[0142.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf")) returned 0x20
	[0142.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.978] SetEvent (hEvent=0xfc) returned 1
	[0142.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.984] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46702) returned 1
	[0142.984] CloseHandle (hObject=0x148) returned 1
	[0142.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf")) returned 0x20
	[0142.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf")) returned 0x20
	[0142.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0142.991] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29406) returned 1
	[0142.991] CloseHandle (hObject=0x148) returned 1
	[0142.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf")) returned 0x20
	[0142.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf")) returned 0x20
	[0142.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0142.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0142.991] SetEvent (hEvent=0xfc) returned 1
	[0142.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.000] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12696) returned 1
	[0143.000] CloseHandle (hObject=0x148) returned 1
	[0143.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf")) returned 0x20
	[0143.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf")) returned 0x20
	[0143.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.000] SetEvent (hEvent=0xfc) returned 1
	[0143.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.007] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=55554) returned 1
	[0143.008] CloseHandle (hObject=0x148) returned 1
	[0143.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg")) returned 0x20
	[0143.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg")) returned 0x20
	[0143.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.008] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32110) returned 1
	[0143.008] CloseHandle (hObject=0x148) returned 1
	[0143.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg")) returned 0x20
	[0143.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg")) returned 0x20
	[0143.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.017] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16615) returned 1
	[0143.017] CloseHandle (hObject=0x148) returned 1
	[0143.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg")) returned 0x20
	[0143.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg")) returned 0x20
	[0143.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.017] SetEvent (hEvent=0xfc) returned 1
	[0143.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.017] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28626) returned 1
	[0143.017] CloseHandle (hObject=0x148) returned 1
	[0143.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf")) returned 0x20
	[0143.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf")) returned 0x20
	[0143.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.018] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24430) returned 1
	[0143.018] CloseHandle (hObject=0x148) returned 1
	[0143.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf")) returned 0x20
	[0143.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf")) returned 0x20
	[0143.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.024] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19274) returned 1
	[0143.024] CloseHandle (hObject=0x148) returned 1
	[0143.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf")) returned 0x20
	[0143.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf")) returned 0x20
	[0143.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.024] SetEvent (hEvent=0xfc) returned 1
	[0143.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.025] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27096) returned 1
	[0143.025] CloseHandle (hObject=0x148) returned 1
	[0143.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf")) returned 0x20
	[0143.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf")) returned 0x20
	[0143.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.036] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25312) returned 1
	[0143.036] CloseHandle (hObject=0x148) returned 1
	[0143.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf")) returned 0x20
	[0143.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf")) returned 0x20
	[0143.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.038] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14308) returned 1
	[0143.038] CloseHandle (hObject=0x148) returned 1
	[0143.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf")) returned 0x20
	[0143.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf")) returned 0x20
	[0143.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.038] SetEvent (hEvent=0xfc) returned 1
	[0143.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.038] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8666) returned 1
	[0143.038] CloseHandle (hObject=0x148) returned 1
	[0143.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf")) returned 0x20
	[0143.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf")) returned 0x20
	[0143.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.039] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33850) returned 1
	[0143.039] CloseHandle (hObject=0x148) returned 1
	[0143.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf")) returned 0x20
	[0143.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf")) returned 0x20
	[0143.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.040] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17662) returned 1
	[0143.040] CloseHandle (hObject=0x148) returned 1
	[0143.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf")) returned 0x20
	[0143.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf")) returned 0x20
	[0143.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.041] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18212) returned 1
	[0143.041] CloseHandle (hObject=0x148) returned 1
	[0143.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf")) returned 0x20
	[0143.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf")) returned 0x20
	[0143.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.050] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6596) returned 1
	[0143.050] CloseHandle (hObject=0x148) returned 1
	[0143.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf")) returned 0x20
	[0143.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf")) returned 0x20
	[0143.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.051] SetEvent (hEvent=0xfc) returned 1
	[0143.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.051] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5372) returned 1
	[0143.051] CloseHandle (hObject=0x148) returned 1
	[0143.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf")) returned 0x20
	[0143.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf")) returned 0x20
	[0143.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.052] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7116) returned 1
	[0143.052] CloseHandle (hObject=0x148) returned 1
	[0143.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf")) returned 0x20
	[0143.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf")) returned 0x20
	[0143.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.064] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7572) returned 1
	[0143.064] CloseHandle (hObject=0x148) returned 1
	[0143.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf")) returned 0x20
	[0143.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf")) returned 0x20
	[0143.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.064] SetEvent (hEvent=0xfc) returned 1
	[0143.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.064] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12292) returned 1
	[0143.064] CloseHandle (hObject=0x148) returned 1
	[0143.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf")) returned 0x20
	[0143.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf")) returned 0x20
	[0143.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.065] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5824) returned 1
	[0143.065] CloseHandle (hObject=0x148) returned 1
	[0143.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf")) returned 0x20
	[0143.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf")) returned 0x20
	[0143.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.066] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15196) returned 1
	[0143.066] CloseHandle (hObject=0x148) returned 1
	[0143.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf")) returned 0x20
	[0143.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf")) returned 0x20
	[0143.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.067] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16030) returned 1
	[0143.067] CloseHandle (hObject=0x148) returned 1
	[0143.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf")) returned 0x20
	[0143.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf")) returned 0x20
	[0143.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.075] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29602) returned 1
	[0143.075] CloseHandle (hObject=0x148) returned 1
	[0143.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf")) returned 0x20
	[0143.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf")) returned 0x20
	[0143.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.075] SetEvent (hEvent=0xfc) returned 1
	[0143.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.076] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21328) returned 1
	[0143.076] CloseHandle (hObject=0x148) returned 1
	[0143.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf")) returned 0x20
	[0143.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf")) returned 0x20
	[0143.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.077] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18622) returned 1
	[0143.077] CloseHandle (hObject=0x148) returned 1
	[0143.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf")) returned 0x20
	[0143.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf")) returned 0x20
	[0143.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.083] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3680) returned 1
	[0143.083] CloseHandle (hObject=0x148) returned 1
	[0143.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf")) returned 0x20
	[0143.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf")) returned 0x20
	[0143.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.084] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3826) returned 1
	[0143.084] CloseHandle (hObject=0x148) returned 1
	[0143.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf")) returned 0x20
	[0143.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf")) returned 0x20
	[0143.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.085] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13702) returned 1
	[0143.085] CloseHandle (hObject=0x148) returned 1
	[0143.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf")) returned 0x20
	[0143.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf")) returned 0x20
	[0143.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.086] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6912) returned 1
	[0143.086] CloseHandle (hObject=0x148) returned 1
	[0143.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf")) returned 0x20
	[0143.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf")) returned 0x20
	[0143.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.087] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5708) returned 1
	[0143.087] CloseHandle (hObject=0x148) returned 1
	[0143.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf")) returned 0x20
	[0143.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf")) returned 0x20
	[0143.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.087] SetEvent (hEvent=0xfc) returned 1
	[0143.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.088] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40230) returned 1
	[0143.088] CloseHandle (hObject=0x148) returned 1
	[0143.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf")) returned 0x20
	[0143.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf")) returned 0x20
	[0143.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.096] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26252) returned 1
	[0143.096] CloseHandle (hObject=0x148) returned 1
	[0143.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf")) returned 0x20
	[0143.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf")) returned 0x20
	[0143.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.096] SetEvent (hEvent=0xfc) returned 1
	[0143.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.104] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26148) returned 1
	[0143.104] CloseHandle (hObject=0x148) returned 1
	[0143.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf")) returned 0x20
	[0143.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf")) returned 0x20
	[0143.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.104] SetEvent (hEvent=0xfc) returned 1
	[0143.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.110] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49676) returned 1
	[0143.110] CloseHandle (hObject=0x148) returned 1
	[0143.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf")) returned 0x20
	[0143.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf")) returned 0x20
	[0143.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.110] SetEvent (hEvent=0xfc) returned 1
	[0143.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.111] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50046) returned 1
	[0143.111] CloseHandle (hObject=0x148) returned 1
	[0143.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf")) returned 0x20
	[0143.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf")) returned 0x20
	[0143.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.112] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26154) returned 1
	[0143.112] CloseHandle (hObject=0x148) returned 1
	[0143.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf")) returned 0x20
	[0143.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf")) returned 0x20
	[0143.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199423.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.112] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16676) returned 1
	[0143.112] CloseHandle (hObject=0x148) returned 1
	[0143.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf")) returned 0x20
	[0143.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf")) returned 0x20
	[0143.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199429.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.113] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5060) returned 1
	[0143.113] CloseHandle (hObject=0x148) returned 1
	[0143.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf")) returned 0x20
	[0143.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf")) returned 0x20
	[0143.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199465.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.119] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13756) returned 1
	[0143.119] CloseHandle (hObject=0x148) returned 1
	[0143.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf")) returned 0x20
	[0143.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf")) returned 0x20
	[0143.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0199469.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.127] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7180) returned 1
	[0143.127] CloseHandle (hObject=0x148) returned 1
	[0143.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf")) returned 0x20
	[0143.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf")) returned 0x20
	[0143.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.128] SetEvent (hEvent=0xfc) returned 1
	[0143.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.128] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13934) returned 1
	[0143.128] CloseHandle (hObject=0x148) returned 1
	[0143.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf")) returned 0x20
	[0143.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf")) returned 0x20
	[0143.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200467.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.129] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10046) returned 1
	[0143.129] CloseHandle (hObject=0x148) returned 1
	[0143.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf")) returned 0x20
	[0143.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf")) returned 0x20
	[0143.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.130] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3894) returned 1
	[0143.130] CloseHandle (hObject=0x148) returned 1
	[0143.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf")) returned 0x20
	[0143.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf")) returned 0x20
	[0143.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.130] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42254) returned 1
	[0143.130] CloseHandle (hObject=0x148) returned 1
	[0143.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg")) returned 0x20
	[0143.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg")) returned 0x20
	[0143.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.131] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28276) returned 1
	[0143.131] CloseHandle (hObject=0x148) returned 1
	[0143.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf")) returned 0x20
	[0143.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf")) returned 0x20
	[0143.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.147] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6158) returned 1
	[0143.147] CloseHandle (hObject=0x148) returned 1
	[0143.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf")) returned 0x20
	[0143.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf")) returned 0x20
	[0143.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.148] SetEvent (hEvent=0xfc) returned 1
	[0143.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215710.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.148] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17826) returned 1
	[0143.148] CloseHandle (hObject=0x148) returned 1
	[0143.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215710.wmf")) returned 0x20
	[0143.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215710.wmf")) returned 0x20
	[0143.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215710.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215718.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.149] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5618) returned 1
	[0143.149] CloseHandle (hObject=0x148) returned 1
	[0143.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215718.wmf")) returned 0x20
	[0143.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215718.wmf")) returned 0x20
	[0143.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215718.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0215718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.150] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42883) returned 1
	[0143.150] CloseHandle (hObject=0x148) returned 1
	[0143.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg")) returned 0x20
	[0143.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg")) returned 0x20
	[0143.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.155] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21620) returned 1
	[0143.155] CloseHandle (hObject=0x148) returned 1
	[0143.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg")) returned 0x20
	[0143.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg")) returned 0x20
	[0143.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.155] SetEvent (hEvent=0xfc) returned 1
	[0143.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216874.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.160] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39738) returned 1
	[0143.160] CloseHandle (hObject=0x148) returned 1
	[0143.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216874.wmf")) returned 0x20
	[0143.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216874.wmf")) returned 0x20
	[0143.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216874.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0216874.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.162] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=58089) returned 1
	[0143.162] CloseHandle (hObject=0x148) returned 1
	[0143.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg")) returned 0x20
	[0143.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg")) returned 0x20
	[0143.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228823.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.163] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26022) returned 1
	[0143.163] CloseHandle (hObject=0x148) returned 1
	[0143.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228823.wmf")) returned 0x20
	[0143.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228823.wmf")) returned 0x20
	[0143.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228823.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228823.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228959.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.163] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37260) returned 1
	[0143.163] CloseHandle (hObject=0x148) returned 1
	[0143.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228959.wmf")) returned 0x20
	[0143.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228959.wmf")) returned 0x20
	[0143.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228959.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0228959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230553.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.165] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7594) returned 1
	[0143.165] CloseHandle (hObject=0x148) returned 1
	[0143.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230553.wmf")) returned 0x20
	[0143.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230553.wmf")) returned 0x20
	[0143.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230553.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230553.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.165] SetEvent (hEvent=0xfc) returned 1
	[0143.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230558.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.166] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4198) returned 1
	[0143.166] CloseHandle (hObject=0x148) returned 1
	[0143.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230558.wmf")) returned 0x20
	[0143.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230558.wmf")) returned 0x20
	[0143.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230558.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0230558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232171.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.166] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13098) returned 1
	[0143.166] CloseHandle (hObject=0x148) returned 1
	[0143.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232171.wmf")) returned 0x20
	[0143.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232171.wmf")) returned 0x20
	[0143.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232171.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232393.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.167] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27586) returned 1
	[0143.167] CloseHandle (hObject=0x148) returned 1
	[0143.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232393.wmf")) returned 0x20
	[0143.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232393.wmf")) returned 0x20
	[0143.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232393.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232393.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232395.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.169] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41094) returned 1
	[0143.169] CloseHandle (hObject=0x148) returned 1
	[0143.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232395.wmf")) returned 0x20
	[0143.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232395.wmf")) returned 0x20
	[0143.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232395.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232395.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232795.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.169] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14346) returned 1
	[0143.170] CloseHandle (hObject=0x148) returned 1
	[0143.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232795.wmf")) returned 0x20
	[0143.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232795.wmf")) returned 0x20
	[0143.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232795.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232795.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.170] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35228) returned 1
	[0143.170] CloseHandle (hObject=0x148) returned 1
	[0143.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf")) returned 0x20
	[0143.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf")) returned 0x20
	[0143.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232803.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.171] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19942) returned 1
	[0143.171] CloseHandle (hObject=0x148) returned 1
	[0143.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232803.wmf")) returned 0x20
	[0143.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232803.wmf")) returned 0x20
	[0143.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232803.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0232803.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.172] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9960) returned 1
	[0143.172] CloseHandle (hObject=0x148) returned 1
	[0143.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf")) returned 0x20
	[0143.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf")) returned 0x20
	[0143.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.177] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12588) returned 1
	[0143.177] CloseHandle (hObject=0x148) returned 1
	[0143.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf")) returned 0x20
	[0143.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf")) returned 0x20
	[0143.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.178] SetEvent (hEvent=0xfc) returned 1
	[0143.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237225.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.178] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52128) returned 1
	[0143.178] CloseHandle (hObject=0x148) returned 1
	[0143.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237225.wmf")) returned 0x20
	[0143.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237225.wmf")) returned 0x20
	[0143.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237225.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237225.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237228.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.179] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22272) returned 1
	[0143.179] CloseHandle (hObject=0x148) returned 1
	[0143.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237228.wmf")) returned 0x20
	[0143.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237228.wmf")) returned 0x20
	[0143.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237228.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237228.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237336.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.180] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24770) returned 1
	[0143.180] CloseHandle (hObject=0x148) returned 1
	[0143.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237336.wmf")) returned 0x20
	[0143.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237336.wmf")) returned 0x20
	[0143.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237336.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.180] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20926) returned 1
	[0143.180] CloseHandle (hObject=0x148) returned 1
	[0143.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf")) returned 0x20
	[0143.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf")) returned 0x20
	[0143.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.181] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22944) returned 1
	[0143.181] CloseHandle (hObject=0x148) returned 1
	[0143.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf")) returned 0x20
	[0143.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf")) returned 0x20
	[0143.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.182] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4916) returned 1
	[0143.182] CloseHandle (hObject=0x148) returned 1
	[0143.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf")) returned 0x20
	[0143.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf")) returned 0x20
	[0143.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.183] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7484) returned 1
	[0143.183] CloseHandle (hObject=0x148) returned 1
	[0143.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf")) returned 0x20
	[0143.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf")) returned 0x20
	[0143.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.184] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5048) returned 1
	[0143.184] CloseHandle (hObject=0x148) returned 1
	[0143.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf")) returned 0x20
	[0143.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf")) returned 0x20
	[0143.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.185] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4740) returned 1
	[0143.185] CloseHandle (hObject=0x148) returned 1
	[0143.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf")) returned 0x20
	[0143.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf")) returned 0x20
	[0143.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.186] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5884) returned 1
	[0143.186] CloseHandle (hObject=0x148) returned 1
	[0143.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf")) returned 0x20
	[0143.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf")) returned 0x20
	[0143.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.186] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4756) returned 1
	[0143.186] CloseHandle (hObject=0x148) returned 1
	[0143.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf")) returned 0x20
	[0143.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf")) returned 0x20
	[0143.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.189] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5220) returned 1
	[0143.189] CloseHandle (hObject=0x148) returned 1
	[0143.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf")) returned 0x20
	[0143.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf")) returned 0x20
	[0143.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.190] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33828) returned 1
	[0143.190] CloseHandle (hObject=0x148) returned 1
	[0143.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf")) returned 0x20
	[0143.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf")) returned 0x20
	[0143.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.199] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4884) returned 1
	[0143.199] CloseHandle (hObject=0x148) returned 1
	[0143.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf")) returned 0x20
	[0143.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf")) returned 0x20
	[0143.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.200] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5920) returned 1
	[0143.200] CloseHandle (hObject=0x148) returned 1
	[0143.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf")) returned 0x20
	[0143.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf")) returned 0x20
	[0143.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.201] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5452) returned 1
	[0143.201] CloseHandle (hObject=0x148) returned 1
	[0143.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf")) returned 0x20
	[0143.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf")) returned 0x20
	[0143.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.201] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5096) returned 1
	[0143.202] CloseHandle (hObject=0x148) returned 1
	[0143.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf")) returned 0x20
	[0143.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf")) returned 0x20
	[0143.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.202] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3488) returned 1
	[0143.202] CloseHandle (hObject=0x148) returned 1
	[0143.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf")) returned 0x20
	[0143.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf")) returned 0x20
	[0143.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.203] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3288) returned 1
	[0143.203] CloseHandle (hObject=0x148) returned 1
	[0143.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf")) returned 0x20
	[0143.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf")) returned 0x20
	[0143.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.204] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7672) returned 1
	[0143.204] CloseHandle (hObject=0x148) returned 1
	[0143.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf")) returned 0x20
	[0143.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf")) returned 0x20
	[0143.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240175.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.205] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42000) returned 1
	[0143.205] CloseHandle (hObject=0x148) returned 1
	[0143.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240175.wmf")) returned 0x20
	[0143.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240175.wmf")) returned 0x20
	[0143.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240175.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240189.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.206] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3524) returned 1
	[0143.206] CloseHandle (hObject=0x148) returned 1
	[0143.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240189.wmf")) returned 0x20
	[0143.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240189.wmf")) returned 0x20
	[0143.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240189.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240291.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.207] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5238) returned 1
	[0143.207] CloseHandle (hObject=0x148) returned 1
	[0143.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240291.wmf")) returned 0x20
	[0143.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240291.wmf")) returned 0x20
	[0143.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240291.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0240291.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241019.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.208] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2350) returned 1
	[0143.208] CloseHandle (hObject=0x148) returned 1
	[0143.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241019.wmf")) returned 0x20
	[0143.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241019.wmf")) returned 0x20
	[0143.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241019.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.209] SetEvent (hEvent=0xfc) returned 1
	[0143.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241037.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.209] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2638) returned 1
	[0143.209] CloseHandle (hObject=0x148) returned 1
	[0143.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241037.wmf")) returned 0x20
	[0143.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241037.wmf")) returned 0x20
	[0143.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241037.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241037.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241041.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.210] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2342) returned 1
	[0143.210] CloseHandle (hObject=0x148) returned 1
	[0143.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241041.wmf")) returned 0x20
	[0143.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241041.wmf")) returned 0x20
	[0143.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241041.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241043.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.211] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2738) returned 1
	[0143.211] CloseHandle (hObject=0x148) returned 1
	[0143.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241043.wmf")) returned 0x20
	[0143.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241043.wmf")) returned 0x20
	[0143.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241043.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241043.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241077.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.212] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2090) returned 1
	[0143.212] CloseHandle (hObject=0x148) returned 1
	[0143.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241077.wmf")) returned 0x20
	[0143.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241077.wmf")) returned 0x20
	[0143.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241077.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241077.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241773.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.218] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3262) returned 1
	[0143.218] CloseHandle (hObject=0x148) returned 1
	[0143.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241773.wmf")) returned 0x20
	[0143.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241773.wmf")) returned 0x20
	[0143.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241773.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0241773.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252629.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.219] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2786) returned 1
	[0143.219] CloseHandle (hObject=0x148) returned 1
	[0143.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252629.wmf")) returned 0x20
	[0143.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252629.wmf")) returned 0x20
	[0143.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252629.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252629.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.220] SetEvent (hEvent=0xfc) returned 1
	[0143.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252669.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.220] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3926) returned 1
	[0143.221] CloseHandle (hObject=0x148) returned 1
	[0143.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252669.wmf")) returned 0x20
	[0143.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252669.wmf")) returned 0x20
	[0143.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252669.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0252669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0278702.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.221] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3946) returned 1
	[0143.221] CloseHandle (hObject=0x148) returned 1
	[0143.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0278702.wmf")) returned 0x20
	[0143.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0278702.wmf")) returned 0x20
	[0143.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0278702.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0278702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0279644.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.227] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17200) returned 1
	[0143.227] CloseHandle (hObject=0x148) returned 1
	[0143.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0279644.wmf")) returned 0x20
	[0143.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0279644.wmf")) returned 0x20
	[0143.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0279644.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0279644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.227] SetEvent (hEvent=0xfc) returned 1
	[0143.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281632.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.227] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14420) returned 1
	[0143.227] CloseHandle (hObject=0x148) returned 1
	[0143.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281632.wmf")) returned 0x20
	[0143.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281632.wmf")) returned 0x20
	[0143.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281632.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281632.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281638.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.228] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11912) returned 1
	[0143.228] CloseHandle (hObject=0x148) returned 1
	[0143.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281638.wmf")) returned 0x20
	[0143.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281638.wmf")) returned 0x20
	[0143.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281638.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281640.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.229] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12530) returned 1
	[0143.229] CloseHandle (hObject=0x148) returned 1
	[0143.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281640.wmf")) returned 0x20
	[0143.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281640.wmf")) returned 0x20
	[0143.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281640.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0281640.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282126.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.230] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15518) returned 1
	[0143.230] CloseHandle (hObject=0x148) returned 1
	[0143.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282126.wmf")) returned 0x20
	[0143.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282126.wmf")) returned 0x20
	[0143.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282126.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282126.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282928.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.234] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33126) returned 1
	[0143.234] CloseHandle (hObject=0x148) returned 1
	[0143.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282928.wmf")) returned 0x20
	[0143.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282928.wmf")) returned 0x20
	[0143.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282928.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0282928.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.235] SetEvent (hEvent=0xfc) returned 1
	[0143.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285484.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.235] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9280) returned 1
	[0143.235] CloseHandle (hObject=0x148) returned 1
	[0143.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285484.wmf")) returned 0x20
	[0143.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285484.wmf")) returned 0x20
	[0143.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285484.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285780.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.236] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31068) returned 1
	[0143.236] CloseHandle (hObject=0x148) returned 1
	[0143.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285780.wmf")) returned 0x20
	[0143.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285780.wmf")) returned 0x20
	[0143.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285780.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285782.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.240] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21054) returned 1
	[0143.240] CloseHandle (hObject=0x148) returned 1
	[0143.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285782.wmf")) returned 0x20
	[0143.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285782.wmf")) returned 0x20
	[0143.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285782.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285782.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.241] SetEvent (hEvent=0xfc) returned 1
	[0143.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285820.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.241] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8720) returned 1
	[0143.241] CloseHandle (hObject=0x148) returned 1
	[0143.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285820.wmf")) returned 0x20
	[0143.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285820.wmf")) returned 0x20
	[0143.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285820.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285820.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285822.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.251] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8608) returned 1
	[0143.251] CloseHandle (hObject=0x148) returned 1
	[0143.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285822.wmf")) returned 0x20
	[0143.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285822.wmf")) returned 0x20
	[0143.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285822.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0285822.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.254] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17105) returned 1
	[0143.254] CloseHandle (hObject=0x148) returned 1
	[0143.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg")) returned 0x20
	[0143.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg")) returned 0x20
	[0143.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.255] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16017) returned 1
	[0143.255] CloseHandle (hObject=0x148) returned 1
	[0143.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg")) returned 0x20
	[0143.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg")) returned 0x20
	[0143.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.256] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17349) returned 1
	[0143.256] CloseHandle (hObject=0x148) returned 1
	[0143.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg")) returned 0x20
	[0143.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg")) returned 0x20
	[0143.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.266] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36230) returned 1
	[0143.266] CloseHandle (hObject=0x148) returned 1
	[0143.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg")) returned 0x20
	[0143.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg")) returned 0x20
	[0143.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292286.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.267] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19286) returned 1
	[0143.267] CloseHandle (hObject=0x148) returned 1
	[0143.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292286.wmf")) returned 0x20
	[0143.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292286.wmf")) returned 0x20
	[0143.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292286.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0292286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293800.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.268] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4774) returned 1
	[0143.268] CloseHandle (hObject=0x148) returned 1
	[0143.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293800.wmf")) returned 0x20
	[0143.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293800.wmf")) returned 0x20
	[0143.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293800.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.271] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6078) returned 1
	[0143.271] CloseHandle (hObject=0x148) returned 1
	[0143.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf")) returned 0x20
	[0143.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf")) returned 0x20
	[0143.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.271] SetEvent (hEvent=0xfc) returned 1
	[0143.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.271] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24960) returned 1
	[0143.271] CloseHandle (hObject=0x148) returned 1
	[0143.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf")) returned 0x20
	[0143.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf")) returned 0x20
	[0143.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.275] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8626) returned 1
	[0143.275] CloseHandle (hObject=0x148) returned 1
	[0143.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf")) returned 0x20
	[0143.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf")) returned 0x20
	[0143.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.276] SetEvent (hEvent=0xfc) returned 1
	[0143.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296288.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.276] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67564) returned 1
	[0143.276] CloseHandle (hObject=0x148) returned 1
	[0143.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296288.wmf")) returned 0x20
	[0143.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296288.wmf")) returned 0x20
	[0143.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296288.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0296288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297229.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.277] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22990) returned 1
	[0143.277] CloseHandle (hObject=0x148) returned 1
	[0143.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297229.wmf")) returned 0x20
	[0143.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297229.wmf")) returned 0x20
	[0143.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297229.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297229.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297269.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.278] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15652) returned 1
	[0143.278] CloseHandle (hObject=0x148) returned 1
	[0143.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297269.wmf")) returned 0x20
	[0143.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297269.wmf")) returned 0x20
	[0143.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297269.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297269.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297725.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.282] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16950) returned 1
	[0143.282] CloseHandle (hObject=0x148) returned 1
	[0143.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297725.wmf")) returned 0x20
	[0143.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297725.wmf")) returned 0x20
	[0143.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297725.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297725.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.282] SetEvent (hEvent=0xfc) returned 1
	[0143.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297759.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.283] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18784) returned 1
	[0143.283] CloseHandle (hObject=0x148) returned 1
	[0143.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297759.wmf")) returned 0x20
	[0143.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297759.wmf")) returned 0x20
	[0143.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297759.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0297759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0300862.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.287] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17796) returned 1
	[0143.287] CloseHandle (hObject=0x148) returned 1
	[0143.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0300862.wmf")) returned 0x20
	[0143.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0300862.wmf")) returned 0x20
	[0143.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0300862.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0300862.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.288] SetEvent (hEvent=0xfc) returned 1
	[0143.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301432.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.288] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19962) returned 1
	[0143.288] CloseHandle (hObject=0x148) returned 1
	[0143.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301432.wmf")) returned 0x20
	[0143.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301432.wmf")) returned 0x20
	[0143.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301432.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0301432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304371.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.289] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3616) returned 1
	[0143.289] CloseHandle (hObject=0x148) returned 1
	[0143.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304371.wmf")) returned 0x20
	[0143.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304371.wmf")) returned 0x20
	[0143.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304371.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304371.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304405.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.290] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4158) returned 1
	[0143.290] CloseHandle (hObject=0x148) returned 1
	[0143.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304405.wmf")) returned 0x20
	[0143.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304405.wmf")) returned 0x20
	[0143.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304405.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304405.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304853.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.291] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18958) returned 1
	[0143.291] CloseHandle (hObject=0x148) returned 1
	[0143.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304853.wmf")) returned 0x20
	[0143.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304853.wmf")) returned 0x20
	[0143.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304853.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304853.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304861.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.294] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11512) returned 1
	[0143.294] CloseHandle (hObject=0x148) returned 1
	[0143.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304861.wmf")) returned 0x20
	[0143.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304861.wmf")) returned 0x20
	[0143.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304861.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0304861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.295] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10692) returned 1
	[0143.295] CloseHandle (hObject=0x148) returned 1
	[0143.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg")) returned 0x20
	[0143.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg")) returned 0x20
	[0143.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.296] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21580) returned 1
	[0143.297] CloseHandle (hObject=0x148) returned 1
	[0143.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg")) returned 0x20
	[0143.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg")) returned 0x20
	[0143.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.297] SetEvent (hEvent=0xfc) returned 1
	[0143.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.297] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39563) returned 1
	[0143.297] CloseHandle (hObject=0x148) returned 1
	[0143.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg")) returned 0x20
	[0143.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg")) returned 0x20
	[0143.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.298] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33264) returned 1
	[0143.298] CloseHandle (hObject=0x148) returned 1
	[0143.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg")) returned 0x20
	[0143.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg")) returned 0x20
	[0143.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.310] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43707) returned 1
	[0143.310] CloseHandle (hObject=0x148) returned 1
	[0143.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg")) returned 0x20
	[0143.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg")) returned 0x20
	[0143.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.311] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19202) returned 1
	[0143.311] CloseHandle (hObject=0x148) returned 1
	[0143.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg")) returned 0x20
	[0143.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg")) returned 0x20
	[0143.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.311] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16954) returned 1
	[0143.311] CloseHandle (hObject=0x148) returned 1
	[0143.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg")) returned 0x20
	[0143.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg")) returned 0x20
	[0143.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318448.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.315] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16768) returned 1
	[0143.315] CloseHandle (hObject=0x148) returned 1
	[0143.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318448.wmf")) returned 0x20
	[0143.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318448.wmf")) returned 0x20
	[0143.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318448.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318448.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.315] SetEvent (hEvent=0xfc) returned 1
	[0143.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318804.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.316] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11770) returned 1
	[0143.316] CloseHandle (hObject=0x148) returned 1
	[0143.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318804.wmf")) returned 0x20
	[0143.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318804.wmf")) returned 0x20
	[0143.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318804.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318804.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318810.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.316] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10430) returned 1
	[0143.317] CloseHandle (hObject=0x148) returned 1
	[0143.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318810.wmf")) returned 0x20
	[0143.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318810.wmf")) returned 0x20
	[0143.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318810.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0318810.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.322] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9431) returned 1
	[0143.322] CloseHandle (hObject=0x148) returned 1
	[0143.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg")) returned 0x20
	[0143.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg")) returned 0x20
	[0143.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.322] SetEvent (hEvent=0xfc) returned 1
	[0143.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.327] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11485) returned 1
	[0143.327] CloseHandle (hObject=0x148) returned 1
	[0143.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg")) returned 0x20
	[0143.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg")) returned 0x20
	[0143.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.328] SetEvent (hEvent=0xfc) returned 1
	[0143.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.328] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43490) returned 1
	[0143.328] CloseHandle (hObject=0x148) returned 1
	[0143.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg")) returned 0x20
	[0143.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg")) returned 0x20
	[0143.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.329] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16099) returned 1
	[0143.329] CloseHandle (hObject=0x148) returned 1
	[0143.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg")) returned 0x20
	[0143.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg")) returned 0x20
	[0143.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.330] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8074) returned 1
	[0143.330] CloseHandle (hObject=0x148) returned 1
	[0143.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg")) returned 0x20
	[0143.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg")) returned 0x20
	[0143.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.331] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23126) returned 1
	[0143.331] CloseHandle (hObject=0x148) returned 1
	[0143.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg")) returned 0x20
	[0143.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg")) returned 0x20
	[0143.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.349] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28483) returned 1
	[0143.349] CloseHandle (hObject=0x148) returned 1
	[0143.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg")) returned 0x20
	[0143.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg")) returned 0x20
	[0143.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.349] SetEvent (hEvent=0xfc) returned 1
	[0143.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.350] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=109477) returned 1
	[0143.350] CloseHandle (hObject=0x148) returned 1
	[0143.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg")) returned 0x20
	[0143.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg")) returned 0x20
	[0143.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.355] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=91450) returned 1
	[0143.355] CloseHandle (hObject=0x148) returned 1
	[0143.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg")) returned 0x20
	[0143.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg")) returned 0x20
	[0143.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.356] SetEvent (hEvent=0xfc) returned 1
	[0143.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.356] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=96073) returned 1
	[0143.356] CloseHandle (hObject=0x148) returned 1
	[0143.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg")) returned 0x20
	[0143.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg")) returned 0x20
	[0143.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.357] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=88703) returned 1
	[0143.357] CloseHandle (hObject=0x148) returned 1
	[0143.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg")) returned 0x20
	[0143.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg")) returned 0x20
	[0143.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.358] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90095) returned 1
	[0143.358] CloseHandle (hObject=0x148) returned 1
	[0143.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg")) returned 0x20
	[0143.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg")) returned 0x20
	[0143.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.361] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=109037) returned 1
	[0143.361] CloseHandle (hObject=0x148) returned 1
	[0143.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg")) returned 0x20
	[0143.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg")) returned 0x20
	[0143.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.362] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=103399) returned 1
	[0143.362] CloseHandle (hObject=0x148) returned 1
	[0143.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg")) returned 0x20
	[0143.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg")) returned 0x20
	[0143.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.363] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85898) returned 1
	[0143.363] CloseHandle (hObject=0x148) returned 1
	[0143.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg")) returned 0x20
	[0143.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg")) returned 0x20
	[0143.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.377] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=107508) returned 1
	[0143.377] CloseHandle (hObject=0x148) returned 1
	[0143.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg")) returned 0x20
	[0143.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg")) returned 0x20
	[0143.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.378] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=88980) returned 1
	[0143.378] CloseHandle (hObject=0x148) returned 1
	[0143.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg")) returned 0x20
	[0143.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg")) returned 0x20
	[0143.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.379] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=102633) returned 1
	[0143.379] CloseHandle (hObject=0x148) returned 1
	[0143.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg")) returned 0x20
	[0143.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg")) returned 0x20
	[0143.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.379] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=97145) returned 1
	[0143.379] CloseHandle (hObject=0x148) returned 1
	[0143.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg")) returned 0x20
	[0143.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg")) returned 0x20
	[0143.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.380] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=81971) returned 1
	[0143.380] CloseHandle (hObject=0x148) returned 1
	[0143.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg")) returned 0x20
	[0143.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg")) returned 0x20
	[0143.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.381] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=55542) returned 1
	[0143.381] CloseHandle (hObject=0x148) returned 1
	[0143.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg")) returned 0x20
	[0143.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg")) returned 0x20
	[0143.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.382] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=71552) returned 1
	[0143.382] CloseHandle (hObject=0x148) returned 1
	[0143.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg")) returned 0x20
	[0143.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg")) returned 0x20
	[0143.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.383] SetEvent (hEvent=0xfc) returned 1
	[0143.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.383] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30842) returned 1
	[0143.383] CloseHandle (hObject=0x148) returned 1
	[0143.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg")) returned 0x20
	[0143.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg")) returned 0x20
	[0143.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.384] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43294) returned 1
	[0143.384] CloseHandle (hObject=0x148) returned 1
	[0143.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg")) returned 0x20
	[0143.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg")) returned 0x20
	[0143.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.393] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15171) returned 1
	[0143.393] CloseHandle (hObject=0x148) returned 1
	[0143.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg")) returned 0x20
	[0143.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg")) returned 0x20
	[0143.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.394] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13596) returned 1
	[0143.394] CloseHandle (hObject=0x148) returned 1
	[0143.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg")) returned 0x20
	[0143.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg")) returned 0x20
	[0143.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.395] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=202883) returned 1
	[0143.395] CloseHandle (hObject=0x148) returned 1
	[0143.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png")) returned 0x20
	[0143.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png")) returned 0x20
	[0143.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.396] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89417) returned 1
	[0143.396] CloseHandle (hObject=0x148) returned 1
	[0143.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png")) returned 0x20
	[0143.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png")) returned 0x20
	[0143.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.397] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=124982) returned 1
	[0143.397] CloseHandle (hObject=0x148) returned 1
	[0143.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png")) returned 0x20
	[0143.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png")) returned 0x20
	[0143.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.397] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=105053) returned 1
	[0143.398] CloseHandle (hObject=0x148) returned 1
	[0143.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png")) returned 0x20
	[0143.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png")) returned 0x20
	[0143.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.398] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=96066) returned 1
	[0143.398] CloseHandle (hObject=0x148) returned 1
	[0143.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png")) returned 0x20
	[0143.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png")) returned 0x20
	[0143.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.399] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9797) returned 1
	[0143.399] CloseHandle (hObject=0x148) returned 1
	[0143.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid")) returned 0x20
	[0143.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid")) returned 0x20
	[0143.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.400] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5843) returned 1
	[0143.400] CloseHandle (hObject=0x148) returned 1
	[0143.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid")) returned 0x20
	[0143.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid")) returned 0x20
	[0143.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00021_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.401] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5622) returned 1
	[0143.401] CloseHandle (hObject=0x148) returned 1
	[0143.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00021_.wmf")) returned 0x20
	[0143.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00021_.wmf")) returned 0x20
	[0143.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00021_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00021_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.402] SetEvent (hEvent=0xfc) returned 1
	[0143.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00132_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.402] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4240) returned 1
	[0143.402] CloseHandle (hObject=0x148) returned 1
	[0143.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00132_.wmf")) returned 0x20
	[0143.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00132_.wmf")) returned 0x20
	[0143.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00132_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00132_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.403] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12770) returned 1
	[0143.403] CloseHandle (hObject=0x148) returned 1
	[0143.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf")) returned 0x20
	[0143.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf")) returned 0x20
	[0143.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.409] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6880) returned 1
	[0143.409] CloseHandle (hObject=0x148) returned 1
	[0143.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid")) returned 0x20
	[0143.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid")) returned 0x20
	[0143.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.410] SetEvent (hEvent=0xfc) returned 1
	[0143.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00238_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.410] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4996) returned 1
	[0143.410] CloseHandle (hObject=0x148) returned 1
	[0143.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00238_.wmf")) returned 0x20
	[0143.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00238_.wmf")) returned 0x20
	[0143.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00238_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00238_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.411] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2148) returned 1
	[0143.411] CloseHandle (hObject=0x148) returned 1
	[0143.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf")) returned 0x20
	[0143.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf")) returned 0x20
	[0143.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00388_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.412] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4466) returned 1
	[0143.412] CloseHandle (hObject=0x148) returned 1
	[0143.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00388_.wmf")) returned 0x20
	[0143.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00388_.wmf")) returned 0x20
	[0143.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00388_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00389_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.416] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8394) returned 1
	[0143.417] CloseHandle (hObject=0x148) returned 1
	[0143.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00389_.wmf")) returned 0x20
	[0143.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00389_.wmf")) returned 0x20
	[0143.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00389_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.417] SetEvent (hEvent=0xfc) returned 1
	[0143.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00395_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.417] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6474) returned 1
	[0143.418] CloseHandle (hObject=0x148) returned 1
	[0143.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00395_.wmf")) returned 0x20
	[0143.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00395_.wmf")) returned 0x20
	[0143.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00395_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00395_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00396_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.419] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14534) returned 1
	[0143.419] CloseHandle (hObject=0x148) returned 1
	[0143.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00396_.wmf")) returned 0x20
	[0143.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00396_.wmf")) returned 0x20
	[0143.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00396_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00396_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00417_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.419] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5950) returned 1
	[0143.420] CloseHandle (hObject=0x148) returned 1
	[0143.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00417_.wmf")) returned 0x20
	[0143.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00417_.wmf")) returned 0x20
	[0143.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00417_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00433_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.420] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18070) returned 1
	[0143.420] CloseHandle (hObject=0x148) returned 1
	[0143.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00433_.wmf")) returned 0x20
	[0143.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00433_.wmf")) returned 0x20
	[0143.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00433_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00433_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.432] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12088) returned 1
	[0143.432] CloseHandle (hObject=0x148) returned 1
	[0143.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00438_.wmf")) returned 0x20
	[0143.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00438_.wmf")) returned 0x20
	[0143.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00438_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.432] SetEvent (hEvent=0xfc) returned 1
	[0143.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00530_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.433] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18300) returned 1
	[0143.433] CloseHandle (hObject=0x148) returned 1
	[0143.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00530_.wmf")) returned 0x20
	[0143.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00530_.wmf")) returned 0x20
	[0143.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00530_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00530_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00532_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.434] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1328) returned 1
	[0143.434] CloseHandle (hObject=0x148) returned 1
	[0143.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00532_.wmf")) returned 0x20
	[0143.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00532_.wmf")) returned 0x20
	[0143.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00532_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00532_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00538_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.434] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32020) returned 1
	[0143.434] CloseHandle (hObject=0x148) returned 1
	[0143.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00538_.wmf")) returned 0x20
	[0143.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00538_.wmf")) returned 0x20
	[0143.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00538_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00538_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00641_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.437] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1612) returned 1
	[0143.437] CloseHandle (hObject=0x148) returned 1
	[0143.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00641_.wmf")) returned 0x20
	[0143.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00641_.wmf")) returned 0x20
	[0143.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00641_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00641_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00784_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.439] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30296) returned 1
	[0143.439] CloseHandle (hObject=0x148) returned 1
	[0143.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00784_.wmf")) returned 0x20
	[0143.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00784_.wmf")) returned 0x20
	[0143.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00784_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00784_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00798_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.440] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9208) returned 1
	[0143.440] CloseHandle (hObject=0x148) returned 1
	[0143.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00798_.wmf")) returned 0x20
	[0143.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00798_.wmf")) returned 0x20
	[0143.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00798_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00798_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00806_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.440] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1928) returned 1
	[0143.440] CloseHandle (hObject=0x148) returned 1
	[0143.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00806_.wmf")) returned 0x20
	[0143.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00806_.wmf")) returned 0x20
	[0143.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00806_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00806_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00807_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.441] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2980) returned 1
	[0143.441] CloseHandle (hObject=0x148) returned 1
	[0143.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00807_.wmf")) returned 0x20
	[0143.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00807_.wmf")) returned 0x20
	[0143.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00807_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00807_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00808_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.458] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1300) returned 1
	[0143.458] CloseHandle (hObject=0x148) returned 1
	[0143.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00808_.wmf")) returned 0x20
	[0143.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00808_.wmf")) returned 0x20
	[0143.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00808_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na00808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.458] SetEvent (hEvent=0xfc) returned 1
	[0143.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01161_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.469] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5780) returned 1
	[0143.469] CloseHandle (hObject=0x148) returned 1
	[0143.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01161_.wmf")) returned 0x20
	[0143.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01161_.wmf")) returned 0x20
	[0143.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01161_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01470_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.470] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19162) returned 1
	[0143.470] CloseHandle (hObject=0x148) returned 1
	[0143.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01470_.wmf")) returned 0x20
	[0143.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01470_.wmf")) returned 0x20
	[0143.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01470_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01470_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01472_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.471] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8232) returned 1
	[0143.471] CloseHandle (hObject=0x148) returned 1
	[0143.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01472_.wmf")) returned 0x20
	[0143.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01472_.wmf")) returned 0x20
	[0143.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01472_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01472_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01473_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.477] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10414) returned 1
	[0143.477] CloseHandle (hObject=0x148) returned 1
	[0143.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01473_.wmf")) returned 0x20
	[0143.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01473_.wmf")) returned 0x20
	[0143.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01473_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01473_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01848_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.478] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1120) returned 1
	[0143.478] CloseHandle (hObject=0x148) returned 1
	[0143.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01848_.wmf")) returned 0x20
	[0143.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01848_.wmf")) returned 0x20
	[0143.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01848_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01848_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01849_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.481] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=624) returned 1
	[0143.481] CloseHandle (hObject=0x148) returned 1
	[0143.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01849_.wmf")) returned 0x20
	[0143.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01849_.wmf")) returned 0x20
	[0143.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01849_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01849_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01852_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.482] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4408) returned 1
	[0143.482] CloseHandle (hObject=0x148) returned 1
	[0143.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01852_.wmf")) returned 0x20
	[0143.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01852_.wmf")) returned 0x20
	[0143.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01852_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01852_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01858_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.482] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4296) returned 1
	[0143.482] CloseHandle (hObject=0x148) returned 1
	[0143.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01858_.wmf")) returned 0x20
	[0143.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01858_.wmf")) returned 0x20
	[0143.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01858_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01858_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01866_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.483] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3512) returned 1
	[0143.483] CloseHandle (hObject=0x148) returned 1
	[0143.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01866_.wmf")) returned 0x20
	[0143.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01866_.wmf")) returned 0x20
	[0143.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01866_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na01866_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02009_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.484] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10208) returned 1
	[0143.484] CloseHandle (hObject=0x148) returned 1
	[0143.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02009_.wmf")) returned 0x20
	[0143.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02009_.wmf")) returned 0x20
	[0143.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02009_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02009_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02041_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.485] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2328) returned 1
	[0143.485] CloseHandle (hObject=0x148) returned 1
	[0143.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02041_.wmf")) returned 0x20
	[0143.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02041_.wmf")) returned 0x20
	[0143.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02041_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02041_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02066_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.486] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1084) returned 1
	[0143.486] CloseHandle (hObject=0x148) returned 1
	[0143.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02066_.wmf")) returned 0x20
	[0143.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02066_.wmf")) returned 0x20
	[0143.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02066_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02066_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.487] SetEvent (hEvent=0xfc) returned 1
	[0143.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02091_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.487] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1140) returned 1
	[0143.487] CloseHandle (hObject=0x148) returned 1
	[0143.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02091_.wmf")) returned 0x20
	[0143.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02091_.wmf")) returned 0x20
	[0143.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02091_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02091_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02092_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.488] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1644) returned 1
	[0143.488] CloseHandle (hObject=0x148) returned 1
	[0143.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02092_.wmf")) returned 0x20
	[0143.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02092_.wmf")) returned 0x20
	[0143.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02092_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02093_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.489] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=672) returned 1
	[0143.489] CloseHandle (hObject=0x148) returned 1
	[0143.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02093_.wmf")) returned 0x20
	[0143.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02093_.wmf")) returned 0x20
	[0143.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02093_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02093_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02124_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.490] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8168) returned 1
	[0143.490] CloseHandle (hObject=0x148) returned 1
	[0143.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02124_.wmf")) returned 0x20
	[0143.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02124_.wmf")) returned 0x20
	[0143.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02124_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02124_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02125_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.493] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18454) returned 1
	[0143.493] CloseHandle (hObject=0x148) returned 1
	[0143.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02125_.wmf")) returned 0x20
	[0143.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02125_.wmf")) returned 0x20
	[0143.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02125_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02125_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.494] SetEvent (hEvent=0xfc) returned 1
	[0143.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02262_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.494] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3328) returned 1
	[0143.494] CloseHandle (hObject=0x148) returned 1
	[0143.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02262_.wmf")) returned 0x20
	[0143.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02262_.wmf")) returned 0x20
	[0143.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02262_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02264_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.495] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2272) returned 1
	[0143.495] CloseHandle (hObject=0x148) returned 1
	[0143.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02264_.wmf")) returned 0x20
	[0143.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02264_.wmf")) returned 0x20
	[0143.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02264_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02264_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02356_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.496] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3604) returned 1
	[0143.496] CloseHandle (hObject=0x148) returned 1
	[0143.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02356_.wmf")) returned 0x20
	[0143.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02356_.wmf")) returned 0x20
	[0143.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02356_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02356_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02361_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.497] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6084) returned 1
	[0143.497] CloseHandle (hObject=0x148) returned 1
	[0143.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02361_.wmf")) returned 0x20
	[0143.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02361_.wmf")) returned 0x20
	[0143.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02361_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02368_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.501] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3368) returned 1
	[0143.501] CloseHandle (hObject=0x148) returned 1
	[0143.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02368_.wmf")) returned 0x20
	[0143.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02368_.wmf")) returned 0x20
	[0143.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02368_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02368_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02371_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.502] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3188) returned 1
	[0143.502] CloseHandle (hObject=0x148) returned 1
	[0143.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02371_.wmf")) returned 0x20
	[0143.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02371_.wmf")) returned 0x20
	[0143.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02371_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02371_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02373_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.502] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3308) returned 1
	[0143.502] CloseHandle (hObject=0x148) returned 1
	[0143.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02373_.wmf")) returned 0x20
	[0143.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02373_.wmf")) returned 0x20
	[0143.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02373_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02373_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02384_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.519] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3032) returned 1
	[0143.519] CloseHandle (hObject=0x1f8) returned 1
	[0143.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02384_.wmf")) returned 0x20
	[0143.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02384_.wmf")) returned 0x20
	[0143.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02384_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.520] SetEvent (hEvent=0xfc) returned 1
	[0143.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.520] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6472) returned 1
	[0143.520] CloseHandle (hObject=0x1f8) returned 1
	[0143.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf")) returned 0x20
	[0143.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf")) returned 0x20
	[0143.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.521] SetEvent (hEvent=0xfc) returned 1
	[0143.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.521] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7212) returned 1
	[0143.521] CloseHandle (hObject=0x1f8) returned 1
	[0143.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf")) returned 0x20
	[0143.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf")) returned 0x20
	[0143.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02431_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.522] SetEvent (hEvent=0xfc) returned 1
	[0143.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.529] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4088) returned 1
	[0143.529] CloseHandle (hObject=0x1f8) returned 1
	[0143.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf")) returned 0x20
	[0143.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf")) returned 0x20
	[0143.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.529] SetEvent (hEvent=0xfc) returned 1
	[0143.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.530] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3112) returned 1
	[0143.530] CloseHandle (hObject=0x1f8) returned 1
	[0143.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf")) returned 0x20
	[0143.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf")) returned 0x20
	[0143.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02450_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.531] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3440) returned 1
	[0143.531] CloseHandle (hObject=0x1f8) returned 1
	[0143.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf")) returned 0x20
	[0143.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf")) returned 0x20
	[0143.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02451_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.532] SetEvent (hEvent=0xfc) returned 1
	[0143.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.532] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3388) returned 1
	[0143.532] CloseHandle (hObject=0x1f8) returned 1
	[0143.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf")) returned 0x20
	[0143.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf")) returned 0x20
	[0143.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\na02453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.545] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5968) returned 1
	[0143.545] CloseHandle (hObject=0x1f8) returned 1
	[0143.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid")) returned 0x20
	[0143.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid")) returned 0x20
	[0143.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.546] SetEvent (hEvent=0xfc) returned 1
	[0143.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.546] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7768) returned 1
	[0143.546] CloseHandle (hObject=0x1f8) returned 1
	[0143.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid")) returned 0x20
	[0143.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid")) returned 0x20
	[0143.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.547] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6564) returned 1
	[0143.547] CloseHandle (hObject=0x1f8) returned 1
	[0143.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid")) returned 0x20
	[0143.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid")) returned 0x20
	[0143.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.548] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7347) returned 1
	[0143.548] CloseHandle (hObject=0x1f8) returned 1
	[0143.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid")) returned 0x20
	[0143.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid")) returned 0x20
	[0143.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.549] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6764) returned 1
	[0143.549] CloseHandle (hObject=0x1f8) returned 1
	[0143.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid")) returned 0x20
	[0143.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid")) returned 0x20
	[0143.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.550] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5393) returned 1
	[0143.550] CloseHandle (hObject=0x1f8) returned 1
	[0143.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid")) returned 0x20
	[0143.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid")) returned 0x20
	[0143.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.550] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24896) returned 1
	[0143.550] CloseHandle (hObject=0x1f8) returned 1
	[0143.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf")) returned 0x20
	[0143.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf")) returned 0x20
	[0143.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0143.551] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16666) returned 1
	[0143.551] CloseHandle (hObject=0x1f8) returned 1
	[0143.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf")) returned 0x20
	[0143.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf")) returned 0x20
	[0143.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00014_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0143.556] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15708) returned 1
	[0143.556] CloseHandle (hObject=0x13c) returned 1
	[0143.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf")) returned 0x20
	[0143.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf")) returned 0x20
	[0143.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00034_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0143.557] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16448) returned 1
	[0143.557] CloseHandle (hObject=0x13c) returned 1
	[0143.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf")) returned 0x20
	[0143.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf")) returned 0x20
	[0143.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00049_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0143.557] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19736) returned 1
	[0143.557] CloseHandle (hObject=0x13c) returned 1
	[0143.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf")) returned 0x20
	[0143.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf")) returned 0x20
	[0143.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00050_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0143.558] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18412) returned 1
	[0143.558] CloseHandle (hObject=0x13c) returned 1
	[0143.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf")) returned 0x20
	[0143.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf")) returned 0x20
	[0143.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00052_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0143.559] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2228) returned 1
	[0143.559] CloseHandle (hObject=0x13c) returned 1
	[0143.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf")) returned 0x20
	[0143.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf")) returned 0x20
	[0143.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.562] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2804) returned 1
	[0143.562] CloseHandle (hObject=0x1f4) returned 1
	[0143.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf")) returned 0x20
	[0143.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf")) returned 0x20
	[0143.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00272_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.565] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23204) returned 1
	[0143.565] CloseHandle (hObject=0x1f4) returned 1
	[0143.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf")) returned 0x20
	[0143.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf")) returned 0x20
	[0143.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00468_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.566] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7416) returned 1
	[0143.566] CloseHandle (hObject=0x1f4) returned 1
	[0143.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf")) returned 0x20
	[0143.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf")) returned 0x20
	[0143.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00478_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.566] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16676) returned 1
	[0143.566] CloseHandle (hObject=0x1f4) returned 1
	[0143.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf")) returned 0x20
	[0143.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf")) returned 0x20
	[0143.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00485_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.762] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=81964) returned 1
	[0143.763] CloseHandle (hObject=0x1f4) returned 1
	[0143.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf")) returned 0x20
	[0143.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf")) returned 0x20
	[0143.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00489_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.763] SetEvent (hEvent=0xfc) returned 1
	[0143.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.764] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7908) returned 1
	[0143.764] CloseHandle (hObject=0x1f4) returned 1
	[0143.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf")) returned 0x20
	[0143.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf")) returned 0x20
	[0143.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00531_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.765] SetEvent (hEvent=0xfc) returned 1
	[0143.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.765] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36264) returned 1
	[0143.765] CloseHandle (hObject=0x1f4) returned 1
	[0143.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf")) returned 0x20
	[0143.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf")) returned 0x20
	[0143.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00542_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.766] SetEvent (hEvent=0xfc) returned 1
	[0143.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.766] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5132) returned 1
	[0143.767] CloseHandle (hObject=0x1f4) returned 1
	[0143.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf")) returned 0x20
	[0143.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf")) returned 0x20
	[0143.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00555_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.767] SetEvent (hEvent=0xfc) returned 1
	[0143.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.768] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9904) returned 1
	[0143.768] CloseHandle (hObject=0x1f4) returned 1
	[0143.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf")) returned 0x20
	[0143.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf")) returned 0x20
	[0143.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.768] SetEvent (hEvent=0xfc) returned 1
	[0143.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.769] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22128) returned 1
	[0143.769] CloseHandle (hObject=0x1f4) returned 1
	[0143.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf")) returned 0x20
	[0143.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf")) returned 0x20
	[0143.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00563_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.769] SetEvent (hEvent=0xfc) returned 1
	[0143.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.770] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6886) returned 1
	[0143.770] CloseHandle (hObject=0x1f4) returned 1
	[0143.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf")) returned 0x20
	[0143.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf")) returned 0x20
	[0143.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00578_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.770] SetEvent (hEvent=0xfc) returned 1
	[0143.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.771] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6440) returned 1
	[0143.771] CloseHandle (hObject=0x1f4) returned 1
	[0143.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf")) returned 0x20
	[0143.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf")) returned 0x20
	[0143.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00608_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.772] SetEvent (hEvent=0xfc) returned 1
	[0143.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.772] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19690) returned 1
	[0143.772] CloseHandle (hObject=0x1f4) returned 1
	[0143.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf")) returned 0x20
	[0143.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf")) returned 0x20
	[0143.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00633_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.773] SetEvent (hEvent=0xfc) returned 1
	[0143.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.774] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45356) returned 1
	[0143.774] CloseHandle (hObject=0x1f4) returned 1
	[0143.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf")) returned 0x20
	[0143.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf")) returned 0x20
	[0143.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00640_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.774] SetEvent (hEvent=0xfc) returned 1
	[0143.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.775] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24616) returned 1
	[0143.775] CloseHandle (hObject=0x1f4) returned 1
	[0143.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf")) returned 0x20
	[0143.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf")) returned 0x20
	[0143.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.776] SetEvent (hEvent=0xfc) returned 1
	[0143.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.776] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4234) returned 1
	[0143.776] CloseHandle (hObject=0x1f4) returned 1
	[0143.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf")) returned 0x20
	[0143.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf")) returned 0x20
	[0143.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.777] SetEvent (hEvent=0xfc) returned 1
	[0143.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.777] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4398) returned 1
	[0143.777] CloseHandle (hObject=0x1f4) returned 1
	[0143.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf")) returned 0x20
	[0143.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf")) returned 0x20
	[0143.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00686_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.778] SetEvent (hEvent=0xfc) returned 1
	[0143.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.778] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4408) returned 1
	[0143.778] CloseHandle (hObject=0x1f4) returned 1
	[0143.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf")) returned 0x20
	[0143.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf")) returned 0x20
	[0143.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.779] SetEvent (hEvent=0xfc) returned 1
	[0143.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.780] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14630) returned 1
	[0143.780] CloseHandle (hObject=0x1f4) returned 1
	[0143.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf")) returned 0x20
	[0143.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf")) returned 0x20
	[0143.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00720_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.780] SetEvent (hEvent=0xfc) returned 1
	[0143.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.781] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6908) returned 1
	[0143.781] CloseHandle (hObject=0x1f4) returned 1
	[0143.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf")) returned 0x20
	[0143.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf")) returned 0x20
	[0143.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00723_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.781] SetEvent (hEvent=0xfc) returned 1
	[0143.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.782] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45476) returned 1
	[0143.782] CloseHandle (hObject=0x1f4) returned 1
	[0143.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf")) returned 0x20
	[0143.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf")) returned 0x20
	[0143.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00726_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.782] SetEvent (hEvent=0xfc) returned 1
	[0143.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.783] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40492) returned 1
	[0143.783] CloseHandle (hObject=0x1f4) returned 1
	[0143.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf")) returned 0x20
	[0143.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf")) returned 0x20
	[0143.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00737_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.784] SetEvent (hEvent=0xfc) returned 1
	[0143.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.784] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7328) returned 1
	[0143.784] CloseHandle (hObject=0x1f4) returned 1
	[0143.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf")) returned 0x20
	[0143.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf")) returned 0x20
	[0143.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00833_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.785] SetEvent (hEvent=0xfc) returned 1
	[0143.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.785] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6408) returned 1
	[0143.786] CloseHandle (hObject=0x1f4) returned 1
	[0143.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf")) returned 0x20
	[0143.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf")) returned 0x20
	[0143.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00898_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.786] SetEvent (hEvent=0xfc) returned 1
	[0143.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.787] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12544) returned 1
	[0143.787] CloseHandle (hObject=0x1f4) returned 1
	[0143.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf")) returned 0x20
	[0143.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf")) returned 0x20
	[0143.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00934_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.787] SetEvent (hEvent=0xfc) returned 1
	[0143.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.788] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10500) returned 1
	[0143.788] CloseHandle (hObject=0x1f4) returned 1
	[0143.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf")) returned 0x20
	[0143.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf")) returned 0x20
	[0143.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe00998_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.788] SetEvent (hEvent=0xfc) returned 1
	[0143.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.789] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2436) returned 1
	[0143.789] CloseHandle (hObject=0x1f4) returned 1
	[0143.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf")) returned 0x20
	[0143.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf")) returned 0x20
	[0143.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.789] SetEvent (hEvent=0xfc) returned 1
	[0143.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.790] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1436) returned 1
	[0143.790] CloseHandle (hObject=0x1f4) returned 1
	[0143.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf")) returned 0x20
	[0143.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf")) returned 0x20
	[0143.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.790] SetEvent (hEvent=0xfc) returned 1
	[0143.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.791] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16284) returned 1
	[0143.791] CloseHandle (hObject=0x1f4) returned 1
	[0143.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf")) returned 0x20
	[0143.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf")) returned 0x20
	[0143.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.792] SetEvent (hEvent=0xfc) returned 1
	[0143.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0143.793] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5144) returned 1
	[0143.793] CloseHandle (hObject=0x1f4) returned 1
	[0143.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf")) returned 0x20
	[0143.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf")) returned 0x20
	[0143.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01661_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.793] SetEvent (hEvent=0xfc) returned 1
	[0143.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.797] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3546) returned 1
	[0143.797] CloseHandle (hObject=0x148) returned 1
	[0143.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf")) returned 0x20
	[0143.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf")) returned 0x20
	[0143.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe01797_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.797] SetEvent (hEvent=0xfc) returned 1
	[0143.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.798] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9172) returned 1
	[0143.798] CloseHandle (hObject=0x148) returned 1
	[0143.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf")) returned 0x20
	[0143.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf")) returned 0x20
	[0143.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02120_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.798] SetEvent (hEvent=0xfc) returned 1
	[0143.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.799] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8132) returned 1
	[0143.799] CloseHandle (hObject=0x148) returned 1
	[0143.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf")) returned 0x20
	[0143.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf")) returned 0x20
	[0143.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.800] SetEvent (hEvent=0xfc) returned 1
	[0143.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.801] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30178) returned 1
	[0143.801] CloseHandle (hObject=0x148) returned 1
	[0143.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf")) returned 0x20
	[0143.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf")) returned 0x20
	[0143.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.801] SetEvent (hEvent=0xfc) returned 1
	[0143.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.802] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33358) returned 1
	[0143.802] CloseHandle (hObject=0x148) returned 1
	[0143.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf")) returned 0x20
	[0143.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf")) returned 0x20
	[0143.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02263_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.802] SetEvent (hEvent=0xfc) returned 1
	[0143.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.803] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25266) returned 1
	[0143.803] CloseHandle (hObject=0x148) returned 1
	[0143.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf")) returned 0x20
	[0143.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf")) returned 0x20
	[0143.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.803] SetEvent (hEvent=0xfc) returned 1
	[0143.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.804] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30944) returned 1
	[0143.804] CloseHandle (hObject=0x148) returned 1
	[0143.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf")) returned 0x20
	[0143.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf")) returned 0x20
	[0143.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.806] SetEvent (hEvent=0xfc) returned 1
	[0143.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.807] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28454) returned 1
	[0143.807] CloseHandle (hObject=0x148) returned 1
	[0143.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf")) returned 0x20
	[0143.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf")) returned 0x20
	[0143.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.807] SetEvent (hEvent=0xfc) returned 1
	[0143.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.808] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47556) returned 1
	[0143.808] CloseHandle (hObject=0x148) returned 1
	[0143.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf")) returned 0x20
	[0143.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf")) returned 0x20
	[0143.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02278_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.809] SetEvent (hEvent=0xfc) returned 1
	[0143.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.809] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26920) returned 1
	[0143.809] CloseHandle (hObject=0x148) returned 1
	[0143.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf")) returned 0x20
	[0143.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf")) returned 0x20
	[0143.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02280_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.810] SetEvent (hEvent=0xfc) returned 1
	[0143.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.810] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29696) returned 1
	[0143.811] CloseHandle (hObject=0x148) returned 1
	[0143.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf")) returned 0x20
	[0143.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf")) returned 0x20
	[0143.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.811] SetEvent (hEvent=0xfc) returned 1
	[0143.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.812] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16528) returned 1
	[0143.812] CloseHandle (hObject=0x148) returned 1
	[0143.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf")) returned 0x20
	[0143.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf")) returned 0x20
	[0143.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02285_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.812] SetEvent (hEvent=0xfc) returned 1
	[0143.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.813] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17796) returned 1
	[0143.813] CloseHandle (hObject=0x148) returned 1
	[0143.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf")) returned 0x20
	[0143.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf")) returned 0x20
	[0143.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02287_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.814] SetEvent (hEvent=0xfc) returned 1
	[0143.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.814] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30432) returned 1
	[0143.814] CloseHandle (hObject=0x148) returned 1
	[0143.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf")) returned 0x20
	[0143.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf")) returned 0x20
	[0143.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02288_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.815] SetEvent (hEvent=0xfc) returned 1
	[0143.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.815] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22608) returned 1
	[0143.815] CloseHandle (hObject=0x148) returned 1
	[0143.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf")) returned 0x20
	[0143.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf")) returned 0x20
	[0143.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02293_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.816] SetEvent (hEvent=0xfc) returned 1
	[0143.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.816] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21288) returned 1
	[0143.816] CloseHandle (hObject=0x148) returned 1
	[0143.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf")) returned 0x20
	[0143.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf")) returned 0x20
	[0143.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.817] SetEvent (hEvent=0xfc) returned 1
	[0143.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.817] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2240) returned 1
	[0143.817] CloseHandle (hObject=0x148) returned 1
	[0143.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf")) returned 0x20
	[0143.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf")) returned 0x20
	[0143.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.818] SetEvent (hEvent=0xfc) returned 1
	[0143.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.818] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14840) returned 1
	[0143.818] CloseHandle (hObject=0x148) returned 1
	[0143.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf")) returned 0x20
	[0143.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf")) returned 0x20
	[0143.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02522_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.819] SetEvent (hEvent=0xfc) returned 1
	[0143.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.819] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7466) returned 1
	[0143.819] CloseHandle (hObject=0x148) returned 1
	[0143.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf")) returned 0x20
	[0143.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf")) returned 0x20
	[0143.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02950_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.820] SetEvent (hEvent=0xfc) returned 1
	[0143.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.820] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3184) returned 1
	[0143.820] CloseHandle (hObject=0x148) returned 1
	[0143.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf")) returned 0x20
	[0143.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf")) returned 0x20
	[0143.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe02957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.821] SetEvent (hEvent=0xfc) returned 1
	[0143.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.821] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1556) returned 1
	[0143.822] CloseHandle (hObject=0x148) returned 1
	[0143.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf")) returned 0x20
	[0143.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf")) returned 0x20
	[0143.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.822] SetEvent (hEvent=0xfc) returned 1
	[0143.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.823] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2228) returned 1
	[0143.823] CloseHandle (hObject=0x148) returned 1
	[0143.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf")) returned 0x20
	[0143.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf")) returned 0x20
	[0143.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.824] SetEvent (hEvent=0xfc) returned 1
	[0143.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.826] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13184) returned 1
	[0143.826] CloseHandle (hObject=0x148) returned 1
	[0143.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf")) returned 0x20
	[0143.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf")) returned 0x20
	[0143.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03257_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.828] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1682) returned 1
	[0143.828] CloseHandle (hObject=0x148) returned 1
	[0143.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf")) returned 0x20
	[0143.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf")) returned 0x20
	[0143.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03331_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.829] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10284) returned 1
	[0143.829] CloseHandle (hObject=0x148) returned 1
	[0143.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf")) returned 0x20
	[0143.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf")) returned 0x20
	[0143.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03339_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.830] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8456) returned 1
	[0143.830] CloseHandle (hObject=0x148) returned 1
	[0143.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf")) returned 0x20
	[0143.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf")) returned 0x20
	[0143.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03451_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.830] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7972) returned 1
	[0143.830] CloseHandle (hObject=0x148) returned 1
	[0143.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf")) returned 0x20
	[0143.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf")) returned 0x20
	[0143.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.832] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8568) returned 1
	[0143.832] CloseHandle (hObject=0x148) returned 1
	[0143.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf")) returned 0x20
	[0143.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf")) returned 0x20
	[0143.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.833] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5732) returned 1
	[0143.833] CloseHandle (hObject=0x148) returned 1
	[0143.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf")) returned 0x20
	[0143.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf")) returned 0x20
	[0143.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03464_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.833] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16800) returned 1
	[0143.833] CloseHandle (hObject=0x148) returned 1
	[0143.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf")) returned 0x20
	[0143.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf")) returned 0x20
	[0143.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03466_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.834] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14744) returned 1
	[0143.834] CloseHandle (hObject=0x148) returned 1
	[0143.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf")) returned 0x20
	[0143.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf")) returned 0x20
	[0143.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03470_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.836] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3780) returned 1
	[0143.836] CloseHandle (hObject=0x148) returned 1
	[0143.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf")) returned 0x20
	[0143.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf")) returned 0x20
	[0143.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.837] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6248) returned 1
	[0143.837] CloseHandle (hObject=0x148) returned 1
	[0143.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf")) returned 0x20
	[0143.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf")) returned 0x20
	[0143.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.837] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2556) returned 1
	[0143.837] CloseHandle (hObject=0x148) returned 1
	[0143.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf")) returned 0x20
	[0143.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf")) returned 0x20
	[0143.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03731_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.838] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1930) returned 1
	[0143.838] CloseHandle (hObject=0x148) returned 1
	[0143.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf")) returned 0x20
	[0143.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf")) returned 0x20
	[0143.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe03795_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.839] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4128) returned 1
	[0143.839] CloseHandle (hObject=0x148) returned 1
	[0143.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf")) returned 0x20
	[0143.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf")) returned 0x20
	[0143.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe04050_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.840] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14328) returned 1
	[0143.840] CloseHandle (hObject=0x148) returned 1
	[0143.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf")) returned 0x20
	[0143.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf")) returned 0x20
	[0143.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05665_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0143.841] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5756) returned 1
	[0143.841] CloseHandle (hObject=0x148) returned 1
	[0143.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf")) returned 0x20
	[0143.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf")) returned 0x20
	[0143.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0143.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05710_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0143.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0144.043] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1544) returned 1
	[0144.043] CloseHandle (hObject=0x140) returned 1
	[0144.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf")) returned 0x20
	[0144.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf")) returned 0x20
	[0144.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05869_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.043] SetEvent (hEvent=0xfc) returned 1
	[0144.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.183] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1588) returned 1
	[0144.183] CloseHandle (hObject=0x148) returned 1
	[0144.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf")) returned 0x20
	[0144.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf")) returned 0x20
	[0144.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pe05870_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.184] SetEvent (hEvent=0xfc) returned 1
	[0144.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.184] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41474) returned 1
	[0144.184] CloseHandle (hObject=0x148) returned 1
	[0144.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg")) returned 0x20
	[0144.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg")) returned 0x20
	[0144.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01179j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.185] SetEvent (hEvent=0xfc) returned 1
	[0144.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.187] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6334) returned 1
	[0144.187] CloseHandle (hObject=0x148) returned 1
	[0144.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg")) returned 0x20
	[0144.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg")) returned 0x20
	[0144.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01213k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.187] SetEvent (hEvent=0xfc) returned 1
	[0144.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.188] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7316) returned 1
	[0144.188] CloseHandle (hObject=0x148) returned 1
	[0144.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg")) returned 0x20
	[0144.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg")) returned 0x20
	[0144.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01221k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.189] SetEvent (hEvent=0xfc) returned 1
	[0144.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.189] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32184) returned 1
	[0144.189] CloseHandle (hObject=0x148) returned 1
	[0144.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp")) returned 0x20
	[0144.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp")) returned 0x20
	[0144.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01235u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.190] SetEvent (hEvent=0xfc) returned 1
	[0144.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.190] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31968) returned 1
	[0144.190] CloseHandle (hObject=0x148) returned 1
	[0144.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp")) returned 0x20
	[0144.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp")) returned 0x20
	[0144.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01236u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.191] SetEvent (hEvent=0xfc) returned 1
	[0144.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.287] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5988) returned 1
	[0144.287] CloseHandle (hObject=0x148) returned 1
	[0144.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg")) returned 0x20
	[0144.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg")) returned 0x20
	[0144.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01239k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.287] SetEvent (hEvent=0xfc) returned 1
	[0144.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.288] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31968) returned 1
	[0144.288] CloseHandle (hObject=0x148) returned 1
	[0144.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp")) returned 0x20
	[0144.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp")) returned 0x20
	[0144.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01607u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.288] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39614) returned 1
	[0144.289] CloseHandle (hObject=0x148) returned 1
	[0144.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg")) returned 0x20
	[0144.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg")) returned 0x20
	[0144.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph01931j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.289] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17694) returned 1
	[0144.289] CloseHandle (hObject=0x148) returned 1
	[0144.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg")) returned 0x20
	[0144.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg")) returned 0x20
	[0144.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02028k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.290] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31968) returned 1
	[0144.290] CloseHandle (hObject=0x148) returned 1
	[0144.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp")) returned 0x20
	[0144.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp")) returned 0x20
	[0144.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02039u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.291] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32184) returned 1
	[0144.291] CloseHandle (hObject=0x148) returned 1
	[0144.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp")) returned 0x20
	[0144.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp")) returned 0x20
	[0144.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02040u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.293] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27388) returned 1
	[0144.293] CloseHandle (hObject=0x148) returned 1
	[0144.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg")) returned 0x20
	[0144.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg")) returned 0x20
	[0144.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02053j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.293] SetEvent (hEvent=0xfc) returned 1
	[0144.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.294] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31968) returned 1
	[0144.294] CloseHandle (hObject=0x148) returned 1
	[0144.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp")) returned 0x20
	[0144.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp")) returned 0x20
	[0144.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02058u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.294] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31968) returned 1
	[0144.294] CloseHandle (hObject=0x148) returned 1
	[0144.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp")) returned 0x20
	[0144.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp")) returned 0x20
	[0144.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02062u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.295] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29335) returned 1
	[0144.295] CloseHandle (hObject=0x148) returned 1
	[0144.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg")) returned 0x20
	[0144.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg")) returned 0x20
	[0144.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02069j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.296] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32184) returned 1
	[0144.296] CloseHandle (hObject=0x148) returned 1
	[0144.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp")) returned 0x20
	[0144.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp")) returned 0x20
	[0144.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02071u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.297] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31968) returned 1
	[0144.298] CloseHandle (hObject=0x148) returned 1
	[0144.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp")) returned 0x20
	[0144.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp")) returned 0x20
	[0144.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02074u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.298] SetEvent (hEvent=0xfc) returned 1
	[0144.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.299] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31968) returned 1
	[0144.299] CloseHandle (hObject=0x148) returned 1
	[0144.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp")) returned 0x20
	[0144.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp")) returned 0x20
	[0144.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02208u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.299] SetEvent (hEvent=0xfc) returned 1
	[0144.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.300] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32184) returned 1
	[0144.300] CloseHandle (hObject=0x148) returned 1
	[0144.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp")) returned 0x20
	[0144.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp")) returned 0x20
	[0144.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02223u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.301] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32184) returned 1
	[0144.301] CloseHandle (hObject=0x148) returned 1
	[0144.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp")) returned 0x20
	[0144.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp")) returned 0x20
	[0144.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02291u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.302] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31968) returned 1
	[0144.302] CloseHandle (hObject=0x148) returned 1
	[0144.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp")) returned 0x20
	[0144.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp")) returned 0x20
	[0144.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02398u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.302] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3541) returned 1
	[0144.302] CloseHandle (hObject=0x148) returned 1
	[0144.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg")) returned 0x20
	[0144.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg")) returned 0x20
	[0144.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02412k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.303] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31968) returned 1
	[0144.303] CloseHandle (hObject=0x148) returned 1
	[0144.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp")) returned 0x20
	[0144.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp")) returned 0x20
	[0144.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02417u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.304] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31752) returned 1
	[0144.304] CloseHandle (hObject=0x148) returned 1
	[0144.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp")) returned 0x20
	[0144.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp")) returned 0x20
	[0144.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02466u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.305] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18684) returned 1
	[0144.305] CloseHandle (hObject=0x148) returned 1
	[0144.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp")) returned 0x20
	[0144.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp")) returned 0x20
	[0144.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02470u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.306] SetEvent (hEvent=0xfc) returned 1
	[0144.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.307] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31968) returned 1
	[0144.307] CloseHandle (hObject=0x148) returned 1
	[0144.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp")) returned 0x20
	[0144.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp")) returned 0x20
	[0144.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02503u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.308] SetEvent (hEvent=0xfc) returned 1
	[0144.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.308] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33945) returned 1
	[0144.308] CloseHandle (hObject=0x148) returned 1
	[0144.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg")) returned 0x20
	[0144.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg")) returned 0x20
	[0144.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02567j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.309] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25499) returned 1
	[0144.309] CloseHandle (hObject=0x148) returned 1
	[0144.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif")) returned 0x20
	[0144.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif")) returned 0x20
	[0144.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.310] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32400) returned 1
	[0144.310] CloseHandle (hObject=0x148) returned 1
	[0144.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp")) returned 0x20
	[0144.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp")) returned 0x20
	[0144.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02736u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.311] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33048) returned 1
	[0144.311] CloseHandle (hObject=0x148) returned 1
	[0144.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp")) returned 0x20
	[0144.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp")) returned 0x20
	[0144.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02738u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.312] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24363) returned 1
	[0144.312] CloseHandle (hObject=0x148) returned 1
	[0144.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif")) returned 0x20
	[0144.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif")) returned 0x20
	[0144.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.312] SetEvent (hEvent=0xfc) returned 1
	[0144.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.313] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32616) returned 1
	[0144.313] CloseHandle (hObject=0x148) returned 1
	[0144.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp")) returned 0x20
	[0144.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp")) returned 0x20
	[0144.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02740u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.314] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20645) returned 1
	[0144.314] CloseHandle (hObject=0x148) returned 1
	[0144.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif")) returned 0x20
	[0144.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif")) returned 0x20
	[0144.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.315] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31968) returned 1
	[0144.315] CloseHandle (hObject=0x148) returned 1
	[0144.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp")) returned 0x20
	[0144.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp")) returned 0x20
	[0144.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02742u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.315] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28038) returned 1
	[0144.315] CloseHandle (hObject=0x148) returned 1
	[0144.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif")) returned 0x20
	[0144.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif")) returned 0x20
	[0144.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02743g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.316] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24187) returned 1
	[0144.316] CloseHandle (hObject=0x148) returned 1
	[0144.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif")) returned 0x20
	[0144.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif")) returned 0x20
	[0144.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.409] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32132) returned 1
	[0144.409] CloseHandle (hObject=0x148) returned 1
	[0144.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp")) returned 0x20
	[0144.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp")) returned 0x20
	[0144.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02746u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.409] SetEvent (hEvent=0xfc) returned 1
	[0144.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.412] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25799) returned 1
	[0144.412] CloseHandle (hObject=0x148) returned 1
	[0144.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif")) returned 0x20
	[0144.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif")) returned 0x20
	[0144.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.412] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94016) returned 1
	[0144.412] CloseHandle (hObject=0x148) returned 1
	[0144.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp")) returned 0x20
	[0144.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp")) returned 0x20
	[0144.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02750u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.413] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50050) returned 1
	[0144.413] CloseHandle (hObject=0x148) returned 1
	[0144.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif")) returned 0x20
	[0144.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif")) returned 0x20
	[0144.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.414] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31752) returned 1
	[0144.414] CloseHandle (hObject=0x148) returned 1
	[0144.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp")) returned 0x20
	[0144.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp")) returned 0x20
	[0144.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02752u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.418] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=108216) returned 1
	[0144.418] CloseHandle (hObject=0x148) returned 1
	[0144.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp")) returned 0x20
	[0144.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp")) returned 0x20
	[0144.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02753u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.418] SetEvent (hEvent=0xfc) returned 1
	[0144.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.418] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=108504) returned 1
	[0144.418] CloseHandle (hObject=0x148) returned 1
	[0144.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp")) returned 0x20
	[0144.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp")) returned 0x20
	[0144.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02754u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.419] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=108504) returned 1
	[0144.419] CloseHandle (hObject=0x148) returned 1
	[0144.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp")) returned 0x20
	[0144.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp")) returned 0x20
	[0144.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02755u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.421] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=197640) returned 1
	[0144.421] CloseHandle (hObject=0x148) returned 1
	[0144.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp")) returned 0x20
	[0144.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp")) returned 0x20
	[0144.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02756u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.421] SetEvent (hEvent=0xfc) returned 1
	[0144.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.422] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=197640) returned 1
	[0144.422] CloseHandle (hObject=0x148) returned 1
	[0144.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp")) returned 0x20
	[0144.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp")) returned 0x20
	[0144.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02757u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.422] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=198648) returned 1
	[0144.422] CloseHandle (hObject=0x148) returned 1
	[0144.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp")) returned 0x20
	[0144.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp")) returned 0x20
	[0144.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02758u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.423] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41170) returned 1
	[0144.423] CloseHandle (hObject=0x148) returned 1
	[0144.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg")) returned 0x20
	[0144.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg")) returned 0x20
	[0144.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02759j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.424] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50647) returned 1
	[0144.424] CloseHandle (hObject=0x148) returned 1
	[0144.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg")) returned 0x20
	[0144.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg")) returned 0x20
	[0144.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02810j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.425] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=62520) returned 1
	[0144.425] CloseHandle (hObject=0x148) returned 1
	[0144.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg")) returned 0x20
	[0144.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg")) returned 0x20
	[0144.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02829j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.428] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12530) returned 1
	[0144.428] CloseHandle (hObject=0x148) returned 1
	[0144.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif")) returned 0x20
	[0144.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif")) returned 0x20
	[0144.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02845g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.428] SetEvent (hEvent=0xfc) returned 1
	[0144.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.429] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15429) returned 1
	[0144.429] CloseHandle (hObject=0x148) returned 1
	[0144.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg")) returned 0x20
	[0144.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg")) returned 0x20
	[0144.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph02897j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.430] SetEvent (hEvent=0xfc) returned 1
	[0144.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.430] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15478) returned 1
	[0144.430] CloseHandle (hObject=0x148) returned 1
	[0144.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp")) returned 0x20
	[0144.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp")) returned 0x20
	[0144.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03011u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.431] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4118) returned 1
	[0144.431] CloseHandle (hObject=0x148) returned 1
	[0144.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp")) returned 0x20
	[0144.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp")) returned 0x20
	[0144.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03012u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.432] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18898) returned 1
	[0144.432] CloseHandle (hObject=0x148) returned 1
	[0144.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif")) returned 0x20
	[0144.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif")) returned 0x20
	[0144.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03014_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.433] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30895) returned 1
	[0144.433] CloseHandle (hObject=0x148) returned 1
	[0144.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg")) returned 0x20
	[0144.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg")) returned 0x20
	[0144.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03041i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.434] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29776) returned 1
	[0144.434] CloseHandle (hObject=0x148) returned 1
	[0144.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg")) returned 0x20
	[0144.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg")) returned 0x20
	[0144.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03143i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.435] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41795) returned 1
	[0144.435] CloseHandle (hObject=0x148) returned 1
	[0144.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg")) returned 0x20
	[0144.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg")) returned 0x20
	[0144.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03205i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.436] SetEvent (hEvent=0xfc) returned 1
	[0144.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.436] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42053) returned 1
	[0144.436] CloseHandle (hObject=0x148) returned 1
	[0144.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg")) returned 0x20
	[0144.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg")) returned 0x20
	[0144.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03224i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.438] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11170) returned 1
	[0144.438] CloseHandle (hObject=0x148) returned 1
	[0144.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg")) returned 0x20
	[0144.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg")) returned 0x20
	[0144.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03379i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.438] SetEvent (hEvent=0xfc) returned 1
	[0144.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.439] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12831) returned 1
	[0144.439] CloseHandle (hObject=0x148) returned 1
	[0144.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg")) returned 0x20
	[0144.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg")) returned 0x20
	[0144.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03380i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0144.440] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=48558) returned 1
	[0144.440] CloseHandle (hObject=0x148) returned 1
	[0144.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg")) returned 0x20
	[0144.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg")) returned 0x20
	[0144.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\ph03425i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.441] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3830) returned 1
	[0144.441] CloseHandle (hObject=0x1f8) returned 1
	[0144.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf")) returned 0x20
	[0144.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf")) returned 0x20
	[0144.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrt.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.441] SetEvent (hEvent=0xfc) returned 1
	[0144.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.442] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31404) returned 1
	[0144.442] CloseHandle (hObject=0x1f8) returned 1
	[0144.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf")) returned 0x20
	[0144.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf")) returned 0x20
	[0144.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\prrtinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.443] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=982) returned 1
	[0144.443] CloseHandle (hObject=0x1f8) returned 1
	[0144.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf")) returned 0x20
	[0144.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf")) returned 0x20
	[0144.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\psretro.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.444] SetEvent (hEvent=0xfc) returned 1
	[0144.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.445] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3594) returned 1
	[0144.445] CloseHandle (hObject=0x1f8) returned 1
	[0144.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf")) returned 0x20
	[0144.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf")) returned 0x20
	[0144.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketlg.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.445] SetEvent (hEvent=0xfc) returned 1
	[0144.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.446] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1910) returned 1
	[0144.446] CloseHandle (hObject=0x1f8) returned 1
	[0144.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf")) returned 0x20
	[0144.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf")) returned 0x20
	[0144.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pssketsm.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.447] SetEvent (hEvent=0xfc) returned 1
	[0144.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.447] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2834) returned 1
	[0144.447] CloseHandle (hObject=0x1f8) returned 1
	[0144.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf")) returned 0x20
	[0144.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf")) returned 0x20
	[0144.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\pswavy.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.546] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1772) returned 1
	[0144.546] CloseHandle (hObject=0x1f8) returned 1
	[0144.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf")) returned 0x20
	[0144.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf")) returned 0x20
	[0144.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\re00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.546] SetEvent (hEvent=0xfc) returned 1
	[0144.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.547] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5058) returned 1
	[0144.547] CloseHandle (hObject=0x1f8) returned 1
	[0144.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid")) returned 0x20
	[0144.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid")) returned 0x20
	[0144.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\schol_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.548] SetEvent (hEvent=0xfc) returned 1
	[0144.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.548] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6392) returned 1
	[0144.548] CloseHandle (hObject=0x1f8) returned 1
	[0144.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid")) returned 0x20
	[0144.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid")) returned 0x20
	[0144.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\show_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.549] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10762) returned 1
	[0144.549] CloseHandle (hObject=0x1f8) returned 1
	[0144.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf")) returned 0x20
	[0144.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf")) returned 0x20
	[0144.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.550] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31908) returned 1
	[0144.550] CloseHandle (hObject=0x1f8) returned 1
	[0144.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf")) returned 0x20
	[0144.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf")) returned 0x20
	[0144.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.551] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3932) returned 1
	[0144.551] CloseHandle (hObject=0x1f8) returned 1
	[0144.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf")) returned 0x20
	[0144.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf")) returned 0x20
	[0144.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00268_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.552] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7596) returned 1
	[0144.552] CloseHandle (hObject=0x1f8) returned 1
	[0144.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf")) returned 0x20
	[0144.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf")) returned 0x20
	[0144.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00286_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.552] SetEvent (hEvent=0xfc) returned 1
	[0144.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.553] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4712) returned 1
	[0144.554] CloseHandle (hObject=0x1f8) returned 1
	[0144.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf")) returned 0x20
	[0144.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf")) returned 0x20
	[0144.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.554] SetEvent (hEvent=0xfc) returned 1
	[0144.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.554] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8416) returned 1
	[0144.554] CloseHandle (hObject=0x1f8) returned 1
	[0144.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf")) returned 0x20
	[0144.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf")) returned 0x20
	[0144.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00308_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.555] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2788) returned 1
	[0144.555] CloseHandle (hObject=0x1f8) returned 1
	[0144.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf")) returned 0x20
	[0144.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf")) returned 0x20
	[0144.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00345_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.556] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1344) returned 1
	[0144.556] CloseHandle (hObject=0x1f8) returned 1
	[0144.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf")) returned 0x20
	[0144.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf")) returned 0x20
	[0144.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00452_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.557] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7608) returned 1
	[0144.557] CloseHandle (hObject=0x1f8) returned 1
	[0144.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf")) returned 0x20
	[0144.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf")) returned 0x20
	[0144.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl00712_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.558] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3292) returned 1
	[0144.558] CloseHandle (hObject=0x1f8) returned 1
	[0144.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf")) returned 0x20
	[0144.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf")) returned 0x20
	[0144.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01040_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.559] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1548) returned 1
	[0144.559] CloseHandle (hObject=0x1f8) returned 1
	[0144.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf")) returned 0x20
	[0144.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf")) returned 0x20
	[0144.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01041_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.560] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6916) returned 1
	[0144.560] CloseHandle (hObject=0x1f8) returned 1
	[0144.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf")) returned 0x20
	[0144.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf")) returned 0x20
	[0144.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01394_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.560] SetEvent (hEvent=0xfc) returned 1
	[0144.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.561] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5004) returned 1
	[0144.561] CloseHandle (hObject=0x1f8) returned 1
	[0144.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf")) returned 0x20
	[0144.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf")) returned 0x20
	[0144.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01395_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.562] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27844) returned 1
	[0144.562] CloseHandle (hObject=0x1f8) returned 1
	[0144.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf")) returned 0x20
	[0144.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf")) returned 0x20
	[0144.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sl01565_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.563] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13994) returned 1
	[0144.563] CloseHandle (hObject=0x1f8) returned 1
	[0144.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf")) returned 0x20
	[0144.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf")) returned 0x20
	[0144.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00017_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.563] SetEvent (hEvent=0xfc) returned 1
	[0144.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.564] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13046) returned 1
	[0144.564] CloseHandle (hObject=0x1f8) returned 1
	[0144.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf")) returned 0x20
	[0144.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf")) returned 0x20
	[0144.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00018_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.565] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31360) returned 1
	[0144.565] CloseHandle (hObject=0x1f8) returned 1
	[0144.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf")) returned 0x20
	[0144.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf")) returned 0x20
	[0144.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0144.567] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18260) returned 1
	[0144.567] CloseHandle (hObject=0x1f4) returned 1
	[0144.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf")) returned 0x20
	[0144.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf")) returned 0x20
	[0144.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0144.568] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8230) returned 1
	[0144.568] CloseHandle (hObject=0x1f4) returned 1
	[0144.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf")) returned 0x20
	[0144.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf")) returned 0x20
	[0144.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00159_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.569] SetEvent (hEvent=0xfc) returned 1
	[0144.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0144.569] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13746) returned 1
	[0144.569] CloseHandle (hObject=0x1f4) returned 1
	[0144.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf")) returned 0x20
	[0144.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf")) returned 0x20
	[0144.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.572] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15150) returned 1
	[0144.572] CloseHandle (hObject=0x1f8) returned 1
	[0144.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf")) returned 0x20
	[0144.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf")) returned 0x20
	[0144.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.572] SetEvent (hEvent=0xfc) returned 1
	[0144.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.573] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8770) returned 1
	[0144.573] CloseHandle (hObject=0x1f8) returned 1
	[0144.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf")) returned 0x20
	[0144.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf")) returned 0x20
	[0144.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.574] SetEvent (hEvent=0xfc) returned 1
	[0144.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.575] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36622) returned 1
	[0144.575] CloseHandle (hObject=0x1f8) returned 1
	[0144.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf")) returned 0x20
	[0144.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf")) returned 0x20
	[0144.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.575] SetEvent (hEvent=0xfc) returned 1
	[0144.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.575] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10300) returned 1
	[0144.575] CloseHandle (hObject=0x1f8) returned 1
	[0144.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf")) returned 0x20
	[0144.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf")) returned 0x20
	[0144.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.576] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20812) returned 1
	[0144.576] CloseHandle (hObject=0x1f8) returned 1
	[0144.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf")) returned 0x20
	[0144.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf")) returned 0x20
	[0144.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00190_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.577] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8336) returned 1
	[0144.577] CloseHandle (hObject=0x1f8) returned 1
	[0144.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf")) returned 0x20
	[0144.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf")) returned 0x20
	[0144.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.578] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10252) returned 1
	[0144.578] CloseHandle (hObject=0x1f8) returned 1
	[0144.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf")) returned 0x20
	[0144.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf")) returned 0x20
	[0144.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00192_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.579] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10176) returned 1
	[0144.579] CloseHandle (hObject=0x1f8) returned 1
	[0144.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf")) returned 0x20
	[0144.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf")) returned 0x20
	[0144.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.579] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9100) returned 1
	[0144.579] CloseHandle (hObject=0x1f8) returned 1
	[0144.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf")) returned 0x20
	[0144.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf")) returned 0x20
	[0144.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00197_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.582] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5630) returned 1
	[0144.582] CloseHandle (hObject=0x1f8) returned 1
	[0144.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf")) returned 0x20
	[0144.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf")) returned 0x20
	[0144.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00199_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.583] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10534) returned 1
	[0144.583] CloseHandle (hObject=0x1f8) returned 1
	[0144.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf")) returned 0x20
	[0144.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf")) returned 0x20
	[0144.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.583] SetEvent (hEvent=0xfc) returned 1
	[0144.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.584] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11936) returned 1
	[0144.584] CloseHandle (hObject=0x1f8) returned 1
	[0144.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf")) returned 0x20
	[0144.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf")) returned 0x20
	[0144.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00208_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.585] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20338) returned 1
	[0144.585] CloseHandle (hObject=0x1f8) returned 1
	[0144.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf")) returned 0x20
	[0144.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf")) returned 0x20
	[0144.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00212_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.585] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8052) returned 1
	[0144.585] CloseHandle (hObject=0x1f8) returned 1
	[0144.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf")) returned 0x20
	[0144.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf")) returned 0x20
	[0144.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00221_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.586] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7772) returned 1
	[0144.586] CloseHandle (hObject=0x1f8) returned 1
	[0144.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf")) returned 0x20
	[0144.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf")) returned 0x20
	[0144.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.686] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13890) returned 1
	[0144.686] CloseHandle (hObject=0x1f8) returned 1
	[0144.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf")) returned 0x20
	[0144.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf")) returned 0x20
	[0144.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00223_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.687] SetEvent (hEvent=0xfc) returned 1
	[0144.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.687] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61002) returned 1
	[0144.687] CloseHandle (hObject=0x1f8) returned 1
	[0144.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf")) returned 0x20
	[0144.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf")) returned 0x20
	[0144.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00333_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.688] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35734) returned 1
	[0144.688] CloseHandle (hObject=0x1f8) returned 1
	[0144.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf")) returned 0x20
	[0144.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf")) returned 0x20
	[0144.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00345_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.689] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=48096) returned 1
	[0144.689] CloseHandle (hObject=0x1f8) returned 1
	[0144.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf")) returned 0x20
	[0144.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf")) returned 0x20
	[0144.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00350_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.690] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37708) returned 1
	[0144.690] CloseHandle (hObject=0x1f8) returned 1
	[0144.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf")) returned 0x20
	[0144.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf")) returned 0x20
	[0144.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00352_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.691] SetEvent (hEvent=0xfc) returned 1
	[0144.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.691] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6472) returned 1
	[0144.691] CloseHandle (hObject=0x1f8) returned 1
	[0144.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf")) returned 0x20
	[0144.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf")) returned 0x20
	[0144.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00364_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.692] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20970) returned 1
	[0144.692] CloseHandle (hObject=0x1f8) returned 1
	[0144.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf")) returned 0x20
	[0144.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf")) returned 0x20
	[0144.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00367_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.693] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13064) returned 1
	[0144.693] CloseHandle (hObject=0x1f8) returned 1
	[0144.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf")) returned 0x20
	[0144.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf")) returned 0x20
	[0144.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00373_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.693] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10228) returned 1
	[0144.694] CloseHandle (hObject=0x1f8) returned 1
	[0144.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf")) returned 0x20
	[0144.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf")) returned 0x20
	[0144.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.694] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2940) returned 1
	[0144.694] CloseHandle (hObject=0x1f8) returned 1
	[0144.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf")) returned 0x20
	[0144.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf")) returned 0x20
	[0144.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.696] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2088) returned 1
	[0144.696] CloseHandle (hObject=0x1f8) returned 1
	[0144.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf")) returned 0x20
	[0144.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf")) returned 0x20
	[0144.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00391_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.696] SetEvent (hEvent=0xfc) returned 1
	[0144.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.696] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28750) returned 1
	[0144.697] CloseHandle (hObject=0x1f8) returned 1
	[0144.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf")) returned 0x20
	[0144.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf")) returned 0x20
	[0144.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00416_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.697] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5180) returned 1
	[0144.697] CloseHandle (hObject=0x1f8) returned 1
	[0144.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf")) returned 0x20
	[0144.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf")) returned 0x20
	[0144.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00423_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.698] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5444) returned 1
	[0144.698] CloseHandle (hObject=0x1f8) returned 1
	[0144.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf")) returned 0x20
	[0144.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf")) returned 0x20
	[0144.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.699] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2168) returned 1
	[0144.700] CloseHandle (hObject=0x1f8) returned 1
	[0144.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf")) returned 0x20
	[0144.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf")) returned 0x20
	[0144.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00452_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.700] SetEvent (hEvent=0xfc) returned 1
	[0144.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.700] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23020) returned 1
	[0144.700] CloseHandle (hObject=0x1f8) returned 1
	[0144.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf")) returned 0x20
	[0144.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf")) returned 0x20
	[0144.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.702] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2924) returned 1
	[0144.702] CloseHandle (hObject=0x1f8) returned 1
	[0144.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf")) returned 0x20
	[0144.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf")) returned 0x20
	[0144.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00454_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.702] SetEvent (hEvent=0xfc) returned 1
	[0144.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.703] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2760) returned 1
	[0144.703] CloseHandle (hObject=0x1f8) returned 1
	[0144.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf")) returned 0x20
	[0144.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf")) returned 0x20
	[0144.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00466_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.703] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4032) returned 1
	[0144.703] CloseHandle (hObject=0x1f8) returned 1
	[0144.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf")) returned 0x20
	[0144.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf")) returned 0x20
	[0144.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00476_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.704] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23304) returned 1
	[0144.704] CloseHandle (hObject=0x1f8) returned 1
	[0144.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf")) returned 0x20
	[0144.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf")) returned 0x20
	[0144.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00479_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.705] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11192) returned 1
	[0144.705] CloseHandle (hObject=0x1f8) returned 1
	[0144.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf")) returned 0x20
	[0144.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf")) returned 0x20
	[0144.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00483_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.706] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7768) returned 1
	[0144.706] CloseHandle (hObject=0x1f8) returned 1
	[0144.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf")) returned 0x20
	[0144.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf")) returned 0x20
	[0144.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00486_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.707] SetEvent (hEvent=0xfc) returned 1
	[0144.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.707] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2724) returned 1
	[0144.707] CloseHandle (hObject=0x1f8) returned 1
	[0144.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf")) returned 0x20
	[0144.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf")) returned 0x20
	[0144.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00505_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0144.708] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5924) returned 1
	[0144.708] CloseHandle (hObject=0x1f8) returned 1
	[0144.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf")) returned 0x20
	[0144.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf")) returned 0x20
	[0144.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.709] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9730) returned 1
	[0144.709] CloseHandle (hObject=0x168) returned 1
	[0144.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf")) returned 0x20
	[0144.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf")) returned 0x20
	[0144.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00555_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.710] SetEvent (hEvent=0xfc) returned 1
	[0144.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.710] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25184) returned 1
	[0144.710] CloseHandle (hObject=0x168) returned 1
	[0144.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf")) returned 0x20
	[0144.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf")) returned 0x20
	[0144.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.711] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40064) returned 1
	[0144.711] CloseHandle (hObject=0x168) returned 1
	[0144.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf")) returned 0x20
	[0144.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf")) returned 0x20
	[0144.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00610_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.712] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4070) returned 1
	[0144.712] CloseHandle (hObject=0x168) returned 1
	[0144.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf")) returned 0x20
	[0144.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf")) returned 0x20
	[0144.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.713] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20486) returned 1
	[0144.713] CloseHandle (hObject=0x168) returned 1
	[0144.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf")) returned 0x20
	[0144.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf")) returned 0x20
	[0144.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00633_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.714] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6842) returned 1
	[0144.714] CloseHandle (hObject=0x168) returned 1
	[0144.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf")) returned 0x20
	[0144.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf")) returned 0x20
	[0144.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.714] SetEvent (hEvent=0xfc) returned 1
	[0144.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.715] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1412) returned 1
	[0144.715] CloseHandle (hObject=0x168) returned 1
	[0144.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf")) returned 0x20
	[0144.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf")) returned 0x20
	[0144.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00656_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.716] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5714) returned 1
	[0144.716] CloseHandle (hObject=0x168) returned 1
	[0144.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf")) returned 0x20
	[0144.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf")) returned 0x20
	[0144.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.716] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5824) returned 1
	[0144.716] CloseHandle (hObject=0x168) returned 1
	[0144.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf")) returned 0x20
	[0144.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf")) returned 0x20
	[0144.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00670_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.717] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1488) returned 1
	[0144.717] CloseHandle (hObject=0x168) returned 1
	[0144.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf")) returned 0x20
	[0144.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf")) returned 0x20
	[0144.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00671_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.719] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25270) returned 1
	[0144.719] CloseHandle (hObject=0x168) returned 1
	[0144.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf")) returned 0x20
	[0144.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf")) returned 0x20
	[0144.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00683_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.719] SetEvent (hEvent=0xfc) returned 1
	[0144.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.720] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25346) returned 1
	[0144.720] CloseHandle (hObject=0x168) returned 1
	[0144.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf")) returned 0x20
	[0144.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf")) returned 0x20
	[0144.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00694_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.720] SetEvent (hEvent=0xfc) returned 1
	[0144.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.721] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13878) returned 1
	[0144.721] CloseHandle (hObject=0x168) returned 1
	[0144.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf")) returned 0x20
	[0144.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf")) returned 0x20
	[0144.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00704_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.722] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=91256) returned 1
	[0144.722] CloseHandle (hObject=0x168) returned 1
	[0144.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf")) returned 0x20
	[0144.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf")) returned 0x20
	[0144.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00726_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.722] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5976) returned 1
	[0144.723] CloseHandle (hObject=0x168) returned 1
	[0144.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf")) returned 0x20
	[0144.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf")) returned 0x20
	[0144.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00728_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.723] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5116) returned 1
	[0144.723] CloseHandle (hObject=0x168) returned 1
	[0144.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf")) returned 0x20
	[0144.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf")) returned 0x20
	[0144.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00732_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.724] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1632) returned 1
	[0144.724] CloseHandle (hObject=0x168) returned 1
	[0144.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf")) returned 0x20
	[0144.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf")) returned 0x20
	[0144.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00734_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.725] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1484) returned 1
	[0144.725] CloseHandle (hObject=0x168) returned 1
	[0144.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf")) returned 0x20
	[0144.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf")) returned 0x20
	[0144.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00735_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.816] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6220) returned 1
	[0144.816] CloseHandle (hObject=0x168) returned 1
	[0144.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf")) returned 0x20
	[0144.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf")) returned 0x20
	[0144.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00736_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.816] SetEvent (hEvent=0xfc) returned 1
	[0144.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.816] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6296) returned 1
	[0144.816] CloseHandle (hObject=0x168) returned 1
	[0144.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf")) returned 0x20
	[0144.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf")) returned 0x20
	[0144.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00910_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.817] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10744) returned 1
	[0144.817] CloseHandle (hObject=0x168) returned 1
	[0144.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf")) returned 0x20
	[0144.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf")) returned 0x20
	[0144.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00911_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.819] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10420) returned 1
	[0144.819] CloseHandle (hObject=0x168) returned 1
	[0144.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf")) returned 0x20
	[0144.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf")) returned 0x20
	[0144.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00913_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.819] SetEvent (hEvent=0xfc) returned 1
	[0144.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.820] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6924) returned 1
	[0144.820] CloseHandle (hObject=0x168) returned 1
	[0144.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf")) returned 0x20
	[0144.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf")) returned 0x20
	[0144.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.821] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7160) returned 1
	[0144.821] CloseHandle (hObject=0x168) returned 1
	[0144.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf")) returned 0x20
	[0144.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf")) returned 0x20
	[0144.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00915_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.821] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4720) returned 1
	[0144.821] CloseHandle (hObject=0x168) returned 1
	[0144.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf")) returned 0x20
	[0144.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf")) returned 0x20
	[0144.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00916_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.822] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9644) returned 1
	[0144.822] CloseHandle (hObject=0x168) returned 1
	[0144.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf")) returned 0x20
	[0144.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf")) returned 0x20
	[0144.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00917_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.824] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8028) returned 1
	[0144.824] CloseHandle (hObject=0x168) returned 1
	[0144.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf")) returned 0x20
	[0144.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf")) returned 0x20
	[0144.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00918_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.824] SetEvent (hEvent=0xfc) returned 1
	[0144.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.825] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10564) returned 1
	[0144.825] CloseHandle (hObject=0x168) returned 1
	[0144.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf")) returned 0x20
	[0144.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf")) returned 0x20
	[0144.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00935_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.826] SetEvent (hEvent=0xfc) returned 1
	[0144.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.826] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6496) returned 1
	[0144.826] CloseHandle (hObject=0x168) returned 1
	[0144.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf")) returned 0x20
	[0144.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf")) returned 0x20
	[0144.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00938_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.827] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5896) returned 1
	[0144.827] CloseHandle (hObject=0x168) returned 1
	[0144.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf")) returned 0x20
	[0144.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf")) returned 0x20
	[0144.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00941_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.828] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4708) returned 1
	[0144.828] CloseHandle (hObject=0x168) returned 1
	[0144.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf")) returned 0x20
	[0144.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf")) returned 0x20
	[0144.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00942_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.829] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7556) returned 1
	[0144.829] CloseHandle (hObject=0x168) returned 1
	[0144.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf")) returned 0x20
	[0144.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf")) returned 0x20
	[0144.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so00943_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.830] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=44570) returned 1
	[0144.830] CloseHandle (hObject=0x168) returned 1
	[0144.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf")) returned 0x20
	[0144.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf")) returned 0x20
	[0144.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.830] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23352) returned 1
	[0144.830] CloseHandle (hObject=0x168) returned 1
	[0144.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf")) returned 0x20
	[0144.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf")) returned 0x20
	[0144.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01063_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.832] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67422) returned 1
	[0144.832] CloseHandle (hObject=0x168) returned 1
	[0144.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf")) returned 0x20
	[0144.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf")) returned 0x20
	[0144.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.832] SetEvent (hEvent=0xfc) returned 1
	[0144.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.833] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17328) returned 1
	[0144.833] CloseHandle (hObject=0x168) returned 1
	[0144.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf")) returned 0x20
	[0144.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf")) returned 0x20
	[0144.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01560_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.833] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23000) returned 1
	[0144.834] CloseHandle (hObject=0x168) returned 1
	[0144.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf")) returned 0x20
	[0144.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf")) returned 0x20
	[0144.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01561_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.834] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30154) returned 1
	[0144.834] CloseHandle (hObject=0x168) returned 1
	[0144.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf")) returned 0x20
	[0144.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf")) returned 0x20
	[0144.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01563_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.836] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20904) returned 1
	[0144.836] CloseHandle (hObject=0x168) returned 1
	[0144.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf")) returned 0x20
	[0144.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf")) returned 0x20
	[0144.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01566_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.836] SetEvent (hEvent=0xfc) returned 1
	[0144.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.837] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21680) returned 1
	[0144.837] CloseHandle (hObject=0x168) returned 1
	[0144.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf")) returned 0x20
	[0144.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf")) returned 0x20
	[0144.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01568_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.839] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18336) returned 1
	[0144.839] CloseHandle (hObject=0x168) returned 1
	[0144.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf")) returned 0x20
	[0144.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf")) returned 0x20
	[0144.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01569_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.839] SetEvent (hEvent=0xfc) returned 1
	[0144.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.839] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43174) returned 1
	[0144.839] CloseHandle (hObject=0x168) returned 1
	[0144.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf")) returned 0x20
	[0144.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf")) returned 0x20
	[0144.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01575_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.840] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9574) returned 1
	[0144.840] CloseHandle (hObject=0x168) returned 1
	[0144.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf")) returned 0x20
	[0144.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf")) returned 0x20
	[0144.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01777_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.841] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27816) returned 1
	[0144.841] CloseHandle (hObject=0x168) returned 1
	[0144.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf")) returned 0x20
	[0144.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf")) returned 0x20
	[0144.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01785_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.842] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4232) returned 1
	[0144.842] CloseHandle (hObject=0x168) returned 1
	[0144.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf")) returned 0x20
	[0144.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf")) returned 0x20
	[0144.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01805_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.843] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1400) returned 1
	[0144.843] CloseHandle (hObject=0x168) returned 1
	[0144.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf")) returned 0x20
	[0144.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf")) returned 0x20
	[0144.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01905_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.844] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12422) returned 1
	[0144.844] CloseHandle (hObject=0x168) returned 1
	[0144.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf")) returned 0x20
	[0144.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf")) returned 0x20
	[0144.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so01954_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.845] SetEvent (hEvent=0xfc) returned 1
	[0144.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.846] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7444) returned 1
	[0144.846] CloseHandle (hObject=0x168) returned 1
	[0144.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf")) returned 0x20
	[0144.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf")) returned 0x20
	[0144.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02009_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.846] SetEvent (hEvent=0xfc) returned 1
	[0144.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.847] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7528) returned 1
	[0144.847] CloseHandle (hObject=0x168) returned 1
	[0144.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf")) returned 0x20
	[0144.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf")) returned 0x20
	[0144.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02022_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.848] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9128) returned 1
	[0144.848] CloseHandle (hObject=0x168) returned 1
	[0144.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf")) returned 0x20
	[0144.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf")) returned 0x20
	[0144.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02024_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.849] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8214) returned 1
	[0144.849] CloseHandle (hObject=0x168) returned 1
	[0144.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf")) returned 0x20
	[0144.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf")) returned 0x20
	[0144.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02025_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.849] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9416) returned 1
	[0144.850] CloseHandle (hObject=0x168) returned 1
	[0144.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf")) returned 0x20
	[0144.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf")) returned 0x20
	[0144.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02028_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.850] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9836) returned 1
	[0144.850] CloseHandle (hObject=0x168) returned 1
	[0144.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf")) returned 0x20
	[0144.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf")) returned 0x20
	[0144.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.951] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8158) returned 1
	[0144.951] CloseHandle (hObject=0x168) returned 1
	[0144.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf")) returned 0x20
	[0144.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf")) returned 0x20
	[0144.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02048_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.951] SetEvent (hEvent=0xfc) returned 1
	[0144.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.952] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19532) returned 1
	[0144.952] CloseHandle (hObject=0x168) returned 1
	[0144.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf")) returned 0x20
	[0144.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf")) returned 0x20
	[0144.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02055_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.953] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14378) returned 1
	[0144.953] CloseHandle (hObject=0x168) returned 1
	[0144.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf")) returned 0x20
	[0144.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf")) returned 0x20
	[0144.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02067_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.953] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6986) returned 1
	[0144.953] CloseHandle (hObject=0x168) returned 1
	[0144.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf")) returned 0x20
	[0144.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf")) returned 0x20
	[0144.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02094_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.954] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1344) returned 1
	[0144.954] CloseHandle (hObject=0x168) returned 1
	[0144.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf")) returned 0x20
	[0144.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf")) returned 0x20
	[0144.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02227_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.955] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=820) returned 1
	[0144.955] CloseHandle (hObject=0x168) returned 1
	[0144.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf")) returned 0x20
	[0144.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf")) returned 0x20
	[0144.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02228_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.956] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2304) returned 1
	[0144.956] CloseHandle (hObject=0x168) returned 1
	[0144.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf")) returned 0x20
	[0144.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf")) returned 0x20
	[0144.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.957] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3720) returned 1
	[0144.958] CloseHandle (hObject=0x168) returned 1
	[0144.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf")) returned 0x20
	[0144.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf")) returned 0x20
	[0144.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.958] SetEvent (hEvent=0xfc) returned 1
	[0144.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.958] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2272) returned 1
	[0144.958] CloseHandle (hObject=0x168) returned 1
	[0144.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf")) returned 0x20
	[0144.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf")) returned 0x20
	[0144.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02253_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.961] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2072) returned 1
	[0144.961] CloseHandle (hObject=0x168) returned 1
	[0144.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf")) returned 0x20
	[0144.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf")) returned 0x20
	[0144.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.961] SetEvent (hEvent=0xfc) returned 1
	[0144.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.962] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2708) returned 1
	[0144.962] CloseHandle (hObject=0x168) returned 1
	[0144.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf")) returned 0x20
	[0144.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf")) returned 0x20
	[0144.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02263_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.964] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=908) returned 1
	[0144.964] CloseHandle (hObject=0x168) returned 1
	[0144.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf")) returned 0x20
	[0144.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf")) returned 0x20
	[0144.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.965] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1564) returned 1
	[0144.965] CloseHandle (hObject=0x168) returned 1
	[0144.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf")) returned 0x20
	[0144.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf")) returned 0x20
	[0144.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02268_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.966] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2800) returned 1
	[0144.966] CloseHandle (hObject=0x168) returned 1
	[0144.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf")) returned 0x20
	[0144.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf")) returned 0x20
	[0144.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.967] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2664) returned 1
	[0144.967] CloseHandle (hObject=0x168) returned 1
	[0144.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf")) returned 0x20
	[0144.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf")) returned 0x20
	[0144.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.968] SetEvent (hEvent=0xfc) returned 1
	[0144.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.968] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12516) returned 1
	[0144.968] CloseHandle (hObject=0x168) returned 1
	[0144.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf")) returned 0x20
	[0144.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf")) returned 0x20
	[0144.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02276_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.970] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=96796) returned 1
	[0144.970] CloseHandle (hObject=0x168) returned 1
	[0144.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf")) returned 0x20
	[0144.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf")) returned 0x20
	[0144.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.970] SetEvent (hEvent=0xfc) returned 1
	[0144.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.971] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1648) returned 1
	[0144.971] CloseHandle (hObject=0x168) returned 1
	[0144.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf")) returned 0x20
	[0144.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf")) returned 0x20
	[0144.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02431_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.971] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1460) returned 1
	[0144.972] CloseHandle (hObject=0x168) returned 1
	[0144.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf")) returned 0x20
	[0144.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf")) returned 0x20
	[0144.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.972] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1284) returned 1
	[0144.972] CloseHandle (hObject=0x168) returned 1
	[0144.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf")) returned 0x20
	[0144.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf")) returned 0x20
	[0144.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.973] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6740) returned 1
	[0144.973] CloseHandle (hObject=0x168) returned 1
	[0144.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf")) returned 0x20
	[0144.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf")) returned 0x20
	[0144.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02464_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0144.974] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1396) returned 1
	[0144.974] CloseHandle (hObject=0x168) returned 1
	[0144.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf")) returned 0x20
	[0144.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf")) returned 0x20
	[0144.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02465_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.978] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6602) returned 1
	[0144.978] CloseHandle (hObject=0x200) returned 1
	[0144.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf")) returned 0x20
	[0144.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf")) returned 0x20
	[0144.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02578_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.979] SetEvent (hEvent=0xfc) returned 1
	[0144.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.979] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24556) returned 1
	[0144.979] CloseHandle (hObject=0x200) returned 1
	[0144.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf")) returned 0x20
	[0144.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf")) returned 0x20
	[0144.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02617_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.980] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32590) returned 1
	[0144.980] CloseHandle (hObject=0x200) returned 1
	[0144.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf")) returned 0x20
	[0144.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf")) returned 0x20
	[0144.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.981] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17164) returned 1
	[0144.981] CloseHandle (hObject=0x200) returned 1
	[0144.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf")) returned 0x20
	[0144.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf")) returned 0x20
	[0144.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02791_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.982] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23408) returned 1
	[0144.982] CloseHandle (hObject=0x200) returned 1
	[0144.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf")) returned 0x20
	[0144.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf")) returned 0x20
	[0144.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.983] SetEvent (hEvent=0xfc) returned 1
	[0144.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.984] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19322) returned 1
	[0144.984] CloseHandle (hObject=0x200) returned 1
	[0144.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf")) returned 0x20
	[0144.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf")) returned 0x20
	[0144.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02794_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.984] SetEvent (hEvent=0xfc) returned 1
	[0144.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.985] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75310) returned 1
	[0144.985] CloseHandle (hObject=0x200) returned 1
	[0144.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf")) returned 0x20
	[0144.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf")) returned 0x20
	[0144.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02862_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02862_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.986] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38522) returned 1
	[0144.986] CloseHandle (hObject=0x200) returned 1
	[0144.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf")) returned 0x20
	[0144.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf")) returned 0x20
	[0144.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02886_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02886_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.987] SetEvent (hEvent=0xfc) returned 1
	[0144.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.987] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8948) returned 1
	[0144.987] CloseHandle (hObject=0x200) returned 1
	[0144.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf")) returned 0x20
	[0144.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf")) returned 0x20
	[0144.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SO02958_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\so02958_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.988] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4219) returned 1
	[0144.988] CloseHandle (hObject=0x200) returned 1
	[0144.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid")) returned 0x20
	[0144.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid")) returned 0x20
	[0144.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\space_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.989] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6700) returned 1
	[0144.989] CloseHandle (hObject=0x200) returned 1
	[0144.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid")) returned 0x20
	[0144.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid")) returned 0x20
	[0144.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sprng_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.990] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3030) returned 1
	[0144.990] CloseHandle (hObject=0x200) returned 1
	[0144.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf")) returned 0x20
	[0144.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf")) returned 0x20
	[0144.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.991] SetEvent (hEvent=0xfc) returned 1
	[0144.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.991] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2582) returned 1
	[0144.991] CloseHandle (hObject=0x200) returned 1
	[0144.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf")) returned 0x20
	[0144.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf")) returned 0x20
	[0144.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\STUBBY2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\stubby2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.992] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14044) returned 1
	[0144.992] CloseHandle (hObject=0x200) returned 1
	[0144.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid")) returned 0x20
	[0144.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid")) returned 0x20
	[0144.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0144.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sumer_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0144.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0144.993] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8501) returned 1
	[0144.993] CloseHandle (hObject=0x200) returned 1
	[0145.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid")) returned 0x20
	[0145.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid")) returned 0x20
	[0145.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\swest_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.116] SetEvent (hEvent=0xfc) returned 1
	[0145.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.199] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6212) returned 1
	[0145.199] CloseHandle (hObject=0x200) returned 1
	[0145.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf")) returned 0x20
	[0145.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf")) returned 0x20
	[0145.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00127_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00127_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.199] SetEvent (hEvent=0xfc) returned 1
	[0145.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.200] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5138) returned 1
	[0145.200] CloseHandle (hObject=0x200) returned 1
	[0145.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf")) returned 0x20
	[0145.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf")) returned 0x20
	[0145.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00170_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.201] SetEvent (hEvent=0xfc) returned 1
	[0145.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.201] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1292) returned 1
	[0145.201] CloseHandle (hObject=0x200) returned 1
	[0145.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf")) returned 0x20
	[0145.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf")) returned 0x20
	[0145.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00560_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00560_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.202] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1912) returned 1
	[0145.202] CloseHandle (hObject=0x200) returned 1
	[0145.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf")) returned 0x20
	[0145.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf")) returned 0x20
	[0145.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00642_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00642_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.203] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8340) returned 1
	[0145.203] CloseHandle (hObject=0x200) returned 1
	[0145.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf")) returned 0x20
	[0145.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf")) returned 0x20
	[0145.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00788_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00788_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.204] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12252) returned 1
	[0145.204] CloseHandle (hObject=0x200) returned 1
	[0145.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf")) returned 0x20
	[0145.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf")) returned 0x20
	[0145.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00792_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00792_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.204] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10084) returned 1
	[0145.205] CloseHandle (hObject=0x200) returned 1
	[0145.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf")) returned 0x20
	[0145.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf")) returned 0x20
	[0145.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00795_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00795_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.206] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2480) returned 1
	[0145.206] CloseHandle (hObject=0x200) returned 1
	[0145.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf")) returned 0x20
	[0145.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf")) returned 0x20
	[0145.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY00882_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy00882_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.206] SetEvent (hEvent=0xfc) returned 1
	[0145.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.207] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1588) returned 1
	[0145.207] CloseHandle (hObject=0x200) returned 1
	[0145.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf")) returned 0x20
	[0145.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf")) returned 0x20
	[0145.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.208] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10036) returned 1
	[0145.208] CloseHandle (hObject=0x200) returned 1
	[0145.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf")) returned 0x20
	[0145.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf")) returned 0x20
	[0145.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01252_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.208] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1930) returned 1
	[0145.208] CloseHandle (hObject=0x200) returned 1
	[0145.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf")) returned 0x20
	[0145.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf")) returned 0x20
	[0145.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01253_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.210] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=806) returned 1
	[0145.210] CloseHandle (hObject=0x200) returned 1
	[0145.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf")) returned 0x20
	[0145.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf")) returned 0x20
	[0145.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01462_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01462_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.210] SetEvent (hEvent=0xfc) returned 1
	[0145.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.211] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1136) returned 1
	[0145.211] CloseHandle (hObject=0x200) returned 1
	[0145.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf")) returned 0x20
	[0145.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf")) returned 0x20
	[0145.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01491_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01491_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.212] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5060) returned 1
	[0145.212] CloseHandle (hObject=0x200) returned 1
	[0145.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf")) returned 0x20
	[0145.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf")) returned 0x20
	[0145.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01563_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01563_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.214] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3304) returned 1
	[0145.214] CloseHandle (hObject=0x200) returned 1
	[0145.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf")) returned 0x20
	[0145.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf")) returned 0x20
	[0145.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01572_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01572_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.215] SetEvent (hEvent=0xfc) returned 1
	[0145.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.215] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13198) returned 1
	[0145.215] CloseHandle (hObject=0x200) returned 1
	[0145.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf")) returned 0x20
	[0145.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf")) returned 0x20
	[0145.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\SY01590_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\sy01590_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.216] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2230) returned 1
	[0145.217] CloseHandle (hObject=0x200) returned 1
	[0145.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf")) returned 0x20
	[0145.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf")) returned 0x20
	[0145.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TAIL.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tail.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.219] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=48610) returned 1
	[0145.220] CloseHandle (hObject=0x200) returned 1
	[0145.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf")) returned 0x20
	[0145.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf")) returned 0x20
	[0145.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00011_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00011_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.221] SetEvent (hEvent=0xfc) returned 1
	[0145.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.221] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7518) returned 1
	[0145.221] CloseHandle (hObject=0x200) returned 1
	[0145.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf")) returned 0x20
	[0145.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf")) returned 0x20
	[0145.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00014_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00014_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.222] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9276) returned 1
	[0145.222] CloseHandle (hObject=0x200) returned 1
	[0145.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf")) returned 0x20
	[0145.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf")) returned 0x20
	[0145.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00018_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00018_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.224] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5978) returned 1
	[0145.224] CloseHandle (hObject=0x200) returned 1
	[0145.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf")) returned 0x20
	[0145.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf")) returned 0x20
	[0145.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00095_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.225] SetEvent (hEvent=0xfc) returned 1
	[0145.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.226] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7186) returned 1
	[0145.226] CloseHandle (hObject=0x200) returned 1
	[0145.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf")) returned 0x20
	[0145.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf")) returned 0x20
	[0145.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00211_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00211_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.226] SetEvent (hEvent=0xfc) returned 1
	[0145.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.227] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4644) returned 1
	[0145.227] CloseHandle (hObject=0x200) returned 1
	[0145.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf")) returned 0x20
	[0145.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf")) returned 0x20
	[0145.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00217_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00217_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.228] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7104) returned 1
	[0145.228] CloseHandle (hObject=0x200) returned 1
	[0145.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf")) returned 0x20
	[0145.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf")) returned 0x20
	[0145.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00218_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.229] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1848) returned 1
	[0145.229] CloseHandle (hObject=0x200) returned 1
	[0145.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf")) returned 0x20
	[0145.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf")) returned 0x20
	[0145.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00231_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.231] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3176) returned 1
	[0145.231] CloseHandle (hObject=0x200) returned 1
	[0145.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf")) returned 0x20
	[0145.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf")) returned 0x20
	[0145.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00234_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.231] SetEvent (hEvent=0xfc) returned 1
	[0145.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.232] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3980) returned 1
	[0145.232] CloseHandle (hObject=0x200) returned 1
	[0145.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf")) returned 0x20
	[0145.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf")) returned 0x20
	[0145.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00241_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.232] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3956) returned 1
	[0145.233] CloseHandle (hObject=0x200) returned 1
	[0145.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf")) returned 0x20
	[0145.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf")) returned 0x20
	[0145.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00246_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00246_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.233] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5564) returned 1
	[0145.233] CloseHandle (hObject=0x200) returned 1
	[0145.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf")) returned 0x20
	[0145.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf")) returned 0x20
	[0145.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00253_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00253_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.234] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7592) returned 1
	[0145.234] CloseHandle (hObject=0x200) returned 1
	[0145.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf")) returned 0x20
	[0145.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf")) returned 0x20
	[0145.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00255_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.330] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2012) returned 1
	[0145.330] CloseHandle (hObject=0x200) returned 1
	[0145.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf")) returned 0x20
	[0145.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf")) returned 0x20
	[0145.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TN00330_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tn00330_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.330] SetEvent (hEvent=0xfc) returned 1
	[0145.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.331] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10090) returned 1
	[0145.331] CloseHandle (hObject=0x200) returned 1
	[0145.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf")) returned 0x20
	[0145.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf")) returned 0x20
	[0145.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00006_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.332] SetEvent (hEvent=0xfc) returned 1
	[0145.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.332] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8844) returned 1
	[0145.332] CloseHandle (hObject=0x200) returned 1
	[0145.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf")) returned 0x20
	[0145.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf")) returned 0x20
	[0145.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00095_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00095_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.333] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2556) returned 1
	[0145.333] CloseHandle (hObject=0x200) returned 1
	[0145.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf")) returned 0x20
	[0145.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf")) returned 0x20
	[0145.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00097_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00097_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.334] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9660) returned 1
	[0145.334] CloseHandle (hObject=0x200) returned 1
	[0145.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf")) returned 0x20
	[0145.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf")) returned 0x20
	[0145.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00116_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.335] SetEvent (hEvent=0xfc) returned 1
	[0145.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.335] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4660) returned 1
	[0145.335] CloseHandle (hObject=0x200) returned 1
	[0145.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf")) returned 0x20
	[0145.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf")) returned 0x20
	[0145.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00126_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.336] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9052) returned 1
	[0145.336] CloseHandle (hObject=0x200) returned 1
	[0145.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf")) returned 0x20
	[0145.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf")) returned 0x20
	[0145.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00172_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.337] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8514) returned 1
	[0145.337] CloseHandle (hObject=0x200) returned 1
	[0145.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf")) returned 0x20
	[0145.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf")) returned 0x20
	[0145.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00178_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.338] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27840) returned 1
	[0145.338] CloseHandle (hObject=0x200) returned 1
	[0145.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf")) returned 0x20
	[0145.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf")) returned 0x20
	[0145.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00232_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00232_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.339] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31818) returned 1
	[0145.339] CloseHandle (hObject=0x200) returned 1
	[0145.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf")) returned 0x20
	[0145.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf")) returned 0x20
	[0145.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00233_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.340] SetEvent (hEvent=0xfc) returned 1
	[0145.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.341] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2272) returned 1
	[0145.341] CloseHandle (hObject=0x200) returned 1
	[0145.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf")) returned 0x20
	[0145.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf")) returned 0x20
	[0145.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00402_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00402_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.341] SetEvent (hEvent=0xfc) returned 1
	[0145.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.342] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8276) returned 1
	[0145.342] CloseHandle (hObject=0x200) returned 1
	[0145.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf")) returned 0x20
	[0145.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf")) returned 0x20
	[0145.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00482_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00482_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.342] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6144) returned 1
	[0145.343] CloseHandle (hObject=0x200) returned 1
	[0145.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf")) returned 0x20
	[0145.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf")) returned 0x20
	[0145.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\TR00494_.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\tr00494_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.344] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13358) returned 1
	[0145.344] CloseHandle (hObject=0x200) returned 1
	[0145.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid")) returned 0x20
	[0145.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid")) returned 0x20
	[0145.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\urban_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.344] SetEvent (hEvent=0xfc) returned 1
	[0145.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.345] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4961) returned 1
	[0145.345] CloseHandle (hObject=0x200) returned 1
	[0145.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid")) returned 0x20
	[0145.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid")) returned 0x20
	[0145.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\vctrn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.346] SetEvent (hEvent=0xfc) returned 1
	[0145.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.347] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=740) returned 1
	[0145.347] CloseHandle (hObject=0x204) returned 1
	[0145.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif")) returned 0x20
	[0145.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif")) returned 0x20
	[0145.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01219_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.347] SetEvent (hEvent=0xfc) returned 1
	[0145.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.348] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=363) returned 1
	[0145.348] CloseHandle (hObject=0x204) returned 1
	[0145.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif")) returned 0x20
	[0145.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif")) returned 0x20
	[0145.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01237_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.348] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=359) returned 1
	[0145.349] CloseHandle (hObject=0x204) returned 1
	[0145.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif")) returned 0x20
	[0145.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif")) returned 0x20
	[0145.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01238_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.349] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=410) returned 1
	[0145.349] CloseHandle (hObject=0x204) returned 1
	[0145.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif")) returned 0x20
	[0145.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif")) returned 0x20
	[0145.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01239_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.350] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=333) returned 1
	[0145.350] CloseHandle (hObject=0x204) returned 1
	[0145.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif")) returned 0x20
	[0145.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif")) returned 0x20
	[0145.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01240_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.351] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=386) returned 1
	[0145.351] CloseHandle (hObject=0x204) returned 1
	[0145.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif")) returned 0x20
	[0145.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif")) returned 0x20
	[0145.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01241_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.352] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=344) returned 1
	[0145.352] CloseHandle (hObject=0x204) returned 1
	[0145.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif")) returned 0x20
	[0145.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif")) returned 0x20
	[0145.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01242_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.353] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=431) returned 1
	[0145.353] CloseHandle (hObject=0x204) returned 1
	[0145.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif")) returned 0x20
	[0145.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif")) returned 0x20
	[0145.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01243_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.354] SetEvent (hEvent=0xfc) returned 1
	[0145.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.354] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=467) returned 1
	[0145.354] CloseHandle (hObject=0x204) returned 1
	[0145.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif")) returned 0x20
	[0145.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif")) returned 0x20
	[0145.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01244_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.356] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0145.356] CloseHandle (hObject=0x204) returned 1
	[0145.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif")) returned 0x20
	[0145.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif")) returned 0x20
	[0145.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01245_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.356] SetEvent (hEvent=0xfc) returned 1
	[0145.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.357] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=462) returned 1
	[0145.357] CloseHandle (hObject=0x204) returned 1
	[0145.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif")) returned 0x20
	[0145.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif")) returned 0x20
	[0145.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01246_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.357] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4087) returned 1
	[0145.358] CloseHandle (hObject=0x204) returned 1
	[0145.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif")) returned 0x20
	[0145.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif")) returned 0x20
	[0145.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01253_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.359] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=427) returned 1
	[0145.359] CloseHandle (hObject=0x204) returned 1
	[0145.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif")) returned 0x20
	[0145.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif")) returned 0x20
	[0145.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01268_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.360] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=597) returned 1
	[0145.360] CloseHandle (hObject=0x204) returned 1
	[0145.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif")) returned 0x20
	[0145.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif")) returned 0x20
	[0145.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01292_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.363] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=679) returned 1
	[0145.363] CloseHandle (hObject=0x204) returned 1
	[0145.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif")) returned 0x20
	[0145.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif")) returned 0x20
	[0145.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01293_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.364] SetEvent (hEvent=0xfc) returned 1
	[0145.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.364] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=685) returned 1
	[0145.364] CloseHandle (hObject=0x204) returned 1
	[0145.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif")) returned 0x20
	[0145.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif")) returned 0x20
	[0145.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01294_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.365] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=353) returned 1
	[0145.365] CloseHandle (hObject=0x204) returned 1
	[0145.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif")) returned 0x20
	[0145.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif")) returned 0x20
	[0145.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01295_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.366] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=495) returned 1
	[0145.366] CloseHandle (hObject=0x204) returned 1
	[0145.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif")) returned 0x20
	[0145.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif")) returned 0x20
	[0145.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01296_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.367] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=894) returned 1
	[0145.367] CloseHandle (hObject=0x204) returned 1
	[0145.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif")) returned 0x20
	[0145.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif")) returned 0x20
	[0145.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01297_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.483] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=700) returned 1
	[0145.483] CloseHandle (hObject=0x200) returned 1
	[0145.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif")) returned 0x20
	[0145.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif")) returned 0x20
	[0145.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01298_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.484] SetEvent (hEvent=0xfc) returned 1
	[0145.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.485] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2201) returned 1
	[0145.485] CloseHandle (hObject=0x200) returned 1
	[0145.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif")) returned 0x20
	[0145.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif")) returned 0x20
	[0145.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01734_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.485] SetEvent (hEvent=0xfc) returned 1
	[0145.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.486] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=707) returned 1
	[0145.486] CloseHandle (hObject=0x200) returned 1
	[0145.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif")) returned 0x20
	[0145.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif")) returned 0x20
	[0145.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01740_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.486] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=595) returned 1
	[0145.486] CloseHandle (hObject=0x200) returned 1
	[0145.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif")) returned 0x20
	[0145.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif")) returned 0x20
	[0145.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01742_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.487] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1237) returned 1
	[0145.487] CloseHandle (hObject=0x200) returned 1
	[0145.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif")) returned 0x20
	[0145.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif")) returned 0x20
	[0145.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01743_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.488] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=799) returned 1
	[0145.488] CloseHandle (hObject=0x200) returned 1
	[0145.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif")) returned 0x20
	[0145.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif")) returned 0x20
	[0145.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01744_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.489] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1452) returned 1
	[0145.489] CloseHandle (hObject=0x200) returned 1
	[0145.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif")) returned 0x20
	[0145.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif")) returned 0x20
	[0145.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01745_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.490] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=738) returned 1
	[0145.490] CloseHandle (hObject=0x200) returned 1
	[0145.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif")) returned 0x20
	[0145.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif")) returned 0x20
	[0145.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01746_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.491] SetEvent (hEvent=0xfc) returned 1
	[0145.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.491] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=903) returned 1
	[0145.491] CloseHandle (hObject=0x200) returned 1
	[0145.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif")) returned 0x20
	[0145.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif")) returned 0x20
	[0145.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01747_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.493] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=727) returned 1
	[0145.493] CloseHandle (hObject=0x200) returned 1
	[0145.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif")) returned 0x20
	[0145.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif")) returned 0x20
	[0145.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01748_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.493] SetEvent (hEvent=0xfc) returned 1
	[0145.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.494] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=948) returned 1
	[0145.494] CloseHandle (hObject=0x200) returned 1
	[0145.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif")) returned 0x20
	[0145.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif")) returned 0x20
	[0145.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01749_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.494] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1172) returned 1
	[0145.495] CloseHandle (hObject=0x200) returned 1
	[0145.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif")) returned 0x20
	[0145.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif")) returned 0x20
	[0145.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01750_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.495] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=953) returned 1
	[0145.495] CloseHandle (hObject=0x200) returned 1
	[0145.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif")) returned 0x20
	[0145.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif")) returned 0x20
	[0145.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01751_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.497] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=772) returned 1
	[0145.497] CloseHandle (hObject=0x200) returned 1
	[0145.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif")) returned 0x20
	[0145.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif")) returned 0x20
	[0145.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01770_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.497] SetEvent (hEvent=0xfc) returned 1
	[0145.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.498] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3652) returned 1
	[0145.498] CloseHandle (hObject=0x200) returned 1
	[0145.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif")) returned 0x20
	[0145.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif")) returned 0x20
	[0145.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01838_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.499] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1094) returned 1
	[0145.499] CloseHandle (hObject=0x200) returned 1
	[0145.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif")) returned 0x20
	[0145.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif")) returned 0x20
	[0145.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01839_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.500] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1534) returned 1
	[0145.500] CloseHandle (hObject=0x200) returned 1
	[0145.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif")) returned 0x20
	[0145.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif")) returned 0x20
	[0145.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01840_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.501] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1900) returned 1
	[0145.501] CloseHandle (hObject=0x200) returned 1
	[0145.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif")) returned 0x20
	[0145.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif")) returned 0x20
	[0145.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01842_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.502] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4817) returned 1
	[0145.502] CloseHandle (hObject=0x200) returned 1
	[0145.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif")) returned 0x20
	[0145.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif")) returned 0x20
	[0145.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb01843_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.503] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4139) returned 1
	[0145.503] CloseHandle (hObject=0x200) returned 1
	[0145.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif")) returned 0x20
	[0145.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif")) returned 0x20
	[0145.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wb02229_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.503] SetEvent (hEvent=0xfc) returned 1
	[0145.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.504] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2582) returned 1
	[0145.504] CloseHandle (hObject=0x200) returned 1
	[0145.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf")) returned 0x20
	[0145.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf")) returned 0x20
	[0145.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.505] SetEvent (hEvent=0xfc) returned 1
	[0145.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.505] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2966) returned 1
	[0145.505] CloseHandle (hObject=0x200) returned 1
	[0145.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf")) returned 0x20
	[0145.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf")) returned 0x20
	[0145.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WHIRL2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\whirl2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.506] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2582) returned 1
	[0145.506] CloseHandle (hObject=0x200) returned 1
	[0145.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf")) returned 0x20
	[0145.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf")) returned 0x20
	[0145.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING1.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.507] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2422) returned 1
	[0145.507] CloseHandle (hObject=0x200) returned 1
	[0145.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf")) returned 0x20
	[0145.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf")) returned 0x20
	[0145.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WING2.WMF" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wing2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.508] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6915) returned 1
	[0145.509] CloseHandle (hObject=0x200) returned 1
	[0145.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid")) returned 0x20
	[0145.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid")) returned 0x20
	[0145.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\clipart\\pub60cor\\wnter_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.509] SetEvent (hEvent=0xfc) returned 1
	[0145.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.510] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3959) returned 1
	[0145.510] CloseHandle (hObject=0x200) returned 1
	[0145.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif")) returned 0x20
	[0145.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif")) returned 0x20
	[0145.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143743.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.511] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47) returned 1
	[0145.511] CloseHandle (hObject=0x200) returned 1
	[0145.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif")) returned 0x20
	[0145.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif")) returned 0x20
	[0145.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143744.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.512] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=733) returned 1
	[0145.512] CloseHandle (hObject=0x200) returned 1
	[0145.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif")) returned 0x20
	[0145.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif")) returned 0x20
	[0145.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143745.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.513] SetEvent (hEvent=0xfc) returned 1
	[0145.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.513] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1429) returned 1
	[0145.513] CloseHandle (hObject=0x200) returned 1
	[0145.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif")) returned 0x20
	[0145.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif")) returned 0x20
	[0145.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143746.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.515] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4561) returned 1
	[0145.515] CloseHandle (hObject=0x200) returned 1
	[0145.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif")) returned 0x20
	[0145.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif")) returned 0x20
	[0145.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.515] SetEvent (hEvent=0xfc) returned 1
	[0145.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.516] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4899) returned 1
	[0145.516] CloseHandle (hObject=0x200) returned 1
	[0145.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif")) returned 0x20
	[0145.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif")) returned 0x20
	[0145.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.518] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1086) returned 1
	[0145.519] CloseHandle (hObject=0x200) returned 1
	[0145.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif")) returned 0x20
	[0145.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif")) returned 0x20
	[0145.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143750.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.519] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1042) returned 1
	[0145.519] CloseHandle (hObject=0x200) returned 1
	[0145.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif")) returned 0x20
	[0145.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif")) returned 0x20
	[0145.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143752.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.520] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7039) returned 1
	[0145.520] CloseHandle (hObject=0x200) returned 1
	[0145.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif")) returned 0x20
	[0145.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif")) returned 0x20
	[0145.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.521] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1709) returned 1
	[0145.521] CloseHandle (hObject=0x200) returned 1
	[0145.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif")) returned 0x20
	[0145.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif")) returned 0x20
	[0145.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143754.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.522] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1695) returned 1
	[0145.522] CloseHandle (hObject=0x200) returned 1
	[0145.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif")) returned 0x20
	[0145.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif")) returned 0x20
	[0145.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\j0143758.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.523] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4682) returned 1
	[0145.523] CloseHandle (hObject=0x200) returned 1
	[0145.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif")) returned 0x20
	[0145.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif")) returned 0x20
	[0145.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.712] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8215) returned 1
	[0145.712] CloseHandle (hObject=0x200) returned 1
	[0145.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif")) returned 0x20
	[0145.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif")) returned 0x20
	[0145.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.712] SetEvent (hEvent=0xfc) returned 1
	[0145.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.821] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2439) returned 1
	[0145.821] CloseHandle (hObject=0x200) returned 1
	[0145.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif")) returned 0x20
	[0145.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif")) returned 0x20
	[0145.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\clipart\\publisher\\backgrounds\\wb02055_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.822] SetEvent (hEvent=0xfc) returned 1
	[0145.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.923] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=259111) returned 1
	[0145.923] CloseHandle (hObject=0x200) returned 1
	[0145.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx")) returned 0x20
	[0145.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx")) returned 0x20
	[0145.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Apex.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\apex.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.924] SetEvent (hEvent=0xfc) returned 1
	[0145.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.925] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=68069) returned 1
	[0145.925] CloseHandle (hObject=0x200) returned 1
	[0145.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx")) returned 0x20
	[0145.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx")) returned 0x20
	[0145.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Aspect.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\aspect.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.925] SetEvent (hEvent=0xfc) returned 1
	[0145.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.926] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=95803) returned 1
	[0145.926] CloseHandle (hObject=0x200) returned 1
	[0145.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx")) returned 0x20
	[0145.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx")) returned 0x20
	[0145.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Austin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\austin.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.927] SetEvent (hEvent=0xfc) returned 1
	[0145.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.928] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=655107) returned 1
	[0145.928] CloseHandle (hObject=0x200) returned 1
	[0145.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx")) returned 0x20
	[0145.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx")) returned 0x20
	[0145.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Black Tie.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\black tie.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.928] SetEvent (hEvent=0xfc) returned 1
	[0145.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.929] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=101393) returned 1
	[0145.929] CloseHandle (hObject=0x200) returned 1
	[0145.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx")) returned 0x20
	[0145.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx")) returned 0x20
	[0145.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Civic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\civic.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.930] SetEvent (hEvent=0xfc) returned 1
	[0145.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.930] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67060) returned 1
	[0145.931] CloseHandle (hObject=0x200) returned 1
	[0145.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx")) returned 0x20
	[0145.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx")) returned 0x20
	[0145.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Clarity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\clarity.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.931] SetEvent (hEvent=0xfc) returned 1
	[0145.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.932] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=568653) returned 1
	[0145.932] CloseHandle (hObject=0x200) returned 1
	[0145.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx")) returned 0x20
	[0145.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx")) returned 0x20
	[0145.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Composite.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\composite.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.932] SetEvent (hEvent=0xfc) returned 1
	[0145.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.933] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=74765) returned 1
	[0145.933] CloseHandle (hObject=0x204) returned 1
	[0145.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx")) returned 0x20
	[0145.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx")) returned 0x20
	[0145.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Concourse.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\concourse.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.934] SetEvent (hEvent=0xfc) returned 1
	[0145.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.935] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2003652) returned 1
	[0145.935] CloseHandle (hObject=0x204) returned 1
	[0145.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx")) returned 0x20
	[0145.935] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0145.935] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Couture.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\couture.thmx")) returned 0
	[0145.935] SetEvent (hEvent=0xfc) returned 1
	[0145.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.936] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349663) returned 1
	[0145.936] CloseHandle (hObject=0x204) returned 1
	[0145.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx")) returned 0x20
	[0145.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx")) returned 0x20
	[0145.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Elemental.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\elemental.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.937] SetEvent (hEvent=0xfc) returned 1
	[0145.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.938] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=69473) returned 1
	[0145.938] CloseHandle (hObject=0x204) returned 1
	[0145.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx")) returned 0x20
	[0145.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx")) returned 0x20
	[0145.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Equity.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\equity.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.938] SetEvent (hEvent=0xfc) returned 1
	[0145.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.939] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49784) returned 1
	[0145.939] CloseHandle (hObject=0x204) returned 1
	[0145.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx")) returned 0x20
	[0145.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx")) returned 0x20
	[0145.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Essential.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\essential.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.940] SetEvent (hEvent=0xfc) returned 1
	[0145.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.941] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=55112) returned 1
	[0145.941] CloseHandle (hObject=0x204) returned 1
	[0145.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx")) returned 0x20
	[0145.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx")) returned 0x20
	[0145.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Executive.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\executive.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.941] SetEvent (hEvent=0xfc) returned 1
	[0145.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0145.942] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65704) returned 1
	[0145.942] CloseHandle (hObject=0x204) returned 1
	[0145.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx")) returned 0x20
	[0145.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx")) returned 0x20
	[0145.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Flow.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\flow.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.943] SetEvent (hEvent=0xfc) returned 1
	[0145.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.944] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=63508) returned 1
	[0145.944] CloseHandle (hObject=0x200) returned 1
	[0145.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx")) returned 0x20
	[0145.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx")) returned 0x20
	[0145.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Foundry.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\foundry.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.944] SetEvent (hEvent=0xfc) returned 1
	[0145.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.945] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53984) returned 1
	[0145.945] CloseHandle (hObject=0x200) returned 1
	[0145.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx")) returned 0x20
	[0145.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx")) returned 0x20
	[0145.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Grid.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\grid.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.946] SetEvent (hEvent=0xfc) returned 1
	[0145.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.947] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=393281) returned 1
	[0145.947] CloseHandle (hObject=0x200) returned 1
	[0145.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx")) returned 0x20
	[0145.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx")) returned 0x20
	[0145.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Hardcover.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\hardcover.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.947] SetEvent (hEvent=0xfc) returned 1
	[0145.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.948] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=245451) returned 1
	[0145.948] CloseHandle (hObject=0x200) returned 1
	[0145.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx")) returned 0x20
	[0145.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx")) returned 0x20
	[0145.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Horizon.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\horizon.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.949] SetEvent (hEvent=0xfc) returned 1
	[0145.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.950] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=83623) returned 1
	[0145.950] CloseHandle (hObject=0x200) returned 1
	[0145.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx")) returned 0x20
	[0145.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx")) returned 0x20
	[0145.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Median.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\median.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.950] SetEvent (hEvent=0xfc) returned 1
	[0145.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.951] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=80625) returned 1
	[0145.951] CloseHandle (hObject=0x200) returned 1
	[0145.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx")) returned 0x20
	[0145.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx")) returned 0x20
	[0145.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Metro.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\metro.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.952] SetEvent (hEvent=0xfc) returned 1
	[0145.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.953] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=88122) returned 1
	[0145.953] CloseHandle (hObject=0x200) returned 1
	[0145.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx")) returned 0x20
	[0145.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx")) returned 0x20
	[0145.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Module.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\module.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.953] SetEvent (hEvent=0xfc) returned 1
	[0145.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.954] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=617159) returned 1
	[0145.954] CloseHandle (hObject=0x200) returned 1
	[0145.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx")) returned 0x20
	[0145.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx")) returned 0x20
	[0145.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Newsprint.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\newsprint.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.955] SetEvent (hEvent=0xfc) returned 1
	[0145.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.956] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=78521) returned 1
	[0145.956] CloseHandle (hObject=0x200) returned 1
	[0145.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx")) returned 0x20
	[0145.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx")) returned 0x20
	[0145.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Opulent.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\opulent.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.956] SetEvent (hEvent=0xfc) returned 1
	[0145.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.957] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=93940) returned 1
	[0145.958] CloseHandle (hObject=0x200) returned 1
	[0145.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx")) returned 0x20
	[0145.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx")) returned 0x20
	[0145.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Oriel.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\oriel.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.958] SetEvent (hEvent=0xfc) returned 1
	[0145.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.959] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=87051) returned 1
	[0145.959] CloseHandle (hObject=0x200) returned 1
	[0145.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx")) returned 0x20
	[0145.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx")) returned 0x20
	[0145.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Origin.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\origin.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.959] SetEvent (hEvent=0xfc) returned 1
	[0145.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0145.961] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=270822) returned 1
	[0145.961] CloseHandle (hObject=0x200) returned 1
	[0145.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx")) returned 0x20
	[0145.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx")) returned 0x20
	[0145.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0145.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Paper.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\paper.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0145.961] SetEvent (hEvent=0xfc) returned 1
	[0145.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.060] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53594) returned 1
	[0146.060] CloseHandle (hObject=0x200) returned 1
	[0146.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx")) returned 0x20
	[0146.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx")) returned 0x20
	[0146.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Perspective.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\perspective.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.060] SetEvent (hEvent=0xfc) returned 1
	[0146.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.061] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=74912) returned 1
	[0146.061] CloseHandle (hObject=0x200) returned 1
	[0146.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx")) returned 0x20
	[0146.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx")) returned 0x20
	[0146.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Solstice.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\solstice.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.062] SetEvent (hEvent=0xfc) returned 1
	[0146.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.063] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=68995) returned 1
	[0146.063] CloseHandle (hObject=0x200) returned 1
	[0146.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx")) returned 0x20
	[0146.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx")) returned 0x20
	[0146.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Technic.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\technic.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.063] SetEvent (hEvent=0xfc) returned 1
	[0146.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.064] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89461) returned 1
	[0146.064] CloseHandle (hObject=0x200) returned 1
	[0146.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx")) returned 0x20
	[0146.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx")) returned 0x20
	[0146.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Thatch.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\thatch.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.065] SetEvent (hEvent=0xfc) returned 1
	[0146.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.066] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=928) returned 1
	[0146.066] CloseHandle (hObject=0x200) returned 1
	[0146.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml")) returned 0x20
	[0146.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml")) returned 0x20
	[0146.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.066] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=925) returned 1
	[0146.066] CloseHandle (hObject=0x200) returned 1
	[0146.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml")) returned 0x20
	[0146.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml")) returned 0x20
	[0146.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.068] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=959) returned 1
	[0146.068] CloseHandle (hObject=0x200) returned 1
	[0146.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml")) returned 0x20
	[0146.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml")) returned 0x20
	[0146.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.068] SetEvent (hEvent=0xfc) returned 1
	[0146.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.069] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=965) returned 1
	[0146.069] CloseHandle (hObject=0x200) returned 1
	[0146.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml")) returned 0x20
	[0146.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml")) returned 0x20
	[0146.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.070] SetEvent (hEvent=0xfc) returned 1
	[0146.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.070] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=961) returned 1
	[0146.070] CloseHandle (hObject=0x200) returned 1
	[0146.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml")) returned 0x20
	[0146.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml")) returned 0x20
	[0146.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.072] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=961) returned 1
	[0146.072] CloseHandle (hObject=0x200) returned 1
	[0146.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml")) returned 0x20
	[0146.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml")) returned 0x20
	[0146.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.073] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=927) returned 1
	[0146.073] CloseHandle (hObject=0x200) returned 1
	[0146.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml")) returned 0x20
	[0146.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml")) returned 0x20
	[0146.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.074] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=960) returned 1
	[0146.074] CloseHandle (hObject=0x200) returned 1
	[0146.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml")) returned 0x20
	[0146.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml")) returned 0x20
	[0146.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.074] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=926) returned 1
	[0146.074] CloseHandle (hObject=0x200) returned 1
	[0146.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml")) returned 0x20
	[0146.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml")) returned 0x20
	[0146.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.076] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=964) returned 1
	[0146.076] CloseHandle (hObject=0x200) returned 1
	[0146.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml")) returned 0x20
	[0146.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml")) returned 0x20
	[0146.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.077] SetEvent (hEvent=0xfc) returned 1
	[0146.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.077] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=964) returned 1
	[0146.077] CloseHandle (hObject=0x200) returned 1
	[0146.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml")) returned 0x20
	[0146.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml")) returned 0x20
	[0146.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.079] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=962) returned 1
	[0146.079] CloseHandle (hObject=0x200) returned 1
	[0146.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml")) returned 0x20
	[0146.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml")) returned 0x20
	[0146.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.079] SetEvent (hEvent=0xfc) returned 1
	[0146.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.079] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=964) returned 1
	[0146.080] CloseHandle (hObject=0x200) returned 1
	[0146.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml")) returned 0x20
	[0146.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml")) returned 0x20
	[0146.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.080] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=961) returned 1
	[0146.080] CloseHandle (hObject=0x200) returned 1
	[0146.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml")) returned 0x20
	[0146.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml")) returned 0x20
	[0146.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.081] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=928) returned 1
	[0146.081] CloseHandle (hObject=0x200) returned 1
	[0146.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml")) returned 0x20
	[0146.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml")) returned 0x20
	[0146.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.082] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=964) returned 1
	[0146.082] CloseHandle (hObject=0x200) returned 1
	[0146.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml")) returned 0x20
	[0146.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml")) returned 0x20
	[0146.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.083] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=959) returned 1
	[0146.083] CloseHandle (hObject=0x200) returned 1
	[0146.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml")) returned 0x20
	[0146.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml")) returned 0x20
	[0146.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.084] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=962) returned 1
	[0146.084] CloseHandle (hObject=0x200) returned 1
	[0146.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml")) returned 0x20
	[0146.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml")) returned 0x20
	[0146.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.085] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=928) returned 1
	[0146.132] CloseHandle (hObject=0x200) returned 1
	[0146.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml")) returned 0x20
	[0146.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml")) returned 0x20
	[0146.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.133] SetEvent (hEvent=0xfc) returned 1
	[0146.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.133] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=959) returned 1
	[0146.133] CloseHandle (hObject=0x200) returned 1
	[0146.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml")) returned 0x20
	[0146.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml")) returned 0x20
	[0146.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.134] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=964) returned 1
	[0146.134] CloseHandle (hObject=0x200) returned 1
	[0146.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml")) returned 0x20
	[0146.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml")) returned 0x20
	[0146.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.135] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=926) returned 1
	[0146.135] CloseHandle (hObject=0x200) returned 1
	[0146.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml")) returned 0x20
	[0146.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml")) returned 0x20
	[0146.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.135] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=961) returned 1
	[0146.136] CloseHandle (hObject=0x200) returned 1
	[0146.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml")) returned 0x20
	[0146.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml")) returned 0x20
	[0146.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.136] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=960) returned 1
	[0146.136] CloseHandle (hObject=0x200) returned 1
	[0146.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml")) returned 0x20
	[0146.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml")) returned 0x20
	[0146.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.138] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=961) returned 1
	[0146.138] CloseHandle (hObject=0x200) returned 1
	[0146.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml")) returned 0x20
	[0146.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml")) returned 0x20
	[0146.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.138] SetEvent (hEvent=0xfc) returned 1
	[0146.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.139] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=964) returned 1
	[0146.139] CloseHandle (hObject=0x200) returned 1
	[0146.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml")) returned 0x20
	[0146.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml")) returned 0x20
	[0146.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.139] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=962) returned 1
	[0146.140] CloseHandle (hObject=0x200) returned 1
	[0146.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml")) returned 0x20
	[0146.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml")) returned 0x20
	[0146.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.140] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=960) returned 1
	[0146.140] CloseHandle (hObject=0x200) returned 1
	[0146.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml")) returned 0x20
	[0146.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml")) returned 0x20
	[0146.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.142] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=961) returned 1
	[0146.142] CloseHandle (hObject=0x200) returned 1
	[0146.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml")) returned 0x20
	[0146.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml")) returned 0x20
	[0146.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.142] SetEvent (hEvent=0xfc) returned 1
	[0146.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.143] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=960) returned 1
	[0146.143] CloseHandle (hObject=0x200) returned 1
	[0146.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml")) returned 0x20
	[0146.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml")) returned 0x20
	[0146.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.143] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=966) returned 1
	[0146.143] CloseHandle (hObject=0x200) returned 1
	[0146.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml")) returned 0x20
	[0146.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml")) returned 0x20
	[0146.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.144] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=962) returned 1
	[0146.144] CloseHandle (hObject=0x200) returned 1
	[0146.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml")) returned 0x20
	[0146.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml")) returned 0x20
	[0146.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.145] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=965) returned 1
	[0146.145] CloseHandle (hObject=0x200) returned 1
	[0146.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml")) returned 0x20
	[0146.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml")) returned 0x20
	[0146.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.146] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=963) returned 1
	[0146.146] CloseHandle (hObject=0x200) returned 1
	[0146.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml")) returned 0x20
	[0146.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml")) returned 0x20
	[0146.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.249] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=962) returned 1
	[0146.249] CloseHandle (hObject=0x200) returned 1
	[0146.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml")) returned 0x20
	[0146.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml")) returned 0x20
	[0146.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.249] SetEvent (hEvent=0xfc) returned 1
	[0146.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.250] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=963) returned 1
	[0146.250] CloseHandle (hObject=0x200) returned 1
	[0146.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml")) returned 0x20
	[0146.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml")) returned 0x20
	[0146.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.252] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21089) returned 1
	[0146.252] CloseHandle (hObject=0x200) returned 1
	[0146.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx")) returned 0x20
	[0146.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx")) returned 0x20
	[0146.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Adjacency.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\adjacency.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.252] SetEvent (hEvent=0xfc) returned 1
	[0146.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.253] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27365) returned 1
	[0146.253] CloseHandle (hObject=0x200) returned 1
	[0146.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx")) returned 0x20
	[0146.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx")) returned 0x20
	[0146.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Angles.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\angles.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.253] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=218310) returned 1
	[0146.253] CloseHandle (hObject=0x200) returned 1
	[0146.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx")) returned 0x20
	[0146.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx")) returned 0x20
	[0146.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apex.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apex.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.254] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49025) returned 1
	[0146.254] CloseHandle (hObject=0x200) returned 1
	[0146.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx")) returned 0x20
	[0146.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx")) returned 0x20
	[0146.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Apothecary.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\apothecary.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.255] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22554) returned 1
	[0146.255] CloseHandle (hObject=0x200) returned 1
	[0146.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx")) returned 0x20
	[0146.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx")) returned 0x20
	[0146.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Aspect.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\aspect.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.256] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26989) returned 1
	[0146.256] CloseHandle (hObject=0x200) returned 1
	[0146.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx")) returned 0x20
	[0146.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx")) returned 0x20
	[0146.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Austin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\austin.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.257] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=618119) returned 1
	[0146.257] CloseHandle (hObject=0x200) returned 1
	[0146.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx")) returned 0x20
	[0146.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx")) returned 0x20
	[0146.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Black Tie.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\black tie.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.258] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42917) returned 1
	[0146.258] CloseHandle (hObject=0x200) returned 1
	[0146.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx")) returned 0x20
	[0146.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx")) returned 0x20
	[0146.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Civic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\civic.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.259] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32818) returned 1
	[0146.259] CloseHandle (hObject=0x200) returned 1
	[0146.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx")) returned 0x20
	[0146.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx")) returned 0x20
	[0146.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Clarity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\clarity.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.259] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=533988) returned 1
	[0146.259] CloseHandle (hObject=0x200) returned 1
	[0146.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx")) returned 0x20
	[0146.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx")) returned 0x20
	[0146.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Composite.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\composite.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.260] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22417) returned 1
	[0146.260] CloseHandle (hObject=0x200) returned 1
	[0146.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx")) returned 0x20
	[0146.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx")) returned 0x20
	[0146.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Concourse.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\concourse.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.261] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1967905) returned 1
	[0146.261] CloseHandle (hObject=0x200) returned 1
	[0146.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx")) returned 0x20
	[0146.261] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0146.261] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Couture.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\couture.eftx")) returned 0
	[0146.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.262] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=314017) returned 1
	[0146.262] CloseHandle (hObject=0x200) returned 1
	[0146.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx")) returned 0x20
	[0146.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx")) returned 0x20
	[0146.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Elemental.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\elemental.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.263] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24611) returned 1
	[0146.263] CloseHandle (hObject=0x200) returned 1
	[0146.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx")) returned 0x20
	[0146.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx")) returned 0x20
	[0146.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Equity.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\equity.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.264] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16350) returned 1
	[0146.264] CloseHandle (hObject=0x200) returned 1
	[0146.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx")) returned 0x20
	[0146.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx")) returned 0x20
	[0146.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Essential.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\essential.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.264] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21156) returned 1
	[0146.264] CloseHandle (hObject=0x200) returned 1
	[0146.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx")) returned 0x20
	[0146.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx")) returned 0x20
	[0146.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Executive.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\executive.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.265] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26648) returned 1
	[0146.265] CloseHandle (hObject=0x200) returned 1
	[0146.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx")) returned 0x20
	[0146.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx")) returned 0x20
	[0146.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Flow.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\flow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.266] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18226) returned 1
	[0146.266] CloseHandle (hObject=0x200) returned 1
	[0146.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx")) returned 0x20
	[0146.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx")) returned 0x20
	[0146.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Foundry.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\foundry.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.268] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18639) returned 1
	[0146.268] CloseHandle (hObject=0x200) returned 1
	[0146.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx")) returned 0x20
	[0146.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx")) returned 0x20
	[0146.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Grid.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\grid.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.269] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=350689) returned 1
	[0146.269] CloseHandle (hObject=0x200) returned 1
	[0146.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx")) returned 0x20
	[0146.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx")) returned 0x20
	[0146.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Hardcover.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\hardcover.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.270] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=211090) returned 1
	[0146.270] CloseHandle (hObject=0x200) returned 1
	[0146.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx")) returned 0x20
	[0146.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx")) returned 0x20
	[0146.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Horizon.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\horizon.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.271] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39546) returned 1
	[0146.271] CloseHandle (hObject=0x200) returned 1
	[0146.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx")) returned 0x20
	[0146.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx")) returned 0x20
	[0146.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Median.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\median.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.271] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24117) returned 1
	[0146.272] CloseHandle (hObject=0x200) returned 1
	[0146.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx")) returned 0x20
	[0146.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx")) returned 0x20
	[0146.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Metro.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\metro.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.272] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43357) returned 1
	[0146.272] CloseHandle (hObject=0x200) returned 1
	[0146.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx")) returned 0x20
	[0146.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx")) returned 0x20
	[0146.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Module.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\module.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.273] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=582401) returned 1
	[0146.273] CloseHandle (hObject=0x200) returned 1
	[0146.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx")) returned 0x20
	[0146.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx")) returned 0x20
	[0146.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Newsprint.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\newsprint.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.274] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32857) returned 1
	[0146.274] CloseHandle (hObject=0x200) returned 1
	[0146.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx")) returned 0x20
	[0146.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx")) returned 0x20
	[0146.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Opulent.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\opulent.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.275] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43193) returned 1
	[0146.275] CloseHandle (hObject=0x200) returned 1
	[0146.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx")) returned 0x20
	[0146.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx")) returned 0x20
	[0146.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Oriel.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\oriel.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.276] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40941) returned 1
	[0146.276] CloseHandle (hObject=0x200) returned 1
	[0146.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx")) returned 0x20
	[0146.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx")) returned 0x20
	[0146.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Origin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\origin.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.277] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=228746) returned 1
	[0146.277] CloseHandle (hObject=0x200) returned 1
	[0146.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx")) returned 0x20
	[0146.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx")) returned 0x20
	[0146.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Paper.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\paper.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.277] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21423) returned 1
	[0146.277] CloseHandle (hObject=0x200) returned 1
	[0146.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx")) returned 0x20
	[0146.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx")) returned 0x20
	[0146.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Perspective.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\perspective.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.278] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=782121) returned 1
	[0146.278] CloseHandle (hObject=0x200) returned 1
	[0146.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx")) returned 0x20
	[0146.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx")) returned 0x20
	[0146.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Pushpin.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\pushpin.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.279] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27789) returned 1
	[0146.279] CloseHandle (hObject=0x200) returned 1
	[0146.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx")) returned 0x20
	[0146.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx")) returned 0x20
	[0146.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Slipstream.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\slipstream.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.280] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27781) returned 1
	[0146.280] CloseHandle (hObject=0x200) returned 1
	[0146.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx")) returned 0x20
	[0146.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx")) returned 0x20
	[0146.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Solstice.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\solstice.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.281] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23692) returned 1
	[0146.281] CloseHandle (hObject=0x200) returned 1
	[0146.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx")) returned 0x20
	[0146.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx")) returned 0x20
	[0146.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Technic.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\technic.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.282] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41295) returned 1
	[0146.282] CloseHandle (hObject=0x200) returned 1
	[0146.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx")) returned 0x20
	[0146.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx")) returned 0x20
	[0146.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Thatch.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\thatch.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.282] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=129924) returned 1
	[0146.282] CloseHandle (hObject=0x200) returned 1
	[0146.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx")) returned 0x20
	[0146.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx")) returned 0x20
	[0146.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Trek.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\trek.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.462] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19611) returned 1
	[0146.462] CloseHandle (hObject=0x204) returned 1
	[0146.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx")) returned 0x20
	[0146.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx")) returned 0x20
	[0146.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Urban.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\urban.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.463] SetEvent (hEvent=0xfc) returned 1
	[0146.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.464] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=112504) returned 1
	[0146.464] CloseHandle (hObject=0x204) returned 1
	[0146.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx")) returned 0x20
	[0146.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx")) returned 0x20
	[0146.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\Waveform.eftx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme effects\\waveform.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.464] SetEvent (hEvent=0xfc) returned 1
	[0146.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.466] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3609) returned 1
	[0146.466] CloseHandle (hObject=0x204) returned 1
	[0146.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml")) returned 0x20
	[0146.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml")) returned 0x20
	[0146.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.466] SetEvent (hEvent=0xfc) returned 1
	[0146.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.467] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3626) returned 1
	[0146.467] CloseHandle (hObject=0x204) returned 1
	[0146.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml")) returned 0x20
	[0146.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml")) returned 0x20
	[0146.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.468] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3822) returned 1
	[0146.468] CloseHandle (hObject=0x204) returned 1
	[0146.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml")) returned 0x20
	[0146.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml")) returned 0x20
	[0146.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.469] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3615) returned 1
	[0146.469] CloseHandle (hObject=0x204) returned 1
	[0146.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml")) returned 0x20
	[0146.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml")) returned 0x20
	[0146.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.469] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3595) returned 1
	[0146.470] CloseHandle (hObject=0x204) returned 1
	[0146.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml")) returned 0x20
	[0146.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml")) returned 0x20
	[0146.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.471] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3606) returned 1
	[0146.471] CloseHandle (hObject=0x204) returned 1
	[0146.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml")) returned 0x20
	[0146.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml")) returned 0x20
	[0146.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.471] SetEvent (hEvent=0xfc) returned 1
	[0146.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.472] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3835) returned 1
	[0146.472] CloseHandle (hObject=0x204) returned 1
	[0146.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml")) returned 0x20
	[0146.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml")) returned 0x20
	[0146.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.474] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3615) returned 1
	[0146.474] CloseHandle (hObject=0x204) returned 1
	[0146.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml")) returned 0x20
	[0146.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml")) returned 0x20
	[0146.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.474] SetEvent (hEvent=0xfc) returned 1
	[0146.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.475] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3599) returned 1
	[0146.475] CloseHandle (hObject=0x204) returned 1
	[0146.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml")) returned 0x20
	[0146.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml")) returned 0x20
	[0146.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.476] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3598) returned 1
	[0146.476] CloseHandle (hObject=0x204) returned 1
	[0146.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml")) returned 0x20
	[0146.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml")) returned 0x20
	[0146.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.477] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3526) returned 1
	[0146.477] CloseHandle (hObject=0x204) returned 1
	[0146.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml")) returned 0x20
	[0146.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml")) returned 0x20
	[0146.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.478] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3836) returned 1
	[0146.478] CloseHandle (hObject=0x204) returned 1
	[0146.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml")) returned 0x20
	[0146.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml")) returned 0x20
	[0146.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.478] SetEvent (hEvent=0xfc) returned 1
	[0146.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.479] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3656) returned 1
	[0146.479] CloseHandle (hObject=0x204) returned 1
	[0146.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml")) returned 0x20
	[0146.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml")) returned 0x20
	[0146.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.480] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3829) returned 1
	[0146.480] CloseHandle (hObject=0x204) returned 1
	[0146.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml")) returned 0x20
	[0146.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml")) returned 0x20
	[0146.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.481] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3606) returned 1
	[0146.481] CloseHandle (hObject=0x204) returned 1
	[0146.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml")) returned 0x20
	[0146.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml")) returned 0x20
	[0146.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.481] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3631) returned 1
	[0146.482] CloseHandle (hObject=0x204) returned 1
	[0146.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml")) returned 0x20
	[0146.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml")) returned 0x20
	[0146.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.482] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3509) returned 1
	[0146.482] CloseHandle (hObject=0x204) returned 1
	[0146.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml")) returned 0x20
	[0146.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml")) returned 0x20
	[0146.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.484] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3796) returned 1
	[0146.484] CloseHandle (hObject=0x204) returned 1
	[0146.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml")) returned 0x20
	[0146.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml")) returned 0x20
	[0146.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.484] SetEvent (hEvent=0xfc) returned 1
	[0146.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.485] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3673) returned 1
	[0146.485] CloseHandle (hObject=0x204) returned 1
	[0146.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml")) returned 0x20
	[0146.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml")) returned 0x20
	[0146.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.486] SetEvent (hEvent=0xfc) returned 1
	[0146.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.486] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3849) returned 1
	[0146.486] CloseHandle (hObject=0x204) returned 1
	[0146.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml")) returned 0x20
	[0146.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml")) returned 0x20
	[0146.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.487] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3626) returned 1
	[0146.487] CloseHandle (hObject=0x204) returned 1
	[0146.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml")) returned 0x20
	[0146.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml")) returned 0x20
	[0146.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.488] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3821) returned 1
	[0146.488] CloseHandle (hObject=0x204) returned 1
	[0146.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml")) returned 0x20
	[0146.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml")) returned 0x20
	[0146.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.489] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3603) returned 1
	[0146.489] CloseHandle (hObject=0x204) returned 1
	[0146.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml")) returned 0x20
	[0146.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml")) returned 0x20
	[0146.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.490] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3589) returned 1
	[0146.490] CloseHandle (hObject=0x204) returned 1
	[0146.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml")) returned 0x20
	[0146.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml")) returned 0x20
	[0146.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.491] SetEvent (hEvent=0xfc) returned 1
	[0146.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.491] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3641) returned 1
	[0146.491] CloseHandle (hObject=0x204) returned 1
	[0146.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml")) returned 0x20
	[0146.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml")) returned 0x20
	[0146.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.492] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3605) returned 1
	[0146.492] CloseHandle (hObject=0x204) returned 1
	[0146.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml")) returned 0x20
	[0146.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml")) returned 0x20
	[0146.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.494] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3585) returned 1
	[0146.494] CloseHandle (hObject=0x208) returned 1
	[0146.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml")) returned 0x20
	[0146.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml")) returned 0x20
	[0146.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.494] SetEvent (hEvent=0xfc) returned 1
	[0146.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.497] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3616) returned 1
	[0146.497] CloseHandle (hObject=0x208) returned 1
	[0146.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml")) returned 0x20
	[0146.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml")) returned 0x20
	[0146.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.497] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3613) returned 1
	[0146.498] CloseHandle (hObject=0x208) returned 1
	[0146.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml")) returned 0x20
	[0146.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml")) returned 0x20
	[0146.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.498] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3674) returned 1
	[0146.498] CloseHandle (hObject=0x208) returned 1
	[0146.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml")) returned 0x20
	[0146.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml")) returned 0x20
	[0146.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.500] SetEvent (hEvent=0xfc) returned 1
	[0146.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.500] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3821) returned 1
	[0146.500] CloseHandle (hObject=0x208) returned 1
	[0146.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml")) returned 0x20
	[0146.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml")) returned 0x20
	[0146.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.501] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3628) returned 1
	[0146.501] CloseHandle (hObject=0x208) returned 1
	[0146.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml")) returned 0x20
	[0146.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml")) returned 0x20
	[0146.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.502] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3599) returned 1
	[0146.502] CloseHandle (hObject=0x208) returned 1
	[0146.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml")) returned 0x20
	[0146.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml")) returned 0x20
	[0146.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.503] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3711) returned 1
	[0146.503] CloseHandle (hObject=0x208) returned 1
	[0146.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml")) returned 0x20
	[0146.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml")) returned 0x20
	[0146.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.504] SetEvent (hEvent=0xfc) returned 1
	[0146.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.504] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3608) returned 1
	[0146.504] CloseHandle (hObject=0x208) returned 1
	[0146.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml")) returned 0x20
	[0146.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml")) returned 0x20
	[0146.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.506] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3817) returned 1
	[0146.506] CloseHandle (hObject=0x208) returned 1
	[0146.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml")) returned 0x20
	[0146.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml")) returned 0x20
	[0146.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.507] SetEvent (hEvent=0xfc) returned 1
	[0146.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.507] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3603) returned 1
	[0146.507] CloseHandle (hObject=0x208) returned 1
	[0146.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml")) returned 0x20
	[0146.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml")) returned 0x20
	[0146.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.508] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3839) returned 1
	[0146.508] CloseHandle (hObject=0x208) returned 1
	[0146.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml")) returned 0x20
	[0146.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml")) returned 0x20
	[0146.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.509] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3616) returned 1
	[0146.509] CloseHandle (hObject=0x208) returned 1
	[0146.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml")) returned 0x20
	[0146.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml")) returned 0x20
	[0146.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.510] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3609) returned 1
	[0146.510] CloseHandle (hObject=0x208) returned 1
	[0146.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml")) returned 0x20
	[0146.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml")) returned 0x20
	[0146.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.511] SetEvent (hEvent=0xfc) returned 1
	[0146.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.511] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3604) returned 1
	[0146.511] CloseHandle (hObject=0x208) returned 1
	[0146.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml")) returned 0x20
	[0146.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml")) returned 0x20
	[0146.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.512] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3577) returned 1
	[0146.512] CloseHandle (hObject=0x208) returned 1
	[0146.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml")) returned 0x20
	[0146.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml")) returned 0x20
	[0146.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.513] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=172604) returned 1
	[0146.513] CloseHandle (hObject=0x208) returned 1
	[0146.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx")) returned 0x20
	[0146.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx")) returned 0x20
	[0146.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Trek.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\trek.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.514] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=64624) returned 1
	[0146.514] CloseHandle (hObject=0x208) returned 1
	[0146.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx")) returned 0x20
	[0146.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx")) returned 0x20
	[0146.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Urban.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\urban.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.515] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75264) returned 1
	[0146.515] CloseHandle (hObject=0x208) returned 1
	[0146.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx")) returned 0x20
	[0146.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx")) returned 0x20
	[0146.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Verve.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\verve.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.515] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=181889) returned 1
	[0146.516] CloseHandle (hObject=0x208) returned 1
	[0146.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx")) returned 0x20
	[0146.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx")) returned 0x20
	[0146.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Document Themes 14\\Waveform.thmx" (normalized: "c:\\program files\\microsoft office\\document themes 14\\waveform.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0146.517] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=312400) returned 1
	[0146.517] CloseHandle (hObject=0x208) returned 1
	[0146.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml")) returned 0x20
	[0146.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml")) returned 0x20
	[0146.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\CAGCAT10.MML" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\1033\\cagcat10.mml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.DLL" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0146.521] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15776) returned 1
	[0146.521] CloseHandle (hObject=0x168) returned 1
	[0146.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.DLL" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.dll")) returned 0x20
	[0146.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.DLL" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.dll")) returned 0x20
	[0146.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.DLL" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.521] SetEvent (hEvent=0xfc) returned 1
	[0146.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0146.522] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=394200) returned 1
	[0146.522] CloseHandle (hObject=0x168) returned 1
	[0146.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw")) returned 0x20
	[0146.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw")) returned 0x20
	[0146.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\CAGCAT10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\cagcat10.mmw"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0146.528] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22618) returned 1
	[0146.528] CloseHandle (hObject=0x168) returned 1
	[0146.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav")) returned 0x20
	[0146.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav")) returned 0x20
	[0146.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\ELPHRG01.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\elphrg01.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.528] SetEvent (hEvent=0xfc) returned 1
	[0146.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.529] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13826) returned 1
	[0146.529] CloseHandle (hObject=0x204) returned 1
	[0146.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf")) returned 0x20
	[0146.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf")) returned 0x20
	[0146.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0088542.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0088542.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.530] SetEvent (hEvent=0xfc) returned 1
	[0146.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.531] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=34944) returned 1
	[0146.531] CloseHandle (hObject=0x204) returned 1
	[0146.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf")) returned 0x20
	[0146.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf")) returned 0x20
	[0146.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090070.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.531] SetEvent (hEvent=0xfc) returned 1
	[0146.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.532] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33546) returned 1
	[0146.532] CloseHandle (hObject=0x204) returned 1
	[0146.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf")) returned 0x20
	[0146.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf")) returned 0x20
	[0146.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0090386.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0090386.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.533] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=34570) returned 1
	[0146.533] CloseHandle (hObject=0x204) returned 1
	[0146.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf")) returned 0x20
	[0146.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf")) returned 0x20
	[0146.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149407.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149407.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.534] SetEvent (hEvent=0xfc) returned 1
	[0146.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.534] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24282) returned 1
	[0146.534] CloseHandle (hObject=0x204) returned 1
	[0146.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf")) returned 0x20
	[0146.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf")) returned 0x20
	[0146.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149481.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149481.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.535] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43018) returned 1
	[0146.535] CloseHandle (hObject=0x204) returned 1
	[0146.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf")) returned 0x20
	[0146.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf")) returned 0x20
	[0146.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149627.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149627.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.537] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8186) returned 1
	[0146.537] CloseHandle (hObject=0x204) returned 1
	[0146.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf")) returned 0x20
	[0146.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf")) returned 0x20
	[0146.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0149887.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0149887.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.537] SetEvent (hEvent=0xfc) returned 1
	[0146.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.632] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8296) returned 1
	[0146.632] CloseHandle (hObject=0x200) returned 1
	[0146.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf")) returned 0x20
	[0146.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf")) returned 0x20
	[0146.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0157763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0157763.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.633] SetEvent (hEvent=0xfc) returned 1
	[0146.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.641] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28696) returned 1
	[0146.641] CloseHandle (hObject=0x200) returned 1
	[0146.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf")) returned 0x20
	[0146.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf")) returned 0x20
	[0146.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183290.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183290.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.642] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5370) returned 1
	[0146.642] CloseHandle (hObject=0x200) returned 1
	[0146.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf")) returned 0x20
	[0146.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf")) returned 0x20
	[0146.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0183328.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0183328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.643] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5916) returned 1
	[0146.643] CloseHandle (hObject=0x200) returned 1
	[0146.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf")) returned 0x20
	[0146.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf")) returned 0x20
	[0146.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0185604.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0185604.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.645] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12132) returned 1
	[0146.645] CloseHandle (hObject=0x200) returned 1
	[0146.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf")) returned 0x20
	[0146.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf")) returned 0x20
	[0146.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186002.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186002.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.645] SetEvent (hEvent=0xfc) returned 1
	[0146.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.646] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6970) returned 1
	[0146.646] CloseHandle (hObject=0x200) returned 1
	[0146.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf")) returned 0x20
	[0146.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf")) returned 0x20
	[0146.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0186348.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0186348.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.646] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18246) returned 1
	[0146.646] CloseHandle (hObject=0x200) returned 1
	[0146.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf")) returned 0x20
	[0146.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf")) returned 0x20
	[0146.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0187423.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0187423.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.647] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12762) returned 1
	[0146.647] CloseHandle (hObject=0x200) returned 1
	[0146.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf")) returned 0x20
	[0146.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf")) returned 0x20
	[0146.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195384.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.650] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10076) returned 1
	[0146.650] CloseHandle (hObject=0x204) returned 1
	[0146.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf")) returned 0x20
	[0146.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf")) returned 0x20
	[0146.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195534.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195534.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.650] SetEvent (hEvent=0xfc) returned 1
	[0146.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.651] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4042) returned 1
	[0146.651] CloseHandle (hObject=0x204) returned 1
	[0146.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf")) returned 0x20
	[0146.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf")) returned 0x20
	[0146.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0195812.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0195812.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.652] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1970) returned 1
	[0146.652] CloseHandle (hObject=0x204) returned 1
	[0146.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf")) returned 0x20
	[0146.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf")) returned 0x20
	[0146.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196164.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.653] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4630) returned 1
	[0146.653] CloseHandle (hObject=0x204) returned 1
	[0146.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf")) returned 0x20
	[0146.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf")) returned 0x20
	[0146.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196374.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196374.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.656] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36030) returned 1
	[0146.656] CloseHandle (hObject=0x200) returned 1
	[0146.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf")) returned 0x20
	[0146.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf")) returned 0x20
	[0146.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0196400.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0196400.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.656] SetEvent (hEvent=0xfc) returned 1
	[0146.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.657] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9496) returned 1
	[0146.657] CloseHandle (hObject=0x200) returned 1
	[0146.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf")) returned 0x20
	[0146.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf")) returned 0x20
	[0146.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199036.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199036.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.657] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36548) returned 1
	[0146.657] CloseHandle (hObject=0x200) returned 1
	[0146.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf")) returned 0x20
	[0146.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf")) returned 0x20
	[0146.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199283.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199283.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.658] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3934) returned 1
	[0146.658] CloseHandle (hObject=0x200) returned 1
	[0146.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf")) returned 0x20
	[0146.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf")) returned 0x20
	[0146.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199549.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199549.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.660] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13342) returned 1
	[0146.660] CloseHandle (hObject=0x200) returned 1
	[0146.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf")) returned 0x20
	[0146.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf")) returned 0x20
	[0146.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199661.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.660] SetEvent (hEvent=0xfc) returned 1
	[0146.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.661] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2304) returned 1
	[0146.661] CloseHandle (hObject=0x200) returned 1
	[0146.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf")) returned 0x20
	[0146.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf")) returned 0x20
	[0146.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199727.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199727.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.661] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2800) returned 1
	[0146.661] CloseHandle (hObject=0x200) returned 1
	[0146.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf")) returned 0x20
	[0146.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf")) returned 0x20
	[0146.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199755.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199755.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.667] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2376) returned 1
	[0146.667] CloseHandle (hObject=0x200) returned 1
	[0146.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf")) returned 0x20
	[0146.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf")) returned 0x20
	[0146.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0199805.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0199805.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.668] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9112) returned 1
	[0146.668] CloseHandle (hObject=0x200) returned 1
	[0146.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf")) returned 0x20
	[0146.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf")) returned 0x20
	[0146.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205462.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205462.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.669] SetEvent (hEvent=0xfc) returned 1
	[0146.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.669] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4578) returned 1
	[0146.669] CloseHandle (hObject=0x200) returned 1
	[0146.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf")) returned 0x20
	[0146.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf")) returned 0x20
	[0146.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205466.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205466.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.670] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6130) returned 1
	[0146.670] CloseHandle (hObject=0x200) returned 1
	[0146.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf")) returned 0x20
	[0146.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf")) returned 0x20
	[0146.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0205582.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0205582.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.671] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45902) returned 1
	[0146.671] CloseHandle (hObject=0x200) returned 1
	[0146.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf")) returned 0x20
	[0146.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf")) returned 0x20
	[0146.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0211949.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0211949.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.672] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4542) returned 1
	[0146.673] CloseHandle (hObject=0x200) returned 1
	[0146.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf")) returned 0x20
	[0146.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf")) returned 0x20
	[0146.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212219.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212219.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.673] SetEvent (hEvent=0xfc) returned 1
	[0146.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.673] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9358) returned 1
	[0146.673] CloseHandle (hObject=0x200) returned 1
	[0146.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf")) returned 0x20
	[0146.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf")) returned 0x20
	[0146.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212661.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212661.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.674] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2938) returned 1
	[0146.674] CloseHandle (hObject=0x200) returned 1
	[0146.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf")) returned 0x20
	[0146.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf")) returned 0x20
	[0146.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212701.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212701.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.675] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9252) returned 1
	[0146.675] CloseHandle (hObject=0x200) returned 1
	[0146.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf")) returned 0x20
	[0146.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf")) returned 0x20
	[0146.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0212957.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0212957.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0146.803] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26810) returned 1
	[0146.803] CloseHandle (hObject=0x204) returned 1
	[0146.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav")) returned 0x20
	[0146.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav")) returned 0x20
	[0146.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0214098.WAV" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0214098.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.803] SetEvent (hEvent=0xfc) returned 1
	[0146.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.900] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5410) returned 1
	[0146.900] CloseHandle (hObject=0x200) returned 1
	[0146.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf")) returned 0x20
	[0146.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf")) returned 0x20
	[0146.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0233070.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0233070.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.900] SetEvent (hEvent=0xfc) returned 1
	[0146.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.901] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26162) returned 1
	[0146.901] CloseHandle (hObject=0x200) returned 1
	[0146.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf")) returned 0x20
	[0146.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf")) returned 0x20
	[0146.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234131.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234131.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0146.902] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43134) returned 1
	[0146.902] CloseHandle (hObject=0x200) returned 1
	[0146.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf")) returned 0x20
	[0146.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf")) returned 0x20
	[0146.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0146.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234266.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0146.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0147.047] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10222) returned 1
	[0147.047] CloseHandle (hObject=0x148) returned 1
	[0147.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf")) returned 0x20
	[0147.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf")) returned 0x20
	[0147.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0234657.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0234657.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.047] SetEvent (hEvent=0xfc) returned 1
	[0147.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0147.048] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1930) returned 1
	[0147.048] CloseHandle (hObject=0x148) returned 1
	[0147.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf")) returned 0x20
	[0147.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf")) returned 0x20
	[0147.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293238.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293238.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0147.049] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2190) returned 1
	[0147.049] CloseHandle (hObject=0x148) returned 1
	[0147.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf")) returned 0x20
	[0147.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf")) returned 0x20
	[0147.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293240.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293240.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0147.050] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2348) returned 1
	[0147.050] CloseHandle (hObject=0x148) returned 1
	[0147.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf")) returned 0x20
	[0147.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf")) returned 0x20
	[0147.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293570.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.060] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5610) returned 1
	[0147.060] CloseHandle (hObject=0x168) returned 1
	[0147.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf")) returned 0x20
	[0147.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf")) returned 0x20
	[0147.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293828.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293828.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.060] SetEvent (hEvent=0xfc) returned 1
	[0147.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.061] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2066) returned 1
	[0147.061] CloseHandle (hObject=0x168) returned 1
	[0147.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf")) returned 0x20
	[0147.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf")) returned 0x20
	[0147.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0293844.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0293844.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.062] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10725) returned 1
	[0147.062] CloseHandle (hObject=0x168) returned 1
	[0147.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif")) returned 0x20
	[0147.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif")) returned 0x20
	[0147.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0295241.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0295241.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.062] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52562) returned 1
	[0147.063] CloseHandle (hObject=0x168) returned 1
	[0147.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf")) returned 0x20
	[0147.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf")) returned 0x20
	[0147.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297185.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297185.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0147.064] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28088) returned 1
	[0147.064] CloseHandle (hObject=0x148) returned 1
	[0147.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf")) returned 0x20
	[0147.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf")) returned 0x20
	[0147.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297551.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297551.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.065] SetEvent (hEvent=0xfc) returned 1
	[0147.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0147.065] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42946) returned 1
	[0147.065] CloseHandle (hObject=0x148) returned 1
	[0147.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf")) returned 0x20
	[0147.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf")) returned 0x20
	[0147.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297707.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297707.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0147.066] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10170) returned 1
	[0147.066] CloseHandle (hObject=0x148) returned 1
	[0147.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf")) returned 0x20
	[0147.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf")) returned 0x20
	[0147.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0297749.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0297749.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x148
	[0147.067] GetFileSizeEx (in: hFile=0x148, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6526) returned 1
	[0147.067] CloseHandle (hObject=0x148) returned 1
	[0147.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf")) returned 0x20
	[0147.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf")) returned 0x20
	[0147.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298653.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298653.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.069] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6566) returned 1
	[0147.069] CloseHandle (hObject=0x168) returned 1
	[0147.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf")) returned 0x20
	[0147.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf")) returned 0x20
	[0147.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0298897.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0298897.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.069] SetEvent (hEvent=0xfc) returned 1
	[0147.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.070] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5692) returned 1
	[0147.070] CloseHandle (hObject=0x168) returned 1
	[0147.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf")) returned 0x20
	[0147.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf")) returned 0x20
	[0147.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299125.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299125.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.071] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9142) returned 1
	[0147.071] CloseHandle (hObject=0x168) returned 1
	[0147.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf")) returned 0x20
	[0147.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf")) returned 0x20
	[0147.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299171.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.071] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25288) returned 1
	[0147.071] CloseHandle (hObject=0x168) returned 1
	[0147.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf")) returned 0x20
	[0147.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf")) returned 0x20
	[0147.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299587.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299587.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.073] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4880) returned 1
	[0147.073] CloseHandle (hObject=0x168) returned 1
	[0147.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf")) returned 0x20
	[0147.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf")) returned 0x20
	[0147.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299611.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.074] SetEvent (hEvent=0xfc) returned 1
	[0147.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.074] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17186) returned 1
	[0147.074] CloseHandle (hObject=0x168) returned 1
	[0147.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf")) returned 0x20
	[0147.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf")) returned 0x20
	[0147.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0299763.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0299763.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.075] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13413) returned 1
	[0147.075] CloseHandle (hObject=0x168) returned 1
	[0147.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif")) returned 0x20
	[0147.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif")) returned 0x20
	[0147.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300520.GIF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300520.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.076] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9116) returned 1
	[0147.076] CloseHandle (hObject=0x168) returned 1
	[0147.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf")) returned 0x20
	[0147.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf")) returned 0x20
	[0147.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300840.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300840.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f0
	[0147.224] GetFileSizeEx (in: hFile=0x1f0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56060) returned 1
	[0147.225] CloseHandle (hObject=0x1f0) returned 1
	[0147.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf")) returned 0x20
	[0147.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf")) returned 0x20
	[0147.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\J0300912.WMF" (normalized: "c:\\program files\\microsoft office\\media\\cagcat10\\j0300912.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.225] SetEvent (hEvent=0xfc) returned 1
	[0147.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.335] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1772) returned 1
	[0147.335] CloseHandle (hObject=0x168) returned 1
	[0147.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf")) returned 0x20
	[0147.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf")) returned 0x20
	[0147.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18201_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18201_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.336] SetEvent (hEvent=0xfc) returned 1
	[0147.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.336] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3148) returned 1
	[0147.336] CloseHandle (hObject=0x168) returned 1
	[0147.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf")) returned 0x20
	[0147.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf")) returned 0x20
	[0147.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18210_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18210_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.337] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1848) returned 1
	[0147.337] CloseHandle (hObject=0x168) returned 1
	[0147.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf")) returned 0x20
	[0147.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf")) returned 0x20
	[0147.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18211_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18211_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.338] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15708) returned 1
	[0147.338] CloseHandle (hObject=0x168) returned 1
	[0147.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf")) returned 0x20
	[0147.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf")) returned 0x20
	[0147.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18212_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18212_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.340] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1796) returned 1
	[0147.340] CloseHandle (hObject=0x1f8) returned 1
	[0147.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf")) returned 0x20
	[0147.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf")) returned 0x20
	[0147.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18213_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18213_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.340] SetEvent (hEvent=0xfc) returned 1
	[0147.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.340] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2044) returned 1
	[0147.340] CloseHandle (hObject=0x1f8) returned 1
	[0147.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf")) returned 0x20
	[0147.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf")) returned 0x20
	[0147.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18214_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18214_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.341] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1700) returned 1
	[0147.341] CloseHandle (hObject=0x1f8) returned 1
	[0147.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf")) returned 0x20
	[0147.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf")) returned 0x20
	[0147.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18215_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18215_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.344] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1830) returned 1
	[0147.344] CloseHandle (hObject=0x1f8) returned 1
	[0147.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf")) returned 0x20
	[0147.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf")) returned 0x20
	[0147.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18216_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.346] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5458) returned 1
	[0147.346] CloseHandle (hObject=0x168) returned 1
	[0147.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf")) returned 0x20
	[0147.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf")) returned 0x20
	[0147.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18217_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18217_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.346] SetEvent (hEvent=0xfc) returned 1
	[0147.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.347] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4626) returned 1
	[0147.347] CloseHandle (hObject=0x168) returned 1
	[0147.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf")) returned 0x20
	[0147.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf")) returned 0x20
	[0147.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18218_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.348] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4406) returned 1
	[0147.348] CloseHandle (hObject=0x168) returned 1
	[0147.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf")) returned 0x20
	[0147.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf")) returned 0x20
	[0147.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18219_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18219_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.349] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8508) returned 1
	[0147.349] CloseHandle (hObject=0x168) returned 1
	[0147.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf")) returned 0x20
	[0147.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf")) returned 0x20
	[0147.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18220_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18220_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.350] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1836) returned 1
	[0147.350] CloseHandle (hObject=0x1f8) returned 1
	[0147.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf")) returned 0x20
	[0147.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf")) returned 0x20
	[0147.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18221_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18221_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.351] SetEvent (hEvent=0xfc) returned 1
	[0147.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.351] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1878) returned 1
	[0147.351] CloseHandle (hObject=0x1f8) returned 1
	[0147.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf")) returned 0x20
	[0147.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf")) returned 0x20
	[0147.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18222_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.352] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3162) returned 1
	[0147.352] CloseHandle (hObject=0x1f8) returned 1
	[0147.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf")) returned 0x20
	[0147.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf")) returned 0x20
	[0147.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18223_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18223_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.353] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1664) returned 1
	[0147.353] CloseHandle (hObject=0x1f8) returned 1
	[0147.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf")) returned 0x20
	[0147.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf")) returned 0x20
	[0147.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18224_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.355] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3344) returned 1
	[0147.355] CloseHandle (hObject=0x1f8) returned 1
	[0147.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf")) returned 0x20
	[0147.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf")) returned 0x20
	[0147.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18225_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.356] SetEvent (hEvent=0xfc) returned 1
	[0147.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.356] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1972) returned 1
	[0147.356] CloseHandle (hObject=0x1f8) returned 1
	[0147.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf")) returned 0x20
	[0147.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf")) returned 0x20
	[0147.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18226_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18226_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.357] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3564) returned 1
	[0147.357] CloseHandle (hObject=0x1f8) returned 1
	[0147.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf")) returned 0x20
	[0147.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf")) returned 0x20
	[0147.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18227_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18227_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.358] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2180) returned 1
	[0147.358] CloseHandle (hObject=0x1f8) returned 1
	[0147.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf")) returned 0x20
	[0147.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf")) returned 0x20
	[0147.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18228_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18228_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.359] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2020) returned 1
	[0147.360] CloseHandle (hObject=0x1f8) returned 1
	[0147.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf")) returned 0x20
	[0147.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf")) returned 0x20
	[0147.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18229_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18229_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.361] SetEvent (hEvent=0xfc) returned 1
	[0147.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.361] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1828) returned 1
	[0147.361] CloseHandle (hObject=0x1f8) returned 1
	[0147.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf")) returned 0x20
	[0147.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf")) returned 0x20
	[0147.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18230_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18230_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.362] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1660) returned 1
	[0147.362] CloseHandle (hObject=0x1f8) returned 1
	[0147.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf")) returned 0x20
	[0147.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf")) returned 0x20
	[0147.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18231_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0147.363] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1644) returned 1
	[0147.363] CloseHandle (hObject=0x1f8) returned 1
	[0147.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf")) returned 0x20
	[0147.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf")) returned 0x20
	[0147.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18232_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18232_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.365] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1612) returned 1
	[0147.365] CloseHandle (hObject=0x168) returned 1
	[0147.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf")) returned 0x20
	[0147.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf")) returned 0x20
	[0147.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18233_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.366] SetEvent (hEvent=0xfc) returned 1
	[0147.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.366] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1876) returned 1
	[0147.366] CloseHandle (hObject=0x168) returned 1
	[0147.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf")) returned 0x20
	[0147.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf")) returned 0x20
	[0147.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18234_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.367] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1852) returned 1
	[0147.367] CloseHandle (hObject=0x168) returned 1
	[0147.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf")) returned 0x20
	[0147.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf")) returned 0x20
	[0147.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18235_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.370] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1748) returned 1
	[0147.370] CloseHandle (hObject=0x168) returned 1
	[0147.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf")) returned 0x20
	[0147.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf")) returned 0x20
	[0147.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18236_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.371] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1532) returned 1
	[0147.371] CloseHandle (hObject=0x168) returned 1
	[0147.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf")) returned 0x20
	[0147.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf")) returned 0x20
	[0147.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18237_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18237_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.372] SetEvent (hEvent=0xfc) returned 1
	[0147.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.372] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1588) returned 1
	[0147.372] CloseHandle (hObject=0x168) returned 1
	[0147.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf")) returned 0x20
	[0147.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf")) returned 0x20
	[0147.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18238_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18238_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.373] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37828) returned 1
	[0147.373] CloseHandle (hObject=0x168) returned 1
	[0147.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf")) returned 0x20
	[0147.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf")) returned 0x20
	[0147.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18239_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18239_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.374] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2760) returned 1
	[0147.374] CloseHandle (hObject=0x168) returned 1
	[0147.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf")) returned 0x20
	[0147.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf")) returned 0x20
	[0147.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18241_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0147.509] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2082) returned 1
	[0147.509] CloseHandle (hObject=0x168) returned 1
	[0147.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf")) returned 0x20
	[0147.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf")) returned 0x20
	[0147.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\BD18242_.WMF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\autoshap\\bd18242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.510] SetEvent (hEvent=0xfc) returned 1
	[0147.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.602] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0147.602] CloseHandle (hObject=0x200) returned 1
	[0147.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif")) returned 0x20
	[0147.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif")) returned 0x20
	[0147.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10264_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10264_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.602] SetEvent (hEvent=0xfc) returned 1
	[0147.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.604] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=177) returned 1
	[0147.604] CloseHandle (hObject=0x200) returned 1
	[0147.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif")) returned 0x20
	[0147.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif")) returned 0x20
	[0147.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10266_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10266_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.605] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=311) returned 1
	[0147.605] CloseHandle (hObject=0x200) returned 1
	[0147.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif")) returned 0x20
	[0147.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif")) returned 0x20
	[0147.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10267_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10267_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.606] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=177) returned 1
	[0147.606] CloseHandle (hObject=0x200) returned 1
	[0147.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif")) returned 0x20
	[0147.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif")) returned 0x20
	[0147.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10268_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10268_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.607] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1131) returned 1
	[0147.608] CloseHandle (hObject=0x200) returned 1
	[0147.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif")) returned 0x20
	[0147.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif")) returned 0x20
	[0147.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10297_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.608] SetEvent (hEvent=0xfc) returned 1
	[0147.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.609] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1127) returned 1
	[0147.609] CloseHandle (hObject=0x200) returned 1
	[0147.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif")) returned 0x20
	[0147.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif")) returned 0x20
	[0147.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10298_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.609] SetEvent (hEvent=0xfc) returned 1
	[0147.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.610] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=315) returned 1
	[0147.611] CloseHandle (hObject=0x200) returned 1
	[0147.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif")) returned 0x20
	[0147.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif")) returned 0x20
	[0147.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10299_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.611] SetEvent (hEvent=0xfc) returned 1
	[0147.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.611] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=261) returned 1
	[0147.611] CloseHandle (hObject=0x200) returned 1
	[0147.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif")) returned 0x20
	[0147.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif")) returned 0x20
	[0147.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10300_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.612] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=265) returned 1
	[0147.612] CloseHandle (hObject=0x200) returned 1
	[0147.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif")) returned 0x20
	[0147.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif")) returned 0x20
	[0147.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10301_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.613] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=253) returned 1
	[0147.613] CloseHandle (hObject=0x200) returned 1
	[0147.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif")) returned 0x20
	[0147.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif")) returned 0x20
	[0147.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10302_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.615] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=282) returned 1
	[0147.615] CloseHandle (hObject=0x200) returned 1
	[0147.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif")) returned 0x20
	[0147.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif")) returned 0x20
	[0147.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10335_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.615] SetEvent (hEvent=0xfc) returned 1
	[0147.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.615] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=204) returned 1
	[0147.616] CloseHandle (hObject=0x200) returned 1
	[0147.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif")) returned 0x20
	[0147.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif")) returned 0x20
	[0147.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10336_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.617] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=240) returned 1
	[0147.617] CloseHandle (hObject=0x200) returned 1
	[0147.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif")) returned 0x20
	[0147.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif")) returned 0x20
	[0147.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD10337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd10337_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.617] SetEvent (hEvent=0xfc) returned 1
	[0147.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.618] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=206) returned 1
	[0147.619] CloseHandle (hObject=0x200) returned 1
	[0147.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif")) returned 0x20
	[0147.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif")) returned 0x20
	[0147.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14513_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14513_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.619] SetEvent (hEvent=0xfc) returned 1
	[0147.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.619] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0147.619] CloseHandle (hObject=0x200) returned 1
	[0147.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif")) returned 0x20
	[0147.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif")) returned 0x20
	[0147.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14514_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14514_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.620] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0147.620] CloseHandle (hObject=0x200) returned 1
	[0147.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif")) returned 0x20
	[0147.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif")) returned 0x20
	[0147.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14515_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14515_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.622] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=273) returned 1
	[0147.622] CloseHandle (hObject=0x200) returned 1
	[0147.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif")) returned 0x20
	[0147.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif")) returned 0x20
	[0147.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14528_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14528_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.622] SetEvent (hEvent=0xfc) returned 1
	[0147.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.623] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=274) returned 1
	[0147.623] CloseHandle (hObject=0x200) returned 1
	[0147.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif")) returned 0x20
	[0147.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif")) returned 0x20
	[0147.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14529_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14529_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.624] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=316) returned 1
	[0147.624] CloseHandle (hObject=0x200) returned 1
	[0147.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif")) returned 0x20
	[0147.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif")) returned 0x20
	[0147.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14530_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14530_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.625] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=245) returned 1
	[0147.625] CloseHandle (hObject=0x200) returned 1
	[0147.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif")) returned 0x20
	[0147.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif")) returned 0x20
	[0147.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14531_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14531_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.626] SetEvent (hEvent=0xfc) returned 1
	[0147.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.626] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=245) returned 1
	[0147.626] CloseHandle (hObject=0x200) returned 1
	[0147.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif")) returned 0x20
	[0147.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif")) returned 0x20
	[0147.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14532_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14532_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.627] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=245) returned 1
	[0147.627] CloseHandle (hObject=0x200) returned 1
	[0147.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif")) returned 0x20
	[0147.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif")) returned 0x20
	[0147.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14533_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.628] SetEvent (hEvent=0xfc) returned 1
	[0147.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.629] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=183) returned 1
	[0147.629] CloseHandle (hObject=0x200) returned 1
	[0147.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif")) returned 0x20
	[0147.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif")) returned 0x20
	[0147.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14565_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14565_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.630] SetEvent (hEvent=0xfc) returned 1
	[0147.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.630] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=200) returned 1
	[0147.630] CloseHandle (hObject=0x200) returned 1
	[0147.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif")) returned 0x20
	[0147.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif")) returned 0x20
	[0147.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14578_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14578_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.632] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=267) returned 1
	[0147.632] CloseHandle (hObject=0x200) returned 1
	[0147.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif")) returned 0x20
	[0147.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif")) returned 0x20
	[0147.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14579_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14579_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.632] SetEvent (hEvent=0xfc) returned 1
	[0147.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.633] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0147.633] CloseHandle (hObject=0x200) returned 1
	[0147.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif")) returned 0x20
	[0147.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif")) returned 0x20
	[0147.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14580_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14580_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.634] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=206) returned 1
	[0147.634] CloseHandle (hObject=0x200) returned 1
	[0147.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif")) returned 0x20
	[0147.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif")) returned 0x20
	[0147.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14581_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14581_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.637] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0147.637] CloseHandle (hObject=0x200) returned 1
	[0147.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif")) returned 0x20
	[0147.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif")) returned 0x20
	[0147.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14582_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.731] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=175) returned 1
	[0147.731] CloseHandle (hObject=0x200) returned 1
	[0147.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif")) returned 0x20
	[0147.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif")) returned 0x20
	[0147.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14583_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14583_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.731] SetEvent (hEvent=0xfc) returned 1
	[0147.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.732] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=173) returned 1
	[0147.732] CloseHandle (hObject=0x200) returned 1
	[0147.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif")) returned 0x20
	[0147.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif")) returned 0x20
	[0147.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14693_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14693_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.736] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=667) returned 1
	[0147.736] CloseHandle (hObject=0x200) returned 1
	[0147.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif")) returned 0x20
	[0147.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif")) returned 0x20
	[0147.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14752_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14752_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.736] SetEvent (hEvent=0xfc) returned 1
	[0147.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.737] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=188) returned 1
	[0147.737] CloseHandle (hObject=0x200) returned 1
	[0147.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif")) returned 0x20
	[0147.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif")) returned 0x20
	[0147.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14753_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14753_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.738] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=176) returned 1
	[0147.738] CloseHandle (hObject=0x200) returned 1
	[0147.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif")) returned 0x20
	[0147.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif")) returned 0x20
	[0147.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14754_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14754_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.738] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=68) returned 1
	[0147.739] CloseHandle (hObject=0x200) returned 1
	[0147.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif")) returned 0x20
	[0147.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif")) returned 0x20
	[0147.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14755_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14755_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.740] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=191) returned 1
	[0147.740] CloseHandle (hObject=0x200) returned 1
	[0147.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif")) returned 0x20
	[0147.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif")) returned 0x20
	[0147.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14756_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14756_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.740] SetEvent (hEvent=0xfc) returned 1
	[0147.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.741] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0147.741] CloseHandle (hObject=0x200) returned 1
	[0147.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif")) returned 0x20
	[0147.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif")) returned 0x20
	[0147.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14757_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14757_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.742] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=273) returned 1
	[0147.742] CloseHandle (hObject=0x200) returned 1
	[0147.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif")) returned 0x20
	[0147.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif")) returned 0x20
	[0147.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14790_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14790_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.743] SetEvent (hEvent=0xfc) returned 1
	[0147.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.743] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1115) returned 1
	[0147.743] CloseHandle (hObject=0x200) returned 1
	[0147.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif")) returned 0x20
	[0147.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif")) returned 0x20
	[0147.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14791_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14791_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.744] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=251) returned 1
	[0147.744] CloseHandle (hObject=0x200) returned 1
	[0147.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif")) returned 0x20
	[0147.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif")) returned 0x20
	[0147.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14792_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14792_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.745] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=240) returned 1
	[0147.745] CloseHandle (hObject=0x200) returned 1
	[0147.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif")) returned 0x20
	[0147.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif")) returned 0x20
	[0147.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14793_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14793_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.746] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=259) returned 1
	[0147.747] CloseHandle (hObject=0x200) returned 1
	[0147.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif")) returned 0x20
	[0147.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif")) returned 0x20
	[0147.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14794_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14794_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.747] SetEvent (hEvent=0xfc) returned 1
	[0147.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.747] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=219) returned 1
	[0147.747] CloseHandle (hObject=0x200) returned 1
	[0147.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif")) returned 0x20
	[0147.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif")) returned 0x20
	[0147.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14795_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14795_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.750] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=192) returned 1
	[0147.750] CloseHandle (hObject=0x200) returned 1
	[0147.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif")) returned 0x20
	[0147.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif")) returned 0x20
	[0147.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14828_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14828_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.750] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=191) returned 1
	[0147.750] CloseHandle (hObject=0x200) returned 1
	[0147.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif")) returned 0x20
	[0147.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif")) returned 0x20
	[0147.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14829_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14829_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.751] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=184) returned 1
	[0147.751] CloseHandle (hObject=0x200) returned 1
	[0147.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif")) returned 0x20
	[0147.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif")) returned 0x20
	[0147.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14830_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14830_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.752] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0147.752] CloseHandle (hObject=0x200) returned 1
	[0147.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif")) returned 0x20
	[0147.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif")) returned 0x20
	[0147.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14831_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14831_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.754] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=180) returned 1
	[0147.754] CloseHandle (hObject=0x200) returned 1
	[0147.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif")) returned 0x20
	[0147.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif")) returned 0x20
	[0147.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14832_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14832_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.755] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=178) returned 1
	[0147.755] CloseHandle (hObject=0x200) returned 1
	[0147.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif")) returned 0x20
	[0147.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif")) returned 0x20
	[0147.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14833_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14833_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.757] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=501) returned 1
	[0147.757] CloseHandle (hObject=0x200) returned 1
	[0147.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif")) returned 0x20
	[0147.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif")) returned 0x20
	[0147.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14866_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14866_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.758] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=253) returned 1
	[0147.758] CloseHandle (hObject=0x200) returned 1
	[0147.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif")) returned 0x20
	[0147.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif")) returned 0x20
	[0147.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14867_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14867_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.759] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=419) returned 1
	[0147.759] CloseHandle (hObject=0x200) returned 1
	[0147.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif")) returned 0x20
	[0147.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif")) returned 0x20
	[0147.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14868_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14868_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.759] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=196) returned 1
	[0147.760] CloseHandle (hObject=0x200) returned 1
	[0147.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif")) returned 0x20
	[0147.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif")) returned 0x20
	[0147.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14869_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14869_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.761] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=420) returned 1
	[0147.761] CloseHandle (hObject=0x200) returned 1
	[0147.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif")) returned 0x20
	[0147.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif")) returned 0x20
	[0147.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14870_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14870_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.761] SetEvent (hEvent=0xfc) returned 1
	[0147.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.762] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=194) returned 1
	[0147.762] CloseHandle (hObject=0x200) returned 1
	[0147.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif")) returned 0x20
	[0147.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif")) returned 0x20
	[0147.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14871_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14871_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.763] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=463) returned 1
	[0147.763] CloseHandle (hObject=0x200) returned 1
	[0147.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif")) returned 0x20
	[0147.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif")) returned 0x20
	[0147.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14980_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14980_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.764] SetEvent (hEvent=0xfc) returned 1
	[0147.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.764] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=356) returned 1
	[0147.764] CloseHandle (hObject=0x200) returned 1
	[0147.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif")) returned 0x20
	[0147.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif")) returned 0x20
	[0147.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14981_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14981_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.765] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=198) returned 1
	[0147.765] CloseHandle (hObject=0x200) returned 1
	[0147.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif")) returned 0x20
	[0147.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif")) returned 0x20
	[0147.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14982_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14982_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.766] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=124) returned 1
	[0147.766] CloseHandle (hObject=0x200) returned 1
	[0147.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif")) returned 0x20
	[0147.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif")) returned 0x20
	[0147.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14983_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14983_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.768] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=182) returned 1
	[0147.768] CloseHandle (hObject=0x200) returned 1
	[0147.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif")) returned 0x20
	[0147.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif")) returned 0x20
	[0147.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14984_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14984_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.768] SetEvent (hEvent=0xfc) returned 1
	[0147.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.769] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=64) returned 1
	[0147.769] CloseHandle (hObject=0x200) returned 1
	[0147.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif")) returned 0x20
	[0147.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif")) returned 0x20
	[0147.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD14985_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd14985_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.879] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16630) returned 1
	[0147.879] CloseHandle (hObject=0x200) returned 1
	[0147.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif")) returned 0x20
	[0147.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif")) returned 0x20
	[0147.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15018_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15018_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.879] SetEvent (hEvent=0xfc) returned 1
	[0147.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.880] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=119) returned 1
	[0147.880] CloseHandle (hObject=0x200) returned 1
	[0147.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif")) returned 0x20
	[0147.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif")) returned 0x20
	[0147.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15061_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15061_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.882] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0147.882] CloseHandle (hObject=0x200) returned 1
	[0147.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif")) returned 0x20
	[0147.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif")) returned 0x20
	[0147.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15132_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15132_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.883] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=176) returned 1
	[0147.883] CloseHandle (hObject=0x200) returned 1
	[0147.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif")) returned 0x20
	[0147.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif")) returned 0x20
	[0147.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15133_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15133_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.883] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=177) returned 1
	[0147.884] CloseHandle (hObject=0x200) returned 1
	[0147.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif")) returned 0x20
	[0147.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif")) returned 0x20
	[0147.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15134_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15134_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.886] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=175) returned 1
	[0147.886] CloseHandle (hObject=0x200) returned 1
	[0147.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif")) returned 0x20
	[0147.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif")) returned 0x20
	[0147.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15135_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.887] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=175) returned 1
	[0147.888] CloseHandle (hObject=0x200) returned 1
	[0147.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif")) returned 0x20
	[0147.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif")) returned 0x20
	[0147.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15136_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15136_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.888] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=331) returned 1
	[0147.888] CloseHandle (hObject=0x200) returned 1
	[0147.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif")) returned 0x20
	[0147.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif")) returned 0x20
	[0147.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15168_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15168_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.890] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=340) returned 1
	[0147.890] CloseHandle (hObject=0x200) returned 1
	[0147.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif")) returned 0x20
	[0147.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif")) returned 0x20
	[0147.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15169_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.891] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=257) returned 1
	[0147.891] CloseHandle (hObject=0x200) returned 1
	[0147.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif")) returned 0x20
	[0147.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif")) returned 0x20
	[0147.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15170_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.892] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=145) returned 1
	[0147.892] CloseHandle (hObject=0x200) returned 1
	[0147.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif")) returned 0x20
	[0147.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif")) returned 0x20
	[0147.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15171_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.893] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=304) returned 1
	[0147.893] CloseHandle (hObject=0x200) returned 1
	[0147.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif")) returned 0x20
	[0147.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif")) returned 0x20
	[0147.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15172_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.895] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=138) returned 1
	[0147.895] CloseHandle (hObject=0x200) returned 1
	[0147.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif")) returned 0x20
	[0147.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif")) returned 0x20
	[0147.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15173_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15173_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.896] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=456) returned 1
	[0147.896] CloseHandle (hObject=0x200) returned 1
	[0147.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif")) returned 0x20
	[0147.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif")) returned 0x20
	[0147.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15272_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15272_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.897] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0147.898] CloseHandle (hObject=0x200) returned 1
	[0147.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif")) returned 0x20
	[0147.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif")) returned 0x20
	[0147.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15273_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15273_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.898] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=208) returned 1
	[0147.898] CloseHandle (hObject=0x200) returned 1
	[0147.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif")) returned 0x20
	[0147.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif")) returned 0x20
	[0147.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15274_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15274_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.899] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=63) returned 1
	[0147.899] CloseHandle (hObject=0x200) returned 1
	[0147.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif")) returned 0x20
	[0147.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif")) returned 0x20
	[0147.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15275_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15275_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.900] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73) returned 1
	[0147.900] CloseHandle (hObject=0x200) returned 1
	[0147.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif")) returned 0x20
	[0147.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif")) returned 0x20
	[0147.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15276_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15276_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.901] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=60) returned 1
	[0147.901] CloseHandle (hObject=0x200) returned 1
	[0147.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif")) returned 0x20
	[0147.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif")) returned 0x20
	[0147.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD15277_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd15277_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.903] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=122) returned 1
	[0147.903] CloseHandle (hObject=0x200) returned 1
	[0147.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif")) returned 0x20
	[0147.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif")) returned 0x20
	[0147.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21294_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21294_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.904] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=150) returned 1
	[0147.904] CloseHandle (hObject=0x200) returned 1
	[0147.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif")) returned 0x20
	[0147.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif")) returned 0x20
	[0147.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21295_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21295_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.905] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=148) returned 1
	[0147.905] CloseHandle (hObject=0x200) returned 1
	[0147.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif")) returned 0x20
	[0147.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif")) returned 0x20
	[0147.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21296_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21296_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.906] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=880) returned 1
	[0147.906] CloseHandle (hObject=0x200) returned 1
	[0147.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif")) returned 0x20
	[0147.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif")) returned 0x20
	[0147.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21297_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21297_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.907] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=101) returned 1
	[0147.907] CloseHandle (hObject=0x200) returned 1
	[0147.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif")) returned 0x20
	[0147.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif")) returned 0x20
	[0147.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21298_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21298_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.908] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79) returned 1
	[0147.908] CloseHandle (hObject=0x200) returned 1
	[0147.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif")) returned 0x20
	[0147.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif")) returned 0x20
	[0147.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21299_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21299_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.909] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=140) returned 1
	[0147.909] CloseHandle (hObject=0x200) returned 1
	[0147.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif")) returned 0x20
	[0147.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif")) returned 0x20
	[0147.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21300_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21300_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.910] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=204) returned 1
	[0147.910] CloseHandle (hObject=0x200) returned 1
	[0147.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif")) returned 0x20
	[0147.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif")) returned 0x20
	[0147.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21301_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.912] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=285) returned 1
	[0147.912] CloseHandle (hObject=0x200) returned 1
	[0147.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif")) returned 0x20
	[0147.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif")) returned 0x20
	[0147.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21302_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.912] SetEvent (hEvent=0xfc) returned 1
	[0147.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.913] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=591) returned 1
	[0147.913] CloseHandle (hObject=0x200) returned 1
	[0147.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif")) returned 0x20
	[0147.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif")) returned 0x20
	[0147.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21304_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21304_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.914] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=591) returned 1
	[0147.914] CloseHandle (hObject=0x200) returned 1
	[0147.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif")) returned 0x20
	[0147.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif")) returned 0x20
	[0147.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21306_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21306_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.915] SetEvent (hEvent=0xfc) returned 1
	[0147.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0147.922] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=983) returned 1
	[0147.922] CloseHandle (hObject=0x200) returned 1
	[0147.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif")) returned 0x20
	[0147.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif")) returned 0x20
	[0147.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0147.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21308_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0147.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.029] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=980) returned 1
	[0148.029] CloseHandle (hObject=0x200) returned 1
	[0148.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif")) returned 0x20
	[0148.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif")) returned 0x20
	[0148.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21310_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21310_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.030] SetEvent (hEvent=0xfc) returned 1
	[0148.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.030] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=416) returned 1
	[0148.030] CloseHandle (hObject=0x200) returned 1
	[0148.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif")) returned 0x20
	[0148.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif")) returned 0x20
	[0148.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21333_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21333_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.032] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=971) returned 1
	[0148.032] CloseHandle (hObject=0x200) returned 1
	[0148.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif")) returned 0x20
	[0148.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif")) returned 0x20
	[0148.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21335_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21335_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.032] SetEvent (hEvent=0xfc) returned 1
	[0148.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.033] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=326) returned 1
	[0148.033] CloseHandle (hObject=0x200) returned 1
	[0148.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif")) returned 0x20
	[0148.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif")) returned 0x20
	[0148.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21337_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21337_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.034] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=108) returned 1
	[0148.034] CloseHandle (hObject=0x200) returned 1
	[0148.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif")) returned 0x20
	[0148.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif")) returned 0x20
	[0148.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21339_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21339_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.035] SetEvent (hEvent=0xfc) returned 1
	[0148.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.035] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=266) returned 1
	[0148.035] CloseHandle (hObject=0x200) returned 1
	[0148.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif")) returned 0x20
	[0148.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif")) returned 0x20
	[0148.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21342_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21342_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.036] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=182) returned 1
	[0148.036] CloseHandle (hObject=0x200) returned 1
	[0148.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif")) returned 0x20
	[0148.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif")) returned 0x20
	[0148.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21343_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21343_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.038] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=178) returned 1
	[0148.038] CloseHandle (hObject=0x200) returned 1
	[0148.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif")) returned 0x20
	[0148.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif")) returned 0x20
	[0148.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21344_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21344_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.038] SetEvent (hEvent=0xfc) returned 1
	[0148.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.038] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=245) returned 1
	[0148.039] CloseHandle (hObject=0x200) returned 1
	[0148.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif")) returned 0x20
	[0148.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif")) returned 0x20
	[0148.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21364_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21364_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.039] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=236) returned 1
	[0148.039] CloseHandle (hObject=0x200) returned 1
	[0148.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif")) returned 0x20
	[0148.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif")) returned 0x20
	[0148.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21365_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21365_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.041] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=200) returned 1
	[0148.041] CloseHandle (hObject=0x200) returned 1
	[0148.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif")) returned 0x20
	[0148.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif")) returned 0x20
	[0148.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21366_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21366_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.041] SetEvent (hEvent=0xfc) returned 1
	[0148.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.042] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=212) returned 1
	[0148.042] CloseHandle (hObject=0x200) returned 1
	[0148.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif")) returned 0x20
	[0148.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif")) returned 0x20
	[0148.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21375_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21375_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.043] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=180) returned 1
	[0148.043] CloseHandle (hObject=0x200) returned 1
	[0148.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif")) returned 0x20
	[0148.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif")) returned 0x20
	[0148.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21376_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21376_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.044] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=175) returned 1
	[0148.044] CloseHandle (hObject=0x200) returned 1
	[0148.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif")) returned 0x20
	[0148.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif")) returned 0x20
	[0148.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21377_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21377_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.045] SetEvent (hEvent=0xfc) returned 1
	[0148.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.045] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=326) returned 1
	[0148.045] CloseHandle (hObject=0x200) returned 1
	[0148.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif")) returned 0x20
	[0148.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif")) returned 0x20
	[0148.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21398_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21398_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.046] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=258) returned 1
	[0148.046] CloseHandle (hObject=0x200) returned 1
	[0148.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif")) returned 0x20
	[0148.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif")) returned 0x20
	[0148.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21399_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21399_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.048] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=233) returned 1
	[0148.048] CloseHandle (hObject=0x200) returned 1
	[0148.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif")) returned 0x20
	[0148.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif")) returned 0x20
	[0148.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21400_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21400_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.048] SetEvent (hEvent=0xfc) returned 1
	[0148.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.049] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=287) returned 1
	[0148.049] CloseHandle (hObject=0x200) returned 1
	[0148.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif")) returned 0x20
	[0148.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif")) returned 0x20
	[0148.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21421_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21421_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.050] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=257) returned 1
	[0148.050] CloseHandle (hObject=0x200) returned 1
	[0148.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif")) returned 0x20
	[0148.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif")) returned 0x20
	[0148.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21422_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21422_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.051] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=233) returned 1
	[0148.051] CloseHandle (hObject=0x200) returned 1
	[0148.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif")) returned 0x20
	[0148.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif")) returned 0x20
	[0148.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21423_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21423_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.052] SetEvent (hEvent=0xfc) returned 1
	[0148.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.052] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0148.052] CloseHandle (hObject=0x200) returned 1
	[0148.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif")) returned 0x20
	[0148.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif")) returned 0x20
	[0148.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21433_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21433_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.055] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=177) returned 1
	[0148.055] CloseHandle (hObject=0x200) returned 1
	[0148.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif")) returned 0x20
	[0148.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif")) returned 0x20
	[0148.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21434_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21434_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.056] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=173) returned 1
	[0148.056] CloseHandle (hObject=0x200) returned 1
	[0148.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif")) returned 0x20
	[0148.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif")) returned 0x20
	[0148.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21435_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21435_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.057] SetEvent (hEvent=0xfc) returned 1
	[0148.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.057] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=334) returned 1
	[0148.057] CloseHandle (hObject=0x200) returned 1
	[0148.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif")) returned 0x20
	[0148.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif")) returned 0x20
	[0148.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21480_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21480_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.058] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=235) returned 1
	[0148.058] CloseHandle (hObject=0x200) returned 1
	[0148.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif")) returned 0x20
	[0148.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif")) returned 0x20
	[0148.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21481_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21481_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.061] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=247) returned 1
	[0148.061] CloseHandle (hObject=0x200) returned 1
	[0148.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif")) returned 0x20
	[0148.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif")) returned 0x20
	[0148.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21482_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21482_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.062] SetEvent (hEvent=0xfc) returned 1
	[0148.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.062] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=254) returned 1
	[0148.062] CloseHandle (hObject=0x200) returned 1
	[0148.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif")) returned 0x20
	[0148.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif")) returned 0x20
	[0148.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21503_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21503_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.063] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=182) returned 1
	[0148.063] CloseHandle (hObject=0x200) returned 1
	[0148.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif")) returned 0x20
	[0148.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif")) returned 0x20
	[0148.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21504_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21504_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.065] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=175) returned 1
	[0148.065] CloseHandle (hObject=0x200) returned 1
	[0148.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif")) returned 0x20
	[0148.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif")) returned 0x20
	[0148.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21505_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21505_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.065] SetEvent (hEvent=0xfc) returned 1
	[0148.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.066] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=255) returned 1
	[0148.066] CloseHandle (hObject=0x200) returned 1
	[0148.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif")) returned 0x20
	[0148.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif")) returned 0x20
	[0148.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21518_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21518_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.180] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=176) returned 1
	[0148.180] CloseHandle (hObject=0x200) returned 1
	[0148.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif")) returned 0x20
	[0148.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif")) returned 0x20
	[0148.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21519_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21519_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.181] SetEvent (hEvent=0xfc) returned 1
	[0148.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.264] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=328) returned 1
	[0148.264] CloseHandle (hObject=0x168) returned 1
	[0148.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif")) returned 0x20
	[0148.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif")) returned 0x20
	[0148.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\BD21533_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\bd21533_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.264] SetEvent (hEvent=0xfc) returned 1
	[0148.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.265] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0148.265] CloseHandle (hObject=0x168) returned 1
	[0148.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif")) returned 0x20
	[0148.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif")) returned 0x20
	[0148.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115834.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115834.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.266] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=177) returned 1
	[0148.266] CloseHandle (hObject=0x168) returned 1
	[0148.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif")) returned 0x20
	[0148.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif")) returned 0x20
	[0148.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115835.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115835.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.267] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=173) returned 1
	[0148.267] CloseHandle (hObject=0x168) returned 1
	[0148.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif")) returned 0x20
	[0148.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif")) returned 0x20
	[0148.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115836.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115836.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.268] SetEvent (hEvent=0xfc) returned 1
	[0148.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.268] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=190) returned 1
	[0148.268] CloseHandle (hObject=0x168) returned 1
	[0148.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif")) returned 0x20
	[0148.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif")) returned 0x20
	[0148.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115839.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115839.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.269] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=190) returned 1
	[0148.269] CloseHandle (hObject=0x168) returned 1
	[0148.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif")) returned 0x20
	[0148.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif")) returned 0x20
	[0148.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115840.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115840.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.270] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=177) returned 1
	[0148.270] CloseHandle (hObject=0x168) returned 1
	[0148.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif")) returned 0x20
	[0148.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif")) returned 0x20
	[0148.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115841.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115841.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.271] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=176) returned 1
	[0148.272] CloseHandle (hObject=0x168) returned 1
	[0148.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif")) returned 0x20
	[0148.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif")) returned 0x20
	[0148.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115842.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115842.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.272] SetEvent (hEvent=0xfc) returned 1
	[0148.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.272] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=176) returned 1
	[0148.273] CloseHandle (hObject=0x168) returned 1
	[0148.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif")) returned 0x20
	[0148.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif")) returned 0x20
	[0148.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115843.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115843.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.273] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=176) returned 1
	[0148.273] CloseHandle (hObject=0x168) returned 1
	[0148.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif")) returned 0x20
	[0148.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif")) returned 0x20
	[0148.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115844.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115844.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.275] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=237) returned 1
	[0148.275] CloseHandle (hObject=0x168) returned 1
	[0148.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif")) returned 0x20
	[0148.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif")) returned 0x20
	[0148.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115863.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115863.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.275] SetEvent (hEvent=0xfc) returned 1
	[0148.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.276] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0148.276] CloseHandle (hObject=0x168) returned 1
	[0148.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif")) returned 0x20
	[0148.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif")) returned 0x20
	[0148.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115864.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115864.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.277] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=224) returned 1
	[0148.277] CloseHandle (hObject=0x168) returned 1
	[0148.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif")) returned 0x20
	[0148.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif")) returned 0x20
	[0148.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115865.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115865.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.278] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=224) returned 1
	[0148.278] CloseHandle (hObject=0x168) returned 1
	[0148.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif")) returned 0x20
	[0148.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif")) returned 0x20
	[0148.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115866.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115866.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.279] SetEvent (hEvent=0xfc) returned 1
	[0148.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.279] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=224) returned 1
	[0148.279] CloseHandle (hObject=0x168) returned 1
	[0148.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif")) returned 0x20
	[0148.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif")) returned 0x20
	[0148.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115867.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115867.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.280] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=224) returned 1
	[0148.280] CloseHandle (hObject=0x168) returned 1
	[0148.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif")) returned 0x20
	[0148.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif")) returned 0x20
	[0148.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\J0115868.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\bullets\\j0115868.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.282] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=978) returned 1
	[0148.282] CloseHandle (hObject=0x168) returned 1
	[0148.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif")) returned 0x20
	[0148.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif")) returned 0x20
	[0148.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10219_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10219_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.283] SetEvent (hEvent=0xfc) returned 1
	[0148.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.283] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2430) returned 1
	[0148.283] CloseHandle (hObject=0x168) returned 1
	[0148.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif")) returned 0x20
	[0148.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif")) returned 0x20
	[0148.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10256_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10256_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.285] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=292) returned 1
	[0148.285] CloseHandle (hObject=0x168) returned 1
	[0148.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif")) returned 0x20
	[0148.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif")) returned 0x20
	[0148.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10289_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10289_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.285] SetEvent (hEvent=0xfc) returned 1
	[0148.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.286] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=308) returned 1
	[0148.286] CloseHandle (hObject=0x168) returned 1
	[0148.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif")) returned 0x20
	[0148.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif")) returned 0x20
	[0148.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10290_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10290_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.287] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1175) returned 1
	[0148.287] CloseHandle (hObject=0x168) returned 1
	[0148.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif")) returned 0x20
	[0148.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif")) returned 0x20
	[0148.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10307_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.288] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=637) returned 1
	[0148.288] CloseHandle (hObject=0x168) returned 1
	[0148.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif")) returned 0x20
	[0148.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif")) returned 0x20
	[0148.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10308_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10308_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.289] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=932) returned 1
	[0148.289] CloseHandle (hObject=0x168) returned 1
	[0148.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif")) returned 0x20
	[0148.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif")) returned 0x20
	[0148.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD10358_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd10358_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.290] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=352) returned 1
	[0148.290] CloseHandle (hObject=0x168) returned 1
	[0148.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif")) returned 0x20
	[0148.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif")) returned 0x20
	[0148.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14516_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14516_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.291] SetEvent (hEvent=0xfc) returned 1
	[0148.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.291] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1559) returned 1
	[0148.291] CloseHandle (hObject=0x168) returned 1
	[0148.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif")) returned 0x20
	[0148.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif")) returned 0x20
	[0148.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14538_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14538_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.292] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1451) returned 1
	[0148.292] CloseHandle (hObject=0x168) returned 1
	[0148.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif")) returned 0x20
	[0148.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif")) returned 0x20
	[0148.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14539_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14539_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.293] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=603) returned 1
	[0148.293] CloseHandle (hObject=0x168) returned 1
	[0148.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif")) returned 0x20
	[0148.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif")) returned 0x20
	[0148.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14594_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14594_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.294] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=471) returned 1
	[0148.294] CloseHandle (hObject=0x168) returned 1
	[0148.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif")) returned 0x20
	[0148.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif")) returned 0x20
	[0148.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14595_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14595_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.295] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=284) returned 1
	[0148.295] CloseHandle (hObject=0x168) returned 1
	[0148.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif")) returned 0x20
	[0148.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif")) returned 0x20
	[0148.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14677_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14677_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.296] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=766) returned 1
	[0148.296] CloseHandle (hObject=0x168) returned 1
	[0148.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif")) returned 0x20
	[0148.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif")) returned 0x20
	[0148.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14710_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14710_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.297] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2711) returned 1
	[0148.297] CloseHandle (hObject=0x168) returned 1
	[0148.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif")) returned 0x20
	[0148.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif")) returned 0x20
	[0148.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14711_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14711_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.298] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=423) returned 1
	[0148.298] CloseHandle (hObject=0x168) returned 1
	[0148.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif")) returned 0x20
	[0148.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif")) returned 0x20
	[0148.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14768_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14768_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.298] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=362) returned 1
	[0148.299] CloseHandle (hObject=0x168) returned 1
	[0148.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif")) returned 0x20
	[0148.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif")) returned 0x20
	[0148.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14769_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14769_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.299] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=499) returned 1
	[0148.299] CloseHandle (hObject=0x168) returned 1
	[0148.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif")) returned 0x20
	[0148.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif")) returned 0x20
	[0148.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14800_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14800_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.300] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=900) returned 1
	[0148.412] CloseHandle (hObject=0x168) returned 1
	[0148.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif")) returned 0x20
	[0148.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif")) returned 0x20
	[0148.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD14801_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd14801_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.495] SetEvent (hEvent=0xfc) returned 1
	[0148.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.495] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1154) returned 1
	[0148.495] CloseHandle (hObject=0x168) returned 1
	[0148.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif")) returned 0x20
	[0148.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif")) returned 0x20
	[0148.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15184_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15184_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.496] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1154) returned 1
	[0148.496] CloseHandle (hObject=0x168) returned 1
	[0148.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif")) returned 0x20
	[0148.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif")) returned 0x20
	[0148.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15185_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15185_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.497] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=766) returned 1
	[0148.497] CloseHandle (hObject=0x168) returned 1
	[0148.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif")) returned 0x20
	[0148.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif")) returned 0x20
	[0148.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15301_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15301_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.498] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=442) returned 1
	[0148.498] CloseHandle (hObject=0x168) returned 1
	[0148.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif")) returned 0x20
	[0148.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif")) returned 0x20
	[0148.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD15302_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd15302_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.499] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2820) returned 1
	[0148.499] CloseHandle (hObject=0x168) returned 1
	[0148.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif")) returned 0x20
	[0148.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif")) returned 0x20
	[0148.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21303_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21303_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.500] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1558) returned 1
	[0148.500] CloseHandle (hObject=0x168) returned 1
	[0148.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif")) returned 0x20
	[0148.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif")) returned 0x20
	[0148.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21305_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21305_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.501] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=808) returned 1
	[0148.501] CloseHandle (hObject=0x168) returned 1
	[0148.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif")) returned 0x20
	[0148.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif")) returned 0x20
	[0148.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21307_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21307_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.501] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3357) returned 1
	[0148.502] CloseHandle (hObject=0x168) returned 1
	[0148.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif")) returned 0x20
	[0148.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif")) returned 0x20
	[0148.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21309_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21309_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.502] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2305) returned 1
	[0148.502] CloseHandle (hObject=0x168) returned 1
	[0148.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif")) returned 0x20
	[0148.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif")) returned 0x20
	[0148.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21311_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21311_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.503] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6677) returned 1
	[0148.503] CloseHandle (hObject=0x168) returned 1
	[0148.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif")) returned 0x20
	[0148.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif")) returned 0x20
	[0148.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21313_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21313_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.504] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=328) returned 1
	[0148.504] CloseHandle (hObject=0x168) returned 1
	[0148.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif")) returned 0x20
	[0148.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif")) returned 0x20
	[0148.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21315_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21315_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0148.505] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=286) returned 1
	[0148.505] CloseHandle (hObject=0x168) returned 1
	[0148.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif")) returned 0x20
	[0148.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif")) returned 0x20
	[0148.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21318_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21318_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.508] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=403) returned 1
	[0148.508] CloseHandle (hObject=0x200) returned 1
	[0148.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif")) returned 0x20
	[0148.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif")) returned 0x20
	[0148.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21319_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21319_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.509] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1636) returned 1
	[0148.509] CloseHandle (hObject=0x200) returned 1
	[0148.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif")) returned 0x20
	[0148.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif")) returned 0x20
	[0148.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21320_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21320_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.510] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2501) returned 1
	[0148.510] CloseHandle (hObject=0x200) returned 1
	[0148.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif")) returned 0x20
	[0148.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif")) returned 0x20
	[0148.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21321_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21321_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.510] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1235) returned 1
	[0148.510] CloseHandle (hObject=0x200) returned 1
	[0148.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif")) returned 0x20
	[0148.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif")) returned 0x20
	[0148.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21322_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21322_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.512] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=917) returned 1
	[0148.512] CloseHandle (hObject=0x200) returned 1
	[0148.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif")) returned 0x20
	[0148.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif")) returned 0x20
	[0148.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21323_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21323_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.513] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=917) returned 1
	[0148.513] CloseHandle (hObject=0x200) returned 1
	[0148.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif")) returned 0x20
	[0148.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif")) returned 0x20
	[0148.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21324_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21324_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.514] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1504) returned 1
	[0148.514] CloseHandle (hObject=0x200) returned 1
	[0148.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif")) returned 0x20
	[0148.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif")) returned 0x20
	[0148.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21325_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21325_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.516] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1785) returned 1
	[0148.516] CloseHandle (hObject=0x200) returned 1
	[0148.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif")) returned 0x20
	[0148.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif")) returned 0x20
	[0148.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21326_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21326_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.517] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=389) returned 1
	[0148.517] CloseHandle (hObject=0x200) returned 1
	[0148.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif")) returned 0x20
	[0148.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif")) returned 0x20
	[0148.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21328_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21328_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.518] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=464) returned 1
	[0148.518] CloseHandle (hObject=0x200) returned 1
	[0148.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif")) returned 0x20
	[0148.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif")) returned 0x20
	[0148.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21330_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21330_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.519] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8081) returned 1
	[0148.519] CloseHandle (hObject=0x200) returned 1
	[0148.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif")) returned 0x20
	[0148.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif")) returned 0x20
	[0148.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21332_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21332_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.520] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2184) returned 1
	[0148.520] CloseHandle (hObject=0x200) returned 1
	[0148.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif")) returned 0x20
	[0148.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif")) returned 0x20
	[0148.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21334_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21334_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.521] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2795) returned 1
	[0148.521] CloseHandle (hObject=0x200) returned 1
	[0148.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif")) returned 0x20
	[0148.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif")) returned 0x20
	[0148.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21336_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21336_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.522] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=836) returned 1
	[0148.522] CloseHandle (hObject=0x200) returned 1
	[0148.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif")) returned 0x20
	[0148.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif")) returned 0x20
	[0148.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21338_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21338_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.523] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=150) returned 1
	[0148.523] CloseHandle (hObject=0x200) returned 1
	[0148.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif")) returned 0x20
	[0148.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif")) returned 0x20
	[0148.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21340_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21340_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.524] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1131) returned 1
	[0148.524] CloseHandle (hObject=0x200) returned 1
	[0148.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif")) returned 0x20
	[0148.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif")) returned 0x20
	[0148.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21348_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21348_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.525] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2275) returned 1
	[0148.525] CloseHandle (hObject=0x200) returned 1
	[0148.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif")) returned 0x20
	[0148.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif")) returned 0x20
	[0148.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21370_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21370_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.526] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=350) returned 1
	[0148.526] CloseHandle (hObject=0x200) returned 1
	[0148.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif")) returned 0x20
	[0148.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif")) returned 0x20
	[0148.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21390_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21390_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.527] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=990) returned 1
	[0148.527] CloseHandle (hObject=0x200) returned 1
	[0148.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif")) returned 0x20
	[0148.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif")) returned 0x20
	[0148.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21413_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21413_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.527] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1904) returned 1
	[0148.528] CloseHandle (hObject=0x200) returned 1
	[0148.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif")) returned 0x20
	[0148.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif")) returned 0x20
	[0148.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21427_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21427_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.528] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=284) returned 1
	[0148.528] CloseHandle (hObject=0x200) returned 1
	[0148.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif")) returned 0x20
	[0148.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif")) returned 0x20
	[0148.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21448_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21448_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.529] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=730) returned 1
	[0148.529] CloseHandle (hObject=0x200) returned 1
	[0148.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif")) returned 0x20
	[0148.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif")) returned 0x20
	[0148.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21495_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21495_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.530] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=845) returned 1
	[0148.530] CloseHandle (hObject=0x200) returned 1
	[0148.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif")) returned 0x20
	[0148.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif")) returned 0x20
	[0148.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21512_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21512_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.531] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=590) returned 1
	[0148.531] CloseHandle (hObject=0x200) returned 1
	[0148.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif")) returned 0x20
	[0148.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif")) returned 0x20
	[0148.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21527_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21527_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.532] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1853) returned 1
	[0148.532] CloseHandle (hObject=0x200) returned 1
	[0148.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif")) returned 0x20
	[0148.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif")) returned 0x20
	[0148.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\BD21548_.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\bd21548_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.533] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=282) returned 1
	[0148.533] CloseHandle (hObject=0x200) returned 1
	[0148.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif")) returned 0x20
	[0148.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif")) returned 0x20
	[0148.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115855.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115855.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.534] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=282) returned 1
	[0148.534] CloseHandle (hObject=0x200) returned 1
	[0148.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif")) returned 0x20
	[0148.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif")) returned 0x20
	[0148.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115856.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115856.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.632] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=467) returned 1
	[0148.632] CloseHandle (hObject=0x200) returned 1
	[0148.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif")) returned 0x20
	[0148.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif")) returned 0x20
	[0148.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\J0115875.GIF" (normalized: "c:\\program files\\microsoft office\\media\\office14\\lines\\j0115875.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.632] SetEvent (hEvent=0xfc) returned 1
	[0148.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.633] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15776) returned 1
	[0148.633] CloseHandle (hObject=0x200) returned 1
	[0148.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.dll")) returned 0x20
	[0148.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.dll")) returned 0x20
	[0148.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.DLL" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.634] SetEvent (hEvent=0xfc) returned 1
	[0148.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.634] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=492624) returned 1
	[0148.634] CloseHandle (hObject=0x200) returned 1
	[0148.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw")) returned 0x20
	[0148.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw")) returned 0x20
	[0148.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\OFFICE10.MMW" (normalized: "c:\\program files\\microsoft office\\media\\office14\\office10.mmw"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.636] SetEvent (hEvent=0xfc) returned 1
	[0148.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCDDSUI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accddsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.727] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21424) returned 1
	[0148.727] CloseHandle (hObject=0x200) returned 1
	[0148.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCDDSUI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accddsui.dll")) returned 0x20
	[0148.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCDDSUI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accddsui.dll")) returned 0x20
	[0148.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCDDSUI.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accddsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCDDSUI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accddsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.727] SetEvent (hEvent=0xfc) returned 1
	[0148.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCVDTUI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accvdtui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.728] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=158600) returned 1
	[0148.728] CloseHandle (hObject=0x200) returned 1
	[0148.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCVDTUI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accvdtui.dll")) returned 0x20
	[0148.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCVDTUI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accvdtui.dll")) returned 0x20
	[0148.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCVDTUI.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accvdtui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACCVDTUI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\accvdtui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\actip10.hlp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.728] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=343520) returned 1
	[0148.729] CloseHandle (hObject=0x200) returned 1
	[0148.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\actip10.hlp")) returned 0x20
	[0148.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\actip10.hlp")) returned 0x20
	[0148.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACTIP10.HLP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\actip10.hlp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\actip10.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACWIZRC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\acwizrc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.729] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=275856) returned 1
	[0148.729] CloseHandle (hObject=0x200) returned 1
	[0148.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACWIZRC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\acwizrc.dll")) returned 0x20
	[0148.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACWIZRC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\acwizrc.dll")) returned 0x20
	[0148.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACWIZRC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\acwizrc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ACWIZRC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\acwizrc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.731] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=69496) returned 1
	[0148.732] CloseHandle (hObject=0x200) returned 1
	[0148.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl")) returned 0x20
	[0148.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl")) returned 0x20
	[0148.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aec.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.732] SetEvent (hEvent=0xfc) returned 1
	[0148.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.733] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41864) returned 1
	[0148.733] CloseHandle (hObject=0x200) returned 1
	[0148.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl")) returned 0x20
	[0148.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl")) returned 0x20
	[0148.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\aecutils.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.733] SetEvent (hEvent=0xfc) returned 1
	[0148.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.734] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1694) returned 1
	[0148.734] CloseHandle (hObject=0x200) returned 1
	[0148.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd")) returned 0x20
	[0148.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd")) returned 0x20
	[0148.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\asset.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.736] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=269) returned 1
	[0148.736] CloseHandle (hObject=0x200) returned 1
	[0148.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm")) returned 0x20
	[0148.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm")) returned 0x20
	[0148.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\basic.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.736] SetEvent (hEvent=0xfc) returned 1
	[0148.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BCSRuntimeRes.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bcsruntimeres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.737] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24960) returned 1
	[0148.737] CloseHandle (hObject=0x200) returned 1
	[0148.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BCSRuntimeRes.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bcsruntimeres.dll")) returned 0x20
	[0148.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BCSRuntimeRes.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bcsruntimeres.dll")) returned 0x20
	[0148.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BCSRuntimeRes.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bcsruntimeres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BCSRuntimeRes.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bcsruntimeres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bhointl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.737] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10104) returned 1
	[0148.738] CloseHandle (hObject=0x200) returned 1
	[0148.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bhointl.dll")) returned 0x20
	[0148.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bhointl.dll")) returned 0x20
	[0148.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bhointl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BHOINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bhointl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.739] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=91618) returned 1
	[0148.739] CloseHandle (hObject=0x200) returned 1
	[0148.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml")) returned 0x20
	[0148.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml")) returned 0x20
	[0148.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bibliography\\bibform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.739] SetEvent (hEvent=0xfc) returned 1
	[0148.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.741] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45968) returned 1
	[0148.741] CloseHandle (hObject=0x200) returned 1
	[0148.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl")) returned 0x20
	[0148.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl")) returned 0x20
	[0148.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bstorm.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.741] SetEvent (hEvent=0xfc) returned 1
	[0148.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.742] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3450) returned 1
	[0148.742] CloseHandle (hObject=0x200) returned 1
	[0148.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css")) returned 0x20
	[0148.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css")) returned 0x20
	[0148.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\bw.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.743] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2144) returned 1
	[0148.743] CloseHandle (hObject=0x200) returned 1
	[0148.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd")) returned 0x20
	[0148.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd")) returned 0x20
	[0148.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\calevent.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.744] SetEvent (hEvent=0xfc) returned 1
	[0148.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CERTINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\certintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.744] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12176) returned 1
	[0148.744] CloseHandle (hObject=0x200) returned 1
	[0148.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CERTINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\certintl.dll")) returned 0x20
	[0148.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CERTINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\certintl.dll")) returned 0x20
	[0148.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CERTINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\certintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CERTINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\certintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CLVWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\clvwintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.745] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19880) returned 1
	[0148.745] CloseHandle (hObject=0x200) returned 1
	[0148.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CLVWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\clvwintl.dll")) returned 0x20
	[0148.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CLVWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\clvwintl.dll")) returned 0x20
	[0148.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CLVWINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\clvwintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CLVWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\clvwintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CMAXRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\cmaxres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.747] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35216) returned 1
	[0148.747] CloseHandle (hObject=0x200) returned 1
	[0148.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CMAXRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\cmaxres.dll")) returned 0x20
	[0148.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CMAXRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\cmaxres.dll")) returned 0x20
	[0148.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CMAXRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\cmaxres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CMAXRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\cmaxres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.747] SetEvent (hEvent=0xfc) returned 1
	[0148.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.748] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3450) returned 1
	[0148.748] CloseHandle (hObject=0x200) returned 1
	[0148.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css")) returned 0x20
	[0148.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css")) returned 0x20
	[0148.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\coffee.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.749] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13758) returned 1
	[0148.749] CloseHandle (hObject=0x200) returned 1
	[0148.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn")) returned 0x20
	[0148.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn")) returned 0x20
	[0148.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.750] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14075) returned 1
	[0148.750] CloseHandle (hObject=0x200) returned 1
	[0148.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn")) returned 0x20
	[0148.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn")) returned 0x20
	[0148.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\collectsignatures_sign.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ContactPickerIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\contactpickerintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.751] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16256) returned 1
	[0148.751] CloseHandle (hObject=0x200) returned 1
	[0148.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ContactPickerIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\contactpickerintl.dll")) returned 0x20
	[0148.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ContactPickerIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\contactpickerintl.dll")) returned 0x20
	[0148.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ContactPickerIntl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\contactpickerintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ContactPickerIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\contactpickerintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.752] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6069) returned 1
	[0148.752] CloseHandle (hObject=0x200) returned 1
	[0148.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml")) returned 0x20
	[0148.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml")) returned 0x20
	[0148.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\ct_roots.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.754] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=190) returned 1
	[0148.754] CloseHandle (hObject=0x200) returned 1
	[0148.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc")) returned 0x20
	[0148.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc")) returned 0x20
	[0148.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+connect to new data source.odc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.755] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=196) returned 1
	[0148.755] CloseHandle (hObject=0x200) returned 1
	[0148.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc")) returned 0x20
	[0148.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc")) returned 0x20
	[0148.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\+newsqlserverconnection.odc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\DESKTOP.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.756] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70) returned 1
	[0148.756] CloseHandle (hObject=0x200) returned 1
	[0148.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\DESKTOP.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\desktop.ini")) returned 0x20
	[0148.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\DESKTOP.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\desktop.ini")) returned 0x20
	[0148.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\DESKTOP.INI.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\DESKTOP.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.756] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4710) returned 1
	[0148.757] CloseHandle (hObject=0x200) returned 1
	[0148.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\folder.ico")) returned 0x20
	[0148.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\folder.ico")) returned 0x20
	[0148.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\FOLDER.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\folder.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dataservices\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.851] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53144) returned 1
	[0148.851] CloseHandle (hObject=0x200) returned 1
	[0148.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl")) returned 0x20
	[0148.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl")) returned 0x20
	[0148.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DBENGR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dbengr.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.852] SetEvent (hEvent=0xfc) returned 1
	[0148.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.852] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3450) returned 1
	[0148.852] CloseHandle (hObject=0x200) returned 1
	[0148.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css")) returned 0x20
	[0148.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css")) returned 0x20
	[0148.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\default.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.854] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=104836) returned 1
	[0148.854] CloseHandle (hObject=0x200) returned 1
	[0148.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta")) returned 0x20
	[0148.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta")) returned 0x20
	[0148.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion.gta"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.854] SetEvent (hEvent=0xfc) returned 1
	[0148.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.855] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=362441) returned 1
	[0148.855] CloseHandle (hObject=0x200) returned 1
	[0148.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta")) returned 0x20
	[0148.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta")) returned 0x20
	[0148.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Discussion14.gta" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\discussion14.gta"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DL_RES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dl_res.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.856] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10632) returned 1
	[0148.856] CloseHandle (hObject=0x200) returned 1
	[0148.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DL_RES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dl_res.dll")) returned 0x20
	[0148.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DL_RES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dl_res.dll")) returned 0x20
	[0148.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DL_RES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dl_res.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DL_RES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dl_res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.857] SetEvent (hEvent=0xfc) returned 1
	[0148.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.864] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1723) returned 1
	[0148.864] CloseHandle (hObject=0x200) returned 1
	[0148.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd")) returned 0x20
	[0148.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd")) returned 0x20
	[0148.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\doorschd.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.866] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=64872) returned 1
	[0148.866] CloseHandle (hObject=0x200) returned 1
	[0148.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl")) returned 0x20
	[0148.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl")) returned 0x20
	[0148.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\drilldwn.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.866] SetEvent (hEvent=0xfc) returned 1
	[0148.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.867] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38752) returned 1
	[0148.868] CloseHandle (hObject=0x200) returned 1
	[0148.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl")) returned 0x20
	[0148.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl")) returned 0x20
	[0148.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgcnv.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.868] SetEvent (hEvent=0xfc) returned 1
	[0148.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGDPRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgdpres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.869] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16224) returned 1
	[0148.869] CloseHandle (hObject=0x200) returned 1
	[0148.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGDPRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgdpres.dll")) returned 0x20
	[0148.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGDPRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgdpres.dll")) returned 0x20
	[0148.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGDPRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgdpres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\DWGDPRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\dwgdpres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.869] SetEvent (hEvent=0xfc) returned 1
	[0148.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.870] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14478) returned 1
	[0148.870] CloseHandle (hObject=0x200) returned 1
	[0148.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn")) returned 0x20
	[0148.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn")) returned 0x20
	[0148.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_INIT.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.871] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19838) returned 1
	[0148.871] CloseHandle (hObject=0x200) returned 1
	[0148.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn")) returned 0x20
	[0148.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn")) returned 0x20
	[0148.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eadocumentapproval_review.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EAWFINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eawfintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.872] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51600) returned 1
	[0148.872] CloseHandle (hObject=0x200) returned 1
	[0148.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EAWFINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eawfintl.dll")) returned 0x20
	[0148.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EAWFINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eawfintl.dll")) returned 0x20
	[0148.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EAWFINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eawfintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EAWFINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eawfintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EDITRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\editres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.873] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19840) returned 1
	[0148.873] CloseHandle (hObject=0x200) returned 1
	[0148.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EDITRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\editres.dll")) returned 0x20
	[0148.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EDITRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\editres.dll")) returned 0x20
	[0148.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EDITRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\editres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EDITRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\editres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EntityPickerIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\entitypickerintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.874] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24456) returned 1
	[0148.874] CloseHandle (hObject=0x200) returned 1
	[0148.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EntityPickerIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\entitypickerintl.dll")) returned 0x20
	[0148.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EntityPickerIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\entitypickerintl.dll")) returned 0x20
	[0148.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EntityPickerIntl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\entitypickerintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EntityPickerIntl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\entitypickerintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.875] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17288) returned 1
	[0148.875] CloseHandle (hObject=0x200) returned 1
	[0148.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll")) returned 0x20
	[0148.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll")) returned 0x20
	[0148.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.876] SetEvent (hEvent=0xfc) returned 1
	[0148.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.876] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13696) returned 1
	[0148.876] CloseHandle (hObject=0x200) returned 1
	[0148.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll")) returned 0x20
	[0148.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll")) returned 0x20
	[0148.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ENVELOPR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\envelopr.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.878] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1699) returned 1
	[0148.878] CloseHandle (hObject=0x200) returned 1
	[0148.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd")) returned 0x20
	[0148.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd")) returned 0x20
	[0148.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\eqplist.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.878] SetEvent (hEvent=0xfc) returned 1
	[0148.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.879] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7024126) returned 1
	[0148.879] CloseHandle (hObject=0x200) returned 1
	[0148.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs")) returned 0x20
	[0148.879] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0148.880] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev.hxs")) returned 0
	[0148.880] SetEvent (hEvent=0xfc) returned 1
	[0148.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.881] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=641) returned 1
	[0148.881] CloseHandle (hObject=0x200) returned 1
	[0148.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc")) returned 0x20
	[0148.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc")) returned 0x20
	[0148.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.881] SetEvent (hEvent=0xfc) returned 1
	[0148.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.882] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=209) returned 1
	[0148.882] CloseHandle (hObject=0x200) returned 1
	[0148.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt")) returned 0x20
	[0148.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt")) returned 0x20
	[0148.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.883] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0148.883] CloseHandle (hObject=0x200) returned 1
	[0148.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk")) returned 0x20
	[0148.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk")) returned 0x20
	[0148.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.884] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0148.884] CloseHandle (hObject=0x200) returned 1
	[0148.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk")) returned 0x20
	[0148.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk")) returned 0x20
	[0148.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.885] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7827686) returned 1
	[0148.885] CloseHandle (hObject=0x200) returned 1
	[0148.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs")) returned 0x20
	[0148.886] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0148.886] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel.hxs")) returned 0
	[0148.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.887] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=621) returned 1
	[0148.887] CloseHandle (hObject=0x200) returned 1
	[0148.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc")) returned 0x20
	[0148.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc")) returned 0x20
	[0148.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.888] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=205) returned 1
	[0148.888] CloseHandle (hObject=0x200) returned 1
	[0148.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt")) returned 0x20
	[0148.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt")) returned 0x20
	[0148.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.889] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0148.889] CloseHandle (hObject=0x200) returned 1
	[0148.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk")) returned 0x20
	[0148.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk")) returned 0x20
	[0148.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.889] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0148.889] CloseHandle (hObject=0x200) returned 1
	[0148.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk")) returned 0x20
	[0148.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk")) returned 0x20
	[0148.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\excel_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.991] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12160) returned 1
	[0148.991] CloseHandle (hObject=0x200) returned 1
	[0148.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.dll")) returned 0x20
	[0148.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.dll")) returned 0x20
	[0148.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\EXPTOOWS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\exptoows.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.992] SetEvent (hEvent=0xfc) returned 1
	[0148.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.993] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2028) returned 1
	[0148.993] CloseHandle (hObject=0x200) returned 1
	[0148.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd")) returned 0x20
	[0148.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd")) returned 0x20
	[0148.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\floch.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.993] SetEvent (hEvent=0xfc) returned 1
	[0148.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.994] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3450) returned 1
	[0148.994] CloseHandle (hObject=0x200) returned 1
	[0148.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css")) returned 0x20
	[0148.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css")) returned 0x20
	[0148.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\forest.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.995] SetEvent (hEvent=0xfc) returned 1
	[0148.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.996] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3450) returned 1
	[0148.996] CloseHandle (hObject=0x200) returned 1
	[0148.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css")) returned 0x20
	[0148.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css")) returned 0x20
	[0148.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.997] SetEvent (hEvent=0xfc) returned 1
	[0148.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.997] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2043) returned 1
	[0148.997] CloseHandle (hObject=0x200) returned 1
	[0148.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd")) returned 0x20
	[0148.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd")) returned 0x20
	[0148.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0148.998] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=320880) returned 1
	[0148.999] CloseHandle (hObject=0x200) returned 1
	[0148.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl")) returned 0x20
	[0148.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl")) returned 0x20
	[0148.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0148.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gantt.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0148.999] SetEvent (hEvent=0xfc) returned 1
	[0148.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.000] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=186880) returned 1
	[0149.000] CloseHandle (hObject=0x200) returned 1
	[0149.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra")) returned 0x20
	[0149.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra")) returned 0x20
	[0149.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\gr8galry.gra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.001] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=610086) returned 1
	[0149.001] CloseHandle (hObject=0x200) returned 1
	[0149.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs")) returned 0x20
	[0149.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs")) returned 0x20
	[0149.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.002] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=621) returned 1
	[0149.002] CloseHandle (hObject=0x200) returned 1
	[0149.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc")) returned 0x20
	[0149.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc")) returned 0x20
	[0149.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.003] SetEvent (hEvent=0xfc) returned 1
	[0149.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.003] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=205) returned 1
	[0149.003] CloseHandle (hObject=0x200) returned 1
	[0149.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt")) returned 0x20
	[0149.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt")) returned 0x20
	[0149.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.004] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0149.004] CloseHandle (hObject=0x200) returned 1
	[0149.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk")) returned 0x20
	[0149.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk")) returned 0x20
	[0149.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.005] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0149.005] CloseHandle (hObject=0x200) returned 1
	[0149.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk")) returned 0x20
	[0149.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk")) returned 0x20
	[0149.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\graph_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.006] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=208256) returned 1
	[0149.006] CloseHandle (hObject=0x200) returned 1
	[0149.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll")) returned 0x20
	[0149.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll")) returned 0x20
	[0149.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.007] SetEvent (hEvent=0xfc) returned 1
	[0149.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.007] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37760) returned 1
	[0149.007] CloseHandle (hObject=0x200) returned 1
	[0149.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll")) returned 0x20
	[0149.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll")) returned 0x20
	[0149.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.009] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=100224) returned 1
	[0149.009] CloseHandle (hObject=0x200) returned 1
	[0149.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll")) returned 0x20
	[0149.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll")) returned 0x20
	[0149.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grintl32.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.009] SetEvent (hEvent=0xfc) returned 1
	[0149.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRLEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grlex.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.010] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12672) returned 1
	[0149.010] CloseHandle (hObject=0x200) returned 1
	[0149.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRLEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grlex.dll")) returned 0x20
	[0149.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRLEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grlex.dll")) returned 0x20
	[0149.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRLEX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grlex.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GRLEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grlex.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.010] SetEvent (hEvent=0xfc) returned 1
	[0149.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.011] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3001) returned 1
	[0149.011] CloseHandle (hObject=0x200) returned 1
	[0149.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn")) returned 0x20
	[0149.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn")) returned 0x20
	[0149.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Groove Starter Template.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove starter template.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.012] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2278416) returned 1
	[0149.012] CloseHandle (hObject=0x200) returned 1
	[0149.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs")) returned 0x20
	[0149.013] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0149.013] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\groove.hxs")) returned 0
	[0149.013] SetEvent (hEvent=0xfc) returned 1
	[0149.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.014] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24910) returned 1
	[0149.014] CloseHandle (hObject=0x200) returned 1
	[0149.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif")) returned 0x20
	[0149.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif")) returned 0x20
	[0149.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_adobe.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.014] SetEvent (hEvent=0xfc) returned 1
	[0149.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.016] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5661) returned 1
	[0149.016] CloseHandle (hObject=0x200) returned 1
	[0149.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif")) returned 0x20
	[0149.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif")) returned 0x20
	[0149.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_casual.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.016] SetEvent (hEvent=0xfc) returned 1
	[0149.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.017] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32211) returned 1
	[0149.017] CloseHandle (hObject=0x200) returned 1
	[0149.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif")) returned 0x20
	[0149.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif")) returned 0x20
	[0149.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_country.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.018] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4906) returned 1
	[0149.018] CloseHandle (hObject=0x200) returned 1
	[0149.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif")) returned 0x20
	[0149.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif")) returned 0x20
	[0149.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_earthy.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.019] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22160) returned 1
	[0149.019] CloseHandle (hObject=0x200) returned 1
	[0149.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif")) returned 0x20
	[0149.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif")) returned 0x20
	[0149.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_greentea.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.020] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=106) returned 1
	[0149.020] CloseHandle (hObject=0x200) returned 1
	[0149.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif")) returned 0x20
	[0149.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif")) returned 0x20
	[0149.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_groove.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.021] SetEvent (hEvent=0xfc) returned 1
	[0149.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.021] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8614) returned 1
	[0149.021] CloseHandle (hObject=0x200) returned 1
	[0149.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif")) returned 0x20
	[0149.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif")) returned 0x20
	[0149.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_lightspirit.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.022] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15703) returned 1
	[0149.022] CloseHandle (hObject=0x200) returned 1
	[0149.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif")) returned 0x20
	[0149.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif")) returned 0x20
	[0149.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_olivegreen.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.023] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6213) returned 1
	[0149.023] CloseHandle (hObject=0x200) returned 1
	[0149.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif")) returned 0x20
	[0149.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif")) returned 0x20
	[0149.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_premium.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.025] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20801) returned 1
	[0149.025] CloseHandle (hObject=0x200) returned 1
	[0149.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif")) returned 0x20
	[0149.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif")) returned 0x20
	[0149.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_slateblue.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.025] SetEvent (hEvent=0xfc) returned 1
	[0149.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.026] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6460) returned 1
	[0149.026] CloseHandle (hObject=0x200) returned 1
	[0149.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif")) returned 0x20
	[0149.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif")) returned 0x20
	[0149.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_texturedblue.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.026] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15460) returned 1
	[0149.026] CloseHandle (hObject=0x200) returned 1
	[0149.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif")) returned 0x20
	[0149.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif")) returned 0x20
	[0149.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\bg_velvetrose.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.027] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1884) returned 1
	[0149.027] CloseHandle (hObject=0x200) returned 1
	[0149.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css")) returned 0x20
	[0149.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css")) returned 0x20
	[0149.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.028] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0149.028] CloseHandle (hObject=0x200) returned 1
	[0149.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif")) returned 0x20
	[0149.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif")) returned 0x20
	[0149.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.029] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0149.029] CloseHandle (hObject=0x200) returned 1
	[0149.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif")) returned 0x20
	[0149.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif")) returned 0x20
	[0149.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.030] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2966) returned 1
	[0149.030] CloseHandle (hObject=0x200) returned 1
	[0149.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css")) returned 0x20
	[0149.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css")) returned 0x20
	[0149.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.031] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0149.031] CloseHandle (hObject=0x200) returned 1
	[0149.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif")) returned 0x20
	[0149.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif")) returned 0x20
	[0149.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0149.032] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=255) returned 1
	[0149.032] CloseHandle (hObject=0x200) returned 1
	[0149.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif")) returned 0x20
	[0149.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif")) returned 0x20
	[0149.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.140] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0149.140] CloseHandle (hObject=0x204) returned 1
	[0149.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20
	[0149.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20
	[0149.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.141] SetEvent (hEvent=0xfc) returned 1
	[0149.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.142] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0149.142] CloseHandle (hObject=0x204) returned 1
	[0149.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20
	[0149.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20
	[0149.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.143] SetEvent (hEvent=0xfc) returned 1
	[0149.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.143] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3248) returned 1
	[0149.143] CloseHandle (hObject=0x204) returned 1
	[0149.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css")) returned 0x20
	[0149.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css")) returned 0x20
	[0149.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.144] SetEvent (hEvent=0xfc) returned 1
	[0149.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.145] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1823) returned 1
	[0149.145] CloseHandle (hObject=0x204) returned 1
	[0149.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css")) returned 0x20
	[0149.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css")) returned 0x20
	[0149.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.145] SetEvent (hEvent=0xfc) returned 1
	[0149.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.146] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0149.146] CloseHandle (hObject=0x204) returned 1
	[0149.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif")) returned 0x20
	[0149.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif")) returned 0x20
	[0149.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.147] SetEvent (hEvent=0xfc) returned 1
	[0149.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.147] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0149.147] CloseHandle (hObject=0x204) returned 1
	[0149.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif")) returned 0x20
	[0149.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif")) returned 0x20
	[0149.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.148] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3456) returned 1
	[0149.148] CloseHandle (hObject=0x204) returned 1
	[0149.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css")) returned 0x20
	[0149.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css")) returned 0x20
	[0149.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.152] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=323) returned 1
	[0149.152] CloseHandle (hObject=0x204) returned 1
	[0149.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif")) returned 0x20
	[0149.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif")) returned 0x20
	[0149.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.153] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0149.153] CloseHandle (hObject=0x204) returned 1
	[0149.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif")) returned 0x20
	[0149.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif")) returned 0x20
	[0149.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.153] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0149.154] CloseHandle (hObject=0x204) returned 1
	[0149.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20
	[0149.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20
	[0149.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.154] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0149.154] CloseHandle (hObject=0x204) returned 1
	[0149.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20
	[0149.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20
	[0149.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.155] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3132) returned 1
	[0149.155] CloseHandle (hObject=0x204) returned 1
	[0149.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css")) returned 0x20
	[0149.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css")) returned 0x20
	[0149.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.156] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=367) returned 1
	[0149.156] CloseHandle (hObject=0x204) returned 1
	[0149.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif")) returned 0x20
	[0149.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif")) returned 0x20
	[0149.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.157] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0149.157] CloseHandle (hObject=0x204) returned 1
	[0149.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20
	[0149.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20
	[0149.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.158] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0149.158] CloseHandle (hObject=0x204) returned 1
	[0149.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20
	[0149.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20
	[0149.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.159] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3331) returned 1
	[0149.159] CloseHandle (hObject=0x204) returned 1
	[0149.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css")) returned 0x20
	[0149.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css")) returned 0x20
	[0149.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.160] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1894) returned 1
	[0149.160] CloseHandle (hObject=0x204) returned 1
	[0149.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css")) returned 0x20
	[0149.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css")) returned 0x20
	[0149.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.161] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=148) returned 1
	[0149.161] CloseHandle (hObject=0x204) returned 1
	[0149.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif")) returned 0x20
	[0149.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif")) returned 0x20
	[0149.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.162] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=496) returned 1
	[0149.162] CloseHandle (hObject=0x204) returned 1
	[0149.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif")) returned 0x20
	[0149.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif")) returned 0x20
	[0149.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.163] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1025) returned 1
	[0149.163] CloseHandle (hObject=0x204) returned 1
	[0149.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif")) returned 0x20
	[0149.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif")) returned 0x20
	[0149.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.164] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2830) returned 1
	[0149.164] CloseHandle (hObject=0x204) returned 1
	[0149.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css")) returned 0x20
	[0149.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css")) returned 0x20
	[0149.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.165] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=371) returned 1
	[0149.165] CloseHandle (hObject=0x204) returned 1
	[0149.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css")) returned 0x20
	[0149.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css")) returned 0x20
	[0149.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.167] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1822) returned 1
	[0149.167] CloseHandle (hObject=0x204) returned 1
	[0149.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css")) returned 0x20
	[0149.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css")) returned 0x20
	[0149.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.168] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=440) returned 1
	[0149.168] CloseHandle (hObject=0x204) returned 1
	[0149.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif")) returned 0x20
	[0149.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif")) returned 0x20
	[0149.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.169] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0149.169] CloseHandle (hObject=0x204) returned 1
	[0149.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20
	[0149.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif")) returned 0x20
	[0149.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.170] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0149.170] CloseHandle (hObject=0x204) returned 1
	[0149.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20
	[0149.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif")) returned 0x20
	[0149.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.171] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3050) returned 1
	[0149.171] CloseHandle (hObject=0x204) returned 1
	[0149.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css")) returned 0x20
	[0149.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css")) returned 0x20
	[0149.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.172] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1874) returned 1
	[0149.172] CloseHandle (hObject=0x204) returned 1
	[0149.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css")) returned 0x20
	[0149.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css")) returned 0x20
	[0149.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0149.176] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1988) returned 1
	[0149.176] CloseHandle (hObject=0x168) returned 1
	[0149.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css")) returned 0x20
	[0149.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css")) returned 0x20
	[0149.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0149.177] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=462) returned 1
	[0149.177] CloseHandle (hObject=0x168) returned 1
	[0149.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif")) returned 0x20
	[0149.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif")) returned 0x20
	[0149.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0149.178] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=267) returned 1
	[0149.178] CloseHandle (hObject=0x168) returned 1
	[0149.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif")) returned 0x20
	[0149.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif")) returned 0x20
	[0149.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0149.179] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3447) returned 1
	[0149.179] CloseHandle (hObject=0x168) returned 1
	[0149.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css")) returned 0x20
	[0149.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css")) returned 0x20
	[0149.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0149.180] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1813) returned 1
	[0149.180] CloseHandle (hObject=0x168) returned 1
	[0149.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css")) returned 0x20
	[0149.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css")) returned 0x20
	[0149.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0149.181] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2156) returned 1
	[0149.181] CloseHandle (hObject=0x168) returned 1
	[0149.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif")) returned 0x20
	[0149.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif")) returned 0x20
	[0149.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0149.182] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=496) returned 1
	[0149.182] CloseHandle (hObject=0x168) returned 1
	[0149.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif")) returned 0x20
	[0149.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif")) returned 0x20
	[0149.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0149.183] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1025) returned 1
	[0149.183] CloseHandle (hObject=0x168) returned 1
	[0149.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif")) returned 0x20
	[0149.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif")) returned 0x20
	[0149.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0149.184] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3456) returned 1
	[0149.184] CloseHandle (hObject=0x168) returned 1
	[0149.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css")) returned 0x20
	[0149.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css")) returned 0x20
	[0149.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0149.185] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1871) returned 1
	[0149.185] CloseHandle (hObject=0x168) returned 1
	[0149.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css")) returned 0x20
	[0149.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css")) returned 0x20
	[0149.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0149.185] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1797) returned 1
	[0149.185] CloseHandle (hObject=0x168) returned 1
	[0149.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css")) returned 0x20
	[0149.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css")) returned 0x20
	[0149.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.394] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=870) returned 1
	[0149.394] CloseHandle (hObject=0x204) returned 1
	[0149.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif")) returned 0x20
	[0149.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif")) returned 0x20
	[0149.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_bold.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.395] SetEvent (hEvent=0xfc) returned 1
	[0149.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.395] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=852) returned 1
	[0149.395] CloseHandle (hObject=0x204) returned 1
	[0149.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif")) returned 0x20
	[0149.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif")) returned 0x20
	[0149.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_italic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.396] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=160) returned 1
	[0149.396] CloseHandle (hObject=0x204) returned 1
	[0149.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif")) returned 0x20
	[0149.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif")) returned 0x20
	[0149.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_spellcheck.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.397] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=860) returned 1
	[0149.397] CloseHandle (hObject=0x204) returned 1
	[0149.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif")) returned 0x20
	[0149.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif")) returned 0x20
	[0149.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\rtf_underline.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0149.912] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=364) returned 1
	[0149.912] CloseHandle (hObject=0x204) returned 1
	[0149.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif")) returned 0x20
	[0149.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif")) returned 0x20
	[0149.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0149.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0149.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.502] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0150.502] CloseHandle (hObject=0x204) returned 1
	[0150.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif")) returned 0x20
	[0150.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif")) returned 0x20
	[0150.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.502] SetEvent (hEvent=0xfc) returned 1
	[0150.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.503] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0150.503] CloseHandle (hObject=0x204) returned 1
	[0150.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif")) returned 0x20
	[0150.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif")) returned 0x20
	[0150.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.504] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3780) returned 1
	[0150.504] CloseHandle (hObject=0x204) returned 1
	[0150.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css")) returned 0x20
	[0150.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css")) returned 0x20
	[0150.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.505] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=229) returned 1
	[0150.505] CloseHandle (hObject=0x204) returned 1
	[0150.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png")) returned 0x20
	[0150.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png")) returned 0x20
	[0150.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.510] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2353) returned 1
	[0150.510] CloseHandle (hObject=0x204) returned 1
	[0150.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif")) returned 0x20
	[0150.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif")) returned 0x20
	[0150.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Document.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\document.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.510] SetEvent (hEvent=0xfc) returned 1
	[0150.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.511] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2098) returned 1
	[0150.511] CloseHandle (hObject=0x204) returned 1
	[0150.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif")) returned 0x20
	[0150.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif")) returned 0x20
	[0150.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Generic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\generic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.512] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=226) returned 1
	[0150.512] CloseHandle (hObject=0x204) returned 1
	[0150.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png")) returned 0x20
	[0150.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png")) returned 0x20
	[0150.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.513] SetEvent (hEvent=0xfc) returned 1
	[0150.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.513] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1588) returned 1
	[0150.513] CloseHandle (hObject=0x204) returned 1
	[0150.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif")) returned 0x20
	[0150.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif")) returned 0x20
	[0150.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Main.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\main.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.514] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2410) returned 1
	[0150.514] CloseHandle (hObject=0x204) returned 1
	[0150.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif")) returned 0x20
	[0150.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif")) returned 0x20
	[0150.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Person.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\person.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.515] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1678) returned 1
	[0150.516] CloseHandle (hObject=0x204) returned 1
	[0150.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif")) returned 0x20
	[0150.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif")) returned 0x20
	[0150.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\Response.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\response.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.516] SetEvent (hEvent=0xfc) returned 1
	[0150.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.517] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6604) returned 1
	[0150.517] CloseHandle (hObject=0x204) returned 1
	[0150.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css")) returned 0x20
	[0150.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css")) returned 0x20
	[0150.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.518] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=247) returned 1
	[0150.518] CloseHandle (hObject=0x204) returned 1
	[0150.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css")) returned 0x20
	[0150.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css")) returned 0x20
	[0150.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.518] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1372) returned 1
	[0150.518] CloseHandle (hObject=0x204) returned 1
	[0150.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css")) returned 0x20
	[0150.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css")) returned 0x20
	[0150.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.519] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=167) returned 1
	[0150.519] CloseHandle (hObject=0x204) returned 1
	[0150.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css")) returned 0x20
	[0150.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css")) returned 0x20
	[0150.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.520] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=171) returned 1
	[0150.520] CloseHandle (hObject=0x204) returned 1
	[0150.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css")) returned 0x20
	[0150.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css")) returned 0x20
	[0150.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0150.614] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=428) returned 1
	[0150.614] CloseHandle (hObject=0x204) returned 1
	[0150.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif")) returned 0x20
	[0150.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif")) returned 0x20
	[0150.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0150.998] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3261) returned 1
	[0150.998] CloseHandle (hObject=0x140) returned 1
	[0150.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif")) returned 0x20
	[0150.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif")) returned 0x20
	[0150.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.998] SetEvent (hEvent=0xfc) returned 1
	[0150.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0150.999] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=462) returned 1
	[0150.999] CloseHandle (hObject=0x140) returned 1
	[0150.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif")) returned 0x20
	[0150.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif")) returned 0x20
	[0150.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0150.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0150.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.000] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=264) returned 1
	[0151.000] CloseHandle (hObject=0x140) returned 1
	[0151.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif")) returned 0x20
	[0151.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif")) returned 0x20
	[0151.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.001] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3434) returned 1
	[0151.001] CloseHandle (hObject=0x140) returned 1
	[0151.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css")) returned 0x20
	[0151.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css")) returned 0x20
	[0151.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.276] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=815) returned 1
	[0151.276] CloseHandle (hObject=0x140) returned 1
	[0151.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif")) returned 0x20
	[0151.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif")) returned 0x20
	[0151.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.277] SetEvent (hEvent=0xfc) returned 1
	[0151.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.377] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39296) returned 1
	[0151.377] CloseHandle (hObject=0x140) returned 1
	[0151.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl")) returned 0x20
	[0151.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl")) returned 0x20
	[0151.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\lgnd.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.378] SetEvent (hEvent=0xfc) returned 1
	[0151.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.379] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=108416) returned 1
	[0151.379] CloseHandle (hObject=0x140) returned 1
	[0151.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll")) returned 0x20
	[0151.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll")) returned 0x20
	[0151.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPIR.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapir.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.379] SetEvent (hEvent=0xfc) returned 1
	[0151.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPISHELLR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapishellr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.380] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=591832) returned 1
	[0151.380] CloseHandle (hObject=0x140) returned 1
	[0151.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPISHELLR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapishellr.dll")) returned 0x20
	[0151.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPISHELLR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapishellr.dll")) returned 0x20
	[0151.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPISHELLR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapishellr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MAPISHELLR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mapishellr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MERES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\meres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.383] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1052592) returned 1
	[0151.383] CloseHandle (hObject=0x140) returned 1
	[0151.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MERES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\meres.dll")) returned 0x20
	[0151.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MERES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\meres.dll")) returned 0x20
	[0151.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MERES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\meres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MERES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\meres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.384] SetEvent (hEvent=0xfc) returned 1
	[0151.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.384] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=446312) returned 1
	[0151.384] CloseHandle (hObject=0x140) returned 1
	[0151.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.dll")) returned 0x20
	[0151.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.dll")) returned 0x20
	[0151.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.385] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39808) returned 1
	[0151.385] CloseHandle (hObject=0x140) returned 1
	[0151.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll")) returned 0x20
	[0151.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll")) returned 0x20
	[0151.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOR6INT.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mor6int.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.387] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1420) returned 1
	[0151.387] CloseHandle (hObject=0x140) returned 1
	[0151.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd")) returned 0x20
	[0151.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd")) returned 0x20
	[0151.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\move.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.387] SetEvent (hEvent=0xfc) returned 1
	[0151.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MPXRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mpxres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.388] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12664) returned 1
	[0151.388] CloseHandle (hObject=0x140) returned 1
	[0151.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MPXRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mpxres.dll")) returned 0x20
	[0151.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MPXRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mpxres.dll")) returned 0x20
	[0151.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MPXRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mpxres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MPXRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mpxres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.389] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10745972) returned 1
	[0151.389] CloseHandle (hObject=0x140) returned 1
	[0151.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs")) returned 0x20
	[0151.389] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.389] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev.hxs")) returned 0
	[0151.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.390] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=656) returned 1
	[0151.390] CloseHandle (hObject=0x140) returned 1
	[0151.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc")) returned 0x20
	[0151.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc")) returned 0x20
	[0151.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.391] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=212) returned 1
	[0151.391] CloseHandle (hObject=0x140) returned 1
	[0151.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt")) returned 0x20
	[0151.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt")) returned 0x20
	[0151.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.391] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0151.391] CloseHandle (hObject=0x140) returned 1
	[0151.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk")) returned 0x20
	[0151.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk")) returned 0x20
	[0151.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.392] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0151.392] CloseHandle (hObject=0x140) returned 1
	[0151.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk")) returned 0x20
	[0151.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk")) returned 0x20
	[0151.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.393] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3877906) returned 1
	[0151.393] CloseHandle (hObject=0x140) returned 1
	[0151.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs")) returned 0x20
	[0151.393] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.393] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess.hxs")) returned 0
	[0151.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.394] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=636) returned 1
	[0151.394] CloseHandle (hObject=0x140) returned 1
	[0151.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc")) returned 0x20
	[0151.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc")) returned 0x20
	[0151.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.395] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=208) returned 1
	[0151.395] CloseHandle (hObject=0x140) returned 1
	[0151.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt")) returned 0x20
	[0151.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt")) returned 0x20
	[0151.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.396] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0151.396] CloseHandle (hObject=0x140) returned 1
	[0151.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk")) returned 0x20
	[0151.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk")) returned 0x20
	[0151.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.397] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0151.397] CloseHandle (hObject=0x140) returned 1
	[0151.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk")) returned 0x20
	[0151.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk")) returned 0x20
	[0151.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msaccess_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msain.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.398] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1212288) returned 1
	[0151.398] CloseHandle (hObject=0x140) returned 1
	[0151.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msain.dll")) returned 0x20
	[0151.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msain.dll")) returned 0x20
	[0151.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSAIN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msain.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msain.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.625] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37762) returned 1
	[0151.625] CloseHandle (hObject=0x204) returned 1
	[0151.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl")) returned 0x20
	[0151.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl")) returned 0x20
	[0151.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.625] SetEvent (hEvent=0xfc) returned 1
	[0151.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.626] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=621) returned 1
	[0151.626] CloseHandle (hObject=0x204) returned 1
	[0151.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc")) returned 0x20
	[0151.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc")) returned 0x20
	[0151.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.627] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=205) returned 1
	[0151.627] CloseHandle (hObject=0x204) returned 1
	[0151.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt")) returned 0x20
	[0151.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt")) returned 0x20
	[0151.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.628] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0151.628] CloseHandle (hObject=0x204) returned 1
	[0151.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk")) returned 0x20
	[0151.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk")) returned 0x20
	[0151.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.629] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0151.629] CloseHandle (hObject=0x204) returned 1
	[0151.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk")) returned 0x20
	[0151.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk")) returned 0x20
	[0151.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mspub_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.630] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=513666) returned 1
	[0151.630] CloseHandle (hObject=0x204) returned 1
	[0151.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm")) returned 0x20
	[0151.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm")) returned 0x20
	[0151.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\msqry32.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.632] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89432) returned 1
	[0151.632] CloseHandle (hObject=0x140) returned 1
	[0151.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstintl.dll")) returned 0x20
	[0151.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstintl.dll")) returned 0x20
	[0151.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.633] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=389716) returned 1
	[0151.633] CloseHandle (hObject=0x140) returned 1
	[0151.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs")) returned 0x20
	[0151.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs")) returned 0x20
	[0151.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.634] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=626) returned 1
	[0151.634] CloseHandle (hObject=0x140) returned 1
	[0151.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc")) returned 0x20
	[0151.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc")) returned 0x20
	[0151.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.635] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=206) returned 1
	[0151.635] CloseHandle (hObject=0x140) returned 1
	[0151.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt")) returned 0x20
	[0151.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt")) returned 0x20
	[0151.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.636] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0151.636] CloseHandle (hObject=0x140) returned 1
	[0151.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk")) returned 0x20
	[0151.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk")) returned 0x20
	[0151.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0151.638] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0151.638] CloseHandle (hObject=0x140) returned 1
	[0151.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk")) returned 0x20
	[0151.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk")) returned 0x20
	[0151.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\MSTORE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\mstore_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0151.765] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3450) returned 1
	[0151.765] CloseHandle (hObject=0x200) returned 1
	[0151.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css")) returned 0x20
	[0151.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css")) returned 0x20
	[0151.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\network.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.766] SetEvent (hEvent=0xfc) returned 1
	[0151.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0151.767] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0151.767] CloseHandle (hObject=0x200) returned 1
	[0151.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk")) returned 0x20
	[0151.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk")) returned 0x20
	[0151.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0151.768] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0151.768] CloseHandle (hObject=0x200) returned 1
	[0151.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk")) returned 0x20
	[0151.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk")) returned 0x20
	[0151.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onenote_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0151.768] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1346920) returned 1
	[0151.768] CloseHandle (hObject=0x200) returned 1
	[0151.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg")) returned 0x20
	[0151.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg")) returned 0x20
	[0151.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onguide.onepkg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0151.769] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3415952) returned 1
	[0151.769] CloseHandle (hObject=0x200) returned 1
	[0151.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll")) returned 0x20
	[0151.769] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.770] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll")) returned 0
	[0151.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0151.770] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15232) returned 1
	[0151.770] CloseHandle (hObject=0x200) returned 1
	[0151.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll")) returned 0x20
	[0151.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll")) returned 0x20
	[0151.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0151.771] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114560) returned 1
	[0151.771] CloseHandle (hObject=0x200) returned 1
	[0151.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll")) returned 0x20
	[0151.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll")) returned 0x20
	[0151.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ONINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\onintl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0151.773] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1608) returned 1
	[0151.773] CloseHandle (hObject=0x204) returned 1
	[0151.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd")) returned 0x20
	[0151.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd")) returned 0x20
	[0151.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgch.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.937] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=57248) returned 1
	[0151.937] CloseHandle (hObject=0x1f4) returned 1
	[0151.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl")) returned 0x20
	[0151.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl")) returned 0x20
	[0151.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\orgchart.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.937] SetEvent (hEvent=0xfc) returned 1
	[0151.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.939] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137096) returned 1
	[0151.939] CloseHandle (hObject=0x1f4) returned 1
	[0151.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl")) returned 0x20
	[0151.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl")) returned 0x20
	[0151.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.939] SetEvent (hEvent=0xfc) returned 1
	[0151.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.940] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23552) returned 1
	[0151.940] CloseHandle (hObject=0x1f4) returned 1
	[0151.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss")) returned 0x20
	[0151.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss")) returned 0x20
	[0151.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROPRPT.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\proprpt.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.941] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19968) returned 1
	[0151.941] CloseHandle (hObject=0x1f4) returned 1
	[0151.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc")) returned 0x20
	[0151.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc")) returned 0x20
	[0151.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.942] SetEvent (hEvent=0xfc) returned 1
	[0151.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.942] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12288) returned 1
	[0151.942] CloseHandle (hObject=0x1f4) returned 1
	[0151.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt")) returned 0x20
	[0151.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt")) returned 0x20
	[0151.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.943] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8704) returned 1
	[0151.943] CloseHandle (hObject=0x1f4) returned 1
	[0151.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls")) returned 0x20
	[0151.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls")) returned 0x20
	[0151.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottpln.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.944] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19968) returned 1
	[0151.944] CloseHandle (hObject=0x1f4) returned 1
	[0151.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc")) returned 0x20
	[0151.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc")) returned 0x20
	[0151.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.945] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12288) returned 1
	[0151.945] CloseHandle (hObject=0x1f4) returned 1
	[0151.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt")) returned 0x20
	[0151.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt")) returned 0x20
	[0151.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.946] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8704) returned 1
	[0151.946] CloseHandle (hObject=0x1f4) returned 1
	[0151.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls")) returned 0x20
	[0151.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls")) returned 0x20
	[0151.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\prottplv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.947] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=325495) returned 1
	[0151.947] CloseHandle (hObject=0x1f4) returned 1
	[0151.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat")) returned 0x20
	[0151.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat")) returned 0x20
	[0151.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchkey.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.949] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2046328) returned 1
	[0151.949] CloseHandle (hObject=0x1f4) returned 1
	[0151.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat")) returned 0x20
	[0151.949] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.949] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlex.dat")) returned 0
	[0151.950] SetEvent (hEvent=0xfc) returned 1
	[0151.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.950] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52580) returned 1
	[0151.950] CloseHandle (hObject=0x1f4) returned 1
	[0151.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat")) returned 0x20
	[0151.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat")) returned 0x20
	[0151.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchlts.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.951] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3352) returned 1
	[0151.951] CloseHandle (hObject=0x1f4) returned 1
	[0151.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat")) returned 0x20
	[0151.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat")) returned 0x20
	[0151.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchphn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.952] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10500679) returned 1
	[0151.952] CloseHandle (hObject=0x1f4) returned 1
	[0151.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat")) returned 0x20
	[0151.952] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.952] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\psrchsrn.dat")) returned 0
	[0151.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.954] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6982504) returned 1
	[0151.954] CloseHandle (hObject=0x1f4) returned 1
	[0151.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll")) returned 0x20
	[0151.954] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0151.954] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll")) returned 0
	[0151.954] SetEvent (hEvent=0xfc) returned 1
	[0151.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.955] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67968) returned 1
	[0151.955] CloseHandle (hObject=0x1f4) returned 1
	[0151.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll")) returned 0x20
	[0151.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll")) returned 0x20
	[0151.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.956] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=269184) returned 1
	[0151.956] CloseHandle (hObject=0x1f4) returned 1
	[0151.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll")) returned 0x20
	[0151.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll")) returned 0x20
	[0151.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUB6INTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pub6intl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.957] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28160) returned 1
	[0151.957] CloseHandle (hObject=0x1f4) returned 1
	[0151.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm")) returned 0x20
	[0151.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm")) returned 0x20
	[0151.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubcolor.scm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0151.959] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3255) returned 1
	[0151.959] CloseHandle (hObject=0x1f4) returned 1
	[0151.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini")) returned 0x20
	[0151.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini")) returned 0x20
	[0151.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0151.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\FONTSCHM.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\fontschm.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.062] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=126630) returned 1
	[0152.062] CloseHandle (hObject=0x168) returned 1
	[0152.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css")) returned 0x20
	[0152.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css")) returned 0x20
	[0152.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.063] SetEvent (hEvent=0xfc) returned 1
	[0152.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.064] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=127012) returned 1
	[0152.064] CloseHandle (hObject=0x168) returned 1
	[0152.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css")) returned 0x20
	[0152.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css")) returned 0x20
	[0152.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.064] SetEvent (hEvent=0xfc) returned 1
	[0152.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.065] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=128226) returned 1
	[0152.065] CloseHandle (hObject=0x168) returned 1
	[0152.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css")) returned 0x20
	[0152.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css")) returned 0x20
	[0152.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.066] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=126394) returned 1
	[0152.066] CloseHandle (hObject=0x168) returned 1
	[0152.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css")) returned 0x20
	[0152.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css")) returned 0x20
	[0152.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.067] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=127706) returned 1
	[0152.067] CloseHandle (hObject=0x168) returned 1
	[0152.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css")) returned 0x20
	[0152.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css")) returned 0x20
	[0152.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.070] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=130902) returned 1
	[0152.070] CloseHandle (hObject=0x1f8) returned 1
	[0152.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css")) returned 0x20
	[0152.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css")) returned 0x20
	[0152.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.071] SetEvent (hEvent=0xfc) returned 1
	[0152.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.071] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=129432) returned 1
	[0152.071] CloseHandle (hObject=0x1f8) returned 1
	[0152.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css")) returned 0x20
	[0152.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css")) returned 0x20
	[0152.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.072] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=132164) returned 1
	[0152.072] CloseHandle (hObject=0x1f8) returned 1
	[0152.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css")) returned 0x20
	[0152.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css")) returned 0x20
	[0152.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.073] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=132906) returned 1
	[0152.073] CloseHandle (hObject=0x1f8) returned 1
	[0152.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css")) returned 0x20
	[0152.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css")) returned 0x20
	[0152.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.076] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131120) returned 1
	[0152.076] CloseHandle (hObject=0x168) returned 1
	[0152.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css")) returned 0x20
	[0152.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css")) returned 0x20
	[0152.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.078] SetEvent (hEvent=0xfc) returned 1
	[0152.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.079] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=123034) returned 1
	[0152.079] CloseHandle (hObject=0x168) returned 1
	[0152.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css")) returned 0x20
	[0152.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css")) returned 0x20
	[0152.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.080] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=126106) returned 1
	[0152.080] CloseHandle (hObject=0x168) returned 1
	[0152.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css")) returned 0x20
	[0152.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css")) returned 0x20
	[0152.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.081] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=128460) returned 1
	[0152.081] CloseHandle (hObject=0x168) returned 1
	[0152.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css")) returned 0x20
	[0152.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css")) returned 0x20
	[0152.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.083] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=123028) returned 1
	[0152.083] CloseHandle (hObject=0x168) returned 1
	[0152.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css")) returned 0x20
	[0152.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css")) returned 0x20
	[0152.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.083] SetEvent (hEvent=0xfc) returned 1
	[0152.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.084] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=129058) returned 1
	[0152.084] CloseHandle (hObject=0x168) returned 1
	[0152.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css")) returned 0x20
	[0152.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css")) returned 0x20
	[0152.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.084] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=125658) returned 1
	[0152.085] CloseHandle (hObject=0x168) returned 1
	[0152.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css")) returned 0x20
	[0152.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css")) returned 0x20
	[0152.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme17.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.085] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=132152) returned 1
	[0152.085] CloseHandle (hObject=0x168) returned 1
	[0152.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css")) returned 0x20
	[0152.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css")) returned 0x20
	[0152.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme18.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.088] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131058) returned 1
	[0152.088] CloseHandle (hObject=0x168) returned 1
	[0152.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css")) returned 0x20
	[0152.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css")) returned 0x20
	[0152.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme19.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.088] SetEvent (hEvent=0xfc) returned 1
	[0152.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.089] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=128752) returned 1
	[0152.089] CloseHandle (hObject=0x168) returned 1
	[0152.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css")) returned 0x20
	[0152.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css")) returned 0x20
	[0152.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme20.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.090] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=125670) returned 1
	[0152.090] CloseHandle (hObject=0x168) returned 1
	[0152.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css")) returned 0x20
	[0152.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css")) returned 0x20
	[0152.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme21.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.091] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=130250) returned 1
	[0152.091] CloseHandle (hObject=0x168) returned 1
	[0152.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css")) returned 0x20
	[0152.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css")) returned 0x20
	[0152.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme22.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.110] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=128506) returned 1
	[0152.110] CloseHandle (hObject=0x168) returned 1
	[0152.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css")) returned 0x20
	[0152.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css")) returned 0x20
	[0152.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme23.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.111] SetEvent (hEvent=0xfc) returned 1
	[0152.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.111] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=126520) returned 1
	[0152.111] CloseHandle (hObject=0x168) returned 1
	[0152.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css")) returned 0x20
	[0152.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css")) returned 0x20
	[0152.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme24.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.112] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=130286) returned 1
	[0152.112] CloseHandle (hObject=0x168) returned 1
	[0152.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css")) returned 0x20
	[0152.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css")) returned 0x20
	[0152.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme25.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.113] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=119222) returned 1
	[0152.113] CloseHandle (hObject=0x168) returned 1
	[0152.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css")) returned 0x20
	[0152.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css")) returned 0x20
	[0152.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme26.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.115] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=123016) returned 1
	[0152.115] CloseHandle (hObject=0x168) returned 1
	[0152.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css")) returned 0x20
	[0152.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css")) returned 0x20
	[0152.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme27.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.116] SetEvent (hEvent=0xfc) returned 1
	[0152.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.116] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=120660) returned 1
	[0152.116] CloseHandle (hObject=0x168) returned 1
	[0152.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css")) returned 0x20
	[0152.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css")) returned 0x20
	[0152.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme28.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.117] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=125770) returned 1
	[0152.117] CloseHandle (hObject=0x168) returned 1
	[0152.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css")) returned 0x20
	[0152.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css")) returned 0x20
	[0152.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme29.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0152.118] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=120098) returned 1
	[0152.118] CloseHandle (hObject=0x168) returned 1
	[0152.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css")) returned 0x20
	[0152.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css")) returned 0x20
	[0152.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme30.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.123] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=120402) returned 1
	[0152.123] CloseHandle (hObject=0x204) returned 1
	[0152.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css")) returned 0x20
	[0152.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css")) returned 0x20
	[0152.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme31.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.124] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=125728) returned 1
	[0152.124] CloseHandle (hObject=0x204) returned 1
	[0152.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css")) returned 0x20
	[0152.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css")) returned 0x20
	[0152.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme32.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.125] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=122032) returned 1
	[0152.125] CloseHandle (hObject=0x204) returned 1
	[0152.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css")) returned 0x20
	[0152.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css")) returned 0x20
	[0152.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme33.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.126] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=119076) returned 1
	[0152.126] CloseHandle (hObject=0x204) returned 1
	[0152.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css")) returned 0x20
	[0152.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css")) returned 0x20
	[0152.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme34.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.299] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131824) returned 1
	[0152.299] CloseHandle (hObject=0x200) returned 1
	[0152.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css")) returned 0x20
	[0152.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css")) returned 0x20
	[0152.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubftscm\\scheme35.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.299] SetEvent (hEvent=0xfc) returned 1
	[0152.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.427] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=54435) returned 1
	[0152.427] CloseHandle (hObject=0x1f4) returned 1
	[0152.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif")) returned 0x20
	[0152.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif")) returned 0x20
	[0152.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir37f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.428] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28234) returned 1
	[0152.428] CloseHandle (hObject=0x1f4) returned 1
	[0152.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif")) returned 0x20
	[0152.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif")) returned 0x20
	[0152.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir6f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.429] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24660) returned 1
	[0152.429] CloseHandle (hObject=0x1f4) returned 1
	[0152.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif")) returned 0x20
	[0152.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif")) returned 0x20
	[0152.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.430] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28860) returned 1
	[0152.430] CloseHandle (hObject=0x1f4) returned 1
	[0152.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif")) returned 0x20
	[0152.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif")) returned 0x20
	[0152.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir7f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.432] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3374) returned 1
	[0152.432] CloseHandle (hObject=0x1f4) returned 1
	[0152.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif")) returned 0x20
	[0152.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif")) returned 0x20
	[0152.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.433] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8708) returned 1
	[0152.433] CloseHandle (hObject=0x1f4) returned 1
	[0152.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif")) returned 0x20
	[0152.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif")) returned 0x20
	[0152.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir8f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.434] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17501) returned 1
	[0152.434] CloseHandle (hObject=0x1f4) returned 1
	[0152.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif")) returned 0x20
	[0152.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif")) returned 0x20
	[0152.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.435] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23276) returned 1
	[0152.435] CloseHandle (hObject=0x1f4) returned 1
	[0152.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif")) returned 0x20
	[0152.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif")) returned 0x20
	[0152.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\pdir9f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpapers.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.435] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6302) returned 1
	[0152.435] CloseHandle (hObject=0x1f4) returned 1
	[0152.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpapers.ini")) returned 0x20
	[0152.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpapers.ini")) returned 0x20
	[0152.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpapers.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPAPERS.INI" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpapers.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.436] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41) returned 1
	[0152.436] CloseHandle (hObject=0x1f4) returned 1
	[0152.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif")) returned 0x20
	[0152.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif")) returned 0x20
	[0152.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir00.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.439] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5037) returned 1
	[0152.439] CloseHandle (hObject=0x1f4) returned 1
	[0152.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif")) returned 0x20
	[0152.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif")) returned 0x20
	[0152.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir10f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.440] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5894) returned 1
	[0152.440] CloseHandle (hObject=0x1f4) returned 1
	[0152.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif")) returned 0x20
	[0152.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif")) returned 0x20
	[0152.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir11f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.441] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25753) returned 1
	[0152.441] CloseHandle (hObject=0x1f4) returned 1
	[0152.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif")) returned 0x20
	[0152.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif")) returned 0x20
	[0152.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir12f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.442] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15592) returned 1
	[0152.442] CloseHandle (hObject=0x1f4) returned 1
	[0152.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif")) returned 0x20
	[0152.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif")) returned 0x20
	[0152.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir13f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.444] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25691) returned 1
	[0152.444] CloseHandle (hObject=0x1f4) returned 1
	[0152.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif")) returned 0x20
	[0152.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif")) returned 0x20
	[0152.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir14f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.445] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17707) returned 1
	[0152.445] CloseHandle (hObject=0x1f4) returned 1
	[0152.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif")) returned 0x20
	[0152.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif")) returned 0x20
	[0152.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir15f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.445] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12225) returned 1
	[0152.446] CloseHandle (hObject=0x1f4) returned 1
	[0152.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif")) returned 0x20
	[0152.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif")) returned 0x20
	[0152.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir16f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.446] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13519) returned 1
	[0152.446] CloseHandle (hObject=0x1f4) returned 1
	[0152.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif")) returned 0x20
	[0152.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif")) returned 0x20
	[0152.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir17f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.447] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19433) returned 1
	[0152.447] CloseHandle (hObject=0x1f4) returned 1
	[0152.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif")) returned 0x20
	[0152.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif")) returned 0x20
	[0152.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir18f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.448] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3089) returned 1
	[0152.448] CloseHandle (hObject=0x1f4) returned 1
	[0152.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif")) returned 0x20
	[0152.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif")) returned 0x20
	[0152.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir19f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.449] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3829) returned 1
	[0152.449] CloseHandle (hObject=0x1f4) returned 1
	[0152.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif")) returned 0x20
	[0152.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif")) returned 0x20
	[0152.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.451] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7029) returned 1
	[0152.451] CloseHandle (hObject=0x1f4) returned 1
	[0152.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif")) returned 0x20
	[0152.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif")) returned 0x20
	[0152.451] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir1f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.452] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3205) returned 1
	[0152.452] CloseHandle (hObject=0x1f4) returned 1
	[0152.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif")) returned 0x20
	[0152.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif")) returned 0x20
	[0152.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir20f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.453] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17130) returned 1
	[0152.453] CloseHandle (hObject=0x1f4) returned 1
	[0152.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif")) returned 0x20
	[0152.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif")) returned 0x20
	[0152.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir21f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.454] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6531) returned 1
	[0152.454] CloseHandle (hObject=0x1f4) returned 1
	[0152.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif")) returned 0x20
	[0152.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif")) returned 0x20
	[0152.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir22f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.455] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10865) returned 1
	[0152.455] CloseHandle (hObject=0x1f4) returned 1
	[0152.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif")) returned 0x20
	[0152.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif")) returned 0x20
	[0152.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir23f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.456] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16225) returned 1
	[0152.456] CloseHandle (hObject=0x1f4) returned 1
	[0152.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif")) returned 0x20
	[0152.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif")) returned 0x20
	[0152.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir24f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.457] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12908) returned 1
	[0152.457] CloseHandle (hObject=0x1f4) returned 1
	[0152.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif")) returned 0x20
	[0152.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif")) returned 0x20
	[0152.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir25f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.458] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8306) returned 1
	[0152.459] CloseHandle (hObject=0x1f4) returned 1
	[0152.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif")) returned 0x20
	[0152.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif")) returned 0x20
	[0152.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir26f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.461] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8432) returned 1
	[0152.461] CloseHandle (hObject=0x1f4) returned 1
	[0152.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif")) returned 0x20
	[0152.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif")) returned 0x20
	[0152.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir27f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.462] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4259) returned 1
	[0152.462] CloseHandle (hObject=0x1f4) returned 1
	[0152.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif")) returned 0x20
	[0152.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif")) returned 0x20
	[0152.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir28f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0152.463] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5188) returned 1
	[0152.463] CloseHandle (hObject=0x1f4) returned 1
	[0152.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif")) returned 0x20
	[0152.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif")) returned 0x20
	[0152.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir29f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.559] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3145) returned 1
	[0152.559] CloseHandle (hObject=0x204) returned 1
	[0152.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif")) returned 0x20
	[0152.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif")) returned 0x20
	[0152.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir2b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.560] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53676) returned 1
	[0152.560] CloseHandle (hObject=0x204) returned 1
	[0152.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif")) returned 0x20
	[0152.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif")) returned 0x20
	[0152.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir37f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.561] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52163) returned 1
	[0152.561] CloseHandle (hObject=0x204) returned 1
	[0152.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif")) returned 0x20
	[0152.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif")) returned 0x20
	[0152.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir38f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.563] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56474) returned 1
	[0152.563] CloseHandle (hObject=0x204) returned 1
	[0152.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif")) returned 0x20
	[0152.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif")) returned 0x20
	[0152.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir39f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.564] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14878) returned 1
	[0152.564] CloseHandle (hObject=0x204) returned 1
	[0152.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif")) returned 0x20
	[0152.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif")) returned 0x20
	[0152.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.565] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22754) returned 1
	[0152.565] CloseHandle (hObject=0x204) returned 1
	[0152.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif")) returned 0x20
	[0152.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif")) returned 0x20
	[0152.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir3f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.566] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70307) returned 1
	[0152.566] CloseHandle (hObject=0x204) returned 1
	[0152.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif")) returned 0x20
	[0152.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif")) returned 0x20
	[0152.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir40f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.567] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39520) returned 1
	[0152.567] CloseHandle (hObject=0x204) returned 1
	[0152.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif")) returned 0x20
	[0152.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif")) returned 0x20
	[0152.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir41f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.569] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=58769) returned 1
	[0152.569] CloseHandle (hObject=0x204) returned 1
	[0152.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif")) returned 0x20
	[0152.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif")) returned 0x20
	[0152.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir42f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.569] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2442) returned 1
	[0152.570] CloseHandle (hObject=0x204) returned 1
	[0152.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif")) returned 0x20
	[0152.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif")) returned 0x20
	[0152.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.570] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2455) returned 1
	[0152.570] CloseHandle (hObject=0x204) returned 1
	[0152.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif")) returned 0x20
	[0152.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif")) returned 0x20
	[0152.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir43f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.571] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6918) returned 1
	[0152.571] CloseHandle (hObject=0x204) returned 1
	[0152.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif")) returned 0x20
	[0152.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif")) returned 0x20
	[0152.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.576] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6774) returned 1
	[0152.576] CloseHandle (hObject=0x200) returned 1
	[0152.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif")) returned 0x20
	[0152.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif")) returned 0x20
	[0152.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir44f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.577] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6075) returned 1
	[0152.577] CloseHandle (hObject=0x200) returned 1
	[0152.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif")) returned 0x20
	[0152.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif")) returned 0x20
	[0152.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.577] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5867) returned 1
	[0152.577] CloseHandle (hObject=0x200) returned 1
	[0152.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif")) returned 0x20
	[0152.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif")) returned 0x20
	[0152.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir45f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.578] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4868) returned 1
	[0152.578] CloseHandle (hObject=0x200) returned 1
	[0152.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif")) returned 0x20
	[0152.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif")) returned 0x20
	[0152.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.581] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5148) returned 1
	[0152.581] CloseHandle (hObject=0x1f8) returned 1
	[0152.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif")) returned 0x20
	[0152.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif")) returned 0x20
	[0152.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir46f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.581] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29975) returned 1
	[0152.581] CloseHandle (hObject=0x1f8) returned 1
	[0152.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif")) returned 0x20
	[0152.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif")) returned 0x20
	[0152.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.582] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21406) returned 1
	[0152.582] CloseHandle (hObject=0x1f8) returned 1
	[0152.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif")) returned 0x20
	[0152.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif")) returned 0x20
	[0152.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir47f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.583] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26617) returned 1
	[0152.583] CloseHandle (hObject=0x1f8) returned 1
	[0152.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif")) returned 0x20
	[0152.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif")) returned 0x20
	[0152.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.586] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7073) returned 1
	[0152.586] CloseHandle (hObject=0x1f8) returned 1
	[0152.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif")) returned 0x20
	[0152.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif")) returned 0x20
	[0152.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir48f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.587] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7383) returned 1
	[0152.587] CloseHandle (hObject=0x1f8) returned 1
	[0152.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif")) returned 0x20
	[0152.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif")) returned 0x20
	[0152.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.588] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7065) returned 1
	[0152.589] CloseHandle (hObject=0x1f8) returned 1
	[0152.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif")) returned 0x20
	[0152.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif")) returned 0x20
	[0152.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir49f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.589] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12226) returned 1
	[0152.589] CloseHandle (hObject=0x1f8) returned 1
	[0152.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif")) returned 0x20
	[0152.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif")) returned 0x20
	[0152.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.594] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36571) returned 1
	[0152.594] CloseHandle (hObject=0x200) returned 1
	[0152.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif")) returned 0x20
	[0152.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif")) returned 0x20
	[0152.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir4f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.595] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4263) returned 1
	[0152.595] CloseHandle (hObject=0x200) returned 1
	[0152.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif")) returned 0x20
	[0152.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif")) returned 0x20
	[0152.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.595] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4479) returned 1
	[0152.596] CloseHandle (hObject=0x200) returned 1
	[0152.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif")) returned 0x20
	[0152.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif")) returned 0x20
	[0152.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir50f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.596] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9109) returned 1
	[0152.596] CloseHandle (hObject=0x200) returned 1
	[0152.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif")) returned 0x20
	[0152.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif")) returned 0x20
	[0152.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0152.599] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4473) returned 1
	[0152.600] CloseHandle (hObject=0x208) returned 1
	[0152.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif")) returned 0x20
	[0152.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif")) returned 0x20
	[0152.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir51f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0152.600] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22827) returned 1
	[0152.600] CloseHandle (hObject=0x208) returned 1
	[0152.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif")) returned 0x20
	[0152.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif")) returned 0x20
	[0152.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0152.601] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56110) returned 1
	[0152.601] CloseHandle (hObject=0x208) returned 1
	[0152.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif")) returned 0x20
	[0152.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif")) returned 0x20
	[0152.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir5f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0152.738] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10974) returned 1
	[0152.738] CloseHandle (hObject=0x204) returned 1
	[0152.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif")) returned 0x20
	[0152.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif")) returned 0x20
	[0152.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\pubspapr\\zpdir6b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.739] SetEvent (hEvent=0xfc) returned 1
	[0152.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0152.877] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8731) returned 1
	[0152.877] CloseHandle (hObject=0x1f8) returned 1
	[0152.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx")) returned 0x20
	[0152.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx")) returned 0x20
	[0152.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\Fancy.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\quickstyles\\fancy.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.987] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=281448) returned 1
	[0152.987] CloseHandle (hObject=0x200) returned 1
	[0152.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl")) returned 0x20
	[0152.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl")) returned 0x20
	[0152.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\timesoln.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.988] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19328) returned 1
	[0152.988] CloseHandle (hObject=0x200) returned 1
	[0152.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll")) returned 0x20
	[0152.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll")) returned 0x20
	[0152.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISBRRES.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visbrres.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.989] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43392) returned 1
	[0152.989] CloseHandle (hObject=0x200) returned 1
	[0152.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl")) returned 0x20
	[0152.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl")) returned 0x20
	[0152.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\viscolor.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.990] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=758648) returned 1
	[0152.990] CloseHandle (hObject=0x200) returned 1
	[0152.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll")) returned 0x20
	[0152.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll")) returned 0x20
	[0152.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.991] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=240000) returned 1
	[0152.991] CloseHandle (hObject=0x200) returned 1
	[0152.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll")) returned 0x20
	[0152.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll")) returned 0x20
	[0152.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.993] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3450) returned 1
	[0152.993] CloseHandle (hObject=0x200) returned 1
	[0152.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css")) returned 0x20
	[0152.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css")) returned 0x20
	[0152.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.994] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5802528) returned 1
	[0152.994] CloseHandle (hObject=0x200) returned 1
	[0152.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs")) returned 0x20
	[0152.994] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0152.994] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev.hxs")) returned 0
	[0152.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.995] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=641) returned 1
	[0152.995] CloseHandle (hObject=0x200) returned 1
	[0152.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc")) returned 0x20
	[0152.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc")) returned 0x20
	[0152.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.996] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=209) returned 1
	[0152.996] CloseHandle (hObject=0x200) returned 1
	[0152.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt")) returned 0x20
	[0152.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt")) returned 0x20
	[0152.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.997] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0152.997] CloseHandle (hObject=0x200) returned 1
	[0152.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk")) returned 0x20
	[0152.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk")) returned 0x20
	[0152.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.997] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0152.998] CloseHandle (hObject=0x200) returned 1
	[0152.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk")) returned 0x20
	[0152.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk")) returned 0x20
	[0152.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0152.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0152.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.998] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2839338) returned 1
	[0152.998] CloseHandle (hObject=0x200) returned 1
	[0152.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs")) returned 0x20
	[0152.999] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0152.999] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.hxs")) returned 0
	[0152.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0152.999] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=879814) returned 1
	[0152.999] CloseHandle (hObject=0x200) returned 1
	[0152.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs")) returned 0x20
	[0152.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs")) returned 0x20
	[0153.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.000] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=676) returned 1
	[0153.000] CloseHandle (hObject=0x200) returned 1
	[0153.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc")) returned 0x20
	[0153.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc")) returned 0x20
	[0153.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.001] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=216) returned 1
	[0153.001] CloseHandle (hObject=0x200) returned 1
	[0153.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt")) returned 0x20
	[0153.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt")) returned 0x20
	[0153.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.002] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0153.002] CloseHandle (hObject=0x200) returned 1
	[0153.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk")) returned 0x20
	[0153.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk")) returned 0x20
	[0153.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.004] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0153.004] CloseHandle (hObject=0x200) returned 1
	[0153.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk")) returned 0x20
	[0153.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk")) returned 0x20
	[0153.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO.SHAPESHEET_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio.shapesheet_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.005] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=621) returned 1
	[0153.005] CloseHandle (hObject=0x200) returned 1
	[0153.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc")) returned 0x20
	[0153.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc")) returned 0x20
	[0153.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.006] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=205) returned 1
	[0153.006] CloseHandle (hObject=0x200) returned 1
	[0153.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt")) returned 0x20
	[0153.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt")) returned 0x20
	[0153.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.006] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0153.006] CloseHandle (hObject=0x200) returned 1
	[0153.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk")) returned 0x20
	[0153.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk")) returned 0x20
	[0153.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.007] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0153.007] CloseHandle (hObject=0x200) returned 1
	[0153.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk")) returned 0x20
	[0153.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk")) returned 0x20
	[0153.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.008] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2287488) returned 1
	[0153.008] CloseHandle (hObject=0x200) returned 1
	[0153.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs")) returned 0x20
	[0153.008] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.009] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm.hxs")) returned 0
	[0153.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.009] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=641) returned 1
	[0153.009] CloseHandle (hObject=0x200) returned 1
	[0153.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc")) returned 0x20
	[0153.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc")) returned 0x20
	[0153.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.010] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=209) returned 1
	[0153.010] CloseHandle (hObject=0x200) returned 1
	[0153.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt")) returned 0x20
	[0153.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt")) returned 0x20
	[0153.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.011] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0153.011] CloseHandle (hObject=0x200) returned 1
	[0153.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk")) returned 0x20
	[0153.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk")) returned 0x20
	[0153.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.012] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0153.012] CloseHandle (hObject=0x200) returned 1
	[0153.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk")) returned 0x20
	[0153.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk")) returned 0x20
	[0153.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_prm_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.019] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2520158) returned 1
	[0153.019] CloseHandle (hObject=0x200) returned 1
	[0153.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs")) returned 0x20
	[0153.019] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.020] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std.hxs")) returned 0
	[0153.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.020] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=641) returned 1
	[0153.020] CloseHandle (hObject=0x200) returned 1
	[0153.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc")) returned 0x20
	[0153.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc")) returned 0x20
	[0153.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.021] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=209) returned 1
	[0153.021] CloseHandle (hObject=0x200) returned 1
	[0153.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt")) returned 0x20
	[0153.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt")) returned 0x20
	[0153.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.022] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0153.022] CloseHandle (hObject=0x200) returned 1
	[0153.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk")) returned 0x20
	[0153.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk")) returned 0x20
	[0153.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.023] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0153.023] CloseHandle (hObject=0x200) returned 1
	[0153.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk")) returned 0x20
	[0153.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk")) returned 0x20
	[0153.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visio_std_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.024] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50544) returned 1
	[0153.024] CloseHandle (hObject=0x200) returned 1
	[0153.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl")) returned 0x20
	[0153.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl")) returned 0x20
	[0153.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visutils.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.025] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=68488) returned 1
	[0153.025] CloseHandle (hObject=0x200) returned 1
	[0153.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl")) returned 0x20
	[0153.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl")) returned 0x20
	[0153.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\visweb.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.026] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=153) returned 1
	[0153.026] CloseHandle (hObject=0x200) returned 1
	[0153.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir")) returned 0x20
	[0153.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir")) returned 0x20
	[0153.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\Visfilem.vsdir" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vsdir\\visfilem.vsdir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vviewres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.145] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=668544) returned 1
	[0153.145] CloseHandle (hObject=0x200) returned 1
	[0153.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vviewres.dll")) returned 0x20
	[0153.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vviewres.dll")) returned 0x20
	[0153.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vviewres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\vviewres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.146] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7438482) returned 1
	[0153.146] CloseHandle (hObject=0x200) returned 1
	[0153.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs")) returned 0x20
	[0153.146] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.146] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev.hxs")) returned 0
	[0153.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.147] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=651) returned 1
	[0153.147] CloseHandle (hObject=0x200) returned 1
	[0153.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc")) returned 0x20
	[0153.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc")) returned 0x20
	[0153.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.148] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=211) returned 1
	[0153.148] CloseHandle (hObject=0x200) returned 1
	[0153.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt")) returned 0x20
	[0153.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt")) returned 0x20
	[0153.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.148] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0153.148] CloseHandle (hObject=0x200) returned 1
	[0153.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk")) returned 0x20
	[0153.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk")) returned 0x20
	[0153.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.149] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0153.149] CloseHandle (hObject=0x200) returned 1
	[0153.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk")) returned 0x20
	[0153.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk")) returned 0x20
	[0153.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.DEV_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.dev_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.150] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5240293) returned 1
	[0153.150] CloseHandle (hObject=0x200) returned 1
	[0153.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs")) returned 0x20
	[0153.151] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.151] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword.hxs")) returned 0
	[0153.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.155] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=631) returned 1
	[0153.155] CloseHandle (hObject=0x200) returned 1
	[0153.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc")) returned 0x20
	[0153.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc")) returned 0x20
	[0153.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.156] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=207) returned 1
	[0153.156] CloseHandle (hObject=0x200) returned 1
	[0153.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt")) returned 0x20
	[0153.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt")) returned 0x20
	[0153.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.157] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114) returned 1
	[0153.157] CloseHandle (hObject=0x200) returned 1
	[0153.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk")) returned 0x20
	[0153.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk")) returned 0x20
	[0153.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.158] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113) returned 1
	[0153.158] CloseHandle (hObject=0x200) returned 1
	[0153.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk")) returned 0x20
	[0153.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk")) returned 0x20
	[0153.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\winword_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.159] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42336) returned 1
	[0153.159] CloseHandle (hObject=0x200) returned 1
	[0153.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl")) returned 0x20
	[0153.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl")) returned 0x20
	[0153.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\workflow.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.160] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=901464) returned 1
	[0153.160] CloseHandle (hObject=0x200) returned 1
	[0153.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll")) returned 0x20
	[0153.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll")) returned 0x20
	[0153.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.161] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=108416) returned 1
	[0153.161] CloseHandle (hObject=0x200) returned 1
	[0153.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll")) returned 0x20
	[0153.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll")) returned 0x20
	[0153.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.162] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=614784) returned 1
	[0153.162] CloseHandle (hObject=0x200) returned 1
	[0153.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll")) returned 0x20
	[0153.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll")) returned 0x20
	[0153.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WWINTL.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wwintl.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\wxpr.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wxpr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.165] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16776) returned 1
	[0153.165] CloseHandle (hObject=0x20c) returned 1
	[0153.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\wxpr.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wxpr.dll")) returned 0x20
	[0153.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\wxpr.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wxpr.dll")) returned 0x20
	[0153.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\wxpr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wxpr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\wxpr.dll" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wxpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.166] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13528) returned 1
	[0153.166] CloseHandle (hObject=0x20c) returned 1
	[0153.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm")) returned 0x20
	[0153.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm")) returned 0x20
	[0153.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\WZCNFLCT.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\wzcnflct.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.170] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52624) returned 1
	[0153.170] CloseHandle (hObject=0x200) returned 1
	[0153.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl")) returned 0x20
	[0153.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl")) returned 0x20
	[0153.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xfunc.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.172] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12931) returned 1
	[0153.172] CloseHandle (hObject=0x200) returned 1
	[0153.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn")) returned 0x20
	[0153.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn")) returned 0x20
	[0153.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_complete.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0153.173] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11627) returned 1
	[0153.173] CloseHandle (hObject=0x200) returned 1
	[0153.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn")) returned 0x20
	[0153.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn")) returned 0x20
	[0153.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlate_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.176] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2362752) returned 1
	[0153.176] CloseHandle (hObject=0x20c) returned 1
	[0153.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll")) returned 0x20
	[0153.176] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.176] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll")) returned 0
	[0153.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.177] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=99200) returned 1
	[0153.177] CloseHandle (hObject=0x20c) returned 1
	[0153.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll")) returned 0x20
	[0153.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll")) returned 0x20
	[0153.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.178] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=383872) returned 1
	[0153.179] CloseHandle (hObject=0x20c) returned 1
	[0153.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll")) returned 0x20
	[0153.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll")) returned 0x20
	[0153.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLINTL32.REST.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlintl32.rest.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xllex.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.179] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37760) returned 1
	[0153.179] CloseHandle (hObject=0x20c) returned 1
	[0153.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xllex.dll")) returned 0x20
	[0153.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xllex.dll")) returned 0x20
	[0153.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xllex.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLLEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xllex.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.182] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0153.182] CloseHandle (hObject=0x20c) returned 1
	[0153.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm")) returned 0x20
	[0153.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm")) returned 0x20
	[0153.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlmacro.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.184] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=177536) returned 1
	[0153.185] CloseHandle (hObject=0x20c) returned 1
	[0153.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll")) returned 0x20
	[0153.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll")) returned 0x20
	[0153.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.185] SetEvent (hEvent=0xfc) returned 1
	[0153.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.185] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12672) returned 1
	[0153.185] CloseHandle (hObject=0x20c) returned 1
	[0153.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll")) returned 0x20
	[0153.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll")) returned 0x20
	[0153.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XLSLICER.DLL.IDX_DLL" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xlslicer.dll.idx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.187] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3447074) returned 1
	[0153.187] CloseHandle (hObject=0x20c) returned 1
	[0153.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm")) returned 0x20
	[0153.187] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.187] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1033\\XMLSDK5.CHM" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\xmlsdk5.chm")) returned 0
	[0153.188] SetEvent (hEvent=0xfc) returned 1
	[0153.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.188] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43558) returned 1
	[0153.188] CloseHandle (hObject=0x20c) returned 1
	[0153.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl")) returned 0x20
	[0153.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl")) returned 0x20
	[0153.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\1036\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0153.189] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50556) returned 1
	[0153.189] CloseHandle (hObject=0x20c) returned 1
	[0153.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl")) returned 0x20
	[0153.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl")) returned 0x20
	[0153.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\office14\\3082\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accdds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.372] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1250224) returned 1
	[0153.372] CloseHandle (hObject=0x210) returned 1
	[0153.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accdds.dll")) returned 0x20
	[0153.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accdds.dll")) returned 0x20
	[0153.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accdds.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accdds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.373] SetEvent (hEvent=0xfc) returned 1
	[0153.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accddslm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.374] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=552368) returned 1
	[0153.374] CloseHandle (hObject=0x210) returned 1
	[0153.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accddslm.dll")) returned 0x20
	[0153.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accddslm.dll")) returned 0x20
	[0153.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accddslm.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCDDSLM.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accddslm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.375] SetEvent (hEvent=0xfc) returned 1
	[0153.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.375] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1231) returned 1
	[0153.375] CloseHandle (hObject=0x210) returned 1
	[0153.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm")) returned 0x20
	[0153.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm")) returned 0x20
	[0153.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\clntwrap.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.376] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=66763) returned 1
	[0153.376] CloseHandle (hObject=0x210) returned 1
	[0153.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl")) returned 0x20
	[0153.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl")) returned 0x20
	[0153.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.377] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=939) returned 1
	[0153.377] CloseHandle (hObject=0x210) returned 1
	[0153.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp")) returned 0x20
	[0153.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp")) returned 0x20
	[0153.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\office14\\accessweb\\servwrap.asp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\accicons.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.378] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1449312) returned 1
	[0153.378] CloseHandle (hObject=0x210) returned 1
	[0153.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\accicons.exe")) returned 0x20
	[0153.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\accicons.exe")) returned 0x20
	[0153.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accicons.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCICONS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\accicons.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accvdt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.380] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4532616) returned 1
	[0153.380] CloseHandle (hObject=0x210) returned 1
	[0153.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accvdt.dll")) returned 0x20
	[0153.380] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accvdt.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accvdt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.380] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accvdt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCVDT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accvdt.dll")) returned 0
	[0153.380] SetEvent (hEvent=0xfc) returned 1
	[0153.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.382] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6250496) returned 1
	[0153.382] CloseHandle (hObject=0x210) returned 1
	[0153.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu")) returned 0x20
	[0153.382] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.383] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzdat12.accdu")) returned 0
	[0153.383] SetEvent (hEvent=0xfc) returned 1
	[0153.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.384] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3440640) returned 1
	[0153.384] CloseHandle (hObject=0x210) returned 1
	[0153.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu")) returned 0x20
	[0153.384] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.384] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\acwzusr12.accdu")) returned 0
	[0153.384] SetEvent (hEvent=0xfc) returned 1
	[0153.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\utility.accda"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.385] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=782336) returned 1
	[0153.385] CloseHandle (hObject=0x210) returned 1
	[0153.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\utility.accda")) returned 0x20
	[0153.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\utility.accda")) returned 0x20
	[0153.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\utility.accda.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz\\utility.accda"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.386] SetEvent (hEvent=0xfc) returned 1
	[0153.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.387] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=210304) returned 1
	[0153.387] CloseHandle (hObject=0x210) returned 1
	[0153.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz.dll")) returned 0x20
	[0153.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz.dll")) returned 0x20
	[0153.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\accwiz.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.388] SetEvent (hEvent=0xfc) returned 1
	[0153.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\acedao.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.388] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=744888) returned 1
	[0153.388] CloseHandle (hObject=0x210) returned 1
	[0153.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\acedao.dll")) returned 0x20
	[0153.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\acedao.dll")) returned 0x20
	[0153.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\acedao.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ACEDAO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\acedao.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\accolk.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.390] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=123784) returned 1
	[0153.390] CloseHandle (hObject=0x210) returned 1
	[0153.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\accolk.dll")) returned 0x20
	[0153.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\accolk.dll")) returned 0x20
	[0153.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\accolk.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ACCOLK.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\accolk.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.391] SetEvent (hEvent=0xfc) returned 1
	[0153.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\BCSAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\bcsaddin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.392] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=190336) returned 1
	[0153.392] CloseHandle (hObject=0x210) returned 1
	[0153.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\BCSAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\bcsaddin.dll")) returned 0x20
	[0153.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\BCSAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\bcsaddin.dll")) returned 0x20
	[0153.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\BCSAddin.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\bcsaddin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\BCSAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\bcsaddin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.392] SetEvent (hEvent=0xfc) returned 1
	[0153.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ColleagueImport.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\colleagueimport.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.393] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=95104) returned 1
	[0153.393] CloseHandle (hObject=0x210) returned 1
	[0153.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ColleagueImport.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\colleagueimport.dll")) returned 0x20
	[0153.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ColleagueImport.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\colleagueimport.dll")) returned 0x20
	[0153.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ColleagueImport.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\colleagueimport.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\ColleagueImport.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\colleagueimport.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.394] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=830) returned 1
	[0153.394] CloseHandle (hObject=0x210) returned 1
	[0153.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf")) returned 0x20
	[0153.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf")) returned 0x20
	[0153.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\faxext.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.395] SetEvent (hEvent=0xfc) returned 1
	[0153.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.399] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7168) returned 1
	[0153.399] CloseHandle (hObject=0x210) returned 1
	[0153.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.dll")) returned 0x20
	[0153.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.dll")) returned 0x20
	[0153.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.400] SetEvent (hEvent=0xfc) returned 1
	[0153.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.400] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0153.400] CloseHandle (hObject=0x210) returned 1
	[0153.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml")) returned 0x20
	[0153.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml")) returned 0x20
	[0153.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msosec.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.401] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=778) returned 1
	[0153.401] CloseHandle (hObject=0x210) returned 1
	[0153.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf")) returned 0x20
	[0153.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf")) returned 0x20
	[0153.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\msspc.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\otkloadr_x64.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\otkloadr_x64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.402] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=152392) returned 1
	[0153.402] CloseHandle (hObject=0x210) returned 1
	[0153.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\otkloadr_x64.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\otkloadr_x64.dll")) returned 0x20
	[0153.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\otkloadr_x64.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\otkloadr_x64.dll")) returned 0x20
	[0153.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\otkloadr_x64.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\otkloadr_x64.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\otkloadr_x64.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\otkloadr_x64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.404] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1926) returned 1
	[0153.404] CloseHandle (hObject=0x210) returned 1
	[0153.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf")) returned 0x20
	[0153.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf")) returned 0x20
	[0153.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.404] SetEvent (hEvent=0xfc) returned 1
	[0153.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.405] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=850) returned 1
	[0153.405] CloseHandle (hObject=0x210) returned 1
	[0153.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf")) returned 0x20
	[0153.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf")) returned 0x20
	[0153.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outex2.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTLVBA.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outlvba.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.407] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=80760) returned 1
	[0153.407] CloseHandle (hObject=0x210) returned 1
	[0153.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTLVBA.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outlvba.dll")) returned 0x20
	[0153.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTLVBA.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outlvba.dll")) returned 0x20
	[0153.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTLVBA.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outlvba.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\OUTLVBA.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\outlvba.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.407] SetEvent (hEvent=0xfc) returned 1
	[0153.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.408] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=626) returned 1
	[0153.408] CloseHandle (hObject=0x210) returned 1
	[0153.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf")) returned 0x20
	[0153.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf")) returned 0x20
	[0153.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\pmailext.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.408] SetEvent (hEvent=0xfc) returned 1
	[0153.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\UmOutlookAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\umoutlookaddin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.410] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1549152) returned 1
	[0153.410] CloseHandle (hObject=0x210) returned 1
	[0153.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\UmOutlookAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\umoutlookaddin.dll")) returned 0x20
	[0153.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\UmOutlookAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\umoutlookaddin.dll")) returned 0x20
	[0153.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\UmOutlookAddin.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\umoutlookaddin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\UmOutlookAddin.dll" (normalized: "c:\\program files\\microsoft office\\office14\\addins\\umoutlookaddin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.410] SetEvent (hEvent=0xfc) returned 1
	[0153.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advcmp.dic"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.412] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1651918) returned 1
	[0153.412] CloseHandle (hObject=0x214) returned 1
	[0153.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advcmp.dic")) returned 0x20
	[0153.412] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advcmp.dic"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\advcmp.dic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.413] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\advcmp.dic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVCMP.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advcmp.dic")) returned 0
	[0153.413] SetEvent (hEvent=0xfc) returned 1
	[0153.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advtel.dic"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.535] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3809238) returned 1
	[0153.535] CloseHandle (hObject=0x214) returned 1
	[0153.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advtel.dic")) returned 0x20
	[0153.535] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advtel.dic"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\advtel.dic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.535] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\advtel.dic.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ADVTEL.DIC" (normalized: "c:\\program files\\microsoft office\\office14\\advtel.dic")) returned 0
	[0153.535] SetEvent (hEvent=0xfc) returned 1
	[0153.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.661] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=244182) returned 1
	[0153.661] CloseHandle (hObject=0x210) returned 1
	[0153.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gosttitle.xsl")) returned 0x20
	[0153.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gosttitle.xsl")) returned 0x20
	[0153.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gosttitle.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\act3r.sam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.664] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13192) returned 1
	[0153.664] CloseHandle (hObject=0x210) returned 1
	[0153.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\act3r.sam")) returned 0x20
	[0153.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\act3r.sam")) returned 0x20
	[0153.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\act3r.sam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\ACT3R.SAM" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\act3r.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\delimr.fae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0153.808] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10144) returned 1
	[0153.808] CloseHandle (hObject=0x214) returned 1
	[0153.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\delimr.fae")) returned 0x20
	[0153.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\delimr.fae")) returned 0x20
	[0153.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\delimr.fae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\office14\\convert\\1033\\delimr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.809] SetEvent (hEvent=0xfc) returned 1
	[0153.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBSHARE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbshare.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.934] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=99272) returned 1
	[0153.934] CloseHandle (hObject=0x210) returned 1
	[0153.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBSHARE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbshare.dll")) returned 0x20
	[0153.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBSHARE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbshare.dll")) returned 0x20
	[0153.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBSHARE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\dbshare.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DBSHARE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dbshare.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.934] SetEvent (hEvent=0xfc) returned 1
	[0153.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DGRMLNCH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dgrmlnch.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.936] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=108904) returned 1
	[0153.936] CloseHandle (hObject=0x210) returned 1
	[0153.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DGRMLNCH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dgrmlnch.dll")) returned 0x20
	[0153.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DGRMLNCH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dgrmlnch.dll")) returned 0x20
	[0153.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DGRMLNCH.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\dgrmlnch.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DGRMLNCH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dgrmlnch.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.936] SetEvent (hEvent=0xfc) returned 1
	[0153.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DLGSETP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dlgsetp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.937] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=116592) returned 1
	[0153.938] CloseHandle (hObject=0x210) returned 1
	[0153.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DLGSETP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dlgsetp.dll")) returned 0x20
	[0153.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DLGSETP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dlgsetp.dll")) returned 0x20
	[0153.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DLGSETP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\dlgsetp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DLGSETP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dlgsetp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.938] SetEvent (hEvent=0xfc) returned 1
	[0153.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.939] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4187307) returned 1
	[0153.939] CloseHandle (hObject=0x210) returned 1
	[0153.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx")) returned 0x20
	[0153.939] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.939] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\office14\\document parts\\1033\\14\\built-in building blocks.dotx")) returned 0
	[0153.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DRILLDWN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\drilldwn.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.939] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1757048) returned 1
	[0153.940] CloseHandle (hObject=0x210) returned 1
	[0153.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DRILLDWN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\drilldwn.dll")) returned 0x20
	[0153.940] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DRILLDWN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\drilldwn.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DRILLDWN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\drilldwn.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.940] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DRILLDWN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\drilldwn.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DRILLDWN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\drilldwn.dll")) returned 0
	[0153.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DWGCNV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dwgcnv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.940] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=221536) returned 1
	[0153.940] CloseHandle (hObject=0x210) returned 1
	[0153.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DWGCNV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dwgcnv.dll")) returned 0x20
	[0153.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DWGCNV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dwgcnv.dll")) returned 0x20
	[0153.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DWGCNV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\dwgcnv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DWGCNV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dwgcnv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DWGDP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dwgdp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.941] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9387368) returned 1
	[0153.941] CloseHandle (hObject=0x210) returned 1
	[0153.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DWGDP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dwgdp.dll")) returned 0x20
	[0153.942] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DWGDP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dwgdp.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DWGDP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\dwgdp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.942] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DWGDP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\dwgdp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\DWGDP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\dwgdp.dll")) returned 0
	[0153.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EDITOR.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\editor.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.943] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=199016) returned 1
	[0153.943] CloseHandle (hObject=0x210) returned 1
	[0153.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EDITOR.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\editor.exe")) returned 0x20
	[0153.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EDITOR.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\editor.exe")) returned 0x20
	[0153.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EDITOR.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\editor.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EDITOR.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\editor.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.944] SetEvent (hEvent=0xfc) returned 1
	[0153.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EDITORS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\editors.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.944] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=44424) returned 1
	[0153.944] CloseHandle (hObject=0x210) returned 1
	[0153.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EDITORS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\editors.dll")) returned 0x20
	[0153.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EDITORS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\editors.dll")) returned 0x20
	[0153.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EDITORS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\editors.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EDITORS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\editors.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ELEMENTS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\elements.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.946] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=260488) returned 1
	[0153.946] CloseHandle (hObject=0x210) returned 1
	[0153.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ELEMENTS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\elements.dll")) returned 0x20
	[0153.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ELEMENTS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\elements.dll")) returned 0x20
	[0153.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ELEMENTS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\elements.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ELEMENTS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\elements.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.946] SetEvent (hEvent=0xfc) returned 1
	[0153.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ELEMUTIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\elemutil.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.947] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=145312) returned 1
	[0153.947] CloseHandle (hObject=0x210) returned 1
	[0153.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ELEMUTIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\elemutil.dll")) returned 0x20
	[0153.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ELEMUTIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\elemutil.dll")) returned 0x20
	[0153.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ELEMUTIL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\elemutil.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ELEMUTIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\elemutil.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EMABLT32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\emablt32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.948] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=154496) returned 1
	[0153.948] CloseHandle (hObject=0x210) returned 1
	[0153.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EMABLT32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\emablt32.dll")) returned 0x20
	[0153.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EMABLT32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\emablt32.dll")) returned 0x20
	[0153.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EMABLT32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\emablt32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EMABLT32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\emablt32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EMSMDB32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\emsmdb32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.950] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2125752) returned 1
	[0153.950] CloseHandle (hObject=0x210) returned 1
	[0153.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EMSMDB32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\emsmdb32.dll")) returned 0x20
	[0153.951] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EMSMDB32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\emsmdb32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EMSMDB32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\emsmdb32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.951] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EMSMDB32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\emsmdb32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EMSMDB32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\emsmdb32.dll")) returned 0
	[0153.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.951] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=289926) returned 1
	[0153.951] CloseHandle (hObject=0x210) returned 1
	[0153.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat")) returned 0x20
	[0153.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat")) returned 0x20
	[0153.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGDIC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engdic.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.952] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=34168) returned 1
	[0153.952] CloseHandle (hObject=0x210) returned 1
	[0153.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat")) returned 0x20
	[0153.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat")) returned 0x20
	[0153.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGIDX.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\engidx.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\english.lng"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.953] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=311852) returned 1
	[0153.953] CloseHandle (hObject=0x210) returned 1
	[0153.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\english.lng")) returned 0x20
	[0153.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\english.lng")) returned 0x20
	[0153.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\english.lng.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENGLISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\english.lng"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EntityDataHandler.dll" (normalized: "c:\\program files\\microsoft office\\office14\\entitydatahandler.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.955] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=62336) returned 1
	[0153.955] CloseHandle (hObject=0x210) returned 1
	[0153.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EntityDataHandler.dll" (normalized: "c:\\program files\\microsoft office\\office14\\entitydatahandler.dll")) returned 0x20
	[0153.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EntityDataHandler.dll" (normalized: "c:\\program files\\microsoft office\\office14\\entitydatahandler.dll")) returned 0x20
	[0153.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EntityDataHandler.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\entitydatahandler.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EntityDataHandler.dll" (normalized: "c:\\program files\\microsoft office\\office14\\entitydatahandler.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.956] SetEvent (hEvent=0xfc) returned 1
	[0153.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EntityPicker.dll" (normalized: "c:\\program files\\microsoft office\\office14\\entitypicker.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.956] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=268672) returned 1
	[0153.956] CloseHandle (hObject=0x210) returned 1
	[0153.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EntityPicker.dll" (normalized: "c:\\program files\\microsoft office\\office14\\entitypicker.dll")) returned 0x20
	[0153.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EntityPicker.dll" (normalized: "c:\\program files\\microsoft office\\office14\\entitypicker.dll")) returned 0x20
	[0153.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EntityPicker.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\entitypicker.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EntityPicker.dll" (normalized: "c:\\program files\\microsoft office\\office14\\entitypicker.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENVELOPE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\envelope.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.957] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=219520) returned 1
	[0153.957] CloseHandle (hObject=0x210) returned 1
	[0153.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENVELOPE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\envelope.dll")) returned 0x20
	[0153.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENVELOPE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\envelope.dll")) returned 0x20
	[0153.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENVELOPE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\envelope.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ENVELOPE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\envelope.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\erximp.add"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.962] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85920) returned 1
	[0153.962] CloseHandle (hObject=0x210) returned 1
	[0153.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\erximp.add")) returned 0x20
	[0153.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\erximp.add")) returned 0x20
	[0153.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\erximp.add.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ERXIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\erximp.add"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.963] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28232544) returned 1
	[0153.963] CloseHandle (hObject=0x210) returned 1
	[0153.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe")) returned 0x20
	[0153.964] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXCEL.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.964] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXCEL.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe")) returned 0
	[0153.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.964] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1196) returned 1
	[0153.964] CloseHandle (hObject=0x210) returned 1
	[0153.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.manifest")) returned 0x20
	[0153.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.manifest")) returned 0x20
	[0153.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excel.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\excel.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\office14\\excelcnv.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.966] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24994656) returned 1
	[0153.966] CloseHandle (hObject=0x210) returned 1
	[0153.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\office14\\excelcnv.exe")) returned 0x20
	[0153.967] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\office14\\excelcnv.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excelcnv.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\excelcnv.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0153.967] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excelcnv.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\excelcnv.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\office14\\excelcnv.exe")) returned 0
	[0153.967] SetEvent (hEvent=0xfc) returned 1
	[0153.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excelcnvpxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\excelcnvpxy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.968] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=48480) returned 1
	[0153.968] CloseHandle (hObject=0x210) returned 1
	[0153.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excelcnvpxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\excelcnvpxy.dll")) returned 0x20
	[0153.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excelcnvpxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\excelcnvpxy.dll")) returned 0x20
	[0153.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excelcnvpxy.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\excelcnvpxy.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\excelcnvpxy.dll" (normalized: "c:\\program files\\microsoft office\\office14\\excelcnvpxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.968] SetEvent (hEvent=0xfc) returned 1
	[0153.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.969] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79660) returned 1
	[0153.969] CloseHandle (hObject=0x210) returned 1
	[0153.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml")) returned 0x20
	[0153.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml")) returned 0x20
	[0153.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXLIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.971] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79220) returned 1
	[0153.971] CloseHandle (hObject=0x210) returned 1
	[0153.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml")) returned 0x20
	[0153.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml")) returned 0x20
	[0153.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXLIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\exlirmv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.971] SetEvent (hEvent=0xfc) returned 1
	[0153.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXSEC32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\exsec32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0153.971] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=474960) returned 1
	[0153.972] CloseHandle (hObject=0x210) returned 1
	[0153.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXSEC32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\exsec32.dll")) returned 0x20
	[0153.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXSEC32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\exsec32.dll")) returned 0x20
	[0153.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXSEC32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\exsec32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0153.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXSEC32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\exsec32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXTRACT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\extract.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0154.114] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=340904) returned 1
	[0154.114] CloseHandle (hObject=0x210) returned 1
	[0154.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXTRACT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\extract.dll")) returned 0x20
	[0154.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXTRACT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\extract.dll")) returned 0x20
	[0154.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXTRACT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\extract.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\EXTRACT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\extract.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.114] SetEvent (hEvent=0xfc) returned 1
	[0154.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\notel.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.236] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.236] CloseHandle (hObject=0x214) returned 1
	[0154.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\notel.ico")) returned 0x20
	[0154.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\notel.ico")) returned 0x20
	[0154.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTEL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\notel.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\NOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\notel.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.237] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=808) returned 1
	[0154.237] CloseHandle (hObject=0x214) returned 1
	[0154.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg")) returned 0x20
	[0154.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg")) returned 0x20
	[0154.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rclrpt.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.238] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1617) returned 1
	[0154.238] CloseHandle (hObject=0x214) returned 1
	[0154.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg")) returned 0x20
	[0154.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg")) returned 0x20
	[0154.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RECL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\recl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0154.239] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.239] CloseHandle (hObject=0x214) returned 1
	[0154.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RECL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\recl.ico")) returned 0x20
	[0154.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RECL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\recl.ico")) returned 0x20
	[0154.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RECL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\recl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RECL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\recl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RECS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\recs.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.243] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.243] CloseHandle (hObject=0x218) returned 1
	[0154.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RECS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\recs.ico")) returned 0x20
	[0154.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RECS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\recs.ico")) returned 0x20
	[0154.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RECS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\recs.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RECS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\recs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.244] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=779) returned 1
	[0154.244] CloseHandle (hObject=0x218) returned 1
	[0154.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg")) returned 0x20
	[0154.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg")) returned 0x20
	[0154.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remote.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remotel.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.245] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.245] CloseHandle (hObject=0x218) returned 1
	[0154.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remotel.ico")) returned 0x20
	[0154.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remotel.ico")) returned 0x20
	[0154.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTEL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remotel.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remotel.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTES.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remotes.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.248] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.248] CloseHandle (hObject=0x218) returned 1
	[0154.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTES.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remotes.ico")) returned 0x20
	[0154.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTES.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remotes.ico")) returned 0x20
	[0154.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTES.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remotes.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REMOTES.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\remotes.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.249] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=826) returned 1
	[0154.249] CloseHandle (hObject=0x218) returned 1
	[0154.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg")) returned 0x20
	[0154.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg")) returned 0x20
	[0154.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\repltmpl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.250] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=781) returned 1
	[0154.250] CloseHandle (hObject=0x218) returned 1
	[0154.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg")) returned 0x20
	[0154.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg")) returned 0x20
	[0154.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\report.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\reportl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.251] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.251] CloseHandle (hObject=0x218) returned 1
	[0154.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\reportl.ico")) returned 0x20
	[0154.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\reportl.ico")) returned 0x20
	[0154.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORTL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\reportl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\reportl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\reports.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.255] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.255] CloseHandle (hObject=0x218) returned 1
	[0154.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\reports.ico")) returned 0x20
	[0154.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\reports.ico")) returned 0x20
	[0154.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORTS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\reports.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\REPORTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\reports.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.256] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=779) returned 1
	[0154.256] CloseHandle (hObject=0x218) returned 1
	[0154.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg")) returned 0x20
	[0154.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg")) returned 0x20
	[0154.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resend.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESENDL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resendl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.257] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.257] CloseHandle (hObject=0x218) returned 1
	[0154.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESENDL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resendl.ico")) returned 0x20
	[0154.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESENDL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resendl.ico")) returned 0x20
	[0154.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESENDL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resendl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESENDL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resendl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESENDS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resends.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.258] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.258] CloseHandle (hObject=0x218) returned 1
	[0154.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESENDS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resends.ico")) returned 0x20
	[0154.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESENDS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resends.ico")) returned 0x20
	[0154.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESENDS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resends.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RESENDS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\resends.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.261] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=788) returned 1
	[0154.261] CloseHandle (hObject=0x21c) returned 1
	[0154.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg")) returned 0x20
	[0154.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg")) returned 0x20
	[0154.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitem.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.262] SetEvent (hEvent=0xfc) returned 1
	[0154.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssiteml.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.262] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.262] CloseHandle (hObject=0x21c) returned 1
	[0154.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssiteml.ico")) returned 0x20
	[0154.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssiteml.ico")) returned 0x20
	[0154.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEML.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssiteml.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEML.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssiteml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitems.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.263] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.263] CloseHandle (hObject=0x21c) returned 1
	[0154.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitems.ico")) returned 0x20
	[0154.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitems.ico")) returned 0x20
	[0154.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEMS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitems.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\RSSITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\rssitems.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDCNCLL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdcncll.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.264] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.264] CloseHandle (hObject=0x21c) returned 1
	[0154.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDCNCLL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdcncll.ico")) returned 0x20
	[0154.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDCNCLL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdcncll.ico")) returned 0x20
	[0154.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDCNCLL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdcncll.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDCNCLL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdcncll.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDCNCLS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdcncls.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.266] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.266] CloseHandle (hObject=0x218) returned 1
	[0154.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDCNCLS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdcncls.ico")) returned 0x20
	[0154.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDCNCLS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdcncls.ico")) returned 0x20
	[0154.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDCNCLS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdcncls.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDCNCLS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdcncls.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.267] SetEvent (hEvent=0xfc) returned 1
	[0154.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDREQL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdreql.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.267] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.267] CloseHandle (hObject=0x218) returned 1
	[0154.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDREQL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdreql.ico")) returned 0x20
	[0154.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDREQL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdreql.ico")) returned 0x20
	[0154.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDREQL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdreql.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDREQL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdreql.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDREQS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdreqs.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.268] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.268] CloseHandle (hObject=0x218) returned 1
	[0154.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDREQS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdreqs.ico")) returned 0x20
	[0154.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDREQS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdreqs.ico")) returned 0x20
	[0154.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDREQS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdreqs.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDREQS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdreqs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESNL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresnl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.269] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.269] CloseHandle (hObject=0x218) returned 1
	[0154.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESNL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresnl.ico")) returned 0x20
	[0154.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESNL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresnl.ico")) returned 0x20
	[0154.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESNL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresnl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESNL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresnl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESNS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresns.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.271] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.271] CloseHandle (hObject=0x218) returned 1
	[0154.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESNS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresns.ico")) returned 0x20
	[0154.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESNS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresns.ico")) returned 0x20
	[0154.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESNS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresns.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESNS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresns.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESPL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrespl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.272] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.272] CloseHandle (hObject=0x218) returned 1
	[0154.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESPL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrespl.ico")) returned 0x20
	[0154.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESPL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrespl.ico")) returned 0x20
	[0154.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESPL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrespl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESPL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrespl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESPS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresps.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.273] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.273] CloseHandle (hObject=0x218) returned 1
	[0154.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESPS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresps.ico")) returned 0x20
	[0154.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESPS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresps.ico")) returned 0x20
	[0154.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESPS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresps.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESPS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdresps.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrestl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.274] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.274] CloseHandle (hObject=0x218) returned 1
	[0154.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrestl.ico")) returned 0x20
	[0154.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrestl.ico")) returned 0x20
	[0154.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESTL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrestl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESTL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrestl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrests.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.276] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.277] CloseHandle (hObject=0x218) returned 1
	[0154.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrests.ico")) returned 0x20
	[0154.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrests.ico")) returned 0x20
	[0154.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESTS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrests.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCDRESTS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\scdrests.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.277] SetEvent (hEvent=0xfc) returned 1
	[0154.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.277] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=821) returned 1
	[0154.278] CloseHandle (hObject=0x218) returned 1
	[0154.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg")) returned 0x20
	[0154.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg")) returned 0x20
	[0154.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdcncl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.278] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1199) returned 1
	[0154.278] CloseHandle (hObject=0x218) returned 1
	[0154.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg")) returned 0x20
	[0154.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg")) returned 0x20
	[0154.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdreq.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.281] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=835) returned 1
	[0154.281] CloseHandle (hObject=0x218) returned 1
	[0154.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg")) returned 0x20
	[0154.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg")) returned 0x20
	[0154.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresn.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.283] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=833) returned 1
	[0154.283] CloseHandle (hObject=0x21c) returned 1
	[0154.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg")) returned 0x20
	[0154.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg")) returned 0x20
	[0154.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdresp.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.283] SetEvent (hEvent=0xfc) returned 1
	[0154.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.284] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=840) returned 1
	[0154.284] CloseHandle (hObject=0x21c) returned 1
	[0154.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg")) returned 0x20
	[0154.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg")) returned 0x20
	[0154.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\schdrest.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.285] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=664) returned 1
	[0154.285] CloseHandle (hObject=0x21c) returned 1
	[0154.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg")) returned 0x20
	[0154.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg")) returned 0x20
	[0154.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.286] SetEvent (hEvent=0xfc) returned 1
	[0154.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECRECL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrecl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.286] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.286] CloseHandle (hObject=0x21c) returned 1
	[0154.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECRECL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrecl.ico")) returned 0x20
	[0154.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECRECL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrecl.ico")) returned 0x20
	[0154.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECRECL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrecl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECRECL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrecl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECRECS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrecs.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.287] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.287] CloseHandle (hObject=0x21c) returned 1
	[0154.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECRECS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrecs.ico")) returned 0x20
	[0154.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECRECS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrecs.ico")) returned 0x20
	[0154.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECRECS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrecs.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECRECS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secrecs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.288] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=647) returned 1
	[0154.288] CloseHandle (hObject=0x21c) returned 1
	[0154.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg")) returned 0x20
	[0154.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg")) returned 0x20
	[0154.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\secure.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\securl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.289] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.289] CloseHandle (hObject=0x21c) returned 1
	[0154.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\securl.ico")) returned 0x20
	[0154.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\securl.ico")) returned 0x20
	[0154.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\securl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\securl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\securs.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.290] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.290] CloseHandle (hObject=0x21c) returned 1
	[0154.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\securs.ico")) returned 0x20
	[0154.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\securs.ico")) returned 0x20
	[0154.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\securs.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SECURS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\securs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.291] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=771) returned 1
	[0154.291] CloseHandle (hObject=0x21c) returned 1
	[0154.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg")) returned 0x20
	[0154.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg")) returned 0x20
	[0154.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sharing.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.296] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=664) returned 1
	[0154.296] CloseHandle (hObject=0x21c) returned 1
	[0154.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg")) returned 0x20
	[0154.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg")) returned 0x20
	[0154.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\sign.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.296] SetEvent (hEvent=0xfc) returned 1
	[0154.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGNL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\signl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.297] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.297] CloseHandle (hObject=0x21c) returned 1
	[0154.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGNL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\signl.ico")) returned 0x20
	[0154.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGNL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\signl.ico")) returned 0x20
	[0154.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGNL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\signl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGNL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\signl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGNS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\signs.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.298] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.298] CloseHandle (hObject=0x21c) returned 1
	[0154.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGNS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\signs.ico")) returned 0x20
	[0154.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGNS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\signs.ico")) returned 0x20
	[0154.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGNS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\signs.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SIGNS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\signs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.299] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=640) returned 1
	[0154.299] CloseHandle (hObject=0x21c) returned 1
	[0154.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg")) returned 0x20
	[0154.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg")) returned 0x20
	[0154.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimee.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.300] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=668) returned 1
	[0154.300] CloseHandle (hObject=0x21c) returned 1
	[0154.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg")) returned 0x20
	[0154.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg")) returned 0x20
	[0154.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smimes.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMSL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smsl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.301] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10134) returned 1
	[0154.301] CloseHandle (hObject=0x21c) returned 1
	[0154.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMSL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smsl.ico")) returned 0x20
	[0154.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMSL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smsl.ico")) returned 0x20
	[0154.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMSL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smsl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMSL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smsl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMSS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smss.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.302] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2238) returned 1
	[0154.302] CloseHandle (hObject=0x21c) returned 1
	[0154.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMSS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smss.ico")) returned 0x20
	[0154.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMSS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smss.ico")) returned 0x20
	[0154.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMSS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smss.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\SMSS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\smss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.304] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=768) returned 1
	[0154.304] CloseHandle (hObject=0x218) returned 1
	[0154.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg")) returned 0x20
	[0154.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg")) returned 0x20
	[0154.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\task.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.304] SetEvent (hEvent=0xfc) returned 1
	[0154.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.305] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=804) returned 1
	[0154.305] CloseHandle (hObject=0x218) returned 1
	[0154.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg")) returned 0x20
	[0154.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg")) returned 0x20
	[0154.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskacc.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACCL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskaccl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.308] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.308] CloseHandle (hObject=0x218) returned 1
	[0154.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACCL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskaccl.ico")) returned 0x20
	[0154.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACCL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskaccl.ico")) returned 0x20
	[0154.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACCL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskaccl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACCL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskaccl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACCS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskaccs.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.309] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.309] CloseHandle (hObject=0x218) returned 1
	[0154.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACCS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskaccs.ico")) returned 0x20
	[0154.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACCS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskaccs.ico")) returned 0x20
	[0154.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACCS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskaccs.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKACCS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskaccs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.311] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=807) returned 1
	[0154.311] CloseHandle (hObject=0x218) returned 1
	[0154.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg")) returned 0x20
	[0154.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg")) returned 0x20
	[0154.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDECL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdecl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.312] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.312] CloseHandle (hObject=0x218) returned 1
	[0154.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDECL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdecl.ico")) returned 0x20
	[0154.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDECL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdecl.ico")) returned 0x20
	[0154.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDECL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdecl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDECL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdecl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDECS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdecs.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.313] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.313] CloseHandle (hObject=0x218) returned 1
	[0154.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDECS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdecs.ico")) returned 0x20
	[0154.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDECS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdecs.ico")) returned 0x20
	[0154.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDECS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdecs.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKDECS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskdecs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.314] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.314] CloseHandle (hObject=0x218) returned 1
	[0154.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskl.ico")) returned 0x20
	[0154.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskl.ico")) returned 0x20
	[0154.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.317] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=797) returned 1
	[0154.317] CloseHandle (hObject=0x21c) returned 1
	[0154.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg")) returned 0x20
	[0154.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg")) returned 0x20
	[0154.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreq.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.317] SetEvent (hEvent=0xfc) returned 1
	[0154.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreql.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.318] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1078) returned 1
	[0154.318] CloseHandle (hObject=0x21c) returned 1
	[0154.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreql.ico")) returned 0x20
	[0154.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreql.ico")) returned 0x20
	[0154.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreql.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreql.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreqs.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.319] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.319] CloseHandle (hObject=0x21c) returned 1
	[0154.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreqs.ico")) returned 0x20
	[0154.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreqs.ico")) returned 0x20
	[0154.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreqs.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKREQS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskreqs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\tasks.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.320] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2998) returned 1
	[0154.320] CloseHandle (hObject=0x21c) returned 1
	[0154.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\tasks.ico")) returned 0x20
	[0154.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\tasks.ico")) returned 0x20
	[0154.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKS.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\tasks.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKS.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\tasks.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.320] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=806) returned 1
	[0154.321] CloseHandle (hObject=0x21c) returned 1
	[0154.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg")) returned 0x20
	[0154.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg")) returned 0x20
	[0154.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\office14\\forms\\1033\\taskupd.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\french.lng"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.321] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=559411) returned 1
	[0154.321] CloseHandle (hObject=0x21c) returned 1
	[0154.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\french.lng")) returned 0x20
	[0154.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\french.lng")) returned 0x20
	[0154.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\french.lng.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\FRENCH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\french.lng"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKExcel.dll" (normalized: "c:\\program files\\microsoft office\\office14\\gkexcel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.488] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4563328) returned 1
	[0154.488] CloseHandle (hObject=0x218) returned 1
	[0154.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKExcel.dll" (normalized: "c:\\program files\\microsoft office\\office14\\gkexcel.dll")) returned 0x20
	[0154.488] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKExcel.dll" (normalized: "c:\\program files\\microsoft office\\office14\\gkexcel.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKExcel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\gkexcel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0154.488] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKExcel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\gkexcel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GKExcel.dll" (normalized: "c:\\program files\\microsoft office\\office14\\gkexcel.dll")) returned 0
	[0154.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.558] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40068) returned 1
	[0154.558] CloseHandle (hObject=0x218) returned 1
	[0154.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav")) returned 0x20
	[0154.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav")) returned 0x20
	[0154.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\sneeze.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.561] SetEvent (hEvent=0xfc) returned 1
	[0154.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.561] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36150) returned 1
	[0154.561] CloseHandle (hObject=0x218) returned 1
	[0154.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav")) returned 0x20
	[0154.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav")) returned 0x20
	[0154.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\throat.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.563] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29442) returned 1
	[0154.563] CloseHandle (hObject=0x218) returned 1
	[0154.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav")) returned 0x20
	[0154.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav")) returned 0x20
	[0154.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.565] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=34016) returned 1
	[0154.565] CloseHandle (hObject=0x218) returned 1
	[0154.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav")) returned 0x20
	[0154.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav")) returned 0x20
	[0154.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\alarm.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.566] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=60280) returned 1
	[0154.566] CloseHandle (hObject=0x218) returned 1
	[0154.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav")) returned 0x20
	[0154.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav")) returned 0x20
	[0154.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\buzz.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.568] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=54918) returned 1
	[0154.568] CloseHandle (hObject=0x218) returned 1
	[0154.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav")) returned 0x20
	[0154.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav")) returned 0x20
	[0154.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\laser.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.569] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65770) returned 1
	[0154.569] CloseHandle (hObject=0x218) returned 1
	[0154.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav")) returned 0x20
	[0154.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav")) returned 0x20
	[0154.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\radar.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.570] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=54858) returned 1
	[0154.570] CloseHandle (hObject=0x218) returned 1
	[0154.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav")) returned 0x20
	[0154.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav")) returned 0x20
	[0154.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\toot.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.572] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=60018) returned 1
	[0154.572] CloseHandle (hObject=0x218) returned 1
	[0154.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav")) returned 0x20
	[0154.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav")) returned 0x20
	[0154.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\vibe.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.575] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=44682) returned 1
	[0154.575] CloseHandle (hObject=0x21c) returned 1
	[0154.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav")) returned 0x20
	[0154.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav")) returned 0x20
	[0154.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\places\\warn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.576] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51452) returned 1
	[0154.576] CloseHandle (hObject=0x21c) returned 1
	[0154.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav")) returned 0x20
	[0154.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav")) returned 0x20
	[0154.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\can.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.577] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40728) returned 1
	[0154.577] CloseHandle (hObject=0x21c) returned 1
	[0154.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav")) returned 0x20
	[0154.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav")) returned 0x20
	[0154.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\coupler.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.578] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42002) returned 1
	[0154.578] CloseHandle (hObject=0x21c) returned 1
	[0154.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav")) returned 0x20
	[0154.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav")) returned 0x20
	[0154.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\horn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.579] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45390) returned 1
	[0154.580] CloseHandle (hObject=0x21c) returned 1
	[0154.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav")) returned 0x20
	[0154.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav")) returned 0x20
	[0154.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shot.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x21c
	[0154.580] GetFileSizeEx (in: hFile=0x21c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=62792) returned 1
	[0154.580] CloseHandle (hObject=0x21c) returned 1
	[0154.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav")) returned 0x20
	[0154.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav")) returned 0x20
	[0154.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\shovel.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.582] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=60886) returned 1
	[0154.582] CloseHandle (hObject=0x218) returned 1
	[0154.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav")) returned 0x20
	[0154.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav")) returned 0x20
	[0154.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\splash.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.583] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27580) returned 1
	[0154.583] CloseHandle (hObject=0x218) returned 1
	[0154.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav")) returned 0x20
	[0154.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav")) returned 0x20
	[0154.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\things\\whoosh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.585] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5321) returned 1
	[0154.585] CloseHandle (hObject=0x218) returned 1
	[0154.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg")) returned 0x20
	[0154.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg")) returned 0x20
	[0154.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.586] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1336) returned 1
	[0154.586] CloseHandle (hObject=0x218) returned 1
	[0154.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp")) returned 0x20
	[0154.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp")) returned 0x20
	[0154.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.587] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3896) returned 1
	[0154.587] CloseHandle (hObject=0x218) returned 1
	[0154.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp")) returned 0x20
	[0154.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp")) returned 0x20
	[0154.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.588] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2360) returned 1
	[0154.588] CloseHandle (hObject=0x218) returned 1
	[0154.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp")) returned 0x20
	[0154.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp")) returned 0x20
	[0154.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.589] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10603) returned 1
	[0154.589] CloseHandle (hObject=0x218) returned 1
	[0154.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg")) returned 0x20
	[0154.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg")) returned 0x20
	[0154.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.590] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3960) returned 1
	[0154.590] CloseHandle (hObject=0x218) returned 1
	[0154.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp")) returned 0x20
	[0154.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp")) returned 0x20
	[0154.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.591] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5831) returned 1
	[0154.591] CloseHandle (hObject=0x218) returned 1
	[0154.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg")) returned 0x20
	[0154.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg")) returned 0x20
	[0154.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.592] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1800) returned 1
	[0154.592] CloseHandle (hObject=0x218) returned 1
	[0154.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp")) returned 0x20
	[0154.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp")) returned 0x20
	[0154.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.593] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5831) returned 1
	[0154.593] CloseHandle (hObject=0x218) returned 1
	[0154.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg")) returned 0x20
	[0154.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg")) returned 0x20
	[0154.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.594] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1800) returned 1
	[0154.594] CloseHandle (hObject=0x218) returned 1
	[0154.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp")) returned 0x20
	[0154.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp")) returned 0x20
	[0154.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.595] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11951) returned 1
	[0154.595] CloseHandle (hObject=0x218) returned 1
	[0154.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg")) returned 0x20
	[0154.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg")) returned 0x20
	[0154.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0154.596] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1592) returned 1
	[0154.596] CloseHandle (hObject=0x218) returned 1
	[0154.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp")) returned 0x20
	[0154.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp")) returned 0x20
	[0154.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.700] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10767) returned 1
	[0154.700] CloseHandle (hObject=0x20c) returned 1
	[0154.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg")) returned 0x20
	[0154.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg")) returned 0x20
	[0154.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.700] SetEvent (hEvent=0xfc) returned 1
	[0154.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.702] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7465) returned 1
	[0154.702] CloseHandle (hObject=0x20c) returned 1
	[0154.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg")) returned 0x20
	[0154.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg")) returned 0x20
	[0154.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\grip.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.702] SetEvent (hEvent=0xfc) returned 1
	[0154.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.703] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3128) returned 1
	[0154.703] CloseHandle (hObject=0x20c) returned 1
	[0154.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp")) returned 0x20
	[0154.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp")) returned 0x20
	[0154.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\gripmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.704] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3045) returned 1
	[0154.704] CloseHandle (hObject=0x20c) returned 1
	[0154.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg")) returned 0x20
	[0154.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg")) returned 0x20
	[0154.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.705] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2104) returned 1
	[0154.705] CloseHandle (hObject=0x20c) returned 1
	[0154.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp")) returned 0x20
	[0154.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp")) returned 0x20
	[0154.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.706] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52973) returned 1
	[0154.706] CloseHandle (hObject=0x20c) returned 1
	[0154.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg")) returned 0x20
	[0154.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg")) returned 0x20
	[0154.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.708] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7827) returned 1
	[0154.708] CloseHandle (hObject=0x20c) returned 1
	[0154.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg")) returned 0x20
	[0154.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg")) returned 0x20
	[0154.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.708] SetEvent (hEvent=0xfc) returned 1
	[0154.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.709] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2808) returned 1
	[0154.709] CloseHandle (hObject=0x20c) returned 1
	[0154.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp")) returned 0x20
	[0154.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp")) returned 0x20
	[0154.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.710] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9701) returned 1
	[0154.710] CloseHandle (hObject=0x20c) returned 1
	[0154.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg")) returned 0x20
	[0154.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg")) returned 0x20
	[0154.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.711] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2104) returned 1
	[0154.712] CloseHandle (hObject=0x20c) returned 1
	[0154.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp")) returned 0x20
	[0154.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp")) returned 0x20
	[0154.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.712] SetEvent (hEvent=0xfc) returned 1
	[0154.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.713] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8950) returned 1
	[0154.713] CloseHandle (hObject=0x20c) returned 1
	[0154.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg")) returned 0x20
	[0154.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg")) returned 0x20
	[0154.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.714] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=320) returned 1
	[0154.714] CloseHandle (hObject=0x20c) returned 1
	[0154.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp")) returned 0x20
	[0154.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp")) returned 0x20
	[0154.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.715] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16125) returned 1
	[0154.716] CloseHandle (hObject=0x20c) returned 1
	[0154.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg")) returned 0x20
	[0154.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg")) returned 0x20
	[0154.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.716] SetEvent (hEvent=0xfc) returned 1
	[0154.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.716] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16554) returned 1
	[0154.716] CloseHandle (hObject=0x20c) returned 1
	[0154.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg")) returned 0x20
	[0154.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg")) returned 0x20
	[0154.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.718] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=754) returned 1
	[0154.718] CloseHandle (hObject=0x20c) returned 1
	[0154.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg")) returned 0x20
	[0154.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg")) returned 0x20
	[0154.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.719] SetEvent (hEvent=0xfc) returned 1
	[0154.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.719] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=716) returned 1
	[0154.719] CloseHandle (hObject=0x20c) returned 1
	[0154.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg")) returned 0x20
	[0154.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg")) returned 0x20
	[0154.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.720] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=775) returned 1
	[0154.720] CloseHandle (hObject=0x20c) returned 1
	[0154.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg")) returned 0x20
	[0154.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg")) returned 0x20
	[0154.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.721] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=872) returned 1
	[0154.721] CloseHandle (hObject=0x20c) returned 1
	[0154.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg")) returned 0x20
	[0154.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg")) returned 0x20
	[0154.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.722] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=960) returned 1
	[0154.722] CloseHandle (hObject=0x20c) returned 1
	[0154.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg")) returned 0x20
	[0154.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg")) returned 0x20
	[0154.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.724] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4922) returned 1
	[0154.724] CloseHandle (hObject=0x20c) returned 1
	[0154.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp")) returned 0x20
	[0154.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp")) returned 0x20
	[0154.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.725] SetEvent (hEvent=0xfc) returned 1
	[0154.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.726] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4922) returned 1
	[0154.726] CloseHandle (hObject=0x20c) returned 1
	[0154.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp")) returned 0x20
	[0154.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp")) returned 0x20
	[0154.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.726] SetEvent (hEvent=0xfc) returned 1
	[0154.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.727] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7733) returned 1
	[0154.727] CloseHandle (hObject=0x20c) returned 1
	[0154.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg")) returned 0x20
	[0154.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg")) returned 0x20
	[0154.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.730] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6456) returned 1
	[0154.730] CloseHandle (hObject=0x20c) returned 1
	[0154.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp")) returned 0x20
	[0154.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp")) returned 0x20
	[0154.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.730] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3981) returned 1
	[0154.731] CloseHandle (hObject=0x20c) returned 1
	[0154.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg")) returned 0x20
	[0154.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg")) returned 0x20
	[0154.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.731] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=192) returned 1
	[0154.731] CloseHandle (hObject=0x20c) returned 1
	[0154.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp")) returned 0x20
	[0154.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp")) returned 0x20
	[0154.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.732] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20995) returned 1
	[0154.732] CloseHandle (hObject=0x20c) returned 1
	[0154.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg")) returned 0x20
	[0154.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg")) returned 0x20
	[0154.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.733] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4664) returned 1
	[0154.733] CloseHandle (hObject=0x20c) returned 1
	[0154.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp")) returned 0x20
	[0154.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp")) returned 0x20
	[0154.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.734] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3099) returned 1
	[0154.734] CloseHandle (hObject=0x20c) returned 1
	[0154.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg")) returned 0x20
	[0154.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg")) returned 0x20
	[0154.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0154.735] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2104) returned 1
	[0154.735] CloseHandle (hObject=0x20c) returned 1
	[0154.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp")) returned 0x20
	[0154.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp")) returned 0x20
	[0154.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.739] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25850) returned 1
	[0154.739] CloseHandle (hObject=0x200) returned 1
	[0154.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg")) returned 0x20
	[0154.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg")) returned 0x20
	[0154.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.740] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3896) returned 1
	[0154.740] CloseHandle (hObject=0x200) returned 1
	[0154.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp")) returned 0x20
	[0154.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp")) returned 0x20
	[0154.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.741] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6499) returned 1
	[0154.741] CloseHandle (hObject=0x200) returned 1
	[0154.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg")) returned 0x20
	[0154.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg")) returned 0x20
	[0154.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.742] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5688) returned 1
	[0154.742] CloseHandle (hObject=0x200) returned 1
	[0154.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp")) returned 0x20
	[0154.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp")) returned 0x20
	[0154.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.743] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11576) returned 1
	[0154.851] CloseHandle (hObject=0x200) returned 1
	[0154.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp")) returned 0x20
	[0154.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp")) returned 0x20
	[0154.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.851] SetEvent (hEvent=0xfc) returned 1
	[0154.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0154.940] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3348) returned 1
	[0154.940] CloseHandle (hObject=0x200) returned 1
	[0154.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg")) returned 0x20
	[0154.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg")) returned 0x20
	[0154.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0154.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.940] SetEvent (hEvent=0xfc) returned 1
	[0154.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.026] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7278) returned 1
	[0155.027] CloseHandle (hObject=0x214) returned 1
	[0155.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp")) returned 0x20
	[0155.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp")) returned 0x20
	[0155.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.027] SetEvent (hEvent=0xfc) returned 1
	[0155.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.028] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15992) returned 1
	[0155.028] CloseHandle (hObject=0x214) returned 1
	[0155.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg")) returned 0x20
	[0155.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg")) returned 0x20
	[0155.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.030] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7278) returned 1
	[0155.030] CloseHandle (hObject=0x214) returned 1
	[0155.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp")) returned 0x20
	[0155.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp")) returned 0x20
	[0155.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.030] SetEvent (hEvent=0xfc) returned 1
	[0155.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.031] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8790) returned 1
	[0155.031] CloseHandle (hObject=0x214) returned 1
	[0155.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg")) returned 0x20
	[0155.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg")) returned 0x20
	[0155.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.032] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2520) returned 1
	[0155.032] CloseHandle (hObject=0x214) returned 1
	[0155.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp")) returned 0x20
	[0155.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp")) returned 0x20
	[0155.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.033] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1584) returned 1
	[0155.033] CloseHandle (hObject=0x214) returned 1
	[0155.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp")) returned 0x20
	[0155.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp")) returned 0x20
	[0155.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.034] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7651) returned 1
	[0155.034] CloseHandle (hObject=0x214) returned 1
	[0155.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg")) returned 0x20
	[0155.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg")) returned 0x20
	[0155.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.034] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8896) returned 1
	[0155.035] CloseHandle (hObject=0x214) returned 1
	[0155.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg")) returned 0x20
	[0155.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg")) returned 0x20
	[0155.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.036] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2520) returned 1
	[0155.036] CloseHandle (hObject=0x214) returned 1
	[0155.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp")) returned 0x20
	[0155.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp")) returned 0x20
	[0155.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.037] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1584) returned 1
	[0155.037] CloseHandle (hObject=0x214) returned 1
	[0155.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp")) returned 0x20
	[0155.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp")) returned 0x20
	[0155.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.038] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7639) returned 1
	[0155.038] CloseHandle (hObject=0x214) returned 1
	[0155.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg")) returned 0x20
	[0155.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg")) returned 0x20
	[0155.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.039] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10136) returned 1
	[0155.039] CloseHandle (hObject=0x214) returned 1
	[0155.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg")) returned 0x20
	[0155.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg")) returned 0x20
	[0155.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.040] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=192) returned 1
	[0155.040] CloseHandle (hObject=0x214) returned 1
	[0155.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp")) returned 0x20
	[0155.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp")) returned 0x20
	[0155.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.041] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8172) returned 1
	[0155.041] CloseHandle (hObject=0x214) returned 1
	[0155.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg")) returned 0x20
	[0155.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg")) returned 0x20
	[0155.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.042] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8190) returned 1
	[0155.042] CloseHandle (hObject=0x214) returned 1
	[0155.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg")) returned 0x20
	[0155.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg")) returned 0x20
	[0155.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.043] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1444) returned 1
	[0155.043] CloseHandle (hObject=0x214) returned 1
	[0155.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp")) returned 0x20
	[0155.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp")) returned 0x20
	[0155.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.045] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3611) returned 1
	[0155.045] CloseHandle (hObject=0x214) returned 1
	[0155.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg")) returned 0x20
	[0155.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg")) returned 0x20
	[0155.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.046] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2104) returned 1
	[0155.046] CloseHandle (hObject=0x214) returned 1
	[0155.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp")) returned 0x20
	[0155.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp")) returned 0x20
	[0155.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.047] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14652) returned 1
	[0155.047] CloseHandle (hObject=0x214) returned 1
	[0155.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg")) returned 0x20
	[0155.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg")) returned 0x20
	[0155.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.048] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5944) returned 1
	[0155.048] CloseHandle (hObject=0x214) returned 1
	[0155.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp")) returned 0x20
	[0155.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp")) returned 0x20
	[0155.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.049] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43793) returned 1
	[0155.049] CloseHandle (hObject=0x214) returned 1
	[0155.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg")) returned 0x20
	[0155.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg")) returned 0x20
	[0155.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.051] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9497) returned 1
	[0155.051] CloseHandle (hObject=0x214) returned 1
	[0155.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg")) returned 0x20
	[0155.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg")) returned 0x20
	[0155.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.052] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3240) returned 1
	[0155.052] CloseHandle (hObject=0x214) returned 1
	[0155.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp")) returned 0x20
	[0155.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp")) returned 0x20
	[0155.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.052] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2493) returned 1
	[0155.053] CloseHandle (hObject=0x214) returned 1
	[0155.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg")) returned 0x20
	[0155.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg")) returned 0x20
	[0155.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.053] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9453) returned 1
	[0155.054] CloseHandle (hObject=0x214) returned 1
	[0155.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg")) returned 0x20
	[0155.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg")) returned 0x20
	[0155.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.054] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3240) returned 1
	[0155.054] CloseHandle (hObject=0x214) returned 1
	[0155.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp")) returned 0x20
	[0155.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp")) returned 0x20
	[0155.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.056] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2443) returned 1
	[0155.056] CloseHandle (hObject=0x214) returned 1
	[0155.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg")) returned 0x20
	[0155.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg")) returned 0x20
	[0155.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.214] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=116) returned 1
	[0155.214] CloseHandle (hObject=0x218) returned 1
	[0155.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp")) returned 0x20
	[0155.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp")) returned 0x20
	[0155.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.214] SetEvent (hEvent=0xfc) returned 1
	[0155.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.215] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24910) returned 1
	[0155.215] CloseHandle (hObject=0x218) returned 1
	[0155.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif")) returned 0x20
	[0155.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif")) returned 0x20
	[0155.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_adobe.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.216] SetEvent (hEvent=0xfc) returned 1
	[0155.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.217] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5661) returned 1
	[0155.217] CloseHandle (hObject=0x218) returned 1
	[0155.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif")) returned 0x20
	[0155.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif")) returned 0x20
	[0155.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_casual.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0155.220] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32211) returned 1
	[0155.220] CloseHandle (hObject=0x218) returned 1
	[0155.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif")) returned 0x20
	[0155.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif")) returned 0x20
	[0155.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_country.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0155.386] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4906) returned 1
	[0155.386] CloseHandle (hObject=0x200) returned 1
	[0155.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif")) returned 0x20
	[0155.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif")) returned 0x20
	[0155.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\bg_earthy.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.387] SetEvent (hEvent=0xfc) returned 1
	[0155.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.497] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14247) returned 1
	[0155.497] CloseHandle (hObject=0x214) returned 1
	[0155.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg")) returned 0x20
	[0155.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg")) returned 0x20
	[0155.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0155.614] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1199) returned 1
	[0155.615] CloseHandle (hObject=0x20c) returned 1
	[0155.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif")) returned 0x20
	[0155.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif")) returned 0x20
	[0155.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\SEARCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\search.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0155.616] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=661) returned 1
	[0155.616] CloseHandle (hObject=0x20c) returned 1
	[0155.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css")) returned 0x20
	[0155.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css")) returned 0x20
	[0155.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.CSS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0155.617] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=318) returned 1
	[0155.617] CloseHandle (hObject=0x20c) returned 1
	[0155.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.ico")) returned 0x20
	[0155.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.ico")) returned 0x20
	[0155.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0155.618] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20571) returned 1
	[0155.618] CloseHandle (hObject=0x20c) returned 1
	[0155.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js")) returned 0x20
	[0155.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js")) returned 0x20
	[0155.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0155.619] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=519) returned 1
	[0155.619] CloseHandle (hObject=0x20c) returned 1
	[0155.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif")) returned 0x20
	[0155.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif")) returned 0x20
	[0155.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\VIEWBY.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewby.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.621] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=84) returned 1
	[0155.621] CloseHandle (hObject=0x214) returned 1
	[0155.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js")) returned 0x20
	[0155.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js")) returned 0x20
	[0155.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewDblClick.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewdblclick.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.622] SetEvent (hEvent=0xfc) returned 1
	[0155.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.623] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3448) returned 1
	[0155.623] CloseHandle (hObject=0x214) returned 1
	[0155.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg")) returned 0x20
	[0155.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg")) returned 0x20
	[0155.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.623] SetEvent (hEvent=0xfc) returned 1
	[0155.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.624] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=206) returned 1
	[0155.624] CloseHandle (hObject=0x214) returned 1
	[0155.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js")) returned 0x20
	[0155.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js")) returned 0x20
	[0155.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\viewSelectionChanged.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewselectionchanged.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.625] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=580) returned 1
	[0155.625] CloseHandle (hObject=0x214) returned 1
	[0155.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif")) returned 0x20
	[0155.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif")) returned 0x20
	[0155.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\add.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.626] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3048) returned 1
	[0155.626] CloseHandle (hObject=0x214) returned 1
	[0155.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg")) returned 0x20
	[0155.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg")) returned 0x20
	[0155.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.627] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2340) returned 1
	[0155.627] CloseHandle (hObject=0x214) returned 1
	[0155.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp")) returned 0x20
	[0155.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp")) returned 0x20
	[0155.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.628] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2792) returned 1
	[0155.628] CloseHandle (hObject=0x214) returned 1
	[0155.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif")) returned 0x20
	[0155.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif")) returned 0x20
	[0155.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\attention.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.629] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24910) returned 1
	[0155.629] CloseHandle (hObject=0x214) returned 1
	[0155.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif")) returned 0x20
	[0155.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif")) returned 0x20
	[0155.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\BG_ADOBE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_adobe.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.629] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5661) returned 1
	[0155.629] CloseHandle (hObject=0x214) returned 1
	[0155.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif")) returned 0x20
	[0155.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif")) returned 0x20
	[0155.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Casual.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_casual.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.630] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32211) returned 1
	[0155.630] CloseHandle (hObject=0x214) returned 1
	[0155.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif")) returned 0x20
	[0155.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif")) returned 0x20
	[0155.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Country.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_country.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.631] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4906) returned 1
	[0155.631] CloseHandle (hObject=0x214) returned 1
	[0155.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif")) returned 0x20
	[0155.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif")) returned 0x20
	[0155.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Earthy.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_earthy.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.632] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=92093) returned 1
	[0155.632] CloseHandle (hObject=0x214) returned 1
	[0155.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif")) returned 0x20
	[0155.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif")) returned 0x20
	[0155.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePage.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepage.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.633] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20155) returned 1
	[0155.633] CloseHandle (hObject=0x214) returned 1
	[0155.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif")) returned 0x20
	[0155.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif")) returned 0x20
	[0155.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageBlank.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageblank.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.634] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1039) returned 1
	[0155.634] CloseHandle (hObject=0x214) returned 1
	[0155.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif")) returned 0x20
	[0155.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif")) returned 0x20
	[0155.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_FormsHomePageSlice.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_formshomepageslice.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.635] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22160) returned 1
	[0155.635] CloseHandle (hObject=0x214) returned 1
	[0155.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif")) returned 0x20
	[0155.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif")) returned 0x20
	[0155.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_GreenTea.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_greentea.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.636] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=106) returned 1
	[0155.636] CloseHandle (hObject=0x214) returned 1
	[0155.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif")) returned 0x20
	[0155.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif")) returned 0x20
	[0155.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Groove.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_groove.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.637] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8614) returned 1
	[0155.637] CloseHandle (hObject=0x214) returned 1
	[0155.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif")) returned 0x20
	[0155.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif")) returned 0x20
	[0155.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_LightSpirit.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_lightspirit.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.638] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15703) returned 1
	[0155.638] CloseHandle (hObject=0x214) returned 1
	[0155.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif")) returned 0x20
	[0155.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif")) returned 0x20
	[0155.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_OliveGreen.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_olivegreen.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.639] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6213) returned 1
	[0155.639] CloseHandle (hObject=0x214) returned 1
	[0155.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif")) returned 0x20
	[0155.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif")) returned 0x20
	[0155.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_Premium.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_premium.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.640] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20801) returned 1
	[0155.640] CloseHandle (hObject=0x214) returned 1
	[0155.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif")) returned 0x20
	[0155.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif")) returned 0x20
	[0155.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_SlateBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_slateblue.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.641] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6460) returned 1
	[0155.641] CloseHandle (hObject=0x214) returned 1
	[0155.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif")) returned 0x20
	[0155.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif")) returned 0x20
	[0155.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_texturedblue.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0155.765] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15460) returned 1
	[0155.766] CloseHandle (hObject=0x20c) returned 1
	[0155.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif")) returned 0x20
	[0155.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif")) returned 0x20
	[0155.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\bg_velvetrose.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0155.766] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2610) returned 1
	[0155.766] CloseHandle (hObject=0x20c) returned 1
	[0155.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css")) returned 0x20
	[0155.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css")) returned 0x20
	[0155.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0155.767] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0155.767] CloseHandle (hObject=0x20c) returned 1
	[0155.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif")) returned 0x20
	[0155.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif")) returned 0x20
	[0155.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0155.880] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=255) returned 1
	[0155.880] CloseHandle (hObject=0x214) returned 1
	[0155.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif")) returned 0x20
	[0155.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif")) returned 0x20
	[0155.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.881] SetEvent (hEvent=0xfc) returned 1
	[0155.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0155.977] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0155.977] CloseHandle (hObject=0x204) returned 1
	[0155.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif")) returned 0x20
	[0155.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif")) returned 0x20
	[0155.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.978] SetEvent (hEvent=0xfc) returned 1
	[0155.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0155.978] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3397) returned 1
	[0155.978] CloseHandle (hObject=0x204) returned 1
	[0155.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css")) returned 0x20
	[0155.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css")) returned 0x20
	[0155.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0155.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.153] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=323) returned 1
	[0156.153] CloseHandle (hObject=0x1f8) returned 1
	[0156.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif")) returned 0x20
	[0156.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif")) returned 0x20
	[0156.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.157] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=462) returned 1
	[0156.157] CloseHandle (hObject=0x1f4) returned 1
	[0156.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif")) returned 0x20
	[0156.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif")) returned 0x20
	[0156.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.158] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=267) returned 1
	[0156.158] CloseHandle (hObject=0x1f4) returned 1
	[0156.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif")) returned 0x20
	[0156.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif")) returned 0x20
	[0156.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.159] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3323) returned 1
	[0156.159] CloseHandle (hObject=0x1f4) returned 1
	[0156.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css")) returned 0x20
	[0156.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css")) returned 0x20
	[0156.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.160] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=866) returned 1
	[0156.160] CloseHandle (hObject=0x1f4) returned 1
	[0156.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css")) returned 0x20
	[0156.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css")) returned 0x20
	[0156.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.161] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2156) returned 1
	[0156.161] CloseHandle (hObject=0x1f4) returned 1
	[0156.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif")) returned 0x20
	[0156.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif")) returned 0x20
	[0156.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.162] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=496) returned 1
	[0156.162] CloseHandle (hObject=0x1f4) returned 1
	[0156.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif")) returned 0x20
	[0156.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif")) returned 0x20
	[0156.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.163] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1025) returned 1
	[0156.163] CloseHandle (hObject=0x1f4) returned 1
	[0156.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif")) returned 0x20
	[0156.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif")) returned 0x20
	[0156.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.164] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3058) returned 1
	[0156.164] CloseHandle (hObject=0x1f4) returned 1
	[0156.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css")) returned 0x20
	[0156.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css")) returned 0x20
	[0156.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.165] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=909) returned 1
	[0156.165] CloseHandle (hObject=0x1f4) returned 1
	[0156.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css")) returned 0x20
	[0156.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css")) returned 0x20
	[0156.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.166] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=840) returned 1
	[0156.166] CloseHandle (hObject=0x1f4) returned 1
	[0156.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css")) returned 0x20
	[0156.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css")) returned 0x20
	[0156.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.167] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=364) returned 1
	[0156.167] CloseHandle (hObject=0x1f4) returned 1
	[0156.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif")) returned 0x20
	[0156.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif")) returned 0x20
	[0156.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.168] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=364) returned 1
	[0156.168] CloseHandle (hObject=0x1f4) returned 1
	[0156.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif")) returned 0x20
	[0156.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif")) returned 0x20
	[0156.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.169] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3393) returned 1
	[0156.169] CloseHandle (hObject=0x1f4) returned 1
	[0156.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css")) returned 0x20
	[0156.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css")) returned 0x20
	[0156.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.175] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=908) returned 1
	[0156.175] CloseHandle (hObject=0x1f4) returned 1
	[0156.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css")) returned 0x20
	[0156.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css")) returned 0x20
	[0156.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.176] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6906) returned 1
	[0156.176] CloseHandle (hObject=0x1f4) returned 1
	[0156.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif")) returned 0x20
	[0156.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif")) returned 0x20
	[0156.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\background.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.178] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0156.178] CloseHandle (hObject=0x1f4) returned 1
	[0156.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif")) returned 0x20
	[0156.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif")) returned 0x20
	[0156.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.179] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0156.179] CloseHandle (hObject=0x1f4) returned 1
	[0156.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif")) returned 0x20
	[0156.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif")) returned 0x20
	[0156.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.180] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3636) returned 1
	[0156.180] CloseHandle (hObject=0x1f4) returned 1
	[0156.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css")) returned 0x20
	[0156.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css")) returned 0x20
	[0156.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.181] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=428) returned 1
	[0156.181] CloseHandle (hObject=0x1f4) returned 1
	[0156.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif")) returned 0x20
	[0156.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif")) returned 0x20
	[0156.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\button.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.182] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0156.182] CloseHandle (hObject=0x1f4) returned 1
	[0156.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20
	[0156.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif")) returned 0x20
	[0156.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.183] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0156.183] CloseHandle (hObject=0x1f4) returned 1
	[0156.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20
	[0156.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif")) returned 0x20
	[0156.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.184] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3130) returned 1
	[0156.184] CloseHandle (hObject=0x1f4) returned 1
	[0156.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css")) returned 0x20
	[0156.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css")) returned 0x20
	[0156.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.185] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1846) returned 1
	[0156.185] CloseHandle (hObject=0x1f4) returned 1
	[0156.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css")) returned 0x20
	[0156.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css")) returned 0x20
	[0156.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.187] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=233) returned 1
	[0156.187] CloseHandle (hObject=0x1f4) returned 1
	[0156.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif")) returned 0x20
	[0156.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif")) returned 0x20
	[0156.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\background.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.188] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3261) returned 1
	[0156.188] CloseHandle (hObject=0x1f4) returned 1
	[0156.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif")) returned 0x20
	[0156.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif")) returned 0x20
	[0156.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.189] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=462) returned 1
	[0156.189] CloseHandle (hObject=0x1f4) returned 1
	[0156.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif")) returned 0x20
	[0156.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif")) returned 0x20
	[0156.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.190] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=264) returned 1
	[0156.190] CloseHandle (hObject=0x1f4) returned 1
	[0156.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif")) returned 0x20
	[0156.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif")) returned 0x20
	[0156.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\tab_on.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.191] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3304) returned 1
	[0156.191] CloseHandle (hObject=0x1f4) returned 1
	[0156.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css")) returned 0x20
	[0156.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css")) returned 0x20
	[0156.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.192] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=815) returned 1
	[0156.192] CloseHandle (hObject=0x1f4) returned 1
	[0156.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif")) returned 0x20
	[0156.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif")) returned 0x20
	[0156.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\background.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.193] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27027) returned 1
	[0156.193] CloseHandle (hObject=0x1f4) returned 1
	[0156.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif")) returned 0x20
	[0156.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif")) returned 0x20
	[0156.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\header.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0156.194] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0156.194] CloseHandle (hObject=0x1f4) returned 1
	[0156.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif")) returned 0x20
	[0156.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif")) returned 0x20
	[0156.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\tab_off.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.313] SetEvent (hEvent=0xfc) returned 1
	[0156.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0156.367] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12003) returned 1
	[0156.367] CloseHandle (hObject=0x204) returned 1
	[0156.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg")) returned 0x20
	[0156.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg")) returned 0x20
	[0156.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.368] SetEvent (hEvent=0xfc) returned 1
	[0156.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0156.368] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1592) returned 1
	[0156.368] CloseHandle (hObject=0x204) returned 1
	[0156.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp")) returned 0x20
	[0156.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp")) returned 0x20
	[0156.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0156.369] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4883) returned 1
	[0156.369] CloseHandle (hObject=0x204) returned 1
	[0156.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html")) returned 0x20
	[0156.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html")) returned 0x20
	[0156.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.372] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2697) returned 1
	[0156.372] CloseHandle (hObject=0x1f8) returned 1
	[0156.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html")) returned 0x20
	[0156.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html")) returned 0x20
	[0156.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.373] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7163) returned 1
	[0156.373] CloseHandle (hObject=0x1f8) returned 1
	[0156.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg")) returned 0x20
	[0156.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg")) returned 0x20
	[0156.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.374] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9197) returned 1
	[0156.374] CloseHandle (hObject=0x1f8) returned 1
	[0156.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js")) returned 0x20
	[0156.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js")) returned 0x20
	[0156.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\form_edit.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\form_edit.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.375] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=615) returned 1
	[0156.375] CloseHandle (hObject=0x1f8) returned 1
	[0156.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif")) returned 0x20
	[0156.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif")) returned 0x20
	[0156.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\LAUNCH.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\launch.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.523] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=196724) returned 1
	[0156.523] CloseHandle (hObject=0x168) returned 1
	[0156.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif")) returned 0x20
	[0156.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif")) returned 0x20
	[0156.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\macroprogress.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.524] SetEvent (hEvent=0xfc) returned 1
	[0156.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.524] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6460) returned 1
	[0156.524] CloseHandle (hObject=0x168) returned 1
	[0156.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif")) returned 0x20
	[0156.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif")) returned 0x20
	[0156.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_TexturedBlue.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_texturedblue.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.525] SetEvent (hEvent=0xfc) returned 1
	[0156.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.526] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15460) returned 1
	[0156.526] CloseHandle (hObject=0x168) returned 1
	[0156.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif")) returned 0x20
	[0156.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif")) returned 0x20
	[0156.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\bg_VelvetRose.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\bg_velvetrose.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.526] SetEvent (hEvent=0xfc) returned 1
	[0156.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.527] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=369) returned 1
	[0156.527] CloseHandle (hObject=0x168) returned 1
	[0156.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif")) returned 0x20
	[0156.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif")) returned 0x20
	[0156.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.527] SetEvent (hEvent=0xfc) returned 1
	[0156.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.528] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=374) returned 1
	[0156.528] CloseHandle (hObject=0x168) returned 1
	[0156.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif")) returned 0x20
	[0156.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif")) returned 0x20
	[0156.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_left_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_left_over.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.528] SetEvent (hEvent=0xfc) returned 1
	[0156.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.529] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=181) returned 1
	[0156.529] CloseHandle (hObject=0x168) returned 1
	[0156.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif")) returned 0x20
	[0156.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif")) returned 0x20
	[0156.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.530] SetEvent (hEvent=0xfc) returned 1
	[0156.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.530] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=183) returned 1
	[0156.530] CloseHandle (hObject=0x168) returned 1
	[0156.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif")) returned 0x20
	[0156.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif")) returned 0x20
	[0156.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_mid_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_mid_over.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.531] SetEvent (hEvent=0xfc) returned 1
	[0156.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.531] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=369) returned 1
	[0156.531] CloseHandle (hObject=0x168) returned 1
	[0156.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif")) returned 0x20
	[0156.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif")) returned 0x20
	[0156.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.532] SetEvent (hEvent=0xfc) returned 1
	[0156.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.533] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=580) returned 1
	[0156.533] CloseHandle (hObject=0x168) returned 1
	[0156.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif")) returned 0x20
	[0156.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif")) returned 0x20
	[0156.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\button_right_over.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\button_right_over.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.533] SetEvent (hEvent=0xfc) returned 1
	[0156.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.534] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=899) returned 1
	[0156.534] CloseHandle (hObject=0x168) returned 1
	[0156.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif")) returned 0x20
	[0156.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif")) returned 0x20
	[0156.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\calendar.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.534] SetEvent (hEvent=0xfc) returned 1
	[0156.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.535] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=625) returned 1
	[0156.535] CloseHandle (hObject=0x168) returned 1
	[0156.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif")) returned 0x20
	[0156.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif")) returned 0x20
	[0156.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\delete.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.536] SetEvent (hEvent=0xfc) returned 1
	[0156.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.608] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=873) returned 1
	[0156.608] CloseHandle (hObject=0x168) returned 1
	[0156.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif")) returned 0x20
	[0156.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif")) returned 0x20
	[0156.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\error.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.609] SetEvent (hEvent=0xfc) returned 1
	[0156.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.711] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0156.711] CloseHandle (hObject=0x140) returned 1
	[0156.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif")) returned 0x20
	[0156.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif")) returned 0x20
	[0156.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.711] SetEvent (hEvent=0xfc) returned 1
	[0156.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.712] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3568) returned 1
	[0156.712] CloseHandle (hObject=0x140) returned 1
	[0156.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css")) returned 0x20
	[0156.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css")) returned 0x20
	[0156.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.713] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0156.713] CloseHandle (hObject=0x140) returned 1
	[0156.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif")) returned 0x20
	[0156.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif")) returned 0x20
	[0156.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\button.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.714] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=255) returned 1
	[0156.714] CloseHandle (hObject=0x140) returned 1
	[0156.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif")) returned 0x20
	[0156.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif")) returned 0x20
	[0156.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.717] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0156.717] CloseHandle (hObject=0x140) returned 1
	[0156.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20
	[0156.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif")) returned 0x20
	[0156.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.718] SetEvent (hEvent=0xfc) returned 1
	[0156.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.718] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0156.718] CloseHandle (hObject=0x140) returned 1
	[0156.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20
	[0156.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif")) returned 0x20
	[0156.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.719] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4109) returned 1
	[0156.719] CloseHandle (hObject=0x140) returned 1
	[0156.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css")) returned 0x20
	[0156.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css")) returned 0x20
	[0156.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.720] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0156.720] CloseHandle (hObject=0x140) returned 1
	[0156.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif")) returned 0x20
	[0156.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif")) returned 0x20
	[0156.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.721] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0156.721] CloseHandle (hObject=0x140) returned 1
	[0156.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif")) returned 0x20
	[0156.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif")) returned 0x20
	[0156.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.722] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4355) returned 1
	[0156.722] CloseHandle (hObject=0x140) returned 1
	[0156.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css")) returned 0x20
	[0156.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css")) returned 0x20
	[0156.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.723] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=323) returned 1
	[0156.723] CloseHandle (hObject=0x140) returned 1
	[0156.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif")) returned 0x20
	[0156.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif")) returned 0x20
	[0156.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\background.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\background.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.724] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0156.724] CloseHandle (hObject=0x140) returned 1
	[0156.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif")) returned 0x20
	[0156.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif")) returned 0x20
	[0156.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\BUTTON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\button.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.726] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0156.726] CloseHandle (hObject=0x140) returned 1
	[0156.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20
	[0156.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif")) returned 0x20
	[0156.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.726] SetEvent (hEvent=0xfc) returned 1
	[0156.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.727] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0156.727] CloseHandle (hObject=0x140) returned 1
	[0156.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20
	[0156.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif")) returned 0x20
	[0156.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.729] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4337) returned 1
	[0156.729] CloseHandle (hObject=0x140) returned 1
	[0156.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css")) returned 0x20
	[0156.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css")) returned 0x20
	[0156.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.730] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=367) returned 1
	[0156.730] CloseHandle (hObject=0x140) returned 1
	[0156.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif")) returned 0x20
	[0156.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif")) returned 0x20
	[0156.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.731] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0156.731] CloseHandle (hObject=0x140) returned 1
	[0156.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20
	[0156.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif")) returned 0x20
	[0156.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.732] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0156.732] CloseHandle (hObject=0x140) returned 1
	[0156.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20
	[0156.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif")) returned 0x20
	[0156.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.733] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4212) returned 1
	[0156.733] CloseHandle (hObject=0x140) returned 1
	[0156.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css")) returned 0x20
	[0156.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css")) returned 0x20
	[0156.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.734] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1888) returned 1
	[0156.734] CloseHandle (hObject=0x140) returned 1
	[0156.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css")) returned 0x20
	[0156.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css")) returned 0x20
	[0156.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.735] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1841) returned 1
	[0156.735] CloseHandle (hObject=0x140) returned 1
	[0156.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css")) returned 0x20
	[0156.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css")) returned 0x20
	[0156.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.736] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=148) returned 1
	[0156.736] CloseHandle (hObject=0x140) returned 1
	[0156.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif")) returned 0x20
	[0156.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif")) returned 0x20
	[0156.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\HEADER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\header.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0156.737] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=496) returned 1
	[0156.737] CloseHandle (hObject=0x140) returned 1
	[0156.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif")) returned 0x20
	[0156.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif")) returned 0x20
	[0156.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_OFF.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_off.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.855] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1025) returned 1
	[0156.855] CloseHandle (hObject=0x168) returned 1
	[0156.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif")) returned 0x20
	[0156.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif")) returned 0x20
	[0156.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\TAB_ON.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert\\tab_on.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.856] SetEvent (hEvent=0xfc) returned 1
	[0156.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.856] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4016) returned 1
	[0156.856] CloseHandle (hObject=0x168) returned 1
	[0156.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css")) returned 0x20
	[0156.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css")) returned 0x20
	[0156.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.857] SetEvent (hEvent=0xfc) returned 1
	[0156.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0156.857] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1867) returned 1
	[0156.857] CloseHandle (hObject=0x168) returned 1
	[0156.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css")) returned 0x20
	[0156.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css")) returned 0x20
	[0156.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.858] SetEvent (hEvent=0xfc) returned 1
	[0156.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0156.982] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1798) returned 1
	[0156.982] CloseHandle (hObject=0x1f8) returned 1
	[0156.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css")) returned 0x20
	[0156.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css")) returned 0x20
	[0156.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0156.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0156.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.077] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42287) returned 1
	[0157.077] CloseHandle (hObject=0x168) returned 1
	[0157.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif")) returned 0x20
	[0157.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif")) returned 0x20
	[0157.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\macroprogress.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\macroprogress.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.077] SetEvent (hEvent=0xfc) returned 1
	[0157.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.078] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8677) returned 1
	[0157.078] CloseHandle (hObject=0x168) returned 1
	[0157.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js")) returned 0x20
	[0157.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js")) returned 0x20
	[0157.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\PublicFunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\publicfunctions.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.080] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=848) returned 1
	[0157.080] CloseHandle (hObject=0x168) returned 1
	[0157.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif")) returned 0x20
	[0157.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif")) returned 0x20
	[0157.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignleft.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.081] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=847) returned 1
	[0157.081] CloseHandle (hObject=0x168) returned 1
	[0157.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif")) returned 0x20
	[0157.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif")) returned 0x20
	[0157.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_alignright.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.082] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=870) returned 1
	[0157.082] CloseHandle (hObject=0x168) returned 1
	[0157.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif")) returned 0x20
	[0157.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif")) returned 0x20
	[0157.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\RTF_BOLD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bold.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.083] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=869) returned 1
	[0157.083] CloseHandle (hObject=0x168) returned 1
	[0157.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif")) returned 0x20
	[0157.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif")) returned 0x20
	[0157.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_bullets.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.111] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=847) returned 1
	[0157.111] CloseHandle (hObject=0x168) returned 1
	[0157.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif")) returned 0x20
	[0157.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif")) returned 0x20
	[0157.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_center.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.112] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1004) returned 1
	[0157.112] CloseHandle (hObject=0x168) returned 1
	[0157.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif")) returned 0x20
	[0157.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif")) returned 0x20
	[0157.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosecolor.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.113] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=890) returned 1
	[0157.113] CloseHandle (hObject=0x168) returned 1
	[0157.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif")) returned 0x20
	[0157.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif")) returned 0x20
	[0157.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_choosefont.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_choosefont.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.114] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=863) returned 1
	[0157.114] CloseHandle (hObject=0x168) returned 1
	[0157.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif")) returned 0x20
	[0157.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif")) returned 0x20
	[0157.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_decreaseindent.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.115] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=241) returned 1
	[0157.115] CloseHandle (hObject=0x168) returned 1
	[0157.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif")) returned 0x20
	[0157.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif")) returned 0x20
	[0157.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_hyperlink.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.116] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=861) returned 1
	[0157.116] CloseHandle (hObject=0x168) returned 1
	[0157.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif")) returned 0x20
	[0157.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif")) returned 0x20
	[0157.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_increaseindent.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.117] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=852) returned 1
	[0157.117] CloseHandle (hObject=0x168) returned 1
	[0157.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif")) returned 0x20
	[0157.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif")) returned 0x20
	[0157.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_italic.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_italic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.118] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=850) returned 1
	[0157.118] CloseHandle (hObject=0x168) returned 1
	[0157.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif")) returned 0x20
	[0157.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif")) returned 0x20
	[0157.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_justify.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.119] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=883) returned 1
	[0157.119] CloseHandle (hObject=0x168) returned 1
	[0157.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif")) returned 0x20
	[0157.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif")) returned 0x20
	[0157.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.120] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=160) returned 1
	[0157.120] CloseHandle (hObject=0x168) returned 1
	[0157.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif")) returned 0x20
	[0157.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif")) returned 0x20
	[0157.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_spellcheck.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_spellcheck.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.121] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=860) returned 1
	[0157.121] CloseHandle (hObject=0x168) returned 1
	[0157.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif")) returned 0x20
	[0157.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif")) returned 0x20
	[0157.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\rtf_underline.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\rtf_underline.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.122] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=615) returned 1
	[0157.122] CloseHandle (hObject=0x168) returned 1
	[0157.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif")) returned 0x20
	[0157.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif")) returned 0x20
	[0157.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\save.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.123] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=82695) returned 1
	[0157.123] CloseHandle (hObject=0x168) returned 1
	[0157.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js")) returned 0x20
	[0157.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js")) returned 0x20
	[0157.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\submit.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.124] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51802) returned 1
	[0157.124] CloseHandle (hObject=0x168) returned 1
	[0157.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js")) returned 0x20
	[0157.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js")) returned 0x20
	[0157.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\utilityfunctions.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.126] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25779) returned 1
	[0157.126] CloseHandle (hObject=0x168) returned 1
	[0157.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js")) returned 0x20
	[0157.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js")) returned 0x20
	[0157.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\validation.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.127] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=318) returned 1
	[0157.127] CloseHandle (hObject=0x168) returned 1
	[0157.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.ico")) returned 0x20
	[0157.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.ico")) returned 0x20
	[0157.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.128] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8341) returned 1
	[0157.128] CloseHandle (hObject=0x168) returned 1
	[0157.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js")) returned 0x20
	[0157.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js")) returned 0x20
	[0157.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\VIEW.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.129] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3448) returned 1
	[0157.129] CloseHandle (hObject=0x168) returned 1
	[0157.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg")) returned 0x20
	[0157.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg")) returned 0x20
	[0157.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.131] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=580) returned 1
	[0157.131] CloseHandle (hObject=0x168) returned 1
	[0157.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif")) returned 0x20
	[0157.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif")) returned 0x20
	[0157.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ADD.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\add.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.132] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2792) returned 1
	[0157.132] CloseHandle (hObject=0x168) returned 1
	[0157.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif")) returned 0x20
	[0157.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif")) returned 0x20
	[0157.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\attention.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\attention.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.133] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=899) returned 1
	[0157.133] CloseHandle (hObject=0x168) returned 1
	[0157.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif")) returned 0x20
	[0157.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif")) returned 0x20
	[0157.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\CALENDAR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\calendar.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.134] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=625) returned 1
	[0157.134] CloseHandle (hObject=0x168) returned 1
	[0157.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif")) returned 0x20
	[0157.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif")) returned 0x20
	[0157.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\DELETE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\delete.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.135] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=873) returned 1
	[0157.135] CloseHandle (hObject=0x168) returned 1
	[0157.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif")) returned 0x20
	[0157.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif")) returned 0x20
	[0157.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\ERROR.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\error.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.136] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=83076) returned 1
	[0157.136] CloseHandle (hObject=0x168) returned 1
	[0157.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js")) returned 0x20
	[0157.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js")) returned 0x20
	[0157.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FORM.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\form.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.136] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1082) returned 1
	[0157.137] CloseHandle (hObject=0x168) returned 1
	[0157.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html")) returned 0x20
	[0157.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html")) returned 0x20
	[0157.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.137] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2089) returned 1
	[0157.138] CloseHandle (hObject=0x168) returned 1
	[0157.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html")) returned 0x20
	[0157.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html")) returned 0x20
	[0157.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.138] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=751) returned 1
	[0157.138] CloseHandle (hObject=0x168) returned 1
	[0157.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html")) returned 0x20
	[0157.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html")) returned 0x20
	[0157.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.139] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5051) returned 1
	[0157.139] CloseHandle (hObject=0x168) returned 1
	[0157.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html")) returned 0x20
	[0157.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html")) returned 0x20
	[0157.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.140] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5061) returned 1
	[0157.140] CloseHandle (hObject=0x168) returned 1
	[0157.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html")) returned 0x20
	[0157.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html")) returned 0x20
	[0157.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.141] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2219) returned 1
	[0157.141] CloseHandle (hObject=0x168) returned 1
	[0157.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html")) returned 0x20
	[0157.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html")) returned 0x20
	[0157.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.142] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2136) returned 1
	[0157.142] CloseHandle (hObject=0x168) returned 1
	[0157.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html")) returned 0x20
	[0157.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html")) returned 0x20
	[0157.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.143] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18175) returned 1
	[0157.143] CloseHandle (hObject=0x168) returned 1
	[0157.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html")) returned 0x20
	[0157.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html")) returned 0x20
	[0157.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.144] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18185) returned 1
	[0157.144] CloseHandle (hObject=0x168) returned 1
	[0157.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html")) returned 0x20
	[0157.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html")) returned 0x20
	[0157.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.145] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1471) returned 1
	[0157.145] CloseHandle (hObject=0x168) returned 1
	[0157.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html")) returned 0x20
	[0157.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html")) returned 0x20
	[0157.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.253] SetEvent (hEvent=0xfc) returned 1
	[0157.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.254] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=848) returned 1
	[0157.255] CloseHandle (hObject=0x1f8) returned 1
	[0157.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif")) returned 0x20
	[0157.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif")) returned 0x20
	[0157.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignleft.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignleft.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.255] SetEvent (hEvent=0xfc) returned 1
	[0157.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.256] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=847) returned 1
	[0157.256] CloseHandle (hObject=0x1f8) returned 1
	[0157.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif")) returned 0x20
	[0157.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif")) returned 0x20
	[0157.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_alignright.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_alignright.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.257] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=869) returned 1
	[0157.257] CloseHandle (hObject=0x1f8) returned 1
	[0157.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif")) returned 0x20
	[0157.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif")) returned 0x20
	[0157.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_bullets.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_bullets.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.258] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=847) returned 1
	[0157.258] CloseHandle (hObject=0x1f8) returned 1
	[0157.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif")) returned 0x20
	[0157.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif")) returned 0x20
	[0157.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_center.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_center.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.259] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1006) returned 1
	[0157.259] CloseHandle (hObject=0x1f8) returned 1
	[0157.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif")) returned 0x20
	[0157.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif")) returned 0x20
	[0157.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_choosecolor.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_choosecolor.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.260] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=863) returned 1
	[0157.260] CloseHandle (hObject=0x1f8) returned 1
	[0157.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif")) returned 0x20
	[0157.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif")) returned 0x20
	[0157.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_decreaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_decreaseindent.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.261] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=241) returned 1
	[0157.261] CloseHandle (hObject=0x1f8) returned 1
	[0157.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif")) returned 0x20
	[0157.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif")) returned 0x20
	[0157.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_hyperlink.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_hyperlink.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.264] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=861) returned 1
	[0157.264] CloseHandle (hObject=0x1f8) returned 1
	[0157.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif")) returned 0x20
	[0157.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif")) returned 0x20
	[0157.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_increaseindent.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_increaseindent.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.265] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=850) returned 1
	[0157.265] CloseHandle (hObject=0x1f8) returned 1
	[0157.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif")) returned 0x20
	[0157.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif")) returned 0x20
	[0157.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_justify.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_justify.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.266] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=883) returned 1
	[0157.266] CloseHandle (hObject=0x1f8) returned 1
	[0157.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif")) returned 0x20
	[0157.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif")) returned 0x20
	[0157.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\rtf_pressed.gif" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\rtf_pressed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.267] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=621) returned 1
	[0157.267] CloseHandle (hObject=0x1f8) returned 1
	[0157.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif")) returned 0x20
	[0157.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif")) returned 0x20
	[0157.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SAVE.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\save.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.268] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=86370) returned 1
	[0157.268] CloseHandle (hObject=0x1f8) returned 1
	[0157.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js")) returned 0x20
	[0157.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js")) returned 0x20
	[0157.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\SUBMIT.JS" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\submit.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.269] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61415) returned 1
	[0157.269] CloseHandle (hObject=0x1f8) returned 1
	[0157.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js")) returned 0x20
	[0157.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js")) returned 0x20
	[0157.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\utilityfunctions.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\utilityfunctions.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.270] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30122) returned 1
	[0157.270] CloseHandle (hObject=0x1f8) returned 1
	[0157.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js")) returned 0x20
	[0157.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js")) returned 0x20
	[0157.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\validation.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\validation.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.271] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5131) returned 1
	[0157.271] CloseHandle (hObject=0x1f8) returned 1
	[0157.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg")) returned 0x20
	[0157.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg")) returned 0x20
	[0157.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.272] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3958) returned 1
	[0157.272] CloseHandle (hObject=0x1f8) returned 1
	[0157.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp")) returned 0x20
	[0157.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp")) returned 0x20
	[0157.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.273] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13005) returned 1
	[0157.273] CloseHandle (hObject=0x1f8) returned 1
	[0157.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg")) returned 0x20
	[0157.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg")) returned 0x20
	[0157.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.274] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4428) returned 1
	[0157.274] CloseHandle (hObject=0x1f8) returned 1
	[0157.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp")) returned 0x20
	[0157.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp")) returned 0x20
	[0157.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.275] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9914) returned 1
	[0157.275] CloseHandle (hObject=0x1f8) returned 1
	[0157.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg")) returned 0x20
	[0157.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg")) returned 0x20
	[0157.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0157.276] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1720) returned 1
	[0157.276] CloseHandle (hObject=0x1f8) returned 1
	[0157.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp")) returned 0x20
	[0157.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp")) returned 0x20
	[0157.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.278] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6633) returned 1
	[0157.278] CloseHandle (hObject=0x168) returned 1
	[0157.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg")) returned 0x20
	[0157.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg")) returned 0x20
	[0157.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.279] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2576) returned 1
	[0157.279] CloseHandle (hObject=0x168) returned 1
	[0157.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp")) returned 0x20
	[0157.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp")) returned 0x20
	[0157.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.280] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8206) returned 1
	[0157.280] CloseHandle (hObject=0x168) returned 1
	[0157.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg")) returned 0x20
	[0157.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg")) returned 0x20
	[0157.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.281] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1948) returned 1
	[0157.281] CloseHandle (hObject=0x168) returned 1
	[0157.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp")) returned 0x20
	[0157.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp")) returned 0x20
	[0157.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic\\default.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.282] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3309) returned 1
	[0157.282] CloseHandle (hObject=0x168) returned 1
	[0157.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic\\default.xsl")) returned 0x20
	[0157.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic\\default.xsl")) returned 0x20
	[0157.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic\\default.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\DEFAULT.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\basic\\default.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.284] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5829) returned 1
	[0157.284] CloseHandle (hObject=0x168) returned 1
	[0157.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js")) returned 0x20
	[0157.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js")) returned 0x20
	[0157.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.js" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.285] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5502) returned 1
	[0157.285] CloseHandle (hObject=0x168) returned 1
	[0157.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.xsl")) returned 0x20
	[0157.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.xsl")) returned 0x20
	[0157.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\Hierarchy.xsl" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\hierarchy.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.286] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=837) returned 1
	[0157.286] CloseHandle (hObject=0x168) returned 1
	[0157.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif")) returned 0x20
	[0157.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif")) returned 0x20
	[0157.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\MINUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\minus.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.287] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=841) returned 1
	[0157.287] CloseHandle (hObject=0x168) returned 1
	[0157.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif")) returned 0x20
	[0157.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif")) returned 0x20
	[0157.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\PLUS.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\plus.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.288] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=807) returned 1
	[0157.288] CloseHandle (hObject=0x168) returned 1
	[0157.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif")) returned 0x20
	[0157.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif")) returned 0x20
	[0157.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\SPACER.GIF" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttool\\project report type\\fancy\\spacer.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.289] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20234) returned 1
	[0157.289] CloseHandle (hObject=0x168) returned 1
	[0157.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg")) returned 0x20
	[0157.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg")) returned 0x20
	[0157.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.290] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9016) returned 1
	[0157.290] CloseHandle (hObject=0x168) returned 1
	[0157.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp")) returned 0x20
	[0157.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp")) returned 0x20
	[0157.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.290] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24320) returned 1
	[0157.291] CloseHandle (hObject=0x168) returned 1
	[0157.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg")) returned 0x20
	[0157.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg")) returned 0x20
	[0157.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.291] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=82040) returned 1
	[0157.291] CloseHandle (hObject=0x168) returned 1
	[0157.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp")) returned 0x20
	[0157.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp")) returned 0x20
	[0157.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.292] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=290) returned 1
	[0157.292] CloseHandle (hObject=0x168) returned 1
	[0157.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp")) returned 0x20
	[0157.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp")) returned 0x20
	[0157.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABMASK.BMP" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.293] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2486) returned 1
	[0157.293] CloseHandle (hObject=0x168) returned 1
	[0157.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg")) returned 0x20
	[0157.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg")) returned 0x20
	[0157.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABOFF.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\taboff.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.294] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2543) returned 1
	[0157.294] CloseHandle (hObject=0x168) returned 1
	[0157.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg")) returned 0x20
	[0157.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg")) returned 0x20
	[0157.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\TABON.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\tabon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.295] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3583) returned 1
	[0157.295] CloseHandle (hObject=0x168) returned 1
	[0157.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg")) returned 0x20
	[0157.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg")) returned 0x20
	[0157.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WHITEBOX.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whitebox.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.296] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19826) returned 1
	[0157.296] CloseHandle (hObject=0x168) returned 1
	[0157.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp")) returned 0x20
	[0157.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp")) returned 0x20
	[0157.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.297] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3161) returned 1
	[0157.297] CloseHandle (hObject=0x168) returned 1
	[0157.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg")) returned 0x20
	[0157.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg")) returned 0x20
	[0157.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.298] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1592) returned 1
	[0157.298] CloseHandle (hObject=0x168) returned 1
	[0157.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp")) returned 0x20
	[0157.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp")) returned 0x20
	[0157.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.299] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4339) returned 1
	[0157.299] CloseHandle (hObject=0x168) returned 1
	[0157.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg")) returned 0x20
	[0157.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg")) returned 0x20
	[0157.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.300] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2616) returned 1
	[0157.300] CloseHandle (hObject=0x168) returned 1
	[0157.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp")) returned 0x20
	[0157.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp")) returned 0x20
	[0157.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ALERT.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\alert.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.396] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2606) returned 1
	[0157.396] CloseHandle (hObject=0x168) returned 1
	[0157.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ALERT.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\alert.ico")) returned 0x20
	[0157.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ALERT.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\alert.ico")) returned 0x20
	[0157.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ALERT.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\alert.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ALERT.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\alert.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\gfserrortogroove.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gfserrortogroove.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0157.401] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1718) returned 1
	[0157.401] CloseHandle (hObject=0x204) returned 1
	[0157.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\gfserrortogroove.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gfserrortogroove.ico")) returned 0x20
	[0157.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\gfserrortogroove.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gfserrortogroove.ico")) returned 0x20
	[0157.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\gfserrortogroove.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gfserrortogroove.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\gfserrortogroove.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gfserrortogroove.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\GWE.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gwe.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0157.402] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=169181) returned 1
	[0157.402] CloseHandle (hObject=0x204) returned 1
	[0157.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\GWE.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gwe.ico")) returned 0x20
	[0157.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\GWE.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gwe.ico")) returned 0x20
	[0157.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\GWE.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gwe.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\GWE.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\gwe.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\INCOMING.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\incoming.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0157.403] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1718) returned 1
	[0157.403] CloseHandle (hObject=0x204) returned 1
	[0157.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\INCOMING.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\incoming.ico")) returned 0x20
	[0157.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\INCOMING.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\incoming.ico")) returned 0x20
	[0157.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\INCOMING.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\incoming.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\INCOMING.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\incoming.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\INDOMAIN.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\indomain.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0157.404] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=318) returned 1
	[0157.404] CloseHandle (hObject=0x204) returned 1
	[0157.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\INDOMAIN.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\indomain.ico")) returned 0x20
	[0157.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\INDOMAIN.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\indomain.ico")) returned 0x20
	[0157.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\INDOMAIN.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\indomain.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\INDOMAIN.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\indomain.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\MAIL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\mail.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0157.405] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2606) returned 1
	[0157.405] CloseHandle (hObject=0x204) returned 1
	[0157.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\MAIL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\mail.ico")) returned 0x20
	[0157.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\MAIL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\mail.ico")) returned 0x20
	[0157.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\MAIL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\mail.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\MAIL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\mail.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\MANUAL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\manual.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0157.406] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=318) returned 1
	[0157.406] CloseHandle (hObject=0x204) returned 1
	[0157.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\MANUAL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\manual.ico")) returned 0x20
	[0157.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\MANUAL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\manual.ico")) returned 0x20
	[0157.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\MANUAL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\manual.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\MANUAL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\manual.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxalert.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxalert.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0157.408] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2862) returned 1
	[0157.408] CloseHandle (hObject=0x204) returned 1
	[0157.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxalert.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxalert.ico")) returned 0x20
	[0157.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxalert.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxalert.ico")) returned 0x20
	[0157.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxalert.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxalert.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxalert.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxalert.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxerror.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxerror.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0157.409] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2862) returned 1
	[0157.409] CloseHandle (hObject=0x204) returned 1
	[0157.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxerror.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxerror.ico")) returned 0x20
	[0157.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxerror.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxerror.ico")) returned 0x20
	[0157.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxerror.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxerror.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxerror.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxerror.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxinfo.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxinfo.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0157.410] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2862) returned 1
	[0157.410] CloseHandle (hObject=0x204) returned 1
	[0157.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxinfo.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxinfo.ico")) returned 0x20
	[0157.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxinfo.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxinfo.ico")) returned 0x20
	[0157.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxinfo.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxinfo.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\messageboxinfo.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\messageboxinfo.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ModifiedTelespace.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\modifiedtelespace.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0157.411] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2550) returned 1
	[0157.411] CloseHandle (hObject=0x204) returned 1
	[0157.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ModifiedTelespace.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\modifiedtelespace.ico")) returned 0x20
	[0157.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ModifiedTelespace.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\modifiedtelespace.ico")) returned 0x20
	[0157.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ModifiedTelespace.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\modifiedtelespace.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ModifiedTelespace.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\modifiedtelespace.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OFFLINE.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\offline.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0157.412] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3438) returned 1
	[0157.412] CloseHandle (hObject=0x204) returned 1
	[0157.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OFFLINE.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\offline.ico")) returned 0x20
	[0157.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OFFLINE.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\offline.ico")) returned 0x20
	[0157.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OFFLINE.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\offline.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OFFLINE.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\offline.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ONLINE.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\online.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0157.418] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3438) returned 1
	[0157.418] CloseHandle (hObject=0x204) returned 1
	[0157.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ONLINE.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\online.ico")) returned 0x20
	[0157.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ONLINE.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\online.ico")) returned 0x20
	[0157.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ONLINE.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\online.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\ONLINE.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\online.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OnLineBusy.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\onlinebusy.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.445] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3438) returned 1
	[0157.445] CloseHandle (hObject=0x168) returned 1
	[0157.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OnLineBusy.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\onlinebusy.ico")) returned 0x20
	[0157.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OnLineBusy.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\onlinebusy.ico")) returned 0x20
	[0157.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OnLineBusy.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\onlinebusy.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\OnLineBusy.ico" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolicons\\onlinebusy.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\grvschema.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.492] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1493) returned 1
	[0157.492] CloseHandle (hObject=0x168) returned 1
	[0157.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\grvschema.xsd")) returned 0x20
	[0157.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\grvschema.xsd")) returned 0x20
	[0157.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\grvschema.xsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\grvschema.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\grvschema.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.492] SetEvent (hEvent=0xfc) returned 1
	[0157.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.493] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=330) returned 1
	[0157.493] CloseHandle (hObject=0x168) returned 1
	[0157.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml")) returned 0x20
	[0157.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml")) returned 0x20
	[0157.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.494] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=97837) returned 1
	[0157.494] CloseHandle (hObject=0x168) returned 1
	[0157.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml")) returned 0x20
	[0157.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml")) returned 0x20
	[0157.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.495] SetEvent (hEvent=0xfc) returned 1
	[0157.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.495] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=112757) returned 1
	[0157.495] CloseHandle (hObject=0x168) returned 1
	[0157.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml")) returned 0x20
	[0157.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml")) returned 0x20
	[0157.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.496] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=107859) returned 1
	[0157.496] CloseHandle (hObject=0x168) returned 1
	[0157.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml")) returned 0x20
	[0157.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml")) returned 0x20
	[0157.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\groove.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.497] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51456888) returned 1
	[0157.497] CloseHandle (hObject=0x168) returned 1
	[0157.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\groove.exe")) returned 0x20
	[0157.498] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\groove.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0157.498] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groove.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\groove.exe")) returned 0
	[0157.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVEEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\grooveex.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.498] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6722448) returned 1
	[0157.498] CloseHandle (hObject=0x168) returned 1
	[0157.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVEEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\grooveex.dll")) returned 0x20
	[0157.498] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVEEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\grooveex.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVEEX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\grooveex.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0157.499] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVEEX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\grooveex.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVEEX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\grooveex.dll")) returned 0
	[0157.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVEMN.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\groovemn.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.501] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1371528) returned 1
	[0157.501] CloseHandle (hObject=0x168) returned 1
	[0157.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVEMN.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\groovemn.exe")) returned 0x20
	[0157.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVEMN.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\groovemn.exe")) returned 0x20
	[0157.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVEMN.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\groovemn.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\GROOVEMN.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\groovemn.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\HVAC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\hvac.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.502] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=596840) returned 1
	[0157.502] CloseHandle (hObject=0x168) returned 1
	[0157.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\HVAC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\hvac.dll")) returned 0x20
	[0157.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\HVAC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\hvac.dll")) returned 0x20
	[0157.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\HVAC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\hvac.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\HVAC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\hvac.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IEAWSDC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ieawsdc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.503] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=242528) returned 1
	[0157.503] CloseHandle (hObject=0x168) returned 1
	[0157.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IEAWSDC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ieawsdc.dll")) returned 0x20
	[0157.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IEAWSDC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ieawsdc.dll")) returned 0x20
	[0157.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IEAWSDC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ieawsdc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IEAWSDC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ieawsdc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\office14\\iecontentservice.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.504] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=725928) returned 1
	[0157.504] CloseHandle (hObject=0x168) returned 1
	[0157.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\office14\\iecontentservice.exe")) returned 0x20
	[0157.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\office14\\iecontentservice.exe")) returned 0x20
	[0157.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IEContentService.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\iecontentservice.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\office14\\iecontentservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMCOMMON.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imcommon.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.505] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=680336) returned 1
	[0157.505] CloseHandle (hObject=0x168) returned 1
	[0157.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMCOMMON.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imcommon.dll")) returned 0x20
	[0157.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMCOMMON.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imcommon.dll")) returned 0x20
	[0157.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMCOMMON.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\imcommon.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMCOMMON.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imcommon.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\imdimp.add"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.506] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29640) returned 1
	[0157.506] CloseHandle (hObject=0x168) returned 1
	[0157.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\imdimp.add")) returned 0x20
	[0157.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\imdimp.add")) returned 0x20
	[0157.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\imdimp.add.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMDIMP.ADD" (normalized: "c:\\program files\\microsoft office\\office14\\imdimp.add"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMPMAIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\impmail.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.507] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=184680) returned 1
	[0157.507] CloseHandle (hObject=0x168) returned 1
	[0157.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMPMAIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\impmail.dll")) returned 0x20
	[0157.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMPMAIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\impmail.dll")) returned 0x20
	[0157.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMPMAIL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\impmail.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMPMAIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\impmail.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMUTIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imutil.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.509] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=192896) returned 1
	[0157.509] CloseHandle (hObject=0x168) returned 1
	[0157.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMUTIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imutil.dll")) returned 0x20
	[0157.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMUTIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imutil.dll")) returned 0x20
	[0157.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMUTIL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\imutil.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMUTIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imutil.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMWDD.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imwdd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.510] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=230280) returned 1
	[0157.510] CloseHandle (hObject=0x168) returned 1
	[0157.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMWDD.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imwdd.dll")) returned 0x20
	[0157.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMWDD.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imwdd.dll")) returned 0x20
	[0157.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMWDD.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\imwdd.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMWDD.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imwdd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imwiz.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.512] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16272) returned 1
	[0157.512] CloseHandle (hObject=0x168) returned 1
	[0157.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imwiz.dll")) returned 0x20
	[0157.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imwiz.dll")) returned 0x20
	[0157.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMWIZ.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\imwiz.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IMWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\imwiz.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INFOPATH.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\infopath.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.513] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2578288) returned 1
	[0157.513] CloseHandle (hObject=0x168) returned 1
	[0157.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INFOPATH.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\infopath.exe")) returned 0x20
	[0157.513] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INFOPATH.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\infopath.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INFOPATH.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\infopath.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0157.513] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INFOPATH.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\infopath.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INFOPATH.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\infopath.exe")) returned 0
	[0157.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.515] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42864) returned 1
	[0157.515] CloseHandle (hObject=0x168) returned 1
	[0157.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.dll")) returned 0x20
	[0157.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.dll")) returned 0x20
	[0157.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.Infopath.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.515] SetEvent (hEvent=0xfc) returned 1
	[0157.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.516] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=253407) returned 1
	[0157.516] CloseHandle (hObject=0x168) returned 1
	[0157.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml")) returned 0x20
	[0157.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml")) returned 0x20
	[0157.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.517] SetEvent (hEvent=0xfc) returned 1
	[0157.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.517] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46960) returned 1
	[0157.517] CloseHandle (hObject=0x168) returned 1
	[0157.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.dll")) returned 0x20
	[0157.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.dll")) returned 0x20
	[0157.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.Infopath.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.518] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=253407) returned 1
	[0157.518] CloseHandle (hObject=0x168) returned 1
	[0157.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml")) returned 0x20
	[0157.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml")) returned 0x20
	[0157.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.519] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=55152) returned 1
	[0157.519] CloseHandle (hObject=0x168) returned 1
	[0157.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.dll")) returned 0x20
	[0157.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.dll")) returned 0x20
	[0157.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.Infopath.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.521] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=253407) returned 1
	[0157.521] CloseHandle (hObject=0x168) returned 1
	[0157.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml")) returned 0x20
	[0157.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml")) returned 0x20
	[0157.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.521] SetEvent (hEvent=0xfc) returned 1
	[0157.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.522] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=59248) returned 1
	[0157.522] CloseHandle (hObject=0x168) returned 1
	[0157.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.dll")) returned 0x20
	[0157.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.dll")) returned 0x20
	[0157.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.Infopath.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.Infopath.dll" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.523] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=253407) returned 1
	[0157.523] CloseHandle (hObject=0x168) returned 1
	[0157.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml")) returned 0x20
	[0157.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml")) returned 0x20
	[0157.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INLAUNCH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\inlaunch.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.524] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=506744) returned 1
	[0157.524] CloseHandle (hObject=0x168) returned 1
	[0157.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INLAUNCH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\inlaunch.dll")) returned 0x20
	[0157.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INLAUNCH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\inlaunch.dll")) returned 0x20
	[0157.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INLAUNCH.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\inlaunch.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INLAUNCH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\inlaunch.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.525] SetEvent (hEvent=0xfc) returned 1
	[0157.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_resources14.xss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.525] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29016064) returned 1
	[0157.525] CloseHandle (hObject=0x168) returned 1
	[0157.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_resources14.xss")) returned 0x20
	[0157.525] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_resources14.xss"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\installed_resources14.xss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0157.526] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\installed_resources14.xss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Installed_resources14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_resources14.xss")) returned 0
	[0157.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_schemas14.xss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.526] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=544768) returned 1
	[0157.526] CloseHandle (hObject=0x168) returned 1
	[0157.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_schemas14.xss")) returned 0x20
	[0157.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_schemas14.xss")) returned 0x20
	[0157.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\installed_schemas14.xss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Installed_schemas14.xss" (normalized: "c:\\program files\\microsoft office\\office14\\installed_schemas14.xss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INTLDATE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\intldate.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.527] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=95104) returned 1
	[0157.527] CloseHandle (hObject=0x168) returned 1
	[0157.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INTLDATE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\intldate.dll")) returned 0x20
	[0157.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INTLDATE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\intldate.dll")) returned 0x20
	[0157.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INTLDATE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\intldate.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\INTLDATE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\intldate.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.529] SetEvent (hEvent=0xfc) returned 1
	[0157.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPDESIGN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ipdesign.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.529] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10007928) returned 1
	[0157.529] CloseHandle (hObject=0x168) returned 1
	[0157.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPDESIGN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ipdesign.dll")) returned 0x20
	[0157.529] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPDESIGN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ipdesign.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPDESIGN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ipdesign.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0157.529] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPDESIGN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ipdesign.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPDESIGN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ipdesign.dll")) returned 0
	[0157.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPEDITOR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ipeditor.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.531] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9063792) returned 1
	[0157.531] CloseHandle (hObject=0x168) returned 1
	[0157.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPEDITOR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ipeditor.dll")) returned 0x20
	[0157.531] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPEDITOR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ipeditor.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPEDITOR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ipeditor.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0157.531] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPEDITOR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ipeditor.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPEDITOR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ipeditor.dll")) returned 0
	[0157.531] SetEvent (hEvent=0xfc) returned 1
	[0157.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.532] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79708) returned 1
	[0157.532] CloseHandle (hObject=0x168) returned 1
	[0157.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml")) returned 0x20
	[0157.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml")) returned 0x20
	[0157.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.533] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79268) returned 1
	[0157.533] CloseHandle (hObject=0x168) returned 1
	[0157.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml")) returned 0x20
	[0157.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml")) returned 0x20
	[0157.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\ipirmv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.533] SetEvent (hEvent=0xfc) returned 1
	[0157.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPOLK.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ipolk.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.534] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=235912) returned 1
	[0157.534] CloseHandle (hObject=0x168) returned 1
	[0157.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPOLK.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ipolk.dll")) returned 0x20
	[0157.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPOLK.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ipolk.dll")) returned 0x20
	[0157.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPOLK.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ipolk.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IPOLK.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ipolk.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixacs.pdl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.536] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=348576) returned 1
	[0157.536] CloseHandle (hObject=0x168) returned 1
	[0157.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixacs.pdl")) returned 0x20
	[0157.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixacs.pdl")) returned 0x20
	[0157.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ixacs.pdl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXACS.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixacs.pdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixdb2.pdl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.537] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=213384) returned 1
	[0157.537] CloseHandle (hObject=0x168) returned 1
	[0157.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixdb2.pdl")) returned 0x20
	[0157.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixdb2.pdl")) returned 0x20
	[0157.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ixdb2.pdl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXDB2.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixdb2.pdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixgenerc.pdl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.538] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=93616) returned 1
	[0157.538] CloseHandle (hObject=0x168) returned 1
	[0157.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixgenerc.pdl")) returned 0x20
	[0157.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixgenerc.pdl")) returned 0x20
	[0157.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ixgenerc.pdl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXGENERC.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixgenerc.pdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoledb.pdl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.539] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=175520) returned 1
	[0157.539] CloseHandle (hObject=0x168) returned 1
	[0157.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoledb.pdl")) returned 0x20
	[0157.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoledb.pdl")) returned 0x20
	[0157.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ixoledb.pdl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXOLEDB.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoledb.pdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoracle.pdl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.540] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=409504) returned 1
	[0157.540] CloseHandle (hObject=0x168) returned 1
	[0157.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoracle.pdl")) returned 0x20
	[0157.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoracle.pdl")) returned 0x20
	[0157.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ixoracle.pdl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXORACLE.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixoracle.pdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixssrv.pdl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.542] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=196008) returned 1
	[0157.542] CloseHandle (hObject=0x168) returned 1
	[0157.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixssrv.pdl")) returned 0x20
	[0157.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixssrv.pdl")) returned 0x20
	[0157.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ixssrv.pdl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXSSRV.PDL" (normalized: "c:\\program files\\microsoft office\\office14\\ixssrv.pdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.542] SetEvent (hEvent=0xfc) returned 1
	[0157.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXUTIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ixutil.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.543] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=318336) returned 1
	[0157.543] CloseHandle (hObject=0x168) returned 1
	[0157.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXUTIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ixutil.dll")) returned 0x20
	[0157.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXUTIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ixutil.dll")) returned 0x20
	[0157.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXUTIL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ixutil.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\IXUTIL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ixutil.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.544] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18844) returned 1
	[0157.544] CloseHandle (hObject=0x168) returned 1
	[0157.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat")) returned 0x20
	[0157.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat")) returned 0x20
	[0157.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\JFONT.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\jfont.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.545] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=564846) returned 1
	[0157.545] CloseHandle (hObject=0x168) returned 1
	[0157.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp")) returned 0x20
	[0157.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp")) returned 0x20
	[0157.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LATIN1.SHP" (normalized: "c:\\program files\\microsoft office\\office14\\latin1.shp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LGND.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\lgnd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.546] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=697712) returned 1
	[0157.546] CloseHandle (hObject=0x168) returned 1
	[0157.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LGND.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\lgnd.dll")) returned 0x20
	[0157.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LGND.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\lgnd.dll")) returned 0x20
	[0157.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LGND.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\lgnd.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LGND.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\lgnd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.547] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=244576) returned 1
	[0157.547] CloseHandle (hObject=0x168) returned 1
	[0157.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll")) returned 0x20
	[0157.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll")) returned 0x20
	[0157.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\analys32.xll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.548] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=57543) returned 1
	[0157.548] CloseHandle (hObject=0x168) returned 1
	[0157.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam")) returned 0x20
	[0157.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam")) returned 0x20
	[0157.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\atpvbaen.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.549] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27490) returned 1
	[0157.550] CloseHandle (hObject=0x168) returned 1
	[0157.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam")) returned 0x20
	[0157.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam")) returned 0x20
	[0157.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\funcres.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.550] SetEvent (hEvent=0xfc) returned 1
	[0157.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.550] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53035) returned 1
	[0157.551] CloseHandle (hObject=0x168) returned 1
	[0157.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam")) returned 0x20
	[0157.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam")) returned 0x20
	[0157.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\analysis\\procdb.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.551] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=403080) returned 1
	[0157.551] CloseHandle (hObject=0x168) returned 1
	[0157.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam")) returned 0x20
	[0157.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam")) returned 0x20
	[0157.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\eurotool.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.552] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=443200) returned 1
	[0157.552] CloseHandle (hObject=0x168) returned 1
	[0157.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam")) returned 0x20
	[0157.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam")) returned 0x20
	[0157.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.553] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=221528) returned 1
	[0157.554] CloseHandle (hObject=0x168) returned 1
	[0157.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver32.dll")) returned 0x20
	[0157.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver32.dll")) returned 0x20
	[0157.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\SOLVER32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\library\\solver\\solver32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGELEMS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\logelems.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.554] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1028000) returned 1
	[0157.554] CloseHandle (hObject=0x168) returned 1
	[0157.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGELEMS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\logelems.dll")) returned 0x20
	[0157.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGELEMS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\logelems.dll")) returned 0x20
	[0157.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGELEMS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\logelems.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGELEMS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\logelems.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\logmodel.mdl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.556] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46480) returned 1
	[0157.556] CloseHandle (hObject=0x168) returned 1
	[0157.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\logmodel.mdl")) returned 0x20
	[0157.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\logmodel.mdl")) returned 0x20
	[0157.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\logmodel.mdl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGMODEL.MDL" (normalized: "c:\\program files\\microsoft office\\office14\\logmodel.mdl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.556] SetEvent (hEvent=0xfc) returned 1
	[0157.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGVIEW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\logview.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.557] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=490920) returned 1
	[0157.557] CloseHandle (hObject=0x168) returned 1
	[0157.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGVIEW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\logview.dll")) returned 0x20
	[0157.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGVIEW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\logview.dll")) returned 0x20
	[0157.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGVIEW.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\logview.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOGVIEW.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\logview.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.558] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65536) returned 1
	[0157.559] CloseHandle (hObject=0x168) returned 1
	[0157.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat")) returned 0x20
	[0157.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat")) returned 0x20
	[0157.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\LOOKUP.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\lookup.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.559] SetEvent (hEvent=0xfc) returned 1
	[0157.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MAPIPH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mapiph.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.559] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=417184) returned 1
	[0157.559] CloseHandle (hObject=0x168) returned 1
	[0157.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MAPIPH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mapiph.dll")) returned 0x20
	[0157.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MAPIPH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mapiph.dll")) returned 0x20
	[0157.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MAPIPH.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mapiph.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MAPIPH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mapiph.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MAPISHELL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mapishell.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.560] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=291792) returned 1
	[0157.560] CloseHandle (hObject=0x168) returned 1
	[0157.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MAPISHELL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mapishell.dll")) returned 0x20
	[0157.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MAPISHELL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mapishell.dll")) returned 0x20
	[0157.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MAPISHELL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mapishell.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MAPISHELL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mapishell.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MCPS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mcps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.561] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=144752) returned 1
	[0157.561] CloseHandle (hObject=0x168) returned 1
	[0157.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MCPS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mcps.dll")) returned 0x20
	[0157.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MCPS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mcps.dll")) returned 0x20
	[0157.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MCPS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mcps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MCPS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDCAT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\medcat.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.563] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1039208) returned 1
	[0157.563] CloseHandle (hObject=0x168) returned 1
	[0157.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDCAT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\medcat.dll")) returned 0x20
	[0157.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDCAT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\medcat.dll")) returned 0x20
	[0157.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDCAT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\medcat.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDCAT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\medcat.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.563] SetEvent (hEvent=0xfc) returned 1
	[0157.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.662] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28074) returned 1
	[0157.662] CloseHandle (hObject=0x168) returned 1
	[0157.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav")) returned 0x20
	[0157.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav")) returned 0x20
	[0157.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\applause.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.662] SetEvent (hEvent=0xfc) returned 1
	[0157.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.663] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=194166) returned 1
	[0157.663] CloseHandle (hObject=0x168) returned 1
	[0157.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav")) returned 0x20
	[0157.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav")) returned 0x20
	[0157.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\bomb.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.664] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4290) returned 1
	[0157.664] CloseHandle (hObject=0x168) returned 1
	[0157.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav")) returned 0x20
	[0157.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav")) returned 0x20
	[0157.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\breeze.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.665] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5524) returned 1
	[0157.665] CloseHandle (hObject=0x168) returned 1
	[0157.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav")) returned 0x20
	[0157.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav")) returned 0x20
	[0157.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\camera.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.666] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7551) returned 1
	[0157.666] CloseHandle (hObject=0x168) returned 1
	[0157.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav")) returned 0x20
	[0157.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav")) returned 0x20
	[0157.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\cashreg.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.667] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37310) returned 1
	[0157.667] CloseHandle (hObject=0x168) returned 1
	[0157.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav")) returned 0x20
	[0157.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav")) returned 0x20
	[0157.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\chimes.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.667] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=616) returned 1
	[0157.668] CloseHandle (hObject=0x168) returned 1
	[0157.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav")) returned 0x20
	[0157.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav")) returned 0x20
	[0157.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\click.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.668] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5564) returned 1
	[0157.668] CloseHandle (hObject=0x168) returned 1
	[0157.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav")) returned 0x20
	[0157.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav")) returned 0x20
	[0157.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\coin.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.669] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19426) returned 1
	[0157.669] CloseHandle (hObject=0x168) returned 1
	[0157.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav")) returned 0x20
	[0157.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav")) returned 0x20
	[0157.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\drumroll.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.670] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23584) returned 1
	[0157.670] CloseHandle (hObject=0x168) returned 1
	[0157.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav")) returned 0x20
	[0157.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav")) returned 0x20
	[0157.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\explode.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.671] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4028) returned 1
	[0157.671] CloseHandle (hObject=0x168) returned 1
	[0157.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav")) returned 0x20
	[0157.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav")) returned 0x20
	[0157.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\hammer.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.672] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1837) returned 1
	[0157.672] CloseHandle (hObject=0x168) returned 1
	[0157.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav")) returned 0x20
	[0157.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav")) returned 0x20
	[0157.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\laser.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.674] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15748) returned 1
	[0157.674] CloseHandle (hObject=0x168) returned 1
	[0157.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav")) returned 0x20
	[0157.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav")) returned 0x20
	[0157.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\push.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.675] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5732) returned 1
	[0157.675] CloseHandle (hObject=0x168) returned 1
	[0157.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav")) returned 0x20
	[0157.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav")) returned 0x20
	[0157.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\suction.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.677] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4636) returned 1
	[0157.677] CloseHandle (hObject=0x168) returned 1
	[0157.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav")) returned 0x20
	[0157.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav")) returned 0x20
	[0157.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\type.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.678] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13766) returned 1
	[0157.678] CloseHandle (hObject=0x168) returned 1
	[0157.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav")) returned 0x20
	[0157.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav")) returned 0x20
	[0157.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\voltage.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.678] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1758) returned 1
	[0157.679] CloseHandle (hObject=0x168) returned 1
	[0157.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav")) returned 0x20
	[0157.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav")) returned 0x20
	[0157.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\whoosh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.679] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11140) returned 1
	[0157.679] CloseHandle (hObject=0x168) returned 1
	[0157.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav")) returned 0x20
	[0157.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav")) returned 0x20
	[0157.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\office14\\media\\wind.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.680] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=116632) returned 1
	[0157.680] CloseHandle (hObject=0x168) returned 1
	[0157.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.dll")) returned 0x20
	[0157.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.dll")) returned 0x20
	[0157.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.681] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=370536) returned 1
	[0157.681] CloseHandle (hObject=0x168) returned 1
	[0157.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml")) returned 0x20
	[0157.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml")) returned 0x20
	[0157.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.685] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=567168) returned 1
	[0157.685] CloseHandle (hObject=0x168) returned 1
	[0157.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.dll")) returned 0x20
	[0157.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.dll")) returned 0x20
	[0157.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.686] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10588) returned 1
	[0157.686] CloseHandle (hObject=0x168) returned 1
	[0157.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml")) returned 0x20
	[0157.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml")) returned 0x20
	[0157.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.687] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=665472) returned 1
	[0157.687] CloseHandle (hObject=0x168) returned 1
	[0157.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.dll")) returned 0x20
	[0157.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.dll")) returned 0x20
	[0157.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.689] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=178) returned 1
	[0157.689] CloseHandle (hObject=0x168) returned 1
	[0157.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml")) returned 0x20
	[0157.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml")) returned 0x20
	[0157.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.689] SetEvent (hEvent=0xfc) returned 1
	[0157.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.690] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=956288) returned 1
	[0157.690] CloseHandle (hObject=0x168) returned 1
	[0157.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.dll")) returned 0x20
	[0157.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.dll")) returned 0x20
	[0157.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.691] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=210743) returned 1
	[0157.691] CloseHandle (hObject=0x168) returned 1
	[0157.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml")) returned 0x20
	[0157.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml")) returned 0x20
	[0157.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.infopath.client.internal.clrhost.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.692] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18840) returned 1
	[0157.692] CloseHandle (hObject=0x168) returned 1
	[0157.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.infopath.client.internal.clrhost.dll")) returned 0x20
	[0157.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.infopath.client.internal.clrhost.dll")) returned 0x20
	[0157.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.infopath.client.internal.clrhost.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.infopath.client.internal.clrhost.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.InfoPath.FormControl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.infopath.formcontrol.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.693] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42880) returned 1
	[0157.693] CloseHandle (hObject=0x168) returned 1
	[0157.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.InfoPath.FormControl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.infopath.formcontrol.dll")) returned 0x20
	[0157.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.InfoPath.FormControl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.infopath.formcontrol.dll")) returned 0x20
	[0157.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.InfoPath.FormControl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.infopath.formcontrol.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.InfoPath.FormControl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.infopath.formcontrol.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.696] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=407440) returned 1
	[0157.696] CloseHandle (hObject=0x168) returned 1
	[0157.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.dll")) returned 0x20
	[0157.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.dll")) returned 0x20
	[0157.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.697] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=807525) returned 1
	[0157.697] CloseHandle (hObject=0x168) returned 1
	[0157.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml")) returned 0x20
	[0157.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml")) returned 0x20
	[0157.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.698] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=87936) returned 1
	[0157.698] CloseHandle (hObject=0x168) returned 1
	[0157.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.dll")) returned 0x20
	[0157.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.dll")) returned 0x20
	[0157.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.dll" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0157.820] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=538583) returned 1
	[0157.820] CloseHandle (hObject=0x168) returned 1
	[0157.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml")) returned 0x20
	[0157.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml")) returned 0x20
	[0157.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0157.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0157.821] SetEvent (hEvent=0xfc) returned 1
	[0157.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7fr.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7fr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.139] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=480152) returned 1
	[0158.139] CloseHandle (hObject=0x140) returned 1
	[0158.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7fr.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7fr.dll")) returned 0x20
	[0158.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7fr.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7fr.dll")) returned 0x20
	[0158.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7fr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7fr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mscss7fr.dll" (normalized: "c:\\program files\\microsoft office\\office14\\mscss7fr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.139] SetEvent (hEvent=0xfc) returned 1
	[0158.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.140] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=402824) returned 1
	[0158.140] CloseHandle (hObject=0x140) returned 1
	[0158.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb")) returned 0x20
	[0158.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb")) returned 0x20
	[0158.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msppt.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.176] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=877984) returned 1
	[0158.176] CloseHandle (hObject=0x140) returned 1
	[0158.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb")) returned 0x20
	[0158.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb")) returned 0x20
	[0158.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msprj.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.176] SetEvent (hEvent=0xfc) returned 1
	[0158.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\msproof7.dll" (normalized: "c:\\program files\\microsoft office\\office14\\msproof7.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.177] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=321376) returned 1
	[0158.178] CloseHandle (hObject=0x140) returned 1
	[0158.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\msproof7.dll" (normalized: "c:\\program files\\microsoft office\\office14\\msproof7.dll")) returned 0x20
	[0158.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\msproof7.dll" (normalized: "c:\\program files\\microsoft office\\office14\\msproof7.dll")) returned 0x20
	[0158.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\msproof7.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msproof7.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\msproof7.dll" (normalized: "c:\\program files\\microsoft office\\office14\\msproof7.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.178] SetEvent (hEvent=0xfc) returned 1
	[0158.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPST32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mspst32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.179] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1663920) returned 1
	[0158.179] CloseHandle (hObject=0x140) returned 1
	[0158.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPST32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mspst32.dll")) returned 0x20
	[0158.179] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPST32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mspst32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPST32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mspst32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.179] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPST32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mspst32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPST32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mspst32.dll")) returned 0
	[0158.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.180] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14371688) returned 1
	[0158.180] CloseHandle (hObject=0x140) returned 1
	[0158.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe")) returned 0x20
	[0158.180] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.180] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe")) returned 0
	[0158.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.180] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1207) returned 1
	[0158.181] CloseHandle (hObject=0x140) returned 1
	[0158.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.manifest")) returned 0x20
	[0158.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.manifest")) returned 0x20
	[0158.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\mspub.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.182] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=261928) returned 1
	[0158.182] CloseHandle (hObject=0x140) returned 1
	[0158.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.tlb")) returned 0x20
	[0158.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.tlb")) returned 0x20
	[0158.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\office14\\mspub.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSQRY32.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msqry32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.183] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=856416) returned 1
	[0158.183] CloseHandle (hObject=0x140) returned 1
	[0158.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSQRY32.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msqry32.exe")) returned 0x20
	[0158.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSQRY32.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msqry32.exe")) returned 0x20
	[0158.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSQRY32.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msqry32.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSQRY32.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\msqry32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSRTEDIT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msrtedit.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.183] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=124240) returned 1
	[0158.184] CloseHandle (hObject=0x140) returned 1
	[0158.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSRTEDIT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msrtedit.dll")) returned 0x20
	[0158.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSRTEDIT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msrtedit.dll")) returned 0x20
	[0158.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSRTEDIT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msrtedit.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSRTEDIT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msrtedit.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORDB.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\mstordb.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.185] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1045352) returned 1
	[0158.185] CloseHandle (hObject=0x140) returned 1
	[0158.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORDB.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\mstordb.exe")) returned 0x20
	[0158.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORDB.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\mstordb.exe")) returned 0x20
	[0158.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORDB.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mstordb.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORDB.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\mstordb.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORE.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\mstore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.186] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131416) returned 1
	[0158.186] CloseHandle (hObject=0x140) returned 1
	[0158.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORE.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\mstore.exe")) returned 0x20
	[0158.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORE.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\mstore.exe")) returned 0x20
	[0158.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORE.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mstore.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORE.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\mstore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mstores.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.187] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=564056) returned 1
	[0158.187] CloseHandle (hObject=0x140) returned 1
	[0158.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mstores.dll")) returned 0x20
	[0158.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mstores.dll")) returned 0x20
	[0158.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mstores.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSTORES.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\mstores.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.188] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=901464) returned 1
	[0158.188] CloseHandle (hObject=0x140) returned 1
	[0158.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb")) returned 0x20
	[0158.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb")) returned 0x20
	[0158.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\office14\\msword.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.189] SetEvent (hEvent=0xfc) returned 1
	[0158.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSYUBIN7.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msyubin7.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.190] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=288048) returned 1
	[0158.190] CloseHandle (hObject=0x140) returned 1
	[0158.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSYUBIN7.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msyubin7.dll")) returned 0x20
	[0158.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSYUBIN7.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msyubin7.dll")) returned 0x20
	[0158.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSYUBIN7.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\msyubin7.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MSYUBIN7.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\msyubin7.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.190] SetEvent (hEvent=0xfc) returned 1
	[0158.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\mysl.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.191] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5430) returned 1
	[0158.191] CloseHandle (hObject=0x140) returned 1
	[0158.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\mysl.ico")) returned 0x20
	[0158.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\mysl.ico")) returned 0x20
	[0158.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MYSL.ICO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\mysl.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\office14\\mysl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAME.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\name.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.192] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113000) returned 1
	[0158.192] CloseHandle (hObject=0x140) returned 1
	[0158.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAME.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\name.dll")) returned 0x20
	[0158.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAME.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\name.dll")) returned 0x20
	[0158.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAME.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\name.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAME.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\name.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMECONTROLPROXY.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\namecontrolproxy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.193] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18304) returned 1
	[0158.193] CloseHandle (hObject=0x140) returned 1
	[0158.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMECONTROLPROXY.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\namecontrolproxy.dll")) returned 0x20
	[0158.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMECONTROLPROXY.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\namecontrolproxy.dll")) returned 0x20
	[0158.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMECONTROLPROXY.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\namecontrolproxy.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMECONTROLPROXY.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\namecontrolproxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMECONTROLSERVER.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\namecontrolserver.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.194] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=109440) returned 1
	[0158.194] CloseHandle (hObject=0x140) returned 1
	[0158.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMECONTROLSERVER.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\namecontrolserver.exe")) returned 0x20
	[0158.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMECONTROLSERVER.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\namecontrolserver.exe")) returned 0x20
	[0158.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMECONTROLSERVER.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\namecontrolserver.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMECONTROLSERVER.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\namecontrolserver.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMEEXT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nameext.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.196] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=156032) returned 1
	[0158.196] CloseHandle (hObject=0x140) returned 1
	[0158.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMEEXT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nameext.dll")) returned 0x20
	[0158.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMEEXT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nameext.dll")) returned 0x20
	[0158.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMEEXT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nameext.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NAMEEXT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nameext.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.196] SetEvent (hEvent=0xfc) returned 1
	[0158.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Data0011.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nl7data0011.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.197] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7851440) returned 1
	[0158.197] CloseHandle (hObject=0x140) returned 1
	[0158.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Data0011.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nl7data0011.dll")) returned 0x20
	[0158.197] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Data0011.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nl7data0011.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Data0011.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nl7data0011.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.197] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Data0011.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nl7data0011.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Data0011.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nl7data0011.dll")) returned 0
	[0158.198] SetEvent (hEvent=0xfc) returned 1
	[0158.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Lexicons0011.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nl7lexicons0011.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.198] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2460592) returned 1
	[0158.198] CloseHandle (hObject=0x140) returned 1
	[0158.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Lexicons0011.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nl7lexicons0011.dll")) returned 0x20
	[0158.198] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Lexicons0011.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nl7lexicons0011.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Lexicons0011.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nl7lexicons0011.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.198] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Lexicons0011.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nl7lexicons0011.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Lexicons0011.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nl7lexicons0011.dll")) returned 0
	[0158.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS0009.dll" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models0009.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.199] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5807024) returned 1
	[0158.199] CloseHandle (hObject=0x140) returned 1
	[0158.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS0009.dll" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models0009.dll")) returned 0x20
	[0158.199] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS0009.dll" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models0009.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS0009.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models0009.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.199] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS0009.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models0009.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS0009.dll" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models0009.dll")) returned 0
	[0158.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS000A.dll" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models000a.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.204] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6222768) returned 1
	[0158.204] CloseHandle (hObject=0x140) returned 1
	[0158.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS000A.dll" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models000a.dll")) returned 0x20
	[0158.205] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS000A.dll" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models000a.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS000A.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models000a.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.205] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS000A.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models000a.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS000A.dll" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models000a.dll")) returned 0
	[0158.205] SetEvent (hEvent=0xfc) returned 1
	[0158.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS000C.dll" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models000c.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.205] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5674928) returned 1
	[0158.205] CloseHandle (hObject=0x140) returned 1
	[0158.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS000C.dll" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models000c.dll")) returned 0x20
	[0158.206] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS000C.dll" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models000c.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS000C.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models000c.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.206] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS000C.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models000c.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7MODELS000C.dll" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models000c.dll")) returned 0
	[0158.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Models0011.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models0011.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.206] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6630320) returned 1
	[0158.206] CloseHandle (hObject=0x140) returned 1
	[0158.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Models0011.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models0011.dll")) returned 0x20
	[0158.207] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Models0011.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models0011.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Models0011.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models0011.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.207] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Models0011.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models0011.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NL7Models0011.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\nl7models0011.dll")) returned 0
	[0158.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NPAUTHZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\npauthz.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.207] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18336) returned 1
	[0158.207] CloseHandle (hObject=0x140) returned 1
	[0158.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NPAUTHZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\npauthz.dll")) returned 0x20
	[0158.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NPAUTHZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\npauthz.dll")) returned 0x20
	[0158.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NPAUTHZ.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\npauthz.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\NPAUTHZ.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\npauthz.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OART.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oart.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.209] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30323048) returned 1
	[0158.209] CloseHandle (hObject=0x140) returned 1
	[0158.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OART.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oart.dll")) returned 0x20
	[0158.209] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OART.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oart.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OART.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\oart.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.209] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OART.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\oart.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OART.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oart.dll")) returned 0
	[0158.209] SetEvent (hEvent=0xfc) returned 1
	[0158.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OARTCONV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oartconv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.210] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19196280) returned 1
	[0158.210] CloseHandle (hObject=0x140) returned 1
	[0158.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OARTCONV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oartconv.dll")) returned 0x20
	[0158.210] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OARTCONV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oartconv.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OARTCONV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\oartconv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.210] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OARTCONV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\oartconv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OARTCONV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oartconv.dll")) returned 0
	[0158.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.211] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53260) returned 1
	[0158.211] CloseHandle (hObject=0x140) returned 1
	[0158.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat")) returned 0x20
	[0158.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat")) returned 0x20
	[0158.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OCRHC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrhc.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.212] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40972) returned 1
	[0158.212] CloseHandle (hObject=0x140) returned 1
	[0158.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat")) returned 0x20
	[0158.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat")) returned 0x20
	[0158.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OCRVC.DAT" (normalized: "c:\\program files\\microsoft office\\office14\\ocrvc.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.213] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7321) returned 1
	[0158.213] CloseHandle (hObject=0x140) returned 1
	[0158.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat")) returned 0x20
	[0158.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat")) returned 0x20
	[0158.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OEMPRINT.CAT" (normalized: "c:\\program files\\microsoft office\\office14\\oemprint.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFOWC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\offowc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.395] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9835392) returned 1
	[0158.395] CloseHandle (hObject=0x1f8) returned 1
	[0158.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFOWC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\offowc.dll")) returned 0x20
	[0158.395] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFOWC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\offowc.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFOWC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\offowc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.395] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFOWC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\offowc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFOWC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\offowc.dll")) returned 0
	[0158.396] SetEvent (hEvent=0xfc) returned 1
	[0158.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFRHD.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\offrhd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.397] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=74720) returned 1
	[0158.397] CloseHandle (hObject=0x1f8) returned 1
	[0158.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFRHD.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\offrhd.dll")) returned 0x20
	[0158.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFRHD.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\offrhd.dll")) returned 0x20
	[0158.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFRHD.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\offrhd.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFRHD.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\offrhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.397] SetEvent (hEvent=0xfc) returned 1
	[0158.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFXML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\offxml.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0158.538] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=513912) returned 1
	[0158.538] CloseHandle (hObject=0x1b8) returned 1
	[0158.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFXML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\offxml.dll")) returned 0x20
	[0158.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFXML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\offxml.dll")) returned 0x20
	[0158.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFXML.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\offxml.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OFFXML.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\offxml.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.539] SetEvent (hEvent=0xfc) returned 1
	[0158.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OIS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\ois.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0158.539] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=299368) returned 1
	[0158.539] CloseHandle (hObject=0x1b8) returned 1
	[0158.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OIS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\ois.exe")) returned 0x20
	[0158.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OIS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\ois.exe")) returned 0x20
	[0158.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OIS.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ois.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OIS.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\ois.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OISAPP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oisapp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.544] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1530224) returned 1
	[0158.544] CloseHandle (hObject=0x140) returned 1
	[0158.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OISAPP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oisapp.dll")) returned 0x20
	[0158.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OISAPP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oisapp.dll")) returned 0x20
	[0158.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OISAPP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\oisapp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OISAPP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oisapp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.544] SetEvent (hEvent=0xfc) returned 1
	[0158.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\oisctrl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\oisctrl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.545] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27016) returned 1
	[0158.545] CloseHandle (hObject=0x140) returned 1
	[0158.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\oisctrl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\oisctrl.dll")) returned 0x20
	[0158.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\oisctrl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\oisctrl.dll")) returned 0x20
	[0158.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\oisctrl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\oisctrl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\oisctrl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\oisctrl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OISGRAPH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oisgraph.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.546] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=368504) returned 1
	[0158.547] CloseHandle (hObject=0x140) returned 1
	[0158.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OISGRAPH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oisgraph.dll")) returned 0x20
	[0158.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OISGRAPH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oisgraph.dll")) returned 0x20
	[0158.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OISGRAPH.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\oisgraph.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OISGRAPH.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\oisgraph.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.547] SetEvent (hEvent=0xfc) returned 1
	[0158.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKFSTUB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\olkfstub.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.548] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=259456) returned 1
	[0158.548] CloseHandle (hObject=0x140) returned 1
	[0158.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKFSTUB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\olkfstub.dll")) returned 0x20
	[0158.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKFSTUB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\olkfstub.dll")) returned 0x20
	[0158.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKFSTUB.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\olkfstub.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKFSTUB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\olkfstub.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.549] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79692) returned 1
	[0158.549] CloseHandle (hObject=0x140) returned 1
	[0158.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml")) returned 0x20
	[0158.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml")) returned 0x20
	[0158.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.550] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79252) returned 1
	[0158.550] CloseHandle (hObject=0x140) returned 1
	[0158.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml")) returned 0x20
	[0158.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml")) returned 0x20
	[0158.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLKIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\olkirmv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLMAPI32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\olmapi32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.551] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4500352) returned 1
	[0158.551] CloseHandle (hObject=0x140) returned 1
	[0158.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLMAPI32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\olmapi32.dll")) returned 0x20
	[0158.551] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLMAPI32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\olmapi32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLMAPI32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\olmapi32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0158.551] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLMAPI32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\olmapi32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OLMAPI32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\olmapi32.dll")) returned 0
	[0158.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\omml2mml.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0158.552] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94908) returned 1
	[0158.552] CloseHandle (hObject=0x140) returned 1
	[0158.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\omml2mml.xsl")) returned 0x20
	[0158.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\omml2mml.xsl")) returned 0x20
	[0158.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\omml2mml.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\omml2mml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMSMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\omsmain.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.676] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1104256) returned 1
	[0158.676] CloseHandle (hObject=0x1f8) returned 1
	[0158.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMSMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\omsmain.dll")) returned 0x20
	[0158.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMSMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\omsmain.dll")) returned 0x20
	[0158.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMSMAIN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\omsmain.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OMSMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\omsmain.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.677] SetEvent (hEvent=0xfc) returned 1
	[0158.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGWIZ.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\orgwiz.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0158.678] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=83344) returned 1
	[0158.678] CloseHandle (hObject=0x1f8) returned 1
	[0158.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGWIZ.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\orgwiz.exe")) returned 0x20
	[0158.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGWIZ.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\orgwiz.exe")) returned 0x20
	[0158.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGWIZ.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\orgwiz.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORGWIZ.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\orgwiz.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.678] SetEvent (hEvent=0xfc) returned 1
	[0158.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORMELEMS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ormelems.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0158.814] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=436120) returned 1
	[0158.814] CloseHandle (hObject=0x204) returned 1
	[0158.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORMELEMS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ormelems.dll")) returned 0x20
	[0158.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORMELEMS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ormelems.dll")) returned 0x20
	[0158.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORMELEMS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ormelems.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\ORMELEMS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ormelems.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.814] SetEvent (hEvent=0xfc) returned 1
	[0158.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.910] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=812) returned 1
	[0158.910] CloseHandle (hObject=0x1f4) returned 1
	[0158.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml")) returned 0x20
	[0158.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml")) returned 0x20
	[0158.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.nz.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.911] SetEvent (hEvent=0xfc) returned 1
	[0158.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.912] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=810) returned 1
	[0158.912] CloseHandle (hObject=0x1f4) returned 1
	[0158.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml")) returned 0x20
	[0158.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml")) returned 0x20
	[0158.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.th.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.912] SetEvent (hEvent=0xfc) returned 1
	[0158.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.913] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=810) returned 1
	[0158.913] CloseHandle (hObject=0x1f4) returned 1
	[0158.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml")) returned 0x20
	[0158.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml")) returned 0x20
	[0158.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.co.uk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.914] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=812) returned 1
	[0158.914] CloseHandle (hObject=0x1f4) returned 1
	[0158.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml")) returned 0x20
	[0158.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml")) returned 0x20
	[0158.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.ar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.915] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=812) returned 1
	[0158.915] CloseHandle (hObject=0x1f4) returned 1
	[0158.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml")) returned 0x20
	[0158.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml")) returned 0x20
	[0158.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.au.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.916] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=812) returned 1
	[0158.916] CloseHandle (hObject=0x1f4) returned 1
	[0158.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml")) returned 0x20
	[0158.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml")) returned 0x20
	[0158.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.br.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0158.917] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=812) returned 1
	[0158.917] CloseHandle (hObject=0x1f4) returned 1
	[0158.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml")) returned 0x20
	[0158.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml")) returned 0x20
	[0158.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0158.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.cn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0158.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0159.009] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=812) returned 1
	[0159.009] CloseHandle (hObject=0x1b8) returned 1
	[0159.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml")) returned 0x20
	[0159.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml")) returned 0x20
	[0159.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\office14\\outlookautodiscover\\yahoo.com.hk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.010] SetEvent (hEvent=0xfc) returned 1
	[0159.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0159.011] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=157348) returned 1
	[0159.011] CloseHandle (hObject=0x1b8) returned 1
	[0159.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml")) returned 0x20
	[0159.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml")) returned 0x20
	[0159.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl044.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.012] SetEvent (hEvent=0xfc) returned 1
	[0159.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.144] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1107344) returned 1
	[0159.144] CloseHandle (hObject=0x140) returned 1
	[0159.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml")) returned 0x20
	[0159.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml")) returned 0x20
	[0159.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl048.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.145] SetEvent (hEvent=0xfc) returned 1
	[0159.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.145] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5080) returned 1
	[0159.146] CloseHandle (hObject=0x140) returned 1
	[0159.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml")) returned 0x20
	[0159.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml")) returned 0x20
	[0159.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl087.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.146] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46386) returned 1
	[0159.147] CloseHandle (hObject=0x140) returned 1
	[0159.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml")) returned 0x20
	[0159.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml")) returned 0x20
	[0159.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl089.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.147] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=74930) returned 1
	[0159.148] CloseHandle (hObject=0x140) returned 1
	[0159.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml")) returned 0x20
	[0159.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml")) returned 0x20
	[0159.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl090.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.148] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=104994) returned 1
	[0159.148] CloseHandle (hObject=0x140) returned 1
	[0159.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml")) returned 0x20
	[0159.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml")) returned 0x20
	[0159.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl092.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.150] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46042) returned 1
	[0159.150] CloseHandle (hObject=0x140) returned 1
	[0159.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml")) returned 0x20
	[0159.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml")) returned 0x20
	[0159.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl093.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.150] SetEvent (hEvent=0xfc) returned 1
	[0159.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.151] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=106984) returned 1
	[0159.151] CloseHandle (hObject=0x140) returned 1
	[0159.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml")) returned 0x20
	[0159.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml")) returned 0x20
	[0159.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl095.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.152] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=106206) returned 1
	[0159.152] CloseHandle (hObject=0x140) returned 1
	[0159.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml")) returned 0x20
	[0159.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml")) returned 0x20
	[0159.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl096.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.153] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32954) returned 1
	[0159.153] CloseHandle (hObject=0x140) returned 1
	[0159.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml")) returned 0x20
	[0159.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml")) returned 0x20
	[0159.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl097.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.154] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=59184) returned 1
	[0159.154] CloseHandle (hObject=0x140) returned 1
	[0159.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml")) returned 0x20
	[0159.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml")) returned 0x20
	[0159.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl102.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.155] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=162542) returned 1
	[0159.155] CloseHandle (hObject=0x140) returned 1
	[0159.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml")) returned 0x20
	[0159.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml")) returned 0x20
	[0159.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl103.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.156] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=130290) returned 1
	[0159.156] CloseHandle (hObject=0x140) returned 1
	[0159.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml")) returned 0x20
	[0159.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml")) returned 0x20
	[0159.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl104.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.157] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=86160) returned 1
	[0159.157] CloseHandle (hObject=0x140) returned 1
	[0159.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml")) returned 0x20
	[0159.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml")) returned 0x20
	[0159.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl105.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.159] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39652) returned 1
	[0159.159] CloseHandle (hObject=0x140) returned 1
	[0159.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml")) returned 0x20
	[0159.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml")) returned 0x20
	[0159.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl106.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.159] SetEvent (hEvent=0xfc) returned 1
	[0159.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.160] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=120262) returned 1
	[0159.160] CloseHandle (hObject=0x140) returned 1
	[0159.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml")) returned 0x20
	[0159.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml")) returned 0x20
	[0159.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl107.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.161] SetEvent (hEvent=0xfc) returned 1
	[0159.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.161] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=187372) returned 1
	[0159.161] CloseHandle (hObject=0x140) returned 1
	[0159.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml")) returned 0x20
	[0159.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml")) returned 0x20
	[0159.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl108.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.162] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11116) returned 1
	[0159.162] CloseHandle (hObject=0x140) returned 1
	[0159.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml")) returned 0x20
	[0159.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml")) returned 0x20
	[0159.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl109.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.163] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=842734) returned 1
	[0159.163] CloseHandle (hObject=0x140) returned 1
	[0159.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml")) returned 0x20
	[0159.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml")) returned 0x20
	[0159.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl110.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.164] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=262552) returned 1
	[0159.164] CloseHandle (hObject=0x140) returned 1
	[0159.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml")) returned 0x20
	[0159.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml")) returned 0x20
	[0159.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pglbl111.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0159.165] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=140414) returned 1
	[0159.165] CloseHandle (hObject=0x140) returned 1
	[0159.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml")) returned 0x20
	[0159.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml")) returned 0x20
	[0159.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn001.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.302] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=60264) returned 1
	[0159.302] CloseHandle (hObject=0x1fc) returned 1
	[0159.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml")) returned 0x20
	[0159.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml")) returned 0x20
	[0159.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn002.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.302] SetEvent (hEvent=0xfc) returned 1
	[0159.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.304] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4072) returned 1
	[0159.304] CloseHandle (hObject=0x1fc) returned 1
	[0159.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml")) returned 0x20
	[0159.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml")) returned 0x20
	[0159.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn092.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.304] SetEvent (hEvent=0xfc) returned 1
	[0159.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.305] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1962) returned 1
	[0159.305] CloseHandle (hObject=0x1fc) returned 1
	[0159.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml")) returned 0x20
	[0159.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml")) returned 0x20
	[0159.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn095.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.306] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1916) returned 1
	[0159.306] CloseHandle (hObject=0x1fc) returned 1
	[0159.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml")) returned 0x20
	[0159.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml")) returned 0x20
	[0159.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn096.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.307] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70692) returned 1
	[0159.307] CloseHandle (hObject=0x1fc) returned 1
	[0159.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml")) returned 0x20
	[0159.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml")) returned 0x20
	[0159.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn097.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.307] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=34916) returned 1
	[0159.308] CloseHandle (hObject=0x1fc) returned 1
	[0159.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml")) returned 0x20
	[0159.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml")) returned 0x20
	[0159.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn102.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.308] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56844) returned 1
	[0159.308] CloseHandle (hObject=0x1fc) returned 1
	[0159.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml")) returned 0x20
	[0159.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml")) returned 0x20
	[0159.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn103.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.309] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4084) returned 1
	[0159.309] CloseHandle (hObject=0x1fc) returned 1
	[0159.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml")) returned 0x20
	[0159.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml")) returned 0x20
	[0159.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn105.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.310] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2652) returned 1
	[0159.310] CloseHandle (hObject=0x1fc) returned 1
	[0159.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml")) returned 0x20
	[0159.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml")) returned 0x20
	[0159.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn107.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.311] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13528) returned 1
	[0159.311] CloseHandle (hObject=0x1fc) returned 1
	[0159.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml")) returned 0x20
	[0159.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml")) returned 0x20
	[0159.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn108.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.312] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6818) returned 1
	[0159.312] CloseHandle (hObject=0x1fc) returned 1
	[0159.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml")) returned 0x20
	[0159.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml")) returned 0x20
	[0159.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn109.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.313] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51936) returned 1
	[0159.313] CloseHandle (hObject=0x1fc) returned 1
	[0159.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml")) returned 0x20
	[0159.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml")) returned 0x20
	[0159.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn110.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.314] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=284562) returned 1
	[0159.315] CloseHandle (hObject=0x1fc) returned 1
	[0159.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml")) returned 0x20
	[0159.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml")) returned 0x20
	[0159.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pgmn111.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.315] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=34700) returned 1
	[0159.315] CloseHandle (hObject=0x1fc) returned 1
	[0159.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml")) returned 0x20
	[0159.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml")) returned 0x20
	[0159.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pagesize\\pg_index.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PDSBASE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pdsbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.317] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=480672) returned 1
	[0159.317] CloseHandle (hObject=0x1fc) returned 1
	[0159.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PDSBASE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pdsbase.dll")) returned 0x20
	[0159.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PDSBASE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pdsbase.dll")) returned 0x20
	[0159.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PDSBASE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pdsbase.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PDSBASE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pdsbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.317] SetEvent (hEvent=0xfc) returned 1
	[0159.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.318] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=970096) returned 1
	[0159.318] CloseHandle (hObject=0x1fc) returned 1
	[0159.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pe.dll")) returned 0x20
	[0159.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pe.dll")) returned 0x20
	[0159.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pe.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PEOPLEDATAHANDLER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\peopledatahandler.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.319] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=99744) returned 1
	[0159.319] CloseHandle (hObject=0x1fc) returned 1
	[0159.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PEOPLEDATAHANDLER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\peopledatahandler.dll")) returned 0x20
	[0159.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PEOPLEDATAHANDLER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\peopledatahandler.dll")) returned 0x20
	[0159.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PEOPLEDATAHANDLER.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\peopledatahandler.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PEOPLEDATAHANDLER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\peopledatahandler.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PJCALEND.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pjcalend.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.321] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=190816) returned 1
	[0159.321] CloseHandle (hObject=0x1fc) returned 1
	[0159.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PJCALEND.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pjcalend.dll")) returned 0x20
	[0159.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PJCALEND.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pjcalend.dll")) returned 0x20
	[0159.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PJCALEND.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pjcalend.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PJCALEND.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pjcalend.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.321] SetEvent (hEvent=0xfc) returned 1
	[0159.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\POWERPNT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.322] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2163560) returned 1
	[0159.322] CloseHandle (hObject=0x1fc) returned 1
	[0159.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\POWERPNT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe")) returned 0x20
	[0159.322] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\POWERPNT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\POWERPNT.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.322] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\POWERPNT.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\POWERPNT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe")) returned 0
	[0159.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.325] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3506) returned 1
	[0159.325] CloseHandle (hObject=0x1fc) returned 1
	[0159.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.manifest")) returned 0x20
	[0159.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.manifest")) returned 0x20
	[0159.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\powerpnt.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\powerpnt.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.326] SetEvent (hEvent=0xfc) returned 1
	[0159.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPCORE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ppcore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.326] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15603560) returned 1
	[0159.326] CloseHandle (hObject=0x1fc) returned 1
	[0159.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPCORE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ppcore.dll")) returned 0x20
	[0159.326] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPCORE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ppcore.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPCORE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ppcore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.327] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPCORE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ppcore.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPCORE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ppcore.dll")) returned 0
	[0159.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPSLAX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ppslax.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.328] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=490896) returned 1
	[0159.328] CloseHandle (hObject=0x1fc) returned 1
	[0159.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPSLAX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ppslax.dll")) returned 0x20
	[0159.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPSLAX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ppslax.dll")) returned 0x20
	[0159.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPSLAX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ppslax.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPSLAX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ppslax.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.328] SetEvent (hEvent=0xfc) returned 1
	[0159.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTICO.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\pptico.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.329] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3792736) returned 1
	[0159.329] CloseHandle (hObject=0x1fc) returned 1
	[0159.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTICO.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\pptico.exe")) returned 0x20
	[0159.329] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTICO.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\pptico.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTICO.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pptico.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.329] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTICO.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pptico.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTICO.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\pptico.exe")) returned 0
	[0159.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.330] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79716) returned 1
	[0159.330] CloseHandle (hObject=0x1fc) returned 1
	[0159.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml")) returned 0x20
	[0159.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml")) returned 0x20
	[0159.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTIRM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.331] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79284) returned 1
	[0159.331] CloseHandle (hObject=0x1fc) returned 1
	[0159.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml")) returned 0x20
	[0159.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml")) returned 0x20
	[0159.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PPTIRMV.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pptirmv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROJIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\projimpt.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.332] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=84360) returned 1
	[0159.332] CloseHandle (hObject=0x1fc) returned 1
	[0159.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROJIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\projimpt.exe")) returned 0x20
	[0159.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROJIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\projimpt.exe")) returned 0x20
	[0159.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROJIMPT.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\projimpt.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROJIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\projimpt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROJMODL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\projmodl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.333] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=171360) returned 1
	[0159.333] CloseHandle (hObject=0x1fc) returned 1
	[0159.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROJMODL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\projmodl.dll")) returned 0x20
	[0159.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROJMODL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\projmodl.dll")) returned 0x20
	[0159.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROJMODL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\projmodl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROJMODL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\projmodl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.334] SetEvent (hEvent=0xfc) returned 1
	[0159.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\MSGR3EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033\\msgr3en.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.335] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5339136) returned 1
	[0159.335] CloseHandle (hObject=0x1fc) returned 1
	[0159.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\MSGR3EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033\\msgr3en.dll")) returned 0x20
	[0159.336] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\MSGR3EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033\\msgr3en.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\MSGR3EN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033\\msgr3en.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.336] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\MSGR3EN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033\\msgr3en.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\MSGR3EN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1033\\msgr3en.dll")) returned 0
	[0159.336] SetEvent (hEvent=0xfc) returned 1
	[0159.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\MSGR3FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036\\msgr3fr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.432] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13038480) returned 1
	[0159.432] CloseHandle (hObject=0x1f4) returned 1
	[0159.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\MSGR3FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036\\msgr3fr.dll")) returned 0x20
	[0159.432] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\MSGR3FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036\\msgr3fr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\MSGR3FR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036\\msgr3fr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.432] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\MSGR3FR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036\\msgr3fr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\MSGR3FR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\1036\\msgr3fr.dll")) returned 0
	[0159.432] SetEvent (hEvent=0xfc) returned 1
	[0159.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3en.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.433] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3788603) returned 1
	[0159.433] CloseHandle (hObject=0x1f4) returned 1
	[0159.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3en.lex")) returned 0x20
	[0159.433] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3en.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3en.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.433] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3en.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3EN.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3en.lex")) returned 0
	[0159.433] SetEvent (hEvent=0xfc) returned 1
	[0159.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3es.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.557] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4264672) returned 1
	[0159.557] CloseHandle (hObject=0x1f4) returned 1
	[0159.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3es.lex")) returned 0x20
	[0159.557] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3es.lex"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3es.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.557] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3es.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\MSGR3ES.LEX" (normalized: "c:\\program files\\microsoft office\\office14\\proof\\msgr3es.lex")) returned 0
	[0159.557] SetEvent (hEvent=0xfc) returned 1
	[0159.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub11.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.658] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27104) returned 1
	[0159.658] CloseHandle (hObject=0x1f4) returned 1
	[0159.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub11.bdr")) returned 0x20
	[0159.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub11.bdr")) returned 0x20
	[0159.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub11.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub11.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.659] SetEvent (hEvent=0xfc) returned 1
	[0159.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1a.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.659] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=62036) returned 1
	[0159.659] CloseHandle (hObject=0x1f4) returned 1
	[0159.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1a.bdr")) returned 0x20
	[0159.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1a.bdr")) returned 0x20
	[0159.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1a.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1b.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.660] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13684) returned 1
	[0159.660] CloseHandle (hObject=0x1f4) returned 1
	[0159.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1b.bdr")) returned 0x20
	[0159.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1b.bdr")) returned 0x20
	[0159.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1b.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub1b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2a.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.661] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51448) returned 1
	[0159.661] CloseHandle (hObject=0x1f4) returned 1
	[0159.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2a.bdr")) returned 0x20
	[0159.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2a.bdr")) returned 0x20
	[0159.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2a.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2b.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.662] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15872) returned 1
	[0159.662] CloseHandle (hObject=0x1f4) returned 1
	[0159.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2b.bdr")) returned 0x20
	[0159.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2b.bdr")) returned 0x20
	[0159.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2b.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub2b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3a.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.663] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56920) returned 1
	[0159.663] CloseHandle (hObject=0x1f4) returned 1
	[0159.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3a.bdr")) returned 0x20
	[0159.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3a.bdr")) returned 0x20
	[0159.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3a.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3b.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.665] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3918) returned 1
	[0159.665] CloseHandle (hObject=0x1f4) returned 1
	[0159.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3b.bdr")) returned 0x20
	[0159.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3b.bdr")) returned 0x20
	[0159.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3b.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub3b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.665] SetEvent (hEvent=0xfc) returned 1
	[0159.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub4.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.666] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49476) returned 1
	[0159.666] CloseHandle (hObject=0x1f4) returned 1
	[0159.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub4.bdr")) returned 0x20
	[0159.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub4.bdr")) returned 0x20
	[0159.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub4.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub4.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5a.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.667] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53172) returned 1
	[0159.667] CloseHandle (hObject=0x1f4) returned 1
	[0159.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5a.bdr")) returned 0x20
	[0159.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5a.bdr")) returned 0x20
	[0159.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5a.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5b.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.668] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9334) returned 1
	[0159.668] CloseHandle (hObject=0x1f4) returned 1
	[0159.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5b.bdr")) returned 0x20
	[0159.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5b.bdr")) returned 0x20
	[0159.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5b.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub5b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub6.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.669] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32582) returned 1
	[0159.669] CloseHandle (hObject=0x1f4) returned 1
	[0159.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub6.bdr")) returned 0x20
	[0159.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub6.bdr")) returned 0x20
	[0159.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub6.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub6.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub7.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.670] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31130) returned 1
	[0159.670] CloseHandle (hObject=0x1f4) returned 1
	[0159.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub7.bdr")) returned 0x20
	[0159.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub7.bdr")) returned 0x20
	[0159.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub7.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub7.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub8.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.671] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=59050) returned 1
	[0159.671] CloseHandle (hObject=0x1f4) returned 1
	[0159.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub8.bdr")) returned 0x20
	[0159.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub8.bdr")) returned 0x20
	[0159.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub8.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub8.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub9.bdr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.672] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27582) returned 1
	[0159.672] CloseHandle (hObject=0x1f4) returned 1
	[0159.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub9.bdr")) returned 0x20
	[0159.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub9.bdr")) returned 0x20
	[0159.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub9.bdr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\office14\\pubba\\mspub9.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBCONV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pubconv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.673] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=909176) returned 1
	[0159.673] CloseHandle (hObject=0x1f4) returned 1
	[0159.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBCONV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pubconv.dll")) returned 0x20
	[0159.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBCONV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pubconv.dll")) returned 0x20
	[0159.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBCONV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubconv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBCONV.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pubconv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBTRAP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pubtrap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.675] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=59256) returned 1
	[0159.675] CloseHandle (hObject=0x1f4) returned 1
	[0159.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBTRAP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pubtrap.dll")) returned 0x20
	[0159.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBTRAP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pubtrap.dll")) returned 0x20
	[0159.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBTRAP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubtrap.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBTRAP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\pubtrap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.675] SetEvent (hEvent=0xfc) returned 1
	[0159.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\accsbar.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.677] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11678) returned 1
	[0159.677] CloseHandle (hObject=0x1f4) returned 1
	[0159.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\accsbar.poc")) returned 0x20
	[0159.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\accsbar.poc")) returned 0x20
	[0159.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\accsbar.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCSBAR.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\accsbar.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.678] SetEvent (hEvent=0xfc) returned 1
	[0159.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\acctbox.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.678] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7354) returned 1
	[0159.678] CloseHandle (hObject=0x1f4) returned 1
	[0159.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\acctbox.poc")) returned 0x20
	[0159.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\acctbox.poc")) returned 0x20
	[0159.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\acctbox.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ACCTBOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\acctbox.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.679] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24329) returned 1
	[0159.679] CloseHandle (hObject=0x1f4) returned 1
	[0159.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.dpv")) returned 0x20
	[0159.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.dpv")) returned 0x20
	[0159.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.680] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1034) returned 1
	[0159.680] CloseHandle (hObject=0x1f4) returned 1
	[0159.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml")) returned 0x20
	[0159.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml")) returned 0x20
	[0159.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.681] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47450) returned 1
	[0159.681] CloseHandle (hObject=0x1f4) returned 1
	[0159.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad98.poc")) returned 0x20
	[0159.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad98.poc")) returned 0x20
	[0159.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ad98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\adrespel.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.682] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2132) returned 1
	[0159.682] CloseHandle (hObject=0x1f4) returned 1
	[0159.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\adrespel.poc")) returned 0x20
	[0159.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\adrespel.poc")) returned 0x20
	[0159.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\adrespel.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ADRESPEL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\adrespel.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\air98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.683] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22860) returned 1
	[0159.683] CloseHandle (hObject=0x1f4) returned 1
	[0159.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\air98.poc")) returned 0x20
	[0159.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\air98.poc")) returned 0x20
	[0159.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\air98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AIR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\air98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\awardhm.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.684] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41986) returned 1
	[0159.684] CloseHandle (hObject=0x1f4) returned 1
	[0159.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\awardhm.poc")) returned 0x20
	[0159.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\awardhm.poc")) returned 0x20
	[0159.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\awardhm.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\AWARDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\awardhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ban98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.685] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37324) returned 1
	[0159.685] CloseHandle (hObject=0x1f4) returned 1
	[0159.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ban98.poc")) returned 0x20
	[0159.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ban98.poc")) returned 0x20
	[0159.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ban98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BAN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ban98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.686] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53987) returned 1
	[0159.686] CloseHandle (hObject=0x1f4) returned 1
	[0159.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.dpv")) returned 0x20
	[0159.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.dpv")) returned 0x20
	[0159.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.687] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9068) returned 1
	[0159.687] CloseHandle (hObject=0x1f4) returned 1
	[0159.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml")) returned 0x20
	[0159.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml")) returned 0x20
	[0159.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\banner.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bdrtkful.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.691] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19856) returned 1
	[0159.691] CloseHandle (hObject=0x1f4) returned 1
	[0159.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bdrtkful.poc")) returned 0x20
	[0159.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bdrtkful.poc")) returned 0x20
	[0159.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bdrtkful.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BDRTKFUL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bdrtkful.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.692] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=259084) returned 1
	[0159.692] CloseHandle (hObject=0x1f4) returned 1
	[0159.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.dpv")) returned 0x20
	[0159.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.dpv")) returned 0x20
	[0159.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.693] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12730) returned 1
	[0159.693] CloseHandle (hObject=0x1f4) returned 1
	[0159.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml")) returned 0x20
	[0159.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml")) returned 0x20
	[0159.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizcard.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.694] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1801918) returned 1
	[0159.694] CloseHandle (hObject=0x1f4) returned 1
	[0159.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.dpv")) returned 0x20
	[0159.694] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.dpv"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.694] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.dpv")) returned 0
	[0159.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.695] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=68166) returned 1
	[0159.695] CloseHandle (hObject=0x1f4) returned 1
	[0159.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml")) returned 0x20
	[0159.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml")) returned 0x20
	[0159.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bizform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.696] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61676) returned 1
	[0159.696] CloseHandle (hObject=0x1f4) returned 1
	[0159.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.dpv")) returned 0x20
	[0159.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.dpv")) returned 0x20
	[0159.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.697] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20034) returned 1
	[0159.697] CloseHandle (hObject=0x1f4) returned 1
	[0159.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.poc")) returned 0x20
	[0159.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.poc")) returned 0x20
	[0159.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BORDERBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\borderbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brch98sp.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.698] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=258118) returned 1
	[0159.698] CloseHandle (hObject=0x1f4) returned 1
	[0159.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brch98sp.poc")) returned 0x20
	[0159.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brch98sp.poc")) returned 0x20
	[0159.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brch98sp.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCH98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brch98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.699] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=626546) returned 1
	[0159.699] CloseHandle (hObject=0x1f4) returned 1
	[0159.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur11.poc")) returned 0x20
	[0159.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur11.poc")) returned 0x20
	[0159.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.700] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2375450) returned 1
	[0159.700] CloseHandle (hObject=0x1f4) returned 1
	[0159.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur98.poc")) returned 0x20
	[0159.700] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur98.poc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0159.700] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BRCHUR98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brchur98.poc")) returned 0
	[0159.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.701] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=684432) returned 1
	[0159.701] CloseHandle (hObject=0x1f4) returned 1
	[0159.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.dpv")) returned 0x20
	[0159.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.dpv")) returned 0x20
	[0159.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.702] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30074) returned 1
	[0159.702] CloseHandle (hObject=0x1f4) returned 1
	[0159.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml")) returned 0x20
	[0159.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml")) returned 0x20
	[0159.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\brochure.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs2barb.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.703] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2600) returned 1
	[0159.703] CloseHandle (hObject=0x1f4) returned 1
	[0159.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs2barb.poc")) returned 0x20
	[0159.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs2barb.poc")) returned 0x20
	[0159.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs2barb.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS2BARB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs2barb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs4boxes.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.815] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2598) returned 1
	[0159.815] CloseHandle (hObject=0x1f4) returned 1
	[0159.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs4boxes.poc")) returned 0x20
	[0159.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs4boxes.poc")) returned 0x20
	[0159.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs4boxes.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\BS4BOXES.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\bs4boxes.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.816] SetEvent (hEvent=0xfc) returned 1
	[0159.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.821] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7766) returned 1
	[0159.821] CloseHandle (hObject=0x1f4) returned 1
	[0159.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml")) returned 0x20
	[0159.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml")) returned 0x20
	[0159.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catalog.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.821] SetEvent (hEvent=0xfc) returned 1
	[0159.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.822] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=405398) returned 1
	[0159.822] CloseHandle (hObject=0x1f4) returned 1
	[0159.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz.poc")) returned 0x20
	[0159.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz.poc")) returned 0x20
	[0159.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.823] SetEvent (hEvent=0xfc) returned 1
	[0159.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.824] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=151364) returned 1
	[0159.824] CloseHandle (hObject=0x1f4) returned 1
	[0159.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz11.poc")) returned 0x20
	[0159.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz11.poc")) returned 0x20
	[0159.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\catwiz11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.825] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=180703) returned 1
	[0159.825] CloseHandle (hObject=0x1f4) returned 1
	[0159.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.dpv")) returned 0x20
	[0159.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.dpv")) returned 0x20
	[0159.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.826] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5898) returned 1
	[0159.826] CloseHandle (hObject=0x1f4) returned 1
	[0159.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml")) returned 0x20
	[0159.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml")) returned 0x20
	[0159.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.827] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=72578) returned 1
	[0159.827] CloseHandle (hObject=0x1f4) returned 1
	[0159.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98.poc")) returned 0x20
	[0159.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98.poc")) returned 0x20
	[0159.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98sp.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.828] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21436) returned 1
	[0159.828] CloseHandle (hObject=0x1f4) returned 1
	[0159.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98sp.poc")) returned 0x20
	[0159.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98sp.poc")) returned 0x20
	[0159.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98sp.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\cert98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\checker.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.829] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5902) returned 1
	[0159.829] CloseHandle (hObject=0x1f4) returned 1
	[0159.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\checker.poc")) returned 0x20
	[0159.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\checker.poc")) returned 0x20
	[0159.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\checker.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CHECKER.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\checker.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.830] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10248) returned 1
	[0159.830] CloseHandle (hObject=0x1f4) returned 1
	[0159.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.dpv")) returned 0x20
	[0159.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.dpv")) returned 0x20
	[0159.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.831] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19688) returned 1
	[0159.831] CloseHandle (hObject=0x1f4) returned 1
	[0159.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.poc")) returned 0x20
	[0159.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.poc")) returned 0x20
	[0159.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\CONTACTINFOBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\contactinfobb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\coupon.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.832] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50834) returned 1
	[0159.832] CloseHandle (hObject=0x1f4) returned 1
	[0159.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\coupon.poc")) returned 0x20
	[0159.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\coupon.poc")) returned 0x20
	[0159.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\coupon.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\coupon.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.833] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0159.833] CloseHandle (hObject=0x1f4) returned 1
	[0159.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.dpv")) returned 0x20
	[0159.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.dpv")) returned 0x20
	[0159.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.834] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2850) returned 1
	[0159.834] CloseHandle (hObject=0x1f4) returned 1
	[0159.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml")) returned 0x20
	[0159.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml")) returned 0x20
	[0159.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.835] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0159.836] CloseHandle (hObject=0x1f4) returned 1
	[0159.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.dpv")) returned 0x20
	[0159.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.dpv")) returned 0x20
	[0159.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.837] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=846) returned 1
	[0159.837] CloseHandle (hObject=0x1f4) returned 1
	[0159.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml")) returned 0x20
	[0159.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml")) returned 0x20
	[0159.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgaccbox.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.838] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19244) returned 1
	[0159.838] CloseHandle (hObject=0x1f4) returned 1
	[0159.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.dpv")) returned 0x20
	[0159.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.dpv")) returned 0x20
	[0159.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.839] SetEvent (hEvent=0xfc) returned 1
	[0159.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.840] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=958) returned 1
	[0159.840] CloseHandle (hObject=0x1f4) returned 1
	[0159.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml")) returned 0x20
	[0159.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml")) returned 0x20
	[0159.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.840] SetEvent (hEvent=0xfc) returned 1
	[0159.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.841] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21097) returned 1
	[0159.841] CloseHandle (hObject=0x1f4) returned 1
	[0159.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.dpv")) returned 0x20
	[0159.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.dpv")) returned 0x20
	[0159.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.842] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5210) returned 1
	[0159.842] CloseHandle (hObject=0x1f4) returned 1
	[0159.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml")) returned 0x20
	[0159.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml")) returned 0x20
	[0159.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgatnget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.846] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0159.846] CloseHandle (hObject=0x1f4) returned 1
	[0159.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.dpv")) returned 0x20
	[0159.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.dpv")) returned 0x20
	[0159.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.847] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1110) returned 1
	[0159.847] CloseHandle (hObject=0x1f4) returned 1
	[0159.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml")) returned 0x20
	[0159.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml")) returned 0x20
	[0159.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgbarbll.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.848] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5632) returned 1
	[0159.848] CloseHandle (hObject=0x1f4) returned 1
	[0159.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.dpv")) returned 0x20
	[0159.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.dpv")) returned 0x20
	[0159.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.849] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2468) returned 1
	[0159.849] CloseHandle (hObject=0x1f4) returned 1
	[0159.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml")) returned 0x20
	[0159.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml")) returned 0x20
	[0159.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgborder.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.850] SetEvent (hEvent=0xfc) returned 1
	[0159.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.851] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3072) returned 1
	[0159.851] CloseHandle (hObject=0x1f4) returned 1
	[0159.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.dpv")) returned 0x20
	[0159.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.dpv")) returned 0x20
	[0159.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.852] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=542) returned 1
	[0159.852] CloseHandle (hObject=0x1f4) returned 1
	[0159.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml")) returned 0x20
	[0159.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml")) returned 0x20
	[0159.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgboxes.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.853] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=218216) returned 1
	[0159.853] CloseHandle (hObject=0x1f4) returned 1
	[0159.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.dpv")) returned 0x20
	[0159.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.dpv")) returned 0x20
	[0159.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.854] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7782) returned 1
	[0159.854] CloseHandle (hObject=0x1f4) returned 1
	[0159.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml")) returned 0x20
	[0159.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml")) returned 0x20
	[0159.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgcal.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.857] SetEvent (hEvent=0xfc) returned 1
	[0159.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0159.858] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0159.858] CloseHandle (hObject=0x1f4) returned 1
	[0159.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.dpv")) returned 0x20
	[0159.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.dpv")) returned 0x20
	[0159.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.858] SetEvent (hEvent=0xfc) returned 1
	[0159.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.981] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=670) returned 1
	[0159.981] CloseHandle (hObject=0x1fc) returned 1
	[0159.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml")) returned 0x20
	[0159.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml")) returned 0x20
	[0159.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgchkbrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.982] SetEvent (hEvent=0xfc) returned 1
	[0159.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0159.982] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7072) returned 1
	[0159.982] CloseHandle (hObject=0x1fc) returned 1
	[0159.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml")) returned 0x20
	[0159.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml")) returned 0x20
	[0159.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0159.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpquot.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0159.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.089] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0160.089] CloseHandle (hObject=0x140) returned 1
	[0160.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.dpv")) returned 0x20
	[0160.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.dpv")) returned 0x20
	[0160.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\dgpunct.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.089] SetEvent (hEvent=0xfc) returned 1
	[0160.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.090] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=223656) returned 1
	[0160.090] CloseHandle (hObject=0x140) returned 1
	[0160.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer11.poc")) returned 0x20
	[0160.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer11.poc")) returned 0x20
	[0160.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.091] SetEvent (hEvent=0xfc) returned 1
	[0160.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.248] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=936334) returned 1
	[0160.248] CloseHandle (hObject=0x140) returned 1
	[0160.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer98.poc")) returned 0x20
	[0160.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer98.poc")) returned 0x20
	[0160.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\flyer98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.248] SetEvent (hEvent=0xfc) returned 1
	[0160.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.249] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22222) returned 1
	[0160.249] CloseHandle (hObject=0x140) returned 1
	[0160.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.dpv")) returned 0x20
	[0160.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.dpv")) returned 0x20
	[0160.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.250] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1580) returned 1
	[0160.250] CloseHandle (hObject=0x140) returned 1
	[0160.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml")) returned 0x20
	[0160.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml")) returned 0x20
	[0160.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\foldproj.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\form98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.251] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=575826) returned 1
	[0160.251] CloseHandle (hObject=0x140) returned 1
	[0160.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\form98.poc")) returned 0x20
	[0160.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\form98.poc")) returned 0x20
	[0160.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\form98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\form98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\formctl.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.252] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2080) returned 1
	[0160.253] CloseHandle (hObject=0x140) returned 1
	[0160.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\formctl.poc")) returned 0x20
	[0160.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\formctl.poc")) returned 0x20
	[0160.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\formctl.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\formctl.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fs3box.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.254] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=952) returned 1
	[0160.254] CloseHandle (hObject=0x140) returned 1
	[0160.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fs3box.poc")) returned 0x20
	[0160.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fs3box.poc")) returned 0x20
	[0160.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fs3box.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\fs3box.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.255] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45251) returned 1
	[0160.255] CloseHandle (hObject=0x140) returned 1
	[0160.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.dpv")) returned 0x20
	[0160.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.dpv")) returned 0x20
	[0160.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.256] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5320) returned 1
	[0160.256] CloseHandle (hObject=0x140) returned 1
	[0160.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml")) returned 0x20
	[0160.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml")) returned 0x20
	[0160.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.257] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=142580) returned 1
	[0160.257] CloseHandle (hObject=0x140) returned 1
	[0160.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift98.poc")) returned 0x20
	[0160.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift98.poc")) returned 0x20
	[0160.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\gift98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greet11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.258] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=877332) returned 1
	[0160.258] CloseHandle (hObject=0x140) returned 1
	[0160.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greet11.poc")) returned 0x20
	[0160.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greet11.poc")) returned 0x20
	[0160.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greet11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greet11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.259] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19182519) returned 1
	[0160.259] CloseHandle (hObject=0x140) returned 1
	[0160.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.dpv")) returned 0x20
	[0160.259] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.dpv"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0160.259] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.dpv")) returned 0
	[0160.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.260] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=64268) returned 1
	[0160.260] CloseHandle (hObject=0x140) returned 1
	[0160.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml")) returned 0x20
	[0160.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml")) returned 0x20
	[0160.260] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\greeting.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.261] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0160.261] CloseHandle (hObject=0x140) returned 1
	[0160.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.dpv")) returned 0x20
	[0160.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.dpv")) returned 0x20
	[0160.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.262] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10214) returned 1
	[0160.262] CloseHandle (hObject=0x140) returned 1
	[0160.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.poc")) returned 0x20
	[0160.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.poc")) returned 0x20
	[0160.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\headingbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.263] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3980022) returned 1
	[0160.263] CloseHandle (hObject=0x140) returned 1
	[0160.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.dpv")) returned 0x20
	[0160.263] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.dpv"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0160.263] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.dpv")) returned 0
	[0160.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.264] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18886) returned 1
	[0160.264] CloseHandle (hObject=0x140) returned 1
	[0160.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml")) returned 0x20
	[0160.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml")) returned 0x20
	[0160.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.265] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=771144) returned 1
	[0160.265] CloseHandle (hObject=0x140) returned 1
	[0160.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite11.poc")) returned 0x20
	[0160.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite11.poc")) returned 0x20
	[0160.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\invite11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.266] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=172460) returned 1
	[0160.266] CloseHandle (hObject=0x140) returned 1
	[0160.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.dpv")) returned 0x20
	[0160.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.dpv")) returned 0x20
	[0160.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.267] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18630) returned 1
	[0160.267] CloseHandle (hObject=0x140) returned 1
	[0160.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml")) returned 0x20
	[0160.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml")) returned 0x20
	[0160.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.268] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=161858) returned 1
	[0160.268] CloseHandle (hObject=0x140) returned 1
	[0160.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label98.poc")) returned 0x20
	[0160.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label98.poc")) returned 0x20
	[0160.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\label98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\labelhm.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.269] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13412) returned 1
	[0160.269] CloseHandle (hObject=0x140) returned 1
	[0160.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\labelhm.poc")) returned 0x20
	[0160.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\labelhm.poc")) returned 0x20
	[0160.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\labelhm.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\labelhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.270] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=129181) returned 1
	[0160.271] CloseHandle (hObject=0x140) returned 1
	[0160.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.dpv")) returned 0x20
	[0160.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.dpv")) returned 0x20
	[0160.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.272] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12446) returned 1
	[0160.272] CloseHandle (hObject=0x140) returned 1
	[0160.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml")) returned 0x20
	[0160.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml")) returned 0x20
	[0160.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\letthead.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lineact.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.273] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2820) returned 1
	[0160.273] CloseHandle (hObject=0x140) returned 1
	[0160.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lineact.poc")) returned 0x20
	[0160.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lineact.poc")) returned 0x20
	[0160.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lineact.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lineact.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\logo98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.274] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45094) returned 1
	[0160.274] CloseHandle (hObject=0x140) returned 1
	[0160.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\logo98.poc")) returned 0x20
	[0160.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\logo98.poc")) returned 0x20
	[0160.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\logo98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\logo98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.275] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43050) returned 1
	[0160.275] CloseHandle (hObject=0x140) returned 1
	[0160.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd11.poc")) returned 0x20
	[0160.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd11.poc")) returned 0x20
	[0160.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.276] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=145468) returned 1
	[0160.276] CloseHandle (hObject=0x140) returned 1
	[0160.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98.poc")) returned 0x20
	[0160.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98.poc")) returned 0x20
	[0160.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98sp.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.277] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15872) returned 1
	[0160.277] CloseHandle (hObject=0x140) returned 1
	[0160.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98sp.poc")) returned 0x20
	[0160.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98sp.poc")) returned 0x20
	[0160.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98sp.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthd98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthdhm.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.278] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39578) returned 1
	[0160.278] CloseHandle (hObject=0x140) returned 1
	[0160.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthdhm.poc")) returned 0x20
	[0160.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthdhm.poc")) returned 0x20
	[0160.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthdhm.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\lthdhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.279] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9876) returned 1
	[0160.279] CloseHandle (hObject=0x140) returned 1
	[0160.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml")) returned 0x20
	[0160.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml")) returned 0x20
	[0160.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\marquee.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.280] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3670) returned 1
	[0160.280] CloseHandle (hObject=0x140) returned 1
	[0160.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\marquee.poc")) returned 0x20
	[0160.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\marquee.poc")) returned 0x20
	[0160.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\marquee.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\marquee.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.283] SetEvent (hEvent=0xfc) returned 1
	[0160.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.284] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=84500) returned 1
	[0160.284] CloseHandle (hObject=0x140) returned 1
	[0160.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.dpv")) returned 0x20
	[0160.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.dpv")) returned 0x20
	[0160.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.284] SetEvent (hEvent=0xfc) returned 1
	[0160.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.285] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5002) returned 1
	[0160.285] CloseHandle (hObject=0x140) returned 1
	[0160.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml")) returned 0x20
	[0160.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml")) returned 0x20
	[0160.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.286] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=130430) returned 1
	[0160.286] CloseHandle (hObject=0x140) returned 1
	[0160.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu98.poc")) returned 0x20
	[0160.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu98.poc")) returned 0x20
	[0160.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\menu98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\msthed98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.287] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=133370) returned 1
	[0160.287] CloseHandle (hObject=0x140) returned 1
	[0160.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\msthed98.poc")) returned 0x20
	[0160.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\msthed98.poc")) returned 0x20
	[0160.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\msthed98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\msthed98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbar11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.288] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=121354) returned 1
	[0160.288] CloseHandle (hObject=0x140) returned 1
	[0160.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbar11.poc")) returned 0x20
	[0160.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbar11.poc")) returned 0x20
	[0160.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbar11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbar11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbarv.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.289] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=117982) returned 1
	[0160.289] CloseHandle (hObject=0x140) returned 1
	[0160.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbarv.poc")) returned 0x20
	[0160.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbarv.poc")) returned 0x20
	[0160.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbarv.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbarv.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph1.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.290] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=924) returned 1
	[0160.290] CloseHandle (hObject=0x140) returned 1
	[0160.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph1.poc")) returned 0x20
	[0160.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph1.poc")) returned 0x20
	[0160.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph1.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph1.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph2.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.291] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=918) returned 1
	[0160.291] CloseHandle (hObject=0x140) returned 1
	[0160.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph2.poc")) returned 0x20
	[0160.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph2.poc")) returned 0x20
	[0160.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph2.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\navbrph2.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.292] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=628314) returned 1
	[0160.292] CloseHandle (hObject=0x140) returned 1
	[0160.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.dpv")) returned 0x20
	[0160.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.dpv")) returned 0x20
	[0160.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.293] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16992) returned 1
	[0160.293] CloseHandle (hObject=0x140) returned 1
	[0160.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml")) returned 0x20
	[0160.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml")) returned 0x20
	[0160.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.294] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=556324) returned 1
	[0160.294] CloseHandle (hObject=0x140) returned 1
	[0160.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news11.poc")) returned 0x20
	[0160.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news11.poc")) returned 0x20
	[0160.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.295] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2999072) returned 1
	[0160.295] CloseHandle (hObject=0x140) returned 1
	[0160.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news98.poc")) returned 0x20
	[0160.295] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news98.poc"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0160.296] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\news98.poc")) returned 0
	[0160.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\newshm.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.296] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=333420) returned 1
	[0160.296] CloseHandle (hObject=0x140) returned 1
	[0160.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\newshm.poc")) returned 0x20
	[0160.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\newshm.poc")) returned 0x20
	[0160.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\newshm.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\newshm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\orig98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.297] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2094) returned 1
	[0160.297] CloseHandle (hObject=0x140) returned 1
	[0160.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\orig98.poc")) returned 0x20
	[0160.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\orig98.poc")) returned 0x20
	[0160.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\orig98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\orig98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\piccap98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.298] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20154) returned 1
	[0160.298] CloseHandle (hObject=0x140) returned 1
	[0160.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\piccap98.poc")) returned 0x20
	[0160.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\piccap98.poc")) returned 0x20
	[0160.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\piccap98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\piccap98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\picstyles.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.301] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=125632) returned 1
	[0160.301] CloseHandle (hObject=0x140) returned 1
	[0160.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\picstyles.dpv")) returned 0x20
	[0160.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\picstyles.dpv")) returned 0x20
	[0160.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\picstyles.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\picstyles.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pictph.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.302] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=820) returned 1
	[0160.302] CloseHandle (hObject=0x140) returned 1
	[0160.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pictph.poc")) returned 0x20
	[0160.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pictph.poc")) returned 0x20
	[0160.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pictph.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pictph.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pnctuate.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.303] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5922) returned 1
	[0160.303] CloseHandle (hObject=0x140) returned 1
	[0160.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pnctuate.poc")) returned 0x20
	[0160.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pnctuate.poc")) returned 0x20
	[0160.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pnctuate.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pnctuate.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\post98sp.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.304] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47536) returned 1
	[0160.304] CloseHandle (hObject=0x140) returned 1
	[0160.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\post98sp.poc")) returned 0x20
	[0160.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\post98sp.poc")) returned 0x20
	[0160.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\post98sp.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\post98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.305] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=661835) returned 1
	[0160.306] CloseHandle (hObject=0x140) returned 1
	[0160.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.dpv")) returned 0x20
	[0160.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.dpv")) returned 0x20
	[0160.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.307] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39576) returned 1
	[0160.307] CloseHandle (hObject=0x140) returned 1
	[0160.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml")) returned 0x20
	[0160.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml")) returned 0x20
	[0160.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcard.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.308] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=147578) returned 1
	[0160.308] CloseHandle (hObject=0x140) returned 1
	[0160.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd11.poc")) returned 0x20
	[0160.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd11.poc")) returned 0x20
	[0160.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.309] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=689384) returned 1
	[0160.309] CloseHandle (hObject=0x140) returned 1
	[0160.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd98.poc")) returned 0x20
	[0160.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd98.poc")) returned 0x20
	[0160.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\postcd98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\prog98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.310] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=44934) returned 1
	[0160.310] CloseHandle (hObject=0x140) returned 1
	[0160.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\prog98.poc")) returned 0x20
	[0160.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\prog98.poc")) returned 0x20
	[0160.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\prog98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\prog98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.311] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9728) returned 1
	[0160.311] CloseHandle (hObject=0x140) returned 1
	[0160.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.dpv")) returned 0x20
	[0160.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.dpv")) returned 0x20
	[0160.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.312] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=620) returned 1
	[0160.312] CloseHandle (hObject=0x140) returned 1
	[0160.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml")) returned 0x20
	[0160.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml")) returned 0x20
	[0160.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\program.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps10targ.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.313] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2356) returned 1
	[0160.313] CloseHandle (hObject=0x140) returned 1
	[0160.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps10targ.poc")) returned 0x20
	[0160.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps10targ.poc")) returned 0x20
	[0160.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps10targ.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps10targ.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps2swoos.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.314] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=752) returned 1
	[0160.314] CloseHandle (hObject=0x140) returned 1
	[0160.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps2swoos.poc")) returned 0x20
	[0160.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps2swoos.poc")) returned 0x20
	[0160.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps2swoos.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps2swoos.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps9crnrh.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.315] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1220) returned 1
	[0160.315] CloseHandle (hObject=0x140) returned 1
	[0160.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps9crnrh.poc")) returned 0x20
	[0160.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps9crnrh.poc")) returned 0x20
	[0160.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps9crnrh.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\ps9crnrh.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.316] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0160.316] CloseHandle (hObject=0x140) returned 1
	[0160.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.dpv")) returned 0x20
	[0160.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.dpv")) returned 0x20
	[0160.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.317] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6336) returned 1
	[0160.317] CloseHandle (hObject=0x140) returned 1
	[0160.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.poc")) returned 0x20
	[0160.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.poc")) returned 0x20
	[0160.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pullquotebb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pulqot98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.318] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47976) returned 1
	[0160.318] CloseHandle (hObject=0x140) returned 1
	[0160.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pulqot98.poc")) returned 0x20
	[0160.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pulqot98.poc")) returned 0x20
	[0160.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pulqot98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\pulqot98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.319] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=578011) returned 1
	[0160.319] CloseHandle (hObject=0x140) returned 1
	[0160.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.dpv")) returned 0x20
	[0160.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.dpv")) returned 0x20
	[0160.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.320] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13286) returned 1
	[0160.321] CloseHandle (hObject=0x140) returned 1
	[0160.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml")) returned 0x20
	[0160.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml")) returned 0x20
	[0160.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\qp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\quikpubs.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.322] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=456834) returned 1
	[0160.322] CloseHandle (hObject=0x140) returned 1
	[0160.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\quikpubs.poc")) returned 0x20
	[0160.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\quikpubs.poc")) returned 0x20
	[0160.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\quikpubs.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\quikpubs.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\reptwiz.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.323] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=316798) returned 1
	[0160.323] CloseHandle (hObject=0x140) returned 1
	[0160.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\reptwiz.poc")) returned 0x20
	[0160.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\reptwiz.poc")) returned 0x20
	[0160.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\reptwiz.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\reptwiz.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\res98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.324] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24052) returned 1
	[0160.324] CloseHandle (hObject=0x140) returned 1
	[0160.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\res98.poc")) returned 0x20
	[0160.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\res98.poc")) returned 0x20
	[0160.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\res98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\res98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resp98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.325] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=126970) returned 1
	[0160.325] CloseHandle (hObject=0x140) returned 1
	[0160.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resp98.poc")) returned 0x20
	[0160.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resp98.poc")) returned 0x20
	[0160.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resp98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resp98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.326] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0160.326] CloseHandle (hObject=0x140) returned 1
	[0160.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.dpv")) returned 0x20
	[0160.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.dpv")) returned 0x20
	[0160.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.327] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2138) returned 1
	[0160.327] CloseHandle (hObject=0x140) returned 1
	[0160.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml")) returned 0x20
	[0160.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml")) returned 0x20
	[0160.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\resume.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\rspmech.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.328] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=682) returned 1
	[0160.328] CloseHandle (hObject=0x140) returned 1
	[0160.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\rspmech.poc")) returned 0x20
	[0160.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\rspmech.poc")) returned 0x20
	[0160.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\rspmech.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\rspmech.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.497] SetEvent (hEvent=0xfc) returned 1
	[0160.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.498] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=312537) returned 1
	[0160.498] CloseHandle (hObject=0x1fc) returned 1
	[0160.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.dpv")) returned 0x20
	[0160.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.dpv")) returned 0x20
	[0160.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.498] SetEvent (hEvent=0xfc) returned 1
	[0160.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.499] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45194) returned 1
	[0160.499] CloseHandle (hObject=0x1fc) returned 1
	[0160.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.poc")) returned 0x20
	[0160.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.poc")) returned 0x20
	[0160.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.500] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=302593) returned 1
	[0160.500] CloseHandle (hObject=0x1fc) returned 1
	[0160.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.dpv")) returned 0x20
	[0160.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.dpv")) returned 0x20
	[0160.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.501] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42778) returned 1
	[0160.501] CloseHandle (hObject=0x1fc) returned 1
	[0160.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.poc")) returned 0x20
	[0160.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.poc")) returned 0x20
	[0160.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sidebarvertbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.502] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=97941) returned 1
	[0160.502] CloseHandle (hObject=0x1fc) returned 1
	[0160.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.dpv")) returned 0x20
	[0160.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.dpv")) returned 0x20
	[0160.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.503] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10932) returned 1
	[0160.503] CloseHandle (hObject=0x1fc) returned 1
	[0160.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml")) returned 0x20
	[0160.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml")) returned 0x20
	[0160.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.504] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=48002) returned 1
	[0160.504] CloseHandle (hObject=0x1fc) returned 1
	[0160.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign98.poc")) returned 0x20
	[0160.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign98.poc")) returned 0x20
	[0160.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\sign98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\signhm.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.505] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28012) returned 1
	[0160.505] CloseHandle (hObject=0x1fc) returned 1
	[0160.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\signhm.poc")) returned 0x20
	[0160.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\signhm.poc")) returned 0x20
	[0160.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\signhm.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\signhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\snipe.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.506] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30222) returned 1
	[0160.506] CloseHandle (hObject=0x1fc) returned 1
	[0160.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\snipe.poc")) returned 0x20
	[0160.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\snipe.poc")) returned 0x20
	[0160.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\snipe.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\snipe.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.507] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=391483) returned 1
	[0160.508] CloseHandle (hObject=0x1fc) returned 1
	[0160.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.dpv")) returned 0x20
	[0160.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.dpv")) returned 0x20
	[0160.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.509] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32054) returned 1
	[0160.509] CloseHandle (hObject=0x1fc) returned 1
	[0160.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.poc")) returned 0x20
	[0160.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.poc")) returned 0x20
	[0160.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storybb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.510] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=313762) returned 1
	[0160.510] CloseHandle (hObject=0x1fc) returned 1
	[0160.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.dpv")) returned 0x20
	[0160.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.dpv")) returned 0x20
	[0160.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.511] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28542) returned 1
	[0160.511] CloseHandle (hObject=0x1fc) returned 1
	[0160.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.poc")) returned 0x20
	[0160.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.poc")) returned 0x20
	[0160.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\storyvertbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\strbrst.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.512] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1138) returned 1
	[0160.512] CloseHandle (hObject=0x1fc) returned 1
	[0160.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\strbrst.poc")) returned 0x20
	[0160.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\strbrst.poc")) returned 0x20
	[0160.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\strbrst.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\strbrst.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\tearoff.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.513] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1014) returned 1
	[0160.513] CloseHandle (hObject=0x1fc) returned 1
	[0160.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\tearoff.poc")) returned 0x20
	[0160.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\tearoff.poc")) returned 0x20
	[0160.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\tearoff.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\tearoff.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\toc98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.514] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=264714) returned 1
	[0160.514] CloseHandle (hObject=0x1fc) returned 1
	[0160.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\toc98.poc")) returned 0x20
	[0160.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\toc98.poc")) returned 0x20
	[0160.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\toc98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\toc98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wcomp98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.515] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=125616) returned 1
	[0160.515] CloseHandle (hObject=0x1fc) returned 1
	[0160.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wcomp98.poc")) returned 0x20
	[0160.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wcomp98.poc")) returned 0x20
	[0160.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wcomp98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wcomp98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\web11.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.516] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1467524) returned 1
	[0160.516] CloseHandle (hObject=0x1fc) returned 1
	[0160.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\web11.poc")) returned 0x20
	[0160.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\web11.poc")) returned 0x20
	[0160.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\web11.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\web11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webcalso.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.517] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=499482) returned 1
	[0160.517] CloseHandle (hObject=0x1fc) returned 1
	[0160.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webcalso.poc")) returned 0x20
	[0160.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webcalso.poc")) returned 0x20
	[0160.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webcalso.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webcalso.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webemail.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.518] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12762) returned 1
	[0160.518] CloseHandle (hObject=0x1fc) returned 1
	[0160.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webemail.poc")) returned 0x20
	[0160.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webemail.poc")) returned 0x20
	[0160.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webemail.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webemail.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhed98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.519] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=76290) returned 1
	[0160.519] CloseHandle (hObject=0x1fc) returned 1
	[0160.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhed98.poc")) returned 0x20
	[0160.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhed98.poc")) returned 0x20
	[0160.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhed98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhed98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhome.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.520] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12746) returned 1
	[0160.520] CloseHandle (hObject=0x1fc) returned 1
	[0160.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhome.poc")) returned 0x20
	[0160.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhome.poc")) returned 0x20
	[0160.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhome.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webhome.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\weblink.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.521] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13472) returned 1
	[0160.521] CloseHandle (hObject=0x1fc) returned 1
	[0160.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\weblink.poc")) returned 0x20
	[0160.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\weblink.poc")) returned 0x20
	[0160.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\weblink.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\weblink.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.522] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1043354) returned 1
	[0160.522] CloseHandle (hObject=0x1fc) returned 1
	[0160.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.dpv")) returned 0x20
	[0160.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.dpv")) returned 0x20
	[0160.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.523] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15722) returned 1
	[0160.523] CloseHandle (hObject=0x1fc) returned 1
	[0160.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml")) returned 0x20
	[0160.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml")) returned 0x20
	[0160.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\webpage.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.524] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47636) returned 1
	[0160.524] CloseHandle (hObject=0x1fc) returned 1
	[0160.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.dpv")) returned 0x20
	[0160.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.dpv")) returned 0x20
	[0160.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.525] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5910) returned 1
	[0160.525] CloseHandle (hObject=0x1fc) returned 1
	[0160.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml")) returned 0x20
	[0160.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml")) returned 0x20
	[0160.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\withcomp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.dpv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.527] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=499307) returned 1
	[0160.527] CloseHandle (hObject=0x1fc) returned 1
	[0160.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.dpv")) returned 0x20
	[0160.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.dpv")) returned 0x20
	[0160.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.dpv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.527] SetEvent (hEvent=0xfc) returned 1
	[0160.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.529] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6228) returned 1
	[0160.529] CloseHandle (hObject=0x1fc) returned 1
	[0160.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml")) returned 0x20
	[0160.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml")) returned 0x20
	[0160.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wordrep.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.529] SetEvent (hEvent=0xfc) returned 1
	[0160.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wpulqt98.poc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0160.672] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11734) returned 1
	[0160.672] CloseHandle (hObject=0x1fc) returned 1
	[0160.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wpulqt98.poc")) returned 0x20
	[0160.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wpulqt98.poc")) returned 0x20
	[0160.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wpulqt98.poc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\office14\\pubwiz\\wpulqt98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.672] SetEvent (hEvent=0xfc) returned 1
	[0160.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOCIALPROVIDER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\socialprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.768] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36768) returned 1
	[0160.768] CloseHandle (hObject=0x140) returned 1
	[0160.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOCIALPROVIDER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\socialprovider.dll")) returned 0x20
	[0160.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOCIALPROVIDER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\socialprovider.dll")) returned 0x20
	[0160.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOCIALPROVIDER.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\socialprovider.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOCIALPROVIDER.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\socialprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.768] SetEvent (hEvent=0xfc) returned 1
	[0160.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOLUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\solutils.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.769] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=360312) returned 1
	[0160.769] CloseHandle (hObject=0x140) returned 1
	[0160.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOLUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\solutils.dll")) returned 0x20
	[0160.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOLUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\solutils.dll")) returned 0x20
	[0160.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOLUTILS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\solutils.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SOLUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\solutils.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.770] SetEvent (hEvent=0xfc) returned 1
	[0160.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\spanish.lng"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.770] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=366569) returned 1
	[0160.771] CloseHandle (hObject=0x140) returned 1
	[0160.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\spanish.lng")) returned 0x20
	[0160.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\spanish.lng")) returned 0x20
	[0160.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\spanish.lng.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SPANISH.LNG" (normalized: "c:\\program files\\microsoft office\\office14\\spanish.lng"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.772] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=95208) returned 1
	[0160.772] CloseHandle (hObject=0x140) returned 1
	[0160.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp")) returned 0x20
	[0160.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp")) returned 0x20
	[0160.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SQLSHARE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sqlshare.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.773] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=251816) returned 1
	[0160.773] CloseHandle (hObject=0x140) returned 1
	[0160.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SQLSHARE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sqlshare.dll")) returned 0x20
	[0160.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SQLSHARE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sqlshare.dll")) returned 0x20
	[0160.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SQLSHARE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\sqlshare.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SQLSHARE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\sqlshare.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SSGEN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ssgen.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.774] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=149320) returned 1
	[0160.774] CloseHandle (hObject=0x140) returned 1
	[0160.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SSGEN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ssgen.dll")) returned 0x20
	[0160.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SSGEN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ssgen.dll")) returned 0x20
	[0160.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SSGEN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\ssgen.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SSGEN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\ssgen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STSLIST.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\stslist.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.775] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3913112) returned 1
	[0160.775] CloseHandle (hObject=0x140) returned 1
	[0160.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STSLIST.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\stslist.dll")) returned 0x20
	[0160.775] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STSLIST.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\stslist.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STSLIST.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\stslist.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0160.775] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STSLIST.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\stslist.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STSLIST.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\stslist.dll")) returned 0
	[0160.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STYLEMGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\stylemgr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.776] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=132488) returned 1
	[0160.776] CloseHandle (hObject=0x140) returned 1
	[0160.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STYLEMGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\stylemgr.dll")) returned 0x20
	[0160.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STYLEMGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\stylemgr.dll")) returned 0x20
	[0160.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STYLEMGR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\stylemgr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\STYLEMGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\stylemgr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.777] SetEvent (hEvent=0xfc) returned 1
	[0160.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\subscription.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.777] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5617) returned 1
	[0160.777] CloseHandle (hObject=0x140) returned 1
	[0160.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\subscription.xsd")) returned 0x20
	[0160.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\subscription.xsd")) returned 0x20
	[0160.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\subscription.xsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\subscription.xsd" (normalized: "c:\\program files\\microsoft office\\office14\\subscription.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SUMINFO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\suminfo.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.778] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61336) returned 1
	[0160.778] CloseHandle (hObject=0x140) returned 1
	[0160.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SUMINFO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\suminfo.dll")) returned 0x20
	[0160.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SUMINFO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\suminfo.dll")) returned 0x20
	[0160.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SUMINFO.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\suminfo.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\SUMINFO.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\suminfo.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TaxonomyControl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\taxonomycontrol.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.779] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=119648) returned 1
	[0160.779] CloseHandle (hObject=0x140) returned 1
	[0160.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TaxonomyControl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\taxonomycontrol.dll")) returned 0x20
	[0160.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TaxonomyControl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\taxonomycontrol.dll")) returned 0x20
	[0160.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TaxonomyControl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\taxonomycontrol.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TaxonomyControl.dll" (normalized: "c:\\program files\\microsoft office\\office14\\taxonomycontrol.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\thocr.psp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.781] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=289792) returned 1
	[0160.781] CloseHandle (hObject=0x140) returned 1
	[0160.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\thocr.psp")) returned 0x20
	[0160.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\thocr.psp")) returned 0x20
	[0160.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\thocr.psp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\THOCR.PSP" (normalized: "c:\\program files\\microsoft office\\office14\\thocr.psp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\THOCRAPI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\thocrapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.782] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35160) returned 1
	[0160.782] CloseHandle (hObject=0x140) returned 1
	[0160.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\THOCRAPI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\thocrapi.dll")) returned 0x20
	[0160.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\THOCRAPI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\thocrapi.dll")) returned 0x20
	[0160.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\THOCRAPI.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\thocrapi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\THOCRAPI.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\thocrapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.783] SetEvent (hEvent=0xfc) returned 1
	[0160.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TIMESOLN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\timesoln.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.783] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1660800) returned 1
	[0160.783] CloseHandle (hObject=0x140) returned 1
	[0160.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TIMESOLN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\timesoln.dll")) returned 0x20
	[0160.783] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TIMESOLN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\timesoln.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TIMESOLN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\timesoln.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0160.783] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TIMESOLN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\timesoln.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TIMESOLN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\timesoln.dll")) returned 0
	[0160.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TLIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\tlimpt.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.785] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=82816) returned 1
	[0160.785] CloseHandle (hObject=0x140) returned 1
	[0160.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TLIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\tlimpt.exe")) returned 0x20
	[0160.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TLIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\tlimpt.exe")) returned 0x20
	[0160.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TLIMPT.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\tlimpt.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TLIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\tlimpt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.785] SetEvent (hEvent=0xfc) returned 1
	[0160.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWCUTCHR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twcutchr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.786] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=166792) returned 1
	[0160.786] CloseHandle (hObject=0x140) returned 1
	[0160.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWCUTCHR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twcutchr.dll")) returned 0x20
	[0160.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWCUTCHR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twcutchr.dll")) returned 0x20
	[0160.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWCUTCHR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\twcutchr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWCUTCHR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twcutchr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWCUTLIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twcutlin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.787] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=118144) returned 1
	[0160.787] CloseHandle (hObject=0x140) returned 1
	[0160.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWCUTLIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twcutlin.dll")) returned 0x20
	[0160.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWCUTLIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twcutlin.dll")) returned 0x20
	[0160.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWCUTLIN.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\twcutlin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWCUTLIN.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twcutlin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWLAY32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twlay32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.788] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=74616) returned 1
	[0160.788] CloseHandle (hObject=0x140) returned 1
	[0160.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWLAY32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twlay32.dll")) returned 0x20
	[0160.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWLAY32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twlay32.dll")) returned 0x20
	[0160.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWLAY32.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\twlay32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWLAY32.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twlay32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWORIENT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\tworient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.789] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28040) returned 1
	[0160.789] CloseHandle (hObject=0x140) returned 1
	[0160.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWORIENT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\tworient.dll")) returned 0x20
	[0160.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWORIENT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\tworient.dll")) returned 0x20
	[0160.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWORIENT.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\tworient.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWORIENT.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\tworient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twrecc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.790] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42880) returned 1
	[0160.790] CloseHandle (hObject=0x140) returned 1
	[0160.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twrecc.dll")) returned 0x20
	[0160.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twrecc.dll")) returned 0x20
	[0160.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\twrecc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECC.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twrecc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twrece.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.791] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61824) returned 1
	[0160.791] CloseHandle (hObject=0x140) returned 1
	[0160.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twrece.dll")) returned 0x20
	[0160.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twrece.dll")) returned 0x20
	[0160.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\twrece.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twrece.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twrecs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.798] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22920) returned 1
	[0160.798] CloseHandle (hObject=0x140) returned 1
	[0160.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twrecs.dll")) returned 0x20
	[0160.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twrecs.dll")) returned 0x20
	[0160.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\twrecs.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\TWRECS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\twrecs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VAOSOLX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vaosolx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.801] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=128368) returned 1
	[0160.801] CloseHandle (hObject=0x140) returned 1
	[0160.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VAOSOLX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vaosolx.dll")) returned 0x20
	[0160.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VAOSOLX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vaosolx.dll")) returned 0x20
	[0160.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VAOSOLX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vaosolx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VAOSOLX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vaosolx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.801] SetEvent (hEvent=0xfc) returned 1
	[0160.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0007.tll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.802] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=142808) returned 1
	[0160.802] CloseHandle (hObject=0x140) returned 1
	[0160.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0007.tll")) returned 0x20
	[0160.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0007.tll")) returned 0x20
	[0160.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0007.tll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0007.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0007.tll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0009.tll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.803] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=127408) returned 1
	[0160.803] CloseHandle (hObject=0x140) returned 1
	[0160.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0009.tll")) returned 0x20
	[0160.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0009.tll")) returned 0x20
	[0160.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0009.tll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0009.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0009.tll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz000c.tll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.804] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=170968) returned 1
	[0160.804] CloseHandle (hObject=0x140) returned 1
	[0160.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz000c.tll")) returned 0x20
	[0160.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz000c.tll")) returned 0x20
	[0160.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vblz000c.tll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ000C.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz000c.tll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0011.tll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.805] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=121312) returned 1
	[0160.805] CloseHandle (hObject=0x140) returned 1
	[0160.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0011.tll")) returned 0x20
	[0160.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0011.tll")) returned 0x20
	[0160.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0011.tll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBLZ0011.TLL" (normalized: "c:\\program files\\microsoft office\\office14\\vblz0011.tll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2excl.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.806] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4296) returned 1
	[0160.806] CloseHandle (hObject=0x140) returned 1
	[0160.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2excl.xsl")) returned 0x20
	[0160.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2excl.xsl")) returned 0x20
	[0160.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2excl.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2excl.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2word.xsl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.807] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6301) returned 1
	[0160.807] CloseHandle (hObject=0x140) returned 1
	[0160.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2word.xsl")) returned 0x20
	[0160.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2word.xsl")) returned 0x20
	[0160.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2word.xsl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\office14\\vbs2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VERBWIND.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\verbwind.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.808] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=148352) returned 1
	[0160.809] CloseHandle (hObject=0x140) returned 1
	[0160.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VERBWIND.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\verbwind.dll")) returned 0x20
	[0160.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VERBWIND.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\verbwind.dll")) returned 0x20
	[0160.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VERBWIND.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\verbwind.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VERBWIND.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\verbwind.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.809] SetEvent (hEvent=0xfc) returned 1
	[0160.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VIEWMODL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\viewmodl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.810] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=140632) returned 1
	[0160.810] CloseHandle (hObject=0x140) returned 1
	[0160.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VIEWMODL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\viewmodl.dll")) returned 0x20
	[0160.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VIEWMODL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\viewmodl.dll")) returned 0x20
	[0160.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VIEWMODL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\viewmodl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VIEWMODL.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\viewmodl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISBRGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visbrgr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.811] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15704448) returned 1
	[0160.811] CloseHandle (hObject=0x140) returned 1
	[0160.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISBRGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visbrgr.dll")) returned 0x20
	[0160.811] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISBRGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visbrgr.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISBRGR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visbrgr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0160.811] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISBRGR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visbrgr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISBRGR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visbrgr.dll")) returned 0
	[0160.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISCOLOR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\viscolor.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.812] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=308080) returned 1
	[0160.812] CloseHandle (hObject=0x140) returned 1
	[0160.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISCOLOR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\viscolor.dll")) returned 0x20
	[0160.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISCOLOR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\viscolor.dll")) returned 0x20
	[0160.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISCOLOR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\viscolor.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISCOLOR.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\viscolor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.813] SetEvent (hEvent=0xfc) returned 1
	[0160.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISDLGU.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visdlgu.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.813] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=230752) returned 1
	[0160.813] CloseHandle (hObject=0x140) returned 1
	[0160.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISDLGU.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visdlgu.dll")) returned 0x20
	[0160.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISDLGU.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visdlgu.dll")) returned 0x20
	[0160.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISDLGU.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visdlgu.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISDLGU.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visdlgu.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISGRF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visgrf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.815] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=874336) returned 1
	[0160.815] CloseHandle (hObject=0x140) returned 1
	[0160.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISGRF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visgrf.dll")) returned 0x20
	[0160.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISGRF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visgrf.dll")) returned 0x20
	[0160.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISGRF.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visgrf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISGRF.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visgrf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.815] SetEvent (hEvent=0xfc) returned 1
	[0160.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISICON.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\visicon.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.816] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1162592) returned 1
	[0160.816] CloseHandle (hObject=0x140) returned 1
	[0160.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISICON.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\visicon.exe")) returned 0x20
	[0160.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISICON.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\visicon.exe")) returned 0x20
	[0160.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISICON.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visicon.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISICON.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\visicon.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.817] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=177664) returned 1
	[0160.817] CloseHandle (hObject=0x140) returned 1
	[0160.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_m.vst")) returned 0x20
	[0160.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_m.vst")) returned 0x20
	[0160.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.818] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=177664) returned 1
	[0160.818] CloseHandle (hObject=0x140) returned 1
	[0160.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_u.vst")) returned 0x20
	[0160.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_u.vst")) returned 0x20
	[0160.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ACTDIR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\actdir_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.819] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=375808) returned 1
	[0160.819] CloseHandle (hObject=0x140) returned 1
	[0160.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_m.vss")) returned 0x20
	[0160.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_m.vss")) returned 0x20
	[0160.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.822] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=370176) returned 1
	[0160.822] CloseHandle (hObject=0x140) returned 1
	[0160.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_u.vss")) returned 0x20
	[0160.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_u.vss")) returned 0x20
	[0160.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADO_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ado_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.823] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=135680) returned 1
	[0160.823] CloseHandle (hObject=0x140) returned 1
	[0160.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_m.vss")) returned 0x20
	[0160.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_m.vss")) returned 0x20
	[0160.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.824] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=132608) returned 1
	[0160.824] CloseHandle (hObject=0x140) returned 1
	[0160.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_u.vss")) returned 0x20
	[0160.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_u.vss")) returned 0x20
	[0160.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ADS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ads_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.825] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=92160) returned 1
	[0160.825] CloseHandle (hObject=0x140) returned 1
	[0160.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_m.vss")) returned 0x20
	[0160.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_m.vss")) returned 0x20
	[0160.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.826] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=91136) returned 1
	[0160.826] CloseHandle (hObject=0x140) returned 1
	[0160.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_u.vss")) returned 0x20
	[0160.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_u.vss")) returned 0x20
	[0160.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ALARM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\alarm_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0160.827] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=180736) returned 1
	[0160.827] CloseHandle (hObject=0x140) returned 1
	[0160.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_m.vss")) returned 0x20
	[0160.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_m.vss")) returned 0x20
	[0160.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0160.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ANNOT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\annot_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0160.926] SetEvent (hEvent=0xfc) returned 1
	[0160.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.039] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=128512) returned 1
	[0161.039] CloseHandle (hObject=0x140) returned 1
	[0161.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_m.vss")) returned 0x20
	[0161.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_m.vss")) returned 0x20
	[0161.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\APPL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\appl_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.039] SetEvent (hEvent=0xfc) returned 1
	[0161.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.040] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=99328) returned 1
	[0161.040] CloseHandle (hObject=0x140) returned 1
	[0161.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_m.vss")) returned 0x20
	[0161.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_m.vss")) returned 0x20
	[0161.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.041] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94208) returned 1
	[0161.041] CloseHandle (hObject=0x140) returned 1
	[0161.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_u.vss")) returned 0x20
	[0161.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_u.vss")) returned 0x20
	[0161.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BASIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\basic_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.042] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=209920) returned 1
	[0161.042] CloseHandle (hObject=0x140) returned 1
	[0161.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_m.vss")) returned 0x20
	[0161.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_m.vss")) returned 0x20
	[0161.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.043] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=198144) returned 1
	[0161.043] CloseHandle (hObject=0x140) returned 1
	[0161.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_u.vss")) returned 0x20
	[0161.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_u.vss")) returned 0x20
	[0161.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BCKGRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bckgrn_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.044] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=331776) returned 1
	[0161.044] CloseHandle (hObject=0x140) returned 1
	[0161.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_m.vss")) returned 0x20
	[0161.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_m.vss")) returned 0x20
	[0161.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.046] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=326656) returned 1
	[0161.046] CloseHandle (hObject=0x140) returned 1
	[0161.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_u.vss")) returned 0x20
	[0161.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_u.vss")) returned 0x20
	[0161.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDCOR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldcor_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.046] SetEvent (hEvent=0xfc) returned 1
	[0161.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.047] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=469613) returned 1
	[0161.047] CloseHandle (hObject=0x140) returned 1
	[0161.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg")) returned 0x20
	[0161.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg")) returned 0x20
	[0161.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.dwg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.048] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=55725) returned 1
	[0161.048] CloseHandle (hObject=0x140) returned 1
	[0161.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg")) returned 0x20
	[0161.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg")) returned 0x20
	[0161.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bldgplan.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.049] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15872) returned 1
	[0161.049] CloseHandle (hObject=0x140) returned 1
	[0161.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd")) returned 0x20
	[0161.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd")) returned 0x20
	[0161.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_M.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_m.vsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.050] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15872) returned 1
	[0161.051] CloseHandle (hObject=0x140) returned 1
	[0161.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd")) returned 0x20
	[0161.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd")) returned 0x20
	[0161.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLNKDG_U.VSD" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blnkdg_u.vsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.051] SetEvent (hEvent=0xfc) returned 1
	[0161.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.052] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137728) returned 1
	[0161.052] CloseHandle (hObject=0x140) returned 1
	[0161.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_m.vss")) returned 0x20
	[0161.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_m.vss")) returned 0x20
	[0161.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.054] SetEvent (hEvent=0xfc) returned 1
	[0161.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.054] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131584) returned 1
	[0161.054] CloseHandle (hObject=0x140) returned 1
	[0161.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_u.vss")) returned 0x20
	[0161.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_u.vss")) returned 0x20
	[0161.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK3_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block3_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.055] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=188416) returned 1
	[0161.055] CloseHandle (hObject=0x140) returned 1
	[0161.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vss")) returned 0x20
	[0161.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vss")) returned 0x20
	[0161.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.057] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24064) returned 1
	[0161.057] CloseHandle (hObject=0x140) returned 1
	[0161.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vst")) returned 0x20
	[0161.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vst")) returned 0x20
	[0161.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.057] SetEvent (hEvent=0xfc) returned 1
	[0161.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.058] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=177152) returned 1
	[0161.058] CloseHandle (hObject=0x140) returned 1
	[0161.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vss")) returned 0x20
	[0161.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vss")) returned 0x20
	[0161.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.059] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23552) returned 1
	[0161.059] CloseHandle (hObject=0x140) returned 1
	[0161.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vst")) returned 0x20
	[0161.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vst")) returned 0x20
	[0161.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blockp_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.060] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61911) returned 1
	[0161.060] CloseHandle (hObject=0x140) returned 1
	[0161.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg")) returned 0x20
	[0161.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg")) returned 0x20
	[0161.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\blocks.dwg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.061] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=147456) returned 1
	[0161.061] CloseHandle (hObject=0x140) returned 1
	[0161.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vss")) returned 0x20
	[0161.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vss")) returned 0x20
	[0161.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.062] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30720) returned 1
	[0161.062] CloseHandle (hObject=0x140) returned 1
	[0161.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vst")) returned 0x20
	[0161.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vst")) returned 0x20
	[0161.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.063] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=138240) returned 1
	[0161.063] CloseHandle (hObject=0x140) returned 1
	[0161.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vss")) returned 0x20
	[0161.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vss")) returned 0x20
	[0161.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.064] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30720) returned 1
	[0161.064] CloseHandle (hObject=0x140) returned 1
	[0161.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vst")) returned 0x20
	[0161.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vst")) returned 0x20
	[0161.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BLOCK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\block_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.066] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=138240) returned 1
	[0161.066] CloseHandle (hObject=0x140) returned 1
	[0161.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_m.vss")) returned 0x20
	[0161.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_m.vss")) returned 0x20
	[0161.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.066] SetEvent (hEvent=0xfc) returned 1
	[0161.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.067] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137728) returned 1
	[0161.067] CloseHandle (hObject=0x140) returned 1
	[0161.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_u.vss")) returned 0x20
	[0161.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_u.vss")) returned 0x20
	[0161.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BORDRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bordrs_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.069] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=584704) returned 1
	[0161.069] CloseHandle (hObject=0x140) returned 1
	[0161.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_m.vss")) returned 0x20
	[0161.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_m.vss")) returned 0x20
	[0161.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.069] SetEvent (hEvent=0xfc) returned 1
	[0161.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.070] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=580096) returned 1
	[0161.070] CloseHandle (hObject=0x140) returned 1
	[0161.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_u.vss")) returned 0x20
	[0161.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_u.vss")) returned 0x20
	[0161.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmna_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.071] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=59392) returned 1
	[0161.071] CloseHandle (hObject=0x140) returned 1
	[0161.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_m.vss")) returned 0x20
	[0161.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_m.vss")) returned 0x20
	[0161.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.072] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=58880) returned 1
	[0161.072] CloseHandle (hObject=0x140) returned 1
	[0161.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_u.vss")) returned 0x20
	[0161.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_u.vss")) returned 0x20
	[0161.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmnc_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.073] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=731648) returned 1
	[0161.073] CloseHandle (hObject=0x140) returned 1
	[0161.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_m.vss")) returned 0x20
	[0161.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_m.vss")) returned 0x20
	[0161.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.249] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=722432) returned 1
	[0161.249] CloseHandle (hObject=0x140) returned 1
	[0161.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_u.vss")) returned 0x20
	[0161.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_u.vss")) returned 0x20
	[0161.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\BPMNE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\bpmne_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.250] SetEvent (hEvent=0xfc) returned 1
	[0161.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0161.438] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=81920) returned 1
	[0161.438] CloseHandle (hObject=0x140) returned 1
	[0161.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vst")) returned 0x20
	[0161.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vst")) returned 0x20
	[0161.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALNDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calndr_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.438] SetEvent (hEvent=0xfc) returned 1
	[0161.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0161.581] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=130048) returned 1
	[0161.581] CloseHandle (hObject=0x1f4) returned 1
	[0161.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_u.vss")) returned 0x20
	[0161.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_u.vss")) returned 0x20
	[0161.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\CALOUT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\calout_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.581] SetEvent (hEvent=0xfc) returned 1
	[0161.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0161.689] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=107008) returned 1
	[0161.689] CloseHandle (hObject=0x1f4) returned 1
	[0161.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_m.vss")) returned 0x20
	[0161.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_m.vss")) returned 0x20
	[0161.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DGICON_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dgicon_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.689] SetEvent (hEvent=0xfc) returned 1
	[0161.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimarc_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0161.690] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=196608) returned 1
	[0161.690] CloseHandle (hObject=0x1f4) returned 1
	[0161.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimarc_u.vss")) returned 0x20
	[0161.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimarc_u.vss")) returned 0x20
	[0161.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimarc_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMARC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimarc_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0161.691] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=192512) returned 1
	[0161.691] CloseHandle (hObject=0x1f4) returned 1
	[0161.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_m.vss")) returned 0x20
	[0161.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_m.vss")) returned 0x20
	[0161.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0161.692] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185856) returned 1
	[0161.692] CloseHandle (hObject=0x1f4) returned 1
	[0161.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_u.vss")) returned 0x20
	[0161.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_u.vss")) returned 0x20
	[0161.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DIMENG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dimeng_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.815] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=109568) returned 1
	[0161.816] CloseHandle (hObject=0x1f8) returned 1
	[0161.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_m.vss")) returned 0x20
	[0161.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_m.vss")) returned 0x20
	[0161.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DRAWTL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\drawtl_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.816] SetEvent (hEvent=0xfc) returned 1
	[0161.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.817] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=407040) returned 1
	[0161.817] CloseHandle (hObject=0x1f8) returned 1
	[0161.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vss")) returned 0x20
	[0161.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vss")) returned 0x20
	[0161.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.818] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=123904) returned 1
	[0161.818] CloseHandle (hObject=0x1f8) returned 1
	[0161.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vst")) returned 0x20
	[0161.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vst")) returned 0x20
	[0161.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DTLNET_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dtlnet_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.819] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=313344) returned 1
	[0161.819] CloseHandle (hObject=0x1f8) returned 1
	[0161.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_m.vss")) returned 0x20
	[0161.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_m.vss")) returned 0x20
	[0161.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.820] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=308736) returned 1
	[0161.820] CloseHandle (hObject=0x1f8) returned 1
	[0161.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_u.vss")) returned 0x20
	[0161.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_u.vss")) returned 0x20
	[0161.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DVCALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dvcall_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_m.vtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.821] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1010079) returned 1
	[0161.821] CloseHandle (hObject=0x1f8) returned 1
	[0161.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_m.vtx")) returned 0x20
	[0161.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_m.vtx")) returned 0x20
	[0161.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_m.vtx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_M.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_m.vtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_u.vtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.822] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=979468) returned 1
	[0161.822] CloseHandle (hObject=0x1f8) returned 1
	[0161.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_u.vtx")) returned 0x20
	[0161.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_u.vtx")) returned 0x20
	[0161.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_u.vtx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\DWGCNV_U.VTX" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\dwgcnv_u.vtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.823] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=381952) returned 1
	[0161.823] CloseHandle (hObject=0x1f8) returned 1
	[0161.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vss")) returned 0x20
	[0161.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vss")) returned 0x20
	[0161.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0161.826] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33280) returned 1
	[0161.826] CloseHandle (hObject=0x1f8) returned 1
	[0161.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vst")) returned 0x20
	[0161.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vst")) returned 0x20
	[0161.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0161.905] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=372736) returned 1
	[0161.905] CloseHandle (hObject=0x20c) returned 1
	[0161.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vss")) returned 0x20
	[0161.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vss")) returned 0x20
	[0161.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0161.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EECHIP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eechip_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0161.906] SetEvent (hEvent=0xfc) returned 1
	[0161.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.000] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=34304) returned 1
	[0162.000] CloseHandle (hObject=0x1f4) returned 1
	[0162.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_m.vst")) returned 0x20
	[0162.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_m.vst")) returned 0x20
	[0162.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EESYS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eesys_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.001] SetEvent (hEvent=0xfc) returned 1
	[0162.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.001] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=127488) returned 1
	[0162.001] CloseHandle (hObject=0x1f4) returned 1
	[0162.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_m.vss")) returned 0x20
	[0162.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_m.vss")) returned 0x20
	[0162.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.002] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=119296) returned 1
	[0162.002] CloseHandle (hObject=0x1f4) returned 1
	[0162.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_u.vss")) returned 0x20
	[0162.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_u.vss")) returned 0x20
	[0162.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETCOM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetcom_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.004] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=150528) returned 1
	[0162.004] CloseHandle (hObject=0x20c) returned 1
	[0162.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_m.vss")) returned 0x20
	[0162.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_m.vss")) returned 0x20
	[0162.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.005] SetEvent (hEvent=0xfc) returned 1
	[0162.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.005] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=145920) returned 1
	[0162.005] CloseHandle (hObject=0x20c) returned 1
	[0162.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_u.vss")) returned 0x20
	[0162.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_u.vss")) returned 0x20
	[0162.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETERM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eeterm_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.006] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=101376) returned 1
	[0162.006] CloseHandle (hObject=0x20c) returned 1
	[0162.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_m.vss")) returned 0x20
	[0162.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_m.vss")) returned 0x20
	[0162.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.007] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=97280) returned 1
	[0162.007] CloseHandle (hObject=0x20c) returned 1
	[0162.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_u.vss")) returned 0x20
	[0162.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_u.vss")) returned 0x20
	[0162.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EETRAN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eetran_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.009] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=167424) returned 1
	[0162.009] CloseHandle (hObject=0x20c) returned 1
	[0162.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_m.vss")) returned 0x20
	[0162.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_m.vss")) returned 0x20
	[0162.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.009] SetEvent (hEvent=0xfc) returned 1
	[0162.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.010] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=162816) returned 1
	[0162.010] CloseHandle (hObject=0x20c) returned 1
	[0162.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_u.vss")) returned 0x20
	[0162.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_u.vss")) returned 0x20
	[0162.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EEVHF_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eevhf_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.012] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=154624) returned 1
	[0162.012] CloseHandle (hObject=0x20c) returned 1
	[0162.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vss")) returned 0x20
	[0162.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vss")) returned 0x20
	[0162.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0162.013] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51712) returned 1
	[0162.013] CloseHandle (hObject=0x20c) returned 1
	[0162.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vst")) returned 0x20
	[0162.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vst")) returned 0x20
	[0162.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.016] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=162304) returned 1
	[0162.016] CloseHandle (hObject=0x1f4) returned 1
	[0162.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vss")) returned 0x20
	[0162.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vss")) returned 0x20
	[0162.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.016] SetEvent (hEvent=0xfc) returned 1
	[0162.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.017] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52224) returned 1
	[0162.017] CloseHandle (hObject=0x1f4) returned 1
	[0162.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vst")) returned 0x20
	[0162.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vst")) returned 0x20
	[0162.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ELETEL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\eletel_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.018] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=366080) returned 1
	[0162.018] CloseHandle (hObject=0x1f4) returned 1
	[0162.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_m.vss")) returned 0x20
	[0162.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_m.vss")) returned 0x20
	[0162.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.019] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=347136) returned 1
	[0162.019] CloseHandle (hObject=0x1f4) returned 1
	[0162.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_u.vss")) returned 0x20
	[0162.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_u.vss")) returned 0x20
	[0162.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\EMBELL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\embell_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.248] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=447488) returned 1
	[0162.248] CloseHandle (hObject=0x168) returned 1
	[0162.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vss")) returned 0x20
	[0162.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vss")) returned 0x20
	[0162.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ENTAPP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\entapp_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.249] SetEvent (hEvent=0xfc) returned 1
	[0162.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.250] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=286208) returned 1
	[0162.250] CloseHandle (hObject=0x168) returned 1
	[0162.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_u.vss")) returned 0x20
	[0162.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_u.vss")) returned 0x20
	[0162.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpeqp_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.251] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=238080) returned 1
	[0162.251] CloseHandle (hObject=0x168) returned 1
	[0162.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_m.vss")) returned 0x20
	[0162.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_m.vss")) returned 0x20
	[0162.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.252] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=216064) returned 1
	[0162.252] CloseHandle (hObject=0x168) returned 1
	[0162.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_u.vss")) returned 0x20
	[0162.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_u.vss")) returned 0x20
	[0162.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FPVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\fpvalv_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.389] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=111616) returned 1
	[0162.389] CloseHandle (hObject=0x1f4) returned 1
	[0162.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_m.vss")) returned 0x20
	[0162.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_m.vss")) returned 0x20
	[0162.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\FREEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\freeqp_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.389] SetEvent (hEvent=0xfc) returned 1
	[0162.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.390] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=57344) returned 1
	[0162.390] CloseHandle (hObject=0x1f4) returned 1
	[0162.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_u.vss")) returned 0x20
	[0162.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_u.vss")) returned 0x20
	[0162.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\IRRIG_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\irrig_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.391] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=423424) returned 1
	[0162.391] CloseHandle (hObject=0x1f4) returned 1
	[0162.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vss")) returned 0x20
	[0162.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vss")) returned 0x20
	[0162.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.392] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=101376) returned 1
	[0162.392] CloseHandle (hObject=0x1f4) returned 1
	[0162.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vst")) returned 0x20
	[0162.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vst")) returned 0x20
	[0162.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.393] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=416768) returned 1
	[0162.393] CloseHandle (hObject=0x1f4) returned 1
	[0162.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vss")) returned 0x20
	[0162.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vss")) returned 0x20
	[0162.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.394] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=101376) returned 1
	[0162.395] CloseHandle (hObject=0x1f4) returned 1
	[0162.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vst")) returned 0x20
	[0162.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vst")) returned 0x20
	[0162.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ITIL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\itil_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.395] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56832) returned 1
	[0162.396] CloseHandle (hObject=0x1f4) returned 1
	[0162.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_m.vss")) returned 0x20
	[0162.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_m.vss")) returned 0x20
	[0162.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.400] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=55808) returned 1
	[0162.400] CloseHandle (hObject=0x168) returned 1
	[0162.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_u.vss")) returned 0x20
	[0162.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_u.vss")) returned 0x20
	[0162.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LANGLV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\langlv_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.400] SetEvent (hEvent=0xfc) returned 1
	[0162.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.401] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56832) returned 1
	[0162.401] CloseHandle (hObject=0x168) returned 1
	[0162.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_m.vst")) returned 0x20
	[0162.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_m.vst")) returned 0x20
	[0162.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.402] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56832) returned 1
	[0162.402] CloseHandle (hObject=0x168) returned 1
	[0162.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_u.vst")) returned 0x20
	[0162.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_u.vst")) returned 0x20
	[0162.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPDR_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapdr_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.403] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=269824) returned 1
	[0162.403] CloseHandle (hObject=0x168) returned 1
	[0162.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_m.vss")) returned 0x20
	[0162.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_m.vss")) returned 0x20
	[0162.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.404] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=265216) returned 1
	[0162.405] CloseHandle (hObject=0x168) returned 1
	[0162.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_u.vss")) returned 0x20
	[0162.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_u.vss")) returned 0x20
	[0162.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LDAPOB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ldapob_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.406] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29696) returned 1
	[0162.406] CloseHandle (hObject=0x168) returned 1
	[0162.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_m.vss")) returned 0x20
	[0162.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_m.vss")) returned 0x20
	[0162.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.407] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28672) returned 1
	[0162.407] CloseHandle (hObject=0x168) returned 1
	[0162.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_u.vss")) returned 0x20
	[0162.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_u.vss")) returned 0x20
	[0162.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LEGEND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\legend_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0162.410] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=229888) returned 1
	[0162.410] CloseHandle (hObject=0x208) returned 1
	[0162.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_m.vss")) returned 0x20
	[0162.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_m.vss")) returned 0x20
	[0162.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.410] SetEvent (hEvent=0xfc) returned 1
	[0162.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0162.411] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=226816) returned 1
	[0162.411] CloseHandle (hObject=0x208) returned 1
	[0162.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_u.vss")) returned 0x20
	[0162.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_u.vss")) returned 0x20
	[0162.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LGND_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lgnd_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0162.412] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=74240) returned 1
	[0162.412] CloseHandle (hObject=0x208) returned 1
	[0162.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_m.vss")) returned 0x20
	[0162.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_m.vss")) returned 0x20
	[0162.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0162.413] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73728) returned 1
	[0162.413] CloseHandle (hObject=0x208) returned 1
	[0162.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_u.vss")) returned 0x20
	[0162.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_u.vss")) returned 0x20
	[0162.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LINPAT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\linpat_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.416] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=923648) returned 1
	[0162.416] CloseHandle (hObject=0x168) returned 1
	[0162.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_m.vss")) returned 0x20
	[0162.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_m.vss")) returned 0x20
	[0162.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.417] SetEvent (hEvent=0xfc) returned 1
	[0162.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.417] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=919552) returned 1
	[0162.417] CloseHandle (hObject=0x168) returned 1
	[0162.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_u.vss")) returned 0x20
	[0162.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_u.vss")) returned 0x20
	[0162.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LNDMRK_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\lndmrk_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.419] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185856) returned 1
	[0162.419] CloseHandle (hObject=0x168) returned 1
	[0162.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_m.vss")) returned 0x20
	[0162.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_m.vss")) returned 0x20
	[0162.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.420] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=182272) returned 1
	[0162.420] CloseHandle (hObject=0x168) returned 1
	[0162.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_u.vss")) returned 0x20
	[0162.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_u.vss")) returned 0x20
	[0162.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\LOGIC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\logic_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.491] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=219136) returned 1
	[0162.491] CloseHandle (hObject=0x204) returned 1
	[0162.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vss")) returned 0x20
	[0162.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vss")) returned 0x20
	[0162.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\MAP3D_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\map3d_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.492] SetEvent (hEvent=0xfc) returned 1
	[0162.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.492] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35840) returned 1
	[0162.492] CloseHandle (hObject=0x204) returned 1
	[0162.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_m.vss")) returned 0x20
	[0162.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_m.vss")) returned 0x20
	[0162.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.493] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=34816) returned 1
	[0162.493] CloseHandle (hObject=0x204) returned 1
	[0162.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_u.vss")) returned 0x20
	[0162.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_u.vss")) returned 0x20
	[0162.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETRM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netrm_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.494] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=314880) returned 1
	[0162.494] CloseHandle (hObject=0x204) returned 1
	[0162.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_m.vss")) returned 0x20
	[0162.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_m.vss")) returned 0x20
	[0162.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.497] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=310272) returned 1
	[0162.497] CloseHandle (hObject=0x204) returned 1
	[0162.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_u.vss")) returned 0x20
	[0162.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_u.vss")) returned 0x20
	[0162.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETSYM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netsym_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.498] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=82944) returned 1
	[0162.498] CloseHandle (hObject=0x204) returned 1
	[0162.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_m.vst")) returned 0x20
	[0162.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_m.vst")) returned 0x20
	[0162.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.499] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=82944) returned 1
	[0162.499] CloseHandle (hObject=0x204) returned 1
	[0162.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_u.vst")) returned 0x20
	[0162.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_u.vst")) returned 0x20
	[0162.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\NETW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\netw_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.500] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=71168) returned 1
	[0162.500] CloseHandle (hObject=0x204) returned 1
	[0162.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_m.vss")) returned 0x20
	[0162.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_m.vss")) returned 0x20
	[0162.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.501] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70144) returned 1
	[0162.501] CloseHandle (hObject=0x204) returned 1
	[0162.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_u.vss")) returned 0x20
	[0162.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_u.vss")) returned 0x20
	[0162.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OBJREL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\objrel_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.502] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=91136) returned 1
	[0162.502] CloseHandle (hObject=0x204) returned 1
	[0162.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_m.vss")) returned 0x20
	[0162.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_m.vss")) returned 0x20
	[0162.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.515] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89088) returned 1
	[0162.515] CloseHandle (hObject=0x1f4) returned 1
	[0162.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_u.vss")) returned 0x20
	[0162.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_u.vss")) returned 0x20
	[0162.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offacc_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.515] SetEvent (hEvent=0xfc) returned 1
	[0162.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.516] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=206336) returned 1
	[0162.516] CloseHandle (hObject=0x1f4) returned 1
	[0162.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_m.vss")) returned 0x20
	[0162.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_m.vss")) returned 0x20
	[0162.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.517] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=194048) returned 1
	[0162.517] CloseHandle (hObject=0x1f4) returned 1
	[0162.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_u.vss")) returned 0x20
	[0162.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_u.vss")) returned 0x20
	[0162.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offeqp_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.518] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=487424) returned 1
	[0162.518] CloseHandle (hObject=0x1f4) returned 1
	[0162.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_m.vss")) returned 0x20
	[0162.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_m.vss")) returned 0x20
	[0162.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.520] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=481280) returned 1
	[0162.520] CloseHandle (hObject=0x1f4) returned 1
	[0162.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_u.vss")) returned 0x20
	[0162.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_u.vss")) returned 0x20
	[0162.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFFRN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offfrn_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.521] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=71168) returned 1
	[0162.521] CloseHandle (hObject=0x1f4) returned 1
	[0162.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_m.vst")) returned 0x20
	[0162.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_m.vst")) returned 0x20
	[0162.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0162.522] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=71168) returned 1
	[0162.522] CloseHandle (hObject=0x1f4) returned 1
	[0162.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_u.vst")) returned 0x20
	[0162.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_u.vst")) returned 0x20
	[0162.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\OFFLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\offlyt_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.533] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=152064) returned 1
	[0162.533] CloseHandle (hObject=0x204) returned 1
	[0162.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vss")) returned 0x20
	[0162.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vss")) returned 0x20
	[0162.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.533] SetEvent (hEvent=0xfc) returned 1
	[0162.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.534] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33280) returned 1
	[0162.534] CloseHandle (hObject=0x204) returned 1
	[0162.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vst")) returned 0x20
	[0162.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vst")) returned 0x20
	[0162.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.535] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=147456) returned 1
	[0162.535] CloseHandle (hObject=0x204) returned 1
	[0162.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vss")) returned 0x20
	[0162.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vss")) returned 0x20
	[0162.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.536] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33280) returned 1
	[0162.536] CloseHandle (hObject=0x204) returned 1
	[0162.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vst")) returned 0x20
	[0162.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vst")) returned 0x20
	[0162.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGCH_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgch_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.537] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4933) returned 1
	[0162.537] CloseHandle (hObject=0x204) returned 1
	[0162.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt")) returned 0x20
	[0162.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt")) returned 0x20
	[0162.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.538] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26112) returned 1
	[0162.538] CloseHandle (hObject=0x204) returned 1
	[0162.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls")) returned 0x20
	[0162.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls")) returned 0x20
	[0162.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgdata.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.539] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33280) returned 1
	[0162.539] CloseHandle (hObject=0x204) returned 1
	[0162.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_m.vst")) returned 0x20
	[0162.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_m.vst")) returned 0x20
	[0162.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.540] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33280) returned 1
	[0162.540] CloseHandle (hObject=0x204) returned 1
	[0162.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_u.vst")) returned 0x20
	[0162.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_u.vst")) returned 0x20
	[0162.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ORGWIZ_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\orgwiz_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0162.541] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=425472) returned 1
	[0162.541] CloseHandle (hObject=0x204) returned 1
	[0162.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_m.vst")) returned 0x20
	[0162.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_m.vst")) returned 0x20
	[0162.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.552] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=421888) returned 1
	[0162.553] CloseHandle (hObject=0x168) returned 1
	[0162.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_u.vst")) returned 0x20
	[0162.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_u.vst")) returned 0x20
	[0162.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBASLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pbasln_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.553] SetEvent (hEvent=0xfc) returned 1
	[0162.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.554] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=112128) returned 1
	[0162.554] CloseHandle (hObject=0x168) returned 1
	[0162.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_m.vst")) returned 0x20
	[0162.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_m.vst")) returned 0x20
	[0162.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.555] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=112128) returned 1
	[0162.555] CloseHandle (hObject=0x168) returned 1
	[0162.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_u.vst")) returned 0x20
	[0162.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_u.vst")) returned 0x20
	[0162.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PBLANK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pblank_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.556] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=416256) returned 1
	[0162.556] CloseHandle (hObject=0x168) returned 1
	[0162.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_m.vst")) returned 0x20
	[0162.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_m.vst")) returned 0x20
	[0162.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.557] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=413696) returned 1
	[0162.557] CloseHandle (hObject=0x168) returned 1
	[0162.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_u.vst")) returned 0x20
	[0162.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_u.vst")) returned 0x20
	[0162.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCRTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcrtsk_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.558] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=321024) returned 1
	[0162.558] CloseHandle (hObject=0x168) returned 1
	[0162.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_m.vst")) returned 0x20
	[0162.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_m.vst")) returned 0x20
	[0162.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0162.559] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=317952) returned 1
	[0162.643] CloseHandle (hObject=0x168) returned 1
	[0162.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_u.vst")) returned 0x20
	[0162.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_u.vst")) returned 0x20
	[0162.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PCSHFL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pcshfl_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.644] SetEvent (hEvent=0xfc) returned 1
	[0162.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.743] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=108032) returned 1
	[0162.743] CloseHandle (hObject=0x140) returned 1
	[0162.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_u.vss")) returned 0x20
	[0162.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_u.vss")) returned 0x20
	[0162.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEANNT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peannt_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.743] SetEvent (hEvent=0xfc) returned 1
	[0162.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.744] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=330752) returned 1
	[0162.744] CloseHandle (hObject=0x140) returned 1
	[0162.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_u.vss")) returned 0x20
	[0162.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_u.vss")) returned 0x20
	[0162.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEINST_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\peinst_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.745] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35840) returned 1
	[0162.745] CloseHandle (hObject=0x140) returned 1
	[0162.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vss")) returned 0x20
	[0162.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vss")) returned 0x20
	[0162.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.746] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=120832) returned 1
	[0162.746] CloseHandle (hObject=0x140) returned 1
	[0162.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vst")) returned 0x20
	[0162.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vst")) returned 0x20
	[0162.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.747] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35328) returned 1
	[0162.747] CloseHandle (hObject=0x140) returned 1
	[0162.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vss")) returned 0x20
	[0162.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vss")) returned 0x20
	[0162.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.748] SetEvent (hEvent=0xfc) returned 1
	[0162.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.748] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=119808) returned 1
	[0162.748] CloseHandle (hObject=0x140) returned 1
	[0162.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vst")) returned 0x20
	[0162.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vst")) returned 0x20
	[0162.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPIPE_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepipe_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.749] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131584) returned 1
	[0162.749] CloseHandle (hObject=0x140) returned 1
	[0162.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_m.vss")) returned 0x20
	[0162.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_m.vss")) returned 0x20
	[0162.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.750] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=128512) returned 1
	[0162.750] CloseHandle (hObject=0x140) returned 1
	[0162.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_u.vss")) returned 0x20
	[0162.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_u.vss")) returned 0x20
	[0162.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEPUMP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pepump_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.752] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=564224) returned 1
	[0162.752] CloseHandle (hObject=0x140) returned 1
	[0162.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_m.vss")) returned 0x20
	[0162.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_m.vss")) returned 0x20
	[0162.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.752] SetEvent (hEvent=0xfc) returned 1
	[0162.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.753] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=556032) returned 1
	[0162.753] CloseHandle (hObject=0x140) returned 1
	[0162.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_u.vss")) returned 0x20
	[0162.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_u.vss")) returned 0x20
	[0162.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERIPH_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\periph_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.755] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=48640) returned 1
	[0162.755] CloseHandle (hObject=0x140) returned 1
	[0162.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vss")) returned 0x20
	[0162.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vss")) returned 0x20
	[0162.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.756] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29696) returned 1
	[0162.756] CloseHandle (hObject=0x140) returned 1
	[0162.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vst")) returned 0x20
	[0162.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vst")) returned 0x20
	[0162.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.757] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47104) returned 1
	[0162.757] CloseHandle (hObject=0x140) returned 1
	[0162.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vss")) returned 0x20
	[0162.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vss")) returned 0x20
	[0162.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.758] SetEvent (hEvent=0xfc) returned 1
	[0162.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.758] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29696) returned 1
	[0162.758] CloseHandle (hObject=0x140) returned 1
	[0162.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vst")) returned 0x20
	[0162.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vst")) returned 0x20
	[0162.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PERT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pert_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.759] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=206848) returned 1
	[0162.759] CloseHandle (hObject=0x140) returned 1
	[0162.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_m.vss")) returned 0x20
	[0162.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_m.vss")) returned 0x20
	[0162.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.760] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=201728) returned 1
	[0162.760] CloseHandle (hObject=0x140) returned 1
	[0162.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_u.vss")) returned 0x20
	[0162.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_u.vss")) returned 0x20
	[0162.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVALV_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevalv_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.763] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=109056) returned 1
	[0162.763] CloseHandle (hObject=0x140) returned 1
	[0162.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_m.vss")) returned 0x20
	[0162.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_m.vss")) returned 0x20
	[0162.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.763] SetEvent (hEvent=0xfc) returned 1
	[0162.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.764] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=106496) returned 1
	[0162.764] CloseHandle (hObject=0x140) returned 1
	[0162.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_u.vss")) returned 0x20
	[0162.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_u.vss")) returned 0x20
	[0162.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PEVESS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pevess_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.765] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=271872) returned 1
	[0162.765] CloseHandle (hObject=0x140) returned 1
	[0162.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_m.vss")) returned 0x20
	[0162.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_m.vss")) returned 0x20
	[0162.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.766] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222720) returned 1
	[0162.766] CloseHandle (hObject=0x140) returned 1
	[0162.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_u.vss")) returned 0x20
	[0162.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_u.vss")) returned 0x20
	[0162.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe1_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.767] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=166912) returned 1
	[0162.767] CloseHandle (hObject=0x140) returned 1
	[0162.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_m.vss")) returned 0x20
	[0162.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_m.vss")) returned 0x20
	[0162.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.768] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=150528) returned 1
	[0162.768] CloseHandle (hObject=0x140) returned 1
	[0162.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_u.vss")) returned 0x20
	[0162.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_u.vss")) returned 0x20
	[0162.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PIPE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pipe2_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.769] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=353792) returned 1
	[0162.769] CloseHandle (hObject=0x140) returned 1
	[0162.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_m.vss")) returned 0x20
	[0162.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_m.vss")) returned 0x20
	[0162.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.771] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=331776) returned 1
	[0162.771] CloseHandle (hObject=0x140) returned 1
	[0162.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_u.vss")) returned 0x20
	[0162.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_u.vss")) returned 0x20
	[0162.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLANT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plant_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.771] SetEvent (hEvent=0xfc) returned 1
	[0162.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.772] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=64000) returned 1
	[0162.772] CloseHandle (hObject=0x140) returned 1
	[0162.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_m.vst")) returned 0x20
	[0162.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_m.vst")) returned 0x20
	[0162.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.773] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=63488) returned 1
	[0162.773] CloseHandle (hObject=0x140) returned 1
	[0162.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_u.vst")) returned 0x20
	[0162.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_u.vst")) returned 0x20
	[0162.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLMPIP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plmpip_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.774] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90624) returned 1
	[0162.774] CloseHandle (hObject=0x140) returned 1
	[0162.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_m.vst")) returned 0x20
	[0162.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_m.vst")) returned 0x20
	[0162.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.775] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90112) returned 1
	[0162.775] CloseHandle (hObject=0x140) returned 1
	[0162.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_u.vst")) returned 0x20
	[0162.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_u.vst")) returned 0x20
	[0162.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLTLYT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pltlyt_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.776] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131072) returned 1
	[0162.776] CloseHandle (hObject=0x140) returned 1
	[0162.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_m.vss")) returned 0x20
	[0162.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_m.vss")) returned 0x20
	[0162.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0162.777] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=122880) returned 1
	[0162.777] CloseHandle (hObject=0x140) returned 1
	[0162.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_u.vss")) returned 0x20
	[0162.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_u.vss")) returned 0x20
	[0162.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0162.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PLUMB_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\plumb_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0162.879] SetEvent (hEvent=0xfc) returned 1
	[0162.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.018] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1012224) returned 1
	[0163.018] CloseHandle (hObject=0x168) returned 1
	[0163.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_m.vst")) returned 0x20
	[0163.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_m.vst")) returned 0x20
	[0163.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRJMGT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prjmgt_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.018] SetEvent (hEvent=0xfc) returned 1
	[0163.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.019] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16384) returned 1
	[0163.019] CloseHandle (hObject=0x168) returned 1
	[0163.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls")) returned 0x20
	[0163.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls")) returned 0x20
	[0163.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.020] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=406528) returned 1
	[0163.020] CloseHandle (hObject=0x168) returned 1
	[0163.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_m.vst")) returned 0x20
	[0163.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_m.vst")) returned 0x20
	[0163.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.021] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=405504) returned 1
	[0163.021] CloseHandle (hObject=0x168) returned 1
	[0163.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_u.vst")) returned 0x20
	[0163.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_u.vst")) returned 0x20
	[0163.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PROJTL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\projtl_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.023] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=587776) returned 1
	[0163.023] CloseHandle (hObject=0x168) returned 1
	[0163.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_m.vst")) returned 0x20
	[0163.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_m.vst")) returned 0x20
	[0163.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.024] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=583680) returned 1
	[0163.024] CloseHandle (hObject=0x168) returned 1
	[0163.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_u.vst")) returned 0x20
	[0163.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_u.vst")) returned 0x20
	[0163.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSAVL_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prsavl_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.025] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=332800) returned 1
	[0163.025] CloseHandle (hObject=0x168) returned 1
	[0163.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_m.vst")) returned 0x20
	[0163.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_m.vst")) returned 0x20
	[0163.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.026] SetEvent (hEvent=0xfc) returned 1
	[0163.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.026] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=330752) returned 1
	[0163.026] CloseHandle (hObject=0x168) returned 1
	[0163.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_u.vst")) returned 0x20
	[0163.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_u.vst")) returned 0x20
	[0163.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PRSSTS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\prssts_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.027] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24064) returned 1
	[0163.027] CloseHandle (hObject=0x168) returned 1
	[0163.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_m.vst")) returned 0x20
	[0163.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_m.vst")) returned 0x20
	[0163.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.028] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23552) returned 1
	[0163.028] CloseHandle (hObject=0x168) returned 1
	[0163.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_u.vst")) returned 0x20
	[0163.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_u.vst")) returned 0x20
	[0163.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PSTRCT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\pstrct_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.030] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39424) returned 1
	[0163.030] CloseHandle (hObject=0x168) returned 1
	[0163.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_m.vss")) returned 0x20
	[0163.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_m.vss")) returned 0x20
	[0163.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.030] SetEvent (hEvent=0xfc) returned 1
	[0163.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.031] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40960) returned 1
	[0163.031] CloseHandle (hObject=0x168) returned 1
	[0163.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_u.vss")) returned 0x20
	[0163.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_u.vss")) returned 0x20
	[0163.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSCLD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptscld_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.032] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=364544) returned 1
	[0163.032] CloseHandle (hObject=0x168) returned 1
	[0163.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_m.vss")) returned 0x20
	[0163.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_m.vss")) returned 0x20
	[0163.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.033] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=355840) returned 1
	[0163.033] CloseHandle (hObject=0x168) returned 1
	[0163.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_u.vss")) returned 0x20
	[0163.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_u.vss")) returned 0x20
	[0163.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSINT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptsint_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.034] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=375808) returned 1
	[0163.034] CloseHandle (hObject=0x168) returned 1
	[0163.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_m.vst")) returned 0x20
	[0163.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_m.vst")) returned 0x20
	[0163.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.035] SetEvent (hEvent=0xfc) returned 1
	[0163.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.035] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=373760) returned 1
	[0163.035] CloseHandle (hObject=0x168) returned 1
	[0163.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_u.vst")) returned 0x20
	[0163.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_u.vst")) returned 0x20
	[0163.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTSKST_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptskst_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.036] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=154624) returned 1
	[0163.036] CloseHandle (hObject=0x168) returned 1
	[0163.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_m.vss")) returned 0x20
	[0163.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_m.vss")) returned 0x20
	[0163.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.037] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=154112) returned 1
	[0163.037] CloseHandle (hObject=0x168) returned 1
	[0163.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_u.vss")) returned 0x20
	[0163.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_u.vss")) returned 0x20
	[0163.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\PTUSCL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ptuscl_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.043] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=220160) returned 1
	[0163.043] CloseHandle (hObject=0x1f8) returned 1
	[0163.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_m.vst")) returned 0x20
	[0163.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_m.vst")) returned 0x20
	[0163.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.043] SetEvent (hEvent=0xfc) returned 1
	[0163.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.044] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=220672) returned 1
	[0163.044] CloseHandle (hObject=0x1f8) returned 1
	[0163.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_u.vst")) returned 0x20
	[0163.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_u.vst")) returned 0x20
	[0163.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RACK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rack_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.045] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=346624) returned 1
	[0163.045] CloseHandle (hObject=0x1f8) returned 1
	[0163.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_m.vss")) returned 0x20
	[0163.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_m.vss")) returned 0x20
	[0163.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.046] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341504) returned 1
	[0163.046] CloseHandle (hObject=0x1f8) returned 1
	[0163.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_u.vss")) returned 0x20
	[0163.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_u.vss")) returned 0x20
	[0163.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKEQP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rckeqp_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.047] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=884224) returned 1
	[0163.047] CloseHandle (hObject=0x13c) returned 1
	[0163.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_m.vss")) returned 0x20
	[0163.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_m.vss")) returned 0x20
	[0163.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.048] SetEvent (hEvent=0xfc) returned 1
	[0163.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.048] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=879104) returned 1
	[0163.048] CloseHandle (hObject=0x13c) returned 1
	[0163.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_u.vss")) returned 0x20
	[0163.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_u.vss")) returned 0x20
	[0163.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RCKSVR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\rcksvr_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.049] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=118784) returned 1
	[0163.049] CloseHandle (hObject=0x13c) returned 1
	[0163.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_m.vss")) returned 0x20
	[0163.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_m.vss")) returned 0x20
	[0163.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.050] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114688) returned 1
	[0163.050] CloseHandle (hObject=0x13c) returned 1
	[0163.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_u.vss")) returned 0x20
	[0163.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_u.vss")) returned 0x20
	[0163.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECRT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recrt_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.052] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=282624) returned 1
	[0163.052] CloseHandle (hObject=0x13c) returned 1
	[0163.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_m.vss")) returned 0x20
	[0163.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_m.vss")) returned 0x20
	[0163.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.052] SetEvent (hEvent=0xfc) returned 1
	[0163.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.053] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=270848) returned 1
	[0163.053] CloseHandle (hObject=0x13c) returned 1
	[0163.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_u.vss")) returned 0x20
	[0163.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_u.vss")) returned 0x20
	[0163.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\RECSHP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\recshp_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.054] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=64512) returned 1
	[0163.054] CloseHandle (hObject=0x13c) returned 1
	[0163.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_m.vss")) returned 0x20
	[0163.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_m.vss")) returned 0x20
	[0163.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.055] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=63488) returned 1
	[0163.055] CloseHandle (hObject=0x13c) returned 1
	[0163.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_u.vss")) returned 0x20
	[0163.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_u.vss")) returned 0x20
	[0163.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\REGSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\regstr_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.056] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=63488) returned 1
	[0163.056] CloseHandle (hObject=0x13c) returned 1
	[0163.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_m.vss")) returned 0x20
	[0163.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_m.vss")) returned 0x20
	[0163.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.057] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=88064) returned 1
	[0163.057] CloseHandle (hObject=0x13c) returned 1
	[0163.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_u.vss")) returned 0x20
	[0163.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_u.vss")) returned 0x20
	[0163.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\ROAD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\road_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0163.058] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24064) returned 1
	[0163.058] CloseHandle (hObject=0x13c) returned 1
	[0163.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls")) returned 0x20
	[0163.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls")) returned 0x20
	[0163.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SALSUM.XLS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\salsum.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.272] SetEvent (hEvent=0xfc) returned 1
	[0163.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.603] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=232448) returned 1
	[0163.603] CloseHandle (hObject=0x1f4) returned 1
	[0163.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_m.vss")) returned 0x20
	[0163.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_m.vss")) returned 0x20
	[0163.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SDCONT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sdcont_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.603] SetEvent (hEvent=0xfc) returned 1
	[0163.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.604] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=142848) returned 1
	[0163.604] CloseHandle (hObject=0x1f4) returned 1
	[0163.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_m.vss")) returned 0x20
	[0163.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_m.vss")) returned 0x20
	[0163.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.607] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=141824) returned 1
	[0163.608] CloseHandle (hObject=0x1f4) returned 1
	[0163.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_u.vss")) returned 0x20
	[0163.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_u.vss")) returned 0x20
	[0163.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITACC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitacc_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.609] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222208) returned 1
	[0163.609] CloseHandle (hObject=0x1f4) returned 1
	[0163.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_m.vst")) returned 0x20
	[0163.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_m.vst")) returned 0x20
	[0163.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.610] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222208) returned 1
	[0163.610] CloseHandle (hObject=0x1f4) returned 1
	[0163.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_u.vst")) returned 0x20
	[0163.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_u.vst")) returned 0x20
	[0163.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SITPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sitpln_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.611] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32768) returned 1
	[0163.611] CloseHandle (hObject=0x1f4) returned 1
	[0163.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_m.vst")) returned 0x20
	[0163.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_m.vst")) returned 0x20
	[0163.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.612] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32768) returned 1
	[0163.612] CloseHandle (hObject=0x1f4) returned 1
	[0163.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_u.vst")) returned 0x20
	[0163.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_u.vst")) returned 0x20
	[0163.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SIXSIG_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sixsig_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.613] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=127488) returned 1
	[0163.613] CloseHandle (hObject=0x1f4) returned 1
	[0163.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_m.vst")) returned 0x20
	[0163.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_m.vst")) returned 0x20
	[0163.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.614] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=127488) returned 1
	[0163.614] CloseHandle (hObject=0x1f4) returned 1
	[0163.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_u.vst")) returned 0x20
	[0163.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_u.vst")) returned 0x20
	[0163.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPCPLN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spcpln_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.615] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=279552) returned 1
	[0163.615] CloseHandle (hObject=0x1f4) returned 1
	[0163.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_m.vss")) returned 0x20
	[0163.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_m.vss")) returned 0x20
	[0163.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.616] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=274944) returned 1
	[0163.616] CloseHandle (hObject=0x1f4) returned 1
	[0163.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_u.vss")) returned 0x20
	[0163.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_u.vss")) returned 0x20
	[0163.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPRBR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sprbr_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.619] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=350720) returned 1
	[0163.619] CloseHandle (hObject=0x1f8) returned 1
	[0163.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_m.vss")) returned 0x20
	[0163.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_m.vss")) returned 0x20
	[0163.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.619] SetEvent (hEvent=0xfc) returned 1
	[0163.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.620] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=351232) returned 1
	[0163.620] CloseHandle (hObject=0x1f8) returned 1
	[0163.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_u.vss")) returned 0x20
	[0163.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_u.vss")) returned 0x20
	[0163.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwa_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.621] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131072) returned 1
	[0163.622] CloseHandle (hObject=0x1f8) returned 1
	[0163.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_m.vss")) returned 0x20
	[0163.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_m.vss")) returned 0x20
	[0163.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.622] SetEvent (hEvent=0xfc) returned 1
	[0163.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.623] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=130048) returned 1
	[0163.623] CloseHandle (hObject=0x1f8) returned 1
	[0163.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_u.vss")) returned 0x20
	[0163.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_u.vss")) returned 0x20
	[0163.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwc_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.624] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19968) returned 1
	[0163.624] CloseHandle (hObject=0x1f8) returned 1
	[0163.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_m.vss")) returned 0x20
	[0163.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_m.vss")) returned 0x20
	[0163.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.625] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19968) returned 1
	[0163.625] CloseHandle (hObject=0x1f8) returned 1
	[0163.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_u.vss")) returned 0x20
	[0163.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_u.vss")) returned 0x20
	[0163.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPWT_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spwt_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.626] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=59904) returned 1
	[0163.626] CloseHandle (hObject=0x1f8) returned 1
	[0163.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_m.vst")) returned 0x20
	[0163.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_m.vst")) returned 0x20
	[0163.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.627] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=59904) returned 1
	[0163.627] CloseHandle (hObject=0x1f8) returned 1
	[0163.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_u.vst")) returned 0x20
	[0163.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_u.vst")) returned 0x20
	[0163.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SPW_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\spw_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.631] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61952) returned 1
	[0163.631] CloseHandle (hObject=0x1f8) returned 1
	[0163.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_m.vss")) returned 0x20
	[0163.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_m.vss")) returned 0x20
	[0163.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.631] SetEvent (hEvent=0xfc) returned 1
	[0163.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.632] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=60416) returned 1
	[0163.632] CloseHandle (hObject=0x1f8) returned 1
	[0163.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_u.vss")) returned 0x20
	[0163.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_u.vss")) returned 0x20
	[0163.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSFLOW_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\ssflow_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.633] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=681472) returned 1
	[0163.633] CloseHandle (hObject=0x1f8) returned 1
	[0163.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_m.vss")) returned 0x20
	[0163.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_m.vss")) returned 0x20
	[0163.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.634] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=668160) returned 1
	[0163.634] CloseHandle (hObject=0x1f8) returned 1
	[0163.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_u.vss")) returned 0x20
	[0163.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_u.vss")) returned 0x20
	[0163.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SSHOQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\sshoq_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.635] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=250880) returned 1
	[0163.635] CloseHandle (hObject=0x1f8) returned 1
	[0163.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_m.vss")) returned 0x20
	[0163.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_m.vss")) returned 0x20
	[0163.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.636] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=241152) returned 1
	[0163.636] CloseHandle (hObject=0x1f8) returned 1
	[0163.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_u.vss")) returned 0x20
	[0163.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_u.vss")) returned 0x20
	[0163.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\SYMBOL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\symbol_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeline.mpp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.637] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61952) returned 1
	[0163.637] CloseHandle (hObject=0x1f8) returned 1
	[0163.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeline.mpp")) returned 0x20
	[0163.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeline.mpp")) returned 0x20
	[0163.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeline.mpp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELINE.MPP" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeline.mpp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.638] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=630272) returned 1
	[0163.638] CloseHandle (hObject=0x1f8) returned 1
	[0163.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vss")) returned 0x20
	[0163.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vss")) returned 0x20
	[0163.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.639] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65024) returned 1
	[0163.639] CloseHandle (hObject=0x1f8) returned 1
	[0163.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vst")) returned 0x20
	[0163.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vst")) returned 0x20
	[0163.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.640] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=624640) returned 1
	[0163.640] CloseHandle (hObject=0x1f8) returned 1
	[0163.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vss")) returned 0x20
	[0163.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vss")) returned 0x20
	[0163.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f8
	[0163.641] GetFileSizeEx (in: hFile=0x1f8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65024) returned 1
	[0163.641] CloseHandle (hObject=0x1f8) returned 1
	[0163.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vst")) returned 0x20
	[0163.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vst")) returned 0x20
	[0163.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TIMELN_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\timeln_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.762] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=186880) returned 1
	[0163.762] CloseHandle (hObject=0x1f4) returned 1
	[0163.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_m.vss")) returned 0x20
	[0163.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_m.vss")) returned 0x20
	[0163.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\TITLE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\title_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.763] SetEvent (hEvent=0xfc) returned 1
	[0163.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.763] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77312) returned 1
	[0163.763] CloseHandle (hObject=0x1f4) returned 1
	[0163.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_m.vss")) returned 0x20
	[0163.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_m.vss")) returned 0x20
	[0163.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.764] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=76288) returned 1
	[0163.764] CloseHandle (hObject=0x1f4) returned 1
	[0163.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_u.vss")) returned 0x20
	[0163.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_u.vss")) returned 0x20
	[0163.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSEQ_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlseq_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.765] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=71168) returned 1
	[0163.765] CloseHandle (hObject=0x1f4) returned 1
	[0163.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_m.vss")) returned 0x20
	[0163.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_m.vss")) returned 0x20
	[0163.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0163.769] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70144) returned 1
	[0163.769] CloseHandle (hObject=0x1a0) returned 1
	[0163.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_u.vss")) returned 0x20
	[0163.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_u.vss")) returned 0x20
	[0163.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTA_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlsta_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.770] SetEvent (hEvent=0xfc) returned 1
	[0163.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0163.771] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222720) returned 1
	[0163.771] CloseHandle (hObject=0x1a0) returned 1
	[0163.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_m.vss")) returned 0x20
	[0163.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_m.vss")) returned 0x20
	[0163.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0163.772] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=220672) returned 1
	[0163.772] CloseHandle (hObject=0x1a0) returned 1
	[0163.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_u.vss")) returned 0x20
	[0163.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_u.vss")) returned 0x20
	[0163.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLSTR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umlstr_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0163.773] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=64000) returned 1
	[0163.773] CloseHandle (hObject=0x1a0) returned 1
	[0163.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_m.vss")) returned 0x20
	[0163.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_m.vss")) returned 0x20
	[0163.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.775] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=63488) returned 1
	[0163.775] CloseHandle (hObject=0x170) returned 1
	[0163.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_u.vss")) returned 0x20
	[0163.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_u.vss")) returned 0x20
	[0163.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\UMLUSE_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\umluse_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.775] SetEvent (hEvent=0xfc) returned 1
	[0163.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.776] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=142336) returned 1
	[0163.776] CloseHandle (hObject=0x170) returned 1
	[0163.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_m.vss")) returned 0x20
	[0163.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_m.vss")) returned 0x20
	[0163.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.777] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=134656) returned 1
	[0163.777] CloseHandle (hObject=0x170) returned 1
	[0163.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_u.vss")) returned 0x20
	[0163.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_u.vss")) returned 0x20
	[0163.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE1_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve1_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.778] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=96768) returned 1
	[0163.778] CloseHandle (hObject=0x170) returned 1
	[0163.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_m.vss")) returned 0x20
	[0163.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_m.vss")) returned 0x20
	[0163.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.779] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=87040) returned 1
	[0163.780] CloseHandle (hObject=0x170) returned 1
	[0163.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_u.vss")) returned 0x20
	[0163.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_u.vss")) returned 0x20
	[0163.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VALVE2_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\valve2_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.780] SetEvent (hEvent=0xfc) returned 1
	[0163.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.781] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=266240) returned 1
	[0163.781] CloseHandle (hObject=0x170) returned 1
	[0163.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_m.vss")) returned 0x20
	[0163.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_m.vss")) returned 0x20
	[0163.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.782] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=261632) returned 1
	[0163.782] CloseHandle (hObject=0x170) returned 1
	[0163.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_u.vss")) returned 0x20
	[0163.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_u.vss")) returned 0x20
	[0163.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VEHICL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vehicl_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.783] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=110080) returned 1
	[0163.783] CloseHandle (hObject=0x170) returned 1
	[0163.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_m.vss")) returned 0x20
	[0163.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_m.vss")) returned 0x20
	[0163.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.784] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=107008) returned 1
	[0163.784] CloseHandle (hObject=0x170) returned 1
	[0163.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_u.vss")) returned 0x20
	[0163.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_u.vss")) returned 0x20
	[0163.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VIDSUR_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vidsur_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0163.785] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=120832) returned 1
	[0163.785] CloseHandle (hObject=0x170) returned 1
	[0163.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vss")) returned 0x20
	[0163.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vss")) returned 0x20
	[0163.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.789] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=54272) returned 1
	[0163.789] CloseHandle (hObject=0x1f4) returned 1
	[0163.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vst")) returned 0x20
	[0163.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vst")) returned 0x20
	[0163.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.789] SetEvent (hEvent=0xfc) returned 1
	[0163.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.790] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=120320) returned 1
	[0163.790] CloseHandle (hObject=0x1f4) returned 1
	[0163.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vss")) returned 0x20
	[0163.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vss")) returned 0x20
	[0163.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.791] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=54272) returned 1
	[0163.791] CloseHandle (hObject=0x1f4) returned 1
	[0163.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vst")) returned 0x20
	[0163.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vst")) returned 0x20
	[0163.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\VSM_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\vsm_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.792] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=523776) returned 1
	[0163.792] CloseHandle (hObject=0x1f4) returned 1
	[0163.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_m.vss")) returned 0x20
	[0163.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_m.vss")) returned 0x20
	[0163.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.793] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=520192) returned 1
	[0163.793] CloseHandle (hObject=0x1f4) returned 1
	[0163.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_u.vss")) returned 0x20
	[0163.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_u.vss")) returned 0x20
	[0163.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WADOWI_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wadowi_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.794] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=896512) returned 1
	[0163.794] CloseHandle (hObject=0x1f4) returned 1
	[0163.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_m.vss")) returned 0x20
	[0163.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_m.vss")) returned 0x20
	[0163.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.795] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=889344) returned 1
	[0163.795] CloseHandle (hObject=0x1f4) returned 1
	[0163.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_u.vss")) returned 0x20
	[0163.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_u.vss")) returned 0x20
	[0163.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WALL_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wall_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.796] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1619968) returned 1
	[0163.796] CloseHandle (hObject=0x1f4) returned 1
	[0163.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vss")) returned 0x20
	[0163.796] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vss"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0163.796] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vss")) returned 0
	[0163.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0163.797] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=100352) returned 1
	[0163.797] CloseHandle (hObject=0x1f4) returned 1
	[0163.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vst")) returned 0x20
	[0163.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vst")) returned 0x20
	[0163.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0163.805] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1610240) returned 1
	[0163.805] CloseHandle (hObject=0x1a0) returned 1
	[0163.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vss")) returned 0x20
	[0163.805] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vss"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0163.805] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vss")) returned 0
	[0163.805] SetEvent (hEvent=0xfc) returned 1
	[0163.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0163.806] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=99840) returned 1
	[0163.806] CloseHandle (hObject=0x1a0) returned 1
	[0163.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vst")) returned 0x20
	[0163.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vst")) returned 0x20
	[0163.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBMAP_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\webmap_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.995] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=76288) returned 1
	[0163.995] CloseHandle (hObject=0x168) returned 1
	[0163.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vss")) returned 0x20
	[0163.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vss")) returned 0x20
	[0163.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.996] SetEvent (hEvent=0xfc) returned 1
	[0163.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.998] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40448) returned 1
	[0163.998] CloseHandle (hObject=0x168) returned 1
	[0163.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vst")) returned 0x20
	[0163.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vst")) returned 0x20
	[0163.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WEBSIT_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\websit_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0163.999] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=87040) returned 1
	[0163.999] CloseHandle (hObject=0x168) returned 1
	[0163.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_m.vss")) returned 0x20
	[0163.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_m.vss")) returned 0x20
	[0163.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0163.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.000] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=86016) returned 1
	[0164.000] CloseHandle (hObject=0x168) returned 1
	[0164.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_u.vss")) returned 0x20
	[0164.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_u.vss")) returned 0x20
	[0164.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WELD_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\weld_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.002] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=99328) returned 1
	[0164.002] CloseHandle (hObject=0x168) returned 1
	[0164.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_m.vss")) returned 0x20
	[0164.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_m.vss")) returned 0x20
	[0164.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.002] SetEvent (hEvent=0xfc) returned 1
	[0164.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.003] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=98304) returned 1
	[0164.003] CloseHandle (hObject=0x168) returned 1
	[0164.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_u.vss")) returned 0x20
	[0164.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_u.vss")) returned 0x20
	[0164.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCICN_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcicn_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.006] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=491520) returned 1
	[0164.006] CloseHandle (hObject=0x168) returned 1
	[0164.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_m.vss")) returned 0x20
	[0164.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_m.vss")) returned 0x20
	[0164.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.007] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=491008) returned 1
	[0164.007] CloseHandle (hObject=0x168) returned 1
	[0164.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_u.vss")) returned 0x20
	[0164.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_u.vss")) returned 0x20
	[0164.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCRS_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfcrs_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.122] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=161792) returned 1
	[0164.122] CloseHandle (hObject=0x13c) returned 1
	[0164.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_m.vss")) returned 0x20
	[0164.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_m.vss")) returned 0x20
	[0164.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WFCTRL_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wfctrl_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.123] SetEvent (hEvent=0xfc) returned 1
	[0164.123] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.123] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=235520) returned 1
	[0164.123] CloseHandle (hObject=0x13c) returned 1
	[0164.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vst")) returned 0x20
	[0164.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vst")) returned 0x20
	[0164.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WRKFLO_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wrkflo_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.124] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=476160) returned 1
	[0164.124] CloseHandle (hObject=0x13c) returned 1
	[0164.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_m.vst")) returned 0x20
	[0164.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_m.vst")) returned 0x20
	[0164.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.125] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.126] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=469504) returned 1
	[0164.126] CloseHandle (hObject=0x13c) returned 1
	[0164.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_u.vst")) returned 0x20
	[0164.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_u.vst")) returned 0x20
	[0164.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSISS_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wssiss_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.129] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=580608) returned 1
	[0164.129] CloseHandle (hObject=0x13c) returned 1
	[0164.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_m.vst")) returned 0x20
	[0164.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_m.vst")) returned 0x20
	[0164.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.130] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=572928) returned 1
	[0164.130] CloseHandle (hObject=0x13c) returned 1
	[0164.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_u.vst")) returned 0x20
	[0164.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_u.vst")) returned 0x20
	[0164.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\WSSTSK_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\wsstsk_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.131] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50176) returned 1
	[0164.131] CloseHandle (hObject=0x13c) returned 1
	[0164.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vss")) returned 0x20
	[0164.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vss")) returned 0x20
	[0164.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0164.134] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28160) returned 1
	[0164.134] CloseHandle (hObject=0x1a0) returned 1
	[0164.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vst")) returned 0x20
	[0164.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vst")) returned 0x20
	[0164.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_M.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_m.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.135] SetEvent (hEvent=0xfc) returned 1
	[0164.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0164.135] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49152) returned 1
	[0164.135] CloseHandle (hObject=0x1a0) returned 1
	[0164.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vss")) returned 0x20
	[0164.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vss")) returned 0x20
	[0164.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vss.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VSS" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0164.136] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28160) returned 1
	[0164.136] CloseHandle (hObject=0x1a0) returned 1
	[0164.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vst")) returned 0x20
	[0164.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vst")) returned 0x20
	[0164.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\XFUNC_U.VST" (normalized: "c:\\program files\\microsoft office\\office14\\visio content\\1033\\xfunc_u.vst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISIO.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0164.137] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1484640) returned 1
	[0164.137] CloseHandle (hObject=0x1a0) returned 1
	[0164.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISIO.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe")) returned 0x20
	[0164.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISIO.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe")) returned 0x20
	[0164.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISIO.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISIO.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.140] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1217) returned 1
	[0164.140] CloseHandle (hObject=0x168) returned 1
	[0164.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe.manifest")) returned 0x20
	[0164.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe.manifest")) returned 0x20
	[0164.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\visio.exe.manifest" (normalized: "c:\\program files\\microsoft office\\office14\\visio.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.140] SetEvent (hEvent=0xfc) returned 1
	[0164.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\visiocustom.propdesc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.141] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1156) returned 1
	[0164.141] CloseHandle (hObject=0x168) returned 1
	[0164.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\visiocustom.propdesc")) returned 0x20
	[0164.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\visiocustom.propdesc")) returned 0x20
	[0164.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visiocustom.propdesc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VisioCustom.propdesc" (normalized: "c:\\program files\\microsoft office\\office14\\visiocustom.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vislib.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.142] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19729256) returned 1
	[0164.142] CloseHandle (hObject=0x168) returned 1
	[0164.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vislib.dll")) returned 0x20
	[0164.143] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vislib.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISLIB.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vislib.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.143] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISLIB.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vislib.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISLIB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vislib.dll")) returned 0
	[0164.143] SetEvent (hEvent=0xfc) returned 1
	[0164.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISOCX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visocx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.143] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=441216) returned 1
	[0164.144] CloseHandle (hObject=0x168) returned 1
	[0164.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISOCX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visocx.dll")) returned 0x20
	[0164.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISOCX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visocx.dll")) returned 0x20
	[0164.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISOCX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visocx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISOCX.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visocx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISSHE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visshe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.144] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=976240) returned 1
	[0164.145] CloseHandle (hObject=0x168) returned 1
	[0164.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISSHE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visshe.dll")) returned 0x20
	[0164.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISSHE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visshe.dll")) returned 0x20
	[0164.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISSHE.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visshe.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISSHE.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visshe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISSUPP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vissupp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.146] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=736608) returned 1
	[0164.146] CloseHandle (hObject=0x168) returned 1
	[0164.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISSUPP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vissupp.dll")) returned 0x20
	[0164.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISSUPP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vissupp.dll")) returned 0x20
	[0164.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISSUPP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vissupp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISSUPP.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\vissupp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visutils.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.147] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=772968) returned 1
	[0164.147] CloseHandle (hObject=0x168) returned 1
	[0164.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visutils.dll")) returned 0x20
	[0164.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visutils.dll")) returned 0x20
	[0164.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISUTILS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visutils.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visutils.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISWEB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visweb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.148] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1237896) returned 1
	[0164.148] CloseHandle (hObject=0x168) returned 1
	[0164.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISWEB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visweb.dll")) returned 0x20
	[0164.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISWEB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visweb.dll")) returned 0x20
	[0164.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISWEB.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visweb.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISWEB.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visweb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISXDATA.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visxdata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.149] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=107904) returned 1
	[0164.149] CloseHandle (hObject=0x168) returned 1
	[0164.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISXDATA.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visxdata.dll")) returned 0x20
	[0164.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISXDATA.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visxdata.dll")) returned 0x20
	[0164.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISXDATA.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\visxdata.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VISXDATA.DLL" (normalized: "c:\\program files\\microsoft office\\office14\\visxdata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VPREVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\vpreview.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.150] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=731008) returned 1
	[0164.150] CloseHandle (hObject=0x168) returned 1
	[0164.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VPREVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\vpreview.exe")) returned 0x20
	[0164.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VPREVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\vpreview.exe")) returned 0x20
	[0164.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VPREVIEW.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\office14\\vpreview.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office14\\VPREVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\office14\\vpreview.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.289] SetEvent (hEvent=0xfc) returned 1
	[0164.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0164.485] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=476) returned 1
	[0164.485] CloseHandle (hObject=0x140) returned 1
	[0164.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm")) returned 0x20
	[0164.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm")) returned 0x20
	[0164.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\stationery\\1033\\pawprint.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.486] SetEvent (hEvent=0xfc) returned 1
	[0164.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.649] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19079) returned 1
	[0164.650] CloseHandle (hObject=0x168) returned 1
	[0164.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt")) returned 0x20
	[0164.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt")) returned 0x20
	[0164.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\comments.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.650] SetEvent (hEvent=0xfc) returned 1
	[0164.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.651] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24755) returned 1
	[0164.651] CloseHandle (hObject=0x168) returned 1
	[0164.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt")) returned 0x20
	[0164.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt")) returned 0x20
	[0164.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tabs.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.652] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45845) returned 1
	[0164.652] CloseHandle (hObject=0x168) returned 1
	[0164.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt")) returned 0x20
	[0164.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt")) returned 0x20
	[0164.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\tasks.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.653] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35768) returned 1
	[0164.653] CloseHandle (hObject=0x168) returned 1
	[0164.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt")) returned 0x20
	[0164.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt")) returned 0x20
	[0164.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\part\\users.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.656] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1428600) returned 1
	[0164.656] CloseHandle (hObject=0x13c) returned 1
	[0164.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt")) returned 0x20
	[0164.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt")) returned 0x20
	[0164.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Projects.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\projects.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.657] SetEvent (hEvent=0xfc) returned 1
	[0164.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.657] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1016214) returned 1
	[0164.657] CloseHandle (hObject=0x13c) returned 1
	[0164.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt")) returned 0x20
	[0164.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt")) returned 0x20
	[0164.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Sales Pipeline.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\sales pipeline.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.658] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=512023) returned 1
	[0164.658] CloseHandle (hObject=0x13c) returned 1
	[0164.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt")) returned 0x20
	[0164.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt")) returned 0x20
	[0164.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Students.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\students.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.659] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=544361) returned 1
	[0164.660] CloseHandle (hObject=0x13c) returned 1
	[0164.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt")) returned 0x20
	[0164.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt")) returned 0x20
	[0164.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\tasks.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.661] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=227269) returned 1
	[0164.661] CloseHandle (hObject=0x13c) returned 1
	[0164.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt")) returned 0x20
	[0164.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt")) returned 0x20
	[0164.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\107.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\107.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.662] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=259757) returned 1
	[0164.662] CloseHandle (hObject=0x13c) returned 1
	[0164.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt")) returned 0x20
	[0164.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt")) returned 0x20
	[0164.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\1100.accdt" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\access\\wss\\1100.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.663] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=207335) returned 1
	[0164.663] CloseHandle (hObject=0x13c) returned 1
	[0164.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx")) returned 0x20
	[0164.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx")) returned 0x20
	[0164.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0164.664] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=211750) returned 1
	[0164.664] CloseHandle (hObject=0x13c) returned 1
	[0164.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx")) returned 0x20
	[0164.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx")) returned 0x20
	[0164.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencymergeletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.668] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3600568) returned 1
	[0164.668] CloseHandle (hObject=0x168) returned 1
	[0164.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx")) returned 0x20
	[0164.668] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.668] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyreport.dotx")) returned 0
	[0164.668] SetEvent (hEvent=0xfc) returned 1
	[0164.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.669] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=244919) returned 1
	[0164.669] CloseHandle (hObject=0x168) returned 1
	[0164.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx")) returned 0x20
	[0164.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx")) returned 0x20
	[0164.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adjacencyresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.671] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30720) returned 1
	[0164.671] CloseHandle (hObject=0x168) returned 1
	[0164.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt")) returned 0x20
	[0164.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt")) returned 0x20
	[0164.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr1.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.672] SetEvent (hEvent=0xfc) returned 1
	[0164.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.673] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28160) returned 1
	[0164.673] CloseHandle (hObject=0x168) returned 1
	[0164.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt")) returned 0x20
	[0164.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt")) returned 0x20
	[0164.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr10.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.674] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29184) returned 1
	[0164.674] CloseHandle (hObject=0x168) returned 1
	[0164.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt")) returned 0x20
	[0164.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt")) returned 0x20
	[0164.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr2.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.675] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30720) returned 1
	[0164.676] CloseHandle (hObject=0x168) returned 1
	[0164.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt")) returned 0x20
	[0164.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt")) returned 0x20
	[0164.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr3.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.676] SetEvent (hEvent=0xfc) returned 1
	[0164.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.677] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30208) returned 1
	[0164.677] CloseHandle (hObject=0x168) returned 1
	[0164.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt")) returned 0x20
	[0164.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt")) returned 0x20
	[0164.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr4.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0164.679] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30720) returned 1
	[0164.679] CloseHandle (hObject=0x1a0) returned 1
	[0164.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt")) returned 0x20
	[0164.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt")) returned 0x20
	[0164.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr5.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.680] SetEvent (hEvent=0xfc) returned 1
	[0164.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0164.681] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29184) returned 1
	[0164.681] CloseHandle (hObject=0x1a0) returned 1
	[0164.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt")) returned 0x20
	[0164.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt")) returned 0x20
	[0164.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr6.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.682] SetEvent (hEvent=0xfc) returned 1
	[0164.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0164.682] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31744) returned 1
	[0164.682] CloseHandle (hObject=0x1a0) returned 1
	[0164.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt")) returned 0x20
	[0164.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt")) returned 0x20
	[0164.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr7.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.686] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29696) returned 1
	[0164.686] CloseHandle (hObject=0x168) returned 1
	[0164.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt")) returned 0x20
	[0164.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt")) returned 0x20
	[0164.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr8.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.687] SetEvent (hEvent=0xfc) returned 1
	[0164.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.688] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30208) returned 1
	[0164.688] CloseHandle (hObject=0x168) returned 1
	[0164.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt")) returned 0x20
	[0164.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt")) returned 0x20
	[0164.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\adr9.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.688] SetEvent (hEvent=0xfc) returned 1
	[0164.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.870] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=168990) returned 1
	[0164.870] CloseHandle (hObject=0x168) returned 1
	[0164.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx")) returned 0x20
	[0164.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx")) returned 0x20
	[0164.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\apothecaryletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.870] SetEvent (hEvent=0xfc) returned 1
	[0164.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.871] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=611458) returned 1
	[0164.871] CloseHandle (hObject=0x168) returned 1
	[0164.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx")) returned 0x20
	[0164.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx")) returned 0x20
	[0164.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\contemporaryphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.872] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=155682) returned 1
	[0164.872] CloseHandle (hObject=0x168) returned 1
	[0164.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx")) returned 0x20
	[0164.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx")) returned 0x20
	[0164.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.873] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=83386) returned 1
	[0164.873] CloseHandle (hObject=0x168) returned 1
	[0164.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx")) returned 0x20
	[0164.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx")) returned 0x20
	[0164.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergefax.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.874] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=155347) returned 1
	[0164.874] CloseHandle (hObject=0x168) returned 1
	[0164.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx")) returned 0x20
	[0164.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx")) returned 0x20
	[0164.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equitymergeletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.875] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1829944) returned 1
	[0164.875] CloseHandle (hObject=0x168) returned 1
	[0164.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx")) returned 0x20
	[0164.875] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.875] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityreport.dotx")) returned 0
	[0164.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.877] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=282708) returned 1
	[0164.877] CloseHandle (hObject=0x168) returned 1
	[0164.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx")) returned 0x20
	[0164.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx")) returned 0x20
	[0164.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EquityResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\equityresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.877] SetEvent (hEvent=0xfc) returned 1
	[0164.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.878] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=127167) returned 1
	[0164.878] CloseHandle (hObject=0x168) returned 1
	[0164.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx")) returned 0x20
	[0164.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx")) returned 0x20
	[0164.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.879] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=125587) returned 1
	[0164.879] CloseHandle (hObject=0x168) returned 1
	[0164.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx")) returned 0x20
	[0164.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx")) returned 0x20
	[0164.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialmergeletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.880] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=770453) returned 1
	[0164.880] CloseHandle (hObject=0x168) returned 1
	[0164.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx")) returned 0x20
	[0164.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx")) returned 0x20
	[0164.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.881] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=290836) returned 1
	[0164.881] CloseHandle (hObject=0x168) returned 1
	[0164.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx")) returned 0x20
	[0164.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx")) returned 0x20
	[0164.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\essentialresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.882] SetEvent (hEvent=0xfc) returned 1
	[0164.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.884] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73000) returned 1
	[0164.884] CloseHandle (hObject=0x168) returned 1
	[0164.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx")) returned 0x20
	[0164.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx")) returned 0x20
	[0164.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.885] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73794) returned 1
	[0164.885] CloseHandle (hObject=0x168) returned 1
	[0164.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx")) returned 0x20
	[0164.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx")) returned 0x20
	[0164.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveMergeLetter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivemergeletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.886] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=251034) returned 1
	[0164.886] CloseHandle (hObject=0x168) returned 1
	[0164.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx")) returned 0x20
	[0164.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx")) returned 0x20
	[0164.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivenewsletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.887] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=832554) returned 1
	[0164.887] CloseHandle (hObject=0x168) returned 1
	[0164.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx")) returned 0x20
	[0164.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx")) returned 0x20
	[0164.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveReport.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executivereport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.888] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=110604) returned 1
	[0164.888] CloseHandle (hObject=0x168) returned 1
	[0164.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx")) returned 0x20
	[0164.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx")) returned 0x20
	[0164.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExecutiveResume.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\executiveresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.889] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19021) returned 1
	[0164.889] CloseHandle (hObject=0x168) returned 1
	[0164.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx")) returned 0x20
	[0164.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx")) returned 0x20
	[0164.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\expensereport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.891] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=83007) returned 1
	[0164.891] CloseHandle (hObject=0x168) returned 1
	[0164.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx")) returned 0x20
	[0164.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx")) returned 0x20
	[0164.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\EquityFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\equityfax.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.892] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=104818) returned 1
	[0164.892] CloseHandle (hObject=0x168) returned 1
	[0164.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx")) returned 0x20
	[0164.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx")) returned 0x20
	[0164.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\MedianFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\medianfax.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.893] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113650) returned 1
	[0164.893] CloseHandle (hObject=0x168) returned 1
	[0164.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx")) returned 0x20
	[0164.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx")) returned 0x20
	[0164.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OrielFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\orielfax.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.896] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=93543) returned 1
	[0164.896] CloseHandle (hObject=0x168) returned 1
	[0164.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx")) returned 0x20
	[0164.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx")) returned 0x20
	[0164.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\OriginFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\originfax.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.896] SetEvent (hEvent=0xfc) returned 1
	[0164.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.898] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=80129) returned 1
	[0164.898] CloseHandle (hObject=0x168) returned 1
	[0164.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx")) returned 0x20
	[0164.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx")) returned 0x20
	[0164.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\UrbanFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fax\\urbanfax.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.898] SetEvent (hEvent=0xfc) returned 1
	[0164.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.899] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33184953) returned 1
	[0164.899] CloseHandle (hObject=0x168) returned 1
	[0164.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx")) returned 0x20
	[0164.899] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.899] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\FiveRules.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\fiverules.potx")) returned 0
	[0164.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.900] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17520191) returned 1
	[0164.900] CloseHandle (hObject=0x168) returned 1
	[0164.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx")) returned 0x20
	[0164.900] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.900] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\IntroducingPowerPoint2010.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\introducingpowerpoint2010.potx")) returned 0
	[0164.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.901] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=63137) returned 1
	[0164.901] CloseHandle (hObject=0x168) returned 1
	[0164.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx")) returned 0x20
	[0164.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx")) returned 0x20
	[0164.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\loanamortization.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.902] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=117690) returned 1
	[0164.902] CloseHandle (hObject=0x168) returned 1
	[0164.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx")) returned 0x20
	[0164.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx")) returned 0x20
	[0164.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.903] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=103770) returned 1
	[0164.903] CloseHandle (hObject=0x168) returned 1
	[0164.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx")) returned 0x20
	[0164.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx")) returned 0x20
	[0164.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergefax.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.904] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=118135) returned 1
	[0164.904] CloseHandle (hObject=0x168) returned 1
	[0164.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx")) returned 0x20
	[0164.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx")) returned 0x20
	[0164.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianmergeletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.905] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=295765) returned 1
	[0164.905] CloseHandle (hObject=0x168) returned 1
	[0164.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx")) returned 0x20
	[0164.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx")) returned 0x20
	[0164.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.906] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=168167) returned 1
	[0164.906] CloseHandle (hObject=0x168) returned 1
	[0164.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx")) returned 0x20
	[0164.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx")) returned 0x20
	[0164.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\MedianResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\medianresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.907] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43906) returned 1
	[0164.907] CloseHandle (hObject=0x168) returned 1
	[0164.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx")) returned 0x20
	[0164.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx")) returned 0x20
	[0164.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\office word 2003 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\notebook03.onepkg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.909] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1347838) returned 1
	[0164.910] CloseHandle (hObject=0x168) returned 1
	[0164.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\notebook03.onepkg")) returned 0x20
	[0164.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\notebook03.onepkg")) returned 0x20
	[0164.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\notebook03.onepkg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\Notebook03.onepkg" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\notebook templates\\notebook03.onepkg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.914] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=253184) returned 1
	[0164.914] CloseHandle (hObject=0x168) returned 1
	[0164.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one")) returned 0x20
	[0164.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one")) returned 0x20
	[0164.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\academic.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.915] SetEvent (hEvent=0xfc) returned 1
	[0164.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.916] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=177192) returned 1
	[0164.916] CloseHandle (hObject=0x168) returned 1
	[0164.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one")) returned 0x20
	[0164.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one")) returned 0x20
	[0164.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\blank.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.917] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=321072) returned 1
	[0164.917] CloseHandle (hObject=0x168) returned 1
	[0164.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one")) returned 0x20
	[0164.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one")) returned 0x20
	[0164.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\business.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.918] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3244776) returned 1
	[0164.918] CloseHandle (hObject=0x168) returned 1
	[0164.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one")) returned 0x20
	[0164.918] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.918] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\designer.one")) returned 0
	[0164.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.919] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=228176) returned 1
	[0164.919] CloseHandle (hObject=0x168) returned 1
	[0164.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one")) returned 0x20
	[0164.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one")) returned 0x20
	[0164.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\onenote\\14\\stationery\\planners.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.920] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=187218) returned 1
	[0164.920] CloseHandle (hObject=0x168) returned 1
	[0164.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx")) returned 0x20
	[0164.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx")) returned 0x20
	[0164.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.921] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=111262) returned 1
	[0164.921] CloseHandle (hObject=0x168) returned 1
	[0164.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx")) returned 0x20
	[0164.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx")) returned 0x20
	[0164.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergefax.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.922] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=176904) returned 1
	[0164.922] CloseHandle (hObject=0x168) returned 1
	[0164.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx")) returned 0x20
	[0164.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx")) returned 0x20
	[0164.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielmergeletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.923] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=535380) returned 1
	[0164.923] CloseHandle (hObject=0x168) returned 1
	[0164.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx")) returned 0x20
	[0164.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx")) returned 0x20
	[0164.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.924] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=305985) returned 1
	[0164.924] CloseHandle (hObject=0x168) returned 1
	[0164.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx")) returned 0x20
	[0164.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx")) returned 0x20
	[0164.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OrielResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\orielresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.926] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=128362) returned 1
	[0164.926] CloseHandle (hObject=0x168) returned 1
	[0164.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx")) returned 0x20
	[0164.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx")) returned 0x20
	[0164.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.926] SetEvent (hEvent=0xfc) returned 1
	[0164.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.927] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94944) returned 1
	[0164.927] CloseHandle (hObject=0x168) returned 1
	[0164.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx")) returned 0x20
	[0164.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx")) returned 0x20
	[0164.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergefax.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.928] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=127764) returned 1
	[0164.928] CloseHandle (hObject=0x168) returned 1
	[0164.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx")) returned 0x20
	[0164.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx")) returned 0x20
	[0164.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originmergeletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.929] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=372753) returned 1
	[0164.929] CloseHandle (hObject=0x168) returned 1
	[0164.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx")) returned 0x20
	[0164.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx")) returned 0x20
	[0164.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.930] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=143943) returned 1
	[0164.930] CloseHandle (hObject=0x168) returned 1
	[0164.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx")) returned 0x20
	[0164.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx")) returned 0x20
	[0164.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\originresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.931] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30131) returned 1
	[0164.931] CloseHandle (hObject=0x168) returned 1
	[0164.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx")) returned 0x20
	[0164.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx")) returned 0x20
	[0164.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\personalmonthlybudget.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.932] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=189840) returned 1
	[0164.932] CloseHandle (hObject=0x168) returned 1
	[0164.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx")) returned 0x20
	[0164.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx")) returned 0x20
	[0164.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\pitchbook.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.933] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=654698) returned 1
	[0164.934] CloseHandle (hObject=0x168) returned 1
	[0164.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx")) returned 0x20
	[0164.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx")) returned 0x20
	[0164.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\ProjectStatusReport.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projectstatusreport.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.937] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15170) returned 1
	[0164.937] CloseHandle (hObject=0x168) returned 1
	[0164.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx")) returned 0x20
	[0164.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx")) returned 0x20
	[0164.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\projplan.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.937] SetEvent (hEvent=0xfc) returned 1
	[0164.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.938] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=95895) returned 1
	[0164.938] CloseHandle (hObject=0x168) returned 1
	[0164.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx")) returned 0x20
	[0164.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx")) returned 0x20
	[0164.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\quizshow.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.939] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43245) returned 1
	[0164.939] CloseHandle (hObject=0x168) returned 1
	[0164.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx")) returned 0x20
	[0164.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx")) returned 0x20
	[0164.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\salesreport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.941] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10986) returned 1
	[0164.941] CloseHandle (hObject=0x168) returned 1
	[0164.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx")) returned 0x20
	[0164.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx")) returned 0x20
	[0164.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\tasklist.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.941] SetEvent (hEvent=0xfc) returned 1
	[0164.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.942] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17663) returned 1
	[0164.942] CloseHandle (hObject=0x168) returned 1
	[0164.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx")) returned 0x20
	[0164.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx")) returned 0x20
	[0164.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\timecard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.943] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1241949) returned 1
	[0164.943] CloseHandle (hObject=0x168) returned 1
	[0164.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx")) returned 0x20
	[0164.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx")) returned 0x20
	[0164.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\training.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.944] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=116216) returned 1
	[0164.944] CloseHandle (hObject=0x168) returned 1
	[0164.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx")) returned 0x20
	[0164.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx")) returned 0x20
	[0164.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.945] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=80038) returned 1
	[0164.945] CloseHandle (hObject=0x168) returned 1
	[0164.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx")) returned 0x20
	[0164.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx")) returned 0x20
	[0164.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeFax.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergefax.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.946] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=115120) returned 1
	[0164.946] CloseHandle (hObject=0x168) returned 1
	[0164.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx")) returned 0x20
	[0164.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx")) returned 0x20
	[0164.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanMergeLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanmergeletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.947] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4249320) returned 1
	[0164.947] CloseHandle (hObject=0x168) returned 1
	[0164.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx")) returned 0x20
	[0164.948] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0164.948] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanphotoalbum.potx")) returned 0
	[0164.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.948] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=855998) returned 1
	[0164.949] CloseHandle (hObject=0x168) returned 1
	[0164.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx")) returned 0x20
	[0164.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx")) returned 0x20
	[0164.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanReport.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.950] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=126237) returned 1
	[0164.950] CloseHandle (hObject=0x168) returned 1
	[0164.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx")) returned 0x20
	[0164.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx")) returned 0x20
	[0164.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\UrbanResume.Dotx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\urbanresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.951] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=188212) returned 1
	[0164.951] CloseHandle (hObject=0x168) returned 1
	[0164.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx")) returned 0x20
	[0164.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx")) returned 0x20
	[0164.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\templates\\1033\\widescreenpresentation.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\templates\\presentation designs\\maple.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.952] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0164.952] CloseHandle (hObject=0x168) returned 1
	[0164.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceca35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceca35.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0164.953] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=571456) returned 1
	[0164.953] CloseHandle (hObject=0x168) returned 1
	[0164.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceca35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceca35.dll")) returned 0x20
	[0164.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceca35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceca35.dll")) returned 0x20
	[0164.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceca35.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceca35.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0164.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlceca35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlceca35.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0164.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlcecompact35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlcecompact35.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0165.126] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=118848) returned 1
	[0165.126] CloseHandle (hObject=0x168) returned 1
	[0165.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlcecompact35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlcecompact35.dll")) returned 0x20
	[0165.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlcecompact35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlcecompact35.dll")) returned 0x20
	[0165.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlcecompact35.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlcecompact35.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\sqlcecompact35.dll" (normalized: "c:\\program files\\microsoft sql server compact edition\\v3.5\\sqlcecompact35.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.126] SetEvent (hEvent=0xfc) returned 1
	[0165.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\spare-mg.exe" (normalized: "c:\\program files\\microsoft synchronization services\\spare-mg.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.250] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75776) returned 1
	[0165.250] CloseHandle (hObject=0x13c) returned 1
	[0165.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\spare-mg.exe" (normalized: "c:\\program files\\microsoft synchronization services\\spare-mg.exe")) returned 0x20
	[0165.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\spare-mg.exe" (normalized: "c:\\program files\\microsoft synchronization services\\spare-mg.exe")) returned 0x20
	[0165.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\spare-mg.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\microsoft synchronization services\\spare-mg.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Synchronization Services\\spare-mg.exe" (normalized: "c:\\program files\\microsoft synchronization services\\spare-mg.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.250] SetEvent (hEvent=0xfc) returned 1
	[0165.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.393] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40960) returned 1
	[0165.393] CloseHandle (hObject=0x13c) returned 1
	[0165.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll")) returned 0x20
	[0165.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll")) returned 0x20
	[0165.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.393] SetEvent (hEvent=0xfc) returned 1
	[0165.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.499] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32768) returned 1
	[0165.499] CloseHandle (hObject=0x13c) returned 1
	[0165.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll")) returned 0x20
	[0165.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll")) returned 0x20
	[0165.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.500] SetEvent (hEvent=0xfc) returned 1
	[0165.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.500] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=335872) returned 1
	[0165.500] CloseHandle (hObject=0x13c) returned 1
	[0165.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll")) returned 0x20
	[0165.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll")) returned 0x20
	[0165.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.501] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1277952) returned 1
	[0165.501] CloseHandle (hObject=0x13c) returned 1
	[0165.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll")) returned 0x20
	[0165.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll")) returned 0x20
	[0165.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.502] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61440) returned 1
	[0165.502] CloseHandle (hObject=0x13c) returned 1
	[0165.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll")) returned 0x20
	[0165.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll")) returned 0x20
	[0165.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.503] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12288) returned 1
	[0165.503] CloseHandle (hObject=0x13c) returned 1
	[0165.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll")) returned 0x20
	[0165.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll")) returned 0x20
	[0165.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.504] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=479232) returned 1
	[0165.504] CloseHandle (hObject=0x13c) returned 1
	[0165.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll")) returned 0x20
	[0165.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll")) returned 0x20
	[0165.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.workflowservices.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.505] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=139264) returned 1
	[0165.505] CloseHandle (hObject=0x13c) returned 1
	[0165.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll")) returned 0x20
	[0165.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll")) returned 0x20
	[0165.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\system.xml.linq.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\mpasdesc.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.509] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35328) returned 1
	[0165.509] CloseHandle (hObject=0x1a0) returned 1
	[0165.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\mpasdesc.dll.mui")) returned 0x20
	[0165.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\mpasdesc.dll.mui")) returned 0x20
	[0165.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MpAsDesc.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\en-us\\mpasdesc.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\mpasdesc.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.509] SetEvent (hEvent=0xfc) returned 1
	[0165.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\mpevmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.510] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15360) returned 1
	[0165.510] CloseHandle (hObject=0x1a0) returned 1
	[0165.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\mpevmsg.dll.mui")) returned 0x20
	[0165.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\mpevmsg.dll.mui")) returned 0x20
	[0165.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MpEvMsg.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\en-us\\mpevmsg.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\mpevmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MsMpRes.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\msmpres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.511] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46592) returned 1
	[0165.511] CloseHandle (hObject=0x1a0) returned 1
	[0165.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MsMpRes.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\msmpres.dll.mui")) returned 0x20
	[0165.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MsMpRes.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\msmpres.dll.mui")) returned 0x20
	[0165.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MsMpRes.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\en-us\\msmpres.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\MsMpRes.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\msmpres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files\\windows defender\\mpasdesc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.512] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0165.513] CloseHandle (hObject=0x20c) returned 1
	[0165.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files\\windows defender\\mpasdesc.dll")) returned 0x20
	[0165.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files\\windows defender\\mpasdesc.dll")) returned 0x20
	[0165.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpAsDesc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\mpasdesc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files\\windows defender\\mpasdesc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.513] SetEvent (hEvent=0xfc) returned 1
	[0165.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files\\windows defender\\mpclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.513] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=571904) returned 1
	[0165.514] CloseHandle (hObject=0x20c) returned 1
	[0165.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files\\windows defender\\mpclient.dll")) returned 0x20
	[0165.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files\\windows defender\\mpclient.dll")) returned 0x20
	[0165.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpClient.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\mpclient.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files\\windows defender\\mpclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpCmdRun.exe" (normalized: "c:\\program files\\windows defender\\mpcmdrun.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.514] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=190976) returned 1
	[0165.514] CloseHandle (hObject=0x20c) returned 1
	[0165.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpCmdRun.exe" (normalized: "c:\\program files\\windows defender\\mpcmdrun.exe")) returned 0x20
	[0165.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpCmdRun.exe" (normalized: "c:\\program files\\windows defender\\mpcmdrun.exe")) returned 0x20
	[0165.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpCmdRun.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\mpcmdrun.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpCmdRun.exe" (normalized: "c:\\program files\\windows defender\\mpcmdrun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpCommu.dll" (normalized: "c:\\program files\\windows defender\\mpcommu.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.515] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=314880) returned 1
	[0165.515] CloseHandle (hObject=0x20c) returned 1
	[0165.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpCommu.dll" (normalized: "c:\\program files\\windows defender\\mpcommu.dll")) returned 0x20
	[0165.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpCommu.dll" (normalized: "c:\\program files\\windows defender\\mpcommu.dll")) returned 0x20
	[0165.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpCommu.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\mpcommu.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpCommu.dll" (normalized: "c:\\program files\\windows defender\\mpcommu.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpEvMsg.dll" (normalized: "c:\\program files\\windows defender\\mpevmsg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.516] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52224) returned 1
	[0165.516] CloseHandle (hObject=0x20c) returned 1
	[0165.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpEvMsg.dll" (normalized: "c:\\program files\\windows defender\\mpevmsg.dll")) returned 0x20
	[0165.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpEvMsg.dll" (normalized: "c:\\program files\\windows defender\\mpevmsg.dll")) returned 0x20
	[0165.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpEvMsg.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\mpevmsg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpEvMsg.dll" (normalized: "c:\\program files\\windows defender\\mpevmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files\\windows defender\\mpoav.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.517] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52224) returned 1
	[0165.517] CloseHandle (hObject=0x20c) returned 1
	[0165.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files\\windows defender\\mpoav.dll")) returned 0x20
	[0165.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files\\windows defender\\mpoav.dll")) returned 0x20
	[0165.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpOAV.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\mpoav.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files\\windows defender\\mpoav.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpRTP.dll" (normalized: "c:\\program files\\windows defender\\mprtp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.518] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=200192) returned 1
	[0165.518] CloseHandle (hObject=0x20c) returned 1
	[0165.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpRTP.dll" (normalized: "c:\\program files\\windows defender\\mprtp.dll")) returned 0x20
	[0165.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpRTP.dll" (normalized: "c:\\program files\\windows defender\\mprtp.dll")) returned 0x20
	[0165.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpRTP.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\mprtp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpRTP.dll" (normalized: "c:\\program files\\windows defender\\mprtp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpSvc.dll" (normalized: "c:\\program files\\windows defender\\mpsvc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.519] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1011712) returned 1
	[0165.519] CloseHandle (hObject=0x20c) returned 1
	[0165.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpSvc.dll" (normalized: "c:\\program files\\windows defender\\mpsvc.dll")) returned 0x20
	[0165.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpSvc.dll" (normalized: "c:\\program files\\windows defender\\mpsvc.dll")) returned 0x20
	[0165.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpSvc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\mpsvc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MpSvc.dll" (normalized: "c:\\program files\\windows defender\\mpsvc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MSASCui.exe" (normalized: "c:\\program files\\windows defender\\msascui.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.520] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=961024) returned 1
	[0165.520] CloseHandle (hObject=0x20c) returned 1
	[0165.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MSASCui.exe" (normalized: "c:\\program files\\windows defender\\msascui.exe")) returned 0x20
	[0165.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MSASCui.exe" (normalized: "c:\\program files\\windows defender\\msascui.exe")) returned 0x20
	[0165.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MSASCui.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\msascui.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MSASCui.exe" (normalized: "c:\\program files\\windows defender\\msascui.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpCom.dll" (normalized: "c:\\program files\\windows defender\\msmpcom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.523] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=60928) returned 1
	[0165.523] CloseHandle (hObject=0x20c) returned 1
	[0165.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpCom.dll" (normalized: "c:\\program files\\windows defender\\msmpcom.dll")) returned 0x20
	[0165.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpCom.dll" (normalized: "c:\\program files\\windows defender\\msmpcom.dll")) returned 0x20
	[0165.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpCom.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\msmpcom.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpCom.dll" (normalized: "c:\\program files\\windows defender\\msmpcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files\\windows defender\\msmplics.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.524] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0165.524] CloseHandle (hObject=0x20c) returned 1
	[0165.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files\\windows defender\\msmplics.dll")) returned 0x20
	[0165.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files\\windows defender\\msmplics.dll")) returned 0x20
	[0165.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpLics.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\msmplics.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files\\windows defender\\msmplics.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpRes.dll" (normalized: "c:\\program files\\windows defender\\msmpres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.525] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=487936) returned 1
	[0165.525] CloseHandle (hObject=0x20c) returned 1
	[0165.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpRes.dll" (normalized: "c:\\program files\\windows defender\\msmpres.dll")) returned 0x20
	[0165.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpRes.dll" (normalized: "c:\\program files\\windows defender\\msmpres.dll")) returned 0x20
	[0165.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpRes.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows defender\\msmpres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\MsMpRes.dll" (normalized: "c:\\program files\\windows defender\\msmpres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\defense navigation.exe" (normalized: "c:\\program files\\windows journal\\defense navigation.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.526] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75776) returned 1
	[0165.526] CloseHandle (hObject=0x20c) returned 1
	[0165.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\defense navigation.exe" (normalized: "c:\\program files\\windows journal\\defense navigation.exe")) returned 0x20
	[0165.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\defense navigation.exe" (normalized: "c:\\program files\\windows journal\\defense navigation.exe")) returned 0x20
	[0165.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\defense navigation.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\defense navigation.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\defense navigation.exe" (normalized: "c:\\program files\\windows journal\\defense navigation.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.527] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\JNTFiltr.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jntfiltr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.530] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2048) returned 1
	[0165.530] CloseHandle (hObject=0x20c) returned 1
	[0165.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\JNTFiltr.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jntfiltr.dll.mui")) returned 0x20
	[0165.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\JNTFiltr.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jntfiltr.dll.mui")) returned 0x20
	[0165.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\JNTFiltr.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\en-us\\jntfiltr.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\JNTFiltr.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jntfiltr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.531] SetEvent (hEvent=0xfc) returned 1
	[0165.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\jnwdui.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jnwdui.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.532] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5632) returned 1
	[0165.532] CloseHandle (hObject=0x20c) returned 1
	[0165.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\jnwdui.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jnwdui.dll.mui")) returned 0x20
	[0165.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\jnwdui.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jnwdui.dll.mui")) returned 0x20
	[0165.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\jnwdui.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\en-us\\jnwdui.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\jnwdui.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jnwdui.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.532] SetEvent (hEvent=0xfc) returned 1
	[0165.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\jnwmon.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jnwmon.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.533] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0165.533] CloseHandle (hObject=0x20c) returned 1
	[0165.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\jnwmon.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jnwmon.dll.mui")) returned 0x20
	[0165.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\jnwmon.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jnwmon.dll.mui")) returned 0x20
	[0165.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\jnwmon.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\en-us\\jnwmon.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\jnwmon.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\jnwmon.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\Journal.exe.mui" (normalized: "c:\\program files\\windows journal\\en-us\\journal.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.534] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=86016) returned 1
	[0165.534] CloseHandle (hObject=0x20c) returned 1
	[0165.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\Journal.exe.mui" (normalized: "c:\\program files\\windows journal\\en-us\\journal.exe.mui")) returned 0x20
	[0165.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\Journal.exe.mui" (normalized: "c:\\program files\\windows journal\\en-us\\journal.exe.mui")) returned 0x20
	[0165.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\Journal.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\en-us\\journal.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\Journal.exe.mui" (normalized: "c:\\program files\\windows journal\\en-us\\journal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\MSPVWCTL.DLL.mui" (normalized: "c:\\program files\\windows journal\\en-us\\mspvwctl.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.535] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0165.535] CloseHandle (hObject=0x20c) returned 1
	[0165.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\MSPVWCTL.DLL.mui" (normalized: "c:\\program files\\windows journal\\en-us\\mspvwctl.dll.mui")) returned 0x20
	[0165.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\MSPVWCTL.DLL.mui" (normalized: "c:\\program files\\windows journal\\en-us\\mspvwctl.dll.mui")) returned 0x20
	[0165.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\MSPVWCTL.DLL.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\en-us\\mspvwctl.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\MSPVWCTL.DLL.mui" (normalized: "c:\\program files\\windows journal\\en-us\\mspvwctl.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\NBMapTIP.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\nbmaptip.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.536] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0165.536] CloseHandle (hObject=0x20c) returned 1
	[0165.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\NBMapTIP.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\nbmaptip.dll.mui")) returned 0x20
	[0165.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\NBMapTIP.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\nbmaptip.dll.mui")) returned 0x20
	[0165.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\NBMapTIP.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\en-us\\nbmaptip.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\NBMapTIP.dll.mui" (normalized: "c:\\program files\\windows journal\\en-us\\nbmaptip.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\PDIALOG.exe.mui" (normalized: "c:\\program files\\windows journal\\en-us\\pdialog.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.537] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0165.537] CloseHandle (hObject=0x20c) returned 1
	[0165.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\PDIALOG.exe.mui" (normalized: "c:\\program files\\windows journal\\en-us\\pdialog.exe.mui")) returned 0x20
	[0165.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\PDIALOG.exe.mui" (normalized: "c:\\program files\\windows journal\\en-us\\pdialog.exe.mui")) returned 0x20
	[0165.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\PDIALOG.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\en-us\\pdialog.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\en-US\\PDIALOG.exe.mui" (normalized: "c:\\program files\\windows journal\\en-us\\pdialog.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\InkSeg.dll" (normalized: "c:\\program files\\windows journal\\inkseg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.814] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=929792) returned 1
	[0165.814] CloseHandle (hObject=0x13c) returned 1
	[0165.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\InkSeg.dll" (normalized: "c:\\program files\\windows journal\\inkseg.dll")) returned 0x20
	[0165.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\InkSeg.dll" (normalized: "c:\\program files\\windows journal\\inkseg.dll")) returned 0x20
	[0165.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\InkSeg.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\inkseg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\InkSeg.dll" (normalized: "c:\\program files\\windows journal\\inkseg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.815] SetEvent (hEvent=0xfc) returned 1
	[0165.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\JNWDRV.dll" (normalized: "c:\\program files\\windows journal\\jnwdrv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.816] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1402880) returned 1
	[0165.816] CloseHandle (hObject=0x13c) returned 1
	[0165.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\JNWDRV.dll" (normalized: "c:\\program files\\windows journal\\jnwdrv.dll")) returned 0x20
	[0165.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\JNWDRV.dll" (normalized: "c:\\program files\\windows journal\\jnwdrv.dll")) returned 0x20
	[0165.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\JNWDRV.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\jnwdrv.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\JNWDRV.dll" (normalized: "c:\\program files\\windows journal\\jnwdrv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.817] SetEvent (hEvent=0xfc) returned 1
	[0165.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwdui.dll" (normalized: "c:\\program files\\windows journal\\jnwdui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.817] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=98816) returned 1
	[0165.817] CloseHandle (hObject=0x13c) returned 1
	[0165.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwdui.dll" (normalized: "c:\\program files\\windows journal\\jnwdui.dll")) returned 0x20
	[0165.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwdui.dll" (normalized: "c:\\program files\\windows journal\\jnwdui.dll")) returned 0x20
	[0165.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwdui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\jnwdui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwdui.dll" (normalized: "c:\\program files\\windows journal\\jnwdui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwmon.dll" (normalized: "c:\\program files\\windows journal\\jnwmon.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.818] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24576) returned 1
	[0165.818] CloseHandle (hObject=0x13c) returned 1
	[0165.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwmon.dll" (normalized: "c:\\program files\\windows journal\\jnwmon.dll")) returned 0x20
	[0165.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwmon.dll" (normalized: "c:\\program files\\windows journal\\jnwmon.dll")) returned 0x20
	[0165.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwmon.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\jnwmon.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwmon.dll" (normalized: "c:\\program files\\windows journal\\jnwmon.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwppr.dll" (normalized: "c:\\program files\\windows journal\\jnwppr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.819] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27648) returned 1
	[0165.819] CloseHandle (hObject=0x13c) returned 1
	[0165.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwppr.dll" (normalized: "c:\\program files\\windows journal\\jnwppr.dll")) returned 0x20
	[0165.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwppr.dll" (normalized: "c:\\program files\\windows journal\\jnwppr.dll")) returned 0x20
	[0165.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwppr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\jnwppr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\jnwppr.dll" (normalized: "c:\\program files\\windows journal\\jnwppr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Journal.exe" (normalized: "c:\\program files\\windows journal\\journal.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.823] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2164224) returned 1
	[0165.823] CloseHandle (hObject=0x13c) returned 1
	[0165.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Journal.exe" (normalized: "c:\\program files\\windows journal\\journal.exe")) returned 0x20
	[0165.823] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Journal.exe" (normalized: "c:\\program files\\windows journal\\journal.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Journal.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\journal.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0165.823] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Journal.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\journal.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Journal.exe" (normalized: "c:\\program files\\windows journal\\journal.exe")) returned 0
	[0165.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\MSPVWCTL.DLL" (normalized: "c:\\program files\\windows journal\\mspvwctl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.824] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=668672) returned 1
	[0165.824] CloseHandle (hObject=0x13c) returned 1
	[0165.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\MSPVWCTL.DLL" (normalized: "c:\\program files\\windows journal\\mspvwctl.dll")) returned 0x20
	[0165.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\MSPVWCTL.DLL" (normalized: "c:\\program files\\windows journal\\mspvwctl.dll")) returned 0x20
	[0165.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\MSPVWCTL.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\mspvwctl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\MSPVWCTL.DLL" (normalized: "c:\\program files\\windows journal\\mspvwctl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\NBDoc.DLL" (normalized: "c:\\program files\\windows journal\\nbdoc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.825] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1732096) returned 1
	[0165.825] CloseHandle (hObject=0x13c) returned 1
	[0165.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\NBDoc.DLL" (normalized: "c:\\program files\\windows journal\\nbdoc.dll")) returned 0x20
	[0165.825] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Journal\\NBDoc.DLL" (normalized: "c:\\program files\\windows journal\\nbdoc.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Journal\\NBDoc.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\nbdoc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0165.825] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Journal\\NBDoc.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\nbdoc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Journal\\NBDoc.DLL" (normalized: "c:\\program files\\windows journal\\nbdoc.dll")) returned 0
	[0165.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\NBMapTIP.dll" (normalized: "c:\\program files\\windows journal\\nbmaptip.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.826] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=62976) returned 1
	[0165.826] CloseHandle (hObject=0x13c) returned 1
	[0165.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\NBMapTIP.dll" (normalized: "c:\\program files\\windows journal\\nbmaptip.dll")) returned 0x20
	[0165.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\NBMapTIP.dll" (normalized: "c:\\program files\\windows journal\\nbmaptip.dll")) returned 0x20
	[0165.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\NBMapTIP.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\nbmaptip.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\NBMapTIP.dll" (normalized: "c:\\program files\\windows journal\\nbmaptip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\PDIALOG.exe" (normalized: "c:\\program files\\windows journal\\pdialog.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.827] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51200) returned 1
	[0165.827] CloseHandle (hObject=0x13c) returned 1
	[0165.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\PDIALOG.exe" (normalized: "c:\\program files\\windows journal\\pdialog.exe")) returned 0x20
	[0165.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\PDIALOG.exe" (normalized: "c:\\program files\\windows journal\\pdialog.exe")) returned 0x20
	[0165.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\PDIALOG.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\pdialog.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\PDIALOG.exe" (normalized: "c:\\program files\\windows journal\\pdialog.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.828] SetEvent (hEvent=0xfc) returned 1
	[0165.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\purple-extending.exe" (normalized: "c:\\program files\\windows journal\\purple-extending.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.828] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75776) returned 1
	[0165.828] CloseHandle (hObject=0x13c) returned 1
	[0165.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\purple-extending.exe" (normalized: "c:\\program files\\windows journal\\purple-extending.exe")) returned 0x20
	[0165.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\purple-extending.exe" (normalized: "c:\\program files\\windows journal\\purple-extending.exe")) returned 0x20
	[0165.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\purple-extending.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\purple-extending.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\purple-extending.exe" (normalized: "c:\\program files\\windows journal\\purple-extending.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" (normalized: "c:\\program files\\windows journal\\templates\\blank.jtp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.830] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5470) returned 1
	[0165.830] CloseHandle (hObject=0x13c) returned 1
	[0165.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" (normalized: "c:\\program files\\windows journal\\templates\\blank.jtp")) returned 0x20
	[0165.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" (normalized: "c:\\program files\\windows journal\\templates\\blank.jtp")) returned 0x20
	[0165.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\blank.jtp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\templates\\blank.jtp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\blank.jtp" (normalized: "c:\\program files\\windows journal\\templates\\blank.jtp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" (normalized: "c:\\program files\\windows journal\\templates\\dotted_line.jtp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.831] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11494) returned 1
	[0165.831] CloseHandle (hObject=0x13c) returned 1
	[0165.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" (normalized: "c:\\program files\\windows journal\\templates\\dotted_line.jtp")) returned 0x20
	[0165.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" (normalized: "c:\\program files\\windows journal\\templates\\dotted_line.jtp")) returned 0x20
	[0165.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\templates\\dotted_line.jtp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp" (normalized: "c:\\program files\\windows journal\\templates\\dotted_line.jtp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_1.jtp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.832] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13852) returned 1
	[0165.832] CloseHandle (hObject=0x13c) returned 1
	[0165.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_1.jtp")) returned 0x20
	[0165.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_1.jtp")) returned 0x20
	[0165.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\templates\\genko_1.jtp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_1.jtp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_2.jtp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.833] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19596) returned 1
	[0165.833] CloseHandle (hObject=0x13c) returned 1
	[0165.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_2.jtp")) returned 0x20
	[0165.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_2.jtp")) returned 0x20
	[0165.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\templates\\genko_2.jtp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp" (normalized: "c:\\program files\\windows journal\\templates\\genko_2.jtp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" (normalized: "c:\\program files\\windows journal\\templates\\graph.jtp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.834] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=123228) returned 1
	[0165.834] CloseHandle (hObject=0x13c) returned 1
	[0165.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" (normalized: "c:\\program files\\windows journal\\templates\\graph.jtp")) returned 0x20
	[0165.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" (normalized: "c:\\program files\\windows journal\\templates\\graph.jtp")) returned 0x20
	[0165.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\templates\\graph.jtp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp" (normalized: "c:\\program files\\windows journal\\templates\\graph.jtp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" (normalized: "c:\\program files\\windows journal\\templates\\memo.jtp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.835] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=159598) returned 1
	[0165.835] CloseHandle (hObject=0x13c) returned 1
	[0165.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" (normalized: "c:\\program files\\windows journal\\templates\\memo.jtp")) returned 0x20
	[0165.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" (normalized: "c:\\program files\\windows journal\\templates\\memo.jtp")) returned 0x20
	[0165.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\templates\\memo.jtp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp" (normalized: "c:\\program files\\windows journal\\templates\\memo.jtp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" (normalized: "c:\\program files\\windows journal\\templates\\month_calendar.jtp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.836] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10076) returned 1
	[0165.836] CloseHandle (hObject=0x13c) returned 1
	[0165.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" (normalized: "c:\\program files\\windows journal\\templates\\month_calendar.jtp")) returned 0x20
	[0165.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" (normalized: "c:\\program files\\windows journal\\templates\\month_calendar.jtp")) returned 0x20
	[0165.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\templates\\month_calendar.jtp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp" (normalized: "c:\\program files\\windows journal\\templates\\month_calendar.jtp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" (normalized: "c:\\program files\\windows journal\\templates\\music.jtp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.837] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40792) returned 1
	[0165.837] CloseHandle (hObject=0x13c) returned 1
	[0165.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" (normalized: "c:\\program files\\windows journal\\templates\\music.jtp")) returned 0x20
	[0165.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" (normalized: "c:\\program files\\windows journal\\templates\\music.jtp")) returned 0x20
	[0165.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Music.jtp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\templates\\music.jtp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Music.jtp" (normalized: "c:\\program files\\windows journal\\templates\\music.jtp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" (normalized: "c:\\program files\\windows journal\\templates\\seyes.jtp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.838] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43354) returned 1
	[0165.838] CloseHandle (hObject=0x13c) returned 1
	[0165.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" (normalized: "c:\\program files\\windows journal\\templates\\seyes.jtp")) returned 0x20
	[0165.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" (normalized: "c:\\program files\\windows journal\\templates\\seyes.jtp")) returned 0x20
	[0165.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\templates\\seyes.jtp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp" (normalized: "c:\\program files\\windows journal\\templates\\seyes.jtp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" (normalized: "c:\\program files\\windows journal\\templates\\shorthand.jtp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.839] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=87898) returned 1
	[0165.839] CloseHandle (hObject=0x13c) returned 1
	[0165.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" (normalized: "c:\\program files\\windows journal\\templates\\shorthand.jtp")) returned 0x20
	[0165.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" (normalized: "c:\\program files\\windows journal\\templates\\shorthand.jtp")) returned 0x20
	[0165.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\templates\\shorthand.jtp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp" (normalized: "c:\\program files\\windows journal\\templates\\shorthand.jtp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" (normalized: "c:\\program files\\windows journal\\templates\\to_do_list.jtp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.840] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32602) returned 1
	[0165.840] CloseHandle (hObject=0x13c) returned 1
	[0165.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" (normalized: "c:\\program files\\windows journal\\templates\\to_do_list.jtp")) returned 0x20
	[0165.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" (normalized: "c:\\program files\\windows journal\\templates\\to_do_list.jtp")) returned 0x20
	[0165.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows journal\\templates\\to_do_list.jtp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp" (normalized: "c:\\program files\\windows journal\\templates\\to_do_list.jtp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\close.exe" (normalized: "c:\\program files\\windows mail\\close.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0165.845] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75776) returned 1
	[0165.845] CloseHandle (hObject=0x208) returned 1
	[0165.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\close.exe" (normalized: "c:\\program files\\windows mail\\close.exe")) returned 0x20
	[0165.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\close.exe" (normalized: "c:\\program files\\windows mail\\close.exe")) returned 0x20
	[0165.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\close.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\close.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\close.exe" (normalized: "c:\\program files\\windows mail\\close.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.845] SetEvent (hEvent=0xfc) returned 1
	[0165.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files\\windows mail\\en-us\\msoeres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0165.846] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=518144) returned 1
	[0165.846] CloseHandle (hObject=0x208) returned 1
	[0165.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files\\windows mail\\en-us\\msoeres.dll.mui")) returned 0x20
	[0165.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files\\windows mail\\en-us\\msoeres.dll.mui")) returned 0x20
	[0165.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\msoeres.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\en-us\\msoeres.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files\\windows mail\\en-us\\msoeres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.847] SetEvent (hEvent=0xfc) returned 1
	[0165.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files\\windows mail\\en-us\\winmail.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0165.847] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5632) returned 1
	[0165.847] CloseHandle (hObject=0x208) returned 1
	[0165.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files\\windows mail\\en-us\\winmail.exe.mui")) returned 0x20
	[0165.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files\\windows mail\\en-us\\winmail.exe.mui")) returned 0x20
	[0165.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\WinMail.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\en-us\\winmail.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files\\windows mail\\en-us\\winmail.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\msoe.dll" (normalized: "c:\\program files\\windows mail\\msoe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0165.848] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2080256) returned 1
	[0165.849] CloseHandle (hObject=0x208) returned 1
	[0165.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\msoe.dll" (normalized: "c:\\program files\\windows mail\\msoe.dll")) returned 0x20
	[0165.849] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Mail\\msoe.dll" (normalized: "c:\\program files\\windows mail\\msoe.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Mail\\msoe.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\msoe.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0165.849] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Mail\\msoe.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\msoe.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Mail\\msoe.dll" (normalized: "c:\\program files\\windows mail\\msoe.dll")) returned 0
	[0165.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files\\windows mail\\msoeres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.943] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2836992) returned 1
	[0165.943] CloseHandle (hObject=0x20c) returned 1
	[0165.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files\\windows mail\\msoeres.dll")) returned 0x20
	[0165.943] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files\\windows mail\\msoeres.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Mail\\MSOERES.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\msoeres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0165.944] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Windows Mail\\MSOERES.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\msoeres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files\\windows mail\\msoeres.dll")) returned 0
	[0165.944] SetEvent (hEvent=0xfc) returned 1
	[0165.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wab.exe" (normalized: "c:\\program files\\windows mail\\wab.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.945] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=516096) returned 1
	[0165.945] CloseHandle (hObject=0x20c) returned 1
	[0165.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wab.exe" (normalized: "c:\\program files\\windows mail\\wab.exe")) returned 0x20
	[0165.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wab.exe" (normalized: "c:\\program files\\windows mail\\wab.exe")) returned 0x20
	[0165.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wab.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\wab.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wab.exe" (normalized: "c:\\program files\\windows mail\\wab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabfind.dll" (normalized: "c:\\program files\\windows mail\\wabfind.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.946] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35328) returned 1
	[0165.946] CloseHandle (hObject=0x20c) returned 1
	[0165.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabfind.dll" (normalized: "c:\\program files\\windows mail\\wabfind.dll")) returned 0x20
	[0165.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabfind.dll" (normalized: "c:\\program files\\windows mail\\wabfind.dll")) returned 0x20
	[0165.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabfind.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\wabfind.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabfind.dll" (normalized: "c:\\program files\\windows mail\\wabfind.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files\\windows mail\\wabimp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.947] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50176) returned 1
	[0165.947] CloseHandle (hObject=0x20c) returned 1
	[0165.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files\\windows mail\\wabimp.dll")) returned 0x20
	[0165.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files\\windows mail\\wabimp.dll")) returned 0x20
	[0165.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabimp.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\wabimp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files\\windows mail\\wabimp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files\\windows mail\\wabmig.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.948] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67584) returned 1
	[0165.948] CloseHandle (hObject=0x20c) returned 1
	[0165.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files\\windows mail\\wabmig.exe")) returned 0x20
	[0165.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files\\windows mail\\wabmig.exe")) returned 0x20
	[0165.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabmig.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\wabmig.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files\\windows mail\\wabmig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files\\windows mail\\winmail.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.949] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=398848) returned 1
	[0165.949] CloseHandle (hObject=0x20c) returned 1
	[0165.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files\\windows mail\\winmail.exe")) returned 0x26
	[0165.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files\\windows mail\\winmail.exe")) returned 0x26
	[0165.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\WinMail.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows mail\\winmail.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\WinMail.exe" (normalized: "c:\\program files\\windows mail\\winmail.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\mpvis.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\mpvis.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.954] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0165.954] CloseHandle (hObject=0x13c) returned 1
	[0165.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\mpvis.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\mpvis.dll.mui")) returned 0x20
	[0165.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\mpvis.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\mpvis.dll.mui")) returned 0x20
	[0165.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\mpvis.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\en-us\\mpvis.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\mpvis.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\mpvis.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.954] SetEvent (hEvent=0xfc) returned 1
	[0165.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\setup_wm.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\setup_wm.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.955] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56320) returned 1
	[0165.955] CloseHandle (hObject=0x13c) returned 1
	[0165.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\setup_wm.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\setup_wm.exe.mui")) returned 0x20
	[0165.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\setup_wm.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\setup_wm.exe.mui")) returned 0x20
	[0165.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\setup_wm.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\en-us\\setup_wm.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\setup_wm.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\setup_wm.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmlaunch.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmlaunch.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0165.957] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2048) returned 1
	[0165.957] CloseHandle (hObject=0x13c) returned 1
	[0165.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmlaunch.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmlaunch.exe.mui")) returned 0x20
	[0165.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmlaunch.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmlaunch.exe.mui")) returned 0x20
	[0165.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmlaunch.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\en-us\\wmlaunch.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmlaunch.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmlaunch.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPDMC.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpdmc.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.959] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14848) returned 1
	[0165.959] CloseHandle (hObject=0x20c) returned 1
	[0165.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPDMC.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpdmc.exe.mui")) returned 0x20
	[0165.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPDMC.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpdmc.exe.mui")) returned 0x20
	[0165.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPDMC.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\en-us\\wmpdmc.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPDMC.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpdmc.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.960] SetEvent (hEvent=0xfc) returned 1
	[0165.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpdmccore.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.960] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0165.960] CloseHandle (hObject=0x20c) returned 1
	[0165.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpdmccore.dll.mui")) returned 0x20
	[0165.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpdmccore.dll.mui")) returned 0x20
	[0165.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\en-us\\wmpdmccore.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPDMCCore.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpdmccore.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmplayer.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmplayer.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.961] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3072) returned 1
	[0165.961] CloseHandle (hObject=0x20c) returned 1
	[0165.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmplayer.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmplayer.exe.mui")) returned 0x20
	[0165.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmplayer.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmplayer.exe.mui")) returned 0x20
	[0165.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmplayer.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\en-us\\wmplayer.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmplayer.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmplayer.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpmediasharing.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.962] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0165.962] CloseHandle (hObject=0x20c) returned 1
	[0165.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpmediasharing.dll.mui")) returned 0x20
	[0165.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpmediasharing.dll.mui")) returned 0x20
	[0165.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\en-us\\wmpmediasharing.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpmediasharing.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnetwk.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnetwk.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.964] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37376) returned 1
	[0165.964] CloseHandle (hObject=0x1a0) returned 1
	[0165.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnetwk.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnetwk.exe.mui")) returned 0x20
	[0165.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnetwk.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnetwk.exe.mui")) returned 0x20
	[0165.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnetwk.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnetwk.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnetwk.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnetwk.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnscfg.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnscfg.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.965] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0165.965] CloseHandle (hObject=0x1a0) returned 1
	[0165.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnscfg.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnscfg.exe.mui")) returned 0x20
	[0165.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnscfg.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnscfg.exe.mui")) returned 0x20
	[0165.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnscfg.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnscfg.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnscfg.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnscfg.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnssci.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnssci.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.966] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0165.966] CloseHandle (hObject=0x1a0) returned 1
	[0165.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnssci.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnssci.dll.mui")) returned 0x20
	[0165.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnssci.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnssci.dll.mui")) returned 0x20
	[0165.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnssci.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnssci.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnssci.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnssci.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnssui.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnssui.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.968] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0165.968] CloseHandle (hObject=0x1a0) returned 1
	[0165.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnssui.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnssui.dll.mui")) returned 0x20
	[0165.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnssui.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnssui.dll.mui")) returned 0x20
	[0165.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnssui.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnssui.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\wmpnssui.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnssui.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPSideShowGadget.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpsideshowgadget.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.970] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0165.970] CloseHandle (hObject=0x1a0) returned 1
	[0165.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPSideShowGadget.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpsideshowgadget.exe.mui")) returned 0x20
	[0165.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPSideShowGadget.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpsideshowgadget.exe.mui")) returned 0x20
	[0165.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPSideShowGadget.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\en-us\\wmpsideshowgadget.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\WMPSideShowGadget.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpsideshowgadget.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.971] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19842) returned 1
	[0165.971] CloseHandle (hObject=0x1a0) returned 1
	[0165.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\avtransport.xml")) returned 0x20
	[0165.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\avtransport.xml")) returned 0x20
	[0165.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\media renderer\\avtransport.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\connectionmanager_dmr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.973] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5375) returned 1
	[0165.973] CloseHandle (hObject=0x1a0) returned 1
	[0165.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\connectionmanager_dmr.xml")) returned 0x20
	[0165.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\connectionmanager_dmr.xml")) returned 0x20
	[0165.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\media renderer\\connectionmanager_dmr.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\connectionmanager_dmr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_120.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.974] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2979) returned 1
	[0165.974] CloseHandle (hObject=0x1a0) returned 1
	[0165.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_120.jpg")) returned 0x20
	[0165.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_120.jpg")) returned 0x20
	[0165.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_120.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_120.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.975] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14876) returned 1
	[0165.975] CloseHandle (hObject=0x1a0) returned 1
	[0165.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_120.png")) returned 0x20
	[0165.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_120.png")) returned 0x20
	[0165.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_120.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_120.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_48.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0165.976] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1220) returned 1
	[0165.976] CloseHandle (hObject=0x1a0) returned 1
	[0165.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_48.jpg")) returned 0x20
	[0165.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_48.jpg")) returned 0x20
	[0165.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_48.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_48.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_48.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.978] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4265) returned 1
	[0165.978] CloseHandle (hObject=0x20c) returned 1
	[0165.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_48.png")) returned 0x20
	[0165.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_48.png")) returned 0x20
	[0165.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_48.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_48.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\renderingcontrol.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.979] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6363) returned 1
	[0165.979] CloseHandle (hObject=0x20c) returned 1
	[0165.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\renderingcontrol.xml")) returned 0x20
	[0165.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\renderingcontrol.xml")) returned 0x20
	[0165.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\media renderer\\renderingcontrol.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\renderingcontrol.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files\\windows media player\\mpvis.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.980] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=293376) returned 1
	[0165.980] CloseHandle (hObject=0x20c) returned 1
	[0165.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files\\windows media player\\mpvis.dll")) returned 0x20
	[0165.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files\\windows media player\\mpvis.dll")) returned 0x20
	[0165.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\mpvis.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\mpvis.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files\\windows media player\\mpvis.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\connectionmanager.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0165.982] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5422) returned 1
	[0165.982] CloseHandle (hObject=0x20c) returned 1
	[0165.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\connectionmanager.xml")) returned 0x20
	[0165.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\connectionmanager.xml")) returned 0x20
	[0165.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\connectionmanager.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0165.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\connectionmanager.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0165.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\contentdirectory.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.071] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8338) returned 1
	[0166.071] CloseHandle (hObject=0x1a0) returned 1
	[0166.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\contentdirectory.xml")) returned 0x20
	[0166.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\contentdirectory.xml")) returned 0x20
	[0166.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\contentdirectory.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\contentdirectory.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw120.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw120.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.072] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21330) returned 1
	[0166.072] CloseHandle (hObject=0x1a0) returned 1
	[0166.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw120.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw120.jpg")) returned 0x20
	[0166.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw120.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw120.jpg")) returned 0x20
	[0166.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw120.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw120.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw120.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw120.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw120.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.073] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6434) returned 1
	[0166.073] CloseHandle (hObject=0x1a0) returned 1
	[0166.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw120.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw120.png")) returned 0x20
	[0166.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw120.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw120.png")) returned 0x20
	[0166.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw120.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw120.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw120.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw120.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw32.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw32.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.075] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3128) returned 1
	[0166.075] CloseHandle (hObject=0x1a0) returned 1
	[0166.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw32.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw32.bmp")) returned 0x20
	[0166.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw32.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw32.bmp")) returned 0x20
	[0166.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw32.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw32.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw32.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw32.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw32.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw32.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.076] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8991) returned 1
	[0166.076] CloseHandle (hObject=0x1a0) returned 1
	[0166.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw32.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw32.jpg")) returned 0x20
	[0166.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw32.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw32.jpg")) returned 0x20
	[0166.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw32.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw32.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw32.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw32.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.077] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2432) returned 1
	[0166.077] CloseHandle (hObject=0x1a0) returned 1
	[0166.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.bmp")) returned 0x20
	[0166.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.bmp")) returned 0x20
	[0166.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.078] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10912) returned 1
	[0166.079] CloseHandle (hObject=0x1a0) returned 1
	[0166.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.jpg")) returned 0x20
	[0166.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.jpg")) returned 0x20
	[0166.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.144] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4124) returned 1
	[0166.144] CloseHandle (hObject=0x1a0) returned 1
	[0166.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.png")) returned 0x20
	[0166.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.png")) returned 0x20
	[0166.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_bw48.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_bw48.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color120.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.146] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22408) returned 1
	[0166.146] CloseHandle (hObject=0x1a0) returned 1
	[0166.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color120.jpg")) returned 0x20
	[0166.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color120.jpg")) returned 0x20
	[0166.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color120.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color120.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.147] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12107) returned 1
	[0166.147] CloseHandle (hObject=0x1a0) returned 1
	[0166.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color120.png")) returned 0x20
	[0166.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color120.png")) returned 0x20
	[0166.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color120.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color120.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color32.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.150] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3128) returned 1
	[0166.150] CloseHandle (hObject=0x1a0) returned 1
	[0166.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color32.bmp")) returned 0x20
	[0166.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color32.bmp")) returned 0x20
	[0166.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color32.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color32.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color32.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.328] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9421) returned 1
	[0166.328] CloseHandle (hObject=0x20c) returned 1
	[0166.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color32.jpg")) returned 0x20
	[0166.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color32.jpg")) returned 0x20
	[0166.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color32.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color32.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.328] SetEvent (hEvent=0xfc) returned 1
	[0166.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.330] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1702) returned 1
	[0166.330] CloseHandle (hObject=0x20c) returned 1
	[0166.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png")) returned 0x20
	[0166.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png")) returned 0x20
	[0166.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-desk.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-desk.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.330] SetEvent (hEvent=0xfc) returned 1
	[0166.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.430] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1367) returned 1
	[0166.430] CloseHandle (hObject=0x20c) returned 1
	[0166.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png")) returned 0x20
	[0166.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png")) returned 0x20
	[0166.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bg-dock.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bg-dock.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.430] SetEvent (hEvent=0xfc) returned 1
	[0166.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.554] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=201) returned 1
	[0166.554] CloseHandle (hObject=0x20c) returned 1
	[0166.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png")) returned 0x20
	[0166.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png")) returned 0x20
	[0166.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\images\\bNext-disable.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\images\\bnext-disable.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.555] SetEvent (hEvent=0xfc) returned 1
	[0166.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.557] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4172) returned 1
	[0166.557] CloseHandle (hObject=0x20c) returned 1
	[0166.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html")) returned 0x20
	[0166.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html")) returned 0x20
	[0166.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\clock.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\clock.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.557] SetEvent (hEvent=0xfc) returned 1
	[0166.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.558] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=674) returned 1
	[0166.558] CloseHandle (hObject=0x20c) returned 1
	[0166.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css")) returned 0x20
	[0166.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css")) returned 0x20
	[0166.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\clock.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\clock.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.559] SetEvent (hEvent=0xfc) returned 1
	[0166.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.560] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1374) returned 1
	[0166.560] CloseHandle (hObject=0x20c) returned 1
	[0166.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0166.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0166.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.560] SetEvent (hEvent=0xfc) returned 1
	[0166.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.561] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1003) returned 1
	[0166.561] CloseHandle (hObject=0x20c) returned 1
	[0166.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml")) returned 0x20
	[0166.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml")) returned 0x20
	[0166.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.562] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18042) returned 1
	[0166.562] CloseHandle (hObject=0x20c) returned 1
	[0166.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js")) returned 0x20
	[0166.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js")) returned 0x20
	[0166.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\clock.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\clock.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.564] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23630) returned 1
	[0166.564] CloseHandle (hObject=0x20c) returned 1
	[0166.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0166.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0166.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.564] SetEvent (hEvent=0xfc) returned 1
	[0166.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.565] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9612) returned 1
	[0166.565] CloseHandle (hObject=0x20c) returned 1
	[0166.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js")) returned 0x20
	[0166.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js")) returned 0x20
	[0166.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\js\\timeZones.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\js\\timezones.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.566] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10260) returned 1
	[0166.566] CloseHandle (hObject=0x20c) returned 1
	[0166.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html")) returned 0x20
	[0166.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html")) returned 0x20
	[0166.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\en-us\\settings.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.567] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11788) returned 1
	[0166.567] CloseHandle (hObject=0x20c) returned 1
	[0166.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\icon.png")) returned 0x20
	[0166.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\icon.png")) returned 0x20
	[0166.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.570] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25904) returned 1
	[0166.571] CloseHandle (hObject=0x20c) returned 1
	[0166.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png")) returned 0x20
	[0166.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png")) returned 0x20
	[0166.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.571] SetEvent (hEvent=0xfc) returned 1
	[0166.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.571] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=306) returned 1
	[0166.572] CloseHandle (hObject=0x20c) returned 1
	[0166.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png")) returned 0x20
	[0166.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png")) returned 0x20
	[0166.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.573] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=381) returned 1
	[0166.573] CloseHandle (hObject=0x20c) returned 1
	[0166.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png")) returned 0x20
	[0166.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png")) returned 0x20
	[0166.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.573] SetEvent (hEvent=0xfc) returned 1
	[0166.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0166.574] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=434) returned 1
	[0166.574] CloseHandle (hObject=0x20c) returned 1
	[0166.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png")) returned 0x20
	[0166.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png")) returned 0x20
	[0166.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.683] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3171) returned 1
	[0166.683] CloseHandle (hObject=0x140) returned 1
	[0166.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png")) returned 0x20
	[0166.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png")) returned 0x20
	[0166.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\cronometer_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\cronometer_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.683] SetEvent (hEvent=0xfc) returned 1
	[0166.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140
	[0166.816] GetFileSizeEx (in: hFile=0x140, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30641) returned 1
	[0166.816] CloseHandle (hObject=0x140) returned 1
	[0166.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png")) returned 0x20
	[0166.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png")) returned 0x20
	[0166.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\diner.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\diner.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.817] SetEvent (hEvent=0xfc) returned 1
	[0166.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0166.959] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0166.959] CloseHandle (hObject=0x168) returned 1
	[0166.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png")) returned 0x20
	[0166.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png")) returned 0x20
	[0166.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.960] SetEvent (hEvent=0xfc) returned 1
	[0166.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0166.961] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3003) returned 1
	[0166.961] CloseHandle (hObject=0x168) returned 1
	[0166.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png")) returned 0x20
	[0166.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png")) returned 0x20
	[0166.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0166.965] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23101) returned 1
	[0166.965] CloseHandle (hObject=0x1f4) returned 1
	[0166.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png")) returned 0x20
	[0166.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png")) returned 0x20
	[0166.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\system_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\system_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.966] SetEvent (hEvent=0xfc) returned 1
	[0166.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0166.966] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19515) returned 1
	[0166.966] CloseHandle (hObject=0x1f4) returned 1
	[0166.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png")) returned 0x20
	[0166.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png")) returned 0x20
	[0166.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0166.969] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3019) returned 1
	[0166.969] CloseHandle (hObject=0x1f4) returned 1
	[0166.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png")) returned 0x20
	[0166.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png")) returned 0x20
	[0166.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_dot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.970] SetEvent (hEvent=0xfc) returned 1
	[0166.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0166.971] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=351) returned 1
	[0166.971] CloseHandle (hObject=0x1f4) returned 1
	[0166.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png")) returned 0x20
	[0166.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png")) returned 0x20
	[0166.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_h.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.974] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=361) returned 1
	[0166.974] CloseHandle (hObject=0x170) returned 1
	[0166.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png")) returned 0x20
	[0166.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png")) returned 0x20
	[0166.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_m.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.974] SetEvent (hEvent=0xfc) returned 1
	[0166.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.975] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3000) returned 1
	[0166.975] CloseHandle (hObject=0x170) returned 1
	[0166.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png")) returned 0x20
	[0166.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png")) returned 0x20
	[0166.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_s.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.977] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21381) returned 1
	[0166.977] CloseHandle (hObject=0x170) returned 1
	[0166.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png")) returned 0x20
	[0166.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png")) returned 0x20
	[0166.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\trad_settings.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\images\\trad_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.978] SetEvent (hEvent=0xfc) returned 1
	[0166.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.978] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6166) returned 1
	[0166.978] CloseHandle (hObject=0x170) returned 1
	[0166.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\logo.png")) returned 0x20
	[0166.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\logo.png")) returned 0x20
	[0166.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.979] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20252) returned 1
	[0166.979] CloseHandle (hObject=0x170) returned 1
	[0166.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\drag.png")) returned 0x20
	[0166.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\drag.png")) returned 0x20
	[0166.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.981] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4630) returned 1
	[0166.981] CloseHandle (hObject=0x170) returned 1
	[0166.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html")) returned 0x20
	[0166.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html")) returned 0x20
	[0166.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\cpu.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\cpu.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.981] SetEvent (hEvent=0xfc) returned 1
	[0166.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.982] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1372) returned 1
	[0166.982] CloseHandle (hObject=0x170) returned 1
	[0166.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css")) returned 0x20
	[0166.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css")) returned 0x20
	[0166.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\css\\cpu.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\css\\cpu.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.986] SetEvent (hEvent=0xfc) returned 1
	[0166.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.986] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=993) returned 1
	[0166.986] CloseHandle (hObject=0x170) returned 1
	[0166.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml")) returned 0x20
	[0166.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml")) returned 0x20
	[0166.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.988] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18348) returned 1
	[0166.988] CloseHandle (hObject=0x170) returned 1
	[0166.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js")) returned 0x20
	[0166.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js")) returned 0x20
	[0166.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\en-US\\js\\cpu.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\en-us\\js\\cpu.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.988] SetEvent (hEvent=0xfc) returned 1
	[0166.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.989] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9186) returned 1
	[0166.989] CloseHandle (hObject=0x170) returned 1
	[0166.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\icon.png")) returned 0x20
	[0166.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\icon.png")) returned 0x20
	[0166.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.990] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17126) returned 1
	[0166.990] CloseHandle (hObject=0x170) returned 1
	[0166.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png")) returned 0x20
	[0166.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png")) returned 0x20
	[0166.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\back.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.992] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26193) returned 1
	[0166.992] CloseHandle (hObject=0x170) returned 1
	[0166.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png")) returned 0x20
	[0166.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png")) returned 0x20
	[0166.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\back_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\back_lrg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.993] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=346) returned 1
	[0166.993] CloseHandle (hObject=0x170) returned 1
	[0166.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png")) returned 0x20
	[0166.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png")) returned 0x20
	[0166.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.996] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3217) returned 1
	[0166.996] CloseHandle (hObject=0x170) returned 1
	[0166.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png")) returned 0x20
	[0166.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png")) returned 0x20
	[0166.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0166.997] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4042) returned 1
	[0166.997] CloseHandle (hObject=0x170) returned 1
	[0166.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png")) returned 0x20
	[0166.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png")) returned 0x20
	[0166.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dialdot_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dialdot_lrg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0166.999] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3081) returned 1
	[0166.999] CloseHandle (hObject=0x1a0) returned 1
	[0166.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png")) returned 0x20
	[0166.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png")) returned 0x20
	[0166.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0166.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.000] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3075) returned 1
	[0167.000] CloseHandle (hObject=0x1a0) returned 1
	[0167.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png")) returned 0x20
	[0167.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png")) returned 0x20
	[0167.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0167.099] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3026) returned 1
	[0167.099] CloseHandle (hObject=0x1a0) returned 1
	[0167.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png")) returned 0x20
	[0167.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png")) returned 0x20
	[0167.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.099] SetEvent (hEvent=0xfc) returned 1
	[0167.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.186] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=443) returned 1
	[0167.186] CloseHandle (hObject=0x20c) returned 1
	[0167.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png")) returned 0x20
	[0167.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png")) returned 0x20
	[0167.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.187] SetEvent (hEvent=0xfc) returned 1
	[0167.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.304] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=696) returned 1
	[0167.304] CloseHandle (hObject=0x168) returned 1
	[0167.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png")) returned 0x20
	[0167.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png")) returned 0x20
	[0167.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.305] SetEvent (hEvent=0xfc) returned 1
	[0167.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Background_Loading.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_background_loading.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0167.452] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=150964) returned 1
	[0167.455] CloseHandle (hObject=0x168) returned 1
	[0167.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Background_Loading.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_background_loading.png")) returned 0x20
	[0167.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Background_Loading.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_background_loading.png")) returned 0x20
	[0167.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Background_Loading.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_background_loading.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\images\\Gadget_Main_Background_Loading.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\images\\gadget_main_background_loading.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.598] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24128) returned 1
	[0167.598] CloseHandle (hObject=0x13c) returned 1
	[0167.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png")) returned 0x20
	[0167.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png")) returned 0x20
	[0167.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\10.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\10.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.599] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21159) returned 1
	[0167.599] CloseHandle (hObject=0x13c) returned 1
	[0167.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png")) returned 0x20
	[0167.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png")) returned 0x20
	[0167.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.600] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21275) returned 1
	[0167.601] CloseHandle (hObject=0x13c) returned 1
	[0167.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png")) returned 0x20
	[0167.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png")) returned 0x20
	[0167.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.601] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18089) returned 1
	[0167.601] CloseHandle (hObject=0x13c) returned 1
	[0167.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png")) returned 0x20
	[0167.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png")) returned 0x20
	[0167.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.603] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41941) returned 1
	[0167.603] CloseHandle (hObject=0x13c) returned 1
	[0167.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png")) returned 0x20
	[0167.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png")) returned 0x20
	[0167.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.604] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=233) returned 1
	[0167.604] CloseHandle (hObject=0x13c) returned 1
	[0167.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png")) returned 0x20
	[0167.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png")) returned 0x20
	[0167.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.606] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3445) returned 1
	[0167.606] CloseHandle (hObject=0x13c) returned 1
	[0167.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png")) returned 0x20
	[0167.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png")) returned 0x20
	[0167.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.607] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3332) returned 1
	[0167.607] CloseHandle (hObject=0x13c) returned 1
	[0167.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png")) returned 0x20
	[0167.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png")) returned 0x20
	[0167.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.608] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3381) returned 1
	[0167.608] CloseHandle (hObject=0x13c) returned 1
	[0167.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png")) returned 0x20
	[0167.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png")) returned 0x20
	[0167.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.609] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=140) returned 1
	[0167.609] CloseHandle (hObject=0x13c) returned 1
	[0167.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png")) returned 0x20
	[0167.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png")) returned 0x20
	[0167.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.610] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=135) returned 1
	[0167.610] CloseHandle (hObject=0x13c) returned 1
	[0167.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png")) returned 0x20
	[0167.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png")) returned 0x20
	[0167.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.611] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=135) returned 1
	[0167.612] CloseHandle (hObject=0x13c) returned 1
	[0167.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png")) returned 0x20
	[0167.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png")) returned 0x20
	[0167.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.613] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0167.613] CloseHandle (hObject=0x13c) returned 1
	[0167.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png")) returned 0x20
	[0167.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png")) returned 0x20
	[0167.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.614] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0167.614] CloseHandle (hObject=0x13c) returned 1
	[0167.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png")) returned 0x20
	[0167.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png")) returned 0x20
	[0167.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.615] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0167.615] CloseHandle (hObject=0x13c) returned 1
	[0167.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png")) returned 0x20
	[0167.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png")) returned 0x20
	[0167.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.616] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=168) returned 1
	[0167.616] CloseHandle (hObject=0x13c) returned 1
	[0167.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png")) returned 0x20
	[0167.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png")) returned 0x20
	[0167.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.617] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=165) returned 1
	[0167.617] CloseHandle (hObject=0x13c) returned 1
	[0167.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png")) returned 0x20
	[0167.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png")) returned 0x20
	[0167.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.618] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=166) returned 1
	[0167.618] CloseHandle (hObject=0x13c) returned 1
	[0167.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png")) returned 0x20
	[0167.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png")) returned 0x20
	[0167.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.619] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=168) returned 1
	[0167.619] CloseHandle (hObject=0x13c) returned 1
	[0167.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png")) returned 0x20
	[0167.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png")) returned 0x20
	[0167.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.620] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131) returned 1
	[0167.620] CloseHandle (hObject=0x13c) returned 1
	[0167.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png")) returned 0x20
	[0167.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png")) returned 0x20
	[0167.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.621] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=145) returned 1
	[0167.621] CloseHandle (hObject=0x13c) returned 1
	[0167.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png")) returned 0x20
	[0167.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png")) returned 0x20
	[0167.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.622] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=139) returned 1
	[0167.622] CloseHandle (hObject=0x13c) returned 1
	[0167.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png")) returned 0x20
	[0167.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png")) returned 0x20
	[0167.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.624] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=697) returned 1
	[0167.624] CloseHandle (hObject=0x13c) returned 1
	[0167.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png")) returned 0x20
	[0167.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png")) returned 0x20
	[0167.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.625] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1050) returned 1
	[0167.625] CloseHandle (hObject=0x13c) returned 1
	[0167.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png")) returned 0x20
	[0167.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png")) returned 0x20
	[0167.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.626] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1124) returned 1
	[0167.626] CloseHandle (hObject=0x13c) returned 1
	[0167.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png")) returned 0x20
	[0167.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png")) returned 0x20
	[0167.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.627] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=855) returned 1
	[0167.627] CloseHandle (hObject=0x13c) returned 1
	[0167.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png")) returned 0x20
	[0167.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png")) returned 0x20
	[0167.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.628] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=697) returned 1
	[0167.628] CloseHandle (hObject=0x13c) returned 1
	[0167.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png")) returned 0x20
	[0167.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png")) returned 0x20
	[0167.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0167.810] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1047) returned 1
	[0167.810] CloseHandle (hObject=0x13c) returned 1
	[0167.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png")) returned 0x20
	[0167.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png")) returned 0x20
	[0167.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0167.967] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3379) returned 1
	[0167.967] CloseHandle (hObject=0x20c) returned 1
	[0167.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png")) returned 0x20
	[0167.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png")) returned 0x20
	[0167.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0167.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\shuffle_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\shuffle_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0167.967] SetEvent (hEvent=0xfc) returned 1
	[0167.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.302] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5542) returned 1
	[0168.302] CloseHandle (hObject=0x20c) returned 1
	[0168.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0168.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0168.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.302] SetEvent (hEvent=0xfc) returned 1
	[0168.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.304] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30069) returned 1
	[0168.304] CloseHandle (hObject=0x168) returned 1
	[0168.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png")) returned 0x20
	[0168.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png")) returned 0x20
	[0168.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.306] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1296) returned 1
	[0168.306] CloseHandle (hObject=0x168) returned 1
	[0168.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0168.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0168.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.308] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4528) returned 1
	[0168.308] CloseHandle (hObject=0x168) returned 1
	[0168.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css")) returned 0x20
	[0168.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css")) returned 0x20
	[0168.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.310] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=989) returned 1
	[0168.310] CloseHandle (hObject=0x13c) returned 1
	[0168.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml")) returned 0x20
	[0168.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml")) returned 0x20
	[0168.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.311] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=55660) returned 1
	[0168.311] CloseHandle (hObject=0x13c) returned 1
	[0168.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js")) returned 0x20
	[0168.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js")) returned 0x20
	[0168.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.312] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6416) returned 1
	[0168.312] CloseHandle (hObject=0x13c) returned 1
	[0168.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html")) returned 0x20
	[0168.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html")) returned 0x20
	[0168.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.313] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3428) returned 1
	[0168.313] CloseHandle (hObject=0x13c) returned 1
	[0168.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html")) returned 0x20
	[0168.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html")) returned 0x20
	[0168.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.314] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10034) returned 1
	[0168.314] CloseHandle (hObject=0x13c) returned 1
	[0168.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png")) returned 0x20
	[0168.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png")) returned 0x20
	[0168.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.316] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3462) returned 1
	[0168.316] CloseHandle (hObject=0x13c) returned 1
	[0168.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png")) returned 0x20
	[0168.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png")) returned 0x20
	[0168.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.318] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3574) returned 1
	[0168.318] CloseHandle (hObject=0x13c) returned 1
	[0168.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png")) returned 0x20
	[0168.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png")) returned 0x20
	[0168.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.319] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3511) returned 1
	[0168.319] CloseHandle (hObject=0x168) returned 1
	[0168.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png")) returned 0x20
	[0168.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png")) returned 0x20
	[0168.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.320] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3063) returned 1
	[0168.320] CloseHandle (hObject=0x168) returned 1
	[0168.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png")) returned 0x20
	[0168.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png")) returned 0x20
	[0168.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.322] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3065) returned 1
	[0168.322] CloseHandle (hObject=0x168) returned 1
	[0168.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png")) returned 0x20
	[0168.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png")) returned 0x20
	[0168.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.323] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2903) returned 1
	[0168.323] CloseHandle (hObject=0x168) returned 1
	[0168.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png")) returned 0x20
	[0168.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png")) returned 0x20
	[0168.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.324] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5513) returned 1
	[0168.324] CloseHandle (hObject=0x168) returned 1
	[0168.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png")) returned 0x20
	[0168.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png")) returned 0x20
	[0168.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.326] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3018) returned 1
	[0168.326] CloseHandle (hObject=0x168) returned 1
	[0168.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png")) returned 0x20
	[0168.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png")) returned 0x20
	[0168.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.327] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3027) returned 1
	[0168.327] CloseHandle (hObject=0x168) returned 1
	[0168.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png")) returned 0x20
	[0168.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png")) returned 0x20
	[0168.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.331] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2833) returned 1
	[0168.331] CloseHandle (hObject=0x168) returned 1
	[0168.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png")) returned 0x20
	[0168.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png")) returned 0x20
	[0168.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.332] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3058) returned 1
	[0168.332] CloseHandle (hObject=0x168) returned 1
	[0168.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png")) returned 0x20
	[0168.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png")) returned 0x20
	[0168.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.334] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3062) returned 1
	[0168.334] CloseHandle (hObject=0x168) returned 1
	[0168.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png")) returned 0x20
	[0168.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png")) returned 0x20
	[0168.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.335] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2886) returned 1
	[0168.335] CloseHandle (hObject=0x168) returned 1
	[0168.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png")) returned 0x20
	[0168.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png")) returned 0x20
	[0168.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.336] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3062) returned 1
	[0168.336] CloseHandle (hObject=0x168) returned 1
	[0168.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png")) returned 0x20
	[0168.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png")) returned 0x20
	[0168.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.337] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3077) returned 1
	[0168.337] CloseHandle (hObject=0x168) returned 1
	[0168.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png")) returned 0x20
	[0168.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png")) returned 0x20
	[0168.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.339] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2904) returned 1
	[0168.339] CloseHandle (hObject=0x168) returned 1
	[0168.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png")) returned 0x20
	[0168.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png")) returned 0x20
	[0168.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.340] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3162) returned 1
	[0168.340] CloseHandle (hObject=0x168) returned 1
	[0168.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png")) returned 0x20
	[0168.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png")) returned 0x20
	[0168.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0168.342] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3161) returned 1
	[0168.342] CloseHandle (hObject=0x168) returned 1
	[0168.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png")) returned 0x20
	[0168.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png")) returned 0x20
	[0168.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_hov.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_hov.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.460] SetEvent (hEvent=0xfc) returned 1
	[0168.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.462] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=974) returned 1
	[0168.462] CloseHandle (hObject=0x208) returned 1
	[0168.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css")) returned 0x20
	[0168.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css")) returned 0x20
	[0168.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\localizedSettings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\localizedsettings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.462] SetEvent (hEvent=0xfc) returned 1
	[0168.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.464] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10118) returned 1
	[0168.464] CloseHandle (hObject=0x208) returned 1
	[0168.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0168.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0168.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.464] SetEvent (hEvent=0xfc) returned 1
	[0168.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.465] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24636) returned 1
	[0168.465] CloseHandle (hObject=0x208) returned 1
	[0168.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css")) returned 0x20
	[0168.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css")) returned 0x20
	[0168.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\css\\weather.css" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\css\\weather.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.466] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1990) returned 1
	[0168.467] CloseHandle (hObject=0x208) returned 1
	[0168.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml")) returned 0x20
	[0168.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml")) returned 0x20
	[0168.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.467] SetEvent (hEvent=0xfc) returned 1
	[0168.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.469] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1820) returned 1
	[0168.469] CloseHandle (hObject=0x208) returned 1
	[0168.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js")) returned 0x20
	[0168.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js")) returned 0x20
	[0168.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\highDpiImageSwap.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\highdpiimageswap.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.469] SetEvent (hEvent=0xfc) returned 1
	[0168.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.470] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43776) returned 1
	[0168.470] CloseHandle (hObject=0x208) returned 1
	[0168.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js")) returned 0x20
	[0168.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js")) returned 0x20
	[0168.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\library.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.472] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14476) returned 1
	[0168.472] CloseHandle (hObject=0x208) returned 1
	[0168.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js")) returned 0x20
	[0168.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js")) returned 0x20
	[0168.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\localizedstrings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.472] SetEvent (hEvent=0xfc) returned 1
	[0168.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.473] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=57960) returned 1
	[0168.473] CloseHandle (hObject=0x208) returned 1
	[0168.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0168.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js")) returned 0x20
	[0168.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\settings.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\settings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.475] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=135370) returned 1
	[0168.475] CloseHandle (hObject=0x214) returned 1
	[0168.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js")) returned 0x20
	[0168.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js")) returned 0x20
	[0168.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\js\\weather.js" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\js\\weather.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.475] SetEvent (hEvent=0xfc) returned 1
	[0168.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.476] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8382) returned 1
	[0168.476] CloseHandle (hObject=0x214) returned 1
	[0168.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html")) returned 0x20
	[0168.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html")) returned 0x20
	[0168.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\settings.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\settings.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.477] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16190) returned 1
	[0168.477] CloseHandle (hObject=0x214) returned 1
	[0168.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html")) returned 0x20
	[0168.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html")) returned 0x20
	[0168.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\en-US\\weather.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\en-us\\weather.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.478] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12960) returned 1
	[0168.478] CloseHandle (hObject=0x214) returned 1
	[0168.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\icon.png")) returned 0x20
	[0168.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\icon.png")) returned 0x20
	[0168.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\icon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.480] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5206) returned 1
	[0168.480] CloseHandle (hObject=0x214) returned 1
	[0168.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png")) returned 0x20
	[0168.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png")) returned 0x20
	[0168.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\1.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.480] SetEvent (hEvent=0xfc) returned 1
	[0168.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.482] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5457) returned 1
	[0168.482] CloseHandle (hObject=0x214) returned 1
	[0168.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png")) returned 0x20
	[0168.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png")) returned 0x20
	[0168.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.482] SetEvent (hEvent=0xfc) returned 1
	[0168.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.483] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5457) returned 1
	[0168.483] CloseHandle (hObject=0x214) returned 1
	[0168.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png")) returned 0x20
	[0168.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png")) returned 0x20
	[0168.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.484] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5457) returned 1
	[0168.484] CloseHandle (hObject=0x214) returned 1
	[0168.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png")) returned 0x20
	[0168.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png")) returned 0x20
	[0168.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.486] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=652) returned 1
	[0168.486] CloseHandle (hObject=0x214) returned 1
	[0168.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png")) returned 0x20
	[0168.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png")) returned 0x20
	[0168.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.488] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=429) returned 1
	[0168.488] CloseHandle (hObject=0x214) returned 1
	[0168.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png")) returned 0x20
	[0168.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png")) returned 0x20
	[0168.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.489] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=559) returned 1
	[0168.489] CloseHandle (hObject=0x214) returned 1
	[0168.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png")) returned 0x20
	[0168.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png")) returned 0x20
	[0168.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.491] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=680) returned 1
	[0168.491] CloseHandle (hObject=0x208) returned 1
	[0168.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png")) returned 0x20
	[0168.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png")) returned 0x20
	[0168.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.492] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=680) returned 1
	[0168.492] CloseHandle (hObject=0x208) returned 1
	[0168.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png")) returned 0x20
	[0168.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png")) returned 0x20
	[0168.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.496] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4066) returned 1
	[0168.496] CloseHandle (hObject=0x208) returned 1
	[0168.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png")) returned 0x20
	[0168.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png")) returned 0x20
	[0168.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.497] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4066) returned 1
	[0168.497] CloseHandle (hObject=0x208) returned 1
	[0168.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png")) returned 0x20
	[0168.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png")) returned 0x20
	[0168.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.498] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=993) returned 1
	[0168.498] CloseHandle (hObject=0x208) returned 1
	[0168.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png")) returned 0x20
	[0168.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png")) returned 0x20
	[0168.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)alertIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)alerticon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.608] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=578) returned 1
	[0168.608] CloseHandle (hObject=0x20c) returned 1
	[0168.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png")) returned 0x20
	[0168.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png")) returned 0x20
	[0168.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)grayStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)graystateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.609] SetEvent (hEvent=0xfc) returned 1
	[0168.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.609] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=963) returned 1
	[0168.609] CloseHandle (hObject=0x20c) returned 1
	[0168.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png")) returned 0x20
	[0168.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png")) returned 0x20
	[0168.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)notConnectedStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)notconnectedstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.610] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=963) returned 1
	[0168.610] CloseHandle (hObject=0x20c) returned 1
	[0168.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png")) returned 0x20
	[0168.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png")) returned 0x20
	[0168.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\144DPI\\(144DPI)redStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\144dpi\\(144dpi)redstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.611] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4066) returned 1
	[0168.611] CloseHandle (hObject=0x20c) returned 1
	[0168.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png")) returned 0x20
	[0168.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png")) returned 0x20
	[0168.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\15.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\15.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.613] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4066) returned 1
	[0168.613] CloseHandle (hObject=0x20c) returned 1
	[0168.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png")) returned 0x20
	[0168.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png")) returned 0x20
	[0168.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\16.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.613] SetEvent (hEvent=0xfc) returned 1
	[0168.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.615] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7182) returned 1
	[0168.615] CloseHandle (hObject=0x20c) returned 1
	[0168.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png")) returned 0x20
	[0168.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png")) returned 0x20
	[0168.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\17.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\17.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.615] SetEvent (hEvent=0xfc) returned 1
	[0168.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.616] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7182) returned 1
	[0168.616] CloseHandle (hObject=0x20c) returned 1
	[0168.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png")) returned 0x20
	[0168.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png")) returned 0x20
	[0168.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\18.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\18.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.626] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6073) returned 1
	[0168.626] CloseHandle (hObject=0x20c) returned 1
	[0168.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png")) returned 0x20
	[0168.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png")) returned 0x20
	[0168.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\19.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\19.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.630] SetEvent (hEvent=0xfc) returned 1
	[0168.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.631] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5206) returned 1
	[0168.631] CloseHandle (hObject=0x20c) returned 1
	[0168.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png")) returned 0x20
	[0168.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png")) returned 0x20
	[0168.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\2.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.632] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6073) returned 1
	[0168.632] CloseHandle (hObject=0x20c) returned 1
	[0168.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png")) returned 0x20
	[0168.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png")) returned 0x20
	[0168.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\20.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\20.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.633] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6073) returned 1
	[0168.633] CloseHandle (hObject=0x20c) returned 1
	[0168.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png")) returned 0x20
	[0168.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png")) returned 0x20
	[0168.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\21.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\21.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.634] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6073) returned 1
	[0168.634] CloseHandle (hObject=0x20c) returned 1
	[0168.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png")) returned 0x20
	[0168.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png")) returned 0x20
	[0168.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\22.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\22.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.635] SetEvent (hEvent=0xfc) returned 1
	[0168.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.636] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5573) returned 1
	[0168.636] CloseHandle (hObject=0x20c) returned 1
	[0168.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png")) returned 0x20
	[0168.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png")) returned 0x20
	[0168.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\23.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\23.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.636] SetEvent (hEvent=0xfc) returned 1
	[0168.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.637] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5573) returned 1
	[0168.637] CloseHandle (hObject=0x20c) returned 1
	[0168.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png")) returned 0x20
	[0168.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png")) returned 0x20
	[0168.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\24.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\24.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.638] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5573) returned 1
	[0168.638] CloseHandle (hObject=0x20c) returned 1
	[0168.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png")) returned 0x20
	[0168.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png")) returned 0x20
	[0168.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.640] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5064) returned 1
	[0168.640] CloseHandle (hObject=0x13c) returned 1
	[0168.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png")) returned 0x20
	[0168.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png")) returned 0x20
	[0168.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.641] SetEvent (hEvent=0xfc) returned 1
	[0168.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.642] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5064) returned 1
	[0168.642] CloseHandle (hObject=0x20c) returned 1
	[0168.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png")) returned 0x20
	[0168.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png")) returned 0x20
	[0168.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.643] SetEvent (hEvent=0xfc) returned 1
	[0168.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.643] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5064) returned 1
	[0168.643] CloseHandle (hObject=0x20c) returned 1
	[0168.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png")) returned 0x20
	[0168.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png")) returned 0x20
	[0168.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.645] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4112) returned 1
	[0168.645] CloseHandle (hObject=0x20c) returned 1
	[0168.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png")) returned 0x20
	[0168.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png")) returned 0x20
	[0168.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.645] SetEvent (hEvent=0xfc) returned 1
	[0168.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.646] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5206) returned 1
	[0168.646] CloseHandle (hObject=0x20c) returned 1
	[0168.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png")) returned 0x20
	[0168.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png")) returned 0x20
	[0168.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.648] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4112) returned 1
	[0168.648] CloseHandle (hObject=0x208) returned 1
	[0168.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png")) returned 0x20
	[0168.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png")) returned 0x20
	[0168.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.650] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5855) returned 1
	[0168.650] CloseHandle (hObject=0x208) returned 1
	[0168.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png")) returned 0x20
	[0168.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png")) returned 0x20
	[0168.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.651] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5855) returned 1
	[0168.651] CloseHandle (hObject=0x208) returned 1
	[0168.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png")) returned 0x20
	[0168.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png")) returned 0x20
	[0168.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.652] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4112) returned 1
	[0168.652] CloseHandle (hObject=0x208) returned 1
	[0168.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png")) returned 0x20
	[0168.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png")) returned 0x20
	[0168.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.653] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4112) returned 1
	[0168.653] CloseHandle (hObject=0x208) returned 1
	[0168.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png")) returned 0x20
	[0168.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png")) returned 0x20
	[0168.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.654] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5457) returned 1
	[0168.654] CloseHandle (hObject=0x208) returned 1
	[0168.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png")) returned 0x20
	[0168.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png")) returned 0x20
	[0168.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\35.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\35.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.655] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5855) returned 1
	[0168.655] CloseHandle (hObject=0x208) returned 1
	[0168.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png")) returned 0x20
	[0168.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png")) returned 0x20
	[0168.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.657] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5206) returned 1
	[0168.657] CloseHandle (hObject=0x208) returned 1
	[0168.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png")) returned 0x20
	[0168.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png")) returned 0x20
	[0168.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.658] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5206) returned 1
	[0168.658] CloseHandle (hObject=0x208) returned 1
	[0168.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png")) returned 0x20
	[0168.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png")) returned 0x20
	[0168.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.659] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5457) returned 1
	[0168.659] CloseHandle (hObject=0x208) returned 1
	[0168.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png")) returned 0x20
	[0168.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png")) returned 0x20
	[0168.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.660] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5206) returned 1
	[0168.660] CloseHandle (hObject=0x208) returned 1
	[0168.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png")) returned 0x20
	[0168.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png")) returned 0x20
	[0168.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.734] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6260) returned 1
	[0168.734] CloseHandle (hObject=0x20c) returned 1
	[0168.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png")) returned 0x20
	[0168.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png")) returned 0x20
	[0168.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.735] SetEvent (hEvent=0xfc) returned 1
	[0168.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.735] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3291) returned 1
	[0168.735] CloseHandle (hObject=0x20c) returned 1
	[0168.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png")) returned 0x20
	[0168.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png")) returned 0x20
	[0168.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.737] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3240) returned 1
	[0168.737] CloseHandle (hObject=0x20c) returned 1
	[0168.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png")) returned 0x20
	[0168.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png")) returned 0x20
	[0168.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.738] SetEvent (hEvent=0xfc) returned 1
	[0168.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.738] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3573) returned 1
	[0168.738] CloseHandle (hObject=0x20c) returned 1
	[0168.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png")) returned 0x20
	[0168.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png")) returned 0x20
	[0168.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.740] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3581) returned 1
	[0168.740] CloseHandle (hObject=0x20c) returned 1
	[0168.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png")) returned 0x20
	[0168.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png")) returned 0x20
	[0168.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.740] SetEvent (hEvent=0xfc) returned 1
	[0168.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.741] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3559) returned 1
	[0168.741] CloseHandle (hObject=0x20c) returned 1
	[0168.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png")) returned 0x20
	[0168.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png")) returned 0x20
	[0168.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.742] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3582) returned 1
	[0168.742] CloseHandle (hObject=0x20c) returned 1
	[0168.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png")) returned 0x20
	[0168.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png")) returned 0x20
	[0168.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.743] SetEvent (hEvent=0xfc) returned 1
	[0168.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.743] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3432) returned 1
	[0168.743] CloseHandle (hObject=0x20c) returned 1
	[0168.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png")) returned 0x20
	[0168.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png")) returned 0x20
	[0168.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.745] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3456) returned 1
	[0168.745] CloseHandle (hObject=0x20c) returned 1
	[0168.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png")) returned 0x20
	[0168.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png")) returned 0x20
	[0168.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.745] SetEvent (hEvent=0xfc) returned 1
	[0168.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.746] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2814) returned 1
	[0168.746] CloseHandle (hObject=0x20c) returned 1
	[0168.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png")) returned 0x20
	[0168.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png")) returned 0x20
	[0168.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.748] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2813) returned 1
	[0168.748] CloseHandle (hObject=0x20c) returned 1
	[0168.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png")) returned 0x20
	[0168.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png")) returned 0x20
	[0168.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.748] SetEvent (hEvent=0xfc) returned 1
	[0168.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.749] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8801) returned 1
	[0168.749] CloseHandle (hObject=0x20c) returned 1
	[0168.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png")) returned 0x20
	[0168.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png")) returned 0x20
	[0168.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.752] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10062) returned 1
	[0168.752] CloseHandle (hObject=0x20c) returned 1
	[0168.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png")) returned 0x20
	[0168.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png")) returned 0x20
	[0168.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.753] SetEvent (hEvent=0xfc) returned 1
	[0168.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0168.756] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9861) returned 1
	[0168.756] CloseHandle (hObject=0x20c) returned 1
	[0168.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png")) returned 0x20
	[0168.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png")) returned 0x20
	[0168.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.864] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10544) returned 1
	[0168.864] CloseHandle (hObject=0x13c) returned 1
	[0168.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png")) returned 0x20
	[0168.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png")) returned 0x20
	[0168.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.864] SetEvent (hEvent=0xfc) returned 1
	[0168.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.865] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10958) returned 1
	[0168.865] CloseHandle (hObject=0x13c) returned 1
	[0168.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png")) returned 0x20
	[0168.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png")) returned 0x20
	[0168.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.867] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8804) returned 1
	[0168.867] CloseHandle (hObject=0x214) returned 1
	[0168.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png")) returned 0x20
	[0168.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png")) returned 0x20
	[0168.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.867] SetEvent (hEvent=0xfc) returned 1
	[0168.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0168.868] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11053) returned 1
	[0168.868] CloseHandle (hObject=0x214) returned 1
	[0168.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png")) returned 0x20
	[0168.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png")) returned 0x20
	[0168.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-full_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.870] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8621) returned 1
	[0168.870] CloseHandle (hObject=0x13c) returned 1
	[0168.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png")) returned 0x20
	[0168.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png")) returned 0x20
	[0168.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.870] SetEvent (hEvent=0xfc) returned 1
	[0168.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.871] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11142) returned 1
	[0168.871] CloseHandle (hObject=0x13c) returned 1
	[0168.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png")) returned 0x20
	[0168.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png")) returned 0x20
	[0168.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-last-quarter_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.873] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9498) returned 1
	[0168.873] CloseHandle (hObject=0x208) returned 1
	[0168.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png")) returned 0x20
	[0168.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png")) returned 0x20
	[0168.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.874] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11631) returned 1
	[0168.874] CloseHandle (hObject=0x208) returned 1
	[0168.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png")) returned 0x20
	[0168.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png")) returned 0x20
	[0168.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-new_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.876] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9012) returned 1
	[0168.876] CloseHandle (hObject=0x208) returned 1
	[0168.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png")) returned 0x20
	[0168.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png")) returned 0x20
	[0168.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.877] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11379) returned 1
	[0168.877] CloseHandle (hObject=0x208) returned 1
	[0168.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png")) returned 0x20
	[0168.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png")) returned 0x20
	[0168.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-crescent_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.878] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8636) returned 1
	[0168.878] CloseHandle (hObject=0x208) returned 1
	[0168.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png")) returned 0x20
	[0168.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png")) returned 0x20
	[0168.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.879] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11061) returned 1
	[0168.879] CloseHandle (hObject=0x208) returned 1
	[0168.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png")) returned 0x20
	[0168.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png")) returned 0x20
	[0168.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waning-gibbous_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.881] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8870) returned 1
	[0168.881] CloseHandle (hObject=0x208) returned 1
	[0168.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png")) returned 0x20
	[0168.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png")) returned 0x20
	[0168.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.882] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11038) returned 1
	[0168.882] CloseHandle (hObject=0x208) returned 1
	[0168.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png")) returned 0x20
	[0168.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png")) returned 0x20
	[0168.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-crescent_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.886] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8707) returned 1
	[0168.886] CloseHandle (hObject=0x208) returned 1
	[0168.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png")) returned 0x20
	[0168.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png")) returned 0x20
	[0168.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.887] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11101) returned 1
	[0168.887] CloseHandle (hObject=0x208) returned 1
	[0168.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png")) returned 0x20
	[0168.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png")) returned 0x20
	[0168.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-waxing-gibbous_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.889] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12659) returned 1
	[0168.889] CloseHandle (hObject=0x208) returned 1
	[0168.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png")) returned 0x20
	[0168.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png")) returned 0x20
	[0168.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_rainy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.890] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13161) returned 1
	[0168.890] CloseHandle (hObject=0x208) returned 1
	[0168.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png")) returned 0x20
	[0168.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png")) returned 0x20
	[0168.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_snow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.891] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12239) returned 1
	[0168.891] CloseHandle (hObject=0x208) returned 1
	[0168.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png")) returned 0x20
	[0168.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png")) returned 0x20
	[0168.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_thunderstorm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.893] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12841) returned 1
	[0168.893] CloseHandle (hObject=0x208) returned 1
	[0168.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png")) returned 0x20
	[0168.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png")) returned 0x20
	[0168.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_windy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.894] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8609) returned 1
	[0168.894] CloseHandle (hObject=0x208) returned 1
	[0168.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png")) returned 0x20
	[0168.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png")) returned 0x20
	[0168.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.895] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11939) returned 1
	[0168.895] CloseHandle (hObject=0x208) returned 1
	[0168.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png")) returned 0x20
	[0168.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png")) returned 0x20
	[0168.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_snow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.897] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11493) returned 1
	[0168.897] CloseHandle (hObject=0x208) returned 1
	[0168.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png")) returned 0x20
	[0168.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png")) returned 0x20
	[0168.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_sun.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_sun.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.898] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12998) returned 1
	[0168.898] CloseHandle (hObject=0x208) returned 1
	[0168.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png")) returned 0x20
	[0168.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png")) returned 0x20
	[0168.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_blue_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_blue_windy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.899] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10537) returned 1
	[0168.899] CloseHandle (hObject=0x208) returned 1
	[0168.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png")) returned 0x20
	[0168.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png")) returned 0x20
	[0168.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0168.900] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10704) returned 1
	[0168.900] CloseHandle (hObject=0x208) returned 1
	[0168.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png")) returned 0x20
	[0168.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png")) returned 0x20
	[0168.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_few-showers.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.995] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10044) returned 1
	[0168.995] CloseHandle (hObject=0x13c) returned 1
	[0168.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png")) returned 0x20
	[0168.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png")) returned 0x20
	[0168.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_foggy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.996] SetEvent (hEvent=0xfc) returned 1
	[0168.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.996] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12974) returned 1
	[0168.996] CloseHandle (hObject=0x13c) returned 1
	[0168.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png")) returned 0x20
	[0168.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png")) returned 0x20
	[0168.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_snow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.998] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12757) returned 1
	[0168.998] CloseHandle (hObject=0x13c) returned 1
	[0168.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png")) returned 0x20
	[0168.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png")) returned 0x20
	[0168.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_gray_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_gray_thunderstorm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.998] SetEvent (hEvent=0xfc) returned 1
	[0168.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0168.999] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=325) returned 1
	[0168.999] CloseHandle (hObject=0x13c) returned 1
	[0168.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png")) returned 0x20
	[0168.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png")) returned 0x20
	[0168.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0168.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\grayStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\graystateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0168.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.000] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=373) returned 1
	[0169.000] CloseHandle (hObject=0x13c) returned 1
	[0169.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png")) returned 0x20
	[0169.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png")) returned 0x20
	[0169.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.001] SetEvent (hEvent=0xfc) returned 1
	[0169.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.001] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=729) returned 1
	[0169.002] CloseHandle (hObject=0x13c) returned 1
	[0169.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png")) returned 0x20
	[0169.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png")) returned 0x20
	[0169.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.003] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=399) returned 1
	[0169.003] CloseHandle (hObject=0x13c) returned 1
	[0169.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png")) returned 0x20
	[0169.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png")) returned 0x20
	[0169.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.004] SetEvent (hEvent=0xfc) returned 1
	[0169.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.004] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=399) returned 1
	[0169.004] CloseHandle (hObject=0x13c) returned 1
	[0169.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png")) returned 0x20
	[0169.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png")) returned 0x20
	[0169.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.005] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=482) returned 1
	[0169.005] CloseHandle (hObject=0x13c) returned 1
	[0169.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png")) returned 0x20
	[0169.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png")) returned 0x20
	[0169.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.007] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30094) returned 1
	[0169.007] CloseHandle (hObject=0x13c) returned 1
	[0169.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png")) returned 0x20
	[0169.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png")) returned 0x20
	[0169.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.007] SetEvent (hEvent=0xfc) returned 1
	[0169.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.008] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28123) returned 1
	[0169.008] CloseHandle (hObject=0x13c) returned 1
	[0169.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png")) returned 0x20
	[0169.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png")) returned 0x20
	[0169.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.009] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28035) returned 1
	[0169.009] CloseHandle (hObject=0x13c) returned 1
	[0169.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png")) returned 0x20
	[0169.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png")) returned 0x20
	[0169.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.010] SetEvent (hEvent=0xfc) returned 1
	[0169.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.010] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32480) returned 1
	[0169.010] CloseHandle (hObject=0x13c) returned 1
	[0169.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png")) returned 0x20
	[0169.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png")) returned 0x20
	[0169.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.012] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31406) returned 1
	[0169.012] CloseHandle (hObject=0x13c) returned 1
	[0169.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png")) returned 0x20
	[0169.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png")) returned 0x20
	[0169.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.013] SetEvent (hEvent=0xfc) returned 1
	[0169.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.013] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19451) returned 1
	[0169.013] CloseHandle (hObject=0x13c) returned 1
	[0169.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png")) returned 0x20
	[0169.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png")) returned 0x20
	[0169.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.016] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24821) returned 1
	[0169.017] CloseHandle (hObject=0x13c) returned 1
	[0169.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png")) returned 0x20
	[0169.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png")) returned 0x20
	[0169.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.017] SetEvent (hEvent=0xfc) returned 1
	[0169.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.018] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20194) returned 1
	[0169.018] CloseHandle (hObject=0x13c) returned 1
	[0169.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png")) returned 0x20
	[0169.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png")) returned 0x20
	[0169.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.019] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26089) returned 1
	[0169.019] CloseHandle (hObject=0x13c) returned 1
	[0169.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png")) returned 0x20
	[0169.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png")) returned 0x20
	[0169.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.020] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18960) returned 1
	[0169.021] CloseHandle (hObject=0x13c) returned 1
	[0169.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png")) returned 0x20
	[0169.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png")) returned 0x20
	[0169.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.022] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25006) returned 1
	[0169.022] CloseHandle (hObject=0x13c) returned 1
	[0169.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png")) returned 0x20
	[0169.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png")) returned 0x20
	[0169.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.025] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21898) returned 1
	[0169.025] CloseHandle (hObject=0x13c) returned 1
	[0169.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png")) returned 0x20
	[0169.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png")) returned 0x20
	[0169.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.027] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27366) returned 1
	[0169.027] CloseHandle (hObject=0x13c) returned 1
	[0169.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png")) returned 0x20
	[0169.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png")) returned 0x20
	[0169.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.028] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19841) returned 1
	[0169.028] CloseHandle (hObject=0x13c) returned 1
	[0169.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png")) returned 0x20
	[0169.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png")) returned 0x20
	[0169.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.029] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25705) returned 1
	[0169.029] CloseHandle (hObject=0x13c) returned 1
	[0169.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png")) returned 0x20
	[0169.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png")) returned 0x20
	[0169.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.030] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19335) returned 1
	[0169.030] CloseHandle (hObject=0x13c) returned 1
	[0169.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png")) returned 0x20
	[0169.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png")) returned 0x20
	[0169.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.032] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25339) returned 1
	[0169.032] CloseHandle (hObject=0x13c) returned 1
	[0169.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png")) returned 0x20
	[0169.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png")) returned 0x20
	[0169.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.162] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19923) returned 1
	[0169.163] CloseHandle (hObject=0x13c) returned 1
	[0169.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png")) returned 0x20
	[0169.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png")) returned 0x20
	[0169.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.163] SetEvent (hEvent=0xfc) returned 1
	[0169.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.261] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19536) returned 1
	[0169.261] CloseHandle (hObject=0x13c) returned 1
	[0169.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png")) returned 0x20
	[0169.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png")) returned 0x20
	[0169.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.263] SetEvent (hEvent=0xfc) returned 1
	[0169.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.263] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38125) returned 1
	[0169.263] CloseHandle (hObject=0x13c) returned 1
	[0169.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png")) returned 0x20
	[0169.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png")) returned 0x20
	[0169.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.265] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37260) returned 1
	[0169.265] CloseHandle (hObject=0x13c) returned 1
	[0169.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png")) returned 0x20
	[0169.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png")) returned 0x20
	[0169.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.265] SetEvent (hEvent=0xfc) returned 1
	[0169.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.266] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31296) returned 1
	[0169.266] CloseHandle (hObject=0x13c) returned 1
	[0169.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png")) returned 0x20
	[0169.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png")) returned 0x20
	[0169.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.268] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39992) returned 1
	[0169.268] CloseHandle (hObject=0x13c) returned 1
	[0169.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png")) returned 0x20
	[0169.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png")) returned 0x20
	[0169.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_windy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.268] SetEvent (hEvent=0xfc) returned 1
	[0169.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.269] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27357) returned 1
	[0169.269] CloseHandle (hObject=0x13c) returned 1
	[0169.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png")) returned 0x20
	[0169.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png")) returned 0x20
	[0169.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_partly-cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0169.271] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41932) returned 1
	[0169.271] CloseHandle (hObject=0x208) returned 1
	[0169.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png")) returned 0x20
	[0169.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png")) returned 0x20
	[0169.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_snow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.271] SetEvent (hEvent=0xfc) returned 1
	[0169.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0169.272] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36702) returned 1
	[0169.272] CloseHandle (hObject=0x208) returned 1
	[0169.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png")) returned 0x20
	[0169.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png")) returned 0x20
	[0169.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_sun.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_sun.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.274] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=48212) returned 1
	[0169.274] CloseHandle (hObject=0x13c) returned 1
	[0169.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png")) returned 0x20
	[0169.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png")) returned 0x20
	[0169.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_blue_windy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_blue_windy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.274] SetEvent (hEvent=0xfc) returned 1
	[0169.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.275] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33156) returned 1
	[0169.275] CloseHandle (hObject=0x13c) returned 1
	[0169.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png")) returned 0x20
	[0169.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png")) returned 0x20
	[0169.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_cloudy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.276] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33872) returned 1
	[0169.276] CloseHandle (hObject=0x13c) returned 1
	[0169.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png")) returned 0x20
	[0169.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png")) returned 0x20
	[0169.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_few-showers.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_few-showers.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.277] SetEvent (hEvent=0xfc) returned 1
	[0169.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.277] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35133) returned 1
	[0169.277] CloseHandle (hObject=0x13c) returned 1
	[0169.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png")) returned 0x20
	[0169.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png")) returned 0x20
	[0169.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_foggy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_foggy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.279] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38152) returned 1
	[0169.280] CloseHandle (hObject=0x214) returned 1
	[0169.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png")) returned 0x20
	[0169.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png")) returned 0x20
	[0169.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_hail.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_hail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.281] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42818) returned 1
	[0169.281] CloseHandle (hObject=0x214) returned 1
	[0169.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png")) returned 0x20
	[0169.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png")) returned 0x20
	[0169.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_rainy.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_rainy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.282] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41183) returned 1
	[0169.282] CloseHandle (hObject=0x214) returned 1
	[0169.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png")) returned 0x20
	[0169.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png")) returned 0x20
	[0169.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_snow.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_snow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.285] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37584) returned 1
	[0169.285] CloseHandle (hObject=0x214) returned 1
	[0169.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png")) returned 0x20
	[0169.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png")) returned 0x20
	[0169.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_gray_thunderstorm.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_gray_thunderstorm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.286] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5930) returned 1
	[0169.286] CloseHandle (hObject=0x214) returned 1
	[0169.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\logo.png")) returned 0x20
	[0169.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\logo.png")) returned 0x20
	[0169.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\logo.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\sbdrop.dll" (normalized: "c:\\program files\\windows sidebar\\sbdrop.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.287] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=87552) returned 1
	[0169.287] CloseHandle (hObject=0x214) returned 1
	[0169.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\sbdrop.dll" (normalized: "c:\\program files\\windows sidebar\\sbdrop.dll")) returned 0x20
	[0169.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\sbdrop.dll" (normalized: "c:\\program files\\windows sidebar\\sbdrop.dll")) returned 0x20
	[0169.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\sbdrop.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\sbdrop.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\sbdrop.dll" (normalized: "c:\\program files\\windows sidebar\\sbdrop.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\settings.ini" (normalized: "c:\\program files\\windows sidebar\\settings.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.288] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=80) returned 1
	[0169.288] CloseHandle (hObject=0x214) returned 1
	[0169.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\settings.ini" (normalized: "c:\\program files\\windows sidebar\\settings.ini")) returned 0x20
	[0169.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\settings.ini" (normalized: "c:\\program files\\windows sidebar\\settings.ini")) returned 0x20
	[0169.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\settings.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\settings.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\settings.ini" (normalized: "c:\\program files\\windows sidebar\\settings.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\sidebar.exe" (normalized: "c:\\program files\\windows sidebar\\sidebar.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.289] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1475584) returned 1
	[0169.289] CloseHandle (hObject=0x214) returned 1
	[0169.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\sidebar.exe" (normalized: "c:\\program files\\windows sidebar\\sidebar.exe")) returned 0x20
	[0169.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\sidebar.exe" (normalized: "c:\\program files\\windows sidebar\\sidebar.exe")) returned 0x20
	[0169.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\sidebar.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\sidebar.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\sidebar.exe" (normalized: "c:\\program files\\windows sidebar\\sidebar.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\wlsrvc.dll" (normalized: "c:\\program files\\windows sidebar\\wlsrvc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.290] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=163328) returned 1
	[0169.290] CloseHandle (hObject=0x214) returned 1
	[0169.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\wlsrvc.dll" (normalized: "c:\\program files\\windows sidebar\\wlsrvc.dll")) returned 0x20
	[0169.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\wlsrvc.dll" (normalized: "c:\\program files\\windows sidebar\\wlsrvc.dll")) returned 0x20
	[0169.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\wlsrvc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files\\windows sidebar\\wlsrvc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\wlsrvc.dll" (normalized: "c:\\program files\\windows sidebar\\wlsrvc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.292] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17000) returned 1
	[0169.292] CloseHandle (hObject=0x214) returned 1
	[0169.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm")) returned 0x20
	[0169.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm")) returned 0x20
	[0169.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.293] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17082) returned 1
	[0169.293] CloseHandle (hObject=0x214) returned 1
	[0169.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm")) returned 0x20
	[0169.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm")) returned 0x20
	[0169.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\AiodLite.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl\\aiodlite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.295] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=104344) returned 1
	[0169.295] CloseHandle (hObject=0x214) returned 1
	[0169.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\AiodLite.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl\\aiodlite.dll")) returned 0x20
	[0169.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\AiodLite.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl\\aiodlite.dll")) returned 0x20
	[0169.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\AiodLite.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl\\aiodlite.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\AiodLite.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\esl\\aiodlite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\irakhau.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.296] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17032) returned 1
	[0169.297] CloseHandle (hObject=0x214) returned 1
	[0169.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\irakhau.htm")) returned 0x20
	[0169.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\irakhau.htm")) returned 0x20
	[0169.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\irakhau.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\irakhau.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leame.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.490] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16955) returned 1
	[0169.490] CloseHandle (hObject=0x13c) returned 1
	[0169.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leame.htm")) returned 0x20
	[0169.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leame.htm")) returned 0x20
	[0169.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leame.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leame.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.491] SetEvent (hEvent=0xfc) returned 1
	[0169.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leggimi.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.491] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17033) returned 1
	[0169.491] CloseHandle (hObject=0x13c) returned 1
	[0169.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leggimi.htm")) returned 0x20
	[0169.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leggimi.htm")) returned 0x20
	[0169.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leggimi.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leggimi.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leiame.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.492] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17011) returned 1
	[0169.492] CloseHandle (hObject=0x13c) returned 1
	[0169.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leiame.htm")) returned 0x20
	[0169.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leiame.htm")) returned 0x20
	[0169.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leiame.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leiame.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\liesmich.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.494] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17078) returned 1
	[0169.494] CloseHandle (hObject=0x13c) returned 1
	[0169.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\liesmich.htm")) returned 0x20
	[0169.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\liesmich.htm")) returned 0x20
	[0169.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\liesmich.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\liesmich.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.494] SetEvent (hEvent=0xfc) returned 1
	[0169.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lisezmoi.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.614] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17351) returned 1
	[0169.614] CloseHandle (hObject=0x20c) returned 1
	[0169.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lisezmoi.htm")) returned 0x20
	[0169.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lisezmoi.htm")) returned 0x20
	[0169.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lisezmoi.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lisezmoi.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.615] SetEvent (hEvent=0xfc) returned 1
	[0169.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.708] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.708] CloseHandle (hObject=0x13c) returned 1
	[0169.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat")) returned 0x20
	[0169.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat")) returned 0x20
	[0169.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.708] SetEvent (hEvent=0xfc) returned 1
	[0169.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.709] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.709] CloseHandle (hObject=0x13c) returned 1
	[0169.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cht")) returned 0x20
	[0169.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cht")) returned 0x20
	[0169.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.717] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.717] CloseHandle (hObject=0x13c) returned 1
	[0169.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cze")) returned 0x20
	[0169.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cze")) returned 0x20
	[0169.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.718] SetEvent (hEvent=0xfc) returned 1
	[0169.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.718] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.718] CloseHandle (hObject=0x13c) returned 1
	[0169.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.dan")) returned 0x20
	[0169.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.dan")) returned 0x20
	[0169.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.720] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0169.720] CloseHandle (hObject=0x13c) returned 1
	[0169.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.deu")) returned 0x20
	[0169.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.deu")) returned 0x20
	[0169.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.720] SetEvent (hEvent=0xfc) returned 1
	[0169.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.721] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=135568) returned 1
	[0169.721] CloseHandle (hObject=0x13c) returned 1
	[0169.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.dll")) returned 0x20
	[0169.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.dll")) returned 0x20
	[0169.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0169.846] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.846] CloseHandle (hObject=0x13c) returned 1
	[0169.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.esp")) returned 0x20
	[0169.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.esp")) returned 0x20
	[0169.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\air\\nppdf32.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.847] SetEvent (hEvent=0xfc) returned 1
	[0169.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.946] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.946] CloseHandle (hObject=0x20c) returned 1
	[0169.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cht")) returned 0x20
	[0169.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cht")) returned 0x20
	[0169.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.946] SetEvent (hEvent=0xfc) returned 1
	[0169.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.947] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=135568) returned 1
	[0169.947] CloseHandle (hObject=0x20c) returned 1
	[0169.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dll")) returned 0x20
	[0169.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dll")) returned 0x20
	[0169.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.948] SetEvent (hEvent=0xfc) returned 1
	[0169.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.948] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.948] CloseHandle (hObject=0x20c) returned 1
	[0169.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.esp")) returned 0x20
	[0169.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.esp")) returned 0x20
	[0169.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.950] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.950] CloseHandle (hObject=0x20c) returned 1
	[0169.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.euq")) returned 0x20
	[0169.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.euq")) returned 0x20
	[0169.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.950] SetEvent (hEvent=0xfc) returned 1
	[0169.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.951] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0169.951] CloseHandle (hObject=0x20c) returned 1
	[0169.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.fra")) returned 0x20
	[0169.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.fra")) returned 0x20
	[0169.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.952] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.952] CloseHandle (hObject=0x20c) returned 1
	[0169.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hrv")) returned 0x20
	[0169.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hrv")) returned 0x20
	[0169.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.952] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.953] CloseHandle (hObject=0x20c) returned 1
	[0169.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hun")) returned 0x20
	[0169.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hun")) returned 0x20
	[0169.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.954] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.954] CloseHandle (hObject=0x20c) returned 1
	[0169.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ita")) returned 0x20
	[0169.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ita")) returned 0x20
	[0169.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.955] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6144) returned 1
	[0169.955] CloseHandle (hObject=0x20c) returned 1
	[0169.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.jpn")) returned 0x20
	[0169.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.jpn")) returned 0x20
	[0169.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.956] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.956] CloseHandle (hObject=0x20c) returned 1
	[0169.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.kor")) returned 0x20
	[0169.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.kor")) returned 0x20
	[0169.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.956] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.956] CloseHandle (hObject=0x20c) returned 1
	[0169.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nld")) returned 0x20
	[0169.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nld")) returned 0x20
	[0169.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.957] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.957] CloseHandle (hObject=0x20c) returned 1
	[0169.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nor")) returned 0x20
	[0169.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nor")) returned 0x20
	[0169.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.958] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0169.958] CloseHandle (hObject=0x20c) returned 1
	[0169.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.pol")) returned 0x20
	[0169.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.pol")) returned 0x20
	[0169.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.960] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.960] CloseHandle (hObject=0x20c) returned 1
	[0169.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ptb")) returned 0x20
	[0169.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ptb")) returned 0x20
	[0169.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.963] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0169.963] CloseHandle (hObject=0x20c) returned 1
	[0169.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rum")) returned 0x20
	[0169.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rum")) returned 0x20
	[0169.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.963] SetEvent (hEvent=0xfc) returned 1
	[0169.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.964] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.964] CloseHandle (hObject=0x20c) returned 1
	[0169.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rus")) returned 0x20
	[0169.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rus")) returned 0x20
	[0169.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.965] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.965] CloseHandle (hObject=0x20c) returned 1
	[0169.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sky")) returned 0x20
	[0169.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sky")) returned 0x20
	[0169.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0169.966] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.966] CloseHandle (hObject=0x20c) returned 1
	[0169.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.slv")) returned 0x20
	[0169.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.slv")) returned 0x20
	[0169.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.971] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.971] CloseHandle (hObject=0x214) returned 1
	[0169.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo")) returned 0x20
	[0169.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo")) returned 0x20
	[0169.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.972] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.972] CloseHandle (hObject=0x214) returned 1
	[0169.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sve")) returned 0x20
	[0169.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sve")) returned 0x20
	[0169.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.973] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.973] CloseHandle (hObject=0x214) returned 1
	[0169.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.tur")) returned 0x20
	[0169.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.tur")) returned 0x20
	[0169.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.974] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0169.974] CloseHandle (hObject=0x214) returned 1
	[0169.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ukr")) returned 0x20
	[0169.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ukr")) returned 0x20
	[0169.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\browser\\nppdf32.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ccme_base.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ccme_base.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.975] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1785856) returned 1
	[0169.975] CloseHandle (hObject=0x214) returned 1
	[0169.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ccme_base.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ccme_base.dll")) returned 0x20
	[0169.975] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ccme_base.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ccme_base.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ccme_base.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ccme_base.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0169.975] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ccme_base.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ccme_base.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ccme_base.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\ccme_base.dll")) returned 0
	[0169.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\CoolType.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cooltype.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.977] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2795928) returned 1
	[0169.977] CloseHandle (hObject=0x214) returned 1
	[0169.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\CoolType.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cooltype.dll")) returned 0x20
	[0169.977] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\CoolType.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cooltype.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\CoolType.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cooltype.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0169.977] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\CoolType.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cooltype.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\CoolType.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cooltype.dll")) returned 0
	[0169.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\cryptocme2.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cryptocme2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.977] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1839104) returned 1
	[0169.978] CloseHandle (hObject=0x214) returned 1
	[0169.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\cryptocme2.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cryptocme2.dll")) returned 0x20
	[0169.978] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\cryptocme2.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cryptocme2.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\cryptocme2.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cryptocme2.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0169.978] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\cryptocme2.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cryptocme2.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\cryptocme2.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cryptocme2.dll")) returned 0
	[0169.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cryptocme2.sig"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.978] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1607) returned 1
	[0169.978] CloseHandle (hObject=0x214) returned 1
	[0169.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cryptocme2.sig")) returned 0x20
	[0169.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cryptocme2.sig")) returned 0x20
	[0169.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cryptocme2.sig.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\cryptocme2.sig" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\cryptocme2.sig"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Eula.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\eula.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.979] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94608) returned 1
	[0169.979] CloseHandle (hObject=0x214) returned 1
	[0169.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Eula.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\eula.exe")) returned 0x20
	[0169.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Eula.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\eula.exe")) returned 0x20
	[0169.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Eula.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\eula.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Eula.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\eula.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ExtendScript.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\extendscript.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.980] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=670624) returned 1
	[0169.980] CloseHandle (hObject=0x214) returned 1
	[0169.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ExtendScript.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\extendscript.dll")) returned 0x20
	[0169.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ExtendScript.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\extendscript.dll")) returned 0x20
	[0169.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ExtendScript.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\extendscript.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ExtendScript.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\extendscript.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icucnv40.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icucnv40.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.982] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=721832) returned 1
	[0169.982] CloseHandle (hObject=0x214) returned 1
	[0169.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icucnv40.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icucnv40.dll")) returned 0x20
	[0169.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icucnv40.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icucnv40.dll")) returned 0x20
	[0169.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icucnv40.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icucnv40.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icucnv40.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icucnv40.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icudt40.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icudt40.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.983] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=96144) returned 1
	[0169.983] CloseHandle (hObject=0x214) returned 1
	[0169.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icudt40.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icudt40.dll")) returned 0x20
	[0169.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icudt40.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icudt40.dll")) returned 0x20
	[0169.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icudt40.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icudt40.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icudt40.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icudt40.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icudt40_full.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icudt40_full.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.984] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13922216) returned 1
	[0169.984] CloseHandle (hObject=0x214) returned 1
	[0169.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icudt40_full.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icudt40_full.dll")) returned 0x20
	[0169.984] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icudt40_full.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icudt40_full.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icudt40_full.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icudt40_full.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0169.985] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icudt40_full.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icudt40_full.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icudt40_full.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icudt40_full.dll")) returned 0
	[0169.985] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icuuc40.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icuuc40.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.986] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1126824) returned 1
	[0169.986] CloseHandle (hObject=0x214) returned 1
	[0169.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icuuc40.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icuuc40.dll")) returned 0x20
	[0169.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icuuc40.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icuuc40.dll")) returned 0x20
	[0169.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icuuc40.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icuuc40.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\icuuc40.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\icuuc40.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.987] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73718) returned 1
	[0169.987] CloseHandle (hObject=0x214) returned 1
	[0169.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf")) returned 0x20
	[0169.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf")) returned 0x20
	[0169.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.988] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.988] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=71041) returned 1
	[0169.988] CloseHandle (hObject=0x214) returned 1
	[0169.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf")) returned 0x20
	[0169.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf")) returned 0x20
	[0169.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.989] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=134337) returned 1
	[0169.989] CloseHandle (hObject=0x214) returned 1
	[0169.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf")) returned 0x20
	[0169.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf")) returned 0x20
	[0169.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.990] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.990] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=133040) returned 1
	[0169.990] CloseHandle (hObject=0x214) returned 1
	[0169.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf")) returned 0x20
	[0169.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf")) returned 0x20
	[0169.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.991] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22043) returned 1
	[0169.991] CloseHandle (hObject=0x214) returned 1
	[0169.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf")) returned 0x20
	[0169.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf")) returned 0x20
	[0169.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.992] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20746) returned 1
	[0169.992] CloseHandle (hObject=0x214) returned 1
	[0169.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf")) returned 0x20
	[0169.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf")) returned 0x20
	[0169.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.993] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90199) returned 1
	[0169.993] CloseHandle (hObject=0x214) returned 1
	[0169.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf")) returned 0x20
	[0169.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf")) returned 0x20
	[0169.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.994] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=87471) returned 1
	[0169.994] CloseHandle (hObject=0x214) returned 1
	[0169.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf")) returned 0x20
	[0169.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf")) returned 0x20
	[0169.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.995] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67308) returned 1
	[0169.995] CloseHandle (hObject=0x214) returned 1
	[0169.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf")) returned 0x20
	[0169.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf")) returned 0x20
	[0169.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.996] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65998) returned 1
	[0169.996] CloseHandle (hObject=0x214) returned 1
	[0169.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf")) returned 0x20
	[0169.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf")) returned 0x20
	[0169.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0169.997] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67284) returned 1
	[0169.998] CloseHandle (hObject=0x214) returned 1
	[0169.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf")) returned 0x20
	[0169.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf")) returned 0x20
	[0169.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0169.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0169.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.000] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65980) returned 1
	[0170.000] CloseHandle (hObject=0x214) returned 1
	[0170.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf")) returned 0x20
	[0170.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf")) returned 0x20
	[0170.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.001] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=82070) returned 1
	[0170.001] CloseHandle (hObject=0x214) returned 1
	[0170.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf")) returned 0x20
	[0170.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf")) returned 0x20
	[0170.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.002] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=80651) returned 1
	[0170.002] CloseHandle (hObject=0x214) returned 1
	[0170.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf")) returned 0x20
	[0170.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf")) returned 0x20
	[0170.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.003] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=68059) returned 1
	[0170.004] CloseHandle (hObject=0x214) returned 1
	[0170.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf")) returned 0x20
	[0170.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf")) returned 0x20
	[0170.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.004] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=66751) returned 1
	[0170.005] CloseHandle (hObject=0x214) returned 1
	[0170.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf")) returned 0x20
	[0170.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf")) returned 0x20
	[0170.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.006] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=68272) returned 1
	[0170.006] CloseHandle (hObject=0x214) returned 1
	[0170.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf")) returned 0x20
	[0170.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf")) returned 0x20
	[0170.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.007] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=66966) returned 1
	[0170.007] CloseHandle (hObject=0x214) returned 1
	[0170.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf")) returned 0x20
	[0170.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf")) returned 0x20
	[0170.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.008] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17333) returned 1
	[0170.008] CloseHandle (hObject=0x214) returned 1
	[0170.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf")) returned 0x20
	[0170.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf")) returned 0x20
	[0170.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.009] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16021) returned 1
	[0170.009] CloseHandle (hObject=0x214) returned 1
	[0170.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf")) returned 0x20
	[0170.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf")) returned 0x20
	[0170.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.010] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90263) returned 1
	[0170.010] CloseHandle (hObject=0x214) returned 1
	[0170.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf")) returned 0x20
	[0170.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf")) returned 0x20
	[0170.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.011] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89522) returned 1
	[0170.011] CloseHandle (hObject=0x214) returned 1
	[0170.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf")) returned 0x20
	[0170.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf")) returned 0x20
	[0170.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.012] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67859) returned 1
	[0170.012] CloseHandle (hObject=0x214) returned 1
	[0170.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf")) returned 0x20
	[0170.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf")) returned 0x20
	[0170.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.013] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=66552) returned 1
	[0170.013] CloseHandle (hObject=0x214) returned 1
	[0170.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf")) returned 0x20
	[0170.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf")) returned 0x20
	[0170.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.014] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22852) returned 1
	[0170.014] CloseHandle (hObject=0x214) returned 1
	[0170.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf")) returned 0x20
	[0170.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf")) returned 0x20
	[0170.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.015] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21508) returned 1
	[0170.015] CloseHandle (hObject=0x214) returned 1
	[0170.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf")) returned 0x20
	[0170.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf")) returned 0x20
	[0170.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.018] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22826) returned 1
	[0170.018] CloseHandle (hObject=0x214) returned 1
	[0170.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf")) returned 0x20
	[0170.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf")) returned 0x20
	[0170.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.019] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21526) returned 1
	[0170.019] CloseHandle (hObject=0x214) returned 1
	[0170.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf")) returned 0x20
	[0170.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf")) returned 0x20
	[0170.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.020] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67881) returned 1
	[0170.020] CloseHandle (hObject=0x214) returned 1
	[0170.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf")) returned 0x20
	[0170.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf")) returned 0x20
	[0170.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.021] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=66565) returned 1
	[0170.021] CloseHandle (hObject=0x214) returned 1
	[0170.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf")) returned 0x20
	[0170.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf")) returned 0x20
	[0170.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.022] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67926) returned 1
	[0170.022] CloseHandle (hObject=0x214) returned 1
	[0170.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf")) returned 0x20
	[0170.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf")) returned 0x20
	[0170.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.023] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=66618) returned 1
	[0170.023] CloseHandle (hObject=0x214) returned 1
	[0170.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf")) returned 0x20
	[0170.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf")) returned 0x20
	[0170.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.024] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=158882) returned 1
	[0170.024] CloseHandle (hObject=0x214) returned 1
	[0170.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf")) returned 0x20
	[0170.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf")) returned 0x20
	[0170.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.025] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=154954) returned 1
	[0170.025] CloseHandle (hObject=0x214) returned 1
	[0170.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf")) returned 0x20
	[0170.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf")) returned 0x20
	[0170.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.026] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70694) returned 1
	[0170.026] CloseHandle (hObject=0x214) returned 1
	[0170.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf")) returned 0x20
	[0170.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf")) returned 0x20
	[0170.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.027] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=69385) returned 1
	[0170.027] CloseHandle (hObject=0x214) returned 1
	[0170.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf")) returned 0x20
	[0170.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf")) returned 0x20
	[0170.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.028] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22673) returned 1
	[0170.028] CloseHandle (hObject=0x214) returned 1
	[0170.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf")) returned 0x20
	[0170.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf")) returned 0x20
	[0170.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.029] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23528) returned 1
	[0170.029] CloseHandle (hObject=0x214) returned 1
	[0170.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf")) returned 0x20
	[0170.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf")) returned 0x20
	[0170.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.030] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=122993) returned 1
	[0170.030] CloseHandle (hObject=0x214) returned 1
	[0170.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf")) returned 0x20
	[0170.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf")) returned 0x20
	[0170.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.031] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=119167) returned 1
	[0170.031] CloseHandle (hObject=0x214) returned 1
	[0170.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf")) returned 0x20
	[0170.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf")) returned 0x20
	[0170.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.032] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90620) returned 1
	[0170.032] CloseHandle (hObject=0x214) returned 1
	[0170.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf")) returned 0x20
	[0170.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf")) returned 0x20
	[0170.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.033] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=81222) returned 1
	[0170.033] CloseHandle (hObject=0x214) returned 1
	[0170.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf")) returned 0x20
	[0170.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf")) returned 0x20
	[0170.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.034] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24883) returned 1
	[0170.034] CloseHandle (hObject=0x214) returned 1
	[0170.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf")) returned 0x20
	[0170.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf")) returned 0x20
	[0170.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.035] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23212) returned 1
	[0170.035] CloseHandle (hObject=0x214) returned 1
	[0170.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf")) returned 0x20
	[0170.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf")) returned 0x20
	[0170.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.036] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67554) returned 1
	[0170.036] CloseHandle (hObject=0x214) returned 1
	[0170.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf")) returned 0x20
	[0170.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf")) returned 0x20
	[0170.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.037] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=66248) returned 1
	[0170.037] CloseHandle (hObject=0x214) returned 1
	[0170.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf")) returned 0x20
	[0170.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf")) returned 0x20
	[0170.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.038] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75414) returned 1
	[0170.038] CloseHandle (hObject=0x214) returned 1
	[0170.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf")) returned 0x20
	[0170.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf")) returned 0x20
	[0170.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.040] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=72757) returned 1
	[0170.040] CloseHandle (hObject=0x214) returned 1
	[0170.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf")) returned 0x20
	[0170.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf")) returned 0x20
	[0170.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.041] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=302512) returned 1
	[0170.041] CloseHandle (hObject=0x214) returned 1
	[0170.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf")) returned 0x20
	[0170.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf")) returned 0x20
	[0170.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.042] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=298383) returned 1
	[0170.042] CloseHandle (hObject=0x214) returned 1
	[0170.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf")) returned 0x20
	[0170.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf")) returned 0x20
	[0170.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.043] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=104434) returned 1
	[0170.043] CloseHandle (hObject=0x214) returned 1
	[0170.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf")) returned 0x20
	[0170.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf")) returned 0x20
	[0170.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.044] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=298272) returned 1
	[0170.044] CloseHandle (hObject=0x214) returned 1
	[0170.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf")) returned 0x20
	[0170.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf")) returned 0x20
	[0170.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.045] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1186728) returned 1
	[0170.045] CloseHandle (hObject=0x214) returned 1
	[0170.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin")) returned 0x20
	[0170.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin")) returned 0x20
	[0170.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\javascripts\\jsbytecodewin.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\JP2KLib.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\jp2klib.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.047] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=681872) returned 1
	[0170.047] CloseHandle (hObject=0x214) returned 1
	[0170.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\JP2KLib.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\jp2klib.dll")) returned 0x20
	[0170.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\JP2KLib.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\jp2klib.dll")) returned 0x20
	[0170.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\JP2KLib.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\jp2klib.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\JP2KLib.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\jp2klib.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.048] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1180) returned 1
	[0170.048] CloseHandle (hObject=0x214) returned 1
	[0170.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\eula.ini")) returned 0x20
	[0170.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\eula.ini")) returned 0x20
	[0170.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.049] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53530) returned 1
	[0170.049] CloseHandle (hObject=0x214) returned 1
	[0170.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html")) returned 0x20
	[0170.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html")) returned 0x20
	[0170.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.278] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=472) returned 1
	[0170.278] CloseHandle (hObject=0x20c) returned 1
	[0170.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\eula.ini")) returned 0x20
	[0170.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\eula.ini")) returned 0x20
	[0170.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.278] SetEvent (hEvent=0xfc) returned 1
	[0170.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.279] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=480) returned 1
	[0170.279] CloseHandle (hObject=0x20c) returned 1
	[0170.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\eula.ini")) returned 0x20
	[0170.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\eula.ini")) returned 0x20
	[0170.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.280] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=80475) returned 1
	[0170.280] CloseHandle (hObject=0x20c) returned 1
	[0170.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html")) returned 0x20
	[0170.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html")) returned 0x20
	[0170.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.287] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=936) returned 1
	[0170.287] CloseHandle (hObject=0x20c) returned 1
	[0170.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\eula.ini")) returned 0x20
	[0170.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\eula.ini")) returned 0x20
	[0170.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.288] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70327) returned 1
	[0170.288] CloseHandle (hObject=0x20c) returned 1
	[0170.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html")) returned 0x20
	[0170.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html")) returned 0x20
	[0170.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.289] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1046) returned 1
	[0170.289] CloseHandle (hObject=0x20c) returned 1
	[0170.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\eula.ini")) returned 0x20
	[0170.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\eula.ini")) returned 0x20
	[0170.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.290] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=48505) returned 1
	[0170.290] CloseHandle (hObject=0x20c) returned 1
	[0170.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html")) returned 0x20
	[0170.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html")) returned 0x20
	[0170.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.291] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1316) returned 1
	[0170.291] CloseHandle (hObject=0x20c) returned 1
	[0170.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\eula.ini")) returned 0x20
	[0170.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\eula.ini")) returned 0x20
	[0170.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.292] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51024) returned 1
	[0170.292] CloseHandle (hObject=0x20c) returned 1
	[0170.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html")) returned 0x20
	[0170.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html")) returned 0x20
	[0170.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.293] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1040) returned 1
	[0170.293] CloseHandle (hObject=0x20c) returned 1
	[0170.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\eula.ini")) returned 0x20
	[0170.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\eula.ini")) returned 0x20
	[0170.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.294] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43061) returned 1
	[0170.294] CloseHandle (hObject=0x20c) returned 1
	[0170.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html")) returned 0x20
	[0170.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html")) returned 0x20
	[0170.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.295] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1192) returned 1
	[0170.295] CloseHandle (hObject=0x20c) returned 1
	[0170.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\eula.ini")) returned 0x20
	[0170.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\eula.ini")) returned 0x20
	[0170.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.296] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52576) returned 1
	[0170.296] CloseHandle (hObject=0x20c) returned 1
	[0170.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html")) returned 0x20
	[0170.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html")) returned 0x20
	[0170.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.297] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1122) returned 1
	[0170.297] CloseHandle (hObject=0x20c) returned 1
	[0170.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\eula.ini")) returned 0x20
	[0170.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\eula.ini")) returned 0x20
	[0170.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.298] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=44763) returned 1
	[0170.298] CloseHandle (hObject=0x20c) returned 1
	[0170.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html")) returned 0x20
	[0170.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html")) returned 0x20
	[0170.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.299] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1240) returned 1
	[0170.299] CloseHandle (hObject=0x20c) returned 1
	[0170.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\eula.ini")) returned 0x20
	[0170.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\eula.ini")) returned 0x20
	[0170.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.300] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=59724) returned 1
	[0170.300] CloseHandle (hObject=0x20c) returned 1
	[0170.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html")) returned 0x20
	[0170.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html")) returned 0x20
	[0170.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.301] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1136) returned 1
	[0170.301] CloseHandle (hObject=0x20c) returned 1
	[0170.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\eula.ini")) returned 0x20
	[0170.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\eula.ini")) returned 0x20
	[0170.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.302] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50320) returned 1
	[0170.302] CloseHandle (hObject=0x20c) returned 1
	[0170.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html")) returned 0x20
	[0170.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html")) returned 0x20
	[0170.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.303] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1188) returned 1
	[0170.303] CloseHandle (hObject=0x20c) returned 1
	[0170.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\eula.ini")) returned 0x20
	[0170.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\eula.ini")) returned 0x20
	[0170.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.304] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73459) returned 1
	[0170.304] CloseHandle (hObject=0x20c) returned 1
	[0170.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html")) returned 0x20
	[0170.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html")) returned 0x20
	[0170.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.305] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1166) returned 1
	[0170.305] CloseHandle (hObject=0x20c) returned 1
	[0170.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\eula.ini")) returned 0x20
	[0170.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\eula.ini")) returned 0x20
	[0170.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.306] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50701) returned 1
	[0170.306] CloseHandle (hObject=0x20c) returned 1
	[0170.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html")) returned 0x20
	[0170.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html")) returned 0x20
	[0170.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.307] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=664) returned 1
	[0170.307] CloseHandle (hObject=0x20c) returned 1
	[0170.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\eula.ini")) returned 0x20
	[0170.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\eula.ini")) returned 0x20
	[0170.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.308] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=121908) returned 1
	[0170.308] CloseHandle (hObject=0x20c) returned 1
	[0170.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html")) returned 0x20
	[0170.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html")) returned 0x20
	[0170.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.309] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=608) returned 1
	[0170.309] CloseHandle (hObject=0x20c) returned 1
	[0170.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\eula.ini")) returned 0x20
	[0170.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\eula.ini")) returned 0x20
	[0170.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.310] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=102037) returned 1
	[0170.310] CloseHandle (hObject=0x20c) returned 1
	[0170.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html")) returned 0x20
	[0170.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html")) returned 0x20
	[0170.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.310] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1300) returned 1
	[0170.311] CloseHandle (hObject=0x20c) returned 1
	[0170.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\eula.ini")) returned 0x20
	[0170.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\eula.ini")) returned 0x20
	[0170.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.311] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49800) returned 1
	[0170.311] CloseHandle (hObject=0x20c) returned 1
	[0170.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html")) returned 0x20
	[0170.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html")) returned 0x20
	[0170.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.312] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1040) returned 1
	[0170.312] CloseHandle (hObject=0x20c) returned 1
	[0170.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\eula.ini")) returned 0x20
	[0170.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\eula.ini")) returned 0x20
	[0170.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.313] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47658) returned 1
	[0170.314] CloseHandle (hObject=0x20c) returned 1
	[0170.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html")) returned 0x20
	[0170.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html")) returned 0x20
	[0170.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.314] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1136) returned 1
	[0170.314] CloseHandle (hObject=0x20c) returned 1
	[0170.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\eula.ini")) returned 0x20
	[0170.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\eula.ini")) returned 0x20
	[0170.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.315] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61600) returned 1
	[0170.316] CloseHandle (hObject=0x20c) returned 1
	[0170.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html")) returned 0x20
	[0170.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html")) returned 0x20
	[0170.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.316] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1136) returned 1
	[0170.317] CloseHandle (hObject=0x20c) returned 1
	[0170.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\eula.ini")) returned 0x20
	[0170.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\eula.ini")) returned 0x20
	[0170.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.317] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=55110) returned 1
	[0170.318] CloseHandle (hObject=0x20c) returned 1
	[0170.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html")) returned 0x20
	[0170.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html")) returned 0x20
	[0170.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.319] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1238) returned 1
	[0170.319] CloseHandle (hObject=0x20c) returned 1
	[0170.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\eula.ini")) returned 0x20
	[0170.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\eula.ini")) returned 0x20
	[0170.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.320] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=59286) returned 1
	[0170.320] CloseHandle (hObject=0x20c) returned 1
	[0170.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html")) returned 0x20
	[0170.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html")) returned 0x20
	[0170.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.321] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1400) returned 1
	[0170.321] CloseHandle (hObject=0x20c) returned 1
	[0170.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\eula.ini")) returned 0x20
	[0170.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\eula.ini")) returned 0x20
	[0170.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.328] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=257251) returned 1
	[0170.328] CloseHandle (hObject=0x214) returned 1
	[0170.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html")) returned 0x20
	[0170.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html")) returned 0x20
	[0170.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.329] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1144) returned 1
	[0170.329] CloseHandle (hObject=0x214) returned 1
	[0170.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\eula.ini")) returned 0x20
	[0170.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\eula.ini")) returned 0x20
	[0170.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.330] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=68921) returned 1
	[0170.330] CloseHandle (hObject=0x214) returned 1
	[0170.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html")) returned 0x20
	[0170.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html")) returned 0x20
	[0170.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.331] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1088) returned 1
	[0170.331] CloseHandle (hObject=0x214) returned 1
	[0170.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\eula.ini")) returned 0x20
	[0170.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\eula.ini")) returned 0x20
	[0170.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.332] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49909) returned 1
	[0170.332] CloseHandle (hObject=0x214) returned 1
	[0170.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html")) returned 0x20
	[0170.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html")) returned 0x20
	[0170.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.333] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1026) returned 1
	[0170.333] CloseHandle (hObject=0x214) returned 1
	[0170.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\eula.ini")) returned 0x20
	[0170.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\eula.ini")) returned 0x20
	[0170.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.334] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=54095) returned 1
	[0170.334] CloseHandle (hObject=0x214) returned 1
	[0170.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html")) returned 0x20
	[0170.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html")) returned 0x20
	[0170.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.335] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1014) returned 1
	[0170.335] CloseHandle (hObject=0x214) returned 1
	[0170.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\eula.ini")) returned 0x20
	[0170.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\eula.ini")) returned 0x20
	[0170.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.336] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51391) returned 1
	[0170.336] CloseHandle (hObject=0x214) returned 1
	[0170.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html")) returned 0x20
	[0170.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html")) returned 0x20
	[0170.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.337] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1054) returned 1
	[0170.337] CloseHandle (hObject=0x214) returned 1
	[0170.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\eula.ini")) returned 0x20
	[0170.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\eula.ini")) returned 0x20
	[0170.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.338] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=64105) returned 1
	[0170.338] CloseHandle (hObject=0x214) returned 1
	[0170.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html")) returned 0x20
	[0170.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html")) returned 0x20
	[0170.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\eula.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.339] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1184) returned 1
	[0170.339] CloseHandle (hObject=0x214) returned 1
	[0170.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\eula.ini")) returned 0x20
	[0170.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\eula.ini")) returned 0x20
	[0170.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\eula.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\eula.ini" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\eula.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.340] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=239279) returned 1
	[0170.340] CloseHandle (hObject=0x214) returned 1
	[0170.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html")) returned 0x20
	[0170.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html")) returned 0x20
	[0170.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.342] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45056) returned 1
	[0170.342] CloseHandle (hObject=0x214) returned 1
	[0170.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat")) returned 0x20
	[0170.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat")) returned 0x20
	[0170.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\accessibility.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\accessibility.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.344] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=449536) returned 1
	[0170.344] CloseHandle (hObject=0x214) returned 1
	[0170.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat")) returned 0x20
	[0170.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat")) returned 0x20
	[0170.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Acroform.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\acroform.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0170.346] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0170.346] CloseHandle (hObject=0x208) returned 1
	[0170.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat")) returned 0x20
	[0170.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat")) returned 0x20
	[0170.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\AdobeCollabSync.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\adobecollabsync.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0170.347] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=513024) returned 1
	[0170.347] CloseHandle (hObject=0x208) returned 1
	[0170.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat")) returned 0x20
	[0170.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat")) returned 0x20
	[0170.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Annots.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\annots.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0170.348] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14336) returned 1
	[0170.348] CloseHandle (hObject=0x208) returned 1
	[0170.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat")) returned 0x20
	[0170.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat")) returned 0x20
	[0170.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\BRdlang32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\brdlang32.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0170.349] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=130560) returned 1
	[0170.349] CloseHandle (hObject=0x208) returned 1
	[0170.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat")) returned 0x20
	[0170.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat")) returned 0x20
	[0170.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Checkers.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\checkers.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.351] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=132096) returned 1
	[0170.351] CloseHandle (hObject=0x214) returned 1
	[0170.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat")) returned 0x20
	[0170.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat")) returned 0x20
	[0170.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DigSig.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\digsig.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.352] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19456) returned 1
	[0170.352] CloseHandle (hObject=0x214) returned 1
	[0170.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat")) returned 0x20
	[0170.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat")) returned 0x20
	[0170.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\DVA.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\dva.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.352] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0170.353] CloseHandle (hObject=0x214) returned 1
	[0170.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat")) returned 0x20
	[0170.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat")) returned 0x20
	[0170.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\eBook.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ebook.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.353] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41984) returned 1
	[0170.353] CloseHandle (hObject=0x214) returned 1
	[0170.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat")) returned 0x20
	[0170.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat")) returned 0x20
	[0170.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\EScript.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\escript.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.354] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0170.354] CloseHandle (hObject=0x214) returned 1
	[0170.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat")) returned 0x20
	[0170.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat")) returned 0x20
	[0170.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\IA32.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ia32.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.355] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79360) returned 1
	[0170.355] CloseHandle (hObject=0x214) returned 1
	[0170.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat")) returned 0x20
	[0170.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat")) returned 0x20
	[0170.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\makeaccessible.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\makeaccessible.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.356] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=82432) returned 1
	[0170.356] CloseHandle (hObject=0x214) returned 1
	[0170.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat")) returned 0x20
	[0170.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat")) returned 0x20
	[0170.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Multimedia.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\multimedia.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.358] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11776) returned 1
	[0170.358] CloseHandle (hObject=0x214) returned 1
	[0170.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat")) returned 0x20
	[0170.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat")) returned 0x20
	[0170.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\pddom.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\pddom.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.418] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=547840) returned 1
	[0170.418] CloseHandle (hObject=0x20c) returned 1
	[0170.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat")) returned 0x20
	[0170.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat")) returned 0x20
	[0170.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\PPKLite.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\ppklite.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.418] SetEvent (hEvent=0xfc) returned 1
	[0170.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.522] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24576) returned 1
	[0170.522] CloseHandle (hObject=0x214) returned 1
	[0170.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat")) returned 0x20
	[0170.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat")) returned 0x20
	[0170.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Search.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ca_es\\search.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.523] SetEvent (hEvent=0xfc) returned 1
	[0170.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\multimedia.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0170.562] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=78336) returned 1
	[0170.562] CloseHandle (hObject=0x214) returned 1
	[0170.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\multimedia.cze")) returned 0x20
	[0170.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\multimedia.cze")) returned 0x20
	[0170.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\multimedia.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Multimedia.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\multimedia.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.562] SetEvent (hEvent=0xfc) returned 1
	[0170.563] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\pddom.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0170.671] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0170.671] CloseHandle (hObject=0x208) returned 1
	[0170.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\pddom.cze")) returned 0x20
	[0170.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\pddom.cze")) returned 0x20
	[0170.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\pddom.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\pddom.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\cs_cz\\pddom.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\readoutloud.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.766] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0170.767] CloseHandle (hObject=0x20c) returned 1
	[0170.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\readoutloud.dan")) returned 0x20
	[0170.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\readoutloud.dan")) returned 0x20
	[0170.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\readoutloud.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\ReadOutLoud.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\readoutloud.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.767] SetEvent (hEvent=0xfc) returned 1
	[0170.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\saveasrtf.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.768] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17920) returned 1
	[0170.768] CloseHandle (hObject=0x20c) returned 1
	[0170.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\saveasrtf.dan")) returned 0x20
	[0170.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\saveasrtf.dan")) returned 0x20
	[0170.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\saveasrtf.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SaveAsRTF.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\saveasrtf.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.768] SetEvent (hEvent=0xfc) returned 1
	[0170.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\search.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.769] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23552) returned 1
	[0170.769] CloseHandle (hObject=0x20c) returned 1
	[0170.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\search.dan")) returned 0x20
	[0170.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\search.dan")) returned 0x20
	[0170.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\search.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Search.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\search.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\sendmail.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.770] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15872) returned 1
	[0170.770] CloseHandle (hObject=0x20c) returned 1
	[0170.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\sendmail.dan")) returned 0x20
	[0170.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\sendmail.dan")) returned 0x20
	[0170.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\sendmail.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\SendMail.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\sendmail.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.771] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36007) returned 1
	[0170.771] CloseHandle (hObject=0x20c) returned 1
	[0170.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\dexshare.asfx")) returned 0x20
	[0170.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\dexshare.asfx")) returned 0x20
	[0170.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.772] SetEvent (hEvent=0xfc) returned 1
	[0170.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.772] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=225) returned 1
	[0170.773] CloseHandle (hObject=0x20c) returned 1
	[0170.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\services.asfx")) returned 0x20
	[0170.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\services.asfx")) returned 0x20
	[0170.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\spelling.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.774] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0170.774] CloseHandle (hObject=0x20c) returned 1
	[0170.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\spelling.dan")) returned 0x20
	[0170.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\spelling.dan")) returned 0x20
	[0170.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\spelling.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Spelling.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\spelling.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.774] SetEvent (hEvent=0xfc) returned 1
	[0170.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\updater.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.776] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0170.776] CloseHandle (hObject=0x20c) returned 1
	[0170.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\updater.dan")) returned 0x20
	[0170.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\updater.dan")) returned 0x20
	[0170.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\updater.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\updater.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\updater.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.776] SetEvent (hEvent=0xfc) returned 1
	[0170.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\weblink.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.777] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28160) returned 1
	[0170.777] CloseHandle (hObject=0x20c) returned 1
	[0170.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\weblink.dan")) returned 0x20
	[0170.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\weblink.dan")) returned 0x20
	[0170.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\weblink.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Weblink.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\da_dk\\weblink.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\accessibility.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.779] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45056) returned 1
	[0170.779] CloseHandle (hObject=0x20c) returned 1
	[0170.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\accessibility.deu")) returned 0x20
	[0170.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\accessibility.deu")) returned 0x20
	[0170.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\accessibility.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\accessibility.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\accessibility.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.783] SetEvent (hEvent=0xfc) returned 1
	[0170.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\acroform.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.784] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=444416) returned 1
	[0170.784] CloseHandle (hObject=0x20c) returned 1
	[0170.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\acroform.deu")) returned 0x20
	[0170.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\acroform.deu")) returned 0x20
	[0170.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\acroform.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Acroform.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\acroform.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.785] SetEvent (hEvent=0xfc) returned 1
	[0170.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\adobecollabsync.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.786] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0170.786] CloseHandle (hObject=0x20c) returned 1
	[0170.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\adobecollabsync.deu")) returned 0x20
	[0170.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\adobecollabsync.deu")) returned 0x20
	[0170.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\adobecollabsync.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\AdobeCollabSync.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\adobecollabsync.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.786] SetEvent (hEvent=0xfc) returned 1
	[0170.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\annots.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.787] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=526848) returned 1
	[0170.788] CloseHandle (hObject=0x20c) returned 1
	[0170.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\annots.deu")) returned 0x20
	[0170.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\annots.deu")) returned 0x20
	[0170.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\annots.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Annots.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\annots.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.788] SetEvent (hEvent=0xfc) returned 1
	[0170.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\brdlang32.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.789] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13824) returned 1
	[0170.789] CloseHandle (hObject=0x20c) returned 1
	[0170.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\brdlang32.deu")) returned 0x20
	[0170.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\brdlang32.deu")) returned 0x20
	[0170.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\brdlang32.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\BRdlang32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\brdlang32.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\checkers.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.791] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=130560) returned 1
	[0170.791] CloseHandle (hObject=0x20c) returned 1
	[0170.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\checkers.deu")) returned 0x20
	[0170.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\checkers.deu")) returned 0x20
	[0170.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\checkers.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Checkers.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\checkers.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\digsig.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.792] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=138752) returned 1
	[0170.792] CloseHandle (hObject=0x20c) returned 1
	[0170.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\digsig.deu")) returned 0x20
	[0170.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\digsig.deu")) returned 0x20
	[0170.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\digsig.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DigSig.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\digsig.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\dva.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.793] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19456) returned 1
	[0170.793] CloseHandle (hObject=0x20c) returned 1
	[0170.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\dva.deu")) returned 0x20
	[0170.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\dva.deu")) returned 0x20
	[0170.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\dva.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\DVA.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\dva.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ebook.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.794] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7168) returned 1
	[0170.794] CloseHandle (hObject=0x20c) returned 1
	[0170.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ebook.deu")) returned 0x20
	[0170.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ebook.deu")) returned 0x20
	[0170.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ebook.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\eBook.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ebook.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\escript.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.795] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42496) returned 1
	[0170.795] CloseHandle (hObject=0x20c) returned 1
	[0170.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\escript.deu")) returned 0x20
	[0170.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\escript.deu")) returned 0x20
	[0170.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\escript.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Escript.deu" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\escript.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ia32.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.797] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0170.797] CloseHandle (hObject=0x20c) returned 1
	[0170.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ia32.deu")) returned 0x20
	[0170.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ia32.deu")) returned 0x20
	[0170.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ia32.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\IA32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ia32.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\makeaccessible.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.798] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=82944) returned 1
	[0170.798] CloseHandle (hObject=0x20c) returned 1
	[0170.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\makeaccessible.deu")) returned 0x20
	[0170.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\makeaccessible.deu")) returned 0x20
	[0170.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\makeaccessible.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\makeaccessible.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\makeaccessible.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\multimedia.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.799] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=83456) returned 1
	[0170.799] CloseHandle (hObject=0x20c) returned 1
	[0170.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\multimedia.deu")) returned 0x20
	[0170.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\multimedia.deu")) returned 0x20
	[0170.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\multimedia.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Multimedia.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\multimedia.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\pddom.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.800] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0170.800] CloseHandle (hObject=0x20c) returned 1
	[0170.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\pddom.deu")) returned 0x20
	[0170.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\pddom.deu")) returned 0x20
	[0170.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\pddom.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\pddom.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\pddom.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ppklite.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.801] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=558080) returned 1
	[0170.801] CloseHandle (hObject=0x20c) returned 1
	[0170.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ppklite.deu")) returned 0x20
	[0170.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ppklite.deu")) returned 0x20
	[0170.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ppklite.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\PPKLITE.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\ppklite.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\rdlang32.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.803] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1426432) returned 1
	[0170.803] CloseHandle (hObject=0x20c) returned 1
	[0170.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\rdlang32.deu")) returned 0x20
	[0170.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\rdlang32.deu")) returned 0x20
	[0170.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\rdlang32.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\RdLang32.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\rdlang32.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\readoutloud.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.804] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0170.804] CloseHandle (hObject=0x20c) returned 1
	[0170.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\readoutloud.deu")) returned 0x20
	[0170.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\readoutloud.deu")) returned 0x20
	[0170.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\readoutloud.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\ReadOutLoud.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\readoutloud.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\reflow.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.805] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0170.805] CloseHandle (hObject=0x20c) returned 1
	[0170.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\reflow.deu")) returned 0x20
	[0170.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\reflow.deu")) returned 0x20
	[0170.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\reflow.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\reflow.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\reflow.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\saveasrtf.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.806] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19456) returned 1
	[0170.806] CloseHandle (hObject=0x20c) returned 1
	[0170.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\saveasrtf.deu")) returned 0x20
	[0170.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\saveasrtf.deu")) returned 0x20
	[0170.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\saveasrtf.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SaveAsRTF.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\saveasrtf.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\search.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.807] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25088) returned 1
	[0170.807] CloseHandle (hObject=0x20c) returned 1
	[0170.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\search.deu")) returned 0x20
	[0170.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\search.deu")) returned 0x20
	[0170.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\search.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Search.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\search.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\sendmail.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.808] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16384) returned 1
	[0170.808] CloseHandle (hObject=0x20c) returned 1
	[0170.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\sendmail.deu")) returned 0x20
	[0170.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\sendmail.deu")) returned 0x20
	[0170.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\sendmail.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\SendMail.deu" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\sendmail.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.810] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38320) returned 1
	[0170.810] CloseHandle (hObject=0x20c) returned 1
	[0170.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\dexshare.asfx")) returned 0x20
	[0170.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\dexshare.asfx")) returned 0x20
	[0170.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.811] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=231) returned 1
	[0170.811] CloseHandle (hObject=0x20c) returned 1
	[0170.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\services.asfx")) returned 0x20
	[0170.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\services.asfx")) returned 0x20
	[0170.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\spelling.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.812] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0170.812] CloseHandle (hObject=0x20c) returned 1
	[0170.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\spelling.deu")) returned 0x20
	[0170.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\spelling.deu")) returned 0x20
	[0170.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\spelling.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Spelling.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\spelling.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\updater.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.813] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0170.813] CloseHandle (hObject=0x20c) returned 1
	[0170.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\updater.deu")) returned 0x20
	[0170.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\updater.deu")) returned 0x20
	[0170.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\updater.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\updater.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\updater.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\weblink.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.814] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29696) returned 1
	[0170.814] CloseHandle (hObject=0x20c) returned 1
	[0170.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\weblink.deu")) returned 0x20
	[0170.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\weblink.deu")) returned 0x20
	[0170.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\weblink.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Weblink.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\de_de\\weblink.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\accessibility.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.815] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45568) returned 1
	[0170.815] CloseHandle (hObject=0x20c) returned 1
	[0170.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\accessibility.esp")) returned 0x20
	[0170.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\accessibility.esp")) returned 0x20
	[0170.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\accessibility.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\accessibility.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\accessibility.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\acroform.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.817] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=446976) returned 1
	[0170.817] CloseHandle (hObject=0x20c) returned 1
	[0170.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\acroform.esp")) returned 0x20
	[0170.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\acroform.esp")) returned 0x20
	[0170.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\acroform.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Acroform.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\acroform.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\adobecollabsync.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.818] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0170.818] CloseHandle (hObject=0x20c) returned 1
	[0170.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\adobecollabsync.esp")) returned 0x20
	[0170.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\adobecollabsync.esp")) returned 0x20
	[0170.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\adobecollabsync.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\AdobeCollabSync.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\adobecollabsync.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\annots.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.820] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=519168) returned 1
	[0170.820] CloseHandle (hObject=0x20c) returned 1
	[0170.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\annots.esp")) returned 0x20
	[0170.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\annots.esp")) returned 0x20
	[0170.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\annots.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Annots.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\annots.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\brdlang32.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.821] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13824) returned 1
	[0170.821] CloseHandle (hObject=0x20c) returned 1
	[0170.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\brdlang32.esp")) returned 0x20
	[0170.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\brdlang32.esp")) returned 0x20
	[0170.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\brdlang32.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\BRdlang32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\brdlang32.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\checkers.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.822] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=130048) returned 1
	[0170.822] CloseHandle (hObject=0x20c) returned 1
	[0170.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\checkers.esp")) returned 0x20
	[0170.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\checkers.esp")) returned 0x20
	[0170.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\checkers.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Checkers.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\checkers.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\digsig.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.824] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=133120) returned 1
	[0170.824] CloseHandle (hObject=0x20c) returned 1
	[0170.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\digsig.esp")) returned 0x20
	[0170.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\digsig.esp")) returned 0x20
	[0170.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\digsig.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DigSig.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\digsig.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\dva.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.824] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19968) returned 1
	[0170.825] CloseHandle (hObject=0x20c) returned 1
	[0170.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\dva.esp")) returned 0x20
	[0170.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\dva.esp")) returned 0x20
	[0170.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\dva.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\DVA.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\dva.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ebook.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.825] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7168) returned 1
	[0170.825] CloseHandle (hObject=0x20c) returned 1
	[0170.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ebook.esp")) returned 0x20
	[0170.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ebook.esp")) returned 0x20
	[0170.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ebook.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\eBook.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ebook.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\escript.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.826] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42496) returned 1
	[0170.826] CloseHandle (hObject=0x20c) returned 1
	[0170.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\escript.esp")) returned 0x20
	[0170.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\escript.esp")) returned 0x20
	[0170.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\escript.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\EScript.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\escript.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ia32.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.828] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0170.828] CloseHandle (hObject=0x20c) returned 1
	[0170.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ia32.esp")) returned 0x20
	[0170.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ia32.esp")) returned 0x20
	[0170.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ia32.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\IA32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ia32.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\makeaccessible.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.829] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=83456) returned 1
	[0170.829] CloseHandle (hObject=0x20c) returned 1
	[0170.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\makeaccessible.esp")) returned 0x20
	[0170.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\makeaccessible.esp")) returned 0x20
	[0170.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\makeaccessible.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\makeaccessible.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\makeaccessible.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\multimedia.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.830] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=84480) returned 1
	[0170.830] CloseHandle (hObject=0x20c) returned 1
	[0170.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\multimedia.esp")) returned 0x20
	[0170.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\multimedia.esp")) returned 0x20
	[0170.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\multimedia.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Multimedia.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\multimedia.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\pddom.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.831] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0170.832] CloseHandle (hObject=0x20c) returned 1
	[0170.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\pddom.esp")) returned 0x20
	[0170.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\pddom.esp")) returned 0x20
	[0170.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\pddom.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\pddom.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\pddom.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ppklite.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.832] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=539648) returned 1
	[0170.832] CloseHandle (hObject=0x20c) returned 1
	[0170.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ppklite.esp")) returned 0x20
	[0170.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ppklite.esp")) returned 0x20
	[0170.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ppklite.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\PPKLITE.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\ppklite.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\rdlang32.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.833] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1403392) returned 1
	[0170.833] CloseHandle (hObject=0x20c) returned 1
	[0170.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\rdlang32.esp")) returned 0x20
	[0170.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\rdlang32.esp")) returned 0x20
	[0170.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\rdlang32.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\RdLang32.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\rdlang32.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\readoutloud.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.835] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0170.835] CloseHandle (hObject=0x20c) returned 1
	[0170.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\readoutloud.esp")) returned 0x20
	[0170.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\readoutloud.esp")) returned 0x20
	[0170.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\readoutloud.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\ReadOutLoud.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\readoutloud.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\reflow.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.836] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0170.836] CloseHandle (hObject=0x20c) returned 1
	[0170.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\reflow.esp")) returned 0x20
	[0170.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\reflow.esp")) returned 0x20
	[0170.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\reflow.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\reflow.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\reflow.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\saveasrtf.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.838] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18944) returned 1
	[0170.838] CloseHandle (hObject=0x20c) returned 1
	[0170.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\saveasrtf.esp")) returned 0x20
	[0170.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\saveasrtf.esp")) returned 0x20
	[0170.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\saveasrtf.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SaveAsRTF.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\saveasrtf.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\search.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.839] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24576) returned 1
	[0170.839] CloseHandle (hObject=0x20c) returned 1
	[0170.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\search.esp")) returned 0x20
	[0170.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\search.esp")) returned 0x20
	[0170.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\search.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Search.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\search.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\sendmail.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.840] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16384) returned 1
	[0170.840] CloseHandle (hObject=0x20c) returned 1
	[0170.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\sendmail.esp")) returned 0x20
	[0170.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\sendmail.esp")) returned 0x20
	[0170.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\sendmail.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\SendMail.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\sendmail.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.841] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38016) returned 1
	[0170.841] CloseHandle (hObject=0x20c) returned 1
	[0170.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\dexshare.asfx")) returned 0x20
	[0170.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\dexshare.asfx")) returned 0x20
	[0170.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.843] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=231) returned 1
	[0170.843] CloseHandle (hObject=0x20c) returned 1
	[0170.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\services.asfx")) returned 0x20
	[0170.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\services.asfx")) returned 0x20
	[0170.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\spelling.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.844] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0170.844] CloseHandle (hObject=0x20c) returned 1
	[0170.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\spelling.esp")) returned 0x20
	[0170.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\spelling.esp")) returned 0x20
	[0170.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\spelling.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Spelling.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\spelling.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\updater.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0170.951] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0170.951] CloseHandle (hObject=0x20c) returned 1
	[0170.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\updater.esp")) returned 0x20
	[0170.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\updater.esp")) returned 0x20
	[0170.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\updater.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0170.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\updater.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\es_es\\updater.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0170.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.062] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0171.062] CloseHandle (hObject=0x20c) returned 1
	[0171.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo")) returned 0x20
	[0171.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo")) returned 0x20
	[0171.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\AdobeCollabSync.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\adobecollabsync.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.062] SetEvent (hEvent=0xfc) returned 1
	[0171.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.063] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=489472) returned 1
	[0171.063] CloseHandle (hObject=0x20c) returned 1
	[0171.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo")) returned 0x20
	[0171.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo")) returned 0x20
	[0171.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Annots.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\annots.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.064] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13312) returned 1
	[0171.064] CloseHandle (hObject=0x20c) returned 1
	[0171.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo")) returned 0x20
	[0171.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo")) returned 0x20
	[0171.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\BRdlang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\brdlang32.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.066] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=122368) returned 1
	[0171.066] CloseHandle (hObject=0x13c) returned 1
	[0171.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo")) returned 0x20
	[0171.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo")) returned 0x20
	[0171.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Checkers.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\checkers.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.066] SetEvent (hEvent=0xfc) returned 1
	[0171.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.068] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=129536) returned 1
	[0171.068] CloseHandle (hObject=0x20c) returned 1
	[0171.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo")) returned 0x20
	[0171.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo")) returned 0x20
	[0171.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DigSig.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\digsig.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.068] SetEvent (hEvent=0xfc) returned 1
	[0171.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.069] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17920) returned 1
	[0171.069] CloseHandle (hObject=0x20c) returned 1
	[0171.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo")) returned 0x20
	[0171.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo")) returned 0x20
	[0171.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\DVA.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\dva.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.070] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0171.070] CloseHandle (hObject=0x20c) returned 1
	[0171.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo")) returned 0x20
	[0171.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo")) returned 0x20
	[0171.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\eBook.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ebook.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.071] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41472) returned 1
	[0171.071] CloseHandle (hObject=0x20c) returned 1
	[0171.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo")) returned 0x20
	[0171.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo")) returned 0x20
	[0171.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\EScript.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\escript.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.072] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0171.072] CloseHandle (hObject=0x20c) returned 1
	[0171.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo")) returned 0x20
	[0171.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo")) returned 0x20
	[0171.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\IA32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ia32.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.073] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75776) returned 1
	[0171.073] CloseHandle (hObject=0x20c) returned 1
	[0171.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo")) returned 0x20
	[0171.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo")) returned 0x20
	[0171.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\makeaccessible.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\makeaccessible.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.074] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=76800) returned 1
	[0171.074] CloseHandle (hObject=0x20c) returned 1
	[0171.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo")) returned 0x20
	[0171.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo")) returned 0x20
	[0171.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Multimedia.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\multimedia.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.074] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0171.075] CloseHandle (hObject=0x20c) returned 1
	[0171.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo")) returned 0x20
	[0171.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo")) returned 0x20
	[0171.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\pddom.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\pddom.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.075] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=514048) returned 1
	[0171.075] CloseHandle (hObject=0x20c) returned 1
	[0171.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo")) returned 0x20
	[0171.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo")) returned 0x20
	[0171.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\PPKLITE.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\ppklite.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.077] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1330176) returned 1
	[0171.077] CloseHandle (hObject=0x20c) returned 1
	[0171.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo")) returned 0x20
	[0171.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo")) returned 0x20
	[0171.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\RdLang32.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\rdlang32.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.078] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0171.078] CloseHandle (hObject=0x20c) returned 1
	[0171.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo")) returned 0x20
	[0171.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo")) returned 0x20
	[0171.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\ReadOutLoud.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\readoutloud.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.078] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0171.079] CloseHandle (hObject=0x20c) returned 1
	[0171.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo")) returned 0x20
	[0171.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo")) returned 0x20
	[0171.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\reflow.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\reflow.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.079] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18432) returned 1
	[0171.079] CloseHandle (hObject=0x20c) returned 1
	[0171.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo")) returned 0x20
	[0171.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo")) returned 0x20
	[0171.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SaveAsRTF.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\saveasrtf.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.080] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23040) returned 1
	[0171.080] CloseHandle (hObject=0x20c) returned 1
	[0171.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo")) returned 0x20
	[0171.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo")) returned 0x20
	[0171.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Search.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\search.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.081] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15360) returned 1
	[0171.081] CloseHandle (hObject=0x20c) returned 1
	[0171.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo")) returned 0x20
	[0171.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo")) returned 0x20
	[0171.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\SendMail.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\sendmail.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.084] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37529) returned 1
	[0171.084] CloseHandle (hObject=0x20c) returned 1
	[0171.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\dexshare.asfx")) returned 0x20
	[0171.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\dexshare.asfx")) returned 0x20
	[0171.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.085] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=225) returned 1
	[0171.085] CloseHandle (hObject=0x20c) returned 1
	[0171.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\services.asfx")) returned 0x20
	[0171.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\services.asfx")) returned 0x20
	[0171.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.087] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0171.087] CloseHandle (hObject=0x208) returned 1
	[0171.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo")) returned 0x20
	[0171.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo")) returned 0x20
	[0171.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Spelling.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\spelling.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.088] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0171.088] CloseHandle (hObject=0x208) returned 1
	[0171.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo")) returned 0x20
	[0171.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo")) returned 0x20
	[0171.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\updater.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\updater.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.089] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27136) returned 1
	[0171.089] CloseHandle (hObject=0x208) returned 1
	[0171.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo")) returned 0x20
	[0171.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo")) returned 0x20
	[0171.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Weblink.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fi_fi\\weblink.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\accessibility.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.091] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46592) returned 1
	[0171.091] CloseHandle (hObject=0x208) returned 1
	[0171.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\accessibility.fra")) returned 0x20
	[0171.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\accessibility.fra")) returned 0x20
	[0171.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\accessibility.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\accessibility.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\accessibility.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\acroform.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.187] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=452608) returned 1
	[0171.187] CloseHandle (hObject=0x20c) returned 1
	[0171.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\acroform.fra")) returned 0x20
	[0171.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\acroform.fra")) returned 0x20
	[0171.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\acroform.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Acroform.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\acroform.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\adobecollabsync.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.189] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0171.189] CloseHandle (hObject=0x20c) returned 1
	[0171.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\adobecollabsync.fra")) returned 0x20
	[0171.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\adobecollabsync.fra")) returned 0x20
	[0171.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\adobecollabsync.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\AdobeCollabSync.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\adobecollabsync.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\annots.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.190] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=521728) returned 1
	[0171.190] CloseHandle (hObject=0x20c) returned 1
	[0171.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\annots.fra")) returned 0x20
	[0171.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\annots.fra")) returned 0x20
	[0171.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\annots.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Annots.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\annots.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\brdlang32.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.191] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14336) returned 1
	[0171.191] CloseHandle (hObject=0x20c) returned 1
	[0171.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\brdlang32.fra")) returned 0x20
	[0171.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\brdlang32.fra")) returned 0x20
	[0171.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\brdlang32.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\BRdlang32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\brdlang32.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\checkers.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.280] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=133632) returned 1
	[0171.280] CloseHandle (hObject=0x214) returned 1
	[0171.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\checkers.fra")) returned 0x20
	[0171.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\checkers.fra")) returned 0x20
	[0171.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\checkers.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Checkers.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\checkers.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.281] SetEvent (hEvent=0xfc) returned 1
	[0171.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\dva.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.281] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19968) returned 1
	[0171.281] CloseHandle (hObject=0x214) returned 1
	[0171.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\dva.fra")) returned 0x20
	[0171.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\dva.fra")) returned 0x20
	[0171.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\dva.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\DVA.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\dva.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ebook.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.282] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7168) returned 1
	[0171.282] CloseHandle (hObject=0x214) returned 1
	[0171.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ebook.fra")) returned 0x20
	[0171.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ebook.fra")) returned 0x20
	[0171.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ebook.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\eBook.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ebook.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\escript.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.283] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43008) returned 1
	[0171.283] CloseHandle (hObject=0x214) returned 1
	[0171.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\escript.fra")) returned 0x20
	[0171.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\escript.fra")) returned 0x20
	[0171.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\escript.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\EScript.fra" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\escript.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ia32.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.284] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0171.284] CloseHandle (hObject=0x214) returned 1
	[0171.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ia32.fra")) returned 0x20
	[0171.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ia32.fra")) returned 0x20
	[0171.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ia32.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\IA32.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\ia32.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\makeaccessible.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0171.286] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=84992) returned 1
	[0171.286] CloseHandle (hObject=0x208) returned 1
	[0171.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\makeaccessible.fra")) returned 0x20
	[0171.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\makeaccessible.fra")) returned 0x20
	[0171.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\makeaccessible.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\makeaccessible.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\makeaccessible.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\multimedia.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.436] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=82944) returned 1
	[0171.436] CloseHandle (hObject=0x20c) returned 1
	[0171.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\multimedia.fra")) returned 0x20
	[0171.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\multimedia.fra")) returned 0x20
	[0171.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\multimedia.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Multimedia.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\fr_fr\\multimedia.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.436] SetEvent (hEvent=0xfc) returned 1
	[0171.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\pddom.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0171.533] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11776) returned 1
	[0171.533] CloseHandle (hObject=0x1a0) returned 1
	[0171.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\pddom.hrv")) returned 0x20
	[0171.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\pddom.hrv")) returned 0x20
	[0171.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\pddom.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\PDDom.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\pddom.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.536] SetEvent (hEvent=0xfc) returned 1
	[0171.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\reflow.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0171.537] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0171.537] CloseHandle (hObject=0x1a0) returned 1
	[0171.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\reflow.hrv")) returned 0x20
	[0171.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\reflow.hrv")) returned 0x20
	[0171.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\reflow.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Reflow.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\reflow.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\saveasrtf.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0171.538] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18944) returned 1
	[0171.538] CloseHandle (hObject=0x1a0) returned 1
	[0171.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\saveasrtf.hrv")) returned 0x20
	[0171.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\saveasrtf.hrv")) returned 0x20
	[0171.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\saveasrtf.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SaveAsRTF.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\saveasrtf.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\search.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0171.539] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23552) returned 1
	[0171.539] CloseHandle (hObject=0x1a0) returned 1
	[0171.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\search.hrv")) returned 0x20
	[0171.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\search.hrv")) returned 0x20
	[0171.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\search.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Search.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\search.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\sendmail.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0171.540] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15360) returned 1
	[0171.540] CloseHandle (hObject=0x1a0) returned 1
	[0171.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\sendmail.hrv")) returned 0x20
	[0171.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\sendmail.hrv")) returned 0x20
	[0171.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\sendmail.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\SendMail.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\sendmail.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0171.578] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36937) returned 1
	[0171.578] CloseHandle (hObject=0x1a0) returned 1
	[0171.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\dexshare.asfx")) returned 0x20
	[0171.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\dexshare.asfx")) returned 0x20
	[0171.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.579] SetEvent (hEvent=0xfc) returned 1
	[0171.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0171.579] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=230) returned 1
	[0171.579] CloseHandle (hObject=0x1a0) returned 1
	[0171.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\services.asfx")) returned 0x20
	[0171.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\services.asfx")) returned 0x20
	[0171.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\spelling.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0171.580] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0171.580] CloseHandle (hObject=0x1a0) returned 1
	[0171.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\spelling.hrv")) returned 0x20
	[0171.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\spelling.hrv")) returned 0x20
	[0171.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\spelling.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Spelling.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\spelling.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\updater.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1a0
	[0171.581] GetFileSizeEx (in: hFile=0x1a0, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0171.581] CloseHandle (hObject=0x1a0) returned 1
	[0171.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\updater.hrv")) returned 0x20
	[0171.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\updater.hrv")) returned 0x20
	[0171.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\updater.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Updater.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\updater.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\weblink.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.583] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28160) returned 1
	[0171.583] CloseHandle (hObject=0x214) returned 1
	[0171.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\weblink.hrv")) returned 0x20
	[0171.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\weblink.hrv")) returned 0x20
	[0171.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\weblink.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Weblink.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hr_hr\\weblink.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.583] SetEvent (hEvent=0xfc) returned 1
	[0171.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\accessibility.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.584] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45056) returned 1
	[0171.584] CloseHandle (hObject=0x214) returned 1
	[0171.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\accessibility.hun")) returned 0x20
	[0171.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\accessibility.hun")) returned 0x20
	[0171.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\accessibility.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\accessibility.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\accessibility.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\acroform.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.586] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=427520) returned 1
	[0171.586] CloseHandle (hObject=0x214) returned 1
	[0171.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\acroform.hun")) returned 0x20
	[0171.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\acroform.hun")) returned 0x20
	[0171.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\acroform.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Acroform.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\acroform.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.586] SetEvent (hEvent=0xfc) returned 1
	[0171.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\adobecollabsync.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.587] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0171.587] CloseHandle (hObject=0x214) returned 1
	[0171.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\adobecollabsync.hun")) returned 0x20
	[0171.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\adobecollabsync.hun")) returned 0x20
	[0171.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\adobecollabsync.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\AdobeCollabSync.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\adobecollabsync.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\annots.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.588] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=513536) returned 1
	[0171.588] CloseHandle (hObject=0x214) returned 1
	[0171.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\annots.hun")) returned 0x20
	[0171.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\annots.hun")) returned 0x20
	[0171.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\annots.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Annots.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\annots.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\brdlang32.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.590] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13312) returned 1
	[0171.590] CloseHandle (hObject=0x20c) returned 1
	[0171.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\brdlang32.hun")) returned 0x20
	[0171.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\brdlang32.hun")) returned 0x20
	[0171.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\brdlang32.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\BRdlang32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\brdlang32.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.590] SetEvent (hEvent=0xfc) returned 1
	[0171.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\checkers.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.591] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=128512) returned 1
	[0171.591] CloseHandle (hObject=0x20c) returned 1
	[0171.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\checkers.hun")) returned 0x20
	[0171.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\checkers.hun")) returned 0x20
	[0171.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\checkers.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Checkers.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\checkers.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.592] SetEvent (hEvent=0xfc) returned 1
	[0171.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\digsig.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.592] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131072) returned 1
	[0171.592] CloseHandle (hObject=0x20c) returned 1
	[0171.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\digsig.hun")) returned 0x20
	[0171.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\digsig.hun")) returned 0x20
	[0171.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\digsig.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DigSig.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\digsig.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\dva.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.593] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18944) returned 1
	[0171.593] CloseHandle (hObject=0x20c) returned 1
	[0171.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\dva.hun")) returned 0x20
	[0171.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\dva.hun")) returned 0x20
	[0171.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\dva.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\DVA.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\dva.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ebook.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.594] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7168) returned 1
	[0171.594] CloseHandle (hObject=0x20c) returned 1
	[0171.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ebook.hun")) returned 0x20
	[0171.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ebook.hun")) returned 0x20
	[0171.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ebook.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\eBook.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ebook.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\escript.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0171.595] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41472) returned 1
	[0171.595] CloseHandle (hObject=0x20c) returned 1
	[0171.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\escript.hun")) returned 0x20
	[0171.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\escript.hun")) returned 0x20
	[0171.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\escript.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\EScript.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\escript.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ia32.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.604] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0171.604] CloseHandle (hObject=0x214) returned 1
	[0171.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ia32.hun")) returned 0x20
	[0171.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ia32.hun")) returned 0x20
	[0171.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ia32.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\IA32.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\ia32.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.604] SetEvent (hEvent=0xfc) returned 1
	[0171.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\makeaccessible.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.605] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=76800) returned 1
	[0171.605] CloseHandle (hObject=0x214) returned 1
	[0171.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\makeaccessible.hun")) returned 0x20
	[0171.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\makeaccessible.hun")) returned 0x20
	[0171.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\makeaccessible.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\makeaccessible.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\makeaccessible.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\multimedia.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.606] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=80896) returned 1
	[0171.606] CloseHandle (hObject=0x214) returned 1
	[0171.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\multimedia.hun")) returned 0x20
	[0171.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\multimedia.hun")) returned 0x20
	[0171.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\multimedia.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Multimedia.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\multimedia.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\pddom.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.700] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0171.701] CloseHandle (hObject=0x214) returned 1
	[0171.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\pddom.hun")) returned 0x20
	[0171.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\pddom.hun")) returned 0x20
	[0171.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\pddom.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\pddom.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\pddom.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.701] SetEvent (hEvent=0xfc) returned 1
	[0171.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\readoutloud.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.749] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0171.749] CloseHandle (hObject=0x214) returned 1
	[0171.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\readoutloud.hun")) returned 0x20
	[0171.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\readoutloud.hun")) returned 0x20
	[0171.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\readoutloud.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\ReadOutLoud.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\readoutloud.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.749] SetEvent (hEvent=0xfc) returned 1
	[0171.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\reflow.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.750] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0171.750] CloseHandle (hObject=0x214) returned 1
	[0171.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\reflow.hun")) returned 0x20
	[0171.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\reflow.hun")) returned 0x20
	[0171.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\reflow.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\reflow.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\reflow.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\saveasrtf.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.751] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18944) returned 1
	[0171.752] CloseHandle (hObject=0x214) returned 1
	[0171.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\saveasrtf.hun")) returned 0x20
	[0171.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\saveasrtf.hun")) returned 0x20
	[0171.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\saveasrtf.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SaveAsRTF.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\saveasrtf.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.752] SetEvent (hEvent=0xfc) returned 1
	[0171.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\search.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.753] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24576) returned 1
	[0171.753] CloseHandle (hObject=0x214) returned 1
	[0171.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\search.hun")) returned 0x20
	[0171.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\search.hun")) returned 0x20
	[0171.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\search.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Search.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\search.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\sendmail.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.754] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16384) returned 1
	[0171.754] CloseHandle (hObject=0x214) returned 1
	[0171.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\sendmail.hun")) returned 0x20
	[0171.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\sendmail.hun")) returned 0x20
	[0171.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\sendmail.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\SendMail.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\sendmail.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.755] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38296) returned 1
	[0171.755] CloseHandle (hObject=0x214) returned 1
	[0171.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\dexshare.asfx")) returned 0x20
	[0171.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\dexshare.asfx")) returned 0x20
	[0171.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.756] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=232) returned 1
	[0171.756] CloseHandle (hObject=0x214) returned 1
	[0171.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\services.asfx")) returned 0x20
	[0171.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\services.asfx")) returned 0x20
	[0171.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\spelling.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0171.888] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0171.888] CloseHandle (hObject=0x214) returned 1
	[0171.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\spelling.hun")) returned 0x20
	[0171.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\spelling.hun")) returned 0x20
	[0171.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\spelling.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Spelling.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\hu_hu\\spelling.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\updater.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.896] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0171.896] CloseHandle (hObject=0x13c) returned 1
	[0171.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\updater.ita")) returned 0x20
	[0171.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\updater.ita")) returned 0x20
	[0171.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\updater.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\updater.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\updater.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\weblink.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.897] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28160) returned 1
	[0171.897] CloseHandle (hObject=0x13c) returned 1
	[0171.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\weblink.ita")) returned 0x20
	[0171.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\weblink.ita")) returned 0x20
	[0171.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\weblink.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Weblink.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\it_it\\weblink.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\accessibility.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.901] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31744) returned 1
	[0171.901] CloseHandle (hObject=0x13c) returned 1
	[0171.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\accessibility.jpn")) returned 0x20
	[0171.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\accessibility.jpn")) returned 0x20
	[0171.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\accessibility.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\accessibility.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\accessibility.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\acroform.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0171.904] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=297984) returned 1
	[0171.904] CloseHandle (hObject=0x200) returned 1
	[0171.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\acroform.jpn")) returned 0x20
	[0171.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\acroform.jpn")) returned 0x20
	[0171.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\acroform.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Acroform.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\acroform.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\adobecollabsync.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0171.905] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0171.905] CloseHandle (hObject=0x200) returned 1
	[0171.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\adobecollabsync.jpn")) returned 0x20
	[0171.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\adobecollabsync.jpn")) returned 0x20
	[0171.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\adobecollabsync.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\AdobeCollabSync.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\adobecollabsync.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\annots.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0171.906] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=355328) returned 1
	[0171.906] CloseHandle (hObject=0x200) returned 1
	[0171.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\annots.jpn")) returned 0x20
	[0171.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\annots.jpn")) returned 0x20
	[0171.906] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\annots.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Annots.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\annots.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\brdlang32.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0171.907] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9216) returned 1
	[0171.907] CloseHandle (hObject=0x200) returned 1
	[0171.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\brdlang32.jpn")) returned 0x20
	[0171.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\brdlang32.jpn")) returned 0x20
	[0171.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\brdlang32.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\BRdlang32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\brdlang32.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\checkers.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0171.908] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89600) returned 1
	[0171.908] CloseHandle (hObject=0x200) returned 1
	[0171.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\checkers.jpn")) returned 0x20
	[0171.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\checkers.jpn")) returned 0x20
	[0171.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\checkers.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Checkers.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\checkers.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\digsig.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0171.909] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85504) returned 1
	[0171.909] CloseHandle (hObject=0x200) returned 1
	[0171.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\digsig.jpn")) returned 0x20
	[0171.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\digsig.jpn")) returned 0x20
	[0171.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\digsig.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DigSig.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\digsig.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\dva.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.913] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13824) returned 1
	[0171.913] CloseHandle (hObject=0x13c) returned 1
	[0171.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\dva.jpn")) returned 0x20
	[0171.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\dva.jpn")) returned 0x20
	[0171.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\dva.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\DVA.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\dva.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ebook.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.914] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6144) returned 1
	[0171.914] CloseHandle (hObject=0x13c) returned 1
	[0171.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ebook.jpn")) returned 0x20
	[0171.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ebook.jpn")) returned 0x20
	[0171.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ebook.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\eBook.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ebook.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\escript.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.915] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32768) returned 1
	[0171.915] CloseHandle (hObject=0x13c) returned 1
	[0171.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\escript.jpn")) returned 0x20
	[0171.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\escript.jpn")) returned 0x20
	[0171.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\escript.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\EScript.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\escript.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ia32.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.916] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3072) returned 1
	[0171.916] CloseHandle (hObject=0x13c) returned 1
	[0171.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ia32.jpn")) returned 0x20
	[0171.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ia32.jpn")) returned 0x20
	[0171.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ia32.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\IA32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ia32.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\makeaccessible.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.917] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46592) returned 1
	[0171.917] CloseHandle (hObject=0x13c) returned 1
	[0171.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\makeaccessible.jpn")) returned 0x20
	[0171.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\makeaccessible.jpn")) returned 0x20
	[0171.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\makeaccessible.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\makeaccessible.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\makeaccessible.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\multimedia.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.918] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61952) returned 1
	[0171.918] CloseHandle (hObject=0x13c) returned 1
	[0171.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\multimedia.jpn")) returned 0x20
	[0171.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\multimedia.jpn")) returned 0x20
	[0171.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\multimedia.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Multimedia.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\multimedia.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\pddom.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.919] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8704) returned 1
	[0171.919] CloseHandle (hObject=0x13c) returned 1
	[0171.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\pddom.jpn")) returned 0x20
	[0171.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\pddom.jpn")) returned 0x20
	[0171.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\pddom.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\pddom.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\pddom.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ppklite.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.920] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=368640) returned 1
	[0171.920] CloseHandle (hObject=0x13c) returned 1
	[0171.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ppklite.jpn")) returned 0x20
	[0171.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ppklite.jpn")) returned 0x20
	[0171.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ppklite.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\PPKLite.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\ppklite.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\rdlang32.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.921] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1019392) returned 1
	[0171.921] CloseHandle (hObject=0x13c) returned 1
	[0171.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\rdlang32.jpn")) returned 0x20
	[0171.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\rdlang32.jpn")) returned 0x20
	[0171.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\rdlang32.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\RdLang32.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\rdlang32.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\readoutloud.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.922] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9216) returned 1
	[0171.922] CloseHandle (hObject=0x13c) returned 1
	[0171.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\readoutloud.jpn")) returned 0x20
	[0171.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\readoutloud.jpn")) returned 0x20
	[0171.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\readoutloud.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\ReadOutLoud.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\readoutloud.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\reflow.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0171.923] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0171.923] CloseHandle (hObject=0x13c) returned 1
	[0171.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\reflow.jpn")) returned 0x20
	[0171.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\reflow.jpn")) returned 0x20
	[0171.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\reflow.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0171.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\reflow.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\reflow.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0171.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\saveasrtf.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.068] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14336) returned 1
	[0172.068] CloseHandle (hObject=0x13c) returned 1
	[0172.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\saveasrtf.jpn")) returned 0x20
	[0172.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\saveasrtf.jpn")) returned 0x20
	[0172.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\saveasrtf.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\SaveAsRTF.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\saveasrtf.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\weblink.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.069] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22016) returned 1
	[0172.069] CloseHandle (hObject=0x13c) returned 1
	[0172.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\weblink.jpn")) returned 0x20
	[0172.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\weblink.jpn")) returned 0x20
	[0172.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\weblink.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Weblink.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ja_jp\\weblink.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\accessibility.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.071] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32256) returned 1
	[0172.071] CloseHandle (hObject=0x13c) returned 1
	[0172.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\accessibility.kor")) returned 0x20
	[0172.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\accessibility.kor")) returned 0x20
	[0172.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\accessibility.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\accessibility.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\accessibility.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\acroform.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.072] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=297984) returned 1
	[0172.072] CloseHandle (hObject=0x13c) returned 1
	[0172.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\acroform.kor")) returned 0x20
	[0172.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\acroform.kor")) returned 0x20
	[0172.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\acroform.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Acroform.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\acroform.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\adobecollabsync.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.073] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0172.073] CloseHandle (hObject=0x13c) returned 1
	[0172.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\adobecollabsync.kor")) returned 0x20
	[0172.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\adobecollabsync.kor")) returned 0x20
	[0172.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\adobecollabsync.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\AdobeCollabSync.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\adobecollabsync.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\annots.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.074] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=355328) returned 1
	[0172.074] CloseHandle (hObject=0x13c) returned 1
	[0172.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\annots.kor")) returned 0x20
	[0172.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\annots.kor")) returned 0x20
	[0172.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\annots.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Annots.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\annots.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\brdlang32.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.078] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9216) returned 1
	[0172.078] CloseHandle (hObject=0x13c) returned 1
	[0172.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\brdlang32.kor")) returned 0x20
	[0172.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\brdlang32.kor")) returned 0x20
	[0172.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\brdlang32.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\BRdlang32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\brdlang32.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\checkers.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.080] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=88576) returned 1
	[0172.080] CloseHandle (hObject=0x13c) returned 1
	[0172.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\checkers.kor")) returned 0x20
	[0172.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\checkers.kor")) returned 0x20
	[0172.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\checkers.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Checkers.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\checkers.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\digsig.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.089] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=87040) returned 1
	[0172.089] CloseHandle (hObject=0x218) returned 1
	[0172.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\digsig.kor")) returned 0x20
	[0172.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\digsig.kor")) returned 0x20
	[0172.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\digsig.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DigSig.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\digsig.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.089] SetEvent (hEvent=0xfc) returned 1
	[0172.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\dva.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.090] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13824) returned 1
	[0172.090] CloseHandle (hObject=0x218) returned 1
	[0172.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\dva.kor")) returned 0x20
	[0172.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\dva.kor")) returned 0x20
	[0172.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\dva.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\DVA.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\dva.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ebook.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.096] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6144) returned 1
	[0172.096] CloseHandle (hObject=0x218) returned 1
	[0172.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ebook.kor")) returned 0x20
	[0172.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ebook.kor")) returned 0x20
	[0172.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ebook.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\eBook.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ebook.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\escript.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.098] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32256) returned 1
	[0172.098] CloseHandle (hObject=0x218) returned 1
	[0172.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\escript.kor")) returned 0x20
	[0172.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\escript.kor")) returned 0x20
	[0172.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\escript.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\EScript.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\escript.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.099] SetEvent (hEvent=0xfc) returned 1
	[0172.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ia32.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.099] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3072) returned 1
	[0172.099] CloseHandle (hObject=0x218) returned 1
	[0172.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ia32.kor")) returned 0x20
	[0172.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ia32.kor")) returned 0x20
	[0172.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ia32.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\IA32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ia32.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\makeaccessible.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.100] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=48128) returned 1
	[0172.100] CloseHandle (hObject=0x218) returned 1
	[0172.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\makeaccessible.kor")) returned 0x20
	[0172.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\makeaccessible.kor")) returned 0x20
	[0172.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\makeaccessible.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\makeaccessible.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\makeaccessible.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\multimedia.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.101] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61440) returned 1
	[0172.101] CloseHandle (hObject=0x218) returned 1
	[0172.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\multimedia.kor")) returned 0x20
	[0172.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\multimedia.kor")) returned 0x20
	[0172.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\multimedia.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Multimedia.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\multimedia.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\pddom.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.102] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9216) returned 1
	[0172.102] CloseHandle (hObject=0x218) returned 1
	[0172.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\pddom.kor")) returned 0x20
	[0172.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\pddom.kor")) returned 0x20
	[0172.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\pddom.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\pddom.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\pddom.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ppklite.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.103] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=366080) returned 1
	[0172.103] CloseHandle (hObject=0x218) returned 1
	[0172.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ppklite.kor")) returned 0x20
	[0172.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ppklite.kor")) returned 0x20
	[0172.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ppklite.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\PPKLITE.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\ppklite.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\rdlang32.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.106] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1022976) returned 1
	[0172.106] CloseHandle (hObject=0x218) returned 1
	[0172.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\rdlang32.kor")) returned 0x20
	[0172.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\rdlang32.kor")) returned 0x20
	[0172.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\rdlang32.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\RdLang32.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\rdlang32.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.107] SetEvent (hEvent=0xfc) returned 1
	[0172.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\readoutloud.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.108] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9216) returned 1
	[0172.108] CloseHandle (hObject=0x218) returned 1
	[0172.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\readoutloud.kor")) returned 0x20
	[0172.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\readoutloud.kor")) returned 0x20
	[0172.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\readoutloud.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\ReadOutLoud.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\readoutloud.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.108] SetEvent (hEvent=0xfc) returned 1
	[0172.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\reflow.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.109] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0172.109] CloseHandle (hObject=0x218) returned 1
	[0172.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\reflow.kor")) returned 0x20
	[0172.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\reflow.kor")) returned 0x20
	[0172.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\reflow.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\reflow.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\reflow.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\saveasrtf.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.110] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14336) returned 1
	[0172.110] CloseHandle (hObject=0x218) returned 1
	[0172.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\saveasrtf.kor")) returned 0x20
	[0172.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\saveasrtf.kor")) returned 0x20
	[0172.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\saveasrtf.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SaveAsRTF.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\saveasrtf.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\search.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.111] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16896) returned 1
	[0172.111] CloseHandle (hObject=0x218) returned 1
	[0172.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\search.kor")) returned 0x20
	[0172.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\search.kor")) returned 0x20
	[0172.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\search.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Search.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\search.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\sendmail.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.112] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12800) returned 1
	[0172.112] CloseHandle (hObject=0x218) returned 1
	[0172.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\sendmail.kor")) returned 0x20
	[0172.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\sendmail.kor")) returned 0x20
	[0172.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\sendmail.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.112] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\SendMail.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\sendmail.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.115] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38391) returned 1
	[0172.115] CloseHandle (hObject=0x218) returned 1
	[0172.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\dexshare.asfx")) returned 0x20
	[0172.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\dexshare.asfx")) returned 0x20
	[0172.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.115] SetEvent (hEvent=0xfc) returned 1
	[0172.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.116] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=228) returned 1
	[0172.116] CloseHandle (hObject=0x218) returned 1
	[0172.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\services.asfx")) returned 0x20
	[0172.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\services.asfx")) returned 0x20
	[0172.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\spelling.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.117] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8704) returned 1
	[0172.117] CloseHandle (hObject=0x218) returned 1
	[0172.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\spelling.kor")) returned 0x20
	[0172.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\spelling.kor")) returned 0x20
	[0172.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\spelling.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Spelling.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\spelling.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\updater.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.118] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0172.118] CloseHandle (hObject=0x218) returned 1
	[0172.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\updater.kor")) returned 0x20
	[0172.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\updater.kor")) returned 0x20
	[0172.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\updater.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\updater.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\updater.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\weblink.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.119] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22016) returned 1
	[0172.119] CloseHandle (hObject=0x218) returned 1
	[0172.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\weblink.kor")) returned 0x20
	[0172.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\weblink.kor")) returned 0x20
	[0172.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\weblink.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Weblink.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ko_kr\\weblink.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\accessibility.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.121] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41984) returned 1
	[0172.121] CloseHandle (hObject=0x218) returned 1
	[0172.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\accessibility.nor")) returned 0x20
	[0172.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\accessibility.nor")) returned 0x20
	[0172.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\accessibility.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\accessibility.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\accessibility.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\acroform.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x218
	[0172.292] GetFileSizeEx (in: hFile=0x218, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=400896) returned 1
	[0172.292] CloseHandle (hObject=0x218) returned 1
	[0172.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\acroform.nor")) returned 0x20
	[0172.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\acroform.nor")) returned 0x20
	[0172.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\acroform.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Acroform.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\nb_no\\acroform.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ebook.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.389] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7168) returned 1
	[0172.390] CloseHandle (hObject=0x200) returned 1
	[0172.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ebook.pol")) returned 0x20
	[0172.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ebook.pol")) returned 0x20
	[0172.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ebook.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\eBook.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ebook.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\escript.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.390] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40960) returned 1
	[0172.391] CloseHandle (hObject=0x200) returned 1
	[0172.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\escript.pol")) returned 0x20
	[0172.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\escript.pol")) returned 0x20
	[0172.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\escript.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\EScript.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\escript.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ia32.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.391] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0172.392] CloseHandle (hObject=0x200) returned 1
	[0172.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ia32.pol")) returned 0x20
	[0172.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ia32.pol")) returned 0x20
	[0172.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ia32.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\IA32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ia32.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\makeaccessible.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.393] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=74752) returned 1
	[0172.393] CloseHandle (hObject=0x200) returned 1
	[0172.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\makeaccessible.pol")) returned 0x20
	[0172.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\makeaccessible.pol")) returned 0x20
	[0172.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\makeaccessible.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\makeaccessible.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\makeaccessible.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\multimedia.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.394] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79360) returned 1
	[0172.394] CloseHandle (hObject=0x200) returned 1
	[0172.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\multimedia.pol")) returned 0x20
	[0172.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\multimedia.pol")) returned 0x20
	[0172.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\multimedia.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Multimedia.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\multimedia.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\pddom.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.395] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0172.395] CloseHandle (hObject=0x200) returned 1
	[0172.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\pddom.pol")) returned 0x20
	[0172.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\pddom.pol")) returned 0x20
	[0172.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\pddom.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\pddom.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\pddom.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ppklite.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.396] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=518144) returned 1
	[0172.396] CloseHandle (hObject=0x200) returned 1
	[0172.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ppklite.pol")) returned 0x20
	[0172.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ppklite.pol")) returned 0x20
	[0172.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ppklite.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\PPKLite.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\ppklite.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\rdlang32.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.397] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1365504) returned 1
	[0172.397] CloseHandle (hObject=0x200) returned 1
	[0172.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\rdlang32.pol")) returned 0x20
	[0172.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\rdlang32.pol")) returned 0x20
	[0172.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\rdlang32.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\RdLang32.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\rdlang32.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\readoutloud.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.398] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0172.398] CloseHandle (hObject=0x200) returned 1
	[0172.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\readoutloud.pol")) returned 0x20
	[0172.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\readoutloud.pol")) returned 0x20
	[0172.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\readoutloud.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\ReadOutLoud.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\readoutloud.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\reflow.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.399] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0172.399] CloseHandle (hObject=0x200) returned 1
	[0172.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\reflow.pol")) returned 0x20
	[0172.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\reflow.pol")) returned 0x20
	[0172.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\reflow.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\reflow.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\reflow.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\saveasrtf.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.400] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18432) returned 1
	[0172.400] CloseHandle (hObject=0x200) returned 1
	[0172.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\saveasrtf.pol")) returned 0x20
	[0172.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\saveasrtf.pol")) returned 0x20
	[0172.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\saveasrtf.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SaveAsRTF.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\saveasrtf.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\search.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.401] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24064) returned 1
	[0172.401] CloseHandle (hObject=0x200) returned 1
	[0172.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\search.pol")) returned 0x20
	[0172.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\search.pol")) returned 0x20
	[0172.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\search.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Search.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\search.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\sendmail.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.402] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15872) returned 1
	[0172.402] CloseHandle (hObject=0x200) returned 1
	[0172.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\sendmail.pol")) returned 0x20
	[0172.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\sendmail.pol")) returned 0x20
	[0172.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\sendmail.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\SendMail.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\sendmail.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.403] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38087) returned 1
	[0172.403] CloseHandle (hObject=0x200) returned 1
	[0172.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\dexshare.asfx")) returned 0x20
	[0172.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\dexshare.asfx")) returned 0x20
	[0172.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.404] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=233) returned 1
	[0172.404] CloseHandle (hObject=0x200) returned 1
	[0172.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\services.asfx")) returned 0x20
	[0172.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\services.asfx")) returned 0x20
	[0172.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\spelling.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.405] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0172.405] CloseHandle (hObject=0x200) returned 1
	[0172.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\spelling.pol")) returned 0x20
	[0172.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\spelling.pol")) returned 0x20
	[0172.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\spelling.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Spelling.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\spelling.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\updater.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.407] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0172.407] CloseHandle (hObject=0x200) returned 1
	[0172.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\updater.pol")) returned 0x20
	[0172.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\updater.pol")) returned 0x20
	[0172.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\updater.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\updater.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\updater.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\weblink.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.408] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29184) returned 1
	[0172.408] CloseHandle (hObject=0x200) returned 1
	[0172.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\weblink.pol")) returned 0x20
	[0172.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\weblink.pol")) returned 0x20
	[0172.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\weblink.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\WebLink.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pl_pl\\weblink.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\accessibility.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.414] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=44032) returned 1
	[0172.414] CloseHandle (hObject=0x200) returned 1
	[0172.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\accessibility.ptb")) returned 0x20
	[0172.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\accessibility.ptb")) returned 0x20
	[0172.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\accessibility.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\accessibility.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\accessibility.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\acroform.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.415] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=431104) returned 1
	[0172.415] CloseHandle (hObject=0x200) returned 1
	[0172.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\acroform.ptb")) returned 0x20
	[0172.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\acroform.ptb")) returned 0x20
	[0172.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\acroform.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Acroform.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\acroform.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\adobecollabsync.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.416] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0172.416] CloseHandle (hObject=0x200) returned 1
	[0172.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\adobecollabsync.ptb")) returned 0x20
	[0172.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\adobecollabsync.ptb")) returned 0x20
	[0172.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\adobecollabsync.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\AdobeCollabSync.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\adobecollabsync.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\annots.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.417] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=499200) returned 1
	[0172.417] CloseHandle (hObject=0x200) returned 1
	[0172.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\annots.ptb")) returned 0x20
	[0172.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\annots.ptb")) returned 0x20
	[0172.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\annots.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Annots.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\annots.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\brdlang32.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.418] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13824) returned 1
	[0172.418] CloseHandle (hObject=0x200) returned 1
	[0172.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\brdlang32.ptb")) returned 0x20
	[0172.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\brdlang32.ptb")) returned 0x20
	[0172.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\brdlang32.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\BRdlang32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\brdlang32.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\checkers.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.419] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=126976) returned 1
	[0172.419] CloseHandle (hObject=0x200) returned 1
	[0172.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\checkers.ptb")) returned 0x20
	[0172.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\checkers.ptb")) returned 0x20
	[0172.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\checkers.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Checkers.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\checkers.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\digsig.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.420] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131072) returned 1
	[0172.421] CloseHandle (hObject=0x200) returned 1
	[0172.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\digsig.ptb")) returned 0x20
	[0172.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\digsig.ptb")) returned 0x20
	[0172.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\digsig.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DigSig.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\digsig.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\dva.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.422] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18944) returned 1
	[0172.422] CloseHandle (hObject=0x200) returned 1
	[0172.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\dva.ptb")) returned 0x20
	[0172.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\dva.ptb")) returned 0x20
	[0172.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\dva.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\DVA.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\dva.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ebook.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.423] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0172.423] CloseHandle (hObject=0x200) returned 1
	[0172.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ebook.ptb")) returned 0x20
	[0172.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ebook.ptb")) returned 0x20
	[0172.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ebook.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\eBook.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ebook.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\escript.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.423] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40960) returned 1
	[0172.424] CloseHandle (hObject=0x200) returned 1
	[0172.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\escript.ptb")) returned 0x20
	[0172.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\escript.ptb")) returned 0x20
	[0172.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\escript.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\EScript.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\escript.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ia32.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.425] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0172.425] CloseHandle (hObject=0x200) returned 1
	[0172.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ia32.ptb")) returned 0x20
	[0172.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ia32.ptb")) returned 0x20
	[0172.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ia32.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\IA32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ia32.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\makeaccessible.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.426] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=78336) returned 1
	[0172.426] CloseHandle (hObject=0x200) returned 1
	[0172.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\makeaccessible.ptb")) returned 0x20
	[0172.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\makeaccessible.ptb")) returned 0x20
	[0172.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\makeaccessible.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\makeaccessible.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\makeaccessible.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\multimedia.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.427] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=81408) returned 1
	[0172.427] CloseHandle (hObject=0x200) returned 1
	[0172.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\multimedia.ptb")) returned 0x20
	[0172.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\multimedia.ptb")) returned 0x20
	[0172.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\multimedia.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Multimedia.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\multimedia.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\pddom.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.428] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11776) returned 1
	[0172.428] CloseHandle (hObject=0x200) returned 1
	[0172.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\pddom.ptb")) returned 0x20
	[0172.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\pddom.ptb")) returned 0x20
	[0172.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\pddom.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\pddom.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\pddom.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ppklite.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.429] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=532480) returned 1
	[0172.429] CloseHandle (hObject=0x200) returned 1
	[0172.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ppklite.ptb")) returned 0x20
	[0172.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ppklite.ptb")) returned 0x20
	[0172.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ppklite.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\PPKLITE.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\ppklite.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\rdlang32.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.430] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1377792) returned 1
	[0172.430] CloseHandle (hObject=0x200) returned 1
	[0172.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\rdlang32.ptb")) returned 0x20
	[0172.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\rdlang32.ptb")) returned 0x20
	[0172.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\rdlang32.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\RdLang32.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\rdlang32.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\readoutloud.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.431] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0172.431] CloseHandle (hObject=0x200) returned 1
	[0172.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\readoutloud.ptb")) returned 0x20
	[0172.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\readoutloud.ptb")) returned 0x20
	[0172.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\readoutloud.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\ReadOutLoud.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\readoutloud.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\reflow.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.432] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0172.432] CloseHandle (hObject=0x200) returned 1
	[0172.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\reflow.ptb")) returned 0x20
	[0172.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\reflow.ptb")) returned 0x20
	[0172.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\reflow.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\reflow.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\reflow.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\saveasrtf.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.433] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18944) returned 1
	[0172.433] CloseHandle (hObject=0x200) returned 1
	[0172.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\saveasrtf.ptb")) returned 0x20
	[0172.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\saveasrtf.ptb")) returned 0x20
	[0172.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\saveasrtf.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\SaveAsRTF.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\saveasrtf.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\search.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0172.574] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24576) returned 1
	[0172.574] CloseHandle (hObject=0x200) returned 1
	[0172.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\search.ptb")) returned 0x20
	[0172.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\search.ptb")) returned 0x20
	[0172.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\search.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Search.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\search.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.575] SetEvent (hEvent=0xfc) returned 1
	[0172.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0172.706] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=234) returned 1
	[0172.706] CloseHandle (hObject=0x214) returned 1
	[0172.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\services.asfx")) returned 0x20
	[0172.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\services.asfx")) returned 0x20
	[0172.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\pt_br\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\acroform.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.795] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=417280) returned 1
	[0172.795] CloseHandle (hObject=0x13c) returned 1
	[0172.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\acroform.rus")) returned 0x20
	[0172.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\acroform.rus")) returned 0x20
	[0172.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\acroform.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Acroform.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\acroform.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.795] SetEvent (hEvent=0xfc) returned 1
	[0172.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\annots.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.796] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=509440) returned 1
	[0172.796] CloseHandle (hObject=0x13c) returned 1
	[0172.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\annots.rus")) returned 0x20
	[0172.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\annots.rus")) returned 0x20
	[0172.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\annots.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Annots.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\annots.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\brdlang32.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.797] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13312) returned 1
	[0172.797] CloseHandle (hObject=0x13c) returned 1
	[0172.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\brdlang32.rus")) returned 0x20
	[0172.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\brdlang32.rus")) returned 0x20
	[0172.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\brdlang32.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\BRdlang32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\brdlang32.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\checkers.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.798] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=126976) returned 1
	[0172.798] CloseHandle (hObject=0x13c) returned 1
	[0172.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\checkers.rus")) returned 0x20
	[0172.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\checkers.rus")) returned 0x20
	[0172.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\checkers.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Checkers.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\checkers.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\digsig.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.799] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=128512) returned 1
	[0172.799] CloseHandle (hObject=0x13c) returned 1
	[0172.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\digsig.rus")) returned 0x20
	[0172.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\digsig.rus")) returned 0x20
	[0172.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\digsig.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DigSig.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\digsig.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\dva.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.800] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18944) returned 1
	[0172.800] CloseHandle (hObject=0x13c) returned 1
	[0172.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\dva.rus")) returned 0x20
	[0172.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\dva.rus")) returned 0x20
	[0172.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\dva.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\DVA.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\dva.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.801] SetEvent (hEvent=0xfc) returned 1
	[0172.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ebook.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.801] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0172.801] CloseHandle (hObject=0x13c) returned 1
	[0172.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ebook.rus")) returned 0x20
	[0172.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ebook.rus")) returned 0x20
	[0172.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ebook.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\eBook.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ebook.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\escript.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.802] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40960) returned 1
	[0172.802] CloseHandle (hObject=0x13c) returned 1
	[0172.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\escript.rus")) returned 0x20
	[0172.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\escript.rus")) returned 0x20
	[0172.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\escript.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\EScript.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\escript.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ia32.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.803] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0172.803] CloseHandle (hObject=0x13c) returned 1
	[0172.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ia32.rus")) returned 0x20
	[0172.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ia32.rus")) returned 0x20
	[0172.803] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ia32.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.803] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\IA32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ia32.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.804] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\makeaccessible.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.804] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75776) returned 1
	[0172.804] CloseHandle (hObject=0x13c) returned 1
	[0172.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\makeaccessible.rus")) returned 0x20
	[0172.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\makeaccessible.rus")) returned 0x20
	[0172.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\makeaccessible.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\MakeAccessible.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\makeaccessible.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\multimedia.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.805] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=80896) returned 1
	[0172.805] CloseHandle (hObject=0x13c) returned 1
	[0172.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\multimedia.rus")) returned 0x20
	[0172.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\multimedia.rus")) returned 0x20
	[0172.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\multimedia.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Multimedia.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\multimedia.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.806] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\pddom.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.807] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11776) returned 1
	[0172.807] CloseHandle (hObject=0x13c) returned 1
	[0172.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\pddom.rus")) returned 0x20
	[0172.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\pddom.rus")) returned 0x20
	[0172.807] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\pddom.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.807] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PDDom.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\pddom.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ppklite.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.808] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=525312) returned 1
	[0172.808] CloseHandle (hObject=0x13c) returned 1
	[0172.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ppklite.rus")) returned 0x20
	[0172.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ppklite.rus")) returned 0x20
	[0172.808] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ppklite.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\PPKLITE.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\ppklite.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\rdlang32.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.809] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1366016) returned 1
	[0172.809] CloseHandle (hObject=0x13c) returned 1
	[0172.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\rdlang32.rus")) returned 0x20
	[0172.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\rdlang32.rus")) returned 0x20
	[0172.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\rdlang32.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\RdLang32.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\rdlang32.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\readoutloud.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.811] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0172.811] CloseHandle (hObject=0x13c) returned 1
	[0172.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\readoutloud.rus")) returned 0x20
	[0172.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\readoutloud.rus")) returned 0x20
	[0172.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\readoutloud.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\ReadOutLoud.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\readoutloud.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\reflow.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.812] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0172.812] CloseHandle (hObject=0x13c) returned 1
	[0172.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\reflow.rus")) returned 0x20
	[0172.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\reflow.rus")) returned 0x20
	[0172.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\reflow.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Reflow.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\reflow.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\saveasrtf.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.813] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18944) returned 1
	[0172.813] CloseHandle (hObject=0x13c) returned 1
	[0172.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\saveasrtf.rus")) returned 0x20
	[0172.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\saveasrtf.rus")) returned 0x20
	[0172.813] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\saveasrtf.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SaveAsRTF.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\saveasrtf.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\search.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.814] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23552) returned 1
	[0172.814] CloseHandle (hObject=0x13c) returned 1
	[0172.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\search.rus")) returned 0x20
	[0172.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\search.rus")) returned 0x20
	[0172.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\search.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.814] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Search.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\search.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\sendmail.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.815] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15872) returned 1
	[0172.815] CloseHandle (hObject=0x13c) returned 1
	[0172.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\sendmail.rus")) returned 0x20
	[0172.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\sendmail.rus")) returned 0x20
	[0172.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\sendmail.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\SendMail.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\sendmail.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.816] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46778) returned 1
	[0172.816] CloseHandle (hObject=0x13c) returned 1
	[0172.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\dexshare.asfx")) returned 0x20
	[0172.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\dexshare.asfx")) returned 0x20
	[0172.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.817] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=245) returned 1
	[0172.817] CloseHandle (hObject=0x13c) returned 1
	[0172.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\services.asfx")) returned 0x20
	[0172.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\services.asfx")) returned 0x20
	[0172.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\spelling.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.820] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0172.820] CloseHandle (hObject=0x13c) returned 1
	[0172.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\spelling.rus")) returned 0x20
	[0172.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\spelling.rus")) returned 0x20
	[0172.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\spelling.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.820] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Spelling.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\spelling.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\updater.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.821] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0172.821] CloseHandle (hObject=0x13c) returned 1
	[0172.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\updater.rus")) returned 0x20
	[0172.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\updater.rus")) returned 0x20
	[0172.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\updater.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Updater.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\updater.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\weblink.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.822] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27648) returned 1
	[0172.822] CloseHandle (hObject=0x13c) returned 1
	[0172.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\weblink.rus")) returned 0x20
	[0172.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\weblink.rus")) returned 0x20
	[0172.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\weblink.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Weblink.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\ru_ru\\weblink.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\accessibility.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.823] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43520) returned 1
	[0172.823] CloseHandle (hObject=0x13c) returned 1
	[0172.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\accessibility.sky")) returned 0x20
	[0172.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\accessibility.sky")) returned 0x20
	[0172.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\accessibility.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\accessibility.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\accessibility.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.824] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\acroform.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.825] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=415744) returned 1
	[0172.826] CloseHandle (hObject=0x13c) returned 1
	[0172.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\acroform.sky")) returned 0x20
	[0172.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\acroform.sky")) returned 0x20
	[0172.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\acroform.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Acroform.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\acroform.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.826] SetEvent (hEvent=0xfc) returned 1
	[0172.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\adobecollabsync.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.826] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7168) returned 1
	[0172.827] CloseHandle (hObject=0x13c) returned 1
	[0172.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\adobecollabsync.sky")) returned 0x20
	[0172.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\adobecollabsync.sky")) returned 0x20
	[0172.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\adobecollabsync.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\AdobeCollabSync.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\adobecollabsync.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\annots.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.827] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=497664) returned 1
	[0172.827] CloseHandle (hObject=0x13c) returned 1
	[0172.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\annots.sky")) returned 0x20
	[0172.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\annots.sky")) returned 0x20
	[0172.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\annots.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Annots.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\annots.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\brdlang32.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0172.828] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13312) returned 1
	[0172.828] CloseHandle (hObject=0x13c) returned 1
	[0172.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\brdlang32.sky")) returned 0x20
	[0172.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\brdlang32.sky")) returned 0x20
	[0172.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\brdlang32.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0172.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\BRdlang32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\brdlang32.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0172.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\checkers.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.011] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=122880) returned 1
	[0173.011] CloseHandle (hObject=0x200) returned 1
	[0173.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\checkers.sky")) returned 0x20
	[0173.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\checkers.sky")) returned 0x20
	[0173.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\checkers.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Checkers.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\checkers.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.012] SetEvent (hEvent=0xfc) returned 1
	[0173.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\dva.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.012] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17920) returned 1
	[0173.012] CloseHandle (hObject=0x200) returned 1
	[0173.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\dva.sky")) returned 0x20
	[0173.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\dva.sky")) returned 0x20
	[0173.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\dva.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\DVA.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\dva.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ebook.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.013] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0173.013] CloseHandle (hObject=0x200) returned 1
	[0173.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ebook.sky")) returned 0x20
	[0173.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ebook.sky")) returned 0x20
	[0173.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ebook.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\eBook.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ebook.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\escript.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.015] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40448) returned 1
	[0173.015] CloseHandle (hObject=0x200) returned 1
	[0173.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\escript.sky")) returned 0x20
	[0173.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\escript.sky")) returned 0x20
	[0173.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\escript.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\EScript.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\escript.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.015] SetEvent (hEvent=0xfc) returned 1
	[0173.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ia32.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.016] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0173.016] CloseHandle (hObject=0x200) returned 1
	[0173.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ia32.sky")) returned 0x20
	[0173.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ia32.sky")) returned 0x20
	[0173.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ia32.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\IA32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ia32.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\makeaccessible.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.017] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=74240) returned 1
	[0173.017] CloseHandle (hObject=0x200) returned 1
	[0173.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\makeaccessible.sky")) returned 0x20
	[0173.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\makeaccessible.sky")) returned 0x20
	[0173.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\makeaccessible.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\makeaccessible.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\makeaccessible.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\multimedia.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.018] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=79360) returned 1
	[0173.018] CloseHandle (hObject=0x200) returned 1
	[0173.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\multimedia.sky")) returned 0x20
	[0173.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\multimedia.sky")) returned 0x20
	[0173.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\multimedia.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Multimedia.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\multimedia.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\pddom.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.019] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0173.019] CloseHandle (hObject=0x200) returned 1
	[0173.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\pddom.sky")) returned 0x20
	[0173.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\pddom.sky")) returned 0x20
	[0173.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\pddom.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\pddom.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\pddom.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ppklite.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.020] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=516096) returned 1
	[0173.020] CloseHandle (hObject=0x200) returned 1
	[0173.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ppklite.sky")) returned 0x20
	[0173.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ppklite.sky")) returned 0x20
	[0173.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ppklite.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\PPKLite.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\ppklite.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\rdlang32.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.021] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1344512) returned 1
	[0173.021] CloseHandle (hObject=0x200) returned 1
	[0173.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\rdlang32.sky")) returned 0x20
	[0173.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\rdlang32.sky")) returned 0x20
	[0173.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\rdlang32.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\RdLang32.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\rdlang32.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.022] SetEvent (hEvent=0xfc) returned 1
	[0173.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\readoutloud.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.022] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0173.022] CloseHandle (hObject=0x200) returned 1
	[0173.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\readoutloud.sky")) returned 0x20
	[0173.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\readoutloud.sky")) returned 0x20
	[0173.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\readoutloud.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\ReadOutLoud.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\readoutloud.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\reflow.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.023] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0173.023] CloseHandle (hObject=0x200) returned 1
	[0173.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\reflow.sky")) returned 0x20
	[0173.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\reflow.sky")) returned 0x20
	[0173.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\reflow.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\reflow.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\reflow.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\saveasrtf.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.029] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18432) returned 1
	[0173.029] CloseHandle (hObject=0x200) returned 1
	[0173.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\saveasrtf.sky")) returned 0x20
	[0173.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\saveasrtf.sky")) returned 0x20
	[0173.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\saveasrtf.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SaveAsRTF.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\saveasrtf.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.029] SetEvent (hEvent=0xfc) returned 1
	[0173.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\search.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.030] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23552) returned 1
	[0173.030] CloseHandle (hObject=0x200) returned 1
	[0173.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\search.sky")) returned 0x20
	[0173.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\search.sky")) returned 0x20
	[0173.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\search.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Search.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\search.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\sendmail.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.031] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15360) returned 1
	[0173.031] CloseHandle (hObject=0x200) returned 1
	[0173.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\sendmail.sky")) returned 0x20
	[0173.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\sendmail.sky")) returned 0x20
	[0173.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\sendmail.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\SendMail.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\sendmail.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.032] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38345) returned 1
	[0173.032] CloseHandle (hObject=0x200) returned 1
	[0173.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\dexshare.asfx")) returned 0x20
	[0173.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\dexshare.asfx")) returned 0x20
	[0173.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.033] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=231) returned 1
	[0173.033] CloseHandle (hObject=0x200) returned 1
	[0173.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\services.asfx")) returned 0x20
	[0173.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\services.asfx")) returned 0x20
	[0173.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\spelling.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.034] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0173.034] CloseHandle (hObject=0x200) returned 1
	[0173.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\spelling.sky")) returned 0x20
	[0173.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\spelling.sky")) returned 0x20
	[0173.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\spelling.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Spelling.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\spelling.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.035] SetEvent (hEvent=0xfc) returned 1
	[0173.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\updater.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.035] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0173.035] CloseHandle (hObject=0x200) returned 1
	[0173.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\updater.sky")) returned 0x20
	[0173.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\updater.sky")) returned 0x20
	[0173.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\updater.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\updater.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\updater.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\weblink.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.036] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28160) returned 1
	[0173.036] CloseHandle (hObject=0x200) returned 1
	[0173.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\weblink.sky")) returned 0x20
	[0173.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\weblink.sky")) returned 0x20
	[0173.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\weblink.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\WebLink.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sk_sk\\weblink.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\accessibility.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.038] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42496) returned 1
	[0173.038] CloseHandle (hObject=0x200) returned 1
	[0173.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\accessibility.slv")) returned 0x20
	[0173.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\accessibility.slv")) returned 0x20
	[0173.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\accessibility.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Accessibility.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\accessibility.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\acroform.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.041] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=407552) returned 1
	[0173.041] CloseHandle (hObject=0x200) returned 1
	[0173.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\acroform.slv")) returned 0x20
	[0173.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\acroform.slv")) returned 0x20
	[0173.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\acroform.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Acroform.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\acroform.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.041] SetEvent (hEvent=0xfc) returned 1
	[0173.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\adobecollabsync.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.042] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0173.042] CloseHandle (hObject=0x200) returned 1
	[0173.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\adobecollabsync.slv")) returned 0x20
	[0173.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\adobecollabsync.slv")) returned 0x20
	[0173.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\adobecollabsync.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\AdobeCollabSync.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\adobecollabsync.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\annots.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.043] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=481280) returned 1
	[0173.043] CloseHandle (hObject=0x200) returned 1
	[0173.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\annots.slv")) returned 0x20
	[0173.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\annots.slv")) returned 0x20
	[0173.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\annots.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Annots.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\annots.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\brdlang32.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.044] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13312) returned 1
	[0173.044] CloseHandle (hObject=0x200) returned 1
	[0173.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\brdlang32.slv")) returned 0x20
	[0173.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\brdlang32.slv")) returned 0x20
	[0173.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\brdlang32.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\BRdlang32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\brdlang32.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\checkers.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.045] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=120832) returned 1
	[0173.045] CloseHandle (hObject=0x200) returned 1
	[0173.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\checkers.slv")) returned 0x20
	[0173.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\checkers.slv")) returned 0x20
	[0173.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\checkers.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Checkers.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\checkers.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\digsig.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0173.046] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=122880) returned 1
	[0173.046] CloseHandle (hObject=0x200) returned 1
	[0173.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\digsig.slv")) returned 0x20
	[0173.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\digsig.slv")) returned 0x20
	[0173.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\digsig.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DigSig.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\digsig.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\dva.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.048] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17920) returned 1
	[0173.048] CloseHandle (hObject=0x214) returned 1
	[0173.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\dva.slv")) returned 0x20
	[0173.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\dva.slv")) returned 0x20
	[0173.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\dva.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\DVA.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\dva.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ebook.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.049] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0173.049] CloseHandle (hObject=0x214) returned 1
	[0173.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ebook.slv")) returned 0x20
	[0173.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ebook.slv")) returned 0x20
	[0173.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ebook.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\eBook.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ebook.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\escript.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.050] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40448) returned 1
	[0173.050] CloseHandle (hObject=0x214) returned 1
	[0173.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\escript.slv")) returned 0x20
	[0173.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\escript.slv")) returned 0x20
	[0173.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\escript.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\EScript.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\escript.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ia32.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.051] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0173.051] CloseHandle (hObject=0x214) returned 1
	[0173.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ia32.slv")) returned 0x20
	[0173.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ia32.slv")) returned 0x20
	[0173.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ia32.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\IA32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ia32.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\makeaccessible.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.052] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73216) returned 1
	[0173.052] CloseHandle (hObject=0x214) returned 1
	[0173.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\makeaccessible.slv")) returned 0x20
	[0173.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\makeaccessible.slv")) returned 0x20
	[0173.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\makeaccessible.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\MakeAccessible.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\makeaccessible.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\multimedia.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.053] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=78848) returned 1
	[0173.053] CloseHandle (hObject=0x214) returned 1
	[0173.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\multimedia.slv")) returned 0x20
	[0173.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\multimedia.slv")) returned 0x20
	[0173.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\multimedia.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Multimedia.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\multimedia.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\pddom.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.054] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0173.054] CloseHandle (hObject=0x214) returned 1
	[0173.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\pddom.slv")) returned 0x20
	[0173.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\pddom.slv")) returned 0x20
	[0173.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\pddom.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PDDom.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\pddom.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ppklite.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.055] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=505856) returned 1
	[0173.055] CloseHandle (hObject=0x214) returned 1
	[0173.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ppklite.slv")) returned 0x20
	[0173.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ppklite.slv")) returned 0x20
	[0173.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ppklite.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\PPKLITE.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\ppklite.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\rdlang32.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.055] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1335296) returned 1
	[0173.056] CloseHandle (hObject=0x214) returned 1
	[0173.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\rdlang32.slv")) returned 0x20
	[0173.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\rdlang32.slv")) returned 0x20
	[0173.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\rdlang32.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\RdLang32.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\rdlang32.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\readoutloud.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.056] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0173.056] CloseHandle (hObject=0x214) returned 1
	[0173.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\readoutloud.slv")) returned 0x20
	[0173.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\readoutloud.slv")) returned 0x20
	[0173.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\readoutloud.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\ReadOutLoud.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\readoutloud.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\reflow.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0173.057] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0173.057] CloseHandle (hObject=0x214) returned 1
	[0173.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\reflow.slv")) returned 0x20
	[0173.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\reflow.slv")) returned 0x20
	[0173.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\reflow.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Reflow.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\reflow.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.167] SetEvent (hEvent=0xfc) returned 1
	[0173.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c
	[0173.269] GetFileSizeEx (in: hFile=0x13c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=233) returned 1
	[0173.269] CloseHandle (hObject=0x13c) returned 1
	[0173.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\services.asfx")) returned 0x20
	[0173.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\services.asfx")) returned 0x20
	[0173.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\sl_si\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\adobecollabsync.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0173.374] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0173.375] CloseHandle (hObject=0x208) returned 1
	[0173.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\adobecollabsync.tur")) returned 0x20
	[0173.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\adobecollabsync.tur")) returned 0x20
	[0173.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\adobecollabsync.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\AdobeCollabSync.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\adobecollabsync.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.375] SetEvent (hEvent=0xfc) returned 1
	[0173.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\annots.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0173.376] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=479232) returned 1
	[0173.376] CloseHandle (hObject=0x208) returned 1
	[0173.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\annots.tur")) returned 0x20
	[0173.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\annots.tur")) returned 0x20
	[0173.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\annots.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Annots.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\annots.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\brdlang32.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0173.377] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13312) returned 1
	[0173.377] CloseHandle (hObject=0x208) returned 1
	[0173.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\brdlang32.tur")) returned 0x20
	[0173.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\brdlang32.tur")) returned 0x20
	[0173.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\brdlang32.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\BRdlang32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\brdlang32.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\checkers.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.379] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=120320) returned 1
	[0173.379] CloseHandle (hObject=0x168) returned 1
	[0173.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\checkers.tur")) returned 0x20
	[0173.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\checkers.tur")) returned 0x20
	[0173.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\checkers.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Checkers.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\checkers.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\digsig.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.380] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=119296) returned 1
	[0173.380] CloseHandle (hObject=0x168) returned 1
	[0173.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\digsig.tur")) returned 0x20
	[0173.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\digsig.tur")) returned 0x20
	[0173.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\digsig.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DigSig.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\digsig.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\dva.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.381] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17408) returned 1
	[0173.381] CloseHandle (hObject=0x168) returned 1
	[0173.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\dva.tur")) returned 0x20
	[0173.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\dva.tur")) returned 0x20
	[0173.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\dva.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\DVA.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\dva.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ebook.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.382] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0173.382] CloseHandle (hObject=0x168) returned 1
	[0173.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ebook.tur")) returned 0x20
	[0173.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ebook.tur")) returned 0x20
	[0173.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ebook.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\eBook.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ebook.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\escript.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.384] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40960) returned 1
	[0173.384] CloseHandle (hObject=0x168) returned 1
	[0173.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\escript.tur")) returned 0x20
	[0173.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\escript.tur")) returned 0x20
	[0173.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\escript.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\EScript.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\escript.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ia32.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.385] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0173.385] CloseHandle (hObject=0x168) returned 1
	[0173.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ia32.tur")) returned 0x20
	[0173.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ia32.tur")) returned 0x20
	[0173.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ia32.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\IA32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ia32.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\makeaccessible.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.388] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=72704) returned 1
	[0173.388] CloseHandle (hObject=0x168) returned 1
	[0173.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\makeaccessible.tur")) returned 0x20
	[0173.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\makeaccessible.tur")) returned 0x20
	[0173.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\makeaccessible.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\MakeAccessible.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\makeaccessible.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\multimedia.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.389] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77312) returned 1
	[0173.389] CloseHandle (hObject=0x168) returned 1
	[0173.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\multimedia.tur")) returned 0x20
	[0173.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\multimedia.tur")) returned 0x20
	[0173.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\multimedia.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Multimedia.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\multimedia.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\pddom.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.390] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0173.390] CloseHandle (hObject=0x168) returned 1
	[0173.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\pddom.tur")) returned 0x20
	[0173.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\pddom.tur")) returned 0x20
	[0173.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\pddom.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PDDom.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\pddom.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ppklite.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.391] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=500736) returned 1
	[0173.391] CloseHandle (hObject=0x168) returned 1
	[0173.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ppklite.tur")) returned 0x20
	[0173.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ppklite.tur")) returned 0x20
	[0173.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ppklite.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\PPKLITE.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\ppklite.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\rdlang32.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.392] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1310720) returned 1
	[0173.392] CloseHandle (hObject=0x168) returned 1
	[0173.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\rdlang32.tur")) returned 0x20
	[0173.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\rdlang32.tur")) returned 0x20
	[0173.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\rdlang32.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\RdLang32.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\rdlang32.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\readoutloud.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.393] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0173.393] CloseHandle (hObject=0x168) returned 1
	[0173.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\readoutloud.tur")) returned 0x20
	[0173.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\readoutloud.tur")) returned 0x20
	[0173.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\readoutloud.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\ReadOutLoud.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\readoutloud.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\reflow.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.394] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0173.394] CloseHandle (hObject=0x168) returned 1
	[0173.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\reflow.tur")) returned 0x20
	[0173.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\reflow.tur")) returned 0x20
	[0173.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\reflow.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Reflow.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\reflow.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\saveasrtf.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.395] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17920) returned 1
	[0173.395] CloseHandle (hObject=0x168) returned 1
	[0173.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\saveasrtf.tur")) returned 0x20
	[0173.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\saveasrtf.tur")) returned 0x20
	[0173.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\saveasrtf.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SaveAsRTF.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\saveasrtf.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\search.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.396] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22016) returned 1
	[0173.396] CloseHandle (hObject=0x168) returned 1
	[0173.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\search.tur")) returned 0x20
	[0173.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\search.tur")) returned 0x20
	[0173.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\search.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Search.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\search.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\sendmail.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.397] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15360) returned 1
	[0173.397] CloseHandle (hObject=0x168) returned 1
	[0173.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\sendmail.tur")) returned 0x20
	[0173.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\sendmail.tur")) returned 0x20
	[0173.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\sendmail.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\SendMail.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\sendmail.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.398] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37488) returned 1
	[0173.398] CloseHandle (hObject=0x168) returned 1
	[0173.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\dexshare.asfx")) returned 0x20
	[0173.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\dexshare.asfx")) returned 0x20
	[0173.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.399] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=229) returned 1
	[0173.399] CloseHandle (hObject=0x168) returned 1
	[0173.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\services.asfx")) returned 0x20
	[0173.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\services.asfx")) returned 0x20
	[0173.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\spelling.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.400] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0173.400] CloseHandle (hObject=0x168) returned 1
	[0173.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\spelling.tur")) returned 0x20
	[0173.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\spelling.tur")) returned 0x20
	[0173.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\spelling.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Spelling.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\spelling.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\updater.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.401] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10752) returned 1
	[0173.401] CloseHandle (hObject=0x168) returned 1
	[0173.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\updater.tur")) returned 0x20
	[0173.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\updater.tur")) returned 0x20
	[0173.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\updater.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Updater.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\updater.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\weblink.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.402] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27648) returned 1
	[0173.402] CloseHandle (hObject=0x168) returned 1
	[0173.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\weblink.tur")) returned 0x20
	[0173.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\weblink.tur")) returned 0x20
	[0173.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\weblink.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Weblink.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\tr_tr\\weblink.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\accessibility.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.404] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45056) returned 1
	[0173.404] CloseHandle (hObject=0x168) returned 1
	[0173.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\accessibility.ukr")) returned 0x20
	[0173.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\accessibility.ukr")) returned 0x20
	[0173.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\accessibility.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Accessibility.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\accessibility.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\acroform.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.406] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=415232) returned 1
	[0173.406] CloseHandle (hObject=0x168) returned 1
	[0173.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\acroform.ukr")) returned 0x20
	[0173.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\acroform.ukr")) returned 0x20
	[0173.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\acroform.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Acroform.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\acroform.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\adobecollabsync.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.407] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0173.407] CloseHandle (hObject=0x168) returned 1
	[0173.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\adobecollabsync.ukr")) returned 0x20
	[0173.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\adobecollabsync.ukr")) returned 0x20
	[0173.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\adobecollabsync.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\AdobeCollabSync.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\adobecollabsync.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\annots.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.408] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=502272) returned 1
	[0173.408] CloseHandle (hObject=0x168) returned 1
	[0173.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\annots.ukr")) returned 0x20
	[0173.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\annots.ukr")) returned 0x20
	[0173.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\annots.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Annots.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\annots.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\brdlang32.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.409] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12800) returned 1
	[0173.409] CloseHandle (hObject=0x168) returned 1
	[0173.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\brdlang32.ukr")) returned 0x20
	[0173.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\brdlang32.ukr")) returned 0x20
	[0173.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\brdlang32.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\BRdlang32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\brdlang32.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\checkers.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.410] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=124928) returned 1
	[0173.410] CloseHandle (hObject=0x168) returned 1
	[0173.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\checkers.ukr")) returned 0x20
	[0173.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\checkers.ukr")) returned 0x20
	[0173.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\checkers.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Checkers.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\checkers.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\digsig.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.411] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=124928) returned 1
	[0173.411] CloseHandle (hObject=0x168) returned 1
	[0173.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\digsig.ukr")) returned 0x20
	[0173.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\digsig.ukr")) returned 0x20
	[0173.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\digsig.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DigSig.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\digsig.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\dva.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.414] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18432) returned 1
	[0173.414] CloseHandle (hObject=0x168) returned 1
	[0173.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\dva.ukr")) returned 0x20
	[0173.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\dva.ukr")) returned 0x20
	[0173.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\dva.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\DVA.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\dva.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ebook.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.415] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0173.415] CloseHandle (hObject=0x168) returned 1
	[0173.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ebook.ukr")) returned 0x20
	[0173.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ebook.ukr")) returned 0x20
	[0173.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ebook.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\eBook.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ebook.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\escript.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.416] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40960) returned 1
	[0173.417] CloseHandle (hObject=0x168) returned 1
	[0173.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\escript.ukr")) returned 0x20
	[0173.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\escript.ukr")) returned 0x20
	[0173.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\escript.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\EScript.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\escript.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ia32.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.419] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0173.419] CloseHandle (hObject=0x168) returned 1
	[0173.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ia32.ukr")) returned 0x20
	[0173.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ia32.ukr")) returned 0x20
	[0173.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ia32.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\IA32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ia32.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\makeaccessible.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.420] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=74752) returned 1
	[0173.420] CloseHandle (hObject=0x168) returned 1
	[0173.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\makeaccessible.ukr")) returned 0x20
	[0173.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\makeaccessible.ukr")) returned 0x20
	[0173.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\makeaccessible.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\MakeAccessible.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\makeaccessible.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\multimedia.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.421] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=80384) returned 1
	[0173.421] CloseHandle (hObject=0x168) returned 1
	[0173.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\multimedia.ukr")) returned 0x20
	[0173.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\multimedia.ukr")) returned 0x20
	[0173.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\multimedia.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Multimedia.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\multimedia.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.421] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\pddom.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.422] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11776) returned 1
	[0173.422] CloseHandle (hObject=0x168) returned 1
	[0173.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\pddom.ukr")) returned 0x20
	[0173.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\pddom.ukr")) returned 0x20
	[0173.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\pddom.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PDDom.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\pddom.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ppklite.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.423] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=521728) returned 1
	[0173.423] CloseHandle (hObject=0x168) returned 1
	[0173.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ppklite.ukr")) returned 0x20
	[0173.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ppklite.ukr")) returned 0x20
	[0173.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ppklite.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\PPKLITE.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\ppklite.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\rdlang32.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.424] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1366016) returned 1
	[0173.424] CloseHandle (hObject=0x168) returned 1
	[0173.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\rdlang32.ukr")) returned 0x20
	[0173.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\rdlang32.ukr")) returned 0x20
	[0173.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\rdlang32.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\RdLang32.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\rdlang32.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\readoutloud.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.425] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0173.425] CloseHandle (hObject=0x168) returned 1
	[0173.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\readoutloud.ukr")) returned 0x20
	[0173.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\readoutloud.ukr")) returned 0x20
	[0173.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\readoutloud.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\ReadOutLoud.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\readoutloud.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\reflow.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.426] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0173.426] CloseHandle (hObject=0x168) returned 1
	[0173.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\reflow.ukr")) returned 0x20
	[0173.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\reflow.ukr")) returned 0x20
	[0173.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\reflow.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Reflow.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\reflow.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\saveasrtf.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.427] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18944) returned 1
	[0173.427] CloseHandle (hObject=0x168) returned 1
	[0173.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\saveasrtf.ukr")) returned 0x20
	[0173.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\saveasrtf.ukr")) returned 0x20
	[0173.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\saveasrtf.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SaveAsRTF.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\saveasrtf.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\search.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.428] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23552) returned 1
	[0173.428] CloseHandle (hObject=0x168) returned 1
	[0173.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\search.ukr")) returned 0x20
	[0173.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\search.ukr")) returned 0x20
	[0173.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\search.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Search.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\search.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\sendmail.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.430] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15872) returned 1
	[0173.430] CloseHandle (hObject=0x168) returned 1
	[0173.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\sendmail.ukr")) returned 0x20
	[0173.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\sendmail.ukr")) returned 0x20
	[0173.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\sendmail.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\SendMail.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\sendmail.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.432] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47793) returned 1
	[0173.432] CloseHandle (hObject=0x168) returned 1
	[0173.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\dexshare.asfx")) returned 0x20
	[0173.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\dexshare.asfx")) returned 0x20
	[0173.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.433] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=264) returned 1
	[0173.433] CloseHandle (hObject=0x168) returned 1
	[0173.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\services.asfx")) returned 0x20
	[0173.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\services.asfx")) returned 0x20
	[0173.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\spelling.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.434] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0173.434] CloseHandle (hObject=0x168) returned 1
	[0173.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\spelling.ukr")) returned 0x20
	[0173.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\spelling.ukr")) returned 0x20
	[0173.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\spelling.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Spelling.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\spelling.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\updater.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.435] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0173.435] CloseHandle (hObject=0x168) returned 1
	[0173.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\updater.ukr")) returned 0x20
	[0173.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\updater.ukr")) returned 0x20
	[0173.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\updater.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Updater.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\updater.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\weblink.ukr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.436] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27648) returned 1
	[0173.436] CloseHandle (hObject=0x168) returned 1
	[0173.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\weblink.ukr")) returned 0x20
	[0173.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\weblink.ukr")) returned 0x20
	[0173.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\weblink.ukr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Weblink.UKR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\uk_ua\\weblink.ukr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\accessibility.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.440] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28160) returned 1
	[0173.440] CloseHandle (hObject=0x168) returned 1
	[0173.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\accessibility.chs")) returned 0x20
	[0173.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\accessibility.chs")) returned 0x20
	[0173.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\accessibility.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\accessibility.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\accessibility.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\acroform.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.441] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=248832) returned 1
	[0173.441] CloseHandle (hObject=0x168) returned 1
	[0173.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\acroform.chs")) returned 0x20
	[0173.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\acroform.chs")) returned 0x20
	[0173.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\acroform.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Acroform.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\acroform.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\adobecollabsync.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.442] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6144) returned 1
	[0173.442] CloseHandle (hObject=0x168) returned 1
	[0173.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\adobecollabsync.chs")) returned 0x20
	[0173.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\adobecollabsync.chs")) returned 0x20
	[0173.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\adobecollabsync.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\AdobeCollabSync.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\adobecollabsync.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\annots.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.444] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=311296) returned 1
	[0173.444] CloseHandle (hObject=0x168) returned 1
	[0173.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\annots.chs")) returned 0x20
	[0173.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\annots.chs")) returned 0x20
	[0173.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\annots.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Annots.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\annots.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\brdlang32.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.445] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0173.445] CloseHandle (hObject=0x168) returned 1
	[0173.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\brdlang32.chs")) returned 0x20
	[0173.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\brdlang32.chs")) returned 0x20
	[0173.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\brdlang32.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\BRdlang32.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\brdlang32.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\checkers.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.446] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=78336) returned 1
	[0173.446] CloseHandle (hObject=0x168) returned 1
	[0173.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\checkers.chs")) returned 0x20
	[0173.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\checkers.chs")) returned 0x20
	[0173.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\checkers.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Checkers.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\checkers.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\digsig.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0173.586] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73216) returned 1
	[0173.586] CloseHandle (hObject=0x168) returned 1
	[0173.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\digsig.chs")) returned 0x20
	[0173.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\digsig.chs")) returned 0x20
	[0173.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\digsig.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\DigSig.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\digsig.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x208
	[0173.693] GetFileSizeEx (in: hFile=0x208, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=228) returned 1
	[0173.693] CloseHandle (hObject=0x208) returned 1
	[0173.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\services.asfx")) returned 0x20
	[0173.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\services.asfx")) returned 0x20
	[0173.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\spelling.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.696] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0173.696] CloseHandle (hObject=0x20c) returned 1
	[0173.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\spelling.chs")) returned 0x20
	[0173.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\spelling.chs")) returned 0x20
	[0173.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\spelling.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Spelling.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\spelling.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\updater.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.697] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0173.697] CloseHandle (hObject=0x20c) returned 1
	[0173.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\updater.chs")) returned 0x20
	[0173.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\updater.chs")) returned 0x20
	[0173.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\updater.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\updater.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\updater.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\weblink.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.698] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19968) returned 1
	[0173.698] CloseHandle (hObject=0x20c) returned 1
	[0173.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\weblink.chs")) returned 0x20
	[0173.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\weblink.chs")) returned 0x20
	[0173.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\weblink.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Weblink.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_cn\\weblink.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\accessibility.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.700] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28160) returned 1
	[0173.700] CloseHandle (hObject=0x20c) returned 1
	[0173.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\accessibility.cht")) returned 0x20
	[0173.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\accessibility.cht")) returned 0x20
	[0173.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\accessibility.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\accessibility.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\accessibility.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\acroform.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.704] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=249344) returned 1
	[0173.704] CloseHandle (hObject=0x20c) returned 1
	[0173.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\acroform.cht")) returned 0x20
	[0173.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\acroform.cht")) returned 0x20
	[0173.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\acroform.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Acroform.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\acroform.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\adobecollabsync.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.705] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6144) returned 1
	[0173.705] CloseHandle (hObject=0x20c) returned 1
	[0173.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\adobecollabsync.cht")) returned 0x20
	[0173.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\adobecollabsync.cht")) returned 0x20
	[0173.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\adobecollabsync.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\AdobeCollabSync.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\adobecollabsync.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\annots.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.706] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=312832) returned 1
	[0173.706] CloseHandle (hObject=0x20c) returned 1
	[0173.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\annots.cht")) returned 0x20
	[0173.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\annots.cht")) returned 0x20
	[0173.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\annots.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Annots.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\annots.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\brdlang32.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.707] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0173.707] CloseHandle (hObject=0x20c) returned 1
	[0173.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\brdlang32.cht")) returned 0x20
	[0173.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\brdlang32.cht")) returned 0x20
	[0173.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\brdlang32.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\BRdlang32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\brdlang32.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\checkers.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.708] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=78336) returned 1
	[0173.708] CloseHandle (hObject=0x20c) returned 1
	[0173.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\checkers.cht")) returned 0x20
	[0173.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\checkers.cht")) returned 0x20
	[0173.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\checkers.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Checkers.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\checkers.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\digsig.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.710] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73216) returned 1
	[0173.710] CloseHandle (hObject=0x20c) returned 1
	[0173.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\digsig.cht")) returned 0x20
	[0173.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\digsig.cht")) returned 0x20
	[0173.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\digsig.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DigSig.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\digsig.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\dva.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.711] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11776) returned 1
	[0173.711] CloseHandle (hObject=0x20c) returned 1
	[0173.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\dva.cht")) returned 0x20
	[0173.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\dva.cht")) returned 0x20
	[0173.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\dva.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\DVA.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\dva.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ebook.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.712] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5632) returned 1
	[0173.712] CloseHandle (hObject=0x20c) returned 1
	[0173.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ebook.cht")) returned 0x20
	[0173.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ebook.cht")) returned 0x20
	[0173.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ebook.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\eBook.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ebook.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\escript.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.713] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29696) returned 1
	[0173.713] CloseHandle (hObject=0x20c) returned 1
	[0173.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\escript.cht")) returned 0x20
	[0173.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\escript.cht")) returned 0x20
	[0173.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\escript.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\EScript.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\escript.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ia32.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.714] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3072) returned 1
	[0173.714] CloseHandle (hObject=0x20c) returned 1
	[0173.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ia32.cht")) returned 0x20
	[0173.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ia32.cht")) returned 0x20
	[0173.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ia32.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\IA32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ia32.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\makeaccessible.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.715] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37888) returned 1
	[0173.715] CloseHandle (hObject=0x20c) returned 1
	[0173.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\makeaccessible.cht")) returned 0x20
	[0173.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\makeaccessible.cht")) returned 0x20
	[0173.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\makeaccessible.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\makeaccessible.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\makeaccessible.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\multimedia.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.716] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=55808) returned 1
	[0173.716] CloseHandle (hObject=0x20c) returned 1
	[0173.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\multimedia.cht")) returned 0x20
	[0173.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\multimedia.cht")) returned 0x20
	[0173.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\multimedia.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Multimedia.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\multimedia.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\pddom.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.717] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8704) returned 1
	[0173.717] CloseHandle (hObject=0x20c) returned 1
	[0173.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\pddom.cht")) returned 0x20
	[0173.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\pddom.cht")) returned 0x20
	[0173.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\pddom.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\pddom.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\pddom.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ppklite.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.718] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=319488) returned 1
	[0173.718] CloseHandle (hObject=0x20c) returned 1
	[0173.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ppklite.cht")) returned 0x20
	[0173.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ppklite.cht")) returned 0x20
	[0173.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ppklite.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\PPKLITE.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\ppklite.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\rdlang32.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.719] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=921088) returned 1
	[0173.719] CloseHandle (hObject=0x20c) returned 1
	[0173.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\rdlang32.cht")) returned 0x20
	[0173.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\rdlang32.cht")) returned 0x20
	[0173.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\rdlang32.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\RdLang32.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\rdlang32.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\readoutloud.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.720] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8704) returned 1
	[0173.720] CloseHandle (hObject=0x20c) returned 1
	[0173.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\readoutloud.cht")) returned 0x20
	[0173.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\readoutloud.cht")) returned 0x20
	[0173.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\readoutloud.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\ReadOutLoud.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\readoutloud.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\reflow.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.721] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0173.721] CloseHandle (hObject=0x20c) returned 1
	[0173.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\reflow.cht")) returned 0x20
	[0173.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\reflow.cht")) returned 0x20
	[0173.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\reflow.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\reflow.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\reflow.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\saveasrtf.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.722] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12800) returned 1
	[0173.723] CloseHandle (hObject=0x20c) returned 1
	[0173.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\saveasrtf.cht")) returned 0x20
	[0173.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\saveasrtf.cht")) returned 0x20
	[0173.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\saveasrtf.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SaveAsRTF.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\saveasrtf.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\search.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.723] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14336) returned 1
	[0173.724] CloseHandle (hObject=0x20c) returned 1
	[0173.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\search.cht")) returned 0x20
	[0173.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\search.cht")) returned 0x20
	[0173.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\search.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Search.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\search.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\sendmail.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.724] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11776) returned 1
	[0173.725] CloseHandle (hObject=0x20c) returned 1
	[0173.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\sendmail.cht")) returned 0x20
	[0173.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\sendmail.cht")) returned 0x20
	[0173.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\sendmail.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\SendMail.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\sendmail.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\dexshare.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.726] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35135) returned 1
	[0173.726] CloseHandle (hObject=0x20c) returned 1
	[0173.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\dexshare.asfx")) returned 0x20
	[0173.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\dexshare.asfx")) returned 0x20
	[0173.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\dexshare.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\DEXShare.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\dexshare.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\services.asfx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.727] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=228) returned 1
	[0173.727] CloseHandle (hObject=0x20c) returned 1
	[0173.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\services.asfx")) returned 0x20
	[0173.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\services.asfx")) returned 0x20
	[0173.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\services.asfx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\Services.asfx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\services\\services.asfx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\spelling.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0173.728] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0173.728] CloseHandle (hObject=0x20c) returned 1
	[0173.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\spelling.cht")) returned 0x20
	[0173.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\spelling.cht")) returned 0x20
	[0173.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\spelling.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0173.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Spelling.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\spelling.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0173.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\updater.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.219] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0174.219] CloseHandle (hObject=0x210) returned 1
	[0174.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\updater.cht")) returned 0x20
	[0174.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\updater.cht")) returned 0x20
	[0174.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\updater.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\updater.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\locale\\zh_tw\\updater.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.220] SetEvent (hEvent=0xfc) returned 1
	[0174.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pe.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.221] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1629576) returned 1
	[0174.221] CloseHandle (hObject=0x210) returned 1
	[0174.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pe.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pe.dll")) returned 0x20
	[0174.221] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pe.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pe.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pe.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pe.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0174.221] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pe.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pe.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\pe.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pe.dll")) returned 0
	[0174.221] SetEvent (hEvent=0xfc) returned 1
	[0174.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\piaglbreakfinder.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\piaglbreakfinder.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.325] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16808) returned 1
	[0174.325] CloseHandle (hObject=0x210) returned 1
	[0174.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\piaglbreakfinder.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\piaglbreakfinder.dll")) returned 0x20
	[0174.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\piaglbreakfinder.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\piaglbreakfinder.dll")) returned 0x20
	[0174.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\piaglbreakfinder.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\piaglbreakfinder.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\piaglbreakfinder.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\piaglbreakfinder.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.326] SetEvent (hEvent=0xfc) returned 1
	[0174.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0174.403] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=44944) returned 1
	[0174.403] CloseHandle (hObject=0x210) returned 1
	[0174.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf")) returned 0x20
	[0174.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf")) returned 0x20
	[0174.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.404] SetEvent (hEvent=0xfc) returned 1
	[0174.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.541] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35117) returned 1
	[0174.541] CloseHandle (hObject=0x228) returned 1
	[0174.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf")) returned 0x20
	[0174.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf")) returned 0x20
	[0174.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.541] SetEvent (hEvent=0xfc) returned 1
	[0174.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.542] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36986) returned 1
	[0174.542] CloseHandle (hObject=0x228) returned 1
	[0174.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf")) returned 0x20
	[0174.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf")) returned 0x20
	[0174.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.543] SetEvent (hEvent=0xfc) returned 1
	[0174.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.544] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33013) returned 1
	[0174.544] CloseHandle (hObject=0x228) returned 1
	[0174.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf")) returned 0x20
	[0174.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf")) returned 0x20
	[0174.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.544] SetEvent (hEvent=0xfc) returned 1
	[0174.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.545] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46897) returned 1
	[0174.545] CloseHandle (hObject=0x228) returned 1
	[0174.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf")) returned 0x20
	[0174.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf")) returned 0x20
	[0174.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.545] SetEvent (hEvent=0xfc) returned 1
	[0174.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.546] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=327673) returned 1
	[0174.546] CloseHandle (hObject=0x228) returned 1
	[0174.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf")) returned 0x20
	[0174.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf")) returned 0x20
	[0174.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.547] SetEvent (hEvent=0xfc) returned 1
	[0174.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0174.548] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=115957) returned 1
	[0174.548] CloseHandle (hObject=0x214) returned 1
	[0174.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf")) returned 0x20
	[0174.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf")) returned 0x20
	[0174.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0174.549] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67699) returned 1
	[0174.549] CloseHandle (hObject=0x214) returned 1
	[0174.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf")) returned 0x20
	[0174.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf")) returned 0x20
	[0174.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0174.550] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=50344) returned 1
	[0174.550] CloseHandle (hObject=0x214) returned 1
	[0174.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf")) returned 0x20
	[0174.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf")) returned 0x20
	[0174.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0174.551] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40019) returned 1
	[0174.551] CloseHandle (hObject=0x214) returned 1
	[0174.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf")) returned 0x20
	[0174.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf")) returned 0x20
	[0174.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0174.552] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=105607) returned 1
	[0174.552] CloseHandle (hObject=0x214) returned 1
	[0174.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf")) returned 0x20
	[0174.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf")) returned 0x20
	[0174.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.759] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=90056) returned 1
	[0174.760] CloseHandle (hObject=0x228) returned 1
	[0174.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf")) returned 0x20
	[0174.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf")) returned 0x20
	[0174.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.760] SetEvent (hEvent=0xfc) returned 1
	[0174.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.761] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46897) returned 1
	[0174.761] CloseHandle (hObject=0x228) returned 1
	[0174.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf")) returned 0x20
	[0174.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf")) returned 0x20
	[0174.761] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.762] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=59190) returned 1
	[0174.762] CloseHandle (hObject=0x228) returned 1
	[0174.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf")) returned 0x20
	[0174.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf")) returned 0x20
	[0174.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.763] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=115957) returned 1
	[0174.763] CloseHandle (hObject=0x228) returned 1
	[0174.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf")) returned 0x20
	[0174.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf")) returned 0x20
	[0174.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.764] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=196194) returned 1
	[0174.764] CloseHandle (hObject=0x228) returned 1
	[0174.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf")) returned 0x20
	[0174.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf")) returned 0x20
	[0174.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.766] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=60103) returned 1
	[0174.766] CloseHandle (hObject=0x228) returned 1
	[0174.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf")) returned 0x20
	[0174.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf")) returned 0x20
	[0174.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.767] SetEvent (hEvent=0xfc) returned 1
	[0174.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.767] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33013) returned 1
	[0174.767] CloseHandle (hObject=0x228) returned 1
	[0174.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf")) returned 0x20
	[0174.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf")) returned 0x20
	[0174.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.768] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46897) returned 1
	[0174.768] CloseHandle (hObject=0x228) returned 1
	[0174.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf")) returned 0x20
	[0174.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf")) returned 0x20
	[0174.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.769] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41240) returned 1
	[0174.769] CloseHandle (hObject=0x228) returned 1
	[0174.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf")) returned 0x20
	[0174.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf")) returned 0x20
	[0174.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.770] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=115957) returned 1
	[0174.770] CloseHandle (hObject=0x228) returned 1
	[0174.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf")) returned 0x20
	[0174.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf")) returned 0x20
	[0174.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.771] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=109646) returned 1
	[0174.771] CloseHandle (hObject=0x228) returned 1
	[0174.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf")) returned 0x20
	[0174.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf")) returned 0x20
	[0174.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.774] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43101) returned 1
	[0174.774] CloseHandle (hObject=0x228) returned 1
	[0174.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf")) returned 0x20
	[0174.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf")) returned 0x20
	[0174.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.774] SetEvent (hEvent=0xfc) returned 1
	[0174.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.775] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33013) returned 1
	[0174.775] CloseHandle (hObject=0x228) returned 1
	[0174.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf")) returned 0x20
	[0174.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf")) returned 0x20
	[0174.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.776] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46897) returned 1
	[0174.776] CloseHandle (hObject=0x228) returned 1
	[0174.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf")) returned 0x20
	[0174.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf")) returned 0x20
	[0174.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.777] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47581) returned 1
	[0174.777] CloseHandle (hObject=0x228) returned 1
	[0174.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf")) returned 0x20
	[0174.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf")) returned 0x20
	[0174.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.778] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=115957) returned 1
	[0174.778] CloseHandle (hObject=0x228) returned 1
	[0174.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf")) returned 0x20
	[0174.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf")) returned 0x20
	[0174.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.779] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=83800) returned 1
	[0174.779] CloseHandle (hObject=0x228) returned 1
	[0174.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf")) returned 0x20
	[0174.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf")) returned 0x20
	[0174.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.780] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.781] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=123206) returned 1
	[0174.781] CloseHandle (hObject=0x228) returned 1
	[0174.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf")) returned 0x20
	[0174.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf")) returned 0x20
	[0174.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.781] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.782] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33013) returned 1
	[0174.782] CloseHandle (hObject=0x228) returned 1
	[0174.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf")) returned 0x20
	[0174.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf")) returned 0x20
	[0174.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.783] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46897) returned 1
	[0174.783] CloseHandle (hObject=0x228) returned 1
	[0174.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf")) returned 0x20
	[0174.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf")) returned 0x20
	[0174.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.784] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77747) returned 1
	[0174.784] CloseHandle (hObject=0x228) returned 1
	[0174.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf")) returned 0x20
	[0174.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf")) returned 0x20
	[0174.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.787] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=115957) returned 1
	[0174.787] CloseHandle (hObject=0x228) returned 1
	[0174.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf")) returned 0x20
	[0174.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf")) returned 0x20
	[0174.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.788] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=156244) returned 1
	[0174.788] CloseHandle (hObject=0x228) returned 1
	[0174.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf")) returned 0x20
	[0174.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf")) returned 0x20
	[0174.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.789] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=59361) returned 1
	[0174.789] CloseHandle (hObject=0x228) returned 1
	[0174.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf")) returned 0x20
	[0174.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf")) returned 0x20
	[0174.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.792] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40123) returned 1
	[0174.792] CloseHandle (hObject=0x228) returned 1
	[0174.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf")) returned 0x20
	[0174.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf")) returned 0x20
	[0174.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.793] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94105) returned 1
	[0174.793] CloseHandle (hObject=0x228) returned 1
	[0174.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf")) returned 0x20
	[0174.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf")) returned 0x20
	[0174.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.795] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=58799) returned 1
	[0174.795] CloseHandle (hObject=0x228) returned 1
	[0174.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf")) returned 0x20
	[0174.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf")) returned 0x20
	[0174.795] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.796] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42656) returned 1
	[0174.796] CloseHandle (hObject=0x228) returned 1
	[0174.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf")) returned 0x20
	[0174.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf")) returned 0x20
	[0174.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.796] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.797] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=102139) returned 1
	[0174.797] CloseHandle (hObject=0x228) returned 1
	[0174.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf")) returned 0x20
	[0174.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf")) returned 0x20
	[0174.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.797] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.853] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=57980) returned 1
	[0174.853] CloseHandle (hObject=0x228) returned 1
	[0174.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf")) returned 0x20
	[0174.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf")) returned 0x20
	[0174.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.854] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46897) returned 1
	[0174.854] CloseHandle (hObject=0x228) returned 1
	[0174.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf")) returned 0x20
	[0174.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf")) returned 0x20
	[0174.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.857] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39211) returned 1
	[0174.858] CloseHandle (hObject=0x228) returned 1
	[0174.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf")) returned 0x20
	[0174.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf")) returned 0x20
	[0174.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.859] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=115957) returned 1
	[0174.859] CloseHandle (hObject=0x228) returned 1
	[0174.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf")) returned 0x20
	[0174.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf")) returned 0x20
	[0174.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.860] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=98378) returned 1
	[0174.860] CloseHandle (hObject=0x228) returned 1
	[0174.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf")) returned 0x20
	[0174.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf")) returned 0x20
	[0174.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.862] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=101141) returned 1
	[0174.862] CloseHandle (hObject=0x228) returned 1
	[0174.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf")) returned 0x20
	[0174.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf")) returned 0x20
	[0174.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.863] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33013) returned 1
	[0174.863] CloseHandle (hObject=0x228) returned 1
	[0174.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf")) returned 0x20
	[0174.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf")) returned 0x20
	[0174.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.864] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46897) returned 1
	[0174.864] CloseHandle (hObject=0x228) returned 1
	[0174.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf")) returned 0x20
	[0174.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf")) returned 0x20
	[0174.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.865] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45449) returned 1
	[0174.865] CloseHandle (hObject=0x228) returned 1
	[0174.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf")) returned 0x20
	[0174.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf")) returned 0x20
	[0174.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.866] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=115957) returned 1
	[0174.866] CloseHandle (hObject=0x228) returned 1
	[0174.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf")) returned 0x20
	[0174.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf")) returned 0x20
	[0174.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.867] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=362641) returned 1
	[0174.867] CloseHandle (hObject=0x228) returned 1
	[0174.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf")) returned 0x20
	[0174.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf")) returned 0x20
	[0174.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.876] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=112498) returned 1
	[0174.876] CloseHandle (hObject=0x228) returned 1
	[0174.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf")) returned 0x20
	[0174.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf")) returned 0x20
	[0174.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.877] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6143587) returned 1
	[0174.877] CloseHandle (hObject=0x228) returned 1
	[0174.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api")) returned 0x20
	[0174.877] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0174.878] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annots.api")) returned 0
	[0174.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\checkers.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.878] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=861283) returned 1
	[0174.878] CloseHandle (hObject=0x228) returned 1
	[0174.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\checkers.api")) returned 0x20
	[0174.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\checkers.api")) returned 0x20
	[0174.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\checkers.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\checkers.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\digsig.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.879] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1433187) returned 1
	[0174.879] CloseHandle (hObject=0x228) returned 1
	[0174.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\digsig.api")) returned 0x20
	[0174.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\digsig.api")) returned 0x20
	[0174.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\digsig.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\digsig.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\dva.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.880] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=150115) returned 1
	[0174.880] CloseHandle (hObject=0x228) returned 1
	[0174.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\dva.api")) returned 0x20
	[0174.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\dva.api")) returned 0x20
	[0174.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\dva.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\dva.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ebook.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.881] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53347) returned 1
	[0174.881] CloseHandle (hObject=0x228) returned 1
	[0174.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ebook.api")) returned 0x20
	[0174.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ebook.api")) returned 0x20
	[0174.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ebook.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ebook.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.882] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1751139) returned 1
	[0174.882] CloseHandle (hObject=0x228) returned 1
	[0174.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api")) returned 0x20
	[0174.882] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0174.883] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\escript.api")) returned 0
	[0174.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ia32.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.883] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=99427) returned 1
	[0174.883] CloseHandle (hObject=0x228) returned 1
	[0174.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ia32.api")) returned 0x20
	[0174.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ia32.api")) returned 0x20
	[0174.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ia32.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\ia32.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.884] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2312803) returned 1
	[0174.884] CloseHandle (hObject=0x228) returned 1
	[0174.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api")) returned 0x20
	[0174.885] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0174.885] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\makeaccessible.api")) returned 0
	[0174.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.887] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0174.887] CloseHandle (hObject=0x228) returned 1
	[0174.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat")) returned 0x20
	[0174.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat")) returned 0x20
	[0174.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.888] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0174.888] CloseHandle (hObject=0x228) returned 1
	[0174.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.chs")) returned 0x20
	[0174.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.chs")) returned 0x20
	[0174.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.890] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0174.890] CloseHandle (hObject=0x228) returned 1
	[0174.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cht")) returned 0x20
	[0174.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cht")) returned 0x20
	[0174.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.891] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0174.891] CloseHandle (hObject=0x228) returned 1
	[0174.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.dan")) returned 0x20
	[0174.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.dan")) returned 0x20
	[0174.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0174.892] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0174.892] CloseHandle (hObject=0x228) returned 1
	[0174.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.deu")) returned 0x20
	[0174.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.deu")) returned 0x20
	[0174.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0174.996] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0174.996] CloseHandle (hObject=0x22c) returned 1
	[0174.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.esp")) returned 0x20
	[0174.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.esp")) returned 0x20
	[0174.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.996] SetEvent (hEvent=0xfc) returned 1
	[0174.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0174.997] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0174.997] CloseHandle (hObject=0x22c) returned 1
	[0174.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ita")) returned 0x20
	[0174.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ita")) returned 0x20
	[0174.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.998] SetEvent (hEvent=0xfc) returned 1
	[0174.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0174.999] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0174.999] CloseHandle (hObject=0x22c) returned 1
	[0174.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.jpn")) returned 0x20
	[0174.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.jpn")) returned 0x20
	[0174.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0174.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0174.999] SetEvent (hEvent=0xfc) returned 1
	[0174.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.000] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.001] CloseHandle (hObject=0x22c) returned 1
	[0175.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.kor")) returned 0x20
	[0175.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.kor")) returned 0x20
	[0175.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.001] SetEvent (hEvent=0xfc) returned 1
	[0175.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.002] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=120832) returned 1
	[0175.002] CloseHandle (hObject=0x22c) returned 1
	[0175.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp")) returned 0x20
	[0175.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp")) returned 0x20
	[0175.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.mpp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.003] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.003] CloseHandle (hObject=0x22c) returned 1
	[0175.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nld")) returned 0x20
	[0175.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nld")) returned 0x20
	[0175.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.004] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.004] CloseHandle (hObject=0x22c) returned 1
	[0175.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nor")) returned 0x20
	[0175.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nor")) returned 0x20
	[0175.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.005] SetEvent (hEvent=0xfc) returned 1
	[0175.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.005] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.005] CloseHandle (hObject=0x22c) returned 1
	[0175.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ptb")) returned 0x20
	[0175.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ptb")) returned 0x20
	[0175.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.007] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.007] CloseHandle (hObject=0x22c) returned 1
	[0175.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo")) returned 0x20
	[0175.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo")) returned 0x20
	[0175.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.007] SetEvent (hEvent=0xfc) returned 1
	[0175.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.008] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.008] CloseHandle (hObject=0x22c) returned 1
	[0175.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.sve")) returned 0x20
	[0175.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.sve")) returned 0x20
	[0175.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Flash.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\flash.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.009] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.009] CloseHandle (hObject=0x22c) returned 1
	[0175.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat")) returned 0x20
	[0175.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat")) returned 0x20
	[0175.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.011] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0175.011] CloseHandle (hObject=0x22c) returned 1
	[0175.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.chs")) returned 0x20
	[0175.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.chs")) returned 0x20
	[0175.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.011] SetEvent (hEvent=0xfc) returned 1
	[0175.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.012] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0175.012] CloseHandle (hObject=0x22c) returned 1
	[0175.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cht")) returned 0x20
	[0175.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cht")) returned 0x20
	[0175.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.013] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.013] CloseHandle (hObject=0x22c) returned 1
	[0175.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.dan")) returned 0x20
	[0175.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.dan")) returned 0x20
	[0175.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.014] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.014] CloseHandle (hObject=0x22c) returned 1
	[0175.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.deu")) returned 0x20
	[0175.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.deu")) returned 0x20
	[0175.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.018] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.018] CloseHandle (hObject=0x22c) returned 1
	[0175.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.esp")) returned 0x20
	[0175.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.esp")) returned 0x20
	[0175.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.019] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.019] CloseHandle (hObject=0x22c) returned 1
	[0175.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.euq")) returned 0x20
	[0175.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.euq")) returned 0x20
	[0175.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.020] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.020] CloseHandle (hObject=0x22c) returned 1
	[0175.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.fra")) returned 0x20
	[0175.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.fra")) returned 0x20
	[0175.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ita"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.021] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.021] CloseHandle (hObject=0x22c) returned 1
	[0175.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ita")) returned 0x20
	[0175.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ita")) returned 0x20
	[0175.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ita.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.ITA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ita"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.jpn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.022] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7168) returned 1
	[0175.022] CloseHandle (hObject=0x22c) returned 1
	[0175.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.jpn")) returned 0x20
	[0175.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.jpn")) returned 0x20
	[0175.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.jpn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.JPN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.jpn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.kor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.023] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7168) returned 1
	[0175.023] CloseHandle (hObject=0x22c) returned 1
	[0175.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.kor")) returned 0x20
	[0175.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.kor")) returned 0x20
	[0175.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.kor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.KOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.kor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.024] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=93696) returned 1
	[0175.024] CloseHandle (hObject=0x22c) returned 1
	[0175.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp")) returned 0x20
	[0175.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp")) returned 0x20
	[0175.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.mpp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.mpp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nld"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.025] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.025] CloseHandle (hObject=0x22c) returned 1
	[0175.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nld")) returned 0x20
	[0175.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nld")) returned 0x20
	[0175.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nld.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NLD" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nld"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.026] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0175.026] CloseHandle (hObject=0x22c) returned 1
	[0175.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nor")) returned 0x20
	[0175.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nor")) returned 0x20
	[0175.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.NOR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.nor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ptb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.027] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.027] CloseHandle (hObject=0x22c) returned 1
	[0175.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ptb")) returned 0x20
	[0175.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ptb")) returned 0x20
	[0175.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ptb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.PTB" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.ptb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.028] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0175.028] CloseHandle (hObject=0x22c) returned 1
	[0175.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo")) returned 0x20
	[0175.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo")) returned 0x20
	[0175.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\Mcimpp.SUO" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.suo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.030] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0175.030] CloseHandle (hObject=0x22c) returned 1
	[0175.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.sve")) returned 0x20
	[0175.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.sve")) returned 0x20
	[0175.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\MCIMPP.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\mcimpp.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.031] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.031] CloseHandle (hObject=0x22c) returned 1
	[0175.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat")) returned 0x20
	[0175.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat")) returned 0x20
	[0175.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CAT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.chs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.032] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.032] CloseHandle (hObject=0x22c) returned 1
	[0175.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.chs")) returned 0x20
	[0175.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.chs")) returned 0x20
	[0175.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.chs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.chs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cht"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.033] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.033] CloseHandle (hObject=0x22c) returned 1
	[0175.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cht")) returned 0x20
	[0175.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cht")) returned 0x20
	[0175.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cht.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.CHT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.cht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.dan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.034] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.034] CloseHandle (hObject=0x22c) returned 1
	[0175.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.dan")) returned 0x20
	[0175.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.dan")) returned 0x20
	[0175.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.dan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DAN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.deu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.035] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.035] CloseHandle (hObject=0x22c) returned 1
	[0175.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.deu")) returned 0x20
	[0175.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.deu")) returned 0x20
	[0175.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.deu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.DEU" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.deu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.esp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.036] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.036] CloseHandle (hObject=0x22c) returned 1
	[0175.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.esp")) returned 0x20
	[0175.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.esp")) returned 0x20
	[0175.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.esp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.ESP" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.esp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.euq"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.037] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.037] CloseHandle (hObject=0x22c) returned 1
	[0175.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.euq")) returned 0x20
	[0175.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.euq")) returned 0x20
	[0175.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.euq.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.EUQ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.euq"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.fra"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.038] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.039] CloseHandle (hObject=0x22c) returned 1
	[0175.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.fra")) returned 0x20
	[0175.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.fra")) returned 0x20
	[0175.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.fra.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\QuickTime.FRA" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\quicktime.fra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.273] SetEvent (hEvent=0xfc) returned 1
	[0175.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.sve"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.275] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.275] CloseHandle (hObject=0x234) returned 1
	[0175.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.sve")) returned 0x20
	[0175.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.sve")) returned 0x20
	[0175.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.sve.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\WindowsMedia.SVE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp\\windowsmedia.sve"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\flash.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.276] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.276] CloseHandle (hObject=0x234) returned 1
	[0175.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\flash.cze")) returned 0x20
	[0175.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\flash.cze")) returned 0x20
	[0175.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\flash.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Flash.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\flash.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\mcimpp.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.277] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.277] CloseHandle (hObject=0x234) returned 1
	[0175.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\mcimpp.cze")) returned 0x20
	[0175.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\mcimpp.cze")) returned 0x20
	[0175.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\mcimpp.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\Mcimpp.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\mcimpp.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\quicktime.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.278] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.278] CloseHandle (hObject=0x234) returned 1
	[0175.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\quicktime.cze")) returned 0x20
	[0175.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\quicktime.cze")) returned 0x20
	[0175.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\quicktime.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\QuickTime.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\quicktime.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\windowsmedia.cze"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.280] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.280] CloseHandle (hObject=0x234) returned 1
	[0175.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\windowsmedia.cze")) returned 0x20
	[0175.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\windowsmedia.cze")) returned 0x20
	[0175.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\windowsmedia.cze.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\WindowsMedia.CZE" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_cze\\windowsmedia.cze"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\flash.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.281] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.281] CloseHandle (hObject=0x234) returned 1
	[0175.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\flash.hrv")) returned 0x20
	[0175.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\flash.hrv")) returned 0x20
	[0175.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\flash.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\Flash.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\flash.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\mcimpp.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.285] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.285] CloseHandle (hObject=0x234) returned 1
	[0175.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\mcimpp.hrv")) returned 0x20
	[0175.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\mcimpp.hrv")) returned 0x20
	[0175.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\mcimpp.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\MCIMPP.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\mcimpp.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\quicktime.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.286] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.286] CloseHandle (hObject=0x234) returned 1
	[0175.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\quicktime.hrv")) returned 0x20
	[0175.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\quicktime.hrv")) returned 0x20
	[0175.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\quicktime.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\QuickTime.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\quicktime.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\windowsmedia.hrv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.287] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.287] CloseHandle (hObject=0x234) returned 1
	[0175.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\windowsmedia.hrv")) returned 0x20
	[0175.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\windowsmedia.hrv")) returned 0x20
	[0175.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\windowsmedia.hrv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\WindowsMedia.HRV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hrv\\windowsmedia.hrv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\flash.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.288] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.288] CloseHandle (hObject=0x234) returned 1
	[0175.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\flash.hun")) returned 0x20
	[0175.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\flash.hun")) returned 0x20
	[0175.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\flash.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Flash.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\flash.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\mcimpp.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.289] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.289] CloseHandle (hObject=0x234) returned 1
	[0175.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\mcimpp.hun")) returned 0x20
	[0175.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\mcimpp.hun")) returned 0x20
	[0175.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\mcimpp.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\Mcimpp.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\mcimpp.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\quicktime.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.290] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.290] CloseHandle (hObject=0x234) returned 1
	[0175.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\quicktime.hun")) returned 0x20
	[0175.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\quicktime.hun")) returned 0x20
	[0175.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\quicktime.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\QuickTime.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\quicktime.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\windowsmedia.hun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.291] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.291] CloseHandle (hObject=0x234) returned 1
	[0175.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\windowsmedia.hun")) returned 0x20
	[0175.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\windowsmedia.hun")) returned 0x20
	[0175.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\windowsmedia.hun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\WindowsMedia.HUN" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_hun\\windowsmedia.hun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\flash.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.293] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.293] CloseHandle (hObject=0x234) returned 1
	[0175.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\flash.pol")) returned 0x20
	[0175.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\flash.pol")) returned 0x20
	[0175.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\flash.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Flash.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\flash.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.293] SetEvent (hEvent=0xfc) returned 1
	[0175.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\mcimpp.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.294] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.294] CloseHandle (hObject=0x234) returned 1
	[0175.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\mcimpp.pol")) returned 0x20
	[0175.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\mcimpp.pol")) returned 0x20
	[0175.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\mcimpp.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\Mcimpp.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\mcimpp.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\quicktime.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.295] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.295] CloseHandle (hObject=0x234) returned 1
	[0175.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\quicktime.pol")) returned 0x20
	[0175.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\quicktime.pol")) returned 0x20
	[0175.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\quicktime.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\QuickTime.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\quicktime.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\windowsmedia.pol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.296] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.296] CloseHandle (hObject=0x234) returned 1
	[0175.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\windowsmedia.pol")) returned 0x20
	[0175.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\windowsmedia.pol")) returned 0x20
	[0175.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\windowsmedia.pol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\WindowsMedia.POL" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_pol\\windowsmedia.pol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\flash.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.297] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.297] CloseHandle (hObject=0x234) returned 1
	[0175.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\flash.rum")) returned 0x20
	[0175.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\flash.rum")) returned 0x20
	[0175.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\flash.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\Flash.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\flash.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\mcimpp.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.298] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.299] CloseHandle (hObject=0x234) returned 1
	[0175.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\mcimpp.rum")) returned 0x20
	[0175.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\mcimpp.rum")) returned 0x20
	[0175.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\mcimpp.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\MCIMPP.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\mcimpp.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\quicktime.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.300] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.300] CloseHandle (hObject=0x234) returned 1
	[0175.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\quicktime.rum")) returned 0x20
	[0175.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\quicktime.rum")) returned 0x20
	[0175.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\quicktime.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\QuickTime.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\quicktime.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\windowsmedia.rum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.301] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.301] CloseHandle (hObject=0x234) returned 1
	[0175.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\windowsmedia.rum")) returned 0x20
	[0175.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\windowsmedia.rum")) returned 0x20
	[0175.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\windowsmedia.rum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\WindowsMedia.RUM" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rum\\windowsmedia.rum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\flash.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.302] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.302] CloseHandle (hObject=0x234) returned 1
	[0175.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\flash.rus")) returned 0x20
	[0175.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\flash.rus")) returned 0x20
	[0175.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\flash.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\Flash.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\flash.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\mcimpp.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.303] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.303] CloseHandle (hObject=0x234) returned 1
	[0175.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\mcimpp.rus")) returned 0x20
	[0175.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\mcimpp.rus")) returned 0x20
	[0175.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\mcimpp.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\MCIMPP.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\mcimpp.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\quicktime.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.304] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.304] CloseHandle (hObject=0x234) returned 1
	[0175.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\quicktime.rus")) returned 0x20
	[0175.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\quicktime.rus")) returned 0x20
	[0175.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\quicktime.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\QuickTime.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\quicktime.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\windowsmedia.rus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.305] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.305] CloseHandle (hObject=0x234) returned 1
	[0175.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\windowsmedia.rus")) returned 0x20
	[0175.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\windowsmedia.rus")) returned 0x20
	[0175.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\windowsmedia.rus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\WindowsMedia.RUS" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_rus\\windowsmedia.rus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\flash.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.306] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.306] CloseHandle (hObject=0x234) returned 1
	[0175.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\flash.sky")) returned 0x20
	[0175.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\flash.sky")) returned 0x20
	[0175.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\flash.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Flash.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\flash.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\mcimpp.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.307] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.307] CloseHandle (hObject=0x234) returned 1
	[0175.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\mcimpp.sky")) returned 0x20
	[0175.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\mcimpp.sky")) returned 0x20
	[0175.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\mcimpp.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\Mcimpp.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\mcimpp.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\quicktime.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.308] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.308] CloseHandle (hObject=0x234) returned 1
	[0175.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\quicktime.sky")) returned 0x20
	[0175.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\quicktime.sky")) returned 0x20
	[0175.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\quicktime.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\QuickTime.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\quicktime.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\windowsmedia.sky"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.309] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.309] CloseHandle (hObject=0x234) returned 1
	[0175.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\windowsmedia.sky")) returned 0x20
	[0175.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\windowsmedia.sky")) returned 0x20
	[0175.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\windowsmedia.sky.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\WindowsMedia.SKY" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_sky\\windowsmedia.sky"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\flash.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.313] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.313] CloseHandle (hObject=0x234) returned 1
	[0175.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\flash.slv")) returned 0x20
	[0175.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\flash.slv")) returned 0x20
	[0175.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\flash.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\Flash.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\flash.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\mcimpp.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.314] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0175.314] CloseHandle (hObject=0x234) returned 1
	[0175.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\mcimpp.slv")) returned 0x20
	[0175.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\mcimpp.slv")) returned 0x20
	[0175.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\mcimpp.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\MCIMPP.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\mcimpp.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\quicktime.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.315] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.315] CloseHandle (hObject=0x234) returned 1
	[0175.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\quicktime.slv")) returned 0x20
	[0175.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\quicktime.slv")) returned 0x20
	[0175.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\quicktime.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\QuickTime.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\quicktime.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\windowsmedia.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.316] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.317] CloseHandle (hObject=0x234) returned 1
	[0175.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\windowsmedia.slv")) returned 0x20
	[0175.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\windowsmedia.slv")) returned 0x20
	[0175.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\windowsmedia.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\WindowsMedia.SLV" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_slv\\windowsmedia.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\flash.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.318] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.318] CloseHandle (hObject=0x234) returned 1
	[0175.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\flash.tur")) returned 0x20
	[0175.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\flash.tur")) returned 0x20
	[0175.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\flash.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\Flash.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\flash.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\mcimpp.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.319] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7680) returned 1
	[0175.319] CloseHandle (hObject=0x234) returned 1
	[0175.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\mcimpp.tur")) returned 0x20
	[0175.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\mcimpp.tur")) returned 0x20
	[0175.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\mcimpp.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\MCIMPP.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\mcimpp.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\quicktime.tur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0175.441] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2560) returned 1
	[0175.441] CloseHandle (hObject=0x234) returned 1
	[0175.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\quicktime.tur")) returned 0x20
	[0175.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\quicktime.tur")) returned 0x20
	[0175.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\quicktime.tur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\QuickTime.TUR" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\multimedia\\mpp_tur\\quicktime.tur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.441] SetEvent (hEvent=0xfc) returned 1
	[0175.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\3difr.x3d"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0175.560] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=269200) returned 1
	[0175.561] CloseHandle (hObject=0x238) returned 1
	[0175.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\3difr.x3d")) returned 0x20
	[0175.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\3difr.x3d")) returned 0x20
	[0175.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\3difr.x3d.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins3d\\3difr.x3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.676] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=480) returned 1
	[0175.676] CloseHandle (hObject=0x23c) returned 1
	[0175.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif")) returned 0x20
	[0175.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif")) returned 0x20
	[0175.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\pdf.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.676] SetEvent (hEvent=0xfc) returned 1
	[0175.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.677] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=915) returned 1
	[0175.677] CloseHandle (hObject=0x23c) returned 1
	[0175.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif")) returned 0x20
	[0175.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif")) returned 0x20
	[0175.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\stop_collection_data.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.678] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=906) returned 1
	[0175.678] CloseHandle (hObject=0x23c) returned 1
	[0175.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif")) returned 0x20
	[0175.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif")) returned 0x20
	[0175.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\submission_history.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.680] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85) returned 1
	[0175.680] CloseHandle (hObject=0x23c) returned 1
	[0175.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif")) returned 0x20
	[0175.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif")) returned 0x20
	[0175.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tl.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.680] SetEvent (hEvent=0xfc) returned 1
	[0175.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.681] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85) returned 1
	[0175.681] CloseHandle (hObject=0x23c) returned 1
	[0175.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif")) returned 0x20
	[0175.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif")) returned 0x20
	[0175.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\tr.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.686] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1161) returned 1
	[0175.686] CloseHandle (hObject=0x23c) returned 1
	[0175.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif")) returned 0x20
	[0175.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif")) returned 0x20
	[0175.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\trash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.687] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=824) returned 1
	[0175.687] CloseHandle (hObject=0x23c) returned 1
	[0175.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif")) returned 0x20
	[0175.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif")) returned 0x20
	[0175.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationinacrobat.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.688] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=995) returned 1
	[0175.688] CloseHandle (hObject=0x23c) returned 1
	[0175.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif")) returned 0x20
	[0175.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif")) returned 0x20
	[0175.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnoffnotificationintray.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.689] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=831) returned 1
	[0175.689] CloseHandle (hObject=0x23c) returned 1
	[0175.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif")) returned 0x20
	[0175.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif")) returned 0x20
	[0175.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationinacrobat.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.690] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1002) returned 1
	[0175.690] CloseHandle (hObject=0x23c) returned 1
	[0175.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif")) returned 0x20
	[0175.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif")) returned 0x20
	[0175.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\turnonnotificationintray.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.691] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=369) returned 1
	[0175.691] CloseHandle (hObject=0x23c) returned 1
	[0175.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif")) returned 0x20
	[0175.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif")) returned 0x20
	[0175.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\warning.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ViewerPS.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\viewerps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.692] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17304) returned 1
	[0175.692] CloseHandle (hObject=0x23c) returned 1
	[0175.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ViewerPS.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\viewerps.dll")) returned 0x20
	[0175.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ViewerPS.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\viewerps.dll")) returned 0x20
	[0175.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ViewerPS.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\viewerps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\ViewerPS.dll" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\viewerps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\wow_helper.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\wow_helper.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.693] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73624) returned 1
	[0175.693] CloseHandle (hObject=0x23c) returned 1
	[0175.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\wow_helper.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\wow_helper.exe")) returned 0x20
	[0175.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\wow_helper.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\wow_helper.exe")) returned 0x20
	[0175.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\wow_helper.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\wow_helper.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\wow_helper.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\wow_helper.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readme.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.694] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16758) returned 1
	[0175.694] CloseHandle (hObject=0x23c) returned 1
	[0175.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readme.htm")) returned 0x20
	[0175.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readme.htm")) returned 0x20
	[0175.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readme.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecs.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.697] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16241) returned 1
	[0175.697] CloseHandle (hObject=0x23c) returned 1
	[0175.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecs.htm")) returned 0x20
	[0175.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecs.htm")) returned 0x20
	[0175.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecs.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecs.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmect.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.698] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16289) returned 1
	[0175.698] CloseHandle (hObject=0x23c) returned 1
	[0175.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmect.htm")) returned 0x20
	[0175.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmect.htm")) returned 0x20
	[0175.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmect.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmect.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.700] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17955) returned 1
	[0175.700] CloseHandle (hObject=0x23c) returned 1
	[0175.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm")) returned 0x20
	[0175.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm")) returned 0x20
	[0175.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.700] SetEvent (hEvent=0xfc) returned 1
	[0175.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.701] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17066) returned 1
	[0175.701] CloseHandle (hObject=0x23c) returned 1
	[0175.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm")) returned 0x20
	[0175.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm")) returned 0x20
	[0175.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.702] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17012) returned 1
	[0175.702] CloseHandle (hObject=0x23c) returned 1
	[0175.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm")) returned 0x20
	[0175.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm")) returned 0x20
	[0175.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmej.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.705] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6072) returned 1
	[0175.705] CloseHandle (hObject=0x23c) returned 1
	[0175.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmej.htm")) returned 0x20
	[0175.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmej.htm")) returned 0x20
	[0175.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmej.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmej.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmek.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.706] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16528) returned 1
	[0175.706] CloseHandle (hObject=0x23c) returned 1
	[0175.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmek.htm")) returned 0x20
	[0175.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmek.htm")) returned 0x20
	[0175.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmek.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmek.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.707] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17476) returned 1
	[0175.707] CloseHandle (hObject=0x23c) returned 1
	[0175.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm")) returned 0x20
	[0175.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm")) returned 0x20
	[0175.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.708] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17176) returned 1
	[0175.708] CloseHandle (hObject=0x23c) returned 1
	[0175.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm")) returned 0x20
	[0175.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm")) returned 0x20
	[0175.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.709] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18546) returned 1
	[0175.709] CloseHandle (hObject=0x23c) returned 1
	[0175.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm")) returned 0x20
	[0175.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm")) returned 0x20
	[0175.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0175.823] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17335) returned 1
	[0175.823] CloseHandle (hObject=0x23c) returned 1
	[0175.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm")) returned 0x20
	[0175.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm")) returned 0x20
	[0175.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.823] SetEvent (hEvent=0xfc) returned 1
	[0175.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.913] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2885176) returned 1
	[0175.913] CloseHandle (hObject=0x22c) returned 1
	[0175.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf")) returned 0x20
	[0175.913] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0175.914] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeGothicStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobegothicstd-bold.otf")) returned 0
	[0175.914] SetEvent (hEvent=0xfc) returned 1
	[0175.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.914] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12265424) returned 1
	[0175.914] CloseHandle (hObject=0x22c) returned 1
	[0175.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf")) returned 0x20
	[0175.915] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0175.915] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeHeitiStd-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobeheitistd-regular.otf")) returned 0
	[0175.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.915] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10171656) returned 1
	[0175.915] CloseHandle (hObject=0x22c) returned 1
	[0175.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf")) returned 0x20
	[0175.916] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0175.916] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMingStd-Light.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemingstd-light.otf")) returned 0
	[0175.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.916] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4101108) returned 1
	[0175.916] CloseHandle (hObject=0x22c) returned 1
	[0175.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf")) returned 0x20
	[0175.917] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0175.917] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeMyungjoStd-Medium.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobemyungjostd-medium.otf")) returned 0
	[0175.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.917] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15586660) returned 1
	[0175.917] CloseHandle (hObject=0x22c) returned 1
	[0175.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf")) returned 0x20
	[0175.918] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0175.918] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\AdobeSongStd-Light.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\adobesongstd-light.otf")) returned 0
	[0175.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.918] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5499164) returned 1
	[0175.918] CloseHandle (hObject=0x22c) returned 1
	[0175.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf")) returned 0x20
	[0175.919] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0175.919] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozGoPr6N-Medium.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozgopr6n-medium.otf")) returned 0
	[0175.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.920] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8134748) returned 1
	[0175.920] CloseHandle (hObject=0x22c) returned 1
	[0175.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf")) returned 0x20
	[0175.920] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0175.920] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\KozMinPr6N-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cidfont\\kozminpr6n-regular.otf")) returned 0
	[0175.920] SetEvent (hEvent=0xfc) returned 1
	[0175.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\83pv-rksj-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.922] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7463) returned 1
	[0175.922] CloseHandle (hObject=0x22c) returned 1
	[0175.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\83pv-rksj-h")) returned 0x20
	[0175.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\83pv-rksj-h")) returned 0x20
	[0175.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\83pv-rksj-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\83pv-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\83pv-rksj-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.923] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6398) returned 1
	[0175.923] CloseHandle (hObject=0x22c) returned 1
	[0175.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-h")) returned 0x20
	[0175.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-h")) returned 0x20
	[0175.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-ucs2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.924] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=112126) returned 1
	[0175.924] CloseHandle (hObject=0x22c) returned 1
	[0175.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-ucs2")) returned 0x20
	[0175.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-ucs2")) returned 0x20
	[0175.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-ucs2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-ucs2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.925] SetEvent (hEvent=0xfc) returned 1
	[0175.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.925] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4454) returned 1
	[0175.925] CloseHandle (hObject=0x22c) returned 1
	[0175.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-v")) returned 0x20
	[0175.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-v")) returned 0x20
	[0175.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90ms-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90ms-rksj-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.926] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6327) returned 1
	[0175.926] CloseHandle (hObject=0x22c) returned 1
	[0175.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-h")) returned 0x20
	[0175.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-h")) returned 0x20
	[0175.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.927] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4436) returned 1
	[0175.927] CloseHandle (hObject=0x22c) returned 1
	[0175.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-v")) returned 0x20
	[0175.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-v")) returned 0x20
	[0175.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90msp-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90msp-rksj-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.929] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8239) returned 1
	[0175.929] CloseHandle (hObject=0x22c) returned 1
	[0175.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-h")) returned 0x20
	[0175.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-h")) returned 0x20
	[0175.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.929] SetEvent (hEvent=0xfc) returned 1
	[0175.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.930] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1854) returned 1
	[0175.930] CloseHandle (hObject=0x22c) returned 1
	[0175.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2")) returned 0x20
	[0175.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2")) returned 0x20
	[0175.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2c"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.931] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=102591) returned 1
	[0175.931] CloseHandle (hObject=0x22c) returned 1
	[0175.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2c")) returned 0x20
	[0175.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2c")) returned 0x20
	[0175.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2c.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\90pv-RKSJ-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\90pv-rksj-ucs2c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.933] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15845) returned 1
	[0175.933] CloseHandle (hObject=0x22c) returned 1
	[0175.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-h")) returned 0x20
	[0175.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-h")) returned 0x20
	[0175.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.933] SetEvent (hEvent=0xfc) returned 1
	[0175.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.934] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4027) returned 1
	[0175.934] CloseHandle (hObject=0x22c) returned 1
	[0175.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-v")) returned 0x20
	[0175.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-v")) returned 0x20
	[0175.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Add-RKSJ-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\add-rksj-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-0"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.935] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4034) returned 1
	[0175.935] CloseHandle (hObject=0x22c) returned 1
	[0175.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-0")) returned 0x20
	[0175.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-0")) returned 0x20
	[0175.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-0.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.936] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4218) returned 1
	[0175.936] CloseHandle (hObject=0x22c) returned 1
	[0175.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-1")) returned 0x20
	[0175.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-1")) returned 0x20
	[0175.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-1.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.937] SetEvent (hEvent=0xfc) returned 1
	[0175.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.937] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4239) returned 1
	[0175.937] CloseHandle (hObject=0x22c) returned 1
	[0175.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-2")) returned 0x20
	[0175.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-2")) returned 0x20
	[0175.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.938] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4344) returned 1
	[0175.938] CloseHandle (hObject=0x22c) returned 1
	[0175.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-3")) returned 0x20
	[0175.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-3")) returned 0x20
	[0175.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-3.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-4"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.939] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4365) returned 1
	[0175.940] CloseHandle (hObject=0x22c) returned 1
	[0175.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-4")) returned 0x20
	[0175.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-4")) returned 0x20
	[0175.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-4.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-5"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.940] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4365) returned 1
	[0175.941] CloseHandle (hObject=0x22c) returned 1
	[0175.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-5")) returned 0x20
	[0175.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-5")) returned 0x20
	[0175.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-5.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-b5pc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.942] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7955) returned 1
	[0175.942] CloseHandle (hObject=0x22c) returned 1
	[0175.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-b5pc")) returned 0x20
	[0175.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-b5pc")) returned 0x20
	[0175.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-b5pc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-B5pc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-b5pc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.943] SetEvent (hEvent=0xfc) returned 1
	[0175.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-eten-b5"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.943] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8375) returned 1
	[0175.943] CloseHandle (hObject=0x22c) returned 1
	[0175.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-eten-b5")) returned 0x20
	[0175.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-eten-b5")) returned 0x20
	[0175.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-eten-b5.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-ETen-B5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-eten-b5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-cid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.944] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1973) returned 1
	[0175.944] CloseHandle (hObject=0x22c) returned 1
	[0175.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-cid")) returned 0x20
	[0175.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-cid")) returned 0x20
	[0175.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-cid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-cid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-host"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0175.945] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8490) returned 1
	[0175.945] CloseHandle (hObject=0x22c) returned 1
	[0175.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-host")) returned 0x20
	[0175.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-host")) returned 0x20
	[0175.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-host.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0175.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-host"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0175.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-mac"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.145] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8022) returned 1
	[0176.145] CloseHandle (hObject=0x230) returned 1
	[0176.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-mac")) returned 0x20
	[0176.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-mac")) returned 0x20
	[0176.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-mac.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-CNS1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-cns1-h-mac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.145] SetEvent (hEvent=0xfc) returned 1
	[0176.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-0"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.146] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3472) returned 1
	[0176.146] CloseHandle (hObject=0x230) returned 1
	[0176.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-0")) returned 0x20
	[0176.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-0")) returned 0x20
	[0176.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-0.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.202] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3634) returned 1
	[0176.202] CloseHandle (hObject=0x230) returned 1
	[0176.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-1")) returned 0x20
	[0176.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-1")) returned 0x20
	[0176.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-1.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.202] SetEvent (hEvent=0xfc) returned 1
	[0176.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.203] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4636) returned 1
	[0176.203] CloseHandle (hObject=0x230) returned 1
	[0176.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-2")) returned 0x20
	[0176.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-2")) returned 0x20
	[0176.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.204] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4635) returned 1
	[0176.204] CloseHandle (hObject=0x230) returned 1
	[0176.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-3")) returned 0x20
	[0176.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-3")) returned 0x20
	[0176.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-3.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-3" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-4"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.205] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5217) returned 1
	[0176.205] CloseHandle (hObject=0x230) returned 1
	[0176.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-4")) returned 0x20
	[0176.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-4")) returned 0x20
	[0176.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-4.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-4" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-5"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.206] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5322) returned 1
	[0176.206] CloseHandle (hObject=0x230) returned 1
	[0176.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-5")) returned 0x20
	[0176.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-5")) returned 0x20
	[0176.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-5.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbk-euc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.207] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=93830) returned 1
	[0176.207] CloseHandle (hObject=0x230) returned 1
	[0176.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbk-euc")) returned 0x20
	[0176.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbk-euc")) returned 0x20
	[0176.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbk-euc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBK-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbk-euc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbpc-euc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.208] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4226) returned 1
	[0176.208] CloseHandle (hObject=0x230) returned 1
	[0176.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbpc-euc")) returned 0x20
	[0176.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbpc-euc")) returned 0x20
	[0176.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbpc-euc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-GBpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-gbpc-euc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-cid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.210] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2092) returned 1
	[0176.210] CloseHandle (hObject=0x230) returned 1
	[0176.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-cid")) returned 0x20
	[0176.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-cid")) returned 0x20
	[0176.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-cid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-cid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.210] SetEvent (hEvent=0xfc) returned 1
	[0176.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-host"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.211] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94436) returned 1
	[0176.211] CloseHandle (hObject=0x230) returned 1
	[0176.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-host")) returned 0x20
	[0176.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-host")) returned 0x20
	[0176.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-host.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-host"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-mac"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.212] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4207) returned 1
	[0176.212] CloseHandle (hObject=0x230) returned 1
	[0176.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-mac")) returned 0x20
	[0176.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-mac")) returned 0x20
	[0176.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-mac.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-h-mac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-ucs2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.213] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=244619) returned 1
	[0176.213] CloseHandle (hObject=0x230) returned 1
	[0176.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-ucs2")) returned 0x20
	[0176.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-ucs2")) returned 0x20
	[0176.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-ucs2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-GB1-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-gb1-ucs2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-0"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.320] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3523) returned 1
	[0176.320] CloseHandle (hObject=0x230) returned 1
	[0176.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-0")) returned 0x20
	[0176.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-0")) returned 0x20
	[0176.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-0.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Japan1-0" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-japan1-0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.320] SetEvent (hEvent=0xfc) returned 1
	[0176.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.321] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4309) returned 1
	[0176.321] CloseHandle (hObject=0x230) returned 1
	[0176.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-1")) returned 0x20
	[0176.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-1")) returned 0x20
	[0176.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-1.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-1" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.322] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4308) returned 1
	[0176.322] CloseHandle (hObject=0x230) returned 1
	[0176.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-2")) returned 0x20
	[0176.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-2")) returned 0x20
	[0176.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-cid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.324] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1642) returned 1
	[0176.324] CloseHandle (hObject=0x230) returned 1
	[0176.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-cid")) returned 0x20
	[0176.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-cid")) returned 0x20
	[0176.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-cid.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-CID" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-cid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.324] SetEvent (hEvent=0xfc) returned 1
	[0176.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-host"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.325] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16064) returned 1
	[0176.325] CloseHandle (hObject=0x230) returned 1
	[0176.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-host")) returned 0x20
	[0176.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-host")) returned 0x20
	[0176.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-host.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Host" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-host"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-mac"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.326] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11427) returned 1
	[0176.326] CloseHandle (hObject=0x230) returned 1
	[0176.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-mac")) returned 0x20
	[0176.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-mac")) returned 0x20
	[0176.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-mac.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-H-Mac" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-h-mac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscms-uhc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0176.460] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15858) returned 1
	[0176.460] CloseHandle (hObject=0x22c) returned 1
	[0176.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscms-uhc")) returned 0x20
	[0176.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscms-uhc")) returned 0x20
	[0176.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscms-uhc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\Adobe-Korea1-KSCms-UHC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\adobe-korea1-kscms-uhc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.460] SetEvent (hEvent=0xfc) returned 1
	[0176.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0176.461] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=87424) returned 1
	[0176.461] CloseHandle (hObject=0x22c) returned 1
	[0176.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-h")) returned 0x20
	[0176.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-h")) returned 0x20
	[0176.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-H" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.462] SetEvent (hEvent=0xfc) returned 1
	[0176.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.569] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3261) returned 1
	[0176.569] CloseHandle (hObject=0x230) returned 1
	[0176.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-v")) returned 0x20
	[0176.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-v")) returned 0x20
	[0176.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBKp-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbkp-euc-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.570] SetEvent (hEvent=0xfc) returned 1
	[0176.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.570] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1312) returned 1
	[0176.570] CloseHandle (hObject=0x230) returned 1
	[0176.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2")) returned 0x20
	[0176.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2")) returned 0x20
	[0176.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2c"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0176.571] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=148118) returned 1
	[0176.571] CloseHandle (hObject=0x230) returned 1
	[0176.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2c")) returned 0x20
	[0176.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2c")) returned 0x20
	[0176.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2c.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-UCS2C" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-ucs2c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-v"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.709] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3279) returned 1
	[0176.710] CloseHandle (hObject=0x210) returned 1
	[0176.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-v")) returned 0x20
	[0176.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-v")) returned 0x20
	[0176.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-v.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\GBpc-EUC-V" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\gbpc-euc-v"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.710] SetEvent (hEvent=0xfc) returned 1
	[0176.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90pv-rksj"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.711] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=148339) returned 1
	[0176.711] CloseHandle (hObject=0x210) returned 1
	[0176.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90pv-rksj")) returned 0x20
	[0176.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90pv-rksj")) returned 0x20
	[0176.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90pv-rksj.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-90pv-RKSJ" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-90pv-rksj"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-b5pc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.712] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=284931) returned 1
	[0176.712] CloseHandle (hObject=0x210) returned 1
	[0176.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-b5pc")) returned 0x20
	[0176.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-b5pc")) returned 0x20
	[0176.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-b5pc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-B5pc" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-b5pc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-eten-b5"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.714] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=299283) returned 1
	[0176.714] CloseHandle (hObject=0x210) returned 1
	[0176.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-eten-b5")) returned 0x20
	[0176.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-eten-b5")) returned 0x20
	[0176.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-eten-b5.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-ETen-B5" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-eten-b5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.714] SetEvent (hEvent=0xfc) returned 1
	[0176.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbk-euc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0176.715] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=243835) returned 1
	[0176.715] CloseHandle (hObject=0x210) returned 1
	[0176.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbk-euc")) returned 0x20
	[0176.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbk-euc")) returned 0x20
	[0176.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbk-euc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBK-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbk-euc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbpc-euc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.881] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=197163) returned 1
	[0176.881] CloseHandle (hObject=0x168) returned 1
	[0176.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbpc-euc")) returned 0x20
	[0176.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbpc-euc")) returned 0x20
	[0176.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbpc-euc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\UCS2-GBpc-EUC" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\cmap\\ucs2-gbpc-euc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.881] SetEvent (hEvent=0xfc) returned 1
	[0176.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bold.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.883] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=69196) returned 1
	[0176.883] CloseHandle (hObject=0x168) returned 1
	[0176.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bold.otf")) returned 0x20
	[0176.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bold.otf")) returned 0x20
	[0176.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bold.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.883] SetEvent (hEvent=0xfc) returned 1
	[0176.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bolditalic.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.884] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=72400) returned 1
	[0176.884] CloseHandle (hObject=0x168) returned 1
	[0176.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bolditalic.otf")) returned 0x20
	[0176.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bolditalic.otf")) returned 0x20
	[0176.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bolditalic.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-BoldItalic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-bolditalic.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.885] SetEvent (hEvent=0xfc) returned 1
	[0176.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-italic.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.885] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=72300) returned 1
	[0176.885] CloseHandle (hObject=0x168) returned 1
	[0176.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-italic.otf")) returned 0x20
	[0176.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-italic.otf")) returned 0x20
	[0176.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-italic.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Italic.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-italic.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-regular.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0176.886] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70528) returned 1
	[0176.886] CloseHandle (hObject=0x168) returned 1
	[0176.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-regular.otf")) returned 0x20
	[0176.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-regular.otf")) returned 0x20
	[0176.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-regular.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0176.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobeHebrew-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobehebrew-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0176.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobepistd.otf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0177.989] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89660) returned 1
	[0177.989] CloseHandle (hObject=0x210) returned 1
	[0177.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobepistd.otf")) returned 0x20
	[0177.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobepistd.otf")) returned 0x20
	[0177.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobepistd.otf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0177.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\font\\adobepistd.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0177.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.550] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27798) returned 1
	[0178.550] CloseHandle (hObject=0x228) returned 1
	[0178.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt")) returned 0x20
	[0178.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt")) returned 0x20
	[0178.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.551] SetEvent (hEvent=0xfc) returned 1
	[0178.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.552] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28296) returned 1
	[0178.552] CloseHandle (hObject=0x228) returned 1
	[0178.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt")) returned 0x20
	[0178.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt")) returned 0x20
	[0178.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0178.553] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28296) returned 1
	[0178.553] CloseHandle (hObject=0x228) returned 1
	[0178.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt")) returned 0x20
	[0178.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt")) returned 0x20
	[0178.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.556] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28296) returned 1
	[0178.556] CloseHandle (hObject=0x20c) returned 1
	[0178.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt")) returned 0x20
	[0178.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt")) returned 0x20
	[0178.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.557] SetEvent (hEvent=0xfc) returned 1
	[0178.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.558] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28296) returned 1
	[0178.558] CloseHandle (hObject=0x20c) returned 1
	[0178.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt")) returned 0x20
	[0178.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt")) returned 0x20
	[0178.558] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.559] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28356) returned 1
	[0178.559] CloseHandle (hObject=0x20c) returned 1
	[0178.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt")) returned 0x20
	[0178.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt")) returned 0x20
	[0178.559] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.564] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28360) returned 1
	[0178.564] CloseHandle (hObject=0x214) returned 1
	[0178.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt")) returned 0x20
	[0178.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt")) returned 0x20
	[0178.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.565] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28360) returned 1
	[0178.565] CloseHandle (hObject=0x214) returned 1
	[0178.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt")) returned 0x20
	[0178.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt")) returned 0x20
	[0178.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.566] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28360) returned 1
	[0178.566] CloseHandle (hObject=0x214) returned 1
	[0178.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt")) returned 0x20
	[0178.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt")) returned 0x20
	[0178.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0178.567] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28368) returned 1
	[0178.567] CloseHandle (hObject=0x214) returned 1
	[0178.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt")) returned 0x20
	[0178.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt")) returned 0x20
	[0178.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0178.826] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28360) returned 1
	[0178.826] CloseHandle (hObject=0x168) returned 1
	[0178.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt")) returned 0x20
	[0178.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt")) returned 0x20
	[0178.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.827] SetEvent (hEvent=0xfc) returned 1
	[0178.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0178.827] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28158) returned 1
	[0178.827] CloseHandle (hObject=0x168) returned 1
	[0178.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt")) returned 0x20
	[0178.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt")) returned 0x20
	[0178.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0178.828] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28296) returned 1
	[0178.828] CloseHandle (hObject=0x168) returned 1
	[0178.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt")) returned 0x20
	[0178.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt")) returned 0x20
	[0178.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0178.833] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28302) returned 1
	[0178.833] CloseHandle (hObject=0x168) returned 1
	[0178.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt")) returned 0x20
	[0178.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt")) returned 0x20
	[0178.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.834] SetEvent (hEvent=0xfc) returned 1
	[0178.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0178.834] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28296) returned 1
	[0178.834] CloseHandle (hObject=0x168) returned 1
	[0178.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt")) returned 0x20
	[0178.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt")) returned 0x20
	[0178.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0178.835] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28302) returned 1
	[0178.835] CloseHandle (hObject=0x168) returned 1
	[0178.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt")) returned 0x20
	[0178.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt")) returned 0x20
	[0178.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.836] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0178.836] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25962) returned 1
	[0178.836] CloseHandle (hObject=0x168) returned 1
	[0178.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt")) returned 0x20
	[0178.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt")) returned 0x20
	[0178.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.839] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25962) returned 1
	[0178.839] CloseHandle (hObject=0x20c) returned 1
	[0178.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt")) returned 0x20
	[0178.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt")) returned 0x20
	[0178.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.840] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26004) returned 1
	[0178.840] CloseHandle (hObject=0x20c) returned 1
	[0178.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt")) returned 0x20
	[0178.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt")) returned 0x20
	[0178.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.841] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25194) returned 1
	[0178.841] CloseHandle (hObject=0x20c) returned 1
	[0178.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt")) returned 0x20
	[0178.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt")) returned 0x20
	[0178.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0178.842] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25194) returned 1
	[0178.842] CloseHandle (hObject=0x20c) returned 1
	[0178.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt")) returned 0x20
	[0178.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt")) returned 0x20
	[0178.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0178.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0178.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0179.144] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27626) returned 1
	[0179.144] CloseHandle (hObject=0x200) returned 1
	[0179.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt")) returned 0x20
	[0179.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt")) returned 0x20
	[0179.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.145] SetEvent (hEvent=0xfc) returned 1
	[0179.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.353] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32756) returned 1
	[0179.353] CloseHandle (hObject=0x20c) returned 1
	[0179.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara32.clx")) returned 0x20
	[0179.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara32.clx")) returned 0x20
	[0179.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ara32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ara32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can03.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.354] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=662528) returned 1
	[0179.354] CloseHandle (hObject=0x20c) returned 1
	[0179.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can03.ths")) returned 0x20
	[0179.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can03.ths")) returned 0x20
	[0179.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can03.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can03.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can03.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can129.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.355] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=285757) returned 1
	[0179.355] CloseHandle (hObject=0x20c) returned 1
	[0179.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can129.hsp")) returned 0x20
	[0179.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can129.hsp")) returned 0x20
	[0179.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can129.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can129.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can129.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.357] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32766) returned 1
	[0179.357] CloseHandle (hObject=0x20c) returned 1
	[0179.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can32.clx")) returned 0x20
	[0179.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can32.clx")) returned 0x20
	[0179.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\can32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\can32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.359] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1780) returned 1
	[0179.359] CloseHandle (hObject=0x20c) returned 1
	[0179.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.fca")) returned 0x20
	[0179.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.fca")) returned 0x20
	[0179.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.361] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0179.361] CloseHandle (hObject=0x20c) returned 1
	[0179.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.hyp")) returned 0x20
	[0179.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.hyp")) returned 0x20
	[0179.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.363] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32766) returned 1
	[0179.363] CloseHandle (hObject=0x20c) returned 1
	[0179.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr32.clx")) returned 0x20
	[0179.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr32.clx")) returned 0x20
	[0179.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr68.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.364] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=238161) returned 1
	[0179.364] CloseHandle (hObject=0x20c) returned 1
	[0179.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr68.hsp")) returned 0x20
	[0179.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr68.hsp")) returned 0x20
	[0179.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr68.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr68.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr68.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr95.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.365] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=313344) returned 1
	[0179.365] CloseHandle (hObject=0x20c) returned 1
	[0179.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr95.ths")) returned 0x20
	[0179.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr95.ths")) returned 0x20
	[0179.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr95.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cfr95.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cfr95.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.367] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=788) returned 1
	[0179.367] CloseHandle (hObject=0x20c) returned 1
	[0179.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.fca")) returned 0x20
	[0179.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.fca")) returned 0x20
	[0179.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.368] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9216) returned 1
	[0179.368] CloseHandle (hObject=0x20c) returned 1
	[0179.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.hyp")) returned 0x20
	[0179.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.hyp")) returned 0x20
	[0179.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl28.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.369] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=284831) returned 1
	[0179.369] CloseHandle (hObject=0x20c) returned 1
	[0179.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl28.hsp")) returned 0x20
	[0179.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl28.hsp")) returned 0x20
	[0179.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl28.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl28.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl28.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0179.370] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32767) returned 1
	[0179.370] CloseHandle (hObject=0x20c) returned 1
	[0179.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl32.clx")) returned 0x20
	[0179.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl32.clx")) returned 0x20
	[0179.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\ctl32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\ctl32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.748] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=736) returned 1
	[0179.748] CloseHandle (hObject=0x168) returned 1
	[0179.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.fca")) returned 0x20
	[0179.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.fca")) returned 0x20
	[0179.748] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\cze.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\cze.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.749] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4137) returned 1
	[0179.749] CloseHandle (hObject=0x168) returned 1
	[0179.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env")) returned 0x20
	[0179.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env")) returned 0x20
	[0179.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\estphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\estphon.env"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.750] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.750] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26624) returned 1
	[0179.750] CloseHandle (hObject=0x168) returned 1
	[0179.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin.hyp")) returned 0x20
	[0179.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin.hyp")) returned 0x20
	[0179.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.751] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.751] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32762) returned 1
	[0179.751] CloseHandle (hObject=0x168) returned 1
	[0179.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin32.clx")) returned 0x20
	[0179.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin32.clx")) returned 0x20
	[0179.752] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.752] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin49.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.752] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=676864) returned 1
	[0179.753] CloseHandle (hObject=0x168) returned 1
	[0179.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin49.lex")) returned 0x20
	[0179.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin49.lex")) returned 0x20
	[0179.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin49.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\fin49.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\fin49.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.754] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3405) returned 1
	[0179.754] CloseHandle (hObject=0x168) returned 1
	[0179.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env")) returned 0x20
	[0179.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env")) returned 0x20
	[0179.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\finphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\finphon.env"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.755] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1780) returned 1
	[0179.755] CloseHandle (hObject=0x168) returned 1
	[0179.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.fca")) returned 0x20
	[0179.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.fca")) returned 0x20
	[0179.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.756] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0179.756] CloseHandle (hObject=0x168) returned 1
	[0179.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.hyp")) returned 0x20
	[0179.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.hyp")) returned 0x20
	[0179.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn21.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.757] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=279168) returned 1
	[0179.757] CloseHandle (hObject=0x168) returned 1
	[0179.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn21.hsp")) returned 0x20
	[0179.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn21.hsp")) returned 0x20
	[0179.757] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn21.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn21.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn21.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.758] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32758) returned 1
	[0179.758] CloseHandle (hObject=0x168) returned 1
	[0179.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn32.clx")) returned 0x20
	[0179.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn32.clx")) returned 0x20
	[0179.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn93.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.759] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=313344) returned 1
	[0179.759] CloseHandle (hObject=0x168) returned 1
	[0179.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn93.ths")) returned 0x20
	[0179.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn93.ths")) returned 0x20
	[0179.759] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn93.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.759] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\frn93.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\frn93.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.760] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=672) returned 1
	[0179.760] CloseHandle (hObject=0x168) returned 1
	[0179.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.fca")) returned 0x20
	[0179.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.fca")) returned 0x20
	[0179.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.760] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.762] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2048) returned 1
	[0179.762] CloseHandle (hObject=0x168) returned 1
	[0179.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.hyp")) returned 0x20
	[0179.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.hyp")) returned 0x20
	[0179.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre110.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.763] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=298421) returned 1
	[0179.763] CloseHandle (hObject=0x168) returned 1
	[0179.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre110.hsp")) returned 0x20
	[0179.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre110.hsp")) returned 0x20
	[0179.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre110.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre110.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre110.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.764] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32737) returned 1
	[0179.764] CloseHandle (hObject=0x168) returned 1
	[0179.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre32.clx")) returned 0x20
	[0179.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre32.clx")) returned 0x20
	[0179.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\gre32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\gre32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.765] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.766] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1436) returned 1
	[0179.766] CloseHandle (hObject=0x168) returned 1
	[0179.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.fca")) returned 0x20
	[0179.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.fca")) returned 0x20
	[0179.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.767] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46080) returned 1
	[0179.767] CloseHandle (hObject=0x168) returned 1
	[0179.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.hyp")) returned 0x20
	[0179.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.hyp")) returned 0x20
	[0179.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm104.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.769] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=625399) returned 1
	[0179.769] CloseHandle (hObject=0x168) returned 1
	[0179.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm104.hsp")) returned 0x20
	[0179.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm104.hsp")) returned 0x20
	[0179.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm104.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm104.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm104.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.770] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32768) returned 1
	[0179.770] CloseHandle (hObject=0x168) returned 1
	[0179.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm32.clx")) returned 0x20
	[0179.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm32.clx")) returned 0x20
	[0179.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm92.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.771] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=789504) returned 1
	[0179.772] CloseHandle (hObject=0x168) returned 1
	[0179.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm92.ths")) returned 0x20
	[0179.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm92.ths")) returned 0x20
	[0179.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm92.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\grm92.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\grm92.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.773] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=624) returned 1
	[0179.773] CloseHandle (hObject=0x168) returned 1
	[0179.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.fca")) returned 0x20
	[0179.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.fca")) returned 0x20
	[0179.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.774] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0179.774] CloseHandle (hObject=0x168) returned 1
	[0179.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.hyp")) returned 0x20
	[0179.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.hyp")) returned 0x20
	[0179.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb134.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.775] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=739294) returned 1
	[0179.775] CloseHandle (hObject=0x168) returned 1
	[0179.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb134.hsp")) returned 0x20
	[0179.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb134.hsp")) returned 0x20
	[0179.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb134.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb134.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb134.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.776] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32767) returned 1
	[0179.776] CloseHandle (hObject=0x168) returned 1
	[0179.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb32.clx")) returned 0x20
	[0179.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb32.clx")) returned 0x20
	[0179.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\heb32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\heb32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.777] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0179.777] CloseHandle (hObject=0x168) returned 1
	[0179.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv.hyp")) returned 0x20
	[0179.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv.hyp")) returned 0x20
	[0179.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv132.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.778] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=618496) returned 1
	[0179.778] CloseHandle (hObject=0x168) returned 1
	[0179.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv132.lex")) returned 0x20
	[0179.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv132.lex")) returned 0x20
	[0179.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv132.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv132.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv132.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0179.781] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32766) returned 1
	[0179.781] CloseHandle (hObject=0x168) returned 1
	[0179.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv32.clx")) returned 0x20
	[0179.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv32.clx")) returned 0x20
	[0179.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0179.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hrv32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hrv32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0179.966] SetEvent (hEvent=0xfc) returned 1
	[0179.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.080] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=114688) returned 1
	[0180.080] CloseHandle (hObject=0x200) returned 1
	[0180.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.hyp")) returned 0x20
	[0180.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.hyp")) returned 0x20
	[0180.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.081] SetEvent (hEvent=0xfc) returned 1
	[0180.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun109.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.082] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=650936) returned 1
	[0180.082] CloseHandle (hObject=0x200) returned 1
	[0180.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun109.hsp")) returned 0x20
	[0180.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun109.hsp")) returned 0x20
	[0180.082] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun109.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun109.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun109.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.083] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32754) returned 1
	[0180.083] CloseHandle (hObject=0x200) returned 1
	[0180.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun32.clx")) returned 0x20
	[0180.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun32.clx")) returned 0x20
	[0180.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\hun32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\hun32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.fca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.084] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1004) returned 1
	[0180.084] CloseHandle (hObject=0x200) returned 1
	[0180.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.fca")) returned 0x20
	[0180.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.fca")) returned 0x20
	[0180.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.fca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.fca" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.fca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.086] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0180.086] CloseHandle (hObject=0x200) returned 1
	[0180.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.hyp")) returned 0x20
	[0180.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.hyp")) returned 0x20
	[0180.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.086] SetEvent (hEvent=0xfc) returned 1
	[0180.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl26.hsp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.087] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=192484) returned 1
	[0180.087] CloseHandle (hObject=0x200) returned 1
	[0180.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl26.hsp")) returned 0x20
	[0180.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl26.hsp")) returned 0x20
	[0180.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl26.hsp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl26.hsp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl26.hsp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.088] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32763) returned 1
	[0180.088] CloseHandle (hObject=0x200) returned 1
	[0180.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl32.clx")) returned 0x20
	[0180.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl32.clx")) returned 0x20
	[0180.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl61.ths"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.089] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=188416) returned 1
	[0180.089] CloseHandle (hObject=0x200) returned 1
	[0180.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl61.ths")) returned 0x20
	[0180.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl61.ths")) returned 0x20
	[0180.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl61.ths.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\itl61.ths" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\itl61.ths"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0180.090] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13312) returned 1
	[0180.090] CloseHandle (hObject=0x200) returned 1
	[0180.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav.hyp")) returned 0x20
	[0180.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav.hyp")) returned 0x20
	[0180.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.092] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav135.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.095] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=184320) returned 1
	[0180.095] CloseHandle (hObject=0x168) returned 1
	[0180.095] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav135.lex")) returned 0x20
	[0180.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav135.lex")) returned 0x20
	[0180.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav135.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav135.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav135.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav32.clx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.096] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32754) returned 1
	[0180.096] CloseHandle (hObject=0x168) returned 1
	[0180.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav32.clx")) returned 0x20
	[0180.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav32.clx")) returned 0x20
	[0180.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav32.clx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lav32.clx" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lav32.clx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.097] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2028) returned 1
	[0180.098] CloseHandle (hObject=0x168) returned 1
	[0180.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env")) returned 0x20
	[0180.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env")) returned 0x20
	[0180.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lavphon.env" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lavphon.env"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit.hyp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0180.099] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16384) returned 1
	[0180.099] CloseHandle (hObject=0x168) returned 1
	[0180.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit.hyp")) returned 0x20
	[0180.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit.hyp")) returned 0x20
	[0180.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit.hyp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit.hyp" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit.hyp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit136.lex"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0180.315] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=473088) returned 1
	[0180.316] CloseHandle (hObject=0x214) returned 1
	[0180.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit136.lex")) returned 0x20
	[0180.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit136.lex")) returned 0x20
	[0180.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit136.lex.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\lit136.lex" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\providers\\proximity\\11.00\\lit136.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.582] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=203429) returned 1
	[0180.582] CloseHandle (hObject=0x228) returned 1
	[0180.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt")) returned 0x20
	[0180.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt")) returned 0x20
	[0180.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CHINSIMP.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\chinsimp.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.583] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=365007) returned 1
	[0180.583] CloseHandle (hObject=0x228) returned 1
	[0180.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt")) returned 0x20
	[0180.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt")) returned 0x20
	[0180.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\KOREAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\korean.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.584] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14423) returned 1
	[0180.584] CloseHandle (hObject=0x228) returned 1
	[0180.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt")) returned 0x20
	[0180.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt")) returned 0x20
	[0180.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.585] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14792) returned 1
	[0180.585] CloseHandle (hObject=0x228) returned 1
	[0180.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt")) returned 0x20
	[0180.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt")) returned 0x20
	[0180.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.586] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15731) returned 1
	[0180.586] CloseHandle (hObject=0x228) returned 1
	[0180.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt")) returned 0x20
	[0180.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt")) returned 0x20
	[0180.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.587] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15301) returned 1
	[0180.587] CloseHandle (hObject=0x228) returned 1
	[0180.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt")) returned 0x20
	[0180.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt")) returned 0x20
	[0180.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\THAI.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\thai.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.588] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12825) returned 1
	[0180.588] CloseHandle (hObject=0x228) returned 1
	[0180.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt")) returned 0x20
	[0180.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt")) returned 0x20
	[0180.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.593] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4634) returned 1
	[0180.593] CloseHandle (hObject=0x228) returned 1
	[0180.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt")) returned 0x20
	[0180.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt")) returned 0x20
	[0180.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.595] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9828) returned 1
	[0180.595] CloseHandle (hObject=0x228) returned 1
	[0180.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt")) returned 0x20
	[0180.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt")) returned 0x20
	[0180.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.596] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9503) returned 1
	[0180.596] CloseHandle (hObject=0x228) returned 1
	[0180.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt")) returned 0x20
	[0180.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt")) returned 0x20
	[0180.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.597] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9653) returned 1
	[0180.597] CloseHandle (hObject=0x228) returned 1
	[0180.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt")) returned 0x20
	[0180.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt")) returned 0x20
	[0180.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.598] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9236) returned 1
	[0180.598] CloseHandle (hObject=0x228) returned 1
	[0180.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt")) returned 0x20
	[0180.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt")) returned 0x20
	[0180.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.599] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9644) returned 1
	[0180.600] CloseHandle (hObject=0x228) returned 1
	[0180.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt")) returned 0x20
	[0180.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt")) returned 0x20
	[0180.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.601] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8602) returned 1
	[0180.601] CloseHandle (hObject=0x228) returned 1
	[0180.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt")) returned 0x20
	[0180.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt")) returned 0x20
	[0180.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1255.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1255.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.602] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8955) returned 1
	[0180.602] CloseHandle (hObject=0x228) returned 1
	[0180.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt")) returned 0x20
	[0180.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt")) returned 0x20
	[0180.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1256.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1256.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.603] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9516) returned 1
	[0180.603] CloseHandle (hObject=0x228) returned 1
	[0180.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt")) returned 0x20
	[0180.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt")) returned 0x20
	[0180.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.604] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9506) returned 1
	[0180.604] CloseHandle (hObject=0x228) returned 1
	[0180.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt")) returned 0x20
	[0180.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt")) returned 0x20
	[0180.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.605] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8737) returned 1
	[0180.605] CloseHandle (hObject=0x228) returned 1
	[0180.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt")) returned 0x20
	[0180.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt")) returned 0x20
	[0180.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP874.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp874.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.606] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=303346) returned 1
	[0180.606] CloseHandle (hObject=0x228) returned 1
	[0180.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt")) returned 0x20
	[0180.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt")) returned 0x20
	[0180.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP932.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp932.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.607] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=839399) returned 1
	[0180.607] CloseHandle (hObject=0x228) returned 1
	[0180.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt")) returned 0x20
	[0180.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt")) returned 0x20
	[0180.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP936.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp936.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0180.753] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=808082) returned 1
	[0180.753] CloseHandle (hObject=0x228) returned 1
	[0180.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt")) returned 0x20
	[0180.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt")) returned 0x20
	[0180.753] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0180.753] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP949.TXT" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\win\\cp949.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0180.754] SetEvent (hEvent=0xfc) returned 1
	[0180.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1033.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.128] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0181.128] CloseHandle (hObject=0x23c) returned 1
	[0181.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1033.mst")) returned 0x21
	[0181.129] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", dwFileAttributes=0x20) returned 0
	[0181.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1033.mst")) returned 0x21
	[0181.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1033.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1033.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.129] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1033.mst", dwFileAttributes=0x21) returned 0
	[0181.129] SetEvent (hEvent=0xfc) returned 1
	[0181.129] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1053.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.130] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46080) returned 1
	[0181.130] CloseHandle (hObject=0x23c) returned 1
	[0181.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1053.mst")) returned 0x21
	[0181.130] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", dwFileAttributes=0x20) returned 0
	[0181.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1053.mst")) returned 0x21
	[0181.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1053.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1053.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.130] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1053.mst", dwFileAttributes=0x21) returned 0
	[0181.130] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1055.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.131] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37376) returned 1
	[0181.131] CloseHandle (hObject=0x23c) returned 1
	[0181.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1055.mst")) returned 0x21
	[0181.131] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", dwFileAttributes=0x20) returned 0
	[0181.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1055.mst")) returned 0x21
	[0181.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1055.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1055.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.131] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1055.mst", dwFileAttributes=0x21) returned 0
	[0181.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1058.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.132] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37376) returned 1
	[0181.132] CloseHandle (hObject=0x23c) returned 1
	[0181.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1058.mst")) returned 0x21
	[0181.132] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", dwFileAttributes=0x20) returned 0
	[0181.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1058.mst")) returned 0x21
	[0181.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1058.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1058.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.133] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1058.mst", dwFileAttributes=0x21) returned 0
	[0181.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1060.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.135] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38400) returned 1
	[0181.135] CloseHandle (hObject=0x23c) returned 1
	[0181.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1060.mst")) returned 0x21
	[0181.135] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", dwFileAttributes=0x20) returned 0
	[0181.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1060.mst")) returned 0x21
	[0181.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1060.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1060.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.136] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1060.mst", dwFileAttributes=0x21) returned 0
	[0181.136] SetEvent (hEvent=0xfc) returned 1
	[0181.136] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1069.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.136] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40448) returned 1
	[0181.136] CloseHandle (hObject=0x23c) returned 1
	[0181.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1069.mst")) returned 0x21
	[0181.137] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", dwFileAttributes=0x20) returned 0
	[0181.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1069.mst")) returned 0x21
	[0181.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1069.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\1069.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.137] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\1069.mst", dwFileAttributes=0x21) returned 0
	[0181.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\2052.mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.139] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35840) returned 1
	[0181.139] CloseHandle (hObject=0x23c) returned 1
	[0181.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\2052.mst")) returned 0x21
	[0181.139] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", dwFileAttributes=0x20) returned 0
	[0181.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\2052.mst")) returned 0x21
	[0181.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\2052.mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\2052.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.139] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\2052.mst", dwFileAttributes=0x21) returned 0
	[0181.139] SetEvent (hEvent=0xfc) returned 1
	[0181.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\abcpy.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.140] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1729) returned 1
	[0181.140] CloseHandle (hObject=0x23c) returned 1
	[0181.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\abcpy.ini")) returned 0x21
	[0181.140] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", dwFileAttributes=0x20) returned 0
	[0181.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\abcpy.ini")) returned 0x21
	[0181.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\abcpy.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\abcpy.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.141] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\ABCPY.INI", dwFileAttributes=0x21) returned 0
	[0181.141] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\acroread.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.141] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2523136) returned 1
	[0181.141] CloseHandle (hObject=0x23c) returned 1
	[0181.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\acroread.msi")) returned 0x21
	[0181.141] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi", dwFileAttributes=0x20) returned 0
	[0181.141] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\acroread.msi"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\acroread.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0181.142] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\acroread.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\acroread.msi")) returned 0
	[0181.142] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\AcroRead.msi", dwFileAttributes=0x21) returned 0
	[0181.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\data1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0181.142] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=128186359) returned 1
	[0181.142] CloseHandle (hObject=0x23c) returned 1
	[0181.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\data1.cab")) returned 0x21
	[0181.143] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab", dwFileAttributes=0x20) returned 0
	[0181.143] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\data1.cab"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\data1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0181.143] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\data1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\data1.cab")) returned 0
	[0181.143] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Data1.cab", dwFileAttributes=0x21) returned 0
	[0181.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Setup.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.300] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=337352) returned 1
	[0181.300] CloseHandle (hObject=0x168) returned 1
	[0181.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Setup.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.exe")) returned 0x21
	[0181.300] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Setup.exe", dwFileAttributes=0x20) returned 0
	[0181.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Setup.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.exe")) returned 0x21
	[0181.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Setup.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Setup.exe" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\setup files\\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.300] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\Setup.exe", dwFileAttributes=0x21) returned 0
	[0181.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.slv"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.404] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=312320) returned 1
	[0181.404] CloseHandle (hObject=0x168) returned 1
	[0181.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.slv")) returned 0x20
	[0181.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.slv")) returned 0x20
	[0181.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.slv.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroPDF.SLV" (normalized: "c:\\program files (x86)\\common files\\adobe\\acrobat\\activex\\acropdf.slv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ca_es\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.406] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.406] CloseHandle (hObject=0x168) returned 1
	[0181.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ca_es\\reader_10.0.helpcfg")) returned 0x20
	[0181.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ca_es\\reader_10.0.helpcfg")) returned 0x20
	[0181.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ca_es\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ca_es\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\cs_cz\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.409] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.409] CloseHandle (hObject=0x168) returned 1
	[0181.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\cs_cz\\reader_10.0.helpcfg")) returned 0x20
	[0181.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\cs_cz\\reader_10.0.helpcfg")) returned 0x20
	[0181.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\cs_cz\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\cs_cz\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\da_dk\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.410] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.410] CloseHandle (hObject=0x168) returned 1
	[0181.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\da_dk\\reader_10.0.helpcfg")) returned 0x20
	[0181.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\da_dk\\reader_10.0.helpcfg")) returned 0x20
	[0181.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\da_dk\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\da_dk\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\de_de\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.411] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.411] CloseHandle (hObject=0x168) returned 1
	[0181.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\de_de\\reader_10.0.helpcfg")) returned 0x20
	[0181.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\de_de\\reader_10.0.helpcfg")) returned 0x20
	[0181.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\de_de\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\de_de\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.412] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=344) returned 1
	[0181.412] CloseHandle (hObject=0x168) returned 1
	[0181.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us\\reader_10.0.helpcfg")) returned 0x20
	[0181.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us\\reader_10.0.helpcfg")) returned 0x20
	[0181.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\es_es\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.413] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.413] CloseHandle (hObject=0x168) returned 1
	[0181.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\es_es\\reader_10.0.helpcfg")) returned 0x20
	[0181.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\es_es\\reader_10.0.helpcfg")) returned 0x20
	[0181.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\es_es\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\es_es\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\eu_es\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.414] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.414] CloseHandle (hObject=0x168) returned 1
	[0181.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\eu_es\\reader_10.0.helpcfg")) returned 0x20
	[0181.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\eu_es\\reader_10.0.helpcfg")) returned 0x20
	[0181.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\eu_es\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\eu_es\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fi_fi\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.415] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.415] CloseHandle (hObject=0x168) returned 1
	[0181.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fi_fi\\reader_10.0.helpcfg")) returned 0x20
	[0181.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fi_fi\\reader_10.0.helpcfg")) returned 0x20
	[0181.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fi_fi\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fi_fi\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fr_fr\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.416] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.416] CloseHandle (hObject=0x168) returned 1
	[0181.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fr_fr\\reader_10.0.helpcfg")) returned 0x20
	[0181.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fr_fr\\reader_10.0.helpcfg")) returned 0x20
	[0181.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fr_fr\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\fr_fr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hr_hr\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.417] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.417] CloseHandle (hObject=0x168) returned 1
	[0181.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hr_hr\\reader_10.0.helpcfg")) returned 0x20
	[0181.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hr_hr\\reader_10.0.helpcfg")) returned 0x20
	[0181.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hr_hr\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hr_hr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hu_hu\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.418] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.418] CloseHandle (hObject=0x168) returned 1
	[0181.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hu_hu\\reader_10.0.helpcfg")) returned 0x20
	[0181.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hu_hu\\reader_10.0.helpcfg")) returned 0x20
	[0181.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hu_hu\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\hu_hu\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\it_it\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.419] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.419] CloseHandle (hObject=0x168) returned 1
	[0181.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\it_it\\reader_10.0.helpcfg")) returned 0x20
	[0181.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\it_it\\reader_10.0.helpcfg")) returned 0x20
	[0181.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\it_it\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\it_it\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ja_jp\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.422] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.422] CloseHandle (hObject=0x168) returned 1
	[0181.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ja_jp\\reader_10.0.helpcfg")) returned 0x20
	[0181.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ja_jp\\reader_10.0.helpcfg")) returned 0x20
	[0181.422] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ja_jp\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ja_jp\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ko_kr\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.423] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.423] CloseHandle (hObject=0x168) returned 1
	[0181.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ko_kr\\reader_10.0.helpcfg")) returned 0x20
	[0181.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ko_kr\\reader_10.0.helpcfg")) returned 0x20
	[0181.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ko_kr\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ko_kr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.423] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nb_no\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.424] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.424] CloseHandle (hObject=0x168) returned 1
	[0181.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nb_no\\reader_10.0.helpcfg")) returned 0x20
	[0181.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nb_no\\reader_10.0.helpcfg")) returned 0x20
	[0181.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nb_no\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nb_no\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nl_nl\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.425] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.425] CloseHandle (hObject=0x168) returned 1
	[0181.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nl_nl\\reader_10.0.helpcfg")) returned 0x20
	[0181.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nl_nl\\reader_10.0.helpcfg")) returned 0x20
	[0181.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nl_nl\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\nl_nl\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pl_pl\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.426] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.426] CloseHandle (hObject=0x168) returned 1
	[0181.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pl_pl\\reader_10.0.helpcfg")) returned 0x20
	[0181.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pl_pl\\reader_10.0.helpcfg")) returned 0x20
	[0181.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pl_pl\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pl_pl\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pt_br\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.427] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.427] CloseHandle (hObject=0x168) returned 1
	[0181.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pt_br\\reader_10.0.helpcfg")) returned 0x20
	[0181.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pt_br\\reader_10.0.helpcfg")) returned 0x20
	[0181.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pt_br\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\pt_br\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ro_ro\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.428] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.428] CloseHandle (hObject=0x168) returned 1
	[0181.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ro_ro\\reader_10.0.helpcfg")) returned 0x20
	[0181.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ro_ro\\reader_10.0.helpcfg")) returned 0x20
	[0181.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ro_ro\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ro_ro\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ru_ru\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.429] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.429] CloseHandle (hObject=0x168) returned 1
	[0181.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ru_ru\\reader_10.0.helpcfg")) returned 0x20
	[0181.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ru_ru\\reader_10.0.helpcfg")) returned 0x20
	[0181.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ru_ru\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\ru_ru\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sk_sk\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.430] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.430] CloseHandle (hObject=0x168) returned 1
	[0181.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sk_sk\\reader_10.0.helpcfg")) returned 0x20
	[0181.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sk_sk\\reader_10.0.helpcfg")) returned 0x20
	[0181.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sk_sk\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sk_sk\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sl_si\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.431] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.431] CloseHandle (hObject=0x168) returned 1
	[0181.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sl_si\\reader_10.0.helpcfg")) returned 0x20
	[0181.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sl_si\\reader_10.0.helpcfg")) returned 0x20
	[0181.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sl_si\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sl_si\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sv_se\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.432] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.432] CloseHandle (hObject=0x168) returned 1
	[0181.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sv_se\\reader_10.0.helpcfg")) returned 0x20
	[0181.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sv_se\\reader_10.0.helpcfg")) returned 0x20
	[0181.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sv_se\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\sv_se\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\tr_tr\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.433] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.433] CloseHandle (hObject=0x168) returned 1
	[0181.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\tr_tr\\reader_10.0.helpcfg")) returned 0x20
	[0181.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\tr_tr\\reader_10.0.helpcfg")) returned 0x20
	[0181.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\tr_tr\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\tr_tr\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\uk_ua\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.434] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.434] CloseHandle (hObject=0x168) returned 1
	[0181.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\uk_ua\\reader_10.0.helpcfg")) returned 0x20
	[0181.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\uk_ua\\reader_10.0.helpcfg")) returned 0x20
	[0181.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\uk_ua\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\uk_ua\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_cn\\reader_10.0.helpcfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0181.533] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=349) returned 1
	[0181.533] CloseHandle (hObject=0x1f4) returned 1
	[0181.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_cn\\reader_10.0.helpcfg")) returned 0x20
	[0181.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_cn\\reader_10.0.helpcfg")) returned 0x20
	[0181.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_cn\\reader_10.0.helpcfg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\Reader_10.0.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\zh_cn\\reader_10.0.helpcfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaucheck.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaucheck.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0181.535] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=248704) returned 1
	[0181.535] CloseHandle (hObject=0x1f4) returned 1
	[0181.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaucheck.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaucheck.exe")) returned 0x20
	[0181.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaucheck.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaucheck.exe")) returned 0x20
	[0181.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaucheck.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaucheck.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaucheck.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaucheck.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaureg.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0181.536] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=235392) returned 1
	[0181.536] CloseHandle (hObject=0x1f4) returned 1
	[0181.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaureg.exe")) returned 0x20
	[0181.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaureg.exe")) returned 0x20
	[0181.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaureg.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jaureg.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jaureg.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jucheck.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0181.540] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=507264) returned 1
	[0181.540] CloseHandle (hObject=0x1f4) returned 1
	[0181.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jucheck.exe")) returned 0x20
	[0181.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jucheck.exe")) returned 0x20
	[0181.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jucheck.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jucheck.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jucheck.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jusched.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0181.541] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=254336) returned 1
	[0181.541] CloseHandle (hObject=0x1f4) returned 1
	[0181.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jusched.exe")) returned 0x20
	[0181.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jusched.exe")) returned 0x20
	[0181.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jusched.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\jusched.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0181.542] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1411) returned 1
	[0181.542] CloseHandle (hObject=0x1f4) returned 1
	[0181.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml")) returned 0x20
	[0181.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml")) returned 0x20
	[0181.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0181.543] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1416) returned 1
	[0181.543] CloseHandle (hObject=0x1f4) returned 1
	[0181.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml")) returned 0x20
	[0181.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml")) returned 0x20
	[0181.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\dao360.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao\\dao360.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.545] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=610304) returned 1
	[0181.545] CloseHandle (hObject=0x168) returned 1
	[0181.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\dao360.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao\\dao360.dll")) returned 0x20
	[0181.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\dao360.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao\\dao360.dll")) returned 0x20
	[0181.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\dao360.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao\\dao360.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\dao360.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\dao\\dao360.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1028\\hxdsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.547] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13120) returned 1
	[0181.547] CloseHandle (hObject=0x168) returned 1
	[0181.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1028\\hxdsui.dll")) returned 0x20
	[0181.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1028\\hxdsui.dll")) returned 0x20
	[0181.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\hxdsui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1028\\hxdsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1028\\hxdsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1031\\hxdsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.548] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20288) returned 1
	[0181.548] CloseHandle (hObject=0x168) returned 1
	[0181.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1031\\hxdsui.dll")) returned 0x20
	[0181.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1031\\hxdsui.dll")) returned 0x20
	[0181.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\hxdsui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1031\\hxdsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1031\\hxdsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1033\\hxdsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.549] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17736) returned 1
	[0181.549] CloseHandle (hObject=0x168) returned 1
	[0181.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1033\\hxdsui.dll")) returned 0x20
	[0181.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1033\\hxdsui.dll")) returned 0x20
	[0181.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\hxdsui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1033\\hxdsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1033\\hxdsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1036\\hxdsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.550] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19784) returned 1
	[0181.550] CloseHandle (hObject=0x168) returned 1
	[0181.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1036\\hxdsui.dll")) returned 0x20
	[0181.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1036\\hxdsui.dll")) returned 0x20
	[0181.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\hxdsui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1036\\hxdsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1036\\hxdsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1040\\hxdsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.551] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19784) returned 1
	[0181.551] CloseHandle (hObject=0x168) returned 1
	[0181.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1040\\hxdsui.dll")) returned 0x20
	[0181.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1040\\hxdsui.dll")) returned 0x20
	[0181.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\hxdsui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1040\\hxdsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1040\\hxdsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1041\\hxdsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.552] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14664) returned 1
	[0181.552] CloseHandle (hObject=0x168) returned 1
	[0181.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1041\\hxdsui.dll")) returned 0x20
	[0181.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1041\\hxdsui.dll")) returned 0x20
	[0181.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\hxdsui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1041\\hxdsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1041\\hxdsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1042\\hxdsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.553] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14664) returned 1
	[0181.553] CloseHandle (hObject=0x168) returned 1
	[0181.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1042\\hxdsui.dll")) returned 0x20
	[0181.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1042\\hxdsui.dll")) returned 0x20
	[0181.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\hxdsui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1042\\hxdsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1042\\hxdsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1046\\hxdsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.554] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18752) returned 1
	[0181.554] CloseHandle (hObject=0x168) returned 1
	[0181.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1046\\hxdsui.dll")) returned 0x20
	[0181.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1046\\hxdsui.dll")) returned 0x20
	[0181.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\hxdsui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1046\\hxdsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1046\\hxdsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.557] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1049\\hxdsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.566] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18752) returned 1
	[0181.566] CloseHandle (hObject=0x168) returned 1
	[0181.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1049\\hxdsui.dll")) returned 0x20
	[0181.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1049\\hxdsui.dll")) returned 0x20
	[0181.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\hxdsui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1049\\hxdsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\1049\\hxdsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.566] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\2052\\hxdsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.567] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12608) returned 1
	[0181.567] CloseHandle (hObject=0x168) returned 1
	[0181.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\2052\\hxdsui.dll")) returned 0x20
	[0181.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\2052\\hxdsui.dll")) returned 0x20
	[0181.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\hxdsui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\2052\\hxdsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\2052\\hxdsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\3082\\hxdsui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.568] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19776) returned 1
	[0181.568] CloseHandle (hObject=0x168) returned 1
	[0181.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\3082\\hxdsui.dll")) returned 0x20
	[0181.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\3082\\hxdsui.dll")) returned 0x20
	[0181.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\hxdsui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\3082\\hxdsui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\hxdsui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\3082\\hxdsui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Hx.HxC" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hx.hxc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.569] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=803) returned 1
	[0181.569] CloseHandle (hObject=0x168) returned 1
	[0181.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Hx.HxC" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hx.hxc")) returned 0x20
	[0181.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Hx.HxC" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hx.hxc")) returned 0x20
	[0181.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Hx.HxC.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hx.hxc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Hx.HxC" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hx.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Hx.HxT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hx.hxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.570] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=169) returned 1
	[0181.570] CloseHandle (hObject=0x168) returned 1
	[0181.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Hx.HxT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hx.hxt")) returned 0x20
	[0181.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Hx.HxT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hx.hxt")) returned 0x20
	[0181.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Hx.HxT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hx.hxt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Hx.HxT" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hx.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\HxRuntime.HxS" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hxruntime.hxs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.571] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27886) returned 1
	[0181.571] CloseHandle (hObject=0x168) returned 1
	[0181.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\HxRuntime.HxS" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hxruntime.hxs")) returned 0x20
	[0181.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\HxRuntime.HxS" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hxruntime.hxs")) returned 0x20
	[0181.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\HxRuntime.HxS.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hxruntime.hxs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\HxRuntime.HxS" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\hxruntime.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Keywords.HxK" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\keywords.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.572] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=133) returned 1
	[0181.572] CloseHandle (hObject=0x168) returned 1
	[0181.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Keywords.HxK" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\keywords.hxk")) returned 0x20
	[0181.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Keywords.HxK" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\keywords.hxk")) returned 0x20
	[0181.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Keywords.HxK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\keywords.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\Keywords.HxK" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\keywords.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\NamedURLs.HxK" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\namedurls.hxk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0181.573] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=140) returned 1
	[0181.573] CloseHandle (hObject=0x168) returned 1
	[0181.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\NamedURLs.HxK" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\namedurls.hxk")) returned 0x20
	[0181.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\NamedURLs.HxK" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\namedurls.hxk")) returned 0x20
	[0181.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\NamedURLs.HxK.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\namedurls.hxk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\NamedURLs.HxK" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\help\\namedurls.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.0\\microsoft.ink.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.720] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=356352) returned 1
	[0181.720] CloseHandle (hObject=0x1b8) returned 1
	[0181.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.0\\microsoft.ink.dll")) returned 0x20
	[0181.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.0\\microsoft.ink.dll")) returned 0x20
	[0181.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\Microsoft.Ink.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.0\\microsoft.ink.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\Microsoft.Ink.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\1.0\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipres.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.721] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1536) returned 1
	[0181.721] CloseHandle (hObject=0x1b8) returned 1
	[0181.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipres.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipres.dll")) returned 0x20
	[0181.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipres.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipres.dll")) returned 0x20
	[0181.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipres.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\pipres.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\pipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.722] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=126464) returned 1
	[0181.722] CloseHandle (hObject=0x1b8) returned 1
	[0181.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20
	[0181.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20
	[0181.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\rtscom.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\rtscom.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\skchobj.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\skchobj.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.723] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1536) returned 1
	[0181.723] CloseHandle (hObject=0x1b8) returned 1
	[0181.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\skchobj.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\skchobj.dll")) returned 0x20
	[0181.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\skchobj.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\skchobj.dll")) returned 0x20
	[0181.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\skchobj.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\skchobj.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\skchobj.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\skchobj.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\skchui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\skchui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0181.724] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1536) returned 1
	[0181.724] CloseHandle (hObject=0x1b8) returned 1
	[0181.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\skchui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\skchui.dll")) returned 0x20
	[0181.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\skchui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\skchui.dll")) returned 0x20
	[0181.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\skchui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\skchui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\skchui.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\skchui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\TabTip32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tabtip32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0181.921] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10240) returned 1
	[0181.921] CloseHandle (hObject=0x228) returned 1
	[0181.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\TabTip32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tabtip32.exe")) returned 0x20
	[0181.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\TabTip32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tabtip32.exe")) returned 0x20
	[0181.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\TabTip32.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tabtip32.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\TabTip32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tabtip32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.921] SetEvent (hEvent=0xfc) returned 1
	[0181.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0181.924] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5115) returned 1
	[0181.924] CloseHandle (hObject=0x228) returned 1
	[0181.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20
	[0181.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20
	[0181.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.924] SetEvent (hEvent=0xfc) returned 1
	[0181.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0181.925] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=233) returned 1
	[0181.925] CloseHandle (hObject=0x228) returned 1
	[0181.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20
	[0181.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20
	[0181.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.926] SetEvent (hEvent=0xfc) returned 1
	[0181.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0181.928] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1920) returned 1
	[0181.928] CloseHandle (hObject=0x238) returned 1
	[0181.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20
	[0181.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20
	[0181.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.928] SetEvent (hEvent=0xfc) returned 1
	[0181.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0181.929] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=237) returned 1
	[0181.929] CloseHandle (hObject=0x238) returned 1
	[0181.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20
	[0181.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20
	[0181.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shades of blue.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.930] SetEvent (hEvent=0xfc) returned 1
	[0181.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0181.930] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4734) returned 1
	[0181.930] CloseHandle (hObject=0x238) returned 1
	[0181.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20
	[0181.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20
	[0181.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.931] SetEvent (hEvent=0xfc) returned 1
	[0181.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0181.932] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=232) returned 1
	[0181.932] CloseHandle (hObject=0x238) returned 1
	[0181.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20
	[0181.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20
	[0181.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\soft blue.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.932] SetEvent (hEvent=0xfc) returned 1
	[0181.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0181.933] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10569) returned 1
	[0181.933] CloseHandle (hObject=0x238) returned 1
	[0181.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20
	[0181.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20
	[0181.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.933] SetEvent (hEvent=0xfc) returned 1
	[0181.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0181.934] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=230) returned 1
	[0181.934] CloseHandle (hObject=0x238) returned 1
	[0181.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20
	[0181.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20
	[0181.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.935] SetEvent (hEvent=0xfc) returned 1
	[0181.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0181.937] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7505) returned 1
	[0181.937] CloseHandle (hObject=0x228) returned 1
	[0181.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20
	[0181.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20
	[0181.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0181.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0181.937] SetEvent (hEvent=0xfc) returned 1
	[0181.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\Wkconv.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wksconv\\wkconv.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0182.063] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1199008) returned 1
	[0182.063] CloseHandle (hObject=0x20c) returned 1
	[0182.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\Wkconv.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wksconv\\wkconv.exe")) returned 0x20
	[0182.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\Wkconv.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wksconv\\wkconv.exe")) returned 0x20
	[0182.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\Wkconv.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wksconv\\wkconv.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\Wkconv.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\textconv\\wksconv\\wkconv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.063] SetEvent (hEvent=0xfc) returned 1
	[0182.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\msdia80.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64\\msdia80.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0182.163] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=914944) returned 1
	[0182.163] CloseHandle (hObject=0x20c) returned 1
	[0182.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\msdia80.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64\\msdia80.dll")) returned 0x20
	[0182.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\msdia80.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64\\msdia80.dll")) returned 0x20
	[0182.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\msdia80.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64\\msdia80.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\msdia80.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\amd64\\msdia80.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.164] SetEvent (hEvent=0xfc) returned 1
	[0182.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia80.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia80.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0182.165] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=641536) returned 1
	[0182.165] CloseHandle (hObject=0x20c) returned 1
	[0182.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia80.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia80.dll")) returned 0x20
	[0182.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia80.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia80.dll")) returned 0x20
	[0182.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia80.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia80.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia80.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia80.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.165] SetEvent (hEvent=0xfc) returned 1
	[0182.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0182.166] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=670032) returned 1
	[0182.166] CloseHandle (hObject=0x20c) returned 1
	[0182.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20
	[0182.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20
	[0182.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia90.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia90.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0182.171] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=759296) returned 1
	[0182.171] CloseHandle (hObject=0x238) returned 1
	[0182.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20
	[0182.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20
	[0182.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\VGX.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx\\vgx.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.172] SetEvent (hEvent=0xfc) returned 1
	[0182.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\microsoft.visualstudio.tools.applications.blueprints.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.174] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30208) returned 1
	[0182.174] CloseHandle (hObject=0x228) returned 1
	[0182.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\microsoft.visualstudio.tools.applications.blueprints.tlb")) returned 0x20
	[0182.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\microsoft.visualstudio.tools.applications.blueprints.tlb")) returned 0x20
	[0182.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\microsoft.visualstudio.tools.applications.blueprints.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\microsoft.visualstudio.tools.applications.blueprints.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.175] SetEvent (hEvent=0xfc) returned 1
	[0182.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\microsoft.visualstudio.tools.applications.designtime.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.176] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11264) returned 1
	[0182.176] CloseHandle (hObject=0x228) returned 1
	[0182.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\microsoft.visualstudio.tools.applications.designtime.tlb")) returned 0x20
	[0182.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\microsoft.visualstudio.tools.applications.designtime.tlb")) returned 0x20
	[0182.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\microsoft.visualstudio.tools.applications.designtime.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\microsoft.visualstudio.tools.applications.designtime.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.176] SetEvent (hEvent=0xfc) returned 1
	[0182.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\VSTARemotingServer.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\vstaremotingserver.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.177] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2292) returned 1
	[0182.177] CloseHandle (hObject=0x228) returned 1
	[0182.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\VSTARemotingServer.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\vstaremotingserver.tlb")) returned 0x20
	[0182.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\VSTARemotingServer.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\vstaremotingserver.tlb")) returned 0x20
	[0182.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\VSTARemotingServer.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\vstaremotingserver.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\VSTARemotingServer.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\vstaremotingserver.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\VSTARemotingServer.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vstaremotingserver.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.179] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31576) returned 1
	[0182.179] CloseHandle (hObject=0x228) returned 1
	[0182.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\VSTARemotingServer.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vstaremotingserver.dll")) returned 0x20
	[0182.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\VSTARemotingServer.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vstaremotingserver.dll")) returned 0x20
	[0182.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\VSTARemotingServer.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vstaremotingserver.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\VSTARemotingServer.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vstaremotingserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.180] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19280) returned 1
	[0182.180] CloseHandle (hObject=0x228) returned 1
	[0182.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe")) returned 0x20
	[0182.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe")) returned 0x20
	[0182.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.181] SetEvent (hEvent=0xfc) returned 1
	[0182.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.182] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=116) returned 1
	[0182.182] CloseHandle (hObject=0x228) returned 1
	[0182.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config")) returned 0x20
	[0182.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config")) returned 0x20
	[0182.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\vsta_ep32.exe.config" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\8.0\\x86\\vsta_ep32.exe.config"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.182] SetEvent (hEvent=0xfc) returned 1
	[0182.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\AddIns.store" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\addins.store"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.183] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9657) returned 1
	[0182.183] CloseHandle (hObject=0x228) returned 1
	[0182.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\AddIns.store" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\addins.store")) returned 0x20
	[0182.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\AddIns.store" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\addins.store")) returned 0x20
	[0182.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\AddIns.store.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\addins.store.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\AddIns.store" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\appinfodocument\\addins.store"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.287] SetEvent (hEvent=0xfc) returned 1
	[0182.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.addinadapter.v9.0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0182.412] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=81920) returned 1
	[0182.412] CloseHandle (hObject=0x23c) returned 1
	[0182.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.addinadapter.v9.0.dll")) returned 0x20
	[0182.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.addinadapter.v9.0.dll")) returned 0x20
	[0182.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.addinadapter.v9.0.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsta\\pipeline.v10.0\\addinsideadapters\\microsoft.visualstudio.tools.office.addinadapter.v9.0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.412] SetEvent (hEvent=0xfc) returned 1
	[0182.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.533] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15696) returned 1
	[0182.533] CloseHandle (hObject=0x210) returned 1
	[0182.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20
	[0182.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20
	[0182.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.534] SetEvent (hEvent=0xfc) returned 1
	[0182.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0182.630] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=69632) returned 1
	[0182.630] CloseHandle (hObject=0x228) returned 1
	[0182.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado20.tlb")) returned 0x20
	[0182.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado20.tlb")) returned 0x20
	[0182.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado20.tlb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado20.tlb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files (x86)\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.631] SetEvent (hEvent=0xfc) returned 1
	[0182.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0182.771] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0182.771] CloseHandle (hObject=0x210) returned 1
	[0182.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcer.dll")) returned 0x20
	[0182.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcer.dll")) returned 0x20
	[0182.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcer.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcer.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files (x86)\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0182.911] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61440) returned 1
	[0182.911] CloseHandle (hObject=0x144) returned 1
	[0182.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20
	[0182.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20
	[0182.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasqlr.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasqlr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0182.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files (x86)\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0182.911] SetEvent (hEvent=0xfc) returned 1
	[0182.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.sig"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.059] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1407) returned 1
	[0183.059] CloseHandle (hObject=0x210) returned 1
	[0183.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.sig")) returned 0x20
	[0183.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.sig")) returned 0x20
	[0183.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.sig.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.dll.sig"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.059] SetEvent (hEvent=0xfc) returned 1
	[0183.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.exe.sig"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.060] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1407) returned 1
	[0183.060] CloseHandle (hObject=0x210) returned 1
	[0183.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.exe.sig")) returned 0x20
	[0183.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.exe.sig")) returned 0x20
	[0183.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.exe.sig.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome.exe.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome.exe.sig"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.061] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=455756) returned 1
	[0183.061] CloseHandle (hObject=0x210) returned 1
	[0183.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak")) returned 0x20
	[0183.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak")) returned 0x20
	[0183.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_100_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.063] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=723842) returned 1
	[0183.063] CloseHandle (hObject=0x210) returned 1
	[0183.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak")) returned 0x20
	[0183.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak")) returned 0x20
	[0183.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_200_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.063] SetEvent (hEvent=0xfc) returned 1
	[0183.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.064] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=60110168) returned 1
	[0183.064] CloseHandle (hObject=0x210) returned 1
	[0183.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll")) returned 0x20
	[0183.064] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0183.064] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll")) returned 0
	[0183.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.sig"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.066] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1407) returned 1
	[0183.066] CloseHandle (hObject=0x210) returned 1
	[0183.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.sig")) returned 0x20
	[0183.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.sig")) returned 0x20
	[0183.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.sig.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_child.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_child.dll.sig"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.066] SetEvent (hEvent=0xfc) returned 1
	[0183.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_elf.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_elf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.067] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=550232) returned 1
	[0183.067] CloseHandle (hObject=0x210) returned 1
	[0183.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_elf.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_elf.dll")) returned 0x20
	[0183.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_elf.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_elf.dll")) returned 0x20
	[0183.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_elf.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_elf.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_elf.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_elf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.068] SetEvent (hEvent=0xfc) returned 1
	[0183.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_watcher.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_watcher.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.068] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=609112) returned 1
	[0183.068] CloseHandle (hObject=0x210) returned 1
	[0183.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_watcher.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_watcher.dll")) returned 0x20
	[0183.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_watcher.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_watcher.dll")) returned 0x20
	[0183.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_watcher.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_watcher.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\chrome_watcher.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\chrome_watcher.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\d3dcompiler_47.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\d3dcompiler_47.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.069] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4488896) returned 1
	[0183.069] CloseHandle (hObject=0x210) returned 1
	[0183.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\d3dcompiler_47.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\d3dcompiler_47.dll")) returned 0x20
	[0183.069] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\d3dcompiler_47.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\d3dcompiler_47.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\d3dcompiler_47.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\d3dcompiler_47.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0183.070] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\d3dcompiler_47.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\d3dcompiler_47.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\d3dcompiler_47.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\d3dcompiler_47.dll")) returned 0
	[0183.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\docs.crx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.071] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4578) returned 1
	[0183.071] CloseHandle (hObject=0x210) returned 1
	[0183.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\docs.crx")) returned 0x20
	[0183.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\docs.crx")) returned 0x20
	[0183.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\docs.crx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\docs.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\docs.crx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\drive.crx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.072] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25561) returned 1
	[0183.072] CloseHandle (hObject=0x210) returned 1
	[0183.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\drive.crx")) returned 0x20
	[0183.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\drive.crx")) returned 0x20
	[0183.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\drive.crx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\drive.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\drive.crx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\external_extensions.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.075] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1266) returned 1
	[0183.075] CloseHandle (hObject=0x210) returned 1
	[0183.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\external_extensions.json")) returned 0x20
	[0183.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\external_extensions.json")) returned 0x20
	[0183.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\external_extensions.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\external_extensions.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.076] SetEvent (hEvent=0xfc) returned 1
	[0183.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\gmail.crx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.076] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24040) returned 1
	[0183.076] CloseHandle (hObject=0x210) returned 1
	[0183.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\gmail.crx")) returned 0x20
	[0183.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\gmail.crx")) returned 0x20
	[0183.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\gmail.crx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\gmail.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\gmail.crx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\youtube.crx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.077] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23668) returned 1
	[0183.077] CloseHandle (hObject=0x210) returned 1
	[0183.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\youtube.crx")) returned 0x20
	[0183.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\youtube.crx")) returned 0x20
	[0183.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\youtube.crx.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\youtube.crx" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\default_apps\\youtube.crx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\eventlog_provider.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\eventlog_provider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.078] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13144) returned 1
	[0183.078] CloseHandle (hObject=0x210) returned 1
	[0183.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\eventlog_provider.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\eventlog_provider.dll")) returned 0x20
	[0183.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\eventlog_provider.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\eventlog_provider.dll")) returned 0x20
	[0183.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\eventlog_provider.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\eventlog_provider.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\eventlog_provider.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\eventlog_provider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\extensions\\external_extensions.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.080] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=99) returned 1
	[0183.080] CloseHandle (hObject=0x210) returned 1
	[0183.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\extensions\\external_extensions.json")) returned 0x20
	[0183.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\extensions\\external_extensions.json")) returned 0x20
	[0183.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\extensions\\external_extensions.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\extensions\\external_extensions.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.083] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10130560) returned 1
	[0183.083] CloseHandle (hObject=0x20c) returned 1
	[0183.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat")) returned 0x20
	[0183.083] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0183.083] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\icudtl.dat")) returned 0
	[0183.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrmstp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.084] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1720152) returned 1
	[0183.084] CloseHandle (hObject=0x20c) returned 1
	[0183.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrmstp.exe")) returned 0x20
	[0183.084] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrmstp.exe"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrmstp.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrmstp.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0183.085] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrmstp.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrmstp.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrmstp.exe")) returned 0
	[0183.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.085] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=181915691) returned 1
	[0183.085] CloseHandle (hObject=0x20c) returned 1
	[0183.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z")) returned 0x20
	[0183.085] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0183.086] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\chrome.7z")) returned 0
	[0183.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.086] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1720152) returned 1
	[0183.086] CloseHandle (hObject=0x20c) returned 1
	[0183.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\setup.exe")) returned 0x20
	[0183.086] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\setup.exe"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\setup.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\setup.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0183.087] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\setup.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\setup.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\installer\\setup.exe")) returned 0
	[0183.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libegl.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libegl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.087] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=100696) returned 1
	[0183.087] CloseHandle (hObject=0x20c) returned 1
	[0183.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libegl.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libegl.dll")) returned 0x20
	[0183.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libegl.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libegl.dll")) returned 0x20
	[0183.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libegl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libegl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libegl.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libegl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libglesv2.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libglesv2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.088] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3767640) returned 1
	[0183.089] CloseHandle (hObject=0x20c) returned 1
	[0183.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libglesv2.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libglesv2.dll")) returned 0x20
	[0183.089] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libglesv2.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libglesv2.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libglesv2.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libglesv2.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0183.089] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libglesv2.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libglesv2.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\libglesv2.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\libglesv2.dll")) returned 0
	[0183.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.090] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=455904) returned 1
	[0183.090] CloseHandle (hObject=0x20c) returned 1
	[0183.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak")) returned 0x20
	[0183.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak")) returned 0x20
	[0183.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\am.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.091] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=450405) returned 1
	[0183.091] CloseHandle (hObject=0x20c) returned 1
	[0183.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak")) returned 0x20
	[0183.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak")) returned 0x20
	[0183.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\ar.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.092] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.092] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=543911) returned 1
	[0183.092] CloseHandle (hObject=0x20c) returned 1
	[0183.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak")) returned 0x20
	[0183.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak")) returned 0x20
	[0183.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.092] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bg.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.093] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.261] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=694055) returned 1
	[0183.262] CloseHandle (hObject=0x210) returned 1
	[0183.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak")) returned 0x20
	[0183.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak")) returned 0x20
	[0183.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\bn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.262] SetEvent (hEvent=0xfc) returned 1
	[0183.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.263] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=333833) returned 1
	[0183.263] CloseHandle (hObject=0x210) returned 1
	[0183.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak")) returned 0x20
	[0183.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak")) returned 0x20
	[0183.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\cs.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.264] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=300280) returned 1
	[0183.264] CloseHandle (hObject=0x210) returned 1
	[0183.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak")) returned 0x20
	[0183.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak")) returned 0x20
	[0183.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\da.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.265] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=287740) returned 1
	[0183.265] CloseHandle (hObject=0x210) returned 1
	[0183.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak")) returned 0x20
	[0183.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak")) returned 0x20
	[0183.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\de.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.266] SetEvent (hEvent=0xfc) returned 1
	[0183.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.267] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=587796) returned 1
	[0183.267] CloseHandle (hObject=0x210) returned 1
	[0183.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak")) returned 0x20
	[0183.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak")) returned 0x20
	[0183.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\el.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.268] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=271439) returned 1
	[0183.268] CloseHandle (hObject=0x210) returned 1
	[0183.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak")) returned 0x20
	[0183.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak")) returned 0x20
	[0183.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-gb.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.269] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=271426) returned 1
	[0183.269] CloseHandle (hObject=0x210) returned 1
	[0183.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak")) returned 0x20
	[0183.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak")) returned 0x20
	[0183.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\en-us.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.278] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=326821) returned 1
	[0183.278] CloseHandle (hObject=0x210) returned 1
	[0183.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak")) returned 0x20
	[0183.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak")) returned 0x20
	[0183.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es-419.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.279] SetEvent (hEvent=0xfc) returned 1
	[0183.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.279] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=332472) returned 1
	[0183.279] CloseHandle (hObject=0x210) returned 1
	[0183.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak")) returned 0x20
	[0183.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak")) returned 0x20
	[0183.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\es.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.280] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=289262) returned 1
	[0183.280] CloseHandle (hObject=0x210) returned 1
	[0183.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak")) returned 0x20
	[0183.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak")) returned 0x20
	[0183.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\et.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.281] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=467590) returned 1
	[0183.281] CloseHandle (hObject=0x210) returned 1
	[0183.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak")) returned 0x20
	[0183.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak")) returned 0x20
	[0183.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fa.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.283] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=308910) returned 1
	[0183.283] CloseHandle (hObject=0x210) returned 1
	[0183.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak")) returned 0x20
	[0183.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak")) returned 0x20
	[0183.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.283] SetEvent (hEvent=0xfc) returned 1
	[0183.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.284] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=334857) returned 1
	[0183.284] CloseHandle (hObject=0x210) returned 1
	[0183.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak")) returned 0x20
	[0183.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak")) returned 0x20
	[0183.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fil.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.285] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=350828) returned 1
	[0183.285] CloseHandle (hObject=0x210) returned 1
	[0183.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak")) returned 0x20
	[0183.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak")) returned 0x20
	[0183.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\fr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.286] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=651681) returned 1
	[0183.286] CloseHandle (hObject=0x210) returned 1
	[0183.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak")) returned 0x20
	[0183.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak")) returned 0x20
	[0183.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\gu.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.288] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=384803) returned 1
	[0183.288] CloseHandle (hObject=0x210) returned 1
	[0183.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak")) returned 0x20
	[0183.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak")) returned 0x20
	[0183.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\he.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.288] SetEvent (hEvent=0xfc) returned 1
	[0183.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.289] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=668289) returned 1
	[0183.289] CloseHandle (hObject=0x210) returned 1
	[0183.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak")) returned 0x20
	[0183.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak")) returned 0x20
	[0183.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.290] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=310359) returned 1
	[0183.290] CloseHandle (hObject=0x210) returned 1
	[0183.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak")) returned 0x20
	[0183.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak")) returned 0x20
	[0183.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.293] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=346759) returned 1
	[0183.293] CloseHandle (hObject=0x210) returned 1
	[0183.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak")) returned 0x20
	[0183.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak")) returned 0x20
	[0183.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\hu.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.568] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=294525) returned 1
	[0183.568] CloseHandle (hObject=0x210) returned 1
	[0183.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak")) returned 0x20
	[0183.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak")) returned 0x20
	[0183.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\id.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.568] SetEvent (hEvent=0xfc) returned 1
	[0183.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.569] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=270740) returned 1
	[0183.569] CloseHandle (hObject=0x210) returned 1
	[0183.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak")) returned 0x20
	[0183.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak")) returned 0x20
	[0183.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.569] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\locales\\zh-tw.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.570] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3671600) returned 1
	[0183.570] CloseHandle (hObject=0x210) returned 1
	[0183.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe")) returned 0x20
	[0183.570] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0183.571] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\nacl_irt_x86_64.nexe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\nacl_irt_x86_64.nexe")) returned 0
	[0183.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0183.571] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=262947) returned 1
	[0183.571] CloseHandle (hObject=0x210) returned 1
	[0183.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin")) returned 0x20
	[0183.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin")) returned 0x20
	[0183.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\natives_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.583] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18376476) returned 1
	[0183.583] CloseHandle (hObject=0x20c) returned 1
	[0183.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak")) returned 0x20
	[0183.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0183.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\resources.pak")) returned 0
	[0183.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.584] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1449400) returned 1
	[0183.584] CloseHandle (hObject=0x20c) returned 1
	[0183.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin")) returned 0x20
	[0183.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin")) returned 0x20
	[0183.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\snapshot_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.586] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17450) returned 1
	[0183.586] CloseHandle (hObject=0x20c) returned 1
	[0183.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png")) returned 0x20
	[0183.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png")) returned 0x20
	[0183.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.587] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22337) returned 1
	[0183.587] CloseHandle (hObject=0x20c) returned 1
	[0183.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png")) returned 0x20
	[0183.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png")) returned 0x20
	[0183.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.589] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7923) returned 1
	[0183.589] CloseHandle (hObject=0x20c) returned 1
	[0183.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png")) returned 0x20
	[0183.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png")) returned 0x20
	[0183.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.590] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7842) returned 1
	[0183.590] CloseHandle (hObject=0x20c) returned 1
	[0183.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png")) returned 0x20
	[0183.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png")) returned 0x20
	[0183.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.591] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=950) returned 1
	[0183.591] CloseHandle (hObject=0x20c) returned 1
	[0183.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\manifest.json")) returned 0x20
	[0183.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\manifest.json")) returned 0x20
	[0183.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.593] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4460024) returned 1
	[0183.593] CloseHandle (hObject=0x20c) returned 1
	[0183.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll")) returned 0x20
	[0183.593] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0183.593] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll")) returned 0
	[0183.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.596] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1637) returned 1
	[0183.596] CloseHandle (hObject=0x20c) returned 1
	[0183.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig")) returned 0x20
	[0183.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig")) returned 0x20
	[0183.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdm.dll.sig"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.597] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=277336) returned 1
	[0183.597] CloseHandle (hObject=0x20c) returned 1
	[0183.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll")) returned 0x20
	[0183.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll")) returned 0x20
	[0183.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.598] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1407) returned 1
	[0183.598] CloseHandle (hObject=0x20c) returned 1
	[0183.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig")) returned 0x20
	[0183.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig")) returned 0x20
	[0183.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\widevinecdm\\_platform_specific\\win_x64\\widevinecdmadapter.dll.sig"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.599] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1143640) returned 1
	[0183.599] CloseHandle (hObject=0x20c) returned 1
	[0183.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe")) returned 0x20
	[0183.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe")) returned 0x20
	[0183.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.600] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=410) returned 1
	[0183.600] CloseHandle (hObject=0x20c) returned 1
	[0183.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml")) returned 0x20
	[0183.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml")) returned 0x20
	[0183.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170605115313.pma" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics\\20170605115313.pma"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.601] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6840) returned 1
	[0183.602] CloseHandle (hObject=0x20c) returned 1
	[0183.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170605115313.pma" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics\\20170605115313.pma")) returned 0x20
	[0183.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170605115313.pma" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics\\20170605115313.pma")) returned 0x20
	[0183.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170605115313.pma.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics\\20170605115313.pma.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\20170605115313.pma" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics\\20170605115313.pma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\in-abstracts.exe" (normalized: "c:\\program files (x86)\\google\\in-abstracts.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.603] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75776) returned 1
	[0183.603] CloseHandle (hObject=0x20c) returned 1
	[0183.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\in-abstracts.exe" (normalized: "c:\\program files (x86)\\google\\in-abstracts.exe")) returned 0x20
	[0183.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\in-abstracts.exe" (normalized: "c:\\program files (x86)\\google\\in-abstracts.exe")) returned 0x20
	[0183.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\in-abstracts.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\google\\in-abstracts.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\in-abstracts.exe" (normalized: "c:\\program files (x86)\\google\\in-abstracts.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.714] SetEvent (hEvent=0xfc) returned 1
	[0183.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iedvtool.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0183.864] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28672) returned 1
	[0183.864] CloseHandle (hObject=0x20c) returned 1
	[0183.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iedvtool.dll.mui")) returned 0x20
	[0183.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iedvtool.dll.mui")) returned 0x20
	[0183.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iedvtool.dll.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0183.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\iedvtool.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iedvtool.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0183.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\assured blacks won.exe" (normalized: "c:\\program files (x86)\\java\\assured blacks won.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.040] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75776) returned 1
	[0184.040] CloseHandle (hObject=0x144) returned 1
	[0184.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\assured blacks won.exe" (normalized: "c:\\program files (x86)\\java\\assured blacks won.exe")) returned 0x20
	[0184.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\assured blacks won.exe" (normalized: "c:\\program files (x86)\\java\\assured blacks won.exe")) returned 0x20
	[0184.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\assured blacks won.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\assured blacks won.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\assured blacks won.exe" (normalized: "c:\\program files (x86)\\java\\assured blacks won.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.041] SetEvent (hEvent=0xfc) returned 1
	[0184.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\instrument.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\instrument.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.385] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=115112) returned 1
	[0184.385] CloseHandle (hObject=0x144) returned 1
	[0184.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\instrument.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\instrument.dll")) returned 0x20
	[0184.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\instrument.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\instrument.dll")) returned 0x20
	[0184.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\instrument.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\instrument.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\instrument.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\instrument.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.385] SetEvent (hEvent=0xfc) returned 1
	[0184.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pcsc.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\j2pcsc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.386] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16296) returned 1
	[0184.386] CloseHandle (hObject=0x144) returned 1
	[0184.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pcsc.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\j2pcsc.dll")) returned 0x20
	[0184.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pcsc.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\j2pcsc.dll")) returned 0x20
	[0184.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pcsc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\j2pcsc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pcsc.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\j2pcsc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pkcs11.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\j2pkcs11.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.387] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51112) returned 1
	[0184.388] CloseHandle (hObject=0x144) returned 1
	[0184.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pkcs11.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\j2pkcs11.dll")) returned 0x20
	[0184.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pkcs11.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\j2pkcs11.dll")) returned 0x20
	[0184.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pkcs11.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\j2pkcs11.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\j2pkcs11.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\j2pkcs11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jaas_nt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jaas_nt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0184.666] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19880) returned 1
	[0184.666] CloseHandle (hObject=0x228) returned 1
	[0184.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jaas_nt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jaas_nt.dll")) returned 0x20
	[0184.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jaas_nt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jaas_nt.dll")) returned 0x20
	[0184.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jaas_nt.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jaas_nt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jaas_nt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jaas_nt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.667] SetEvent (hEvent=0xfc) returned 1
	[0184.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpinscp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpinscp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0184.668] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=103848) returned 1
	[0184.668] CloseHandle (hObject=0x228) returned 1
	[0184.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpinscp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpinscp.dll")) returned 0x20
	[0184.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpinscp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpinscp.dll")) returned 0x20
	[0184.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpinscp.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpinscp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpinscp.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpinscp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.669] SetEvent (hEvent=0xfc) returned 1
	[0184.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpioji.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpioji.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.908] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=69032) returned 1
	[0184.909] CloseHandle (hObject=0x144) returned 1
	[0184.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpioji.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpioji.dll")) returned 0x20
	[0184.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpioji.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpioji.dll")) returned 0x20
	[0184.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpioji.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpioji.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jpioji.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jpioji.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.909] SetEvent (hEvent=0xfc) returned 1
	[0184.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jqs.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jqs.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.910] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=182696) returned 1
	[0184.910] CloseHandle (hObject=0x144) returned 1
	[0184.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jqs.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jqs.exe")) returned 0x20
	[0184.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jqs.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jqs.exe")) returned 0x20
	[0184.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jqs.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jqs.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jqs.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jqs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsdt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsdt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.912] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16808) returned 1
	[0184.912] CloseHandle (hObject=0x144) returned 1
	[0184.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsdt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsdt.dll")) returned 0x20
	[0184.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsdt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsdt.dll")) returned 0x20
	[0184.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsdt.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsdt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsdt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsdt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsound.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsound.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.915] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30632) returned 1
	[0184.916] CloseHandle (hObject=0x144) returned 1
	[0184.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsound.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsound.dll")) returned 0x20
	[0184.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsound.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsound.dll")) returned 0x20
	[0184.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsound.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsound.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsound.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsound.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.918] SetEvent (hEvent=0xfc) returned 1
	[0184.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsoundds.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsoundds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.919] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27560) returned 1
	[0184.919] CloseHandle (hObject=0x144) returned 1
	[0184.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsoundds.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsoundds.dll")) returned 0x20
	[0184.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsoundds.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsoundds.dll")) returned 0x20
	[0184.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsoundds.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsoundds.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\jsoundds.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\jsoundds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\kcms.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\kcms.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.920] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=178088) returned 1
	[0184.920] CloseHandle (hObject=0x144) returned 1
	[0184.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\kcms.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\kcms.dll")) returned 0x20
	[0184.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\kcms.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\kcms.dll")) returned 0x20
	[0184.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\kcms.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\kcms.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\kcms.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\kcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\keytool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\keytool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.921] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15784) returned 1
	[0184.921] CloseHandle (hObject=0x144) returned 1
	[0184.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\keytool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\keytool.exe")) returned 0x20
	[0184.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\keytool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\keytool.exe")) returned 0x20
	[0184.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\keytool.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\keytool.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\keytool.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.922] SetEvent (hEvent=0xfc) returned 1
	[0184.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\kinit.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\kinit.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.923] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15784) returned 1
	[0184.923] CloseHandle (hObject=0x144) returned 1
	[0184.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\kinit.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\kinit.exe")) returned 0x20
	[0184.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\kinit.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\kinit.exe")) returned 0x20
	[0184.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\kinit.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\kinit.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\kinit.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\klist.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\klist.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.924] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15784) returned 1
	[0184.924] CloseHandle (hObject=0x144) returned 1
	[0184.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\klist.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\klist.exe")) returned 0x20
	[0184.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\klist.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\klist.exe")) returned 0x20
	[0184.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\klist.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\klist.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\klist.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ktab.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ktab.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0184.925] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15784) returned 1
	[0184.925] CloseHandle (hObject=0x144) returned 1
	[0184.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ktab.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ktab.exe")) returned 0x20
	[0184.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ktab.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ktab.exe")) returned 0x20
	[0184.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ktab.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ktab.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\ktab.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\libxml2.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\libxml2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.928] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=449448) returned 1
	[0184.928] CloseHandle (hObject=0x20c) returned 1
	[0184.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\libxml2.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\libxml2.dll")) returned 0x20
	[0184.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\libxml2.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\libxml2.dll")) returned 0x20
	[0184.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\libxml2.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\libxml2.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\libxml2.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\libxml2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\libxslt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\libxslt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.929] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=158120) returned 1
	[0184.930] CloseHandle (hObject=0x20c) returned 1
	[0184.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\libxslt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\libxslt.dll")) returned 0x20
	[0184.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\libxslt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\libxslt.dll")) returned 0x20
	[0184.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\libxslt.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\libxslt.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\libxslt.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\libxslt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\management.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\management.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0184.931] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31656) returned 1
	[0184.931] CloseHandle (hObject=0x20c) returned 1
	[0184.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\management.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\management.dll")) returned 0x20
	[0184.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\management.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\management.dll")) returned 0x20
	[0184.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\management.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\management.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0184.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\management.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\management.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\mlib_image.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\mlib_image.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.150] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=573864) returned 1
	[0185.150] CloseHandle (hObject=0x210) returned 1
	[0185.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\mlib_image.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\mlib_image.dll")) returned 0x20
	[0185.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\mlib_image.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\mlib_image.dll")) returned 0x20
	[0185.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\mlib_image.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\mlib_image.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\mlib_image.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\mlib_image.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.150] SetEvent (hEvent=0xfc) returned 1
	[0185.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\unpack200.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\unpack200.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.151] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=146344) returned 1
	[0185.151] CloseHandle (hObject=0x210) returned 1
	[0185.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\unpack200.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\unpack200.exe")) returned 0x20
	[0185.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\unpack200.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\unpack200.exe")) returned 0x20
	[0185.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\unpack200.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\unpack200.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\unpack200.exe" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\verify.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\verify.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.152] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39848) returned 1
	[0185.152] CloseHandle (hObject=0x210) returned 1
	[0185.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\verify.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\verify.dll")) returned 0x20
	[0185.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\verify.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\verify.dll")) returned 0x20
	[0185.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\verify.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\verify.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\verify.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\verify.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.154] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21416) returned 1
	[0185.154] CloseHandle (hObject=0x210) returned 1
	[0185.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\w2k_lsa_auth.dll")) returned 0x20
	[0185.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\w2k_lsa_auth.dll")) returned 0x20
	[0185.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\w2k_lsa_auth.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\w2k_lsa_auth.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\WindowsAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\windowsaccessbridge-32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.157] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=96168) returned 1
	[0185.157] CloseHandle (hObject=0x210) returned 1
	[0185.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\WindowsAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\windowsaccessbridge-32.dll")) returned 0x20
	[0185.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\WindowsAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\windowsaccessbridge-32.dll")) returned 0x20
	[0185.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\WindowsAccessBridge-32.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\windowsaccessbridge-32.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\WindowsAccessBridge-32.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\windowsaccessbridge-32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.157] SetEvent (hEvent=0xfc) returned 1
	[0185.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\wsdetect.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\wsdetect.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.158] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=167848) returned 1
	[0185.158] CloseHandle (hObject=0x210) returned 1
	[0185.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\wsdetect.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\wsdetect.dll")) returned 0x20
	[0185.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\wsdetect.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\wsdetect.dll")) returned 0x20
	[0185.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\wsdetect.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\wsdetect.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\wsdetect.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\wsdetect.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\zip.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\zip.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.159] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=66984) returned 1
	[0185.159] CloseHandle (hObject=0x210) returned 1
	[0185.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\zip.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\zip.dll")) returned 0x20
	[0185.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\zip.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\zip.dll")) returned 0x20
	[0185.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\zip.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\zip.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\bin\\zip.dll" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\zip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" (normalized: "c:\\program files (x86)\\java\\jre7\\copyright"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.161] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3409) returned 1
	[0185.161] CloseHandle (hObject=0x210) returned 1
	[0185.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" (normalized: "c:\\program files (x86)\\java\\jre7\\copyright")) returned 0x20
	[0185.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" (normalized: "c:\\program files (x86)\\java\\jre7\\copyright")) returned 0x20
	[0185.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\copyright.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\COPYRIGHT" (normalized: "c:\\program files (x86)\\java\\jre7\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.162] SetEvent (hEvent=0xfc) returned 1
	[0185.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\accessibility.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\accessibility.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.162] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=155) returned 1
	[0185.162] CloseHandle (hObject=0x210) returned 1
	[0185.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\accessibility.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\accessibility.properties")) returned 0x20
	[0185.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\accessibility.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\accessibility.properties")) returned 0x20
	[0185.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\accessibility.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\accessibility.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\accessibility.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\alt-rt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.164] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=172765) returned 1
	[0185.164] CloseHandle (hObject=0x210) returned 1
	[0185.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\alt-rt.jar")) returned 0x20
	[0185.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\alt-rt.jar")) returned 0x20
	[0185.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\alt-rt.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\alt-rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\alt-rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\calendars.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\calendars.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.165] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1232) returned 1
	[0185.165] CloseHandle (hObject=0x210) returned 1
	[0185.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\calendars.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\calendars.properties")) returned 0x20
	[0185.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\calendars.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\calendars.properties")) returned 0x20
	[0185.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\calendars.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\calendars.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\calendars.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.166] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3556391) returned 1
	[0185.166] CloseHandle (hObject=0x210) returned 1
	[0185.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar")) returned 0x20
	[0185.166] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0185.167] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\charsets.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\charsets.jar")) returned 0
	[0185.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\classlist" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\classlist"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0185.167] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75075) returned 1
	[0185.167] CloseHandle (hObject=0x210) returned 1
	[0185.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\classlist" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\classlist")) returned 0x20
	[0185.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\classlist" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\classlist")) returned 0x20
	[0185.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\classlist.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\classlist.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\classlist" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.489] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51236) returned 1
	[0185.490] CloseHandle (hObject=0x214) returned 1
	[0185.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\ciexyz.pf")) returned 0x20
	[0185.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\ciexyz.pf")) returned 0x20
	[0185.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\ciexyz.pf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.490] SetEvent (hEvent=0xfc) returned 1
	[0185.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.491] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1044) returned 1
	[0185.491] CloseHandle (hObject=0x214) returned 1
	[0185.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\linear_rgb.pf")) returned 0x20
	[0185.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\linear_rgb.pf")) returned 0x20
	[0185.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\linear_rgb.pf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.493] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=274474) returned 1
	[0185.493] CloseHandle (hObject=0x214) returned 1
	[0185.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\pycc.pf")) returned 0x20
	[0185.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\pycc.pf")) returned 0x20
	[0185.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\PYCC.pf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\pycc.pf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.494] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3144) returned 1
	[0185.494] CloseHandle (hObject=0x214) returned 1
	[0185.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\srgb.pf")) returned 0x20
	[0185.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\srgb.pf")) returned 0x20
	[0185.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\sRGB.pf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\srgb.pf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\content-types.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\content-types.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.495] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5548) returned 1
	[0185.495] CloseHandle (hObject=0x214) returned 1
	[0185.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\content-types.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\content-types.properties")) returned 0x20
	[0185.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\content-types.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\content-types.properties")) returned 0x20
	[0185.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\content-types.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\content-types.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\content-types.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\currency.data"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.496] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4200) returned 1
	[0185.496] CloseHandle (hObject=0x214) returned 1
	[0185.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\currency.data")) returned 0x20
	[0185.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\currency.data")) returned 0x20
	[0185.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\currency.data.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\currency.data.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\currency.data" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.498] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18636) returned 1
	[0185.498] CloseHandle (hObject=0x214) returned 1
	[0185.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip")) returned 0x20
	[0185.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip")) returned 0x20
	[0185.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.499] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40814) returned 1
	[0185.499] CloseHandle (hObject=0x214) returned 1
	[0185.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf")) returned 0x20
	[0185.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf")) returned 0x20
	[0185.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqs.conf" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqs.conf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.500] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1720) returned 1
	[0185.500] CloseHandle (hObject=0x214) returned 1
	[0185.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties")) returned 0x20
	[0185.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties")) returned 0x20
	[0185.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\jqs\\jqsmessages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.505] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2860) returned 1
	[0185.505] CloseHandle (hObject=0x214) returned 1
	[0185.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages.properties")) returned 0x20
	[0185.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages.properties")) returned 0x20
	[0185.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.505] SetEvent (hEvent=0xfc) returned 1
	[0185.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.506] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3306) returned 1
	[0185.506] CloseHandle (hObject=0x214) returned 1
	[0185.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_de.properties")) returned 0x20
	[0185.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_de.properties")) returned 0x20
	[0185.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_de.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_de.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.507] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3600) returned 1
	[0185.507] CloseHandle (hObject=0x214) returned 1
	[0185.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_es.properties")) returned 0x20
	[0185.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_es.properties")) returned 0x20
	[0185.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_es.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_es.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.508] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3409) returned 1
	[0185.508] CloseHandle (hObject=0x214) returned 1
	[0185.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_fr.properties")) returned 0x20
	[0185.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_fr.properties")) returned 0x20
	[0185.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_fr.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_fr.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.510] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3223) returned 1
	[0185.510] CloseHandle (hObject=0x214) returned 1
	[0185.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_it.properties")) returned 0x20
	[0185.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_it.properties")) returned 0x20
	[0185.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_it.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_it.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.510] SetEvent (hEvent=0xfc) returned 1
	[0185.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x214
	[0185.511] GetFileSizeEx (in: hFile=0x214, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6349) returned 1
	[0185.511] CloseHandle (hObject=0x214) returned 1
	[0185.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_ja.properties")) returned 0x20
	[0185.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_ja.properties")) returned 0x20
	[0185.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ja.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_ja.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.517] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5719) returned 1
	[0185.518] CloseHandle (hObject=0x200) returned 1
	[0185.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_ko.properties")) returned 0x20
	[0185.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_ko.properties")) returned 0x20
	[0185.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ko.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_ko.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.518] SetEvent (hEvent=0xfc) returned 1
	[0185.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.519] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3348) returned 1
	[0185.519] CloseHandle (hObject=0x200) returned 1
	[0185.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_pt_br.properties")) returned 0x20
	[0185.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_pt_br.properties")) returned 0x20
	[0185.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_pt_br.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.520] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3409) returned 1
	[0185.520] CloseHandle (hObject=0x200) returned 1
	[0185.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_sv.properties")) returned 0x20
	[0185.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_sv.properties")) returned 0x20
	[0185.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_sv.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_sv.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.521] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4072) returned 1
	[0185.521] CloseHandle (hObject=0x200) returned 1
	[0185.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20
	[0185.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20
	[0185.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_cn.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.522] SetEvent (hEvent=0xfc) returned 1
	[0185.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.523] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3752) returned 1
	[0185.523] CloseHandle (hObject=0x200) returned 1
	[0185.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20
	[0185.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20
	[0185.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_hk.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0185.525] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3752) returned 1
	[0185.525] CloseHandle (hObject=0x168) returned 1
	[0185.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20
	[0185.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20
	[0185.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_tw.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.525] SetEvent (hEvent=0xfc) returned 1
	[0185.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0185.527] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13959) returned 1
	[0185.527] CloseHandle (hObject=0x168) returned 1
	[0185.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif")) returned 0x20
	[0185.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif")) returned 0x20
	[0185.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\splash.gif" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0185.532] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4495223) returned 1
	[0185.532] CloseHandle (hObject=0x168) returned 1
	[0185.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar")) returned 0x20
	[0185.532] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0185.532] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy.jar")) returned 0
	[0185.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\access-bridge-32.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0185.534] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=84216) returned 1
	[0185.534] CloseHandle (hObject=0x168) returned 1
	[0185.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\access-bridge-32.jar")) returned 0x20
	[0185.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\access-bridge-32.jar")) returned 0x20
	[0185.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\access-bridge-32.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\access-bridge-32.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\access-bridge-32.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.536] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8934) returned 1
	[0185.536] CloseHandle (hObject=0x200) returned 1
	[0185.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\dnsns.jar")) returned 0x20
	[0185.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\dnsns.jar")) returned 0x20
	[0185.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\dnsns.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.536] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.537] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43594) returned 1
	[0185.537] CloseHandle (hObject=0x200) returned 1
	[0185.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\jaccess.jar")) returned 0x20
	[0185.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\jaccess.jar")) returned 0x20
	[0185.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\jaccess.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\localedata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0185.840] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1014029) returned 1
	[0185.842] CloseHandle (hObject=0x200) returned 1
	[0185.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\localedata.jar")) returned 0x20
	[0185.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\localedata.jar")) returned 0x20
	[0185.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\localedata.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0185.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\localedata.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0185.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\javafx.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javafx.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0186.006] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29) returned 1
	[0186.006] CloseHandle (hObject=0x1b8) returned 1
	[0186.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\javafx.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javafx.properties")) returned 0x20
	[0186.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\javafx.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javafx.properties")) returned 0x20
	[0186.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\javafx.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javafx.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\javafx.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.007] SetEvent (hEvent=0xfc) returned 1
	[0186.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\logging.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\logging.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0186.007] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2455) returned 1
	[0186.008] CloseHandle (hObject=0x1b8) returned 1
	[0186.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\logging.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\logging.properties")) returned 0x20
	[0186.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\logging.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\logging.properties")) returned 0x20
	[0186.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\logging.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\logging.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\logging.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.access" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.access"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0186.009] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3998) returned 1
	[0186.009] CloseHandle (hObject=0x1b8) returned 1
	[0186.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.access" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.access")) returned 0x20
	[0186.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.access" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.access")) returned 0x20
	[0186.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.access.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.access.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.access" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0186.010] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2856) returned 1
	[0186.010] CloseHandle (hObject=0x1b8) returned 1
	[0186.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.password.template")) returned 0x20
	[0186.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.password.template")) returned 0x20
	[0186.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.password.template.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\management.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\management.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.012] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14097) returned 1
	[0186.012] CloseHandle (hObject=0x1fc) returned 1
	[0186.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\management.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\management.properties")) returned 0x20
	[0186.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\management.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\management.properties")) returned 0x20
	[0186.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\management.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\management.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\management.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.012] SetEvent (hEvent=0xfc) returned 1
	[0186.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.013] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3376) returned 1
	[0186.013] CloseHandle (hObject=0x1fc) returned 1
	[0186.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\snmp.acl.template")) returned 0x20
	[0186.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\snmp.acl.template")) returned 0x20
	[0186.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\snmp.acl.template.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management-agent.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.014] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=385) returned 1
	[0186.014] CloseHandle (hObject=0x1fc) returned 1
	[0186.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management-agent.jar")) returned 0x20
	[0186.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management-agent.jar")) returned 0x20
	[0186.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management-agent.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\management-agent.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\meta-index" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.019] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2190) returned 1
	[0186.019] CloseHandle (hObject=0x1fc) returned 1
	[0186.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\meta-index" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\meta-index")) returned 0x20
	[0186.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\meta-index" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\meta-index")) returned 0x20
	[0186.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\meta-index.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\meta-index.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\meta-index" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\net.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\net.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.020] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3070) returned 1
	[0186.020] CloseHandle (hObject=0x1fc) returned 1
	[0186.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\net.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\net.properties")) returned 0x20
	[0186.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\net.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\net.properties")) returned 0x20
	[0186.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\net.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\net.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\net.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.022] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1924760) returned 1
	[0186.022] CloseHandle (hObject=0x1fc) returned 1
	[0186.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar")) returned 0x20
	[0186.022] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0186.022] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\plugin.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\plugin.jar")) returned 0
	[0186.022] SetEvent (hEvent=0xfc) returned 1
	[0186.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\psfont.properties.ja" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\psfont.properties.ja"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.023] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2796) returned 1
	[0186.023] CloseHandle (hObject=0x1fc) returned 1
	[0186.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\psfont.properties.ja" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\psfont.properties.ja")) returned 0x20
	[0186.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\psfont.properties.ja" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\psfont.properties.ja")) returned 0x20
	[0186.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\psfont.properties.ja.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\psfont.properties.ja.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\psfont.properties.ja" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.023] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\psfontj2d.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\psfontj2d.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.024] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10393) returned 1
	[0186.024] CloseHandle (hObject=0x1fc) returned 1
	[0186.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\psfontj2d.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\psfontj2d.properties")) returned 0x20
	[0186.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\psfontj2d.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\psfontj2d.properties")) returned 0x20
	[0186.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\psfontj2d.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\psfontj2d.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\psfontj2d.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.025] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2450112) returned 1
	[0186.025] CloseHandle (hObject=0x1fc) returned 1
	[0186.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar")) returned 0x20
	[0186.025] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0186.025] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\resources.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\resources.jar")) returned 0
	[0186.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.029] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51530798) returned 1
	[0186.029] CloseHandle (hObject=0x1fc) returned 1
	[0186.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar")) returned 0x20
	[0186.029] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0186.029] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\rt.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\rt.jar")) returned 0
	[0186.029] SetEvent (hEvent=0xfc) returned 1
	[0186.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\blacklist" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\blacklist"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.030] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2770) returned 1
	[0186.030] CloseHandle (hObject=0x1fc) returned 1
	[0186.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\blacklist" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\blacklist")) returned 0x20
	[0186.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\blacklist" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\blacklist")) returned 0x20
	[0186.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\blacklist.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\blacklist.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\blacklist" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\cacerts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\cacerts"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.032] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=82586) returned 1
	[0186.032] CloseHandle (hObject=0x1fc) returned 1
	[0186.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\cacerts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\cacerts")) returned 0x20
	[0186.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\cacerts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\cacerts")) returned 0x20
	[0186.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\cacerts.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\cacerts.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\cacerts" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.032] SetEvent (hEvent=0xfc) returned 1
	[0186.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.policy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\java.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.034] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2254) returned 1
	[0186.034] CloseHandle (hObject=0x1fc) returned 1
	[0186.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.policy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\java.policy")) returned 0x20
	[0186.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.policy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\java.policy")) returned 0x20
	[0186.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.policy.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\java.policy.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.policy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.034] SetEvent (hEvent=0xfc) returned 1
	[0186.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.security" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\java.security"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.035] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17824) returned 1
	[0186.035] CloseHandle (hObject=0x1fc) returned 1
	[0186.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.security" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\java.security")) returned 0x20
	[0186.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.security" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\java.security")) returned 0x20
	[0186.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.security.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\java.security.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\java.security" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.036] SetEvent (hEvent=0xfc) returned 1
	[0186.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javafx.policy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\javafx.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.037] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=158) returned 1
	[0186.037] CloseHandle (hObject=0x1fc) returned 1
	[0186.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javafx.policy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\javafx.policy")) returned 0x20
	[0186.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javafx.policy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\javafx.policy")) returned 0x20
	[0186.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javafx.policy.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\javafx.policy.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javafx.policy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\javafx.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javaws.policy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\javaws.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.038] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=98) returned 1
	[0186.038] CloseHandle (hObject=0x1fc) returned 1
	[0186.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javaws.policy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\javaws.policy")) returned 0x20
	[0186.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javaws.policy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\javaws.policy")) returned 0x20
	[0186.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javaws.policy.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\javaws.policy.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\javaws.policy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.039] SetEvent (hEvent=0xfc) returned 1
	[0186.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\local_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.039] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2971) returned 1
	[0186.039] CloseHandle (hObject=0x1fc) returned 1
	[0186.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\local_policy.jar")) returned 0x20
	[0186.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\local_policy.jar")) returned 0x20
	[0186.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\local_policy.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\local_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\trusted.libraries" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\trusted.libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.041] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0186.041] CloseHandle (hObject=0x1fc) returned 1
	[0186.041] SetEvent (hEvent=0xfc) returned 1
	[0186.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1fc
	[0186.042] GetFileSizeEx (in: hFile=0x1fc, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2487) returned 1
	[0186.042] CloseHandle (hObject=0x1fc) returned 1
	[0186.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\us_export_policy.jar")) returned 0x20
	[0186.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\us_export_policy.jar")) returned 0x20
	[0186.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\us_export_policy.jar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\sound.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\sound.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.229] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1210) returned 1
	[0186.231] CloseHandle (hObject=0x200) returned 1
	[0186.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\sound.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\sound.properties")) returned 0x20
	[0186.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\sound.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\sound.properties")) returned 0x20
	[0186.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\sound.properties.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\sound.properties.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\sound.properties" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ceuta"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.376] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1112) returned 1
	[0186.376] CloseHandle (hObject=0x230) returned 1
	[0186.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ceuta")) returned 0x20
	[0186.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ceuta")) returned 0x20
	[0186.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ceuta.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ceuta.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ceuta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ceuta"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.377] SetEvent (hEvent=0xfc) returned 1
	[0186.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dakar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\dakar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.378] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0186.378] CloseHandle (hObject=0x230) returned 1
	[0186.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dakar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\dakar")) returned 0x20
	[0186.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dakar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\dakar")) returned 0x20
	[0186.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dakar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\dakar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dakar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\dakar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\dar_es_salaam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.379] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85) returned 1
	[0186.379] CloseHandle (hObject=0x230) returned 1
	[0186.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\dar_es_salaam")) returned 0x20
	[0186.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\dar_es_salaam")) returned 0x20
	[0186.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\dar_es_salaam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Dar_es_Salaam" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\dar_es_salaam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.380] SetEvent (hEvent=0xfc) returned 1
	[0186.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\djibouti"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.380] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.380] CloseHandle (hObject=0x230) returned 1
	[0186.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\djibouti")) returned 0x20
	[0186.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\djibouti")) returned 0x20
	[0186.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Djibouti.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\djibouti.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Djibouti" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\djibouti"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Douala" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\douala"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.382] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.382] CloseHandle (hObject=0x230) returned 1
	[0186.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Douala" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\douala")) returned 0x20
	[0186.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Douala" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\douala")) returned 0x20
	[0186.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Douala.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\douala.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Douala" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\douala"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.383] SetEvent (hEvent=0xfc) returned 1
	[0186.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\el_aaiun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.383] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0186.383] CloseHandle (hObject=0x230) returned 1
	[0186.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\el_aaiun")) returned 0x20
	[0186.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\el_aaiun")) returned 0x20
	[0186.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\el_aaiun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\El_Aaiun" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\el_aaiun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Freetown" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\freetown"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.385] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=313) returned 1
	[0186.385] CloseHandle (hObject=0x230) returned 1
	[0186.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Freetown" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\freetown")) returned 0x20
	[0186.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Freetown" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\freetown")) returned 0x20
	[0186.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Freetown.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\freetown.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Freetown" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\freetown"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.385] SetEvent (hEvent=0xfc) returned 1
	[0186.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\gaborone"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.387] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89) returned 1
	[0186.387] CloseHandle (hObject=0x230) returned 1
	[0186.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\gaborone")) returned 0x20
	[0186.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\gaborone")) returned 0x20
	[0186.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Gaborone.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\gaborone.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Gaborone" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\gaborone"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.387] SetEvent (hEvent=0xfc) returned 1
	[0186.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Harare" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\harare"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.388] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.388] CloseHandle (hObject=0x230) returned 1
	[0186.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Harare" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\harare")) returned 0x20
	[0186.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Harare" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\harare")) returned 0x20
	[0186.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Harare.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\harare.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Harare" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\harare"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.389] SetEvent (hEvent=0xfc) returned 1
	[0186.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\johannesburg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.390] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=105) returned 1
	[0186.390] CloseHandle (hObject=0x230) returned 1
	[0186.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\johannesburg")) returned 0x20
	[0186.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\johannesburg")) returned 0x20
	[0186.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\johannesburg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Johannesburg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\johannesburg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Juba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\juba"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.396] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=337) returned 1
	[0186.396] CloseHandle (hObject=0x230) returned 1
	[0186.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Juba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\juba")) returned 0x20
	[0186.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Juba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\juba")) returned 0x20
	[0186.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Juba.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\juba.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Juba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\juba"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.396] SetEvent (hEvent=0xfc) returned 1
	[0186.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kampala" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kampala"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.397] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=97) returned 1
	[0186.397] CloseHandle (hObject=0x230) returned 1
	[0186.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kampala" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kampala")) returned 0x20
	[0186.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kampala" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kampala")) returned 0x20
	[0186.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kampala.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kampala.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kampala" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kampala"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.398] SetEvent (hEvent=0xfc) returned 1
	[0186.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\khartoum"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0186.399] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=337) returned 1
	[0186.399] CloseHandle (hObject=0x230) returned 1
	[0186.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\khartoum")) returned 0x20
	[0186.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\khartoum")) returned 0x20
	[0186.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Khartoum.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\khartoum.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Khartoum" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\khartoum"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.399] SetEvent (hEvent=0xfc) returned 1
	[0186.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kigali" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kigali"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.401] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.401] CloseHandle (hObject=0x240) returned 1
	[0186.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kigali" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kigali")) returned 0x20
	[0186.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kigali" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kigali")) returned 0x20
	[0186.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kigali.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kigali.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kigali" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kigali"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.401] SetEvent (hEvent=0xfc) returned 1
	[0186.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kinshasa"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.402] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0186.403] CloseHandle (hObject=0x240) returned 1
	[0186.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kinshasa")) returned 0x20
	[0186.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kinshasa")) returned 0x20
	[0186.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kinshasa.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Kinshasa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\kinshasa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.403] SetEvent (hEvent=0xfc) returned 1
	[0186.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lagos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lagos"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.404] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.404] CloseHandle (hObject=0x240) returned 1
	[0186.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lagos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lagos")) returned 0x20
	[0186.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lagos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lagos")) returned 0x20
	[0186.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lagos.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lagos.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lagos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lagos"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.405] SetEvent (hEvent=0xfc) returned 1
	[0186.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Libreville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\libreville"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.405] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.405] CloseHandle (hObject=0x240) returned 1
	[0186.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Libreville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\libreville")) returned 0x20
	[0186.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Libreville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\libreville")) returned 0x20
	[0186.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Libreville.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\libreville.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Libreville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\libreville"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lome"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.407] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0186.407] CloseHandle (hObject=0x240) returned 1
	[0186.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lome")) returned 0x20
	[0186.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lome")) returned 0x20
	[0186.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lome.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lome.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lome"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.407] SetEvent (hEvent=0xfc) returned 1
	[0186.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Luanda" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\luanda"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.409] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.409] CloseHandle (hObject=0x240) returned 1
	[0186.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Luanda" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\luanda")) returned 0x20
	[0186.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Luanda" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\luanda")) returned 0x20
	[0186.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Luanda.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\luanda.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Luanda" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\luanda"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.409] SetEvent (hEvent=0xfc) returned 1
	[0186.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lubumbashi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.410] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0186.410] CloseHandle (hObject=0x240) returned 1
	[0186.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lubumbashi")) returned 0x20
	[0186.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lubumbashi")) returned 0x20
	[0186.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lubumbashi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lubumbashi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lubumbashi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lusaka"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.411] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.411] CloseHandle (hObject=0x240) returned 1
	[0186.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lusaka")) returned 0x20
	[0186.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lusaka")) returned 0x20
	[0186.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lusaka.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lusaka.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Lusaka" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\lusaka"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Malabo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\malabo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.413] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0186.413] CloseHandle (hObject=0x240) returned 1
	[0186.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Malabo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\malabo")) returned 0x20
	[0186.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Malabo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\malabo")) returned 0x20
	[0186.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Malabo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\malabo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Malabo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\malabo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.413] SetEvent (hEvent=0xfc) returned 1
	[0186.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maputo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\maputo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.414] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.414] CloseHandle (hObject=0x240) returned 1
	[0186.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maputo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\maputo")) returned 0x20
	[0186.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maputo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\maputo")) returned 0x20
	[0186.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maputo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\maputo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maputo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\maputo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maseru" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\maseru"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.514] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89) returned 1
	[0186.514] CloseHandle (hObject=0x240) returned 1
	[0186.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maseru" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\maseru")) returned 0x20
	[0186.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maseru" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\maseru")) returned 0x20
	[0186.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maseru.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\maseru.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Maseru" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\maseru"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.514] SetEvent (hEvent=0xfc) returned 1
	[0186.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Niamey" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\niamey"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.515] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89) returned 1
	[0186.515] CloseHandle (hObject=0x240) returned 1
	[0186.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Niamey" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\niamey")) returned 0x20
	[0186.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Niamey" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\niamey")) returned 0x20
	[0186.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Niamey.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\niamey.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Niamey" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\niamey"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\nouakchott"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.517] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85) returned 1
	[0186.517] CloseHandle (hObject=0x240) returned 1
	[0186.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\nouakchott")) returned 0x20
	[0186.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\nouakchott")) returned 0x20
	[0186.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\nouakchott.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Nouakchott" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\nouakchott"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.517] SetEvent (hEvent=0xfc) returned 1
	[0186.517] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ouagadougou"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.518] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.518] CloseHandle (hObject=0x240) returned 1
	[0186.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ouagadougou")) returned 0x20
	[0186.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ouagadougou")) returned 0x20
	[0186.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ouagadougou.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Ouagadougou" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\ouagadougou"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\porto-novo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.519] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0186.519] CloseHandle (hObject=0x240) returned 1
	[0186.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\porto-novo")) returned 0x20
	[0186.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\porto-novo")) returned 0x20
	[0186.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\porto-novo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Porto-Novo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\porto-novo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.520] SetEvent (hEvent=0xfc) returned 1
	[0186.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\sao_tome"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.521] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.521] CloseHandle (hObject=0x240) returned 1
	[0186.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\sao_tome")) returned 0x20
	[0186.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\sao_tome")) returned 0x20
	[0186.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\sao_tome.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Sao_Tome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\sao_tome"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\tripoli"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.524] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=732) returned 1
	[0186.524] CloseHandle (hObject=0x240) returned 1
	[0186.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\tripoli")) returned 0x20
	[0186.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\tripoli")) returned 0x20
	[0186.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Tripoli.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\tripoli.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Tripoli" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\tripoli"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Tunis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\tunis"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.529] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=329) returned 1
	[0186.529] CloseHandle (hObject=0x240) returned 1
	[0186.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Tunis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\tunis")) returned 0x20
	[0186.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Tunis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\tunis")) returned 0x20
	[0186.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Tunis.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\tunis.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Tunis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\tunis"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\windhoek"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.530] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=824) returned 1
	[0186.530] CloseHandle (hObject=0x240) returned 1
	[0186.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\windhoek")) returned 0x20
	[0186.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\windhoek")) returned 0x20
	[0186.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Windhoek.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\windhoek.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\Windhoek" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\africa\\windhoek"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Adak" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\adak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.532] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1224) returned 1
	[0186.533] CloseHandle (hObject=0x240) returned 1
	[0186.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Adak" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\adak")) returned 0x20
	[0186.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Adak" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\adak")) returned 0x20
	[0186.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Adak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\adak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Adak" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\adak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.533] SetEvent (hEvent=0xfc) returned 1
	[0186.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Anchorage" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\anchorage"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.534] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1224) returned 1
	[0186.534] CloseHandle (hObject=0x240) returned 1
	[0186.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Anchorage" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\anchorage")) returned 0x20
	[0186.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Anchorage" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\anchorage")) returned 0x20
	[0186.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Anchorage.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\anchorage.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Anchorage" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\anchorage"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Anguilla" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\anguilla"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.535] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.535] CloseHandle (hObject=0x240) returned 1
	[0186.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Anguilla" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\anguilla")) returned 0x20
	[0186.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Anguilla" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\anguilla")) returned 0x20
	[0186.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Anguilla.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\anguilla.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Anguilla" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\anguilla"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Antigua" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\antigua"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.537] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0186.537] CloseHandle (hObject=0x240) returned 1
	[0186.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Antigua" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\antigua")) returned 0x20
	[0186.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Antigua" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\antigua")) returned 0x20
	[0186.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Antigua.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\antigua.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Antigua" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\antigua"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.537] SetEvent (hEvent=0xfc) returned 1
	[0186.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Araguaina" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\araguaina"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.538] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=892) returned 1
	[0186.538] CloseHandle (hObject=0x240) returned 1
	[0186.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Araguaina" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\araguaina")) returned 0x20
	[0186.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Araguaina" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\araguaina")) returned 0x20
	[0186.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Araguaina.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\araguaina.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Araguaina" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\araguaina"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\buenos_aires"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.540] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=549) returned 1
	[0186.540] CloseHandle (hObject=0x240) returned 1
	[0186.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\buenos_aires")) returned 0x20
	[0186.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\buenos_aires")) returned 0x20
	[0186.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\buenos_aires.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Buenos_Aires" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\buenos_aires"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.540] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\catamarca"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.541] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=549) returned 1
	[0186.541] CloseHandle (hObject=0x240) returned 1
	[0186.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\catamarca")) returned 0x20
	[0186.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\catamarca")) returned 0x20
	[0186.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\catamarca.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Catamarca" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\catamarca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\cordoba"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.543] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=549) returned 1
	[0186.543] CloseHandle (hObject=0x240) returned 1
	[0186.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\cordoba")) returned 0x20
	[0186.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\cordoba")) returned 0x20
	[0186.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\cordoba.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Cordoba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\cordoba"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.543] SetEvent (hEvent=0xfc) returned 1
	[0186.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\jujuy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.544] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=533) returned 1
	[0186.544] CloseHandle (hObject=0x240) returned 1
	[0186.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\jujuy")) returned 0x20
	[0186.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\jujuy")) returned 0x20
	[0186.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\jujuy.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Jujuy" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\jujuy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\la_rioja"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.546] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=557) returned 1
	[0186.546] CloseHandle (hObject=0x240) returned 1
	[0186.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\la_rioja")) returned 0x20
	[0186.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\la_rioja")) returned 0x20
	[0186.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\la_rioja.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\La_Rioja" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\la_rioja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.546] SetEvent (hEvent=0xfc) returned 1
	[0186.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\mendoza"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.547] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=549) returned 1
	[0186.547] CloseHandle (hObject=0x240) returned 1
	[0186.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\mendoza")) returned 0x20
	[0186.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\mendoza")) returned 0x20
	[0186.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\mendoza.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Mendoza" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\mendoza"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\rio_gallegos"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.549] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=549) returned 1
	[0186.549] CloseHandle (hObject=0x240) returned 1
	[0186.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\rio_gallegos")) returned 0x20
	[0186.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\rio_gallegos")) returned 0x20
	[0186.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\rio_gallegos.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Rio_Gallegos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\rio_gallegos"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.549] SetEvent (hEvent=0xfc) returned 1
	[0186.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\salta"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.550] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=533) returned 1
	[0186.550] CloseHandle (hObject=0x240) returned 1
	[0186.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\salta")) returned 0x20
	[0186.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\salta")) returned 0x20
	[0186.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\salta.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Salta" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\salta"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\san_juan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.552] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=557) returned 1
	[0186.552] CloseHandle (hObject=0x240) returned 1
	[0186.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\san_juan")) returned 0x20
	[0186.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\san_juan")) returned 0x20
	[0186.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\san_juan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Juan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\san_juan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.553] SetEvent (hEvent=0xfc) returned 1
	[0186.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\san_luis"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0186.554] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=557) returned 1
	[0186.554] CloseHandle (hObject=0x240) returned 1
	[0186.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\san_luis")) returned 0x20
	[0186.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\san_luis")) returned 0x20
	[0186.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\san_luis.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\San_Luis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\san_luis"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.555] SetEvent (hEvent=0xfc) returned 1
	[0186.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\tucuman"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0186.850] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=565) returned 1
	[0186.850] CloseHandle (hObject=0x210) returned 1
	[0186.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\tucuman")) returned 0x20
	[0186.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\tucuman")) returned 0x20
	[0186.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\tucuman.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\Tucuman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\argentina\\tucuman"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.850] SetEvent (hEvent=0xfc) returned 1
	[0186.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Aruba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\aruba"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0186.852] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0186.852] CloseHandle (hObject=0x210) returned 1
	[0186.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Aruba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\aruba")) returned 0x20
	[0186.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Aruba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\aruba")) returned 0x20
	[0186.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Aruba.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\aruba.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Aruba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\aruba"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.852] SetEvent (hEvent=0xfc) returned 1
	[0186.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Asuncion" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\asuncion"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0186.854] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1116) returned 1
	[0186.854] CloseHandle (hObject=0x210) returned 1
	[0186.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Asuncion" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\asuncion")) returned 0x20
	[0186.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Asuncion" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\asuncion")) returned 0x20
	[0186.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Asuncion.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\asuncion.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Asuncion" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\asuncion"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Atikokan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\atikokan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0186.856] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=93) returned 1
	[0186.856] CloseHandle (hObject=0x210) returned 1
	[0186.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Atikokan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\atikokan")) returned 0x20
	[0186.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Atikokan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\atikokan")) returned 0x20
	[0186.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Atikokan.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\atikokan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Atikokan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\atikokan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.856] SetEvent (hEvent=0xfc) returned 1
	[0186.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bahia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bahia"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0186.860] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=553) returned 1
	[0186.860] CloseHandle (hObject=0x210) returned 1
	[0186.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bahia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bahia")) returned 0x20
	[0186.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bahia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bahia")) returned 0x20
	[0186.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bahia.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bahia.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bahia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bahia"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bahia_banderas"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0186.862] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=844) returned 1
	[0186.862] CloseHandle (hObject=0x210) returned 1
	[0186.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bahia_banderas")) returned 0x20
	[0186.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bahia_banderas")) returned 0x20
	[0186.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bahia_banderas.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bahia_Banderas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bahia_banderas"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Barbados" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\barbados"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0186.864] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0186.864] CloseHandle (hObject=0x210) returned 1
	[0186.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Barbados" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\barbados")) returned 0x20
	[0186.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Barbados" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\barbados")) returned 0x20
	[0186.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Barbados.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\barbados.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Barbados" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\barbados"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.864] SetEvent (hEvent=0xfc) returned 1
	[0186.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Belem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\belem"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0186.865] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=297) returned 1
	[0186.865] CloseHandle (hObject=0x210) returned 1
	[0186.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Belem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\belem")) returned 0x20
	[0186.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Belem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\belem")) returned 0x20
	[0186.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Belem.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\belem.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Belem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\belem"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Belize" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\belize"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x210
	[0186.866] GetFileSizeEx (in: hFile=0x210, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=513) returned 1
	[0186.866] CloseHandle (hObject=0x210) returned 1
	[0186.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Belize" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\belize")) returned 0x20
	[0186.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Belize" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\belize")) returned 0x20
	[0186.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Belize.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\belize.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Belize" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\belize"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\blanc-sablon"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.876] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=93) returned 1
	[0186.876] CloseHandle (hObject=0x200) returned 1
	[0186.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\blanc-sablon")) returned 0x20
	[0186.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\blanc-sablon")) returned 0x20
	[0186.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\blanc-sablon.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Blanc-Sablon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\blanc-sablon"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\boa_vista"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.877] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=329) returned 1
	[0186.877] CloseHandle (hObject=0x200) returned 1
	[0186.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\boa_vista")) returned 0x20
	[0186.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\boa_vista")) returned 0x20
	[0186.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Boa_Vista.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\boa_vista.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Boa_Vista" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\boa_vista"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bogota" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bogota"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.879] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89) returned 1
	[0186.879] CloseHandle (hObject=0x200) returned 1
	[0186.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bogota" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bogota")) returned 0x20
	[0186.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bogota" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bogota")) returned 0x20
	[0186.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bogota.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bogota.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Bogota" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\bogota"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Boise" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\boise"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.880] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1284) returned 1
	[0186.880] CloseHandle (hObject=0x200) returned 1
	[0186.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Boise" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\boise")) returned 0x20
	[0186.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Boise" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\boise")) returned 0x20
	[0186.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Boise.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\boise.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Boise" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\boise"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cambridge_bay"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.881] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1076) returned 1
	[0186.881] CloseHandle (hObject=0x200) returned 1
	[0186.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cambridge_bay")) returned 0x20
	[0186.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cambridge_bay")) returned 0x20
	[0186.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cambridge_bay.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cambridge_Bay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cambridge_bay"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\campo_grande"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0186.883] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1116) returned 1
	[0186.883] CloseHandle (hObject=0x20c) returned 1
	[0186.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\campo_grande")) returned 0x20
	[0186.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\campo_grande")) returned 0x20
	[0186.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Campo_Grande.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\campo_grande.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Campo_Grande" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\campo_grande"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cancun" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cancun"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0186.884] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=792) returned 1
	[0186.884] CloseHandle (hObject=0x20c) returned 1
	[0186.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cancun" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cancun")) returned 0x20
	[0186.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cancun" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cancun")) returned 0x20
	[0186.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cancun.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cancun.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cancun" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cancun"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Caracas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\caracas"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0186.886] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85) returned 1
	[0186.886] CloseHandle (hObject=0x20c) returned 1
	[0186.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Caracas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\caracas")) returned 0x20
	[0186.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Caracas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\caracas")) returned 0x20
	[0186.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Caracas.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\caracas.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Caracas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\caracas"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cayenne" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cayenne"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0186.887] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0186.887] CloseHandle (hObject=0x20c) returned 1
	[0186.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cayenne" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cayenne")) returned 0x20
	[0186.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cayenne" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cayenne")) returned 0x20
	[0186.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cayenne.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cayenne.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cayenne" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cayenne"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cayman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cayman"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.888] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0186.888] CloseHandle (hObject=0x200) returned 1
	[0186.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cayman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cayman")) returned 0x20
	[0186.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cayman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cayman")) returned 0x20
	[0186.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cayman.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cayman.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cayman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cayman"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Chicago" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\chicago"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.889] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1960) returned 1
	[0186.889] CloseHandle (hObject=0x200) returned 1
	[0186.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Chicago" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\chicago")) returned 0x20
	[0186.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Chicago" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\chicago")) returned 0x20
	[0186.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Chicago.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\chicago.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Chicago" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\chicago"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Chihuahua" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\chihuahua"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.891] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=816) returned 1
	[0186.891] CloseHandle (hObject=0x200) returned 1
	[0186.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Chihuahua" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\chihuahua")) returned 0x20
	[0186.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Chihuahua" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\chihuahua")) returned 0x20
	[0186.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Chihuahua.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\chihuahua.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Chihuahua" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\chihuahua"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Costa_Rica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\costa_rica"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.892] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0186.892] CloseHandle (hObject=0x200) returned 1
	[0186.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Costa_Rica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\costa_rica")) returned 0x20
	[0186.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Costa_Rica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\costa_rica")) returned 0x20
	[0186.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Costa_Rica.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\costa_rica.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Costa_Rica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\costa_rica"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Creston" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\creston"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0186.893] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=73) returned 1
	[0186.893] CloseHandle (hObject=0x200) returned 1
	[0186.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Creston" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\creston")) returned 0x20
	[0186.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Creston" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\creston")) returned 0x20
	[0186.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Creston.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\creston.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0186.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Creston" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\creston"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0186.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cuiaba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cuiaba"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.006] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1100) returned 1
	[0187.006] CloseHandle (hObject=0x1b8) returned 1
	[0187.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cuiaba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cuiaba")) returned 0x20
	[0187.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cuiaba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cuiaba")) returned 0x20
	[0187.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cuiaba.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cuiaba.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Cuiaba" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\cuiaba"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.006] SetEvent (hEvent=0xfc) returned 1
	[0187.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\danmarkshavn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.007] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=341) returned 1
	[0187.007] CloseHandle (hObject=0x1b8) returned 1
	[0187.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\danmarkshavn")) returned 0x20
	[0187.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\danmarkshavn")) returned 0x20
	[0187.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\danmarkshavn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Danmarkshavn" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\danmarkshavn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dawson" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dawson"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.010] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1108) returned 1
	[0187.010] CloseHandle (hObject=0x1f4) returned 1
	[0187.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dawson" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dawson")) returned 0x20
	[0187.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dawson" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dawson")) returned 0x20
	[0187.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dawson.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dawson.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dawson" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dawson"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dawson_creek"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0187.011] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=509) returned 1
	[0187.011] CloseHandle (hObject=0x1f4) returned 1
	[0187.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dawson_creek")) returned 0x20
	[0187.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dawson_creek")) returned 0x20
	[0187.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dawson_creek.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Dawson_Creek" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\dawson_creek"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Denver" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\denver"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0187.146] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1336) returned 1
	[0187.146] CloseHandle (hObject=0x168) returned 1
	[0187.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Denver" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\denver")) returned 0x20
	[0187.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Denver" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\denver")) returned 0x20
	[0187.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Denver.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\denver.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Denver" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\denver"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.148] SetEvent (hEvent=0xfc) returned 1
	[0187.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Havana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\havana"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0187.150] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1340) returned 1
	[0187.150] CloseHandle (hObject=0x168) returned 1
	[0187.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Havana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\havana")) returned 0x20
	[0187.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Havana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\havana")) returned 0x20
	[0187.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Havana.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\havana.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Havana" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\havana"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Hermosillo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\hermosillo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0187.151] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=189) returned 1
	[0187.151] CloseHandle (hObject=0x168) returned 1
	[0187.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Hermosillo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\hermosillo")) returned 0x20
	[0187.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Hermosillo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\hermosillo")) returned 0x20
	[0187.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Hermosillo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\hermosillo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.151] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Hermosillo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\hermosillo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.152] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\indianapolis"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.155] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=868) returned 1
	[0187.156] CloseHandle (hObject=0x1b8) returned 1
	[0187.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\indianapolis")) returned 0x20
	[0187.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\indianapolis")) returned 0x20
	[0187.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\indianapolis.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Indianapolis" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\indianapolis"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.156] SetEvent (hEvent=0xfc) returned 1
	[0187.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\knox"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.157] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1304) returned 1
	[0187.157] CloseHandle (hObject=0x1b8) returned 1
	[0187.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\knox")) returned 0x20
	[0187.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\knox")) returned 0x20
	[0187.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\knox.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Knox" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\knox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\marengo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.158] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=900) returned 1
	[0187.158] CloseHandle (hObject=0x1b8) returned 1
	[0187.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\marengo")) returned 0x20
	[0187.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\marengo")) returned 0x20
	[0187.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\marengo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Marengo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\marengo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.159] SetEvent (hEvent=0xfc) returned 1
	[0187.159] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\petersburg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.160] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1004) returned 1
	[0187.160] CloseHandle (hObject=0x1b8) returned 1
	[0187.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\petersburg")) returned 0x20
	[0187.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\petersburg")) returned 0x20
	[0187.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\petersburg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Petersburg" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\petersburg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\tell_city"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.161] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=884) returned 1
	[0187.161] CloseHandle (hObject=0x1b8) returned 1
	[0187.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\tell_city")) returned 0x20
	[0187.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\tell_city")) returned 0x20
	[0187.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\tell_city.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Tell_City" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\tell_city"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\vevay"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.163] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=724) returned 1
	[0187.163] CloseHandle (hObject=0x1b8) returned 1
	[0187.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\vevay")) returned 0x20
	[0187.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\vevay")) returned 0x20
	[0187.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\vevay.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vevay" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\vevay"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\vincennes"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.164] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=884) returned 1
	[0187.164] CloseHandle (hObject=0x1b8) returned 1
	[0187.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\vincennes")) returned 0x20
	[0187.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\vincennes")) returned 0x20
	[0187.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\vincennes.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Vincennes" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\vincennes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\winamac"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.166] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=932) returned 1
	[0187.166] CloseHandle (hObject=0x238) returned 1
	[0187.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\winamac")) returned 0x20
	[0187.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\winamac")) returned 0x20
	[0187.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\winamac.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\Winamac" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\indiana\\winamac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Inuvik" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\inuvik"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.167] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1060) returned 1
	[0187.167] CloseHandle (hObject=0x238) returned 1
	[0187.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Inuvik" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\inuvik")) returned 0x20
	[0187.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Inuvik" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\inuvik")) returned 0x20
	[0187.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Inuvik.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\inuvik.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Inuvik" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\inuvik"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Iqaluit" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\iqaluit"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.169] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1064) returned 1
	[0187.169] CloseHandle (hObject=0x238) returned 1
	[0187.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Iqaluit" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\iqaluit")) returned 0x20
	[0187.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Iqaluit" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\iqaluit")) returned 0x20
	[0187.169] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Iqaluit.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\iqaluit.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Iqaluit" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\iqaluit"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Jamaica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\jamaica"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.170] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=233) returned 1
	[0187.170] CloseHandle (hObject=0x238) returned 1
	[0187.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Jamaica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\jamaica")) returned 0x20
	[0187.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Jamaica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\jamaica")) returned 0x20
	[0187.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Jamaica.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\jamaica.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Jamaica" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\jamaica"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.170] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Juneau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\juneau"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.171] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1224) returned 1
	[0187.171] CloseHandle (hObject=0x238) returned 1
	[0187.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Juneau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\juneau")) returned 0x20
	[0187.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Juneau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\juneau")) returned 0x20
	[0187.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Juneau.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\juneau.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Juneau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\juneau"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky\\louisville"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.172] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1500) returned 1
	[0187.173] CloseHandle (hObject=0x1b8) returned 1
	[0187.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky\\louisville")) returned 0x20
	[0187.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky\\louisville")) returned 0x20
	[0187.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky\\louisville.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Louisville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky\\louisville"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky\\monticello"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.174] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1260) returned 1
	[0187.174] CloseHandle (hObject=0x1b8) returned 1
	[0187.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky\\monticello")) returned 0x20
	[0187.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky\\monticello")) returned 0x20
	[0187.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky\\monticello.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\Monticello" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\kentucky\\monticello"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\La_Paz" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\la_paz"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.175] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=81) returned 1
	[0187.175] CloseHandle (hObject=0x1b8) returned 1
	[0187.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\La_Paz" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\la_paz")) returned 0x20
	[0187.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\La_Paz" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\la_paz")) returned 0x20
	[0187.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\La_Paz.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\la_paz.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\La_Paz" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\la_paz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Lima" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\lima"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0187.176] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0187.176] CloseHandle (hObject=0x1b8) returned 1
	[0187.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Lima" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\lima")) returned 0x20
	[0187.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Lima" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\lima")) returned 0x20
	[0187.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Lima.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\lima.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Lima" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\lima"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\los_angeles"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.286] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1560) returned 1
	[0187.286] CloseHandle (hObject=0x238) returned 1
	[0187.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\los_angeles")) returned 0x20
	[0187.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\los_angeles")) returned 0x20
	[0187.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Los_Angeles.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\los_angeles.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Los_Angeles" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\los_angeles"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.287] SetEvent (hEvent=0xfc) returned 1
	[0187.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Managua" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\managua"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.288] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=185) returned 1
	[0187.288] CloseHandle (hObject=0x238) returned 1
	[0187.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Managua" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\managua")) returned 0x20
	[0187.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Managua" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\managua")) returned 0x20
	[0187.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Managua.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\managua.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Managua" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\managua"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.289] SetEvent (hEvent=0xfc) returned 1
	[0187.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Manaus" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\manaus"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.290] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=313) returned 1
	[0187.290] CloseHandle (hObject=0x238) returned 1
	[0187.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Manaus" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\manaus")) returned 0x20
	[0187.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Manaus" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\manaus")) returned 0x20
	[0187.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Manaus.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\manaus.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Manaus" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\manaus"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.290] SetEvent (hEvent=0xfc) returned 1
	[0187.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Martinique" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\martinique"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.292] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89) returned 1
	[0187.292] CloseHandle (hObject=0x238) returned 1
	[0187.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Martinique" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\martinique")) returned 0x20
	[0187.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Martinique" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\martinique")) returned 0x20
	[0187.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Martinique.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\martinique.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Martinique" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\martinique"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.292] SetEvent (hEvent=0xfc) returned 1
	[0187.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Matamoros" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\matamoros"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.293] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=788) returned 1
	[0187.293] CloseHandle (hObject=0x238) returned 1
	[0187.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Matamoros" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\matamoros")) returned 0x20
	[0187.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Matamoros" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\matamoros")) returned 0x20
	[0187.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Matamoros.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\matamoros.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Matamoros" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\matamoros"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Mazatlan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\mazatlan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.295] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=840) returned 1
	[0187.295] CloseHandle (hObject=0x238) returned 1
	[0187.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Mazatlan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\mazatlan")) returned 0x20
	[0187.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Mazatlan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\mazatlan")) returned 0x20
	[0187.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Mazatlan.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\mazatlan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Mazatlan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\mazatlan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.295] SetEvent (hEvent=0xfc) returned 1
	[0187.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Menominee" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\menominee"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.296] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1216) returned 1
	[0187.296] CloseHandle (hObject=0x238) returned 1
	[0187.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Menominee" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\menominee")) returned 0x20
	[0187.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Menominee" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\menominee")) returned 0x20
	[0187.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Menominee.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\menominee.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Menominee" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\menominee"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Merida" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\merida"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.298] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=788) returned 1
	[0187.298] CloseHandle (hObject=0x238) returned 1
	[0187.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Merida" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\merida")) returned 0x20
	[0187.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Merida" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\merida")) returned 0x20
	[0187.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Merida.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\merida.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Merida" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\merida"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.298] SetEvent (hEvent=0xfc) returned 1
	[0187.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Metlakatla" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\metlakatla"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.300] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=329) returned 1
	[0187.300] CloseHandle (hObject=0x238) returned 1
	[0187.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Metlakatla" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\metlakatla")) returned 0x20
	[0187.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Metlakatla" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\metlakatla")) returned 0x20
	[0187.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Metlakatla.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\metlakatla.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Metlakatla" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\metlakatla"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.300] SetEvent (hEvent=0xfc) returned 1
	[0187.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Mexico_City" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\mexico_city"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.365] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=880) returned 1
	[0187.365] CloseHandle (hObject=0x238) returned 1
	[0187.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Mexico_City" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\mexico_city")) returned 0x20
	[0187.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Mexico_City" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\mexico_city")) returned 0x20
	[0187.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Mexico_City.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\mexico_city.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Mexico_City" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\mexico_city"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Miquelon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\miquelon"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.367] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=928) returned 1
	[0187.367] CloseHandle (hObject=0x238) returned 1
	[0187.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Miquelon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\miquelon")) returned 0x20
	[0187.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Miquelon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\miquelon")) returned 0x20
	[0187.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Miquelon.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\miquelon.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Miquelon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\miquelon"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.368] SetEvent (hEvent=0xfc) returned 1
	[0187.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Moncton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\moncton"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.369] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1732) returned 1
	[0187.369] CloseHandle (hObject=0x238) returned 1
	[0187.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Moncton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\moncton")) returned 0x20
	[0187.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Moncton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\moncton")) returned 0x20
	[0187.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Moncton.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\moncton.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Moncton" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\moncton"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.370] SetEvent (hEvent=0xfc) returned 1
	[0187.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Monterrey" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\monterrey"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.371] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=788) returned 1
	[0187.371] CloseHandle (hObject=0x238) returned 1
	[0187.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Monterrey" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\monterrey")) returned 0x20
	[0187.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Monterrey" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\monterrey")) returned 0x20
	[0187.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Monterrey.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\monterrey.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Monterrey" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\monterrey"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.371] SetEvent (hEvent=0xfc) returned 1
	[0187.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montevideo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montevideo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.375] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1152) returned 1
	[0187.375] CloseHandle (hObject=0x238) returned 1
	[0187.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montevideo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montevideo")) returned 0x20
	[0187.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montevideo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montevideo")) returned 0x20
	[0187.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montevideo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montevideo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montevideo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montevideo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montreal" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montreal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.544] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1928) returned 1
	[0187.544] CloseHandle (hObject=0x238) returned 1
	[0187.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montreal" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montreal")) returned 0x20
	[0187.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montreal" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montreal")) returned 0x20
	[0187.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montreal.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montreal.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Montreal" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\montreal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rio_branco"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.546] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=305) returned 1
	[0187.546] CloseHandle (hObject=0x238) returned 1
	[0187.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rio_branco")) returned 0x20
	[0187.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rio_branco")) returned 0x20
	[0187.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rio_Branco.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rio_branco.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Rio_Branco" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\rio_branco"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santarem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santarem"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.548] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=305) returned 1
	[0187.548] CloseHandle (hObject=0x238) returned 1
	[0187.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santarem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santarem")) returned 0x20
	[0187.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santarem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santarem")) returned 0x20
	[0187.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santarem.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santarem.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santarem" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santarem"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santa_isabel"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.549] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1276) returned 1
	[0187.549] CloseHandle (hObject=0x238) returned 1
	[0187.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santa_isabel")) returned 0x20
	[0187.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santa_isabel")) returned 0x20
	[0187.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santa_isabel.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santa_Isabel" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santa_isabel"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santiago" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santiago"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.551] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1368) returned 1
	[0187.551] CloseHandle (hObject=0x238) returned 1
	[0187.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santiago" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santiago")) returned 0x20
	[0187.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santiago" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santiago")) returned 0x20
	[0187.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santiago.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santiago.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santiago" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santiago"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santo_domingo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.553] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=201) returned 1
	[0187.553] CloseHandle (hObject=0x238) returned 1
	[0187.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santo_domingo")) returned 0x20
	[0187.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santo_domingo")) returned 0x20
	[0187.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santo_domingo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Santo_Domingo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\santo_domingo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\sao_paulo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.554] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1116) returned 1
	[0187.554] CloseHandle (hObject=0x238) returned 1
	[0187.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\sao_paulo")) returned 0x20
	[0187.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\sao_paulo")) returned 0x20
	[0187.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\sao_paulo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Sao_Paulo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\sao_paulo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.555] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\scoresbysund"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0187.730] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1040) returned 1
	[0187.730] CloseHandle (hObject=0x200) returned 1
	[0187.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\scoresbysund")) returned 0x20
	[0187.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\scoresbysund")) returned 0x20
	[0187.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Scoresbysund.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\scoresbysund.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Scoresbysund" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\america\\scoresbysund"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.731] SetEvent (hEvent=0xfc) returned 1
	[0187.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\casey"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.828] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=101) returned 1
	[0187.828] CloseHandle (hObject=0x238) returned 1
	[0187.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\casey")) returned 0x20
	[0187.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\casey")) returned 0x20
	[0187.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Casey.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\casey.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Casey" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\casey"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.829] SetEvent (hEvent=0xfc) returned 1
	[0187.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\dumontdurville"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.830] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=81) returned 1
	[0187.830] CloseHandle (hObject=0x238) returned 1
	[0187.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\dumontdurville")) returned 0x20
	[0187.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\dumontdurville")) returned 0x20
	[0187.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\dumontdurville.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\DumontDUrville" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\dumontdurville"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.831] SetEvent (hEvent=0xfc) returned 1
	[0187.831] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\macquarie"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.833] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=785) returned 1
	[0187.833] CloseHandle (hObject=0x238) returned 1
	[0187.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\macquarie")) returned 0x20
	[0187.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\macquarie")) returned 0x20
	[0187.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\macquarie.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Macquarie" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\macquarie"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\mawson"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.834] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0187.835] CloseHandle (hObject=0x238) returned 1
	[0187.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\mawson")) returned 0x20
	[0187.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\mawson")) returned 0x20
	[0187.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\mawson.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Mawson" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\mawson"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.835] SetEvent (hEvent=0xfc) returned 1
	[0187.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\mcmurdo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.836] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1124) returned 1
	[0187.836] CloseHandle (hObject=0x238) returned 1
	[0187.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\mcmurdo")) returned 0x20
	[0187.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\mcmurdo")) returned 0x20
	[0187.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\mcmurdo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\McMurdo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\mcmurdo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.837] SetEvent (hEvent=0xfc) returned 1
	[0187.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\palmer"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.837] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1104) returned 1
	[0187.837] CloseHandle (hObject=0x238) returned 1
	[0187.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\palmer")) returned 0x20
	[0187.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\palmer")) returned 0x20
	[0187.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\palmer.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Palmer" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\palmer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\rothera"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.838] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0187.838] CloseHandle (hObject=0x238) returned 1
	[0187.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\rothera")) returned 0x20
	[0187.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\rothera")) returned 0x20
	[0187.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\rothera.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Rothera" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\rothera"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\syowa"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.839] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0187.839] CloseHandle (hObject=0x238) returned 1
	[0187.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\syowa")) returned 0x20
	[0187.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\syowa")) returned 0x20
	[0187.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\syowa.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Syowa" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\syowa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\vostok"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.840] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0187.840] CloseHandle (hObject=0x238) returned 1
	[0187.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\vostok")) returned 0x20
	[0187.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\vostok")) returned 0x20
	[0187.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\vostok.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\Vostok" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\antarctica\\vostok"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aden" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aden"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.842] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0187.842] CloseHandle (hObject=0x238) returned 1
	[0187.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aden" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aden")) returned 0x20
	[0187.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aden" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aden")) returned 0x20
	[0187.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aden.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aden.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aden" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aden"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Almaty" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\almaty"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.844] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=453) returned 1
	[0187.844] CloseHandle (hObject=0x238) returned 1
	[0187.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Almaty" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\almaty")) returned 0x20
	[0187.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Almaty" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\almaty")) returned 0x20
	[0187.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Almaty.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\almaty.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Almaty" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\almaty"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.845] SetEvent (hEvent=0xfc) returned 1
	[0187.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Amman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\amman"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.845] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1036) returned 1
	[0187.845] CloseHandle (hObject=0x238) returned 1
	[0187.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Amman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\amman")) returned 0x20
	[0187.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Amman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\amman")) returned 0x20
	[0187.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Amman.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\amman.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Amman" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\amman"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\anadyr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0187.846] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=585) returned 1
	[0187.940] CloseHandle (hObject=0x238) returned 1
	[0187.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\anadyr")) returned 0x20
	[0187.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\anadyr")) returned 0x20
	[0187.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Anadyr.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\anadyr.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0187.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Anadyr" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\anadyr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0187.941] SetEvent (hEvent=0xfc) returned 1
	[0187.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aqtobe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.184] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=453) returned 1
	[0188.184] CloseHandle (hObject=0x200) returned 1
	[0188.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aqtobe")) returned 0x20
	[0188.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aqtobe")) returned 0x20
	[0188.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aqtobe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Aqtobe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\aqtobe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.184] SetEvent (hEvent=0xfc) returned 1
	[0188.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Karachi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\karachi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.185] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=153) returned 1
	[0188.185] CloseHandle (hObject=0x200) returned 1
	[0188.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Karachi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\karachi")) returned 0x20
	[0188.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Karachi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\karachi")) returned 0x20
	[0188.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Karachi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\karachi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Karachi" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\karachi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kashgar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.186] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=193) returned 1
	[0188.186] CloseHandle (hObject=0x200) returned 1
	[0188.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kashgar")) returned 0x20
	[0188.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kashgar")) returned 0x20
	[0188.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kashgar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kashgar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kashgar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kashgar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kathmandu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.188] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0188.188] CloseHandle (hObject=0x200) returned 1
	[0188.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kathmandu")) returned 0x20
	[0188.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kathmandu")) returned 0x20
	[0188.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kathmandu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kathmandu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kathmandu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.188] SetEvent (hEvent=0xfc) returned 1
	[0188.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\khandyga"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.189] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=601) returned 1
	[0188.189] CloseHandle (hObject=0x200) returned 1
	[0188.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\khandyga")) returned 0x20
	[0188.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\khandyga")) returned 0x20
	[0188.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Khandyga.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\khandyga.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Khandyga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\khandyga"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kolkata"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.190] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=97) returned 1
	[0188.190] CloseHandle (hObject=0x200) returned 1
	[0188.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kolkata")) returned 0x20
	[0188.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kolkata")) returned 0x20
	[0188.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kolkata.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kolkata.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kolkata" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kolkata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\krasnoyarsk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.191] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=581) returned 1
	[0188.191] CloseHandle (hObject=0x200) returned 1
	[0188.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\krasnoyarsk")) returned 0x20
	[0188.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\krasnoyarsk")) returned 0x20
	[0188.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\krasnoyarsk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Krasnoyarsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\krasnoyarsk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuala_lumpur"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.192] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=145) returned 1
	[0188.193] CloseHandle (hObject=0x200) returned 1
	[0188.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuala_lumpur")) returned 0x20
	[0188.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuala_lumpur")) returned 0x20
	[0188.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuala_lumpur.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuala_Lumpur" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuala_lumpur"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuching" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuching"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.194] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=217) returned 1
	[0188.194] CloseHandle (hObject=0x200) returned 1
	[0188.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuching" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuching")) returned 0x20
	[0188.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuching" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuching")) returned 0x20
	[0188.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuching.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuching.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuching" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuching"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuwait"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.195] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0188.195] CloseHandle (hObject=0x200) returned 1
	[0188.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuwait")) returned 0x20
	[0188.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuwait")) returned 0x20
	[0188.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuwait.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuwait.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Kuwait" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\kuwait"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Macau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\macau"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.197] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=393) returned 1
	[0188.197] CloseHandle (hObject=0x200) returned 1
	[0188.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Macau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\macau")) returned 0x20
	[0188.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Macau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\macau")) returned 0x20
	[0188.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Macau.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\macau.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Macau" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\macau"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.197] SetEvent (hEvent=0xfc) returned 1
	[0188.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Magadan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\magadan"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.199] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=581) returned 1
	[0188.199] CloseHandle (hObject=0x200) returned 1
	[0188.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Magadan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\magadan")) returned 0x20
	[0188.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Magadan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\magadan")) returned 0x20
	[0188.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Magadan.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\magadan.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Magadan" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\magadan"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.199] SetEvent (hEvent=0xfc) returned 1
	[0188.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Makassar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\makassar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.200] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85) returned 1
	[0188.200] CloseHandle (hObject=0x200) returned 1
	[0188.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Makassar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\makassar")) returned 0x20
	[0188.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Makassar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\makassar")) returned 0x20
	[0188.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Makassar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\makassar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Makassar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\makassar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.201] SetEvent (hEvent=0xfc) returned 1
	[0188.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Manila" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\manila"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.202] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=125) returned 1
	[0188.202] CloseHandle (hObject=0x200) returned 1
	[0188.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Manila" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\manila")) returned 0x20
	[0188.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Manila" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\manila")) returned 0x20
	[0188.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Manila.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\manila.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Manila" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\manila"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.202] SetEvent (hEvent=0xfc) returned 1
	[0188.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Muscat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\muscat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.203] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0188.203] CloseHandle (hObject=0x200) returned 1
	[0188.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Muscat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\muscat")) returned 0x20
	[0188.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Muscat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\muscat")) returned 0x20
	[0188.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Muscat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\muscat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Muscat" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\muscat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\nicosia"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.205] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1116) returned 1
	[0188.205] CloseHandle (hObject=0x200) returned 1
	[0188.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\nicosia")) returned 0x20
	[0188.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\nicosia")) returned 0x20
	[0188.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Nicosia.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\nicosia.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Nicosia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\nicosia"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.206] SetEvent (hEvent=0xfc) returned 1
	[0188.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\novokuznetsk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.206] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=581) returned 1
	[0188.206] CloseHandle (hObject=0x200) returned 1
	[0188.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\novokuznetsk")) returned 0x20
	[0188.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\novokuznetsk")) returned 0x20
	[0188.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\novokuznetsk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Novokuznetsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\novokuznetsk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\novosibirsk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.208] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=589) returned 1
	[0188.208] CloseHandle (hObject=0x200) returned 1
	[0188.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\novosibirsk")) returned 0x20
	[0188.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\novosibirsk")) returned 0x20
	[0188.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\novosibirsk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Novosibirsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\novosibirsk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.208] SetEvent (hEvent=0xfc) returned 1
	[0188.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Omsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\omsk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.209] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=581) returned 1
	[0188.209] CloseHandle (hObject=0x200) returned 1
	[0188.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Omsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\omsk")) returned 0x20
	[0188.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Omsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\omsk")) returned 0x20
	[0188.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Omsk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\omsk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Omsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\omsk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Oral" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\oral"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.210] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=461) returned 1
	[0188.210] CloseHandle (hObject=0x200) returned 1
	[0188.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Oral" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\oral")) returned 0x20
	[0188.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Oral" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\oral")) returned 0x20
	[0188.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Oral.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\oral.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Oral" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\oral"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\phnom_penh"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.211] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=97) returned 1
	[0188.211] CloseHandle (hObject=0x200) returned 1
	[0188.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\phnom_penh")) returned 0x20
	[0188.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\phnom_penh")) returned 0x20
	[0188.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\phnom_penh.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Phnom_Penh" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\phnom_penh"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\pontianak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.213] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=125) returned 1
	[0188.213] CloseHandle (hObject=0x200) returned 1
	[0188.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\pontianak")) returned 0x20
	[0188.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\pontianak")) returned 0x20
	[0188.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Pontianak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\pontianak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Pontianak" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\pontianak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.214] SetEvent (hEvent=0xfc) returned 1
	[0188.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\pyongyang"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.214] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=101) returned 1
	[0188.214] CloseHandle (hObject=0x200) returned 1
	[0188.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\pyongyang")) returned 0x20
	[0188.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\pyongyang")) returned 0x20
	[0188.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\pyongyang.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Pyongyang" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\pyongyang"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Qatar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\qatar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.216] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0188.216] CloseHandle (hObject=0x200) returned 1
	[0188.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Qatar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\qatar")) returned 0x20
	[0188.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Qatar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\qatar")) returned 0x20
	[0188.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Qatar.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\qatar.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Qatar" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\qatar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.216] SetEvent (hEvent=0xfc) returned 1
	[0188.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\qyzylorda"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.218] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=465) returned 1
	[0188.218] CloseHandle (hObject=0x200) returned 1
	[0188.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\qyzylorda")) returned 0x20
	[0188.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\qyzylorda")) returned 0x20
	[0188.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\qyzylorda.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Qyzylorda" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\qyzylorda"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.218] SetEvent (hEvent=0xfc) returned 1
	[0188.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\rangoon"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.219] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85) returned 1
	[0188.219] CloseHandle (hObject=0x200) returned 1
	[0188.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\rangoon")) returned 0x20
	[0188.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\rangoon")) returned 0x20
	[0188.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Rangoon.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\rangoon.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Rangoon" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\rangoon"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.371] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0188.371] CloseHandle (hObject=0x144) returned 1
	[0188.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh")) returned 0x20
	[0188.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh")) returned 0x20
	[0188.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\Riyadh" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\asia\\riyadh"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.371] SetEvent (hEvent=0xfc) returned 1
	[0188.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Canary" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\canary"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0188.503] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1044) returned 1
	[0188.503] CloseHandle (hObject=0x144) returned 1
	[0188.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Canary" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\canary")) returned 0x20
	[0188.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Canary" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\canary")) returned 0x20
	[0188.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Canary.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\canary.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\Canary" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\atlantic\\canary"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.503] SetEvent (hEvent=0xfc) returned 1
	[0188.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.700] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.700] CloseHandle (hObject=0x200) returned 1
	[0188.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt")) returned 0x20
	[0188.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt")) returned 0x20
	[0188.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.700] SetEvent (hEvent=0xfc) returned 1
	[0188.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+10" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+10"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.701] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.701] CloseHandle (hObject=0x200) returned 1
	[0188.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+10" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+10")) returned 0x20
	[0188.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+10" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+10")) returned 0x20
	[0188.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+10.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+10.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+10" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+10"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+11" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+11"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.703] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.703] CloseHandle (hObject=0x200) returned 1
	[0188.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+11" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+11")) returned 0x20
	[0188.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+11" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+11")) returned 0x20
	[0188.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+11.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+11.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+11" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+11"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.704] SetEvent (hEvent=0xfc) returned 1
	[0188.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+12" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+12"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.704] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.704] CloseHandle (hObject=0x200) returned 1
	[0188.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+12" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+12")) returned 0x20
	[0188.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+12" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+12")) returned 0x20
	[0188.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+12.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+12.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+12" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+12"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+2" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.706] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.706] CloseHandle (hObject=0x200) returned 1
	[0188.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+2" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+2")) returned 0x20
	[0188.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+2" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+2")) returned 0x20
	[0188.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+2" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.707] SetEvent (hEvent=0xfc) returned 1
	[0188.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+3" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.709] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.709] CloseHandle (hObject=0x200) returned 1
	[0188.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+3" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+3")) returned 0x20
	[0188.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+3" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+3")) returned 0x20
	[0188.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+3.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+3.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+3" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.709] SetEvent (hEvent=0xfc) returned 1
	[0188.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+4" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+4"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.710] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.710] CloseHandle (hObject=0x200) returned 1
	[0188.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+4" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+4")) returned 0x20
	[0188.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+4" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+4")) returned 0x20
	[0188.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+4.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+4.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+4" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.711] SetEvent (hEvent=0xfc) returned 1
	[0188.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+5" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+5"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0188.714] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.714] CloseHandle (hObject=0x20c) returned 1
	[0188.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+5" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+5")) returned 0x20
	[0188.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+5" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+5")) returned 0x20
	[0188.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+5.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+5.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+5" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.717] SetEvent (hEvent=0xfc) returned 1
	[0188.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+6" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+6"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0188.717] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.717] CloseHandle (hObject=0x20c) returned 1
	[0188.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+6" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+6")) returned 0x20
	[0188.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+6" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+6")) returned 0x20
	[0188.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+6.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+6.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+6" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+7" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+7"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.720] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.720] CloseHandle (hObject=0x238) returned 1
	[0188.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+7" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+7")) returned 0x20
	[0188.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+7" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+7")) returned 0x20
	[0188.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+7.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+7.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+7" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.720] SetEvent (hEvent=0xfc) returned 1
	[0188.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+8" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+8"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.721] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.721] CloseHandle (hObject=0x238) returned 1
	[0188.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+8" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+8")) returned 0x20
	[0188.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+8" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+8")) returned 0x20
	[0188.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+8.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+8.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+8" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+9" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+9"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.723] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.723] CloseHandle (hObject=0x200) returned 1
	[0188.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+9" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+9")) returned 0x20
	[0188.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+9" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+9")) returned 0x20
	[0188.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+9.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+9.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT+9" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt+9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.724] SetEvent (hEvent=0xfc) returned 1
	[0188.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-1" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.724] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.724] CloseHandle (hObject=0x200) returned 1
	[0188.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-1" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-1")) returned 0x20
	[0188.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-1" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-1")) returned 0x20
	[0188.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-1.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-1.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-1" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-10" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-10"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.726] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.726] CloseHandle (hObject=0x200) returned 1
	[0188.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-10" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-10")) returned 0x20
	[0188.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-10" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-10")) returned 0x20
	[0188.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-10.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-10.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-10" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-10"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.727] SetEvent (hEvent=0xfc) returned 1
	[0188.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-11" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-11"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x200
	[0188.727] GetFileSizeEx (in: hFile=0x200, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.727] CloseHandle (hObject=0x200) returned 1
	[0188.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-11" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-11")) returned 0x20
	[0188.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-11" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-11")) returned 0x20
	[0188.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-11.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-11.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-11" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-11"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-12" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-12"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.730] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.730] CloseHandle (hObject=0x238) returned 1
	[0188.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-12" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-12")) returned 0x20
	[0188.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-12" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-12")) returned 0x20
	[0188.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-12.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-12.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-12" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-12"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.731] SetEvent (hEvent=0xfc) returned 1
	[0188.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-13" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-13"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.731] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.731] CloseHandle (hObject=0x238) returned 1
	[0188.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-13" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-13")) returned 0x20
	[0188.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-13" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-13")) returned 0x20
	[0188.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-13.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-13.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-13" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-13"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-14" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-14"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.733] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.733] CloseHandle (hObject=0x238) returned 1
	[0188.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-14" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-14")) returned 0x20
	[0188.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-14" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-14")) returned 0x20
	[0188.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-14.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-14.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-14" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-14"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.734] SetEvent (hEvent=0xfc) returned 1
	[0188.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-2" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.734] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.734] CloseHandle (hObject=0x238) returned 1
	[0188.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-2" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-2")) returned 0x20
	[0188.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-2" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-2")) returned 0x20
	[0188.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-2.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-2.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-2" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-3" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.736] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.736] CloseHandle (hObject=0x238) returned 1
	[0188.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-3" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-3")) returned 0x20
	[0188.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-3" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-3")) returned 0x20
	[0188.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-3.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-3.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-3" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.737] SetEvent (hEvent=0xfc) returned 1
	[0188.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-4" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-4"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.737] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.737] CloseHandle (hObject=0x238) returned 1
	[0188.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-4" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-4")) returned 0x20
	[0188.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-4" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-4")) returned 0x20
	[0188.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-4.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-4.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-4" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-5" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-5"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.739] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.739] CloseHandle (hObject=0x238) returned 1
	[0188.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-5" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-5")) returned 0x20
	[0188.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-5" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-5")) returned 0x20
	[0188.739] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-5.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-5.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-5" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.740] SetEvent (hEvent=0xfc) returned 1
	[0188.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-6" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-6"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.740] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.740] CloseHandle (hObject=0x238) returned 1
	[0188.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-6" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-6")) returned 0x20
	[0188.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-6" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-6")) returned 0x20
	[0188.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-6.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-6.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-6" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-7" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-7"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.742] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.742] CloseHandle (hObject=0x238) returned 1
	[0188.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-7" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-7")) returned 0x20
	[0188.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-7" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-7")) returned 0x20
	[0188.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-7.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-7.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-7" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.742] SetEvent (hEvent=0xfc) returned 1
	[0188.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-8" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-8"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0188.745] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.745] CloseHandle (hObject=0x238) returned 1
	[0188.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-8" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-8")) returned 0x20
	[0188.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-8" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-8")) returned 0x20
	[0188.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-8.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-8.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-8" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-9" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-9"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0188.908] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0188.908] CloseHandle (hObject=0x228) returned 1
	[0188.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-9" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-9")) returned 0x20
	[0188.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-9" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-9")) returned 0x20
	[0188.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-9.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-9.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\GMT-9" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\etc\\gmt-9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Minsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\minsk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0188.909] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=605) returned 1
	[0188.909] CloseHandle (hObject=0x228) returned 1
	[0188.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Minsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\minsk")) returned 0x20
	[0188.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Minsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\minsk")) returned 0x20
	[0188.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Minsk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\minsk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0188.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Minsk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\minsk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0188.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Monaco" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\monaco"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.050] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1576) returned 1
	[0189.050] CloseHandle (hObject=0x168) returned 1
	[0189.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Monaco" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\monaco")) returned 0x20
	[0189.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Monaco" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\monaco")) returned 0x20
	[0189.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Monaco.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\monaco.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Monaco" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\monaco"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.050] SetEvent (hEvent=0xfc) returned 1
	[0189.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Oslo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\oslo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.051] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1216) returned 1
	[0189.051] CloseHandle (hObject=0x168) returned 1
	[0189.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Oslo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\oslo")) returned 0x20
	[0189.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Oslo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\oslo")) returned 0x20
	[0189.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Oslo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\oslo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Oslo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\oslo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Paris" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\paris"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.053] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1568) returned 1
	[0189.053] CloseHandle (hObject=0x168) returned 1
	[0189.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Paris" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\paris")) returned 0x20
	[0189.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Paris" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\paris")) returned 0x20
	[0189.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Paris.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\paris.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Paris" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\paris"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.053] SetEvent (hEvent=0xfc) returned 1
	[0189.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Prague" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\prague"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.054] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1216) returned 1
	[0189.054] CloseHandle (hObject=0x168) returned 1
	[0189.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Prague" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\prague")) returned 0x20
	[0189.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Prague" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\prague")) returned 0x20
	[0189.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Prague.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\prague.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Prague" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\prague"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Riga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\riga"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.056] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1108) returned 1
	[0189.056] CloseHandle (hObject=0x168) returned 1
	[0189.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Riga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\riga")) returned 0x20
	[0189.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Riga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\riga")) returned 0x20
	[0189.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Riga.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\riga.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Riga" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\riga"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Rome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\rome"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.058] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1440) returned 1
	[0189.058] CloseHandle (hObject=0x168) returned 1
	[0189.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Rome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\rome")) returned 0x20
	[0189.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Rome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\rome")) returned 0x20
	[0189.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Rome.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\rome.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Rome" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\rome"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.058] SetEvent (hEvent=0xfc) returned 1
	[0189.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Samara" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\samara"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.059] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=581) returned 1
	[0189.059] CloseHandle (hObject=0x168) returned 1
	[0189.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Samara" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\samara")) returned 0x20
	[0189.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Samara" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\samara")) returned 0x20
	[0189.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Samara.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\samara.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Samara" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\samara"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Simferopol" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\simferopol"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.060] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1064) returned 1
	[0189.060] CloseHandle (hObject=0x168) returned 1
	[0189.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Simferopol" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\simferopol")) returned 0x20
	[0189.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Simferopol" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\simferopol")) returned 0x20
	[0189.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Simferopol.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\simferopol.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Simferopol" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\simferopol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Sofia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\sofia"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.062] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1088) returned 1
	[0189.062] CloseHandle (hObject=0x168) returned 1
	[0189.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Sofia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\sofia")) returned 0x20
	[0189.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Sofia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\sofia")) returned 0x20
	[0189.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Sofia.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\sofia.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Sofia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\sofia"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.062] SetEvent (hEvent=0xfc) returned 1
	[0189.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Stockholm" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\stockholm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.063] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1040) returned 1
	[0189.063] CloseHandle (hObject=0x168) returned 1
	[0189.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Stockholm" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\stockholm")) returned 0x20
	[0189.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Stockholm" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\stockholm")) returned 0x20
	[0189.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Stockholm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\stockholm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Stockholm" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\stockholm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Tallinn" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\tallinn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.064] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1080) returned 1
	[0189.064] CloseHandle (hObject=0x168) returned 1
	[0189.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Tallinn" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\tallinn")) returned 0x20
	[0189.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Tallinn" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\tallinn")) returned 0x20
	[0189.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Tallinn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\tallinn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Tallinn" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\tallinn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Tirane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\tirane"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.066] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1164) returned 1
	[0189.066] CloseHandle (hObject=0x168) returned 1
	[0189.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Tirane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\tirane")) returned 0x20
	[0189.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Tirane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\tirane")) returned 0x20
	[0189.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Tirane.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\tirane.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Tirane" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\tirane"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.066] SetEvent (hEvent=0xfc) returned 1
	[0189.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\uzhgorod"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.067] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1052) returned 1
	[0189.067] CloseHandle (hObject=0x168) returned 1
	[0189.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\uzhgorod")) returned 0x20
	[0189.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\uzhgorod")) returned 0x20
	[0189.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\uzhgorod.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Uzhgorod" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\uzhgorod"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vaduz" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vaduz"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.070] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1008) returned 1
	[0189.070] CloseHandle (hObject=0x168) returned 1
	[0189.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vaduz" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vaduz")) returned 0x20
	[0189.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vaduz" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vaduz")) returned 0x20
	[0189.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vaduz.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vaduz.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vaduz" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vaduz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vienna" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vienna"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.072] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1200) returned 1
	[0189.072] CloseHandle (hObject=0x168) returned 1
	[0189.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vienna" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vienna")) returned 0x20
	[0189.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vienna" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vienna")) returned 0x20
	[0189.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vienna.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vienna.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vienna" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vienna"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.073] SetEvent (hEvent=0xfc) returned 1
	[0189.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vilnius"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.073] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1060) returned 1
	[0189.073] CloseHandle (hObject=0x168) returned 1
	[0189.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vilnius")) returned 0x20
	[0189.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vilnius")) returned 0x20
	[0189.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vilnius.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vilnius.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Vilnius" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\vilnius"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\volgograd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.074] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=565) returned 1
	[0189.074] CloseHandle (hObject=0x168) returned 1
	[0189.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\volgograd")) returned 0x20
	[0189.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\volgograd")) returned 0x20
	[0189.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Volgograd.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\volgograd.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Volgograd" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\volgograd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Warsaw" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\warsaw"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.076] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1416) returned 1
	[0189.076] CloseHandle (hObject=0x168) returned 1
	[0189.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Warsaw" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\warsaw")) returned 0x20
	[0189.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Warsaw" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\warsaw")) returned 0x20
	[0189.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Warsaw.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\warsaw.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Warsaw" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\warsaw"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.077] SetEvent (hEvent=0xfc) returned 1
	[0189.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\zaporozhye"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.078] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1072) returned 1
	[0189.078] CloseHandle (hObject=0x168) returned 1
	[0189.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\zaporozhye")) returned 0x20
	[0189.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\zaporozhye")) returned 0x20
	[0189.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\zaporozhye.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Zaporozhye" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\zaporozhye"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Zurich" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\zurich"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.079] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1040) returned 1
	[0189.079] CloseHandle (hObject=0x168) returned 1
	[0189.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Zurich" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\zurich")) returned 0x20
	[0189.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Zurich" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\zurich")) returned 0x20
	[0189.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Zurich.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\zurich.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\Zurich" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\europe\\zurich"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\GMT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\gmt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.080] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0189.080] CloseHandle (hObject=0x168) returned 1
	[0189.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\GMT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\gmt")) returned 0x20
	[0189.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\GMT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\gmt")) returned 0x20
	[0189.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\GMT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\gmt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\GMT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\gmt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.080] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\HST" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\hst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.081] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0189.081] CloseHandle (hObject=0x168) returned 1
	[0189.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\HST" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\hst")) returned 0x20
	[0189.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\HST" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\hst")) returned 0x20
	[0189.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\HST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\hst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\HST" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\hst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\antananarivo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.084] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89) returned 1
	[0189.084] CloseHandle (hObject=0x168) returned 1
	[0189.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\antananarivo")) returned 0x20
	[0189.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\antananarivo")) returned 0x20
	[0189.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\antananarivo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Antananarivo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\antananarivo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.084] SetEvent (hEvent=0xfc) returned 1
	[0189.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Chagos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\chagos"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.085] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0189.085] CloseHandle (hObject=0x168) returned 1
	[0189.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Chagos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\chagos")) returned 0x20
	[0189.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Chagos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\chagos")) returned 0x20
	[0189.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Chagos.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\chagos.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Chagos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\chagos"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Christmas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\christmas"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.086] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0189.086] CloseHandle (hObject=0x168) returned 1
	[0189.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Christmas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\christmas")) returned 0x20
	[0189.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Christmas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\christmas")) returned 0x20
	[0189.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Christmas.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\christmas.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Christmas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\christmas"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Cocos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\cocos"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.175] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0189.175] CloseHandle (hObject=0x168) returned 1
	[0189.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Cocos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\cocos")) returned 0x20
	[0189.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Cocos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\cocos")) returned 0x20
	[0189.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Cocos.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\cocos.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Cocos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\cocos"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.176] SetEvent (hEvent=0xfc) returned 1
	[0189.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\kerguelen"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.177] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0189.177] CloseHandle (hObject=0x168) returned 1
	[0189.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\kerguelen")) returned 0x20
	[0189.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\kerguelen")) returned 0x20
	[0189.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\kerguelen.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Kerguelen" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\kerguelen"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mahe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mahe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.178] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0189.179] CloseHandle (hObject=0x168) returned 1
	[0189.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mahe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mahe")) returned 0x20
	[0189.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mahe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mahe")) returned 0x20
	[0189.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mahe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mahe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mahe" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mahe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.179] SetEvent (hEvent=0xfc) returned 1
	[0189.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Maldives" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\maldives"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.180] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0189.180] CloseHandle (hObject=0x168) returned 1
	[0189.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Maldives" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\maldives")) returned 0x20
	[0189.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Maldives" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\maldives")) returned 0x20
	[0189.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Maldives.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\maldives.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Maldives" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\maldives"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mauritius"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.182] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=105) returned 1
	[0189.182] CloseHandle (hObject=0x168) returned 1
	[0189.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mauritius")) returned 0x20
	[0189.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mauritius")) returned 0x20
	[0189.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mauritius.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mauritius.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mauritius" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mauritius"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.182] SetEvent (hEvent=0xfc) returned 1
	[0189.182] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mayotte"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.183] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0189.183] CloseHandle (hObject=0x168) returned 1
	[0189.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mayotte")) returned 0x20
	[0189.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mayotte")) returned 0x20
	[0189.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mayotte.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mayotte.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Mayotte" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\mayotte"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.184] SetEvent (hEvent=0xfc) returned 1
	[0189.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Reunion" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\reunion"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.185] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0189.185] CloseHandle (hObject=0x168) returned 1
	[0189.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Reunion" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\reunion")) returned 0x20
	[0189.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Reunion" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\reunion")) returned 0x20
	[0189.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Reunion.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\reunion.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\Reunion" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\indian\\reunion"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.186] SetEvent (hEvent=0xfc) returned 1
	[0189.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\met"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.187] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1184) returned 1
	[0189.187] CloseHandle (hObject=0x168) returned 1
	[0189.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\met")) returned 0x20
	[0189.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\met")) returned 0x20
	[0189.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MET.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\met.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MET" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\met"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.187] SetEvent (hEvent=0xfc) returned 1
	[0189.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.189] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0189.189] CloseHandle (hObject=0x168) returned 1
	[0189.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst")) returned 0x20
	[0189.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst")) returned 0x20
	[0189.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.189] SetEvent (hEvent=0xfc) returned 1
	[0189.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst7mdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.190] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1272) returned 1
	[0189.190] CloseHandle (hObject=0x168) returned 1
	[0189.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst7mdt")) returned 0x20
	[0189.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst7mdt")) returned 0x20
	[0189.190] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst7mdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\MST7MDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\mst7mdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Apia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\apia"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.194] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=568) returned 1
	[0189.194] CloseHandle (hObject=0x228) returned 1
	[0189.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Apia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\apia")) returned 0x20
	[0189.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Apia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\apia")) returned 0x20
	[0189.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Apia.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\apia.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Apia" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\apia"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.195] SetEvent (hEvent=0xfc) returned 1
	[0189.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\auckland"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.196] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1348) returned 1
	[0189.196] CloseHandle (hObject=0x228) returned 1
	[0189.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\auckland")) returned 0x20
	[0189.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\auckland")) returned 0x20
	[0189.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Auckland.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\auckland.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Auckland" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\auckland"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.196] SetEvent (hEvent=0xfc) returned 1
	[0189.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\chatham"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.201] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1124) returned 1
	[0189.201] CloseHandle (hObject=0x228) returned 1
	[0189.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\chatham")) returned 0x20
	[0189.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\chatham")) returned 0x20
	[0189.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Chatham.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\chatham.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Chatham" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\chatham"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.201] SetEvent (hEvent=0xfc) returned 1
	[0189.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\chuuk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.203] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0189.203] CloseHandle (hObject=0x168) returned 1
	[0189.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\chuuk")) returned 0x20
	[0189.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\chuuk")) returned 0x20
	[0189.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\chuuk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Chuuk" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\chuuk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.203] SetEvent (hEvent=0xfc) returned 1
	[0189.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Easter" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\easter"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0189.206] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1248) returned 1
	[0189.206] CloseHandle (hObject=0x23c) returned 1
	[0189.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Easter" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\easter")) returned 0x20
	[0189.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Easter" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\easter")) returned 0x20
	[0189.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Easter.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\easter.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Easter" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\easter"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.207] SetEvent (hEvent=0xfc) returned 1
	[0189.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Efate" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\efate"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0189.208] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=233) returned 1
	[0189.208] CloseHandle (hObject=0x23c) returned 1
	[0189.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Efate" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\efate")) returned 0x20
	[0189.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Efate" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\efate")) returned 0x20
	[0189.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Efate.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\efate.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Efate" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\efate"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.209] SetEvent (hEvent=0xfc) returned 1
	[0189.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\enderbury"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0189.210] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89) returned 1
	[0189.210] CloseHandle (hObject=0x23c) returned 1
	[0189.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\enderbury")) returned 0x20
	[0189.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\enderbury")) returned 0x20
	[0189.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\enderbury.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Enderbury" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\enderbury"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.210] SetEvent (hEvent=0xfc) returned 1
	[0189.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\fakaofo"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.213] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0189.213] CloseHandle (hObject=0x168) returned 1
	[0189.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\fakaofo")) returned 0x20
	[0189.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\fakaofo")) returned 0x20
	[0189.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\fakaofo.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Fakaofo" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\fakaofo"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.213] SetEvent (hEvent=0xfc) returned 1
	[0189.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\fiji"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.214] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=588) returned 1
	[0189.214] CloseHandle (hObject=0x168) returned 1
	[0189.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\fiji")) returned 0x20
	[0189.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\fiji")) returned 0x20
	[0189.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Fiji.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\fiji.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Fiji" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\fiji"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\funafuti"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0189.216] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0189.216] CloseHandle (hObject=0x23c) returned 1
	[0189.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\funafuti")) returned 0x20
	[0189.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\funafuti")) returned 0x20
	[0189.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\funafuti.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Funafuti" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\funafuti"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.217] SetEvent (hEvent=0xfc) returned 1
	[0189.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\galapagos"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0189.218] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0189.218] CloseHandle (hObject=0x23c) returned 1
	[0189.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\galapagos")) returned 0x20
	[0189.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\galapagos")) returned 0x20
	[0189.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\galapagos.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Galapagos" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\galapagos"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.218] SetEvent (hEvent=0xfc) returned 1
	[0189.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\gambier"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.354] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0189.354] CloseHandle (hObject=0x168) returned 1
	[0189.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\gambier")) returned 0x20
	[0189.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\gambier")) returned 0x20
	[0189.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Gambier.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\gambier.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Gambier" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\gambier"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.354] SetEvent (hEvent=0xfc) returned 1
	[0189.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Guam" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\guam"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.356] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0189.356] CloseHandle (hObject=0x168) returned 1
	[0189.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Guam" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\guam")) returned 0x20
	[0189.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Guam" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\guam")) returned 0x20
	[0189.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Guam.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\guam.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Guam" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\guam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.356] SetEvent (hEvent=0xfc) returned 1
	[0189.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\honolulu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.361] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=105) returned 1
	[0189.361] CloseHandle (hObject=0x228) returned 1
	[0189.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\honolulu")) returned 0x20
	[0189.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\honolulu")) returned 0x20
	[0189.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\honolulu.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Honolulu" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\honolulu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.361] SetEvent (hEvent=0xfc) returned 1
	[0189.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\johnston"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.363] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0189.363] CloseHandle (hObject=0x228) returned 1
	[0189.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\johnston")) returned 0x20
	[0189.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\johnston")) returned 0x20
	[0189.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Johnston.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\johnston.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Johnston" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\johnston"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kiritimati"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.364] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89) returned 1
	[0189.364] CloseHandle (hObject=0x228) returned 1
	[0189.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kiritimati")) returned 0x20
	[0189.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kiritimati")) returned 0x20
	[0189.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kiritimati.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kiritimati" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kiritimati"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kosrae"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.366] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85) returned 1
	[0189.366] CloseHandle (hObject=0x228) returned 1
	[0189.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kosrae")) returned 0x20
	[0189.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kosrae")) returned 0x20
	[0189.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kosrae.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kosrae" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kosrae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kwajalein"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.367] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89) returned 1
	[0189.367] CloseHandle (hObject=0x228) returned 1
	[0189.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kwajalein")) returned 0x20
	[0189.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kwajalein")) returned 0x20
	[0189.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kwajalein.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Kwajalein" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\kwajalein"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\majuro"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.369] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77) returned 1
	[0189.369] CloseHandle (hObject=0x228) returned 1
	[0189.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\majuro")) returned 0x20
	[0189.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\majuro")) returned 0x20
	[0189.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Majuro.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\majuro.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Majuro" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\majuro"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\marquesas"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.374] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=65) returned 1
	[0189.374] CloseHandle (hObject=0x228) returned 1
	[0189.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\marquesas")) returned 0x20
	[0189.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\marquesas")) returned 0x20
	[0189.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\marquesas.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Marquesas" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\marquesas"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Midway" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\midway"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.376] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=89) returned 1
	[0189.376] CloseHandle (hObject=0x228) returned 1
	[0189.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Midway" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\midway")) returned 0x20
	[0189.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Midway" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\midway")) returned 0x20
	[0189.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Midway.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\midway.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Midway" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\midway"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\nauru"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.502] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=97) returned 1
	[0189.502] CloseHandle (hObject=0x228) returned 1
	[0189.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\nauru")) returned 0x20
	[0189.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\nauru")) returned 0x20
	[0189.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Nauru.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\nauru.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\Nauru" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\pacific\\nauru"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\est5edt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0189.603] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2288) returned 1
	[0189.603] CloseHandle (hObject=0x1b8) returned 1
	[0189.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\est5edt")) returned 0x20
	[0189.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\est5edt")) returned 0x20
	[0189.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\est5edt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\EST5EDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\est5edt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.604] SetEvent (hEvent=0xfc) returned 1
	[0189.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\HST10" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\hst10"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0189.604] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0189.604] CloseHandle (hObject=0x1b8) returned 1
	[0189.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\HST10" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\hst10")) returned 0x20
	[0189.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\HST10" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\hst10")) returned 0x20
	[0189.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\HST10.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\hst10.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\HST10" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\hst10"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0189.606] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0189.606] CloseHandle (hObject=0x1b8) returned 1
	[0189.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7")) returned 0x20
	[0189.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7")) returned 0x20
	[0189.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7mdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0189.607] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2288) returned 1
	[0189.607] CloseHandle (hObject=0x1b8) returned 1
	[0189.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7mdt")) returned 0x20
	[0189.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7mdt")) returned 0x20
	[0189.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7mdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\MST7MDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\mst7mdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.608] SetEvent (hEvent=0xfc) returned 1
	[0189.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\PST8" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\pst8"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0189.609] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0189.609] CloseHandle (hObject=0x1b8) returned 1
	[0189.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\PST8" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\pst8")) returned 0x20
	[0189.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\PST8" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\pst8")) returned 0x20
	[0189.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\PST8.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\pst8.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\PST8" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\pst8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\pst8pdt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0189.610] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2288) returned 1
	[0189.610] CloseHandle (hObject=0x1b8) returned 1
	[0189.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\pst8pdt")) returned 0x20
	[0189.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\pst8pdt")) returned 0x20
	[0189.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\pst8pdt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\PST8PDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\pst8pdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.611] SetEvent (hEvent=0xfc) returned 1
	[0189.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\YST9" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\yst9"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0189.611] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27) returned 1
	[0189.612] CloseHandle (hObject=0x1b8) returned 1
	[0189.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\YST9" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\yst9")) returned 0x20
	[0189.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\YST9" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\yst9")) returned 0x20
	[0189.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\YST9.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\yst9.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\YST9" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\yst9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\yst9ydt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.706] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2288) returned 1
	[0189.706] CloseHandle (hObject=0x168) returned 1
	[0189.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\yst9ydt")) returned 0x20
	[0189.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\yst9ydt")) returned 0x20
	[0189.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\yst9ydt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\YST9YDT" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\zi\\systemv\\yst9ydt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.706] SetEvent (hEvent=0xfc) returned 1
	[0189.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\vbaows10.chm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.708] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=266741) returned 1
	[0189.708] CloseHandle (hObject=0x168) returned 1
	[0189.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\vbaows10.chm")) returned 0x20
	[0189.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\vbaows10.chm")) returned 0x20
	[0189.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\vbaows10.chm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\VBAOWS10.CHM" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\vbaows10.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.709] SetEvent (hEvent=0xfc) returned 1
	[0189.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\vviewres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.710] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=667520) returned 1
	[0189.710] CloseHandle (hObject=0x168) returned 1
	[0189.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\vviewres.dll")) returned 0x20
	[0189.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\vviewres.dll")) returned 0x20
	[0189.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\vviewres.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\VVIEWRES.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\1033\\vviewres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.711] SetEvent (hEvent=0xfc) returned 1
	[0189.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\AUTHZAX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\authzax.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.712] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=54152) returned 1
	[0189.712] CloseHandle (hObject=0x168) returned 1
	[0189.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\AUTHZAX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\authzax.dll")) returned 0x20
	[0189.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\AUTHZAX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\authzax.dll")) returned 0x20
	[0189.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\AUTHZAX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\authzax.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\AUTHZAX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\authzax.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.712] SetEvent (hEvent=0xfc) returned 1
	[0189.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\BCSLaunch.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\bcslaunch.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.714] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=57216) returned 1
	[0189.714] CloseHandle (hObject=0x168) returned 1
	[0189.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\BCSLaunch.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\bcslaunch.dll")) returned 0x20
	[0189.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\BCSLaunch.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\bcslaunch.dll")) returned 0x20
	[0189.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\BCSLaunch.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\bcslaunch.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\BCSLaunch.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\bcslaunch.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.714] SetEvent (hEvent=0xfc) returned 1
	[0189.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\DGRMLNCH.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\dgrmlnch.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.716] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=83816) returned 1
	[0189.716] CloseHandle (hObject=0x168) returned 1
	[0189.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\DGRMLNCH.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\dgrmlnch.dll")) returned 0x20
	[0189.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\DGRMLNCH.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\dgrmlnch.dll")) returned 0x20
	[0189.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\DGRMLNCH.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\dgrmlnch.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\DGRMLNCH.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\dgrmlnch.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.716] SetEvent (hEvent=0xfc) returned 1
	[0189.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\GROOVEEX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\grooveex.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.717] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4220304) returned 1
	[0189.718] CloseHandle (hObject=0x168) returned 1
	[0189.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\GROOVEEX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\grooveex.dll")) returned 0x20
	[0189.718] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\GROOVEEX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\grooveex.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\GROOVEEX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\grooveex.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0189.718] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\GROOVEEX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\grooveex.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\GROOVEEX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\grooveex.dll")) returned 0
	[0189.718] SetEvent (hEvent=0xfc) returned 1
	[0189.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\IEAWSDC.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\ieawsdc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.722] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=196448) returned 1
	[0189.722] CloseHandle (hObject=0x168) returned 1
	[0189.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\IEAWSDC.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\ieawsdc.dll")) returned 0x20
	[0189.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\IEAWSDC.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\ieawsdc.dll")) returned 0x20
	[0189.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\IEAWSDC.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\ieawsdc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\IEAWSDC.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\ieawsdc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.722] SetEvent (hEvent=0xfc) returned 1
	[0189.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\INLAUNCH.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\inlaunch.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.724] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=403832) returned 1
	[0189.724] CloseHandle (hObject=0x168) returned 1
	[0189.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\INLAUNCH.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\inlaunch.dll")) returned 0x20
	[0189.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\INLAUNCH.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\inlaunch.dll")) returned 0x20
	[0189.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\INLAUNCH.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\inlaunch.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\INLAUNCH.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\inlaunch.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.724] SetEvent (hEvent=0xfc) returned 1
	[0189.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\MSOHEV.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\msohev.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.725] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=78208) returned 1
	[0189.726] CloseHandle (hObject=0x168) returned 1
	[0189.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\MSOHEV.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\msohev.dll")) returned 0x20
	[0189.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\MSOHEV.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\msohev.dll")) returned 0x20
	[0189.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\MSOHEV.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\msohev.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\MSOHEV.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\msohev.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.726] SetEvent (hEvent=0xfc) returned 1
	[0189.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\MSOHTMED.EXE" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\msohtmed.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.727] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=71040) returned 1
	[0189.728] CloseHandle (hObject=0x168) returned 1
	[0189.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\MSOHTMED.EXE" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\msohtmed.exe")) returned 0x20
	[0189.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\MSOHTMED.EXE" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\msohtmed.exe")) returned 0x20
	[0189.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\MSOHTMED.EXE.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\msohtmed.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\MSOHTMED.EXE" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\msohtmed.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.728] SetEvent (hEvent=0xfc) returned 1
	[0189.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAME.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\name.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0189.729] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=85352) returned 1
	[0189.730] CloseHandle (hObject=0x168) returned 1
	[0189.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAME.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\name.dll")) returned 0x20
	[0189.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAME.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\name.dll")) returned 0x20
	[0189.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAME.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\name.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAME.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\name.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.730] SetEvent (hEvent=0xfc) returned 1
	[0189.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAMECONTROLPROXY.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\namecontrolproxy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.914] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16256) returned 1
	[0189.914] CloseHandle (hObject=0x20c) returned 1
	[0189.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAMECONTROLPROXY.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\namecontrolproxy.dll")) returned 0x20
	[0189.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAMECONTROLPROXY.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\namecontrolproxy.dll")) returned 0x20
	[0189.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAMECONTROLPROXY.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\namecontrolproxy.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NAMECONTROLPROXY.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\namecontrolproxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.914] SetEvent (hEvent=0xfc) returned 1
	[0189.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NPAUTHZ.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\npauthz.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.917] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16800) returned 1
	[0189.917] CloseHandle (hObject=0x20c) returned 1
	[0189.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NPAUTHZ.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\npauthz.dll")) returned 0x20
	[0189.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NPAUTHZ.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\npauthz.dll")) returned 0x20
	[0189.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NPAUTHZ.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\npauthz.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NPAUTHZ.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\npauthz.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NPSPWRAP.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\npspwrap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.918] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23016) returned 1
	[0189.918] CloseHandle (hObject=0x20c) returned 1
	[0189.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NPSPWRAP.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\npspwrap.dll")) returned 0x20
	[0189.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NPSPWRAP.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\npspwrap.dll")) returned 0x20
	[0189.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NPSPWRAP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\npspwrap.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\NPSPWRAP.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\npspwrap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\oisctrl.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\oisctrl.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.919] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22920) returned 1
	[0189.919] CloseHandle (hObject=0x20c) returned 1
	[0189.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\oisctrl.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\oisctrl.dll")) returned 0x20
	[0189.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\oisctrl.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\oisctrl.dll")) returned 0x20
	[0189.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\oisctrl.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\oisctrl.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\oisctrl.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\oisctrl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OLKFSTUB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\olkfstub.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.921] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=254848) returned 1
	[0189.921] CloseHandle (hObject=0x20c) returned 1
	[0189.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OLKFSTUB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\olkfstub.dll")) returned 0x20
	[0189.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OLKFSTUB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\olkfstub.dll")) returned 0x20
	[0189.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OLKFSTUB.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\olkfstub.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.921] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OLKFSTUB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\olkfstub.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.921] SetEvent (hEvent=0xfc) returned 1
	[0189.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONBttnIE.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onbttnie.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.922] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=644496) returned 1
	[0189.922] CloseHandle (hObject=0x20c) returned 1
	[0189.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONBttnIE.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onbttnie.dll")) returned 0x20
	[0189.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONBttnIE.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onbttnie.dll")) returned 0x20
	[0189.922] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONBttnIE.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onbttnie.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.922] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONBttnIE.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onbttnie.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONBttnIELinkedNotes.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onbttnielinkednotes.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.923] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=497040) returned 1
	[0189.923] CloseHandle (hObject=0x20c) returned 1
	[0189.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONBttnIELinkedNotes.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onbttnielinkednotes.dll")) returned 0x20
	[0189.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONBttnIELinkedNotes.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onbttnielinkednotes.dll")) returned 0x20
	[0189.923] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONBttnIELinkedNotes.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onbttnielinkednotes.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.923] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONBttnIELinkedNotes.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onbttnielinkednotes.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.924] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OneNoteSyncPC.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onenotesyncpc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.924] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=921008) returned 1
	[0189.924] CloseHandle (hObject=0x20c) returned 1
	[0189.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OneNoteSyncPC.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onenotesyncpc.dll")) returned 0x20
	[0189.924] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OneNoteSyncPC.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onenotesyncpc.dll")) returned 0x20
	[0189.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OneNoteSyncPC.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onenotesyncpc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OneNoteSyncPC.dll" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onenotesyncpc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.925] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONLNTCOMLIB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onlntcomlib.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.925] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=63904) returned 1
	[0189.925] CloseHandle (hObject=0x20c) returned 1
	[0189.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONLNTCOMLIB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onlntcomlib.dll")) returned 0x20
	[0189.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONLNTCOMLIB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onlntcomlib.dll")) returned 0x20
	[0189.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONLNTCOMLIB.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onlntcomlib.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\ONLNTCOMLIB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\onlntcomlib.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OWSSUPP.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\owssupp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.927] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=134536) returned 1
	[0189.927] CloseHandle (hObject=0x20c) returned 1
	[0189.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OWSSUPP.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\owssupp.dll")) returned 0x20
	[0189.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OWSSUPP.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\owssupp.dll")) returned 0x20
	[0189.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OWSSUPP.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\owssupp.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\OWSSUPP.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\owssupp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\PPSLAX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\ppslax.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.928] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=389008) returned 1
	[0189.928] CloseHandle (hObject=0x20c) returned 1
	[0189.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\PPSLAX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\ppslax.dll")) returned 0x20
	[0189.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\PPSLAX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\ppslax.dll")) returned 0x20
	[0189.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\PPSLAX.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\ppslax.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\PPSLAX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\ppslax.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.928] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\STSCOPY.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\stscopy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.929] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94080) returned 1
	[0189.929] CloseHandle (hObject=0x20c) returned 1
	[0189.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\STSCOPY.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\stscopy.dll")) returned 0x20
	[0189.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\STSCOPY.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\stscopy.dll")) returned 0x20
	[0189.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\STSCOPY.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\stscopy.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\STSCOPY.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\stscopy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\STSUPLD.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\stsupld.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.935] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=71552) returned 1
	[0189.935] CloseHandle (hObject=0x228) returned 1
	[0189.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\STSUPLD.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\stsupld.dll")) returned 0x20
	[0189.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\STSUPLD.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\stsupld.dll")) returned 0x20
	[0189.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\STSUPLD.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\stsupld.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\STSUPLD.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\stsupld.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.935] SetEvent (hEvent=0xfc) returned 1
	[0189.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.936] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=140648) returned 1
	[0189.936] CloseHandle (hObject=0x228) returned 1
	[0189.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvb.dll")) returned 0x20
	[0189.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvb.dll")) returned 0x20
	[0189.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVB.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvb.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVB.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVC60.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvc60.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.937] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=141160) returned 1
	[0189.937] CloseHandle (hObject=0x228) returned 1
	[0189.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVC60.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvc60.dll")) returned 0x20
	[0189.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVC60.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvc60.dll")) returned 0x20
	[0189.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVC60.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvc60.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVC60.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvc60.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVS.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.938] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=246648) returned 1
	[0189.938] CloseHandle (hObject=0x228) returned 1
	[0189.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVS.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvs.dll")) returned 0x20
	[0189.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVS.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvs.dll")) returned 0x20
	[0189.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVS.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvs.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\UMLVS.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\umlvs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\URLREDIR.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\urlredir.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.939] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=561552) returned 1
	[0189.939] CloseHandle (hObject=0x228) returned 1
	[0189.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\URLREDIR.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\urlredir.dll")) returned 0x20
	[0189.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\URLREDIR.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\urlredir.dll")) returned 0x20
	[0189.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\URLREDIR.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\urlredir.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\URLREDIR.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\urlredir.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\VVIEWDWG.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\vviewdwg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.941] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5777784) returned 1
	[0189.941] CloseHandle (hObject=0x228) returned 1
	[0189.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\VVIEWDWG.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\vviewdwg.dll")) returned 0x20
	[0189.941] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\VVIEWDWG.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\vviewdwg.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\VVIEWDWG.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\vviewdwg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0189.941] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\VVIEWDWG.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\vviewdwg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\VVIEWDWG.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\vviewdwg.dll")) returned 0
	[0189.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\VVIEWER.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\vviewer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0189.942] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4178792) returned 1
	[0189.942] CloseHandle (hObject=0x228) returned 1
	[0189.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\VVIEWER.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\vviewer.dll")) returned 0x20
	[0189.942] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\VVIEWER.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\vviewer.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\VVIEWER.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\vviewer.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0189.942] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\VVIEWER.DLL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\vviewer.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\Office14\\VVIEWER.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\office14\\vviewer.dll")) returned 0
	[0189.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\Microsoft.VisualStudio.Tools.Applications.Project.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\privateassemblies\\microsoft.visualstudio.tools.applications.project.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.953] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=153504) returned 1
	[0189.953] CloseHandle (hObject=0x20c) returned 1
	[0189.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\Microsoft.VisualStudio.Tools.Applications.Project.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\privateassemblies\\microsoft.visualstudio.tools.applications.project.dll")) returned 0x20
	[0189.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\Microsoft.VisualStudio.Tools.Applications.Project.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\privateassemblies\\microsoft.visualstudio.tools.applications.project.dll")) returned 0x20
	[0189.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\Microsoft.VisualStudio.Tools.Applications.Project.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\privateassemblies\\microsoft.visualstudio.tools.applications.project.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\Microsoft.VisualStudio.Tools.Applications.Project.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\privateassemblies\\microsoft.visualstudio.tools.applications.project.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.954] SetEvent (hEvent=0xfc) returned 1
	[0189.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.Adapter.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.adapter.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.956] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=210848) returned 1
	[0189.956] CloseHandle (hObject=0x20c) returned 1
	[0189.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.Adapter.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.adapter.dll")) returned 0x20
	[0189.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.Adapter.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.adapter.dll")) returned 0x20
	[0189.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.Adapter.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.adapter.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.Adapter.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.adapter.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.956] SetEvent (hEvent=0xfc) returned 1
	[0189.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.AddInManager.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.addinmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.957] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=104368) returned 1
	[0189.957] CloseHandle (hObject=0x20c) returned 1
	[0189.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.AddInManager.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.addinmanager.dll")) returned 0x20
	[0189.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.AddInManager.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.addinmanager.dll")) returned 0x20
	[0189.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.AddInManager.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.addinmanager.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.AddInManager.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.addinmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.comrpcchannel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.958] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38832) returned 1
	[0189.958] CloseHandle (hObject=0x20c) returned 1
	[0189.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.comrpcchannel.dll")) returned 0x20
	[0189.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.comrpcchannel.dll")) returned 0x20
	[0189.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.comrpcchannel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.comrpcchannel.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.DesignTime.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.designtime.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0189.960] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=71592) returned 1
	[0189.960] CloseHandle (hObject=0x20c) returned 1
	[0189.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.DesignTime.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.designtime.dll")) returned 0x20
	[0189.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.DesignTime.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.designtime.dll")) returned 0x20
	[0189.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.DesignTime.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.designtime.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0189.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\Microsoft.VisualStudio.Tools.Applications.DesignTime.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\microsoft.visualstudio.tools.applications.designtime.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0189.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\System.AddIn.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\system.addin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0190.057] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38744) returned 1
	[0190.057] CloseHandle (hObject=0x23c) returned 1
	[0190.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\System.AddIn.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\system.addin.dll")) returned 0x20
	[0190.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\System.AddIn.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\system.addin.dll")) returned 0x20
	[0190.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\System.AddIn.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\system.addin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\System.AddIn.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\publicassemblies\\system.addin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.057] SetEvent (hEvent=0xfc) returned 1
	[0190.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0190.206] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=701) returned 1
	[0190.206] CloseHandle (hObject=0x228) returned 1
	[0190.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip")) returned 0x20
	[0190.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip")) returned 0x20
	[0190.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.206] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.329] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=60438) returned 1
	[0190.329] CloseHandle (hObject=0x168) returned 1
	[0190.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip")) returned 0x20
	[0190.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip")) returned 0x20
	[0190.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.330] SetEvent (hEvent=0xfc) returned 1
	[0190.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.330] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=555) returned 1
	[0190.330] CloseHandle (hObject=0x168) returned 1
	[0190.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip")) returned 0x20
	[0190.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip")) returned 0x20
	[0190.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.331] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1457) returned 1
	[0190.331] CloseHandle (hObject=0x168) returned 1
	[0190.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip")) returned 0x20
	[0190.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip")) returned 0x20
	[0190.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAClientPkgUI.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033\\vstaclientpkgui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.335] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11104) returned 1
	[0190.335] CloseHandle (hObject=0x168) returned 1
	[0190.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAClientPkgUI.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033\\vstaclientpkgui.dll")) returned 0x20
	[0190.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAClientPkgUI.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033\\vstaclientpkgui.dll")) returned 0x20
	[0190.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAClientPkgUI.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033\\vstaclientpkgui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAClientPkgUI.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033\\vstaclientpkgui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAProjectUI.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033\\vstaprojectui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.337] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31064) returned 1
	[0190.337] CloseHandle (hObject=0x168) returned 1
	[0190.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAProjectUI.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033\\vstaprojectui.dll")) returned 0x20
	[0190.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAProjectUI.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033\\vstaprojectui.dll")) returned 0x20
	[0190.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAProjectUI.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033\\vstaprojectui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\VSTAProjectUI.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\1033\\vstaprojectui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAClientPkg.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\vstaclientpkg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.338] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=70472) returned 1
	[0190.338] CloseHandle (hObject=0x168) returned 1
	[0190.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAClientPkg.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\vstaclientpkg.dll")) returned 0x20
	[0190.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAClientPkg.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\vstaclientpkg.dll")) returned 0x20
	[0190.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAClientPkg.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\vstaclientpkg.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAClientPkg.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\vstaclientpkg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAProject.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\vstaproject.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.339] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=304456) returned 1
	[0190.339] CloseHandle (hObject=0x168) returned 1
	[0190.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAProject.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\vstaproject.dll")) returned 0x20
	[0190.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAProject.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\vstaproject.dll")) returned 0x20
	[0190.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAProject.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\vstaproject.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\VSTAProject.dll" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\vsta\\bin\\vstaproject.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.341] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=110592) returned 1
	[0190.341] CloseHandle (hObject=0x168) returned 1
	[0190.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll")) returned 0x20
	[0190.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll")) returned 0x20
	[0190.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.342] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8007680) returned 1
	[0190.342] CloseHandle (hObject=0x168) returned 1
	[0190.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll")) returned 0x20
	[0190.342] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0190.343] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll")) returned 0
	[0190.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.343] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13312) returned 1
	[0190.343] CloseHandle (hObject=0x168) returned 1
	[0190.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll")) returned 0x20
	[0190.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll")) returned 0x20
	[0190.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.344] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4096) returned 1
	[0190.344] CloseHandle (hObject=0x168) returned 1
	[0190.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll")) returned 0x20
	[0190.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll")) returned 0x20
	[0190.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.346] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16384) returned 1
	[0190.346] CloseHandle (hObject=0x168) returned 1
	[0190.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll")) returned 0x20
	[0190.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll")) returned 0x20
	[0190.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.347] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15715) returned 1
	[0190.347] CloseHandle (hObject=0x168) returned 1
	[0190.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml")) returned 0x20
	[0190.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml")) returned 0x20
	[0190.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.350] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8220) returned 1
	[0190.350] CloseHandle (hObject=0x168) returned 1
	[0190.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml")) returned 0x20
	[0190.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml")) returned 0x20
	[0190.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.350] SetEvent (hEvent=0xfc) returned 1
	[0190.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\societies.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\societies.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.351] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75776) returned 1
	[0190.351] CloseHandle (hObject=0x168) returned 1
	[0190.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\societies.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\societies.exe")) returned 0x20
	[0190.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\societies.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\societies.exe")) returned 0x20
	[0190.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\societies.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\microsoft.net\\societies.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\societies.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\societies.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\accessiblemarshal.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.353] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20080) returned 1
	[0190.353] CloseHandle (hObject=0x168) returned 1
	[0190.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\accessiblemarshal.dll")) returned 0x20
	[0190.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\accessiblemarshal.dll")) returned 0x20
	[0190.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\accessiblemarshal.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\AccessibleMarshal.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\accessiblemarshal.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.353] SetEvent (hEvent=0xfc) returned 1
	[0190.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\application.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\application.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.355] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=633) returned 1
	[0190.355] CloseHandle (hObject=0x168) returned 1
	[0190.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\application.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\application.ini")) returned 0x20
	[0190.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\application.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\application.ini")) returned 0x20
	[0190.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\application.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\application.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\application.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\application.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.355] SetEvent (hEvent=0xfc) returned 1
	[0190.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\breakpadinjector.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.356] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=75376) returned 1
	[0190.356] CloseHandle (hObject=0x168) returned 1
	[0190.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\breakpadinjector.dll")) returned 0x20
	[0190.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\breakpadinjector.dll")) returned 0x20
	[0190.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\breakpadinjector.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\breakpadinjector.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\breakpadinjector.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.357] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=83491) returned 1
	[0190.357] CloseHandle (hObject=0x168) returned 1
	[0190.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml")) returned 0x20
	[0190.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml")) returned 0x20
	[0190.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\chrome.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.360] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40) returned 1
	[0190.360] CloseHandle (hObject=0x168) returned 1
	[0190.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\chrome.manifest")) returned 0x20
	[0190.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\chrome.manifest")) returned 0x20
	[0190.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\chrome.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\chrome.manifest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\chrome.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.360] SetEvent (hEvent=0xfc) returned 1
	[0190.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\browsercomps.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\browsercomps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.361] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=272496) returned 1
	[0190.361] CloseHandle (hObject=0x168) returned 1
	[0190.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\browsercomps.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\browsercomps.dll")) returned 0x20
	[0190.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\browsercomps.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\browsercomps.dll")) returned 0x20
	[0190.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\browsercomps.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\browsercomps.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\browsercomps.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\browsercomps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\components.manifest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\components.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.362] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=34) returned 1
	[0190.363] CloseHandle (hObject=0x168) returned 1
	[0190.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\components.manifest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\components.manifest")) returned 0x20
	[0190.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\components.manifest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\components.manifest")) returned 0x20
	[0190.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\components.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\components.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\components.manifest" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\components\\components.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\crashreporter-override.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.364] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=783) returned 1
	[0190.364] CloseHandle (hObject=0x168) returned 1
	[0190.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\crashreporter-override.ini")) returned 0x20
	[0190.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\crashreporter-override.ini")) returned 0x20
	[0190.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\crashreporter-override.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\crashreporter-override.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\crashreporter-override.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.365] SetEvent (hEvent=0xfc) returned 1
	[0190.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.366] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2185) returned 1
	[0190.367] CloseHandle (hObject=0x168) returned 1
	[0190.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png")) returned 0x20
	[0190.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png")) returned 0x20
	[0190.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.367] SetEvent (hEvent=0xfc) returned 1
	[0190.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.368] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1358) returned 1
	[0190.368] CloseHandle (hObject=0x168) returned 1
	[0190.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf")) returned 0x20
	[0190.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf")) returned 0x20
	[0190.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\install.rdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.369] SetEvent (hEvent=0xfc) returned 1
	[0190.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\omni.ja"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x168
	[0190.372] GetFileSizeEx (in: hFile=0x168, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4458510) returned 1
	[0190.372] CloseHandle (hObject=0x168) returned 1
	[0190.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\omni.ja")) returned 0x20
	[0190.372] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\omni.ja"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\omni.ja.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0190.372] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\omni.ja.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\omni.ja")) returned 0
	[0190.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0190.509] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2464) returned 1
	[0190.509] CloseHandle (hObject=0x20c) returned 1
	[0190.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml")) returned 0x20
	[0190.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml")) returned 0x20
	[0190.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozjs.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.595] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3368048) returned 1
	[0190.595] CloseHandle (hObject=0x1b8) returned 1
	[0190.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozjs.dll")) returned 0x20
	[0190.595] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozjs.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozjs.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0190.595] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozjs.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\mozjs.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozjs.dll")) returned 0
	[0190.595] SetEvent (hEvent=0xfc) returned 1
	[0190.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcp100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.604] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=421200) returned 1
	[0190.604] CloseHandle (hObject=0x1b8) returned 1
	[0190.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcp100.dll")) returned 0x20
	[0190.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcp100.dll")) returned 0x20
	[0190.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcp100.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcp100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.605] SetEvent (hEvent=0xfc) returned 1
	[0190.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.606] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=770384) returned 1
	[0190.606] CloseHandle (hObject=0x1b8) returned 1
	[0190.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcr100.dll")) returned 0x20
	[0190.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcr100.dll")) returned 0x20
	[0190.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcr100.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.607] SetEvent (hEvent=0xfc) returned 1
	[0190.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.608] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1775728) returned 1
	[0190.608] CloseHandle (hObject=0x1b8) returned 1
	[0190.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll")) returned 0x20
	[0190.608] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0190.609] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll")) returned 0
	[0190.609] SetEvent (hEvent=0xfc) returned 1
	[0190.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssckbi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.610] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=393328) returned 1
	[0190.610] CloseHandle (hObject=0x1b8) returned 1
	[0190.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssckbi.dll")) returned 0x20
	[0190.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssckbi.dll")) returned 0x20
	[0190.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssckbi.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssckbi.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssckbi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.610] SetEvent (hEvent=0xfc) returned 1
	[0190.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.611] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=899) returned 1
	[0190.611] CloseHandle (hObject=0x1b8) returned 1
	[0190.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.chk")) returned 0x20
	[0190.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.chk")) returned 0x20
	[0190.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.chk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.613] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=92272) returned 1
	[0190.613] CloseHandle (hObject=0x1b8) returned 1
	[0190.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll")) returned 0x20
	[0190.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll")) returned 0x20
	[0190.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.614] SetEvent (hEvent=0xfc) returned 1
	[0190.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\omni.ja"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.615] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7806293) returned 1
	[0190.615] CloseHandle (hObject=0x1b8) returned 1
	[0190.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\omni.ja")) returned 0x20
	[0190.615] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\omni.ja"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\omni.ja.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0190.615] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\omni.ja.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja" (normalized: "c:\\program files (x86)\\mozilla firefox\\omni.ja")) returned 0
	[0190.615] SetEvent (hEvent=0xfc) returned 1
	[0190.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\platform.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.617] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=140) returned 1
	[0190.617] CloseHandle (hObject=0x1b8) returned 1
	[0190.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\platform.ini")) returned 0x20
	[0190.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\platform.ini")) returned 0x20
	[0190.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\platform.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\platform.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\platform.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\platform.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.617] SetEvent (hEvent=0xfc) returned 1
	[0190.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\plugin-container.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.618] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18544) returned 1
	[0190.618] CloseHandle (hObject=0x1b8) returned 1
	[0190.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\plugin-container.exe")) returned 0x20
	[0190.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\plugin-container.exe")) returned 0x20
	[0190.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\plugin-container.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\plugin-container.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\plugin-container.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\plugin-hang-ui.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.620] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28272) returned 1
	[0190.620] CloseHandle (hObject=0x1b8) returned 1
	[0190.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\plugin-hang-ui.exe")) returned 0x20
	[0190.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\plugin-hang-ui.exe")) returned 0x20
	[0190.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\plugin-hang-ui.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\plugin-hang-ui.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\plugin-hang-ui.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.620] SetEvent (hEvent=0xfc) returned 1
	[0190.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\precomplete" (normalized: "c:\\program files (x86)\\mozilla firefox\\precomplete"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.621] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2019) returned 1
	[0190.621] CloseHandle (hObject=0x1b8) returned 1
	[0190.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\precomplete" (normalized: "c:\\program files (x86)\\mozilla firefox\\precomplete")) returned 0x20
	[0190.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\precomplete" (normalized: "c:\\program files (x86)\\mozilla firefox\\precomplete")) returned 0x20
	[0190.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\precomplete.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\precomplete.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\precomplete" (normalized: "c:\\program files (x86)\\mozilla firefox\\precomplete"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\removed-files" (normalized: "c:\\program files (x86)\\mozilla firefox\\removed-files"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.622] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36667) returned 1
	[0190.622] CloseHandle (hObject=0x1b8) returned 1
	[0190.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\removed-files" (normalized: "c:\\program files (x86)\\mozilla firefox\\removed-files")) returned 0x20
	[0190.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\removed-files" (normalized: "c:\\program files (x86)\\mozilla firefox\\removed-files")) returned 0x20
	[0190.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\removed-files.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\removed-files.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\removed-files" (normalized: "c:\\program files (x86)\\mozilla firefox\\removed-files"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.623] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=899) returned 1
	[0190.623] CloseHandle (hObject=0x1b8) returned 1
	[0190.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.chk")) returned 0x20
	[0190.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.chk")) returned 0x20
	[0190.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.chk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.chk" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.624] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=153712) returned 1
	[0190.624] CloseHandle (hObject=0x1b8) returned 1
	[0190.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll")) returned 0x20
	[0190.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll")) returned 0x20
	[0190.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\helper.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0190.628] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=872352) returned 1
	[0190.628] CloseHandle (hObject=0x228) returned 1
	[0190.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\helper.exe")) returned 0x20
	[0190.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\helper.exe")) returned 0x20
	[0190.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\helper.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\helper.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.628] SetEvent (hEvent=0xfc) returned 1
	[0190.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\shortcuts_log.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0190.632] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=322) returned 1
	[0190.632] CloseHandle (hObject=0x228) returned 1
	[0190.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\shortcuts_log.ini")) returned 0x20
	[0190.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\shortcuts_log.ini")) returned 0x20
	[0190.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\shortcuts_log.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\shortcuts_log.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.633] SetEvent (hEvent=0xfc) returned 1
	[0190.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0190.634] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1940) returned 1
	[0190.634] CloseHandle (hObject=0x228) returned 1
	[0190.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log")) returned 0x20
	[0190.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log")) returned 0x20
	[0190.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\uninstall.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\update-settings.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0190.810] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0190.810] CloseHandle (hObject=0x1b8) returned 1
	[0190.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\update-settings.ini")) returned 0x20
	[0190.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\update-settings.ini")) returned 0x20
	[0190.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\mozilla firefox\\update-settings.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0190.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Firefox\\update-settings.ini" (normalized: "c:\\program files (x86)\\mozilla firefox\\update-settings.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0190.811] SetEvent (hEvent=0xfc) returned 1
	[0190.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0191.119] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3495) returned 1
	[0191.119] CloseHandle (hObject=0x1b8) returned 1
	[0191.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml")) returned 0x20
	[0191.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml")) returned 0x20
	[0191.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.120] SetEvent (hEvent=0xfc) returned 1
	[0191.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0191.120] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=126976) returned 1
	[0191.120] CloseHandle (hObject=0x1b8) returned 1
	[0191.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll")) returned 0x20
	[0191.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll")) returned 0x20
	[0191.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.identitymodel.selectors.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.125] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131072) returned 1
	[0191.125] CloseHandle (hObject=0x20c) returned 1
	[0191.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll")) returned 0x20
	[0191.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll")) returned 0x20
	[0191.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.io.log.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.126] SetEvent (hEvent=0xfc) returned 1
	[0191.126] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.126] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=372736) returned 1
	[0191.127] CloseHandle (hObject=0x20c) returned 1
	[0191.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll")) returned 0x20
	[0191.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll")) returned 0x20
	[0191.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.printing.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.128] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=970752) returned 1
	[0191.128] CloseHandle (hObject=0x20c) returned 1
	[0191.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll")) returned 0x20
	[0191.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll")) returned 0x20
	[0191.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.runtime.serialization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.131] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5988352) returned 1
	[0191.131] CloseHandle (hObject=0x228) returned 1
	[0191.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll")) returned 0x20
	[0191.131] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0191.132] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.servicemodel.dll")) returned 0
	[0191.132] SetEvent (hEvent=0xfc) returned 1
	[0191.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.133] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=688128) returned 1
	[0191.133] CloseHandle (hObject=0x228) returned 1
	[0191.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll")) returned 0x20
	[0191.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll")) returned 0x20
	[0191.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.speech.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.134] SetEvent (hEvent=0xfc) returned 1
	[0191.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.134] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1142784) returned 1
	[0191.134] CloseHandle (hObject=0x228) returned 1
	[0191.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll")) returned 0x20
	[0191.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll")) returned 0x20
	[0191.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.activities.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.139] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1630208) returned 1
	[0191.139] CloseHandle (hObject=0x228) returned 1
	[0191.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll")) returned 0x20
	[0191.139] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0191.139] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.componentmodel.dll")) returned 0
	[0191.139] SetEvent (hEvent=0xfc) returned 1
	[0191.139] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.140] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=540672) returned 1
	[0191.140] CloseHandle (hObject=0x228) returned 1
	[0191.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll")) returned 0x20
	[0191.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll")) returned 0x20
	[0191.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\system.workflow.runtime.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.143] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=172032) returned 1
	[0191.143] CloseHandle (hObject=0x20c) returned 1
	[0191.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll")) returned 0x20
	[0191.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll")) returned 0x20
	[0191.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.144] SetEvent (hEvent=0xfc) returned 1
	[0191.144] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.144] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=380928) returned 1
	[0191.144] CloseHandle (hObject=0x20c) returned 1
	[0191.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll")) returned 0x20
	[0191.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll")) returned 0x20
	[0191.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationclientsideproviders.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.145] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.146] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40960) returned 1
	[0191.146] CloseHandle (hObject=0x20c) returned 1
	[0191.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll")) returned 0x20
	[0191.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll")) returned 0x20
	[0191.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.147] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=98304) returned 1
	[0191.147] CloseHandle (hObject=0x20c) returned 1
	[0191.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll")) returned 0x20
	[0191.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll")) returned 0x20
	[0191.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\uiautomationtypes.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.150] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1253376) returned 1
	[0191.150] CloseHandle (hObject=0x20c) returned 1
	[0191.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll")) returned 0x20
	[0191.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll")) returned 0x20
	[0191.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.150] SetEvent (hEvent=0xfc) returned 1
	[0191.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.153] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94208) returned 1
	[0191.153] CloseHandle (hObject=0x20c) returned 1
	[0191.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll")) returned 0x20
	[0191.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll")) returned 0x20
	[0191.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\windowsformsintegration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.154] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2578) returned 1
	[0191.154] CloseHandle (hObject=0x20c) returned 1
	[0191.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml")) returned 0x20
	[0191.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml")) returned 0x20
	[0191.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.156] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=106496) returned 1
	[0191.156] CloseHandle (hObject=0x20c) returned 1
	[0191.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll")) returned 0x20
	[0191.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll")) returned 0x20
	[0191.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.conversion.v3.5.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.157] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=733184) returned 1
	[0191.157] CloseHandle (hObject=0x20c) returned 1
	[0191.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll")) returned 0x20
	[0191.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll")) returned 0x20
	[0191.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.engine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.158] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.160] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=36864) returned 1
	[0191.160] CloseHandle (hObject=0x228) returned 1
	[0191.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll")) returned 0x20
	[0191.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll")) returned 0x20
	[0191.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.160] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.framework.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.161] SetEvent (hEvent=0xfc) returned 1
	[0191.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.161] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94208) returned 1
	[0191.161] CloseHandle (hObject=0x228) returned 1
	[0191.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll")) returned 0x20
	[0191.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll")) returned 0x20
	[0191.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.build.utilities.v3.5.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.163] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41984) returned 1
	[0191.163] CloseHandle (hObject=0x228) returned 1
	[0191.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll")) returned 0x20
	[0191.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll")) returned 0x20
	[0191.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\microsoft.visualc.stlclr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.164] SetEvent (hEvent=0xfc) returned 1
	[0191.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.165] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12192) returned 1
	[0191.165] CloseHandle (hObject=0x228) returned 1
	[0191.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml")) returned 0x20
	[0191.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml")) returned 0x20
	[0191.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.166] SetEvent (hEvent=0xfc) returned 1
	[0191.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.166] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3446) returned 1
	[0191.166] CloseHandle (hObject=0x228) returned 1
	[0191.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml")) returned 0x20
	[0191.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml")) returned 0x20
	[0191.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.167] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45056) returned 1
	[0191.167] CloseHandle (hObject=0x228) returned 1
	[0191.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll")) returned 0x20
	[0191.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll")) returned 0x20
	[0191.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.contract.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.306] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=163840) returned 1
	[0191.306] CloseHandle (hObject=0x228) returned 1
	[0191.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll")) returned 0x20
	[0191.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll")) returned 0x20
	[0191.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.addin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.306] SetEvent (hEvent=0xfc) returned 1
	[0191.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.309] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=667648) returned 1
	[0191.309] CloseHandle (hObject=0x228) returned 1
	[0191.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll")) returned 0x20
	[0191.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll")) returned 0x20
	[0191.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.core.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.309] SetEvent (hEvent=0xfc) returned 1
	[0191.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.318] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53248) returned 1
	[0191.318] CloseHandle (hObject=0x228) returned 1
	[0191.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll")) returned 0x20
	[0191.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll")) returned 0x20
	[0191.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.datasetextensions.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0191.322] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=229376) returned 1
	[0191.322] CloseHandle (hObject=0x23c) returned 1
	[0191.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll")) returned 0x20
	[0191.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll")) returned 0x20
	[0191.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.design.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.322] SetEvent (hEvent=0xfc) returned 1
	[0191.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0191.323] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2879488) returned 1
	[0191.323] CloseHandle (hObject=0x23c) returned 1
	[0191.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll")) returned 0x20
	[0191.323] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0191.323] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.entity.dll")) returned 0
	[0191.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0191.326] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=684032) returned 1
	[0191.326] CloseHandle (hObject=0x23c) returned 1
	[0191.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll")) returned 0x20
	[0191.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll")) returned 0x20
	[0191.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.linq.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.326] SetEvent (hEvent=0xfc) returned 1
	[0191.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0191.327] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=462848) returned 1
	[0191.327] CloseHandle (hObject=0x23c) returned 1
	[0191.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll")) returned 0x20
	[0191.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll")) returned 0x20
	[0191.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.client.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0191.329] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=163840) returned 1
	[0191.329] CloseHandle (hObject=0x23c) returned 1
	[0191.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll")) returned 0x20
	[0191.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll")) returned 0x20
	[0191.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.design.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.330] SetEvent (hEvent=0xfc) returned 1
	[0191.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0191.330] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=692224) returned 1
	[0191.330] CloseHandle (hObject=0x23c) returned 1
	[0191.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll")) returned 0x20
	[0191.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll")) returned 0x20
	[0191.331] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.data.services.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0191.332] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=290816) returned 1
	[0191.332] CloseHandle (hObject=0x23c) returned 1
	[0191.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll")) returned 0x20
	[0191.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll")) returned 0x20
	[0191.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.directoryservices.accountmanagement.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.333] SetEvent (hEvent=0xfc) returned 1
	[0191.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0191.333] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=143360) returned 1
	[0191.333] CloseHandle (hObject=0x23c) returned 1
	[0191.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll")) returned 0x20
	[0191.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll")) returned 0x20
	[0191.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.management.instrumentation.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.338] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=237568) returned 1
	[0191.338] CloseHandle (hObject=0x228) returned 1
	[0191.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll")) returned 0x20
	[0191.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll")) returned 0x20
	[0191.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.net.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.338] SetEvent (hEvent=0xfc) returned 1
	[0191.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.339] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=569344) returned 1
	[0191.339] CloseHandle (hObject=0x228) returned 1
	[0191.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll")) returned 0x20
	[0191.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll")) returned 0x20
	[0191.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.servicemodel.web.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.340] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.341] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77824) returned 1
	[0191.341] CloseHandle (hObject=0x228) returned 1
	[0191.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll")) returned 0x20
	[0191.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll")) returned 0x20
	[0191.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.abstractions.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.343] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32768) returned 1
	[0191.343] CloseHandle (hObject=0x228) returned 1
	[0191.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll")) returned 0x20
	[0191.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll")) returned 0x20
	[0191.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.design.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.344] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=229376) returned 1
	[0191.344] CloseHandle (hObject=0x228) returned 1
	[0191.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll")) returned 0x20
	[0191.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll")) returned 0x20
	[0191.344] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.dynamicdata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.346] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131072) returned 1
	[0191.346] CloseHandle (hObject=0x228) returned 1
	[0191.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll")) returned 0x20
	[0191.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll")) returned 0x20
	[0191.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.design.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.349] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=139264) returned 1
	[0191.349] CloseHandle (hObject=0x228) returned 1
	[0191.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll")) returned 0x20
	[0191.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll")) returned 0x20
	[0191.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.entity.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.350] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=335872) returned 1
	[0191.350] CloseHandle (hObject=0x228) returned 1
	[0191.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll")) returned 0x20
	[0191.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll")) returned 0x20
	[0191.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.design.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.351] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1277952) returned 1
	[0191.351] CloseHandle (hObject=0x228) returned 1
	[0191.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll")) returned 0x20
	[0191.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll")) returned 0x20
	[0191.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.extensions.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0191.352] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61440) returned 1
	[0191.353] CloseHandle (hObject=0x228) returned 1
	[0191.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll")) returned 0x20
	[0191.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll")) returned 0x20
	[0191.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.web.routing.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.507] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12288) returned 1
	[0191.507] CloseHandle (hObject=0x20c) returned 1
	[0191.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll")) returned 0x20
	[0191.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll")) returned 0x20
	[0191.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\system.windows.presentation.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.507] SetEvent (hEvent=0xfc) returned 1
	[0191.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\setup_wm.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.642] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=56320) returned 1
	[0191.642] CloseHandle (hObject=0x20c) returned 1
	[0191.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\setup_wm.exe.mui")) returned 0x20
	[0191.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\setup_wm.exe.mui")) returned 0x20
	[0191.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\setup_wm.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\setup_wm.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.643] SetEvent (hEvent=0xfc) returned 1
	[0191.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0191.775] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31744) returned 1
	[0191.776] CloseHandle (hObject=0x20c) returned 1
	[0191.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssui.dll")) returned 0x20
	[0191.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssui.dll")) returned 0x20
	[0191.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0191.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0191.776] SetEvent (hEvent=0xfc) returned 1
	[0191.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us\\sidebar.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.032] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18944) returned 1
	[0192.032] CloseHandle (hObject=0x23c) returned 1
	[0192.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us\\sidebar.exe.mui")) returned 0x20
	[0192.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us\\sidebar.exe.mui")) returned 0x20
	[0192.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us\\sidebar.exe.mui.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\en-US\\Sidebar.exe.mui" (normalized: "c:\\program files (x86)\\windows sidebar\\en-us\\sidebar.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.032] SetEvent (hEvent=0xfc) returned 1
	[0192.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.033] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2919) returned 1
	[0192.033] CloseHandle (hObject=0x23c) returned 1
	[0192.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png")) returned 0x20
	[0192.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png")) returned 0x20
	[0192.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_s.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.034] SetEvent (hEvent=0xfc) returned 1
	[0192.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.035] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28718) returned 1
	[0192.035] CloseHandle (hObject=0x23c) returned 1
	[0192.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png")) returned 0x20
	[0192.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png")) returned 0x20
	[0192.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\novelty_settings.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\novelty_settings.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.035] SetEvent (hEvent=0xfc) returned 1
	[0192.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.036] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=140) returned 1
	[0192.037] CloseHandle (hObject=0x23c) returned 1
	[0192.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png")) returned 0x20
	[0192.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png")) returned 0x20
	[0192.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_bottom.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.037] SetEvent (hEvent=0xfc) returned 1
	[0192.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.038] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=135) returned 1
	[0192.038] CloseHandle (hObject=0x23c) returned 1
	[0192.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png")) returned 0x20
	[0192.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png")) returned 0x20
	[0192.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.039] SetEvent (hEvent=0xfc) returned 1
	[0192.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.040] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=135) returned 1
	[0192.040] CloseHandle (hObject=0x23c) returned 1
	[0192.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png")) returned 0x20
	[0192.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png")) returned 0x20
	[0192.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_divider_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.041] SetEvent (hEvent=0xfc) returned 1
	[0192.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.042] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0192.042] CloseHandle (hObject=0x23c) returned 1
	[0192.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png")) returned 0x20
	[0192.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png")) returned 0x20
	[0192.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.042] SetEvent (hEvent=0xfc) returned 1
	[0192.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.043] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0192.043] CloseHandle (hObject=0x23c) returned 1
	[0192.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png")) returned 0x20
	[0192.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png")) returned 0x20
	[0192.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.044] SetEvent (hEvent=0xfc) returned 1
	[0192.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.045] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0192.045] CloseHandle (hObject=0x23c) returned 1
	[0192.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png")) returned 0x20
	[0192.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png")) returned 0x20
	[0192.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_box_top.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.045] SetEvent (hEvent=0xfc) returned 1
	[0192.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.047] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=168) returned 1
	[0192.047] CloseHandle (hObject=0x23c) returned 1
	[0192.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png")) returned 0x20
	[0192.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png")) returned 0x20
	[0192.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.047] SetEvent (hEvent=0xfc) returned 1
	[0192.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.048] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=165) returned 1
	[0192.048] CloseHandle (hObject=0x23c) returned 1
	[0192.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png")) returned 0x20
	[0192.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png")) returned 0x20
	[0192.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_bottom_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.049] SetEvent (hEvent=0xfc) returned 1
	[0192.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.052] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=166) returned 1
	[0192.052] CloseHandle (hObject=0x23c) returned 1
	[0192.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png")) returned 0x20
	[0192.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png")) returned 0x20
	[0192.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.052] SetEvent (hEvent=0xfc) returned 1
	[0192.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.053] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=168) returned 1
	[0192.053] CloseHandle (hObject=0x23c) returned 1
	[0192.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png")) returned 0x20
	[0192.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png")) returned 0x20
	[0192.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_corner_top_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.054] SetEvent (hEvent=0xfc) returned 1
	[0192.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.055] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131) returned 1
	[0192.055] CloseHandle (hObject=0x23c) returned 1
	[0192.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png")) returned 0x20
	[0192.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png")) returned 0x20
	[0192.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.056] SetEvent (hEvent=0xfc) returned 1
	[0192.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.057] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=145) returned 1
	[0192.057] CloseHandle (hObject=0x23c) returned 1
	[0192.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png")) returned 0x20
	[0192.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png")) returned 0x20
	[0192.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.057] SetEvent (hEvent=0xfc) returned 1
	[0192.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.058] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=139) returned 1
	[0192.058] CloseHandle (hObject=0x23c) returned 1
	[0192.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png")) returned 0x20
	[0192.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png")) returned 0x20
	[0192.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_divider_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.059] SetEvent (hEvent=0xfc) returned 1
	[0192.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.060] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=697) returned 1
	[0192.060] CloseHandle (hObject=0x23c) returned 1
	[0192.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png")) returned 0x20
	[0192.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png")) returned 0x20
	[0192.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_disabled.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.060] SetEvent (hEvent=0xfc) returned 1
	[0192.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.062] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1050) returned 1
	[0192.062] CloseHandle (hObject=0x23c) returned 1
	[0192.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png")) returned 0x20
	[0192.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png")) returned 0x20
	[0192.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.062] SetEvent (hEvent=0xfc) returned 1
	[0192.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.063] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1124) returned 1
	[0192.063] CloseHandle (hObject=0x23c) returned 1
	[0192.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png")) returned 0x20
	[0192.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png")) returned 0x20
	[0192.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.064] SetEvent (hEvent=0xfc) returned 1
	[0192.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.065] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=855) returned 1
	[0192.065] CloseHandle (hObject=0x23c) returned 1
	[0192.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png")) returned 0x20
	[0192.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png")) returned 0x20
	[0192.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_left_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.065] SetEvent (hEvent=0xfc) returned 1
	[0192.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.066] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=697) returned 1
	[0192.066] CloseHandle (hObject=0x23c) returned 1
	[0192.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png")) returned 0x20
	[0192.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png")) returned 0x20
	[0192.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_disabled.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.067] SetEvent (hEvent=0xfc) returned 1
	[0192.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.068] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1047) returned 1
	[0192.068] CloseHandle (hObject=0x23c) returned 1
	[0192.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png")) returned 0x20
	[0192.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png")) returned 0x20
	[0192.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.068] SetEvent (hEvent=0xfc) returned 1
	[0192.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.069] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1119) returned 1
	[0192.069] CloseHandle (hObject=0x23c) returned 1
	[0192.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png")) returned 0x20
	[0192.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png")) returned 0x20
	[0192.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.070] SetEvent (hEvent=0xfc) returned 1
	[0192.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.071] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=856) returned 1
	[0192.071] CloseHandle (hObject=0x23c) returned 1
	[0192.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png")) returned 0x20
	[0192.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png")) returned 0x20
	[0192.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\settings_right_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.072] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=288) returned 1
	[0192.072] CloseHandle (hObject=0x23c) returned 1
	[0192.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png")) returned 0x20
	[0192.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png")) returned 0x20
	[0192.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\spacer_highlights.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\spacer_highlights.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.073] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20140) returned 1
	[0192.073] CloseHandle (hObject=0x23c) returned 1
	[0192.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png")) returned 0x20
	[0192.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png")) returned 0x20
	[0192.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.248] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=240) returned 1
	[0192.248] CloseHandle (hObject=0x23c) returned 1
	[0192.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png")) returned 0x20
	[0192.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png")) returned 0x20
	[0192.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\images\\square_dot.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\images\\square_dot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.249] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3075) returned 1
	[0192.250] CloseHandle (hObject=0x23c) returned 1
	[0192.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png")) returned 0x20
	[0192.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png")) returned 0x20
	[0192.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_lrg_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_lrg_sml.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.251] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3026) returned 1
	[0192.251] CloseHandle (hObject=0x23c) returned 1
	[0192.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png")) returned 0x20
	[0192.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png")) returned 0x20
	[0192.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\dial_sml.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\dial_sml.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.252] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=308) returned 1
	[0192.252] CloseHandle (hObject=0x23c) returned 1
	[0192.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png")) returned 0x20
	[0192.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png")) returned 0x20
	[0192.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.253] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=443) returned 1
	[0192.253] CloseHandle (hObject=0x23c) returned 1
	[0192.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png")) returned 0x20
	[0192.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png")) returned 0x20
	[0192.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\images\\glass_lrg.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\images\\glass_lrg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.254] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6166) returned 1
	[0192.254] CloseHandle (hObject=0x23c) returned 1
	[0192.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\logo.png")) returned 0x20
	[0192.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\logo.png")) returned 0x20
	[0192.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.255] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16491) returned 1
	[0192.255] CloseHandle (hObject=0x23c) returned 1
	[0192.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png")) returned 0x20
	[0192.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png")) returned 0x20
	[0192.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.256] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19502) returned 1
	[0192.256] CloseHandle (hObject=0x23c) returned 1
	[0192.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css")) returned 0x20
	[0192.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css")) returned 0x20
	[0192.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\css\\currency.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\css\\currency.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.257] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6034) returned 1
	[0192.258] CloseHandle (hObject=0x23c) returned 1
	[0192.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html")) returned 0x20
	[0192.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html")) returned 0x20
	[0192.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\currency.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\currency.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.262] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1958) returned 1
	[0192.262] CloseHandle (hObject=0x23c) returned 1
	[0192.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml")) returned 0x20
	[0192.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml")) returned 0x20
	[0192.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.263] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=66782) returned 1
	[0192.263] CloseHandle (hObject=0x23c) returned 1
	[0192.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js")) returned 0x20
	[0192.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js")) returned 0x20
	[0192.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\currency.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\currency.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.264] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=724) returned 1
	[0192.264] CloseHandle (hObject=0x23c) returned 1
	[0192.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js")) returned 0x20
	[0192.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js")) returned 0x20
	[0192.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\init.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\init.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.266] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5662) returned 1
	[0192.266] CloseHandle (hObject=0x23c) returned 1
	[0192.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js")) returned 0x20
	[0192.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js")) returned 0x20
	[0192.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\library.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\library.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.267] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11252) returned 1
	[0192.267] CloseHandle (hObject=0x23c) returned 1
	[0192.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js")) returned 0x20
	[0192.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js")) returned 0x20
	[0192.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\localizedStrings.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\localizedstrings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.268] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7720) returned 1
	[0192.268] CloseHandle (hObject=0x23c) returned 1
	[0192.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js")) returned 0x20
	[0192.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js")) returned 0x20
	[0192.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\en-US\\js\\service.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\en-us\\js\\service.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.269] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6889) returned 1
	[0192.269] CloseHandle (hObject=0x23c) returned 1
	[0192.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\icon.png")) returned 0x20
	[0192.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\icon.png")) returned 0x20
	[0192.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.271] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12585) returned 1
	[0192.271] CloseHandle (hObject=0x23c) returned 1
	[0192.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png")) returned 0x20
	[0192.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png")) returned 0x20
	[0192.271] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\activity16v.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.272] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=512) returned 1
	[0192.272] CloseHandle (hObject=0x23c) returned 1
	[0192.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png")) returned 0x20
	[0192.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png")) returned 0x20
	[0192.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.272] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.273] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=420) returned 1
	[0192.273] CloseHandle (hObject=0x23c) returned 1
	[0192.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png")) returned 0x20
	[0192.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png")) returned 0x20
	[0192.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.274] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=228) returned 1
	[0192.274] CloseHandle (hObject=0x23c) returned 1
	[0192.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png")) returned 0x20
	[0192.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png")) returned 0x20
	[0192.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\add_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\add_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.276] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16491) returned 1
	[0192.276] CloseHandle (hObject=0x23c) returned 1
	[0192.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png")) returned 0x20
	[0192.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png")) returned 0x20
	[0192.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-docked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.277] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43622) returned 1
	[0192.277] CloseHandle (hObject=0x23c) returned 1
	[0192.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png")) returned 0x20
	[0192.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png")) returned 0x20
	[0192.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-2.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.278] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=54042) returned 1
	[0192.278] CloseHandle (hObject=0x23c) returned 1
	[0192.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png")) returned 0x20
	[0192.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png")) returned 0x20
	[0192.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-3.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.279] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=62016) returned 1
	[0192.279] CloseHandle (hObject=0x23c) returned 1
	[0192.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png")) returned 0x20
	[0192.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png")) returned 0x20
	[0192.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\base-undocked-4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\base-undocked-4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.280] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2963) returned 1
	[0192.280] CloseHandle (hObject=0x23c) returned 1
	[0192.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png")) returned 0x20
	[0192.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png")) returned 0x20
	[0192.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.281] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2885) returned 1
	[0192.281] CloseHandle (hObject=0x23c) returned 1
	[0192.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png")) returned 0x20
	[0192.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png")) returned 0x20
	[0192.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-middle.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-middle.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.283] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2979) returned 1
	[0192.283] CloseHandle (hObject=0x23c) returned 1
	[0192.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png")) returned 0x20
	[0192.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png")) returned 0x20
	[0192.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\combo-hover-right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\combo-hover-right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.284] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=772) returned 1
	[0192.284] CloseHandle (hObject=0x23c) returned 1
	[0192.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png")) returned 0x20
	[0192.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png")) returned 0x20
	[0192.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0192.285] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=696) returned 1
	[0192.285] CloseHandle (hObject=0x23c) returned 1
	[0192.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png")) returned 0x20
	[0192.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png")) returned 0x20
	[0192.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.575] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=477) returned 1
	[0192.575] CloseHandle (hObject=0x1f4) returned 1
	[0192.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png")) returned 0x20
	[0192.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png")) returned 0x20
	[0192.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\images\\delete_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\images\\delete_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.576] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18747) returned 1
	[0192.577] CloseHandle (hObject=0x1f4) returned 1
	[0192.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png")) returned 0x20
	[0192.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png")) returned 0x20
	[0192.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\7.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.578] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21159) returned 1
	[0192.578] CloseHandle (hObject=0x1f4) returned 1
	[0192.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png")) returned 0x20
	[0192.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png")) returned 0x20
	[0192.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\8.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.578] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.579] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21275) returned 1
	[0192.579] CloseHandle (hObject=0x1f4) returned 1
	[0192.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png")) returned 0x20
	[0192.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png")) returned 0x20
	[0192.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\9.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.580] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18089) returned 1
	[0192.580] CloseHandle (hObject=0x1f4) returned 1
	[0192.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png")) returned 0x20
	[0192.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png")) returned 0x20
	[0192.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.581] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41941) returned 1
	[0192.581] CloseHandle (hObject=0x1f4) returned 1
	[0192.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png")) returned 0x20
	[0192.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png")) returned 0x20
	[0192.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\daisies.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\daisies.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.582] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=233) returned 1
	[0192.582] CloseHandle (hObject=0x1f4) returned 1
	[0192.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png")) returned 0x20
	[0192.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png")) returned 0x20
	[0192.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\glow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\glow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.583] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3445) returned 1
	[0192.583] CloseHandle (hObject=0x1f4) returned 1
	[0192.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png")) returned 0x20
	[0192.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png")) returned 0x20
	[0192.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.584] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3332) returned 1
	[0192.584] CloseHandle (hObject=0x1f4) returned 1
	[0192.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png")) returned 0x20
	[0192.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png")) returned 0x20
	[0192.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.585] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3381) returned 1
	[0192.585] CloseHandle (hObject=0x1f4) returned 1
	[0192.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png")) returned 0x20
	[0192.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png")) returned 0x20
	[0192.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\hint_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\hint_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.586] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=140) returned 1
	[0192.586] CloseHandle (hObject=0x1f4) returned 1
	[0192.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png")) returned 0x20
	[0192.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png")) returned 0x20
	[0192.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_bottom.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_bottom.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.588] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=135) returned 1
	[0192.588] CloseHandle (hObject=0x1f4) returned 1
	[0192.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png")) returned 0x20
	[0192.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png")) returned 0x20
	[0192.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.589] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=135) returned 1
	[0192.589] CloseHandle (hObject=0x1f4) returned 1
	[0192.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png")) returned 0x20
	[0192.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png")) returned 0x20
	[0192.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_divider_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.590] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0192.590] CloseHandle (hObject=0x1f4) returned 1
	[0192.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png")) returned 0x20
	[0192.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png")) returned 0x20
	[0192.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.591] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0192.591] CloseHandle (hObject=0x1f4) returned 1
	[0192.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png")) returned 0x20
	[0192.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png")) returned 0x20
	[0192.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.592] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=137) returned 1
	[0192.592] CloseHandle (hObject=0x1f4) returned 1
	[0192.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png")) returned 0x20
	[0192.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png")) returned 0x20
	[0192.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_box_top.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_box_top.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.593] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=168) returned 1
	[0192.593] CloseHandle (hObject=0x1f4) returned 1
	[0192.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png")) returned 0x20
	[0192.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png")) returned 0x20
	[0192.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.594] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=165) returned 1
	[0192.594] CloseHandle (hObject=0x1f4) returned 1
	[0192.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png")) returned 0x20
	[0192.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png")) returned 0x20
	[0192.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_bottom_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_bottom_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.602] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=166) returned 1
	[0192.602] CloseHandle (hObject=0x1f4) returned 1
	[0192.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png")) returned 0x20
	[0192.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png")) returned 0x20
	[0192.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.604] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=168) returned 1
	[0192.604] CloseHandle (hObject=0x1f4) returned 1
	[0192.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png")) returned 0x20
	[0192.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png")) returned 0x20
	[0192.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_corner_top_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_corner_top_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.605] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131) returned 1
	[0192.605] CloseHandle (hObject=0x1f4) returned 1
	[0192.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png")) returned 0x20
	[0192.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png")) returned 0x20
	[0192.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.605] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.606] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=145) returned 1
	[0192.606] CloseHandle (hObject=0x1f4) returned 1
	[0192.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png")) returned 0x20
	[0192.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png")) returned 0x20
	[0192.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_left.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_left.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.607] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=139) returned 1
	[0192.607] CloseHandle (hObject=0x1f4) returned 1
	[0192.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png")) returned 0x20
	[0192.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png")) returned 0x20
	[0192.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_divider_right.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_divider_right.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.608] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=697) returned 1
	[0192.608] CloseHandle (hObject=0x1f4) returned 1
	[0192.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png")) returned 0x20
	[0192.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png")) returned 0x20
	[0192.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_disabled.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.609] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1050) returned 1
	[0192.609] CloseHandle (hObject=0x1f4) returned 1
	[0192.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png")) returned 0x20
	[0192.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png")) returned 0x20
	[0192.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.610] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.610] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1124) returned 1
	[0192.610] CloseHandle (hObject=0x1f4) returned 1
	[0192.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png")) returned 0x20
	[0192.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png")) returned 0x20
	[0192.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.612] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=855) returned 1
	[0192.612] CloseHandle (hObject=0x1f4) returned 1
	[0192.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png")) returned 0x20
	[0192.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png")) returned 0x20
	[0192.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.612] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_left_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_left_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.613] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=697) returned 1
	[0192.613] CloseHandle (hObject=0x1f4) returned 1
	[0192.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png")) returned 0x20
	[0192.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png")) returned 0x20
	[0192.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_disabled.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_disabled.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.614] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1047) returned 1
	[0192.614] CloseHandle (hObject=0x1f4) returned 1
	[0192.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png")) returned 0x20
	[0192.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png")) returned 0x20
	[0192.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_hover.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.615] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1119) returned 1
	[0192.615] CloseHandle (hObject=0x1f4) returned 1
	[0192.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png")) returned 0x20
	[0192.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png")) returned 0x20
	[0192.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_pressed.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1f4
	[0192.616] GetFileSizeEx (in: hFile=0x1f4, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=856) returned 1
	[0192.616] CloseHandle (hObject=0x1f4) returned 1
	[0192.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png")) returned 0x20
	[0192.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png")) returned 0x20
	[0192.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.844] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\Images\\settings_right_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\images\\settings_right_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.845] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3242) returned 1
	[0192.845] CloseHandle (hObject=0x228) returned 1
	[0192.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png")) returned 0x20
	[0192.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png")) returned 0x20
	[0192.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\navBack.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\navback.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.847] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5980) returned 1
	[0192.847] CloseHandle (hObject=0x228) returned 1
	[0192.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png")) returned 0x20
	[0192.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png")) returned 0x20
	[0192.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_docked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.848] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8942) returned 1
	[0192.848] CloseHandle (hObject=0x228) returned 1
	[0192.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png")) returned 0x20
	[0192.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png")) returned 0x20
	[0192.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssBackBlue_Undocked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rssbackblue_undocked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.849] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1696) returned 1
	[0192.849] CloseHandle (hObject=0x228) returned 1
	[0192.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif")) returned 0x20
	[0192.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif")) returned 0x20
	[0192.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rssLogo.gif" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rsslogo.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.850] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2957) returned 1
	[0192.850] CloseHandle (hObject=0x228) returned 1
	[0192.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png")) returned 0x20
	[0192.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png")) returned 0x20
	[0192.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_docked.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_docked.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.851] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2999) returned 1
	[0192.851] CloseHandle (hObject=0x228) returned 1
	[0192.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png")) returned 0x20
	[0192.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png")) returned 0x20
	[0192.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_floating.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_floating.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.852] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1266) returned 1
	[0192.852] CloseHandle (hObject=0x228) returned 1
	[0192.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png")) returned 0x20
	[0192.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png")) returned 0x20
	[0192.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\images\\rss_headline_glow_flyout.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\images\\rss_headline_glow_flyout.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.853] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6166) returned 1
	[0192.853] CloseHandle (hObject=0x228) returned 1
	[0192.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png")) returned 0x20
	[0192.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png")) returned 0x20
	[0192.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\logo.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.856] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30069) returned 1
	[0192.856] CloseHandle (hObject=0x228) returned 1
	[0192.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png")) returned 0x20
	[0192.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png")) returned 0x20
	[0192.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.857] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1296) returned 1
	[0192.857] CloseHandle (hObject=0x228) returned 1
	[0192.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0192.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css")) returned 0x20
	[0192.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\settings.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\settings.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.858] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4528) returned 1
	[0192.858] CloseHandle (hObject=0x228) returned 1
	[0192.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css")) returned 0x20
	[0192.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css")) returned 0x20
	[0192.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\css\\slideShow.css" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\css\\slideshow.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.860] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=989) returned 1
	[0192.860] CloseHandle (hObject=0x228) returned 1
	[0192.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml")) returned 0x20
	[0192.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml")) returned 0x20
	[0192.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\gadget.xml" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\gadget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.861] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=55660) returned 1
	[0192.861] CloseHandle (hObject=0x228) returned 1
	[0192.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js")) returned 0x20
	[0192.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js")) returned 0x20
	[0192.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\js\\slideShow.js" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\js\\slideshow.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.862] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6416) returned 1
	[0192.862] CloseHandle (hObject=0x228) returned 1
	[0192.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html")) returned 0x20
	[0192.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html")) returned 0x20
	[0192.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\settings.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\settings.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.862] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.863] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3428) returned 1
	[0192.863] CloseHandle (hObject=0x228) returned 1
	[0192.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html")) returned 0x20
	[0192.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html")) returned 0x20
	[0192.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\en-US\\slideShow.html" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\en-us\\slideshow.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.864] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10034) returned 1
	[0192.864] CloseHandle (hObject=0x228) returned 1
	[0192.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png")) returned 0x20
	[0192.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png")) returned 0x20
	[0192.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\icon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\icon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.867] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3462) returned 1
	[0192.867] CloseHandle (hObject=0x228) returned 1
	[0192.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png")) returned 0x20
	[0192.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png")) returned 0x20
	[0192.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\blank.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\blank.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.868] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3574) returned 1
	[0192.868] CloseHandle (hObject=0x228) returned 1
	[0192.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png")) returned 0x20
	[0192.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png")) returned 0x20
	[0192.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\bg_sidebar.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\bg_sidebar.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.869] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3511) returned 1
	[0192.869] CloseHandle (hObject=0x228) returned 1
	[0192.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png")) returned 0x20
	[0192.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png")) returned 0x20
	[0192.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\in_sidebar\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\in_sidebar\\slideshow_glass_frame.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.871] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3063) returned 1
	[0192.871] CloseHandle (hObject=0x228) returned 1
	[0192.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png")) returned 0x20
	[0192.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png")) returned 0x20
	[0192.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.872] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3065) returned 1
	[0192.872] CloseHandle (hObject=0x228) returned 1
	[0192.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png")) returned 0x20
	[0192.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png")) returned 0x20
	[0192.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_hov.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.873] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2903) returned 1
	[0192.873] CloseHandle (hObject=0x228) returned 1
	[0192.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png")) returned 0x20
	[0192.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png")) returned 0x20
	[0192.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\next_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\next_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.873] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.874] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5513) returned 1
	[0192.874] CloseHandle (hObject=0x228) returned 1
	[0192.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png")) returned 0x20
	[0192.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png")) returned 0x20
	[0192.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\on_desktop\\slideshow_glass_frame.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\on_desktop\\slideshow_glass_frame.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.875] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3018) returned 1
	[0192.875] CloseHandle (hObject=0x228) returned 1
	[0192.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png")) returned 0x20
	[0192.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png")) returned 0x20
	[0192.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.876] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3027) returned 1
	[0192.876] CloseHandle (hObject=0x228) returned 1
	[0192.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png")) returned 0x20
	[0192.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png")) returned 0x20
	[0192.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_hov.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.877] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.877] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2833) returned 1
	[0192.877] CloseHandle (hObject=0x228) returned 1
	[0192.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png")) returned 0x20
	[0192.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png")) returned 0x20
	[0192.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\pause_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\pause_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.879] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3058) returned 1
	[0192.879] CloseHandle (hObject=0x228) returned 1
	[0192.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png")) returned 0x20
	[0192.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png")) returned 0x20
	[0192.879] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.880] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3062) returned 1
	[0192.880] CloseHandle (hObject=0x228) returned 1
	[0192.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png")) returned 0x20
	[0192.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png")) returned 0x20
	[0192.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_hov.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.881] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2886) returned 1
	[0192.881] CloseHandle (hObject=0x228) returned 1
	[0192.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png")) returned 0x20
	[0192.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png")) returned 0x20
	[0192.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\play_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\play_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.882] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3062) returned 1
	[0192.882] CloseHandle (hObject=0x228) returned 1
	[0192.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png")) returned 0x20
	[0192.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png")) returned 0x20
	[0192.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.883] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3077) returned 1
	[0192.883] CloseHandle (hObject=0x228) returned 1
	[0192.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png")) returned 0x20
	[0192.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png")) returned 0x20
	[0192.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_hov.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_hov.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0192.884] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2904) returned 1
	[0192.884] CloseHandle (hObject=0x228) returned 1
	[0192.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png")) returned 0x20
	[0192.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png")) returned 0x20
	[0192.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0192.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\prev_rest.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\prev_rest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0192.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.089] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3162) returned 1
	[0193.089] CloseHandle (hObject=0x228) returned 1
	[0193.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png")) returned 0x20
	[0193.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png")) returned 0x20
	[0193.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\images\\reveal_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\images\\reveal_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.194] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5457) returned 1
	[0193.194] CloseHandle (hObject=0x228) returned 1
	[0193.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png")) returned 0x20
	[0193.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png")) returned 0x20
	[0193.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\10.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\10.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.195] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5457) returned 1
	[0193.195] CloseHandle (hObject=0x228) returned 1
	[0193.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png")) returned 0x20
	[0193.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png")) returned 0x20
	[0193.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\11.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\11.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.197] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5457) returned 1
	[0193.197] CloseHandle (hObject=0x228) returned 1
	[0193.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png")) returned 0x20
	[0193.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png")) returned 0x20
	[0193.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\12.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\12.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.199] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=652) returned 1
	[0193.199] CloseHandle (hObject=0x228) returned 1
	[0193.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png")) returned 0x20
	[0193.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png")) returned 0x20
	[0193.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)alerticon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.200] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=429) returned 1
	[0193.200] CloseHandle (hObject=0x228) returned 1
	[0193.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png")) returned 0x20
	[0193.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png")) returned 0x20
	[0193.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)grayStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)graystateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.201] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=559) returned 1
	[0193.201] CloseHandle (hObject=0x228) returned 1
	[0193.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png")) returned 0x20
	[0193.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png")) returned 0x20
	[0193.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)greenstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.202] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=680) returned 1
	[0193.202] CloseHandle (hObject=0x228) returned 1
	[0193.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png")) returned 0x20
	[0193.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png")) returned 0x20
	[0193.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)notconnectedstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.203] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=680) returned 1
	[0193.203] CloseHandle (hObject=0x228) returned 1
	[0193.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png")) returned 0x20
	[0193.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png")) returned 0x20
	[0193.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\120DPI\\(120DPI)redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\120dpi\\(120dpi)redstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.204] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0193.204] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4066) returned 1
	[0193.204] CloseHandle (hObject=0x228) returned 1
	[0193.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png")) returned 0x20
	[0193.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png")) returned 0x20
	[0193.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\13.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\13.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.349] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4066) returned 1
	[0193.349] CloseHandle (hObject=0x238) returned 1
	[0193.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png")) returned 0x20
	[0193.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png")) returned 0x20
	[0193.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\14.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\14.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.350] SetEvent (hEvent=0xfc) returned 1
	[0193.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.351] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5573) returned 1
	[0193.351] CloseHandle (hObject=0x238) returned 1
	[0193.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png")) returned 0x20
	[0193.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png")) returned 0x20
	[0193.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\25.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\25.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.352] SetEvent (hEvent=0xfc) returned 1
	[0193.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.355] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5064) returned 1
	[0193.356] CloseHandle (hObject=0x20c) returned 1
	[0193.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png")) returned 0x20
	[0193.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png")) returned 0x20
	[0193.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\26.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\26.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.356] SetEvent (hEvent=0xfc) returned 1
	[0193.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.357] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5064) returned 1
	[0193.357] CloseHandle (hObject=0x20c) returned 1
	[0193.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png")) returned 0x20
	[0193.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png")) returned 0x20
	[0193.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\27.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\27.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.358] SetEvent (hEvent=0xfc) returned 1
	[0193.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.360] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5064) returned 1
	[0193.360] CloseHandle (hObject=0x20c) returned 1
	[0193.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png")) returned 0x20
	[0193.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png")) returned 0x20
	[0193.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\28.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\28.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.361] SetEvent (hEvent=0xfc) returned 1
	[0193.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.362] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4112) returned 1
	[0193.362] CloseHandle (hObject=0x20c) returned 1
	[0193.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png")) returned 0x20
	[0193.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png")) returned 0x20
	[0193.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\29.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\29.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.363] SetEvent (hEvent=0xfc) returned 1
	[0193.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.364] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5206) returned 1
	[0193.364] CloseHandle (hObject=0x20c) returned 1
	[0193.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png")) returned 0x20
	[0193.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png")) returned 0x20
	[0193.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\3.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\3.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.364] SetEvent (hEvent=0xfc) returned 1
	[0193.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.366] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4112) returned 1
	[0193.366] CloseHandle (hObject=0x20c) returned 1
	[0193.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png")) returned 0x20
	[0193.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png")) returned 0x20
	[0193.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\30.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\30.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.366] SetEvent (hEvent=0xfc) returned 1
	[0193.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.367] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5855) returned 1
	[0193.368] CloseHandle (hObject=0x20c) returned 1
	[0193.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png")) returned 0x20
	[0193.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png")) returned 0x20
	[0193.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\31.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\31.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.368] SetEvent (hEvent=0xfc) returned 1
	[0193.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.369] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5855) returned 1
	[0193.370] CloseHandle (hObject=0x20c) returned 1
	[0193.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png")) returned 0x20
	[0193.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png")) returned 0x20
	[0193.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\32.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\32.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.370] SetEvent (hEvent=0xfc) returned 1
	[0193.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.373] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4112) returned 1
	[0193.373] CloseHandle (hObject=0x20c) returned 1
	[0193.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png")) returned 0x20
	[0193.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png")) returned 0x20
	[0193.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\33.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\33.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.374] SetEvent (hEvent=0xfc) returned 1
	[0193.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.651] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4112) returned 1
	[0193.651] CloseHandle (hObject=0x20c) returned 1
	[0193.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png")) returned 0x20
	[0193.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png")) returned 0x20
	[0193.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\34.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\34.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.652] SetEvent (hEvent=0xfc) returned 1
	[0193.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.654] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5855) returned 1
	[0193.654] CloseHandle (hObject=0x238) returned 1
	[0193.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png")) returned 0x20
	[0193.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png")) returned 0x20
	[0193.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\36.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\36.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.655] SetEvent (hEvent=0xfc) returned 1
	[0193.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.656] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5206) returned 1
	[0193.656] CloseHandle (hObject=0x238) returned 1
	[0193.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png")) returned 0x20
	[0193.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png")) returned 0x20
	[0193.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\37.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\37.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.656] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.657] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5206) returned 1
	[0193.657] CloseHandle (hObject=0x238) returned 1
	[0193.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png")) returned 0x20
	[0193.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png")) returned 0x20
	[0193.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\38.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\38.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.658] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5457) returned 1
	[0193.658] CloseHandle (hObject=0x238) returned 1
	[0193.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png")) returned 0x20
	[0193.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png")) returned 0x20
	[0193.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\39.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\39.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.658] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.659] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5206) returned 1
	[0193.659] CloseHandle (hObject=0x238) returned 1
	[0193.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png")) returned 0x20
	[0193.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png")) returned 0x20
	[0193.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\4.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.660] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6260) returned 1
	[0193.660] CloseHandle (hObject=0x238) returned 1
	[0193.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png")) returned 0x20
	[0193.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png")) returned 0x20
	[0193.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\40.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\40.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.661] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4066) returned 1
	[0193.661] CloseHandle (hObject=0x238) returned 1
	[0193.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png")) returned 0x20
	[0193.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png")) returned 0x20
	[0193.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\41.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\41.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.662] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4405) returned 1
	[0193.662] CloseHandle (hObject=0x238) returned 1
	[0193.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png")) returned 0x20
	[0193.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png")) returned 0x20
	[0193.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\42.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\42.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.663] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4405) returned 1
	[0193.664] CloseHandle (hObject=0x238) returned 1
	[0193.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png")) returned 0x20
	[0193.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png")) returned 0x20
	[0193.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\43.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\43.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.665] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2846) returned 1
	[0193.665] CloseHandle (hObject=0x238) returned 1
	[0193.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png")) returned 0x20
	[0193.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png")) returned 0x20
	[0193.665] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\44.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\44.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.666] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.666] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5457) returned 1
	[0193.666] CloseHandle (hObject=0x238) returned 1
	[0193.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png")) returned 0x20
	[0193.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png")) returned 0x20
	[0193.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\45.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\45.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.668] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4066) returned 1
	[0193.668] CloseHandle (hObject=0x238) returned 1
	[0193.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png")) returned 0x20
	[0193.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png")) returned 0x20
	[0193.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\46.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\46.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.669] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5206) returned 1
	[0193.669] CloseHandle (hObject=0x238) returned 1
	[0193.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png")) returned 0x20
	[0193.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png")) returned 0x20
	[0193.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\47.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\47.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.670] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5889) returned 1
	[0193.670] CloseHandle (hObject=0x238) returned 1
	[0193.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png")) returned 0x20
	[0193.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png")) returned 0x20
	[0193.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\5.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\5.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.671] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5889) returned 1
	[0193.671] CloseHandle (hObject=0x238) returned 1
	[0193.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png")) returned 0x20
	[0193.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png")) returned 0x20
	[0193.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\6.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\6.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.671] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.672] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5889) returned 1
	[0193.672] CloseHandle (hObject=0x238) returned 1
	[0193.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png")) returned 0x20
	[0193.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png")) returned 0x20
	[0193.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\7.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\7.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.672] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.673] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5457) returned 1
	[0193.673] CloseHandle (hObject=0x238) returned 1
	[0193.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png")) returned 0x20
	[0193.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png")) returned 0x20
	[0193.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\8.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\8.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.674] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5457) returned 1
	[0193.674] CloseHandle (hObject=0x238) returned 1
	[0193.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png")) returned 0x20
	[0193.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png")) returned 0x20
	[0193.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\9.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\9.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.675] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12338) returned 1
	[0193.675] CloseHandle (hObject=0x238) returned 1
	[0193.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png")) returned 0x20
	[0193.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png")) returned 0x20
	[0193.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\activity16v.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\activity16v.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.676] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=426) returned 1
	[0193.676] CloseHandle (hObject=0x238) returned 1
	[0193.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png")) returned 0x20
	[0193.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png")) returned 0x20
	[0193.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\alertIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\alerticon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.677] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3294) returned 1
	[0193.677] CloseHandle (hObject=0x238) returned 1
	[0193.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png")) returned 0x20
	[0193.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png")) returned 0x20
	[0193.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.679] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3295) returned 1
	[0193.679] CloseHandle (hObject=0x238) returned 1
	[0193.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png")) returned 0x20
	[0193.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png")) returned 0x20
	[0193.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_down_bidi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.680] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3291) returned 1
	[0193.680] CloseHandle (hObject=0x238) returned 1
	[0193.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png")) returned 0x20
	[0193.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png")) returned 0x20
	[0193.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.681] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3240) returned 1
	[0193.681] CloseHandle (hObject=0x238) returned 1
	[0193.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png")) returned 0x20
	[0193.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png")) returned 0x20
	[0193.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_close_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_close_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.682] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3573) returned 1
	[0193.682] CloseHandle (hObject=0x238) returned 1
	[0193.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png")) returned 0x20
	[0193.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png")) returned 0x20
	[0193.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.683] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3581) returned 1
	[0193.684] CloseHandle (hObject=0x238) returned 1
	[0193.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png")) returned 0x20
	[0193.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png")) returned 0x20
	[0193.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_down_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_down_bidi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.685] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3559) returned 1
	[0193.685] CloseHandle (hObject=0x238) returned 1
	[0193.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png")) returned 0x20
	[0193.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png")) returned 0x20
	[0193.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.686] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3582) returned 1
	[0193.686] CloseHandle (hObject=0x238) returned 1
	[0193.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png")) returned 0x20
	[0193.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png")) returned 0x20
	[0193.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_over_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_over_bidi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.687] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3432) returned 1
	[0193.687] CloseHandle (hObject=0x238) returned 1
	[0193.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png")) returned 0x20
	[0193.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png")) returned 0x20
	[0193.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.688] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3456) returned 1
	[0193.688] CloseHandle (hObject=0x238) returned 1
	[0193.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png")) returned 0x20
	[0193.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png")) returned 0x20
	[0193.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\btn_search_up_BIDI.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\btn_search_up_bidi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.689] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2814) returned 1
	[0193.689] CloseHandle (hObject=0x238) returned 1
	[0193.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png")) returned 0x20
	[0193.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png")) returned 0x20
	[0193.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-horizontal.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-horizontal.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.690] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2813) returned 1
	[0193.690] CloseHandle (hObject=0x238) returned 1
	[0193.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png")) returned 0x20
	[0193.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png")) returned 0x20
	[0193.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\divider-vertical.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\divider-vertical.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.691] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8801) returned 1
	[0193.691] CloseHandle (hObject=0x238) returned 1
	[0193.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png")) returned 0x20
	[0193.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png")) returned 0x20
	[0193.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked-loading.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.692] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10062) returned 1
	[0193.692] CloseHandle (hObject=0x238) returned 1
	[0193.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png")) returned 0x20
	[0193.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png")) returned 0x20
	[0193.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.694] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9861) returned 1
	[0193.694] CloseHandle (hObject=0x238) returned 1
	[0193.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png")) returned 0x20
	[0193.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png")) returned 0x20
	[0193.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_few-showers.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.695] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10544) returned 1
	[0193.695] CloseHandle (hObject=0x238) returned 1
	[0193.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png")) returned 0x20
	[0193.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png")) returned 0x20
	[0193.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_foggy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x238
	[0193.696] GetFileSizeEx (in: hFile=0x238, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11882) returned 1
	[0193.696] CloseHandle (hObject=0x238) returned 1
	[0193.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png")) returned 0x20
	[0193.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png")) returned 0x20
	[0193.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_hail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.931] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8564) returned 1
	[0193.931] CloseHandle (hObject=0x20c) returned 1
	[0193.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png")) returned 0x20
	[0193.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png")) returned 0x20
	[0193.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\docked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\docked_black_moon-first-quarter.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.933] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=373) returned 1
	[0193.933] CloseHandle (hObject=0x20c) returned 1
	[0193.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png")) returned 0x20
	[0193.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png")) returned 0x20
	[0193.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\greenStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\greenstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.934] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=729) returned 1
	[0193.934] CloseHandle (hObject=0x20c) returned 1
	[0193.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png")) returned 0x20
	[0193.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png")) returned 0x20
	[0193.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\info.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\info.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.935] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=399) returned 1
	[0193.935] CloseHandle (hObject=0x20c) returned 1
	[0193.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png")) returned 0x20
	[0193.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png")) returned 0x20
	[0193.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\notConnectedStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\notconnectedstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.936] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=399) returned 1
	[0193.936] CloseHandle (hObject=0x20c) returned 1
	[0193.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png")) returned 0x20
	[0193.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png")) returned 0x20
	[0193.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\redStateIcon.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\redstateicon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.937] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=482) returned 1
	[0193.937] CloseHandle (hObject=0x20c) returned 1
	[0193.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png")) returned 0x20
	[0193.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png")) returned 0x20
	[0193.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\search_background.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\search_background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.938] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=30094) returned 1
	[0193.938] CloseHandle (hObject=0x20c) returned 1
	[0193.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png")) returned 0x20
	[0193.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png")) returned 0x20
	[0193.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked-loading.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked-loading.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.939] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28123) returned 1
	[0193.939] CloseHandle (hObject=0x20c) returned 1
	[0193.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png")) returned 0x20
	[0193.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png")) returned 0x20
	[0193.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.940] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28035) returned 1
	[0193.940] CloseHandle (hObject=0x20c) returned 1
	[0193.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png")) returned 0x20
	[0193.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png")) returned 0x20
	[0193.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_few-showers.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_few-showers.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.941] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.941] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32480) returned 1
	[0193.941] CloseHandle (hObject=0x20c) returned 1
	[0193.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png")) returned 0x20
	[0193.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png")) returned 0x20
	[0193.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_foggy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_foggy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.943] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31406) returned 1
	[0193.943] CloseHandle (hObject=0x20c) returned 1
	[0193.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png")) returned 0x20
	[0193.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png")) returned 0x20
	[0193.943] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_hail.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_hail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.944] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19451) returned 1
	[0193.944] CloseHandle (hObject=0x20c) returned 1
	[0193.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png")) returned 0x20
	[0193.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png")) returned 0x20
	[0193.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.945] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24821) returned 1
	[0193.945] CloseHandle (hObject=0x20c) returned 1
	[0193.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png")) returned 0x20
	[0193.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png")) returned 0x20
	[0193.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-first-quarter_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.946] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20194) returned 1
	[0193.946] CloseHandle (hObject=0x20c) returned 1
	[0193.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png")) returned 0x20
	[0193.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png")) returned 0x20
	[0193.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.947] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26089) returned 1
	[0193.947] CloseHandle (hObject=0x20c) returned 1
	[0193.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png")) returned 0x20
	[0193.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png")) returned 0x20
	[0193.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-full_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-full_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.948] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18960) returned 1
	[0193.948] CloseHandle (hObject=0x20c) returned 1
	[0193.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png")) returned 0x20
	[0193.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png")) returned 0x20
	[0193.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.949] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25006) returned 1
	[0193.949] CloseHandle (hObject=0x20c) returned 1
	[0193.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png")) returned 0x20
	[0193.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png")) returned 0x20
	[0193.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-last-quarter_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.950] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21898) returned 1
	[0193.950] CloseHandle (hObject=0x20c) returned 1
	[0193.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png")) returned 0x20
	[0193.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png")) returned 0x20
	[0193.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.951] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=27366) returned 1
	[0193.952] CloseHandle (hObject=0x20c) returned 1
	[0193.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png")) returned 0x20
	[0193.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png")) returned 0x20
	[0193.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-new_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-new_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.953] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19841) returned 1
	[0193.953] CloseHandle (hObject=0x20c) returned 1
	[0193.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png")) returned 0x20
	[0193.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png")) returned 0x20
	[0193.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.954] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25705) returned 1
	[0193.954] CloseHandle (hObject=0x20c) returned 1
	[0193.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png")) returned 0x20
	[0193.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png")) returned 0x20
	[0193.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-crescent_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.955] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19335) returned 1
	[0193.955] CloseHandle (hObject=0x20c) returned 1
	[0193.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png")) returned 0x20
	[0193.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png")) returned 0x20
	[0193.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.956] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25339) returned 1
	[0193.956] CloseHandle (hObject=0x20c) returned 1
	[0193.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png")) returned 0x20
	[0193.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png")) returned 0x20
	[0193.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waning-gibbous_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.957] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19923) returned 1
	[0193.957] CloseHandle (hObject=0x20c) returned 1
	[0193.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png")) returned 0x20
	[0193.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png")) returned 0x20
	[0193.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.958] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25685) returned 1
	[0193.958] CloseHandle (hObject=0x20c) returned 1
	[0193.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png")) returned 0x20
	[0193.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png")) returned 0x20
	[0193.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-crescent_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.959] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19536) returned 1
	[0193.959] CloseHandle (hObject=0x20c) returned 1
	[0193.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png")) returned 0x20
	[0193.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png")) returned 0x20
	[0193.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.960] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25122) returned 1
	[0193.960] CloseHandle (hObject=0x20c) returned 1
	[0193.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png")) returned 0x20
	[0193.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png")) returned 0x20
	[0193.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_moon-waxing-gibbous_partly-cloudy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.962] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=38125) returned 1
	[0193.962] CloseHandle (hObject=0x20c) returned 1
	[0193.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png")) returned 0x20
	[0193.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png")) returned 0x20
	[0193.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_rainy.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_rainy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.963] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=37260) returned 1
	[0193.963] CloseHandle (hObject=0x20c) returned 1
	[0193.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png")) returned 0x20
	[0193.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png")) returned 0x20
	[0193.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0193.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_snow.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_snow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0193.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0193.964] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31296) returned 1
	[0193.964] CloseHandle (hObject=0x20c) returned 1
	[0194.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png")) returned 0x20
	[0194.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png")) returned 0x20
	[0194.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0194.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\images\\undocked_black_thunderstorm.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\images\\undocked_black_thunderstorm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0194.118] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0194.285] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17707008) returned 1
	[0194.285] CloseHandle (hObject=0x240) returned 1
	[0194.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp")) returned 0x20
	[0194.285] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp"), lpNewFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0194.286] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0194.286] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0194.286] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0194.286] ReadFile (in: hFile=0x240, lpBuffer=0x3900058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3900058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0194.315] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x5a1000, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0194.315] ReadFile (in: hFile=0x240, lpBuffer=0x3940058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3940058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0194.326] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x10a3000, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0194.326] ReadFile (in: hFile=0x240, lpBuffer=0x3980058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3980058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0194.342] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa90 | out: lpNewFilePointer=0x0) returned 1
	[0194.342] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0122, lpNumberOfBytesWritten=0x34afa88, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa88*=0xc0122, lpOverlapped=0x0) returned 1
	[0194.536] SetEndOfFile (hFile=0x240) returned 1
	[0194.539] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x10a3000, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0194.539] WriteFile (in: hFile=0x240, lpBuffer=0x39c015a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c015a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0194.541] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x5a1000, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0194.541] WriteFile (in: hFile=0x240, lpBuffer=0x39c015a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c015a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0194.542] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0194.542] WriteFile (in: hFile=0x240, lpBuffer=0x39c015a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c015a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0194.542] FlushFileBuffers (hFile=0x240) returned 1
	[0196.412] CloseHandle (hObject=0x240) returned 1
	[0196.412] SetEvent (hEvent=0xfc) returned 1
	[0196.413] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0196.570] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12066) returned 1
	[0196.570] CloseHandle (hObject=0x240) returned 1
	[0196.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d")) returned 0x2026
	[0196.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d")) returned 0x2026
	[0196.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.571] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.571] SetEvent (hEvent=0xfc) returned 1
	[0196.571] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0196.572] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222716) returned 1
	[0196.572] CloseHandle (hObject=0x240) returned 1
	[0196.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w")) returned 0x2026
	[0196.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w")) returned 0x2026
	[0196.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.572] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.572] SetEvent (hEvent=0xfc) returned 1
	[0196.573] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0196.703] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=206316) returned 1
	[0196.703] CloseHandle (hObject=0x240) returned 1
	[0196.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w")) returned 0x2026
	[0196.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w")) returned 0x2026
	[0196.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.704] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.704] SetEvent (hEvent=0xfc) returned 1
	[0196.705] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0196.706] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=499482) returned 1
	[0196.706] CloseHandle (hObject=0x240) returned 1
	[0196.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h")) returned 0x2026
	[0196.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h")) returned 0x2026
	[0196.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.706] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.706] SetEvent (hEvent=0xfc) returned 1
	[0196.709] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0196.709] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14660) returned 1
	[0196.710] CloseHandle (hObject=0x240) returned 1
	[0196.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d")) returned 0x2026
	[0196.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d")) returned 0x2026
	[0196.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.710] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.710] SetEvent (hEvent=0xfc) returned 1
	[0196.710] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0196.711] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4) returned 1
	[0196.711] CloseHandle (hObject=0x240) returned 1
	[0196.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck")) returned 0x2026
	[0196.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck")) returned 0x2026
	[0196.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.711] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.711] SetEvent (hEvent=0xfc) returned 1
	[0196.711] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0196.712] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=873232) returned 1
	[0196.712] CloseHandle (hObject=0x240) returned 1
	[0196.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q")) returned 0x2026
	[0196.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q")) returned 0x2026
	[0196.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.712] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.712] SetEvent (hEvent=0xfc) returned 1
	[0196.713] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0196.714] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=129745) returned 1
	[0196.714] CloseHandle (hObject=0x240) returned 1
	[0196.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0x20
	[0196.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0x20
	[0196.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.714] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.714] SetEvent (hEvent=0xfc) returned 1
	[0196.714] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0196.834] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2913) returned 1
	[0196.834] CloseHandle (hObject=0x240) returned 1
	[0196.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml")) returned 0x20
	[0196.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml")) returned 0x20
	[0196.834] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.834] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.834] SetEvent (hEvent=0xfc) returned 1
	[0196.835] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0196.835] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=44488) returned 1
	[0196.836] CloseHandle (hObject=0x240) returned 1
	[0196.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0x20
	[0196.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0x20
	[0196.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.836] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.836] SetEvent (hEvent=0xfc) returned 1
	[0196.839] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0196.839] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28865) returned 1
	[0196.839] CloseHandle (hObject=0x26c) returned 1
	[0196.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0x20
	[0196.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0x20
	[0196.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.839] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.840] SetEvent (hEvent=0xfc) returned 1
	[0196.840] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0196.928] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=39379) returned 1
	[0196.928] CloseHandle (hObject=0x26c) returned 1
	[0196.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0x20
	[0196.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0x20
	[0196.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.928] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.928] SetEvent (hEvent=0xfc) returned 1
	[0196.929] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0196.929] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=129745) returned 1
	[0196.930] CloseHandle (hObject=0x26c) returned 1
	[0196.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0x20
	[0196.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0x20
	[0196.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.930] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.930] SetEvent (hEvent=0xfc) returned 1
	[0196.930] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0196.931] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1897) returned 1
	[0196.931] CloseHandle (hObject=0x26c) returned 1
	[0196.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml")) returned 0x20
	[0196.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml")) returned 0x20
	[0196.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.931] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.931] SetEvent (hEvent=0xfc) returned 1
	[0196.932] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0196.932] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28865) returned 1
	[0196.932] CloseHandle (hObject=0x26c) returned 1
	[0196.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0x20
	[0196.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0x20
	[0196.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0196.932] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0196.933] SetEvent (hEvent=0xfc) returned 1
	[0196.933] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0197.114] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1334) returned 1
	[0197.114] CloseHandle (hObject=0x25c) returned 1
	[0197.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml")) returned 0x20
	[0197.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml")) returned 0x20
	[0197.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.114] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.114] SetEvent (hEvent=0xfc) returned 1
	[0197.114] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0197.115] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29422) returned 1
	[0197.115] CloseHandle (hObject=0x25c) returned 1
	[0197.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico")) returned 0x20
	[0197.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico")) returned 0x20
	[0197.115] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.115] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.115] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0197.116] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=83560) returned 1
	[0197.116] CloseHandle (hObject=0x25c) returned 1
	[0197.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico")) returned 0x20
	[0197.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico")) returned 0x20
	[0197.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.116] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.116] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.119] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1334) returned 1
	[0197.119] CloseHandle (hObject=0x260) returned 1
	[0197.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml")) returned 0x20
	[0197.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml")) returned 0x20
	[0197.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.119] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.119] SetEvent (hEvent=0xfc) returned 1
	[0197.119] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.120] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=51881) returned 1
	[0197.120] CloseHandle (hObject=0x260) returned 1
	[0197.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico")) returned 0x20
	[0197.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico")) returned 0x20
	[0197.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.120] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.120] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.121] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67664) returned 1
	[0197.121] CloseHandle (hObject=0x260) returned 1
	[0197.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico")) returned 0x20
	[0197.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico")) returned 0x20
	[0197.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.121] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.121] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.122] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49227) returned 1
	[0197.122] CloseHandle (hObject=0x260) returned 1
	[0197.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico")) returned 0x20
	[0197.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico")) returned 0x20
	[0197.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.122] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.122] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.125] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13427) returned 1
	[0197.125] CloseHandle (hObject=0x260) returned 1
	[0197.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml")) returned 0x20
	[0197.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml")) returned 0x20
	[0197.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.126] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.126] SetEvent (hEvent=0xfc) returned 1
	[0197.126] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.126] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=113140) returned 1
	[0197.127] CloseHandle (hObject=0x260) returned 1
	[0197.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico")) returned 0x20
	[0197.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico")) returned 0x20
	[0197.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.127] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.127] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.129] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1512) returned 1
	[0197.130] CloseHandle (hObject=0x260) returned 1
	[0197.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml")) returned 0x20
	[0197.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml")) returned 0x20
	[0197.130] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.130] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.130] SetEvent (hEvent=0xfc) returned 1
	[0197.130] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.131] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53411) returned 1
	[0197.131] CloseHandle (hObject=0x260) returned 1
	[0197.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico")) returned 0x20
	[0197.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico")) returned 0x20
	[0197.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.131] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.131] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.132] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=58312) returned 1
	[0197.132] CloseHandle (hObject=0x260) returned 1
	[0197.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico")) returned 0x20
	[0197.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico")) returned 0x20
	[0197.132] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.132] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.132] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.133] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=60344) returned 1
	[0197.133] CloseHandle (hObject=0x260) returned 1
	[0197.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico")) returned 0x20
	[0197.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico")) returned 0x20
	[0197.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.133] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.133] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.136] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=57333) returned 1
	[0197.136] CloseHandle (hObject=0x260) returned 1
	[0197.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico")) returned 0x20
	[0197.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico")) returned 0x20
	[0197.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.137] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.137] SetEvent (hEvent=0xfc) returned 1
	[0197.137] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.137] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=60533) returned 1
	[0197.137] CloseHandle (hObject=0x260) returned 1
	[0197.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico")) returned 0x20
	[0197.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico")) returned 0x20
	[0197.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.138] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.138] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.138] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67156) returned 1
	[0197.138] CloseHandle (hObject=0x260) returned 1
	[0197.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico")) returned 0x20
	[0197.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico")) returned 0x20
	[0197.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.139] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.139] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.139] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=63682) returned 1
	[0197.139] CloseHandle (hObject=0x260) returned 1
	[0197.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico")) returned 0x20
	[0197.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico")) returned 0x20
	[0197.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.140] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.140] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.140] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11364) returned 1
	[0197.141] CloseHandle (hObject=0x260) returned 1
	[0197.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml")) returned 0x20
	[0197.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml")) returned 0x20
	[0197.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.141] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.141] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlconfig.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.142] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15616) returned 1
	[0197.142] CloseHandle (hObject=0x260) returned 1
	[0197.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlconfig.dll")) returned 0x20
	[0197.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlconfig.dll")) returned 0x20
	[0197.142] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlconfig.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.142] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlconfig.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.142] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.145] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=254216) returned 1
	[0197.145] CloseHandle (hObject=0x260) returned 1
	[0197.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlui.dll")) returned 0x20
	[0197.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlui.dll")) returned 0x20
	[0197.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlui.dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.146] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.146] SetEvent (hEvent=0xfc) returned 1
	[0197.146] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.146] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14972) returned 1
	[0197.146] CloseHandle (hObject=0x260) returned 1
	[0197.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl")) returned 0x20
	[0197.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl")) returned 0x20
	[0197.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Active.GRL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.147] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.147] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0197.147] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0197.147] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Active.GRL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0xffffffff
	[0197.147] CloseHandle (hObject=0x260) returned 1
	[0197.147] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.148] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14972) returned 1
	[0197.148] CloseHandle (hObject=0x260) returned 1
	[0197.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl")) returned 0x20
	[0197.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl")) returned 0x20
	[0197.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Pending.GRL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.148] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.148] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0197.148] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0197.148] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Pending.GRL.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0xffffffff
	[0197.148] CloseHandle (hObject=0x260) returned 1
	[0197.148] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.149] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5430) returned 1
	[0197.149] CloseHandle (hObject=0x260) returned 1
	[0197.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico")) returned 0x2020
	[0197.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico")) returned 0x2020
	[0197.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.149] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.149] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.150] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25214) returned 1
	[0197.150] CloseHandle (hObject=0x260) returned 1
	[0197.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico")) returned 0x2020
	[0197.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico")) returned 0x2020
	[0197.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.150] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.150] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.151] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=348974) returned 1
	[0197.151] CloseHandle (hObject=0x260) returned 1
	[0197.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico")) returned 0x2020
	[0197.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico")) returned 0x2020
	[0197.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.151] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.151] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.152] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25214) returned 1
	[0197.152] CloseHandle (hObject=0x260) returned 1
	[0197.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico")) returned 0x2020
	[0197.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico")) returned 0x2020
	[0197.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.152] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.152] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.153] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25214) returned 1
	[0197.153] CloseHandle (hObject=0x260) returned 1
	[0197.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico")) returned 0x2020
	[0197.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico")) returned 0x2020
	[0197.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.153] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.153] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.155] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25214) returned 1
	[0197.155] CloseHandle (hObject=0x260) returned 1
	[0197.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico")) returned 0x2020
	[0197.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico")) returned 0x2020
	[0197.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.155] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.155] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.157] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14688) returned 1
	[0197.157] CloseHandle (hObject=0x260) returned 1
	[0197.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll")) returned 0x2020
	[0197.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll")) returned 0x2020
	[0197.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.157] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.157] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.158] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=48992) returned 1
	[0197.158] CloseHandle (hObject=0x260) returned 1
	[0197.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll")) returned 0x2020
	[0197.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll")) returned 0x2020
	[0197.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.162] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.162] SetEvent (hEvent=0xfc) returned 1
	[0197.162] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.162] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=252256) returned 1
	[0197.162] CloseHandle (hObject=0x260) returned 1
	[0197.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll")) returned 0x2020
	[0197.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll")) returned 0x2020
	[0197.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.163] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.163] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.163] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=302944) returned 1
	[0197.164] CloseHandle (hObject=0x260) returned 1
	[0197.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll")) returned 0x2020
	[0197.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll")) returned 0x2020
	[0197.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.164] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.164] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.165] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49504) returned 1
	[0197.165] CloseHandle (hObject=0x260) returned 1
	[0197.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll")) returned 0x2020
	[0197.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll")) returned 0x2020
	[0197.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.165] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.165] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.166] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=96608) returned 1
	[0197.166] CloseHandle (hObject=0x260) returned 1
	[0197.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll")) returned 0x2020
	[0197.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll")) returned 0x2020
	[0197.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.166] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.166] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.167] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2944352) returned 1
	[0197.167] CloseHandle (hObject=0x260) returned 1
	[0197.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll")) returned 0x2020
	[0197.167] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), lpNewFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0197.167] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll")) returned 0
	[0197.167] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.168] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=45920) returned 1
	[0197.168] CloseHandle (hObject=0x260) returned 1
	[0197.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll")) returned 0x2020
	[0197.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll")) returned 0x2020
	[0197.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.168] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.168] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.171] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=31584) returned 1
	[0197.171] CloseHandle (hObject=0x260) returned 1
	[0197.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll")) returned 0x2020
	[0197.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll")) returned 0x2020
	[0197.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.172] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.172] SetEvent (hEvent=0xfc) returned 1
	[0197.172] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.173] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=260960) returned 1
	[0197.173] CloseHandle (hObject=0x260) returned 1
	[0197.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll")) returned 0x2020
	[0197.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll")) returned 0x2020
	[0197.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.173] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.173] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.174] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=226656) returned 1
	[0197.174] CloseHandle (hObject=0x260) returned 1
	[0197.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll")) returned 0x2020
	[0197.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll")) returned 0x2020
	[0197.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.174] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.174] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.178] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=681312) returned 1
	[0197.178] CloseHandle (hObject=0x260) returned 1
	[0197.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll")) returned 0x2020
	[0197.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll")) returned 0x2020
	[0197.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.178] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.178] SetEvent (hEvent=0xfc) returned 1
	[0197.178] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.179] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11104) returned 1
	[0197.179] CloseHandle (hObject=0x260) returned 1
	[0197.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll")) returned 0x2020
	[0197.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll")) returned 0x2020
	[0197.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.179] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.179] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.180] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52576) returned 1
	[0197.180] CloseHandle (hObject=0x260) returned 1
	[0197.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll")) returned 0x2020
	[0197.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll")) returned 0x2020
	[0197.180] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.180] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.180] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.181] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=286560) returned 1
	[0197.181] CloseHandle (hObject=0x260) returned 1
	[0197.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll")) returned 0x2020
	[0197.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll")) returned 0x2020
	[0197.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.181] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.181] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.182] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=107360) returned 1
	[0197.182] CloseHandle (hObject=0x260) returned 1
	[0197.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll")) returned 0x2020
	[0197.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll")) returned 0x2020
	[0197.182] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.182] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.182] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.183] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=581984) returned 1
	[0197.183] CloseHandle (hObject=0x260) returned 1
	[0197.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll")) returned 0x2020
	[0197.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll")) returned 0x2020
	[0197.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.183] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.183] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.184] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=371552) returned 1
	[0197.184] CloseHandle (hObject=0x260) returned 1
	[0197.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll")) returned 0x2020
	[0197.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll")) returned 0x2020
	[0197.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.184] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.184] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.185] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13152) returned 1
	[0197.185] CloseHandle (hObject=0x260) returned 1
	[0197.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll")) returned 0x2020
	[0197.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll")) returned 0x2020
	[0197.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.185] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.185] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.186] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16736) returned 1
	[0197.186] CloseHandle (hObject=0x260) returned 1
	[0197.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll")) returned 0x2020
	[0197.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll")) returned 0x2020
	[0197.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.186] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.186] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.187] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=26976) returned 1
	[0197.187] CloseHandle (hObject=0x260) returned 1
	[0197.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll")) returned 0x2020
	[0197.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll")) returned 0x2020
	[0197.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.187] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.187] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.188] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=488800) returned 1
	[0197.188] CloseHandle (hObject=0x260) returned 1
	[0197.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll")) returned 0x2020
	[0197.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll")) returned 0x2020
	[0197.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.188] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.188] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.194] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=154464) returned 1
	[0197.194] CloseHandle (hObject=0x260) returned 1
	[0197.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll")) returned 0x2020
	[0197.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll")) returned 0x2020
	[0197.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.194] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.194] SetEvent (hEvent=0xfc) returned 1
	[0197.194] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.195] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1137504) returned 1
	[0197.195] CloseHandle (hObject=0x260) returned 1
	[0197.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll")) returned 0x2020
	[0197.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll")) returned 0x2020
	[0197.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.195] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.195] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.197] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=152416) returned 1
	[0197.197] CloseHandle (hObject=0x260) returned 1
	[0197.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll")) returned 0x2020
	[0197.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll")) returned 0x2020
	[0197.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.197] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.197] SetEvent (hEvent=0xfc) returned 1
	[0197.198] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.198] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1276256) returned 1
	[0197.198] CloseHandle (hObject=0x260) returned 1
	[0197.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll")) returned 0x2020
	[0197.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll")) returned 0x2020
	[0197.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.198] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.199] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.200] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15712) returned 1
	[0197.200] CloseHandle (hObject=0x260) returned 1
	[0197.200] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll")) returned 0x2020
	[0197.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll")) returned 0x2020
	[0197.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.201] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.201] SetEvent (hEvent=0xfc) returned 1
	[0197.201] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.202] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14176) returned 1
	[0197.202] CloseHandle (hObject=0x260) returned 1
	[0197.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll")) returned 0x2020
	[0197.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll")) returned 0x2020
	[0197.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.202] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.203] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.203] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=47456) returned 1
	[0197.203] CloseHandle (hObject=0x260) returned 1
	[0197.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll")) returned 0x2020
	[0197.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll")) returned 0x2020
	[0197.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.203] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.204] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.204] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=235872) returned 1
	[0197.204] CloseHandle (hObject=0x260) returned 1
	[0197.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll")) returned 0x2020
	[0197.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll")) returned 0x2020
	[0197.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.204] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.205] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.205] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=294240) returned 1
	[0197.205] CloseHandle (hObject=0x260) returned 1
	[0197.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll")) returned 0x2020
	[0197.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll")) returned 0x2020
	[0197.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.205] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.206] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.206] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49504) returned 1
	[0197.394] CloseHandle (hObject=0x260) returned 1
	[0197.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll")) returned 0x2020
	[0197.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll")) returned 0x2020
	[0197.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.396] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.396] SetEvent (hEvent=0xfc) returned 1
	[0197.396] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.537] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4627413) returned 1
	[0197.537] CloseHandle (hObject=0x260) returned 1
	[0197.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat")) returned 0x2020
	[0197.537] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), lpNewFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0197.537] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat")) returned 0
	[0197.537] SetEvent (hEvent=0xfc) returned 1
	[0197.537] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.538] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=151552) returned 1
	[0197.538] CloseHandle (hObject=0x260) returned 1
	[0197.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020
	[0197.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 0x2020
	[0197.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.538] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.538] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0197.538] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0197.539] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0197.541] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x25000, lpOverlapped=0x0) returned 1
	[0197.546] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x25010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x25010, lpOverlapped=0x0) returned 1
	[0197.549] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0197.549] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0197.549] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0197.549] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x25000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x25000, lpOverlapped=0x0) returned 1
	[0197.550] FlushFileBuffers (hFile=0x260) returned 1
	[0197.553] FlushFileBuffers (hFile=0x270) returned 1
	[0197.555] CloseHandle (hObject=0x260) returned 1
	[0197.555] CloseHandle (hObject=0x270) returned 1
	[0197.555] DeleteFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf")) returned 1
	[0197.558] SetEvent (hEvent=0xfc) returned 1
	[0197.558] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.559] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=544768) returned 1
	[0197.559] CloseHandle (hObject=0x270) returned 1
	[0197.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf")) returned 0x2020
	[0197.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf")) returned 0x2020
	[0197.560] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.560] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.560] SetEvent (hEvent=0xfc) returned 1
	[0197.560] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.561] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8) returned 1
	[0197.561] CloseHandle (hObject=0x270) returned 1
	[0197.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat")) returned 0x2020
	[0197.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat")) returned 0x2020
	[0197.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.561] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.561] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0197.563] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16412) returned 1
	[0197.563] CloseHandle (hObject=0x230) returned 1
	[0197.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat")) returned 0x2020
	[0197.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat")) returned 0x2020
	[0197.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.564] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.564] SetEvent (hEvent=0xfc) returned 1
	[0197.564] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmieventdata.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0197.567] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16412) returned 1
	[0197.567] CloseHandle (hObject=0x230) returned 1
	[0197.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmieventdata.dat")) returned 0x2020
	[0197.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmieventdata.dat")) returned 0x2020
	[0197.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmieventdata.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.568] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racwmieventdata.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.568] SetEvent (hEvent=0xfc) returned 1
	[0197.568] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0197.568] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0197.568] CloseHandle (hObject=0x230) returned 1
	[0197.569] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0197.570] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.570] CloseHandle (hObject=0x230) returned 1
	[0197.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp")) returned 0x20
	[0197.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp")) returned 0x20
	[0197.571] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.571] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.571] SetEvent (hEvent=0xfc) returned 1
	[0197.571] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0197.571] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.571] CloseHandle (hObject=0x230) returned 1
	[0197.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp")) returned 0x20
	[0197.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp")) returned 0x20
	[0197.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.572] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.572] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0197.572] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.573] CloseHandle (hObject=0x230) returned 1
	[0197.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp")) returned 0x20
	[0197.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp")) returned 0x20
	[0197.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.573] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.573] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0197.574] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=48824) returned 1
	[0197.574] CloseHandle (hObject=0x230) returned 1
	[0197.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp")) returned 0x20
	[0197.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp")) returned 0x20
	[0197.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.574] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.574] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.577] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.577] CloseHandle (hObject=0x22c) returned 1
	[0197.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp")) returned 0x20
	[0197.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp")) returned 0x20
	[0197.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.577] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.577] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.578] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.578] CloseHandle (hObject=0x22c) returned 1
	[0197.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp")) returned 0x20
	[0197.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp")) returned 0x20
	[0197.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.578] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.578] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.579] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.579] CloseHandle (hObject=0x22c) returned 1
	[0197.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp")) returned 0x20
	[0197.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp")) returned 0x20
	[0197.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.579] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.580] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.580] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.580] CloseHandle (hObject=0x22c) returned 1
	[0197.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp")) returned 0x20
	[0197.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp")) returned 0x20
	[0197.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.580] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.581] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.582] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.582] CloseHandle (hObject=0x22c) returned 1
	[0197.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp")) returned 0x20
	[0197.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp")) returned 0x20
	[0197.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.582] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.582] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.583] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.583] CloseHandle (hObject=0x22c) returned 1
	[0197.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp")) returned 0x20
	[0197.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp")) returned 0x20
	[0197.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.583] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.583] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.584] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.584] CloseHandle (hObject=0x22c) returned 1
	[0197.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp")) returned 0x20
	[0197.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp")) returned 0x20
	[0197.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.584] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.584] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.585] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.585] CloseHandle (hObject=0x22c) returned 1
	[0197.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp")) returned 0x20
	[0197.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp")) returned 0x20
	[0197.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.585] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.585] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.586] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.586] CloseHandle (hObject=0x22c) returned 1
	[0197.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp")) returned 0x20
	[0197.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp")) returned 0x20
	[0197.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.587] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.587] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.587] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.587] CloseHandle (hObject=0x22c) returned 1
	[0197.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp")) returned 0x20
	[0197.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp")) returned 0x20
	[0197.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.588] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.588] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.588] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.589] CloseHandle (hObject=0x22c) returned 1
	[0197.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp")) returned 0x20
	[0197.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp")) returned 0x20
	[0197.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.589] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.589] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.590] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.590] CloseHandle (hObject=0x22c) returned 1
	[0197.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp")) returned 0x20
	[0197.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp")) returned 0x20
	[0197.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.590] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.590] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.591] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.591] CloseHandle (hObject=0x22c) returned 1
	[0197.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp")) returned 0x20
	[0197.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp")) returned 0x20
	[0197.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.591] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.592] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.592] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.592] CloseHandle (hObject=0x22c) returned 1
	[0197.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp")) returned 0x20
	[0197.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp")) returned 0x20
	[0197.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.592] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.593] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.593] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.593] CloseHandle (hObject=0x22c) returned 1
	[0197.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp")) returned 0x20
	[0197.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp")) returned 0x20
	[0197.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.593] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.594] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0197.594] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.594] CloseHandle (hObject=0x22c) returned 1
	[0197.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp")) returned 0x20
	[0197.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp")) returned 0x20
	[0197.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.595] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.595] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.691] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.691] CloseHandle (hObject=0x260) returned 1
	[0197.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp")) returned 0x20
	[0197.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp")) returned 0x20
	[0197.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.691] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.692] SetEvent (hEvent=0xfc) returned 1
	[0197.692] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.692] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.692] CloseHandle (hObject=0x260) returned 1
	[0197.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp")) returned 0x20
	[0197.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp")) returned 0x20
	[0197.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.693] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.693] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.693] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.693] CloseHandle (hObject=0x260) returned 1
	[0197.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp")) returned 0x20
	[0197.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp")) returned 0x20
	[0197.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.694] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.694] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.703] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.703] CloseHandle (hObject=0x260) returned 1
	[0197.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp")) returned 0x20
	[0197.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp")) returned 0x20
	[0197.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.703] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.704] SetEvent (hEvent=0xfc) returned 1
	[0197.704] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.704] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.704] CloseHandle (hObject=0x260) returned 1
	[0197.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp")) returned 0x20
	[0197.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp")) returned 0x20
	[0197.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.705] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.705] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.705] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.705] CloseHandle (hObject=0x260) returned 1
	[0197.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp")) returned 0x20
	[0197.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp")) returned 0x20
	[0197.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.706] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.706] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.707] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.707] CloseHandle (hObject=0x260) returned 1
	[0197.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp")) returned 0x20
	[0197.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp")) returned 0x20
	[0197.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.707] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.707] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.709] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.709] CloseHandle (hObject=0x270) returned 1
	[0197.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp")) returned 0x20
	[0197.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp")) returned 0x20
	[0197.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.709] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.709] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.710] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.710] CloseHandle (hObject=0x270) returned 1
	[0197.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp")) returned 0x20
	[0197.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp")) returned 0x20
	[0197.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.710] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.710] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.711] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.711] CloseHandle (hObject=0x270) returned 1
	[0197.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp")) returned 0x20
	[0197.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp")) returned 0x20
	[0197.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.711] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.711] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.712] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.712] CloseHandle (hObject=0x270) returned 1
	[0197.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp")) returned 0x20
	[0197.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp")) returned 0x20
	[0197.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.712] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.712] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.713] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.713] CloseHandle (hObject=0x270) returned 1
	[0197.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp")) returned 0x20
	[0197.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp")) returned 0x20
	[0197.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.714] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.715] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.715] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.715] CloseHandle (hObject=0x270) returned 1
	[0197.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp")) returned 0x20
	[0197.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp")) returned 0x20
	[0197.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.715] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.716] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.716] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.716] CloseHandle (hObject=0x270) returned 1
	[0197.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp")) returned 0x20
	[0197.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp")) returned 0x20
	[0197.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.716] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.717] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.717] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.717] CloseHandle (hObject=0x270) returned 1
	[0197.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp")) returned 0x20
	[0197.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp")) returned 0x20
	[0197.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.717] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.718] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.718] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49208) returned 1
	[0197.718] CloseHandle (hObject=0x270) returned 1
	[0197.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp")) returned 0x20
	[0197.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp")) returned 0x20
	[0197.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.718] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.719] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.719] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14134) returned 1
	[0197.719] CloseHandle (hObject=0x270) returned 1
	[0197.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms")) returned 0x20
	[0197.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms")) returned 0x20
	[0197.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.720] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.720] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.720] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=110457) returned 1
	[0197.721] CloseHandle (hObject=0x270) returned 1
	[0197.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms")) returned 0x20
	[0197.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms")) returned 0x20
	[0197.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.721] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\programdata\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.721] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.723] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=612) returned 1
	[0197.723] CloseHandle (hObject=0x270) returned 1
	[0197.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\desktop.ini")) returned 0x26
	[0197.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\desktop.ini")) returned 0x26
	[0197.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.723] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.723] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.724] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=201833) returned 1
	[0197.724] CloseHandle (hObject=0x270) returned 1
	[0197.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma")) returned 0x20
	[0197.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma")) returned 0x20
	[0197.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.724] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.724] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.726] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=139199) returned 1
	[0197.726] CloseHandle (hObject=0x260) returned 1
	[0197.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma")) returned 0x20
	[0197.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma")) returned 0x20
	[0197.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.726] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.726] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.727] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94457) returned 1
	[0197.727] CloseHandle (hObject=0x260) returned 1
	[0197.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma")) returned 0x20
	[0197.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma")) returned 0x20
	[0197.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.727] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.727] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.956] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=237625) returned 1
	[0197.956] CloseHandle (hObject=0x270) returned 1
	[0197.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma")) returned 0x20
	[0197.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma")) returned 0x20
	[0197.956] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.956] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.956] SetEvent (hEvent=0xfc) returned 1
	[0197.956] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.959] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94457) returned 1
	[0197.959] CloseHandle (hObject=0x270) returned 1
	[0197.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma")) returned 0x20
	[0197.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma")) returned 0x20
	[0197.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.960] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.960] SetEvent (hEvent=0xfc) returned 1
	[0197.960] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.960] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94457) returned 1
	[0197.960] CloseHandle (hObject=0x270) returned 1
	[0197.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma")) returned 0x20
	[0197.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma")) returned 0x20
	[0197.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.961] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.961] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.963] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=139197) returned 1
	[0197.963] CloseHandle (hObject=0x270) returned 1
	[0197.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma")) returned 0x20
	[0197.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma")) returned 0x20
	[0197.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.963] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.963] SetEvent (hEvent=0xfc) returned 1
	[0197.963] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.964] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=112353) returned 1
	[0197.964] CloseHandle (hObject=0x270) returned 1
	[0197.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma")) returned 0x20
	[0197.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma")) returned 0x20
	[0197.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.964] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.964] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.965] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=94457) returned 1
	[0197.965] CloseHandle (hObject=0x270) returned 1
	[0197.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma")) returned 0x20
	[0197.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma")) returned 0x20
	[0197.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.965] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.965] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\default programs.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.966] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1282) returned 1
	[0197.966] CloseHandle (hObject=0x270) returned 1
	[0197.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\default programs.lnk")) returned 0x20
	[0197.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\default programs.lnk")) returned 0x20
	[0197.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\default programs.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.966] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\default programs.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.966] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.967] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=442) returned 1
	[0197.967] CloseHandle (hObject=0x270) returned 1
	[0197.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\desktop.ini")) returned 0x26
	[0197.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\desktop.ini")) returned 0x26
	[0197.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.967] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.967] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.968] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=370) returned 1
	[0197.968] CloseHandle (hObject=0x270) returned 1
	[0197.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\desktop.ini")) returned 0x26
	[0197.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\desktop.ini")) returned 0x26
	[0197.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.968] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.968] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.969] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1388) returned 1
	[0197.969] CloseHandle (hObject=0x270) returned 1
	[0197.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk")) returned 0x20
	[0197.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk")) returned 0x20
	[0197.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.969] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.969] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.971] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1230) returned 1
	[0197.971] CloseHandle (hObject=0x260) returned 1
	[0197.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk")) returned 0x20
	[0197.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk")) returned 0x20
	[0197.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.972] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.972] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.972] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1854) returned 1
	[0197.972] CloseHandle (hObject=0x260) returned 1
	[0197.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini")) returned 0x26
	[0197.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini")) returned 0x26
	[0197.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.973] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.973] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.973] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1266) returned 1
	[0197.973] CloseHandle (hObject=0x260) returned 1
	[0197.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk")) returned 0x20
	[0197.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk")) returned 0x20
	[0197.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.974] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.974] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.974] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1364) returned 1
	[0197.974] CloseHandle (hObject=0x260) returned 1
	[0197.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk")) returned 0x20
	[0197.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk")) returned 0x20
	[0197.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.975] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.975] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.976] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1238) returned 1
	[0197.976] CloseHandle (hObject=0x260) returned 1
	[0197.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk")) returned 0x20
	[0197.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk")) returned 0x20
	[0197.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.976] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.976] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.977] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1242) returned 1
	[0197.977] CloseHandle (hObject=0x260) returned 1
	[0197.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk")) returned 0x20
	[0197.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk")) returned 0x20
	[0197.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.977] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.977] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.978] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1242) returned 1
	[0197.978] CloseHandle (hObject=0x260) returned 1
	[0197.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk")) returned 0x20
	[0197.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk")) returned 0x20
	[0197.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.978] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.978] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.979] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1367) returned 1
	[0197.979] CloseHandle (hObject=0x260) returned 1
	[0197.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk")) returned 0x20
	[0197.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk")) returned 0x20
	[0197.979] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.979] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.979] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0197.981] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1272) returned 1
	[0197.981] CloseHandle (hObject=0x260) returned 1
	[0197.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk")) returned 0x20
	[0197.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk")) returned 0x20
	[0197.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.981] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.981] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.982] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1330) returned 1
	[0197.982] CloseHandle (hObject=0x270) returned 1
	[0197.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk")) returned 0x20
	[0197.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk")) returned 0x20
	[0197.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.983] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.983] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.983] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1351) returned 1
	[0197.983] CloseHandle (hObject=0x270) returned 1
	[0197.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk")) returned 0x20
	[0197.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk")) returned 0x20
	[0197.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.984] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.984] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.984] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1254) returned 1
	[0197.984] CloseHandle (hObject=0x270) returned 1
	[0197.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk")) returned 0x20
	[0197.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk")) returned 0x20
	[0197.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.985] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.985] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.985] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1248) returned 1
	[0197.985] CloseHandle (hObject=0x270) returned 1
	[0197.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk")) returned 0x20
	[0197.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk")) returned 0x20
	[0197.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.986] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.986] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.986] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1338) returned 1
	[0197.986] CloseHandle (hObject=0x270) returned 1
	[0197.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini")) returned 0x26
	[0197.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini")) returned 0x26
	[0197.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.987] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.987] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.988] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1290) returned 1
	[0197.988] CloseHandle (hObject=0x270) returned 1
	[0197.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk")) returned 0x20
	[0197.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk")) returned 0x20
	[0197.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.988] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.988] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.989] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1252) returned 1
	[0197.989] CloseHandle (hObject=0x270) returned 1
	[0197.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk")) returned 0x20
	[0197.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk")) returned 0x20
	[0197.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.989] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.989] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.990] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1242) returned 1
	[0197.990] CloseHandle (hObject=0x270) returned 1
	[0197.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk")) returned 0x20
	[0197.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk")) returned 0x20
	[0197.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.990] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.990] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.991] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1250) returned 1
	[0197.991] CloseHandle (hObject=0x270) returned 1
	[0197.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk")) returned 0x20
	[0197.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk")) returned 0x20
	[0197.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.995] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.995] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.996] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1246) returned 1
	[0197.996] CloseHandle (hObject=0x270) returned 1
	[0197.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk")) returned 0x20
	[0197.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk")) returned 0x20
	[0197.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.996] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.997] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.997] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1268) returned 1
	[0197.997] CloseHandle (hObject=0x270) returned 1
	[0197.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk")) returned 0x20
	[0197.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk")) returned 0x20
	[0197.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.997] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.998] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.998] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1320) returned 1
	[0197.998] CloseHandle (hObject=0x270) returned 1
	[0197.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk")) returned 0x20
	[0197.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk")) returned 0x20
	[0197.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0197.998] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0197.999] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0197.999] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1316) returned 1
	[0197.999] CloseHandle (hObject=0x270) returned 1
	[0197.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk")) returned 0x20
	[0197.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk")) returned 0x20
	[0197.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.000] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.000] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.000] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=343) returned 1
	[0198.000] CloseHandle (hObject=0x270) returned 1
	[0198.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini")) returned 0x26
	[0198.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini")) returned 0x26
	[0198.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.001] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.001] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.001] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1436) returned 1
	[0198.001] CloseHandle (hObject=0x270) returned 1
	[0198.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk")) returned 0x20
	[0198.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk")) returned 0x20
	[0198.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.002] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.002] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.003] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1386) returned 1
	[0198.003] CloseHandle (hObject=0x270) returned 1
	[0198.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk")) returned 0x20
	[0198.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk")) returned 0x20
	[0198.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.003] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.003] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.004] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1316) returned 1
	[0198.004] CloseHandle (hObject=0x270) returned 1
	[0198.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk")) returned 0x20
	[0198.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk")) returned 0x20
	[0198.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.004] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.004] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.005] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1579) returned 1
	[0198.005] CloseHandle (hObject=0x270) returned 1
	[0198.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk")) returned 0x20
	[0198.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk")) returned 0x20
	[0198.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.005] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.005] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.006] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=216) returned 1
	[0198.006] CloseHandle (hObject=0x270) returned 1
	[0198.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\desktop.ini")) returned 0x26
	[0198.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\desktop.ini")) returned 0x26
	[0198.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.006] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.006] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.007] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1989) returned 1
	[0198.007] CloseHandle (hObject=0x270) returned 1
	[0198.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk")) returned 0x20
	[0198.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk")) returned 0x20
	[0198.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.007] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.007] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.008] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1468) returned 1
	[0198.008] CloseHandle (hObject=0x270) returned 1
	[0198.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk")) returned 0x20
	[0198.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk")) returned 0x20
	[0198.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.008] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.008] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.009] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1468) returned 1
	[0198.009] CloseHandle (hObject=0x270) returned 1
	[0198.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk")) returned 0x20
	[0198.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk")) returned 0x20
	[0198.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.009] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.010] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.010] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1899) returned 1
	[0198.010] CloseHandle (hObject=0x270) returned 1
	[0198.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk")) returned 0x20
	[0198.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk")) returned 0x20
	[0198.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.010] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.011] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.011] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1322) returned 1
	[0198.011] CloseHandle (hObject=0x270) returned 1
	[0198.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk")) returned 0x20
	[0198.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk")) returned 0x20
	[0198.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.011] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.012] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.012] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1242) returned 1
	[0198.012] CloseHandle (hObject=0x270) returned 1
	[0198.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk")) returned 0x20
	[0198.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk")) returned 0x20
	[0198.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.013] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.013] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.013] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1294) returned 1
	[0198.013] CloseHandle (hObject=0x270) returned 1
	[0198.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk")) returned 0x20
	[0198.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk")) returned 0x20
	[0198.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.014] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.014] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.014] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1270) returned 1
	[0198.014] CloseHandle (hObject=0x270) returned 1
	[0198.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk")) returned 0x20
	[0198.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk")) returned 0x20
	[0198.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.015] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.015] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.015] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1958) returned 1
	[0198.015] CloseHandle (hObject=0x270) returned 1
	[0198.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini")) returned 0x26
	[0198.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini")) returned 0x26
	[0198.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.015] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.016] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.016] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1298) returned 1
	[0198.016] CloseHandle (hObject=0x270) returned 1
	[0198.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk")) returned 0x20
	[0198.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk")) returned 0x20
	[0198.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.016] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.017] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.018] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1274) returned 1
	[0198.018] CloseHandle (hObject=0x270) returned 1
	[0198.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk")) returned 0x20
	[0198.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk")) returned 0x20
	[0198.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.018] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.018] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.019] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1268) returned 1
	[0198.019] CloseHandle (hObject=0x270) returned 1
	[0198.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk")) returned 0x20
	[0198.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk")) returned 0x20
	[0198.019] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.019] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.019] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.020] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1232) returned 1
	[0198.020] CloseHandle (hObject=0x270) returned 1
	[0198.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk")) returned 0x20
	[0198.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk")) returned 0x20
	[0198.020] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.020] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.020] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.021] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1262) returned 1
	[0198.021] CloseHandle (hObject=0x270) returned 1
	[0198.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk")) returned 0x20
	[0198.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk")) returned 0x20
	[0198.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.021] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.021] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.022] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1248) returned 1
	[0198.022] CloseHandle (hObject=0x270) returned 1
	[0198.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk")) returned 0x20
	[0198.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk")) returned 0x20
	[0198.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.022] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.022] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.023] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1288) returned 1
	[0198.023] CloseHandle (hObject=0x270) returned 1
	[0198.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk")) returned 0x20
	[0198.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk")) returned 0x20
	[0198.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.023] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.023] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0198.024] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1246) returned 1
	[0198.024] CloseHandle (hObject=0x260) returned 1
	[0198.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk")) returned 0x20
	[0198.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk")) returned 0x20
	[0198.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.025] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.025] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0198.025] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1262) returned 1
	[0198.025] CloseHandle (hObject=0x260) returned 1
	[0198.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk")) returned 0x20
	[0198.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk")) returned 0x20
	[0198.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.026] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.026] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0198.026] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1274) returned 1
	[0198.026] CloseHandle (hObject=0x260) returned 1
	[0198.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk")) returned 0x20
	[0198.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk")) returned 0x20
	[0198.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.027] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.027] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0198.028] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2741) returned 1
	[0198.028] CloseHandle (hObject=0x260) returned 1
	[0198.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk")) returned 0x20
	[0198.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk")) returned 0x20
	[0198.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.028] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.028] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0198.228] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2441) returned 1
	[0198.228] CloseHandle (hObject=0x25c) returned 1
	[0198.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk")) returned 0x20
	[0198.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk")) returned 0x20
	[0198.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.252] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.252] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.253] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1246) returned 1
	[0198.253] CloseHandle (hObject=0x274) returned 1
	[0198.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk")) returned 0x20
	[0198.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk")) returned 0x20
	[0198.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.253] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.253] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\windows update.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.254] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1266) returned 1
	[0198.254] CloseHandle (hObject=0x274) returned 1
	[0198.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\windows update.lnk")) returned 0x20
	[0198.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\windows update.lnk")) returned 0x20
	[0198.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\windows update.lnk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.254] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\windows update.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.254] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.255] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=516424) returned 1
	[0198.255] CloseHandle (hObject=0x274) returned 1
	[0198.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg")) returned 0x20
	[0198.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg")) returned 0x20
	[0198.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.255] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.255] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.256] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=390) returned 1
	[0198.256] CloseHandle (hObject=0x274) returned 1
	[0198.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn")) returned 0x2022
	[0198.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn")) returned 0x2022
	[0198.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\Hx.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\hx.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.257] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.257] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.257] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=326) returned 1
	[0198.257] CloseHandle (hObject=0x274) returned 1
	[0198.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn")) returned 0x2022
	[0198.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn")) returned 0x2022
	[0198.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.258] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.258] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.258] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=350) returned 1
	[0198.258] CloseHandle (hObject=0x274) returned 1
	[0198.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn")) returned 0x2022
	[0198.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn")) returned 0x2022
	[0198.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.261] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.261] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x22c
	[0198.455] GetFileSizeEx (in: hFile=0x22c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=326) returned 1
	[0198.455] CloseHandle (hObject=0x22c) returned 1
	[0198.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn")) returned 0x2022
	[0198.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn")) returned 0x2022
	[0198.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.561] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.562] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0198.562] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=997054) returned 1
	[0198.562] CloseHandle (hObject=0x260) returned 1
	[0198.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 0x20
	[0198.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 0x20
	[0198.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.563] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.563] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0198.564] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=143360) returned 1
	[0198.564] CloseHandle (hObject=0x260) returned 1
	[0198.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 0x20
	[0198.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 0x20
	[0198.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.564] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.564] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0198.565] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=654) returned 1
	[0198.565] CloseHandle (hObject=0x260) returned 1
	[0198.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm")) returned 0x20
	[0198.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm")) returned 0x20
	[0198.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.565] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.565] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0198.566] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=455720) returned 1
	[0198.566] CloseHandle (hObject=0x260) returned 1
	[0198.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe")) returned 0x20
	[0198.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe")) returned 0x20
	[0198.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.566] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.566] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.593] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5800228) returned 1
	[0198.593] CloseHandle (hObject=0x230) returned 1
	[0198.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 0x20
	[0198.593] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0198.593] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 0
	[0198.594] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.598] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=151552) returned 1
	[0198.598] CloseHandle (hObject=0x230) returned 1
	[0198.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 0x20
	[0198.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 0x20
	[0198.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.598] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.598] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.599] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=666) returned 1
	[0198.599] CloseHandle (hObject=0x230) returned 1
	[0198.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm")) returned 0x20
	[0198.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm")) returned 0x20
	[0198.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.599] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.599] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.600] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=463016) returned 1
	[0198.600] CloseHandle (hObject=0x230) returned 1
	[0198.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe")) returned 0x20
	[0198.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe")) returned 0x20
	[0198.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.600] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.601] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.605] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1292987) returned 1
	[0198.605] CloseHandle (hObject=0x230) returned 1
	[0198.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 0x20
	[0198.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 0x20
	[0198.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.605] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.605] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.610] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=147456) returned 1
	[0198.610] CloseHandle (hObject=0x230) returned 1
	[0198.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 0x20
	[0198.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 0x20
	[0198.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.610] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.611] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.611] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5204382) returned 1
	[0198.611] CloseHandle (hObject=0x230) returned 1
	[0198.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 0x20
	[0198.611] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0198.612] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 0
	[0198.612] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.612] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=143360) returned 1
	[0198.612] CloseHandle (hObject=0x230) returned 1
	[0198.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 0x20
	[0198.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 0x20
	[0198.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.613] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.613] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.614] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1462871) returned 1
	[0198.614] CloseHandle (hObject=0x230) returned 1
	[0198.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 0x20
	[0198.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 0x20
	[0198.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.614] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.614] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.615] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=147456) returned 1
	[0198.615] CloseHandle (hObject=0x230) returned 1
	[0198.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 0x20
	[0198.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 0x20
	[0198.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.615] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.615] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.618] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5588256) returned 1
	[0198.619] CloseHandle (hObject=0x230) returned 1
	[0198.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 0x20
	[0198.619] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0198.619] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 0
	[0198.619] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.620] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=143360) returned 1
	[0198.620] CloseHandle (hObject=0x230) returned 1
	[0198.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 0x20
	[0198.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 0x20
	[0198.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.620] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.620] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.621] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1034506) returned 1
	[0198.621] CloseHandle (hObject=0x230) returned 1
	[0198.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 0x20
	[0198.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 0x20
	[0198.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.621] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.621] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.622] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=143360) returned 1
	[0198.622] CloseHandle (hObject=0x230) returned 1
	[0198.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 0x20
	[0198.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 0x20
	[0198.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.622] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.623] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.623] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5153816) returned 1
	[0198.623] CloseHandle (hObject=0x230) returned 1
	[0198.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 0x20
	[0198.624] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0198.624] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 0
	[0198.624] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.627] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=151552) returned 1
	[0198.627] CloseHandle (hObject=0x230) returned 1
	[0198.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 0x20
	[0198.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 0x20
	[0198.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.627] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.628] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.628] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=821681) returned 1
	[0198.628] CloseHandle (hObject=0x230) returned 1
	[0198.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 0x20
	[0198.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 0x20
	[0198.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.629] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.629] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0198.629] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=151552) returned 1
	[0198.629] CloseHandle (hObject=0x230) returned 1
	[0198.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 0x20
	[0198.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 0x20
	[0198.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.630] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.630] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.830] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=654) returned 1
	[0198.830] CloseHandle (hObject=0x270) returned 1
	[0198.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm")) returned 0x20
	[0198.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm")) returned 0x20
	[0198.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.831] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.831] SetEvent (hEvent=0xfc) returned 1
	[0198.831] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.833] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=809765) returned 1
	[0198.833] CloseHandle (hObject=0x270) returned 1
	[0198.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 0x20
	[0198.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 0x20
	[0198.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.833] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.833] SetEvent (hEvent=0xfc) returned 1
	[0198.833] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.835] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=151552) returned 1
	[0198.836] CloseHandle (hObject=0x270) returned 1
	[0198.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 0x20
	[0198.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 0x20
	[0198.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.836] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.836] SetEvent (hEvent=0xfc) returned 1
	[0198.836] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.839] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5881317) returned 1
	[0198.839] CloseHandle (hObject=0x270) returned 1
	[0198.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 0x20
	[0198.839] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0198.839] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 0
	[0198.839] SetEvent (hEvent=0xfc) returned 1
	[0198.839] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.842] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=143360) returned 1
	[0198.842] CloseHandle (hObject=0x270) returned 1
	[0198.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 0x20
	[0198.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 0x20
	[0198.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.842] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.842] SetEvent (hEvent=0xfc) returned 1
	[0198.843] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.843] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=766) returned 1
	[0198.843] CloseHandle (hObject=0x270) returned 1
	[0198.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm")) returned 0x20
	[0198.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm")) returned 0x20
	[0198.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.843] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.844] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.844] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=781880) returned 1
	[0198.844] CloseHandle (hObject=0x270) returned 1
	[0198.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe")) returned 0x20
	[0198.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe")) returned 0x20
	[0198.845] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.845] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.845] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.846] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=666) returned 1
	[0198.846] CloseHandle (hObject=0x270) returned 1
	[0198.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm")) returned 0x20
	[0198.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm")) returned 0x20
	[0198.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.846] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.846] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.849] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=462976) returned 1
	[0198.849] CloseHandle (hObject=0x270) returned 1
	[0198.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe")) returned 0x20
	[0198.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe")) returned 0x20
	[0198.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.849] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.849] SetEvent (hEvent=0xfc) returned 1
	[0198.849] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.850] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=766) returned 1
	[0198.850] CloseHandle (hObject=0x270) returned 1
	[0198.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm")) returned 0x20
	[0198.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm")) returned 0x20
	[0198.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.850] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.851] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.851] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=781872) returned 1
	[0198.851] CloseHandle (hObject=0x270) returned 1
	[0198.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe")) returned 0x80
	[0198.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe")) returned 0x80
	[0198.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.851] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.852] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.852] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4932896) returned 1
	[0198.852] CloseHandle (hObject=0x270) returned 1
	[0198.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 0x20
	[0198.852] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0
	[0198.853] MoveFileW (lpExistingFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), lpNewFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 0
	[0198.853] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.853] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=143360) returned 1
	[0198.853] CloseHandle (hObject=0x270) returned 1
	[0198.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 0x20
	[0198.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 0x20
	[0198.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.854] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.854] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.855] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=119) returned 1
	[0198.855] CloseHandle (hObject=0x270) returned 1
	[0198.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml")) returned 0x2020
	[0198.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml")) returned 0x2020
	[0198.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.855] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0198.855] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.856] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35116) returned 1
	[0198.856] CloseHandle (hObject=0x270) returned 1
	[0198.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst")) returned 0x2020
	[0198.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst")) returned 0x2020
	[0198.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.857] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.857] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0198.857] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0198.857] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0198.857] ReadFile (in: hFile=0x270, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x892c, lpOverlapped=0x0) returned 1
	[0198.863] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8930, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x8930, lpOverlapped=0x0) returned 1
	[0198.864] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0198.864] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0198.864] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0198.864] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x892c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x892c, lpOverlapped=0x0) returned 1
	[0198.864] FlushFileBuffers (hFile=0x270) returned 1
	[0198.870] FlushFileBuffers (hFile=0x274) returned 1
	[0198.872] CloseHandle (hObject=0x270) returned 1
	[0198.872] CloseHandle (hObject=0x274) returned 1
	[0198.872] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst")) returned 1
	[0198.873] SetEvent (hEvent=0xfc) returned 1
	[0198.873] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.874] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=53188) returned 1
	[0198.874] CloseHandle (hObject=0x274) returned 1
	[0198.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst")) returned 0x2020
	[0198.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst")) returned 0x2020
	[0198.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.874] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.874] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0198.874] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0198.874] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0198.877] ReadFile (in: hFile=0x274, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xcfc4, lpOverlapped=0x0) returned 1
	[0198.879] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xcfd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xcfd0, lpOverlapped=0x0) returned 1
	[0198.880] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0198.880] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0198.881] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0198.881] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xcfc4, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xcfc4, lpOverlapped=0x0) returned 1
	[0198.881] FlushFileBuffers (hFile=0x274) returned 1
	[0198.883] FlushFileBuffers (hFile=0x270) returned 1
	[0198.885] CloseHandle (hObject=0x274) returned 1
	[0198.885] CloseHandle (hObject=0x270) returned 1
	[0198.886] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst")) returned 1
	[0198.887] SetEvent (hEvent=0xfc) returned 1
	[0198.887] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.889] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5120) returned 1
	[0198.889] CloseHandle (hObject=0x270) returned 1
	[0198.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents")) returned 0x2020
	[0198.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents")) returned 0x2020
	[0198.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.889] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.889] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0198.889] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0198.889] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0198.890] ReadFile (in: hFile=0x270, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1400, lpOverlapped=0x0) returned 1
	[0198.891] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1410, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1410, lpOverlapped=0x0) returned 1
	[0198.892] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0198.893] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0198.893] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0198.893] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1400, lpOverlapped=0x0) returned 1
	[0198.893] FlushFileBuffers (hFile=0x270) returned 1
	[0198.906] FlushFileBuffers (hFile=0x274) returned 1
	[0198.907] CloseHandle (hObject=0x270) returned 1
	[0198.907] CloseHandle (hObject=0x274) returned 1
	[0198.907] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents")) returned 1
	[0198.908] SetEvent (hEvent=0xfc) returned 1
	[0198.908] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.909] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=77477) returned 1
	[0198.909] CloseHandle (hObject=0x274) returned 1
	[0198.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin")) returned 0x2020
	[0198.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin")) returned 0x2020
	[0198.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.909] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.909] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0198.909] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0198.910] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0198.910] ReadFile (in: hFile=0x274, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x12ea5, lpOverlapped=0x0) returned 1
	[0198.912] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x12eb0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x12eb0, lpOverlapped=0x0) returned 1
	[0198.914] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0198.914] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0198.914] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0198.915] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x12ea5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x12ea5, lpOverlapped=0x0) returned 1
	[0198.915] FlushFileBuffers (hFile=0x274) returned 1
	[0198.917] FlushFileBuffers (hFile=0x270) returned 1
	[0198.918] CloseHandle (hObject=0x274) returned 1
	[0198.918] CloseHandle (hObject=0x270) returned 1
	[0198.919] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin")) returned 1
	[0198.920] SetEvent (hEvent=0xfc) returned 1
	[0198.920] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.920] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1180) returned 1
	[0198.921] CloseHandle (hObject=0x270) returned 1
	[0198.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst")) returned 0x2020
	[0198.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst")) returned 0x2020
	[0198.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.921] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0198.921] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0198.921] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0198.921] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0198.921] ReadFile (in: hFile=0x270, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x49c, lpOverlapped=0x0) returned 1
	[0198.924] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4a0, lpOverlapped=0x0) returned 1
	[0198.925] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0198.925] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0198.925] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0198.925] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x49c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x49c, lpOverlapped=0x0) returned 1
	[0198.925] FlushFileBuffers (hFile=0x270) returned 1
	[0198.928] FlushFileBuffers (hFile=0x274) returned 1
	[0198.929] CloseHandle (hObject=0x270) returned 1
	[0198.929] CloseHandle (hObject=0x274) returned 1
	[0198.931] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst")) returned 1
	[0198.932] SetEvent (hEvent=0xfc) returned 1
	[0198.932] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.933] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=66208) returned 1
	[0198.933] CloseHandle (hObject=0x274) returned 1
	[0198.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc")) returned 0x2020
	[0198.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc")) returned 0x2020
	[0198.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0198.933] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0198.933] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0198.933] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0198.933] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0198.934] ReadFile (in: hFile=0x274, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x102a0, lpOverlapped=0x0) returned 1
	[0198.937] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102b0, lpOverlapped=0x0) returned 1
	[0198.938] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0198.939] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0198.939] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0198.939] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102a0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x102a0, lpOverlapped=0x0) returned 1
	[0198.939] FlushFileBuffers (hFile=0x274) returned 1
	[0199.422] FlushFileBuffers (hFile=0x270) returned 1
	[0199.515] CloseHandle (hObject=0x274) returned 1
	[0199.516] CloseHandle (hObject=0x270) returned 1
	[0199.516] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc")) returned 1
	[0199.517] SetEvent (hEvent=0xfc) returned 1
	[0199.519] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0199.520] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15440) returned 1
	[0199.520] CloseHandle (hObject=0x270) returned 1
	[0199.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe")) returned 0x80
	[0199.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe")) returned 0x80
	[0199.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0199.521] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0199.521] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0199.521] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0199.521] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x274
	[0199.521] ReadFile (in: hFile=0x270, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3c50, lpOverlapped=0x0) returned 1
	[0199.523] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3c60, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3c60, lpOverlapped=0x0) returned 1
	[0199.524] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0199.524] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0199.524] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0199.524] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3c50, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3c50, lpOverlapped=0x0) returned 1
	[0199.525] FlushFileBuffers (hFile=0x270) returned 1
	[0199.528] FlushFileBuffers (hFile=0x274) returned 1
	[0199.530] CloseHandle (hObject=0x270) returned 1
	[0199.530] CloseHandle (hObject=0x274) returned 1
	[0199.530] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe")) returned 1
	[0199.531] SetEvent (hEvent=0xfc) returned 1
	[0199.531] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0199.532] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=17104) returned 1
	[0199.532] CloseHandle (hObject=0x274) returned 1
	[0199.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms")) returned 0x2020
	[0199.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms")) returned 0x2020
	[0199.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0199.532] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0199.532] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0199.532] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0199.532] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0199.533] ReadFile (in: hFile=0x274, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x42d0, lpOverlapped=0x0) returned 1
	[0199.535] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x42e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x42e0, lpOverlapped=0x0) returned 1
	[0199.536] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0199.537] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0199.537] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0199.537] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x42d0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x42d0, lpOverlapped=0x0) returned 1
	[0199.537] FlushFileBuffers (hFile=0x274) returned 1
	[0199.906] FlushFileBuffers (hFile=0x270) returned 1
	[0200.095] CloseHandle (hObject=0x274) returned 1
	[0200.096] CloseHandle (hObject=0x270) returned 1
	[0200.096] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms")) returned 1
	[0200.096] SetEvent (hEvent=0xfc) returned 1
	[0200.098] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0200.098] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3808) returned 1
	[0200.098] CloseHandle (hObject=0x270) returned 1
	[0200.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms")) returned 0x2020
	[0200.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms")) returned 0x2020
	[0200.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0200.098] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0200.098] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0200.099] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0200.099] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0200.099] ReadFile (in: hFile=0x270, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xee0, lpOverlapped=0x0) returned 1
	[0200.100] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xef0, lpOverlapped=0x0) returned 1
	[0200.101] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x122, lpOverlapped=0x0) returned 1
	[0200.102] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0200.102] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0200.102] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xee0, lpOverlapped=0x0) returned 1
	[0200.102] FlushFileBuffers (hFile=0x270) returned 1
	[0200.107] FlushFileBuffers (hFile=0x274) returned 1
	[0200.109] CloseHandle (hObject=0x270) returned 1
	[0200.109] CloseHandle (hObject=0x274) returned 1
	[0200.109] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms")) returned 1
	[0200.110] SetEvent (hEvent=0xfc) returned 1
	[0200.110] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0200.111] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1376) returned 1
	[0200.111] CloseHandle (hObject=0x274) returned 1
	[0200.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest")) returned 0x2020
	[0200.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest")) returned 0x2020
	[0200.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0200.111] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0200.111] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0200.111] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0200.111] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0200.112] ReadFile (in: hFile=0x274, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x560, lpOverlapped=0x0) returned 1
	[0200.114] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x570, lpOverlapped=0x0) returned 1
	[0200.115] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x122, lpOverlapped=0x0) returned 1
	[0200.115] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0200.115] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0200.115] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x560, lpOverlapped=0x0) returned 1
	[0200.115] FlushFileBuffers (hFile=0x274) returned 1
	[0200.118] FlushFileBuffers (hFile=0x270) returned 1
	[0200.119] CloseHandle (hObject=0x274) returned 1
	[0200.120] CloseHandle (hObject=0x270) returned 1
	[0200.120] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest")) returned 1
	[0200.121] SetEvent (hEvent=0xfc) returned 1
	[0200.121] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0200.121] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1130328) returned 1
	[0200.121] CloseHandle (hObject=0x270) returned 1
	[0200.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe")) returned 0x20
	[0200.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe")) returned 0x20
	[0200.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0200.122] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0200.122] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0200.122] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0200.122] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x274
	[0200.122] ReadFile (in: hFile=0x270, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x110100, lpOverlapped=0x0) returned 1
	[0200.133] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110100, lpOverlapped=0x0) returned 1
	[0200.153] ReadFile (in: hFile=0x270, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3e58, lpOverlapped=0x0) returned 1
	[0200.153] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3e60, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3e60, lpOverlapped=0x0) returned 1
	[0200.154] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0200.154] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0200.154] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0200.154] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x110102, lpOverlapped=0x0) returned 1
	[0200.288] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3e56, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3e56, lpOverlapped=0x0) returned 1
	[0200.288] FlushFileBuffers (hFile=0x270) returned 1
	[0200.935] FlushFileBuffers (hFile=0x274) returned 1
	[0201.621] CloseHandle (hObject=0x270) returned 1
	[0201.622] CloseHandle (hObject=0x274) returned 1
	[0201.622] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe")) returned 1
	[0201.631] SetEvent (hEvent=0xfc) returned 1
	[0201.634] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0201.634] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13643) returned 1
	[0201.634] CloseHandle (hObject=0x230) returned 1
	[0201.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest")) returned 0x2020
	[0201.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest")) returned 0x2020
	[0201.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0201.634] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0201.635] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0201.635] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0201.635] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0201.635] ReadFile (in: hFile=0x230, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x354b, lpOverlapped=0x0) returned 1
	[0201.636] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3550, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3550, lpOverlapped=0x0) returned 1
	[0201.637] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x162, lpOverlapped=0x0) returned 1
	[0201.638] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0201.638] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0201.638] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x354b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x354b, lpOverlapped=0x0) returned 1
	[0201.638] FlushFileBuffers (hFile=0x230) returned 1
	[0202.048] FlushFileBuffers (hFile=0x274) returned 1
	[0202.246] CloseHandle (hObject=0x230) returned 1
	[0202.246] CloseHandle (hObject=0x274) returned 1
	[0202.246] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest")) returned 1
	[0202.247] SetEvent (hEvent=0xfc) returned 1
	[0202.248] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0202.248] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11824) returned 1
	[0202.248] CloseHandle (hObject=0x274) returned 1
	[0202.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest")) returned 0x2020
	[0202.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest")) returned 0x2020
	[0202.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0202.249] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0202.249] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0202.249] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0202.249] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0202.249] ReadFile (in: hFile=0x274, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2e30, lpOverlapped=0x0) returned 1
	[0202.251] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2e40, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2e40, lpOverlapped=0x0) returned 1
	[0202.252] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x162, lpOverlapped=0x0) returned 1
	[0202.252] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0202.252] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0202.252] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2e30, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2e30, lpOverlapped=0x0) returned 1
	[0202.252] FlushFileBuffers (hFile=0x274) returned 1
	[0202.932] FlushFileBuffers (hFile=0x230) returned 1
	[0203.415] CloseHandle (hObject=0x274) returned 1
	[0203.416] CloseHandle (hObject=0x230) returned 1
	[0203.416] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest")) returned 1
	[0203.418] SetEvent (hEvent=0xfc) returned 1
	[0203.418] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0203.420] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0203.420] CloseHandle (hObject=0x230) returned 1
	[0203.420] SetEvent (hEvent=0xfc) returned 1
	[0203.420] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0203.421] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40) returned 1
	[0203.421] CloseHandle (hObject=0x230) returned 1
	[0203.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat")) returned 0x2020
	[0203.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat")) returned 0x2020
	[0203.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0203.421] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0203.421] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0203.421] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0203.422] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0203.422] ReadFile (in: hFile=0x230, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x28, lpOverlapped=0x0) returned 1
	[0203.425] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x30, lpOverlapped=0x0) returned 1
	[0203.426] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0203.426] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0203.426] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0203.427] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x28, lpOverlapped=0x0) returned 1
	[0203.427] FlushFileBuffers (hFile=0x230) returned 1
	[0204.228] FlushFileBuffers (hFile=0x274) returned 1
	[0204.679] CloseHandle (hObject=0x230) returned 1
	[0204.679] CloseHandle (hObject=0x274) returned 1
	[0204.680] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat")) returned 1
	[0204.681] SetEvent (hEvent=0xfc) returned 1
	[0204.681] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0204.682] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=270336) returned 1
	[0204.682] CloseHandle (hObject=0x274) returned 1
	[0204.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1")) returned 0x2020
	[0204.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1")) returned 0x2020
	[0204.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0204.683] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0204.683] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0204.683] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0204.683] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0204.684] ReadFile (in: hFile=0x274, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x42000, lpOverlapped=0x0) returned 1
	[0204.888] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x42010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x42010, lpOverlapped=0x0) returned 1
	[0204.894] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0204.894] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0204.894] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0204.894] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x42000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x42000, lpOverlapped=0x0) returned 1
	[0204.895] FlushFileBuffers (hFile=0x274) returned 1
	[0205.553] FlushFileBuffers (hFile=0x230) returned 1
	[0205.647] CloseHandle (hObject=0x274) returned 1
	[0205.647] CloseHandle (hObject=0x230) returned 1
	[0205.647] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1")) returned 1
	[0205.650] SetEvent (hEvent=0xfc) returned 1
	[0205.652] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0205.756] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4202496) returned 1
	[0205.756] CloseHandle (hObject=0x230) returned 1
	[0205.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3")) returned 0x2020
	[0205.756] MoveFileW (lpExistingFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0205.757] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0205.758] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0205.758] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0205.758] ReadFile (in: hFile=0x230, lpBuffer=0x3900058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3900058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0205.878] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x156000, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0205.878] ReadFile (in: hFile=0x230, lpBuffer=0x3940058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3940058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0205.882] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x3c2000, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0205.882] ReadFile (in: hFile=0x230, lpBuffer=0x3980058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3980058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0205.903] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa90 | out: lpNewFilePointer=0x0) returned 1
	[0205.903] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x34afa88, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa88*=0xc0102, lpOverlapped=0x0) returned 1
	[0207.177] SetEndOfFile (hFile=0x230) returned 1
	[0207.178] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x3c2000, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0207.178] WriteFile (in: hFile=0x230, lpBuffer=0x39c013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c013a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0207.179] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x156000, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0207.179] WriteFile (in: hFile=0x230, lpBuffer=0x39c013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c013a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0207.181] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0207.181] WriteFile (in: hFile=0x230, lpBuffer=0x39c013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c013a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0207.182] FlushFileBuffers (hFile=0x230) returned 1
	[0208.002] CloseHandle (hObject=0x230) returned 1
	[0208.003] SetEvent (hEvent=0xfc) returned 1
	[0208.004] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0208.005] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16) returned 1
	[0208.005] CloseHandle (hObject=0x230) returned 1
	[0208.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current")) returned 0x2020
	[0208.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current")) returned 0x2020
	[0208.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0208.005] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0208.005] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0208.005] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0208.005] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0208.006] ReadFile (in: hFile=0x230, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x10, lpOverlapped=0x0) returned 1
	[0208.007] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x20, lpOverlapped=0x0) returned 1
	[0208.007] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0208.008] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0208.008] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0208.008] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x10, lpOverlapped=0x0) returned 1
	[0208.008] FlushFileBuffers (hFile=0x230) returned 1
	[0208.206] FlushFileBuffers (hFile=0x274) returned 1
	[0208.502] CloseHandle (hObject=0x230) returned 1
	[0208.502] CloseHandle (hObject=0x274) returned 1
	[0208.502] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current")) returned 1
	[0208.503] SetEvent (hEvent=0xfc) returned 1
	[0208.505] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0208.505] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41) returned 1
	[0208.505] CloseHandle (hObject=0x274) returned 1
	[0208.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001")) returned 0x2020
	[0208.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001")) returned 0x2020
	[0208.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0208.506] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0208.506] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0208.506] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0208.506] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0208.506] ReadFile (in: hFile=0x274, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x29, lpOverlapped=0x0) returned 1
	[0208.507] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x30, lpOverlapped=0x0) returned 1
	[0208.508] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0208.508] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0208.508] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0208.508] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x29, lpOverlapped=0x0) returned 1
	[0208.509] FlushFileBuffers (hFile=0x274) returned 1
	[0208.914] FlushFileBuffers (hFile=0x230) returned 1
	[0209.624] CloseHandle (hObject=0x274) returned 1
	[0209.624] CloseHandle (hObject=0x230) returned 1
	[0209.625] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001")) returned 1
	[0209.626] SetEvent (hEvent=0xfc) returned 1
	[0209.627] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0209.628] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=160) returned 1
	[0209.628] CloseHandle (hObject=0x230) returned 1
	[0209.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png")) returned 0x2020
	[0209.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png")) returned 0x2020
	[0209.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0209.628] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0209.628] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0209.628] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0209.628] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0209.629] ReadFile (in: hFile=0x230, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xa0, lpOverlapped=0x0) returned 1
	[0209.629] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb0, lpOverlapped=0x0) returned 1
	[0209.630] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0209.631] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0209.631] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0209.631] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xa0, lpOverlapped=0x0) returned 1
	[0209.631] FlushFileBuffers (hFile=0x230) returned 1
	[0210.171] FlushFileBuffers (hFile=0x274) returned 1
	[0211.146] CloseHandle (hObject=0x230) returned 1
	[0211.156] CloseHandle (hObject=0x274) returned 1
	[0211.157] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png")) returned 1
	[0220.864] SetEvent (hEvent=0xfc) returned 1
	[0220.865] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0220.868] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=257) returned 1
	[0220.868] CloseHandle (hObject=0x274) returned 1
	[0220.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0220.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0220.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0220.869] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0220.869] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0220.869] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0220.869] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0220.870] ReadFile (in: hFile=0x274, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x101, lpOverlapped=0x0) returned 1
	[0220.874] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0220.874] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0220.875] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0220.875] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0220.875] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x101, lpOverlapped=0x0) returned 1
	[0220.875] FlushFileBuffers (hFile=0x274) returned 1
	[0221.548] FlushFileBuffers (hFile=0x230) returned 1
	[0221.889] CloseHandle (hObject=0x274) returned 1
	[0221.889] CloseHandle (hObject=0x230) returned 1
	[0221.889] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json")) returned 1
	[0221.891] SetEvent (hEvent=0xfc) returned 1
	[0221.892] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0221.893] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=224) returned 1
	[0221.893] CloseHandle (hObject=0x230) returned 1
	[0221.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0221.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0221.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0221.894] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0221.894] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0221.894] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0221.894] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0221.895] ReadFile (in: hFile=0x230, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe0, lpOverlapped=0x0) returned 1
	[0221.896] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0221.896] WriteFile (in: hFile=0x274, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0221.897] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0221.897] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0221.897] WriteFile (in: hFile=0x230, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe0, lpOverlapped=0x0) returned 1
	[0221.897] FlushFileBuffers (hFile=0x230) returned 1
	[0222.421] FlushFileBuffers (hFile=0x274) returned 1
	[0222.593] CloseHandle (hObject=0x230) returned 1
	[0222.593] CloseHandle (hObject=0x274) returned 1
	[0222.594] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json")) returned 1
	[0222.595] SetEvent (hEvent=0xfc) returned 1
	[0222.599] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0222.660] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=224) returned 1
	[0222.660] CloseHandle (hObject=0x27c) returned 1
	[0222.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json")) returned 0x2020
	[0222.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json")) returned 0x2020
	[0222.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0222.660] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0222.660] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0222.660] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0222.660] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x270
	[0222.661] ReadFile (in: hFile=0x27c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe0, lpOverlapped=0x0) returned 1
	[0222.662] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0222.663] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0222.663] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0222.663] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0222.663] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe0, lpOverlapped=0x0) returned 1
	[0222.663] FlushFileBuffers (hFile=0x27c) returned 1
	[0222.932] FlushFileBuffers (hFile=0x270) returned 1
	[0223.114] CloseHandle (hObject=0x27c) returned 1
	[0223.117] CloseHandle (hObject=0x270) returned 1
	[0223.117] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json")) returned 1
	[0223.118] SetEvent (hEvent=0xfc) returned 1
	[0223.120] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0223.120] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=274) returned 1
	[0223.120] CloseHandle (hObject=0x270) returned 1
	[0223.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json")) returned 0x2020
	[0223.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json")) returned 0x2020
	[0223.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.121] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0223.121] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0223.121] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0223.121] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0223.122] ReadFile (in: hFile=0x270, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x112, lpOverlapped=0x0) returned 1
	[0223.123] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0223.123] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0223.124] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0223.124] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0223.124] WriteFile (in: hFile=0x270, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x112, lpOverlapped=0x0) returned 1
	[0223.124] FlushFileBuffers (hFile=0x270) returned 1
	[0223.238] FlushFileBuffers (hFile=0x27c) returned 1
	[0223.292] CloseHandle (hObject=0x270) returned 1
	[0223.347] CloseHandle (hObject=0x27c) returned 1
	[0223.347] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json")) returned 1
	[0223.348] SetEvent (hEvent=0xfc) returned 1
	[0223.350] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0223.350] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0223.350] CloseHandle (hObject=0x27c) returned 1
	[0223.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0223.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0223.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.350] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0223.351] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0223.351] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0223.351] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x280
	[0223.508] ReadFile (in: hFile=0x27c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xde, lpOverlapped=0x0) returned 1
	[0223.509] WriteFile (in: hFile=0x280, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0223.510] WriteFile (in: hFile=0x280, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0223.510] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0223.510] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0223.510] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xde, lpOverlapped=0x0) returned 1
	[0223.510] FlushFileBuffers (hFile=0x27c) returned 1
	[0223.524] FlushFileBuffers (hFile=0x280) returned 1
	[0223.562] CloseHandle (hObject=0x27c) returned 1
	[0223.563] CloseHandle (hObject=0x280) returned 1
	[0223.563] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json")) returned 1
	[0223.564] SetEvent (hEvent=0xfc) returned 1
	[0223.566] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x280
	[0223.566] GetFileSizeEx (in: hFile=0x280, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=291) returned 1
	[0223.566] CloseHandle (hObject=0x280) returned 1
	[0223.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0223.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0223.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.567] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x280
	[0223.567] SetFilePointerEx (in: hFile=0x280, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0223.567] SetFilePointerEx (in: hFile=0x280, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0223.567] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0223.568] ReadFile (in: hFile=0x280, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x123, lpOverlapped=0x0) returned 1
	[0223.568] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x130, lpOverlapped=0x0) returned 1
	[0223.569] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0223.570] SetFilePointerEx (in: hFile=0x280, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0223.570] SetFilePointerEx (in: hFile=0x280, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0223.570] WriteFile (in: hFile=0x280, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x123, lpOverlapped=0x0) returned 1
	[0223.570] FlushFileBuffers (hFile=0x280) returned 1
	[0223.640] FlushFileBuffers (hFile=0x27c) returned 1
	[0223.642] CloseHandle (hObject=0x280) returned 1
	[0223.787] CloseHandle (hObject=0x27c) returned 1
	[0223.788] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json")) returned 1
	[0223.789] SetEvent (hEvent=0xfc) returned 1
	[0223.790] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0223.791] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=208) returned 1
	[0223.791] CloseHandle (hObject=0x27c) returned 1
	[0223.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json")) returned 0x2020
	[0223.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json")) returned 0x2020
	[0223.791] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.791] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0223.791] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0223.791] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0223.791] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x284
	[0223.814] ReadFile (in: hFile=0x27c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd0, lpOverlapped=0x0) returned 1
	[0223.815] WriteFile (in: hFile=0x284, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0223.815] WriteFile (in: hFile=0x284, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0223.816] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0223.816] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0223.816] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd0, lpOverlapped=0x0) returned 1
	[0223.816] FlushFileBuffers (hFile=0x27c) returned 1
	[0223.897] FlushFileBuffers (hFile=0x284) returned 1
	[0223.926] CloseHandle (hObject=0x27c) returned 1
	[0223.926] CloseHandle (hObject=0x284) returned 1
	[0223.927] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json")) returned 1
	[0223.927] SetEvent (hEvent=0xfc) returned 1
	[0223.929] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x284
	[0223.929] GetFileSizeEx (in: hFile=0x284, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=236) returned 1
	[0223.929] CloseHandle (hObject=0x284) returned 1
	[0223.929] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0223.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0223.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.930] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x284
	[0223.930] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0223.930] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0223.930] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0223.936] ReadFile (in: hFile=0x284, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xec, lpOverlapped=0x0) returned 1
	[0223.937] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0223.937] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0223.938] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0223.938] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0223.938] WriteFile (in: hFile=0x284, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xec, lpOverlapped=0x0) returned 1
	[0223.938] FlushFileBuffers (hFile=0x284) returned 1
	[0223.949] FlushFileBuffers (hFile=0x27c) returned 1
	[0223.976] CloseHandle (hObject=0x284) returned 1
	[0223.976] CloseHandle (hObject=0x27c) returned 1
	[0223.976] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json")) returned 1
	[0223.977] SetEvent (hEvent=0xfc) returned 1
	[0223.978] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0223.978] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=228) returned 1
	[0223.978] CloseHandle (hObject=0x27c) returned 1
	[0223.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0223.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0223.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.978] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0223.978] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0223.979] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0223.979] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0223.990] ReadFile (in: hFile=0x27c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe4, lpOverlapped=0x0) returned 1
	[0223.991] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0224.008] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.009] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.009] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.009] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe4, lpOverlapped=0x0) returned 1
	[0224.009] FlushFileBuffers (hFile=0x27c) returned 1
	[0224.025] FlushFileBuffers (hFile=0x260) returned 1
	[0224.040] CloseHandle (hObject=0x27c) returned 1
	[0224.040] CloseHandle (hObject=0x260) returned 1
	[0224.041] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json")) returned 1
	[0224.041] SetEvent (hEvent=0xfc) returned 1
	[0224.042] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.042] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=210) returned 1
	[0224.042] CloseHandle (hObject=0x260) returned 1
	[0224.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json")) returned 0x2020
	[0224.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json")) returned 0x2020
	[0224.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.042] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.043] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.043] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.043] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0224.051] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd2, lpOverlapped=0x0) returned 1
	[0224.052] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0224.053] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.053] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.053] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.053] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd2, lpOverlapped=0x0) returned 1
	[0224.054] FlushFileBuffers (hFile=0x260) returned 1
	[0224.056] FlushFileBuffers (hFile=0x27c) returned 1
	[0224.058] CloseHandle (hObject=0x260) returned 1
	[0224.059] CloseHandle (hObject=0x27c) returned 1
	[0224.059] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json")) returned 1
	[0224.060] SetEvent (hEvent=0xfc) returned 1
	[0224.060] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0224.060] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=221) returned 1
	[0224.060] CloseHandle (hObject=0x27c) returned 1
	[0224.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0224.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0224.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.061] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0224.061] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.061] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.061] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0224.062] ReadFile (in: hFile=0x27c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xdd, lpOverlapped=0x0) returned 1
	[0224.063] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0224.063] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.064] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.064] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.064] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xdd, lpOverlapped=0x0) returned 1
	[0224.064] FlushFileBuffers (hFile=0x27c) returned 1
	[0224.066] FlushFileBuffers (hFile=0x260) returned 1
	[0224.068] CloseHandle (hObject=0x27c) returned 1
	[0224.068] CloseHandle (hObject=0x260) returned 1
	[0224.068] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json")) returned 1
	[0224.069] SetEvent (hEvent=0xfc) returned 1
	[0224.070] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.070] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=203) returned 1
	[0224.070] CloseHandle (hObject=0x260) returned 1
	[0224.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json")) returned 0x2020
	[0224.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json")) returned 0x2020
	[0224.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.070] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.071] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.071] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.071] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0224.071] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xcb, lpOverlapped=0x0) returned 1
	[0224.072] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0224.073] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.073] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.073] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.073] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xcb, lpOverlapped=0x0) returned 1
	[0224.073] FlushFileBuffers (hFile=0x260) returned 1
	[0224.076] FlushFileBuffers (hFile=0x27c) returned 1
	[0224.078] CloseHandle (hObject=0x260) returned 1
	[0224.078] CloseHandle (hObject=0x27c) returned 1
	[0224.079] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json")) returned 1
	[0224.079] SetEvent (hEvent=0xfc) returned 1
	[0224.080] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0224.080] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=217) returned 1
	[0224.080] CloseHandle (hObject=0x27c) returned 1
	[0224.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0224.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0224.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.080] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0224.081] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.081] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.081] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0224.081] ReadFile (in: hFile=0x27c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd9, lpOverlapped=0x0) returned 1
	[0224.082] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0224.083] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.083] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.083] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.083] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd9, lpOverlapped=0x0) returned 1
	[0224.083] FlushFileBuffers (hFile=0x27c) returned 1
	[0224.088] FlushFileBuffers (hFile=0x260) returned 1
	[0224.092] CloseHandle (hObject=0x27c) returned 1
	[0224.092] CloseHandle (hObject=0x260) returned 1
	[0224.093] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json")) returned 1
	[0224.093] SetEvent (hEvent=0xfc) returned 1
	[0224.093] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.094] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0224.094] CloseHandle (hObject=0x260) returned 1
	[0224.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0224.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0224.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.095] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.095] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.095] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.095] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x27c
	[0224.095] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xde, lpOverlapped=0x0) returned 1
	[0224.096] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0224.097] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.097] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.097] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.097] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xde, lpOverlapped=0x0) returned 1
	[0224.097] FlushFileBuffers (hFile=0x260) returned 1
	[0224.100] FlushFileBuffers (hFile=0x27c) returned 1
	[0224.102] CloseHandle (hObject=0x260) returned 1
	[0224.102] CloseHandle (hObject=0x27c) returned 1
	[0224.102] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json")) returned 1
	[0224.103] SetEvent (hEvent=0xfc) returned 1
	[0224.103] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0224.104] GetFileSizeEx (in: hFile=0x27c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=224) returned 1
	[0224.104] CloseHandle (hObject=0x27c) returned 1
	[0224.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0224.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0224.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.104] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27c
	[0224.104] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.104] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.104] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0224.105] ReadFile (in: hFile=0x27c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe0, lpOverlapped=0x0) returned 1
	[0224.106] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0224.107] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.107] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.107] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.107] WriteFile (in: hFile=0x27c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe0, lpOverlapped=0x0) returned 1
	[0224.107] FlushFileBuffers (hFile=0x27c) returned 1
	[0224.119] FlushFileBuffers (hFile=0x260) returned 1
	[0224.121] CloseHandle (hObject=0x27c) returned 1
	[0224.121] CloseHandle (hObject=0x260) returned 1
	[0224.121] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json")) returned 1
	[0224.122] SetEvent (hEvent=0xfc) returned 1
	[0224.125] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.125] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0224.125] CloseHandle (hObject=0x26c) returned 1
	[0224.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0224.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0224.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.125] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.126] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.126] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.126] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0224.126] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xde, lpOverlapped=0x0) returned 1
	[0224.127] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0224.128] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.128] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.128] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.128] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xde, lpOverlapped=0x0) returned 1
	[0224.128] FlushFileBuffers (hFile=0x26c) returned 1
	[0224.131] FlushFileBuffers (hFile=0x260) returned 1
	[0224.134] CloseHandle (hObject=0x26c) returned 1
	[0224.134] CloseHandle (hObject=0x260) returned 1
	[0224.134] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json")) returned 1
	[0224.135] SetEvent (hEvent=0xfc) returned 1
	[0224.135] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.136] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=272) returned 1
	[0224.136] CloseHandle (hObject=0x260) returned 1
	[0224.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0224.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0224.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.136] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.136] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.136] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.136] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x26c
	[0224.137] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x110, lpOverlapped=0x0) returned 1
	[0224.138] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0224.139] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.139] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.139] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.139] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x110, lpOverlapped=0x0) returned 1
	[0224.139] FlushFileBuffers (hFile=0x260) returned 1
	[0224.143] FlushFileBuffers (hFile=0x26c) returned 1
	[0224.144] CloseHandle (hObject=0x260) returned 1
	[0224.144] CloseHandle (hObject=0x26c) returned 1
	[0224.144] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json")) returned 1
	[0224.146] SetEvent (hEvent=0xfc) returned 1
	[0224.146] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.147] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=227) returned 1
	[0224.147] CloseHandle (hObject=0x26c) returned 1
	[0224.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0224.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0224.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.147] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.147] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.147] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.148] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0224.148] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe3, lpOverlapped=0x0) returned 1
	[0224.149] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0224.150] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.150] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.150] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.150] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe3, lpOverlapped=0x0) returned 1
	[0224.150] FlushFileBuffers (hFile=0x26c) returned 1
	[0224.155] FlushFileBuffers (hFile=0x260) returned 1
	[0224.159] CloseHandle (hObject=0x26c) returned 1
	[0224.159] CloseHandle (hObject=0x260) returned 1
	[0224.159] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json")) returned 1
	[0224.160] SetEvent (hEvent=0xfc) returned 1
	[0224.160] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.161] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=223) returned 1
	[0224.161] CloseHandle (hObject=0x260) returned 1
	[0224.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0224.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0224.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.161] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.161] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.161] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.162] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x26c
	[0224.162] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xdf, lpOverlapped=0x0) returned 1
	[0224.163] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0224.164] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.164] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.164] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.164] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xdf, lpOverlapped=0x0) returned 1
	[0224.165] FlushFileBuffers (hFile=0x260) returned 1
	[0224.168] FlushFileBuffers (hFile=0x26c) returned 1
	[0224.170] CloseHandle (hObject=0x260) returned 1
	[0224.170] CloseHandle (hObject=0x26c) returned 1
	[0224.171] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json")) returned 1
	[0224.171] SetEvent (hEvent=0xfc) returned 1
	[0224.172] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.172] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=260) returned 1
	[0224.172] CloseHandle (hObject=0x26c) returned 1
	[0224.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0224.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0224.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.173] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.173] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.173] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.173] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0224.173] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x104, lpOverlapped=0x0) returned 1
	[0224.174] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0224.175] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.175] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.175] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.175] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x104, lpOverlapped=0x0) returned 1
	[0224.176] FlushFileBuffers (hFile=0x26c) returned 1
	[0224.187] FlushFileBuffers (hFile=0x260) returned 1
	[0224.188] CloseHandle (hObject=0x26c) returned 1
	[0224.188] CloseHandle (hObject=0x260) returned 1
	[0224.189] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json")) returned 1
	[0224.189] SetEvent (hEvent=0xfc) returned 1
	[0224.190] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.191] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=226) returned 1
	[0224.191] CloseHandle (hObject=0x260) returned 1
	[0224.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0224.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0224.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.192] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.192] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.192] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.192] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x26c
	[0224.193] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe2, lpOverlapped=0x0) returned 1
	[0224.194] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0224.195] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.195] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.195] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.195] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe2, lpOverlapped=0x0) returned 1
	[0224.195] FlushFileBuffers (hFile=0x260) returned 1
	[0224.199] FlushFileBuffers (hFile=0x26c) returned 1
	[0224.202] CloseHandle (hObject=0x260) returned 1
	[0224.203] CloseHandle (hObject=0x26c) returned 1
	[0224.203] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json")) returned 1
	[0224.203] SetEvent (hEvent=0xfc) returned 1
	[0224.204] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.204] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=221) returned 1
	[0224.204] CloseHandle (hObject=0x26c) returned 1
	[0224.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0224.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0224.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.205] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.205] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.205] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.205] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0224.205] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xdd, lpOverlapped=0x0) returned 1
	[0224.206] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0224.207] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.207] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.207] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.207] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xdd, lpOverlapped=0x0) returned 1
	[0224.208] FlushFileBuffers (hFile=0x26c) returned 1
	[0224.211] FlushFileBuffers (hFile=0x260) returned 1
	[0224.213] CloseHandle (hObject=0x26c) returned 1
	[0224.213] CloseHandle (hObject=0x260) returned 1
	[0224.213] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json")) returned 1
	[0224.214] SetEvent (hEvent=0xfc) returned 1
	[0224.214] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.215] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=270) returned 1
	[0224.215] CloseHandle (hObject=0x260) returned 1
	[0224.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0224.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0224.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.215] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.215] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.215] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.215] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x26c
	[0224.216] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x10e, lpOverlapped=0x0) returned 1
	[0224.217] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0224.218] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.218] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.218] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.218] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x10e, lpOverlapped=0x0) returned 1
	[0224.219] FlushFileBuffers (hFile=0x260) returned 1
	[0224.222] FlushFileBuffers (hFile=0x26c) returned 1
	[0224.224] CloseHandle (hObject=0x260) returned 1
	[0224.224] CloseHandle (hObject=0x26c) returned 1
	[0224.224] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json")) returned 1
	[0224.225] SetEvent (hEvent=0xfc) returned 1
	[0224.225] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.226] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=237) returned 1
	[0224.226] CloseHandle (hObject=0x26c) returned 1
	[0224.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0224.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0224.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.227] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.227] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.227] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.227] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0224.227] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xed, lpOverlapped=0x0) returned 1
	[0224.228] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0224.230] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.231] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.231] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.231] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xed, lpOverlapped=0x0) returned 1
	[0224.231] FlushFileBuffers (hFile=0x26c) returned 1
	[0224.234] FlushFileBuffers (hFile=0x260) returned 1
	[0224.236] CloseHandle (hObject=0x26c) returned 1
	[0224.236] CloseHandle (hObject=0x260) returned 1
	[0224.236] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json")) returned 1
	[0224.237] SetEvent (hEvent=0xfc) returned 1
	[0224.237] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.238] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=215) returned 1
	[0224.238] CloseHandle (hObject=0x260) returned 1
	[0224.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0224.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0224.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.238] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.238] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.238] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.238] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x26c
	[0224.239] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd7, lpOverlapped=0x0) returned 1
	[0224.240] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0224.240] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.241] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.241] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.241] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd7, lpOverlapped=0x0) returned 1
	[0224.241] FlushFileBuffers (hFile=0x260) returned 1
	[0224.244] FlushFileBuffers (hFile=0x26c) returned 1
	[0224.247] CloseHandle (hObject=0x260) returned 1
	[0224.247] CloseHandle (hObject=0x26c) returned 1
	[0224.247] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json")) returned 1
	[0224.248] SetEvent (hEvent=0xfc) returned 1
	[0224.248] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.249] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=209) returned 1
	[0224.249] CloseHandle (hObject=0x26c) returned 1
	[0224.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0224.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0224.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.249] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.249] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.249] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.249] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0224.250] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd1, lpOverlapped=0x0) returned 1
	[0224.251] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0224.252] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0224.252] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.252] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.252] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd1, lpOverlapped=0x0) returned 1
	[0224.252] FlushFileBuffers (hFile=0x26c) returned 1
	[0224.255] FlushFileBuffers (hFile=0x260) returned 1
	[0224.263] CloseHandle (hObject=0x26c) returned 1
	[0224.263] CloseHandle (hObject=0x260) returned 1
	[0224.263] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json")) returned 1
	[0224.264] SetEvent (hEvent=0xfc) returned 1
	[0224.264] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.265] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=352) returned 1
	[0224.265] CloseHandle (hObject=0x260) returned 1
	[0224.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json")) returned 0x2020
	[0224.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json")) returned 0x2020
	[0224.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.265] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0224.265] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.265] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.265] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x26c
	[0224.268] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x160, lpOverlapped=0x0) returned 1
	[0224.269] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x170, lpOverlapped=0x0) returned 1
	[0224.270] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0224.270] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.270] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.270] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x160, lpOverlapped=0x0) returned 1
	[0224.271] FlushFileBuffers (hFile=0x260) returned 1
	[0224.273] FlushFileBuffers (hFile=0x26c) returned 1
	[0224.275] CloseHandle (hObject=0x260) returned 1
	[0224.275] CloseHandle (hObject=0x26c) returned 1
	[0224.275] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json")) returned 1
	[0224.276] SetEvent (hEvent=0xfc) returned 1
	[0224.276] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.277] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11094) returned 1
	[0224.277] CloseHandle (hObject=0x26c) returned 1
	[0224.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0224.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0224.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0224.277] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0224.277] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.277] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0224.277] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0224.278] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2b56, lpOverlapped=0x0) returned 1
	[0224.283] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b60, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2b60, lpOverlapped=0x0) returned 1
	[0224.284] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0224.284] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.284] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0224.284] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b56, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2b56, lpOverlapped=0x0) returned 1
	[0224.284] FlushFileBuffers (hFile=0x26c) returned 1
	[0225.031] FlushFileBuffers (hFile=0x260) returned 1
	[0225.076] CloseHandle (hObject=0x26c) returned 1
	[0225.078] CloseHandle (hObject=0x260) returned 1
	[0225.087] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json")) returned 1
	[0225.088] SetEvent (hEvent=0xfc) returned 1
	[0225.090] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0225.090] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=92) returned 1
	[0225.090] CloseHandle (hObject=0x260) returned 1
	[0225.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html")) returned 0x2020
	[0225.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html")) returned 0x2020
	[0225.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0225.090] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0225.091] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0225.091] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0225.091] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x26c
	[0225.091] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x5c, lpOverlapped=0x0) returned 1
	[0225.092] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x60, lpOverlapped=0x0) returned 1
	[0225.093] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0225.093] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0225.093] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0225.093] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x5c, lpOverlapped=0x0) returned 1
	[0225.093] FlushFileBuffers (hFile=0x260) returned 1
	[0226.075] FlushFileBuffers (hFile=0x26c) returned 1
	[0226.166] CloseHandle (hObject=0x260) returned 1
	[0226.166] CloseHandle (hObject=0x26c) returned 1
	[0226.166] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html")) returned 1
	[0226.167] SetEvent (hEvent=0xfc) returned 1
	[0226.169] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0226.169] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=725) returned 1
	[0226.169] CloseHandle (hObject=0x26c) returned 1
	[0226.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json")) returned 0x2020
	[0226.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json")) returned 0x2020
	[0226.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0226.170] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0226.170] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0226.170] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0226.170] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0226.170] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2d5, lpOverlapped=0x0) returned 1
	[0226.172] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2e0, lpOverlapped=0x0) returned 1
	[0226.173] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0226.173] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0226.173] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0226.173] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2d5, lpOverlapped=0x0) returned 1
	[0226.173] FlushFileBuffers (hFile=0x26c) returned 1
	[0226.197] FlushFileBuffers (hFile=0x260) returned 1
	[0226.212] CloseHandle (hObject=0x26c) returned 1
	[0226.213] CloseHandle (hObject=0x260) returned 1
	[0226.213] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json")) returned 1
	[0226.214] SetEvent (hEvent=0xfc) returned 1
	[0226.214] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0226.215] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=246) returned 1
	[0226.215] CloseHandle (hObject=0x260) returned 1
	[0226.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0226.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0226.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0226.216] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0226.216] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0226.216] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0226.216] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x26c
	[0226.217] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xf6, lpOverlapped=0x0) returned 1
	[0226.217] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0226.218] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0226.219] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0226.219] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0226.219] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xf6, lpOverlapped=0x0) returned 1
	[0226.219] FlushFileBuffers (hFile=0x260) returned 1
	[0227.335] FlushFileBuffers (hFile=0x26c) returned 1
	[0227.531] CloseHandle (hObject=0x260) returned 1
	[0227.543] CloseHandle (hObject=0x26c) returned 1
	[0227.543] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json")) returned 1
	[0227.544] SetEvent (hEvent=0xfc) returned 1
	[0227.544] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0227.545] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=207) returned 1
	[0227.545] CloseHandle (hObject=0x26c) returned 1
	[0227.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0227.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0227.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0227.545] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0227.545] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0227.545] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0227.545] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0227.546] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xcf, lpOverlapped=0x0) returned 1
	[0227.552] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0227.552] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0227.553] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0227.553] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0227.553] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xcf, lpOverlapped=0x0) returned 1
	[0227.553] FlushFileBuffers (hFile=0x26c) returned 1
	[0227.819] FlushFileBuffers (hFile=0x260) returned 1
	[0227.821] CloseHandle (hObject=0x26c) returned 1
	[0227.821] CloseHandle (hObject=0x260) returned 1
	[0227.821] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json")) returned 1
	[0227.822] SetEvent (hEvent=0xfc) returned 1
	[0227.822] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0227.823] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0227.823] CloseHandle (hObject=0x260) returned 1
	[0227.823] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0227.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0227.824] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0227.824] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0227.824] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0227.824] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0227.824] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x26c
	[0227.825] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xde, lpOverlapped=0x0) returned 1
	[0227.826] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0227.826] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0227.827] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0227.827] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0227.827] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xde, lpOverlapped=0x0) returned 1
	[0227.827] FlushFileBuffers (hFile=0x260) returned 1
	[0227.830] FlushFileBuffers (hFile=0x26c) returned 1
	[0227.841] CloseHandle (hObject=0x260) returned 1
	[0229.021] CloseHandle (hObject=0x26c) returned 1
	[0229.022] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json")) returned 1
	[0229.023] SetEvent (hEvent=0xfc) returned 1
	[0229.024] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0229.025] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=209) returned 1
	[0229.025] CloseHandle (hObject=0x26c) returned 1
	[0229.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json")) returned 0x2020
	[0229.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json")) returned 0x2020
	[0229.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0229.025] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0229.025] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0229.025] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0229.025] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0229.240] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd1, lpOverlapped=0x0) returned 1
	[0229.241] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0229.242] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0229.242] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0229.242] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0229.242] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd1, lpOverlapped=0x0) returned 1
	[0229.242] FlushFileBuffers (hFile=0x26c) returned 1
	[0229.272] FlushFileBuffers (hFile=0x25c) returned 1
	[0229.307] CloseHandle (hObject=0x26c) returned 1
	[0229.307] CloseHandle (hObject=0x25c) returned 1
	[0229.307] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json")) returned 1
	[0229.308] SetEvent (hEvent=0xfc) returned 1
	[0229.309] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0229.310] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=206) returned 1
	[0229.310] CloseHandle (hObject=0x25c) returned 1
	[0229.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json")) returned 0x2020
	[0229.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json")) returned 0x2020
	[0229.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0229.310] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0229.310] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0229.310] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0229.310] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x26c
	[0229.311] ReadFile (in: hFile=0x25c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xce, lpOverlapped=0x0) returned 1
	[0229.312] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0229.313] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0229.313] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0229.313] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0229.313] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xce, lpOverlapped=0x0) returned 1
	[0229.313] FlushFileBuffers (hFile=0x25c) returned 1
	[0229.354] FlushFileBuffers (hFile=0x26c) returned 1
	[0229.380] CloseHandle (hObject=0x25c) returned 1
	[0229.390] CloseHandle (hObject=0x26c) returned 1
	[0229.390] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json")) returned 1
	[0229.391] SetEvent (hEvent=0xfc) returned 1
	[0229.392] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0229.393] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=216) returned 1
	[0229.393] CloseHandle (hObject=0x26c) returned 1
	[0229.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0229.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0229.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0229.395] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0229.395] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0229.395] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0229.395] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0229.396] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd8, lpOverlapped=0x0) returned 1
	[0229.396] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0229.397] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0229.398] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0229.398] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0229.398] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd8, lpOverlapped=0x0) returned 1
	[0229.398] FlushFileBuffers (hFile=0x26c) returned 1
	[0229.441] FlushFileBuffers (hFile=0x25c) returned 1
	[0229.519] CloseHandle (hObject=0x26c) returned 1
	[0229.579] CloseHandle (hObject=0x25c) returned 1
	[0229.579] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json")) returned 1
	[0229.580] SetEvent (hEvent=0xfc) returned 1
	[0229.582] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0229.583] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=215) returned 1
	[0229.583] CloseHandle (hObject=0x25c) returned 1
	[0229.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0229.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0229.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0229.583] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0229.583] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0229.583] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0229.583] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x26c
	[0229.584] ReadFile (in: hFile=0x25c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd7, lpOverlapped=0x0) returned 1
	[0229.585] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0229.586] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0229.586] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0229.586] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0229.586] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd7, lpOverlapped=0x0) returned 1
	[0229.586] FlushFileBuffers (hFile=0x25c) returned 1
	[0229.653] FlushFileBuffers (hFile=0x26c) returned 1
	[0229.811] CloseHandle (hObject=0x25c) returned 1
	[0229.811] CloseHandle (hObject=0x26c) returned 1
	[0229.816] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json")) returned 1
	[0229.891] SetEvent (hEvent=0xfc) returned 1
	[0229.892] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0229.893] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=279) returned 1
	[0229.893] CloseHandle (hObject=0x26c) returned 1
	[0229.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0229.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0229.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0229.893] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0229.893] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0229.893] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0229.894] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0229.894] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x117, lpOverlapped=0x0) returned 1
	[0229.895] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0229.896] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0229.896] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0229.896] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0229.896] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x117, lpOverlapped=0x0) returned 1
	[0229.896] FlushFileBuffers (hFile=0x26c) returned 1
	[0229.949] FlushFileBuffers (hFile=0x25c) returned 1
	[0229.976] CloseHandle (hObject=0x26c) returned 1
	[0229.977] CloseHandle (hObject=0x25c) returned 1
	[0229.977] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json")) returned 1
	[0229.978] SetEvent (hEvent=0xfc) returned 1
	[0229.979] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0229.979] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=209) returned 1
	[0229.979] CloseHandle (hObject=0x25c) returned 1
	[0229.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json")) returned 0x2020
	[0229.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json")) returned 0x2020
	[0229.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0229.980] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0229.980] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0229.980] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0229.980] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x26c
	[0229.981] ReadFile (in: hFile=0x25c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd1, lpOverlapped=0x0) returned 1
	[0229.981] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0229.982] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0229.983] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0229.983] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0229.983] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd1, lpOverlapped=0x0) returned 1
	[0229.983] FlushFileBuffers (hFile=0x25c) returned 1
	[0230.236] FlushFileBuffers (hFile=0x26c) returned 1
	[0230.381] CloseHandle (hObject=0x25c) returned 1
	[0230.382] CloseHandle (hObject=0x26c) returned 1
	[0230.382] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json")) returned 1
	[0230.383] SetEvent (hEvent=0xfc) returned 1
	[0230.384] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0230.385] GetFileSizeEx (in: hFile=0x26c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=221) returned 1
	[0230.385] CloseHandle (hObject=0x26c) returned 1
	[0230.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0230.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0230.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0230.385] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x26c
	[0230.385] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0230.385] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0230.385] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0230.386] ReadFile (in: hFile=0x26c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xdd, lpOverlapped=0x0) returned 1
	[0230.387] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0230.387] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0230.388] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0230.388] SetFilePointerEx (in: hFile=0x26c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0230.388] WriteFile (in: hFile=0x26c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xdd, lpOverlapped=0x0) returned 1
	[0230.388] FlushFileBuffers (hFile=0x26c) returned 1
	[0230.476] FlushFileBuffers (hFile=0x25c) returned 1
	[0230.858] CloseHandle (hObject=0x26c) returned 1
	[0230.866] CloseHandle (hObject=0x25c) returned 1
	[0230.866] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json")) returned 1
	[0230.867] SetEvent (hEvent=0xfc) returned 1
	[0230.869] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0230.869] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=224) returned 1
	[0230.869] CloseHandle (hObject=0x25c) returned 1
	[0230.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0230.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0230.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0230.869] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0230.870] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0230.870] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0230.870] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x23c
	[0231.362] ReadFile (in: hFile=0x25c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe0, lpOverlapped=0x0) returned 1
	[0231.363] WriteFile (in: hFile=0x23c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0231.364] WriteFile (in: hFile=0x23c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0231.365] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0231.365] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0231.365] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe0, lpOverlapped=0x0) returned 1
	[0231.365] FlushFileBuffers (hFile=0x25c) returned 1
	[0232.301] FlushFileBuffers (hFile=0x23c) returned 1
	[0232.860] CloseHandle (hObject=0x25c) returned 1
	[0232.860] CloseHandle (hObject=0x23c) returned 1
	[0232.860] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json")) returned 1
	[0232.861] SetEvent (hEvent=0xfc) returned 1
	[0232.861] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0232.862] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=217) returned 1
	[0232.862] CloseHandle (hObject=0x23c) returned 1
	[0232.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0232.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0232.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0232.862] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0232.862] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0232.863] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0232.863] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0232.863] ReadFile (in: hFile=0x23c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd9, lpOverlapped=0x0) returned 1
	[0232.867] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0232.868] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0232.868] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0232.874] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0232.874] WriteFile (in: hFile=0x23c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd9, lpOverlapped=0x0) returned 1
	[0232.874] FlushFileBuffers (hFile=0x23c) returned 1
	[0232.879] FlushFileBuffers (hFile=0x25c) returned 1
	[0232.887] CloseHandle (hObject=0x23c) returned 1
	[0232.888] CloseHandle (hObject=0x25c) returned 1
	[0232.889] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json")) returned 1
	[0232.890] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0232.890] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=213) returned 1
	[0232.890] CloseHandle (hObject=0x25c) returned 1
	[0232.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0232.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0232.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0232.890] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0232.891] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0232.891] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0232.891] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x23c
	[0232.895] ReadFile (in: hFile=0x25c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd5, lpOverlapped=0x0) returned 1
	[0232.896] WriteFile (in: hFile=0x23c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0232.897] WriteFile (in: hFile=0x23c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0232.897] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0232.897] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0232.897] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd5, lpOverlapped=0x0) returned 1
	[0232.897] FlushFileBuffers (hFile=0x25c) returned 1
	[0232.901] FlushFileBuffers (hFile=0x23c) returned 1
	[0232.909] CloseHandle (hObject=0x25c) returned 1
	[0232.909] CloseHandle (hObject=0x23c) returned 1
	[0232.910] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json")) returned 1
	[0232.911] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0232.911] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=208) returned 1
	[0232.911] CloseHandle (hObject=0x23c) returned 1
	[0232.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0232.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0232.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0232.911] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0232.911] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0232.912] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0232.912] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x25c
	[0232.915] ReadFile (in: hFile=0x23c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd0, lpOverlapped=0x0) returned 1
	[0232.916] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0232.917] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0232.917] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0232.917] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0232.917] WriteFile (in: hFile=0x23c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd0, lpOverlapped=0x0) returned 1
	[0232.918] FlushFileBuffers (hFile=0x23c) returned 1
	[0232.921] FlushFileBuffers (hFile=0x25c) returned 1
	[0232.929] CloseHandle (hObject=0x23c) returned 1
	[0232.930] CloseHandle (hObject=0x25c) returned 1
	[0232.930] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json")) returned 1
	[0232.931] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0232.932] GetFileSizeEx (in: hFile=0x25c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=266) returned 1
	[0232.932] CloseHandle (hObject=0x25c) returned 1
	[0232.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0232.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0232.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0232.932] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c
	[0232.932] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0232.932] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0232.932] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0233.355] ReadFile (in: hFile=0x25c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x10a, lpOverlapped=0x0) returned 1
	[0233.356] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0233.356] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0233.357] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0233.357] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0233.357] WriteFile (in: hFile=0x25c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x10a, lpOverlapped=0x0) returned 1
	[0233.357] FlushFileBuffers (hFile=0x25c) returned 1
	[0233.647] FlushFileBuffers (hFile=0x260) returned 1
	[0233.718] CloseHandle (hObject=0x25c) returned 1
	[0233.820] CloseHandle (hObject=0x260) returned 1
	[0233.820] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json")) returned 1
	[0233.822] SetEvent (hEvent=0xfc) returned 1
	[0233.826] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0233.826] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=248) returned 1
	[0233.826] CloseHandle (hObject=0x260) returned 1
	[0233.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0233.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0233.827] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0233.827] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0233.827] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0233.827] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0233.827] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0233.871] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xf8, lpOverlapped=0x0) returned 1
	[0233.878] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0233.879] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0233.879] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0233.879] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0233.879] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xf8, lpOverlapped=0x0) returned 1
	[0233.879] FlushFileBuffers (hFile=0x260) returned 1
	[0234.081] FlushFileBuffers (hFile=0x278) returned 1
	[0234.236] CloseHandle (hObject=0x260) returned 1
	[0234.245] CloseHandle (hObject=0x278) returned 1
	[0234.245] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json")) returned 1
	[0234.246] SetEvent (hEvent=0xfc) returned 1
	[0234.246] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0234.247] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=254) returned 1
	[0234.247] CloseHandle (hObject=0x278) returned 1
	[0234.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json")) returned 0x2020
	[0234.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json")) returned 0x2020
	[0234.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.248] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0234.248] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.248] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.248] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x258
	[0234.248] ReadFile (in: hFile=0x278, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xfe, lpOverlapped=0x0) returned 1
	[0234.249] WriteFile (in: hFile=0x258, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0234.250] WriteFile (in: hFile=0x258, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0234.251] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.251] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.251] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xfe, lpOverlapped=0x0) returned 1
	[0234.251] FlushFileBuffers (hFile=0x278) returned 1
	[0234.253] FlushFileBuffers (hFile=0x258) returned 1
	[0234.254] CloseHandle (hObject=0x278) returned 1
	[0234.255] CloseHandle (hObject=0x258) returned 1
	[0234.255] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json")) returned 1
	[0234.256] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x258
	[0234.257] GetFileSizeEx (in: hFile=0x258, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=227) returned 1
	[0234.257] CloseHandle (hObject=0x258) returned 1
	[0234.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0234.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0234.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.257] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x258
	[0234.257] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.257] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.257] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0234.258] ReadFile (in: hFile=0x258, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe3, lpOverlapped=0x0) returned 1
	[0234.262] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0234.264] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0234.264] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.264] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.264] WriteFile (in: hFile=0x258, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe3, lpOverlapped=0x0) returned 1
	[0234.265] FlushFileBuffers (hFile=0x258) returned 1
	[0234.267] FlushFileBuffers (hFile=0x278) returned 1
	[0234.270] CloseHandle (hObject=0x258) returned 1
	[0234.270] CloseHandle (hObject=0x278) returned 1
	[0234.270] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json")) returned 1
	[0234.271] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0234.273] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=264) returned 1
	[0234.273] CloseHandle (hObject=0x278) returned 1
	[0234.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0234.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0234.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.273] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0234.273] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.273] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.273] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x258
	[0234.274] ReadFile (in: hFile=0x278, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x108, lpOverlapped=0x0) returned 1
	[0234.275] WriteFile (in: hFile=0x258, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0234.276] WriteFile (in: hFile=0x258, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0234.276] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.276] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.276] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x108, lpOverlapped=0x0) returned 1
	[0234.277] FlushFileBuffers (hFile=0x278) returned 1
	[0234.279] FlushFileBuffers (hFile=0x258) returned 1
	[0234.280] CloseHandle (hObject=0x278) returned 1
	[0234.280] CloseHandle (hObject=0x258) returned 1
	[0234.281] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json")) returned 1
	[0234.282] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x258
	[0234.283] GetFileSizeEx (in: hFile=0x258, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=225) returned 1
	[0234.283] CloseHandle (hObject=0x258) returned 1
	[0234.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0234.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0234.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.283] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x258
	[0234.283] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.283] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.283] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0234.284] ReadFile (in: hFile=0x258, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe1, lpOverlapped=0x0) returned 1
	[0234.285] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0234.286] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0234.286] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.286] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.286] WriteFile (in: hFile=0x258, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe1, lpOverlapped=0x0) returned 1
	[0234.286] FlushFileBuffers (hFile=0x258) returned 1
	[0234.289] FlushFileBuffers (hFile=0x278) returned 1
	[0234.290] CloseHandle (hObject=0x258) returned 1
	[0234.290] CloseHandle (hObject=0x278) returned 1
	[0234.290] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json")) returned 1
	[0234.292] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0234.293] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=206) returned 1
	[0234.293] CloseHandle (hObject=0x278) returned 1
	[0234.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0234.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0234.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.293] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0234.293] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.293] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.293] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x258
	[0234.294] ReadFile (in: hFile=0x278, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xce, lpOverlapped=0x0) returned 1
	[0234.295] WriteFile (in: hFile=0x258, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0234.296] WriteFile (in: hFile=0x258, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0234.296] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.296] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.296] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xce, lpOverlapped=0x0) returned 1
	[0234.296] FlushFileBuffers (hFile=0x278) returned 1
	[0234.298] FlushFileBuffers (hFile=0x258) returned 1
	[0234.300] CloseHandle (hObject=0x278) returned 1
	[0234.300] CloseHandle (hObject=0x258) returned 1
	[0234.301] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json")) returned 1
	[0234.302] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x258
	[0234.302] GetFileSizeEx (in: hFile=0x258, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=206) returned 1
	[0234.302] CloseHandle (hObject=0x258) returned 1
	[0234.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0234.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0234.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.303] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x258
	[0234.303] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.303] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.303] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0234.304] ReadFile (in: hFile=0x258, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xce, lpOverlapped=0x0) returned 1
	[0234.305] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0234.305] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0234.306] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.306] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.306] WriteFile (in: hFile=0x258, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xce, lpOverlapped=0x0) returned 1
	[0234.306] FlushFileBuffers (hFile=0x258) returned 1
	[0234.308] FlushFileBuffers (hFile=0x278) returned 1
	[0234.310] CloseHandle (hObject=0x258) returned 1
	[0234.310] CloseHandle (hObject=0x278) returned 1
	[0234.310] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json")) returned 1
	[0234.311] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0234.312] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=352) returned 1
	[0234.312] CloseHandle (hObject=0x278) returned 1
	[0234.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json")) returned 0x2020
	[0234.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json")) returned 0x2020
	[0234.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.313] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0234.313] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.313] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.313] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x258
	[0234.315] ReadFile (in: hFile=0x278, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x160, lpOverlapped=0x0) returned 1
	[0234.316] WriteFile (in: hFile=0x258, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x170, lpOverlapped=0x0) returned 1
	[0234.317] WriteFile (in: hFile=0x258, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0234.317] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.317] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.317] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x160, lpOverlapped=0x0) returned 1
	[0234.317] FlushFileBuffers (hFile=0x278) returned 1
	[0234.321] FlushFileBuffers (hFile=0x258) returned 1
	[0234.323] CloseHandle (hObject=0x278) returned 1
	[0234.323] CloseHandle (hObject=0x258) returned 1
	[0234.323] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json")) returned 1
	[0234.324] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x258
	[0234.325] GetFileSizeEx (in: hFile=0x258, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11094) returned 1
	[0234.325] CloseHandle (hObject=0x258) returned 1
	[0234.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0234.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0234.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.325] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x258
	[0234.325] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.325] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.325] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0234.326] ReadFile (in: hFile=0x258, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2b56, lpOverlapped=0x0) returned 1
	[0234.328] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b60, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2b60, lpOverlapped=0x0) returned 1
	[0234.328] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0234.329] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.329] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0234.329] WriteFile (in: hFile=0x258, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b56, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2b56, lpOverlapped=0x0) returned 1
	[0234.329] FlushFileBuffers (hFile=0x258) returned 1
	[0234.532] FlushFileBuffers (hFile=0x278) returned 1
	[0234.534] CloseHandle (hObject=0x258) returned 1
	[0234.534] CloseHandle (hObject=0x278) returned 1
	[0234.534] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json")) returned 1
	[0234.535] SetEvent (hEvent=0xfc) returned 1
	[0234.535] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0234.536] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=256) returned 1
	[0234.536] CloseHandle (hObject=0x278) returned 1
	[0234.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json")) returned 0x2020
	[0234.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json")) returned 0x2020
	[0234.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.537] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0234.537] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.537] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0234.537] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0235.066] ReadFile (in: hFile=0x278, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x100, lpOverlapped=0x0) returned 1
	[0235.067] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0235.068] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0235.068] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0235.068] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0235.068] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x100, lpOverlapped=0x0) returned 1
	[0235.069] FlushFileBuffers (hFile=0x278) returned 1
	[0236.100] FlushFileBuffers (hFile=0x204) returned 1
	[0236.287] CloseHandle (hObject=0x278) returned 1
	[0236.287] CloseHandle (hObject=0x204) returned 1
	[0236.287] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json")) returned 1
	[0236.288] SetEvent (hEvent=0xfc) returned 1
	[0236.289] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0236.290] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=249) returned 1
	[0236.290] CloseHandle (hObject=0x204) returned 1
	[0236.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json")) returned 0x2020
	[0236.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json")) returned 0x2020
	[0236.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0236.290] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0236.290] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0236.290] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0236.290] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0236.291] ReadFile (in: hFile=0x204, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xf9, lpOverlapped=0x0) returned 1
	[0236.292] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0236.293] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0236.293] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0236.293] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0236.293] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xf9, lpOverlapped=0x0) returned 1
	[0236.293] FlushFileBuffers (hFile=0x204) returned 1
	[0236.566] FlushFileBuffers (hFile=0x278) returned 1
	[0236.772] CloseHandle (hObject=0x204) returned 1
	[0236.772] CloseHandle (hObject=0x278) returned 1
	[0236.772] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json")) returned 1
	[0236.773] SetEvent (hEvent=0xfc) returned 1
	[0236.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0236.774] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=259) returned 1
	[0236.774] CloseHandle (hObject=0x278) returned 1
	[0236.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json")) returned 0x2020
	[0236.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json")) returned 0x2020
	[0236.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0236.774] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0236.774] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0236.774] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0236.774] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0236.775] ReadFile (in: hFile=0x278, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x103, lpOverlapped=0x0) returned 1
	[0236.776] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0236.777] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0236.777] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0236.777] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0236.777] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x103, lpOverlapped=0x0) returned 1
	[0236.777] FlushFileBuffers (hFile=0x278) returned 1
	[0236.781] FlushFileBuffers (hFile=0x204) returned 1
	[0236.783] CloseHandle (hObject=0x278) returned 1
	[0236.783] CloseHandle (hObject=0x204) returned 1
	[0236.783] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json")) returned 1
	[0236.784] SetEvent (hEvent=0xfc) returned 1
	[0236.784] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0236.785] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=259) returned 1
	[0236.785] CloseHandle (hObject=0x204) returned 1
	[0236.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json")) returned 0x2020
	[0236.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json")) returned 0x2020
	[0236.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0236.785] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0236.786] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0236.786] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0236.786] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0236.786] ReadFile (in: hFile=0x204, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x103, lpOverlapped=0x0) returned 1
	[0236.787] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0236.788] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0236.788] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0236.788] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0236.788] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x103, lpOverlapped=0x0) returned 1
	[0236.789] FlushFileBuffers (hFile=0x204) returned 1
	[0236.792] FlushFileBuffers (hFile=0x278) returned 1
	[0236.794] CloseHandle (hObject=0x204) returned 1
	[0236.794] CloseHandle (hObject=0x278) returned 1
	[0236.794] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json")) returned 1
	[0236.795] SetEvent (hEvent=0xfc) returned 1
	[0236.795] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0236.796] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=251) returned 1
	[0236.796] CloseHandle (hObject=0x278) returned 1
	[0236.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json")) returned 0x2020
	[0236.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json")) returned 0x2020
	[0236.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0236.796] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0236.796] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0236.796] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0236.796] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0236.797] ReadFile (in: hFile=0x278, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xfb, lpOverlapped=0x0) returned 1
	[0236.798] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0236.799] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0236.799] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0236.799] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0236.799] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xfb, lpOverlapped=0x0) returned 1
	[0236.799] FlushFileBuffers (hFile=0x278) returned 1
	[0236.802] FlushFileBuffers (hFile=0x204) returned 1
	[0236.803] CloseHandle (hObject=0x278) returned 1
	[0236.803] CloseHandle (hObject=0x204) returned 1
	[0236.803] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json")) returned 1
	[0236.804] SetEvent (hEvent=0xfc) returned 1
	[0236.804] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0236.805] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=243) returned 1
	[0236.805] CloseHandle (hObject=0x204) returned 1
	[0236.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json")) returned 0x2020
	[0236.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json")) returned 0x2020
	[0236.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0236.805] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0236.805] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0236.805] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0236.805] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0236.806] ReadFile (in: hFile=0x204, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xf3, lpOverlapped=0x0) returned 1
	[0236.807] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0236.807] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0236.808] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0236.808] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0236.808] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xf3, lpOverlapped=0x0) returned 1
	[0236.808] FlushFileBuffers (hFile=0x204) returned 1
	[0236.862] FlushFileBuffers (hFile=0x278) returned 1
	[0236.889] CloseHandle (hObject=0x204) returned 1
	[0236.889] CloseHandle (hObject=0x278) returned 1
	[0236.889] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json")) returned 1
	[0236.890] SetEvent (hEvent=0xfc) returned 1
	[0236.891] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0236.892] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=260) returned 1
	[0236.892] CloseHandle (hObject=0x278) returned 1
	[0236.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0236.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0236.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0236.892] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0236.892] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0236.892] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0236.892] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0236.893] ReadFile (in: hFile=0x278, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x104, lpOverlapped=0x0) returned 1
	[0236.894] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0236.895] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0236.895] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0236.895] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0236.895] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x104, lpOverlapped=0x0) returned 1
	[0236.895] FlushFileBuffers (hFile=0x278) returned 1
	[0237.163] FlushFileBuffers (hFile=0x204) returned 1
	[0237.384] CloseHandle (hObject=0x278) returned 1
	[0237.384] CloseHandle (hObject=0x204) returned 1
	[0237.384] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json")) returned 1
	[0237.385] SetEvent (hEvent=0xfc) returned 1
	[0237.386] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0237.387] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=278) returned 1
	[0237.387] CloseHandle (hObject=0x204) returned 1
	[0237.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json")) returned 0x2020
	[0237.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json")) returned 0x2020
	[0237.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0237.389] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0237.389] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0237.389] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0237.389] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0237.390] ReadFile (in: hFile=0x204, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x116, lpOverlapped=0x0) returned 1
	[0237.391] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0237.396] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0237.397] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0237.397] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0237.397] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x116, lpOverlapped=0x0) returned 1
	[0237.397] FlushFileBuffers (hFile=0x204) returned 1
	[0237.489] FlushFileBuffers (hFile=0x278) returned 1
	[0237.501] CloseHandle (hObject=0x204) returned 1
	[0237.501] CloseHandle (hObject=0x278) returned 1
	[0237.501] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json")) returned 1
	[0237.502] SetEvent (hEvent=0xfc) returned 1
	[0237.504] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0237.505] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=263) returned 1
	[0237.505] CloseHandle (hObject=0x170) returned 1
	[0237.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json")) returned 0x2020
	[0237.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json")) returned 0x2020
	[0237.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0237.505] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0237.505] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0237.505] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0237.505] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0237.506] ReadFile (in: hFile=0x170, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x107, lpOverlapped=0x0) returned 1
	[0237.507] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0237.507] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0237.508] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0237.508] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0237.508] WriteFile (in: hFile=0x170, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x107, lpOverlapped=0x0) returned 1
	[0237.508] FlushFileBuffers (hFile=0x170) returned 1
	[0237.849] FlushFileBuffers (hFile=0x278) returned 1
	[0238.329] CloseHandle (hObject=0x170) returned 1
	[0238.329] CloseHandle (hObject=0x278) returned 1
	[0238.329] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json")) returned 1
	[0238.330] SetEvent (hEvent=0xfc) returned 1
	[0238.331] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0238.333] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=261) returned 1
	[0238.333] CloseHandle (hObject=0x278) returned 1
	[0238.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json")) returned 0x2020
	[0238.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json")) returned 0x2020
	[0238.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0238.333] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0238.333] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.333] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.333] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0238.334] ReadFile (in: hFile=0x278, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x105, lpOverlapped=0x0) returned 1
	[0238.335] WriteFile (in: hFile=0x170, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0238.336] WriteFile (in: hFile=0x170, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0238.336] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.336] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.336] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x105, lpOverlapped=0x0) returned 1
	[0238.336] FlushFileBuffers (hFile=0x278) returned 1
	[0238.552] FlushFileBuffers (hFile=0x170) returned 1
	[0238.670] CloseHandle (hObject=0x278) returned 1
	[0238.670] CloseHandle (hObject=0x170) returned 1
	[0238.670] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json")) returned 1
	[0238.671] SetEvent (hEvent=0xfc) returned 1
	[0238.671] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0238.673] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=293) returned 1
	[0238.673] CloseHandle (hObject=0x170) returned 1
	[0238.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0238.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0238.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0238.674] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0238.674] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.674] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.674] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0238.675] ReadFile (in: hFile=0x170, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x125, lpOverlapped=0x0) returned 1
	[0238.676] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x130, lpOverlapped=0x0) returned 1
	[0238.677] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0238.677] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.677] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.677] WriteFile (in: hFile=0x170, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x125, lpOverlapped=0x0) returned 1
	[0238.677] FlushFileBuffers (hFile=0x170) returned 1
	[0238.681] FlushFileBuffers (hFile=0x278) returned 1
	[0238.683] CloseHandle (hObject=0x170) returned 1
	[0238.683] CloseHandle (hObject=0x278) returned 1
	[0238.683] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json")) returned 1
	[0238.684] SetEvent (hEvent=0xfc) returned 1
	[0238.684] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0238.685] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=281) returned 1
	[0238.685] CloseHandle (hObject=0x278) returned 1
	[0238.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0238.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0238.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0238.685] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0238.686] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.686] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.686] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0238.686] ReadFile (in: hFile=0x278, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x119, lpOverlapped=0x0) returned 1
	[0238.687] WriteFile (in: hFile=0x170, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0238.688] WriteFile (in: hFile=0x170, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0238.688] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.688] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.688] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x119, lpOverlapped=0x0) returned 1
	[0238.688] FlushFileBuffers (hFile=0x278) returned 1
	[0238.694] FlushFileBuffers (hFile=0x170) returned 1
	[0238.695] CloseHandle (hObject=0x278) returned 1
	[0238.695] CloseHandle (hObject=0x170) returned 1
	[0238.695] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json")) returned 1
	[0238.697] SetEvent (hEvent=0xfc) returned 1
	[0238.698] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0238.698] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=258) returned 1
	[0238.698] CloseHandle (hObject=0x170) returned 1
	[0238.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0238.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0238.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0238.698] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0238.699] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.699] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.699] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0238.699] ReadFile (in: hFile=0x170, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x102, lpOverlapped=0x0) returned 1
	[0238.700] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0238.701] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0238.701] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.701] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.701] WriteFile (in: hFile=0x170, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x102, lpOverlapped=0x0) returned 1
	[0238.701] FlushFileBuffers (hFile=0x170) returned 1
	[0238.705] FlushFileBuffers (hFile=0x278) returned 1
	[0238.707] CloseHandle (hObject=0x170) returned 1
	[0238.707] CloseHandle (hObject=0x278) returned 1
	[0238.707] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json")) returned 1
	[0238.707] SetEvent (hEvent=0xfc) returned 1
	[0238.708] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0238.708] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=254) returned 1
	[0238.708] CloseHandle (hObject=0x278) returned 1
	[0238.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json")) returned 0x2020
	[0238.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json")) returned 0x2020
	[0238.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0238.708] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0238.708] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.709] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.709] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0238.709] ReadFile (in: hFile=0x278, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xfe, lpOverlapped=0x0) returned 1
	[0238.710] WriteFile (in: hFile=0x170, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0238.711] WriteFile (in: hFile=0x170, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0238.711] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.711] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.711] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xfe, lpOverlapped=0x0) returned 1
	[0238.711] FlushFileBuffers (hFile=0x278) returned 1
	[0238.715] FlushFileBuffers (hFile=0x170) returned 1
	[0238.716] CloseHandle (hObject=0x278) returned 1
	[0238.716] CloseHandle (hObject=0x170) returned 1
	[0238.716] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json")) returned 1
	[0238.717] SetEvent (hEvent=0xfc) returned 1
	[0238.717] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0238.719] GetFileSizeEx (in: hFile=0x170, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=242) returned 1
	[0238.719] CloseHandle (hObject=0x170) returned 1
	[0238.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0238.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0238.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0238.719] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x170
	[0238.719] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.719] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.720] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0238.720] ReadFile (in: hFile=0x170, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xf2, lpOverlapped=0x0) returned 1
	[0238.721] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0238.722] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0238.722] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.722] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.722] WriteFile (in: hFile=0x170, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xf2, lpOverlapped=0x0) returned 1
	[0238.722] FlushFileBuffers (hFile=0x170) returned 1
	[0238.725] FlushFileBuffers (hFile=0x278) returned 1
	[0238.729] CloseHandle (hObject=0x170) returned 1
	[0238.729] CloseHandle (hObject=0x278) returned 1
	[0238.729] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json")) returned 1
	[0238.730] SetEvent (hEvent=0xfc) returned 1
	[0238.730] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0238.731] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=218) returned 1
	[0238.731] CloseHandle (hObject=0x278) returned 1
	[0238.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json")) returned 0x2020
	[0238.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json")) returned 0x2020
	[0238.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0238.731] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0238.731] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.731] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0238.731] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x170
	[0238.732] ReadFile (in: hFile=0x278, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xda, lpOverlapped=0x0) returned 1
	[0238.733] WriteFile (in: hFile=0x170, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0238.733] WriteFile (in: hFile=0x170, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0238.734] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.734] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0238.734] WriteFile (in: hFile=0x278, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xda, lpOverlapped=0x0) returned 1
	[0238.734] FlushFileBuffers (hFile=0x278) returned 1
	[0238.882] FlushFileBuffers (hFile=0x170) returned 1
	[0239.234] CloseHandle (hObject=0x278) returned 1
	[0239.234] CloseHandle (hObject=0x170) returned 1
	[0239.234] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json")) returned 1
	[0239.235] SetEvent (hEvent=0xfc) returned 1
	[0239.236] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0239.456] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=246) returned 1
	[0239.456] CloseHandle (hObject=0x114) returned 1
	[0239.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0239.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json")) returned 0x2020
	[0239.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0239.456] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0239.456] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0239.456] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0239.456] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0239.457] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xf6, lpOverlapped=0x0) returned 1
	[0239.458] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0239.459] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0239.459] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0239.460] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0239.460] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xf6, lpOverlapped=0x0) returned 1
	[0239.460] FlushFileBuffers (hFile=0x114) returned 1
	[0239.628] FlushFileBuffers (hFile=0x110) returned 1
	[0239.723] CloseHandle (hObject=0x114) returned 1
	[0239.724] CloseHandle (hObject=0x110) returned 1
	[0239.724] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json")) returned 1
	[0239.725] SetEvent (hEvent=0xfc) returned 1
	[0239.726] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0239.727] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=281) returned 1
	[0239.727] CloseHandle (hObject=0x110) returned 1
	[0239.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0239.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0239.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0239.727] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0239.728] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0239.728] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0239.728] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0239.729] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x119, lpOverlapped=0x0) returned 1
	[0239.729] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0239.730] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0239.730] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0239.731] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0239.731] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x119, lpOverlapped=0x0) returned 1
	[0239.731] FlushFileBuffers (hFile=0x110) returned 1
	[0240.085] FlushFileBuffers (hFile=0x114) returned 1
	[0240.088] CloseHandle (hObject=0x110) returned 1
	[0240.088] CloseHandle (hObject=0x114) returned 1
	[0240.088] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json")) returned 1
	[0240.089] SetEvent (hEvent=0xfc) returned 1
	[0240.090] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0240.091] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=274) returned 1
	[0240.091] CloseHandle (hObject=0x114) returned 1
	[0240.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0240.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0240.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0240.092] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0240.092] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0240.092] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0240.092] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0240.093] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x112, lpOverlapped=0x0) returned 1
	[0240.093] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0240.094] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0240.095] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0240.095] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0240.095] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x112, lpOverlapped=0x0) returned 1
	[0240.095] FlushFileBuffers (hFile=0x114) returned 1
	[0240.167] FlushFileBuffers (hFile=0x110) returned 1
	[0240.257] CloseHandle (hObject=0x114) returned 1
	[0240.257] CloseHandle (hObject=0x110) returned 1
	[0240.257] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json")) returned 1
	[0240.258] SetEvent (hEvent=0xfc) returned 1
	[0240.259] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0240.261] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=287) returned 1
	[0240.261] CloseHandle (hObject=0x110) returned 1
	[0240.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0240.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0240.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0240.261] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0240.261] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0240.261] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0240.261] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0240.262] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x11f, lpOverlapped=0x0) returned 1
	[0240.263] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0240.264] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0240.264] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0240.264] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0240.264] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x11f, lpOverlapped=0x0) returned 1
	[0240.264] FlushFileBuffers (hFile=0x110) returned 1
	[0240.599] FlushFileBuffers (hFile=0x114) returned 1
	[0240.658] CloseHandle (hObject=0x110) returned 1
	[0240.658] CloseHandle (hObject=0x114) returned 1
	[0240.658] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json")) returned 1
	[0240.659] SetEvent (hEvent=0xfc) returned 1
	[0240.660] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0240.661] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=356) returned 1
	[0240.661] CloseHandle (hObject=0x114) returned 1
	[0240.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json")) returned 0x2020
	[0240.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json")) returned 0x2020
	[0240.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0240.661] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0240.661] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0240.662] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0240.662] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0240.663] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x164, lpOverlapped=0x0) returned 1
	[0240.663] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x170, lpOverlapped=0x0) returned 1
	[0240.664] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0240.664] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0240.665] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0240.665] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x164, lpOverlapped=0x0) returned 1
	[0240.665] FlushFileBuffers (hFile=0x114) returned 1
	[0240.911] FlushFileBuffers (hFile=0x110) returned 1
	[0241.059] CloseHandle (hObject=0x114) returned 1
	[0241.059] CloseHandle (hObject=0x110) returned 1
	[0241.060] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json")) returned 1
	[0241.060] SetEvent (hEvent=0xfc) returned 1
	[0241.061] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0241.062] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=273) returned 1
	[0241.062] CloseHandle (hObject=0x110) returned 1
	[0241.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0241.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0241.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.062] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0241.063] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.063] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.063] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0241.089] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x111, lpOverlapped=0x0) returned 1
	[0241.090] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0241.090] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0241.091] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.091] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.091] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x111, lpOverlapped=0x0) returned 1
	[0241.091] FlushFileBuffers (hFile=0x110) returned 1
	[0241.146] FlushFileBuffers (hFile=0x114) returned 1
	[0241.163] CloseHandle (hObject=0x110) returned 1
	[0241.164] CloseHandle (hObject=0x114) returned 1
	[0241.164] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json")) returned 1
	[0241.165] SetEvent (hEvent=0xfc) returned 1
	[0241.166] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0241.167] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11221) returned 1
	[0241.167] CloseHandle (hObject=0x114) returned 1
	[0241.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0241.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0241.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.168] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0241.168] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.168] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.168] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0241.232] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2bd5, lpOverlapped=0x0) returned 1
	[0241.235] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2be0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2be0, lpOverlapped=0x0) returned 1
	[0241.236] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0241.237] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.237] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.237] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2bd5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2bd5, lpOverlapped=0x0) returned 1
	[0241.237] FlushFileBuffers (hFile=0x114) returned 1
	[0241.241] FlushFileBuffers (hFile=0x110) returned 1
	[0241.243] CloseHandle (hObject=0x114) returned 1
	[0241.243] CloseHandle (hObject=0x110) returned 1
	[0241.243] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json")) returned 1
	[0241.244] SetEvent (hEvent=0xfc) returned 1
	[0241.244] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0241.245] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=728) returned 1
	[0241.245] CloseHandle (hObject=0x110) returned 1
	[0241.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json")) returned 0x2020
	[0241.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json")) returned 0x2020
	[0241.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.245] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0241.246] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.246] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.246] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0241.246] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2d8, lpOverlapped=0x0) returned 1
	[0241.248] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2e0, lpOverlapped=0x0) returned 1
	[0241.249] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0241.249] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.249] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.250] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2d8, lpOverlapped=0x0) returned 1
	[0241.250] FlushFileBuffers (hFile=0x110) returned 1
	[0241.516] FlushFileBuffers (hFile=0x114) returned 1
	[0241.518] CloseHandle (hObject=0x110) returned 1
	[0241.518] CloseHandle (hObject=0x114) returned 1
	[0241.518] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json")) returned 1
	[0241.519] SetEvent (hEvent=0xfc) returned 1
	[0241.519] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0241.522] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0241.522] CloseHandle (hObject=0x114) returned 1
	[0241.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0241.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json")) returned 0x2020
	[0241.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.522] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0241.522] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.522] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.523] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0241.523] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0241.526] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0241.527] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0241.528] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.528] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.528] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0241.528] FlushFileBuffers (hFile=0x114) returned 1
	[0241.532] FlushFileBuffers (hFile=0x110) returned 1
	[0241.535] CloseHandle (hObject=0x114) returned 1
	[0241.535] CloseHandle (hObject=0x110) returned 1
	[0241.535] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json")) returned 1
	[0241.535] SetEvent (hEvent=0xfc) returned 1
	[0241.536] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0241.536] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0241.536] CloseHandle (hObject=0x110) returned 1
	[0241.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0241.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0241.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.537] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0241.537] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.537] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.537] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0241.537] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0241.538] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0241.539] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0241.539] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.539] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.539] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0241.539] FlushFileBuffers (hFile=0x110) returned 1
	[0241.543] FlushFileBuffers (hFile=0x114) returned 1
	[0241.545] CloseHandle (hObject=0x110) returned 1
	[0241.545] CloseHandle (hObject=0x114) returned 1
	[0241.545] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json")) returned 1
	[0241.546] SetEvent (hEvent=0xfc) returned 1
	[0241.546] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0241.548] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0241.548] CloseHandle (hObject=0x114) returned 1
	[0241.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0241.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0241.548] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.548] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0241.548] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.548] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.549] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0241.549] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0241.553] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0241.554] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0241.554] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.554] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.554] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0241.554] FlushFileBuffers (hFile=0x114) returned 1
	[0241.560] FlushFileBuffers (hFile=0x110) returned 1
	[0241.562] CloseHandle (hObject=0x114) returned 1
	[0241.562] CloseHandle (hObject=0x110) returned 1
	[0241.562] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json")) returned 1
	[0241.563] SetEvent (hEvent=0xfc) returned 1
	[0241.563] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0241.565] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0241.565] CloseHandle (hObject=0x110) returned 1
	[0241.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json")) returned 0x2020
	[0241.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json")) returned 0x2020
	[0241.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.565] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0241.565] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.566] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.566] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0241.566] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0241.567] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0241.568] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0241.568] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.568] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.568] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0241.568] FlushFileBuffers (hFile=0x110) returned 1
	[0241.835] FlushFileBuffers (hFile=0x114) returned 1
	[0241.849] CloseHandle (hObject=0x110) returned 1
	[0241.869] CloseHandle (hObject=0x114) returned 1
	[0241.878] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json")) returned 1
	[0241.898] SetEvent (hEvent=0xfc) returned 1
	[0241.906] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0241.915] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0241.916] CloseHandle (hObject=0x114) returned 1
	[0241.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0241.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0241.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0241.916] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0241.916] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.916] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0241.916] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0241.917] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0241.918] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0241.919] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0241.919] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.919] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0241.919] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0241.919] FlushFileBuffers (hFile=0x114) returned 1
	[0241.925] FlushFileBuffers (hFile=0x110) returned 1
	[0241.954] CloseHandle (hObject=0x114) returned 1
	[0241.955] CloseHandle (hObject=0x110) returned 1
	[0241.955] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json")) returned 1
	[0241.972] SetEvent (hEvent=0xfc) returned 1
	[0241.989] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0241.999] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0241.999] CloseHandle (hObject=0x114) returned 1
	[0241.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0241.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0242.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.002] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0242.011] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0242.011] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0242.012] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0242.021] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0242.021] WriteFile (in: hFile=0x144, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0242.022] WriteFile (in: hFile=0x144, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0242.023] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0242.023] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0242.023] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0242.023] FlushFileBuffers (hFile=0x114) returned 1
	[0242.027] FlushFileBuffers (hFile=0x144) returned 1
	[0242.290] CloseHandle (hObject=0x114) returned 1
	[0242.291] CloseHandle (hObject=0x144) returned 1
	[0242.291] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json")) returned 1
	[0242.292] SetEvent (hEvent=0xfc) returned 1
	[0242.293] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0242.294] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0242.294] CloseHandle (hObject=0x144) returned 1
	[0242.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0242.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0242.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.295] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0242.295] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0242.295] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0242.295] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0242.392] ReadFile (in: hFile=0x144, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0242.393] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0242.395] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0242.395] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0242.395] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0242.395] WriteFile (in: hFile=0x144, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0242.395] FlushFileBuffers (hFile=0x144) returned 1
	[0242.524] FlushFileBuffers (hFile=0x114) returned 1
	[0242.682] CloseHandle (hObject=0x144) returned 1
	[0242.682] CloseHandle (hObject=0x114) returned 1
	[0242.682] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json")) returned 1
	[0242.683] SetEvent (hEvent=0xfc) returned 1
	[0242.684] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0242.686] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0242.686] CloseHandle (hObject=0x114) returned 1
	[0242.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0242.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0242.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0242.686] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0242.686] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0242.686] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0242.686] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0242.687] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0242.688] WriteFile (in: hFile=0x144, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0242.689] WriteFile (in: hFile=0x144, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0242.689] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0242.690] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0242.690] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0242.690] FlushFileBuffers (hFile=0x114) returned 1
	[0242.961] FlushFileBuffers (hFile=0x144) returned 1
	[0243.255] CloseHandle (hObject=0x114) returned 1
	[0243.376] CloseHandle (hObject=0x144) returned 1
	[0243.376] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json")) returned 1
	[0243.378] SetEvent (hEvent=0xfc) returned 1
	[0243.378] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0243.380] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0243.380] CloseHandle (hObject=0x144) returned 1
	[0243.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0243.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0243.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0243.381] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0243.381] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.381] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.381] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0243.382] ReadFile (in: hFile=0x144, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0243.383] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0243.384] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0243.384] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.384] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.384] WriteFile (in: hFile=0x144, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0243.384] FlushFileBuffers (hFile=0x144) returned 1
	[0243.388] FlushFileBuffers (hFile=0x114) returned 1
	[0243.390] CloseHandle (hObject=0x144) returned 1
	[0243.390] CloseHandle (hObject=0x114) returned 1
	[0243.390] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json")) returned 1
	[0243.391] SetEvent (hEvent=0xfc) returned 1
	[0243.391] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0243.392] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0243.392] CloseHandle (hObject=0x114) returned 1
	[0243.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0243.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0243.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0243.392] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0243.393] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.393] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.393] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x144
	[0243.393] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0243.394] WriteFile (in: hFile=0x144, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0243.395] WriteFile (in: hFile=0x144, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0243.395] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.395] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.395] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0243.395] FlushFileBuffers (hFile=0x114) returned 1
	[0243.399] FlushFileBuffers (hFile=0x144) returned 1
	[0243.402] CloseHandle (hObject=0x114) returned 1
	[0243.402] CloseHandle (hObject=0x144) returned 1
	[0243.402] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json")) returned 1
	[0243.403] SetEvent (hEvent=0xfc) returned 1
	[0243.403] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0243.404] GetFileSizeEx (in: hFile=0x144, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0243.404] CloseHandle (hObject=0x144) returned 1
	[0243.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0243.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0243.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0243.404] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x144
	[0243.404] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.404] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.404] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0243.405] ReadFile (in: hFile=0x144, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0243.406] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0243.407] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0243.407] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.407] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.407] WriteFile (in: hFile=0x144, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0243.407] FlushFileBuffers (hFile=0x144) returned 1
	[0243.411] FlushFileBuffers (hFile=0x114) returned 1
	[0243.412] CloseHandle (hObject=0x144) returned 1
	[0243.412] CloseHandle (hObject=0x114) returned 1
	[0243.412] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json")) returned 1
	[0243.413] SetEvent (hEvent=0xfc) returned 1
	[0243.413] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0243.415] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0243.415] CloseHandle (hObject=0x110) returned 1
	[0243.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0243.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0243.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0243.415] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0243.415] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.415] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.415] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0243.416] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0243.417] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0243.418] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0243.418] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.418] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.418] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0243.418] FlushFileBuffers (hFile=0x110) returned 1
	[0243.423] FlushFileBuffers (hFile=0x114) returned 1
	[0243.425] CloseHandle (hObject=0x110) returned 1
	[0243.425] CloseHandle (hObject=0x114) returned 1
	[0243.425] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json")) returned 1
	[0243.426] SetEvent (hEvent=0xfc) returned 1
	[0243.426] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0243.427] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0243.427] CloseHandle (hObject=0x114) returned 1
	[0243.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0243.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0243.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0243.427] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0243.427] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.427] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.427] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0243.428] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0243.429] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0243.436] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0243.436] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.436] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.436] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0243.436] FlushFileBuffers (hFile=0x114) returned 1
	[0243.439] FlushFileBuffers (hFile=0x110) returned 1
	[0243.441] CloseHandle (hObject=0x114) returned 1
	[0243.441] CloseHandle (hObject=0x110) returned 1
	[0243.441] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json")) returned 1
	[0243.442] SetEvent (hEvent=0xfc) returned 1
	[0243.442] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0243.443] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0243.443] CloseHandle (hObject=0x110) returned 1
	[0243.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0243.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0243.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0243.443] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0243.443] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.443] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.443] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0243.444] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0243.446] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0243.447] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0243.447] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.447] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.447] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0243.447] FlushFileBuffers (hFile=0x110) returned 1
	[0243.450] FlushFileBuffers (hFile=0x114) returned 1
	[0243.452] CloseHandle (hObject=0x110) returned 1
	[0243.452] CloseHandle (hObject=0x114) returned 1
	[0243.452] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json")) returned 1
	[0243.453] SetEvent (hEvent=0xfc) returned 1
	[0243.453] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0243.454] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=179) returned 1
	[0243.454] CloseHandle (hObject=0x114) returned 1
	[0243.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0243.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0243.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0243.454] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0243.454] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.454] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.454] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0243.455] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb3, lpOverlapped=0x0) returned 1
	[0243.456] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0243.457] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0243.457] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.457] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.457] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb3, lpOverlapped=0x0) returned 1
	[0243.457] FlushFileBuffers (hFile=0x114) returned 1
	[0243.460] FlushFileBuffers (hFile=0x110) returned 1
	[0243.466] CloseHandle (hObject=0x114) returned 1
	[0243.475] CloseHandle (hObject=0x110) returned 1
	[0243.475] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json")) returned 1
	[0243.475] SetEvent (hEvent=0xfc) returned 1
	[0243.476] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0243.477] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10089) returned 1
	[0243.477] CloseHandle (hObject=0x110) returned 1
	[0243.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0243.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0243.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0243.477] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0243.477] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.477] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.477] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0243.480] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2769, lpOverlapped=0x0) returned 1
	[0243.482] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2770, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2770, lpOverlapped=0x0) returned 1
	[0243.483] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0243.483] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.483] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.483] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2769, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2769, lpOverlapped=0x0) returned 1
	[0243.484] FlushFileBuffers (hFile=0x110) returned 1
	[0243.487] FlushFileBuffers (hFile=0x114) returned 1
	[0243.489] CloseHandle (hObject=0x110) returned 1
	[0243.489] CloseHandle (hObject=0x114) returned 1
	[0243.489] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json")) returned 1
	[0243.490] SetEvent (hEvent=0xfc) returned 1
	[0243.490] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0243.491] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3399) returned 1
	[0243.491] CloseHandle (hObject=0x114) returned 1
	[0243.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png")) returned 0x2020
	[0243.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png")) returned 0x2020
	[0243.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0243.491] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0243.491] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.491] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0243.491] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0243.492] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd47, lpOverlapped=0x0) returned 1
	[0243.495] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd50, lpOverlapped=0x0) returned 1
	[0243.495] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0243.496] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.496] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0243.496] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd47, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd47, lpOverlapped=0x0) returned 1
	[0243.496] FlushFileBuffers (hFile=0x114) returned 1
	[0243.966] FlushFileBuffers (hFile=0x110) returned 1
	[0244.009] CloseHandle (hObject=0x114) returned 1
	[0244.010] CloseHandle (hObject=0x110) returned 1
	[0244.010] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png")) returned 1
	[0244.011] SetEvent (hEvent=0xfc) returned 1
	[0244.012] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0244.013] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=92) returned 1
	[0244.013] CloseHandle (hObject=0x110) returned 1
	[0244.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html")) returned 0x2020
	[0244.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html")) returned 0x2020
	[0244.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0244.013] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0244.013] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0244.013] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0244.013] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0244.014] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x5c, lpOverlapped=0x0) returned 1
	[0244.015] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x60, lpOverlapped=0x0) returned 1
	[0244.016] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0244.016] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0244.016] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0244.016] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x5c, lpOverlapped=0x0) returned 1
	[0244.017] FlushFileBuffers (hFile=0x110) returned 1
	[0244.065] FlushFileBuffers (hFile=0x114) returned 1
	[0244.721] CloseHandle (hObject=0x110) returned 1
	[0244.722] CloseHandle (hObject=0x114) returned 1
	[0244.722] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html")) returned 1
	[0244.732] SetEvent (hEvent=0xfc) returned 1
	[0244.736] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0244.736] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=303) returned 1
	[0244.736] CloseHandle (hObject=0x114) returned 1
	[0244.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0244.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0244.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0244.737] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0244.737] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0244.737] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0244.737] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0244.741] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x12f, lpOverlapped=0x0) returned 1
	[0244.770] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x130, lpOverlapped=0x0) returned 1
	[0244.841] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0245.122] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.122] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.122] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x12f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x12f, lpOverlapped=0x0) returned 1
	[0245.123] FlushFileBuffers (hFile=0x114) returned 1
	[0245.125] FlushFileBuffers (hFile=0x110) returned 1
	[0245.136] CloseHandle (hObject=0x114) returned 1
	[0245.136] CloseHandle (hObject=0x110) returned 1
	[0245.136] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json")) returned 1
	[0245.137] SetEvent (hEvent=0xfc) returned 1
	[0245.137] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.138] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=213) returned 1
	[0245.138] CloseHandle (hObject=0x110) returned 1
	[0245.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json")) returned 0x2020
	[0245.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json")) returned 0x2020
	[0245.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.138] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.138] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.138] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.138] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0245.141] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd5, lpOverlapped=0x0) returned 1
	[0245.142] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0245.142] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0245.143] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.143] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.143] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd5, lpOverlapped=0x0) returned 1
	[0245.143] FlushFileBuffers (hFile=0x110) returned 1
	[0245.415] FlushFileBuffers (hFile=0x114) returned 1
	[0245.484] CloseHandle (hObject=0x110) returned 1
	[0245.484] CloseHandle (hObject=0x114) returned 1
	[0245.484] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json")) returned 1
	[0245.485] SetEvent (hEvent=0xfc) returned 1
	[0245.485] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.487] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=235) returned 1
	[0245.487] CloseHandle (hObject=0x114) returned 1
	[0245.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0245.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0245.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.487] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.487] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.487] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.487] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0245.490] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xeb, lpOverlapped=0x0) returned 1
	[0245.491] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0245.492] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0245.492] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.492] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.492] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xeb, lpOverlapped=0x0) returned 1
	[0245.492] FlushFileBuffers (hFile=0x114) returned 1
	[0245.499] FlushFileBuffers (hFile=0x110) returned 1
	[0245.514] CloseHandle (hObject=0x114) returned 1
	[0245.514] CloseHandle (hObject=0x110) returned 1
	[0245.514] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json")) returned 1
	[0245.515] SetEvent (hEvent=0xfc) returned 1
	[0245.515] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.516] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=215) returned 1
	[0245.516] CloseHandle (hObject=0x110) returned 1
	[0245.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json")) returned 0x2020
	[0245.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json")) returned 0x2020
	[0245.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.516] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.517] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.517] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.517] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0245.517] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd7, lpOverlapped=0x0) returned 1
	[0245.520] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0245.521] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0245.521] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.521] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.521] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd7, lpOverlapped=0x0) returned 1
	[0245.521] FlushFileBuffers (hFile=0x110) returned 1
	[0245.528] FlushFileBuffers (hFile=0x114) returned 1
	[0245.542] CloseHandle (hObject=0x110) returned 1
	[0245.542] CloseHandle (hObject=0x114) returned 1
	[0245.542] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json")) returned 1
	[0245.543] SetEvent (hEvent=0xfc) returned 1
	[0245.544] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.544] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=224) returned 1
	[0245.544] CloseHandle (hObject=0x114) returned 1
	[0245.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0245.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0245.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.545] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.545] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.545] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.545] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0245.546] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe0, lpOverlapped=0x0) returned 1
	[0245.546] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0245.547] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0245.547] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.548] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.548] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe0, lpOverlapped=0x0) returned 1
	[0245.548] FlushFileBuffers (hFile=0x114) returned 1
	[0245.552] FlushFileBuffers (hFile=0x110) returned 1
	[0245.564] CloseHandle (hObject=0x114) returned 1
	[0245.564] CloseHandle (hObject=0x110) returned 1
	[0245.564] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json")) returned 1
	[0245.565] SetEvent (hEvent=0xfc) returned 1
	[0245.565] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.566] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=229) returned 1
	[0245.566] CloseHandle (hObject=0x110) returned 1
	[0245.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0245.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0245.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.566] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.566] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.566] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.567] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0245.582] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe5, lpOverlapped=0x0) returned 1
	[0245.583] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0245.584] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0245.585] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.585] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.585] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe5, lpOverlapped=0x0) returned 1
	[0245.585] FlushFileBuffers (hFile=0x110) returned 1
	[0245.591] FlushFileBuffers (hFile=0x114) returned 1
	[0245.611] CloseHandle (hObject=0x110) returned 1
	[0245.612] CloseHandle (hObject=0x114) returned 1
	[0245.612] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json")) returned 1
	[0245.613] SetEvent (hEvent=0xfc) returned 1
	[0245.613] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.614] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=221) returned 1
	[0245.614] CloseHandle (hObject=0x114) returned 1
	[0245.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0245.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0245.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.614] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.614] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.614] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.614] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0245.626] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xdd, lpOverlapped=0x0) returned 1
	[0245.627] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0245.628] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0245.628] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.628] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.628] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xdd, lpOverlapped=0x0) returned 1
	[0245.628] FlushFileBuffers (hFile=0x114) returned 1
	[0245.633] FlushFileBuffers (hFile=0x110) returned 1
	[0245.648] CloseHandle (hObject=0x114) returned 1
	[0245.648] CloseHandle (hObject=0x110) returned 1
	[0245.648] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json")) returned 1
	[0245.649] SetEvent (hEvent=0xfc) returned 1
	[0245.650] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.650] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=209) returned 1
	[0245.650] CloseHandle (hObject=0x110) returned 1
	[0245.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0245.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0245.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.651] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.651] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.651] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.651] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0245.657] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd1, lpOverlapped=0x0) returned 1
	[0245.658] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0245.659] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0245.659] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.659] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.659] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd1, lpOverlapped=0x0) returned 1
	[0245.659] FlushFileBuffers (hFile=0x110) returned 1
	[0245.682] FlushFileBuffers (hFile=0x114) returned 1
	[0245.847] CloseHandle (hObject=0x110) returned 1
	[0245.848] CloseHandle (hObject=0x114) returned 1
	[0245.856] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json")) returned 1
	[0245.858] SetEvent (hEvent=0xfc) returned 1
	[0245.869] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.870] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4355) returned 1
	[0245.870] CloseHandle (hObject=0x114) returned 1
	[0245.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js")) returned 0x2020
	[0245.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js")) returned 0x2020
	[0245.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.871] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.871] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.871] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.871] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0245.871] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1103, lpOverlapped=0x0) returned 1
	[0245.873] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1110, lpOverlapped=0x0) returned 1
	[0245.874] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0245.874] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.874] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.874] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1103, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1103, lpOverlapped=0x0) returned 1
	[0245.875] FlushFileBuffers (hFile=0x114) returned 1
	[0245.881] FlushFileBuffers (hFile=0x110) returned 1
	[0245.886] CloseHandle (hObject=0x114) returned 1
	[0245.888] CloseHandle (hObject=0x110) returned 1
	[0245.888] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js")) returned 1
	[0245.889] SetEvent (hEvent=0xfc) returned 1
	[0245.889] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.890] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23404) returned 1
	[0245.890] CloseHandle (hObject=0x110) returned 1
	[0245.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js")) returned 0x2020
	[0245.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js")) returned 0x2020
	[0245.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.890] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.890] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.890] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.890] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0245.891] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x5b6c, lpOverlapped=0x0) returned 1
	[0245.897] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5b70, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x5b70, lpOverlapped=0x0) returned 1
	[0245.899] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0245.899] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.899] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.899] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5b6c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x5b6c, lpOverlapped=0x0) returned 1
	[0245.899] FlushFileBuffers (hFile=0x110) returned 1
	[0245.906] FlushFileBuffers (hFile=0x114) returned 1
	[0245.908] CloseHandle (hObject=0x110) returned 1
	[0245.909] CloseHandle (hObject=0x114) returned 1
	[0245.909] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js")) returned 1
	[0245.910] SetEvent (hEvent=0xfc) returned 1
	[0245.910] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.910] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=224) returned 1
	[0245.911] CloseHandle (hObject=0x114) returned 1
	[0245.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js")) returned 0x2020
	[0245.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js")) returned 0x2020
	[0245.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.911] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.911] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.911] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.911] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0245.912] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe0, lpOverlapped=0x0) returned 1
	[0245.912] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0245.913] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0245.913] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.913] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.914] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe0, lpOverlapped=0x0) returned 1
	[0245.914] FlushFileBuffers (hFile=0x114) returned 1
	[0245.917] FlushFileBuffers (hFile=0x110) returned 1
	[0245.936] CloseHandle (hObject=0x114) returned 1
	[0245.936] CloseHandle (hObject=0x110) returned 1
	[0245.936] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js")) returned 1
	[0245.937] SetEvent (hEvent=0xfc) returned 1
	[0245.937] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.937] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=259) returned 1
	[0245.938] CloseHandle (hObject=0x110) returned 1
	[0245.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json")) returned 0x2020
	[0245.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json")) returned 0x2020
	[0245.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.938] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.938] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.938] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.938] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0245.939] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x103, lpOverlapped=0x0) returned 1
	[0245.940] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0245.940] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0245.941] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.941] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.941] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x103, lpOverlapped=0x0) returned 1
	[0245.941] FlushFileBuffers (hFile=0x110) returned 1
	[0245.946] FlushFileBuffers (hFile=0x114) returned 1
	[0245.955] CloseHandle (hObject=0x110) returned 1
	[0245.955] CloseHandle (hObject=0x114) returned 1
	[0245.956] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json")) returned 1
	[0245.956] SetEvent (hEvent=0xfc) returned 1
	[0245.957] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.957] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=167) returned 1
	[0245.957] CloseHandle (hObject=0x114) returned 1
	[0245.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json")) returned 0x2020
	[0245.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json")) returned 0x2020
	[0245.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.958] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.958] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.958] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.958] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0245.959] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xa7, lpOverlapped=0x0) returned 1
	[0245.959] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb0, lpOverlapped=0x0) returned 1
	[0245.960] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0245.960] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.960] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.960] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xa7, lpOverlapped=0x0) returned 1
	[0245.961] FlushFileBuffers (hFile=0x114) returned 1
	[0245.964] FlushFileBuffers (hFile=0x110) returned 1
	[0245.972] CloseHandle (hObject=0x114) returned 1
	[0245.972] CloseHandle (hObject=0x110) returned 1
	[0245.974] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json")) returned 1
	[0245.974] SetEvent (hEvent=0xfc) returned 1
	[0245.974] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.975] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=331) returned 1
	[0245.975] CloseHandle (hObject=0x110) returned 1
	[0245.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json")) returned 0x2020
	[0245.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json")) returned 0x2020
	[0245.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.976] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0245.976] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.976] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.976] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0245.978] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x14b, lpOverlapped=0x0) returned 1
	[0245.979] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x150, lpOverlapped=0x0) returned 1
	[0245.979] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0245.980] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.980] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.980] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x14b, lpOverlapped=0x0) returned 1
	[0245.980] FlushFileBuffers (hFile=0x110) returned 1
	[0245.983] FlushFileBuffers (hFile=0x114) returned 1
	[0245.985] CloseHandle (hObject=0x110) returned 1
	[0245.985] CloseHandle (hObject=0x114) returned 1
	[0245.985] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json")) returned 1
	[0245.986] SetEvent (hEvent=0xfc) returned 1
	[0245.986] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.987] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=207) returned 1
	[0245.987] CloseHandle (hObject=0x114) returned 1
	[0245.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0245.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json")) returned 0x2020
	[0245.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0245.987] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0245.987] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.987] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0245.987] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0245.988] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xcf, lpOverlapped=0x0) returned 1
	[0245.989] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0245.990] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0245.990] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.990] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0245.990] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xcf, lpOverlapped=0x0) returned 1
	[0245.990] FlushFileBuffers (hFile=0x114) returned 1
	[0246.052] FlushFileBuffers (hFile=0x110) returned 1
	[0246.056] CloseHandle (hObject=0x114) returned 1
	[0246.056] CloseHandle (hObject=0x110) returned 1
	[0246.056] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json")) returned 1
	[0246.057] SetEvent (hEvent=0xfc) returned 1
	[0246.057] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.058] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=172) returned 1
	[0246.058] CloseHandle (hObject=0x110) returned 1
	[0246.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json")) returned 0x2020
	[0246.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json")) returned 0x2020
	[0246.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.059] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.059] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.059] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.059] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.060] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xac, lpOverlapped=0x0) returned 1
	[0246.060] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb0, lpOverlapped=0x0) returned 1
	[0246.061] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.061] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.061] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.062] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xac, lpOverlapped=0x0) returned 1
	[0246.062] FlushFileBuffers (hFile=0x110) returned 1
	[0246.065] FlushFileBuffers (hFile=0x114) returned 1
	[0246.067] CloseHandle (hObject=0x110) returned 1
	[0246.067] CloseHandle (hObject=0x114) returned 1
	[0246.067] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json")) returned 1
	[0246.068] SetEvent (hEvent=0xfc) returned 1
	[0246.068] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.069] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=193) returned 1
	[0246.069] CloseHandle (hObject=0x114) returned 1
	[0246.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json")) returned 0x2020
	[0246.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json")) returned 0x2020
	[0246.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.069] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.069] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.069] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.069] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.070] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc1, lpOverlapped=0x0) returned 1
	[0246.070] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0246.071] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.071] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.071] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.072] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc1, lpOverlapped=0x0) returned 1
	[0246.072] FlushFileBuffers (hFile=0x114) returned 1
	[0246.075] FlushFileBuffers (hFile=0x110) returned 1
	[0246.077] CloseHandle (hObject=0x114) returned 1
	[0246.077] CloseHandle (hObject=0x110) returned 1
	[0246.077] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json")) returned 1
	[0246.078] SetEvent (hEvent=0xfc) returned 1
	[0246.078] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.078] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=298) returned 1
	[0246.078] CloseHandle (hObject=0x110) returned 1
	[0246.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json")) returned 0x2020
	[0246.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json")) returned 0x2020
	[0246.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.079] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.079] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.079] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.079] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.079] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x12a, lpOverlapped=0x0) returned 1
	[0246.083] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x130, lpOverlapped=0x0) returned 1
	[0246.084] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.084] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.084] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.084] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x12a, lpOverlapped=0x0) returned 1
	[0246.084] FlushFileBuffers (hFile=0x110) returned 1
	[0246.086] FlushFileBuffers (hFile=0x114) returned 1
	[0246.088] CloseHandle (hObject=0x110) returned 1
	[0246.088] CloseHandle (hObject=0x114) returned 1
	[0246.088] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json")) returned 1
	[0246.089] SetEvent (hEvent=0xfc) returned 1
	[0246.089] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.090] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=178) returned 1
	[0246.090] CloseHandle (hObject=0x114) returned 1
	[0246.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json")) returned 0x2020
	[0246.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json")) returned 0x2020
	[0246.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.090] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.090] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.090] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.090] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.091] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb2, lpOverlapped=0x0) returned 1
	[0246.091] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0246.092] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.092] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.092] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.092] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb2, lpOverlapped=0x0) returned 1
	[0246.092] FlushFileBuffers (hFile=0x114) returned 1
	[0246.095] FlushFileBuffers (hFile=0x110) returned 1
	[0246.097] CloseHandle (hObject=0x114) returned 1
	[0246.097] CloseHandle (hObject=0x110) returned 1
	[0246.097] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json")) returned 1
	[0246.098] SetEvent (hEvent=0xfc) returned 1
	[0246.098] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.099] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=265) returned 1
	[0246.099] CloseHandle (hObject=0x110) returned 1
	[0246.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json")) returned 0x2020
	[0246.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json")) returned 0x2020
	[0246.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.099] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.099] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.099] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.099] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.100] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x109, lpOverlapped=0x0) returned 1
	[0246.101] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0246.102] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.102] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.102] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.102] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x109, lpOverlapped=0x0) returned 1
	[0246.102] FlushFileBuffers (hFile=0x110) returned 1
	[0246.105] FlushFileBuffers (hFile=0x114) returned 1
	[0246.107] CloseHandle (hObject=0x110) returned 1
	[0246.107] CloseHandle (hObject=0x114) returned 1
	[0246.107] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json")) returned 1
	[0246.108] SetEvent (hEvent=0xfc) returned 1
	[0246.108] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.108] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=204) returned 1
	[0246.108] CloseHandle (hObject=0x114) returned 1
	[0246.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json")) returned 0x2020
	[0246.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json")) returned 0x2020
	[0246.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.109] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.109] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.109] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.109] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.110] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xcc, lpOverlapped=0x0) returned 1
	[0246.110] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0246.111] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.111] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.111] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.111] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xcc, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xcc, lpOverlapped=0x0) returned 1
	[0246.112] FlushFileBuffers (hFile=0x114) returned 1
	[0246.115] FlushFileBuffers (hFile=0x110) returned 1
	[0246.116] CloseHandle (hObject=0x114) returned 1
	[0246.116] CloseHandle (hObject=0x110) returned 1
	[0246.116] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json")) returned 1
	[0246.117] SetEvent (hEvent=0xfc) returned 1
	[0246.117] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.118] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=227) returned 1
	[0246.118] CloseHandle (hObject=0x110) returned 1
	[0246.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json")) returned 0x2020
	[0246.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json")) returned 0x2020
	[0246.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.118] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.118] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.118] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.118] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.119] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe3, lpOverlapped=0x0) returned 1
	[0246.120] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0246.121] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.121] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.121] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.121] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe3, lpOverlapped=0x0) returned 1
	[0246.121] FlushFileBuffers (hFile=0x110) returned 1
	[0246.124] FlushFileBuffers (hFile=0x114) returned 1
	[0246.125] CloseHandle (hObject=0x110) returned 1
	[0246.125] CloseHandle (hObject=0x114) returned 1
	[0246.125] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json")) returned 1
	[0246.126] SetEvent (hEvent=0xfc) returned 1
	[0246.126] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.129] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=212) returned 1
	[0246.129] CloseHandle (hObject=0x114) returned 1
	[0246.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json")) returned 0x2020
	[0246.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json")) returned 0x2020
	[0246.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.129] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.129] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.129] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.129] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.130] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd4, lpOverlapped=0x0) returned 1
	[0246.131] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0246.132] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.132] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.132] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.132] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd4, lpOverlapped=0x0) returned 1
	[0246.132] FlushFileBuffers (hFile=0x114) returned 1
	[0246.135] FlushFileBuffers (hFile=0x110) returned 1
	[0246.137] CloseHandle (hObject=0x114) returned 1
	[0246.137] CloseHandle (hObject=0x110) returned 1
	[0246.137] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json")) returned 1
	[0246.138] SetEvent (hEvent=0xfc) returned 1
	[0246.138] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.138] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=152) returned 1
	[0246.138] CloseHandle (hObject=0x110) returned 1
	[0246.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json")) returned 0x2020
	[0246.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json")) returned 0x2020
	[0246.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.139] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.139] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.139] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.139] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.139] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x98, lpOverlapped=0x0) returned 1
	[0246.140] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xa0, lpOverlapped=0x0) returned 1
	[0246.141] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.141] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.141] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.141] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x98, lpOverlapped=0x0) returned 1
	[0246.141] FlushFileBuffers (hFile=0x110) returned 1
	[0246.144] FlushFileBuffers (hFile=0x114) returned 1
	[0246.149] CloseHandle (hObject=0x110) returned 1
	[0246.149] CloseHandle (hObject=0x114) returned 1
	[0246.149] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json")) returned 1
	[0246.149] SetEvent (hEvent=0xfc) returned 1
	[0246.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.150] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=255) returned 1
	[0246.150] CloseHandle (hObject=0x114) returned 1
	[0246.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json")) returned 0x2020
	[0246.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json")) returned 0x2020
	[0246.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.151] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.151] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.151] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.151] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xff, lpOverlapped=0x0) returned 1
	[0246.152] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0246.153] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.153] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.153] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.153] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xff, lpOverlapped=0x0) returned 1
	[0246.153] FlushFileBuffers (hFile=0x114) returned 1
	[0246.157] FlushFileBuffers (hFile=0x110) returned 1
	[0246.175] CloseHandle (hObject=0x114) returned 1
	[0246.175] CloseHandle (hObject=0x110) returned 1
	[0246.175] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json")) returned 1
	[0246.176] SetEvent (hEvent=0xfc) returned 1
	[0246.176] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.177] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=183) returned 1
	[0246.177] CloseHandle (hObject=0x110) returned 1
	[0246.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0246.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0246.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.177] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.177] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.177] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.177] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.178] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb7, lpOverlapped=0x0) returned 1
	[0246.179] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0246.179] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.180] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.180] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.180] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb7, lpOverlapped=0x0) returned 1
	[0246.180] FlushFileBuffers (hFile=0x110) returned 1
	[0246.183] FlushFileBuffers (hFile=0x114) returned 1
	[0246.185] CloseHandle (hObject=0x110) returned 1
	[0246.185] CloseHandle (hObject=0x114) returned 1
	[0246.185] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json")) returned 1
	[0246.185] SetEvent (hEvent=0xfc) returned 1
	[0246.186] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.186] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=199) returned 1
	[0246.186] CloseHandle (hObject=0x114) returned 1
	[0246.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0246.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0246.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.187] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.187] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.187] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.187] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.187] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc7, lpOverlapped=0x0) returned 1
	[0246.188] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0246.189] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.189] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.189] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.189] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc7, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc7, lpOverlapped=0x0) returned 1
	[0246.189] FlushFileBuffers (hFile=0x114) returned 1
	[0246.192] FlushFileBuffers (hFile=0x110) returned 1
	[0246.194] CloseHandle (hObject=0x114) returned 1
	[0246.194] CloseHandle (hObject=0x110) returned 1
	[0246.194] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json")) returned 1
	[0246.195] SetEvent (hEvent=0xfc) returned 1
	[0246.195] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.196] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=187) returned 1
	[0246.196] CloseHandle (hObject=0x110) returned 1
	[0246.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0246.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0246.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.196] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.196] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.196] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.196] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.197] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xbb, lpOverlapped=0x0) returned 1
	[0246.198] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0246.199] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.199] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.199] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.199] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xbb, lpOverlapped=0x0) returned 1
	[0246.199] FlushFileBuffers (hFile=0x110) returned 1
	[0246.202] FlushFileBuffers (hFile=0x114) returned 1
	[0246.204] CloseHandle (hObject=0x110) returned 1
	[0246.204] CloseHandle (hObject=0x114) returned 1
	[0246.204] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json")) returned 1
	[0246.205] SetEvent (hEvent=0xfc) returned 1
	[0246.205] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.205] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=210) returned 1
	[0246.205] CloseHandle (hObject=0x114) returned 1
	[0246.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json")) returned 0x2020
	[0246.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json")) returned 0x2020
	[0246.206] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.206] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.206] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.206] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.206] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.207] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd2, lpOverlapped=0x0) returned 1
	[0246.208] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0246.208] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.209] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.209] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.209] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd2, lpOverlapped=0x0) returned 1
	[0246.209] FlushFileBuffers (hFile=0x114) returned 1
	[0246.220] FlushFileBuffers (hFile=0x110) returned 1
	[0246.222] CloseHandle (hObject=0x114) returned 1
	[0246.222] CloseHandle (hObject=0x110) returned 1
	[0246.222] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json")) returned 1
	[0246.223] SetEvent (hEvent=0xfc) returned 1
	[0246.223] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.224] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=172) returned 1
	[0246.224] CloseHandle (hObject=0x110) returned 1
	[0246.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json")) returned 0x2020
	[0246.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json")) returned 0x2020
	[0246.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.224] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.225] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.225] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.225] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.225] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xac, lpOverlapped=0x0) returned 1
	[0246.226] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb0, lpOverlapped=0x0) returned 1
	[0246.234] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.234] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.234] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.235] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xac, lpOverlapped=0x0) returned 1
	[0246.235] FlushFileBuffers (hFile=0x110) returned 1
	[0246.239] FlushFileBuffers (hFile=0x114) returned 1
	[0246.247] CloseHandle (hObject=0x110) returned 1
	[0246.247] CloseHandle (hObject=0x114) returned 1
	[0246.252] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json")) returned 1
	[0246.270] SetEvent (hEvent=0xfc) returned 1
	[0246.277] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.283] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=286) returned 1
	[0246.283] CloseHandle (hObject=0x114) returned 1
	[0246.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json")) returned 0x2020
	[0246.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json")) returned 0x2020
	[0246.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.284] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.284] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.284] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.284] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.285] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x11e, lpOverlapped=0x0) returned 1
	[0246.285] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0246.286] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.287] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.287] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.287] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x11e, lpOverlapped=0x0) returned 1
	[0246.287] FlushFileBuffers (hFile=0x114) returned 1
	[0246.289] FlushFileBuffers (hFile=0x110) returned 1
	[0246.291] CloseHandle (hObject=0x114) returned 1
	[0246.291] CloseHandle (hObject=0x110) returned 1
	[0246.291] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json")) returned 1
	[0246.292] SetEvent (hEvent=0xfc) returned 1
	[0246.292] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.293] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=318) returned 1
	[0246.293] CloseHandle (hObject=0x110) returned 1
	[0246.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0246.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0246.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.293] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.293] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.293] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.293] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.294] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x13e, lpOverlapped=0x0) returned 1
	[0246.294] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x140, lpOverlapped=0x0) returned 1
	[0246.295] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.295] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.296] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.296] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x13e, lpOverlapped=0x0) returned 1
	[0246.296] FlushFileBuffers (hFile=0x110) returned 1
	[0246.299] FlushFileBuffers (hFile=0x114) returned 1
	[0246.300] CloseHandle (hObject=0x110) returned 1
	[0246.300] CloseHandle (hObject=0x114) returned 1
	[0246.300] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json")) returned 1
	[0246.301] SetEvent (hEvent=0xfc) returned 1
	[0246.301] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.302] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=200) returned 1
	[0246.302] CloseHandle (hObject=0x114) returned 1
	[0246.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json")) returned 0x2020
	[0246.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json")) returned 0x2020
	[0246.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.302] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.302] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.302] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.303] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.303] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc8, lpOverlapped=0x0) returned 1
	[0246.304] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0246.305] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.305] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.305] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.305] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc8, lpOverlapped=0x0) returned 1
	[0246.305] FlushFileBuffers (hFile=0x114) returned 1
	[0246.308] FlushFileBuffers (hFile=0x110) returned 1
	[0246.310] CloseHandle (hObject=0x114) returned 1
	[0246.312] CloseHandle (hObject=0x110) returned 1
	[0246.312] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json")) returned 1
	[0246.313] SetEvent (hEvent=0xfc) returned 1
	[0246.313] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.314] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=198) returned 1
	[0246.314] CloseHandle (hObject=0x110) returned 1
	[0246.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0246.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0246.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.314] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.314] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.314] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.314] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.315] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc6, lpOverlapped=0x0) returned 1
	[0246.316] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0246.317] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.317] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.317] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.317] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc6, lpOverlapped=0x0) returned 1
	[0246.317] FlushFileBuffers (hFile=0x110) returned 1
	[0246.321] FlushFileBuffers (hFile=0x114) returned 1
	[0246.323] CloseHandle (hObject=0x110) returned 1
	[0246.323] CloseHandle (hObject=0x114) returned 1
	[0246.323] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json")) returned 1
	[0246.324] SetEvent (hEvent=0xfc) returned 1
	[0246.324] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.325] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=665) returned 1
	[0246.325] CloseHandle (hObject=0x114) returned 1
	[0246.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json")) returned 0x2020
	[0246.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json")) returned 0x2020
	[0246.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.325] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.325] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.325] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.325] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.326] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x299, lpOverlapped=0x0) returned 1
	[0246.328] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2a0, lpOverlapped=0x0) returned 1
	[0246.329] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.329] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.329] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.329] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x299, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x299, lpOverlapped=0x0) returned 1
	[0246.330] FlushFileBuffers (hFile=0x114) returned 1
	[0246.332] FlushFileBuffers (hFile=0x110) returned 1
	[0246.334] CloseHandle (hObject=0x114) returned 1
	[0246.334] CloseHandle (hObject=0x110) returned 1
	[0246.334] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json")) returned 1
	[0246.335] SetEvent (hEvent=0xfc) returned 1
	[0246.335] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.336] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=187) returned 1
	[0246.336] CloseHandle (hObject=0x110) returned 1
	[0246.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json")) returned 0x2020
	[0246.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json")) returned 0x2020
	[0246.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.336] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.337] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.337] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.337] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.337] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xbb, lpOverlapped=0x0) returned 1
	[0246.338] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0246.339] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.339] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.339] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.339] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xbb, lpOverlapped=0x0) returned 1
	[0246.340] FlushFileBuffers (hFile=0x110) returned 1
	[0246.415] FlushFileBuffers (hFile=0x114) returned 1
	[0246.427] CloseHandle (hObject=0x110) returned 1
	[0246.427] CloseHandle (hObject=0x114) returned 1
	[0246.427] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json")) returned 1
	[0246.428] SetEvent (hEvent=0xfc) returned 1
	[0246.429] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.430] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=182) returned 1
	[0246.430] CloseHandle (hObject=0x114) returned 1
	[0246.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json")) returned 0x2020
	[0246.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json")) returned 0x2020
	[0246.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.431] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.431] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.431] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.431] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.431] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb6, lpOverlapped=0x0) returned 1
	[0246.432] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0246.433] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.433] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.433] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.433] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb6, lpOverlapped=0x0) returned 1
	[0246.434] FlushFileBuffers (hFile=0x114) returned 1
	[0246.450] FlushFileBuffers (hFile=0x110) returned 1
	[0246.467] CloseHandle (hObject=0x114) returned 1
	[0246.468] CloseHandle (hObject=0x110) returned 1
	[0246.468] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json")) returned 1
	[0246.469] SetEvent (hEvent=0xfc) returned 1
	[0246.470] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.470] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=251) returned 1
	[0246.470] CloseHandle (hObject=0x110) returned 1
	[0246.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0246.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0246.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.471] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.471] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.471] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.471] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.472] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xfb, lpOverlapped=0x0) returned 1
	[0246.473] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0246.473] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.474] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.474] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.474] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xfb, lpOverlapped=0x0) returned 1
	[0246.474] FlushFileBuffers (hFile=0x110) returned 1
	[0246.495] FlushFileBuffers (hFile=0x114) returned 1
	[0246.504] CloseHandle (hObject=0x110) returned 1
	[0246.504] CloseHandle (hObject=0x114) returned 1
	[0246.504] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json")) returned 1
	[0246.505] SetEvent (hEvent=0xfc) returned 1
	[0246.506] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.507] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=607) returned 1
	[0246.507] CloseHandle (hObject=0x114) returned 1
	[0246.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json")) returned 0x2020
	[0246.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json")) returned 0x2020
	[0246.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.508] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.508] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.508] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.508] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.509] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x25f, lpOverlapped=0x0) returned 1
	[0246.511] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x260, lpOverlapped=0x0) returned 1
	[0246.517] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.517] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.517] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.517] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x25f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x25f, lpOverlapped=0x0) returned 1
	[0246.517] FlushFileBuffers (hFile=0x114) returned 1
	[0246.519] FlushFileBuffers (hFile=0x110) returned 1
	[0246.521] CloseHandle (hObject=0x114) returned 1
	[0246.521] CloseHandle (hObject=0x110) returned 1
	[0246.521] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json")) returned 1
	[0246.523] SetEvent (hEvent=0xfc) returned 1
	[0246.523] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.524] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=327) returned 1
	[0246.524] CloseHandle (hObject=0x110) returned 1
	[0246.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json")) returned 0x2020
	[0246.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json")) returned 0x2020
	[0246.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.524] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.524] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.524] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.524] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.525] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x147, lpOverlapped=0x0) returned 1
	[0246.526] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x150, lpOverlapped=0x0) returned 1
	[0246.527] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.527] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.527] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.527] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x147, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x147, lpOverlapped=0x0) returned 1
	[0246.527] FlushFileBuffers (hFile=0x110) returned 1
	[0246.530] FlushFileBuffers (hFile=0x114) returned 1
	[0246.533] CloseHandle (hObject=0x110) returned 1
	[0246.533] CloseHandle (hObject=0x114) returned 1
	[0246.533] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json")) returned 1
	[0246.534] SetEvent (hEvent=0xfc) returned 1
	[0246.534] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.535] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=450) returned 1
	[0246.535] CloseHandle (hObject=0x114) returned 1
	[0246.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json")) returned 0x2020
	[0246.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json")) returned 0x2020
	[0246.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.535] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.535] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.535] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.536] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.536] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1c2, lpOverlapped=0x0) returned 1
	[0246.539] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1d0, lpOverlapped=0x0) returned 1
	[0246.540] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.540] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.540] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.540] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1c2, lpOverlapped=0x0) returned 1
	[0246.540] FlushFileBuffers (hFile=0x114) returned 1
	[0246.553] FlushFileBuffers (hFile=0x110) returned 1
	[0246.555] CloseHandle (hObject=0x114) returned 1
	[0246.555] CloseHandle (hObject=0x110) returned 1
	[0246.555] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json")) returned 1
	[0246.556] SetEvent (hEvent=0xfc) returned 1
	[0246.556] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.556] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=213) returned 1
	[0246.556] CloseHandle (hObject=0x110) returned 1
	[0246.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0246.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0246.557] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.557] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.557] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.557] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.557] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.557] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd5, lpOverlapped=0x0) returned 1
	[0246.558] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0246.559] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.559] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.559] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.559] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd5, lpOverlapped=0x0) returned 1
	[0246.560] FlushFileBuffers (hFile=0x110) returned 1
	[0246.563] FlushFileBuffers (hFile=0x114) returned 1
	[0246.565] CloseHandle (hObject=0x110) returned 1
	[0246.566] CloseHandle (hObject=0x114) returned 1
	[0246.566] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json")) returned 1
	[0246.566] SetEvent (hEvent=0xfc) returned 1
	[0246.567] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.567] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=198) returned 1
	[0246.567] CloseHandle (hObject=0x114) returned 1
	[0246.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0246.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0246.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.567] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.568] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.568] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.568] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.568] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc6, lpOverlapped=0x0) returned 1
	[0246.569] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0246.570] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.570] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.570] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.570] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc6, lpOverlapped=0x0) returned 1
	[0246.570] FlushFileBuffers (hFile=0x114) returned 1
	[0246.573] FlushFileBuffers (hFile=0x110) returned 1
	[0246.575] CloseHandle (hObject=0x114) returned 1
	[0246.575] CloseHandle (hObject=0x110) returned 1
	[0246.575] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json")) returned 1
	[0246.576] SetEvent (hEvent=0xfc) returned 1
	[0246.576] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.577] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=387) returned 1
	[0246.577] CloseHandle (hObject=0x110) returned 1
	[0246.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json")) returned 0x2020
	[0246.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json")) returned 0x2020
	[0246.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.577] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.577] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.577] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.577] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.578] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x183, lpOverlapped=0x0) returned 1
	[0246.580] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x190, lpOverlapped=0x0) returned 1
	[0246.581] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.581] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.581] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.581] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x183, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x183, lpOverlapped=0x0) returned 1
	[0246.581] FlushFileBuffers (hFile=0x110) returned 1
	[0246.584] FlushFileBuffers (hFile=0x114) returned 1
	[0246.586] CloseHandle (hObject=0x110) returned 1
	[0246.586] CloseHandle (hObject=0x114) returned 1
	[0246.586] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json")) returned 1
	[0246.587] SetEvent (hEvent=0xfc) returned 1
	[0246.587] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.588] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=451) returned 1
	[0246.588] CloseHandle (hObject=0x114) returned 1
	[0246.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json")) returned 0x2020
	[0246.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json")) returned 0x2020
	[0246.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.588] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.588] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.588] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.588] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.589] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1c3, lpOverlapped=0x0) returned 1
	[0246.590] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1d0, lpOverlapped=0x0) returned 1
	[0246.590] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.591] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.591] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.591] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1c3, lpOverlapped=0x0) returned 1
	[0246.591] FlushFileBuffers (hFile=0x114) returned 1
	[0246.593] FlushFileBuffers (hFile=0x110) returned 1
	[0246.595] CloseHandle (hObject=0x114) returned 1
	[0246.595] CloseHandle (hObject=0x110) returned 1
	[0246.595] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json")) returned 1
	[0246.596] SetEvent (hEvent=0xfc) returned 1
	[0246.596] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.597] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=300) returned 1
	[0246.597] CloseHandle (hObject=0x110) returned 1
	[0246.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json")) returned 0x2020
	[0246.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json")) returned 0x2020
	[0246.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.597] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.597] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.597] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.598] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.598] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x12c, lpOverlapped=0x0) returned 1
	[0246.599] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x130, lpOverlapped=0x0) returned 1
	[0246.600] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.600] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.600] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.600] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x12c, lpOverlapped=0x0) returned 1
	[0246.600] FlushFileBuffers (hFile=0x110) returned 1
	[0246.605] FlushFileBuffers (hFile=0x114) returned 1
	[0246.607] CloseHandle (hObject=0x110) returned 1
	[0246.607] CloseHandle (hObject=0x114) returned 1
	[0246.607] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json")) returned 1
	[0246.608] SetEvent (hEvent=0xfc) returned 1
	[0246.608] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.609] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=203) returned 1
	[0246.609] CloseHandle (hObject=0x114) returned 1
	[0246.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json")) returned 0x2020
	[0246.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json")) returned 0x2020
	[0246.609] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.609] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.609] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.609] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.609] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.610] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xcb, lpOverlapped=0x0) returned 1
	[0246.611] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0246.611] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.612] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.612] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.612] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xcb, lpOverlapped=0x0) returned 1
	[0246.612] FlushFileBuffers (hFile=0x114) returned 1
	[0246.614] FlushFileBuffers (hFile=0x110) returned 1
	[0246.616] CloseHandle (hObject=0x114) returned 1
	[0246.616] CloseHandle (hObject=0x110) returned 1
	[0246.616] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json")) returned 1
	[0246.617] SetEvent (hEvent=0xfc) returned 1
	[0246.617] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.618] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=523) returned 1
	[0246.618] CloseHandle (hObject=0x110) returned 1
	[0246.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json")) returned 0x2020
	[0246.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json")) returned 0x2020
	[0246.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.618] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0246.618] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.618] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.618] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0246.619] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x20b, lpOverlapped=0x0) returned 1
	[0246.620] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x210, lpOverlapped=0x0) returned 1
	[0246.620] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.621] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.621] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.621] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x20b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x20b, lpOverlapped=0x0) returned 1
	[0246.621] FlushFileBuffers (hFile=0x110) returned 1
	[0246.626] FlushFileBuffers (hFile=0x114) returned 1
	[0246.628] CloseHandle (hObject=0x110) returned 1
	[0246.628] CloseHandle (hObject=0x114) returned 1
	[0246.628] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json")) returned 1
	[0246.629] SetEvent (hEvent=0xfc) returned 1
	[0246.629] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.630] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=177) returned 1
	[0246.630] CloseHandle (hObject=0x114) returned 1
	[0246.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0246.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0246.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.630] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.630] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.630] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.630] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0246.631] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb1, lpOverlapped=0x0) returned 1
	[0246.632] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0246.633] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.633] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.633] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.633] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb1, lpOverlapped=0x0) returned 1
	[0246.633] FlushFileBuffers (hFile=0x114) returned 1
	[0246.768] FlushFileBuffers (hFile=0x110) returned 1
	[0246.846] CloseHandle (hObject=0x114) returned 1
	[0246.846] CloseHandle (hObject=0x110) returned 1
	[0246.846] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json")) returned 1
	[0246.847] SetEvent (hEvent=0xfc) returned 1
	[0246.848] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.849] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=180) returned 1
	[0246.849] CloseHandle (hObject=0x114) returned 1
	[0246.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0246.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0246.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0246.849] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0246.849] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.850] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0246.850] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0246.850] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb4, lpOverlapped=0x0) returned 1
	[0246.851] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0246.852] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0246.852] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.852] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0246.852] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb4, lpOverlapped=0x0) returned 1
	[0246.852] FlushFileBuffers (hFile=0x114) returned 1
	[0246.999] FlushFileBuffers (hFile=0x254) returned 1
	[0247.022] CloseHandle (hObject=0x114) returned 1
	[0247.024] CloseHandle (hObject=0x254) returned 1
	[0247.024] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json")) returned 1
	[0247.025] SetEvent (hEvent=0xfc) returned 1
	[0247.026] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.026] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=198) returned 1
	[0247.027] CloseHandle (hObject=0x254) returned 1
	[0247.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0247.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0247.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.027] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.027] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.027] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.027] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0247.028] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc6, lpOverlapped=0x0) returned 1
	[0247.029] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0247.029] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.030] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.030] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.030] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc6, lpOverlapped=0x0) returned 1
	[0247.030] FlushFileBuffers (hFile=0x254) returned 1
	[0247.035] FlushFileBuffers (hFile=0x114) returned 1
	[0247.045] CloseHandle (hObject=0x254) returned 1
	[0247.048] CloseHandle (hObject=0x114) returned 1
	[0247.048] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json")) returned 1
	[0247.049] SetEvent (hEvent=0xfc) returned 1
	[0247.049] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.050] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=281) returned 1
	[0247.050] CloseHandle (hObject=0x114) returned 1
	[0247.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0247.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0247.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.050] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.050] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.051] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.051] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0247.051] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x119, lpOverlapped=0x0) returned 1
	[0247.052] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0247.053] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.053] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.053] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.053] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x119, lpOverlapped=0x0) returned 1
	[0247.053] FlushFileBuffers (hFile=0x114) returned 1
	[0247.060] FlushFileBuffers (hFile=0x254) returned 1
	[0247.071] CloseHandle (hObject=0x114) returned 1
	[0247.072] CloseHandle (hObject=0x254) returned 1
	[0247.072] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json")) returned 1
	[0247.073] SetEvent (hEvent=0xfc) returned 1
	[0247.074] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.074] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=197) returned 1
	[0247.074] CloseHandle (hObject=0x254) returned 1
	[0247.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0247.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0247.075] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.075] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.075] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.075] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.075] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0247.076] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc5, lpOverlapped=0x0) returned 1
	[0247.076] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0247.077] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.077] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.077] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.077] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc5, lpOverlapped=0x0) returned 1
	[0247.078] FlushFileBuffers (hFile=0x254) returned 1
	[0247.082] FlushFileBuffers (hFile=0x114) returned 1
	[0247.085] CloseHandle (hObject=0x254) returned 1
	[0247.085] CloseHandle (hObject=0x114) returned 1
	[0247.085] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json")) returned 1
	[0247.086] SetEvent (hEvent=0xfc) returned 1
	[0247.086] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.087] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=190) returned 1
	[0247.087] CloseHandle (hObject=0x114) returned 1
	[0247.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0247.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0247.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.087] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.087] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.087] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.087] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0247.088] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xbe, lpOverlapped=0x0) returned 1
	[0247.089] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0247.089] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.090] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.090] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.090] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xbe, lpOverlapped=0x0) returned 1
	[0247.098] FlushFileBuffers (hFile=0x114) returned 1
	[0247.101] FlushFileBuffers (hFile=0x254) returned 1
	[0247.102] CloseHandle (hObject=0x114) returned 1
	[0247.102] CloseHandle (hObject=0x254) returned 1
	[0247.102] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json")) returned 1
	[0247.103] SetEvent (hEvent=0xfc) returned 1
	[0247.103] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.104] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=260) returned 1
	[0247.104] CloseHandle (hObject=0x254) returned 1
	[0247.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0247.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0247.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.104] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.104] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.104] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.105] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0247.105] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x104, lpOverlapped=0x0) returned 1
	[0247.106] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0247.107] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.107] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.107] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.107] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x104, lpOverlapped=0x0) returned 1
	[0247.107] FlushFileBuffers (hFile=0x254) returned 1
	[0247.112] FlushFileBuffers (hFile=0x114) returned 1
	[0247.114] CloseHandle (hObject=0x254) returned 1
	[0247.114] CloseHandle (hObject=0x114) returned 1
	[0247.114] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json")) returned 1
	[0247.116] SetEvent (hEvent=0xfc) returned 1
	[0247.116] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.116] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=196) returned 1
	[0247.116] CloseHandle (hObject=0x114) returned 1
	[0247.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json")) returned 0x2020
	[0247.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json")) returned 0x2020
	[0247.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.117] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.117] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.117] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.117] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0247.117] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc4, lpOverlapped=0x0) returned 1
	[0247.118] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0247.119] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.119] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.119] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.119] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc4, lpOverlapped=0x0) returned 1
	[0247.119] FlushFileBuffers (hFile=0x114) returned 1
	[0247.124] FlushFileBuffers (hFile=0x254) returned 1
	[0247.126] CloseHandle (hObject=0x114) returned 1
	[0247.126] CloseHandle (hObject=0x254) returned 1
	[0247.126] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json")) returned 1
	[0247.127] SetEvent (hEvent=0xfc) returned 1
	[0247.127] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.128] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=336) returned 1
	[0247.128] CloseHandle (hObject=0x254) returned 1
	[0247.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json")) returned 0x2020
	[0247.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json")) returned 0x2020
	[0247.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.128] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.128] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.128] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.129] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0247.129] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x150, lpOverlapped=0x0) returned 1
	[0247.130] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x160, lpOverlapped=0x0) returned 1
	[0247.131] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.131] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.131] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.131] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x150, lpOverlapped=0x0) returned 1
	[0247.131] FlushFileBuffers (hFile=0x254) returned 1
	[0247.134] FlushFileBuffers (hFile=0x114) returned 1
	[0247.136] CloseHandle (hObject=0x254) returned 1
	[0247.136] CloseHandle (hObject=0x114) returned 1
	[0247.136] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json")) returned 1
	[0247.137] SetEvent (hEvent=0xfc) returned 1
	[0247.137] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.137] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=277) returned 1
	[0247.138] CloseHandle (hObject=0x114) returned 1
	[0247.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json")) returned 0x2020
	[0247.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json")) returned 0x2020
	[0247.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.138] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.138] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.138] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.138] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0247.139] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x115, lpOverlapped=0x0) returned 1
	[0247.139] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0247.140] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.140] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.141] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.141] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x115, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x115, lpOverlapped=0x0) returned 1
	[0247.141] FlushFileBuffers (hFile=0x114) returned 1
	[0247.143] FlushFileBuffers (hFile=0x254) returned 1
	[0247.145] CloseHandle (hObject=0x114) returned 1
	[0247.145] CloseHandle (hObject=0x254) returned 1
	[0247.145] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json")) returned 1
	[0247.146] SetEvent (hEvent=0xfc) returned 1
	[0247.146] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.147] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=293) returned 1
	[0247.147] CloseHandle (hObject=0x254) returned 1
	[0247.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json")) returned 0x2020
	[0247.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json")) returned 0x2020
	[0247.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.147] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.147] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.147] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.147] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0247.148] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x125, lpOverlapped=0x0) returned 1
	[0247.149] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x130, lpOverlapped=0x0) returned 1
	[0247.149] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.150] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.150] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.150] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x125, lpOverlapped=0x0) returned 1
	[0247.150] FlushFileBuffers (hFile=0x254) returned 1
	[0247.152] FlushFileBuffers (hFile=0x114) returned 1
	[0247.155] CloseHandle (hObject=0x254) returned 1
	[0247.155] CloseHandle (hObject=0x114) returned 1
	[0247.155] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json")) returned 1
	[0247.156] SetEvent (hEvent=0xfc) returned 1
	[0247.156] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.156] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=205) returned 1
	[0247.156] CloseHandle (hObject=0x114) returned 1
	[0247.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0247.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0247.157] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.157] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.157] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.157] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.157] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0247.157] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xcd, lpOverlapped=0x0) returned 1
	[0247.158] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0247.159] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.159] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.159] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.160] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xcd, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xcd, lpOverlapped=0x0) returned 1
	[0247.160] FlushFileBuffers (hFile=0x114) returned 1
	[0247.162] FlushFileBuffers (hFile=0x254) returned 1
	[0247.164] CloseHandle (hObject=0x114) returned 1
	[0247.164] CloseHandle (hObject=0x254) returned 1
	[0247.164] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json")) returned 1
	[0247.165] SetEvent (hEvent=0xfc) returned 1
	[0247.165] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.166] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=277) returned 1
	[0247.166] CloseHandle (hObject=0x254) returned 1
	[0247.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0247.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0247.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.166] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.166] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.166] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.166] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0247.167] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x115, lpOverlapped=0x0) returned 1
	[0247.169] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0247.170] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.170] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.170] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.170] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x115, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x115, lpOverlapped=0x0) returned 1
	[0247.170] FlushFileBuffers (hFile=0x254) returned 1
	[0247.173] FlushFileBuffers (hFile=0x114) returned 1
	[0247.175] CloseHandle (hObject=0x254) returned 1
	[0247.175] CloseHandle (hObject=0x114) returned 1
	[0247.175] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json")) returned 1
	[0247.176] SetEvent (hEvent=0xfc) returned 1
	[0247.176] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.176] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=375) returned 1
	[0247.176] CloseHandle (hObject=0x114) returned 1
	[0247.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json")) returned 0x2020
	[0247.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json")) returned 0x2020
	[0247.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.177] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.177] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.177] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.177] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0247.178] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x177, lpOverlapped=0x0) returned 1
	[0247.178] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x180, lpOverlapped=0x0) returned 1
	[0247.179] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.180] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.180] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.180] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x177, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x177, lpOverlapped=0x0) returned 1
	[0247.180] FlushFileBuffers (hFile=0x114) returned 1
	[0247.182] FlushFileBuffers (hFile=0x254) returned 1
	[0247.184] CloseHandle (hObject=0x114) returned 1
	[0247.184] CloseHandle (hObject=0x254) returned 1
	[0247.184] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json")) returned 1
	[0247.185] SetEvent (hEvent=0xfc) returned 1
	[0247.185] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.185] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=221) returned 1
	[0247.185] CloseHandle (hObject=0x254) returned 1
	[0247.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0247.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0247.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.186] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.186] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.186] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.186] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0247.187] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xdd, lpOverlapped=0x0) returned 1
	[0247.187] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0247.188] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.188] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.188] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.189] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xdd, lpOverlapped=0x0) returned 1
	[0247.189] FlushFileBuffers (hFile=0x254) returned 1
	[0247.191] FlushFileBuffers (hFile=0x114) returned 1
	[0247.193] CloseHandle (hObject=0x254) returned 1
	[0247.193] CloseHandle (hObject=0x114) returned 1
	[0247.193] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json")) returned 1
	[0247.194] SetEvent (hEvent=0xfc) returned 1
	[0247.194] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.195] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=176) returned 1
	[0247.195] CloseHandle (hObject=0x114) returned 1
	[0247.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0247.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json")) returned 0x2020
	[0247.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.195] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.195] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.195] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.196] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0247.196] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb0, lpOverlapped=0x0) returned 1
	[0247.197] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0247.198] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.198] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.198] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.198] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb0, lpOverlapped=0x0) returned 1
	[0247.198] FlushFileBuffers (hFile=0x114) returned 1
	[0247.201] FlushFileBuffers (hFile=0x254) returned 1
	[0247.202] CloseHandle (hObject=0x114) returned 1
	[0247.202] CloseHandle (hObject=0x254) returned 1
	[0247.203] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json")) returned 1
	[0247.203] SetEvent (hEvent=0xfc) returned 1
	[0247.203] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.204] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=210) returned 1
	[0247.204] CloseHandle (hObject=0x254) returned 1
	[0247.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json")) returned 0x2020
	[0247.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json")) returned 0x2020
	[0247.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.204] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.205] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.205] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.205] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0247.205] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd2, lpOverlapped=0x0) returned 1
	[0247.206] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0247.207] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.207] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.207] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.207] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd2, lpOverlapped=0x0) returned 1
	[0247.207] FlushFileBuffers (hFile=0x254) returned 1
	[0247.211] FlushFileBuffers (hFile=0x114) returned 1
	[0247.213] CloseHandle (hObject=0x254) returned 1
	[0247.213] CloseHandle (hObject=0x114) returned 1
	[0247.213] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json")) returned 1
	[0247.214] SetEvent (hEvent=0xfc) returned 1
	[0247.214] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.214] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=170) returned 1
	[0247.215] CloseHandle (hObject=0x114) returned 1
	[0247.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0247.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0247.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.215] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.215] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.215] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.215] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0247.216] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xaa, lpOverlapped=0x0) returned 1
	[0247.217] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb0, lpOverlapped=0x0) returned 1
	[0247.217] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.218] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.218] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.218] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xaa, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xaa, lpOverlapped=0x0) returned 1
	[0247.218] FlushFileBuffers (hFile=0x114) returned 1
	[0247.220] FlushFileBuffers (hFile=0x254) returned 1
	[0247.222] CloseHandle (hObject=0x114) returned 1
	[0247.222] CloseHandle (hObject=0x254) returned 1
	[0247.222] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json")) returned 1
	[0247.223] SetEvent (hEvent=0xfc) returned 1
	[0247.223] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.224] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=194) returned 1
	[0247.224] CloseHandle (hObject=0x254) returned 1
	[0247.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json")) returned 0x2020
	[0247.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json")) returned 0x2020
	[0247.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.224] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.224] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.224] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.224] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0247.225] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc2, lpOverlapped=0x0) returned 1
	[0247.226] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0247.227] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.227] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.227] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.227] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc2, lpOverlapped=0x0) returned 1
	[0247.227] FlushFileBuffers (hFile=0x254) returned 1
	[0247.229] FlushFileBuffers (hFile=0x114) returned 1
	[0247.231] CloseHandle (hObject=0x254) returned 1
	[0247.231] CloseHandle (hObject=0x114) returned 1
	[0247.231] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json")) returned 1
	[0247.232] SetEvent (hEvent=0xfc) returned 1
	[0247.232] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.233] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2803) returned 1
	[0247.233] CloseHandle (hObject=0x114) returned 1
	[0247.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json")) returned 0x2020
	[0247.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json")) returned 0x2020
	[0247.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.233] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0247.233] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.233] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.233] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0247.236] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xaf3, lpOverlapped=0x0) returned 1
	[0247.237] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb00, lpOverlapped=0x0) returned 1
	[0247.238] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0247.238] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.238] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.238] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xaf3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xaf3, lpOverlapped=0x0) returned 1
	[0247.238] FlushFileBuffers (hFile=0x114) returned 1
	[0247.334] FlushFileBuffers (hFile=0x254) returned 1
	[0247.337] CloseHandle (hObject=0x114) returned 1
	[0247.337] CloseHandle (hObject=0x254) returned 1
	[0247.338] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json")) returned 1
	[0247.338] SetEvent (hEvent=0xfc) returned 1
	[0247.338] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.339] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=207406) returned 1
	[0247.339] CloseHandle (hObject=0x254) returned 1
	[0247.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js")) returned 0x2020
	[0247.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js")) returned 0x2020
	[0247.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.339] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0247.340] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.340] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.340] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0247.340] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x32a2e, lpOverlapped=0x0) returned 1
	[0247.345] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x32a30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x32a30, lpOverlapped=0x0) returned 1
	[0247.349] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0247.349] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.349] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.349] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x32a2e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x32a2e, lpOverlapped=0x0) returned 1
	[0247.350] FlushFileBuffers (hFile=0x254) returned 1
	[0247.476] FlushFileBuffers (hFile=0x114) returned 1
	[0247.503] CloseHandle (hObject=0x254) returned 1
	[0247.503] CloseHandle (hObject=0x114) returned 1
	[0247.503] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js")) returned 1
	[0247.505] SetEvent (hEvent=0xfc) returned 1
	[0247.506] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0247.508] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1741) returned 1
	[0247.508] CloseHandle (hObject=0x204) returned 1
	[0247.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css")) returned 0x2020
	[0247.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css")) returned 0x2020
	[0247.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.508] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0247.508] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.508] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.508] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0247.509] ReadFile (in: hFile=0x204, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x6cd, lpOverlapped=0x0) returned 1
	[0247.510] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x6d0, lpOverlapped=0x0) returned 1
	[0247.511] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.512] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.512] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.512] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6cd, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x6cd, lpOverlapped=0x0) returned 1
	[0247.512] FlushFileBuffers (hFile=0x204) returned 1
	[0247.552] FlushFileBuffers (hFile=0x240) returned 1
	[0247.575] CloseHandle (hObject=0x204) returned 1
	[0247.575] CloseHandle (hObject=0x240) returned 1
	[0247.575] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css")) returned 1
	[0247.576] SetEvent (hEvent=0xfc) returned 1
	[0247.578] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0247.599] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=556) returned 1
	[0247.599] CloseHandle (hObject=0x240) returned 1
	[0247.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png")) returned 0x2020
	[0247.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png")) returned 0x2020
	[0247.599] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.599] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0247.599] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.599] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.599] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0247.600] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x22c, lpOverlapped=0x0) returned 1
	[0247.601] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x230, lpOverlapped=0x0) returned 1
	[0247.602] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.602] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.602] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.602] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x22c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x22c, lpOverlapped=0x0) returned 1
	[0247.602] FlushFileBuffers (hFile=0x240) returned 1
	[0247.621] FlushFileBuffers (hFile=0x204) returned 1
	[0247.710] CloseHandle (hObject=0x240) returned 1
	[0247.710] CloseHandle (hObject=0x204) returned 1
	[0247.710] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png")) returned 1
	[0247.711] SetEvent (hEvent=0xfc) returned 1
	[0247.712] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0247.713] GetFileSizeEx (in: hFile=0x204, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=663) returned 1
	[0247.713] CloseHandle (hObject=0x204) returned 1
	[0247.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0247.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0247.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.713] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x204
	[0247.713] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.713] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.713] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0247.714] ReadFile (in: hFile=0x204, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x297, lpOverlapped=0x0) returned 1
	[0247.715] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2a0, lpOverlapped=0x0) returned 1
	[0247.716] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.716] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.716] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.716] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x297, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x297, lpOverlapped=0x0) returned 1
	[0247.717] FlushFileBuffers (hFile=0x204) returned 1
	[0247.734] FlushFileBuffers (hFile=0x240) returned 1
	[0247.742] CloseHandle (hObject=0x204) returned 1
	[0247.742] CloseHandle (hObject=0x240) returned 1
	[0247.742] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json")) returned 1
	[0247.743] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0247.744] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=875) returned 1
	[0247.744] CloseHandle (hObject=0x240) returned 1
	[0247.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json")) returned 0x2020
	[0247.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json")) returned 0x2020
	[0247.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.744] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0247.744] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.744] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.744] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x204
	[0247.745] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x36b, lpOverlapped=0x0) returned 1
	[0247.749] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x370, lpOverlapped=0x0) returned 1
	[0247.751] WriteFile (in: hFile=0x204, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.751] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.751] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.751] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x36b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x36b, lpOverlapped=0x0) returned 1
	[0247.751] FlushFileBuffers (hFile=0x240) returned 1
	[0247.801] FlushFileBuffers (hFile=0x204) returned 1
	[0247.830] CloseHandle (hObject=0x240) returned 1
	[0247.830] CloseHandle (hObject=0x204) returned 1
	[0247.831] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json")) returned 1
	[0247.850] SetEvent (hEvent=0xfc) returned 1
	[0247.853] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0247.853] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=667) returned 1
	[0247.853] CloseHandle (hObject=0x240) returned 1
	[0247.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json")) returned 0x2020
	[0247.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json")) returned 0x2020
	[0247.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.854] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0247.854] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.854] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.854] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0247.854] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x29b, lpOverlapped=0x0) returned 1
	[0247.856] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2a0, lpOverlapped=0x0) returned 1
	[0247.857] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.857] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.857] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.857] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x29b, lpOverlapped=0x0) returned 1
	[0247.857] FlushFileBuffers (hFile=0x240) returned 1
	[0247.865] FlushFileBuffers (hFile=0x244) returned 1
	[0247.867] CloseHandle (hObject=0x240) returned 1
	[0247.868] CloseHandle (hObject=0x244) returned 1
	[0247.868] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json")) returned 1
	[0247.869] SetEvent (hEvent=0xfc) returned 1
	[0247.869] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0247.870] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=609) returned 1
	[0247.870] CloseHandle (hObject=0x244) returned 1
	[0247.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json")) returned 0x2020
	[0247.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json")) returned 0x2020
	[0247.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.870] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0247.870] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.870] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.870] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0247.871] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x261, lpOverlapped=0x0) returned 1
	[0247.879] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x270, lpOverlapped=0x0) returned 1
	[0247.879] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.880] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.880] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.880] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x261, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x261, lpOverlapped=0x0) returned 1
	[0247.880] FlushFileBuffers (hFile=0x244) returned 1
	[0247.888] FlushFileBuffers (hFile=0x240) returned 1
	[0247.891] CloseHandle (hObject=0x244) returned 1
	[0247.891] CloseHandle (hObject=0x240) returned 1
	[0247.891] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json")) returned 1
	[0247.892] SetEvent (hEvent=0xfc) returned 1
	[0247.892] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0247.893] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=692) returned 1
	[0247.893] CloseHandle (hObject=0x240) returned 1
	[0247.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0247.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json")) returned 0x2020
	[0247.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.893] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0247.893] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.893] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.894] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0247.894] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2b4, lpOverlapped=0x0) returned 1
	[0247.897] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2c0, lpOverlapped=0x0) returned 1
	[0247.898] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.898] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.898] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.898] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b4, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2b4, lpOverlapped=0x0) returned 1
	[0247.898] FlushFileBuffers (hFile=0x240) returned 1
	[0247.908] FlushFileBuffers (hFile=0x244) returned 1
	[0247.910] CloseHandle (hObject=0x240) returned 1
	[0247.910] CloseHandle (hObject=0x244) returned 1
	[0247.910] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json")) returned 1
	[0247.911] SetEvent (hEvent=0xfc) returned 1
	[0247.911] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0247.912] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=941) returned 1
	[0247.912] CloseHandle (hObject=0x244) returned 1
	[0247.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0247.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json")) returned 0x2020
	[0247.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.912] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0247.913] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.913] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.913] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0247.913] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3ad, lpOverlapped=0x0) returned 1
	[0247.916] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3b0, lpOverlapped=0x0) returned 1
	[0247.918] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.918] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.918] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.918] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3ad, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3ad, lpOverlapped=0x0) returned 1
	[0247.918] FlushFileBuffers (hFile=0x244) returned 1
	[0247.935] FlushFileBuffers (hFile=0x240) returned 1
	[0247.938] CloseHandle (hObject=0x244) returned 1
	[0247.938] CloseHandle (hObject=0x240) returned 1
	[0247.938] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json")) returned 1
	[0247.939] SetEvent (hEvent=0xfc) returned 1
	[0247.939] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0247.940] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=710) returned 1
	[0247.940] CloseHandle (hObject=0x240) returned 1
	[0247.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0247.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json")) returned 0x2020
	[0247.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0247.940] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0247.940] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.940] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0247.940] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0247.941] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2c6, lpOverlapped=0x0) returned 1
	[0247.943] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2d0, lpOverlapped=0x0) returned 1
	[0247.943] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0247.944] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.944] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0247.944] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2c6, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2c6, lpOverlapped=0x0) returned 1
	[0247.944] FlushFileBuffers (hFile=0x240) returned 1
	[0248.018] FlushFileBuffers (hFile=0x244) returned 1
	[0248.059] CloseHandle (hObject=0x240) returned 1
	[0248.059] CloseHandle (hObject=0x244) returned 1
	[0248.059] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json")) returned 1
	[0248.060] SetEvent (hEvent=0xfc) returned 1
	[0248.060] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.061] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=622) returned 1
	[0248.061] CloseHandle (hObject=0x244) returned 1
	[0248.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json")) returned 0x2020
	[0248.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json")) returned 0x2020
	[0248.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.061] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.061] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.061] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.061] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0248.062] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x26e, lpOverlapped=0x0) returned 1
	[0248.063] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x270, lpOverlapped=0x0) returned 1
	[0248.064] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.064] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.064] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.064] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x26e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x26e, lpOverlapped=0x0) returned 1
	[0248.065] FlushFileBuffers (hFile=0x244) returned 1
	[0248.068] FlushFileBuffers (hFile=0x240) returned 1
	[0248.070] CloseHandle (hObject=0x244) returned 1
	[0248.070] CloseHandle (hObject=0x240) returned 1
	[0248.070] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json")) returned 1
	[0248.071] SetEvent (hEvent=0xfc) returned 1
	[0248.071] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.071] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=778) returned 1
	[0248.072] CloseHandle (hObject=0x240) returned 1
	[0248.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0248.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0248.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.072] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.072] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.072] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.072] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.073] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x30a, lpOverlapped=0x0) returned 1
	[0248.074] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x310, lpOverlapped=0x0) returned 1
	[0248.075] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.075] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.075] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.075] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x30a, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x30a, lpOverlapped=0x0) returned 1
	[0248.075] FlushFileBuffers (hFile=0x240) returned 1
	[0248.084] FlushFileBuffers (hFile=0x244) returned 1
	[0248.086] CloseHandle (hObject=0x240) returned 1
	[0248.086] CloseHandle (hObject=0x244) returned 1
	[0248.086] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json")) returned 1
	[0248.087] SetEvent (hEvent=0xfc) returned 1
	[0248.087] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.088] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=669) returned 1
	[0248.088] CloseHandle (hObject=0x244) returned 1
	[0248.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0248.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json")) returned 0x2020
	[0248.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.088] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.088] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.088] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.088] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0248.089] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x29d, lpOverlapped=0x0) returned 1
	[0248.090] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2a0, lpOverlapped=0x0) returned 1
	[0248.091] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.091] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.091] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.091] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x29d, lpOverlapped=0x0) returned 1
	[0248.092] FlushFileBuffers (hFile=0x244) returned 1
	[0248.094] FlushFileBuffers (hFile=0x240) returned 1
	[0248.096] CloseHandle (hObject=0x244) returned 1
	[0248.096] CloseHandle (hObject=0x240) returned 1
	[0248.096] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json")) returned 1
	[0248.097] SetEvent (hEvent=0xfc) returned 1
	[0248.097] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.098] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=686) returned 1
	[0248.098] CloseHandle (hObject=0x240) returned 1
	[0248.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0248.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0248.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.098] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.098] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.098] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.098] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.099] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2ae, lpOverlapped=0x0) returned 1
	[0248.100] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2b0, lpOverlapped=0x0) returned 1
	[0248.101] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.101] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.101] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.101] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2ae, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2ae, lpOverlapped=0x0) returned 1
	[0248.102] FlushFileBuffers (hFile=0x240) returned 1
	[0248.105] FlushFileBuffers (hFile=0x244) returned 1
	[0248.108] CloseHandle (hObject=0x240) returned 1
	[0248.108] CloseHandle (hObject=0x244) returned 1
	[0248.108] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json")) returned 1
	[0248.110] SetEvent (hEvent=0xfc) returned 1
	[0248.110] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.110] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=699) returned 1
	[0248.110] CloseHandle (hObject=0x244) returned 1
	[0248.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0248.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json")) returned 0x2020
	[0248.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.111] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.111] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.111] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.111] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0248.111] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2bb, lpOverlapped=0x0) returned 1
	[0248.113] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2c0, lpOverlapped=0x0) returned 1
	[0248.114] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.114] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.114] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.114] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2bb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2bb, lpOverlapped=0x0) returned 1
	[0248.114] FlushFileBuffers (hFile=0x244) returned 1
	[0248.127] FlushFileBuffers (hFile=0x240) returned 1
	[0248.135] CloseHandle (hObject=0x244) returned 1
	[0248.136] CloseHandle (hObject=0x240) returned 1
	[0248.136] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json")) returned 1
	[0248.137] SetEvent (hEvent=0xfc) returned 1
	[0248.137] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.137] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=666) returned 1
	[0248.137] CloseHandle (hObject=0x240) returned 1
	[0248.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0248.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0248.138] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.138] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.138] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.138] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.138] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.138] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x29a, lpOverlapped=0x0) returned 1
	[0248.143] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2a0, lpOverlapped=0x0) returned 1
	[0248.143] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.144] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.144] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.144] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29a, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x29a, lpOverlapped=0x0) returned 1
	[0248.144] FlushFileBuffers (hFile=0x240) returned 1
	[0248.158] FlushFileBuffers (hFile=0x244) returned 1
	[0248.160] CloseHandle (hObject=0x240) returned 1
	[0248.160] CloseHandle (hObject=0x244) returned 1
	[0248.160] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json")) returned 1
	[0248.161] SetEvent (hEvent=0xfc) returned 1
	[0248.161] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.162] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=661) returned 1
	[0248.162] CloseHandle (hObject=0x244) returned 1
	[0248.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0248.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0248.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.162] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.162] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.162] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.162] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0248.163] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x295, lpOverlapped=0x0) returned 1
	[0248.165] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2a0, lpOverlapped=0x0) returned 1
	[0248.166] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.166] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.166] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.166] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x295, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x295, lpOverlapped=0x0) returned 1
	[0248.167] FlushFileBuffers (hFile=0x244) returned 1
	[0248.302] FlushFileBuffers (hFile=0x240) returned 1
	[0248.304] CloseHandle (hObject=0x244) returned 1
	[0248.304] CloseHandle (hObject=0x240) returned 1
	[0248.304] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json")) returned 1
	[0248.307] SetEvent (hEvent=0xfc) returned 1
	[0248.307] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.309] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=668) returned 1
	[0248.309] CloseHandle (hObject=0x240) returned 1
	[0248.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0248.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json")) returned 0x2020
	[0248.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.309] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.309] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.309] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.309] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.310] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x29c, lpOverlapped=0x0) returned 1
	[0248.312] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2a0, lpOverlapped=0x0) returned 1
	[0248.313] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.313] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.313] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.313] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x29c, lpOverlapped=0x0) returned 1
	[0248.313] FlushFileBuffers (hFile=0x240) returned 1
	[0248.316] FlushFileBuffers (hFile=0x244) returned 1
	[0248.318] CloseHandle (hObject=0x240) returned 1
	[0248.318] CloseHandle (hObject=0x244) returned 1
	[0248.318] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json")) returned 1
	[0248.319] SetEvent (hEvent=0xfc) returned 1
	[0248.319] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.320] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=783) returned 1
	[0248.320] CloseHandle (hObject=0x244) returned 1
	[0248.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0248.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0248.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.320] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.320] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.320] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.320] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0248.321] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x30f, lpOverlapped=0x0) returned 1
	[0248.323] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x310, lpOverlapped=0x0) returned 1
	[0248.323] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.324] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.324] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.324] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x30f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x30f, lpOverlapped=0x0) returned 1
	[0248.324] FlushFileBuffers (hFile=0x244) returned 1
	[0248.326] FlushFileBuffers (hFile=0x240) returned 1
	[0248.328] CloseHandle (hObject=0x244) returned 1
	[0248.328] CloseHandle (hObject=0x240) returned 1
	[0248.328] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json")) returned 1
	[0248.329] SetEvent (hEvent=0xfc) returned 1
	[0248.329] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.330] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=671) returned 1
	[0248.330] CloseHandle (hObject=0x240) returned 1
	[0248.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0248.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0248.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.330] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.330] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.330] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.331] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.331] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x29f, lpOverlapped=0x0) returned 1
	[0248.333] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2a0, lpOverlapped=0x0) returned 1
	[0248.334] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.334] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.334] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.334] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x29f, lpOverlapped=0x0) returned 1
	[0248.334] FlushFileBuffers (hFile=0x240) returned 1
	[0248.336] FlushFileBuffers (hFile=0x244) returned 1
	[0248.338] CloseHandle (hObject=0x240) returned 1
	[0248.338] CloseHandle (hObject=0x244) returned 1
	[0248.338] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json")) returned 1
	[0248.339] SetEvent (hEvent=0xfc) returned 1
	[0248.339] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.340] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=642) returned 1
	[0248.340] CloseHandle (hObject=0x244) returned 1
	[0248.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0248.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json")) returned 0x2020
	[0248.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.340] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.340] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.340] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.340] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0248.341] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x282, lpOverlapped=0x0) returned 1
	[0248.343] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x290, lpOverlapped=0x0) returned 1
	[0248.344] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.344] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.344] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.344] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x282, lpOverlapped=0x0) returned 1
	[0248.344] FlushFileBuffers (hFile=0x244) returned 1
	[0248.373] FlushFileBuffers (hFile=0x240) returned 1
	[0248.381] CloseHandle (hObject=0x244) returned 1
	[0248.382] CloseHandle (hObject=0x240) returned 1
	[0248.383] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json")) returned 1
	[0248.398] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.402] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=650) returned 1
	[0248.402] CloseHandle (hObject=0x240) returned 1
	[0248.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0248.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0248.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.403] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0248.403] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.403] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.403] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.403] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x28a, lpOverlapped=0x0) returned 1
	[0248.410] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x290, lpOverlapped=0x0) returned 1
	[0248.411] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.411] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.411] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.411] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x28a, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x28a, lpOverlapped=0x0) returned 1
	[0248.412] FlushFileBuffers (hFile=0x240) returned 1
	[0248.414] FlushFileBuffers (hFile=0x244) returned 1
	[0248.416] CloseHandle (hObject=0x240) returned 1
	[0248.416] CloseHandle (hObject=0x244) returned 1
	[0248.416] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json")) returned 1
	[0248.417] SetEvent (hEvent=0xfc) returned 1
	[0248.417] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.417] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=720) returned 1
	[0248.418] CloseHandle (hObject=0x244) returned 1
	[0248.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0248.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0248.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.418] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.418] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.418] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.418] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0248.419] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2d0, lpOverlapped=0x0) returned 1
	[0248.423] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2e0, lpOverlapped=0x0) returned 1
	[0248.424] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.424] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.424] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.424] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2d0, lpOverlapped=0x0) returned 1
	[0248.424] FlushFileBuffers (hFile=0x244) returned 1
	[0248.454] FlushFileBuffers (hFile=0x240) returned 1
	[0248.462] CloseHandle (hObject=0x244) returned 1
	[0248.463] CloseHandle (hObject=0x240) returned 1
	[0248.464] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json")) returned 1
	[0248.481] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.485] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6159) returned 1
	[0248.486] CloseHandle (hObject=0x260) returned 1
	[0248.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png")) returned 0x2020
	[0248.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png")) returned 0x2020
	[0248.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.486] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.487] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.487] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.487] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.488] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x180f, lpOverlapped=0x0) returned 1
	[0248.498] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1810, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1810, lpOverlapped=0x0) returned 1
	[0248.500] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0248.500] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.500] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.500] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x180f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x180f, lpOverlapped=0x0) returned 1
	[0248.500] FlushFileBuffers (hFile=0x260) returned 1
	[0248.510] FlushFileBuffers (hFile=0x244) returned 1
	[0248.511] CloseHandle (hObject=0x260) returned 1
	[0248.511] CloseHandle (hObject=0x244) returned 1
	[0248.511] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png")) returned 1
	[0248.512] SetEvent (hEvent=0xfc) returned 1
	[0248.512] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.513] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=292) returned 1
	[0248.513] CloseHandle (hObject=0x244) returned 1
	[0248.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0248.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json")) returned 0x2020
	[0248.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.514] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0248.514] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.514] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.514] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.515] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x124, lpOverlapped=0x0) returned 1
	[0248.516] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x130, lpOverlapped=0x0) returned 1
	[0248.516] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.517] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.517] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.517] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x124, lpOverlapped=0x0) returned 1
	[0248.517] FlushFileBuffers (hFile=0x244) returned 1
	[0248.525] FlushFileBuffers (hFile=0x260) returned 1
	[0248.528] CloseHandle (hObject=0x244) returned 1
	[0248.528] CloseHandle (hObject=0x260) returned 1
	[0248.528] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json")) returned 1
	[0248.529] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.530] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=249) returned 1
	[0248.530] CloseHandle (hObject=0x260) returned 1
	[0248.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0248.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0248.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.530] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.531] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.531] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.531] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0248.531] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xf9, lpOverlapped=0x0) returned 1
	[0248.532] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0248.533] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.533] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.533] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.533] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xf9, lpOverlapped=0x0) returned 1
	[0248.534] FlushFileBuffers (hFile=0x260) returned 1
	[0248.547] FlushFileBuffers (hFile=0x244) returned 1
	[0248.550] CloseHandle (hObject=0x260) returned 1
	[0248.550] CloseHandle (hObject=0x244) returned 1
	[0248.550] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json")) returned 1
	[0248.551] SetEvent (hEvent=0xfc) returned 1
	[0248.551] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.561] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=236) returned 1
	[0248.561] CloseHandle (hObject=0x260) returned 1
	[0248.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json")) returned 0x2020
	[0248.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json")) returned 0x2020
	[0248.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.561] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.561] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.561] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.561] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0248.563] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xec, lpOverlapped=0x0) returned 1
	[0248.564] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0248.565] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.565] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.565] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.565] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xec, lpOverlapped=0x0) returned 1
	[0248.565] FlushFileBuffers (hFile=0x260) returned 1
	[0248.576] FlushFileBuffers (hFile=0x114) returned 1
	[0248.579] CloseHandle (hObject=0x260) returned 1
	[0248.579] CloseHandle (hObject=0x114) returned 1
	[0248.579] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json")) returned 1
	[0248.580] SetEvent (hEvent=0xfc) returned 1
	[0248.580] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.581] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=215) returned 1
	[0248.581] CloseHandle (hObject=0x114) returned 1
	[0248.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json")) returned 0x2020
	[0248.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json")) returned 0x2020
	[0248.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.581] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.581] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.582] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.582] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.582] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xd7, lpOverlapped=0x0) returned 1
	[0248.583] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0248.584] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.584] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.584] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.584] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xd7, lpOverlapped=0x0) returned 1
	[0248.584] FlushFileBuffers (hFile=0x114) returned 1
	[0248.593] FlushFileBuffers (hFile=0x260) returned 1
	[0248.602] CloseHandle (hObject=0x114) returned 1
	[0248.603] CloseHandle (hObject=0x260) returned 1
	[0248.603] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json")) returned 1
	[0248.603] SetEvent (hEvent=0xfc) returned 1
	[0248.604] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.607] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=256) returned 1
	[0248.607] CloseHandle (hObject=0x260) returned 1
	[0248.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0248.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json")) returned 0x2020
	[0248.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.608] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.608] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.608] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.608] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0248.609] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x100, lpOverlapped=0x0) returned 1
	[0248.610] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0248.610] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.611] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.611] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.611] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x100, lpOverlapped=0x0) returned 1
	[0248.611] FlushFileBuffers (hFile=0x260) returned 1
	[0248.615] FlushFileBuffers (hFile=0x114) returned 1
	[0248.622] CloseHandle (hObject=0x260) returned 1
	[0248.623] CloseHandle (hObject=0x114) returned 1
	[0248.623] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json")) returned 1
	[0248.624] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.625] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=268) returned 1
	[0248.625] CloseHandle (hObject=0x114) returned 1
	[0248.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0248.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0248.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.625] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.625] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.625] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.625] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.626] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x10c, lpOverlapped=0x0) returned 1
	[0248.627] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0248.628] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.628] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.628] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.628] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x10c, lpOverlapped=0x0) returned 1
	[0248.628] FlushFileBuffers (hFile=0x114) returned 1
	[0248.631] FlushFileBuffers (hFile=0x260) returned 1
	[0248.638] CloseHandle (hObject=0x114) returned 1
	[0248.638] CloseHandle (hObject=0x260) returned 1
	[0248.638] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json")) returned 1
	[0248.639] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.640] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=230) returned 1
	[0248.640] CloseHandle (hObject=0x260) returned 1
	[0248.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json")) returned 0x2020
	[0248.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json")) returned 0x2020
	[0248.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.640] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.641] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.641] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.641] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0248.641] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe6, lpOverlapped=0x0) returned 1
	[0248.642] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0248.645] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.646] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.646] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.646] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe6, lpOverlapped=0x0) returned 1
	[0248.646] FlushFileBuffers (hFile=0x260) returned 1
	[0248.649] FlushFileBuffers (hFile=0x114) returned 1
	[0248.657] CloseHandle (hObject=0x260) returned 1
	[0248.658] CloseHandle (hObject=0x114) returned 1
	[0248.658] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json")) returned 1
	[0248.659] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.659] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=242) returned 1
	[0248.659] CloseHandle (hObject=0x114) returned 1
	[0248.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json")) returned 0x2020
	[0248.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json")) returned 0x2020
	[0248.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.659] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.660] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.660] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.660] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.660] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xf2, lpOverlapped=0x0) returned 1
	[0248.663] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0248.664] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.664] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.664] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.665] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xf2, lpOverlapped=0x0) returned 1
	[0248.665] FlushFileBuffers (hFile=0x114) returned 1
	[0248.667] FlushFileBuffers (hFile=0x260) returned 1
	[0248.685] CloseHandle (hObject=0x114) returned 1
	[0248.685] CloseHandle (hObject=0x260) returned 1
	[0248.686] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json")) returned 1
	[0248.687] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.688] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=271) returned 1
	[0248.688] CloseHandle (hObject=0x260) returned 1
	[0248.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0248.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json")) returned 0x2020
	[0248.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.688] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.689] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.689] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.689] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0248.690] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x10f, lpOverlapped=0x0) returned 1
	[0248.691] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0248.691] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.692] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.692] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.692] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x10f, lpOverlapped=0x0) returned 1
	[0248.692] FlushFileBuffers (hFile=0x260) returned 1
	[0248.695] FlushFileBuffers (hFile=0x114) returned 1
	[0248.703] CloseHandle (hObject=0x260) returned 1
	[0248.704] CloseHandle (hObject=0x114) returned 1
	[0248.704] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json")) returned 1
	[0248.705] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.708] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=253) returned 1
	[0248.708] CloseHandle (hObject=0x114) returned 1
	[0248.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0248.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0248.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.708] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.708] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.708] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.708] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.709] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xfd, lpOverlapped=0x0) returned 1
	[0248.710] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0248.711] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.711] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.711] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.711] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xfd, lpOverlapped=0x0) returned 1
	[0248.711] FlushFileBuffers (hFile=0x114) returned 1
	[0248.714] FlushFileBuffers (hFile=0x260) returned 1
	[0248.722] CloseHandle (hObject=0x114) returned 1
	[0248.722] CloseHandle (hObject=0x260) returned 1
	[0248.723] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json")) returned 1
	[0248.724] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.725] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=232) returned 1
	[0248.725] CloseHandle (hObject=0x260) returned 1
	[0248.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0248.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json")) returned 0x2020
	[0248.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.725] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.726] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.726] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.726] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0248.726] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe8, lpOverlapped=0x0) returned 1
	[0248.727] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0248.728] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.728] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.728] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.728] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe8, lpOverlapped=0x0) returned 1
	[0248.728] FlushFileBuffers (hFile=0x260) returned 1
	[0248.737] FlushFileBuffers (hFile=0x114) returned 1
	[0248.740] CloseHandle (hObject=0x260) returned 1
	[0248.741] CloseHandle (hObject=0x114) returned 1
	[0248.742] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json")) returned 1
	[0248.742] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.743] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=264) returned 1
	[0248.743] CloseHandle (hObject=0x114) returned 1
	[0248.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0248.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json")) returned 0x2020
	[0248.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.743] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.743] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.744] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.744] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.744] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x108, lpOverlapped=0x0) returned 1
	[0248.745] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0248.746] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.746] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.746] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.746] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x108, lpOverlapped=0x0) returned 1
	[0248.746] FlushFileBuffers (hFile=0x114) returned 1
	[0248.757] FlushFileBuffers (hFile=0x260) returned 1
	[0248.760] CloseHandle (hObject=0x114) returned 1
	[0248.761] CloseHandle (hObject=0x260) returned 1
	[0248.761] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json")) returned 1
	[0248.762] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.763] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=223) returned 1
	[0248.763] CloseHandle (hObject=0x260) returned 1
	[0248.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0248.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0248.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.763] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.763] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.763] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.763] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0248.764] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xdf, lpOverlapped=0x0) returned 1
	[0248.765] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0248.766] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.766] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.766] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.766] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xdf, lpOverlapped=0x0) returned 1
	[0248.766] FlushFileBuffers (hFile=0x260) returned 1
	[0248.774] FlushFileBuffers (hFile=0x114) returned 1
	[0248.777] CloseHandle (hObject=0x260) returned 1
	[0248.777] CloseHandle (hObject=0x114) returned 1
	[0248.777] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json")) returned 1
	[0248.778] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.779] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=286) returned 1
	[0248.779] CloseHandle (hObject=0x114) returned 1
	[0248.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0248.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json")) returned 0x2020
	[0248.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.779] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.779] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.779] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.779] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.780] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x11e, lpOverlapped=0x0) returned 1
	[0248.781] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0248.782] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.782] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.782] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.782] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x11e, lpOverlapped=0x0) returned 1
	[0248.782] FlushFileBuffers (hFile=0x114) returned 1
	[0248.791] FlushFileBuffers (hFile=0x260) returned 1
	[0248.794] CloseHandle (hObject=0x114) returned 1
	[0248.794] CloseHandle (hObject=0x260) returned 1
	[0248.795] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json")) returned 1
	[0248.796] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.796] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=222) returned 1
	[0248.797] CloseHandle (hObject=0x260) returned 1
	[0248.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0248.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0248.797] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.797] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.797] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.797] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.797] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0248.798] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xde, lpOverlapped=0x0) returned 1
	[0248.799] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe0, lpOverlapped=0x0) returned 1
	[0248.800] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.800] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.800] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.800] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xde, lpOverlapped=0x0) returned 1
	[0248.800] FlushFileBuffers (hFile=0x260) returned 1
	[0248.808] FlushFileBuffers (hFile=0x114) returned 1
	[0248.812] CloseHandle (hObject=0x260) returned 1
	[0248.812] CloseHandle (hObject=0x114) returned 1
	[0248.812] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json")) returned 1
	[0248.813] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.814] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=295) returned 1
	[0248.814] CloseHandle (hObject=0x114) returned 1
	[0248.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0248.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0248.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.814] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.814] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.815] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.815] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.815] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x127, lpOverlapped=0x0) returned 1
	[0248.816] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x130, lpOverlapped=0x0) returned 1
	[0248.817] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.817] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.817] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.817] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x127, lpOverlapped=0x0) returned 1
	[0248.818] FlushFileBuffers (hFile=0x114) returned 1
	[0248.827] FlushFileBuffers (hFile=0x260) returned 1
	[0248.829] CloseHandle (hObject=0x114) returned 1
	[0248.829] CloseHandle (hObject=0x260) returned 1
	[0248.829] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json")) returned 1
	[0248.830] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.831] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=234) returned 1
	[0248.831] CloseHandle (hObject=0x260) returned 1
	[0248.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0248.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json")) returned 0x2020
	[0248.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.831] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.831] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.832] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.832] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0248.832] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xea, lpOverlapped=0x0) returned 1
	[0248.833] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0248.834] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.834] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.835] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.835] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xea, lpOverlapped=0x0) returned 1
	[0248.835] FlushFileBuffers (hFile=0x260) returned 1
	[0248.844] FlushFileBuffers (hFile=0x114) returned 1
	[0248.847] CloseHandle (hObject=0x260) returned 1
	[0248.847] CloseHandle (hObject=0x114) returned 1
	[0248.847] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json")) returned 1
	[0248.848] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.849] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=232) returned 1
	[0248.849] CloseHandle (hObject=0x114) returned 1
	[0248.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0248.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json")) returned 0x2020
	[0248.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.849] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.849] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.849] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.849] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.850] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe8, lpOverlapped=0x0) returned 1
	[0248.851] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0248.852] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.852] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.852] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.852] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe8, lpOverlapped=0x0) returned 1
	[0248.852] FlushFileBuffers (hFile=0x114) returned 1
	[0248.861] FlushFileBuffers (hFile=0x260) returned 1
	[0248.866] CloseHandle (hObject=0x114) returned 1
	[0248.866] CloseHandle (hObject=0x260) returned 1
	[0248.866] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json")) returned 1
	[0248.867] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.868] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=249) returned 1
	[0248.868] CloseHandle (hObject=0x260) returned 1
	[0248.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0248.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json")) returned 0x2020
	[0248.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.868] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0248.868] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.868] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.868] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0248.869] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xf9, lpOverlapped=0x0) returned 1
	[0248.870] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0248.872] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.872] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.872] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.872] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xf9, lpOverlapped=0x0) returned 1
	[0248.872] FlushFileBuffers (hFile=0x260) returned 1
	[0248.883] FlushFileBuffers (hFile=0x114) returned 1
	[0248.888] CloseHandle (hObject=0x260) returned 1
	[0248.888] CloseHandle (hObject=0x114) returned 1
	[0248.888] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json")) returned 1
	[0248.889] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.890] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=573631) returned 1
	[0248.890] CloseHandle (hObject=0x114) returned 1
	[0248.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js")) returned 0x2020
	[0248.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js")) returned 0x2020
	[0248.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0248.890] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0248.890] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.890] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0248.890] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0248.891] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x8c0bf, lpOverlapped=0x0) returned 1
	[0248.903] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8c0c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x8c0c0, lpOverlapped=0x0) returned 1
	[0248.913] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0248.913] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.913] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0248.913] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8c0bf, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x8c0bf, lpOverlapped=0x0) returned 1
	[0248.915] FlushFileBuffers (hFile=0x114) returned 1
	[0248.991] FlushFileBuffers (hFile=0x260) returned 1
	[0248.996] CloseHandle (hObject=0x114) returned 1
	[0248.996] CloseHandle (hObject=0x260) returned 1
	[0248.996] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js")) returned 1
	[0249.024] SetEvent (hEvent=0xfc) returned 1
	[0249.024] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.026] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=238168) returned 1
	[0249.026] CloseHandle (hObject=0x260) returned 1
	[0249.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js")) returned 0x2020
	[0249.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js")) returned 0x2020
	[0249.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.026] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.026] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.026] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.026] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0249.027] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3a258, lpOverlapped=0x0) returned 1
	[0249.032] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3a260, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3a260, lpOverlapped=0x0) returned 1
	[0249.036] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0249.036] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.037] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.037] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3a258, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3a258, lpOverlapped=0x0) returned 1
	[0249.037] FlushFileBuffers (hFile=0x260) returned 1
	[0249.049] FlushFileBuffers (hFile=0x114) returned 1
	[0249.051] CloseHandle (hObject=0x260) returned 1
	[0249.051] CloseHandle (hObject=0x114) returned 1
	[0249.051] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js")) returned 1
	[0249.053] SetEvent (hEvent=0xfc) returned 1
	[0249.053] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.054] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=52759) returned 1
	[0249.055] CloseHandle (hObject=0x114) returned 1
	[0249.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js")) returned 0x2020
	[0249.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js")) returned 0x2020
	[0249.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.055] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.055] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.055] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.055] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0249.056] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xce17, lpOverlapped=0x0) returned 1
	[0249.058] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xce20, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xce20, lpOverlapped=0x0) returned 1
	[0249.060] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0249.060] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.060] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.060] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xce17, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xce17, lpOverlapped=0x0) returned 1
	[0249.060] FlushFileBuffers (hFile=0x114) returned 1
	[0249.080] FlushFileBuffers (hFile=0x260) returned 1
	[0249.082] CloseHandle (hObject=0x114) returned 1
	[0249.082] CloseHandle (hObject=0x260) returned 1
	[0249.082] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js")) returned 1
	[0249.083] SetEvent (hEvent=0xfc) returned 1
	[0249.083] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.084] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=139738) returned 1
	[0249.084] CloseHandle (hObject=0x260) returned 1
	[0249.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js")) returned 0x2020
	[0249.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js")) returned 0x2020
	[0249.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.084] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0249.085] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.085] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.085] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0249.085] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x221da, lpOverlapped=0x0) returned 1
	[0249.088] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x221e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x221e0, lpOverlapped=0x0) returned 1
	[0249.091] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0249.091] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.091] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.091] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x221da, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x221da, lpOverlapped=0x0) returned 1
	[0249.092] FlushFileBuffers (hFile=0x260) returned 1
	[0249.135] FlushFileBuffers (hFile=0x114) returned 1
	[0249.137] CloseHandle (hObject=0x260) returned 1
	[0249.137] CloseHandle (hObject=0x114) returned 1
	[0249.137] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js")) returned 1
	[0249.139] SetEvent (hEvent=0xfc) returned 1
	[0249.139] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.140] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=59) returned 1
	[0249.140] CloseHandle (hObject=0x114) returned 1
	[0249.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html")) returned 0x2020
	[0249.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html")) returned 0x2020
	[0249.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.140] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.140] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.140] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.141] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0249.141] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3b, lpOverlapped=0x0) returned 1
	[0249.142] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x40, lpOverlapped=0x0) returned 1
	[0249.144] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0249.144] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.144] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.144] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3b, lpOverlapped=0x0) returned 1
	[0249.144] FlushFileBuffers (hFile=0x114) returned 1
	[0249.148] FlushFileBuffers (hFile=0x260) returned 1
	[0249.157] CloseHandle (hObject=0x114) returned 1
	[0249.159] CloseHandle (hObject=0x260) returned 1
	[0249.160] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html")) returned 1
	[0249.170] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.183] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2373) returned 1
	[0249.183] CloseHandle (hObject=0x20c) returned 1
	[0249.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js")) returned 0x2020
	[0249.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js")) returned 0x2020
	[0249.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.183] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.183] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.183] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.183] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0249.184] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x945, lpOverlapped=0x0) returned 1
	[0249.186] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x950, lpOverlapped=0x0) returned 1
	[0249.186] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0249.187] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.187] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.187] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x945, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x945, lpOverlapped=0x0) returned 1
	[0249.187] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.215] FlushFileBuffers (hFile=0x114) returned 1
	[0249.220] CloseHandle (hObject=0x20c) returned 1
	[0249.220] CloseHandle (hObject=0x114) returned 1
	[0249.220] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js")) returned 1
	[0249.221] SetEvent (hEvent=0xfc) returned 1
	[0249.221] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.223] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11040) returned 1
	[0249.223] CloseHandle (hObject=0x114) returned 1
	[0249.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js")) returned 0x2020
	[0249.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js")) returned 0x2020
	[0249.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.223] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.223] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.223] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.223] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0249.224] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2b20, lpOverlapped=0x0) returned 1
	[0249.226] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2b30, lpOverlapped=0x0) returned 1
	[0249.227] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0249.227] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.227] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.227] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b20, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2b20, lpOverlapped=0x0) returned 1
	[0249.227] FlushFileBuffers (hFile=0x114) returned 1
	[0249.230] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.232] CloseHandle (hObject=0x114) returned 1
	[0249.232] CloseHandle (hObject=0x20c) returned 1
	[0249.232] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js")) returned 1
	[0249.233] SetEvent (hEvent=0xfc) returned 1
	[0249.233] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.234] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2296) returned 1
	[0249.234] CloseHandle (hObject=0x20c) returned 1
	[0249.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json")) returned 0x2020
	[0249.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json")) returned 0x2020
	[0249.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.234] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.235] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.235] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.235] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0249.235] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x8f8, lpOverlapped=0x0) returned 1
	[0249.237] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x900, lpOverlapped=0x0) returned 1
	[0249.238] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0249.238] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.238] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.238] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x8f8, lpOverlapped=0x0) returned 1
	[0249.238] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.241] FlushFileBuffers (hFile=0x114) returned 1
	[0249.243] CloseHandle (hObject=0x20c) returned 1
	[0249.243] CloseHandle (hObject=0x114) returned 1
	[0249.243] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json")) returned 1
	[0249.244] SetEvent (hEvent=0xfc) returned 1
	[0249.244] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.245] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=286777) returned 1
	[0249.245] CloseHandle (hObject=0x114) returned 1
	[0249.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css")) returned 0x2020
	[0249.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css")) returned 0x2020
	[0249.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.245] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.245] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.245] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.245] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0249.246] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x46039, lpOverlapped=0x0) returned 1
	[0249.252] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x46040, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x46040, lpOverlapped=0x0) returned 1
	[0249.257] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0249.258] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.258] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.258] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x46039, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x46039, lpOverlapped=0x0) returned 1
	[0249.259] FlushFileBuffers (hFile=0x114) returned 1
	[0249.322] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.409] CloseHandle (hObject=0x114) returned 1
	[0249.409] CloseHandle (hObject=0x20c) returned 1
	[0249.409] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css")) returned 1
	[0249.412] SetEvent (hEvent=0xfc) returned 1
	[0249.412] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.413] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2369) returned 1
	[0249.413] CloseHandle (hObject=0x20c) returned 1
	[0249.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js")) returned 0x2020
	[0249.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js")) returned 0x2020
	[0249.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.414] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.414] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.414] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.414] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0249.415] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x941, lpOverlapped=0x0) returned 1
	[0249.417] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x950, lpOverlapped=0x0) returned 1
	[0249.417] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0249.418] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.418] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.418] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x941, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x941, lpOverlapped=0x0) returned 1
	[0249.418] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.421] FlushFileBuffers (hFile=0x114) returned 1
	[0249.422] CloseHandle (hObject=0x20c) returned 1
	[0249.422] CloseHandle (hObject=0x114) returned 1
	[0249.422] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js")) returned 1
	[0249.423] SetEvent (hEvent=0xfc) returned 1
	[0249.423] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.425] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18471) returned 1
	[0249.425] CloseHandle (hObject=0x114) returned 1
	[0249.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json")) returned 0x2020
	[0249.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json")) returned 0x2020
	[0249.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.425] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.425] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.425] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.425] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0249.426] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x4827, lpOverlapped=0x0) returned 1
	[0249.428] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4830, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4830, lpOverlapped=0x0) returned 1
	[0249.429] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0249.429] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.429] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.429] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4827, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x4827, lpOverlapped=0x0) returned 1
	[0249.429] FlushFileBuffers (hFile=0x114) returned 1
	[0249.592] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.636] CloseHandle (hObject=0x114) returned 1
	[0249.637] CloseHandle (hObject=0x20c) returned 1
	[0249.637] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json")) returned 1
	[0249.638] SetEvent (hEvent=0xfc) returned 1
	[0249.638] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.639] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21195) returned 1
	[0249.639] CloseHandle (hObject=0x20c) returned 1
	[0249.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json")) returned 0x2020
	[0249.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json")) returned 0x2020
	[0249.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.640] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.640] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.640] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.640] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0249.641] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x52cb, lpOverlapped=0x0) returned 1
	[0249.643] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x52d0, lpOverlapped=0x0) returned 1
	[0249.644] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0249.645] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.645] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.645] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x52cb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x52cb, lpOverlapped=0x0) returned 1
	[0249.645] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.653] FlushFileBuffers (hFile=0x114) returned 1
	[0249.668] CloseHandle (hObject=0x20c) returned 1
	[0249.668] CloseHandle (hObject=0x114) returned 1
	[0249.668] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json")) returned 1
	[0249.669] SetEvent (hEvent=0xfc) returned 1
	[0249.669] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.670] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16425) returned 1
	[0249.670] CloseHandle (hObject=0x114) returned 1
	[0249.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0249.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json")) returned 0x2020
	[0249.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.671] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.671] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.671] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.671] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0249.672] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x4029, lpOverlapped=0x0) returned 1
	[0249.674] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4030, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4030, lpOverlapped=0x0) returned 1
	[0249.675] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0249.675] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.675] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.675] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4029, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x4029, lpOverlapped=0x0) returned 1
	[0249.675] FlushFileBuffers (hFile=0x114) returned 1
	[0249.689] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.692] CloseHandle (hObject=0x114) returned 1
	[0249.692] CloseHandle (hObject=0x20c) returned 1
	[0249.693] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json")) returned 1
	[0249.694] SetEvent (hEvent=0xfc) returned 1
	[0249.694] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.695] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16249) returned 1
	[0249.695] CloseHandle (hObject=0x20c) returned 1
	[0249.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json")) returned 0x2020
	[0249.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json")) returned 0x2020
	[0249.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.696] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.696] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.696] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.696] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0249.697] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3f79, lpOverlapped=0x0) returned 1
	[0249.698] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3f80, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3f80, lpOverlapped=0x0) returned 1
	[0249.699] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0249.700] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.700] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.700] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3f79, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3f79, lpOverlapped=0x0) returned 1
	[0249.700] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.715] FlushFileBuffers (hFile=0x114) returned 1
	[0249.718] CloseHandle (hObject=0x20c) returned 1
	[0249.719] CloseHandle (hObject=0x114) returned 1
	[0249.719] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json")) returned 1
	[0249.720] SetEvent (hEvent=0xfc) returned 1
	[0249.720] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.721] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19198) returned 1
	[0249.721] CloseHandle (hObject=0x114) returned 1
	[0249.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json")) returned 0x2020
	[0249.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json")) returned 0x2020
	[0249.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.721] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0249.721] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.721] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.721] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0249.722] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x4afe, lpOverlapped=0x0) returned 1
	[0249.729] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4b00, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4b00, lpOverlapped=0x0) returned 1
	[0249.730] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0249.730] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.730] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.730] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4afe, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x4afe, lpOverlapped=0x0) returned 1
	[0249.731] FlushFileBuffers (hFile=0x114) returned 1
	[0249.862] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.934] CloseHandle (hObject=0x114) returned 1
	[0249.934] CloseHandle (hObject=0x20c) returned 1
	[0249.934] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json")) returned 1
	[0249.936] SetEvent (hEvent=0xfc) returned 1
	[0249.937] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.938] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18165) returned 1
	[0249.938] CloseHandle (hObject=0x20c) returned 1
	[0249.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json")) returned 0x2020
	[0249.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json")) returned 0x2020
	[0249.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0249.938] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0249.938] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.938] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0249.938] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0249.939] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x46f5, lpOverlapped=0x0) returned 1
	[0249.941] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4700, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4700, lpOverlapped=0x0) returned 1
	[0249.942] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0249.942] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.942] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0249.942] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x46f5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x46f5, lpOverlapped=0x0) returned 1
	[0249.943] FlushFileBuffers (hFile=0x20c) returned 1
	[0249.992] FlushFileBuffers (hFile=0x114) returned 1
	[0250.171] CloseHandle (hObject=0x20c) returned 1
	[0250.171] CloseHandle (hObject=0x114) returned 1
	[0250.171] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json")) returned 1
	[0250.172] SetEvent (hEvent=0xfc) returned 1
	[0250.172] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0250.174] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16799) returned 1
	[0250.174] CloseHandle (hObject=0x114) returned 1
	[0250.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0250.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json")) returned 0x2020
	[0250.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.175] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0250.175] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.175] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.175] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0250.176] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x419f, lpOverlapped=0x0) returned 1
	[0250.177] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x41a0, lpOverlapped=0x0) returned 1
	[0250.178] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0250.179] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.179] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.179] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x419f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x419f, lpOverlapped=0x0) returned 1
	[0250.179] FlushFileBuffers (hFile=0x114) returned 1
	[0250.191] FlushFileBuffers (hFile=0x20c) returned 1
	[0250.194] CloseHandle (hObject=0x114) returned 1
	[0250.194] CloseHandle (hObject=0x20c) returned 1
	[0250.194] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json")) returned 1
	[0250.195] SetEvent (hEvent=0xfc) returned 1
	[0250.195] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0250.196] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20601) returned 1
	[0250.196] CloseHandle (hObject=0x20c) returned 1
	[0250.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json")) returned 0x2020
	[0250.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json")) returned 0x2020
	[0250.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.196] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0250.196] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.196] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.196] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0250.197] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x5079, lpOverlapped=0x0) returned 1
	[0250.199] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5080, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x5080, lpOverlapped=0x0) returned 1
	[0250.200] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0250.200] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.200] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.200] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5079, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x5079, lpOverlapped=0x0) returned 1
	[0250.200] FlushFileBuffers (hFile=0x20c) returned 1
	[0250.222] FlushFileBuffers (hFile=0x114) returned 1
	[0250.224] CloseHandle (hObject=0x20c) returned 1
	[0250.224] CloseHandle (hObject=0x114) returned 1
	[0250.224] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json")) returned 1
	[0250.225] SetEvent (hEvent=0xfc) returned 1
	[0250.225] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0250.226] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16370) returned 1
	[0250.226] CloseHandle (hObject=0x114) returned 1
	[0250.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json")) returned 0x2020
	[0250.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json")) returned 0x2020
	[0250.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.226] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0250.226] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.226] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.226] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0250.227] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3ff2, lpOverlapped=0x0) returned 1
	[0250.228] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4000, lpOverlapped=0x0) returned 1
	[0250.229] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0250.230] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.230] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.230] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3ff2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3ff2, lpOverlapped=0x0) returned 1
	[0250.230] FlushFileBuffers (hFile=0x114) returned 1
	[0250.246] FlushFileBuffers (hFile=0x20c) returned 1
	[0250.251] CloseHandle (hObject=0x114) returned 1
	[0250.251] CloseHandle (hObject=0x20c) returned 1
	[0250.251] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json")) returned 1
	[0250.252] SetEvent (hEvent=0xfc) returned 1
	[0250.252] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0250.253] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15965) returned 1
	[0250.253] CloseHandle (hObject=0x20c) returned 1
	[0250.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json")) returned 0x2020
	[0250.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json")) returned 0x2020
	[0250.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.253] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0250.253] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.253] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.253] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0250.254] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3e5d, lpOverlapped=0x0) returned 1
	[0250.256] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3e60, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3e60, lpOverlapped=0x0) returned 1
	[0250.257] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0250.257] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.257] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.257] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3e5d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3e5d, lpOverlapped=0x0) returned 1
	[0250.257] FlushFileBuffers (hFile=0x20c) returned 1
	[0250.273] FlushFileBuffers (hFile=0x114) returned 1
	[0250.274] CloseHandle (hObject=0x20c) returned 1
	[0250.274] CloseHandle (hObject=0x114) returned 1
	[0250.274] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json")) returned 1
	[0250.275] SetEvent (hEvent=0xfc) returned 1
	[0250.275] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0250.276] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20596) returned 1
	[0250.276] CloseHandle (hObject=0x114) returned 1
	[0250.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json")) returned 0x2020
	[0250.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json")) returned 0x2020
	[0250.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.276] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0250.276] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.276] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.276] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0250.277] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x5074, lpOverlapped=0x0) returned 1
	[0250.279] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5080, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x5080, lpOverlapped=0x0) returned 1
	[0250.280] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0250.280] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.280] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.280] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5074, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x5074, lpOverlapped=0x0) returned 1
	[0250.281] FlushFileBuffers (hFile=0x114) returned 1
	[0250.293] FlushFileBuffers (hFile=0x20c) returned 1
	[0250.297] CloseHandle (hObject=0x114) returned 1
	[0250.297] CloseHandle (hObject=0x20c) returned 1
	[0250.297] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json")) returned 1
	[0250.298] SetEvent (hEvent=0xfc) returned 1
	[0250.298] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0250.299] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21923) returned 1
	[0250.299] CloseHandle (hObject=0x20c) returned 1
	[0250.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json")) returned 0x2020
	[0250.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json")) returned 0x2020
	[0250.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.299] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0250.299] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.299] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.299] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0250.300] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x55a3, lpOverlapped=0x0) returned 1
	[0250.302] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x55b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x55b0, lpOverlapped=0x0) returned 1
	[0250.303] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0250.303] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.303] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.303] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x55a3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x55a3, lpOverlapped=0x0) returned 1
	[0250.303] FlushFileBuffers (hFile=0x20c) returned 1
	[0250.423] FlushFileBuffers (hFile=0x114) returned 1
	[0250.471] CloseHandle (hObject=0x20c) returned 1
	[0250.472] CloseHandle (hObject=0x114) returned 1
	[0250.472] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json")) returned 1
	[0250.473] SetEvent (hEvent=0xfc) returned 1
	[0250.473] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0250.474] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16747) returned 1
	[0250.474] CloseHandle (hObject=0x114) returned 1
	[0250.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0250.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json")) returned 0x2020
	[0250.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.474] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0250.474] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.474] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.474] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0250.475] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x416b, lpOverlapped=0x0) returned 1
	[0250.477] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4170, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4170, lpOverlapped=0x0) returned 1
	[0250.478] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0250.478] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.478] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.478] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x416b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x416b, lpOverlapped=0x0) returned 1
	[0250.478] FlushFileBuffers (hFile=0x114) returned 1
	[0250.595] FlushFileBuffers (hFile=0x20c) returned 1
	[0250.771] CloseHandle (hObject=0x114) returned 1
	[0250.771] CloseHandle (hObject=0x20c) returned 1
	[0250.771] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json")) returned 1
	[0250.772] SetEvent (hEvent=0xfc) returned 1
	[0250.772] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0250.773] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22591) returned 1
	[0250.773] CloseHandle (hObject=0x20c) returned 1
	[0250.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json")) returned 0x2020
	[0250.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json")) returned 0x2020
	[0250.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0250.774] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.774] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.774] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0250.775] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x583f, lpOverlapped=0x0) returned 1
	[0250.778] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5840, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x5840, lpOverlapped=0x0) returned 1
	[0250.779] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0250.779] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.779] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.779] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x583f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x583f, lpOverlapped=0x0) returned 1
	[0250.780] FlushFileBuffers (hFile=0x20c) returned 1
	[0250.874] FlushFileBuffers (hFile=0x114) returned 1
	[0250.881] CloseHandle (hObject=0x20c) returned 1
	[0250.881] CloseHandle (hObject=0x114) returned 1
	[0250.881] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json")) returned 1
	[0250.882] SetEvent (hEvent=0xfc) returned 1
	[0250.883] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0250.884] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16267) returned 1
	[0250.884] CloseHandle (hObject=0x114) returned 1
	[0250.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json")) returned 0x2020
	[0250.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json")) returned 0x2020
	[0250.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.884] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0250.884] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.885] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.885] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0250.889] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3f8b, lpOverlapped=0x0) returned 1
	[0250.891] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3f90, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3f90, lpOverlapped=0x0) returned 1
	[0250.895] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0250.895] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.895] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.895] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3f8b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3f8b, lpOverlapped=0x0) returned 1
	[0250.895] FlushFileBuffers (hFile=0x114) returned 1
	[0250.942] FlushFileBuffers (hFile=0x20c) returned 1
	[0250.958] CloseHandle (hObject=0x114) returned 1
	[0250.958] CloseHandle (hObject=0x20c) returned 1
	[0250.959] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json")) returned 1
	[0250.959] SetEvent (hEvent=0xfc) returned 1
	[0250.960] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0250.961] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16348) returned 1
	[0250.961] CloseHandle (hObject=0x20c) returned 1
	[0250.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json")) returned 0x2020
	[0250.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json")) returned 0x2020
	[0250.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.961] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0250.962] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.962] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.962] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0250.963] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3fdc, lpOverlapped=0x0) returned 1
	[0250.969] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3fe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3fe0, lpOverlapped=0x0) returned 1
	[0250.970] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0250.970] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.970] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.970] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3fdc, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3fdc, lpOverlapped=0x0) returned 1
	[0250.971] FlushFileBuffers (hFile=0x20c) returned 1
	[0250.990] FlushFileBuffers (hFile=0x114) returned 1
	[0250.992] CloseHandle (hObject=0x20c) returned 1
	[0250.992] CloseHandle (hObject=0x114) returned 1
	[0250.992] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json")) returned 1
	[0250.993] SetEvent (hEvent=0xfc) returned 1
	[0250.993] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0250.994] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16348) returned 1
	[0250.994] CloseHandle (hObject=0x114) returned 1
	[0250.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0250.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json")) returned 0x2020
	[0250.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0250.994] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0250.994] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.995] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0250.995] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0250.996] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3fdc, lpOverlapped=0x0) returned 1
	[0250.998] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3fe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3fe0, lpOverlapped=0x0) returned 1
	[0250.999] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0250.999] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.999] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0250.999] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3fdc, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3fdc, lpOverlapped=0x0) returned 1
	[0250.999] FlushFileBuffers (hFile=0x114) returned 1
	[0251.086] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.107] CloseHandle (hObject=0x114) returned 1
	[0251.107] CloseHandle (hObject=0x20c) returned 1
	[0251.107] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json")) returned 1
	[0251.108] SetEvent (hEvent=0xfc) returned 1
	[0251.109] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.110] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16637) returned 1
	[0251.110] CloseHandle (hObject=0x20c) returned 1
	[0251.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0251.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json")) returned 0x2020
	[0251.111] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.111] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.111] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.111] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.111] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.112] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x40fd, lpOverlapped=0x0) returned 1
	[0251.114] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4100, lpOverlapped=0x0) returned 1
	[0251.115] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.115] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.115] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.115] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x40fd, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x40fd, lpOverlapped=0x0) returned 1
	[0251.115] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.119] FlushFileBuffers (hFile=0x114) returned 1
	[0251.125] CloseHandle (hObject=0x20c) returned 1
	[0251.125] CloseHandle (hObject=0x114) returned 1
	[0251.125] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json")) returned 1
	[0251.126] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.127] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18881) returned 1
	[0251.127] CloseHandle (hObject=0x114) returned 1
	[0251.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0251.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json")) returned 0x2020
	[0251.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.128] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.128] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.128] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.128] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.129] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x49c1, lpOverlapped=0x0) returned 1
	[0251.134] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x49d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x49d0, lpOverlapped=0x0) returned 1
	[0251.135] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.137] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.137] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.137] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x49c1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x49c1, lpOverlapped=0x0) returned 1
	[0251.137] FlushFileBuffers (hFile=0x114) returned 1
	[0251.139] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.141] CloseHandle (hObject=0x114) returned 1
	[0251.141] CloseHandle (hObject=0x20c) returned 1
	[0251.141] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json")) returned 1
	[0251.142] SetEvent (hEvent=0xfc) returned 1
	[0251.142] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.143] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16022) returned 1
	[0251.144] CloseHandle (hObject=0x20c) returned 1
	[0251.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0251.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json")) returned 0x2020
	[0251.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.144] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.144] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.144] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.144] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.145] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3e96, lpOverlapped=0x0) returned 1
	[0251.147] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3ea0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3ea0, lpOverlapped=0x0) returned 1
	[0251.148] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.148] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.148] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.148] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3e96, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3e96, lpOverlapped=0x0) returned 1
	[0251.148] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.163] FlushFileBuffers (hFile=0x114) returned 1
	[0251.165] CloseHandle (hObject=0x20c) returned 1
	[0251.166] CloseHandle (hObject=0x114) returned 1
	[0251.166] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json")) returned 1
	[0251.167] SetEvent (hEvent=0xfc) returned 1
	[0251.167] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.168] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16011) returned 1
	[0251.168] CloseHandle (hObject=0x114) returned 1
	[0251.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json")) returned 0x2020
	[0251.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json")) returned 0x2020
	[0251.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.168] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.169] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.169] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.169] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.169] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3e8b, lpOverlapped=0x0) returned 1
	[0251.171] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3e90, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3e90, lpOverlapped=0x0) returned 1
	[0251.172] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.172] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.172] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.172] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3e8b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3e8b, lpOverlapped=0x0) returned 1
	[0251.173] FlushFileBuffers (hFile=0x114) returned 1
	[0251.175] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.177] CloseHandle (hObject=0x114) returned 1
	[0251.177] CloseHandle (hObject=0x20c) returned 1
	[0251.177] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json")) returned 1
	[0251.178] SetEvent (hEvent=0xfc) returned 1
	[0251.178] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.179] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=22077) returned 1
	[0251.179] CloseHandle (hObject=0x20c) returned 1
	[0251.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json")) returned 0x2020
	[0251.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json")) returned 0x2020
	[0251.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.179] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.179] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.179] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.179] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.180] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x563d, lpOverlapped=0x0) returned 1
	[0251.182] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5640, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x5640, lpOverlapped=0x0) returned 1
	[0251.183] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.183] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.183] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.183] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x563d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x563d, lpOverlapped=0x0) returned 1
	[0251.183] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.196] FlushFileBuffers (hFile=0x114) returned 1
	[0251.198] CloseHandle (hObject=0x20c) returned 1
	[0251.198] CloseHandle (hObject=0x114) returned 1
	[0251.198] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json")) returned 1
	[0251.199] SetEvent (hEvent=0xfc) returned 1
	[0251.200] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.200] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20324) returned 1
	[0251.200] CloseHandle (hObject=0x114) returned 1
	[0251.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json")) returned 0x2020
	[0251.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json")) returned 0x2020
	[0251.201] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.201] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.201] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.201] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.201] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.202] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x4f64, lpOverlapped=0x0) returned 1
	[0251.203] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4f70, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4f70, lpOverlapped=0x0) returned 1
	[0251.204] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.205] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.205] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.205] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4f64, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x4f64, lpOverlapped=0x0) returned 1
	[0251.205] FlushFileBuffers (hFile=0x114) returned 1
	[0251.316] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.326] CloseHandle (hObject=0x114) returned 1
	[0251.326] CloseHandle (hObject=0x20c) returned 1
	[0251.326] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json")) returned 1
	[0251.327] SetEvent (hEvent=0xfc) returned 1
	[0251.328] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.329] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18673) returned 1
	[0251.329] CloseHandle (hObject=0x20c) returned 1
	[0251.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0251.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json")) returned 0x2020
	[0251.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.329] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.329] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.329] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.329] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.330] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x48f1, lpOverlapped=0x0) returned 1
	[0251.334] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4900, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4900, lpOverlapped=0x0) returned 1
	[0251.336] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.336] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.336] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.336] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x48f1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x48f1, lpOverlapped=0x0) returned 1
	[0251.336] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.554] FlushFileBuffers (hFile=0x114) returned 1
	[0251.566] CloseHandle (hObject=0x20c) returned 1
	[0251.566] CloseHandle (hObject=0x114) returned 1
	[0251.566] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json")) returned 1
	[0251.567] SetEvent (hEvent=0xfc) returned 1
	[0251.568] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.569] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15929) returned 1
	[0251.569] CloseHandle (hObject=0x114) returned 1
	[0251.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0251.569] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json")) returned 0x2020
	[0251.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.570] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.570] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.570] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.570] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.571] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3e39, lpOverlapped=0x0) returned 1
	[0251.573] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3e40, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3e40, lpOverlapped=0x0) returned 1
	[0251.574] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0251.574] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.574] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.574] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3e39, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3e39, lpOverlapped=0x0) returned 1
	[0251.574] FlushFileBuffers (hFile=0x114) returned 1
	[0251.580] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.582] CloseHandle (hObject=0x114) returned 1
	[0251.587] CloseHandle (hObject=0x20c) returned 1
	[0251.588] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json")) returned 1
	[0251.589] SetEvent (hEvent=0xfc) returned 1
	[0251.589] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.590] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20480) returned 1
	[0251.590] CloseHandle (hObject=0x20c) returned 1
	[0251.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons")) returned 0x2020
	[0251.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons")) returned 0x2020
	[0251.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.590] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.591] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.591] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.591] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.592] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x5000, lpOverlapped=0x0) returned 1
	[0251.593] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x5010, lpOverlapped=0x0) returned 1
	[0251.595] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.595] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.595] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.595] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x5000, lpOverlapped=0x0) returned 1
	[0251.595] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.600] FlushFileBuffers (hFile=0x114) returned 1
	[0251.601] CloseHandle (hObject=0x20c) returned 1
	[0251.602] CloseHandle (hObject=0x114) returned 1
	[0251.602] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons")) returned 1
	[0251.603] SetEvent (hEvent=0xfc) returned 1
	[0251.603] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.604] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.604] CloseHandle (hObject=0x114) returned 1
	[0251.604] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.605] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=176873) returned 1
	[0251.605] CloseHandle (hObject=0x114) returned 1
	[0251.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico")) returned 0x2020
	[0251.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico")) returned 0x2020
	[0251.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.605] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.605] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.605] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.605] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.606] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2b2e9, lpOverlapped=0x0) returned 1
	[0251.611] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b2f0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2b2f0, lpOverlapped=0x0) returned 1
	[0251.614] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0251.615] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.615] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.615] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b2e9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2b2e9, lpOverlapped=0x0) returned 1
	[0251.615] FlushFileBuffers (hFile=0x114) returned 1
	[0251.635] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.637] CloseHandle (hObject=0x114) returned 1
	[0251.637] CloseHandle (hObject=0x20c) returned 1
	[0251.637] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico")) returned 1
	[0251.639] SetEvent (hEvent=0xfc) returned 1
	[0251.640] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.641] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5167) returned 1
	[0251.641] CloseHandle (hObject=0x20c) returned 1
	[0251.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache")) returned 0x2020
	[0251.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache")) returned 0x2020
	[0251.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.641] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.641] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.641] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.641] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.642] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x142f, lpOverlapped=0x0) returned 1
	[0251.644] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1430, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1430, lpOverlapped=0x0) returned 1
	[0251.645] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0251.645] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.645] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.645] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x142f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x142f, lpOverlapped=0x0) returned 1
	[0251.645] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.648] FlushFileBuffers (hFile=0x114) returned 1
	[0251.649] CloseHandle (hObject=0x20c) returned 1
	[0251.649] CloseHandle (hObject=0x114) returned 1
	[0251.649] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache")) returned 1
	[0251.650] SetEvent (hEvent=0xfc) returned 1
	[0251.650] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.651] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.651] CloseHandle (hObject=0x114) returned 1
	[0251.651] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A058.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.652] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.652] CloseHandle (hObject=0x114) returned 1
	[0251.652] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A059.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.653] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.653] CloseHandle (hObject=0x114) returned 1
	[0251.653] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B03.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.655] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.655] CloseHandle (hObject=0x114) returned 1
	[0251.655] SetEvent (hEvent=0xfc) returned 1
	[0251.655] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B04.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.656] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.656] CloseHandle (hObject=0x114) returned 1
	[0251.656] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.658] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.658] CloseHandle (hObject=0x114) returned 1
	[0251.658] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.658] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16) returned 1
	[0251.659] CloseHandle (hObject=0x114) returned 1
	[0251.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current")) returned 0x2020
	[0251.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current")) returned 0x2020
	[0251.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.659] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.659] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.659] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.659] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.660] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x10, lpOverlapped=0x0) returned 1
	[0251.661] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x20, lpOverlapped=0x0) returned 1
	[0251.665] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0251.665] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.665] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.665] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x10, lpOverlapped=0x0) returned 1
	[0251.665] FlushFileBuffers (hFile=0x114) returned 1
	[0251.668] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.685] CloseHandle (hObject=0x114) returned 1
	[0251.685] CloseHandle (hObject=0x20c) returned 1
	[0251.685] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current")) returned 1
	[0251.686] SetEvent (hEvent=0xfc) returned 1
	[0251.687] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.688] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.688] CloseHandle (hObject=0x20c) returned 1
	[0251.689] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.689] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=196) returned 1
	[0251.690] CloseHandle (hObject=0x20c) returned 1
	[0251.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log")) returned 0x2020
	[0251.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log")) returned 0x2020
	[0251.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.690] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.690] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.690] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.690] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.691] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc4, lpOverlapped=0x0) returned 1
	[0251.692] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0251.693] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0251.693] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.693] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.693] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc4, lpOverlapped=0x0) returned 1
	[0251.693] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.696] FlushFileBuffers (hFile=0x114) returned 1
	[0251.699] CloseHandle (hObject=0x20c) returned 1
	[0251.699] CloseHandle (hObject=0x114) returned 1
	[0251.699] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log")) returned 1
	[0251.700] SetEvent (hEvent=0xfc) returned 1
	[0251.700] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.701] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41) returned 1
	[0251.701] CloseHandle (hObject=0x114) returned 1
	[0251.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001")) returned 0x2020
	[0251.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001")) returned 0x2020
	[0251.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.701] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.701] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.702] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.702] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.702] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x29, lpOverlapped=0x0) returned 1
	[0251.703] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x30, lpOverlapped=0x0) returned 1
	[0251.704] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.704] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.704] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.704] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x29, lpOverlapped=0x0) returned 1
	[0251.705] FlushFileBuffers (hFile=0x114) returned 1
	[0251.707] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.709] CloseHandle (hObject=0x114) returned 1
	[0251.709] CloseHandle (hObject=0x20c) returned 1
	[0251.710] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001")) returned 1
	[0251.710] SetEvent (hEvent=0xfc) returned 1
	[0251.710] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.712] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12288) returned 1
	[0251.712] CloseHandle (hObject=0x20c) returned 1
	[0251.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage")) returned 0x2020
	[0251.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage")) returned 0x2020
	[0251.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.712] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.712] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.712] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.712] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.713] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3000, lpOverlapped=0x0) returned 1
	[0251.715] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3010, lpOverlapped=0x0) returned 1
	[0251.716] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x162, lpOverlapped=0x0) returned 1
	[0251.717] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.717] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.717] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3000, lpOverlapped=0x0) returned 1
	[0251.717] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.720] FlushFileBuffers (hFile=0x114) returned 1
	[0251.722] CloseHandle (hObject=0x20c) returned 1
	[0251.722] CloseHandle (hObject=0x114) returned 1
	[0251.722] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage")) returned 1
	[0251.723] SetEvent (hEvent=0xfc) returned 1
	[0251.723] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.724] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.724] CloseHandle (hObject=0x114) returned 1
	[0251.724] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.725] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18432) returned 1
	[0251.725] CloseHandle (hObject=0x114) returned 1
	[0251.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data")) returned 0x2020
	[0251.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data")) returned 0x2020
	[0251.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.726] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.726] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.726] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.726] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.727] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x4800, lpOverlapped=0x0) returned 1
	[0251.729] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4810, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4810, lpOverlapped=0x0) returned 1
	[0251.730] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.730] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.730] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.730] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4800, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x4800, lpOverlapped=0x0) returned 1
	[0251.730] FlushFileBuffers (hFile=0x114) returned 1
	[0251.750] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.752] CloseHandle (hObject=0x114) returned 1
	[0251.753] CloseHandle (hObject=0x20c) returned 1
	[0251.753] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data")) returned 1
	[0251.754] SetEvent (hEvent=0xfc) returned 1
	[0251.754] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.755] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.755] CloseHandle (hObject=0x20c) returned 1
	[0251.755] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.756] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15360) returned 1
	[0251.756] CloseHandle (hObject=0x20c) returned 1
	[0251.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor")) returned 0x2020
	[0251.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor")) returned 0x2020
	[0251.756] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.756] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.756] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.756] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.756] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.757] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3c00, lpOverlapped=0x0) returned 1
	[0251.759] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3c10, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3c10, lpOverlapped=0x0) returned 1
	[0251.761] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0251.761] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.761] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.761] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3c00, lpOverlapped=0x0) returned 1
	[0251.761] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.786] FlushFileBuffers (hFile=0x114) returned 1
	[0251.787] CloseHandle (hObject=0x20c) returned 1
	[0251.788] CloseHandle (hObject=0x114) returned 1
	[0251.788] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor")) returned 1
	[0251.789] SetEvent (hEvent=0xfc) returned 1
	[0251.789] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.790] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5120) returned 1
	[0251.790] CloseHandle (hObject=0x114) returned 1
	[0251.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs")) returned 0x2020
	[0251.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs")) returned 0x2020
	[0251.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.790] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.790] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.790] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.790] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.791] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1400, lpOverlapped=0x0) returned 1
	[0251.793] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1410, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1410, lpOverlapped=0x0) returned 1
	[0251.794] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0251.794] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.794] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.794] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1400, lpOverlapped=0x0) returned 1
	[0251.794] FlushFileBuffers (hFile=0x114) returned 1
	[0251.797] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.799] CloseHandle (hObject=0x114) returned 1
	[0251.799] CloseHandle (hObject=0x20c) returned 1
	[0251.799] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs")) returned 1
	[0251.800] SetEvent (hEvent=0xfc) returned 1
	[0251.800] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.801] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.801] CloseHandle (hObject=0x20c) returned 1
	[0251.801] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.802] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6813) returned 1
	[0251.802] CloseHandle (hObject=0x20c) returned 1
	[0251.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences")) returned 0x2020
	[0251.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences")) returned 0x2020
	[0251.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.802] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.802] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.802] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.802] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.803] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1a9d, lpOverlapped=0x0) returned 1
	[0251.805] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1aa0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1aa0, lpOverlapped=0x0) returned 1
	[0251.805] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.806] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.806] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.806] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1a9d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1a9d, lpOverlapped=0x0) returned 1
	[0251.806] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.808] FlushFileBuffers (hFile=0x114) returned 1
	[0251.813] CloseHandle (hObject=0x20c) returned 1
	[0251.813] CloseHandle (hObject=0x114) returned 1
	[0251.813] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences")) returned 1
	[0251.814] SetEvent (hEvent=0xfc) returned 1
	[0251.814] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.815] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=15360) returned 1
	[0251.815] CloseHandle (hObject=0x114) returned 1
	[0251.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager")) returned 0x2020
	[0251.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager")) returned 0x2020
	[0251.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.815] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.815] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.815] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.816] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.818] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3c00, lpOverlapped=0x0) returned 1
	[0251.820] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3c10, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3c10, lpOverlapped=0x0) returned 1
	[0251.821] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.821] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.821] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.821] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3c00, lpOverlapped=0x0) returned 1
	[0251.821] FlushFileBuffers (hFile=0x114) returned 1
	[0251.850] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.853] CloseHandle (hObject=0x114) returned 1
	[0251.853] CloseHandle (hObject=0x20c) returned 1
	[0251.853] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager")) returned 1
	[0251.854] SetEvent (hEvent=0xfc) returned 1
	[0251.855] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.856] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.856] CloseHandle (hObject=0x20c) returned 1
	[0251.856] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.858] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=180) returned 1
	[0251.858] CloseHandle (hObject=0x20c) returned 1
	[0251.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme")) returned 0x2020
	[0251.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme")) returned 0x2020
	[0251.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.858] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.858] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.858] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.858] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.859] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb4, lpOverlapped=0x0) returned 1
	[0251.860] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0251.861] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0251.861] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.861] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.861] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb4, lpOverlapped=0x0) returned 1
	[0251.861] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.863] FlushFileBuffers (hFile=0x114) returned 1
	[0251.866] CloseHandle (hObject=0x20c) returned 1
	[0251.866] CloseHandle (hObject=0x114) returned 1
	[0251.866] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme")) returned 1
	[0251.867] SetEvent (hEvent=0xfc) returned 1
	[0251.867] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.867] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=35651) returned 1
	[0251.867] CloseHandle (hObject=0x114) returned 1
	[0251.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences")) returned 0x2020
	[0251.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences")) returned 0x2020
	[0251.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.868] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.868] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.868] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.868] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.868] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x8b43, lpOverlapped=0x0) returned 1
	[0251.870] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8b50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x8b50, lpOverlapped=0x0) returned 1
	[0251.872] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0251.872] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.872] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.872] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8b43, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x8b43, lpOverlapped=0x0) returned 1
	[0251.872] FlushFileBuffers (hFile=0x114) returned 1
	[0251.885] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.886] CloseHandle (hObject=0x114) returned 1
	[0251.886] CloseHandle (hObject=0x20c) returned 1
	[0251.886] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences")) returned 1
	[0251.887] SetEvent (hEvent=0xfc) returned 1
	[0251.888] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.888] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.888] CloseHandle (hObject=0x20c) returned 1
	[0251.889] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.890] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.890] CloseHandle (hObject=0x20c) returned 1
	[0251.890] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.891] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16) returned 1
	[0251.891] CloseHandle (hObject=0x20c) returned 1
	[0251.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current")) returned 0x2020
	[0251.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current")) returned 0x2020
	[0251.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.891] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.891] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.891] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.891] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.892] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x10, lpOverlapped=0x0) returned 1
	[0251.893] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x20, lpOverlapped=0x0) returned 1
	[0251.894] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0251.894] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.894] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.894] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x10, lpOverlapped=0x0) returned 1
	[0251.894] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.897] FlushFileBuffers (hFile=0x114) returned 1
	[0251.899] CloseHandle (hObject=0x20c) returned 1
	[0251.899] CloseHandle (hObject=0x114) returned 1
	[0251.899] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current")) returned 1
	[0251.900] SetEvent (hEvent=0xfc) returned 1
	[0251.900] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.901] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.901] CloseHandle (hObject=0x114) returned 1
	[0251.901] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.902] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=195) returned 1
	[0251.902] CloseHandle (hObject=0x114) returned 1
	[0251.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log")) returned 0x2020
	[0251.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log")) returned 0x2020
	[0251.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.903] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.903] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.903] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.903] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.904] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc3, lpOverlapped=0x0) returned 1
	[0251.904] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xd0, lpOverlapped=0x0) returned 1
	[0251.905] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0251.905] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.906] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.906] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc3, lpOverlapped=0x0) returned 1
	[0251.906] FlushFileBuffers (hFile=0x114) returned 1
	[0251.908] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.910] CloseHandle (hObject=0x114) returned 1
	[0251.910] CloseHandle (hObject=0x20c) returned 1
	[0251.910] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log")) returned 1
	[0251.911] SetEvent (hEvent=0xfc) returned 1
	[0251.911] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.912] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=41) returned 1
	[0251.912] CloseHandle (hObject=0x20c) returned 1
	[0251.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001")) returned 0x2020
	[0251.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001")) returned 0x2020
	[0251.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.913] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.913] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.913] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.913] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.913] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x29, lpOverlapped=0x0) returned 1
	[0251.914] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x30, lpOverlapped=0x0) returned 1
	[0251.915] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.915] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.915] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.916] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x29, lpOverlapped=0x0) returned 1
	[0251.916] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.923] FlushFileBuffers (hFile=0x114) returned 1
	[0251.925] CloseHandle (hObject=0x20c) returned 1
	[0251.925] CloseHandle (hObject=0x114) returned 1
	[0251.925] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001")) returned 1
	[0251.926] SetEvent (hEvent=0xfc) returned 1
	[0251.926] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.927] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=20480) returned 1
	[0251.927] CloseHandle (hObject=0x114) returned 1
	[0251.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites")) returned 0x2020
	[0251.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites")) returned 0x2020
	[0251.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.927] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.928] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.928] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.928] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.928] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x5000, lpOverlapped=0x0) returned 1
	[0251.930] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x5010, lpOverlapped=0x0) returned 1
	[0251.931] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.931] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.932] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.932] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x5000, lpOverlapped=0x0) returned 1
	[0251.932] FlushFileBuffers (hFile=0x114) returned 1
	[0251.943] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.945] CloseHandle (hObject=0x114) returned 1
	[0251.945] CloseHandle (hObject=0x20c) returned 1
	[0251.945] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites")) returned 1
	[0251.957] SetEvent (hEvent=0xfc) returned 1
	[0251.957] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.958] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0251.958] CloseHandle (hObject=0x20c) returned 1
	[0251.958] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.959] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=632) returned 1
	[0251.959] CloseHandle (hObject=0x20c) returned 1
	[0251.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity")) returned 0x2020
	[0251.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity")) returned 0x2020
	[0251.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.959] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.959] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.959] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.959] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.960] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x278, lpOverlapped=0x0) returned 1
	[0251.961] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x280, lpOverlapped=0x0) returned 1
	[0251.962] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0251.963] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.963] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.963] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x278, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x278, lpOverlapped=0x0) returned 1
	[0251.963] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.966] FlushFileBuffers (hFile=0x114) returned 1
	[0251.967] CloseHandle (hObject=0x20c) returned 1
	[0251.967] CloseHandle (hObject=0x114) returned 1
	[0251.967] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity")) returned 1
	[0251.968] SetEvent (hEvent=0xfc) returned 1
	[0251.968] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.969] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=131072) returned 1
	[0251.969] CloseHandle (hObject=0x114) returned 1
	[0251.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links")) returned 0x2020
	[0251.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links")) returned 0x2020
	[0251.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.969] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.969] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.969] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.969] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0251.970] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x20000, lpOverlapped=0x0) returned 1
	[0251.973] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x20010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x20010, lpOverlapped=0x0) returned 1
	[0251.975] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0251.975] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.976] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.976] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x20000, lpOverlapped=0x0) returned 1
	[0251.976] FlushFileBuffers (hFile=0x114) returned 1
	[0251.980] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.984] CloseHandle (hObject=0x114) returned 1
	[0251.984] CloseHandle (hObject=0x20c) returned 1
	[0251.984] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links")) returned 1
	[0251.985] SetEvent (hEvent=0xfc) returned 1
	[0251.985] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.986] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16) returned 1
	[0251.986] CloseHandle (hObject=0x20c) returned 1
	[0251.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5")) returned 0x2020
	[0251.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5")) returned 0x2020
	[0251.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.987] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0251.987] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.987] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0251.987] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0251.989] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x10, lpOverlapped=0x0) returned 1
	[0251.990] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x20, lpOverlapped=0x0) returned 1
	[0251.991] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0251.991] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.991] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0251.991] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x10, lpOverlapped=0x0) returned 1
	[0251.991] FlushFileBuffers (hFile=0x20c) returned 1
	[0251.994] FlushFileBuffers (hFile=0x114) returned 1
	[0251.997] CloseHandle (hObject=0x20c) returned 1
	[0251.997] CloseHandle (hObject=0x114) returned 1
	[0251.997] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5")) returned 1
	[0251.998] SetEvent (hEvent=0xfc) returned 1
	[0251.998] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.999] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=69632) returned 1
	[0251.999] CloseHandle (hObject=0x114) returned 1
	[0251.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data")) returned 0x2020
	[0251.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data")) returned 0x2020
	[0251.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0251.999] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0251.999] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.000] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.000] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.000] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x11000, lpOverlapped=0x0) returned 1
	[0252.003] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x11010, lpOverlapped=0x0) returned 1
	[0252.004] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.005] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.005] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.005] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x11000, lpOverlapped=0x0) returned 1
	[0252.005] FlushFileBuffers (hFile=0x114) returned 1
	[0252.115] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.118] CloseHandle (hObject=0x114) returned 1
	[0252.118] CloseHandle (hObject=0x20c) returned 1
	[0252.124] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data")) returned 1
	[0252.125] SetEvent (hEvent=0xfc) returned 1
	[0252.125] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.127] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0252.127] CloseHandle (hObject=0x20c) returned 1
	[0252.127] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\first run"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.128] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0252.128] CloseHandle (hObject=0x20c) returned 1
	[0252.128] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.129] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67626) returned 1
	[0252.129] CloseHandle (hObject=0x20c) returned 1
	[0252.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state")) returned 0x2020
	[0252.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state")) returned 0x2020
	[0252.129] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.129] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.129] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.129] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.129] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.130] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1082a, lpOverlapped=0x0) returned 1
	[0252.132] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10830, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x10830, lpOverlapped=0x0) returned 1
	[0252.134] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.134] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.134] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.134] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1082a, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1082a, lpOverlapped=0x0) returned 1
	[0252.134] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.145] FlushFileBuffers (hFile=0x114) returned 1
	[0252.147] CloseHandle (hObject=0x20c) returned 1
	[0252.147] CloseHandle (hObject=0x114) returned 1
	[0252.147] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state")) returned 1
	[0252.149] SetEvent (hEvent=0xfc) returned 1
	[0252.149] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.149] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5120) returned 1
	[0252.149] CloseHandle (hObject=0x114) returned 1
	[0252.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids")) returned 0x2020
	[0252.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids")) returned 0x2020
	[0252.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.150] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.150] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.151] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1400, lpOverlapped=0x0) returned 1
	[0252.152] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1410, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1410, lpOverlapped=0x0) returned 1
	[0252.153] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0252.153] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.153] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.153] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1400, lpOverlapped=0x0) returned 1
	[0252.153] FlushFileBuffers (hFile=0x114) returned 1
	[0252.157] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.158] CloseHandle (hObject=0x114) returned 1
	[0252.158] CloseHandle (hObject=0x20c) returned 1
	[0252.158] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids")) returned 1
	[0252.159] SetEvent (hEvent=0xfc) returned 1
	[0252.159] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.160] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0252.160] CloseHandle (hObject=0x20c) returned 1
	[0252.160] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.161] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7168) returned 1
	[0252.161] CloseHandle (hObject=0x20c) returned 1
	[0252.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies")) returned 0x2020
	[0252.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies")) returned 0x2020
	[0252.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.161] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.161] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.161] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.161] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.162] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1c00, lpOverlapped=0x0) returned 1
	[0252.163] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c10, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1c10, lpOverlapped=0x0) returned 1
	[0252.164] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0252.164] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.164] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.164] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1c00, lpOverlapped=0x0) returned 1
	[0252.164] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.167] FlushFileBuffers (hFile=0x114) returned 1
	[0252.168] CloseHandle (hObject=0x20c) returned 1
	[0252.168] CloseHandle (hObject=0x114) returned 1
	[0252.169] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies")) returned 1
	[0252.169] SetEvent (hEvent=0xfc) returned 1
	[0252.170] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.171] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6656) returned 1
	[0252.171] CloseHandle (hObject=0x114) returned 1
	[0252.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms")) returned 0x2020
	[0252.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms")) returned 0x2020
	[0252.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.171] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.171] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.171] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.171] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.172] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1a00, lpOverlapped=0x0) returned 1
	[0252.178] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1a10, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1a10, lpOverlapped=0x0) returned 1
	[0252.178] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0252.179] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.179] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.179] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1a00, lpOverlapped=0x0) returned 1
	[0252.179] FlushFileBuffers (hFile=0x114) returned 1
	[0252.182] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.184] CloseHandle (hObject=0x114) returned 1
	[0252.185] CloseHandle (hObject=0x20c) returned 1
	[0252.185] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms")) returned 1
	[0252.186] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.187] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28672) returned 1
	[0252.187] CloseHandle (hObject=0x20c) returned 1
	[0252.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms")) returned 0x2020
	[0252.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms")) returned 0x2020
	[0252.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.187] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.187] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.187] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.187] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.188] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x7000, lpOverlapped=0x0) returned 1
	[0252.190] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x7010, lpOverlapped=0x0) returned 1
	[0252.191] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0252.191] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.191] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.191] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x7000, lpOverlapped=0x0) returned 1
	[0252.191] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.208] FlushFileBuffers (hFile=0x114) returned 1
	[0252.209] CloseHandle (hObject=0x20c) returned 1
	[0252.210] CloseHandle (hObject=0x114) returned 1
	[0252.210] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms")) returned 1
	[0252.211] SetEvent (hEvent=0xfc) returned 1
	[0252.211] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.211] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28672) returned 1
	[0252.211] CloseHandle (hObject=0x114) returned 1
	[0252.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms")) returned 0x2020
	[0252.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms")) returned 0x2020
	[0252.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.212] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.212] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.212] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.212] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.221] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x7000, lpOverlapped=0x0) returned 1
	[0252.223] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x7010, lpOverlapped=0x0) returned 1
	[0252.224] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0252.224] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.225] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.225] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x7000, lpOverlapped=0x0) returned 1
	[0252.225] FlushFileBuffers (hFile=0x114) returned 1
	[0252.265] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.267] CloseHandle (hObject=0x114) returned 1
	[0252.267] CloseHandle (hObject=0x20c) returned 1
	[0252.267] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms")) returned 1
	[0252.268] SetEvent (hEvent=0xfc) returned 1
	[0252.268] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.269] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67) returned 1
	[0252.269] CloseHandle (hObject=0x20c) returned 1
	[0252.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini")) returned 0x2026
	[0252.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini")) returned 0x2026
	[0252.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.270] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.270] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.270] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.270] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x114
	[0252.270] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x43, lpOverlapped=0x0) returned 1
	[0252.271] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x50, lpOverlapped=0x0) returned 1
	[0252.272] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.272] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.272] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.273] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x43, lpOverlapped=0x0) returned 1
	[0252.273] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.275] FlushFileBuffers (hFile=0x114) returned 1
	[0252.277] CloseHandle (hObject=0x20c) returned 1
	[0252.277] CloseHandle (hObject=0x114) returned 1
	[0252.277] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini")) returned 1
	[0252.278] SetEvent (hEvent=0xfc) returned 1
	[0252.278] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.279] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0252.279] CloseHandle (hObject=0x114) returned 1
	[0252.279] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.280] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67) returned 1
	[0252.280] CloseHandle (hObject=0x114) returned 1
	[0252.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini")) returned 0x2026
	[0252.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini")) returned 0x2026
	[0252.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.280] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.280] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.280] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.280] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x20c
	[0252.281] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x43, lpOverlapped=0x0) returned 1
	[0252.282] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x50, lpOverlapped=0x0) returned 1
	[0252.282] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.283] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.283] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.283] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x43, lpOverlapped=0x0) returned 1
	[0252.283] FlushFileBuffers (hFile=0x114) returned 1
	[0252.285] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.287] CloseHandle (hObject=0x114) returned 1
	[0252.287] CloseHandle (hObject=0x20c) returned 1
	[0252.287] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini")) returned 1
	[0252.288] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.289] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0252.289] CloseHandle (hObject=0x20c) returned 1
	[0252.289] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.290] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67) returned 1
	[0252.290] CloseHandle (hObject=0x20c) returned 1
	[0252.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini")) returned 0x2026
	[0252.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini")) returned 0x2026
	[0252.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.290] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.291] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.291] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.291] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x114
	[0252.291] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x43, lpOverlapped=0x0) returned 1
	[0252.292] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x50, lpOverlapped=0x0) returned 1
	[0252.293] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.293] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.293] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.293] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x43, lpOverlapped=0x0) returned 1
	[0252.294] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.296] FlushFileBuffers (hFile=0x114) returned 1
	[0252.298] CloseHandle (hObject=0x20c) returned 1
	[0252.298] CloseHandle (hObject=0x114) returned 1
	[0252.298] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini")) returned 1
	[0252.299] SetEvent (hEvent=0xfc) returned 1
	[0252.299] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.299] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0252.300] CloseHandle (hObject=0x114) returned 1
	[0252.300] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.300] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67) returned 1
	[0252.300] CloseHandle (hObject=0x114) returned 1
	[0252.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini")) returned 0x2026
	[0252.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini")) returned 0x2026
	[0252.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.301] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.301] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.301] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.301] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x20c
	[0252.301] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x43, lpOverlapped=0x0) returned 1
	[0252.302] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x50, lpOverlapped=0x0) returned 1
	[0252.303] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.303] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.303] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.303] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x43, lpOverlapped=0x0) returned 1
	[0252.303] FlushFileBuffers (hFile=0x114) returned 1
	[0252.306] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.308] CloseHandle (hObject=0x114) returned 1
	[0252.308] CloseHandle (hObject=0x20c) returned 1
	[0252.308] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini")) returned 1
	[0252.309] SetEvent (hEvent=0xfc) returned 1
	[0252.309] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.310] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32768) returned 1
	[0252.311] CloseHandle (hObject=0x20c) returned 1
	[0252.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat")) returned 0x2026
	[0252.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat")) returned 0x2026
	[0252.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.311] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.311] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.311] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.311] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x114
	[0252.312] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x8000, lpOverlapped=0x0) returned 1
	[0252.313] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x8010, lpOverlapped=0x0) returned 1
	[0252.315] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.315] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.315] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.315] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x8000, lpOverlapped=0x0) returned 1
	[0252.315] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.317] FlushFileBuffers (hFile=0x114) returned 1
	[0252.319] CloseHandle (hObject=0x20c) returned 1
	[0252.319] CloseHandle (hObject=0x114) returned 1
	[0252.319] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat")) returned 1
	[0252.320] SetEvent (hEvent=0xfc) returned 1
	[0252.320] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.321] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67) returned 1
	[0252.321] CloseHandle (hObject=0x114) returned 1
	[0252.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini")) returned 0x2026
	[0252.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini")) returned 0x2026
	[0252.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.321] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.321] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.321] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.321] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x20c
	[0252.323] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x43, lpOverlapped=0x0) returned 1
	[0252.324] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x50, lpOverlapped=0x0) returned 1
	[0252.325] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.325] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.325] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.325] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x43, lpOverlapped=0x0) returned 1
	[0252.325] FlushFileBuffers (hFile=0x114) returned 1
	[0252.328] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.330] CloseHandle (hObject=0x114) returned 1
	[0252.330] CloseHandle (hObject=0x20c) returned 1
	[0252.330] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini")) returned 1
	[0252.331] SetEvent (hEvent=0xfc) returned 1
	[0252.331] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.331] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0252.332] CloseHandle (hObject=0x20c) returned 1
	[0252.332] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\ieonline.microsoft[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\ieonline.microsoft[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.332] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0252.332] CloseHandle (hObject=0x20c) returned 1
	[0252.333] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.334] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=245980) returned 1
	[0252.334] CloseHandle (hObject=0x20c) returned 1
	[0252.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat")) returned 0x2020
	[0252.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat")) returned 0x2020
	[0252.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.334] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.334] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.334] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.334] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.335] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3c0dc, lpOverlapped=0x0) returned 1
	[0252.341] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3c0e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3c0e0, lpOverlapped=0x0) returned 1
	[0252.345] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.345] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.345] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.345] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3c0dc, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3c0dc, lpOverlapped=0x0) returned 1
	[0252.346] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.349] FlushFileBuffers (hFile=0x114) returned 1
	[0252.351] CloseHandle (hObject=0x20c) returned 1
	[0252.351] CloseHandle (hObject=0x114) returned 1
	[0252.351] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat")) returned 1
	[0252.353] SetEvent (hEvent=0xfc) returned 1
	[0252.353] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.355] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12201) returned 1
	[0252.355] CloseHandle (hObject=0x114) returned 1
	[0252.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak")) returned 0x2020
	[0252.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak")) returned 0x2020
	[0252.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.355] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.355] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.355] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.355] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.356] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2fa9, lpOverlapped=0x0) returned 1
	[0252.357] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2fb0, lpOverlapped=0x0) returned 1
	[0252.359] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.360] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.360] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.360] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2fa9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2fa9, lpOverlapped=0x0) returned 1
	[0252.360] FlushFileBuffers (hFile=0x114) returned 1
	[0252.386] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.389] CloseHandle (hObject=0x114) returned 1
	[0252.393] CloseHandle (hObject=0x20c) returned 1
	[0252.393] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak")) returned 1
	[0252.394] SetEvent (hEvent=0xfc) returned 1
	[0252.394] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.395] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12208) returned 1
	[0252.395] CloseHandle (hObject=0x20c) returned 1
	[0252.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt")) returned 0x2020
	[0252.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt")) returned 0x2020
	[0252.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.395] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.396] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.396] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.396] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.396] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2fb0, lpOverlapped=0x0) returned 1
	[0252.398] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2fc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2fc0, lpOverlapped=0x0) returned 1
	[0252.399] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.400] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.400] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.400] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2fb0, lpOverlapped=0x0) returned 1
	[0252.400] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.419] FlushFileBuffers (hFile=0x114) returned 1
	[0252.430] CloseHandle (hObject=0x20c) returned 1
	[0252.430] CloseHandle (hObject=0x114) returned 1
	[0252.430] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt")) returned 1
	[0252.431] SetEvent (hEvent=0xfc) returned 1
	[0252.431] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.431] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32768) returned 1
	[0252.431] CloseHandle (hObject=0x114) returned 1
	[0252.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat")) returned 0x2026
	[0252.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat")) returned 0x2026
	[0252.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.432] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.432] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.432] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.432] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x20c
	[0252.434] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x8000, lpOverlapped=0x0) returned 1
	[0252.436] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x8010, lpOverlapped=0x0) returned 1
	[0252.437] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.438] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.438] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.438] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x8000, lpOverlapped=0x0) returned 1
	[0252.438] FlushFileBuffers (hFile=0x114) returned 1
	[0252.445] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.447] CloseHandle (hObject=0x114) returned 1
	[0252.447] CloseHandle (hObject=0x20c) returned 1
	[0252.447] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat")) returned 1
	[0252.448] SetEvent (hEvent=0xfc) returned 1
	[0252.448] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.449] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9204) returned 1
	[0252.449] CloseHandle (hObject=0x20c) returned 1
	[0252.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat")) returned 0x2020
	[0252.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat")) returned 0x2020
	[0252.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.450] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.450] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.450] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.450] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.450] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x23f4, lpOverlapped=0x0) returned 1
	[0252.452] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2400, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2400, lpOverlapped=0x0) returned 1
	[0252.453] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0252.453] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.453] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.453] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x23f4, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x23f4, lpOverlapped=0x0) returned 1
	[0252.453] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.456] FlushFileBuffers (hFile=0x114) returned 1
	[0252.458] CloseHandle (hObject=0x20c) returned 1
	[0252.458] CloseHandle (hObject=0x114) returned 1
	[0252.458] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat")) returned 1
	[0252.459] SetEvent (hEvent=0xfc) returned 1
	[0252.459] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.463] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16384) returned 1
	[0252.463] CloseHandle (hObject=0x114) returned 1
	[0252.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat")) returned 0x2020
	[0252.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat")) returned 0x2020
	[0252.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.463] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.463] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.463] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.463] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.464] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x4000, lpOverlapped=0x0) returned 1
	[0252.466] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4010, lpOverlapped=0x0) returned 1
	[0252.467] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0252.467] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.467] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.467] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x4000, lpOverlapped=0x0) returned 1
	[0252.467] FlushFileBuffers (hFile=0x114) returned 1
	[0252.470] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.471] CloseHandle (hObject=0x114) returned 1
	[0252.471] CloseHandle (hObject=0x20c) returned 1
	[0252.471] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat")) returned 1
	[0252.472] SetEvent (hEvent=0xfc) returned 1
	[0252.472] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.474] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3584) returned 1
	[0252.474] CloseHandle (hObject=0x20c) returned 1
	[0252.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat")) returned 0x2020
	[0252.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat")) returned 0x2020
	[0252.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.475] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.475] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.475] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.475] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.476] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe00, lpOverlapped=0x0) returned 1
	[0252.477] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe10, lpOverlapped=0x0) returned 1
	[0252.478] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x152, lpOverlapped=0x0) returned 1
	[0252.478] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.478] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.478] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe00, lpOverlapped=0x0) returned 1
	[0252.478] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.481] FlushFileBuffers (hFile=0x114) returned 1
	[0252.482] CloseHandle (hObject=0x20c) returned 1
	[0252.482] CloseHandle (hObject=0x114) returned 1
	[0252.482] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat")) returned 1
	[0252.483] SetEvent (hEvent=0xfc) returned 1
	[0252.483] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.484] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0252.484] CloseHandle (hObject=0x114) returned 1
	[0252.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat")) returned 0x2020
	[0252.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat")) returned 0x2020
	[0252.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.484] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.484] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.484] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.484] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.485] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1200, lpOverlapped=0x0) returned 1
	[0252.487] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1210, lpOverlapped=0x0) returned 1
	[0252.488] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x152, lpOverlapped=0x0) returned 1
	[0252.488] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.488] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.489] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1200, lpOverlapped=0x0) returned 1
	[0252.489] FlushFileBuffers (hFile=0x114) returned 1
	[0252.491] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.492] CloseHandle (hObject=0x114) returned 1
	[0252.492] CloseHandle (hObject=0x20c) returned 1
	[0252.492] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat")) returned 1
	[0252.493] SetEvent (hEvent=0xfc) returned 1
	[0252.494] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.495] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0252.495] CloseHandle (hObject=0x20c) returned 1
	[0252.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat")) returned 0x2020
	[0252.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat")) returned 0x2020
	[0252.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.495] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.495] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.495] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.495] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.496] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1200, lpOverlapped=0x0) returned 1
	[0252.497] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1210, lpOverlapped=0x0) returned 1
	[0252.498] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x132, lpOverlapped=0x0) returned 1
	[0252.498] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.498] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.498] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1200, lpOverlapped=0x0) returned 1
	[0252.498] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.501] FlushFileBuffers (hFile=0x114) returned 1
	[0252.503] CloseHandle (hObject=0x20c) returned 1
	[0252.503] CloseHandle (hObject=0x114) returned 1
	[0252.503] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat")) returned 1
	[0252.504] SetEvent (hEvent=0xfc) returned 1
	[0252.504] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.505] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4608) returned 1
	[0252.505] CloseHandle (hObject=0x114) returned 1
	[0252.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat")) returned 0x2020
	[0252.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat")) returned 0x2020
	[0252.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.505] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.505] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.505] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.506] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.506] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1200, lpOverlapped=0x0) returned 1
	[0252.508] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1210, lpOverlapped=0x0) returned 1
	[0252.509] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x132, lpOverlapped=0x0) returned 1
	[0252.509] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.509] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.509] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1200, lpOverlapped=0x0) returned 1
	[0252.509] FlushFileBuffers (hFile=0x114) returned 1
	[0252.511] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.513] CloseHandle (hObject=0x114) returned 1
	[0252.513] CloseHandle (hObject=0x20c) returned 1
	[0252.513] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat")) returned 1
	[0252.514] SetEvent (hEvent=0xfc) returned 1
	[0252.514] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.515] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1069056) returned 1
	[0252.515] CloseHandle (hObject=0x20c) returned 1
	[0252.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb")) returned 0x2020
	[0252.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb")) returned 0x2020
	[0252.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.515] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.515] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.515] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.515] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.516] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x105000, lpOverlapped=0x0) returned 1
	[0252.543] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x105010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x105010, lpOverlapped=0x0) returned 1
	[0252.563] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0252.563] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.563] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.563] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x105000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x105000, lpOverlapped=0x0) returned 1
	[0252.568] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.623] FlushFileBuffers (hFile=0x114) returned 1
	[0252.627] CloseHandle (hObject=0x20c) returned 1
	[0252.628] CloseHandle (hObject=0x114) returned 1
	[0252.628] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb")) returned 1
	[0252.636] SetEvent (hEvent=0xfc) returned 1
	[0252.636] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.637] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1279) returned 1
	[0252.637] CloseHandle (hObject=0x114) returned 1
	[0252.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl")) returned 0x2020
	[0252.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl")) returned 0x2020
	[0252.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.637] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.637] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.637] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.637] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.638] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x4ff, lpOverlapped=0x0) returned 1
	[0252.640] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x500, lpOverlapped=0x0) returned 1
	[0252.640] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x122, lpOverlapped=0x0) returned 1
	[0252.641] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.641] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.641] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4ff, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x4ff, lpOverlapped=0x0) returned 1
	[0252.641] FlushFileBuffers (hFile=0x114) returned 1
	[0252.663] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.665] CloseHandle (hObject=0x114) returned 1
	[0252.665] CloseHandle (hObject=0x20c) returned 1
	[0252.665] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl")) returned 1
	[0252.666] SetEvent (hEvent=0xfc) returned 1
	[0252.666] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.667] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1284) returned 1
	[0252.667] CloseHandle (hObject=0x20c) returned 1
	[0252.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl")) returned 0x2020
	[0252.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl")) returned 0x2020
	[0252.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.667] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.667] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.667] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.668] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.671] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x504, lpOverlapped=0x0) returned 1
	[0252.672] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x510, lpOverlapped=0x0) returned 1
	[0252.673] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x122, lpOverlapped=0x0) returned 1
	[0252.673] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.673] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.674] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x504, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x504, lpOverlapped=0x0) returned 1
	[0252.674] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.691] FlushFileBuffers (hFile=0x114) returned 1
	[0252.692] CloseHandle (hObject=0x20c) returned 1
	[0252.692] CloseHandle (hObject=0x114) returned 1
	[0252.692] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl")) returned 1
	[0252.694] SetEvent (hEvent=0xfc) returned 1
	[0252.694] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.695] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=797) returned 1
	[0252.695] CloseHandle (hObject=0x114) returned 1
	[0252.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl")) returned 0x2020
	[0252.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl")) returned 0x2020
	[0252.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.698] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.698] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.698] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.698] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.702] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x31d, lpOverlapped=0x0) returned 1
	[0252.704] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x320, lpOverlapped=0x0) returned 1
	[0252.704] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x122, lpOverlapped=0x0) returned 1
	[0252.705] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.705] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.705] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x31d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x31d, lpOverlapped=0x0) returned 1
	[0252.705] FlushFileBuffers (hFile=0x114) returned 1
	[0252.707] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.715] CloseHandle (hObject=0x114) returned 1
	[0252.715] CloseHandle (hObject=0x20c) returned 1
	[0252.716] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl")) returned 1
	[0252.719] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.726] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1040) returned 1
	[0252.726] CloseHandle (hObject=0x20c) returned 1
	[0252.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl")) returned 0x2020
	[0252.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl")) returned 0x2020
	[0252.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.727] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.727] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.727] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.727] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.728] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x410, lpOverlapped=0x0) returned 1
	[0252.729] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x420, lpOverlapped=0x0) returned 1
	[0252.730] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x122, lpOverlapped=0x0) returned 1
	[0252.730] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.730] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.730] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x410, lpOverlapped=0x0) returned 1
	[0252.730] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.734] FlushFileBuffers (hFile=0x114) returned 1
	[0252.735] CloseHandle (hObject=0x20c) returned 1
	[0252.735] CloseHandle (hObject=0x114) returned 1
	[0252.735] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl")) returned 1
	[0252.736] SetEvent (hEvent=0xfc) returned 1
	[0252.736] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.737] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1025) returned 1
	[0252.737] CloseHandle (hObject=0x114) returned 1
	[0252.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl")) returned 0x2020
	[0252.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl")) returned 0x2020
	[0252.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.737] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0252.737] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.737] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.737] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.738] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x401, lpOverlapped=0x0) returned 1
	[0252.739] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x410, lpOverlapped=0x0) returned 1
	[0252.740] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0252.740] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.740] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.740] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x401, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x401, lpOverlapped=0x0) returned 1
	[0252.740] FlushFileBuffers (hFile=0x114) returned 1
	[0252.757] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.764] CloseHandle (hObject=0x114) returned 1
	[0252.764] CloseHandle (hObject=0x20c) returned 1
	[0252.765] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl")) returned 1
	[0252.770] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.777] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=585) returned 1
	[0252.778] CloseHandle (hObject=0x20c) returned 1
	[0252.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl")) returned 0x2020
	[0252.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl")) returned 0x2020
	[0252.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.778] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.778] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.779] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.779] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0252.781] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x249, lpOverlapped=0x0) returned 1
	[0252.782] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x250, lpOverlapped=0x0) returned 1
	[0252.783] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0252.783] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.783] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.783] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x249, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x249, lpOverlapped=0x0) returned 1
	[0252.783] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.795] FlushFileBuffers (hFile=0x114) returned 1
	[0252.804] CloseHandle (hObject=0x20c) returned 1
	[0252.805] CloseHandle (hObject=0x114) returned 1
	[0252.806] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl")) returned 1
	[0252.814] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.815] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1267) returned 1
	[0252.815] CloseHandle (hObject=0x244) returned 1
	[0252.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl")) returned 0x2020
	[0252.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl")) returned 0x2020
	[0252.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.817] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.817] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.817] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.818] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.826] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x4f3, lpOverlapped=0x0) returned 1
	[0252.827] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x500, lpOverlapped=0x0) returned 1
	[0252.828] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x122, lpOverlapped=0x0) returned 1
	[0252.828] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.829] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.829] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4f3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x4f3, lpOverlapped=0x0) returned 1
	[0252.829] FlushFileBuffers (hFile=0x244) returned 1
	[0252.832] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.841] CloseHandle (hObject=0x244) returned 1
	[0252.841] CloseHandle (hObject=0x20c) returned 1
	[0252.841] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl")) returned 1
	[0252.842] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.843] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=785) returned 1
	[0252.843] CloseHandle (hObject=0x20c) returned 1
	[0252.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl")) returned 0x2020
	[0252.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl")) returned 0x2020
	[0252.843] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.843] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.843] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.843] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.844] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0252.844] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x311, lpOverlapped=0x0) returned 1
	[0252.845] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x320, lpOverlapped=0x0) returned 1
	[0252.846] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x122, lpOverlapped=0x0) returned 1
	[0252.847] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.847] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.847] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x311, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x311, lpOverlapped=0x0) returned 1
	[0252.847] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.867] FlushFileBuffers (hFile=0x244) returned 1
	[0252.869] CloseHandle (hObject=0x20c) returned 1
	[0252.869] CloseHandle (hObject=0x244) returned 1
	[0252.870] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl")) returned 1
	[0252.870] SetEvent (hEvent=0xfc) returned 1
	[0252.870] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.871] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1040) returned 1
	[0252.871] CloseHandle (hObject=0x244) returned 1
	[0252.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl")) returned 0x2020
	[0252.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl")) returned 0x2020
	[0252.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.871] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0252.872] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.872] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.872] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0252.872] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x410, lpOverlapped=0x0) returned 1
	[0252.878] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x420, lpOverlapped=0x0) returned 1
	[0252.879] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x122, lpOverlapped=0x0) returned 1
	[0252.879] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.879] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.879] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x410, lpOverlapped=0x0) returned 1
	[0252.879] FlushFileBuffers (hFile=0x244) returned 1
	[0252.884] FlushFileBuffers (hFile=0x20c) returned 1
	[0252.886] CloseHandle (hObject=0x244) returned 1
	[0252.886] CloseHandle (hObject=0x20c) returned 1
	[0252.886] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl")) returned 1
	[0252.887] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.889] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1025) returned 1
	[0252.889] CloseHandle (hObject=0x20c) returned 1
	[0252.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl")) returned 0x2020
	[0252.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl")) returned 0x2020
	[0252.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0252.889] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0252.889] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.889] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0252.889] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0252.890] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x401, lpOverlapped=0x0) returned 1
	[0252.892] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x410, lpOverlapped=0x0) returned 1
	[0252.893] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0252.893] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.893] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0252.893] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x401, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x401, lpOverlapped=0x0) returned 1
	[0252.894] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.178] FlushFileBuffers (hFile=0x244) returned 1
	[0253.189] CloseHandle (hObject=0x20c) returned 1
	[0253.190] CloseHandle (hObject=0x244) returned 1
	[0253.190] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl")) returned 1
	[0253.201] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.226] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=145) returned 1
	[0253.229] CloseHandle (hObject=0x244) returned 1
	[0253.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\desktop.ini")) returned 0x2026
	[0253.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\desktop.ini")) returned 0x2026
	[0253.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.245] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.249] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.250] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.252] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x20c
	[0253.261] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x91, lpOverlapped=0x0) returned 1
	[0253.264] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xa0, lpOverlapped=0x0) returned 1
	[0253.274] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.275] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.275] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.275] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x91, lpOverlapped=0x0) returned 1
	[0253.276] FlushFileBuffers (hFile=0x244) returned 1
	[0253.287] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.300] CloseHandle (hObject=0x244) returned 1
	[0253.300] CloseHandle (hObject=0x20c) returned 1
	[0253.300] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\desktop.ini")) returned 1
	[0253.312] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.334] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67) returned 1
	[0253.334] CloseHandle (hObject=0x20c) returned 1
	[0253.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k\\desktop.ini")) returned 0x2026
	[0253.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k\\desktop.ini")) returned 0x2026
	[0253.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.343] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.347] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.364] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.365] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x244
	[0253.367] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x43, lpOverlapped=0x0) returned 1
	[0253.368] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x50, lpOverlapped=0x0) returned 1
	[0253.369] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.369] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.369] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.369] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x43, lpOverlapped=0x0) returned 1
	[0253.369] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.371] FlushFileBuffers (hFile=0x244) returned 1
	[0253.373] CloseHandle (hObject=0x20c) returned 1
	[0253.373] CloseHandle (hObject=0x244) returned 1
	[0253.373] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k\\desktop.ini")) returned 1
	[0253.374] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\28-8f3193-f30905ea[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\28-8f3193-f30905ea[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.376] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=236865) returned 1
	[0253.376] CloseHandle (hObject=0x244) returned 1
	[0253.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\28-8f3193-f30905ea[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\28-8f3193-f30905ea[1]")) returned 0x2020
	[0253.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\28-8f3193-f30905ea[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\28-8f3193-f30905ea[1]")) returned 0x2020
	[0253.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\28-8f3193-f30905ea[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\28-8f3193-f30905ea[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.376] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\28-8f3193-f30905ea[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\28-8f3193-f30905ea[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.376] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.376] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.376] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\28-8f3193-f30905ea[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\28-8f3193-f30905ea[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.377] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x39d41, lpOverlapped=0x0) returned 1
	[0253.382] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x39d50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x39d50, lpOverlapped=0x0) returned 1
	[0253.387] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0253.387] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.387] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.387] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x39d41, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x39d41, lpOverlapped=0x0) returned 1
	[0253.388] FlushFileBuffers (hFile=0x244) returned 1
	[0253.432] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.441] CloseHandle (hObject=0x244) returned 1
	[0253.443] CloseHandle (hObject=0x20c) returned 1
	[0253.444] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\28-8f3193-f30905ea[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\28-8f3193-f30905ea[1]")) returned 1
	[0253.447] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.458] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=654) returned 1
	[0253.459] CloseHandle (hObject=0x20c) returned 1
	[0253.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png")) returned 0x2020
	[0253.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png")) returned 0x2020
	[0253.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.460] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.460] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.460] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.460] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.461] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x28e, lpOverlapped=0x0) returned 1
	[0253.463] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x290, lpOverlapped=0x0) returned 1
	[0253.464] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.464] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.464] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.464] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x28e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x28e, lpOverlapped=0x0) returned 1
	[0253.465] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.467] FlushFileBuffers (hFile=0x244) returned 1
	[0253.468] CloseHandle (hObject=0x20c) returned 1
	[0253.468] CloseHandle (hObject=0x244) returned 1
	[0253.468] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png")) returned 1
	[0253.469] SetEvent (hEvent=0xfc) returned 1
	[0253.469] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.470] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=401) returned 1
	[0253.470] CloseHandle (hObject=0x244) returned 1
	[0253.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png")) returned 0x2020
	[0253.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png")) returned 0x2020
	[0253.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.470] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.470] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.470] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.471] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.471] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x191, lpOverlapped=0x0) returned 1
	[0253.473] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1a0, lpOverlapped=0x0) returned 1
	[0253.474] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.475] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.475] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.475] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x191, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x191, lpOverlapped=0x0) returned 1
	[0253.475] FlushFileBuffers (hFile=0x244) returned 1
	[0253.477] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.479] CloseHandle (hObject=0x244) returned 1
	[0253.479] CloseHandle (hObject=0x20c) returned 1
	[0253.479] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png")) returned 1
	[0253.480] SetEvent (hEvent=0xfc) returned 1
	[0253.480] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.481] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=413) returned 1
	[0253.481] CloseHandle (hObject=0x20c) returned 1
	[0253.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png")) returned 0x2020
	[0253.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png")) returned 0x2020
	[0253.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.481] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.481] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.481] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.481] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.482] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x19d, lpOverlapped=0x0) returned 1
	[0253.483] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1a0, lpOverlapped=0x0) returned 1
	[0253.484] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.484] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.484] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.484] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x19d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x19d, lpOverlapped=0x0) returned 1
	[0253.485] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.487] FlushFileBuffers (hFile=0x244) returned 1
	[0253.489] CloseHandle (hObject=0x20c) returned 1
	[0253.489] CloseHandle (hObject=0x244) returned 1
	[0253.489] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png")) returned 1
	[0253.490] SetEvent (hEvent=0xfc) returned 1
	[0253.490] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.491] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=712) returned 1
	[0253.491] CloseHandle (hObject=0x244) returned 1
	[0253.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png")) returned 0x2020
	[0253.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png")) returned 0x2020
	[0253.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.491] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.491] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.491] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.492] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.493] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2c8, lpOverlapped=0x0) returned 1
	[0253.494] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2d0, lpOverlapped=0x0) returned 1
	[0253.495] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.495] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.495] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.495] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2c8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2c8, lpOverlapped=0x0) returned 1
	[0253.495] FlushFileBuffers (hFile=0x244) returned 1
	[0253.498] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.499] CloseHandle (hObject=0x244) returned 1
	[0253.499] CloseHandle (hObject=0x20c) returned 1
	[0253.500] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png")) returned 1
	[0253.500] SetEvent (hEvent=0xfc) returned 1
	[0253.501] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.502] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=834) returned 1
	[0253.502] CloseHandle (hObject=0x20c) returned 1
	[0253.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png")) returned 0x2020
	[0253.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png")) returned 0x2020
	[0253.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.502] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.502] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.502] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.502] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.503] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x342, lpOverlapped=0x0) returned 1
	[0253.504] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x350, lpOverlapped=0x0) returned 1
	[0253.505] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.506] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.506] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.506] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x342, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x342, lpOverlapped=0x0) returned 1
	[0253.506] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.508] FlushFileBuffers (hFile=0x244) returned 1
	[0253.510] CloseHandle (hObject=0x20c) returned 1
	[0253.510] CloseHandle (hObject=0x244) returned 1
	[0253.510] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png")) returned 1
	[0253.511] SetEvent (hEvent=0xfc) returned 1
	[0253.511] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\adServer[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\adserver[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.512] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8679) returned 1
	[0253.512] CloseHandle (hObject=0x244) returned 1
	[0253.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\adServer[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\adserver[1].htm")) returned 0x2020
	[0253.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\adServer[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\adserver[1].htm")) returned 0x2020
	[0253.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\adServer[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\adserver[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.513] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\adServer[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\adserver[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.513] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.513] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.513] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\adServer[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\adserver[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.513] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x21e7, lpOverlapped=0x0) returned 1
	[0253.515] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x21f0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x21f0, lpOverlapped=0x0) returned 1
	[0253.516] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.516] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.516] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.516] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x21e7, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x21e7, lpOverlapped=0x0) returned 1
	[0253.516] FlushFileBuffers (hFile=0x244) returned 1
	[0253.519] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.520] CloseHandle (hObject=0x244) returned 1
	[0253.520] CloseHandle (hObject=0x20c) returned 1
	[0253.521] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\adServer[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\adserver[1].htm")) returned 1
	[0253.521] SetEvent (hEvent=0xfc) returned 1
	[0253.522] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.522] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28) returned 1
	[0253.522] CloseHandle (hObject=0x20c) returned 1
	[0253.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js")) returned 0x2020
	[0253.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js")) returned 0x2020
	[0253.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.523] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.523] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.523] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.523] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.525] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1c, lpOverlapped=0x0) returned 1
	[0253.527] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x20, lpOverlapped=0x0) returned 1
	[0253.528] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0253.528] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.528] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.528] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1c, lpOverlapped=0x0) returned 1
	[0253.528] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.531] FlushFileBuffers (hFile=0x244) returned 1
	[0253.533] CloseHandle (hObject=0x20c) returned 1
	[0253.533] CloseHandle (hObject=0x244) returned 1
	[0253.533] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\advertisement.ad[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\advertisement.ad[1].js")) returned 1
	[0253.534] SetEvent (hEvent=0xfc) returned 1
	[0253.534] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.535] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1035) returned 1
	[0253.535] CloseHandle (hObject=0x244) returned 1
	[0253.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[1]")) returned 0x2020
	[0253.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[1]")) returned 0x2020
	[0253.535] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.535] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.535] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.535] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.535] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.536] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x40b, lpOverlapped=0x0) returned 1
	[0253.537] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x410, lpOverlapped=0x0) returned 1
	[0253.538] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0253.538] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.539] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.539] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x40b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x40b, lpOverlapped=0x0) returned 1
	[0253.539] FlushFileBuffers (hFile=0x244) returned 1
	[0253.542] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.543] CloseHandle (hObject=0x244) returned 1
	[0253.543] CloseHandle (hObject=0x20c) returned 1
	[0253.543] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[1]")) returned 1
	[0253.544] SetEvent (hEvent=0xfc) returned 1
	[0253.544] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[2]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.545] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1332) returned 1
	[0253.545] CloseHandle (hObject=0x20c) returned 1
	[0253.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[2]")) returned 0x2020
	[0253.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[2]")) returned 0x2020
	[0253.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[2].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[2].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.545] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[2]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.546] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.546] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.546] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[2].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[2].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.546] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x534, lpOverlapped=0x0) returned 1
	[0253.548] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x540, lpOverlapped=0x0) returned 1
	[0253.549] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0253.549] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.549] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.549] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x534, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x534, lpOverlapped=0x0) returned 1
	[0253.549] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.552] FlushFileBuffers (hFile=0x244) returned 1
	[0253.554] CloseHandle (hObject=0x20c) returned 1
	[0253.554] CloseHandle (hObject=0x244) returned 1
	[0253.554] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[2]")) returned 1
	[0253.554] SetEvent (hEvent=0xfc) returned 1
	[0253.555] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[3]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[3]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.556] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1330) returned 1
	[0253.556] CloseHandle (hObject=0x244) returned 1
	[0253.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[3]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[3]")) returned 0x2020
	[0253.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[3]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[3]")) returned 0x2020
	[0253.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[3].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[3].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.556] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[3]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[3]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.556] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.556] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.556] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[3].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[3].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.557] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x532, lpOverlapped=0x0) returned 1
	[0253.559] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x540, lpOverlapped=0x0) returned 1
	[0253.560] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0253.560] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.560] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.560] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x532, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x532, lpOverlapped=0x0) returned 1
	[0253.560] FlushFileBuffers (hFile=0x244) returned 1
	[0253.563] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.564] CloseHandle (hObject=0x244) returned 1
	[0253.564] CloseHandle (hObject=0x20c) returned 1
	[0253.564] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\async_usersync[3]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\async_usersync[3]")) returned 1
	[0253.565] SetEvent (hEvent=0xfc) returned 1
	[0253.565] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.566] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=464) returned 1
	[0253.566] CloseHandle (hObject=0x20c) returned 1
	[0253.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png")) returned 0x2020
	[0253.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png")) returned 0x2020
	[0253.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.566] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.567] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.567] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.567] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.568] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1d0, lpOverlapped=0x0) returned 1
	[0253.570] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1e0, lpOverlapped=0x0) returned 1
	[0253.570] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.571] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.571] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.571] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1d0, lpOverlapped=0x0) returned 1
	[0253.571] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.574] FlushFileBuffers (hFile=0x244) returned 1
	[0253.575] CloseHandle (hObject=0x20c) returned 1
	[0253.575] CloseHandle (hObject=0x244) returned 1
	[0253.575] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png")) returned 1
	[0253.576] SetEvent (hEvent=0xfc) returned 1
	[0253.576] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.579] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=784) returned 1
	[0253.580] CloseHandle (hObject=0x244) returned 1
	[0253.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png")) returned 0x2020
	[0253.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png")) returned 0x2020
	[0253.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.580] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.580] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.580] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.580] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.581] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x310, lpOverlapped=0x0) returned 1
	[0253.582] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x320, lpOverlapped=0x0) returned 1
	[0253.583] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.583] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.583] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.583] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x310, lpOverlapped=0x0) returned 1
	[0253.583] FlushFileBuffers (hFile=0x244) returned 1
	[0253.586] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.587] CloseHandle (hObject=0x244) returned 1
	[0253.587] CloseHandle (hObject=0x20c) returned 1
	[0253.588] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png")) returned 1
	[0253.588] SetEvent (hEvent=0xfc) returned 1
	[0253.589] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.590] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=288) returned 1
	[0253.590] CloseHandle (hObject=0x20c) returned 1
	[0253.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png")) returned 0x2020
	[0253.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png")) returned 0x2020
	[0253.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.590] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.590] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.590] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.590] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.591] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x120, lpOverlapped=0x0) returned 1
	[0253.592] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x130, lpOverlapped=0x0) returned 1
	[0253.593] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.593] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.593] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.594] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x120, lpOverlapped=0x0) returned 1
	[0253.594] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.596] FlushFileBuffers (hFile=0x244) returned 1
	[0253.598] CloseHandle (hObject=0x20c) returned 1
	[0253.598] CloseHandle (hObject=0x244) returned 1
	[0253.598] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png")) returned 1
	[0253.599] SetEvent (hEvent=0xfc) returned 1
	[0253.599] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.600] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=289) returned 1
	[0253.600] CloseHandle (hObject=0x244) returned 1
	[0253.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png")) returned 0x2020
	[0253.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png")) returned 0x2020
	[0253.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.600] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0253.601] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.601] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.601] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0253.601] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x121, lpOverlapped=0x0) returned 1
	[0253.603] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x130, lpOverlapped=0x0) returned 1
	[0253.603] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.604] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.604] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.604] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x121, lpOverlapped=0x0) returned 1
	[0253.604] FlushFileBuffers (hFile=0x244) returned 1
	[0253.607] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.610] CloseHandle (hObject=0x244) returned 1
	[0253.610] CloseHandle (hObject=0x20c) returned 1
	[0253.610] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png")) returned 1
	[0253.611] SetEvent (hEvent=0xfc) returned 1
	[0253.611] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.612] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=396) returned 1
	[0253.612] CloseHandle (hObject=0x20c) returned 1
	[0253.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png")) returned 0x2020
	[0253.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png")) returned 0x2020
	[0253.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.612] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.612] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.612] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.613] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0253.613] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x18c, lpOverlapped=0x0) returned 1
	[0253.619] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x190, lpOverlapped=0x0) returned 1
	[0253.619] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.620] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.620] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.620] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x18c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x18c, lpOverlapped=0x0) returned 1
	[0253.620] FlushFileBuffers (hFile=0x20c) returned 1
	[0253.625] FlushFileBuffers (hFile=0x244) returned 1
	[0253.627] CloseHandle (hObject=0x20c) returned 1
	[0253.628] CloseHandle (hObject=0x244) returned 1
	[0253.628] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png")) returned 1
	[0253.630] SetEvent (hEvent=0xfc) returned 1
	[0253.630] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.632] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13119) returned 1
	[0253.632] CloseHandle (hObject=0x114) returned 1
	[0253.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg")) returned 0x2020
	[0253.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg")) returned 0x2020
	[0253.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.633] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.633] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.633] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.633] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0253.633] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x333f, lpOverlapped=0x0) returned 1
	[0253.635] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3340, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3340, lpOverlapped=0x0) returned 1
	[0253.636] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.636] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.636] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.636] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x333f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x333f, lpOverlapped=0x0) returned 1
	[0253.636] FlushFileBuffers (hFile=0x114) returned 1
	[0253.646] FlushFileBuffers (hFile=0x260) returned 1
	[0253.649] CloseHandle (hObject=0x114) returned 1
	[0253.649] CloseHandle (hObject=0x260) returned 1
	[0253.649] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg")) returned 1
	[0253.650] SetEvent (hEvent=0xfc) returned 1
	[0253.650] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.651] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2452) returned 1
	[0253.651] CloseHandle (hObject=0x260) returned 1
	[0253.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg")) returned 0x2020
	[0253.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg")) returned 0x2020
	[0253.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.651] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.651] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.652] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.652] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0253.652] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x994, lpOverlapped=0x0) returned 1
	[0253.654] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x9a0, lpOverlapped=0x0) returned 1
	[0253.654] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.655] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.655] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.655] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x994, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x994, lpOverlapped=0x0) returned 1
	[0253.655] FlushFileBuffers (hFile=0x260) returned 1
	[0253.658] FlushFileBuffers (hFile=0x114) returned 1
	[0253.659] CloseHandle (hObject=0x260) returned 1
	[0253.659] CloseHandle (hObject=0x114) returned 1
	[0253.659] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg")) returned 1
	[0253.660] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.661] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10425) returned 1
	[0253.661] CloseHandle (hObject=0x114) returned 1
	[0253.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg")) returned 0x2020
	[0253.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg")) returned 0x2020
	[0253.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.661] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.661] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.661] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.661] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0253.662] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x28b9, lpOverlapped=0x0) returned 1
	[0253.663] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x28c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x28c0, lpOverlapped=0x0) returned 1
	[0253.664] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.664] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.664] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.664] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x28b9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x28b9, lpOverlapped=0x0) returned 1
	[0253.664] FlushFileBuffers (hFile=0x114) returned 1
	[0253.695] FlushFileBuffers (hFile=0x260) returned 1
	[0253.697] CloseHandle (hObject=0x114) returned 1
	[0253.697] CloseHandle (hObject=0x260) returned 1
	[0253.697] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg")) returned 1
	[0253.698] SetEvent (hEvent=0xfc) returned 1
	[0253.698] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.700] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25112) returned 1
	[0253.700] CloseHandle (hObject=0x260) returned 1
	[0253.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg")) returned 0x2020
	[0253.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg")) returned 0x2020
	[0253.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.700] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.700] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.700] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.700] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0253.701] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x6218, lpOverlapped=0x0) returned 1
	[0253.703] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6220, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x6220, lpOverlapped=0x0) returned 1
	[0253.704] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.705] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.705] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.705] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6218, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x6218, lpOverlapped=0x0) returned 1
	[0253.705] FlushFileBuffers (hFile=0x260) returned 1
	[0253.759] FlushFileBuffers (hFile=0x114) returned 1
	[0253.760] CloseHandle (hObject=0x260) returned 1
	[0253.760] CloseHandle (hObject=0x114) returned 1
	[0253.760] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg")) returned 1
	[0253.761] SetEvent (hEvent=0xfc) returned 1
	[0253.761] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.762] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7734) returned 1
	[0253.762] CloseHandle (hObject=0x114) returned 1
	[0253.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg")) returned 0x2020
	[0253.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg")) returned 0x2020
	[0253.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.763] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.763] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.763] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.763] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0253.764] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1e36, lpOverlapped=0x0) returned 1
	[0253.766] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1e40, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1e40, lpOverlapped=0x0) returned 1
	[0253.767] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.767] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.767] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.767] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1e36, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1e36, lpOverlapped=0x0) returned 1
	[0253.767] FlushFileBuffers (hFile=0x114) returned 1
	[0253.836] FlushFileBuffers (hFile=0x260) returned 1
	[0253.838] CloseHandle (hObject=0x114) returned 1
	[0253.838] CloseHandle (hObject=0x260) returned 1
	[0253.838] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg")) returned 1
	[0253.839] SetEvent (hEvent=0xfc) returned 1
	[0253.839] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.840] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1966) returned 1
	[0253.840] CloseHandle (hObject=0x260) returned 1
	[0253.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg")) returned 0x2020
	[0253.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg")) returned 0x2020
	[0253.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.840] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.840] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.840] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.840] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0253.841] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x7ae, lpOverlapped=0x0) returned 1
	[0253.843] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x7b0, lpOverlapped=0x0) returned 1
	[0253.843] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.844] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.844] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.844] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7ae, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x7ae, lpOverlapped=0x0) returned 1
	[0253.844] FlushFileBuffers (hFile=0x260) returned 1
	[0253.847] FlushFileBuffers (hFile=0x114) returned 1
	[0253.848] CloseHandle (hObject=0x260) returned 1
	[0253.848] CloseHandle (hObject=0x114) returned 1
	[0253.849] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg")) returned 1
	[0253.849] SetEvent (hEvent=0xfc) returned 1
	[0253.850] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.850] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2420) returned 1
	[0253.850] CloseHandle (hObject=0x114) returned 1
	[0253.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg")) returned 0x2020
	[0253.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg")) returned 0x2020
	[0253.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.851] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.851] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.851] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.851] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0253.852] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x974, lpOverlapped=0x0) returned 1
	[0253.853] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x980, lpOverlapped=0x0) returned 1
	[0253.854] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.854] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.854] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.854] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x974, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x974, lpOverlapped=0x0) returned 1
	[0253.854] FlushFileBuffers (hFile=0x114) returned 1
	[0253.868] FlushFileBuffers (hFile=0x260) returned 1
	[0253.870] CloseHandle (hObject=0x114) returned 1
	[0253.870] CloseHandle (hObject=0x260) returned 1
	[0253.870] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg")) returned 1
	[0253.871] SetEvent (hEvent=0xfc) returned 1
	[0253.871] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.872] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2728) returned 1
	[0253.872] CloseHandle (hObject=0x260) returned 1
	[0253.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg")) returned 0x2020
	[0253.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg")) returned 0x2020
	[0253.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.872] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.872] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.873] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.873] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0253.873] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xaa8, lpOverlapped=0x0) returned 1
	[0253.875] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xab0, lpOverlapped=0x0) returned 1
	[0253.876] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.876] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.876] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.876] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xaa8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xaa8, lpOverlapped=0x0) returned 1
	[0253.876] FlushFileBuffers (hFile=0x260) returned 1
	[0253.895] FlushFileBuffers (hFile=0x114) returned 1
	[0253.896] CloseHandle (hObject=0x260) returned 1
	[0253.896] CloseHandle (hObject=0x114) returned 1
	[0253.897] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg")) returned 1
	[0253.897] SetEvent (hEvent=0xfc) returned 1
	[0253.898] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.899] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2008) returned 1
	[0253.899] CloseHandle (hObject=0x114) returned 1
	[0253.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg")) returned 0x2020
	[0253.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg")) returned 0x2020
	[0253.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.901] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0253.901] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.901] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.901] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0253.902] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x7d8, lpOverlapped=0x0) returned 1
	[0253.903] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x7e0, lpOverlapped=0x0) returned 1
	[0253.904] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.904] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.904] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.904] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7d8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x7d8, lpOverlapped=0x0) returned 1
	[0253.904] FlushFileBuffers (hFile=0x114) returned 1
	[0253.964] FlushFileBuffers (hFile=0x260) returned 1
	[0253.965] CloseHandle (hObject=0x114) returned 1
	[0253.965] CloseHandle (hObject=0x260) returned 1
	[0253.966] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg")) returned 1
	[0253.969] SetEvent (hEvent=0xfc) returned 1
	[0253.969] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.970] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2263) returned 1
	[0253.970] CloseHandle (hObject=0x260) returned 1
	[0253.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg")) returned 0x2020
	[0253.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg")) returned 0x2020
	[0253.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0253.970] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0253.970] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.970] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0253.970] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0253.971] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x8d7, lpOverlapped=0x0) returned 1
	[0253.973] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x8e0, lpOverlapped=0x0) returned 1
	[0253.974] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0253.974] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.974] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0253.974] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8d7, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x8d7, lpOverlapped=0x0) returned 1
	[0253.974] FlushFileBuffers (hFile=0x260) returned 1
	[0253.991] FlushFileBuffers (hFile=0x114) returned 1
	[0253.995] CloseHandle (hObject=0x260) returned 1
	[0253.995] CloseHandle (hObject=0x114) returned 1
	[0253.995] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg")) returned 1
	[0253.996] SetEvent (hEvent=0xfc) returned 1
	[0253.996] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0253.999] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13224) returned 1
	[0253.999] CloseHandle (hObject=0x20c) returned 1
	[0253.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg")) returned 0x2020
	[0253.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg")) returned 0x2020
	[0253.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.000] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0254.000] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.000] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.000] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0254.000] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x33a8, lpOverlapped=0x0) returned 1
	[0254.002] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x33b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x33b0, lpOverlapped=0x0) returned 1
	[0254.003] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0254.003] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.003] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.003] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x33a8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x33a8, lpOverlapped=0x0) returned 1
	[0254.004] FlushFileBuffers (hFile=0x20c) returned 1
	[0254.133] FlushFileBuffers (hFile=0x244) returned 1
	[0254.134] CloseHandle (hObject=0x20c) returned 1
	[0254.142] CloseHandle (hObject=0x244) returned 1
	[0254.142] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg")) returned 1
	[0254.143] SetEvent (hEvent=0xfc) returned 1
	[0254.143] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0254.145] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10016) returned 1
	[0254.145] CloseHandle (hObject=0x244) returned 1
	[0254.145] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg")) returned 0x2020
	[0254.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg")) returned 0x2020
	[0254.146] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.146] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0254.146] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.146] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.146] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0254.147] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2720, lpOverlapped=0x0) returned 1
	[0254.148] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2730, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2730, lpOverlapped=0x0) returned 1
	[0254.149] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0254.149] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.149] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.150] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2720, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2720, lpOverlapped=0x0) returned 1
	[0254.150] FlushFileBuffers (hFile=0x244) returned 1
	[0254.197] FlushFileBuffers (hFile=0x20c) returned 1
	[0254.220] CloseHandle (hObject=0x244) returned 1
	[0254.220] CloseHandle (hObject=0x20c) returned 1
	[0254.220] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg")) returned 1
	[0254.221] SetEvent (hEvent=0xfc) returned 1
	[0254.222] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0254.234] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12813) returned 1
	[0254.234] CloseHandle (hObject=0x20c) returned 1
	[0254.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg")) returned 0x2020
	[0254.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg")) returned 0x2020
	[0254.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.236] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0254.236] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.237] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.237] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0254.247] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x320d, lpOverlapped=0x0) returned 1
	[0254.251] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3210, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3210, lpOverlapped=0x0) returned 1
	[0254.252] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0254.252] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.252] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.252] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x320d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x320d, lpOverlapped=0x0) returned 1
	[0254.252] FlushFileBuffers (hFile=0x20c) returned 1
	[0254.650] FlushFileBuffers (hFile=0x244) returned 1
	[0254.655] CloseHandle (hObject=0x20c) returned 1
	[0254.656] CloseHandle (hObject=0x244) returned 1
	[0254.656] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg")) returned 1
	[0254.657] SetEvent (hEvent=0xfc) returned 1
	[0254.657] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0254.658] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=587) returned 1
	[0254.658] CloseHandle (hObject=0x244) returned 1
	[0254.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png")) returned 0x2020
	[0254.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png")) returned 0x2020
	[0254.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.659] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0254.659] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.659] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.659] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0254.659] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x24b, lpOverlapped=0x0) returned 1
	[0254.661] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x250, lpOverlapped=0x0) returned 1
	[0254.662] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0254.662] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.662] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.662] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x24b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x24b, lpOverlapped=0x0) returned 1
	[0254.662] FlushFileBuffers (hFile=0x244) returned 1
	[0254.666] FlushFileBuffers (hFile=0x20c) returned 1
	[0254.691] CloseHandle (hObject=0x244) returned 1
	[0254.691] CloseHandle (hObject=0x20c) returned 1
	[0254.691] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png")) returned 1
	[0254.692] SetEvent (hEvent=0xfc) returned 1
	[0254.692] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0254.697] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14519) returned 1
	[0254.697] CloseHandle (hObject=0x20c) returned 1
	[0254.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg")) returned 0x2020
	[0254.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg")) returned 0x2020
	[0254.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.697] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0254.697] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.697] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.697] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0254.698] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x38b7, lpOverlapped=0x0) returned 1
	[0254.700] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x38c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x38c0, lpOverlapped=0x0) returned 1
	[0254.701] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0254.701] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.701] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.701] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x38b7, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x38b7, lpOverlapped=0x0) returned 1
	[0254.701] FlushFileBuffers (hFile=0x20c) returned 1
	[0254.704] FlushFileBuffers (hFile=0x244) returned 1
	[0254.707] CloseHandle (hObject=0x20c) returned 1
	[0254.707] CloseHandle (hObject=0x244) returned 1
	[0254.707] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg")) returned 1
	[0254.708] SetEvent (hEvent=0xfc) returned 1
	[0254.708] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0254.709] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10733) returned 1
	[0254.709] CloseHandle (hObject=0x244) returned 1
	[0254.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png")) returned 0x2020
	[0254.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png")) returned 0x2020
	[0254.710] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.710] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0254.710] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.710] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.710] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0254.711] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x29ed, lpOverlapped=0x0) returned 1
	[0254.712] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29f0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x29f0, lpOverlapped=0x0) returned 1
	[0254.713] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0254.714] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.714] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.714] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29ed, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x29ed, lpOverlapped=0x0) returned 1
	[0254.714] FlushFileBuffers (hFile=0x244) returned 1
	[0254.739] FlushFileBuffers (hFile=0x20c) returned 1
	[0254.741] CloseHandle (hObject=0x244) returned 1
	[0254.741] CloseHandle (hObject=0x20c) returned 1
	[0254.741] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png")) returned 1
	[0254.742] SetEvent (hEvent=0xfc) returned 1
	[0254.742] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0254.744] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=68716) returned 1
	[0254.744] CloseHandle (hObject=0x20c) returned 1
	[0254.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg")) returned 0x2020
	[0254.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg")) returned 0x2020
	[0254.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.744] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0254.744] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.744] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.744] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0254.745] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x10c6c, lpOverlapped=0x0) returned 1
	[0254.747] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10c70, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x10c70, lpOverlapped=0x0) returned 1
	[0254.749] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0254.749] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.749] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.749] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10c6c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x10c6c, lpOverlapped=0x0) returned 1
	[0254.750] FlushFileBuffers (hFile=0x20c) returned 1
	[0254.768] FlushFileBuffers (hFile=0x244) returned 1
	[0254.770] CloseHandle (hObject=0x20c) returned 1
	[0254.770] CloseHandle (hObject=0x244) returned 1
	[0254.770] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg")) returned 1
	[0254.771] SetEvent (hEvent=0xfc) returned 1
	[0254.771] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0254.773] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1969) returned 1
	[0254.773] CloseHandle (hObject=0x244) returned 1
	[0254.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js")) returned 0x2020
	[0254.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js")) returned 0x2020
	[0254.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0254.773] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.773] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0254.774] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x7b1, lpOverlapped=0x0) returned 1
	[0254.775] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x7c0, lpOverlapped=0x0) returned 1
	[0254.779] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0254.779] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.779] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.779] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7b1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x7b1, lpOverlapped=0x0) returned 1
	[0254.779] FlushFileBuffers (hFile=0x244) returned 1
	[0254.789] FlushFileBuffers (hFile=0x20c) returned 1
	[0254.794] CloseHandle (hObject=0x244) returned 1
	[0254.794] CloseHandle (hObject=0x20c) returned 1
	[0254.794] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\containertag[1].js")) returned 1
	[0254.796] SetEvent (hEvent=0xfc) returned 1
	[0254.796] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0254.798] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=187) returned 1
	[0254.798] CloseHandle (hObject=0x20c) returned 1
	[0254.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt")) returned 0x2020
	[0254.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt")) returned 0x2020
	[0254.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.798] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0254.798] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.798] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.798] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0254.799] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xbb, lpOverlapped=0x0) returned 1
	[0254.800] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc0, lpOverlapped=0x0) returned 1
	[0254.801] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0254.801] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.801] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.801] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xbb, lpOverlapped=0x0) returned 1
	[0254.801] FlushFileBuffers (hFile=0x20c) returned 1
	[0254.811] FlushFileBuffers (hFile=0x244) returned 1
	[0254.834] CloseHandle (hObject=0x20c) returned 1
	[0254.834] CloseHandle (hObject=0x244) returned 1
	[0254.834] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt")) returned 1
	[0254.835] SetEvent (hEvent=0xfc) returned 1
	[0254.835] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0254.836] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32632) returned 1
	[0254.836] CloseHandle (hObject=0x244) returned 1
	[0254.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg")) returned 0x2020
	[0254.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg")) returned 0x2020
	[0254.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.837] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0254.837] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.837] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.837] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0254.837] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x7f78, lpOverlapped=0x0) returned 1
	[0254.839] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7f80, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x7f80, lpOverlapped=0x0) returned 1
	[0254.841] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0254.841] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.841] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.841] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7f78, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x7f78, lpOverlapped=0x0) returned 1
	[0254.841] FlushFileBuffers (hFile=0x244) returned 1
	[0254.844] FlushFileBuffers (hFile=0x20c) returned 1
	[0254.846] CloseHandle (hObject=0x244) returned 1
	[0254.846] CloseHandle (hObject=0x20c) returned 1
	[0254.846] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg")) returned 1
	[0254.847] SetEvent (hEvent=0xfc) returned 1
	[0254.847] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0254.848] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3234) returned 1
	[0254.848] CloseHandle (hObject=0x20c) returned 1
	[0254.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1]")) returned 0x2020
	[0254.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1]")) returned 0x2020
	[0254.848] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0254.848] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0254.848] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.849] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0254.849] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0254.849] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xca2, lpOverlapped=0x0) returned 1
	[0254.851] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xcb0, lpOverlapped=0x0) returned 1
	[0254.852] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x202, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x202, lpOverlapped=0x0) returned 1
	[0254.852] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.852] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0254.852] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xca2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xca2, lpOverlapped=0x0) returned 1
	[0254.852] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.095] FlushFileBuffers (hFile=0x244) returned 1
	[0255.184] CloseHandle (hObject=0x20c) returned 1
	[0255.185] CloseHandle (hObject=0x244) returned 1
	[0255.185] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=600;grp=627518548[1]")) returned 1
	[0255.186] SetEvent (hEvent=0xfc) returned 1
	[0255.186] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\meversion[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\meversion[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.203] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4480) returned 1
	[0255.204] CloseHandle (hObject=0x244) returned 1
	[0255.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\meversion[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\meversion[1]")) returned 0x2020
	[0255.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\meversion[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\meversion[1]")) returned 0x2020
	[0255.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\meversion[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\meversion[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.204] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\meversion[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\meversion[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.204] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.204] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.204] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\meversion[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\meversion[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0255.205] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1180, lpOverlapped=0x0) returned 1
	[0255.206] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1190, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1190, lpOverlapped=0x0) returned 1
	[0255.207] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.208] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.208] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.208] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1180, lpOverlapped=0x0) returned 1
	[0255.208] FlushFileBuffers (hFile=0x244) returned 1
	[0255.211] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.212] CloseHandle (hObject=0x244) returned 1
	[0255.212] CloseHandle (hObject=0x20c) returned 1
	[0255.212] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\meversion[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\meversion[1]")) returned 1
	[0255.213] SetEvent (hEvent=0xfc) returned 1
	[0255.213] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.215] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=40754) returned 1
	[0255.215] CloseHandle (hObject=0x20c) returned 1
	[0255.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js")) returned 0x2020
	[0255.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js")) returned 0x2020
	[0255.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.215] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.215] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.215] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.215] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0255.218] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x9f32, lpOverlapped=0x0) returned 1
	[0255.221] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x9f40, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x9f40, lpOverlapped=0x0) returned 1
	[0255.222] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.223] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.223] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.223] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x9f32, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x9f32, lpOverlapped=0x0) returned 1
	[0255.223] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.240] FlushFileBuffers (hFile=0x244) returned 1
	[0255.242] CloseHandle (hObject=0x20c) returned 1
	[0255.242] CloseHandle (hObject=0x244) returned 1
	[0255.242] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\plusone[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\plusone[1].js")) returned 1
	[0255.243] SetEvent (hEvent=0xfc) returned 1
	[0255.243] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\postmessageRelay[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\postmessagerelay[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.245] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=506) returned 1
	[0255.245] CloseHandle (hObject=0x244) returned 1
	[0255.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\postmessageRelay[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\postmessagerelay[1].htm")) returned 0x2020
	[0255.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\postmessageRelay[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\postmessagerelay[1].htm")) returned 0x2020
	[0255.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\postmessageRelay[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\postmessagerelay[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.246] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\postmessageRelay[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\postmessagerelay[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.246] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.246] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.246] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\postmessageRelay[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\postmessagerelay[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0255.247] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1fa, lpOverlapped=0x0) returned 1
	[0255.248] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x200, lpOverlapped=0x0) returned 1
	[0255.248] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0255.249] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.249] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.249] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1fa, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1fa, lpOverlapped=0x0) returned 1
	[0255.249] FlushFileBuffers (hFile=0x244) returned 1
	[0255.251] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.253] CloseHandle (hObject=0x244) returned 1
	[0255.253] CloseHandle (hObject=0x20c) returned 1
	[0255.253] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\postmessageRelay[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\postmessagerelay[1].htm")) returned 1
	[0255.254] SetEvent (hEvent=0xfc) returned 1
	[0255.254] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\search[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\search[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.255] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=105071) returned 1
	[0255.255] CloseHandle (hObject=0x20c) returned 1
	[0255.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\search[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\search[1].htm")) returned 0x2020
	[0255.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\search[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\search[1].htm")) returned 0x2020
	[0255.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\search[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\search[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.255] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\search[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\search[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.255] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.255] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.255] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\search[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\search[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0255.256] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x19a6f, lpOverlapped=0x0) returned 1
	[0255.259] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x19a70, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x19a70, lpOverlapped=0x0) returned 1
	[0255.261] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.261] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.261] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.261] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x19a6f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x19a6f, lpOverlapped=0x0) returned 1
	[0255.262] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.336] FlushFileBuffers (hFile=0x244) returned 1
	[0255.356] CloseHandle (hObject=0x20c) returned 1
	[0255.356] CloseHandle (hObject=0x244) returned 1
	[0255.356] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\search[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\search[1].htm")) returned 1
	[0255.358] SetEvent (hEvent=0xfc) returned 1
	[0255.359] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.361] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=667) returned 1
	[0255.361] CloseHandle (hObject=0x244) returned 1
	[0255.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png")) returned 0x2020
	[0255.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png")) returned 0x2020
	[0255.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.361] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.361] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.361] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.361] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0255.362] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x29b, lpOverlapped=0x0) returned 1
	[0255.363] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2a0, lpOverlapped=0x0) returned 1
	[0255.364] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.364] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.365] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.365] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x29b, lpOverlapped=0x0) returned 1
	[0255.365] FlushFileBuffers (hFile=0x244) returned 1
	[0255.369] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.378] CloseHandle (hObject=0x244) returned 1
	[0255.378] CloseHandle (hObject=0x20c) returned 1
	[0255.378] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png")) returned 1
	[0255.379] SetEvent (hEvent=0xfc) returned 1
	[0255.379] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.380] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=594) returned 1
	[0255.380] CloseHandle (hObject=0x20c) returned 1
	[0255.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png")) returned 0x2020
	[0255.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png")) returned 0x2020
	[0255.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.381] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.381] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.381] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.381] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0255.382] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x252, lpOverlapped=0x0) returned 1
	[0255.384] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x260, lpOverlapped=0x0) returned 1
	[0255.385] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.385] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.386] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.386] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x252, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x252, lpOverlapped=0x0) returned 1
	[0255.386] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.388] FlushFileBuffers (hFile=0x244) returned 1
	[0255.391] CloseHandle (hObject=0x20c) returned 1
	[0255.391] CloseHandle (hObject=0x244) returned 1
	[0255.392] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png")) returned 1
	[0255.393] SetEvent (hEvent=0xfc) returned 1
	[0255.393] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.394] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=539) returned 1
	[0255.394] CloseHandle (hObject=0x244) returned 1
	[0255.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png")) returned 0x2020
	[0255.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png")) returned 0x2020
	[0255.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.394] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.394] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.394] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.395] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0255.395] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x21b, lpOverlapped=0x0) returned 1
	[0255.397] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x220, lpOverlapped=0x0) returned 1
	[0255.398] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.398] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.398] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.398] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x21b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x21b, lpOverlapped=0x0) returned 1
	[0255.398] FlushFileBuffers (hFile=0x244) returned 1
	[0255.401] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.402] CloseHandle (hObject=0x244) returned 1
	[0255.402] CloseHandle (hObject=0x20c) returned 1
	[0255.402] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png")) returned 1
	[0255.403] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.405] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=635) returned 1
	[0255.405] CloseHandle (hObject=0x20c) returned 1
	[0255.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png")) returned 0x2020
	[0255.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png")) returned 0x2020
	[0255.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.405] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.405] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.405] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.405] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0255.406] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x27b, lpOverlapped=0x0) returned 1
	[0255.407] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x280, lpOverlapped=0x0) returned 1
	[0255.408] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.408] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.408] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.409] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x27b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x27b, lpOverlapped=0x0) returned 1
	[0255.409] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.418] FlushFileBuffers (hFile=0x244) returned 1
	[0255.421] CloseHandle (hObject=0x20c) returned 1
	[0255.426] CloseHandle (hObject=0x244) returned 1
	[0255.432] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png")) returned 1
	[0255.434] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.437] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=542) returned 1
	[0255.437] CloseHandle (hObject=0x244) returned 1
	[0255.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png")) returned 0x2020
	[0255.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png")) returned 0x2020
	[0255.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.437] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.437] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.437] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.437] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0255.438] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x21e, lpOverlapped=0x0) returned 1
	[0255.440] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x220, lpOverlapped=0x0) returned 1
	[0255.440] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.441] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.441] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.441] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x21e, lpOverlapped=0x0) returned 1
	[0255.441] FlushFileBuffers (hFile=0x244) returned 1
	[0255.444] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.446] CloseHandle (hObject=0x244) returned 1
	[0255.446] CloseHandle (hObject=0x20c) returned 1
	[0255.446] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png")) returned 1
	[0255.447] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.447] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=300) returned 1
	[0255.447] CloseHandle (hObject=0x20c) returned 1
	[0255.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png")) returned 0x2020
	[0255.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png")) returned 0x2020
	[0255.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.448] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.448] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.448] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.448] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0255.449] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x12c, lpOverlapped=0x0) returned 1
	[0255.450] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x130, lpOverlapped=0x0) returned 1
	[0255.451] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.451] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.451] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.451] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x12c, lpOverlapped=0x0) returned 1
	[0255.451] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.508] FlushFileBuffers (hFile=0x244) returned 1
	[0255.509] CloseHandle (hObject=0x20c) returned 1
	[0255.509] CloseHandle (hObject=0x244) returned 1
	[0255.509] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png")) returned 1
	[0255.510] SetEvent (hEvent=0xfc) returned 1
	[0255.510] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.511] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=426) returned 1
	[0255.511] CloseHandle (hObject=0x244) returned 1
	[0255.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png")) returned 0x2020
	[0255.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png")) returned 0x2020
	[0255.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.511] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.511] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.512] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.512] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0255.512] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1aa, lpOverlapped=0x0) returned 1
	[0255.514] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1b0, lpOverlapped=0x0) returned 1
	[0255.515] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.515] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.515] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.515] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1aa, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1aa, lpOverlapped=0x0) returned 1
	[0255.515] FlushFileBuffers (hFile=0x244) returned 1
	[0255.519] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.521] CloseHandle (hObject=0x244) returned 1
	[0255.521] CloseHandle (hObject=0x20c) returned 1
	[0255.521] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png")) returned 1
	[0255.522] SetEvent (hEvent=0xfc) returned 1
	[0255.522] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.523] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7202) returned 1
	[0255.523] CloseHandle (hObject=0x20c) returned 1
	[0255.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg")) returned 0x2020
	[0255.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg")) returned 0x2020
	[0255.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.523] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.524] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.524] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.524] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0255.524] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1c22, lpOverlapped=0x0) returned 1
	[0255.527] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1c30, lpOverlapped=0x0) returned 1
	[0255.528] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.528] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.528] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.528] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c22, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1c22, lpOverlapped=0x0) returned 1
	[0255.528] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.538] FlushFileBuffers (hFile=0x244) returned 1
	[0255.544] CloseHandle (hObject=0x20c) returned 1
	[0255.552] CloseHandle (hObject=0x244) returned 1
	[0255.553] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg")) returned 1
	[0255.554] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.554] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1993) returned 1
	[0255.555] CloseHandle (hObject=0x244) returned 1
	[0255.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg")) returned 0x2020
	[0255.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg")) returned 0x2020
	[0255.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.555] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.555] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.555] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.555] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0255.556] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x7c9, lpOverlapped=0x0) returned 1
	[0255.557] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x7d0, lpOverlapped=0x0) returned 1
	[0255.558] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.558] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.558] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.558] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7c9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x7c9, lpOverlapped=0x0) returned 1
	[0255.558] FlushFileBuffers (hFile=0x244) returned 1
	[0255.561] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.562] CloseHandle (hObject=0x244) returned 1
	[0255.562] CloseHandle (hObject=0x20c) returned 1
	[0255.562] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg")) returned 1
	[0255.563] SetEvent (hEvent=0xfc) returned 1
	[0255.563] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.564] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7961) returned 1
	[0255.564] CloseHandle (hObject=0x20c) returned 1
	[0255.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg")) returned 0x2020
	[0255.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg")) returned 0x2020
	[0255.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.565] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.565] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.565] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.565] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0255.566] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1f19, lpOverlapped=0x0) returned 1
	[0255.567] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1f20, lpOverlapped=0x0) returned 1
	[0255.568] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.568] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.568] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.568] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1f19, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1f19, lpOverlapped=0x0) returned 1
	[0255.568] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.570] FlushFileBuffers (hFile=0x244) returned 1
	[0255.572] CloseHandle (hObject=0x20c) returned 1
	[0255.573] CloseHandle (hObject=0x244) returned 1
	[0255.573] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg")) returned 1
	[0255.573] SetEvent (hEvent=0xfc) returned 1
	[0255.574] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.575] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1809) returned 1
	[0255.575] CloseHandle (hObject=0x244) returned 1
	[0255.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg")) returned 0x2020
	[0255.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg")) returned 0x2020
	[0255.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.575] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.575] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.575] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.575] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0255.577] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x711, lpOverlapped=0x0) returned 1
	[0255.578] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x720, lpOverlapped=0x0) returned 1
	[0255.579] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.579] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.579] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.579] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x711, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x711, lpOverlapped=0x0) returned 1
	[0255.579] FlushFileBuffers (hFile=0x244) returned 1
	[0255.583] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.585] CloseHandle (hObject=0x244) returned 1
	[0255.585] CloseHandle (hObject=0x20c) returned 1
	[0255.585] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg")) returned 1
	[0255.586] SetEvent (hEvent=0xfc) returned 1
	[0255.586] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.587] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9577) returned 1
	[0255.587] CloseHandle (hObject=0x20c) returned 1
	[0255.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg")) returned 0x2020
	[0255.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg")) returned 0x2020
	[0255.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.587] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.587] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.587] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.587] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0255.588] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2569, lpOverlapped=0x0) returned 1
	[0255.590] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2570, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2570, lpOverlapped=0x0) returned 1
	[0255.592] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.592] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.592] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.592] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2569, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2569, lpOverlapped=0x0) returned 1
	[0255.592] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.598] FlushFileBuffers (hFile=0x244) returned 1
	[0255.604] CloseHandle (hObject=0x20c) returned 1
	[0255.604] CloseHandle (hObject=0x244) returned 1
	[0255.605] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg")) returned 1
	[0255.605] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.606] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2489) returned 1
	[0255.606] CloseHandle (hObject=0x244) returned 1
	[0255.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg")) returned 0x2020
	[0255.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg")) returned 0x2020
	[0255.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.606] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.606] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.606] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.607] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0255.609] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x9b9, lpOverlapped=0x0) returned 1
	[0255.612] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x9c0, lpOverlapped=0x0) returned 1
	[0255.613] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.613] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.613] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.613] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x9b9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x9b9, lpOverlapped=0x0) returned 1
	[0255.613] FlushFileBuffers (hFile=0x244) returned 1
	[0255.673] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.674] CloseHandle (hObject=0x244) returned 1
	[0255.674] CloseHandle (hObject=0x20c) returned 1
	[0255.674] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg")) returned 1
	[0255.675] SetEvent (hEvent=0xfc) returned 1
	[0255.676] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.676] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7201) returned 1
	[0255.676] CloseHandle (hObject=0x20c) returned 1
	[0255.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg")) returned 0x2020
	[0255.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg")) returned 0x2020
	[0255.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.676] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.677] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.677] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.677] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0255.677] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1c21, lpOverlapped=0x0) returned 1
	[0255.679] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1c30, lpOverlapped=0x0) returned 1
	[0255.680] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.680] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.680] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.680] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c21, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1c21, lpOverlapped=0x0) returned 1
	[0255.680] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.774] FlushFileBuffers (hFile=0x244) returned 1
	[0255.776] CloseHandle (hObject=0x20c) returned 1
	[0255.776] CloseHandle (hObject=0x244) returned 1
	[0255.776] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg")) returned 1
	[0255.777] SetEvent (hEvent=0xfc) returned 1
	[0255.777] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.778] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=139243) returned 1
	[0255.778] CloseHandle (hObject=0x244) returned 1
	[0255.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png")) returned 0x2020
	[0255.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png")) returned 0x2020
	[0255.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.778] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.778] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.778] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.779] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0255.779] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x21feb, lpOverlapped=0x0) returned 1
	[0255.783] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x21ff0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x21ff0, lpOverlapped=0x0) returned 1
	[0255.786] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.786] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.786] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.786] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x21feb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x21feb, lpOverlapped=0x0) returned 1
	[0255.787] FlushFileBuffers (hFile=0x244) returned 1
	[0255.863] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.871] CloseHandle (hObject=0x244) returned 1
	[0255.880] CloseHandle (hObject=0x20c) returned 1
	[0255.883] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png")) returned 1
	[0255.893] SetEvent (hEvent=0xfc) returned 1
	[0255.917] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.921] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7233) returned 1
	[0255.921] CloseHandle (hObject=0x20c) returned 1
	[0255.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg")) returned 0x2020
	[0255.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg")) returned 0x2020
	[0255.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.921] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0255.921] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.921] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.922] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0255.923] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1c41, lpOverlapped=0x0) returned 1
	[0255.925] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1c50, lpOverlapped=0x0) returned 1
	[0255.926] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.926] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.926] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.926] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c41, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1c41, lpOverlapped=0x0) returned 1
	[0255.926] FlushFileBuffers (hFile=0x20c) returned 1
	[0255.928] FlushFileBuffers (hFile=0x244) returned 1
	[0255.930] CloseHandle (hObject=0x20c) returned 1
	[0255.931] CloseHandle (hObject=0x244) returned 1
	[0255.931] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg")) returned 1
	[0255.932] SetEvent (hEvent=0xfc) returned 1
	[0255.932] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.935] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7098) returned 1
	[0255.935] CloseHandle (hObject=0x244) returned 1
	[0255.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg")) returned 0x2020
	[0255.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg")) returned 0x2020
	[0255.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0255.935] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0255.935] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.935] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0255.935] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0255.936] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1bba, lpOverlapped=0x0) returned 1
	[0255.938] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1bc0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1bc0, lpOverlapped=0x0) returned 1
	[0255.938] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0255.939] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.939] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0255.939] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1bba, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1bba, lpOverlapped=0x0) returned 1
	[0255.939] FlushFileBuffers (hFile=0x244) returned 1
	[0256.010] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.012] CloseHandle (hObject=0x244) returned 1
	[0256.012] CloseHandle (hObject=0x20c) returned 1
	[0256.012] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg")) returned 1
	[0256.013] SetEvent (hEvent=0xfc) returned 1
	[0256.013] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.014] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10905) returned 1
	[0256.014] CloseHandle (hObject=0x20c) returned 1
	[0256.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg")) returned 0x2020
	[0256.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg")) returned 0x2020
	[0256.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.014] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.014] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.014] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.014] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.015] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2a99, lpOverlapped=0x0) returned 1
	[0256.016] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2aa0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2aa0, lpOverlapped=0x0) returned 1
	[0256.017] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.018] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.018] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.018] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a99, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2a99, lpOverlapped=0x0) returned 1
	[0256.018] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.336] FlushFileBuffers (hFile=0x244) returned 1
	[0256.339] CloseHandle (hObject=0x20c) returned 1
	[0256.339] CloseHandle (hObject=0x244) returned 1
	[0256.339] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg")) returned 1
	[0256.340] SetEvent (hEvent=0xfc) returned 1
	[0256.340] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.342] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12800) returned 1
	[0256.342] CloseHandle (hObject=0x244) returned 1
	[0256.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg")) returned 0x2020
	[0256.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg")) returned 0x2020
	[0256.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.342] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.342] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.342] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.342] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0256.344] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3200, lpOverlapped=0x0) returned 1
	[0256.349] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3210, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3210, lpOverlapped=0x0) returned 1
	[0256.350] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.351] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.351] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.351] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3200, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3200, lpOverlapped=0x0) returned 1
	[0256.351] FlushFileBuffers (hFile=0x244) returned 1
	[0256.581] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.600] CloseHandle (hObject=0x244) returned 1
	[0256.607] CloseHandle (hObject=0x20c) returned 1
	[0256.608] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg")) returned 1
	[0256.609] SetEvent (hEvent=0xfc) returned 1
	[0256.610] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.611] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8206) returned 1
	[0256.611] CloseHandle (hObject=0x20c) returned 1
	[0256.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg")) returned 0x2020
	[0256.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg")) returned 0x2020
	[0256.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.611] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.611] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.611] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.611] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.612] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x200e, lpOverlapped=0x0) returned 1
	[0256.614] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2010, lpOverlapped=0x0) returned 1
	[0256.615] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.615] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.615] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.615] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x200e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x200e, lpOverlapped=0x0) returned 1
	[0256.615] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.722] FlushFileBuffers (hFile=0x244) returned 1
	[0256.744] CloseHandle (hObject=0x20c) returned 1
	[0256.744] CloseHandle (hObject=0x244) returned 1
	[0256.744] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg")) returned 1
	[0256.745] SetEvent (hEvent=0xfc) returned 1
	[0256.745] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.747] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9146) returned 1
	[0256.747] CloseHandle (hObject=0x244) returned 1
	[0256.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg")) returned 0x2020
	[0256.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg")) returned 0x2020
	[0256.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.747] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.747] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.748] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.748] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0256.748] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x23ba, lpOverlapped=0x0) returned 1
	[0256.750] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x23c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x23c0, lpOverlapped=0x0) returned 1
	[0256.751] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.751] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.751] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.751] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x23ba, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x23ba, lpOverlapped=0x0) returned 1
	[0256.751] FlushFileBuffers (hFile=0x244) returned 1
	[0256.759] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.761] CloseHandle (hObject=0x244) returned 1
	[0256.761] CloseHandle (hObject=0x20c) returned 1
	[0256.761] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg")) returned 1
	[0256.762] SetEvent (hEvent=0xfc) returned 1
	[0256.762] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.763] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2904) returned 1
	[0256.763] CloseHandle (hObject=0x20c) returned 1
	[0256.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg")) returned 0x2020
	[0256.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg")) returned 0x2020
	[0256.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.763] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.763] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.763] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.763] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.765] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb58, lpOverlapped=0x0) returned 1
	[0256.766] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb60, lpOverlapped=0x0) returned 1
	[0256.767] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.768] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.768] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.768] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb58, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb58, lpOverlapped=0x0) returned 1
	[0256.768] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.770] FlushFileBuffers (hFile=0x244) returned 1
	[0256.772] CloseHandle (hObject=0x20c) returned 1
	[0256.772] CloseHandle (hObject=0x244) returned 1
	[0256.772] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg")) returned 1
	[0256.773] SetEvent (hEvent=0xfc) returned 1
	[0256.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.774] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2333) returned 1
	[0256.774] CloseHandle (hObject=0x244) returned 1
	[0256.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg")) returned 0x2020
	[0256.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg")) returned 0x2020
	[0256.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.774] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.774] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.775] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.775] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0256.775] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x91d, lpOverlapped=0x0) returned 1
	[0256.776] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x920, lpOverlapped=0x0) returned 1
	[0256.777] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.777] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.778] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.778] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x91d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x91d, lpOverlapped=0x0) returned 1
	[0256.778] FlushFileBuffers (hFile=0x244) returned 1
	[0256.783] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.784] CloseHandle (hObject=0x244) returned 1
	[0256.785] CloseHandle (hObject=0x20c) returned 1
	[0256.785] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg")) returned 1
	[0256.785] SetEvent (hEvent=0xfc) returned 1
	[0256.786] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.786] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10320) returned 1
	[0256.786] CloseHandle (hObject=0x20c) returned 1
	[0256.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg")) returned 0x2020
	[0256.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg")) returned 0x2020
	[0256.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.786] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.787] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.787] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.787] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.787] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2850, lpOverlapped=0x0) returned 1
	[0256.789] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2860, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2860, lpOverlapped=0x0) returned 1
	[0256.790] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.790] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.790] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.790] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2850, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2850, lpOverlapped=0x0) returned 1
	[0256.790] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.793] FlushFileBuffers (hFile=0x244) returned 1
	[0256.794] CloseHandle (hObject=0x20c) returned 1
	[0256.794] CloseHandle (hObject=0x244) returned 1
	[0256.794] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg")) returned 1
	[0256.795] SetEvent (hEvent=0xfc) returned 1
	[0256.795] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.796] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5834) returned 1
	[0256.796] CloseHandle (hObject=0x244) returned 1
	[0256.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg")) returned 0x2020
	[0256.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg")) returned 0x2020
	[0256.796] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.796] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.796] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.796] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.796] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0256.797] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x16ca, lpOverlapped=0x0) returned 1
	[0256.799] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x16d0, lpOverlapped=0x0) returned 1
	[0256.799] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.800] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.800] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.800] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x16ca, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x16ca, lpOverlapped=0x0) returned 1
	[0256.800] FlushFileBuffers (hFile=0x244) returned 1
	[0256.803] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.804] CloseHandle (hObject=0x244) returned 1
	[0256.804] CloseHandle (hObject=0x20c) returned 1
	[0256.804] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg")) returned 1
	[0256.805] SetEvent (hEvent=0xfc) returned 1
	[0256.805] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.806] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2814) returned 1
	[0256.806] CloseHandle (hObject=0x20c) returned 1
	[0256.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg")) returned 0x2020
	[0256.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg")) returned 0x2020
	[0256.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.806] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.807] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.807] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.807] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.807] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xafe, lpOverlapped=0x0) returned 1
	[0256.809] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb00, lpOverlapped=0x0) returned 1
	[0256.810] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.810] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.810] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.810] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xafe, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xafe, lpOverlapped=0x0) returned 1
	[0256.810] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.813] FlushFileBuffers (hFile=0x244) returned 1
	[0256.815] CloseHandle (hObject=0x20c) returned 1
	[0256.815] CloseHandle (hObject=0x244) returned 1
	[0256.815] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg")) returned 1
	[0256.816] SetEvent (hEvent=0xfc) returned 1
	[0256.816] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.817] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10824) returned 1
	[0256.817] CloseHandle (hObject=0x244) returned 1
	[0256.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg")) returned 0x2020
	[0256.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg")) returned 0x2020
	[0256.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.817] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.817] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.819] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.820] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0256.821] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2a48, lpOverlapped=0x0) returned 1
	[0256.822] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2a50, lpOverlapped=0x0) returned 1
	[0256.823] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.824] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.824] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.824] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a48, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2a48, lpOverlapped=0x0) returned 1
	[0256.824] FlushFileBuffers (hFile=0x244) returned 1
	[0256.826] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.829] CloseHandle (hObject=0x244) returned 1
	[0256.829] CloseHandle (hObject=0x20c) returned 1
	[0256.829] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg")) returned 1
	[0256.830] SetEvent (hEvent=0xfc) returned 1
	[0256.830] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.832] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2175) returned 1
	[0256.832] CloseHandle (hObject=0x20c) returned 1
	[0256.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg")) returned 0x2020
	[0256.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg")) returned 0x2020
	[0256.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.833] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.833] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.833] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.833] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.834] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x87f, lpOverlapped=0x0) returned 1
	[0256.836] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x880, lpOverlapped=0x0) returned 1
	[0256.837] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.837] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.837] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.837] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x87f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x87f, lpOverlapped=0x0) returned 1
	[0256.837] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.840] FlushFileBuffers (hFile=0x244) returned 1
	[0256.841] CloseHandle (hObject=0x20c) returned 1
	[0256.841] CloseHandle (hObject=0x244) returned 1
	[0256.841] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg")) returned 1
	[0256.842] SetEvent (hEvent=0xfc) returned 1
	[0256.842] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.844] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16303) returned 1
	[0256.844] CloseHandle (hObject=0x244) returned 1
	[0256.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png")) returned 0x2020
	[0256.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png")) returned 0x2020
	[0256.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.844] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.844] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.844] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.844] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0256.845] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3faf, lpOverlapped=0x0) returned 1
	[0256.846] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3fb0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3fb0, lpOverlapped=0x0) returned 1
	[0256.847] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.848] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.848] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.848] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3faf, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3faf, lpOverlapped=0x0) returned 1
	[0256.848] FlushFileBuffers (hFile=0x244) returned 1
	[0256.850] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.852] CloseHandle (hObject=0x244) returned 1
	[0256.852] CloseHandle (hObject=0x20c) returned 1
	[0256.852] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png")) returned 1
	[0256.853] SetEvent (hEvent=0xfc) returned 1
	[0256.853] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.854] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2729) returned 1
	[0256.854] CloseHandle (hObject=0x20c) returned 1
	[0256.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg")) returned 0x2020
	[0256.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg")) returned 0x2020
	[0256.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.855] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.855] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.855] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.855] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.856] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xaa9, lpOverlapped=0x0) returned 1
	[0256.857] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xab0, lpOverlapped=0x0) returned 1
	[0256.858] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.858] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.858] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.858] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xaa9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xaa9, lpOverlapped=0x0) returned 1
	[0256.858] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.861] FlushFileBuffers (hFile=0x244) returned 1
	[0256.863] CloseHandle (hObject=0x20c) returned 1
	[0256.863] CloseHandle (hObject=0x244) returned 1
	[0256.863] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg")) returned 1
	[0256.864] SetEvent (hEvent=0xfc) returned 1
	[0256.864] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.865] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7462) returned 1
	[0256.865] CloseHandle (hObject=0x244) returned 1
	[0256.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg")) returned 0x2020
	[0256.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg")) returned 0x2020
	[0256.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.865] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.865] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.865] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.865] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0256.866] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1d26, lpOverlapped=0x0) returned 1
	[0256.867] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1d30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1d30, lpOverlapped=0x0) returned 1
	[0256.868] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.869] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.869] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.869] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1d26, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1d26, lpOverlapped=0x0) returned 1
	[0256.869] FlushFileBuffers (hFile=0x244) returned 1
	[0256.872] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.873] CloseHandle (hObject=0x244) returned 1
	[0256.873] CloseHandle (hObject=0x20c) returned 1
	[0256.873] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg")) returned 1
	[0256.874] SetEvent (hEvent=0xfc) returned 1
	[0256.874] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.875] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1920) returned 1
	[0256.875] CloseHandle (hObject=0x20c) returned 1
	[0256.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg")) returned 0x2020
	[0256.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg")) returned 0x2020
	[0256.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.875] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.876] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.876] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.876] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.877] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x780, lpOverlapped=0x0) returned 1
	[0256.878] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x790, lpOverlapped=0x0) returned 1
	[0256.882] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.882] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.882] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.882] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x780, lpOverlapped=0x0) returned 1
	[0256.882] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.885] FlushFileBuffers (hFile=0x244) returned 1
	[0256.886] CloseHandle (hObject=0x20c) returned 1
	[0256.886] CloseHandle (hObject=0x244) returned 1
	[0256.886] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg")) returned 1
	[0256.887] SetEvent (hEvent=0xfc) returned 1
	[0256.887] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.889] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1982) returned 1
	[0256.889] CloseHandle (hObject=0x244) returned 1
	[0256.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg")) returned 0x2020
	[0256.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg")) returned 0x2020
	[0256.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.889] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.889] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.889] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.889] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0256.890] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x7be, lpOverlapped=0x0) returned 1
	[0256.892] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x7c0, lpOverlapped=0x0) returned 1
	[0256.893] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.893] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.893] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.893] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7be, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x7be, lpOverlapped=0x0) returned 1
	[0256.893] FlushFileBuffers (hFile=0x244) returned 1
	[0256.896] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.897] CloseHandle (hObject=0x244) returned 1
	[0256.898] CloseHandle (hObject=0x20c) returned 1
	[0256.898] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg")) returned 1
	[0256.899] SetEvent (hEvent=0xfc) returned 1
	[0256.899] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.900] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14890) returned 1
	[0256.900] CloseHandle (hObject=0x20c) returned 1
	[0256.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg")) returned 0x2020
	[0256.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg")) returned 0x2020
	[0256.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.900] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.900] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.900] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.900] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.901] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3a2a, lpOverlapped=0x0) returned 1
	[0256.903] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3a30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3a30, lpOverlapped=0x0) returned 1
	[0256.904] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.904] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.904] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.904] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3a2a, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3a2a, lpOverlapped=0x0) returned 1
	[0256.904] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.906] FlushFileBuffers (hFile=0x244) returned 1
	[0256.911] CloseHandle (hObject=0x20c) returned 1
	[0256.911] CloseHandle (hObject=0x244) returned 1
	[0256.911] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg")) returned 1
	[0256.912] SetEvent (hEvent=0xfc) returned 1
	[0256.912] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.913] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12150) returned 1
	[0256.913] CloseHandle (hObject=0x244) returned 1
	[0256.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg")) returned 0x2020
	[0256.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg")) returned 0x2020
	[0256.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.914] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.914] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.914] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.914] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0256.915] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2f76, lpOverlapped=0x0) returned 1
	[0256.916] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2f80, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2f80, lpOverlapped=0x0) returned 1
	[0256.917] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.918] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.918] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.918] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2f76, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2f76, lpOverlapped=0x0) returned 1
	[0256.918] FlushFileBuffers (hFile=0x244) returned 1
	[0256.921] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.922] CloseHandle (hObject=0x244) returned 1
	[0256.923] CloseHandle (hObject=0x20c) returned 1
	[0256.923] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg")) returned 1
	[0256.924] SetEvent (hEvent=0xfc) returned 1
	[0256.924] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.925] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1926) returned 1
	[0256.925] CloseHandle (hObject=0x20c) returned 1
	[0256.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg")) returned 0x2020
	[0256.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg")) returned 0x2020
	[0256.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.926] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.926] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.926] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.926] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.927] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x786, lpOverlapped=0x0) returned 1
	[0256.928] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x790, lpOverlapped=0x0) returned 1
	[0256.929] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.929] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.929] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.929] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x786, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x786, lpOverlapped=0x0) returned 1
	[0256.929] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.932] FlushFileBuffers (hFile=0x244) returned 1
	[0256.934] CloseHandle (hObject=0x20c) returned 1
	[0256.934] CloseHandle (hObject=0x244) returned 1
	[0256.934] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg")) returned 1
	[0256.935] SetEvent (hEvent=0xfc) returned 1
	[0256.935] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.936] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2567) returned 1
	[0256.936] CloseHandle (hObject=0x244) returned 1
	[0256.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg")) returned 0x2020
	[0256.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg")) returned 0x2020
	[0256.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.936] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.937] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.937] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.937] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0256.937] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xa07, lpOverlapped=0x0) returned 1
	[0256.939] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xa10, lpOverlapped=0x0) returned 1
	[0256.940] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.940] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.940] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.940] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa07, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xa07, lpOverlapped=0x0) returned 1
	[0256.940] FlushFileBuffers (hFile=0x244) returned 1
	[0256.943] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.944] CloseHandle (hObject=0x244) returned 1
	[0256.944] CloseHandle (hObject=0x20c) returned 1
	[0256.944] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg")) returned 1
	[0256.945] SetEvent (hEvent=0xfc) returned 1
	[0256.945] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.947] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6552) returned 1
	[0256.947] CloseHandle (hObject=0x20c) returned 1
	[0256.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg")) returned 0x2020
	[0256.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg")) returned 0x2020
	[0256.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.947] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.947] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.947] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.947] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.948] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1998, lpOverlapped=0x0) returned 1
	[0256.950] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x19a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x19a0, lpOverlapped=0x0) returned 1
	[0256.950] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.951] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.951] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.951] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1998, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1998, lpOverlapped=0x0) returned 1
	[0256.951] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.954] FlushFileBuffers (hFile=0x244) returned 1
	[0256.955] CloseHandle (hObject=0x20c) returned 1
	[0256.955] CloseHandle (hObject=0x244) returned 1
	[0256.955] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg")) returned 1
	[0256.956] SetEvent (hEvent=0xfc) returned 1
	[0256.957] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.958] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6757) returned 1
	[0256.958] CloseHandle (hObject=0x244) returned 1
	[0256.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg")) returned 0x2020
	[0256.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg")) returned 0x2020
	[0256.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.958] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.958] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.958] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.958] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0256.959] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1a65, lpOverlapped=0x0) returned 1
	[0256.960] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1a70, lpOverlapped=0x0) returned 1
	[0256.961] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.962] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.962] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.962] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1a65, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1a65, lpOverlapped=0x0) returned 1
	[0256.962] FlushFileBuffers (hFile=0x244) returned 1
	[0256.964] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.966] CloseHandle (hObject=0x244) returned 1
	[0256.966] CloseHandle (hObject=0x20c) returned 1
	[0256.966] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg")) returned 1
	[0256.967] SetEvent (hEvent=0xfc) returned 1
	[0256.967] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.968] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=23109) returned 1
	[0256.968] CloseHandle (hObject=0x20c) returned 1
	[0256.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg")) returned 0x2020
	[0256.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg")) returned 0x2020
	[0256.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.968] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.968] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.968] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.969] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.969] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x5a45, lpOverlapped=0x0) returned 1
	[0256.971] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5a50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x5a50, lpOverlapped=0x0) returned 1
	[0256.972] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.973] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.973] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.973] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5a45, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x5a45, lpOverlapped=0x0) returned 1
	[0256.973] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.978] FlushFileBuffers (hFile=0x244) returned 1
	[0256.979] CloseHandle (hObject=0x20c) returned 1
	[0256.980] CloseHandle (hObject=0x244) returned 1
	[0256.980] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg")) returned 1
	[0256.981] SetEvent (hEvent=0xfc) returned 1
	[0256.981] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.982] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14479) returned 1
	[0256.982] CloseHandle (hObject=0x244) returned 1
	[0256.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg")) returned 0x2020
	[0256.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg")) returned 0x2020
	[0256.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.982] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0256.982] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.982] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.982] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0256.983] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x388f, lpOverlapped=0x0) returned 1
	[0256.985] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3890, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3890, lpOverlapped=0x0) returned 1
	[0256.986] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.986] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.986] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.986] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x388f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x388f, lpOverlapped=0x0) returned 1
	[0256.987] FlushFileBuffers (hFile=0x244) returned 1
	[0256.989] FlushFileBuffers (hFile=0x20c) returned 1
	[0256.991] CloseHandle (hObject=0x244) returned 1
	[0256.991] CloseHandle (hObject=0x20c) returned 1
	[0256.991] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg")) returned 1
	[0256.992] SetEvent (hEvent=0xfc) returned 1
	[0256.992] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.993] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7831) returned 1
	[0256.993] CloseHandle (hObject=0x20c) returned 1
	[0256.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg")) returned 0x2020
	[0256.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg")) returned 0x2020
	[0256.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0256.994] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0256.994] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.994] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0256.994] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0256.995] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1e97, lpOverlapped=0x0) returned 1
	[0256.996] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1ea0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1ea0, lpOverlapped=0x0) returned 1
	[0256.997] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0256.997] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.997] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0256.998] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1e97, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1e97, lpOverlapped=0x0) returned 1
	[0256.998] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.001] FlushFileBuffers (hFile=0x244) returned 1
	[0257.002] CloseHandle (hObject=0x20c) returned 1
	[0257.002] CloseHandle (hObject=0x244) returned 1
	[0257.002] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg")) returned 1
	[0257.003] SetEvent (hEvent=0xfc) returned 1
	[0257.003] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.004] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9151) returned 1
	[0257.004] CloseHandle (hObject=0x244) returned 1
	[0257.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg")) returned 0x2020
	[0257.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg")) returned 0x2020
	[0257.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.004] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.004] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.005] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.005] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0257.005] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x23bf, lpOverlapped=0x0) returned 1
	[0257.007] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x23c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x23c0, lpOverlapped=0x0) returned 1
	[0257.008] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.008] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.008] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.008] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x23bf, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x23bf, lpOverlapped=0x0) returned 1
	[0257.008] FlushFileBuffers (hFile=0x244) returned 1
	[0257.011] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.013] CloseHandle (hObject=0x244) returned 1
	[0257.013] CloseHandle (hObject=0x20c) returned 1
	[0257.013] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg")) returned 1
	[0257.014] SetEvent (hEvent=0xfc) returned 1
	[0257.014] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.015] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2271) returned 1
	[0257.015] CloseHandle (hObject=0x20c) returned 1
	[0257.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg")) returned 0x2020
	[0257.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg")) returned 0x2020
	[0257.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.015] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.015] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.015] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.015] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0257.016] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x8df, lpOverlapped=0x0) returned 1
	[0257.026] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x8e0, lpOverlapped=0x0) returned 1
	[0257.027] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.027] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.027] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.027] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8df, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x8df, lpOverlapped=0x0) returned 1
	[0257.027] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.030] FlushFileBuffers (hFile=0x244) returned 1
	[0257.031] CloseHandle (hObject=0x20c) returned 1
	[0257.031] CloseHandle (hObject=0x244) returned 1
	[0257.031] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg")) returned 1
	[0257.032] SetEvent (hEvent=0xfc) returned 1
	[0257.032] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.034] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11149) returned 1
	[0257.034] CloseHandle (hObject=0x244) returned 1
	[0257.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg")) returned 0x2020
	[0257.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg")) returned 0x2020
	[0257.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.034] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.034] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.034] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.034] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0257.035] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2b8d, lpOverlapped=0x0) returned 1
	[0257.037] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2b90, lpOverlapped=0x0) returned 1
	[0257.038] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.038] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.038] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.038] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b8d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2b8d, lpOverlapped=0x0) returned 1
	[0257.038] FlushFileBuffers (hFile=0x244) returned 1
	[0257.043] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.044] CloseHandle (hObject=0x244) returned 1
	[0257.045] CloseHandle (hObject=0x20c) returned 1
	[0257.045] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg")) returned 1
	[0257.045] SetEvent (hEvent=0xfc) returned 1
	[0257.046] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.047] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8223) returned 1
	[0257.047] CloseHandle (hObject=0x20c) returned 1
	[0257.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg")) returned 0x2020
	[0257.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg")) returned 0x2020
	[0257.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.047] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.047] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.047] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.047] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0257.048] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x201f, lpOverlapped=0x0) returned 1
	[0257.049] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2020, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2020, lpOverlapped=0x0) returned 1
	[0257.050] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.051] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.051] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.051] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x201f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x201f, lpOverlapped=0x0) returned 1
	[0257.051] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.054] FlushFileBuffers (hFile=0x244) returned 1
	[0257.056] CloseHandle (hObject=0x20c) returned 1
	[0257.056] CloseHandle (hObject=0x244) returned 1
	[0257.056] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg")) returned 1
	[0257.057] SetEvent (hEvent=0xfc) returned 1
	[0257.057] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.058] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1769) returned 1
	[0257.058] CloseHandle (hObject=0x244) returned 1
	[0257.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg")) returned 0x2020
	[0257.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg")) returned 0x2020
	[0257.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.059] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.059] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.059] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.059] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0257.060] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x6e9, lpOverlapped=0x0) returned 1
	[0257.061] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x6f0, lpOverlapped=0x0) returned 1
	[0257.062] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.062] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.062] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.062] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6e9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x6e9, lpOverlapped=0x0) returned 1
	[0257.062] FlushFileBuffers (hFile=0x244) returned 1
	[0257.065] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.066] CloseHandle (hObject=0x244) returned 1
	[0257.066] CloseHandle (hObject=0x20c) returned 1
	[0257.066] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg")) returned 1
	[0257.067] SetEvent (hEvent=0xfc) returned 1
	[0257.067] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.068] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=476) returned 1
	[0257.068] CloseHandle (hObject=0x20c) returned 1
	[0257.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png")) returned 0x2020
	[0257.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png")) returned 0x2020
	[0257.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.068] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.068] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.068] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.068] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0257.069] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1dc, lpOverlapped=0x0) returned 1
	[0257.070] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1e0, lpOverlapped=0x0) returned 1
	[0257.071] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.072] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.072] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.072] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1dc, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1dc, lpOverlapped=0x0) returned 1
	[0257.072] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.074] FlushFileBuffers (hFile=0x244) returned 1
	[0257.076] CloseHandle (hObject=0x20c) returned 1
	[0257.076] CloseHandle (hObject=0x244) returned 1
	[0257.076] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png")) returned 1
	[0257.077] SetEvent (hEvent=0xfc) returned 1
	[0257.077] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.078] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=431) returned 1
	[0257.078] CloseHandle (hObject=0x244) returned 1
	[0257.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png")) returned 0x2020
	[0257.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png")) returned 0x2020
	[0257.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.078] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.078] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.078] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.078] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0257.079] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1af, lpOverlapped=0x0) returned 1
	[0257.081] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1b0, lpOverlapped=0x0) returned 1
	[0257.082] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.082] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.083] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.083] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1af, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1af, lpOverlapped=0x0) returned 1
	[0257.083] FlushFileBuffers (hFile=0x244) returned 1
	[0257.086] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.088] CloseHandle (hObject=0x244) returned 1
	[0257.088] CloseHandle (hObject=0x20c) returned 1
	[0257.088] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png")) returned 1
	[0257.089] SetEvent (hEvent=0xfc) returned 1
	[0257.089] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.089] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=571) returned 1
	[0257.089] CloseHandle (hObject=0x20c) returned 1
	[0257.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png")) returned 0x2020
	[0257.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png")) returned 0x2020
	[0257.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.090] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.090] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.090] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.090] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0257.091] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x23b, lpOverlapped=0x0) returned 1
	[0257.092] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x240, lpOverlapped=0x0) returned 1
	[0257.093] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.093] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.093] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.093] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x23b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x23b, lpOverlapped=0x0) returned 1
	[0257.093] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.096] FlushFileBuffers (hFile=0x244) returned 1
	[0257.097] CloseHandle (hObject=0x20c) returned 1
	[0257.097] CloseHandle (hObject=0x244) returned 1
	[0257.098] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png")) returned 1
	[0257.098] SetEvent (hEvent=0xfc) returned 1
	[0257.099] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.099] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13174) returned 1
	[0257.099] CloseHandle (hObject=0x244) returned 1
	[0257.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg")) returned 0x2020
	[0257.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg")) returned 0x2020
	[0257.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.100] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.100] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.100] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.100] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0257.100] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3376, lpOverlapped=0x0) returned 1
	[0257.113] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3380, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3380, lpOverlapped=0x0) returned 1
	[0257.114] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.115] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.115] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.115] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3376, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3376, lpOverlapped=0x0) returned 1
	[0257.115] FlushFileBuffers (hFile=0x244) returned 1
	[0257.197] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.236] CloseHandle (hObject=0x244) returned 1
	[0257.236] CloseHandle (hObject=0x20c) returned 1
	[0257.236] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg")) returned 1
	[0257.237] SetEvent (hEvent=0xfc) returned 1
	[0257.238] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.239] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28437) returned 1
	[0257.239] CloseHandle (hObject=0x20c) returned 1
	[0257.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js")) returned 0x2020
	[0257.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js")) returned 0x2020
	[0257.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.240] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.240] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.240] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.240] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0257.241] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x6f15, lpOverlapped=0x0) returned 1
	[0257.243] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6f20, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x6f20, lpOverlapped=0x0) returned 1
	[0257.244] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.245] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.245] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.245] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6f15, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x6f15, lpOverlapped=0x0) returned 1
	[0257.245] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.248] FlushFileBuffers (hFile=0x244) returned 1
	[0257.249] CloseHandle (hObject=0x20c) returned 1
	[0257.249] CloseHandle (hObject=0x244) returned 1
	[0257.249] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bootstrap[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bootstrap[1].js")) returned 1
	[0257.250] SetEvent (hEvent=0xfc) returned 1
	[0257.251] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\browser[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\browser[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.252] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2806) returned 1
	[0257.253] CloseHandle (hObject=0x244) returned 1
	[0257.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\browser[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\browser[1].htm")) returned 0x2020
	[0257.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\browser[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\browser[1].htm")) returned 0x2020
	[0257.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\browser[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\browser[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.253] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\browser[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\browser[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.253] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.253] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.253] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\browser[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\browser[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0257.254] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xaf6, lpOverlapped=0x0) returned 1
	[0257.255] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb00, lpOverlapped=0x0) returned 1
	[0257.256] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.256] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.257] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.257] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xaf6, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xaf6, lpOverlapped=0x0) returned 1
	[0257.257] FlushFileBuffers (hFile=0x244) returned 1
	[0257.260] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.261] CloseHandle (hObject=0x244) returned 1
	[0257.261] CloseHandle (hObject=0x20c) returned 1
	[0257.261] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\browser[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\browser[1].htm")) returned 1
	[0257.262] SetEvent (hEvent=0xfc) returned 1
	[0257.262] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.263] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=19928) returned 1
	[0257.263] CloseHandle (hObject=0x20c) returned 1
	[0257.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css")) returned 0x2020
	[0257.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css")) returned 0x2020
	[0257.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.263] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.263] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.264] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.264] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0257.264] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x4dd8, lpOverlapped=0x0) returned 1
	[0257.266] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4de0, lpOverlapped=0x0) returned 1
	[0257.267] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.268] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.268] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.268] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4dd8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x4dd8, lpOverlapped=0x0) returned 1
	[0257.268] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.388] FlushFileBuffers (hFile=0x244) returned 1
	[0257.415] CloseHandle (hObject=0x20c) returned 1
	[0257.415] CloseHandle (hObject=0x244) returned 1
	[0257.416] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css")) returned 1
	[0257.417] SetEvent (hEvent=0xfc) returned 1
	[0257.418] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.419] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43) returned 1
	[0257.419] CloseHandle (hObject=0x244) returned 1
	[0257.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif")) returned 0x2020
	[0257.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif")) returned 0x2020
	[0257.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.419] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.419] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.420] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.420] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0257.421] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2b, lpOverlapped=0x0) returned 1
	[0257.422] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x30, lpOverlapped=0x0) returned 1
	[0257.423] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.423] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.424] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.424] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2b, lpOverlapped=0x0) returned 1
	[0257.424] FlushFileBuffers (hFile=0x244) returned 1
	[0257.428] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.443] CloseHandle (hObject=0x244) returned 1
	[0257.444] CloseHandle (hObject=0x20c) returned 1
	[0257.445] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\collect[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\collect[1].gif")) returned 1
	[0257.446] SetEvent (hEvent=0xfc) returned 1
	[0257.446] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.447] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67) returned 1
	[0257.447] CloseHandle (hObject=0x20c) returned 1
	[0257.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\desktop.ini")) returned 0x2006
	[0257.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\desktop.ini")) returned 0x2006
	[0257.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.448] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0257.448] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.448] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.448] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2006, hTemplateFile=0x0) returned 0x244
	[0257.452] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x43, lpOverlapped=0x0) returned 1
	[0257.453] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x50, lpOverlapped=0x0) returned 1
	[0257.453] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.454] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.454] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.454] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x43, lpOverlapped=0x0) returned 1
	[0257.454] FlushFileBuffers (hFile=0x20c) returned 1
	[0257.457] FlushFileBuffers (hFile=0x244) returned 1
	[0257.459] CloseHandle (hObject=0x20c) returned 1
	[0257.460] CloseHandle (hObject=0x244) returned 1
	[0257.460] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\desktop.ini")) returned 1
	[0257.461] SetEvent (hEvent=0xfc) returned 1
	[0257.461] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\DevCMDL2.2.18[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\devcmdl2.2.18[1].eot"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.465] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10812) returned 1
	[0257.465] CloseHandle (hObject=0x110) returned 1
	[0257.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\DevCMDL2.2.18[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\devcmdl2.2.18[1].eot")) returned 0x2020
	[0257.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\DevCMDL2.2.18[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\devcmdl2.2.18[1].eot")) returned 0x2020
	[0257.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\DevCMDL2.2.18[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\devcmdl2.2.18[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.465] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\DevCMDL2.2.18[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\devcmdl2.2.18[1].eot"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.465] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.465] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.465] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\DevCMDL2.2.18[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\devcmdl2.2.18[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.466] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2a3c, lpOverlapped=0x0) returned 1
	[0257.468] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a40, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2a40, lpOverlapped=0x0) returned 1
	[0257.469] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0257.469] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.470] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.470] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a3c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2a3c, lpOverlapped=0x0) returned 1
	[0257.470] FlushFileBuffers (hFile=0x110) returned 1
	[0257.481] FlushFileBuffers (hFile=0x240) returned 1
	[0257.483] CloseHandle (hObject=0x110) returned 1
	[0257.483] CloseHandle (hObject=0x240) returned 1
	[0257.483] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\DevCMDL2.2.18[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\devcmdl2.2.18[1].eot")) returned 1
	[0257.484] SetEvent (hEvent=0xfc) returned 1
	[0257.484] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.485] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43) returned 1
	[0257.485] CloseHandle (hObject=0x240) returned 1
	[0257.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif")) returned 0x2020
	[0257.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif")) returned 0x2020
	[0257.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.486] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.486] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.486] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.486] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.487] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2b, lpOverlapped=0x0) returned 1
	[0257.488] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x30, lpOverlapped=0x0) returned 1
	[0257.489] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.489] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.490] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.490] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2b, lpOverlapped=0x0) returned 1
	[0257.490] FlushFileBuffers (hFile=0x240) returned 1
	[0257.492] FlushFileBuffers (hFile=0x110) returned 1
	[0257.494] CloseHandle (hObject=0x240) returned 1
	[0257.494] CloseHandle (hObject=0x110) returned 1
	[0257.495] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e151e5[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e151e5[1].gif")) returned 1
	[0257.495] SetEvent (hEvent=0xfc) returned 1
	[0257.495] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.496] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=151081) returned 1
	[0257.496] CloseHandle (hObject=0x110) returned 1
	[0257.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt")) returned 0x2020
	[0257.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt")) returned 0x2020
	[0257.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.497] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.497] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.497] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.497] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.498] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x24e29, lpOverlapped=0x0) returned 1
	[0257.503] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x24e30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x24e30, lpOverlapped=0x0) returned 1
	[0257.506] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0257.506] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.506] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.506] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x24e29, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x24e29, lpOverlapped=0x0) returned 1
	[0257.506] FlushFileBuffers (hFile=0x110) returned 1
	[0257.510] FlushFileBuffers (hFile=0x240) returned 1
	[0257.512] CloseHandle (hObject=0x110) returned 1
	[0257.512] CloseHandle (hObject=0x240) returned 1
	[0257.512] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt")) returned 1
	[0257.514] SetEvent (hEvent=0xfc) returned 1
	[0257.514] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\eula_text[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\eula_text[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.515] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=63733) returned 1
	[0257.515] CloseHandle (hObject=0x240) returned 1
	[0257.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\eula_text[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\eula_text[1].htm")) returned 0x2020
	[0257.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\eula_text[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\eula_text[1].htm")) returned 0x2020
	[0257.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\eula_text[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\eula_text[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.515] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\eula_text[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\eula_text[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.515] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.515] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.515] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\eula_text[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\eula_text[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.517] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xf8f5, lpOverlapped=0x0) returned 1
	[0257.519] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf900, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf900, lpOverlapped=0x0) returned 1
	[0257.521] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0257.521] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.521] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.521] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf8f5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xf8f5, lpOverlapped=0x0) returned 1
	[0257.521] FlushFileBuffers (hFile=0x240) returned 1
	[0257.524] FlushFileBuffers (hFile=0x110) returned 1
	[0257.525] CloseHandle (hObject=0x240) returned 1
	[0257.525] CloseHandle (hObject=0x110) returned 1
	[0257.525] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\eula_text[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\eula_text[1].htm")) returned 1
	[0257.526] SetEvent (hEvent=0xfc) returned 1
	[0257.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.528] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13518) returned 1
	[0257.528] CloseHandle (hObject=0x110) returned 1
	[0257.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt")) returned 0x2020
	[0257.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt")) returned 0x2020
	[0257.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.529] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.529] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.529] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.529] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.529] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x34ce, lpOverlapped=0x0) returned 1
	[0257.531] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x34d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x34d0, lpOverlapped=0x0) returned 1
	[0257.532] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.532] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.532] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.532] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x34ce, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x34ce, lpOverlapped=0x0) returned 1
	[0257.532] FlushFileBuffers (hFile=0x110) returned 1
	[0257.535] FlushFileBuffers (hFile=0x240) returned 1
	[0257.537] CloseHandle (hObject=0x110) returned 1
	[0257.537] CloseHandle (hObject=0x240) returned 1
	[0257.537] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt")) returned 1
	[0257.538] SetEvent (hEvent=0xfc) returned 1
	[0257.538] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.538] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4692) returned 1
	[0257.538] CloseHandle (hObject=0x240) returned 1
	[0257.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]")) returned 0x2020
	[0257.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]")) returned 0x2020
	[0257.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.539] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.539] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.539] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.539] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.540] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1254, lpOverlapped=0x0) returned 1
	[0257.542] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1260, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1260, lpOverlapped=0x0) returned 1
	[0257.543] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x202, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x202, lpOverlapped=0x0) returned 1
	[0257.543] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.543] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.544] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1254, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1254, lpOverlapped=0x0) returned 1
	[0257.544] FlushFileBuffers (hFile=0x240) returned 1
	[0257.546] FlushFileBuffers (hFile=0x110) returned 1
	[0257.563] CloseHandle (hObject=0x240) returned 1
	[0257.563] CloseHandle (hObject=0x110) returned 1
	[0257.563] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\getype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]")) returned 1
	[0257.564] SetEvent (hEvent=0xfc) returned 1
	[0257.564] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.565] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1702) returned 1
	[0257.565] CloseHandle (hObject=0x110) returned 1
	[0257.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png")) returned 0x2020
	[0257.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png")) returned 0x2020
	[0257.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.565] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.565] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.565] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.565] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.566] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x6a6, lpOverlapped=0x0) returned 1
	[0257.568] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x6b0, lpOverlapped=0x0) returned 1
	[0257.569] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0257.569] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.569] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.569] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6a6, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x6a6, lpOverlapped=0x0) returned 1
	[0257.569] FlushFileBuffers (hFile=0x110) returned 1
	[0257.574] FlushFileBuffers (hFile=0x240) returned 1
	[0257.579] CloseHandle (hObject=0x110) returned 1
	[0257.579] CloseHandle (hObject=0x240) returned 1
	[0257.579] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png")) returned 1
	[0257.580] SetEvent (hEvent=0xfc) returned 1
	[0257.581] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.581] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=46792) returned 1
	[0257.581] CloseHandle (hObject=0x240) returned 1
	[0257.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm")) returned 0x2020
	[0257.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm")) returned 0x2020
	[0257.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.582] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.582] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.582] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.582] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.582] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb6c8, lpOverlapped=0x0) returned 1
	[0257.585] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb6d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb6d0, lpOverlapped=0x0) returned 1
	[0257.586] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.586] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.586] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.587] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb6c8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb6c8, lpOverlapped=0x0) returned 1
	[0257.587] FlushFileBuffers (hFile=0x240) returned 1
	[0257.590] FlushFileBuffers (hFile=0x110) returned 1
	[0257.591] CloseHandle (hObject=0x240) returned 1
	[0257.591] CloseHandle (hObject=0x110) returned 1
	[0257.591] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm")) returned 1
	[0257.592] SetEvent (hEvent=0xfc) returned 1
	[0257.592] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.593] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=162) returned 1
	[0257.593] CloseHandle (hObject=0x110) returned 1
	[0257.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt")) returned 0x2020
	[0257.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt")) returned 0x2020
	[0257.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.594] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.594] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.594] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.594] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.595] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xa2, lpOverlapped=0x0) returned 1
	[0257.597] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb0, lpOverlapped=0x0) returned 1
	[0257.597] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.598] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.598] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.598] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xa2, lpOverlapped=0x0) returned 1
	[0257.598] FlushFileBuffers (hFile=0x110) returned 1
	[0257.601] FlushFileBuffers (hFile=0x240) returned 1
	[0257.603] CloseHandle (hObject=0x110) returned 1
	[0257.603] CloseHandle (hObject=0x240) returned 1
	[0257.603] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt")) returned 1
	[0257.604] SetEvent (hEvent=0xfc) returned 1
	[0257.604] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.606] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=103) returned 1
	[0257.606] CloseHandle (hObject=0x240) returned 1
	[0257.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png")) returned 0x2020
	[0257.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png")) returned 0x2020
	[0257.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.606] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.606] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.606] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.606] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.607] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x67, lpOverlapped=0x0) returned 1
	[0257.608] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x70, lpOverlapped=0x0) returned 1
	[0257.609] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.609] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.609] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.609] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x67, lpOverlapped=0x0) returned 1
	[0257.609] FlushFileBuffers (hFile=0x240) returned 1
	[0257.619] FlushFileBuffers (hFile=0x110) returned 1
	[0257.634] CloseHandle (hObject=0x240) returned 1
	[0257.634] CloseHandle (hObject=0x110) returned 1
	[0257.634] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png")) returned 1
	[0257.635] SetEvent (hEvent=0xfc) returned 1
	[0257.635] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.636] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11733) returned 1
	[0257.636] CloseHandle (hObject=0x110) returned 1
	[0257.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[1]")) returned 0x2020
	[0257.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[1]")) returned 0x2020
	[0257.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.636] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.636] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.636] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.636] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.637] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2dd5, lpOverlapped=0x0) returned 1
	[0257.639] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2de0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2de0, lpOverlapped=0x0) returned 1
	[0257.640] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0257.640] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.640] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.640] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2dd5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2dd5, lpOverlapped=0x0) returned 1
	[0257.640] FlushFileBuffers (hFile=0x110) returned 1
	[0257.643] FlushFileBuffers (hFile=0x240) returned 1
	[0257.644] CloseHandle (hObject=0x110) returned 1
	[0257.644] CloseHandle (hObject=0x240) returned 1
	[0257.644] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[1]")) returned 1
	[0257.645] SetEvent (hEvent=0xfc) returned 1
	[0257.645] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[2]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.646] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11561) returned 1
	[0257.646] CloseHandle (hObject=0x240) returned 1
	[0257.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[2]")) returned 0x2020
	[0257.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[2]")) returned 0x2020
	[0257.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[2].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[2].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.646] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[2]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.646] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.646] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.646] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[2].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[2].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.647] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2d29, lpOverlapped=0x0) returned 1
	[0257.648] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2d30, lpOverlapped=0x0) returned 1
	[0257.649] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0257.650] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.650] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.650] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d29, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2d29, lpOverlapped=0x0) returned 1
	[0257.650] FlushFileBuffers (hFile=0x240) returned 1
	[0257.653] FlushFileBuffers (hFile=0x110) returned 1
	[0257.654] CloseHandle (hObject=0x240) returned 1
	[0257.654] CloseHandle (hObject=0x110) returned 1
	[0257.654] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[2]")) returned 1
	[0257.655] SetEvent (hEvent=0xfc) returned 1
	[0257.655] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[3]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[3]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.657] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12200) returned 1
	[0257.657] CloseHandle (hObject=0x110) returned 1
	[0257.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[3]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[3]")) returned 0x2020
	[0257.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[3]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[3]")) returned 0x2020
	[0257.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[3].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[3].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.657] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[3]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[3]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.657] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.657] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.657] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[3].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[3].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.658] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2fa8, lpOverlapped=0x0) returned 1
	[0257.659] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2fb0, lpOverlapped=0x0) returned 1
	[0257.660] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0257.661] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.661] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.661] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2fa8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2fa8, lpOverlapped=0x0) returned 1
	[0257.661] FlushFileBuffers (hFile=0x110) returned 1
	[0257.663] FlushFileBuffers (hFile=0x240) returned 1
	[0257.665] CloseHandle (hObject=0x110) returned 1
	[0257.665] CloseHandle (hObject=0x240) returned 1
	[0257.666] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[3]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[3]")) returned 1
	[0257.666] SetEvent (hEvent=0xfc) returned 1
	[0257.667] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[4]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[4]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.667] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11689) returned 1
	[0257.667] CloseHandle (hObject=0x240) returned 1
	[0257.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[4]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[4]")) returned 0x2020
	[0257.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[4]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[4]")) returned 0x2020
	[0257.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[4].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[4].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.668] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[4]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[4]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.668] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.668] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.668] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[4].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[4].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.668] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2da9, lpOverlapped=0x0) returned 1
	[0257.670] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2db0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2db0, lpOverlapped=0x0) returned 1
	[0257.671] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0257.671] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.671] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.671] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2da9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2da9, lpOverlapped=0x0) returned 1
	[0257.672] FlushFileBuffers (hFile=0x240) returned 1
	[0257.674] FlushFileBuffers (hFile=0x110) returned 1
	[0257.676] CloseHandle (hObject=0x240) returned 1
	[0257.676] CloseHandle (hObject=0x110) returned 1
	[0257.676] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\v2[4]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\v2[4]")) returned 1
	[0257.677] SetEvent (hEvent=0xfc) returned 1
	[0257.677] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.677] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67) returned 1
	[0257.677] CloseHandle (hObject=0x110) returned 1
	[0257.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\desktop.ini")) returned 0x2006
	[0257.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\desktop.ini")) returned 0x2006
	[0257.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.678] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.678] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.678] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.678] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2006, hTemplateFile=0x0) returned 0x240
	[0257.680] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x43, lpOverlapped=0x0) returned 1
	[0257.681] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x50, lpOverlapped=0x0) returned 1
	[0257.681] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.682] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.682] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.682] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x43, lpOverlapped=0x0) returned 1
	[0257.682] FlushFileBuffers (hFile=0x110) returned 1
	[0257.685] FlushFileBuffers (hFile=0x240) returned 1
	[0257.687] CloseHandle (hObject=0x110) returned 1
	[0257.687] CloseHandle (hObject=0x240) returned 1
	[0257.687] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\desktop.ini")) returned 1
	[0257.688] SetEvent (hEvent=0xfc) returned 1
	[0257.688] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.689] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42838) returned 1
	[0257.689] CloseHandle (hObject=0x240) returned 1
	[0257.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif")) returned 0x2020
	[0257.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif")) returned 0x2020
	[0257.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.690] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.690] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.690] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.690] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.690] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xa756, lpOverlapped=0x0) returned 1
	[0257.693] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa760, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xa760, lpOverlapped=0x0) returned 1
	[0257.695] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.695] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.695] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.695] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa756, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xa756, lpOverlapped=0x0) returned 1
	[0257.695] FlushFileBuffers (hFile=0x240) returned 1
	[0257.706] FlushFileBuffers (hFile=0x110) returned 1
	[0257.727] CloseHandle (hObject=0x240) returned 1
	[0257.727] CloseHandle (hObject=0x110) returned 1
	[0257.727] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\19619569[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\19619569[1].gif")) returned 1
	[0257.728] SetEvent (hEvent=0xfc) returned 1
	[0257.728] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.729] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=333) returned 1
	[0257.729] CloseHandle (hObject=0x110) returned 1
	[0257.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png")) returned 0x2020
	[0257.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png")) returned 0x2020
	[0257.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.729] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.729] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.729] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.729] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.730] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x14d, lpOverlapped=0x0) returned 1
	[0257.732] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x150, lpOverlapped=0x0) returned 1
	[0257.733] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.733] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.733] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.733] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x14d, lpOverlapped=0x0) returned 1
	[0257.734] FlushFileBuffers (hFile=0x110) returned 1
	[0257.736] FlushFileBuffers (hFile=0x240) returned 1
	[0257.737] CloseHandle (hObject=0x110) returned 1
	[0257.737] CloseHandle (hObject=0x240) returned 1
	[0257.738] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png")) returned 1
	[0257.738] SetEvent (hEvent=0xfc) returned 1
	[0257.738] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.741] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=407) returned 1
	[0257.741] CloseHandle (hObject=0x244) returned 1
	[0257.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png")) returned 0x2020
	[0257.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png")) returned 0x2020
	[0257.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.741] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.741] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.741] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.741] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.742] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x197, lpOverlapped=0x0) returned 1
	[0257.743] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1a0, lpOverlapped=0x0) returned 1
	[0257.744] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.745] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.745] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.745] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x197, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x197, lpOverlapped=0x0) returned 1
	[0257.745] FlushFileBuffers (hFile=0x244) returned 1
	[0257.748] FlushFileBuffers (hFile=0x240) returned 1
	[0257.749] CloseHandle (hObject=0x244) returned 1
	[0257.749] CloseHandle (hObject=0x240) returned 1
	[0257.749] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png")) returned 1
	[0257.750] SetEvent (hEvent=0xfc) returned 1
	[0257.750] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.751] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=706) returned 1
	[0257.751] CloseHandle (hObject=0x240) returned 1
	[0257.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png")) returned 0x2020
	[0257.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png")) returned 0x2020
	[0257.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.751] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.751] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.751] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.752] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0257.752] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2c2, lpOverlapped=0x0) returned 1
	[0257.754] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2d0, lpOverlapped=0x0) returned 1
	[0257.754] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.755] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.755] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.755] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2c2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2c2, lpOverlapped=0x0) returned 1
	[0257.755] FlushFileBuffers (hFile=0x240) returned 1
	[0257.759] FlushFileBuffers (hFile=0x244) returned 1
	[0257.761] CloseHandle (hObject=0x240) returned 1
	[0257.761] CloseHandle (hObject=0x244) returned 1
	[0257.761] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png")) returned 1
	[0257.762] SetEvent (hEvent=0xfc) returned 1
	[0257.762] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.762] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=706) returned 1
	[0257.762] CloseHandle (hObject=0x244) returned 1
	[0257.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png")) returned 0x2020
	[0257.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png")) returned 0x2020
	[0257.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.763] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0257.763] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.763] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.763] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.763] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2c2, lpOverlapped=0x0) returned 1
	[0257.766] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2d0, lpOverlapped=0x0) returned 1
	[0257.767] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.767] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.767] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.767] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2c2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2c2, lpOverlapped=0x0) returned 1
	[0257.767] FlushFileBuffers (hFile=0x244) returned 1
	[0257.770] FlushFileBuffers (hFile=0x240) returned 1
	[0257.771] CloseHandle (hObject=0x244) returned 1
	[0257.771] CloseHandle (hObject=0x240) returned 1
	[0257.772] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png")) returned 1
	[0257.772] SetEvent (hEvent=0xfc) returned 1
	[0257.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.775] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=516) returned 1
	[0257.775] CloseHandle (hObject=0x110) returned 1
	[0257.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png")) returned 0x2020
	[0257.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png")) returned 0x2020
	[0257.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.775] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.775] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.775] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.776] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.776] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x204, lpOverlapped=0x0) returned 1
	[0257.778] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x210, lpOverlapped=0x0) returned 1
	[0257.779] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.779] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.779] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.779] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x204, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x204, lpOverlapped=0x0) returned 1
	[0257.779] FlushFileBuffers (hFile=0x110) returned 1
	[0257.782] FlushFileBuffers (hFile=0x240) returned 1
	[0257.784] CloseHandle (hObject=0x110) returned 1
	[0257.784] CloseHandle (hObject=0x240) returned 1
	[0257.784] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png")) returned 1
	[0257.785] SetEvent (hEvent=0xfc) returned 1
	[0257.785] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.786] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=749) returned 1
	[0257.786] CloseHandle (hObject=0x240) returned 1
	[0257.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png")) returned 0x2020
	[0257.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png")) returned 0x2020
	[0257.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.786] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.786] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.786] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.786] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.787] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2ed, lpOverlapped=0x0) returned 1
	[0257.795] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2f0, lpOverlapped=0x0) returned 1
	[0257.796] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.796] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.796] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.796] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2ed, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2ed, lpOverlapped=0x0) returned 1
	[0257.796] FlushFileBuffers (hFile=0x240) returned 1
	[0257.799] FlushFileBuffers (hFile=0x110) returned 1
	[0257.800] CloseHandle (hObject=0x240) returned 1
	[0257.800] CloseHandle (hObject=0x110) returned 1
	[0257.800] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png")) returned 1
	[0257.801] SetEvent (hEvent=0xfc) returned 1
	[0257.801] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.804] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=764) returned 1
	[0257.804] CloseHandle (hObject=0x110) returned 1
	[0257.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png")) returned 0x2020
	[0257.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png")) returned 0x2020
	[0257.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.804] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.805] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.805] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.805] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.805] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2fc, lpOverlapped=0x0) returned 1
	[0257.807] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x300, lpOverlapped=0x0) returned 1
	[0257.808] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.808] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.808] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.808] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2fc, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2fc, lpOverlapped=0x0) returned 1
	[0257.808] FlushFileBuffers (hFile=0x110) returned 1
	[0257.811] FlushFileBuffers (hFile=0x240) returned 1
	[0257.812] CloseHandle (hObject=0x110) returned 1
	[0257.812] CloseHandle (hObject=0x240) returned 1
	[0257.812] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png")) returned 1
	[0257.813] SetEvent (hEvent=0xfc) returned 1
	[0257.813] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.814] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13323) returned 1
	[0257.814] CloseHandle (hObject=0x240) returned 1
	[0257.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg")) returned 0x2020
	[0257.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg")) returned 0x2020
	[0257.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.814] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.814] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.814] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.815] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.815] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x340b, lpOverlapped=0x0) returned 1
	[0257.817] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3410, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3410, lpOverlapped=0x0) returned 1
	[0257.818] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.819] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.819] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.819] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x340b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x340b, lpOverlapped=0x0) returned 1
	[0257.819] FlushFileBuffers (hFile=0x240) returned 1
	[0257.824] FlushFileBuffers (hFile=0x110) returned 1
	[0257.826] CloseHandle (hObject=0x240) returned 1
	[0257.826] CloseHandle (hObject=0x110) returned 1
	[0257.830] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg")) returned 1
	[0257.830] SetEvent (hEvent=0xfc) returned 1
	[0257.831] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.831] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6564) returned 1
	[0257.831] CloseHandle (hObject=0x110) returned 1
	[0257.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg")) returned 0x2020
	[0257.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg")) returned 0x2020
	[0257.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.832] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.832] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.832] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.832] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.834] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x19a4, lpOverlapped=0x0) returned 1
	[0257.835] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x19b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x19b0, lpOverlapped=0x0) returned 1
	[0257.836] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.837] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.837] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.837] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x19a4, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x19a4, lpOverlapped=0x0) returned 1
	[0257.837] FlushFileBuffers (hFile=0x110) returned 1
	[0257.841] FlushFileBuffers (hFile=0x240) returned 1
	[0257.843] CloseHandle (hObject=0x110) returned 1
	[0257.844] CloseHandle (hObject=0x240) returned 1
	[0257.844] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg")) returned 1
	[0257.845] SetEvent (hEvent=0xfc) returned 1
	[0257.845] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.846] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=860) returned 1
	[0257.846] CloseHandle (hObject=0x240) returned 1
	[0257.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png")) returned 0x2020
	[0257.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png")) returned 0x2020
	[0257.846] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.847] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.847] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.847] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.847] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.847] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x35c, lpOverlapped=0x0) returned 1
	[0257.851] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x360, lpOverlapped=0x0) returned 1
	[0257.851] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.852] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.852] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.852] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x35c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x35c, lpOverlapped=0x0) returned 1
	[0257.852] FlushFileBuffers (hFile=0x240) returned 1
	[0257.854] FlushFileBuffers (hFile=0x110) returned 1
	[0257.856] CloseHandle (hObject=0x240) returned 1
	[0257.856] CloseHandle (hObject=0x110) returned 1
	[0257.857] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png")) returned 1
	[0257.858] SetEvent (hEvent=0xfc) returned 1
	[0257.858] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.858] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10126) returned 1
	[0257.858] CloseHandle (hObject=0x110) returned 1
	[0257.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg")) returned 0x2020
	[0257.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg")) returned 0x2020
	[0257.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.859] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.859] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.859] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.859] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.860] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x278e, lpOverlapped=0x0) returned 1
	[0257.865] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2790, lpOverlapped=0x0) returned 1
	[0257.866] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.866] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.866] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.867] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x278e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x278e, lpOverlapped=0x0) returned 1
	[0257.867] FlushFileBuffers (hFile=0x110) returned 1
	[0257.869] FlushFileBuffers (hFile=0x240) returned 1
	[0257.871] CloseHandle (hObject=0x110) returned 1
	[0257.871] CloseHandle (hObject=0x240) returned 1
	[0257.871] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg")) returned 1
	[0257.872] SetEvent (hEvent=0xfc) returned 1
	[0257.872] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.873] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=410) returned 1
	[0257.873] CloseHandle (hObject=0x240) returned 1
	[0257.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png")) returned 0x2020
	[0257.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png")) returned 0x2020
	[0257.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.873] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.873] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.873] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.873] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.875] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x19a, lpOverlapped=0x0) returned 1
	[0257.877] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1a0, lpOverlapped=0x0) returned 1
	[0257.878] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.878] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.878] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.878] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x19a, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x19a, lpOverlapped=0x0) returned 1
	[0257.879] FlushFileBuffers (hFile=0x240) returned 1
	[0257.882] FlushFileBuffers (hFile=0x110) returned 1
	[0257.883] CloseHandle (hObject=0x240) returned 1
	[0257.883] CloseHandle (hObject=0x110) returned 1
	[0257.883] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png")) returned 1
	[0257.884] SetEvent (hEvent=0xfc) returned 1
	[0257.884] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.885] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=254) returned 1
	[0257.885] CloseHandle (hObject=0x110) returned 1
	[0257.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png")) returned 0x2020
	[0257.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png")) returned 0x2020
	[0257.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.886] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.886] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.886] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.886] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.886] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xfe, lpOverlapped=0x0) returned 1
	[0257.889] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x100, lpOverlapped=0x0) returned 1
	[0257.890] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.890] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.890] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.890] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xfe, lpOverlapped=0x0) returned 1
	[0257.891] FlushFileBuffers (hFile=0x110) returned 1
	[0257.893] FlushFileBuffers (hFile=0x240) returned 1
	[0257.895] CloseHandle (hObject=0x110) returned 1
	[0257.895] CloseHandle (hObject=0x240) returned 1
	[0257.895] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png")) returned 1
	[0257.896] SetEvent (hEvent=0xfc) returned 1
	[0257.896] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.896] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1616) returned 1
	[0257.897] CloseHandle (hObject=0x240) returned 1
	[0257.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm")) returned 0x2020
	[0257.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm")) returned 0x2020
	[0257.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.897] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.897] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.897] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.897] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.898] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x650, lpOverlapped=0x0) returned 1
	[0257.901] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x660, lpOverlapped=0x0) returned 1
	[0257.902] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x172, lpOverlapped=0x0) returned 1
	[0257.902] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.902] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.902] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x650, lpOverlapped=0x0) returned 1
	[0257.903] FlushFileBuffers (hFile=0x240) returned 1
	[0257.905] FlushFileBuffers (hFile=0x110) returned 1
	[0257.907] CloseHandle (hObject=0x240) returned 1
	[0257.907] CloseHandle (hObject=0x110) returned 1
	[0257.907] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm")) returned 1
	[0257.908] SetEvent (hEvent=0xfc) returned 1
	[0257.908] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfscript[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfscript[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.909] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10352) returned 1
	[0257.909] CloseHandle (hObject=0x110) returned 1
	[0257.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfscript[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfscript[1]")) returned 0x2020
	[0257.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfscript[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfscript[1]")) returned 0x2020
	[0257.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfscript[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfscript[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.909] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfscript[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfscript[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.909] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.909] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.909] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfscript[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfscript[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.910] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2870, lpOverlapped=0x0) returned 1
	[0257.914] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2880, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2880, lpOverlapped=0x0) returned 1
	[0257.915] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.915] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.915] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.915] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2870, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2870, lpOverlapped=0x0) returned 1
	[0257.915] FlushFileBuffers (hFile=0x110) returned 1
	[0257.918] FlushFileBuffers (hFile=0x240) returned 1
	[0257.919] CloseHandle (hObject=0x110) returned 1
	[0257.919] CloseHandle (hObject=0x240) returned 1
	[0257.919] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfscript[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfscript[1]")) returned 1
	[0257.920] SetEvent (hEvent=0xfc) returned 1
	[0257.920] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfserve[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfserve[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.921] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3871) returned 1
	[0257.921] CloseHandle (hObject=0x240) returned 1
	[0257.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfserve[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfserve[1]")) returned 0x2020
	[0257.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfserve[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfserve[1]")) returned 0x2020
	[0257.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfserve[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfserve[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.921] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfserve[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfserve[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0257.921] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.922] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.922] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfserve[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfserve[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0257.922] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xf1f, lpOverlapped=0x0) returned 1
	[0257.924] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf20, lpOverlapped=0x0) returned 1
	[0257.926] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.926] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.926] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.926] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf1f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xf1f, lpOverlapped=0x0) returned 1
	[0257.926] FlushFileBuffers (hFile=0x240) returned 1
	[0257.929] FlushFileBuffers (hFile=0x110) returned 1
	[0257.931] CloseHandle (hObject=0x240) returned 1
	[0257.931] CloseHandle (hObject=0x110) returned 1
	[0257.931] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\adfserve[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\adfserve[1]")) returned 1
	[0257.932] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.933] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=71733) returned 1
	[0257.933] CloseHandle (hObject=0x110) returned 1
	[0257.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js")) returned 0x2020
	[0257.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js")) returned 0x2020
	[0257.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0257.933] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0257.933] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.933] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0257.933] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0257.934] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x11835, lpOverlapped=0x0) returned 1
	[0257.938] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x11840, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x11840, lpOverlapped=0x0) returned 1
	[0257.942] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0257.942] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.942] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0257.942] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x11835, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x11835, lpOverlapped=0x0) returned 1
	[0257.942] FlushFileBuffers (hFile=0x110) returned 1
	[0258.118] FlushFileBuffers (hFile=0x240) returned 1
	[0258.135] CloseHandle (hObject=0x110) returned 1
	[0258.136] CloseHandle (hObject=0x240) returned 1
	[0258.136] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ast[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ast[2].js")) returned 1
	[0258.148] SetEvent (hEvent=0xfc) returned 1
	[0258.149] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0258.150] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=704) returned 1
	[0258.150] CloseHandle (hObject=0x240) returned 1
	[0258.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png")) returned 0x2020
	[0258.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png")) returned 0x2020
	[0258.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0258.150] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.150] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0258.151] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2c0, lpOverlapped=0x0) returned 1
	[0258.152] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2d0, lpOverlapped=0x0) returned 1
	[0258.153] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0258.153] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.153] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.153] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2c0, lpOverlapped=0x0) returned 1
	[0258.153] FlushFileBuffers (hFile=0x240) returned 1
	[0258.156] FlushFileBuffers (hFile=0x110) returned 1
	[0258.158] CloseHandle (hObject=0x240) returned 1
	[0258.158] CloseHandle (hObject=0x110) returned 1
	[0258.158] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png")) returned 1
	[0258.159] SetEvent (hEvent=0xfc) returned 1
	[0258.159] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0258.159] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=551) returned 1
	[0258.159] CloseHandle (hObject=0x110) returned 1
	[0258.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png")) returned 0x2020
	[0258.159] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png")) returned 0x2020
	[0258.160] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.160] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0258.160] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.160] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.160] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0258.160] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x227, lpOverlapped=0x0) returned 1
	[0258.163] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x230, lpOverlapped=0x0) returned 1
	[0258.164] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0258.164] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.165] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.165] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x227, lpOverlapped=0x0) returned 1
	[0258.165] FlushFileBuffers (hFile=0x110) returned 1
	[0258.167] FlushFileBuffers (hFile=0x240) returned 1
	[0258.169] CloseHandle (hObject=0x110) returned 1
	[0258.169] CloseHandle (hObject=0x240) returned 1
	[0258.169] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png")) returned 1
	[0258.170] SetEvent (hEvent=0xfc) returned 1
	[0258.170] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0258.170] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8515) returned 1
	[0258.170] CloseHandle (hObject=0x240) returned 1
	[0258.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg")) returned 0x2020
	[0258.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg")) returned 0x2020
	[0258.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.171] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0258.171] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.171] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.171] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0258.172] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2143, lpOverlapped=0x0) returned 1
	[0258.173] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2150, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2150, lpOverlapped=0x0) returned 1
	[0258.174] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0258.174] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.174] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.174] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2143, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2143, lpOverlapped=0x0) returned 1
	[0258.174] FlushFileBuffers (hFile=0x240) returned 1
	[0258.184] FlushFileBuffers (hFile=0x110) returned 1
	[0258.231] CloseHandle (hObject=0x240) returned 1
	[0258.231] CloseHandle (hObject=0x110) returned 1
	[0258.231] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg")) returned 1
	[0258.232] SetEvent (hEvent=0xfc) returned 1
	[0258.232] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0258.234] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2322) returned 1
	[0258.234] CloseHandle (hObject=0x110) returned 1
	[0258.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg")) returned 0x2020
	[0258.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg")) returned 0x2020
	[0258.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.234] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0258.234] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.234] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.234] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0258.235] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x912, lpOverlapped=0x0) returned 1
	[0258.236] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x920, lpOverlapped=0x0) returned 1
	[0258.237] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0258.238] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.238] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.238] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x912, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x912, lpOverlapped=0x0) returned 1
	[0258.238] FlushFileBuffers (hFile=0x110) returned 1
	[0258.241] FlushFileBuffers (hFile=0x240) returned 1
	[0258.242] CloseHandle (hObject=0x110) returned 1
	[0258.242] CloseHandle (hObject=0x240) returned 1
	[0258.242] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg")) returned 1
	[0258.244] SetEvent (hEvent=0xfc) returned 1
	[0258.244] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0258.245] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1768) returned 1
	[0258.245] CloseHandle (hObject=0x240) returned 1
	[0258.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg")) returned 0x2020
	[0258.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg")) returned 0x2020
	[0258.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.245] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0258.245] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.245] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.245] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0258.246] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x6e8, lpOverlapped=0x0) returned 1
	[0258.248] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x6f0, lpOverlapped=0x0) returned 1
	[0258.248] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0258.249] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.249] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.249] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6e8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x6e8, lpOverlapped=0x0) returned 1
	[0258.249] FlushFileBuffers (hFile=0x240) returned 1
	[0258.251] FlushFileBuffers (hFile=0x110) returned 1
	[0258.252] CloseHandle (hObject=0x240) returned 1
	[0258.253] CloseHandle (hObject=0x110) returned 1
	[0258.253] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg")) returned 1
	[0258.253] SetEvent (hEvent=0xfc) returned 1
	[0258.254] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0258.254] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14034) returned 1
	[0258.254] CloseHandle (hObject=0x110) returned 1
	[0258.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg")) returned 0x2020
	[0258.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg")) returned 0x2020
	[0258.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.254] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0258.255] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.255] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.255] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0258.255] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x36d2, lpOverlapped=0x0) returned 1
	[0258.257] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x36e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x36e0, lpOverlapped=0x0) returned 1
	[0258.258] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0258.258] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.258] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.258] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x36d2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x36d2, lpOverlapped=0x0) returned 1
	[0258.258] FlushFileBuffers (hFile=0x110) returned 1
	[0258.372] FlushFileBuffers (hFile=0x240) returned 1
	[0258.398] CloseHandle (hObject=0x110) returned 1
	[0258.398] CloseHandle (hObject=0x240) returned 1
	[0258.399] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg")) returned 1
	[0258.409] SetEvent (hEvent=0xfc) returned 1
	[0258.411] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0258.419] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7991) returned 1
	[0258.420] CloseHandle (hObject=0x110) returned 1
	[0258.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg")) returned 0x2020
	[0258.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg")) returned 0x2020
	[0258.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.420] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0258.420] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.420] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.421] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0258.421] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1f37, lpOverlapped=0x0) returned 1
	[0258.423] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1f40, lpOverlapped=0x0) returned 1
	[0258.423] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0258.424] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.424] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.424] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1f37, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1f37, lpOverlapped=0x0) returned 1
	[0258.424] FlushFileBuffers (hFile=0x110) returned 1
	[0258.426] FlushFileBuffers (hFile=0x240) returned 1
	[0258.428] CloseHandle (hObject=0x110) returned 1
	[0258.428] CloseHandle (hObject=0x240) returned 1
	[0258.428] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg")) returned 1
	[0258.429] SetEvent (hEvent=0xfc) returned 1
	[0258.429] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0258.430] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14090) returned 1
	[0258.430] CloseHandle (hObject=0x240) returned 1
	[0258.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg")) returned 0x2020
	[0258.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg")) returned 0x2020
	[0258.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.430] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0258.430] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.430] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.430] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0258.431] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x370a, lpOverlapped=0x0) returned 1
	[0258.433] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3710, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3710, lpOverlapped=0x0) returned 1
	[0258.434] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0258.434] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.434] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.434] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x370a, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x370a, lpOverlapped=0x0) returned 1
	[0258.434] FlushFileBuffers (hFile=0x240) returned 1
	[0258.436] FlushFileBuffers (hFile=0x110) returned 1
	[0258.438] CloseHandle (hObject=0x240) returned 1
	[0258.438] CloseHandle (hObject=0x110) returned 1
	[0258.438] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg")) returned 1
	[0258.439] SetEvent (hEvent=0xfc) returned 1
	[0258.439] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0258.439] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8864) returned 1
	[0258.439] CloseHandle (hObject=0x110) returned 1
	[0258.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg")) returned 0x2020
	[0258.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg")) returned 0x2020
	[0258.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.440] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0258.440] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.440] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.440] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0258.440] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x22a0, lpOverlapped=0x0) returned 1
	[0258.442] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x22b0, lpOverlapped=0x0) returned 1
	[0258.443] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0258.443] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.443] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.443] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x22a0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x22a0, lpOverlapped=0x0) returned 1
	[0258.443] FlushFileBuffers (hFile=0x110) returned 1
	[0258.462] FlushFileBuffers (hFile=0x240) returned 1
	[0258.463] CloseHandle (hObject=0x110) returned 1
	[0258.463] CloseHandle (hObject=0x240) returned 1
	[0258.463] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg")) returned 1
	[0258.464] SetEvent (hEvent=0xfc) returned 1
	[0258.464] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0258.465] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8246) returned 1
	[0258.465] CloseHandle (hObject=0x240) returned 1
	[0258.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg")) returned 0x2020
	[0258.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg")) returned 0x2020
	[0258.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.465] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0258.466] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.466] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.466] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0258.466] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2036, lpOverlapped=0x0) returned 1
	[0258.469] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2040, lpOverlapped=0x0) returned 1
	[0258.470] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0258.470] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.470] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.470] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2036, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2036, lpOverlapped=0x0) returned 1
	[0258.470] FlushFileBuffers (hFile=0x240) returned 1
	[0258.510] FlushFileBuffers (hFile=0x110) returned 1
	[0258.515] CloseHandle (hObject=0x240) returned 1
	[0258.522] CloseHandle (hObject=0x110) returned 1
	[0258.523] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg")) returned 1
	[0258.532] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0258.533] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12241) returned 1
	[0258.533] CloseHandle (hObject=0x110) returned 1
	[0258.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg")) returned 0x2020
	[0258.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg")) returned 0x2020
	[0258.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.533] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0258.533] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.534] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.534] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0258.534] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2fd1, lpOverlapped=0x0) returned 1
	[0258.539] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2fe0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2fe0, lpOverlapped=0x0) returned 1
	[0258.540] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0258.540] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.540] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.540] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2fd1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2fd1, lpOverlapped=0x0) returned 1
	[0258.540] FlushFileBuffers (hFile=0x110) returned 1
	[0258.615] FlushFileBuffers (hFile=0x240) returned 1
	[0258.978] CloseHandle (hObject=0x110) returned 1
	[0258.978] CloseHandle (hObject=0x240) returned 1
	[0258.978] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg")) returned 1
	[0258.979] SetEvent (hEvent=0xfc) returned 1
	[0258.980] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0258.981] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=152817) returned 1
	[0258.981] CloseHandle (hObject=0x240) returned 1
	[0258.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt")) returned 0x2020
	[0258.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt")) returned 0x2020
	[0258.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0258.981] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0258.981] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.981] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0258.982] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0258.982] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x254f1, lpOverlapped=0x0) returned 1
	[0258.986] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x25500, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x25500, lpOverlapped=0x0) returned 1
	[0258.989] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0258.989] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.989] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0258.990] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x254f1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x254f1, lpOverlapped=0x0) returned 1
	[0258.990] FlushFileBuffers (hFile=0x240) returned 1
	[0259.155] FlushFileBuffers (hFile=0x110) returned 1
	[0259.168] CloseHandle (hObject=0x240) returned 1
	[0259.168] CloseHandle (hObject=0x110) returned 1
	[0259.168] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt")) returned 1
	[0259.170] SetEvent (hEvent=0xfc) returned 1
	[0259.170] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[2].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[2].loaded_0"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.174] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=25918) returned 1
	[0259.174] CloseHandle (hObject=0x110) returned 1
	[0259.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[2].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[2].loaded_0")) returned 0x2020
	[0259.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[2].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[2].loaded_0")) returned 0x2020
	[0259.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[2].loaded_0.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[2].loaded_0.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.175] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[2].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[2].loaded_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.175] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.175] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.175] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[2].loaded_0.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[2].loaded_0.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0259.176] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x653e, lpOverlapped=0x0) returned 1
	[0259.178] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6540, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x6540, lpOverlapped=0x0) returned 1
	[0259.179] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0259.179] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.179] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.179] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x653e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x653e, lpOverlapped=0x0) returned 1
	[0259.179] FlushFileBuffers (hFile=0x110) returned 1
	[0259.200] FlushFileBuffers (hFile=0x240) returned 1
	[0259.203] CloseHandle (hObject=0x110) returned 1
	[0259.203] CloseHandle (hObject=0x240) returned 1
	[0259.203] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\cb=gapi[2].loaded_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\cb=gapi[2].loaded_0")) returned 1
	[0259.204] SetEvent (hEvent=0xfc) returned 1
	[0259.204] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.205] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1548) returned 1
	[0259.205] CloseHandle (hObject=0x240) returned 1
	[0259.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif")) returned 0x2020
	[0259.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif")) returned 0x2020
	[0259.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.206] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.206] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.206] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.206] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0259.207] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x60c, lpOverlapped=0x0) returned 1
	[0259.213] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x610, lpOverlapped=0x0) returned 1
	[0259.214] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0259.214] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.214] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.214] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x60c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x60c, lpOverlapped=0x0) returned 1
	[0259.215] FlushFileBuffers (hFile=0x240) returned 1
	[0259.220] FlushFileBuffers (hFile=0x110) returned 1
	[0259.221] CloseHandle (hObject=0x240) returned 1
	[0259.221] CloseHandle (hObject=0x110) returned 1
	[0259.222] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome_throbber_fast_16[1].gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome_throbber_fast_16[1].gif")) returned 1
	[0259.222] SetEvent (hEvent=0xfc) returned 1
	[0259.223] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.223] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1969) returned 1
	[0259.223] CloseHandle (hObject=0x110) returned 1
	[0259.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js")) returned 0x2020
	[0259.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js")) returned 0x2020
	[0259.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.224] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.224] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.224] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.224] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0259.224] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x7b1, lpOverlapped=0x0) returned 1
	[0259.226] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x7c0, lpOverlapped=0x0) returned 1
	[0259.227] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0259.227] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.227] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.227] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7b1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x7b1, lpOverlapped=0x0) returned 1
	[0259.227] FlushFileBuffers (hFile=0x110) returned 1
	[0259.230] FlushFileBuffers (hFile=0x240) returned 1
	[0259.231] CloseHandle (hObject=0x110) returned 1
	[0259.231] CloseHandle (hObject=0x240) returned 1
	[0259.231] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ContainerTag[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\containertag[1].js")) returned 1
	[0259.232] SetEvent (hEvent=0xfc) returned 1
	[0259.233] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.233] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67) returned 1
	[0259.233] CloseHandle (hObject=0x240) returned 1
	[0259.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\desktop.ini")) returned 0x2006
	[0259.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\desktop.ini")) returned 0x2006
	[0259.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.234] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.234] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.234] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.234] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2006, hTemplateFile=0x0) returned 0x110
	[0259.234] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x43, lpOverlapped=0x0) returned 1
	[0259.235] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x50, lpOverlapped=0x0) returned 1
	[0259.236] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.236] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.236] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.236] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x43, lpOverlapped=0x0) returned 1
	[0259.236] FlushFileBuffers (hFile=0x240) returned 1
	[0259.239] FlushFileBuffers (hFile=0x110) returned 1
	[0259.241] CloseHandle (hObject=0x240) returned 1
	[0259.241] CloseHandle (hObject=0x110) returned 1
	[0259.241] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\desktop.ini")) returned 1
	[0259.242] SetEvent (hEvent=0xfc) returned 1
	[0259.242] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.243] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18618) returned 1
	[0259.243] CloseHandle (hObject=0x110) returned 1
	[0259.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg")) returned 0x2020
	[0259.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg")) returned 0x2020
	[0259.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.243] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.243] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.243] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.243] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0259.244] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x48ba, lpOverlapped=0x0) returned 1
	[0259.246] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x48c0, lpOverlapped=0x0) returned 1
	[0259.247] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.247] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.247] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.247] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x48ba, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x48ba, lpOverlapped=0x0) returned 1
	[0259.247] FlushFileBuffers (hFile=0x110) returned 1
	[0259.250] FlushFileBuffers (hFile=0x240) returned 1
	[0259.253] CloseHandle (hObject=0x110) returned 1
	[0259.254] CloseHandle (hObject=0x240) returned 1
	[0259.254] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg")) returned 1
	[0259.255] SetEvent (hEvent=0xfc) returned 1
	[0259.255] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.256] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43082) returned 1
	[0259.256] CloseHandle (hObject=0x240) returned 1
	[0259.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js")) returned 0x2020
	[0259.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js")) returned 0x2020
	[0259.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.257] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.257] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.257] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.257] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0259.257] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xa84a, lpOverlapped=0x0) returned 1
	[0259.259] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa850, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xa850, lpOverlapped=0x0) returned 1
	[0259.261] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.261] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.261] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.261] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa84a, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xa84a, lpOverlapped=0x0) returned 1
	[0259.261] FlushFileBuffers (hFile=0x240) returned 1
	[0259.354] FlushFileBuffers (hFile=0x110) returned 1
	[0259.418] CloseHandle (hObject=0x240) returned 1
	[0259.419] CloseHandle (hObject=0x110) returned 1
	[0259.421] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\ga[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\ga[1].js")) returned 1
	[0259.431] SetEvent (hEvent=0xfc) returned 1
	[0259.434] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[2]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.444] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1378) returned 1
	[0259.444] CloseHandle (hObject=0x110) returned 1
	[0259.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[2]")) returned 0x2020
	[0259.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[2]")) returned 0x2020
	[0259.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[2].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[2].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.444] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[2]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.444] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.444] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.444] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[2].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[2].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0259.445] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x562, lpOverlapped=0x0) returned 1
	[0259.446] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x570, lpOverlapped=0x0) returned 1
	[0259.447] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0259.448] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.448] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.448] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x562, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x562, lpOverlapped=0x0) returned 1
	[0259.448] FlushFileBuffers (hFile=0x110) returned 1
	[0259.453] FlushFileBuffers (hFile=0x240) returned 1
	[0259.455] CloseHandle (hObject=0x110) returned 1
	[0259.455] CloseHandle (hObject=0x240) returned 1
	[0259.455] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\js[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\js[2]")) returned 1
	[0259.456] SetEvent (hEvent=0xfc) returned 1
	[0259.456] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MemMDL2.2.17[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\memmdl2.2.17[1].eot"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.457] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=106772) returned 1
	[0259.457] CloseHandle (hObject=0x240) returned 1
	[0259.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MemMDL2.2.17[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\memmdl2.2.17[1].eot")) returned 0x2020
	[0259.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MemMDL2.2.17[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\memmdl2.2.17[1].eot")) returned 0x2020
	[0259.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MemMDL2.2.17[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\memmdl2.2.17[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.457] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MemMDL2.2.17[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\memmdl2.2.17[1].eot"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.458] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.458] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.458] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MemMDL2.2.17[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\memmdl2.2.17[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0259.459] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1a114, lpOverlapped=0x0) returned 1
	[0259.462] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1a120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1a120, lpOverlapped=0x0) returned 1
	[0259.464] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0259.464] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.464] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.464] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1a114, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1a114, lpOverlapped=0x0) returned 1
	[0259.464] FlushFileBuffers (hFile=0x240) returned 1
	[0259.473] FlushFileBuffers (hFile=0x110) returned 1
	[0259.475] CloseHandle (hObject=0x240) returned 1
	[0259.476] CloseHandle (hObject=0x110) returned 1
	[0259.476] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\MemMDL2.2.17[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\memmdl2.2.17[1].eot")) returned 1
	[0259.477] SetEvent (hEvent=0xfc) returned 1
	[0259.478] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.480] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=18121) returned 1
	[0259.480] CloseHandle (hObject=0x110) returned 1
	[0259.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js")) returned 0x2020
	[0259.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js")) returned 0x2020
	[0259.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.480] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.480] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.480] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.480] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0259.481] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x46c9, lpOverlapped=0x0) returned 1
	[0259.483] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x46d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x46d0, lpOverlapped=0x0) returned 1
	[0259.484] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.485] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.485] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.485] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x46c9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x46c9, lpOverlapped=0x0) returned 1
	[0259.485] FlushFileBuffers (hFile=0x110) returned 1
	[0259.500] FlushFileBuffers (hFile=0x240) returned 1
	[0259.507] CloseHandle (hObject=0x110) returned 1
	[0259.507] CloseHandle (hObject=0x240) returned 1
	[0259.507] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\modernizr[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\modernizr[1].js")) returned 1
	[0259.508] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.509] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=24388) returned 1
	[0259.509] CloseHandle (hObject=0x240) returned 1
	[0259.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js")) returned 0x2020
	[0259.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js")) returned 0x2020
	[0259.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.509] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.509] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.509] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.510] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0259.510] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x5f44, lpOverlapped=0x0) returned 1
	[0259.517] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5f50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x5f50, lpOverlapped=0x0) returned 1
	[0259.518] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.519] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.519] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.519] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5f44, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x5f44, lpOverlapped=0x0) returned 1
	[0259.519] FlushFileBuffers (hFile=0x240) returned 1
	[0259.522] FlushFileBuffers (hFile=0x110) returned 1
	[0259.524] CloseHandle (hObject=0x240) returned 1
	[0259.524] CloseHandle (hObject=0x110) returned 1
	[0259.524] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\player[2].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\player[2].js")) returned 1
	[0259.525] SetEvent (hEvent=0xfc) returned 1
	[0259.525] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.527] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=103) returned 1
	[0259.527] CloseHandle (hObject=0x110) returned 1
	[0259.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png")) returned 0x2020
	[0259.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png")) returned 0x2020
	[0259.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.527] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.527] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0259.528] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x67, lpOverlapped=0x0) returned 1
	[0259.530] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x70, lpOverlapped=0x0) returned 1
	[0259.530] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.531] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.531] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.531] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x67, lpOverlapped=0x0) returned 1
	[0259.531] FlushFileBuffers (hFile=0x110) returned 1
	[0259.534] FlushFileBuffers (hFile=0x240) returned 1
	[0259.537] CloseHandle (hObject=0x110) returned 1
	[0259.537] CloseHandle (hObject=0x240) returned 1
	[0259.537] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png")) returned 1
	[0259.538] SetEvent (hEvent=0xfc) returned 1
	[0259.538] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.541] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=32858) returned 1
	[0259.541] CloseHandle (hObject=0x240) returned 1
	[0259.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm")) returned 0x2020
	[0259.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm")) returned 0x2020
	[0259.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.541] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.541] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.541] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.541] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0259.542] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x805a, lpOverlapped=0x0) returned 1
	[0259.546] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8060, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x8060, lpOverlapped=0x0) returned 1
	[0259.547] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.547] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.547] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.547] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x805a, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x805a, lpOverlapped=0x0) returned 1
	[0259.547] FlushFileBuffers (hFile=0x240) returned 1
	[0259.555] FlushFileBuffers (hFile=0x110) returned 1
	[0259.559] CloseHandle (hObject=0x240) returned 1
	[0259.559] CloseHandle (hObject=0x110) returned 1
	[0259.559] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm")) returned 1
	[0259.560] SetEvent (hEvent=0xfc) returned 1
	[0259.560] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.561] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=344064) returned 1
	[0259.561] CloseHandle (hObject=0x110) returned 1
	[0259.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat")) returned 0x2026
	[0259.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat")) returned 0x2026
	[0259.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.562] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.562] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.562] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.562] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x240
	[0259.562] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x54000, lpOverlapped=0x0) returned 1
	[0259.570] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x54010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x54010, lpOverlapped=0x0) returned 1
	[0259.576] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.577] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.577] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.577] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x54000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x54000, lpOverlapped=0x0) returned 1
	[0259.578] FlushFileBuffers (hFile=0x110) returned 1
	[0259.593] FlushFileBuffers (hFile=0x240) returned 1
	[0259.598] CloseHandle (hObject=0x110) returned 1
	[0259.598] CloseHandle (hObject=0x240) returned 1
	[0259.598] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat")) returned 1
	[0259.601] SetEvent (hEvent=0xfc) returned 1
	[0259.601] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.602] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=49247) returned 1
	[0259.602] CloseHandle (hObject=0x240) returned 1
	[0259.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png")) returned 0x2020
	[0259.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png")) returned 0x2020
	[0259.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.603] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.603] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.603] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.603] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0259.604] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc05f, lpOverlapped=0x0) returned 1
	[0259.611] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc060, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc060, lpOverlapped=0x0) returned 1
	[0259.612] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.613] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.613] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.613] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc05f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc05f, lpOverlapped=0x0) returned 1
	[0259.613] FlushFileBuffers (hFile=0x240) returned 1
	[0259.632] FlushFileBuffers (hFile=0x110) returned 1
	[0259.639] CloseHandle (hObject=0x240) returned 1
	[0259.639] CloseHandle (hObject=0x110) returned 1
	[0259.639] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png")) returned 1
	[0259.641] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.642] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=749) returned 1
	[0259.642] CloseHandle (hObject=0x110) returned 1
	[0259.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png")) returned 0x2020
	[0259.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png")) returned 0x2020
	[0259.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.642] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.642] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.642] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.642] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0259.643] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2ed, lpOverlapped=0x0) returned 1
	[0259.651] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2f0, lpOverlapped=0x0) returned 1
	[0259.653] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.653] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.653] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.653] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2ed, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2ed, lpOverlapped=0x0) returned 1
	[0259.653] FlushFileBuffers (hFile=0x110) returned 1
	[0259.656] FlushFileBuffers (hFile=0x240) returned 1
	[0259.658] CloseHandle (hObject=0x110) returned 1
	[0259.658] CloseHandle (hObject=0x240) returned 1
	[0259.658] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png")) returned 1
	[0259.659] SetEvent (hEvent=0xfc) returned 1
	[0259.659] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.660] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=414) returned 1
	[0259.660] CloseHandle (hObject=0x240) returned 1
	[0259.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png")) returned 0x2020
	[0259.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png")) returned 0x2020
	[0259.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.661] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.661] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.661] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.661] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0259.662] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x19e, lpOverlapped=0x0) returned 1
	[0259.663] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1a0, lpOverlapped=0x0) returned 1
	[0259.664] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.664] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.664] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.665] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x19e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x19e, lpOverlapped=0x0) returned 1
	[0259.665] FlushFileBuffers (hFile=0x240) returned 1
	[0259.667] FlushFileBuffers (hFile=0x110) returned 1
	[0259.669] CloseHandle (hObject=0x240) returned 1
	[0259.669] CloseHandle (hObject=0x110) returned 1
	[0259.669] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png")) returned 1
	[0259.670] SetEvent (hEvent=0xfc) returned 1
	[0259.670] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.671] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=705) returned 1
	[0259.671] CloseHandle (hObject=0x110) returned 1
	[0259.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png")) returned 0x2020
	[0259.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png")) returned 0x2020
	[0259.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.672] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0259.672] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.672] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.672] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0259.673] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2c1, lpOverlapped=0x0) returned 1
	[0259.674] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2d0, lpOverlapped=0x0) returned 1
	[0259.675] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.675] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.675] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.675] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2c1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2c1, lpOverlapped=0x0) returned 1
	[0259.675] FlushFileBuffers (hFile=0x110) returned 1
	[0259.678] FlushFileBuffers (hFile=0x240) returned 1
	[0259.679] CloseHandle (hObject=0x110) returned 1
	[0259.679] CloseHandle (hObject=0x240) returned 1
	[0259.679] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png")) returned 1
	[0259.680] SetEvent (hEvent=0xfc) returned 1
	[0259.680] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.681] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1976) returned 1
	[0259.681] CloseHandle (hObject=0x240) returned 1
	[0259.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg")) returned 0x2020
	[0259.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg")) returned 0x2020
	[0259.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.681] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.682] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.682] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.682] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0259.682] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x7b8, lpOverlapped=0x0) returned 1
	[0259.684] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x7c0, lpOverlapped=0x0) returned 1
	[0259.685] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.685] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.685] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.685] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7b8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x7b8, lpOverlapped=0x0) returned 1
	[0259.685] FlushFileBuffers (hFile=0x240) returned 1
	[0259.917] FlushFileBuffers (hFile=0x110) returned 1
	[0259.926] CloseHandle (hObject=0x240) returned 1
	[0259.927] CloseHandle (hObject=0x110) returned 1
	[0259.933] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg")) returned 1
	[0259.938] SetEvent (hEvent=0xfc) returned 1
	[0259.948] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.950] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=14001) returned 1
	[0259.950] CloseHandle (hObject=0x240) returned 1
	[0259.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg")) returned 0x2020
	[0259.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg")) returned 0x2020
	[0259.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0259.951] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0259.951] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.951] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0259.951] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0259.952] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x36b1, lpOverlapped=0x0) returned 1
	[0259.953] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x36c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x36c0, lpOverlapped=0x0) returned 1
	[0259.954] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0259.955] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.955] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0259.955] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x36b1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x36b1, lpOverlapped=0x0) returned 1
	[0259.955] FlushFileBuffers (hFile=0x240) returned 1
	[0260.188] FlushFileBuffers (hFile=0x244) returned 1
	[0260.189] CloseHandle (hObject=0x240) returned 1
	[0260.207] CloseHandle (hObject=0x244) returned 1
	[0260.208] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg")) returned 1
	[0260.209] SetEvent (hEvent=0xfc) returned 1
	[0260.209] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.211] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5033) returned 1
	[0260.211] CloseHandle (hObject=0x244) returned 1
	[0260.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js")) returned 0x2020
	[0260.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js")) returned 0x2020
	[0260.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.211] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.211] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.211] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.211] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.213] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x13a9, lpOverlapped=0x0) returned 1
	[0260.214] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x13b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x13b0, lpOverlapped=0x0) returned 1
	[0260.215] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.215] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.215] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.215] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x13a9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x13a9, lpOverlapped=0x0) returned 1
	[0260.215] FlushFileBuffers (hFile=0x244) returned 1
	[0260.373] FlushFileBuffers (hFile=0x240) returned 1
	[0260.429] CloseHandle (hObject=0x244) returned 1
	[0260.429] CloseHandle (hObject=0x240) returned 1
	[0260.436] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\autotrack[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\autotrack[1].js")) returned 1
	[0260.438] SetEvent (hEvent=0xfc) returned 1
	[0260.439] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.446] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=342) returned 1
	[0260.446] CloseHandle (hObject=0x240) returned 1
	[0260.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png")) returned 0x2020
	[0260.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png")) returned 0x2020
	[0260.448] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.449] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.449] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.450] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.450] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.457] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x156, lpOverlapped=0x0) returned 1
	[0260.459] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x160, lpOverlapped=0x0) returned 1
	[0260.460] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.460] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.460] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.460] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x156, lpOverlapped=0x0) returned 1
	[0260.460] FlushFileBuffers (hFile=0x240) returned 1
	[0260.464] FlushFileBuffers (hFile=0x244) returned 1
	[0260.465] CloseHandle (hObject=0x240) returned 1
	[0260.466] CloseHandle (hObject=0x244) returned 1
	[0260.466] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png")) returned 1
	[0260.466] SetEvent (hEvent=0xfc) returned 1
	[0260.467] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.467] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10698) returned 1
	[0260.467] CloseHandle (hObject=0x244) returned 1
	[0260.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg")) returned 0x2020
	[0260.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg")) returned 0x2020
	[0260.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.467] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.468] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.468] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.468] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.468] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x29ca, lpOverlapped=0x0) returned 1
	[0260.470] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x29d0, lpOverlapped=0x0) returned 1
	[0260.471] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.471] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.471] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.471] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x29ca, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x29ca, lpOverlapped=0x0) returned 1
	[0260.471] FlushFileBuffers (hFile=0x244) returned 1
	[0260.476] FlushFileBuffers (hFile=0x240) returned 1
	[0260.482] CloseHandle (hObject=0x244) returned 1
	[0260.483] CloseHandle (hObject=0x240) returned 1
	[0260.483] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg")) returned 1
	[0260.484] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.484] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5166) returned 1
	[0260.484] CloseHandle (hObject=0x240) returned 1
	[0260.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg")) returned 0x2020
	[0260.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg")) returned 0x2020
	[0260.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.485] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.485] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.485] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.485] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.485] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x142e, lpOverlapped=0x0) returned 1
	[0260.489] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1430, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1430, lpOverlapped=0x0) returned 1
	[0260.491] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.491] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.491] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.491] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x142e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x142e, lpOverlapped=0x0) returned 1
	[0260.491] FlushFileBuffers (hFile=0x240) returned 1
	[0260.496] FlushFileBuffers (hFile=0x244) returned 1
	[0260.501] CloseHandle (hObject=0x240) returned 1
	[0260.501] CloseHandle (hObject=0x244) returned 1
	[0260.501] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg")) returned 1
	[0260.502] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.503] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2066) returned 1
	[0260.503] CloseHandle (hObject=0x244) returned 1
	[0260.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg")) returned 0x2020
	[0260.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg")) returned 0x2020
	[0260.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.503] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.503] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.503] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.504] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.504] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x812, lpOverlapped=0x0) returned 1
	[0260.508] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x820, lpOverlapped=0x0) returned 1
	[0260.510] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.510] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.510] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.510] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x812, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x812, lpOverlapped=0x0) returned 1
	[0260.510] FlushFileBuffers (hFile=0x244) returned 1
	[0260.513] FlushFileBuffers (hFile=0x240) returned 1
	[0260.514] CloseHandle (hObject=0x244) returned 1
	[0260.514] CloseHandle (hObject=0x240) returned 1
	[0260.514] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg")) returned 1
	[0260.515] SetEvent (hEvent=0xfc) returned 1
	[0260.515] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.516] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2850) returned 1
	[0260.516] CloseHandle (hObject=0x240) returned 1
	[0260.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg")) returned 0x2020
	[0260.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg")) returned 0x2020
	[0260.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.516] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.516] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.516] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.516] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.517] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb22, lpOverlapped=0x0) returned 1
	[0260.518] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb30, lpOverlapped=0x0) returned 1
	[0260.519] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.519] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.520] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.520] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb22, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb22, lpOverlapped=0x0) returned 1
	[0260.520] FlushFileBuffers (hFile=0x240) returned 1
	[0260.591] FlushFileBuffers (hFile=0x244) returned 1
	[0260.608] CloseHandle (hObject=0x240) returned 1
	[0260.608] CloseHandle (hObject=0x244) returned 1
	[0260.608] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg")) returned 1
	[0260.609] SetEvent (hEvent=0xfc) returned 1
	[0260.609] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.610] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9803) returned 1
	[0260.610] CloseHandle (hObject=0x244) returned 1
	[0260.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg")) returned 0x2020
	[0260.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg")) returned 0x2020
	[0260.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.610] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.610] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.611] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.611] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.611] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x264b, lpOverlapped=0x0) returned 1
	[0260.612] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2650, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2650, lpOverlapped=0x0) returned 1
	[0260.613] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.614] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.614] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.614] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x264b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x264b, lpOverlapped=0x0) returned 1
	[0260.614] FlushFileBuffers (hFile=0x244) returned 1
	[0260.619] FlushFileBuffers (hFile=0x240) returned 1
	[0260.629] CloseHandle (hObject=0x244) returned 1
	[0260.630] CloseHandle (hObject=0x240) returned 1
	[0260.630] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg")) returned 1
	[0260.631] SetEvent (hEvent=0xfc) returned 1
	[0260.631] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.632] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2591) returned 1
	[0260.632] CloseHandle (hObject=0x240) returned 1
	[0260.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg")) returned 0x2020
	[0260.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg")) returned 0x2020
	[0260.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.632] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.632] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.632] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.632] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.633] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xa1f, lpOverlapped=0x0) returned 1
	[0260.635] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa20, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xa20, lpOverlapped=0x0) returned 1
	[0260.635] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.636] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.636] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.636] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa1f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xa1f, lpOverlapped=0x0) returned 1
	[0260.636] FlushFileBuffers (hFile=0x240) returned 1
	[0260.639] FlushFileBuffers (hFile=0x244) returned 1
	[0260.642] CloseHandle (hObject=0x240) returned 1
	[0260.642] CloseHandle (hObject=0x244) returned 1
	[0260.642] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg")) returned 1
	[0260.643] SetEvent (hEvent=0xfc) returned 1
	[0260.643] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.643] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2093) returned 1
	[0260.644] CloseHandle (hObject=0x244) returned 1
	[0260.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg")) returned 0x2020
	[0260.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg")) returned 0x2020
	[0260.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.644] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.644] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.644] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.644] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.653] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x82d, lpOverlapped=0x0) returned 1
	[0260.655] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x830, lpOverlapped=0x0) returned 1
	[0260.656] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.656] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.656] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.656] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x82d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x82d, lpOverlapped=0x0) returned 1
	[0260.657] FlushFileBuffers (hFile=0x244) returned 1
	[0260.666] FlushFileBuffers (hFile=0x240) returned 1
	[0260.668] CloseHandle (hObject=0x244) returned 1
	[0260.668] CloseHandle (hObject=0x240) returned 1
	[0260.669] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg")) returned 1
	[0260.669] SetEvent (hEvent=0xfc) returned 1
	[0260.670] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.670] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=3104) returned 1
	[0260.670] CloseHandle (hObject=0x240) returned 1
	[0260.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg")) returned 0x2020
	[0260.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg")) returned 0x2020
	[0260.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.671] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.671] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.671] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.671] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.672] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xc20, lpOverlapped=0x0) returned 1
	[0260.674] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xc30, lpOverlapped=0x0) returned 1
	[0260.674] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.675] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.675] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.675] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xc20, lpOverlapped=0x0) returned 1
	[0260.675] FlushFileBuffers (hFile=0x240) returned 1
	[0260.684] FlushFileBuffers (hFile=0x244) returned 1
	[0260.689] CloseHandle (hObject=0x240) returned 1
	[0260.689] CloseHandle (hObject=0x244) returned 1
	[0260.689] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg")) returned 1
	[0260.690] SetEvent (hEvent=0xfc) returned 1
	[0260.690] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.693] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2158) returned 1
	[0260.693] CloseHandle (hObject=0x244) returned 1
	[0260.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg")) returned 0x2020
	[0260.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg")) returned 0x2020
	[0260.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.693] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.693] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.693] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.693] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.694] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x86e, lpOverlapped=0x0) returned 1
	[0260.699] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x870, lpOverlapped=0x0) returned 1
	[0260.700] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.700] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.700] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.700] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x86e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x86e, lpOverlapped=0x0) returned 1
	[0260.700] FlushFileBuffers (hFile=0x244) returned 1
	[0260.706] FlushFileBuffers (hFile=0x240) returned 1
	[0260.715] CloseHandle (hObject=0x244) returned 1
	[0260.722] CloseHandle (hObject=0x240) returned 1
	[0260.722] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg")) returned 1
	[0260.723] SetEvent (hEvent=0xfc) returned 1
	[0260.723] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.724] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2475) returned 1
	[0260.724] CloseHandle (hObject=0x240) returned 1
	[0260.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg")) returned 0x2020
	[0260.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg")) returned 0x2020
	[0260.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.724] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.724] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.725] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.725] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.725] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x9ab, lpOverlapped=0x0) returned 1
	[0260.728] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x9b0, lpOverlapped=0x0) returned 1
	[0260.729] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.729] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.729] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.729] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x9ab, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x9ab, lpOverlapped=0x0) returned 1
	[0260.730] FlushFileBuffers (hFile=0x240) returned 1
	[0260.732] FlushFileBuffers (hFile=0x244) returned 1
	[0260.738] CloseHandle (hObject=0x240) returned 1
	[0260.739] CloseHandle (hObject=0x244) returned 1
	[0260.739] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg")) returned 1
	[0260.740] SetEvent (hEvent=0xfc) returned 1
	[0260.740] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.744] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2095) returned 1
	[0260.744] CloseHandle (hObject=0x244) returned 1
	[0260.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg")) returned 0x2020
	[0260.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg")) returned 0x2020
	[0260.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.745] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.745] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.745] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.745] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.746] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x82f, lpOverlapped=0x0) returned 1
	[0260.748] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x830, lpOverlapped=0x0) returned 1
	[0260.749] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.749] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.749] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.749] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x82f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x82f, lpOverlapped=0x0) returned 1
	[0260.749] FlushFileBuffers (hFile=0x244) returned 1
	[0260.754] FlushFileBuffers (hFile=0x240) returned 1
	[0260.763] CloseHandle (hObject=0x244) returned 1
	[0260.763] CloseHandle (hObject=0x240) returned 1
	[0260.763] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg")) returned 1
	[0260.764] SetEvent (hEvent=0xfc) returned 1
	[0260.764] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.765] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8131) returned 1
	[0260.765] CloseHandle (hObject=0x240) returned 1
	[0260.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg")) returned 0x2020
	[0260.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg")) returned 0x2020
	[0260.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.765] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.765] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.765] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.765] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.766] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1fc3, lpOverlapped=0x0) returned 1
	[0260.769] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1fd0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1fd0, lpOverlapped=0x0) returned 1
	[0260.770] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.770] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.770] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.770] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1fc3, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1fc3, lpOverlapped=0x0) returned 1
	[0260.770] FlushFileBuffers (hFile=0x240) returned 1
	[0260.773] FlushFileBuffers (hFile=0x244) returned 1
	[0260.782] CloseHandle (hObject=0x240) returned 1
	[0260.782] CloseHandle (hObject=0x244) returned 1
	[0260.782] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg")) returned 1
	[0260.783] SetEvent (hEvent=0xfc) returned 1
	[0260.783] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.784] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2501) returned 1
	[0260.784] CloseHandle (hObject=0x244) returned 1
	[0260.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg")) returned 0x2020
	[0260.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg")) returned 0x2020
	[0260.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.784] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.785] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.785] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.785] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.785] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x9c5, lpOverlapped=0x0) returned 1
	[0260.788] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x9d0, lpOverlapped=0x0) returned 1
	[0260.789] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.789] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.789] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.789] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x9c5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x9c5, lpOverlapped=0x0) returned 1
	[0260.790] FlushFileBuffers (hFile=0x244) returned 1
	[0260.797] FlushFileBuffers (hFile=0x240) returned 1
	[0260.804] CloseHandle (hObject=0x244) returned 1
	[0260.804] CloseHandle (hObject=0x240) returned 1
	[0260.805] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg")) returned 1
	[0260.805] SetEvent (hEvent=0xfc) returned 1
	[0260.806] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.806] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10871) returned 1
	[0260.806] CloseHandle (hObject=0x240) returned 1
	[0260.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg")) returned 0x2020
	[0260.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg")) returned 0x2020
	[0260.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.807] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.807] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.807] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.807] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.808] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2a77, lpOverlapped=0x0) returned 1
	[0260.810] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a80, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2a80, lpOverlapped=0x0) returned 1
	[0260.811] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.811] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.811] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.811] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2a77, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2a77, lpOverlapped=0x0) returned 1
	[0260.811] FlushFileBuffers (hFile=0x240) returned 1
	[0260.819] FlushFileBuffers (hFile=0x244) returned 1
	[0260.823] CloseHandle (hObject=0x240) returned 1
	[0260.824] CloseHandle (hObject=0x244) returned 1
	[0260.824] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg")) returned 1
	[0260.825] SetEvent (hEvent=0xfc) returned 1
	[0260.825] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.826] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2135) returned 1
	[0260.826] CloseHandle (hObject=0x244) returned 1
	[0260.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg")) returned 0x2020
	[0260.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg")) returned 0x2020
	[0260.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.826] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.826] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.826] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.826] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.827] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x857, lpOverlapped=0x0) returned 1
	[0260.829] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x860, lpOverlapped=0x0) returned 1
	[0260.830] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.830] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.830] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.830] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x857, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x857, lpOverlapped=0x0) returned 1
	[0260.830] FlushFileBuffers (hFile=0x244) returned 1
	[0260.833] FlushFileBuffers (hFile=0x240) returned 1
	[0260.835] CloseHandle (hObject=0x244) returned 1
	[0260.835] CloseHandle (hObject=0x240) returned 1
	[0260.835] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg")) returned 1
	[0260.836] SetEvent (hEvent=0xfc) returned 1
	[0260.836] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.837] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2009) returned 1
	[0260.837] CloseHandle (hObject=0x240) returned 1
	[0260.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg")) returned 0x2020
	[0260.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg")) returned 0x2020
	[0260.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.837] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.837] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.837] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.838] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.838] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x7d9, lpOverlapped=0x0) returned 1
	[0260.840] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x7e0, lpOverlapped=0x0) returned 1
	[0260.841] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.841] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.841] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.841] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7d9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x7d9, lpOverlapped=0x0) returned 1
	[0260.841] FlushFileBuffers (hFile=0x240) returned 1
	[0260.844] FlushFileBuffers (hFile=0x244) returned 1
	[0260.846] CloseHandle (hObject=0x240) returned 1
	[0260.847] CloseHandle (hObject=0x244) returned 1
	[0260.847] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg")) returned 1
	[0260.848] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.849] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=61184) returned 1
	[0260.849] CloseHandle (hObject=0x244) returned 1
	[0260.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png")) returned 0x2020
	[0260.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png")) returned 0x2020
	[0260.849] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.849] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.849] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.849] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.849] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.850] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xef00, lpOverlapped=0x0) returned 1
	[0260.853] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xef10, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xef10, lpOverlapped=0x0) returned 1
	[0260.854] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.855] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.855] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.855] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xef00, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xef00, lpOverlapped=0x0) returned 1
	[0260.855] FlushFileBuffers (hFile=0x244) returned 1
	[0260.890] FlushFileBuffers (hFile=0x240) returned 1
	[0260.891] CloseHandle (hObject=0x244) returned 1
	[0260.891] CloseHandle (hObject=0x240) returned 1
	[0260.891] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png")) returned 1
	[0260.893] SetEvent (hEvent=0xfc) returned 1
	[0260.893] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.894] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2519) returned 1
	[0260.894] CloseHandle (hObject=0x240) returned 1
	[0260.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg")) returned 0x2020
	[0260.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg")) returned 0x2020
	[0260.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.894] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.894] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.894] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.894] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.895] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x9d7, lpOverlapped=0x0) returned 1
	[0260.897] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x9e0, lpOverlapped=0x0) returned 1
	[0260.897] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.898] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.898] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.898] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x9d7, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x9d7, lpOverlapped=0x0) returned 1
	[0260.898] FlushFileBuffers (hFile=0x240) returned 1
	[0260.901] FlushFileBuffers (hFile=0x244) returned 1
	[0260.903] CloseHandle (hObject=0x240) returned 1
	[0260.903] CloseHandle (hObject=0x244) returned 1
	[0260.903] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg")) returned 1
	[0260.904] SetEvent (hEvent=0xfc) returned 1
	[0260.904] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.904] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11570) returned 1
	[0260.905] CloseHandle (hObject=0x244) returned 1
	[0260.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg")) returned 0x2020
	[0260.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg")) returned 0x2020
	[0260.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.905] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.905] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.905] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.905] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.906] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2d32, lpOverlapped=0x0) returned 1
	[0260.907] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2d40, lpOverlapped=0x0) returned 1
	[0260.908] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.908] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.908] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.908] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2d32, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2d32, lpOverlapped=0x0) returned 1
	[0260.909] FlushFileBuffers (hFile=0x244) returned 1
	[0260.911] FlushFileBuffers (hFile=0x240) returned 1
	[0260.912] CloseHandle (hObject=0x244) returned 1
	[0260.912] CloseHandle (hObject=0x240) returned 1
	[0260.913] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg")) returned 1
	[0260.913] SetEvent (hEvent=0xfc) returned 1
	[0260.914] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.914] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2141) returned 1
	[0260.914] CloseHandle (hObject=0x240) returned 1
	[0260.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg")) returned 0x2020
	[0260.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg")) returned 0x2020
	[0260.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.915] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.915] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.915] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.915] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.915] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x85d, lpOverlapped=0x0) returned 1
	[0260.917] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x860, lpOverlapped=0x0) returned 1
	[0260.918] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.918] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.918] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.918] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x85d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x85d, lpOverlapped=0x0) returned 1
	[0260.918] FlushFileBuffers (hFile=0x240) returned 1
	[0260.921] FlushFileBuffers (hFile=0x244) returned 1
	[0260.923] CloseHandle (hObject=0x240) returned 1
	[0260.923] CloseHandle (hObject=0x244) returned 1
	[0260.923] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg")) returned 1
	[0260.924] SetEvent (hEvent=0xfc) returned 1
	[0260.924] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.925] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6524) returned 1
	[0260.925] CloseHandle (hObject=0x244) returned 1
	[0260.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg")) returned 0x2020
	[0260.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg")) returned 0x2020
	[0260.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.925] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.925] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.925] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.926] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.926] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x197c, lpOverlapped=0x0) returned 1
	[0260.928] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1980, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1980, lpOverlapped=0x0) returned 1
	[0260.929] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.929] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.929] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.929] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x197c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x197c, lpOverlapped=0x0) returned 1
	[0260.929] FlushFileBuffers (hFile=0x244) returned 1
	[0260.933] FlushFileBuffers (hFile=0x240) returned 1
	[0260.934] CloseHandle (hObject=0x244) returned 1
	[0260.934] CloseHandle (hObject=0x240) returned 1
	[0260.934] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg")) returned 1
	[0260.935] SetEvent (hEvent=0xfc) returned 1
	[0260.935] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.936] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2942) returned 1
	[0260.936] CloseHandle (hObject=0x240) returned 1
	[0260.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg")) returned 0x2020
	[0260.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg")) returned 0x2020
	[0260.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.936] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.937] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.937] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.937] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.937] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb7e, lpOverlapped=0x0) returned 1
	[0260.939] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb80, lpOverlapped=0x0) returned 1
	[0260.940] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.940] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.940] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.940] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb7e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb7e, lpOverlapped=0x0) returned 1
	[0260.940] FlushFileBuffers (hFile=0x240) returned 1
	[0260.942] FlushFileBuffers (hFile=0x244) returned 1
	[0260.944] CloseHandle (hObject=0x240) returned 1
	[0260.944] CloseHandle (hObject=0x244) returned 1
	[0260.945] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg")) returned 1
	[0260.945] SetEvent (hEvent=0xfc) returned 1
	[0260.946] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.946] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6932) returned 1
	[0260.946] CloseHandle (hObject=0x244) returned 1
	[0260.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg")) returned 0x2020
	[0260.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg")) returned 0x2020
	[0260.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.947] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.947] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.947] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.947] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.947] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1b14, lpOverlapped=0x0) returned 1
	[0260.949] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1b20, lpOverlapped=0x0) returned 1
	[0260.950] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.950] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.950] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.950] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1b14, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1b14, lpOverlapped=0x0) returned 1
	[0260.951] FlushFileBuffers (hFile=0x244) returned 1
	[0260.954] FlushFileBuffers (hFile=0x240) returned 1
	[0260.955] CloseHandle (hObject=0x244) returned 1
	[0260.955] CloseHandle (hObject=0x240) returned 1
	[0260.955] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg")) returned 1
	[0260.956] SetEvent (hEvent=0xfc) returned 1
	[0260.956] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.957] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10616) returned 1
	[0260.957] CloseHandle (hObject=0x240) returned 1
	[0260.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg")) returned 0x2020
	[0260.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg")) returned 0x2020
	[0260.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.957] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.957] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.957] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.957] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.958] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2978, lpOverlapped=0x0) returned 1
	[0260.960] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2980, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2980, lpOverlapped=0x0) returned 1
	[0260.964] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.964] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.964] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.964] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2978, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2978, lpOverlapped=0x0) returned 1
	[0260.964] FlushFileBuffers (hFile=0x240) returned 1
	[0260.967] FlushFileBuffers (hFile=0x244) returned 1
	[0260.968] CloseHandle (hObject=0x240) returned 1
	[0260.968] CloseHandle (hObject=0x244) returned 1
	[0260.968] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg")) returned 1
	[0260.969] SetEvent (hEvent=0xfc) returned 1
	[0260.969] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.970] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=11116) returned 1
	[0260.970] CloseHandle (hObject=0x244) returned 1
	[0260.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg")) returned 0x2020
	[0260.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg")) returned 0x2020
	[0260.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.970] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.970] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.970] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.970] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.971] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2b6c, lpOverlapped=0x0) returned 1
	[0260.973] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b70, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2b70, lpOverlapped=0x0) returned 1
	[0260.974] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.974] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.974] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.974] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2b6c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2b6c, lpOverlapped=0x0) returned 1
	[0260.974] FlushFileBuffers (hFile=0x244) returned 1
	[0260.976] FlushFileBuffers (hFile=0x240) returned 1
	[0260.978] CloseHandle (hObject=0x244) returned 1
	[0260.978] CloseHandle (hObject=0x240) returned 1
	[0260.978] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg")) returned 1
	[0260.979] SetEvent (hEvent=0xfc) returned 1
	[0260.979] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.980] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9846) returned 1
	[0260.980] CloseHandle (hObject=0x240) returned 1
	[0260.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg")) returned 0x2020
	[0260.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg")) returned 0x2020
	[0260.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.980] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0260.980] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.980] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.980] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0260.982] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2676, lpOverlapped=0x0) returned 1
	[0260.983] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2680, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2680, lpOverlapped=0x0) returned 1
	[0260.984] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.984] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.984] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.984] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2676, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2676, lpOverlapped=0x0) returned 1
	[0260.985] FlushFileBuffers (hFile=0x240) returned 1
	[0260.988] FlushFileBuffers (hFile=0x244) returned 1
	[0260.990] CloseHandle (hObject=0x240) returned 1
	[0260.990] CloseHandle (hObject=0x244) returned 1
	[0260.990] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg")) returned 1
	[0260.991] SetEvent (hEvent=0xfc) returned 1
	[0260.991] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.992] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2881) returned 1
	[0260.992] CloseHandle (hObject=0x244) returned 1
	[0260.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg")) returned 0x2020
	[0260.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg")) returned 0x2020
	[0260.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0260.992] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0260.992] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.992] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0260.993] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0260.993] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xb41, lpOverlapped=0x0) returned 1
	[0260.995] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xb50, lpOverlapped=0x0) returned 1
	[0260.996] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0260.996] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.996] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0260.996] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xb41, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xb41, lpOverlapped=0x0) returned 1
	[0260.996] FlushFileBuffers (hFile=0x244) returned 1
	[0260.999] FlushFileBuffers (hFile=0x240) returned 1
	[0261.000] CloseHandle (hObject=0x244) returned 1
	[0261.000] CloseHandle (hObject=0x240) returned 1
	[0261.000] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg")) returned 1
	[0261.001] SetEvent (hEvent=0xfc) returned 1
	[0261.001] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.002] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=9718) returned 1
	[0261.002] CloseHandle (hObject=0x240) returned 1
	[0261.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg")) returned 0x2020
	[0261.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg")) returned 0x2020
	[0261.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.002] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.002] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.003] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.003] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0261.003] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x25f6, lpOverlapped=0x0) returned 1
	[0261.005] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2600, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2600, lpOverlapped=0x0) returned 1
	[0261.006] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0261.006] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.006] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.006] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x25f6, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x25f6, lpOverlapped=0x0) returned 1
	[0261.006] FlushFileBuffers (hFile=0x240) returned 1
	[0261.009] FlushFileBuffers (hFile=0x244) returned 1
	[0261.089] CloseHandle (hObject=0x240) returned 1
	[0261.089] CloseHandle (hObject=0x244) returned 1
	[0261.092] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg")) returned 1
	[0261.100] SetEvent (hEvent=0xfc) returned 1
	[0261.100] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.101] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2073) returned 1
	[0261.101] CloseHandle (hObject=0x244) returned 1
	[0261.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg")) returned 0x2020
	[0261.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg")) returned 0x2020
	[0261.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.102] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.102] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.102] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.102] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0261.103] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x819, lpOverlapped=0x0) returned 1
	[0261.104] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x820, lpOverlapped=0x0) returned 1
	[0261.105] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0261.106] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.106] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.106] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x819, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x819, lpOverlapped=0x0) returned 1
	[0261.106] FlushFileBuffers (hFile=0x244) returned 1
	[0261.108] FlushFileBuffers (hFile=0x240) returned 1
	[0261.110] CloseHandle (hObject=0x244) returned 1
	[0261.110] CloseHandle (hObject=0x240) returned 1
	[0261.110] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg")) returned 1
	[0261.111] SetEvent (hEvent=0xfc) returned 1
	[0261.111] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.112] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2326) returned 1
	[0261.112] CloseHandle (hObject=0x240) returned 1
	[0261.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg")) returned 0x2020
	[0261.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg")) returned 0x2020
	[0261.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.112] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.112] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.112] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.112] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0261.113] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x916, lpOverlapped=0x0) returned 1
	[0261.114] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x920, lpOverlapped=0x0) returned 1
	[0261.115] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0261.115] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.115] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.115] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x916, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x916, lpOverlapped=0x0) returned 1
	[0261.115] FlushFileBuffers (hFile=0x240) returned 1
	[0261.118] FlushFileBuffers (hFile=0x244) returned 1
	[0261.120] CloseHandle (hObject=0x240) returned 1
	[0261.120] CloseHandle (hObject=0x244) returned 1
	[0261.120] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg")) returned 1
	[0261.121] SetEvent (hEvent=0xfc) returned 1
	[0261.121] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.122] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2328) returned 1
	[0261.122] CloseHandle (hObject=0x244) returned 1
	[0261.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg")) returned 0x2020
	[0261.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg")) returned 0x2020
	[0261.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.122] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.122] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.122] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.122] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0261.123] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x918, lpOverlapped=0x0) returned 1
	[0261.124] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x920, lpOverlapped=0x0) returned 1
	[0261.125] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0261.125] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.126] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.126] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x918, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x918, lpOverlapped=0x0) returned 1
	[0261.126] FlushFileBuffers (hFile=0x244) returned 1
	[0261.202] FlushFileBuffers (hFile=0x240) returned 1
	[0261.203] CloseHandle (hObject=0x244) returned 1
	[0261.203] CloseHandle (hObject=0x240) returned 1
	[0261.204] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg")) returned 1
	[0261.206] SetEvent (hEvent=0xfc) returned 1
	[0261.206] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.208] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=930) returned 1
	[0261.208] CloseHandle (hObject=0x240) returned 1
	[0261.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png")) returned 0x2020
	[0261.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png")) returned 0x2020
	[0261.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.208] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.208] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.208] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.208] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0261.209] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3a2, lpOverlapped=0x0) returned 1
	[0261.211] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3b0, lpOverlapped=0x0) returned 1
	[0261.211] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0261.212] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.212] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.212] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3a2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3a2, lpOverlapped=0x0) returned 1
	[0261.212] FlushFileBuffers (hFile=0x240) returned 1
	[0261.215] FlushFileBuffers (hFile=0x244) returned 1
	[0261.216] CloseHandle (hObject=0x240) returned 1
	[0261.216] CloseHandle (hObject=0x244) returned 1
	[0261.216] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png")) returned 1
	[0261.217] SetEvent (hEvent=0xfc) returned 1
	[0261.217] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.218] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=588) returned 1
	[0261.218] CloseHandle (hObject=0x244) returned 1
	[0261.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png")) returned 0x2020
	[0261.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png")) returned 0x2020
	[0261.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.218] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.219] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.219] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.219] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0261.219] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x24c, lpOverlapped=0x0) returned 1
	[0261.221] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x250, lpOverlapped=0x0) returned 1
	[0261.221] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0261.222] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.222] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.222] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x24c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x24c, lpOverlapped=0x0) returned 1
	[0261.222] FlushFileBuffers (hFile=0x244) returned 1
	[0261.225] FlushFileBuffers (hFile=0x240) returned 1
	[0261.226] CloseHandle (hObject=0x244) returned 1
	[0261.226] CloseHandle (hObject=0x240) returned 1
	[0261.226] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png")) returned 1
	[0261.227] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.228] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=920) returned 1
	[0261.228] CloseHandle (hObject=0x240) returned 1
	[0261.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png")) returned 0x2020
	[0261.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png")) returned 0x2020
	[0261.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.229] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.229] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.229] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.229] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0261.229] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x398, lpOverlapped=0x0) returned 1
	[0261.231] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3a0, lpOverlapped=0x0) returned 1
	[0261.232] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0261.232] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.232] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.232] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x398, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x398, lpOverlapped=0x0) returned 1
	[0261.232] FlushFileBuffers (hFile=0x240) returned 1
	[0261.234] FlushFileBuffers (hFile=0x244) returned 1
	[0261.236] CloseHandle (hObject=0x240) returned 1
	[0261.236] CloseHandle (hObject=0x244) returned 1
	[0261.236] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png")) returned 1
	[0261.237] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.237] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=560) returned 1
	[0261.237] CloseHandle (hObject=0x244) returned 1
	[0261.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png")) returned 0x2020
	[0261.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png")) returned 0x2020
	[0261.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.238] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.238] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.238] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.238] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0261.239] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x230, lpOverlapped=0x0) returned 1
	[0261.240] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x240, lpOverlapped=0x0) returned 1
	[0261.241] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0261.241] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.241] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.241] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x230, lpOverlapped=0x0) returned 1
	[0261.241] FlushFileBuffers (hFile=0x244) returned 1
	[0261.244] FlushFileBuffers (hFile=0x240) returned 1
	[0261.245] CloseHandle (hObject=0x244) returned 1
	[0261.245] CloseHandle (hObject=0x240) returned 1
	[0261.245] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png")) returned 1
	[0261.246] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.247] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=278) returned 1
	[0261.247] CloseHandle (hObject=0x240) returned 1
	[0261.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png")) returned 0x2020
	[0261.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png")) returned 0x2020
	[0261.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.247] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.247] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.247] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.248] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0261.248] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x116, lpOverlapped=0x0) returned 1
	[0261.250] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x120, lpOverlapped=0x0) returned 1
	[0261.250] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0261.251] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.251] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.251] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x116, lpOverlapped=0x0) returned 1
	[0261.251] FlushFileBuffers (hFile=0x240) returned 1
	[0261.253] FlushFileBuffers (hFile=0x244) returned 1
	[0261.255] CloseHandle (hObject=0x240) returned 1
	[0261.255] CloseHandle (hObject=0x244) returned 1
	[0261.255] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png")) returned 1
	[0261.256] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.257] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=130479) returned 1
	[0261.257] CloseHandle (hObject=0x244) returned 1
	[0261.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg")) returned 0x2020
	[0261.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg")) returned 0x2020
	[0261.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.257] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.257] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.257] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.257] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0261.258] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1fdaf, lpOverlapped=0x0) returned 1
	[0261.261] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1fdb0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1fdb0, lpOverlapped=0x0) returned 1
	[0261.264] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0261.264] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.264] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.264] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1fdaf, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1fdaf, lpOverlapped=0x0) returned 1
	[0261.264] FlushFileBuffers (hFile=0x244) returned 1
	[0261.387] FlushFileBuffers (hFile=0x240) returned 1
	[0261.389] CloseHandle (hObject=0x244) returned 1
	[0261.389] CloseHandle (hObject=0x240) returned 1
	[0261.390] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg")) returned 1
	[0261.391] SetEvent (hEvent=0xfc) returned 1
	[0261.391] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.393] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33496) returned 1
	[0261.393] CloseHandle (hObject=0x240) returned 1
	[0261.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js")) returned 0x2020
	[0261.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js")) returned 0x2020
	[0261.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.394] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.394] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.394] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.394] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0261.395] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x82d8, lpOverlapped=0x0) returned 1
	[0261.397] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x82e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x82e0, lpOverlapped=0x0) returned 1
	[0261.398] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0261.398] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.398] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.398] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x82d8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x82d8, lpOverlapped=0x0) returned 1
	[0261.399] FlushFileBuffers (hFile=0x240) returned 1
	[0261.401] FlushFileBuffers (hFile=0x244) returned 1
	[0261.405] CloseHandle (hObject=0x240) returned 1
	[0261.405] CloseHandle (hObject=0x244) returned 1
	[0261.405] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chartbeat[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chartbeat[1].js")) returned 1
	[0261.406] SetEvent (hEvent=0xfc) returned 1
	[0261.406] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.407] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=245536) returned 1
	[0261.407] CloseHandle (hObject=0x244) returned 1
	[0261.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js")) returned 0x2020
	[0261.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js")) returned 0x2020
	[0261.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.408] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.408] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.408] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.408] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0261.409] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3bf20, lpOverlapped=0x0) returned 1
	[0261.415] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3bf30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3bf30, lpOverlapped=0x0) returned 1
	[0261.420] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0261.420] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.420] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.420] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3bf20, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3bf20, lpOverlapped=0x0) returned 1
	[0261.421] FlushFileBuffers (hFile=0x244) returned 1
	[0261.425] FlushFileBuffers (hFile=0x240) returned 1
	[0261.426] CloseHandle (hObject=0x244) returned 1
	[0261.426] CloseHandle (hObject=0x240) returned 1
	[0261.427] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome-installer.min[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome-installer.min[1].js")) returned 1
	[0261.429] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.431] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5666) returned 1
	[0261.431] CloseHandle (hObject=0x240) returned 1
	[0261.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png")) returned 0x2020
	[0261.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png")) returned 0x2020
	[0261.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.431] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.431] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.431] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.431] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0261.432] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1622, lpOverlapped=0x0) returned 1
	[0261.434] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1630, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1630, lpOverlapped=0x0) returned 1
	[0261.434] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0261.435] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.435] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.435] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1622, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1622, lpOverlapped=0x0) returned 1
	[0261.435] FlushFileBuffers (hFile=0x240) returned 1
	[0261.438] FlushFileBuffers (hFile=0x244) returned 1
	[0261.439] CloseHandle (hObject=0x240) returned 1
	[0261.439] CloseHandle (hObject=0x244) returned 1
	[0261.439] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png")) returned 1
	[0261.440] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.441] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=317) returned 1
	[0261.441] CloseHandle (hObject=0x244) returned 1
	[0261.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png")) returned 0x2020
	[0261.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png")) returned 0x2020
	[0261.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.441] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0261.441] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.441] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.441] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0261.442] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x13d, lpOverlapped=0x0) returned 1
	[0261.443] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x140, lpOverlapped=0x0) returned 1
	[0261.444] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0261.445] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.445] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.445] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x13d, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x13d, lpOverlapped=0x0) returned 1
	[0261.445] FlushFileBuffers (hFile=0x244) returned 1
	[0261.447] FlushFileBuffers (hFile=0x240) returned 1
	[0261.448] CloseHandle (hObject=0x244) returned 1
	[0261.448] CloseHandle (hObject=0x240) returned 1
	[0261.448] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png")) returned 1
	[0261.449] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.450] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=158130) returned 1
	[0261.450] CloseHandle (hObject=0x240) returned 1
	[0261.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt")) returned 0x2020
	[0261.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt")) returned 0x2020
	[0261.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0261.450] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0261.451] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.451] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0261.451] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0261.451] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x269b2, lpOverlapped=0x0) returned 1
	[0261.455] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x269c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x269c0, lpOverlapped=0x0) returned 1
	[0261.458] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0261.458] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.459] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0261.459] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x269b2, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x269b2, lpOverlapped=0x0) returned 1
	[0261.459] FlushFileBuffers (hFile=0x240) returned 1
	[0262.539] FlushFileBuffers (hFile=0x244) returned 1
	[0262.641] CloseHandle (hObject=0x240) returned 1
	[0262.641] CloseHandle (hObject=0x244) returned 1
	[0262.642] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt")) returned 1
	[0262.644] SetEvent (hEvent=0xfc) returned 1
	[0262.644] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0262.647] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=316857) returned 1
	[0262.647] CloseHandle (hObject=0x244) returned 1
	[0262.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js")) returned 0x2020
	[0262.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js")) returned 0x2020
	[0262.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0262.647] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0262.647] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0262.647] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0262.647] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0262.648] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x4d5b9, lpOverlapped=0x0) returned 1
	[0262.658] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4d5c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4d5c0, lpOverlapped=0x0) returned 1
	[0262.664] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0262.664] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0262.664] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0262.665] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4d5b9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x4d5b9, lpOverlapped=0x0) returned 1
	[0262.665] FlushFileBuffers (hFile=0x244) returned 1
	[0262.669] FlushFileBuffers (hFile=0x240) returned 1
	[0262.672] CloseHandle (hObject=0x244) returned 1
	[0262.672] CloseHandle (hObject=0x240) returned 1
	[0262.672] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ebHtml5Banner[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ebhtml5banner[1].js")) returned 1
	[0262.676] SetEvent (hEvent=0xfc) returned 1
	[0262.676] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0262.677] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=21060) returned 1
	[0262.677] CloseHandle (hObject=0x240) returned 1
	[0262.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg")) returned 0x2020
	[0262.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg")) returned 0x2020
	[0262.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0262.678] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0262.678] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0262.678] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0262.678] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0262.679] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x5244, lpOverlapped=0x0) returned 1
	[0262.682] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5250, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x5250, lpOverlapped=0x0) returned 1
	[0262.683] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0262.684] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0262.684] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0262.684] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x5244, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x5244, lpOverlapped=0x0) returned 1
	[0262.684] FlushFileBuffers (hFile=0x240) returned 1
	[0262.929] FlushFileBuffers (hFile=0x244) returned 1
	[0262.997] CloseHandle (hObject=0x240) returned 1
	[0263.001] CloseHandle (hObject=0x244) returned 1
	[0263.005] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg")) returned 1
	[0263.029] SetEvent (hEvent=0xfc) returned 1
	[0263.030] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0263.031] GetFileSizeEx (in: hFile=0x244, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1208) returned 1
	[0263.031] CloseHandle (hObject=0x244) returned 1
	[0263.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[1]")) returned 0x2020
	[0263.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[1]")) returned 0x2020
	[0263.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.032] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0263.032] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.032] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.032] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x240
	[0263.033] ReadFile (in: hFile=0x244, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x4b8, lpOverlapped=0x0) returned 1
	[0263.035] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4c0, lpOverlapped=0x0) returned 1
	[0263.035] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0263.036] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.036] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.036] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4b8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x4b8, lpOverlapped=0x0) returned 1
	[0263.036] FlushFileBuffers (hFile=0x244) returned 1
	[0263.044] FlushFileBuffers (hFile=0x240) returned 1
	[0263.046] CloseHandle (hObject=0x244) returned 1
	[0263.046] CloseHandle (hObject=0x240) returned 1
	[0263.046] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[1]")) returned 1
	[0263.047] SetEvent (hEvent=0xfc) returned 1
	[0263.047] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[2]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0263.049] GetFileSizeEx (in: hFile=0x240, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=961) returned 1
	[0263.049] CloseHandle (hObject=0x240) returned 1
	[0263.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[2]")) returned 0x2020
	[0263.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[2]")) returned 0x2020
	[0263.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[2].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[2].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.050] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[2]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0263.050] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.050] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.050] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[2].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[2].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x244
	[0263.051] ReadFile (in: hFile=0x240, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3c1, lpOverlapped=0x0) returned 1
	[0263.052] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3d0, lpOverlapped=0x0) returned 1
	[0263.053] WriteFile (in: hFile=0x244, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0263.053] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.053] SetFilePointerEx (in: hFile=0x240, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.053] WriteFile (in: hFile=0x240, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3c1, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3c1, lpOverlapped=0x0) returned 1
	[0263.054] FlushFileBuffers (hFile=0x240) returned 1
	[0263.066] FlushFileBuffers (hFile=0x244) returned 1
	[0263.068] CloseHandle (hObject=0x240) returned 1
	[0263.068] CloseHandle (hObject=0x244) returned 1
	[0263.068] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\js[2]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\js[2]")) returned 1
	[0263.069] SetEvent (hEvent=0xfc) returned 1
	[0263.069] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[1].eot"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0263.076] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=29012) returned 1
	[0263.076] CloseHandle (hObject=0x20c) returned 1
	[0263.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[1].eot")) returned 0x2020
	[0263.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[1].eot")) returned 0x2020
	[0263.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.076] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[1].eot"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0263.076] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.076] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.076] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[1].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[1].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0263.077] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x7154, lpOverlapped=0x0) returned 1
	[0263.079] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7160, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x7160, lpOverlapped=0x0) returned 1
	[0263.081] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0263.081] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.081] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.081] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x7154, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x7154, lpOverlapped=0x0) returned 1
	[0263.081] FlushFileBuffers (hFile=0x20c) returned 1
	[0263.093] FlushFileBuffers (hFile=0x260) returned 1
	[0263.094] CloseHandle (hObject=0x20c) returned 1
	[0263.095] CloseHandle (hObject=0x260) returned 1
	[0263.095] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[1].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[1].eot")) returned 1
	[0263.096] SetEvent (hEvent=0xfc) returned 1
	[0263.096] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[2].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[2].eot"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0263.097] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=28315) returned 1
	[0263.097] CloseHandle (hObject=0x260) returned 1
	[0263.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[2].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[2].eot")) returned 0x2020
	[0263.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[2].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[2].eot")) returned 0x2020
	[0263.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[2].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[2].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.097] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[2].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[2].eot"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0263.098] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.098] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.098] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[2].eot.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[2].eot.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0263.099] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x6e9b, lpOverlapped=0x0) returned 1
	[0263.107] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6ea0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x6ea0, lpOverlapped=0x0) returned 1
	[0263.108] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0263.109] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.109] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.109] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x6e9b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x6e9b, lpOverlapped=0x0) returned 1
	[0263.109] FlushFileBuffers (hFile=0x260) returned 1
	[0263.127] FlushFileBuffers (hFile=0x20c) returned 1
	[0263.128] CloseHandle (hObject=0x260) returned 1
	[0263.128] CloseHandle (hObject=0x20c) returned 1
	[0263.129] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\latest[2].eot" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\latest[2].eot")) returned 1
	[0263.130] SetEvent (hEvent=0xfc) returned 1
	[0263.130] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\msn[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\msn[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0263.131] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2338) returned 1
	[0263.131] CloseHandle (hObject=0x20c) returned 1
	[0263.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\msn[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\msn[1].htm")) returned 0x2020
	[0263.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\msn[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\msn[1].htm")) returned 0x2020
	[0263.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\msn[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\msn[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.131] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\msn[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\msn[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0263.131] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.131] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.131] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\msn[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\msn[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0263.132] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x922, lpOverlapped=0x0) returned 1
	[0263.134] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x930, lpOverlapped=0x0) returned 1
	[0263.135] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0263.135] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.135] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.135] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x922, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x922, lpOverlapped=0x0) returned 1
	[0263.135] FlushFileBuffers (hFile=0x20c) returned 1
	[0263.138] FlushFileBuffers (hFile=0x260) returned 1
	[0263.139] CloseHandle (hObject=0x20c) returned 1
	[0263.139] CloseHandle (hObject=0x260) returned 1
	[0263.139] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\msn[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\msn[1].htm")) returned 1
	[0263.140] SetEvent (hEvent=0xfc) returned 1
	[0263.140] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0263.141] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=12562) returned 1
	[0263.141] CloseHandle (hObject=0x260) returned 1
	[0263.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js")) returned 0x2020
	[0263.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js")) returned 0x2020
	[0263.141] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.141] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0263.142] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.142] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.142] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0263.143] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3112, lpOverlapped=0x0) returned 1
	[0263.144] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3120, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3120, lpOverlapped=0x0) returned 1
	[0263.145] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0263.146] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.146] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.146] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3112, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3112, lpOverlapped=0x0) returned 1
	[0263.146] FlushFileBuffers (hFile=0x260) returned 1
	[0263.148] FlushFileBuffers (hFile=0x20c) returned 1
	[0263.150] CloseHandle (hObject=0x260) returned 1
	[0263.150] CloseHandle (hObject=0x20c) returned 1
	[0263.150] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\rpc_shindig_random[1].js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\rpc_shindig_random[1].js")) returned 1
	[0263.151] SetEvent (hEvent=0xfc) returned 1
	[0263.151] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\thirdparty[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\thirdparty[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0263.152] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=0) returned 1
	[0263.152] CloseHandle (hObject=0x20c) returned 1
	[0263.152] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\uid[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\uid[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0263.153] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2611) returned 1
	[0263.153] CloseHandle (hObject=0x20c) returned 1
	[0263.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\uid[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\uid[1].htm")) returned 0x2020
	[0263.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\uid[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\uid[1].htm")) returned 0x2020
	[0263.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\uid[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\uid[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.153] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\uid[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\uid[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0263.153] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.153] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.153] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\uid[1].htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\uid[1].htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0263.154] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xa33, lpOverlapped=0x0) returned 1
	[0263.159] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xa40, lpOverlapped=0x0) returned 1
	[0263.160] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0263.160] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.161] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.161] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa33, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xa33, lpOverlapped=0x0) returned 1
	[0263.161] FlushFileBuffers (hFile=0x20c) returned 1
	[0263.163] FlushFileBuffers (hFile=0x260) returned 1
	[0263.166] CloseHandle (hObject=0x20c) returned 1
	[0263.166] CloseHandle (hObject=0x260) returned 1
	[0263.166] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\uid[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\uid[1].htm")) returned 1
	[0263.167] SetEvent (hEvent=0xfc) returned 1
	[0263.167] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\v2[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\v2[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0263.173] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=13093) returned 1
	[0263.173] CloseHandle (hObject=0x254) returned 1
	[0263.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\v2[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\v2[1]")) returned 0x2020
	[0263.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\v2[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\v2[1]")) returned 0x2020
	[0263.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\v2[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\v2[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.174] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\v2[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\v2[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0263.174] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.174] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.174] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\v2[1].id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\v2[1].id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0263.175] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x3325, lpOverlapped=0x0) returned 1
	[0263.177] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3330, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x3330, lpOverlapped=0x0) returned 1
	[0263.178] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0263.178] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.178] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.178] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x3325, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x3325, lpOverlapped=0x0) returned 1
	[0263.178] FlushFileBuffers (hFile=0x254) returned 1
	[0263.181] FlushFileBuffers (hFile=0x260) returned 1
	[0263.182] CloseHandle (hObject=0x254) returned 1
	[0263.183] CloseHandle (hObject=0x260) returned 1
	[0263.183] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\v2[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\v2[1]")) returned 1
	[0263.184] SetEvent (hEvent=0xfc) returned 1
	[0263.184] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0263.185] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=151530) returned 1
	[0263.185] CloseHandle (hObject=0x260) returned 1
	[0263.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css")) returned 0x2020
	[0263.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css")) returned 0x2020
	[0263.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.185] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0263.185] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.185] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.185] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0263.186] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x24fea, lpOverlapped=0x0) returned 1
	[0263.190] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x24ff0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x24ff0, lpOverlapped=0x0) returned 1
	[0263.193] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0263.193] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.193] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.193] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x24fea, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x24fea, lpOverlapped=0x0) returned 1
	[0263.194] FlushFileBuffers (hFile=0x260) returned 1
	[0263.206] FlushFileBuffers (hFile=0x254) returned 1
	[0263.208] CloseHandle (hObject=0x260) returned 1
	[0263.208] CloseHandle (hObject=0x254) returned 1
	[0263.208] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css")) returned 1
	[0263.214] SetEvent (hEvent=0xfc) returned 1
	[0263.214] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0263.215] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=67) returned 1
	[0263.215] CloseHandle (hObject=0x254) returned 1
	[0263.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\desktop.ini")) returned 0x2006
	[0263.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\desktop.ini")) returned 0x2006
	[0263.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.216] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0263.216] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.216] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.216] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2006, hTemplateFile=0x0) returned 0x260
	[0263.218] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x43, lpOverlapped=0x0) returned 1
	[0263.219] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x50, lpOverlapped=0x0) returned 1
	[0263.220] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0263.220] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.220] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.220] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x43, lpOverlapped=0x0) returned 1
	[0263.220] FlushFileBuffers (hFile=0x254) returned 1
	[0263.233] FlushFileBuffers (hFile=0x260) returned 1
	[0263.235] CloseHandle (hObject=0x254) returned 1
	[0263.235] CloseHandle (hObject=0x260) returned 1
	[0263.235] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\desktop.ini")) returned 1
	[0263.236] SetEvent (hEvent=0xfc) returned 1
	[0263.236] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\msimgsiz.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0263.237] GetFileSizeEx (in: hFile=0x260, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16384) returned 1
	[0263.237] CloseHandle (hObject=0x260) returned 1
	[0263.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\msimgsiz.dat")) returned 0x2020
	[0263.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\msimgsiz.dat")) returned 0x2020
	[0263.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\msimgsiz.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.238] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x260
	[0263.238] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.238] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.238] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\msimgsiz.dat.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0263.239] ReadFile (in: hFile=0x260, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x4000, lpOverlapped=0x0) returned 1
	[0263.242] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x4010, lpOverlapped=0x0) returned 1
	[0263.243] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0263.243] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.243] SetFilePointerEx (in: hFile=0x260, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.244] WriteFile (in: hFile=0x260, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x4000, lpOverlapped=0x0) returned 1
	[0263.244] FlushFileBuffers (hFile=0x260) returned 1
	[0263.379] FlushFileBuffers (hFile=0x254) returned 1
	[0263.387] CloseHandle (hObject=0x260) returned 1
	[0263.387] CloseHandle (hObject=0x254) returned 1
	[0263.388] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\msimgsiz.dat")) returned 1
	[0263.389] SetEvent (hEvent=0xfc) returned 1
	[0263.394] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.msmessagestore"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0263.396] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2121728) returned 1
	[0263.396] CloseHandle (hObject=0x254) returned 1
	[0263.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.msmessagestore")) returned 0x2020
	[0263.396] MoveFileW (lpExistingFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.msmessagestore"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.MSMessageStore.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.msmessagestore.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0263.397] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.MSMessageStore.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.msmessagestore.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0263.397] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0263.398] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0263.398] ReadFile (in: hFile=0x254, lpBuffer=0x3900058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3900058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.402] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0xacaaa, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0263.402] ReadFile (in: hFile=0x254, lpBuffer=0x3940058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3940058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.408] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x1c6000, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0263.408] ReadFile (in: hFile=0x254, lpBuffer=0x3980058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3980058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.429] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa90 | out: lpNewFilePointer=0x0) returned 1
	[0263.429] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0122, lpNumberOfBytesWritten=0x34afa88, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa88*=0xc0122, lpOverlapped=0x0) returned 1
	[0263.442] SetEndOfFile (hFile=0x254) returned 1
	[0263.443] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x1c6000, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0263.443] WriteFile (in: hFile=0x254, lpBuffer=0x39c015a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c015a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0263.459] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0xacaaa, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0263.459] WriteFile (in: hFile=0x254, lpBuffer=0x39c015a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c015a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0263.461] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0263.461] WriteFile (in: hFile=0x254, lpBuffer=0x39c015a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c015a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0263.462] FlushFileBuffers (hFile=0x254) returned 1
	[0263.510] CloseHandle (hObject=0x254) returned 1
	[0263.510] SetEvent (hEvent=0xfc) returned 1
	[0263.513] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0263.514] GetFileSizeEx (in: hFile=0x1b8, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=8192) returned 1
	[0263.514] CloseHandle (hObject=0x1b8) returned 1
	[0263.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.chk")) returned 0x2020
	[0263.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.chk")) returned 0x2020
	[0263.514] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.chk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0263.514] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b8
	[0263.515] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.515] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0263.515] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.chk.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0263.515] ReadFile (in: hFile=0x1b8, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2000, lpOverlapped=0x0) returned 1
	[0263.517] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2010, lpOverlapped=0x0) returned 1
	[0263.518] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xe2, lpOverlapped=0x0) returned 1
	[0263.518] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.518] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0263.518] WriteFile (in: hFile=0x1b8, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2000, lpOverlapped=0x0) returned 1
	[0263.518] FlushFileBuffers (hFile=0x1b8) returned 1
	[0263.520] FlushFileBuffers (hFile=0x110) returned 1
	[0263.522] CloseHandle (hObject=0x1b8) returned 1
	[0263.522] CloseHandle (hObject=0x110) returned 1
	[0263.522] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.chk")) returned 1
	[0263.523] SetEvent (hEvent=0xfc) returned 1
	[0263.523] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0263.524] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2097152) returned 1
	[0263.524] CloseHandle (hObject=0x110) returned 1
	[0263.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log")) returned 0x2020
	[0263.524] MoveFileW (lpExistingFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0263.525] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0263.525] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0263.525] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0263.525] ReadFile (in: hFile=0x110, lpBuffer=0x3900058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3900058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.531] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xaaaaa, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0263.532] ReadFile (in: hFile=0x110, lpBuffer=0x3940058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3940058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.534] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x1c0000, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0263.535] ReadFile (in: hFile=0x110, lpBuffer=0x3980058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3980058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.547] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa90 | out: lpNewFilePointer=0x0) returned 1
	[0263.547] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x34afa88, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa88*=0xc0102, lpOverlapped=0x0) returned 1
	[0263.568] SetEndOfFile (hFile=0x110) returned 1
	[0263.568] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x1c0000, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0263.568] WriteFile (in: hFile=0x110, lpBuffer=0x39c013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c013a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0263.626] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xaaaaa, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0263.626] WriteFile (in: hFile=0x110, lpBuffer=0x39c013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c013a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0263.628] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0263.628] WriteFile (in: hFile=0x110, lpBuffer=0x39c013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c013a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0263.629] FlushFileBuffers (hFile=0x110) returned 1
	[0263.683] CloseHandle (hObject=0x110) returned 1
	[0263.683] SetEvent (hEvent=0xfc) returned 1
	[0263.683] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0263.685] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2097152) returned 1
	[0263.685] CloseHandle (hObject=0x110) returned 1
	[0263.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs")) returned 0x2020
	[0263.685] MoveFileW (lpExistingFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0263.686] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0263.687] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0263.687] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0263.687] ReadFile (in: hFile=0x110, lpBuffer=0x3900058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3900058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.690] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xaaaaa, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0263.690] ReadFile (in: hFile=0x110, lpBuffer=0x3940058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3940058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.695] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x1c0000, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0263.695] ReadFile (in: hFile=0x110, lpBuffer=0x3980058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3980058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0263.707] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa90 | out: lpNewFilePointer=0x0) returned 1
	[0263.707] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x34afa88, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa88*=0xc0112, lpOverlapped=0x0) returned 1
	[0263.740] SetEndOfFile (hFile=0x110) returned 1
	[0263.740] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x1c0000, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0263.740] WriteFile (in: hFile=0x110, lpBuffer=0x39c014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c014a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0263.748] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xaaaaa, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0263.748] WriteFile (in: hFile=0x110, lpBuffer=0x39c014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c014a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0263.750] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0263.750] WriteFile (in: hFile=0x110, lpBuffer=0x39c014a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c014a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0263.751] FlushFileBuffers (hFile=0x110) returned 1
	[0264.155] CloseHandle (hObject=0x110) returned 1
	[0264.155] SetEvent (hEvent=0xfc) returned 1
	[0264.156] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.158] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=260) returned 1
	[0264.158] CloseHandle (hObject=0x110) returned 1
	[0264.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml")) returned 0x2020
	[0264.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml")) returned 0x2020
	[0264.158] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.158] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.158] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.158] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.158] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0264.161] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x104, lpOverlapped=0x0) returned 1
	[0264.162] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x110, lpOverlapped=0x0) returned 1
	[0264.163] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.163] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.163] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.164] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x104, lpOverlapped=0x0) returned 1
	[0264.164] FlushFileBuffers (hFile=0x110) returned 1
	[0264.184] FlushFileBuffers (hFile=0x114) returned 1
	[0264.280] CloseHandle (hObject=0x110) returned 1
	[0264.293] CloseHandle (hObject=0x114) returned 1
	[0264.293] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml")) returned 1
	[0264.294] SetEvent (hEvent=0xfc) returned 1
	[0264.295] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.311] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1074) returned 1
	[0264.311] CloseHandle (hObject=0x110) returned 1
	[0264.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg")) returned 0x2020
	[0264.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg")) returned 0x2020
	[0264.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.311] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.311] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.311] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.311] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0264.312] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x432, lpOverlapped=0x0) returned 1
	[0264.313] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x440, lpOverlapped=0x0) returned 1
	[0264.314] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.315] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.315] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.315] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x432, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x432, lpOverlapped=0x0) returned 1
	[0264.315] FlushFileBuffers (hFile=0x110) returned 1
	[0264.321] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.322] CloseHandle (hObject=0x110) returned 1
	[0264.322] CloseHandle (hObject=0x20c) returned 1
	[0264.322] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg")) returned 1
	[0264.323] SetEvent (hEvent=0xfc) returned 1
	[0264.323] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.324] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=645) returned 1
	[0264.324] CloseHandle (hObject=0x20c) returned 1
	[0264.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini")) returned 0x2026
	[0264.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini")) returned 0x2026
	[0264.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.324] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.324] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.324] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.324] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2026, hTemplateFile=0x0) returned 0x110
	[0264.326] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x285, lpOverlapped=0x0) returned 1
	[0264.327] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x290, lpOverlapped=0x0) returned 1
	[0264.327] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.328] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.328] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.328] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x285, lpOverlapped=0x0) returned 1
	[0264.328] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.331] FlushFileBuffers (hFile=0x110) returned 1
	[0264.332] CloseHandle (hObject=0x20c) returned 1
	[0264.332] CloseHandle (hObject=0x110) returned 1
	[0264.333] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini")) returned 1
	[0264.334] SetEvent (hEvent=0xfc) returned 1
	[0264.334] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.334] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=231) returned 1
	[0264.334] CloseHandle (hObject=0x110) returned 1
	[0264.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm")) returned 0x2020
	[0264.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm")) returned 0x2020
	[0264.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.335] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.335] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.335] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.335] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0264.336] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe7, lpOverlapped=0x0) returned 1
	[0264.336] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0264.337] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.337] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.337] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.338] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe7, lpOverlapped=0x0) returned 1
	[0264.338] FlushFileBuffers (hFile=0x110) returned 1
	[0264.342] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.344] CloseHandle (hObject=0x110) returned 1
	[0264.344] CloseHandle (hObject=0x20c) returned 1
	[0264.344] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm")) returned 1
	[0264.345] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.345] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=237) returned 1
	[0264.345] CloseHandle (hObject=0x20c) returned 1
	[0264.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm")) returned 0x2020
	[0264.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm")) returned 0x2020
	[0264.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.346] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.346] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.346] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.346] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0264.347] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xed, lpOverlapped=0x0) returned 1
	[0264.347] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0264.348] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0264.348] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.348] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.348] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xed, lpOverlapped=0x0) returned 1
	[0264.349] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.353] FlushFileBuffers (hFile=0x110) returned 1
	[0264.355] CloseHandle (hObject=0x20c) returned 1
	[0264.355] CloseHandle (hObject=0x110) returned 1
	[0264.355] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm")) returned 1
	[0264.356] SetEvent (hEvent=0xfc) returned 1
	[0264.356] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.357] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6406) returned 1
	[0264.357] CloseHandle (hObject=0x110) returned 1
	[0264.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg")) returned 0x2020
	[0264.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg")) returned 0x2020
	[0264.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.357] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.357] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.357] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.357] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0264.358] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1906, lpOverlapped=0x0) returned 1
	[0264.370] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1910, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1910, lpOverlapped=0x0) returned 1
	[0264.371] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0264.371] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.372] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.372] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1906, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1906, lpOverlapped=0x0) returned 1
	[0264.372] FlushFileBuffers (hFile=0x110) returned 1
	[0264.375] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.376] CloseHandle (hObject=0x110) returned 1
	[0264.376] CloseHandle (hObject=0x20c) returned 1
	[0264.376] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg")) returned 1
	[0264.377] SetEvent (hEvent=0xfc) returned 1
	[0264.377] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.379] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=235) returned 1
	[0264.379] CloseHandle (hObject=0x20c) returned 1
	[0264.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm")) returned 0x2020
	[0264.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm")) returned 0x2020
	[0264.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.380] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.380] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.380] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.380] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0264.381] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xeb, lpOverlapped=0x0) returned 1
	[0264.381] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0264.382] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.383] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.383] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.383] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xeb, lpOverlapped=0x0) returned 1
	[0264.383] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.385] FlushFileBuffers (hFile=0x110) returned 1
	[0264.387] CloseHandle (hObject=0x20c) returned 1
	[0264.387] CloseHandle (hObject=0x110) returned 1
	[0264.387] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm")) returned 1
	[0264.388] SetEvent (hEvent=0xfc) returned 1
	[0264.388] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.389] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4222) returned 1
	[0264.389] CloseHandle (hObject=0x110) returned 1
	[0264.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg")) returned 0x2020
	[0264.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg")) returned 0x2020
	[0264.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.389] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.389] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.389] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.389] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0264.390] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x107e, lpOverlapped=0x0) returned 1
	[0264.392] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1080, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1080, lpOverlapped=0x0) returned 1
	[0264.392] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.393] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.393] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.393] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x107e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x107e, lpOverlapped=0x0) returned 1
	[0264.393] FlushFileBuffers (hFile=0x110) returned 1
	[0264.396] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.397] CloseHandle (hObject=0x110) returned 1
	[0264.397] CloseHandle (hObject=0x20c) returned 1
	[0264.397] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg")) returned 1
	[0264.398] SetEvent (hEvent=0xfc) returned 1
	[0264.398] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.400] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=237) returned 1
	[0264.400] CloseHandle (hObject=0x20c) returned 1
	[0264.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm")) returned 0x2020
	[0264.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm")) returned 0x2020
	[0264.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.400] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.400] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.400] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.400] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0264.401] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xed, lpOverlapped=0x0) returned 1
	[0264.402] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0264.403] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0264.403] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.403] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.403] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xed, lpOverlapped=0x0) returned 1
	[0264.405] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.408] FlushFileBuffers (hFile=0x110) returned 1
	[0264.409] CloseHandle (hObject=0x20c) returned 1
	[0264.409] CloseHandle (hObject=0x110) returned 1
	[0264.409] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm")) returned 1
	[0264.410] SetEvent (hEvent=0xfc) returned 1
	[0264.410] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.412] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=6381) returned 1
	[0264.412] CloseHandle (hObject=0x110) returned 1
	[0264.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg")) returned 0x2020
	[0264.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg")) returned 0x2020
	[0264.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.412] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.412] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.412] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.412] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0264.413] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x18ed, lpOverlapped=0x0) returned 1
	[0264.414] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x18f0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x18f0, lpOverlapped=0x0) returned 1
	[0264.415] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0264.415] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.415] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.415] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x18ed, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x18ed, lpOverlapped=0x0) returned 1
	[0264.416] FlushFileBuffers (hFile=0x110) returned 1
	[0264.422] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.423] CloseHandle (hObject=0x110) returned 1
	[0264.423] CloseHandle (hObject=0x20c) returned 1
	[0264.423] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg")) returned 1
	[0264.424] SetEvent (hEvent=0xfc) returned 1
	[0264.424] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.425] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=232) returned 1
	[0264.425] CloseHandle (hObject=0x20c) returned 1
	[0264.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm")) returned 0x2020
	[0264.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm")) returned 0x2020
	[0264.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.425] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.426] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.426] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.426] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0264.426] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe8, lpOverlapped=0x0) returned 1
	[0264.427] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0264.428] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.428] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.428] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.428] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe8, lpOverlapped=0x0) returned 1
	[0264.429] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.431] FlushFileBuffers (hFile=0x110) returned 1
	[0264.433] CloseHandle (hObject=0x20c) returned 1
	[0264.433] CloseHandle (hObject=0x110) returned 1
	[0264.433] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm")) returned 1
	[0264.434] SetEvent (hEvent=0xfc) returned 1
	[0264.434] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.435] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=5115) returned 1
	[0264.435] CloseHandle (hObject=0x110) returned 1
	[0264.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg")) returned 0x2020
	[0264.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg")) returned 0x2020
	[0264.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.435] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.435] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.435] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.435] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0264.436] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x13fb, lpOverlapped=0x0) returned 1
	[0264.437] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1400, lpOverlapped=0x0) returned 1
	[0264.438] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.438] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.439] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.439] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x13fb, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x13fb, lpOverlapped=0x0) returned 1
	[0264.439] FlushFileBuffers (hFile=0x110) returned 1
	[0264.443] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.445] CloseHandle (hObject=0x110) returned 1
	[0264.445] CloseHandle (hObject=0x20c) returned 1
	[0264.445] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg")) returned 1
	[0264.446] SetEvent (hEvent=0xfc) returned 1
	[0264.446] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.447] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=233) returned 1
	[0264.447] CloseHandle (hObject=0x20c) returned 1
	[0264.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm")) returned 0x2020
	[0264.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm")) returned 0x2020
	[0264.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.447] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.447] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.447] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.447] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0264.448] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe9, lpOverlapped=0x0) returned 1
	[0264.449] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0264.450] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.450] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.450] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.450] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe9, lpOverlapped=0x0) returned 1
	[0264.450] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.453] FlushFileBuffers (hFile=0x110) returned 1
	[0264.455] CloseHandle (hObject=0x20c) returned 1
	[0264.455] CloseHandle (hObject=0x110) returned 1
	[0264.455] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm")) returned 1
	[0264.456] SetEvent (hEvent=0xfc) returned 1
	[0264.456] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.457] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=1920) returned 1
	[0264.457] CloseHandle (hObject=0x110) returned 1
	[0264.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg")) returned 0x2020
	[0264.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg")) returned 0x2020
	[0264.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.457] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.458] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.458] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.458] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0264.458] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x780, lpOverlapped=0x0) returned 1
	[0264.461] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x790, lpOverlapped=0x0) returned 1
	[0264.461] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.462] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.462] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.462] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x780, lpOverlapped=0x0) returned 1
	[0264.462] FlushFileBuffers (hFile=0x110) returned 1
	[0264.465] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.466] CloseHandle (hObject=0x110) returned 1
	[0264.466] CloseHandle (hObject=0x20c) returned 1
	[0264.466] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg")) returned 1
	[0264.467] SetEvent (hEvent=0xfc) returned 1
	[0264.467] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.468] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=237) returned 1
	[0264.468] CloseHandle (hObject=0x20c) returned 1
	[0264.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm")) returned 0x2020
	[0264.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm")) returned 0x2020
	[0264.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.468] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.468] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.468] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.469] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0264.469] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xed, lpOverlapped=0x0) returned 1
	[0264.470] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0264.471] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0264.471] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.471] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.471] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xed, lpOverlapped=0x0) returned 1
	[0264.472] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.476] FlushFileBuffers (hFile=0x110) returned 1
	[0264.478] CloseHandle (hObject=0x20c) returned 1
	[0264.478] CloseHandle (hObject=0x110) returned 1
	[0264.478] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm")) returned 1
	[0264.479] SetEvent (hEvent=0xfc) returned 1
	[0264.479] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.480] GetFileSizeEx (in: hFile=0x110, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4734) returned 1
	[0264.480] CloseHandle (hObject=0x110) returned 1
	[0264.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg")) returned 0x2020
	[0264.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg")) returned 0x2020
	[0264.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.480] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x110
	[0264.480] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.480] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.480] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0264.481] ReadFile (in: hFile=0x110, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x127e, lpOverlapped=0x0) returned 1
	[0264.487] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1280, lpOverlapped=0x0) returned 1
	[0264.488] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x102, lpOverlapped=0x0) returned 1
	[0264.488] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.488] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.488] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x127e, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x127e, lpOverlapped=0x0) returned 1
	[0264.488] FlushFileBuffers (hFile=0x110) returned 1
	[0264.490] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.492] CloseHandle (hObject=0x110) returned 1
	[0264.492] CloseHandle (hObject=0x20c) returned 1
	[0264.492] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg")) returned 1
	[0264.493] SetEvent (hEvent=0xfc) returned 1
	[0264.493] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.494] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=232) returned 1
	[0264.494] CloseHandle (hObject=0x20c) returned 1
	[0264.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm")) returned 0x2020
	[0264.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm")) returned 0x2020
	[0264.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.494] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.495] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.495] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.495] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x110
	[0264.495] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe8, lpOverlapped=0x0) returned 1
	[0264.496] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0264.497] WriteFile (in: hFile=0x110, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.497] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.498] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.498] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe8, lpOverlapped=0x0) returned 1
	[0264.498] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.501] FlushFileBuffers (hFile=0x110) returned 1
	[0264.503] CloseHandle (hObject=0x20c) returned 1
	[0264.503] CloseHandle (hObject=0x110) returned 1
	[0264.503] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm")) returned 1
	[0264.504] SetEvent (hEvent=0xfc) returned 1
	[0264.504] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.506] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10569) returned 1
	[0264.506] CloseHandle (hObject=0x20c) returned 1
	[0264.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg")) returned 0x2020
	[0264.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg")) returned 0x2020
	[0264.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.506] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.506] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.507] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.507] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0264.507] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2949, lpOverlapped=0x0) returned 1
	[0264.509] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x2950, lpOverlapped=0x0) returned 1
	[0264.510] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.510] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.510] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.510] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2949, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2949, lpOverlapped=0x0) returned 1
	[0264.510] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.513] FlushFileBuffers (hFile=0x114) returned 1
	[0264.515] CloseHandle (hObject=0x20c) returned 1
	[0264.515] CloseHandle (hObject=0x114) returned 1
	[0264.515] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg")) returned 1
	[0264.516] SetEvent (hEvent=0xfc) returned 1
	[0264.516] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0264.517] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=230) returned 1
	[0264.517] CloseHandle (hObject=0x114) returned 1
	[0264.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm")) returned 0x2020
	[0264.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm")) returned 0x2020
	[0264.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.517] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0264.517] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.517] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.517] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x20c
	[0264.519] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xe6, lpOverlapped=0x0) returned 1
	[0264.520] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf0, lpOverlapped=0x0) returned 1
	[0264.520] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.521] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.521] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.521] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xe6, lpOverlapped=0x0) returned 1
	[0264.521] FlushFileBuffers (hFile=0x114) returned 1
	[0264.523] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.525] CloseHandle (hObject=0x114) returned 1
	[0264.525] CloseHandle (hObject=0x20c) returned 1
	[0264.525] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm")) returned 1
	[0264.526] SetEvent (hEvent=0xfc) returned 1
	[0264.526] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.527] GetFileSizeEx (in: hFile=0x20c, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=7505) returned 1
	[0264.527] CloseHandle (hObject=0x20c) returned 1
	[0264.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg")) returned 0x2020
	[0264.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg")) returned 0x2020
	[0264.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0264.527] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.527] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0264.528] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1d51, lpOverlapped=0x0) returned 1
	[0264.530] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1d60, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1d60, lpOverlapped=0x0) returned 1
	[0264.531] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.531] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.531] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.531] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1d51, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1d51, lpOverlapped=0x0) returned 1
	[0264.531] FlushFileBuffers (hFile=0x20c) returned 1
	[0264.537] FlushFileBuffers (hFile=0x114) returned 1
	[0264.538] CloseHandle (hObject=0x20c) returned 1
	[0264.538] CloseHandle (hObject=0x114) returned 1
	[0264.538] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg")) returned 1
	[0264.539] SetEvent (hEvent=0xfc) returned 1
	[0264.539] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0264.540] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=2113536) returned 1
	[0264.540] CloseHandle (hObject=0x114) returned 1
	[0264.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore")) returned 0x2020
	[0264.541] MoveFileW (lpExistingFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0264.542] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0264.542] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0264.542] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0264.542] ReadFile (in: hFile=0x114, lpBuffer=0x3900058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3900058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0264.545] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xac000, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0264.545] ReadFile (in: hFile=0x114, lpBuffer=0x3940058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3940058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0264.550] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x1c4000, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0264.551] ReadFile (in: hFile=0x114, lpBuffer=0x3980058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3980058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0264.572] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa90 | out: lpNewFilePointer=0x0) returned 1
	[0264.572] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0122, lpNumberOfBytesWritten=0x34afa88, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa88*=0xc0122, lpOverlapped=0x0) returned 1
	[0264.590] SetEndOfFile (hFile=0x114) returned 1
	[0264.590] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x1c4000, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0264.590] WriteFile (in: hFile=0x114, lpBuffer=0x39c015a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c015a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0264.591] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0xac000, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0264.591] WriteFile (in: hFile=0x114, lpBuffer=0x39c015a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c015a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0264.593] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0264.593] WriteFile (in: hFile=0x114, lpBuffer=0x39c015a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c015a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0264.594] FlushFileBuffers (hFile=0x114) returned 1
	[0264.735] CloseHandle (hObject=0x114) returned 1
	[0264.735] SetEvent (hEvent=0xfc) returned 1
	[0264.736] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0264.780] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=10191) returned 1
	[0264.780] CloseHandle (hObject=0x114) returned 1
	[0264.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml")) returned 0x2020
	[0264.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml")) returned 0x2020
	[0264.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.782] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0264.782] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.782] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.782] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0264.830] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x27cf, lpOverlapped=0x0) returned 1
	[0264.836] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x27d0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x27d0, lpOverlapped=0x0) returned 1
	[0264.837] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.837] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.837] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.837] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x27cf, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x27cf, lpOverlapped=0x0) returned 1
	[0264.837] FlushFileBuffers (hFile=0x114) returned 1
	[0264.877] FlushFileBuffers (hFile=0x254) returned 1
	[0264.898] CloseHandle (hObject=0x114) returned 1
	[0264.899] CloseHandle (hObject=0x254) returned 1
	[0264.899] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml")) returned 1
	[0264.900] SetEvent (hEvent=0xfc) returned 1
	[0264.900] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0264.901] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=42507) returned 1
	[0264.901] CloseHandle (hObject=0x254) returned 1
	[0264.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01")) returned 0x2020
	[0264.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01")) returned 0x2020
	[0264.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0264.902] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0264.902] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.902] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0264.902] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0264.903] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xa60b, lpOverlapped=0x0) returned 1
	[0264.905] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa610, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xa610, lpOverlapped=0x0) returned 1
	[0264.906] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0264.907] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.907] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0264.907] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa60b, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xa60b, lpOverlapped=0x0) returned 1
	[0264.907] FlushFileBuffers (hFile=0x254) returned 1
	[0264.952] FlushFileBuffers (hFile=0x114) returned 1
	[0264.976] CloseHandle (hObject=0x254) returned 1
	[0264.976] CloseHandle (hObject=0x114) returned 1
	[0264.976] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01")) returned 1
	[0264.977] SetEvent (hEvent=0xfc) returned 1
	[0264.978] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0264.996] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=78805) returned 1
	[0264.996] CloseHandle (hObject=0x114) returned 1
	[0264.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01")) returned 0x2020
	[0264.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01")) returned 0x2020
	[0264.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0265.000] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0265.000] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0265.000] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0265.007] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0265.009] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x133d5, lpOverlapped=0x0) returned 1
	[0265.012] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x133e0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x133e0, lpOverlapped=0x0) returned 1
	[0265.014] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0265.015] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0265.015] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0265.015] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x133d5, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x133d5, lpOverlapped=0x0) returned 1
	[0265.015] FlushFileBuffers (hFile=0x114) returned 1
	[0265.024] FlushFileBuffers (hFile=0x254) returned 1
	[0265.031] CloseHandle (hObject=0x114) returned 1
	[0265.031] CloseHandle (hObject=0x254) returned 1
	[0265.031] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01")) returned 1
	[0265.032] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0265.033] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=33382) returned 1
	[0265.033] CloseHandle (hObject=0x254) returned 1
	[0265.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01")) returned 0x2020
	[0265.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01")) returned 0x2020
	[0265.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0265.033] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0265.033] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0265.034] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0265.034] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0265.034] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x8266, lpOverlapped=0x0) returned 1
	[0265.044] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8270, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x8270, lpOverlapped=0x0) returned 1
	[0265.046] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0265.046] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0265.046] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0265.046] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x8266, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x8266, lpOverlapped=0x0) returned 1
	[0265.046] FlushFileBuffers (hFile=0x254) returned 1
	[0265.049] FlushFileBuffers (hFile=0x114) returned 1
	[0265.051] CloseHandle (hObject=0x254) returned 1
	[0265.051] CloseHandle (hObject=0x114) returned 1
	[0265.051] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01")) returned 1
	[0265.052] SetEvent (hEvent=0xfc) returned 1
	[0265.052] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0265.053] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=68898) returned 1
	[0265.053] CloseHandle (hObject=0x114) returned 1
	[0265.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01")) returned 0x2020
	[0265.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01")) returned 0x2020
	[0265.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0265.054] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0265.054] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0265.054] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0265.054] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0265.055] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x10d22, lpOverlapped=0x0) returned 1
	[0265.058] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10d30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x10d30, lpOverlapped=0x0) returned 1
	[0265.060] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0265.060] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0265.060] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0265.060] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x10d22, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x10d22, lpOverlapped=0x0) returned 1
	[0265.060] FlushFileBuffers (hFile=0x114) returned 1
	[0265.063] FlushFileBuffers (hFile=0x254) returned 1
	[0265.064] CloseHandle (hObject=0x114) returned 1
	[0265.064] CloseHandle (hObject=0x254) returned 1
	[0265.064] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01")) returned 1
	[0265.066] SetEvent (hEvent=0xfc) returned 1
	[0265.066] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0265.067] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=63624) returned 1
	[0265.067] CloseHandle (hObject=0x254) returned 1
	[0265.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01")) returned 0x2020
	[0265.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01")) returned 0x2020
	[0265.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0265.067] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0265.067] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0265.067] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0265.067] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0265.068] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xf888, lpOverlapped=0x0) returned 1
	[0265.071] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf890, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf890, lpOverlapped=0x0) returned 1
	[0265.072] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0265.073] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0265.073] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0265.073] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf888, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xf888, lpOverlapped=0x0) returned 1
	[0265.073] FlushFileBuffers (hFile=0x254) returned 1
	[0265.092] FlushFileBuffers (hFile=0x114) returned 1
	[0265.094] CloseHandle (hObject=0x254) returned 1
	[0265.096] CloseHandle (hObject=0x114) returned 1
	[0265.096] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01")) returned 1
	[0265.097] SetEvent (hEvent=0xfc) returned 1
	[0265.097] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0265.099] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=43023) returned 1
	[0265.099] CloseHandle (hObject=0x114) returned 1
	[0265.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01")) returned 0x2020
	[0265.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01")) returned 0x2020
	[0265.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0265.100] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0265.100] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0265.100] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0265.100] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0265.101] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0xa80f, lpOverlapped=0x0) returned 1
	[0265.103] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa810, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xa810, lpOverlapped=0x0) returned 1
	[0265.104] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0xf2, lpOverlapped=0x0) returned 1
	[0265.105] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0265.105] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0265.105] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xa80f, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0xa80f, lpOverlapped=0x0) returned 1
	[0265.105] FlushFileBuffers (hFile=0x114) returned 1
	[0265.114] FlushFileBuffers (hFile=0x254) returned 1
	[0265.117] CloseHandle (hObject=0x114) returned 1
	[0265.117] CloseHandle (hObject=0x254) returned 1
	[0265.117] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01")) returned 1
	[0265.118] SetEvent (hEvent=0xfc) returned 1
	[0265.118] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0265.119] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4194304) returned 1
	[0265.119] CloseHandle (hObject=0x254) returned 1
	[0265.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_")) returned 0x2020
	[0265.119] MoveFileW (lpExistingFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0265.120] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0265.120] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0265.120] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0265.120] ReadFile (in: hFile=0x254, lpBuffer=0x3900058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3900058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0265.127] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x155555, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0265.127] ReadFile (in: hFile=0x254, lpBuffer=0x3940058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3940058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0265.133] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x3c0000, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0265.133] ReadFile (in: hFile=0x254, lpBuffer=0x3980058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3980058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0265.145] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa90 | out: lpNewFilePointer=0x0) returned 1
	[0265.145] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x34afa88, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa88*=0xc0102, lpOverlapped=0x0) returned 1
	[0265.214] SetEndOfFile (hFile=0x254) returned 1
	[0265.214] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x3c0000, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0265.214] WriteFile (in: hFile=0x254, lpBuffer=0x39c013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c013a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0265.216] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x155555, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0265.216] WriteFile (in: hFile=0x254, lpBuffer=0x39c013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c013a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0265.218] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0265.218] WriteFile (in: hFile=0x254, lpBuffer=0x39c013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c013a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0265.219] FlushFileBuffers (hFile=0x254) returned 1
	[0265.294] CloseHandle (hObject=0x254) returned 1
	[0265.294] SetEvent (hEvent=0xfc) returned 1
	[0265.294] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0265.298] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=4194304) returned 1
	[0265.298] CloseHandle (hObject=0x254) returned 1
	[0265.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_")) returned 0x2020
	[0265.298] MoveFileW (lpExistingFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 1
	[0265.300] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0265.300] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0265.300] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0265.300] ReadFile (in: hFile=0x254, lpBuffer=0x3900058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3900058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0265.304] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x155555, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0265.304] ReadFile (in: hFile=0x254, lpBuffer=0x3940058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3940058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0265.309] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x3c0000, lpNewFilePointer=0x0, dwMoveMethod=0x34af920 | out: lpNewFilePointer=0x0) returned 1
	[0265.309] ReadFile (in: hFile=0x254, lpBuffer=0x3980058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x34af92c, lpOverlapped=0x0 | out: lpBuffer=0x3980058*, lpNumberOfBytesRead=0x34af92c*=0x40000, lpOverlapped=0x0) returned 1
	[0265.321] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa90 | out: lpNewFilePointer=0x0) returned 1
	[0265.321] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x34afa88, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa88*=0xc0102, lpOverlapped=0x0) returned 1
	[0265.371] SetEndOfFile (hFile=0x254) returned 1
	[0265.371] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x3c0000, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0265.371] WriteFile (in: hFile=0x254, lpBuffer=0x39c013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c013a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0265.373] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x155555, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0265.373] WriteFile (in: hFile=0x254, lpBuffer=0x39c013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c013a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0265.375] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af928 | out: lpNewFilePointer=0x0) returned 1
	[0265.375] WriteFile (in: hFile=0x254, lpBuffer=0x39c013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x34af934, lpOverlapped=0x0 | out: lpBuffer=0x39c013a*, lpNumberOfBytesWritten=0x34af934*=0x40000, lpOverlapped=0x0) returned 1
	[0265.376] FlushFileBuffers (hFile=0x254) returned 1
	[0265.986] CloseHandle (hObject=0x254) returned 1
	[0265.986] SetEvent (hEvent=0xfc) returned 1
	[0265.987] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0265.990] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=44) returned 1
	[0265.990] CloseHandle (hObject=0x254) returned 1
	[0265.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache")) returned 0x2020
	[0265.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache")) returned 0x2020
	[0265.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0265.990] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0265.990] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0265.990] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0265.991] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0265.992] ReadFile (in: hFile=0x254, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x2c, lpOverlapped=0x0) returned 1
	[0265.993] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x30, lpOverlapped=0x0) returned 1
	[0265.994] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x112, lpOverlapped=0x0) returned 1
	[0265.994] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0265.994] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0265.994] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x2c, lpOverlapped=0x0) returned 1
	[0265.994] FlushFileBuffers (hFile=0x254) returned 1
	[0266.055] FlushFileBuffers (hFile=0x114) returned 1
	[0266.115] CloseHandle (hObject=0x254) returned 1
	[0266.159] CloseHandle (hObject=0x114) returned 1
	[0266.182] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache")) returned 1
	[0266.227] SetEvent (hEvent=0xfc) returned 1
	[0266.227] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0266.232] GetFileSizeEx (in: hFile=0x114, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=16560) returned 1
	[0266.232] CloseHandle (hObject=0x114) returned 1
	[0266.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png")) returned 0x2020
	[0266.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png")) returned 0x2020
	[0266.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.233] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x114
	[0266.233] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0266.233] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0266.233] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x254
	[0266.234] ReadFile (in: hFile=0x114, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x40b0, lpOverlapped=0x0) returned 1
	[0266.235] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x40c0, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x40c0, lpOverlapped=0x0) returned 1
	[0266.237] WriteFile (in: hFile=0x254, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x122, lpOverlapped=0x0) returned 1
	[0266.237] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0266.237] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0266.237] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x40b0, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x40b0, lpOverlapped=0x0) returned 1
	[0266.237] FlushFileBuffers (hFile=0x114) returned 1
	[0266.393] FlushFileBuffers (hFile=0x254) returned 1
	[0266.401] CloseHandle (hObject=0x114) returned 1
	[0266.401] CloseHandle (hObject=0x254) returned 1
	[0266.404] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png")) returned 1
	[0266.405] SetEvent (hEvent=0xfc) returned 1
	[0266.405] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x254
	[0266.545] GetFileSizeEx (in: hFile=0x254, lpFileSize=0x34afad0 | out: lpFileSize=0x34afad0*=115554) returned 1
	[0266.548] CloseHandle (hObject=0x254) returned 1
	[0266.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png")) returned 0x2020
	[0266.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png")) returned 0x2020
	[0266.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0266.556] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x20c
	[0266.557] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0266.557] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34afa98 | out: lpNewFilePointer=0x0) returned 1
	[0266.557] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x114
	[0266.558] ReadFile (in: hFile=0x20c, lpBuffer=0x3900020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x34afaac, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesRead=0x34afaac*=0x1c362, lpOverlapped=0x0) returned 1
	[0266.587] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c370, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x1c370, lpOverlapped=0x0) returned 1
	[0266.590] WriteFile (in: hFile=0x114, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x34afa84, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34afa84*=0x122, lpOverlapped=0x0) returned 1
	[0266.590] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0266.590] SetFilePointerEx (in: hFile=0x20c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34af7f8 | out: lpNewFilePointer=0x0) returned 1
	[0266.590] WriteFile (in: hFile=0x20c, lpBuffer=0x3900020*, nNumberOfBytesToWrite=0x1c362, lpNumberOfBytesWritten=0x34af804, lpOverlapped=0x0 | out: lpBuffer=0x3900020*, lpNumberOfBytesWritten=0x34af804*=0x1c362, lpOverlapped=0x0) returned 1
	[0266.591] FlushFileBuffers (hFile=0x20c) returned 1
	[0266.779] FlushFileBuffers (hFile=0x114) 

Thread:
	id = 56
	os_tid = 0x72c

	[0133.101] GetProcessHeap () returned 0x800000
	[0133.101] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3532380
	[0133.101] GetProcessHeap () returned 0x800000
	[0133.101] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x10000) returned 0x3542388
	[0133.102] GetProcessHeap () returned 0x800000
	[0133.102] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x28) returned 0x837f58
	[0133.102] GetProcessHeap () returned 0x800000
	[0133.102] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x110102) returned 0x3a20020
	[0133.102] GetProcessHeap () returned 0x800000
	[0133.102] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x50) returned 0x34d11d8
	[0133.102] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0133.102] GetProcAddress (hModule=0x76300000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7632d650
	[0133.102] Wow64DisableWow64FsRedirection (in: OldValue=0x36bfc40 | out: OldValue=0x36bfc40*=0x0) returned 1
	[0133.102] GetProcessHeap () returned 0x800000
	[0133.102] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x34d11d8 | out: hHeap=0x800000) returned 1
	[0133.102] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.102] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.102] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.102] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.103] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.104] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.105] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.106] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.106] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.106] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.106] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.106] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.106] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.106] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.106] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.106] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.106] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.106] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.107] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.108] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.109] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.110] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.111] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.112] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.113] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.114] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.115] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.116] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.117] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.118] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.119] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.120] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.121] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.121] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.121] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.121] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.121] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.121] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.121] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0133.121] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0205.009] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0222.558] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x24c
	[0222.778] GetFileSizeEx (in: hFile=0x24c, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=0) returned 1
	[0222.778] CloseHandle (hObject=0x24c) returned 1
	[0222.778] ResetEvent (hEvent=0x110) returned 1
	[0222.778] SetEvent (hEvent=0x114) returned 1
	[0222.778] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x24c
	[0222.779] GetFileSizeEx (in: hFile=0x24c, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=1208199) returned 1
	[0222.779] CloseHandle (hObject=0x24c) returned 1
	[0222.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db")) returned 0x2022
	[0222.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db")) returned 0x2022
	[0222.779] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0222.779] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x24c
	[0222.779] SetFilePointerEx (in: hFile=0x24c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0222.779] SetFilePointerEx (in: hFile=0x24c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0222.779] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2022, hTemplateFile=0x0) returned 0x250
	[0222.790] ReadFile (in: hFile=0x24c, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x110100, lpOverlapped=0x0) returned 1
	[0222.899] WriteFile (in: hFile=0x250, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x110100, lpOverlapped=0x0) returned 1
	[0222.920] ReadFile (in: hFile=0x24c, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x16e87, lpOverlapped=0x0) returned 1
	[0222.922] WriteFile (in: hFile=0x250, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x16e90, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x16e90, lpOverlapped=0x0) returned 1
	[0222.923] WriteFile (in: hFile=0x250, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0xf2, lpOverlapped=0x0) returned 1
	[0222.923] SetFilePointerEx (in: hFile=0x24c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0222.923] SetFilePointerEx (in: hFile=0x24c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0222.924] WriteFile (in: hFile=0x24c, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x110102, lpOverlapped=0x0) returned 1
	[0222.928] WriteFile (in: hFile=0x24c, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x16e85, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x16e85, lpOverlapped=0x0) returned 1
	[0222.929] FlushFileBuffers (hFile=0x24c) returned 1
	[0223.210] FlushFileBuffers (hFile=0x250) returned 1
	[0223.265] CloseHandle (hObject=0x24c) returned 1
	[0223.265] CloseHandle (hObject=0x250) returned 1
	[0223.266] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db")) returned 1
	[0223.275] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0223.353] ResetEvent (hEvent=0x110) returned 1
	[0223.353] SetEvent (hEvent=0x114) returned 1
	[0223.353] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0223.353] GetFileSizeEx (in: hFile=0x270, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=16384) returned 1
	[0223.353] CloseHandle (hObject=0x270) returned 1
	[0223.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db")) returned 0x2020
	[0223.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db")) returned 0x2020
	[0223.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.354] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x270
	[0223.354] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.354] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.354] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x24c
	[0223.355] ReadFile (in: hFile=0x270, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x4000, lpOverlapped=0x0) returned 1
	[0223.356] WriteFile (in: hFile=0x24c, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x4010, lpOverlapped=0x0) returned 1
	[0223.357] WriteFile (in: hFile=0x24c, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0xf2, lpOverlapped=0x0) returned 1
	[0223.357] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0223.357] SetFilePointerEx (in: hFile=0x270, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0223.357] WriteFile (in: hFile=0x270, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x4000, lpOverlapped=0x0) returned 1
	[0223.357] FlushFileBuffers (hFile=0x270) returned 1
	[0223.361] FlushFileBuffers (hFile=0x24c) returned 1
	[0223.363] CloseHandle (hObject=0x270) returned 1
	[0223.363] CloseHandle (hObject=0x24c) returned 1
	[0223.363] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db")) returned 1
	[0223.367] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0223.367] ResetEvent (hEvent=0x110) returned 1
	[0223.367] SetEvent (hEvent=0x114) returned 1
	[0223.368] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0223.368] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=130432) returned 1
	[0223.368] CloseHandle (hObject=0x230) returned 1
	[0223.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db")) returned 0x2020
	[0223.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db")) returned 0x2020
	[0223.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.369] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0223.369] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.369] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.369] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0223.369] ReadFile (in: hFile=0x230, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x1fd80, lpOverlapped=0x0) returned 1
	[0223.380] WriteFile (in: hFile=0x274, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x1fd90, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x1fd90, lpOverlapped=0x0) returned 1
	[0223.383] WriteFile (in: hFile=0x274, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x162, lpOverlapped=0x0) returned 1
	[0223.383] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0223.383] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0223.383] WriteFile (in: hFile=0x230, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x1fd80, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x1fd80, lpOverlapped=0x0) returned 1
	[0223.384] FlushFileBuffers (hFile=0x230) returned 1
	[0223.388] FlushFileBuffers (hFile=0x274) returned 1
	[0223.393] CloseHandle (hObject=0x230) returned 1
	[0223.393] CloseHandle (hObject=0x274) returned 1
	[0223.393] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db")) returned 0
	[0223.393] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0223.394] ResetEvent (hEvent=0x110) returned 1
	[0223.394] SetEvent (hEvent=0x114) returned 1
	[0223.395] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0223.395] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=24) returned 1
	[0223.395] CloseHandle (hObject=0x274) returned 1
	[0223.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db")) returned 0x2020
	[0223.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db")) returned 0x2020
	[0223.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.395] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0223.395] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.395] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.396] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0223.396] ReadFile (in: hFile=0x274, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x18, lpOverlapped=0x0) returned 1
	[0223.397] WriteFile (in: hFile=0x230, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x20, lpOverlapped=0x0) returned 1
	[0223.398] WriteFile (in: hFile=0x230, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x102, lpOverlapped=0x0) returned 1
	[0223.398] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0223.398] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0223.398] WriteFile (in: hFile=0x274, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x18, lpOverlapped=0x0) returned 1
	[0223.398] FlushFileBuffers (hFile=0x274) returned 1
	[0223.484] FlushFileBuffers (hFile=0x230) returned 1
	[0223.486] CloseHandle (hObject=0x274) returned 1
	[0223.486] CloseHandle (hObject=0x230) returned 1
	[0223.486] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db")) returned 1
	[0223.487] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0223.487] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=24) returned 1
	[0223.487] CloseHandle (hObject=0x230) returned 1
	[0223.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db")) returned 0x2020
	[0223.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db")) returned 0x2020
	[0223.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.487] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0223.487] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.488] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.488] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0223.488] ReadFile (in: hFile=0x230, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x18, lpOverlapped=0x0) returned 1
	[0223.489] WriteFile (in: hFile=0x274, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x20, lpOverlapped=0x0) returned 1
	[0223.490] WriteFile (in: hFile=0x274, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x102, lpOverlapped=0x0) returned 1
	[0223.490] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0223.490] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0223.490] WriteFile (in: hFile=0x230, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x18, lpOverlapped=0x0) returned 1
	[0223.490] FlushFileBuffers (hFile=0x230) returned 1
	[0223.561] FlushFileBuffers (hFile=0x274) returned 1
	[0223.589] CloseHandle (hObject=0x230) returned 1
	[0223.590] CloseHandle (hObject=0x274) returned 1
	[0223.590] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db")) returned 1
	[0223.590] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0223.591] GetFileSizeEx (in: hFile=0x274, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=1048576) returned 1
	[0223.591] CloseHandle (hObject=0x274) returned 1
	[0223.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db")) returned 0x2020
	[0223.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db")) returned 0x2020
	[0223.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.591] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
	[0223.591] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.592] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.592] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x230
	[0223.592] ReadFile (in: hFile=0x274, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x100000, lpOverlapped=0x0) returned 1
	[0223.614] WriteFile (in: hFile=0x230, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x100010, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x100010, lpOverlapped=0x0) returned 1
	[0223.655] WriteFile (in: hFile=0x230, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x102, lpOverlapped=0x0) returned 1
	[0223.659] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0223.660] SetFilePointerEx (in: hFile=0x274, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0223.661] WriteFile (in: hFile=0x274, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x100000, lpOverlapped=0x0) returned 1
	[0223.731] FlushFileBuffers (hFile=0x274) returned 1
	[0223.771] FlushFileBuffers (hFile=0x230) returned 1
	[0223.776] CloseHandle (hObject=0x274) returned 1
	[0223.776] CloseHandle (hObject=0x230) returned 1
	[0223.776] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db")) returned 1
	[0223.776] ResetEvent (hEvent=0x110) returned 1
	[0223.776] SetEvent (hEvent=0x114) returned 1
	[0223.777] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0223.777] GetFileSizeEx (in: hFile=0x230, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=24) returned 1
	[0223.777] CloseHandle (hObject=0x230) returned 1
	[0223.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db")) returned 0x2020
	[0223.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db")) returned 0x2020
	[0223.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.777] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x230
	[0223.778] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.778] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.778] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0223.778] ReadFile (in: hFile=0x230, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x18, lpOverlapped=0x0) returned 1
	[0223.779] WriteFile (in: hFile=0x274, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x20, lpOverlapped=0x0) returned 1
	[0223.780] WriteFile (in: hFile=0x274, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x102, lpOverlapped=0x0) returned 1
	[0223.780] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0223.780] SetFilePointerEx (in: hFile=0x230, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0223.780] WriteFile (in: hFile=0x230, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x18, lpOverlapped=0x0) returned 1
	[0223.780] FlushFileBuffers (hFile=0x230) returned 1
	[0223.869] FlushFileBuffers (hFile=0x274) returned 1
	[0223.870] CloseHandle (hObject=0x230) returned 1
	[0223.870] CloseHandle (hObject=0x274) returned 1
	[0223.871] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db")) returned 1
	[0223.871] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0223.986] ResetEvent (hEvent=0x110) returned 1
	[0223.986] SetEvent (hEvent=0x114) returned 1
	[0223.986] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x284
	[0223.987] GetFileSizeEx (in: hFile=0x284, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=262144) returned 1
	[0223.987] CloseHandle (hObject=0x284) returned 1
	[0223.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite")) returned 0x2020
	[0223.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite")) returned 0x2020
	[0223.987] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0223.987] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x284
	[0223.987] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.987] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0223.987] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x274
	[0223.988] ReadFile (in: hFile=0x284, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x40000, lpOverlapped=0x0) returned 1
	[0223.995] WriteFile (in: hFile=0x274, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x40010, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x40010, lpOverlapped=0x0) returned 1
	[0224.001] WriteFile (in: hFile=0x274, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0xf2, lpOverlapped=0x0) returned 1
	[0224.001] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0224.001] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0224.001] WriteFile (in: hFile=0x284, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x40000, lpOverlapped=0x0) returned 1
	[0224.002] FlushFileBuffers (hFile=0x284) returned 1
	[0224.011] FlushFileBuffers (hFile=0x274) returned 1
	[0224.014] CloseHandle (hObject=0x284) returned 1
	[0224.014] CloseHandle (hObject=0x274) returned 1
	[0224.015] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite")) returned 1
	[0224.017] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0230.495] ResetEvent (hEvent=0x110) returned 1
	[0230.495] SetEvent (hEvent=0x114) returned 1
	[0230.495] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x258
	[0230.496] GetFileSizeEx (in: hFile=0x258, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=65536) returned 1
	[0230.496] CloseHandle (hObject=0x258) returned 1
	[0230.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db")) returned 0x2020
	[0230.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db")) returned 0x2020
	[0230.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0230.496] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x258
	[0230.497] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0230.497] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0230.497] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x248
	[0230.497] ReadFile (in: hFile=0x258, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x10000, lpOverlapped=0x0) returned 1
	[0230.499] WriteFile (in: hFile=0x248, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x10010, lpOverlapped=0x0) returned 1
	[0230.501] WriteFile (in: hFile=0x248, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0xf2, lpOverlapped=0x0) returned 1
	[0230.502] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0230.502] SetFilePointerEx (in: hFile=0x258, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0230.502] WriteFile (in: hFile=0x258, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x10000, lpOverlapped=0x0) returned 1
	[0230.502] FlushFileBuffers (hFile=0x258) returned 1
	[0230.507] FlushFileBuffers (hFile=0x248) returned 1
	[0230.522] CloseHandle (hObject=0x258) returned 1
	[0230.522] CloseHandle (hObject=0x248) returned 1
	[0230.522] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db")) returned 1
	[0230.524] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0230.524] ResetEvent (hEvent=0x110) returned 1
	[0230.525] SetEvent (hEvent=0x114) returned 1
	[0230.525] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0230.526] GetFileSizeEx (in: hFile=0x248, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=524288) returned 1
	[0230.526] CloseHandle (hObject=0x248) returned 1
	[0230.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite")) returned 0x2020
	[0230.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite")) returned 0x2020
	[0230.526] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0230.526] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0230.526] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0230.526] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0230.526] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x258
	[0230.527] ReadFile (in: hFile=0x248, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x80000, lpOverlapped=0x0) returned 1
	[0230.539] WriteFile (in: hFile=0x258, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x80010, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x80010, lpOverlapped=0x0) returned 1
	[0230.550] WriteFile (in: hFile=0x258, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0xf2, lpOverlapped=0x0) returned 1
	[0230.551] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0230.551] SetFilePointerEx (in: hFile=0x248, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0230.551] WriteFile (in: hFile=0x248, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x80000, lpOverlapped=0x0) returned 1
	[0230.552] FlushFileBuffers (hFile=0x248) returned 1
	[0230.854] FlushFileBuffers (hFile=0x258) returned 1
	[0230.857] CloseHandle (hObject=0x248) returned 1
	[0231.047] CloseHandle (hObject=0x258) returned 1
	[0231.073] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite")) returned 1
	[0231.122] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0231.123] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=458752) returned 1
	[0231.123] CloseHandle (hObject=0x228) returned 1
	[0231.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite")) returned 0x2020
	[0231.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite")) returned 0x2020
	[0231.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0231.123] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0231.123] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0231.123] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0231.123] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x258
	[0231.124] ReadFile (in: hFile=0x228, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x70000, lpOverlapped=0x0) returned 1
	[0231.132] WriteFile (in: hFile=0x258, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x70010, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x70010, lpOverlapped=0x0) returned 1
	[0231.140] WriteFile (in: hFile=0x258, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x102, lpOverlapped=0x0) returned 1
	[0231.140] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0231.140] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0231.140] WriteFile (in: hFile=0x228, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x70000, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x70000, lpOverlapped=0x0) returned 1
	[0231.141] FlushFileBuffers (hFile=0x228) returned 1
	[0231.791] FlushFileBuffers (hFile=0x258) returned 1
	[0232.146] CloseHandle (hObject=0x228) returned 1
	[0232.301] CloseHandle (hObject=0x258) returned 1
	[0232.301] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite")) returned 1
	[0232.374] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0232.376] GetFileSizeEx (in: hFile=0x228, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=65536) returned 1
	[0232.376] CloseHandle (hObject=0x228) returned 1
	[0232.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite")) returned 0x2020
	[0232.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite")) returned 0x2020
	[0232.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0232.376] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x228
	[0232.376] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0232.376] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0232.376] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x278
	[0232.377] ReadFile (in: hFile=0x228, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x10000, lpOverlapped=0x0) returned 1
	[0232.382] WriteFile (in: hFile=0x278, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x10010, lpOverlapped=0x0) returned 1
	[0232.384] WriteFile (in: hFile=0x278, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x102, lpOverlapped=0x0) returned 1
	[0232.384] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0232.384] SetFilePointerEx (in: hFile=0x228, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0232.384] WriteFile (in: hFile=0x228, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x10000, lpOverlapped=0x0) returned 1
	[0232.385] FlushFileBuffers (hFile=0x228) returned 1
	[0232.934] FlushFileBuffers (hFile=0x278) returned 1
	[0233.181] CloseHandle (hObject=0x228) returned 1
	[0233.182] CloseHandle (hObject=0x278) returned 1
	[0233.182] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite")) returned 1
	[0233.183] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0233.280] GetFileSizeEx (in: hFile=0x278, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=16384) returned 1
	[0233.280] CloseHandle (hObject=0x278) returned 1
	[0233.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db")) returned 0x2020
	[0233.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db")) returned 0x2020
	[0233.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0233.281] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x278
	[0233.281] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0233.281] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0233.281] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x228
	[0233.281] ReadFile (in: hFile=0x278, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x4000, lpOverlapped=0x0) returned 1
	[0233.283] WriteFile (in: hFile=0x228, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x4010, lpOverlapped=0x0) returned 1
	[0233.284] WriteFile (in: hFile=0x228, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0xf2, lpOverlapped=0x0) returned 1
	[0233.284] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0233.285] SetFilePointerEx (in: hFile=0x278, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0233.285] WriteFile (in: hFile=0x278, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x4000, lpOverlapped=0x0) returned 1
	[0233.285] FlushFileBuffers (hFile=0x278) returned 1
	[0233.570] FlushFileBuffers (hFile=0x228) returned 1
	[0233.829] CloseHandle (hObject=0x278) returned 1
	[0233.830] CloseHandle (hObject=0x228) returned 1
	[0233.830] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db")) returned 1
	[0233.831] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0233.883] GetFileSizeEx (in: hFile=0x23c, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=327680) returned 1
	[0233.883] CloseHandle (hObject=0x23c) returned 1
	[0233.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite")) returned 0x2020
	[0233.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite")) returned 0x2020
	[0233.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0233.883] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23c
	[0233.884] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0233.884] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0233.884] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x234
	[0233.884] ReadFile (in: hFile=0x23c, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x50000, lpOverlapped=0x0) returned 1
	[0233.891] WriteFile (in: hFile=0x234, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x50010, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x50010, lpOverlapped=0x0) returned 1
	[0233.897] WriteFile (in: hFile=0x234, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0xf2, lpOverlapped=0x0) returned 1
	[0233.897] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0233.897] SetFilePointerEx (in: hFile=0x23c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0233.897] WriteFile (in: hFile=0x23c, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x50000, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x50000, lpOverlapped=0x0) returned 1
	[0233.899] FlushFileBuffers (hFile=0x23c) returned 1
	[0234.120] FlushFileBuffers (hFile=0x234) returned 1
	[0234.235] CloseHandle (hObject=0x23c) returned 1
	[0234.251] CloseHandle (hObject=0x234) returned 1
	[0234.253] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite")) returned 1
	[0234.313] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0234.321] GetFileSizeEx (in: hFile=0x234, lpFileSize=0x36bfbe8 | out: lpFileSize=0x36bfbe8*=98304) returned 1
	[0234.321] CloseHandle (hObject=0x234) returned 1
	[0234.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite")) returned 0x2020
	[0234.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite")) returned 0x2020
	[0234.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame")) returned 0xffffffff
	[0234.327] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234
	[0234.330] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0234.330] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bfbb0 | out: lpNewFilePointer=0x0) returned 1
	[0234.331] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite.id[9C354B42-2275].[recovermyfiles2019@thesecure.biz].Adame" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite.id[9c354b42-2275].[recovermyfiles2019@thesecure.biz].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x2020, hTemplateFile=0x0) returned 0x260
	[0234.331] ReadFile (in: hFile=0x234, lpBuffer=0x3a20020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36bfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesRead=0x36bfbc4*=0x18000, lpOverlapped=0x0) returned 1
	[0234.342] WriteFile (in: hFile=0x260, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x18010, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x18010, lpOverlapped=0x0) returned 1
	[0234.344] WriteFile (in: hFile=0x260, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36bfb9c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bfb9c*=0x102, lpOverlapped=0x0) returned 1
	[0234.344] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0234.344] SetFilePointerEx (in: hFile=0x234, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36bf910 | out: lpNewFilePointer=0x0) returned 1
	[0234.344] WriteFile (in: hFile=0x234, lpBuffer=0x3a20020*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x36bf91c, lpOverlapped=0x0 | out: lpBuffer=0x3a20020*, lpNumberOfBytesWritten=0x36bf91c*=0x18000, lpOverlapped=0x0) returned 1
	[0234.345] FlushFileBuffers (hFile=0x234) returned 1
	[0234.970] FlushFileBuffers (hFile=0x260) returned 1
	[0235.962] CloseHandle (hObject=0x234) returned 1
	[0235.962] CloseHandle (hObject=0x260) returned 1
	[0235.962] DeleteFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite")) returned 1
	[0235.964] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xffffffff) returned 0x0
	[0238.078] GetProcessHeap () returned 0x800000
	[0238.078] RtlAllocateHeap (HeapHandle=0x800000, Flags=0x0, Size=0x50) returned 0x8e05b0
	[0238.078] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0238.078] GetProcAddress (hModule=0x76300000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7632d668
	[0238.078] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1
	[0238.078] GetProcessHeap () returned 0x800000
	[0238.078] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x8e05b0 | out: hHeap=0x800000) returned 1
	[0238.079] SetEvent (hEvent=0x110) returned 1
	[0238.079] SetEvent (hEvent=0x10c) returned 1
	[0238.079] SetEvent (hEvent=0x114) returned 1
	[0238.079] GetProcessHeap () returned 0x800000
	[0238.079] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3a20020 | out: hHeap=0x800000) returned 1
	[0238.083] GetProcessHeap () returned 0x800000
	[0238.083] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x837f58 | out: hHeap=0x800000) returned 1
	[0238.083] GetProcessHeap () returned 0x800000
	[0238.083] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3532380 | out: hHeap=0x800000) returned 1
	[0238.084] GetProcessHeap () returned 0x800000
	[0238.084] HeapFree (in: hHeap=0x800000, dwFlags=0x0, lpMem=0x3542388 | out: hHeap=0x800000) returned 1

Thread:
	id = 57
	os_tid = 0x1d4


Thread:
	id = 58
	os_tid = 0x360


Thread:
	id = 65
	os_tid = 0x77c


Thread:
	id = 66
	os_tid = 0x248


Thread:
	id = 93
	os_tid = 0x3c8


Thread:
	id = 146
	os_tid = 0x784


Process:
	id = "10"
	image_name = "rsfd234df.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"
	page_root = "0x3bf50000"
	os_pid = "0x778"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "9"
	os_parent_pid = "0x30c"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\""
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 32
	os_tid = 0x780

	[0125.581] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x20f7e8 | out: lpSystemTimeAsFileTime=0x20f7e8*(dwLowDateTime=0x2c7b3540, dwHighDateTime=0x1d57294)) 
	[0125.581] GetCurrentThreadId () returned 0x780
	[0125.581] GetCurrentProcessId () returned 0x778
	[0125.581] QueryPerformanceCounter (in: lpPerformanceCount=0x20f7e0 | out: lpPerformanceCount=0x20f7e0*=9126603669) returned 1
	[0125.582] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0125.582] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0125.582] GetLastError () returned 0x57
	[0125.582] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x757a0000
	[0125.583] GetProcAddress (hModule=0x757a0000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0125.583] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0125.583] GetLastError () returned 0x57
	[0125.583] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0125.584] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0125.584] GetLastError () returned 0x57
	[0125.584] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76300000
	[0125.584] GetProcAddress (hModule=0x76300000, lpProcName="FlsAlloc") returned 0x76314f2b
	[0125.584] GetProcAddress (hModule=0x76300000, lpProcName="FlsSetValue") returned 0x76314208
	[0125.584] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0125.585] GetLastError () returned 0x57
	[0125.585] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x757a0000
	[0125.585] GetProcAddress (hModule=0x757a0000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0125.585] GetProcessHeap () returned 0x690000
	[0125.585] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0125.585] GetLastError () returned 0x57
	[0125.585] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0125.585] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0125.585] GetLastError () returned 0x57
	[0125.585] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76300000
	[0125.585] GetProcAddress (hModule=0x76300000, lpProcName="FlsAlloc") returned 0x76314f2b
	[0125.586] GetLastError () returned 0x57
	[0125.586] GetProcAddress (hModule=0x76300000, lpProcName="FlsGetValue") returned 0x76311252
	[0125.586] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x364) returned 0x6a8330
	[0125.586] GetProcAddress (hModule=0x76300000, lpProcName="FlsSetValue") returned 0x76314208
	[0125.586] SetLastError (dwErrCode=0x57) 
	[0125.586] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xc00) returned 0x6a86a0
	[0125.587] GetStartupInfoW (in: lpStartupInfo=0x20f710 | out: lpStartupInfo=0x20f710*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xd98da0, hStdOutput=0x32a8c983, hStdError=0xfffffffe)) 
	[0125.587] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0125.587] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0125.587] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0125.587] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\""
	[0125.587] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\""
	[0125.587] GetLastError () returned 0x57
	[0125.587] SetLastError (dwErrCode=0x57) 
	[0125.587] GetLastError () returned 0x57
	[0125.587] SetLastError (dwErrCode=0x57) 
	[0125.588] GetACP () returned 0x4e4
	[0125.588] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x220) returned 0x6a7fe8
	[0125.588] IsValidCodePage (CodePage=0x4e4) returned 1
	[0125.588] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x20f740 | out: lpCPInfo=0x20f740) returned 1
	[0125.588] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x20f008 | out: lpCPInfo=0x20f008) returned 1
	[0125.588] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x20f61c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0125.588] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x20f61c, cbMultiByte=256, lpWideCharStr=0x20eda8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ췋ÙĀ") returned 256
	[0125.588] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ췋ÙĀ", cchSrc=256, lpCharType=0x20f01c | out: lpCharType=0x20f01c) returned 1
	[0125.588] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x20f61c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0125.588] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x20f61c, cbMultiByte=256, lpWideCharStr=0x20ed58, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÙĀ") returned 256
	[0125.588] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0125.588] GetLastError () returned 0x57
	[0125.588] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0125.588] GetProcAddress (hModule=0x76300000, lpProcName="LCMapStringEx") returned 0x763947f1
	[0125.588] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÙĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0125.588] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÙĀ", cchSrc=256, lpDestStr=0x20eb48, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0125.588] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x20f51c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿk¬R2X÷ ", lpUsedDefaultChar=0x0) returned 256
	[0125.589] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x20f61c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0125.589] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x20f61c, cbMultiByte=256, lpWideCharStr=0x20ed78, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0125.589] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0125.589] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x20eb68, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
	[0125.589] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x20f41c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿk¬R2X÷ ", lpUsedDefaultChar=0x0) returned 256
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x80) returned 0x6a8210
	[0125.589] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xdac2a0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x7c) returned 0x6aa2a8
	[0125.589] RtlInitializeSListHead (in: ListHead=0xdabe98 | out: ListHead=0xdabe98) 
	[0125.589] GetLastError () returned 0x0
	[0125.589] SetLastError (dwErrCode=0x0) 
	[0125.589] GetEnvironmentStringsW () returned 0x6aa330*
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0xb02) returned 0x6aae40
	[0125.589] FreeEnvironmentStringsW (penv=0x6aa330) returned 1
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x9c) returned 0x6ab950
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x3e) returned 0x6a6268
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x6c) returned 0x6ab9f8
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x6e) returned 0x6aba70
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x78) returned 0x69f500
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x62) returned 0x6abae8
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x2e) returned 0x6abb58
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x48) returned 0x6abb90
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x28) returned 0x6abbe0
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1a) returned 0x6a9c78
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x4a) returned 0x6abc10
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x72) returned 0x69f580
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x30) returned 0x6abc68
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x2e) returned 0x6abca0
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1c) returned 0x6a9ca0
	[0125.589] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xd2) returned 0x6abcd8
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x7c) returned 0x6abdb8
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x36) returned 0x6abe40
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x3a) returned 0x6a62b0
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x90) returned 0x6abe80
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x24) returned 0x6abf18
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x30) returned 0x6abf48
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x36) returned 0x6abf80
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x48) returned 0x6aa330
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x52) returned 0x6aa380
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x3c) returned 0x6a62f8
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x82) returned 0x6aa3e0
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x2e) returned 0x6aa470
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x28) returned 0x6aa4a8
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1e) returned 0x6a9cc8
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x2c) returned 0x6aa4d8
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x54) returned 0x6aa510
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x52) returned 0x6aa570
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x2a) returned 0x6aa5d0
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x3c) returned 0x6a6340
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x54) returned 0x6aa608
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x24) returned 0x6aa668
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x30) returned 0x6aa698
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x8c) returned 0x6aa6d0
	[0125.590] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aae40 | out: hHeap=0x690000) returned 1
	[0125.590] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x800) returned 0x6aa768
	[0125.590] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0125.590] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xd9897a) returned 0x0
	[0125.591] GetStartupInfoW (in: lpStartupInfo=0x20f778 | out: lpStartupInfo=0x20f778*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0125.593] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0xc74c9b0) returned 0x21c0020
	[0129.386] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x21c0020 | out: hHeap=0x690000) returned 1
	[0130.556] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.556] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.556] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xa8
	[0130.556] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa8
	[0130.559] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.559] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.559] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.559] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.559] Process32First (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0130.559] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.559] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.559] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.560] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.560] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0130.560] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.560] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.560] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.560] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.560] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0130.561] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.561] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.561] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.561] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.561] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0130.561] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.562] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.562] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.562] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.562] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0130.562] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.562] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.562] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.562] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.563] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0130.563] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.563] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.563] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.563] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.563] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0130.564] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.564] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.564] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.564] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.564] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0130.565] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.565] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.565] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.565] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.565] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0130.565] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.565] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.565] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.566] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.566] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0130.566] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.566] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.566] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.566] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.566] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.567] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.567] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.567] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.567] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.567] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.567] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.567] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.568] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.568] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.568] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.568] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.568] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.568] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.568] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.568] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.569] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.569] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.569] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.569] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.569] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.570] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.570] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.570] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.570] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.570] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0130.570] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.570] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.570] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.571] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.571] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.571] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.571] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.571] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.571] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.571] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0130.572] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.572] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.572] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.572] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.572] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.572] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.572] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.573] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.573] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.573] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0130.573] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.573] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.573] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.573] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.573] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0130.574] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.574] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.574] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.574] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.574] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.574] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.575] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.575] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.575] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.575] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0130.575] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.575] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.575] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.576] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.576] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0130.576] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.576] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.576] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.576] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.576] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0130.577] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.577] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.577] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.577] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.577] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0130.577] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.577] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.577] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.578] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.578] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.578] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.578] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.578] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.578] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.578] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.581] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.582] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.582] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.582] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.582] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.582] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.582] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.582] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.583] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.583] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.583] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.583] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.583] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.583] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.583] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.584] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.584] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.584] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.584] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.584] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.584] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.584] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.585] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.585] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.585] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x330, pcPriClassBase=8, dwFlags=0x0, szExeFile="WerFault.exe")) returned 1
	[0130.585] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.585] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.585] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.585] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0130.585] Process32Next (in: hSnapshot=0xa8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x2094b8, pcPriClassBase=6941320, dwFlags=0x69eac4, szExeFile="??? ??? ?i?I? ? ")) returned 0
	[0130.586] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.586] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.586] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.586] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xac
	[0130.587] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xac
	[0130.588] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.588] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.588] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.588] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.588] Process32First (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0130.588] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.588] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.589] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.589] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.589] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0130.589] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.589] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.589] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.589] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.589] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0130.590] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.590] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.590] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.590] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.590] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0130.591] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.591] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.591] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.591] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.591] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0130.591] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.591] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.591] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.592] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.592] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0130.592] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.592] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.592] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.592] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.592] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0130.593] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.593] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.593] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.593] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.593] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0130.593] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.593] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.594] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.594] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.594] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0130.594] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.594] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.594] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.595] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.595] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0130.595] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.595] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.595] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.595] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.595] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.596] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.596] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.596] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.596] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.596] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.596] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.597] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.597] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.597] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.597] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.597] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.597] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.597] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.598] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.598] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.598] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.598] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.598] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.598] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.598] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.599] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.599] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.599] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.599] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.599] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0130.599] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.599] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.599] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.600] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.600] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.600] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.600] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.600] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.600] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.600] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0130.601] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.601] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.601] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.601] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.601] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.601] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.602] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.602] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.602] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.602] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0130.602] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.602] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.602] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.603] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.603] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0130.603] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.603] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.603] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.603] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.603] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.604] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.604] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.604] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.604] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.604] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0130.604] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.604] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.604] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.605] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.605] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0130.605] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.605] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.605] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.605] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.605] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0130.606] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.606] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.606] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.606] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.606] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0130.606] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.606] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.607] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.607] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.607] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.607] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.607] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.607] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.607] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.607] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.608] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.608] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.608] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.608] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.608] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.608] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.609] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.609] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.609] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.609] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.609] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.609] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.609] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.610] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.610] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.610] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.610] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.610] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.610] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.610] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.611] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.611] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.611] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.611] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.611] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x330, pcPriClassBase=8, dwFlags=0x0, szExeFile="WerFault.exe")) returned 1
	[0130.611] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.611] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.612] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0xe0000
	[0130.612] CallWindowProcW (lpPrevWndFunc=0xe0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0130.612] Process32Next (in: hSnapshot=0xac, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x2094b8, pcPriClassBase=6941320, dwFlags=0x69eac4, szExeFile="??? ??? ?i?I? ? ")) returned 0
	[0130.612] VirtualFree (lpAddress=0xe0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.615] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0130.615] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0xe0000
	[0130.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2, flAllocationType=0x3000, flProtect=0x4) returned 0xf0000
	[0130.615] VirtualAlloc (lpAddress=0x0, dwSize=0x5, flAllocationType=0x3000, flProtect=0x4) returned 0x100000
	[0130.615] VirtualAlloc (lpAddress=0x0, dwSize=0xd, flAllocationType=0x3000, flProtect=0x4) returned 0x210000
	[0130.615] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x220000
	[0130.615] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x2f0000
	[0130.616] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x300000
	[0130.616] VirtualAlloc (lpAddress=0x0, dwSize=0x3c, flAllocationType=0x3000, flProtect=0x4) returned 0x310000
	[0130.616] VirtualAlloc (lpAddress=0x0, dwSize=0x1, flAllocationType=0x3000, flProtect=0x4) returned 0x330000
	[0130.616] VirtualAlloc (lpAddress=0x0, dwSize=0xd200, flAllocationType=0x3000, flProtect=0x4) returned 0x340000
	[0130.616] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2095f4, nSize=0x103 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0130.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
	[0130.616] GetFileSize (in: hFile=0xb0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x49c53
	[0130.616] VirtualAlloc (lpAddress=0x0, dwSize=0x49c53, flAllocationType=0x3000, flProtect=0x4) returned 0x350000
	[0130.616] ReadFile (in: hFile=0xb0, lpBuffer=0x350000, nNumberOfBytesToRead=0x49c53, lpNumberOfBytesRead=0x209a0c, lpOverlapped=0x0 | out: lpBuffer=0x350000*, lpNumberOfBytesRead=0x209a0c*=0x49c53, lpOverlapped=0x0) returned 1
	[0130.620] VirtualAlloc (lpAddress=0x0, dwSize=0xd253, flAllocationType=0x3000, flProtect=0x4) returned 0x3a0000
	[0130.622] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.622] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x6
	[0130.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x100000, cbMultiByte=-1, lpWideCharStr=0x209f5c, cchWideChar=50 | out: lpWideCharStr="ymgyr") returned 6
	[0130.622] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.622] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2f, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.622] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xe
	[0130.622] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x210000, cbMultiByte=-1, lpWideCharStr=0x209fc0, cchWideChar=50 | out: lpWideCharStr="bpomwdckuqiso") returned 14
	[0130.623] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.623] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.623] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.623] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb4
	[0130.623] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb4
	[0130.624] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.624] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.624] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.625] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.625] Process32First (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0130.625] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.625] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.625] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.625] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.625] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0130.629] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.629] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.629] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.629] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.629] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0130.629] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.630] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.630] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.630] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.630] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0130.630] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.630] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.630] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.631] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.631] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0130.631] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.631] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.631] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.631] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.631] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0130.632] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.632] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.632] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.632] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.632] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0130.633] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.633] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.633] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.633] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.633] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0130.633] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.633] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.633] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.634] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.634] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0130.634] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.634] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.634] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.634] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.634] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0130.635] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.635] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.635] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.635] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.635] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.635] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.636] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.636] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.636] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.636] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.636] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.636] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.636] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.637] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.637] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.637] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.637] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.637] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.637] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.637] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.638] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.638] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.638] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.638] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.638] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.638] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.639] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.639] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.639] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.639] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0130.639] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.639] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.639] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.640] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.640] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.640] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.640] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.640] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.640] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.640] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0130.641] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.641] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.641] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.641] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.641] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.641] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.642] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.642] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.642] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.642] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0130.642] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.642] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.642] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.643] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.643] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0130.643] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.643] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.643] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.644] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.644] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.644] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.644] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.644] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.644] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.645] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0130.645] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.645] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.645] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.645] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.645] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0130.646] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.646] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.646] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.646] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.646] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0130.646] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.646] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.647] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.647] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.647] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0130.647] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.647] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.647] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.647] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.648] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.648] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.648] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.648] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.648] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.648] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.649] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.649] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.649] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.649] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.649] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.649] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.650] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.650] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.650] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.650] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.650] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.650] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.650] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.651] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.651] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.651] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.651] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.651] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.651] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.651] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.652] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.652] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.652] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.652] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.652] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x330, pcPriClassBase=8, dwFlags=0x0, szExeFile="WerFault.exe")) returned 1
	[0130.652] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.652] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.653] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.653] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0130.653] Process32Next (in: hSnapshot=0xb4, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x2094b8, pcPriClassBase=6941320, dwFlags=0x69eac4, szExeFile="??? ??? ?i?I? ? ")) returned 0
	[0130.653] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.653] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.653] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.653] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0xb8
	[0130.653] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb8
	[0130.655] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.655] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.655] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.655] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.655] Process32First (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0130.655] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.655] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.655] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.656] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.656] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x51, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0130.656] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.656] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.656] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.656] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.656] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0130.657] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.657] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.657] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.657] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.657] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0130.658] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.658] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.658] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.658] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.658] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0130.658] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.659] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.659] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.659] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.659] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0130.659] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.659] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.659] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.660] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.660] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0130.660] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.660] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.660] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.660] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.660] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0130.661] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.661] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.661] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.661] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.661] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0130.661] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.662] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.662] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.662] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.662] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
	[0130.662] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.662] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.662] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.663] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.663] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.663] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.663] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.663] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.663] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.663] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.664] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.664] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.664] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.664] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.664] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.664] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.664] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.665] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.665] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.665] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.665] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.665] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.665] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.666] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.666] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.666] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.666] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.666] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.666] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.666] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0130.667] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.667] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.667] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.667] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.667] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.667] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.668] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.668] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.668] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.668] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0130.668] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.668] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.668] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.669] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.669] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.669] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.669] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.669] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.669] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.669] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x494, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0130.670] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.670] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.670] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.670] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.670] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
	[0130.670] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.670] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.671] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.671] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.671] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.671] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.671] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.671] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.671] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.671] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x63c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
	[0130.672] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.672] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.672] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.672] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.672] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x740, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0130.674] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.674] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.674] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.675] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.675] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x740, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0130.675] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.675] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.675] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.675] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.675] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x550, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
	[0130.676] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.676] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.676] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.676] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.676] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7a8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.676] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.677] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.677] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.677] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.677] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x778, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.677] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.677] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.677] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.678] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.678] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x7a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.678] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.678] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.678] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.678] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.678] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.679] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.679] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.679] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.679] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.679] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x7c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="rsfd234df.exe")) returned 1
	[0130.679] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.679] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.680] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.680] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.680] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0130.680] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.680] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.680] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.680] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x1
	[0130.681] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x330, pcPriClassBase=8, dwFlags=0x0, szExeFile="WerFault.exe")) returned 1
	[0130.681] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.681] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.681] VirtualAlloc (lpAddress=0x0, dwSize=0x1b, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.681] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0130.681] Process32Next (in: hSnapshot=0xb8, lppe=0x209864 | out: lppe=0x209864*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x0, th32ParentProcessID=0x2094b8, pcPriClassBase=6941320, dwFlags=0x69eac4, szExeFile="??? ??? ?i?I? ? ")) returned 0
	[0130.682] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0130.682] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0130.682] VirtualAlloc (lpAddress=0x0, dwSize=0x16, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0130.682] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0130.682] Sleep (dwMilliseconds=0x1388) 
	[0135.837] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.837] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x209ac4, nSize=0x103 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0135.837] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0135.837] VirtualAlloc (lpAddress=0x0, dwSize=0x25, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0135.838] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x3c0000
	[0135.838] VirtualAlloc (lpAddress=0x0, dwSize=0x410, flAllocationType=0x3000, flProtect=0x4) returned 0x3c0000
	[0135.838] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0135.838] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\""
	[0135.838] CreateProcessW (in: lpApplicationName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe", lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x209960*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2099f8 | out: lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\"", lpProcessInformation=0x2099f8*(hProcess=0xc0, hThread=0xbc, dwProcessId=0x508, dwThreadId=0x5a8)) returned 1
	[0135.855] GetThreadContext (in: hThread=0xbc, lpContext=0x209694 | out: lpContext=0x209694*(ContextFlags=0x10007, Dr0=0x77dbfa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x209a1c, FloatSave.ErrorSelector=0x209854, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x8, [37]=0x97, [38]=0x20, [39]=0x0, [40]=0x88, [41]=0xea, [42]=0x69, [43]=0x0, [44]=0xc4, [45]=0xea, [46]=0x69, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0xe9, [51]=0x77, [52]=0x20, [53]=0x97, [54]=0x20, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0xdb, [59]=0x77, [60]=0x30, [61]=0x9a, [62]=0x20, [63]=0x0, [64]=0xb4, [65]=0xea, [66]=0x69, [67]=0x0, [68]=0x74, [69]=0x4e, [70]=0x49, [71]=0x0, [72]=0x54, [73]=0x98, [74]=0x20, [75]=0x0, [76]=0xb4, [77]=0x99, [78]=0x20, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xd98432, Ebp=0x0, Eip=0x77da01c4, SegCs=0x23, EFlags=0x202, Esp=0x19f990, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x3b, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0xda, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x95, [39]=0x75, [40]=0xd0, [41]=0x99, [42]=0x20, [43]=0x0, [44]=0xb8, [45]=0x97, [46]=0x20, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x9a, [54]=0x20, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0xdb, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x20, [67]=0x0, [68]=0xec, [69]=0x99, [70]=0x20, [71]=0x0, [72]=0xd4, [73]=0x97, [74]=0x20, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x1c, [81]=0x9a, [82]=0x20, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0xdb, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x50, [93]=0x98, [94]=0x20, [95]=0x0, [96]=0x90, [97]=0xe, [98]=0xc9, [99]=0x77, [100]=0x4, [101]=0x98, [102]=0x20, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0xdb, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0xec, [113]=0x99, [114]=0x20, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0xdb, [119]=0x77, [120]=0x54, [121]=0x98, [122]=0x20, [123]=0x0, [124]=0x48, [125]=0x98, [126]=0x20, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x34, [145]=0x97, [146]=0x20, [147]=0x0, [148]=0xec, [149]=0x99, [150]=0x20, [151]=0x0, [152]=0x78, [153]=0x99, [154]=0x20, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0xe0, [159]=0x77, [160]=0xc, [161]=0x24, [162]=0x32, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0xdc, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x1c, [181]=0x9a, [182]=0x20, [183]=0x0, [184]=0x88, [185]=0x99, [186]=0x20, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0xdc, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0xdb, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0xdc, [199]=0x77, [200]=0xdc, [201]=0x0, [202]=0xc9, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0xdb, [215]=0x77, [216]=0xd0, [217]=0x99, [218]=0x20, [219]=0x0, [220]=0x0, [221]=0x9a, [222]=0x20, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x98, [230]=0x20, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0xb4, [241]=0x99, [242]=0x20, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0x1c, [249]=0x9a, [250]=0x20, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x54, [257]=0x98, [258]=0x20, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x88, [265]=0xea, [266]=0x69, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0xda, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x96, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x96, [295]=0x75, [296]=0x9e, [297]=0xd6, [298]=0x90, [299]=0x32, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x3b, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0xda, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x95, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0xf4, [365]=0x98, [366]=0x20, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0xe0, [373]=0x98, [374]=0x20, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x3b, [387]=0x0, [388]=0x0, [389]=0x99, [390]=0x20, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x95, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x3c, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x30, [417]=0x99, [418]=0x20, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x3b, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xd8, [443]=0x75, [444]=0x4, [445]=0x0, [446]=0x3b, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x3b, [463]=0x0, [464]=0xa8, [465]=0x99, [466]=0x20, [467]=0x0, [468]=0x5c, [469]=0x99, [470]=0x20, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x3b, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0xa8, [481]=0x99, [482]=0x20, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xd8, [487]=0x75, [488]=0x51, [489]=0x6d, [490]=0xd8, [491]=0x75, [492]=0x62, [493]=0xd8, [494]=0x8f, [495]=0x32, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x3b, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0135.947] ReadProcessMemory (in: hProcess=0xc0, lpBaseAddress=0x7efde008, lpBuffer=0x2099f4, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2099f4*, lpNumberOfBytesRead=0x0) returned 1
	[0135.949] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0135.952] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0135.953] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x2094f4 | out: Wow64Process=0x2094f4) returned 1
	[0135.955] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0135.956] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0135.956] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0135.956] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x4c0000
	[0135.956] ReadFile (in: hFile=0xc8, lpBuffer=0x4c0000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x209530, lpOverlapped=0x0 | out: lpBuffer=0x4c0000*, lpNumberOfBytesRead=0x209530*=0x13b740, lpOverlapped=0x0) returned 1
	[0135.984] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xab0000
	[0136.134] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.137] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.137] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x2094c8 | out: Wow64Process=0x2094c8) returned 1
	[0136.140] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.140] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0136.140] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0136.140] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x4c0000
	[0136.141] ReadFile (in: hFile=0xc4, lpBuffer=0x4c0000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x209504, lpOverlapped=0x0 | out: lpBuffer=0x4c0000*, lpNumberOfBytesRead=0x209504*=0x13b740, lpOverlapped=0x0) returned 1
	[0136.265] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xab0000
	[0136.387] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.390] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.390] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x2094c8 | out: Wow64Process=0x2094c8) returned 1
	[0136.393] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.394] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0136.394] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0136.394] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x4c0000
	[0136.394] ReadFile (in: hFile=0xc4, lpBuffer=0x4c0000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x209504, lpOverlapped=0x0 | out: lpBuffer=0x4c0000*, lpNumberOfBytesRead=0x209504*=0x13b740, lpOverlapped=0x0) returned 1
	[0136.410] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xab0000
	[0136.581] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.584] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.584] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x209508 | out: Wow64Process=0x209508) returned 1
	[0136.587] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.587] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0136.587] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0136.588] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x4c0000
	[0136.588] ReadFile (in: hFile=0xc4, lpBuffer=0x4c0000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x209544, lpOverlapped=0x0 | out: lpBuffer=0x4c0000*, lpNumberOfBytesRead=0x209544*=0x13b740, lpOverlapped=0x0) returned 1
	[0136.599] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xab0000
	[0136.765] SetThreadContext (hThread=0xbc, lpContext=0x209694*(ContextFlags=0x10007, Dr0=0x77dbfa64, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x160014, FloatSave.ErrorOffset=0x209a1c, FloatSave.ErrorSelector=0x209854, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x8, [37]=0x97, [38]=0x20, [39]=0x0, [40]=0x88, [41]=0xea, [42]=0x69, [43]=0x0, [44]=0xc4, [45]=0xea, [46]=0x69, [47]=0x0, [48]=0x90, [49]=0x48, [50]=0xe9, [51]=0x77, [52]=0x20, [53]=0x97, [54]=0x20, [55]=0x0, [56]=0xf9, [57]=0xf9, [58]=0xdb, [59]=0x77, [60]=0x30, [61]=0x9a, [62]=0x20, [63]=0x0, [64]=0xb4, [65]=0xea, [66]=0x69, [67]=0x0, [68]=0x74, [69]=0x4e, [70]=0x49, [71]=0x0, [72]=0x54, [73]=0x98, [74]=0x20, [75]=0x0, [76]=0xb4, [77]=0x99, [78]=0x20, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x402518, Ebp=0x0, Eip=0x77da01c4, SegCs=0x23, EFlags=0x202, Esp=0x19f990, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x4, [5]=0x0, [6]=0x3b, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x5a, [33]=0xfb, [34]=0xda, [35]=0x77, [36]=0x0, [37]=0x0, [38]=0x95, [39]=0x75, [40]=0xd0, [41]=0x99, [42]=0x20, [43]=0x0, [44]=0xb8, [45]=0x97, [46]=0x20, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x9a, [54]=0x20, [55]=0x0, [56]=0x28, [57]=0xfb, [58]=0xdb, [59]=0x77, [60]=0x3, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x20, [67]=0x0, [68]=0xec, [69]=0x99, [70]=0x20, [71]=0x0, [72]=0xd4, [73]=0x97, [74]=0x20, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x1c, [81]=0x9a, [82]=0x20, [83]=0x0, [84]=0x28, [85]=0xfb, [86]=0xdb, [87]=0x77, [88]=0x3, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x50, [93]=0x98, [94]=0x20, [95]=0x0, [96]=0x90, [97]=0xe, [98]=0xc9, [99]=0x77, [100]=0x4, [101]=0x98, [102]=0x20, [103]=0x0, [104]=0xd6, [105]=0xfa, [106]=0xdb, [107]=0x77, [108]=0x1, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0xec, [113]=0x99, [114]=0x20, [115]=0x0, [116]=0x64, [117]=0xfa, [118]=0xdb, [119]=0x77, [120]=0x54, [121]=0x98, [122]=0x20, [123]=0x0, [124]=0x48, [125]=0x98, [126]=0x20, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x34, [145]=0x97, [146]=0x20, [147]=0x0, [148]=0xec, [149]=0x99, [150]=0x20, [151]=0x0, [152]=0x78, [153]=0x99, [154]=0x20, [155]=0x0, [156]=0xcd, [157]=0x1e, [158]=0xe0, [159]=0x77, [160]=0xc, [161]=0x24, [162]=0x32, [163]=0x0, [164]=0xfe, [165]=0xff, [166]=0xff, [167]=0xff, [168]=0xd6, [169]=0xc1, [170]=0xdc, [171]=0x77, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x1, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x1c, [181]=0x9a, [182]=0x20, [183]=0x0, [184]=0x88, [185]=0x99, [186]=0x20, [187]=0x0, [188]=0x34, [189]=0xc4, [190]=0xdc, [191]=0x77, [192]=0x92, [193]=0xe1, [194]=0xdb, [195]=0x77, [196]=0x19, [197]=0xc4, [198]=0xdc, [199]=0x77, [200]=0xdc, [201]=0x0, [202]=0xc9, [203]=0x77, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0xda, [213]=0x29, [214]=0xdb, [215]=0x77, [216]=0xd0, [217]=0x99, [218]=0x20, [219]=0x0, [220]=0x0, [221]=0x9a, [222]=0x20, [223]=0x0, [224]=0xff, [225]=0xff, [226]=0xe, [227]=0x0, [228]=0x0, [229]=0x98, [230]=0x20, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0xb4, [241]=0x99, [242]=0x20, [243]=0x0, [244]=0x14, [245]=0x0, [246]=0x16, [247]=0x0, [248]=0x1c, [249]=0x9a, [250]=0x20, [251]=0x0, [252]=0xb8, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x54, [257]=0x98, [258]=0x20, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x88, [265]=0xea, [266]=0x69, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x81, [281]=0xfd, [282]=0xda, [283]=0x77, [284]=0x50, [285]=0x2c, [286]=0x96, [287]=0x75, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x7c, [293]=0x2c, [294]=0x96, [295]=0x75, [296]=0x9e, [297]=0xd6, [298]=0x90, [299]=0x32, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x4, [305]=0x0, [306]=0x3b, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x24, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x1, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0xc2, [353]=0xfa, [354]=0xda, [355]=0x77, [356]=0xc, [357]=0xe3, [358]=0x95, [359]=0x75, [360]=0xff, [361]=0xff, [362]=0xff, [363]=0xff, [364]=0xf4, [365]=0x98, [366]=0x20, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0xe0, [373]=0x98, [374]=0x20, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x4, [385]=0x0, [386]=0x3b, [387]=0x0, [388]=0x0, [389]=0x99, [390]=0x20, [391]=0x0, [392]=0x7d, [393]=0xe3, [394]=0x95, [395]=0x75, [396]=0xff, [397]=0xff, [398]=0xff, [399]=0xff, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x3c, [407]=0x0, [408]=0x0, [409]=0x30, [410]=0x0, [411]=0x0, [412]=0x4, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x30, [417]=0x99, [418]=0x20, [419]=0x0, [420]=0x24, [421]=0x0, [422]=0x3b, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x10, [429]=0x4, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x30, [434]=0x0, [435]=0x0, [436]=0x4, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xfa, [441]=0x62, [442]=0xd8, [443]=0x75, [444]=0x4, [445]=0x0, [446]=0x3b, [447]=0x0, [448]=0xcd, [449]=0xab, [450]=0xba, [451]=0xdc, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x4, [461]=0x0, [462]=0x3b, [463]=0x0, [464]=0xa8, [465]=0x99, [466]=0x20, [467]=0x0, [468]=0x5c, [469]=0x99, [470]=0x20, [471]=0x0, [472]=0x4, [473]=0x0, [474]=0x3b, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0xa8, [481]=0x99, [482]=0x20, [483]=0x0, [484]=0x91, [485]=0x6d, [486]=0xd8, [487]=0x75, [488]=0x51, [489]=0x6d, [490]=0xd8, [491]=0x75, [492]=0x62, [493]=0xd8, [494]=0x8f, [495]=0x32, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x4, [501]=0x0, [502]=0x3b, [503]=0x0, [504]=0x0, [505]=0xe0, [506]=0xfd, [507]=0x7e, [508]=0x24, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0136.768] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.771] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.772] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x209530 | out: Wow64Process=0x209530) returned 1
	[0136.775] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.775] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc4
	[0136.775] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0136.775] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x4c0000
	[0136.775] ReadFile (in: hFile=0xc4, lpBuffer=0x4c0000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x20956c, lpOverlapped=0x0 | out: lpBuffer=0x4c0000*, lpNumberOfBytesRead=0x20956c*=0x13b740, lpOverlapped=0x0) returned 1
	[0136.787] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xab0000
	[0136.959] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d70000
	[0136.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x3b0000
	[0136.960] CallWindowProcW (lpPrevWndFunc=0x3b0004, hWnd=0x0, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0
	[0136.960] VirtualProtectEx (in: hProcess=0xc0, lpAddress=0x0, dwSize=0x12000, flNewProtect=0x1, lpflOldProtect=0x2099a4 | out: lpflOldProtect=0x2099a4*=0xc778) returned 0
	[0136.960] VirtualFree (lpAddress=0x3b0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0136.960] CloseHandle (hObject=0xc0) returned 1
	[0136.960] CloseHandle (hObject=0xbc) returned 1
	[0136.960] CloseHandle (hObject=0xc8) returned 1
	[0136.963] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.966] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.966] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x209538 | out: Wow64Process=0x209538) returned 1
	[0136.969] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x75c30000
	[0136.969] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8
	[0136.970] GetFileSize (in: hFile=0xc8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b740
	[0136.970] VirtualAlloc (lpAddress=0x0, dwSize=0x13b740, flAllocationType=0x3000, flProtect=0x4) returned 0x4c0000
	[0136.970] ReadFile (in: hFile=0xc8, lpBuffer=0x4c0000, nNumberOfBytesToRead=0x13b740, lpNumberOfBytesRead=0x209574, lpOverlapped=0x0 | out: lpBuffer=0x4c0000*, lpNumberOfBytesRead=0x209574*=0x13b740, lpOverlapped=0x0) returned 1
	[0137.116] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0xab0000
	[0137.142] ExitProcess (uExitCode=0x0) 
	[0137.142] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a8330 | out: hHeap=0x690000) returned 1

Process:
	id = "11"
	image_name = "rsfd234df.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"
	page_root = "0x3c6a1000"
	os_pid = "0x7c8"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "5"
	os_parent_pid = "0x7a0"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 33
	os_tid = 0x77c


Process:
	id = "12"
	image_name = "rsfd234df.exe"
	filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe"
	page_root = "0x3c3f0000"
	os_pid = "0x7d4"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "7"
	os_parent_pid = "0x7b8"
	cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 34
	os_tid = 0x798

	[0126.747] GetProcessHeap () returned 0x600000
	[0126.747] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x30) returned 0x611840
	[0126.747] GetProcessHeap () returned 0x600000
	[0126.747] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x3550) returned 0x6152f8
	[0126.748] GetProcessHeap () returned 0x600000
	[0126.748] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x204) returned 0x618850
	[0126.748] GetProcessHeap () returned 0x600000
	[0126.748] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x10) returned 0x6115f0
	[0126.748] GetTickCount () returned 0x1136799
	[0126.749] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x31fda8 | out: lpWSAData=0x31fda8) returned 0
	[0126.755] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x31fd88, cchData=32 | out: lpLCData="\x03") returned 16
	[0126.756] GetProcessHeap () returned 0x600000
	[0126.756] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1c) returned 0x613f90
	[0126.756] GetProcessHeap () returned 0x600000
	[0126.756] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1c) returned 0x61cd48
	[0126.756] GetVersion () returned 0x1db10106
	[0126.756] GetCurrentProcess () returned 0xffffffff
	[0126.756] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x31fcfc | out: TokenHandle=0x31fcfc*=0xb4) returned 1
	[0126.756] GetTokenInformation (in: TokenHandle=0xb4, TokenInformationClass=0x14, TokenInformation=0x31fcf4, TokenInformationLength=0x4, ReturnLength=0x31fcf8 | out: TokenInformation=0x31fcf4, ReturnLength=0x31fcf8) returned 1
	[0126.756] CloseHandle (hObject=0xb4) returned 1
	[0126.756] GetProcessHeap () returned 0x600000
	[0126.756] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x61cd98
	[0126.756] GetProcessHeap () returned 0x600000
	[0126.756] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x61cdc0
	[0126.756] GetProcessHeap () returned 0x600000
	[0126.756] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x61cde8
	[0126.756] GetProcessHeap () returned 0x600000
	[0126.756] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61d530
	[0126.756] GetProcessHeap () returned 0x600000
	[0126.756] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d530 | out: hHeap=0x600000) returned 1
	[0126.756] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x61cdc0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0126.756] GetProcessHeap () returned 0x600000
	[0126.756] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cde8 | out: hHeap=0x600000) returned 1
	[0126.756] GetProcessHeap () returned 0x600000
	[0126.756] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cd98 | out: hHeap=0x600000) returned 1
	[0126.757] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc9c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc9c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0126.757] GetProcessHeap () returned 0x600000
	[0126.757] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cdc0 | out: hHeap=0x600000) returned 1
	[0126.757] GetProcessHeap () returned 0x600000
	[0126.757] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d530
	[0126.757] GetProcessHeap () returned 0x600000
	[0126.757] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d590
	[0126.757] GetProcessHeap () returned 0x600000
	[0126.757] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d590, Size=0x72) returned 0x60f6b0
	[0126.757] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0xb4
	[0126.757] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x0) returned 0x102
	[0126.757] CloseHandle (hObject=0xb4) returned 1
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d530 | out: hHeap=0x600000) returned 1
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f6b0 | out: hHeap=0x600000) returned 1
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x61cdc0
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x61cd98
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x61cde8
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61e578
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e578 | out: hHeap=0x600000) returned 1
	[0126.758] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x61cd98, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cde8 | out: hHeap=0x600000) returned 1
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cdc0 | out: hHeap=0x600000) returned 1
	[0126.758] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc84, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc84*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cd98 | out: hHeap=0x600000) returned 1
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d590
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d5d8
	[0126.758] GetProcessHeap () returned 0x600000
	[0126.758] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d5d8, Size=0x72) returned 0x60f6b0
	[0126.758] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0126.758] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0xb4
	[0126.758] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x0) returned 0x0
	[0126.759] GetProcessHeap () returned 0x600000
	[0126.759] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d590 | out: hHeap=0x600000) returned 1
	[0126.759] GetProcessHeap () returned 0x600000
	[0126.759] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f6b0 | out: hHeap=0x600000) returned 1
	[0126.759] ReleaseMutex (hMutex=0xb4) returned 1
	[0126.759] CloseHandle (hObject=0xb4) returned 1
	[0126.759] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xb4
	[0126.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4035e3, lpParameter=0xb4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8
	[0126.759] GetProcessHeap () returned 0x600000
	[0126.759] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x61cd98
	[0126.759] GetProcessHeap () returned 0x600000
	[0126.759] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x61cdc0
	[0126.759] GetProcessHeap () returned 0x600000
	[0126.760] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x61cde8
	[0126.760] GetProcessHeap () returned 0x600000
	[0126.760] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61e578
	[0126.760] GetProcessHeap () returned 0x600000
	[0126.760] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e578 | out: hHeap=0x600000) returned 1
	[0126.760] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x61cdc0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0126.760] GetProcessHeap () returned 0x600000
	[0126.760] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cde8 | out: hHeap=0x600000) returned 1
	[0126.760] GetProcessHeap () returned 0x600000
	[0126.760] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cd98 | out: hHeap=0x600000) returned 1
	[0126.760] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0126.760] GetProcessHeap () returned 0x600000
	[0126.760] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cdc0 | out: hHeap=0x600000) returned 1
	[0126.760] GetProcessHeap () returned 0x600000
	[0126.760] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d590
	[0126.760] GetProcessHeap () returned 0x600000
	[0126.760] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d5d8
	[0126.760] GetProcessHeap () returned 0x600000
	[0126.760] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d5d8, Size=0x72) returned 0x60f6b0
	[0126.760] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0126.760] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0xbc
	[0126.760] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x0) returned 0x0
	[0126.760] GetProcessHeap () returned 0x600000
	[0126.760] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d590 | out: hHeap=0x600000) returned 1
	[0126.760] GetProcessHeap () returned 0x600000
	[0126.760] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f6b0 | out: hHeap=0x600000) returned 1
	[0126.760] ReleaseMutex (hMutex=0xbc) returned 1
	[0126.760] CloseHandle (hObject=0xbc) returned 1
	[0126.760] Sleep (dwMilliseconds=0x64) 
	[0126.998] GetProcessHeap () returned 0x600000
	[0126.998] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x61d248
	[0126.998] GetProcessHeap () returned 0x600000
	[0126.998] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x61d270
	[0126.998] GetProcessHeap () returned 0x600000
	[0126.998] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x61d1f8
	[0126.998] GetProcessHeap () returned 0x600000
	[0126.998] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61ea38
	[0126.998] GetProcessHeap () returned 0x600000
	[0126.998] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61ea38 | out: hHeap=0x600000) returned 1
	[0126.998] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x61d270, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0127.003] GetProcessHeap () returned 0x600000
	[0127.003] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d1f8 | out: hHeap=0x600000) returned 1
	[0127.004] GetProcessHeap () returned 0x600000
	[0127.004] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d248 | out: hHeap=0x600000) returned 1
	[0127.004] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0127.004] GetProcessHeap () returned 0x600000
	[0127.004] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d270 | out: hHeap=0x600000) returned 1
	[0127.004] GetProcessHeap () returned 0x600000
	[0127.004] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d668
	[0127.004] GetProcessHeap () returned 0x600000
	[0127.004] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d6b0
	[0127.004] GetProcessHeap () returned 0x600000
	[0127.004] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d6b0, Size=0x72) returned 0x60f730
	[0127.004] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0127.004] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x10c
	[0127.004] WaitForSingleObject (hHandle=0x10c, dwMilliseconds=0x0) returned 0x0
	[0127.004] GetProcessHeap () returned 0x600000
	[0127.004] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d668 | out: hHeap=0x600000) returned 1
	[0127.004] GetProcessHeap () returned 0x600000
	[0127.004] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f730 | out: hHeap=0x600000) returned 1
	[0127.004] ReleaseMutex (hMutex=0x10c) returned 1
	[0127.004] CloseHandle (hObject=0x10c) returned 1
	[0127.004] Sleep (dwMilliseconds=0x64) 
	[0127.135] GetProcessHeap () returned 0x600000
	[0127.135] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x61d270
	[0127.135] GetProcessHeap () returned 0x600000
	[0127.135] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x61d248
	[0127.135] GetProcessHeap () returned 0x600000
	[0127.135] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x61d1f8
	[0127.135] GetProcessHeap () returned 0x600000
	[0127.135] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x6133e8
	[0127.135] GetProcessHeap () returned 0x600000
	[0127.135] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6133e8 | out: hHeap=0x600000) returned 1
	[0127.135] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x61d248, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0127.135] GetProcessHeap () returned 0x600000
	[0127.135] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d1f8 | out: hHeap=0x600000) returned 1
	[0127.135] GetProcessHeap () returned 0x600000
	[0127.135] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d270 | out: hHeap=0x600000) returned 1
	[0127.135] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0127.135] GetProcessHeap () returned 0x600000
	[0127.135] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d248 | out: hHeap=0x600000) returned 1
	[0127.135] GetProcessHeap () returned 0x600000
	[0127.135] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d668
	[0127.135] GetProcessHeap () returned 0x600000
	[0127.135] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d6b0
	[0127.135] GetProcessHeap () returned 0x600000
	[0127.135] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d6b0, Size=0x72) returned 0x60f730
	[0127.136] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0127.136] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x10c
	[0127.136] WaitForSingleObject (hHandle=0x10c, dwMilliseconds=0x0) returned 0x0
	[0127.136] GetProcessHeap () returned 0x600000
	[0127.136] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d668 | out: hHeap=0x600000) returned 1
	[0127.136] GetProcessHeap () returned 0x600000
	[0127.136] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f730 | out: hHeap=0x600000) returned 1
	[0127.136] ReleaseMutex (hMutex=0x10c) returned 1
	[0127.136] CloseHandle (hObject=0x10c) returned 1
	[0127.136] Sleep (dwMilliseconds=0x64) 
	[0127.515] GetProcessHeap () returned 0x600000
	[0127.515] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x626ce0
	[0127.515] GetProcessHeap () returned 0x600000
	[0127.515] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x626d08
	[0127.515] GetProcessHeap () returned 0x600000
	[0127.515] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x626d30
	[0127.515] GetProcessHeap () returned 0x600000
	[0127.515] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x6268c8
	[0127.515] GetProcessHeap () returned 0x600000
	[0127.515] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6268c8 | out: hHeap=0x600000) returned 1
	[0127.515] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x626d08, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0127.515] GetProcessHeap () returned 0x600000
	[0127.515] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x626d30 | out: hHeap=0x600000) returned 1
	[0127.515] GetProcessHeap () returned 0x600000
	[0127.515] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x626ce0 | out: hHeap=0x600000) returned 1
	[0127.515] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0127.515] GetProcessHeap () returned 0x600000
	[0127.515] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x626d08 | out: hHeap=0x600000) returned 1
	[0127.515] GetProcessHeap () returned 0x600000
	[0127.515] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d6b0
	[0127.515] GetProcessHeap () returned 0x600000
	[0127.515] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d6f8
	[0127.515] GetProcessHeap () returned 0x600000
	[0127.515] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d6f8, Size=0x72) returned 0x60f7b0
	[0127.515] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0127.515] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x11c
	[0127.515] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0x0) returned 0x0
	[0127.515] GetProcessHeap () returned 0x600000
	[0127.515] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d6b0 | out: hHeap=0x600000) returned 1
	[0127.516] GetProcessHeap () returned 0x600000
	[0127.516] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f7b0 | out: hHeap=0x600000) returned 1
	[0127.516] ReleaseMutex (hMutex=0x11c) returned 1
	[0127.516] CloseHandle (hObject=0x11c) returned 1
	[0127.516] Sleep (dwMilliseconds=0x64) 
	[0128.091] GetProcessHeap () returned 0x600000
	[0128.091] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x627078
	[0128.091] GetProcessHeap () returned 0x600000
	[0128.091] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x6270a0
	[0128.091] GetProcessHeap () returned 0x600000
	[0128.091] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x6270c8
	[0128.091] GetProcessHeap () returned 0x600000
	[0128.091] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x629178
	[0128.091] GetProcessHeap () returned 0x600000
	[0128.091] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x629178 | out: hHeap=0x600000) returned 1
	[0128.091] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x6270a0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0128.091] GetProcessHeap () returned 0x600000
	[0128.091] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270c8 | out: hHeap=0x600000) returned 1
	[0128.091] GetProcessHeap () returned 0x600000
	[0128.091] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x627078 | out: hHeap=0x600000) returned 1
	[0128.091] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0128.091] GetProcessHeap () returned 0x600000
	[0128.091] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270a0 | out: hHeap=0x600000) returned 1
	[0128.091] GetProcessHeap () returned 0x600000
	[0128.091] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d740
	[0128.091] GetProcessHeap () returned 0x600000
	[0128.091] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d788
	[0128.091] GetProcessHeap () returned 0x600000
	[0128.091] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d788, Size=0x72) returned 0x60f8b0
	[0128.091] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0128.091] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x134
	[0128.091] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x0) returned 0x0
	[0128.092] GetProcessHeap () returned 0x600000
	[0128.092] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d740 | out: hHeap=0x600000) returned 1
	[0128.092] GetProcessHeap () returned 0x600000
	[0128.092] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f8b0 | out: hHeap=0x600000) returned 1
	[0128.092] ReleaseMutex (hMutex=0x134) returned 1
	[0128.092] CloseHandle (hObject=0x134) returned 1
	[0128.092] Sleep (dwMilliseconds=0x64) 
	[0128.201] GetProcessHeap () returned 0x600000
	[0128.201] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x6270a0
	[0128.201] GetProcessHeap () returned 0x600000
	[0128.201] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x627078
	[0128.201] GetProcessHeap () returned 0x600000
	[0128.201] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x6270c8
	[0128.201] GetProcessHeap () returned 0x600000
	[0128.201] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62a710
	[0128.201] GetProcessHeap () returned 0x600000
	[0128.201] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62a710 | out: hHeap=0x600000) returned 1
	[0128.202] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x627078, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0128.202] GetProcessHeap () returned 0x600000
	[0128.202] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270c8 | out: hHeap=0x600000) returned 1
	[0128.202] GetProcessHeap () returned 0x600000
	[0128.202] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270a0 | out: hHeap=0x600000) returned 1
	[0128.202] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0128.202] GetProcessHeap () returned 0x600000
	[0128.202] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x627078 | out: hHeap=0x600000) returned 1
	[0128.202] GetProcessHeap () returned 0x600000
	[0128.202] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d740
	[0128.202] GetProcessHeap () returned 0x600000
	[0128.202] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d788
	[0128.202] GetProcessHeap () returned 0x600000
	[0128.202] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d788, Size=0x72) returned 0x60f8b0
	[0128.202] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0128.202] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x134
	[0128.202] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x0) returned 0x0
	[0128.202] GetProcessHeap () returned 0x600000
	[0128.202] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d740 | out: hHeap=0x600000) returned 1
	[0128.202] GetProcessHeap () returned 0x600000
	[0128.202] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f8b0 | out: hHeap=0x600000) returned 1
	[0128.202] ReleaseMutex (hMutex=0x134) returned 1
	[0128.202] CloseHandle (hObject=0x134) returned 1
	[0128.202] Sleep (dwMilliseconds=0x64) 
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x627078
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x6270a0
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x6270c8
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62a710
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62a710 | out: hHeap=0x600000) returned 1
	[0128.349] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x6270a0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270c8 | out: hHeap=0x600000) returned 1
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x627078 | out: hHeap=0x600000) returned 1
	[0128.349] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270a0 | out: hHeap=0x600000) returned 1
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d788
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d7d0
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d7d0, Size=0x72) returned 0x60f8b0
	[0128.349] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0128.349] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x138
	[0128.349] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x0) returned 0x0
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d788 | out: hHeap=0x600000) returned 1
	[0128.349] GetProcessHeap () returned 0x600000
	[0128.349] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f8b0 | out: hHeap=0x600000) returned 1
	[0128.350] ReleaseMutex (hMutex=0x138) returned 1
	[0128.350] CloseHandle (hObject=0x138) returned 1
	[0128.350] Sleep (dwMilliseconds=0x64) 
	[0128.837] GetProcessHeap () returned 0x600000
	[0128.837] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x6270a0
	[0128.837] GetProcessHeap () returned 0x600000
	[0128.837] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x627078
	[0128.837] GetProcessHeap () returned 0x600000
	[0128.837] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x6270c8
	[0128.837] GetProcessHeap () returned 0x600000
	[0128.837] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62a4e8
	[0128.837] GetProcessHeap () returned 0x600000
	[0128.837] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62a4e8 | out: hHeap=0x600000) returned 1
	[0128.837] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x627078, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0128.837] GetProcessHeap () returned 0x600000
	[0128.838] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270c8 | out: hHeap=0x600000) returned 1
	[0128.838] GetProcessHeap () returned 0x600000
	[0128.838] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270a0 | out: hHeap=0x600000) returned 1
	[0128.838] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0128.838] GetProcessHeap () returned 0x600000
	[0128.838] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x627078 | out: hHeap=0x600000) returned 1
	[0128.838] GetProcessHeap () returned 0x600000
	[0128.838] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d788
	[0128.838] GetProcessHeap () returned 0x600000
	[0128.838] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d7d0
	[0128.838] GetProcessHeap () returned 0x600000
	[0128.838] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d7d0, Size=0x72) returned 0x60f930
	[0128.838] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0128.838] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x134
	[0128.838] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x0) returned 0x0
	[0128.838] GetProcessHeap () returned 0x600000
	[0128.838] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d788 | out: hHeap=0x600000) returned 1
	[0128.838] GetProcessHeap () returned 0x600000
	[0128.838] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f930 | out: hHeap=0x600000) returned 1
	[0128.838] ReleaseMutex (hMutex=0x134) returned 1
	[0128.838] CloseHandle (hObject=0x134) returned 1
	[0128.838] Sleep (dwMilliseconds=0x64) 
	[0128.976] GetProcessHeap () returned 0x600000
	[0128.976] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x627078
	[0128.977] GetProcessHeap () returned 0x600000
	[0128.977] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x6270a0
	[0128.977] GetProcessHeap () returned 0x600000
	[0128.977] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x6270c8
	[0128.977] GetProcessHeap () returned 0x600000
	[0128.977] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62a780
	[0128.977] GetProcessHeap () returned 0x600000
	[0128.977] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62a780 | out: hHeap=0x600000) returned 1
	[0128.977] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x6270a0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0128.977] GetProcessHeap () returned 0x600000
	[0128.977] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270c8 | out: hHeap=0x600000) returned 1
	[0128.977] GetProcessHeap () returned 0x600000
	[0128.977] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x627078 | out: hHeap=0x600000) returned 1
	[0128.977] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0128.977] GetProcessHeap () returned 0x600000
	[0128.977] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270a0 | out: hHeap=0x600000) returned 1
	[0128.977] GetProcessHeap () returned 0x600000
	[0128.977] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d788
	[0128.977] GetProcessHeap () returned 0x600000
	[0128.977] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d7d0
	[0128.977] GetProcessHeap () returned 0x600000
	[0128.977] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d7d0, Size=0x72) returned 0x60f930
	[0128.977] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0128.977] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x134
	[0128.977] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x0) returned 0x0
	[0128.977] GetProcessHeap () returned 0x600000
	[0128.977] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d788 | out: hHeap=0x600000) returned 1
	[0128.977] GetProcessHeap () returned 0x600000
	[0128.977] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f930 | out: hHeap=0x600000) returned 1
	[0128.977] ReleaseMutex (hMutex=0x134) returned 1
	[0128.977] CloseHandle (hObject=0x134) returned 1
	[0128.977] Sleep (dwMilliseconds=0x64) 
	[0129.322] GetProcessHeap () returned 0x600000
	[0129.322] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x6270a0
	[0129.322] GetProcessHeap () returned 0x600000
	[0129.322] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x627078
	[0129.323] GetProcessHeap () returned 0x600000
	[0129.323] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x6270c8
	[0129.323] GetProcessHeap () returned 0x600000
	[0129.323] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62a4e8
	[0129.323] GetProcessHeap () returned 0x600000
	[0129.323] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62a4e8 | out: hHeap=0x600000) returned 1
	[0129.323] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x627078, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0129.323] GetProcessHeap () returned 0x600000
	[0129.323] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270c8 | out: hHeap=0x600000) returned 1
	[0129.323] GetProcessHeap () returned 0x600000
	[0129.323] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270a0 | out: hHeap=0x600000) returned 1
	[0129.323] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0129.323] GetProcessHeap () returned 0x600000
	[0129.323] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x627078 | out: hHeap=0x600000) returned 1
	[0129.323] GetProcessHeap () returned 0x600000
	[0129.323] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d788
	[0129.323] GetProcessHeap () returned 0x600000
	[0129.323] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d7d0
	[0129.323] GetProcessHeap () returned 0x600000
	[0129.323] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d7d0, Size=0x72) returned 0x60f9b0
	[0129.323] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0129.323] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x134
	[0129.323] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x0) returned 0x0
	[0129.323] GetProcessHeap () returned 0x600000
	[0129.323] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d788 | out: hHeap=0x600000) returned 1
	[0129.323] GetProcessHeap () returned 0x600000
	[0129.323] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f9b0 | out: hHeap=0x600000) returned 1
	[0129.323] ReleaseMutex (hMutex=0x134) returned 1
	[0129.323] CloseHandle (hObject=0x134) returned 1
	[0129.323] Sleep (dwMilliseconds=0x64) 
	[0129.470] GetProcessHeap () returned 0x600000
	[0129.470] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x627078
	[0129.470] GetProcessHeap () returned 0x600000
	[0129.470] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x6270a0
	[0129.470] GetProcessHeap () returned 0x600000
	[0129.470] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x6270c8
	[0129.470] GetProcessHeap () returned 0x600000
	[0129.470] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62a4e8
	[0129.470] GetProcessHeap () returned 0x600000
	[0129.470] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62a4e8 | out: hHeap=0x600000) returned 1
	[0129.470] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x6270a0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0129.470] GetProcessHeap () returned 0x600000
	[0129.470] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270c8 | out: hHeap=0x600000) returned 1
	[0129.470] GetProcessHeap () returned 0x600000
	[0129.470] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x627078 | out: hHeap=0x600000) returned 1
	[0129.470] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0129.470] GetProcessHeap () returned 0x600000
	[0129.470] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6270a0 | out: hHeap=0x600000) returned 1
	[0129.470] GetProcessHeap () returned 0x600000
	[0129.470] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d788
	[0129.470] GetProcessHeap () returned 0x600000
	[0129.470] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d7d0
	[0129.470] GetProcessHeap () returned 0x600000
	[0129.471] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d7d0, Size=0x72) returned 0x60f9b0
	[0129.471] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0129.471] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x134
	[0129.471] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x0) returned 0x0
	[0129.471] GetProcessHeap () returned 0x600000
	[0129.471] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d788 | out: hHeap=0x600000) returned 1
	[0129.471] GetProcessHeap () returned 0x600000
	[0129.471] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f9b0 | out: hHeap=0x600000) returned 1
	[0129.471] ReleaseMutex (hMutex=0x134) returned 1
	[0129.471] CloseHandle (hObject=0x134) returned 1
	[0129.471] Sleep (dwMilliseconds=0x64) 
	[0129.599] GetProcessHeap () returned 0x600000
	[0129.599] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ac38
	[0129.599] GetProcessHeap () returned 0x600000
	[0129.599] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ac60
	[0129.599] GetProcessHeap () returned 0x600000
	[0129.599] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ac88
	[0129.599] GetProcessHeap () returned 0x600000
	[0129.599] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62a378
	[0129.599] GetProcessHeap () returned 0x600000
	[0129.599] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62a378 | out: hHeap=0x600000) returned 1
	[0129.599] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ac60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0129.599] GetProcessHeap () returned 0x600000
	[0129.599] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ac88 | out: hHeap=0x600000) returned 1
	[0129.599] GetProcessHeap () returned 0x600000
	[0129.600] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ac38 | out: hHeap=0x600000) returned 1
	[0129.600] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0129.600] GetProcessHeap () returned 0x600000
	[0129.600] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ac60 | out: hHeap=0x600000) returned 1
	[0129.600] GetProcessHeap () returned 0x600000
	[0129.600] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d7d0
	[0129.600] GetProcessHeap () returned 0x600000
	[0129.600] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d818
	[0129.600] GetProcessHeap () returned 0x600000
	[0129.600] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d818, Size=0x72) returned 0x60f9b0
	[0129.600] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0129.600] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x13c
	[0129.600] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x0
	[0129.600] GetProcessHeap () returned 0x600000
	[0129.600] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d7d0 | out: hHeap=0x600000) returned 1
	[0129.600] GetProcessHeap () returned 0x600000
	[0129.600] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f9b0 | out: hHeap=0x600000) returned 1
	[0129.600] ReleaseMutex (hMutex=0x13c) returned 1
	[0129.600] CloseHandle (hObject=0x13c) returned 1
	[0129.600] Sleep (dwMilliseconds=0x64) 
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.740] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ad00
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.740] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ad28
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.740] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ad50
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.740] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62a378
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.740] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62a378 | out: hHeap=0x600000) returned 1
	[0129.740] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ad28, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.740] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad50 | out: hHeap=0x600000) returned 1
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.740] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad00 | out: hHeap=0x600000) returned 1
	[0129.740] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.740] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad28 | out: hHeap=0x600000) returned 1
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.740] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d7d0
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.740] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d818
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.740] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d818, Size=0x72) returned 0x60f9b0
	[0129.740] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0129.740] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x13c
	[0129.740] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x0
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.740] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d7d0 | out: hHeap=0x600000) returned 1
	[0129.740] GetProcessHeap () returned 0x600000
	[0129.741] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f9b0 | out: hHeap=0x600000) returned 1
	[0129.741] ReleaseMutex (hMutex=0x13c) returned 1
	[0129.741] CloseHandle (hObject=0x13c) returned 1
	[0129.741] Sleep (dwMilliseconds=0x64) 
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ad28
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ad00
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ad50
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62a378
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62a378 | out: hHeap=0x600000) returned 1
	[0129.881] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ad00, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad50 | out: hHeap=0x600000) returned 1
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad28 | out: hHeap=0x600000) returned 1
	[0129.881] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad00 | out: hHeap=0x600000) returned 1
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d7d0
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d818
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d818, Size=0x72) returned 0x60f9b0
	[0129.881] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0129.881] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x13c
	[0129.881] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x0
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d7d0 | out: hHeap=0x600000) returned 1
	[0129.881] GetProcessHeap () returned 0x600000
	[0129.881] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f9b0 | out: hHeap=0x600000) returned 1
	[0129.881] ReleaseMutex (hMutex=0x13c) returned 1
	[0129.881] CloseHandle (hObject=0x13c) returned 1
	[0129.881] Sleep (dwMilliseconds=0x64) 
	[0129.989] GetProcessHeap () returned 0x600000
	[0129.989] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ad00
	[0129.989] GetProcessHeap () returned 0x600000
	[0129.989] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ad28
	[0129.989] GetProcessHeap () returned 0x600000
	[0129.989] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ad50
	[0129.989] GetProcessHeap () returned 0x600000
	[0129.989] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62a378
	[0129.989] GetProcessHeap () returned 0x600000
	[0129.989] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62a378 | out: hHeap=0x600000) returned 1
	[0129.989] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ad28, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0129.989] GetProcessHeap () returned 0x600000
	[0129.989] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad50 | out: hHeap=0x600000) returned 1
	[0129.989] GetProcessHeap () returned 0x600000
	[0129.989] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad00 | out: hHeap=0x600000) returned 1
	[0129.989] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0129.989] GetProcessHeap () returned 0x600000
	[0129.989] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad28 | out: hHeap=0x600000) returned 1
	[0129.989] GetProcessHeap () returned 0x600000
	[0129.989] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d7d0
	[0129.989] GetProcessHeap () returned 0x600000
	[0129.989] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d818
	[0129.989] GetProcessHeap () returned 0x600000
	[0129.989] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d818, Size=0x72) returned 0x60f9b0
	[0129.989] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0129.989] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x13c
	[0129.990] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x0
	[0129.990] GetProcessHeap () returned 0x600000
	[0129.990] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d7d0 | out: hHeap=0x600000) returned 1
	[0129.990] GetProcessHeap () returned 0x600000
	[0129.990] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f9b0 | out: hHeap=0x600000) returned 1
	[0129.990] ReleaseMutex (hMutex=0x13c) returned 1
	[0129.990] CloseHandle (hObject=0x13c) returned 1
	[0129.990] Sleep (dwMilliseconds=0x64) 
	[0130.129] GetProcessHeap () returned 0x600000
	[0130.129] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ad28
	[0130.129] GetProcessHeap () returned 0x600000
	[0130.129] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ad00
	[0130.129] GetProcessHeap () returned 0x600000
	[0130.129] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ad50
	[0130.129] GetProcessHeap () returned 0x600000
	[0130.129] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62a378
	[0130.129] GetProcessHeap () returned 0x600000
	[0130.129] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62a378 | out: hHeap=0x600000) returned 1
	[0130.129] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ad00, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0130.129] GetProcessHeap () returned 0x600000
	[0130.129] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad50 | out: hHeap=0x600000) returned 1
	[0130.129] GetProcessHeap () returned 0x600000
	[0130.129] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad28 | out: hHeap=0x600000) returned 1
	[0130.129] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0130.130] GetProcessHeap () returned 0x600000
	[0130.130] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad00 | out: hHeap=0x600000) returned 1
	[0130.130] GetProcessHeap () returned 0x600000
	[0130.130] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d7d0
	[0130.130] GetProcessHeap () returned 0x600000
	[0130.130] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d818
	[0130.130] GetProcessHeap () returned 0x600000
	[0130.130] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d818, Size=0x72) returned 0x60f9b0
	[0130.130] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0130.130] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x13c
	[0130.130] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x0
	[0130.130] GetProcessHeap () returned 0x600000
	[0130.130] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d7d0 | out: hHeap=0x600000) returned 1
	[0130.130] GetProcessHeap () returned 0x600000
	[0130.130] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f9b0 | out: hHeap=0x600000) returned 1
	[0130.130] ReleaseMutex (hMutex=0x13c) returned 1
	[0130.130] CloseHandle (hObject=0x13c) returned 1
	[0130.130] Sleep (dwMilliseconds=0x64) 
	[0130.448] GetProcessHeap () returned 0x600000
	[0130.448] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ad50
	[0130.448] GetProcessHeap () returned 0x600000
	[0130.448] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ad78
	[0130.448] GetProcessHeap () returned 0x600000
	[0130.448] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ada0
	[0130.448] GetProcessHeap () returned 0x600000
	[0130.448] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62a418
	[0130.486] GetProcessHeap () returned 0x600000
	[0130.486] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62a418 | out: hHeap=0x600000) returned 1
	[0130.486] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ad78, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0130.486] GetProcessHeap () returned 0x600000
	[0130.486] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ada0 | out: hHeap=0x600000) returned 1
	[0130.486] GetProcessHeap () returned 0x600000
	[0130.486] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad50 | out: hHeap=0x600000) returned 1
	[0130.486] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0130.486] GetProcessHeap () returned 0x600000
	[0130.486] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ad78 | out: hHeap=0x600000) returned 1
	[0130.486] GetProcessHeap () returned 0x600000
	[0130.486] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d860
	[0130.486] GetProcessHeap () returned 0x600000
	[0130.486] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d8a8
	[0130.486] GetProcessHeap () returned 0x600000
	[0130.486] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d8a8, Size=0x72) returned 0x60fa30
	[0130.486] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0130.486] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x148
	[0130.486] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x0) returned 0x0
	[0130.486] GetProcessHeap () returned 0x600000
	[0130.486] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d860 | out: hHeap=0x600000) returned 1
	[0130.486] GetProcessHeap () returned 0x600000
	[0130.486] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fa30 | out: hHeap=0x600000) returned 1
	[0130.486] ReleaseMutex (hMutex=0x148) returned 1
	[0130.487] CloseHandle (hObject=0x148) returned 1
	[0130.487] Sleep (dwMilliseconds=0x64) 
	[0130.627] GetProcessHeap () returned 0x600000
	[0130.627] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ae18
	[0130.627] GetProcessHeap () returned 0x600000
	[0130.627] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ae40
	[0130.627] GetProcessHeap () returned 0x600000
	[0130.627] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ae68
	[0130.627] GetProcessHeap () returned 0x600000
	[0130.627] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d7a8
	[0130.627] GetProcessHeap () returned 0x600000
	[0130.628] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d7a8 | out: hHeap=0x600000) returned 1
	[0130.628] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ae40, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0130.628] GetProcessHeap () returned 0x600000
	[0130.628] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ae68 | out: hHeap=0x600000) returned 1
	[0130.628] GetProcessHeap () returned 0x600000
	[0130.628] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ae18 | out: hHeap=0x600000) returned 1
	[0130.628] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0130.628] GetProcessHeap () returned 0x600000
	[0130.628] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ae40 | out: hHeap=0x600000) returned 1
	[0130.628] GetProcessHeap () returned 0x600000
	[0130.628] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d818
	[0130.628] GetProcessHeap () returned 0x600000
	[0130.628] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61d8a8
	[0130.628] GetProcessHeap () returned 0x600000
	[0130.628] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d8a8, Size=0x72) returned 0x60fab0
	[0130.628] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0130.628] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x148
	[0130.628] WaitForSingleObject (hHandle=0x148, dwMilliseconds=0x0) returned 0x0
	[0130.628] GetProcessHeap () returned 0x600000
	[0130.628] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d818 | out: hHeap=0x600000) returned 1
	[0130.628] GetProcessHeap () returned 0x600000
	[0130.628] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fab0 | out: hHeap=0x600000) returned 1
	[0130.628] ReleaseMutex (hMutex=0x148) returned 1
	[0130.628] CloseHandle (hObject=0x148) returned 1
	[0130.628] Sleep (dwMilliseconds=0x64) 
	[0130.831] GetProcessHeap () returned 0x600000
	[0130.831] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fc50
	[0130.831] GetProcessHeap () returned 0x600000
	[0130.831] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fc78
	[0130.831] GetProcessHeap () returned 0x600000
	[0130.831] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62fca0
	[0130.831] GetProcessHeap () returned 0x600000
	[0130.831] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d7a8
	[0130.831] GetProcessHeap () returned 0x600000
	[0130.831] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d7a8 | out: hHeap=0x600000) returned 1
	[0130.831] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fc78, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0130.831] GetProcessHeap () returned 0x600000
	[0130.831] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fca0 | out: hHeap=0x600000) returned 1
	[0130.831] GetProcessHeap () returned 0x600000
	[0130.831] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fc50 | out: hHeap=0x600000) returned 1
	[0130.831] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0130.831] GetProcessHeap () returned 0x600000
	[0130.831] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fc78 | out: hHeap=0x600000) returned 1
	[0130.831] GetProcessHeap () returned 0x600000
	[0130.831] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61d9c8
	[0130.831] GetProcessHeap () returned 0x600000
	[0130.831] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61da10
	[0130.831] GetProcessHeap () returned 0x600000
	[0130.831] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61da10, Size=0x72) returned 0x60fbb0
	[0130.831] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0130.831] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x158
	[0130.831] WaitForSingleObject (hHandle=0x158, dwMilliseconds=0x0) returned 0x0
	[0130.832] GetProcessHeap () returned 0x600000
	[0130.832] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d9c8 | out: hHeap=0x600000) returned 1
	[0130.832] GetProcessHeap () returned 0x600000
	[0130.832] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0130.832] ReleaseMutex (hMutex=0x158) returned 1
	[0130.832] CloseHandle (hObject=0x158) returned 1
	[0130.832] Sleep (dwMilliseconds=0x64) 
	[0130.940] GetProcessHeap () returned 0x600000
	[0130.940] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0130.940] GetProcessHeap () returned 0x600000
	[0130.940] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0130.940] GetProcessHeap () returned 0x600000
	[0130.940] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0130.940] GetProcessHeap () returned 0x600000
	[0130.940] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0130.941] GetProcessHeap () returned 0x600000
	[0130.941] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0130.941] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0130.941] GetProcessHeap () returned 0x600000
	[0130.941] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0130.941] GetProcessHeap () returned 0x600000
	[0130.941] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0130.941] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0130.941] GetProcessHeap () returned 0x600000
	[0130.941] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0130.941] GetProcessHeap () returned 0x600000
	[0130.941] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0130.941] GetProcessHeap () returned 0x600000
	[0130.941] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0130.941] GetProcessHeap () returned 0x600000
	[0130.941] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0130.941] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0130.941] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0130.941] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0130.941] GetProcessHeap () returned 0x600000
	[0130.941] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0130.941] GetProcessHeap () returned 0x600000
	[0130.941] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0130.941] ReleaseMutex (hMutex=0x178) returned 1
	[0130.941] CloseHandle (hObject=0x178) returned 1
	[0130.941] Sleep (dwMilliseconds=0x64) 
	[0131.053] GetProcessHeap () returned 0x600000
	[0131.054] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0131.055] GetProcessHeap () returned 0x600000
	[0131.055] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0131.059] GetProcessHeap () returned 0x600000
	[0131.059] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0131.059] GetProcessHeap () returned 0x600000
	[0131.060] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0131.060] GetProcessHeap () returned 0x600000
	[0131.061] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0131.062] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0131.063] GetProcessHeap () returned 0x600000
	[0131.064] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0131.065] GetProcessHeap () returned 0x600000
	[0131.067] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0131.069] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0131.074] GetProcessHeap () returned 0x600000
	[0131.074] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0131.074] GetProcessHeap () returned 0x600000
	[0131.074] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0131.074] GetProcessHeap () returned 0x600000
	[0131.074] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0131.074] GetProcessHeap () returned 0x600000
	[0131.074] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0131.074] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0131.074] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0131.074] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0131.074] GetProcessHeap () returned 0x600000
	[0131.074] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0131.074] GetProcessHeap () returned 0x600000
	[0131.074] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0131.074] ReleaseMutex (hMutex=0x178) returned 1
	[0131.074] CloseHandle (hObject=0x178) returned 1
	[0131.074] Sleep (dwMilliseconds=0x64) 
	[0131.210] GetProcessHeap () returned 0x600000
	[0131.210] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0131.210] GetProcessHeap () returned 0x600000
	[0131.210] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0131.210] GetProcessHeap () returned 0x600000
	[0131.210] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0131.210] GetProcessHeap () returned 0x600000
	[0131.210] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0131.210] GetProcessHeap () returned 0x600000
	[0131.210] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0131.210] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0131.210] GetProcessHeap () returned 0x600000
	[0131.210] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0131.210] GetProcessHeap () returned 0x600000
	[0131.210] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0131.210] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0131.210] GetProcessHeap () returned 0x600000
	[0131.210] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0131.210] GetProcessHeap () returned 0x600000
	[0131.210] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0131.210] GetProcessHeap () returned 0x600000
	[0131.210] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0131.210] GetProcessHeap () returned 0x600000
	[0131.210] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0131.210] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0131.210] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0131.210] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0131.210] GetProcessHeap () returned 0x600000
	[0131.210] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0131.211] GetProcessHeap () returned 0x600000
	[0131.211] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0131.211] ReleaseMutex (hMutex=0x178) returned 1
	[0131.211] CloseHandle (hObject=0x178) returned 1
	[0131.211] Sleep (dwMilliseconds=0x64) 
	[0131.314] GetProcessHeap () returned 0x600000
	[0131.314] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0131.314] GetProcessHeap () returned 0x600000
	[0131.314] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0131.314] GetProcessHeap () returned 0x600000
	[0131.314] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0131.314] GetProcessHeap () returned 0x600000
	[0131.314] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0131.314] GetProcessHeap () returned 0x600000
	[0131.314] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0131.314] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0131.314] GetProcessHeap () returned 0x600000
	[0131.314] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0131.314] GetProcessHeap () returned 0x600000
	[0131.314] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0131.314] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0131.314] GetProcessHeap () returned 0x600000
	[0131.314] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0131.314] GetProcessHeap () returned 0x600000
	[0131.314] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0131.314] GetProcessHeap () returned 0x600000
	[0131.314] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0131.314] GetProcessHeap () returned 0x600000
	[0131.314] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0131.314] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0131.314] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0131.314] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0131.315] GetProcessHeap () returned 0x600000
	[0131.315] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0131.315] GetProcessHeap () returned 0x600000
	[0131.315] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0131.315] ReleaseMutex (hMutex=0x178) returned 1
	[0131.315] CloseHandle (hObject=0x178) returned 1
	[0131.315] Sleep (dwMilliseconds=0x64) 
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.445] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.445] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.445] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.445] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.445] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0131.445] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.445] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.445] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0131.445] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.445] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.445] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.445] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.445] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0131.445] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0131.445] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0131.445] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.445] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0131.445] GetProcessHeap () returned 0x600000
	[0131.446] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0131.446] ReleaseMutex (hMutex=0x178) returned 1
	[0131.446] CloseHandle (hObject=0x178) returned 1
	[0131.446] Sleep (dwMilliseconds=0x64) 
	[0131.818] GetProcessHeap () returned 0x600000
	[0131.818] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0131.819] GetProcessHeap () returned 0x600000
	[0131.819] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0131.820] GetProcessHeap () returned 0x600000
	[0131.820] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0131.820] GetProcessHeap () returned 0x600000
	[0131.820] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0131.820] GetProcessHeap () returned 0x600000
	[0131.820] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0131.821] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0131.821] GetProcessHeap () returned 0x600000
	[0131.821] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0131.822] GetProcessHeap () returned 0x600000
	[0131.823] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0131.824] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0131.857] GetProcessHeap () returned 0x600000
	[0131.857] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0131.857] GetProcessHeap () returned 0x600000
	[0131.863] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0131.865] GetProcessHeap () returned 0x600000
	[0131.865] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0131.865] GetProcessHeap () returned 0x600000
	[0131.865] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0131.866] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0131.867] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0131.867] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0131.868] GetProcessHeap () returned 0x600000
	[0131.870] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0131.871] GetProcessHeap () returned 0x600000
	[0131.871] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0131.872] ReleaseMutex (hMutex=0x178) returned 1
	[0131.872] CloseHandle (hObject=0x178) returned 1
	[0131.874] Sleep (dwMilliseconds=0x64) 
	[0132.033] GetProcessHeap () returned 0x600000
	[0132.033] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0132.033] GetProcessHeap () returned 0x600000
	[0132.033] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0132.033] GetProcessHeap () returned 0x600000
	[0132.033] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0132.033] GetProcessHeap () returned 0x600000
	[0132.033] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0132.033] GetProcessHeap () returned 0x600000
	[0132.033] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0132.033] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.033] GetProcessHeap () returned 0x600000
	[0132.033] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0132.033] GetProcessHeap () returned 0x600000
	[0132.033] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0132.033] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.033] GetProcessHeap () returned 0x600000
	[0132.033] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0132.033] GetProcessHeap () returned 0x600000
	[0132.033] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0132.033] GetProcessHeap () returned 0x600000
	[0132.033] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0132.033] GetProcessHeap () returned 0x600000
	[0132.033] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0132.033] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.034] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0132.034] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0132.034] GetProcessHeap () returned 0x600000
	[0132.034] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0132.034] GetProcessHeap () returned 0x600000
	[0132.034] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0132.034] ReleaseMutex (hMutex=0x178) returned 1
	[0132.034] CloseHandle (hObject=0x178) returned 1
	[0132.034] Sleep (dwMilliseconds=0x64) 
	[0132.408] GetProcessHeap () returned 0x600000
	[0132.408] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0132.408] GetProcessHeap () returned 0x600000
	[0132.408] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0132.408] GetProcessHeap () returned 0x600000
	[0132.408] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0132.409] GetProcessHeap () returned 0x600000
	[0132.409] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0132.409] GetProcessHeap () returned 0x600000
	[0132.409] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0132.409] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.409] GetProcessHeap () returned 0x600000
	[0132.409] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0132.409] GetProcessHeap () returned 0x600000
	[0132.409] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0132.409] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.409] GetProcessHeap () returned 0x600000
	[0132.409] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0132.409] GetProcessHeap () returned 0x600000
	[0132.409] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0132.409] GetProcessHeap () returned 0x600000
	[0132.409] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0132.409] GetProcessHeap () returned 0x600000
	[0132.409] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0132.409] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.409] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0132.409] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0132.409] GetProcessHeap () returned 0x600000
	[0132.409] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0132.409] GetProcessHeap () returned 0x600000
	[0132.409] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0132.409] ReleaseMutex (hMutex=0x178) returned 1
	[0132.409] CloseHandle (hObject=0x178) returned 1
	[0132.409] Sleep (dwMilliseconds=0x64) 
	[0132.542] GetProcessHeap () returned 0x600000
	[0132.542] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0132.542] GetProcessHeap () returned 0x600000
	[0132.542] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0132.542] GetProcessHeap () returned 0x600000
	[0132.542] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0132.542] GetProcessHeap () returned 0x600000
	[0132.542] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0132.542] GetProcessHeap () returned 0x600000
	[0132.542] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0132.542] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.542] GetProcessHeap () returned 0x600000
	[0132.542] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0132.542] GetProcessHeap () returned 0x600000
	[0132.542] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0132.542] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.542] GetProcessHeap () returned 0x600000
	[0132.542] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0132.542] GetProcessHeap () returned 0x600000
	[0132.542] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0132.542] GetProcessHeap () returned 0x600000
	[0132.542] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0132.542] GetProcessHeap () returned 0x600000
	[0132.543] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0132.543] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.543] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0132.543] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0132.543] GetProcessHeap () returned 0x600000
	[0132.543] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0132.543] GetProcessHeap () returned 0x600000
	[0132.543] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0132.543] ReleaseMutex (hMutex=0x178) returned 1
	[0132.543] CloseHandle (hObject=0x178) returned 1
	[0132.543] Sleep (dwMilliseconds=0x64) 
	[0132.690] GetProcessHeap () returned 0x600000
	[0132.690] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0132.690] GetProcessHeap () returned 0x600000
	[0132.690] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0132.690] GetProcessHeap () returned 0x600000
	[0132.690] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0132.690] GetProcessHeap () returned 0x600000
	[0132.690] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0132.690] GetProcessHeap () returned 0x600000
	[0132.690] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0132.691] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.691] GetProcessHeap () returned 0x600000
	[0132.691] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0132.691] GetProcessHeap () returned 0x600000
	[0132.691] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0132.691] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.691] GetProcessHeap () returned 0x600000
	[0132.691] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0132.691] GetProcessHeap () returned 0x600000
	[0132.691] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0132.691] GetProcessHeap () returned 0x600000
	[0132.691] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0132.691] GetProcessHeap () returned 0x600000
	[0132.691] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0132.691] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.691] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0132.691] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0132.691] GetProcessHeap () returned 0x600000
	[0132.691] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0132.691] GetProcessHeap () returned 0x600000
	[0132.691] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0132.691] ReleaseMutex (hMutex=0x178) returned 1
	[0132.691] CloseHandle (hObject=0x178) returned 1
	[0132.691] Sleep (dwMilliseconds=0x64) 
	[0132.832] GetProcessHeap () returned 0x600000
	[0132.832] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0132.832] GetProcessHeap () returned 0x600000
	[0132.832] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0132.832] GetProcessHeap () returned 0x600000
	[0132.832] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0132.832] GetProcessHeap () returned 0x600000
	[0132.833] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0132.833] GetProcessHeap () returned 0x600000
	[0132.833] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0132.833] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.833] GetProcessHeap () returned 0x600000
	[0132.833] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0132.833] GetProcessHeap () returned 0x600000
	[0132.833] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0132.833] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.833] GetProcessHeap () returned 0x600000
	[0132.833] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0132.833] GetProcessHeap () returned 0x600000
	[0132.833] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0132.833] GetProcessHeap () returned 0x600000
	[0132.833] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0132.833] GetProcessHeap () returned 0x600000
	[0132.833] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0132.833] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.833] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0132.833] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0132.833] GetProcessHeap () returned 0x600000
	[0132.833] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0132.833] GetProcessHeap () returned 0x600000
	[0132.833] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0132.833] ReleaseMutex (hMutex=0x178) returned 1
	[0132.834] CloseHandle (hObject=0x178) returned 1
	[0132.834] Sleep (dwMilliseconds=0x64) 
	[0132.942] GetProcessHeap () returned 0x600000
	[0132.943] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0132.943] GetProcessHeap () returned 0x600000
	[0132.943] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0132.943] GetProcessHeap () returned 0x600000
	[0132.943] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0132.943] GetProcessHeap () returned 0x600000
	[0132.943] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0132.943] GetProcessHeap () returned 0x600000
	[0132.943] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0132.943] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.943] GetProcessHeap () returned 0x600000
	[0132.943] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0132.943] GetProcessHeap () returned 0x600000
	[0132.943] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0132.943] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.943] GetProcessHeap () returned 0x600000
	[0132.943] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0132.943] GetProcessHeap () returned 0x600000
	[0132.943] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0132.943] GetProcessHeap () returned 0x600000
	[0132.943] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0132.943] GetProcessHeap () returned 0x600000
	[0132.943] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0132.943] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.944] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0132.944] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0132.944] GetProcessHeap () returned 0x600000
	[0132.944] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0132.944] GetProcessHeap () returned 0x600000
	[0132.944] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0132.944] ReleaseMutex (hMutex=0x178) returned 1
	[0132.944] CloseHandle (hObject=0x178) returned 1
	[0132.944] Sleep (dwMilliseconds=0x64) 
	[0133.046] GetProcessHeap () returned 0x600000
	[0133.046] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0133.046] GetProcessHeap () returned 0x600000
	[0133.046] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0133.046] GetProcessHeap () returned 0x600000
	[0133.046] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0133.046] GetProcessHeap () returned 0x600000
	[0133.046] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0133.046] GetProcessHeap () returned 0x600000
	[0133.046] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0133.046] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0133.046] GetProcessHeap () returned 0x600000
	[0133.046] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0133.046] GetProcessHeap () returned 0x600000
	[0133.046] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0133.046] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0133.046] GetProcessHeap () returned 0x600000
	[0133.046] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0133.046] GetProcessHeap () returned 0x600000
	[0133.047] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0133.047] GetProcessHeap () returned 0x600000
	[0133.047] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0133.047] GetProcessHeap () returned 0x600000
	[0133.047] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0133.047] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0133.047] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0133.047] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0133.047] GetProcessHeap () returned 0x600000
	[0133.047] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0133.047] GetProcessHeap () returned 0x600000
	[0133.047] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0133.047] ReleaseMutex (hMutex=0x178) returned 1
	[0133.047] CloseHandle (hObject=0x178) returned 1
	[0133.047] Sleep (dwMilliseconds=0x64) 
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.263] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.263] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.263] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.263] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.263] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0133.263] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.263] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.263] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0133.263] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.263] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.263] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.263] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.263] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0133.263] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0133.263] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0133.263] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.263] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0133.263] GetProcessHeap () returned 0x600000
	[0133.264] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0133.264] ReleaseMutex (hMutex=0x178) returned 1
	[0133.264] CloseHandle (hObject=0x178) returned 1
	[0133.264] Sleep (dwMilliseconds=0x64) 
	[0133.482] GetProcessHeap () returned 0x600000
	[0133.482] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0133.482] GetProcessHeap () returned 0x600000
	[0133.482] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0133.482] GetProcessHeap () returned 0x600000
	[0133.482] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0133.482] GetProcessHeap () returned 0x600000
	[0133.482] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0133.482] GetProcessHeap () returned 0x600000
	[0133.482] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0133.482] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0133.482] GetProcessHeap () returned 0x600000
	[0133.482] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0133.482] GetProcessHeap () returned 0x600000
	[0133.482] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0133.482] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0133.482] GetProcessHeap () returned 0x600000
	[0133.482] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0133.482] GetProcessHeap () returned 0x600000
	[0133.482] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0133.482] GetProcessHeap () returned 0x600000
	[0133.482] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0133.482] GetProcessHeap () returned 0x600000
	[0133.482] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0133.482] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0133.482] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0133.482] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0133.482] GetProcessHeap () returned 0x600000
	[0133.483] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0133.483] GetProcessHeap () returned 0x600000
	[0133.483] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0133.483] ReleaseMutex (hMutex=0x178) returned 1
	[0133.483] CloseHandle (hObject=0x178) returned 1
	[0133.483] Sleep (dwMilliseconds=0x64) 
	[0133.756] GetProcessHeap () returned 0x600000
	[0133.756] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0133.756] GetProcessHeap () returned 0x600000
	[0133.756] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0133.756] GetProcessHeap () returned 0x600000
	[0133.756] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0133.756] GetProcessHeap () returned 0x600000
	[0133.756] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0133.756] GetProcessHeap () returned 0x600000
	[0133.756] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0133.756] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0133.756] GetProcessHeap () returned 0x600000
	[0133.756] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0133.756] GetProcessHeap () returned 0x600000
	[0133.756] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0133.756] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0133.757] GetProcessHeap () returned 0x600000
	[0133.757] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0133.757] GetProcessHeap () returned 0x600000
	[0133.757] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0133.757] GetProcessHeap () returned 0x600000
	[0133.757] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0133.757] GetProcessHeap () returned 0x600000
	[0133.757] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0133.757] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0133.757] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0133.757] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0133.757] GetProcessHeap () returned 0x600000
	[0133.757] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0133.757] GetProcessHeap () returned 0x600000
	[0133.757] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0133.757] ReleaseMutex (hMutex=0x178) returned 1
	[0133.757] CloseHandle (hObject=0x178) returned 1
	[0133.757] Sleep (dwMilliseconds=0x64) 
	[0133.951] GetProcessHeap () returned 0x600000
	[0133.951] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0133.951] GetProcessHeap () returned 0x600000
	[0133.951] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0133.951] GetProcessHeap () returned 0x600000
	[0133.951] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0133.951] GetProcessHeap () returned 0x600000
	[0133.951] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0133.951] GetProcessHeap () returned 0x600000
	[0133.951] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0133.951] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0133.951] GetProcessHeap () returned 0x600000
	[0133.951] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0133.951] GetProcessHeap () returned 0x600000
	[0133.951] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0133.951] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0133.952] GetProcessHeap () returned 0x600000
	[0133.952] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0133.952] GetProcessHeap () returned 0x600000
	[0133.952] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0133.952] GetProcessHeap () returned 0x600000
	[0133.952] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0133.952] GetProcessHeap () returned 0x600000
	[0133.952] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0133.952] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0133.952] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0133.952] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0133.952] GetProcessHeap () returned 0x600000
	[0133.952] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0133.952] GetProcessHeap () returned 0x600000
	[0133.952] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0133.952] ReleaseMutex (hMutex=0x178) returned 1
	[0133.952] CloseHandle (hObject=0x178) returned 1
	[0133.952] Sleep (dwMilliseconds=0x64) 
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0134.208] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0134.208] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0134.208] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0134.208] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0134.208] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0134.208] GetProcessHeap () returned 0x600000
	[0134.208] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0134.208] ReleaseMutex (hMutex=0x178) returned 1
	[0134.209] CloseHandle (hObject=0x178) returned 1
	[0134.209] Sleep (dwMilliseconds=0x64) 
	[0134.410] GetProcessHeap () returned 0x600000
	[0134.410] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0134.410] GetProcessHeap () returned 0x600000
	[0134.410] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0134.410] GetProcessHeap () returned 0x600000
	[0134.410] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0134.410] GetProcessHeap () returned 0x600000
	[0134.410] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0134.410] GetProcessHeap () returned 0x600000
	[0134.410] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0134.410] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0134.410] GetProcessHeap () returned 0x600000
	[0134.410] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0134.410] GetProcessHeap () returned 0x600000
	[0134.410] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0134.410] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0134.410] GetProcessHeap () returned 0x600000
	[0134.410] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0134.410] GetProcessHeap () returned 0x600000
	[0134.410] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0134.410] GetProcessHeap () returned 0x600000
	[0134.410] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0134.410] GetProcessHeap () returned 0x600000
	[0134.411] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0134.411] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0134.411] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0134.411] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0134.411] GetProcessHeap () returned 0x600000
	[0134.411] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0134.411] GetProcessHeap () returned 0x600000
	[0134.411] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0134.411] ReleaseMutex (hMutex=0x178) returned 1
	[0134.411] CloseHandle (hObject=0x178) returned 1
	[0134.411] Sleep (dwMilliseconds=0x64) 
	[0134.623] GetProcessHeap () returned 0x600000
	[0134.623] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0134.623] GetProcessHeap () returned 0x600000
	[0134.623] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0134.623] GetProcessHeap () returned 0x600000
	[0134.623] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0134.623] GetProcessHeap () returned 0x600000
	[0134.623] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0134.623] GetProcessHeap () returned 0x600000
	[0134.623] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0134.623] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0134.623] GetProcessHeap () returned 0x600000
	[0134.623] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0134.623] GetProcessHeap () returned 0x600000
	[0134.623] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0134.623] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0134.623] GetProcessHeap () returned 0x600000
	[0134.623] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0134.623] GetProcessHeap () returned 0x600000
	[0134.624] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0134.624] GetProcessHeap () returned 0x600000
	[0134.624] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0134.624] GetProcessHeap () returned 0x600000
	[0134.624] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0134.624] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0134.624] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0134.624] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0134.624] GetProcessHeap () returned 0x600000
	[0134.624] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0134.624] GetProcessHeap () returned 0x600000
	[0134.624] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0134.624] ReleaseMutex (hMutex=0x178) returned 1
	[0134.624] CloseHandle (hObject=0x178) returned 1
	[0134.624] Sleep (dwMilliseconds=0x64) 
	[0134.803] GetProcessHeap () returned 0x600000
	[0134.803] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0134.803] GetProcessHeap () returned 0x600000
	[0134.803] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0134.803] GetProcessHeap () returned 0x600000
	[0134.803] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0134.803] GetProcessHeap () returned 0x600000
	[0134.803] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0134.804] GetProcessHeap () returned 0x600000
	[0134.804] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0134.804] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0134.804] GetProcessHeap () returned 0x600000
	[0134.804] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0134.804] GetProcessHeap () returned 0x600000
	[0134.804] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0134.804] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0134.804] GetProcessHeap () returned 0x600000
	[0134.804] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0134.804] GetProcessHeap () returned 0x600000
	[0134.804] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0134.804] GetProcessHeap () returned 0x600000
	[0134.804] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0134.804] GetProcessHeap () returned 0x600000
	[0134.804] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0134.804] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0134.804] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0134.804] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0134.804] GetProcessHeap () returned 0x600000
	[0134.804] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0134.804] GetProcessHeap () returned 0x600000
	[0134.804] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0134.804] ReleaseMutex (hMutex=0x178) returned 1
	[0134.804] CloseHandle (hObject=0x178) returned 1
	[0134.804] Sleep (dwMilliseconds=0x64) 
	[0135.014] GetProcessHeap () returned 0x600000
	[0135.014] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0135.014] GetProcessHeap () returned 0x600000
	[0135.014] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0135.014] GetProcessHeap () returned 0x600000
	[0135.014] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0135.014] GetProcessHeap () returned 0x600000
	[0135.014] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0135.014] GetProcessHeap () returned 0x600000
	[0135.014] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0135.014] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0135.014] GetProcessHeap () returned 0x600000
	[0135.014] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0135.014] GetProcessHeap () returned 0x600000
	[0135.014] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0135.014] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0135.014] GetProcessHeap () returned 0x600000
	[0135.014] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0135.014] GetProcessHeap () returned 0x600000
	[0135.014] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0135.014] GetProcessHeap () returned 0x600000
	[0135.014] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0135.014] GetProcessHeap () returned 0x600000
	[0135.014] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0135.014] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0135.015] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0135.015] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0135.015] GetProcessHeap () returned 0x600000
	[0135.015] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0135.015] GetProcessHeap () returned 0x600000
	[0135.015] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0135.015] ReleaseMutex (hMutex=0x178) returned 1
	[0135.015] CloseHandle (hObject=0x178) returned 1
	[0135.015] Sleep (dwMilliseconds=0x64) 
	[0135.229] GetProcessHeap () returned 0x600000
	[0135.229] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0135.229] GetProcessHeap () returned 0x600000
	[0135.229] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0135.229] GetProcessHeap () returned 0x600000
	[0135.229] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0135.229] GetProcessHeap () returned 0x600000
	[0135.229] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0135.229] GetProcessHeap () returned 0x600000
	[0135.229] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0135.229] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0135.229] GetProcessHeap () returned 0x600000
	[0135.229] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0135.229] GetProcessHeap () returned 0x600000
	[0135.229] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0135.229] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0135.230] GetProcessHeap () returned 0x600000
	[0135.230] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0135.230] GetProcessHeap () returned 0x600000
	[0135.230] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0135.230] GetProcessHeap () returned 0x600000
	[0135.230] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0135.230] GetProcessHeap () returned 0x600000
	[0135.230] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0135.230] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0135.230] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0135.230] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0135.230] GetProcessHeap () returned 0x600000
	[0135.230] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0135.230] GetProcessHeap () returned 0x600000
	[0135.230] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0135.230] ReleaseMutex (hMutex=0x178) returned 1
	[0135.230] CloseHandle (hObject=0x178) returned 1
	[0135.230] Sleep (dwMilliseconds=0x64) 
	[0135.405] GetProcessHeap () returned 0x600000
	[0135.405] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0135.405] GetProcessHeap () returned 0x600000
	[0135.405] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0135.405] GetProcessHeap () returned 0x600000
	[0135.405] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0135.405] GetProcessHeap () returned 0x600000
	[0135.405] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0135.405] GetProcessHeap () returned 0x600000
	[0135.405] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0135.405] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0135.405] GetProcessHeap () returned 0x600000
	[0135.405] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0135.405] GetProcessHeap () returned 0x600000
	[0135.405] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0135.405] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0135.406] GetProcessHeap () returned 0x600000
	[0135.406] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0135.406] GetProcessHeap () returned 0x600000
	[0135.406] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0135.406] GetProcessHeap () returned 0x600000
	[0135.406] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0135.406] GetProcessHeap () returned 0x600000
	[0135.406] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0135.406] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0135.406] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0135.406] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0135.406] GetProcessHeap () returned 0x600000
	[0135.406] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0135.406] GetProcessHeap () returned 0x600000
	[0135.406] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0135.406] ReleaseMutex (hMutex=0x178) returned 1
	[0135.406] CloseHandle (hObject=0x178) returned 1
	[0135.406] Sleep (dwMilliseconds=0x64) 
	[0135.634] GetProcessHeap () returned 0x600000
	[0135.634] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0135.634] GetProcessHeap () returned 0x600000
	[0135.634] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0135.634] GetProcessHeap () returned 0x600000
	[0135.634] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0135.634] GetProcessHeap () returned 0x600000
	[0135.634] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0135.634] GetProcessHeap () returned 0x600000
	[0135.634] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0135.634] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0135.634] GetProcessHeap () returned 0x600000
	[0135.634] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0135.634] GetProcessHeap () returned 0x600000
	[0135.634] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0135.634] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0135.634] GetProcessHeap () returned 0x600000
	[0135.634] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0135.634] GetProcessHeap () returned 0x600000
	[0135.634] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0135.634] GetProcessHeap () returned 0x600000
	[0135.634] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0135.635] GetProcessHeap () returned 0x600000
	[0135.635] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0135.635] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0135.635] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0135.635] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0135.635] GetProcessHeap () returned 0x600000
	[0135.635] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0135.635] GetProcessHeap () returned 0x600000
	[0135.635] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0135.635] ReleaseMutex (hMutex=0x178) returned 1
	[0135.635] CloseHandle (hObject=0x178) returned 1
	[0135.635] Sleep (dwMilliseconds=0x64) 
	[0135.901] GetProcessHeap () returned 0x600000
	[0135.901] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0135.901] GetProcessHeap () returned 0x600000
	[0135.901] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0135.901] GetProcessHeap () returned 0x600000
	[0135.901] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0135.901] GetProcessHeap () returned 0x600000
	[0135.901] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0135.901] GetProcessHeap () returned 0x600000
	[0135.902] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0135.902] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0135.902] GetProcessHeap () returned 0x600000
	[0135.902] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0135.902] GetProcessHeap () returned 0x600000
	[0135.902] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0135.902] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0135.902] GetProcessHeap () returned 0x600000
	[0135.902] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0135.902] GetProcessHeap () returned 0x600000
	[0135.902] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0135.902] GetProcessHeap () returned 0x600000
	[0135.902] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0135.902] GetProcessHeap () returned 0x600000
	[0135.902] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0135.902] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0135.902] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0135.902] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0135.902] GetProcessHeap () returned 0x600000
	[0135.902] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0135.902] GetProcessHeap () returned 0x600000
	[0135.902] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0135.902] ReleaseMutex (hMutex=0x178) returned 1
	[0135.903] CloseHandle (hObject=0x178) returned 1
	[0135.903] Sleep (dwMilliseconds=0x64) 
	[0136.149] GetProcessHeap () returned 0x600000
	[0136.149] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0136.149] GetProcessHeap () returned 0x600000
	[0136.149] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0136.149] GetProcessHeap () returned 0x600000
	[0136.149] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0136.149] GetProcessHeap () returned 0x600000
	[0136.149] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0136.149] GetProcessHeap () returned 0x600000
	[0136.149] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0136.149] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0136.149] GetProcessHeap () returned 0x600000
	[0136.150] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0136.150] GetProcessHeap () returned 0x600000
	[0136.150] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0136.150] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0136.150] GetProcessHeap () returned 0x600000
	[0136.150] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0136.150] GetProcessHeap () returned 0x600000
	[0136.150] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0136.150] GetProcessHeap () returned 0x600000
	[0136.150] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0136.150] GetProcessHeap () returned 0x600000
	[0136.150] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0136.150] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0136.150] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0136.150] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0136.150] GetProcessHeap () returned 0x600000
	[0136.150] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0136.150] GetProcessHeap () returned 0x600000
	[0136.150] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0136.150] ReleaseMutex (hMutex=0x178) returned 1
	[0136.150] CloseHandle (hObject=0x178) returned 1
	[0136.150] Sleep (dwMilliseconds=0x64) 
	[0136.385] GetProcessHeap () returned 0x600000
	[0136.385] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0136.385] GetProcessHeap () returned 0x600000
	[0136.385] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0136.385] GetProcessHeap () returned 0x600000
	[0136.385] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0136.385] GetProcessHeap () returned 0x600000
	[0136.386] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0136.386] GetProcessHeap () returned 0x600000
	[0136.386] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0136.386] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0136.386] GetProcessHeap () returned 0x600000
	[0136.386] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0136.386] GetProcessHeap () returned 0x600000
	[0136.386] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0136.386] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0136.386] GetProcessHeap () returned 0x600000
	[0136.386] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0136.386] GetProcessHeap () returned 0x600000
	[0136.386] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0136.386] GetProcessHeap () returned 0x600000
	[0136.386] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0136.386] GetProcessHeap () returned 0x600000
	[0136.386] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0136.386] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0136.386] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0136.386] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0136.386] GetProcessHeap () returned 0x600000
	[0136.386] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0136.386] GetProcessHeap () returned 0x600000
	[0136.386] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0136.386] ReleaseMutex (hMutex=0x178) returned 1
	[0136.386] CloseHandle (hObject=0x178) returned 1
	[0136.386] Sleep (dwMilliseconds=0x64) 
	[0136.617] GetProcessHeap () returned 0x600000
	[0136.617] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0136.617] GetProcessHeap () returned 0x600000
	[0136.617] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0136.617] GetProcessHeap () returned 0x600000
	[0136.617] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0136.617] GetProcessHeap () returned 0x600000
	[0136.617] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0136.618] GetProcessHeap () returned 0x600000
	[0136.618] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0136.618] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0136.618] GetProcessHeap () returned 0x600000
	[0136.618] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0136.618] GetProcessHeap () returned 0x600000
	[0136.618] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0136.618] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0136.618] GetProcessHeap () returned 0x600000
	[0136.618] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0136.618] GetProcessHeap () returned 0x600000
	[0136.618] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0136.618] GetProcessHeap () returned 0x600000
	[0136.618] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0136.618] GetProcessHeap () returned 0x600000
	[0136.618] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0136.618] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0136.618] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0136.618] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0136.618] GetProcessHeap () returned 0x600000
	[0136.618] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0136.618] GetProcessHeap () returned 0x600000
	[0136.618] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0136.618] ReleaseMutex (hMutex=0x178) returned 1
	[0136.618] CloseHandle (hObject=0x178) returned 1
	[0136.618] Sleep (dwMilliseconds=0x64) 
	[0136.885] GetProcessHeap () returned 0x600000
	[0136.885] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62ff20
	[0136.885] GetProcessHeap () returned 0x600000
	[0136.885] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62fef8
	[0136.885] GetProcessHeap () returned 0x600000
	[0136.885] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0136.885] GetProcessHeap () returned 0x600000
	[0136.885] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0136.885] GetProcessHeap () returned 0x600000
	[0136.886] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0136.886] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62fef8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0136.886] GetProcessHeap () returned 0x600000
	[0136.886] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0136.886] GetProcessHeap () returned 0x600000
	[0136.886] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0136.886] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0136.886] GetProcessHeap () returned 0x600000
	[0136.886] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0136.886] GetProcessHeap () returned 0x600000
	[0136.886] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0136.886] GetProcessHeap () returned 0x600000
	[0136.886] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0136.886] GetProcessHeap () returned 0x600000
	[0136.886] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0136.886] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0136.886] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0136.886] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0136.886] GetProcessHeap () returned 0x600000
	[0136.886] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0136.886] GetProcessHeap () returned 0x600000
	[0136.886] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0136.886] ReleaseMutex (hMutex=0x178) returned 1
	[0136.886] CloseHandle (hObject=0x178) returned 1
	[0136.886] Sleep (dwMilliseconds=0x64) 
	[0137.145] GetProcessHeap () returned 0x600000
	[0137.145] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x62fef8
	[0137.145] GetProcessHeap () returned 0x600000
	[0137.145] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x62ff20
	[0137.145] GetProcessHeap () returned 0x600000
	[0137.145] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x62ff48
	[0137.145] GetProcessHeap () returned 0x600000
	[0137.145] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62d8d8
	[0137.145] GetProcessHeap () returned 0x600000
	[0137.145] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62d8d8 | out: hHeap=0x600000) returned 1
	[0137.145] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x62ff20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0137.145] GetProcessHeap () returned 0x600000
	[0137.145] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff48 | out: hHeap=0x600000) returned 1
	[0137.145] GetProcessHeap () returned 0x600000
	[0137.145] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62fef8 | out: hHeap=0x600000) returned 1
	[0137.145] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x31fc64, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x31fc64*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0137.145] GetProcessHeap () returned 0x600000
	[0137.145] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62ff20 | out: hHeap=0x600000) returned 1
	[0137.145] GetProcessHeap () returned 0x600000
	[0137.145] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x40) returned 0x61daa0
	[0137.145] GetProcessHeap () returned 0x600000
	[0137.145] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x3a) returned 0x61dae8
	[0137.145] GetProcessHeap () returned 0x600000
	[0137.145] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61dae8, Size=0x72) returned 0x60fbb0
	[0137.145] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0137.146] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x178
	[0137.146] WaitForSingleObject (hHandle=0x178, dwMilliseconds=0x0) returned 0x0
	[0137.146] GetProcessHeap () returned 0x600000
	[0137.146] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61daa0 | out: hHeap=0x600000) returned 1
	[0137.146] GetProcessHeap () returned 0x600000
	[0137.146] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fbb0 | out: hHeap=0x600000) returned 1
	[0137.146] ReleaseMutex (hMutex=0x178) returned 1
	[0137.146] CloseHandle (hObject=0x178) returned 1
	[0137.146] Sleep (dwMilliseconds=0x64) 
	[0137.366] SetEvent (hEvent=0xb4) returned 1
	[0137.366] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0
	[0240.580] GetExitCodeThread (in: hThread=0xb8, lpExitCode=0x31fcf4 | out: lpExitCode=0x31fcf4) returned 1
	[0240.580] CloseHandle (hObject=0xb4) returned 1
	[0240.581] CloseHandle (hObject=0xb8) returned 1
	[0240.581] GetProcessHeap () returned 0x600000
	[0240.581] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x613f90 | out: hHeap=0x600000) returned 1
	[0240.581] GetProcessHeap () returned 0x600000
	[0240.581] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cd48 | out: hHeap=0x600000) returned 1
	[0240.581] GetProcessHeap () returned 0x600000
	[0240.581] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6115f0 | out: hHeap=0x600000) returned 1
	[0240.581] GetProcessHeap () returned 0x600000
	[0240.581] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x618850 | out: hHeap=0x600000) returned 1
	[0240.581] GetProcessHeap () returned 0x600000
	[0240.581] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6152f8 | out: hHeap=0x600000) returned 1
	[0240.581] GetProcessHeap () returned 0x600000
	[0240.581] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x611840 | out: hHeap=0x600000) returned 1
	[0240.581] ExitProcess (uExitCode=0x0) 

Thread:
	id = 36
	os_tid = 0x344

	[0126.852] GetProcessHeap () returned 0x600000
	[0126.852] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x61cdc0
	[0126.852] GetProcessHeap () returned 0x600000
	[0126.852] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x61cd98
	[0126.852] GetProcessHeap () returned 0x600000
	[0126.852] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x1e) returned 0x61cde8
	[0126.852] GetProcessHeap () returned 0x600000
	[0126.852] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x61ce10
	[0126.852] GetProcessHeap () returned 0x600000
	[0126.852] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61e788
	[0126.852] GetProcessHeap () returned 0x600000
	[0126.852] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e788 | out: hHeap=0x600000) returned 1
	[0126.852] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x61cde8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0126.852] GetProcessHeap () returned 0x600000
	[0126.852] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61ce10 | out: hHeap=0x600000) returned 1
	[0126.852] GetProcessHeap () returned 0x600000
	[0126.852] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cd98 | out: hHeap=0x600000) returned 1
	[0126.852] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xe3fbcc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xe3fbcc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0126.852] GetProcessHeap () returned 0x600000
	[0126.852] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cde8 | out: hHeap=0x600000) returned 1
	[0126.852] GetProcessHeap () returned 0x600000
	[0126.852] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x80) returned 0x61e788
	[0126.852] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20119, phkResult=0xe3fbb4 | out: phkResult=0xe3fbb4*=0xbc) returned 0x0
	[0126.853] RegQueryValueExW (in: hKey=0xbc, lpValueName="CurrentBuild", lpReserved=0x0, lpType=0xe3fbb0, lpData=0xe3fc40, lpcbData=0xe3fbb8*=0x22 | out: lpType=0xe3fbb0*=0x1, lpData="7601", lpcbData=0xe3fbb8*=0xa) returned 0x0
	[0126.853] RegCloseKey (hKey=0xbc) returned 0x0
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e788 | out: hHeap=0x600000) returned 1
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x61cde8
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x10) returned 0x611620
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x10) returned 0x611638
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61e788
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e788 | out: hHeap=0x600000) returned 1
	[0126.853] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\", lpDst=0x611620, nSize=0x8 | out: lpDst="") returned 0x26
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x611638 | out: hHeap=0x600000) returned 1
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x611620, Size=0x1e) returned 0x61cd98
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x1e) returned 0x61ce10
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61e788
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e788 | out: hHeap=0x600000) returned 1
	[0126.853] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\", lpDst=0x61cd98, nSize=0xf | out: lpDst="") returned 0x26
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61ce10 | out: hHeap=0x600000) returned 1
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61cd98, Size=0x3a) returned 0x61d590
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x3a) returned 0x61d5d8
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61e788
	[0126.853] GetProcessHeap () returned 0x600000
	[0126.853] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e788 | out: hHeap=0x600000) returned 1
	[0126.853] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\", lpDst=0x61d590, nSize=0x1d | out: lpDst="") returned 0x26
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61d5d8 | out: hHeap=0x600000) returned 1
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61d590, Size=0x72) returned 0x60f6b0
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x72) returned 0x60f730
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61e788
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e788 | out: hHeap=0x600000) returned 1
	[0126.854] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\", lpDst=0x60f6b0, nSize=0x39 | out: lpDst="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\") returned 0x26
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f730 | out: hHeap=0x600000) returned 1
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cde8 | out: hHeap=0x600000) returned 1
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x10) returned 0x611620
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20) returned 0x61cde8
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x30) returned 0x61e788
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x2c) returned 0x61e7c0
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x2c) returned 0x61e7f8
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61e830
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e830 | out: hHeap=0x600000) returned 1
	[0126.854] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\explorer.exe", lpDst=0x61e7c0, nSize=0x16 | out: lpDst="C:\\Windows\\explorer.e") returned 0x18
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e7f8 | out: hHeap=0x600000) returned 1
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61e7c0, Size=0x56) returned 0x61e7c0
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x56) returned 0x61e820
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61e880
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.854] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e880 | out: hHeap=0x600000) returned 1
	[0126.854] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\explorer.exe", lpDst=0x61e7c0, nSize=0x2b | out: lpDst="C:\\Windows\\explorer.exe") returned 0x18
	[0126.854] GetProcessHeap () returned 0x600000
	[0126.855] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e820 | out: hHeap=0x600000) returned 1
	[0126.855] GetProcessHeap () returned 0x600000
	[0126.855] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e788 | out: hHeap=0x600000) returned 1
	[0126.855] GetProcessHeap () returned 0x600000
	[0126.855] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x209) returned 0x61e820
	[0126.855] GetVersion () returned 0x1db10106
	[0126.855] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0126.855] GetProcAddress (hModule=0x76300000, lpProcName="IsWow64Process") returned 0x7631195e
	[0126.855] GetProcessHeap () returned 0x600000
	[0126.855] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x50) returned 0x61ea38
	[0126.855] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0126.855] GetProcAddress (hModule=0x76300000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7632d650
	[0126.855] Wow64DisableWow64FsRedirection (in: OldValue=0xe3fc24 | out: OldValue=0xe3fc24*=0x0) returned 1
	[0126.855] GetProcessHeap () returned 0x600000
	[0126.855] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61ea38 | out: hHeap=0x600000) returned 1
	[0126.855] GetCurrentProcess () returned 0xffffffff
	[0126.855] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xe3fbb4 | out: TokenHandle=0xe3fbb4*=0xbc) returned 1
	[0126.855] GetTokenInformation (in: TokenHandle=0xbc, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xe3fbcc | out: TokenInformation=0x0, ReturnLength=0xe3fbcc) returned 0
	[0126.855] GetProcessHeap () returned 0x600000
	[0126.855] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x118) returned 0x61ea38
	[0126.855] GetTokenInformation (in: TokenHandle=0xbc, TokenInformationClass=0x2, TokenInformation=0x61ea38, TokenInformationLength=0x118, ReturnLength=0xe3fbcc | out: TokenInformation=0x61ea38, ReturnLength=0xe3fbcc) returned 1
	[0126.855] AllocateAndInitializeSid (in: pIdentifierAuthority=0xe3fbc0, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0xe3fbc8 | out: pSid=0xe3fbc8*=0x611638*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1
	[0126.855] EqualSid (pSid1=0x611638*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x61ea9c*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0
	[0126.856] EqualSid (pSid1=0x611638*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x61eab8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0
	[0126.856] EqualSid (pSid1=0x611638*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x61eac4*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1
	[0126.856] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x61eac4*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), Name=0xe3f798, cchName=0xe3fbcc, ReferencedDomainName=0xe3f9a4, cchReferencedDomainName=0xe3fbcc, peUse=0xe3fbb0 | out: Name="Administrators", cchName=0xe3fbcc, ReferencedDomainName="BUILTIN", cchReferencedDomainName=0xe3fbcc, peUse=0xe3fbb0) returned 1
	[0126.992] GetProcessHeap () returned 0x600000
	[0126.992] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61ea38 | out: hHeap=0x600000) returned 1
	[0126.992] GetProcessHeap () returned 0x600000
	[0126.992] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0xb0) returned 0x61ea38
	[0126.992] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x20119, phkResult=0xe3fb94 | out: phkResult=0xe3fb94*=0x100) returned 0x0
	[0126.992] RegQueryValueExW (in: hKey=0x100, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0xe3fb90, lpData=0xe3fbcc, lpcbData=0xe3fb98*=0xa | out: lpType=0xe3fb90*=0x4, lpData=0xe3fbcc*=0x5, lpcbData=0xe3fb98*=0x4) returned 0x0
	[0126.993] RegCloseKey (hKey=0x100) returned 0x0
	[0126.993] GetProcessHeap () returned 0x600000
	[0126.993] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61ea38 | out: hHeap=0x600000) returned 1
	[0126.993] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x61e820, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe")) returned 0x4a
	[0126.993] GetCurrentProcess () returned 0xffffffff
	[0126.993] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0xe3fc14 | out: Wow64Process=0xe3fc14) returned 1
	[0126.993] GetProcessHeap () returned 0x600000
	[0126.993] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x330) returned 0x6223d8
	[0126.993] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\9c354b42"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x100
	[0126.995] WriteFile (in: hFile=0x100, lpBuffer=0x6223d8*, nNumberOfBytesToWrite=0x32f, lpNumberOfBytesWritten=0xe3fc00, lpOverlapped=0x0 | out: lpBuffer=0x6223d8*, lpNumberOfBytesWritten=0xe3fc00*=0x32f, lpOverlapped=0x0) returned 1
	[0126.996] WriteFile (in: hFile=0x100, lpBuffer=0x61e820*, nNumberOfBytesToWrite=0x208, lpNumberOfBytesWritten=0xe3fc00, lpOverlapped=0x0 | out: lpBuffer=0x61e820*, lpNumberOfBytesWritten=0xe3fc00*=0x208, lpOverlapped=0x0) returned 1
	[0126.996] FlushFileBuffers (hFile=0x100) returned 1
	[0126.999] CloseHandle (hObject=0x100) returned 1
	[0126.999] GetProcessHeap () returned 0x600000
	[0126.999] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x70) returned 0x61ea38
	[0126.999] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0126.999] GetProcAddress (hModule=0x77d90000, lpProcName="RtlInitUnicodeString") returned 0x77dbe208
	[0126.999] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0126.999] GetProcAddress (hModule=0x77d90000, lpProcName="NtQueryInformationProcess") returned 0x77dafac8
	[0126.999] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0126.999] GetProcAddress (hModule=0x77d90000, lpProcName="RtlEnterCriticalSection") returned 0x77db22b0
	[0127.000] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0127.000] GetProcAddress (hModule=0x77d90000, lpProcName="RtlLeaveCriticalSection") returned 0x77db2270
	[0127.000] GetCurrentProcessId () returned 0x7d4
	[0127.000] OpenProcess (dwDesiredAccess=0x438, bInheritHandle=0, dwProcessId=0x7d4) returned 0x100
	[0127.000] NtQueryInformationProcess (in: ProcessHandle=0x100, ProcessInformationClass=0x0, ProcessInformation=0xe3fb6c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0xe3fb6c, ReturnLength=0x0) returned 0x0
	[0127.000] ReadProcessMemory (in: hProcess=0x100, lpBaseAddress=0x7efde000, lpBuffer=0xe3fb84, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe3fb84*, lpNumberOfBytesRead=0x0) returned 1
	[0127.000] ReadProcessMemory (in: hProcess=0x100, lpBaseAddress=0x77e90200, lpBuffer=0xe3fb3c, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe3fb3c*, lpNumberOfBytesRead=0x0) returned 1
	[0127.000] RtlInitUnicodeString (in: DestinationString=0x601338, SourceString="C:\\Windows\\explorer.exe" | out: DestinationString="C:\\Windows\\explorer.exe") 
	[0127.000] RtlInitUnicodeString (in: DestinationString=0x601340, SourceString="C:\\Windows\\explorer.exe" | out: DestinationString="C:\\Windows\\explorer.exe") 
	[0127.000] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xe3f718, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe")) returned 0x4a
	[0127.000] ReadProcessMemory (in: hProcess=0x100, lpBaseAddress=0xe3fbac, lpBuffer=0xe3fbb4, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe3fbb4*, lpNumberOfBytesRead=0x0) returned 1
	[0127.000] ReadProcessMemory (in: hProcess=0x100, lpBaseAddress=0x601948, lpBuffer=0xe3f928, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe3f928*, lpNumberOfBytesRead=0x0) returned 1
	[0127.000] RtlInitUnicodeString (in: DestinationString=0x6026e4, SourceString="C:\\Windows\\explorer.exe" | out: DestinationString="C:\\Windows\\explorer.exe") 
	[0127.000] RtlInitUnicodeString (in: DestinationString=0x6026ec, SourceString="C:\\Windows\\explorer.exe" | out: DestinationString="C:\\Windows\\explorer.exe") 
	[0127.000] CloseHandle (hObject=0x100) returned 1
	[0127.000] GetProcessHeap () returned 0x600000
	[0127.000] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61ea38 | out: hHeap=0x600000) returned 1
	[0127.000] GetProcessHeap () returned 0x600000
	[0127.000] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0xa0) returned 0x61ea38
	[0127.000] GetProcessHeap () returned 0x600000
	[0127.000] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x9c) returned 0x61f588
	[0127.000] GetProcessHeap () returned 0x600000
	[0127.000] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x9c) returned 0x61f630
	[0127.001] GetProcessHeap () returned 0x600000
	[0127.001] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61f6d8
	[0127.001] GetProcessHeap () returned 0x600000
	[0127.001] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61f6d8 | out: hHeap=0x600000) returned 1
	[0127.001] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\microsoft.NET\\Framework;%windir%\\microsoft.NET\\Framework64;ole32.dll", lpDst=0x61f588, nSize=0x4e | out: lpDst="C:\\Windows\\microsoft.NET\\Framework;C:\\Windows\\microsoft.NET\\Framework64;ole32") returned 0x52
	[0127.001] GetProcessHeap () returned 0x600000
	[0127.001] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61f630 | out: hHeap=0x600000) returned 1
	[0127.001] GetProcessHeap () returned 0x600000
	[0127.001] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x61f588, Size=0x136) returned 0x61f588
	[0127.001] GetProcessHeap () returned 0x600000
	[0127.001] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x136) returned 0x622710
	[0127.001] GetProcessHeap () returned 0x600000
	[0127.001] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x61f6c8
	[0127.001] GetProcessHeap () returned 0x600000
	[0127.001] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61f6c8 | out: hHeap=0x600000) returned 1
	[0127.001] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\microsoft.NET\\Framework;%windir%\\microsoft.NET\\Framework64;ole32.dll", lpDst=0x61f588, nSize=0x9b | out: lpDst="C:\\Windows\\microsoft.NET\\Framework;C:\\Windows\\microsoft.NET\\Framework64;ole32.dll") returned 0x52
	[0127.001] GetProcessHeap () returned 0x600000
	[0127.001] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x622710 | out: hHeap=0x600000) returned 1
	[0127.001] GetProcessHeap () returned 0x600000
	[0127.001] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61ea38 | out: hHeap=0x600000) returned 1
	[0127.001] CoInitializeEx (pvReserved=0x0, dwCoInit=0x6) returned 0x0
	[0127.558] GetProcessHeap () returned 0x600000
	[0127.558] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20a) returned 0x6274e8
	[0127.558] FindFirstFileW (in: lpFileName="C:\\Windows\\microsoft.NET\\Framework64\\*", lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x626920
	[0127.559] FindNextFileW (in: hFindFile=0x626920, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0127.559] FindNextFileW (in: hFindFile=0x626920, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ce80ba, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2ce80ba, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c2f7a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x30, dwReserved1=0x2, cFileName="sbscmp10.dll", cAlternateFileName="")) returned 1
	[0127.559] FindNextFileW (in: hFindFile=0x626920, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2d34374, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2d34374, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c428543, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x30, dwReserved1=0x2, cFileName="sbscmp20_mscorwks.dll", cAlternateFileName="")) returned 1
	[0127.559] FindNextFileW (in: hFindFile=0x626920, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2dcc8e8, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2dcc8e8, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x30, dwReserved1=0x2, cFileName="sbscmp20_perfcounter.dll", cAlternateFileName="")) returned 1
	[0127.559] FindNextFileW (in: hFindFile=0x626920, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e64e5c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2e64e5c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x30, dwReserved1=0x2, cFileName="SharedReg12.dll", cAlternateFileName="")) returned 1
	[0127.559] FindNextFileW (in: hFindFile=0x626920, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v2.0.50727", cAlternateFileName="V20~1.507")) returned 1
	[0127.559] GetProcessHeap () returned 0x600000
	[0127.559] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x30) returned 0x613448
	[0127.559] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0127.559] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0127.559] GetProcessHeap () returned 0x600000
	[0127.559] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x626960
	[0127.559] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0xe3f894, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0xe3f8d0 | out: ppv=0xe3f8d0*=0x61daec) returned 0x0
	[0176.033] IFileOperation:SetOperationFlags (This=0x61daec, dwOperationFlags=0x10840414) returned 0x0
	[0177.511] SHCreateItemFromParsingName (in: pszPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0xe3f8cc | out: ppv=0xe3f8cc*=0x610834) returned 0x0
	[0180.726] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v2.0.50727", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0xe3f8c4 | out: ppv=0xe3f8c4*=0x667664) returned 0x0
	[0180.729] IFileOperation:CopyItem (This=0x61daec, psiItem=0x610834, psiDestinationFolder=0x667664, pszCopyName="ole32.dll", pfopsItem=0x0) returned 0x0
	[0181.030] IFileOperation:PerformOperations (This=0x61daec) returned 0x0
	[0181.281] IUnknown:Release (This=0x667664) returned 0x0
	[0181.281] IUnknown:Release (This=0x610834) returned 0x0
	[0181.281] IUnknown:Release (This=0x61daec) returned 0x0
	[0182.277] GetProcessHeap () returned 0x600000
	[0182.277] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x626960 | out: hHeap=0x600000) returned 1
	[0182.277] GetProcessHeap () returned 0x600000
	[0182.278] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x613448 | out: hHeap=0x600000) returned 1
	[0182.278] FindNextFileW (in: hFindFile=0x626920, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0182.278] GetProcessHeap () returned 0x600000
	[0182.278] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x30) returned 0x63c240
	[0182.278] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0182.278] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0182.278] GetProcessHeap () returned 0x600000
	[0182.278] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62daa0
	[0182.278] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0xe3f894, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0xe3f8d0 | out: ppv=0xe3f8d0*=0x677094) returned 0x0
	[0189.910] IFileOperation:SetOperationFlags (This=0x677094, dwOperationFlags=0x10840414) returned 0x0
	[0190.743] SHCreateItemFromParsingName (in: pszPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0xe3f8cc | out: ppv=0xe3f8cc*=0x610834) returned 0x0
	[0190.751] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v3.0", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0xe3f8c4 | out: ppv=0xe3f8c4*=0x667664) returned 0x0
	[0190.752] IFileOperation:CopyItem (This=0x677094, psiItem=0x610834, psiDestinationFolder=0x667664, pszCopyName="ole32.dll", pfopsItem=0x0) returned 0x0
	[0191.263] IFileOperation:PerformOperations (This=0x677094) returned 0x0
	[0191.497] IUnknown:Release (This=0x667664) returned 0x0
	[0191.497] IUnknown:Release (This=0x610834) returned 0x0
	[0191.497] IUnknown:Release (This=0x677094) returned 0x0
	[0191.859] GetProcessHeap () returned 0x600000
	[0191.859] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62daa0 | out: hHeap=0x600000) returned 1
	[0191.859] GetProcessHeap () returned 0x600000
	[0191.859] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x63c240 | out: hHeap=0x600000) returned 1
	[0191.859] FindNextFileW (in: hFindFile=0x626920, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x95314a8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x95314a8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0191.860] GetProcessHeap () returned 0x600000
	[0191.860] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x30) returned 0x63c240
	[0191.860] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0191.860] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0191.860] GetProcessHeap () returned 0x600000
	[0191.860] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62daa0
	[0191.860] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0xe3f894, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0xe3f8d0 | out: ppv=0xe3f8d0*=0x6771b4) returned 0x0
	[0200.160] IFileOperation:SetOperationFlags (This=0x6771b4, dwOperationFlags=0x10840414) returned 0x0
	[0200.949] SHCreateItemFromParsingName (in: pszPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0xe3f8cc | out: ppv=0xe3f8cc*=0x610834) returned 0x0
	[0200.955] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v3.5", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0xe3f8c4 | out: ppv=0xe3f8c4*=0x667664) returned 0x0
	[0200.957] IFileOperation:CopyItem (This=0x6771b4, psiItem=0x610834, psiDestinationFolder=0x667664, pszCopyName="ole32.dll", pfopsItem=0x0) returned 0x0
	[0201.532] IFileOperation:PerformOperations (This=0x6771b4) returned 0x0
	[0201.773] IUnknown:Release (This=0x667664) returned 0x0
	[0201.773] IUnknown:Release (This=0x610834) returned 0x0
	[0201.773] IUnknown:Release (This=0x6771b4) returned 0x0
	[0202.058] GetProcessHeap () returned 0x600000
	[0202.058] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62daa0 | out: hHeap=0x600000) returned 1
	[0202.058] GetProcessHeap () returned 0x600000
	[0202.058] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x63c240 | out: hHeap=0x600000) returned 1
	[0202.058] FindNextFileW (in: hFindFile=0x626920, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 1
	[0202.058] GetProcessHeap () returned 0x600000
	[0202.058] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x30) returned 0x63c240
	[0202.058] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0202.058] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0202.058] GetProcessHeap () returned 0x600000
	[0202.058] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62daa0
	[0202.059] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0xe3f894, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0xe3f8d0 | out: ppv=0xe3f8d0*=0x67728c) returned 0x0
	[0206.170] IFileOperation:SetOperationFlags (This=0x67728c, dwOperationFlags=0x10840414) returned 0x0
	[0206.399] SHCreateItemFromParsingName (in: pszPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0xe3f8cc | out: ppv=0xe3f8cc*=0x610834) returned 0x0
	[0206.404] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v4.0.30319", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0xe3f8c4 | out: ppv=0xe3f8c4*=0x667664) returned 0x0
	[0206.405] IFileOperation:CopyItem (This=0x67728c, psiItem=0x610834, psiDestinationFolder=0x667664, pszCopyName="ole32.dll", pfopsItem=0x0) returned 0x0
	[0206.506] IFileOperation:PerformOperations (This=0x67728c) returned 0x0
	[0206.958] IUnknown:Release (This=0x667664) returned 0x0
	[0206.958] IUnknown:Release (This=0x610834) returned 0x0
	[0206.958] IUnknown:Release (This=0x67728c) returned 0x0
	[0207.054] GetProcessHeap () returned 0x600000
	[0207.054] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62daa0 | out: hHeap=0x600000) returned 1
	[0207.054] GetProcessHeap () returned 0x600000
	[0207.054] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x63c240 | out: hHeap=0x600000) returned 1
	[0207.054] FindNextFileW (in: hFindFile=0x626920, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 0
	[0207.054] FindClose (in: hFindFile=0x626920 | out: hFindFile=0x626920) returned 1
	[0207.054] GetProcessHeap () returned 0x600000
	[0207.054] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6274e8 | out: hHeap=0x600000) returned 1
	[0207.054] CoUninitialize () 
	[0207.276] GetProcessHeap () returned 0x600000
	[0207.276] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61f588 | out: hHeap=0x600000) returned 1
	[0207.276] ShellExecuteExW (in: pExecInfo=0xe3fb8c*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="open", lpFile="compmgmt.msc", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0xe3fb8c*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="open", lpFile="compmgmt.msc", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
	[0224.381] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0224.381] GetProcessHeap () returned 0x600000
	[0224.381] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0xa0) returned 0x668e98
	[0224.381] GetProcessHeap () returned 0x600000
	[0224.381] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x9c) returned 0x668f40
	[0224.381] GetProcessHeap () returned 0x600000
	[0224.381] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x9c) returned 0x668fe8
	[0224.381] GetProcessHeap () returned 0x600000
	[0224.381] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62daa0
	[0224.381] GetProcessHeap () returned 0x600000
	[0224.381] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62daa0 | out: hHeap=0x600000) returned 1
	[0224.381] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\microsoft.NET\\Framework;%windir%\\microsoft.NET\\Framework64;ole32.dll", lpDst=0x668f40, nSize=0x4e | out: lpDst="C:\\Windows\\microsoft.NET\\Framework;C:\\Windows\\microsoft.NET\\Framework64;ole32") returned 0x52
	[0224.381] GetProcessHeap () returned 0x600000
	[0224.381] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x668fe8 | out: hHeap=0x600000) returned 1
	[0224.381] GetProcessHeap () returned 0x600000
	[0224.381] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x668f40, Size=0x136) returned 0x61f588
	[0224.381] GetProcessHeap () returned 0x600000
	[0224.381] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x136) returned 0x644200
	[0224.381] GetProcessHeap () returned 0x600000
	[0224.381] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62daa0
	[0224.381] GetProcessHeap () returned 0x600000
	[0224.381] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62daa0 | out: hHeap=0x600000) returned 1
	[0224.381] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\microsoft.NET\\Framework;%windir%\\microsoft.NET\\Framework64;ole32.dll", lpDst=0x61f588, nSize=0x9b | out: lpDst="C:\\Windows\\microsoft.NET\\Framework;C:\\Windows\\microsoft.NET\\Framework64;ole32.dll") returned 0x52
	[0224.381] GetProcessHeap () returned 0x600000
	[0224.381] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x644200 | out: hHeap=0x600000) returned 1
	[0224.381] GetProcessHeap () returned 0x600000
	[0224.381] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x668e98 | out: hHeap=0x600000) returned 1
	[0224.381] CoInitializeEx (pvReserved=0x0, dwCoInit=0x6) returned 0x0
	[0224.382] GetProcessHeap () returned 0x600000
	[0224.382] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20a) returned 0x6302e0
	[0224.382] FindFirstFileW (in: lpFileName="C:\\Windows\\microsoft.NET\\Framework64\\*", lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x600000, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x630f80
	[0224.382] FindNextFileW (in: hFindFile=0x630f80, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x600000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.382] FindNextFileW (in: hFindFile=0x630f80, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ce80ba, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2ce80ba, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c2f7a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x600000, dwReserved1=0x0, cFileName="sbscmp10.dll", cAlternateFileName="")) returned 1
	[0224.382] FindNextFileW (in: hFindFile=0x630f80, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2d34374, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2d34374, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c428543, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x600000, dwReserved1=0x0, cFileName="sbscmp20_mscorwks.dll", cAlternateFileName="")) returned 1
	[0224.382] FindNextFileW (in: hFindFile=0x630f80, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2dcc8e8, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2dcc8e8, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x600000, dwReserved1=0x0, cFileName="sbscmp20_perfcounter.dll", cAlternateFileName="")) returned 1
	[0224.382] FindNextFileW (in: hFindFile=0x630f80, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e64e5c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2e64e5c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x600000, dwReserved1=0x0, cFileName="SharedReg12.dll", cAlternateFileName="")) returned 1
	[0224.382] FindNextFileW (in: hFindFile=0x630f80, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4c1616e0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x4c1616e0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x600000, dwReserved1=0x0, cFileName="v2.0.50727", cAlternateFileName="V20~1.507")) returned 1
	[0224.382] GetProcessHeap () returned 0x600000
	[0224.382] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x30) returned 0x682a00
	[0224.382] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0224.382] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0224.383] GetProcessHeap () returned 0x600000
	[0224.383] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62daa0
	[0224.383] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0xe3f684, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0xe3f6c0 | out: ppv=0xe3f6c0*=0x6773ac) returned 0x0
	[0230.136] IFileOperation:SetOperationFlags (This=0x6773ac, dwOperationFlags=0x10840414) returned 0x0
	[0230.371] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v2.0.50727\\ole32.dll", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0xe3f6bc | out: ppv=0xe3f6bc*=0x0) returned 0x80070002
	[0230.374] IUnknown:Release (This=0x6773ac) returned 0x0
	[0230.431] GetProcessHeap () returned 0x600000
	[0230.431] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62daa0 | out: hHeap=0x600000) returned 1
	[0230.431] GetProcessHeap () returned 0x600000
	[0230.431] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x682a00 | out: hHeap=0x600000) returned 1
	[0230.431] FindNextFileW (in: hFindFile=0x630f80, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x520e49a0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x520e49a0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x600000, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0230.431] GetProcessHeap () returned 0x600000
	[0230.431] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x30) returned 0x682a00
	[0230.431] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0230.431] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0230.431] GetProcessHeap () returned 0x600000
	[0230.432] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62daa0
	[0230.432] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0xe3f684, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0xe3f6c0 | out: ppv=0xe3f6c0*=0x677484) returned 0x0
	[0233.769] IFileOperation:SetOperationFlags (This=0x677484, dwOperationFlags=0x10840414) returned 0x0
	[0233.946] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v3.0\\ole32.dll", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0xe3f6bc | out: ppv=0xe3f6bc*=0x0) returned 0x80070002
	[0233.949] IUnknown:Release (This=0x677484) returned 0x0
	[0234.017] GetProcessHeap () returned 0x600000
	[0234.017] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62daa0 | out: hHeap=0x600000) returned 1
	[0234.017] GetProcessHeap () returned 0x600000
	[0234.017] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x682a00 | out: hHeap=0x600000) returned 1
	[0234.017] FindNextFileW (in: hFindFile=0x630f80, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x58315520, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x58315520, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x600000, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0234.017] GetProcessHeap () returned 0x600000
	[0234.017] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x30) returned 0x682a00
	[0234.018] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0234.018] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0234.018] GetProcessHeap () returned 0x600000
	[0234.018] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62daa0
	[0234.018] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0xe3f684, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0xe3f6c0 | out: ppv=0xe3f6c0*=0x6773ac) returned 0x0
	[0236.854] IFileOperation:SetOperationFlags (This=0x6773ac, dwOperationFlags=0x10840414) returned 0x0
	[0236.903] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v3.5\\ole32.dll", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0xe3f6bc | out: ppv=0xe3f6bc*=0x610834) returned 0x0
	[0236.905] IFileOperation:DeleteItem (This=0x6773ac, psiItem=0x610834, pfopsItem=0x0) returned 0x0
	[0237.142] IFileOperation:PerformOperations (This=0x6773ac) returned 0x0
	[0237.186] IUnknown:Release (This=0x610834) returned 0x0
	[0237.186] IUnknown:Release (This=0x6773ac) returned 0x0
	[0237.333] GetProcessHeap () returned 0x600000
	[0237.333] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62daa0 | out: hHeap=0x600000) returned 1
	[0237.333] GetProcessHeap () returned 0x600000
	[0237.333] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x682a00 | out: hHeap=0x600000) returned 1
	[0237.333] FindNextFileW (in: hFindFile=0x630f80, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5b4ec1c0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x5b4ec1c0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x600000, dwReserved1=0x0, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 1
	[0237.333] GetProcessHeap () returned 0x600000
	[0237.333] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x30) returned 0x682a00
	[0237.333] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0237.333] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0237.333] GetProcessHeap () returned 0x600000
	[0237.333] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x90) returned 0x62daa0
	[0237.333] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0xe3f684, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0xe3f6c0 | out: ppv=0xe3f6c0*=0x677484) returned 0x0
	[0239.713] IFileOperation:SetOperationFlags (This=0x677484, dwOperationFlags=0x10840414) returned 0x0
	[0239.880] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v4.0.30319\\ole32.dll", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0xe3f6bc | out: ppv=0xe3f6bc*=0x610834) returned 0x0
	[0239.883] IFileOperation:DeleteItem (This=0x677484, psiItem=0x610834, pfopsItem=0x0) returned 0x0
	[0240.088] IFileOperation:PerformOperations (This=0x677484) returned 0x0
	[0240.276] IUnknown:Release (This=0x610834) returned 0x0
	[0240.276] IUnknown:Release (This=0x677484) returned 0x0
	[0240.405] GetProcessHeap () returned 0x600000
	[0240.405] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x62daa0 | out: hHeap=0x600000) returned 1
	[0240.405] GetProcessHeap () returned 0x600000
	[0240.405] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x682a00 | out: hHeap=0x600000) returned 1
	[0240.405] FindNextFileW (in: hFindFile=0x630f80, lpFindFileData=0xe3f920 | out: lpFindFileData=0xe3f920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5b4ec1c0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x5b4ec1c0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x600000, dwReserved1=0x0, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 0
	[0240.406] FindClose (in: hFindFile=0x630f80 | out: hFindFile=0x630f80) returned 1
	[0240.406] GetProcessHeap () returned 0x600000
	[0240.406] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6302e0 | out: hHeap=0x600000) returned 1
	[0240.406] CoUninitialize () 
	[0240.561] GetProcessHeap () returned 0x600000
	[0240.561] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61f588 | out: hHeap=0x600000) returned 1
	[0240.561] GetProcessHeap () returned 0x600000
	[0240.561] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x70) returned 0x674888
	[0240.561] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0240.562] GetProcAddress (hModule=0x77d90000, lpProcName="RtlInitUnicodeString") returned 0x77dbe208
	[0240.562] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0240.562] GetProcAddress (hModule=0x77d90000, lpProcName="NtQueryInformationProcess") returned 0x77dafac8
	[0240.562] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0240.562] GetProcAddress (hModule=0x77d90000, lpProcName="RtlEnterCriticalSection") returned 0x77db22b0
	[0240.562] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0240.562] GetProcAddress (hModule=0x77d90000, lpProcName="RtlLeaveCriticalSection") returned 0x77db2270
	[0240.562] GetCurrentProcessId () returned 0x7d4
	[0240.562] OpenProcess (dwDesiredAccess=0x438, bInheritHandle=0, dwProcessId=0x7d4) returned 0x16c
	[0240.563] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0xe3fb5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0xe3fb5c, ReturnLength=0x0) returned 0x0
	[0240.563] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7efde000, lpBuffer=0xe3fb74, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe3fb74*, lpNumberOfBytesRead=0x0) returned 1
	[0240.563] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x77e90200, lpBuffer=0xe3fb2c, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe3fb2c*, lpNumberOfBytesRead=0x0) returned 1
	[0240.563] RtlInitUnicodeString (in: DestinationString=0x601338, SourceString="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" | out: DestinationString="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe") 
	[0240.563] RtlInitUnicodeString (in: DestinationString=0x601340, SourceString="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" | out: DestinationString="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe") 
	[0240.563] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xe3f708, nSize=0x104 | out: lpFilename="C:\\Windows\\explorer.exe" (normalized: "c:\\windows\\explorer.exe")) returned 0x17
	[0240.563] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xe3fb9c, lpBuffer=0xe3fba4, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe3fba4*, lpNumberOfBytesRead=0x0) returned 1
	[0240.563] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x61e7c0, lpBuffer=0xe3f918, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe3f918*, lpNumberOfBytesRead=0x0) returned 1
	[0240.563] RtlInitUnicodeString (in: DestinationString=0x6026e4, SourceString="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" | out: DestinationString="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe") 
	[0240.563] RtlInitUnicodeString (in: DestinationString=0x6026ec, SourceString="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" | out: DestinationString="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe") 
	[0240.563] CloseHandle (hObject=0x16c) returned 1
	[0240.563] GetProcessHeap () returned 0x600000
	[0240.563] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x674888 | out: hHeap=0x600000) returned 1
	[0240.563] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\9c354b42")) returned 1
	[0240.565] GetProcessHeap () returned 0x600000
	[0240.565] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x50) returned 0x63e818
	[0240.565] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0240.565] GetProcAddress (hModule=0x76300000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7632d668
	[0240.565] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1
	[0240.565] GetProcessHeap () returned 0x600000
	[0240.565] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x63e818 | out: hHeap=0x600000) returned 1
	[0240.565] GetProcessHeap () returned 0x600000
	[0240.565] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61e7c0 | out: hHeap=0x600000) returned 1
	[0240.565] GetProcessHeap () returned 0x600000
	[0240.565] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x6223d8 | out: hHeap=0x600000) returned 1
	[0240.565] GetProcessHeap () returned 0x600000
	[0240.565] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60f6b0 | out: hHeap=0x600000) returned 1
	[0240.565] GetProcessHeap () returned 0x600000
	[0240.565] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cdc0 | out: hHeap=0x600000) returned 1
	[0240.565] GetProcessHeap () returned 0x600000
	[0240.565] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x61cde8 | out: hHeap=0x600000) returned 1
	[0240.565] GetProcessHeap () returned 0x600000
	[0240.565] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x611620 | out: hHeap=0x600000) returned 1

Thread:
	id = 37
	os_tid = 0x6b4


Thread:
	id = 40
	os_tid = 0x418


Thread:
	id = 44
	os_tid = 0x7b0


Thread:
	id = 45
	os_tid = 0x618


Thread:
	id = 73
	os_tid = 0x368


Thread:
	id = 90
	os_tid = 0x624


Thread:
	id = 104
	os_tid = 0x6fc


Process:
	id = "13"
	image_name = "rsfd234df.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe"
	page_root = "0x37852000"
	os_pid = "0x794"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "8"
	os_parent_pid = "0x7c0"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 35
	os_tid = 0x334

	[0127.114] GetProcessHeap () returned 0x500000
	[0127.114] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x30) returned 0x511980
	[0127.114] GetProcessHeap () returned 0x500000
	[0127.114] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x3550) returned 0x515480
	[0127.115] GetProcessHeap () returned 0x500000
	[0127.115] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x204) returned 0x5189d8
	[0127.115] GetProcessHeap () returned 0x500000
	[0127.115] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x511730
	[0127.115] GetTickCount () returned 0x1136900
	[0127.115] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x3df710 | out: lpWSAData=0x3df710) returned 0
	[0127.121] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x3df6f0, cchData=32 | out: lpLCData="\x03") returned 16
	[0127.122] GetProcessHeap () returned 0x500000
	[0127.122] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1c) returned 0x514110
	[0127.122] GetProcessHeap () returned 0x500000
	[0127.122] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1c) returned 0x51cee0
	[0127.122] GetVersion () returned 0x1db10106
	[0127.122] GetCurrentProcess () returned 0xffffffff
	[0127.122] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x3df664 | out: TokenHandle=0x3df664*=0xb4) returned 1
	[0127.122] GetTokenInformation (in: TokenHandle=0xb4, TokenInformationClass=0x14, TokenInformation=0x3df65c, TokenInformationLength=0x4, ReturnLength=0x3df660 | out: TokenInformation=0x3df65c, ReturnLength=0x3df660) returned 1
	[0127.122] CloseHandle (hObject=0xb4) returned 1
	[0127.122] GetProcessHeap () returned 0x500000
	[0127.122] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x51cf30
	[0127.122] GetProcessHeap () returned 0x500000
	[0127.122] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x51cf58
	[0127.122] GetProcessHeap () returned 0x500000
	[0127.122] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x51cf80
	[0127.122] GetProcessHeap () returned 0x500000
	[0127.122] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x51d6c8
	[0127.122] GetProcessHeap () returned 0x500000
	[0127.122] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d6c8 | out: hHeap=0x500000) returned 1
	[0127.122] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x51cf58, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0127.122] GetProcessHeap () returned 0x500000
	[0127.122] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf80 | out: hHeap=0x500000) returned 1
	[0127.122] GetProcessHeap () returned 0x500000
	[0127.122] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf30 | out: hHeap=0x500000) returned 1
	[0127.123] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df604, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df604*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0127.123] GetProcessHeap () returned 0x500000
	[0127.123] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf58 | out: hHeap=0x500000) returned 1
	[0127.123] GetProcessHeap () returned 0x500000
	[0127.123] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d6c8
	[0127.123] GetProcessHeap () returned 0x500000
	[0127.123] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d728
	[0127.123] GetProcessHeap () returned 0x500000
	[0127.123] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d728, Size=0x72) returned 0x50f7f0
	[0127.123] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0xb4
	[0127.123] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x0) returned 0x102
	[0127.123] CloseHandle (hObject=0xb4) returned 1
	[0127.123] GetProcessHeap () returned 0x500000
	[0127.123] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d6c8 | out: hHeap=0x500000) returned 1
	[0127.123] GetProcessHeap () returned 0x500000
	[0127.123] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50f7f0 | out: hHeap=0x500000) returned 1
	[0127.123] GetProcessHeap () returned 0x500000
	[0127.123] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x51cf58
	[0127.123] GetProcessHeap () returned 0x500000
	[0127.123] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x51cf30
	[0127.123] GetProcessHeap () returned 0x500000
	[0127.123] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x51cf80
	[0127.123] GetProcessHeap () returned 0x500000
	[0127.123] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x51e710
	[0127.123] GetProcessHeap () returned 0x500000
	[0127.123] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e710 | out: hHeap=0x500000) returned 1
	[0127.124] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x51cf30, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0127.124] GetProcessHeap () returned 0x500000
	[0127.124] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf80 | out: hHeap=0x500000) returned 1
	[0127.124] GetProcessHeap () returned 0x500000
	[0127.124] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf58 | out: hHeap=0x500000) returned 1
	[0127.124] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5ec, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5ec*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0127.124] GetProcessHeap () returned 0x500000
	[0127.124] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf30 | out: hHeap=0x500000) returned 1
	[0127.124] GetProcessHeap () returned 0x500000
	[0127.124] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d728
	[0127.124] GetProcessHeap () returned 0x500000
	[0127.124] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d770
	[0127.124] GetProcessHeap () returned 0x500000
	[0127.124] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d770, Size=0x72) returned 0x50f7f0
	[0127.124] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0127.124] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0xb4
	[0127.124] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x0) returned 0x0
	[0127.124] GetProcessHeap () returned 0x500000
	[0127.124] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d728 | out: hHeap=0x500000) returned 1
	[0127.124] GetProcessHeap () returned 0x500000
	[0127.124] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50f7f0 | out: hHeap=0x500000) returned 1
	[0127.124] ReleaseMutex (hMutex=0xb4) returned 1
	[0127.124] CloseHandle (hObject=0xb4) returned 1
	[0127.124] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xb4
	[0127.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4035e3, lpParameter=0xb4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8
	[0127.125] GetProcessHeap () returned 0x500000
	[0127.125] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x51cf30
	[0127.125] GetProcessHeap () returned 0x500000
	[0127.125] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x51cf58
	[0127.125] GetProcessHeap () returned 0x500000
	[0127.125] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x51cf80
	[0127.125] GetProcessHeap () returned 0x500000
	[0127.125] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x51e710
	[0127.125] GetProcessHeap () returned 0x500000
	[0127.125] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e710 | out: hHeap=0x500000) returned 1
	[0127.125] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x51cf58, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0127.125] GetProcessHeap () returned 0x500000
	[0127.125] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf80 | out: hHeap=0x500000) returned 1
	[0127.125] GetProcessHeap () returned 0x500000
	[0127.125] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf30 | out: hHeap=0x500000) returned 1
	[0127.126] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0127.126] GetProcessHeap () returned 0x500000
	[0127.126] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf58 | out: hHeap=0x500000) returned 1
	[0127.126] GetProcessHeap () returned 0x500000
	[0127.126] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d728
	[0127.126] GetProcessHeap () returned 0x500000
	[0127.126] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d770
	[0127.126] GetProcessHeap () returned 0x500000
	[0127.126] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d770, Size=0x72) returned 0x50f7f0
	[0127.126] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0127.126] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0xbc
	[0127.126] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x0) returned 0x0
	[0127.126] GetProcessHeap () returned 0x500000
	[0127.126] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d728 | out: hHeap=0x500000) returned 1
	[0127.126] GetProcessHeap () returned 0x500000
	[0127.126] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50f7f0 | out: hHeap=0x500000) returned 1
	[0127.126] ReleaseMutex (hMutex=0xbc) returned 1
	[0127.126] CloseHandle (hObject=0xbc) returned 1
	[0127.126] Sleep (dwMilliseconds=0x64) 
	[0127.504] GetProcessHeap () returned 0x500000
	[0127.505] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x526e78
	[0127.513] GetProcessHeap () returned 0x500000
	[0127.514] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x526ea0
	[0127.514] GetProcessHeap () returned 0x500000
	[0127.514] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x526ec8
	[0127.514] GetProcessHeap () returned 0x500000
	[0127.514] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x526a60
	[0127.514] GetProcessHeap () returned 0x500000
	[0127.514] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x526a60 | out: hHeap=0x500000) returned 1
	[0127.514] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x526ea0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0127.514] GetProcessHeap () returned 0x500000
	[0127.514] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x526ec8 | out: hHeap=0x500000) returned 1
	[0127.514] GetProcessHeap () returned 0x500000
	[0127.514] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x526e78 | out: hHeap=0x500000) returned 1
	[0127.514] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0127.514] GetProcessHeap () returned 0x500000
	[0127.514] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x526ea0 | out: hHeap=0x500000) returned 1
	[0127.514] GetProcessHeap () returned 0x500000
	[0127.514] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d848
	[0127.514] GetProcessHeap () returned 0x500000
	[0127.514] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d890
	[0127.514] GetProcessHeap () returned 0x500000
	[0127.514] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d890, Size=0x72) returned 0x50f8f0
	[0127.514] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0127.514] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x11c
	[0127.514] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0x0) returned 0x0
	[0127.514] GetProcessHeap () returned 0x500000
	[0127.514] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d848 | out: hHeap=0x500000) returned 1
	[0127.514] GetProcessHeap () returned 0x500000
	[0127.514] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50f8f0 | out: hHeap=0x500000) returned 1
	[0127.514] ReleaseMutex (hMutex=0x11c) returned 1
	[0127.514] CloseHandle (hObject=0x11c) returned 1
	[0127.514] Sleep (dwMilliseconds=0x64) 
	[0128.089] GetProcessHeap () returned 0x500000
	[0128.089] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x526f40
	[0128.089] GetProcessHeap () returned 0x500000
	[0128.089] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x526f68
	[0128.089] GetProcessHeap () returned 0x500000
	[0128.090] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x526f90
	[0128.090] GetProcessHeap () returned 0x500000
	[0128.090] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x528cf0
	[0128.090] GetProcessHeap () returned 0x500000
	[0128.090] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x528cf0 | out: hHeap=0x500000) returned 1
	[0128.090] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x526f68, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0128.090] GetProcessHeap () returned 0x500000
	[0128.090] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x526f90 | out: hHeap=0x500000) returned 1
	[0128.090] GetProcessHeap () returned 0x500000
	[0128.090] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x526f40 | out: hHeap=0x500000) returned 1
	[0128.090] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0128.090] GetProcessHeap () returned 0x500000
	[0128.090] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x526f68 | out: hHeap=0x500000) returned 1
	[0128.090] GetProcessHeap () returned 0x500000
	[0128.090] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d890
	[0128.090] GetProcessHeap () returned 0x500000
	[0128.090] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d8d8
	[0128.090] GetProcessHeap () returned 0x500000
	[0128.090] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d8d8, Size=0x72) returned 0x50f9f0
	[0128.090] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0128.090] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x12c
	[0128.090] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x0) returned 0x0
	[0128.090] GetProcessHeap () returned 0x500000
	[0128.090] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d890 | out: hHeap=0x500000) returned 1
	[0128.090] GetProcessHeap () returned 0x500000
	[0128.090] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50f9f0 | out: hHeap=0x500000) returned 1
	[0128.090] ReleaseMutex (hMutex=0x12c) returned 1
	[0128.090] CloseHandle (hObject=0x12c) returned 1
	[0128.091] Sleep (dwMilliseconds=0x64) 
	[0128.200] GetProcessHeap () returned 0x500000
	[0128.200] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x527210
	[0128.200] GetProcessHeap () returned 0x500000
	[0128.200] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x527238
	[0128.200] GetProcessHeap () returned 0x500000
	[0128.200] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x527260
	[0128.200] GetProcessHeap () returned 0x500000
	[0128.200] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a858
	[0128.200] GetProcessHeap () returned 0x500000
	[0128.200] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a858 | out: hHeap=0x500000) returned 1
	[0128.200] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x527238, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0128.200] GetProcessHeap () returned 0x500000
	[0128.200] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527260 | out: hHeap=0x500000) returned 1
	[0128.200] GetProcessHeap () returned 0x500000
	[0128.200] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527210 | out: hHeap=0x500000) returned 1
	[0128.200] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0128.201] GetProcessHeap () returned 0x500000
	[0128.201] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527238 | out: hHeap=0x500000) returned 1
	[0128.201] GetProcessHeap () returned 0x500000
	[0128.201] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d920
	[0128.201] GetProcessHeap () returned 0x500000
	[0128.201] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d968
	[0128.201] GetProcessHeap () returned 0x500000
	[0128.201] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d968, Size=0x72) returned 0x50f9f0
	[0128.201] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0128.201] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x138
	[0128.201] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x0) returned 0x0
	[0128.201] GetProcessHeap () returned 0x500000
	[0128.201] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d920 | out: hHeap=0x500000) returned 1
	[0128.201] GetProcessHeap () returned 0x500000
	[0128.201] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50f9f0 | out: hHeap=0x500000) returned 1
	[0128.201] ReleaseMutex (hMutex=0x138) returned 1
	[0128.201] CloseHandle (hObject=0x138) returned 1
	[0128.201] Sleep (dwMilliseconds=0x64) 
	[0128.347] GetProcessHeap () returned 0x500000
	[0128.347] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x527238
	[0128.347] GetProcessHeap () returned 0x500000
	[0128.347] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x527210
	[0128.347] GetProcessHeap () returned 0x500000
	[0128.347] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x527260
	[0128.347] GetProcessHeap () returned 0x500000
	[0128.347] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a858
	[0128.347] GetProcessHeap () returned 0x500000
	[0128.347] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a858 | out: hHeap=0x500000) returned 1
	[0128.347] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x527210, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0128.347] GetProcessHeap () returned 0x500000
	[0128.347] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527260 | out: hHeap=0x500000) returned 1
	[0128.347] GetProcessHeap () returned 0x500000
	[0128.347] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527238 | out: hHeap=0x500000) returned 1
	[0128.347] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0128.348] GetProcessHeap () returned 0x500000
	[0128.348] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527210 | out: hHeap=0x500000) returned 1
	[0128.348] GetProcessHeap () returned 0x500000
	[0128.348] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d920
	[0128.348] GetProcessHeap () returned 0x500000
	[0128.348] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d968
	[0128.348] GetProcessHeap () returned 0x500000
	[0128.348] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d968, Size=0x72) returned 0x50f9f0
	[0128.348] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0128.348] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x138
	[0128.348] WaitForSingleObject (hHandle=0x138, dwMilliseconds=0x0) returned 0x0
	[0128.348] GetProcessHeap () returned 0x500000
	[0128.348] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d920 | out: hHeap=0x500000) returned 1
	[0128.348] GetProcessHeap () returned 0x500000
	[0128.348] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50f9f0 | out: hHeap=0x500000) returned 1
	[0128.348] ReleaseMutex (hMutex=0x138) returned 1
	[0128.348] CloseHandle (hObject=0x138) returned 1
	[0128.348] Sleep (dwMilliseconds=0x64) 
	[0128.836] GetProcessHeap () returned 0x500000
	[0128.836] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x527210
	[0128.836] GetProcessHeap () returned 0x500000
	[0128.836] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x527238
	[0128.836] GetProcessHeap () returned 0x500000
	[0128.836] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x527260
	[0128.836] GetProcessHeap () returned 0x500000
	[0128.836] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a858
	[0128.836] GetProcessHeap () returned 0x500000
	[0128.836] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a858 | out: hHeap=0x500000) returned 1
	[0128.836] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x527238, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0128.836] GetProcessHeap () returned 0x500000
	[0128.836] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527260 | out: hHeap=0x500000) returned 1
	[0128.836] GetProcessHeap () returned 0x500000
	[0128.836] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527210 | out: hHeap=0x500000) returned 1
	[0128.836] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0128.836] GetProcessHeap () returned 0x500000
	[0128.836] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527238 | out: hHeap=0x500000) returned 1
	[0128.836] GetProcessHeap () returned 0x500000
	[0128.836] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d920
	[0128.836] GetProcessHeap () returned 0x500000
	[0128.836] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d968
	[0128.836] GetProcessHeap () returned 0x500000
	[0128.837] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d968, Size=0x72) returned 0x50fa70
	[0128.837] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0128.837] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x13c
	[0128.837] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x0
	[0128.837] GetProcessHeap () returned 0x500000
	[0128.837] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d920 | out: hHeap=0x500000) returned 1
	[0128.837] GetProcessHeap () returned 0x500000
	[0128.837] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fa70 | out: hHeap=0x500000) returned 1
	[0128.837] ReleaseMutex (hMutex=0x13c) returned 1
	[0128.837] CloseHandle (hObject=0x13c) returned 1
	[0128.837] Sleep (dwMilliseconds=0x64) 
	[0128.975] GetProcessHeap () returned 0x500000
	[0128.975] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x527238
	[0128.975] GetProcessHeap () returned 0x500000
	[0128.975] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x527210
	[0128.975] GetProcessHeap () returned 0x500000
	[0128.975] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x527260
	[0128.975] GetProcessHeap () returned 0x500000
	[0128.975] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a8c8
	[0128.975] GetProcessHeap () returned 0x500000
	[0128.975] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a8c8 | out: hHeap=0x500000) returned 1
	[0128.975] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x527210, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0128.975] GetProcessHeap () returned 0x500000
	[0128.975] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527260 | out: hHeap=0x500000) returned 1
	[0128.976] GetProcessHeap () returned 0x500000
	[0128.976] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527238 | out: hHeap=0x500000) returned 1
	[0128.976] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0128.976] GetProcessHeap () returned 0x500000
	[0128.976] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527210 | out: hHeap=0x500000) returned 1
	[0128.976] GetProcessHeap () returned 0x500000
	[0128.976] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d920
	[0128.976] GetProcessHeap () returned 0x500000
	[0128.976] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d968
	[0128.976] GetProcessHeap () returned 0x500000
	[0128.976] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d968, Size=0x72) returned 0x50fa70
	[0128.976] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0128.976] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x134
	[0128.976] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x0) returned 0x0
	[0128.976] GetProcessHeap () returned 0x500000
	[0128.976] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d920 | out: hHeap=0x500000) returned 1
	[0128.976] GetProcessHeap () returned 0x500000
	[0128.976] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fa70 | out: hHeap=0x500000) returned 1
	[0128.976] ReleaseMutex (hMutex=0x134) returned 1
	[0128.976] CloseHandle (hObject=0x134) returned 1
	[0128.976] Sleep (dwMilliseconds=0x64) 
	[0129.290] GetProcessHeap () returned 0x500000
	[0129.290] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x527210
	[0129.293] GetProcessHeap () returned 0x500000
	[0129.294] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x527238
	[0129.294] GetProcessHeap () returned 0x500000
	[0129.294] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x527260
	[0129.298] GetProcessHeap () returned 0x500000
	[0129.298] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a630
	[0129.301] GetProcessHeap () returned 0x500000
	[0129.302] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a630 | out: hHeap=0x500000) returned 1
	[0129.307] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x527238, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0129.309] GetProcessHeap () returned 0x500000
	[0129.309] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527260 | out: hHeap=0x500000) returned 1
	[0129.309] GetProcessHeap () returned 0x500000
	[0129.309] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527210 | out: hHeap=0x500000) returned 1
	[0129.309] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0129.309] GetProcessHeap () returned 0x500000
	[0129.312] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527238 | out: hHeap=0x500000) returned 1
	[0129.312] GetProcessHeap () returned 0x500000
	[0129.312] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d920
	[0129.313] GetProcessHeap () returned 0x500000
	[0129.314] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d968
	[0129.314] GetProcessHeap () returned 0x500000
	[0129.316] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d968, Size=0x72) returned 0x50faf0
	[0129.317] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0129.321] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x134
	[0129.322] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x0) returned 0x0
	[0129.322] GetProcessHeap () returned 0x500000
	[0129.322] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d920 | out: hHeap=0x500000) returned 1
	[0129.322] GetProcessHeap () returned 0x500000
	[0129.322] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50faf0 | out: hHeap=0x500000) returned 1
	[0129.322] ReleaseMutex (hMutex=0x134) returned 1
	[0129.322] CloseHandle (hObject=0x134) returned 1
	[0129.322] Sleep (dwMilliseconds=0x64) 
	[0129.468] GetProcessHeap () returned 0x500000
	[0129.468] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x527288
	[0129.468] GetProcessHeap () returned 0x500000
	[0129.468] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x5272b0
	[0129.469] GetProcessHeap () returned 0x500000
	[0129.469] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x5272d8
	[0129.469] GetProcessHeap () returned 0x500000
	[0129.469] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a630
	[0129.469] GetProcessHeap () returned 0x500000
	[0129.469] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a630 | out: hHeap=0x500000) returned 1
	[0129.469] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x5272b0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0129.469] GetProcessHeap () returned 0x500000
	[0129.469] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5272d8 | out: hHeap=0x500000) returned 1
	[0129.469] GetProcessHeap () returned 0x500000
	[0129.469] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527288 | out: hHeap=0x500000) returned 1
	[0129.469] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0129.469] GetProcessHeap () returned 0x500000
	[0129.469] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5272b0 | out: hHeap=0x500000) returned 1
	[0129.469] GetProcessHeap () returned 0x500000
	[0129.469] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d920
	[0129.469] GetProcessHeap () returned 0x500000
	[0129.469] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d968
	[0129.469] GetProcessHeap () returned 0x500000
	[0129.469] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d968, Size=0x72) returned 0x50faf0
	[0129.469] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0129.469] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x134
	[0129.470] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x0) returned 0x0
	[0129.470] GetProcessHeap () returned 0x500000
	[0129.470] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d920 | out: hHeap=0x500000) returned 1
	[0129.470] GetProcessHeap () returned 0x500000
	[0129.470] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50faf0 | out: hHeap=0x500000) returned 1
	[0129.470] ReleaseMutex (hMutex=0x134) returned 1
	[0129.470] CloseHandle (hObject=0x134) returned 1
	[0129.470] Sleep (dwMilliseconds=0x64) 
	[0129.598] GetProcessHeap () returned 0x500000
	[0129.598] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52adf8
	[0129.598] GetProcessHeap () returned 0x500000
	[0129.598] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52ae20
	[0129.598] GetProcessHeap () returned 0x500000
	[0129.598] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52ae48
	[0129.598] GetProcessHeap () returned 0x500000
	[0129.598] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a4c0
	[0129.598] GetProcessHeap () returned 0x500000
	[0129.598] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a4c0 | out: hHeap=0x500000) returned 1
	[0129.598] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ae20, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0129.598] GetProcessHeap () returned 0x500000
	[0129.598] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae48 | out: hHeap=0x500000) returned 1
	[0129.598] GetProcessHeap () returned 0x500000
	[0129.598] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52adf8 | out: hHeap=0x500000) returned 1
	[0129.598] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0129.599] GetProcessHeap () returned 0x500000
	[0129.599] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae20 | out: hHeap=0x500000) returned 1
	[0129.599] GetProcessHeap () returned 0x500000
	[0129.599] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d968
	[0129.599] GetProcessHeap () returned 0x500000
	[0129.599] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d9b0
	[0129.599] GetProcessHeap () returned 0x500000
	[0129.599] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d9b0, Size=0x72) returned 0x50faf0
	[0129.599] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0129.599] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x13c
	[0129.599] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x0
	[0129.599] GetProcessHeap () returned 0x500000
	[0129.599] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d968 | out: hHeap=0x500000) returned 1
	[0129.599] GetProcessHeap () returned 0x500000
	[0129.599] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50faf0 | out: hHeap=0x500000) returned 1
	[0129.599] ReleaseMutex (hMutex=0x13c) returned 1
	[0129.599] CloseHandle (hObject=0x13c) returned 1
	[0129.599] Sleep (dwMilliseconds=0x64) 
	[0129.738] GetProcessHeap () returned 0x500000
	[0129.738] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52ae48
	[0129.738] GetProcessHeap () returned 0x500000
	[0129.738] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52ae70
	[0129.738] GetProcessHeap () returned 0x500000
	[0129.738] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52ae98
	[0129.738] GetProcessHeap () returned 0x500000
	[0129.738] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a4c0
	[0129.738] GetProcessHeap () returned 0x500000
	[0129.738] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a4c0 | out: hHeap=0x500000) returned 1
	[0129.738] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ae70, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0129.738] GetProcessHeap () returned 0x500000
	[0129.738] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae98 | out: hHeap=0x500000) returned 1
	[0129.739] GetProcessHeap () returned 0x500000
	[0129.739] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae48 | out: hHeap=0x500000) returned 1
	[0129.739] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0129.739] GetProcessHeap () returned 0x500000
	[0129.739] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae70 | out: hHeap=0x500000) returned 1
	[0129.739] GetProcessHeap () returned 0x500000
	[0129.739] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d968
	[0129.739] GetProcessHeap () returned 0x500000
	[0129.739] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d9b0
	[0129.739] GetProcessHeap () returned 0x500000
	[0129.739] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d9b0, Size=0x72) returned 0x50faf0
	[0129.739] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0129.739] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x13c
	[0129.739] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x0
	[0129.739] GetProcessHeap () returned 0x500000
	[0129.739] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d968 | out: hHeap=0x500000) returned 1
	[0129.739] GetProcessHeap () returned 0x500000
	[0129.739] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50faf0 | out: hHeap=0x500000) returned 1
	[0129.739] ReleaseMutex (hMutex=0x13c) returned 1
	[0129.739] CloseHandle (hObject=0x13c) returned 1
	[0129.739] Sleep (dwMilliseconds=0x64) 
	[0129.879] GetProcessHeap () returned 0x500000
	[0129.879] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52ae70
	[0129.879] GetProcessHeap () returned 0x500000
	[0129.879] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52ae48
	[0129.879] GetProcessHeap () returned 0x500000
	[0129.879] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52ae98
	[0129.879] GetProcessHeap () returned 0x500000
	[0129.879] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a4c0
	[0129.879] GetProcessHeap () returned 0x500000
	[0129.879] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a4c0 | out: hHeap=0x500000) returned 1
	[0129.879] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ae48, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0129.880] GetProcessHeap () returned 0x500000
	[0129.880] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae98 | out: hHeap=0x500000) returned 1
	[0129.880] GetProcessHeap () returned 0x500000
	[0129.880] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae70 | out: hHeap=0x500000) returned 1
	[0129.880] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0129.880] GetProcessHeap () returned 0x500000
	[0129.880] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae48 | out: hHeap=0x500000) returned 1
	[0129.880] GetProcessHeap () returned 0x500000
	[0129.880] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d968
	[0129.880] GetProcessHeap () returned 0x500000
	[0129.880] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d9b0
	[0129.880] GetProcessHeap () returned 0x500000
	[0129.880] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d9b0, Size=0x72) returned 0x50faf0
	[0129.880] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0129.880] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x13c
	[0129.880] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x0
	[0129.880] GetProcessHeap () returned 0x500000
	[0129.880] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d968 | out: hHeap=0x500000) returned 1
	[0129.880] GetProcessHeap () returned 0x500000
	[0129.880] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50faf0 | out: hHeap=0x500000) returned 1
	[0129.880] ReleaseMutex (hMutex=0x13c) returned 1
	[0129.880] CloseHandle (hObject=0x13c) returned 1
	[0129.880] Sleep (dwMilliseconds=0x64) 
	[0129.987] GetProcessHeap () returned 0x500000
	[0129.987] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52ae48
	[0129.987] GetProcessHeap () returned 0x500000
	[0129.988] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52ae70
	[0129.988] GetProcessHeap () returned 0x500000
	[0129.988] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52ae98
	[0129.988] GetProcessHeap () returned 0x500000
	[0129.988] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a4c0
	[0129.988] GetProcessHeap () returned 0x500000
	[0129.988] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a4c0 | out: hHeap=0x500000) returned 1
	[0129.988] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ae70, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0129.988] GetProcessHeap () returned 0x500000
	[0129.988] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae98 | out: hHeap=0x500000) returned 1
	[0129.988] GetProcessHeap () returned 0x500000
	[0129.988] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae48 | out: hHeap=0x500000) returned 1
	[0129.988] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0129.988] GetProcessHeap () returned 0x500000
	[0129.988] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae70 | out: hHeap=0x500000) returned 1
	[0129.988] GetProcessHeap () returned 0x500000
	[0129.988] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d968
	[0129.988] GetProcessHeap () returned 0x500000
	[0129.988] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d9b0
	[0129.988] GetProcessHeap () returned 0x500000
	[0129.988] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d9b0, Size=0x72) returned 0x50faf0
	[0129.988] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0129.988] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x13c
	[0129.988] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x0
	[0129.988] GetProcessHeap () returned 0x500000
	[0129.988] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d968 | out: hHeap=0x500000) returned 1
	[0129.989] GetProcessHeap () returned 0x500000
	[0129.989] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50faf0 | out: hHeap=0x500000) returned 1
	[0129.989] ReleaseMutex (hMutex=0x13c) returned 1
	[0129.989] CloseHandle (hObject=0x13c) returned 1
	[0129.989] Sleep (dwMilliseconds=0x64) 
	[0130.128] GetProcessHeap () returned 0x500000
	[0130.128] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52ae70
	[0130.128] GetProcessHeap () returned 0x500000
	[0130.128] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52ae48
	[0130.128] GetProcessHeap () returned 0x500000
	[0130.128] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52ae98
	[0130.128] GetProcessHeap () returned 0x500000
	[0130.128] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a4c0
	[0130.128] GetProcessHeap () returned 0x500000
	[0130.128] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a4c0 | out: hHeap=0x500000) returned 1
	[0130.128] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52ae48, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0130.128] GetProcessHeap () returned 0x500000
	[0130.128] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae98 | out: hHeap=0x500000) returned 1
	[0130.128] GetProcessHeap () returned 0x500000
	[0130.128] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae70 | out: hHeap=0x500000) returned 1
	[0130.128] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0130.128] GetProcessHeap () returned 0x500000
	[0130.128] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae48 | out: hHeap=0x500000) returned 1
	[0130.128] GetProcessHeap () returned 0x500000
	[0130.129] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d968
	[0130.129] GetProcessHeap () returned 0x500000
	[0130.129] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51d9b0
	[0130.129] GetProcessHeap () returned 0x500000
	[0130.129] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d9b0, Size=0x72) returned 0x50faf0
	[0130.129] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0130.129] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x13c
	[0130.129] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x0
	[0130.129] GetProcessHeap () returned 0x500000
	[0130.129] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d968 | out: hHeap=0x500000) returned 1
	[0130.129] GetProcessHeap () returned 0x500000
	[0130.129] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50faf0 | out: hHeap=0x500000) returned 1
	[0130.129] ReleaseMutex (hMutex=0x13c) returned 1
	[0130.129] CloseHandle (hObject=0x13c) returned 1
	[0130.129] Sleep (dwMilliseconds=0x64) 
	[0130.447] GetProcessHeap () returned 0x500000
	[0130.447] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52ae98
	[0130.447] GetProcessHeap () returned 0x500000
	[0130.447] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52aec0
	[0130.447] GetProcessHeap () returned 0x500000
	[0130.447] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52aee8
	[0130.447] GetProcessHeap () returned 0x500000
	[0130.447] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a560
	[0130.447] GetProcessHeap () returned 0x500000
	[0130.447] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a560 | out: hHeap=0x500000) returned 1
	[0130.447] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52aec0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0130.447] GetProcessHeap () returned 0x500000
	[0130.447] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52aee8 | out: hHeap=0x500000) returned 1
	[0130.447] GetProcessHeap () returned 0x500000
	[0130.447] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae98 | out: hHeap=0x500000) returned 1
	[0130.447] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0130.447] GetProcessHeap () returned 0x500000
	[0130.447] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52aec0 | out: hHeap=0x500000) returned 1
	[0130.448] GetProcessHeap () returned 0x500000
	[0130.448] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51da40
	[0130.448] GetProcessHeap () returned 0x500000
	[0130.448] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51da88
	[0130.448] GetProcessHeap () returned 0x500000
	[0130.448] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51da88, Size=0x72) returned 0x50fbf0
	[0130.448] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0130.448] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x140
	[0130.448] WaitForSingleObject (hHandle=0x140, dwMilliseconds=0x0) returned 0x0
	[0130.448] GetProcessHeap () returned 0x500000
	[0130.448] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51da40 | out: hHeap=0x500000) returned 1
	[0130.448] GetProcessHeap () returned 0x500000
	[0130.448] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fbf0 | out: hHeap=0x500000) returned 1
	[0130.448] ReleaseMutex (hMutex=0x140) returned 1
	[0130.448] CloseHandle (hObject=0x140) returned 1
	[0130.448] Sleep (dwMilliseconds=0x64) 
	[0130.580] GetProcessHeap () returned 0x500000
	[0130.580] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52ae70
	[0130.580] GetProcessHeap () returned 0x500000
	[0130.580] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52af10
	[0130.580] GetProcessHeap () returned 0x500000
	[0130.580] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52af38
	[0130.580] GetProcessHeap () returned 0x500000
	[0130.581] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52a540
	[0130.581] GetProcessHeap () returned 0x500000
	[0130.581] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52a540 | out: hHeap=0x500000) returned 1
	[0130.581] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52af10, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0130.581] GetProcessHeap () returned 0x500000
	[0130.581] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52af38 | out: hHeap=0x500000) returned 1
	[0130.581] GetProcessHeap () returned 0x500000
	[0130.581] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52ae70 | out: hHeap=0x500000) returned 1
	[0130.581] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0130.581] GetProcessHeap () returned 0x500000
	[0130.581] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52af10 | out: hHeap=0x500000) returned 1
	[0130.581] GetProcessHeap () returned 0x500000
	[0130.581] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d9b0
	[0130.581] GetProcessHeap () returned 0x500000
	[0130.581] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51da40
	[0130.581] GetProcessHeap () returned 0x500000
	[0130.581] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51da40, Size=0x72) returned 0x50fbf0
	[0130.581] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0130.581] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x13c
	[0130.581] WaitForSingleObject (hHandle=0x13c, dwMilliseconds=0x0) returned 0x0
	[0130.581] GetProcessHeap () returned 0x500000
	[0130.581] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d9b0 | out: hHeap=0x500000) returned 1
	[0130.581] GetProcessHeap () returned 0x500000
	[0130.581] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fbf0 | out: hHeap=0x500000) returned 1
	[0130.581] ReleaseMutex (hMutex=0x13c) returned 1
	[0130.581] CloseHandle (hObject=0x13c) returned 1
	[0130.581] Sleep (dwMilliseconds=0x64) 
	[0130.697] GetProcessHeap () returned 0x500000
	[0130.697] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52af60
	[0130.697] GetProcessHeap () returned 0x500000
	[0130.697] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52af88
	[0130.697] GetProcessHeap () returned 0x500000
	[0130.697] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52afb0
	[0130.697] GetProcessHeap () returned 0x500000
	[0130.697] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x52d668
	[0130.697] GetProcessHeap () returned 0x500000
	[0130.697] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52d668 | out: hHeap=0x500000) returned 1
	[0130.697] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52af88, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0130.697] GetProcessHeap () returned 0x500000
	[0130.697] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52afb0 | out: hHeap=0x500000) returned 1
	[0130.697] GetProcessHeap () returned 0x500000
	[0130.697] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52af60 | out: hHeap=0x500000) returned 1
	[0130.697] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0130.697] GetProcessHeap () returned 0x500000
	[0130.697] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52af88 | out: hHeap=0x500000) returned 1
	[0130.697] GetProcessHeap () returned 0x500000
	[0130.697] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51d9b0
	[0130.698] GetProcessHeap () returned 0x500000
	[0130.698] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51da40
	[0130.698] GetProcessHeap () returned 0x500000
	[0130.698] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51da40, Size=0x72) returned 0x50fbf0
	[0130.698] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0130.698] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x144
	[0130.698] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x0) returned 0x0
	[0130.698] GetProcessHeap () returned 0x500000
	[0130.698] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d9b0 | out: hHeap=0x500000) returned 1
	[0130.698] GetProcessHeap () returned 0x500000
	[0130.698] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fbf0 | out: hHeap=0x500000) returned 1
	[0130.698] ReleaseMutex (hMutex=0x144) returned 1
	[0130.698] CloseHandle (hObject=0x144) returned 1
	[0130.698] Sleep (dwMilliseconds=0x64) 
	[0130.846] GetProcessHeap () returned 0x500000
	[0130.846] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0130.846] GetProcessHeap () returned 0x500000
	[0130.846] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0130.846] GetProcessHeap () returned 0x500000
	[0130.846] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0130.846] GetProcessHeap () returned 0x500000
	[0130.846] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0130.846] GetProcessHeap () returned 0x500000
	[0130.846] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0130.846] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0130.846] GetProcessHeap () returned 0x500000
	[0130.846] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0130.846] GetProcessHeap () returned 0x500000
	[0130.846] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0130.846] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0130.847] GetProcessHeap () returned 0x500000
	[0130.847] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0130.847] GetProcessHeap () returned 0x500000
	[0130.847] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0130.847] GetProcessHeap () returned 0x500000
	[0130.847] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0130.847] GetProcessHeap () returned 0x500000
	[0130.847] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0130.847] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0130.847] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0130.847] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0130.847] GetProcessHeap () returned 0x500000
	[0130.847] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0130.847] GetProcessHeap () returned 0x500000
	[0130.847] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0130.847] ReleaseMutex (hMutex=0x170) returned 1
	[0130.847] CloseHandle (hObject=0x170) returned 1
	[0130.847] Sleep (dwMilliseconds=0x64) 
	[0130.955] GetProcessHeap () returned 0x500000
	[0130.955] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0130.955] GetProcessHeap () returned 0x500000
	[0130.955] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0130.956] GetProcessHeap () returned 0x500000
	[0130.958] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0130.958] GetProcessHeap () returned 0x500000
	[0130.959] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0130.961] GetProcessHeap () returned 0x500000
	[0130.961] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0130.962] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0130.964] GetProcessHeap () returned 0x500000
	[0130.965] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0130.965] GetProcessHeap () returned 0x500000
	[0130.965] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0130.965] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0130.965] GetProcessHeap () returned 0x500000
	[0130.965] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0130.965] GetProcessHeap () returned 0x500000
	[0130.965] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0130.965] GetProcessHeap () returned 0x500000
	[0130.965] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0130.965] GetProcessHeap () returned 0x500000
	[0130.965] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0130.965] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0130.965] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0130.965] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0130.965] GetProcessHeap () returned 0x500000
	[0130.965] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0130.965] GetProcessHeap () returned 0x500000
	[0130.966] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0130.966] ReleaseMutex (hMutex=0x170) returned 1
	[0130.966] CloseHandle (hObject=0x170) returned 1
	[0130.966] Sleep (dwMilliseconds=0x64) 
	[0131.074] GetProcessHeap () returned 0x500000
	[0131.074] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0131.074] GetProcessHeap () returned 0x500000
	[0131.074] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0131.074] GetProcessHeap () returned 0x500000
	[0131.074] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0131.074] GetProcessHeap () returned 0x500000
	[0131.074] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0131.075] GetProcessHeap () returned 0x500000
	[0131.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0131.075] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0131.075] GetProcessHeap () returned 0x500000
	[0131.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0131.075] GetProcessHeap () returned 0x500000
	[0131.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0131.075] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0131.075] GetProcessHeap () returned 0x500000
	[0131.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0131.075] GetProcessHeap () returned 0x500000
	[0131.075] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0131.075] GetProcessHeap () returned 0x500000
	[0131.075] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0131.075] GetProcessHeap () returned 0x500000
	[0131.075] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0131.075] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0131.075] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0131.075] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0131.075] GetProcessHeap () returned 0x500000
	[0131.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0131.075] GetProcessHeap () returned 0x500000
	[0131.075] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0131.075] ReleaseMutex (hMutex=0x170) returned 1
	[0131.075] CloseHandle (hObject=0x170) returned 1
	[0131.075] Sleep (dwMilliseconds=0x64) 
	[0131.208] GetProcessHeap () returned 0x500000
	[0131.208] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0131.208] GetProcessHeap () returned 0x500000
	[0131.208] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0131.208] GetProcessHeap () returned 0x500000
	[0131.209] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0131.209] GetProcessHeap () returned 0x500000
	[0131.209] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0131.209] GetProcessHeap () returned 0x500000
	[0131.209] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0131.209] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0131.209] GetProcessHeap () returned 0x500000
	[0131.209] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0131.209] GetProcessHeap () returned 0x500000
	[0131.209] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0131.209] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0131.209] GetProcessHeap () returned 0x500000
	[0131.209] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0131.209] GetProcessHeap () returned 0x500000
	[0131.209] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0131.209] GetProcessHeap () returned 0x500000
	[0131.209] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0131.209] GetProcessHeap () returned 0x500000
	[0131.209] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0131.209] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0131.209] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0131.209] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0131.209] GetProcessHeap () returned 0x500000
	[0131.209] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0131.209] GetProcessHeap () returned 0x500000
	[0131.209] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0131.209] ReleaseMutex (hMutex=0x170) returned 1
	[0131.209] CloseHandle (hObject=0x170) returned 1
	[0131.210] Sleep (dwMilliseconds=0x64) 
	[0131.312] GetProcessHeap () returned 0x500000
	[0131.312] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0131.312] GetProcessHeap () returned 0x500000
	[0131.313] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0131.313] GetProcessHeap () returned 0x500000
	[0131.313] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0131.313] GetProcessHeap () returned 0x500000
	[0131.313] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0131.313] GetProcessHeap () returned 0x500000
	[0131.313] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0131.313] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0131.313] GetProcessHeap () returned 0x500000
	[0131.313] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0131.313] GetProcessHeap () returned 0x500000
	[0131.313] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0131.313] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0131.313] GetProcessHeap () returned 0x500000
	[0131.313] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0131.313] GetProcessHeap () returned 0x500000
	[0131.313] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0131.313] GetProcessHeap () returned 0x500000
	[0131.313] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0131.313] GetProcessHeap () returned 0x500000
	[0131.313] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0131.313] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0131.313] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0131.313] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0131.313] GetProcessHeap () returned 0x500000
	[0131.313] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0131.313] GetProcessHeap () returned 0x500000
	[0131.313] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0131.313] ReleaseMutex (hMutex=0x170) returned 1
	[0131.314] CloseHandle (hObject=0x170) returned 1
	[0131.314] Sleep (dwMilliseconds=0x64) 
	[0131.443] GetProcessHeap () returned 0x500000
	[0131.443] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0131.443] GetProcessHeap () returned 0x500000
	[0131.443] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0131.443] GetProcessHeap () returned 0x500000
	[0131.443] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0131.443] GetProcessHeap () returned 0x500000
	[0131.443] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0131.443] GetProcessHeap () returned 0x500000
	[0131.444] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0131.444] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0131.444] GetProcessHeap () returned 0x500000
	[0131.444] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0131.444] GetProcessHeap () returned 0x500000
	[0131.444] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0131.444] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0131.444] GetProcessHeap () returned 0x500000
	[0131.444] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0131.444] GetProcessHeap () returned 0x500000
	[0131.444] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0131.444] GetProcessHeap () returned 0x500000
	[0131.444] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0131.444] GetProcessHeap () returned 0x500000
	[0131.444] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0131.444] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0131.444] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0131.444] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0131.444] GetProcessHeap () returned 0x500000
	[0131.444] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0131.444] GetProcessHeap () returned 0x500000
	[0131.444] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0131.444] ReleaseMutex (hMutex=0x170) returned 1
	[0131.444] CloseHandle (hObject=0x170) returned 1
	[0131.444] Sleep (dwMilliseconds=0x64) 
	[0131.883] GetProcessHeap () returned 0x500000
	[0131.884] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0131.885] GetProcessHeap () returned 0x500000
	[0131.892] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0131.893] GetProcessHeap () returned 0x500000
	[0131.893] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0131.893] GetProcessHeap () returned 0x500000
	[0131.893] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0131.893] GetProcessHeap () returned 0x500000
	[0131.893] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0131.893] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0131.893] GetProcessHeap () returned 0x500000
	[0131.893] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0131.893] GetProcessHeap () returned 0x500000
	[0131.893] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0131.893] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0131.893] GetProcessHeap () returned 0x500000
	[0131.894] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0131.894] GetProcessHeap () returned 0x500000
	[0131.894] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0131.894] GetProcessHeap () returned 0x500000
	[0131.894] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0131.894] GetProcessHeap () returned 0x500000
	[0131.894] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0131.894] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0131.894] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0131.894] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0131.894] GetProcessHeap () returned 0x500000
	[0131.894] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0131.894] GetProcessHeap () returned 0x500000
	[0131.894] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0131.894] ReleaseMutex (hMutex=0x170) returned 1
	[0131.894] CloseHandle (hObject=0x170) returned 1
	[0131.894] Sleep (dwMilliseconds=0x64) 
	[0132.034] GetProcessHeap () returned 0x500000
	[0132.034] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0132.034] GetProcessHeap () returned 0x500000
	[0132.034] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0132.034] GetProcessHeap () returned 0x500000
	[0132.034] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0132.034] GetProcessHeap () returned 0x500000
	[0132.034] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0132.034] GetProcessHeap () returned 0x500000
	[0132.034] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0132.034] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.034] GetProcessHeap () returned 0x500000
	[0132.034] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0132.034] GetProcessHeap () returned 0x500000
	[0132.034] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0132.034] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.034] GetProcessHeap () returned 0x500000
	[0132.034] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0132.034] GetProcessHeap () returned 0x500000
	[0132.034] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0132.035] GetProcessHeap () returned 0x500000
	[0132.035] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0132.035] GetProcessHeap () returned 0x500000
	[0132.035] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0132.035] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.035] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0132.035] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0132.035] GetProcessHeap () returned 0x500000
	[0132.035] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0132.035] GetProcessHeap () returned 0x500000
	[0132.035] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0132.035] ReleaseMutex (hMutex=0x170) returned 1
	[0132.035] CloseHandle (hObject=0x170) returned 1
	[0132.035] Sleep (dwMilliseconds=0x64) 
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0132.410] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0132.410] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0132.410] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.410] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0132.410] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0132.410] GetProcessHeap () returned 0x500000
	[0132.410] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0132.410] ReleaseMutex (hMutex=0x170) returned 1
	[0132.410] CloseHandle (hObject=0x170) returned 1
	[0132.411] Sleep (dwMilliseconds=0x64) 
	[0132.543] GetProcessHeap () returned 0x500000
	[0132.543] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0132.543] GetProcessHeap () returned 0x500000
	[0132.543] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0132.543] GetProcessHeap () returned 0x500000
	[0132.543] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0132.543] GetProcessHeap () returned 0x500000
	[0132.543] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0132.543] GetProcessHeap () returned 0x500000
	[0132.543] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0132.543] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.543] GetProcessHeap () returned 0x500000
	[0132.543] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0132.543] GetProcessHeap () returned 0x500000
	[0132.543] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0132.543] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.543] GetProcessHeap () returned 0x500000
	[0132.543] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0132.544] GetProcessHeap () returned 0x500000
	[0132.544] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0132.544] GetProcessHeap () returned 0x500000
	[0132.544] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0132.544] GetProcessHeap () returned 0x500000
	[0132.544] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0132.544] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.544] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0132.544] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0132.544] GetProcessHeap () returned 0x500000
	[0132.544] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0132.544] GetProcessHeap () returned 0x500000
	[0132.544] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0132.544] ReleaseMutex (hMutex=0x170) returned 1
	[0132.544] CloseHandle (hObject=0x170) returned 1
	[0132.544] Sleep (dwMilliseconds=0x64) 
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0132.692] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0132.692] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0132.692] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.692] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0132.692] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0132.692] GetProcessHeap () returned 0x500000
	[0132.692] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0132.692] ReleaseMutex (hMutex=0x170) returned 1
	[0132.692] CloseHandle (hObject=0x170) returned 1
	[0132.693] Sleep (dwMilliseconds=0x64) 
	[0132.834] GetProcessHeap () returned 0x500000
	[0132.834] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0132.834] GetProcessHeap () returned 0x500000
	[0132.834] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0132.834] GetProcessHeap () returned 0x500000
	[0132.834] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0132.834] GetProcessHeap () returned 0x500000
	[0132.834] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0132.834] GetProcessHeap () returned 0x500000
	[0132.834] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0132.834] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.834] GetProcessHeap () returned 0x500000
	[0132.834] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0132.834] GetProcessHeap () returned 0x500000
	[0132.834] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0132.834] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.834] GetProcessHeap () returned 0x500000
	[0132.834] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0132.834] GetProcessHeap () returned 0x500000
	[0132.834] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0132.834] GetProcessHeap () returned 0x500000
	[0132.834] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0132.834] GetProcessHeap () returned 0x500000
	[0132.834] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0132.834] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.834] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0132.835] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0132.835] GetProcessHeap () returned 0x500000
	[0132.835] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0132.835] GetProcessHeap () returned 0x500000
	[0132.835] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0132.835] ReleaseMutex (hMutex=0x170) returned 1
	[0132.835] CloseHandle (hObject=0x170) returned 1
	[0132.835] Sleep (dwMilliseconds=0x64) 
	[0132.944] GetProcessHeap () returned 0x500000
	[0132.944] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0132.944] GetProcessHeap () returned 0x500000
	[0132.944] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0132.944] GetProcessHeap () returned 0x500000
	[0132.944] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0132.944] GetProcessHeap () returned 0x500000
	[0132.944] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0132.944] GetProcessHeap () returned 0x500000
	[0132.944] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0132.944] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0132.944] GetProcessHeap () returned 0x500000
	[0132.944] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0132.944] GetProcessHeap () returned 0x500000
	[0132.944] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0132.944] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0132.945] GetProcessHeap () returned 0x500000
	[0132.945] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0132.945] GetProcessHeap () returned 0x500000
	[0132.945] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0132.945] GetProcessHeap () returned 0x500000
	[0132.945] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0132.945] GetProcessHeap () returned 0x500000
	[0132.945] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0132.945] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0132.945] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0132.945] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0132.945] GetProcessHeap () returned 0x500000
	[0132.945] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0132.945] GetProcessHeap () returned 0x500000
	[0132.945] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0132.945] ReleaseMutex (hMutex=0x170) returned 1
	[0132.945] CloseHandle (hObject=0x170) returned 1
	[0132.945] Sleep (dwMilliseconds=0x64) 
	[0133.047] GetProcessHeap () returned 0x500000
	[0133.047] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0133.047] GetProcessHeap () returned 0x500000
	[0133.047] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0133.047] GetProcessHeap () returned 0x500000
	[0133.047] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0133.047] GetProcessHeap () returned 0x500000
	[0133.047] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0133.047] GetProcessHeap () returned 0x500000
	[0133.047] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0133.047] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0133.047] GetProcessHeap () returned 0x500000
	[0133.047] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0133.047] GetProcessHeap () returned 0x500000
	[0133.047] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0133.047] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0133.048] GetProcessHeap () returned 0x500000
	[0133.048] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0133.048] GetProcessHeap () returned 0x500000
	[0133.048] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0133.048] GetProcessHeap () returned 0x500000
	[0133.048] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0133.048] GetProcessHeap () returned 0x500000
	[0133.048] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0133.048] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0133.048] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0133.048] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0133.048] GetProcessHeap () returned 0x500000
	[0133.048] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0133.048] GetProcessHeap () returned 0x500000
	[0133.048] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0133.048] ReleaseMutex (hMutex=0x170) returned 1
	[0133.048] CloseHandle (hObject=0x170) returned 1
	[0133.048] Sleep (dwMilliseconds=0x64) 
	[0133.264] GetProcessHeap () returned 0x500000
	[0133.264] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0133.264] GetProcessHeap () returned 0x500000
	[0133.264] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0133.264] GetProcessHeap () returned 0x500000
	[0133.264] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0133.264] GetProcessHeap () returned 0x500000
	[0133.264] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0133.264] GetProcessHeap () returned 0x500000
	[0133.264] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0133.264] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0133.264] GetProcessHeap () returned 0x500000
	[0133.264] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0133.264] GetProcessHeap () returned 0x500000
	[0133.264] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0133.264] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0133.264] GetProcessHeap () returned 0x500000
	[0133.264] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0133.264] GetProcessHeap () returned 0x500000
	[0133.264] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0133.264] GetProcessHeap () returned 0x500000
	[0133.264] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0133.264] GetProcessHeap () returned 0x500000
	[0133.264] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0133.264] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0133.264] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0133.265] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0133.265] GetProcessHeap () returned 0x500000
	[0133.265] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0133.265] GetProcessHeap () returned 0x500000
	[0133.265] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0133.265] ReleaseMutex (hMutex=0x170) returned 1
	[0133.265] CloseHandle (hObject=0x170) returned 1
	[0133.265] Sleep (dwMilliseconds=0x64) 
	[0133.480] GetProcessHeap () returned 0x500000
	[0133.480] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0133.481] GetProcessHeap () returned 0x500000
	[0133.481] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0133.481] GetProcessHeap () returned 0x500000
	[0133.481] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0133.481] GetProcessHeap () returned 0x500000
	[0133.481] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0133.481] GetProcessHeap () returned 0x500000
	[0133.481] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0133.481] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0133.481] GetProcessHeap () returned 0x500000
	[0133.481] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0133.481] GetProcessHeap () returned 0x500000
	[0133.481] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0133.481] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0133.481] GetProcessHeap () returned 0x500000
	[0133.481] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0133.481] GetProcessHeap () returned 0x500000
	[0133.481] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0133.481] GetProcessHeap () returned 0x500000
	[0133.481] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0133.481] GetProcessHeap () returned 0x500000
	[0133.481] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0133.481] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0133.481] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0133.481] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0133.481] GetProcessHeap () returned 0x500000
	[0133.481] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0133.481] GetProcessHeap () returned 0x500000
	[0133.481] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0133.481] ReleaseMutex (hMutex=0x170) returned 1
	[0133.481] CloseHandle (hObject=0x170) returned 1
	[0133.482] Sleep (dwMilliseconds=0x64) 
	[0133.755] GetProcessHeap () returned 0x500000
	[0133.755] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0133.755] GetProcessHeap () returned 0x500000
	[0133.755] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0133.755] GetProcessHeap () returned 0x500000
	[0133.755] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0133.755] GetProcessHeap () returned 0x500000
	[0133.755] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0133.755] GetProcessHeap () returned 0x500000
	[0133.755] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0133.755] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0133.755] GetProcessHeap () returned 0x500000
	[0133.755] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0133.755] GetProcessHeap () returned 0x500000
	[0133.755] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0133.755] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0133.755] GetProcessHeap () returned 0x500000
	[0133.755] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0133.755] GetProcessHeap () returned 0x500000
	[0133.756] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0133.756] GetProcessHeap () returned 0x500000
	[0133.756] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0133.756] GetProcessHeap () returned 0x500000
	[0133.756] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0133.756] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0133.756] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0133.756] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0133.756] GetProcessHeap () returned 0x500000
	[0133.756] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0133.756] GetProcessHeap () returned 0x500000
	[0133.756] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0133.756] ReleaseMutex (hMutex=0x170) returned 1
	[0133.756] CloseHandle (hObject=0x170) returned 1
	[0133.756] Sleep (dwMilliseconds=0x64) 
	[0133.950] GetProcessHeap () returned 0x500000
	[0133.950] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0133.950] GetProcessHeap () returned 0x500000
	[0133.950] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0133.950] GetProcessHeap () returned 0x500000
	[0133.950] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0133.950] GetProcessHeap () returned 0x500000
	[0133.950] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0133.950] GetProcessHeap () returned 0x500000
	[0133.950] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0133.950] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0133.950] GetProcessHeap () returned 0x500000
	[0133.950] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0133.950] GetProcessHeap () returned 0x500000
	[0133.950] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0133.950] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0133.950] GetProcessHeap () returned 0x500000
	[0133.950] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0133.950] GetProcessHeap () returned 0x500000
	[0133.950] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0133.950] GetProcessHeap () returned 0x500000
	[0133.950] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0133.950] GetProcessHeap () returned 0x500000
	[0133.951] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0133.951] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0133.951] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0133.951] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0133.951] GetProcessHeap () returned 0x500000
	[0133.951] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0133.951] GetProcessHeap () returned 0x500000
	[0133.951] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0133.951] ReleaseMutex (hMutex=0x170) returned 1
	[0133.951] CloseHandle (hObject=0x170) returned 1
	[0133.951] Sleep (dwMilliseconds=0x64) 
	[0134.209] GetProcessHeap () returned 0x500000
	[0134.209] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0134.209] GetProcessHeap () returned 0x500000
	[0134.209] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0134.209] GetProcessHeap () returned 0x500000
	[0134.209] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0134.209] GetProcessHeap () returned 0x500000
	[0134.209] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0134.209] GetProcessHeap () returned 0x500000
	[0134.209] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0134.209] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0134.209] GetProcessHeap () returned 0x500000
	[0134.209] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0134.209] GetProcessHeap () returned 0x500000
	[0134.209] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0134.209] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0134.209] GetProcessHeap () returned 0x500000
	[0134.209] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0134.209] GetProcessHeap () returned 0x500000
	[0134.209] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0134.209] GetProcessHeap () returned 0x500000
	[0134.209] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0134.209] GetProcessHeap () returned 0x500000
	[0134.209] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0134.209] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0134.209] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0134.209] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0134.210] GetProcessHeap () returned 0x500000
	[0134.210] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0134.210] GetProcessHeap () returned 0x500000
	[0134.210] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0134.210] ReleaseMutex (hMutex=0x170) returned 1
	[0134.210] CloseHandle (hObject=0x170) returned 1
	[0134.210] Sleep (dwMilliseconds=0x64) 
	[0134.408] GetProcessHeap () returned 0x500000
	[0134.409] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0134.409] GetProcessHeap () returned 0x500000
	[0134.409] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0134.409] GetProcessHeap () returned 0x500000
	[0134.409] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0134.409] GetProcessHeap () returned 0x500000
	[0134.409] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0134.409] GetProcessHeap () returned 0x500000
	[0134.409] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0134.409] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0134.409] GetProcessHeap () returned 0x500000
	[0134.409] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0134.409] GetProcessHeap () returned 0x500000
	[0134.409] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0134.409] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0134.409] GetProcessHeap () returned 0x500000
	[0134.409] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0134.409] GetProcessHeap () returned 0x500000
	[0134.409] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0134.409] GetProcessHeap () returned 0x500000
	[0134.409] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0134.409] GetProcessHeap () returned 0x500000
	[0134.409] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0134.409] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0134.409] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0134.409] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0134.410] GetProcessHeap () returned 0x500000
	[0134.410] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0134.410] GetProcessHeap () returned 0x500000
	[0134.410] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0134.410] ReleaseMutex (hMutex=0x170) returned 1
	[0134.410] CloseHandle (hObject=0x170) returned 1
	[0134.410] Sleep (dwMilliseconds=0x64) 
	[0134.621] GetProcessHeap () returned 0x500000
	[0134.621] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0134.621] GetProcessHeap () returned 0x500000
	[0134.621] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0134.621] GetProcessHeap () returned 0x500000
	[0134.621] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0134.622] GetProcessHeap () returned 0x500000
	[0134.622] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0134.622] GetProcessHeap () returned 0x500000
	[0134.622] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0134.622] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0134.622] GetProcessHeap () returned 0x500000
	[0134.622] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0134.622] GetProcessHeap () returned 0x500000
	[0134.622] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0134.622] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0134.622] GetProcessHeap () returned 0x500000
	[0134.622] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0134.622] GetProcessHeap () returned 0x500000
	[0134.622] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0134.622] GetProcessHeap () returned 0x500000
	[0134.622] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0134.622] GetProcessHeap () returned 0x500000
	[0134.622] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0134.622] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0134.622] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0134.623] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0134.623] GetProcessHeap () returned 0x500000
	[0134.623] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0134.623] GetProcessHeap () returned 0x500000
	[0134.623] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0134.623] ReleaseMutex (hMutex=0x170) returned 1
	[0134.623] CloseHandle (hObject=0x170) returned 1
	[0134.623] Sleep (dwMilliseconds=0x64) 
	[0134.802] GetProcessHeap () returned 0x500000
	[0134.802] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0134.802] GetProcessHeap () returned 0x500000
	[0134.802] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0134.802] GetProcessHeap () returned 0x500000
	[0134.802] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0134.802] GetProcessHeap () returned 0x500000
	[0134.802] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0134.802] GetProcessHeap () returned 0x500000
	[0134.802] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0134.802] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0134.802] GetProcessHeap () returned 0x500000
	[0134.802] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0134.803] GetProcessHeap () returned 0x500000
	[0134.803] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0134.803] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0134.803] GetProcessHeap () returned 0x500000
	[0134.803] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0134.803] GetProcessHeap () returned 0x500000
	[0134.803] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0134.803] GetProcessHeap () returned 0x500000
	[0134.803] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0134.803] GetProcessHeap () returned 0x500000
	[0134.803] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0134.803] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0134.803] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0134.803] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0134.803] GetProcessHeap () returned 0x500000
	[0134.803] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0134.803] GetProcessHeap () returned 0x500000
	[0134.803] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0134.803] ReleaseMutex (hMutex=0x170) returned 1
	[0134.803] CloseHandle (hObject=0x170) returned 1
	[0134.803] Sleep (dwMilliseconds=0x64) 
	[0135.013] GetProcessHeap () returned 0x500000
	[0135.013] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0135.013] GetProcessHeap () returned 0x500000
	[0135.013] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0135.013] GetProcessHeap () returned 0x500000
	[0135.013] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0135.013] GetProcessHeap () returned 0x500000
	[0135.013] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0135.013] GetProcessHeap () returned 0x500000
	[0135.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0135.013] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0135.013] GetProcessHeap () returned 0x500000
	[0135.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0135.013] GetProcessHeap () returned 0x500000
	[0135.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0135.013] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0135.013] GetProcessHeap () returned 0x500000
	[0135.013] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0135.013] GetProcessHeap () returned 0x500000
	[0135.013] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0135.013] GetProcessHeap () returned 0x500000
	[0135.013] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0135.013] GetProcessHeap () returned 0x500000
	[0135.013] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0135.013] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0135.013] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0135.013] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0135.013] GetProcessHeap () returned 0x500000
	[0135.014] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0135.014] GetProcessHeap () returned 0x500000
	[0135.014] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0135.014] ReleaseMutex (hMutex=0x170) returned 1
	[0135.014] CloseHandle (hObject=0x170) returned 1
	[0135.014] Sleep (dwMilliseconds=0x64) 
	[0135.228] GetProcessHeap () returned 0x500000
	[0135.228] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0135.228] GetProcessHeap () returned 0x500000
	[0135.228] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0135.228] GetProcessHeap () returned 0x500000
	[0135.228] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0135.228] GetProcessHeap () returned 0x500000
	[0135.228] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0135.228] GetProcessHeap () returned 0x500000
	[0135.228] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0135.228] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0135.228] GetProcessHeap () returned 0x500000
	[0135.228] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0135.228] GetProcessHeap () returned 0x500000
	[0135.228] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0135.228] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0135.228] GetProcessHeap () returned 0x500000
	[0135.228] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0135.228] GetProcessHeap () returned 0x500000
	[0135.228] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0135.228] GetProcessHeap () returned 0x500000
	[0135.228] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0135.228] GetProcessHeap () returned 0x500000
	[0135.228] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0135.228] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0135.229] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0135.229] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0135.229] GetProcessHeap () returned 0x500000
	[0135.229] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0135.229] GetProcessHeap () returned 0x500000
	[0135.229] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0135.229] ReleaseMutex (hMutex=0x170) returned 1
	[0135.229] CloseHandle (hObject=0x170) returned 1
	[0135.229] Sleep (dwMilliseconds=0x64) 
	[0135.404] GetProcessHeap () returned 0x500000
	[0135.404] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0135.404] GetProcessHeap () returned 0x500000
	[0135.404] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0135.404] GetProcessHeap () returned 0x500000
	[0135.404] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0135.404] GetProcessHeap () returned 0x500000
	[0135.404] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0135.404] GetProcessHeap () returned 0x500000
	[0135.404] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0135.404] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0135.404] GetProcessHeap () returned 0x500000
	[0135.404] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0135.404] GetProcessHeap () returned 0x500000
	[0135.404] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0135.404] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0135.404] GetProcessHeap () returned 0x500000
	[0135.404] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0135.404] GetProcessHeap () returned 0x500000
	[0135.405] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0135.405] GetProcessHeap () returned 0x500000
	[0135.405] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0135.405] GetProcessHeap () returned 0x500000
	[0135.405] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0135.405] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0135.405] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0135.405] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0135.405] GetProcessHeap () returned 0x500000
	[0135.405] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0135.405] GetProcessHeap () returned 0x500000
	[0135.405] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0135.405] ReleaseMutex (hMutex=0x170) returned 1
	[0135.405] CloseHandle (hObject=0x170) returned 1
	[0135.405] Sleep (dwMilliseconds=0x64) 
	[0135.632] GetProcessHeap () returned 0x500000
	[0135.632] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0135.632] GetProcessHeap () returned 0x500000
	[0135.633] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0135.633] GetProcessHeap () returned 0x500000
	[0135.633] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0135.633] GetProcessHeap () returned 0x500000
	[0135.633] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0135.633] GetProcessHeap () returned 0x500000
	[0135.633] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0135.633] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0135.633] GetProcessHeap () returned 0x500000
	[0135.633] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0135.633] GetProcessHeap () returned 0x500000
	[0135.633] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0135.633] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0135.633] GetProcessHeap () returned 0x500000
	[0135.633] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0135.633] GetProcessHeap () returned 0x500000
	[0135.633] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0135.633] GetProcessHeap () returned 0x500000
	[0135.633] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0135.633] GetProcessHeap () returned 0x500000
	[0135.633] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0135.633] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0135.633] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0135.634] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0135.634] GetProcessHeap () returned 0x500000
	[0135.634] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0135.634] GetProcessHeap () returned 0x500000
	[0135.634] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0135.634] ReleaseMutex (hMutex=0x170) returned 1
	[0135.634] CloseHandle (hObject=0x170) returned 1
	[0135.634] Sleep (dwMilliseconds=0x64) 
	[0135.899] GetProcessHeap () returned 0x500000
	[0135.899] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0135.899] GetProcessHeap () returned 0x500000
	[0135.899] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0135.899] GetProcessHeap () returned 0x500000
	[0135.899] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0135.899] GetProcessHeap () returned 0x500000
	[0135.899] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0135.899] GetProcessHeap () returned 0x500000
	[0135.899] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0135.900] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0135.900] GetProcessHeap () returned 0x500000
	[0135.900] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0135.900] GetProcessHeap () returned 0x500000
	[0135.900] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0135.900] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0135.900] GetProcessHeap () returned 0x500000
	[0135.900] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0135.900] GetProcessHeap () returned 0x500000
	[0135.900] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0135.900] GetProcessHeap () returned 0x500000
	[0135.900] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0135.900] GetProcessHeap () returned 0x500000
	[0135.900] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0135.900] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0135.900] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0135.900] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0135.901] GetProcessHeap () returned 0x500000
	[0135.901] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0135.901] GetProcessHeap () returned 0x500000
	[0135.901] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0135.901] ReleaseMutex (hMutex=0x170) returned 1
	[0135.901] CloseHandle (hObject=0x170) returned 1
	[0135.901] Sleep (dwMilliseconds=0x64) 
	[0136.148] GetProcessHeap () returned 0x500000
	[0136.148] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0136.148] GetProcessHeap () returned 0x500000
	[0136.148] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0136.148] GetProcessHeap () returned 0x500000
	[0136.148] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0136.148] GetProcessHeap () returned 0x500000
	[0136.148] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0136.148] GetProcessHeap () returned 0x500000
	[0136.148] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0136.148] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0136.148] GetProcessHeap () returned 0x500000
	[0136.148] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0136.148] GetProcessHeap () returned 0x500000
	[0136.148] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0136.148] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0136.149] GetProcessHeap () returned 0x500000
	[0136.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0136.149] GetProcessHeap () returned 0x500000
	[0136.149] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0136.149] GetProcessHeap () returned 0x500000
	[0136.149] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0136.149] GetProcessHeap () returned 0x500000
	[0136.149] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0136.149] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0136.149] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0136.149] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0136.149] GetProcessHeap () returned 0x500000
	[0136.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0136.149] GetProcessHeap () returned 0x500000
	[0136.149] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0136.149] ReleaseMutex (hMutex=0x170) returned 1
	[0136.149] CloseHandle (hObject=0x170) returned 1
	[0136.149] Sleep (dwMilliseconds=0x64) 
	[0136.384] GetProcessHeap () returned 0x500000
	[0136.384] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0136.384] GetProcessHeap () returned 0x500000
	[0136.384] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0136.384] GetProcessHeap () returned 0x500000
	[0136.384] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0136.384] GetProcessHeap () returned 0x500000
	[0136.384] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0136.384] GetProcessHeap () returned 0x500000
	[0136.384] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0136.384] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0136.384] GetProcessHeap () returned 0x500000
	[0136.384] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0136.384] GetProcessHeap () returned 0x500000
	[0136.385] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0136.385] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0136.385] GetProcessHeap () returned 0x500000
	[0136.385] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0136.385] GetProcessHeap () returned 0x500000
	[0136.385] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0136.385] GetProcessHeap () returned 0x500000
	[0136.385] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0136.385] GetProcessHeap () returned 0x500000
	[0136.385] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0136.385] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0136.385] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0136.385] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0136.385] GetProcessHeap () returned 0x500000
	[0136.385] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0136.385] GetProcessHeap () returned 0x500000
	[0136.385] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0136.385] ReleaseMutex (hMutex=0x170) returned 1
	[0136.385] CloseHandle (hObject=0x170) returned 1
	[0136.385] Sleep (dwMilliseconds=0x64) 
	[0136.616] GetProcessHeap () returned 0x500000
	[0136.616] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0136.616] GetProcessHeap () returned 0x500000
	[0136.616] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0136.616] GetProcessHeap () returned 0x500000
	[0136.616] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0136.616] GetProcessHeap () returned 0x500000
	[0136.616] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0136.616] GetProcessHeap () returned 0x500000
	[0136.616] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0136.616] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0136.616] GetProcessHeap () returned 0x500000
	[0136.616] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0136.616] GetProcessHeap () returned 0x500000
	[0136.616] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0136.617] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0136.617] GetProcessHeap () returned 0x500000
	[0136.617] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0136.617] GetProcessHeap () returned 0x500000
	[0136.617] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0136.617] GetProcessHeap () returned 0x500000
	[0136.617] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0136.617] GetProcessHeap () returned 0x500000
	[0136.617] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0136.617] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0136.617] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0136.617] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0136.617] GetProcessHeap () returned 0x500000
	[0136.617] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0136.617] GetProcessHeap () returned 0x500000
	[0136.617] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0136.617] ReleaseMutex (hMutex=0x170) returned 1
	[0136.617] CloseHandle (hObject=0x170) returned 1
	[0136.617] Sleep (dwMilliseconds=0x64) 
	[0136.884] GetProcessHeap () returned 0x500000
	[0136.884] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0136.884] GetProcessHeap () returned 0x500000
	[0136.884] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0136.884] GetProcessHeap () returned 0x500000
	[0136.884] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0136.884] GetProcessHeap () returned 0x500000
	[0136.884] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0136.884] GetProcessHeap () returned 0x500000
	[0136.884] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0136.884] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0136.884] GetProcessHeap () returned 0x500000
	[0136.884] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0136.884] GetProcessHeap () returned 0x500000
	[0136.884] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0136.884] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0136.885] GetProcessHeap () returned 0x500000
	[0136.885] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0136.885] GetProcessHeap () returned 0x500000
	[0136.885] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0136.885] GetProcessHeap () returned 0x500000
	[0136.885] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0136.885] GetProcessHeap () returned 0x500000
	[0136.885] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0136.885] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0136.885] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0136.885] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0136.885] GetProcessHeap () returned 0x500000
	[0136.885] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0136.885] GetProcessHeap () returned 0x500000
	[0136.885] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0136.885] ReleaseMutex (hMutex=0x170) returned 1
	[0136.885] CloseHandle (hObject=0x170) returned 1
	[0136.885] Sleep (dwMilliseconds=0x64) 
	[0137.144] GetProcessHeap () returned 0x500000
	[0137.144] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e068
	[0137.144] GetProcessHeap () returned 0x500000
	[0137.144] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e040
	[0137.144] GetProcessHeap () returned 0x500000
	[0137.144] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0137.144] GetProcessHeap () returned 0x500000
	[0137.144] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0137.144] GetProcessHeap () returned 0x500000
	[0137.144] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0137.144] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e040, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0137.144] GetProcessHeap () returned 0x500000
	[0137.144] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0137.144] GetProcessHeap () returned 0x500000
	[0137.144] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0137.144] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0137.144] GetProcessHeap () returned 0x500000
	[0137.144] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0137.144] GetProcessHeap () returned 0x500000
	[0137.144] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0137.144] GetProcessHeap () returned 0x500000
	[0137.144] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0137.144] GetProcessHeap () returned 0x500000
	[0137.144] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0137.144] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0137.144] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0137.144] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0137.144] GetProcessHeap () returned 0x500000
	[0137.144] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0137.145] GetProcessHeap () returned 0x500000
	[0137.145] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0137.145] ReleaseMutex (hMutex=0x170) returned 1
	[0137.145] CloseHandle (hObject=0x170) returned 1
	[0137.145] Sleep (dwMilliseconds=0x64) 
	[0137.365] GetProcessHeap () returned 0x500000
	[0137.365] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x52e040
	[0137.365] GetProcessHeap () returned 0x500000
	[0137.365] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x52e068
	[0137.365] GetProcessHeap () returned 0x500000
	[0137.365] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x52e090
	[0137.365] GetProcessHeap () returned 0x500000
	[0137.365] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x5392b8
	[0137.365] GetProcessHeap () returned 0x500000
	[0137.365] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5392b8 | out: hHeap=0x500000) returned 1
	[0137.365] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52e068, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0137.365] GetProcessHeap () returned 0x500000
	[0137.365] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e090 | out: hHeap=0x500000) returned 1
	[0137.365] GetProcessHeap () returned 0x500000
	[0137.365] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e040 | out: hHeap=0x500000) returned 1
	[0137.365] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x3df5cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3df5cc*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0137.366] GetProcessHeap () returned 0x500000
	[0137.366] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x52e068 | out: hHeap=0x500000) returned 1
	[0137.366] GetProcessHeap () returned 0x500000
	[0137.366] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x40) returned 0x51dc38
	[0137.366] GetProcessHeap () returned 0x500000
	[0137.366] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3a) returned 0x51dc80
	[0137.366] GetProcessHeap () returned 0x500000
	[0137.366] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51dc80, Size=0x72) returned 0x50fcf0
	[0137.366] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0137.366] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0137.366] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0137.366] GetProcessHeap () returned 0x500000
	[0137.366] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51dc38 | out: hHeap=0x500000) returned 1
	[0137.366] GetProcessHeap () returned 0x500000
	[0137.366] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50fcf0 | out: hHeap=0x500000) returned 1
	[0137.366] ReleaseMutex (hMutex=0x170) returned 1
	[0137.366] CloseHandle (hObject=0x170) returned 1
	[0137.366] Sleep (dwMilliseconds=0x64) 
	[0137.564] SetEvent (hEvent=0xb4) returned 1
	[0137.564] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0
	[0241.115] GetExitCodeThread (in: hThread=0xb8, lpExitCode=0x3df65c | out: lpExitCode=0x3df65c) returned 1
	[0241.116] CloseHandle (hObject=0xb4) returned 1
	[0241.116] CloseHandle (hObject=0xb8) returned 1
	[0241.116] GetProcessHeap () returned 0x500000
	[0241.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x514110 | out: hHeap=0x500000) returned 1
	[0241.116] GetProcessHeap () returned 0x500000
	[0241.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cee0 | out: hHeap=0x500000) returned 1
	[0241.116] GetProcessHeap () returned 0x500000
	[0241.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x511730 | out: hHeap=0x500000) returned 1
	[0241.116] GetProcessHeap () returned 0x500000
	[0241.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5189d8 | out: hHeap=0x500000) returned 1
	[0241.116] GetProcessHeap () returned 0x500000
	[0241.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x515480 | out: hHeap=0x500000) returned 1
	[0241.116] GetProcessHeap () returned 0x500000
	[0241.116] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x511980 | out: hHeap=0x500000) returned 1
	[0241.116] ExitProcess (uExitCode=0x0) 

Thread:
	id = 38
	os_tid = 0x324

	[0127.449] GetProcessHeap () returned 0x500000
	[0127.449] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x51cf58
	[0127.449] GetProcessHeap () returned 0x500000
	[0127.449] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x51cf30
	[0127.449] GetProcessHeap () returned 0x500000
	[0127.449] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x51cf80
	[0127.449] GetProcessHeap () returned 0x500000
	[0127.449] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x51cfa8
	[0127.449] GetProcessHeap () returned 0x500000
	[0127.449] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x51e920
	[0127.449] GetProcessHeap () returned 0x500000
	[0127.449] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e920 | out: hHeap=0x500000) returned 1
	[0127.449] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x51cf80, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0127.449] GetProcessHeap () returned 0x500000
	[0127.449] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cfa8 | out: hHeap=0x500000) returned 1
	[0127.449] GetProcessHeap () returned 0x500000
	[0127.449] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf30 | out: hHeap=0x500000) returned 1
	[0127.449] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x245fc2c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x245fc2c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0127.449] GetProcessHeap () returned 0x500000
	[0127.449] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf80 | out: hHeap=0x500000) returned 1
	[0127.449] GetProcessHeap () returned 0x500000
	[0127.449] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x80) returned 0x51e920
	[0127.449] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20119, phkResult=0x245fc14 | out: phkResult=0x245fc14*=0xbc) returned 0x0
	[0127.450] RegQueryValueExW (in: hKey=0xbc, lpValueName="CurrentBuild", lpReserved=0x0, lpType=0x245fc10, lpData=0x245fca0, lpcbData=0x245fc18*=0x22 | out: lpType=0x245fc10*=0x1, lpData="7601", lpcbData=0x245fc18*=0xa) returned 0x0
	[0127.450] RegCloseKey (hKey=0xbc) returned 0x0
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e920 | out: hHeap=0x500000) returned 1
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x51cf80
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x10) returned 0x511760
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x511778
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x51e920
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e920 | out: hHeap=0x500000) returned 1
	[0127.450] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\", lpDst=0x511760, nSize=0x8 | out: lpDst="") returned 0x26
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x511778 | out: hHeap=0x500000) returned 1
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x511760, Size=0x1e) returned 0x51cf30
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x1e) returned 0x51cfa8
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x51e920
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e920 | out: hHeap=0x500000) returned 1
	[0127.450] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\", lpDst=0x51cf30, nSize=0xf | out: lpDst="") returned 0x26
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cfa8 | out: hHeap=0x500000) returned 1
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51cf30, Size=0x3a) returned 0x51d728
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x3a) returned 0x51d770
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.450] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x51e920
	[0127.450] GetProcessHeap () returned 0x500000
	[0127.451] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e920 | out: hHeap=0x500000) returned 1
	[0127.451] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\", lpDst=0x51d728, nSize=0x1d | out: lpDst="") returned 0x26
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51d770 | out: hHeap=0x500000) returned 1
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51d728, Size=0x72) returned 0x50f7f0
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x72) returned 0x50f870
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x51e920
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e920 | out: hHeap=0x500000) returned 1
	[0127.451] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\", lpDst=0x50f7f0, nSize=0x39 | out: lpDst="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\") returned 0x26
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50f870 | out: hHeap=0x500000) returned 1
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf80 | out: hHeap=0x500000) returned 1
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x10) returned 0x511760
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20) returned 0x51cf80
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x30) returned 0x51e920
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x2c) returned 0x51e958
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x2c) returned 0x51e990
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x51e9c8
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e9c8 | out: hHeap=0x500000) returned 1
	[0127.451] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\explorer.exe", lpDst=0x51e958, nSize=0x16 | out: lpDst="C:\\Windows\\explorer.e") returned 0x18
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e990 | out: hHeap=0x500000) returned 1
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51e958, Size=0x56) returned 0x51e958
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x56) returned 0x51e9b8
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x51ea18
	[0127.451] GetProcessHeap () returned 0x500000
	[0127.451] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51ea18 | out: hHeap=0x500000) returned 1
	[0127.451] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\explorer.exe", lpDst=0x51e958, nSize=0x2b | out: lpDst="C:\\Windows\\explorer.exe") returned 0x18
	[0127.452] GetProcessHeap () returned 0x500000
	[0127.452] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e9b8 | out: hHeap=0x500000) returned 1
	[0127.452] GetProcessHeap () returned 0x500000
	[0127.452] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e920 | out: hHeap=0x500000) returned 1
	[0127.452] GetProcessHeap () returned 0x500000
	[0127.452] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x209) returned 0x51e9b8
	[0127.452] GetVersion () returned 0x1db10106
	[0127.452] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0127.452] GetProcAddress (hModule=0x76300000, lpProcName="IsWow64Process") returned 0x7631195e
	[0127.452] GetProcessHeap () returned 0x500000
	[0127.452] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x50) returned 0x51ebd0
	[0127.452] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0127.452] GetProcAddress (hModule=0x76300000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7632d650
	[0127.452] Wow64DisableWow64FsRedirection (in: OldValue=0x245fc84 | out: OldValue=0x245fc84*=0x0) returned 1
	[0127.452] GetProcessHeap () returned 0x500000
	[0127.452] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51ebd0 | out: hHeap=0x500000) returned 1
	[0127.452] GetCurrentProcess () returned 0xffffffff
	[0127.452] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x245fc14 | out: TokenHandle=0x245fc14*=0xbc) returned 1
	[0127.452] GetTokenInformation (in: TokenHandle=0xbc, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x245fc2c | out: TokenInformation=0x0, ReturnLength=0x245fc2c) returned 0
	[0127.452] GetProcessHeap () returned 0x500000
	[0127.452] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x118) returned 0x51ebd0
	[0127.452] GetTokenInformation (in: TokenHandle=0xbc, TokenInformationClass=0x2, TokenInformation=0x51ebd0, TokenInformationLength=0x118, ReturnLength=0x245fc2c | out: TokenInformation=0x51ebd0, ReturnLength=0x245fc2c) returned 1
	[0127.452] AllocateAndInitializeSid (in: pIdentifierAuthority=0x245fc20, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x245fc28 | out: pSid=0x245fc28*=0x511778*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1
	[0127.453] EqualSid (pSid1=0x511778*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x51ec34*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0
	[0127.453] EqualSid (pSid1=0x511778*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x51ec50*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0
	[0127.453] EqualSid (pSid1=0x511778*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x51ec5c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1
	[0127.453] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x51ec5c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), Name=0x245f7f8, cchName=0x245fc2c, ReferencedDomainName=0x245fa04, cchReferencedDomainName=0x245fc2c, peUse=0x245fc10 | out: Name="Administrators", cchName=0x245fc2c, ReferencedDomainName="BUILTIN", cchReferencedDomainName=0x245fc2c, peUse=0x245fc10) returned 1
	[0127.501] GetProcessHeap () returned 0x500000
	[0127.501] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51ebd0 | out: hHeap=0x500000) returned 1
	[0127.501] GetProcessHeap () returned 0x500000
	[0127.501] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xb0) returned 0x51ebd0
	[0127.501] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x20119, phkResult=0x245fbf4 | out: phkResult=0x245fbf4*=0x100) returned 0x0
	[0127.501] RegQueryValueExW (in: hKey=0x100, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x245fbf0, lpData=0x245fc2c, lpcbData=0x245fbf8*=0xa | out: lpType=0x245fbf0*=0x4, lpData=0x245fc2c*=0x5, lpcbData=0x245fbf8*=0x4) returned 0x0
	[0127.501] RegCloseKey (hKey=0x100) returned 0x0
	[0127.501] GetProcessHeap () returned 0x500000
	[0127.501] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51ebd0 | out: hHeap=0x500000) returned 1
	[0127.501] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x51e9b8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe")) returned 0x69
	[0127.501] GetCurrentProcess () returned 0xffffffff
	[0127.501] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x245fc74 | out: Wow64Process=0x245fc74) returned 1
	[0127.501] GetProcessHeap () returned 0x500000
	[0127.501] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x330) returned 0x522570
	[0127.501] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\9c354b42"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x100
	[0127.502] WriteFile (in: hFile=0x100, lpBuffer=0x522570*, nNumberOfBytesToWrite=0x32f, lpNumberOfBytesWritten=0x245fc60, lpOverlapped=0x0 | out: lpBuffer=0x522570*, lpNumberOfBytesWritten=0x245fc60*=0x32f, lpOverlapped=0x0) returned 1
	[0127.503] WriteFile (in: hFile=0x100, lpBuffer=0x51e9b8*, nNumberOfBytesToWrite=0x208, lpNumberOfBytesWritten=0x245fc60, lpOverlapped=0x0 | out: lpBuffer=0x51e9b8*, lpNumberOfBytesWritten=0x245fc60*=0x208, lpOverlapped=0x0) returned 1
	[0127.503] FlushFileBuffers (hFile=0x100) returned 1
	[0127.505] CloseHandle (hObject=0x100) returned 1
	[0127.505] GetProcessHeap () returned 0x500000
	[0127.505] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x70) returned 0x51ebd0
	[0127.506] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0127.506] GetProcAddress (hModule=0x77d90000, lpProcName="RtlInitUnicodeString") returned 0x77dbe208
	[0127.506] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0127.506] GetProcAddress (hModule=0x77d90000, lpProcName="NtQueryInformationProcess") returned 0x77dafac8
	[0127.506] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0127.506] GetProcAddress (hModule=0x77d90000, lpProcName="RtlEnterCriticalSection") returned 0x77db22b0
	[0127.506] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0127.506] GetProcAddress (hModule=0x77d90000, lpProcName="RtlLeaveCriticalSection") returned 0x77db2270
	[0127.506] GetCurrentProcessId () returned 0x794
	[0127.506] OpenProcess (dwDesiredAccess=0x438, bInheritHandle=0, dwProcessId=0x794) returned 0x100
	[0127.507] NtQueryInformationProcess (in: ProcessHandle=0x100, ProcessInformationClass=0x0, ProcessInformation=0x245fbcc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x245fbcc, ReturnLength=0x0) returned 0x0
	[0127.507] ReadProcessMemory (in: hProcess=0x100, lpBaseAddress=0x7efde000, lpBuffer=0x245fbe4, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x245fbe4*, lpNumberOfBytesRead=0x0) returned 1
	[0127.507] ReadProcessMemory (in: hProcess=0x100, lpBaseAddress=0x77e90200, lpBuffer=0x245fb9c, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x245fb9c*, lpNumberOfBytesRead=0x0) returned 1
	[0127.507] RtlInitUnicodeString (in: DestinationString=0x501338, SourceString="C:\\Windows\\explorer.exe" | out: DestinationString="C:\\Windows\\explorer.exe") 
	[0127.507] RtlInitUnicodeString (in: DestinationString=0x501340, SourceString="C:\\Windows\\explorer.exe" | out: DestinationString="C:\\Windows\\explorer.exe") 
	[0127.507] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x245f778, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\rsfd234df.exe")) returned 0x69
	[0127.507] ReadProcessMemory (in: hProcess=0x100, lpBaseAddress=0x245fc0c, lpBuffer=0x245fc14, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x245fc14*, lpNumberOfBytesRead=0x0) returned 1
	[0127.507] ReadProcessMemory (in: hProcess=0x100, lpBaseAddress=0x501986, lpBuffer=0x245f988, nSize=0xd4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x245f988*, lpNumberOfBytesRead=0x0) returned 1
	[0127.507] RtlInitUnicodeString (in: DestinationString=0x5027dc, SourceString="C:\\Windows\\explorer.exe" | out: DestinationString="C:\\Windows\\explorer.exe") 
	[0127.507] RtlInitUnicodeString (in: DestinationString=0x5027e4, SourceString="C:\\Windows\\explorer.exe" | out: DestinationString="C:\\Windows\\explorer.exe") 
	[0127.507] CloseHandle (hObject=0x100) returned 1
	[0127.507] GetProcessHeap () returned 0x500000
	[0127.507] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51ebd0 | out: hHeap=0x500000) returned 1
	[0127.507] GetProcessHeap () returned 0x500000
	[0127.507] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa0) returned 0x51ebd0
	[0127.507] GetProcessHeap () returned 0x500000
	[0127.507] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x9c) returned 0x51f720
	[0127.507] GetProcessHeap () returned 0x500000
	[0127.507] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x9c) returned 0x51f7c8
	[0127.507] GetProcessHeap () returned 0x500000
	[0127.507] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x51f870
	[0127.507] GetProcessHeap () returned 0x500000
	[0127.507] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51f870 | out: hHeap=0x500000) returned 1
	[0127.507] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\microsoft.NET\\Framework;%windir%\\microsoft.NET\\Framework64;ole32.dll", lpDst=0x51f720, nSize=0x4e | out: lpDst="C:\\Windows\\microsoft.NET\\Framework;C:\\Windows\\microsoft.NET\\Framework64;ole32") returned 0x52
	[0127.507] GetProcessHeap () returned 0x500000
	[0127.507] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51f7c8 | out: hHeap=0x500000) returned 1
	[0127.507] GetProcessHeap () returned 0x500000
	[0127.507] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x51f720, Size=0x136) returned 0x51f720
	[0127.507] GetProcessHeap () returned 0x500000
	[0127.507] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x136) returned 0x5228a8
	[0127.507] GetProcessHeap () returned 0x500000
	[0127.507] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x51f860
	[0127.507] GetProcessHeap () returned 0x500000
	[0127.507] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51f860 | out: hHeap=0x500000) returned 1
	[0127.507] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\microsoft.NET\\Framework;%windir%\\microsoft.NET\\Framework64;ole32.dll", lpDst=0x51f720, nSize=0x9b | out: lpDst="C:\\Windows\\microsoft.NET\\Framework;C:\\Windows\\microsoft.NET\\Framework64;ole32.dll") returned 0x52
	[0127.508] GetProcessHeap () returned 0x500000
	[0127.508] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5228a8 | out: hHeap=0x500000) returned 1
	[0127.508] GetProcessHeap () returned 0x500000
	[0127.508] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51ebd0 | out: hHeap=0x500000) returned 1
	[0127.508] CoInitializeEx (pvReserved=0x0, dwCoInit=0x6) returned 0x0
	[0127.753] GetProcessHeap () returned 0x500000
	[0127.753] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20a) returned 0x527680
	[0127.753] FindFirstFileW (in: lpFileName="C:\\Windows\\microsoft.NET\\Framework64\\*", lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x526a60
	[0127.754] FindNextFileW (in: hFindFile=0x526a60, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0127.754] FindNextFileW (in: hFindFile=0x526a60, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ce80ba, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2ce80ba, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c2f7a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x30, dwReserved1=0x2, cFileName="sbscmp10.dll", cAlternateFileName="")) returned 1
	[0127.754] FindNextFileW (in: hFindFile=0x526a60, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2d34374, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2d34374, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c428543, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x30, dwReserved1=0x2, cFileName="sbscmp20_mscorwks.dll", cAlternateFileName="")) returned 1
	[0127.754] FindNextFileW (in: hFindFile=0x526a60, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2dcc8e8, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2dcc8e8, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x30, dwReserved1=0x2, cFileName="sbscmp20_perfcounter.dll", cAlternateFileName="")) returned 1
	[0127.754] FindNextFileW (in: hFindFile=0x526a60, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e64e5c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2e64e5c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x30, dwReserved1=0x2, cFileName="SharedReg12.dll", cAlternateFileName="")) returned 1
	[0127.754] FindNextFileW (in: hFindFile=0x526a60, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v2.0.50727", cAlternateFileName="V20~1.507")) returned 1
	[0127.754] GetProcessHeap () returned 0x500000
	[0127.754] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x30) returned 0x51f9a8
	[0127.754] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0127.754] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0127.754] GetProcessHeap () returned 0x500000
	[0127.754] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x526aa0
	[0127.754] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x245f8f4, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x245f930 | out: ppv=0x245f930*=0x51dc84) returned 0x0
	[0176.235] IFileOperation:SetOperationFlags (This=0x51dc84, dwOperationFlags=0x10840414) returned 0x0
	[0177.731] SHCreateItemFromParsingName (in: pszPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x245f92c | out: ppv=0x245f92c*=0x510974) returned 0x0
	[0180.857] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v2.0.50727", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x245f924 | out: ppv=0x245f924*=0x564c24) returned 0x0
	[0180.859] IFileOperation:CopyItem (This=0x51dc84, psiItem=0x510974, psiDestinationFolder=0x564c24, pszCopyName="ole32.dll", pfopsItem=0x0) returned 0x0
	[0181.030] IFileOperation:PerformOperations (This=0x51dc84) returned 0x0
	[0181.282] IUnknown:Release (This=0x564c24) returned 0x0
	[0181.282] IUnknown:Release (This=0x510974) returned 0x0
	[0181.282] IUnknown:Release (This=0x51dc84) returned 0x0
	[0182.282] GetProcessHeap () returned 0x500000
	[0182.282] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x526aa0 | out: hHeap=0x500000) returned 1
	[0182.282] GetProcessHeap () returned 0x500000
	[0182.282] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51f9a8 | out: hHeap=0x500000) returned 1
	[0182.283] FindNextFileW (in: hFindFile=0x526a60, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0182.283] GetProcessHeap () returned 0x500000
	[0182.283] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x30) returned 0x53b2d0
	[0182.283] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0182.283] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0182.283] GetProcessHeap () returned 0x500000
	[0182.283] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x526aa0
	[0182.283] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x245f8f4, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x245f930 | out: ppv=0x245f930*=0x5757fc) returned 0x0
	[0189.907] IFileOperation:SetOperationFlags (This=0x5757fc, dwOperationFlags=0x10840414) returned 0x0
	[0190.733] SHCreateItemFromParsingName (in: pszPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x245f92c | out: ppv=0x245f92c*=0x510974) returned 0x0
	[0190.741] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v3.0", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x245f924 | out: ppv=0x245f924*=0x564c24) returned 0x0
	[0190.743] IFileOperation:CopyItem (This=0x5757fc, psiItem=0x510974, psiDestinationFolder=0x564c24, pszCopyName="ole32.dll", pfopsItem=0x0) returned 0x0
	[0191.060] IFileOperation:PerformOperations (This=0x5757fc) returned 0x0
	[0191.264] IUnknown:Release (This=0x564c24) returned 0x0
	[0191.264] IUnknown:Release (This=0x510974) returned 0x0
	[0191.264] IUnknown:Release (This=0x5757fc) returned 0x0
	[0191.856] GetProcessHeap () returned 0x500000
	[0191.856] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x526aa0 | out: hHeap=0x500000) returned 1
	[0191.856] GetProcessHeap () returned 0x500000
	[0191.856] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53b2d0 | out: hHeap=0x500000) returned 1
	[0191.856] FindNextFileW (in: hFindFile=0x526a60, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x95314a8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x95314a8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0191.856] GetProcessHeap () returned 0x500000
	[0191.856] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x30) returned 0x53b2d0
	[0191.856] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0191.856] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0191.856] GetProcessHeap () returned 0x500000
	[0191.856] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x526aa0
	[0191.856] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x245f8f4, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x245f930 | out: ppv=0x245f930*=0x57591c) returned 0x0
	[0200.161] IFileOperation:SetOperationFlags (This=0x57591c, dwOperationFlags=0x10840414) returned 0x0
	[0200.957] SHCreateItemFromParsingName (in: pszPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x245f92c | out: ppv=0x245f92c*=0x510974) returned 0x0
	[0200.962] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v3.5", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x245f924 | out: ppv=0x245f924*=0x564c24) returned 0x0
	[0200.964] IFileOperation:CopyItem (This=0x57591c, psiItem=0x510974, psiDestinationFolder=0x564c24, pszCopyName="ole32.dll", pfopsItem=0x0) returned 0x0
	[0201.532] IFileOperation:PerformOperations (This=0x57591c) returned 0x0
	[0201.774] IUnknown:Release (This=0x564c24) returned 0x0
	[0201.774] IUnknown:Release (This=0x510974) returned 0x0
	[0201.774] IUnknown:Release (This=0x57591c) returned 0x0
	[0202.060] GetProcessHeap () returned 0x500000
	[0202.060] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x526aa0 | out: hHeap=0x500000) returned 1
	[0202.060] GetProcessHeap () returned 0x500000
	[0202.060] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53b2d0 | out: hHeap=0x500000) returned 1
	[0202.060] FindNextFileW (in: hFindFile=0x526a60, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 1
	[0202.060] GetProcessHeap () returned 0x500000
	[0202.060] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x30) returned 0x53b2d0
	[0202.060] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0202.060] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0202.060] GetProcessHeap () returned 0x500000
	[0202.060] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x526aa0
	[0202.061] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x245f8f4, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x245f930 | out: ppv=0x245f930*=0x5759f4) returned 0x0
	[0206.162] IFileOperation:SetOperationFlags (This=0x5759f4, dwOperationFlags=0x10840414) returned 0x0
	[0206.367] SHCreateItemFromParsingName (in: pszPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x245f92c | out: ppv=0x245f92c*=0x510974) returned 0x0
	[0206.396] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v4.0.30319", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x245f924 | out: ppv=0x245f924*=0x564c24) returned 0x0
	[0206.398] IFileOperation:CopyItem (This=0x5759f4, psiItem=0x510974, psiDestinationFolder=0x564c24, pszCopyName="ole32.dll", pfopsItem=0x0) returned 0x0
	[0206.506] IFileOperation:PerformOperations (This=0x5759f4) returned 0x0
	[0206.841] IUnknown:Release (This=0x564c24) returned 0x0
	[0206.841] IUnknown:Release (This=0x510974) returned 0x0
	[0206.841] IUnknown:Release (This=0x5759f4) returned 0x0
	[0207.051] GetProcessHeap () returned 0x500000
	[0207.051] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x526aa0 | out: hHeap=0x500000) returned 1
	[0207.051] GetProcessHeap () returned 0x500000
	[0207.051] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53b2d0 | out: hHeap=0x500000) returned 1
	[0207.051] FindNextFileW (in: hFindFile=0x526a60, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 0
	[0207.051] FindClose (in: hFindFile=0x526a60 | out: hFindFile=0x526a60) returned 1
	[0207.052] GetProcessHeap () returned 0x500000
	[0207.052] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x527680 | out: hHeap=0x500000) returned 1
	[0207.052] CoUninitialize () 
	[0207.271] GetProcessHeap () returned 0x500000
	[0207.271] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51f720 | out: hHeap=0x500000) returned 1
	[0207.271] ShellExecuteExW (in: pExecInfo=0x245fbec*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="open", lpFile="compmgmt.msc", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x245fbec*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="open", lpFile="compmgmt.msc", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
	[0224.328] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0224.334] GetProcessHeap () returned 0x500000
	[0224.334] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0xa0) returned 0x566458
	[0224.334] GetProcessHeap () returned 0x500000
	[0224.334] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x9c) returned 0x566500
	[0224.334] GetProcessHeap () returned 0x500000
	[0224.334] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x9c) returned 0x5665a8
	[0224.334] GetProcessHeap () returned 0x500000
	[0224.334] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x580068
	[0224.334] GetProcessHeap () returned 0x500000
	[0224.334] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x580068 | out: hHeap=0x500000) returned 1
	[0224.334] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\microsoft.NET\\Framework;%windir%\\microsoft.NET\\Framework64;ole32.dll", lpDst=0x566500, nSize=0x4e | out: lpDst="C:\\Windows\\microsoft.NET\\Framework;C:\\Windows\\microsoft.NET\\Framework64;ole32") returned 0x52
	[0224.334] GetProcessHeap () returned 0x500000
	[0224.334] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5665a8 | out: hHeap=0x500000) returned 1
	[0224.334] GetProcessHeap () returned 0x500000
	[0224.334] RtlReAllocateHeap (Heap=0x500000, Flags=0x0, Ptr=0x566500, Size=0x136) returned 0x51f720
	[0224.334] GetProcessHeap () returned 0x500000
	[0224.334] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x136) returned 0x57de70
	[0224.334] GetProcessHeap () returned 0x500000
	[0224.334] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x580068
	[0224.334] GetProcessHeap () returned 0x500000
	[0224.334] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x580068 | out: hHeap=0x500000) returned 1
	[0224.334] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\microsoft.NET\\Framework;%windir%\\microsoft.NET\\Framework64;ole32.dll", lpDst=0x51f720, nSize=0x9b | out: lpDst="C:\\Windows\\microsoft.NET\\Framework;C:\\Windows\\microsoft.NET\\Framework64;ole32.dll") returned 0x52
	[0224.334] GetProcessHeap () returned 0x500000
	[0224.334] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x57de70 | out: hHeap=0x500000) returned 1
	[0224.334] GetProcessHeap () returned 0x500000
	[0224.334] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x566458 | out: hHeap=0x500000) returned 1
	[0224.334] CoInitializeEx (pvReserved=0x0, dwCoInit=0x6) returned 0x0
	[0224.335] GetProcessHeap () returned 0x500000
	[0224.336] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x20a) returned 0x55c338
	[0224.336] FindFirstFileW (in: lpFileName="C:\\Windows\\microsoft.NET\\Framework64\\*", lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x500000, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x52f0c8
	[0224.336] FindNextFileW (in: hFindFile=0x52f0c8, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x500000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.336] FindNextFileW (in: hFindFile=0x52f0c8, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ce80ba, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2ce80ba, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c2f7a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x500000, dwReserved1=0x0, cFileName="sbscmp10.dll", cAlternateFileName="")) returned 1
	[0224.336] FindNextFileW (in: hFindFile=0x52f0c8, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2d34374, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2d34374, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c428543, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x500000, dwReserved1=0x0, cFileName="sbscmp20_mscorwks.dll", cAlternateFileName="")) returned 1
	[0224.336] FindNextFileW (in: hFindFile=0x52f0c8, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2dcc8e8, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2dcc8e8, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x500000, dwReserved1=0x0, cFileName="sbscmp20_perfcounter.dll", cAlternateFileName="")) returned 1
	[0224.336] FindNextFileW (in: hFindFile=0x52f0c8, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e64e5c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2e64e5c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x500000, dwReserved1=0x0, cFileName="SharedReg12.dll", cAlternateFileName="")) returned 1
	[0224.336] FindNextFileW (in: hFindFile=0x52f0c8, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4c1616e0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x4c1616e0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x500000, dwReserved1=0x0, cFileName="v2.0.50727", cAlternateFileName="V20~1.507")) returned 1
	[0224.336] GetProcessHeap () returned 0x500000
	[0224.336] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x30) returned 0x531190
	[0224.336] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0224.336] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0224.336] GetProcessHeap () returned 0x500000
	[0224.336] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x580068
	[0224.337] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x245f6e4, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x245f720 | out: ppv=0x245f720*=0x575b14) returned 0x0
	[0230.128] IFileOperation:SetOperationFlags (This=0x575b14, dwOperationFlags=0x10840414) returned 0x0
	[0230.368] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v2.0.50727\\ole32.dll", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x245f71c | out: ppv=0x245f71c*=0x0) returned 0x80070002
	[0230.371] IUnknown:Release (This=0x575b14) returned 0x0
	[0230.429] GetProcessHeap () returned 0x500000
	[0230.429] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x580068 | out: hHeap=0x500000) returned 1
	[0230.429] GetProcessHeap () returned 0x500000
	[0230.429] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x531190 | out: hHeap=0x500000) returned 1
	[0230.429] FindNextFileW (in: hFindFile=0x52f0c8, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x520e49a0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x520e49a0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x500000, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0230.429] GetProcessHeap () returned 0x500000
	[0230.429] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x30) returned 0x531190
	[0230.430] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0230.430] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0230.430] GetProcessHeap () returned 0x500000
	[0230.430] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x580068
	[0230.430] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x245f6e4, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x245f720 | out: ppv=0x245f720*=0x575bec) returned 0x0
	[0233.721] IFileOperation:SetOperationFlags (This=0x575bec, dwOperationFlags=0x10840414) returned 0x0
	[0233.770] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v3.0\\ole32.dll", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x245f71c | out: ppv=0x245f71c*=0x0) returned 0x80070002
	[0233.773] IUnknown:Release (This=0x575bec) returned 0x0
	[0233.949] GetProcessHeap () returned 0x500000
	[0233.949] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x580068 | out: hHeap=0x500000) returned 1
	[0233.949] GetProcessHeap () returned 0x500000
	[0233.949] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x531190 | out: hHeap=0x500000) returned 1
	[0233.949] FindNextFileW (in: hFindFile=0x52f0c8, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x58315520, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x58315520, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x500000, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0233.949] GetProcessHeap () returned 0x500000
	[0233.949] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x30) returned 0x531190
	[0233.949] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0233.950] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0233.950] GetProcessHeap () returned 0x500000
	[0233.950] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x580068
	[0233.950] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x245f6e4, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x245f720 | out: ppv=0x245f720*=0x575b14) returned 0x0
	[0236.905] IFileOperation:SetOperationFlags (This=0x575b14, dwOperationFlags=0x10840414) returned 0x0
	[0237.142] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v3.5\\ole32.dll", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x245f71c | out: ppv=0x245f71c*=0x510974) returned 0x0
	[0237.144] IFileOperation:DeleteItem (This=0x575b14, psiItem=0x510974, pfopsItem=0x0) returned 0x0
	[0237.330] IFileOperation:PerformOperations (This=0x575b14) returned 0x0
	[0237.492] IUnknown:Release (This=0x510974) returned 0x0
	[0237.492] IUnknown:Release (This=0x575b14) returned 0x0
	[0237.862] GetProcessHeap () returned 0x500000
	[0237.862] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x580068 | out: hHeap=0x500000) returned 1
	[0237.862] GetProcessHeap () returned 0x500000
	[0237.862] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x531190 | out: hHeap=0x500000) returned 1
	[0237.862] FindNextFileW (in: hFindFile=0x52f0c8, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5b4ec1c0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x5b4ec1c0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x500000, dwReserved1=0x0, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 1
	[0237.862] GetProcessHeap () returned 0x500000
	[0237.862] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x30) returned 0x531190
	[0237.863] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0237.863] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0237.863] GetProcessHeap () returned 0x500000
	[0237.863] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x90) returned 0x580068
	[0237.863] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x245f6e4, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x245f720 | out: ppv=0x245f720*=0x575bec) returned 0x0
	[0240.567] IFileOperation:SetOperationFlags (This=0x575bec, dwOperationFlags=0x10840414) returned 0x0
	[0240.693] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v4.0.30319\\ole32.dll", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x245f71c | out: ppv=0x245f71c*=0x0) returned 0x80070002
	[0240.696] IUnknown:Release (This=0x575bec) returned 0x0
	[0240.914] GetProcessHeap () returned 0x500000
	[0240.914] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x580068 | out: hHeap=0x500000) returned 1
	[0240.914] GetProcessHeap () returned 0x500000
	[0240.914] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x531190 | out: hHeap=0x500000) returned 1
	[0240.914] FindNextFileW (in: hFindFile=0x52f0c8, lpFindFileData=0x245f980 | out: lpFindFileData=0x245f980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5b4ec1c0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x5b4ec1c0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x500000, dwReserved1=0x0, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 0
	[0240.914] FindClose (in: hFindFile=0x52f0c8 | out: hFindFile=0x52f0c8) returned 1
	[0240.914] GetProcessHeap () returned 0x500000
	[0240.914] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x55c338 | out: hHeap=0x500000) returned 1
	[0240.914] CoUninitialize () 
	[0241.068] GetProcessHeap () returned 0x500000
	[0241.068] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51f720 | out: hHeap=0x500000) returned 1
	[0241.068] GetProcessHeap () returned 0x500000
	[0241.069] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x70) returned 0x572f80
	[0241.069] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0241.069] GetProcAddress (hModule=0x77d90000, lpProcName="RtlInitUnicodeString") returned 0x77dbe208
	[0241.069] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0241.069] GetProcAddress (hModule=0x77d90000, lpProcName="NtQueryInformationProcess") returned 0x77dafac8
	[0241.069] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0241.069] GetProcAddress (hModule=0x77d90000, lpProcName="RtlEnterCriticalSection") returned 0x77db22b0
	[0241.069] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0241.069] GetProcAddress (hModule=0x77d90000, lpProcName="RtlLeaveCriticalSection") returned 0x77db2270
	[0241.069] GetCurrentProcessId () returned 0x794
	[0241.069] OpenProcess (dwDesiredAccess=0x438, bInheritHandle=0, dwProcessId=0x794) returned 0x2d4
	[0241.070] NtQueryInformationProcess (in: ProcessHandle=0x2d4, ProcessInformationClass=0x0, ProcessInformation=0x245fbbc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x245fbbc, ReturnLength=0x0) returned 0x0
	[0241.070] ReadProcessMemory (in: hProcess=0x2d4, lpBaseAddress=0x7efde000, lpBuffer=0x245fbd4, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x245fbd4*, lpNumberOfBytesRead=0x0) returned 1
	[0241.070] ReadProcessMemory (in: hProcess=0x2d4, lpBaseAddress=0x77e90200, lpBuffer=0x245fb8c, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x245fb8c*, lpNumberOfBytesRead=0x0) returned 1
	[0241.070] RtlInitUnicodeString (in: DestinationString=0x501338, SourceString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" | out: DestinationString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe") 
	[0241.070] RtlInitUnicodeString (in: DestinationString=0x501340, SourceString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" | out: DestinationString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe") 
	[0241.070] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x245f768, nSize=0x104 | out: lpFilename="C:\\Windows\\explorer.exe" (normalized: "c:\\windows\\explorer.exe")) returned 0x17
	[0241.070] ReadProcessMemory (in: hProcess=0x2d4, lpBaseAddress=0x245fbfc, lpBuffer=0x245fc04, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x245fc04*, lpNumberOfBytesRead=0x0) returned 1
	[0241.070] ReadProcessMemory (in: hProcess=0x2d4, lpBaseAddress=0x51e958, lpBuffer=0x245f978, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x245f978*, lpNumberOfBytesRead=0x0) returned 1
	[0241.070] RtlInitUnicodeString (in: DestinationString=0x5027dc, SourceString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" | out: DestinationString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe") 
	[0241.070] RtlInitUnicodeString (in: DestinationString=0x5027e4, SourceString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe" | out: DestinationString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\rsfd234df.exe") 
	[0241.070] CloseHandle (hObject=0x2d4) returned 1
	[0241.070] GetProcessHeap () returned 0x500000
	[0241.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x572f80 | out: hHeap=0x500000) returned 1
	[0241.070] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\9c354b42")) returned 0
	[0241.070] GetProcessHeap () returned 0x500000
	[0241.070] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x50) returned 0x53ece0
	[0241.070] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0241.070] GetProcAddress (hModule=0x76300000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7632d668
	[0241.070] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1
	[0241.070] GetProcessHeap () returned 0x500000
	[0241.070] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x53ece0 | out: hHeap=0x500000) returned 1
	[0241.070] GetProcessHeap () returned 0x500000
	[0241.071] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51e958 | out: hHeap=0x500000) returned 1
	[0241.071] GetProcessHeap () returned 0x500000
	[0241.071] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x522570 | out: hHeap=0x500000) returned 1
	[0241.071] GetProcessHeap () returned 0x500000
	[0241.071] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x50f7f0 | out: hHeap=0x500000) returned 1
	[0241.071] GetProcessHeap () returned 0x500000
	[0241.071] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf58 | out: hHeap=0x500000) returned 1
	[0241.071] GetProcessHeap () returned 0x500000
	[0241.071] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x51cf80 | out: hHeap=0x500000) returned 1
	[0241.071] GetProcessHeap () returned 0x500000
	[0241.071] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x511760 | out: hHeap=0x500000) returned 1

Thread:
	id = 39
	os_tid = 0x328


Thread:
	id = 41
	os_tid = 0x41c


Thread:
	id = 42
	os_tid = 0x518


Thread:
	id = 43
	os_tid = 0x7b4


Thread:
	id = 74
	os_tid = 0x118


Thread:
	id = 92
	os_tid = 0x6dc


Thread:
	id = 103
	os_tid = 0x7c4


Process:
	id = "14"
	image_name = "rsfd234df.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe"
	page_root = "0x2a76c000"
	os_pid = "0x508"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "10"
	os_parent_pid = "0x778"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe\""
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 59
	os_tid = 0x5a8

	[0137.436] GetProcessHeap () returned 0x510000
	[0137.436] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x521768
	[0137.436] GetProcessHeap () returned 0x510000
	[0137.436] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x3550) returned 0x525188
	[0137.437] GetProcessHeap () returned 0x510000
	[0137.437] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x204) returned 0x5286e0
	[0137.437] GetProcessHeap () returned 0x510000
	[0137.437] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10) returned 0x521518
	[0137.437] GetTickCount () returned 0x1138c68
	[0137.438] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x19f790 | out: lpWSAData=0x19f790) returned 0
	[0137.445] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x19f770, cchData=32 | out: lpLCData="\x03") returned 16
	[0137.445] GetProcessHeap () returned 0x510000
	[0137.445] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1c) returned 0x523ee0
	[0137.445] GetProcessHeap () returned 0x510000
	[0137.445] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1c) returned 0x52cbe8
	[0137.445] GetVersion () returned 0x1db10106
	[0137.445] GetCurrentProcess () returned 0xffffffff
	[0137.445] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x19f6e4 | out: TokenHandle=0x19f6e4*=0xb4) returned 1
	[0137.445] GetTokenInformation (in: TokenHandle=0xb4, TokenInformationClass=0x14, TokenInformation=0x19f6dc, TokenInformationLength=0x4, ReturnLength=0x19f6e0 | out: TokenInformation=0x19f6dc, ReturnLength=0x19f6e0) returned 1
	[0137.445] CloseHandle (hObject=0xb4) returned 1
	[0137.445] GetProcessHeap () returned 0x510000
	[0137.445] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x52cc38
	[0137.445] GetProcessHeap () returned 0x510000
	[0137.445] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x52cc60
	[0137.445] GetProcessHeap () returned 0x510000
	[0137.445] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x52cc88
	[0137.446] GetProcessHeap () returned 0x510000
	[0137.446] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x52d3d0
	[0137.446] GetProcessHeap () returned 0x510000
	[0137.446] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d3d0 | out: hHeap=0x510000) returned 1
	[0137.446] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52cc60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0137.446] GetProcessHeap () returned 0x510000
	[0137.446] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc88 | out: hHeap=0x510000) returned 1
	[0137.446] GetProcessHeap () returned 0x510000
	[0137.446] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc38 | out: hHeap=0x510000) returned 1
	[0137.446] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f684, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f684*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0137.446] GetProcessHeap () returned 0x510000
	[0137.446] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc60 | out: hHeap=0x510000) returned 1
	[0137.446] GetProcessHeap () returned 0x510000
	[0137.446] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d3e8
	[0137.446] GetProcessHeap () returned 0x510000
	[0137.446] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d430
	[0137.446] GetProcessHeap () returned 0x510000
	[0137.446] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d430, Size=0x72) returned 0x51f658
	[0137.446] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000000") returned 0xb4
	[0137.446] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x0) returned 0x102
	[0137.446] CloseHandle (hObject=0xb4) returned 1
	[0137.446] GetProcessHeap () returned 0x510000
	[0137.446] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d3e8 | out: hHeap=0x510000) returned 1
	[0137.446] GetProcessHeap () returned 0x510000
	[0137.446] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51f658 | out: hHeap=0x510000) returned 1
	[0137.446] GetProcessHeap () returned 0x510000
	[0137.446] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x52cc60
	[0137.446] GetProcessHeap () returned 0x510000
	[0137.446] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x52cc38
	[0137.447] GetProcessHeap () returned 0x510000
	[0137.447] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x52cc88
	[0137.447] GetProcessHeap () returned 0x510000
	[0137.447] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x52e3d0
	[0137.447] GetProcessHeap () returned 0x510000
	[0137.447] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e3d0 | out: hHeap=0x510000) returned 1
	[0137.447] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52cc38, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0137.447] GetProcessHeap () returned 0x510000
	[0137.447] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc88 | out: hHeap=0x510000) returned 1
	[0137.447] GetProcessHeap () returned 0x510000
	[0137.447] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc60 | out: hHeap=0x510000) returned 1
	[0137.447] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f66c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f66c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0137.447] GetProcessHeap () returned 0x510000
	[0137.447] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc38 | out: hHeap=0x510000) returned 1
	[0137.447] GetProcessHeap () returned 0x510000
	[0137.447] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d3e8
	[0137.447] GetProcessHeap () returned 0x510000
	[0137.447] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d430
	[0137.447] GetProcessHeap () returned 0x510000
	[0137.447] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d430, Size=0x72) returned 0x51f658
	[0137.447] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0137.447] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0xb4
	[0137.447] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0x0) returned 0x0
	[0137.447] GetProcessHeap () returned 0x510000
	[0137.447] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d3e8 | out: hHeap=0x510000) returned 1
	[0137.447] GetProcessHeap () returned 0x510000
	[0137.447] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51f658 | out: hHeap=0x510000) returned 1
	[0137.447] ReleaseMutex (hMutex=0xb4) returned 1
	[0137.447] CloseHandle (hObject=0xb4) returned 1
	[0137.447] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xb4
	[0137.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4035e3, lpParameter=0xb4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8
	[0137.448] GetProcessHeap () returned 0x510000
	[0137.448] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x52cc38
	[0137.448] GetProcessHeap () returned 0x510000
	[0137.448] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x52cc60
	[0137.448] GetProcessHeap () returned 0x510000
	[0137.448] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x52cc88
	[0137.448] GetProcessHeap () returned 0x510000
	[0137.448] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x52e3f0
	[0137.448] GetProcessHeap () returned 0x510000
	[0137.448] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e3f0 | out: hHeap=0x510000) returned 1
	[0137.449] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52cc60, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0137.449] GetProcessHeap () returned 0x510000
	[0137.449] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc88 | out: hHeap=0x510000) returned 1
	[0137.449] GetProcessHeap () returned 0x510000
	[0137.449] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc38 | out: hHeap=0x510000) returned 1
	[0137.449] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0137.449] GetProcessHeap () returned 0x510000
	[0137.449] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc60 | out: hHeap=0x510000) returned 1
	[0137.449] GetProcessHeap () returned 0x510000
	[0137.449] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d3e8
	[0137.449] GetProcessHeap () returned 0x510000
	[0137.449] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d430
	[0137.449] GetProcessHeap () returned 0x510000
	[0137.449] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d430, Size=0x72) returned 0x51f658
	[0137.449] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0137.449] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0xbc
	[0137.449] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x0) returned 0x0
	[0137.449] GetProcessHeap () returned 0x510000
	[0137.449] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d3e8 | out: hHeap=0x510000) returned 1
	[0137.449] GetProcessHeap () returned 0x510000
	[0137.449] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51f658 | out: hHeap=0x510000) returned 1
	[0137.449] ReleaseMutex (hMutex=0xbc) returned 1
	[0137.449] CloseHandle (hObject=0xbc) returned 1
	[0137.449] Sleep (dwMilliseconds=0x64) 
	[0137.717] GetProcessHeap () returned 0x510000
	[0137.717] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x52d0e8
	[0137.717] GetProcessHeap () returned 0x510000
	[0137.717] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x52d110
	[0137.717] GetProcessHeap () returned 0x510000
	[0137.717] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x52d098
	[0137.717] GetProcessHeap () returned 0x510000
	[0137.717] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x531a18
	[0137.717] GetProcessHeap () returned 0x510000
	[0137.717] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x531a18 | out: hHeap=0x510000) returned 1
	[0137.717] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52d110, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0137.717] GetProcessHeap () returned 0x510000
	[0137.717] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d098 | out: hHeap=0x510000) returned 1
	[0137.717] GetProcessHeap () returned 0x510000
	[0137.718] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d0e8 | out: hHeap=0x510000) returned 1
	[0137.718] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0137.718] GetProcessHeap () returned 0x510000
	[0137.718] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d110 | out: hHeap=0x510000) returned 1
	[0137.718] GetProcessHeap () returned 0x510000
	[0137.718] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d4c0
	[0137.718] GetProcessHeap () returned 0x510000
	[0137.718] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d508
	[0137.718] GetProcessHeap () returned 0x510000
	[0137.718] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d508, Size=0x72) returned 0x51f6d8
	[0137.718] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0137.718] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0xfc
	[0137.718] WaitForSingleObject (hHandle=0xfc, dwMilliseconds=0x0) returned 0x0
	[0137.718] GetProcessHeap () returned 0x510000
	[0137.718] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d4c0 | out: hHeap=0x510000) returned 1
	[0137.718] GetProcessHeap () returned 0x510000
	[0137.718] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51f6d8 | out: hHeap=0x510000) returned 1
	[0137.718] ReleaseMutex (hMutex=0xfc) returned 1
	[0137.718] CloseHandle (hObject=0xfc) returned 1
	[0137.718] Sleep (dwMilliseconds=0x64) 
	[0137.942] GetProcessHeap () returned 0x510000
	[0137.942] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ac28
	[0137.942] GetProcessHeap () returned 0x510000
	[0137.942] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ac50
	[0137.942] GetProcessHeap () returned 0x510000
	[0137.942] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53ac78
	[0137.942] GetProcessHeap () returned 0x510000
	[0137.942] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x53a2f0
	[0137.942] GetProcessHeap () returned 0x510000
	[0137.942] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53a2f0 | out: hHeap=0x510000) returned 1
	[0137.942] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ac50, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0137.942] GetProcessHeap () returned 0x510000
	[0137.942] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ac78 | out: hHeap=0x510000) returned 1
	[0137.942] GetProcessHeap () returned 0x510000
	[0137.943] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ac28 | out: hHeap=0x510000) returned 1
	[0137.943] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0137.943] GetProcessHeap () returned 0x510000
	[0137.943] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ac50 | out: hHeap=0x510000) returned 1
	[0137.943] GetProcessHeap () returned 0x510000
	[0137.943] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d6b8
	[0137.943] GetProcessHeap () returned 0x510000
	[0137.943] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d700
	[0137.943] GetProcessHeap () returned 0x510000
	[0137.943] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d700, Size=0x72) returned 0x51f9d8
	[0137.943] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0137.943] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x144
	[0137.943] WaitForSingleObject (hHandle=0x144, dwMilliseconds=0x0) returned 0x0
	[0137.943] GetProcessHeap () returned 0x510000
	[0137.943] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d6b8 | out: hHeap=0x510000) returned 1
	[0137.944] GetProcessHeap () returned 0x510000
	[0137.944] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51f9d8 | out: hHeap=0x510000) returned 1
	[0137.944] ReleaseMutex (hMutex=0x144) returned 1
	[0137.944] CloseHandle (hObject=0x144) returned 1
	[0137.944] Sleep (dwMilliseconds=0x64) 
	[0138.144] GetProcessHeap () returned 0x510000
	[0138.144] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53d8d0
	[0138.144] GetProcessHeap () returned 0x510000
	[0138.144] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53d830
	[0138.144] GetProcessHeap () returned 0x510000
	[0138.144] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53d858
	[0138.144] GetProcessHeap () returned 0x510000
	[0138.144] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x53fff0
	[0138.144] GetProcessHeap () returned 0x510000
	[0138.144] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53fff0 | out: hHeap=0x510000) returned 1
	[0138.144] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53d830, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0138.144] GetProcessHeap () returned 0x510000
	[0138.144] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53d858 | out: hHeap=0x510000) returned 1
	[0138.144] GetProcessHeap () returned 0x510000
	[0138.144] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53d8d0 | out: hHeap=0x510000) returned 1
	[0138.144] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0138.145] GetProcessHeap () returned 0x510000
	[0138.145] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53d830 | out: hHeap=0x510000) returned 1
	[0138.145] GetProcessHeap () returned 0x510000
	[0138.145] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d7d8
	[0138.145] GetProcessHeap () returned 0x510000
	[0138.145] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d820
	[0138.145] GetProcessHeap () returned 0x510000
	[0138.145] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d820, Size=0x72) returned 0x51fa58
	[0138.145] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0138.145] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x14c
	[0138.145] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0x0) returned 0x0
	[0138.145] GetProcessHeap () returned 0x510000
	[0138.145] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d7d8 | out: hHeap=0x510000) returned 1
	[0138.145] GetProcessHeap () returned 0x510000
	[0138.145] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fa58 | out: hHeap=0x510000) returned 1
	[0138.145] ReleaseMutex (hMutex=0x14c) returned 1
	[0138.145] CloseHandle (hObject=0x14c) returned 1
	[0138.145] Sleep (dwMilliseconds=0x64) 
	[0138.363] GetProcessHeap () returned 0x510000
	[0138.363] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0138.363] GetProcessHeap () returned 0x510000
	[0138.363] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0138.363] GetProcessHeap () returned 0x510000
	[0138.363] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0138.363] GetProcessHeap () returned 0x510000
	[0138.363] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x548988
	[0138.363] GetProcessHeap () returned 0x510000
	[0138.363] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x548988 | out: hHeap=0x510000) returned 1
	[0138.363] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0138.363] GetProcessHeap () returned 0x510000
	[0138.363] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0138.363] GetProcessHeap () returned 0x510000
	[0138.363] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0138.363] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0138.363] GetProcessHeap () returned 0x510000
	[0138.364] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0138.364] GetProcessHeap () returned 0x510000
	[0138.364] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0138.364] GetProcessHeap () returned 0x510000
	[0138.364] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0138.364] GetProcessHeap () returned 0x510000
	[0138.364] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0138.364] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0138.364] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x168
	[0138.364] WaitForSingleObject (hHandle=0x168, dwMilliseconds=0x0) returned 0x0
	[0138.364] GetProcessHeap () returned 0x510000
	[0138.364] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0138.364] GetProcessHeap () returned 0x510000
	[0138.364] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0138.364] ReleaseMutex (hMutex=0x168) returned 1
	[0138.364] CloseHandle (hObject=0x168) returned 1
	[0138.364] Sleep (dwMilliseconds=0x64) 
	[0138.601] GetProcessHeap () returned 0x510000
	[0138.601] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0138.601] GetProcessHeap () returned 0x510000
	[0138.601] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0138.601] GetProcessHeap () returned 0x510000
	[0138.601] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0138.601] GetProcessHeap () returned 0x510000
	[0138.601] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0138.601] GetProcessHeap () returned 0x510000
	[0138.601] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0138.601] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0138.601] GetProcessHeap () returned 0x510000
	[0138.601] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0138.601] GetProcessHeap () returned 0x510000
	[0138.601] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0138.601] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0138.602] GetProcessHeap () returned 0x510000
	[0138.602] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0138.602] GetProcessHeap () returned 0x510000
	[0138.602] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0138.602] GetProcessHeap () returned 0x510000
	[0138.602] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0138.602] GetProcessHeap () returned 0x510000
	[0138.602] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0138.602] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0138.602] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0138.602] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0138.602] GetProcessHeap () returned 0x510000
	[0138.602] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0138.602] GetProcessHeap () returned 0x510000
	[0138.602] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0138.602] ReleaseMutex (hMutex=0x170) returned 1
	[0138.602] CloseHandle (hObject=0x170) returned 1
	[0138.602] Sleep (dwMilliseconds=0x64) 
	[0138.831] GetProcessHeap () returned 0x510000
	[0138.832] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0138.832] GetProcessHeap () returned 0x510000
	[0138.832] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0138.832] GetProcessHeap () returned 0x510000
	[0138.832] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0138.832] GetProcessHeap () returned 0x510000
	[0138.832] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0138.832] GetProcessHeap () returned 0x510000
	[0138.832] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0138.832] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0138.832] GetProcessHeap () returned 0x510000
	[0138.832] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0138.832] GetProcessHeap () returned 0x510000
	[0138.832] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0138.832] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0138.832] GetProcessHeap () returned 0x510000
	[0138.832] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0138.832] GetProcessHeap () returned 0x510000
	[0138.832] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0138.832] GetProcessHeap () returned 0x510000
	[0138.832] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0138.832] GetProcessHeap () returned 0x510000
	[0138.832] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0138.832] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0138.832] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0138.833] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0138.833] GetProcessHeap () returned 0x510000
	[0138.833] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0138.833] GetProcessHeap () returned 0x510000
	[0138.833] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0138.833] ReleaseMutex (hMutex=0x170) returned 1
	[0138.833] CloseHandle (hObject=0x170) returned 1
	[0138.833] Sleep (dwMilliseconds=0x64) 
	[0138.992] GetProcessHeap () returned 0x510000
	[0138.992] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0138.992] GetProcessHeap () returned 0x510000
	[0138.992] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0138.992] GetProcessHeap () returned 0x510000
	[0138.992] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0138.992] GetProcessHeap () returned 0x510000
	[0138.992] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0138.992] GetProcessHeap () returned 0x510000
	[0138.992] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0138.992] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0138.992] GetProcessHeap () returned 0x510000
	[0138.992] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0138.992] GetProcessHeap () returned 0x510000
	[0138.992] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0138.992] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0138.992] GetProcessHeap () returned 0x510000
	[0138.992] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0138.992] GetProcessHeap () returned 0x510000
	[0138.992] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0138.992] GetProcessHeap () returned 0x510000
	[0138.992] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0138.992] GetProcessHeap () returned 0x510000
	[0138.992] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0138.993] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0138.993] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0138.993] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0138.993] GetProcessHeap () returned 0x510000
	[0138.993] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0138.993] GetProcessHeap () returned 0x510000
	[0138.993] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0138.993] ReleaseMutex (hMutex=0x170) returned 1
	[0138.993] CloseHandle (hObject=0x170) returned 1
	[0138.993] Sleep (dwMilliseconds=0x64) 
	[0139.536] GetProcessHeap () returned 0x510000
	[0139.536] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0139.536] GetProcessHeap () returned 0x510000
	[0139.536] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0139.536] GetProcessHeap () returned 0x510000
	[0139.536] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0139.536] GetProcessHeap () returned 0x510000
	[0139.536] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0139.537] GetProcessHeap () returned 0x510000
	[0139.537] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0139.537] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0139.537] GetProcessHeap () returned 0x510000
	[0139.537] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0139.537] GetProcessHeap () returned 0x510000
	[0139.537] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0139.537] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0139.537] GetProcessHeap () returned 0x510000
	[0139.537] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0139.537] GetProcessHeap () returned 0x510000
	[0139.537] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0139.537] GetProcessHeap () returned 0x510000
	[0139.537] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0139.537] GetProcessHeap () returned 0x510000
	[0139.537] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0139.537] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0139.537] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0139.537] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0139.537] GetProcessHeap () returned 0x510000
	[0139.537] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0139.537] GetProcessHeap () returned 0x510000
	[0139.537] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0139.537] ReleaseMutex (hMutex=0x170) returned 1
	[0139.537] CloseHandle (hObject=0x170) returned 1
	[0139.537] Sleep (dwMilliseconds=0x64) 
	[0139.815] GetProcessHeap () returned 0x510000
	[0139.815] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0139.815] GetProcessHeap () returned 0x510000
	[0139.815] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0139.815] GetProcessHeap () returned 0x510000
	[0139.815] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0139.815] GetProcessHeap () returned 0x510000
	[0139.815] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0139.815] GetProcessHeap () returned 0x510000
	[0139.815] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0139.815] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0139.815] GetProcessHeap () returned 0x510000
	[0139.815] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0139.815] GetProcessHeap () returned 0x510000
	[0139.815] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0139.815] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0139.815] GetProcessHeap () returned 0x510000
	[0139.815] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0139.815] GetProcessHeap () returned 0x510000
	[0139.815] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0139.815] GetProcessHeap () returned 0x510000
	[0139.815] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0139.815] GetProcessHeap () returned 0x510000
	[0139.815] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0139.815] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0139.816] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0139.816] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0139.816] GetProcessHeap () returned 0x510000
	[0139.816] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0139.816] GetProcessHeap () returned 0x510000
	[0139.816] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0139.816] ReleaseMutex (hMutex=0x170) returned 1
	[0139.816] CloseHandle (hObject=0x170) returned 1
	[0139.816] Sleep (dwMilliseconds=0x64) 
	[0140.033] GetProcessHeap () returned 0x510000
	[0140.033] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0140.034] GetProcessHeap () returned 0x510000
	[0140.034] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0140.034] GetProcessHeap () returned 0x510000
	[0140.034] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0140.034] GetProcessHeap () returned 0x510000
	[0140.034] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0140.034] GetProcessHeap () returned 0x510000
	[0140.034] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0140.034] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0140.034] GetProcessHeap () returned 0x510000
	[0140.034] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0140.034] GetProcessHeap () returned 0x510000
	[0140.034] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0140.034] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0140.034] GetProcessHeap () returned 0x510000
	[0140.034] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0140.034] GetProcessHeap () returned 0x510000
	[0140.034] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0140.034] GetProcessHeap () returned 0x510000
	[0140.034] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0140.034] GetProcessHeap () returned 0x510000
	[0140.034] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0140.034] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0140.034] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0140.035] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0140.035] GetProcessHeap () returned 0x510000
	[0140.035] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0140.035] GetProcessHeap () returned 0x510000
	[0140.035] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0140.035] ReleaseMutex (hMutex=0x170) returned 1
	[0140.035] CloseHandle (hObject=0x170) returned 1
	[0140.035] Sleep (dwMilliseconds=0x64) 
	[0140.271] GetProcessHeap () returned 0x510000
	[0140.271] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0140.271] GetProcessHeap () returned 0x510000
	[0140.271] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0140.271] GetProcessHeap () returned 0x510000
	[0140.271] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0140.271] GetProcessHeap () returned 0x510000
	[0140.271] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0140.271] GetProcessHeap () returned 0x510000
	[0140.271] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0140.271] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0140.271] GetProcessHeap () returned 0x510000
	[0140.271] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0140.271] GetProcessHeap () returned 0x510000
	[0140.271] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0140.271] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0140.272] GetProcessHeap () returned 0x510000
	[0140.272] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0140.272] GetProcessHeap () returned 0x510000
	[0140.272] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0140.272] GetProcessHeap () returned 0x510000
	[0140.272] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0140.272] GetProcessHeap () returned 0x510000
	[0140.272] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0140.272] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0140.272] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0140.272] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0140.272] GetProcessHeap () returned 0x510000
	[0140.272] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0140.272] GetProcessHeap () returned 0x510000
	[0140.272] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0140.272] ReleaseMutex (hMutex=0x170) returned 1
	[0140.272] CloseHandle (hObject=0x170) returned 1
	[0140.272] Sleep (dwMilliseconds=0x64) 
	[0140.501] GetProcessHeap () returned 0x510000
	[0140.502] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0140.502] GetProcessHeap () returned 0x510000
	[0140.502] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0140.502] GetProcessHeap () returned 0x510000
	[0140.502] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0140.502] GetProcessHeap () returned 0x510000
	[0140.502] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0140.502] GetProcessHeap () returned 0x510000
	[0140.502] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0140.502] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0140.502] GetProcessHeap () returned 0x510000
	[0140.502] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0140.502] GetProcessHeap () returned 0x510000
	[0140.502] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0140.502] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0140.502] GetProcessHeap () returned 0x510000
	[0140.502] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0140.502] GetProcessHeap () returned 0x510000
	[0140.502] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0140.502] GetProcessHeap () returned 0x510000
	[0140.502] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0140.502] GetProcessHeap () returned 0x510000
	[0140.502] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0140.502] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0140.502] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0140.503] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0140.503] GetProcessHeap () returned 0x510000
	[0140.503] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0140.503] GetProcessHeap () returned 0x510000
	[0140.503] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0140.503] ReleaseMutex (hMutex=0x170) returned 1
	[0140.503] CloseHandle (hObject=0x170) returned 1
	[0140.503] Sleep (dwMilliseconds=0x64) 
	[0140.672] GetProcessHeap () returned 0x510000
	[0140.672] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0140.672] GetProcessHeap () returned 0x510000
	[0140.672] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0140.672] GetProcessHeap () returned 0x510000
	[0140.672] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0140.672] GetProcessHeap () returned 0x510000
	[0140.672] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0140.672] GetProcessHeap () returned 0x510000
	[0140.672] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0140.672] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0140.672] GetProcessHeap () returned 0x510000
	[0140.672] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0140.672] GetProcessHeap () returned 0x510000
	[0140.672] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0140.672] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0140.673] GetProcessHeap () returned 0x510000
	[0140.673] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0140.673] GetProcessHeap () returned 0x510000
	[0140.673] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0140.673] GetProcessHeap () returned 0x510000
	[0140.673] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0140.673] GetProcessHeap () returned 0x510000
	[0140.673] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0140.673] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0140.673] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0140.673] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0140.673] GetProcessHeap () returned 0x510000
	[0140.673] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0140.673] GetProcessHeap () returned 0x510000
	[0140.673] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0140.673] ReleaseMutex (hMutex=0x170) returned 1
	[0140.673] CloseHandle (hObject=0x170) returned 1
	[0140.673] Sleep (dwMilliseconds=0x64) 
	[0140.802] GetProcessHeap () returned 0x510000
	[0140.802] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0140.802] GetProcessHeap () returned 0x510000
	[0140.802] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0140.802] GetProcessHeap () returned 0x510000
	[0140.802] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0140.802] GetProcessHeap () returned 0x510000
	[0140.802] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0140.802] GetProcessHeap () returned 0x510000
	[0140.802] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0140.802] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0140.803] GetProcessHeap () returned 0x510000
	[0140.803] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0140.803] GetProcessHeap () returned 0x510000
	[0140.803] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0140.803] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0140.803] GetProcessHeap () returned 0x510000
	[0140.803] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0140.803] GetProcessHeap () returned 0x510000
	[0140.803] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0140.803] GetProcessHeap () returned 0x510000
	[0140.803] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0140.803] GetProcessHeap () returned 0x510000
	[0140.803] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0140.803] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0140.803] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0140.803] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0140.803] GetProcessHeap () returned 0x510000
	[0140.803] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0140.803] GetProcessHeap () returned 0x510000
	[0140.803] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0140.803] ReleaseMutex (hMutex=0x170) returned 1
	[0140.803] CloseHandle (hObject=0x170) returned 1
	[0140.803] Sleep (dwMilliseconds=0x64) 
	[0140.953] GetProcessHeap () returned 0x510000
	[0140.953] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0140.953] GetProcessHeap () returned 0x510000
	[0140.953] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0140.953] GetProcessHeap () returned 0x510000
	[0140.953] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0140.953] GetProcessHeap () returned 0x510000
	[0140.953] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0140.953] GetProcessHeap () returned 0x510000
	[0140.953] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0140.953] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0140.953] GetProcessHeap () returned 0x510000
	[0140.953] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0140.953] GetProcessHeap () returned 0x510000
	[0140.953] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0140.953] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0140.954] GetProcessHeap () returned 0x510000
	[0140.954] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0140.954] GetProcessHeap () returned 0x510000
	[0140.954] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0140.954] GetProcessHeap () returned 0x510000
	[0140.954] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0140.954] GetProcessHeap () returned 0x510000
	[0140.954] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0140.954] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0140.954] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0140.954] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0140.954] GetProcessHeap () returned 0x510000
	[0140.954] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0140.954] GetProcessHeap () returned 0x510000
	[0140.954] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0140.954] ReleaseMutex (hMutex=0x170) returned 1
	[0140.954] CloseHandle (hObject=0x170) returned 1
	[0140.954] Sleep (dwMilliseconds=0x64) 
	[0141.187] GetProcessHeap () returned 0x510000
	[0141.187] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0141.187] GetProcessHeap () returned 0x510000
	[0141.187] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0141.187] GetProcessHeap () returned 0x510000
	[0141.187] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0141.187] GetProcessHeap () returned 0x510000
	[0141.187] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0141.187] GetProcessHeap () returned 0x510000
	[0141.187] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0141.187] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0141.187] GetProcessHeap () returned 0x510000
	[0141.187] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0141.187] GetProcessHeap () returned 0x510000
	[0141.187] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0141.187] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0141.188] GetProcessHeap () returned 0x510000
	[0141.188] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0141.188] GetProcessHeap () returned 0x510000
	[0141.188] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0141.188] GetProcessHeap () returned 0x510000
	[0141.188] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0141.188] GetProcessHeap () returned 0x510000
	[0141.188] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0141.188] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0141.188] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0141.188] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0141.188] GetProcessHeap () returned 0x510000
	[0141.188] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0141.188] GetProcessHeap () returned 0x510000
	[0141.188] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0141.188] ReleaseMutex (hMutex=0x170) returned 1
	[0141.188] CloseHandle (hObject=0x170) returned 1
	[0141.188] Sleep (dwMilliseconds=0x64) 
	[0141.374] GetProcessHeap () returned 0x510000
	[0141.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0141.374] GetProcessHeap () returned 0x510000
	[0141.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0141.374] GetProcessHeap () returned 0x510000
	[0141.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0141.374] GetProcessHeap () returned 0x510000
	[0141.374] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0141.374] GetProcessHeap () returned 0x510000
	[0141.374] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0141.374] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0141.374] GetProcessHeap () returned 0x510000
	[0141.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0141.375] GetProcessHeap () returned 0x510000
	[0141.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0141.375] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0141.375] GetProcessHeap () returned 0x510000
	[0141.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0141.375] GetProcessHeap () returned 0x510000
	[0141.375] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0141.375] GetProcessHeap () returned 0x510000
	[0141.375] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0141.375] GetProcessHeap () returned 0x510000
	[0141.375] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0141.375] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0141.375] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0141.375] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0141.375] GetProcessHeap () returned 0x510000
	[0141.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0141.375] GetProcessHeap () returned 0x510000
	[0141.375] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0141.376] ReleaseMutex (hMutex=0x170) returned 1
	[0141.376] CloseHandle (hObject=0x170) returned 1
	[0141.376] Sleep (dwMilliseconds=0x64) 
	[0141.588] GetProcessHeap () returned 0x510000
	[0141.588] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0141.588] GetProcessHeap () returned 0x510000
	[0141.588] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0141.588] GetProcessHeap () returned 0x510000
	[0141.588] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0141.588] GetProcessHeap () returned 0x510000
	[0141.588] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0141.588] GetProcessHeap () returned 0x510000
	[0141.588] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0141.588] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0141.588] GetProcessHeap () returned 0x510000
	[0141.588] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0141.588] GetProcessHeap () returned 0x510000
	[0141.588] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0141.588] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0141.588] GetProcessHeap () returned 0x510000
	[0141.588] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0141.588] GetProcessHeap () returned 0x510000
	[0141.589] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0141.589] GetProcessHeap () returned 0x510000
	[0141.589] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0141.589] GetProcessHeap () returned 0x510000
	[0141.589] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0141.589] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0141.589] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0141.589] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0141.589] GetProcessHeap () returned 0x510000
	[0141.589] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0141.589] GetProcessHeap () returned 0x510000
	[0141.589] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0141.589] ReleaseMutex (hMutex=0x170) returned 1
	[0141.589] CloseHandle (hObject=0x170) returned 1
	[0141.589] Sleep (dwMilliseconds=0x64) 
	[0141.809] GetProcessHeap () returned 0x510000
	[0141.809] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0141.809] GetProcessHeap () returned 0x510000
	[0141.809] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0141.809] GetProcessHeap () returned 0x510000
	[0141.809] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0141.809] GetProcessHeap () returned 0x510000
	[0141.809] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0141.809] GetProcessHeap () returned 0x510000
	[0141.809] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0141.809] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0141.809] GetProcessHeap () returned 0x510000
	[0141.809] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0141.809] GetProcessHeap () returned 0x510000
	[0141.809] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0141.809] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0141.809] GetProcessHeap () returned 0x510000
	[0141.809] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0141.810] GetProcessHeap () returned 0x510000
	[0141.810] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0141.810] GetProcessHeap () returned 0x510000
	[0141.810] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0141.810] GetProcessHeap () returned 0x510000
	[0141.810] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0141.810] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0141.810] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0141.810] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0141.810] GetProcessHeap () returned 0x510000
	[0141.810] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0141.810] GetProcessHeap () returned 0x510000
	[0141.810] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0141.810] ReleaseMutex (hMutex=0x170) returned 1
	[0141.810] CloseHandle (hObject=0x170) returned 1
	[0141.810] Sleep (dwMilliseconds=0x64) 
	[0142.030] GetProcessHeap () returned 0x510000
	[0142.030] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0142.030] GetProcessHeap () returned 0x510000
	[0142.030] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0142.030] GetProcessHeap () returned 0x510000
	[0142.030] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0142.030] GetProcessHeap () returned 0x510000
	[0142.030] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0142.030] GetProcessHeap () returned 0x510000
	[0142.030] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0142.030] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0142.030] GetProcessHeap () returned 0x510000
	[0142.030] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0142.030] GetProcessHeap () returned 0x510000
	[0142.030] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0142.031] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0142.031] GetProcessHeap () returned 0x510000
	[0142.031] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0142.031] GetProcessHeap () returned 0x510000
	[0142.031] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0142.031] GetProcessHeap () returned 0x510000
	[0142.031] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0142.031] GetProcessHeap () returned 0x510000
	[0142.031] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0142.031] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0142.031] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0142.031] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0142.031] GetProcessHeap () returned 0x510000
	[0142.031] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0142.031] GetProcessHeap () returned 0x510000
	[0142.031] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0142.031] ReleaseMutex (hMutex=0x170) returned 1
	[0142.031] CloseHandle (hObject=0x170) returned 1
	[0142.031] Sleep (dwMilliseconds=0x64) 
	[0142.224] GetProcessHeap () returned 0x510000
	[0142.224] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0142.224] GetProcessHeap () returned 0x510000
	[0142.224] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0142.224] GetProcessHeap () returned 0x510000
	[0142.224] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0142.224] GetProcessHeap () returned 0x510000
	[0142.224] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0142.224] GetProcessHeap () returned 0x510000
	[0142.224] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0142.224] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0142.224] GetProcessHeap () returned 0x510000
	[0142.224] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0142.224] GetProcessHeap () returned 0x510000
	[0142.224] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0142.224] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0142.225] GetProcessHeap () returned 0x510000
	[0142.225] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0142.225] GetProcessHeap () returned 0x510000
	[0142.225] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0142.225] GetProcessHeap () returned 0x510000
	[0142.225] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0142.225] GetProcessHeap () returned 0x510000
	[0142.225] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0142.225] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0142.225] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0142.225] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0142.225] GetProcessHeap () returned 0x510000
	[0142.225] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0142.225] GetProcessHeap () returned 0x510000
	[0142.225] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0142.225] ReleaseMutex (hMutex=0x170) returned 1
	[0142.225] CloseHandle (hObject=0x170) returned 1
	[0142.225] Sleep (dwMilliseconds=0x64) 
	[0142.405] GetProcessHeap () returned 0x510000
	[0142.405] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0142.405] GetProcessHeap () returned 0x510000
	[0142.405] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0142.405] GetProcessHeap () returned 0x510000
	[0142.406] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0142.406] GetProcessHeap () returned 0x510000
	[0142.406] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0142.406] GetProcessHeap () returned 0x510000
	[0142.406] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0142.406] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0142.406] GetProcessHeap () returned 0x510000
	[0142.406] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0142.406] GetProcessHeap () returned 0x510000
	[0142.406] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0142.406] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0142.406] GetProcessHeap () returned 0x510000
	[0142.406] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0142.406] GetProcessHeap () returned 0x510000
	[0142.406] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0142.406] GetProcessHeap () returned 0x510000
	[0142.406] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0142.406] GetProcessHeap () returned 0x510000
	[0142.406] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0142.406] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0142.406] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0142.407] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0142.407] GetProcessHeap () returned 0x510000
	[0142.407] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0142.407] GetProcessHeap () returned 0x510000
	[0142.407] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0142.407] ReleaseMutex (hMutex=0x170) returned 1
	[0142.407] CloseHandle (hObject=0x170) returned 1
	[0142.407] Sleep (dwMilliseconds=0x64) 
	[0142.560] GetProcessHeap () returned 0x510000
	[0142.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0142.560] GetProcessHeap () returned 0x510000
	[0142.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0142.560] GetProcessHeap () returned 0x510000
	[0142.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0142.560] GetProcessHeap () returned 0x510000
	[0142.560] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0142.560] GetProcessHeap () returned 0x510000
	[0142.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0142.560] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0142.560] GetProcessHeap () returned 0x510000
	[0142.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0142.560] GetProcessHeap () returned 0x510000
	[0142.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0142.560] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0142.560] GetProcessHeap () returned 0x510000
	[0142.560] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0142.560] GetProcessHeap () returned 0x510000
	[0142.561] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0142.561] GetProcessHeap () returned 0x510000
	[0142.561] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0142.561] GetProcessHeap () returned 0x510000
	[0142.561] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0142.561] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0142.561] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0142.561] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0142.561] GetProcessHeap () returned 0x510000
	[0142.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0142.561] GetProcessHeap () returned 0x510000
	[0142.561] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0142.561] ReleaseMutex (hMutex=0x170) returned 1
	[0142.561] CloseHandle (hObject=0x170) returned 1
	[0142.561] Sleep (dwMilliseconds=0x64) 
	[0143.652] GetProcessHeap () returned 0x510000
	[0143.652] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0143.653] GetProcessHeap () returned 0x510000
	[0143.653] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0143.653] GetProcessHeap () returned 0x510000
	[0143.653] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0143.653] GetProcessHeap () returned 0x510000
	[0143.653] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0143.653] GetProcessHeap () returned 0x510000
	[0143.653] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0143.653] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0143.653] GetProcessHeap () returned 0x510000
	[0143.653] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0143.653] GetProcessHeap () returned 0x510000
	[0143.653] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0143.653] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0143.653] GetProcessHeap () returned 0x510000
	[0143.653] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0143.653] GetProcessHeap () returned 0x510000
	[0143.653] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0143.653] GetProcessHeap () returned 0x510000
	[0143.653] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0143.653] GetProcessHeap () returned 0x510000
	[0143.653] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0143.653] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0143.654] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0143.654] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0143.654] GetProcessHeap () returned 0x510000
	[0143.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0143.654] GetProcessHeap () returned 0x510000
	[0143.654] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0143.654] ReleaseMutex (hMutex=0x170) returned 1
	[0143.654] CloseHandle (hObject=0x170) returned 1
	[0143.654] Sleep (dwMilliseconds=0x64) 
	[0143.908] GetProcessHeap () returned 0x510000
	[0143.908] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0143.908] GetProcessHeap () returned 0x510000
	[0143.908] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0143.908] GetProcessHeap () returned 0x510000
	[0143.908] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0143.908] GetProcessHeap () returned 0x510000
	[0143.908] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0143.908] GetProcessHeap () returned 0x510000
	[0143.908] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0143.908] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0143.908] GetProcessHeap () returned 0x510000
	[0143.908] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0143.908] GetProcessHeap () returned 0x510000
	[0143.908] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0143.909] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0143.909] GetProcessHeap () returned 0x510000
	[0143.909] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0143.909] GetProcessHeap () returned 0x510000
	[0143.909] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0143.909] GetProcessHeap () returned 0x510000
	[0143.909] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0143.909] GetProcessHeap () returned 0x510000
	[0143.909] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0143.909] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0143.909] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0143.909] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0143.909] GetProcessHeap () returned 0x510000
	[0143.909] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0143.909] GetProcessHeap () returned 0x510000
	[0143.909] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0143.909] ReleaseMutex (hMutex=0x170) returned 1
	[0143.909] CloseHandle (hObject=0x170) returned 1
	[0143.909] Sleep (dwMilliseconds=0x64) 
	[0144.135] GetProcessHeap () returned 0x510000
	[0144.135] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0144.135] GetProcessHeap () returned 0x510000
	[0144.135] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0144.135] GetProcessHeap () returned 0x510000
	[0144.135] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0144.135] GetProcessHeap () returned 0x510000
	[0144.135] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0144.135] GetProcessHeap () returned 0x510000
	[0144.136] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0144.136] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0144.136] GetProcessHeap () returned 0x510000
	[0144.136] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0144.136] GetProcessHeap () returned 0x510000
	[0144.136] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0144.136] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0144.136] GetProcessHeap () returned 0x510000
	[0144.136] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0144.136] GetProcessHeap () returned 0x510000
	[0144.136] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0144.136] GetProcessHeap () returned 0x510000
	[0144.136] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0144.136] GetProcessHeap () returned 0x510000
	[0144.136] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0144.136] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0144.136] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0144.136] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0144.136] GetProcessHeap () returned 0x510000
	[0144.136] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0144.136] GetProcessHeap () returned 0x510000
	[0144.136] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0144.136] ReleaseMutex (hMutex=0x170) returned 1
	[0144.136] CloseHandle (hObject=0x170) returned 1
	[0144.136] Sleep (dwMilliseconds=0x64) 
	[0144.354] GetProcessHeap () returned 0x510000
	[0144.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0144.354] GetProcessHeap () returned 0x510000
	[0144.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0144.354] GetProcessHeap () returned 0x510000
	[0144.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0144.354] GetProcessHeap () returned 0x510000
	[0144.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0144.354] GetProcessHeap () returned 0x510000
	[0144.354] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0144.354] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0144.354] GetProcessHeap () returned 0x510000
	[0144.354] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0144.354] GetProcessHeap () returned 0x510000
	[0144.354] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0144.354] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0144.354] GetProcessHeap () returned 0x510000
	[0144.354] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0144.354] GetProcessHeap () returned 0x510000
	[0144.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0144.354] GetProcessHeap () returned 0x510000
	[0144.354] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0144.354] GetProcessHeap () returned 0x510000
	[0144.354] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0144.354] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0144.355] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0144.355] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0144.355] GetProcessHeap () returned 0x510000
	[0144.355] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0144.355] GetProcessHeap () returned 0x510000
	[0144.355] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0144.355] ReleaseMutex (hMutex=0x170) returned 1
	[0144.355] CloseHandle (hObject=0x170) returned 1
	[0144.355] Sleep (dwMilliseconds=0x64) 
	[0144.588] GetProcessHeap () returned 0x510000
	[0144.588] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0144.588] GetProcessHeap () returned 0x510000
	[0144.588] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0144.588] GetProcessHeap () returned 0x510000
	[0144.588] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0144.588] GetProcessHeap () returned 0x510000
	[0144.588] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0144.588] GetProcessHeap () returned 0x510000
	[0144.588] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0144.588] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0144.588] GetProcessHeap () returned 0x510000
	[0144.588] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0144.588] GetProcessHeap () returned 0x510000
	[0144.588] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0144.588] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0144.589] GetProcessHeap () returned 0x510000
	[0144.589] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0144.589] GetProcessHeap () returned 0x510000
	[0144.589] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0144.589] GetProcessHeap () returned 0x510000
	[0144.589] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0144.589] GetProcessHeap () returned 0x510000
	[0144.589] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0144.589] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0144.589] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0144.589] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0144.589] GetProcessHeap () returned 0x510000
	[0144.589] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0144.589] GetProcessHeap () returned 0x510000
	[0144.589] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0144.589] ReleaseMutex (hMutex=0x170) returned 1
	[0144.589] CloseHandle (hObject=0x170) returned 1
	[0144.589] Sleep (dwMilliseconds=0x64) 
	[0144.807] GetProcessHeap () returned 0x510000
	[0144.807] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0144.807] GetProcessHeap () returned 0x510000
	[0144.807] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0144.807] GetProcessHeap () returned 0x510000
	[0144.807] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0144.807] GetProcessHeap () returned 0x510000
	[0144.807] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0144.807] GetProcessHeap () returned 0x510000
	[0144.807] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0144.807] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0144.807] GetProcessHeap () returned 0x510000
	[0144.807] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0144.807] GetProcessHeap () returned 0x510000
	[0144.807] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0144.807] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0144.807] GetProcessHeap () returned 0x510000
	[0144.807] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0144.808] GetProcessHeap () returned 0x510000
	[0144.808] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0144.808] GetProcessHeap () returned 0x510000
	[0144.808] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0144.808] GetProcessHeap () returned 0x510000
	[0144.808] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0144.808] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0144.808] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0144.808] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0144.808] GetProcessHeap () returned 0x510000
	[0144.808] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0144.808] GetProcessHeap () returned 0x510000
	[0144.808] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0144.808] ReleaseMutex (hMutex=0x170) returned 1
	[0144.808] CloseHandle (hObject=0x170) returned 1
	[0144.808] Sleep (dwMilliseconds=0x64) 
	[0145.040] GetProcessHeap () returned 0x510000
	[0145.040] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0145.040] GetProcessHeap () returned 0x510000
	[0145.040] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0145.040] GetProcessHeap () returned 0x510000
	[0145.040] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0145.040] GetProcessHeap () returned 0x510000
	[0145.040] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0145.040] GetProcessHeap () returned 0x510000
	[0145.040] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0145.040] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0145.040] GetProcessHeap () returned 0x510000
	[0145.040] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0145.040] GetProcessHeap () returned 0x510000
	[0145.040] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0145.041] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0145.041] GetProcessHeap () returned 0x510000
	[0145.041] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0145.041] GetProcessHeap () returned 0x510000
	[0145.041] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0145.041] GetProcessHeap () returned 0x510000
	[0145.041] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0145.041] GetProcessHeap () returned 0x510000
	[0145.041] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0145.041] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0145.041] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0145.041] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0145.041] GetProcessHeap () returned 0x510000
	[0145.041] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0145.041] GetProcessHeap () returned 0x510000
	[0145.041] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0145.041] ReleaseMutex (hMutex=0x170) returned 1
	[0145.041] CloseHandle (hObject=0x170) returned 1
	[0145.041] Sleep (dwMilliseconds=0x64) 
	[0145.236] GetProcessHeap () returned 0x510000
	[0145.236] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0145.236] GetProcessHeap () returned 0x510000
	[0145.236] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0145.236] GetProcessHeap () returned 0x510000
	[0145.236] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0145.236] GetProcessHeap () returned 0x510000
	[0145.236] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0145.236] GetProcessHeap () returned 0x510000
	[0145.236] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0145.236] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0145.237] GetProcessHeap () returned 0x510000
	[0145.237] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0145.237] GetProcessHeap () returned 0x510000
	[0145.237] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0145.237] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0145.237] GetProcessHeap () returned 0x510000
	[0145.237] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0145.237] GetProcessHeap () returned 0x510000
	[0145.237] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0145.237] GetProcessHeap () returned 0x510000
	[0145.237] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0145.237] GetProcessHeap () returned 0x510000
	[0145.237] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0145.237] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0145.237] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0145.237] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0145.237] GetProcessHeap () returned 0x510000
	[0145.237] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0145.237] GetProcessHeap () returned 0x510000
	[0145.237] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0145.237] ReleaseMutex (hMutex=0x170) returned 1
	[0145.237] CloseHandle (hObject=0x170) returned 1
	[0145.237] Sleep (dwMilliseconds=0x64) 
	[0145.462] GetProcessHeap () returned 0x510000
	[0145.462] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0145.462] GetProcessHeap () returned 0x510000
	[0145.462] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0145.462] GetProcessHeap () returned 0x510000
	[0145.462] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0145.462] GetProcessHeap () returned 0x510000
	[0145.462] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0145.462] GetProcessHeap () returned 0x510000
	[0145.462] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0145.462] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0145.462] GetProcessHeap () returned 0x510000
	[0145.462] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0145.462] GetProcessHeap () returned 0x510000
	[0145.462] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0145.462] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0145.463] GetProcessHeap () returned 0x510000
	[0145.463] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0145.463] GetProcessHeap () returned 0x510000
	[0145.463] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0145.463] GetProcessHeap () returned 0x510000
	[0145.463] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0145.463] GetProcessHeap () returned 0x510000
	[0145.463] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0145.463] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0145.463] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0145.463] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0145.463] GetProcessHeap () returned 0x510000
	[0145.463] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0145.463] GetProcessHeap () returned 0x510000
	[0145.463] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0145.463] ReleaseMutex (hMutex=0x170) returned 1
	[0145.463] CloseHandle (hObject=0x170) returned 1
	[0145.463] Sleep (dwMilliseconds=0x64) 
	[0145.626] GetProcessHeap () returned 0x510000
	[0145.626] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0145.626] GetProcessHeap () returned 0x510000
	[0145.626] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0145.626] GetProcessHeap () returned 0x510000
	[0145.626] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0145.626] GetProcessHeap () returned 0x510000
	[0145.626] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0145.626] GetProcessHeap () returned 0x510000
	[0145.626] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0145.627] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0145.627] GetProcessHeap () returned 0x510000
	[0145.627] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0145.627] GetProcessHeap () returned 0x510000
	[0145.627] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0145.627] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0145.627] GetProcessHeap () returned 0x510000
	[0145.627] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0145.627] GetProcessHeap () returned 0x510000
	[0145.627] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0145.627] GetProcessHeap () returned 0x510000
	[0145.627] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0145.627] GetProcessHeap () returned 0x510000
	[0145.627] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0145.627] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0145.627] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0145.627] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0145.627] GetProcessHeap () returned 0x510000
	[0145.627] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0145.627] GetProcessHeap () returned 0x510000
	[0145.627] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0145.627] ReleaseMutex (hMutex=0x170) returned 1
	[0145.627] CloseHandle (hObject=0x170) returned 1
	[0145.627] Sleep (dwMilliseconds=0x64) 
	[0145.822] GetProcessHeap () returned 0x510000
	[0145.822] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0145.822] GetProcessHeap () returned 0x510000
	[0145.822] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0145.822] GetProcessHeap () returned 0x510000
	[0145.823] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0145.823] GetProcessHeap () returned 0x510000
	[0145.823] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0145.823] GetProcessHeap () returned 0x510000
	[0145.823] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0145.823] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0145.823] GetProcessHeap () returned 0x510000
	[0145.823] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0145.823] GetProcessHeap () returned 0x510000
	[0145.823] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0145.823] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0145.823] GetProcessHeap () returned 0x510000
	[0145.823] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0145.823] GetProcessHeap () returned 0x510000
	[0145.823] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0145.823] GetProcessHeap () returned 0x510000
	[0145.823] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0145.823] GetProcessHeap () returned 0x510000
	[0145.823] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0145.823] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0145.823] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0145.823] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0145.823] GetProcessHeap () returned 0x510000
	[0145.823] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0145.823] GetProcessHeap () returned 0x510000
	[0145.823] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0145.823] ReleaseMutex (hMutex=0x170) returned 1
	[0145.824] CloseHandle (hObject=0x170) returned 1
	[0145.824] Sleep (dwMilliseconds=0x64) 
	[0146.055] GetProcessHeap () returned 0x510000
	[0146.055] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0146.055] GetProcessHeap () returned 0x510000
	[0146.055] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0146.055] GetProcessHeap () returned 0x510000
	[0146.055] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0146.055] GetProcessHeap () returned 0x510000
	[0146.055] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0146.055] GetProcessHeap () returned 0x510000
	[0146.055] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0146.055] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0146.055] GetProcessHeap () returned 0x510000
	[0146.055] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0146.055] GetProcessHeap () returned 0x510000
	[0146.055] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0146.055] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0146.056] GetProcessHeap () returned 0x510000
	[0146.056] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0146.056] GetProcessHeap () returned 0x510000
	[0146.056] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0146.056] GetProcessHeap () returned 0x510000
	[0146.056] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0146.056] GetProcessHeap () returned 0x510000
	[0146.056] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0146.056] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0146.056] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0146.056] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0146.056] GetProcessHeap () returned 0x510000
	[0146.056] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0146.056] GetProcessHeap () returned 0x510000
	[0146.056] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0146.056] ReleaseMutex (hMutex=0x170) returned 1
	[0146.056] CloseHandle (hObject=0x170) returned 1
	[0146.056] Sleep (dwMilliseconds=0x64) 
	[0146.296] GetProcessHeap () returned 0x510000
	[0146.296] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0146.296] GetProcessHeap () returned 0x510000
	[0146.296] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0146.296] GetProcessHeap () returned 0x510000
	[0146.296] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0146.296] GetProcessHeap () returned 0x510000
	[0146.296] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0146.296] GetProcessHeap () returned 0x510000
	[0146.296] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0146.296] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0146.296] GetProcessHeap () returned 0x510000
	[0146.296] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0146.296] GetProcessHeap () returned 0x510000
	[0146.296] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0146.296] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0146.297] GetProcessHeap () returned 0x510000
	[0146.297] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0146.297] GetProcessHeap () returned 0x510000
	[0146.297] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0146.297] GetProcessHeap () returned 0x510000
	[0146.297] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0146.297] GetProcessHeap () returned 0x510000
	[0146.297] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0146.297] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0146.297] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0146.297] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0146.297] GetProcessHeap () returned 0x510000
	[0146.297] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0146.297] GetProcessHeap () returned 0x510000
	[0146.297] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0146.297] ReleaseMutex (hMutex=0x170) returned 1
	[0146.297] CloseHandle (hObject=0x170) returned 1
	[0146.297] Sleep (dwMilliseconds=0x64) 
	[0146.543] GetProcessHeap () returned 0x510000
	[0146.544] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0146.544] GetProcessHeap () returned 0x510000
	[0146.544] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0146.544] GetProcessHeap () returned 0x510000
	[0146.544] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0146.544] GetProcessHeap () returned 0x510000
	[0146.544] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0146.544] GetProcessHeap () returned 0x510000
	[0146.544] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0146.544] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0146.544] GetProcessHeap () returned 0x510000
	[0146.544] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0146.544] GetProcessHeap () returned 0x510000
	[0146.544] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0146.544] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0146.544] GetProcessHeap () returned 0x510000
	[0146.544] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0146.544] GetProcessHeap () returned 0x510000
	[0146.544] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0146.544] GetProcessHeap () returned 0x510000
	[0146.544] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0146.544] GetProcessHeap () returned 0x510000
	[0146.544] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0146.544] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0146.545] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0146.545] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0146.545] GetProcessHeap () returned 0x510000
	[0146.545] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0146.545] GetProcessHeap () returned 0x510000
	[0146.545] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0146.545] ReleaseMutex (hMutex=0x170) returned 1
	[0146.545] CloseHandle (hObject=0x170) returned 1
	[0146.545] Sleep (dwMilliseconds=0x64) 
	[0146.788] GetProcessHeap () returned 0x510000
	[0146.788] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0146.788] GetProcessHeap () returned 0x510000
	[0146.788] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0146.788] GetProcessHeap () returned 0x510000
	[0146.788] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0146.788] GetProcessHeap () returned 0x510000
	[0146.789] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0146.789] GetProcessHeap () returned 0x510000
	[0146.789] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0146.789] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0146.789] GetProcessHeap () returned 0x510000
	[0146.789] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0146.789] GetProcessHeap () returned 0x510000
	[0146.789] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0146.789] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0146.789] GetProcessHeap () returned 0x510000
	[0146.789] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0146.789] GetProcessHeap () returned 0x510000
	[0146.789] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0146.789] GetProcessHeap () returned 0x510000
	[0146.789] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0146.789] GetProcessHeap () returned 0x510000
	[0146.789] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0146.789] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0146.790] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0146.790] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0146.790] GetProcessHeap () returned 0x510000
	[0146.790] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0146.790] GetProcessHeap () returned 0x510000
	[0146.790] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0146.790] ReleaseMutex (hMutex=0x170) returned 1
	[0146.790] CloseHandle (hObject=0x170) returned 1
	[0146.790] Sleep (dwMilliseconds=0x64) 
	[0146.990] GetProcessHeap () returned 0x510000
	[0146.990] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0146.990] GetProcessHeap () returned 0x510000
	[0146.990] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0146.990] GetProcessHeap () returned 0x510000
	[0146.990] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0146.990] GetProcessHeap () returned 0x510000
	[0146.990] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0146.990] GetProcessHeap () returned 0x510000
	[0146.990] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0146.990] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0146.990] GetProcessHeap () returned 0x510000
	[0146.990] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0146.990] GetProcessHeap () returned 0x510000
	[0146.990] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0146.990] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0146.991] GetProcessHeap () returned 0x510000
	[0146.991] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0146.991] GetProcessHeap () returned 0x510000
	[0146.991] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0146.991] GetProcessHeap () returned 0x510000
	[0146.991] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0146.991] GetProcessHeap () returned 0x510000
	[0146.991] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0146.991] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0146.991] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0146.991] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0146.991] GetProcessHeap () returned 0x510000
	[0146.991] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0146.991] GetProcessHeap () returned 0x510000
	[0146.991] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0146.991] ReleaseMutex (hMutex=0x170) returned 1
	[0146.991] CloseHandle (hObject=0x170) returned 1
	[0146.991] Sleep (dwMilliseconds=0x64) 
	[0147.226] GetProcessHeap () returned 0x510000
	[0147.226] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0147.226] GetProcessHeap () returned 0x510000
	[0147.226] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0147.226] GetProcessHeap () returned 0x510000
	[0147.226] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0147.226] GetProcessHeap () returned 0x510000
	[0147.226] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0147.226] GetProcessHeap () returned 0x510000
	[0147.226] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0147.226] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0147.226] GetProcessHeap () returned 0x510000
	[0147.226] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0147.226] GetProcessHeap () returned 0x510000
	[0147.226] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0147.227] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0147.227] GetProcessHeap () returned 0x510000
	[0147.227] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0147.227] GetProcessHeap () returned 0x510000
	[0147.227] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0147.227] GetProcessHeap () returned 0x510000
	[0147.227] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0147.227] GetProcessHeap () returned 0x510000
	[0147.227] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0147.227] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0147.227] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0147.227] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0147.227] GetProcessHeap () returned 0x510000
	[0147.227] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0147.227] GetProcessHeap () returned 0x510000
	[0147.227] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0147.227] ReleaseMutex (hMutex=0x170) returned 1
	[0147.227] CloseHandle (hObject=0x170) returned 1
	[0147.227] Sleep (dwMilliseconds=0x64) 
	[0147.476] GetProcessHeap () returned 0x510000
	[0147.476] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0147.476] GetProcessHeap () returned 0x510000
	[0147.477] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0147.477] GetProcessHeap () returned 0x510000
	[0147.477] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0147.477] GetProcessHeap () returned 0x510000
	[0147.477] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0147.477] GetProcessHeap () returned 0x510000
	[0147.477] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0147.477] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0147.477] GetProcessHeap () returned 0x510000
	[0147.477] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0147.477] GetProcessHeap () returned 0x510000
	[0147.477] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0147.477] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0147.478] GetProcessHeap () returned 0x510000
	[0147.478] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0147.478] GetProcessHeap () returned 0x510000
	[0147.478] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0147.478] GetProcessHeap () returned 0x510000
	[0147.478] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0147.478] GetProcessHeap () returned 0x510000
	[0147.478] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0147.478] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0147.478] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0147.478] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0147.478] GetProcessHeap () returned 0x510000
	[0147.478] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0147.478] GetProcessHeap () returned 0x510000
	[0147.479] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0147.479] ReleaseMutex (hMutex=0x170) returned 1
	[0147.479] CloseHandle (hObject=0x170) returned 1
	[0147.479] Sleep (dwMilliseconds=0x64) 
	[0147.677] GetProcessHeap () returned 0x510000
	[0147.677] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0147.677] GetProcessHeap () returned 0x510000
	[0147.677] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0147.677] GetProcessHeap () returned 0x510000
	[0147.677] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0147.677] GetProcessHeap () returned 0x510000
	[0147.677] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0147.677] GetProcessHeap () returned 0x510000
	[0147.677] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0147.677] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0147.677] GetProcessHeap () returned 0x510000
	[0147.677] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0147.677] GetProcessHeap () returned 0x510000
	[0147.677] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0147.677] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0147.677] GetProcessHeap () returned 0x510000
	[0147.677] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0147.677] GetProcessHeap () returned 0x510000
	[0147.677] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0147.677] GetProcessHeap () returned 0x510000
	[0147.677] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0147.677] GetProcessHeap () returned 0x510000
	[0147.677] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0147.678] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0147.678] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0147.678] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0147.678] GetProcessHeap () returned 0x510000
	[0147.678] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0147.678] GetProcessHeap () returned 0x510000
	[0147.678] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0147.678] ReleaseMutex (hMutex=0x170) returned 1
	[0147.678] CloseHandle (hObject=0x170) returned 1
	[0147.678] Sleep (dwMilliseconds=0x64) 
	[0147.932] GetProcessHeap () returned 0x510000
	[0147.932] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0147.932] GetProcessHeap () returned 0x510000
	[0147.932] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0147.932] GetProcessHeap () returned 0x510000
	[0147.932] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0147.932] GetProcessHeap () returned 0x510000
	[0147.932] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0147.932] GetProcessHeap () returned 0x510000
	[0147.932] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0147.932] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0147.932] GetProcessHeap () returned 0x510000
	[0147.932] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0147.932] GetProcessHeap () returned 0x510000
	[0147.932] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0147.932] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0147.933] GetProcessHeap () returned 0x510000
	[0147.933] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0147.933] GetProcessHeap () returned 0x510000
	[0147.933] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0147.933] GetProcessHeap () returned 0x510000
	[0147.933] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0147.933] GetProcessHeap () returned 0x510000
	[0147.933] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0147.933] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0147.933] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0147.933] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0147.933] GetProcessHeap () returned 0x510000
	[0147.933] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0147.933] GetProcessHeap () returned 0x510000
	[0147.933] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0147.933] ReleaseMutex (hMutex=0x170) returned 1
	[0147.933] CloseHandle (hObject=0x170) returned 1
	[0147.933] Sleep (dwMilliseconds=0x64) 
	[0148.179] GetProcessHeap () returned 0x510000
	[0148.179] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0148.179] GetProcessHeap () returned 0x510000
	[0148.179] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0148.179] GetProcessHeap () returned 0x510000
	[0148.179] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0148.179] GetProcessHeap () returned 0x510000
	[0148.179] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0148.179] GetProcessHeap () returned 0x510000
	[0148.179] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0148.179] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0148.179] GetProcessHeap () returned 0x510000
	[0148.179] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0148.179] GetProcessHeap () returned 0x510000
	[0148.179] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0148.179] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0148.180] GetProcessHeap () returned 0x510000
	[0148.180] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0148.180] GetProcessHeap () returned 0x510000
	[0148.180] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0148.180] GetProcessHeap () returned 0x510000
	[0148.180] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0148.180] GetProcessHeap () returned 0x510000
	[0148.180] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0148.180] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0148.180] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0148.180] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0148.180] GetProcessHeap () returned 0x510000
	[0148.180] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0148.180] GetProcessHeap () returned 0x510000
	[0148.180] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0148.180] ReleaseMutex (hMutex=0x170) returned 1
	[0148.180] CloseHandle (hObject=0x170) returned 1
	[0148.180] Sleep (dwMilliseconds=0x64) 
	[0148.411] GetProcessHeap () returned 0x510000
	[0148.411] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0148.411] GetProcessHeap () returned 0x510000
	[0148.411] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0148.411] GetProcessHeap () returned 0x510000
	[0148.411] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0148.411] GetProcessHeap () returned 0x510000
	[0148.411] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0148.411] GetProcessHeap () returned 0x510000
	[0148.411] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0148.411] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0148.411] GetProcessHeap () returned 0x510000
	[0148.411] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0148.411] GetProcessHeap () returned 0x510000
	[0148.411] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0148.411] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0148.411] GetProcessHeap () returned 0x510000
	[0148.411] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0148.411] GetProcessHeap () returned 0x510000
	[0148.411] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0148.411] GetProcessHeap () returned 0x510000
	[0148.411] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0148.411] GetProcessHeap () returned 0x510000
	[0148.411] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0148.411] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0148.411] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0148.412] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0148.412] GetProcessHeap () returned 0x510000
	[0148.412] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0148.412] GetProcessHeap () returned 0x510000
	[0148.412] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0148.412] ReleaseMutex (hMutex=0x170) returned 1
	[0148.412] CloseHandle (hObject=0x170) returned 1
	[0148.412] Sleep (dwMilliseconds=0x64) 
	[0148.630] GetProcessHeap () returned 0x510000
	[0148.630] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0148.631] GetProcessHeap () returned 0x510000
	[0148.631] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0148.631] GetProcessHeap () returned 0x510000
	[0148.631] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0148.631] GetProcessHeap () returned 0x510000
	[0148.631] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0148.631] GetProcessHeap () returned 0x510000
	[0148.631] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0148.631] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0148.631] GetProcessHeap () returned 0x510000
	[0148.631] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0148.631] GetProcessHeap () returned 0x510000
	[0148.631] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0148.631] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0148.631] GetProcessHeap () returned 0x510000
	[0148.631] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0148.631] GetProcessHeap () returned 0x510000
	[0148.631] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0148.631] GetProcessHeap () returned 0x510000
	[0148.631] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0148.631] GetProcessHeap () returned 0x510000
	[0148.631] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0148.631] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0148.632] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0148.632] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0148.632] GetProcessHeap () returned 0x510000
	[0148.632] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0148.632] GetProcessHeap () returned 0x510000
	[0148.632] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0148.632] ReleaseMutex (hMutex=0x170) returned 1
	[0148.632] CloseHandle (hObject=0x170) returned 1
	[0148.632] Sleep (dwMilliseconds=0x64) 
	[0148.848] GetProcessHeap () returned 0x510000
	[0148.848] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0148.848] GetProcessHeap () returned 0x510000
	[0148.848] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0148.848] GetProcessHeap () returned 0x510000
	[0148.848] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0148.848] GetProcessHeap () returned 0x510000
	[0148.848] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0148.848] GetProcessHeap () returned 0x510000
	[0148.848] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0148.848] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0148.848] GetProcessHeap () returned 0x510000
	[0148.848] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0148.848] GetProcessHeap () returned 0x510000
	[0148.848] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0148.848] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0148.849] GetProcessHeap () returned 0x510000
	[0148.849] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0148.849] GetProcessHeap () returned 0x510000
	[0148.849] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0148.849] GetProcessHeap () returned 0x510000
	[0148.849] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0148.849] GetProcessHeap () returned 0x510000
	[0148.849] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0148.849] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0148.849] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0148.849] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0148.849] GetProcessHeap () returned 0x510000
	[0148.849] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0148.849] GetProcessHeap () returned 0x510000
	[0148.849] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0148.849] ReleaseMutex (hMutex=0x170) returned 1
	[0148.849] CloseHandle (hObject=0x170) returned 1
	[0148.849] Sleep (dwMilliseconds=0x64) 
	[0149.080] GetProcessHeap () returned 0x510000
	[0149.080] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddd0
	[0149.081] GetProcessHeap () returned 0x510000
	[0149.081] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddf8
	[0149.081] GetProcessHeap () returned 0x510000
	[0149.081] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0149.081] GetProcessHeap () returned 0x510000
	[0149.081] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0149.081] GetProcessHeap () returned 0x510000
	[0149.081] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0149.081] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddf8, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0149.081] GetProcessHeap () returned 0x510000
	[0149.081] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0149.081] GetProcessHeap () returned 0x510000
	[0149.081] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0149.081] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0149.081] GetProcessHeap () returned 0x510000
	[0149.081] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0149.081] GetProcessHeap () returned 0x510000
	[0149.081] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0149.081] GetProcessHeap () returned 0x510000
	[0149.081] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0149.081] GetProcessHeap () returned 0x510000
	[0149.081] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0149.082] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0149.082] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0149.082] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0149.082] GetProcessHeap () returned 0x510000
	[0149.082] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0149.082] GetProcessHeap () returned 0x510000
	[0149.082] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0149.082] ReleaseMutex (hMutex=0x170) returned 1
	[0149.082] CloseHandle (hObject=0x170) returned 1
	[0149.082] Sleep (dwMilliseconds=0x64) 
	[0149.293] GetProcessHeap () returned 0x510000
	[0149.293] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x53ddf8
	[0149.293] GetProcessHeap () returned 0x510000
	[0149.293] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x53ddd0
	[0149.293] GetProcessHeap () returned 0x510000
	[0149.293] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x53de20
	[0149.293] GetProcessHeap () returned 0x510000
	[0149.293] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x549048
	[0149.293] GetProcessHeap () returned 0x510000
	[0149.293] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549048 | out: hHeap=0x510000) returned 1
	[0149.293] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x53ddd0, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0149.293] GetProcessHeap () returned 0x510000
	[0149.293] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53de20 | out: hHeap=0x510000) returned 1
	[0149.293] GetProcessHeap () returned 0x510000
	[0149.293] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddf8 | out: hHeap=0x510000) returned 1
	[0149.293] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19f64c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19f64c*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0149.294] GetProcessHeap () returned 0x510000
	[0149.294] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x53ddd0 | out: hHeap=0x510000) returned 1
	[0149.294] GetProcessHeap () returned 0x510000
	[0149.294] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x52d8f8
	[0149.294] GetProcessHeap () returned 0x510000
	[0149.294] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3a) returned 0x52d940
	[0149.294] GetProcessHeap () returned 0x510000
	[0149.294] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d940, Size=0x72) returned 0x51fb58
	[0149.294] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x0
	[0149.294] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<<BID>>9C354B4200000001") returned 0x170
	[0149.294] WaitForSingleObject (hHandle=0x170, dwMilliseconds=0x0) returned 0x0
	[0149.294] GetProcessHeap () returned 0x510000
	[0149.294] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d8f8 | out: hHeap=0x510000) returned 1
	[0149.294] GetProcessHeap () returned 0x510000
	[0149.294] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51fb58 | out: hHeap=0x510000) returned 1
	[0149.294] ReleaseMutex (hMutex=0x170) returned 1
	[0149.294] CloseHandle (hObject=0x170) returned 1
	[0149.294] Sleep (dwMilliseconds=0x64) 
	[0149.440] SetEvent (hEvent=0xb4) returned 1
	[0149.440] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0
	[0241.041] GetExitCodeThread (in: hThread=0xb8, lpExitCode=0x19f6dc | out: lpExitCode=0x19f6dc) returned 1
	[0241.041] CloseHandle (hObject=0xb4) returned 1
	[0241.041] CloseHandle (hObject=0xb8) returned 1
	[0241.041] GetProcessHeap () returned 0x510000
	[0241.041] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x523ee0 | out: hHeap=0x510000) returned 1
	[0241.041] GetProcessHeap () returned 0x510000
	[0241.041] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cbe8 | out: hHeap=0x510000) returned 1
	[0241.041] GetProcessHeap () returned 0x510000
	[0241.041] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x521518 | out: hHeap=0x510000) returned 1
	[0241.041] GetProcessHeap () returned 0x510000
	[0241.041] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5286e0 | out: hHeap=0x510000) returned 1
	[0241.041] GetProcessHeap () returned 0x510000
	[0241.041] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x525188 | out: hHeap=0x510000) returned 1
	[0241.041] GetProcessHeap () returned 0x510000
	[0241.041] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x521768 | out: hHeap=0x510000) returned 1
	[0241.041] ExitProcess (uExitCode=0x0) 

Thread:
	id = 60
	os_tid = 0x770

	[0137.552] GetProcessHeap () returned 0x510000
	[0137.552] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x52cc60
	[0137.552] GetProcessHeap () returned 0x510000
	[0137.552] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x52cc38
	[0137.552] GetProcessHeap () returned 0x510000
	[0137.552] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1e) returned 0x52cc88
	[0137.552] GetProcessHeap () returned 0x510000
	[0137.552] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x52ccb0
	[0137.552] GetProcessHeap () returned 0x510000
	[0137.553] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x52e600
	[0137.553] GetProcessHeap () returned 0x510000
	[0137.553] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e600 | out: hHeap=0x510000) returned 1
	[0137.553] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x52cc88, nSize=0xf | out: lpDst="C:\\") returned 0x4
	[0137.553] GetProcessHeap () returned 0x510000
	[0137.553] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ccb0 | out: hHeap=0x510000) returned 1
	[0137.553] GetProcessHeap () returned 0x510000
	[0137.553] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc38 | out: hHeap=0x510000) returned 1
	[0137.553] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x235f8a4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x235f8a4*=0x9c354b42, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0137.553] GetProcessHeap () returned 0x510000
	[0137.553] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc88 | out: hHeap=0x510000) returned 1
	[0137.553] GetProcessHeap () returned 0x510000
	[0137.553] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x80) returned 0x52e600
	[0137.553] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20119, phkResult=0x235f88c | out: phkResult=0x235f88c*=0xbc) returned 0x0
	[0137.553] RegQueryValueExW (in: hKey=0xbc, lpValueName="CurrentBuild", lpReserved=0x0, lpType=0x235f888, lpData=0x235f918, lpcbData=0x235f890*=0x22 | out: lpType=0x235f888*=0x1, lpData="7601", lpcbData=0x235f890*=0xa) returned 0x0
	[0137.553] RegCloseKey (hKey=0xbc) returned 0x0
	[0137.553] GetProcessHeap () returned 0x510000
	[0137.553] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e600 | out: hHeap=0x510000) returned 1
	[0137.553] GetProcessHeap () returned 0x510000
	[0137.553] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x52cc88
	[0137.553] GetProcessHeap () returned 0x510000
	[0137.553] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x10) returned 0x521548
	[0137.553] GetProcessHeap () returned 0x510000
	[0137.553] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10) returned 0x521560
	[0137.553] GetProcessHeap () returned 0x510000
	[0137.553] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x52e600
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e600 | out: hHeap=0x510000) returned 1
	[0137.554] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\", lpDst=0x521548, nSize=0x8 | out: lpDst="") returned 0x26
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x521560 | out: hHeap=0x510000) returned 1
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x521548, Size=0x1e) returned 0x52cc38
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1e) returned 0x52ccb0
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x52e600
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e600 | out: hHeap=0x510000) returned 1
	[0137.554] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\", lpDst=0x52cc38, nSize=0xf | out: lpDst="") returned 0x26
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52ccb0 | out: hHeap=0x510000) returned 1
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52cc38, Size=0x3a) returned 0x52d3e8
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x3a) returned 0x52d430
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x52e600
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e600 | out: hHeap=0x510000) returned 1
	[0137.554] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\", lpDst=0x52d3e8, nSize=0x1d | out: lpDst="") returned 0x26
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52d430 | out: hHeap=0x510000) returned 1
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52d3e8, Size=0x72) returned 0x51f658
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x72) returned 0x51f6d8
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x52e600
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e600 | out: hHeap=0x510000) returned 1
	[0137.554] ExpandEnvironmentStringsW (in: lpSrc="%temp%\\", lpDst=0x51f658, nSize=0x39 | out: lpDst="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\") returned 0x26
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51f6d8 | out: hHeap=0x510000) returned 1
	[0137.554] GetProcessHeap () returned 0x510000
	[0137.554] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc88 | out: hHeap=0x510000) returned 1
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10) returned 0x521548
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20) returned 0x52cc88
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52e600
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x2c) returned 0x52e638
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x2c) returned 0x52e670
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x52e6a8
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e6a8 | out: hHeap=0x510000) returned 1
	[0137.555] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\explorer.exe", lpDst=0x52e638, nSize=0x16 | out: lpDst="C:\\Windows\\explorer.e") returned 0x18
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e670 | out: hHeap=0x510000) returned 1
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52e638, Size=0x56) returned 0x52e638
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x56) returned 0x52e698
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x52e6f8
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e6f8 | out: hHeap=0x510000) returned 1
	[0137.555] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\explorer.exe", lpDst=0x52e638, nSize=0x2b | out: lpDst="C:\\Windows\\explorer.exe") returned 0x18
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e698 | out: hHeap=0x510000) returned 1
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e600 | out: hHeap=0x510000) returned 1
	[0137.555] GetProcessHeap () returned 0x510000
	[0137.555] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x209) returned 0x52e698
	[0137.555] GetVersion () returned 0x1db10106
	[0137.556] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0137.556] GetProcAddress (hModule=0x76300000, lpProcName="IsWow64Process") returned 0x7631195e
	[0137.556] GetProcessHeap () returned 0x510000
	[0137.556] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x52e8b0
	[0137.556] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0137.556] GetProcAddress (hModule=0x76300000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7632d650
	[0137.556] Wow64DisableWow64FsRedirection (in: OldValue=0x235f8fc | out: OldValue=0x235f8fc*=0x0) returned 1
	[0137.556] GetProcessHeap () returned 0x510000
	[0137.556] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e8b0 | out: hHeap=0x510000) returned 1
	[0137.556] GetCurrentProcess () returned 0xffffffff
	[0137.556] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x235f88c | out: TokenHandle=0x235f88c*=0xbc) returned 1
	[0137.556] GetTokenInformation (in: TokenHandle=0xbc, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x235f8a4 | out: TokenInformation=0x0, ReturnLength=0x235f8a4) returned 0
	[0137.556] GetProcessHeap () returned 0x510000
	[0137.556] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x118) returned 0x52e8b0
	[0137.556] GetTokenInformation (in: TokenHandle=0xbc, TokenInformationClass=0x2, TokenInformation=0x52e8b0, TokenInformationLength=0x118, ReturnLength=0x235f8a4 | out: TokenInformation=0x52e8b0, ReturnLength=0x235f8a4) returned 1
	[0137.556] AllocateAndInitializeSid (in: pIdentifierAuthority=0x235f898, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x235f8a0 | out: pSid=0x235f8a0*=0x521560*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1
	[0137.556] EqualSid (pSid1=0x521560*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x52e914*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x25))) returned 0
	[0137.556] EqualSid (pSid1=0x521560*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x52e930*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0
	[0137.556] EqualSid (pSid1=0x521560*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x52e93c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1
	[0137.556] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x52e93c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), Name=0x235f470, cchName=0x235f8a4, ReferencedDomainName=0x235f67c, cchReferencedDomainName=0x235f8a4, peUse=0x235f888 | out: Name="Administrators", cchName=0x235f8a4, ReferencedDomainName="BUILTIN", cchReferencedDomainName=0x235f8a4, peUse=0x235f888) returned 1
	[0137.719] GetProcessHeap () returned 0x510000
	[0137.719] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e8b0 | out: hHeap=0x510000) returned 1
	[0137.719] GetProcessHeap () returned 0x510000
	[0137.719] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xb0) returned 0x52e8b0
	[0137.719] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x20119, phkResult=0x235f86c | out: phkResult=0x235f86c*=0x100) returned 0x0
	[0137.719] RegQueryValueExW (in: hKey=0x100, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x235f868, lpData=0x235f8a4, lpcbData=0x235f870*=0xa | out: lpType=0x235f868*=0x4, lpData=0x235f8a4*=0x5, lpcbData=0x235f870*=0x4) returned 0x0
	[0137.719] RegCloseKey (hKey=0x100) returned 0x0
	[0137.719] GetProcessHeap () returned 0x510000
	[0137.719] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e8b0 | out: hHeap=0x510000) returned 1
	[0137.719] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x52e698, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0137.719] GetCurrentProcess () returned 0xffffffff
	[0137.720] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x235f8ec | out: Wow64Process=0x235f8ec) returned 1
	[0137.720] GetProcessHeap () returned 0x510000
	[0137.720] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x330) returned 0x531ae0
	[0137.720] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\9c354b42"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x100
	[0137.720] WriteFile (in: hFile=0x100, lpBuffer=0x531ae0*, nNumberOfBytesToWrite=0x32f, lpNumberOfBytesWritten=0x235f8d8, lpOverlapped=0x0 | out: lpBuffer=0x531ae0*, lpNumberOfBytesWritten=0x235f8d8*=0x32f, lpOverlapped=0x0) returned 1
	[0137.721] WriteFile (in: hFile=0x100, lpBuffer=0x52e698*, nNumberOfBytesToWrite=0x208, lpNumberOfBytesWritten=0x235f8d8, lpOverlapped=0x0 | out: lpBuffer=0x52e698*, lpNumberOfBytesWritten=0x235f8d8*=0x208, lpOverlapped=0x0) returned 1
	[0137.721] FlushFileBuffers (hFile=0x100) returned 1
	[0137.724] CloseHandle (hObject=0x100) returned 1
	[0137.724] GetProcessHeap () returned 0x510000
	[0137.724] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x52e8b0
	[0137.724] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0137.725] GetProcAddress (hModule=0x77d90000, lpProcName="RtlInitUnicodeString") returned 0x77dbe208
	[0137.725] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0137.725] GetProcAddress (hModule=0x77d90000, lpProcName="NtQueryInformationProcess") returned 0x77dafac8
	[0137.725] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0137.725] GetProcAddress (hModule=0x77d90000, lpProcName="RtlEnterCriticalSection") returned 0x77db22b0
	[0137.725] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0137.725] GetProcAddress (hModule=0x77d90000, lpProcName="RtlLeaveCriticalSection") returned 0x77db2270
	[0137.725] GetCurrentProcessId () returned 0x508
	[0137.725] OpenProcess (dwDesiredAccess=0x438, bInheritHandle=0, dwProcessId=0x508) returned 0x100
	[0137.725] NtQueryInformationProcess (in: ProcessHandle=0x100, ProcessInformationClass=0x0, ProcessInformation=0x235f844, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x235f844, ReturnLength=0x0) returned 0x0
	[0137.725] ReadProcessMemory (in: hProcess=0x100, lpBaseAddress=0x7efde000, lpBuffer=0x235f85c, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x235f85c*, lpNumberOfBytesRead=0x0) returned 1
	[0137.725] ReadProcessMemory (in: hProcess=0x100, lpBaseAddress=0x77e90200, lpBuffer=0x235f814, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x235f814*, lpNumberOfBytesRead=0x0) returned 1
	[0137.725] RtlInitUnicodeString (in: DestinationString=0x511338, SourceString="C:\\Windows\\explorer.exe" | out: DestinationString="C:\\Windows\\explorer.exe") 
	[0137.725] RtlInitUnicodeString (in: DestinationString=0x511340, SourceString="C:\\Windows\\explorer.exe" | out: DestinationString="C:\\Windows\\explorer.exe") 
	[0137.725] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x235f3f0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\rsfd234df.exe")) returned 0x39
	[0137.726] ReadProcessMemory (in: hProcess=0x100, lpBaseAddress=0x235f884, lpBuffer=0x235f88c, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x235f88c*, lpNumberOfBytesRead=0x0) returned 1
	[0137.726] ReadProcessMemory (in: hProcess=0x100, lpBaseAddress=0x511926, lpBuffer=0x235f600, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x235f600*, lpNumberOfBytesRead=0x0) returned 1
	[0137.726] RtlInitUnicodeString (in: DestinationString=0x51265c, SourceString="C:\\Windows\\explorer.exe" | out: DestinationString="C:\\Windows\\explorer.exe") 
	[0137.726] RtlInitUnicodeString (in: DestinationString=0x512664, SourceString="C:\\Windows\\explorer.exe" | out: DestinationString="C:\\Windows\\explorer.exe") 
	[0137.726] CloseHandle (hObject=0x100) returned 1
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e8b0 | out: hHeap=0x510000) returned 1
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa0) returned 0x52e8b0
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x9c) returned 0x52f420
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9c) returned 0x52f4c8
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x52f570
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52f570 | out: hHeap=0x510000) returned 1
	[0137.726] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\microsoft.NET\\Framework;%windir%\\microsoft.NET\\Framework64;ole32.dll", lpDst=0x52f420, nSize=0x4e | out: lpDst="C:\\Windows\\microsoft.NET\\Framework;C:\\Windows\\microsoft.NET\\Framework64;ole32") returned 0x52
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52f4c8 | out: hHeap=0x510000) returned 1
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x52f420, Size=0x136) returned 0x52f420
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x136) returned 0x532618
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x52f560
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52f560 | out: hHeap=0x510000) returned 1
	[0137.726] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\microsoft.NET\\Framework;%windir%\\microsoft.NET\\Framework64;ole32.dll", lpDst=0x52f420, nSize=0x9b | out: lpDst="C:\\Windows\\microsoft.NET\\Framework;C:\\Windows\\microsoft.NET\\Framework64;ole32.dll") returned 0x52
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x532618 | out: hHeap=0x510000) returned 1
	[0137.726] GetProcessHeap () returned 0x510000
	[0137.726] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e8b0 | out: hHeap=0x510000) returned 1
	[0137.726] CoInitializeEx (pvReserved=0x0, dwCoInit=0x6) returned 0x0
	[0137.868] GetProcessHeap () returned 0x510000
	[0137.868] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20a) returned 0x5373f0
	[0137.868] FindFirstFileW (in: lpFileName="C:\\Windows\\microsoft.NET\\Framework64\\*", lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x52f738
	[0137.868] FindNextFileW (in: hFindFile=0x52f738, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1
	[0137.868] FindNextFileW (in: hFindFile=0x52f738, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ce80ba, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2ce80ba, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c2f7a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x30, dwReserved1=0x2, cFileName="sbscmp10.dll", cAlternateFileName="")) returned 1
	[0137.868] FindNextFileW (in: hFindFile=0x52f738, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2d34374, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2d34374, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c428543, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x30, dwReserved1=0x2, cFileName="sbscmp20_mscorwks.dll", cAlternateFileName="")) returned 1
	[0137.868] FindNextFileW (in: hFindFile=0x52f738, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2dcc8e8, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2dcc8e8, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x30, dwReserved1=0x2, cFileName="sbscmp20_perfcounter.dll", cAlternateFileName="")) returned 1
	[0137.869] FindNextFileW (in: hFindFile=0x52f738, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e64e5c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2e64e5c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x30, dwReserved1=0x2, cFileName="SharedReg12.dll", cAlternateFileName="")) returned 1
	[0137.869] FindNextFileW (in: hFindFile=0x52f738, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v2.0.50727", cAlternateFileName="V20~1.507")) returned 1
	[0137.869] GetProcessHeap () returned 0x510000
	[0137.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x52f690
	[0137.869] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0137.869] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0137.869] GetProcessHeap () returned 0x510000
	[0137.869] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x536828
	[0137.869] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x235f56c, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x235f5a8 | out: ppv=0x235f5a8*=0x52d944) returned 0x0
	[0176.042] IFileOperation:SetOperationFlags (This=0x52d944, dwOperationFlags=0x10840414) returned 0x0
	[0176.920] SHCreateItemFromParsingName (in: pszPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x235f5a4 | out: ppv=0x235f5a4*=0x5207dc) returned 0x0
	[0180.849] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v2.0.50727", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x235f59c | out: ppv=0x235f59c*=0x5759e4) returned 0x0
	[0180.850] IFileOperation:CopyItem (This=0x52d944, psiItem=0x5207dc, psiDestinationFolder=0x5759e4, pszCopyName="ole32.dll", pfopsItem=0x0) returned 0x0
	[0181.030] IFileOperation:PerformOperations (This=0x52d944) returned 0x0
	[0181.282] IUnknown:Release (This=0x5759e4) returned 0x0
	[0181.282] IUnknown:Release (This=0x5207dc) returned 0x0
	[0181.282] IUnknown:Release (This=0x52d944) returned 0x0
	[0182.280] GetProcessHeap () returned 0x510000
	[0182.280] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536828 | out: hHeap=0x510000) returned 1
	[0182.280] GetProcessHeap () returned 0x510000
	[0182.280] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52f690 | out: hHeap=0x510000) returned 1
	[0182.280] FindNextFileW (in: hFindFile=0x52f738, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0182.280] GetProcessHeap () returned 0x510000
	[0182.280] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x549138
	[0182.281] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0182.281] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0182.281] GetProcessHeap () returned 0x510000
	[0182.281] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x536828
	[0182.281] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x235f56c, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x235f5a8 | out: ppv=0x235f5a8*=0x5847e4) returned 0x0
	[0189.912] IFileOperation:SetOperationFlags (This=0x5847e4, dwOperationFlags=0x10840414) returned 0x0
	[0190.753] SHCreateItemFromParsingName (in: pszPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x235f5a4 | out: ppv=0x235f5a4*=0x5207dc) returned 0x0
	[0190.760] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v3.0", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x235f59c | out: ppv=0x235f59c*=0x5759e4) returned 0x0
	[0190.761] IFileOperation:CopyItem (This=0x5847e4, psiItem=0x5207dc, psiDestinationFolder=0x5759e4, pszCopyName="ole32.dll", pfopsItem=0x0) returned 0x0
	[0191.264] IFileOperation:PerformOperations (This=0x5847e4) returned 0x0
	[0191.498] IUnknown:Release (This=0x5759e4) returned 0x0
	[0191.498] IUnknown:Release (This=0x5207dc) returned 0x0
	[0191.498] IUnknown:Release (This=0x5847e4) returned 0x0
	[0191.861] GetProcessHeap () returned 0x510000
	[0191.861] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x536828 | out: hHeap=0x510000) returned 1
	[0191.861] GetProcessHeap () returned 0x510000
	[0191.861] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549138 | out: hHeap=0x510000) returned 1
	[0191.861] FindNextFileW (in: hFindFile=0x52f738, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x95314a8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x95314a8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0191.862] GetProcessHeap () returned 0x510000
	[0191.862] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x549138
	[0191.862] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0191.862] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0191.862] GetProcessHeap () returned 0x510000
	[0191.862] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x56c378
	[0191.862] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x235f56c, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x235f5a8 | out: ppv=0x235f5a8*=0x584904) returned 0x0
	[0200.157] IFileOperation:SetOperationFlags (This=0x584904, dwOperationFlags=0x10840414) returned 0x0
	[0200.940] SHCreateItemFromParsingName (in: pszPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x235f5a4 | out: ppv=0x235f5a4*=0x5207dc) returned 0x0
	[0200.947] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v3.5", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x235f59c | out: ppv=0x235f59c*=0x5759e4) returned 0x0
	[0200.949] IFileOperation:CopyItem (This=0x584904, psiItem=0x5207dc, psiDestinationFolder=0x5759e4, pszCopyName="ole32.dll", pfopsItem=0x0) returned 0x0
	[0201.352] IFileOperation:PerformOperations (This=0x584904) returned 0x0
	[0201.533] IUnknown:Release (This=0x5759e4) returned 0x0
	[0201.533] IUnknown:Release (This=0x5207dc) returned 0x0
	[0201.533] IUnknown:Release (This=0x584904) returned 0x0
	[0202.054] GetProcessHeap () returned 0x510000
	[0202.054] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x56c378 | out: hHeap=0x510000) returned 1
	[0202.054] GetProcessHeap () returned 0x510000
	[0202.054] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549138 | out: hHeap=0x510000) returned 1
	[0202.054] FindNextFileW (in: hFindFile=0x52f738, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 1
	[0202.054] GetProcessHeap () returned 0x510000
	[0202.054] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x549138
	[0202.054] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0202.055] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0202.055] GetProcessHeap () returned 0x510000
	[0202.055] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x56c378
	[0202.055] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x235f56c, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x235f5a8 | out: ppv=0x235f5a8*=0x5849dc) returned 0x0
	[0206.506] IFileOperation:SetOperationFlags (This=0x5849dc, dwOperationFlags=0x10840414) returned 0x0
	[0206.832] SHCreateItemFromParsingName (in: pszPath="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x235f5a4 | out: ppv=0x235f5a4*=0x5207dc) returned 0x0
	[0206.838] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v4.0.30319", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x235f59c | out: ppv=0x235f59c*=0x5759e4) returned 0x0
	[0206.840] IFileOperation:CopyItem (This=0x5849dc, psiItem=0x5207dc, psiDestinationFolder=0x5759e4, pszCopyName="ole32.dll", pfopsItem=0x0) returned 0x0
	[0207.051] IFileOperation:PerformOperations (This=0x5849dc) returned 0x0
	[0207.278] IUnknown:Release (This=0x5759e4) returned 0x0
	[0207.278] IUnknown:Release (This=0x5207dc) returned 0x0
	[0207.278] IUnknown:Release (This=0x5849dc) returned 0x0
	[0207.279] GetProcessHeap () returned 0x510000
	[0207.279] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x56c378 | out: hHeap=0x510000) returned 1
	[0207.279] GetProcessHeap () returned 0x510000
	[0207.279] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x549138 | out: hHeap=0x510000) returned 1
	[0207.279] FindNextFileW (in: hFindFile=0x52f738, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcde33fe0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcde33fe0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30, dwReserved1=0x2, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 0
	[0207.279] FindClose (in: hFindFile=0x52f738 | out: hFindFile=0x52f738) returned 1
	[0207.280] GetProcessHeap () returned 0x510000
	[0207.280] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5373f0 | out: hHeap=0x510000) returned 1
	[0207.280] CoUninitialize () 
	[0207.692] GetProcessHeap () returned 0x510000
	[0207.692] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52f420 | out: hHeap=0x510000) returned 1
	[0207.692] ShellExecuteExW (in: pExecInfo=0x235f864*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="open", lpFile="compmgmt.msc", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x235f864*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="open", lpFile="compmgmt.msc", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
	[0224.364] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0
	[0224.364] GetProcessHeap () returned 0x510000
	[0224.364] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xa0) returned 0x577198
	[0224.364] GetProcessHeap () returned 0x510000
	[0224.364] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x9c) returned 0x577240
	[0224.364] GetProcessHeap () returned 0x510000
	[0224.364] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x9c) returned 0x5772e8
	[0224.364] GetProcessHeap () returned 0x510000
	[0224.364] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x54aec8
	[0224.364] GetProcessHeap () returned 0x510000
	[0224.364] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aec8 | out: hHeap=0x510000) returned 1
	[0224.364] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\microsoft.NET\\Framework;%windir%\\microsoft.NET\\Framework64;ole32.dll", lpDst=0x577240, nSize=0x4e | out: lpDst="C:\\Windows\\microsoft.NET\\Framework;C:\\Windows\\microsoft.NET\\Framework64;ole32") returned 0x52
	[0224.364] GetProcessHeap () returned 0x510000
	[0224.364] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5772e8 | out: hHeap=0x510000) returned 1
	[0224.364] GetProcessHeap () returned 0x510000
	[0224.364] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x577240, Size=0x136) returned 0x52f420
	[0224.364] GetProcessHeap () returned 0x510000
	[0224.364] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x136) returned 0x532e60
	[0224.365] GetProcessHeap () returned 0x510000
	[0224.365] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x54aec8
	[0224.365] GetProcessHeap () returned 0x510000
	[0224.365] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aec8 | out: hHeap=0x510000) returned 1
	[0224.365] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\microsoft.NET\\Framework;%windir%\\microsoft.NET\\Framework64;ole32.dll", lpDst=0x52f420, nSize=0x9b | out: lpDst="C:\\Windows\\microsoft.NET\\Framework;C:\\Windows\\microsoft.NET\\Framework64;ole32.dll") returned 0x52
	[0224.365] GetProcessHeap () returned 0x510000
	[0224.365] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x532e60 | out: hHeap=0x510000) returned 1
	[0224.365] GetProcessHeap () returned 0x510000
	[0224.365] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x577198 | out: hHeap=0x510000) returned 1
	[0224.365] CoInitializeEx (pvReserved=0x0, dwCoInit=0x6) returned 0x0
	[0224.365] GetProcessHeap () returned 0x510000
	[0224.365] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20a) returned 0x56da20
	[0224.365] FindFirstFileW (in: lpFileName="C:\\Windows\\microsoft.NET\\Framework64\\*", lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x510000, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x53ee58
	[0224.365] FindNextFileW (in: hFindFile=0x53ee58, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89f82540, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x89f82540, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x510000, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0224.365] FindNextFileW (in: hFindFile=0x53ee58, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2ce80ba, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2ce80ba, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c2f7a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x510000, dwReserved1=0x0, cFileName="sbscmp10.dll", cAlternateFileName="")) returned 1
	[0224.365] FindNextFileW (in: hFindFile=0x53ee58, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2d34374, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2d34374, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c428543, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x510000, dwReserved1=0x0, cFileName="sbscmp20_mscorwks.dll", cAlternateFileName="")) returned 1
	[0224.365] FindNextFileW (in: hFindFile=0x53ee58, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2dcc8e8, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2dcc8e8, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x510000, dwReserved1=0x0, cFileName="sbscmp20_perfcounter.dll", cAlternateFileName="")) returned 1
	[0224.366] FindNextFileW (in: hFindFile=0x53ee58, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e64e5c, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0xb2e64e5c, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0x8c44e6a1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x510000, dwReserved1=0x0, cFileName="SharedReg12.dll", cAlternateFileName="")) returned 1
	[0224.366] FindNextFileW (in: hFindFile=0x53ee58, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe7fdd12, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x4c1616e0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x4c1616e0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x510000, dwReserved1=0x0, cFileName="v2.0.50727", cAlternateFileName="V20~1.507")) returned 1
	[0224.366] GetProcessHeap () returned 0x510000
	[0224.366] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x547d20
	[0224.366] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0224.366] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0224.366] GetProcessHeap () returned 0x510000
	[0224.366] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x54aec8
	[0224.366] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x235f35c, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x235f398 | out: ppv=0x235f398*=0x584afc) returned 0x0
	[0230.000] IFileOperation:SetOperationFlags (This=0x584afc, dwOperationFlags=0x10840414) returned 0x0
	[0230.015] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v2.0.50727\\ole32.dll", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x235f394 | out: ppv=0x235f394*=0x5207dc) returned 0x0
	[0230.019] IFileOperation:DeleteItem (This=0x584afc, psiItem=0x5207dc, pfopsItem=0x0) returned 0x0
	[0230.042] IFileOperation:PerformOperations (This=0x584afc) returned 0x0
	[0230.194] IUnknown:Release (This=0x5207dc) returned 0x0
	[0230.194] IUnknown:Release (This=0x584afc) returned 0x0
	[0230.342] GetProcessHeap () returned 0x510000
	[0230.342] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aec8 | out: hHeap=0x510000) returned 1
	[0230.342] GetProcessHeap () returned 0x510000
	[0230.342] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547d20 | out: hHeap=0x510000) returned 1
	[0230.342] FindNextFileW (in: hFindFile=0x53ee58, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x520e49a0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x520e49a0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x510000, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0230.342] GetProcessHeap () returned 0x510000
	[0230.342] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x547d20
	[0230.342] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0230.342] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0230.342] GetProcessHeap () returned 0x510000
	[0230.342] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x54aec8
	[0230.342] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x235f35c, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x235f398 | out: ppv=0x235f398*=0x584bd4) returned 0x0
	[0233.569] IFileOperation:SetOperationFlags (This=0x584bd4, dwOperationFlags=0x10840414) returned 0x0
	[0233.702] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v3.0\\ole32.dll", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x235f394 | out: ppv=0x235f394*=0x5207dc) returned 0x0
	[0233.707] IFileOperation:DeleteItem (This=0x584bd4, psiItem=0x5207dc, pfopsItem=0x0) returned 0x0
	[0233.721] IFileOperation:PerformOperations (This=0x584bd4) returned 0x0
	[0233.828] IUnknown:Release (This=0x5207dc) returned 0x0
	[0233.828] IUnknown:Release (This=0x584bd4) returned 0x0
	[0233.952] GetProcessHeap () returned 0x510000
	[0233.952] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aec8 | out: hHeap=0x510000) returned 1
	[0233.952] GetProcessHeap () returned 0x510000
	[0233.952] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547d20 | out: hHeap=0x510000) returned 1
	[0233.952] FindNextFileW (in: hFindFile=0x53ee58, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x58315520, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x58315520, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x510000, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0233.952] GetProcessHeap () returned 0x510000
	[0233.952] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x547d20
	[0233.953] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0233.953] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0233.953] GetProcessHeap () returned 0x510000
	[0233.953] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x54aec8
	[0233.953] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x235f35c, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x235f398 | out: ppv=0x235f398*=0x584afc) returned 0x0
	[0237.145] IFileOperation:SetOperationFlags (This=0x584afc, dwOperationFlags=0x10840414) returned 0x0
	[0237.330] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v3.5\\ole32.dll", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x235f394 | out: ppv=0x235f394*=0x0) returned 0x80070002
	[0237.332] IUnknown:Release (This=0x584afc) returned 0x0
	[0237.860] GetProcessHeap () returned 0x510000
	[0237.860] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aec8 | out: hHeap=0x510000) returned 1
	[0237.861] GetProcessHeap () returned 0x510000
	[0237.861] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547d20 | out: hHeap=0x510000) returned 1
	[0237.861] FindNextFileW (in: hFindFile=0x53ee58, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5b4ec1c0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x5b4ec1c0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x510000, dwReserved1=0x0, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 1
	[0237.861] GetProcessHeap () returned 0x510000
	[0237.861] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x547d20
	[0237.861] GetModuleHandleA (lpModuleName="shell32.dll") returned 0x76450000
	[0237.861] GetProcAddress (hModule=0x76450000, lpProcName="SHCreateItemFromParsingName") returned 0x764a4215
	[0237.861] GetProcessHeap () returned 0x510000
	[0237.861] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x90) returned 0x54aec8
	[0237.861] CoGetObject (in: pszName="Elevation:Administrator!new:{3ad05575-8857-4850-9277-11b85bdb8e09}", pBindOptions=0x235f35c, riid=0x4091b8*(Data1=0x947aab5f, Data2=0xa5c, Data3=0x4c13, Data4=([0]=0xb4, [1]=0xd6, [2]=0x4b, [3]=0xf7, [4]=0x83, [5]=0x6f, [6]=0xc9, [7]=0xf8)), ppv=0x235f398 | out: ppv=0x235f398*=0x584bd4) returned 0x0
	[0240.407] IFileOperation:SetOperationFlags (This=0x584bd4, dwOperationFlags=0x10840414) returned 0x0
	[0240.558] SHCreateItemFromParsingName (in: pszPath="C:\\Windows\\microsoft.NET\\Framework64\\v4.0.30319\\ole32.dll", pbc=0x0, riid=0x4091a8*(Data1=0x43826d1e, Data2=0xe718, Data3=0x42ee, Data4=([0]=0xbc, [1]=0x55, [2]=0xa1, [3]=0xe2, [4]=0x61, [5]=0xc3, [6]=0x7b, [7]=0xfe)), ppv=0x235f394 | out: ppv=0x235f394*=0x0) returned 0x80070002
	[0240.559] IUnknown:Release (This=0x584bd4) returned 0x0
	[0240.668] GetProcessHeap () returned 0x510000
	[0240.668] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54aec8 | out: hHeap=0x510000) returned 1
	[0240.668] GetProcessHeap () returned 0x510000
	[0240.668] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x547d20 | out: hHeap=0x510000) returned 1
	[0240.668] FindNextFileW (in: hFindFile=0x53ee58, lpFindFileData=0x235f5f8 | out: lpFindFileData=0x235f5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89f82540, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x5b4ec1c0, ftLastAccessTime.dwHighDateTime=0x1d57294, ftLastWriteTime.dwLowDateTime=0x5b4ec1c0, ftLastWriteTime.dwHighDateTime=0x1d57294, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x510000, dwReserved1=0x0, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 0
	[0240.668] FindClose (in: hFindFile=0x53ee58 | out: hFindFile=0x53ee58) returned 1
	[0240.668] GetProcessHeap () returned 0x510000
	[0240.668] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x56da20 | out: hHeap=0x510000) returned 1
	[0240.668] CoUninitialize () 
	[0240.963] GetProcessHeap () returned 0x510000
	[0240.963] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52f420 | out: hHeap=0x510000) returned 1
	[0240.963] GetProcessHeap () returned 0x510000
	[0240.963] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x70) returned 0x585798
	[0240.963] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0240.963] GetProcAddress (hModule=0x77d90000, lpProcName="RtlInitUnicodeString") returned 0x77dbe208
	[0240.963] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0240.963] GetProcAddress (hModule=0x77d90000, lpProcName="NtQueryInformationProcess") returned 0x77dafac8
	[0240.963] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0240.963] GetProcAddress (hModule=0x77d90000, lpProcName="RtlEnterCriticalSection") returned 0x77db22b0
	[0240.964] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77d90000
	[0240.964] GetProcAddress (hModule=0x77d90000, lpProcName="RtlLeaveCriticalSection") returned 0x77db2270
	[0240.964] GetCurrentProcessId () returned 0x508
	[0240.964] OpenProcess (dwDesiredAccess=0x438, bInheritHandle=0, dwProcessId=0x508) returned 0x174
	[0240.964] NtQueryInformationProcess (in: ProcessHandle=0x174, ProcessInformationClass=0x0, ProcessInformation=0x235f834, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x235f834, ReturnLength=0x0) returned 0x0
	[0240.964] ReadProcessMemory (in: hProcess=0x174, lpBaseAddress=0x7efde000, lpBuffer=0x235f84c, nSize=0x20, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x235f84c*, lpNumberOfBytesRead=0x0) returned 1
	[0240.964] ReadProcessMemory (in: hProcess=0x174, lpBaseAddress=0x77e90200, lpBuffer=0x235f804, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x235f804*, lpNumberOfBytesRead=0x0) returned 1
	[0240.964] RtlInitUnicodeString (in: DestinationString=0x511338, SourceString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" | out: DestinationString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe") 
	[0240.964] RtlInitUnicodeString (in: DestinationString=0x511340, SourceString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" | out: DestinationString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe") 
	[0240.964] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x235f3e0, nSize=0x104 | out: lpFilename="C:\\Windows\\explorer.exe" (normalized: "c:\\windows\\explorer.exe")) returned 0x17
	[0240.964] ReadProcessMemory (in: hProcess=0x174, lpBaseAddress=0x235f874, lpBuffer=0x235f87c, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x235f87c*, lpNumberOfBytesRead=0x0) returned 1
	[0240.964] ReadProcessMemory (in: hProcess=0x174, lpBaseAddress=0x52e638, lpBuffer=0x235f5f0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x235f5f0*, lpNumberOfBytesRead=0x0) returned 1
	[0240.964] RtlInitUnicodeString (in: DestinationString=0x51265c, SourceString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" | out: DestinationString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe") 
	[0240.964] RtlInitUnicodeString (in: DestinationString=0x512664, SourceString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe" | out: DestinationString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\rsfd234df.exe") 
	[0240.964] CloseHandle (hObject=0x174) returned 1
	[0240.964] GetProcessHeap () returned 0x510000
	[0240.964] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x585798 | out: hHeap=0x510000) returned 1
	[0240.964] DeleteFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\9C354B42" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\9c354b42")) returned 0
	[0241.011] GetProcessHeap () returned 0x510000
	[0241.011] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x54b7f0
	[0241.012] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76300000
	[0241.012] GetProcAddress (hModule=0x76300000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7632d668
	[0241.012] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1
	[0241.012] GetProcessHeap () returned 0x510000
	[0241.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x54b7f0 | out: hHeap=0x510000) returned 1
	[0241.012] GetProcessHeap () returned 0x510000
	[0241.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52e638 | out: hHeap=0x510000) returned 1
	[0241.012] GetProcessHeap () returned 0x510000
	[0241.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x531ae0 | out: hHeap=0x510000) returned 1
	[0241.012] GetProcessHeap () returned 0x510000
	[0241.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x51f658 | out: hHeap=0x510000) returned 1
	[0241.012] GetProcessHeap () returned 0x510000
	[0241.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc60 | out: hHeap=0x510000) returned 1
	[0241.012] GetProcessHeap () returned 0x510000
	[0241.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x52cc88 | out: hHeap=0x510000) returned 1
	[0241.012] GetProcessHeap () returned 0x510000
	[0241.012] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x521548 | out: hHeap=0x510000) returned 1

Thread:
	id = 61
	os_tid = 0x59c


Thread:
	id = 62
	os_tid = 0x528


Thread:
	id = 63
	os_tid = 0x590


Thread:
	id = 64
	os_tid = 0x5a0


Thread:
	id = 75
	os_tid = 0x49c


Thread:
	id = 91
	os_tid = 0x1e8


Thread:
	id = 105
	os_tid = 0x744


Process:
	id = "15"
	image_name = "dllhost.exe"
	filename = "c:\\windows\\syswow64\\dllhost.exe"
	page_root = "0x1510c000"
	os_pid = "0x7a0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "14"
	os_parent_pid = "0x508"
	cmd_line = "C:\\Windows\\SysWOW64\\DllHost.exe /Processid:{3AD05575-8857-4850-9277-11B85BDB8E09}"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 67
	os_tid = 0x204


Thread:
	id = 68
	os_tid = 0x2ac


Thread:
	id = 69
	os_tid = 0x114


Thread:
	id = 70
	os_tid = 0x210


Thread:
	id = 71
	os_tid = 0x2c8


Thread:
	id = 72
	os_tid = 0x7c0


Thread:
	id = 76
	os_tid = 0x228


Thread:
	id = 77
	os_tid = 0x24c


Thread:
	id = 78
	os_tid = 0x2b0


Process:
	id = "16"
	image_name = "dllhost.exe"
	filename = "c:\\windows\\syswow64\\dllhost.exe"
	page_root = "0x1a720000"
	os_pid = "0x684"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "13"
	os_parent_pid = "0x794"
	cmd_line = "C:\\Windows\\SysWOW64\\DllHost.exe /Processid:{3AD05575-8857-4850-9277-11B85BDB8E09}"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 79
	os_tid = 0x6e8


Thread:
	id = 80
	os_tid = 0x7f0


Thread:
	id = 81
	os_tid = 0x7c4


Thread:
	id = 82
	os_tid = 0x37c


Thread:
	id = 83
	os_tid = 0x614


Thread:
	id = 84
	os_tid = 0x420


Thread:
	id = 85
	os_tid = 0x6ec


Thread:
	id = 86
	os_tid = 0x5b4


Thread:
	id = 87
	os_tid = 0x35c


Thread:
	id = 88
	os_tid = 0x6fc


Thread:
	id = 89
	os_tid = 0x668


Process:
	id = "17"
	image_name = "dllhost.exe"
	filename = "c:\\windows\\syswow64\\dllhost.exe"
	page_root = "0x24834000"
	os_pid = "0x7cc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "12"
	os_parent_pid = "0x7d4"
	cmd_line = "C:\\Windows\\SysWOW64\\DllHost.exe /Processid:{3AD05575-8857-4850-9277-11B85BDB8E09}"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 94
	os_tid = 0x5d8


Thread:
	id = 95
	os_tid = 0x5e0


Thread:
	id = 96
	os_tid = 0x6f4


Thread:
	id = 97
	os_tid = 0x778


Thread:
	id = 98
	os_tid = 0x4e0


Thread:
	id = 99
	os_tid = 0x320


Thread:
	id = 100
	os_tid = 0x210


Thread:
	id = 101
	os_tid = 0x21c


Thread:
	id = 102
	os_tid = 0x404


Process:
	id = "18"
	image_name = "mmc.exe"
	filename = "c:\\windows\\system32\\mmc.exe"
	page_root = "0x77bc0000"
	os_pid = "0x260"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "12"
	os_parent_pid = "0x7d4"
	cmd_line = "\"C:\\Windows\\system32\\mmc.exe\" \"C:\\Windows\\System32\\compmgmt.msc\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "64"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 106
	os_tid = 0x318


Process:
	id = "19"
	image_name = "mmc.exe"
	filename = "c:\\windows\\system32\\mmc.exe"
	page_root = "0x76a43000"
	os_pid = "0x454"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "14"
	os_parent_pid = "0x508"
	cmd_line = "\"C:\\Windows\\system32\\mmc.exe\" \"C:\\Windows\\System32\\compmgmt.msc\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "64"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 107
	os_tid = 0x678


Process:
	id = "20"
	image_name = "mmc.exe"
	filename = "c:\\windows\\system32\\mmc.exe"
	page_root = "0x2f93000"
	os_pid = "0x44c"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "13"
	os_parent_pid = "0x794"
	cmd_line = "\"C:\\Windows\\system32\\mmc.exe\" \"C:\\Windows\\System32\\compmgmt.msc\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "64"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 108
	os_tid = 0x394


Process:
	id = "21"
	image_name = "mmc.exe"
	filename = "c:\\windows\\system32\\mmc.exe"
	page_root = "0x7e5f000"
	os_pid = "0x5e0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "13"
	os_parent_pid = "0x794"
	cmd_line = "\"C:\\Windows\\system32\\mmc.exe\" \"C:\\Windows\\System32\\compmgmt.msc\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "64"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 109
	os_tid = 0x404

	[0226.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24f140 | out: lpSystemTimeAsFileTime=0x24f140*(dwLowDateTime=0x6623e3a0, dwHighDateTime=0x1d57294)) 
	[0226.584] GetCurrentProcessId () returned 0x5e0
	[0226.584] GetCurrentThreadId () returned 0x404
	[0226.584] GetTickCount () returned 0x114dce8
	[0226.584] RtlQueryPerformanceCounter (in: lpPerformanceCount=0x24f148 | out: lpPerformanceCount=0x24f148*=19226831213) returned 1
	[0226.585] LoadLibraryA (lpLibFileName="MSVCRT.DLL") returned 0x7feff720000
	[0226.588] GetVersion () returned 0x1db10106
	[0226.588] SetErrorMode (uMode=0x0) returned 0x0
	[0226.588] SetErrorMode (uMode=0x8001) returned 0x0
	[0226.589] LocalAlloc (uFlags=0x0, uBytes=0x2000) returned 0x43ea70
	[0226.589] LocalFree (hMem=0x43ea70) returned 0x0
	[0226.589] GetVersion () returned 0x1db10106
	[0226.591] GlobalLock (hMem=0x530008) returned 0x43ea70
	[0226.591] LocalAlloc (uFlags=0x40, uBytes=0x340) returned 0x43ec90
	[0226.591] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x439490
	[0226.591] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x435ed0
	[0226.591] malloc (_Size=0x100) returned 0x6557b0
	[0226.592] __dllonexit () returned 0x7fef845621c
	[0226.592] __dllonexit () returned 0x7fef84566e0
	[0226.592] __dllonexit () returned 0x7fef84572b8
	[0226.592] __dllonexit () returned 0x7fef84587cc
	[0226.592] __dllonexit () returned 0x7fef8458d64
	[0226.592] __dllonexit () returned 0x7fef8458db4
	[0226.592] __dllonexit () returned 0x7fef8458e70
	[0226.592] __dllonexit () returned 0x7fef845a308
	[0226.593] __dllonexit () returned 0x7fef8458810
	[0226.593] __dllonexit () returned 0x7fef8467598
	[0226.593] __dllonexit () returned 0x7fef8458880
	[0226.593] __dllonexit () returned 0x7fef845a170
	[0226.593] __dllonexit () returned 0x7fef845a280
	[0226.593] __dllonexit () returned 0x7fef845ad44
	[0226.593] __dllonexit () returned 0x7fef845bc30
	[0226.593] __dllonexit () returned 0x7fef845bc80
	[0226.593] __dllonexit () returned 0x7fef845c338
	[0226.593] __dllonexit () returned 0x7fef845d030
	[0226.594] __dllonexit () returned 0x7fef84559cc
	[0226.594] __dllonexit () returned 0x7fef84559f0
	[0226.594] __dllonexit () returned 0x7fef8455a1c
	[0226.595] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc105
	[0226.595] __dllonexit () returned 0x7fef8467568
	[0226.595] __dllonexit () returned 0x7fef8467574
	[0226.596] __dllonexit () returned 0x7fef8467580
	[0226.596] __dllonexit () returned 0x7fef846758c
	[0226.596] GetVersion () returned 0x1db10106
	[0226.596] GetVersion () returned 0x1db10106
	[0226.596] GetVersion () returned 0x1db10106
	[0226.596] __dllonexit () returned 0x7fef83ba15c
	[0226.596] __dllonexit () returned 0x7fef83c6610
	[0226.596] __dllonexit () returned 0x7fef8458910
	[0226.596] __dllonexit () returned 0x7fef8458b90
	[0226.596] __dllonexit () returned 0x7fef8458bb4
	[0226.596] __dllonexit () returned 0x7fef83d6ae0
	[0226.597] GetVersion () returned 0x1db10106
	[0226.597] GetProcessVersion (ProcessId=0x0) returned 0x60001
	[0226.597] GetSystemMetrics (nIndex=11) returned 32
	[0226.597] GetSystemMetrics (nIndex=12) returned 32
	[0226.597] GetSystemMetrics (nIndex=2) returned 17
	[0226.597] GetSystemMetrics (nIndex=3) returned 17
	[0226.597] GetDC (hWnd=0x0) returned 0x8010666
	[0226.597] GetDeviceCaps (hdc=0x8010666, index=88) returned 96
	[0226.597] GetDeviceCaps (hdc=0x8010666, index=90) returned 96
	[0226.597] ReleaseDC (hWnd=0x0, hDC=0x8010666) returned 1
	[0226.597] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0226.597] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0226.597] GetSysColor (nIndex=20) returned 0xffffff
	[0226.597] GetSysColor (nIndex=18) returned 0x0
	[0226.597] GetSysColor (nIndex=6) returned 0x646464
	[0226.598] GetSysColorBrush (nIndex=15) returned 0x1100059
	[0226.598] GetSysColorBrush (nIndex=6) returned 0x1100061
	[0226.598] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007
	[0226.598] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0226.598] __dllonexit () returned 0x7fef8458f84
	[0226.598] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc106
	[0226.598] __dllonexit () returned 0x7fef83e3990
	[0226.598] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004
	[0226.752] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003
	[0226.752] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002
	[0226.752] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a
	[0226.752] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b
	[0226.752] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d
	[0226.752] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e
	[0226.752] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f
	[0226.752] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006
	[0226.752] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007
	[0226.752] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc0ba
	[0226.752] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc0c0
	[0226.752] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc106
	[0226.752] __dllonexit () returned 0x7fef84675a4
	[0226.752] __dllonexit () returned 0x7fef84675bc
	[0226.753] __dllonexit () returned 0x7fef84675c8
	[0226.753] __dllonexit () returned 0x7fef84675d4
	[0226.753] __dllonexit () returned 0x7fef84675e0
	[0226.753] GetCursorPos (in: lpPoint=0x7fef84c26d8 | out: lpPoint=0x7fef84c26d8*(x=838, y=444)) returned 1
	[0226.754] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x43efe0
	[0226.754] LocalReAlloc (hMem=0x435ed0, uBytes=0x18, uFlags=0x2) returned 0x435ed0
	[0226.755] GetCurrentThread () returned 0xfffffffffffffffe
	[0226.755] GetCurrentThreadId () returned 0x404
	[0226.755] __dllonexit () returned 0x7fef845cfa4
	[0226.755] SetErrorMode (uMode=0x0) returned 0x8001
	[0226.755] SetErrorMode (uMode=0x8001) returned 0x0
	[0226.755] GetModuleFileNameW (in: hModule=0x7fef83a0000, lpFilename=0x24e830, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\MFC42u.dll" (normalized: "c:\\windows\\system32\\mfc42u.dll")) returned 0x1e
	[0226.755] wcscpy_s (in: _Destination=0x24ea40, _SizeInWords=0x104, _Source="MFC42u" | out: _Destination="MFC42u") returned 0x0
	[0227.344] FindResourceW (hModule=0x7fef83a0000, lpName=0xe01, lpType=0x6) returned 0x6309b0
	[0227.571] LoadStringW (in: hInstance=0x7fef83a0000, uID=0xe000, lpBuffer=0x24ec50, cchBufferMax=256 | out: lpBuffer="") returned 0x0
	[0227.571] wcscpy_s (in: _Destination=0x24e864, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0227.571] wcscat_s (in: _Destination="MFC42u", _SizeInWords=0x104, _Source=".INI" | out: _Destination="MFC42u.INI") returned 0x0
	[0227.572] malloc (_Size=0x80) returned 0x6559c0
	[0227.572] LocalAlloc (uFlags=0x40, uBytes=0x2100) returned 0x43f0f0
	[0227.572] GetSystemDirectoryA (in: lpBuffer=0x24eed0, uSize=0x112 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0227.572] strcat_s (in: _Destination="C:\\Windows\\system32", _SizeInBytes=0x112, _Source="\\MFC42" | out: _Destination="C:\\Windows\\system32\\MFC42") returned 0x0
	[0227.572] strcat_s (in: _Destination="C:\\Windows\\system32\\MFC42", _SizeInBytes=0x112, _Source="LOC" | out: _Destination="C:\\Windows\\system32\\MFC42LOC") returned 0x0
	[0227.572] strcat_s (in: _Destination="C:\\Windows\\system32\\MFC42LOC", _SizeInBytes=0x112, _Source=".DLL" | out: _Destination="C:\\Windows\\system32\\MFC42LOC.DLL") returned 0x0
	[0227.572] LoadLibraryExA (lpLibFileName="C:\\Windows\\system32\\MFC42LOC.DLL", hFile=0x0, dwFlags=0x2) returned 0x0
	[0227.574] malloc (_Size=0x400) returned 0x655fa0
	[0227.575] malloc (_Size=0x80) returned 0x655b60
	[0227.580] GetCursorPos (in: lpPoint=0xff872a98 | out: lpPoint=0xff872a98*(x=838, y=444)) returned 1
	[0227.580] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x4478a0
	[0227.580] LocalReAlloc (hMem=0x435ed0, uBytes=0x20, uFlags=0x2) returned 0x435ed0
	[0227.580] GetCurrentThread () returned 0xfffffffffffffffe
	[0227.580] GetCurrentThreadId () returned 0x404
	[0227.580] malloc (_Size=0x18) returned 0x657b20
	[0227.580] malloc (_Size=0x18) returned 0x657b40
	[0227.580] malloc (_Size=0x18) returned 0x657b60
	[0227.681] SetErrorMode (uMode=0x0) returned 0x8001
	[0227.682] SetErrorMode (uMode=0x8001) returned 0x0
	[0227.682] GetModuleFileNameW (in: hModule=0xff6d0000, lpFilename=0x24f5e0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\mmc.exe" (normalized: "c:\\windows\\system32\\mmc.exe")) returned 0x1b
	[0227.682] wcscpy_s (in: _Destination=0x24f7f0, _SizeInWords=0x104, _Source="mmc" | out: _Destination="mmc") returned 0x0
	[0227.682] FindResourceW (hModule=0xff6d0000, lpName=0xe01, lpType=0x6) returned 0x0
	[0227.682] FindResourceW (hModule=0x7fef8280000, lpName=0xe01, lpType=0x6) returned 0x1c00bf0
	[0227.682] LoadStringW (in: hInstance=0x7fef8280000, uID=0xe000, lpBuffer=0x24fa00, cchBufferMax=256 | out: lpBuffer="Microsoft Management Console") returned 0x1c
	[0227.683] wcscpy_s (in: _Destination=0x24f60e, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0227.683] wcscat_s (in: _Destination="mmc", _SizeInWords=0x104, _Source=".INI" | out: _Destination="mmc.INI") returned 0x0
	[0227.684] GetCurrentThreadId () returned 0x404
	[0227.684] SetWindowsHookExW (idHook=-1, lpfn=0x7fef83ecc6c, hmod=0x0, dwThreadId=0x404) returned 0x10006f
	[0229.317] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0229.317] malloc (_Size=0x4e) returned 0x656ec0
	[0229.317] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0229.319] free (_Block=0x0) 
	[0229.319] free (_Block=0x657c30) 
	[0229.319] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0x4) returned 0x3e06f8
	[0229.320] malloc (_Size=0x88) returned 0x65a3d0
	[0229.333] malloc (_Size=0x88) returned 0x65a460
	[0229.333] malloc (_Size=0x100) returned 0x6580c0
	[0229.333] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0x9) returned 0x3e0818
	[0229.333] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0230.355] malloc (_Size=0x400) returned 0xd1200
	[0230.440] GetCursorPos (in: lpPoint=0x7fef7fde498 | out: lpPoint=0x7fef7fde498*(x=838, y=444)) returned 1
	[0230.441] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x4a6300
	[0230.441] LocalReAlloc (hMem=0x435ed0, uBytes=0x28, uFlags=0x2) returned 0x4bde40
	[0230.441] GetCurrentThread () returned 0xfffffffffffffffe
	[0230.441] GetCurrentThreadId () returned 0x404
	[0230.441] malloc (_Size=0x80) returned 0xcf480
	[0230.441] SetErrorMode (uMode=0x0) returned 0x8001
	[0230.441] SetErrorMode (uMode=0x8001) returned 0x0
	[0230.441] GetModuleFileNameW (in: hModule=0x7fef7fc0000, lpFilename=0x24cb70, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\mycomput.dll" (normalized: "c:\\windows\\system32\\mycomput.dll")) returned 0x20
	[0230.441] wcscpy_s (in: _Destination=0x24cd80, _SizeInWords=0x104, _Source="mycomput" | out: _Destination="mycomput") returned 0x0
	[0230.442] FindResourceW (hModule=0x7fef7fc0000, lpName=0xe01, lpType=0x6) returned 0x0
	[0230.444] FindResourceW (hModule=0x7fef83a0000, lpName=0xe01, lpType=0x6) returned 0x6309b0
	[0230.444] LoadStringW (in: hInstance=0x7fef83a0000, uID=0xe000, lpBuffer=0x24cf90, cchBufferMax=256 | out: lpBuffer="") returned 0x0
	[0230.444] wcscpy_s (in: _Destination=0x24cba8, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0230.444] wcscat_s (in: _Destination="mycomput", _SizeInWords=0x104, _Source=".INI" | out: _Destination="mycomput.INI") returned 0x0
	[0230.445] malloc (_Size=0x80) returned 0xcf510
	[0230.445] malloc (_Size=0x40) returned 0x131640
	[0230.445] malloc (_Size=0x60) returned 0x1317d0
	[0230.445] malloc (_Size=0x2a) returned 0xce320
	[0230.445] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef7fd3d48, cbMultiByte=-1, lpWideCharStr=0xce32c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0230.446] free (_Block=0xce320) 
	[0231.252] GetCursorPos (in: lpPoint=0x7fef687a9f8 | out: lpPoint=0x7fef687a9f8*(x=838, y=444)) returned 1
	[0231.252] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x4a6f90
	[0231.252] LocalReAlloc (hMem=0x4bde40, uBytes=0x30, uFlags=0x2) returned 0x4bde40
	[0231.252] GetCurrentThread () returned 0xfffffffffffffffe
	[0231.252] GetCurrentThreadId () returned 0x404
	[0231.253] malloc (_Size=0x80) returned 0xcf5a0
	[0231.253] SetErrorMode (uMode=0x0) returned 0x8001
	[0231.253] SetErrorMode (uMode=0x8001) returned 0x0
	[0231.253] GetModuleFileNameW (in: hModule=0x7fef6820000, lpFilename=0x24cb70, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\filemgmt.dll" (normalized: "c:\\windows\\system32\\filemgmt.dll")) returned 0x20
	[0231.253] wcscpy_s (in: _Destination=0x24cd80, _SizeInWords=0x104, _Source="filemgmt" | out: _Destination="filemgmt") returned 0x0
	[0231.253] FindResourceW (hModule=0x7fef6820000, lpName=0xe01, lpType=0x6) returned 0x1e610b8
	[0231.254] LoadStringW (in: hInstance=0x7fef6820000, uID=0xe000, lpBuffer=0x24cf90, cchBufferMax=256 | out: lpBuffer="Shared Folders") returned 0xe
	[0231.254] wcscpy_s (in: _Destination=0x24cba8, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0231.254] wcscat_s (in: _Destination="filemgmt", _SizeInWords=0x104, _Source=".INI" | out: _Destination="filemgmt.INI") returned 0x0
	[0231.255] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1e60db8
	[0231.255] LoadStringW (in: hInstance=0x7fef6820000, uID=0x69, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Started") returned 0x7
	[0231.255] lstrlenW (lpString="Started") returned 7
	[0231.255] malloc (_Size=0x1c) returned 0x1317b0
	[0231.256] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1e60db8
	[0231.256] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6c, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Starting") returned 0x8
	[0231.256] lstrlenW (lpString="Starting") returned 8
	[0231.256] malloc (_Size=0x1e) returned 0x1317e0
	[0231.256] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1e60db8
	[0231.256] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6a, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Stopped") returned 0x7
	[0231.256] lstrlenW (lpString="Stopped") returned 7
	[0231.256] malloc (_Size=0x1c) returned 0x131c10
	[0231.256] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1e60db8
	[0231.256] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6d, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Stopping") returned 0x8
	[0231.256] lstrlenW (lpString="Stopping") returned 8
	[0231.256] malloc (_Size=0x1e) returned 0x131c40
	[0231.256] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1e60db8
	[0231.256] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6b, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Paused") returned 0x6
	[0231.256] lstrlenW (lpString="Paused") returned 6
	[0231.256] malloc (_Size=0x1a) returned 0x131c70
	[0231.256] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1e60db8
	[0231.256] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6e, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Pausing") returned 0x7
	[0231.257] lstrlenW (lpString="Pausing") returned 7
	[0231.257] malloc (_Size=0x1c) returned 0x131ca0
	[0231.257] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1e60db8
	[0231.257] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6f, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Resuming") returned 0x8
	[0231.257] lstrlenW (lpString="Resuming") returned 8
	[0231.257] malloc (_Size=0x1e) returned 0x131cd0
	[0231.257] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1e60db8
	[0231.257] LoadStringW (in: hInstance=0x7fef6820000, uID=0x64, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Boot") returned 0x4
	[0231.257] lstrlenW (lpString="Boot") returned 4
	[0231.257] malloc (_Size=0x16) returned 0x131810
	[0231.257] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1e60db8
	[0231.257] LoadStringW (in: hInstance=0x7fef6820000, uID=0x65, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="System") returned 0x6
	[0231.257] lstrlenW (lpString="System") returned 6
	[0231.257] malloc (_Size=0x1a) returned 0x131d00
	[0231.257] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1e60db8
	[0231.257] LoadStringW (in: hInstance=0x7fef6820000, uID=0x66, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Automatic") returned 0x9
	[0231.257] lstrlenW (lpString="Automatic") returned 9
	[0231.257] malloc (_Size=0x20) returned 0x131d30
	[0231.258] FindResourceW (hModule=0x7fef6820000, lpName=0x3d, lpType=0x6) returned 0x1e60e98
	[0231.258] LoadStringW (in: hInstance=0x7fef6820000, uID=0x3cd, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Automatic (Delayed Start)") returned 0x19
	[0231.258] lstrlenW (lpString="Automatic (Delayed Start)") returned 25
	[0231.258] malloc (_Size=0x40) returned 0x131d60
	[0231.258] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1e60db8
	[0231.258] LoadStringW (in: hInstance=0x7fef6820000, uID=0x67, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Manual") returned 0x6
	[0231.258] lstrlenW (lpString="Manual") returned 6
	[0231.258] malloc (_Size=0x1a) returned 0x131db0
	[0231.258] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1e60db8
	[0231.258] LoadStringW (in: hInstance=0x7fef6820000, uID=0x68, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Disabled") returned 0x8
	[0231.258] lstrlenW (lpString="Disabled") returned 8
	[0231.258] malloc (_Size=0x1e) returned 0x131de0
	[0231.258] FindResourceW (hModule=0x7fef6820000, lpName=0xb, lpType=0x6) returned 0x1e60df8
	[0231.258] LoadStringW (in: hInstance=0x7fef6820000, uID=0xa0, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Local System") returned 0xc
	[0231.258] lstrlenW (lpString="Local System") returned 12
	[0231.258] malloc (_Size=0x26) returned 0x131e10
	[0231.259] FindResourceW (hModule=0x7fef6820000, lpName=0xb, lpType=0x6) returned 0x1e60df8
	[0231.259] LoadStringW (in: hInstance=0x7fef6820000, uID=0xa1, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Local Service") returned 0xd
	[0231.259] lstrlenW (lpString="Local Service") returned 13
	[0231.259] malloc (_Size=0x28) returned 0x65b000
	[0231.259] FindResourceW (hModule=0x7fef6820000, lpName=0xb, lpType=0x6) returned 0x1e60df8
	[0231.259] LoadStringW (in: hInstance=0x7fef6820000, uID=0xa2, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Network Service") returned 0xf
	[0231.259] lstrlenW (lpString="Network Service") returned 15
	[0231.259] malloc (_Size=0x2c) returned 0xce2e0
	[0231.259] FindResourceW (hModule=0x7fef6820000, lpName=0x8, lpType=0x6) returned 0x1e60dc8
	[0231.259] LoadStringW (in: hInstance=0x7fef6820000, uID=0x70, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="(Unknown)") returned 0x9
	[0231.259] lstrlenW (lpString="(Unknown)") returned 9
	[0231.259] malloc (_Size=0x20) returned 0x65b030
	[0231.260] FindResourceW (hModule=0x7fef6820000, lpName=0x1, lpType=0x6) returned 0x1e60da8
	[0231.260] LoadStringW (in: hInstance=0x7fef6820000, uID=0x3, lpBuffer=0x24cf50, cchBufferMax=256 | out: lpBuffer="Local Computer") returned 0xe
	[0231.260] lstrlenW (lpString="Local Computer") returned 14
	[0231.260] malloc (_Size=0x2a) returned 0xce320
	[0231.260] lstrlenW (lpString="NT AUTHORITY\\LocalService") returned 25
	[0231.260] malloc (_Size=0x40) returned 0x131e40
	[0231.260] lstrlenW (lpString="NT AUTHORITY\\NetworkService") returned 27
	[0231.260] malloc (_Size=0x44) returned 0x131e90
	[0231.260] lstrlenW (lpString="NT AUTHORITY\\Local Service") returned 26
	[0231.260] malloc (_Size=0x42) returned 0x65b800
	[0231.260] lstrlenW (lpString="NT AUTHORITY\\Network Service") returned 28
	[0231.260] malloc (_Size=0x46) returned 0x65b850
	[0231.261] malloc (_Size=0x80) returned 0xcf630
	[0231.268] malloc (_Size=0x40) returned 0x65b8a0
	[0231.268] malloc (_Size=0x80) returned 0xcf6c0
	[0231.268] malloc (_Size=0x38) returned 0xce3a0
	[0231.268] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d578, cbMultiByte=-1, lpWideCharStr=0xce3ac, cchWideChar=22 | out: lpWideCharStr="Microsoft Corporation") returned 22
	[0231.268] malloc (_Size=0x2a) returned 0xce3e0
	[0231.268] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d590, cbMultiByte=-1, lpWideCharStr=0xce3ec, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0231.269] free (_Block=0xce3e0) 
	[0231.269] free (_Block=0xce3a0) 
	[0231.271] malloc (_Size=0x40) returned 0x65b8f0
	[0231.271] malloc (_Size=0x80) returned 0xcf6c0
	[0231.271] malloc (_Size=0x38) returned 0xce3e0
	[0231.271] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d578, cbMultiByte=-1, lpWideCharStr=0xce3ec, cchWideChar=22 | out: lpWideCharStr="Microsoft Corporation") returned 22
	[0231.272] malloc (_Size=0x2a) returned 0xce420
	[0231.272] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d590, cbMultiByte=-1, lpWideCharStr=0xce42c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0231.272] free (_Block=0xce420) 
	[0231.273] free (_Block=0xce3e0) 
	[0234.541] malloc (_Size=0x2e) returned 0xce420
	[0234.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce42c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.541] malloc (_Size=0x2e) returned 0xce3e0
	[0234.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce3ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.541] malloc (_Size=0x2e) returned 0xce360
	[0234.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce36c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.541] malloc (_Size=0x2e) returned 0xce4e0
	[0234.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce4ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.541] malloc (_Size=0x2e) returned 0xce520
	[0234.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce52c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.541] malloc (_Size=0x2e) returned 0xce560
	[0234.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce56c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.541] malloc (_Size=0x2e) returned 0xce5a0
	[0234.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce5ac, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.541] malloc (_Size=0x2e) returned 0xce5e0
	[0234.541] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce5ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.542] GetCursorPos (in: lpPoint=0x7fef409b4b8 | out: lpPoint=0x7fef409b4b8*(x=652, y=879)) returned 1
	[0234.542] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x4be7d0
	[0234.542] LocalReAlloc (hMem=0x4bde40, uBytes=0x38, uFlags=0x2) returned 0x4a7b90
	[0234.542] GetCurrentThread () returned 0xfffffffffffffffe
	[0234.542] GetCurrentThreadId () returned 0x404
	[0234.542] FindResourceW (hModule=0x0, lpName=0xd0a, lpType=0x6) returned 0x0
	[0234.542] lstrlenW (lpString="") returned 0
	[0234.543] malloc (_Size=0x2e) returned 0xce620
	[0234.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce62c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.543] malloc (_Size=0x2e) returned 0xce660
	[0234.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce66c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.543] malloc (_Size=0x2e) returned 0xce6a0
	[0234.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce6ac, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.543] malloc (_Size=0x2e) returned 0xce6e0
	[0234.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce6ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.543] malloc (_Size=0x2e) returned 0xce720
	[0234.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce72c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.543] malloc (_Size=0x2e) returned 0xce760
	[0234.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce76c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.543] malloc (_Size=0x2e) returned 0xce7a0
	[0234.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce7ac, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.543] malloc (_Size=0x2e) returned 0xce7e0
	[0234.543] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce7ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.543] malloc (_Size=0x2e) returned 0xce820
	[0234.544] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce82c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.544] malloc (_Size=0x2e) returned 0xce860
	[0234.544] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce86c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.544] malloc (_Size=0x2e) returned 0xce8a0
	[0234.544] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce8ac, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.544] malloc (_Size=0x2e) returned 0xce8e0
	[0234.544] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce8ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.544] malloc (_Size=0x2e) returned 0xce920
	[0234.544] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0xce92c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.544] malloc (_Size=0x80) returned 0xcf6c0
	[0234.544] SetErrorMode (uMode=0x0) returned 0x8001
	[0234.544] SetErrorMode (uMode=0x8001) returned 0x0
	[0234.544] GetModuleFileNameW (in: hModule=0x7fef4060000, lpFilename=0x24cb70, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\dmdskmgr.dll" (normalized: "c:\\windows\\system32\\dmdskmgr.dll")) returned 0x20
	[0234.544] wcscpy_s (in: _Destination=0x24cd80, _SizeInWords=0x104, _Source="dmdskmgr" | out: _Destination="dmdskmgr") returned 0x0
	[0234.545] FindResourceW (hModule=0x7fef4060000, lpName=0xe01, lpType=0x6) returned 0x0
	[0234.545] FindResourceW (hModule=0x7fef83a0000, lpName=0xe01, lpType=0x6) returned 0x6309b0
	[0234.545] LoadStringW (in: hInstance=0x7fef83a0000, uID=0xe000, lpBuffer=0x24cf90, cchBufferMax=256 | out: lpBuffer="") returned 0x0
	[0234.545] wcscpy_s (in: _Destination=0x24cba8, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0234.545] wcscat_s (in: _Destination="dmdskmgr", _SizeInWords=0x104, _Source=".INI" | out: _Destination="dmdskmgr.INI") returned 0x0
	[0234.545] free (_Block=0x0) 
	[0234.545] free (_Block=0x65b0c0) 
	[0234.547] malloc (_Size=0x80) returned 0xcf750
	[0234.548] GetLastError () returned 0x0
	[0234.548] SetLastError (dwErrCode=0x0) 
	[0234.548] GetLastError () returned 0x0
	[0234.548] SetLastError (dwErrCode=0x0) 
	[0234.549] malloc (_Size=0x68) returned 0x65cbc0
	[0234.701] malloc (_Size=0x48) returned 0x65b940
	[0234.701] malloc (_Size=0x10) returned 0x132f30
	[0234.717] malloc (_Size=0x60) returned 0x65cbc0
	[0234.718] malloc (_Size=0x2a) returned 0xce460
	[0234.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef7fd3d48, cbMultiByte=-1, lpWideCharStr=0xce46c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0234.718] free (_Block=0xce460) 
	[0234.720] malloc (_Size=0x80) returned 0xcf7e0
	[0234.720] malloc (_Size=0x38) returned 0xce4a0
	[0234.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d578, cbMultiByte=-1, lpWideCharStr=0xce4ac, cchWideChar=22 | out: lpWideCharStr="Microsoft Corporation") returned 22
	[0234.720] malloc (_Size=0x2a) returned 0xce460
	[0234.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d590, cbMultiByte=-1, lpWideCharStr=0xce46c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0234.721] free (_Block=0xce460) 
	[0234.721] free (_Block=0xce4a0) 
	[0234.722] malloc (_Size=0x80) returned 0xcf7e0
	[0234.722] malloc (_Size=0x38) returned 0xce460
	[0234.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d578, cbMultiByte=-1, lpWideCharStr=0xce46c, cchWideChar=22 | out: lpWideCharStr="Microsoft Corporation") returned 22
	[0234.722] malloc (_Size=0x2a) returned 0xcea60
	[0234.722] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d590, cbMultiByte=-1, lpWideCharStr=0xcea6c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0234.723] free (_Block=0xcea60) 
	[0234.723] free (_Block=0xce460) 
	[0235.448] GetLastError () returned 0x36b7
	[0235.448] SetLastError (dwErrCode=0x36b7) 
	[0235.448] GetLastError () returned 0x0
	[0235.448] SetLastError (dwErrCode=0x0) 
	[0235.448] malloc (_Size=0x68) returned 0x65cbc0
	[0235.463] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0235.464] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x4aeca0
	[0235.464] malloc (_Size=0x38) returned 0xce120
	[0235.464] malloc (_Size=0x28) returned 0x65b300
	[0235.464] lstrlenW (lpString="Recent File List") returned 16
	[0235.464] malloc (_Size=0x2e) returned 0xce160
	[0235.464] lstrlenW (lpString="File%d") returned 6
	[0235.464] malloc (_Size=0x1a) returned 0x65b2d0
	[0235.464] malloc (_Size=0x20) returned 0x65b360
	[0235.464] swprintf_s (in: _Dst=0x65b360, _SizeInWords=0x10, _Format="File%d" | out: _Dst="File1") returned 5
	[0235.464] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0x24d810 | out: phkResult=0x24d810*=0x24c) returned 0x0
	[0235.464] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24d818, lpdwDisposition=0x24d808 | out: phkResult=0x24d818*=0x250, lpdwDisposition=0x24d808*=0x2) returned 0x0
	[0235.464] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24d7e0, lpdwDisposition=0x24d808 | out: phkResult=0x24d7e0*=0x258, lpdwDisposition=0x24d808*=0x2) returned 0x0
	[0235.464] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.464] RegCloseKey (hKey=0x250) returned 0x0
	[0235.464] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Recent File List", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24d878, lpdwDisposition=0x24d870 | out: phkResult=0x24d878*=0x250, lpdwDisposition=0x24d870*=0x2) returned 0x0
	[0235.464] RegCloseKey (hKey=0x258) returned 0x0
	[0235.465] RegQueryValueExW (in: hKey=0x250, lpValueName="File1", lpReserved=0x0, lpType=0x24d89c, lpData=0x0, lpcbData=0x24d898*=0xb8e0230 | out: lpType=0x24d89c*=0x1, lpData=0x0, lpcbData=0x24d898*=0x42) returned 0x0
	[0235.465] malloc (_Size=0x50) returned 0x131fd0
	[0235.465] RegQueryValueExW (in: hKey=0x250, lpValueName="File1", lpReserved=0x0, lpType=0x24d89c, lpData=0x131fdc, lpcbData=0x24d898*=0x42 | out: lpType=0x24d89c*=0x1, lpData="C:\\Windows\\system32\\compmgmt.msc", lpcbData=0x24d898*=0x42) returned 0x0
	[0235.465] RegCloseKey (hKey=0x250) returned 0x0
	[0235.465] swprintf_s (in: _Dst=0x65b360, _SizeInWords=0x10, _Format="File%d" | out: _Dst="File2") returned 5
	[0235.465] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0x24d810 | out: phkResult=0x24d810*=0x250) returned 0x0
	[0235.465] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24d818, lpdwDisposition=0x24d808 | out: phkResult=0x24d818*=0x258, lpdwDisposition=0x24d808*=0x2) returned 0x0
	[0235.465] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24d7e0, lpdwDisposition=0x24d808 | out: phkResult=0x24d7e0*=0x24c, lpdwDisposition=0x24d808*=0x2) returned 0x0
	[0235.465] RegCloseKey (hKey=0x250) returned 0x0
	[0235.465] RegCloseKey (hKey=0x258) returned 0x0
	[0235.465] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Recent File List", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24d878, lpdwDisposition=0x24d870 | out: phkResult=0x24d878*=0x258, lpdwDisposition=0x24d870*=0x2) returned 0x0
	[0235.465] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.465] RegQueryValueExW (in: hKey=0x258, lpValueName="File2", lpReserved=0x0, lpType=0x24d89c, lpData=0x0, lpcbData=0x24d898*=0x42 | out: lpType=0x24d89c*=0x0, lpData=0x0, lpcbData=0x24d898*=0x0) returned 0x2
	[0235.465] RegCloseKey (hKey=0x258) returned 0x0
	[0235.465] lstrlenW (lpString="") returned 0
	[0235.465] swprintf_s (in: _Dst=0x65b360, _SizeInWords=0x10, _Format="File%d" | out: _Dst="File3") returned 5
	[0235.465] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0x24d810 | out: phkResult=0x24d810*=0x258) returned 0x0
	[0235.465] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24d818, lpdwDisposition=0x24d808 | out: phkResult=0x24d818*=0x24c, lpdwDisposition=0x24d808*=0x2) returned 0x0
	[0235.465] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24d7e0, lpdwDisposition=0x24d808 | out: phkResult=0x24d7e0*=0x250, lpdwDisposition=0x24d808*=0x2) returned 0x0
	[0235.465] RegCloseKey (hKey=0x258) returned 0x0
	[0235.465] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.465] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Recent File List", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x7fe0002001f, lpSecurityAttributes=0x0, phkResult=0x24d878, lpdwDisposition=0x24d870 | out: phkResult=0x24d878*=0x24c, lpdwDisposition=0x24d870*=0x2) returned 0x0
	[0235.466] RegCloseKey (hKey=0x250) returned 0x0
	[0235.466] RegQueryValueExW (in: hKey=0x24c, lpValueName="File3", lpReserved=0x0, lpType=0x24d89c, lpData=0x0, lpcbData=0x24d898*=0x0 | out: lpType=0x24d89c*=0x0, lpData=0x0, lpcbData=0x24d898*=0x0) returned 0x2
	[0235.466] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.466] lstrlenW (lpString="") returned 0
	[0235.466] swprintf_s (in: _Dst=0x65b360, _SizeInWords=0x10, _Format="File%d" | out: _Dst="File4") returned 5
	[0235.466] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0x24d810 | out: phkResult=0x24d810*=0x24c) returned 0x0
	[0235.466] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24d818, lpdwDisposition=0x24d808 | out: phkResult=0x24d818*=0x250, lpdwDisposition=0x24d808*=0x2) returned 0x0
	[0235.466] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24d7e0, lpdwDisposition=0x24d808 | out: phkResult=0x24d7e0*=0x258, lpdwDisposition=0x24d808*=0x2) returned 0x0
	[0235.466] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.466] RegCloseKey (hKey=0x250) returned 0x0
	[0235.466] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Recent File List", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x7fe0002001f, lpSecurityAttributes=0x0, phkResult=0x24d878, lpdwDisposition=0x24d870 | out: phkResult=0x24d878*=0x250, lpdwDisposition=0x24d870*=0x2) returned 0x0
	[0235.466] RegCloseKey (hKey=0x258) returned 0x0
	[0235.466] RegQueryValueExW (in: hKey=0x250, lpValueName="File4", lpReserved=0x0, lpType=0x24d89c, lpData=0x0, lpcbData=0x24d898*=0x0 | out: lpType=0x24d89c*=0x0, lpData=0x0, lpcbData=0x24d898*=0x0) returned 0x2
	[0235.466] RegCloseKey (hKey=0x250) returned 0x0
	[0235.466] lstrlenW (lpString="") returned 0
	[0235.466] free (_Block=0x65b360) 
	[0235.466] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0x24f8b0 | out: phkResult=0x24f8b0*=0x250) returned 0x0
	[0235.466] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24f8b8, lpdwDisposition=0x24f8a8 | out: phkResult=0x24f8b8*=0x258, lpdwDisposition=0x24f8a8*=0x2) returned 0x0
	[0235.466] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24f880, lpdwDisposition=0x24f8a8 | out: phkResult=0x24f880*=0x24c, lpdwDisposition=0x24f8a8*=0x2) returned 0x0
	[0235.466] RegCloseKey (hKey=0x250) returned 0x0
	[0235.466] RegCloseKey (hKey=0x258) returned 0x0
	[0235.466] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Settings", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x24f918, lpdwDisposition=0x24f910 | out: phkResult=0x24f918*=0x258, lpdwDisposition=0x24f910*=0x2) returned 0x0
	[0235.467] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.467] RegQueryValueExW (in: hKey=0x258, lpValueName="PreviewPages", lpReserved=0x0, lpType=0x24f934, lpData=0x24f930, lpcbData=0x24f950*=0x4 | out: lpType=0x24f934*=0x0, lpData=0x24f930*=0xa8, lpcbData=0x24f950*=0x4) returned 0x2
	[0235.467] RegCloseKey (hKey=0x258) returned 0x0
	[0235.467] FindResourceW (hModule=0xff6d0000, lpName=0x9, lpType=0x6) returned 0x3e07e8
	[0235.467] LoadStringW (in: hInstance=0xff6d0000, uID=0x81, lpBuffer=0x24f6b0, cchBufferMax=256 | out: lpBuffer="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 0x6a
	[0235.467] lstrlenW (lpString="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 106
	[0235.467] malloc (_Size=0xe2) returned 0xcdfd0
	[0235.467] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0x4) returned 0x3e06f8
	[0235.467] LoadMenuW (hInstance=0xff6d0000, lpMenuName=0x81) returned 0x10187
	[0235.468] LoadAcceleratorsW (hInstance=0xff6d0000, lpTableName=0x81) returned 0x70155
	[0235.468] malloc (_Size=0x100) returned 0x65e790
	[0235.469] SetRectEmpty (in: lprc=0x1cb1600 | out: lprc=0x1cb1600) returned 1
	[0235.469] malloc (_Size=0x18) returned 0x132f50
	[0235.469] FindResourceW (hModule=0xff6d0000, lpName=0x9, lpType=0x6) returned 0x3e07e8
	[0235.469] LoadStringW (in: hInstance=0xff6d0000, uID=0x80, lpBuffer=0x24f670, cchBufferMax=256 | out: lpBuffer="Microsoft Management Console") returned 0x1c
	[0235.469] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0235.469] malloc (_Size=0x46) returned 0x65bd50
	[0235.469] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0235.470] malloc (_Size=0x46) returned 0x65bd00
	[0235.470] FindResourceW (hModule=0xff6d0000, lpName=0x7a02, lpType=0xe) returned 0x0
	[0235.470] FindResourceW (hModule=0x7fef8280000, lpName=0x7a02, lpType=0xe) returned 0x0
	[0235.470] FindResourceW (hModule=0x7fef83a0000, lpName=0x7a02, lpType=0xe) returned 0x0
	[0235.470] LoadIconW (hInstance=0xff6d0000, lpIconName=0x7a02) returned 0x0
	[0235.470] LoadIconW (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0235.470] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="AfxFrameOrView42u", lpWndClass=0x24f7a0 | out: lpWndClass=0x24f7a0) returned 0
	[0235.470] RegisterClassW (lpWndClass=0x24f830) returned 0xc156
	[0235.471] FindResourceW (hModule=0xff6d0000, lpName=0x80, lpType=0xe) returned 0xff897938
	[0235.471] LoadIconW (hInstance=0xff6d0000, lpIconName=0x80) returned 0x1018f
	[0235.471] FindResourceW (hModule=0xff6d0000, lpName=0x7a01, lpType=0xe) returned 0x0
	[0235.471] FindResourceW (hModule=0x7fef8280000, lpName=0x7a01, lpType=0xe) returned 0x0
	[0235.471] FindResourceW (hModule=0x7fef83a0000, lpName=0x7a01, lpType=0xe) returned 0x0
	[0235.472] LoadIconW (hInstance=0xff6d0000, lpIconName=0x7a01) returned 0x0
	[0235.472] LoadIconW (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0235.472] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="AfxMDIFrame42u", lpWndClass=0x24f600 | out: lpWndClass=0x24f600) returned 0
	[0235.472] RegisterClassW (lpWndClass=0x24f690) returned 0xc158
	[0235.472] FindResourceW (hModule=0xff6d0000, lpName=0x80, lpType=0xe) returned 0xff897938
	[0235.472] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCMainFrame", lpWndClass=0x24f6c0 | out: lpWndClass=0x24f6c0) returned 0
	[0235.472] RegisterClassW (lpWndClass=0x24f770) returned 0xc159
	[0235.472] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCMainFrame", lpWndClass=0x24f7f0 | out: lpWndClass=0x24f7f0) returned 1
	[0235.473] FindResourceW (hModule=0xff6d0000, lpName=0x80, lpType=0x4) returned 0x3e06e8
	[0235.473] LoadMenuW (hInstance=0xff6d0000, lpMenuName=0x80) returned 0x10191
	[0235.473] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0235.473] GetCurrentThreadId () returned 0x404
	[0235.473] SetWindowsHookExW (idHook=5, lpfn=0x7fef83aec30, hmod=0x0, dwThreadId=0x404) returned 0x10197
	[0235.473] CreateWindowExW (dwExStyle=0x0, lpClassName="MMCMainFrame", lpWindowName="Microsoft Management Console", dwStyle=0xcf0000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x10191, hInstance=0xff6d0000, lpParam=0x0) returned 0xa016e
	[0235.474] malloc (_Size=0x88) returned 0xcf120
	[0235.474] malloc (_Size=0x88) returned 0xcf1b0
	[0235.475] malloc (_Size=0x100) returned 0x65e8a0
	[0235.475] GetParent (hWnd=0xa016e) returned 0x0
	[0235.691] SetWindowLongPtrW (hWnd=0xa016e, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0235.691] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0xa016e, lParam=0x24f0c0) returned 0x0
	[0235.833] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x0, uMsg=0x81, wParam=0x0, lParam=0x24f1a0) returned 0x1
	[0235.833] GetWindowLongPtrW (hWnd=0x20166, nIndex=-4) returned 0x77bf6630
	[0235.833] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x0
	[0235.833] SetPropW (hWnd=0x20166, lpString="AfxOldWndProc423", hData=0x77bf6630) returned 1
	[0235.833] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0235.833] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0235.833] SetWindowLongPtrW (hWnd=0x20166, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x77bf6630
	[0235.833] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x20166, lParam=0x24f0c0) returned 0x0
	[0235.833] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0235.834] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20166, Msg=0x81, wParam=0x0, lParam=0x24f1a0) returned 0x1
	[0235.834] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0235.834] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20166, Msg=0x83, wParam=0x0, lParam=0x24f210) returned 0x0
	[0235.834] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0235.834] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20166, Msg=0x1, wParam=0x0, lParam=0x24f1a0) returned 0x0
	[0235.834] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0235.834] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20166, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0235.834] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0235.834] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20166, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0235.834] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0235.834] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20166, Msg=0x287, wParam=0x21, lParam=0x0) returned 0x0
	[0235.835] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x0, uMsg=0x83, wParam=0x0, lParam=0x24f210) returned 0x0
	[0236.162] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x0, uMsg=0x93, wParam=0x0, lParam=0x24eac0) returned 0x1
	[0236.162] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x0, uMsg=0x94, wParam=0x0, lParam=0x24ea60) returned 0x0
	[0236.172] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x0, uMsg=0x94, wParam=0x0, lParam=0x24ea60) returned 0x0
	[0236.173] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x0, uMsg=0x1, wParam=0x0, lParam=0x24f150) returned 0x0
	[0236.173] GetMenu (hWnd=0xa016e) returned 0x10191
	[0236.285] malloc (_Size=0x410) returned 0x1336e0
	[0236.285] malloc (_Size=0x38) returned 0xce1a0
	[0236.285] malloc (_Size=0x70) returned 0xd10f0
	[0236.286] GetMenuItemCount (hMenu=0x10191) returned 2
	[0236.286] GetSubMenu (hMenu=0x10191, nPos=0) returned 0x10193
	[0236.286] CreateWindowExW (dwExStyle=0x200, lpClassName="mdiclient", lpWindowName=0x0, dwStyle=0x56000001, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xa016e, hMenu=0xe900, hInstance=0xff6d0000, lpParam=0x24ec10) returned 0x50168
	[0236.406] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x50168, lParam=0x24e500) returned 0x0
	[0236.407] GetParent (hWnd=0x50168) returned 0xa016e
	[0236.407] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x0, uMsg=0x210, wParam=0xffffffffe9000001, lParam=0x50168) returned 0x0
	[0236.408] BringWindowToTop (hWnd=0x50168) returned 1
	[0236.408] PostMessageW (hWnd=0xa016e, Msg=0x362, wParam=0xe001, lParam=0x0) returned 1
	[0236.408] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0236.408] GetClientRect (in: hWnd=0xa016e, lpRect=0x24eb78 | out: lpRect=0x24eb78) returned 1
	[0236.408] BeginDeferWindowPos (nNumWindows=8) returned 0x60123
	[0236.408] GetTopWindow (hWnd=0xa016e) returned 0x50168
	[0236.408] GetDlgCtrlID (hWnd=0x50168) returned 59648
	[0236.408] GetWindow (hWnd=0x50168, uCmd=0x2) returned 0x0
	[0236.408] malloc (_Size=0x2010) returned 0x133b00
	[0236.409] malloc (_Size=0x38) returned 0xce1e0
	[0236.409] malloc (_Size=0x70) returned 0x65cbc0
	[0236.409] GetParent (hWnd=0x50168) returned 0xa016e
	[0236.409] GetWindowLongW (hWnd=0x50168, nIndex=-20) returned 512
	[0236.409] GetWindowLongW (hWnd=0x50168, nIndex=-16) returned 1442840577
	[0236.409] AdjustWindowRectEx (in: lpRect=0x24eb78, dwStyle=0x56000001, bMenu=0, dwExStyle=0x0 | out: lpRect=0x24eb78) returned 1
	[0236.409] GetParent (hWnd=0x50168) returned 0xa016e
	[0236.409] GetWindowRect (in: hWnd=0x50168, lpRect=0x24eb30 | out: lpRect=0x24eb30) returned 1
	[0236.409] ScreenToClient (in: hWnd=0xa016e, lpPoint=0x24eb30 | out: lpPoint=0x24eb30) returned 1
	[0236.409] ScreenToClient (in: hWnd=0xa016e, lpPoint=0x24eb38 | out: lpPoint=0x24eb38) returned 1
	[0236.409] EqualRect (lprc1=0x24eb30, lprc2=0x24eb78) returned 0
	[0236.409] DeferWindowPos (hWinPosInfo=0x60123, hWnd=0x50168, hWndInsertAfter=0x0, x=0, y=0, cx=1064, cy=567, uFlags=0x14) returned 0x60123
	[0236.409] EndDeferWindowPos (hWinPosInfo=0x60123) returned 1
	[0236.410] GetParent (hWnd=0x50168) returned 0xa016e
	[0236.410] SetWindowLongPtrW (hWnd=0x50168, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77c3824c
	[0236.410] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="AfxWnd42u", lpWndClass=0x24e930 | out: lpWndClass=0x24e930) returned 0
	[0236.411] RegisterClassW (lpWndClass=0x24e9c0) returned 0xc15b
	[0236.411] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="SizeableRebar", lpWndClass=0x24e9f0 | out: lpWndClass=0x24e9f0) returned 0
	[0236.411] RegisterClassW (lpWndClass=0x24ea80) returned 0xc15c
	[0236.411] CreateWindowExW (dwExStyle=0x0, lpClassName="SizeableRebar", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xa016e, hMenu=0x341d, hInstance=0xff6d0000, lpParam=0x0) returned 0xb0150
	[0236.411] GetParent (hWnd=0xb0150) returned 0x10012
	[0236.411] SetWindowLongPtrW (hWnd=0xb0150, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0236.412] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0xb0150, lParam=0x24e430) returned 0x0
	[0236.412] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x81, wParam=0x0, lParam=0x24e510) returned 0x1
	[0236.413] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x83, wParam=0x0, lParam=0x24e580) returned 0x0
	[0236.413] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x1, wParam=0x0, lParam=0x24e510) returned 0x0
	[0236.413] CreateWindowExW (dwExStyle=0x80, lpClassName="ReBarWindow32", lpWindowName=0x0, dwStyle=0x50802648, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xb0150, hMenu=0x1000, hInstance=0xff6d0000, lpParam=0x0) returned 0xd0154
	[0236.414] GetParent (hWnd=0xd0154) returned 0x10012
	[0236.414] SetWindowLongPtrW (hWnd=0xd0154, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6a9350
	[0236.414] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0xd0154, lParam=0x24d790) returned 0x0
	[0236.414] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x81, wParam=0x0, lParam=0x24d870) returned 0x1
	[0236.415] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x55, wParam=0xd0154, lParam=0x3) returned 0x2
	[0236.416] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
	[0236.417] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x24ce20) returned 0x0
	[0236.417] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x24ce20) returned 0x0
	[0236.418] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x46, wParam=0x0, lParam=0x24ccd0) returned 0x0
	[0236.419] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0236.419] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x24cee0) returned 0x0
	[0236.419] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x24cee0) returned 0x0
	[0236.420] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x83, wParam=0x0, lParam=0x24d8e0) returned 0x0
	[0236.421] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x1, wParam=0x0, lParam=0x24d870) returned 0x0
	[0236.421] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x415, wParam=0x0, lParam=0x0) returned 0xffffffff
	[0236.422] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x413, wParam=0x0, lParam=0xf0f0f0) returned 0xffffffff
	[0236.422] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0236.422] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0236.423] GetActiveWindow () returned 0x0
	[0236.423] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x46, wParam=0x0, lParam=0x24d070) returned 0x0
	[0236.424] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0236.424] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0236.425] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x210, wParam=0x10000001, lParam=0xd0154) returned 0x0
	[0236.426] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0236.426] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x404, wParam=0x0, lParam=0x24dfc8) returned 0x1
	[0236.427] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0236.427] MoveWindow (hWnd=0xd0154, X=0, Y=0, nWidth=0, nHeight=-6, bRepaint=1) returned 1
	[0236.427] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x46, wParam=0x0, lParam=0x24e010) returned 0x0
	[0236.428] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0236.429] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x210, wParam=0x341d0001, lParam=0xb0150) returned 0x0
	[0236.429] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0236.429] malloc (_Size=0x100) returned 0x65eac0
	[0236.429] malloc (_Size=0x100) returned 0x65ebd0
	[0236.430] malloc (_Size=0x18) returned 0x132f30
	[0236.430] malloc (_Size=0x20) returned 0x65b360
	[0236.430] CreateWindowExW (dwExStyle=0x84, lpClassName="ToolbarWindow32", lpWindowName=0x0, dwStyle=0x56001844, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xb0150, hMenu=0x1001, hInstance=0xff6d0000, lpParam=0x0) returned 0xb0062
	[0236.430] GetParent (hWnd=0xb0062) returned 0x10012
	[0236.430] SetWindowLongPtrW (hWnd=0xb0062, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6802fc
	[0236.430] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0xb0062, lParam=0x24e360) returned 0x0
	[0236.567] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x81, wParam=0x0, lParam=0x24e440) returned 0x1
	[0236.825] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x55, wParam=0xb0062, lParam=0x3) returned 0x2
	[0236.826] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
	[0236.827] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x24de90) returned 0x0
	[0236.827] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x24de90) returned 0x0
	[0236.828] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x83, wParam=0x0, lParam=0x24e4b0) returned 0x0
	[0236.829] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x1, wParam=0x0, lParam=0x24e440) returned 0x0
	[0236.829] SendMessageW (hWnd=0xb0062, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0236.829] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0236.869] malloc (_Size=0x70) returned 0x131830
	[0236.869] malloc (_Size=0x18) returned 0x132f70
	[0236.869] malloc (_Size=0x20) returned 0x65b330
	[0236.869] malloc (_Size=0x20) returned 0x65b270
	[0236.869] malloc (_Size=0x18) returned 0x132f90
	[0236.869] malloc (_Size=0x18) returned 0x132fb0
	[0236.869] malloc (_Size=0x10) returned 0x132fd0
	[0236.869] malloc (_Size=0x20) returned 0x65b2a0
	[0237.203] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0237.204] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0237.204] GetWindowLongW (hWnd=0xb0062, nIndex=-20) returned 132
	[0237.204] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0237.205] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x43c, wParam=0x1, lParam=0x0) returned 0x1
	[0237.205] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.206] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.206] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.206] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.207] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.207] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.208] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.208] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.209] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x415, wParam=0x0, lParam=0x24eb40) returned 0x1
	[0237.209] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x440, wParam=0x5404, lParam=0x24ec20) returned 0x1
	[0237.210] malloc (_Size=0x88) returned 0xcf240
	[0237.210] malloc (_Size=0x88) returned 0xcf2d0
	[0237.210] malloc (_Size=0x100) returned 0x65ef00
	[0237.210] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x30, wParam=0x50a01de, lParam=0x0) returned 0x1
	[0237.210] GetWindowDC (hWnd=0xb0062) returned 0x8010666
	[0237.211] malloc (_Size=0x88) returned 0xcf360
	[0237.211] malloc (_Size=0x88) returned 0xcf3f0
	[0237.211] malloc (_Size=0x100) returned 0x65f010
	[0237.211] SelectObject (hdc=0x8010666, h=0x50a01de) returned 0x18a002e
	[0237.211] malloc (_Size=0x410) returned 0x65a540
	[0237.211] malloc (_Size=0x38) returned 0xce220
	[0237.211] malloc (_Size=0x70) returned 0x1318b0
	[0237.212] SelectObject (hdc=0x8010666, h=0x18a002e) returned 0x50a01de
	[0237.212] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x420, wParam=0x0, lParam=0x100000) returned 0x1
	[0237.212] free (_Block=0xcf3f0) 
	[0237.212] free (_Block=0x65f010) 
	[0237.212] ReleaseDC (hWnd=0xb0062, hDC=0x8010666) returned 1
	[0237.212] malloc (_Size=0xb0) returned 0x65fdf0
	[0237.212] malloc (_Size=0x18) returned 0x132fd0
	[0237.213] CreateWindowExW (dwExStyle=0x0, lpClassName="AfxWnd42u", lpWindowName=0x0, dwStyle=0x4000001b, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xb0062, hMenu=0x2001, hInstance=0xff6d0000, lpParam=0x0) returned 0x1017e
	[0237.213] GetParent (hWnd=0x1017e) returned 0x10012
	[0237.213] SetWindowLongPtrW (hWnd=0x1017e, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0237.213] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1017e, lParam=0x24e2f0) returned 0x0
	[0237.214] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1017e, Msg=0x81, wParam=0x0, lParam=0x24e3d0) returned 0x1
	[0237.214] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1017e, Msg=0x83, wParam=0x0, lParam=0x24e440) returned 0x0
	[0237.215] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1017e, Msg=0x1, wParam=0x0, lParam=0x24e3d0) returned 0x0
	[0237.215] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1017e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0237.216] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1017e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0237.216] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x210, wParam=0x20010001, lParam=0x1017e) returned 0x0
	[0237.217] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x40a, wParam=0xffffffffffffffff, lParam=0x24eb20) returned 0x1
	[0237.217] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x46, wParam=0x0, lParam=0x24e000) returned 0x0
	[0237.218] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.218] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.219] GetActiveWindow () returned 0x0
	[0237.219] GetWindowLongW (hWnd=0x1017e, nIndex=-16) returned 1073741851
	[0237.220] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1017e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.220] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1017e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0237.220] SetWindowPos (hWnd=0x1017e, hWndInsertAfter=0x0, X=0, Y=0, cx=10, cy=10, uFlags=0x16) returned 1
	[0237.221] GetWindowLongW (hWnd=0x1017e, nIndex=-16) returned 1342177307
	[0237.221] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1017e, Msg=0x83, wParam=0x1, lParam=0x24e930) returned 0x0
	[0237.222] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1017e, Msg=0x47, wParam=0x0, lParam=0x24e960) returned 0x0
	[0237.222] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1017e, Msg=0x5, wParam=0x0, lParam=0x130039) returned 0x0
	[0237.223] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x410, wParam=0x2001, lParam=0x0) returned 0x0
	[0237.223] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x40b, wParam=0x0, lParam=0x24ea40) returned 0x1
	[0237.224] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x46, wParam=0x0, lParam=0x24e040) returned 0x0
	[0237.224] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.224] ShowWindow (hWnd=0x1017e, nCmdShow=0) returned 1
	[0237.225] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1017e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
	[0237.225] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x40c, wParam=0x0, lParam=0x0) returned 0x1
	[0237.226] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x41c, wParam=0x0, lParam=0x24ea70) returned 0x1
	[0237.226] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x43a, wParam=0x0, lParam=0x0) returned 0x16001c
	[0237.227] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x40a, wParam=0xffffffffffffffff, lParam=0x24eb20) returned 0x1
	[0237.227] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
	[0237.228] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x46, wParam=0x0, lParam=0x24e1f0) returned 0x0
	[0237.228] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.229] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0237.229] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.229] GetParent (hWnd=0xa016e) returned 0x0
	[0237.230] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.230] SendMessageW (hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.230] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.231] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x4e, wParam=0x1000, lParam=0x24e280) returned 0x0
	[0237.231] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x46, wParam=0x0, lParam=0x24e1f0) returned 0x0
	[0237.232] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x83, wParam=0x1, lParam=0x24e1c0) returned 0x0
	[0237.232] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.233] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x47, wParam=0x0, lParam=0x24e1f0) returned 0x0
	[0237.233] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x3, wParam=0x0, lParam=0x2) returned 0x0
	[0237.234] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x5, wParam=0x0, lParam=0x160000) returned 0x0
	[0237.234] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x46, wParam=0x0, lParam=0x24e200) returned 0x0
	[0237.235] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x83, wParam=0x1, lParam=0x24e1d0) returned 0x0
	[0237.235] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.235] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x47, wParam=0x0, lParam=0x24e200) returned 0x0
	[0237.337] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x5, wParam=0x0, lParam=0x160000) returned 0x0
	[0237.337] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.337] GetActiveWindow () returned 0x0
	[0237.338] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.338] GetParent (hWnd=0xb0150) returned 0xa016e
	[0237.339] GetParent (hWnd=0xb0150) returned 0xa016e
	[0237.339] GetParent (hWnd=0xa016e) returned 0x0
	[0237.339] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x46, wParam=0x0, lParam=0x24da30) returned 0x0
	[0237.340] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x83, wParam=0x1, lParam=0x24da00) returned 0x0
	[0237.340] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x46, wParam=0x0, lParam=0x24da30) returned 0x0
	[0237.341] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x83, wParam=0x1, lParam=0x24da00) returned 0x0
	[0237.342] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x47, wParam=0x0, lParam=0x24da30) returned 0x0
	[0237.342] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x5, wParam=0x0, lParam=0x1c0428) returned 0x0
	[0237.342] MoveWindow (hWnd=0xd0154, X=0, Y=0, nWidth=1064, nHeight=22, bRepaint=1) returned 1
	[0237.343] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x46, wParam=0x0, lParam=0x24cdd0) returned 0x0
	[0237.343] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x83, wParam=0x1, lParam=0x24cda0) returned 0x0
	[0237.344] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x47, wParam=0x0, lParam=0x24cdd0) returned 0x0
	[0237.344] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x5, wParam=0x0, lParam=0x160428) returned 0x0
	[0237.344] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.345] GetActiveWindow () returned 0x0
	[0237.346] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x47, wParam=0x0, lParam=0x24da30) returned 0x0
	[0237.346] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x3, wParam=0x0, lParam=0x1e0002) returned 0x0
	[0237.347] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x5, wParam=0x0, lParam=0x2170424) returned 0x0
	[0237.347] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.348] GetParent (hWnd=0xa016e) returned 0x0
	[0237.348] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.348] SendMessageW (hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.349] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.349] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x4e, wParam=0x1000, lParam=0x24e280) returned 0x0
	[0237.350] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x46, wParam=0x0, lParam=0x24e1f0) returned 0x0
	[0237.350] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x83, wParam=0x1, lParam=0x24e1c0) returned 0x0
	[0237.350] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.351] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x47, wParam=0x0, lParam=0x24e1f0) returned 0x0
	[0237.351] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x5, wParam=0x0, lParam=0x160426) returned 0x0
	[0237.352] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x46, wParam=0x0, lParam=0x24e200) returned 0x0
	[0237.352] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.353] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.353] GetActiveWindow () returned 0x0
	[0237.354] malloc (_Size=0x18) returned 0x132ff0
	[0237.354] malloc (_Size=0x18) returned 0x133010
	[0237.354] CreateWindowExW (dwExStyle=0x84, lpClassName="ToolbarWindow32", lpWindowName=0x0, dwStyle=0x56000944, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xb0150, hMenu=0x1002, hInstance=0xff6d0000, lpParam=0x0) returned 0x10184
	[0237.355] GetParent (hWnd=0x10184) returned 0x10012
	[0237.355] SetWindowLongPtrW (hWnd=0x10184, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6802fc
	[0237.355] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10184, lParam=0x24e2c0) returned 0x0
	[0237.356] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x81, wParam=0x0, lParam=0x24e3a0) returned 0x1
	[0237.356] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x55, wParam=0x10184, lParam=0x3) returned 0x2
	[0237.357] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0237.358] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x24ddf0) returned 0x0
	[0237.359] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x24ddf0) returned 0x0
	[0237.360] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x83, wParam=0x0, lParam=0x24e410) returned 0x0
	[0237.360] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x1, wParam=0x0, lParam=0x24e3a0) returned 0x0
	[0237.360] SendMessageW (hWnd=0x10184, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0237.361] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0237.361] malloc (_Size=0x70) returned 0x131930
	[0237.361] malloc (_Size=0x18) returned 0x133030
	[0237.361] malloc (_Size=0x20) returned 0x65b0c0
	[0237.361] malloc (_Size=0x18) returned 0x133050
	[0237.362] malloc (_Size=0x18) returned 0x133070
	[0237.362] malloc (_Size=0x10) returned 0x133090
	[0237.363] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0237.363] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0237.363] GetWindowLongW (hWnd=0x10184, nIndex=-20) returned 132
	[0237.364] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0237.364] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x43c, wParam=0x1, lParam=0x0) returned 0x1
	[0237.365] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x2007, wParam=0x5, lParam=0x0) returned 0x6
	[0237.365] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x40c, wParam=0x0, lParam=0x0) returned 0x2
	[0237.365] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x41c, wParam=0x0, lParam=0x24ea70) returned 0x1
	[0237.366] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x41c, wParam=0x1, lParam=0x24ea70) returned 0x1
	[0237.366] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x43a, wParam=0x0, lParam=0x0) returned 0x160017
	[0237.367] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x40a, wParam=0xffffffffffffffff, lParam=0x24eb20) returned 0x1
	[0237.367] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
	[0237.368] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x46, wParam=0x0, lParam=0x24e1f0) returned 0x0
	[0237.368] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.369] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0237.369] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.369] GetParent (hWnd=0xa016e) returned 0x0
	[0237.370] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.370] SendMessageW (hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.370] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.371] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x4e, wParam=0x1000, lParam=0x24e280) returned 0x0
	[0237.371] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.372] GetParent (hWnd=0xa016e) returned 0x0
	[0237.372] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.372] SendMessageW (hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.373] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.373] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x4e, wParam=0x1000, lParam=0x24e280) returned 0x0
	[0237.374] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x46, wParam=0x0, lParam=0x24e1f0) returned 0x0
	[0237.374] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x46, wParam=0x0, lParam=0x24e1f0) returned 0x0
	[0237.375] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x83, wParam=0x1, lParam=0x24e1c0) returned 0x0
	[0237.379] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.491] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x47, wParam=0x0, lParam=0x24e1f0) returned 0x0
	[0237.529] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x3, wParam=0x0, lParam=0x180002) returned 0x0
	[0237.530] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x5, wParam=0x0, lParam=0x160426) returned 0x0
	[0237.530] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x46, wParam=0x0, lParam=0x24e200) returned 0x0
	[0237.531] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x83, wParam=0x1, lParam=0x24e1d0) returned 0x0
	[0237.532] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.532] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x47, wParam=0x0, lParam=0x24e200) returned 0x0
	[0237.533] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x5, wParam=0x0, lParam=0x2e0428) returned 0x0
	[0237.533] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.533] GetActiveWindow () returned 0x0
	[0237.534] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.534] GetParent (hWnd=0xb0150) returned 0xa016e
	[0237.534] GetParent (hWnd=0xb0150) returned 0xa016e
	[0237.534] GetParent (hWnd=0xa016e) returned 0x0
	[0237.535] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x46, wParam=0x0, lParam=0x24da30) returned 0x0
	[0237.536] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x83, wParam=0x1, lParam=0x24da00) returned 0x0
	[0237.536] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x46, wParam=0x0, lParam=0x24da30) returned 0x0
	[0237.537] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x83, wParam=0x1, lParam=0x24da00) returned 0x0
	[0237.537] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x47, wParam=0x0, lParam=0x24da30) returned 0x0
	[0237.538] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x5, wParam=0x0, lParam=0x340428) returned 0x0
	[0237.538] MoveWindow (hWnd=0xd0154, X=0, Y=0, nWidth=1064, nHeight=46, bRepaint=1) returned 1
	[0237.538] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x46, wParam=0x0, lParam=0x24cdd0) returned 0x0
	[0237.539] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x47, wParam=0x0, lParam=0x24da30) returned 0x0
	[0237.539] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x3, wParam=0x0, lParam=0x360002) returned 0x0
	[0237.540] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x5, wParam=0x0, lParam=0x1ff0424) returned 0x0
	[0237.540] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.541] GetParent (hWnd=0xa016e) returned 0x0
	[0237.541] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.541] SendMessageW (hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.542] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.542] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x4e, wParam=0x1000, lParam=0x24e280) returned 0x0
	[0237.543] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.543] GetParent (hWnd=0xa016e) returned 0x0
	[0237.543] GetDlgCtrlID (hWnd=0xd0154) returned 4096
	[0237.544] SendMessageW (hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.544] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.544] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x4e, wParam=0x1000, lParam=0x24e280) returned 0x0
	[0237.545] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x46, wParam=0x0, lParam=0x24e1f0) returned 0x0
	[0237.546] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x46, wParam=0x0, lParam=0x24e1f0) returned 0x0
	[0237.546] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.546] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x46, wParam=0x0, lParam=0x24e200) returned 0x0
	[0237.547] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.548] malloc (_Size=0x60) returned 0x65feb0
	[0237.548] malloc (_Size=0x28) returned 0x65b390
	[0237.548] malloc (_Size=0x38) returned 0xce260
	[0237.548] malloc (_Size=0x28) returned 0x65b3c0
	[0237.548] malloc (_Size=0x38) returned 0xce2a0
	[0237.548] malloc (_Size=0x60) returned 0x65ff20
	[0237.548] malloc (_Size=0x28) returned 0x65b3f0
	[0237.548] malloc (_Size=0x38) returned 0xce3a0
	[0237.548] malloc (_Size=0x28) returned 0x65b390
	[0237.549] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x24ed48) returned 0x0
	[0237.549] GetMenu (hWnd=0xa016e) returned 0x10191
	[0237.549] FindResourceW (hModule=0xff6d0000, lpName=0x80, lpType=0x9) returned 0x3e0808
	[0237.549] LoadAcceleratorsW (hInstance=0xff6d0000, lpTableName=0x80) returned 0x9017d
	[0237.549] GetTopWindow (hWnd=0xa016e) returned 0x50168
	[0237.550] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.550] GetTopWindow (hWnd=0x50168) returned 0x0
	[0237.550] GetWindow (hWnd=0x50168, uCmd=0x2) returned 0xb0150
	[0237.550] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.550] GetTopWindow (hWnd=0xb0150) returned 0xd0154
	[0237.550] GetTopWindow (hWnd=0xb0150) returned 0xd0154
	[0237.551] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0xd0154, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.551] GetTopWindow (hWnd=0xd0154) returned 0x10184
	[0237.551] GetTopWindow (hWnd=0xd0154) returned 0x10184
	[0237.551] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10184, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.551] GetTopWindow (hWnd=0x10184) returned 0x0
	[0237.551] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0xb0062
	[0237.552] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0xb0062, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.552] GetTopWindow (hWnd=0xb0062) returned 0x0
	[0237.552] GetWindow (hWnd=0xb0062, uCmd=0x2) returned 0x1017e
	[0237.552] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1017e, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.552] GetTopWindow (hWnd=0x1017e) returned 0x0
	[0237.552] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x0
	[0237.552] GetWindow (hWnd=0xd0154, uCmd=0x2) returned 0x0
	[0237.553] GetWindow (hWnd=0xb0150, uCmd=0x2) returned 0x0
	[0237.553] free (_Block=0x65bd50) 
	[0237.553] GetMenu (hWnd=0xa016e) returned 0x10191
	[0237.553] lstrlenW (lpString="Embedding") returned 9
	[0237.553] lstrlenW (lpString="Automation") returned 10
	[0237.553] GlobalAddAtomW (lpString="mmc") returned 0xc04c
	[0237.553] GlobalAddAtomW (lpString="system") returned 0xc009
	[0237.553] wcscpy_s (in: _Destination=0x24f510, _SizeInWords=0x104, _Source="C:\\Windows\\System32\\compmgmt.msc" | out: _Destination="C:\\Windows\\System32\\compmgmt.msc") returned 0x0
	[0237.553] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\compmgmt.msc", nBufferLength=0x104, lpBuffer=0x24f300, lpFilePart=0x24f030 | out: lpBuffer="C:\\Windows\\System32\\compmgmt.msc", lpFilePart=0x24f030*="compmgmt.msc") returned 0x20
	[0237.553] malloc (_Size=0x216) returned 0x65a960
	[0237.553] wcsncpy_s (in: _Destination=0x65a96c, _SizeInWords=0x104, _Source="C:\\Windows\\System32\\compmgmt.msc", _MaxCount=0xffffffffffffffff | out: _Destination="C:\\Windows\\System32\\compmgmt.msc") returned 0x0
	[0237.553] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x24f038, lpFileSystemFlags=0x24f020, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x24f038*=0xff, lpFileSystemFlags=0x24f020*=0x3e700ff, lpFileSystemNameBuffer=0x0) returned 1
	[0237.553] free (_Block=0x65a960) 
	[0237.553] LoadLibraryExA (lpLibFileName="SHELL32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefe0a0000
	[0237.554] GetProcAddress (hModule=0x7fefe0a0000, lpProcName="SHGetFileInfoW") returned 0x7fefe242410
	[0237.554] SHGetFileInfoW (in: pszPath="C:\\Windows\\System32\\compmgmt.msc", dwFileAttributes=0x0, psfi=0x24efd0, cbFileInfo=0x2b8, uFlags=0x800 | out: psfi=0x24efd0) returned 0x1
	[0237.961] malloc (_Size=0x16) returned 0x1330b0
	[0237.961] lstrcmpiW (lpString1=".msc", lpString2=".msc") returned 0
	[0237.961] GetSystemMetrics (nIndex=42) returned 0
	[0237.961] free (_Block=0x1330b0) 
	[0237.962] GetParent (hWnd=0x50168) returned 0xa016e
	[0237.962] malloc (_Size=0x8) returned 0xce0c0
	[0237.962] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0237.963] GetParent (hWnd=0xb0150) returned 0xa016e
	[0237.963] malloc (_Size=0x10) returned 0x1330b0
	[0237.963] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0150, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0237.963] malloc (_Size=0x230) returned 0x65a960
	[0237.963] malloc (_Size=0x18) returned 0x1330d0
	[0237.963] malloc (_Size=0x20) returned 0x65b3c0
	[0237.963] malloc (_Size=0xb8) returned 0x65c7d0
	[0237.964] malloc (_Size=0x18) returned 0x1330f0
	[0237.964] malloc (_Size=0x18) returned 0x133110
	[0237.964] malloc (_Size=0x18) returned 0x133130
	[0237.964] malloc (_Size=0xb0) returned 0x65c890
	[0237.964] malloc (_Size=0x40) returned 0x65bd50
	[0237.964] malloc (_Size=0x100) returned 0x65f120
	[0237.964] malloc (_Size=0x18) returned 0x133150
	[0237.964] lstrlenW (lpString="Favorites") returned 9
	[0237.964] malloc (_Size=0x20) returned 0x65b420
	[0237.964] malloc (_Size=0x1c0) returned 0x65aba0
	[0237.964] malloc (_Size=0x68) returned 0x65ad70
	[0237.964] malloc (_Size=0x20) returned 0x65b450
	[0237.964] malloc (_Size=0x20) returned 0x65b480
	[0237.964] free (_Block=0x65b420) 
	[0237.967] malloc (_Size=0x420) returned 0x1364a0
	[0237.967] SetRectEmpty (in: lprc=0x136548 | out: lprc=0x136548) returned 1
	[0237.967] malloc (_Size=0x18) returned 0x133190
	[0237.968] FindResourceW (hModule=0xff6d0000, lpName=0x9, lpType=0x6) returned 0x3e07e8
	[0237.968] LoadStringW (in: hInstance=0xff6d0000, uID=0x81, lpBuffer=0x24ef00, cchBufferMax=256 | out: lpBuffer="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 0x6a
	[0237.968] lstrlenW (lpString="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 106
	[0237.968] malloc (_Size=0xe2) returned 0x65ade0
	[0237.968] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0237.968] LoadIconW (hInstance=0xff6d0000, lpIconName=0x81) returned 0x101dd
	[0237.970] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0237.970] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x24ef70 | out: lpWndClass=0x24ef70) returned 0
	[0237.970] RegisterClassW (lpWndClass=0x24f000) returned 0xc15d
	[0237.970] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x24f080 | out: lpWndClass=0x24f080) returned 1
	[0237.971] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0237.971] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x24ef60 | out: lpWndClass=0x24ef60) returned 1
	[0237.972] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x220, wParam=0x0, lParam=0x24f0e0) returned 0x10190
	[0237.973] GetParent (hWnd=0x10190) returned 0x10012
	[0237.973] SetWindowLongPtrW (hWnd=0x10190, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0237.973] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10190, lParam=0x24e410) returned 0x0
	[0237.974] DefMDIChildProcW (hWnd=0x10190, uMsg=0x81, wParam=0x0, lParam=0x24e4f0) returned 0x1
	[0237.974] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0237.974] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x24df40 | out: lpWndClass=0x24df40) returned 1
	[0237.974] SetWindowLongW (hWnd=0x10190, nIndex=-20, dwNewLong=320) returned 320
	[0237.975] DefMDIChildProcW (hWnd=0x10190, uMsg=0x7c, wParam=0xffffffffffffffec, lParam=0x24dfe0) returned 0x0
	[0237.975] DefMDIChildProcW (hWnd=0x10190, uMsg=0x7d, wParam=0xffffffffffffffec, lParam=0x24dfe0) returned 0x0
	[0237.976] DefMDIChildProcW (hWnd=0x10190, uMsg=0xd, wParam=0x104, lParam=0x1e95fa0) returned 0x0
	[0237.977] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x24d858) returned 0x0
	[0237.978] DefMDIChildProcW (hWnd=0x10190, uMsg=0x83, wParam=0x0, lParam=0x24e560) returned 0x0
	[0237.979] DefMDIChildProcW (hWnd=0x10190, uMsg=0x1, wParam=0x0, lParam=0x24e4e0) returned 0x0
	[0237.979] malloc (_Size=0x5a0) returned 0x1368d0
	[0237.979] malloc (_Size=0x18) returned 0x1331b0
	[0237.979] malloc (_Size=0x20) returned 0x65b420
	[0237.979] malloc (_Size=0x18) returned 0x1331d0
	[0237.979] malloc (_Size=0x18) returned 0x1331f0
	[0237.979] malloc (_Size=0x18) returned 0x133210
	[0237.979] malloc (_Size=0x18) returned 0x133230
	[0237.979] malloc (_Size=0x18) returned 0x133250
	[0237.979] malloc (_Size=0x18) returned 0x133270
	[0237.979] malloc (_Size=0x120) returned 0x136e80
	[0237.979] malloc (_Size=0x18) returned 0x133290
	[0237.980] malloc (_Size=0x70) returned 0x65aed0
	[0237.980] malloc (_Size=0x20) returned 0x65b450
	[0237.980] malloc (_Size=0x58) returned 0x132030
	[0237.980] malloc (_Size=0xe0) returned 0x136fb0
	[0237.980] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCViewWindow", lpWndClass=0x24dce0 | out: lpWndClass=0x24dce0) returned 0
	[0237.980] RegisterClassW (lpWndClass=0x24dd70) returned 0xc15e
	[0237.981] CreateWindowExW (dwExStyle=0x0, lpClassName="MMCViewWindow", lpWindowName=0x0, dwStyle=0x52000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10190, hMenu=0xe900, hInstance=0xff6d0000, lpParam=0x24f1e0) returned 0x10192
	[0237.981] GetParent (hWnd=0x10192) returned 0x10012
	[0237.981] SetWindowLongPtrW (hWnd=0x10192, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0237.981] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10192, lParam=0x24d720) returned 0x0
	[0237.982] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x81, wParam=0x0, lParam=0x24d800) returned 0x1
	[0237.983] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x83, wParam=0x0, lParam=0x24d870) returned 0x0
	[0237.983] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x1, wParam=0x0, lParam=0x24d800) returned 0x0
	[0237.983] malloc (_Size=0x100) returned 0x65f340
	[0237.983] IsWindowVisible (hWnd=0x10192) returned 0
	[0237.984] IsWindowVisible (hWnd=0x10192) returned 0
	[0237.984] IsWindowVisible (hWnd=0x10192) returned 0
	[0237.984] GetParent (hWnd=0x10192) returned 0x10190
	[0237.984] GetParent (hWnd=0x10190) returned 0x50168
	[0237.984] CreateWindowExW (dwExStyle=0x20000, lpClassName="STATIC", lpWindowName=0x0, dwStyle=0x4400428d, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10192, hMenu=0x31f7, hInstance=0xff6d0000, lpParam=0x0) returned 0x101a4
	[0238.166] GetParent (hWnd=0x101a4) returned 0x10012
	[0238.167] SetWindowLongPtrW (hWnd=0x101a4, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6d61b4
	[0238.167] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101a4, lParam=0x24c910) returned 0x0
	[0238.167] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x81, wParam=0x0, lParam=0x24c9f0) returned 0x1
	[0238.168] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x83, wParam=0x0, lParam=0x24ca50) returned 0x0
	[0238.168] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x1, wParam=0x0, lParam=0x24c9f0) returned 0x0
	[0238.169] GetWindowDC (hWnd=0x101a4) returned 0xc01083a
	[0238.169] malloc (_Size=0x88) returned 0xcf3f0
	[0238.169] malloc (_Size=0x100) returned 0x1370d0
	[0238.169] SelectObject (hdc=0xc01083a, h=0xa0a0864) returned 0x18a002e
	[0238.172] GetWindowLongW (hWnd=0x101a4, nIndex=-20) returned 131072
	[0238.172] GetWindowLongW (hWnd=0x101a4, nIndex=-16) returned 1140867725
	[0238.172] SelectObject (hdc=0xc01083a, h=0x18a002e) returned 0xa0a0864
	[0238.172] free (_Block=0xcf3f0) 
	[0238.172] free (_Block=0x1370d0) 
	[0238.172] ReleaseDC (hWnd=0x101a4, hDC=0xc01083a) returned 1
	[0238.189] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0238.194] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x3, wParam=0x0, lParam=0x10001) returned 0x0
	[0238.195] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x210, wParam=0x31f70001, lParam=0x101a4) returned 0x0
	[0238.195] lstrlenW (lpString="SysTreeView32") returned 13
	[0238.195] malloc (_Size=0x28) returned 0x65b4b0
	[0238.195] malloc (_Size=0x20) returned 0x65b4e0
	[0238.196] malloc (_Size=0x18) returned 0x1332b0
	[0238.196] malloc (_Size=0x18) returned 0x1332d0
	[0238.196] malloc (_Size=0x30) returned 0xce9a0
	[0238.196] malloc (_Size=0x30) returned 0xce960
	[0238.196] malloc (_Size=0x28) returned 0x65b510
	[0238.196] malloc (_Size=0x30) returned 0xcea20
	[0238.196] malloc (_Size=0x18) returned 0x1332f0
	[0238.196] malloc (_Size=0x20) returned 0x65b540
	[0238.196] malloc (_Size=0x18) returned 0x133310
	[0238.199] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.199] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.199] LoadLibraryExA (lpLibFileName="COMCTL32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefc630000
	[0238.200] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.200] InitCommonControlsEx (picce=0x24ce58) returned 1
	[0238.201] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.201] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.201] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.201] InitCommonControlsEx (picce=0x24ce58) returned 1
	[0238.201] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.201] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.202] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.202] InitCommonControlsEx (picce=0x24ce58) returned 1
	[0238.202] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.202] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.202] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.202] InitCommonControlsEx (picce=0x24ce58) returned 1
	[0238.202] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.202] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.203] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.203] InitCommonControlsEx (picce=0x24ce58) returned 1
	[0238.203] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.203] CreateWindowExW (dwExStyle=0x200, lpClassName="SysTreeView32", lpWindowName=0x0, dwStyle=0x52000029, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10192, hMenu=0x31f1, hInstance=0xff6d0000, lpParam=0x24d0b8) returned 0x101a6
	[0238.203] malloc (_Size=0x100) returned 0x1370d0
	[0238.203] GetParent (hWnd=0x101a6) returned 0x10012
	[0238.203] SetWindowLongPtrW (hWnd=0x101a6, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6c7c18
	[0238.203] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101a6, lParam=0x24c7d0) returned 0x0
	[0238.204] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x81, wParam=0x0, lParam=0x24c8b0) returned 0x1
	[0238.205] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x83, wParam=0x0, lParam=0x24c920) returned 0x0
	[0238.205] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x1, wParam=0x0, lParam=0x24c8b0) returned 0x0
	[0238.206] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x55, wParam=0x101a6, lParam=0x3) returned 0x2
	[0238.207] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0238.208] GetDlgCtrlID (hWnd=0x101a6) returned 12785
	[0238.209] GetDlgCtrlID (hWnd=0x101a6) returned 12785
	[0238.547] GetDlgCtrlID (hWnd=0x101a6) returned 12785
	[0238.548] GetDlgCtrlID (hWnd=0x101a6) returned 12785
	[0238.669] GetDlgCtrlID (hWnd=0x101a6) returned 12785
	[0238.669] GetDlgCtrlID (hWnd=0x101a6) returned 12785
	[0238.755] GetWindowLongPtrW (hWnd=0x101ac, nIndex=-4) returned 0x7fefc6af450
	[0238.755] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x0
	[0238.755] SetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423", hData=0x7fefc6af450) returned 1
	[0238.755] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.755] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0238.755] SetWindowLongPtrW (hWnd=0x101ac, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7fefc6af450
	[0238.755] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101ac, lParam=0x24b860) returned 0x0
	[0238.755] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.755] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x81, wParam=0x0, lParam=0x24b940) returned 0x1
	[0238.755] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.755] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x83, wParam=0x0, lParam=0x24b9c0) returned 0x0
	[0238.755] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.755] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x1, wParam=0x0, lParam=0x24b940) returned 0x0
	[0238.756] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x55, wParam=0x101ac, lParam=0x3) returned 0x2
	[0238.757] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0238.757] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.757] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x24b430) returned 0x0
	[0238.757] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.757] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x24b430) returned 0x0
	[0238.758] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.758] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0238.758] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.758] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0238.758] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.758] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x432, wParam=0x0, lParam=0x24c000) returned 0x1
	[0238.759] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x55, wParam=0x101ac, lParam=0x3) returned 0x2
	[0238.759] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.759] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x30, wParam=0x180a085c, lParam=0x1) returned 0x1
	[0238.759] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.759] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x403, wParam=0x3, lParam=0x1f4) returned 0x0
	[0238.759] IsWindowVisible (hWnd=0x10192) returned 0
	[0238.759] IsWindowVisible (hWnd=0x101a6) returned 0
	[0238.759] IsWindowVisible (hWnd=0x10192) returned 0
	[0238.759] IsWindowVisible (hWnd=0x101a6) returned 0
	[0238.759] IsWindowVisible (hWnd=0x10192) returned 0
	[0238.760] IsWindowVisible (hWnd=0x101a6) returned 0
	[0238.760] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x31a, wParam=0xffffffffffffffff, lParam=0x80000001) returned 0x0
	[0238.760] GetParent (hWnd=0x101a6) returned 0x10192
	[0238.761] GetParent (hWnd=0x10192) returned 0x10190
	[0238.761] GetParent (hWnd=0x10192) returned 0x10190
	[0238.761] GetParent (hWnd=0x10190) returned 0x50168
	[0238.761] GetDlgItem (hDlg=0x10190, nIDDlgItem=59648) returned 0x10192
	[0238.761] GetParent (hWnd=0x10192) returned 0x10190
	[0239.567] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x1109, wParam=0x0, lParam=0x4e5f80) returned 0x0
	[0239.568] GetDlgCtrlID (hWnd=0x101a6) returned 12785
	[0239.568] GetDlgCtrlID (hWnd=0x101a6) returned 12785
	[0239.569] malloc (_Size=0x60) returned 0x65af50
	[0239.569] malloc (_Size=0x18) returned 0x133330
	[0239.569] GetWindowLongPtrW (hWnd=0x201a0, nIndex=-4) returned 0x7feffb750c0
	[0239.569] GetPropW (hWnd=0x201a0, lpString="AfxOldWndProc423") returned 0x0
	[0239.569] SetPropW (hWnd=0x201a0, lpString="AfxOldWndProc423", hData=0x7feffb750c0) returned 1
	[0239.569] GetPropW (hWnd=0x201a0, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.570] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0239.570] SetWindowLongPtrW (hWnd=0x201a0, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7feffb750c0
	[0239.570] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x201a0, lParam=0x24bba0) returned 0x0
	[0239.570] GetPropW (hWnd=0x201a0, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.570] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x201a0, Msg=0x81, wParam=0x0, lParam=0x24bc80) returned 0x1
	[0239.570] GetPropW (hWnd=0x201a0, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.570] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x201a0, Msg=0x83, wParam=0x0, lParam=0x24bcf0) returned 0x0
	[0239.570] GetPropW (hWnd=0x201a0, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.570] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x201a0, Msg=0x1, wParam=0x0, lParam=0x24bc80) returned 0x0
	[0239.570] GetPropW (hWnd=0x201a0, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.570] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x201a0, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0239.570] GetPropW (hWnd=0x201a0, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.570] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x201a0, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0239.570] GetLastError () returned 0x36b7
	[0239.571] SetLastError (dwErrCode=0x36b7) 
	[0239.571] DeleteObject (ho=0x105087b) returned 1
	[0239.571] GetLastError () returned 0x0
	[0239.571] SetLastError (dwErrCode=0x0) 
	[0239.571] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0239.572] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0239.573] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x210, wParam=0x31f10001, lParam=0x101a6) returned 0x0
	[0239.573] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0239.573] malloc (_Size=0x20) returned 0x65b570
	[0239.573] malloc (_Size=0x18) returned 0x133350
	[0239.573] malloc (_Size=0x20) returned 0x65b5a0
	[0239.573] malloc (_Size=0x18) returned 0x133370
	[0239.573] SetWindowPos (hWnd=0x101a6, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0239.574] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x46, wParam=0x0, lParam=0x24d050) returned 0x0
	[0239.575] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0239.575] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x47, wParam=0x0, lParam=0x24d050) returned 0x0
	[0239.575] malloc (_Size=0x3a0) returned 0x139570
	[0239.575] malloc (_Size=0x20) returned 0x65b5d0
	[0239.575] malloc (_Size=0x18) returned 0x133390
	[0239.576] LoadResource (hModule=0xff6d0000, hResInfo=0xff897758) returned 0xff8c7278
	[0239.576] LockResource (hResData=0xff8c7278) returned 0xff8c7278
	[0239.576] malloc (_Size=0x68) returned 0x13a020
	[0239.576] GetSysColor (nIndex=18) returned 0x0
	[0239.577] GetSysColor (nIndex=18) returned 0x0
	[0239.577] GetSysColor (nIndex=18) returned 0x0
	[0239.577] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0239.577] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0239.577] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0239.577] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0239.577] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0239.577] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0239.577] GetSysColor (nIndex=20) returned 0xffffff
	[0239.577] GetSysColor (nIndex=20) returned 0xffffff
	[0239.577] GetSysColor (nIndex=20) returned 0xffffff
	[0239.577] GetDC (hWnd=0x0) returned 0x8010666
	[0239.577] CreateCompatibleBitmap (hdc=0x8010666, cx=16, cy=8) returned 0x205087a
	[0239.577] CreateCompatibleDC (hdc=0x8010666) returned 0x201087b
	[0239.577] SelectObject (hdc=0x201087b, h=0x205087a) returned 0x185000f
	[0239.577] StretchDIBits (hdc=0x201087b, xDest=0, yDest=0, DestWidth=16, DestHeight=8, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=8, lpBits=0xff8c72e0, lpbmi=0x13a020, iUsage=0x0, rop=0xcc0020) returned 8
	[0239.577] SelectObject (hdc=0x201087b, h=0x185000f) returned 0x205087a
	[0239.577] DeleteDC (hdc=0x201087b) returned 1
	[0239.577] ReleaseDC (hWnd=0x0, hDC=0x8010666) returned 1
	[0239.577] free (_Block=0x13a020) 
	[0239.577] GetProcAddress (hModule=0x7fefc630000, lpProcName="ImageList_Create") returned 0x7fefc6900fc
	[0239.577] ImageList_Create (cx=8, cy=8, flags=0xfe, cInitial=2, cGrow=2) returned 0x4e89e0
	[0239.578] malloc (_Size=0x88) returned 0xcf3f0
	[0239.578] malloc (_Size=0x88) returned 0xcf7e0
	[0239.578] malloc (_Size=0x100) returned 0x1372f0
	[0239.578] GetLastError () returned 0x0
	[0239.578] SetLastError (dwErrCode=0x0) 
	[0239.578] DeleteObject (ho=0x205087a) returned 1
	[0239.578] GetLastError () returned 0x0
	[0239.578] SetLastError (dwErrCode=0x0) 
	[0239.578] malloc (_Size=0x28) returned 0x65b600
	[0239.578] malloc (_Size=0x30) returned 0xce460
	[0239.578] malloc (_Size=0x1f0) returned 0x13a230
	[0239.579] lstrlenW (lpString="SysListView32") returned 13
	[0239.579] malloc (_Size=0x28) returned 0x65b630
	[0239.579] malloc (_Size=0x18) returned 0x1333b0
	[0239.579] malloc (_Size=0x20) returned 0x65b660
	[0239.579] malloc (_Size=0x30) returned 0xcea60
	[0239.579] CreateWindowExW (dwExStyle=0x200, lpClassName="SysListView32", lpWindowName=0x0, dwStyle=0x5600024d, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10192, hMenu=0x31f2, hInstance=0xff6d0000, lpParam=0x24f1e0) returned 0x201a2
	[0239.580] GetParent (hWnd=0x201a2) returned 0x10012
	[0239.580] SetWindowLongPtrW (hWnd=0x201a2, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6b5944
	[0239.580] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x201a2, lParam=0x24c850) returned 0x0
	[0239.580] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x81, wParam=0x0, lParam=0x24c930) returned 0x1
	[0239.582] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x83, wParam=0x0, lParam=0x24c9a0) returned 0x0
	[0239.582] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x1, wParam=0x0, lParam=0x24c930) returned 0x0
	[0239.583] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0239.584] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101b6, lParam=0x24b6d0) returned 0x0
	[0239.585] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x55, wParam=0x101b6, lParam=0x3) returned 0x2
	[0239.585] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0239.586] GetParent (hWnd=0x101b6) returned 0x201a2
	[0239.586] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x210, wParam=0x1, lParam=0x101b6) returned 0x0
	[0239.587] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101b8, lParam=0x24b4e0) returned 0x0
	[0239.656] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x55, wParam=0x101b8, lParam=0x3) returned 0x2
	[0239.656] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0239.657] GetParent (hWnd=0x101b8) returned 0x201a2
	[0239.657] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x210, wParam=0x1, lParam=0x101b8) returned 0x0
	[0239.657] CallNextHookEx (hhk=0x10197, nCode=4, wParam=0x101b8, lParam=0x0) returned 0x0
	[0239.658] GetParent (hWnd=0x101b8) returned 0x201a2
	[0239.658] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x210, wParam=0x2, lParam=0x101b8) returned 0x0
	[0239.659] GetDlgCtrlID (hWnd=0x101b6) returned 0
	[0239.659] GetParent (hWnd=0x101b6) returned 0x201a2
	[0239.659] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x4e, wParam=0x0, lParam=0x24b730) returned 0x0
	[0239.660] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x46, wParam=0x0, lParam=0x249c20) returned 0x0
	[0239.660] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x83, wParam=0x1, lParam=0x249bf0) returned 0x0
	[0239.661] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x47, wParam=0x0, lParam=0x249c20) returned 0x0
	[0239.664] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x46, wParam=0x0, lParam=0x249c20) returned 0x0
	[0239.664] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x83, wParam=0x1, lParam=0x249bf0) returned 0x0
	[0239.665] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x47, wParam=0x0, lParam=0x249c20) returned 0x0
	[0239.667] GetWindowLongPtrW (hWnd=0x201b8, nIndex=-4) returned 0x7fefc6af450
	[0239.667] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x0
	[0239.667] SetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423", hData=0x7fefc6af450) returned 1
	[0239.667] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.667] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0239.667] SetWindowLongPtrW (hWnd=0x201b8, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7fefc6af450
	[0239.667] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x201b8, lParam=0x24b730) returned 0x0
	[0239.668] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.668] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x81, wParam=0x0, lParam=0x24b810) returned 0x1
	[0239.668] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.668] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x83, wParam=0x0, lParam=0x24b890) returned 0x0
	[0239.668] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.668] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x1, wParam=0x0, lParam=0x24b810) returned 0x0
	[0239.668] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.668] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x24b300) returned 0x0
	[0239.668] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.668] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x24b300) returned 0x0
	[0239.669] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.669] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0239.669] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.669] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0239.669] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.669] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x432, wParam=0x0, lParam=0x24bed0) returned 0x1
	[0239.669] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x55, wParam=0x201b8, lParam=0x3) returned 0x2
	[0239.669] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.669] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x30, wParam=0x280a0729, lParam=0x0) returned 0x1
	[0239.670] IsWindowVisible (hWnd=0x10192) returned 0
	[0239.670] IsWindowVisible (hWnd=0x101a6) returned 0
	[0239.670] IsWindowVisible (hWnd=0x201a2) returned 0
	[0239.670] IsWindowVisible (hWnd=0x10192) returned 0
	[0239.670] IsWindowVisible (hWnd=0x101a6) returned 0
	[0239.670] IsWindowVisible (hWnd=0x201a2) returned 0
	[0239.670] IsWindowVisible (hWnd=0x10192) returned 0
	[0239.670] IsWindowVisible (hWnd=0x101a6) returned 0
	[0239.670] IsWindowVisible (hWnd=0x201a2) returned 0
	[0239.670] malloc (_Size=0x400) returned 0x13a430
	[0239.670] GetParent (hWnd=0x201a2) returned 0x10192
	[0239.670] GetParent (hWnd=0x10192) returned 0x10190
	[0239.670] GetParent (hWnd=0x10192) returned 0x10190
	[0239.671] GetParent (hWnd=0x10190) returned 0x50168
	[0239.671] GetDlgItem (hDlg=0x10190, nIDDlgItem=59648) returned 0x10192
	[0239.671] GetParent (hWnd=0x10192) returned 0x10190
	[0239.671] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x1036, wParam=0x0, lParam=0x4030) returned 0x0
	[0239.672] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.672] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x41c, wParam=0x0, lParam=0x0) returned 0x0
	[0239.672] malloc (_Size=0x60) returned 0x13a430
	[0239.672] malloc (_Size=0x18) returned 0x1333d0
	[0239.672] malloc (_Size=0x20) returned 0x65b690
	[0239.672] malloc (_Size=0x18) returned 0x1333f0
	[0239.673] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0239.673] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.673] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x434, wParam=0x0, lParam=0x24c0b0) returned 0x0
	[0239.673] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x101f, wParam=0x0, lParam=0x0) returned 0x101b6
	[0239.674] GetParent (hWnd=0x101b6) returned 0x201a2
	[0239.674] SetWindowLongPtrW (hWnd=0x101b6, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6bbf00
	[0239.674] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0239.675] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0239.675] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0239.676] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x210, wParam=0x31f20001, lParam=0x201a2) returned 0x0
	[0239.676] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0239.677] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x4e9b10
	[0239.677] ImageList_Create (cx=32, cy=32, flags=0x21, cInitial=20, cGrow=10) returned 0x4ea260
	[0239.681] GetLastError () returned 0x6
	[0239.681] SetLastError (dwErrCode=0x6) 
	[0239.681] GetLastError () returned 0x6
	[0239.681] SetLastError (dwErrCode=0x6) 
	[0239.681] GetLastError () returned 0x6
	[0239.681] SetLastError (dwErrCode=0x6) 
	[0239.682] GetLastError () returned 0x6
	[0239.682] SetLastError (dwErrCode=0x6) 
	[0239.682] malloc (_Size=0x8) returned 0xce0c0
	[0239.682] malloc (_Size=0x150) returned 0x13a4a0
	[0239.682] malloc (_Size=0x8) returned 0x1316b0
	[0239.682] malloc (_Size=0x8) returned 0x65ff90
	[0239.682] malloc (_Size=0x8) returned 0x65ffb0
	[0239.682] malloc (_Size=0x8) returned 0xd1170
	[0239.682] malloc (_Size=0x8) returned 0xd1190
	[0239.682] malloc (_Size=0x8) returned 0x65cc40
	[0239.682] malloc (_Size=0x8) returned 0x65cc60
	[0239.682] malloc (_Size=0x8) returned 0x65c950
	[0239.682] GetLastError () returned 0x6
	[0239.682] SetLastError (dwErrCode=0x6) 
	[0239.682] DeleteObject (ho=0x2050894) returned 1
	[0239.683] GetLastError () returned 0x0
	[0239.683] SetLastError (dwErrCode=0x0) 
	[0239.683] GetLastError () returned 0x0
	[0239.683] SetLastError (dwErrCode=0x0) 
	[0239.683] DeleteObject (ho=0x2050892) returned 1
	[0239.683] GetLastError () returned 0x0
	[0239.683] SetLastError (dwErrCode=0x0) 
	[0239.830] GetLastError () returned 0x0
	[0239.830] SetLastError (dwErrCode=0x0) 
	[0239.831] DeleteObject (ho=0x2050890) returned 1
	[0239.831] GetLastError () returned 0x0
	[0239.831] SetLastError (dwErrCode=0x0) 
	[0239.831] GetLastError () returned 0x0
	[0239.831] SetLastError (dwErrCode=0x0) 
	[0239.831] DeleteObject (ho=0xf050888) returned 1
	[0239.831] GetLastError () returned 0x0
	[0239.831] SetLastError (dwErrCode=0x0) 
	[0239.832] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x1003, wParam=0x1, lParam=0x4e9b10) returned 0x0
	[0239.832] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101c2, lParam=0x24bf60) returned 0x0
	[0239.834] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x55, wParam=0x101c2, lParam=0x3) returned 0x2
	[0239.834] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0239.835] GetParent (hWnd=0x101c2) returned 0x201a2
	[0239.835] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x210, wParam=0x1, lParam=0x101c2) returned 0x0
	[0239.835] CallNextHookEx (hhk=0x10197, nCode=4, wParam=0x101c2, lParam=0x0) returned 0x0
	[0239.836] GetParent (hWnd=0x101c2) returned 0x201a2
	[0239.836] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x210, wParam=0x2, lParam=0x101c2) returned 0x0
	[0239.836] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x1208, wParam=0x0, lParam=0x4e9b10) returned 0x0
	[0239.837] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x1003, wParam=0x0, lParam=0x4ea260) returned 0x0
	[0239.837] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x1208, wParam=0x0, lParam=0x4e89e0) returned 0x4e9b10
	[0239.838] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x1027, wParam=0x0, lParam=0x0) returned 0x0
	[0239.838] GetWindowLongW (hWnd=0x201a2, nIndex=-16) returned 1445986893
	[0239.838] malloc (_Size=0x20) returned 0x65b6c0
	[0239.838] malloc (_Size=0x18) returned 0x133410
	[0239.838] malloc (_Size=0x18) returned 0x133430
	[0239.838] malloc (_Size=0x20) returned 0x65b6f0
	[0239.838] malloc (_Size=0x18) returned 0x133450
	[0239.838] malloc (_Size=0x18) returned 0x133470
	[0239.839] CreateWindowExW (dwExStyle=0x200, lpClassName="AfxFrameOrView42u", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10192, hMenu=0x31fc, hInstance=0xff6d0000, lpParam=0x24d0b8) returned 0x201c2
	[0239.840] GetParent (hWnd=0x201c2) returned 0x10012
	[0239.840] SetWindowLongPtrW (hWnd=0x201c2, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0239.840] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x201c2, lParam=0x24c7c0) returned 0x0
	[0239.840] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x81, wParam=0x0, lParam=0x24c8a0) returned 0x1
	[0239.841] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x83, wParam=0x0, lParam=0x24c920) returned 0x0
	[0239.842] GetWindowLongW (hWnd=0x201c2, nIndex=-16) returned 1073741824
	[0239.842] SetWindowLongW (hWnd=0x201c2, nIndex=-16, dwNewLong=1107296256) returned 1073741824
	[0239.842] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x24c2e0) returned 0x0
	[0239.843] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x24c2e0) returned 0x0
	[0239.843] malloc (_Size=0x400) returned 0x13a600
	[0239.843] malloc (_Size=0x400) returned 0x13a600
	[0239.843] malloc (_Size=0x400) returned 0x13a600
	[0239.844] malloc (_Size=0x400) returned 0x13a600
	[0239.844] malloc (_Size=0x400) returned 0x13a600
	[0239.844] malloc (_Size=0x400) returned 0x13a600
	[0239.844] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x1, wParam=0x0, lParam=0x24c8a0) returned 0x0
	[0239.844] IsWindowVisible (hWnd=0x10192) returned 0
	[0239.844] IsWindowVisible (hWnd=0x101a6) returned 0
	[0239.844] IsWindowVisible (hWnd=0x201a2) returned 0
	[0239.844] IsWindowVisible (hWnd=0x201c2) returned 0
	[0239.844] IsWindowVisible (hWnd=0x10192) returned 0
	[0239.844] IsWindowVisible (hWnd=0x101a6) returned 0
	[0239.844] IsWindowVisible (hWnd=0x201a2) returned 0
	[0239.844] IsWindowVisible (hWnd=0x201c2) returned 0
	[0239.844] IsWindowVisible (hWnd=0x10192) returned 0
	[0239.844] IsWindowVisible (hWnd=0x101a6) returned 0
	[0239.844] IsWindowVisible (hWnd=0x201a2) returned 0
	[0239.844] IsWindowVisible (hWnd=0x201c2) returned 0
	[0239.845] malloc (_Size=0x60) returned 0x13a600
	[0239.845] malloc (_Size=0x60) returned 0x13a670
	[0239.845] malloc (_Size=0x60) returned 0x13a6e0
	[0240.017] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101d8, lParam=0x24b930) returned 0x0
	[0240.018] GetParent (hWnd=0x101d8) returned 0x201c2
	[0240.018] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x210, wParam=0x1, lParam=0x101d8) returned 0x0
	[0240.018] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101da, lParam=0x24b980) returned 0x0
	[0240.023] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101de, lParam=0x24b650) returned 0x0
	[0240.024] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101e0, lParam=0x24b5b0) returned 0x0
	[0240.025] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101e2, lParam=0x24b650) returned 0x0
	[0240.026] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101e4, lParam=0x24b5b0) returned 0x0
	[0240.029] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x4f4c30
	[0240.029] GetWindowLongW (hWnd=0x201c2, nIndex=-20) returned 512
	[0240.030] GetLastError () returned 0x6
	[0240.030] SetLastError (dwErrCode=0x6) 
	[0240.030] GetLastError () returned 0x6
	[0240.030] SetLastError (dwErrCode=0x6) 
	[0240.030] GetLastError () returned 0x6
	[0240.031] SetLastError (dwErrCode=0x6) 
	[0240.031] DeleteObject (ho=0x10508ba) returned 1
	[0240.031] GetLastError () returned 0x0
	[0240.031] SetLastError (dwErrCode=0x0) 
	[0240.032] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.032] GetParent (hWnd=0x101d8) returned 0x201c2
	[0240.032] MoveWindow (hWnd=0x101d8, X=0, Y=21, nWidth=0, nHeight=-21, bRepaint=1) returned 1
	[0240.032] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.033] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x210, wParam=0x31fc0001, lParam=0x201c2) returned 0x0
	[0240.034] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.034] malloc (_Size=0x20) returned 0x65b720
	[0240.034] malloc (_Size=0x18) returned 0x133490
	[0240.034] malloc (_Size=0x20) returned 0x65b750
	[0240.034] malloc (_Size=0x18) returned 0x1334b0
	[0240.034] malloc (_Size=0x20) returned 0x65b780
	[0240.034] malloc (_Size=0x18) returned 0x1334d0
	[0240.034] SetWindowPos (hWnd=0x201c2, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0240.034] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x46, wParam=0x0, lParam=0x24d050) returned 0x0
	[0240.035] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.035] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x47, wParam=0x0, lParam=0x24d050) returned 0x0
	[0240.036] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="AMCCustomTab", lpWndClass=0x24d000 | out: lpWndClass=0x24d000) returned 0
	[0240.036] RegisterClassW (lpWndClass=0x24d0d0) returned 0xc165
	[0240.036] CreateWindowExW (dwExStyle=0x0, lpClassName="AMCCustomTab", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10192, hMenu=0x31fa, hInstance=0xff6d0000, lpParam=0x0) returned 0x101e6
	[0240.036] GetParent (hWnd=0x101e6) returned 0x10012
	[0240.036] SetWindowLongPtrW (hWnd=0x101e6, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0240.037] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101e6, lParam=0x24c890) returned 0x0
	[0240.037] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x81, wParam=0x0, lParam=0x24c970) returned 0x1
	[0240.038] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x83, wParam=0x0, lParam=0x24c9e0) returned 0x0
	[0240.038] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x1, wParam=0x0, lParam=0x24c970) returned 0x0
	[0240.039] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.039] GetDC (hWnd=0x101e6) returned 0xc01083a
	[0240.039] malloc (_Size=0x88) returned 0xcf870
	[0240.039] malloc (_Size=0x100) returned 0x137510
	[0240.039] SelectObject (hdc=0xc01083a, h=0x0) returned 0x0
	[0240.039] SelectObject (hdc=0xc01083a, h=0x0) returned 0x0
	[0240.039] free (_Block=0xcf870) 
	[0240.039] free (_Block=0x137510) 
	[0240.039] ReleaseDC (hWnd=0x101e6, hDC=0xc01083a) returned 1
	[0240.040] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.041] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x210, wParam=0x31fa0001, lParam=0x101e6) returned 0x0
	[0240.041] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.041] GetDC (hWnd=0x0) returned 0x1401007f
	[0240.042] malloc (_Size=0x88) returned 0xcf870
	[0240.042] malloc (_Size=0x100) returned 0x137510
	[0240.042] SelectObject (hdc=0x1401007f, h=0x30a08b9) returned 0x18a002e
	[0240.042] SelectObject (hdc=0x1401007f, h=0x18a002e) returned 0x30a08b9
	[0240.042] free (_Block=0xcf870) 
	[0240.042] free (_Block=0x137510) 
	[0240.042] ReleaseDC (hWnd=0x0, hDC=0x1401007f) returned 1
	[0240.042] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101e8, lParam=0x24c950) returned 0x0
	[0240.043] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x55, wParam=0x101e8, lParam=0x3) returned 0x2
	[0240.044] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0240.044] GetParent (hWnd=0x101e8) returned 0x101e6
	[0240.045] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x210, wParam=0x1, lParam=0x101e8) returned 0x0
	[0240.045] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x101ea, lParam=0x24c850) returned 0x0
	[0240.046] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x55, wParam=0x101ea, lParam=0x3) returned 0x2
	[0240.046] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0240.047] GetParent (hWnd=0x101ea) returned 0x101e6
	[0240.047] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x210, wParam=0x10001, lParam=0x101ea) returned 0x0
	[0240.048] GetParent (hWnd=0x101e8) returned 0x101e6
	[0240.048] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x111, wParam=0x4000000, lParam=0x101e8) returned 0x0
	[0240.049] GetParent (hWnd=0x101e8) returned 0x101e6
	[0240.049] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x111, wParam=0x3000000, lParam=0x101e8) returned 0x0
	[0240.049] IsWindowVisible (hWnd=0x10192) returned 0
	[0240.049] IsWindowVisible (hWnd=0x101a6) returned 0
	[0240.049] IsWindowVisible (hWnd=0x201a2) returned 0
	[0240.049] IsWindowVisible (hWnd=0x201c2) returned 0
	[0240.049] IsWindowVisible (hWnd=0x101e6) returned 0
	[0240.049] IsWindowVisible (hWnd=0x10192) returned 0
	[0240.049] IsWindowVisible (hWnd=0x101a6) returned 0
	[0240.049] IsWindowVisible (hWnd=0x201a2) returned 0
	[0240.049] IsWindowVisible (hWnd=0x201c2) returned 0
	[0240.049] IsWindowVisible (hWnd=0x101e6) returned 0
	[0240.049] IsWindowVisible (hWnd=0x10192) returned 0
	[0240.049] IsWindowVisible (hWnd=0x101a6) returned 0
	[0240.049] IsWindowVisible (hWnd=0x201a2) returned 0
	[0240.049] IsWindowVisible (hWnd=0x201c2) returned 0
	[0240.049] IsWindowVisible (hWnd=0x101e6) returned 0
	[0240.049] GetParent (hWnd=0x10192) returned 0x10190
	[0240.050] GetParent (hWnd=0x10190) returned 0x50168
	[0240.050] SetWindowPos (hWnd=0x201a2, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0240.050] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x46, wParam=0x0, lParam=0x24ce60) returned 0x0
	[0240.051] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.051] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x47, wParam=0x0, lParam=0x24ce60) returned 0x0
	[0240.052] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0240.052] malloc (_Size=0xf8) returned 0x13a750
	[0240.052] malloc (_Size=0x18) returned 0x1334f0
	[0240.052] malloc (_Size=0x20) returned 0x13a880
	[0240.052] malloc (_Size=0x38) returned 0xceae0
	[0240.052] malloc (_Size=0x28) returned 0x13a8b0
	[0240.052] malloc (_Size=0x28) returned 0x13a8e0
	[0240.053] malloc (_Size=0x20) returned 0x13a910
	[0240.053] malloc (_Size=0x18) returned 0x133510
	[0240.053] malloc (_Size=0x20) returned 0x13a940
	[0240.053] malloc (_Size=0x18) returned 0x133530
	[0240.053] malloc (_Size=0x20) returned 0x13a970
	[0240.053] malloc (_Size=0x18) returned 0x133550
	[0240.053] malloc (_Size=0x50) returned 0x1323f0
	[0240.053] malloc (_Size=0x18) returned 0x133570
	[0240.053] malloc (_Size=0x28) returned 0x13a9a0
	[0240.053] malloc (_Size=0x28) returned 0x13a9d0
	[0240.053] malloc (_Size=0x28) returned 0x13aa00
	[0240.053] malloc (_Size=0x28) returned 0x13aa30
	[0240.053] malloc (_Size=0x28) returned 0x13aa60
	[0240.053] malloc (_Size=0x28) returned 0x13aa90
	[0240.053] malloc (_Size=0x28) returned 0x13aac0
	[0240.053] malloc (_Size=0x28) returned 0x13aaf0
	[0240.053] malloc (_Size=0x20) returned 0x13ab20
	[0240.053] malloc (_Size=0x18) returned 0x133590
	[0240.053] GetParent (hWnd=0x10190) returned 0x50168
	[0240.053] GetParent (hWnd=0x50168) returned 0xa016e
	[0240.054] GetParent (hWnd=0xa016e) returned 0x0
	[0240.054] GetParent (hWnd=0x50168) returned 0xa016e
	[0240.054] malloc (_Size=0x20) returned 0x13ab50
	[0240.054] malloc (_Size=0x18) returned 0x1335b0
	[0240.054] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.055] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.056] DefMDIChildProcW (hWnd=0x10190, uMsg=0x210, wParam=0xffffffffe9000001, lParam=0x10192) returned 0x0
	[0240.056] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.057] GetWindowLongW (hWnd=0x10192, nIndex=-20) returned 0
	[0240.057] PostMessageW (hWnd=0x10190, Msg=0x362, wParam=0xe001, lParam=0x0) returned 1
	[0240.057] GetWindowLongW (hWnd=0x10190, nIndex=-16) returned 1188020224
	[0240.057] GetClientRect (in: hWnd=0x10190, lpRect=0x24ded8 | out: lpRect=0x24ded8) returned 1
	[0240.057] BeginDeferWindowPos (nNumWindows=8) returned 0x101ec
	[0240.057] GetTopWindow (hWnd=0x10190) returned 0x10192
	[0240.057] GetDlgCtrlID (hWnd=0x10192) returned 59648
	[0240.057] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x0
	[0240.057] GetParent (hWnd=0x10192) returned 0x10190
	[0240.057] GetWindowLongW (hWnd=0x10192, nIndex=-20) returned 0
	[0240.057] GetWindowLongW (hWnd=0x10192, nIndex=-16) returned 1375731712
	[0240.057] AdjustWindowRectEx (in: lpRect=0x24ded8, dwStyle=0x52000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x24ded8) returned 1
	[0240.057] GetParent (hWnd=0x10192) returned 0x10190
	[0240.057] GetWindowRect (in: hWnd=0x10192, lpRect=0x24de90 | out: lpRect=0x24de90) returned 1
	[0240.057] ScreenToClient (in: hWnd=0x10190, lpPoint=0x24de90 | out: lpPoint=0x24de90) returned 1
	[0240.057] ScreenToClient (in: hWnd=0x10190, lpPoint=0x24de98 | out: lpPoint=0x24de98) returned 1
	[0240.057] EqualRect (lprc1=0x24de90, lprc2=0x24ded8) returned 0
	[0240.057] DeferWindowPos (hWinPosInfo=0x101ec, hWnd=0x10192, hWndInsertAfter=0x0, x=0, y=0, cx=870, cy=323, uFlags=0x14) returned 0x101ec
	[0240.057] EndDeferWindowPos (hWinPosInfo=0x101ec) returned 1
	[0240.058] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x46, wParam=0x0, lParam=0x24de70) returned 0x0
	[0240.058] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x83, wParam=0x1, lParam=0x24de40) returned 0x0
	[0240.059] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x47, wParam=0x0, lParam=0x24de70) returned 0x0
	[0240.059] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x5, wParam=0x0, lParam=0x1430366) returned 0x0
	[0240.059] GetWindowLongW (hWnd=0x201a2, nIndex=-20) returned 512
	[0240.060] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x46, wParam=0x0, lParam=0x24d220) returned 0x0
	[0240.060] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x83, wParam=0x1, lParam=0x24d1f0) returned 0x0
	[0240.061] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x46, wParam=0x0, lParam=0x24d220) returned 0x0
	[0240.061] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x83, wParam=0x1, lParam=0x24d1f0) returned 0x0
	[0240.062] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x46, wParam=0x0, lParam=0x24d220) returned 0x0
	[0240.216] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x83, wParam=0x1, lParam=0x24d1f0) returned 0x0
	[0240.217] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x46, wParam=0x0, lParam=0x24d220) returned 0x0
	[0240.217] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x46, wParam=0x0, lParam=0x24d220) returned 0x0
	[0240.218] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x83, wParam=0x1, lParam=0x24d1f0) returned 0x0
	[0240.218] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x47, wParam=0x0, lParam=0x24d220) returned 0x0
	[0240.219] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x3, wParam=0x0, lParam=0x20002) returned 0x0
	[0240.219] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x5, wParam=0x0, lParam=0x13f00d5) returned 0x0
	[0240.220] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x47, wParam=0x0, lParam=0x24d220) returned 0x0
	[0240.220] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x3, wParam=0x0, lParam=0x2028f) returned 0x0
	[0240.221] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x5, wParam=0x0, lParam=0x13f00d5) returned 0x0
	[0240.221] MoveWindow (hWnd=0x101d8, X=0, Y=21, nWidth=213, nHeight=298, bRepaint=1) returned 1
	[0240.222] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x47, wParam=0x0, lParam=0x24d220) returned 0x0
	[0240.223] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x3, wParam=0x0, lParam=0x100dd) returned 0x0
	[0240.223] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x5, wParam=0x0, lParam=0x14101ac) returned 0x0
	[0240.224] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x47, wParam=0x0, lParam=0x24d220) returned 0x0
	[0240.224] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x47, wParam=0x0, lParam=0x24d220) returned 0x0
	[0240.225] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x1205, wParam=0x0, lParam=0x24c8d0) returned 0x1
	[0240.225] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x46, wParam=0x0, lParam=0x24c830) returned 0x0
	[0240.226] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x83, wParam=0x1, lParam=0x24c800) returned 0x0
	[0240.226] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x47, wParam=0x0, lParam=0x24c830) returned 0x0
	[0240.227] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x5, wParam=0x0, lParam=0x1801aa) returned 0x0
	[0240.228] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x46, wParam=0x0, lParam=0x24c8c0) returned 0x0
	[0240.228] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x83, wParam=0x1, lParam=0x24c890) returned 0x0
	[0240.229] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x47, wParam=0x0, lParam=0x24c8c0) returned 0x0
	[0240.229] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x5, wParam=0x0, lParam=0x12e01aa) returned 0x0
	[0240.229] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.229] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x434, wParam=0x0, lParam=0x24b6d0) returned 0x0
	[0240.230] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0240.230] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0240.231] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x46, wParam=0x0, lParam=0x24c8c0) returned 0x0
	[0240.232] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x83, wParam=0x1, lParam=0x24c890) returned 0x0
	[0240.232] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x47, wParam=0x0, lParam=0x24c8c0) returned 0x0
	[0240.233] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x5, wParam=0x0, lParam=0x13f01aa) returned 0x0
	[0240.233] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.233] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x434, wParam=0x0, lParam=0x24b6d0) returned 0x0
	[0240.233] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0240.234] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0240.235] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x1205, wParam=0x0, lParam=0x24c9a0) returned 0x1
	[0240.235] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x46, wParam=0x0, lParam=0x24c900) returned 0x0
	[0240.236] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x3, wParam=0x0, lParam=0x200de) returned 0x0
	[0240.236] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x5, wParam=0x0, lParam=0x13f01aa) returned 0x0
	[0240.236] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.236] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x434, wParam=0x0, lParam=0x24c030) returned 0x0
	[0240.237] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0240.237] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0240.238] CreateWindowExW (dwExStyle=0x0, lpClassName="msctls_statusbar32", lpWindowName="Ready", dwStyle=0x5400014a, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10190, hMenu=0x1003, hInstance=0xff6d0000, lpParam=0x0) returned 0x201ec
	[0240.238] GetParent (hWnd=0x201ec) returned 0x10012
	[0240.238] SetWindowLongPtrW (hWnd=0x201ec, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc65230c
	[0240.238] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x201ec, lParam=0x24d770) returned 0x0
	[0240.239] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x81, wParam=0x0, lParam=0x24d850) returned 0x1
	[0240.239] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x83, wParam=0x0, lParam=0x24d8d0) returned 0x0
	[0240.240] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x1, wParam=0x0, lParam=0x24d830) returned 0x0
	[0240.241] DefMDIChildProcW (hWnd=0x10190, uMsg=0x55, wParam=0x201ec, lParam=0x3) returned 0x2
	[0240.241] DefMDIChildProcW (hWnd=0x10190, uMsg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0240.242] CreateWindowExW (dwExStyle=0x0, lpClassName="msctls_progress32", lpWindowName=0x0, dwStyle=0x54000001, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x201ec, hMenu=0x1000, hInstance=0xff6d0000, lpParam=0x0) returned 0x201ee
	[0240.242] GetParent (hWnd=0x201ee) returned 0x10012
	[0240.242] SetWindowLongPtrW (hWnd=0x201ee, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6cae1c
	[0240.242] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x201ee, lParam=0x24cac0) returned 0x0
	[0240.243] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x81, wParam=0x0, lParam=0x24cba0) returned 0x1
	[0240.243] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x24c5d0) returned 0x0
	[0240.244] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x24c5d0) returned 0x0
	[0240.244] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x83, wParam=0x0, lParam=0x24cc20) returned 0x0
	[0240.245] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x1, wParam=0x0, lParam=0x24cba0) returned 0x0
	[0240.245] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.246] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.247] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x210, wParam=0x10000001, lParam=0x201ee) returned 0x0
	[0240.256] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.311] CreateWindowExW (dwExStyle=0x0, lpClassName="STATIC", lpWindowName="", dwStyle=0x5400000b, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x201ec, hMenu=0x1001, hInstance=0xff6d0000, lpParam=0x0) returned 0x10210
	[0240.311] GetParent (hWnd=0x10210) returned 0x10012
	[0240.311] SetWindowLongPtrW (hWnd=0x10210, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6d61b4
	[0240.311] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10210, lParam=0x24cae0) returned 0x0
	[0240.312] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x81, wParam=0x0, lParam=0x24cbc0) returned 0x1
	[0240.312] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x83, wParam=0x0, lParam=0x24cc20) returned 0x0
	[0240.313] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x1, wParam=0x0, lParam=0x24cbb0) returned 0x0
	[0240.313] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.314] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.314] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x210, wParam=0x10010001, lParam=0x10210) returned 0x0
	[0240.315] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.315] GetWindowLongW (hWnd=0x201ee, nIndex=-20) returned 0
	[0240.316] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x30, wParam=0x50a0887, lParam=0x0) returned 0x0
	[0240.316] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.317] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x46, wParam=0x0, lParam=0x24cfe0) returned 0x0
	[0240.317] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x83, wParam=0x1, lParam=0x24cfb0) returned 0x0
	[0240.318] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.319] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x47, wParam=0x0, lParam=0x24cfe0) returned 0x0
	[0240.319] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x5, wParam=0x0, lParam=0x170000) returned 0x0
	[0240.319] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x46, wParam=0x0, lParam=0x24bed0) returned 0x0
	[0240.320] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.321] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x40a, wParam=0x0, lParam=0x24c2f0) returned 0x1
	[0240.321] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x40a, wParam=0x1, lParam=0x24c2d0) returned 0x0
	[0240.321] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x40a, wParam=0x2, lParam=0x24c2e0) returned 0x0
	[0240.322] SetWindowPos (hWnd=0x201ee, hWndInsertAfter=0x0, X=4, Y=4, cx=-121272495, cy=2042, uFlags=0x224) returned 1
	[0240.322] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x46, wParam=0x0, lParam=0x24c200) returned 0x0
	[0240.322] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x83, wParam=0x1, lParam=0x24c1d0) returned 0x0
	[0240.323] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.323] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x47, wParam=0x0, lParam=0x24c200) returned 0x0
	[0240.324] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x3, wParam=0x0, lParam=0x40004) returned 0x0
	[0240.324] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x5, wParam=0x0, lParam=0x7fa0000) returned 0x0
	[0240.324] SetWindowPos (hWnd=0x10210, hWndInsertAfter=0x0, X=-121272487, Y=4, cx=-67, cy=-4, uFlags=0x224) returned 1
	[0240.325] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x46, wParam=0x0, lParam=0x24c200) returned 0x0
	[0240.326] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x83, wParam=0x1, lParam=0x24c1d0) returned 0x0
	[0240.326] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.327] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x47, wParam=0x0, lParam=0x24c200) returned 0x0
	[0240.327] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x3, wParam=0x0, lParam=0x48000) returned 0x0
	[0240.328] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x40a, wParam=0x0, lParam=0x24d400) returned 0x1
	[0240.329] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x40a, wParam=0x1, lParam=0x24d3e0) returned 0x0
	[0240.329] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x40a, wParam=0x2, lParam=0x24d3f0) returned 0x0
	[0240.329] SetWindowPos (hWnd=0x201ee, hWndInsertAfter=0x0, X=4, Y=4, cx=-121272495, cy=2042, uFlags=0x224) returned 1
	[0240.329] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x46, wParam=0x0, lParam=0x24d310) returned 0x0
	[0240.330] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x83, wParam=0x1, lParam=0x24d2e0) returned 0x0
	[0240.330] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.331] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x47, wParam=0x0, lParam=0x24d310) returned 0x0
	[0240.331] SetWindowPos (hWnd=0x10210, hWndInsertAfter=0x0, X=-121272487, Y=4, cx=-2420564, cy=-5, uFlags=0x224) returned 1
	[0240.331] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x46, wParam=0x0, lParam=0x24d310) returned 0x0
	[0240.332] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x83, wParam=0x1, lParam=0x24d2e0) returned 0x0
	[0240.332] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.333] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x47, wParam=0x0, lParam=0x24d310) returned 0x0
	[0240.334] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.334] DefMDIChildProcW (hWnd=0x10190, uMsg=0x210, wParam=0x10030001, lParam=0x201ec) returned 0x0
	[0240.335] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.335] GetDC (hWnd=0x201ec) returned 0xc01083a
	[0240.335] malloc (_Size=0x88) returned 0xcf870
	[0240.335] malloc (_Size=0x100) returned 0x137510
	[0240.336] lstrlenW (lpString="") returned 0
	[0240.336] lstrlenW (lpString="                                ") returned 32
	[0240.336] malloc (_Size=0x4e) returned 0x132390
	[0240.336] lstrlenW (lpString="") returned 0
	[0240.336] free (_Block=0x132390) 
	[0240.336] lstrlenW (lpString="                    ") returned 20
	[0240.336] malloc (_Size=0x36) returned 0xce4a0
	[0240.336] lstrlenW (lpString="") returned 0
	[0240.336] free (_Block=0xce4a0) 
	[0240.337] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x404, wParam=0x3, lParam=0x24df60) returned 0x1
	[0240.337] free (_Block=0xcf870) 
	[0240.337] free (_Block=0x137510) 
	[0240.337] ReleaseDC (hWnd=0x201ec, hDC=0xc01083a) returned 1
	[0240.337] malloc (_Size=0x100) returned 0x137510
	[0240.337] malloc (_Size=0x100) returned 0x137620
	[0240.337] malloc (_Size=0x58) returned 0x132390
	[0240.337] malloc (_Size=0x28) returned 0x13ab80
	[0240.338] FindResourceW (hModule=0xff6d0000, lpName=0xa2, lpType=0x4) returned 0x3e0718
	[0240.339] malloc (_Size=0x18) returned 0x1335d0
	[0240.339] malloc (_Size=0x18) returned 0x1335f0
	[0240.339] GetWindowLongW (hWnd=0x10190, nIndex=-16) returned 1188020224
	[0240.339] lstrlenW (lpString="&Close\x09Ctrl+F4") returned 14
	[0240.339] malloc (_Size=0x2a) returned 0xce4a0
	[0240.339] lstrlenW (lpString="Nex&t\x09Ctrl+F6") returned 13
	[0240.339] malloc (_Size=0x28) returned 0x13abb0
	[0240.339] free (_Block=0x13abb0) 
	[0240.339] free (_Block=0xce4a0) 
	[0240.340] DestroyMenu (hMenu=0x20201) returned 1
	[0240.340] GetParent (hWnd=0x10192) returned 0x10190
	[0240.341] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x46, wParam=0x0, lParam=0x24df10) returned 0x0
	[0240.341] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x83, wParam=0x1, lParam=0x24dee0) returned 0x0
	[0240.342] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x46, wParam=0x0, lParam=0x24df10) returned 0x0
	[0240.342] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x83, wParam=0x1, lParam=0x24dee0) returned 0x0
	[0240.343] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x47, wParam=0x0, lParam=0x24df10) returned 0x0
	[0240.343] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x3, wParam=0x0, lParam=0x12c0000) returned 0x0
	[0240.344] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x407, wParam=0x0, lParam=0x24d160) returned 0x1
	[0240.344] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x404, wParam=0x3, lParam=0x24d170) returned 0x1
	[0240.345] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x5, wParam=0x0, lParam=0x170366) returned 0x0
	[0240.345] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x46, wParam=0x0, lParam=0x24ce00) returned 0x0
	[0240.345] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.346] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x40a, wParam=0x0, lParam=0x24d220) returned 0x1
	[0240.346] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x40a, wParam=0x1, lParam=0x24d200) returned 0x1
	[0240.347] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x40a, wParam=0x2, lParam=0x24d210) returned 0x1
	[0240.347] SetWindowPos (hWnd=0x201ee, hWndInsertAfter=0x0, X=654, Y=4, cx=127, cy=17, uFlags=0x224) returned 1
	[0240.347] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x46, wParam=0x0, lParam=0x24d130) returned 0x0
	[0240.348] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x83, wParam=0x1, lParam=0x24d100) returned 0x0
	[0240.348] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.349] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x47, wParam=0x0, lParam=0x24d130) returned 0x0
	[0240.349] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x3, wParam=0x0, lParam=0x4028e) returned 0x0
	[0240.350] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x201ee, Msg=0x5, wParam=0x0, lParam=0x11007f) returned 0x0
	[0240.350] SetWindowPos (hWnd=0x10210, hWndInsertAfter=0x0, X=785, Y=4, cx=65, cy=17, uFlags=0x224) returned 1
	[0240.350] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x46, wParam=0x0, lParam=0x24d130) returned 0x0
	[0240.351] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x83, wParam=0x1, lParam=0x24d100) returned 0x0
	[0240.351] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.352] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x47, wParam=0x0, lParam=0x24d130) returned 0x0
	[0240.352] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x3, wParam=0x0, lParam=0x40311) returned 0x0
	[0240.352] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10210, Msg=0x5, wParam=0x0, lParam=0x110041) returned 0x0
	[0240.353] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x47, wParam=0x0, lParam=0x24df10) returned 0x0
	[0240.354] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x5, wParam=0x0, lParam=0x12c0366) returned 0x0
	[0240.354] GetWindowLongW (hWnd=0x201a2, nIndex=-20) returned 512
	[0240.354] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x46, wParam=0x0, lParam=0x24d2c0) returned 0x0
	[0240.355] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x83, wParam=0x1, lParam=0x24d290) returned 0x0
	[0240.355] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x46, wParam=0x0, lParam=0x24d2c0) returned 0x0
	[0240.356] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x83, wParam=0x1, lParam=0x24d290) returned 0x0
	[0240.467] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x46, wParam=0x0, lParam=0x24d2c0) returned 0x0
	[0240.467] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x83, wParam=0x1, lParam=0x24d290) returned 0x0
	[0240.468] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101e6, Msg=0x46, wParam=0x0, lParam=0x24d2c0) returned 0x0
	[0240.468] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x46, wParam=0x0, lParam=0x24d2c0) returned 0x0
	[0240.469] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x83, wParam=0x1, lParam=0x24d290) returned 0x0
	[0240.470] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x47, wParam=0x0, lParam=0x24d2c0) returned 0x0
	[0240.470] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x5, wParam=0x0, lParam=0x12800d5) returned 0x0
	[0240.471] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x47, wParam=0x0, lParam=0x24d2c0) returned 0x0
	[0240.471] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x201c2, Msg=0x5, wParam=0x0, lParam=0x12800d5) returned 0x0
	[0240.471] MoveWindow (hWnd=0x101d8, X=0, Y=21, nWidth=213, nHeight=275, bRepaint=1) returned 1
	[0240.472] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x47, wParam=0x0, lParam=0x24d2c0) returned 0x0
	[0240.473] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x101a4, Msg=0x5, wParam=0x0, lParam=0x12a01ac) returned 0x0
	[0240.474] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x47, wParam=0x0, lParam=0x24d2c0) returned 0x0
	[0240.474] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x1205, wParam=0x0, lParam=0x24c970) returned 0x1
	[0240.474] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x46, wParam=0x0, lParam=0x24c8d0) returned 0x0
	[0240.476] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x5, wParam=0x0, lParam=0x12801aa) returned 0x0
	[0240.476] GetPropW (hWnd=0x201b8, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.476] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201b8, Msg=0x434, wParam=0x0, lParam=0x24c0d0) returned 0x0
	[0240.477] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x201a2, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0240.477] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101b6, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0240.478] DefMDIChildProcW (hWnd=0x10190, uMsg=0x7c, wParam=0xfffffffffffffff0, lParam=0x24e030) returned 0x0
	[0240.479] DefMDIChildProcW (hWnd=0x10190, uMsg=0x7d, wParam=0xfffffffffffffff0, lParam=0x24e030) returned 0x0
	[0240.479] DefMDIChildProcW (hWnd=0x10190, uMsg=0xd, wParam=0x104, lParam=0x1e99bb0) returned 0x0
	[0240.480] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x24d8a8) returned 0x0
	[0240.480] GetParent (hWnd=0x10192) returned 0x10190
	[0240.481] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201ec, Msg=0x46, wParam=0x0, lParam=0x24dfd0) returned 0x0
	[0240.481] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10192, Msg=0x46, wParam=0x0, lParam=0x24dfd0) returned 0x0
	[0240.482] GetParent (hWnd=0x10190) returned 0x50168
	[0240.482] GetParent (hWnd=0x50168) returned 0xa016e
	[0240.482] GetParent (hWnd=0xa016e) returned 0x0
	[0240.482] SendMessageW (hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0240.482] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0240.482] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0240.482] GetWindowTextW (in: hWnd=0xa016e, lpString=0x24de20, nMaxCount=256 | out: lpString="Microsoft Management Console") returned 28
	[0240.483] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0xd, wParam=0x100, lParam=0x24de20) returned 0x1c
	[0240.484] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x210, wParam=0xffffffffff000001, lParam=0x10190) returned 0x0
	[0240.484] free (_Block=0x65ade0) 
	[0240.485] SetCursor (hCursor=0x10007) returned 0x10007
	[0240.487] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0240.648] malloc (_Size=0x20) returned 0x13abb0
	[0240.648] malloc (_Size=0x20) returned 0x13abe0
	[0240.648] malloc (_Size=0x60) returned 0x13b210
	[0240.648] malloc (_Size=0x8e) returned 0x13b280
	[0240.648] malloc (_Size=0x8) returned 0x65c970
	[0240.648] malloc (_Size=0x10) returned 0x133610
	[0240.649] malloc (_Size=0x48) returned 0x65bf30
	[0240.649] malloc (_Size=0x50) returned 0x132330
	[0240.649] malloc (_Size=0x30) returned 0xce4a0
	[0240.649] malloc (_Size=0x48) returned 0x65bee0
	[0240.649] malloc (_Size=0x30) returned 0xceaa0
	[0240.649] malloc (_Size=0x48) returned 0x65bdf0
	[0240.649] malloc (_Size=0x20) returned 0x13abb0
	[0240.649] malloc (_Size=0x48) returned 0x65bbc0
	[0240.649] malloc (_Size=0x40) returned 0x65bda0
	[0240.649] malloc (_Size=0x48) returned 0x65bb70
	[0240.649] malloc (_Size=0x20) returned 0x13ac10
	[0240.649] malloc (_Size=0x30) returned 0xceb20
	[0240.649] malloc (_Size=0x50) returned 0x1322d0
	[0240.649] malloc (_Size=0x30) returned 0xceb60
	[0240.649] malloc (_Size=0x30) returned 0xceb20
	[0240.649] malloc (_Size=0x20) returned 0x13ac40
	[0240.649] malloc (_Size=0x50) returned 0x132270
	[0240.649] malloc (_Size=0x20) returned 0x13ac70
	[0240.649] malloc (_Size=0x30) returned 0xceba0
	[0240.649] malloc (_Size=0x40) returned 0x65be90
	[0240.649] malloc (_Size=0x50) returned 0x132210
	[0240.650] malloc (_Size=0x40) returned 0x65be40
	[0240.650] malloc (_Size=0x30) returned 0xcebe0
	[0240.650] malloc (_Size=0x20) returned 0x13ac40
	[0240.650] malloc (_Size=0x50) returned 0x1321b0
	[0240.650] malloc (_Size=0x20) returned 0x13aca0
	[0240.650] malloc (_Size=0x30) returned 0xcec20
	[0240.650] malloc (_Size=0x48) returned 0x65be90
	[0240.650] malloc (_Size=0x48) returned 0x65bc10
	[0240.650] malloc (_Size=0x30) returned 0xcec60
	[0240.650] malloc (_Size=0x48) returned 0x65bfd0
	[0240.650] malloc (_Size=0x20) returned 0x13ac40
	[0240.650] malloc (_Size=0x48) returned 0x65c020
	[0240.650] malloc (_Size=0x40) returned 0x65c070
	[0240.650] malloc (_Size=0x48) returned 0x65c0c0
	[0240.650] malloc (_Size=0x20) returned 0x13acd0
	[0240.650] malloc (_Size=0x50) returned 0x132150
	[0240.650] malloc (_Size=0x30) returned 0xceca0
	[0240.650] malloc (_Size=0x30) returned 0xcece0
	[0240.650] malloc (_Size=0x50) returned 0x1320f0
	[0240.650] malloc (_Size=0x30) returned 0xced20
	[0240.650] malloc (_Size=0x30) returned 0xcece0
	[0240.650] malloc (_Size=0x20) returned 0x13ad00
	[0240.650] malloc (_Size=0x50) returned 0x132090
	[0240.651] malloc (_Size=0x20) returned 0x13ad30
	[0240.651] malloc (_Size=0x30) returned 0xced60
	[0240.651] malloc (_Size=0x40) returned 0x65c110
	[0240.651] malloc (_Size=0x50) returned 0x132750
	[0240.651] malloc (_Size=0x40) returned 0x65c160
	[0240.651] malloc (_Size=0x30) returned 0xceda0
	[0240.651] malloc (_Size=0x20) returned 0x13ad00
	[0240.651] malloc (_Size=0x50) returned 0x132b10
	[0240.651] malloc (_Size=0x20) returned 0x13ad60
	[0240.651] malloc (_Size=0x30) returned 0xcede0
	[0240.651] malloc (_Size=0xb0) returned 0x13b210
	[0240.651] malloc (_Size=0x48) returned 0x65c110
	[0240.651] malloc (_Size=0x48) returned 0x65c1b0
	[0240.651] malloc (_Size=0x30) returned 0xcee20
	[0240.651] malloc (_Size=0x48) returned 0x65c200
	[0240.651] malloc (_Size=0x20) returned 0x13ad00
	[0240.651] malloc (_Size=0x48) returned 0x65c250
	[0240.651] malloc (_Size=0x40) returned 0x65c2a0
	[0240.651] malloc (_Size=0x48) returned 0x65c2f0
	[0240.651] malloc (_Size=0x20) returned 0x13ad90
	[0240.651] malloc (_Size=0x50) returned 0x132ab0
	[0240.651] malloc (_Size=0x30) returned 0xcee60
	[0240.651] malloc (_Size=0x30) returned 0xceea0
	[0240.651] malloc (_Size=0x50) returned 0x132a50
	[0240.651] malloc (_Size=0x30) returned 0xceee0
	[0240.652] malloc (_Size=0x30) returned 0xceea0
	[0240.652] malloc (_Size=0x20) returned 0x13adc0
	[0240.652] malloc (_Size=0x50) returned 0x1329f0
	[0240.652] malloc (_Size=0x20) returned 0x13adf0
	[0240.652] malloc (_Size=0x30) returned 0xcef20
	[0240.652] malloc (_Size=0x40) returned 0x65c340
	[0240.652] malloc (_Size=0x50) returned 0x132990
	[0240.652] malloc (_Size=0x40) returned 0x65c390
	[0240.652] malloc (_Size=0x30) returned 0xcef60
	[0240.652] malloc (_Size=0x20) returned 0x13adc0
	[0240.652] malloc (_Size=0x50) returned 0x132930
	[0240.652] malloc (_Size=0x20) returned 0x13ae20
	[0240.652] malloc (_Size=0x30) returned 0xcefa0
	[0240.653] malloc (_Size=0x18) returned 0x133610
	[0240.653] malloc (_Size=0x18) returned 0x133630
	[0240.653] malloc (_Size=0x18) returned 0x133130
	[0240.653] malloc (_Size=0x18) returned 0x133650
	[0240.653] malloc (_Size=0x18) returned 0x133650
	[0240.653] malloc (_Size=0x18) returned 0x133670
	[0240.716] malloc (_Size=0x14) returned 0x13d4d0
	[0240.716] malloc (_Size=0x28) returned 0x13aca0
	[0240.716] malloc (_Size=0x30) returned 0x13b6b0
	[0240.716] malloc (_Size=0x40) returned 0x65bda0
	[0240.716] malloc (_Size=0x30) returned 0x13b6f0
	[0240.716] malloc (_Size=0x30) returned 0x13b730
	[0240.719] malloc (_Size=0x10) returned 0x13d4d0
	[0240.721] malloc (_Size=0x10) returned 0x13d4f0
	[0240.721] malloc (_Size=0x40) returned 0x65bdf0
	[0240.730] malloc (_Size=0x10) returned 0x13d510
	[0240.856] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x80, wParam=0x1, lParam=0x201d3) returned 0x0
	[0240.858] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x93, wParam=0x0, lParam=0x24e0e0) returned 0x1
	[0240.858] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x7f, wParam=0x2, lParam=0x0) returned 0x20213
	[0240.861] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x80, wParam=0x0, lParam=0x10217) returned 0x0
	[0240.861] malloc (_Size=0x68) returned 0x140ba0
	[0240.861] malloc (_Size=0x68) returned 0x140c10
	[0240.861] malloc (_Size=0x68) returned 0x140c80
	[0240.861] malloc (_Size=0x68) returned 0x140cf0
	[0240.861] malloc (_Size=0x58) returned 0x132330
	[0240.861] malloc (_Size=0x68) returned 0x140d60
	[0240.862] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
	[0240.863] GetParent (hWnd=0xa016e) returned 0x0
	[0240.863] GetParent (hWnd=0xa016e) returned 0x0
	[0240.863] GetParent (hWnd=0xa016e) returned 0x0
	[0240.863] GetDesktopWindow () returned 0x10010
	[0240.863] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0240.863] IsWindowEnabled (hWnd=0x20144) returned 0
	[0240.863] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0240.863] IsWindowEnabled (hWnd=0x20142) returned 1
	[0240.863] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0240.863] IsWindowEnabled (hWnd=0x20146) returned 1
	[0240.863] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0240.863] IsWindowEnabled (hWnd=0x100a0) returned 1
	[0240.864] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0240.864] IsWindowEnabled (hWnd=0x20060) returned 0
	[0240.864] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0240.864] IsWindowEnabled (hWnd=0x1009e) returned 1
	[0240.864] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0240.864] IsWindowEnabled (hWnd=0x10088) returned 1
	[0240.864] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0240.864] IsWindowEnabled (hWnd=0x100b6) returned 1
	[0240.864] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0240.864] IsWindowEnabled (hWnd=0x100aa) returned 1
	[0240.864] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0240.864] IsWindowEnabled (hWnd=0x100a6) returned 1
	[0240.864] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0240.864] IsWindowEnabled (hWnd=0x100a2) returned 1
	[0240.864] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0240.864] IsWindowEnabled (hWnd=0x1007a) returned 0
	[0240.864] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0240.864] IsWindowEnabled (hWnd=0x10070) returned 0
	[0240.865] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0240.865] IsWindowEnabled (hWnd=0x10080) returned 1
	[0240.865] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0240.865] IsWindowEnabled (hWnd=0x10074) returned 1
	[0240.865] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0240.865] IsWindowEnabled (hWnd=0x10114) returned 1
	[0240.865] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0240.865] IsWindowEnabled (hWnd=0x1010a) returned 1
	[0240.865] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0240.865] IsWindowEnabled (hWnd=0x100f8) returned 1
	[0240.865] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0240.865] IsWindowEnabled (hWnd=0x100d0) returned 1
	[0240.865] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0240.865] IsWindowEnabled (hWnd=0x500c0) returned 1
	[0240.866] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0240.866] IsWindowEnabled (hWnd=0x100b8) returned 1
	[0240.866] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0240.866] IsWindowEnabled (hWnd=0x10054) returned 0
	[0240.866] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0240.866] IsWindowEnabled (hWnd=0x10052) returned 0
	[0240.866] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0240.866] IsWindowEnabled (hWnd=0x100c8) returned 1
	[0240.866] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0240.866] IsWindowEnabled (hWnd=0x20134) returned 1
	[0240.866] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0240.866] IsWindowEnabled (hWnd=0x20138) returned 1
	[0240.866] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0240.866] IsWindowEnabled (hWnd=0x2013a) returned 1
	[0240.866] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0240.866] IsWindowEnabled (hWnd=0x20118) returned 1
	[0240.866] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0240.866] IsWindowEnabled (hWnd=0x30028) returned 1
	[0240.867] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0240.867] IsWindowEnabled (hWnd=0x2014e) returned 0
	[0240.867] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0240.867] IsWindowEnabled (hWnd=0x20156) returned 1
	[0240.867] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0240.867] IsWindowEnabled (hWnd=0x2015a) returned 0
	[0240.867] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0240.867] IsWindowEnabled (hWnd=0x2001a) returned 1
	[0240.867] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0240.867] IsWindowEnabled (hWnd=0x20022) returned 0
	[0240.867] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0240.867] IsWindowEnabled (hWnd=0x20018) returned 1
	[0240.867] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0240.867] IsWindowEnabled (hWnd=0x1012e) returned 1
	[0240.867] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0240.867] IsWindowEnabled (hWnd=0x10120) returned 1
	[0240.867] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0240.867] IsWindowEnabled (hWnd=0x1011c) returned 1
	[0240.868] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0240.868] IsWindowEnabled (hWnd=0x10104) returned 1
	[0240.868] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0240.868] IsWindowEnabled (hWnd=0x10100) returned 1
	[0240.868] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0240.868] IsWindowEnabled (hWnd=0x100f2) returned 1
	[0240.868] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0240.868] IsWindowEnabled (hWnd=0x100e8) returned 1
	[0240.868] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0240.868] IsWindowEnabled (hWnd=0x100e2) returned 1
	[0240.868] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0240.868] IsWindowEnabled (hWnd=0x200dc) returned 1
	[0240.868] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0240.868] IsWindowEnabled (hWnd=0x100c4) returned 1
	[0240.869] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0240.869] IsWindowEnabled (hWnd=0x500ba) returned 1
	[0240.869] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0240.869] IsWindowEnabled (hWnd=0x100b0) returned 1
	[0240.869] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0240.869] IsWindowEnabled (hWnd=0x100ae) returned 1
	[0240.869] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0240.869] IsWindowEnabled (hWnd=0x100a4) returned 1
	[0240.869] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0240.869] IsWindowEnabled (hWnd=0x10090) returned 1
	[0240.869] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x3019e
	[0240.869] IsWindowEnabled (hWnd=0x3019e) returned 1
	[0240.869] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0240.869] IsWindowEnabled (hWnd=0x201b8) returned 1
	[0240.870] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0240.870] IsWindowEnabled (hWnd=0x201c0) returned 1
	[0240.870] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0240.870] IsWindowEnabled (hWnd=0x101b0) returned 1
	[0240.870] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0240.870] IsWindowEnabled (hWnd=0x101ac) returned 1
	[0240.870] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0240.870] IsWindowEnabled (hWnd=0x101aa) returned 1
	[0240.870] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0240.870] IsWindowEnabled (hWnd=0x20164) returned 0
	[0240.870] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0240.870] IsWindowEnabled (hWnd=0x20162) returned 0
	[0240.870] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0240.870] IsWindowEnabled (hWnd=0x3016a) returned 1
	[0240.870] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0240.870] IsWindowEnabled (hWnd=0x20160) returned 0
	[0240.870] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0240.870] IsWindowEnabled (hWnd=0xa016e) returned 0
	[0240.871] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0240.871] IsWindowEnabled (hWnd=0x20166) returned 0
	[0240.871] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0240.871] IsWindowEnabled (hWnd=0x1008c) returned 1
	[0240.871] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0240.871] IsWindowEnabled (hWnd=0x1006e) returned 1
	[0240.871] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0240.871] IsWindowEnabled (hWnd=0x10066) returned 1
	[0240.871] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0240.871] IsWindowEnabled (hWnd=0x40044) returned 1
	[0240.871] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0240.871] IsWindowEnabled (hWnd=0x1005a) returned 1
	[0240.871] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0240.871] IsWindowEnabled (hWnd=0x1005c) returned 0
	[0240.871] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0240.872] IsWindowEnabled (hWnd=0x20048) returned 1
	[0240.872] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0240.872] IsWindowEnabled (hWnd=0x1004a) returned 0
	[0240.872] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0240.872] IsWindowEnabled (hWnd=0x10046) returned 1
	[0240.872] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0240.872] IsWindowEnabled (hWnd=0x1004e) returned 0
	[0240.872] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0240.872] IsWindowEnabled (hWnd=0x1004c) returned 0
	[0240.872] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0240.872] IsWindowEnabled (hWnd=0x1012c) returned 0
	[0240.872] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0240.872] IsWindowEnabled (hWnd=0x10064) returned 0
	[0240.872] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0240.872] IsWindowEnabled (hWnd=0x2007e) returned 1
	[0240.872] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0240.872] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 214892544
	[0240.872] GetParent (hWnd=0xa016e) returned 0x0
	[0240.872] GetDesktopWindow () returned 0x10010
	[0240.872] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0240.872] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0240.872] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0240.873] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0240.873] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0240.873] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0240.873] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0240.873] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0240.873] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0240.873] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0240.873] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0240.873] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0240.873] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0240.873] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0240.873] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0240.873] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0240.873] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0240.873] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0240.874] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0240.874] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0240.874] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.874] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.874] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0240.874] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0240.874] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0240.874] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.874] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.874] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0240.874] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0240.874] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0240.874] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.874] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.874] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0240.874] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0240.874] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0240.875] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.875] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.875] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0240.875] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0240.875] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0240.875] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.875] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.875] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0240.875] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0240.875] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0240.875] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.875] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.875] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0240.875] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0240.875] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0240.876] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.876] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.876] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0240.876] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0240.876] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0240.876] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.876] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.876] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0240.876] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0240.876] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0240.876] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0240.876] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0240.876] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.876] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.876] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.876] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.876] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0240.877] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0240.877] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0240.877] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.877] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.877] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.877] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.877] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0240.877] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.877] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.877] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.877] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.877] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0240.877] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.877] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.877] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0240.877] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0240.878] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0240.878] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0240.878] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0240.878] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0240.878] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0240.878] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0240.878] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0240.878] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0240.878] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0240.878] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0240.878] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0240.878] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0240.878] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0240.878] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0240.878] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0240.878] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0240.878] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0240.878] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0240.878] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0240.879] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0240.879] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0240.879] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.879] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.879] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0240.879] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0240.879] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0240.879] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.879] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.879] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0240.879] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0240.879] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0240.879] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.879] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.879] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0240.880] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0240.880] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0240.880] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0240.880] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0240.880] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0240.880] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0240.880] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0240.880] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0240.880] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0240.880] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0240.880] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0240.880] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0240.880] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0240.880] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0240.880] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0240.880] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0240.880] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0240.880] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0240.881] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0240.881] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0240.881] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0240.881] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0240.881] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0240.881] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0240.881] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0240.881] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0240.881] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0240.881] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0240.881] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0240.881] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0240.881] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0240.881] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0240.881] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0240.881] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0240.881] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0240.882] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0240.882] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0240.882] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0240.882] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0240.882] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0240.882] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0240.882] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0240.882] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0240.882] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0240.882] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0240.882] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0240.882] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0240.882] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0240.882] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0240.882] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0240.883] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.883] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.883] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0240.883] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0240.883] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0240.883] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0240.883] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0240.883] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0240.883] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.883] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.883] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0240.883] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0240.883] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0240.883] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0240.883] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0240.883] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0240.883] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.883] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.883] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0240.883] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0240.883] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0240.883] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.883] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.883] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0240.883] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.883] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.883] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0240.883] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0240.883] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0240.883] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0240.884] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0240.884] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0240.884] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0240.884] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0240.884] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0240.884] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0240.884] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0240.884] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0240.884] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.884] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.884] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0240.884] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0240.884] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0240.884] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.884] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.884] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x3019e
	[0240.884] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0240.884] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0240.884] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0240.884] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0240.884] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0240.884] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0240.884] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0240.884] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0240.884] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0240.884] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0240.884] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0240.884] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0240.885] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0240.885] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0240.885] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0240.885] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0240.885] SendMessageW (hWnd=0x101ac, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.885] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.885] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.885] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0240.885] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0240.885] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0240.885] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.885] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0240.885] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0240.885] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0240.885] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0240.885] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0240.885] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0240.885] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0240.886] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0240.886] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0240.886] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0240.886] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.886] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0240.886] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0240.886] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0240.886] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0240.886] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.886] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0240.886] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0240.886] SendMessageW (hWnd=0xa016e, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.887] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.887] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0240.887] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0240.887] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0240.887] SendMessageW (hWnd=0x20166, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.887] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0240.887] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20166, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.887] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0240.887] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.887] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.887] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0240.887] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0240.887] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0240.887] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0240.888] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0240.888] GetParent (hWnd=0x10066) returned 0x0
	[0240.888] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0240.888] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0240.888] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0240.888] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0240.888] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0240.888] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0240.888] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0240.888] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0240.888] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0240.888] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0240.888] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0240.888] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0240.888] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0240.888] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0240.888] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0240.889] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0240.889] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0240.889] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0240.889] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0240.889] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0240.889] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0240.889] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0240.889] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0240.889] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0240.889] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0240.889] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.889] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.889] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0240.889] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.889] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.889] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0240.889] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0240.889] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0240.890] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0240.890] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0240.890] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.890] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.890] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0240.890] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0240.890] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0240.890] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.890] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.890] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0240.890] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.890] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.890] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0240.892] malloc (_Size=0x40) returned 0x65bdf0
	[0240.893] malloc (_Size=0x88) returned 0xd03b0
	[0240.893] malloc (_Size=0xb0) returned 0x140ba0
	[0240.893] lstrlenW (lpString="mmc.chm") returned 7
	[0240.893] malloc (_Size=0x1c) returned 0x13aca0
	[0240.893] GetParent (hWnd=0xa016e) returned 0x0
	[0240.894] GetActiveWindow () returned 0x0
	[0240.894] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.894] GetParent (hWnd=0xa016e) returned 0x0
	[0240.894] GetDesktopWindow () returned 0x10010
	[0240.894] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0240.894] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0240.894] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0240.894] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0240.894] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0240.894] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0240.894] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0240.894] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0240.894] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0240.894] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0240.894] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0240.894] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0240.895] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0240.895] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0240.895] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0240.895] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0240.895] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0240.895] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0240.895] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0240.895] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0240.895] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.895] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.895] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0240.895] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0240.895] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0240.895] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.895] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.895] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0240.896] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0240.896] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0240.896] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.896] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.896] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0240.896] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0240.896] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0240.896] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.896] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.896] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0240.896] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0240.896] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0240.896] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.896] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.896] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0240.896] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0240.896] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0240.897] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.897] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.897] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0240.897] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0240.897] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0240.897] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.897] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.897] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0240.897] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0240.897] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0240.897] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.897] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.897] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0240.897] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0240.897] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0240.898] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0240.898] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0240.898] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.898] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.898] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.898] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.898] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0240.898] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0240.898] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0240.898] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.898] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.898] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.898] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.898] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0240.898] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.898] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.899] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.899] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.899] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0240.899] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.899] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.899] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0240.899] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0240.899] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0240.899] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0240.899] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0240.899] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0240.899] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0240.899] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0240.899] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0240.899] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0240.899] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0240.899] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0240.899] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0240.900] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0240.900] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0240.900] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0240.900] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0240.900] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0240.900] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0240.900] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0240.900] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0240.900] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0240.900] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0240.900] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.900] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.900] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0240.900] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0240.900] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0240.900] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.901] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.901] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0240.901] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0240.901] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0240.901] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.901] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.901] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0240.901] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0240.901] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0240.901] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0240.901] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0240.901] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0240.901] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0240.901] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0240.901] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0240.901] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0240.901] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0240.901] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0240.901] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0240.902] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0240.902] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0240.902] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0240.902] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0240.902] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0240.950] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0240.950] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0240.950] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0240.950] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0240.950] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0240.950] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0240.950] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0240.950] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0240.950] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0240.950] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0240.950] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0240.950] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0240.950] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0240.950] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0240.951] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0240.951] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0240.951] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0240.951] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0240.951] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0240.951] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0240.951] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0240.951] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0240.951] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0240.951] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0240.951] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0240.951] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0240.951] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0240.951] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0240.951] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0240.951] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0240.951] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0240.952] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0240.952] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0240.952] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.952] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.952] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0240.952] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0240.952] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0240.952] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0240.952] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0240.952] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0240.952] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.952] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.952] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0240.952] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0240.952] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0240.952] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0240.953] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0240.953] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0240.953] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.953] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.953] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0240.953] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0240.953] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0240.953] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.953] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.953] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0240.953] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.953] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.953] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0240.953] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0240.953] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0240.953] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0240.953] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0240.953] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0240.954] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0240.954] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0240.954] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0240.954] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0240.954] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0240.954] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0240.954] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.954] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.954] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0240.954] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0240.954] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0240.954] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.954] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.954] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x3019e
	[0240.954] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0240.954] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0240.954] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0240.955] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0240.955] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0240.955] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0240.955] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0240.955] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0240.955] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0240.955] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0240.955] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0240.955] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0240.955] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0240.955] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0240.955] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0240.955] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0240.955] SendMessageW (hWnd=0x101ac, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.955] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.955] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.955] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0240.955] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0240.955] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0240.956] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.956] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0240.956] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0240.956] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0240.956] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0240.956] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0240.956] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0240.956] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0240.956] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0240.956] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0240.956] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0240.956] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.956] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0240.956] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0240.956] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0240.956] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0240.957] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.957] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0240.957] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0240.957] SendMessageW (hWnd=0xa016e, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.957] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.957] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0240.957] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0240.957] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0240.957] SendMessageW (hWnd=0x20166, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.957] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0240.957] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20166, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.958] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0240.958] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.958] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.958] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0240.958] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0240.958] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0240.958] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0240.958] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0240.958] GetParent (hWnd=0x10066) returned 0x0
	[0240.958] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0240.958] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0240.958] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0240.958] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0240.958] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0240.958] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0240.958] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0240.958] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0240.958] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0240.959] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0240.959] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0240.959] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0240.959] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0240.959] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0240.959] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0240.959] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0240.959] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0240.959] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0240.959] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0240.959] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0240.959] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0240.959] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0240.959] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0240.959] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0240.959] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0240.960] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.960] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.960] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0240.960] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.960] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.960] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0240.960] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0240.960] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0240.960] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0240.960] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0240.960] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.960] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.960] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0240.960] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0240.960] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0240.960] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.961] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.961] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0240.961] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.961] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.961] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0241.259] lstrlenW (lpString="") returned 0
	[0241.259] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0241.259] malloc (_Size=0x4e) returned 0x1322d0
	[0241.259] malloc (_Size=0x22) returned 0x13ac70
	[0241.259] free (_Block=0x1322d0) 
	[0241.259] free (_Block=0x13ac70) 
	[0241.259] lstrlenW (lpString="") returned 0
	[0241.260] malloc (_Size=0x28) returned 0x13ac70
	[0241.260] malloc (_Size=0x28) returned 0x13ac70
	[0241.260] lstrlenW (lpString="") returned 0
	[0241.261] lstrlenW (lpString="") returned 0
	[0241.261] lstrlenW (lpString="") returned 0
	[0241.261] FindResourceW (hModule=0x7fef7fc0000, lpName=0x10, lpType=0x6) returned 0x1e40480
	[0241.261] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xfc, lpBuffer=0x24e460, cchBufferMax=256 | out: lpBuffer="Computer Management (Local)") returned 0x1b
	[0241.261] lstrlenW (lpString="Computer Management (Local)") returned 27
	[0241.261] malloc (_Size=0x44) returned 0x65bee0
	[0241.262] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0241.262] InvalidateRect (hWnd=0x101a6, lpRect=0x0, bErase=1) returned 1
	[0241.263] InvalidateRect (hWnd=0x201c2, lpRect=0x0, bErase=1) returned 1
	[0241.263] InvalidateRect (hWnd=0x101e6, lpRect=0x0, bErase=1) returned 1
	[0241.263] free (_Block=0x65bee0) 
	[0241.263] malloc (_Size=0x420) returned 0x1421b0
	[0241.263] SetRectEmpty (in: lprc=0x142258 | out: lprc=0x142258) returned 1
	[0241.263] malloc (_Size=0x18) returned 0x13d670
	[0241.264] FindResourceW (hModule=0xff6d0000, lpName=0x9, lpType=0x6) returned 0x3e07e8
	[0241.264] LoadStringW (in: hInstance=0xff6d0000, uID=0x81, lpBuffer=0x24e850, cchBufferMax=256 | out: lpBuffer="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 0x6a
	[0241.264] lstrlenW (lpString="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 106
	[0241.264] malloc (_Size=0xe2) returned 0x140c60
	[0241.264] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0241.264] LoadIconW (hInstance=0xff6d0000, lpIconName=0x81) returned 0x101dd
	[0241.264] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0241.265] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x24e8c0 | out: lpWndClass=0x24e8c0) returned 1
	[0241.265] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x24e9d0 | out: lpWndClass=0x24e9d0) returned 1
	[0241.265] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0241.265] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x24e8b0 | out: lpWndClass=0x24e8b0) returned 1
	[0241.266] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x220, wParam=0x0, lParam=0x24ea30) returned 0x0
	[0241.266] GetParent (hWnd=0x500a8) returned 0x10012
	[0241.266] SetWindowLongPtrW (hWnd=0x500a8, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0241.266] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x500a8, lParam=0x24dd60) returned 0x0
	[0241.268] DefMDIChildProcW (hWnd=0x500a8, uMsg=0x81, wParam=0x0, lParam=0x24de40) returned 0x1
	[0241.268] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0241.268] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x24d890 | out: lpWndClass=0x24d890) returned 1
	[0241.268] SetWindowLongW (hWnd=0x500a8, nIndex=-20, dwNewLong=320) returned 320
	[0241.269] DefMDIChildProcW (hWnd=0x500a8, uMsg=0x7c, wParam=0xffffffffffffffec, lParam=0x24d930) returned 0x0
	[0241.269] DefMDIChildProcW (hWnd=0x500a8, uMsg=0x7d, wParam=0xffffffffffffffec, lParam=0x24d930) returned 0x0
	[0241.270] DefMDIChildProcW (hWnd=0x500a8, uMsg=0xd, wParam=0x104, lParam=0x1e9a9e0) returned 0x0
	[0241.270] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x24d1a8) returned 0x0
	[0241.271] DefMDIChildProcW (hWnd=0x500a8, uMsg=0x83, wParam=0x0, lParam=0x24deb0) returned 0x0
	[0241.272] DefMDIChildProcW (hWnd=0x500a8, uMsg=0x1, wParam=0x0, lParam=0x24de30) returned 0x0
	[0241.272] malloc (_Size=0x5a0) returned 0x1425e0
	[0241.272] malloc (_Size=0x18) returned 0x13d690
	[0241.272] malloc (_Size=0x20) returned 0x13ac70
	[0241.272] malloc (_Size=0x18) returned 0x13d6b0
	[0241.272] malloc (_Size=0x18) returned 0x13d6d0
	[0241.272] malloc (_Size=0x18) returned 0x13d6f0
	[0241.272] malloc (_Size=0x18) returned 0x13d710
	[0241.272] malloc (_Size=0x18) returned 0x13d730
	[0241.273] malloc (_Size=0x18) returned 0x13d750
	[0241.273] malloc (_Size=0x120) returned 0x142b90
	[0241.273] malloc (_Size=0x18) returned 0x13d770
	[0241.273] malloc (_Size=0x70) returned 0x142cc0
	[0241.273] malloc (_Size=0x20) returned 0x13acd0
	[0241.273] malloc (_Size=0x58) returned 0x1322d0
	[0241.273] malloc (_Size=0xe0) returned 0x142d40
	[0241.273] CreateWindowExW (dwExStyle=0x0, lpClassName="MMCViewWindow", lpWindowName=0x0, dwStyle=0x52000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x500a8, hMenu=0xe900, hInstance=0xff6d0000, lpParam=0x24eb30) returned 0x10216
	[0241.273] malloc (_Size=0x100) returned 0x137840
	[0241.274] GetParent (hWnd=0x10216) returned 0x10012
	[0241.274] SetWindowLongPtrW (hWnd=0x10216, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0241.274] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10216, lParam=0x24d070) returned 0x0
	[0241.274] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x81, wParam=0x0, lParam=0x24d150) returned 0x1
	[0241.275] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x83, wParam=0x0, lParam=0x24d1c0) returned 0x0
	[0241.275] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x1, wParam=0x0, lParam=0x24d150) returned 0x0
	[0241.275] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.276] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.276] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.276] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.276] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.276] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.276] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.276] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.276] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.276] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.276] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.276] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.276] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.276] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.276] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.276] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.276] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.276] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.276] GetParent (hWnd=0x10216) returned 0x500a8
	[0241.276] GetParent (hWnd=0x500a8) returned 0x50168
	[0241.277] CreateWindowExW (dwExStyle=0x20000, lpClassName="STATIC", lpWindowName=0x0, dwStyle=0x4400428d, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10216, hMenu=0x31f7, hInstance=0xff6d0000, lpParam=0x0) returned 0x10218
	[0241.277] GetParent (hWnd=0x10218) returned 0x10012
	[0241.277] SetWindowLongPtrW (hWnd=0x10218, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6d61b4
	[0241.277] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10218, lParam=0x24c260) returned 0x0
	[0241.278] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x81, wParam=0x0, lParam=0x24c340) returned 0x1
	[0241.278] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x83, wParam=0x0, lParam=0x24c3a0) returned 0x0
	[0241.279] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x1, wParam=0x0, lParam=0x24c340) returned 0x0
	[0241.279] GetWindowDC (hWnd=0x10218) returned 0xc01083a
	[0241.279] malloc (_Size=0x88) returned 0xd0560
	[0241.279] malloc (_Size=0x100) returned 0x137950
	[0241.279] SelectObject (hdc=0xc01083a, h=0x70a098c) returned 0x18a002e
	[0241.280] GetWindowLongW (hWnd=0x10218, nIndex=-20) returned 131072
	[0241.280] GetWindowLongW (hWnd=0x10218, nIndex=-16) returned 1140867725
	[0241.280] SelectObject (hdc=0xc01083a, h=0x18a002e) returned 0x70a098c
	[0241.280] free (_Block=0xd0560) 
	[0241.280] free (_Block=0x137950) 
	[0241.280] ReleaseDC (hWnd=0x10218, hDC=0xc01083a) returned 1
	[0241.281] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.281] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x3, wParam=0x0, lParam=0x10001) returned 0x0
	[0241.282] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x210, wParam=0x31f70001, lParam=0x10218) returned 0x0
	[0241.282] lstrlenW (lpString="SysTreeView32") returned 13
	[0241.282] malloc (_Size=0x28) returned 0x13ac40
	[0241.282] malloc (_Size=0x20) returned 0x13ad60
	[0241.282] malloc (_Size=0x18) returned 0x13d790
	[0241.282] malloc (_Size=0x18) returned 0x13d7b0
	[0241.282] malloc (_Size=0x30) returned 0x13b770
	[0241.282] malloc (_Size=0x30) returned 0x13b7b0
	[0241.282] malloc (_Size=0x28) returned 0x13ad30
	[0241.283] malloc (_Size=0x30) returned 0x13b7f0
	[0241.283] malloc (_Size=0x18) returned 0x13d7d0
	[0241.283] malloc (_Size=0x20) returned 0x13adc0
	[0241.283] malloc (_Size=0x18) returned 0x13d7f0
	[0241.283] CreateWindowExW (dwExStyle=0x200, lpClassName="SysTreeView32", lpWindowName=0x0, dwStyle=0x52000029, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10216, hMenu=0x31f1, hInstance=0xff6d0000, lpParam=0x24ca08) returned 0x1021a
	[0241.283] GetParent (hWnd=0x1021a) returned 0x10012
	[0241.283] SetWindowLongPtrW (hWnd=0x1021a, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6c7c18
	[0241.284] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1021a, lParam=0x24c120) returned 0x0
	[0241.284] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x81, wParam=0x0, lParam=0x24c200) returned 0x1
	[0241.285] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x83, wParam=0x0, lParam=0x24c270) returned 0x0
	[0241.285] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x1, wParam=0x0, lParam=0x24c200) returned 0x0
	[0241.286] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x55, wParam=0x1021a, lParam=0x3) returned 0x2
	[0241.286] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.287] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0241.288] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0241.289] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0241.289] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0241.290] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0241.291] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0241.291] GetWindowLongPtrW (hWnd=0x1021c, nIndex=-4) returned 0x7fefc6af450
	[0241.291] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x0
	[0241.291] SetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423", hData=0x7fefc6af450) returned 1
	[0241.292] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.292] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0241.292] SetWindowLongPtrW (hWnd=0x1021c, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7fefc6af450
	[0241.292] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1021c, lParam=0x24b1b0) returned 0x0
	[0241.292] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.292] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x81, wParam=0x0, lParam=0x24b290) returned 0x1
	[0241.292] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.355] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x83, wParam=0x0, lParam=0x24b310) returned 0x0
	[0241.356] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.356] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x1, wParam=0x0, lParam=0x24b290) returned 0x0
	[0241.356] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x55, wParam=0x1021c, lParam=0x3) returned 0x2
	[0241.357] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.357] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.357] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x24ad80) returned 0x0
	[0241.357] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.357] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x24ad80) returned 0x0
	[0241.358] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.358] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.358] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.358] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.358] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.358] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x432, wParam=0x0, lParam=0x24b950) returned 0x1
	[0241.359] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x55, wParam=0x1021c, lParam=0x3) returned 0x2
	[0241.360] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.360] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x30, wParam=0x70a0991, lParam=0x1) returned 0x1
	[0241.360] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.360] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x403, wParam=0x3, lParam=0x1f4) returned 0x0
	[0241.360] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.360] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.360] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.361] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.361] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.361] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.361] IsWindowVisible (hWnd=0x1021a) returned 0
	[0241.361] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.361] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.361] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.361] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.361] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.361] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.361] IsWindowVisible (hWnd=0x1021a) returned 0
	[0241.361] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.361] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.361] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.361] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.361] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.361] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.361] IsWindowVisible (hWnd=0x1021a) returned 0
	[0241.362] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x31a, wParam=0xffffffffffffffff, lParam=0x80000001) returned 0x0
	[0241.362] GetParent (hWnd=0x1021a) returned 0x10216
	[0241.362] GetParent (hWnd=0x10216) returned 0x500a8
	[0241.362] GetParent (hWnd=0x10216) returned 0x500a8
	[0241.362] GetParent (hWnd=0x500a8) returned 0x50168
	[0241.363] GetDlgItem (hDlg=0x500a8, nIDDlgItem=59648) returned 0x10216
	[0241.363] GetParent (hWnd=0x10216) returned 0x500a8
	[0241.367] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x1109, wParam=0x0, lParam=0x4e5f80) returned 0x0
	[0241.368] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0241.369] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0241.369] malloc (_Size=0x60) returned 0x140e00
	[0241.369] malloc (_Size=0x18) returned 0x13d810
	[0241.369] GetLastError () returned 0x36b7
	[0241.370] SetLastError (dwErrCode=0x36b7) 
	[0241.370] DeleteObject (ho=0x200509ac) returned 1
	[0241.371] GetLastError () returned 0x0
	[0241.371] SetLastError (dwErrCode=0x0) 
	[0241.371] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.372] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.372] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x210, wParam=0x31f10001, lParam=0x1021a) returned 0x0
	[0241.373] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.373] malloc (_Size=0x20) returned 0x13ae50
	[0241.373] malloc (_Size=0x18) returned 0x13d830
	[0241.373] malloc (_Size=0x20) returned 0x13ae80
	[0241.373] malloc (_Size=0x18) returned 0x13d850
	[0241.373] SetWindowPos (hWnd=0x1021a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0241.373] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x46, wParam=0x0, lParam=0x24c9a0) returned 0x0
	[0241.374] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0241.375] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x47, wParam=0x0, lParam=0x24c9a0) returned 0x0
	[0241.375] malloc (_Size=0x3a0) returned 0x143020
	[0241.375] malloc (_Size=0x20) returned 0x13aeb0
	[0241.375] malloc (_Size=0x18) returned 0x13d870
	[0241.375] LoadResource (hModule=0xff6d0000, hResInfo=0xff897758) returned 0xff8c7278
	[0241.375] LockResource (hResData=0xff8c7278) returned 0xff8c7278
	[0241.375] malloc (_Size=0x68) returned 0x140e70
	[0241.375] GetSysColor (nIndex=18) returned 0x0
	[0241.375] GetSysColor (nIndex=18) returned 0x0
	[0241.375] GetSysColor (nIndex=18) returned 0x0
	[0241.375] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0241.375] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0241.375] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0241.375] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0241.375] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0241.375] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0241.375] GetSysColor (nIndex=20) returned 0xffffff
	[0241.375] GetSysColor (nIndex=20) returned 0xffffff
	[0241.375] GetSysColor (nIndex=20) returned 0xffffff
	[0241.375] GetDC (hWnd=0x0) returned 0x8010666
	[0241.376] CreateCompatibleBitmap (hdc=0x8010666, cx=16, cy=8) returned 0x200509b0
	[0241.376] CreateCompatibleDC (hdc=0x8010666) returned 0x210109ac
	[0241.376] SelectObject (hdc=0x210109ac, h=0x200509b0) returned 0x185000f
	[0241.376] StretchDIBits (hdc=0x210109ac, xDest=0, yDest=0, DestWidth=16, DestHeight=8, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=8, lpBits=0xff8c72e0, lpbmi=0x140e70, iUsage=0x0, rop=0xcc0020) returned 8
	[0241.376] SelectObject (hdc=0x210109ac, h=0x185000f) returned 0x200509b0
	[0241.376] DeleteDC (hdc=0x210109ac) returned 1
	[0241.376] ReleaseDC (hWnd=0x0, hDC=0x8010666) returned 1
	[0241.376] free (_Block=0x140e70) 
	[0241.376] ImageList_Create (cx=8, cy=8, flags=0xfe, cInitial=2, cGrow=2) returned 0x50ebc0
	[0241.376] GetLastError () returned 0x0
	[0241.376] SetLastError (dwErrCode=0x0) 
	[0241.377] DeleteObject (ho=0x200509b0) returned 1
	[0241.377] GetLastError () returned 0x0
	[0241.377] SetLastError (dwErrCode=0x0) 
	[0241.377] malloc (_Size=0x28) returned 0x13aee0
	[0241.377] malloc (_Size=0x30) returned 0x13b830
	[0241.377] malloc (_Size=0x1f0) returned 0x143ce0
	[0241.377] lstrlenW (lpString="SysListView32") returned 13
	[0241.377] malloc (_Size=0x28) returned 0x13af10
	[0241.377] malloc (_Size=0x18) returned 0x13d890
	[0241.377] malloc (_Size=0x20) returned 0x13af40
	[0241.378] malloc (_Size=0x30) returned 0x13b870
	[0241.378] CreateWindowExW (dwExStyle=0x200, lpClassName="SysListView32", lpWindowName=0x0, dwStyle=0x5600024d, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10216, hMenu=0x31f2, hInstance=0xff6d0000, lpParam=0x24eb30) returned 0x20228
	[0241.378] GetParent (hWnd=0x20228) returned 0x10012
	[0241.378] SetWindowLongPtrW (hWnd=0x20228, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6b5944
	[0241.378] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x20228, lParam=0x24c1a0) returned 0x0
	[0241.379] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x81, wParam=0x0, lParam=0x24c280) returned 0x1
	[0241.379] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x83, wParam=0x0, lParam=0x24c2f0) returned 0x0
	[0241.380] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1, wParam=0x0, lParam=0x24c280) returned 0x0
	[0241.381] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.381] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1022a, lParam=0x24b020) returned 0x0
	[0241.382] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x55, wParam=0x1022a, lParam=0x3) returned 0x2
	[0241.382] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.383] GetParent (hWnd=0x1022a) returned 0x20228
	[0241.383] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x210, wParam=0x1, lParam=0x1022a) returned 0x0
	[0241.384] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1022c, lParam=0x24ae30) returned 0x0
	[0241.385] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x55, wParam=0x1022c, lParam=0x3) returned 0x2
	[0241.385] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.386] GetParent (hWnd=0x1022c) returned 0x20228
	[0241.386] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x210, wParam=0x1, lParam=0x1022c) returned 0x0
	[0241.386] CallNextHookEx (hhk=0x10197, nCode=4, wParam=0x1022c, lParam=0x0) returned 0x0
	[0241.387] GetParent (hWnd=0x1022c) returned 0x20228
	[0241.387] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x210, wParam=0x2, lParam=0x1022c) returned 0x0
	[0241.388] GetDlgCtrlID (hWnd=0x1022a) returned 0
	[0241.388] GetParent (hWnd=0x1022a) returned 0x20228
	[0241.388] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x4e, wParam=0x0, lParam=0x24b080) returned 0x0
	[0241.389] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x46, wParam=0x0, lParam=0x249570) returned 0x0
	[0241.389] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x83, wParam=0x1, lParam=0x249540) returned 0x0
	[0241.393] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x47, wParam=0x0, lParam=0x249570) returned 0x0
	[0241.395] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x46, wParam=0x0, lParam=0x249570) returned 0x0
	[0241.395] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x83, wParam=0x1, lParam=0x249540) returned 0x0
	[0241.396] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x47, wParam=0x0, lParam=0x249570) returned 0x0
	[0241.398] GetWindowLongPtrW (hWnd=0x1022e, nIndex=-4) returned 0x7fefc6af450
	[0241.398] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x0
	[0241.398] SetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423", hData=0x7fefc6af450) returned 1
	[0241.398] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.398] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0241.398] SetWindowLongPtrW (hWnd=0x1022e, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7fefc6af450
	[0241.398] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1022e, lParam=0x24b080) returned 0x0
	[0241.398] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.398] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x81, wParam=0x0, lParam=0x24b160) returned 0x1
	[0241.398] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.398] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x83, wParam=0x0, lParam=0x24b1e0) returned 0x0
	[0241.398] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.398] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x1, wParam=0x0, lParam=0x24b160) returned 0x0
	[0241.399] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.399] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x24ac50) returned 0x0
	[0241.399] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.399] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x24ac50) returned 0x0
	[0241.399] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.399] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.399] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.399] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.399] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.399] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x432, wParam=0x0, lParam=0x24b820) returned 0x1
	[0241.400] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x55, wParam=0x1022e, lParam=0x3) returned 0x2
	[0241.400] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.400] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x30, wParam=0x3f0a09aa, lParam=0x0) returned 0x1
	[0241.400] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.400] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.400] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.400] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.400] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.400] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.400] IsWindowVisible (hWnd=0x1021a) returned 0
	[0241.400] IsWindowVisible (hWnd=0x20228) returned 0
	[0241.400] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.401] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.401] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.401] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.401] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.401] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.401] IsWindowVisible (hWnd=0x1021a) returned 0
	[0241.401] IsWindowVisible (hWnd=0x20228) returned 0
	[0241.401] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.401] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.401] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.401] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.401] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.401] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.401] IsWindowVisible (hWnd=0x1021a) returned 0
	[0241.401] IsWindowVisible (hWnd=0x20228) returned 0
	[0241.401] malloc (_Size=0x400) returned 0x143ee0
	[0241.401] GetParent (hWnd=0x20228) returned 0x10216
	[0241.401] GetParent (hWnd=0x10216) returned 0x500a8
	[0241.401] GetParent (hWnd=0x10216) returned 0x500a8
	[0241.401] GetParent (hWnd=0x500a8) returned 0x50168
	[0241.402] GetDlgItem (hDlg=0x500a8, nIDDlgItem=59648) returned 0x10216
	[0241.402] GetParent (hWnd=0x10216) returned 0x500a8
	[0241.402] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1036, wParam=0x0, lParam=0x4030) returned 0x0
	[0241.403] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.403] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x41c, wParam=0x0, lParam=0x0) returned 0x0
	[0241.403] malloc (_Size=0x60) returned 0x140e70
	[0241.403] malloc (_Size=0x18) returned 0x13d8b0
	[0241.403] malloc (_Size=0x20) returned 0x13af70
	[0241.403] malloc (_Size=0x18) returned 0x13d8d0
	[0241.404] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.404] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.404] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x434, wParam=0x0, lParam=0x24ba00) returned 0x0
	[0241.404] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x101f, wParam=0x0, lParam=0x0) returned 0x1022a
	[0241.404] GetParent (hWnd=0x1022a) returned 0x20228
	[0241.404] SetWindowLongPtrW (hWnd=0x1022a, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6bbf00
	[0241.405] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0241.405] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0241.406] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.406] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x210, wParam=0x31f20001, lParam=0x20228) returned 0x0
	[0241.407] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.407] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x50fbd0
	[0241.407] ImageList_Create (cx=32, cy=32, flags=0x21, cInitial=20, cGrow=10) returned 0x510320
	[0241.408] malloc (_Size=0x100) returned 0x137950
	[0241.410] GetLastError () returned 0x6
	[0241.410] SetLastError (dwErrCode=0x6) 
	[0241.410] GetLastError () returned 0x6
	[0241.410] SetLastError (dwErrCode=0x6) 
	[0241.411] GetLastError () returned 0x6
	[0241.411] SetLastError (dwErrCode=0x6) 
	[0241.411] GetLastError () returned 0x6
	[0241.411] SetLastError (dwErrCode=0x6) 
	[0241.411] malloc (_Size=0x8) returned 0x143ee0
	[0241.411] malloc (_Size=0x150) returned 0x143f00
	[0241.411] malloc (_Size=0x8) returned 0x144090
	[0241.411] malloc (_Size=0x8) returned 0x1440a0
	[0241.411] malloc (_Size=0x8) returned 0x1440b0
	[0241.411] malloc (_Size=0x8) returned 0x1440c0
	[0241.411] malloc (_Size=0x8) returned 0x1440d0
	[0241.411] malloc (_Size=0x8) returned 0x1440e0
	[0241.411] malloc (_Size=0x8) returned 0x1440f0
	[0241.411] malloc (_Size=0x8) returned 0x144100
	[0241.411] GetLastError () returned 0x6
	[0241.411] SetLastError (dwErrCode=0x6) 
	[0241.411] DeleteObject (ho=0x20509c6) returned 1
	[0241.412] GetLastError () returned 0x0
	[0241.412] SetLastError (dwErrCode=0x0) 
	[0241.412] GetLastError () returned 0x0
	[0241.412] SetLastError (dwErrCode=0x0) 
	[0241.412] DeleteObject (ho=0x20509c4) returned 1
	[0241.412] GetLastError () returned 0x0
	[0241.412] SetLastError (dwErrCode=0x0) 
	[0241.422] GetLastError () returned 0x0
	[0241.422] SetLastError (dwErrCode=0x0) 
	[0241.423] DeleteObject (ho=0x20509c2) returned 1
	[0241.423] GetLastError () returned 0x0
	[0241.423] SetLastError (dwErrCode=0x0) 
	[0241.423] GetLastError () returned 0x0
	[0241.423] SetLastError (dwErrCode=0x0) 
	[0241.423] DeleteObject (ho=0x10509c0) returned 1
	[0241.423] GetLastError () returned 0x0
	[0241.423] SetLastError (dwErrCode=0x0) 
	[0241.424] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1003, wParam=0x1, lParam=0x50fbd0) returned 0x0
	[0241.424] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10230, lParam=0x24b8b0) returned 0x0
	[0241.425] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x55, wParam=0x10230, lParam=0x3) returned 0x2
	[0241.425] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.426] GetParent (hWnd=0x10230) returned 0x20228
	[0241.426] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x210, wParam=0x1, lParam=0x10230) returned 0x0
	[0241.426] CallNextHookEx (hhk=0x10197, nCode=4, wParam=0x10230, lParam=0x0) returned 0x0
	[0241.427] GetParent (hWnd=0x10230) returned 0x20228
	[0241.427] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x210, wParam=0x2, lParam=0x10230) returned 0x0
	[0241.427] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1208, wParam=0x0, lParam=0x50fbd0) returned 0x0
	[0241.428] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1003, wParam=0x0, lParam=0x510320) returned 0x0
	[0241.428] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1208, wParam=0x0, lParam=0x50ebc0) returned 0x50fbd0
	[0241.429] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1027, wParam=0x0, lParam=0x0) returned 0x0
	[0241.429] GetWindowLongW (hWnd=0x20228, nIndex=-16) returned 1445986893
	[0241.429] malloc (_Size=0x20) returned 0x13afa0
	[0241.429] malloc (_Size=0x18) returned 0x13d8f0
	[0241.429] malloc (_Size=0x18) returned 0x13d910
	[0241.429] malloc (_Size=0x20) returned 0x13afd0
	[0241.429] malloc (_Size=0x18) returned 0x13d930
	[0241.429] malloc (_Size=0x18) returned 0x13d950
	[0241.430] CreateWindowExW (dwExStyle=0x200, lpClassName="AfxFrameOrView42u", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10216, hMenu=0x31fc, hInstance=0xff6d0000, lpParam=0x24ca08) returned 0x20230
	[0241.430] GetParent (hWnd=0x20230) returned 0x10012
	[0241.430] SetWindowLongPtrW (hWnd=0x20230, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0241.430] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x20230, lParam=0x24c110) returned 0x0
	[0241.431] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x81, wParam=0x0, lParam=0x24c1f0) returned 0x1
	[0241.431] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x83, wParam=0x0, lParam=0x24c270) returned 0x0
	[0241.432] GetWindowLongW (hWnd=0x20230, nIndex=-16) returned 1073741824
	[0241.432] SetWindowLongW (hWnd=0x20230, nIndex=-16, dwNewLong=1107296256) returned 1073741824
	[0241.432] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x24bc30) returned 0x0
	[0241.621] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x24bc30) returned 0x0
	[0241.621] malloc (_Size=0x400) returned 0x144460
	[0241.621] malloc (_Size=0x400) returned 0x144460
	[0241.621] malloc (_Size=0x400) returned 0x144460
	[0241.622] malloc (_Size=0x400) returned 0x144460
	[0241.622] malloc (_Size=0x400) returned 0x144460
	[0241.622] malloc (_Size=0x400) returned 0x144460
	[0241.622] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x1, wParam=0x0, lParam=0x24c1f0) returned 0x0
	[0241.622] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.622] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.622] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.622] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.622] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.622] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.622] IsWindowVisible (hWnd=0x1021a) returned 0
	[0241.622] IsWindowVisible (hWnd=0x20228) returned 0
	[0241.622] IsWindowVisible (hWnd=0x20230) returned 0
	[0241.622] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.623] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.623] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.623] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.623] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.623] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.623] IsWindowVisible (hWnd=0x1021a) returned 0
	[0241.623] IsWindowVisible (hWnd=0x20228) returned 0
	[0241.623] IsWindowVisible (hWnd=0x20230) returned 0
	[0241.623] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.623] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.623] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.623] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.623] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.623] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.623] IsWindowVisible (hWnd=0x1021a) returned 0
	[0241.623] IsWindowVisible (hWnd=0x20228) returned 0
	[0241.623] IsWindowVisible (hWnd=0x20230) returned 0
	[0241.623] malloc (_Size=0x60) returned 0x140ee0
	[0241.624] malloc (_Size=0x60) returned 0x140f50
	[0241.624] malloc (_Size=0x60) returned 0x140fc0
	[0241.626] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1024e, lParam=0x24b280) returned 0x0
	[0241.626] GetParent (hWnd=0x1024e) returned 0x20230
	[0241.626] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x210, wParam=0x1, lParam=0x1024e) returned 0x0
	[0241.627] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10250, lParam=0x24b2d0) returned 0x0
	[0241.627] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10252, lParam=0x24afa0) returned 0x0
	[0241.628] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10254, lParam=0x24af00) returned 0x0
	[0241.629] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10256, lParam=0x24afa0) returned 0x0
	[0241.629] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10258, lParam=0x24af00) returned 0x0
	[0241.631] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x515da0
	[0241.632] GetWindowLongW (hWnd=0x20230, nIndex=-20) returned 512
	[0241.633] GetLastError () returned 0x6
	[0241.633] SetLastError (dwErrCode=0x6) 
	[0241.633] GetLastError () returned 0x6
	[0241.633] SetLastError (dwErrCode=0x6) 
	[0241.633] GetLastError () returned 0x6
	[0241.633] SetLastError (dwErrCode=0x6) 
	[0241.633] DeleteObject (ho=0x10509ec) returned 1
	[0241.633] GetLastError () returned 0x0
	[0241.633] SetLastError (dwErrCode=0x0) 
	[0241.634] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.634] GetParent (hWnd=0x1024e) returned 0x20230
	[0241.634] MoveWindow (hWnd=0x1024e, X=0, Y=21, nWidth=0, nHeight=-21, bRepaint=1) returned 1
	[0241.635] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.636] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x210, wParam=0x31fc0001, lParam=0x20230) returned 0x0
	[0241.636] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.636] malloc (_Size=0x20) returned 0x13b000
	[0241.636] malloc (_Size=0x18) returned 0x13d970
	[0241.637] malloc (_Size=0x20) returned 0x144490
	[0241.637] malloc (_Size=0x18) returned 0x13d990
	[0241.637] malloc (_Size=0x20) returned 0x1444c0
	[0241.637] malloc (_Size=0x18) returned 0x13d9b0
	[0241.637] SetWindowPos (hWnd=0x20230, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0241.637] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x46, wParam=0x0, lParam=0x24c9a0) returned 0x0
	[0241.638] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0241.638] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x47, wParam=0x0, lParam=0x24c9a0) returned 0x0
	[0241.638] CreateWindowExW (dwExStyle=0x0, lpClassName="AMCCustomTab", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10216, hMenu=0x31fa, hInstance=0xff6d0000, lpParam=0x0) returned 0x1025a
	[0241.639] GetParent (hWnd=0x1025a) returned 0x10012
	[0241.639] SetWindowLongPtrW (hWnd=0x1025a, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0241.639] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1025a, lParam=0x24c1e0) returned 0x0
	[0241.639] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x81, wParam=0x0, lParam=0x24c2c0) returned 0x1
	[0241.640] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x83, wParam=0x0, lParam=0x24c330) returned 0x0
	[0241.640] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x1, wParam=0x0, lParam=0x24c2c0) returned 0x0
	[0241.641] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.641] GetDC (hWnd=0x1025a) returned 0x8010666
	[0241.641] malloc (_Size=0x88) returned 0xd0560
	[0241.641] malloc (_Size=0x100) returned 0x137a60
	[0241.641] SelectObject (hdc=0x8010666, h=0x0) returned 0x0
	[0241.641] SelectObject (hdc=0x8010666, h=0x0) returned 0x0
	[0241.642] free (_Block=0xd0560) 
	[0241.642] free (_Block=0x137a60) 
	[0241.642] ReleaseDC (hWnd=0x1025a, hDC=0x8010666) returned 1
	[0241.642] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.643] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x210, wParam=0x31fa0001, lParam=0x1025a) returned 0x0
	[0241.643] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.644] GetDC (hWnd=0x0) returned 0x1401007f
	[0241.644] malloc (_Size=0x88) returned 0xd0560
	[0241.644] malloc (_Size=0x100) returned 0x137a60
	[0241.644] SelectObject (hdc=0x1401007f, h=0x30a09eb) returned 0x18a002e
	[0241.644] SelectObject (hdc=0x1401007f, h=0x18a002e) returned 0x30a09eb
	[0241.645] free (_Block=0xd0560) 
	[0241.645] free (_Block=0x137a60) 
	[0241.645] ReleaseDC (hWnd=0x0, hDC=0x1401007f) returned 1
	[0241.645] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1025c, lParam=0x24c2a0) returned 0x0
	[0241.646] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x55, wParam=0x1025c, lParam=0x3) returned 0x2
	[0241.646] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.647] GetParent (hWnd=0x1025c) returned 0x1025a
	[0241.647] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x210, wParam=0x1, lParam=0x1025c) returned 0x0
	[0241.647] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1025e, lParam=0x24c1a0) returned 0x0
	[0241.648] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x55, wParam=0x1025e, lParam=0x3) returned 0x2
	[0241.648] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.649] GetParent (hWnd=0x1025e) returned 0x1025a
	[0241.649] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x210, wParam=0x10001, lParam=0x1025e) returned 0x0
	[0241.650] GetParent (hWnd=0x1025c) returned 0x1025a
	[0241.650] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x111, wParam=0x4000000, lParam=0x1025c) returned 0x0
	[0241.651] GetParent (hWnd=0x1025c) returned 0x1025a
	[0241.651] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x111, wParam=0x3000000, lParam=0x1025c) returned 0x0
	[0241.651] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.651] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.651] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.652] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.652] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.652] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.652] IsWindowVisible (hWnd=0x1021a) returned 0
	[0241.652] IsWindowVisible (hWnd=0x20228) returned 0
	[0241.652] IsWindowVisible (hWnd=0x20230) returned 0
	[0241.652] IsWindowVisible (hWnd=0x1025a) returned 0
	[0241.652] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.652] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.652] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.652] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.652] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.652] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.652] IsWindowVisible (hWnd=0x1021a) returned 0
	[0241.652] IsWindowVisible (hWnd=0x20228) returned 0
	[0241.652] IsWindowVisible (hWnd=0x20230) returned 0
	[0241.652] IsWindowVisible (hWnd=0x1025a) returned 0
	[0241.652] IsWindowVisible (hWnd=0x10192) returned 0
	[0241.652] IsWindowVisible (hWnd=0x101a6) returned 0
	[0241.652] IsWindowVisible (hWnd=0x201a2) returned 0
	[0241.652] IsWindowVisible (hWnd=0x201c2) returned 0
	[0241.652] IsWindowVisible (hWnd=0x101e6) returned 0
	[0241.652] IsWindowVisible (hWnd=0x10216) returned 0
	[0241.653] IsWindowVisible (hWnd=0x1021a) returned 0
	[0241.653] IsWindowVisible (hWnd=0x20228) returned 0
	[0241.653] IsWindowVisible (hWnd=0x20230) returned 0
	[0241.653] IsWindowVisible (hWnd=0x1025a) returned 0
	[0241.653] GetParent (hWnd=0x10216) returned 0x500a8
	[0241.653] GetParent (hWnd=0x500a8) returned 0x50168
	[0241.653] SetWindowPos (hWnd=0x20228, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0241.653] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x46, wParam=0x0, lParam=0x24c7b0) returned 0x0
	[0241.654] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0241.654] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x47, wParam=0x0, lParam=0x24c7b0) returned 0x0
	[0241.655] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0241.655] malloc (_Size=0xf8) returned 0x144c60
	[0241.655] malloc (_Size=0x18) returned 0x13d9d0
	[0241.655] malloc (_Size=0x20) returned 0x1444f0
	[0241.655] malloc (_Size=0x38) returned 0x13b8b0
	[0241.655] malloc (_Size=0x28) returned 0x144520
	[0241.655] malloc (_Size=0x28) returned 0x144550
	[0241.656] malloc (_Size=0x20) returned 0x144580
	[0241.656] malloc (_Size=0x18) returned 0x13d9f0
	[0241.656] malloc (_Size=0x20) returned 0x1445b0
	[0241.656] malloc (_Size=0x18) returned 0x13da10
	[0241.656] malloc (_Size=0x20) returned 0x1445e0
	[0241.656] malloc (_Size=0x18) returned 0x13da30
	[0241.656] malloc (_Size=0x50) returned 0x132210
	[0241.656] malloc (_Size=0x18) returned 0x13da50
	[0241.656] malloc (_Size=0x28) returned 0x144610
	[0241.656] malloc (_Size=0x28) returned 0x144640
	[0241.656] malloc (_Size=0x28) returned 0x144670
	[0241.656] malloc (_Size=0x28) returned 0x1446a0
	[0241.656] malloc (_Size=0x28) returned 0x1446d0
	[0241.656] malloc (_Size=0x28) returned 0x144700
	[0241.656] malloc (_Size=0x28) returned 0x144730
	[0241.656] malloc (_Size=0x28) returned 0x144760
	[0241.656] malloc (_Size=0x20) returned 0x144790
	[0241.656] malloc (_Size=0x18) returned 0x13da70
	[0241.656] GetParent (hWnd=0x500a8) returned 0x50168
	[0241.656] GetParent (hWnd=0x50168) returned 0xa016e
	[0241.657] GetParent (hWnd=0xa016e) returned 0x0
	[0241.657] GetParent (hWnd=0x50168) returned 0xa016e
	[0241.657] malloc (_Size=0x20) returned 0x1447c0
	[0241.657] malloc (_Size=0x18) returned 0x13da90
	[0241.657] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.658] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.659] DefMDIChildProcW (hWnd=0x500a8, uMsg=0x210, wParam=0xffffffffe9000001, lParam=0x10216) returned 0x0
	[0241.659] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.660] GetWindowLongW (hWnd=0x10216, nIndex=-20) returned 0
	[0241.660] PostMessageW (hWnd=0x500a8, Msg=0x362, wParam=0xe001, lParam=0x0) returned 1
	[0241.660] GetWindowLongW (hWnd=0x500a8, nIndex=-16) returned 1188020224
	[0241.660] GetClientRect (in: hWnd=0x500a8, lpRect=0x24d828 | out: lpRect=0x24d828) returned 1
	[0241.660] BeginDeferWindowPos (nNumWindows=8) returned 0x150243
	[0241.660] GetTopWindow (hWnd=0x500a8) returned 0x10216
	[0241.660] GetDlgCtrlID (hWnd=0x10216) returned 59648
	[0241.660] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x0
	[0241.660] GetParent (hWnd=0x10216) returned 0x500a8
	[0241.660] GetWindowLongW (hWnd=0x10216, nIndex=-20) returned 0
	[0241.660] GetWindowLongW (hWnd=0x10216, nIndex=-16) returned 1375731712
	[0241.660] AdjustWindowRectEx (in: lpRect=0x24d828, dwStyle=0x52000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x24d828) returned 1
	[0241.660] GetParent (hWnd=0x10216) returned 0x500a8
	[0241.660] GetWindowRect (in: hWnd=0x10216, lpRect=0x24d7e0 | out: lpRect=0x24d7e0) returned 1
	[0241.660] ScreenToClient (in: hWnd=0x500a8, lpPoint=0x24d7e0 | out: lpPoint=0x24d7e0) returned 1
	[0241.660] ScreenToClient (in: hWnd=0x500a8, lpPoint=0x24d7e8 | out: lpPoint=0x24d7e8) returned 1
	[0241.660] EqualRect (lprc1=0x24d7e0, lprc2=0x24d828) returned 0
	[0241.660] DeferWindowPos (hWinPosInfo=0x150243, hWnd=0x10216, hWndInsertAfter=0x0, x=0, y=0, cx=870, cy=323, uFlags=0x14) returned 0x150243
	[0241.660] EndDeferWindowPos (hWinPosInfo=0x150243) returned 1
	[0241.661] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x46, wParam=0x0, lParam=0x24d7c0) returned 0x0
	[0241.661] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x83, wParam=0x1, lParam=0x24d790) returned 0x0
	[0241.662] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x47, wParam=0x0, lParam=0x24d7c0) returned 0x0
	[0241.662] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x5, wParam=0x0, lParam=0x1430366) returned 0x0
	[0241.662] GetWindowLongW (hWnd=0x20228, nIndex=-20) returned 512
	[0241.663] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x46, wParam=0x0, lParam=0x24cb70) returned 0x0
	[0241.663] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x83, wParam=0x1, lParam=0x24cb40) returned 0x0
	[0241.664] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x46, wParam=0x0, lParam=0x24cb70) returned 0x0
	[0241.664] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x83, wParam=0x1, lParam=0x24cb40) returned 0x0
	[0241.665] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x46, wParam=0x0, lParam=0x24cb70) returned 0x0
	[0241.665] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x83, wParam=0x1, lParam=0x24cb40) returned 0x0
	[0241.666] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x46, wParam=0x0, lParam=0x24cb70) returned 0x0
	[0241.747] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x46, wParam=0x0, lParam=0x24cb70) returned 0x0
	[0241.747] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x83, wParam=0x1, lParam=0x24cb40) returned 0x0
	[0241.748] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x47, wParam=0x0, lParam=0x24cb70) returned 0x0
	[0241.749] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x3, wParam=0x0, lParam=0x20002) returned 0x0
	[0241.749] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x5, wParam=0x0, lParam=0x13f00d5) returned 0x0
	[0241.750] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x47, wParam=0x0, lParam=0x24cb70) returned 0x0
	[0241.750] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x3, wParam=0x0, lParam=0x2028f) returned 0x0
	[0241.751] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x5, wParam=0x0, lParam=0x13f00d5) returned 0x0
	[0241.751] MoveWindow (hWnd=0x1024e, X=0, Y=21, nWidth=213, nHeight=298, bRepaint=1) returned 1
	[0241.752] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x47, wParam=0x0, lParam=0x24cb70) returned 0x0
	[0241.753] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x3, wParam=0x0, lParam=0x100dd) returned 0x0
	[0241.753] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x5, wParam=0x0, lParam=0x14101ac) returned 0x0
	[0241.754] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x47, wParam=0x0, lParam=0x24cb70) returned 0x0
	[0241.754] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x47, wParam=0x0, lParam=0x24cb70) returned 0x0
	[0241.755] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1205, wParam=0x0, lParam=0x24c220) returned 0x1
	[0241.755] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x46, wParam=0x0, lParam=0x24c180) returned 0x0
	[0241.756] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x83, wParam=0x1, lParam=0x24c150) returned 0x0
	[0241.756] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x47, wParam=0x0, lParam=0x24c180) returned 0x0
	[0241.757] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x5, wParam=0x0, lParam=0x1801aa) returned 0x0
	[0241.757] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x46, wParam=0x0, lParam=0x24c210) returned 0x0
	[0241.758] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x83, wParam=0x1, lParam=0x24c1e0) returned 0x0
	[0241.758] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x47, wParam=0x0, lParam=0x24c210) returned 0x0
	[0241.759] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x5, wParam=0x0, lParam=0x12e01aa) returned 0x0
	[0241.759] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.759] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x434, wParam=0x0, lParam=0x24b020) returned 0x0
	[0241.759] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0241.760] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0241.761] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x46, wParam=0x0, lParam=0x24c210) returned 0x0
	[0241.762] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x83, wParam=0x1, lParam=0x24c1e0) returned 0x0
	[0241.762] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x47, wParam=0x0, lParam=0x24c210) returned 0x0
	[0241.763] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x5, wParam=0x0, lParam=0x13f01aa) returned 0x0
	[0241.763] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.763] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x434, wParam=0x0, lParam=0x24b020) returned 0x0
	[0241.763] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0241.764] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0241.764] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1205, wParam=0x0, lParam=0x24c2f0) returned 0x1
	[0241.765] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x46, wParam=0x0, lParam=0x24c250) returned 0x0
	[0241.765] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x3, wParam=0x0, lParam=0x200de) returned 0x0
	[0241.766] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x5, wParam=0x0, lParam=0x13f01aa) returned 0x0
	[0241.766] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.766] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x434, wParam=0x0, lParam=0x24b980) returned 0x0
	[0241.766] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0241.767] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0241.767] CreateWindowExW (dwExStyle=0x0, lpClassName="msctls_statusbar32", lpWindowName="Ready", dwStyle=0x5400014a, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x500a8, hMenu=0x1003, hInstance=0xff6d0000, lpParam=0x0) returned 0x1026c
	[0241.768] GetParent (hWnd=0x1026c) returned 0x10012
	[0241.768] SetWindowLongPtrW (hWnd=0x1026c, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc65230c
	[0241.768] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1026c, lParam=0x24d0c0) returned 0x0
	[0241.768] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x81, wParam=0x0, lParam=0x24d1a0) returned 0x1
	[0241.769] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x83, wParam=0x0, lParam=0x24d220) returned 0x0
	[0241.770] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x1, wParam=0x0, lParam=0x24d180) returned 0x0
	[0241.770] DefMDIChildProcW (hWnd=0x500a8, uMsg=0x55, wParam=0x1026c, lParam=0x3) returned 0x2
	[0241.771] DefMDIChildProcW (hWnd=0x500a8, uMsg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.771] CreateWindowExW (dwExStyle=0x0, lpClassName="msctls_progress32", lpWindowName=0x0, dwStyle=0x54000001, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1026c, hMenu=0x1000, hInstance=0xff6d0000, lpParam=0x0) returned 0x1026e
	[0241.771] GetParent (hWnd=0x1026e) returned 0x10012
	[0241.771] SetWindowLongPtrW (hWnd=0x1026e, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6cae1c
	[0241.772] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1026e, lParam=0x24c410) returned 0x0
	[0241.772] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x81, wParam=0x0, lParam=0x24c4f0) returned 0x1
	[0241.772] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x24bf20) returned 0x0
	[0241.773] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x24bf20) returned 0x0
	[0241.774] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x83, wParam=0x0, lParam=0x24c570) returned 0x0
	[0241.774] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x1, wParam=0x0, lParam=0x24c4f0) returned 0x0
	[0241.775] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.775] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.776] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x210, wParam=0x10000001, lParam=0x1026e) returned 0x0
	[0241.777] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.777] CreateWindowExW (dwExStyle=0x0, lpClassName="STATIC", lpWindowName="", dwStyle=0x5400000b, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1026c, hMenu=0x1001, hInstance=0xff6d0000, lpParam=0x0) returned 0x10270
	[0241.777] malloc (_Size=0x100) returned 0x137a60
	[0241.777] GetParent (hWnd=0x10270) returned 0x10012
	[0241.777] SetWindowLongPtrW (hWnd=0x10270, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6d61b4
	[0241.777] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x10270, lParam=0x24c430) returned 0x0
	[0241.778] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x81, wParam=0x0, lParam=0x24c510) returned 0x1
	[0241.778] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x83, wParam=0x0, lParam=0x24c570) returned 0x0
	[0241.779] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x1, wParam=0x0, lParam=0x24c500) returned 0x0
	[0241.779] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.780] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.781] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x210, wParam=0x10010001, lParam=0x10270) returned 0x0
	[0241.781] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.781] GetWindowLongW (hWnd=0x1026e, nIndex=-20) returned 0
	[0241.782] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x30, wParam=0x20a0a00, lParam=0x0) returned 0x0
	[0241.782] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.783] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x46, wParam=0x0, lParam=0x24c930) returned 0x0
	[0241.783] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x83, wParam=0x1, lParam=0x24c900) returned 0x0
	[0241.784] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0241.784] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x47, wParam=0x0, lParam=0x24c930) returned 0x0
	[0241.785] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x5, wParam=0x0, lParam=0x170000) returned 0x0
	[0241.785] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x46, wParam=0x0, lParam=0x24b820) returned 0x0
	[0241.786] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0241.786] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40a, wParam=0x0, lParam=0x24bc40) returned 0x1
	[0241.787] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40a, wParam=0x1, lParam=0x24bc20) returned 0x0
	[0241.787] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40a, wParam=0x2, lParam=0x24bc30) returned 0x0
	[0241.787] SetWindowPos (hWnd=0x1026e, hWndInsertAfter=0x0, X=4, Y=4, cx=-121272495, cy=2042, uFlags=0x224) returned 1
	[0241.788] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x46, wParam=0x0, lParam=0x24bb50) returned 0x0
	[0241.788] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x83, wParam=0x1, lParam=0x24bb20) returned 0x0
	[0241.789] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0241.789] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x47, wParam=0x0, lParam=0x24bb50) returned 0x0
	[0241.790] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x3, wParam=0x0, lParam=0x40004) returned 0x0
	[0241.790] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x5, wParam=0x0, lParam=0x7fa0000) returned 0x0
	[0241.790] SetWindowPos (hWnd=0x10270, hWndInsertAfter=0x0, X=-121272487, Y=4, cx=-67, cy=-4, uFlags=0x224) returned 1
	[0241.791] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x46, wParam=0x0, lParam=0x24bb50) returned 0x0
	[0241.837] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x83, wParam=0x1, lParam=0x24bb20) returned 0x0
	[0242.027] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.151] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x47, wParam=0x0, lParam=0x24bb50) returned 0x0
	[0242.151] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x3, wParam=0x0, lParam=0x48000) returned 0x0
	[0242.152] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40a, wParam=0x0, lParam=0x24cd50) returned 0x1
	[0242.152] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40a, wParam=0x1, lParam=0x24cd30) returned 0x0
	[0242.153] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40a, wParam=0x2, lParam=0x24cd40) returned 0x0
	[0242.153] SetWindowPos (hWnd=0x1026e, hWndInsertAfter=0x0, X=4, Y=4, cx=-121272495, cy=2042, uFlags=0x224) returned 1
	[0242.153] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x46, wParam=0x0, lParam=0x24cc60) returned 0x0
	[0242.154] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x83, wParam=0x1, lParam=0x24cc30) returned 0x0
	[0242.155] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.155] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x47, wParam=0x0, lParam=0x24cc60) returned 0x0
	[0242.155] SetWindowPos (hWnd=0x10270, hWndInsertAfter=0x0, X=-121272487, Y=4, cx=-2418852, cy=-5, uFlags=0x224) returned 1
	[0242.156] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x46, wParam=0x0, lParam=0x24cc60) returned 0x0
	[0242.156] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x83, wParam=0x1, lParam=0x24cc30) returned 0x0
	[0242.157] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.157] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x47, wParam=0x0, lParam=0x24cc60) returned 0x0
	[0242.158] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0242.159] DefMDIChildProcW (hWnd=0x500a8, uMsg=0x210, wParam=0x10030001, lParam=0x1026c) returned 0x0
	[0242.159] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0242.160] GetDC (hWnd=0x1026c) returned 0xc01083a
	[0242.160] malloc (_Size=0x88) returned 0xd0560
	[0242.160] malloc (_Size=0x100) returned 0x137b70
	[0242.160] lstrlenW (lpString="") returned 0
	[0242.160] lstrlenW (lpString="                                ") returned 32
	[0242.160] malloc (_Size=0x4e) returned 0x1321b0
	[0242.160] lstrlenW (lpString="") returned 0
	[0242.160] free (_Block=0x1321b0) 
	[0242.160] lstrlenW (lpString="                    ") returned 20
	[0242.160] malloc (_Size=0x36) returned 0x13b8f0
	[0242.160] lstrlenW (lpString="") returned 0
	[0242.160] free (_Block=0x13b8f0) 
	[0242.161] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x404, wParam=0x3, lParam=0x24d8b0) returned 0x1
	[0242.161] free (_Block=0xd0560) 
	[0242.161] free (_Block=0x137b70) 
	[0242.161] ReleaseDC (hWnd=0x1026c, hDC=0xc01083a) returned 1
	[0242.161] malloc (_Size=0x100) returned 0x137b70
	[0242.161] malloc (_Size=0x100) returned 0x137c80
	[0242.161] malloc (_Size=0x58) returned 0x1321b0
	[0242.161] malloc (_Size=0x28) returned 0x1447f0
	[0242.162] FindResourceW (hModule=0xff6d0000, lpName=0xa2, lpType=0x4) returned 0x3e0718
	[0242.162] malloc (_Size=0x70) returned 0x144e00
	[0242.163] malloc (_Size=0x18) returned 0x13dab0
	[0242.163] GetWindowLongW (hWnd=0x500a8, nIndex=-16) returned 1188020224
	[0242.163] lstrlenW (lpString="&Close\x09Ctrl+F4") returned 14
	[0242.163] malloc (_Size=0x2a) returned 0x13b8f0
	[0242.163] lstrlenW (lpString="Nex&t\x09Ctrl+F6") returned 13
	[0242.163] malloc (_Size=0x28) returned 0x144820
	[0242.163] free (_Block=0x144820) 
	[0242.164] free (_Block=0x13b8f0) 
	[0242.164] DestroyMenu (hMenu=0x2a0243) returned 1
	[0242.164] GetParent (hWnd=0x10216) returned 0x500a8
	[0242.164] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x46, wParam=0x0, lParam=0x24d860) returned 0x0
	[0242.165] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x83, wParam=0x1, lParam=0x24d830) returned 0x0
	[0242.165] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x46, wParam=0x0, lParam=0x24d860) returned 0x0
	[0242.173] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x83, wParam=0x1, lParam=0x24d830) returned 0x0
	[0242.173] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x47, wParam=0x0, lParam=0x24d860) returned 0x0
	[0242.174] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x3, wParam=0x0, lParam=0x12c0000) returned 0x0
	[0242.175] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x407, wParam=0x0, lParam=0x24cab0) returned 0x1
	[0242.175] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x404, wParam=0x3, lParam=0x24cac0) returned 0x1
	[0242.175] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x5, wParam=0x0, lParam=0x170366) returned 0x0
	[0242.176] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x46, wParam=0x0, lParam=0x24c750) returned 0x0
	[0242.176] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.177] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40a, wParam=0x0, lParam=0x24cb70) returned 0x1
	[0242.177] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40a, wParam=0x1, lParam=0x24cb50) returned 0x1
	[0242.178] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40a, wParam=0x2, lParam=0x24cb60) returned 0x1
	[0242.178] SetWindowPos (hWnd=0x1026e, hWndInsertAfter=0x0, X=654, Y=4, cx=127, cy=17, uFlags=0x224) returned 1
	[0242.178] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x46, wParam=0x0, lParam=0x24ca80) returned 0x0
	[0242.179] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x83, wParam=0x1, lParam=0x24ca50) returned 0x0
	[0242.179] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.180] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x47, wParam=0x0, lParam=0x24ca80) returned 0x0
	[0242.180] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x3, wParam=0x0, lParam=0x4028e) returned 0x0
	[0242.181] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x5, wParam=0x0, lParam=0x11007f) returned 0x0
	[0242.181] SetWindowPos (hWnd=0x10270, hWndInsertAfter=0x0, X=785, Y=4, cx=65, cy=17, uFlags=0x224) returned 1
	[0242.182] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x46, wParam=0x0, lParam=0x24ca80) returned 0x0
	[0242.182] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x83, wParam=0x1, lParam=0x24ca50) returned 0x0
	[0242.183] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.183] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x47, wParam=0x0, lParam=0x24ca80) returned 0x0
	[0242.184] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x3, wParam=0x0, lParam=0x40311) returned 0x0
	[0242.184] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10270, Msg=0x5, wParam=0x0, lParam=0x110041) returned 0x0
	[0242.185] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x47, wParam=0x0, lParam=0x24d860) returned 0x0
	[0242.186] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x5, wParam=0x0, lParam=0x12c0366) returned 0x0
	[0242.186] GetWindowLongW (hWnd=0x20228, nIndex=-20) returned 512
	[0242.186] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x46, wParam=0x0, lParam=0x24cc10) returned 0x0
	[0242.187] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x83, wParam=0x1, lParam=0x24cbe0) returned 0x0
	[0242.187] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x46, wParam=0x0, lParam=0x24cc10) returned 0x0
	[0242.188] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x83, wParam=0x1, lParam=0x24cbe0) returned 0x0
	[0242.188] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x46, wParam=0x0, lParam=0x24cc10) returned 0x0
	[0242.189] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x83, wParam=0x1, lParam=0x24cbe0) returned 0x0
	[0242.189] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x46, wParam=0x0, lParam=0x24cc10) returned 0x0
	[0242.190] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x46, wParam=0x0, lParam=0x24cc10) returned 0x0
	[0242.190] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x83, wParam=0x1, lParam=0x24cbe0) returned 0x0
	[0242.252] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x47, wParam=0x0, lParam=0x24cc10) returned 0x0
	[0242.252] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x5, wParam=0x0, lParam=0x12800d5) returned 0x0
	[0242.253] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x47, wParam=0x0, lParam=0x24cc10) returned 0x0
	[0242.254] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x5, wParam=0x0, lParam=0x12800d5) returned 0x0
	[0242.254] MoveWindow (hWnd=0x1024e, X=0, Y=21, nWidth=213, nHeight=275, bRepaint=1) returned 1
	[0242.255] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x47, wParam=0x0, lParam=0x24cc10) returned 0x0
	[0242.256] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x5, wParam=0x0, lParam=0x12a01ac) returned 0x0
	[0242.256] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x47, wParam=0x0, lParam=0x24cc10) returned 0x0
	[0242.257] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1205, wParam=0x0, lParam=0x24c2c0) returned 0x1
	[0242.257] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x46, wParam=0x0, lParam=0x24c220) returned 0x0
	[0242.259] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x5, wParam=0x0, lParam=0x12801aa) returned 0x0
	[0242.259] GetPropW (hWnd=0x1022e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0242.259] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1022e, Msg=0x434, wParam=0x0, lParam=0x24ba20) returned 0x0
	[0242.260] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0242.260] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0242.262] DefMDIChildProcW (hWnd=0x500a8, uMsg=0x7c, wParam=0xfffffffffffffff0, lParam=0x24d980) returned 0x0
	[0242.262] DefMDIChildProcW (hWnd=0x500a8, uMsg=0x7d, wParam=0xfffffffffffffff0, lParam=0x24d980) returned 0x0
	[0242.263] DefMDIChildProcW (hWnd=0x500a8, uMsg=0xd, wParam=0x104, lParam=0x1e972d0) returned 0x0
	[0242.263] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x24d1f8) returned 0x0
	[0242.263] GetParent (hWnd=0x10216) returned 0x500a8
	[0242.264] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x46, wParam=0x0, lParam=0x24d920) returned 0x0
	[0242.265] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x46, wParam=0x0, lParam=0x24d920) returned 0x0
	[0242.265] GetParent (hWnd=0x500a8) returned 0x50168
	[0242.265] GetParent (hWnd=0x50168) returned 0xa016e
	[0242.265] GetParent (hWnd=0xa016e) returned 0x0
	[0242.265] SendMessageW (hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0242.265] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0242.265] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0242.266] GetWindowTextW (in: hWnd=0xa016e, lpString=0x24d770, nMaxCount=256 | out: lpString="Microsoft Management Console") returned 28
	[0242.266] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0xd, wParam=0x100, lParam=0x24d770) returned 0x1c
	[0242.267] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0x50168, Msg=0x210, wParam=0xffffffffff010001, lParam=0x500a8) returned 0x0
	[0242.267] free (_Block=0x140c60) 
	[0242.268] GetDlgItem (hDlg=0x500a8, nIDDlgItem=59648) returned 0x10216
	[0242.268] GetTopWindow (hWnd=0x10216) returned 0x20228
	[0242.268] GetDlgItem (hDlg=0x10216, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x10216) returned 0x20228
	[0242.268] GetDlgItem (hDlg=0x20228, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x20228) returned 0x1022a
	[0242.268] GetDlgItem (hDlg=0x1022a, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x1022a) returned 0x0
	[0242.268] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x0
	[0242.268] GetWindow (hWnd=0x20228, uCmd=0x2) returned 0x20230
	[0242.268] GetDlgItem (hDlg=0x20230, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x20230) returned 0x1024e
	[0242.268] GetDlgItem (hDlg=0x1024e, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x1024e) returned 0x10250
	[0242.268] GetDlgItem (hDlg=0x10250, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x10250) returned 0x10252
	[0242.268] GetDlgItem (hDlg=0x10252, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x10252) returned 0x10254
	[0242.268] GetDlgItem (hDlg=0x10254, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x10254) returned 0x0
	[0242.268] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x0
	[0242.268] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x10256
	[0242.268] GetDlgItem (hDlg=0x10256, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x10256) returned 0x10258
	[0242.268] GetDlgItem (hDlg=0x10258, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x10258) returned 0x0
	[0242.268] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x0
	[0242.268] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x0
	[0242.268] GetWindow (hWnd=0x10250, uCmd=0x2) returned 0x0
	[0242.268] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x0
	[0242.268] GetWindow (hWnd=0x20230, uCmd=0x2) returned 0x1021a
	[0242.268] GetDlgItem (hDlg=0x1021a, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x1021a) returned 0x0
	[0242.268] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10218
	[0242.268] GetDlgItem (hDlg=0x10218, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x10218) returned 0x0
	[0242.268] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1025a
	[0242.268] GetDlgItem (hDlg=0x1025a, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x1025a) returned 0x1025c
	[0242.268] GetDlgItem (hDlg=0x1025c, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x1025c) returned 0x0
	[0242.268] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x1025e
	[0242.268] GetDlgItem (hDlg=0x1025e, nIDDlgItem=59648) returned 0x0
	[0242.268] GetTopWindow (hWnd=0x1025e) returned 0x0
	[0242.268] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x0
	[0242.269] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x0
	[0242.269] GetTopWindow (hWnd=0x500a8) returned 0x10216
	[0242.270] GetWindowLongW (hWnd=0x10216, nIndex=-20) returned 0
	[0242.272] malloc (_Size=0x38) returned 0x13b8f0
	[0242.272] GetLastError () returned 0x6
	[0242.272] SetLastError (dwErrCode=0x6) 
	[0242.272] DeleteObject (ho=0x2050a21) returned 1
	[0242.272] GetLastError () returned 0x0
	[0242.272] SetLastError (dwErrCode=0x0) 
	[0242.272] malloc (_Size=0x400) returned 0x144e80
	[0242.272] malloc (_Size=0x400) returned 0x144e80
	[0242.272] malloc (_Size=0x400) returned 0x144e80
	[0242.273] malloc (_Size=0x20) returned 0x144820
	[0242.273] malloc (_Size=0x20) returned 0x144850
	[0242.273] malloc (_Size=0x400) returned 0x144e80
	[0242.273] malloc (_Size=0x30) returned 0x13b930
	[0242.273] malloc (_Size=0x30) returned 0x13b970
	[0242.273] malloc (_Size=0x400) returned 0x144e80
	[0242.273] malloc (_Size=0x400) returned 0x144e80
	[0242.273] malloc (_Size=0x400) returned 0x144e80
	[0242.273] malloc (_Size=0x400) returned 0x144e80
	[0242.273] malloc (_Size=0x400) returned 0x144e80
	[0242.273] malloc (_Size=0x20) returned 0x144880
	[0242.273] malloc (_Size=0x20) returned 0x1448b0
	[0242.273] malloc (_Size=0x400) returned 0x144e80
	[0242.273] malloc (_Size=0x400) returned 0x144e80
	[0242.273] malloc (_Size=0x400) returned 0x144e80
	[0242.273] malloc (_Size=0x20) returned 0x1448e0
	[0242.273] malloc (_Size=0x20) returned 0x144910
	[0242.273] malloc (_Size=0x400) returned 0x144e80
	[0242.273] malloc (_Size=0x400) returned 0x144e80
	[0242.273] malloc (_Size=0x30) returned 0x13b9b0
	[0242.274] malloc (_Size=0x30) returned 0x13b9f0
	[0242.274] malloc (_Size=0x70) returned 0x140c60
	[0242.274] malloc (_Size=0xe0) returned 0x144e80
	[0242.274] malloc (_Size=0x150) returned 0x144f70
	[0242.274] malloc (_Size=0x20) returned 0x144940
	[0242.274] malloc (_Size=0x20) returned 0x144970
	[0242.274] malloc (_Size=0x20) returned 0x1449a0
	[0242.275] malloc (_Size=0x20) returned 0x1449d0
	[0242.275] malloc (_Size=0x1c0) returned 0x1450d0
	[0242.275] malloc (_Size=0x20) returned 0x144a00
	[0242.275] malloc (_Size=0x20) returned 0x144a30
	[0242.275] malloc (_Size=0x30) returned 0x13ba30
	[0242.275] malloc (_Size=0x30) returned 0x13ba70
	[0242.275] malloc (_Size=0x30) returned 0x13bab0
	[0242.275] malloc (_Size=0x30) returned 0x13baf0
	[0242.275] malloc (_Size=0x2a0) returned 0x1452a0
	[0242.275] malloc (_Size=0x20) returned 0x144940
	[0242.275] malloc (_Size=0x20) returned 0x144970
	[0242.275] malloc (_Size=0x30) returned 0x13bb30
	[0242.275] malloc (_Size=0x30) returned 0x13bb70
	[0242.276] malloc (_Size=0x3f0) returned 0x144e80
	[0242.276] malloc (_Size=0x20) returned 0x144a00
	[0242.276] malloc (_Size=0x20) returned 0x144a30
	[0242.276] malloc (_Size=0x30) returned 0x13ba30
	[0242.276] malloc (_Size=0x30) returned 0x13ba70
	[0242.277] malloc (_Size=0x5b0) returned 0x145280
	[0242.277] malloc (_Size=0x20) returned 0x144940
	[0242.277] malloc (_Size=0x20) returned 0x144970
	[0242.277] malloc (_Size=0x30) returned 0x13bb30
	[0242.277] malloc (_Size=0x30) returned 0x13bb70
	[0242.277] malloc (_Size=0x20) returned 0x144a00
	[0242.278] malloc (_Size=0x20) returned 0x144a30
	[0242.278] malloc (_Size=0x20) returned 0x1449a0
	[0242.278] malloc (_Size=0x20) returned 0x1449d0
	[0242.278] malloc (_Size=0x20) returned 0x144a60
	[0242.278] malloc (_Size=0x20) returned 0x144a90
	[0242.278] malloc (_Size=0x850) returned 0x145840
	[0242.278] malloc (_Size=0x20) returned 0x144a00
	[0242.278] malloc (_Size=0x20) returned 0x144a30
	[0242.278] malloc (_Size=0x30) returned 0x13ba30
	[0242.278] malloc (_Size=0x30) returned 0x13ba70
	[0242.278] malloc (_Size=0x20) returned 0x1449a0
	[0242.278] malloc (_Size=0x20) returned 0x1449d0
	[0242.279] malloc (_Size=0x20) returned 0x144a60
	[0242.279] malloc (_Size=0x20) returned 0x144a90
	[0242.279] malloc (_Size=0x20) returned 0x144940
	[0242.279] malloc (_Size=0x20) returned 0x144970
	[0242.279] malloc (_Size=0x20) returned 0x144ac0
	[0242.279] malloc (_Size=0x20) returned 0x144af0
	[0242.280] malloc (_Size=0x30) returned 0x13bb30
	[0242.280] malloc (_Size=0x30) returned 0x13bb70
	[0242.280] malloc (_Size=0x30) returned 0x13bab0
	[0242.280] malloc (_Size=0x30) returned 0x13baf0
	[0242.280] malloc (_Size=0x30) returned 0x13bbb0
	[0242.280] malloc (_Size=0x30) returned 0x13bbf0
	[0242.280] malloc (_Size=0x28) returned 0x144820
	[0242.280] GetLastError () returned 0x0
	[0242.280] SetLastError (dwErrCode=0x0) 
	[0242.280] DeleteObject (ho=0x1050a1f) returned 1
	[0242.281] GetLastError () returned 0x0
	[0242.281] SetLastError (dwErrCode=0x0) 
	[0242.281] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x1132, wParam=0x0, lParam=0x24e6b0) returned 0x3f11c60
	[0242.282] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.282] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.283] malloc (_Size=0x20e) returned 0x144e80
	[0242.283] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24cf28) returned 0x1
	[0242.283] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24cf28) returned 0x1
	[0242.284] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.284] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.285] lstrlenW (lpString="Computer Management (Local)") returned 27
	[0242.285] malloc (_Size=0x40) returned 0x65c020
	[0242.285] free (_Block=0x144e80) 
	[0242.285] malloc (_Size=0x40) returned 0x65c0c0
	[0242.340] malloc (_Size=0x30) returned 0x13b930
	[0242.384] malloc (_Size=0x10) returned 0x13daf0
	[0242.385] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.386] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.386] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.387] malloc (_Size=0x18) returned 0x13daf0
	[0242.387] malloc (_Size=0x30) returned 0x13b930
	[0242.387] malloc (_Size=0x30) returned 0x13b9b0
	[0242.388] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x1102, wParam=0x2, lParam=0x3f11c60) returned 0x1
	[0242.388] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.389] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113f, wParam=0x0, lParam=0x24d6c8) returned 0x1
	[0242.390] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.390] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d600) returned 0x1
	[0242.390] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d600) returned 0x1
	[0242.450] malloc (_Size=0x98) returned 0x144f40
	[0242.450] malloc (_Size=0x28) returned 0x144880
	[0242.451] malloc (_Size=0x28) returned 0x144880
	[0242.451] malloc (_Size=0x28) returned 0x144880
	[0242.452] FindResourceW (hModule=0x7fef7fc0000, lpName=0xd, lpType=0x6) returned 0x1e40470
	[0242.452] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xc1, lpBuffer=0x24cce0, cchBufferMax=256 | out: lpBuffer="Computer Management") returned 0x13
	[0242.452] lstrlenW (lpString="Computer Management") returned 19
	[0242.452] malloc (_Size=0x34) returned 0x13b970
	[0242.452] FindResourceW (hModule=0x7fef7fc0000, lpName=0xc, lpType=0x6) returned 0x1e40460
	[0242.452] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xbe, lpBuffer=0x24cce0, cchBufferMax=256 | out: lpBuffer="System Tools") returned 0xc
	[0242.452] lstrlenW (lpString="System Tools") returned 12
	[0242.452] malloc (_Size=0x26) returned 0x1448e0
	[0242.452] FindResourceW (hModule=0x7fef7fc0000, lpName=0xc, lpType=0x6) returned 0x1e40460
	[0242.452] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xbf, lpBuffer=0x24cce0, cchBufferMax=256 | out: lpBuffer="Services and Applications") returned 0x19
	[0242.452] lstrlenW (lpString="Services and Applications") returned 25
	[0242.452] malloc (_Size=0x40) returned 0x65c020
	[0242.453] FindResourceW (hModule=0x7fef7fc0000, lpName=0xd, lpType=0x6) returned 0x1e40470
	[0242.453] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xc0, lpBuffer=0x24cce0, cchBufferMax=256 | out: lpBuffer="Storage") returned 0x7
	[0242.453] lstrlenW (lpString="Storage") returned 7
	[0242.453] malloc (_Size=0x1c) returned 0x144850
	[0242.453] lstrlenW (lpString="") returned 0
	[0242.453] SetCursor (hCursor=0x10007) returned 0x10007
	[0242.454] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0242.454] InvalidateRect (hWnd=0x101a6, lpRect=0x0, bErase=1) returned 1
	[0242.454] InvalidateRect (hWnd=0x201c2, lpRect=0x0, bErase=1) returned 1
	[0242.454] InvalidateRect (hWnd=0x101e6, lpRect=0x0, bErase=1) returned 1
	[0242.454] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f11c60
	[0242.454] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c8d0) returned 0x1
	[0242.455] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c8d0) returned 0x1
	[0242.455] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c8d0) returned 0x1
	[0242.455] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c8d0) returned 0x1
	[0242.456] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x0
	[0242.456] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c8a0) returned 0x1
	[0242.456] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c8a0) returned 0x1
	[0242.457] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113f, wParam=0x0, lParam=0x24c910) returned 0x1
	[0242.457] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.458] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.458] malloc (_Size=0x20e) returned 0x145350
	[0242.458] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24b338) returned 0x1
	[0242.458] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24b338) returned 0x1
	[0242.459] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.460] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.461] lstrlenW (lpString="Computer Management (Local)") returned 27
	[0242.461] malloc (_Size=0x40) returned 0x65c070
	[0242.461] free (_Block=0x145350) 
	[0242.461] malloc (_Size=0x40) returned 0x65c0c0
	[0242.461] malloc (_Size=0x30) returned 0x13b9f0
	[0242.461] malloc (_Size=0x10) returned 0x13db30
	[0242.462] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.462] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.463] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.464] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.464] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x3, lParam=0x3f11c60) returned 0x0
	[0242.464] InvalidateRect (hWnd=0x1021a, lpRect=0x0, bErase=1) returned 1
	[0242.464] InvalidateRect (hWnd=0x20230, lpRect=0x0, bErase=1) returned 1
	[0242.465] InvalidateRect (hWnd=0x1025a, lpRect=0x0, bErase=1) returned 1
	[0242.465] GetLastError () returned 0x0
	[0242.465] SetLastError (dwErrCode=0x0) 
	[0242.465] SetCursor (hCursor=0x10007) returned 0x10007
	[0242.465] GetLastError () returned 0x0
	[0242.465] SetLastError (dwErrCode=0x0) 
	[0242.465] malloc (_Size=0xb0) returned 0x145250
	[0242.465] lstrlenW (lpString="") returned 0
	[0242.465] malloc (_Size=0x100) returned 0x137d90
	[0242.466] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0242.466] InvalidateRect (hWnd=0x101a6, lpRect=0x0, bErase=1) returned 1
	[0242.466] InvalidateRect (hWnd=0x201c2, lpRect=0x0, bErase=1) returned 1
	[0242.466] InvalidateRect (hWnd=0x101e6, lpRect=0x0, bErase=1) returned 1
	[0242.466] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f11c60
	[0242.467] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c870) returned 0x1
	[0242.467] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c870) returned 0x1
	[0242.467] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c870) returned 0x1
	[0242.467] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c870) returned 0x1
	[0242.468] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x0
	[0242.468] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x0
	[0242.468] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c8b0) returned 0x1
	[0242.469] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c8b0) returned 0x1
	[0242.469] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113f, wParam=0x0, lParam=0x24c940) returned 0x1
	[0242.469] InvalidateRect (hWnd=0x1021a, lpRect=0x0, bErase=1) returned 1
	[0242.469] InvalidateRect (hWnd=0x20230, lpRect=0x0, bErase=1) returned 1
	[0242.469] InvalidateRect (hWnd=0x1025a, lpRect=0x0, bErase=1) returned 1
	[0242.470] malloc (_Size=0xb0) returned 0x1454c0
	[0242.470] lstrlenW (lpString="") returned 0
	[0242.470] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0242.470] InvalidateRect (hWnd=0x101a6, lpRect=0x0, bErase=1) returned 1
	[0242.470] InvalidateRect (hWnd=0x201c2, lpRect=0x0, bErase=1) returned 1
	[0242.470] InvalidateRect (hWnd=0x101e6, lpRect=0x0, bErase=1) returned 1
	[0242.471] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f11c60
	[0242.471] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c870) returned 0x1
	[0242.471] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c870) returned 0x1
	[0242.471] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c870) returned 0x1
	[0242.472] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c870) returned 0x1
	[0242.472] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x0
	[0242.473] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x0
	[0242.473] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c8b0) returned 0x1
	[0242.473] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c8b0) returned 0x1
	[0242.474] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113f, wParam=0x0, lParam=0x24c940) returned 0x1
	[0242.474] InvalidateRect (hWnd=0x1021a, lpRect=0x0, bErase=1) returned 1
	[0242.474] InvalidateRect (hWnd=0x20230, lpRect=0x0, bErase=1) returned 1
	[0242.474] InvalidateRect (hWnd=0x1025a, lpRect=0x0, bErase=1) returned 1
	[0242.474] malloc (_Size=0xb0) returned 0x145730
	[0242.474] lstrlenW (lpString="") returned 0
	[0242.475] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0242.475] InvalidateRect (hWnd=0x101a6, lpRect=0x0, bErase=1) returned 1
	[0242.475] InvalidateRect (hWnd=0x201c2, lpRect=0x0, bErase=1) returned 1
	[0242.475] InvalidateRect (hWnd=0x101e6, lpRect=0x0, bErase=1) returned 1
	[0242.475] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f11c60
	[0242.475] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c870) returned 0x1
	[0242.476] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c870) returned 0x1
	[0242.476] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c870) returned 0x1
	[0242.476] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c870) returned 0x1
	[0242.477] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x0
	[0242.477] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x0
	[0242.477] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c8b0) returned 0x1
	[0242.522] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c8b0) returned 0x1
	[0242.523] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113f, wParam=0x0, lParam=0x24c940) returned 0x1
	[0242.523] InvalidateRect (hWnd=0x1021a, lpRect=0x0, bErase=1) returned 1
	[0242.603] InvalidateRect (hWnd=0x20230, lpRect=0x0, bErase=1) returned 1
	[0242.603] InvalidateRect (hWnd=0x1025a, lpRect=0x0, bErase=1) returned 1
	[0242.603] malloc (_Size=0x28) returned 0x1448b0
	[0242.604] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x1132, wParam=0x0, lParam=0x24d570) returned 0x3f11cc0
	[0242.604] malloc (_Size=0x18) returned 0x13dbf0
	[0242.604] malloc (_Size=0x30) returned 0x13b9f0
	[0242.604] malloc (_Size=0x30) returned 0x13bb30
	[0242.604] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113f, wParam=0x0, lParam=0x24d5f0) returned 0x1
	[0242.605] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x1132, wParam=0x0, lParam=0x24d570) returned 0x3f11d20
	[0242.605] malloc (_Size=0x18) returned 0x13dc10
	[0242.605] malloc (_Size=0x30) returned 0x13bb70
	[0242.605] malloc (_Size=0x30) returned 0x13bab0
	[0242.606] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113f, wParam=0x0, lParam=0x24d5f0) returned 0x1
	[0242.606] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x1132, wParam=0x0, lParam=0x24d570) returned 0x3f11d80
	[0242.606] malloc (_Size=0x18) returned 0x13dc30
	[0242.606] malloc (_Size=0x30) returned 0x13baf0
	[0242.606] malloc (_Size=0x30) returned 0x13bc30
	[0242.607] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113f, wParam=0x0, lParam=0x24d5f0) returned 0x1
	[0242.607] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d680) returned 0x1
	[0242.607] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d680) returned 0x1
	[0242.608] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x3f11d80
	[0242.609] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.610] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.610] malloc (_Size=0x20e) returned 0x146250
	[0242.610] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d4c8) returned 0x1
	[0242.610] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d4c8) returned 0x1
	[0242.611] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.611] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.612] lstrlenW (lpString="System Tools") returned 12
	[0242.612] malloc (_Size=0x20) returned 0x144910
	[0242.612] free (_Block=0x146250) 
	[0242.612] malloc (_Size=0x20) returned 0x1448b0
	[0242.612] malloc (_Size=0x30) returned 0x13bc70
	[0242.612] malloc (_Size=0x10) returned 0x146280
	[0242.612] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.613] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.614] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.614] malloc (_Size=0x20e) returned 0x146a50
	[0242.614] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d4c8) returned 0x1
	[0242.614] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d4c8) returned 0x1
	[0242.615] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.616] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.616] lstrlenW (lpString="Storage") returned 7
	[0242.616] free (_Block=0x146a50) 
	[0242.616] malloc (_Size=0x10) returned 0x146280
	[0242.616] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.617] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.618] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.618] malloc (_Size=0x20e) returned 0x146a50
	[0242.618] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d4c8) returned 0x1
	[0242.618] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d4c8) returned 0x1
	[0242.619] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.620] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.620] lstrlenW (lpString="Services and Applications") returned 25
	[0242.620] malloc (_Size=0x40) returned 0x65bfd0
	[0242.620] free (_Block=0x146a50) 
	[0242.620] malloc (_Size=0x40) returned 0x65c0c0
	[0242.620] malloc (_Size=0x10) returned 0x146280
	[0242.620] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.621] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.622] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.623] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.623] GetWindowLongW (hWnd=0x20228, nIndex=-20) returned 512
	[0242.623] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x46, wParam=0x0, lParam=0x24e660) returned 0x0
	[0242.624] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x46, wParam=0x0, lParam=0x24e660) returned 0x0
	[0242.625] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x46, wParam=0x0, lParam=0x24e660) returned 0x0
	[0242.625] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x46, wParam=0x0, lParam=0x24e660) returned 0x0
	[0242.626] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x46, wParam=0x0, lParam=0x24e660) returned 0x0
	[0242.626] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.626] GetWindowLongW (hWnd=0x20228, nIndex=-20) returned 512
	[0242.627] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x46, wParam=0x0, lParam=0x24e630) returned 0x0
	[0242.627] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x46, wParam=0x0, lParam=0x24e630) returned 0x0
	[0242.628] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x46, wParam=0x0, lParam=0x24e630) returned 0x0
	[0242.628] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x46, wParam=0x0, lParam=0x24e630) returned 0x0
	[0242.629] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x46, wParam=0x0, lParam=0x24e630) returned 0x0
	[0242.630] malloc (_Size=0x28) returned 0x144910
	[0242.630] malloc (_Size=0x28) returned 0x1448b0
	[0242.630] malloc (_Size=0x28) returned 0x144a60
	[0242.630] malloc (_Size=0x10) returned 0x146280
	[0242.630] malloc (_Size=0x68) returned 0x141030
	[0242.630] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f11c60
	[0242.630] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24e710) returned 0x1
	[0242.631] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24e710) returned 0x1
	[0242.631] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24e710) returned 0x1
	[0242.631] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24e710) returned 0x1
	[0242.632] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f11c60
	[0242.632] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110b, wParam=0x9, lParam=0x3f11c60) 
	[0242.633] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.633] free (_Block=0x143f00) 
	[0242.634] GetProcAddress (hModule=0x7fefc630000, lpProcName="ImageList_Destroy") returned 0x7fefc6907a4
	[0242.727] ImageList_Destroy (himl=0x50fbd0) returned 1
	[0242.728] ImageList_Destroy (himl=0x510320) returned 1
	[0242.728] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x50fbd0
	[0242.728] ImageList_Create (cx=32, cy=32, flags=0x21, cInitial=20, cGrow=10) returned 0x510320
	[0242.730] GetLastError () returned 0x6
	[0242.730] SetLastError (dwErrCode=0x6) 
	[0242.730] GetLastError () returned 0x6
	[0242.731] SetLastError (dwErrCode=0x6) 
	[0242.731] GetLastError () returned 0x6
	[0242.731] SetLastError (dwErrCode=0x6) 
	[0242.731] GetLastError () returned 0x6
	[0242.731] SetLastError (dwErrCode=0x6) 
	[0242.731] malloc (_Size=0x8) returned 0x144100
	[0242.731] malloc (_Size=0x150) returned 0x143ee0
	[0242.731] malloc (_Size=0x8) returned 0x1440f0
	[0242.731] malloc (_Size=0x8) returned 0x1440e0
	[0242.731] malloc (_Size=0x8) returned 0x1440d0
	[0242.731] malloc (_Size=0x8) returned 0x1440c0
	[0242.731] malloc (_Size=0x8) returned 0x1440b0
	[0242.731] malloc (_Size=0x8) returned 0x1440a0
	[0242.731] malloc (_Size=0x8) returned 0x144090
	[0242.732] malloc (_Size=0x8) returned 0x144120
	[0242.732] GetLastError () returned 0x6
	[0242.732] SetLastError (dwErrCode=0x6) 
	[0242.732] DeleteObject (ho=0x5c0509c4) returned 1
	[0242.732] GetLastError () returned 0x0
	[0242.732] SetLastError (dwErrCode=0x0) 
	[0242.732] GetLastError () returned 0x0
	[0242.732] SetLastError (dwErrCode=0x0) 
	[0242.732] DeleteObject (ho=0x5b0509c3) returned 1
	[0242.733] GetLastError () returned 0x0
	[0242.733] SetLastError (dwErrCode=0x0) 
	[0242.743] GetLastError () returned 0x0
	[0242.743] SetLastError (dwErrCode=0x0) 
	[0242.744] DeleteObject (ho=0x210509cf) returned 1
	[0242.744] GetLastError () returned 0x0
	[0242.744] SetLastError (dwErrCode=0x0) 
	[0242.744] GetLastError () returned 0x0
	[0242.744] SetLastError (dwErrCode=0x0) 
	[0242.744] DeleteObject (ho=0x20509d1) returned 1
	[0242.744] GetLastError () returned 0x0
	[0242.744] SetLastError (dwErrCode=0x0) 
	[0242.745] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1003, wParam=0x1, lParam=0x50fbd0) returned 0x50fbd0
	[0242.745] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1208, wParam=0x0, lParam=0x50fbd0) returned 0x50ebc0
	[0242.746] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1003, wParam=0x0, lParam=0x510320) returned 0x510320
	[0242.746] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1208, wParam=0x0, lParam=0x50ebc0) returned 0x50fbd0
	[0242.747] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.747] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x4e, wParam=0x31f1, lParam=0x24e110) returned 0x0
	[0242.748] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.748] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10216, Msg=0x4e, wParam=0x31f1, lParam=0x24e110) returned 0x0
	[0242.749] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.749] GetParent (hWnd=0x10216) returned 0x500a8
	[0242.749] GetParent (hWnd=0x500a8) returned 0x50168
	[0242.749] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d5a0) returned 0x1
	[0242.750] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d5a0) returned 0x1
	[0242.750] malloc (_Size=0x28) returned 0x144a90
	[0242.750] malloc (_Size=0x28) returned 0x144a90
	[0242.751] malloc (_Size=0x28) returned 0x144a90
	[0242.751] GetParent (hWnd=0x10216) returned 0x500a8
	[0242.751] GetParent (hWnd=0x500a8) returned 0x50168
	[0242.752] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x3f11c60
	[0242.752] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24cfa0) returned 0x1
	[0242.752] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24cfa0) returned 0x1
	[0242.752] malloc (_Size=0xe0) returned 0x13b3c0
	[0242.753] free (_Block=0x143ee0) 
	[0242.753] ImageList_Destroy (himl=0x50fbd0) returned 1
	[0242.753] ImageList_Destroy (himl=0x510320) returned 1
	[0242.754] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x50fbd0
	[0242.754] ImageList_Create (cx=32, cy=32, flags=0x21, cInitial=20, cGrow=10) returned 0x510320
	[0242.756] GetLastError () returned 0x6
	[0242.756] SetLastError (dwErrCode=0x6) 
	[0242.756] GetLastError () returned 0x6
	[0242.756] SetLastError (dwErrCode=0x6) 
	[0242.757] GetLastError () returned 0x6
	[0242.757] SetLastError (dwErrCode=0x6) 
	[0242.757] GetLastError () returned 0x6
	[0242.757] SetLastError (dwErrCode=0x6) 
	[0242.757] malloc (_Size=0x8) returned 0x144120
	[0242.757] malloc (_Size=0x150) returned 0x143ee0
	[0242.757] malloc (_Size=0x8) returned 0x144090
	[0242.757] malloc (_Size=0x8) returned 0x1440a0
	[0242.757] malloc (_Size=0x8) returned 0x1440b0
	[0242.757] malloc (_Size=0x8) returned 0x1440c0
	[0242.757] malloc (_Size=0x8) returned 0x1440d0
	[0242.757] malloc (_Size=0x8) returned 0x1440e0
	[0242.757] malloc (_Size=0x8) returned 0x1440f0
	[0242.757] malloc (_Size=0x8) returned 0x144100
	[0242.757] GetLastError () returned 0x6
	[0242.757] SetLastError (dwErrCode=0x6) 
	[0242.757] DeleteObject (ho=0xffffffff800509c6) returned 1
	[0242.758] GetLastError () returned 0x0
	[0242.758] SetLastError (dwErrCode=0x0) 
	[0242.758] GetLastError () returned 0x0
	[0242.758] SetLastError (dwErrCode=0x0) 
	[0242.758] DeleteObject (ho=0x47050a21) returned 1
	[0242.758] GetLastError () returned 0x0
	[0242.758] SetLastError (dwErrCode=0x0) 
	[0242.773] GetLastError () returned 0x0
	[0242.773] SetLastError (dwErrCode=0x0) 
	[0242.773] DeleteObject (ho=0x230509cf) returned 1
	[0242.773] GetLastError () returned 0x0
	[0242.773] SetLastError (dwErrCode=0x0) 
	[0242.773] GetLastError () returned 0x0
	[0242.773] SetLastError (dwErrCode=0x0) 
	[0242.774] DeleteObject (ho=0x30509d1) returned 1
	[0242.774] GetLastError () returned 0x0
	[0242.774] SetLastError (dwErrCode=0x0) 
	[0242.880] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1003, wParam=0x1, lParam=0x50fbd0) returned 0x50fbd0
	[0242.880] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1208, wParam=0x0, lParam=0x50fbd0) returned 0x50ebc0
	[0242.881] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x1003, wParam=0x0, lParam=0x510320) returned 0x510320
	[0242.882] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x1208, wParam=0x0, lParam=0x50ebc0) returned 0x50fbd0
	[0242.882] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0242.882] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0242.883] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x24cb30) returned 0x0
	[0242.884] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x24cb30) returned 0x0
	[0242.884] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x1022a, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0242.884] GetDC (hWnd=0x1025a) returned 0x1401007f
	[0242.885] malloc (_Size=0x88) returned 0xd0560
	[0242.885] malloc (_Size=0x100) returned 0x137ea0
	[0242.885] SelectObject (hdc=0x1401007f, h=0x20a09ec) returned 0x18a002e
	[0242.885] SelectObject (hdc=0x1401007f, h=0x18a002e) returned 0x20a09ec
	[0242.885] free (_Block=0xd0560) 
	[0242.885] free (_Block=0x137ea0) 
	[0242.885] ReleaseDC (hWnd=0x1025a, hDC=0x1401007f) returned 1
	[0242.885] malloc (_Size=0x28) returned 0x144a90
	[0242.886] GetWindowLongW (hWnd=0x20228, nIndex=-20) returned 512
	[0242.886] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x46, wParam=0x0, lParam=0x24d1f0) returned 0x0
	[0242.887] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20230, Msg=0x46, wParam=0x0, lParam=0x24d1f0) returned 0x0
	[0242.887] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10218, Msg=0x46, wParam=0x0, lParam=0x24d1f0) returned 0x0
	[0242.888] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1025a, Msg=0x46, wParam=0x0, lParam=0x24d1f0) returned 0x0
	[0242.888] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x20228, Msg=0x46, wParam=0x0, lParam=0x24d1f0) returned 0x0
	[0242.888] lstrlenW (lpString="") returned 0
	[0242.888] lstrlenW (lpString="") returned 0
	[0242.888] lstrlenW (lpString="") returned 0
	[0242.888] lstrlenW (lpString="Computer Management (Local)") returned 27
	[0242.888] malloc (_Size=0x44) returned 0x65bfd0
	[0242.889] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x3f11c60
	[0242.889] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d270) returned 0x1
	[0242.889] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24d270) returned 0x1
	[0242.890] malloc (_Size=0xc0) returned 0x146b40
	[0242.890] FindResourceW (hModule=0xff6d0000, lpName=0x349, lpType=0x6) returned 0x0
	[0242.890] FindResourceW (hModule=0x7fef8280000, lpName=0x349, lpType=0x6) returned 0x1c00b10
	[0242.890] LoadStringW (in: hInstance=0x7fef8280000, uID=0x3489, lpBuffer=0x24cec0, cchBufferMax=256 | out: lpBuffer="Displays Help for the current selection.") returned 0x28
	[0242.890] lstrlenW (lpString="Displays Help for the current selection.") returned 40
	[0242.890] malloc (_Size=0x5e) returned 0x1410a0
	[0242.890] FindResourceW (hModule=0xff6d0000, lpName=0x34a, lpType=0x6) returned 0x0
	[0242.890] FindResourceW (hModule=0x7fef8280000, lpName=0x34a, lpType=0x6) returned 0x1c00b20
	[0242.890] LoadStringW (in: hInstance=0x7fef8280000, uID=0x3492, lpBuffer=0x24cec0, cchBufferMax=256 | out: lpBuffer="Contains help items for the current selection.") returned 0x2e
	[0242.890] lstrlenW (lpString="Contains help items for the current selection.") returned 46
	[0242.890] malloc (_Size=0x6a) returned 0x146c10
	[0242.891] malloc (_Size=0x100) returned 0x137ea0
	[0242.891] malloc (_Size=0x100) returned 0x137fb0
	[0242.894] lstrlenW (lpString="") returned 0
	[0242.895] SetWindowTextW (hWnd=0x1026c, lpString="") returned 1
	[0242.895] ShowWindow (hWnd=0x1026e, nCmdShow=0) returned 1
	[0242.896] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1026e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
	[0242.896] lstrlenW (lpString="") returned 0
	[0242.896] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40b, wParam=0x0, lParam=0x7fef84c8074) returned 0x1
	[0242.897] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40a, wParam=0x0, lParam=0x24c430) returned 0x1
	[0242.897] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40b, wParam=0x1, lParam=0x7fef84c8074) returned 0x1
	[0242.898] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40a, wParam=0x1, lParam=0x24c430) returned 0x1
	[0242.898] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40b, wParam=0x2, lParam=0x7fef84c8074) returned 0x1
	[0242.899] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1026c, Msg=0x40a, wParam=0x2, lParam=0x24c430) returned 0x1
	[0242.899] GetParent (hWnd=0x1026c) returned 0x500a8
	[0242.899] GetParent (hWnd=0x500a8) returned 0x50168
	[0242.900] malloc (_Size=0x28) returned 0x144a90
	[0242.900] malloc (_Size=0x28) returned 0x144940
	[0242.901] malloc (_Size=0x8) returned 0x144130
	[0242.901] malloc (_Size=0x8) returned 0x144140
	[0242.901] malloc (_Size=0x150) returned 0x146c90
	[0242.902] malloc (_Size=0x8) returned 0x144150
	[0242.903] malloc (_Size=0x8) returned 0x144160
	[0242.906] malloc (_Size=0x8) returned 0x144170
	[0242.907] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f11c60
	[0242.907] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c6f0) returned 0x1
	[0242.907] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c6f0) returned 0x1
	[0242.908] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x3f11d80
	[0242.908] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x3f11d80
	[0242.908] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c6c0) returned 0x1
	[0242.909] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c6c0) returned 0x1
	[0242.909] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x1, lParam=0x3f11d80) returned 0x3f11d20
	[0242.909] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c6c0) returned 0x1
	[0242.909] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c6c0) returned 0x1
	[0242.910] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x1102, wParam=0x2, lParam=0x3f11d20) returned 0x1
	[0242.910] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.911] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113f, wParam=0x0, lParam=0x24b638) returned 0x1
	[0242.911] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0242.912] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24b570) returned 0x1
	[0242.912] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24b570) returned 0x1
	[0242.912] malloc (_Size=0x28) returned 0x144970
	[0242.913] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
	[0242.914] GetParent (hWnd=0xa016e) returned 0x0
	[0242.914] GetParent (hWnd=0xa016e) returned 0x0
	[0242.914] GetParent (hWnd=0xa016e) returned 0x0
	[0242.914] GetDesktopWindow () returned 0x10010
	[0242.914] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0242.914] IsWindowEnabled (hWnd=0x20144) returned 0
	[0242.914] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0242.914] IsWindowEnabled (hWnd=0x20142) returned 1
	[0243.008] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.008] IsWindowEnabled (hWnd=0x20146) returned 1
	[0243.008] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.008] IsWindowEnabled (hWnd=0x100a0) returned 1
	[0243.009] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.009] IsWindowEnabled (hWnd=0x20060) returned 0
	[0243.009] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.009] IsWindowEnabled (hWnd=0x1009e) returned 1
	[0243.009] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.009] IsWindowEnabled (hWnd=0x10088) returned 1
	[0243.009] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.009] IsWindowEnabled (hWnd=0x100b6) returned 1
	[0243.009] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.009] IsWindowEnabled (hWnd=0x100aa) returned 1
	[0243.009] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.009] IsWindowEnabled (hWnd=0x100a6) returned 1
	[0243.009] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.009] IsWindowEnabled (hWnd=0x100a2) returned 1
	[0243.009] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.009] IsWindowEnabled (hWnd=0x1007a) returned 0
	[0243.010] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.010] IsWindowEnabled (hWnd=0x10070) returned 0
	[0243.010] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.010] IsWindowEnabled (hWnd=0x10080) returned 1
	[0243.010] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.010] IsWindowEnabled (hWnd=0x10074) returned 1
	[0243.010] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.010] IsWindowEnabled (hWnd=0x10114) returned 1
	[0243.010] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.010] IsWindowEnabled (hWnd=0x1010a) returned 1
	[0243.010] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.010] IsWindowEnabled (hWnd=0x100f8) returned 1
	[0243.010] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.010] IsWindowEnabled (hWnd=0x100d0) returned 1
	[0243.010] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.010] IsWindowEnabled (hWnd=0x500c0) returned 1
	[0243.011] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.011] IsWindowEnabled (hWnd=0x100b8) returned 1
	[0243.011] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.011] IsWindowEnabled (hWnd=0x10054) returned 0
	[0243.011] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.011] IsWindowEnabled (hWnd=0x10052) returned 0
	[0243.011] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.011] IsWindowEnabled (hWnd=0x100c8) returned 1
	[0243.011] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.011] IsWindowEnabled (hWnd=0x20134) returned 1
	[0243.011] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.011] IsWindowEnabled (hWnd=0x20138) returned 1
	[0243.011] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.011] IsWindowEnabled (hWnd=0x2013a) returned 1
	[0243.011] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.011] IsWindowEnabled (hWnd=0x20118) returned 1
	[0243.011] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.012] IsWindowEnabled (hWnd=0x30028) returned 1
	[0243.012] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.012] IsWindowEnabled (hWnd=0x2014e) returned 0
	[0243.012] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.012] IsWindowEnabled (hWnd=0x20156) returned 1
	[0243.012] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.012] IsWindowEnabled (hWnd=0x2015a) returned 0
	[0243.012] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.012] IsWindowEnabled (hWnd=0x2001a) returned 1
	[0243.012] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.012] IsWindowEnabled (hWnd=0x20022) returned 0
	[0243.012] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.012] IsWindowEnabled (hWnd=0x20018) returned 1
	[0243.012] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.012] IsWindowEnabled (hWnd=0x1012e) returned 1
	[0243.012] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.012] IsWindowEnabled (hWnd=0x10120) returned 1
	[0243.012] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.013] IsWindowEnabled (hWnd=0x1011c) returned 1
	[0243.013] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.013] IsWindowEnabled (hWnd=0x10104) returned 1
	[0243.013] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.013] IsWindowEnabled (hWnd=0x10100) returned 1
	[0243.013] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.013] IsWindowEnabled (hWnd=0x100f2) returned 1
	[0243.013] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.013] IsWindowEnabled (hWnd=0x100e8) returned 1
	[0243.013] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.013] IsWindowEnabled (hWnd=0x100e2) returned 1
	[0243.013] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.013] IsWindowEnabled (hWnd=0x200dc) returned 1
	[0243.014] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.014] IsWindowEnabled (hWnd=0x100c4) returned 1
	[0243.014] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.014] IsWindowEnabled (hWnd=0x500ba) returned 1
	[0243.014] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.014] IsWindowEnabled (hWnd=0x100b0) returned 1
	[0243.014] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.014] IsWindowEnabled (hWnd=0x100ae) returned 1
	[0243.014] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.014] IsWindowEnabled (hWnd=0x100a4) returned 1
	[0243.014] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.014] IsWindowEnabled (hWnd=0x10090) returned 1
	[0243.014] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.014] IsWindowEnabled (hWnd=0x20264) returned 1
	[0243.015] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.015] IsWindowEnabled (hWnd=0x10238) returned 1
	[0243.015] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.015] IsWindowEnabled (hWnd=0x10236) returned 1
	[0243.015] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.015] IsWindowEnabled (hWnd=0x1022e) returned 1
	[0243.015] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.015] IsWindowEnabled (hWnd=0x10222) returned 1
	[0243.015] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.015] IsWindowEnabled (hWnd=0x1021c) returned 1
	[0243.015] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.015] IsWindowEnabled (hWnd=0x3019e) returned 1
	[0243.015] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.015] IsWindowEnabled (hWnd=0x201b8) returned 1
	[0243.016] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.016] IsWindowEnabled (hWnd=0x201c0) returned 1
	[0243.016] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.016] IsWindowEnabled (hWnd=0x101b0) returned 1
	[0243.016] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.016] IsWindowEnabled (hWnd=0x101ac) returned 1
	[0243.016] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.016] IsWindowEnabled (hWnd=0x101aa) returned 1
	[0243.016] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.016] IsWindowEnabled (hWnd=0x20164) returned 0
	[0243.016] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.016] IsWindowEnabled (hWnd=0x20162) returned 0
	[0243.016] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.016] IsWindowEnabled (hWnd=0x3016a) returned 1
	[0243.016] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.016] IsWindowEnabled (hWnd=0x20160) returned 0
	[0243.016] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.016] IsWindowEnabled (hWnd=0xa016e) returned 0
	[0243.016] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.016] IsWindowEnabled (hWnd=0x20166) returned 0
	[0243.016] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.016] IsWindowEnabled (hWnd=0x1008c) returned 1
	[0243.017] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.017] IsWindowEnabled (hWnd=0x1006e) returned 1
	[0243.017] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.017] IsWindowEnabled (hWnd=0x10066) returned 1
	[0243.017] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.017] IsWindowEnabled (hWnd=0x40044) returned 1
	[0243.017] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.017] IsWindowEnabled (hWnd=0x1005a) returned 1
	[0243.017] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.017] IsWindowEnabled (hWnd=0x1005c) returned 0
	[0243.017] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.017] IsWindowEnabled (hWnd=0x20048) returned 1
	[0243.017] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.017] IsWindowEnabled (hWnd=0x1004a) returned 0
	[0243.017] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.017] IsWindowEnabled (hWnd=0x10046) returned 1
	[0243.018] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.018] IsWindowEnabled (hWnd=0x1004e) returned 0
	[0243.018] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.018] IsWindowEnabled (hWnd=0x1004c) returned 0
	[0243.018] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.018] IsWindowEnabled (hWnd=0x1012c) returned 0
	[0243.018] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.018] IsWindowEnabled (hWnd=0x10064) returned 0
	[0243.018] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.018] IsWindowEnabled (hWnd=0x2007e) returned 1
	[0243.018] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0243.018] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 214892544
	[0243.018] GetParent (hWnd=0xa016e) returned 0x0
	[0243.018] GetDesktopWindow () returned 0x10010
	[0243.018] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.018] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0243.018] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0243.018] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.018] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.018] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.018] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.019] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.019] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.019] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.019] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.019] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.019] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.019] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0243.019] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0243.019] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.019] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.019] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.019] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0243.019] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0243.019] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.019] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.019] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.020] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0243.020] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0243.020] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.020] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.020] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.020] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0243.020] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0243.020] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.020] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.020] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.020] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0243.020] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0243.020] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.020] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.020] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.021] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0243.021] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0243.021] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.021] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.021] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.021] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0243.021] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0243.021] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.021] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.021] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.021] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0243.021] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0243.021] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.021] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.021] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.021] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0243.021] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0243.022] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.022] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.022] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.022] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0243.022] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0243.022] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.022] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.022] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.022] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.022] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.022] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.022] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.022] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.022] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.023] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.023] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.023] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.023] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.023] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.023] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.023] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.023] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.023] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.023] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.023] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.023] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.023] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.023] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0243.023] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0243.023] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.023] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0243.023] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0243.024] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.024] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0243.024] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0243.024] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.024] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0243.024] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0243.024] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.024] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0243.024] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0243.024] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.024] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0243.024] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0243.024] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.024] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0243.024] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0243.024] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.025] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.025] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.025] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.025] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.025] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.025] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.025] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.025] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.025] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.025] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0243.025] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0243.025] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.025] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.025] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.025] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0243.025] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0243.025] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.026] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0243.026] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0243.026] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.026] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0243.026] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0243.026] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.026] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.026] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.026] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.026] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.026] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.026] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.026] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0243.026] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0243.026] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.026] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.026] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.027] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.027] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.027] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.027] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0243.027] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0243.027] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.027] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.027] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.027] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.027] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.027] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.027] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0243.027] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0243.027] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.027] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.027] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.027] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0243.028] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0243.028] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.028] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0243.028] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0243.028] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.028] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0243.028] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0243.028] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.028] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0243.028] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0243.028] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.028] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0243.028] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0243.028] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.028] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.028] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.028] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0243.028] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0243.028] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.029] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0243.029] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0243.029] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.029] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.029] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.029] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0243.029] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0243.029] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.029] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0243.029] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0243.029] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.029] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.029] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.029] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0243.029] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0243.029] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.029] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.029] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.029] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.029] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.029] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.029] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0243.029] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0243.029] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.029] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0243.029] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0243.029] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.029] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0243.029] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0243.029] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.030] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0243.030] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0243.030] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.030] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.030] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.030] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0243.030] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0243.030] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.030] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.030] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.030] GetWindowLongW (hWnd=0x20264, nIndex=-16) returned -2080374526
	[0243.030] GetWindow (hWnd=0x20264, uCmd=0x4) returned 0x0
	[0243.030] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.030] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned -2080374526
	[0243.030] GetWindow (hWnd=0x10238, uCmd=0x4) returned 0x0
	[0243.030] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.030] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned -2080374782
	[0243.030] GetWindow (hWnd=0x10236, uCmd=0x4) returned 0x3016a
	[0243.030] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0243.030] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.030] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.030] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned -2080374526
	[0243.030] GetWindow (hWnd=0x1022e, uCmd=0x4) returned 0x0
	[0243.030] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.030] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned -2080374782
	[0243.030] GetWindow (hWnd=0x10222, uCmd=0x4) returned 0x20164
	[0243.030] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0243.030] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.031] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.031] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned -2080374782
	[0243.031] GetWindow (hWnd=0x1021c, uCmd=0x4) returned 0xa016e
	[0243.031] SendMessageW (hWnd=0x1021c, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.031] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.031] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.031] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.031] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0243.031] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0243.031] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.031] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0243.031] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0243.031] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.031] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0243.031] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0243.031] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.031] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0243.031] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0243.032] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0243.032] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.032] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.032] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0243.032] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0243.032] SendMessageW (hWnd=0x101ac, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.032] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.032] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.032] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.032] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0243.032] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0243.032] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0243.032] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.032] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.032] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0243.032] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.032] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.032] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0243.032] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0243.033] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0243.033] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.033] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.033] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0243.033] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.033] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.033] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0243.033] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0243.033] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0243.033] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.033] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.033] SendMessageW (hWnd=0xa016e, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.034] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.034] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.034] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0243.034] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0243.034] SendMessageW (hWnd=0x20166, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.034] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0243.034] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20166, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.034] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.034] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.034] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.034] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.034] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0243.034] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0243.034] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.034] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0243.035] GetParent (hWnd=0x10066) returned 0x0
	[0243.035] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.035] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0243.035] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0243.035] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.035] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.035] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.035] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.035] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0243.035] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0243.035] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.035] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.035] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.035] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.035] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.035] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.035] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0243.035] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0243.036] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.036] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.036] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.036] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0243.036] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0243.036] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.036] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0243.036] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0243.036] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.036] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.036] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.036] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.036] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.036] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.036] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0243.036] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0243.037] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.037] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.037] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.037] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.037] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.037] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.037] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.037] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.037] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.037] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.037] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.037] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.037] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0243.042] GetLastError () returned 0x3f0
	[0243.042] SetLastError (dwErrCode=0x3f0) 
	[0243.042] GetLastError () returned 0x0
	[0243.042] SetLastError (dwErrCode=0x0) 
	[0243.042] malloc (_Size=0x190) returned 0x146df0
	[0243.044] GetParent (hWnd=0xa016e) returned 0x0
	[0243.044] GetActiveWindow () returned 0x0
	[0243.044] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.044] GetParent (hWnd=0xa016e) returned 0x0
	[0243.044] GetDesktopWindow () returned 0x10010
	[0243.044] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.044] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0243.044] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0243.044] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.044] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.044] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.045] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.045] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.045] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.045] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.045] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.045] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.045] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.045] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0243.045] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0243.045] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.045] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.045] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.045] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0243.045] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0243.045] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.045] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.045] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.046] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0243.046] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0243.046] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.046] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.046] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.046] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0243.046] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0243.046] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.046] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.046] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.046] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0243.046] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0243.046] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.046] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.046] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.047] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0243.047] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0243.047] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.047] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.047] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.047] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0243.047] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0243.047] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.047] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.047] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.047] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0243.047] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0243.047] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.047] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.047] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.047] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0243.047] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0243.048] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.048] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.048] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.048] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0243.048] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0243.048] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.048] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.048] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.048] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.048] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.048] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.048] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.048] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.048] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.048] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.049] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.049] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.049] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.049] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.049] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.049] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.049] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.049] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.049] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.049] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.049] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.049] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.049] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0243.049] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0243.049] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.049] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0243.049] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0243.049] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.050] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0243.050] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0243.050] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.050] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0243.050] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0243.050] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.050] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0243.050] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0243.050] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.050] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0243.050] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0243.050] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.050] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0243.050] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0243.050] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.050] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.051] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.051] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.051] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.051] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.051] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.051] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.051] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.051] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.051] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0243.051] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0243.051] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.051] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.051] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.051] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0243.051] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0243.051] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.051] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0243.051] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0243.052] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.052] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0243.052] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0243.052] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.052] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.052] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.052] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.052] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.052] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.052] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.052] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0243.052] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0243.052] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.052] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.052] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.052] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.052] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.052] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.053] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0243.053] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0243.053] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.053] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.053] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.053] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.053] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.053] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.053] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0243.053] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0243.053] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.053] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.053] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.053] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0243.053] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0243.053] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.054] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0243.054] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0243.054] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.054] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0243.054] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0243.054] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.054] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0243.054] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0243.054] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.054] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0243.054] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0243.054] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.054] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.054] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.054] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0243.054] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0243.054] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.055] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0243.055] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0243.055] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.055] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.149] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.149] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0243.149] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0243.149] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.149] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0243.149] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0243.149] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.149] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.149] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.149] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0243.149] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0243.149] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.149] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.149] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.150] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.150] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.150] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.150] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0243.150] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0243.150] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.150] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0243.150] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0243.150] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.150] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0243.150] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0243.150] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.150] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0243.150] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0243.150] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.150] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.150] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.151] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0243.151] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0243.151] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.151] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.151] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.151] GetWindowLongW (hWnd=0x20264, nIndex=-16) returned -2080374526
	[0243.151] GetWindow (hWnd=0x20264, uCmd=0x4) returned 0x0
	[0243.151] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.151] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned -2080374526
	[0243.151] GetWindow (hWnd=0x10238, uCmd=0x4) returned 0x0
	[0243.151] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.151] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned -2080374782
	[0243.151] GetWindow (hWnd=0x10236, uCmd=0x4) returned 0x3016a
	[0243.151] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.151] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.151] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.151] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned -2080374526
	[0243.151] GetWindow (hWnd=0x1022e, uCmd=0x4) returned 0x0
	[0243.152] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.152] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned -2080374782
	[0243.152] GetWindow (hWnd=0x10222, uCmd=0x4) returned 0x20164
	[0243.152] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.152] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.152] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.152] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned -2080374782
	[0243.152] GetWindow (hWnd=0x1021c, uCmd=0x4) returned 0xa016e
	[0243.152] SendMessageW (hWnd=0x1021c, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.152] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.152] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.152] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.152] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0243.152] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0243.152] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.152] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0243.152] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0243.152] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.153] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0243.153] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0243.153] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.153] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0243.153] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0243.153] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.153] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.153] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.153] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0243.153] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0243.153] SendMessageW (hWnd=0x101ac, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.153] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.153] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.153] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.153] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0243.153] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0243.154] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.154] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.154] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.154] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.154] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.154] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.154] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0243.154] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0243.154] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.154] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.154] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.154] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.154] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.154] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.154] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0243.154] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0243.154] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.155] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.155] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.155] SendMessageW (hWnd=0xa016e, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.155] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.155] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.155] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0243.155] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0243.155] SendMessageW (hWnd=0x20166, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.155] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0243.155] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20166, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.155] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.156] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.156] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.156] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.156] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0243.156] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0243.156] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.156] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0243.156] GetParent (hWnd=0x10066) returned 0x0
	[0243.156] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.156] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0243.156] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0243.156] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.156] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.156] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.156] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.156] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0243.156] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0243.157] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.157] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.157] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.157] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.157] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.157] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.157] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0243.157] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0243.157] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.157] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.157] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.157] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0243.157] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0243.157] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.157] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0243.157] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0243.158] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.158] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.158] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.158] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.158] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.158] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.158] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0243.158] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0243.158] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.158] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.158] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.158] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.158] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.158] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.158] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.158] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.159] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.159] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.159] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.159] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.159] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0243.160] FindResourceW (hModule=0x75240000, lpName=0x86, lpType=0x2) returned 0x752428f8
	[0243.160] malloc (_Size=0x88) returned 0xd0560
	[0243.160] malloc (_Size=0x88) returned 0xd05f0
	[0243.160] malloc (_Size=0x100) returned 0x1380c0
	[0243.161] FindResourceW (hModule=0x75240000, lpName=0x87, lpType=0x2) returned 0x75242908
	[0243.162] GetLastError () returned 0x0
	[0243.162] SetLastError (dwErrCode=0x0) 
	[0243.162] DeleteObject (ho=0x7050a06) returned 1
	[0243.162] GetLastError () returned 0x0
	[0243.163] SetLastError (dwErrCode=0x0) 
	[0243.163] GetLastError () returned 0x0
	[0243.163] SetLastError (dwErrCode=0x0) 
	[0243.163] free (_Block=0xd05f0) 
	[0243.163] free (_Block=0x1380c0) 
	[0243.163] DeleteObject (ho=0x6050a08) returned 1
	[0243.163] GetLastError () returned 0x0
	[0243.163] SetLastError (dwErrCode=0x0) 
	[0243.163] malloc (_Size=0x28) returned 0x144970
	[0243.165] GetLastError () returned 0x3f0
	[0243.165] SetLastError (dwErrCode=0x3f0) 
	[0243.165] GetLastError () returned 0x0
	[0243.166] SetLastError (dwErrCode=0x0) 
	[0243.166] malloc (_Size=0x110) returned 0x147240
	[0243.167] malloc (_Size=0x100) returned 0x1380c0
	[0243.167] malloc (_Size=0x88) returned 0xd05f0
	[0243.168] swprintf_s (in: _Dst=0x43ed30, _SizeInWords=0x100, _Format="Afx:%p:%x" | out: _Dst="Afx:000007FEF4060000:0") returned 22
	[0243.168] GetClassInfoW (in: hInstance=0x7fef4060000, lpClassName="Afx:000007FEF4060000:0", lpWndClass=0x24abe0 | out: lpWndClass=0x24abe0) returned 0
	[0243.168] GetClassInfoW (in: hInstance=0x7fef4060000, lpClassName="Afx:000007FEF4060000:0", lpWndClass=0x24ab30 | out: lpWndClass=0x24ab30) returned 0
	[0243.168] RegisterClassW (lpWndClass=0x24abe0) returned 0xc168
	[0243.168] lstrlenW (lpString="Afx:000007FEF4060000:0") returned 22
	[0243.168] lstrlenW (lpString="") returned 0
	[0243.168] wcscat_s (in: _Destination="", _SizeInWords=0x1000, _Source="Afx:000007FEF4060000:0" | out: _Destination="Afx:000007FEF4060000:0") returned 0x0
	[0243.168] wcscat_s (in: _Destination="Afx:000007FEF4060000:0", _SizeInWords=0x1000, _Source="\n" | out: _Destination="Afx:000007FEF4060000:0\n") returned 0x0
	[0243.168] lstrlenW (lpString="Afx:000007FEF4060000:0") returned 22
	[0243.168] malloc (_Size=0x3a) returned 0x65bc10
	[0243.169] CreateWindowExW (dwExStyle=0x0, lpClassName="Afx:000007FEF4060000:0", lpWindowName="CMessageWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x7fef4060000, lpParam=0x0) returned 0x1028c
	[0243.169] malloc (_Size=0x88) returned 0xd0680
	[0243.169] malloc (_Size=0x88) returned 0xd0710
	[0243.169] malloc (_Size=0x100) returned 0x1381d0
	[0243.169] GetParent (hWnd=0x1028c) returned 0x0
	[0243.169] SetWindowLongPtrW (hWnd=0x1028c, nIndex=-4, dwNewLong=0x7fef406425c) returned 0x77bdb0ac
	[0243.170] CallNextHookEx (hhk=0x10197, nCode=3, wParam=0x1028c, lParam=0x24a4d0) returned 0x0
	[0243.170] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1028c, Msg=0x24, wParam=0x0, lParam=0x24a610) returned 0x0
	[0243.171] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1028c, Msg=0x81, wParam=0x0, lParam=0x24a5b0) returned 0x1
	[0243.171] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1028c, Msg=0x83, wParam=0x0, lParam=0x24a630) returned 0x0
	[0243.172] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1028c, Msg=0x1, wParam=0x0, lParam=0x24a580) returned 0x0
	[0243.172] free (_Block=0x65bc10) 
	[0243.173] malloc (_Size=0x28) returned 0x144970
	[0243.180] malloc (_Size=0x28) returned 0x144b20
	[0243.181] lstrlenW (lpString="") returned 0
	[0243.181] malloc (_Size=0x10) returned 0x146340
	[0243.181] malloc (_Size=0x48) returned 0x65bc10
	[0243.181] malloc (_Size=0x150) returned 0x1475d0
	[0243.181] lstrlenW (lpString="XDUWTFONO") returned 9
	[0243.181] malloc (_Size=0x20) returned 0x144b20
	[0243.182] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a6, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0243.182] InvalidateRect (hWnd=0x101a6, lpRect=0x0, bErase=1) returned 1
	[0243.182] InvalidateRect (hWnd=0x201c2, lpRect=0x0, bErase=1) returned 1
	[0243.182] InvalidateRect (hWnd=0x101e6, lpRect=0x0, bErase=1) returned 1
	[0243.183] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f11c60
	[0243.183] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24a860) returned 0x1
	[0243.183] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24a860) returned 0x1
	[0243.183] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24a860) returned 0x1
	[0243.183] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24a860) returned 0x1
	[0243.184] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x3f11d80
	[0243.184] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24a860) returned 0x1
	[0243.184] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24a860) returned 0x1
	[0243.185] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x1, lParam=0x3f11d80) returned 0x3f11d20
	[0243.185] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24a860) returned 0x1
	[0243.185] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24a860) returned 0x1
	[0243.186] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11d20) returned 0x0
	[0243.186] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11d20) returned 0x0
	[0243.186] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24a8a0) returned 0x1
	[0243.187] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24a8a0) returned 0x1
	[0243.187] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113f, wParam=0x0, lParam=0x24a930) returned 0x1
	[0243.187] InvalidateRect (hWnd=0x1021a, lpRect=0x0, bErase=1) returned 1
	[0243.187] InvalidateRect (hWnd=0x20230, lpRect=0x0, bErase=1) returned 1
	[0243.187] InvalidateRect (hWnd=0x1025a, lpRect=0x0, bErase=1) returned 1
	[0243.187] malloc (_Size=0x150) returned 0x1478e0
	[0243.187] free (_Block=0x146340) 
	[0243.188] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x1132, wParam=0x0, lParam=0x24b4e0) returned 0x3f11e40
	[0243.188] malloc (_Size=0x18) returned 0x146340
	[0243.188] malloc (_Size=0x30) returned 0x13bcb0
	[0243.188] malloc (_Size=0x30) returned 0x13bcf0
	[0243.189] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113f, wParam=0x0, lParam=0x24b560) returned 0x1
	[0243.189] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24b5f0) returned 0x1
	[0243.189] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24b5f0) returned 0x1
	[0243.190] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11d20) returned 0x3f11e40
	[0243.190] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0243.191] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0243.191] malloc (_Size=0x20e) returned 0x147a40
	[0243.191] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24b438) returned 0x1
	[0243.192] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24b438) returned 0x1
	[0243.192] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0243.193] FindResourceW (hModule=0x75240000, lpName=0x3f, lpType=0x6) returned 0x2331440
	[0243.193] LoadStringW (in: hInstance=0x75240000, uID=0x3eb, lpBuffer=0x249ea0, cchBufferMax=256 | out: lpBuffer="Disk Management") returned 0xf
	[0243.281] lstrlenW (lpString="Disk Management") returned 15
	[0243.281] malloc (_Size=0x2c) returned 0x13bd30
	[0243.282] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x3f11c60
	[0243.282] lstrlenW (lpString="Disk Management") returned 15
	[0243.282] malloc (_Size=0x20) returned 0x144b80
	[0243.282] free (_Block=0x147a40) 
	[0243.282] malloc (_Size=0x20) returned 0x144b50
	[0243.282] malloc (_Size=0x30) returned 0x13bd70
	[0243.282] malloc (_Size=0x10) returned 0x1463a0
	[0243.283] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0243.283] FindResourceW (hModule=0x75240000, lpName=0x3f, lpType=0x6) returned 0x2331440
	[0243.283] LoadStringW (in: hInstance=0x75240000, uID=0x3eb, lpBuffer=0x24ac20, cchBufferMax=256 | out: lpBuffer="Disk Management") returned 0xf
	[0243.283] lstrlenW (lpString="Disk Management") returned 15
	[0243.284] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x3f11c60
	[0243.285] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0243.285] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0243.286] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f11c60
	[0243.286] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c6f0) returned 0x1
	[0243.287] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c6f0) returned 0x1
	[0243.287] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x3f11d80
	[0243.288] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x110a, wParam=0x4, lParam=0x3f11c60) returned 0x3f11d80
	[0243.288] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c6c0) returned 0x1
	[0243.288] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24c6c0) returned 0x1
	[0243.288] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x1102, wParam=0x2, lParam=0x3f11d80) 
	[0243.289] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0243.290] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113f, wParam=0x0, lParam=0x24b638) returned 0x1
	[0243.290] GetDlgCtrlID (hWnd=0x1021a) returned 12785
	[0243.290] SendMessageW (hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24b570) returned 0x1
	[0243.291] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x1021a, Msg=0x113e, wParam=0x0, lParam=0x24b570) returned 0x1
	[0243.291] malloc (_Size=0x28) returned 0x144b80
	[0243.292] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
	[0243.292] GetParent (hWnd=0xa016e) returned 0x0
	[0243.293] GetParent (hWnd=0xa016e) returned 0x0
	[0243.293] GetParent (hWnd=0xa016e) returned 0x0
	[0243.293] GetDesktopWindow () returned 0x10010
	[0243.293] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.293] IsWindowEnabled (hWnd=0x20144) returned 0
	[0243.293] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.293] IsWindowEnabled (hWnd=0x20142) returned 1
	[0243.293] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.293] IsWindowEnabled (hWnd=0x20146) returned 1
	[0243.293] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.293] IsWindowEnabled (hWnd=0x100a0) returned 1
	[0243.293] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.293] IsWindowEnabled (hWnd=0x20060) returned 0
	[0243.293] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.293] IsWindowEnabled (hWnd=0x1009e) returned 1
	[0243.294] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.294] IsWindowEnabled (hWnd=0x10088) returned 1
	[0243.294] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.294] IsWindowEnabled (hWnd=0x100b6) returned 1
	[0243.294] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.294] IsWindowEnabled (hWnd=0x100aa) returned 1
	[0243.294] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.294] IsWindowEnabled (hWnd=0x100a6) returned 1
	[0243.294] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.294] IsWindowEnabled (hWnd=0x100a2) returned 1
	[0243.294] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.294] IsWindowEnabled (hWnd=0x1007a) returned 0
	[0243.294] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.294] IsWindowEnabled (hWnd=0x10070) returned 0
	[0243.294] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.294] IsWindowEnabled (hWnd=0x10080) returned 1
	[0243.294] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.294] IsWindowEnabled (hWnd=0x10074) returned 1
	[0243.295] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.295] IsWindowEnabled (hWnd=0x10114) returned 1
	[0243.295] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.295] IsWindowEnabled (hWnd=0x1010a) returned 1
	[0243.295] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.295] IsWindowEnabled (hWnd=0x100f8) returned 1
	[0243.295] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.295] IsWindowEnabled (hWnd=0x100d0) returned 1
	[0243.295] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.295] IsWindowEnabled (hWnd=0x500c0) returned 1
	[0243.295] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.295] IsWindowEnabled (hWnd=0x100b8) returned 1
	[0243.295] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.295] IsWindowEnabled (hWnd=0x10054) returned 0
	[0243.295] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.295] IsWindowEnabled (hWnd=0x10052) returned 0
	[0243.296] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.296] IsWindowEnabled (hWnd=0x100c8) returned 1
	[0243.296] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.296] IsWindowEnabled (hWnd=0x20134) returned 1
	[0243.296] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.296] IsWindowEnabled (hWnd=0x20138) returned 1
	[0243.296] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.296] IsWindowEnabled (hWnd=0x2013a) returned 1
	[0243.296] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.296] IsWindowEnabled (hWnd=0x20118) returned 1
	[0243.296] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.296] IsWindowEnabled (hWnd=0x30028) returned 1
	[0243.296] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.296] IsWindowEnabled (hWnd=0x2014e) returned 0
	[0243.296] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.296] IsWindowEnabled (hWnd=0x20156) returned 1
	[0243.297] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.297] IsWindowEnabled (hWnd=0x2015a) returned 0
	[0243.297] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.297] IsWindowEnabled (hWnd=0x2001a) returned 1
	[0243.297] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.297] IsWindowEnabled (hWnd=0x20022) returned 0
	[0243.297] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.297] IsWindowEnabled (hWnd=0x20018) returned 1
	[0243.297] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.297] IsWindowEnabled (hWnd=0x1012e) returned 1
	[0243.297] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.297] IsWindowEnabled (hWnd=0x10120) returned 1
	[0243.297] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.297] IsWindowEnabled (hWnd=0x1011c) returned 1
	[0243.297] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.297] IsWindowEnabled (hWnd=0x10104) returned 1
	[0243.298] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.298] IsWindowEnabled (hWnd=0x10100) returned 1
	[0243.298] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.298] IsWindowEnabled (hWnd=0x100f2) returned 1
	[0243.298] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.298] IsWindowEnabled (hWnd=0x100e8) returned 1
	[0243.298] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.298] IsWindowEnabled (hWnd=0x100e2) returned 1
	[0243.298] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.298] IsWindowEnabled (hWnd=0x200dc) returned 1
	[0243.298] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.298] IsWindowEnabled (hWnd=0x100c4) returned 1
	[0243.298] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.298] IsWindowEnabled (hWnd=0x500ba) returned 1
	[0243.299] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.299] IsWindowEnabled (hWnd=0x100b0) returned 1
	[0243.299] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.299] IsWindowEnabled (hWnd=0x100ae) returned 1
	[0243.299] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.299] IsWindowEnabled (hWnd=0x100a4) returned 1
	[0243.299] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.299] IsWindowEnabled (hWnd=0x10090) returned 1
	[0243.299] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.299] IsWindowEnabled (hWnd=0x20264) returned 1
	[0243.299] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.299] IsWindowEnabled (hWnd=0x10238) returned 1
	[0243.299] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.299] IsWindowEnabled (hWnd=0x10236) returned 1
	[0243.300] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.300] IsWindowEnabled (hWnd=0x1022e) returned 1
	[0243.300] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.300] IsWindowEnabled (hWnd=0x10222) returned 1
	[0243.300] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.300] IsWindowEnabled (hWnd=0x1021c) returned 1
	[0243.300] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.300] IsWindowEnabled (hWnd=0x3019e) returned 1
	[0243.300] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.300] IsWindowEnabled (hWnd=0x201b8) returned 1
	[0243.300] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.300] IsWindowEnabled (hWnd=0x201c0) returned 1
	[0243.300] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.300] IsWindowEnabled (hWnd=0x101b0) returned 1
	[0243.301] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.301] IsWindowEnabled (hWnd=0x101ac) returned 1
	[0243.301] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.301] IsWindowEnabled (hWnd=0x101aa) returned 1
	[0243.301] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.301] IsWindowEnabled (hWnd=0x20164) returned 1
	[0243.301] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.301] IsWindowEnabled (hWnd=0x20162) returned 0
	[0243.301] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.301] IsWindowEnabled (hWnd=0x3016a) returned 1
	[0243.301] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.301] IsWindowEnabled (hWnd=0x20160) returned 0
	[0243.301] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.301] IsWindowEnabled (hWnd=0xa016e) returned 0
	[0243.301] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.301] IsWindowEnabled (hWnd=0x20166) returned 0
	[0243.301] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.301] IsWindowEnabled (hWnd=0x1008c) returned 1
	[0243.301] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.301] IsWindowEnabled (hWnd=0x1006e) returned 1
	[0243.302] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.302] IsWindowEnabled (hWnd=0x10066) returned 1
	[0243.302] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.302] IsWindowEnabled (hWnd=0x40044) returned 1
	[0243.302] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.302] IsWindowEnabled (hWnd=0x1005a) returned 1
	[0243.302] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.302] IsWindowEnabled (hWnd=0x1005c) returned 0
	[0243.302] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.302] IsWindowEnabled (hWnd=0x20048) returned 1
	[0243.302] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.302] IsWindowEnabled (hWnd=0x1004a) returned 0
	[0243.302] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.302] IsWindowEnabled (hWnd=0x10046) returned 1
	[0243.302] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.302] IsWindowEnabled (hWnd=0x1004e) returned 0
	[0243.302] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.302] IsWindowEnabled (hWnd=0x1004c) returned 0
	[0243.302] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.303] IsWindowEnabled (hWnd=0x1012c) returned 0
	[0243.303] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.303] IsWindowEnabled (hWnd=0x10064) returned 0
	[0243.303] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.303] IsWindowEnabled (hWnd=0x2007e) returned 1
	[0243.303] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0243.303] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 214892544
	[0243.303] GetParent (hWnd=0xa016e) returned 0x0
	[0243.303] GetDesktopWindow () returned 0x10010
	[0243.303] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.303] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0243.303] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0243.303] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.303] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.303] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.303] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.303] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.303] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.304] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.304] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.304] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.304] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.304] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0243.304] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0243.304] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.304] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.304] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.304] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0243.304] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0243.304] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.304] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.305] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.305] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0243.305] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0243.305] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.305] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.305] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.305] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0243.305] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0243.305] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.305] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.305] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.305] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0243.305] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0243.305] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.305] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.305] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.306] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0243.306] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0243.306] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.306] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.306] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.306] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0243.306] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0243.306] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.306] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.306] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.306] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0243.306] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0243.306] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.306] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.306] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.307] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0243.307] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0243.307] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.307] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.307] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.307] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0243.307] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0243.307] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.307] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.307] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.307] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.307] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.307] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.307] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.307] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.307] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.308] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.308] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.308] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.308] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.308] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.308] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.308] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.308] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.308] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.308] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.308] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.308] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.308] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.308] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0243.308] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0243.308] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.309] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0243.309] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0243.309] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.309] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0243.309] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0243.309] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.309] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0243.309] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0243.309] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.309] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0243.309] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0243.309] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.309] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0243.309] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0243.309] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.309] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0243.309] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0243.310] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.310] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.310] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.310] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.310] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.310] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.310] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.310] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.310] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.310] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.310] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0243.310] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0243.310] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.310] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.310] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.311] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0243.311] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0243.311] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.311] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0243.311] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0243.311] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.311] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0243.311] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0243.311] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.311] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.311] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.311] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.311] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.311] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.311] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.311] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0243.311] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0243.311] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.312] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.312] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.312] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.312] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.312] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.312] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0243.312] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0243.312] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.312] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.312] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.312] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.312] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.312] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.312] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0243.312] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0243.312] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.312] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.313] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.313] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0243.313] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0243.313] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.313] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0243.313] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0243.313] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.313] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0243.313] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0243.313] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.313] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0243.313] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0243.313] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.313] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0243.313] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0243.313] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.313] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.313] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.313] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0243.313] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0243.313] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.313] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0243.313] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0243.313] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.313] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.313] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.313] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0243.313] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0243.313] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.314] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0243.314] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0243.314] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.314] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.314] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.314] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0243.314] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0243.314] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.314] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.314] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.314] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.314] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.314] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.314] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0243.314] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0243.314] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.314] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0243.314] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0243.314] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.314] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0243.314] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0243.314] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.314] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0243.314] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0243.314] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.314] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.314] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.314] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0243.314] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0243.315] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.315] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.315] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.315] GetWindowLongW (hWnd=0x20264, nIndex=-16) returned -2080374526
	[0243.315] GetWindow (hWnd=0x20264, uCmd=0x4) returned 0x0
	[0243.315] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.315] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned -2080374526
	[0243.315] GetWindow (hWnd=0x10238, uCmd=0x4) returned 0x0
	[0243.315] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.315] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned -2080374782
	[0243.315] GetWindow (hWnd=0x10236, uCmd=0x4) returned 0x3016a
	[0243.315] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0243.315] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.315] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.315] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned -2080374526
	[0243.315] GetWindow (hWnd=0x1022e, uCmd=0x4) returned 0x0
	[0243.315] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.315] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned -2080374782
	[0243.315] GetWindow (hWnd=0x10222, uCmd=0x4) returned 0x20164
	[0243.315] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.315] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.315] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.315] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned -2080374782
	[0243.315] GetWindow (hWnd=0x1021c, uCmd=0x4) returned 0xa016e
	[0243.315] SendMessageW (hWnd=0x1021c, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.315] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.315] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.315] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.316] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0243.316] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0243.316] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.316] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0243.316] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0243.316] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.316] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0243.316] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0243.316] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.316] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0243.316] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0243.316] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.316] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.316] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.316] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0243.316] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0243.316] SendMessageW (hWnd=0x101ac, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.317] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.317] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.317] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.317] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0243.317] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0243.317] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0243.317] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.317] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.317] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.317] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.317] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.317] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0243.317] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0243.317] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.317] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.317] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.318] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0243.318] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.318] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.318] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0243.318] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0243.318] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0243.318] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.318] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.318] SendMessageW (hWnd=0xa016e, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.318] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.318] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.319] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0243.319] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0243.319] SendMessageW (hWnd=0x20166, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.319] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0243.319] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20166, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.319] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.319] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.319] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.319] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.319] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0243.319] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0243.319] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.319] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0243.319] GetParent (hWnd=0x10066) returned 0x0
	[0243.319] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.319] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0243.319] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0243.319] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.320] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.320] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.320] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.320] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0243.320] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0243.320] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.507] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.507] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.507] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.508] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.508] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.508] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0243.508] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0243.508] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.508] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.508] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.508] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0243.508] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0243.508] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.508] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0243.508] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0243.508] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.508] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.508] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.508] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.508] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.508] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.509] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0243.509] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0243.509] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.509] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.509] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.509] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.509] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.509] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.509] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.509] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.509] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.509] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.509] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.509] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.509] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0248.297] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x80010106
	[0250.604] IIDFromString (in: lpsz="{D5AB5662-131D-453d-88C8-9BBA87502ADE}", lpiid=0x249418 | out: lpiid=0x249418) returned 0x0
	[0250.613] IIDFromString (in: lpsz="{D5AB5662-131D-453d-88C8-9BBA87502ADE}", lpiid=0x2495d0 | out: lpiid=0x2495d0) returned 0x0
	[0253.833] GetVersionExW (in: lpVersionInformation=0x2486f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2486f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0253.891] GetVersionExW (in: lpVersionInformation=0x2486f0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2486f0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0253.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0x248630, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0253.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0x248530, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0254.127] CoTaskMemAlloc (cb=0x20c) returned 0x4b57b0
	[0254.128] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4b57b0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\mmc.exe" (normalized: "c:\\windows\\system32\\mmc.exe")) returned 0x1b
	[0254.128] CoTaskMemFree (pv=0x4b57b0) 
	[0254.129] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.exe", nBufferLength=0x105, lpBuffer=0x248690, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.exe", lpFilePart=0x0) returned 0x1b
	[0255.181] GetVersionExW (in: lpVersionInformation=0x248560*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x248560*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0255.182] GetCurrentProcess () returned 0xffffffffffffffff
	[0255.210] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2485f8 | out: TokenHandle=0x2485f8*=0x3c8) returned 1
	[0255.275] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x248250, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30
	[0255.800] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x2486a0 | out: lpFileInformation=0x2486a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x76d072b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x622a)) returned 1
	[0255.802] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x2481f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45
	[0255.821] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x248650 | out: lpFileInformation=0x248650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x76d072b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x622a)) returned 1
	[0255.838] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x248030, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45
	[0255.838] SetErrorMode (uMode=0x1) returned 0x8001
	[0255.840] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3d8
	[0255.841] GetFileType (hFile=0x3d8) returned 0x1
	[0255.842] SetErrorMode (uMode=0x8001) returned 0x1
	[0255.842] GetFileType (hFile=0x3d8) returned 0x1
	[0256.173] GetFileSize (in: hFile=0x3d8, lpFileSizeHigh=0x248648 | out: lpFileSizeHigh=0x248648*=0x0) returned 0x622a
	[0256.175] ReadFile (in: hFile=0x3d8, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x248568, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0x248568*=0x1000, lpOverlapped=0x0) returned 1
	[0256.459] ReadFile (in: hFile=0x3d8, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x248098, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0x248098*=0x1000, lpOverlapped=0x0) returned 1
	[0256.461] ReadFile (in: hFile=0x3d8, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x248098, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0x248098*=0x1000, lpOverlapped=0x0) returned 1
	[0256.461] ReadFile (in: hFile=0x3d8, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x248098, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0x248098*=0x1000, lpOverlapped=0x0) returned 1
	[0256.462] ReadFile (in: hFile=0x3d8, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x248098, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0x248098*=0x1000, lpOverlapped=0x0) returned 1
	[0256.537] ReadFile (in: hFile=0x3d8, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2481d8, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0x2481d8*=0x1000, lpOverlapped=0x0) returned 1
	[0256.537] ReadFile (in: hFile=0x3d8, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x248058, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0x248058*=0x22a, lpOverlapped=0x0) returned 1
	[0256.538] ReadFile (in: hFile=0x3d8, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2480f8, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0x2480f8*=0x0, lpOverlapped=0x0) returned 1
	[0256.539] CloseHandle (hObject=0x3d8) returned 1
	[0256.541] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0x248620, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0256.541] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0x248520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0256.541] CoTaskMemAlloc (cb=0x20c) returned 0x4b5580
	[0256.541] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4b5580, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\mmc.exe" (normalized: "c:\\windows\\system32\\mmc.exe")) returned 0x1b
	[0256.541] CoTaskMemFree (pv=0x4b5580) 
	[0256.541] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.exe", nBufferLength=0x105, lpBuffer=0x248680, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.exe", lpFilePart=0x0) returned 0x1b
	[0256.542] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.542] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x248858 | out: TokenHandle=0x248858*=0x3d8) returned 1
	[0256.543] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.543] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x248858 | out: TokenHandle=0x248858*=0x3dc) returned 1
	[0256.545] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.545] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2485f8 | out: TokenHandle=0x2485f8*=0x3e0) returned 1
	[0256.545] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\mmc.config" (normalized: "c:\\windows\\system32\\mmc.config"), fInfoLevelId=0x0, lpFileInformation=0x2486a0 | out: lpFileInformation=0x2486a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0256.546] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0x2481f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0256.547] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\mmc.config" (normalized: "c:\\windows\\system32\\mmc.config"), fInfoLevelId=0x0, lpFileInformation=0x248650 | out: lpFileInformation=0x248650*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0256.548] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.548] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x248858 | out: TokenHandle=0x248858*=0x3e4) returned 1
	[0256.548] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.548] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x248858 | out: TokenHandle=0x248858*=0x3e8) returned 1
	[0256.694] lstrlenW (lpString="䅁") returned 1
	[0256.697] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.697] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2484d8 | out: TokenHandle=0x2484d8*=0x3ec) returned 1
	[0257.329] GetCurrentProcess () returned 0xffffffffffffffff
	[0257.329] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2484d8 | out: TokenHandle=0x2484d8*=0x3f0) returned 1
	[0257.577] SysStringByteLen (bstr="FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}") returned 0x52
	[0257.577] SysStringByteLen (bstr="FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}") returned 0x52
	[0257.964] lstrlenW (lpString="䅁") returned 1
	[0257.968] GetVersionExW (in: lpVersionInformation=0x249050*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x249050*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0257.975] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\MMC\\SnapIns\\FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24a108 | out: phkResult=0x24a108*=0x3f4) returned 0x0
	[0258.042] RegQueryValueExW (in: hKey=0x3f4, lpValueName="FolderBitmapsColorMask", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x4, lpData=0x0, lpcbData=0x24a088*=0x4) returned 0x0
	[0258.043] RegQueryValueExW (in: hKey=0x3f4, lpValueName="FolderBitmapsColorMask", lpReserved=0x0, lpType=0x24a090, lpData=0x24a08c, lpcbData=0x24a088*=0x4 | out: lpType=0x24a090*=0x4, lpData=0x24a08c*=0xff00ff, lpcbData=0x24a088*=0x4) returned 0x0
	[0258.043] RegQueryValueExW (in: hKey=0x3f4, lpValueName="UseCustomHelp", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x0, lpData=0x0, lpcbData=0x24a088*=0x0) returned 0x2
	[0258.045] RegQueryValueExW (in: hKey=0x3f4, lpValueName="Type", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x1, lpData=0x0, lpcbData=0x24a088*=0x104) returned 0x0
	[0258.046] CoTaskMemAlloc (cb=0x108) returned 0x4c0150
	[0258.046] RegQueryValueExW (in: hKey=0x3f4, lpValueName="Type", lpReserved=0x0, lpType=0x24a05c, lpData=0x4c0150, lpcbData=0x24a058*=0x104 | out: lpType=0x24a05c*=0x1, lpData="Microsoft.EventViewer.SnapIn.EventViewerExtension, EventViewer, Version=6.1.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35", lpcbData=0x24a058*=0x104) returned 0x0
	[0258.046] CoTaskMemFree (pv=0x4c0150) 
	[0258.046] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x1, lpData=0x0, lpcbData=0x24a088*=0x2a) returned 0x0
	[0258.046] CoTaskMemAlloc (cb=0x2e) returned 0x3f55020
	[0258.046] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f55020, lpcbData=0x24a058*=0x2a | out: lpType=0x24a05c*=0x1, lpData="C:\\Windows\\system32\\", lpcbData=0x24a058*=0x2a) returned 0x0
	[0258.046] CoTaskMemFree (pv=0x3f55020) 
	[0258.046] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ConfigurationFile", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x0, lpData=0x0, lpcbData=0x24a088*=0x0) returned 0x2
	[0258.046] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DynamicBase", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x0, lpData=0x0, lpcbData=0x24a088*=0x0) returned 0x2
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="LicenseFile", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x0, lpData=0x0, lpcbData=0x24a088*=0x0) returned 0x2
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="PrivateBinPath", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x0, lpData=0x0, lpcbData=0x24a088*=0x0) returned 0x2
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="PrivateBinPathProbe", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x0, lpData=0x0, lpcbData=0x24a088*=0x0) returned 0x2
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ResourceModule", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x0, lpData=0x0, lpcbData=0x24a088*=0x0) returned 0x2
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="RootNodeType", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x0, lpData=0x0, lpcbData=0x24a088*=0x0) returned 0x2
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="NameString", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x1, lpData=0x0, lpcbData=0x24a088*=0x1a) returned 0x0
	[0258.047] CoTaskMemAlloc (cb=0x1e) returned 0x3f4f960
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="NameString", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f4f960, lpcbData=0x24a058*=0x1a | out: lpType=0x24a05c*=0x1, lpData="Event Viewer", lpcbData=0x24a058*=0x1a) returned 0x0
	[0258.047] CoTaskMemFree (pv=0x3f4f960) 
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="Description", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x1, lpData=0x0, lpcbData=0x24a088*=0x2e) returned 0x0
	[0258.047] CoTaskMemAlloc (cb=0x32) returned 0x3f55020
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="Description", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f55020, lpcbData=0x24a058*=0x2e | out: lpType=0x24a05c*=0x1, lpData="Event Viewer Extension", lpcbData=0x24a058*=0x2e) returned 0x0
	[0258.047] CoTaskMemFree (pv=0x3f55020) 
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="Provider", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x0, lpData=0x0, lpcbData=0x24a088*=0x0) returned 0x2
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ModuleName", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x1, lpData=0x0, lpcbData=0x24a088*=0x20) returned 0x0
	[0258.047] CoTaskMemAlloc (cb=0x24) returned 0x3f4f960
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ModuleName", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f4f960, lpcbData=0x24a058*=0x20 | out: lpType=0x24a05c*=0x1, lpData="EventViewer.dll", lpcbData=0x24a058*=0x20) returned 0x0
	[0258.047] CoTaskMemFree (pv=0x3f4f960) 
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="AssemblyName", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x1, lpData=0x0, lpcbData=0x24a088*=0x18) returned 0x0
	[0258.047] CoTaskMemAlloc (cb=0x1c) returned 0x3f4f960
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="AssemblyName", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f4f960, lpcbData=0x24a058*=0x18 | out: lpType=0x24a05c*=0x1, lpData="EventViewer", lpcbData=0x24a058*=0x18) returned 0x0
	[0258.047] CoTaskMemFree (pv=0x3f4f960) 
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="RuntimeVersion", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x1, lpData=0x0, lpcbData=0x24a088*=0x16) returned 0x0
	[0258.047] CoTaskMemAlloc (cb=0x1a) returned 0x3f4f960
	[0258.047] RegQueryValueExW (in: hKey=0x3f4, lpValueName="RuntimeVersion", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f4f960, lpcbData=0x24a058*=0x16 | out: lpType=0x24a05c*=0x1, lpData="v2.0.40607", lpcbData=0x24a058*=0x16) returned 0x0
	[0258.048] CoTaskMemFree (pv=0x3f4f960) 
	[0258.048] RegQueryValueExW (in: hKey=0x3f4, lpValueName="FxVersion", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x1, lpData=0x0, lpcbData=0x24a088*=0x10) returned 0x0
	[0258.048] CoTaskMemAlloc (cb=0x14) returned 0x3f61f50
	[0258.048] RegQueryValueExW (in: hKey=0x3f4, lpValueName="FxVersion", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f61f50, lpcbData=0x24a058*=0x10 | out: lpType=0x24a05c*=0x1, lpData="2.0.0.2", lpcbData=0x24a058*=0x10) returned 0x0
	[0258.048] CoTaskMemFree (pv=0x3f61f50) 
	[0258.048] RegQueryValueExW (in: hKey=0x3f4, lpValueName="About", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x1, lpData=0x0, lpcbData=0x24a088*=0x4e) returned 0x0
	[0258.048] CoTaskMemAlloc (cb=0x52) returned 0x3f4db90
	[0258.048] RegQueryValueExW (in: hKey=0x3f4, lpValueName="About", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f4db90, lpcbData=0x24a058*=0x4e | out: lpType=0x24a05c*=0x1, lpData="{00000000-0000-0000-0000-000000000000}", lpcbData=0x24a058*=0x4e) returned 0x0
	[0258.048] CoTaskMemFree (pv=0x3f4db90) 
	[0258.048] RegQueryValueExW (in: hKey=0x3f4, lpValueName="NameStringIndirect", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x2, lpData=0x0, lpcbData=0x24a088*=0x58) returned 0x0
	[0258.118] CoTaskMemAlloc (cb=0x5c) returned 0x3f588a0
	[0258.118] RegQueryValueExW (in: hKey=0x3f4, lpValueName="NameStringIndirect", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f588a0, lpcbData=0x24a058*=0x58 | out: lpType=0x24a05c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-101", lpcbData=0x24a058*=0x58) returned 0x0
	[0258.118] CoTaskMemFree (pv=0x3f588a0) 
	[0258.202] CoTaskMemAlloc (cb=0xcc) returned 0x3f524c0
	[0258.202] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-101", lpDst=0x3f524c0, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-101") returned 0x2c
	[0258.202] CoTaskMemFree (pv=0x3f524c0) 
	[0258.203] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DescriptionStringIndirect", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x2, lpData=0x0, lpcbData=0x24a088*=0x58) returned 0x0
	[0258.203] CoTaskMemAlloc (cb=0x5c) returned 0x3f588a0
	[0258.203] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DescriptionStringIndirect", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f588a0, lpcbData=0x24a058*=0x58 | out: lpType=0x24a05c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-102", lpcbData=0x24a058*=0x58) returned 0x0
	[0258.203] CoTaskMemFree (pv=0x3f588a0) 
	[0258.203] CoTaskMemAlloc (cb=0xcc) returned 0x3f524c0
	[0258.203] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-102", lpDst=0x3f524c0, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-102") returned 0x2c
	[0258.203] CoTaskMemFree (pv=0x3f524c0) 
	[0258.203] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ProviderStringIndirect", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x2, lpData=0x0, lpcbData=0x24a088*=0x58) returned 0x0
	[0258.203] CoTaskMemAlloc (cb=0x5c) returned 0x3f588a0
	[0258.203] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ProviderStringIndirect", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f588a0, lpcbData=0x24a058*=0x58 | out: lpType=0x24a05c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-103", lpcbData=0x24a058*=0x58) returned 0x0
	[0258.203] CoTaskMemFree (pv=0x3f588a0) 
	[0258.203] CoTaskMemAlloc (cb=0xcc) returned 0x3f524c0
	[0258.203] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-103", lpDst=0x3f524c0, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-103") returned 0x2c
	[0258.204] CoTaskMemFree (pv=0x3f524c0) 
	[0258.204] RegQueryValueExW (in: hKey=0x3f4, lpValueName="VersionStringIndirect", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x2, lpData=0x0, lpcbData=0x24a088*=0x58) returned 0x0
	[0258.204] CoTaskMemAlloc (cb=0x5c) returned 0x3f588a0
	[0258.204] RegQueryValueExW (in: hKey=0x3f4, lpValueName="VersionStringIndirect", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f588a0, lpcbData=0x24a058*=0x58 | out: lpType=0x24a05c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-104", lpcbData=0x24a058*=0x58) returned 0x0
	[0258.204] CoTaskMemFree (pv=0x3f588a0) 
	[0258.204] CoTaskMemAlloc (cb=0xcc) returned 0x3f524c0
	[0258.204] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-104", lpDst=0x3f524c0, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-104") returned 0x2c
	[0258.204] CoTaskMemFree (pv=0x3f524c0) 
	[0258.204] RegQueryValueExW (in: hKey=0x3f4, lpValueName="IconIndirect", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x2, lpData=0x0, lpcbData=0x24a088*=0x58) returned 0x0
	[0258.204] CoTaskMemAlloc (cb=0x5c) returned 0x3f588a0
	[0258.204] RegQueryValueExW (in: hKey=0x3f4, lpValueName="IconIndirect", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f588a0, lpcbData=0x24a058*=0x58 | out: lpType=0x24a05c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-500", lpcbData=0x24a058*=0x58) returned 0x0
	[0258.204] CoTaskMemFree (pv=0x3f588a0) 
	[0258.204] CoTaskMemAlloc (cb=0xcc) returned 0x3f524c0
	[0258.204] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-500", lpDst=0x3f524c0, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-500") returned 0x2c
	[0258.204] CoTaskMemFree (pv=0x3f524c0) 
	[0258.204] RegQueryValueExW (in: hKey=0x3f4, lpValueName="LargeFolderBitmapIndirect", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x2, lpData=0x0, lpcbData=0x24a088*=0x58) returned 0x0
	[0258.204] CoTaskMemAlloc (cb=0x5c) returned 0x3f588a0
	[0258.204] RegQueryValueExW (in: hKey=0x3f4, lpValueName="LargeFolderBitmapIndirect", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f588a0, lpcbData=0x24a058*=0x58 | out: lpType=0x24a05c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-501", lpcbData=0x24a058*=0x58) returned 0x0
	[0258.204] CoTaskMemFree (pv=0x3f588a0) 
	[0258.204] CoTaskMemAlloc (cb=0xcc) returned 0x3f524c0
	[0258.204] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-501", lpDst=0x3f524c0, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-501") returned 0x2c
	[0258.204] CoTaskMemFree (pv=0x3f524c0) 
	[0258.204] RegQueryValueExW (in: hKey=0x3f4, lpValueName="SmallFolderBitmapIndirect", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x2, lpData=0x0, lpcbData=0x24a088*=0x58) returned 0x0
	[0258.205] CoTaskMemAlloc (cb=0x5c) returned 0x3f588a0
	[0258.205] RegQueryValueExW (in: hKey=0x3f4, lpValueName="SmallFolderBitmapIndirect", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f588a0, lpcbData=0x24a058*=0x58 | out: lpType=0x24a05c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-502", lpcbData=0x24a058*=0x58) returned 0x0
	[0258.205] CoTaskMemFree (pv=0x3f588a0) 
	[0258.205] CoTaskMemAlloc (cb=0xcc) returned 0x3f524c0
	[0258.205] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-502", lpDst=0x3f524c0, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-502") returned 0x2c
	[0258.205] CoTaskMemFree (pv=0x3f524c0) 
	[0258.205] RegQueryValueExW (in: hKey=0x3f4, lpValueName="SmallSelectedFolderBitmapIndirect", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x2, lpData=0x0, lpcbData=0x24a088*=0x58) returned 0x0
	[0258.205] CoTaskMemAlloc (cb=0x5c) returned 0x3f588a0
	[0258.205] RegQueryValueExW (in: hKey=0x3f4, lpValueName="SmallSelectedFolderBitmapIndirect", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f588a0, lpcbData=0x24a058*=0x58 | out: lpType=0x24a05c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-503", lpcbData=0x24a058*=0x58) returned 0x0
	[0258.205] CoTaskMemFree (pv=0x3f588a0) 
	[0258.205] CoTaskMemAlloc (cb=0xcc) returned 0x3f524c0
	[0258.205] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-503", lpDst=0x3f524c0, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-503") returned 0x2c
	[0258.205] CoTaskMemFree (pv=0x3f524c0) 
	[0258.205] RegQueryValueExW (in: hKey=0x3f4, lpValueName="HelpTopic", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x1, lpData=0x0, lpcbData=0x24a088*=0x40) returned 0x0
	[0258.205] CoTaskMemAlloc (cb=0x44) returned 0x3f66710
	[0258.205] RegQueryValueExW (in: hKey=0x3f4, lpValueName="HelpTopic", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f66710, lpcbData=0x24a058*=0x40 | out: lpType=0x24a05c*=0x1, lpData="C:\\Windows\\Help\\eventviewer.chm", lpcbData=0x24a058*=0x40) returned 0x0
	[0258.205] CoTaskMemFree (pv=0x3f66710) 
	[0258.205] RegQueryValueExW (in: hKey=0x3f4, lpValueName="LinkedHelpTopics", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x1, lpData=0x0, lpcbData=0x24a088*=0x40) returned 0x0
	[0258.205] CoTaskMemAlloc (cb=0x44) returned 0x3f66710
	[0258.205] RegQueryValueExW (in: hKey=0x3f4, lpValueName="LinkedHelpTopics", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f66710, lpcbData=0x24a058*=0x40 | out: lpType=0x24a05c*=0x1, lpData="C:\\Windows\\Help\\eventviewer.chm", lpcbData=0x24a058*=0x40) returned 0x0
	[0258.205] CoTaskMemFree (pv=0x3f66710) 
	[0258.206] RegOpenKeyExW (in: hKey=0x3f4, lpSubKey="Standalone", ulOptions=0x0, samDesired=0x20019, phkResult=0x24a0a8 | out: phkResult=0x24a0a8*=0x0) returned 0x2
	[0258.206] RegOpenKeyExW (in: hKey=0x3f4, lpSubKey="Extension", ulOptions=0x0, samDesired=0x20019, phkResult=0x24a0a8 | out: phkResult=0x24a0a8*=0x3f8) returned 0x0
	[0258.206] RegQueryValueExW (in: hKey=0x3f8, lpValueName=0x0, lpReserved=0x0, lpType=0x24a02c, lpData=0x0, lpcbData=0x24a028*=0x0 | out: lpType=0x24a02c*=0x1, lpData=0x0, lpcbData=0x24a028*=0x14) returned 0x0
	[0258.206] CoTaskMemAlloc (cb=0x18) returned 0x3f61f50
	[0258.206] RegQueryValueExW (in: hKey=0x3f8, lpValueName=0x0, lpReserved=0x0, lpType=0x249ffc, lpData=0x3f61f50, lpcbData=0x249ff8*=0x14 | out: lpType=0x249ffc*=0x1, lpData="Namespace", lpcbData=0x249ff8*=0x14) returned 0x0
	[0258.206] CoTaskMemFree (pv=0x3f61f50) 
	[0258.209] RegCloseKey (hKey=0x3f8) returned 0x0
	[0258.209] RegOpenKeyExW (in: hKey=0x3f4, lpSubKey="NodeTypes", ulOptions=0x0, samDesired=0x20019, phkResult=0x24a108 | out: phkResult=0x24a108*=0x3f8) returned 0x0
	[0258.213] RegQueryInfoKeyW (in: hKey=0x3f8, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x24a01c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24a018, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x24a01c*=0x1, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x24a018*=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0258.213] CoTaskMemFree (pv=0x0) 
	[0258.214] CoTaskMemAlloc (cb=0x204) returned 0x3f24ea0
	[0258.214] RegEnumKeyExW (in: hKey=0x3f8, dwIndex=0x0, lpName=0x3f24ea0, lpcchName=0x24a0a8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{33F2C345-BF11-41b6-90DA-4FB4963EA4E2}", lpcchName=0x24a0a8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0258.214] CoTaskMemFree (pv=0x3f24ea0) 
	[0258.214] CoTaskMemFree (pv=0x0) 
	[0258.214] RegOpenKeyExW (in: hKey=0x3f8, lpSubKey="{33F2C345-BF11-41b6-90DA-4FB4963EA4E2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x24a108 | out: phkResult=0x24a108*=0x3fc) returned 0x0
	[0258.215] RegQueryValueExW (in: hKey=0x3fc, lpValueName="", lpReserved=0x0, lpType=0x24a08c, lpData=0x0, lpcbData=0x24a088*=0x0 | out: lpType=0x24a08c*=0x1, lpData=0x0, lpcbData=0x24a088*=0x32) returned 0x0
	[0258.215] CoTaskMemAlloc (cb=0x36) returned 0x3f55020
	[0258.215] RegQueryValueExW (in: hKey=0x3fc, lpValueName="", lpReserved=0x0, lpType=0x24a05c, lpData=0x3f55020, lpcbData=0x24a058*=0x32 | out: lpType=0x24a05c*=0x1, lpData="Classic Viewer Root Node", lpcbData=0x24a058*=0x32) returned 0x0
	[0258.215] CoTaskMemFree (pv=0x3f55020) 
	[0258.215] RegCloseKey (hKey=0x3fc) returned 0x0
	[0258.215] RegCloseKey (hKey=0x3f8) returned 0x0
	[0258.215] RegCloseKey (hKey=0x3f4) returned 0x0
	[0265.154] GetDC (hWnd=0x0) returned 0x8010666
	[0265.295] GetCurrentProcessId () returned 0x5e0
	[0265.723] FindAtomW (lpString="GDI+Atom_1504_1") returned 0x0
	[0265.725] AddAtomW (lpString="GDI+Atom_1504_1") returned 0xc072
	[0265.732] GdiplusStartup (in: token=0x247ec8, input=0x247ee0, output=0x247eb8 | out: token=0x247ec8, output=0x247eb8) returned 0x0
	[0265.772] GetDeviceCaps (hdc=0x8010666, index=12) returned 32
	[0265.772] GetDeviceCaps (hdc=0x8010666, index=14) returned 1
	[0265.772] ReleaseDC (hWnd=0x0, hDC=0x8010666) returned 1
	[0265.801] CreateIconFromResourceEx (presbits=0x46a0348, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xa0127
	[0265.920] CreateIconFromResourceEx (presbits=0x46a6cb0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x201cd
	[0266.333] GetParent (hWnd=0xa016e) returned 0x0
	[0266.333] GetActiveWindow () returned 0x0
	[0266.333] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0266.333] GetParent (hWnd=0xa016e) returned 0x0
	[0266.333] GetDesktopWindow () returned 0x10010
	[0266.333] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0266.333] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0266.333] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0266.333] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0266.333] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0266.333] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0266.333] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0266.334] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0266.334] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0266.334] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0266.334] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0266.334] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0266.334] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0266.334] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0266.334] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0266.334] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0266.334] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0266.334] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0266.334] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0266.334] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0266.334] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.334] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.334] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0266.335] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0266.335] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0266.335] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.335] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.335] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0266.335] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0266.335] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0266.335] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.335] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.335] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0266.335] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0266.335] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0266.335] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.335] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.335] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0266.336] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0266.336] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0266.336] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.336] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.336] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0266.336] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0266.336] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0266.336] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.336] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.336] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0266.336] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0266.336] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0266.336] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.336] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.336] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0266.337] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0266.337] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0266.337] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.337] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.337] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0266.337] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0266.337] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0266.337] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0266.337] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0266.337] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0266.337] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0266.337] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.337] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.337] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0266.338] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0266.338] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0266.338] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0266.338] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0266.338] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.338] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.338] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0266.338] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0266.338] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0266.338] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.338] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.338] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0266.338] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.338] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.338] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0266.339] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0266.339] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0266.339] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0266.339] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0266.339] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0266.339] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0266.339] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0266.339] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0266.339] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0266.339] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0266.339] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0266.339] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0266.339] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0266.339] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0266.339] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0266.339] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0266.339] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0266.339] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0266.340] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0266.340] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0266.340] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0266.340] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0266.340] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0266.340] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0266.340] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0266.340] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0266.340] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0266.340] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0266.340] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0266.340] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0266.340] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0266.340] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0266.340] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.341] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.341] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0266.341] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0266.341] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0266.341] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0266.341] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0266.341] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0266.341] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0266.341] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0266.341] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0266.341] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0266.341] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0266.341] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0266.341] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0266.341] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0266.341] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0266.341] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0266.342] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0266.342] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0266.342] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0266.342] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0266.342] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0266.342] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0266.342] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0266.342] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0266.342] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0266.342] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0266.342] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0266.342] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0266.342] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0266.342] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0266.342] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0266.342] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0266.343] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0266.343] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0266.343] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0266.343] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0266.343] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0266.343] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0266.343] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0266.343] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0266.343] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0266.343] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0266.343] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0266.343] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0266.343] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0266.343] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0266.343] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0266.343] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0266.343] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0266.344] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0266.344] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0266.344] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.344] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.344] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0266.344] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0266.344] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0266.344] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0266.344] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0266.344] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0266.344] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.344] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.344] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0266.344] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0266.344] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0266.344] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0266.345] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0266.345] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0266.345] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.345] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.345] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0266.345] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0266.345] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0266.345] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.345] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.345] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0266.345] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.345] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.345] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0266.345] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0266.345] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0266.345] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0266.346] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0266.346] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0266.346] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0266.346] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0266.346] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0266.346] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0266.346] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0266.346] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0266.346] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0266.346] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0266.346] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0266.346] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0266.346] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0266.346] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0266.346] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0266.347] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x10298
	[0266.347] GetWindowLongW (hWnd=0x10298, nIndex=-16) returned -2080374784
	[0266.347] GetWindow (hWnd=0x10298, uCmd=0x4) returned 0x0
	[0266.347] GetWindow (hWnd=0x10298, uCmd=0x2) returned 0x1029a
	[0266.347] GetWindowLongW (hWnd=0x1029a, nIndex=-16) returned -1946157056
	[0266.347] GetWindow (hWnd=0x1029a, uCmd=0x4) returned 0x10298
	[0266.347] GetWindowLongW (hWnd=0x10298, nIndex=-16) returned -2080374784
	[0266.347] GetWindow (hWnd=0x10298, uCmd=0x4) returned 0x0
	[0266.347] GetWindow (hWnd=0x1029a, uCmd=0x2) returned 0x10294
	[0266.347] GetWindowLongW (hWnd=0x10294, nIndex=-16) returned -2080374784
	[0266.347] GetWindow (hWnd=0x10294, uCmd=0x4) returned 0x0
	[0266.347] GetWindow (hWnd=0x10294, uCmd=0x2) returned 0x10296
	[0266.347] GetWindowLongW (hWnd=0x10296, nIndex=-16) returned -1946157056
	[0266.347] GetWindow (hWnd=0x10296, uCmd=0x4) returned 0x10294
	[0266.347] GetWindowLongW (hWnd=0x10294, nIndex=-16) returned -2080374784
	[0266.347] GetWindow (hWnd=0x10294, uCmd=0x4) returned 0x0
	[0266.348] GetWindow (hWnd=0x10296, uCmd=0x2) returned 0xa0024
	[0266.348] GetWindowLongW (hWnd=0xa0024, nIndex=-16) returned -2080374784
	[0266.348] GetWindow (hWnd=0xa0024, uCmd=0x4) returned 0x0
	[0266.348] GetWindow (hWnd=0xa0024, uCmd=0x2) returned 0x10292
	[0266.348] GetWindowLongW (hWnd=0x10292, nIndex=-16) returned -1946157056
	[0266.348] GetWindow (hWnd=0x10292, uCmd=0x4) returned 0xa0024
	[0266.348] GetWindowLongW (hWnd=0xa0024, nIndex=-16) returned -2080374784
	[0266.348] GetWindow (hWnd=0xa0024, uCmd=0x4) returned 0x0
	[0266.348] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x20264
	[0266.348] GetWindowLongW (hWnd=0x20264, nIndex=-16) returned -2080374526
	[0266.348] GetWindow (hWnd=0x20264, uCmd=0x4) returned 0x0
	[0266.348] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0266.348] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned -2080374526
	[0266.348] GetWindow (hWnd=0x10238, uCmd=0x4) returned 0x0
	[0266.348] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0266.348] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned -2080374782
	[0266.348] GetWindow (hWnd=0x10236, uCmd=0x4) returned 0x3016a
	[0266.349] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0266.349] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0266.349] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0266.349] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned -2080374526
	[0266.349] GetWindow (hWnd=0x1022e, uCmd=0x4) returned 0x0
	[0266.349] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0266.349] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned -2080374782
	[0266.349] GetWindow (hWnd=0x10222, uCmd=0x4) returned 0x20164
	[0266.349] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0266.349] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0266.349] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0266.349] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned -2080374782
	[0266.349] GetWindow (hWnd=0x1021c, uCmd=0x4) returned 0xa016e
	[0266.349] SendMessageW (hWnd=0x1021c, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.349] GetPropW (hWnd=0x1021c, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0266.349] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x1021c, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.350] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0266.350] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0266.350] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0266.350] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0266.350] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0266.350] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0266.350] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0266.350] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0266.350] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0266.350] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0266.350] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0266.350] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0266.350] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0266.350] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0266.350] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0266.351] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0266.351] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0266.351] SendMessageW (hWnd=0x101ac, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.351] GetPropW (hWnd=0x101ac, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0266.351] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101ac, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.351] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0266.351] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0266.351] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0266.351] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0266.351] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0266.351] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0266.351] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0266.351] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0266.351] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0266.351] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0266.351] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0266.352] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0266.352] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0266.352] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0266.352] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0266.352] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0266.352] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0266.352] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0266.352] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0266.352] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0266.352] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0266.352] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0266.352] SendMessageW (hWnd=0xa016e, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.353] DefFrameProcW (hWnd=0xa016e, hWndMDIClient=0x50168, uMsg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.353] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0266.353] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0266.353] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0266.353] SendMessageW (hWnd=0x20166, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.353] GetPropW (hWnd=0x20166, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0266.353] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20166, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.353] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0266.353] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0266.353] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0266.353] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0266.353] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0266.353] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0266.353] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0266.354] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0266.354] GetParent (hWnd=0x10066) returned 0x0
	[0266.354] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0266.354] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0266.354] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0266.354] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0266.354] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0266.354] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0266.354] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0266.354] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0266.354] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0266.354] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0266.354] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0266.354] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0266.354] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0266.354] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0266.354] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0266.354] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0266.354] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0266.355] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0266.355] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0266.355] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0266.355] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0266.355] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0266.355] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0266.355] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0266.355] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0266.355] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0266.355] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0266.355] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0266.355] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0266.355] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0266.355] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0266.355] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0266.355] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0266.355] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0266.355] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0266.355] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0266.355] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0266.355] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0266.355] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0266.355] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0266.355] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0266.355] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0266.355] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0266.356] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0266.356] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0266.356] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0266.601] CoGetContextToken (in: pToken=0x249a60 | out: pToken=0x249a60) returned 0x0
	[0266.738] CoGetContextToken (in: pToken=0x2499f0 | out: pToken=0x2499f0) returned 0x0
	[0266.738] CObjectContext::QueryInterface () returned 0x0
	[0266.739] CObjectContext::GetCurrentApartmentType () returned 0x0
	[0266.739] Release () returned 0x0
	[0266.739] CoGetObjectContext (in: riid=0x7fef300d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3f72168 | out: ppv=0x3f72168*=0x45f6c0) returned 0x0
	[0266.753] CoGetContextToken (in: pToken=0x249a30 | out: pToken=0x249a30) returned 0x0
	[0266.754] CoGetContextToken (in: pToken=0x24a010 | out: pToken=0x24a010) returned 0x0
	[0266.754] CoGetContextToken (in: pToken=0x249f50 | out: pToken=0x249f50) returned 0x0
	[0266.754] CoGetContextToken (in: pToken=0x24a010 | out: pToken=0x24a010) returned 0x0
	[0266.754] CoGetContextToken (in: pToken=0x249f50 | out: pToken=0x249f50) returned 0x0
	[0267.042] CoGetContextToken (in: pToken=0x24a150 | out: pToken=0x24a150) returned 0x0
	[0267.042] CoGetContextToken (in: pToken=0x24a090 | out: pToken=0x24a090) returned 0x0

Thread:
	id = 112
	os_tid = 0x550


Thread:
	id = 123
	os_tid = 0x7cc


Thread:
	id = 126
	os_tid = 0x7c0


Thread:
	id = 129
	os_tid = 0x728


Thread:
	id = 130
	os_tid = 0x6f4


Thread:
	id = 138
	os_tid = 0x310


Thread:
	id = 141
	os_tid = 0x308


Thread:
	id = 144
	os_tid = 0x678

	[0248.297] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0

Thread:
	id = 148
	os_tid = 0x734


Process:
	id = "22"
	image_name = "mmc.exe"
	filename = "c:\\windows\\system32\\mmc.exe"
	page_root = "0x1a264000"
	os_pid = "0x53c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "14"
	os_parent_pid = "0x508"
	cmd_line = "\"C:\\Windows\\system32\\mmc.exe\" \"C:\\Windows\\System32\\compmgmt.msc\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "64"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 110
	os_tid = 0x7b8

	[0226.423] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xbf260 | out: lpSystemTimeAsFileTime=0xbf260*(dwLowDateTime=0x6609b480, dwHighDateTime=0x1d57294)) 
	[0226.423] GetCurrentProcessId () returned 0x53c
	[0226.423] GetCurrentThreadId () returned 0x7b8
	[0226.423] GetTickCount () returned 0x114dc3c
	[0226.423] RtlQueryPerformanceCounter (in: lpPerformanceCount=0xbf268 | out: lpPerformanceCount=0xbf268*=19210819172) returned 1
	[0226.427] LoadLibraryA (lpLibFileName="MSVCRT.DLL") returned 0x7feff720000
	[0226.435] GetVersion () returned 0x1db10106
	[0226.436] SetErrorMode (uMode=0x0) returned 0x0
	[0226.436] SetErrorMode (uMode=0x8001) returned 0x0
	[0226.437] LocalAlloc (uFlags=0x0, uBytes=0x2000) returned 0x27ea70
	[0226.437] LocalFree (hMem=0x27ea70) returned 0x0
	[0226.437] GetVersion () returned 0x1db10106
	[0226.439] GlobalLock (hMem=0x1ca0008) returned 0x27ea70
	[0226.440] LocalAlloc (uFlags=0x40, uBytes=0x340) returned 0x27ec90
	[0226.440] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x279490
	[0226.440] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x275ed0
	[0226.440] malloc (_Size=0x100) returned 0x1e57b0
	[0226.440] __dllonexit () returned 0x7fef845621c
	[0226.440] __dllonexit () returned 0x7fef84566e0
	[0226.441] __dllonexit () returned 0x7fef84572b8
	[0226.441] __dllonexit () returned 0x7fef84587cc
	[0226.441] __dllonexit () returned 0x7fef8458d64
	[0226.441] __dllonexit () returned 0x7fef8458db4
	[0226.441] __dllonexit () returned 0x7fef8458e70
	[0226.442] __dllonexit () returned 0x7fef845a308
	[0226.442] __dllonexit () returned 0x7fef8458810
	[0226.442] __dllonexit () returned 0x7fef8467598
	[0226.442] __dllonexit () returned 0x7fef8458880
	[0226.443] __dllonexit () returned 0x7fef845a170
	[0226.443] __dllonexit () returned 0x7fef845a280
	[0226.443] __dllonexit () returned 0x7fef845ad44
	[0226.443] __dllonexit () returned 0x7fef845bc30
	[0226.443] __dllonexit () returned 0x7fef845bc80
	[0226.443] __dllonexit () returned 0x7fef845c338
	[0226.443] __dllonexit () returned 0x7fef845d030
	[0226.443] __dllonexit () returned 0x7fef84559cc
	[0226.443] __dllonexit () returned 0x7fef84559f0
	[0226.443] __dllonexit () returned 0x7fef8455a1c
	[0226.444] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc105
	[0226.445] __dllonexit () returned 0x7fef8467568
	[0226.446] __dllonexit () returned 0x7fef8467574
	[0226.446] __dllonexit () returned 0x7fef8467580
	[0226.446] __dllonexit () returned 0x7fef846758c
	[0226.446] GetVersion () returned 0x1db10106
	[0226.446] GetVersion () returned 0x1db10106
	[0226.446] GetVersion () returned 0x1db10106
	[0226.446] __dllonexit () returned 0x7fef83ba15c
	[0226.446] __dllonexit () returned 0x7fef83c6610
	[0226.446] __dllonexit () returned 0x7fef8458910
	[0226.446] __dllonexit () returned 0x7fef8458b90
	[0226.446] __dllonexit () returned 0x7fef8458bb4
	[0226.446] __dllonexit () returned 0x7fef83d6ae0
	[0226.446] GetVersion () returned 0x1db10106
	[0226.447] GetProcessVersion (ProcessId=0x0) returned 0x60001
	[0226.447] GetSystemMetrics (nIndex=11) returned 32
	[0226.448] GetSystemMetrics (nIndex=12) returned 32
	[0226.448] GetSystemMetrics (nIndex=2) returned 17
	[0226.448] GetSystemMetrics (nIndex=3) returned 17
	[0226.448] GetDC (hWnd=0x0) returned 0x8010666
	[0226.448] GetDeviceCaps (hdc=0x8010666, index=88) returned 96
	[0226.448] GetDeviceCaps (hdc=0x8010666, index=90) returned 96
	[0226.448] ReleaseDC (hWnd=0x0, hDC=0x8010666) returned 1
	[0226.448] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0226.448] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0226.448] GetSysColor (nIndex=20) returned 0xffffff
	[0226.448] GetSysColor (nIndex=18) returned 0x0
	[0226.448] GetSysColor (nIndex=6) returned 0x646464
	[0226.448] GetSysColorBrush (nIndex=15) returned 0x1100059
	[0226.448] GetSysColorBrush (nIndex=6) returned 0x1100061
	[0226.448] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007
	[0226.448] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0226.448] __dllonexit () returned 0x7fef8458f84
	[0226.448] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc106
	[0226.449] __dllonexit () returned 0x7fef83e3990
	[0226.450] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004
	[0226.644] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003
	[0226.644] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002
	[0226.644] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a
	[0226.644] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b
	[0226.644] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d
	[0226.644] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e
	[0226.644] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f
	[0226.644] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006
	[0226.644] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007
	[0226.644] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc0ba
	[0226.644] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc0c0
	[0226.645] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc106
	[0226.645] __dllonexit () returned 0x7fef84675a4
	[0226.645] __dllonexit () returned 0x7fef84675bc
	[0226.645] __dllonexit () returned 0x7fef84675c8
	[0226.645] __dllonexit () returned 0x7fef84675d4
	[0226.645] __dllonexit () returned 0x7fef84675e0
	[0226.646] GetCursorPos (in: lpPoint=0x7fef84c26d8 | out: lpPoint=0x7fef84c26d8*(x=838, y=444)) returned 1
	[0226.646] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x27efe0
	[0226.646] LocalReAlloc (hMem=0x275ed0, uBytes=0x18, uFlags=0x2) returned 0x275ed0
	[0226.647] GetCurrentThread () returned 0xfffffffffffffffe
	[0226.647] GetCurrentThreadId () returned 0x7b8
	[0226.647] __dllonexit () returned 0x7fef845cfa4
	[0226.647] SetErrorMode (uMode=0x0) returned 0x8001
	[0226.647] SetErrorMode (uMode=0x8001) returned 0x0
	[0226.647] GetModuleFileNameW (in: hModule=0x7fef83a0000, lpFilename=0xbe950, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\MFC42u.dll" (normalized: "c:\\windows\\system32\\mfc42u.dll")) returned 0x1e
	[0226.647] wcscpy_s (in: _Destination=0xbeb60, _SizeInWords=0x104, _Source="MFC42u" | out: _Destination="MFC42u") returned 0x0
	[0226.758] FindResourceW (hModule=0x7fef83a0000, lpName=0xe01, lpType=0x6) returned 0x1a09b0
	[0227.525] LoadStringW (in: hInstance=0x7fef83a0000, uID=0xe000, lpBuffer=0xbed70, cchBufferMax=256 | out: lpBuffer="") returned 0x0
	[0227.526] wcscpy_s (in: _Destination=0xbe984, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0227.526] wcscat_s (in: _Destination="MFC42u", _SizeInWords=0x104, _Source=".INI" | out: _Destination="MFC42u.INI") returned 0x0
	[0227.530] malloc (_Size=0x80) returned 0x1e59c0
	[0227.530] LocalAlloc (uFlags=0x40, uBytes=0x2100) returned 0x27f0f0
	[0227.530] GetSystemDirectoryA (in: lpBuffer=0xbeff0, uSize=0x112 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0227.530] strcat_s (in: _Destination="C:\\Windows\\system32", _SizeInBytes=0x112, _Source="\\MFC42" | out: _Destination="C:\\Windows\\system32\\MFC42") returned 0x0
	[0227.530] strcat_s (in: _Destination="C:\\Windows\\system32\\MFC42", _SizeInBytes=0x112, _Source="LOC" | out: _Destination="C:\\Windows\\system32\\MFC42LOC") returned 0x0
	[0227.530] strcat_s (in: _Destination="C:\\Windows\\system32\\MFC42LOC", _SizeInBytes=0x112, _Source=".DLL" | out: _Destination="C:\\Windows\\system32\\MFC42LOC.DLL") returned 0x0
	[0227.530] LoadLibraryExA (lpLibFileName="C:\\Windows\\system32\\MFC42LOC.DLL", hFile=0x0, dwFlags=0x2) returned 0x0
	[0227.559] malloc (_Size=0x400) returned 0x1e5fa0
	[0227.562] malloc (_Size=0x80) returned 0x1e5b60
	[0227.567] GetCursorPos (in: lpPoint=0xff872a98 | out: lpPoint=0xff872a98*(x=838, y=444)) returned 1
	[0227.567] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2878a0
	[0227.567] LocalReAlloc (hMem=0x275ed0, uBytes=0x20, uFlags=0x2) returned 0x275ed0
	[0227.567] GetCurrentThread () returned 0xfffffffffffffffe
	[0227.567] GetCurrentThreadId () returned 0x7b8
	[0227.567] malloc (_Size=0x18) returned 0x1e7b20
	[0227.568] malloc (_Size=0x18) returned 0x1e7b40
	[0227.568] malloc (_Size=0x18) returned 0x1e7b60
	[0227.677] SetErrorMode (uMode=0x0) returned 0x8001
	[0227.678] SetErrorMode (uMode=0x8001) returned 0x0
	[0227.678] GetModuleFileNameW (in: hModule=0xff6d0000, lpFilename=0xbf700, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\mmc.exe" (normalized: "c:\\windows\\system32\\mmc.exe")) returned 0x1b
	[0227.678] wcscpy_s (in: _Destination=0xbf910, _SizeInWords=0x104, _Source="mmc" | out: _Destination="mmc") returned 0x0
	[0227.678] FindResourceW (hModule=0xff6d0000, lpName=0xe01, lpType=0x6) returned 0x0
	[0227.678] FindResourceW (hModule=0x7fef8280000, lpName=0xe01, lpType=0x6) returned 0x1d0bf0
	[0227.678] LoadStringW (in: hInstance=0x7fef8280000, uID=0xe000, lpBuffer=0xbfb20, cchBufferMax=256 | out: lpBuffer="Microsoft Management Console") returned 0x1c
	[0227.682] wcscpy_s (in: _Destination=0xbf72e, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0227.682] wcscat_s (in: _Destination="mmc", _SizeInWords=0x104, _Source=".INI" | out: _Destination="mmc.INI") returned 0x0
	[0227.683] GetCurrentThreadId () returned 0x7b8
	[0227.683] SetWindowsHookExW (idHook=-1, lpfn=0x7fef83ecc6c, hmod=0x0, dwThreadId=0x7b8) returned 0x110143
	[0229.326] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0229.326] malloc (_Size=0x4e) returned 0x1e6ec0
	[0229.326] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0229.328] free (_Block=0x0) 
	[0229.328] free (_Block=0x1e7c30) 
	[0229.328] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0x4) returned 0x1506f8
	[0229.329] malloc (_Size=0x88) returned 0x1ea3d0
	[0229.342] malloc (_Size=0x88) returned 0x1ea460
	[0229.342] malloc (_Size=0x100) returned 0x1e80c0
	[0229.342] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0x9) returned 0x150818
	[0229.342] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0230.331] malloc (_Size=0x400) returned 0x501200
	[0230.486] GetCursorPos (in: lpPoint=0x7fef7fde498 | out: lpPoint=0x7fef7fde498*(x=838, y=444)) returned 1
	[0230.486] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e4300
	[0230.486] LocalReAlloc (hMem=0x275ed0, uBytes=0x28, uFlags=0x2) returned 0x2fde30
	[0230.486] GetCurrentThread () returned 0xfffffffffffffffe
	[0230.486] GetCurrentThreadId () returned 0x7b8
	[0230.486] malloc (_Size=0x80) returned 0x4ff480
	[0230.487] SetErrorMode (uMode=0x0) returned 0x8001
	[0230.487] SetErrorMode (uMode=0x8001) returned 0x0
	[0230.487] GetModuleFileNameW (in: hModule=0x7fef7fc0000, lpFilename=0xbcc90, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\mycomput.dll" (normalized: "c:\\windows\\system32\\mycomput.dll")) returned 0x20
	[0230.487] wcscpy_s (in: _Destination=0xbcea0, _SizeInWords=0x104, _Source="mycomput" | out: _Destination="mycomput") returned 0x0
	[0230.487] FindResourceW (hModule=0x7fef7fc0000, lpName=0xe01, lpType=0x6) returned 0x0
	[0230.487] FindResourceW (hModule=0x7fef83a0000, lpName=0xe01, lpType=0x6) returned 0x1a09b0
	[0230.487] LoadStringW (in: hInstance=0x7fef83a0000, uID=0xe000, lpBuffer=0xbd0b0, cchBufferMax=256 | out: lpBuffer="") returned 0x0
	[0230.487] wcscpy_s (in: _Destination=0xbccc8, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0230.487] wcscat_s (in: _Destination="mycomput", _SizeInWords=0x104, _Source=".INI" | out: _Destination="mycomput.INI") returned 0x0
	[0230.488] malloc (_Size=0x80) returned 0x4ff510
	[0230.488] malloc (_Size=0x40) returned 0x561640
	[0230.488] malloc (_Size=0x60) returned 0x5617d0
	[0230.489] malloc (_Size=0x2a) returned 0x4fe320
	[0230.489] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef7fd3d48, cbMultiByte=-1, lpWideCharStr=0x4fe32c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0230.490] free (_Block=0x4fe320) 
	[0231.233] GetCursorPos (in: lpPoint=0x7fef687a9f8 | out: lpPoint=0x7fef687a9f8*(x=838, y=444)) returned 1
	[0231.233] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2e4f90
	[0231.233] LocalReAlloc (hMem=0x2fde30, uBytes=0x30, uFlags=0x2) returned 0x2fde30
	[0231.233] GetCurrentThread () returned 0xfffffffffffffffe
	[0231.233] GetCurrentThreadId () returned 0x7b8
	[0231.234] malloc (_Size=0x80) returned 0x4ff5a0
	[0231.234] SetErrorMode (uMode=0x0) returned 0x8001
	[0231.234] SetErrorMode (uMode=0x8001) returned 0x0
	[0231.234] GetModuleFileNameW (in: hModule=0x7fef6820000, lpFilename=0xbcc90, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\filemgmt.dll" (normalized: "c:\\windows\\system32\\filemgmt.dll")) returned 0x20
	[0231.234] wcscpy_s (in: _Destination=0xbcea0, _SizeInWords=0x104, _Source="filemgmt" | out: _Destination="filemgmt") returned 0x0
	[0231.235] FindResourceW (hModule=0x7fef6820000, lpName=0xe01, lpType=0x6) returned 0x1de10b8
	[0231.235] LoadStringW (in: hInstance=0x7fef6820000, uID=0xe000, lpBuffer=0xbd0b0, cchBufferMax=256 | out: lpBuffer="Shared Folders") returned 0xe
	[0231.235] wcscpy_s (in: _Destination=0xbccc8, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0231.235] wcscat_s (in: _Destination="filemgmt", _SizeInWords=0x104, _Source=".INI" | out: _Destination="filemgmt.INI") returned 0x0
	[0231.237] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1de0db8
	[0231.237] LoadStringW (in: hInstance=0x7fef6820000, uID=0x69, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Started") returned 0x7
	[0231.237] lstrlenW (lpString="Started") returned 7
	[0231.237] malloc (_Size=0x1c) returned 0x5617b0
	[0231.237] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1de0db8
	[0231.237] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6c, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Starting") returned 0x8
	[0231.237] lstrlenW (lpString="Starting") returned 8
	[0231.237] malloc (_Size=0x1e) returned 0x5617e0
	[0231.238] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1de0db8
	[0231.238] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6a, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Stopped") returned 0x7
	[0231.238] lstrlenW (lpString="Stopped") returned 7
	[0231.238] malloc (_Size=0x1c) returned 0x561c10
	[0231.238] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1de0db8
	[0231.238] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6d, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Stopping") returned 0x8
	[0231.238] lstrlenW (lpString="Stopping") returned 8
	[0231.238] malloc (_Size=0x1e) returned 0x561c40
	[0231.238] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1de0db8
	[0231.238] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6b, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Paused") returned 0x6
	[0231.238] lstrlenW (lpString="Paused") returned 6
	[0231.238] malloc (_Size=0x1a) returned 0x561c70
	[0231.238] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1de0db8
	[0231.238] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6e, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Pausing") returned 0x7
	[0231.238] lstrlenW (lpString="Pausing") returned 7
	[0231.238] malloc (_Size=0x1c) returned 0x561ca0
	[0231.239] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1de0db8
	[0231.239] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6f, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Resuming") returned 0x8
	[0231.239] lstrlenW (lpString="Resuming") returned 8
	[0231.239] malloc (_Size=0x1e) returned 0x561cd0
	[0231.239] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1de0db8
	[0231.239] LoadStringW (in: hInstance=0x7fef6820000, uID=0x64, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Boot") returned 0x4
	[0231.239] lstrlenW (lpString="Boot") returned 4
	[0231.239] malloc (_Size=0x16) returned 0x561810
	[0231.239] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1de0db8
	[0231.239] LoadStringW (in: hInstance=0x7fef6820000, uID=0x65, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="System") returned 0x6
	[0231.239] lstrlenW (lpString="System") returned 6
	[0231.239] malloc (_Size=0x1a) returned 0x561d00
	[0231.239] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1de0db8
	[0231.239] LoadStringW (in: hInstance=0x7fef6820000, uID=0x66, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Automatic") returned 0x9
	[0231.239] lstrlenW (lpString="Automatic") returned 9
	[0231.239] malloc (_Size=0x20) returned 0x561d30
	[0231.240] FindResourceW (hModule=0x7fef6820000, lpName=0x3d, lpType=0x6) returned 0x1de0e98
	[0231.240] LoadStringW (in: hInstance=0x7fef6820000, uID=0x3cd, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Automatic (Delayed Start)") returned 0x19
	[0231.240] lstrlenW (lpString="Automatic (Delayed Start)") returned 25
	[0231.240] malloc (_Size=0x40) returned 0x561d60
	[0231.240] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1de0db8
	[0231.240] LoadStringW (in: hInstance=0x7fef6820000, uID=0x67, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Manual") returned 0x6
	[0231.240] lstrlenW (lpString="Manual") returned 6
	[0231.240] malloc (_Size=0x1a) returned 0x561db0
	[0231.240] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x1de0db8
	[0231.240] LoadStringW (in: hInstance=0x7fef6820000, uID=0x68, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Disabled") returned 0x8
	[0231.240] lstrlenW (lpString="Disabled") returned 8
	[0231.240] malloc (_Size=0x1e) returned 0x561de0
	[0231.240] FindResourceW (hModule=0x7fef6820000, lpName=0xb, lpType=0x6) returned 0x1de0df8
	[0231.240] LoadStringW (in: hInstance=0x7fef6820000, uID=0xa0, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Local System") returned 0xc
	[0231.240] lstrlenW (lpString="Local System") returned 12
	[0231.240] malloc (_Size=0x26) returned 0x561e10
	[0231.241] FindResourceW (hModule=0x7fef6820000, lpName=0xb, lpType=0x6) returned 0x1de0df8
	[0231.241] LoadStringW (in: hInstance=0x7fef6820000, uID=0xa1, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Local Service") returned 0xd
	[0231.241] lstrlenW (lpString="Local Service") returned 13
	[0231.241] malloc (_Size=0x28) returned 0x1eb000
	[0231.241] FindResourceW (hModule=0x7fef6820000, lpName=0xb, lpType=0x6) returned 0x1de0df8
	[0231.241] LoadStringW (in: hInstance=0x7fef6820000, uID=0xa2, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Network Service") returned 0xf
	[0231.241] lstrlenW (lpString="Network Service") returned 15
	[0231.241] malloc (_Size=0x2c) returned 0x4fe2e0
	[0231.241] FindResourceW (hModule=0x7fef6820000, lpName=0x8, lpType=0x6) returned 0x1de0dc8
	[0231.241] LoadStringW (in: hInstance=0x7fef6820000, uID=0x70, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="(Unknown)") returned 0x9
	[0231.241] lstrlenW (lpString="(Unknown)") returned 9
	[0231.241] malloc (_Size=0x20) returned 0x1eb030
	[0231.242] FindResourceW (hModule=0x7fef6820000, lpName=0x1, lpType=0x6) returned 0x1de0da8
	[0231.242] LoadStringW (in: hInstance=0x7fef6820000, uID=0x3, lpBuffer=0xbd070, cchBufferMax=256 | out: lpBuffer="Local Computer") returned 0xe
	[0231.242] lstrlenW (lpString="Local Computer") returned 14
	[0231.242] malloc (_Size=0x2a) returned 0x4fe320
	[0231.242] lstrlenW (lpString="NT AUTHORITY\\LocalService") returned 25
	[0231.242] malloc (_Size=0x40) returned 0x561e40
	[0231.242] lstrlenW (lpString="NT AUTHORITY\\NetworkService") returned 27
	[0231.242] malloc (_Size=0x44) returned 0x561e90
	[0231.242] lstrlenW (lpString="NT AUTHORITY\\Local Service") returned 26
	[0231.242] malloc (_Size=0x42) returned 0x1eb800
	[0231.242] lstrlenW (lpString="NT AUTHORITY\\Network Service") returned 28
	[0231.242] malloc (_Size=0x46) returned 0x1eb850
	[0231.243] malloc (_Size=0x80) returned 0x4ff630
	[0231.243] malloc (_Size=0x40) returned 0x1eb8a0
	[0231.243] malloc (_Size=0x80) returned 0x4ff6c0
	[0231.243] malloc (_Size=0x38) returned 0x4fe3a0
	[0231.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d578, cbMultiByte=-1, lpWideCharStr=0x4fe3ac, cchWideChar=22 | out: lpWideCharStr="Microsoft Corporation") returned 22
	[0231.243] malloc (_Size=0x2a) returned 0x4fe3e0
	[0231.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d590, cbMultiByte=-1, lpWideCharStr=0x4fe3ec, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0231.244] free (_Block=0x4fe3e0) 
	[0231.244] free (_Block=0x4fe3a0) 
	[0231.246] malloc (_Size=0x40) returned 0x1eb8f0
	[0231.247] malloc (_Size=0x80) returned 0x4ff6c0
	[0231.247] malloc (_Size=0x38) returned 0x4fe3e0
	[0231.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d578, cbMultiByte=-1, lpWideCharStr=0x4fe3ec, cchWideChar=22 | out: lpWideCharStr="Microsoft Corporation") returned 22
	[0231.247] malloc (_Size=0x2a) returned 0x4fe420
	[0231.247] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d590, cbMultiByte=-1, lpWideCharStr=0x4fe42c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0231.248] free (_Block=0x4fe420) 
	[0231.248] free (_Block=0x4fe3e0) 
	[0234.559] malloc (_Size=0x2e) returned 0x4fe420
	[0234.559] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe42c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.559] malloc (_Size=0x2e) returned 0x4fe3e0
	[0234.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe3ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.562] malloc (_Size=0x2e) returned 0x4fe360
	[0234.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe36c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.562] malloc (_Size=0x2e) returned 0x4fe4e0
	[0234.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe4ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.562] malloc (_Size=0x2e) returned 0x4fe520
	[0234.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe52c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.571] malloc (_Size=0x2e) returned 0x4fe560
	[0234.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe56c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.571] malloc (_Size=0x2e) returned 0x4fe5a0
	[0234.571] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe5ac, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.572] malloc (_Size=0x2e) returned 0x4fe5e0
	[0234.572] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe5ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.575] GetCursorPos (in: lpPoint=0x7fef409b4b8 | out: lpPoint=0x7fef409b4b8*(x=652, y=879)) returned 1
	[0234.575] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x2fdfc0
	[0234.575] LocalReAlloc (hMem=0x2fde30, uBytes=0x38, uFlags=0x2) returned 0x2e5b90
	[0234.575] GetCurrentThread () returned 0xfffffffffffffffe
	[0234.575] GetCurrentThreadId () returned 0x7b8
	[0234.575] FindResourceW (hModule=0x0, lpName=0xd0a, lpType=0x6) returned 0x0
	[0234.575] lstrlenW (lpString="") returned 0
	[0234.576] malloc (_Size=0x2e) returned 0x4fe620
	[0234.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe62c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.576] malloc (_Size=0x2e) returned 0x4fe660
	[0234.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe66c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.577] malloc (_Size=0x2e) returned 0x4fe6a0
	[0234.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe6ac, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.577] malloc (_Size=0x2e) returned 0x4fe6e0
	[0234.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe6ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.577] malloc (_Size=0x2e) returned 0x4fe720
	[0234.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe72c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.577] malloc (_Size=0x2e) returned 0x4fe760
	[0234.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe76c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.577] malloc (_Size=0x2e) returned 0x4fe7a0
	[0234.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe7ac, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.577] malloc (_Size=0x2e) returned 0x4fe7e0
	[0234.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe7ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.577] malloc (_Size=0x2e) returned 0x4fe820
	[0234.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe82c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.577] malloc (_Size=0x2e) returned 0x4fe860
	[0234.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe86c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.577] malloc (_Size=0x2e) returned 0x4fe8a0
	[0234.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe8ac, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.577] malloc (_Size=0x2e) returned 0x4fe8e0
	[0234.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe8ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.577] malloc (_Size=0x2e) returned 0x4fe920
	[0234.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4fe92c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.577] malloc (_Size=0x80) returned 0x4ff6c0
	[0234.578] SetErrorMode (uMode=0x0) returned 0x8001
	[0234.578] SetErrorMode (uMode=0x8001) returned 0x0
	[0234.578] GetModuleFileNameW (in: hModule=0x7fef4060000, lpFilename=0xbcc90, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\dmdskmgr.dll" (normalized: "c:\\windows\\system32\\dmdskmgr.dll")) returned 0x20
	[0234.578] wcscpy_s (in: _Destination=0xbcea0, _SizeInWords=0x104, _Source="dmdskmgr" | out: _Destination="dmdskmgr") returned 0x0
	[0234.578] FindResourceW (hModule=0x7fef4060000, lpName=0xe01, lpType=0x6) returned 0x0
	[0234.578] FindResourceW (hModule=0x7fef83a0000, lpName=0xe01, lpType=0x6) returned 0x1a09b0
	[0234.578] LoadStringW (in: hInstance=0x7fef83a0000, uID=0xe000, lpBuffer=0xbd0b0, cchBufferMax=256 | out: lpBuffer="") returned 0x0
	[0234.578] wcscpy_s (in: _Destination=0xbccc8, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0234.578] wcscat_s (in: _Destination="dmdskmgr", _SizeInWords=0x104, _Source=".INI" | out: _Destination="dmdskmgr.INI") returned 0x0
	[0234.579] free (_Block=0x0) 
	[0234.579] free (_Block=0x1eb0c0) 
	[0234.581] malloc (_Size=0x80) returned 0x4ff750
	[0234.581] GetLastError () returned 0x0
	[0234.581] SetLastError (dwErrCode=0x0) 
	[0234.582] GetLastError () returned 0x0
	[0234.582] SetLastError (dwErrCode=0x0) 
	[0234.582] malloc (_Size=0x68) returned 0x1ecbc0
	[0235.482] malloc (_Size=0x48) returned 0x1eb940
	[0235.482] malloc (_Size=0x10) returned 0x562f30
	[0235.495] malloc (_Size=0x60) returned 0x1ecbc0
	[0235.495] malloc (_Size=0x2a) returned 0x4fe460
	[0235.495] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef7fd3d48, cbMultiByte=-1, lpWideCharStr=0x4fe46c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0235.496] free (_Block=0x4fe460) 
	[0235.497] malloc (_Size=0x80) returned 0x4ff7e0
	[0235.497] malloc (_Size=0x38) returned 0x4fe4a0
	[0235.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d578, cbMultiByte=-1, lpWideCharStr=0x4fe4ac, cchWideChar=22 | out: lpWideCharStr="Microsoft Corporation") returned 22
	[0235.497] malloc (_Size=0x2a) returned 0x4fe460
	[0235.497] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d590, cbMultiByte=-1, lpWideCharStr=0x4fe46c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0235.498] free (_Block=0x4fe460) 
	[0235.498] free (_Block=0x4fe4a0) 
	[0235.499] malloc (_Size=0x80) returned 0x4ff7e0
	[0235.499] malloc (_Size=0x38) returned 0x4fe460
	[0235.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d578, cbMultiByte=-1, lpWideCharStr=0x4fe46c, cchWideChar=22 | out: lpWideCharStr="Microsoft Corporation") returned 22
	[0235.499] malloc (_Size=0x2a) returned 0x4fea60
	[0235.499] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d590, cbMultiByte=-1, lpWideCharStr=0x4fea6c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0235.500] free (_Block=0x4fea60) 
	[0235.500] free (_Block=0x4fe460) 
	[0235.507] GetLastError () returned 0x36b7
	[0235.507] SetLastError (dwErrCode=0x36b7) 
	[0235.507] GetLastError () returned 0x0
	[0235.507] SetLastError (dwErrCode=0x0) 
	[0235.508] malloc (_Size=0x68) returned 0x1ecbc0
	[0235.699] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0235.699] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x2ecca0
	[0235.699] malloc (_Size=0x38) returned 0x4fe120
	[0235.699] malloc (_Size=0x28) returned 0x1eb300
	[0235.699] lstrlenW (lpString="Recent File List") returned 16
	[0235.699] malloc (_Size=0x2e) returned 0x4fe160
	[0235.699] lstrlenW (lpString="File%d") returned 6
	[0235.699] malloc (_Size=0x1a) returned 0x1eb2d0
	[0235.700] malloc (_Size=0x20) returned 0x1eb360
	[0235.700] swprintf_s (in: _Dst=0x1eb360, _SizeInWords=0x10, _Format="File%d" | out: _Dst="File1") returned 5
	[0235.700] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0xbd930 | out: phkResult=0xbd930*=0x24c) returned 0x0
	[0235.700] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbd938, lpdwDisposition=0xbd928 | out: phkResult=0xbd938*=0x250, lpdwDisposition=0xbd928*=0x2) returned 0x0
	[0235.700] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbd900, lpdwDisposition=0xbd928 | out: phkResult=0xbd900*=0x258, lpdwDisposition=0xbd928*=0x2) returned 0x0
	[0235.700] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.700] RegCloseKey (hKey=0x250) returned 0x0
	[0235.700] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Recent File List", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbd998, lpdwDisposition=0xbd990 | out: phkResult=0xbd998*=0x250, lpdwDisposition=0xbd990*=0x2) returned 0x0
	[0235.700] RegCloseKey (hKey=0x258) returned 0x0
	[0235.700] RegQueryValueExW (in: hKey=0x250, lpValueName="File1", lpReserved=0x0, lpType=0xbd9bc, lpData=0x0, lpcbData=0xbd9b8*=0xb8f4250 | out: lpType=0xbd9bc*=0x1, lpData=0x0, lpcbData=0xbd9b8*=0x42) returned 0x0
	[0235.700] malloc (_Size=0x50) returned 0x561fd0
	[0235.700] RegQueryValueExW (in: hKey=0x250, lpValueName="File1", lpReserved=0x0, lpType=0xbd9bc, lpData=0x561fdc, lpcbData=0xbd9b8*=0x42 | out: lpType=0xbd9bc*=0x1, lpData="C:\\Windows\\system32\\compmgmt.msc", lpcbData=0xbd9b8*=0x42) returned 0x0
	[0235.700] RegCloseKey (hKey=0x250) returned 0x0
	[0235.700] swprintf_s (in: _Dst=0x1eb360, _SizeInWords=0x10, _Format="File%d" | out: _Dst="File2") returned 5
	[0235.700] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0xbd930 | out: phkResult=0xbd930*=0x250) returned 0x0
	[0235.700] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbd938, lpdwDisposition=0xbd928 | out: phkResult=0xbd938*=0x258, lpdwDisposition=0xbd928*=0x2) returned 0x0
	[0235.700] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbd900, lpdwDisposition=0xbd928 | out: phkResult=0xbd900*=0x24c, lpdwDisposition=0xbd928*=0x2) returned 0x0
	[0235.700] RegCloseKey (hKey=0x250) returned 0x0
	[0235.700] RegCloseKey (hKey=0x258) returned 0x0
	[0235.700] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Recent File List", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbd998, lpdwDisposition=0xbd990 | out: phkResult=0xbd998*=0x258, lpdwDisposition=0xbd990*=0x2) returned 0x0
	[0235.700] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.701] RegQueryValueExW (in: hKey=0x258, lpValueName="File2", lpReserved=0x0, lpType=0xbd9bc, lpData=0x0, lpcbData=0xbd9b8*=0x42 | out: lpType=0xbd9bc*=0x0, lpData=0x0, lpcbData=0xbd9b8*=0x0) returned 0x2
	[0235.701] RegCloseKey (hKey=0x258) returned 0x0
	[0235.701] lstrlenW (lpString="") returned 0
	[0235.701] swprintf_s (in: _Dst=0x1eb360, _SizeInWords=0x10, _Format="File%d" | out: _Dst="File3") returned 5
	[0235.701] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0xbd930 | out: phkResult=0xbd930*=0x258) returned 0x0
	[0235.701] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbd938, lpdwDisposition=0xbd928 | out: phkResult=0xbd938*=0x24c, lpdwDisposition=0xbd928*=0x2) returned 0x0
	[0235.701] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbd900, lpdwDisposition=0xbd928 | out: phkResult=0xbd900*=0x250, lpdwDisposition=0xbd928*=0x2) returned 0x0
	[0235.701] RegCloseKey (hKey=0x258) returned 0x0
	[0235.701] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.701] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Recent File List", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x7fe0002001f, lpSecurityAttributes=0x0, phkResult=0xbd998, lpdwDisposition=0xbd990 | out: phkResult=0xbd998*=0x24c, lpdwDisposition=0xbd990*=0x2) returned 0x0
	[0235.701] RegCloseKey (hKey=0x250) returned 0x0
	[0235.701] RegQueryValueExW (in: hKey=0x24c, lpValueName="File3", lpReserved=0x0, lpType=0xbd9bc, lpData=0x0, lpcbData=0xbd9b8*=0x0 | out: lpType=0xbd9bc*=0x0, lpData=0x0, lpcbData=0xbd9b8*=0x0) returned 0x2
	[0235.701] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.701] lstrlenW (lpString="") returned 0
	[0235.701] swprintf_s (in: _Dst=0x1eb360, _SizeInWords=0x10, _Format="File%d" | out: _Dst="File4") returned 5
	[0235.701] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0xbd930 | out: phkResult=0xbd930*=0x24c) returned 0x0
	[0235.701] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbd938, lpdwDisposition=0xbd928 | out: phkResult=0xbd938*=0x250, lpdwDisposition=0xbd928*=0x2) returned 0x0
	[0235.701] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbd900, lpdwDisposition=0xbd928 | out: phkResult=0xbd900*=0x258, lpdwDisposition=0xbd928*=0x2) returned 0x0
	[0235.701] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.701] RegCloseKey (hKey=0x250) returned 0x0
	[0235.701] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Recent File List", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x7fe0002001f, lpSecurityAttributes=0x0, phkResult=0xbd998, lpdwDisposition=0xbd990 | out: phkResult=0xbd998*=0x250, lpdwDisposition=0xbd990*=0x2) returned 0x0
	[0235.701] RegCloseKey (hKey=0x258) returned 0x0
	[0235.702] RegQueryValueExW (in: hKey=0x250, lpValueName="File4", lpReserved=0x0, lpType=0xbd9bc, lpData=0x0, lpcbData=0xbd9b8*=0x0 | out: lpType=0xbd9bc*=0x0, lpData=0x0, lpcbData=0xbd9b8*=0x0) returned 0x2
	[0235.702] RegCloseKey (hKey=0x250) returned 0x0
	[0235.702] lstrlenW (lpString="") returned 0
	[0235.702] free (_Block=0x1eb360) 
	[0235.702] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0xbf9d0 | out: phkResult=0xbf9d0*=0x250) returned 0x0
	[0235.702] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbf9d8, lpdwDisposition=0xbf9c8 | out: phkResult=0xbf9d8*=0x258, lpdwDisposition=0xbf9c8*=0x2) returned 0x0
	[0235.702] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbf9a0, lpdwDisposition=0xbf9c8 | out: phkResult=0xbf9a0*=0x24c, lpdwDisposition=0xbf9c8*=0x2) returned 0x0
	[0235.702] RegCloseKey (hKey=0x250) returned 0x0
	[0235.702] RegCloseKey (hKey=0x258) returned 0x0
	[0235.702] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Settings", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xbfa38, lpdwDisposition=0xbfa30 | out: phkResult=0xbfa38*=0x258, lpdwDisposition=0xbfa30*=0x2) returned 0x0
	[0235.702] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.702] RegQueryValueExW (in: hKey=0x258, lpValueName="PreviewPages", lpReserved=0x0, lpType=0xbfa54, lpData=0xbfa50, lpcbData=0xbfa70*=0x4 | out: lpType=0xbfa54*=0x0, lpData=0xbfa50*=0xa8, lpcbData=0xbfa70*=0x4) returned 0x2
	[0235.702] RegCloseKey (hKey=0x258) returned 0x0
	[0235.702] FindResourceW (hModule=0xff6d0000, lpName=0x9, lpType=0x6) returned 0x1507e8
	[0235.702] LoadStringW (in: hInstance=0xff6d0000, uID=0x81, lpBuffer=0xbf7d0, cchBufferMax=256 | out: lpBuffer="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 0x6a
	[0235.702] lstrlenW (lpString="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 106
	[0235.702] malloc (_Size=0xe2) returned 0x4fdfd0
	[0235.703] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0x4) returned 0x1506f8
	[0235.703] LoadMenuW (hInstance=0xff6d0000, lpMenuName=0x81) returned 0x101af
	[0235.703] LoadAcceleratorsW (hInstance=0xff6d0000, lpTableName=0x81) returned 0x400c3
	[0235.703] malloc (_Size=0x100) returned 0x1ee790
	[0235.704] SetRectEmpty (in: lprc=0x2061600 | out: lprc=0x2061600) returned 1
	[0235.704] malloc (_Size=0x18) returned 0x562f50
	[0235.704] FindResourceW (hModule=0xff6d0000, lpName=0x9, lpType=0x6) returned 0x1507e8
	[0235.704] LoadStringW (in: hInstance=0xff6d0000, uID=0x80, lpBuffer=0xbf790, cchBufferMax=256 | out: lpBuffer="Microsoft Management Console") returned 0x1c
	[0235.704] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0235.704] malloc (_Size=0x46) returned 0x1ebd50
	[0235.704] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0235.704] malloc (_Size=0x46) returned 0x1ebd00
	[0235.705] FindResourceW (hModule=0xff6d0000, lpName=0x7a02, lpType=0xe) returned 0x0
	[0235.705] FindResourceW (hModule=0x7fef8280000, lpName=0x7a02, lpType=0xe) returned 0x0
	[0235.705] FindResourceW (hModule=0x7fef83a0000, lpName=0x7a02, lpType=0xe) returned 0x0
	[0235.705] LoadIconW (hInstance=0xff6d0000, lpIconName=0x7a02) returned 0x0
	[0235.705] LoadIconW (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0235.705] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="AfxFrameOrView42u", lpWndClass=0xbf8c0 | out: lpWndClass=0xbf8c0) returned 0
	[0235.705] RegisterClassW (lpWndClass=0xbf950) returned 0xc156
	[0235.705] FindResourceW (hModule=0xff6d0000, lpName=0x80, lpType=0xe) returned 0xff897938
	[0235.705] LoadIconW (hInstance=0xff6d0000, lpIconName=0x80) returned 0x101b7
	[0235.706] FindResourceW (hModule=0xff6d0000, lpName=0x7a01, lpType=0xe) returned 0x0
	[0235.706] FindResourceW (hModule=0x7fef8280000, lpName=0x7a01, lpType=0xe) returned 0x0
	[0235.706] FindResourceW (hModule=0x7fef83a0000, lpName=0x7a01, lpType=0xe) returned 0x0
	[0235.707] LoadIconW (hInstance=0xff6d0000, lpIconName=0x7a01) returned 0x0
	[0235.707] LoadIconW (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0235.707] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="AfxMDIFrame42u", lpWndClass=0xbf720 | out: lpWndClass=0xbf720) returned 0
	[0235.707] RegisterClassW (lpWndClass=0xbf7b0) returned 0xc158
	[0235.707] FindResourceW (hModule=0xff6d0000, lpName=0x80, lpType=0xe) returned 0xff897938
	[0235.707] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCMainFrame", lpWndClass=0xbf7e0 | out: lpWndClass=0xbf7e0) returned 0
	[0235.707] RegisterClassW (lpWndClass=0xbf890) returned 0xc159
	[0235.708] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCMainFrame", lpWndClass=0xbf910 | out: lpWndClass=0xbf910) returned 1
	[0235.708] FindResourceW (hModule=0xff6d0000, lpName=0x80, lpType=0x4) returned 0x1506e8
	[0235.708] LoadMenuW (hInstance=0xff6d0000, lpMenuName=0x80) returned 0x101b9
	[0235.708] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0235.708] GetCurrentThreadId () returned 0x7b8
	[0235.708] SetWindowsHookExW (idHook=5, lpfn=0x7fef83aec30, hmod=0x0, dwThreadId=0x7b8) returned 0x101bf
	[0235.708] CreateWindowExW (dwExStyle=0x0, lpClassName="MMCMainFrame", lpWindowName="Microsoft Management Console", dwStyle=0xcf0000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x101b9, hInstance=0xff6d0000, lpParam=0x0) returned 0x20164
	[0235.709] malloc (_Size=0x88) returned 0x4ff120
	[0235.709] malloc (_Size=0x88) returned 0x4ff1b0
	[0235.709] malloc (_Size=0x100) returned 0x1ee8a0
	[0235.709] GetParent (hWnd=0x20164) returned 0x0
	[0235.710] SetWindowLongPtrW (hWnd=0x20164, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0235.710] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x20164, lParam=0xbf1e0) returned 0x0
	[0236.143] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0x0, uMsg=0x81, wParam=0x0, lParam=0xbf2c0) returned 0x1
	[0236.143] GetWindowLongPtrW (hWnd=0x20162, nIndex=-4) returned 0x77bf6630
	[0236.143] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x0
	[0236.143] SetPropW (hWnd=0x20162, lpString="AfxOldWndProc423", hData=0x77bf6630) returned 1
	[0236.143] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.143] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0236.143] SetWindowLongPtrW (hWnd=0x20162, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x77bf6630
	[0236.143] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x20162, lParam=0xbf1e0) returned 0x0
	[0236.143] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.143] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20162, Msg=0x81, wParam=0x0, lParam=0xbf2c0) returned 0x1
	[0236.144] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.144] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20162, Msg=0x83, wParam=0x0, lParam=0xbf330) returned 0x0
	[0236.144] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.144] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20162, Msg=0x1, wParam=0x0, lParam=0xbf2c0) returned 0x0
	[0236.144] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.144] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20162, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0236.144] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.144] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20162, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0236.144] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.144] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20162, Msg=0x287, wParam=0x21, lParam=0x0) returned 0x0
	[0236.145] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0x0, uMsg=0x83, wParam=0x0, lParam=0xbf330) returned 0x0
	[0236.148] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0x0, uMsg=0x93, wParam=0x0, lParam=0xbebe0) returned 0x1
	[0236.148] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0x0, uMsg=0x94, wParam=0x0, lParam=0xbeb80) returned 0x0
	[0236.159] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0x0, uMsg=0x94, wParam=0x0, lParam=0xbeb80) returned 0x0
	[0236.159] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0x0, uMsg=0x1, wParam=0x0, lParam=0xbf270) returned 0x0
	[0236.159] GetMenu (hWnd=0x20164) returned 0x101b9
	[0236.286] malloc (_Size=0x410) returned 0x5636e0
	[0236.286] malloc (_Size=0x38) returned 0x4fe1a0
	[0236.286] malloc (_Size=0x70) returned 0x5010f0
	[0236.286] GetMenuItemCount (hMenu=0x101b9) returned 2
	[0236.286] GetSubMenu (hMenu=0x101b9, nPos=0) returned 0x101bb
	[0236.287] CreateWindowExW (dwExStyle=0x200, lpClassName="mdiclient", lpWindowName=0x0, dwStyle=0x56000001, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x20164, hMenu=0xe900, hInstance=0xff6d0000, lpParam=0xbed30) returned 0xa014c
	[0236.431] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0xa014c, lParam=0xbe620) returned 0x0
	[0236.433] GetParent (hWnd=0xa014c) returned 0x20164
	[0236.433] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0x0, uMsg=0x210, wParam=0xffffffffe9000001, lParam=0xa014c) returned 0x0
	[0236.433] BringWindowToTop (hWnd=0xa014c) returned 1
	[0236.433] PostMessageW (hWnd=0x20164, Msg=0x362, wParam=0xe001, lParam=0x0) returned 1
	[0236.433] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0236.433] GetClientRect (in: hWnd=0x20164, lpRect=0xbec98 | out: lpRect=0xbec98) returned 1
	[0236.433] BeginDeferWindowPos (nNumWindows=8) returned 0x101c9
	[0236.433] GetTopWindow (hWnd=0x20164) returned 0xa014c
	[0236.433] GetDlgCtrlID (hWnd=0xa014c) returned 59648
	[0236.433] GetWindow (hWnd=0xa014c, uCmd=0x2) returned 0x0
	[0236.433] malloc (_Size=0x2010) returned 0x563b00
	[0236.434] malloc (_Size=0x38) returned 0x4fe1e0
	[0236.434] malloc (_Size=0x70) returned 0x1ecbc0
	[0236.434] GetParent (hWnd=0xa014c) returned 0x20164
	[0236.434] GetWindowLongW (hWnd=0xa014c, nIndex=-20) returned 512
	[0236.434] GetWindowLongW (hWnd=0xa014c, nIndex=-16) returned 1442840577
	[0236.434] AdjustWindowRectEx (in: lpRect=0xbec98, dwStyle=0x56000001, bMenu=0, dwExStyle=0x0 | out: lpRect=0xbec98) returned 1
	[0236.434] GetParent (hWnd=0xa014c) returned 0x20164
	[0236.434] GetWindowRect (in: hWnd=0xa014c, lpRect=0xbec50 | out: lpRect=0xbec50) returned 1
	[0236.434] ScreenToClient (in: hWnd=0x20164, lpPoint=0xbec50 | out: lpPoint=0xbec50) returned 1
	[0236.434] ScreenToClient (in: hWnd=0x20164, lpPoint=0xbec58 | out: lpPoint=0xbec58) returned 1
	[0236.434] EqualRect (lprc1=0xbec50, lprc2=0xbec98) returned 0
	[0236.434] DeferWindowPos (hWinPosInfo=0x101c9, hWnd=0xa014c, hWndInsertAfter=0x0, x=0, y=0, cx=1064, cy=567, uFlags=0x14) returned 0x101c9
	[0236.434] EndDeferWindowPos (hWinPosInfo=0x101c9) returned 1
	[0236.435] GetParent (hWnd=0xa014c) returned 0x20164
	[0236.435] SetWindowLongPtrW (hWnd=0xa014c, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77c3824c
	[0236.436] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="AfxWnd42u", lpWndClass=0xbea50 | out: lpWndClass=0xbea50) returned 0
	[0236.436] RegisterClassW (lpWndClass=0xbeae0) returned 0xc15b
	[0236.436] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="SizeableRebar", lpWndClass=0xbeb10 | out: lpWndClass=0xbeb10) returned 0
	[0236.436] RegisterClassW (lpWndClass=0xbeba0) returned 0xc15c
	[0236.436] CreateWindowExW (dwExStyle=0x0, lpClassName="SizeableRebar", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x20164, hMenu=0x341d, hInstance=0xff6d0000, lpParam=0x0) returned 0x8014a
	[0236.436] GetParent (hWnd=0x8014a) returned 0x10012
	[0236.437] SetWindowLongPtrW (hWnd=0x8014a, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0236.437] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x8014a, lParam=0xbe550) returned 0x0
	[0236.437] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x81, wParam=0x0, lParam=0xbe630) returned 0x1
	[0236.438] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x83, wParam=0x0, lParam=0xbe6a0) returned 0x0
	[0236.438] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x1, wParam=0x0, lParam=0xbe630) returned 0x0
	[0236.438] CreateWindowExW (dwExStyle=0x80, lpClassName="ReBarWindow32", lpWindowName=0x0, dwStyle=0x50802648, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x8014a, hMenu=0x1000, hInstance=0xff6d0000, lpParam=0x0) returned 0x30128
	[0236.439] GetParent (hWnd=0x30128) returned 0x10012
	[0236.439] SetWindowLongPtrW (hWnd=0x30128, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6a9350
	[0236.439] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x30128, lParam=0xbd8b0) returned 0x0
	[0236.439] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x81, wParam=0x0, lParam=0xbd990) returned 0x1
	[0236.440] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x55, wParam=0x30128, lParam=0x3) returned 0x2
	[0236.509] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
	[0236.511] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0xbcf40) returned 0x0
	[0236.511] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0xbcf40) returned 0x0
	[0236.512] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x46, wParam=0x0, lParam=0xbcdf0) returned 0x0
	[0236.512] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0236.513] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0xbd000) returned 0x0
	[0236.513] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0xbd000) returned 0x0
	[0236.514] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x83, wParam=0x0, lParam=0xbda00) returned 0x0
	[0236.514] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x1, wParam=0x0, lParam=0xbd990) returned 0x0
	[0236.515] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x415, wParam=0x0, lParam=0x0) returned 0xffffffff
	[0236.515] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x413, wParam=0x0, lParam=0xf0f0f0) returned 0xffffffff
	[0236.516] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0236.516] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0236.517] GetActiveWindow () returned 0x0
	[0236.517] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x46, wParam=0x0, lParam=0xbd190) returned 0x0
	[0236.518] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0236.518] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0236.519] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x210, wParam=0x10000001, lParam=0x30128) returned 0x0
	[0236.519] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0236.520] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x404, wParam=0x0, lParam=0xbe0e8) returned 0x1
	[0236.520] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0236.520] MoveWindow (hWnd=0x30128, X=0, Y=0, nWidth=0, nHeight=-6, bRepaint=1) returned 1
	[0236.521] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x46, wParam=0x0, lParam=0xbe130) returned 0x0
	[0236.521] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0236.522] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x210, wParam=0x341d0001, lParam=0x8014a) returned 0x0
	[0236.523] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0236.523] malloc (_Size=0x100) returned 0x1eeac0
	[0236.523] malloc (_Size=0x100) returned 0x1eebd0
	[0236.523] malloc (_Size=0x18) returned 0x562f30
	[0236.523] malloc (_Size=0x20) returned 0x1eb360
	[0236.523] CreateWindowExW (dwExStyle=0x84, lpClassName="ToolbarWindow32", lpWindowName=0x0, dwStyle=0x56001844, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x8014a, hMenu=0x1001, hInstance=0xff6d0000, lpParam=0x0) returned 0x1017c
	[0236.524] GetParent (hWnd=0x1017c) returned 0x10012
	[0236.524] SetWindowLongPtrW (hWnd=0x1017c, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6802fc
	[0236.524] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x1017c, lParam=0xbe480) returned 0x0
	[0236.567] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x81, wParam=0x0, lParam=0xbe560) returned 0x1
	[0236.817] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x55, wParam=0x1017c, lParam=0x3) returned 0x2
	[0236.818] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
	[0236.819] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0xbdfb0) returned 0x0
	[0236.819] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0xbdfb0) returned 0x0
	[0236.820] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x83, wParam=0x0, lParam=0xbe5d0) returned 0x0
	[0236.821] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x1, wParam=0x0, lParam=0xbe560) returned 0x0
	[0236.821] SendMessageW (hWnd=0x1017c, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0236.821] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0236.843] malloc (_Size=0x70) returned 0x561830
	[0236.843] malloc (_Size=0x18) returned 0x562f70
	[0236.843] malloc (_Size=0x20) returned 0x1eb330
	[0236.843] malloc (_Size=0x20) returned 0x1eb270
	[0236.843] malloc (_Size=0x18) returned 0x562f90
	[0236.843] malloc (_Size=0x18) returned 0x562fb0
	[0236.844] malloc (_Size=0x10) returned 0x562fd0
	[0236.844] malloc (_Size=0x20) returned 0x1eb2a0
	[0237.285] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0237.285] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0237.285] GetWindowLongW (hWnd=0x1017c, nIndex=-20) returned 132
	[0237.286] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0237.286] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x43c, wParam=0x1, lParam=0x0) returned 0x1
	[0237.287] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.287] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.287] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.288] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.288] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.288] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.289] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.289] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.290] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x415, wParam=0x0, lParam=0xbec60) returned 0x1
	[0237.291] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x440, wParam=0x5404, lParam=0xbed40) returned 0x1
	[0237.291] malloc (_Size=0x88) returned 0x4ff240
	[0237.291] malloc (_Size=0x88) returned 0x4ff2d0
	[0237.291] malloc (_Size=0x100) returned 0x1eef00
	[0237.292] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x30, wParam=0x180a06de, lParam=0x0) returned 0x1
	[0237.292] GetWindowDC (hWnd=0x1017c) returned 0x8010666
	[0237.292] malloc (_Size=0x88) returned 0x4ff360
	[0237.292] malloc (_Size=0x88) returned 0x4ff3f0
	[0237.292] malloc (_Size=0x100) returned 0x1ef010
	[0237.292] SelectObject (hdc=0x8010666, h=0x180a06de) returned 0x18a002e
	[0237.293] malloc (_Size=0x410) returned 0x1ef830
	[0237.293] malloc (_Size=0x38) returned 0x4fe220
	[0237.293] malloc (_Size=0x70) returned 0x5618b0
	[0237.293] SelectObject (hdc=0x8010666, h=0x18a002e) returned 0x180a06de
	[0237.293] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x420, wParam=0x0, lParam=0x100000) returned 0x1
	[0237.294] free (_Block=0x4ff3f0) 
	[0237.294] free (_Block=0x1ef010) 
	[0237.294] ReleaseDC (hWnd=0x1017c, hDC=0x8010666) returned 1
	[0237.294] malloc (_Size=0xb0) returned 0x1ec7d0
	[0237.294] malloc (_Size=0x18) returned 0x562fd0
	[0237.294] CreateWindowExW (dwExStyle=0x0, lpClassName="AfxWnd42u", lpWindowName=0x0, dwStyle=0x4000001b, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1017c, hMenu=0x2001, hInstance=0xff6d0000, lpParam=0x0) returned 0x10182
	[0237.294] GetParent (hWnd=0x10182) returned 0x10012
	[0237.295] SetWindowLongPtrW (hWnd=0x10182, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0237.295] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10182, lParam=0xbe410) returned 0x0
	[0237.295] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10182, Msg=0x81, wParam=0x0, lParam=0xbe4f0) returned 0x1
	[0237.295] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10182, Msg=0x83, wParam=0x0, lParam=0xbe560) returned 0x0
	[0237.296] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10182, Msg=0x1, wParam=0x0, lParam=0xbe4f0) returned 0x0
	[0237.296] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10182, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0237.297] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10182, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0237.298] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x210, wParam=0x20010001, lParam=0x10182) returned 0x0
	[0237.298] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x40a, wParam=0xffffffffffffffff, lParam=0xbec40) returned 0x1
	[0237.299] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x46, wParam=0x0, lParam=0xbe120) returned 0x0
	[0237.299] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.299] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.300] GetActiveWindow () returned 0x0
	[0237.300] GetWindowLongW (hWnd=0x10182, nIndex=-16) returned 1073741851
	[0237.301] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10182, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.301] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10182, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0237.301] SetWindowPos (hWnd=0x10182, hWndInsertAfter=0x0, X=0, Y=0, cx=10, cy=10, uFlags=0x16) returned 1
	[0237.302] GetWindowLongW (hWnd=0x10182, nIndex=-16) returned 1342177307
	[0237.302] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10182, Msg=0x83, wParam=0x1, lParam=0xbea50) returned 0x0
	[0237.303] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10182, Msg=0x47, wParam=0x0, lParam=0xbea80) returned 0x0
	[0237.303] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10182, Msg=0x5, wParam=0x0, lParam=0x130039) returned 0x0
	[0237.303] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x410, wParam=0x2001, lParam=0x0) returned 0x0
	[0237.304] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x40b, wParam=0x0, lParam=0xbeb60) returned 0x1
	[0237.304] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x46, wParam=0x0, lParam=0xbe160) returned 0x0
	[0237.305] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.305] ShowWindow (hWnd=0x10182, nCmdShow=0) returned 1
	[0237.305] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10182, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
	[0237.306] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x40c, wParam=0x0, lParam=0x0) returned 0x1
	[0237.306] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x41c, wParam=0x0, lParam=0xbeb90) returned 0x1
	[0237.307] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x43a, wParam=0x0, lParam=0x0) returned 0x16001c
	[0237.307] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x40a, wParam=0xffffffffffffffff, lParam=0xbec40) returned 0x1
	[0237.307] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
	[0237.308] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x46, wParam=0x0, lParam=0xbe310) returned 0x0
	[0237.308] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.309] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0237.309] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.309] GetParent (hWnd=0x20164) returned 0x0
	[0237.310] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.310] SendMessageW (hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.310] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.311] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x4e, wParam=0x1000, lParam=0xbe3a0) returned 0x0
	[0237.311] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x46, wParam=0x0, lParam=0xbe310) returned 0x0
	[0237.312] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x83, wParam=0x1, lParam=0xbe2e0) returned 0x0
	[0237.312] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.312] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x47, wParam=0x0, lParam=0xbe310) returned 0x0
	[0237.313] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x3, wParam=0x0, lParam=0x2) returned 0x0
	[0237.313] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x5, wParam=0x0, lParam=0x160000) returned 0x0
	[0237.314] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x46, wParam=0x0, lParam=0xbe320) returned 0x0
	[0237.314] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x83, wParam=0x1, lParam=0xbe2f0) returned 0x0
	[0237.315] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.315] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x47, wParam=0x0, lParam=0xbe320) returned 0x0
	[0237.316] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x5, wParam=0x0, lParam=0x160000) returned 0x0
	[0237.316] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.316] GetActiveWindow () returned 0x0
	[0237.317] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.317] GetParent (hWnd=0x8014a) returned 0x20164
	[0237.317] GetParent (hWnd=0x8014a) returned 0x20164
	[0237.317] GetParent (hWnd=0x20164) returned 0x0
	[0237.318] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x46, wParam=0x0, lParam=0xbdb50) returned 0x0
	[0237.318] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x83, wParam=0x1, lParam=0xbdb20) returned 0x0
	[0237.319] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x46, wParam=0x0, lParam=0xbdb50) returned 0x0
	[0237.319] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x83, wParam=0x1, lParam=0xbdb20) returned 0x0
	[0237.320] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x47, wParam=0x0, lParam=0xbdb50) returned 0x0
	[0237.320] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x5, wParam=0x0, lParam=0x1c0428) returned 0x0
	[0237.320] MoveWindow (hWnd=0x30128, X=0, Y=0, nWidth=1064, nHeight=22, bRepaint=1) returned 1
	[0237.321] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x46, wParam=0x0, lParam=0xbcef0) returned 0x0
	[0237.321] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x83, wParam=0x1, lParam=0xbcec0) returned 0x0
	[0237.322] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x47, wParam=0x0, lParam=0xbcef0) returned 0x0
	[0237.322] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x5, wParam=0x0, lParam=0x160428) returned 0x0
	[0237.323] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.323] GetActiveWindow () returned 0x0
	[0237.324] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x47, wParam=0x0, lParam=0xbdb50) returned 0x0
	[0237.324] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x3, wParam=0x0, lParam=0x1e0002) returned 0x0
	[0237.325] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x5, wParam=0x0, lParam=0x2170424) returned 0x0
	[0237.325] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.326] GetParent (hWnd=0x20164) returned 0x0
	[0237.326] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.326] SendMessageW (hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.327] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.327] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x4e, wParam=0x1000, lParam=0xbe3a0) returned 0x0
	[0237.328] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x46, wParam=0x0, lParam=0xbe310) returned 0x0
	[0237.328] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x83, wParam=0x1, lParam=0xbe2e0) returned 0x0
	[0237.329] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.329] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x47, wParam=0x0, lParam=0xbe310) returned 0x0
	[0237.375] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x5, wParam=0x0, lParam=0x160426) returned 0x0
	[0237.577] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x46, wParam=0x0, lParam=0xbe320) returned 0x0
	[0237.577] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.578] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.578] GetActiveWindow () returned 0x0
	[0237.579] malloc (_Size=0x18) returned 0x562ff0
	[0237.579] malloc (_Size=0x18) returned 0x563010
	[0237.579] CreateWindowExW (dwExStyle=0x84, lpClassName="ToolbarWindow32", lpWindowName=0x0, dwStyle=0x56000944, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x8014a, hMenu=0x1002, hInstance=0xff6d0000, lpParam=0x0) returned 0x140176
	[0237.579] GetParent (hWnd=0x140176) returned 0x10012
	[0237.580] SetWindowLongPtrW (hWnd=0x140176, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6802fc
	[0237.580] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x140176, lParam=0xbe3e0) returned 0x0
	[0237.580] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x81, wParam=0x0, lParam=0xbe4c0) returned 0x1
	[0237.581] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x55, wParam=0x140176, lParam=0x3) returned 0x2
	[0237.581] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0237.582] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0xbdf10) returned 0x0
	[0237.582] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0xbdf10) returned 0x0
	[0237.583] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x83, wParam=0x0, lParam=0xbe530) returned 0x0
	[0237.584] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x1, wParam=0x0, lParam=0xbe4c0) returned 0x0
	[0237.584] SendMessageW (hWnd=0x140176, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0237.584] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0237.584] malloc (_Size=0x70) returned 0x561930
	[0237.584] malloc (_Size=0x18) returned 0x563030
	[0237.584] malloc (_Size=0x20) returned 0x1eb0c0
	[0237.584] malloc (_Size=0x18) returned 0x563050
	[0237.584] malloc (_Size=0x18) returned 0x563070
	[0237.584] malloc (_Size=0x10) returned 0x563090
	[0237.585] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0237.586] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0237.586] GetWindowLongW (hWnd=0x140176, nIndex=-20) returned 132
	[0237.586] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0237.587] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x43c, wParam=0x1, lParam=0x0) returned 0x1
	[0237.587] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x2007, wParam=0x5, lParam=0x0) returned 0x6
	[0237.588] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x40c, wParam=0x0, lParam=0x0) returned 0x2
	[0237.588] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x41c, wParam=0x0, lParam=0xbeb90) returned 0x1
	[0237.589] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x41c, wParam=0x1, lParam=0xbeb90) returned 0x1
	[0237.589] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x43a, wParam=0x0, lParam=0x0) returned 0x160017
	[0237.590] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x40a, wParam=0xffffffffffffffff, lParam=0xbec40) returned 0x1
	[0237.590] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
	[0237.590] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x46, wParam=0x0, lParam=0xbe310) returned 0x0
	[0237.591] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.591] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0237.592] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.592] GetParent (hWnd=0x20164) returned 0x0
	[0237.593] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.593] SendMessageW (hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.593] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.594] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x4e, wParam=0x1000, lParam=0xbe3a0) returned 0x0
	[0237.594] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.595] GetParent (hWnd=0x20164) returned 0x0
	[0237.595] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.595] SendMessageW (hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.596] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.596] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x4e, wParam=0x1000, lParam=0xbe3a0) returned 0x0
	[0237.597] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x46, wParam=0x0, lParam=0xbe310) returned 0x0
	[0237.597] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x46, wParam=0x0, lParam=0xbe310) returned 0x0
	[0237.598] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x83, wParam=0x1, lParam=0xbe2e0) returned 0x0
	[0237.599] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.599] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x47, wParam=0x0, lParam=0xbe310) returned 0x0
	[0237.599] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x3, wParam=0x0, lParam=0x180002) returned 0x0
	[0237.600] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x5, wParam=0x0, lParam=0x160426) returned 0x0
	[0237.600] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x46, wParam=0x0, lParam=0xbe320) returned 0x0
	[0237.601] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x83, wParam=0x1, lParam=0xbe2f0) returned 0x0
	[0237.601] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.602] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x47, wParam=0x0, lParam=0xbe320) returned 0x0
	[0237.602] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x5, wParam=0x0, lParam=0x2e0428) returned 0x0
	[0237.603] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.603] GetActiveWindow () returned 0x0
	[0237.604] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.604] GetParent (hWnd=0x8014a) returned 0x20164
	[0237.604] GetParent (hWnd=0x8014a) returned 0x20164
	[0237.604] GetParent (hWnd=0x20164) returned 0x0
	[0237.605] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x46, wParam=0x0, lParam=0xbdb50) returned 0x0
	[0237.605] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x83, wParam=0x1, lParam=0xbdb20) returned 0x0
	[0237.606] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x46, wParam=0x0, lParam=0xbdb50) returned 0x0
	[0237.606] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x83, wParam=0x1, lParam=0xbdb20) returned 0x0
	[0237.607] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x47, wParam=0x0, lParam=0xbdb50) returned 0x0
	[0237.607] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x5, wParam=0x0, lParam=0x340428) returned 0x0
	[0237.607] MoveWindow (hWnd=0x30128, X=0, Y=0, nWidth=1064, nHeight=46, bRepaint=1) returned 1
	[0237.608] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x46, wParam=0x0, lParam=0xbcef0) returned 0x0
	[0237.609] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x47, wParam=0x0, lParam=0xbdb50) returned 0x0
	[0237.609] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x3, wParam=0x0, lParam=0x360002) returned 0x0
	[0237.609] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x5, wParam=0x0, lParam=0x1ff0424) returned 0x0
	[0237.610] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.864] GetParent (hWnd=0x20164) returned 0x0
	[0237.865] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.865] SendMessageW (hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.865] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.866] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x4e, wParam=0x1000, lParam=0xbe3a0) returned 0x0
	[0237.866] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.867] GetParent (hWnd=0x20164) returned 0x0
	[0237.867] GetDlgCtrlID (hWnd=0x30128) returned 4096
	[0237.867] SendMessageW (hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.868] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.868] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x4e, wParam=0x1000, lParam=0xbe3a0) returned 0x0
	[0237.869] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x46, wParam=0x0, lParam=0xbe310) returned 0x0
	[0237.869] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x46, wParam=0x0, lParam=0xbe310) returned 0x0
	[0237.870] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.870] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x46, wParam=0x0, lParam=0xbe320) returned 0x0
	[0237.871] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.871] malloc (_Size=0x60) returned 0x1eff30
	[0237.871] malloc (_Size=0x28) returned 0x1eb390
	[0237.871] malloc (_Size=0x38) returned 0x4fe260
	[0237.871] malloc (_Size=0x28) returned 0x1eb3c0
	[0237.871] malloc (_Size=0x38) returned 0x4fe2a0
	[0237.871] malloc (_Size=0x60) returned 0x1ec890
	[0237.871] malloc (_Size=0x28) returned 0x1eb3f0
	[0237.872] malloc (_Size=0x38) returned 0x4fe3a0
	[0237.872] malloc (_Size=0x28) returned 0x1eb390
	[0237.872] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0xbee68) returned 0x0
	[0237.873] GetMenu (hWnd=0x20164) returned 0x101b9
	[0237.873] FindResourceW (hModule=0xff6d0000, lpName=0x80, lpType=0x9) returned 0x150808
	[0237.873] LoadAcceleratorsW (hInstance=0xff6d0000, lpTableName=0x80) returned 0x401cf
	[0237.873] GetTopWindow (hWnd=0x20164) returned 0xa014c
	[0237.873] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.873] GetTopWindow (hWnd=0xa014c) returned 0x0
	[0237.873] GetWindow (hWnd=0xa014c, uCmd=0x2) returned 0x8014a
	[0237.874] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.874] GetTopWindow (hWnd=0x8014a) returned 0x30128
	[0237.874] GetTopWindow (hWnd=0x8014a) returned 0x30128
	[0237.874] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x30128, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.874] GetTopWindow (hWnd=0x30128) returned 0x140176
	[0237.874] GetTopWindow (hWnd=0x30128) returned 0x140176
	[0237.875] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x140176, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.875] GetTopWindow (hWnd=0x140176) returned 0x0
	[0237.875] GetWindow (hWnd=0x140176, uCmd=0x2) returned 0x1017c
	[0237.875] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x1017c, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.875] GetTopWindow (hWnd=0x1017c) returned 0x0
	[0237.875] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x10182
	[0237.876] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10182, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.876] GetTopWindow (hWnd=0x10182) returned 0x0
	[0237.876] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x0
	[0237.876] GetWindow (hWnd=0x30128, uCmd=0x2) returned 0x0
	[0237.876] GetWindow (hWnd=0x8014a, uCmd=0x2) returned 0x0
	[0237.876] free (_Block=0x1ebd50) 
	[0237.876] GetMenu (hWnd=0x20164) returned 0x101b9
	[0237.876] lstrlenW (lpString="Embedding") returned 9
	[0237.876] lstrlenW (lpString="Automation") returned 10
	[0237.876] GlobalAddAtomW (lpString="mmc") returned 0xc04c
	[0237.876] GlobalAddAtomW (lpString="system") returned 0xc009
	[0237.876] wcscpy_s (in: _Destination=0xbf630, _SizeInWords=0x104, _Source="C:\\Windows\\System32\\compmgmt.msc" | out: _Destination="C:\\Windows\\System32\\compmgmt.msc") returned 0x0
	[0237.876] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\compmgmt.msc", nBufferLength=0x104, lpBuffer=0xbf420, lpFilePart=0xbf150 | out: lpBuffer="C:\\Windows\\System32\\compmgmt.msc", lpFilePart=0xbf150*="compmgmt.msc") returned 0x20
	[0237.876] malloc (_Size=0x216) returned 0x1ea820
	[0237.877] wcsncpy_s (in: _Destination=0x1ea82c, _SizeInWords=0x104, _Source="C:\\Windows\\System32\\compmgmt.msc", _MaxCount=0xffffffffffffffff | out: _Destination="C:\\Windows\\System32\\compmgmt.msc") returned 0x0
	[0237.877] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0xbf158, lpFileSystemFlags=0xbf140, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0xbf158*=0xff, lpFileSystemFlags=0xbf140*=0x3e700ff, lpFileSystemNameBuffer=0x0) returned 1
	[0237.877] free (_Block=0x1ea820) 
	[0237.877] LoadLibraryExA (lpLibFileName="SHELL32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefe0a0000
	[0237.877] GetProcAddress (hModule=0x7fefe0a0000, lpProcName="SHGetFileInfoW") returned 0x7fefe242410
	[0237.878] SHGetFileInfoW (in: pszPath="C:\\Windows\\System32\\compmgmt.msc", dwFileAttributes=0x0, psfi=0xbf0f0, cbFileInfo=0x2b8, uFlags=0x800 | out: psfi=0xbf0f0) returned 0x1
	[0238.045] malloc (_Size=0x16) returned 0x5630b0
	[0238.045] lstrcmpiW (lpString1=".msc", lpString2=".msc") returned 0
	[0238.045] GetSystemMetrics (nIndex=42) returned 0
	[0238.045] free (_Block=0x5630b0) 
	[0238.045] GetParent (hWnd=0xa014c) returned 0x20164
	[0238.045] malloc (_Size=0x8) returned 0x1effa0
	[0238.046] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0238.046] GetParent (hWnd=0x8014a) returned 0x20164
	[0238.046] malloc (_Size=0x10) returned 0x5630b0
	[0238.047] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x8014a, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0238.047] malloc (_Size=0x230) returned 0x1ea820
	[0238.047] malloc (_Size=0x18) returned 0x5630d0
	[0238.047] malloc (_Size=0x20) returned 0x1eb3c0
	[0238.047] malloc (_Size=0xb8) returned 0x1eaa60
	[0238.047] malloc (_Size=0x18) returned 0x5630f0
	[0238.047] malloc (_Size=0x18) returned 0x563110
	[0238.047] malloc (_Size=0x18) returned 0x563130
	[0238.048] malloc (_Size=0xb0) returned 0x1eab20
	[0238.048] malloc (_Size=0x40) returned 0x1ebd50
	[0238.048] malloc (_Size=0x100) returned 0x1ef120
	[0238.048] malloc (_Size=0x18) returned 0x563150
	[0238.048] lstrlenW (lpString="Favorites") returned 9
	[0238.048] malloc (_Size=0x20) returned 0x1eb420
	[0238.048] malloc (_Size=0x1c0) returned 0x1eabe0
	[0238.048] malloc (_Size=0x68) returned 0x1ec900
	[0238.048] malloc (_Size=0x20) returned 0x1eb450
	[0238.048] malloc (_Size=0x20) returned 0x1eb480
	[0238.048] free (_Block=0x1eb420) 
	[0238.051] malloc (_Size=0x420) returned 0x5664a0
	[0238.051] SetRectEmpty (in: lprc=0x566548 | out: lprc=0x566548) returned 1
	[0238.051] malloc (_Size=0x18) returned 0x563190
	[0238.052] FindResourceW (hModule=0xff6d0000, lpName=0x9, lpType=0x6) returned 0x1507e8
	[0238.052] LoadStringW (in: hInstance=0xff6d0000, uID=0x81, lpBuffer=0xbf020, cchBufferMax=256 | out: lpBuffer="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 0x6a
	[0238.052] lstrlenW (lpString="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 106
	[0238.052] malloc (_Size=0xe2) returned 0x1eadb0
	[0238.052] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0238.052] LoadIconW (hInstance=0xff6d0000, lpIconName=0x81) returned 0x101eb
	[0238.053] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0238.053] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0xbf090 | out: lpWndClass=0xbf090) returned 0
	[0238.053] RegisterClassW (lpWndClass=0xbf120) returned 0xc15d
	[0238.053] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0xbf1a0 | out: lpWndClass=0xbf1a0) returned 1
	[0238.054] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0238.054] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0xbf080 | out: lpWndClass=0xbf080) returned 1
	[0238.054] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x220, wParam=0x0, lParam=0xbf200) returned 0x10194
	[0238.055] GetParent (hWnd=0x10194) returned 0x10012
	[0238.055] SetWindowLongPtrW (hWnd=0x10194, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0238.055] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10194, lParam=0xbe530) returned 0x0
	[0238.057] DefMDIChildProcW (hWnd=0x10194, uMsg=0x81, wParam=0x0, lParam=0xbe610) returned 0x1
	[0238.057] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0238.057] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0xbe060 | out: lpWndClass=0xbe060) returned 1
	[0238.057] SetWindowLongW (hWnd=0x10194, nIndex=-20, dwNewLong=320) returned 320
	[0238.058] DefMDIChildProcW (hWnd=0x10194, uMsg=0x7c, wParam=0xffffffffffffffec, lParam=0xbe100) returned 0x0
	[0238.058] DefMDIChildProcW (hWnd=0x10194, uMsg=0x7d, wParam=0xffffffffffffffec, lParam=0xbe100) returned 0x0
	[0238.059] DefMDIChildProcW (hWnd=0x10194, uMsg=0xd, wParam=0x104, lParam=0x1e25fa0) returned 0x0
	[0238.059] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0xbd978) returned 0x0
	[0238.061] DefMDIChildProcW (hWnd=0x10194, uMsg=0x83, wParam=0x0, lParam=0xbe680) returned 0x0
	[0238.061] DefMDIChildProcW (hWnd=0x10194, uMsg=0x1, wParam=0x0, lParam=0xbe600) returned 0x0
	[0238.062] malloc (_Size=0x5a0) returned 0x5668d0
	[0238.062] malloc (_Size=0x18) returned 0x5631b0
	[0238.062] malloc (_Size=0x20) returned 0x1eb420
	[0238.062] malloc (_Size=0x18) returned 0x5631d0
	[0238.062] malloc (_Size=0x18) returned 0x5631f0
	[0238.062] malloc (_Size=0x18) returned 0x563210
	[0238.062] malloc (_Size=0x18) returned 0x563230
	[0238.062] malloc (_Size=0x18) returned 0x563250
	[0238.062] malloc (_Size=0x18) returned 0x563270
	[0238.062] malloc (_Size=0x120) returned 0x1eaea0
	[0238.062] malloc (_Size=0x18) returned 0x563290
	[0238.062] malloc (_Size=0x70) returned 0x566e80
	[0238.062] malloc (_Size=0x20) returned 0x1eb450
	[0238.062] malloc (_Size=0x58) returned 0x562030
	[0238.062] malloc (_Size=0xe0) returned 0x566f00
	[0238.063] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCViewWindow", lpWndClass=0xbde00 | out: lpWndClass=0xbde00) returned 0
	[0238.063] RegisterClassW (lpWndClass=0xbde90) returned 0xc15e
	[0238.063] CreateWindowExW (dwExStyle=0x0, lpClassName="MMCViewWindow", lpWindowName=0x0, dwStyle=0x52000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10194, hMenu=0xe900, hInstance=0xff6d0000, lpParam=0xbf300) returned 0x10196
	[0238.064] GetParent (hWnd=0x10196) returned 0x10012
	[0238.064] SetWindowLongPtrW (hWnd=0x10196, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0238.064] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10196, lParam=0xbd840) returned 0x0
	[0238.065] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x81, wParam=0x0, lParam=0xbd920) returned 0x1
	[0238.065] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x83, wParam=0x0, lParam=0xbd990) returned 0x0
	[0238.066] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x1, wParam=0x0, lParam=0xbd920) returned 0x0
	[0238.066] malloc (_Size=0x100) returned 0x1ef340
	[0238.066] IsWindowVisible (hWnd=0x10196) returned 0
	[0238.066] IsWindowVisible (hWnd=0x10196) returned 0
	[0238.066] IsWindowVisible (hWnd=0x10196) returned 0
	[0238.066] GetParent (hWnd=0x10196) returned 0x10194
	[0238.066] GetParent (hWnd=0x10194) returned 0xa014c
	[0238.067] CreateWindowExW (dwExStyle=0x20000, lpClassName="STATIC", lpWindowName=0x0, dwStyle=0x4400428d, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10196, hMenu=0x31f7, hInstance=0xff6d0000, lpParam=0x0) returned 0x2018a
	[0238.162] GetParent (hWnd=0x2018a) returned 0x10012
	[0238.163] SetWindowLongPtrW (hWnd=0x2018a, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6d61b4
	[0238.163] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x2018a, lParam=0xbca30) returned 0x0
	[0238.163] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x81, wParam=0x0, lParam=0xbcb10) returned 0x1
	[0238.164] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x83, wParam=0x0, lParam=0xbcb70) returned 0x0
	[0238.165] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x1, wParam=0x0, lParam=0xbcb10) returned 0x0
	[0238.165] GetWindowDC (hWnd=0x2018a) returned 0x1401007f
	[0238.165] malloc (_Size=0x88) returned 0x4ff3f0
	[0238.165] malloc (_Size=0x100) returned 0x567020
	[0238.166] SelectObject (hdc=0x1401007f, h=0x50a0281) returned 0x18a002e
	[0238.393] GetWindowLongW (hWnd=0x2018a, nIndex=-20) returned 131072
	[0238.393] GetWindowLongW (hWnd=0x2018a, nIndex=-16) returned 1140867725
	[0238.393] SelectObject (hdc=0x1401007f, h=0x18a002e) returned 0x50a0281
	[0238.394] free (_Block=0x4ff3f0) 
	[0238.394] free (_Block=0x567020) 
	[0238.394] ReleaseDC (hWnd=0x2018a, hDC=0x1401007f) returned 1
	[0238.800] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0238.800] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x3, wParam=0x0, lParam=0x10001) returned 0x0
	[0238.801] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x210, wParam=0x31f70001, lParam=0x2018a) returned 0x0
	[0238.801] lstrlenW (lpString="SysTreeView32") returned 13
	[0238.801] malloc (_Size=0x28) returned 0x1eb4b0
	[0238.801] malloc (_Size=0x20) returned 0x1eb4e0
	[0238.801] malloc (_Size=0x18) returned 0x5632b0
	[0238.801] malloc (_Size=0x18) returned 0x5632d0
	[0238.801] malloc (_Size=0x30) returned 0x4fe9a0
	[0238.802] malloc (_Size=0x30) returned 0x4fe960
	[0238.802] malloc (_Size=0x28) returned 0x1eb510
	[0238.802] malloc (_Size=0x30) returned 0x4fea20
	[0238.802] malloc (_Size=0x18) returned 0x5632f0
	[0238.802] malloc (_Size=0x20) returned 0x1eb540
	[0238.802] malloc (_Size=0x18) returned 0x563310
	[0238.802] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.803] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.803] LoadLibraryExA (lpLibFileName="COMCTL32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefc630000
	[0238.803] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.803] InitCommonControlsEx (picce=0xbcf78) returned 1
	[0238.804] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.804] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.804] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.804] InitCommonControlsEx (picce=0xbcf78) returned 1
	[0238.804] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.804] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.805] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.805] InitCommonControlsEx (picce=0xbcf78) returned 1
	[0238.805] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.805] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.805] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.805] InitCommonControlsEx (picce=0xbcf78) returned 1
	[0238.805] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.805] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.806] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.806] InitCommonControlsEx (picce=0xbcf78) returned 1
	[0238.806] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.806] CreateWindowExW (dwExStyle=0x200, lpClassName="SysTreeView32", lpWindowName=0x0, dwStyle=0x52000029, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10196, hMenu=0x31f1, hInstance=0xff6d0000, lpParam=0xbd1d8) returned 0x101ae
	[0238.806] malloc (_Size=0x100) returned 0x567020
	[0238.806] GetParent (hWnd=0x101ae) returned 0x10012
	[0238.806] SetWindowLongPtrW (hWnd=0x101ae, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6c7c18
	[0238.806] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101ae, lParam=0xbc8f0) returned 0x0
	[0238.807] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x81, wParam=0x0, lParam=0xbc9d0) returned 0x1
	[0238.808] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x83, wParam=0x0, lParam=0xbca40) returned 0x0
	[0238.808] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x1, wParam=0x0, lParam=0xbc9d0) returned 0x0
	[0238.809] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x55, wParam=0x101ae, lParam=0x3) returned 0x2
	[0238.809] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0238.811] GetDlgCtrlID (hWnd=0x101ae) returned 12785
	[0238.813] GetDlgCtrlID (hWnd=0x101ae) returned 12785
	[0238.816] GetDlgCtrlID (hWnd=0x101ae) returned 12785
	[0238.817] GetDlgCtrlID (hWnd=0x101ae) returned 12785
	[0238.817] GetDlgCtrlID (hWnd=0x101ae) returned 12785
	[0238.818] GetDlgCtrlID (hWnd=0x101ae) returned 12785
	[0238.819] GetWindowLongPtrW (hWnd=0x101b0, nIndex=-4) returned 0x7fefc6af450
	[0238.819] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x0
	[0238.819] SetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423", hData=0x7fefc6af450) returned 1
	[0238.819] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.819] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0238.819] SetWindowLongPtrW (hWnd=0x101b0, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7fefc6af450
	[0238.819] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101b0, lParam=0xbb980) returned 0x0
	[0238.819] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.819] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x81, wParam=0x0, lParam=0xbba60) returned 0x1
	[0238.819] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.819] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x83, wParam=0x0, lParam=0xbbae0) returned 0x0
	[0238.819] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.819] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x1, wParam=0x0, lParam=0xbba60) returned 0x0
	[0238.820] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x55, wParam=0x101b0, lParam=0x3) returned 0x2
	[0238.820] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0238.821] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.821] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0xbb550) returned 0x0
	[0238.821] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.823] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0xbb550) returned 0x0
	[0238.824] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.824] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0238.824] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.824] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0238.824] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.824] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x432, wParam=0x0, lParam=0xbc120) returned 0x1
	[0238.824] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x55, wParam=0x101b0, lParam=0x3) returned 0x2
	[0238.824] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.824] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x30, wParam=0x60a087e, lParam=0x1) returned 0x1
	[0238.825] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.825] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x403, wParam=0x3, lParam=0x1f4) returned 0x0
	[0238.825] IsWindowVisible (hWnd=0x10196) returned 0
	[0238.825] IsWindowVisible (hWnd=0x101ae) returned 0
	[0238.825] IsWindowVisible (hWnd=0x10196) returned 0
	[0238.825] IsWindowVisible (hWnd=0x101ae) returned 0
	[0238.825] IsWindowVisible (hWnd=0x10196) returned 0
	[0238.825] IsWindowVisible (hWnd=0x101ae) returned 0
	[0238.826] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x31a, wParam=0xffffffffffffffff, lParam=0x80000001) returned 0x0
	[0238.826] GetParent (hWnd=0x101ae) returned 0x10196
	[0238.826] GetParent (hWnd=0x10196) returned 0x10194
	[0238.826] GetParent (hWnd=0x10196) returned 0x10194
	[0238.826] GetParent (hWnd=0x10194) returned 0xa014c
	[0238.826] GetDlgItem (hDlg=0x10194, nIDDlgItem=59648) returned 0x10196
	[0238.827] GetParent (hWnd=0x10196) returned 0x10194
	[0239.589] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x1109, wParam=0x0, lParam=0x31ffc0) returned 0x0
	[0239.589] GetDlgCtrlID (hWnd=0x101ae) returned 12785
	[0239.590] GetDlgCtrlID (hWnd=0x101ae) returned 12785
	[0239.590] malloc (_Size=0x60) returned 0x5692d0
	[0239.590] malloc (_Size=0x18) returned 0x563330
	[0239.591] GetWindowLongPtrW (hWnd=0x101ba, nIndex=-4) returned 0x7feffb750c0
	[0239.591] GetPropW (hWnd=0x101ba, lpString="AfxOldWndProc423") returned 0x0
	[0239.591] SetPropW (hWnd=0x101ba, lpString="AfxOldWndProc423", hData=0x7feffb750c0) returned 1
	[0239.591] GetPropW (hWnd=0x101ba, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.591] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0239.591] SetWindowLongPtrW (hWnd=0x101ba, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7feffb750c0
	[0239.591] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101ba, lParam=0xbbcc0) returned 0x0
	[0239.591] GetPropW (hWnd=0x101ba, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.591] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x101ba, Msg=0x81, wParam=0x0, lParam=0xbbda0) returned 0x1
	[0239.591] GetPropW (hWnd=0x101ba, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.591] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x101ba, Msg=0x83, wParam=0x0, lParam=0xbbe10) returned 0x0
	[0239.592] GetPropW (hWnd=0x101ba, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.592] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x101ba, Msg=0x1, wParam=0x0, lParam=0xbbda0) returned 0x0
	[0239.592] GetPropW (hWnd=0x101ba, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.592] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x101ba, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0239.592] GetPropW (hWnd=0x101ba, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.592] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x101ba, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0239.592] GetLastError () returned 0x36b7
	[0239.592] SetLastError (dwErrCode=0x36b7) 
	[0239.592] DeleteObject (ho=0x5050882) returned 1
	[0239.592] GetLastError () returned 0x0
	[0239.593] SetLastError (dwErrCode=0x0) 
	[0239.593] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0239.594] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0239.594] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x210, wParam=0x31f10001, lParam=0x101ae) returned 0x0
	[0239.595] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0239.595] malloc (_Size=0x20) returned 0x1eb570
	[0239.595] malloc (_Size=0x18) returned 0x563350
	[0239.595] malloc (_Size=0x20) returned 0x1eb5a0
	[0239.595] malloc (_Size=0x18) returned 0x563370
	[0239.595] SetWindowPos (hWnd=0x101ae, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0239.595] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x46, wParam=0x0, lParam=0xbd170) returned 0x0
	[0239.596] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0239.597] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x47, wParam=0x0, lParam=0xbd170) returned 0x0
	[0239.597] malloc (_Size=0x3a0) returned 0x569530
	[0239.597] malloc (_Size=0x20) returned 0x1eb5d0
	[0239.597] malloc (_Size=0x18) returned 0x563390
	[0239.598] LoadResource (hModule=0xff6d0000, hResInfo=0xff897758) returned 0xff8c7278
	[0239.598] LockResource (hResData=0xff8c7278) returned 0xff8c7278
	[0239.598] malloc (_Size=0x68) returned 0x569fe0
	[0239.598] GetSysColor (nIndex=18) returned 0x0
	[0239.598] GetSysColor (nIndex=18) returned 0x0
	[0239.598] GetSysColor (nIndex=18) returned 0x0
	[0239.598] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0239.598] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0239.598] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0239.598] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0239.598] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0239.598] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0239.598] GetSysColor (nIndex=20) returned 0xffffff
	[0239.598] GetSysColor (nIndex=20) returned 0xffffff
	[0239.598] GetSysColor (nIndex=20) returned 0xffffff
	[0239.598] GetDC (hWnd=0x0) returned 0x8010666
	[0239.598] CreateCompatibleBitmap (hdc=0x8010666, cx=16, cy=8) returned 0x4050881
	[0239.598] CreateCompatibleDC (hdc=0x8010666) returned 0x6010882
	[0239.598] SelectObject (hdc=0x6010882, h=0x4050881) returned 0x185000f
	[0239.598] StretchDIBits (hdc=0x6010882, xDest=0, yDest=0, DestWidth=16, DestHeight=8, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=8, lpBits=0xff8c72e0, lpbmi=0x569fe0, iUsage=0x0, rop=0xcc0020) returned 8
	[0239.598] SelectObject (hdc=0x6010882, h=0x185000f) returned 0x4050881
	[0239.598] DeleteDC (hdc=0x6010882) returned 1
	[0239.598] ReleaseDC (hWnd=0x0, hDC=0x8010666) returned 1
	[0239.598] free (_Block=0x569fe0) 
	[0239.599] GetProcAddress (hModule=0x7fefc630000, lpProcName="ImageList_Create") returned 0x7fefc6900fc
	[0239.599] ImageList_Create (cx=8, cy=8, flags=0xfe, cInitial=2, cGrow=2) returned 0x322bf0
	[0239.599] malloc (_Size=0x88) returned 0x4ff3f0
	[0239.599] malloc (_Size=0x88) returned 0x4ff7e0
	[0239.599] malloc (_Size=0x100) returned 0x567240
	[0239.599] GetLastError () returned 0x0
	[0239.599] SetLastError (dwErrCode=0x0) 
	[0239.599] DeleteObject (ho=0x4050881) returned 1
	[0239.599] GetLastError () returned 0x0
	[0239.600] SetLastError (dwErrCode=0x0) 
	[0239.600] malloc (_Size=0x28) returned 0x1eb600
	[0239.600] malloc (_Size=0x30) returned 0x4fe460
	[0239.600] malloc (_Size=0x1f0) returned 0x56a1f0
	[0239.600] lstrlenW (lpString="SysListView32") returned 13
	[0239.600] malloc (_Size=0x28) returned 0x1eb630
	[0239.600] malloc (_Size=0x18) returned 0x5633b0
	[0239.600] malloc (_Size=0x20) returned 0x1eb660
	[0239.600] malloc (_Size=0x30) returned 0x4fea60
	[0239.600] CreateWindowExW (dwExStyle=0x200, lpClassName="SysListView32", lpWindowName=0x0, dwStyle=0x5600024d, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10196, hMenu=0x31f2, hInstance=0xff6d0000, lpParam=0xbf300) returned 0x101bc
	[0239.601] GetParent (hWnd=0x101bc) returned 0x10012
	[0239.601] SetWindowLongPtrW (hWnd=0x101bc, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6b5944
	[0239.601] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101bc, lParam=0xbc970) returned 0x0
	[0239.601] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x81, wParam=0x0, lParam=0xbca50) returned 0x1
	[0239.603] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x83, wParam=0x0, lParam=0xbcac0) returned 0x0
	[0239.603] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x1, wParam=0x0, lParam=0xbca50) returned 0x0
	[0239.605] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0239.605] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101be, lParam=0xbb7f0) returned 0x0
	[0239.606] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x55, wParam=0x101be, lParam=0x3) returned 0x2
	[0239.606] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0239.607] GetParent (hWnd=0x101be) returned 0x101bc
	[0239.607] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x210, wParam=0x1, lParam=0x101be) returned 0x0
	[0239.608] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101c0, lParam=0xbb600) returned 0x0
	[0239.633] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x55, wParam=0x101c0, lParam=0x3) returned 0x2
	[0239.633] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0239.634] GetParent (hWnd=0x101c0) returned 0x101bc
	[0239.634] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x210, wParam=0x1, lParam=0x101c0) returned 0x0
	[0239.634] CallNextHookEx (hhk=0x101bf, nCode=4, wParam=0x101c0, lParam=0x0) returned 0x0
	[0239.635] GetParent (hWnd=0x101c0) returned 0x101bc
	[0239.635] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x210, wParam=0x2, lParam=0x101c0) returned 0x0
	[0239.636] GetDlgCtrlID (hWnd=0x101be) returned 0
	[0239.636] GetParent (hWnd=0x101be) returned 0x101bc
	[0239.636] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x4e, wParam=0x0, lParam=0xbb850) returned 0x0
	[0239.637] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x46, wParam=0x0, lParam=0xb9d40) returned 0x0
	[0239.637] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x83, wParam=0x1, lParam=0xb9d10) returned 0x0
	[0239.638] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x47, wParam=0x0, lParam=0xb9d40) returned 0x0
	[0239.641] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x46, wParam=0x0, lParam=0xb9d40) returned 0x0
	[0239.642] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x83, wParam=0x1, lParam=0xb9d10) returned 0x0
	[0239.642] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x47, wParam=0x0, lParam=0xb9d40) returned 0x0
	[0239.644] GetWindowLongPtrW (hWnd=0x201c0, nIndex=-4) returned 0x7fefc6af450
	[0239.645] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x0
	[0239.645] SetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423", hData=0x7fefc6af450) returned 1
	[0239.645] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.645] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0239.645] SetWindowLongPtrW (hWnd=0x201c0, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7fefc6af450
	[0239.645] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x201c0, lParam=0xbb850) returned 0x0
	[0239.645] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.645] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x81, wParam=0x0, lParam=0xbb930) returned 0x1
	[0239.645] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.645] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x83, wParam=0x0, lParam=0xbb9b0) returned 0x0
	[0239.645] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.645] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x1, wParam=0x0, lParam=0xbb930) returned 0x0
	[0239.645] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.645] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0xbb420) returned 0x0
	[0239.646] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.646] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0xbb420) returned 0x0
	[0239.646] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.646] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0239.646] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.646] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0239.646] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.646] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x432, wParam=0x0, lParam=0xbbff0) returned 0x1
	[0239.647] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x55, wParam=0x201c0, lParam=0x3) returned 0x2
	[0239.647] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.647] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x30, wParam=0x380a088d, lParam=0x0) returned 0x1
	[0239.647] IsWindowVisible (hWnd=0x10196) returned 0
	[0239.647] IsWindowVisible (hWnd=0x101ae) returned 0
	[0239.647] IsWindowVisible (hWnd=0x101bc) returned 0
	[0239.647] IsWindowVisible (hWnd=0x10196) returned 0
	[0239.647] IsWindowVisible (hWnd=0x101ae) returned 0
	[0239.647] IsWindowVisible (hWnd=0x101bc) returned 0
	[0239.647] IsWindowVisible (hWnd=0x10196) returned 0
	[0239.647] IsWindowVisible (hWnd=0x101ae) returned 0
	[0239.647] IsWindowVisible (hWnd=0x101bc) returned 0
	[0239.647] malloc (_Size=0x400) returned 0x56a3f0
	[0239.647] GetParent (hWnd=0x101bc) returned 0x10196
	[0239.648] GetParent (hWnd=0x10196) returned 0x10194
	[0239.648] GetParent (hWnd=0x10196) returned 0x10194
	[0239.648] GetParent (hWnd=0x10194) returned 0xa014c
	[0239.648] GetDlgItem (hDlg=0x10194, nIDDlgItem=59648) returned 0x10196
	[0239.648] GetParent (hWnd=0x10196) returned 0x10194
	[0239.648] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x1036, wParam=0x0, lParam=0x4030) returned 0x0
	[0239.649] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.649] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x41c, wParam=0x0, lParam=0x0) returned 0x0
	[0239.649] malloc (_Size=0x60) returned 0x56a3f0
	[0239.649] malloc (_Size=0x18) returned 0x5633d0
	[0239.649] malloc (_Size=0x20) returned 0x1eb690
	[0239.650] malloc (_Size=0x18) returned 0x5633f0
	[0239.650] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0239.650] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.650] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x434, wParam=0x0, lParam=0xbc1d0) returned 0x0
	[0239.651] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x101f, wParam=0x0, lParam=0x0) returned 0x101be
	[0239.651] GetParent (hWnd=0x101be) returned 0x101bc
	[0239.651] SetWindowLongPtrW (hWnd=0x101be, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6bbf00
	[0239.651] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0239.652] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0239.652] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0239.653] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x210, wParam=0x31f20001, lParam=0x101bc) returned 0x0
	[0239.653] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0239.654] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x323b50
	[0239.769] ImageList_Create (cx=32, cy=32, flags=0x21, cInitial=20, cGrow=10) returned 0x3242a0
	[0239.772] GetLastError () returned 0x6
	[0239.772] SetLastError (dwErrCode=0x6) 
	[0239.772] GetLastError () returned 0x6
	[0239.773] SetLastError (dwErrCode=0x6) 
	[0239.773] GetLastError () returned 0x6
	[0239.773] SetLastError (dwErrCode=0x6) 
	[0239.773] GetLastError () returned 0x6
	[0239.773] SetLastError (dwErrCode=0x6) 
	[0239.773] malloc (_Size=0x8) returned 0x1effa0
	[0239.773] malloc (_Size=0x150) returned 0x56a460
	[0239.773] malloc (_Size=0x8) returned 0x4fe0c0
	[0239.773] malloc (_Size=0x8) returned 0x5616b0
	[0239.773] malloc (_Size=0x8) returned 0x1ec970
	[0239.774] malloc (_Size=0x8) returned 0x1ec990
	[0239.774] malloc (_Size=0x8) returned 0x501170
	[0239.774] malloc (_Size=0x8) returned 0x501190
	[0239.774] malloc (_Size=0x8) returned 0x1ecc40
	[0239.774] malloc (_Size=0x8) returned 0x1ecc60
	[0239.774] GetLastError () returned 0x6
	[0239.774] SetLastError (dwErrCode=0x6) 
	[0239.774] DeleteObject (ho=0x20508ad) returned 1
	[0239.774] GetLastError () returned 0x0
	[0239.774] SetLastError (dwErrCode=0x0) 
	[0239.774] GetLastError () returned 0x0
	[0239.774] SetLastError (dwErrCode=0x0) 
	[0239.774] DeleteObject (ho=0x20508ab) returned 1
	[0239.775] GetLastError () returned 0x0
	[0239.775] SetLastError (dwErrCode=0x0) 
	[0239.984] GetLastError () returned 0x0
	[0239.984] SetLastError (dwErrCode=0x0) 
	[0239.985] DeleteObject (ho=0xd0508a9) returned 1
	[0239.985] GetLastError () returned 0x0
	[0239.985] SetLastError (dwErrCode=0x0) 
	[0239.985] GetLastError () returned 0x0
	[0239.985] SetLastError (dwErrCode=0x0) 
	[0239.985] DeleteObject (ho=0x230508a2) returned 1
	[0239.985] GetLastError () returned 0x0
	[0239.985] SetLastError (dwErrCode=0x0) 
	[0239.986] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x1003, wParam=0x1, lParam=0x323b50) returned 0x0
	[0239.986] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x501ca, lParam=0xbc080) returned 0x0
	[0239.988] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x55, wParam=0x501ca, lParam=0x3) returned 0x2
	[0239.988] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0239.989] GetParent (hWnd=0x501ca) returned 0x101bc
	[0239.989] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x210, wParam=0x1, lParam=0x501ca) returned 0x0
	[0239.989] CallNextHookEx (hhk=0x101bf, nCode=4, wParam=0x501ca, lParam=0x0) returned 0x0
	[0239.989] GetParent (hWnd=0x501ca) returned 0x101bc
	[0239.990] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x210, wParam=0x2, lParam=0x501ca) returned 0x0
	[0239.990] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x1208, wParam=0x0, lParam=0x323b50) returned 0x0
	[0239.991] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x1003, wParam=0x0, lParam=0x3242a0) returned 0x0
	[0239.991] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x1208, wParam=0x0, lParam=0x322bf0) returned 0x323b50
	[0239.992] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x1027, wParam=0x0, lParam=0x0) returned 0x0
	[0239.992] GetWindowLongW (hWnd=0x101bc, nIndex=-16) returned 1445986893
	[0239.992] malloc (_Size=0x20) returned 0x1eb6c0
	[0239.992] malloc (_Size=0x18) returned 0x563410
	[0239.992] malloc (_Size=0x18) returned 0x563430
	[0239.992] malloc (_Size=0x20) returned 0x1eb6f0
	[0239.992] malloc (_Size=0x18) returned 0x563450
	[0239.992] malloc (_Size=0x18) returned 0x563470
	[0239.993] CreateWindowExW (dwExStyle=0x200, lpClassName="AfxFrameOrView42u", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10196, hMenu=0x31fc, hInstance=0xff6d0000, lpParam=0xbd1d8) returned 0x601ca
	[0239.993] GetParent (hWnd=0x601ca) returned 0x10012
	[0239.993] SetWindowLongPtrW (hWnd=0x601ca, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0239.994] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x601ca, lParam=0xbc8e0) returned 0x0
	[0239.994] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x81, wParam=0x0, lParam=0xbc9c0) returned 0x1
	[0239.995] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x83, wParam=0x0, lParam=0xbca40) returned 0x0
	[0239.995] GetWindowLongW (hWnd=0x601ca, nIndex=-16) returned 1073741824
	[0239.995] SetWindowLongW (hWnd=0x601ca, nIndex=-16, dwNewLong=1107296256) returned 1073741824
	[0239.996] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0xbc400) returned 0x0
	[0239.997] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0xbc400) returned 0x0
	[0239.997] malloc (_Size=0x400) returned 0x56a5c0
	[0239.997] malloc (_Size=0x400) returned 0x56a5c0
	[0239.997] malloc (_Size=0x400) returned 0x56a5c0
	[0239.998] malloc (_Size=0x400) returned 0x56a5c0
	[0239.998] malloc (_Size=0x400) returned 0x56a5c0
	[0239.998] malloc (_Size=0x400) returned 0x56a5c0
	[0239.998] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x1, wParam=0x0, lParam=0xbc9c0) returned 0x0
	[0239.998] IsWindowVisible (hWnd=0x10196) returned 0
	[0239.998] IsWindowVisible (hWnd=0x101ae) returned 0
	[0239.998] IsWindowVisible (hWnd=0x101bc) returned 0
	[0239.998] IsWindowVisible (hWnd=0x601ca) returned 0
	[0239.998] IsWindowVisible (hWnd=0x10196) returned 0
	[0239.998] IsWindowVisible (hWnd=0x101ae) returned 0
	[0239.998] IsWindowVisible (hWnd=0x101bc) returned 0
	[0239.998] IsWindowVisible (hWnd=0x601ca) returned 0
	[0239.998] IsWindowVisible (hWnd=0x10196) returned 0
	[0239.998] IsWindowVisible (hWnd=0x101ae) returned 0
	[0239.998] IsWindowVisible (hWnd=0x101bc) returned 0
	[0239.998] IsWindowVisible (hWnd=0x601ca) returned 0
	[0239.999] malloc (_Size=0x60) returned 0x56a5c0
	[0239.999] malloc (_Size=0x60) returned 0x56a630
	[0239.999] malloc (_Size=0x60) returned 0x56a6a0
	[0240.006] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101ce, lParam=0xbba50) returned 0x0
	[0240.006] GetParent (hWnd=0x101ce) returned 0x601ca
	[0240.007] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x210, wParam=0x1, lParam=0x101ce) returned 0x0
	[0240.007] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101d0, lParam=0xbbaa0) returned 0x0
	[0240.011] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101d4, lParam=0xbb770) returned 0x0
	[0240.012] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101d6, lParam=0xbb6d0) returned 0x0
	[0240.112] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x201b4, lParam=0xbb770) returned 0x0
	[0240.112] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101f0, lParam=0xbb6d0) returned 0x0
	[0240.115] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x3f10090
	[0240.115] GetWindowLongW (hWnd=0x601ca, nIndex=-20) returned 512
	[0240.116] GetLastError () returned 0x6
	[0240.116] SetLastError (dwErrCode=0x6) 
	[0240.116] GetLastError () returned 0x6
	[0240.116] SetLastError (dwErrCode=0x6) 
	[0240.116] GetLastError () returned 0x6
	[0240.116] SetLastError (dwErrCode=0x6) 
	[0240.116] DeleteObject (ho=0x305086b) returned 1
	[0240.116] GetLastError () returned 0x0
	[0240.116] SetLastError (dwErrCode=0x0) 
	[0240.117] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.117] GetParent (hWnd=0x101ce) returned 0x601ca
	[0240.117] MoveWindow (hWnd=0x101ce, X=0, Y=21, nWidth=0, nHeight=-21, bRepaint=1) returned 1
	[0240.118] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.119] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x210, wParam=0x31fc0001, lParam=0x601ca) returned 0x0
	[0240.119] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.120] malloc (_Size=0x20) returned 0x1eb720
	[0240.120] malloc (_Size=0x18) returned 0x563490
	[0240.120] malloc (_Size=0x20) returned 0x1eb750
	[0240.120] malloc (_Size=0x18) returned 0x5634b0
	[0240.120] malloc (_Size=0x20) returned 0x1eb780
	[0240.120] malloc (_Size=0x18) returned 0x5634d0
	[0240.120] SetWindowPos (hWnd=0x601ca, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0240.120] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x46, wParam=0x0, lParam=0xbd170) returned 0x0
	[0240.121] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.121] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x47, wParam=0x0, lParam=0xbd170) returned 0x0
	[0240.121] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="AMCCustomTab", lpWndClass=0xbd120 | out: lpWndClass=0xbd120) returned 0
	[0240.122] RegisterClassW (lpWndClass=0xbd1f0) returned 0xc165
	[0240.122] CreateWindowExW (dwExStyle=0x0, lpClassName="AMCCustomTab", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10196, hMenu=0x31fa, hInstance=0xff6d0000, lpParam=0x0) returned 0x101f2
	[0240.122] GetParent (hWnd=0x101f2) returned 0x10012
	[0240.122] SetWindowLongPtrW (hWnd=0x101f2, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0240.122] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101f2, lParam=0xbc9b0) returned 0x0
	[0240.123] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x81, wParam=0x0, lParam=0xbca90) returned 0x1
	[0240.123] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x83, wParam=0x0, lParam=0xbcb00) returned 0x0
	[0240.124] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x1, wParam=0x0, lParam=0xbca90) returned 0x0
	[0240.124] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.125] GetDC (hWnd=0x101f2) returned 0x8010666
	[0240.125] malloc (_Size=0x88) returned 0x4ff870
	[0240.125] malloc (_Size=0x100) returned 0x567460
	[0240.125] SelectObject (hdc=0x8010666, h=0x0) returned 0x0
	[0240.125] SelectObject (hdc=0x8010666, h=0x0) returned 0x0
	[0240.125] free (_Block=0x4ff870) 
	[0240.125] free (_Block=0x567460) 
	[0240.125] ReleaseDC (hWnd=0x101f2, hDC=0x8010666) returned 1
	[0240.126] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.126] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x210, wParam=0x31fa0001, lParam=0x101f2) returned 0x0
	[0240.127] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.127] GetDC (hWnd=0x0) returned 0x1401007f
	[0240.127] malloc (_Size=0x88) returned 0x4ff870
	[0240.127] malloc (_Size=0x100) returned 0x567460
	[0240.127] SelectObject (hdc=0x1401007f, h=0x40a086e) returned 0x18a002e
	[0240.128] SelectObject (hdc=0x1401007f, h=0x18a002e) returned 0x40a086e
	[0240.128] free (_Block=0x4ff870) 
	[0240.128] free (_Block=0x567460) 
	[0240.128] ReleaseDC (hWnd=0x0, hDC=0x1401007f) returned 1
	[0240.128] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101f4, lParam=0xbca70) returned 0x0
	[0240.129] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x55, wParam=0x101f4, lParam=0x3) returned 0x2
	[0240.130] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0240.130] GetParent (hWnd=0x101f4) returned 0x101f2
	[0240.130] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x210, wParam=0x1, lParam=0x101f4) returned 0x0
	[0240.131] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x101f6, lParam=0xbc970) returned 0x0
	[0240.131] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x55, wParam=0x101f6, lParam=0x3) returned 0x2
	[0240.132] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0240.133] GetParent (hWnd=0x101f6) returned 0x101f2
	[0240.133] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x210, wParam=0x10001, lParam=0x101f6) returned 0x0
	[0240.134] GetParent (hWnd=0x101f4) returned 0x101f2
	[0240.134] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x111, wParam=0x4000000, lParam=0x101f4) returned 0x0
	[0240.134] GetParent (hWnd=0x101f4) returned 0x101f2
	[0240.134] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x111, wParam=0x3000000, lParam=0x101f4) returned 0x0
	[0240.135] IsWindowVisible (hWnd=0x10196) returned 0
	[0240.135] IsWindowVisible (hWnd=0x101ae) returned 0
	[0240.135] IsWindowVisible (hWnd=0x101bc) returned 0
	[0240.135] IsWindowVisible (hWnd=0x601ca) returned 0
	[0240.135] IsWindowVisible (hWnd=0x101f2) returned 0
	[0240.135] IsWindowVisible (hWnd=0x10196) returned 0
	[0240.135] IsWindowVisible (hWnd=0x101ae) returned 0
	[0240.135] IsWindowVisible (hWnd=0x101bc) returned 0
	[0240.135] IsWindowVisible (hWnd=0x601ca) returned 0
	[0240.135] IsWindowVisible (hWnd=0x101f2) returned 0
	[0240.135] IsWindowVisible (hWnd=0x10196) returned 0
	[0240.135] IsWindowVisible (hWnd=0x101ae) returned 0
	[0240.135] IsWindowVisible (hWnd=0x101bc) returned 0
	[0240.135] IsWindowVisible (hWnd=0x601ca) returned 0
	[0240.135] IsWindowVisible (hWnd=0x101f2) returned 0
	[0240.135] GetParent (hWnd=0x10196) returned 0x10194
	[0240.135] GetParent (hWnd=0x10194) returned 0xa014c
	[0240.135] SetWindowPos (hWnd=0x101bc, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0240.136] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x46, wParam=0x0, lParam=0xbcf80) returned 0x0
	[0240.136] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.137] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x47, wParam=0x0, lParam=0xbcf80) returned 0x0
	[0240.138] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0240.138] malloc (_Size=0xf8) returned 0x56a710
	[0240.138] malloc (_Size=0x18) returned 0x5634f0
	[0240.138] malloc (_Size=0x20) returned 0x56a840
	[0240.138] malloc (_Size=0x38) returned 0x4feae0
	[0240.138] malloc (_Size=0x28) returned 0x56a870
	[0240.139] malloc (_Size=0x28) returned 0x56a8a0
	[0240.139] malloc (_Size=0x20) returned 0x56a8d0
	[0240.139] malloc (_Size=0x18) returned 0x563510
	[0240.139] malloc (_Size=0x20) returned 0x56a900
	[0240.139] malloc (_Size=0x18) returned 0x563530
	[0240.139] malloc (_Size=0x20) returned 0x56a930
	[0240.139] malloc (_Size=0x18) returned 0x563550
	[0240.139] malloc (_Size=0x50) returned 0x5623f0
	[0240.139] malloc (_Size=0x18) returned 0x563570
	[0240.139] malloc (_Size=0x28) returned 0x56a960
	[0240.139] malloc (_Size=0x28) returned 0x56a990
	[0240.139] malloc (_Size=0x28) returned 0x56a9c0
	[0240.139] malloc (_Size=0x28) returned 0x56a9f0
	[0240.139] malloc (_Size=0x28) returned 0x56aa20
	[0240.139] malloc (_Size=0x28) returned 0x56aa50
	[0240.139] malloc (_Size=0x28) returned 0x56aa80
	[0240.139] malloc (_Size=0x28) returned 0x56aab0
	[0240.139] malloc (_Size=0x20) returned 0x56aae0
	[0240.139] malloc (_Size=0x18) returned 0x563590
	[0240.139] GetParent (hWnd=0x10194) returned 0xa014c
	[0240.140] GetParent (hWnd=0xa014c) returned 0x20164
	[0240.140] GetParent (hWnd=0x20164) returned 0x0
	[0240.140] GetParent (hWnd=0xa014c) returned 0x20164
	[0240.140] malloc (_Size=0x20) returned 0x56ab10
	[0240.140] malloc (_Size=0x18) returned 0x5635b0
	[0240.140] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.141] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.142] DefMDIChildProcW (hWnd=0x10194, uMsg=0x210, wParam=0xffffffffe9000001, lParam=0x10196) returned 0x0
	[0240.142] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.143] GetWindowLongW (hWnd=0x10196, nIndex=-20) returned 0
	[0240.143] PostMessageW (hWnd=0x10194, Msg=0x362, wParam=0xe001, lParam=0x0) returned 1
	[0240.143] GetWindowLongW (hWnd=0x10194, nIndex=-16) returned 1188020224
	[0240.143] GetClientRect (in: hWnd=0x10194, lpRect=0xbdff8 | out: lpRect=0xbdff8) returned 1
	[0240.143] BeginDeferWindowPos (nNumWindows=8) returned 0x301fb
	[0240.143] GetTopWindow (hWnd=0x10194) returned 0x10196
	[0240.143] GetDlgCtrlID (hWnd=0x10196) returned 59648
	[0240.143] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x0
	[0240.143] GetParent (hWnd=0x10196) returned 0x10194
	[0240.143] GetWindowLongW (hWnd=0x10196, nIndex=-20) returned 0
	[0240.143] GetWindowLongW (hWnd=0x10196, nIndex=-16) returned 1375731712
	[0240.143] AdjustWindowRectEx (in: lpRect=0xbdff8, dwStyle=0x52000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xbdff8) returned 1
	[0240.143] GetParent (hWnd=0x10196) returned 0x10194
	[0240.143] GetWindowRect (in: hWnd=0x10196, lpRect=0xbdfb0 | out: lpRect=0xbdfb0) returned 1
	[0240.143] ScreenToClient (in: hWnd=0x10194, lpPoint=0xbdfb0 | out: lpPoint=0xbdfb0) returned 1
	[0240.143] ScreenToClient (in: hWnd=0x10194, lpPoint=0xbdfb8 | out: lpPoint=0xbdfb8) returned 1
	[0240.143] EqualRect (lprc1=0xbdfb0, lprc2=0xbdff8) returned 0
	[0240.143] DeferWindowPos (hWinPosInfo=0x301fb, hWnd=0x10196, hWndInsertAfter=0x0, x=0, y=0, cx=870, cy=323, uFlags=0x14) returned 0x301fb
	[0240.143] EndDeferWindowPos (hWinPosInfo=0x301fb) returned 1
	[0240.144] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x46, wParam=0x0, lParam=0xbdf90) returned 0x0
	[0240.144] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x83, wParam=0x1, lParam=0xbdf60) returned 0x0
	[0240.145] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x47, wParam=0x0, lParam=0xbdf90) returned 0x0
	[0240.145] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x5, wParam=0x0, lParam=0x1430366) returned 0x0
	[0240.145] GetWindowLongW (hWnd=0x101bc, nIndex=-20) returned 512
	[0240.146] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x46, wParam=0x0, lParam=0xbd340) returned 0x0
	[0240.146] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x83, wParam=0x1, lParam=0xbd310) returned 0x0
	[0240.147] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x46, wParam=0x0, lParam=0xbd340) returned 0x0
	[0240.147] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x83, wParam=0x1, lParam=0xbd310) returned 0x0
	[0240.148] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x46, wParam=0x0, lParam=0xbd340) returned 0x0
	[0240.148] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x83, wParam=0x1, lParam=0xbd310) returned 0x0
	[0240.149] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x46, wParam=0x0, lParam=0xbd340) returned 0x0
	[0240.149] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x46, wParam=0x0, lParam=0xbd340) returned 0x0
	[0240.150] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x83, wParam=0x1, lParam=0xbd310) returned 0x0
	[0240.150] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x47, wParam=0x0, lParam=0xbd340) returned 0x0
	[0240.151] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x3, wParam=0x0, lParam=0x20002) returned 0x0
	[0240.151] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x5, wParam=0x0, lParam=0x13f00d5) returned 0x0
	[0240.152] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x47, wParam=0x0, lParam=0xbd340) returned 0x0
	[0240.152] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x3, wParam=0x0, lParam=0x2028f) returned 0x0
	[0240.153] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x5, wParam=0x0, lParam=0x13f00d5) returned 0x0
	[0240.153] MoveWindow (hWnd=0x101ce, X=0, Y=21, nWidth=213, nHeight=298, bRepaint=1) returned 1
	[0240.358] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x47, wParam=0x0, lParam=0xbd340) returned 0x0
	[0240.358] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x3, wParam=0x0, lParam=0x100dd) returned 0x0
	[0240.360] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x5, wParam=0x0, lParam=0x14101ac) returned 0x0
	[0240.360] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x47, wParam=0x0, lParam=0xbd340) returned 0x0
	[0240.361] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x47, wParam=0x0, lParam=0xbd340) returned 0x0
	[0240.361] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x1205, wParam=0x0, lParam=0xbc9f0) returned 0x1
	[0240.362] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x46, wParam=0x0, lParam=0xbc950) returned 0x0
	[0240.362] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x83, wParam=0x1, lParam=0xbc920) returned 0x0
	[0240.363] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x47, wParam=0x0, lParam=0xbc950) returned 0x0
	[0240.363] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x5, wParam=0x0, lParam=0x1801aa) returned 0x0
	[0240.364] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x46, wParam=0x0, lParam=0xbc9e0) returned 0x0
	[0240.365] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x83, wParam=0x1, lParam=0xbc9b0) returned 0x0
	[0240.365] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x47, wParam=0x0, lParam=0xbc9e0) returned 0x0
	[0240.366] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x5, wParam=0x0, lParam=0x12e01aa) returned 0x0
	[0240.366] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.366] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x434, wParam=0x0, lParam=0xbb7f0) returned 0x0
	[0240.366] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0240.367] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0240.368] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x46, wParam=0x0, lParam=0xbc9e0) returned 0x0
	[0240.368] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x83, wParam=0x1, lParam=0xbc9b0) returned 0x0
	[0240.369] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x47, wParam=0x0, lParam=0xbc9e0) returned 0x0
	[0240.369] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x5, wParam=0x0, lParam=0x13f01aa) returned 0x0
	[0240.369] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.369] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x434, wParam=0x0, lParam=0xbb7f0) returned 0x0
	[0240.369] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0240.370] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0240.371] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x1205, wParam=0x0, lParam=0xbcac0) returned 0x1
	[0240.371] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x46, wParam=0x0, lParam=0xbca20) returned 0x0
	[0240.372] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x3, wParam=0x0, lParam=0x200de) returned 0x0
	[0240.372] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x5, wParam=0x0, lParam=0x13f01aa) returned 0x0
	[0240.372] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.372] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x434, wParam=0x0, lParam=0xbc150) returned 0x0
	[0240.373] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0240.373] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0240.374] CreateWindowExW (dwExStyle=0x0, lpClassName="msctls_statusbar32", lpWindowName="Ready", dwStyle=0x5400014a, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10194, hMenu=0x1003, hInstance=0xff6d0000, lpParam=0x0) returned 0x201f8
	[0240.374] GetParent (hWnd=0x201f8) returned 0x10012
	[0240.374] SetWindowLongPtrW (hWnd=0x201f8, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc65230c
	[0240.374] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x201f8, lParam=0xbd890) returned 0x0
	[0240.375] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x81, wParam=0x0, lParam=0xbd970) returned 0x1
	[0240.375] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x83, wParam=0x0, lParam=0xbd9f0) returned 0x0
	[0240.376] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x1, wParam=0x0, lParam=0xbd950) returned 0x0
	[0240.376] DefMDIChildProcW (hWnd=0x10194, uMsg=0x55, wParam=0x201f8, lParam=0x3) returned 0x2
	[0240.377] DefMDIChildProcW (hWnd=0x10194, uMsg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0240.377] CreateWindowExW (dwExStyle=0x0, lpClassName="msctls_progress32", lpWindowName=0x0, dwStyle=0x54000001, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x201f8, hMenu=0x1000, hInstance=0xff6d0000, lpParam=0x0) returned 0x10212
	[0240.378] GetParent (hWnd=0x10212) returned 0x10012
	[0240.378] SetWindowLongPtrW (hWnd=0x10212, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6cae1c
	[0240.378] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10212, lParam=0xbcbe0) returned 0x0
	[0240.378] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x81, wParam=0x0, lParam=0xbccc0) returned 0x1
	[0240.379] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0xbc6f0) returned 0x0
	[0240.379] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0xbc6f0) returned 0x0
	[0240.380] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x83, wParam=0x0, lParam=0xbcd40) returned 0x0
	[0240.381] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x1, wParam=0x0, lParam=0xbccc0) returned 0x0
	[0240.381] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.382] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.382] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x210, wParam=0x10000001, lParam=0x10212) returned 0x0
	[0240.383] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.383] CreateWindowExW (dwExStyle=0x0, lpClassName="STATIC", lpWindowName="", dwStyle=0x5400000b, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x201f8, hMenu=0x1001, hInstance=0xff6d0000, lpParam=0x0) returned 0x10214
	[0240.383] GetParent (hWnd=0x10214) returned 0x10012
	[0240.383] SetWindowLongPtrW (hWnd=0x10214, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6d61b4
	[0240.383] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10214, lParam=0xbcc00) returned 0x0
	[0240.384] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x81, wParam=0x0, lParam=0xbcce0) returned 0x1
	[0240.384] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x83, wParam=0x0, lParam=0xbcd40) returned 0x0
	[0240.385] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x1, wParam=0x0, lParam=0xbccd0) returned 0x0
	[0240.385] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.386] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.387] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x210, wParam=0x10010001, lParam=0x10214) returned 0x0
	[0240.387] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.387] GetWindowLongW (hWnd=0x10212, nIndex=-20) returned 0
	[0240.388] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x30, wParam=0x100a087f, lParam=0x0) returned 0x0
	[0240.388] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.389] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x46, wParam=0x0, lParam=0xbd100) returned 0x0
	[0240.389] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x83, wParam=0x1, lParam=0xbd0d0) returned 0x0
	[0240.390] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.390] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x47, wParam=0x0, lParam=0xbd100) returned 0x0
	[0240.391] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x5, wParam=0x0, lParam=0x170000) returned 0x0
	[0240.391] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x46, wParam=0x0, lParam=0xbbff0) returned 0x0
	[0240.392] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.392] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x40a, wParam=0x0, lParam=0xbc410) returned 0x1
	[0240.393] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x40a, wParam=0x1, lParam=0xbc3f0) returned 0x0
	[0240.393] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x40a, wParam=0x2, lParam=0xbc400) returned 0x0
	[0240.393] SetWindowPos (hWnd=0x10212, hWndInsertAfter=0x0, X=4, Y=4, cx=-121272495, cy=2042, uFlags=0x224) returned 1
	[0240.394] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x46, wParam=0x0, lParam=0xbc320) returned 0x0
	[0240.394] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x83, wParam=0x1, lParam=0xbc2f0) returned 0x0
	[0240.395] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.395] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x47, wParam=0x0, lParam=0xbc320) returned 0x0
	[0240.396] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x3, wParam=0x0, lParam=0x40004) returned 0x0
	[0240.396] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x5, wParam=0x0, lParam=0x7fa0000) returned 0x0
	[0240.396] SetWindowPos (hWnd=0x10214, hWndInsertAfter=0x0, X=-121272487, Y=4, cx=-67, cy=-4, uFlags=0x224) returned 1
	[0240.397] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0xbc320) returned 0x0
	[0240.397] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x83, wParam=0x1, lParam=0xbc2f0) returned 0x0
	[0240.398] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.398] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x47, wParam=0x0, lParam=0xbc320) returned 0x0
	[0240.398] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x3, wParam=0x0, lParam=0x48000) returned 0x0
	[0240.399] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x40a, wParam=0x0, lParam=0xbd520) returned 0x1
	[0240.400] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x40a, wParam=0x1, lParam=0xbd500) returned 0x0
	[0240.400] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x40a, wParam=0x2, lParam=0xbd510) returned 0x0
	[0240.400] SetWindowPos (hWnd=0x10212, hWndInsertAfter=0x0, X=4, Y=4, cx=-121272495, cy=2042, uFlags=0x224) returned 1
	[0240.401] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x46, wParam=0x0, lParam=0xbd430) returned 0x0
	[0240.401] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x83, wParam=0x1, lParam=0xbd400) returned 0x0
	[0240.402] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.402] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x47, wParam=0x0, lParam=0xbd430) returned 0x0
	[0240.402] SetWindowPos (hWnd=0x10214, hWndInsertAfter=0x0, X=-121272487, Y=4, cx=-782452, cy=-5, uFlags=0x224) returned 1
	[0240.403] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0xbd430) returned 0x0
	[0240.488] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x83, wParam=0x1, lParam=0xbd400) returned 0x0
	[0240.489] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.490] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x47, wParam=0x0, lParam=0xbd430) returned 0x0
	[0240.490] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.491] DefMDIChildProcW (hWnd=0x10194, uMsg=0x210, wParam=0x10030001, lParam=0x201f8) returned 0x0
	[0240.492] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.492] GetDC (hWnd=0x201f8) returned 0xc01083a
	[0240.492] malloc (_Size=0x88) returned 0x4ff870
	[0240.492] malloc (_Size=0x100) returned 0x567460
	[0240.492] lstrlenW (lpString="") returned 0
	[0240.492] lstrlenW (lpString="                                ") returned 32
	[0240.492] malloc (_Size=0x4e) returned 0x562390
	[0240.492] lstrlenW (lpString="") returned 0
	[0240.493] free (_Block=0x562390) 
	[0240.493] lstrlenW (lpString="                    ") returned 20
	[0240.493] malloc (_Size=0x36) returned 0x4fe4a0
	[0240.493] lstrlenW (lpString="") returned 0
	[0240.493] free (_Block=0x4fe4a0) 
	[0240.493] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x404, wParam=0x3, lParam=0xbe080) returned 0x1
	[0240.493] free (_Block=0x4ff870) 
	[0240.493] free (_Block=0x567460) 
	[0240.493] ReleaseDC (hWnd=0x201f8, hDC=0xc01083a) returned 1
	[0240.494] malloc (_Size=0x100) returned 0x567460
	[0240.494] malloc (_Size=0x100) returned 0x567570
	[0240.494] malloc (_Size=0x58) returned 0x562390
	[0240.494] malloc (_Size=0x28) returned 0x56ab40
	[0240.494] FindResourceW (hModule=0xff6d0000, lpName=0xa2, lpType=0x4) returned 0x150718
	[0240.495] malloc (_Size=0x18) returned 0x5635d0
	[0240.495] malloc (_Size=0x18) returned 0x5635f0
	[0240.495] GetWindowLongW (hWnd=0x10194, nIndex=-16) returned 1188020224
	[0240.495] lstrlenW (lpString="&Close\x09Ctrl+F4") returned 14
	[0240.495] malloc (_Size=0x2a) returned 0x4fe4a0
	[0240.496] lstrlenW (lpString="Nex&t\x09Ctrl+F6") returned 13
	[0240.496] malloc (_Size=0x28) returned 0x56ab70
	[0240.496] free (_Block=0x56ab70) 
	[0240.496] free (_Block=0x4fe4a0) 
	[0240.496] DestroyMenu (hMenu=0x201df) returned 1
	[0240.496] GetParent (hWnd=0x10196) returned 0x10194
	[0240.497] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x46, wParam=0x0, lParam=0xbe030) returned 0x0
	[0240.497] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x83, wParam=0x1, lParam=0xbe000) returned 0x0
	[0240.498] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x46, wParam=0x0, lParam=0xbe030) returned 0x0
	[0240.498] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x83, wParam=0x1, lParam=0xbe000) returned 0x0
	[0240.499] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x47, wParam=0x0, lParam=0xbe030) returned 0x0
	[0240.500] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x3, wParam=0x0, lParam=0x12c0000) returned 0x0
	[0240.500] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x407, wParam=0x0, lParam=0xbd280) returned 0x1
	[0240.501] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x404, wParam=0x3, lParam=0xbd290) returned 0x1
	[0240.501] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x5, wParam=0x0, lParam=0x170366) returned 0x0
	[0240.501] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x46, wParam=0x0, lParam=0xbcf20) returned 0x0
	[0240.502] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.502] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x40a, wParam=0x0, lParam=0xbd340) returned 0x1
	[0240.503] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x40a, wParam=0x1, lParam=0xbd320) returned 0x1
	[0240.503] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x40a, wParam=0x2, lParam=0xbd330) returned 0x1
	[0240.503] SetWindowPos (hWnd=0x10212, hWndInsertAfter=0x0, X=654, Y=4, cx=127, cy=17, uFlags=0x224) returned 1
	[0240.504] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x46, wParam=0x0, lParam=0xbd250) returned 0x0
	[0240.504] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x83, wParam=0x1, lParam=0xbd220) returned 0x0
	[0240.505] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.505] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x47, wParam=0x0, lParam=0xbd250) returned 0x0
	[0240.506] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x3, wParam=0x0, lParam=0x4028e) returned 0x0
	[0240.506] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10212, Msg=0x5, wParam=0x0, lParam=0x11007f) returned 0x0
	[0240.506] SetWindowPos (hWnd=0x10214, hWndInsertAfter=0x0, X=785, Y=4, cx=65, cy=17, uFlags=0x224) returned 1
	[0240.507] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0xbd250) returned 0x0
	[0240.507] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x83, wParam=0x1, lParam=0xbd220) returned 0x0
	[0240.508] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.508] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x47, wParam=0x0, lParam=0xbd250) returned 0x0
	[0240.509] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x3, wParam=0x0, lParam=0x40311) returned 0x0
	[0240.509] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10214, Msg=0x5, wParam=0x0, lParam=0x110041) returned 0x0
	[0240.510] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x47, wParam=0x0, lParam=0xbe030) returned 0x0
	[0240.510] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x5, wParam=0x0, lParam=0x12c0366) returned 0x0
	[0240.510] GetWindowLongW (hWnd=0x101bc, nIndex=-20) returned 512
	[0240.511] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x46, wParam=0x0, lParam=0xbd3e0) returned 0x0
	[0240.511] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x83, wParam=0x1, lParam=0xbd3b0) returned 0x0
	[0240.512] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x46, wParam=0x0, lParam=0xbd3e0) returned 0x0
	[0240.512] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x83, wParam=0x1, lParam=0xbd3b0) returned 0x0
	[0240.513] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x46, wParam=0x0, lParam=0xbd3e0) returned 0x0
	[0240.513] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x83, wParam=0x1, lParam=0xbd3b0) returned 0x0
	[0240.514] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x101f2, Msg=0x46, wParam=0x0, lParam=0xbd3e0) returned 0x0
	[0240.514] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x46, wParam=0x0, lParam=0xbd3e0) returned 0x0
	[0240.515] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x83, wParam=0x1, lParam=0xbd3b0) returned 0x0
	[0240.515] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x47, wParam=0x0, lParam=0xbd3e0) returned 0x0
	[0240.516] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x5, wParam=0x0, lParam=0x12800d5) returned 0x0
	[0240.516] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x47, wParam=0x0, lParam=0xbd3e0) returned 0x0
	[0240.517] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x601ca, Msg=0x5, wParam=0x0, lParam=0x12800d5) returned 0x0
	[0240.517] MoveWindow (hWnd=0x101ce, X=0, Y=21, nWidth=213, nHeight=275, bRepaint=1) returned 1
	[0240.518] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x47, wParam=0x0, lParam=0xbd3e0) returned 0x0
	[0240.519] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x2018a, Msg=0x5, wParam=0x0, lParam=0x12a01ac) returned 0x0
	[0240.519] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x47, wParam=0x0, lParam=0xbd3e0) returned 0x0
	[0240.520] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x1205, wParam=0x0, lParam=0xbca90) returned 0x1
	[0240.520] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x46, wParam=0x0, lParam=0xbc9f0) returned 0x0
	[0240.522] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x5, wParam=0x0, lParam=0x12801aa) returned 0x0
	[0240.522] GetPropW (hWnd=0x201c0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.522] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x201c0, Msg=0x434, wParam=0x0, lParam=0xbc1f0) returned 0x0
	[0240.522] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x101bc, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0240.523] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x101be, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0240.524] DefMDIChildProcW (hWnd=0x10194, uMsg=0x7c, wParam=0xfffffffffffffff0, lParam=0xbe150) returned 0x0
	[0240.525] DefMDIChildProcW (hWnd=0x10194, uMsg=0x7d, wParam=0xfffffffffffffff0, lParam=0xbe150) returned 0x0
	[0240.525] DefMDIChildProcW (hWnd=0x10194, uMsg=0xd, wParam=0x104, lParam=0x1e29bb0) returned 0x0
	[0240.526] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0xbd9c8) returned 0x0
	[0240.526] GetParent (hWnd=0x10196) returned 0x10194
	[0240.526] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x201f8, Msg=0x46, wParam=0x0, lParam=0xbe0f0) returned 0x0
	[0240.527] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10196, Msg=0x46, wParam=0x0, lParam=0xbe0f0) returned 0x0
	[0240.527] GetParent (hWnd=0x10194) returned 0xa014c
	[0240.527] GetParent (hWnd=0xa014c) returned 0x20164
	[0240.527] GetParent (hWnd=0x20164) returned 0x0
	[0240.527] SendMessageW (hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0240.552] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0240.552] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0240.552] GetWindowTextW (in: hWnd=0x20164, lpString=0xbdf40, nMaxCount=256 | out: lpString="Microsoft Management Console") returned 28
	[0240.553] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0xd, wParam=0x100, lParam=0xbdf40) returned 0x1c
	[0240.554] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x210, wParam=0xffffffffff000001, lParam=0x10194) returned 0x0
	[0240.555] free (_Block=0x1eadb0) 
	[0240.555] SetCursor (hCursor=0x10007) returned 0x10007
	[0240.557] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0240.635] malloc (_Size=0x20) returned 0x56ab70
	[0240.635] malloc (_Size=0x20) returned 0x56aba0
	[0240.635] malloc (_Size=0x60) returned 0x56b1d0
	[0240.635] malloc (_Size=0x8e) returned 0x56b240
	[0240.635] malloc (_Size=0x8) returned 0x56b1d0
	[0240.635] malloc (_Size=0x10) returned 0x563610
	[0240.636] malloc (_Size=0x48) returned 0x1ebf30
	[0240.636] malloc (_Size=0x50) returned 0x562330
	[0240.636] malloc (_Size=0x30) returned 0x4fe4a0
	[0240.636] malloc (_Size=0x48) returned 0x1ebee0
	[0240.636] malloc (_Size=0x30) returned 0x4feaa0
	[0240.636] malloc (_Size=0x48) returned 0x1ebdf0
	[0240.636] malloc (_Size=0x20) returned 0x56ab70
	[0240.636] malloc (_Size=0x48) returned 0x1ebbc0
	[0240.636] malloc (_Size=0x40) returned 0x1ebda0
	[0240.636] malloc (_Size=0x48) returned 0x1ebb70
	[0240.636] malloc (_Size=0x20) returned 0x56abd0
	[0240.636] malloc (_Size=0x30) returned 0x4feb20
	[0240.636] malloc (_Size=0x50) returned 0x5622d0
	[0240.636] malloc (_Size=0x30) returned 0x4feb60
	[0240.636] malloc (_Size=0x30) returned 0x4feb20
	[0240.636] malloc (_Size=0x20) returned 0x56ac00
	[0240.636] malloc (_Size=0x50) returned 0x562270
	[0240.636] malloc (_Size=0x20) returned 0x56ac30
	[0240.636] malloc (_Size=0x30) returned 0x4feba0
	[0240.636] malloc (_Size=0x40) returned 0x1ebe90
	[0240.636] malloc (_Size=0x50) returned 0x562210
	[0240.637] malloc (_Size=0x40) returned 0x1ebe40
	[0240.637] malloc (_Size=0x30) returned 0x4febe0
	[0240.637] malloc (_Size=0x20) returned 0x56ac00
	[0240.637] malloc (_Size=0x50) returned 0x5621b0
	[0240.637] malloc (_Size=0x20) returned 0x56ac60
	[0240.637] malloc (_Size=0x30) returned 0x4fec20
	[0240.637] malloc (_Size=0x48) returned 0x1ebe90
	[0240.637] malloc (_Size=0x48) returned 0x1ebc10
	[0240.637] malloc (_Size=0x30) returned 0x4fec60
	[0240.637] malloc (_Size=0x48) returned 0x1ebfd0
	[0240.637] malloc (_Size=0x20) returned 0x56ac00
	[0240.637] malloc (_Size=0x48) returned 0x1ec020
	[0240.637] malloc (_Size=0x40) returned 0x1ec070
	[0240.637] malloc (_Size=0x48) returned 0x1ec0c0
	[0240.637] malloc (_Size=0x20) returned 0x56ac90
	[0240.637] malloc (_Size=0x50) returned 0x562150
	[0240.637] malloc (_Size=0x30) returned 0x4feca0
	[0240.637] malloc (_Size=0x30) returned 0x4fece0
	[0240.637] malloc (_Size=0x50) returned 0x5620f0
	[0240.637] malloc (_Size=0x30) returned 0x4fed20
	[0240.637] malloc (_Size=0x30) returned 0x4fece0
	[0240.637] malloc (_Size=0x20) returned 0x56acc0
	[0240.638] malloc (_Size=0x50) returned 0x562090
	[0240.638] malloc (_Size=0x20) returned 0x56acf0
	[0240.638] malloc (_Size=0x30) returned 0x4fed60
	[0240.638] malloc (_Size=0x40) returned 0x1ec110
	[0240.638] malloc (_Size=0x50) returned 0x562750
	[0240.638] malloc (_Size=0x40) returned 0x1ec160
	[0240.638] malloc (_Size=0x30) returned 0x4feda0
	[0240.638] malloc (_Size=0x20) returned 0x56acc0
	[0240.638] malloc (_Size=0x50) returned 0x562b10
	[0240.638] malloc (_Size=0x20) returned 0x56ad20
	[0240.638] malloc (_Size=0x30) returned 0x4fede0
	[0240.638] malloc (_Size=0xb0) returned 0x56b1d0
	[0240.638] malloc (_Size=0x48) returned 0x1ec110
	[0240.638] malloc (_Size=0x48) returned 0x1ec1b0
	[0240.638] malloc (_Size=0x30) returned 0x4fee20
	[0240.638] malloc (_Size=0x48) returned 0x1ec200
	[0240.638] malloc (_Size=0x20) returned 0x56acc0
	[0240.638] malloc (_Size=0x48) returned 0x1ec250
	[0240.638] malloc (_Size=0x40) returned 0x1ec2a0
	[0240.638] malloc (_Size=0x48) returned 0x1ec2f0
	[0240.638] malloc (_Size=0x20) returned 0x56ad50
	[0240.638] malloc (_Size=0x50) returned 0x562ab0
	[0240.638] malloc (_Size=0x30) returned 0x4fee60
	[0240.638] malloc (_Size=0x30) returned 0x4feea0
	[0240.639] malloc (_Size=0x50) returned 0x562a50
	[0240.639] malloc (_Size=0x30) returned 0x4feee0
	[0240.639] malloc (_Size=0x30) returned 0x4feea0
	[0240.639] malloc (_Size=0x20) returned 0x56ad80
	[0240.639] malloc (_Size=0x50) returned 0x5629f0
	[0240.639] malloc (_Size=0x20) returned 0x56adb0
	[0240.639] malloc (_Size=0x30) returned 0x4fef20
	[0240.639] malloc (_Size=0x40) returned 0x1ec340
	[0240.639] malloc (_Size=0x50) returned 0x562990
	[0240.639] malloc (_Size=0x40) returned 0x1ec390
	[0240.639] malloc (_Size=0x30) returned 0x4fef60
	[0240.639] malloc (_Size=0x20) returned 0x56ad80
	[0240.639] malloc (_Size=0x50) returned 0x562930
	[0240.639] malloc (_Size=0x20) returned 0x56ade0
	[0240.639] malloc (_Size=0x30) returned 0x4fefa0
	[0240.640] malloc (_Size=0x18) returned 0x563610
	[0240.640] malloc (_Size=0x18) returned 0x563630
	[0240.640] malloc (_Size=0x18) returned 0x563130
	[0240.640] malloc (_Size=0x18) returned 0x563650
	[0240.640] malloc (_Size=0x18) returned 0x563650
	[0240.640] malloc (_Size=0x18) returned 0x563670
	[0240.679] malloc (_Size=0x14) returned 0x56d490
	[0240.679] malloc (_Size=0x28) returned 0x56ac60
	[0240.679] malloc (_Size=0x30) returned 0x56b670
	[0240.679] malloc (_Size=0x40) returned 0x1ebda0
	[0240.679] malloc (_Size=0x30) returned 0x56b6b0
	[0240.679] malloc (_Size=0x30) returned 0x56b6f0
	[0240.682] malloc (_Size=0x10) returned 0x56d490
	[0240.809] malloc (_Size=0x10) returned 0x56d4b0
	[0240.809] malloc (_Size=0x40) returned 0x1ebdf0
	[0240.816] malloc (_Size=0x10) returned 0x56d4d0
	[0240.818] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x80, wParam=0x1, lParam=0x301e1) returned 0x0
	[0240.819] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x93, wParam=0x0, lParam=0xbe200) returned 0x1
	[0240.819] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x7f, wParam=0x2, lParam=0x0) returned 0x10213
	[0240.822] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x80, wParam=0x0, lParam=0x10215) returned 0x0
	[0240.822] malloc (_Size=0x68) returned 0x570bd0
	[0240.823] malloc (_Size=0x68) returned 0x570c40
	[0240.823] malloc (_Size=0x68) returned 0x570cb0
	[0240.823] malloc (_Size=0x68) returned 0x570d20
	[0240.823] malloc (_Size=0x58) returned 0x562330
	[0240.823] malloc (_Size=0x68) returned 0x570d90
	[0240.823] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
	[0240.824] GetParent (hWnd=0x20164) returned 0x0
	[0240.824] GetParent (hWnd=0x20164) returned 0x0
	[0240.825] GetParent (hWnd=0x20164) returned 0x0
	[0240.825] GetDesktopWindow () returned 0x10010
	[0240.825] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0240.825] IsWindowEnabled (hWnd=0x20144) returned 0
	[0240.825] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0240.825] IsWindowEnabled (hWnd=0x20142) returned 1
	[0240.825] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0240.825] IsWindowEnabled (hWnd=0x20146) returned 1
	[0240.825] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0240.825] IsWindowEnabled (hWnd=0x100a0) returned 1
	[0240.825] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0240.825] IsWindowEnabled (hWnd=0x20060) returned 0
	[0240.825] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0240.825] IsWindowEnabled (hWnd=0x1009e) returned 1
	[0240.825] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0240.825] IsWindowEnabled (hWnd=0x10088) returned 1
	[0240.826] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0240.826] IsWindowEnabled (hWnd=0x100b6) returned 1
	[0240.826] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0240.826] IsWindowEnabled (hWnd=0x100aa) returned 1
	[0240.826] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0240.826] IsWindowEnabled (hWnd=0x100a6) returned 1
	[0240.826] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0240.826] IsWindowEnabled (hWnd=0x100a2) returned 1
	[0240.826] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0240.826] IsWindowEnabled (hWnd=0x1007a) returned 0
	[0240.826] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0240.826] IsWindowEnabled (hWnd=0x10070) returned 0
	[0240.826] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0240.826] IsWindowEnabled (hWnd=0x10080) returned 1
	[0240.826] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0240.826] IsWindowEnabled (hWnd=0x10074) returned 1
	[0240.826] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0240.827] IsWindowEnabled (hWnd=0x10114) returned 1
	[0240.827] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0240.827] IsWindowEnabled (hWnd=0x1010a) returned 1
	[0240.827] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0240.827] IsWindowEnabled (hWnd=0x100f8) returned 1
	[0240.827] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0240.827] IsWindowEnabled (hWnd=0x100d0) returned 1
	[0240.827] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0240.827] IsWindowEnabled (hWnd=0x500c0) returned 1
	[0240.827] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0240.827] IsWindowEnabled (hWnd=0x100b8) returned 1
	[0240.827] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0240.827] IsWindowEnabled (hWnd=0x10054) returned 0
	[0240.827] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0240.827] IsWindowEnabled (hWnd=0x10052) returned 0
	[0240.827] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0240.827] IsWindowEnabled (hWnd=0x100c8) returned 1
	[0240.828] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0240.828] IsWindowEnabled (hWnd=0x20134) returned 1
	[0240.828] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0240.828] IsWindowEnabled (hWnd=0x20138) returned 1
	[0240.828] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0240.828] IsWindowEnabled (hWnd=0x2013a) returned 1
	[0240.828] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0240.828] IsWindowEnabled (hWnd=0x20118) returned 1
	[0240.828] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0240.828] IsWindowEnabled (hWnd=0x30028) returned 1
	[0240.828] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0240.828] IsWindowEnabled (hWnd=0x2014e) returned 0
	[0240.828] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0240.828] IsWindowEnabled (hWnd=0x20156) returned 1
	[0240.828] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0240.828] IsWindowEnabled (hWnd=0x2015a) returned 0
	[0240.828] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0240.829] IsWindowEnabled (hWnd=0x2001a) returned 1
	[0240.829] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0240.829] IsWindowEnabled (hWnd=0x20022) returned 0
	[0240.829] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0240.829] IsWindowEnabled (hWnd=0x20018) returned 1
	[0240.829] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0240.829] IsWindowEnabled (hWnd=0x1012e) returned 1
	[0240.829] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0240.829] IsWindowEnabled (hWnd=0x10120) returned 1
	[0240.829] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0240.829] IsWindowEnabled (hWnd=0x1011c) returned 1
	[0240.829] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0240.829] IsWindowEnabled (hWnd=0x10104) returned 1
	[0240.829] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0240.829] IsWindowEnabled (hWnd=0x10100) returned 1
	[0240.830] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0240.830] IsWindowEnabled (hWnd=0x100f2) returned 1
	[0240.830] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0240.830] IsWindowEnabled (hWnd=0x100e8) returned 1
	[0240.830] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0240.830] IsWindowEnabled (hWnd=0x100e2) returned 1
	[0240.830] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0240.830] IsWindowEnabled (hWnd=0x200dc) returned 1
	[0240.830] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0240.830] IsWindowEnabled (hWnd=0x100c4) returned 1
	[0240.830] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0240.830] IsWindowEnabled (hWnd=0x500ba) returned 1
	[0240.830] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0240.830] IsWindowEnabled (hWnd=0x100b0) returned 1
	[0240.831] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0240.831] IsWindowEnabled (hWnd=0x100ae) returned 1
	[0240.831] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0240.831] IsWindowEnabled (hWnd=0x100a4) returned 1
	[0240.831] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0240.831] IsWindowEnabled (hWnd=0x10090) returned 1
	[0240.831] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x3019e
	[0240.831] IsWindowEnabled (hWnd=0x3019e) returned 1
	[0240.831] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0240.831] IsWindowEnabled (hWnd=0x201b8) returned 1
	[0240.831] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0240.831] IsWindowEnabled (hWnd=0x201c0) returned 1
	[0240.831] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0240.831] IsWindowEnabled (hWnd=0x101b0) returned 1
	[0240.831] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0240.832] IsWindowEnabled (hWnd=0x101ac) returned 1
	[0240.832] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0240.832] IsWindowEnabled (hWnd=0x101aa) returned 1
	[0240.832] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0240.832] IsWindowEnabled (hWnd=0x20164) returned 0
	[0240.832] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0240.832] IsWindowEnabled (hWnd=0x20162) returned 0
	[0240.832] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0240.832] IsWindowEnabled (hWnd=0x3016a) returned 1
	[0240.832] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0240.832] IsWindowEnabled (hWnd=0x20160) returned 0
	[0240.832] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0240.832] IsWindowEnabled (hWnd=0xa016e) returned 1
	[0240.832] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0240.832] IsWindowEnabled (hWnd=0x20166) returned 0
	[0240.832] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0240.832] IsWindowEnabled (hWnd=0x1008c) returned 1
	[0240.832] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0240.832] IsWindowEnabled (hWnd=0x1006e) returned 1
	[0240.833] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0240.833] IsWindowEnabled (hWnd=0x10066) returned 1
	[0240.833] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0240.833] IsWindowEnabled (hWnd=0x40044) returned 1
	[0240.833] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0240.833] IsWindowEnabled (hWnd=0x1005a) returned 1
	[0240.833] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0240.833] IsWindowEnabled (hWnd=0x1005c) returned 0
	[0240.833] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0240.833] IsWindowEnabled (hWnd=0x20048) returned 1
	[0240.833] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0240.833] IsWindowEnabled (hWnd=0x1004a) returned 0
	[0240.833] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0240.833] IsWindowEnabled (hWnd=0x10046) returned 1
	[0240.833] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0240.833] IsWindowEnabled (hWnd=0x1004e) returned 0
	[0240.833] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0240.833] IsWindowEnabled (hWnd=0x1004c) returned 0
	[0240.833] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0240.833] IsWindowEnabled (hWnd=0x1012c) returned 0
	[0240.834] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0240.834] IsWindowEnabled (hWnd=0x10064) returned 0
	[0240.834] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0240.834] IsWindowEnabled (hWnd=0x2007e) returned 1
	[0240.834] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0240.834] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0240.834] GetParent (hWnd=0x20164) returned 0x0
	[0240.834] GetDesktopWindow () returned 0x10010
	[0240.834] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0240.834] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0240.834] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0240.834] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0240.834] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0240.834] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0240.834] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0240.834] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0240.834] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0240.834] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0240.835] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0240.835] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0240.835] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0240.835] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0240.835] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0240.835] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0240.835] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0240.835] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0240.835] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0240.835] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0240.835] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.835] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.835] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0240.835] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0240.835] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0240.836] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.836] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.836] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0240.836] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0240.836] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0240.836] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.836] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.836] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0240.836] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0240.836] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0240.836] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.836] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.836] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0240.836] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0240.836] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0240.836] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.836] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.836] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0240.837] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0240.837] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0240.837] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.837] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.837] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0240.837] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0240.837] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0240.837] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.837] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.837] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0240.837] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0240.837] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0240.837] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.837] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.837] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0240.838] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0240.838] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0240.838] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0240.838] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0240.838] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.838] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.838] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.838] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.838] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0240.838] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0240.838] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0240.838] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.838] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.838] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.838] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.838] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0240.839] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.839] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.839] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.839] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.839] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0240.839] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.839] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.839] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0240.839] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0240.839] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0240.839] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0240.839] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0240.839] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0240.839] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0240.839] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0240.839] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0240.839] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0240.840] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0240.840] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0240.840] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0240.840] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0240.840] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0240.840] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0240.840] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0240.840] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0240.840] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0240.840] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0240.840] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0240.840] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0240.840] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0240.841] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.841] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.841] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0240.841] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0240.841] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0240.841] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.841] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.841] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0240.841] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0240.841] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0240.841] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.841] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.841] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0240.843] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0240.843] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0240.843] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0240.843] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0240.843] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0240.843] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0240.843] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0240.843] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0240.843] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0240.843] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0240.843] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0240.843] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0240.843] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0240.843] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0240.843] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0240.843] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0240.843] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0240.844] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0240.844] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0240.844] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0240.844] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0240.844] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0240.844] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0240.844] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0240.844] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0240.844] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0240.844] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0240.844] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0240.844] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0240.844] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0240.844] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0240.844] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0240.844] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0240.845] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0240.845] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0240.845] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0240.845] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0240.845] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0240.845] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0240.845] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0240.845] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0240.845] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0240.845] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0240.845] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0240.845] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0240.845] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0240.845] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0240.845] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0240.845] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0240.845] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0240.846] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.846] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.846] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0240.846] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0240.846] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0240.846] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0240.846] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0240.846] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0240.846] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.846] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.846] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0240.846] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0240.846] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0240.846] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0240.846] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0240.846] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0240.846] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.846] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.846] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0240.846] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0240.846] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0240.846] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.846] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.846] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0240.846] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.846] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.846] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0240.846] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0240.846] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0240.846] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0240.847] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0240.847] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0240.847] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0240.847] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0240.847] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0240.847] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0240.847] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0240.847] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0240.847] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.847] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.847] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0240.847] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0240.847] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0240.847] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.847] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.847] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x3019e
	[0240.847] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0240.847] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0240.847] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0240.847] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0240.847] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0240.847] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0240.847] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0240.847] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0240.847] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0240.847] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0240.847] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0240.847] SendMessageW (hWnd=0x101b0, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.847] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.847] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.847] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0240.848] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0240.848] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0240.848] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.848] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0240.848] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0240.848] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0240.848] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0240.848] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.848] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0240.848] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0240.848] SendMessageW (hWnd=0x20164, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.849] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.849] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0240.849] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0240.849] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0240.849] SendMessageW (hWnd=0x20162, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.849] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0240.849] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20162, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.849] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0240.849] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.849] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0240.849] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0240.849] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0240.849] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0240.849] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.849] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0240.849] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0240.850] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.850] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0240.850] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0240.850] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0240.850] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0240.850] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.850] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0240.850] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0240.850] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.850] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.850] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0240.850] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0240.850] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0240.850] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0240.850] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0240.850] GetParent (hWnd=0x10066) returned 0x0
	[0240.850] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0240.850] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0240.851] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0240.851] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0240.851] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0240.851] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0240.851] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0240.851] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0240.851] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0240.851] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0240.851] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0240.851] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0240.851] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0240.851] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0240.851] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0240.851] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0240.851] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0240.851] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0240.851] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0240.851] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0240.852] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0240.852] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0240.852] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0240.852] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0240.852] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0240.852] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.852] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.852] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0240.852] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.852] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.852] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0240.852] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0240.852] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0240.852] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0240.852] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0240.852] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.853] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.853] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0240.853] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0240.853] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0240.853] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.853] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.853] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0240.853] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.853] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.853] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0240.929] malloc (_Size=0x40) returned 0x1ebdf0
	[0240.929] malloc (_Size=0x88) returned 0x5003b0
	[0240.929] malloc (_Size=0xb0) returned 0x570bd0
	[0240.929] lstrlenW (lpString="mmc.chm") returned 7
	[0240.929] malloc (_Size=0x1c) returned 0x56ac60
	[0240.930] GetParent (hWnd=0x20164) returned 0x0
	[0240.930] GetActiveWindow () returned 0x0
	[0240.930] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0240.930] GetParent (hWnd=0x20164) returned 0x0
	[0240.930] GetDesktopWindow () returned 0x10010
	[0240.930] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0240.931] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0240.931] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0240.931] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0240.931] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0240.931] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0240.931] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0240.931] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0240.931] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0240.931] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0240.931] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0240.931] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0240.931] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0240.931] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0240.931] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0240.932] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0240.932] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0240.932] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0240.932] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0240.932] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0240.932] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.932] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.932] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0240.932] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0240.932] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0240.932] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.932] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.932] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0240.932] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0240.932] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0240.932] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.932] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.932] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0240.933] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0240.933] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0240.933] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.933] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.933] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0240.933] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0240.933] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0240.933] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.933] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.933] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0240.933] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0240.933] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0240.933] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.933] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.933] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0240.934] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0240.934] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0240.934] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.934] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.934] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0240.934] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0240.934] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0240.934] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.934] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.934] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0240.934] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0240.934] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0240.934] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0240.934] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0240.934] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.934] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.935] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.935] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.935] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0240.935] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0240.935] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0240.935] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.935] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.935] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.935] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.935] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0240.935] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.935] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.935] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.935] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.935] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0240.936] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.936] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.936] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0240.936] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0240.936] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0240.936] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0240.936] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0240.936] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0240.936] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0240.936] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0240.936] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0240.936] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0240.936] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0240.936] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0240.936] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0240.936] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0240.936] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0240.936] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0240.936] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0240.937] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0240.937] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0240.937] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0240.937] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0240.937] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0240.937] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0240.937] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.937] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.937] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0240.937] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0240.937] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0240.937] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.937] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.937] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0240.937] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0240.937] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0240.938] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.938] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.938] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0240.938] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0240.938] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0240.938] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0240.938] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0240.938] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0240.938] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0240.938] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0240.938] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0240.938] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0240.938] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0240.938] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0240.938] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0240.938] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0240.938] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0240.938] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0240.939] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0240.939] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0240.939] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0240.939] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0240.939] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0240.939] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0240.939] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0240.939] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0240.939] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0240.939] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0240.939] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0240.939] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0240.939] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0240.939] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0240.939] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0240.939] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0240.939] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0240.939] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0240.940] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0240.940] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0240.940] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0240.940] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0240.940] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0240.940] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0240.940] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0240.940] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0240.940] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0240.940] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0240.940] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0240.940] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0240.940] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0240.940] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0240.940] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0240.940] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0240.940] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0240.941] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.941] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.941] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0240.941] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0240.941] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0240.941] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0240.941] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0240.941] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0240.941] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.941] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.941] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0240.941] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0240.941] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0240.941] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0240.941] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0240.941] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0240.941] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.941] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.942] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0240.942] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0240.942] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0240.942] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.942] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.942] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0240.942] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.942] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.942] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0240.942] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0240.942] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0240.942] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0240.942] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0240.942] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0240.942] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0240.942] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0240.942] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0240.942] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0240.943] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0240.943] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0240.943] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.943] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.943] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0240.943] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0240.943] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0240.943] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.943] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.943] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x3019e
	[0240.943] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0240.943] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0240.943] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0240.943] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0240.943] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0240.943] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0240.944] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0240.944] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0240.944] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0240.944] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0240.944] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0240.944] SendMessageW (hWnd=0x101b0, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.944] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.944] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.944] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0240.944] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0240.944] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0240.944] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.944] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0240.944] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0240.944] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0240.944] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0240.944] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.944] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0240.944] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0240.944] SendMessageW (hWnd=0x20164, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.945] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.945] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0240.945] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0240.945] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0240.945] SendMessageW (hWnd=0x20162, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.945] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0240.945] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20162, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.945] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0240.945] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.945] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0240.945] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0240.946] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0240.946] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0240.946] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.946] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0240.946] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0240.946] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.946] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0240.946] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0240.946] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0240.946] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0240.946] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.946] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0240.946] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0240.946] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.946] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.946] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0240.947] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0240.947] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0240.947] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0240.947] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0240.947] GetParent (hWnd=0x10066) returned 0x0
	[0240.947] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0240.947] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0240.947] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0240.947] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0240.947] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0240.947] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0240.947] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0240.947] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0240.947] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0240.947] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0240.947] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0240.947] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0240.947] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0240.947] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0240.948] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0240.948] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0240.948] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0240.948] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0240.948] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0240.948] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0240.948] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0240.948] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0240.948] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0240.948] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0240.948] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0240.948] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.948] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.948] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0240.948] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.948] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.948] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0240.949] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0240.949] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0240.949] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0240.949] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0240.949] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.949] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.949] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0240.949] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0240.949] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0240.949] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.949] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.949] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0240.949] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.949] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.949] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0241.207] lstrlenW (lpString="") returned 0
	[0241.208] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0241.208] malloc (_Size=0x4e) returned 0x5622d0
	[0241.208] malloc (_Size=0x22) returned 0x56ac30
	[0241.208] free (_Block=0x5622d0) 
	[0241.208] free (_Block=0x56ac30) 
	[0241.208] lstrlenW (lpString="") returned 0
	[0241.208] malloc (_Size=0x28) returned 0x56ac30
	[0241.209] malloc (_Size=0x28) returned 0x56ac30
	[0241.210] lstrlenW (lpString="") returned 0
	[0241.210] lstrlenW (lpString="") returned 0
	[0241.210] lstrlenW (lpString="") returned 0
	[0241.210] FindResourceW (hModule=0x7fef7fc0000, lpName=0x10, lpType=0x6) returned 0x1dc0480
	[0241.210] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xfc, lpBuffer=0xbe580, cchBufferMax=256 | out: lpBuffer="Computer Management (Local)") returned 0x1b
	[0241.210] lstrlenW (lpString="Computer Management (Local)") returned 27
	[0241.210] malloc (_Size=0x44) returned 0x1ebee0
	[0241.211] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0241.212] InvalidateRect (hWnd=0x101ae, lpRect=0x0, bErase=1) returned 1
	[0241.212] InvalidateRect (hWnd=0x601ca, lpRect=0x0, bErase=1) returned 1
	[0241.212] InvalidateRect (hWnd=0x101f2, lpRect=0x0, bErase=1) returned 1
	[0241.212] free (_Block=0x1ebee0) 
	[0241.212] malloc (_Size=0x420) returned 0x5721e0
	[0241.212] SetRectEmpty (in: lprc=0x572288 | out: lprc=0x572288) returned 1
	[0241.212] malloc (_Size=0x18) returned 0x56d630
	[0241.213] FindResourceW (hModule=0xff6d0000, lpName=0x9, lpType=0x6) returned 0x1507e8
	[0241.213] LoadStringW (in: hInstance=0xff6d0000, uID=0x81, lpBuffer=0xbe970, cchBufferMax=256 | out: lpBuffer="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 0x6a
	[0241.213] lstrlenW (lpString="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 106
	[0241.213] malloc (_Size=0xe2) returned 0x570c90
	[0241.213] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0241.213] LoadIconW (hInstance=0xff6d0000, lpIconName=0x81) returned 0x101eb
	[0241.214] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0241.214] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0xbe9e0 | out: lpWndClass=0xbe9e0) returned 1
	[0241.214] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0xbeaf0 | out: lpWndClass=0xbeaf0) returned 1
	[0241.215] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0241.215] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0xbe9d0 | out: lpWndClass=0xbe9d0) returned 1
	[0241.215] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x220, wParam=0x0, lParam=0xbeb50) returned 0x5016c
	[0241.216] GetParent (hWnd=0x5016c) returned 0x10012
	[0241.216] SetWindowLongPtrW (hWnd=0x5016c, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0241.216] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x5016c, lParam=0xbde80) returned 0x0
	[0241.217] DefMDIChildProcW (hWnd=0x5016c, uMsg=0x81, wParam=0x0, lParam=0xbdf60) returned 0x1
	[0241.218] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0241.218] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0xbd9b0 | out: lpWndClass=0xbd9b0) returned 1
	[0241.218] SetWindowLongW (hWnd=0x5016c, nIndex=-20, dwNewLong=320) returned 320
	[0241.219] DefMDIChildProcW (hWnd=0x5016c, uMsg=0x7c, wParam=0xffffffffffffffec, lParam=0xbda50) returned 0x0
	[0241.219] DefMDIChildProcW (hWnd=0x5016c, uMsg=0x7d, wParam=0xffffffffffffffec, lParam=0xbda50) returned 0x0
	[0241.220] DefMDIChildProcW (hWnd=0x5016c, uMsg=0xd, wParam=0x104, lParam=0x1e2a9e0) returned 0x0
	[0241.220] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0xbd2c8) returned 0x0
	[0241.222] DefMDIChildProcW (hWnd=0x5016c, uMsg=0x83, wParam=0x0, lParam=0xbdfd0) returned 0x0
	[0241.222] DefMDIChildProcW (hWnd=0x5016c, uMsg=0x1, wParam=0x0, lParam=0xbdf50) returned 0x0
	[0241.222] malloc (_Size=0x5a0) returned 0x572610
	[0241.222] malloc (_Size=0x18) returned 0x56d650
	[0241.222] malloc (_Size=0x20) returned 0x56ac30
	[0241.222] malloc (_Size=0x18) returned 0x56d670
	[0241.222] malloc (_Size=0x18) returned 0x56d690
	[0241.222] malloc (_Size=0x18) returned 0x56d6b0
	[0241.222] malloc (_Size=0x18) returned 0x56d6d0
	[0241.222] malloc (_Size=0x18) returned 0x56d6f0
	[0241.223] malloc (_Size=0x18) returned 0x56d710
	[0241.223] malloc (_Size=0x120) returned 0x572bc0
	[0241.223] malloc (_Size=0x18) returned 0x56d730
	[0241.223] malloc (_Size=0x70) returned 0x572cf0
	[0241.223] malloc (_Size=0x20) returned 0x56ac90
	[0241.223] malloc (_Size=0x58) returned 0x5622d0
	[0241.223] malloc (_Size=0xe0) returned 0x572d70
	[0241.223] CreateWindowExW (dwExStyle=0x0, lpClassName="MMCViewWindow", lpWindowName=0x0, dwStyle=0x52000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x5016c, hMenu=0xe900, hInstance=0xff6d0000, lpParam=0xbec50) returned 0xb0178
	[0241.224] malloc (_Size=0x100) returned 0x567790
	[0241.224] GetParent (hWnd=0xb0178) returned 0x10012
	[0241.224] SetWindowLongPtrW (hWnd=0xb0178, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0241.224] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0xb0178, lParam=0xbd190) returned 0x0
	[0241.224] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x81, wParam=0x0, lParam=0xbd270) returned 0x1
	[0241.225] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x83, wParam=0x0, lParam=0xbd2e0) returned 0x0
	[0241.225] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x1, wParam=0x0, lParam=0xbd270) returned 0x0
	[0241.225] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.226] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.226] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.226] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.226] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.226] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.226] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.226] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.226] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.226] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.226] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.226] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.226] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.226] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.226] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.226] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.226] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.226] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.226] GetParent (hWnd=0xb0178) returned 0x5016c
	[0241.226] GetParent (hWnd=0x5016c) returned 0xa014c
	[0241.227] CreateWindowExW (dwExStyle=0x20000, lpClassName="STATIC", lpWindowName=0x0, dwStyle=0x4400428d, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xb0178, hMenu=0x31f7, hInstance=0xff6d0000, lpParam=0x0) returned 0x20208
	[0241.227] GetParent (hWnd=0x20208) returned 0x10012
	[0241.227] SetWindowLongPtrW (hWnd=0x20208, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6d61b4
	[0241.227] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x20208, lParam=0xbc380) returned 0x0
	[0241.228] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x81, wParam=0x0, lParam=0xbc460) returned 0x1
	[0241.228] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x83, wParam=0x0, lParam=0xbc4c0) returned 0x0
	[0241.229] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x1, wParam=0x0, lParam=0xbc460) returned 0x0
	[0241.229] GetWindowDC (hWnd=0x20208) returned 0x1401007f
	[0241.229] malloc (_Size=0x88) returned 0x500560
	[0241.229] malloc (_Size=0x100) returned 0x5678a0
	[0241.229] SelectObject (hdc=0x1401007f, h=0x70a097b) returned 0x18a002e
	[0241.308] GetWindowLongW (hWnd=0x20208, nIndex=-20) returned 131072
	[0241.308] GetWindowLongW (hWnd=0x20208, nIndex=-16) returned 1140867725
	[0241.308] SelectObject (hdc=0x1401007f, h=0x18a002e) returned 0x70a097b
	[0241.308] free (_Block=0x500560) 
	[0241.308] free (_Block=0x5678a0) 
	[0241.308] ReleaseDC (hWnd=0x20208, hDC=0x1401007f) returned 1
	[0241.309] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.309] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x3, wParam=0x0, lParam=0x10001) returned 0x0
	[0241.310] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x210, wParam=0x31f70001, lParam=0x20208) returned 0x0
	[0241.310] lstrlenW (lpString="SysTreeView32") returned 13
	[0241.310] malloc (_Size=0x28) returned 0x56ac00
	[0241.310] malloc (_Size=0x20) returned 0x56ad20
	[0241.310] malloc (_Size=0x18) returned 0x56d750
	[0241.311] malloc (_Size=0x18) returned 0x56d770
	[0241.311] malloc (_Size=0x30) returned 0x56b730
	[0241.311] malloc (_Size=0x30) returned 0x56b770
	[0241.311] malloc (_Size=0x28) returned 0x56acf0
	[0241.311] malloc (_Size=0x30) returned 0x56b7b0
	[0241.311] malloc (_Size=0x18) returned 0x56d790
	[0241.311] malloc (_Size=0x20) returned 0x56ad80
	[0241.311] malloc (_Size=0x18) returned 0x56d7b0
	[0241.311] CreateWindowExW (dwExStyle=0x200, lpClassName="SysTreeView32", lpWindowName=0x0, dwStyle=0x52000029, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xb0178, hMenu=0x31f1, hInstance=0xff6d0000, lpParam=0xbcb28) returned 0x10220
	[0241.311] GetParent (hWnd=0x10220) returned 0x10012
	[0241.312] SetWindowLongPtrW (hWnd=0x10220, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6c7c18
	[0241.312] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10220, lParam=0xbc240) returned 0x0
	[0241.312] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x81, wParam=0x0, lParam=0xbc320) returned 0x1
	[0241.313] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x83, wParam=0x0, lParam=0xbc390) returned 0x0
	[0241.313] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x1, wParam=0x0, lParam=0xbc320) returned 0x0
	[0241.314] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x55, wParam=0x10220, lParam=0x3) returned 0x2
	[0241.314] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.315] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0241.316] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0241.316] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0241.317] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0241.318] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0241.318] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0241.319] GetWindowLongPtrW (hWnd=0x10222, nIndex=-4) returned 0x7fefc6af450
	[0241.319] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x0
	[0241.319] SetPropW (hWnd=0x10222, lpString="AfxOldWndProc423", hData=0x7fefc6af450) returned 1
	[0241.319] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.319] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0241.319] SetWindowLongPtrW (hWnd=0x10222, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7fefc6af450
	[0241.319] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10222, lParam=0xbb2d0) returned 0x0
	[0241.319] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.319] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x81, wParam=0x0, lParam=0xbb3b0) returned 0x1
	[0241.319] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.319] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x83, wParam=0x0, lParam=0xbb430) returned 0x0
	[0241.319] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.320] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x1, wParam=0x0, lParam=0xbb3b0) returned 0x0
	[0241.320] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x55, wParam=0x10222, lParam=0x3) returned 0x2
	[0241.320] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.321] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.321] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0xbaea0) returned 0x0
	[0241.321] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.321] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0xbaea0) returned 0x0
	[0241.321] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.321] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.321] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.321] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.321] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.321] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x432, wParam=0x0, lParam=0xbba70) returned 0x1
	[0241.322] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x55, wParam=0x10222, lParam=0x3) returned 0x2
	[0241.322] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.322] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x30, wParam=0x80a099f, lParam=0x1) returned 0x1
	[0241.322] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.322] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x403, wParam=0x3, lParam=0x1f4) returned 0x0
	[0241.322] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.323] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.323] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.323] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.323] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.323] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.323] IsWindowVisible (hWnd=0x10220) returned 0
	[0241.323] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.323] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.323] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.323] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.323] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.323] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.323] IsWindowVisible (hWnd=0x10220) returned 0
	[0241.323] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.323] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.323] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.323] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.323] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.323] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.323] IsWindowVisible (hWnd=0x10220) returned 0
	[0241.324] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x31a, wParam=0xffffffffffffffff, lParam=0x80000001) returned 0x0
	[0241.324] GetParent (hWnd=0x10220) returned 0xb0178
	[0241.324] GetParent (hWnd=0xb0178) returned 0x5016c
	[0241.324] GetParent (hWnd=0xb0178) returned 0x5016c
	[0241.324] GetParent (hWnd=0x5016c) returned 0xa014c
	[0241.325] GetDlgItem (hDlg=0x5016c, nIDDlgItem=59648) returned 0xb0178
	[0241.325] GetParent (hWnd=0xb0178) returned 0x5016c
	[0241.330] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x1109, wParam=0x0, lParam=0x31ffc0) returned 0x0
	[0241.330] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0241.331] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0241.331] malloc (_Size=0x60) returned 0x570e30
	[0241.331] malloc (_Size=0x18) returned 0x56d7d0
	[0241.331] GetLastError () returned 0x36b7
	[0241.331] SetLastError (dwErrCode=0x36b7) 
	[0241.331] DeleteObject (ho=0x10509a8) returned 1
	[0241.332] GetLastError () returned 0x0
	[0241.332] SetLastError (dwErrCode=0x0) 
	[0241.332] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.333] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.333] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x210, wParam=0x31f10001, lParam=0x10220) returned 0x0
	[0241.334] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.334] malloc (_Size=0x20) returned 0x56ae10
	[0241.334] malloc (_Size=0x18) returned 0x56d7f0
	[0241.334] malloc (_Size=0x20) returned 0x56ae40
	[0241.334] malloc (_Size=0x18) returned 0x56d810
	[0241.334] SetWindowPos (hWnd=0x10220, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0241.335] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x46, wParam=0x0, lParam=0xbcac0) returned 0x0
	[0241.336] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0241.336] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x47, wParam=0x0, lParam=0xbcac0) returned 0x0
	[0241.336] malloc (_Size=0x3a0) returned 0x573050
	[0241.336] malloc (_Size=0x20) returned 0x56ae70
	[0241.336] malloc (_Size=0x18) returned 0x56d830
	[0241.336] LoadResource (hModule=0xff6d0000, hResInfo=0xff897758) returned 0xff8c7278
	[0241.336] LockResource (hResData=0xff8c7278) returned 0xff8c7278
	[0241.336] malloc (_Size=0x68) returned 0x570ea0
	[0241.337] GetSysColor (nIndex=18) returned 0x0
	[0241.337] GetSysColor (nIndex=18) returned 0x0
	[0241.337] GetSysColor (nIndex=18) returned 0x0
	[0241.337] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0241.337] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0241.337] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0241.337] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0241.337] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0241.337] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0241.337] GetSysColor (nIndex=20) returned 0xffffff
	[0241.337] GetSysColor (nIndex=20) returned 0xffffff
	[0241.337] GetSysColor (nIndex=20) returned 0xffffff
	[0241.337] GetDC (hWnd=0x0) returned 0x8010666
	[0241.337] CreateCompatibleBitmap (hdc=0x8010666, cx=16, cy=8) returned 0x30509a7
	[0241.337] CreateCompatibleDC (hdc=0x8010666) returned 0x20109a8
	[0241.337] SelectObject (hdc=0x20109a8, h=0x30509a7) returned 0x185000f
	[0241.337] StretchDIBits (hdc=0x20109a8, xDest=0, yDest=0, DestWidth=16, DestHeight=8, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=8, lpBits=0xff8c72e0, lpbmi=0x570ea0, iUsage=0x0, rop=0xcc0020) returned 8
	[0241.337] SelectObject (hdc=0x20109a8, h=0x185000f) returned 0x30509a7
	[0241.337] DeleteDC (hdc=0x20109a8) returned 1
	[0241.337] ReleaseDC (hWnd=0x0, hDC=0x8010666) returned 1
	[0241.337] free (_Block=0x570ea0) 
	[0241.337] ImageList_Create (cx=8, cy=8, flags=0xfe, cInitial=2, cGrow=2) returned 0x349220
	[0241.337] GetLastError () returned 0x0
	[0241.338] SetLastError (dwErrCode=0x0) 
	[0241.338] DeleteObject (ho=0x30509a7) returned 1
	[0241.338] GetLastError () returned 0x0
	[0241.338] SetLastError (dwErrCode=0x0) 
	[0241.338] malloc (_Size=0x28) returned 0x56aea0
	[0241.338] malloc (_Size=0x30) returned 0x56b7f0
	[0241.338] malloc (_Size=0x1f0) returned 0x573d10
	[0241.338] lstrlenW (lpString="SysListView32") returned 13
	[0241.338] malloc (_Size=0x28) returned 0x56aed0
	[0241.338] malloc (_Size=0x18) returned 0x56d850
	[0241.338] malloc (_Size=0x20) returned 0x56af00
	[0241.338] malloc (_Size=0x30) returned 0x56b830
	[0241.339] CreateWindowExW (dwExStyle=0x200, lpClassName="SysListView32", lpWindowName=0x0, dwStyle=0x5600024d, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xb0178, hMenu=0x31f2, hInstance=0xff6d0000, lpParam=0xbec50) returned 0x10224
	[0241.339] GetParent (hWnd=0x10224) returned 0x10012
	[0241.339] SetWindowLongPtrW (hWnd=0x10224, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6b5944
	[0241.339] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10224, lParam=0xbc2c0) returned 0x0
	[0241.340] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x81, wParam=0x0, lParam=0xbc3a0) returned 0x1
	[0241.340] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x83, wParam=0x0, lParam=0xbc410) returned 0x0
	[0241.341] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1, wParam=0x0, lParam=0xbc3a0) returned 0x0
	[0241.342] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.342] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10226, lParam=0xbb140) returned 0x0
	[0241.343] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x55, wParam=0x10226, lParam=0x3) returned 0x2
	[0241.343] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.344] GetParent (hWnd=0x10226) returned 0x10224
	[0241.344] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x210, wParam=0x1, lParam=0x10226) returned 0x0
	[0241.345] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10228, lParam=0xbaf50) returned 0x0
	[0241.346] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x55, wParam=0x10228, lParam=0x3) returned 0x2
	[0241.347] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.347] GetParent (hWnd=0x10228) returned 0x10224
	[0241.347] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x210, wParam=0x1, lParam=0x10228) returned 0x0
	[0241.348] CallNextHookEx (hhk=0x101bf, nCode=4, wParam=0x10228, lParam=0x0) returned 0x0
	[0241.348] GetParent (hWnd=0x10228) returned 0x10224
	[0241.348] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x210, wParam=0x2, lParam=0x10228) returned 0x0
	[0241.349] GetDlgCtrlID (hWnd=0x10226) returned 0
	[0241.350] GetParent (hWnd=0x10226) returned 0x10224
	[0241.350] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x4e, wParam=0x0, lParam=0xbb1a0) returned 0x0
	[0241.350] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x46, wParam=0x0, lParam=0xb9690) returned 0x0
	[0241.351] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x83, wParam=0x1, lParam=0xb9660) returned 0x0
	[0241.351] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x47, wParam=0x0, lParam=0xb9690) returned 0x0
	[0241.353] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x46, wParam=0x0, lParam=0xb9690) returned 0x0
	[0241.354] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x83, wParam=0x1, lParam=0xb9660) returned 0x0
	[0241.354] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x47, wParam=0x0, lParam=0xb9690) returned 0x0
	[0241.465] GetWindowLongPtrW (hWnd=0x10238, nIndex=-4) returned 0x7fefc6af450
	[0241.465] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x0
	[0241.465] SetPropW (hWnd=0x10238, lpString="AfxOldWndProc423", hData=0x7fefc6af450) returned 1
	[0241.465] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.465] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0241.465] SetWindowLongPtrW (hWnd=0x10238, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7fefc6af450
	[0241.466] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10238, lParam=0xbb1a0) returned 0x0
	[0241.466] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.466] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x81, wParam=0x0, lParam=0xbb280) returned 0x1
	[0241.466] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.466] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x83, wParam=0x0, lParam=0xbb300) returned 0x0
	[0241.466] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.466] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x1, wParam=0x0, lParam=0xbb280) returned 0x0
	[0241.466] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.466] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0xbad70) returned 0x0
	[0241.466] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.466] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0xbad70) returned 0x0
	[0241.467] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.467] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.467] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.467] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.467] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.467] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x432, wParam=0x0, lParam=0xbb940) returned 0x1
	[0241.468] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x55, wParam=0x10238, lParam=0x3) returned 0x2
	[0241.468] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.468] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x30, wParam=0x210a09a9, lParam=0x0) returned 0x1
	[0241.468] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.468] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.468] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.468] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.468] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.468] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.468] IsWindowVisible (hWnd=0x10220) returned 0
	[0241.468] IsWindowVisible (hWnd=0x10224) returned 0
	[0241.468] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.468] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.468] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.468] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.468] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.468] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.469] IsWindowVisible (hWnd=0x10220) returned 0
	[0241.469] IsWindowVisible (hWnd=0x10224) returned 0
	[0241.469] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.469] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.469] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.469] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.469] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.469] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.469] IsWindowVisible (hWnd=0x10220) returned 0
	[0241.469] IsWindowVisible (hWnd=0x10224) returned 0
	[0241.469] malloc (_Size=0x400) returned 0x573f10
	[0241.469] GetParent (hWnd=0x10224) returned 0xb0178
	[0241.469] GetParent (hWnd=0xb0178) returned 0x5016c
	[0241.469] GetParent (hWnd=0xb0178) returned 0x5016c
	[0241.469] GetParent (hWnd=0x5016c) returned 0xa014c
	[0241.469] GetDlgItem (hDlg=0x5016c, nIDDlgItem=59648) returned 0xb0178
	[0241.470] GetParent (hWnd=0xb0178) returned 0x5016c
	[0241.470] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1036, wParam=0x0, lParam=0x4030) returned 0x0
	[0241.471] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.471] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x41c, wParam=0x0, lParam=0x0) returned 0x0
	[0241.471] malloc (_Size=0x60) returned 0x570ea0
	[0241.471] malloc (_Size=0x18) returned 0x56d870
	[0241.471] malloc (_Size=0x20) returned 0x56af30
	[0241.471] malloc (_Size=0x18) returned 0x56d890
	[0241.472] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.472] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.472] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x434, wParam=0x0, lParam=0xbbb20) returned 0x0
	[0241.472] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x101f, wParam=0x0, lParam=0x0) returned 0x10226
	[0241.472] GetParent (hWnd=0x10226) returned 0x10224
	[0241.472] SetWindowLongPtrW (hWnd=0x10226, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6bbf00
	[0241.473] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0241.473] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0241.474] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.474] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x210, wParam=0x31f20001, lParam=0x10224) returned 0x0
	[0241.475] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.475] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x34a350
	[0241.475] ImageList_Create (cx=32, cy=32, flags=0x21, cInitial=20, cGrow=10) returned 0x34aaa0
	[0241.476] malloc (_Size=0x100) returned 0x5678a0
	[0241.478] GetLastError () returned 0x6
	[0241.478] SetLastError (dwErrCode=0x6) 
	[0241.478] GetLastError () returned 0x6
	[0241.478] SetLastError (dwErrCode=0x6) 
	[0241.479] GetLastError () returned 0x6
	[0241.479] SetLastError (dwErrCode=0x6) 
	[0241.479] GetLastError () returned 0x6
	[0241.479] SetLastError (dwErrCode=0x6) 
	[0241.479] malloc (_Size=0x8) returned 0x56b4b0
	[0241.479] malloc (_Size=0x150) returned 0x573f10
	[0241.479] malloc (_Size=0x8) returned 0x5740a0
	[0241.479] malloc (_Size=0x8) returned 0x5740b0
	[0241.479] malloc (_Size=0x8) returned 0x5740c0
	[0241.479] malloc (_Size=0x8) returned 0x5740d0
	[0241.479] malloc (_Size=0x8) returned 0x5740e0
	[0241.479] malloc (_Size=0x8) returned 0x5740f0
	[0241.479] malloc (_Size=0x8) returned 0x574100
	[0241.479] malloc (_Size=0x8) returned 0x574110
	[0241.480] GetLastError () returned 0x6
	[0241.480] SetLastError (dwErrCode=0x6) 
	[0241.480] DeleteObject (ho=0x20509d9) returned 1
	[0241.480] GetLastError () returned 0x0
	[0241.480] SetLastError (dwErrCode=0x0) 
	[0241.480] GetLastError () returned 0x0
	[0241.480] SetLastError (dwErrCode=0x0) 
	[0241.480] DeleteObject (ho=0x20509d7) returned 1
	[0241.480] GetLastError () returned 0x0
	[0241.480] SetLastError (dwErrCode=0x0) 
	[0241.491] GetLastError () returned 0x0
	[0241.491] SetLastError (dwErrCode=0x0) 
	[0241.491] DeleteObject (ho=0x20509d5) returned 1
	[0241.491] GetLastError () returned 0x0
	[0241.491] SetLastError (dwErrCode=0x0) 
	[0241.491] GetLastError () returned 0x0
	[0241.491] SetLastError (dwErrCode=0x0) 
	[0241.491] DeleteObject (ho=0x10509d3) returned 1
	[0241.491] GetLastError () returned 0x0
	[0241.491] SetLastError (dwErrCode=0x0) 
	[0241.492] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1003, wParam=0x1, lParam=0x34a350) returned 0x0
	[0241.492] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x1023a, lParam=0xbb9d0) returned 0x0
	[0241.493] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x55, wParam=0x1023a, lParam=0x3) returned 0x2
	[0241.494] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.494] GetParent (hWnd=0x1023a) returned 0x10224
	[0241.494] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x210, wParam=0x1, lParam=0x1023a) returned 0x0
	[0241.494] CallNextHookEx (hhk=0x101bf, nCode=4, wParam=0x1023a, lParam=0x0) returned 0x0
	[0241.495] GetParent (hWnd=0x1023a) returned 0x10224
	[0241.495] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x210, wParam=0x2, lParam=0x1023a) returned 0x0
	[0241.496] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1208, wParam=0x0, lParam=0x34a350) returned 0x0
	[0241.496] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1003, wParam=0x0, lParam=0x34aaa0) returned 0x0
	[0241.497] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1208, wParam=0x0, lParam=0x349220) returned 0x34a350
	[0241.497] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1027, wParam=0x0, lParam=0x0) returned 0x0
	[0241.497] GetWindowLongW (hWnd=0x10224, nIndex=-16) returned 1445986893
	[0241.497] malloc (_Size=0x20) returned 0x56af60
	[0241.497] malloc (_Size=0x18) returned 0x56d8b0
	[0241.497] malloc (_Size=0x18) returned 0x56d8d0
	[0241.497] malloc (_Size=0x20) returned 0x56af90
	[0241.497] malloc (_Size=0x18) returned 0x56d8f0
	[0241.498] malloc (_Size=0x18) returned 0x56d910
	[0241.498] CreateWindowExW (dwExStyle=0x200, lpClassName="AfxFrameOrView42u", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xb0178, hMenu=0x31fc, hInstance=0xff6d0000, lpParam=0xbcb28) returned 0x2023a
	[0241.498] GetParent (hWnd=0x2023a) returned 0x10012
	[0241.498] SetWindowLongPtrW (hWnd=0x2023a, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0241.498] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x2023a, lParam=0xbc230) returned 0x0
	[0241.499] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x81, wParam=0x0, lParam=0xbc310) returned 0x1
	[0241.499] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x83, wParam=0x0, lParam=0xbc390) returned 0x0
	[0241.500] GetWindowLongW (hWnd=0x2023a, nIndex=-16) returned 1073741824
	[0241.500] SetWindowLongW (hWnd=0x2023a, nIndex=-16, dwNewLong=1107296256) returned 1073741824
	[0241.500] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0xbbd50) returned 0x0
	[0241.587] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0xbbd50) returned 0x0
	[0241.587] malloc (_Size=0x400) returned 0x574470
	[0241.587] malloc (_Size=0x400) returned 0x574470
	[0241.587] malloc (_Size=0x400) returned 0x574470
	[0241.587] malloc (_Size=0x400) returned 0x574470
	[0241.588] malloc (_Size=0x400) returned 0x574470
	[0241.588] malloc (_Size=0x400) returned 0x574470
	[0241.588] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x1, wParam=0x0, lParam=0xbc310) returned 0x0
	[0241.588] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.588] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.588] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.588] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.588] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.588] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.588] IsWindowVisible (hWnd=0x10220) returned 0
	[0241.588] IsWindowVisible (hWnd=0x10224) returned 0
	[0241.589] IsWindowVisible (hWnd=0x2023a) returned 0
	[0241.589] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.589] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.589] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.589] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.589] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.589] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.589] IsWindowVisible (hWnd=0x10220) returned 0
	[0241.589] IsWindowVisible (hWnd=0x10224) returned 0
	[0241.589] IsWindowVisible (hWnd=0x2023a) returned 0
	[0241.589] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.589] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.589] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.589] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.589] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.590] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.590] IsWindowVisible (hWnd=0x10220) returned 0
	[0241.590] IsWindowVisible (hWnd=0x10224) returned 0
	[0241.590] IsWindowVisible (hWnd=0x2023a) returned 0
	[0241.590] malloc (_Size=0x60) returned 0x570f10
	[0241.590] malloc (_Size=0x60) returned 0x570f80
	[0241.590] malloc (_Size=0x60) returned 0x570ff0
	[0241.594] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x1023c, lParam=0xbb3a0) returned 0x0
	[0241.594] GetParent (hWnd=0x1023c) returned 0x2023a
	[0241.594] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x210, wParam=0x1, lParam=0x1023c) returned 0x0
	[0241.595] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x1023e, lParam=0xbb3f0) returned 0x0
	[0241.596] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10240, lParam=0xbb0c0) returned 0x0
	[0241.596] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10242, lParam=0xbb020) returned 0x0
	[0241.597] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10244, lParam=0xbb0c0) returned 0x0
	[0241.598] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10246, lParam=0xbb020) returned 0x0
	[0241.600] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x3f1a980
	[0241.600] GetWindowLongW (hWnd=0x2023a, nIndex=-20) returned 512
	[0241.601] GetLastError () returned 0x6
	[0241.601] SetLastError (dwErrCode=0x6) 
	[0241.601] GetLastError () returned 0x6
	[0241.602] SetLastError (dwErrCode=0x6) 
	[0241.602] GetLastError () returned 0x6
	[0241.602] SetLastError (dwErrCode=0x6) 
	[0241.602] DeleteObject (ho=0x10509df) returned 1
	[0241.602] GetLastError () returned 0x0
	[0241.602] SetLastError (dwErrCode=0x0) 
	[0241.603] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.603] GetParent (hWnd=0x1023c) returned 0x2023a
	[0241.603] MoveWindow (hWnd=0x1023c, X=0, Y=21, nWidth=0, nHeight=-21, bRepaint=1) returned 1
	[0241.604] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.604] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x210, wParam=0x31fc0001, lParam=0x2023a) returned 0x0
	[0241.605] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.605] malloc (_Size=0x20) returned 0x56afc0
	[0241.605] malloc (_Size=0x18) returned 0x56d930
	[0241.605] malloc (_Size=0x20) returned 0x5744a0
	[0241.605] malloc (_Size=0x18) returned 0x56d950
	[0241.605] malloc (_Size=0x20) returned 0x5744d0
	[0241.605] malloc (_Size=0x18) returned 0x56d970
	[0241.605] SetWindowPos (hWnd=0x2023a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0241.606] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x46, wParam=0x0, lParam=0xbcac0) returned 0x0
	[0241.606] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0241.607] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x47, wParam=0x0, lParam=0xbcac0) returned 0x0
	[0241.607] CreateWindowExW (dwExStyle=0x0, lpClassName="AMCCustomTab", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xb0178, hMenu=0x31fa, hInstance=0xff6d0000, lpParam=0x0) returned 0x10248
	[0241.607] GetParent (hWnd=0x10248) returned 0x10012
	[0241.607] SetWindowLongPtrW (hWnd=0x10248, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0241.607] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10248, lParam=0xbc300) returned 0x0
	[0241.608] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x81, wParam=0x0, lParam=0xbc3e0) returned 0x1
	[0241.608] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x83, wParam=0x0, lParam=0xbc450) returned 0x0
	[0241.609] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x1, wParam=0x0, lParam=0xbc3e0) returned 0x0
	[0241.610] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.610] GetDC (hWnd=0x10248) returned 0xc01083a
	[0241.610] malloc (_Size=0x88) returned 0x500560
	[0241.610] malloc (_Size=0x100) returned 0x5679b0
	[0241.610] SelectObject (hdc=0xc01083a, h=0x0) returned 0x0
	[0241.610] SelectObject (hdc=0xc01083a, h=0x0) returned 0x0
	[0241.610] free (_Block=0x500560) 
	[0241.610] free (_Block=0x5679b0) 
	[0241.610] ReleaseDC (hWnd=0x10248, hDC=0xc01083a) returned 1
	[0241.611] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.611] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x210, wParam=0x31fa0001, lParam=0x10248) returned 0x0
	[0241.612] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.612] GetDC (hWnd=0x0) returned 0x1401007f
	[0241.612] malloc (_Size=0x88) returned 0x500560
	[0241.612] malloc (_Size=0x100) returned 0x5679b0
	[0241.612] SelectObject (hdc=0x1401007f, h=0x170a09de) returned 0x18a002e
	[0241.613] SelectObject (hdc=0x1401007f, h=0x18a002e) returned 0x170a09de
	[0241.613] free (_Block=0x500560) 
	[0241.613] free (_Block=0x5679b0) 
	[0241.613] ReleaseDC (hWnd=0x0, hDC=0x1401007f) returned 1
	[0241.613] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x1024a, lParam=0xbc3c0) returned 0x0
	[0241.614] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x55, wParam=0x1024a, lParam=0x3) returned 0x2
	[0241.615] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.615] GetParent (hWnd=0x1024a) returned 0x10248
	[0241.615] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x210, wParam=0x1, lParam=0x1024a) returned 0x0
	[0241.616] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x1024c, lParam=0xbc2c0) returned 0x0
	[0241.617] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x55, wParam=0x1024c, lParam=0x3) returned 0x2
	[0241.617] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.618] GetParent (hWnd=0x1024c) returned 0x10248
	[0241.618] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x210, wParam=0x10001, lParam=0x1024c) returned 0x0
	[0241.619] GetParent (hWnd=0x1024a) returned 0x10248
	[0241.619] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x111, wParam=0x4000000, lParam=0x1024a) returned 0x0
	[0241.698] GetParent (hWnd=0x1024a) returned 0x10248
	[0241.698] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x111, wParam=0x3000000, lParam=0x1024a) returned 0x0
	[0241.698] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.698] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.698] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.698] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.698] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.698] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.698] IsWindowVisible (hWnd=0x10220) returned 0
	[0241.698] IsWindowVisible (hWnd=0x10224) returned 0
	[0241.698] IsWindowVisible (hWnd=0x2023a) returned 0
	[0241.698] IsWindowVisible (hWnd=0x10248) returned 0
	[0241.698] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.699] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.699] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.699] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.699] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.699] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.699] IsWindowVisible (hWnd=0x10220) returned 0
	[0241.699] IsWindowVisible (hWnd=0x10224) returned 0
	[0241.699] IsWindowVisible (hWnd=0x2023a) returned 0
	[0241.699] IsWindowVisible (hWnd=0x10248) returned 0
	[0241.699] IsWindowVisible (hWnd=0x10196) returned 0
	[0241.699] IsWindowVisible (hWnd=0x101ae) returned 0
	[0241.699] IsWindowVisible (hWnd=0x101bc) returned 0
	[0241.699] IsWindowVisible (hWnd=0x601ca) returned 0
	[0241.699] IsWindowVisible (hWnd=0x101f2) returned 0
	[0241.699] IsWindowVisible (hWnd=0xb0178) returned 0
	[0241.699] IsWindowVisible (hWnd=0x10220) returned 0
	[0241.699] IsWindowVisible (hWnd=0x10224) returned 0
	[0241.699] IsWindowVisible (hWnd=0x2023a) returned 0
	[0241.699] IsWindowVisible (hWnd=0x10248) returned 0
	[0241.699] GetParent (hWnd=0xb0178) returned 0x5016c
	[0241.699] GetParent (hWnd=0x5016c) returned 0xa014c
	[0241.700] SetWindowPos (hWnd=0x10224, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0241.700] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x46, wParam=0x0, lParam=0xbc8d0) returned 0x0
	[0241.701] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0241.701] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x47, wParam=0x0, lParam=0xbc8d0) returned 0x0
	[0241.702] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0241.702] malloc (_Size=0xf8) returned 0x574c70
	[0241.702] malloc (_Size=0x18) returned 0x56d990
	[0241.702] malloc (_Size=0x20) returned 0x574500
	[0241.702] malloc (_Size=0x38) returned 0x56b870
	[0241.702] malloc (_Size=0x28) returned 0x574530
	[0241.702] malloc (_Size=0x28) returned 0x574560
	[0241.702] malloc (_Size=0x20) returned 0x574590
	[0241.702] malloc (_Size=0x18) returned 0x56d9b0
	[0241.702] malloc (_Size=0x20) returned 0x5745c0
	[0241.702] malloc (_Size=0x18) returned 0x56d9d0
	[0241.703] malloc (_Size=0x20) returned 0x5745f0
	[0241.703] malloc (_Size=0x18) returned 0x56d9f0
	[0241.703] malloc (_Size=0x50) returned 0x562210
	[0241.703] malloc (_Size=0x18) returned 0x56da10
	[0241.703] malloc (_Size=0x28) returned 0x574620
	[0241.703] malloc (_Size=0x28) returned 0x574650
	[0241.703] malloc (_Size=0x28) returned 0x574680
	[0241.703] malloc (_Size=0x28) returned 0x5746b0
	[0241.703] malloc (_Size=0x28) returned 0x5746e0
	[0241.703] malloc (_Size=0x28) returned 0x574710
	[0241.703] malloc (_Size=0x28) returned 0x574740
	[0241.703] malloc (_Size=0x28) returned 0x574770
	[0241.703] malloc (_Size=0x20) returned 0x5747a0
	[0241.703] malloc (_Size=0x18) returned 0x56da30
	[0241.703] GetParent (hWnd=0x5016c) returned 0xa014c
	[0241.703] GetParent (hWnd=0xa014c) returned 0x20164
	[0241.703] GetParent (hWnd=0x20164) returned 0x0
	[0241.703] GetParent (hWnd=0xa014c) returned 0x20164
	[0241.703] malloc (_Size=0x20) returned 0x5747d0
	[0241.704] malloc (_Size=0x18) returned 0x56da50
	[0241.704] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.705] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.705] DefMDIChildProcW (hWnd=0x5016c, uMsg=0x210, wParam=0xffffffffe9000001, lParam=0xb0178) returned 0x0
	[0241.706] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.706] GetWindowLongW (hWnd=0xb0178, nIndex=-20) returned 0
	[0241.706] PostMessageW (hWnd=0x5016c, Msg=0x362, wParam=0xe001, lParam=0x0) returned 1
	[0241.706] GetWindowLongW (hWnd=0x5016c, nIndex=-16) returned 1188020224
	[0241.706] GetClientRect (in: hWnd=0x5016c, lpRect=0xbd948 | out: lpRect=0xbd948) returned 1
	[0241.706] BeginDeferWindowPos (nNumWindows=8) returned 0x10249
	[0241.706] GetTopWindow (hWnd=0x5016c) returned 0xb0178
	[0241.706] GetDlgCtrlID (hWnd=0xb0178) returned 59648
	[0241.707] GetWindow (hWnd=0xb0178, uCmd=0x2) returned 0x0
	[0241.707] GetParent (hWnd=0xb0178) returned 0x5016c
	[0241.707] GetWindowLongW (hWnd=0xb0178, nIndex=-20) returned 0
	[0241.707] GetWindowLongW (hWnd=0xb0178, nIndex=-16) returned 1375731712
	[0241.707] AdjustWindowRectEx (in: lpRect=0xbd948, dwStyle=0x52000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xbd948) returned 1
	[0241.707] GetParent (hWnd=0xb0178) returned 0x5016c
	[0241.707] GetWindowRect (in: hWnd=0xb0178, lpRect=0xbd900 | out: lpRect=0xbd900) returned 1
	[0241.707] ScreenToClient (in: hWnd=0x5016c, lpPoint=0xbd900 | out: lpPoint=0xbd900) returned 1
	[0241.707] ScreenToClient (in: hWnd=0x5016c, lpPoint=0xbd908 | out: lpPoint=0xbd908) returned 1
	[0241.707] EqualRect (lprc1=0xbd900, lprc2=0xbd948) returned 0
	[0241.707] DeferWindowPos (hWinPosInfo=0x10249, hWnd=0xb0178, hWndInsertAfter=0x0, x=0, y=0, cx=870, cy=323, uFlags=0x14) returned 0x10249
	[0241.707] EndDeferWindowPos (hWinPosInfo=0x10249) returned 1
	[0241.707] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x46, wParam=0x0, lParam=0xbd8e0) returned 0x0
	[0241.708] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x83, wParam=0x1, lParam=0xbd8b0) returned 0x0
	[0241.709] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x47, wParam=0x0, lParam=0xbd8e0) returned 0x0
	[0241.709] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x5, wParam=0x0, lParam=0x1430366) returned 0x0
	[0241.709] GetWindowLongW (hWnd=0x10224, nIndex=-20) returned 512
	[0241.710] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x46, wParam=0x0, lParam=0xbcc90) returned 0x0
	[0241.710] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x83, wParam=0x1, lParam=0xbcc60) returned 0x0
	[0241.711] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x46, wParam=0x0, lParam=0xbcc90) returned 0x0
	[0241.711] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x83, wParam=0x1, lParam=0xbcc60) returned 0x0
	[0241.712] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x46, wParam=0x0, lParam=0xbcc90) returned 0x0
	[0241.712] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x83, wParam=0x1, lParam=0xbcc60) returned 0x0
	[0241.713] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0xbcc90) returned 0x0
	[0241.714] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x46, wParam=0x0, lParam=0xbcc90) returned 0x0
	[0241.714] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x83, wParam=0x1, lParam=0xbcc60) returned 0x0
	[0241.715] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x47, wParam=0x0, lParam=0xbcc90) returned 0x0
	[0241.715] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x3, wParam=0x0, lParam=0x20002) returned 0x0
	[0241.715] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x5, wParam=0x0, lParam=0x13f00d5) returned 0x0
	[0241.716] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x47, wParam=0x0, lParam=0xbcc90) returned 0x0
	[0241.716] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x3, wParam=0x0, lParam=0x2028f) returned 0x0
	[0241.717] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x5, wParam=0x0, lParam=0x13f00d5) returned 0x0
	[0241.717] MoveWindow (hWnd=0x1023c, X=0, Y=21, nWidth=213, nHeight=298, bRepaint=1) returned 1
	[0241.719] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x47, wParam=0x0, lParam=0xbcc90) returned 0x0
	[0241.719] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x3, wParam=0x0, lParam=0x100dd) returned 0x0
	[0241.719] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x5, wParam=0x0, lParam=0x14101ac) returned 0x0
	[0241.720] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x47, wParam=0x0, lParam=0xbcc90) returned 0x0
	[0241.721] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x47, wParam=0x0, lParam=0xbcc90) returned 0x0
	[0241.721] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1205, wParam=0x0, lParam=0xbc340) returned 0x1
	[0241.721] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x46, wParam=0x0, lParam=0xbc2a0) returned 0x0
	[0241.722] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x83, wParam=0x1, lParam=0xbc270) returned 0x0
	[0241.723] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x47, wParam=0x0, lParam=0xbc2a0) returned 0x0
	[0241.723] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x5, wParam=0x0, lParam=0x1801aa) returned 0x0
	[0241.724] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x46, wParam=0x0, lParam=0xbc330) returned 0x0
	[0241.724] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x83, wParam=0x1, lParam=0xbc300) returned 0x0
	[0241.725] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x47, wParam=0x0, lParam=0xbc330) returned 0x0
	[0241.725] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x5, wParam=0x0, lParam=0x12e01aa) returned 0x0
	[0241.726] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.726] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x434, wParam=0x0, lParam=0xbb140) returned 0x0
	[0241.726] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0241.726] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0241.727] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x46, wParam=0x0, lParam=0xbc330) returned 0x0
	[0241.728] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x83, wParam=0x1, lParam=0xbc300) returned 0x0
	[0241.728] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x47, wParam=0x0, lParam=0xbc330) returned 0x0
	[0241.729] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x5, wParam=0x0, lParam=0x13f01aa) returned 0x0
	[0241.729] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.729] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x434, wParam=0x0, lParam=0xbb140) returned 0x0
	[0241.729] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0241.730] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0241.731] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1205, wParam=0x0, lParam=0xbc410) returned 0x1
	[0241.731] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x46, wParam=0x0, lParam=0xbc370) returned 0x0
	[0241.732] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x3, wParam=0x0, lParam=0x200de) returned 0x0
	[0241.732] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x5, wParam=0x0, lParam=0x13f01aa) returned 0x0
	[0241.732] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.732] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x434, wParam=0x0, lParam=0xbbaa0) returned 0x0
	[0241.733] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0241.733] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0241.734] CreateWindowExW (dwExStyle=0x0, lpClassName="msctls_statusbar32", lpWindowName="Ready", dwStyle=0x5400014a, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x5016c, hMenu=0x1003, hInstance=0xff6d0000, lpParam=0x0) returned 0x10266
	[0241.734] GetParent (hWnd=0x10266) returned 0x10012
	[0241.734] SetWindowLongPtrW (hWnd=0x10266, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc65230c
	[0241.734] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10266, lParam=0xbd1e0) returned 0x0
	[0241.735] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x81, wParam=0x0, lParam=0xbd2c0) returned 0x1
	[0241.735] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x83, wParam=0x0, lParam=0xbd340) returned 0x0
	[0241.736] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x1, wParam=0x0, lParam=0xbd2a0) returned 0x0
	[0241.736] DefMDIChildProcW (hWnd=0x5016c, uMsg=0x55, wParam=0x10266, lParam=0x3) returned 0x2
	[0241.737] DefMDIChildProcW (hWnd=0x5016c, uMsg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.737] CreateWindowExW (dwExStyle=0x0, lpClassName="msctls_progress32", lpWindowName=0x0, dwStyle=0x54000001, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10266, hMenu=0x1000, hInstance=0xff6d0000, lpParam=0x0) returned 0x10268
	[0241.738] GetParent (hWnd=0x10268) returned 0x10012
	[0241.738] SetWindowLongPtrW (hWnd=0x10268, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6cae1c
	[0241.738] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x10268, lParam=0xbc530) returned 0x0
	[0241.738] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x81, wParam=0x0, lParam=0xbc610) returned 0x1
	[0241.739] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0xbc040) returned 0x0
	[0241.739] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0xbc040) returned 0x0
	[0241.740] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x83, wParam=0x0, lParam=0xbc690) returned 0x0
	[0241.740] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x1, wParam=0x0, lParam=0xbc610) returned 0x0
	[0241.741] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.741] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.742] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x210, wParam=0x10000001, lParam=0x10268) returned 0x0
	[0241.743] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.743] CreateWindowExW (dwExStyle=0x0, lpClassName="STATIC", lpWindowName="", dwStyle=0x5400000b, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10266, hMenu=0x1001, hInstance=0xff6d0000, lpParam=0x0) returned 0x1026a
	[0241.743] malloc (_Size=0x100) returned 0x5679b0
	[0241.743] GetParent (hWnd=0x1026a) returned 0x10012
	[0241.743] SetWindowLongPtrW (hWnd=0x1026a, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6d61b4
	[0241.743] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x1026a, lParam=0xbc550) returned 0x0
	[0241.744] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x81, wParam=0x0, lParam=0xbc630) returned 0x1
	[0241.828] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x83, wParam=0x0, lParam=0xbc690) returned 0x0
	[0242.296] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x1, wParam=0x0, lParam=0xbc620) returned 0x0
	[0242.297] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0242.297] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0242.298] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x210, wParam=0x10010001, lParam=0x1026a) returned 0x0
	[0242.298] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0242.298] GetWindowLongW (hWnd=0x10268, nIndex=-20) returned 0
	[0242.299] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x30, wParam=0x40a0a1e, lParam=0x0) returned 0x0
	[0242.300] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0242.300] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x46, wParam=0x0, lParam=0xbca50) returned 0x0
	[0242.300] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x83, wParam=0x1, lParam=0xbca20) returned 0x0
	[0242.301] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.302] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x47, wParam=0x0, lParam=0xbca50) returned 0x0
	[0242.302] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x5, wParam=0x0, lParam=0x170000) returned 0x0
	[0242.303] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x46, wParam=0x0, lParam=0xbb940) returned 0x0
	[0242.303] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.304] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40a, wParam=0x0, lParam=0xbbd60) returned 0x1
	[0242.304] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40a, wParam=0x1, lParam=0xbbd40) returned 0x0
	[0242.305] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40a, wParam=0x2, lParam=0xbbd50) returned 0x0
	[0242.305] SetWindowPos (hWnd=0x10268, hWndInsertAfter=0x0, X=4, Y=4, cx=-121272495, cy=2042, uFlags=0x224) returned 1
	[0242.305] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x46, wParam=0x0, lParam=0xbbc70) returned 0x0
	[0242.306] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x83, wParam=0x1, lParam=0xbbc40) returned 0x0
	[0242.307] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.307] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x47, wParam=0x0, lParam=0xbbc70) returned 0x0
	[0242.307] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x3, wParam=0x0, lParam=0x40004) returned 0x0
	[0242.308] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x5, wParam=0x0, lParam=0x7fa0000) returned 0x0
	[0242.308] SetWindowPos (hWnd=0x1026a, hWndInsertAfter=0x0, X=-121272487, Y=4, cx=-67, cy=-4, uFlags=0x224) returned 1
	[0242.308] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x46, wParam=0x0, lParam=0xbbc70) returned 0x0
	[0242.309] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x83, wParam=0x1, lParam=0xbbc40) returned 0x0
	[0242.310] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.310] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x47, wParam=0x0, lParam=0xbbc70) returned 0x0
	[0242.310] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x3, wParam=0x0, lParam=0x48000) returned 0x0
	[0242.311] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40a, wParam=0x0, lParam=0xbce70) returned 0x1
	[0242.312] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40a, wParam=0x1, lParam=0xbce50) returned 0x0
	[0242.312] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40a, wParam=0x2, lParam=0xbce60) returned 0x0
	[0242.312] SetWindowPos (hWnd=0x10268, hWndInsertAfter=0x0, X=4, Y=4, cx=-121272495, cy=2042, uFlags=0x224) returned 1
	[0242.313] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x46, wParam=0x0, lParam=0xbcd80) returned 0x0
	[0242.313] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x83, wParam=0x1, lParam=0xbcd50) returned 0x0
	[0242.314] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.314] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x47, wParam=0x0, lParam=0xbcd80) returned 0x0
	[0242.314] SetWindowPos (hWnd=0x1026a, hWndInsertAfter=0x0, X=-121272487, Y=4, cx=-780740, cy=-5, uFlags=0x224) returned 1
	[0242.315] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x46, wParam=0x0, lParam=0xbcd80) returned 0x0
	[0242.315] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x83, wParam=0x1, lParam=0xbcd50) returned 0x0
	[0242.316] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.316] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x47, wParam=0x0, lParam=0xbcd80) returned 0x0
	[0242.317] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0242.318] DefMDIChildProcW (hWnd=0x5016c, uMsg=0x210, wParam=0x10030001, lParam=0x10266) returned 0x0
	[0242.318] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0242.319] GetDC (hWnd=0x10266) returned 0x8010666
	[0242.319] malloc (_Size=0x88) returned 0x500560
	[0242.319] malloc (_Size=0x100) returned 0x567ac0
	[0242.319] lstrlenW (lpString="") returned 0
	[0242.319] lstrlenW (lpString="                                ") returned 32
	[0242.319] malloc (_Size=0x4e) returned 0x5621b0
	[0242.319] lstrlenW (lpString="") returned 0
	[0242.319] free (_Block=0x5621b0) 
	[0242.319] lstrlenW (lpString="                    ") returned 20
	[0242.320] malloc (_Size=0x36) returned 0x56b8b0
	[0242.320] lstrlenW (lpString="") returned 0
	[0242.320] free (_Block=0x56b8b0) 
	[0242.320] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x404, wParam=0x3, lParam=0xbd9d0) returned 0x1
	[0242.320] free (_Block=0x500560) 
	[0242.320] free (_Block=0x567ac0) 
	[0242.320] ReleaseDC (hWnd=0x10266, hDC=0x8010666) returned 1
	[0242.320] malloc (_Size=0x100) returned 0x567ac0
	[0242.320] malloc (_Size=0x100) returned 0x567bd0
	[0242.321] malloc (_Size=0x58) returned 0x5621b0
	[0242.321] malloc (_Size=0x28) returned 0x574800
	[0242.321] FindResourceW (hModule=0xff6d0000, lpName=0xa2, lpType=0x4) returned 0x150718
	[0242.322] malloc (_Size=0x70) returned 0x574e10
	[0242.322] malloc (_Size=0x18) returned 0x56da70
	[0242.322] GetWindowLongW (hWnd=0x5016c, nIndex=-16) returned 1188020224
	[0242.322] lstrlenW (lpString="&Close\x09Ctrl+F4") returned 14
	[0242.322] malloc (_Size=0x2a) returned 0x56b8b0
	[0242.323] lstrlenW (lpString="Nex&t\x09Ctrl+F6") returned 13
	[0242.323] malloc (_Size=0x28) returned 0x574830
	[0242.323] free (_Block=0x574830) 
	[0242.323] free (_Block=0x56b8b0) 
	[0242.323] DestroyMenu (hMenu=0x3022f) returned 1
	[0242.323] GetParent (hWnd=0xb0178) returned 0x5016c
	[0242.324] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x46, wParam=0x0, lParam=0xbd980) returned 0x0
	[0242.324] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x83, wParam=0x1, lParam=0xbd950) returned 0x0
	[0242.325] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x46, wParam=0x0, lParam=0xbd980) returned 0x0
	[0242.325] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x83, wParam=0x1, lParam=0xbd950) returned 0x0
	[0242.326] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x47, wParam=0x0, lParam=0xbd980) returned 0x0
	[0242.326] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x3, wParam=0x0, lParam=0x12c0000) returned 0x0
	[0242.327] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x407, wParam=0x0, lParam=0xbcbd0) returned 0x1
	[0242.328] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x404, wParam=0x3, lParam=0xbcbe0) returned 0x1
	[0242.328] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x5, wParam=0x0, lParam=0x170366) returned 0x0
	[0242.328] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x46, wParam=0x0, lParam=0xbc870) returned 0x0
	[0242.329] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.329] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40a, wParam=0x0, lParam=0xbcc90) returned 0x1
	[0242.330] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40a, wParam=0x1, lParam=0xbcc70) returned 0x1
	[0242.330] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40a, wParam=0x2, lParam=0xbcc80) returned 0x1
	[0242.330] SetWindowPos (hWnd=0x10268, hWndInsertAfter=0x0, X=654, Y=4, cx=127, cy=17, uFlags=0x224) returned 1
	[0242.330] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x46, wParam=0x0, lParam=0xbcba0) returned 0x0
	[0242.331] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x83, wParam=0x1, lParam=0xbcb70) returned 0x0
	[0242.343] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.343] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x47, wParam=0x0, lParam=0xbcba0) returned 0x0
	[0242.344] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x3, wParam=0x0, lParam=0x4028e) returned 0x0
	[0242.344] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x5, wParam=0x0, lParam=0x11007f) returned 0x0
	[0242.344] SetWindowPos (hWnd=0x1026a, hWndInsertAfter=0x0, X=785, Y=4, cx=65, cy=17, uFlags=0x224) returned 1
	[0242.345] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x46, wParam=0x0, lParam=0xbcba0) returned 0x0
	[0242.345] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x83, wParam=0x1, lParam=0xbcb70) returned 0x0
	[0242.346] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.346] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x47, wParam=0x0, lParam=0xbcba0) returned 0x0
	[0242.347] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x3, wParam=0x0, lParam=0x40311) returned 0x0
	[0242.347] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1026a, Msg=0x5, wParam=0x0, lParam=0x110041) returned 0x0
	[0242.348] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x47, wParam=0x0, lParam=0xbd980) returned 0x0
	[0242.348] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x5, wParam=0x0, lParam=0x12c0366) returned 0x0
	[0242.349] GetWindowLongW (hWnd=0x10224, nIndex=-20) returned 512
	[0242.349] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x46, wParam=0x0, lParam=0xbcd30) returned 0x0
	[0242.350] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x83, wParam=0x1, lParam=0xbcd00) returned 0x0
	[0242.350] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x46, wParam=0x0, lParam=0xbcd30) returned 0x0
	[0242.351] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x83, wParam=0x1, lParam=0xbcd00) returned 0x0
	[0242.351] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x46, wParam=0x0, lParam=0xbcd30) returned 0x0
	[0242.351] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x83, wParam=0x1, lParam=0xbcd00) returned 0x0
	[0242.352] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0xbcd30) returned 0x0
	[0242.352] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x46, wParam=0x0, lParam=0xbcd30) returned 0x0
	[0242.353] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x83, wParam=0x1, lParam=0xbcd00) returned 0x0
	[0242.354] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x47, wParam=0x0, lParam=0xbcd30) returned 0x0
	[0242.354] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x5, wParam=0x0, lParam=0x12800d5) returned 0x0
	[0242.355] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x47, wParam=0x0, lParam=0xbcd30) returned 0x0
	[0242.355] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x5, wParam=0x0, lParam=0x12800d5) returned 0x0
	[0242.355] MoveWindow (hWnd=0x1023c, X=0, Y=21, nWidth=213, nHeight=275, bRepaint=1) returned 1
	[0242.357] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x47, wParam=0x0, lParam=0xbcd30) returned 0x0
	[0242.358] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x5, wParam=0x0, lParam=0x12a01ac) returned 0x0
	[0242.360] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x47, wParam=0x0, lParam=0xbcd30) returned 0x0
	[0242.360] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1205, wParam=0x0, lParam=0xbc3e0) returned 0x1
	[0242.360] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x46, wParam=0x0, lParam=0xbc340) returned 0x0
	[0242.362] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x5, wParam=0x0, lParam=0x12801aa) returned 0x0
	[0242.362] GetPropW (hWnd=0x10238, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0242.362] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10238, Msg=0x434, wParam=0x0, lParam=0xbbb40) returned 0x0
	[0242.363] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0242.363] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0242.365] DefMDIChildProcW (hWnd=0x5016c, uMsg=0x7c, wParam=0xfffffffffffffff0, lParam=0xbdaa0) returned 0x0
	[0242.365] DefMDIChildProcW (hWnd=0x5016c, uMsg=0x7d, wParam=0xfffffffffffffff0, lParam=0xbdaa0) returned 0x0
	[0242.365] DefMDIChildProcW (hWnd=0x5016c, uMsg=0xd, wParam=0x104, lParam=0x1e272d0) returned 0x0
	[0242.366] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0xbd318) returned 0x0
	[0242.366] GetParent (hWnd=0xb0178) returned 0x5016c
	[0242.367] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x46, wParam=0x0, lParam=0xbda40) returned 0x0
	[0242.367] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x46, wParam=0x0, lParam=0xbda40) returned 0x0
	[0242.367] GetParent (hWnd=0x5016c) returned 0xa014c
	[0242.367] GetParent (hWnd=0xa014c) returned 0x20164
	[0242.367] GetParent (hWnd=0x20164) returned 0x0
	[0242.368] SendMessageW (hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0242.368] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0242.368] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0242.368] GetWindowTextW (in: hWnd=0x20164, lpString=0xbd890, nMaxCount=256 | out: lpString="Microsoft Management Console") returned 28
	[0242.369] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0xd, wParam=0x100, lParam=0xbd890) returned 0x1c
	[0242.370] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xa014c, Msg=0x210, wParam=0xffffffffff010001, lParam=0x5016c) returned 0x0
	[0242.370] free (_Block=0x570c90) 
	[0242.370] GetDlgItem (hDlg=0x5016c, nIDDlgItem=59648) returned 0xb0178
	[0242.370] GetTopWindow (hWnd=0xb0178) returned 0x10224
	[0242.370] GetDlgItem (hDlg=0xb0178, nIDDlgItem=59648) returned 0x0
	[0242.370] GetTopWindow (hWnd=0xb0178) returned 0x10224
	[0242.370] GetDlgItem (hDlg=0x10224, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x10224) returned 0x10226
	[0242.371] GetDlgItem (hDlg=0x10226, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x10226) returned 0x0
	[0242.371] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x0
	[0242.371] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x2023a
	[0242.371] GetDlgItem (hDlg=0x2023a, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x2023a) returned 0x1023c
	[0242.371] GetDlgItem (hDlg=0x1023c, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x1023c) returned 0x1023e
	[0242.371] GetDlgItem (hDlg=0x1023e, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x1023e) returned 0x10240
	[0242.371] GetDlgItem (hDlg=0x10240, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x10240) returned 0x10242
	[0242.371] GetDlgItem (hDlg=0x10242, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x10242) returned 0x0
	[0242.371] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x0
	[0242.371] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10244
	[0242.371] GetDlgItem (hDlg=0x10244, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x10244) returned 0x10246
	[0242.371] GetDlgItem (hDlg=0x10246, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x10246) returned 0x0
	[0242.371] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x0
	[0242.371] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x0
	[0242.371] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x0
	[0242.371] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x0
	[0242.371] GetWindow (hWnd=0x2023a, uCmd=0x2) returned 0x10220
	[0242.371] GetDlgItem (hDlg=0x10220, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x10220) returned 0x0
	[0242.371] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x20208
	[0242.371] GetDlgItem (hDlg=0x20208, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x20208) returned 0x0
	[0242.371] GetWindow (hWnd=0x20208, uCmd=0x2) returned 0x10248
	[0242.371] GetDlgItem (hDlg=0x10248, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x10248) returned 0x1024a
	[0242.371] GetDlgItem (hDlg=0x1024a, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x1024a) returned 0x0
	[0242.371] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x1024c
	[0242.371] GetDlgItem (hDlg=0x1024c, nIDDlgItem=59648) returned 0x0
	[0242.371] GetTopWindow (hWnd=0x1024c) returned 0x0
	[0242.371] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x0
	[0242.371] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x0
	[0242.372] GetTopWindow (hWnd=0x5016c) returned 0xb0178
	[0242.372] GetWindowLongW (hWnd=0xb0178, nIndex=-20) returned 0
	[0242.374] malloc (_Size=0x38) returned 0x56b8b0
	[0242.374] GetLastError () returned 0x6
	[0242.374] SetLastError (dwErrCode=0x6) 
	[0242.374] DeleteObject (ho=0x4050a22) returned 1
	[0242.374] GetLastError () returned 0x0
	[0242.374] SetLastError (dwErrCode=0x0) 
	[0242.374] malloc (_Size=0x400) returned 0x574e90
	[0242.374] malloc (_Size=0x400) returned 0x574e90
	[0242.374] malloc (_Size=0x400) returned 0x574e90
	[0242.374] malloc (_Size=0x20) returned 0x574830
	[0242.374] malloc (_Size=0x20) returned 0x574860
	[0242.374] malloc (_Size=0x400) returned 0x574e90
	[0242.374] malloc (_Size=0x30) returned 0x56b8f0
	[0242.374] malloc (_Size=0x30) returned 0x56b930
	[0242.374] malloc (_Size=0x400) returned 0x574e90
	[0242.375] malloc (_Size=0x400) returned 0x574e90
	[0242.375] malloc (_Size=0x400) returned 0x574e90
	[0242.375] malloc (_Size=0x400) returned 0x574e90
	[0242.375] malloc (_Size=0x400) returned 0x574e90
	[0242.375] malloc (_Size=0x20) returned 0x574890
	[0242.375] malloc (_Size=0x20) returned 0x5748c0
	[0242.375] malloc (_Size=0x400) returned 0x574e90
	[0242.375] malloc (_Size=0x400) returned 0x574e90
	[0242.375] malloc (_Size=0x400) returned 0x574e90
	[0242.375] malloc (_Size=0x20) returned 0x5748f0
	[0242.375] malloc (_Size=0x20) returned 0x574920
	[0242.375] malloc (_Size=0x400) returned 0x574e90
	[0242.375] malloc (_Size=0x400) returned 0x574e90
	[0242.375] malloc (_Size=0x30) returned 0x56b970
	[0242.375] malloc (_Size=0x30) returned 0x56b9b0
	[0242.376] malloc (_Size=0x70) returned 0x570c90
	[0242.376] malloc (_Size=0xe0) returned 0x574e90
	[0242.376] malloc (_Size=0x150) returned 0x574f80
	[0242.376] malloc (_Size=0x20) returned 0x574950
	[0242.376] malloc (_Size=0x20) returned 0x574980
	[0242.376] malloc (_Size=0x20) returned 0x5749b0
	[0242.376] malloc (_Size=0x20) returned 0x5749e0
	[0242.376] malloc (_Size=0x1c0) returned 0x5750e0
	[0242.376] malloc (_Size=0x20) returned 0x574a10
	[0242.376] malloc (_Size=0x20) returned 0x574a40
	[0242.377] malloc (_Size=0x30) returned 0x56b9f0
	[0242.377] malloc (_Size=0x30) returned 0x56ba30
	[0242.377] malloc (_Size=0x30) returned 0x56ba70
	[0242.377] malloc (_Size=0x30) returned 0x56bab0
	[0242.377] malloc (_Size=0x2a0) returned 0x5752b0
	[0242.377] malloc (_Size=0x20) returned 0x574950
	[0242.377] malloc (_Size=0x20) returned 0x574980
	[0242.377] malloc (_Size=0x30) returned 0x56baf0
	[0242.377] malloc (_Size=0x30) returned 0x56bb30
	[0242.378] malloc (_Size=0x3f0) returned 0x574e90
	[0242.378] malloc (_Size=0x20) returned 0x574a10
	[0242.378] malloc (_Size=0x20) returned 0x574a40
	[0242.378] malloc (_Size=0x30) returned 0x56b9f0
	[0242.378] malloc (_Size=0x30) returned 0x56ba30
	[0242.378] malloc (_Size=0x5b0) returned 0x575290
	[0242.379] malloc (_Size=0x20) returned 0x574950
	[0242.379] malloc (_Size=0x20) returned 0x574980
	[0242.379] malloc (_Size=0x30) returned 0x56baf0
	[0242.379] malloc (_Size=0x30) returned 0x56bb30
	[0242.379] malloc (_Size=0x20) returned 0x574a10
	[0242.379] malloc (_Size=0x20) returned 0x574a40
	[0242.379] malloc (_Size=0x20) returned 0x5749b0
	[0242.379] malloc (_Size=0x20) returned 0x5749e0
	[0242.379] malloc (_Size=0x20) returned 0x574a70
	[0242.379] malloc (_Size=0x20) returned 0x574aa0
	[0242.380] malloc (_Size=0x850) returned 0x575850
	[0242.380] malloc (_Size=0x20) returned 0x574a10
	[0242.380] malloc (_Size=0x20) returned 0x574a40
	[0242.380] malloc (_Size=0x30) returned 0x56b9f0
	[0242.380] malloc (_Size=0x30) returned 0x56ba30
	[0242.380] malloc (_Size=0x20) returned 0x5749b0
	[0242.380] malloc (_Size=0x20) returned 0x5749e0
	[0242.380] malloc (_Size=0x20) returned 0x574a70
	[0242.380] malloc (_Size=0x20) returned 0x574aa0
	[0242.380] malloc (_Size=0x20) returned 0x574950
	[0242.381] malloc (_Size=0x20) returned 0x574980
	[0242.381] malloc (_Size=0x20) returned 0x574ad0
	[0242.381] malloc (_Size=0x20) returned 0x574b00
	[0242.381] malloc (_Size=0x30) returned 0x56baf0
	[0242.381] malloc (_Size=0x30) returned 0x56bb30
	[0242.381] malloc (_Size=0x30) returned 0x56ba70
	[0242.381] malloc (_Size=0x30) returned 0x56bab0
	[0242.381] malloc (_Size=0x30) returned 0x56bb70
	[0242.381] malloc (_Size=0x30) returned 0x56bbb0
	[0242.382] malloc (_Size=0x28) returned 0x574830
	[0242.382] GetLastError () returned 0x0
	[0242.382] SetLastError (dwErrCode=0x0) 
	[0242.382] DeleteObject (ho=0x4050a20) returned 1
	[0242.382] GetLastError () returned 0x0
	[0242.382] SetLastError (dwErrCode=0x0) 
	[0242.383] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x1132, wParam=0x0, lParam=0xbe7d0) returned 0x3f213f0
	[0242.383] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.384] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.431] malloc (_Size=0x20e) returned 0x574e90
	[0242.431] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd048) returned 0x1
	[0242.431] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd048) returned 0x1
	[0242.432] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.433] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.433] lstrlenW (lpString="Computer Management (Local)") returned 27
	[0242.433] malloc (_Size=0x40) returned 0x1ec020
	[0242.433] free (_Block=0x574e90) 
	[0242.433] malloc (_Size=0x40) returned 0x1ec0c0
	[0242.443] malloc (_Size=0x30) returned 0x56b8f0
	[0242.444] malloc (_Size=0x10) returned 0x56dab0
	[0242.444] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.445] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.445] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.446] malloc (_Size=0x18) returned 0x56dab0
	[0242.446] malloc (_Size=0x30) returned 0x56b8f0
	[0242.447] malloc (_Size=0x30) returned 0x56b970
	[0242.447] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x1102, wParam=0x2, lParam=0x3f213f0) returned 0x1
	[0242.447] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.448] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113f, wParam=0x0, lParam=0xbd7e8) returned 0x1
	[0242.448] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.449] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd720) returned 0x1
	[0242.449] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd720) returned 0x1
	[0242.519] malloc (_Size=0x98) returned 0x574f50
	[0242.520] malloc (_Size=0x28) returned 0x574890
	[0242.520] malloc (_Size=0x28) returned 0x574890
	[0242.521] malloc (_Size=0x28) returned 0x574890
	[0242.521] FindResourceW (hModule=0x7fef7fc0000, lpName=0xd, lpType=0x6) returned 0x1dc0470
	[0242.521] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xc1, lpBuffer=0xbce00, cchBufferMax=256 | out: lpBuffer="Computer Management") returned 0x13
	[0242.521] lstrlenW (lpString="Computer Management") returned 19
	[0242.521] malloc (_Size=0x34) returned 0x56b930
	[0242.521] FindResourceW (hModule=0x7fef7fc0000, lpName=0xc, lpType=0x6) returned 0x1dc0460
	[0242.521] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xbe, lpBuffer=0xbce00, cchBufferMax=256 | out: lpBuffer="System Tools") returned 0xc
	[0242.521] lstrlenW (lpString="System Tools") returned 12
	[0242.521] malloc (_Size=0x26) returned 0x5748f0
	[0242.522] FindResourceW (hModule=0x7fef7fc0000, lpName=0xc, lpType=0x6) returned 0x1dc0460
	[0242.522] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xbf, lpBuffer=0xbce00, cchBufferMax=256 | out: lpBuffer="Services and Applications") returned 0x19
	[0242.522] lstrlenW (lpString="Services and Applications") returned 25
	[0242.522] malloc (_Size=0x40) returned 0x1ec020
	[0242.522] FindResourceW (hModule=0x7fef7fc0000, lpName=0xd, lpType=0x6) returned 0x1dc0470
	[0242.522] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xc0, lpBuffer=0xbce00, cchBufferMax=256 | out: lpBuffer="Storage") returned 0x7
	[0242.522] lstrlenW (lpString="Storage") returned 7
	[0242.522] malloc (_Size=0x1c) returned 0x574860
	[0242.522] lstrlenW (lpString="") returned 0
	[0242.522] SetCursor (hCursor=0x10007) returned 0x10007
	[0242.584] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0242.584] InvalidateRect (hWnd=0x101ae, lpRect=0x0, bErase=1) returned 1
	[0242.584] InvalidateRect (hWnd=0x601ca, lpRect=0x0, bErase=1) returned 1
	[0242.584] InvalidateRect (hWnd=0x101f2, lpRect=0x0, bErase=1) returned 1
	[0242.584] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f213f0
	[0242.584] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc9f0) returned 0x1
	[0242.585] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc9f0) returned 0x1
	[0242.585] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc9f0) returned 0x1
	[0242.585] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc9f0) returned 0x1
	[0242.586] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x0
	[0242.586] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc9c0) returned 0x1
	[0242.586] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc9c0) returned 0x1
	[0242.587] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113f, wParam=0x0, lParam=0xbca30) returned 0x1
	[0242.587] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.588] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.588] malloc (_Size=0x20e) returned 0x575360
	[0242.588] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbb458) returned 0x1
	[0242.588] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbb458) returned 0x1
	[0242.589] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.589] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.590] lstrlenW (lpString="Computer Management (Local)") returned 27
	[0242.590] malloc (_Size=0x40) returned 0x1ec070
	[0242.590] free (_Block=0x575360) 
	[0242.590] malloc (_Size=0x40) returned 0x1ec0c0
	[0242.591] malloc (_Size=0x30) returned 0x56b9b0
	[0242.591] malloc (_Size=0x10) returned 0x56daf0
	[0242.591] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.592] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.592] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.593] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.594] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x3, lParam=0x3f213f0) returned 0x0
	[0242.594] InvalidateRect (hWnd=0x10220, lpRect=0x0, bErase=1) returned 1
	[0242.594] InvalidateRect (hWnd=0x2023a, lpRect=0x0, bErase=1) returned 1
	[0242.594] InvalidateRect (hWnd=0x10248, lpRect=0x0, bErase=1) returned 1
	[0242.594] GetLastError () returned 0x0
	[0242.594] SetLastError (dwErrCode=0x0) 
	[0242.594] SetCursor (hCursor=0x10007) returned 0x10007
	[0242.594] GetLastError () returned 0x0
	[0242.594] SetLastError (dwErrCode=0x0) 
	[0242.595] malloc (_Size=0xb0) returned 0x575260
	[0242.595] lstrlenW (lpString="") returned 0
	[0242.595] malloc (_Size=0x100) returned 0x567ce0
	[0242.595] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0242.595] InvalidateRect (hWnd=0x101ae, lpRect=0x0, bErase=1) returned 1
	[0242.595] InvalidateRect (hWnd=0x601ca, lpRect=0x0, bErase=1) returned 1
	[0242.595] InvalidateRect (hWnd=0x101f2, lpRect=0x0, bErase=1) returned 1
	[0242.596] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f213f0
	[0242.596] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc990) returned 0x1
	[0242.596] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc990) returned 0x1
	[0242.596] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc990) returned 0x1
	[0242.597] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc990) returned 0x1
	[0242.597] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x0
	[0242.598] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x0
	[0242.598] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc9d0) returned 0x1
	[0242.598] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc9d0) returned 0x1
	[0242.599] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113f, wParam=0x0, lParam=0xbca60) returned 0x1
	[0242.599] InvalidateRect (hWnd=0x10220, lpRect=0x0, bErase=1) returned 1
	[0242.599] InvalidateRect (hWnd=0x2023a, lpRect=0x0, bErase=1) returned 1
	[0242.599] InvalidateRect (hWnd=0x10248, lpRect=0x0, bErase=1) returned 1
	[0242.599] malloc (_Size=0xb0) returned 0x5754d0
	[0242.599] lstrlenW (lpString="") returned 0
	[0242.600] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0242.600] InvalidateRect (hWnd=0x101ae, lpRect=0x0, bErase=1) returned 1
	[0242.600] InvalidateRect (hWnd=0x601ca, lpRect=0x0, bErase=1) returned 1
	[0242.600] InvalidateRect (hWnd=0x101f2, lpRect=0x0, bErase=1) returned 1
	[0242.600] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f213f0
	[0242.600] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc990) returned 0x1
	[0242.601] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc990) returned 0x1
	[0242.601] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc990) returned 0x1
	[0242.601] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc990) returned 0x1
	[0242.602] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x0
	[0242.602] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x0
	[0242.602] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc9d0) returned 0x1
	[0242.691] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc9d0) returned 0x1
	[0242.692] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113f, wParam=0x0, lParam=0xbca60) returned 0x1
	[0242.692] InvalidateRect (hWnd=0x10220, lpRect=0x0, bErase=1) returned 1
	[0242.692] InvalidateRect (hWnd=0x2023a, lpRect=0x0, bErase=1) returned 1
	[0242.692] InvalidateRect (hWnd=0x10248, lpRect=0x0, bErase=1) returned 1
	[0242.692] malloc (_Size=0xb0) returned 0x575740
	[0242.692] lstrlenW (lpString="") returned 0
	[0242.693] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0242.693] InvalidateRect (hWnd=0x101ae, lpRect=0x0, bErase=1) returned 1
	[0242.693] InvalidateRect (hWnd=0x601ca, lpRect=0x0, bErase=1) returned 1
	[0242.693] InvalidateRect (hWnd=0x101f2, lpRect=0x0, bErase=1) returned 1
	[0242.694] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f213f0
	[0242.694] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc990) returned 0x1
	[0242.694] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc990) returned 0x1
	[0242.694] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc990) returned 0x1
	[0242.695] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc990) returned 0x1
	[0242.695] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x0
	[0242.695] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x0
	[0242.696] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc9d0) returned 0x1
	[0242.696] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc9d0) returned 0x1
	[0242.696] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113f, wParam=0x0, lParam=0xbca60) returned 0x1
	[0242.697] InvalidateRect (hWnd=0x10220, lpRect=0x0, bErase=1) returned 1
	[0242.697] InvalidateRect (hWnd=0x2023a, lpRect=0x0, bErase=1) returned 1
	[0242.697] InvalidateRect (hWnd=0x10248, lpRect=0x0, bErase=1) returned 1
	[0242.697] malloc (_Size=0x28) returned 0x5748c0
	[0242.698] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x1132, wParam=0x0, lParam=0xbd690) returned 0x3f21450
	[0242.698] malloc (_Size=0x18) returned 0x56dbb0
	[0242.698] malloc (_Size=0x30) returned 0x56b9b0
	[0242.698] malloc (_Size=0x30) returned 0x56baf0
	[0242.698] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113f, wParam=0x0, lParam=0xbd710) returned 0x1
	[0242.699] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x1132, wParam=0x0, lParam=0xbd690) returned 0x3f214b0
	[0242.699] malloc (_Size=0x18) returned 0x56dbd0
	[0242.699] malloc (_Size=0x30) returned 0x56bb30
	[0242.699] malloc (_Size=0x30) returned 0x56ba70
	[0242.699] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113f, wParam=0x0, lParam=0xbd710) returned 0x1
	[0242.700] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x1132, wParam=0x0, lParam=0xbd690) returned 0x3f21510
	[0242.700] malloc (_Size=0x18) returned 0x56dbf0
	[0242.700] malloc (_Size=0x30) returned 0x56bab0
	[0242.700] malloc (_Size=0x30) returned 0x56bbf0
	[0242.700] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113f, wParam=0x0, lParam=0xbd710) returned 0x1
	[0242.700] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd7a0) returned 0x1
	[0242.701] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd7a0) returned 0x1
	[0242.701] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x3f21510
	[0242.702] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.703] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.703] malloc (_Size=0x20e) returned 0x576260
	[0242.703] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd5e8) returned 0x1
	[0242.704] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd5e8) returned 0x1
	[0242.704] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.705] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.705] lstrlenW (lpString="System Tools") returned 12
	[0242.705] malloc (_Size=0x20) returned 0x574920
	[0242.705] free (_Block=0x576260) 
	[0242.705] malloc (_Size=0x20) returned 0x5748c0
	[0242.705] malloc (_Size=0x30) returned 0x56bc30
	[0242.706] malloc (_Size=0x10) returned 0x576290
	[0242.706] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.707] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.707] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.708] malloc (_Size=0x20e) returned 0x576a60
	[0242.708] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd5e8) returned 0x1
	[0242.708] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd5e8) returned 0x1
	[0242.708] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.709] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.709] lstrlenW (lpString="Storage") returned 7
	[0242.709] free (_Block=0x576a60) 
	[0242.709] malloc (_Size=0x10) returned 0x576290
	[0242.710] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.710] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.711] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.711] malloc (_Size=0x20e) returned 0x576a60
	[0242.711] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd5e8) returned 0x1
	[0242.712] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd5e8) returned 0x1
	[0242.712] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.713] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.713] lstrlenW (lpString="Services and Applications") returned 25
	[0242.713] malloc (_Size=0x40) returned 0x1ebfd0
	[0242.713] free (_Block=0x576a60) 
	[0242.713] malloc (_Size=0x40) returned 0x1ec0c0
	[0242.713] malloc (_Size=0x10) returned 0x576290
	[0242.714] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.715] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.715] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.716] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.716] GetWindowLongW (hWnd=0x10224, nIndex=-20) returned 512
	[0242.717] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x46, wParam=0x0, lParam=0xbe780) returned 0x0
	[0242.717] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x46, wParam=0x0, lParam=0xbe780) returned 0x0
	[0242.718] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x46, wParam=0x0, lParam=0xbe780) returned 0x0
	[0242.718] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0xbe780) returned 0x0
	[0242.719] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x46, wParam=0x0, lParam=0xbe780) returned 0x0
	[0242.719] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.720] GetWindowLongW (hWnd=0x10224, nIndex=-20) returned 512
	[0242.720] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x46, wParam=0x0, lParam=0xbe750) returned 0x0
	[0242.721] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x46, wParam=0x0, lParam=0xbe750) returned 0x0
	[0242.721] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x46, wParam=0x0, lParam=0xbe750) returned 0x0
	[0242.722] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0xbe750) returned 0x0
	[0242.722] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x46, wParam=0x0, lParam=0xbe750) returned 0x0
	[0242.723] malloc (_Size=0x28) returned 0x574920
	[0242.723] malloc (_Size=0x28) returned 0x5748c0
	[0242.723] malloc (_Size=0x28) returned 0x574a70
	[0242.723] malloc (_Size=0x10) returned 0x576290
	[0242.723] malloc (_Size=0x68) returned 0x571060
	[0242.723] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f213f0
	[0242.723] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbe830) returned 0x1
	[0242.724] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbe830) returned 0x1
	[0242.724] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbe830) returned 0x1
	[0242.724] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbe830) returned 0x1
	[0242.725] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f213f0
	[0242.725] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110b, wParam=0x9, lParam=0x3f213f0) 
	[0242.725] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.726] free (_Block=0x573f10) 
	[0242.726] GetProcAddress (hModule=0x7fefc630000, lpProcName="ImageList_Destroy") returned 0x7fefc6907a4
	[0242.726] ImageList_Destroy (himl=0x34a350) returned 1
	[0242.727] ImageList_Destroy (himl=0x34aaa0) returned 1
	[0242.824] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x34a350
	[0242.824] ImageList_Create (cx=32, cy=32, flags=0x21, cInitial=20, cGrow=10) returned 0x34aaa0
	[0242.827] GetLastError () returned 0x6
	[0242.827] SetLastError (dwErrCode=0x6) 
	[0242.827] GetLastError () returned 0x6
	[0242.827] SetLastError (dwErrCode=0x6) 
	[0242.828] GetLastError () returned 0x6
	[0242.828] SetLastError (dwErrCode=0x6) 
	[0242.828] GetLastError () returned 0x6
	[0242.828] SetLastError (dwErrCode=0x6) 
	[0242.828] malloc (_Size=0x8) returned 0x574110
	[0242.828] malloc (_Size=0x150) returned 0x573f10
	[0242.828] malloc (_Size=0x8) returned 0x574100
	[0242.828] malloc (_Size=0x8) returned 0x5740f0
	[0242.828] malloc (_Size=0x8) returned 0x5740e0
	[0242.828] malloc (_Size=0x8) returned 0x5740d0
	[0242.828] malloc (_Size=0x8) returned 0x5740c0
	[0242.828] malloc (_Size=0x8) returned 0x5740b0
	[0242.828] malloc (_Size=0x8) returned 0x5740a0
	[0242.828] malloc (_Size=0x8) returned 0x574130
	[0242.828] GetLastError () returned 0x6
	[0242.828] SetLastError (dwErrCode=0x6) 
	[0242.829] DeleteObject (ho=0x2050a28) returned 1
	[0242.829] GetLastError () returned 0x0
	[0242.829] SetLastError (dwErrCode=0x0) 
	[0242.829] GetLastError () returned 0x0
	[0242.829] SetLastError (dwErrCode=0x0) 
	[0242.829] DeleteObject (ho=0x3050a26) returned 1
	[0242.829] GetLastError () returned 0x0
	[0242.829] SetLastError (dwErrCode=0x0) 
	[0242.840] GetLastError () returned 0x0
	[0242.840] SetLastError (dwErrCode=0x0) 
	[0242.840] DeleteObject (ho=0x42050a24) returned 1
	[0242.840] GetLastError () returned 0x0
	[0242.840] SetLastError (dwErrCode=0x0) 
	[0242.840] GetLastError () returned 0x0
	[0242.840] SetLastError (dwErrCode=0x0) 
	[0242.841] DeleteObject (ho=0xffffffffd50509ce) returned 1
	[0242.841] GetLastError () returned 0x0
	[0242.841] SetLastError (dwErrCode=0x0) 
	[0242.841] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1003, wParam=0x1, lParam=0x34a350) returned 0x34a350
	[0242.842] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1208, wParam=0x0, lParam=0x34a350) returned 0x349220
	[0242.842] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1003, wParam=0x0, lParam=0x34aaa0) returned 0x34aaa0
	[0242.843] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1208, wParam=0x0, lParam=0x349220) returned 0x34a350
	[0242.843] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.844] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x4e, wParam=0x31f1, lParam=0xbe230) returned 0x0
	[0242.844] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.845] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0xb0178, Msg=0x4e, wParam=0x31f1, lParam=0xbe230) returned 0x0
	[0242.845] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.845] GetParent (hWnd=0xb0178) returned 0x5016c
	[0242.846] GetParent (hWnd=0x5016c) returned 0xa014c
	[0242.846] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd6c0) returned 0x1
	[0242.846] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd6c0) returned 0x1
	[0242.846] malloc (_Size=0x28) returned 0x574aa0
	[0242.847] malloc (_Size=0x28) returned 0x574aa0
	[0242.847] malloc (_Size=0x28) returned 0x574aa0
	[0242.847] GetParent (hWnd=0xb0178) returned 0x5016c
	[0242.847] GetParent (hWnd=0x5016c) returned 0xa014c
	[0242.848] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x3f213f0
	[0242.848] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd0c0) returned 0x1
	[0242.848] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd0c0) returned 0x1
	[0242.849] malloc (_Size=0xe0) returned 0x56b380
	[0242.849] free (_Block=0x573f10) 
	[0242.849] ImageList_Destroy (himl=0x34a350) returned 1
	[0242.849] ImageList_Destroy (himl=0x34aaa0) returned 1
	[0242.850] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x34a350
	[0242.850] ImageList_Create (cx=32, cy=32, flags=0x21, cInitial=20, cGrow=10) returned 0x34aaa0
	[0242.852] GetLastError () returned 0x6
	[0242.852] SetLastError (dwErrCode=0x6) 
	[0242.852] GetLastError () returned 0x6
	[0242.852] SetLastError (dwErrCode=0x6) 
	[0242.853] GetLastError () returned 0x6
	[0242.853] SetLastError (dwErrCode=0x6) 
	[0242.853] GetLastError () returned 0x6
	[0242.853] SetLastError (dwErrCode=0x6) 
	[0242.853] malloc (_Size=0x8) returned 0x574130
	[0242.853] malloc (_Size=0x150) returned 0x573f10
	[0242.853] malloc (_Size=0x8) returned 0x5740a0
	[0242.853] malloc (_Size=0x8) returned 0x5740b0
	[0242.853] malloc (_Size=0x8) returned 0x5740c0
	[0242.853] malloc (_Size=0x8) returned 0x5740d0
	[0242.853] malloc (_Size=0x8) returned 0x5740e0
	[0242.853] malloc (_Size=0x8) returned 0x5740f0
	[0242.853] malloc (_Size=0x8) returned 0x574100
	[0242.854] malloc (_Size=0x8) returned 0x574110
	[0242.854] GetLastError () returned 0x6
	[0242.854] SetLastError (dwErrCode=0x6) 
	[0242.854] DeleteObject (ho=0x3b050a29) returned 1
	[0242.854] GetLastError () returned 0x0
	[0242.854] SetLastError (dwErrCode=0x0) 
	[0242.854] GetLastError () returned 0x0
	[0242.854] SetLastError (dwErrCode=0x0) 
	[0242.854] DeleteObject (ho=0x3b050a2a) returned 1
	[0242.854] GetLastError () returned 0x0
	[0242.854] SetLastError (dwErrCode=0x0) 
	[0242.865] GetLastError () returned 0x0
	[0242.865] SetLastError (dwErrCode=0x0) 
	[0242.865] DeleteObject (ho=0x44050a24) returned 1
	[0242.865] GetLastError () returned 0x0
	[0242.865] SetLastError (dwErrCode=0x0) 
	[0242.865] GetLastError () returned 0x0
	[0242.866] SetLastError (dwErrCode=0x0) 
	[0242.866] DeleteObject (ho=0xffffffffd60509ce) returned 1
	[0242.866] GetLastError () returned 0x0
	[0242.866] SetLastError (dwErrCode=0x0) 
	[0242.866] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1003, wParam=0x1, lParam=0x34a350) returned 0x34a350
	[0242.867] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1208, wParam=0x0, lParam=0x34a350) returned 0x349220
	[0242.867] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x1003, wParam=0x0, lParam=0x34aaa0) returned 0x34aaa0
	[0242.963] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x1208, wParam=0x0, lParam=0x349220) returned 0x34a350
	[0242.964] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0242.964] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0242.965] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0xbcc50) returned 0x0
	[0242.965] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0xbcc50) returned 0x0
	[0242.966] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10226, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0242.966] GetDC (hWnd=0x10248) returned 0x1401007f
	[0242.966] malloc (_Size=0x88) returned 0x500560
	[0242.966] malloc (_Size=0x100) returned 0x567df0
	[0242.966] SelectObject (hdc=0x1401007f, h=0x20a09df) returned 0x18a002e
	[0242.967] SelectObject (hdc=0x1401007f, h=0x18a002e) returned 0x20a09df
	[0242.967] free (_Block=0x500560) 
	[0242.967] free (_Block=0x567df0) 
	[0242.967] ReleaseDC (hWnd=0x10248, hDC=0x1401007f) returned 1
	[0242.967] malloc (_Size=0x28) returned 0x574aa0
	[0242.967] GetWindowLongW (hWnd=0x10224, nIndex=-20) returned 512
	[0242.968] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x46, wParam=0x0, lParam=0xbd310) returned 0x0
	[0242.968] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2023a, Msg=0x46, wParam=0x0, lParam=0xbd310) returned 0x0
	[0242.969] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x20208, Msg=0x46, wParam=0x0, lParam=0xbd310) returned 0x0
	[0242.969] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0xbd310) returned 0x0
	[0242.970] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10224, Msg=0x46, wParam=0x0, lParam=0xbd310) returned 0x0
	[0242.970] lstrlenW (lpString="") returned 0
	[0242.970] lstrlenW (lpString="") returned 0
	[0242.970] lstrlenW (lpString="") returned 0
	[0242.970] lstrlenW (lpString="Computer Management (Local)") returned 27
	[0242.970] malloc (_Size=0x44) returned 0x1ebfd0
	[0242.971] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x3f213f0
	[0242.971] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd390) returned 0x1
	[0242.971] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbd390) returned 0x1
	[0242.971] malloc (_Size=0xc0) returned 0x576b50
	[0242.972] FindResourceW (hModule=0xff6d0000, lpName=0x349, lpType=0x6) returned 0x0
	[0242.972] FindResourceW (hModule=0x7fef8280000, lpName=0x349, lpType=0x6) returned 0x1d0b10
	[0242.972] LoadStringW (in: hInstance=0x7fef8280000, uID=0x3489, lpBuffer=0xbcfe0, cchBufferMax=256 | out: lpBuffer="Displays Help for the current selection.") returned 0x28
	[0242.972] lstrlenW (lpString="Displays Help for the current selection.") returned 40
	[0242.972] malloc (_Size=0x5e) returned 0x5710d0
	[0242.972] FindResourceW (hModule=0xff6d0000, lpName=0x34a, lpType=0x6) returned 0x0
	[0242.972] FindResourceW (hModule=0x7fef8280000, lpName=0x34a, lpType=0x6) returned 0x1d0b20
	[0242.972] LoadStringW (in: hInstance=0x7fef8280000, uID=0x3492, lpBuffer=0xbcfe0, cchBufferMax=256 | out: lpBuffer="Contains help items for the current selection.") returned 0x2e
	[0242.972] lstrlenW (lpString="Contains help items for the current selection.") returned 46
	[0242.972] malloc (_Size=0x6a) returned 0x576c20
	[0242.972] malloc (_Size=0x100) returned 0x567df0
	[0242.973] malloc (_Size=0x100) returned 0x567f00
	[0242.974] lstrlenW (lpString="") returned 0
	[0242.975] SetWindowTextW (hWnd=0x10266, lpString="") returned 1
	[0242.975] ShowWindow (hWnd=0x10268, nCmdShow=0) returned 1
	[0242.976] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10268, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
	[0242.976] lstrlenW (lpString="") returned 0
	[0242.976] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40b, wParam=0x0, lParam=0x7fef84c8074) returned 0x1
	[0242.979] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40a, wParam=0x0, lParam=0xbc550) returned 0x1
	[0242.980] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40b, wParam=0x1, lParam=0x7fef84c8074) returned 0x1
	[0242.980] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40a, wParam=0x1, lParam=0xbc550) returned 0x1
	[0242.981] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40b, wParam=0x2, lParam=0x7fef84c8074) returned 0x1
	[0242.981] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10266, Msg=0x40a, wParam=0x2, lParam=0xbc550) returned 0x1
	[0242.981] GetParent (hWnd=0x10266) returned 0x5016c
	[0242.982] GetParent (hWnd=0x5016c) returned 0xa014c
	[0242.982] malloc (_Size=0x28) returned 0x574aa0
	[0242.982] malloc (_Size=0x28) returned 0x574950
	[0242.983] malloc (_Size=0x8) returned 0x574140
	[0242.984] malloc (_Size=0x8) returned 0x574150
	[0242.984] malloc (_Size=0x150) returned 0x576ca0
	[0242.985] malloc (_Size=0x8) returned 0x574160
	[0242.985] malloc (_Size=0x8) returned 0x574170
	[0242.988] malloc (_Size=0x8) returned 0x574180
	[0242.989] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f213f0
	[0242.989] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc810) returned 0x1
	[0242.989] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc810) returned 0x1
	[0242.990] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x3f21510
	[0242.990] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x3f21510
	[0242.990] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc7e0) returned 0x1
	[0242.991] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc7e0) returned 0x1
	[0242.991] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x1, lParam=0x3f21510) returned 0x3f214b0
	[0242.991] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc7e0) returned 0x1
	[0242.991] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc7e0) returned 0x1
	[0242.992] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x1102, wParam=0x2, lParam=0x3f214b0) returned 0x1
	[0242.992] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.993] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113f, wParam=0x0, lParam=0xbb758) returned 0x1
	[0242.993] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0242.994] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbb690) returned 0x1
	[0242.994] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbb690) returned 0x1
	[0242.994] malloc (_Size=0x28) returned 0x574980
	[0242.995] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
	[0242.996] GetParent (hWnd=0x20164) returned 0x0
	[0242.996] GetParent (hWnd=0x20164) returned 0x0
	[0242.996] GetParent (hWnd=0x20164) returned 0x0
	[0242.996] GetDesktopWindow () returned 0x10010
	[0242.996] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0242.996] IsWindowEnabled (hWnd=0x20144) returned 0
	[0242.996] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0242.996] IsWindowEnabled (hWnd=0x20142) returned 1
	[0242.996] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0242.996] IsWindowEnabled (hWnd=0x20146) returned 1
	[0242.997] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0242.997] IsWindowEnabled (hWnd=0x100a0) returned 1
	[0242.997] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0242.997] IsWindowEnabled (hWnd=0x20060) returned 0
	[0242.997] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0242.997] IsWindowEnabled (hWnd=0x1009e) returned 1
	[0242.997] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0242.997] IsWindowEnabled (hWnd=0x10088) returned 1
	[0242.997] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0242.997] IsWindowEnabled (hWnd=0x100b6) returned 1
	[0242.997] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0242.997] IsWindowEnabled (hWnd=0x100aa) returned 1
	[0242.997] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0242.997] IsWindowEnabled (hWnd=0x100a6) returned 1
	[0242.998] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0242.998] IsWindowEnabled (hWnd=0x100a2) returned 1
	[0242.998] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0242.998] IsWindowEnabled (hWnd=0x1007a) returned 0
	[0242.998] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0242.998] IsWindowEnabled (hWnd=0x10070) returned 0
	[0242.998] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0242.998] IsWindowEnabled (hWnd=0x10080) returned 1
	[0242.998] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0242.998] IsWindowEnabled (hWnd=0x10074) returned 1
	[0242.998] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0242.998] IsWindowEnabled (hWnd=0x10114) returned 1
	[0242.998] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0242.998] IsWindowEnabled (hWnd=0x1010a) returned 1
	[0242.998] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0242.998] IsWindowEnabled (hWnd=0x100f8) returned 1
	[0242.998] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0242.998] IsWindowEnabled (hWnd=0x100d0) returned 1
	[0242.999] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0242.999] IsWindowEnabled (hWnd=0x500c0) returned 1
	[0242.999] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0242.999] IsWindowEnabled (hWnd=0x100b8) returned 1
	[0242.999] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0242.999] IsWindowEnabled (hWnd=0x10054) returned 0
	[0242.999] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0242.999] IsWindowEnabled (hWnd=0x10052) returned 0
	[0242.999] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0242.999] IsWindowEnabled (hWnd=0x100c8) returned 1
	[0242.999] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0242.999] IsWindowEnabled (hWnd=0x20134) returned 1
	[0242.999] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0242.999] IsWindowEnabled (hWnd=0x20138) returned 1
	[0242.999] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0242.999] IsWindowEnabled (hWnd=0x2013a) returned 1
	[0243.000] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.000] IsWindowEnabled (hWnd=0x20118) returned 1
	[0243.000] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.000] IsWindowEnabled (hWnd=0x30028) returned 1
	[0243.000] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.000] IsWindowEnabled (hWnd=0x2014e) returned 0
	[0243.000] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.000] IsWindowEnabled (hWnd=0x20156) returned 1
	[0243.000] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.000] IsWindowEnabled (hWnd=0x2015a) returned 0
	[0243.000] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.000] IsWindowEnabled (hWnd=0x2001a) returned 1
	[0243.000] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.000] IsWindowEnabled (hWnd=0x20022) returned 0
	[0243.000] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.000] IsWindowEnabled (hWnd=0x20018) returned 1
	[0243.000] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.000] IsWindowEnabled (hWnd=0x1012e) returned 1
	[0243.001] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.001] IsWindowEnabled (hWnd=0x10120) returned 1
	[0243.001] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.001] IsWindowEnabled (hWnd=0x1011c) returned 1
	[0243.001] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.001] IsWindowEnabled (hWnd=0x10104) returned 1
	[0243.001] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.001] IsWindowEnabled (hWnd=0x10100) returned 1
	[0243.001] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.001] IsWindowEnabled (hWnd=0x100f2) returned 1
	[0243.001] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.001] IsWindowEnabled (hWnd=0x100e8) returned 1
	[0243.001] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.001] IsWindowEnabled (hWnd=0x100e2) returned 1
	[0243.002] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.002] IsWindowEnabled (hWnd=0x200dc) returned 1
	[0243.002] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.002] IsWindowEnabled (hWnd=0x100c4) returned 1
	[0243.002] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.002] IsWindowEnabled (hWnd=0x500ba) returned 1
	[0243.002] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.002] IsWindowEnabled (hWnd=0x100b0) returned 1
	[0243.002] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.002] IsWindowEnabled (hWnd=0x100ae) returned 1
	[0243.002] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.002] IsWindowEnabled (hWnd=0x100a4) returned 1
	[0243.002] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.002] IsWindowEnabled (hWnd=0x10090) returned 1
	[0243.003] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.003] IsWindowEnabled (hWnd=0x20264) returned 1
	[0243.003] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.003] IsWindowEnabled (hWnd=0x10238) returned 1
	[0243.003] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.003] IsWindowEnabled (hWnd=0x10236) returned 1
	[0243.003] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.003] IsWindowEnabled (hWnd=0x1022e) returned 1
	[0243.003] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.003] IsWindowEnabled (hWnd=0x10222) returned 1
	[0243.003] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.003] IsWindowEnabled (hWnd=0x1021c) returned 1
	[0243.003] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.003] IsWindowEnabled (hWnd=0x3019e) returned 1
	[0243.004] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.004] IsWindowEnabled (hWnd=0x201b8) returned 1
	[0243.004] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.004] IsWindowEnabled (hWnd=0x201c0) returned 1
	[0243.004] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.004] IsWindowEnabled (hWnd=0x101b0) returned 1
	[0243.004] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.004] IsWindowEnabled (hWnd=0x101ac) returned 1
	[0243.004] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.004] IsWindowEnabled (hWnd=0x101aa) returned 1
	[0243.004] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.004] IsWindowEnabled (hWnd=0x20164) returned 0
	[0243.004] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.004] IsWindowEnabled (hWnd=0x20162) returned 0
	[0243.004] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.004] IsWindowEnabled (hWnd=0x3016a) returned 1
	[0243.005] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.005] IsWindowEnabled (hWnd=0x20160) returned 0
	[0243.005] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.005] IsWindowEnabled (hWnd=0xa016e) returned 0
	[0243.005] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.005] IsWindowEnabled (hWnd=0x20166) returned 0
	[0243.005] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.005] IsWindowEnabled (hWnd=0x1008c) returned 1
	[0243.005] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.005] IsWindowEnabled (hWnd=0x1006e) returned 1
	[0243.005] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.005] IsWindowEnabled (hWnd=0x10066) returned 1
	[0243.005] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.005] IsWindowEnabled (hWnd=0x40044) returned 1
	[0243.005] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.005] IsWindowEnabled (hWnd=0x1005a) returned 1
	[0243.005] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.005] IsWindowEnabled (hWnd=0x1005c) returned 0
	[0243.005] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.005] IsWindowEnabled (hWnd=0x20048) returned 1
	[0243.006] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.006] IsWindowEnabled (hWnd=0x1004a) returned 0
	[0243.006] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.006] IsWindowEnabled (hWnd=0x10046) returned 1
	[0243.006] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.006] IsWindowEnabled (hWnd=0x1004e) returned 0
	[0243.006] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.006] IsWindowEnabled (hWnd=0x1004c) returned 0
	[0243.006] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.006] IsWindowEnabled (hWnd=0x1012c) returned 0
	[0243.006] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.006] IsWindowEnabled (hWnd=0x10064) returned 0
	[0243.006] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.006] IsWindowEnabled (hWnd=0x2007e) returned 1
	[0243.006] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0243.006] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0243.006] GetParent (hWnd=0x20164) returned 0x0
	[0243.006] GetDesktopWindow () returned 0x10010
	[0243.006] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.006] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0243.006] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0243.007] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.007] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.007] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.007] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.007] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.007] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.007] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.007] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.007] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.007] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.007] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0243.007] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0243.007] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.007] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.007] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.007] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0243.008] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0243.008] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.008] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.008] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.008] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0243.008] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0243.103] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.103] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.103] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.103] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0243.103] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0243.103] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.103] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.103] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.103] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0243.104] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0243.104] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.104] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.104] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.104] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0243.104] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0243.104] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.104] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.104] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.104] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0243.104] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0243.104] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.104] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.104] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.104] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0243.104] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0243.105] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.105] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.105] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.105] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0243.105] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0243.105] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.105] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.105] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.105] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0243.105] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0243.105] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.105] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.105] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.105] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.105] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.105] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.106] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.106] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.106] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.106] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.106] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.106] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.106] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.106] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.106] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.106] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.106] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.106] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.106] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.106] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.106] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.106] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.107] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0243.107] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0243.107] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.107] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0243.107] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0243.107] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.107] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0243.107] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0243.107] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.107] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0243.107] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0243.107] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.107] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0243.107] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0243.107] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.107] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0243.107] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0243.107] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.108] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0243.108] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0243.108] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.108] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.108] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.108] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.108] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.108] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.108] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.108] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.108] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.108] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.108] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0243.108] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0243.108] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.108] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.109] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.109] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0243.109] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0243.109] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.109] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0243.109] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0243.109] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.109] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0243.109] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0243.109] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.109] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.109] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.109] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.109] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.109] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.109] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.109] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0243.109] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0243.110] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.110] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.110] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.110] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.110] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.110] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.110] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0243.110] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0243.110] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.110] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.110] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.110] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.110] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.110] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.111] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0243.111] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0243.111] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.111] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.111] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.111] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0243.111] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0243.111] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.111] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0243.111] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0243.111] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.111] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0243.111] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0243.111] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.111] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0243.111] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0243.111] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.111] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0243.111] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0243.111] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.111] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.111] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.111] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0243.111] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0243.111] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.111] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0243.111] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0243.112] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.112] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.112] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.112] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0243.112] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0243.112] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.112] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0243.112] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0243.112] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.112] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.112] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.112] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0243.112] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0243.112] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.112] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.112] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.112] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.112] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.112] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.112] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0243.112] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0243.112] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.112] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0243.112] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0243.112] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.112] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0243.112] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0243.112] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.112] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0243.112] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0243.113] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.113] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.113] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.113] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0243.113] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0243.113] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.113] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.113] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.113] GetWindowLongW (hWnd=0x20264, nIndex=-16) returned -2080374526
	[0243.113] GetWindow (hWnd=0x20264, uCmd=0x4) returned 0x0
	[0243.113] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.113] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned -2080374526
	[0243.113] GetWindow (hWnd=0x10238, uCmd=0x4) returned 0x0
	[0243.113] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.113] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned -2080374782
	[0243.113] GetWindow (hWnd=0x10236, uCmd=0x4) returned 0x3016a
	[0243.113] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.113] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.113] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.113] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned -2080374526
	[0243.113] GetWindow (hWnd=0x1022e, uCmd=0x4) returned 0x0
	[0243.113] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.113] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned -2080374782
	[0243.113] GetWindow (hWnd=0x10222, uCmd=0x4) returned 0x20164
	[0243.113] SendMessageW (hWnd=0x10222, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.113] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.113] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.113] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.114] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned -2080374782
	[0243.114] GetWindow (hWnd=0x1021c, uCmd=0x4) returned 0xa016e
	[0243.114] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.114] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.114] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.114] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0243.114] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0243.114] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.114] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0243.114] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0243.114] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.114] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0243.114] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0243.114] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.114] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0243.114] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0243.114] SendMessageW (hWnd=0x101b0, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.114] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.114] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.115] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.115] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0243.115] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0243.115] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.115] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.115] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.115] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0243.115] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0243.115] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.115] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.115] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.115] SendMessageW (hWnd=0x20164, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.116] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.116] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.116] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0243.116] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0243.116] SendMessageW (hWnd=0x20162, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.116] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0243.116] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20162, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.116] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.116] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.116] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.116] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.116] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0243.116] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0243.116] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.116] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.116] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.117] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.117] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.117] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.117] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0243.117] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0243.117] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.117] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.117] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.117] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.117] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.117] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.117] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0243.117] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0243.117] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.118] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0243.118] GetParent (hWnd=0x10066) returned 0x0
	[0243.118] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.118] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0243.118] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0243.118] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.118] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.118] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.118] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.118] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0243.118] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0243.118] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.118] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.118] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.118] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.118] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.118] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.118] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0243.119] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0243.119] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.119] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.119] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.119] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0243.119] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0243.119] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.119] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0243.119] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0243.119] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.119] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.119] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.119] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.119] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.119] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.119] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0243.119] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0243.120] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.120] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.120] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.120] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.120] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.120] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.120] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.120] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.120] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.120] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.120] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.120] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.120] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0243.123] GetLastError () returned 0x3f0
	[0243.123] SetLastError (dwErrCode=0x3f0) 
	[0243.124] GetLastError () returned 0x0
	[0243.124] SetLastError (dwErrCode=0x0) 
	[0243.124] malloc (_Size=0x190) returned 0x576e00
	[0243.126] GetParent (hWnd=0x20164) returned 0x0
	[0243.126] GetActiveWindow () returned 0x0
	[0243.126] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.126] GetParent (hWnd=0x20164) returned 0x0
	[0243.126] GetDesktopWindow () returned 0x10010
	[0243.126] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.126] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0243.126] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0243.126] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.126] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.126] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.126] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.126] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.127] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.127] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.127] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.127] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.127] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.127] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0243.127] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0243.127] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.127] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.127] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.127] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0243.127] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0243.127] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.127] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.127] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.127] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0243.127] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0243.128] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.128] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.128] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.128] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0243.128] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0243.128] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.128] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.128] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.128] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0243.128] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0243.128] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.128] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.128] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.128] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0243.128] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0243.129] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.129] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.129] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.129] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0243.129] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0243.129] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.129] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.129] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.129] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0243.129] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0243.129] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.129] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.129] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.129] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0243.129] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0243.129] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.129] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.130] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.130] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0243.130] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0243.130] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.130] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.130] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.130] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.130] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.130] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.130] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.130] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.130] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.130] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.130] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.131] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.131] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.131] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.131] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.131] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.131] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.131] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.131] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.131] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.131] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.131] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.131] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0243.131] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0243.131] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.131] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0243.131] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0243.131] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.131] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0243.131] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0243.131] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.132] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0243.132] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0243.132] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.132] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0243.132] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0243.132] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.132] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0243.132] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0243.132] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.132] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0243.132] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0243.132] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.132] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.132] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.132] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.132] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.133] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.133] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.133] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.133] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.133] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.133] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0243.133] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0243.133] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.133] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.133] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.133] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0243.133] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0243.133] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.134] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0243.134] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0243.134] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.134] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0243.134] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0243.134] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.134] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.134] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.134] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.134] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.134] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.134] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.134] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0243.134] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0243.134] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.134] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.134] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.135] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.135] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.135] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.135] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0243.135] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0243.135] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.135] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.135] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.135] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.135] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.135] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.135] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0243.135] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0243.135] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.135] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.135] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.136] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0243.136] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0243.136] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.136] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0243.136] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0243.136] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.136] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0243.136] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0243.136] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.136] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0243.136] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0243.136] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.136] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0243.136] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0243.136] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.136] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.136] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.137] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0243.137] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0243.137] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.137] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0243.137] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0243.137] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.137] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.137] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.137] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0243.137] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0243.137] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.137] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0243.137] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0243.137] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.137] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.137] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.138] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0243.138] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0243.138] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.138] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.138] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.138] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.138] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.138] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.138] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0243.138] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0243.138] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.138] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0243.138] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0243.138] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.138] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0243.138] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0243.138] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.138] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0243.138] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0243.139] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.139] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.139] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.139] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0243.139] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0243.139] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.139] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.139] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.139] GetWindowLongW (hWnd=0x20264, nIndex=-16) returned -2080374526
	[0243.139] GetWindow (hWnd=0x20264, uCmd=0x4) returned 0x0
	[0243.139] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.139] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned -2080374526
	[0243.139] GetWindow (hWnd=0x10238, uCmd=0x4) returned 0x0
	[0243.139] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.139] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned -2080374782
	[0243.139] GetWindow (hWnd=0x10236, uCmd=0x4) returned 0x3016a
	[0243.140] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.140] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.140] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.140] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned -2080374526
	[0243.140] GetWindow (hWnd=0x1022e, uCmd=0x4) returned 0x0
	[0243.140] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.140] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned -2080374782
	[0243.140] GetWindow (hWnd=0x10222, uCmd=0x4) returned 0x20164
	[0243.140] SendMessageW (hWnd=0x10222, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.140] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.140] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.140] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.140] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned -2080374782
	[0243.140] GetWindow (hWnd=0x1021c, uCmd=0x4) returned 0xa016e
	[0243.140] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.140] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.140] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.140] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0243.141] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0243.141] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.141] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0243.141] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0243.141] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.141] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0243.141] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0243.141] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.141] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0243.141] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0243.141] SendMessageW (hWnd=0x101b0, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.141] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.141] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.141] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.141] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0243.141] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0243.141] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.141] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.141] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.142] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0243.142] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0243.142] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.142] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.142] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.142] SendMessageW (hWnd=0x20164, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.142] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.142] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.142] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0243.142] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0243.142] SendMessageW (hWnd=0x20162, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.143] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0243.143] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20162, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.143] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.143] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.143] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.143] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.143] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0243.143] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0243.143] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.143] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.143] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.143] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.143] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.143] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.143] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0243.143] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0243.143] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.143] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.144] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.144] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.144] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.144] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.144] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0243.144] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0243.144] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.144] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0243.144] GetParent (hWnd=0x10066) returned 0x0
	[0243.144] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.144] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0243.144] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0243.144] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.144] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.144] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.144] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.144] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0243.144] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0243.145] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.145] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.145] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.145] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.145] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.145] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.145] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0243.145] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0243.145] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.145] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.145] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.145] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0243.145] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0243.145] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.145] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0243.145] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0243.146] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.146] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.146] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.146] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.146] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.146] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.146] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0243.146] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0243.146] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.146] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.146] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.146] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.146] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.146] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.146] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.146] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.146] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.147] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.147] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.147] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.147] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0243.148] FindResourceW (hModule=0x75240000, lpName=0x86, lpType=0x2) returned 0x752428f8
	[0243.255] malloc (_Size=0x88) returned 0x500560
	[0243.255] malloc (_Size=0x88) returned 0x5005f0
	[0243.255] malloc (_Size=0x100) returned 0x568010
	[0243.256] FindResourceW (hModule=0x75240000, lpName=0x87, lpType=0x2) returned 0x75242908
	[0243.257] GetLastError () returned 0x0
	[0243.257] SetLastError (dwErrCode=0x0) 
	[0243.257] DeleteObject (ho=0x9050a08) returned 1
	[0243.258] GetLastError () returned 0x0
	[0243.258] SetLastError (dwErrCode=0x0) 
	[0243.258] GetLastError () returned 0x0
	[0243.258] SetLastError (dwErrCode=0x0) 
	[0243.258] free (_Block=0x5005f0) 
	[0243.258] free (_Block=0x568010) 
	[0243.258] DeleteObject (ho=0x5050a09) returned 1
	[0243.258] GetLastError () returned 0x0
	[0243.258] SetLastError (dwErrCode=0x0) 
	[0243.259] malloc (_Size=0x28) returned 0x574980
	[0243.260] GetLastError () returned 0x3f0
	[0243.260] SetLastError (dwErrCode=0x3f0) 
	[0243.260] GetLastError () returned 0x0
	[0243.260] SetLastError (dwErrCode=0x0) 
	[0243.260] malloc (_Size=0x110) returned 0x577250
	[0243.261] malloc (_Size=0x100) returned 0x568010
	[0243.262] malloc (_Size=0x88) returned 0x5005f0
	[0243.262] swprintf_s (in: _Dst=0x27ed30, _SizeInWords=0x100, _Format="Afx:%p:%x" | out: _Dst="Afx:000007FEF4060000:0") returned 22
	[0243.262] GetClassInfoW (in: hInstance=0x7fef4060000, lpClassName="Afx:000007FEF4060000:0", lpWndClass=0xbad00 | out: lpWndClass=0xbad00) returned 0
	[0243.262] GetClassInfoW (in: hInstance=0x7fef4060000, lpClassName="Afx:000007FEF4060000:0", lpWndClass=0xbac50 | out: lpWndClass=0xbac50) returned 0
	[0243.262] RegisterClassW (lpWndClass=0xbad00) returned 0xc168
	[0243.263] lstrlenW (lpString="Afx:000007FEF4060000:0") returned 22
	[0243.263] lstrlenW (lpString="") returned 0
	[0243.263] wcscat_s (in: _Destination="", _SizeInWords=0x1000, _Source="Afx:000007FEF4060000:0" | out: _Destination="Afx:000007FEF4060000:0") returned 0x0
	[0243.263] wcscat_s (in: _Destination="Afx:000007FEF4060000:0", _SizeInWords=0x1000, _Source="\n" | out: _Destination="Afx:000007FEF4060000:0\n") returned 0x0
	[0243.263] lstrlenW (lpString="Afx:000007FEF4060000:0") returned 22
	[0243.263] malloc (_Size=0x3a) returned 0x1ebc10
	[0243.263] CreateWindowExW (dwExStyle=0x0, lpClassName="Afx:000007FEF4060000:0", lpWindowName="CMessageWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x7fef4060000, lpParam=0x0) returned 0x1028e
	[0243.264] malloc (_Size=0x88) returned 0x500680
	[0243.264] malloc (_Size=0x88) returned 0x500710
	[0243.264] malloc (_Size=0x100) returned 0x568120
	[0243.264] GetParent (hWnd=0x1028e) returned 0x0
	[0243.264] SetWindowLongPtrW (hWnd=0x1028e, nIndex=-4, dwNewLong=0x7fef406425c) returned 0x77bdb0ac
	[0243.264] CallNextHookEx (hhk=0x101bf, nCode=3, wParam=0x1028e, lParam=0xba5f0) returned 0x0
	[0243.265] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1028e, Msg=0x24, wParam=0x0, lParam=0xba730) returned 0x0
	[0243.265] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1028e, Msg=0x81, wParam=0x0, lParam=0xba6d0) returned 0x1
	[0243.266] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1028e, Msg=0x83, wParam=0x0, lParam=0xba750) returned 0x0
	[0243.266] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1028e, Msg=0x1, wParam=0x0, lParam=0xba6a0) returned 0x0
	[0243.266] free (_Block=0x1ebc10) 
	[0243.267] malloc (_Size=0x28) returned 0x574980
	[0243.268] malloc (_Size=0x28) returned 0x574b30
	[0243.269] lstrlenW (lpString="") returned 0
	[0243.269] malloc (_Size=0x10) returned 0x576350
	[0243.269] malloc (_Size=0x48) returned 0x1ebc10
	[0243.269] malloc (_Size=0x150) returned 0x5775e0
	[0243.269] lstrlenW (lpString="XDUWTFONO") returned 9
	[0243.269] malloc (_Size=0x20) returned 0x574b30
	[0243.270] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101ae, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0243.270] InvalidateRect (hWnd=0x101ae, lpRect=0x0, bErase=1) returned 1
	[0243.270] InvalidateRect (hWnd=0x601ca, lpRect=0x0, bErase=1) returned 1
	[0243.270] InvalidateRect (hWnd=0x101f2, lpRect=0x0, bErase=1) returned 1
	[0243.271] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f213f0
	[0243.271] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xba980) returned 0x1
	[0243.271] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xba980) returned 0x1
	[0243.271] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xba980) returned 0x1
	[0243.271] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xba980) returned 0x1
	[0243.272] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x3f21510
	[0243.272] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xba980) returned 0x1
	[0243.272] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xba980) returned 0x1
	[0243.273] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x1, lParam=0x3f21510) returned 0x3f214b0
	[0243.273] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xba980) returned 0x1
	[0243.274] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xba980) returned 0x1
	[0243.274] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f214b0) returned 0x0
	[0243.274] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f214b0) returned 0x0
	[0243.274] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xba9c0) returned 0x1
	[0243.275] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xba9c0) returned 0x1
	[0243.275] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113f, wParam=0x0, lParam=0xbaa50) returned 0x1
	[0243.275] InvalidateRect (hWnd=0x10220, lpRect=0x0, bErase=1) returned 1
	[0243.275] InvalidateRect (hWnd=0x2023a, lpRect=0x0, bErase=1) returned 1
	[0243.276] InvalidateRect (hWnd=0x10248, lpRect=0x0, bErase=1) returned 1
	[0243.276] malloc (_Size=0x150) returned 0x5778f0
	[0243.276] free (_Block=0x576350) 
	[0243.276] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x1132, wParam=0x0, lParam=0xbb600) returned 0x3f215d0
	[0243.276] malloc (_Size=0x18) returned 0x576350
	[0243.276] malloc (_Size=0x30) returned 0x56bc70
	[0243.276] malloc (_Size=0x30) returned 0x56bcb0
	[0243.277] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113f, wParam=0x0, lParam=0xbb680) returned 0x1
	[0243.277] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbb710) returned 0x1
	[0243.277] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbb710) returned 0x1
	[0243.278] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f214b0) returned 0x3f215d0
	[0243.278] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0243.279] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0243.279] malloc (_Size=0x20e) returned 0x577a50
	[0243.279] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbb558) returned 0x1
	[0243.280] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbb558) returned 0x1
	[0243.280] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0243.281] FindResourceW (hModule=0x75240000, lpName=0x3f, lpType=0x6) returned 0x21b1440
	[0243.281] LoadStringW (in: hInstance=0x75240000, uID=0x3eb, lpBuffer=0xb9fc0, cchBufferMax=256 | out: lpBuffer="Disk Management") returned 0xf
	[0243.499] lstrlenW (lpString="Disk Management") returned 15
	[0243.499] malloc (_Size=0x2c) returned 0x56bcf0
	[0243.500] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x3f213f0
	[0243.501] lstrlenW (lpString="Disk Management") returned 15
	[0243.501] malloc (_Size=0x20) returned 0x574b90
	[0243.501] free (_Block=0x577a50) 
	[0243.501] malloc (_Size=0x20) returned 0x574b60
	[0243.501] malloc (_Size=0x30) returned 0x56bd30
	[0243.501] malloc (_Size=0x10) returned 0x5763b0
	[0243.502] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0243.502] FindResourceW (hModule=0x75240000, lpName=0x3f, lpType=0x6) returned 0x21b1440
	[0243.503] LoadStringW (in: hInstance=0x75240000, uID=0x3eb, lpBuffer=0xbad40, cchBufferMax=256 | out: lpBuffer="Disk Management") returned 0xf
	[0243.503] lstrlenW (lpString="Disk Management") returned 15
	[0243.503] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x3f213f0
	[0243.504] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0243.504] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0243.505] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3f213f0
	[0243.506] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc810) returned 0x1
	[0243.506] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc810) returned 0x1
	[0243.506] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x3f21510
	[0243.507] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x110a, wParam=0x4, lParam=0x3f213f0) returned 0x3f21510
	[0243.507] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc7e0) returned 0x1
	[0243.822] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbc7e0) returned 0x1
	[0243.823] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x1102, wParam=0x2, lParam=0x3f21510) 
	[0243.823] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0243.824] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113f, wParam=0x0, lParam=0xbb758) returned 0x1
	[0243.824] GetDlgCtrlID (hWnd=0x10220) returned 12785
	[0243.825] SendMessageW (hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbb690) returned 0x1
	[0243.825] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10220, Msg=0x113e, wParam=0x0, lParam=0xbb690) returned 0x1
	[0243.825] malloc (_Size=0x28) returned 0x574b90
	[0243.826] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
	[0243.827] GetParent (hWnd=0x20164) returned 0x0
	[0243.827] GetParent (hWnd=0x20164) returned 0x0
	[0243.827] GetParent (hWnd=0x20164) returned 0x0
	[0243.827] GetDesktopWindow () returned 0x10010
	[0243.827] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.827] IsWindowEnabled (hWnd=0x20144) returned 0
	[0243.827] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.827] IsWindowEnabled (hWnd=0x20142) returned 1
	[0243.827] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.827] IsWindowEnabled (hWnd=0x20146) returned 1
	[0243.828] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.828] IsWindowEnabled (hWnd=0x100a0) returned 1
	[0243.828] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.828] IsWindowEnabled (hWnd=0x20060) returned 0
	[0243.828] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.828] IsWindowEnabled (hWnd=0x1009e) returned 1
	[0243.828] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.828] IsWindowEnabled (hWnd=0x10088) returned 1
	[0243.828] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.828] IsWindowEnabled (hWnd=0x100b6) returned 1
	[0243.828] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.828] IsWindowEnabled (hWnd=0x100aa) returned 1
	[0243.828] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.828] IsWindowEnabled (hWnd=0x100a6) returned 1
	[0243.829] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.829] IsWindowEnabled (hWnd=0x100a2) returned 1
	[0243.829] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.829] IsWindowEnabled (hWnd=0x1007a) returned 0
	[0243.829] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.829] IsWindowEnabled (hWnd=0x10070) returned 0
	[0243.829] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.829] IsWindowEnabled (hWnd=0x10080) returned 1
	[0243.829] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.829] IsWindowEnabled (hWnd=0x10074) returned 1
	[0243.829] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.829] IsWindowEnabled (hWnd=0x10114) returned 1
	[0243.829] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.829] IsWindowEnabled (hWnd=0x1010a) returned 1
	[0243.829] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.829] IsWindowEnabled (hWnd=0x100f8) returned 1
	[0243.829] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.829] IsWindowEnabled (hWnd=0x100d0) returned 1
	[0243.830] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.830] IsWindowEnabled (hWnd=0x500c0) returned 1
	[0243.830] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.830] IsWindowEnabled (hWnd=0x100b8) returned 1
	[0243.830] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.830] IsWindowEnabled (hWnd=0x10054) returned 0
	[0243.830] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.830] IsWindowEnabled (hWnd=0x10052) returned 0
	[0243.830] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.830] IsWindowEnabled (hWnd=0x100c8) returned 1
	[0243.830] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.830] IsWindowEnabled (hWnd=0x20134) returned 1
	[0243.830] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.830] IsWindowEnabled (hWnd=0x20138) returned 1
	[0243.830] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.830] IsWindowEnabled (hWnd=0x2013a) returned 1
	[0243.831] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.831] IsWindowEnabled (hWnd=0x20118) returned 1
	[0243.831] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.831] IsWindowEnabled (hWnd=0x30028) returned 1
	[0243.831] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.831] IsWindowEnabled (hWnd=0x2014e) returned 0
	[0243.831] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.831] IsWindowEnabled (hWnd=0x20156) returned 1
	[0243.831] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.831] IsWindowEnabled (hWnd=0x2015a) returned 0
	[0243.831] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.831] IsWindowEnabled (hWnd=0x2001a) returned 1
	[0243.831] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.831] IsWindowEnabled (hWnd=0x20022) returned 0
	[0243.831] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.831] IsWindowEnabled (hWnd=0x20018) returned 1
	[0243.831] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.831] IsWindowEnabled (hWnd=0x1012e) returned 1
	[0243.831] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.832] IsWindowEnabled (hWnd=0x10120) returned 1
	[0243.832] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.832] IsWindowEnabled (hWnd=0x1011c) returned 1
	[0243.832] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.832] IsWindowEnabled (hWnd=0x10104) returned 1
	[0243.832] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.832] IsWindowEnabled (hWnd=0x10100) returned 1
	[0243.832] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.832] IsWindowEnabled (hWnd=0x100f2) returned 1
	[0243.832] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.832] IsWindowEnabled (hWnd=0x100e8) returned 1
	[0243.832] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.832] IsWindowEnabled (hWnd=0x100e2) returned 1
	[0243.832] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.833] IsWindowEnabled (hWnd=0x200dc) returned 1
	[0243.833] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.833] IsWindowEnabled (hWnd=0x100c4) returned 1
	[0243.833] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.833] IsWindowEnabled (hWnd=0x500ba) returned 1
	[0243.833] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.833] IsWindowEnabled (hWnd=0x100b0) returned 1
	[0243.833] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.833] IsWindowEnabled (hWnd=0x100ae) returned 1
	[0243.833] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.833] IsWindowEnabled (hWnd=0x100a4) returned 1
	[0243.833] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.833] IsWindowEnabled (hWnd=0x10090) returned 1
	[0243.834] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.834] IsWindowEnabled (hWnd=0x20264) returned 1
	[0243.834] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.834] IsWindowEnabled (hWnd=0x10238) returned 1
	[0243.834] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.834] IsWindowEnabled (hWnd=0x10236) returned 1
	[0243.834] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.834] IsWindowEnabled (hWnd=0x1022e) returned 1
	[0243.834] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.834] IsWindowEnabled (hWnd=0x10222) returned 1
	[0243.834] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.834] IsWindowEnabled (hWnd=0x1021c) returned 1
	[0243.834] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.834] IsWindowEnabled (hWnd=0x3019e) returned 1
	[0243.835] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.835] IsWindowEnabled (hWnd=0x201b8) returned 1
	[0243.835] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.835] IsWindowEnabled (hWnd=0x201c0) returned 1
	[0243.835] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.835] IsWindowEnabled (hWnd=0x101b0) returned 1
	[0243.835] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.835] IsWindowEnabled (hWnd=0x101ac) returned 1
	[0243.835] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.835] IsWindowEnabled (hWnd=0x101aa) returned 1
	[0243.835] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.835] IsWindowEnabled (hWnd=0x20164) returned 0
	[0243.835] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.836] IsWindowEnabled (hWnd=0x20162) returned 0
	[0243.836] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.836] IsWindowEnabled (hWnd=0x3016a) returned 0
	[0243.836] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.836] IsWindowEnabled (hWnd=0x20160) returned 0
	[0243.836] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.836] IsWindowEnabled (hWnd=0xa016e) returned 0
	[0243.836] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.836] IsWindowEnabled (hWnd=0x20166) returned 0
	[0243.836] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.836] IsWindowEnabled (hWnd=0x1008c) returned 1
	[0243.836] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.836] IsWindowEnabled (hWnd=0x1006e) returned 1
	[0243.836] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.836] IsWindowEnabled (hWnd=0x10066) returned 1
	[0243.836] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.836] IsWindowEnabled (hWnd=0x40044) returned 1
	[0243.836] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.836] IsWindowEnabled (hWnd=0x1005a) returned 1
	[0243.836] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.836] IsWindowEnabled (hWnd=0x1005c) returned 0
	[0243.836] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.836] IsWindowEnabled (hWnd=0x20048) returned 1
	[0243.837] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.837] IsWindowEnabled (hWnd=0x1004a) returned 0
	[0243.837] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.837] IsWindowEnabled (hWnd=0x10046) returned 1
	[0243.837] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.837] IsWindowEnabled (hWnd=0x1004e) returned 0
	[0243.837] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.837] IsWindowEnabled (hWnd=0x1004c) returned 0
	[0243.837] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.837] IsWindowEnabled (hWnd=0x1012c) returned 0
	[0243.837] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.837] IsWindowEnabled (hWnd=0x10064) returned 0
	[0243.837] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.837] IsWindowEnabled (hWnd=0x2007e) returned 1
	[0243.837] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0243.837] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0243.837] GetParent (hWnd=0x20164) returned 0x0
	[0243.837] GetDesktopWindow () returned 0x10010
	[0243.837] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.837] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0243.837] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0243.838] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.838] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.838] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.838] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.838] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.838] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.838] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.838] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.838] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.838] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.838] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0243.838] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0243.838] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.838] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.838] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.838] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0243.838] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0243.839] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.839] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.839] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.839] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0243.839] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0243.839] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.839] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.839] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.839] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0243.839] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0243.839] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.839] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.839] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.839] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0243.839] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0243.840] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.840] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.840] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.840] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0243.840] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0243.840] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.840] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.840] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.840] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0243.840] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0243.840] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.840] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.840] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.840] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0243.840] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0243.840] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.840] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.840] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.841] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0243.841] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0243.841] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.841] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.841] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.841] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0243.841] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0243.841] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.841] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.841] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.841] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.841] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.841] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.841] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.841] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.841] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.842] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.842] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.842] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.842] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.842] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.842] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.842] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.842] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.842] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.842] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.842] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.842] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.842] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.842] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0243.842] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0243.842] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.843] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0243.843] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0243.843] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.843] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0243.843] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0243.843] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.843] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0243.843] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0243.843] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.843] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0243.843] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0243.843] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.843] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0243.843] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0243.843] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.843] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0243.843] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0243.843] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.844] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.844] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.844] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.844] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.844] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.844] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.844] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.844] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.844] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.844] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0243.844] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0243.844] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.844] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.844] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.844] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0243.844] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0243.844] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.845] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0243.845] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0243.845] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.845] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0243.845] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0243.845] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.845] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.845] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.845] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.845] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.845] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.845] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.845] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0243.845] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0243.845] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.845] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.845] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.846] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.846] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.846] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.846] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0243.846] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0243.846] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.846] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.846] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.846] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.846] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.846] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.846] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0243.846] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0243.846] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.846] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.846] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.847] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0243.847] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0243.847] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.847] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0243.847] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0243.847] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.847] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0243.847] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0243.847] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.847] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0243.847] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0243.847] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.847] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0243.847] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0243.847] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.847] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.847] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.847] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0243.847] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0243.847] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.847] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0243.847] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0243.847] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.847] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.847] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.847] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0243.847] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0243.847] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.847] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0243.848] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0243.848] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.848] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.848] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.848] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0243.848] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0243.848] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.848] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.848] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.848] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.848] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.848] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.848] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0243.848] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0243.848] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.848] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0243.848] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0243.848] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.848] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0243.848] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0243.848] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.848] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0243.848] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0243.848] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.848] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.848] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.848] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0243.848] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0243.848] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.849] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.849] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.849] GetWindowLongW (hWnd=0x20264, nIndex=-16) returned -2080374526
	[0243.849] GetWindow (hWnd=0x20264, uCmd=0x4) returned 0x0
	[0243.849] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.849] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned -2080374526
	[0243.849] GetWindow (hWnd=0x10238, uCmd=0x4) returned 0x0
	[0243.849] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.849] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned -2080374782
	[0243.849] GetWindow (hWnd=0x10236, uCmd=0x4) returned 0x3016a
	[0243.849] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.849] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.849] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.849] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned -2080374526
	[0243.849] GetWindow (hWnd=0x1022e, uCmd=0x4) returned 0x0
	[0243.849] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.849] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned -2080374782
	[0243.849] GetWindow (hWnd=0x10222, uCmd=0x4) returned 0x20164
	[0243.849] SendMessageW (hWnd=0x10222, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.849] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.849] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.849] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.849] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned -2080374782
	[0243.849] GetWindow (hWnd=0x1021c, uCmd=0x4) returned 0xa016e
	[0243.850] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 214892544
	[0243.850] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.850] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.850] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0243.850] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0243.850] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.850] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0243.850] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0243.850] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.850] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0243.850] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0243.850] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.850] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0243.850] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0243.851] SendMessageW (hWnd=0x101b0, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.851] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.851] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.851] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.851] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0243.851] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0243.851] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 214892544
	[0243.851] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.851] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.851] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0243.851] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0243.851] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.851] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.851] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.851] SendMessageW (hWnd=0x20164, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.852] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.852] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.852] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0243.852] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0243.852] SendMessageW (hWnd=0x20162, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.852] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0243.852] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20162, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.852] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.852] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.852] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.852] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.853] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0243.853] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0243.853] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.853] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0243.853] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.853] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 214892544
	[0243.853] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.853] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.853] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0243.853] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0243.853] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 214892544
	[0243.853] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.853] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.853] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.853] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.853] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.854] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0243.854] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0243.854] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.854] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0243.854] GetParent (hWnd=0x10066) returned 0x0
	[0243.854] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.854] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0243.854] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0243.854] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.854] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.854] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.854] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.854] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0243.854] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0243.854] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.854] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.854] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.854] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.855] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.855] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.855] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0243.855] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0243.855] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.855] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.855] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.855] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0243.855] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0243.855] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.855] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0243.855] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0243.855] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.855] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.855] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.855] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.855] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.855] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.856] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0243.856] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0243.856] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.856] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.856] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.856] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.856] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.856] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.856] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.856] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.856] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.856] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.856] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.856] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.856] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0248.178] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x80010106
	[0250.603] IIDFromString (in: lpsz="{D5AB5662-131D-453d-88C8-9BBA87502ADE}", lpiid=0xb9538 | out: lpiid=0xb9538) returned 0x0
	[0250.611] IIDFromString (in: lpsz="{D5AB5662-131D-453d-88C8-9BBA87502ADE}", lpiid=0xb96f0 | out: lpiid=0xb96f0) returned 0x0
	[0253.829] GetVersionExW (in: lpVersionInformation=0xb8810*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xb8810*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0253.890] GetVersionExW (in: lpVersionInformation=0xb8810*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xb8810*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0253.912] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0xb8750, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0253.916] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0xb8650, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0254.031] CoTaskMemAlloc (cb=0x20c) returned 0x2f37b0
	[0254.031] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f37b0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\mmc.exe" (normalized: "c:\\windows\\system32\\mmc.exe")) returned 0x1b
	[0254.032] CoTaskMemFree (pv=0x2f37b0) 
	[0254.032] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.exe", nBufferLength=0x105, lpBuffer=0xb87b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.exe", lpFilePart=0x0) returned 0x1b
	[0255.189] GetVersionExW (in: lpVersionInformation=0xb8680*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xb8680*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0255.190] GetCurrentProcess () returned 0xffffffffffffffff
	[0255.208] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0xb8718 | out: TokenHandle=0xb8718*=0x3c4) returned 1
	[0255.278] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0xb8370, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30
	[0255.770] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0xb87c0 | out: lpFileInformation=0xb87c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x76d072b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x622a)) returned 1
	[0255.772] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0xb8310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45
	[0255.813] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0xb8770 | out: lpFileInformation=0xb8770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x76d072b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x622a)) returned 1
	[0255.847] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0xb8150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45
	[0255.848] SetErrorMode (uMode=0x1) returned 0x8001
	[0255.849] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3d4
	[0255.850] GetFileType (hFile=0x3d4) returned 0x1
	[0255.851] SetErrorMode (uMode=0x8001) returned 0x1
	[0255.851] GetFileType (hFile=0x3d4) returned 0x1
	[0256.177] GetFileSize (in: hFile=0x3d4, lpFileSizeHigh=0xb8768 | out: lpFileSizeHigh=0xb8768*=0x0) returned 0x622a
	[0256.179] ReadFile (in: hFile=0x3d4, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb8688, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0xb8688*=0x1000, lpOverlapped=0x0) returned 1
	[0256.443] ReadFile (in: hFile=0x3d4, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb81b8, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0xb81b8*=0x1000, lpOverlapped=0x0) returned 1
	[0256.444] ReadFile (in: hFile=0x3d4, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb81b8, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0xb81b8*=0x1000, lpOverlapped=0x0) returned 1
	[0256.447] ReadFile (in: hFile=0x3d4, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb81b8, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0xb81b8*=0x1000, lpOverlapped=0x0) returned 1
	[0256.447] ReadFile (in: hFile=0x3d4, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb81b8, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0xb81b8*=0x1000, lpOverlapped=0x0) returned 1
	[0256.508] ReadFile (in: hFile=0x3d4, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb82f8, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0xb82f8*=0x1000, lpOverlapped=0x0) returned 1
	[0256.509] ReadFile (in: hFile=0x3d4, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb8178, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0xb8178*=0x22a, lpOverlapped=0x0) returned 1
	[0256.509] ReadFile (in: hFile=0x3d4, lpBuffer=0x4648640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb8218, lpOverlapped=0x0 | out: lpBuffer=0x4648640*, lpNumberOfBytesRead=0xb8218*=0x0, lpOverlapped=0x0) returned 1
	[0256.510] CloseHandle (hObject=0x3d4) returned 1
	[0256.512] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0xb8740, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0256.512] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0xb8640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0256.512] CoTaskMemAlloc (cb=0x20c) returned 0x2f3580
	[0256.512] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2f3580, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\mmc.exe" (normalized: "c:\\windows\\system32\\mmc.exe")) returned 0x1b
	[0256.513] CoTaskMemFree (pv=0x2f3580) 
	[0256.513] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.exe", nBufferLength=0x105, lpBuffer=0xb87a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.exe", lpFilePart=0x0) returned 0x1b
	[0256.513] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.513] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0xb8978 | out: TokenHandle=0xb8978*=0x3d4) returned 1
	[0256.514] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.514] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0xb8978 | out: TokenHandle=0xb8978*=0x3d8) returned 1
	[0256.516] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.516] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0xb8718 | out: TokenHandle=0xb8718*=0x3dc) returned 1
	[0256.517] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\mmc.config" (normalized: "c:\\windows\\system32\\mmc.config"), fInfoLevelId=0x0, lpFileInformation=0xb87c0 | out: lpFileInformation=0xb87c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0256.518] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0xb8310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0256.521] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\mmc.config" (normalized: "c:\\windows\\system32\\mmc.config"), fInfoLevelId=0x0, lpFileInformation=0xb8770 | out: lpFileInformation=0xb8770*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0256.521] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.522] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0xb8978 | out: TokenHandle=0xb8978*=0x3e0) returned 1
	[0256.522] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.522] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0xb8978 | out: TokenHandle=0xb8978*=0x3e4) returned 1
	[0256.679] lstrlenW (lpString="䅁") returned 1
	[0256.682] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.682] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0xb85f8 | out: TokenHandle=0xb85f8*=0x3e8) returned 1
	[0257.340] GetCurrentProcess () returned 0xffffffffffffffff
	[0257.340] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0xb85f8 | out: TokenHandle=0xb85f8*=0x3ec) returned 1
	[0257.572] SysStringByteLen (bstr="FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}") returned 0x52
	[0257.572] SysStringByteLen (bstr="FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}") returned 0x52
	[0257.983] lstrlenW (lpString="䅁") returned 1
	[0257.986] GetVersionExW (in: lpVersionInformation=0xb9170*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xb9170*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0257.993] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\MMC\\SnapIns\\FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}", ulOptions=0x0, samDesired=0x20019, phkResult=0xba228 | out: phkResult=0xba228*=0x3f0) returned 0x0
	[0258.031] RegQueryValueExW (in: hKey=0x3f0, lpValueName="FolderBitmapsColorMask", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x4, lpData=0x0, lpcbData=0xba1a8*=0x4) returned 0x0
	[0258.032] RegQueryValueExW (in: hKey=0x3f0, lpValueName="FolderBitmapsColorMask", lpReserved=0x0, lpType=0xba1b0, lpData=0xba1ac, lpcbData=0xba1a8*=0x4 | out: lpType=0xba1b0*=0x4, lpData=0xba1ac*=0xff00ff, lpcbData=0xba1a8*=0x4) returned 0x0
	[0258.032] RegQueryValueExW (in: hKey=0x3f0, lpValueName="UseCustomHelp", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x0, lpData=0x0, lpcbData=0xba1a8*=0x0) returned 0x2
	[0258.034] RegQueryValueExW (in: hKey=0x3f0, lpValueName="Type", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x1, lpData=0x0, lpcbData=0xba1a8*=0x104) returned 0x0
	[0258.035] CoTaskMemAlloc (cb=0x108) returned 0x2ff940
	[0258.035] RegQueryValueExW (in: hKey=0x3f0, lpValueName="Type", lpReserved=0x0, lpType=0xba17c, lpData=0x2ff940, lpcbData=0xba178*=0x104 | out: lpType=0xba17c*=0x1, lpData="Microsoft.EventViewer.SnapIn.EventViewerExtension, EventViewer, Version=6.1.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35", lpcbData=0xba178*=0x104) returned 0x0
	[0258.035] CoTaskMemFree (pv=0x2ff940) 
	[0258.035] RegQueryValueExW (in: hKey=0x3f0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x1, lpData=0x0, lpcbData=0xba1a8*=0x2a) returned 0x0
	[0258.036] CoTaskMemAlloc (cb=0x2e) returned 0x35e880
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xba17c, lpData=0x35e880, lpcbData=0xba178*=0x2a | out: lpType=0xba17c*=0x1, lpData="C:\\Windows\\system32\\", lpcbData=0xba178*=0x2a) returned 0x0
	[0258.036] CoTaskMemFree (pv=0x35e880) 
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="ConfigurationFile", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x0, lpData=0x0, lpcbData=0xba1a8*=0x0) returned 0x2
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="DynamicBase", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x0, lpData=0x0, lpcbData=0xba1a8*=0x0) returned 0x2
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="LicenseFile", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x0, lpData=0x0, lpcbData=0xba1a8*=0x0) returned 0x2
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="PrivateBinPath", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x0, lpData=0x0, lpcbData=0xba1a8*=0x0) returned 0x2
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="PrivateBinPathProbe", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x0, lpData=0x0, lpcbData=0xba1a8*=0x0) returned 0x2
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="ResourceModule", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x0, lpData=0x0, lpcbData=0xba1a8*=0x0) returned 0x2
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="RootNodeType", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x0, lpData=0x0, lpcbData=0xba1a8*=0x0) returned 0x2
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="NameString", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x1, lpData=0x0, lpcbData=0xba1a8*=0x1a) returned 0x0
	[0258.036] CoTaskMemAlloc (cb=0x1e) returned 0x3f5f330
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="NameString", lpReserved=0x0, lpType=0xba17c, lpData=0x3f5f330, lpcbData=0xba178*=0x1a | out: lpType=0xba17c*=0x1, lpData="Event Viewer", lpcbData=0xba178*=0x1a) returned 0x0
	[0258.036] CoTaskMemFree (pv=0x3f5f330) 
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="Description", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x1, lpData=0x0, lpcbData=0xba1a8*=0x2e) returned 0x0
	[0258.036] CoTaskMemAlloc (cb=0x32) returned 0x35e880
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="Description", lpReserved=0x0, lpType=0xba17c, lpData=0x35e880, lpcbData=0xba178*=0x2e | out: lpType=0xba17c*=0x1, lpData="Event Viewer Extension", lpcbData=0xba178*=0x2e) returned 0x0
	[0258.036] CoTaskMemFree (pv=0x35e880) 
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="Provider", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x0, lpData=0x0, lpcbData=0xba1a8*=0x0) returned 0x2
	[0258.036] RegQueryValueExW (in: hKey=0x3f0, lpValueName="ModuleName", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x1, lpData=0x0, lpcbData=0xba1a8*=0x20) returned 0x0
	[0258.036] CoTaskMemAlloc (cb=0x24) returned 0x3f5f330
	[0258.037] RegQueryValueExW (in: hKey=0x3f0, lpValueName="ModuleName", lpReserved=0x0, lpType=0xba17c, lpData=0x3f5f330, lpcbData=0xba178*=0x20 | out: lpType=0xba17c*=0x1, lpData="EventViewer.dll", lpcbData=0xba178*=0x20) returned 0x0
	[0258.037] CoTaskMemFree (pv=0x3f5f330) 
	[0258.037] RegQueryValueExW (in: hKey=0x3f0, lpValueName="AssemblyName", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x1, lpData=0x0, lpcbData=0xba1a8*=0x18) returned 0x0
	[0258.037] CoTaskMemAlloc (cb=0x1c) returned 0x3f5f330
	[0258.037] RegQueryValueExW (in: hKey=0x3f0, lpValueName="AssemblyName", lpReserved=0x0, lpType=0xba17c, lpData=0x3f5f330, lpcbData=0xba178*=0x18 | out: lpType=0xba17c*=0x1, lpData="EventViewer", lpcbData=0xba178*=0x18) returned 0x0
	[0258.037] CoTaskMemFree (pv=0x3f5f330) 
	[0258.037] RegQueryValueExW (in: hKey=0x3f0, lpValueName="RuntimeVersion", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x1, lpData=0x0, lpcbData=0xba1a8*=0x16) returned 0x0
	[0258.037] CoTaskMemAlloc (cb=0x1a) returned 0x3f5f330
	[0258.037] RegQueryValueExW (in: hKey=0x3f0, lpValueName="RuntimeVersion", lpReserved=0x0, lpType=0xba17c, lpData=0x3f5f330, lpcbData=0xba178*=0x16 | out: lpType=0xba17c*=0x1, lpData="v2.0.40607", lpcbData=0xba178*=0x16) returned 0x0
	[0258.037] CoTaskMemFree (pv=0x3f5f330) 
	[0258.037] RegQueryValueExW (in: hKey=0x3f0, lpValueName="FxVersion", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x1, lpData=0x0, lpcbData=0xba1a8*=0x10) returned 0x0
	[0258.037] CoTaskMemAlloc (cb=0x14) returned 0x3f6c880
	[0258.037] RegQueryValueExW (in: hKey=0x3f0, lpValueName="FxVersion", lpReserved=0x0, lpType=0xba17c, lpData=0x3f6c880, lpcbData=0xba178*=0x10 | out: lpType=0xba17c*=0x1, lpData="2.0.0.2", lpcbData=0xba178*=0x10) returned 0x0
	[0258.037] CoTaskMemFree (pv=0x3f6c880) 
	[0258.037] RegQueryValueExW (in: hKey=0x3f0, lpValueName="About", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x1, lpData=0x0, lpcbData=0xba1a8*=0x4e) returned 0x0
	[0258.037] CoTaskMemAlloc (cb=0x52) returned 0x359460
	[0258.037] RegQueryValueExW (in: hKey=0x3f0, lpValueName="About", lpReserved=0x0, lpType=0xba17c, lpData=0x359460, lpcbData=0xba178*=0x4e | out: lpType=0xba17c*=0x1, lpData="{00000000-0000-0000-0000-000000000000}", lpcbData=0xba178*=0x4e) returned 0x0
	[0258.037] CoTaskMemFree (pv=0x359460) 
	[0258.037] RegQueryValueExW (in: hKey=0x3f0, lpValueName="NameStringIndirect", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x2, lpData=0x0, lpcbData=0xba1a8*=0x58) returned 0x0
	[0258.117] CoTaskMemAlloc (cb=0x5c) returned 0x3f63390
	[0258.117] RegQueryValueExW (in: hKey=0x3f0, lpValueName="NameStringIndirect", lpReserved=0x0, lpType=0xba17c, lpData=0x3f63390, lpcbData=0xba178*=0x58 | out: lpType=0xba17c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-101", lpcbData=0xba178*=0x58) returned 0x0
	[0258.117] CoTaskMemFree (pv=0x3f63390) 
	[0258.186] CoTaskMemAlloc (cb=0xcc) returned 0x35be40
	[0258.186] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-101", lpDst=0x35be40, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-101") returned 0x2c
	[0258.186] CoTaskMemFree (pv=0x35be40) 
	[0258.187] RegQueryValueExW (in: hKey=0x3f0, lpValueName="DescriptionStringIndirect", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x2, lpData=0x0, lpcbData=0xba1a8*=0x58) returned 0x0
	[0258.187] CoTaskMemAlloc (cb=0x5c) returned 0x3f63390
	[0258.187] RegQueryValueExW (in: hKey=0x3f0, lpValueName="DescriptionStringIndirect", lpReserved=0x0, lpType=0xba17c, lpData=0x3f63390, lpcbData=0xba178*=0x58 | out: lpType=0xba17c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-102", lpcbData=0xba178*=0x58) returned 0x0
	[0258.187] CoTaskMemFree (pv=0x3f63390) 
	[0258.187] CoTaskMemAlloc (cb=0xcc) returned 0x35be40
	[0258.187] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-102", lpDst=0x35be40, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-102") returned 0x2c
	[0258.188] CoTaskMemFree (pv=0x35be40) 
	[0258.188] RegQueryValueExW (in: hKey=0x3f0, lpValueName="ProviderStringIndirect", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x2, lpData=0x0, lpcbData=0xba1a8*=0x58) returned 0x0
	[0258.188] CoTaskMemAlloc (cb=0x5c) returned 0x3f63390
	[0258.188] RegQueryValueExW (in: hKey=0x3f0, lpValueName="ProviderStringIndirect", lpReserved=0x0, lpType=0xba17c, lpData=0x3f63390, lpcbData=0xba178*=0x58 | out: lpType=0xba17c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-103", lpcbData=0xba178*=0x58) returned 0x0
	[0258.188] CoTaskMemFree (pv=0x3f63390) 
	[0258.188] CoTaskMemAlloc (cb=0xcc) returned 0x35be40
	[0258.188] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-103", lpDst=0x35be40, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-103") returned 0x2c
	[0258.188] CoTaskMemFree (pv=0x35be40) 
	[0258.188] RegQueryValueExW (in: hKey=0x3f0, lpValueName="VersionStringIndirect", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x2, lpData=0x0, lpcbData=0xba1a8*=0x58) returned 0x0
	[0258.188] CoTaskMemAlloc (cb=0x5c) returned 0x3f63390
	[0258.188] RegQueryValueExW (in: hKey=0x3f0, lpValueName="VersionStringIndirect", lpReserved=0x0, lpType=0xba17c, lpData=0x3f63390, lpcbData=0xba178*=0x58 | out: lpType=0xba17c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-104", lpcbData=0xba178*=0x58) returned 0x0
	[0258.188] CoTaskMemFree (pv=0x3f63390) 
	[0258.188] CoTaskMemAlloc (cb=0xcc) returned 0x35be40
	[0258.188] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-104", lpDst=0x35be40, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-104") returned 0x2c
	[0258.188] CoTaskMemFree (pv=0x35be40) 
	[0258.188] RegQueryValueExW (in: hKey=0x3f0, lpValueName="IconIndirect", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x2, lpData=0x0, lpcbData=0xba1a8*=0x58) returned 0x0
	[0258.188] CoTaskMemAlloc (cb=0x5c) returned 0x3f63390
	[0258.188] RegQueryValueExW (in: hKey=0x3f0, lpValueName="IconIndirect", lpReserved=0x0, lpType=0xba17c, lpData=0x3f63390, lpcbData=0xba178*=0x58 | out: lpType=0xba17c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-500", lpcbData=0xba178*=0x58) returned 0x0
	[0258.188] CoTaskMemFree (pv=0x3f63390) 
	[0258.188] CoTaskMemAlloc (cb=0xcc) returned 0x35be40
	[0258.188] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-500", lpDst=0x35be40, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-500") returned 0x2c
	[0258.188] CoTaskMemFree (pv=0x35be40) 
	[0258.189] RegQueryValueExW (in: hKey=0x3f0, lpValueName="LargeFolderBitmapIndirect", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x2, lpData=0x0, lpcbData=0xba1a8*=0x58) returned 0x0
	[0258.189] CoTaskMemAlloc (cb=0x5c) returned 0x3f63390
	[0258.189] RegQueryValueExW (in: hKey=0x3f0, lpValueName="LargeFolderBitmapIndirect", lpReserved=0x0, lpType=0xba17c, lpData=0x3f63390, lpcbData=0xba178*=0x58 | out: lpType=0xba17c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-501", lpcbData=0xba178*=0x58) returned 0x0
	[0258.189] CoTaskMemFree (pv=0x3f63390) 
	[0258.189] CoTaskMemAlloc (cb=0xcc) returned 0x35be40
	[0258.189] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-501", lpDst=0x35be40, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-501") returned 0x2c
	[0258.189] CoTaskMemFree (pv=0x35be40) 
	[0258.189] RegQueryValueExW (in: hKey=0x3f0, lpValueName="SmallFolderBitmapIndirect", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x2, lpData=0x0, lpcbData=0xba1a8*=0x58) returned 0x0
	[0258.189] CoTaskMemAlloc (cb=0x5c) returned 0x3f63390
	[0258.189] RegQueryValueExW (in: hKey=0x3f0, lpValueName="SmallFolderBitmapIndirect", lpReserved=0x0, lpType=0xba17c, lpData=0x3f63390, lpcbData=0xba178*=0x58 | out: lpType=0xba17c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-502", lpcbData=0xba178*=0x58) returned 0x0
	[0258.189] CoTaskMemFree (pv=0x3f63390) 
	[0258.189] CoTaskMemAlloc (cb=0xcc) returned 0x35be40
	[0258.189] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-502", lpDst=0x35be40, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-502") returned 0x2c
	[0258.189] CoTaskMemFree (pv=0x35be40) 
	[0258.189] RegQueryValueExW (in: hKey=0x3f0, lpValueName="SmallSelectedFolderBitmapIndirect", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x2, lpData=0x0, lpcbData=0xba1a8*=0x58) returned 0x0
	[0258.189] CoTaskMemAlloc (cb=0x5c) returned 0x3f63390
	[0258.189] RegQueryValueExW (in: hKey=0x3f0, lpValueName="SmallSelectedFolderBitmapIndirect", lpReserved=0x0, lpType=0xba17c, lpData=0x3f63390, lpcbData=0xba178*=0x58 | out: lpType=0xba17c*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-503", lpcbData=0xba178*=0x58) returned 0x0
	[0258.189] CoTaskMemFree (pv=0x3f63390) 
	[0258.189] CoTaskMemAlloc (cb=0xcc) returned 0x35be40
	[0258.189] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-503", lpDst=0x35be40, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-503") returned 0x2c
	[0258.189] CoTaskMemFree (pv=0x35be40) 
	[0258.189] RegQueryValueExW (in: hKey=0x3f0, lpValueName="HelpTopic", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x1, lpData=0x0, lpcbData=0xba1a8*=0x40) returned 0x0
	[0258.189] CoTaskMemAlloc (cb=0x44) returned 0x3f71160
	[0258.189] RegQueryValueExW (in: hKey=0x3f0, lpValueName="HelpTopic", lpReserved=0x0, lpType=0xba17c, lpData=0x3f71160, lpcbData=0xba178*=0x40 | out: lpType=0xba17c*=0x1, lpData="C:\\Windows\\Help\\eventviewer.chm", lpcbData=0xba178*=0x40) returned 0x0
	[0258.190] CoTaskMemFree (pv=0x3f71160) 
	[0258.190] RegQueryValueExW (in: hKey=0x3f0, lpValueName="LinkedHelpTopics", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x1, lpData=0x0, lpcbData=0xba1a8*=0x40) returned 0x0
	[0258.190] CoTaskMemAlloc (cb=0x44) returned 0x3f71160
	[0258.190] RegQueryValueExW (in: hKey=0x3f0, lpValueName="LinkedHelpTopics", lpReserved=0x0, lpType=0xba17c, lpData=0x3f71160, lpcbData=0xba178*=0x40 | out: lpType=0xba17c*=0x1, lpData="C:\\Windows\\Help\\eventviewer.chm", lpcbData=0xba178*=0x40) returned 0x0
	[0258.190] CoTaskMemFree (pv=0x3f71160) 
	[0258.190] RegOpenKeyExW (in: hKey=0x3f0, lpSubKey="Standalone", ulOptions=0x0, samDesired=0x20019, phkResult=0xba1c8 | out: phkResult=0xba1c8*=0x0) returned 0x2
	[0258.190] RegOpenKeyExW (in: hKey=0x3f0, lpSubKey="Extension", ulOptions=0x0, samDesired=0x20019, phkResult=0xba1c8 | out: phkResult=0xba1c8*=0x3f4) returned 0x0
	[0258.191] RegQueryValueExW (in: hKey=0x3f4, lpValueName=0x0, lpReserved=0x0, lpType=0xba14c, lpData=0x0, lpcbData=0xba148*=0x0 | out: lpType=0xba14c*=0x1, lpData=0x0, lpcbData=0xba148*=0x14) returned 0x0
	[0258.191] CoTaskMemAlloc (cb=0x18) returned 0x3f6c880
	[0258.191] RegQueryValueExW (in: hKey=0x3f4, lpValueName=0x0, lpReserved=0x0, lpType=0xba11c, lpData=0x3f6c880, lpcbData=0xba118*=0x14 | out: lpType=0xba11c*=0x1, lpData="Namespace", lpcbData=0xba118*=0x14) returned 0x0
	[0258.191] CoTaskMemFree (pv=0x3f6c880) 
	[0258.193] RegCloseKey (hKey=0x3f4) returned 0x0
	[0258.193] RegOpenKeyExW (in: hKey=0x3f0, lpSubKey="NodeTypes", ulOptions=0x0, samDesired=0x20019, phkResult=0xba228 | out: phkResult=0xba228*=0x3f4) returned 0x0
	[0258.198] RegQueryInfoKeyW (in: hKey=0x3f4, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0xba13c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xba138, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0xba13c*=0x1, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xba138*=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0258.198] CoTaskMemFree (pv=0x0) 
	[0258.199] CoTaskMemAlloc (cb=0x204) returned 0x3f34630
	[0258.199] RegEnumKeyExW (in: hKey=0x3f4, dwIndex=0x0, lpName=0x3f34630, lpcchName=0xba1c8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{33F2C345-BF11-41b6-90DA-4FB4963EA4E2}", lpcchName=0xba1c8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0258.199] CoTaskMemFree (pv=0x3f34630) 
	[0258.199] CoTaskMemFree (pv=0x0) 
	[0258.199] RegOpenKeyExW (in: hKey=0x3f4, lpSubKey="{33F2C345-BF11-41b6-90DA-4FB4963EA4E2}", ulOptions=0x0, samDesired=0x20019, phkResult=0xba228 | out: phkResult=0xba228*=0x3f8) returned 0x0
	[0258.199] RegQueryValueExW (in: hKey=0x3f8, lpValueName="", lpReserved=0x0, lpType=0xba1ac, lpData=0x0, lpcbData=0xba1a8*=0x0 | out: lpType=0xba1ac*=0x1, lpData=0x0, lpcbData=0xba1a8*=0x32) returned 0x0
	[0258.199] CoTaskMemAlloc (cb=0x36) returned 0x35e880
	[0258.199] RegQueryValueExW (in: hKey=0x3f8, lpValueName="", lpReserved=0x0, lpType=0xba17c, lpData=0x35e880, lpcbData=0xba178*=0x32 | out: lpType=0xba17c*=0x1, lpData="Classic Viewer Root Node", lpcbData=0xba178*=0x32) returned 0x0
	[0258.199] CoTaskMemFree (pv=0x35e880) 
	[0258.200] RegCloseKey (hKey=0x3f8) returned 0x0
	[0258.200] RegCloseKey (hKey=0x3f4) returned 0x0
	[0258.200] RegCloseKey (hKey=0x3f0) returned 0x0
	[0265.110] GetDC (hWnd=0x0) returned 0x1401007f
	[0265.292] GetCurrentProcessId () returned 0x53c
	[0265.403] FindAtomW (lpString="GDI+Atom_1340_1") returned 0x0
	[0265.404] AddAtomW (lpString="GDI+Atom_1340_1") returned 0xc072
	[0265.756] GdiplusStartup (in: token=0xb7fe8, input=0xb8000, output=0xb7fd8 | out: token=0xb7fe8, output=0xb7fd8) returned 0x0
	[0265.768] GetDeviceCaps (hdc=0x1401007f, index=12) returned 32
	[0265.768] GetDeviceCaps (hdc=0x1401007f, index=14) returned 1
	[0265.769] ReleaseDC (hWnd=0x0, hDC=0x1401007f) returned 1
	[0265.776] CreateIconFromResourceEx (presbits=0x46a0348, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x3012b
	[0265.891] CreateIconFromResourceEx (presbits=0x46a6cb0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x60097
	[0266.309] GetParent (hWnd=0x20164) returned 0x0
	[0266.309] GetActiveWindow () returned 0x0
	[0266.309] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0266.309] GetParent (hWnd=0x20164) returned 0x0
	[0266.309] GetDesktopWindow () returned 0x10010
	[0266.309] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0266.309] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0266.309] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0266.310] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0266.310] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0266.310] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0266.310] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0266.310] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0266.310] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0266.310] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0266.310] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0266.310] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0266.310] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0266.310] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0266.310] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0266.310] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0266.310] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0266.310] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0266.311] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0266.311] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0266.311] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.311] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.311] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0266.311] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0266.311] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0266.311] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.311] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.311] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0266.311] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0266.311] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0266.311] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.311] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.311] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0266.311] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0266.311] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0266.312] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.312] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.312] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0266.312] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0266.312] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0266.312] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.312] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.312] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0266.312] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0266.312] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0266.312] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.312] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.312] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0266.312] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0266.312] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0266.313] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.313] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.313] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0266.313] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0266.313] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0266.313] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.313] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.313] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0266.313] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0266.313] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0266.313] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0266.313] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0266.313] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0266.313] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0266.314] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.314] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.314] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0266.314] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0266.314] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0266.314] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0266.314] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0266.314] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.314] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.314] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0266.314] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0266.314] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0266.357] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.357] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.357] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0266.357] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.357] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.357] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0266.357] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0266.357] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0266.358] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0266.358] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0266.358] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0266.358] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0266.358] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0266.358] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0266.358] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0266.358] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0266.358] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0266.358] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0266.359] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0266.359] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0266.359] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0266.359] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0266.359] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0266.359] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0266.360] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0266.360] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0266.360] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0266.360] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0266.360] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0266.360] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0266.360] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0266.360] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0266.360] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0266.360] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0266.360] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0266.360] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0266.360] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0266.360] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0266.361] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.361] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.361] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0266.361] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0266.361] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0266.361] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0266.361] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0266.361] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0266.361] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0266.362] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0266.362] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0266.362] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0266.362] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0266.362] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0266.362] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0266.362] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0266.362] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0266.362] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0266.362] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0266.362] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0266.362] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0266.362] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0266.362] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0266.362] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0266.362] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0266.362] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0266.363] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0266.363] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0266.363] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0266.363] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0266.363] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0266.363] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0266.363] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0266.363] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0266.363] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0266.363] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0266.363] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0266.363] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0266.363] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0266.363] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0266.363] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0266.363] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0266.364] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0266.364] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0266.364] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0266.364] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0266.364] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0266.364] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0266.364] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0266.364] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0266.364] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0266.364] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0266.364] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0266.364] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.364] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.364] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0266.364] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0266.364] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0266.364] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0266.365] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0266.365] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0266.365] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.365] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.365] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0266.365] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0266.365] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0266.365] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0266.365] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0266.365] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0266.365] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.365] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.365] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0266.365] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0266.365] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0266.366] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.366] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.366] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0266.366] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.366] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.366] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0266.366] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0266.366] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0266.366] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0266.366] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0266.366] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0266.366] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0266.366] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0266.366] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0266.366] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0266.366] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0266.366] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0266.367] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0266.367] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0266.367] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0266.367] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0266.367] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0266.367] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0266.367] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0266.367] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x10298
	[0266.367] GetWindowLongW (hWnd=0x10298, nIndex=-16) returned -2080374784
	[0266.367] GetWindow (hWnd=0x10298, uCmd=0x4) returned 0x0
	[0266.367] GetWindow (hWnd=0x10298, uCmd=0x2) returned 0x1029a
	[0266.367] GetWindowLongW (hWnd=0x1029a, nIndex=-16) returned -1946157056
	[0266.367] GetWindow (hWnd=0x1029a, uCmd=0x4) returned 0x10298
	[0266.367] GetWindowLongW (hWnd=0x10298, nIndex=-16) returned -2080374784
	[0266.367] GetWindow (hWnd=0x10298, uCmd=0x4) returned 0x0
	[0266.367] GetWindow (hWnd=0x1029a, uCmd=0x2) returned 0x10294
	[0266.368] GetWindowLongW (hWnd=0x10294, nIndex=-16) returned -2080374784
	[0266.368] GetWindow (hWnd=0x10294, uCmd=0x4) returned 0x0
	[0266.368] GetWindow (hWnd=0x10294, uCmd=0x2) returned 0x10296
	[0266.368] GetWindowLongW (hWnd=0x10296, nIndex=-16) returned -1946157056
	[0266.368] GetWindow (hWnd=0x10296, uCmd=0x4) returned 0x10294
	[0266.368] GetWindowLongW (hWnd=0x10294, nIndex=-16) returned -2080374784
	[0266.368] GetWindow (hWnd=0x10294, uCmd=0x4) returned 0x0
	[0266.368] GetWindow (hWnd=0x10296, uCmd=0x2) returned 0xa0024
	[0266.368] GetWindowLongW (hWnd=0xa0024, nIndex=-16) returned -2080374784
	[0266.368] GetWindow (hWnd=0xa0024, uCmd=0x4) returned 0x0
	[0266.368] GetWindow (hWnd=0xa0024, uCmd=0x2) returned 0x10292
	[0266.368] GetWindowLongW (hWnd=0x10292, nIndex=-16) returned -1946157056
	[0266.368] GetWindow (hWnd=0x10292, uCmd=0x4) returned 0xa0024
	[0266.368] GetWindowLongW (hWnd=0xa0024, nIndex=-16) returned -2080374784
	[0266.368] GetWindow (hWnd=0xa0024, uCmd=0x4) returned 0x0
	[0266.368] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x20264
	[0266.369] GetWindowLongW (hWnd=0x20264, nIndex=-16) returned -2080374526
	[0266.369] GetWindow (hWnd=0x20264, uCmd=0x4) returned 0x0
	[0266.369] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0266.369] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned -2080374526
	[0266.369] GetWindow (hWnd=0x10238, uCmd=0x4) returned 0x0
	[0266.369] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0266.369] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned -2080374782
	[0266.369] GetWindow (hWnd=0x10236, uCmd=0x4) returned 0x3016a
	[0266.369] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0266.369] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0266.369] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0266.369] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned -2080374526
	[0266.369] GetWindow (hWnd=0x1022e, uCmd=0x4) returned 0x0
	[0266.369] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0266.369] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned -2080374782
	[0266.369] GetWindow (hWnd=0x10222, uCmd=0x4) returned 0x20164
	[0266.369] SendMessageW (hWnd=0x10222, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.369] GetPropW (hWnd=0x10222, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0266.369] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10222, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.370] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0266.370] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned -2080374782
	[0266.370] GetWindow (hWnd=0x1021c, uCmd=0x4) returned 0xa016e
	[0266.370] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0266.370] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0266.370] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0266.370] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0266.370] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0266.370] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0266.370] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0266.370] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0266.370] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0266.370] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0266.370] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0266.370] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0266.371] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0266.371] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0266.371] SendMessageW (hWnd=0x101b0, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.371] GetPropW (hWnd=0x101b0, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0266.371] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101b0, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.371] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0266.371] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0266.371] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0266.371] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0266.371] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0266.371] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0266.371] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0266.371] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0266.371] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0266.371] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0266.371] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0266.371] SendMessageW (hWnd=0x20164, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.372] DefFrameProcW (hWnd=0x20164, hWndMDIClient=0xa014c, uMsg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.372] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0266.372] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0266.372] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0266.372] SendMessageW (hWnd=0x20162, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.372] GetPropW (hWnd=0x20162, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0266.372] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20162, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.372] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0266.373] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0266.373] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0266.373] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0266.373] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0266.373] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0266.373] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0266.373] GetWindow (hWnd=0x3016a, uCmd=0x4) returned 0x0
	[0266.373] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0266.373] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0266.373] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0266.373] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0266.373] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0266.373] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0266.373] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0266.373] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0266.373] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0266.374] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0266.374] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0266.374] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0266.374] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0266.374] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0266.374] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0266.374] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0266.374] GetParent (hWnd=0x10066) returned 0x0
	[0266.374] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0266.374] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0266.374] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0266.374] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0266.374] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0266.374] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0266.374] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0266.374] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0266.374] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0266.374] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0266.374] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0266.374] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0266.375] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0266.375] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0266.375] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0266.375] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0266.375] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0266.375] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0266.375] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0266.375] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0266.375] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0266.375] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0266.375] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0266.375] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0266.375] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0266.375] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0266.375] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0266.375] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0266.375] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0266.375] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0266.375] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0266.375] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0266.375] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0266.375] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0266.375] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0266.375] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0266.375] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0266.375] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0266.376] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0266.376] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0266.376] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0266.376] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0266.376] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0266.376] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0266.376] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0266.376] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0266.738] CoGetContextToken (in: pToken=0xb9b80 | out: pToken=0xb9b80) returned 0x0
	[0266.750] CoGetContextToken (in: pToken=0xb9b10 | out: pToken=0xb9b10) returned 0x0
	[0266.750] CObjectContext::QueryInterface () returned 0x0
	[0266.751] CObjectContext::GetCurrentApartmentType () returned 0x0
	[0266.751] Release () returned 0x0
	[0266.751] CoGetObjectContext (in: riid=0x7fef300d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3f7cbb8 | out: ppv=0x3f7cbb8*=0x29f6c0) returned 0x0
	[0266.760] CoGetContextToken (in: pToken=0xb9b50 | out: pToken=0xb9b50) returned 0x0
	[0266.761] CoGetContextToken (in: pToken=0xba130 | out: pToken=0xba130) returned 0x0
	[0266.761] CoGetContextToken (in: pToken=0xba070 | out: pToken=0xba070) returned 0x0
	[0266.762] CoGetContextToken (in: pToken=0xba130 | out: pToken=0xba130) returned 0x0
	[0266.762] CoGetContextToken (in: pToken=0xba070 | out: pToken=0xba070) returned 0x0

Thread:
	id = 114
	os_tid = 0x684


Thread:
	id = 125
	os_tid = 0x7c4


Thread:
	id = 128
	os_tid = 0x260


Thread:
	id = 133
	os_tid = 0x62c


Thread:
	id = 134
	os_tid = 0x5d8


Thread:
	id = 139
	os_tid = 0x6f8


Thread:
	id = 142
	os_tid = 0x72c


Thread:
	id = 143
	os_tid = 0x444

	[0248.179] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0

Thread:
	id = 147
	os_tid = 0x744


Process:
	id = "23"
	image_name = "mmc.exe"
	filename = "c:\\windows\\system32\\mmc.exe"
	page_root = "0x20769000"
	os_pid = "0x2b0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "12"
	os_parent_pid = "0x7d4"
	cmd_line = "\"C:\\Windows\\system32\\mmc.exe\" \"C:\\Windows\\System32\\compmgmt.msc\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "64"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 111
	os_tid = 0x7bc

	[0226.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x21ebc0 | out: lpSystemTimeAsFileTime=0x21ebc0*(dwLowDateTime=0x66218240, dwHighDateTime=0x1d57294)) 
	[0226.568] GetCurrentProcessId () returned 0x2b0
	[0226.568] GetCurrentThreadId () returned 0x7bc
	[0226.568] GetTickCount () returned 0x114dcd8
	[0226.568] RtlQueryPerformanceCounter (in: lpPerformanceCount=0x21ebc8 | out: lpPerformanceCount=0x21ebc8*=19225252846) returned 1
	[0226.569] LoadLibraryA (lpLibFileName="MSVCRT.DLL") returned 0x7feff720000
	[0226.571] GetVersion () returned 0x1db10106
	[0226.571] SetErrorMode (uMode=0x0) returned 0x0
	[0226.571] SetErrorMode (uMode=0x8001) returned 0x0
	[0226.572] LocalAlloc (uFlags=0x0, uBytes=0x2000) returned 0x3eea70
	[0226.572] LocalFree (hMem=0x3eea70) returned 0x0
	[0226.572] GetVersion () returned 0x1db10106
	[0226.574] GlobalLock (hMem=0x1bd0008) returned 0x3eea70
	[0226.574] LocalAlloc (uFlags=0x40, uBytes=0x340) returned 0x3eec90
	[0226.574] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x3e9490
	[0226.574] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x3e5ed0
	[0226.574] malloc (_Size=0x100) returned 0x6357b0
	[0226.574] __dllonexit () returned 0x7fef845621c
	[0226.574] __dllonexit () returned 0x7fef84566e0
	[0226.574] __dllonexit () returned 0x7fef84572b8
	[0226.574] __dllonexit () returned 0x7fef84587cc
	[0226.575] __dllonexit () returned 0x7fef8458d64
	[0226.575] __dllonexit () returned 0x7fef8458db4
	[0226.575] __dllonexit () returned 0x7fef8458e70
	[0226.575] __dllonexit () returned 0x7fef845a308
	[0226.575] __dllonexit () returned 0x7fef8458810
	[0226.575] __dllonexit () returned 0x7fef8467598
	[0226.575] __dllonexit () returned 0x7fef8458880
	[0226.575] __dllonexit () returned 0x7fef845a170
	[0226.575] __dllonexit () returned 0x7fef845a280
	[0226.575] __dllonexit () returned 0x7fef845ad44
	[0226.576] __dllonexit () returned 0x7fef845bc30
	[0226.576] __dllonexit () returned 0x7fef845bc80
	[0226.576] __dllonexit () returned 0x7fef845c338
	[0226.576] __dllonexit () returned 0x7fef845d030
	[0226.576] __dllonexit () returned 0x7fef84559cc
	[0226.576] __dllonexit () returned 0x7fef84559f0
	[0226.576] __dllonexit () returned 0x7fef8455a1c
	[0226.577] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc105
	[0226.578] __dllonexit () returned 0x7fef8467568
	[0226.578] __dllonexit () returned 0x7fef8467574
	[0226.578] __dllonexit () returned 0x7fef8467580
	[0226.578] __dllonexit () returned 0x7fef846758c
	[0226.578] GetVersion () returned 0x1db10106
	[0226.578] GetVersion () returned 0x1db10106
	[0226.578] GetVersion () returned 0x1db10106
	[0226.578] __dllonexit () returned 0x7fef83ba15c
	[0226.578] __dllonexit () returned 0x7fef83c6610
	[0226.578] __dllonexit () returned 0x7fef8458910
	[0226.579] __dllonexit () returned 0x7fef8458b90
	[0226.579] __dllonexit () returned 0x7fef8458bb4
	[0226.579] __dllonexit () returned 0x7fef83d6ae0
	[0226.579] GetVersion () returned 0x1db10106
	[0226.579] GetProcessVersion (ProcessId=0x0) returned 0x60001
	[0226.579] GetSystemMetrics (nIndex=11) returned 32
	[0226.579] GetSystemMetrics (nIndex=12) returned 32
	[0226.579] GetSystemMetrics (nIndex=2) returned 17
	[0226.579] GetSystemMetrics (nIndex=3) returned 17
	[0226.579] GetDC (hWnd=0x0) returned 0x8010666
	[0226.579] GetDeviceCaps (hdc=0x8010666, index=88) returned 96
	[0226.579] GetDeviceCaps (hdc=0x8010666, index=90) returned 96
	[0226.579] ReleaseDC (hWnd=0x0, hDC=0x8010666) returned 1
	[0226.579] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0226.579] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0226.580] GetSysColor (nIndex=20) returned 0xffffff
	[0226.580] GetSysColor (nIndex=18) returned 0x0
	[0226.580] GetSysColor (nIndex=6) returned 0x646464
	[0226.580] GetSysColorBrush (nIndex=15) returned 0x1100059
	[0226.580] GetSysColorBrush (nIndex=6) returned 0x1100061
	[0226.580] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007
	[0226.580] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
	[0226.580] __dllonexit () returned 0x7fef8458f84
	[0226.580] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc106
	[0226.580] __dllonexit () returned 0x7fef83e3990
	[0226.580] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004
	[0226.755] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003
	[0226.755] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002
	[0226.755] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a
	[0226.755] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b
	[0226.755] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d
	[0226.755] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e
	[0226.755] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f
	[0226.755] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006
	[0226.755] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007
	[0226.756] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc0ba
	[0226.756] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc0c0
	[0226.756] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc106
	[0226.756] __dllonexit () returned 0x7fef84675a4
	[0226.756] __dllonexit () returned 0x7fef84675bc
	[0226.756] __dllonexit () returned 0x7fef84675c8
	[0226.756] __dllonexit () returned 0x7fef84675d4
	[0226.756] __dllonexit () returned 0x7fef84675e0
	[0226.757] GetCursorPos (in: lpPoint=0x7fef84c26d8 | out: lpPoint=0x7fef84c26d8*(x=838, y=444)) returned 1
	[0226.757] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x3eefe0
	[0226.757] LocalReAlloc (hMem=0x3e5ed0, uBytes=0x18, uFlags=0x2) returned 0x3e5ed0
	[0226.758] GetCurrentThread () returned 0xfffffffffffffffe
	[0226.758] GetCurrentThreadId () returned 0x7bc
	[0226.758] __dllonexit () returned 0x7fef845cfa4
	[0226.758] SetErrorMode (uMode=0x0) returned 0x8001
	[0226.758] SetErrorMode (uMode=0x8001) returned 0x0
	[0226.758] GetModuleFileNameW (in: hModule=0x7fef83a0000, lpFilename=0x21e2b0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\MFC42u.dll" (normalized: "c:\\windows\\system32\\mfc42u.dll")) returned 0x1e
	[0226.758] wcscpy_s (in: _Destination=0x21e4c0, _SizeInWords=0x104, _Source="MFC42u" | out: _Destination="MFC42u") returned 0x0
	[0227.344] FindResourceW (hModule=0x7fef83a0000, lpName=0xe01, lpType=0x6) returned 0x1209b0
	[0227.526] LoadStringW (in: hInstance=0x7fef83a0000, uID=0xe000, lpBuffer=0x21e6d0, cchBufferMax=256 | out: lpBuffer="") returned 0x0
	[0227.527] wcscpy_s (in: _Destination=0x21e2e4, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0227.527] wcscat_s (in: _Destination="MFC42u", _SizeInWords=0x104, _Source=".INI" | out: _Destination="MFC42u.INI") returned 0x0
	[0227.581] malloc (_Size=0x80) returned 0x6359c0
	[0227.582] LocalAlloc (uFlags=0x40, uBytes=0x2100) returned 0x3ef0f0
	[0227.582] GetSystemDirectoryA (in: lpBuffer=0x21e950, uSize=0x112 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0227.582] strcat_s (in: _Destination="C:\\Windows\\system32", _SizeInBytes=0x112, _Source="\\MFC42" | out: _Destination="C:\\Windows\\system32\\MFC42") returned 0x0
	[0227.582] strcat_s (in: _Destination="C:\\Windows\\system32\\MFC42", _SizeInBytes=0x112, _Source="LOC" | out: _Destination="C:\\Windows\\system32\\MFC42LOC") returned 0x0
	[0227.582] strcat_s (in: _Destination="C:\\Windows\\system32\\MFC42LOC", _SizeInBytes=0x112, _Source=".DLL" | out: _Destination="C:\\Windows\\system32\\MFC42LOC.DLL") returned 0x0
	[0227.582] LoadLibraryExA (lpLibFileName="C:\\Windows\\system32\\MFC42LOC.DLL", hFile=0x0, dwFlags=0x2) returned 0x0
	[0227.584] malloc (_Size=0x400) returned 0x635fa0
	[0227.585] malloc (_Size=0x80) returned 0x635b60
	[0227.589] GetCursorPos (in: lpPoint=0xff872a98 | out: lpPoint=0xff872a98*(x=838, y=444)) returned 1
	[0227.589] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x3f78a0
	[0227.589] LocalReAlloc (hMem=0x3e5ed0, uBytes=0x20, uFlags=0x2) returned 0x3e5ed0
	[0227.589] GetCurrentThread () returned 0xfffffffffffffffe
	[0227.589] GetCurrentThreadId () returned 0x7bc
	[0227.589] malloc (_Size=0x18) returned 0x637b20
	[0227.589] malloc (_Size=0x18) returned 0x637b40
	[0227.589] malloc (_Size=0x18) returned 0x637b60
	[0227.742] SetErrorMode (uMode=0x0) returned 0x8001
	[0227.742] SetErrorMode (uMode=0x8001) returned 0x0
	[0227.742] GetModuleFileNameW (in: hModule=0xff6d0000, lpFilename=0x21f060, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\mmc.exe" (normalized: "c:\\windows\\system32\\mmc.exe")) returned 0x1b
	[0227.742] wcscpy_s (in: _Destination=0x21f270, _SizeInWords=0x104, _Source="mmc" | out: _Destination="mmc") returned 0x0
	[0227.742] FindResourceW (hModule=0xff6d0000, lpName=0xe01, lpType=0x6) returned 0x0
	[0227.742] FindResourceW (hModule=0x7fef8280000, lpName=0xe01, lpType=0x6) returned 0x150bf0
	[0227.743] LoadStringW (in: hInstance=0x7fef8280000, uID=0xe000, lpBuffer=0x21f480, cchBufferMax=256 | out: lpBuffer="Microsoft Management Console") returned 0x1c
	[0227.743] wcscpy_s (in: _Destination=0x21f08e, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0227.743] wcscat_s (in: _Destination="mmc", _SizeInWords=0x104, _Source=".INI" | out: _Destination="mmc.INI") returned 0x0
	[0227.743] GetCurrentThreadId () returned 0x7bc
	[0227.743] SetWindowsHookExW (idHook=-1, lpfn=0x7fef83ecc6c, hmod=0x0, dwThreadId=0x7bc) returned 0x600e5
	[0229.330] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0229.330] malloc (_Size=0x4e) returned 0x636ec0
	[0229.331] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0229.332] free (_Block=0x0) 
	[0229.332] free (_Block=0x637c30) 
	[0229.332] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0x4) returned 0xd06f8
	[0229.333] malloc (_Size=0x88) returned 0x63a3d0
	[0229.340] malloc (_Size=0x88) returned 0x63a460
	[0229.340] malloc (_Size=0x100) returned 0x6380c0
	[0229.340] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0x9) returned 0xd0818
	[0229.340] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0230.319] malloc (_Size=0x400) returned 0x4e1200
	[0230.479] GetCursorPos (in: lpPoint=0x7fef7fde498 | out: lpPoint=0x7fef7fde498*(x=838, y=444)) returned 1
	[0230.479] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x454300
	[0230.479] LocalReAlloc (hMem=0x3e5ed0, uBytes=0x28, uFlags=0x2) returned 0x46de30
	[0230.479] GetCurrentThread () returned 0xfffffffffffffffe
	[0230.479] GetCurrentThreadId () returned 0x7bc
	[0230.479] malloc (_Size=0x80) returned 0x4df480
	[0230.479] SetErrorMode (uMode=0x0) returned 0x8001
	[0230.479] SetErrorMode (uMode=0x8001) returned 0x0
	[0230.480] GetModuleFileNameW (in: hModule=0x7fef7fc0000, lpFilename=0x21c5f0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\mycomput.dll" (normalized: "c:\\windows\\system32\\mycomput.dll")) returned 0x20
	[0230.480] wcscpy_s (in: _Destination=0x21c800, _SizeInWords=0x104, _Source="mycomput" | out: _Destination="mycomput") returned 0x0
	[0230.480] FindResourceW (hModule=0x7fef7fc0000, lpName=0xe01, lpType=0x6) returned 0x0
	[0230.480] FindResourceW (hModule=0x7fef83a0000, lpName=0xe01, lpType=0x6) returned 0x1209b0
	[0230.480] LoadStringW (in: hInstance=0x7fef83a0000, uID=0xe000, lpBuffer=0x21ca10, cchBufferMax=256 | out: lpBuffer="") returned 0x0
	[0230.480] wcscpy_s (in: _Destination=0x21c628, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0230.481] wcscat_s (in: _Destination="mycomput", _SizeInWords=0x104, _Source=".INI" | out: _Destination="mycomput.INI") returned 0x0
	[0230.481] malloc (_Size=0x80) returned 0x4df510
	[0230.482] malloc (_Size=0x40) returned 0x541640
	[0230.482] malloc (_Size=0x60) returned 0x5417d0
	[0230.482] malloc (_Size=0x2a) returned 0x4de320
	[0230.482] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef7fd3d48, cbMultiByte=-1, lpWideCharStr=0x4de32c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0230.483] free (_Block=0x4de320) 
	[0231.002] GetCursorPos (in: lpPoint=0x7fef687a9f8 | out: lpPoint=0x7fef687a9f8*(x=838, y=444)) returned 1
	[0231.002] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x454f90
	[0231.002] LocalReAlloc (hMem=0x46de30, uBytes=0x30, uFlags=0x2) returned 0x46de30
	[0231.003] GetCurrentThread () returned 0xfffffffffffffffe
	[0231.003] GetCurrentThreadId () returned 0x7bc
	[0231.003] malloc (_Size=0x80) returned 0x4df5a0
	[0231.003] SetErrorMode (uMode=0x0) returned 0x8001
	[0231.003] SetErrorMode (uMode=0x8001) returned 0x0
	[0231.004] GetModuleFileNameW (in: hModule=0x7fef6820000, lpFilename=0x21c5f0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\filemgmt.dll" (normalized: "c:\\windows\\system32\\filemgmt.dll")) returned 0x20
	[0231.004] wcscpy_s (in: _Destination=0x21c800, _SizeInWords=0x104, _Source="filemgmt" | out: _Destination="filemgmt") returned 0x0
	[0231.004] FindResourceW (hModule=0x7fef6820000, lpName=0xe01, lpType=0x6) returned 0x20410b8
	[0231.019] LoadStringW (in: hInstance=0x7fef6820000, uID=0xe000, lpBuffer=0x21ca10, cchBufferMax=256 | out: lpBuffer="Shared Folders") returned 0xe
	[0231.055] wcscpy_s (in: _Destination=0x21c628, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0231.056] wcscat_s (in: _Destination="filemgmt", _SizeInWords=0x104, _Source=".INI" | out: _Destination="filemgmt.INI") returned 0x0
	[0231.057] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x2040db8
	[0231.057] LoadStringW (in: hInstance=0x7fef6820000, uID=0x69, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Started") returned 0x7
	[0231.057] lstrlenW (lpString="Started") returned 7
	[0231.057] malloc (_Size=0x1c) returned 0x5417b0
	[0231.057] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x2040db8
	[0231.057] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6c, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Starting") returned 0x8
	[0231.057] lstrlenW (lpString="Starting") returned 8
	[0231.057] malloc (_Size=0x1e) returned 0x5417e0
	[0231.057] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x2040db8
	[0231.057] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6a, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Stopped") returned 0x7
	[0231.057] lstrlenW (lpString="Stopped") returned 7
	[0231.057] malloc (_Size=0x1c) returned 0x541c10
	[0231.057] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x2040db8
	[0231.058] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6d, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Stopping") returned 0x8
	[0231.058] lstrlenW (lpString="Stopping") returned 8
	[0231.058] malloc (_Size=0x1e) returned 0x541c40
	[0231.058] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x2040db8
	[0231.058] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6b, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Paused") returned 0x6
	[0231.058] lstrlenW (lpString="Paused") returned 6
	[0231.058] malloc (_Size=0x1a) returned 0x541c70
	[0231.058] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x2040db8
	[0231.058] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6e, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Pausing") returned 0x7
	[0231.058] lstrlenW (lpString="Pausing") returned 7
	[0231.058] malloc (_Size=0x1c) returned 0x541ca0
	[0231.058] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x2040db8
	[0231.058] LoadStringW (in: hInstance=0x7fef6820000, uID=0x6f, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Resuming") returned 0x8
	[0231.058] lstrlenW (lpString="Resuming") returned 8
	[0231.058] malloc (_Size=0x1e) returned 0x541cd0
	[0231.059] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x2040db8
	[0231.059] LoadStringW (in: hInstance=0x7fef6820000, uID=0x64, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Boot") returned 0x4
	[0231.059] lstrlenW (lpString="Boot") returned 4
	[0231.059] malloc (_Size=0x16) returned 0x541810
	[0231.059] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x2040db8
	[0231.059] LoadStringW (in: hInstance=0x7fef6820000, uID=0x65, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="System") returned 0x6
	[0231.059] lstrlenW (lpString="System") returned 6
	[0231.059] malloc (_Size=0x1a) returned 0x541d00
	[0231.059] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x2040db8
	[0231.059] LoadStringW (in: hInstance=0x7fef6820000, uID=0x66, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Automatic") returned 0x9
	[0231.059] lstrlenW (lpString="Automatic") returned 9
	[0231.059] malloc (_Size=0x20) returned 0x541d30
	[0231.059] FindResourceW (hModule=0x7fef6820000, lpName=0x3d, lpType=0x6) returned 0x2040e98
	[0231.059] LoadStringW (in: hInstance=0x7fef6820000, uID=0x3cd, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Automatic (Delayed Start)") returned 0x19
	[0231.059] lstrlenW (lpString="Automatic (Delayed Start)") returned 25
	[0231.059] malloc (_Size=0x40) returned 0x541d60
	[0231.060] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x2040db8
	[0231.060] LoadStringW (in: hInstance=0x7fef6820000, uID=0x67, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Manual") returned 0x6
	[0231.060] lstrlenW (lpString="Manual") returned 6
	[0231.060] malloc (_Size=0x1a) returned 0x541db0
	[0231.060] FindResourceW (hModule=0x7fef6820000, lpName=0x7, lpType=0x6) returned 0x2040db8
	[0231.060] LoadStringW (in: hInstance=0x7fef6820000, uID=0x68, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Disabled") returned 0x8
	[0231.060] lstrlenW (lpString="Disabled") returned 8
	[0231.060] malloc (_Size=0x1e) returned 0x541de0
	[0231.060] FindResourceW (hModule=0x7fef6820000, lpName=0xb, lpType=0x6) returned 0x2040df8
	[0231.060] LoadStringW (in: hInstance=0x7fef6820000, uID=0xa0, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Local System") returned 0xc
	[0231.060] lstrlenW (lpString="Local System") returned 12
	[0231.060] malloc (_Size=0x26) returned 0x541e10
	[0231.060] FindResourceW (hModule=0x7fef6820000, lpName=0xb, lpType=0x6) returned 0x2040df8
	[0231.060] LoadStringW (in: hInstance=0x7fef6820000, uID=0xa1, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Local Service") returned 0xd
	[0231.060] lstrlenW (lpString="Local Service") returned 13
	[0231.060] malloc (_Size=0x28) returned 0x63b000
	[0231.061] FindResourceW (hModule=0x7fef6820000, lpName=0xb, lpType=0x6) returned 0x2040df8
	[0231.061] LoadStringW (in: hInstance=0x7fef6820000, uID=0xa2, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Network Service") returned 0xf
	[0231.061] lstrlenW (lpString="Network Service") returned 15
	[0231.061] malloc (_Size=0x2c) returned 0x4de2e0
	[0231.061] FindResourceW (hModule=0x7fef6820000, lpName=0x8, lpType=0x6) returned 0x2040dc8
	[0231.061] LoadStringW (in: hInstance=0x7fef6820000, uID=0x70, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="(Unknown)") returned 0x9
	[0231.061] lstrlenW (lpString="(Unknown)") returned 9
	[0231.061] malloc (_Size=0x20) returned 0x63b030
	[0231.061] FindResourceW (hModule=0x7fef6820000, lpName=0x1, lpType=0x6) returned 0x2040da8
	[0231.061] LoadStringW (in: hInstance=0x7fef6820000, uID=0x3, lpBuffer=0x21c9d0, cchBufferMax=256 | out: lpBuffer="Local Computer") returned 0xe
	[0231.061] lstrlenW (lpString="Local Computer") returned 14
	[0231.061] malloc (_Size=0x2a) returned 0x4de320
	[0231.061] lstrlenW (lpString="NT AUTHORITY\\LocalService") returned 25
	[0231.062] malloc (_Size=0x40) returned 0x541e40
	[0231.062] lstrlenW (lpString="NT AUTHORITY\\NetworkService") returned 27
	[0231.062] malloc (_Size=0x44) returned 0x541e90
	[0231.062] lstrlenW (lpString="NT AUTHORITY\\Local Service") returned 26
	[0231.062] malloc (_Size=0x42) returned 0x63b800
	[0231.062] lstrlenW (lpString="NT AUTHORITY\\Network Service") returned 28
	[0231.062] malloc (_Size=0x46) returned 0x63b850
	[0231.063] malloc (_Size=0x80) returned 0x4df630
	[0231.063] malloc (_Size=0x40) returned 0x63b8a0
	[0231.080] malloc (_Size=0x80) returned 0x4df6c0
	[0231.080] malloc (_Size=0x38) returned 0x4de3a0
	[0231.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d578, cbMultiByte=-1, lpWideCharStr=0x4de3ac, cchWideChar=22 | out: lpWideCharStr="Microsoft Corporation") returned 22
	[0231.080] malloc (_Size=0x2a) returned 0x4de3e0
	[0231.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d590, cbMultiByte=-1, lpWideCharStr=0x4de3ec, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0231.082] free (_Block=0x4de3e0) 
	[0231.082] free (_Block=0x4de3a0) 
	[0231.084] malloc (_Size=0x40) returned 0x63b8f0
	[0231.084] malloc (_Size=0x80) returned 0x4df6c0
	[0231.084] malloc (_Size=0x38) returned 0x4de3e0
	[0231.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d578, cbMultiByte=-1, lpWideCharStr=0x4de3ec, cchWideChar=22 | out: lpWideCharStr="Microsoft Corporation") returned 22
	[0231.084] malloc (_Size=0x2a) returned 0x4de420
	[0231.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d590, cbMultiByte=-1, lpWideCharStr=0x4de42c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0231.086] free (_Block=0x4de420) 
	[0231.086] free (_Block=0x4de3e0) 
	[0234.457] malloc (_Size=0x2e) returned 0x4de420
	[0234.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de42c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.457] malloc (_Size=0x2e) returned 0x4de3e0
	[0234.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de3ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.457] malloc (_Size=0x2e) returned 0x4de360
	[0234.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de36c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.457] malloc (_Size=0x2e) returned 0x4de4e0
	[0234.457] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de4ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.458] malloc (_Size=0x2e) returned 0x4de520
	[0234.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de52c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.458] malloc (_Size=0x2e) returned 0x4de560
	[0234.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de56c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.458] malloc (_Size=0x2e) returned 0x4de5a0
	[0234.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de5ac, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.458] malloc (_Size=0x2e) returned 0x4de5e0
	[0234.458] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de5ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.458] GetCursorPos (in: lpPoint=0x7fef409b4b8 | out: lpPoint=0x7fef409b4b8*(x=652, y=879)) returned 1
	[0234.458] LocalAlloc (uFlags=0x40, uBytes=0x108) returned 0x46dfc0
	[0234.458] LocalReAlloc (hMem=0x46de30, uBytes=0x38, uFlags=0x2) returned 0x455b90
	[0234.459] GetCurrentThread () returned 0xfffffffffffffffe
	[0234.459] GetCurrentThreadId () returned 0x7bc
	[0234.459] FindResourceW (hModule=0x0, lpName=0xd0a, lpType=0x6) returned 0x0
	[0234.459] lstrlenW (lpString="") returned 0
	[0234.460] malloc (_Size=0x2e) returned 0x4de620
	[0234.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de62c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.460] malloc (_Size=0x2e) returned 0x4de660
	[0234.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de66c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.460] malloc (_Size=0x2e) returned 0x4de6a0
	[0234.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de6ac, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.460] malloc (_Size=0x2e) returned 0x4de6e0
	[0234.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de6ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.460] malloc (_Size=0x2e) returned 0x4de720
	[0234.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de72c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.460] malloc (_Size=0x2e) returned 0x4de760
	[0234.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de76c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.460] malloc (_Size=0x2e) returned 0x4de7a0
	[0234.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de7ac, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.460] malloc (_Size=0x2e) returned 0x4de7e0
	[0234.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de7ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.460] malloc (_Size=0x2e) returned 0x4de820
	[0234.460] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de82c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.460] malloc (_Size=0x2e) returned 0x4de860
	[0234.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de86c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.461] malloc (_Size=0x2e) returned 0x4de8a0
	[0234.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de8ac, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.461] malloc (_Size=0x2e) returned 0x4de8e0
	[0234.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de8ec, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.461] malloc (_Size=0x2e) returned 0x4de920
	[0234.461] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef4089390, cbMultiByte=-1, lpWideCharStr=0x4de92c, cchWideChar=17 | out: lpWideCharStr="MSG_UPDATESTATUS") returned 17
	[0234.461] malloc (_Size=0x80) returned 0x4df6c0
	[0234.461] SetErrorMode (uMode=0x0) returned 0x8001
	[0234.461] SetErrorMode (uMode=0x8001) returned 0x0
	[0234.461] GetModuleFileNameW (in: hModule=0x7fef4060000, lpFilename=0x21c5f0, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\dmdskmgr.dll" (normalized: "c:\\windows\\system32\\dmdskmgr.dll")) returned 0x20
	[0234.461] wcscpy_s (in: _Destination=0x21c800, _SizeInWords=0x104, _Source="dmdskmgr" | out: _Destination="dmdskmgr") returned 0x0
	[0234.462] FindResourceW (hModule=0x7fef4060000, lpName=0xe01, lpType=0x6) returned 0x0
	[0234.462] FindResourceW (hModule=0x7fef83a0000, lpName=0xe01, lpType=0x6) returned 0x1209b0
	[0234.462] LoadStringW (in: hInstance=0x7fef83a0000, uID=0xe000, lpBuffer=0x21ca10, cchBufferMax=256 | out: lpBuffer="") returned 0x0
	[0234.462] wcscpy_s (in: _Destination=0x21c628, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0
	[0234.462] wcscat_s (in: _Destination="dmdskmgr", _SizeInWords=0x104, _Source=".INI" | out: _Destination="dmdskmgr.INI") returned 0x0
	[0234.463] free (_Block=0x0) 
	[0234.463] free (_Block=0x63b0c0) 
	[0234.468] malloc (_Size=0x80) returned 0x4df750
	[0234.469] GetLastError () returned 0x0
	[0234.469] SetLastError (dwErrCode=0x0) 
	[0234.473] GetLastError () returned 0x0
	[0234.473] SetLastError (dwErrCode=0x0) 
	[0234.473] malloc (_Size=0x68) returned 0x63cbc0
	[0235.311] malloc (_Size=0x48) returned 0x63b940
	[0235.312] malloc (_Size=0x10) returned 0x542f30
	[0235.324] malloc (_Size=0x60) returned 0x63cbc0
	[0235.325] malloc (_Size=0x2a) returned 0x4de460
	[0235.325] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef7fd3d48, cbMultiByte=-1, lpWideCharStr=0x4de46c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0235.325] free (_Block=0x4de460) 
	[0235.327] malloc (_Size=0x80) returned 0x4df7e0
	[0235.327] malloc (_Size=0x38) returned 0x4de4a0
	[0235.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d578, cbMultiByte=-1, lpWideCharStr=0x4de4ac, cchWideChar=22 | out: lpWideCharStr="Microsoft Corporation") returned 22
	[0235.327] malloc (_Size=0x2a) returned 0x4de460
	[0235.327] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d590, cbMultiByte=-1, lpWideCharStr=0x4de46c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0235.328] free (_Block=0x4de460) 
	[0235.328] free (_Block=0x4de4a0) 
	[0235.329] malloc (_Size=0x80) returned 0x4df7e0
	[0235.329] malloc (_Size=0x38) returned 0x4de460
	[0235.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d578, cbMultiByte=-1, lpWideCharStr=0x4de46c, cchWideChar=22 | out: lpWideCharStr="Microsoft Corporation") returned 22
	[0235.329] malloc (_Size=0x2a) returned 0x4dea60
	[0235.329] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7fef685d590, cbMultiByte=-1, lpWideCharStr=0x4dea6c, cchWideChar=15 | out: lpWideCharStr="6.1.7600.16385") returned 15
	[0235.330] free (_Block=0x4dea60) 
	[0235.330] free (_Block=0x4de460) 
	[0235.337] GetLastError () returned 0x36b7
	[0235.337] SetLastError (dwErrCode=0x36b7) 
	[0235.337] GetLastError () returned 0x0
	[0235.337] SetLastError (dwErrCode=0x0) 
	[0235.337] malloc (_Size=0x68) returned 0x63cbc0
	[0235.610] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0235.611] LocalAlloc (uFlags=0x40, uBytes=0x8) returned 0x45cca0
	[0235.611] malloc (_Size=0x38) returned 0x4de120
	[0235.611] malloc (_Size=0x28) returned 0x63b300
	[0235.611] lstrlenW (lpString="Recent File List") returned 16
	[0235.611] malloc (_Size=0x2e) returned 0x4de160
	[0235.611] lstrlenW (lpString="File%d") returned 6
	[0235.611] malloc (_Size=0x1a) returned 0x63b2d0
	[0235.611] malloc (_Size=0x20) returned 0x63b360
	[0235.611] swprintf_s (in: _Dst=0x63b360, _SizeInWords=0x10, _Format="File%d" | out: _Dst="File1") returned 5
	[0235.611] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0x21d290 | out: phkResult=0x21d290*=0x24c) returned 0x0
	[0235.611] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21d298, lpdwDisposition=0x21d288 | out: phkResult=0x21d298*=0x250, lpdwDisposition=0x21d288*=0x2) returned 0x0
	[0235.611] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21d260, lpdwDisposition=0x21d288 | out: phkResult=0x21d260*=0x258, lpdwDisposition=0x21d288*=0x2) returned 0x0
	[0235.611] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.611] RegCloseKey (hKey=0x250) returned 0x0
	[0235.611] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Recent File List", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21d2f8, lpdwDisposition=0x21d2f0 | out: phkResult=0x21d2f8*=0x250, lpdwDisposition=0x21d2f0*=0x2) returned 0x0
	[0235.612] RegCloseKey (hKey=0x258) returned 0x0
	[0235.612] RegQueryValueExW (in: hKey=0x250, lpValueName="File1", lpReserved=0x0, lpType=0x21d31c, lpData=0x0, lpcbData=0x21d318*=0xb8f4250 | out: lpType=0x21d31c*=0x1, lpData=0x0, lpcbData=0x21d318*=0x42) returned 0x0
	[0235.612] malloc (_Size=0x50) returned 0x541fd0
	[0235.612] RegQueryValueExW (in: hKey=0x250, lpValueName="File1", lpReserved=0x0, lpType=0x21d31c, lpData=0x541fdc, lpcbData=0x21d318*=0x42 | out: lpType=0x21d31c*=0x1, lpData="C:\\Windows\\system32\\compmgmt.msc", lpcbData=0x21d318*=0x42) returned 0x0
	[0235.612] RegCloseKey (hKey=0x250) returned 0x0
	[0235.612] swprintf_s (in: _Dst=0x63b360, _SizeInWords=0x10, _Format="File%d" | out: _Dst="File2") returned 5
	[0235.612] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0x21d290 | out: phkResult=0x21d290*=0x250) returned 0x0
	[0235.612] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21d298, lpdwDisposition=0x21d288 | out: phkResult=0x21d298*=0x258, lpdwDisposition=0x21d288*=0x2) returned 0x0
	[0235.612] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21d260, lpdwDisposition=0x21d288 | out: phkResult=0x21d260*=0x24c, lpdwDisposition=0x21d288*=0x2) returned 0x0
	[0235.612] RegCloseKey (hKey=0x250) returned 0x0
	[0235.612] RegCloseKey (hKey=0x258) returned 0x0
	[0235.612] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Recent File List", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21d2f8, lpdwDisposition=0x21d2f0 | out: phkResult=0x21d2f8*=0x258, lpdwDisposition=0x21d2f0*=0x2) returned 0x0
	[0235.612] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.612] RegQueryValueExW (in: hKey=0x258, lpValueName="File2", lpReserved=0x0, lpType=0x21d31c, lpData=0x0, lpcbData=0x21d318*=0x42 | out: lpType=0x21d31c*=0x0, lpData=0x0, lpcbData=0x21d318*=0x0) returned 0x2
	[0235.612] RegCloseKey (hKey=0x258) returned 0x0
	[0235.612] lstrlenW (lpString="") returned 0
	[0235.612] swprintf_s (in: _Dst=0x63b360, _SizeInWords=0x10, _Format="File%d" | out: _Dst="File3") returned 5
	[0235.612] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0x21d290 | out: phkResult=0x21d290*=0x258) returned 0x0
	[0235.612] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21d298, lpdwDisposition=0x21d288 | out: phkResult=0x21d298*=0x24c, lpdwDisposition=0x21d288*=0x2) returned 0x0
	[0235.612] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21d260, lpdwDisposition=0x21d288 | out: phkResult=0x21d260*=0x250, lpdwDisposition=0x21d288*=0x2) returned 0x0
	[0235.612] RegCloseKey (hKey=0x258) returned 0x0
	[0235.612] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.613] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Recent File List", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x7fe0002001f, lpSecurityAttributes=0x0, phkResult=0x21d2f8, lpdwDisposition=0x21d2f0 | out: phkResult=0x21d2f8*=0x24c, lpdwDisposition=0x21d2f0*=0x2) returned 0x0
	[0235.613] RegCloseKey (hKey=0x250) returned 0x0
	[0235.613] RegQueryValueExW (in: hKey=0x24c, lpValueName="File3", lpReserved=0x0, lpType=0x21d31c, lpData=0x0, lpcbData=0x21d318*=0x0 | out: lpType=0x21d31c*=0x0, lpData=0x0, lpcbData=0x21d318*=0x0) returned 0x2
	[0235.613] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.613] lstrlenW (lpString="") returned 0
	[0235.613] swprintf_s (in: _Dst=0x63b360, _SizeInWords=0x10, _Format="File%d" | out: _Dst="File4") returned 5
	[0235.613] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0x21d290 | out: phkResult=0x21d290*=0x24c) returned 0x0
	[0235.613] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21d298, lpdwDisposition=0x21d288 | out: phkResult=0x21d298*=0x250, lpdwDisposition=0x21d288*=0x2) returned 0x0
	[0235.613] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21d260, lpdwDisposition=0x21d288 | out: phkResult=0x21d260*=0x258, lpdwDisposition=0x21d288*=0x2) returned 0x0
	[0235.613] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.613] RegCloseKey (hKey=0x250) returned 0x0
	[0235.613] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Recent File List", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x7fe0002001f, lpSecurityAttributes=0x0, phkResult=0x21d2f8, lpdwDisposition=0x21d2f0 | out: phkResult=0x21d2f8*=0x250, lpdwDisposition=0x21d2f0*=0x2) returned 0x0
	[0235.613] RegCloseKey (hKey=0x258) returned 0x0
	[0235.613] RegQueryValueExW (in: hKey=0x250, lpValueName="File4", lpReserved=0x0, lpType=0x21d31c, lpData=0x0, lpcbData=0x21d318*=0x0 | out: lpType=0x21d31c*=0x0, lpData=0x0, lpcbData=0x21d318*=0x0) returned 0x2
	[0235.613] RegCloseKey (hKey=0x250) returned 0x0
	[0235.613] lstrlenW (lpString="") returned 0
	[0235.613] free (_Block=0x63b360) 
	[0235.613] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="software", ulOptions=0x0, samDesired=0x2001f, phkResult=0x21f330 | out: phkResult=0x21f330*=0x250) returned 0x0
	[0235.613] RegCreateKeyExW (in: hKey=0x250, lpSubKey="Microsoft", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21f338, lpdwDisposition=0x21f328 | out: phkResult=0x21f338*=0x258, lpdwDisposition=0x21f328*=0x2) returned 0x0
	[0235.613] RegCreateKeyExW (in: hKey=0x258, lpSubKey="Microsoft Management Console", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21f300, lpdwDisposition=0x21f328 | out: phkResult=0x21f300*=0x24c, lpdwDisposition=0x21f328*=0x2) returned 0x0
	[0235.613] RegCloseKey (hKey=0x250) returned 0x0
	[0235.614] RegCloseKey (hKey=0x258) returned 0x0
	[0235.614] RegCreateKeyExW (in: hKey=0x24c, lpSubKey="Settings", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x21f398, lpdwDisposition=0x21f390 | out: phkResult=0x21f398*=0x258, lpdwDisposition=0x21f390*=0x2) returned 0x0
	[0235.614] RegCloseKey (hKey=0x24c) returned 0x0
	[0235.614] RegQueryValueExW (in: hKey=0x258, lpValueName="PreviewPages", lpReserved=0x0, lpType=0x21f3b4, lpData=0x21f3b0, lpcbData=0x21f3d0*=0x4 | out: lpType=0x21f3b4*=0x0, lpData=0x21f3b0*=0xa8, lpcbData=0x21f3d0*=0x4) returned 0x2
	[0235.614] RegCloseKey (hKey=0x258) returned 0x0
	[0235.614] FindResourceW (hModule=0xff6d0000, lpName=0x9, lpType=0x6) returned 0xd07e8
	[0235.614] LoadStringW (in: hInstance=0xff6d0000, uID=0x81, lpBuffer=0x21f130, cchBufferMax=256 | out: lpBuffer="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 0x6a
	[0235.614] lstrlenW (lpString="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 106
	[0235.614] malloc (_Size=0xe2) returned 0x4ddfd0
	[0235.614] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0x4) returned 0xd06f8
	[0235.614] LoadMenuW (hInstance=0xff6d0000, lpMenuName=0x81) returned 0x1019b
	[0235.615] LoadAcceleratorsW (hInstance=0xff6d0000, lpTableName=0x81) returned 0x80153
	[0235.615] malloc (_Size=0x100) returned 0x63e790
	[0235.615] SetRectEmpty (in: lprc=0x22e1600 | out: lprc=0x22e1600) returned 1
	[0235.616] malloc (_Size=0x18) returned 0x542f50
	[0235.616] FindResourceW (hModule=0xff6d0000, lpName=0x9, lpType=0x6) returned 0xd07e8
	[0235.616] LoadStringW (in: hInstance=0xff6d0000, uID=0x80, lpBuffer=0x21f0f0, cchBufferMax=256 | out: lpBuffer="Microsoft Management Console") returned 0x1c
	[0235.616] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0235.616] malloc (_Size=0x46) returned 0x63bd50
	[0235.616] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0235.616] malloc (_Size=0x46) returned 0x63bd00
	[0235.617] FindResourceW (hModule=0xff6d0000, lpName=0x7a02, lpType=0xe) returned 0x0
	[0235.617] FindResourceW (hModule=0x7fef8280000, lpName=0x7a02, lpType=0xe) returned 0x0
	[0235.617] FindResourceW (hModule=0x7fef83a0000, lpName=0x7a02, lpType=0xe) returned 0x0
	[0235.617] LoadIconW (hInstance=0xff6d0000, lpIconName=0x7a02) returned 0x0
	[0235.617] LoadIconW (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0235.617] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="AfxFrameOrView42u", lpWndClass=0x21f220 | out: lpWndClass=0x21f220) returned 0
	[0235.617] RegisterClassW (lpWndClass=0x21f2b0) returned 0xc156
	[0235.617] FindResourceW (hModule=0xff6d0000, lpName=0x80, lpType=0xe) returned 0xff897938
	[0235.617] LoadIconW (hInstance=0xff6d0000, lpIconName=0x80) returned 0x101a3
	[0235.618] FindResourceW (hModule=0xff6d0000, lpName=0x7a01, lpType=0xe) returned 0x0
	[0235.618] FindResourceW (hModule=0x7fef8280000, lpName=0x7a01, lpType=0xe) returned 0x0
	[0235.618] FindResourceW (hModule=0x7fef83a0000, lpName=0x7a01, lpType=0xe) returned 0x0
	[0235.618] LoadIconW (hInstance=0xff6d0000, lpIconName=0x7a01) returned 0x0
	[0235.618] LoadIconW (hInstance=0x0, lpIconName=0x7f00) returned 0x10027
	[0235.618] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="AfxMDIFrame42u", lpWndClass=0x21f080 | out: lpWndClass=0x21f080) returned 0
	[0235.618] RegisterClassW (lpWndClass=0x21f110) returned 0xc158
	[0235.619] FindResourceW (hModule=0xff6d0000, lpName=0x80, lpType=0xe) returned 0xff897938
	[0235.619] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCMainFrame", lpWndClass=0x21f140 | out: lpWndClass=0x21f140) returned 0
	[0235.619] RegisterClassW (lpWndClass=0x21f1f0) returned 0xc159
	[0235.619] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCMainFrame", lpWndClass=0x21f270 | out: lpWndClass=0x21f270) returned 1
	[0235.619] FindResourceW (hModule=0xff6d0000, lpName=0x80, lpType=0x4) returned 0xd06e8
	[0235.619] LoadMenuW (hInstance=0xff6d0000, lpMenuName=0x80) returned 0x101a5
	[0235.619] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0235.620] GetCurrentThreadId () returned 0x7bc
	[0235.620] SetWindowsHookExW (idHook=5, lpfn=0x7fef83aec30, hmod=0x0, dwThreadId=0x7bc) returned 0x101ab
	[0235.620] CreateWindowExW (dwExStyle=0x0, lpClassName="MMCMainFrame", lpWindowName="Microsoft Management Console", dwStyle=0xcf0000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x101a5, hInstance=0xff6d0000, lpParam=0x0) returned 0x3016a
	[0235.621] malloc (_Size=0x88) returned 0x4df120
	[0235.621] malloc (_Size=0x88) returned 0x4df1b0
	[0235.621] malloc (_Size=0x100) returned 0x63e8a0
	[0235.621] GetParent (hWnd=0x3016a) returned 0x0
	[0235.830] SetWindowLongPtrW (hWnd=0x3016a, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0235.830] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x3016a, lParam=0x21eb40) returned 0x0
	[0236.118] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0x0, uMsg=0x81, wParam=0x0, lParam=0x21ec20) returned 0x1
	[0236.118] GetWindowLongPtrW (hWnd=0x20160, nIndex=-4) returned 0x77bf6630
	[0236.118] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x0
	[0236.118] SetPropW (hWnd=0x20160, lpString="AfxOldWndProc423", hData=0x77bf6630) returned 1
	[0236.118] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.118] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0236.118] SetWindowLongPtrW (hWnd=0x20160, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x77bf6630
	[0236.118] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x20160, lParam=0x21eb40) returned 0x0
	[0236.119] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.119] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20160, Msg=0x81, wParam=0x0, lParam=0x21ec20) returned 0x1
	[0236.119] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.119] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20160, Msg=0x83, wParam=0x0, lParam=0x21ec90) returned 0x0
	[0236.119] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.119] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20160, Msg=0x1, wParam=0x0, lParam=0x21ec20) returned 0x0
	[0236.119] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.119] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20160, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0236.119] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.119] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20160, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0236.119] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0236.119] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20160, Msg=0x287, wParam=0x21, lParam=0x0) returned 0x0
	[0236.121] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0x0, uMsg=0x83, wParam=0x0, lParam=0x21ec90) returned 0x0
	[0236.123] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0x0, uMsg=0x93, wParam=0x0, lParam=0x21e540) returned 0x1
	[0236.124] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0x0, uMsg=0x94, wParam=0x0, lParam=0x21e4e0) returned 0x0
	[0236.140] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0x0, uMsg=0x94, wParam=0x0, lParam=0x21e4e0) returned 0x0
	[0236.140] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0x0, uMsg=0x1, wParam=0x0, lParam=0x21ebd0) returned 0x0
	[0236.140] GetMenu (hWnd=0x3016a) returned 0x101a5
	[0236.266] malloc (_Size=0x410) returned 0x5436e0
	[0236.266] malloc (_Size=0x38) returned 0x4de1a0
	[0236.266] malloc (_Size=0x70) returned 0x4e10f0
	[0236.266] GetMenuItemCount (hMenu=0x101a5) returned 2
	[0236.267] GetSubMenu (hMenu=0x101a5, nPos=0) returned 0x101a7
	[0236.267] CreateWindowExW (dwExStyle=0x200, lpClassName="mdiclient", lpWindowName=0x0, dwStyle=0x56000001, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x3016a, hMenu=0xe900, hInstance=0xff6d0000, lpParam=0x21e690) returned 0xd015c
	[0236.267] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0xd015c, lParam=0x21df80) returned 0x0
	[0236.269] GetParent (hWnd=0xd015c) returned 0x3016a
	[0236.269] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0x0, uMsg=0x210, wParam=0xffffffffe9000001, lParam=0xd015c) returned 0x0
	[0236.269] BringWindowToTop (hWnd=0xd015c) returned 1
	[0236.269] PostMessageW (hWnd=0x3016a, Msg=0x362, wParam=0xe001, lParam=0x0) returned 1
	[0236.269] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0236.269] GetClientRect (in: hWnd=0x3016a, lpRect=0x21e5f8 | out: lpRect=0x21e5f8) returned 1
	[0236.269] BeginDeferWindowPos (nNumWindows=8) returned 0x101c7
	[0236.269] GetTopWindow (hWnd=0x3016a) returned 0xd015c
	[0236.270] GetDlgCtrlID (hWnd=0xd015c) returned 59648
	[0236.270] GetWindow (hWnd=0xd015c, uCmd=0x2) returned 0x0
	[0236.270] malloc (_Size=0x2010) returned 0x543b00
	[0236.270] malloc (_Size=0x38) returned 0x4de1e0
	[0236.270] malloc (_Size=0x70) returned 0x63cbc0
	[0236.271] GetParent (hWnd=0xd015c) returned 0x3016a
	[0236.271] GetWindowLongW (hWnd=0xd015c, nIndex=-20) returned 512
	[0236.271] GetWindowLongW (hWnd=0xd015c, nIndex=-16) returned 1442840577
	[0236.271] AdjustWindowRectEx (in: lpRect=0x21e5f8, dwStyle=0x56000001, bMenu=0, dwExStyle=0x0 | out: lpRect=0x21e5f8) returned 1
	[0236.271] GetParent (hWnd=0xd015c) returned 0x3016a
	[0236.271] GetWindowRect (in: hWnd=0xd015c, lpRect=0x21e5b0 | out: lpRect=0x21e5b0) returned 1
	[0236.271] ScreenToClient (in: hWnd=0x3016a, lpPoint=0x21e5b0 | out: lpPoint=0x21e5b0) returned 1
	[0236.271] ScreenToClient (in: hWnd=0x3016a, lpPoint=0x21e5b8 | out: lpPoint=0x21e5b8) returned 1
	[0236.271] EqualRect (lprc1=0x21e5b0, lprc2=0x21e5f8) returned 0
	[0236.271] DeferWindowPos (hWinPosInfo=0x101c7, hWnd=0xd015c, hWndInsertAfter=0x0, x=0, y=0, cx=1064, cy=567, uFlags=0x14) returned 0x101c7
	[0236.271] EndDeferWindowPos (hWinPosInfo=0x101c7) returned 1
	[0236.332] GetParent (hWnd=0xd015c) returned 0x3016a
	[0236.332] SetWindowLongPtrW (hWnd=0xd015c, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77c3824c
	[0236.333] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="AfxWnd42u", lpWndClass=0x21e3b0 | out: lpWndClass=0x21e3b0) returned 0
	[0236.333] RegisterClassW (lpWndClass=0x21e440) returned 0xc15b
	[0236.333] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="SizeableRebar", lpWndClass=0x21e470 | out: lpWndClass=0x21e470) returned 0
	[0236.333] RegisterClassW (lpWndClass=0x21e500) returned 0xc15c
	[0236.334] CreateWindowExW (dwExStyle=0x0, lpClassName="SizeableRebar", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x3016a, hMenu=0x341d, hInstance=0xff6d0000, lpParam=0x0) returned 0x6001c
	[0236.334] GetParent (hWnd=0x6001c) returned 0x10012
	[0236.334] SetWindowLongPtrW (hWnd=0x6001c, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0236.334] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x6001c, lParam=0x21deb0) returned 0x0
	[0236.335] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x81, wParam=0x0, lParam=0x21df90) returned 0x1
	[0236.335] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x83, wParam=0x0, lParam=0x21e000) returned 0x0
	[0236.336] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x1, wParam=0x0, lParam=0x21df90) returned 0x0
	[0236.336] CreateWindowExW (dwExStyle=0x80, lpClassName="ReBarWindow32", lpWindowName=0x0, dwStyle=0x50802648, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x6001c, hMenu=0x1000, hInstance=0xff6d0000, lpParam=0x0) returned 0x2015e
	[0236.336] GetParent (hWnd=0x2015e) returned 0x10012
	[0236.336] SetWindowLongPtrW (hWnd=0x2015e, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6a9350
	[0236.337] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x2015e, lParam=0x21d210) returned 0x0
	[0236.337] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x81, wParam=0x0, lParam=0x21d2f0) returned 0x1
	[0236.338] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x55, wParam=0x2015e, lParam=0x3) returned 0x2
	[0236.339] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
	[0236.341] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x21c8a0) returned 0x0
	[0236.341] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x21c8a0) returned 0x0
	[0236.342] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x46, wParam=0x0, lParam=0x21c750) returned 0x0
	[0236.342] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0236.343] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x21c960) returned 0x0
	[0236.343] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x21c960) returned 0x0
	[0236.344] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x83, wParam=0x0, lParam=0x21d360) returned 0x0
	[0236.344] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x1, wParam=0x0, lParam=0x21d2f0) returned 0x0
	[0236.345] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x415, wParam=0x0, lParam=0x0) returned 0xffffffff
	[0236.345] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x413, wParam=0x0, lParam=0xf0f0f0) returned 0xffffffff
	[0236.346] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0236.346] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0236.347] GetActiveWindow () returned 0x0
	[0236.347] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x46, wParam=0x0, lParam=0x21caf0) returned 0x0
	[0236.348] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0236.348] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0236.349] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x210, wParam=0x10000001, lParam=0x2015e) returned 0x0
	[0236.349] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0236.350] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x404, wParam=0x0, lParam=0x21da48) returned 0x1
	[0236.350] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0236.351] MoveWindow (hWnd=0x2015e, X=0, Y=0, nWidth=0, nHeight=-6, bRepaint=1) returned 1
	[0236.351] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x46, wParam=0x0, lParam=0x21da90) returned 0x0
	[0236.351] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0236.352] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x210, wParam=0x341d0001, lParam=0x6001c) returned 0x0
	[0236.353] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0236.353] malloc (_Size=0x100) returned 0x63eac0
	[0236.353] malloc (_Size=0x100) returned 0x63ebd0
	[0236.353] malloc (_Size=0x18) returned 0x542f30
	[0236.353] malloc (_Size=0x20) returned 0x63b360
	[0236.354] CreateWindowExW (dwExStyle=0x84, lpClassName="ToolbarWindow32", lpWindowName=0x0, dwStyle=0x56001844, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x6001c, hMenu=0x1001, hInstance=0xff6d0000, lpParam=0x0) returned 0x30126
	[0236.354] GetParent (hWnd=0x30126) returned 0x10012
	[0236.354] SetWindowLongPtrW (hWnd=0x30126, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6802fc
	[0236.354] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x30126, lParam=0x21dde0) returned 0x0
	[0236.531] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x81, wParam=0x0, lParam=0x21dec0) returned 0x1
	[0236.532] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x55, wParam=0x30126, lParam=0x3) returned 0x2
	[0236.532] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0
	[0236.533] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x21d910) returned 0x0
	[0236.534] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x21d910) returned 0x0
	[0236.535] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x83, wParam=0x0, lParam=0x21df30) returned 0x0
	[0236.567] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x1, wParam=0x0, lParam=0x21dec0) returned 0x0
	[0236.567] SendMessageW (hWnd=0x30126, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0236.568] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0236.853] malloc (_Size=0x70) returned 0x541830
	[0236.853] malloc (_Size=0x18) returned 0x542f70
	[0236.853] malloc (_Size=0x20) returned 0x63b330
	[0236.853] malloc (_Size=0x20) returned 0x63b270
	[0236.853] malloc (_Size=0x18) returned 0x542f90
	[0236.853] malloc (_Size=0x18) returned 0x542fb0
	[0236.853] malloc (_Size=0x10) returned 0x542fd0
	[0236.853] malloc (_Size=0x20) returned 0x63b2a0
	[0237.238] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0237.238] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0237.239] GetWindowLongW (hWnd=0x30126, nIndex=-20) returned 132
	[0237.239] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0237.239] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x43c, wParam=0x1, lParam=0x0) returned 0x1
	[0237.240] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.240] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.241] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x127, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.241] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.241] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.242] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.242] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.243] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0
	[0237.243] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x415, wParam=0x0, lParam=0x21e5c0) returned 0x1
	[0237.244] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x440, wParam=0x5404, lParam=0x21e6a0) returned 0x1
	[0237.244] malloc (_Size=0x88) returned 0x4df240
	[0237.244] malloc (_Size=0x88) returned 0x4df2d0
	[0237.244] malloc (_Size=0x100) returned 0x63ef00
	[0237.245] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x30, wParam=0x90a06d4, lParam=0x0) returned 0x1
	[0237.245] GetWindowDC (hWnd=0x30126) returned 0x8010666
	[0237.245] malloc (_Size=0x88) returned 0x4df360
	[0237.245] malloc (_Size=0x88) returned 0x4df3f0
	[0237.245] malloc (_Size=0x100) returned 0x63f010
	[0237.245] SelectObject (hdc=0x8010666, h=0x90a06d4) returned 0x18a002e
	[0237.246] malloc (_Size=0x410) returned 0x63f830
	[0237.246] malloc (_Size=0x38) returned 0x4de220
	[0237.246] malloc (_Size=0x70) returned 0x5418b0
	[0237.246] SelectObject (hdc=0x8010666, h=0x18a002e) returned 0x90a06d4
	[0237.246] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x420, wParam=0x0, lParam=0x100000) returned 0x1
	[0237.247] free (_Block=0x4df3f0) 
	[0237.247] free (_Block=0x63f010) 
	[0237.247] ReleaseDC (hWnd=0x30126, hDC=0x8010666) returned 1
	[0237.247] malloc (_Size=0xb0) returned 0x63c7d0
	[0237.247] malloc (_Size=0x18) returned 0x542fd0
	[0237.247] CreateWindowExW (dwExStyle=0x0, lpClassName="AfxWnd42u", lpWindowName=0x0, dwStyle=0x4000001b, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x30126, hMenu=0x2001, hInstance=0xff6d0000, lpParam=0x0) returned 0x10180
	[0237.247] GetParent (hWnd=0x10180) returned 0x10012
	[0237.248] SetWindowLongPtrW (hWnd=0x10180, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0237.248] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10180, lParam=0x21dd70) returned 0x0
	[0237.248] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10180, Msg=0x81, wParam=0x0, lParam=0x21de50) returned 0x1
	[0237.249] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10180, Msg=0x83, wParam=0x0, lParam=0x21dec0) returned 0x0
	[0237.249] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10180, Msg=0x1, wParam=0x0, lParam=0x21de50) returned 0x0
	[0237.249] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10180, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0237.250] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10180, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0237.251] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x210, wParam=0x20010001, lParam=0x10180) returned 0x0
	[0237.251] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x40a, wParam=0xffffffffffffffff, lParam=0x21e5a0) returned 0x1
	[0237.252] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x46, wParam=0x0, lParam=0x21da80) returned 0x0
	[0237.252] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.253] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.253] GetActiveWindow () returned 0x0
	[0237.254] GetWindowLongW (hWnd=0x10180, nIndex=-16) returned 1073741851
	[0237.254] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10180, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.254] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10180, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0237.255] SetWindowPos (hWnd=0x10180, hWndInsertAfter=0x0, X=0, Y=0, cx=10, cy=10, uFlags=0x16) returned 1
	[0237.255] GetWindowLongW (hWnd=0x10180, nIndex=-16) returned 1342177307
	[0237.255] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10180, Msg=0x83, wParam=0x1, lParam=0x21e3b0) returned 0x0
	[0237.256] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10180, Msg=0x47, wParam=0x0, lParam=0x21e3e0) returned 0x0
	[0237.256] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10180, Msg=0x5, wParam=0x0, lParam=0x130039) returned 0x0
	[0237.257] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x410, wParam=0x2001, lParam=0x0) returned 0x0
	[0237.257] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x40b, wParam=0x0, lParam=0x21e4c0) returned 0x1
	[0237.258] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x46, wParam=0x0, lParam=0x21dac0) returned 0x0
	[0237.258] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.258] ShowWindow (hWnd=0x10180, nCmdShow=0) returned 1
	[0237.259] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10180, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
	[0237.259] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x40c, wParam=0x0, lParam=0x0) returned 0x1
	[0237.260] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x41c, wParam=0x0, lParam=0x21e4f0) returned 0x1
	[0237.260] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x43a, wParam=0x0, lParam=0x0) returned 0x16001c
	[0237.261] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x40a, wParam=0xffffffffffffffff, lParam=0x21e5a0) returned 0x1
	[0237.261] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
	[0237.261] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x46, wParam=0x0, lParam=0x21dc70) returned 0x0
	[0237.262] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.262] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0237.263] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.263] GetParent (hWnd=0x3016a) returned 0x0
	[0237.263] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.264] SendMessageW (hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.264] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.264] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x4e, wParam=0x1000, lParam=0x21dd00) returned 0x0
	[0237.265] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x46, wParam=0x0, lParam=0x21dc70) returned 0x0
	[0237.265] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x83, wParam=0x1, lParam=0x21dc40) returned 0x0
	[0237.266] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.266] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x47, wParam=0x0, lParam=0x21dc70) returned 0x0
	[0237.267] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x3, wParam=0x0, lParam=0x2) returned 0x0
	[0237.267] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x5, wParam=0x0, lParam=0x160000) returned 0x0
	[0237.268] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x46, wParam=0x0, lParam=0x21dc80) returned 0x0
	[0237.268] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x83, wParam=0x1, lParam=0x21dc50) returned 0x0
	[0237.269] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.269] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x47, wParam=0x0, lParam=0x21dc80) returned 0x0
	[0237.270] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x5, wParam=0x0, lParam=0x160000) returned 0x0
	[0237.270] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.270] GetActiveWindow () returned 0x0
	[0237.271] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.271] GetParent (hWnd=0x6001c) returned 0x3016a
	[0237.271] GetParent (hWnd=0x6001c) returned 0x3016a
	[0237.272] GetParent (hWnd=0x3016a) returned 0x0
	[0237.272] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x46, wParam=0x0, lParam=0x21d4b0) returned 0x0
	[0237.273] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x83, wParam=0x1, lParam=0x21d480) returned 0x0
	[0237.274] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x46, wParam=0x0, lParam=0x21d4b0) returned 0x0
	[0237.274] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x83, wParam=0x1, lParam=0x21d480) returned 0x0
	[0237.275] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x47, wParam=0x0, lParam=0x21d4b0) returned 0x0
	[0237.275] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x5, wParam=0x0, lParam=0x1c0428) returned 0x0
	[0237.275] MoveWindow (hWnd=0x2015e, X=0, Y=0, nWidth=1064, nHeight=22, bRepaint=1) returned 1
	[0237.276] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x46, wParam=0x0, lParam=0x21c850) returned 0x0
	[0237.276] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x83, wParam=0x1, lParam=0x21c820) returned 0x0
	[0237.277] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x47, wParam=0x0, lParam=0x21c850) returned 0x0
	[0237.277] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x5, wParam=0x0, lParam=0x160428) returned 0x0
	[0237.277] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.278] GetActiveWindow () returned 0x0
	[0237.279] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x47, wParam=0x0, lParam=0x21d4b0) returned 0x0
	[0237.279] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x3, wParam=0x0, lParam=0x1e0002) returned 0x0
	[0237.280] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x5, wParam=0x0, lParam=0x2170424) returned 0x0
	[0237.280] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.281] GetParent (hWnd=0x3016a) returned 0x0
	[0237.281] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.281] SendMessageW (hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.282] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.282] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x4e, wParam=0x1000, lParam=0x21dd00) returned 0x0
	[0237.283] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x46, wParam=0x0, lParam=0x21dc70) returned 0x0
	[0237.406] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x83, wParam=0x1, lParam=0x21dc40) returned 0x0
	[0237.407] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.407] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x47, wParam=0x0, lParam=0x21dc70) returned 0x0
	[0237.408] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x5, wParam=0x0, lParam=0x160426) returned 0x0
	[0237.408] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x46, wParam=0x0, lParam=0x21dc80) returned 0x0
	[0237.409] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.409] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.410] GetActiveWindow () returned 0x0
	[0237.410] malloc (_Size=0x18) returned 0x542ff0
	[0237.410] malloc (_Size=0x18) returned 0x543010
	[0237.411] CreateWindowExW (dwExStyle=0x84, lpClassName="ToolbarWindow32", lpWindowName=0x0, dwStyle=0x56000944, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x6001c, hMenu=0x1002, hInstance=0xff6d0000, lpParam=0x0) returned 0x10186
	[0237.411] GetParent (hWnd=0x10186) returned 0x10012
	[0237.411] SetWindowLongPtrW (hWnd=0x10186, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6802fc
	[0237.411] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10186, lParam=0x21dd40) returned 0x0
	[0237.412] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x81, wParam=0x0, lParam=0x21de20) returned 0x1
	[0237.412] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x55, wParam=0x10186, lParam=0x3) returned 0x2
	[0237.413] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0237.413] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x21d870) returned 0x0
	[0237.414] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x21d870) returned 0x0
	[0237.415] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x83, wParam=0x0, lParam=0x21de90) returned 0x0
	[0237.415] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x1, wParam=0x0, lParam=0x21de20) returned 0x0
	[0237.415] SendMessageW (hWnd=0x10186, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0237.416] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0237.416] malloc (_Size=0x70) returned 0x541930
	[0237.416] malloc (_Size=0x18) returned 0x543030
	[0237.416] malloc (_Size=0x20) returned 0x63b0c0
	[0237.416] malloc (_Size=0x18) returned 0x543050
	[0237.416] malloc (_Size=0x18) returned 0x543070
	[0237.416] malloc (_Size=0x10) returned 0x543090
	[0237.417] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0237.417] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0237.418] GetWindowLongW (hWnd=0x10186, nIndex=-20) returned 132
	[0237.418] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x41e, wParam=0x20, lParam=0x0) returned 0x0
	[0237.418] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x43c, wParam=0x1, lParam=0x0) returned 0x1
	[0237.419] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x2007, wParam=0x5, lParam=0x0) returned 0x6
	[0237.419] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x40c, wParam=0x0, lParam=0x0) returned 0x2
	[0237.420] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x41c, wParam=0x0, lParam=0x21e4f0) returned 0x1
	[0237.420] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x41c, wParam=0x1, lParam=0x21e4f0) returned 0x1
	[0237.421] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x43a, wParam=0x0, lParam=0x0) returned 0x160017
	[0237.422] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x40a, wParam=0xffffffffffffffff, lParam=0x21e5a0) returned 0x1
	[0237.422] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
	[0237.423] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x46, wParam=0x0, lParam=0x21dc70) returned 0x0
	[0237.424] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.424] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0237.425] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.425] GetParent (hWnd=0x3016a) returned 0x0
	[0237.425] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.426] SendMessageW (hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.426] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.427] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x4e, wParam=0x1000, lParam=0x21dd00) returned 0x0
	[0237.427] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.427] GetParent (hWnd=0x3016a) returned 0x0
	[0237.428] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.428] SendMessageW (hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.428] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.429] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x4e, wParam=0x1000, lParam=0x21dd00) returned 0x0
	[0237.429] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x46, wParam=0x0, lParam=0x21dc70) returned 0x0
	[0237.430] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x46, wParam=0x0, lParam=0x21dc70) returned 0x0
	[0237.430] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x83, wParam=0x1, lParam=0x21dc40) returned 0x0
	[0237.431] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.432] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x47, wParam=0x0, lParam=0x21dc70) returned 0x0
	[0237.432] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x3, wParam=0x0, lParam=0x180002) returned 0x0
	[0237.432] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x5, wParam=0x0, lParam=0x160426) returned 0x0
	[0237.433] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x46, wParam=0x0, lParam=0x21dc80) returned 0x0
	[0237.433] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x83, wParam=0x1, lParam=0x21dc50) returned 0x0
	[0237.434] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.434] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x47, wParam=0x0, lParam=0x21dc80) returned 0x0
	[0237.435] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x5, wParam=0x0, lParam=0x2e0428) returned 0x0
	[0237.435] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.436] GetActiveWindow () returned 0x0
	[0237.436] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.437] GetParent (hWnd=0x6001c) returned 0x3016a
	[0237.437] GetParent (hWnd=0x6001c) returned 0x3016a
	[0237.437] GetParent (hWnd=0x3016a) returned 0x0
	[0237.437] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x46, wParam=0x0, lParam=0x21d4b0) returned 0x0
	[0237.438] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x83, wParam=0x1, lParam=0x21d480) returned 0x0
	[0237.438] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x46, wParam=0x0, lParam=0x21d4b0) returned 0x0
	[0237.464] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x83, wParam=0x1, lParam=0x21d480) returned 0x0
	[0237.611] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x47, wParam=0x0, lParam=0x21d4b0) returned 0x0
	[0237.612] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x5, wParam=0x0, lParam=0x340428) returned 0x0
	[0237.612] MoveWindow (hWnd=0x2015e, X=0, Y=0, nWidth=1064, nHeight=46, bRepaint=1) returned 1
	[0237.612] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x46, wParam=0x0, lParam=0x21c850) returned 0x0
	[0237.613] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x47, wParam=0x0, lParam=0x21d4b0) returned 0x0
	[0237.613] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x3, wParam=0x0, lParam=0x360002) returned 0x0
	[0237.614] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x5, wParam=0x0, lParam=0x1ff0424) returned 0x0
	[0237.614] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.615] GetParent (hWnd=0x3016a) returned 0x0
	[0237.615] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.616] SendMessageW (hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.616] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.617] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x4e, wParam=0x1000, lParam=0x21dd00) returned 0x0
	[0237.617] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.618] GetParent (hWnd=0x3016a) returned 0x0
	[0237.618] GetDlgCtrlID (hWnd=0x2015e) returned 4096
	[0237.618] SendMessageW (hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.619] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0237.619] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x4e, wParam=0x1000, lParam=0x21dd00) returned 0x0
	[0237.620] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x46, wParam=0x0, lParam=0x21dc70) returned 0x0
	[0237.620] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x46, wParam=0x0, lParam=0x21dc70) returned 0x0
	[0237.621] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.621] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x46, wParam=0x0, lParam=0x21dc80) returned 0x0
	[0237.622] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0237.622] malloc (_Size=0x60) returned 0x63ff30
	[0237.622] malloc (_Size=0x28) returned 0x63b390
	[0237.622] malloc (_Size=0x38) returned 0x4de260
	[0237.622] malloc (_Size=0x28) returned 0x63b3c0
	[0237.622] malloc (_Size=0x38) returned 0x4de2a0
	[0237.622] malloc (_Size=0x60) returned 0x63c890
	[0237.622] malloc (_Size=0x28) returned 0x63b3f0
	[0237.623] malloc (_Size=0x38) returned 0x4de3a0
	[0237.623] malloc (_Size=0x28) returned 0x63b390
	[0237.623] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x21e7c8) returned 0x0
	[0237.623] GetMenu (hWnd=0x3016a) returned 0x101a5
	[0237.623] FindResourceW (hModule=0xff6d0000, lpName=0x80, lpType=0x9) returned 0xd0808
	[0237.624] LoadAcceleratorsW (hInstance=0xff6d0000, lpTableName=0x80) returned 0xe0179
	[0237.624] GetTopWindow (hWnd=0x3016a) returned 0xd015c
	[0237.624] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.624] GetTopWindow (hWnd=0xd015c) returned 0x0
	[0237.624] GetWindow (hWnd=0xd015c, uCmd=0x2) returned 0x6001c
	[0237.624] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.624] GetTopWindow (hWnd=0x6001c) returned 0x2015e
	[0237.624] GetTopWindow (hWnd=0x6001c) returned 0x2015e
	[0237.625] CallWindowProcW (lpPrevWndFunc=0x7fefc6a9350, hWnd=0x2015e, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.625] GetTopWindow (hWnd=0x2015e) returned 0x10186
	[0237.625] GetTopWindow (hWnd=0x2015e) returned 0x10186
	[0237.625] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x10186, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.625] GetTopWindow (hWnd=0x10186) returned 0x0
	[0237.625] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x30126
	[0237.626] CallWindowProcW (lpPrevWndFunc=0x7fefc6802fc, hWnd=0x30126, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.626] GetTopWindow (hWnd=0x30126) returned 0x0
	[0237.626] GetWindow (hWnd=0x30126, uCmd=0x2) returned 0x10180
	[0237.626] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10180, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0
	[0237.626] GetTopWindow (hWnd=0x10180) returned 0x0
	[0237.626] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x0
	[0237.626] GetWindow (hWnd=0x2015e, uCmd=0x2) returned 0x0
	[0237.626] GetWindow (hWnd=0x6001c, uCmd=0x2) returned 0x0
	[0237.626] free (_Block=0x63bd50) 
	[0237.627] GetMenu (hWnd=0x3016a) returned 0x101a5
	[0237.627] lstrlenW (lpString="Embedding") returned 9
	[0237.627] lstrlenW (lpString="Automation") returned 10
	[0237.627] GlobalAddAtomW (lpString="mmc") returned 0xc04c
	[0237.627] GlobalAddAtomW (lpString="system") returned 0xc009
	[0237.627] wcscpy_s (in: _Destination=0x21ef90, _SizeInWords=0x104, _Source="C:\\Windows\\System32\\compmgmt.msc" | out: _Destination="C:\\Windows\\System32\\compmgmt.msc") returned 0x0
	[0237.627] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\compmgmt.msc", nBufferLength=0x104, lpBuffer=0x21ed80, lpFilePart=0x21eab0 | out: lpBuffer="C:\\Windows\\System32\\compmgmt.msc", lpFilePart=0x21eab0*="compmgmt.msc") returned 0x20
	[0237.627] malloc (_Size=0x216) returned 0x63a820
	[0237.627] wcsncpy_s (in: _Destination=0x63a82c, _SizeInWords=0x104, _Source="C:\\Windows\\System32\\compmgmt.msc", _MaxCount=0xffffffffffffffff | out: _Destination="C:\\Windows\\System32\\compmgmt.msc") returned 0x0
	[0237.627] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x21eab8, lpFileSystemFlags=0x21eaa0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x21eab8*=0xff, lpFileSystemFlags=0x21eaa0*=0x3e700ff, lpFileSystemNameBuffer=0x0) returned 1
	[0237.627] free (_Block=0x63a820) 
	[0237.627] LoadLibraryExA (lpLibFileName="SHELL32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefe0a0000
	[0237.628] GetProcAddress (hModule=0x7fefe0a0000, lpProcName="SHGetFileInfoW") returned 0x7fefe242410
	[0237.628] SHGetFileInfoW (in: pszPath="C:\\Windows\\System32\\compmgmt.msc", dwFileAttributes=0x0, psfi=0x21ea50, cbFileInfo=0x2b8, uFlags=0x800 | out: psfi=0x21ea50) returned 0x1
	[0237.926] malloc (_Size=0x16) returned 0x5430b0
	[0237.926] lstrcmpiW (lpString1=".msc", lpString2=".msc") returned 0
	[0237.926] GetSystemMetrics (nIndex=42) returned 0
	[0237.926] free (_Block=0x5430b0) 
	[0237.927] GetParent (hWnd=0xd015c) returned 0x3016a
	[0237.927] malloc (_Size=0x8) returned 0x63ffa0
	[0237.927] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0237.928] GetParent (hWnd=0x6001c) returned 0x3016a
	[0237.928] malloc (_Size=0x10) returned 0x5430b0
	[0237.928] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x6001c, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0237.928] malloc (_Size=0x230) returned 0x63a820
	[0237.928] malloc (_Size=0x18) returned 0x5430d0
	[0237.928] malloc (_Size=0x20) returned 0x63b3c0
	[0237.929] malloc (_Size=0xb8) returned 0x63aa60
	[0237.929] malloc (_Size=0x18) returned 0x5430f0
	[0237.929] malloc (_Size=0x18) returned 0x543110
	[0237.929] malloc (_Size=0x18) returned 0x543130
	[0237.929] malloc (_Size=0xb0) returned 0x63ab20
	[0237.929] malloc (_Size=0x40) returned 0x63bd50
	[0237.929] malloc (_Size=0x100) returned 0x63f120
	[0237.929] malloc (_Size=0x18) returned 0x543150
	[0237.930] lstrlenW (lpString="Favorites") returned 9
	[0237.930] malloc (_Size=0x20) returned 0x63b420
	[0237.930] malloc (_Size=0x1c0) returned 0x63abe0
	[0237.930] malloc (_Size=0x68) returned 0x63c900
	[0237.930] malloc (_Size=0x20) returned 0x63b450
	[0237.930] malloc (_Size=0x20) returned 0x63b480
	[0237.930] free (_Block=0x63b420) 
	[0237.932] malloc (_Size=0x420) returned 0x5464a0
	[0237.932] SetRectEmpty (in: lprc=0x546548 | out: lprc=0x546548) returned 1
	[0237.933] malloc (_Size=0x18) returned 0x543190
	[0237.933] FindResourceW (hModule=0xff6d0000, lpName=0x9, lpType=0x6) returned 0xd07e8
	[0237.933] LoadStringW (in: hInstance=0xff6d0000, uID=0x81, lpBuffer=0x21e980, cchBufferMax=256 | out: lpBuffer="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 0x6a
	[0237.933] lstrlenW (lpString="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 106
	[0237.933] malloc (_Size=0xe2) returned 0x63adb0
	[0237.934] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0237.934] LoadIconW (hInstance=0xff6d0000, lpIconName=0x81) returned 0x101d1
	[0237.935] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0237.935] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x21e9f0 | out: lpWndClass=0x21e9f0) returned 0
	[0237.935] RegisterClassW (lpWndClass=0x21ea80) returned 0xc15d
	[0237.935] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x21eb00 | out: lpWndClass=0x21eb00) returned 1
	[0237.936] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0237.936] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x21e9e0 | out: lpWndClass=0x21e9e0) returned 1
	[0237.936] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x220, wParam=0x0, lParam=0x21eb60) returned 0x1018c
	[0237.937] GetParent (hWnd=0x1018c) returned 0x10012
	[0237.937] SetWindowLongPtrW (hWnd=0x1018c, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0237.937] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x1018c, lParam=0x21de90) returned 0x0
	[0237.939] DefMDIChildProcW (hWnd=0x1018c, uMsg=0x81, wParam=0x0, lParam=0x21df70) returned 0x1
	[0237.939] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0237.939] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x21d9c0 | out: lpWndClass=0x21d9c0) returned 1
	[0237.939] SetWindowLongW (hWnd=0x1018c, nIndex=-20, dwNewLong=320) returned 320
	[0237.940] DefMDIChildProcW (hWnd=0x1018c, uMsg=0x7c, wParam=0xffffffffffffffec, lParam=0x21da60) returned 0x0
	[0237.940] DefMDIChildProcW (hWnd=0x1018c, uMsg=0x7d, wParam=0xffffffffffffffec, lParam=0x21da60) returned 0x0
	[0237.941] DefMDIChildProcW (hWnd=0x1018c, uMsg=0xd, wParam=0x104, lParam=0x20f5fa0) returned 0x0
	[0237.942] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x21d2d8) returned 0x0
	[0237.943] DefMDIChildProcW (hWnd=0x1018c, uMsg=0x83, wParam=0x0, lParam=0x21dfe0) returned 0x0
	[0237.944] DefMDIChildProcW (hWnd=0x1018c, uMsg=0x1, wParam=0x0, lParam=0x21df60) returned 0x0
	[0237.944] malloc (_Size=0x5a0) returned 0x5468d0
	[0237.944] malloc (_Size=0x18) returned 0x5431b0
	[0237.944] malloc (_Size=0x20) returned 0x63b420
	[0237.944] malloc (_Size=0x18) returned 0x5431d0
	[0237.944] malloc (_Size=0x18) returned 0x5431f0
	[0237.944] malloc (_Size=0x18) returned 0x543210
	[0237.944] malloc (_Size=0x18) returned 0x543230
	[0237.944] malloc (_Size=0x18) returned 0x543250
	[0237.944] malloc (_Size=0x18) returned 0x543270
	[0237.945] malloc (_Size=0x120) returned 0x63aea0
	[0237.945] malloc (_Size=0x18) returned 0x543290
	[0237.945] malloc (_Size=0x70) returned 0x546e80
	[0237.945] malloc (_Size=0x20) returned 0x63b450
	[0237.945] malloc (_Size=0x58) returned 0x542030
	[0237.945] malloc (_Size=0xe0) returned 0x546f00
	[0237.946] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCViewWindow", lpWndClass=0x21d760 | out: lpWndClass=0x21d760) returned 0
	[0237.946] RegisterClassW (lpWndClass=0x21d7f0) returned 0xc15e
	[0237.946] CreateWindowExW (dwExStyle=0x0, lpClassName="MMCViewWindow", lpWindowName=0x0, dwStyle=0x52000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1018c, hMenu=0xe900, hInstance=0xff6d0000, lpParam=0x21ec60) returned 0x1018e
	[0237.947] GetParent (hWnd=0x1018e) returned 0x10012
	[0237.947] SetWindowLongPtrW (hWnd=0x1018e, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0237.947] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x1018e, lParam=0x21d1a0) returned 0x0
	[0237.947] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x81, wParam=0x0, lParam=0x21d280) returned 0x1
	[0237.948] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x83, wParam=0x0, lParam=0x21d2f0) returned 0x0
	[0237.949] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x1, wParam=0x0, lParam=0x21d280) returned 0x0
	[0237.949] malloc (_Size=0x100) returned 0x63f340
	[0237.949] IsWindowVisible (hWnd=0x1018e) returned 0
	[0237.949] IsWindowVisible (hWnd=0x1018e) returned 0
	[0237.949] IsWindowVisible (hWnd=0x1018e) returned 0
	[0237.949] GetParent (hWnd=0x1018e) returned 0x1018c
	[0237.949] GetParent (hWnd=0x1018c) returned 0xd015c
	[0237.950] CreateWindowExW (dwExStyle=0x20000, lpClassName="STATIC", lpWindowName=0x0, dwStyle=0x4400428d, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1018e, hMenu=0x31f7, hInstance=0xff6d0000, lpParam=0x0) returned 0x10198
	[0238.068] GetParent (hWnd=0x10198) returned 0x10012
	[0238.068] SetWindowLongPtrW (hWnd=0x10198, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6d61b4
	[0238.068] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10198, lParam=0x21c390) returned 0x0
	[0238.068] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x81, wParam=0x0, lParam=0x21c470) returned 0x1
	[0238.069] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x83, wParam=0x0, lParam=0x21c4d0) returned 0x0
	[0238.070] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x1, wParam=0x0, lParam=0x21c470) returned 0x0
	[0238.070] GetWindowDC (hWnd=0x10198) returned 0x8010666
	[0238.070] malloc (_Size=0x88) returned 0x4df3f0
	[0238.070] malloc (_Size=0x100) returned 0x547020
	[0238.071] SelectObject (hdc=0x8010666, h=0x60a0726) returned 0x18a002e
	[0238.197] GetWindowLongW (hWnd=0x10198, nIndex=-20) returned 131072
	[0238.197] GetWindowLongW (hWnd=0x10198, nIndex=-16) returned 1140867725
	[0238.197] SelectObject (hdc=0x8010666, h=0x18a002e) returned 0x60a0726
	[0238.197] free (_Block=0x4df3f0) 
	[0238.197] free (_Block=0x547020) 
	[0238.198] ReleaseDC (hWnd=0x10198, hDC=0x8010666) returned 1
	[0238.198] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0238.294] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x3, wParam=0x0, lParam=0x10001) returned 0x0
	[0238.295] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x210, wParam=0x31f70001, lParam=0x10198) returned 0x0
	[0238.296] lstrlenW (lpString="SysTreeView32") returned 13
	[0238.296] malloc (_Size=0x28) returned 0x63b4b0
	[0238.296] malloc (_Size=0x20) returned 0x63b4e0
	[0238.296] malloc (_Size=0x18) returned 0x5432b0
	[0238.296] malloc (_Size=0x18) returned 0x5432d0
	[0238.296] malloc (_Size=0x30) returned 0x4de9a0
	[0238.296] malloc (_Size=0x30) returned 0x4de960
	[0238.296] malloc (_Size=0x28) returned 0x63b510
	[0238.296] malloc (_Size=0x30) returned 0x4dea20
	[0238.296] malloc (_Size=0x18) returned 0x5432f0
	[0238.296] malloc (_Size=0x20) returned 0x63b540
	[0238.296] malloc (_Size=0x18) returned 0x543310
	[0238.297] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.297] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.297] LoadLibraryExA (lpLibFileName="COMCTL32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefc630000
	[0238.298] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.298] InitCommonControlsEx (picce=0x21c8d8) returned 1
	[0238.298] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.298] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.299] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.299] InitCommonControlsEx (picce=0x21c8d8) returned 1
	[0238.299] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.299] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.299] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.299] InitCommonControlsEx (picce=0x21c8d8) returned 1
	[0238.299] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.299] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.300] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.300] InitCommonControlsEx (picce=0x21c8d8) returned 1
	[0238.300] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.300] LoadLibraryA (lpLibFileName="COMCTL32.DLL") returned 0x7fefc630000
	[0238.300] GetProcAddress (hModule=0x7fefc630000, lpProcName="InitCommonControlsEx") returned 0x7fefc657ef0
	[0238.300] InitCommonControlsEx (picce=0x21c8d8) returned 1
	[0238.300] FreeLibrary (hLibModule=0x7fefc630000) returned 1
	[0238.300] CreateWindowExW (dwExStyle=0x200, lpClassName="SysTreeView32", lpWindowName=0x0, dwStyle=0x52000029, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1018e, hMenu=0x31f1, hInstance=0xff6d0000, lpParam=0x21cb38) returned 0x101a8
	[0238.301] malloc (_Size=0x100) returned 0x547020
	[0238.301] GetParent (hWnd=0x101a8) returned 0x10012
	[0238.301] SetWindowLongPtrW (hWnd=0x101a8, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6c7c18
	[0238.301] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x101a8, lParam=0x21c250) returned 0x0
	[0238.302] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x81, wParam=0x0, lParam=0x21c330) returned 0x1
	[0238.302] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x83, wParam=0x0, lParam=0x21c3a0) returned 0x0
	[0238.303] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x1, wParam=0x0, lParam=0x21c330) returned 0x0
	[0238.303] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x55, wParam=0x101a8, lParam=0x3) returned 0x2
	[0238.304] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0238.305] GetDlgCtrlID (hWnd=0x101a8) returned 12785
	[0238.306] GetDlgCtrlID (hWnd=0x101a8) returned 12785
	[0238.309] GetDlgCtrlID (hWnd=0x101a8) returned 12785
	[0238.310] GetDlgCtrlID (hWnd=0x101a8) returned 12785
	[0238.311] GetDlgCtrlID (hWnd=0x101a8) returned 12785
	[0238.311] GetDlgCtrlID (hWnd=0x101a8) returned 12785
	[0238.312] GetWindowLongPtrW (hWnd=0x101aa, nIndex=-4) returned 0x7fefc6af450
	[0238.312] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x0
	[0238.312] SetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423", hData=0x7fefc6af450) returned 1
	[0238.312] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.312] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0238.312] SetWindowLongPtrW (hWnd=0x101aa, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7fefc6af450
	[0238.312] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x101aa, lParam=0x21b2e0) returned 0x0
	[0238.312] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.312] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x81, wParam=0x0, lParam=0x21b3c0) returned 0x1
	[0238.321] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.321] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x83, wParam=0x0, lParam=0x21b440) returned 0x0
	[0238.321] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.321] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x1, wParam=0x0, lParam=0x21b3c0) returned 0x0
	[0238.322] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x55, wParam=0x101aa, lParam=0x3) returned 0x2
	[0238.323] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0238.323] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.323] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x21aeb0) returned 0x0
	[0238.323] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.323] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x21aeb0) returned 0x0
	[0238.324] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.324] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0238.324] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.324] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0238.324] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.324] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x432, wParam=0x0, lParam=0x21ba80) returned 0x1
	[0238.324] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x55, wParam=0x101aa, lParam=0x3) returned 0x2
	[0238.325] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.325] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x30, wParam=0x30a0866, lParam=0x1) returned 0x1
	[0238.325] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0238.325] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x403, wParam=0x3, lParam=0x1f4) returned 0x0
	[0238.325] IsWindowVisible (hWnd=0x1018e) returned 0
	[0238.325] IsWindowVisible (hWnd=0x101a8) returned 0
	[0238.325] IsWindowVisible (hWnd=0x1018e) returned 0
	[0238.325] IsWindowVisible (hWnd=0x101a8) returned 0
	[0238.325] IsWindowVisible (hWnd=0x1018e) returned 0
	[0238.325] IsWindowVisible (hWnd=0x101a8) returned 0
	[0238.326] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x31a, wParam=0xffffffffffffffff, lParam=0x80000001) returned 0x0
	[0238.326] GetParent (hWnd=0x101a8) returned 0x1018e
	[0238.326] GetParent (hWnd=0x1018e) returned 0x1018c
	[0238.326] GetParent (hWnd=0x1018e) returned 0x1018c
	[0238.327] GetParent (hWnd=0x1018c) returned 0xd015c
	[0238.327] GetDlgItem (hDlg=0x1018c, nIDDlgItem=59648) returned 0x1018e
	[0238.327] GetParent (hWnd=0x1018e) returned 0x1018c
	[0239.499] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x1109, wParam=0x0, lParam=0x4901d0) returned 0x0
	[0239.500] GetDlgCtrlID (hWnd=0x101a8) returned 12785
	[0239.501] GetDlgCtrlID (hWnd=0x101a8) returned 12785
	[0239.501] malloc (_Size=0x60) returned 0x5492d0
	[0239.501] malloc (_Size=0x18) returned 0x543330
	[0239.502] GetWindowLongPtrW (hWnd=0x20188, nIndex=-4) returned 0x7feffb750c0
	[0239.502] GetPropW (hWnd=0x20188, lpString="AfxOldWndProc423") returned 0x0
	[0239.502] SetPropW (hWnd=0x20188, lpString="AfxOldWndProc423", hData=0x7feffb750c0) returned 1
	[0239.502] GetPropW (hWnd=0x20188, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.502] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0239.502] SetWindowLongPtrW (hWnd=0x20188, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7feffb750c0
	[0239.502] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x20188, lParam=0x21b620) returned 0x0
	[0239.502] GetPropW (hWnd=0x20188, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.502] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x20188, Msg=0x81, wParam=0x0, lParam=0x21b700) returned 0x1
	[0239.502] GetPropW (hWnd=0x20188, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.502] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x20188, Msg=0x83, wParam=0x0, lParam=0x21b770) returned 0x0
	[0239.503] GetPropW (hWnd=0x20188, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.503] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x20188, Msg=0x1, wParam=0x0, lParam=0x21b700) returned 0x0
	[0239.503] GetPropW (hWnd=0x20188, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.503] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x20188, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0239.503] GetPropW (hWnd=0x20188, lpString="AfxOldWndProc423") returned 0x7feffb750c0
	[0239.503] CallWindowProcW (lpPrevWndFunc=0x7feffb750c0, hWnd=0x20188, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0239.503] GetLastError () returned 0x36b7
	[0239.503] SetLastError (dwErrCode=0x36b7) 
	[0239.503] DeleteObject (ho=0x105086a) returned 1
	[0239.503] GetLastError () returned 0x0
	[0239.503] SetLastError (dwErrCode=0x0) 
	[0239.504] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0239.505] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0239.505] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x210, wParam=0x31f10001, lParam=0x101a8) returned 0x0
	[0239.506] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0239.506] malloc (_Size=0x20) returned 0x63b570
	[0239.506] malloc (_Size=0x18) returned 0x543350
	[0239.506] malloc (_Size=0x20) returned 0x63b5a0
	[0239.506] malloc (_Size=0x18) returned 0x543370
	[0239.506] SetWindowPos (hWnd=0x101a8, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0239.507] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x46, wParam=0x0, lParam=0x21cad0) returned 0x0
	[0239.508] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0239.508] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x47, wParam=0x0, lParam=0x21cad0) returned 0x0
	[0239.508] malloc (_Size=0x3a0) returned 0x549530
	[0239.508] malloc (_Size=0x20) returned 0x63b5d0
	[0239.508] malloc (_Size=0x18) returned 0x543390
	[0239.509] LoadResource (hModule=0xff6d0000, hResInfo=0xff897758) returned 0xff8c7278
	[0239.509] LockResource (hResData=0xff8c7278) returned 0xff8c7278
	[0239.509] malloc (_Size=0x68) returned 0x549fe0
	[0239.509] GetSysColor (nIndex=18) returned 0x0
	[0239.509] GetSysColor (nIndex=18) returned 0x0
	[0239.509] GetSysColor (nIndex=18) returned 0x0
	[0239.509] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0239.509] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0239.509] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0239.509] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0239.509] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0239.509] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0239.509] GetSysColor (nIndex=20) returned 0xffffff
	[0239.510] GetSysColor (nIndex=20) returned 0xffffff
	[0239.510] GetSysColor (nIndex=20) returned 0xffffff
	[0239.510] GetDC (hWnd=0x0) returned 0x8010666
	[0239.510] CreateCompatibleBitmap (hdc=0x8010666, cx=16, cy=8) returned 0x2050869
	[0239.510] CreateCompatibleDC (hdc=0x8010666) returned 0x201086a
	[0239.510] SelectObject (hdc=0x201086a, h=0x2050869) returned 0x185000f
	[0239.510] StretchDIBits (hdc=0x201086a, xDest=0, yDest=0, DestWidth=16, DestHeight=8, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=8, lpBits=0xff8c72e0, lpbmi=0x549fe0, iUsage=0x0, rop=0xcc0020) returned 8
	[0239.510] SelectObject (hdc=0x201086a, h=0x185000f) returned 0x2050869
	[0239.510] DeleteDC (hdc=0x201086a) returned 1
	[0239.510] ReleaseDC (hWnd=0x0, hDC=0x8010666) returned 1
	[0239.510] free (_Block=0x549fe0) 
	[0239.510] GetProcAddress (hModule=0x7fefc630000, lpProcName="ImageList_Create") returned 0x7fefc6900fc
	[0239.510] ImageList_Create (cx=8, cy=8, flags=0xfe, cInitial=2, cGrow=2) returned 0x492d90
	[0239.511] malloc (_Size=0x88) returned 0x4df3f0
	[0239.511] malloc (_Size=0x88) returned 0x4df7e0
	[0239.511] malloc (_Size=0x100) returned 0x547240
	[0239.511] GetLastError () returned 0x0
	[0239.511] SetLastError (dwErrCode=0x0) 
	[0239.511] DeleteObject (ho=0x2050869) returned 1
	[0239.511] GetLastError () returned 0x0
	[0239.511] SetLastError (dwErrCode=0x0) 
	[0239.511] malloc (_Size=0x28) returned 0x63b600
	[0239.511] malloc (_Size=0x30) returned 0x4de460
	[0239.511] malloc (_Size=0x1f0) returned 0x54a1f0
	[0239.511] lstrlenW (lpString="SysListView32") returned 13
	[0239.512] malloc (_Size=0x28) returned 0x63b630
	[0239.512] malloc (_Size=0x18) returned 0x5433b0
	[0239.512] malloc (_Size=0x20) returned 0x63b660
	[0239.512] malloc (_Size=0x30) returned 0x4dea60
	[0239.512] CreateWindowExW (dwExStyle=0x200, lpClassName="SysListView32", lpWindowName=0x0, dwStyle=0x5600024d, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1018e, hMenu=0x31f2, hInstance=0xff6d0000, lpParam=0x21ec60) returned 0x2019a
	[0239.513] GetParent (hWnd=0x2019a) returned 0x10012
	[0239.513] SetWindowLongPtrW (hWnd=0x2019a, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6b5944
	[0239.513] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x2019a, lParam=0x21c2d0) returned 0x0
	[0239.514] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x81, wParam=0x0, lParam=0x21c3b0) returned 0x1
	[0239.515] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x83, wParam=0x0, lParam=0x21c420) returned 0x0
	[0239.516] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x1, wParam=0x0, lParam=0x21c3b0) returned 0x0
	[0239.517] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0239.518] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x2019c, lParam=0x21b150) returned 0x0
	[0239.519] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x55, wParam=0x2019c, lParam=0x3) returned 0x2
	[0239.519] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0239.520] GetParent (hWnd=0x2019c) returned 0x2019a
	[0239.520] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x210, wParam=0x1, lParam=0x2019c) returned 0x0
	[0239.521] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x2019e, lParam=0x21af60) returned 0x0
	[0239.611] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x55, wParam=0x2019e, lParam=0x3) returned 0x2
	[0239.611] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0239.612] GetParent (hWnd=0x2019e) returned 0x2019a
	[0239.612] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x210, wParam=0x1, lParam=0x2019e) returned 0x0
	[0239.612] CallNextHookEx (hhk=0x101ab, nCode=4, wParam=0x2019e, lParam=0x0) returned 0x0
	[0239.612] GetParent (hWnd=0x2019e) returned 0x2019a
	[0239.613] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x210, wParam=0x2, lParam=0x2019e) returned 0x0
	[0239.613] GetDlgCtrlID (hWnd=0x2019c) returned 0
	[0239.614] GetParent (hWnd=0x2019c) returned 0x2019a
	[0239.614] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x4e, wParam=0x0, lParam=0x21b1b0) returned 0x0
	[0239.615] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x46, wParam=0x0, lParam=0x2196a0) returned 0x0
	[0239.615] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x83, wParam=0x1, lParam=0x219670) returned 0x0
	[0239.616] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x47, wParam=0x0, lParam=0x2196a0) returned 0x0
	[0239.690] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x46, wParam=0x0, lParam=0x2196a0) returned 0x0
	[0239.691] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x83, wParam=0x1, lParam=0x219670) returned 0x0
	[0239.691] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x47, wParam=0x0, lParam=0x2196a0) returned 0x0
	[0239.693] GetWindowLongPtrW (hWnd=0x3019e, nIndex=-4) returned 0x7fefc6af450
	[0239.694] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x0
	[0239.694] SetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423", hData=0x7fefc6af450) returned 1
	[0239.694] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.694] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0239.694] SetWindowLongPtrW (hWnd=0x3019e, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7fefc6af450
	[0239.694] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x3019e, lParam=0x21b1b0) returned 0x0
	[0239.694] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.694] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x81, wParam=0x0, lParam=0x21b290) returned 0x1
	[0239.694] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.694] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x83, wParam=0x0, lParam=0x21b310) returned 0x0
	[0239.694] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.694] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x1, wParam=0x0, lParam=0x21b290) returned 0x0
	[0239.694] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.694] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x21ad80) returned 0x0
	[0239.695] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.695] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x21ad80) returned 0x0
	[0239.695] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.695] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0239.695] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.695] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0239.695] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.695] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x432, wParam=0x0, lParam=0x21b950) returned 0x1
	[0239.696] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x55, wParam=0x3019e, lParam=0x3) returned 0x2
	[0239.696] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.696] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x30, wParam=0x230a072a, lParam=0x0) returned 0x1
	[0239.696] IsWindowVisible (hWnd=0x1018e) returned 0
	[0239.696] IsWindowVisible (hWnd=0x101a8) returned 0
	[0239.696] IsWindowVisible (hWnd=0x2019a) returned 0
	[0239.696] IsWindowVisible (hWnd=0x1018e) returned 0
	[0239.696] IsWindowVisible (hWnd=0x101a8) returned 0
	[0239.696] IsWindowVisible (hWnd=0x2019a) returned 0
	[0239.696] IsWindowVisible (hWnd=0x1018e) returned 0
	[0239.696] IsWindowVisible (hWnd=0x101a8) returned 0
	[0239.696] IsWindowVisible (hWnd=0x2019a) returned 0
	[0239.696] malloc (_Size=0x400) returned 0x54a3f0
	[0239.696] GetParent (hWnd=0x2019a) returned 0x1018e
	[0239.697] GetParent (hWnd=0x1018e) returned 0x1018c
	[0239.697] GetParent (hWnd=0x1018e) returned 0x1018c
	[0239.697] GetParent (hWnd=0x1018c) returned 0xd015c
	[0239.697] GetDlgItem (hDlg=0x1018c, nIDDlgItem=59648) returned 0x1018e
	[0239.697] GetParent (hWnd=0x1018e) returned 0x1018c
	[0239.697] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x1036, wParam=0x0, lParam=0x4030) returned 0x0
	[0239.698] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.698] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x41c, wParam=0x0, lParam=0x0) returned 0x0
	[0239.698] malloc (_Size=0x60) returned 0x54a3f0
	[0239.698] malloc (_Size=0x18) returned 0x5433d0
	[0239.698] malloc (_Size=0x20) returned 0x63b690
	[0239.699] malloc (_Size=0x18) returned 0x5433f0
	[0239.699] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0239.699] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0239.699] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x434, wParam=0x0, lParam=0x21bb30) returned 0x0
	[0239.700] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x101f, wParam=0x0, lParam=0x0) returned 0x2019c
	[0239.700] GetParent (hWnd=0x2019c) returned 0x2019a
	[0239.700] SetWindowLongPtrW (hWnd=0x2019c, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6bbf00
	[0239.700] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0239.701] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0239.701] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0239.702] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x210, wParam=0x31f20001, lParam=0x2019a) returned 0x0
	[0239.703] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0239.703] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x493cf0
	[0239.703] ImageList_Create (cx=32, cy=32, flags=0x21, cInitial=20, cGrow=10) returned 0x494440
	[0239.706] GetLastError () returned 0x6
	[0239.706] SetLastError (dwErrCode=0x6) 
	[0239.706] GetLastError () returned 0x6
	[0239.706] SetLastError (dwErrCode=0x6) 
	[0239.707] GetLastError () returned 0x6
	[0239.707] SetLastError (dwErrCode=0x6) 
	[0239.707] GetLastError () returned 0x6
	[0239.707] SetLastError (dwErrCode=0x6) 
	[0239.707] malloc (_Size=0x8) returned 0x63ffa0
	[0239.707] malloc (_Size=0x150) returned 0x54a460
	[0239.707] malloc (_Size=0x8) returned 0x4de0c0
	[0239.707] malloc (_Size=0x8) returned 0x5416b0
	[0239.707] malloc (_Size=0x8) returned 0x63c970
	[0239.707] malloc (_Size=0x8) returned 0x63c990
	[0239.707] malloc (_Size=0x8) returned 0x4e1170
	[0239.707] malloc (_Size=0x8) returned 0x4e1190
	[0239.707] malloc (_Size=0x8) returned 0x63cc40
	[0239.707] malloc (_Size=0x8) returned 0x63cc60
	[0239.707] GetLastError () returned 0x6
	[0239.708] SetLastError (dwErrCode=0x6) 
	[0239.708] DeleteObject (ho=0x20508a4) returned 1
	[0239.708] GetLastError () returned 0x0
	[0239.708] SetLastError (dwErrCode=0x0) 
	[0239.708] GetLastError () returned 0x0
	[0239.708] SetLastError (dwErrCode=0x0) 
	[0239.708] DeleteObject (ho=0x20508a2) returned 1
	[0239.708] GetLastError () returned 0x0
	[0239.708] SetLastError (dwErrCode=0x0) 
	[0239.942] GetLastError () returned 0x0
	[0239.942] SetLastError (dwErrCode=0x0) 
	[0239.942] DeleteObject (ho=0x20508a0) returned 1
	[0239.943] GetLastError () returned 0x0
	[0239.943] SetLastError (dwErrCode=0x0) 
	[0239.943] GetLastError () returned 0x0
	[0239.943] SetLastError (dwErrCode=0x0) 
	[0239.943] DeleteObject (ho=0x105089e) returned 1
	[0239.943] GetLastError () returned 0x0
	[0239.943] SetLastError (dwErrCode=0x0) 
	[0239.944] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x1003, wParam=0x1, lParam=0x493cf0) returned 0x0
	[0239.944] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x201b2, lParam=0x21b9e0) returned 0x0
	[0239.946] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x55, wParam=0x201b2, lParam=0x3) returned 0x2
	[0239.946] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0239.947] GetParent (hWnd=0x201b2) returned 0x2019a
	[0239.947] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x210, wParam=0x1, lParam=0x201b2) returned 0x0
	[0239.947] CallNextHookEx (hhk=0x101ab, nCode=4, wParam=0x201b2, lParam=0x0) returned 0x0
	[0239.947] GetParent (hWnd=0x201b2) returned 0x2019a
	[0239.947] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x210, wParam=0x2, lParam=0x201b2) returned 0x0
	[0239.948] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x1208, wParam=0x0, lParam=0x493cf0) returned 0x0
	[0239.949] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x1003, wParam=0x0, lParam=0x494440) returned 0x0
	[0239.949] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x1208, wParam=0x0, lParam=0x492d90) returned 0x493cf0
	[0239.950] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x1027, wParam=0x0, lParam=0x0) returned 0x0
	[0239.950] GetWindowLongW (hWnd=0x2019a, nIndex=-16) returned 1445986893
	[0239.950] malloc (_Size=0x20) returned 0x63b6c0
	[0239.950] malloc (_Size=0x18) returned 0x543410
	[0239.950] malloc (_Size=0x18) returned 0x543430
	[0239.950] malloc (_Size=0x20) returned 0x63b6f0
	[0239.950] malloc (_Size=0x18) returned 0x543450
	[0239.950] malloc (_Size=0x18) returned 0x543470
	[0239.951] CreateWindowExW (dwExStyle=0x200, lpClassName="AfxFrameOrView42u", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1018e, hMenu=0x31fc, hInstance=0xff6d0000, lpParam=0x21cb38) returned 0x301b2
	[0239.951] GetParent (hWnd=0x301b2) returned 0x10012
	[0239.952] SetWindowLongPtrW (hWnd=0x301b2, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0239.952] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x301b2, lParam=0x21c240) returned 0x0
	[0239.952] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x81, wParam=0x0, lParam=0x21c320) returned 0x1
	[0239.953] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x83, wParam=0x0, lParam=0x21c3a0) returned 0x0
	[0239.953] GetWindowLongW (hWnd=0x301b2, nIndex=-16) returned 1073741824
	[0239.953] SetWindowLongW (hWnd=0x301b2, nIndex=-16, dwNewLong=1107296256) returned 1073741824
	[0239.954] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x21bd60) returned 0x0
	[0239.955] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x21bd60) returned 0x0
	[0239.955] malloc (_Size=0x400) returned 0x54a5c0
	[0239.955] malloc (_Size=0x400) returned 0x54a5c0
	[0239.955] malloc (_Size=0x400) returned 0x54a5c0
	[0239.955] malloc (_Size=0x400) returned 0x54a5c0
	[0239.956] malloc (_Size=0x400) returned 0x54a5c0
	[0239.956] malloc (_Size=0x400) returned 0x54a5c0
	[0239.956] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x1, wParam=0x0, lParam=0x21c320) returned 0x0
	[0239.956] IsWindowVisible (hWnd=0x1018e) returned 0
	[0239.956] IsWindowVisible (hWnd=0x101a8) returned 0
	[0239.956] IsWindowVisible (hWnd=0x2019a) returned 0
	[0239.956] IsWindowVisible (hWnd=0x301b2) returned 0
	[0239.956] IsWindowVisible (hWnd=0x1018e) returned 0
	[0239.956] IsWindowVisible (hWnd=0x101a8) returned 0
	[0239.956] IsWindowVisible (hWnd=0x2019a) returned 0
	[0239.956] IsWindowVisible (hWnd=0x301b2) returned 0
	[0239.956] IsWindowVisible (hWnd=0x1018e) returned 0
	[0239.956] IsWindowVisible (hWnd=0x101a8) returned 0
	[0239.956] IsWindowVisible (hWnd=0x2019a) returned 0
	[0239.956] IsWindowVisible (hWnd=0x301b2) returned 0
	[0239.957] malloc (_Size=0x60) returned 0x54a5c0
	[0239.957] malloc (_Size=0x60) returned 0x54a630
	[0239.957] malloc (_Size=0x60) returned 0x54a6a0
	[0239.966] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x101c4, lParam=0x21b3b0) returned 0x0
	[0239.977] GetParent (hWnd=0x101c4) returned 0x301b2
	[0239.977] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x210, wParam=0x1, lParam=0x101c4) returned 0x0
	[0239.977] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x101c6, lParam=0x21b400) returned 0x0
	[0240.174] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x101fa, lParam=0x21b0d0) returned 0x0
	[0240.175] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x101fc, lParam=0x21b030) returned 0x0
	[0240.176] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x101fe, lParam=0x21b0d0) returned 0x0
	[0240.176] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10200, lParam=0x21b030) returned 0x0
	[0240.179] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x3cd0090
	[0240.179] GetWindowLongW (hWnd=0x301b2, nIndex=-20) returned 512
	[0240.180] GetLastError () returned 0x6
	[0240.180] SetLastError (dwErrCode=0x6) 
	[0240.181] GetLastError () returned 0x6
	[0240.181] SetLastError (dwErrCode=0x6) 
	[0240.181] GetLastError () returned 0x6
	[0240.181] SetLastError (dwErrCode=0x6) 
	[0240.181] DeleteObject (ho=0x10508d4) returned 1
	[0240.181] GetLastError () returned 0x0
	[0240.181] SetLastError (dwErrCode=0x0) 
	[0240.182] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.182] GetParent (hWnd=0x101c4) returned 0x301b2
	[0240.182] MoveWindow (hWnd=0x101c4, X=0, Y=21, nWidth=0, nHeight=-21, bRepaint=1) returned 1
	[0240.183] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.184] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x210, wParam=0x31fc0001, lParam=0x301b2) returned 0x0
	[0240.184] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.184] malloc (_Size=0x20) returned 0x63b720
	[0240.184] malloc (_Size=0x18) returned 0x543490
	[0240.184] malloc (_Size=0x20) returned 0x63b750
	[0240.184] malloc (_Size=0x18) returned 0x5434b0
	[0240.184] malloc (_Size=0x20) returned 0x63b780
	[0240.184] malloc (_Size=0x18) returned 0x5434d0
	[0240.184] SetWindowPos (hWnd=0x301b2, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0240.185] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x46, wParam=0x0, lParam=0x21cad0) returned 0x0
	[0240.185] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.186] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x47, wParam=0x0, lParam=0x21cad0) returned 0x0
	[0240.186] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="AMCCustomTab", lpWndClass=0x21ca80 | out: lpWndClass=0x21ca80) returned 0
	[0240.186] RegisterClassW (lpWndClass=0x21cb50) returned 0xc165
	[0240.186] CreateWindowExW (dwExStyle=0x0, lpClassName="AMCCustomTab", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1018e, hMenu=0x31fa, hInstance=0xff6d0000, lpParam=0x0) returned 0x10202
	[0240.187] GetParent (hWnd=0x10202) returned 0x10012
	[0240.187] SetWindowLongPtrW (hWnd=0x10202, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0240.187] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10202, lParam=0x21c310) returned 0x0
	[0240.187] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x81, wParam=0x0, lParam=0x21c3f0) returned 0x1
	[0240.188] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x83, wParam=0x0, lParam=0x21c460) returned 0x0
	[0240.189] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x1, wParam=0x0, lParam=0x21c3f0) returned 0x0
	[0240.189] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.189] GetDC (hWnd=0x10202) returned 0x8010666
	[0240.189] malloc (_Size=0x88) returned 0x4df870
	[0240.189] malloc (_Size=0x100) returned 0x547460
	[0240.189] SelectObject (hdc=0x8010666, h=0x0) returned 0x0
	[0240.189] SelectObject (hdc=0x8010666, h=0x0) returned 0x0
	[0240.190] free (_Block=0x4df870) 
	[0240.190] free (_Block=0x547460) 
	[0240.190] ReleaseDC (hWnd=0x10202, hDC=0x8010666) returned 1
	[0240.190] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.191] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x210, wParam=0x31fa0001, lParam=0x10202) returned 0x0
	[0240.191] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.192] GetDC (hWnd=0x0) returned 0x1401007f
	[0240.192] malloc (_Size=0x88) returned 0x4df870
	[0240.192] malloc (_Size=0x100) returned 0x547460
	[0240.192] SelectObject (hdc=0x1401007f, h=0x30a08d3) returned 0x18a002e
	[0240.192] SelectObject (hdc=0x1401007f, h=0x18a002e) returned 0x30a08d3
	[0240.193] free (_Block=0x4df870) 
	[0240.193] free (_Block=0x547460) 
	[0240.193] ReleaseDC (hWnd=0x0, hDC=0x1401007f) returned 1
	[0240.193] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10204, lParam=0x21c3d0) returned 0x0
	[0240.194] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x55, wParam=0x10204, lParam=0x3) returned 0x2
	[0240.194] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0240.195] GetParent (hWnd=0x10204) returned 0x10202
	[0240.195] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x210, wParam=0x1, lParam=0x10204) returned 0x0
	[0240.195] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10206, lParam=0x21c2d0) returned 0x0
	[0240.196] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x55, wParam=0x10206, lParam=0x3) returned 0x2
	[0240.196] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0240.197] GetParent (hWnd=0x10206) returned 0x10202
	[0240.197] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x210, wParam=0x10001, lParam=0x10206) returned 0x0
	[0240.198] GetParent (hWnd=0x10204) returned 0x10202
	[0240.198] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x111, wParam=0x4000000, lParam=0x10204) returned 0x0
	[0240.199] GetParent (hWnd=0x10204) returned 0x10202
	[0240.199] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x111, wParam=0x3000000, lParam=0x10204) returned 0x0
	[0240.199] IsWindowVisible (hWnd=0x1018e) returned 0
	[0240.199] IsWindowVisible (hWnd=0x101a8) returned 0
	[0240.199] IsWindowVisible (hWnd=0x2019a) returned 0
	[0240.199] IsWindowVisible (hWnd=0x301b2) returned 0
	[0240.199] IsWindowVisible (hWnd=0x10202) returned 0
	[0240.199] IsWindowVisible (hWnd=0x1018e) returned 0
	[0240.199] IsWindowVisible (hWnd=0x101a8) returned 0
	[0240.199] IsWindowVisible (hWnd=0x2019a) returned 0
	[0240.199] IsWindowVisible (hWnd=0x301b2) returned 0
	[0240.199] IsWindowVisible (hWnd=0x10202) returned 0
	[0240.200] IsWindowVisible (hWnd=0x1018e) returned 0
	[0240.200] IsWindowVisible (hWnd=0x101a8) returned 0
	[0240.200] IsWindowVisible (hWnd=0x2019a) returned 0
	[0240.200] IsWindowVisible (hWnd=0x301b2) returned 0
	[0240.200] IsWindowVisible (hWnd=0x10202) returned 0
	[0240.200] GetParent (hWnd=0x1018e) returned 0x1018c
	[0240.200] GetParent (hWnd=0x1018c) returned 0xd015c
	[0240.200] SetWindowPos (hWnd=0x2019a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0240.201] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x46, wParam=0x0, lParam=0x21c8e0) returned 0x0
	[0240.202] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.202] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x47, wParam=0x0, lParam=0x21c8e0) returned 0x0
	[0240.203] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0240.203] malloc (_Size=0xf8) returned 0x54a710
	[0240.203] malloc (_Size=0x18) returned 0x5434f0
	[0240.203] malloc (_Size=0x20) returned 0x54a840
	[0240.204] malloc (_Size=0x38) returned 0x4deae0
	[0240.204] malloc (_Size=0x28) returned 0x54a870
	[0240.204] malloc (_Size=0x28) returned 0x54a8a0
	[0240.204] malloc (_Size=0x20) returned 0x54a8d0
	[0240.204] malloc (_Size=0x18) returned 0x543510
	[0240.204] malloc (_Size=0x20) returned 0x54a900
	[0240.204] malloc (_Size=0x18) returned 0x543530
	[0240.204] malloc (_Size=0x20) returned 0x54a930
	[0240.204] malloc (_Size=0x18) returned 0x543550
	[0240.204] malloc (_Size=0x50) returned 0x5423f0
	[0240.204] malloc (_Size=0x18) returned 0x543570
	[0240.204] malloc (_Size=0x28) returned 0x54a960
	[0240.204] malloc (_Size=0x28) returned 0x54a990
	[0240.204] malloc (_Size=0x28) returned 0x54a9c0
	[0240.204] malloc (_Size=0x28) returned 0x54a9f0
	[0240.204] malloc (_Size=0x28) returned 0x54aa20
	[0240.204] malloc (_Size=0x28) returned 0x54aa50
	[0240.204] malloc (_Size=0x28) returned 0x54aa80
	[0240.204] malloc (_Size=0x28) returned 0x54aab0
	[0240.205] malloc (_Size=0x20) returned 0x54aae0
	[0240.205] malloc (_Size=0x18) returned 0x543590
	[0240.205] GetParent (hWnd=0x1018c) returned 0xd015c
	[0240.205] GetParent (hWnd=0xd015c) returned 0x3016a
	[0240.205] GetParent (hWnd=0x3016a) returned 0x0
	[0240.205] GetParent (hWnd=0xd015c) returned 0x3016a
	[0240.205] malloc (_Size=0x20) returned 0x54ab10
	[0240.205] malloc (_Size=0x18) returned 0x5435b0
	[0240.206] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.206] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.207] DefMDIChildProcW (hWnd=0x1018c, uMsg=0x210, wParam=0xffffffffe9000001, lParam=0x1018e) returned 0x0
	[0240.207] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.208] GetWindowLongW (hWnd=0x1018e, nIndex=-20) returned 0
	[0240.208] PostMessageW (hWnd=0x1018c, Msg=0x362, wParam=0xe001, lParam=0x0) returned 1
	[0240.208] GetWindowLongW (hWnd=0x1018c, nIndex=-16) returned 1188020224
	[0240.208] GetClientRect (in: hWnd=0x1018c, lpRect=0x21d958 | out: lpRect=0x21d958) returned 1
	[0240.208] BeginDeferWindowPos (nNumWindows=8) returned 0x10201
	[0240.208] GetTopWindow (hWnd=0x1018c) returned 0x1018e
	[0240.208] GetDlgCtrlID (hWnd=0x1018e) returned 59648
	[0240.208] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x0
	[0240.208] GetParent (hWnd=0x1018e) returned 0x1018c
	[0240.208] GetWindowLongW (hWnd=0x1018e, nIndex=-20) returned 0
	[0240.208] GetWindowLongW (hWnd=0x1018e, nIndex=-16) returned 1375731712
	[0240.208] AdjustWindowRectEx (in: lpRect=0x21d958, dwStyle=0x52000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x21d958) returned 1
	[0240.208] GetParent (hWnd=0x1018e) returned 0x1018c
	[0240.208] GetWindowRect (in: hWnd=0x1018e, lpRect=0x21d910 | out: lpRect=0x21d910) returned 1
	[0240.208] ScreenToClient (in: hWnd=0x1018c, lpPoint=0x21d910 | out: lpPoint=0x21d910) returned 1
	[0240.208] ScreenToClient (in: hWnd=0x1018c, lpPoint=0x21d918 | out: lpPoint=0x21d918) returned 1
	[0240.208] EqualRect (lprc1=0x21d910, lprc2=0x21d958) returned 0
	[0240.208] DeferWindowPos (hWinPosInfo=0x10201, hWnd=0x1018e, hWndInsertAfter=0x0, x=0, y=0, cx=870, cy=323, uFlags=0x14) returned 0x10201
	[0240.208] EndDeferWindowPos (hWinPosInfo=0x10201) returned 1
	[0240.209] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x46, wParam=0x0, lParam=0x21d8f0) returned 0x0
	[0240.209] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x83, wParam=0x1, lParam=0x21d8c0) returned 0x0
	[0240.210] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x47, wParam=0x0, lParam=0x21d8f0) returned 0x0
	[0240.210] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x5, wParam=0x0, lParam=0x1430366) returned 0x0
	[0240.210] GetWindowLongW (hWnd=0x2019a, nIndex=-20) returned 512
	[0240.211] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x46, wParam=0x0, lParam=0x21cca0) returned 0x0
	[0240.211] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x83, wParam=0x1, lParam=0x21cc70) returned 0x0
	[0240.212] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x46, wParam=0x0, lParam=0x21cca0) returned 0x0
	[0240.212] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x83, wParam=0x1, lParam=0x21cc70) returned 0x0
	[0240.213] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x46, wParam=0x0, lParam=0x21cca0) returned 0x0
	[0240.213] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x83, wParam=0x1, lParam=0x21cc70) returned 0x0
	[0240.214] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x46, wParam=0x0, lParam=0x21cca0) returned 0x0
	[0240.214] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x46, wParam=0x0, lParam=0x21cca0) returned 0x0
	[0240.215] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x83, wParam=0x1, lParam=0x21cc70) returned 0x0
	[0240.256] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x47, wParam=0x0, lParam=0x21cca0) returned 0x0
	[0240.278] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x3, wParam=0x0, lParam=0x20002) returned 0x0
	[0240.278] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x5, wParam=0x0, lParam=0x13f00d5) returned 0x0
	[0240.279] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x47, wParam=0x0, lParam=0x21cca0) returned 0x0
	[0240.279] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x3, wParam=0x0, lParam=0x2028f) returned 0x0
	[0240.280] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x5, wParam=0x0, lParam=0x13f00d5) returned 0x0
	[0240.280] MoveWindow (hWnd=0x101c4, X=0, Y=21, nWidth=213, nHeight=298, bRepaint=1) returned 1
	[0240.281] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x47, wParam=0x0, lParam=0x21cca0) returned 0x0
	[0240.282] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x3, wParam=0x0, lParam=0x100dd) returned 0x0
	[0240.282] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x5, wParam=0x0, lParam=0x14101ac) returned 0x0
	[0240.283] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x47, wParam=0x0, lParam=0x21cca0) returned 0x0
	[0240.284] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x47, wParam=0x0, lParam=0x21cca0) returned 0x0
	[0240.284] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x1205, wParam=0x0, lParam=0x21c350) returned 0x1
	[0240.284] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x46, wParam=0x0, lParam=0x21c2b0) returned 0x0
	[0240.285] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x83, wParam=0x1, lParam=0x21c280) returned 0x0
	[0240.286] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x47, wParam=0x0, lParam=0x21c2b0) returned 0x0
	[0240.286] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x5, wParam=0x0, lParam=0x1801aa) returned 0x0
	[0240.287] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x46, wParam=0x0, lParam=0x21c340) returned 0x0
	[0240.287] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x83, wParam=0x1, lParam=0x21c310) returned 0x0
	[0240.288] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x47, wParam=0x0, lParam=0x21c340) returned 0x0
	[0240.288] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x5, wParam=0x0, lParam=0x12e01aa) returned 0x0
	[0240.288] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.289] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x434, wParam=0x0, lParam=0x21b150) returned 0x0
	[0240.289] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0240.289] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0240.290] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x46, wParam=0x0, lParam=0x21c340) returned 0x0
	[0240.291] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x83, wParam=0x1, lParam=0x21c310) returned 0x0
	[0240.291] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x47, wParam=0x0, lParam=0x21c340) returned 0x0
	[0240.292] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x5, wParam=0x0, lParam=0x13f01aa) returned 0x0
	[0240.292] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.292] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x434, wParam=0x0, lParam=0x21b150) returned 0x0
	[0240.292] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0240.293] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0240.293] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x1205, wParam=0x0, lParam=0x21c420) returned 0x1
	[0240.294] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x46, wParam=0x0, lParam=0x21c380) returned 0x0
	[0240.295] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x3, wParam=0x0, lParam=0x200de) returned 0x0
	[0240.295] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x5, wParam=0x0, lParam=0x13f01aa) returned 0x0
	[0240.295] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.295] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x434, wParam=0x0, lParam=0x21bab0) returned 0x0
	[0240.296] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0240.296] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0240.297] CreateWindowExW (dwExStyle=0x0, lpClassName="msctls_statusbar32", lpWindowName="Ready", dwStyle=0x5400014a, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1018c, hMenu=0x1003, hInstance=0xff6d0000, lpParam=0x0) returned 0x1020a
	[0240.297] GetParent (hWnd=0x1020a) returned 0x10012
	[0240.297] SetWindowLongPtrW (hWnd=0x1020a, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc65230c
	[0240.297] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x1020a, lParam=0x21d1f0) returned 0x0
	[0240.298] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x81, wParam=0x0, lParam=0x21d2d0) returned 0x1
	[0240.298] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x83, wParam=0x0, lParam=0x21d350) returned 0x0
	[0240.299] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x1, wParam=0x0, lParam=0x21d2b0) returned 0x0
	[0240.300] DefMDIChildProcW (hWnd=0x1018c, uMsg=0x55, wParam=0x1020a, lParam=0x3) returned 0x2
	[0240.300] DefMDIChildProcW (hWnd=0x1018c, uMsg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0240.301] CreateWindowExW (dwExStyle=0x0, lpClassName="msctls_progress32", lpWindowName=0x0, dwStyle=0x54000001, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1020a, hMenu=0x1000, hInstance=0xff6d0000, lpParam=0x0) returned 0x1020c
	[0240.301] GetParent (hWnd=0x1020c) returned 0x10012
	[0240.301] SetWindowLongPtrW (hWnd=0x1020c, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6cae1c
	[0240.301] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x1020c, lParam=0x21c540) returned 0x0
	[0240.302] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x81, wParam=0x0, lParam=0x21c620) returned 0x1
	[0240.302] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x21c050) returned 0x0
	[0240.303] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x21c050) returned 0x0
	[0240.303] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x83, wParam=0x0, lParam=0x21c6a0) returned 0x0
	[0240.304] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x1, wParam=0x0, lParam=0x21c620) returned 0x0
	[0240.304] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.305] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.305] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x210, wParam=0x10000001, lParam=0x1020c) returned 0x0
	[0240.306] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.306] CreateWindowExW (dwExStyle=0x0, lpClassName="STATIC", lpWindowName="", dwStyle=0x5400000b, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1020a, hMenu=0x1001, hInstance=0xff6d0000, lpParam=0x0) returned 0x1020e
	[0240.307] GetParent (hWnd=0x1020e) returned 0x10012
	[0240.307] SetWindowLongPtrW (hWnd=0x1020e, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6d61b4
	[0240.307] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x1020e, lParam=0x21c560) returned 0x0
	[0240.307] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x81, wParam=0x0, lParam=0x21c640) returned 0x1
	[0240.308] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x83, wParam=0x0, lParam=0x21c6a0) returned 0x0
	[0240.308] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x1, wParam=0x0, lParam=0x21c630) returned 0x0
	[0240.309] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.408] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.409] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x210, wParam=0x10010001, lParam=0x1020e) returned 0x0
	[0240.409] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.410] GetWindowLongW (hWnd=0x1020c, nIndex=-20) returned 0
	[0240.410] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x30, wParam=0x20a0874, lParam=0x0) returned 0x0
	[0240.411] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0240.411] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x46, wParam=0x0, lParam=0x21ca60) returned 0x0
	[0240.412] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x83, wParam=0x1, lParam=0x21ca30) returned 0x0
	[0240.413] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.413] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x47, wParam=0x0, lParam=0x21ca60) returned 0x0
	[0240.414] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x5, wParam=0x0, lParam=0x170000) returned 0x0
	[0240.414] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x46, wParam=0x0, lParam=0x21b950) returned 0x0
	[0240.415] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.415] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x40a, wParam=0x0, lParam=0x21bd70) returned 0x1
	[0240.415] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x40a, wParam=0x1, lParam=0x21bd50) returned 0x0
	[0240.416] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x40a, wParam=0x2, lParam=0x21bd60) returned 0x0
	[0240.416] SetWindowPos (hWnd=0x1020c, hWndInsertAfter=0x0, X=4, Y=4, cx=-121272495, cy=2042, uFlags=0x224) returned 1
	[0240.416] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x46, wParam=0x0, lParam=0x21bc80) returned 0x0
	[0240.417] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x83, wParam=0x1, lParam=0x21bc50) returned 0x0
	[0240.417] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.418] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x47, wParam=0x0, lParam=0x21bc80) returned 0x0
	[0240.418] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x3, wParam=0x0, lParam=0x40004) returned 0x0
	[0240.419] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x5, wParam=0x0, lParam=0x7fa0000) returned 0x0
	[0240.419] SetWindowPos (hWnd=0x1020e, hWndInsertAfter=0x0, X=-121272487, Y=4, cx=-67, cy=-4, uFlags=0x224) returned 1
	[0240.419] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x46, wParam=0x0, lParam=0x21bc80) returned 0x0
	[0240.420] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x83, wParam=0x1, lParam=0x21bc50) returned 0x0
	[0240.420] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.421] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x47, wParam=0x0, lParam=0x21bc80) returned 0x0
	[0240.421] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x3, wParam=0x0, lParam=0x48000) returned 0x0
	[0240.422] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x40a, wParam=0x0, lParam=0x21ce80) returned 0x1
	[0240.422] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x40a, wParam=0x1, lParam=0x21ce60) returned 0x0
	[0240.423] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x40a, wParam=0x2, lParam=0x21ce70) returned 0x0
	[0240.423] SetWindowPos (hWnd=0x1020c, hWndInsertAfter=0x0, X=4, Y=4, cx=-121272495, cy=2042, uFlags=0x224) returned 1
	[0240.423] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x46, wParam=0x0, lParam=0x21cd90) returned 0x0
	[0240.424] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x83, wParam=0x1, lParam=0x21cd60) returned 0x0
	[0240.424] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.425] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x47, wParam=0x0, lParam=0x21cd90) returned 0x0
	[0240.425] SetWindowPos (hWnd=0x1020e, hWndInsertAfter=0x0, X=-121272487, Y=4, cx=-2222548, cy=-5, uFlags=0x224) returned 1
	[0240.425] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x46, wParam=0x0, lParam=0x21cd90) returned 0x0
	[0240.426] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x83, wParam=0x1, lParam=0x21cd60) returned 0x0
	[0240.426] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.427] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x47, wParam=0x0, lParam=0x21cd90) returned 0x0
	[0240.427] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0240.428] DefMDIChildProcW (hWnd=0x1018c, uMsg=0x210, wParam=0x10030001, lParam=0x1020a) returned 0x0
	[0240.429] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0240.429] GetDC (hWnd=0x1020a) returned 0xc01083a
	[0240.429] malloc (_Size=0x88) returned 0x4df870
	[0240.429] malloc (_Size=0x100) returned 0x547460
	[0240.429] lstrlenW (lpString="") returned 0
	[0240.429] lstrlenW (lpString="                                ") returned 32
	[0240.429] malloc (_Size=0x4e) returned 0x542390
	[0240.429] lstrlenW (lpString="") returned 0
	[0240.430] free (_Block=0x542390) 
	[0240.430] lstrlenW (lpString="                    ") returned 20
	[0240.430] malloc (_Size=0x36) returned 0x4de4a0
	[0240.430] lstrlenW (lpString="") returned 0
	[0240.430] free (_Block=0x4de4a0) 
	[0240.430] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x404, wParam=0x3, lParam=0x21d9e0) returned 0x1
	[0240.430] free (_Block=0x4df870) 
	[0240.431] free (_Block=0x547460) 
	[0240.431] ReleaseDC (hWnd=0x1020a, hDC=0xc01083a) returned 1
	[0240.431] malloc (_Size=0x100) returned 0x547460
	[0240.431] malloc (_Size=0x100) returned 0x547570
	[0240.431] malloc (_Size=0x58) returned 0x542390
	[0240.431] malloc (_Size=0x28) returned 0x54ab40
	[0240.431] FindResourceW (hModule=0xff6d0000, lpName=0xa2, lpType=0x4) returned 0xd0718
	[0240.432] malloc (_Size=0x18) returned 0x5435d0
	[0240.432] malloc (_Size=0x18) returned 0x5435f0
	[0240.432] GetWindowLongW (hWnd=0x1018c, nIndex=-16) returned 1188020224
	[0240.432] lstrlenW (lpString="&Close\x09Ctrl+F4") returned 14
	[0240.433] malloc (_Size=0x2a) returned 0x4de4a0
	[0240.433] lstrlenW (lpString="Nex&t\x09Ctrl+F6") returned 13
	[0240.433] malloc (_Size=0x28) returned 0x54ab70
	[0240.433] free (_Block=0x54ab70) 
	[0240.433] free (_Block=0x4de4a0) 
	[0240.433] DestroyMenu (hMenu=0x401fb) returned 1
	[0240.433] GetParent (hWnd=0x1018e) returned 0x1018c
	[0240.434] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x46, wParam=0x0, lParam=0x21d990) returned 0x0
	[0240.435] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x83, wParam=0x1, lParam=0x21d960) returned 0x0
	[0240.435] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x46, wParam=0x0, lParam=0x21d990) returned 0x0
	[0240.436] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x83, wParam=0x1, lParam=0x21d960) returned 0x0
	[0240.436] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x47, wParam=0x0, lParam=0x21d990) returned 0x0
	[0240.437] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x3, wParam=0x0, lParam=0x12c0000) returned 0x0
	[0240.437] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x407, wParam=0x0, lParam=0x21cbe0) returned 0x1
	[0240.438] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x404, wParam=0x3, lParam=0x21cbf0) returned 0x1
	[0240.438] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x5, wParam=0x0, lParam=0x170366) returned 0x0
	[0240.438] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x46, wParam=0x0, lParam=0x21c880) returned 0x0
	[0240.439] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.439] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x40a, wParam=0x0, lParam=0x21cca0) returned 0x1
	[0240.440] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x40a, wParam=0x1, lParam=0x21cc80) returned 0x1
	[0240.440] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x40a, wParam=0x2, lParam=0x21cc90) returned 0x1
	[0240.440] SetWindowPos (hWnd=0x1020c, hWndInsertAfter=0x0, X=654, Y=4, cx=127, cy=17, uFlags=0x224) returned 1
	[0240.441] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x46, wParam=0x0, lParam=0x21cbb0) returned 0x0
	[0240.441] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x83, wParam=0x1, lParam=0x21cb80) returned 0x0
	[0240.442] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.442] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x47, wParam=0x0, lParam=0x21cbb0) returned 0x0
	[0240.443] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x3, wParam=0x0, lParam=0x4028e) returned 0x0
	[0240.443] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x1020c, Msg=0x5, wParam=0x0, lParam=0x11007f) returned 0x0
	[0240.443] SetWindowPos (hWnd=0x1020e, hWndInsertAfter=0x0, X=785, Y=4, cx=65, cy=17, uFlags=0x224) returned 1
	[0240.444] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x46, wParam=0x0, lParam=0x21cbb0) returned 0x0
	[0240.444] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x83, wParam=0x1, lParam=0x21cb80) returned 0x0
	[0240.445] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0240.445] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x47, wParam=0x0, lParam=0x21cbb0) returned 0x0
	[0240.446] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x3, wParam=0x0, lParam=0x40311) returned 0x0
	[0240.446] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1020e, Msg=0x5, wParam=0x0, lParam=0x110041) returned 0x0
	[0240.447] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x47, wParam=0x0, lParam=0x21d990) returned 0x0
	[0240.447] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x5, wParam=0x0, lParam=0x12c0366) returned 0x0
	[0240.447] GetWindowLongW (hWnd=0x2019a, nIndex=-20) returned 512
	[0240.448] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x46, wParam=0x0, lParam=0x21cd40) returned 0x0
	[0240.448] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x83, wParam=0x1, lParam=0x21cd10) returned 0x0
	[0240.449] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x46, wParam=0x0, lParam=0x21cd40) returned 0x0
	[0240.449] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x83, wParam=0x1, lParam=0x21cd10) returned 0x0
	[0240.531] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x46, wParam=0x0, lParam=0x21cd40) returned 0x0
	[0240.532] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x83, wParam=0x1, lParam=0x21cd10) returned 0x0
	[0240.532] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10202, Msg=0x46, wParam=0x0, lParam=0x21cd40) returned 0x0
	[0240.533] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x46, wParam=0x0, lParam=0x21cd40) returned 0x0
	[0240.533] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x83, wParam=0x1, lParam=0x21cd10) returned 0x0
	[0240.534] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x47, wParam=0x0, lParam=0x21cd40) returned 0x0
	[0240.534] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x5, wParam=0x0, lParam=0x12800d5) returned 0x0
	[0240.535] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x47, wParam=0x0, lParam=0x21cd40) returned 0x0
	[0240.535] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x301b2, Msg=0x5, wParam=0x0, lParam=0x12800d5) returned 0x0
	[0240.535] MoveWindow (hWnd=0x101c4, X=0, Y=21, nWidth=213, nHeight=275, bRepaint=1) returned 1
	[0240.537] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x47, wParam=0x0, lParam=0x21cd40) returned 0x0
	[0240.537] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10198, Msg=0x5, wParam=0x0, lParam=0x12a01ac) returned 0x0
	[0240.538] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x47, wParam=0x0, lParam=0x21cd40) returned 0x0
	[0240.538] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x1205, wParam=0x0, lParam=0x21c3f0) returned 0x1
	[0240.539] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x46, wParam=0x0, lParam=0x21c350) returned 0x0
	[0240.540] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x5, wParam=0x0, lParam=0x12801aa) returned 0x0
	[0240.540] GetPropW (hWnd=0x3019e, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.540] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x3019e, Msg=0x434, wParam=0x0, lParam=0x21bb50) returned 0x0
	[0240.541] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x2019a, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0240.541] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x2019c, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0240.542] DefMDIChildProcW (hWnd=0x1018c, uMsg=0x7c, wParam=0xfffffffffffffff0, lParam=0x21dab0) returned 0x0
	[0240.543] DefMDIChildProcW (hWnd=0x1018c, uMsg=0x7d, wParam=0xfffffffffffffff0, lParam=0x21dab0) returned 0x0
	[0240.543] DefMDIChildProcW (hWnd=0x1018c, uMsg=0xd, wParam=0x104, lParam=0x20f9bb0) returned 0x0
	[0240.544] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x21d328) returned 0x0
	[0240.544] GetParent (hWnd=0x1018e) returned 0x1018c
	[0240.545] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x1020a, Msg=0x46, wParam=0x0, lParam=0x21da50) returned 0x0
	[0240.545] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x1018e, Msg=0x46, wParam=0x0, lParam=0x21da50) returned 0x0
	[0240.545] GetParent (hWnd=0x1018c) returned 0xd015c
	[0240.545] GetParent (hWnd=0xd015c) returned 0x3016a
	[0240.545] GetParent (hWnd=0x3016a) returned 0x0
	[0240.546] SendMessageW (hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0240.546] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0240.546] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0240.546] GetWindowTextW (in: hWnd=0x3016a, lpString=0x21d8a0, nMaxCount=256 | out: lpString="Microsoft Management Console") returned 28
	[0240.547] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0xd, wParam=0x100, lParam=0x21d8a0) returned 0x1c
	[0240.548] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x210, wParam=0xffffffffff000001, lParam=0x1018c) returned 0x0
	[0240.548] free (_Block=0x63adb0) 
	[0240.548] SetCursor (hCursor=0x10007) returned 0x10007
	[0240.551] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0240.614] malloc (_Size=0x20) returned 0x54ab70
	[0240.614] malloc (_Size=0x20) returned 0x54aba0
	[0240.615] malloc (_Size=0x60) returned 0x54b1d0
	[0240.615] malloc (_Size=0x8e) returned 0x54b240
	[0240.616] malloc (_Size=0x8) returned 0x54b1d0
	[0240.616] malloc (_Size=0x10) returned 0x543610
	[0240.616] malloc (_Size=0x48) returned 0x63bf30
	[0240.616] malloc (_Size=0x50) returned 0x542330
	[0240.616] malloc (_Size=0x30) returned 0x4de4a0
	[0240.616] malloc (_Size=0x48) returned 0x63bee0
	[0240.617] malloc (_Size=0x30) returned 0x4deaa0
	[0240.617] malloc (_Size=0x48) returned 0x63bdf0
	[0240.617] malloc (_Size=0x20) returned 0x54ab70
	[0240.617] malloc (_Size=0x48) returned 0x63bbc0
	[0240.617] malloc (_Size=0x40) returned 0x63bda0
	[0240.617] malloc (_Size=0x48) returned 0x63bb70
	[0240.617] malloc (_Size=0x20) returned 0x54abd0
	[0240.617] malloc (_Size=0x30) returned 0x4deb20
	[0240.617] malloc (_Size=0x50) returned 0x5422d0
	[0240.617] malloc (_Size=0x30) returned 0x4deb60
	[0240.617] malloc (_Size=0x30) returned 0x4deb20
	[0240.617] malloc (_Size=0x20) returned 0x54ac00
	[0240.617] malloc (_Size=0x50) returned 0x542270
	[0240.617] malloc (_Size=0x20) returned 0x54ac30
	[0240.617] malloc (_Size=0x30) returned 0x4deba0
	[0240.617] malloc (_Size=0x40) returned 0x63be90
	[0240.617] malloc (_Size=0x50) returned 0x542210
	[0240.617] malloc (_Size=0x40) returned 0x63be40
	[0240.617] malloc (_Size=0x30) returned 0x4debe0
	[0240.617] malloc (_Size=0x20) returned 0x54ac00
	[0240.617] malloc (_Size=0x50) returned 0x5421b0
	[0240.617] malloc (_Size=0x20) returned 0x54ac60
	[0240.618] malloc (_Size=0x30) returned 0x4dec20
	[0240.618] malloc (_Size=0x48) returned 0x63be90
	[0240.618] malloc (_Size=0x48) returned 0x63bc10
	[0240.618] malloc (_Size=0x30) returned 0x4dec60
	[0240.618] malloc (_Size=0x48) returned 0x63bfd0
	[0240.618] malloc (_Size=0x20) returned 0x54ac00
	[0240.618] malloc (_Size=0x48) returned 0x63c020
	[0240.618] malloc (_Size=0x40) returned 0x63c070
	[0240.618] malloc (_Size=0x48) returned 0x63c0c0
	[0240.618] malloc (_Size=0x20) returned 0x54ac90
	[0240.618] malloc (_Size=0x50) returned 0x542150
	[0240.618] malloc (_Size=0x30) returned 0x4deca0
	[0240.618] malloc (_Size=0x30) returned 0x4dece0
	[0240.618] malloc (_Size=0x50) returned 0x5420f0
	[0240.618] malloc (_Size=0x30) returned 0x4ded20
	[0240.618] malloc (_Size=0x30) returned 0x4dece0
	[0240.618] malloc (_Size=0x20) returned 0x54acc0
	[0240.618] malloc (_Size=0x50) returned 0x542090
	[0240.618] malloc (_Size=0x20) returned 0x54acf0
	[0240.618] malloc (_Size=0x30) returned 0x4ded60
	[0240.618] malloc (_Size=0x40) returned 0x63c110
	[0240.618] malloc (_Size=0x50) returned 0x542750
	[0240.619] malloc (_Size=0x40) returned 0x63c160
	[0240.619] malloc (_Size=0x30) returned 0x4deda0
	[0240.619] malloc (_Size=0x20) returned 0x54acc0
	[0240.619] malloc (_Size=0x50) returned 0x542b10
	[0240.619] malloc (_Size=0x20) returned 0x54ad20
	[0240.619] malloc (_Size=0x30) returned 0x4dede0
	[0240.619] malloc (_Size=0xb0) returned 0x54b1d0
	[0240.619] malloc (_Size=0x48) returned 0x63c110
	[0240.619] malloc (_Size=0x48) returned 0x63c1b0
	[0240.619] malloc (_Size=0x30) returned 0x4dee20
	[0240.619] malloc (_Size=0x48) returned 0x63c200
	[0240.619] malloc (_Size=0x20) returned 0x54acc0
	[0240.619] malloc (_Size=0x48) returned 0x63c250
	[0240.619] malloc (_Size=0x40) returned 0x63c2a0
	[0240.619] malloc (_Size=0x48) returned 0x63c2f0
	[0240.619] malloc (_Size=0x20) returned 0x54ad50
	[0240.619] malloc (_Size=0x50) returned 0x542ab0
	[0240.619] malloc (_Size=0x30) returned 0x4dee60
	[0240.619] malloc (_Size=0x30) returned 0x4deea0
	[0240.619] malloc (_Size=0x50) returned 0x542a50
	[0240.619] malloc (_Size=0x30) returned 0x4deee0
	[0240.619] malloc (_Size=0x30) returned 0x4deea0
	[0240.619] malloc (_Size=0x20) returned 0x54ad80
	[0240.619] malloc (_Size=0x50) returned 0x5429f0
	[0240.619] malloc (_Size=0x20) returned 0x54adb0
	[0240.620] malloc (_Size=0x30) returned 0x4def20
	[0240.620] malloc (_Size=0x40) returned 0x63c340
	[0240.620] malloc (_Size=0x50) returned 0x542990
	[0240.620] malloc (_Size=0x40) returned 0x63c390
	[0240.620] malloc (_Size=0x30) returned 0x4def60
	[0240.620] malloc (_Size=0x20) returned 0x54ad80
	[0240.620] malloc (_Size=0x50) returned 0x542930
	[0240.620] malloc (_Size=0x20) returned 0x54ade0
	[0240.620] malloc (_Size=0x30) returned 0x4defa0
	[0240.621] malloc (_Size=0x18) returned 0x543610
	[0240.621] malloc (_Size=0x18) returned 0x543630
	[0240.621] malloc (_Size=0x18) returned 0x543130
	[0240.621] malloc (_Size=0x18) returned 0x543650
	[0240.621] malloc (_Size=0x18) returned 0x543650
	[0240.656] malloc (_Size=0x18) returned 0x543670
	[0240.746] malloc (_Size=0x14) returned 0x54d490
	[0240.746] malloc (_Size=0x28) returned 0x54ac60
	[0240.746] malloc (_Size=0x30) returned 0x54b670
	[0240.746] malloc (_Size=0x40) returned 0x63bda0
	[0240.746] malloc (_Size=0x30) returned 0x54b6b0
	[0240.746] malloc (_Size=0x30) returned 0x54b6f0
	[0240.749] malloc (_Size=0x10) returned 0x54d490
	[0240.751] malloc (_Size=0x10) returned 0x54d4b0
	[0240.752] malloc (_Size=0x40) returned 0x63bdf0
	[0240.761] malloc (_Size=0x10) returned 0x54d4d0
	[0240.763] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x80, wParam=0x1, lParam=0x60203) returned 0x0
	[0240.765] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x93, wParam=0x0, lParam=0x21db60) returned 0x1
	[0240.765] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x7f, wParam=0x2, lParam=0x0) returned 0x40207
	[0240.769] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x80, wParam=0x0, lParam=0x60201) returned 0x0
	[0240.769] malloc (_Size=0x68) returned 0x550bd0
	[0240.769] malloc (_Size=0x68) returned 0x550c40
	[0240.769] malloc (_Size=0x68) returned 0x550cb0
	[0240.769] malloc (_Size=0x68) returned 0x550d20
	[0240.770] malloc (_Size=0x58) returned 0x542330
	[0240.770] malloc (_Size=0x68) returned 0x550d90
	[0240.770] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
	[0240.771] GetParent (hWnd=0x3016a) returned 0x0
	[0240.771] GetParent (hWnd=0x3016a) returned 0x0
	[0240.771] GetParent (hWnd=0x3016a) returned 0x0
	[0240.771] GetDesktopWindow () returned 0x10010
	[0240.771] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0240.771] IsWindowEnabled (hWnd=0x20144) returned 0
	[0240.771] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0240.771] IsWindowEnabled (hWnd=0x20142) returned 1
	[0240.771] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0240.772] IsWindowEnabled (hWnd=0x20146) returned 1
	[0240.772] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0240.772] IsWindowEnabled (hWnd=0x100a0) returned 1
	[0240.772] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0240.772] IsWindowEnabled (hWnd=0x20060) returned 0
	[0240.772] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0240.772] IsWindowEnabled (hWnd=0x1009e) returned 1
	[0240.772] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0240.772] IsWindowEnabled (hWnd=0x10088) returned 1
	[0240.772] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0240.772] IsWindowEnabled (hWnd=0x100b6) returned 1
	[0240.772] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0240.772] IsWindowEnabled (hWnd=0x100aa) returned 1
	[0240.773] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0240.773] IsWindowEnabled (hWnd=0x100a6) returned 1
	[0240.773] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0240.773] IsWindowEnabled (hWnd=0x100a2) returned 1
	[0240.773] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0240.773] IsWindowEnabled (hWnd=0x1007a) returned 0
	[0240.773] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0240.773] IsWindowEnabled (hWnd=0x10070) returned 0
	[0240.773] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0240.773] IsWindowEnabled (hWnd=0x10080) returned 1
	[0240.773] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0240.773] IsWindowEnabled (hWnd=0x10074) returned 1
	[0240.773] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0240.773] IsWindowEnabled (hWnd=0x10114) returned 1
	[0240.773] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0240.773] IsWindowEnabled (hWnd=0x1010a) returned 1
	[0240.773] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0240.774] IsWindowEnabled (hWnd=0x100f8) returned 1
	[0240.774] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0240.774] IsWindowEnabled (hWnd=0x100d0) returned 1
	[0240.774] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0240.774] IsWindowEnabled (hWnd=0x500c0) returned 1
	[0240.774] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0240.774] IsWindowEnabled (hWnd=0x100b8) returned 1
	[0240.774] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0240.774] IsWindowEnabled (hWnd=0x10054) returned 0
	[0240.774] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0240.774] IsWindowEnabled (hWnd=0x10052) returned 0
	[0240.774] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0240.774] IsWindowEnabled (hWnd=0x100c8) returned 1
	[0240.774] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0240.774] IsWindowEnabled (hWnd=0x20134) returned 1
	[0240.774] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0240.774] IsWindowEnabled (hWnd=0x20138) returned 1
	[0240.775] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0240.775] IsWindowEnabled (hWnd=0x2013a) returned 1
	[0240.775] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0240.775] IsWindowEnabled (hWnd=0x20118) returned 1
	[0240.775] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0240.775] IsWindowEnabled (hWnd=0x30028) returned 1
	[0240.775] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0240.775] IsWindowEnabled (hWnd=0x2014e) returned 0
	[0240.775] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0240.775] IsWindowEnabled (hWnd=0x20156) returned 1
	[0240.775] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0240.775] IsWindowEnabled (hWnd=0x2015a) returned 0
	[0240.775] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0240.775] IsWindowEnabled (hWnd=0x2001a) returned 1
	[0240.775] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0240.775] IsWindowEnabled (hWnd=0x20022) returned 0
	[0240.775] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0240.775] IsWindowEnabled (hWnd=0x20018) returned 1
	[0240.776] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0240.776] IsWindowEnabled (hWnd=0x1012e) returned 1
	[0240.776] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0240.776] IsWindowEnabled (hWnd=0x10120) returned 1
	[0240.776] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0240.776] IsWindowEnabled (hWnd=0x1011c) returned 1
	[0240.776] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0240.776] IsWindowEnabled (hWnd=0x10104) returned 1
	[0240.776] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0240.776] IsWindowEnabled (hWnd=0x10100) returned 1
	[0240.776] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0240.776] IsWindowEnabled (hWnd=0x100f2) returned 1
	[0240.776] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0240.776] IsWindowEnabled (hWnd=0x100e8) returned 1
	[0240.777] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0240.777] IsWindowEnabled (hWnd=0x100e2) returned 1
	[0240.777] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0240.777] IsWindowEnabled (hWnd=0x200dc) returned 1
	[0240.777] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0240.777] IsWindowEnabled (hWnd=0x100c4) returned 1
	[0240.777] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0240.777] IsWindowEnabled (hWnd=0x500ba) returned 1
	[0240.777] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0240.777] IsWindowEnabled (hWnd=0x100b0) returned 1
	[0240.777] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0240.777] IsWindowEnabled (hWnd=0x100ae) returned 1
	[0240.778] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0240.778] IsWindowEnabled (hWnd=0x100a4) returned 1
	[0240.778] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0240.778] IsWindowEnabled (hWnd=0x10090) returned 1
	[0240.778] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x3019e
	[0240.778] IsWindowEnabled (hWnd=0x3019e) returned 1
	[0240.778] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0240.778] IsWindowEnabled (hWnd=0x201b8) returned 1
	[0240.778] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0240.778] IsWindowEnabled (hWnd=0x201c0) returned 1
	[0240.778] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0240.778] IsWindowEnabled (hWnd=0x101b0) returned 1
	[0240.779] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0240.779] IsWindowEnabled (hWnd=0x101ac) returned 1
	[0240.779] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0240.779] IsWindowEnabled (hWnd=0x101aa) returned 1
	[0240.779] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0240.779] IsWindowEnabled (hWnd=0x20164) returned 1
	[0240.779] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0240.779] IsWindowEnabled (hWnd=0x20162) returned 0
	[0240.779] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0240.779] IsWindowEnabled (hWnd=0x3016a) returned 0
	[0240.779] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0240.779] IsWindowEnabled (hWnd=0x20160) returned 0
	[0240.779] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0240.779] IsWindowEnabled (hWnd=0xa016e) returned 1
	[0240.779] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0240.779] IsWindowEnabled (hWnd=0x20166) returned 0
	[0240.779] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0240.779] IsWindowEnabled (hWnd=0x1008c) returned 1
	[0240.779] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0240.779] IsWindowEnabled (hWnd=0x1006e) returned 1
	[0240.780] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0240.780] IsWindowEnabled (hWnd=0x10066) returned 1
	[0240.780] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0240.780] IsWindowEnabled (hWnd=0x40044) returned 1
	[0240.780] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0240.780] IsWindowEnabled (hWnd=0x1005a) returned 1
	[0240.780] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0240.780] IsWindowEnabled (hWnd=0x1005c) returned 0
	[0240.780] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0240.780] IsWindowEnabled (hWnd=0x20048) returned 1
	[0240.780] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0240.780] IsWindowEnabled (hWnd=0x1004a) returned 0
	[0240.780] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0240.780] IsWindowEnabled (hWnd=0x10046) returned 1
	[0240.780] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0240.780] IsWindowEnabled (hWnd=0x1004e) returned 0
	[0240.780] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0240.780] IsWindowEnabled (hWnd=0x1004c) returned 0
	[0240.781] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0240.781] IsWindowEnabled (hWnd=0x1012c) returned 0
	[0240.781] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0240.781] IsWindowEnabled (hWnd=0x10064) returned 0
	[0240.781] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0240.781] IsWindowEnabled (hWnd=0x2007e) returned 1
	[0240.781] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0240.781] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0240.781] GetParent (hWnd=0x3016a) returned 0x0
	[0240.781] GetDesktopWindow () returned 0x10010
	[0240.781] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0240.781] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0240.781] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0240.781] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0240.781] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0240.781] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0240.781] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0240.781] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0240.782] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0240.782] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0240.782] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0240.782] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0240.782] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0240.782] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0240.782] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0240.782] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0240.782] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0240.782] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0240.782] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0240.782] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0240.782] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.782] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.782] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0240.782] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0240.782] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0240.783] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.783] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.783] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0240.783] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0240.783] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0240.783] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.783] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.783] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0240.783] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0240.783] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0240.783] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.783] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.783] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0240.783] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0240.783] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0240.783] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.783] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.784] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0240.784] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0240.784] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0240.784] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.784] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.784] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0240.784] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0240.784] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0240.784] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.784] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.784] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0240.784] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0240.784] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0240.784] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.784] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.784] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0240.785] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0240.785] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0240.785] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0240.785] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0240.785] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.785] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.785] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.785] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.785] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0240.785] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0240.785] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0240.785] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.785] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.785] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.785] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.785] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0240.786] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.786] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.786] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.786] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.786] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0240.786] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.786] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.786] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0240.786] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0240.786] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0240.786] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0240.786] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0240.786] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0240.786] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0240.786] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0240.786] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0240.786] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0240.787] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0240.787] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0240.787] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0240.787] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0240.787] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0240.787] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0240.787] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0240.787] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0240.787] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0240.787] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0240.787] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0240.787] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0240.787] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0240.787] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.787] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.787] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0240.787] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0240.787] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0240.788] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.788] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.788] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0240.788] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0240.788] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0240.788] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.788] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.788] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0240.788] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0240.788] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0240.788] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0240.788] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0240.788] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0240.788] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0240.788] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0240.788] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0240.788] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0240.789] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0240.789] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0240.789] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0240.789] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0240.789] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0240.789] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0240.789] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0240.789] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0240.789] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0240.789] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0240.789] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0240.789] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0240.789] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0240.789] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0240.789] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0240.789] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0240.789] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0240.790] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0240.790] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0240.790] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0240.790] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0240.790] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0240.790] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0240.790] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0240.790] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0240.790] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0240.790] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0240.790] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0240.790] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0240.790] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0240.790] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0240.790] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0240.790] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0240.790] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0240.790] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0240.790] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0240.791] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0240.791] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0240.791] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0240.791] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0240.791] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0240.791] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.791] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.791] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0240.791] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0240.791] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0240.791] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0240.791] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0240.791] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0240.791] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.791] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.791] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0240.791] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0240.791] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0240.791] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0240.791] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0240.791] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0240.791] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.791] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.792] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0240.792] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0240.792] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0240.792] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.792] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.792] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0240.792] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.792] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.792] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0240.792] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0240.792] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0240.792] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0240.792] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0240.792] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0240.792] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0240.792] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0240.792] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0240.792] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0240.792] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0240.792] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0240.792] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.792] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.792] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0240.792] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0240.792] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0240.792] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.792] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.792] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x3019e
	[0240.792] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0240.792] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0240.793] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0240.793] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0240.793] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0240.793] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0240.793] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0240.793] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0240.793] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0240.793] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0240.793] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0240.793] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0240.793] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0240.793] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0240.793] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0240.793] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0240.793] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.793] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0240.793] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0240.793] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0240.793] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0240.793] SendMessageW (hWnd=0x101aa, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.793] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.793] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.793] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0240.794] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0240.794] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0240.794] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0240.794] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0240.794] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0240.794] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0240.794] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0240.794] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0240.794] SendMessageW (hWnd=0x3016a, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.794] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.795] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0240.795] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0240.795] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0240.795] SendMessageW (hWnd=0x20160, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.795] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0240.795] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20160, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0240.795] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0240.795] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.795] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0240.795] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0240.795] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0240.795] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0240.795] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.795] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0240.795] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0240.795] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.795] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.795] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0240.796] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0240.796] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0240.796] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0240.796] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0240.796] GetParent (hWnd=0x10066) returned 0x0
	[0240.796] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0240.796] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0240.796] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0240.796] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0240.796] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0240.796] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0240.796] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0240.796] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0240.796] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0240.796] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0240.796] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0240.796] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0240.797] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0240.797] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0240.797] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0240.797] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0240.797] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0240.797] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0240.797] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0240.797] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0240.797] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0240.797] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0240.797] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0240.797] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0240.797] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0240.797] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.797] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.797] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0240.797] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.797] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.798] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0240.798] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0240.798] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0240.798] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0240.798] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0240.798] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.798] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.798] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0240.798] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0240.798] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0240.798] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.798] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.798] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0240.798] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.798] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.798] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0240.801] malloc (_Size=0x40) returned 0x63bdf0
	[0240.801] malloc (_Size=0x88) returned 0x4e03b0
	[0240.801] malloc (_Size=0xb0) returned 0x550bd0
	[0240.801] lstrlenW (lpString="mmc.chm") returned 7
	[0240.801] malloc (_Size=0x1c) returned 0x54ac60
	[0240.802] GetParent (hWnd=0x3016a) returned 0x0
	[0240.802] GetActiveWindow () returned 0x0
	[0240.802] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0240.802] GetParent (hWnd=0x3016a) returned 0x0
	[0240.802] GetDesktopWindow () returned 0x10010
	[0240.802] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0240.802] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0240.802] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0240.802] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0240.802] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0240.803] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0240.803] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0240.803] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0240.803] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0240.803] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0240.803] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0240.803] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0240.803] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0240.803] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0240.803] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0240.803] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0240.803] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0240.803] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0240.803] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0240.803] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0240.803] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.803] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.803] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0240.804] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0240.804] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0240.804] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.804] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.804] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0240.804] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0240.804] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0240.804] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.804] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.804] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0240.804] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0240.804] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0240.804] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.804] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.804] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0240.805] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0240.805] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0240.805] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.805] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.805] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0240.805] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0240.805] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0240.805] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.805] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.805] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0240.805] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0240.805] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0240.805] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.805] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.805] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0240.805] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0240.805] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0240.806] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.806] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.806] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0240.806] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0240.806] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0240.806] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0240.806] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0240.806] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.806] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.806] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.806] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.806] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0240.806] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0240.806] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0240.806] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.806] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.807] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.807] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.807] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0240.807] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0240.807] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0240.807] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.807] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.807] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0240.807] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0240.807] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0240.807] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0240.807] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0240.807] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0240.807] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0240.807] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0240.807] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0240.807] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0240.808] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0240.808] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0240.808] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0240.808] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0240.808] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0240.808] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0240.808] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0240.808] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0240.808] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0240.808] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0240.808] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0240.808] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0240.808] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0240.808] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0240.915] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0240.915] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0240.915] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.915] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.915] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0240.915] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0240.915] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0240.915] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.915] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.915] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0240.915] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0240.915] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0240.916] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.916] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.916] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0240.916] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0240.916] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0240.916] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0240.916] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0240.916] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0240.916] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0240.916] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0240.916] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0240.916] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0240.916] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0240.916] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0240.916] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0240.916] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0240.916] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0240.916] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0240.917] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0240.917] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0240.917] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0240.917] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0240.917] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0240.917] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0240.917] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0240.917] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0240.917] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0240.917] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0240.917] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0240.917] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0240.917] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0240.917] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0240.917] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0240.918] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0240.918] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0240.918] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0240.918] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0240.918] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0240.918] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0240.919] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0240.919] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0240.919] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0240.919] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0240.919] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0240.919] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0240.919] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0240.919] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0240.919] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0240.919] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0240.919] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0240.919] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0240.919] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0240.919] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0240.919] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.919] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.919] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0240.920] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0240.920] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0240.920] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0240.920] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0240.920] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0240.920] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.920] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.920] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0240.920] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0240.920] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0240.920] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0240.920] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0240.920] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0240.920] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.920] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.920] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0240.920] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0240.920] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0240.921] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.921] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.921] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0240.921] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0240.921] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0240.921] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0240.921] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0240.921] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0240.921] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0240.921] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0240.921] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0240.921] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0240.921] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0240.921] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0240.921] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0240.921] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0240.921] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0240.922] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.922] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.922] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0240.922] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0240.922] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0240.922] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.922] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.922] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x3019e
	[0240.922] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0240.922] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0240.922] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0240.922] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0240.922] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0240.922] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0240.922] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0240.922] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0240.922] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0240.922] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0240.923] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0240.923] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0240.923] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0240.923] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0240.923] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0240.923] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0240.923] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.923] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0240.923] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0240.923] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0240.923] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0240.923] SendMessageW (hWnd=0x101aa, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.923] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0240.923] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.923] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0240.923] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0240.923] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0240.923] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0240.924] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0240.924] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0240.924] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0240.924] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0240.924] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0240.924] SendMessageW (hWnd=0x3016a, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.924] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.924] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0240.925] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0240.925] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0240.925] SendMessageW (hWnd=0x20160, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.925] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0240.925] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20160, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0240.925] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0240.925] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.925] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0240.925] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0240.925] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0240.925] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0240.925] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0240.925] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0240.925] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0240.925] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0240.925] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0240.925] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0240.925] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0240.926] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0240.926] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0240.926] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0240.926] GetParent (hWnd=0x10066) returned 0x0
	[0240.926] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0240.926] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0240.926] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0240.926] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0240.926] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0240.926] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0240.926] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0240.926] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0240.926] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0240.926] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0240.926] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0240.926] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0240.926] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0240.926] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0240.926] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0240.927] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0240.927] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0240.927] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0240.927] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0240.927] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0240.927] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0240.927] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0240.927] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0240.927] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0240.927] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0240.927] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.927] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.927] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0240.927] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0240.927] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0240.927] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0240.928] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0240.928] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0240.928] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0240.928] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0240.928] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.928] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.928] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0240.928] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0240.928] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0240.928] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.928] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.928] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0240.928] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0240.928] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0240.928] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0241.294] lstrlenW (lpString="") returned 0
	[0241.295] lstrlenW (lpString="C:\\Windows\\System32\\compmgmt.msc") returned 32
	[0241.295] malloc (_Size=0x4e) returned 0x5422d0
	[0241.295] malloc (_Size=0x22) returned 0x54ac30
	[0241.295] free (_Block=0x5422d0) 
	[0241.295] free (_Block=0x54ac30) 
	[0241.295] lstrlenW (lpString="") returned 0
	[0241.295] malloc (_Size=0x28) returned 0x54ac30
	[0241.296] malloc (_Size=0x28) returned 0x54ac30
	[0241.296] lstrlenW (lpString="") returned 0
	[0241.296] lstrlenW (lpString="") returned 0
	[0241.296] lstrlenW (lpString="") returned 0
	[0241.296] FindResourceW (hModule=0x7fef7fc0000, lpName=0x10, lpType=0x6) returned 0x1f20480
	[0241.296] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xfc, lpBuffer=0x21dee0, cchBufferMax=256 | out: lpBuffer="Computer Management (Local)") returned 0x1b
	[0241.296] lstrlenW (lpString="Computer Management (Local)") returned 27
	[0241.296] malloc (_Size=0x44) returned 0x63bee0
	[0241.297] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0241.298] InvalidateRect (hWnd=0x101a8, lpRect=0x0, bErase=1) returned 1
	[0241.298] InvalidateRect (hWnd=0x301b2, lpRect=0x0, bErase=1) returned 1
	[0241.298] InvalidateRect (hWnd=0x10202, lpRect=0x0, bErase=1) returned 1
	[0241.298] free (_Block=0x63bee0) 
	[0241.298] malloc (_Size=0x420) returned 0x5521e0
	[0241.298] SetRectEmpty (in: lprc=0x552288 | out: lprc=0x552288) returned 1
	[0241.298] malloc (_Size=0x18) returned 0x54d630
	[0241.299] FindResourceW (hModule=0xff6d0000, lpName=0x9, lpType=0x6) returned 0xd07e8
	[0241.299] LoadStringW (in: hInstance=0xff6d0000, uID=0x81, lpBuffer=0x21e2d0, cchBufferMax=256 | out: lpBuffer="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 0x6a
	[0241.299] lstrlenW (lpString="\nConsole\nConsole\nMicrosoft Management Console Files (*.msc)\n.msc\nMSCFile\nMicrosoft Common Console Document") returned 106
	[0241.299] malloc (_Size=0xe2) returned 0x550c90
	[0241.299] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0241.299] LoadIconW (hInstance=0xff6d0000, lpIconName=0x81) returned 0x101d1
	[0241.300] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0241.300] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x21e340 | out: lpWndClass=0x21e340) returned 1
	[0241.300] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x21e450 | out: lpWndClass=0x21e450) returned 1
	[0241.300] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0241.300] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x21e330 | out: lpWndClass=0x21e330) returned 1
	[0241.301] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x220, wParam=0x0, lParam=0x21e4b0) returned 0x1021e
	[0241.301] GetParent (hWnd=0x1021e) returned 0x10012
	[0241.302] SetWindowLongPtrW (hWnd=0x1021e, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0241.302] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x1021e, lParam=0x21d7e0) returned 0x0
	[0241.303] DefMDIChildProcW (hWnd=0x1021e, uMsg=0x81, wParam=0x0, lParam=0x21d8c0) returned 0x1
	[0241.303] FindResourceW (hModule=0xff6d0000, lpName=0x81, lpType=0xe) returned 0xff897948
	[0241.303] GetClassInfoW (in: hInstance=0xff6d0000, lpClassName="MMCChildFrm", lpWndClass=0x21d310 | out: lpWndClass=0x21d310) returned 1
	[0241.303] SetWindowLongW (hWnd=0x1021e, nIndex=-20, dwNewLong=320) returned 320
	[0241.304] DefMDIChildProcW (hWnd=0x1021e, uMsg=0x7c, wParam=0xffffffffffffffec, lParam=0x21d3b0) returned 0x0
	[0241.304] DefMDIChildProcW (hWnd=0x1021e, uMsg=0x7d, wParam=0xffffffffffffffec, lParam=0x21d3b0) returned 0x0
	[0241.305] DefMDIChildProcW (hWnd=0x1021e, uMsg=0xd, wParam=0x104, lParam=0x20fa9e0) returned 0x0
	[0241.305] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x21cc28) returned 0x0
	[0241.306] DefMDIChildProcW (hWnd=0x1021e, uMsg=0x83, wParam=0x0, lParam=0x21d930) returned 0x0
	[0241.307] DefMDIChildProcW (hWnd=0x1021e, uMsg=0x1, wParam=0x0, lParam=0x21d8b0) returned 0x0
	[0241.307] malloc (_Size=0x5a0) returned 0x552610
	[0241.307] malloc (_Size=0x18) returned 0x54d650
	[0241.307] malloc (_Size=0x20) returned 0x54ac30
	[0241.307] malloc (_Size=0x18) returned 0x54d670
	[0241.307] malloc (_Size=0x18) returned 0x54d690
	[0241.307] malloc (_Size=0x18) returned 0x54d6b0
	[0241.307] malloc (_Size=0x18) returned 0x54d6d0
	[0241.307] malloc (_Size=0x18) returned 0x54d6f0
	[0241.307] malloc (_Size=0x18) returned 0x54d710
	[0241.389] malloc (_Size=0x120) returned 0x552bc0
	[0241.390] malloc (_Size=0x18) returned 0x54d730
	[0241.390] malloc (_Size=0x70) returned 0x552cf0
	[0241.390] malloc (_Size=0x20) returned 0x54ac90
	[0241.390] malloc (_Size=0x58) returned 0x5422d0
	[0241.390] malloc (_Size=0xe0) returned 0x552d70
	[0241.390] CreateWindowExW (dwExStyle=0x0, lpClassName="MMCViewWindow", lpWindowName=0x0, dwStyle=0x52000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1021e, hMenu=0xe900, hInstance=0xff6d0000, lpParam=0x21e5b0) returned 0x2022c
	[0241.392] malloc (_Size=0x100) returned 0x547790
	[0241.392] GetParent (hWnd=0x2022c) returned 0x10012
	[0241.392] SetWindowLongPtrW (hWnd=0x2022c, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0241.432] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x2022c, lParam=0x21caf0) returned 0x0
	[0241.433] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x81, wParam=0x0, lParam=0x21cbd0) returned 0x1
	[0241.433] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x83, wParam=0x0, lParam=0x21cc40) returned 0x0
	[0241.434] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x1, wParam=0x0, lParam=0x21cbd0) returned 0x0
	[0241.434] IsWindowVisible (hWnd=0x1018e) returned 0
	[0241.434] IsWindowVisible (hWnd=0x101a8) returned 0
	[0241.434] IsWindowVisible (hWnd=0x2019a) returned 0
	[0241.434] IsWindowVisible (hWnd=0x301b2) returned 0
	[0241.434] IsWindowVisible (hWnd=0x10202) returned 0
	[0241.434] IsWindowVisible (hWnd=0x2022c) returned 0
	[0241.434] IsWindowVisible (hWnd=0x1018e) returned 0
	[0241.434] IsWindowVisible (hWnd=0x101a8) returned 0
	[0241.434] IsWindowVisible (hWnd=0x2019a) returned 0
	[0241.434] IsWindowVisible (hWnd=0x301b2) returned 0
	[0241.435] IsWindowVisible (hWnd=0x10202) returned 0
	[0241.435] IsWindowVisible (hWnd=0x2022c) returned 0
	[0241.435] IsWindowVisible (hWnd=0x1018e) returned 0
	[0241.435] IsWindowVisible (hWnd=0x101a8) returned 0
	[0241.435] IsWindowVisible (hWnd=0x2019a) returned 0
	[0241.435] IsWindowVisible (hWnd=0x301b2) returned 0
	[0241.435] IsWindowVisible (hWnd=0x10202) returned 0
	[0241.435] IsWindowVisible (hWnd=0x2022c) returned 0
	[0241.435] GetParent (hWnd=0x2022c) returned 0x1021e
	[0241.435] GetParent (hWnd=0x1021e) returned 0xd015c
	[0241.435] CreateWindowExW (dwExStyle=0x20000, lpClassName="STATIC", lpWindowName=0x0, dwStyle=0x4400428d, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x2022c, hMenu=0x31f7, hInstance=0xff6d0000, lpParam=0x0) returned 0x10232
	[0241.436] GetParent (hWnd=0x10232) returned 0x10012
	[0241.436] SetWindowLongPtrW (hWnd=0x10232, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6d61b4
	[0241.436] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10232, lParam=0x21bce0) returned 0x0
	[0241.436] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x81, wParam=0x0, lParam=0x21bdc0) returned 0x1
	[0241.437] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x83, wParam=0x0, lParam=0x21be20) returned 0x0
	[0241.437] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x1, wParam=0x0, lParam=0x21bdc0) returned 0x0
	[0241.437] GetWindowDC (hWnd=0x10232) returned 0xc01083a
	[0241.438] malloc (_Size=0x88) returned 0x4e0560
	[0241.438] malloc (_Size=0x100) returned 0x5478a0
	[0241.438] SelectObject (hdc=0xc01083a, h=0x30a09c1) returned 0x18a002e
	[0241.438] GetWindowLongW (hWnd=0x10232, nIndex=-20) returned 131072
	[0241.438] GetWindowLongW (hWnd=0x10232, nIndex=-16) returned 1140867725
	[0241.438] SelectObject (hdc=0xc01083a, h=0x18a002e) returned 0x30a09c1
	[0241.438] free (_Block=0x4e0560) 
	[0241.438] free (_Block=0x5478a0) 
	[0241.438] ReleaseDC (hWnd=0x10232, hDC=0xc01083a) returned 1
	[0241.439] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.439] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x3, wParam=0x0, lParam=0x10001) returned 0x0
	[0241.440] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x210, wParam=0x31f70001, lParam=0x10232) returned 0x0
	[0241.440] lstrlenW (lpString="SysTreeView32") returned 13
	[0241.440] malloc (_Size=0x28) returned 0x54ac00
	[0241.440] malloc (_Size=0x20) returned 0x54ad20
	[0241.440] malloc (_Size=0x18) returned 0x54d750
	[0241.441] malloc (_Size=0x18) returned 0x54d770
	[0241.441] malloc (_Size=0x30) returned 0x54b730
	[0241.441] malloc (_Size=0x30) returned 0x54b770
	[0241.441] malloc (_Size=0x28) returned 0x54acf0
	[0241.441] malloc (_Size=0x30) returned 0x54b7b0
	[0241.441] malloc (_Size=0x18) returned 0x54d790
	[0241.441] malloc (_Size=0x20) returned 0x54ad80
	[0241.441] malloc (_Size=0x18) returned 0x54d7b0
	[0241.441] CreateWindowExW (dwExStyle=0x200, lpClassName="SysTreeView32", lpWindowName=0x0, dwStyle=0x52000029, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x2022c, hMenu=0x31f1, hInstance=0xff6d0000, lpParam=0x21c488) returned 0x10234
	[0241.441] GetParent (hWnd=0x10234) returned 0x10012
	[0241.442] SetWindowLongPtrW (hWnd=0x10234, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6c7c18
	[0241.442] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10234, lParam=0x21bba0) returned 0x0
	[0241.442] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x81, wParam=0x0, lParam=0x21bc80) returned 0x1
	[0241.442] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x83, wParam=0x0, lParam=0x21bcf0) returned 0x0
	[0241.443] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x1, wParam=0x0, lParam=0x21bc80) returned 0x0
	[0241.444] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x55, wParam=0x10234, lParam=0x3) returned 0x2
	[0241.444] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.445] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0241.445] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0241.446] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0241.447] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0241.447] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0241.448] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0241.449] GetWindowLongPtrW (hWnd=0x10236, nIndex=-4) returned 0x7fefc6af450
	[0241.449] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x0
	[0241.449] SetPropW (hWnd=0x10236, lpString="AfxOldWndProc423", hData=0x7fefc6af450) returned 1
	[0241.449] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.449] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0241.449] SetWindowLongPtrW (hWnd=0x10236, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7fefc6af450
	[0241.449] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10236, lParam=0x21ac30) returned 0x0
	[0241.449] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.449] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x81, wParam=0x0, lParam=0x21ad10) returned 0x1
	[0241.449] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.449] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x83, wParam=0x0, lParam=0x21ad90) returned 0x0
	[0241.449] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.449] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x1, wParam=0x0, lParam=0x21ad10) returned 0x0
	[0241.450] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x55, wParam=0x10236, lParam=0x3) returned 0x2
	[0241.450] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.450] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.451] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x21a800) returned 0x0
	[0241.451] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.451] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x21a800) returned 0x0
	[0241.451] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.451] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.451] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.451] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.451] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.451] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x432, wParam=0x0, lParam=0x21b3d0) returned 0x1
	[0241.452] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x55, wParam=0x10236, lParam=0x3) returned 0x2
	[0241.452] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.452] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x30, wParam=0x3d0a09ca, lParam=0x1) returned 0x1
	[0241.452] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.452] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x403, wParam=0x3, lParam=0x1f4) returned 0x0
	[0241.452] IsWindowVisible (hWnd=0x1018e) returned 0
	[0241.452] IsWindowVisible (hWnd=0x101a8) returned 0
	[0241.452] IsWindowVisible (hWnd=0x2019a) returned 0
	[0241.452] IsWindowVisible (hWnd=0x301b2) returned 0
	[0241.452] IsWindowVisible (hWnd=0x10202) returned 0
	[0241.452] IsWindowVisible (hWnd=0x2022c) returned 0
	[0241.452] IsWindowVisible (hWnd=0x10234) returned 0
	[0241.453] IsWindowVisible (hWnd=0x1018e) returned 0
	[0241.453] IsWindowVisible (hWnd=0x101a8) returned 0
	[0241.453] IsWindowVisible (hWnd=0x2019a) returned 0
	[0241.453] IsWindowVisible (hWnd=0x301b2) returned 0
	[0241.453] IsWindowVisible (hWnd=0x10202) returned 0
	[0241.453] IsWindowVisible (hWnd=0x2022c) returned 0
	[0241.453] IsWindowVisible (hWnd=0x10234) returned 0
	[0241.453] IsWindowVisible (hWnd=0x1018e) returned 0
	[0241.453] IsWindowVisible (hWnd=0x101a8) returned 0
	[0241.453] IsWindowVisible (hWnd=0x2019a) returned 0
	[0241.453] IsWindowVisible (hWnd=0x301b2) returned 0
	[0241.453] IsWindowVisible (hWnd=0x10202) returned 0
	[0241.453] IsWindowVisible (hWnd=0x2022c) returned 0
	[0241.453] IsWindowVisible (hWnd=0x10234) returned 0
	[0241.454] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x31a, wParam=0xffffffffffffffff, lParam=0x80000001) returned 0x0
	[0241.454] GetParent (hWnd=0x10234) returned 0x2022c
	[0241.454] GetParent (hWnd=0x2022c) returned 0x1021e
	[0241.454] GetParent (hWnd=0x2022c) returned 0x1021e
	[0241.454] GetParent (hWnd=0x1021e) returned 0xd015c
	[0241.454] GetDlgItem (hDlg=0x1021e, nIDDlgItem=59648) returned 0x2022c
	[0241.454] GetParent (hWnd=0x2022c) returned 0x1021e
	[0241.459] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x1109, wParam=0x0, lParam=0x4901d0) returned 0x0
	[0241.459] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0241.460] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0241.460] malloc (_Size=0x60) returned 0x550e30
	[0241.460] malloc (_Size=0x18) returned 0x54d7d0
	[0241.460] GetLastError () returned 0x36b7
	[0241.460] SetLastError (dwErrCode=0x36b7) 
	[0241.461] DeleteObject (ho=0x3f0509c6) returned 1
	[0241.461] GetLastError () returned 0x0
	[0241.461] SetLastError (dwErrCode=0x0) 
	[0241.461] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.462] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.462] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x210, wParam=0x31f10001, lParam=0x10234) returned 0x0
	[0241.463] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.463] malloc (_Size=0x20) returned 0x54ae10
	[0241.463] malloc (_Size=0x18) returned 0x54d7f0
	[0241.463] malloc (_Size=0x20) returned 0x54ae40
	[0241.463] malloc (_Size=0x18) returned 0x54d810
	[0241.463] SetWindowPos (hWnd=0x10234, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0241.513] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x46, wParam=0x0, lParam=0x21c420) returned 0x0
	[0241.572] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0241.667] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x47, wParam=0x0, lParam=0x21c420) returned 0x0
	[0241.667] malloc (_Size=0x3a0) returned 0x553050
	[0241.667] malloc (_Size=0x20) returned 0x54ae70
	[0241.667] malloc (_Size=0x18) returned 0x54d830
	[0241.667] LoadResource (hModule=0xff6d0000, hResInfo=0xff897758) returned 0xff8c7278
	[0241.667] LockResource (hResData=0xff8c7278) returned 0xff8c7278
	[0241.667] malloc (_Size=0x68) returned 0x550ea0
	[0241.668] GetSysColor (nIndex=18) returned 0x0
	[0241.668] GetSysColor (nIndex=18) returned 0x0
	[0241.668] GetSysColor (nIndex=18) returned 0x0
	[0241.668] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0241.668] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0241.668] GetSysColor (nIndex=15) returned 0xf0f0f0
	[0241.668] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0241.668] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0241.668] GetSysColor (nIndex=16) returned 0xa0a0a0
	[0241.668] GetSysColor (nIndex=20) returned 0xffffff
	[0241.668] GetSysColor (nIndex=20) returned 0xffffff
	[0241.668] GetSysColor (nIndex=20) returned 0xffffff
	[0241.668] GetDC (hWnd=0x0) returned 0x1401007f
	[0241.668] CreateCompatibleBitmap (hdc=0x1401007f, cx=16, cy=8) returned 0x10509f2
	[0241.668] CreateCompatibleDC (hdc=0x1401007f) returned 0x10109f3
	[0241.668] SelectObject (hdc=0x10109f3, h=0x10509f2) returned 0x185000f
	[0241.668] StretchDIBits (hdc=0x10109f3, xDest=0, yDest=0, DestWidth=16, DestHeight=8, xSrc=0, ySrc=0, SrcWidth=16, SrcHeight=8, lpBits=0xff8c72e0, lpbmi=0x550ea0, iUsage=0x0, rop=0xcc0020) returned 8
	[0241.668] SelectObject (hdc=0x10109f3, h=0x185000f) returned 0x10509f2
	[0241.668] DeleteDC (hdc=0x10109f3) returned 1
	[0241.668] ReleaseDC (hWnd=0x0, hDC=0x1401007f) returned 1
	[0241.668] free (_Block=0x550ea0) 
	[0241.668] ImageList_Create (cx=8, cy=8, flags=0xfe, cInitial=2, cGrow=2) returned 0x4b9980
	[0241.669] GetLastError () returned 0x0
	[0241.669] SetLastError (dwErrCode=0x0) 
	[0241.669] DeleteObject (ho=0x10509f2) returned 1
	[0241.669] GetLastError () returned 0x0
	[0241.669] SetLastError (dwErrCode=0x0) 
	[0241.669] malloc (_Size=0x28) returned 0x54aea0
	[0241.669] malloc (_Size=0x30) returned 0x54b7f0
	[0241.669] malloc (_Size=0x1f0) returned 0x553d10
	[0241.669] lstrlenW (lpString="SysListView32") returned 13
	[0241.669] malloc (_Size=0x28) returned 0x54aed0
	[0241.669] malloc (_Size=0x18) returned 0x54d850
	[0241.669] malloc (_Size=0x20) returned 0x54af00
	[0241.670] malloc (_Size=0x30) returned 0x54b830
	[0241.670] CreateWindowExW (dwExStyle=0x200, lpClassName="SysListView32", lpWindowName=0x0, dwStyle=0x5600024d, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x2022c, hMenu=0x31f2, hInstance=0xff6d0000, lpParam=0x21e5b0) returned 0x10260
	[0241.670] GetParent (hWnd=0x10260) returned 0x10012
	[0241.670] SetWindowLongPtrW (hWnd=0x10260, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6b5944
	[0241.670] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10260, lParam=0x21bc20) returned 0x0
	[0241.671] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x81, wParam=0x0, lParam=0x21bd00) returned 0x1
	[0241.671] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x83, wParam=0x0, lParam=0x21bd70) returned 0x0
	[0241.672] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1, wParam=0x0, lParam=0x21bd00) returned 0x0
	[0241.673] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.673] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10262, lParam=0x21aaa0) returned 0x0
	[0241.674] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x55, wParam=0x10262, lParam=0x3) returned 0x2
	[0241.675] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.675] GetParent (hWnd=0x10262) returned 0x10260
	[0241.675] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x210, wParam=0x1, lParam=0x10262) returned 0x0
	[0241.676] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10264, lParam=0x21a8b0) returned 0x0
	[0241.677] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x55, wParam=0x10264, lParam=0x3) returned 0x2
	[0241.678] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.679] GetParent (hWnd=0x10264) returned 0x10260
	[0241.679] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x210, wParam=0x1, lParam=0x10264) returned 0x0
	[0241.679] CallNextHookEx (hhk=0x101ab, nCode=4, wParam=0x10264, lParam=0x0) returned 0x0
	[0241.679] GetParent (hWnd=0x10264) returned 0x10260
	[0241.679] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x210, wParam=0x2, lParam=0x10264) returned 0x0
	[0241.680] GetDlgCtrlID (hWnd=0x10262) returned 0
	[0241.681] GetParent (hWnd=0x10262) returned 0x10260
	[0241.681] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x4e, wParam=0x0, lParam=0x21ab00) returned 0x0
	[0241.681] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x46, wParam=0x0, lParam=0x218ff0) returned 0x0
	[0241.682] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x83, wParam=0x1, lParam=0x218fc0) returned 0x0
	[0241.683] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x47, wParam=0x0, lParam=0x218ff0) returned 0x0
	[0241.685] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x46, wParam=0x0, lParam=0x218ff0) returned 0x0
	[0241.685] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x83, wParam=0x1, lParam=0x218fc0) returned 0x0
	[0241.686] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x47, wParam=0x0, lParam=0x218ff0) returned 0x0
	[0241.688] GetWindowLongPtrW (hWnd=0x20264, nIndex=-4) returned 0x7fefc6af450
	[0241.688] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x0
	[0241.688] SetPropW (hWnd=0x20264, lpString="AfxOldWndProc423", hData=0x7fefc6af450) returned 1
	[0241.688] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.688] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc04a
	[0241.688] SetWindowLongPtrW (hWnd=0x20264, nIndex=-4, dwNewLong=0x7fef83ae9d0) returned 0x7fefc6af450
	[0241.688] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x20264, lParam=0x21ab00) returned 0x0
	[0241.688] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.688] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x81, wParam=0x0, lParam=0x21abe0) returned 0x1
	[0241.688] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.688] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x83, wParam=0x0, lParam=0x21ac60) returned 0x0
	[0241.688] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.688] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x1, wParam=0x0, lParam=0x21abe0) returned 0x0
	[0241.688] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.688] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x21a6d0) returned 0x0
	[0241.689] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.689] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x21a6d0) returned 0x0
	[0241.689] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.689] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.689] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.689] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.689] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.689] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x432, wParam=0x0, lParam=0x21b2a0) returned 0x1
	[0241.690] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x55, wParam=0x20264, lParam=0x3) returned 0x2
	[0241.690] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.690] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x30, wParam=0x60a09f5, lParam=0x0) returned 0x1
	[0241.690] IsWindowVisible (hWnd=0x1018e) returned 0
	[0241.690] IsWindowVisible (hWnd=0x101a8) returned 0
	[0241.690] IsWindowVisible (hWnd=0x2019a) returned 0
	[0241.690] IsWindowVisible (hWnd=0x301b2) returned 0
	[0241.690] IsWindowVisible (hWnd=0x10202) returned 0
	[0241.690] IsWindowVisible (hWnd=0x2022c) returned 0
	[0241.690] IsWindowVisible (hWnd=0x10234) returned 0
	[0241.690] IsWindowVisible (hWnd=0x10260) returned 0
	[0241.690] IsWindowVisible (hWnd=0x1018e) returned 0
	[0241.691] IsWindowVisible (hWnd=0x101a8) returned 0
	[0241.691] IsWindowVisible (hWnd=0x2019a) returned 0
	[0241.691] IsWindowVisible (hWnd=0x301b2) returned 0
	[0241.691] IsWindowVisible (hWnd=0x10202) returned 0
	[0241.691] IsWindowVisible (hWnd=0x2022c) returned 0
	[0241.691] IsWindowVisible (hWnd=0x10234) returned 0
	[0241.691] IsWindowVisible (hWnd=0x10260) returned 0
	[0241.691] IsWindowVisible (hWnd=0x1018e) returned 0
	[0241.691] IsWindowVisible (hWnd=0x101a8) returned 0
	[0241.691] IsWindowVisible (hWnd=0x2019a) returned 0
	[0241.691] IsWindowVisible (hWnd=0x301b2) returned 0
	[0241.691] IsWindowVisible (hWnd=0x10202) returned 0
	[0241.691] IsWindowVisible (hWnd=0x2022c) returned 0
	[0241.691] IsWindowVisible (hWnd=0x10234) returned 0
	[0241.691] IsWindowVisible (hWnd=0x10260) returned 0
	[0241.691] malloc (_Size=0x400) returned 0x553f10
	[0241.691] GetParent (hWnd=0x10260) returned 0x2022c
	[0241.691] GetParent (hWnd=0x2022c) returned 0x1021e
	[0241.691] GetParent (hWnd=0x2022c) returned 0x1021e
	[0241.692] GetParent (hWnd=0x1021e) returned 0xd015c
	[0241.692] GetDlgItem (hDlg=0x1021e, nIDDlgItem=59648) returned 0x2022c
	[0241.692] GetParent (hWnd=0x2022c) returned 0x1021e
	[0241.692] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1036, wParam=0x0, lParam=0x4030) returned 0x0
	[0241.693] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.693] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x41c, wParam=0x0, lParam=0x0) returned 0x0
	[0241.693] malloc (_Size=0x60) returned 0x550ea0
	[0241.693] malloc (_Size=0x18) returned 0x54d870
	[0241.693] malloc (_Size=0x20) returned 0x54af30
	[0241.693] malloc (_Size=0x18) returned 0x54d890
	[0241.694] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0241.694] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0241.694] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x434, wParam=0x0, lParam=0x21b480) returned 0x0
	[0241.694] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x101f, wParam=0x0, lParam=0x0) returned 0x10262
	[0241.695] GetParent (hWnd=0x10262) returned 0x10260
	[0241.695] SetWindowLongPtrW (hWnd=0x10262, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6bbf00
	[0241.695] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0241.696] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0241.696] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0241.697] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x210, wParam=0x31f20001, lParam=0x10260) returned 0x0
	[0241.697] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0241.791] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x4bac20
	[0241.792] ImageList_Create (cx=32, cy=32, flags=0x21, cInitial=20, cGrow=10) returned 0x4bb370
	[0241.793] malloc (_Size=0x100) returned 0x5478a0
	[0241.794] GetLastError () returned 0x6
	[0241.794] SetLastError (dwErrCode=0x6) 
	[0241.794] GetLastError () returned 0x6
	[0241.794] SetLastError (dwErrCode=0x6) 
	[0241.795] GetLastError () returned 0x6
	[0241.795] SetLastError (dwErrCode=0x6) 
	[0241.795] GetLastError () returned 0x6
	[0241.795] SetLastError (dwErrCode=0x6) 
	[0241.795] malloc (_Size=0x8) returned 0x54b4b0
	[0241.795] malloc (_Size=0x150) returned 0x553f10
	[0241.795] malloc (_Size=0x8) returned 0x5540a0
	[0241.795] malloc (_Size=0x8) returned 0x5540b0
	[0241.795] malloc (_Size=0x8) returned 0x5540c0
	[0241.795] malloc (_Size=0x8) returned 0x5540d0
	[0241.795] malloc (_Size=0x8) returned 0x5540e0
	[0241.795] malloc (_Size=0x8) returned 0x5540f0
	[0241.795] malloc (_Size=0x8) returned 0x554100
	[0241.795] malloc (_Size=0x8) returned 0x554110
	[0241.795] GetLastError () returned 0x6
	[0241.796] SetLastError (dwErrCode=0x6) 
	[0241.796] DeleteObject (ho=0x2050a12) returned 1
	[0241.796] GetLastError () returned 0x0
	[0241.796] SetLastError (dwErrCode=0x0) 
	[0241.796] GetLastError () returned 0x0
	[0241.796] SetLastError (dwErrCode=0x0) 
	[0241.796] DeleteObject (ho=0x2050a10) returned 1
	[0241.796] GetLastError () returned 0x0
	[0241.796] SetLastError (dwErrCode=0x0) 
	[0241.806] GetLastError () returned 0x0
	[0241.806] SetLastError (dwErrCode=0x0) 
	[0241.806] DeleteObject (ho=0x2050a0e) returned 1
	[0241.807] GetLastError () returned 0x0
	[0241.807] SetLastError (dwErrCode=0x0) 
	[0241.807] GetLastError () returned 0x0
	[0241.807] SetLastError (dwErrCode=0x0) 
	[0241.807] DeleteObject (ho=0x1050a0c) returned 1
	[0241.807] GetLastError () returned 0x0
	[0241.808] SetLastError (dwErrCode=0x0) 
	[0241.808] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1003, wParam=0x1, lParam=0x4bac20) returned 0x0
	[0241.808] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10272, lParam=0x21b330) returned 0x0
	[0241.809] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x55, wParam=0x10272, lParam=0x3) returned 0x2
	[0241.810] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0241.810] GetParent (hWnd=0x10272) returned 0x10260
	[0241.810] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x210, wParam=0x1, lParam=0x10272) returned 0x0
	[0241.810] CallNextHookEx (hhk=0x101ab, nCode=4, wParam=0x10272, lParam=0x0) returned 0x0
	[0241.811] GetParent (hWnd=0x10272) returned 0x10260
	[0241.811] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x210, wParam=0x2, lParam=0x10272) returned 0x0
	[0241.813] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1208, wParam=0x0, lParam=0x4bac20) returned 0x0
	[0241.814] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1003, wParam=0x0, lParam=0x4bb370) returned 0x0
	[0241.814] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1208, wParam=0x0, lParam=0x4b9980) returned 0x4bac20
	[0241.815] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1027, wParam=0x0, lParam=0x0) returned 0x0
	[0241.815] GetWindowLongW (hWnd=0x10260, nIndex=-16) returned 1445986893
	[0241.815] malloc (_Size=0x20) returned 0x54af60
	[0241.815] malloc (_Size=0x18) returned 0x54d8b0
	[0241.815] malloc (_Size=0x18) returned 0x54d8d0
	[0241.815] malloc (_Size=0x20) returned 0x54af90
	[0241.815] malloc (_Size=0x18) returned 0x54d8f0
	[0241.815] malloc (_Size=0x18) returned 0x54d910
	[0241.816] CreateWindowExW (dwExStyle=0x200, lpClassName="AfxFrameOrView42u", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x2022c, hMenu=0x31fc, hInstance=0xff6d0000, lpParam=0x21c488) returned 0x20272
	[0241.816] GetParent (hWnd=0x20272) returned 0x10012
	[0241.816] SetWindowLongPtrW (hWnd=0x20272, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0241.816] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x20272, lParam=0x21bb90) returned 0x0
	[0241.817] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x81, wParam=0x0, lParam=0x21bc70) returned 0x1
	[0241.818] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x83, wParam=0x0, lParam=0x21bcf0) returned 0x0
	[0241.818] GetWindowLongW (hWnd=0x20272, nIndex=-16) returned 1073741824
	[0241.818] SetWindowLongW (hWnd=0x20272, nIndex=-16, dwNewLong=1107296256) returned 1073741824
	[0241.819] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x21b6b0) returned 0x0
	[0241.820] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x21b6b0) returned 0x0
	[0241.820] malloc (_Size=0x400) returned 0x554470
	[0241.820] malloc (_Size=0x400) returned 0x554470
	[0241.820] malloc (_Size=0x400) returned 0x554470
	[0241.821] malloc (_Size=0x400) returned 0x554470
	[0241.821] malloc (_Size=0x400) returned 0x554470
	[0241.821] malloc (_Size=0x400) returned 0x554470
	[0241.821] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x1, wParam=0x0, lParam=0x21bc70) returned 0x0
	[0241.821] IsWindowVisible (hWnd=0x1018e) returned 0
	[0241.821] IsWindowVisible (hWnd=0x101a8) returned 0
	[0241.821] IsWindowVisible (hWnd=0x2019a) returned 0
	[0241.821] IsWindowVisible (hWnd=0x301b2) returned 0
	[0241.821] IsWindowVisible (hWnd=0x10202) returned 0
	[0241.821] IsWindowVisible (hWnd=0x2022c) returned 0
	[0241.821] IsWindowVisible (hWnd=0x10234) returned 0
	[0241.821] IsWindowVisible (hWnd=0x10260) returned 0
	[0241.821] IsWindowVisible (hWnd=0x20272) returned 0
	[0241.821] IsWindowVisible (hWnd=0x1018e) returned 0
	[0241.821] IsWindowVisible (hWnd=0x101a8) returned 0
	[0241.821] IsWindowVisible (hWnd=0x2019a) returned 0
	[0241.821] IsWindowVisible (hWnd=0x301b2) returned 0
	[0241.821] IsWindowVisible (hWnd=0x10202) returned 0
	[0241.822] IsWindowVisible (hWnd=0x2022c) returned 0
	[0241.822] IsWindowVisible (hWnd=0x10234) returned 0
	[0241.822] IsWindowVisible (hWnd=0x10260) returned 0
	[0241.822] IsWindowVisible (hWnd=0x20272) returned 0
	[0241.822] IsWindowVisible (hWnd=0x1018e) returned 0
	[0241.822] IsWindowVisible (hWnd=0x101a8) returned 0
	[0241.822] IsWindowVisible (hWnd=0x2019a) returned 0
	[0241.822] IsWindowVisible (hWnd=0x301b2) returned 0
	[0241.822] IsWindowVisible (hWnd=0x10202) returned 0
	[0241.822] IsWindowVisible (hWnd=0x2022c) returned 0
	[0241.822] IsWindowVisible (hWnd=0x10234) returned 0
	[0241.822] IsWindowVisible (hWnd=0x10260) returned 0
	[0241.822] IsWindowVisible (hWnd=0x20272) returned 0
	[0241.822] malloc (_Size=0x60) returned 0x550f10
	[0241.823] malloc (_Size=0x60) returned 0x550f80
	[0241.823] malloc (_Size=0x60) returned 0x550ff0
	[0241.825] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10274, lParam=0x21ad00) returned 0x0
	[0241.826] GetParent (hWnd=0x10274) returned 0x20272
	[0241.826] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x210, wParam=0x1, lParam=0x10274) returned 0x0
	[0241.826] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10276, lParam=0x21ad50) returned 0x0
	[0241.827] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10278, lParam=0x21aa20) returned 0x0
	[0241.827] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x1027a, lParam=0x21a980) returned 0x0
	[0242.089] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x1027c, lParam=0x21aa20) returned 0x0
	[0242.110] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x1027e, lParam=0x21a980) returned 0x0
	[0242.121] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x3cda050
	[0242.121] GetWindowLongW (hWnd=0x20272, nIndex=-20) returned 512
	[0242.122] GetLastError () returned 0x6
	[0242.123] SetLastError (dwErrCode=0x6) 
	[0242.123] GetLastError () returned 0x6
	[0242.123] SetLastError (dwErrCode=0x6) 
	[0242.123] GetLastError () returned 0x6
	[0242.123] SetLastError (dwErrCode=0x6) 
	[0242.123] DeleteObject (ho=0x1050a18) returned 1
	[0242.123] GetLastError () returned 0x0
	[0242.123] SetLastError (dwErrCode=0x0) 
	[0242.124] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0242.124] GetParent (hWnd=0x10274) returned 0x20272
	[0242.124] MoveWindow (hWnd=0x10274, X=0, Y=21, nWidth=0, nHeight=-21, bRepaint=1) returned 1
	[0242.125] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0242.126] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x210, wParam=0x31fc0001, lParam=0x20272) returned 0x0
	[0242.126] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0242.126] malloc (_Size=0x20) returned 0x54afc0
	[0242.126] malloc (_Size=0x18) returned 0x54d930
	[0242.127] malloc (_Size=0x20) returned 0x5544a0
	[0242.127] malloc (_Size=0x18) returned 0x54d950
	[0242.127] malloc (_Size=0x20) returned 0x5544d0
	[0242.127] malloc (_Size=0x18) returned 0x54d970
	[0242.127] SetWindowPos (hWnd=0x20272, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0242.127] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x46, wParam=0x0, lParam=0x21c420) returned 0x0
	[0242.128] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.128] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x47, wParam=0x0, lParam=0x21c420) returned 0x0
	[0242.129] CreateWindowExW (dwExStyle=0x0, lpClassName="AMCCustomTab", lpWindowName=0x0, dwStyle=0x50000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x2022c, hMenu=0x31fa, hInstance=0xff6d0000, lpParam=0x0) returned 0x10280
	[0242.129] GetParent (hWnd=0x10280) returned 0x10012
	[0242.129] SetWindowLongPtrW (hWnd=0x10280, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x77bdb0ac
	[0242.129] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10280, lParam=0x21bc60) returned 0x0
	[0242.130] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x81, wParam=0x0, lParam=0x21bd40) returned 0x1
	[0242.130] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x83, wParam=0x0, lParam=0x21bdb0) returned 0x0
	[0242.131] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x1, wParam=0x0, lParam=0x21bd40) returned 0x0
	[0242.131] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0242.131] GetDC (hWnd=0x10280) returned 0xc01083a
	[0242.131] malloc (_Size=0x88) returned 0x4e0560
	[0242.131] malloc (_Size=0x100) returned 0x5479b0
	[0242.131] SelectObject (hdc=0xc01083a, h=0x0) returned 0x0
	[0242.132] SelectObject (hdc=0xc01083a, h=0x0) returned 0x0
	[0242.132] free (_Block=0x4e0560) 
	[0242.132] free (_Block=0x5479b0) 
	[0242.132] ReleaseDC (hWnd=0x10280, hDC=0xc01083a) returned 1
	[0242.132] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0242.133] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x210, wParam=0x31fa0001, lParam=0x10280) returned 0x0
	[0242.134] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0242.134] GetDC (hWnd=0x0) returned 0x8010666
	[0242.134] malloc (_Size=0x88) returned 0x4e0560
	[0242.134] malloc (_Size=0x100) returned 0x5479b0
	[0242.134] SelectObject (hdc=0x8010666, h=0x170a0a17) returned 0x18a002e
	[0242.136] SelectObject (hdc=0x8010666, h=0x18a002e) returned 0x170a0a17
	[0242.137] free (_Block=0x4e0560) 
	[0242.137] free (_Block=0x5479b0) 
	[0242.137] ReleaseDC (hWnd=0x0, hDC=0x8010666) returned 1
	[0242.137] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10282, lParam=0x21bd20) returned 0x0
	[0242.138] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x55, wParam=0x10282, lParam=0x3) returned 0x2
	[0242.139] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0242.139] GetParent (hWnd=0x10282) returned 0x10280
	[0242.139] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x210, wParam=0x1, lParam=0x10282) returned 0x0
	[0242.140] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10284, lParam=0x21bc20) returned 0x0
	[0242.140] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x55, wParam=0x10284, lParam=0x3) returned 0x2
	[0242.141] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0242.142] GetParent (hWnd=0x10284) returned 0x10280
	[0242.142] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x210, wParam=0x10001, lParam=0x10284) returned 0x0
	[0242.143] GetParent (hWnd=0x10282) returned 0x10280
	[0242.143] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x111, wParam=0x4000000, lParam=0x10282) returned 0x0
	[0242.144] GetParent (hWnd=0x10282) returned 0x10280
	[0242.144] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x111, wParam=0x3000000, lParam=0x10282) returned 0x0
	[0242.144] IsWindowVisible (hWnd=0x1018e) returned 0
	[0242.144] IsWindowVisible (hWnd=0x101a8) returned 0
	[0242.144] IsWindowVisible (hWnd=0x2019a) returned 0
	[0242.144] IsWindowVisible (hWnd=0x301b2) returned 0
	[0242.144] IsWindowVisible (hWnd=0x10202) returned 0
	[0242.144] IsWindowVisible (hWnd=0x2022c) returned 0
	[0242.144] IsWindowVisible (hWnd=0x10234) returned 0
	[0242.144] IsWindowVisible (hWnd=0x10260) returned 0
	[0242.144] IsWindowVisible (hWnd=0x20272) returned 0
	[0242.144] IsWindowVisible (hWnd=0x10280) returned 0
	[0242.144] IsWindowVisible (hWnd=0x1018e) returned 0
	[0242.144] IsWindowVisible (hWnd=0x101a8) returned 0
	[0242.144] IsWindowVisible (hWnd=0x2019a) returned 0
	[0242.144] IsWindowVisible (hWnd=0x301b2) returned 0
	[0242.144] IsWindowVisible (hWnd=0x10202) returned 0
	[0242.144] IsWindowVisible (hWnd=0x2022c) returned 0
	[0242.144] IsWindowVisible (hWnd=0x10234) returned 0
	[0242.144] IsWindowVisible (hWnd=0x10260) returned 0
	[0242.144] IsWindowVisible (hWnd=0x20272) returned 0
	[0242.144] IsWindowVisible (hWnd=0x10280) returned 0
	[0242.145] IsWindowVisible (hWnd=0x1018e) returned 0
	[0242.145] IsWindowVisible (hWnd=0x101a8) returned 0
	[0242.145] IsWindowVisible (hWnd=0x2019a) returned 0
	[0242.145] IsWindowVisible (hWnd=0x301b2) returned 0
	[0242.145] IsWindowVisible (hWnd=0x10202) returned 0
	[0242.145] IsWindowVisible (hWnd=0x2022c) returned 0
	[0242.145] IsWindowVisible (hWnd=0x10234) returned 0
	[0242.145] IsWindowVisible (hWnd=0x10260) returned 0
	[0242.145] IsWindowVisible (hWnd=0x20272) returned 0
	[0242.145] IsWindowVisible (hWnd=0x10280) returned 0
	[0242.145] GetParent (hWnd=0x2022c) returned 0x1021e
	[0242.145] GetParent (hWnd=0x1021e) returned 0xd015c
	[0242.145] SetWindowPos (hWnd=0x10260, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x43) returned 1
	[0242.146] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x46, wParam=0x0, lParam=0x21c230) returned 0x0
	[0242.146] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.147] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x47, wParam=0x0, lParam=0x21c230) returned 0x0
	[0242.147] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.148] malloc (_Size=0xf8) returned 0x554c70
	[0242.148] malloc (_Size=0x18) returned 0x54d990
	[0242.148] malloc (_Size=0x20) returned 0x554500
	[0242.148] malloc (_Size=0x38) returned 0x54b870
	[0242.148] malloc (_Size=0x28) returned 0x554530
	[0242.148] malloc (_Size=0x28) returned 0x554560
	[0242.148] malloc (_Size=0x20) returned 0x554590
	[0242.148] malloc (_Size=0x18) returned 0x54d9b0
	[0242.148] malloc (_Size=0x20) returned 0x5545c0
	[0242.148] malloc (_Size=0x18) returned 0x54d9d0
	[0242.148] malloc (_Size=0x20) returned 0x5545f0
	[0242.148] malloc (_Size=0x18) returned 0x54d9f0
	[0242.148] malloc (_Size=0x50) returned 0x542210
	[0242.148] malloc (_Size=0x18) returned 0x54da10
	[0242.148] malloc (_Size=0x28) returned 0x554620
	[0242.148] malloc (_Size=0x28) returned 0x554650
	[0242.148] malloc (_Size=0x28) returned 0x554680
	[0242.148] malloc (_Size=0x28) returned 0x5546b0
	[0242.148] malloc (_Size=0x28) returned 0x5546e0
	[0242.149] malloc (_Size=0x28) returned 0x554710
	[0242.149] malloc (_Size=0x28) returned 0x554740
	[0242.149] malloc (_Size=0x28) returned 0x554770
	[0242.149] malloc (_Size=0x20) returned 0x5547a0
	[0242.149] malloc (_Size=0x18) returned 0x54da30
	[0242.149] GetParent (hWnd=0x1021e) returned 0xd015c
	[0242.149] GetParent (hWnd=0xd015c) returned 0x3016a
	[0242.149] GetParent (hWnd=0x3016a) returned 0x0
	[0242.149] GetParent (hWnd=0xd015c) returned 0x3016a
	[0242.149] malloc (_Size=0x20) returned 0x5547d0
	[0242.149] malloc (_Size=0x18) returned 0x54da50
	[0242.150] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0242.251] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0242.332] DefMDIChildProcW (hWnd=0x1021e, uMsg=0x210, wParam=0xffffffffe9000001, lParam=0x2022c) returned 0x0
	[0242.398] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0242.398] GetWindowLongW (hWnd=0x2022c, nIndex=-20) returned 0
	[0242.398] PostMessageW (hWnd=0x1021e, Msg=0x362, wParam=0xe001, lParam=0x0) returned 1
	[0242.398] GetWindowLongW (hWnd=0x1021e, nIndex=-16) returned 1188020224
	[0242.398] GetClientRect (in: hWnd=0x1021e, lpRect=0x21d2a8 | out: lpRect=0x21d2a8) returned 1
	[0242.398] BeginDeferWindowPos (nNumWindows=8) returned 0x30225
	[0242.398] GetTopWindow (hWnd=0x1021e) returned 0x2022c
	[0242.398] GetDlgCtrlID (hWnd=0x2022c) returned 59648
	[0242.398] GetWindow (hWnd=0x2022c, uCmd=0x2) returned 0x0
	[0242.399] GetParent (hWnd=0x2022c) returned 0x1021e
	[0242.399] GetWindowLongW (hWnd=0x2022c, nIndex=-20) returned 0
	[0242.399] GetWindowLongW (hWnd=0x2022c, nIndex=-16) returned 1375731712
	[0242.399] AdjustWindowRectEx (in: lpRect=0x21d2a8, dwStyle=0x52000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x21d2a8) returned 1
	[0242.399] GetParent (hWnd=0x2022c) returned 0x1021e
	[0242.399] GetWindowRect (in: hWnd=0x2022c, lpRect=0x21d260 | out: lpRect=0x21d260) returned 1
	[0242.399] ScreenToClient (in: hWnd=0x1021e, lpPoint=0x21d260 | out: lpPoint=0x21d260) returned 1
	[0242.399] ScreenToClient (in: hWnd=0x1021e, lpPoint=0x21d268 | out: lpPoint=0x21d268) returned 1
	[0242.399] EqualRect (lprc1=0x21d260, lprc2=0x21d2a8) returned 0
	[0242.399] DeferWindowPos (hWinPosInfo=0x30225, hWnd=0x2022c, hWndInsertAfter=0x0, x=0, y=0, cx=870, cy=323, uFlags=0x14) returned 0x30225
	[0242.399] EndDeferWindowPos (hWinPosInfo=0x30225) returned 1
	[0242.399] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x46, wParam=0x0, lParam=0x21d240) returned 0x0
	[0242.400] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x83, wParam=0x1, lParam=0x21d210) returned 0x0
	[0242.401] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x47, wParam=0x0, lParam=0x21d240) returned 0x0
	[0242.401] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x5, wParam=0x0, lParam=0x1430366) returned 0x0
	[0242.401] GetWindowLongW (hWnd=0x10260, nIndex=-20) returned 512
	[0242.402] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x46, wParam=0x0, lParam=0x21c5f0) returned 0x0
	[0242.402] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x83, wParam=0x1, lParam=0x21c5c0) returned 0x0
	[0242.403] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x46, wParam=0x0, lParam=0x21c5f0) returned 0x0
	[0242.403] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x83, wParam=0x1, lParam=0x21c5c0) returned 0x0
	[0242.404] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x46, wParam=0x0, lParam=0x21c5f0) returned 0x0
	[0242.404] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x83, wParam=0x1, lParam=0x21c5c0) returned 0x0
	[0242.405] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x46, wParam=0x0, lParam=0x21c5f0) returned 0x0
	[0242.405] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x46, wParam=0x0, lParam=0x21c5f0) returned 0x0
	[0242.406] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x83, wParam=0x1, lParam=0x21c5c0) returned 0x0
	[0242.407] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x47, wParam=0x0, lParam=0x21c5f0) returned 0x0
	[0242.407] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x3, wParam=0x0, lParam=0x20002) returned 0x0
	[0242.407] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x5, wParam=0x0, lParam=0x13f00d5) returned 0x0
	[0242.408] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x47, wParam=0x0, lParam=0x21c5f0) returned 0x0
	[0242.408] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x3, wParam=0x0, lParam=0x2028f) returned 0x0
	[0242.409] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x5, wParam=0x0, lParam=0x13f00d5) returned 0x0
	[0242.409] MoveWindow (hWnd=0x10274, X=0, Y=21, nWidth=213, nHeight=298, bRepaint=1) returned 1
	[0242.411] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x47, wParam=0x0, lParam=0x21c5f0) returned 0x0
	[0242.411] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x3, wParam=0x0, lParam=0x100dd) returned 0x0
	[0242.412] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x5, wParam=0x0, lParam=0x14101ac) returned 0x0
	[0242.412] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x47, wParam=0x0, lParam=0x21c5f0) returned 0x0
	[0242.413] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x47, wParam=0x0, lParam=0x21c5f0) returned 0x0
	[0242.413] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1205, wParam=0x0, lParam=0x21bca0) returned 0x1
	[0242.414] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x46, wParam=0x0, lParam=0x21bc00) returned 0x0
	[0242.414] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x83, wParam=0x1, lParam=0x21bbd0) returned 0x0
	[0242.415] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x47, wParam=0x0, lParam=0x21bc00) returned 0x0
	[0242.415] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x5, wParam=0x0, lParam=0x1801aa) returned 0x0
	[0242.416] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x46, wParam=0x0, lParam=0x21bc90) returned 0x0
	[0242.417] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x83, wParam=0x1, lParam=0x21bc60) returned 0x0
	[0242.418] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x47, wParam=0x0, lParam=0x21bc90) returned 0x0
	[0242.418] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x5, wParam=0x0, lParam=0x12e01aa) returned 0x0
	[0242.418] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0242.418] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x434, wParam=0x0, lParam=0x21aaa0) returned 0x0
	[0242.419] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0242.419] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0242.420] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x46, wParam=0x0, lParam=0x21bc90) returned 0x0
	[0242.421] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x83, wParam=0x1, lParam=0x21bc60) returned 0x0
	[0242.421] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x47, wParam=0x0, lParam=0x21bc90) returned 0x0
	[0242.422] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x5, wParam=0x0, lParam=0x13f01aa) returned 0x0
	[0242.422] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0242.422] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x434, wParam=0x0, lParam=0x21aaa0) returned 0x0
	[0242.422] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0242.423] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0242.423] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1205, wParam=0x0, lParam=0x21bd70) returned 0x1
	[0242.424] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x46, wParam=0x0, lParam=0x21bcd0) returned 0x0
	[0242.424] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x3, wParam=0x0, lParam=0x200de) returned 0x0
	[0242.425] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x5, wParam=0x0, lParam=0x13f01aa) returned 0x0
	[0242.425] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0242.425] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x434, wParam=0x0, lParam=0x21b400) returned 0x0
	[0242.425] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0242.426] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0242.426] CreateWindowExW (dwExStyle=0x0, lpClassName="msctls_statusbar32", lpWindowName="Ready", dwStyle=0x5400014a, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x1021e, hMenu=0x1003, hInstance=0xff6d0000, lpParam=0x0) returned 0x10286
	[0242.426] GetParent (hWnd=0x10286) returned 0x10012
	[0242.427] SetWindowLongPtrW (hWnd=0x10286, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc65230c
	[0242.427] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10286, lParam=0x21cb40) returned 0x0
	[0242.427] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x81, wParam=0x0, lParam=0x21cc20) returned 0x1
	[0242.428] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x83, wParam=0x0, lParam=0x21cca0) returned 0x0
	[0242.428] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x1, wParam=0x0, lParam=0x21cc00) returned 0x0
	[0242.429] DefMDIChildProcW (hWnd=0x1021e, uMsg=0x55, wParam=0x10286, lParam=0x3) returned 0x2
	[0242.429] DefMDIChildProcW (hWnd=0x1021e, uMsg=0x129, wParam=0x0, lParam=0x0) returned 0x3
	[0242.430] CreateWindowExW (dwExStyle=0x0, lpClassName="msctls_progress32", lpWindowName=0x0, dwStyle=0x54000001, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10286, hMenu=0x1000, hInstance=0xff6d0000, lpParam=0x0) returned 0x10288
	[0242.430] GetParent (hWnd=0x10288) returned 0x10012
	[0242.430] SetWindowLongPtrW (hWnd=0x10288, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6cae1c
	[0242.430] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10288, lParam=0x21be90) returned 0x0
	[0242.479] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x81, wParam=0x0, lParam=0x21bf70) returned 0x1
	[0242.479] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x21b9a0) returned 0x0
	[0242.480] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x21b9a0) returned 0x0
	[0242.481] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x83, wParam=0x0, lParam=0x21bff0) returned 0x0
	[0242.481] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x1, wParam=0x0, lParam=0x21bf70) returned 0x0
	[0242.482] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0242.482] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0242.483] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x210, wParam=0x10000001, lParam=0x10288) returned 0x0
	[0242.483] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0242.483] CreateWindowExW (dwExStyle=0x0, lpClassName="STATIC", lpWindowName="", dwStyle=0x5400000b, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x10286, hMenu=0x1001, hInstance=0xff6d0000, lpParam=0x0) returned 0x1028a
	[0242.484] malloc (_Size=0x100) returned 0x5479b0
	[0242.484] GetParent (hWnd=0x1028a) returned 0x10012
	[0242.484] SetWindowLongPtrW (hWnd=0x1028a, nIndex=-4, dwNewLong=0x7fef84566ec) returned 0x7fefc6d61b4
	[0242.484] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x1028a, lParam=0x21beb0) returned 0x0
	[0242.484] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x81, wParam=0x0, lParam=0x21bf90) returned 0x1
	[0242.485] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x83, wParam=0x0, lParam=0x21bff0) returned 0x0
	[0242.486] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x1, wParam=0x0, lParam=0x21bf80) returned 0x0
	[0242.486] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0242.486] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0242.487] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x210, wParam=0x10010001, lParam=0x1028a) returned 0x0
	[0242.488] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0242.488] GetWindowLongW (hWnd=0x10288, nIndex=-20) returned 0
	[0242.488] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x30, wParam=0x70a0a20, lParam=0x0) returned 0x0
	[0242.489] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0
	[0242.489] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x46, wParam=0x0, lParam=0x21c3b0) returned 0x0
	[0242.490] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x83, wParam=0x1, lParam=0x21c380) returned 0x0
	[0242.491] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.491] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x47, wParam=0x0, lParam=0x21c3b0) returned 0x0
	[0242.492] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x5, wParam=0x0, lParam=0x170000) returned 0x0
	[0242.492] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x46, wParam=0x0, lParam=0x21b2a0) returned 0x0
	[0242.492] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.493] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40a, wParam=0x0, lParam=0x21b6c0) returned 0x1
	[0242.498] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40a, wParam=0x1, lParam=0x21b6a0) returned 0x0
	[0242.499] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40a, wParam=0x2, lParam=0x21b6b0) returned 0x0
	[0242.499] SetWindowPos (hWnd=0x10288, hWndInsertAfter=0x0, X=4, Y=4, cx=-121272495, cy=2042, uFlags=0x224) returned 1
	[0242.499] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x46, wParam=0x0, lParam=0x21b5d0) returned 0x0
	[0242.500] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x83, wParam=0x1, lParam=0x21b5a0) returned 0x0
	[0242.500] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.501] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x47, wParam=0x0, lParam=0x21b5d0) returned 0x0
	[0242.501] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x3, wParam=0x0, lParam=0x40004) returned 0x0
	[0242.502] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x5, wParam=0x0, lParam=0x7fa0000) returned 0x0
	[0242.502] SetWindowPos (hWnd=0x1028a, hWndInsertAfter=0x0, X=-121272487, Y=4, cx=-67, cy=-4, uFlags=0x224) returned 1
	[0242.502] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x46, wParam=0x0, lParam=0x21b5d0) returned 0x0
	[0242.503] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x83, wParam=0x1, lParam=0x21b5a0) returned 0x0
	[0242.503] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.504] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x47, wParam=0x0, lParam=0x21b5d0) returned 0x0
	[0242.504] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x3, wParam=0x0, lParam=0x48000) returned 0x0
	[0242.505] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40a, wParam=0x0, lParam=0x21c7d0) returned 0x1
	[0242.506] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40a, wParam=0x1, lParam=0x21c7b0) returned 0x0
	[0242.506] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40a, wParam=0x2, lParam=0x21c7c0) returned 0x0
	[0242.506] SetWindowPos (hWnd=0x10288, hWndInsertAfter=0x0, X=4, Y=4, cx=-121272495, cy=2042, uFlags=0x224) returned 1
	[0242.506] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x46, wParam=0x0, lParam=0x21c6e0) returned 0x0
	[0242.507] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x83, wParam=0x1, lParam=0x21c6b0) returned 0x0
	[0242.508] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.508] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x47, wParam=0x0, lParam=0x21c6e0) returned 0x0
	[0242.508] SetWindowPos (hWnd=0x1028a, hWndInsertAfter=0x0, X=-121272487, Y=4, cx=-2220836, cy=-5, uFlags=0x224) returned 1
	[0242.509] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x46, wParam=0x0, lParam=0x21c6e0) returned 0x0
	[0242.509] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x83, wParam=0x1, lParam=0x21c6b0) returned 0x0
	[0242.510] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.511] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x47, wParam=0x0, lParam=0x21c6e0) returned 0x0
	[0242.511] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0
	[0242.512] DefMDIChildProcW (hWnd=0x1021e, uMsg=0x210, wParam=0x10030001, lParam=0x10286) returned 0x0
	[0242.513] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0242.513] GetDC (hWnd=0x10286) returned 0x8010666
	[0242.513] malloc (_Size=0x88) returned 0x4e0560
	[0242.513] malloc (_Size=0x100) returned 0x547ac0
	[0242.513] lstrlenW (lpString="") returned 0
	[0242.513] lstrlenW (lpString="                                ") returned 32
	[0242.513] malloc (_Size=0x4e) returned 0x5421b0
	[0242.513] lstrlenW (lpString="") returned 0
	[0242.513] free (_Block=0x5421b0) 
	[0242.514] lstrlenW (lpString="                    ") returned 20
	[0242.514] malloc (_Size=0x36) returned 0x54b8b0
	[0242.514] lstrlenW (lpString="") returned 0
	[0242.514] free (_Block=0x54b8b0) 
	[0242.514] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x404, wParam=0x3, lParam=0x21d330) returned 0x1
	[0242.514] free (_Block=0x4e0560) 
	[0242.514] free (_Block=0x547ac0) 
	[0242.514] ReleaseDC (hWnd=0x10286, hDC=0x8010666) returned 1
	[0242.514] malloc (_Size=0x100) returned 0x547ac0
	[0242.514] malloc (_Size=0x100) returned 0x547bd0
	[0242.515] malloc (_Size=0x58) returned 0x5421b0
	[0242.515] malloc (_Size=0x28) returned 0x554800
	[0242.515] FindResourceW (hModule=0xff6d0000, lpName=0xa2, lpType=0x4) returned 0xd0718
	[0242.515] malloc (_Size=0x70) returned 0x554e10
	[0242.516] malloc (_Size=0x18) returned 0x54da70
	[0242.516] GetWindowLongW (hWnd=0x1021e, nIndex=-16) returned 1188020224
	[0242.516] lstrlenW (lpString="&Close\x09Ctrl+F4") returned 14
	[0242.516] malloc (_Size=0x2a) returned 0x54b8b0
	[0242.516] lstrlenW (lpString="Nex&t\x09Ctrl+F6") returned 13
	[0242.516] malloc (_Size=0x28) returned 0x554830
	[0242.517] free (_Block=0x554830) 
	[0242.517] free (_Block=0x54b8b0) 
	[0242.517] DestroyMenu (hMenu=0x40225) returned 1
	[0242.517] GetParent (hWnd=0x2022c) returned 0x1021e
	[0242.517] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x46, wParam=0x0, lParam=0x21d2e0) returned 0x0
	[0242.518] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x83, wParam=0x1, lParam=0x21d2b0) returned 0x0
	[0242.518] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x46, wParam=0x0, lParam=0x21d2e0) returned 0x0
	[0242.519] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x83, wParam=0x1, lParam=0x21d2b0) returned 0x0
	[0242.526] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x47, wParam=0x0, lParam=0x21d2e0) returned 0x0
	[0242.526] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x3, wParam=0x0, lParam=0x12c0000) returned 0x0
	[0242.527] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x407, wParam=0x0, lParam=0x21c530) returned 0x1
	[0242.527] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x404, wParam=0x3, lParam=0x21c540) returned 0x1
	[0242.528] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x5, wParam=0x0, lParam=0x170366) returned 0x0
	[0242.528] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x46, wParam=0x0, lParam=0x21c1d0) returned 0x0
	[0242.528] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.529] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40a, wParam=0x0, lParam=0x21c5f0) returned 0x1
	[0242.529] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40a, wParam=0x1, lParam=0x21c5d0) returned 0x1
	[0242.530] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40a, wParam=0x2, lParam=0x21c5e0) returned 0x1
	[0242.530] SetWindowPos (hWnd=0x10288, hWndInsertAfter=0x0, X=654, Y=4, cx=127, cy=17, uFlags=0x224) returned 1
	[0242.530] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x46, wParam=0x0, lParam=0x21c500) returned 0x0
	[0242.531] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x83, wParam=0x1, lParam=0x21c4d0) returned 0x0
	[0242.531] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.532] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x47, wParam=0x0, lParam=0x21c500) returned 0x0
	[0242.532] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x3, wParam=0x0, lParam=0x4028e) returned 0x0
	[0242.533] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x5, wParam=0x0, lParam=0x11007f) returned 0x0
	[0242.533] SetWindowPos (hWnd=0x1028a, hWndInsertAfter=0x0, X=785, Y=4, cx=65, cy=17, uFlags=0x224) returned 1
	[0242.533] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x46, wParam=0x0, lParam=0x21c500) returned 0x0
	[0242.534] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x83, wParam=0x1, lParam=0x21c4d0) returned 0x0
	[0242.535] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0
	[0242.535] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x47, wParam=0x0, lParam=0x21c500) returned 0x0
	[0242.536] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x3, wParam=0x0, lParam=0x40311) returned 0x0
	[0242.536] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x1028a, Msg=0x5, wParam=0x0, lParam=0x110041) returned 0x0
	[0242.537] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x47, wParam=0x0, lParam=0x21d2e0) returned 0x0
	[0242.537] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x5, wParam=0x0, lParam=0x12c0366) returned 0x0
	[0242.537] GetWindowLongW (hWnd=0x10260, nIndex=-20) returned 512
	[0242.538] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x46, wParam=0x0, lParam=0x21c690) returned 0x0
	[0242.538] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x83, wParam=0x1, lParam=0x21c660) returned 0x0
	[0242.539] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x46, wParam=0x0, lParam=0x21c690) returned 0x0
	[0242.539] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x83, wParam=0x1, lParam=0x21c660) returned 0x0
	[0242.540] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x46, wParam=0x0, lParam=0x21c690) returned 0x0
	[0242.540] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x83, wParam=0x1, lParam=0x21c660) returned 0x0
	[0242.541] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x46, wParam=0x0, lParam=0x21c690) returned 0x0
	[0242.542] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x46, wParam=0x0, lParam=0x21c690) returned 0x0
	[0242.542] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x83, wParam=0x1, lParam=0x21c660) returned 0x0
	[0242.543] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x47, wParam=0x0, lParam=0x21c690) returned 0x0
	[0242.543] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x5, wParam=0x0, lParam=0x12800d5) returned 0x0
	[0242.544] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x47, wParam=0x0, lParam=0x21c690) returned 0x0
	[0242.544] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x5, wParam=0x0, lParam=0x12800d5) returned 0x0
	[0242.544] MoveWindow (hWnd=0x10274, X=0, Y=21, nWidth=213, nHeight=275, bRepaint=1) returned 1
	[0242.546] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x47, wParam=0x0, lParam=0x21c690) returned 0x0
	[0242.546] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x5, wParam=0x0, lParam=0x12a01ac) returned 0x0
	[0242.547] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x47, wParam=0x0, lParam=0x21c690) returned 0x0
	[0242.547] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1205, wParam=0x0, lParam=0x21bd40) returned 0x1
	[0242.548] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x46, wParam=0x0, lParam=0x21bca0) returned 0x0
	[0242.550] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x5, wParam=0x0, lParam=0x12801aa) returned 0x0
	[0242.550] GetPropW (hWnd=0x20264, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0242.550] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x20264, Msg=0x434, wParam=0x0, lParam=0x21b4a0) returned 0x0
	[0242.550] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1004, wParam=0x0, lParam=0x0) returned 0x0
	[0242.551] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1200, wParam=0x0, lParam=0x0) returned 0x0
	[0242.552] DefMDIChildProcW (hWnd=0x1021e, uMsg=0x7c, wParam=0xfffffffffffffff0, lParam=0x21d400) returned 0x0
	[0242.553] DefMDIChildProcW (hWnd=0x1021e, uMsg=0x7d, wParam=0xfffffffffffffff0, lParam=0x21d400) returned 0x0
	[0242.553] DefMDIChildProcW (hWnd=0x1021e, uMsg=0xd, wParam=0x104, lParam=0x20f72d0) returned 0x0
	[0242.554] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x21cc78) returned 0x0
	[0242.554] GetParent (hWnd=0x2022c) returned 0x1021e
	[0242.554] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x46, wParam=0x0, lParam=0x21d3a0) returned 0x0
	[0242.555] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x46, wParam=0x0, lParam=0x21d3a0) returned 0x0
	[0242.555] GetParent (hWnd=0x1021e) returned 0xd015c
	[0242.555] GetParent (hWnd=0xd015c) returned 0x3016a
	[0242.555] GetParent (hWnd=0x3016a) returned 0x0
	[0242.555] SendMessageW (hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0242.556] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x229, wParam=0x0, lParam=0x0) returned 0x0
	[0242.556] lstrlenW (lpString="Microsoft Management Console") returned 28
	[0242.556] GetWindowTextW (in: hWnd=0x3016a, lpString=0x21d1f0, nMaxCount=256 | out: lpString="Microsoft Management Console") returned 28
	[0242.556] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0xd, wParam=0x100, lParam=0x21d1f0) returned 0x1c
	[0242.558] CallWindowProcW (lpPrevWndFunc=0x77c3824c, hWnd=0xd015c, Msg=0x210, wParam=0xffffffffff010001, lParam=0x1021e) returned 0x0
	[0242.558] free (_Block=0x550c90) 
	[0242.558] GetDlgItem (hDlg=0x1021e, nIDDlgItem=59648) returned 0x2022c
	[0242.558] GetTopWindow (hWnd=0x2022c) returned 0x10260
	[0242.558] GetDlgItem (hDlg=0x2022c, nIDDlgItem=59648) returned 0x0
	[0242.558] GetTopWindow (hWnd=0x2022c) returned 0x10260
	[0242.558] GetDlgItem (hDlg=0x10260, nIDDlgItem=59648) returned 0x0
	[0242.558] GetTopWindow (hWnd=0x10260) returned 0x10262
	[0242.558] GetDlgItem (hDlg=0x10262, nIDDlgItem=59648) returned 0x0
	[0242.558] GetTopWindow (hWnd=0x10262) returned 0x0
	[0242.558] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x0
	[0242.558] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x20272
	[0242.558] GetDlgItem (hDlg=0x20272, nIDDlgItem=59648) returned 0x0
	[0242.558] GetTopWindow (hWnd=0x20272) returned 0x10274
	[0242.558] GetDlgItem (hDlg=0x10274, nIDDlgItem=59648) returned 0x0
	[0242.558] GetTopWindow (hWnd=0x10274) returned 0x10276
	[0242.558] GetDlgItem (hDlg=0x10276, nIDDlgItem=59648) returned 0x0
	[0242.558] GetTopWindow (hWnd=0x10276) returned 0x10278
	[0242.558] GetDlgItem (hDlg=0x10278, nIDDlgItem=59648) returned 0x0
	[0242.558] GetTopWindow (hWnd=0x10278) returned 0x1027a
	[0242.558] GetDlgItem (hDlg=0x1027a, nIDDlgItem=59648) returned 0x0
	[0242.558] GetTopWindow (hWnd=0x1027a) returned 0x0
	[0242.558] GetWindow (hWnd=0x1027a, uCmd=0x2) returned 0x0
	[0242.558] GetWindow (hWnd=0x10278, uCmd=0x2) returned 0x1027c
	[0242.558] GetDlgItem (hDlg=0x1027c, nIDDlgItem=59648) returned 0x0
	[0242.558] GetTopWindow (hWnd=0x1027c) returned 0x1027e
	[0242.559] GetDlgItem (hDlg=0x1027e, nIDDlgItem=59648) returned 0x0
	[0242.559] GetTopWindow (hWnd=0x1027e) returned 0x0
	[0242.559] GetWindow (hWnd=0x1027e, uCmd=0x2) returned 0x0
	[0242.559] GetWindow (hWnd=0x1027c, uCmd=0x2) returned 0x0
	[0242.559] GetWindow (hWnd=0x10276, uCmd=0x2) returned 0x0
	[0242.559] GetWindow (hWnd=0x10274, uCmd=0x2) returned 0x0
	[0242.559] GetWindow (hWnd=0x20272, uCmd=0x2) returned 0x10234
	[0242.559] GetDlgItem (hDlg=0x10234, nIDDlgItem=59648) returned 0x0
	[0242.559] GetTopWindow (hWnd=0x10234) returned 0x0
	[0242.559] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10232
	[0242.559] GetDlgItem (hDlg=0x10232, nIDDlgItem=59648) returned 0x0
	[0242.559] GetTopWindow (hWnd=0x10232) returned 0x0
	[0242.559] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x10280
	[0242.559] GetDlgItem (hDlg=0x10280, nIDDlgItem=59648) returned 0x0
	[0242.559] GetTopWindow (hWnd=0x10280) returned 0x10282
	[0242.559] GetDlgItem (hDlg=0x10282, nIDDlgItem=59648) returned 0x0
	[0242.559] GetTopWindow (hWnd=0x10282) returned 0x0
	[0242.559] GetWindow (hWnd=0x10282, uCmd=0x2) returned 0x10284
	[0242.559] GetDlgItem (hDlg=0x10284, nIDDlgItem=59648) returned 0x0
	[0242.559] GetTopWindow (hWnd=0x10284) returned 0x0
	[0242.559] GetWindow (hWnd=0x10284, uCmd=0x2) returned 0x0
	[0242.559] GetWindow (hWnd=0x10280, uCmd=0x2) returned 0x0
	[0242.559] GetTopWindow (hWnd=0x1021e) returned 0x2022c
	[0242.560] GetWindowLongW (hWnd=0x2022c, nIndex=-20) returned 0
	[0242.561] malloc (_Size=0x38) returned 0x54b8b0
	[0242.561] GetLastError () returned 0x6
	[0242.561] SetLastError (dwErrCode=0x6) 
	[0242.561] DeleteObject (ho=0x4050a24) returned 1
	[0242.562] GetLastError () returned 0x0
	[0242.562] SetLastError (dwErrCode=0x0) 
	[0242.562] malloc (_Size=0x400) returned 0x554e90
	[0242.562] malloc (_Size=0x400) returned 0x554e90
	[0242.562] malloc (_Size=0x400) returned 0x554e90
	[0242.562] malloc (_Size=0x20) returned 0x554830
	[0242.562] malloc (_Size=0x20) returned 0x554860
	[0242.562] malloc (_Size=0x400) returned 0x554e90
	[0242.562] malloc (_Size=0x30) returned 0x54b8f0
	[0242.562] malloc (_Size=0x30) returned 0x54b930
	[0242.562] malloc (_Size=0x400) returned 0x554e90
	[0242.562] malloc (_Size=0x400) returned 0x554e90
	[0242.562] malloc (_Size=0x400) returned 0x554e90
	[0242.562] malloc (_Size=0x400) returned 0x554e90
	[0242.562] malloc (_Size=0x400) returned 0x554e90
	[0242.562] malloc (_Size=0x20) returned 0x554890
	[0242.562] malloc (_Size=0x20) returned 0x5548c0
	[0242.562] malloc (_Size=0x400) returned 0x554e90
	[0242.562] malloc (_Size=0x400) returned 0x554e90
	[0242.563] malloc (_Size=0x400) returned 0x554e90
	[0242.563] malloc (_Size=0x20) returned 0x5548f0
	[0242.563] malloc (_Size=0x20) returned 0x554920
	[0242.563] malloc (_Size=0x400) returned 0x554e90
	[0242.563] malloc (_Size=0x400) returned 0x554e90
	[0242.563] malloc (_Size=0x30) returned 0x54b970
	[0242.563] malloc (_Size=0x30) returned 0x54b9b0
	[0242.563] malloc (_Size=0x70) returned 0x550c90
	[0242.563] malloc (_Size=0xe0) returned 0x554e90
	[0242.564] malloc (_Size=0x150) returned 0x554f80
	[0242.564] malloc (_Size=0x20) returned 0x554950
	[0242.564] malloc (_Size=0x20) returned 0x554980
	[0242.564] malloc (_Size=0x20) returned 0x5549b0
	[0242.564] malloc (_Size=0x20) returned 0x5549e0
	[0242.564] malloc (_Size=0x1c0) returned 0x5550e0
	[0242.564] malloc (_Size=0x20) returned 0x554a10
	[0242.564] malloc (_Size=0x20) returned 0x554a40
	[0242.564] malloc (_Size=0x30) returned 0x54b9f0
	[0242.564] malloc (_Size=0x30) returned 0x54ba30
	[0242.564] malloc (_Size=0x30) returned 0x54ba70
	[0242.564] malloc (_Size=0x30) returned 0x54bab0
	[0242.564] malloc (_Size=0x2a0) returned 0x5552b0
	[0242.564] malloc (_Size=0x20) returned 0x554950
	[0242.565] malloc (_Size=0x20) returned 0x554980
	[0242.565] malloc (_Size=0x30) returned 0x54baf0
	[0242.565] malloc (_Size=0x30) returned 0x54bb30
	[0242.565] malloc (_Size=0x3f0) returned 0x554e90
	[0242.565] malloc (_Size=0x20) returned 0x554a10
	[0242.565] malloc (_Size=0x20) returned 0x554a40
	[0242.565] malloc (_Size=0x30) returned 0x54b9f0
	[0242.565] malloc (_Size=0x30) returned 0x54ba30
	[0242.566] malloc (_Size=0x5b0) returned 0x555290
	[0242.566] malloc (_Size=0x20) returned 0x554950
	[0242.566] malloc (_Size=0x20) returned 0x554980
	[0242.566] malloc (_Size=0x30) returned 0x54baf0
	[0242.566] malloc (_Size=0x30) returned 0x54bb30
	[0242.567] malloc (_Size=0x20) returned 0x554a10
	[0242.567] malloc (_Size=0x20) returned 0x554a40
	[0242.567] malloc (_Size=0x20) returned 0x5549b0
	[0242.567] malloc (_Size=0x20) returned 0x5549e0
	[0242.567] malloc (_Size=0x20) returned 0x554a70
	[0242.567] malloc (_Size=0x20) returned 0x554aa0
	[0242.567] malloc (_Size=0x850) returned 0x555850
	[0242.567] malloc (_Size=0x20) returned 0x554a10
	[0242.567] malloc (_Size=0x20) returned 0x554a40
	[0242.567] malloc (_Size=0x30) returned 0x54b9f0
	[0242.567] malloc (_Size=0x30) returned 0x54ba30
	[0242.567] malloc (_Size=0x20) returned 0x5549b0
	[0242.567] malloc (_Size=0x20) returned 0x5549e0
	[0242.568] malloc (_Size=0x20) returned 0x554a70
	[0242.568] malloc (_Size=0x20) returned 0x554aa0
	[0242.568] malloc (_Size=0x20) returned 0x554950
	[0242.568] malloc (_Size=0x20) returned 0x554980
	[0242.568] malloc (_Size=0x20) returned 0x554ad0
	[0242.568] malloc (_Size=0x20) returned 0x554b00
	[0242.569] malloc (_Size=0x30) returned 0x54baf0
	[0242.569] malloc (_Size=0x30) returned 0x54bb30
	[0242.569] malloc (_Size=0x30) returned 0x54ba70
	[0242.569] malloc (_Size=0x30) returned 0x54bab0
	[0242.569] malloc (_Size=0x30) returned 0x54bb70
	[0242.569] malloc (_Size=0x30) returned 0x54bbb0
	[0242.569] malloc (_Size=0x28) returned 0x554830
	[0242.569] GetLastError () returned 0x0
	[0242.569] SetLastError (dwErrCode=0x0) 
	[0242.569] DeleteObject (ho=0x5050a22) returned 1
	[0242.570] GetLastError () returned 0x0
	[0242.570] SetLastError (dwErrCode=0x0) 
	[0242.570] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x1132, wParam=0x0, lParam=0x21e130) returned 0x3ce13a0
	[0242.571] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.634] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.634] malloc (_Size=0x20e) returned 0x554e90
	[0242.635] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c9a8) returned 0x1
	[0242.635] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c9a8) returned 0x1
	[0242.635] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.636] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.636] lstrlenW (lpString="Computer Management (Local)") returned 27
	[0242.636] malloc (_Size=0x40) returned 0x63c020
	[0242.636] free (_Block=0x554e90) 
	[0242.636] malloc (_Size=0x40) returned 0x63c0c0
	[0242.647] malloc (_Size=0x30) returned 0x54b8f0
	[0242.647] malloc (_Size=0x10) returned 0x54dab0
	[0242.648] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.649] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.649] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.650] malloc (_Size=0x18) returned 0x54dab0
	[0242.650] malloc (_Size=0x30) returned 0x54b8f0
	[0242.650] malloc (_Size=0x30) returned 0x54b970
	[0242.651] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x1102, wParam=0x2, lParam=0x3ce13a0) returned 0x1
	[0242.651] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.652] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113f, wParam=0x0, lParam=0x21d148) returned 0x1
	[0242.652] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.653] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21d080) returned 0x1
	[0242.653] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21d080) returned 0x1
	[0242.653] malloc (_Size=0x98) returned 0x554f50
	[0242.654] malloc (_Size=0x28) returned 0x554890
	[0242.654] malloc (_Size=0x28) returned 0x554890
	[0242.654] malloc (_Size=0x28) returned 0x554890
	[0242.655] FindResourceW (hModule=0x7fef7fc0000, lpName=0xd, lpType=0x6) returned 0x1f20470
	[0242.655] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xc1, lpBuffer=0x21c760, cchBufferMax=256 | out: lpBuffer="Computer Management") returned 0x13
	[0242.655] lstrlenW (lpString="Computer Management") returned 19
	[0242.655] malloc (_Size=0x34) returned 0x54b930
	[0242.655] FindResourceW (hModule=0x7fef7fc0000, lpName=0xc, lpType=0x6) returned 0x1f20460
	[0242.655] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xbe, lpBuffer=0x21c760, cchBufferMax=256 | out: lpBuffer="System Tools") returned 0xc
	[0242.655] lstrlenW (lpString="System Tools") returned 12
	[0242.655] malloc (_Size=0x26) returned 0x5548f0
	[0242.655] FindResourceW (hModule=0x7fef7fc0000, lpName=0xc, lpType=0x6) returned 0x1f20460
	[0242.655] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xbf, lpBuffer=0x21c760, cchBufferMax=256 | out: lpBuffer="Services and Applications") returned 0x19
	[0242.655] lstrlenW (lpString="Services and Applications") returned 25
	[0242.655] malloc (_Size=0x40) returned 0x63c020
	[0242.656] FindResourceW (hModule=0x7fef7fc0000, lpName=0xd, lpType=0x6) returned 0x1f20470
	[0242.656] LoadStringW (in: hInstance=0x7fef7fc0000, uID=0xc0, lpBuffer=0x21c760, cchBufferMax=256 | out: lpBuffer="Storage") returned 0x7
	[0242.656] lstrlenW (lpString="Storage") returned 7
	[0242.656] malloc (_Size=0x1c) returned 0x554860
	[0242.656] lstrlenW (lpString="") returned 0
	[0242.656] SetCursor (hCursor=0x10007) returned 0x10007
	[0242.657] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0242.657] InvalidateRect (hWnd=0x101a8, lpRect=0x0, bErase=1) returned 1
	[0242.657] InvalidateRect (hWnd=0x301b2, lpRect=0x0, bErase=1) returned 1
	[0242.657] InvalidateRect (hWnd=0x10202, lpRect=0x0, bErase=1) returned 1
	[0242.657] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3ce13a0
	[0242.657] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c350) returned 0x1
	[0242.658] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c350) returned 0x1
	[0242.658] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c350) returned 0x1
	[0242.658] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c350) returned 0x1
	[0242.659] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x0
	[0242.659] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c320) returned 0x1
	[0242.659] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c320) returned 0x1
	[0242.659] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113f, wParam=0x0, lParam=0x21c390) returned 0x1
	[0242.660] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.660] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.661] malloc (_Size=0x20e) returned 0x555360
	[0242.661] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21adb8) returned 0x1
	[0242.661] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21adb8) returned 0x1
	[0242.661] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.662] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.662] lstrlenW (lpString="Computer Management (Local)") returned 27
	[0242.662] malloc (_Size=0x40) returned 0x63c070
	[0242.662] free (_Block=0x555360) 
	[0242.662] malloc (_Size=0x40) returned 0x63c0c0
	[0242.663] malloc (_Size=0x30) returned 0x54b9b0
	[0242.663] malloc (_Size=0x10) returned 0x54daf0
	[0242.663] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.664] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.664] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.665] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.666] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x3, lParam=0x3ce13a0) returned 0x0
	[0242.666] InvalidateRect (hWnd=0x10234, lpRect=0x0, bErase=1) returned 1
	[0242.666] InvalidateRect (hWnd=0x20272, lpRect=0x0, bErase=1) returned 1
	[0242.666] InvalidateRect (hWnd=0x10280, lpRect=0x0, bErase=1) returned 1
	[0242.666] GetLastError () returned 0x0
	[0242.666] SetLastError (dwErrCode=0x0) 
	[0242.666] SetCursor (hCursor=0x10007) returned 0x10007
	[0242.667] GetLastError () returned 0x0
	[0242.667] SetLastError (dwErrCode=0x0) 
	[0242.667] malloc (_Size=0xb0) returned 0x555260
	[0242.667] lstrlenW (lpString="") returned 0
	[0242.667] malloc (_Size=0x100) returned 0x547ce0
	[0242.667] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0242.667] InvalidateRect (hWnd=0x101a8, lpRect=0x0, bErase=1) returned 1
	[0242.668] InvalidateRect (hWnd=0x301b2, lpRect=0x0, bErase=1) returned 1
	[0242.668] InvalidateRect (hWnd=0x10202, lpRect=0x0, bErase=1) returned 1
	[0242.668] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3ce13a0
	[0242.668] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c2f0) returned 0x1
	[0242.668] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c2f0) returned 0x1
	[0242.669] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c2f0) returned 0x1
	[0242.669] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c2f0) returned 0x1
	[0242.669] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x0
	[0242.670] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x0
	[0242.670] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c330) returned 0x1
	[0242.670] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c330) returned 0x1
	[0242.671] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113f, wParam=0x0, lParam=0x21c3c0) returned 0x1
	[0242.671] InvalidateRect (hWnd=0x10234, lpRect=0x0, bErase=1) returned 1
	[0242.671] InvalidateRect (hWnd=0x20272, lpRect=0x0, bErase=1) returned 1
	[0242.671] InvalidateRect (hWnd=0x10280, lpRect=0x0, bErase=1) returned 1
	[0242.671] malloc (_Size=0xb0) returned 0x5554d0
	[0242.671] lstrlenW (lpString="") returned 0
	[0242.672] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0242.672] InvalidateRect (hWnd=0x101a8, lpRect=0x0, bErase=1) returned 1
	[0242.672] InvalidateRect (hWnd=0x301b2, lpRect=0x0, bErase=1) returned 1
	[0242.672] InvalidateRect (hWnd=0x10202, lpRect=0x0, bErase=1) returned 1
	[0242.672] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3ce13a0
	[0242.672] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c2f0) returned 0x1
	[0242.673] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c2f0) returned 0x1
	[0242.673] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c2f0) returned 0x1
	[0242.673] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c2f0) returned 0x1
	[0242.674] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x0
	[0242.674] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x0
	[0242.674] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c330) returned 0x1
	[0242.675] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c330) returned 0x1
	[0242.675] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113f, wParam=0x0, lParam=0x21c3c0) returned 0x1
	[0242.675] InvalidateRect (hWnd=0x10234, lpRect=0x0, bErase=1) returned 1
	[0242.675] InvalidateRect (hWnd=0x20272, lpRect=0x0, bErase=1) returned 1
	[0242.675] InvalidateRect (hWnd=0x10280, lpRect=0x0, bErase=1) returned 1
	[0242.675] malloc (_Size=0xb0) returned 0x555740
	[0242.676] lstrlenW (lpString="") returned 0
	[0242.676] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0242.676] InvalidateRect (hWnd=0x101a8, lpRect=0x0, bErase=1) returned 1
	[0242.676] InvalidateRect (hWnd=0x301b2, lpRect=0x0, bErase=1) returned 1
	[0242.676] InvalidateRect (hWnd=0x10202, lpRect=0x0, bErase=1) returned 1
	[0242.677] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3ce13a0
	[0242.677] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c2f0) returned 0x1
	[0242.677] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c2f0) returned 0x1
	[0242.677] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c2f0) returned 0x1
	[0242.678] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c2f0) returned 0x1
	[0242.678] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x0
	[0242.679] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x0
	[0242.679] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c330) returned 0x1
	[0242.679] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c330) returned 0x1
	[0242.680] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113f, wParam=0x0, lParam=0x21c3c0) returned 0x1
	[0242.680] InvalidateRect (hWnd=0x10234, lpRect=0x0, bErase=1) returned 1
	[0242.680] InvalidateRect (hWnd=0x20272, lpRect=0x0, bErase=1) returned 1
	[0242.680] InvalidateRect (hWnd=0x10280, lpRect=0x0, bErase=1) returned 1
	[0242.680] malloc (_Size=0x28) returned 0x5548c0
	[0242.775] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x1132, wParam=0x0, lParam=0x21cff0) returned 0x3ce1400
	[0242.775] malloc (_Size=0x18) returned 0x54dbb0
	[0242.775] malloc (_Size=0x30) returned 0x54b9b0
	[0242.775] malloc (_Size=0x30) returned 0x54baf0
	[0242.775] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113f, wParam=0x0, lParam=0x21d070) returned 0x1
	[0242.776] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x1132, wParam=0x0, lParam=0x21cff0) returned 0x3ce1460
	[0242.776] malloc (_Size=0x18) returned 0x54dbd0
	[0242.776] malloc (_Size=0x30) returned 0x54bb30
	[0242.776] malloc (_Size=0x30) returned 0x54ba70
	[0242.776] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113f, wParam=0x0, lParam=0x21d070) returned 0x1
	[0242.777] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x1132, wParam=0x0, lParam=0x21cff0) returned 0x3ce14c0
	[0242.777] malloc (_Size=0x18) returned 0x54dbf0
	[0242.777] malloc (_Size=0x30) returned 0x54bab0
	[0242.777] malloc (_Size=0x30) returned 0x54bbf0
	[0242.777] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113f, wParam=0x0, lParam=0x21d070) returned 0x1
	[0242.777] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21d100) returned 0x1
	[0242.778] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21d100) returned 0x1
	[0242.778] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x3ce14c0
	[0242.779] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.780] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.780] malloc (_Size=0x20e) returned 0x556260
	[0242.780] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21cf48) returned 0x1
	[0242.781] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21cf48) returned 0x1
	[0242.781] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.782] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.782] lstrlenW (lpString="System Tools") returned 12
	[0242.782] malloc (_Size=0x20) returned 0x554920
	[0242.782] free (_Block=0x556260) 
	[0242.782] malloc (_Size=0x20) returned 0x5548c0
	[0242.782] malloc (_Size=0x30) returned 0x54bc30
	[0242.783] malloc (_Size=0x10) returned 0x556290
	[0242.783] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.784] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.784] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.785] malloc (_Size=0x20e) returned 0x556a60
	[0242.785] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21cf48) returned 0x1
	[0242.785] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21cf48) returned 0x1
	[0242.785] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.786] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.786] lstrlenW (lpString="Storage") returned 7
	[0242.786] free (_Block=0x556a60) 
	[0242.786] malloc (_Size=0x10) returned 0x556290
	[0242.787] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.788] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.788] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.788] malloc (_Size=0x20e) returned 0x556a60
	[0242.788] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21cf48) returned 0x1
	[0242.789] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21cf48) returned 0x1
	[0242.789] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.790] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.790] lstrlenW (lpString="Services and Applications") returned 25
	[0242.790] malloc (_Size=0x40) returned 0x63bfd0
	[0242.790] free (_Block=0x556a60) 
	[0242.790] malloc (_Size=0x40) returned 0x63c0c0
	[0242.790] malloc (_Size=0x10) returned 0x556290
	[0242.791] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.791] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.792] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.793] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.793] GetWindowLongW (hWnd=0x10260, nIndex=-20) returned 512
	[0242.794] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x46, wParam=0x0, lParam=0x21e0e0) returned 0x0
	[0242.794] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x46, wParam=0x0, lParam=0x21e0e0) returned 0x0
	[0242.795] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x46, wParam=0x0, lParam=0x21e0e0) returned 0x0
	[0242.795] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x46, wParam=0x0, lParam=0x21e0e0) returned 0x0
	[0242.796] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x46, wParam=0x0, lParam=0x21e0e0) returned 0x0
	[0242.796] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x0
	[0242.797] GetWindowLongW (hWnd=0x10260, nIndex=-20) returned 512
	[0242.797] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x46, wParam=0x0, lParam=0x21e0b0) returned 0x0
	[0242.798] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x46, wParam=0x0, lParam=0x21e0b0) returned 0x0
	[0242.798] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x46, wParam=0x0, lParam=0x21e0b0) returned 0x0
	[0242.799] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x46, wParam=0x0, lParam=0x21e0b0) returned 0x0
	[0242.799] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x46, wParam=0x0, lParam=0x21e0b0) returned 0x0
	[0242.799] malloc (_Size=0x28) returned 0x554920
	[0242.799] malloc (_Size=0x28) returned 0x5548c0
	[0242.800] malloc (_Size=0x28) returned 0x554a70
	[0242.800] malloc (_Size=0x10) returned 0x556290
	[0242.800] malloc (_Size=0x68) returned 0x551060
	[0242.800] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3ce13a0
	[0242.800] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21e190) returned 0x1
	[0242.801] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21e190) returned 0x1
	[0242.801] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21e190) returned 0x1
	[0242.801] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21e190) returned 0x1
	[0242.802] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3ce13a0
	[0242.802] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110b, wParam=0x9, lParam=0x3ce13a0) 
	[0242.802] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.803] free (_Block=0x553f10) 
	[0242.803] GetProcAddress (hModule=0x7fefc630000, lpProcName="ImageList_Destroy") returned 0x7fefc6907a4
	[0242.803] ImageList_Destroy (himl=0x4bac20) returned 1
	[0242.804] ImageList_Destroy (himl=0x4bb370) returned 1
	[0242.804] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x4bac20
	[0242.804] ImageList_Create (cx=32, cy=32, flags=0x21, cInitial=20, cGrow=10) returned 0x4bb370
	[0242.807] GetLastError () returned 0x6
	[0242.807] SetLastError (dwErrCode=0x6) 
	[0242.807] GetLastError () returned 0x6
	[0242.807] SetLastError (dwErrCode=0x6) 
	[0242.808] GetLastError () returned 0x6
	[0242.808] SetLastError (dwErrCode=0x6) 
	[0242.808] GetLastError () returned 0x6
	[0242.808] SetLastError (dwErrCode=0x6) 
	[0242.808] malloc (_Size=0x8) returned 0x554110
	[0242.808] malloc (_Size=0x150) returned 0x553f10
	[0242.808] malloc (_Size=0x8) returned 0x554100
	[0242.808] malloc (_Size=0x8) returned 0x5540f0
	[0242.808] malloc (_Size=0x8) returned 0x5540e0
	[0242.808] malloc (_Size=0x8) returned 0x5540d0
	[0242.808] malloc (_Size=0x8) returned 0x5540c0
	[0242.808] malloc (_Size=0x8) returned 0x5540b0
	[0242.808] malloc (_Size=0x8) returned 0x5540a0
	[0242.808] malloc (_Size=0x8) returned 0x554130
	[0242.808] GetLastError () returned 0x6
	[0242.808] SetLastError (dwErrCode=0x6) 
	[0242.809] DeleteObject (ho=0xffffffffd30509c4) returned 1
	[0242.809] GetLastError () returned 0x0
	[0242.809] SetLastError (dwErrCode=0x0) 
	[0242.809] GetLastError () returned 0x0
	[0242.809] SetLastError (dwErrCode=0x0) 
	[0242.809] DeleteObject (ho=0xffffffffd10509c3) returned 1
	[0242.809] GetLastError () returned 0x0
	[0242.809] SetLastError (dwErrCode=0x0) 
	[0242.819] GetLastError () returned 0x0
	[0242.819] SetLastError (dwErrCode=0x0) 
	[0242.819] DeleteObject (ho=0x250509cf) returned 1
	[0242.819] GetLastError () returned 0x0
	[0242.819] SetLastError (dwErrCode=0x0) 
	[0242.819] GetLastError () returned 0x0
	[0242.819] SetLastError (dwErrCode=0x0) 
	[0242.819] DeleteObject (ho=0x40509d1) returned 1
	[0242.819] GetLastError () returned 0x0
	[0242.820] SetLastError (dwErrCode=0x0) 
	[0242.820] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1003, wParam=0x1, lParam=0x4bac20) returned 0x4bac20
	[0242.820] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1208, wParam=0x0, lParam=0x4bac20) returned 0x4b9980
	[0242.821] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1003, wParam=0x0, lParam=0x4bb370) returned 0x4bb370
	[0242.916] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1208, wParam=0x0, lParam=0x4b9980) returned 0x4bac20
	[0242.916] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.917] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x4e, wParam=0x31f1, lParam=0x21db90) returned 0x0
	[0242.917] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.918] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x2022c, Msg=0x4e, wParam=0x31f1, lParam=0x21db90) returned 0x0
	[0242.918] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0242.918] GetParent (hWnd=0x2022c) returned 0x1021e
	[0242.918] GetParent (hWnd=0x1021e) returned 0xd015c
	[0242.919] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21d020) returned 0x1
	[0242.919] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21d020) returned 0x1
	[0242.919] malloc (_Size=0x28) returned 0x554aa0
	[0242.919] malloc (_Size=0x28) returned 0x554aa0
	[0242.920] malloc (_Size=0x28) returned 0x554aa0
	[0242.920] GetParent (hWnd=0x2022c) returned 0x1021e
	[0242.920] GetParent (hWnd=0x1021e) returned 0xd015c
	[0242.921] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x3ce13a0
	[0242.921] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21ca20) returned 0x1
	[0242.921] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21ca20) returned 0x1
	[0242.921] malloc (_Size=0xe0) returned 0x54b380
	[0242.922] free (_Block=0x553f10) 
	[0242.922] ImageList_Destroy (himl=0x4bac20) returned 1
	[0242.922] ImageList_Destroy (himl=0x4bb370) returned 1
	[0242.923] ImageList_Create (cx=16, cy=16, flags=0x21, cInitial=20, cGrow=10) returned 0x4bac20
	[0242.923] ImageList_Create (cx=32, cy=32, flags=0x21, cInitial=20, cGrow=10) returned 0x4bb370
	[0242.925] GetLastError () returned 0x6
	[0242.925] SetLastError (dwErrCode=0x6) 
	[0242.925] GetLastError () returned 0x6
	[0242.925] SetLastError (dwErrCode=0x6) 
	[0242.926] GetLastError () returned 0x6
	[0242.926] SetLastError (dwErrCode=0x6) 
	[0242.926] GetLastError () returned 0x6
	[0242.926] SetLastError (dwErrCode=0x6) 
	[0242.926] malloc (_Size=0x8) returned 0x554130
	[0242.926] malloc (_Size=0x150) returned 0x553f10
	[0242.926] malloc (_Size=0x8) returned 0x5540a0
	[0242.926] malloc (_Size=0x8) returned 0x5540b0
	[0242.926] malloc (_Size=0x8) returned 0x5540c0
	[0242.926] malloc (_Size=0x8) returned 0x5540d0
	[0242.926] malloc (_Size=0x8) returned 0x5540e0
	[0242.926] malloc (_Size=0x8) returned 0x5540f0
	[0242.926] malloc (_Size=0x8) returned 0x554100
	[0242.926] malloc (_Size=0x8) returned 0x554110
	[0242.926] GetLastError () returned 0x6
	[0242.926] SetLastError (dwErrCode=0x6) 
	[0242.926] DeleteObject (ho=0x280509b6) returned 1
	[0242.927] GetLastError () returned 0x0
	[0242.927] SetLastError (dwErrCode=0x0) 
	[0242.927] GetLastError () returned 0x0
	[0242.927] SetLastError (dwErrCode=0x0) 
	[0242.927] DeleteObject (ho=0x100509b8) returned 1
	[0242.927] GetLastError () returned 0x0
	[0242.927] SetLastError (dwErrCode=0x0) 
	[0242.937] GetLastError () returned 0x0
	[0242.937] SetLastError (dwErrCode=0x0) 
	[0242.937] DeleteObject (ho=0xffffffff88050a2a) returned 1
	[0242.937] GetLastError () returned 0x0
	[0242.937] SetLastError (dwErrCode=0x0) 
	[0242.937] GetLastError () returned 0x0
	[0242.938] SetLastError (dwErrCode=0x0) 
	[0242.938] DeleteObject (ho=0x50509bc) returned 1
	[0242.938] GetLastError () returned 0x0
	[0242.938] SetLastError (dwErrCode=0x0) 
	[0242.938] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1003, wParam=0x1, lParam=0x4bac20) returned 0x4bac20
	[0242.939] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1208, wParam=0x0, lParam=0x4bac20) returned 0x4b9980
	[0242.939] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x1003, wParam=0x0, lParam=0x4bb370) returned 0x4bb370
	[0242.940] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x1208, wParam=0x0, lParam=0x4b9980) returned 0x4bac20
	[0242.940] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0242.941] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0242.941] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x21c5b0) returned 0x0
	[0242.942] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x21c5b0) returned 0x0
	[0242.942] CallWindowProcW (lpPrevWndFunc=0x7fefc6bbf00, hWnd=0x10262, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0
	[0242.942] GetDC (hWnd=0x10280) returned 0xc01083a
	[0242.943] malloc (_Size=0x88) returned 0x4e0560
	[0242.943] malloc (_Size=0x100) returned 0x547df0
	[0242.943] SelectObject (hdc=0xc01083a, h=0x20a0a18) returned 0x18a002e
	[0242.943] SelectObject (hdc=0xc01083a, h=0x18a002e) returned 0x20a0a18
	[0242.943] free (_Block=0x4e0560) 
	[0242.943] free (_Block=0x547df0) 
	[0242.943] ReleaseDC (hWnd=0x10280, hDC=0xc01083a) returned 1
	[0242.943] malloc (_Size=0x28) returned 0x554aa0
	[0242.944] GetWindowLongW (hWnd=0x10260, nIndex=-20) returned 512
	[0242.944] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x46, wParam=0x0, lParam=0x21cc70) returned 0x0
	[0242.944] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x20272, Msg=0x46, wParam=0x0, lParam=0x21cc70) returned 0x0
	[0242.945] CallWindowProcW (lpPrevWndFunc=0x7fefc6d61b4, hWnd=0x10232, Msg=0x46, wParam=0x0, lParam=0x21cc70) returned 0x0
	[0242.945] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10280, Msg=0x46, wParam=0x0, lParam=0x21cc70) returned 0x0
	[0242.946] CallWindowProcW (lpPrevWndFunc=0x7fefc6b5944, hWnd=0x10260, Msg=0x46, wParam=0x0, lParam=0x21cc70) returned 0x0
	[0242.946] lstrlenW (lpString="") returned 0
	[0242.946] lstrlenW (lpString="") returned 0
	[0242.946] lstrlenW (lpString="") returned 0
	[0242.946] lstrlenW (lpString="Computer Management (Local)") returned 27
	[0242.946] malloc (_Size=0x44) returned 0x63bfd0
	[0242.947] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x3ce13a0
	[0242.947] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21ccf0) returned 0x1
	[0242.947] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21ccf0) returned 0x1
	[0242.948] malloc (_Size=0xc0) returned 0x556b50
	[0242.948] FindResourceW (hModule=0xff6d0000, lpName=0x349, lpType=0x6) returned 0x0
	[0242.948] FindResourceW (hModule=0x7fef8280000, lpName=0x349, lpType=0x6) returned 0x150b10
	[0242.948] LoadStringW (in: hInstance=0x7fef8280000, uID=0x3489, lpBuffer=0x21c940, cchBufferMax=256 | out: lpBuffer="Displays Help for the current selection.") returned 0x28
	[0242.948] lstrlenW (lpString="Displays Help for the current selection.") returned 40
	[0242.948] malloc (_Size=0x5e) returned 0x5510d0
	[0242.948] FindResourceW (hModule=0xff6d0000, lpName=0x34a, lpType=0x6) returned 0x0
	[0242.948] FindResourceW (hModule=0x7fef8280000, lpName=0x34a, lpType=0x6) returned 0x150b20
	[0242.948] LoadStringW (in: hInstance=0x7fef8280000, uID=0x3492, lpBuffer=0x21c940, cchBufferMax=256 | out: lpBuffer="Contains help items for the current selection.") returned 0x2e
	[0242.948] lstrlenW (lpString="Contains help items for the current selection.") returned 46
	[0242.948] malloc (_Size=0x6a) returned 0x556c20
	[0242.948] malloc (_Size=0x100) returned 0x547df0
	[0242.949] malloc (_Size=0x100) returned 0x547f00
	[0242.951] lstrlenW (lpString="") returned 0
	[0242.951] SetWindowTextW (hWnd=0x10286, lpString="") returned 1
	[0242.951] ShowWindow (hWnd=0x10288, nCmdShow=0) returned 1
	[0242.952] CallWindowProcW (lpPrevWndFunc=0x7fefc6cae1c, hWnd=0x10288, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
	[0242.952] lstrlenW (lpString="") returned 0
	[0242.952] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40b, wParam=0x0, lParam=0x7fef84c8074) returned 0x1
	[0242.953] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40a, wParam=0x0, lParam=0x21beb0) returned 0x1
	[0242.953] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40b, wParam=0x1, lParam=0x7fef84c8074) returned 0x1
	[0242.954] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40a, wParam=0x1, lParam=0x21beb0) returned 0x1
	[0242.954] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40b, wParam=0x2, lParam=0x7fef84c8074) returned 0x1
	[0242.955] CallWindowProcW (lpPrevWndFunc=0x7fefc65230c, hWnd=0x10286, Msg=0x40a, wParam=0x2, lParam=0x21beb0) returned 0x1
	[0242.955] GetParent (hWnd=0x10286) returned 0x1021e
	[0242.955] GetParent (hWnd=0x1021e) returned 0xd015c
	[0242.955] malloc (_Size=0x28) returned 0x554aa0
	[0242.956] malloc (_Size=0x28) returned 0x554950
	[0242.957] malloc (_Size=0x8) returned 0x554140
	[0242.957] malloc (_Size=0x8) returned 0x554150
	[0242.957] malloc (_Size=0x150) returned 0x556ca0
	[0242.958] malloc (_Size=0x8) returned 0x554160
	[0242.959] malloc (_Size=0x8) returned 0x554170
	[0243.056] malloc (_Size=0x8) returned 0x554180
	[0243.056] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3ce13a0
	[0243.056] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c170) returned 0x1
	[0243.057] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c170) returned 0x1
	[0243.057] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x3ce14c0
	[0243.058] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x3ce14c0
	[0243.058] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c140) returned 0x1
	[0243.058] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c140) returned 0x1
	[0243.059] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x1, lParam=0x3ce14c0) returned 0x3ce1460
	[0243.059] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c140) returned 0x1
	[0243.059] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c140) returned 0x1
	[0243.059] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x1102, wParam=0x2, lParam=0x3ce1460) returned 0x1
	[0243.060] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0243.060] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113f, wParam=0x0, lParam=0x21b0b8) returned 0x1
	[0243.061] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0243.061] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21aff0) returned 0x1
	[0243.062] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21aff0) returned 0x1
	[0243.062] malloc (_Size=0x28) returned 0x554980
	[0243.063] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
	[0243.063] GetParent (hWnd=0x3016a) returned 0x0
	[0243.063] GetParent (hWnd=0x3016a) returned 0x0
	[0243.064] GetParent (hWnd=0x3016a) returned 0x0
	[0243.064] GetDesktopWindow () returned 0x10010
	[0243.064] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.064] IsWindowEnabled (hWnd=0x20144) returned 0
	[0243.064] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.064] IsWindowEnabled (hWnd=0x20142) returned 1
	[0243.064] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.064] IsWindowEnabled (hWnd=0x20146) returned 1
	[0243.064] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.064] IsWindowEnabled (hWnd=0x100a0) returned 1
	[0243.064] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.064] IsWindowEnabled (hWnd=0x20060) returned 0
	[0243.064] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.064] IsWindowEnabled (hWnd=0x1009e) returned 1
	[0243.064] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.064] IsWindowEnabled (hWnd=0x10088) returned 1
	[0243.065] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.065] IsWindowEnabled (hWnd=0x100b6) returned 1
	[0243.065] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.065] IsWindowEnabled (hWnd=0x100aa) returned 1
	[0243.065] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.065] IsWindowEnabled (hWnd=0x100a6) returned 1
	[0243.065] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.065] IsWindowEnabled (hWnd=0x100a2) returned 1
	[0243.065] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.065] IsWindowEnabled (hWnd=0x1007a) returned 0
	[0243.065] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.065] IsWindowEnabled (hWnd=0x10070) returned 0
	[0243.065] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.065] IsWindowEnabled (hWnd=0x10080) returned 1
	[0243.065] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.065] IsWindowEnabled (hWnd=0x10074) returned 1
	[0243.065] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.065] IsWindowEnabled (hWnd=0x10114) returned 1
	[0243.066] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.066] IsWindowEnabled (hWnd=0x1010a) returned 1
	[0243.066] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.066] IsWindowEnabled (hWnd=0x100f8) returned 1
	[0243.066] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.066] IsWindowEnabled (hWnd=0x100d0) returned 1
	[0243.066] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.066] IsWindowEnabled (hWnd=0x500c0) returned 1
	[0243.066] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.066] IsWindowEnabled (hWnd=0x100b8) returned 1
	[0243.066] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.066] IsWindowEnabled (hWnd=0x10054) returned 0
	[0243.066] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.066] IsWindowEnabled (hWnd=0x10052) returned 0
	[0243.066] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.066] IsWindowEnabled (hWnd=0x100c8) returned 1
	[0243.067] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.067] IsWindowEnabled (hWnd=0x20134) returned 1
	[0243.067] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.067] IsWindowEnabled (hWnd=0x20138) returned 1
	[0243.067] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.067] IsWindowEnabled (hWnd=0x2013a) returned 1
	[0243.067] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.067] IsWindowEnabled (hWnd=0x20118) returned 1
	[0243.067] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.067] IsWindowEnabled (hWnd=0x30028) returned 1
	[0243.067] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.067] IsWindowEnabled (hWnd=0x2014e) returned 0
	[0243.067] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.067] IsWindowEnabled (hWnd=0x20156) returned 1
	[0243.067] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.067] IsWindowEnabled (hWnd=0x2015a) returned 0
	[0243.067] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.068] IsWindowEnabled (hWnd=0x2001a) returned 1
	[0243.068] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.068] IsWindowEnabled (hWnd=0x20022) returned 0
	[0243.068] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.068] IsWindowEnabled (hWnd=0x20018) returned 1
	[0243.068] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.068] IsWindowEnabled (hWnd=0x1012e) returned 1
	[0243.068] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.068] IsWindowEnabled (hWnd=0x10120) returned 1
	[0243.068] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.068] IsWindowEnabled (hWnd=0x1011c) returned 1
	[0243.068] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.068] IsWindowEnabled (hWnd=0x10104) returned 1
	[0243.068] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.068] IsWindowEnabled (hWnd=0x10100) returned 1
	[0243.069] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.069] IsWindowEnabled (hWnd=0x100f2) returned 1
	[0243.069] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.069] IsWindowEnabled (hWnd=0x100e8) returned 1
	[0243.069] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.069] IsWindowEnabled (hWnd=0x100e2) returned 1
	[0243.069] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.069] IsWindowEnabled (hWnd=0x200dc) returned 1
	[0243.069] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.069] IsWindowEnabled (hWnd=0x100c4) returned 1
	[0243.069] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.069] IsWindowEnabled (hWnd=0x500ba) returned 1
	[0243.069] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.069] IsWindowEnabled (hWnd=0x100b0) returned 1
	[0243.070] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.070] IsWindowEnabled (hWnd=0x100ae) returned 1
	[0243.070] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.070] IsWindowEnabled (hWnd=0x100a4) returned 1
	[0243.070] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.070] IsWindowEnabled (hWnd=0x10090) returned 1
	[0243.070] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.070] IsWindowEnabled (hWnd=0x20264) returned 1
	[0243.070] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.070] IsWindowEnabled (hWnd=0x10238) returned 1
	[0243.078] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.078] IsWindowEnabled (hWnd=0x10236) returned 1
	[0243.078] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.078] IsWindowEnabled (hWnd=0x1022e) returned 1
	[0243.078] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.078] IsWindowEnabled (hWnd=0x10222) returned 1
	[0243.079] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.079] IsWindowEnabled (hWnd=0x1021c) returned 1
	[0243.079] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.079] IsWindowEnabled (hWnd=0x3019e) returned 1
	[0243.079] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.079] IsWindowEnabled (hWnd=0x201b8) returned 1
	[0243.079] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.079] IsWindowEnabled (hWnd=0x201c0) returned 1
	[0243.079] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.079] IsWindowEnabled (hWnd=0x101b0) returned 1
	[0243.079] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.079] IsWindowEnabled (hWnd=0x101ac) returned 1
	[0243.079] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.079] IsWindowEnabled (hWnd=0x101aa) returned 1
	[0243.080] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.080] IsWindowEnabled (hWnd=0x20164) returned 0
	[0243.080] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.080] IsWindowEnabled (hWnd=0x20162) returned 0
	[0243.080] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.080] IsWindowEnabled (hWnd=0x3016a) returned 0
	[0243.080] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.080] IsWindowEnabled (hWnd=0x20160) returned 0
	[0243.080] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.080] IsWindowEnabled (hWnd=0xa016e) returned 1
	[0243.080] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.080] IsWindowEnabled (hWnd=0x20166) returned 0
	[0243.080] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.080] IsWindowEnabled (hWnd=0x1008c) returned 1
	[0243.080] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.080] IsWindowEnabled (hWnd=0x1006e) returned 1
	[0243.080] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.080] IsWindowEnabled (hWnd=0x10066) returned 1
	[0243.080] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.080] IsWindowEnabled (hWnd=0x40044) returned 1
	[0243.081] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.081] IsWindowEnabled (hWnd=0x1005a) returned 1
	[0243.081] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.081] IsWindowEnabled (hWnd=0x1005c) returned 0
	[0243.081] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.081] IsWindowEnabled (hWnd=0x20048) returned 1
	[0243.081] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.081] IsWindowEnabled (hWnd=0x1004a) returned 0
	[0243.081] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.081] IsWindowEnabled (hWnd=0x10046) returned 1
	[0243.081] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.081] IsWindowEnabled (hWnd=0x1004e) returned 0
	[0243.081] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.081] IsWindowEnabled (hWnd=0x1004c) returned 0
	[0243.081] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.081] IsWindowEnabled (hWnd=0x1012c) returned 0
	[0243.081] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.081] IsWindowEnabled (hWnd=0x10064) returned 0
	[0243.081] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.081] IsWindowEnabled (hWnd=0x2007e) returned 1
	[0243.081] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0243.081] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.081] GetParent (hWnd=0x3016a) returned 0x0
	[0243.082] GetDesktopWindow () returned 0x10010
	[0243.082] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.082] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0243.082] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0243.082] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.082] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.082] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.082] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.082] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.082] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.082] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.082] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.082] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.082] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.082] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0243.082] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0243.083] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.083] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.083] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.083] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0243.083] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0243.083] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.083] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.083] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.083] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0243.083] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0243.083] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.083] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.083] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.083] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0243.083] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0243.084] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.084] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.084] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.084] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0243.084] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0243.084] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.084] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.084] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.084] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0243.084] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0243.084] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.084] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.084] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.084] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0243.084] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0243.085] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.085] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.085] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.085] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0243.085] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0243.085] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.085] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.085] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.085] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0243.085] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0243.085] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.085] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.085] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.085] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0243.085] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0243.085] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.085] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.086] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.086] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.086] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.086] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.086] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.086] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.086] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.086] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.086] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.086] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.086] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.086] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.086] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.086] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.087] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.087] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.087] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.087] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.087] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.087] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.087] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0243.087] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0243.087] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.087] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0243.087] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0243.087] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.087] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0243.087] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0243.087] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.087] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0243.087] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0243.087] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.088] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0243.088] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0243.088] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.088] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0243.088] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0243.088] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.088] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0243.088] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0243.088] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.088] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.088] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.088] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.088] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.088] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.088] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.088] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.089] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.089] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.089] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0243.089] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0243.089] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.089] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.089] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.089] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0243.089] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0243.089] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.089] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0243.089] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0243.089] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.089] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0243.089] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0243.089] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.089] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.089] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.090] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.090] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.090] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.090] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.090] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0243.090] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0243.090] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.090] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.090] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.090] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.090] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.090] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.090] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0243.090] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0243.090] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.090] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.090] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.091] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.091] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.091] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.091] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0243.091] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0243.091] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.091] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.091] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.091] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0243.091] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0243.091] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.091] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0243.091] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0243.091] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.091] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0243.091] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0243.091] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.091] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0243.091] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0243.092] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.092] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0243.092] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0243.092] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.092] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.092] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.092] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0243.092] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0243.092] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.092] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0243.092] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0243.092] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.092] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.092] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.092] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0243.092] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0243.092] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.092] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0243.092] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0243.092] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.092] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.092] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.092] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0243.092] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0243.092] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.092] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.092] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.092] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.093] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.093] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.093] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0243.093] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0243.093] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.093] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0243.093] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0243.093] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.093] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0243.093] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0243.093] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.093] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0243.093] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0243.093] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.093] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.093] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.093] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0243.093] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0243.093] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.093] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.093] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.093] GetWindowLongW (hWnd=0x20264, nIndex=-16) returned -2080374526
	[0243.093] GetWindow (hWnd=0x20264, uCmd=0x4) returned 0x0
	[0243.093] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.093] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned -2080374526
	[0243.093] GetWindow (hWnd=0x10238, uCmd=0x4) returned 0x0
	[0243.093] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.093] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned -2080374782
	[0243.093] GetWindow (hWnd=0x10236, uCmd=0x4) returned 0x3016a
	[0243.093] SendMessageW (hWnd=0x10236, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.094] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.094] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.094] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.094] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned -2080374526
	[0243.094] GetWindow (hWnd=0x1022e, uCmd=0x4) returned 0x0
	[0243.094] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.094] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned -2080374782
	[0243.094] GetWindow (hWnd=0x10222, uCmd=0x4) returned 0x20164
	[0243.094] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0243.094] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.094] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.094] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned -2080374782
	[0243.094] GetWindow (hWnd=0x1021c, uCmd=0x4) returned 0xa016e
	[0243.094] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.094] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.094] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.095] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0243.095] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0243.095] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.095] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0243.095] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0243.095] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.095] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0243.095] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0243.095] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.095] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0243.095] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0243.095] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0243.095] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.095] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.095] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0243.095] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0243.096] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.096] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.096] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.096] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0243.096] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0243.096] SendMessageW (hWnd=0x101aa, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.096] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.096] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.096] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.096] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0243.096] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.096] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.096] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0243.096] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0243.096] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 214892544
	[0243.096] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.096] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.096] SendMessageW (hWnd=0x3016a, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.097] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.097] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.097] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0243.097] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0243.097] SendMessageW (hWnd=0x20160, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.097] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0243.097] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20160, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.097] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.097] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.097] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.097] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.098] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0243.098] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0243.098] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.098] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.098] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.098] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.098] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.098] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.098] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0243.098] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0243.098] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.098] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0243.098] GetParent (hWnd=0x10066) returned 0x0
	[0243.098] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.098] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0243.098] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0243.098] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.098] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.099] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.099] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.099] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0243.099] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0243.099] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.099] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.099] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.099] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.099] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.099] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.099] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0243.099] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0243.099] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.099] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.099] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.099] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0243.099] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0243.099] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.100] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0243.100] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0243.100] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.100] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.100] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.100] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.100] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.100] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.100] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0243.100] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0243.100] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.100] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.100] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.100] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.100] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.101] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.101] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.101] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.101] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.101] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.101] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.101] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.101] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0243.196] GetLastError () returned 0x3f0
	[0243.196] SetLastError (dwErrCode=0x3f0) 
	[0243.197] GetLastError () returned 0x0
	[0243.197] SetLastError (dwErrCode=0x0) 
	[0243.197] malloc (_Size=0x190) returned 0x556e00
	[0243.198] GetParent (hWnd=0x3016a) returned 0x0
	[0243.199] GetActiveWindow () returned 0x0
	[0243.199] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0243.199] GetParent (hWnd=0x3016a) returned 0x0
	[0243.199] GetDesktopWindow () returned 0x10010
	[0243.199] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.199] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0243.199] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0243.199] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.199] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.199] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.199] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.199] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.199] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.199] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.199] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.199] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.200] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.200] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0243.200] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0243.200] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.200] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.200] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.200] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0243.200] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0243.200] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.200] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.200] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.200] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0243.200] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0243.200] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.200] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.200] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.201] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0243.201] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0243.201] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.201] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.201] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.201] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0243.201] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0243.201] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.201] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.201] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.201] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0243.201] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0243.201] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.201] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.201] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.201] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0243.201] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0243.202] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.202] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.202] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.202] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0243.202] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0243.202] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.202] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.202] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.202] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0243.202] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0243.202] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.202] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.202] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.202] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0243.202] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0243.203] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.203] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.203] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.203] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.203] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.203] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.203] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.203] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.203] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.203] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.203] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.203] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.203] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.203] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.203] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.203] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.204] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.204] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.204] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.204] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.204] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.204] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.204] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0243.204] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0243.204] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.204] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0243.204] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0243.204] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.204] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0243.204] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0243.204] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.204] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0243.204] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0243.204] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.205] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0243.205] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0243.205] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.205] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0243.205] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0243.205] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.205] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0243.205] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0243.205] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.205] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.205] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.205] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.205] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.205] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.205] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.205] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.206] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.206] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.206] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0243.206] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0243.206] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.206] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.206] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.206] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0243.206] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0243.206] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.206] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0243.206] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0243.206] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.206] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0243.206] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0243.206] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.206] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.206] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.206] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.207] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.207] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.207] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.207] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0243.207] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0243.207] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.207] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.207] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.207] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.207] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.207] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.207] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0243.207] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0243.207] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.207] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.207] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.208] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.208] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.208] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.208] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0243.208] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0243.208] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.208] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.208] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.208] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0243.208] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0243.208] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.208] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0243.208] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0243.208] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.208] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0243.208] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0243.208] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.209] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0243.209] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0243.209] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.209] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0243.209] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0243.209] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.209] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.209] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.209] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0243.209] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0243.209] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.209] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0243.209] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0243.209] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.209] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.209] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.209] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0243.210] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0243.210] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.210] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0243.210] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0243.210] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.210] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.210] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.210] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0243.210] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0243.210] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.210] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.210] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.210] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.210] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.210] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.210] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0243.210] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0243.210] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.211] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0243.211] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0243.211] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.211] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0243.211] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0243.211] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.211] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0243.211] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0243.211] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.211] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.211] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.211] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0243.211] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0243.211] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.211] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.211] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.212] GetWindowLongW (hWnd=0x20264, nIndex=-16) returned -2080374526
	[0243.212] GetWindow (hWnd=0x20264, uCmd=0x4) returned 0x0
	[0243.212] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.212] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned -2080374526
	[0243.212] GetWindow (hWnd=0x10238, uCmd=0x4) returned 0x0
	[0243.212] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.212] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned -2080374782
	[0243.212] GetWindow (hWnd=0x10236, uCmd=0x4) returned 0x3016a
	[0243.212] SendMessageW (hWnd=0x10236, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.212] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.212] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.212] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.212] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned -2080374526
	[0243.212] GetWindow (hWnd=0x1022e, uCmd=0x4) returned 0x0
	[0243.212] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.212] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned -2080374782
	[0243.212] GetWindow (hWnd=0x10222, uCmd=0x4) returned 0x20164
	[0243.213] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.213] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.213] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.213] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned -2080374782
	[0243.213] GetWindow (hWnd=0x1021c, uCmd=0x4) returned 0xa016e
	[0243.213] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.213] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.213] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.213] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0243.213] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0243.213] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.213] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0243.213] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0243.213] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.213] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0243.213] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0243.213] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.213] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0243.213] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0243.214] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.214] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.214] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.214] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0243.214] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0243.214] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.214] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.214] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.214] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0243.214] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0243.214] SendMessageW (hWnd=0x101aa, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.214] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.214] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.214] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.214] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.214] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.214] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.214] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0243.215] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0243.215] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.215] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.215] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.215] SendMessageW (hWnd=0x3016a, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.215] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.215] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.215] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0243.215] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0243.215] SendMessageW (hWnd=0x20160, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.215] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0243.216] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20160, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0243.216] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.216] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.216] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.216] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.216] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0243.216] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0243.216] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0243.216] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.216] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.216] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.216] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.216] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.216] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0243.216] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0243.216] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.216] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0243.216] GetParent (hWnd=0x10066) returned 0x0
	[0243.217] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.217] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0243.217] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0243.217] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.217] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.217] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.217] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.217] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0243.217] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0243.217] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.217] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.217] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.217] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.217] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.217] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.217] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0243.217] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0243.218] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.218] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.218] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.218] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0243.218] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0243.218] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.218] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0243.218] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0243.218] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.218] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.218] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.218] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.218] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.218] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.218] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0243.218] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0243.219] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.219] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.219] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.219] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.219] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.219] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.219] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.219] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.219] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.219] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.219] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.219] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.219] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0243.220] FindResourceW (hModule=0x75240000, lpName=0x86, lpType=0x2) returned 0x752428f8
	[0243.221] malloc (_Size=0x88) returned 0x4e0560
	[0243.221] malloc (_Size=0x88) returned 0x4e05f0
	[0243.221] malloc (_Size=0x100) returned 0x548010
	[0243.221] FindResourceW (hModule=0x75240000, lpName=0x87, lpType=0x2) returned 0x75242908
	[0243.223] GetLastError () returned 0x0
	[0243.223] SetLastError (dwErrCode=0x0) 
	[0243.223] DeleteObject (ho=0x9050a06) returned 1
	[0243.223] GetLastError () returned 0x0
	[0243.223] SetLastError (dwErrCode=0x0) 
	[0243.223] GetLastError () returned 0x0
	[0243.223] SetLastError (dwErrCode=0x0) 
	[0243.223] free (_Block=0x4e05f0) 
	[0243.223] free (_Block=0x548010) 
	[0243.223] DeleteObject (ho=0x8050a08) returned 1
	[0243.223] GetLastError () returned 0x0
	[0243.223] SetLastError (dwErrCode=0x0) 
	[0243.224] malloc (_Size=0x28) returned 0x554980
	[0243.225] GetLastError () returned 0x3f0
	[0243.225] SetLastError (dwErrCode=0x3f0) 
	[0243.225] GetLastError () returned 0x0
	[0243.225] SetLastError (dwErrCode=0x0) 
	[0243.226] malloc (_Size=0x110) returned 0x557250
	[0243.320] malloc (_Size=0x100) returned 0x548010
	[0243.321] malloc (_Size=0x88) returned 0x4e05f0
	[0243.321] swprintf_s (in: _Dst=0x3eed30, _SizeInWords=0x100, _Format="Afx:%p:%x" | out: _Dst="Afx:000007FEF4060000:0") returned 22
	[0243.321] GetClassInfoW (in: hInstance=0x7fef4060000, lpClassName="Afx:000007FEF4060000:0", lpWndClass=0x21a660 | out: lpWndClass=0x21a660) returned 0
	[0243.321] GetClassInfoW (in: hInstance=0x7fef4060000, lpClassName="Afx:000007FEF4060000:0", lpWndClass=0x21a5b0 | out: lpWndClass=0x21a5b0) returned 0
	[0243.322] RegisterClassW (lpWndClass=0x21a660) returned 0xc168
	[0243.322] lstrlenW (lpString="Afx:000007FEF4060000:0") returned 22
	[0243.322] lstrlenW (lpString="") returned 0
	[0243.322] wcscat_s (in: _Destination="", _SizeInWords=0x1000, _Source="Afx:000007FEF4060000:0" | out: _Destination="Afx:000007FEF4060000:0") returned 0x0
	[0243.322] wcscat_s (in: _Destination="Afx:000007FEF4060000:0", _SizeInWords=0x1000, _Source="\n" | out: _Destination="Afx:000007FEF4060000:0\n") returned 0x0
	[0243.322] lstrlenW (lpString="Afx:000007FEF4060000:0") returned 22
	[0243.322] malloc (_Size=0x3a) returned 0x63bc10
	[0243.322] CreateWindowExW (dwExStyle=0x0, lpClassName="Afx:000007FEF4060000:0", lpWindowName="CMessageWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x7fef4060000, lpParam=0x0) returned 0x10290
	[0243.323] malloc (_Size=0x88) returned 0x4e0680
	[0243.323] malloc (_Size=0x88) returned 0x4e0710
	[0243.323] malloc (_Size=0x100) returned 0x548120
	[0243.323] GetParent (hWnd=0x10290) returned 0x0
	[0243.323] SetWindowLongPtrW (hWnd=0x10290, nIndex=-4, dwNewLong=0x7fef406425c) returned 0x77bdb0ac
	[0243.323] CallNextHookEx (hhk=0x101ab, nCode=3, wParam=0x10290, lParam=0x219f50) returned 0x0
	[0243.323] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10290, Msg=0x24, wParam=0x0, lParam=0x21a090) returned 0x0
	[0243.324] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10290, Msg=0x81, wParam=0x0, lParam=0x21a030) returned 0x1
	[0243.325] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10290, Msg=0x83, wParam=0x0, lParam=0x21a0b0) returned 0x0
	[0243.325] CallWindowProcW (lpPrevWndFunc=0x77bdb0ac, hWnd=0x10290, Msg=0x1, wParam=0x0, lParam=0x21a000) returned 0x0
	[0243.325] free (_Block=0x63bc10) 
	[0243.326] malloc (_Size=0x28) returned 0x554980
	[0243.326] malloc (_Size=0x28) returned 0x554b30
	[0243.327] lstrlenW (lpString="") returned 0
	[0243.327] malloc (_Size=0x10) returned 0x556350
	[0243.327] malloc (_Size=0x48) returned 0x63bc10
	[0243.327] malloc (_Size=0x150) returned 0x5575e0
	[0243.327] lstrlenW (lpString="XDUWTFONO") returned 9
	[0243.327] malloc (_Size=0x20) returned 0x554b30
	[0243.328] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x101a8, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x0
	[0243.328] InvalidateRect (hWnd=0x101a8, lpRect=0x0, bErase=1) returned 1
	[0243.328] InvalidateRect (hWnd=0x301b2, lpRect=0x0, bErase=1) returned 1
	[0243.328] InvalidateRect (hWnd=0x10202, lpRect=0x0, bErase=1) returned 1
	[0243.329] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3ce13a0
	[0243.329] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21a2e0) returned 0x1
	[0243.329] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21a2e0) returned 0x1
	[0243.329] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21a2e0) returned 0x1
	[0243.330] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21a2e0) returned 0x1
	[0243.330] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x3ce14c0
	[0243.330] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21a2e0) returned 0x1
	[0243.331] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21a2e0) returned 0x1
	[0243.331] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x1, lParam=0x3ce14c0) returned 0x3ce1460
	[0243.331] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21a2e0) returned 0x1
	[0243.331] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21a2e0) returned 0x1
	[0243.332] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce1460) returned 0x0
	[0243.332] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce1460) returned 0x0
	[0243.332] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21a320) returned 0x1
	[0243.333] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21a320) returned 0x1
	[0243.333] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113f, wParam=0x0, lParam=0x21a3b0) returned 0x1
	[0243.333] InvalidateRect (hWnd=0x10234, lpRect=0x0, bErase=1) returned 1
	[0243.333] InvalidateRect (hWnd=0x20272, lpRect=0x0, bErase=1) returned 1
	[0243.333] InvalidateRect (hWnd=0x10280, lpRect=0x0, bErase=1) returned 1
	[0243.333] malloc (_Size=0x150) returned 0x5578f0
	[0243.334] free (_Block=0x556350) 
	[0243.334] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x1132, wParam=0x0, lParam=0x21af60) returned 0x3ce1580
	[0243.334] malloc (_Size=0x18) returned 0x556350
	[0243.334] malloc (_Size=0x30) returned 0x54bc70
	[0243.334] malloc (_Size=0x30) returned 0x54bcb0
	[0243.335] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113f, wParam=0x0, lParam=0x21afe0) returned 0x1
	[0243.335] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21b070) returned 0x1
	[0243.335] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21b070) returned 0x1
	[0243.336] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce1460) returned 0x3ce1580
	[0243.337] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0243.337] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0243.338] malloc (_Size=0x20e) returned 0x557a50
	[0243.338] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21aeb8) returned 0x1
	[0243.338] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21aeb8) returned 0x1
	[0243.338] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0243.339] FindResourceW (hModule=0x75240000, lpName=0x3f, lpType=0x6) returned 0x22b1440
	[0243.339] LoadStringW (in: hInstance=0x75240000, uID=0x3eb, lpBuffer=0x219920, cchBufferMax=256 | out: lpBuffer="Disk Management") returned 0xf
	[0243.339] lstrlenW (lpString="Disk Management") returned 15
	[0243.339] malloc (_Size=0x2c) returned 0x54bcf0
	[0243.340] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x3ce13a0
	[0243.340] lstrlenW (lpString="Disk Management") returned 15
	[0243.340] malloc (_Size=0x20) returned 0x554b90
	[0243.340] free (_Block=0x557a50) 
	[0243.340] malloc (_Size=0x20) returned 0x554b60
	[0243.340] malloc (_Size=0x30) returned 0x54bd30
	[0243.340] malloc (_Size=0x10) returned 0x5563b0
	[0243.341] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0243.341] FindResourceW (hModule=0x75240000, lpName=0x3f, lpType=0x6) returned 0x22b1440
	[0243.341] LoadStringW (in: hInstance=0x75240000, uID=0x3eb, lpBuffer=0x21a6a0, cchBufferMax=256 | out: lpBuffer="Disk Management") returned 0xf
	[0243.341] lstrlenW (lpString="Disk Management") returned 15
	[0243.342] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x9, lParam=0x0) returned 0x3ce13a0
	[0243.342] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0243.343] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0243.344] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x0, lParam=0x0) returned 0x3ce13a0
	[0243.344] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c170) returned 0x1
	[0243.344] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c170) returned 0x1
	[0243.345] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x3ce14c0
	[0243.345] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x110a, wParam=0x4, lParam=0x3ce13a0) returned 0x3ce14c0
	[0243.345] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c140) returned 0x1
	[0243.346] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21c140) returned 0x1
	[0243.346] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x1102, wParam=0x2, lParam=0x3ce14c0) 
	[0243.347] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0243.347] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113f, wParam=0x0, lParam=0x21b0b8) returned 0x1
	[0243.348] GetDlgCtrlID (hWnd=0x10234) returned 12785
	[0243.348] SendMessageW (hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21aff0) returned 0x1
	[0243.348] CallWindowProcW (lpPrevWndFunc=0x7fefc6c7c18, hWnd=0x10234, Msg=0x113e, wParam=0x0, lParam=0x21aff0) returned 0x1
	[0243.348] malloc (_Size=0x28) returned 0x554b90
	[0243.349] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x1f, wParam=0x0, lParam=0x0) returned 0x0
	[0243.350] GetParent (hWnd=0x3016a) returned 0x0
	[0243.350] GetParent (hWnd=0x3016a) returned 0x0
	[0243.350] GetParent (hWnd=0x3016a) returned 0x0
	[0243.350] GetDesktopWindow () returned 0x10010
	[0243.350] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.350] IsWindowEnabled (hWnd=0x20144) returned 0
	[0243.350] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.350] IsWindowEnabled (hWnd=0x20142) returned 1
	[0243.350] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.351] IsWindowEnabled (hWnd=0x20146) returned 1
	[0243.351] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.351] IsWindowEnabled (hWnd=0x100a0) returned 1
	[0243.351] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.351] IsWindowEnabled (hWnd=0x20060) returned 0
	[0243.351] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.351] IsWindowEnabled (hWnd=0x1009e) returned 1
	[0243.351] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.351] IsWindowEnabled (hWnd=0x10088) returned 1
	[0243.351] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.351] IsWindowEnabled (hWnd=0x100b6) returned 1
	[0243.351] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.351] IsWindowEnabled (hWnd=0x100aa) returned 1
	[0243.352] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.352] IsWindowEnabled (hWnd=0x100a6) returned 1
	[0243.352] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.352] IsWindowEnabled (hWnd=0x100a2) returned 1
	[0243.352] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.352] IsWindowEnabled (hWnd=0x1007a) returned 0
	[0243.352] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.352] IsWindowEnabled (hWnd=0x10070) returned 0
	[0243.352] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.352] IsWindowEnabled (hWnd=0x10080) returned 1
	[0243.352] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.352] IsWindowEnabled (hWnd=0x10074) returned 1
	[0243.352] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.352] IsWindowEnabled (hWnd=0x10114) returned 1
	[0243.352] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.352] IsWindowEnabled (hWnd=0x1010a) returned 1
	[0243.352] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.353] IsWindowEnabled (hWnd=0x100f8) returned 1
	[0243.353] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.353] IsWindowEnabled (hWnd=0x100d0) returned 1
	[0243.353] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.353] IsWindowEnabled (hWnd=0x500c0) returned 1
	[0243.353] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.353] IsWindowEnabled (hWnd=0x100b8) returned 1
	[0243.353] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.353] IsWindowEnabled (hWnd=0x10054) returned 0
	[0243.353] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.353] IsWindowEnabled (hWnd=0x10052) returned 0
	[0243.353] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.353] IsWindowEnabled (hWnd=0x100c8) returned 1
	[0243.353] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.353] IsWindowEnabled (hWnd=0x20134) returned 1
	[0243.353] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.353] IsWindowEnabled (hWnd=0x20138) returned 1
	[0243.354] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.354] IsWindowEnabled (hWnd=0x2013a) returned 1
	[0243.354] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.354] IsWindowEnabled (hWnd=0x20118) returned 1
	[0243.354] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.354] IsWindowEnabled (hWnd=0x30028) returned 1
	[0243.354] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.354] IsWindowEnabled (hWnd=0x2014e) returned 0
	[0243.354] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.354] IsWindowEnabled (hWnd=0x20156) returned 1
	[0243.354] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.354] IsWindowEnabled (hWnd=0x2015a) returned 0
	[0243.354] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.354] IsWindowEnabled (hWnd=0x2001a) returned 1
	[0243.354] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.354] IsWindowEnabled (hWnd=0x20022) returned 0
	[0243.354] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.354] IsWindowEnabled (hWnd=0x20018) returned 1
	[0243.355] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.355] IsWindowEnabled (hWnd=0x1012e) returned 1
	[0243.355] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.355] IsWindowEnabled (hWnd=0x10120) returned 1
	[0243.355] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.355] IsWindowEnabled (hWnd=0x1011c) returned 1
	[0243.355] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.355] IsWindowEnabled (hWnd=0x10104) returned 1
	[0243.355] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.355] IsWindowEnabled (hWnd=0x10100) returned 1
	[0243.355] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.355] IsWindowEnabled (hWnd=0x100f2) returned 1
	[0243.355] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.355] IsWindowEnabled (hWnd=0x100e8) returned 1
	[0243.356] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.356] IsWindowEnabled (hWnd=0x100e2) returned 1
	[0243.356] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.356] IsWindowEnabled (hWnd=0x200dc) returned 1
	[0243.356] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.356] IsWindowEnabled (hWnd=0x100c4) returned 1
	[0243.356] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.356] IsWindowEnabled (hWnd=0x500ba) returned 1
	[0243.356] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.356] IsWindowEnabled (hWnd=0x100b0) returned 1
	[0243.356] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.356] IsWindowEnabled (hWnd=0x100ae) returned 1
	[0243.356] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.356] IsWindowEnabled (hWnd=0x100a4) returned 1
	[0243.357] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.357] IsWindowEnabled (hWnd=0x10090) returned 1
	[0243.357] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.357] IsWindowEnabled (hWnd=0x20264) returned 1
	[0243.357] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.357] IsWindowEnabled (hWnd=0x10238) returned 1
	[0243.357] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.357] IsWindowEnabled (hWnd=0x10236) returned 1
	[0243.357] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.357] IsWindowEnabled (hWnd=0x1022e) returned 1
	[0243.357] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.357] IsWindowEnabled (hWnd=0x10222) returned 1
	[0243.357] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.357] IsWindowEnabled (hWnd=0x1021c) returned 1
	[0243.358] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.358] IsWindowEnabled (hWnd=0x3019e) returned 1
	[0243.358] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.358] IsWindowEnabled (hWnd=0x201b8) returned 1
	[0243.358] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.358] IsWindowEnabled (hWnd=0x201c0) returned 1
	[0243.358] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.358] IsWindowEnabled (hWnd=0x101b0) returned 1
	[0243.359] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.359] IsWindowEnabled (hWnd=0x101ac) returned 1
	[0243.359] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.359] IsWindowEnabled (hWnd=0x101aa) returned 1
	[0243.359] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.359] IsWindowEnabled (hWnd=0x20164) returned 1
	[0243.360] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.360] IsWindowEnabled (hWnd=0x20162) returned 0
	[0243.360] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.360] IsWindowEnabled (hWnd=0x3016a) returned 0
	[0243.360] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.360] IsWindowEnabled (hWnd=0x20160) returned 0
	[0243.360] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.360] IsWindowEnabled (hWnd=0xa016e) returned 0
	[0243.360] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.360] IsWindowEnabled (hWnd=0x20166) returned 0
	[0243.360] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.360] IsWindowEnabled (hWnd=0x1008c) returned 1
	[0243.360] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.360] IsWindowEnabled (hWnd=0x1006e) returned 1
	[0243.360] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.360] IsWindowEnabled (hWnd=0x10066) returned 1
	[0243.360] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.360] IsWindowEnabled (hWnd=0x40044) returned 1
	[0243.360] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.360] IsWindowEnabled (hWnd=0x1005a) returned 1
	[0243.361] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.361] IsWindowEnabled (hWnd=0x1005c) returned 0
	[0243.361] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.361] IsWindowEnabled (hWnd=0x20048) returned 1
	[0243.361] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.361] IsWindowEnabled (hWnd=0x1004a) returned 0
	[0243.361] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.361] IsWindowEnabled (hWnd=0x10046) returned 1
	[0243.361] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.361] IsWindowEnabled (hWnd=0x1004e) returned 0
	[0243.361] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.361] IsWindowEnabled (hWnd=0x1004c) returned 0
	[0243.361] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.361] IsWindowEnabled (hWnd=0x1012c) returned 0
	[0243.361] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.361] IsWindowEnabled (hWnd=0x10064) returned 0
	[0243.361] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.361] IsWindowEnabled (hWnd=0x2007e) returned 1
	[0243.361] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0243.361] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 214892544
	[0243.361] GetParent (hWnd=0x3016a) returned 0x0
	[0243.361] GetDesktopWindow () returned 0x10010
	[0243.361] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0243.362] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0243.362] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0243.362] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.362] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.362] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.362] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.362] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0243.362] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0243.362] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0243.362] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0243.362] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0243.362] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0243.362] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0243.362] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0243.362] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.362] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.362] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0243.363] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0243.363] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0243.363] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.363] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.363] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0243.363] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0243.363] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0243.363] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.363] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.363] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0243.363] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0243.363] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0243.363] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.363] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.363] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0243.364] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0243.364] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0243.364] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.364] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.364] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0243.364] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0243.364] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0243.364] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.364] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.364] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0243.364] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0243.364] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0243.364] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.364] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.364] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0243.364] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0243.364] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0243.365] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.365] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.365] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0243.365] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0243.365] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0243.365] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.365] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.365] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0243.365] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0243.365] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0243.365] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.365] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.365] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.365] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.366] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.366] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.366] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0243.366] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0243.366] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0243.366] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.366] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.366] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.366] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.366] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0243.366] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0243.366] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0243.366] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.366] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.366] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0243.366] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0243.366] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0243.366] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0243.367] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0243.367] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0243.367] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0243.624] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0243.624] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0243.624] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0243.624] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0243.624] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0243.624] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0243.624] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0243.624] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0243.624] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0243.624] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0243.624] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0243.624] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0243.625] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0243.625] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0243.625] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0243.625] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0243.625] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0243.625] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.625] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.625] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.625] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.625] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0243.625] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0243.625] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0243.625] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.625] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.625] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0243.626] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0243.626] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0243.626] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.626] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.626] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0243.626] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0243.626] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0243.626] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0243.626] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0243.626] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0243.626] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0243.626] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0243.626] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0243.626] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0243.626] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0243.626] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0243.626] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0243.627] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.627] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.627] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0243.627] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0243.627] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0243.627] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0243.627] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0243.627] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0243.627] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.627] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.627] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0243.627] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0243.627] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0243.627] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0243.627] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0243.627] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0243.627] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.627] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.628] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0243.628] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0243.628] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0243.628] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0243.628] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0243.628] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0243.628] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0243.628] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0243.628] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0243.628] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0243.628] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0243.628] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0243.628] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0243.628] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0243.628] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0243.628] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0243.628] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0243.628] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0243.629] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0243.629] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0243.629] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.629] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.629] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0243.629] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0243.629] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0243.629] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0243.629] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0243.629] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0243.629] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.629] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.629] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0243.629] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0243.629] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0243.629] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0243.629] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0243.629] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0243.629] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.629] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.629] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0243.629] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0243.629] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0243.629] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.629] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.629] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0243.629] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0243.630] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0243.630] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0243.630] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0243.630] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0243.630] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0243.630] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0243.630] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0243.630] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0243.630] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0243.630] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0243.630] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0243.630] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0243.630] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0243.630] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.630] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.630] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0243.630] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0243.630] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0243.630] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.630] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.630] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x20264
	[0243.630] GetWindowLongW (hWnd=0x20264, nIndex=-16) returned -2080374526
	[0243.630] GetWindow (hWnd=0x20264, uCmd=0x4) returned 0x0
	[0243.630] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0243.630] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned -2080374526
	[0243.630] GetWindow (hWnd=0x10238, uCmd=0x4) returned 0x0
	[0243.630] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0243.630] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned -2080374782
	[0243.630] GetWindow (hWnd=0x10236, uCmd=0x4) returned 0x3016a
	[0243.631] SendMessageW (hWnd=0x10236, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.631] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.631] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.631] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0243.631] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned -2080374526
	[0243.631] GetWindow (hWnd=0x1022e, uCmd=0x4) returned 0x0
	[0243.631] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0243.631] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned -2080374782
	[0243.631] GetWindow (hWnd=0x10222, uCmd=0x4) returned 0x20164
	[0243.631] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.631] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.631] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0243.631] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned -2080374782
	[0243.631] GetWindow (hWnd=0x1021c, uCmd=0x4) returned 0xa016e
	[0243.631] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 214892544
	[0243.632] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.632] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0243.632] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0243.632] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0243.632] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0243.632] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0243.632] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0243.632] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0243.632] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0243.632] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0243.632] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0243.632] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0243.632] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0243.633] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.633] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.633] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0243.633] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0243.633] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0243.633] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 214892544
	[0243.633] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.633] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0243.633] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0243.633] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0243.633] SendMessageW (hWnd=0x101aa, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.633] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0243.633] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.633] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0243.633] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.633] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.633] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0243.634] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0243.634] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0243.634] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0243.634] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0243.634] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0243.634] SendMessageW (hWnd=0x3016a, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.634] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.634] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0243.634] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0243.635] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0243.635] SendMessageW (hWnd=0x20160, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.635] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0243.635] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20160, Msg=0x36d, wParam=0x20, lParam=0x0) returned 0x0
	[0243.635] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0243.635] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 214892544
	[0243.635] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.635] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0243.635] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0243.635] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0243.635] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 214892544
	[0243.635] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0243.635] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0243.635] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0243.635] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0243.635] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0243.635] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0243.635] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0243.635] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0243.636] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0243.636] GetParent (hWnd=0x10066) returned 0x0
	[0243.636] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0243.636] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0243.636] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0243.636] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0243.636] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.636] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.636] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0243.636] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0243.636] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0243.636] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0243.636] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0243.636] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0243.636] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.636] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.636] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0243.637] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0243.637] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0243.637] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0243.637] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0243.637] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0243.637] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0243.637] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0243.637] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0243.637] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0243.637] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0243.637] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.637] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.637] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0243.637] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0243.637] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0243.637] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0243.638] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0243.638] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0243.638] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.638] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.638] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.638] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.638] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0243.638] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0243.638] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0243.638] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.638] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.638] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0243.638] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0243.638] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0243.638] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0248.290] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x80010106
	[0250.602] IIDFromString (in: lpsz="{D5AB5662-131D-453d-88C8-9BBA87502ADE}", lpiid=0x218e98 | out: lpiid=0x218e98) returned 0x0
	[0250.608] IIDFromString (in: lpsz="{D5AB5662-131D-453d-88C8-9BBA87502ADE}", lpiid=0x219050 | out: lpiid=0x219050) returned 0x0
	[0253.775] GetVersionExW (in: lpVersionInformation=0x218170*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x218170*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0253.887] GetVersionExW (in: lpVersionInformation=0x218170*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x218170*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0253.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0x2180b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0253.932] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0x217fb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0254.124] CoTaskMemAlloc (cb=0x20c) returned 0x4637b0
	[0254.124] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4637b0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\mmc.exe" (normalized: "c:\\windows\\system32\\mmc.exe")) returned 0x1b
	[0254.125] CoTaskMemFree (pv=0x4637b0) 
	[0254.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.exe", nBufferLength=0x105, lpBuffer=0x218110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.exe", lpFilePart=0x0) returned 0x1b
	[0255.153] GetVersionExW (in: lpVersionInformation=0x217fe0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x217fe0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0255.154] GetCurrentProcess () returned 0xffffffffffffffff
	[0255.192] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x218078 | out: TokenHandle=0x218078*=0x3c8) returned 1
	[0255.270] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x217cd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30
	[0255.756] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x218120 | out: lpFileInformation=0x218120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x76d072b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x622a)) returned 1
	[0255.758] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x217c70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45
	[0255.809] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x2180d0 | out: lpFileInformation=0x2180d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x76d072b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x622a)) returned 1
	[0255.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x217ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45
	[0255.828] SetErrorMode (uMode=0x1) returned 0x8001
	[0255.829] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3d8
	[0255.830] GetFileType (hFile=0x3d8) returned 0x1
	[0255.831] SetErrorMode (uMode=0x8001) returned 0x1
	[0255.831] GetFileType (hFile=0x3d8) returned 0x1
	[0256.169] GetFileSize (in: hFile=0x3d8, lpFileSizeHigh=0x2180c8 | out: lpFileSizeHigh=0x2180c8*=0x0) returned 0x622a
	[0256.172] ReadFile (in: hFile=0x3d8, lpBuffer=0x4568640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x217fe8, lpOverlapped=0x0 | out: lpBuffer=0x4568640*, lpNumberOfBytesRead=0x217fe8*=0x1000, lpOverlapped=0x0) returned 1
	[0256.431] ReadFile (in: hFile=0x3d8, lpBuffer=0x4568640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x217b18, lpOverlapped=0x0 | out: lpBuffer=0x4568640*, lpNumberOfBytesRead=0x217b18*=0x1000, lpOverlapped=0x0) returned 1
	[0256.432] ReadFile (in: hFile=0x3d8, lpBuffer=0x4568640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x217b18, lpOverlapped=0x0 | out: lpBuffer=0x4568640*, lpNumberOfBytesRead=0x217b18*=0x1000, lpOverlapped=0x0) returned 1
	[0256.433] ReadFile (in: hFile=0x3d8, lpBuffer=0x4568640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x217b18, lpOverlapped=0x0 | out: lpBuffer=0x4568640*, lpNumberOfBytesRead=0x217b18*=0x1000, lpOverlapped=0x0) returned 1
	[0256.433] ReadFile (in: hFile=0x3d8, lpBuffer=0x4568640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x217b18, lpOverlapped=0x0 | out: lpBuffer=0x4568640*, lpNumberOfBytesRead=0x217b18*=0x1000, lpOverlapped=0x0) returned 1
	[0256.479] ReadFile (in: hFile=0x3d8, lpBuffer=0x4568640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x217c58, lpOverlapped=0x0 | out: lpBuffer=0x4568640*, lpNumberOfBytesRead=0x217c58*=0x1000, lpOverlapped=0x0) returned 1
	[0256.480] ReadFile (in: hFile=0x3d8, lpBuffer=0x4568640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x217ad8, lpOverlapped=0x0 | out: lpBuffer=0x4568640*, lpNumberOfBytesRead=0x217ad8*=0x22a, lpOverlapped=0x0) returned 1
	[0256.480] ReadFile (in: hFile=0x3d8, lpBuffer=0x4568640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x217b78, lpOverlapped=0x0 | out: lpBuffer=0x4568640*, lpNumberOfBytesRead=0x217b78*=0x0, lpOverlapped=0x0) returned 1
	[0256.482] CloseHandle (hObject=0x3d8) returned 1
	[0256.484] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0x2180a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0256.484] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0x217fa0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0256.484] CoTaskMemAlloc (cb=0x20c) returned 0x463580
	[0256.484] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x463580, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\mmc.exe" (normalized: "c:\\windows\\system32\\mmc.exe")) returned 0x1b
	[0256.484] CoTaskMemFree (pv=0x463580) 
	[0256.484] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.exe", nBufferLength=0x105, lpBuffer=0x218100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.exe", lpFilePart=0x0) returned 0x1b
	[0256.485] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.485] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2182d8 | out: TokenHandle=0x2182d8*=0x3d8) returned 1
	[0256.486] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.486] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2182d8 | out: TokenHandle=0x2182d8*=0x3dc) returned 1
	[0256.488] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.488] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x218078 | out: TokenHandle=0x218078*=0x3e0) returned 1
	[0256.488] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\mmc.config" (normalized: "c:\\windows\\system32\\mmc.config"), fInfoLevelId=0x0, lpFileInformation=0x218120 | out: lpFileInformation=0x218120*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0256.489] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\mmc.config", nBufferLength=0x105, lpBuffer=0x217c70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\mmc.config", lpFilePart=0x0) returned 0x1e
	[0256.490] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\mmc.config" (normalized: "c:\\windows\\system32\\mmc.config"), fInfoLevelId=0x0, lpFileInformation=0x2180d0 | out: lpFileInformation=0x2180d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0256.491] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.491] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2182d8 | out: TokenHandle=0x2182d8*=0x3e4) returned 1
	[0256.491] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.491] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2182d8 | out: TokenHandle=0x2182d8*=0x3e8) returned 1
	[0256.660] lstrlenW (lpString="䅁") returned 1
	[0256.663] GetCurrentProcess () returned 0xffffffffffffffff
	[0256.663] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x217f58 | out: TokenHandle=0x217f58*=0x3ec) returned 1
	[0257.317] GetCurrentProcess () returned 0xffffffffffffffff
	[0257.317] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x217f58 | out: TokenHandle=0x217f58*=0x3f0) returned 1
	[0257.575] SysStringByteLen (bstr="FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}") returned 0x52
	[0257.575] SysStringByteLen (bstr="FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}") returned 0x52
	[0257.919] lstrlenW (lpString="䅁") returned 1
	[0257.947] GetVersionExW (in: lpVersionInformation=0x218ad0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x218ad0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0257.956] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\MMC\\SnapIns\\FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}", ulOptions=0x0, samDesired=0x20019, phkResult=0x219b88 | out: phkResult=0x219b88*=0x3f4) returned 0x0
	[0258.016] RegQueryValueExW (in: hKey=0x3f4, lpValueName="FolderBitmapsColorMask", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x4, lpData=0x0, lpcbData=0x219b08*=0x4) returned 0x0
	[0258.017] RegQueryValueExW (in: hKey=0x3f4, lpValueName="FolderBitmapsColorMask", lpReserved=0x0, lpType=0x219b10, lpData=0x219b0c, lpcbData=0x219b08*=0x4 | out: lpType=0x219b10*=0x4, lpData=0x219b0c*=0xff00ff, lpcbData=0x219b08*=0x4) returned 0x0
	[0258.017] RegQueryValueExW (in: hKey=0x3f4, lpValueName="UseCustomHelp", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x0, lpData=0x0, lpcbData=0x219b08*=0x0) returned 0x2
	[0258.112] RegQueryValueExW (in: hKey=0x3f4, lpValueName="Type", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x1, lpData=0x0, lpcbData=0x219b08*=0x104) returned 0x0
	[0258.113] CoTaskMemAlloc (cb=0x108) returned 0x46f940
	[0258.113] RegQueryValueExW (in: hKey=0x3f4, lpValueName="Type", lpReserved=0x0, lpType=0x219adc, lpData=0x46f940, lpcbData=0x219ad8*=0x104 | out: lpType=0x219adc*=0x1, lpData="Microsoft.EventViewer.SnapIn.EventViewerExtension, EventViewer, Version=6.1.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35", lpcbData=0x219ad8*=0x104) returned 0x0
	[0258.114] CoTaskMemFree (pv=0x46f940) 
	[0258.114] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x1, lpData=0x0, lpcbData=0x219b08*=0x2a) returned 0x0
	[0258.114] CoTaskMemAlloc (cb=0x2e) returned 0x4ce860
	[0258.114] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x219adc, lpData=0x4ce860, lpcbData=0x219ad8*=0x2a | out: lpType=0x219adc*=0x1, lpData="C:\\Windows\\system32\\", lpcbData=0x219ad8*=0x2a) returned 0x0
	[0258.114] CoTaskMemFree (pv=0x4ce860) 
	[0258.114] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ConfigurationFile", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x0, lpData=0x0, lpcbData=0x219b08*=0x0) returned 0x2
	[0258.114] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DynamicBase", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x0, lpData=0x0, lpcbData=0x219b08*=0x0) returned 0x2
	[0258.114] RegQueryValueExW (in: hKey=0x3f4, lpValueName="LicenseFile", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x0, lpData=0x0, lpcbData=0x219b08*=0x0) returned 0x2
	[0258.114] RegQueryValueExW (in: hKey=0x3f4, lpValueName="PrivateBinPath", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x0, lpData=0x0, lpcbData=0x219b08*=0x0) returned 0x2
	[0258.114] RegQueryValueExW (in: hKey=0x3f4, lpValueName="PrivateBinPathProbe", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x0, lpData=0x0, lpcbData=0x219b08*=0x0) returned 0x2
	[0258.114] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ResourceModule", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x0, lpData=0x0, lpcbData=0x219b08*=0x0) returned 0x2
	[0258.114] RegQueryValueExW (in: hKey=0x3f4, lpValueName="RootNodeType", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x0, lpData=0x0, lpcbData=0x219b08*=0x0) returned 0x2
	[0258.114] RegQueryValueExW (in: hKey=0x3f4, lpValueName="NameString", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x1, lpData=0x0, lpcbData=0x219b08*=0x1a) returned 0x0
	[0258.114] CoTaskMemAlloc (cb=0x1e) returned 0x3d1f400
	[0258.114] RegQueryValueExW (in: hKey=0x3f4, lpValueName="NameString", lpReserved=0x0, lpType=0x219adc, lpData=0x3d1f400, lpcbData=0x219ad8*=0x1a | out: lpType=0x219adc*=0x1, lpData="Event Viewer", lpcbData=0x219ad8*=0x1a) returned 0x0
	[0258.114] CoTaskMemFree (pv=0x3d1f400) 
	[0258.114] RegQueryValueExW (in: hKey=0x3f4, lpValueName="Description", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x1, lpData=0x0, lpcbData=0x219b08*=0x2e) returned 0x0
	[0258.115] CoTaskMemAlloc (cb=0x32) returned 0x4ce860
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="Description", lpReserved=0x0, lpType=0x219adc, lpData=0x4ce860, lpcbData=0x219ad8*=0x2e | out: lpType=0x219adc*=0x1, lpData="Event Viewer Extension", lpcbData=0x219ad8*=0x2e) returned 0x0
	[0258.115] CoTaskMemFree (pv=0x4ce860) 
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="Provider", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x0, lpData=0x0, lpcbData=0x219b08*=0x0) returned 0x2
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ModuleName", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x1, lpData=0x0, lpcbData=0x219b08*=0x20) returned 0x0
	[0258.115] CoTaskMemAlloc (cb=0x24) returned 0x3d1f400
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ModuleName", lpReserved=0x0, lpType=0x219adc, lpData=0x3d1f400, lpcbData=0x219ad8*=0x20 | out: lpType=0x219adc*=0x1, lpData="EventViewer.dll", lpcbData=0x219ad8*=0x20) returned 0x0
	[0258.115] CoTaskMemFree (pv=0x3d1f400) 
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="AssemblyName", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x1, lpData=0x0, lpcbData=0x219b08*=0x18) returned 0x0
	[0258.115] CoTaskMemAlloc (cb=0x1c) returned 0x3d1f400
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="AssemblyName", lpReserved=0x0, lpType=0x219adc, lpData=0x3d1f400, lpcbData=0x219ad8*=0x18 | out: lpType=0x219adc*=0x1, lpData="EventViewer", lpcbData=0x219ad8*=0x18) returned 0x0
	[0258.115] CoTaskMemFree (pv=0x3d1f400) 
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="RuntimeVersion", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x1, lpData=0x0, lpcbData=0x219b08*=0x16) returned 0x0
	[0258.115] CoTaskMemAlloc (cb=0x1a) returned 0x3d1f400
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="RuntimeVersion", lpReserved=0x0, lpType=0x219adc, lpData=0x3d1f400, lpcbData=0x219ad8*=0x16 | out: lpType=0x219adc*=0x1, lpData="v2.0.40607", lpcbData=0x219ad8*=0x16) returned 0x0
	[0258.115] CoTaskMemFree (pv=0x3d1f400) 
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="FxVersion", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x1, lpData=0x0, lpcbData=0x219b08*=0x10) returned 0x0
	[0258.115] CoTaskMemAlloc (cb=0x14) returned 0x3d2c950
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="FxVersion", lpReserved=0x0, lpType=0x219adc, lpData=0x3d2c950, lpcbData=0x219ad8*=0x10 | out: lpType=0x219adc*=0x1, lpData="2.0.0.2", lpcbData=0x219ad8*=0x10) returned 0x0
	[0258.115] CoTaskMemFree (pv=0x3d2c950) 
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="About", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x1, lpData=0x0, lpcbData=0x219b08*=0x4e) returned 0x0
	[0258.115] CoTaskMemAlloc (cb=0x52) returned 0x4c9440
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="About", lpReserved=0x0, lpType=0x219adc, lpData=0x4c9440, lpcbData=0x219ad8*=0x4e | out: lpType=0x219adc*=0x1, lpData="{00000000-0000-0000-0000-000000000000}", lpcbData=0x219ad8*=0x4e) returned 0x0
	[0258.115] CoTaskMemFree (pv=0x4c9440) 
	[0258.115] RegQueryValueExW (in: hKey=0x3f4, lpValueName="NameStringIndirect", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x2, lpData=0x0, lpcbData=0x219b08*=0x58) returned 0x0
	[0258.118] CoTaskMemAlloc (cb=0x5c) returned 0x3d23460
	[0258.118] RegQueryValueExW (in: hKey=0x3f4, lpValueName="NameStringIndirect", lpReserved=0x0, lpType=0x219adc, lpData=0x3d23460, lpcbData=0x219ad8*=0x58 | out: lpType=0x219adc*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-101", lpcbData=0x219ad8*=0x58) returned 0x0
	[0258.118] CoTaskMemFree (pv=0x3d23460) 
	[0258.217] CoTaskMemAlloc (cb=0xcc) returned 0x4cbe20
	[0258.217] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-101", lpDst=0x4cbe20, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-101") returned 0x2c
	[0258.217] CoTaskMemFree (pv=0x4cbe20) 
	[0258.217] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DescriptionStringIndirect", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x2, lpData=0x0, lpcbData=0x219b08*=0x58) returned 0x0
	[0258.217] CoTaskMemAlloc (cb=0x5c) returned 0x3d23460
	[0258.217] RegQueryValueExW (in: hKey=0x3f4, lpValueName="DescriptionStringIndirect", lpReserved=0x0, lpType=0x219adc, lpData=0x3d23460, lpcbData=0x219ad8*=0x58 | out: lpType=0x219adc*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-102", lpcbData=0x219ad8*=0x58) returned 0x0
	[0258.218] CoTaskMemFree (pv=0x3d23460) 
	[0258.218] CoTaskMemAlloc (cb=0xcc) returned 0x4cbe20
	[0258.218] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-102", lpDst=0x4cbe20, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-102") returned 0x2c
	[0258.218] CoTaskMemFree (pv=0x4cbe20) 
	[0258.218] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ProviderStringIndirect", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x2, lpData=0x0, lpcbData=0x219b08*=0x58) returned 0x0
	[0258.218] CoTaskMemAlloc (cb=0x5c) returned 0x3d23460
	[0258.218] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ProviderStringIndirect", lpReserved=0x0, lpType=0x219adc, lpData=0x3d23460, lpcbData=0x219ad8*=0x58 | out: lpType=0x219adc*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-103", lpcbData=0x219ad8*=0x58) returned 0x0
	[0258.218] CoTaskMemFree (pv=0x3d23460) 
	[0258.218] CoTaskMemAlloc (cb=0xcc) returned 0x4cbe20
	[0258.218] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-103", lpDst=0x4cbe20, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-103") returned 0x2c
	[0258.218] CoTaskMemFree (pv=0x4cbe20) 
	[0258.218] RegQueryValueExW (in: hKey=0x3f4, lpValueName="VersionStringIndirect", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x2, lpData=0x0, lpcbData=0x219b08*=0x58) returned 0x0
	[0258.218] CoTaskMemAlloc (cb=0x5c) returned 0x3d23460
	[0258.218] RegQueryValueExW (in: hKey=0x3f4, lpValueName="VersionStringIndirect", lpReserved=0x0, lpType=0x219adc, lpData=0x3d23460, lpcbData=0x219ad8*=0x58 | out: lpType=0x219adc*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-104", lpcbData=0x219ad8*=0x58) returned 0x0
	[0258.218] CoTaskMemFree (pv=0x3d23460) 
	[0258.218] CoTaskMemAlloc (cb=0xcc) returned 0x4cbe20
	[0258.218] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-104", lpDst=0x4cbe20, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-104") returned 0x2c
	[0258.218] CoTaskMemFree (pv=0x4cbe20) 
	[0258.218] RegQueryValueExW (in: hKey=0x3f4, lpValueName="IconIndirect", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x2, lpData=0x0, lpcbData=0x219b08*=0x58) returned 0x0
	[0258.218] CoTaskMemAlloc (cb=0x5c) returned 0x3d23460
	[0258.218] RegQueryValueExW (in: hKey=0x3f4, lpValueName="IconIndirect", lpReserved=0x0, lpType=0x219adc, lpData=0x3d23460, lpcbData=0x219ad8*=0x58 | out: lpType=0x219adc*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-500", lpcbData=0x219ad8*=0x58) returned 0x0
	[0258.218] CoTaskMemFree (pv=0x3d23460) 
	[0258.219] CoTaskMemAlloc (cb=0xcc) returned 0x4cbe20
	[0258.219] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-500", lpDst=0x4cbe20, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-500") returned 0x2c
	[0258.219] CoTaskMemFree (pv=0x4cbe20) 
	[0258.219] RegQueryValueExW (in: hKey=0x3f4, lpValueName="LargeFolderBitmapIndirect", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x2, lpData=0x0, lpcbData=0x219b08*=0x58) returned 0x0
	[0258.219] CoTaskMemAlloc (cb=0x5c) returned 0x3d23460
	[0258.219] RegQueryValueExW (in: hKey=0x3f4, lpValueName="LargeFolderBitmapIndirect", lpReserved=0x0, lpType=0x219adc, lpData=0x3d23460, lpcbData=0x219ad8*=0x58 | out: lpType=0x219adc*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-501", lpcbData=0x219ad8*=0x58) returned 0x0
	[0258.219] CoTaskMemFree (pv=0x3d23460) 
	[0258.219] CoTaskMemAlloc (cb=0xcc) returned 0x4cbe20
	[0258.219] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-501", lpDst=0x4cbe20, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-501") returned 0x2c
	[0258.219] CoTaskMemFree (pv=0x4cbe20) 
	[0258.219] RegQueryValueExW (in: hKey=0x3f4, lpValueName="SmallFolderBitmapIndirect", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x2, lpData=0x0, lpcbData=0x219b08*=0x58) returned 0x0
	[0258.219] CoTaskMemAlloc (cb=0x5c) returned 0x3d23460
	[0258.219] RegQueryValueExW (in: hKey=0x3f4, lpValueName="SmallFolderBitmapIndirect", lpReserved=0x0, lpType=0x219adc, lpData=0x3d23460, lpcbData=0x219ad8*=0x58 | out: lpType=0x219adc*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-502", lpcbData=0x219ad8*=0x58) returned 0x0
	[0258.219] CoTaskMemFree (pv=0x3d23460) 
	[0258.219] CoTaskMemAlloc (cb=0xcc) returned 0x4cbe20
	[0258.219] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-502", lpDst=0x4cbe20, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-502") returned 0x2c
	[0258.219] CoTaskMemFree (pv=0x4cbe20) 
	[0258.219] RegQueryValueExW (in: hKey=0x3f4, lpValueName="SmallSelectedFolderBitmapIndirect", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x2, lpData=0x0, lpcbData=0x219b08*=0x58) returned 0x0
	[0258.219] CoTaskMemAlloc (cb=0x5c) returned 0x3d23460
	[0258.219] RegQueryValueExW (in: hKey=0x3f4, lpValueName="SmallSelectedFolderBitmapIndirect", lpReserved=0x0, lpType=0x219adc, lpData=0x3d23460, lpcbData=0x219ad8*=0x58 | out: lpType=0x219adc*=0x2, lpData="@C:\\Windows\\system32\\miguiresource.dll,-503", lpcbData=0x219ad8*=0x58) returned 0x0
	[0258.219] CoTaskMemFree (pv=0x3d23460) 
	[0258.219] CoTaskMemAlloc (cb=0xcc) returned 0x4cbe20
	[0258.219] ExpandEnvironmentStringsW (in: lpSrc="@C:\\Windows\\system32\\miguiresource.dll,-503", lpDst=0x4cbe20, nSize=0x64 | out: lpDst="@C:\\Windows\\system32\\miguiresource.dll,-503") returned 0x2c
	[0258.219] CoTaskMemFree (pv=0x4cbe20) 
	[0258.220] RegQueryValueExW (in: hKey=0x3f4, lpValueName="HelpTopic", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x1, lpData=0x0, lpcbData=0x219b08*=0x40) returned 0x0
	[0258.220] CoTaskMemAlloc (cb=0x44) returned 0x3d31230
	[0258.220] RegQueryValueExW (in: hKey=0x3f4, lpValueName="HelpTopic", lpReserved=0x0, lpType=0x219adc, lpData=0x3d31230, lpcbData=0x219ad8*=0x40 | out: lpType=0x219adc*=0x1, lpData="C:\\Windows\\Help\\eventviewer.chm", lpcbData=0x219ad8*=0x40) returned 0x0
	[0258.220] CoTaskMemFree (pv=0x3d31230) 
	[0258.220] RegQueryValueExW (in: hKey=0x3f4, lpValueName="LinkedHelpTopics", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x1, lpData=0x0, lpcbData=0x219b08*=0x40) returned 0x0
	[0258.220] CoTaskMemAlloc (cb=0x44) returned 0x3d31230
	[0258.220] RegQueryValueExW (in: hKey=0x3f4, lpValueName="LinkedHelpTopics", lpReserved=0x0, lpType=0x219adc, lpData=0x3d31230, lpcbData=0x219ad8*=0x40 | out: lpType=0x219adc*=0x1, lpData="C:\\Windows\\Help\\eventviewer.chm", lpcbData=0x219ad8*=0x40) returned 0x0
	[0258.220] CoTaskMemFree (pv=0x3d31230) 
	[0258.220] RegOpenKeyExW (in: hKey=0x3f4, lpSubKey="Standalone", ulOptions=0x0, samDesired=0x20019, phkResult=0x219b28 | out: phkResult=0x219b28*=0x0) returned 0x2
	[0258.221] RegOpenKeyExW (in: hKey=0x3f4, lpSubKey="Extension", ulOptions=0x0, samDesired=0x20019, phkResult=0x219b28 | out: phkResult=0x219b28*=0x3f8) returned 0x0
	[0258.221] RegQueryValueExW (in: hKey=0x3f8, lpValueName=0x0, lpReserved=0x0, lpType=0x219aac, lpData=0x0, lpcbData=0x219aa8*=0x0 | out: lpType=0x219aac*=0x1, lpData=0x0, lpcbData=0x219aa8*=0x14) returned 0x0
	[0258.221] CoTaskMemAlloc (cb=0x18) returned 0x3d2c950
	[0258.221] RegQueryValueExW (in: hKey=0x3f8, lpValueName=0x0, lpReserved=0x0, lpType=0x219a7c, lpData=0x3d2c950, lpcbData=0x219a78*=0x14 | out: lpType=0x219a7c*=0x1, lpData="Namespace", lpcbData=0x219a78*=0x14) returned 0x0
	[0258.221] CoTaskMemFree (pv=0x3d2c950) 
	[0258.223] RegCloseKey (hKey=0x3f8) returned 0x0
	[0258.223] RegOpenKeyExW (in: hKey=0x3f4, lpSubKey="NodeTypes", ulOptions=0x0, samDesired=0x20019, phkResult=0x219b88 | out: phkResult=0x219b88*=0x3f8) returned 0x0
	[0258.228] RegQueryInfoKeyW (in: hKey=0x3f8, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x219a9c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x219a98, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x219a9c*=0x1, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x219a98*=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0258.228] CoTaskMemFree (pv=0x0) 
	[0258.229] CoTaskMemAlloc (cb=0x204) returned 0x3cf45e0
	[0258.229] RegEnumKeyExW (in: hKey=0x3f8, dwIndex=0x0, lpName=0x3cf45e0, lpcchName=0x219b28, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{33F2C345-BF11-41b6-90DA-4FB4963EA4E2}", lpcchName=0x219b28, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0
	[0258.229] CoTaskMemFree (pv=0x3cf45e0) 
	[0258.229] CoTaskMemFree (pv=0x0) 
	[0258.229] RegOpenKeyExW (in: hKey=0x3f8, lpSubKey="{33F2C345-BF11-41b6-90DA-4FB4963EA4E2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x219b88 | out: phkResult=0x219b88*=0x3fc) returned 0x0
	[0258.229] RegQueryValueExW (in: hKey=0x3fc, lpValueName="", lpReserved=0x0, lpType=0x219b0c, lpData=0x0, lpcbData=0x219b08*=0x0 | out: lpType=0x219b0c*=0x1, lpData=0x0, lpcbData=0x219b08*=0x32) returned 0x0
	[0258.229] CoTaskMemAlloc (cb=0x36) returned 0x4ce860
	[0258.229] RegQueryValueExW (in: hKey=0x3fc, lpValueName="", lpReserved=0x0, lpType=0x219adc, lpData=0x4ce860, lpcbData=0x219ad8*=0x32 | out: lpType=0x219adc*=0x1, lpData="Classic Viewer Root Node", lpcbData=0x219ad8*=0x32) returned 0x0
	[0258.229] CoTaskMemFree (pv=0x4ce860) 
	[0258.229] RegCloseKey (hKey=0x3fc) returned 0x0
	[0258.229] RegCloseKey (hKey=0x3f8) returned 0x0
	[0258.229] RegCloseKey (hKey=0x3f4) returned 0x0
	[0265.151] GetDC (hWnd=0x0) returned 0xc01083a
	[0265.295] GetCurrentProcessId () returned 0x2b0
	[0265.738] FindAtomW (lpString="GDI+Atom_688_1") returned 0x0
	[0265.739] AddAtomW (lpString="GDI+Atom_688_1") returned 0xc072
	[0265.831] GdiplusStartup (in: token=0x217948, input=0x217960, output=0x217938 | out: token=0x217948, output=0x217938) returned 0x0
	[0265.836] GetDeviceCaps (hdc=0xc01083a, index=12) returned 32
	[0265.836] GetDeviceCaps (hdc=0xc01083a, index=14) returned 1
	[0265.836] ReleaseDC (hWnd=0x0, hDC=0xc01083a) returned 1
	[0265.839] CreateIconFromResourceEx (presbits=0x45c0340, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x400fb
	[0265.939] CreateIconFromResourceEx (presbits=0x45c6ca8, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xb0069
	[0266.319] GetParent (hWnd=0x3016a) returned 0x0
	[0266.319] GetActiveWindow () returned 0x0
	[0266.319] GetWindowLongW (hWnd=0x3016a, nIndex=-16) returned 80674816
	[0266.319] GetParent (hWnd=0x3016a) returned 0x0
	[0266.319] GetDesktopWindow () returned 0x10010
	[0266.319] GetWindow (hWnd=0x10010, uCmd=0x5) returned 0x20144
	[0266.320] GetWindowLongW (hWnd=0x20144, nIndex=-16) returned -1946157056
	[0266.320] GetWindow (hWnd=0x20144, uCmd=0x4) returned 0x20142
	[0266.320] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0266.320] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0266.320] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0266.320] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0266.320] GetWindow (hWnd=0x20144, uCmd=0x2) returned 0x20142
	[0266.320] GetWindowLongW (hWnd=0x20142, nIndex=-16) returned -2046820352
	[0266.320] GetWindow (hWnd=0x20142, uCmd=0x4) returned 0x20148
	[0266.320] GetWindowLongW (hWnd=0x20148, nIndex=-16) returned 79691776
	[0266.320] GetWindow (hWnd=0x20148, uCmd=0x4) returned 0x0
	[0266.320] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x20146
	[0266.320] GetWindowLongW (hWnd=0x20146, nIndex=-16) returned -2071986176
	[0266.320] GetWindow (hWnd=0x20146, uCmd=0x4) returned 0x20118
	[0266.321] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0266.321] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0266.321] GetWindow (hWnd=0x20146, uCmd=0x2) returned 0x100a0
	[0266.321] GetWindowLongW (hWnd=0x100a0, nIndex=-16) returned -2080373053
	[0266.321] GetWindow (hWnd=0x100a0, uCmd=0x4) returned 0x10074
	[0266.321] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.321] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.321] GetWindow (hWnd=0x100a0, uCmd=0x2) returned 0x20060
	[0266.321] GetWindowLongW (hWnd=0x20060, nIndex=-16) returned -1946157056
	[0266.321] GetWindow (hWnd=0x20060, uCmd=0x4) returned 0x10074
	[0266.321] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.321] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.321] GetWindow (hWnd=0x20060, uCmd=0x2) returned 0x1009e
	[0266.321] GetWindowLongW (hWnd=0x1009e, nIndex=-16) returned -2080374781
	[0266.321] GetWindow (hWnd=0x1009e, uCmd=0x4) returned 0x10074
	[0266.321] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.322] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.322] GetWindow (hWnd=0x1009e, uCmd=0x2) returned 0x10088
	[0266.322] GetWindowLongW (hWnd=0x10088, nIndex=-16) returned -2080374783
	[0266.322] GetWindow (hWnd=0x10088, uCmd=0x4) returned 0x10074
	[0266.322] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.322] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.322] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x100b6
	[0266.322] GetWindowLongW (hWnd=0x100b6, nIndex=-16) returned -2080374781
	[0266.322] GetWindow (hWnd=0x100b6, uCmd=0x4) returned 0x10074
	[0266.322] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.322] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.322] GetWindow (hWnd=0x100b6, uCmd=0x2) returned 0x100aa
	[0266.322] GetWindowLongW (hWnd=0x100aa, nIndex=-16) returned -2080374781
	[0266.322] GetWindow (hWnd=0x100aa, uCmd=0x4) returned 0x10074
	[0266.322] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.322] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.323] GetWindow (hWnd=0x100aa, uCmd=0x2) returned 0x100a6
	[0266.323] GetWindowLongW (hWnd=0x100a6, nIndex=-16) returned -2080374783
	[0266.323] GetWindow (hWnd=0x100a6, uCmd=0x4) returned 0x10074
	[0266.323] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.323] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.323] GetWindow (hWnd=0x100a6, uCmd=0x2) returned 0x100a2
	[0266.323] GetWindowLongW (hWnd=0x100a2, nIndex=-16) returned -2080374783
	[0266.323] GetWindow (hWnd=0x100a2, uCmd=0x4) returned 0x10074
	[0266.323] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.323] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.323] GetWindow (hWnd=0x100a2, uCmd=0x2) returned 0x1007a
	[0266.323] GetWindowLongW (hWnd=0x1007a, nIndex=-16) returned -1946157056
	[0266.323] GetWindow (hWnd=0x1007a, uCmd=0x4) returned 0x10070
	[0266.323] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0266.323] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0266.324] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0266.324] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0266.324] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.324] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.324] GetWindow (hWnd=0x1007a, uCmd=0x2) returned 0x10070
	[0266.324] GetWindowLongW (hWnd=0x10070, nIndex=-16) returned -1946157056
	[0266.324] GetWindow (hWnd=0x10070, uCmd=0x4) returned 0x10080
	[0266.324] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0266.324] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0266.324] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.324] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.324] GetWindow (hWnd=0x10070, uCmd=0x2) returned 0x10080
	[0266.324] GetWindowLongW (hWnd=0x10080, nIndex=-16) returned -1811936256
	[0266.324] GetWindow (hWnd=0x10080, uCmd=0x4) returned 0x10074
	[0266.324] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.325] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.325] GetWindow (hWnd=0x10080, uCmd=0x2) returned 0x10074
	[0266.325] GetWindowLongW (hWnd=0x10074, nIndex=-16) returned -1778384896
	[0266.325] GetWindow (hWnd=0x10074, uCmd=0x4) returned 0x0
	[0266.325] GetWindow (hWnd=0x10074, uCmd=0x2) returned 0x10114
	[0266.325] GetWindowLongW (hWnd=0x10114, nIndex=-16) returned -2080374526
	[0266.325] GetWindow (hWnd=0x10114, uCmd=0x4) returned 0x0
	[0266.325] GetWindow (hWnd=0x10114, uCmd=0x2) returned 0x1010a
	[0266.325] GetWindowLongW (hWnd=0x1010a, nIndex=-16) returned -2080374526
	[0266.325] GetWindow (hWnd=0x1010a, uCmd=0x4) returned 0x0
	[0266.325] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x100f8
	[0266.325] GetWindowLongW (hWnd=0x100f8, nIndex=-16) returned -2080374526
	[0266.325] GetWindow (hWnd=0x100f8, uCmd=0x4) returned 0x0
	[0266.325] GetWindow (hWnd=0x100f8, uCmd=0x2) returned 0x100d0
	[0266.325] GetWindowLongW (hWnd=0x100d0, nIndex=-16) returned -2080374526
	[0266.325] GetWindow (hWnd=0x100d0, uCmd=0x4) returned 0x0
	[0266.325] GetWindow (hWnd=0x100d0, uCmd=0x2) returned 0x500c0
	[0266.326] GetWindowLongW (hWnd=0x500c0, nIndex=-16) returned -2080374526
	[0266.326] GetWindow (hWnd=0x500c0, uCmd=0x4) returned 0x0
	[0266.326] GetWindow (hWnd=0x500c0, uCmd=0x2) returned 0x100b8
	[0266.326] GetWindowLongW (hWnd=0x100b8, nIndex=-16) returned -2046820352
	[0266.326] GetWindow (hWnd=0x100b8, uCmd=0x4) returned 0x0
	[0266.326] GetWindow (hWnd=0x100b8, uCmd=0x2) returned 0x10054
	[0266.326] GetWindowLongW (hWnd=0x10054, nIndex=-16) returned -1946157056
	[0266.326] GetWindow (hWnd=0x10054, uCmd=0x4) returned 0x10052
	[0266.326] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0266.326] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0266.326] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0266.326] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0266.326] GetWindow (hWnd=0x10054, uCmd=0x2) returned 0x10052
	[0266.326] GetWindowLongW (hWnd=0x10052, nIndex=-16) returned -1946157056
	[0266.326] GetWindow (hWnd=0x10052, uCmd=0x4) returned 0x1004c
	[0266.326] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0266.327] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0266.327] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x100c8
	[0266.327] GetWindowLongW (hWnd=0x100c8, nIndex=-16) returned -2080374784
	[0266.327] GetWindow (hWnd=0x100c8, uCmd=0x4) returned 0x100c4
	[0266.327] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.327] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.327] GetWindow (hWnd=0x100c8, uCmd=0x2) returned 0x20134
	[0266.327] GetWindowLongW (hWnd=0x20134, nIndex=-16) returned 79691776
	[0266.327] GetWindow (hWnd=0x20134, uCmd=0x4) returned 0x0
	[0266.327] GetWindow (hWnd=0x20134, uCmd=0x2) returned 0x20138
	[0266.327] GetWindowLongW (hWnd=0x20138, nIndex=-16) returned 80674816
	[0266.327] GetWindow (hWnd=0x20138, uCmd=0x4) returned 0x0
	[0266.327] GetWindow (hWnd=0x20138, uCmd=0x2) returned 0x2013a
	[0266.327] GetWindowLongW (hWnd=0x2013a, nIndex=-16) returned 79691776
	[0266.327] GetWindow (hWnd=0x2013a, uCmd=0x4) returned 0x0
	[0266.327] GetWindow (hWnd=0x2013a, uCmd=0x2) returned 0x20118
	[0266.327] GetWindowLongW (hWnd=0x20118, nIndex=-16) returned 79691776
	[0266.328] GetWindow (hWnd=0x20118, uCmd=0x4) returned 0x0
	[0266.328] GetWindow (hWnd=0x20118, uCmd=0x2) returned 0x30028
	[0266.328] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0266.328] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0266.328] GetWindow (hWnd=0x30028, uCmd=0x2) returned 0x2014e
	[0266.328] GetWindowLongW (hWnd=0x2014e, nIndex=-16) returned -1946157056
	[0266.328] GetWindow (hWnd=0x2014e, uCmd=0x4) returned 0x30028
	[0266.328] GetWindowLongW (hWnd=0x30028, nIndex=-16) returned -2080374784
	[0266.328] GetWindow (hWnd=0x30028, uCmd=0x4) returned 0x0
	[0266.328] GetWindow (hWnd=0x2014e, uCmd=0x2) returned 0x20156
	[0266.328] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0266.328] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0266.328] GetWindow (hWnd=0x20156, uCmd=0x2) returned 0x2015a
	[0266.328] GetWindowLongW (hWnd=0x2015a, nIndex=-16) returned -1946157056
	[0266.328] GetWindow (hWnd=0x2015a, uCmd=0x4) returned 0x20156
	[0266.328] GetWindowLongW (hWnd=0x20156, nIndex=-16) returned -2080374784
	[0266.328] GetWindow (hWnd=0x20156, uCmd=0x4) returned 0x0
	[0266.329] GetWindow (hWnd=0x2015a, uCmd=0x2) returned 0x2001a
	[0266.329] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0266.329] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0266.329] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20022
	[0266.329] GetWindowLongW (hWnd=0x20022, nIndex=-16) returned -1946157056
	[0266.329] GetWindow (hWnd=0x20022, uCmd=0x4) returned 0x2001a
	[0266.329] GetWindowLongW (hWnd=0x2001a, nIndex=-16) returned -2080112640
	[0266.329] GetWindow (hWnd=0x2001a, uCmd=0x4) returned 0x0
	[0266.329] GetWindow (hWnd=0x20022, uCmd=0x2) returned 0x20018
	[0266.329] GetWindowLongW (hWnd=0x20018, nIndex=-16) returned 79691776
	[0266.329] GetWindow (hWnd=0x20018, uCmd=0x4) returned 0x0
	[0266.329] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x1012e
	[0266.329] GetWindowLongW (hWnd=0x1012e, nIndex=-16) returned 79691776
	[0266.329] GetWindow (hWnd=0x1012e, uCmd=0x4) returned 0x0
	[0266.329] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10120
	[0266.329] GetWindowLongW (hWnd=0x10120, nIndex=-16) returned 79691776
	[0266.330] GetWindow (hWnd=0x10120, uCmd=0x4) returned 0x0
	[0266.330] GetWindow (hWnd=0x10120, uCmd=0x2) returned 0x1011c
	[0266.330] GetWindowLongW (hWnd=0x1011c, nIndex=-16) returned 79691776
	[0266.330] GetWindow (hWnd=0x1011c, uCmd=0x4) returned 0x0
	[0266.330] GetWindow (hWnd=0x1011c, uCmd=0x2) returned 0x10104
	[0266.330] GetWindowLongW (hWnd=0x10104, nIndex=-16) returned -2080374782
	[0266.330] GetWindow (hWnd=0x10104, uCmd=0x4) returned 0x100c4
	[0266.378] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.378] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.378] GetWindow (hWnd=0x10104, uCmd=0x2) returned 0x10100
	[0266.379] GetWindowLongW (hWnd=0x10100, nIndex=-16) returned 79691776
	[0266.379] GetWindow (hWnd=0x10100, uCmd=0x4) returned 0x0
	[0266.379] GetWindow (hWnd=0x10100, uCmd=0x2) returned 0x100f2
	[0266.379] GetWindowLongW (hWnd=0x100f2, nIndex=-16) returned -2079850496
	[0266.379] GetWindow (hWnd=0x100f2, uCmd=0x4) returned 0x100c4
	[0266.379] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.379] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.379] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x100e8
	[0266.379] GetWindowLongW (hWnd=0x100e8, nIndex=-16) returned -2080374526
	[0266.379] GetWindow (hWnd=0x100e8, uCmd=0x4) returned 0x0
	[0266.379] GetWindow (hWnd=0x100e8, uCmd=0x2) returned 0x100e2
	[0266.379] GetWindowLongW (hWnd=0x100e2, nIndex=-16) returned -2080374781
	[0266.379] GetWindow (hWnd=0x100e2, uCmd=0x4) returned 0x100c4
	[0266.379] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.379] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.380] GetWindow (hWnd=0x100e2, uCmd=0x2) returned 0x200dc
	[0266.380] GetWindowLongW (hWnd=0x200dc, nIndex=-16) returned -2080374782
	[0266.380] GetWindow (hWnd=0x200dc, uCmd=0x4) returned 0x100c4
	[0266.380] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.380] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.380] GetWindow (hWnd=0x200dc, uCmd=0x2) returned 0x100c4
	[0266.380] GetWindowLongW (hWnd=0x100c4, nIndex=-16) returned -2046820352
	[0266.380] GetWindow (hWnd=0x100c4, uCmd=0x4) returned 0x0
	[0266.380] GetWindow (hWnd=0x100c4, uCmd=0x2) returned 0x500ba
	[0266.380] GetWindowLongW (hWnd=0x500ba, nIndex=-16) returned -2038431744
	[0266.380] GetWindow (hWnd=0x500ba, uCmd=0x4) returned 0x0
	[0266.380] GetWindow (hWnd=0x500ba, uCmd=0x2) returned 0x100b0
	[0266.380] GetWindowLongW (hWnd=0x100b0, nIndex=-16) returned 79691776
	[0266.380] GetWindow (hWnd=0x100b0, uCmd=0x4) returned 0x0
	[0266.380] GetWindow (hWnd=0x100b0, uCmd=0x2) returned 0x100ae
	[0266.380] GetWindowLongW (hWnd=0x100ae, nIndex=-16) returned 79691776
	[0266.381] GetWindow (hWnd=0x100ae, uCmd=0x4) returned 0x0
	[0266.381] GetWindow (hWnd=0x100ae, uCmd=0x2) returned 0x100a4
	[0266.381] GetWindowLongW (hWnd=0x100a4, nIndex=-16) returned -2080374783
	[0266.381] GetWindow (hWnd=0x100a4, uCmd=0x4) returned 0x1008c
	[0266.381] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0266.381] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0266.381] GetWindow (hWnd=0x100a4, uCmd=0x2) returned 0x10090
	[0266.381] GetWindowLongW (hWnd=0x10090, nIndex=-16) returned -2080374781
	[0266.381] GetWindow (hWnd=0x10090, uCmd=0x4) returned 0x1008c
	[0266.381] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0266.381] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0266.381] GetWindow (hWnd=0x10090, uCmd=0x2) returned 0x10298
	[0266.381] GetWindowLongW (hWnd=0x10298, nIndex=-16) returned -2080374784
	[0266.381] GetWindow (hWnd=0x10298, uCmd=0x4) returned 0x0
	[0266.381] GetWindow (hWnd=0x10298, uCmd=0x2) returned 0x1029a
	[0266.381] GetWindowLongW (hWnd=0x1029a, nIndex=-16) returned -1946157056
	[0266.382] GetWindow (hWnd=0x1029a, uCmd=0x4) returned 0x10298
	[0266.382] GetWindowLongW (hWnd=0x10298, nIndex=-16) returned -2080374784
	[0266.382] GetWindow (hWnd=0x10298, uCmd=0x4) returned 0x0
	[0266.382] GetWindow (hWnd=0x1029a, uCmd=0x2) returned 0x10294
	[0266.382] GetWindowLongW (hWnd=0x10294, nIndex=-16) returned -2080374784
	[0266.382] GetWindow (hWnd=0x10294, uCmd=0x4) returned 0x0
	[0266.382] GetWindow (hWnd=0x10294, uCmd=0x2) returned 0x10296
	[0266.382] GetWindowLongW (hWnd=0x10296, nIndex=-16) returned -1946157056
	[0266.382] GetWindow (hWnd=0x10296, uCmd=0x4) returned 0x10294
	[0266.382] GetWindowLongW (hWnd=0x10294, nIndex=-16) returned -2080374784
	[0266.382] GetWindow (hWnd=0x10294, uCmd=0x4) returned 0x0
	[0266.382] GetWindow (hWnd=0x10296, uCmd=0x2) returned 0xa0024
	[0266.382] GetWindowLongW (hWnd=0xa0024, nIndex=-16) returned -2080374784
	[0266.382] GetWindow (hWnd=0xa0024, uCmd=0x4) returned 0x0
	[0266.382] GetWindow (hWnd=0xa0024, uCmd=0x2) returned 0x10292
	[0266.382] GetWindowLongW (hWnd=0x10292, nIndex=-16) returned -1946157056
	[0266.383] GetWindow (hWnd=0x10292, uCmd=0x4) returned 0xa0024
	[0266.383] GetWindowLongW (hWnd=0xa0024, nIndex=-16) returned -2080374784
	[0266.383] GetWindow (hWnd=0xa0024, uCmd=0x4) returned 0x0
	[0266.383] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x20264
	[0266.383] GetWindowLongW (hWnd=0x20264, nIndex=-16) returned -2080374526
	[0266.383] GetWindow (hWnd=0x20264, uCmd=0x4) returned 0x0
	[0266.383] GetWindow (hWnd=0x20264, uCmd=0x2) returned 0x10238
	[0266.383] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned -2080374526
	[0266.383] GetWindow (hWnd=0x10238, uCmd=0x4) returned 0x0
	[0266.383] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x10236
	[0266.383] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned -2080374782
	[0266.383] GetWindow (hWnd=0x10236, uCmd=0x4) returned 0x3016a
	[0266.383] SendMessageW (hWnd=0x10236, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.383] GetPropW (hWnd=0x10236, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0266.383] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x10236, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.383] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x1022e
	[0266.383] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned -2080374526
	[0266.383] GetWindow (hWnd=0x1022e, uCmd=0x4) returned 0x0
	[0266.384] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10222
	[0266.384] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned -2080374782
	[0266.384] GetWindow (hWnd=0x10222, uCmd=0x4) returned 0x20164
	[0266.384] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0266.384] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0266.384] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c
	[0266.384] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned -2080374782
	[0266.384] GetWindow (hWnd=0x1021c, uCmd=0x4) returned 0xa016e
	[0266.384] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0266.384] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0266.384] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x3019e
	[0266.384] GetWindowLongW (hWnd=0x3019e, nIndex=-16) returned -2080374526
	[0266.384] GetWindow (hWnd=0x3019e, uCmd=0x4) returned 0x0
	[0266.384] GetWindow (hWnd=0x3019e, uCmd=0x2) returned 0x201b8
	[0266.384] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned -2080374526
	[0266.384] GetWindow (hWnd=0x201b8, uCmd=0x4) returned 0x0
	[0266.385] GetWindow (hWnd=0x201b8, uCmd=0x2) returned 0x201c0
	[0266.385] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned -2080374526
	[0266.385] GetWindow (hWnd=0x201c0, uCmd=0x4) returned 0x0
	[0266.385] GetWindow (hWnd=0x201c0, uCmd=0x2) returned 0x101b0
	[0266.385] GetWindowLongW (hWnd=0x101b0, nIndex=-16) returned -2080374782
	[0266.385] GetWindow (hWnd=0x101b0, uCmd=0x4) returned 0x20164
	[0266.385] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0266.385] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0266.385] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101ac
	[0266.385] GetWindowLongW (hWnd=0x101ac, nIndex=-16) returned -2080374782
	[0266.385] GetWindow (hWnd=0x101ac, uCmd=0x4) returned 0xa016e
	[0266.385] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0266.385] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0266.385] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101aa
	[0266.385] GetWindowLongW (hWnd=0x101aa, nIndex=-16) returned -2080374782
	[0266.385] GetWindow (hWnd=0x101aa, uCmd=0x4) returned 0x3016a
	[0266.385] SendMessageW (hWnd=0x101aa, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.386] GetPropW (hWnd=0x101aa, lpString="AfxOldWndProc423") returned 0x7fefc6af450
	[0266.386] CallWindowProcW (lpPrevWndFunc=0x7fefc6af450, hWnd=0x101aa, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.386] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x20164
	[0266.386] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0266.386] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0266.386] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x20162
	[0266.386] GetWindowLongW (hWnd=0x20162, nIndex=-16) returned -1946157056
	[0266.386] GetWindow (hWnd=0x20162, uCmd=0x4) returned 0x20164
	[0266.386] GetWindowLongW (hWnd=0x20164, nIndex=-16) returned 80674816
	[0266.386] GetWindow (hWnd=0x20164, uCmd=0x4) returned 0x0
	[0266.386] GetWindow (hWnd=0x20162, uCmd=0x2) returned 0x3016a
	[0266.386] SendMessageW (hWnd=0x3016a, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.387] DefFrameProcW (hWnd=0x3016a, hWndMDIClient=0xd015c, uMsg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.387] GetWindow (hWnd=0x3016a, uCmd=0x2) returned 0x20160
	[0266.387] GetWindowLongW (hWnd=0x20160, nIndex=-16) returned -1946157056
	[0266.387] GetWindow (hWnd=0x20160, uCmd=0x4) returned 0x3016a
	[0266.387] SendMessageW (hWnd=0x20160, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.387] GetPropW (hWnd=0x20160, lpString="AfxOldWndProc423") returned 0x77bf6630
	[0266.387] CallWindowProcW (lpPrevWndFunc=0x77bf6630, hWnd=0x20160, Msg=0x36d, wParam=0x10, lParam=0x0) returned 0x0
	[0266.387] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xa016e
	[0266.387] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0266.387] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0266.387] GetWindow (hWnd=0xa016e, uCmd=0x2) returned 0x20166
	[0266.387] GetWindowLongW (hWnd=0x20166, nIndex=-16) returned -1946157056
	[0266.387] GetWindow (hWnd=0x20166, uCmd=0x4) returned 0xa016e
	[0266.387] GetWindowLongW (hWnd=0xa016e, nIndex=-16) returned 80674816
	[0266.388] GetWindow (hWnd=0xa016e, uCmd=0x4) returned 0x0
	[0266.388] GetWindow (hWnd=0x20166, uCmd=0x2) returned 0x1008c
	[0266.388] GetWindowLongW (hWnd=0x1008c, nIndex=-16) returned -2071855104
	[0266.388] GetWindow (hWnd=0x1008c, uCmd=0x4) returned 0x0
	[0266.388] GetWindow (hWnd=0x1008c, uCmd=0x2) returned 0x1006e
	[0266.388] GetWindowLongW (hWnd=0x1006e, nIndex=-16) returned -2080374784
	[0266.388] GetWindow (hWnd=0x1006e, uCmd=0x4) returned 0x0
	[0266.388] GetWindow (hWnd=0x1006e, uCmd=0x2) returned 0x10066
	[0266.388] GetWindowLongW (hWnd=0x10066, nIndex=-16) returned -1006632960
	[0266.388] GetParent (hWnd=0x10066) returned 0x0
	[0266.388] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x40044
	[0266.388] GetWindowLongW (hWnd=0x40044, nIndex=-16) returned -2080374784
	[0266.388] GetWindow (hWnd=0x40044, uCmd=0x4) returned 0x0
	[0266.388] GetWindow (hWnd=0x40044, uCmd=0x2) returned 0x1005a
	[0266.388] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0266.388] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0266.388] GetWindow (hWnd=0x1005a, uCmd=0x2) returned 0x1005c
	[0266.388] GetWindowLongW (hWnd=0x1005c, nIndex=-16) returned -1946157056
	[0266.388] GetWindow (hWnd=0x1005c, uCmd=0x4) returned 0x1005a
	[0266.389] GetWindowLongW (hWnd=0x1005a, nIndex=-16) returned 79691776
	[0266.389] GetWindow (hWnd=0x1005a, uCmd=0x4) returned 0x0
	[0266.389] GetWindow (hWnd=0x1005c, uCmd=0x2) returned 0x20048
	[0266.389] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0266.389] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0266.389] GetWindow (hWnd=0x20048, uCmd=0x2) returned 0x1004a
	[0266.389] GetWindowLongW (hWnd=0x1004a, nIndex=-16) returned -1946157056
	[0266.389] GetWindow (hWnd=0x1004a, uCmd=0x4) returned 0x20048
	[0266.389] GetWindowLongW (hWnd=0x20048, nIndex=-16) returned 80674816
	[0266.389] GetWindow (hWnd=0x20048, uCmd=0x4) returned 0x0
	[0266.389] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x10046
	[0266.389] GetWindowLongW (hWnd=0x10046, nIndex=-16) returned -1543503872
	[0266.389] GetWindow (hWnd=0x10046, uCmd=0x4) returned 0x0
	[0266.389] GetWindow (hWnd=0x10046, uCmd=0x2) returned 0x1004e
	[0266.389] GetWindowLongW (hWnd=0x1004e, nIndex=-16) returned -1946157056
	[0266.389] GetWindow (hWnd=0x1004e, uCmd=0x4) returned 0x1004c
	[0266.389] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0266.389] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0266.389] GetWindow (hWnd=0x1004e, uCmd=0x2) returned 0x1004c
	[0266.389] GetWindowLongW (hWnd=0x1004c, nIndex=-16) returned 213909504
	[0266.389] GetWindow (hWnd=0x1004c, uCmd=0x4) returned 0x0
	[0266.389] GetWindow (hWnd=0x1004c, uCmd=0x2) returned 0x1012c
	[0266.389] GetWindowLongW (hWnd=0x1012c, nIndex=-16) returned -1946157056
	[0266.389] GetWindow (hWnd=0x1012c, uCmd=0x4) returned 0x10064
	[0266.389] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0266.390] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0266.390] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0266.390] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0266.390] GetWindow (hWnd=0x1012c, uCmd=0x2) returned 0x10064
	[0266.390] GetWindowLongW (hWnd=0x10064, nIndex=-16) returned -1946157056
	[0266.390] GetWindow (hWnd=0x10064, uCmd=0x4) returned 0x2007e
	[0266.390] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0266.390] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0266.390] GetWindow (hWnd=0x10064, uCmd=0x2) returned 0x2007e
	[0266.390] GetWindowLongW (hWnd=0x2007e, nIndex=-16) returned -1778384896
	[0266.390] GetWindow (hWnd=0x2007e, uCmd=0x4) returned 0x0
	[0266.390] GetWindow (hWnd=0x2007e, uCmd=0x2) returned 0x0
	[0266.737] CoGetContextToken (in: pToken=0x2194e0 | out: pToken=0x2194e0) returned 0x0
	[0266.752] CoGetContextToken (in: pToken=0x219470 | out: pToken=0x219470) returned 0x0
	[0266.752] CObjectContext::QueryInterface () returned 0x0
	[0266.752] CObjectContext::GetCurrentApartmentType () returned 0x0
	[0266.752] Release () returned 0x0
	[0266.752] CoGetObjectContext (in: riid=0x7fef300d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3d3cc88 | out: ppv=0x3d3cc88*=0x40f6c0) returned 0x0
	[0266.759] CoGetContextToken (in: pToken=0x2194b0 | out: pToken=0x2194b0) returned 0x0
	[0266.759] CoGetContextToken (in: pToken=0x219a90 | out: pToken=0x219a90) returned 0x0
	[0266.759] CoGetContextToken (in: pToken=0x2199d0 | out: pToken=0x2199d0) returned 0x0
	[0266.760] CoGetContextToken (in: pToken=0x219a90 | out: pToken=0x219a90) returned 0x0
	[0266.760] CoGetContextToken (in: pToken=0x2199d0 | out: pToken=0x2199d0) returned 0x0

Thread:
	id = 113
	os_tid = 0x658


Thread:
	id = 124
	os_tid = 0x130


Thread:
	id = 127
	os_tid = 0x7f0


Thread:
	id = 131
	os_tid = 0x398


Thread:
	id = 132
	os_tid = 0x6c8


Thread:
	id = 137
	os_tid = 0x6a0


Thread:
	id = 140
	os_tid = 0x6e8


Thread:
	id = 145
	os_tid = 0x44c

	[0248.291] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0

Thread:
	id = 149
	os_tid = 0x69c


Process:
	id = "24"
	image_name = "dllhost.exe"
	filename = "c:\\windows\\syswow64\\dllhost.exe"
	page_root = "0x8d82000"
	os_pid = "0x564"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "14"
	os_parent_pid = "0x508"
	cmd_line = "C:\\Windows\\SysWOW64\\DllHost.exe /Processid:{3AD05575-8857-4850-9277-11B85BDB8E09}"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e35f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 115
	os_tid = 0xb0


Thread:
	id = 116
	os_tid = 0x128


Thread:
	id = 117
	os_tid = 0x558


Thread:
	id = 118
	os_tid = 0x780


Thread:
	id = 119
	os_tid = 0x7c8


Thread:
	id = 120
	os_tid = 0x708


Thread:
	id = 121
	os_tid = 0x51c


Thread:
	id = 122
	os_tid = 0x754


Thread:
	id = 135
	os_tid = 0x360


Thread:
	id = 136
	os_tid = 0x394